What's new in 0.4.0
- Composer microphone button — tap the mic icon next to the input to record/stop (turns red while recording); equivalent to the Alt hotkey.
- Realtime transcription — Web Speech streams hypotheses into the draft while you talk; the local SenseVoice engine previews every 3s. The final transcript replaces the preview (no duplication; stale preview rolled back on too-short/failed recordings).
- Cloud ASR provider chain — configure multiple OpenAI-compatible endpoints; tried in order with automatic failover, failures aggregated. Legacy single-endpoint config folds in automatically.
- Mic button state fix — the icon now turns red immediately on record and clears on stop (was lagging one tap).
- SECURITY.md — public Issues welcome for non-critical findings; high-severity issues go to Security Advisories.
Tests: 108 passing. Lint + security scan clean.