Qwen desktop alpha with resource controls and verified installers

[flujo-app]

Adds a desktop Qwen inference path with local fallback, opt-in contribution controls, model coverage/download displays, and self-contained Windows/Linux installation.

• Separate VRAM and processing sliders default to 100%. Resource changes stop owned workers before applying policy; insufficient VRAM produces a waiting state. Block health distinguishes observed coverage, reservations and failures, with separate client/worker downloads and available peer details.
• Signed catalog startup migration retains preferences and cache for the same verified manifest. Windows setup and Debian packages stop owned processes before replacement/removal and preserve external settings, native credentials and model cache. Sign-in controls and explicit retained-data removal instructions are included.
• Packaging removes unused bitsandbytes CUDA variants and supports duplicate Linux native-library hardlinks while preserving loader paths. The fresh Linux freeze already used symlinks for the large aliases and needed no new hardlink replacements. Fresh installers measure 2,462,345,104 bytes on Windows and 2,302,428,788 bytes on Linux; installed native-library and removal checks passed on both platforms.
• Small online installers pin exact offline-package URLs, versions, sizes and SHA-256. Windows resumes interrupted connections, treats progress-file errors as presentation-only and independently verifies the file before handoff. Linux verifies an additional root-owned copy before invoking APT. Cloudflare R2 hosts the versioned artifacts.

Validation includes the recorded bounded Gate 14 resource acceptance, Gate 15 installer/login acceptance, fresh normalized native/installer checks and 24 helper plus four actual Inno fixture tests. The Linux online flow passed actual HTTPS download, protected-copy/APT installation and removal; its scoped audit preserves the diagnostic observer failure and separately references prior CPU/CUDA checks of the identical package. Windows hosted acceptance passed the full package download/hash, waited installer handoff, installed CPU diagnostic and uninstall, with pre/post user-state and process cleanup verified. Earlier transport/progress failures remain recorded.

Both runtime bundles retain source 84205f93; the Windows downloader sources match commit b6c8aad9. The qualified Windows online executable is 2,107,751 bytes, SHA-256 8ad0b7da83fdc7c32223902ed13d51f5f2946c89e00947e50aae742c1fc37861. The nine passing CI checks at fdd8d0b predate that downloader fix; its focused tests and hosted acceptance are separate. Exact artifact/source identities are in the installation guide and hosting record.

This is an unsigned alpha. Users must disable sign-in startup before uninstalling; settings, native credentials and model caches are intentionally retained. Existing bounded conversation/recovery evidence is accepted for alpha. Additional performance/hardware and periodic catalog-draining qualification are deferred. The combined Gate 16 public canary remains unexecuted. Local inference depends on available model/resources, and current public community capacity is not guaranteed. Trusted Windows signing, Store distribution, hosted signed APT and automatic updates follow after alpha.

Published CommunityAI 0.1.0 alpha at 467848d1 on September 9, 02:09 UTC. All five GitHub release assets were downloaded anonymously and matched their hashes; all four Cloudflare installer choices are public. Gate 16 remains open and Gate 17 post-publication observation remains in progress. Fresh CI packaging is running separately from the completed exact-artifact acceptance.