chore: bump version to 2.0.20 [skip ci]

The state callback in main_headless.py wrote events to stdout
synchronously, so an EINVAL on the Tauri sidecar pipe (Windows) bubbled
up through _set_state and tore down engine init and reload_engine. That
turned PUT /api/config into a "Failed to fetch" for the user. The print
is now pipe-safe and api_server isolates the chained callback so a
future misbehaving listener cannot break the engine state machine.

Settings also now persists remote.email on login and shows a "Logged in
as <email>" indicator with a Log out button when an auth_token is
present, instead of leaving the email/password fields blank on reload.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.gitea/workflows/build-app-macos.yml

@@ -39,27 +39,7 @@ jobs:
       - name: Install npm dependencies
         run: npm ci
 
-      - name: Setup code signing
-        env:
-          APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }}
-          APPLE_API_KEY_CONTENT: ${{ secrets.APPLE_API_KEY_CONTENT }}
-        run: |
-          if [ -n "${APPLE_API_KEY_CONTENT}" ]; then
-            echo "Setting up notarization API key..."
-            mkdir -p ~/private_keys
-            echo "${APPLE_API_KEY_CONTENT}" > ~/private_keys/AuthKey_${APPLE_API_KEY}.p8
-          else
-            echo "No signing secrets configured, skipping code signing setup"
-          fi
-
       - name: Build Tauri app
-        env:
-          APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
-          APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
-          APPLE_SIGNING_IDENTITY: ${{ secrets.APPLE_SIGNING_IDENTITY }}
-          APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }}
-          APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}
-          APPLE_API_KEY_PATH: ~/private_keys/AuthKey_${{ secrets.APPLE_API_KEY }}.p8
         run: npm run tauri build
 
       - name: Upload to release
@@ -111,6 +91,3 @@ jobs:
               "${REPO_API}/releases/${RELEASE_ID}/assets?name=${encoded_name}")
             echo "Upload response: HTTP ${HTTP_CODE}"
           done
-
-      - name: Cleanup signing artifacts
-        run: rm -rf ~/private_keys

backend/api_server.py

@@ -73,8 +73,15 @@ class APIServer:
         original_state_cb = self.controller.on_state_changed
 
         def on_state_changed(state: str, message: str):
+            # Isolate the upstream callback so a failure there (e.g. a
+            # broken stdout pipe in main_headless) cannot propagate into
+            # _set_state and tear down engine init / reload_engine /
+            # apply_settings request handling.
             if original_state_cb:
-                original_state_cb(state, message)
+                try:
+                    original_state_cb(state, message)
+                except Exception:
+                    pass
             self._broadcast_control({"type": "state_changed", "state": state, "message": message})
 
         self.controller.on_state_changed = on_state_changed
@@ -212,7 +219,11 @@ class APIServer:
 
         @app.put("/api/config")
         async def update_config(update: ConfigUpdate):
-            engine_reloaded, message = ctrl.apply_settings(update.settings)
+            import asyncio
+            loop = asyncio.get_event_loop()
+            engine_reloaded, message = await loop.run_in_executor(
+                None, ctrl.apply_settings, update.settings
+            )
             return {
                 "status": "ok",
                 "message": message,
@@ -269,6 +280,7 @@ class APIServer:
                     data = resp.json()
                     ctrl.config.set('remote.auth_token', data.get('token', ''))
                     ctrl.config.set('remote.server_url', req.server_url)
+                    ctrl.config.set('remote.email', req.email)
                     return {"status": "ok", "token": data.get('token', '')}
                 else:
                     raise HTTPException(status_code=resp.status_code, detail=resp.text)

backend/app_controller.py

@@ -608,8 +608,17 @@ class AppController:
         Returns (engine_reload_needed, message).
         """
         if new_config:
-            for key, value in new_config.items():
+            # Flatten nested dicts into dot-notation keys so we merge
-                self.config.set(key, value)
+            # individual values instead of replacing entire sections
+            # (e.g. remote.mode instead of overwriting all of remote)
+            def _flatten(d, prefix=""):
+                for k, v in d.items():
+                    full_key = f"{prefix}{k}" if not prefix else f"{prefix}.{k}"
+                    if isinstance(v, dict):
+                        _flatten(v, full_key)
+                    else:
+                        self.config.set(full_key, v)
+            _flatten(new_config)
 
