Build standalone Oatmeal desktop apps with local AI and provider choice

[VedSoni-dev]

What changes

Oatmeal previously required a browser recorder and a coding agent to turn transcripts into notes. This adds a standalone Electron meeting notebook for macOS and Windows: searchable local meetings, automatic note saves, microphone/system audio capture, local Whisper transcription, downloadable local text models, summaries, meeting questions and Markdown import/export.

Provider settings support OpenAI, Claude, Grok and OpenRouter keys, Ollama, and browser sign-in through the official Codex/Claude runtimes. Publik adds explicit setup consent, tier selection, isolated install credentials, balance/account linking and recoverable 402 messages. Local models remain the default. Raw audio stays local; cloud requests require consent.

Electron Builder and CI produce Apple Silicon/Intel Mac installers and Windows NSIS installers. Tagged release builds require signing credentials and create draft releases. Existing browser/MCP workflows remain available separately.

Validation

• 16 passing core tests, including storage races, recovery, credential boundaries, provider protocols and Publik flows.
• 3 passing Electron integration tests on Apple Silicon: notebook persistence/isolation; mocked Publik provisioning, balance and account recovery; actual Whisper transcription of synthetic speech through AudioWorklet.
• Real local Qwen inference verified; local output renders original meeting excerpts to prevent invented facts from small models.
• Unsigned Apple Silicon DMG built and checksum verified; packaged app launched successfully.
• npm audit: zero reported vulnerabilities.

Release limitations

Publik's separate oatmeal-vedsoni-dev listing is live and its public app token is registered and packaged. Real install provisioning returned 201; the live chat test returned 402 until that test installation is linked and has sufficient credit. Personal-key/local options work independently. Subscription runtimes start, but real account sign-in/generation remains unverified. Windows/Intel hardware audio, long calls and signing/notarization need validation before a public release. Hosted Mac/Windows CI was triggered, but GitHub blocked jobs before execution due to an account restriction. No hosted build result is available. This PR intentionally remains a draft.