fix: hardening fixes from full-codebase review#25

Open

KristianP26 wants to merge 21 commits into

DavidHruby1:mainfrom

KristianP26:fix/codebase-review-fixes

Commits on Jun 12, 2026

refactor(rewrite): read stt_language directly from config
KristianP26
committed
docs(stt): explain why no-speech skips the fallback provider
KristianP26
committed
fix(rewrite): raise groq completion ceiling for long dictations
KristianP26
committed
perf(injector): send text as a single batched SendInput call
KristianP26
committed
fix(main): release finished worker threads
KristianP26
committed
fix(main): discard recording when disabled mid-session
KristianP26
committed
fix(main): skip startup save when .env adds nothing
KristianP26
committed
fix(config): read .env from the exe directory in frozen builds
KristianP26
committed
fix(config): store custom headers via DPAPI instead of plaintext ini
KristianP26
committed
fix(settings): validate config on every accept path
KristianP26
committed
fix(settings): replace focus-reveal API keys with explicit show toggle
KristianP26
committed
fix(settings): run RMS calibration off the UI thread
KristianP26
committed
docs: update implementation notes for hardening fixes
KristianP26
committed
chore(settings): drop orphaned section header
KristianP26
committed
fix(main): cancel in-flight processing when disabled
KristianP26
committed
feat(config): detect stale plaintext secrets in settings.ini
KristianP26
committed
fix(main): purge lingering plaintext secrets at startup
KristianP26
committed
fix(settings): drop late calibration results on dialog close
KristianP26
committed
fix(settings): follow palette text color for reveal icon
KristianP26
committed
docs(injector): note partial SendInput semantics
KristianP26
committed
test(settings): make calibration test deterministic
KristianP26
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix: hardening fixes from full-codebase review#25

fix: hardening fixes from full-codebase review#25
KristianP26 wants to merge 21 commits into
DavidHruby1:mainfrom
KristianP26:fix/codebase-review-fixes

Commits on Jun 12, 2026

refactor(rewrite): read stt_language directly from config

docs(stt): explain why no-speech skips the fallback provider

fix(rewrite): raise groq completion ceiling for long dictations

perf(injector): send text as a single batched SendInput call

fix(main): release finished worker threads

fix(main): discard recording when disabled mid-session

fix(main): skip startup save when .env adds nothing

fix(config): read .env from the exe directory in frozen builds

fix(config): store custom headers via DPAPI instead of plaintext ini

fix(settings): validate config on every accept path

fix(settings): replace focus-reveal API keys with explicit show toggle

fix(settings): run RMS calibration off the UI thread

docs: update implementation notes for hardening fixes

chore(settings): drop orphaned section header

fix(main): cancel in-flight processing when disabled

feat(config): detect stale plaintext secrets in settings.ini

fix(main): purge lingering plaintext secrets at startup

fix(settings): drop late calibration results on dialog close

fix(settings): follow palette text color for reveal icon

docs(injector): note partial SendInput semantics

test(settings): make calibration test deterministic