         # Update web server display settings
         if self.web_server:

backend/main_headless.py

@@ -75,10 +75,16 @@ def main():
         # Create controller and initialize
         controller = AppController(config=config)
 
-        # Wire a state callback that prints the ready event
+        # Wire a state callback that prints state events for the parent
+        # process to read. Stdout writes can fail with EINVAL on Windows
+        # when the parent stops reading the sidecar pipe; swallow those
+        # so the engine state machine isn't taken down by a logging path.
         def on_state_changed(state, message):
             event = {"event": "state", "state": state, "message": message}
-            print(json.dumps(event), flush=True)
+            try:
+                print(json.dumps(event), flush=True)
+            except (OSError, ValueError):
+                pass
 
         controller.on_state_changed = on_state_changed
 

client/deepgram_transcription.py

@@ -320,9 +320,13 @@ class DeepgramTranscriptionEngine:
     def _build_ws_url_and_headers(self):
         """Return ``(url, headers)`` depending on the current mode."""
         if self.mode == "managed":
-            # Ensure the server URL uses wss:// and append the path
+            # Convert HTTP(S) URLs to WS(S) for WebSocket connection
             url = self.server_url.rstrip("/")
-            if not url.startswith("ws://") and not url.startswith("wss://"):
+            if url.startswith("https://"):
+                url = "wss://" + url[len("https://"):]
+            elif url.startswith("http://"):
+                url = "ws://" + url[len("http://"):]
+            elif not url.startswith("ws://") and not url.startswith("wss://"):
                 url = f"wss://{url}"
             url = f"{url}/ws/transcribe"
             return url, {}

config/default_config.yaml

@@ -72,6 +72,7 @@ remote:
   mode: byok  # local | managed | byok
   server_url: "https://transcribe.shadowdao.com"  # Proxy server URL for managed mode
   auth_token: ""  # JWT stored after login (managed mode)
+  email: ""  # Email of the logged-in managed-mode account (for UI display)
   byok_api_key: ""  # Deepgram API key for BYOK mode
   deepgram_model: nova-2  # Deepgram model to use
   language: en-US  # Language code

package.json

@@ -1,7 +1,7 @@
 {
   "name": "local-transcription",
   "private": true,
-  "version": "2.0.17",
+  "version": "2.0.20",
   "type": "module",
   "scripts": {
     "dev": "vite dev",

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "local-transcription"
-version = "1.0.11"
+version = "1.0.14"
 description = "A standalone desktop application for real-time speech-to-text transcription using Whisper models"
 readme = "README.md"
 requires-python = ">=3.9"

src-tauri/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "local-transcription"
-version = "2.0.17"
+version = "2.0.20"
 description = "Real-time speech-to-text transcription for streamers"
 authors = ["Local Transcription Contributors"]
 edition = "2021"

src-tauri/tauri.conf.json

@@ -1,6 +1,6 @@
 {
   "productName": "Local Transcription",
-  "version": "2.0.17",
+  "version": "2.0.20",
   "identifier": "net.anhonesthost.local-transcription",
   "build": {
     "frontendDist": "../dist",

src/lib/components/Settings.svelte

@@ -44,9 +44,13 @@
   let byokApiKey = $state("");
   let managedEmail = $state("");
   let managedPassword = $state("");
+  let managedLoggedIn = $state(false);
   let autoCheckUpdates = $state(true);
 
   let isCloudMode = $derived(remoteMode === "managed" || remoteMode === "byok");
+  let isCloudOnly = $derived(
+    computeDevices.some(d => d.id === "cloud")
+  );
 
   // Room creation / join state
   let shareCode = $state("");
@@ -128,6 +132,8 @@
     remoteMode = cfg.remote.mode;
     remoteServerUrl = cfg.remote.server_url;
     byokApiKey = cfg.remote.byok_api_key ?? "";
+    managedEmail = cfg.remote.email ?? "";
+    managedLoggedIn = !!(cfg.remote.auth_token && cfg.remote.email);
     autoCheckUpdates = cfg.updates.auto_check;
   });
 
@@ -254,15 +260,37 @@
 
   const MANAGED_SERVER_URL = "https://transcribe.shadowdao.com";
 
