Fix packaging, release versioning and the untracked test suite

[SecretLUL]

The application code was in good shape — the problems were all at the boundary between the repo and everything that leaves it. As shipped, neither a fresh clone nor any release artifact worked for anyone else.

Packaging

The released Windows binary could not start. ui/icons.py imports Pillow at module level, but PIL was listed in UNNEEDED_PACKAGES (--exclude-module PIL) and deleted again by prune_unneeded(). Verified against the previously built dist/: zero PIL files. Every download failed with No module named 'PIL'.

• Removed PIL from the exclude list and added Pillow to requirements.txt — a fresh clone could not start the app either.
• Added verify_bundle(): the build now fails if a module the app imports at startup is missing from the bundle, rather than surfacing on a user's desktop.
• ui/app.py now falls back to plain pyaudio when pyaudiowpatch is absent, matching what capture.py already did. The Linux and macOS artifacts could not start without this, since CI installs plain PyAudio there.
• requirements.txt split by platform: PyAudioWPatch on Windows, PyAudio elsewhere.

Verified on the real artifact — the built .exe starts and has Pillow's native extensions loaded at runtime:

_imaging.cp312-win_amd64.pyd
_imagingft.cp312-win_amd64.pyd
_portaudiowpatch.cp312-win_amd64.pyd
libsndfile_x64.dll

Release versioning

Version was hardcoded as v1.0.0 in build_release.py and again in the Linux and macOS CI steps, while the release notes linked ${{ github.ref_name }} filenames. Tagging v1.1.0 produced assets named v1.0.0 and download links that 404.

• resolve_version() resolves once, in order: CLI argument → RELEASE_VERSION → git tag → v0.0.0-dev.
• build_release.py is now cross-platform and derives the archive name and format per OS, so all three CI jobs call the same script instead of duplicating naming rules.
• A version job resolves the tag once; every job and the release notes read that single value.
• CI runs the test suite before building, and publishing is gated on github.ref_type == 'tag'.

macOS assets were labelled macos-universal, but PyInstaller builds host-architecture-only unless target_arch=universal2 is set — the arm64 runner produced an arm64-only binary advertised to Intel users. The slug now follows platform.machine(): macos-arm64 or macos-x64.

platform	machine	archive
darwin	arm64	AudioTranscriber-v1.4.2-macos-arm64.zip
darwin	x86_64	AudioTranscriber-v1.4.2-macos-x64.zip
win32	AMD64	AudioTranscriber-v1.4.2-windows-x64.zip
linux	x86_64	AudioTranscriber-v1.4.2-linux-x64.tar.gz

Test suite

.gitignore contained tests/ and run_tests.py, so the entire suite was excluded from the repository despite the README documenting python run_tests.py and "128+ unit tests". git ls-files confirmed not a single test file was tracked. Both entries removed and the suite committed.

While fixing the unused OUT_DIR import, 13 tests failed and exposed a second issue: they patched pipeline.OUT_DIR, which _process never reads — the output path comes from Settings.get_output_dir(). The patch was always a no-op and every finalizer test wrote into the real output/ directory. Tests now steer it via settings.output_dir.

Correctness

• FileFinalizer.run_async called paths.safe_output_name() while pipeline.py never imported paths → NameError on the default-name path. Latent because the GUI and every test passed base_name explicitly; a regression test now covers it.
• Removed a duplicated write of the transcript file.
• ElevenLabsBackend.cancel() only set a flag nothing read; it now closes the live response, so a cancelled upload no longer sits on its 900 s timeout.
• seg_end is reset when flushing an ElevenLabs segment, so a following segment cannot inherit the previous end time.
• loader.py no longer swallows its own "no sample data" error into the FFmpeg fallback, which reported a misleading "FFmpeg not found".
• Slider honours state="disabled" — _enabled was assigned but never initialised or checked.
• app.py no longer binds two different buttons to self.save_btn.
• Redacted the (already revoked) example API key in legacy/settings.v1.json.

Verification

• 129 tests pass (128 existing + 1 regression), pyflakes clean.
• Release build runs end to end and the resulting binary launches with all native dependencies loaded.
• Version resolution verified in all four modes; workflow YAML parses and job graph checked.

Not verified: the Linux and macOS builds cannot be exercised from Windows — the import fallback and CI changes are correct by inspection, but the first tag push will be the real test.

🤖 Generated with Claude Code