Vite/Bun split + native macOS app (Tauri), CI/CD, and public download

.github/workflows/build-macos-app.yml

@@ -0,0 +1,70 @@
+name: Build macOS App
+
+on:
+  push:
+    tags: ["v*.*.*"]
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+jobs:
+  build:
+    runs-on: macos-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: pnpm/action-setup@v4
+        with:
+          version: 10
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: pnpm
+          cache-dependency-path: pnpm-lock.yaml
+
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - uses: dtolnay/rust-toolchain@stable
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      # Runs beforeBuildCommand internally (builds the Vite client, then
+      # scripts/prepare-server-bundle.sh stages the backend) before
+      # compiling and bundling the Rust shell -- one command covers the
+      # whole pipeline, see client/src-tauri/tauri.conf.json.
+      - name: Build the Tauri app
+        working-directory: client
+        run: pnpm exec tauri build
+
+      - name: Zip the .app bundle
+        working-directory: client/src-tauri/target/release/bundle/macos
+        run: ditto -c -k --sequesterRsrc --keepParent "AI Video Editor.app" "AI-Video-Editor-macos-arm64.app.zip"
+
+      # Uploaded on every run (including workflow_dispatch) so the build
+      # can be verified end-to-end -- downloaded from the run's own
+      # artifacts -- before this workflow is ever allowed to touch a real
+      # public release.
+      - name: Upload build artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: macos-app
+          path: |
+            client/src-tauri/target/release/bundle/macos/AI-Video-Editor-macos-arm64.app.zip
+            client/src-tauri/target/release/bundle/dmg/*.dmg
+          if-no-files-found: error
+
+      # Only attaches to a public GitHub Release when this run was
+      # actually triggered by a version tag push -- a manual
+      # workflow_dispatch run never touches the public releases page.
+      - name: Attach to release
+        if: startsWith(github.ref, 'refs/tags/')
+        uses: softprops/action-gh-release@v2
+        with:
+          files: |
+            client/src-tauri/target/release/bundle/macos/AI-Video-Editor-macos-arm64.app.zip
+            client/src-tauri/target/release/bundle/dmg/*.dmg

.github/workflows/ci.yml

@@ -9,9 +9,6 @@ on:
 jobs:
   lint-and-build:
     runs-on: ubuntu-latest
-    defaults:
-      run:
-        working-directory: client
     steps:
       - uses: actions/checkout@v4
 
@@ -23,13 +20,18 @@ jobs:
         with:
           node-version: 20
           cache: pnpm
-          cache-dependency-path: client/pnpm-lock.yaml
+          cache-dependency-path: pnpm-lock.yaml
+
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
 
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
-      - name: Generate Prisma client
-        run: pnpm exec prisma generate
+      - name: Generate Prisma client (server)
+        working-directory: server
+        run: bunx prisma generate
 
       - name: Lint
         run: pnpm run lint
@@ -40,9 +42,9 @@ jobs:
       - name: Build
         run: pnpm run build
         env:
-          # Not required anymore (lib/ai/{transcribe,filler-words}.ts now
-          # construct their OpenAI client lazily on first call, not at
-          # module load, so `next build` succeeds even with this unset) --
-          # kept as defense-in-depth against that regressing back to eager
-          # construction. Not a real secret, no API calls happen during build.
+          # Not required for the build itself (lib/ai/{transcribe,filler-words}.ts
+          # construct their OpenAI client lazily, only on first real call --
+          # nothing at build time imports/executes that code) -- kept as
+          # defense-in-depth in case that ever regresses. Not a real secret,
+          # no API calls happen during build.
           OPENAI_API_KEY: dummy-key-for-ci-build-only

.gitignore

@@ -0,0 +1,22 @@
+# dependencies
+node_modules
+
+# misc
+.DS_Store
+*.pem
+
+# debug
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+.pnpm-debug.log*
+
+# env files (can opt-in for committing if needed)
+.env*
+!.env.example
+
+# typescript
+*.tsbuildinfo
+
+# staged Tauri backend bundle (built by scripts/prepare-server-bundle.sh)
+/server-bundle

CONTRIBUTING.md

@@ -8,30 +8,32 @@ issues for bugs and ideas.
 ## Running it locally
 
 On macOS, `./scripts/setup-mac.sh` handles all of this for you (Node/pnpm/
-FFmpeg via Homebrew, `pnpm install`, `prisma generate`, and `.env`) --
+Bun/FFmpeg via Homebrew, `pnpm install`, `prisma generate`, and `.env`) --
 see the README's "macOS quick start". Otherwise, manually:
 
 ```bash
-cd client
-pnpm install
-cp .env.example .env   # then fill in OPENAI_API_KEY
-pnpm exec prisma generate
-pnpm run dev
+pnpm install                  # installs deps for client + server
+cd server
+cp .env.example .env          # then fill in OPENAI_API_KEY
+bunx prisma generate
+cd ..
+pnpm run dev                  # runs the Vite client and Bun backend together
 ```
 
-Open [http://localhost:3000](http://localhost:3000). See
-[`.env.example`](./client/.env.example) for what each variable does.
+Open [http://localhost:5173](http://localhost:5173). See
+[`server/.env.example`](./server/.env.example) for what each variable
+does.
 
-You'll also need [FFmpeg](https://ffmpeg.org/download.html) on your
-machine for transcript editing and export to work. If burning in captions
-fails with `No such filter: 'subtitles'`, your FFmpeg build doesn't
-include libass — see the `FFMPEG_PATH` note in `.env.example` (or just use
-`scripts/setup-mac.sh`, which installs and points at a build that has it).
+You'll also need [FFmpeg](https://ffmpeg.org/download.html) and
+[Bun](https://bun.sh) (the backend's runtime) on your machine. If burning
+in captions fails with `No such filter: 'subtitles'`, your FFmpeg build
+doesn't include libass — see the `FFMPEG_PATH` note in `.env.example` (or
+just use `scripts/setup-mac.sh`, which installs and points at a build
+that has it).
 
 ## Before submitting a PR
 
 ```bash
-cd client
 pnpm run lint
 pnpm run test
 pnpm run build
@@ -40,8 +42,10 @@ pnpm run build
 All three must pass — CI runs the same three commands on every PR. If
 you're changing pure logic (timeline math, transcript mapping, ffmpeg
 argument/filter-string building, validation, path handling), add or update
-a test in the matching `*.test.ts` file rather than only checking it by
-hand — `pnpm run test:watch` re-runs on save.
+a test in the matching `*.test.ts` file in whichever package (`client/` or
+`server/`) owns that code, rather than only checking it by hand --
+`pnpm --filter client test:watch` or `pnpm --filter server test:watch`
+re-runs on save.
 
 ## Project structure and conventions
 

README.md

@@ -44,10 +44,12 @@ the actual export drifting apart, which happened in practice for several
 of these (see the issue tracker's closed bugs).
 
 Local persistence (SQLite via Prisma) and project CRUD are built and in
-use. The separate `server/` directory isn't — see the
-[issue tracker](https://github.com/amide-init/transcriptcut/issues) for the
-full breakdown of what's done vs. planned. Everything currently runs
-inside the `client/` Next.js app, including the API routes.
+use. The app is a Vite React SPA (`client/`) talking to a Bun/Hono
+backend (`server/`) — the two run as separate processes, kept in one
+piece by `pnpm run dev` from the repo root. This split (no server-side
+rendering, one deployable backend unit) is prep for an eventual native
+Mac app via Tauri; see the [issue tracker](https://github.com/amide-init/transcriptcut/issues)
+for the full breakdown of what's done vs. planned.
 
 There is no login — v1 is a single local user by design, not a gap to
 fill in. **Don't expose this to a public or shared network** without
@@ -57,9 +59,9 @@ adding real authentication first; see `claude.md` section 18.
 
 ```text
 claude.md    — product spec
-client/      — Next.js app (editor UI + API routes)
+client/      — Vite + React editor UI (SPA, no server rendering)
+server/      — Bun + Hono backend (API routes, FFmpeg, Prisma/SQLite, OpenAI)
 docs/        — documentation site (VitePress, deployed to GitHub Pages)
-server/      — reserved for future use, not in use yet
 ```
 
 ## Documentation
@@ -77,40 +79,63 @@ pnpm install
 pnpm run dev
 ```
 
-## Running the client
+## Running the app
 
-Requires [FFmpeg](https://ffmpeg.org/download.html) on your machine
-(used for cuts and export) and an OpenAI API key (used server-side only,
-for transcription).
+Requires [FFmpeg](https://ffmpeg.org/download.html) and
+[Bun](https://bun.sh) (the backend's runtime) on your machine, plus an
+OpenAI API key (used server-side only, for transcription).
 
 ### macOS quick start
 
-[`scripts/setup-mac.sh`](./scripts/setup-mac.sh) installs Node/pnpm/FFmpeg
-(with subtitle burn-in support) via Homebrew if you don't already have
-them, installs dependencies, and walks you through `.env`:
+[`scripts/setup-mac.sh`](./scripts/setup-mac.sh) installs Node/pnpm/Bun/
+FFmpeg (with subtitle burn-in support) via Homebrew if you don't already
+have them, installs dependencies for the whole workspace, and walks you
+through `.env`:
 
 ```bash
 git clone https://github.com/amide-init/transcriptcut.git
 cd transcriptcut
 ./scripts/setup-mac.sh
 ```
 
-Then `cd client && pnpm run dev`. Safe to re-run -- it only installs
-what's missing and never overwrites an existing `.env`.
+Then `pnpm run dev` from the repo root. Safe to re-run -- it only
+installs what's missing and never overwrites an existing `.env`.
 
 ### Manual setup (any platform)
 
+```bash
+pnpm install                  # installs deps for client + server
+cd server
+cp .env.example .env          # then fill in OPENAI_API_KEY
+bunx prisma generate
+cd ..
+pnpm run dev                  # runs the Vite client and Bun backend together
+```
+
+Open [http://localhost:5173](http://localhost:5173). See
+[`server/.env.example`](./server/.env.example) for what each variable
+does, and [`CONTRIBUTING.md`](./CONTRIBUTING.md) for more.
+
+### Download
+
+A native macOS app is also available (Apple Silicon only) — no need to
+clone the repo or run anything. Grab it from the
+**[docs download page](https://amide-init.github.io/transcriptcut/download)**,
+which also covers the one-time Gatekeeper step (this build is ad-hoc
+signed, not signed with a paid Apple Developer account) and the
+first-launch API key setup.
+
+To build it yourself instead:
+
 ```bash
 cd client
-pnpm install
-cp .env.example .env   # then fill in OPENAI_API_KEY
-pnpm exec prisma generate
-pnpm run dev
+pnpm exec tauri build
 ```
 
-Open [http://localhost:3000](http://localhost:3000). See
-[`.env.example`](./client/.env.example) for what each variable does, and
-[`CONTRIBUTING.md`](./CONTRIBUTING.md) for more.
+Produces `client/src-tauri/target/release/bundle/{macos,dmg}/`. See
+`claude.md` section 35 for how it's wired together, and
+[`.github/workflows/build-macos-app.yml`](./.github/workflows/build-macos-app.yml)
+for how CI builds and releases it on a version tag push.
 
 ## Testing
 
@@ -120,8 +145,7 @@ builder, path-traversal safety, and the CSS-preview/ffmpeg-export formula
 parity work described in the issue tracker:
 
 ```bash
-cd client
-pnpm run test
+pnpm run test   # runs both client and server test suites
 ```
 
 CI runs the same command on every PR. There's no end-to-end/UI test suite