Extraction decisions
Retrospective, 28 October 2026. This records choices made for the initial source beta. Provenance identifies the original files and commit.
| Choice | Reason and tradeoff | Source |
|---|---|---|
| Private runtime outside the checkout | CLI setup copies the extension to an owned runtime directory and writes local configuration with private permissions. A source checkout stays suitable for sharing. Changing keys or mode requires rerunning setup and reloading the unpacked extension. | CLI: paths, write_private, setup, doctor; configuration |
| Explicit provider and account selection | Own-key mode selects direct Deepgram and Groq/Anthropic requests before consulting hosted identity. A saved hosted session therefore preserves the user's explicit local choice. Audio and briefing input still reach the selected external providers; credentials, account access and usage belong to that user. Hosted mode remains an explicit alternative. | runtime; background: getToken, deepgramBytes, llm; models |
| One initiating tab, window and top frame | Background session mutations and artifact work verify Chrome's sender identity against the initiating tab/window. Same-tab navigation resumes capture through session storage. Screenshots require that tab to be active before and after capture, and discard frames across tab changes. This bounds capture to one tab; moving or closing it ends recording. | background: owns, captureOwner, captureShot, navigation/tab listeners |
| Explicit microphone readiness and cancellation | The existing pill shows microphone startup with a cancel action, then enables Stop and capture sensors after the recorder starts. Failure returns to microphone setup. Background rejects pending Stop and stale-session cancellation; offscreen session IDs/generations retire delayed streams while preserving a restarted recorder. Startup can take permission/device time, so its pending phase is separate from recorded audio. | content: showMicPending, audioStateChanged; background: startAudio, stopSession; offscreen: start, stop; regressions |
| Extension-owned download and protected briefing UI | Offscreen holds the capture Blob and background starts Chrome's download. Content receives an opaque retry receipt. The overlay uses a closed shadow root with selection disabled; Copy uses the clipboard API. This adds the downloads permission and a fifteen-minute retry window. Browser download/clipboard failures remain recoverable local states. | private downloads; offscreen; background: localCaptureDownload; content: packageBundle, doCopy; manifest |
| Separate source proof from live acceptance | The Chromium proof uses a fake microphone and mocked providers, then checks readiness/failure/cancellation, a real recorder chunk, navigation, privacy boundaries, download and unpack. CI includes this browser job, the nine offline Python and sixteen Node tests, and the website build. Physical-device permissions and selected-account authentication remain documented acceptance checks. | browser proof; offline tests; CI; release scope |
| Preserve the active website and trace its subset | The visible page retains its authored HTML/CSS demonstrations. Historical copied-engine research/lab code, its dependent Library rows and unused reference demos/media stay in the private original while their redistribution provenance is unresolved. The Library retains fifteen token/spring/UI specimens and local export. The source beta therefore covers a useful working subset of the full Dis Dat estate. | website; main demonstration; Library; export scope; provenance |
The original architecture notes in original preserve the product's earlier implementation work and proposals. The choices above describe this extraction.