feat: preserve broader enterprise inference hardening

CHANGELOG.md

@@ -7,6 +7,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+- **Enterprise workspaces can manage local models from first-run setup.** Company admins can publish ordered, approved Dictation and AI/Notes model lists. Employees download one approved model per required category before Permissions, may continue while downloads finish, and complete onboarding after Notes without seeing pricing or provider selection. Managed choices remain locked to the active workspace and automatically move to the first compatible fallback when an admin removes a selection.
 - **Uploaded and URL-ingested notes remember their speaker detection.** A note created through Upload ran speaker detection but stored none of it — the note now records that diarization ran, the speaker count you chose, and the audio duration, so it behaves like a meeting note when you record into it or resolve participants. An upload with speaker detection off writes nothing, preserving your global speaker setting. Present since upload speaker detection shipped in 1.7.6. (#1610)
 
 ## [1.8.3] - 2026-08-12

main.js

@@ -534,6 +534,11 @@ function initializeCoreManagers() {
 }
 
 function registerSidecars() {
+  if (ipcHandlers) {
+    sidecarRegistry.register("corti-privacy-cleanup", () =>
+      ipcHandlers.retryCortiPrivacyCleanup()
+    );
+  }
   if (whisperManager) sidecarRegistry.register("whisper", () => whisperManager.stopServer());
   if (parakeetManager) sidecarRegistry.register("parakeet", () => parakeetManager.stopServer());
   if (diarizationManager) {
@@ -961,6 +966,9 @@ async function startApp() {
   // Phase 1: Core managers + IPC handlers before windows
   initializeCoreManagers();
   await environmentManager.init();
+  void ipcHandlers.retryCortiPrivacyCleanup().catch((error) => {
+    debugLogger.error("Corti privacy cleanup retry failed", { error: error?.message });
+  });
   registerSidecars();
   startAuthBridgeServer();
 

package.json

@@ -1,6 +1,6 @@
 {
   "name": "open-whispr",
-  "version": "1.8.3",
+  "version": "1.8.4",
   "description": "A desktop dictation application using whisper.cpp for speech-to-text transcription",
   "main": "main.js",
   "private": true,

src/AppRouter.jsx

@@ -6,11 +6,14 @@ import MeetingNotificationOverlay from "./components/MeetingNotificationOverlay.
 import UpdateNotificationOverlay from "./components/UpdateNotificationOverlay.tsx";
 import WindowControls from "./components/WindowControls.tsx";
 import BackgroundModelDownloadTray from "./components/onboarding/BackgroundModelDownloadTray.tsx";
+import ManagedEnterpriseModelCoordinator from "./components/onboarding/ManagedEnterpriseModelCoordinator.tsx";
 import { Card, CardContent } from "./components/ui/card.tsx";
 import { LEGACY_ONBOARDING_STEP_KEY, ONBOARDING_SESSION_KEY } from "./components/onboarding/flow";
 import { useAuth } from "./hooks/useAuth";
 import { useTheme } from "./hooks/useTheme";
 import { usePolicyStore } from "./stores/policyStore";
+import { useEnterpriseIdentityStore } from "./stores/enterpriseIdentityStore";
+import { isEnterpriseInferenceReady } from "./helpers/enterpriseInferenceReadiness";
 import { isControlPanelWindow } from "./utils/windowContext.ts";
 
 // Either marker means the flow is mid-way: the legacy step key is kept for
@@ -40,12 +43,21 @@ export default function AppRouter() {
 function MainApp() {
   const { isSignedIn, isGracePeriodOnly, isLoaded: authLoaded } = useAuth();
   const policyStatus = usePolicyStore((state) => state.status);
+  const enterpriseStatus = useEnterpriseIdentityStore((state) => state.status);
+  const enterpriseFailClosed = useEnterpriseIdentityStore((state) => state.failClosed);
   const policyResolved =
     !isSignedIn ||
     policyStatus === "managed" ||
     policyStatus === "unmanaged" ||
     policyStatus === "error";
-  const isWaitingForPolicyStart = isSignedIn && !policyResolved;
+  const enterpriseInferenceReady = isEnterpriseInferenceReady({
+    authLoaded,
+    policyResolved,
+    isSignedIn,
+    enterpriseStatus,
+    enterpriseFailClosed,
+  });
+  const isWaitingForPolicyStart = !enterpriseInferenceReady;
   const autoSyncReady = authLoaded && policyResolved;
 
   const [showOnboarding, setShowOnboarding] = useState(false);
@@ -132,7 +144,10 @@ function MainApp() {
   }, [isControlPanel, isLoading, isWaitingForPolicyStart, showOnboarding]);
 
   useEffect(() => {
-    if (isLoading || isWaitingForPolicyStart) return;
+    if (isLoading || isWaitingForPolicyStart) {
+      void window.electronAPI?.setOnboardingActive?.(true);
+      return;
+    }
 
     const onboardingCompleted = localStorage.getItem("onboardingCompleted") === "true";
     const normalAppVisible = onboardingCompleted && (!isControlPanel || !showOnboarding);
@@ -208,9 +223,13 @@ function MainApp() {
     <Suspense fallback={<LoadingFallback />}>
       <ControlPanel initialSettingsSection={postOnboardingSettingsSection} />
       <BackgroundModelDownloadTray />
+      <ManagedEnterpriseModelCoordinator showUi />
     </Suspense>
   ) : (
-    <App />
+    <>
+      <App />
+      <ManagedEnterpriseModelCoordinator showUi={false} />
+    </>
   );
 }