+  let loginMessage = $state("");
+
   async function handleManagedLogin() {
+    loginMessage = "";
     try {
       await backendStore.apiPost("/api/login", {
         email: managedEmail,
         password: managedPassword,
         server_url: remoteServerUrl || MANAGED_SERVER_URL,
       });
+      loginMessage = "Logged in successfully!";
+      managedPassword = "";
+      managedLoggedIn = true;
+      await configStore.fetchConfig();
     } catch (err) {
       console.error("Login failed:", err);
+      loginMessage = "Login failed. Check your email and password.";
+    }
+  }
+
+  async function handleManagedLogout() {
+    try {
+      await configStore.updateConfig({
+        remote: { auth_token: "", email: "" },
+      });
+      managedLoggedIn = false;
+      managedPassword = "";
+      loginMessage = "";
+    } catch (err) {
+      console.error("Logout failed:", err);
+      loginMessage = `Error: ${err}`;
     }
   }
 
@@ -453,7 +481,7 @@
             />
             Managed Service
           </label>
-          {#if !backendStore.isCloudOnly}
+          {#if !isCloudOnly}
           <label>
             <input
               type="radio"
@@ -481,29 +509,44 @@
         {/if}
         {#if remoteMode === "managed"}
           <div class="managed-auth">
-            <div class="field">
+            {#if managedLoggedIn}
-              <label for="managed-email">Email</label>
+              <p style="font-size: 13px; margin: 0 0 8px;">
-              <input
+                <span style="color: var(--accent-green, #4CAF50);">✓ Logged in</span>
-                id="managed-email"
+                as <strong>{managedEmail}</strong>
-                type="email"
+              </p>
-                bind:value={managedEmail}
+              <div class="auth-buttons">
-                placeholder="email@example.com"
+                <button onclick={handleManagedLogout}>Log out</button>
-              />
+              </div>
-            </div>
+            {:else}
-            <div class="field">
+              <div class="field">
-              <label for="managed-password">Password</label>
+                <label for="managed-email">Email</label>
-              <input
+                <input
-                id="managed-password"
+                  id="managed-email"
-                type="password"
+                  type="email"
-                bind:value={managedPassword}
+                  bind:value={managedEmail}
-              />
+                  placeholder="email@example.com"
-            </div>
+                />
-            <div class="auth-buttons">
+              </div>
-              <button onclick={handleManagedLogin}>Login</button>
+              <div class="field">
-            </div>
+                <label for="managed-password">Password</label>
-            <p style="font-size: 11px; color: var(--text-muted); margin-top: 8px;">
+                <input
-              Don't have an account? <a href="https://transcribe.shadowdao.com/register.html" target="_blank" rel="noopener" style="color: var(--accent-blue);">Sign up here</a>
+                  id="managed-password"
-            </p>
+                  type="password"
+                  bind:value={managedPassword}
+                />
+              </div>
+              <div class="auth-buttons">
+                <button onclick={handleManagedLogin}>Login</button>
+              </div>
+              <p style="font-size: 11px; color: var(--text-muted); margin-top: 8px;">
+                Don't have an account? <a href="https://transcribe.shadowdao.com/register.html" target="_blank" rel="noopener" style="color: var(--accent-blue);">Sign up here</a>
+              </p>
+            {/if}
+            {#if loginMessage}
+              <p style="font-size: 12px; margin-top: 6px; color: {loginMessage.startsWith('Logged') ? 'var(--accent-green, #4CAF50)' : 'var(--accent-red, #f44336)'};">
+                {loginMessage}
+              </p>
+            {/if}
           </div>
         {/if}
       </section>

src/lib/stores/config.svelte.ts

@@ -65,6 +65,7 @@ export interface AppConfig {
     mode: string;
     server_url: string;
     auth_token: string;
+    email: string;
     byok_api_key: string;
     deepgram_model: string;
     language: string;
@@ -131,6 +132,7 @@ function getDefaultConfig(): AppConfig {
       mode: "byok",
       server_url: "",
       auth_token: "",
+      email: "",
       byok_api_key: "",
       deepgram_model: "nova-2",
       language: "en-US",

version.py

@@ -1,7 +1,7 @@
 """Version information for Local Transcription."""
 
-__version__ = "2.0.17"
+__version__ = "2.0.20"
-__version_info__ = (2, 0, 17)
+__version_info__ = (2, 0, 20)
 
 # Version history:
 # 1.4.0 - Auto-update feature: