dictare 0.1.140rc1__tar.gz

dictare-0.1.140rc1/.dockerignore

@@ -0,0 +1,22 @@
+# Exclude dev artifacts from test builds
+.venv/
+.git/
+__pycache__/
+*.pyc
+*.egg-info/
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+dist/
+build/
+
+# Config/data
+.env
+*.log
+
+# IDE
+.vscode/
+.idea/
+
+# Test outputs
+/scripts/test-distros/*.log

dictare-0.1.140rc1/.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,57 @@
+---
+name: Bug report
+about: Report a bug to help us improve dictare
+title: ''
+labels: bug
+assignees: ''
+---
+
+## Description
+
+A clear and concise description of the bug.
+
+## Steps to Reproduce
+
+1. Run `dictare listen`
+2. Do '...'
+3. See error
+
+## Expected Behavior
+
+What you expected to happen.
+
+## Actual Behavior
+
+What actually happened.
+
+## Environment
+
+- **OS**: [e.g., macOS 14.0, Ubuntu 24.04]
+- **Architecture**: [e.g., Apple Silicon M1, x86_64]
+- **Python version**: [e.g., 3.11.5]
+- **dictare version**: [run `dictare --version`]
+- **Installation method**: [e.g., install.sh, uv tool install, pip]
+
+## Logs
+
+<details>
+<summary>Output of `dictare check`</summary>
+
+```
+[paste output here]
+```
+
+</details>
+
+<details>
+<summary>Error messages or logs</summary>
+
+```
+[paste any error messages here]
+```
+
+</details>
+
+## Additional Context
+
+Add any other context about the problem here.

dictare-0.1.140rc1/.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,29 @@
+---
+name: Feature request
+about: Suggest an idea for dictare
+title: ''
+labels: enhancement
+assignees: ''
+---
+
+## Problem Statement
+
+A clear and concise description of the problem or limitation you're experiencing.
+
+Example: "I'm always frustrated when [...]"
+
+## Proposed Solution
+
+A clear and concise description of what you want to happen.
+
+## Alternatives Considered
+
+A description of any alternative solutions or features you've considered.
+
+## Use Case
+
+Describe your use case and how this feature would help you.
+
+## Additional Context
+
+Add any other context, mockups, or examples about the feature request here.

dictare-0.1.140rc1/.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,29 @@
+## Summary
+
+<!-- Brief description of what this PR does -->
+
+## Changes
+
+<!-- List the main changes in this PR -->
+
+-
+
+## Test Plan
+
+<!-- How did you test these changes? -->
+
+- [ ] Ran `uv run pytest tests/`
+- [ ] Ran `uv run ruff check .`
+- [ ] Tested manually with `dictare listen`
+
+## Checklist
+
+- [ ] I have read the [CONTRIBUTING](../CONTRIBUTING.md) guidelines
+- [ ] My code follows the project's code style
+- [ ] I have added tests for my changes (if applicable)
+- [ ] I have updated the documentation (if applicable)
+- [ ] I have updated CHANGELOG.md (if applicable)
+
+## Related Issues
+
+<!-- Link to any related issues: Fixes #123, Closes #456 -->

dictare-0.1.140rc1/.github/workflows/build-launcher.yml

@@ -0,0 +1,197 @@
+name: "0 - release: sign launcher"
+
+on:
+  workflow_dispatch:
+
+jobs:
+  build-sign-notarize:
+    runs-on: macos-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v4
+
+      # Fetch secrets from Infisical (single token, all secrets centralized)
+      - name: Load secrets from Infisical
+        env:
+          INFISICAL_TOKEN: ${{ secrets.INFISICAL_TOKEN }}
+        run: |
+          brew install infisical/get-cli/infisical
+          # Export secrets as JSON → write to GITHUB_ENV + mask values
+          # Note: cannot use IFS='=' because base64 values contain '=' padding
+          infisical export \
+            --domain "https://eu.infisical.com" \
+            --projectId "7d6c2573-e67b-4243-9911-0a9ddaed58b8" \
+            --path "/work/dictare/app/ci" \
+            --env prod \
+            --format json | \
+            jq -c '.[]' | while read -r item; do
+              key=$(echo "$item" | jq -r '.key')
+              value=$(echo "$item" | jq -r '.value')
+              # Mask each line separately (multiline values like PEM keys)
+              while IFS= read -r line; do
+                [[ -n "$line" ]] && echo "::add-mask::$line"
+              done <<< "$value"
+              # Use heredoc for multiline values (e.g. PEM keys)
+              EOF_MARKER="EOF_$(head -c 8 /dev/urandom | xxd -p)"
+              echo "$key<<$EOF_MARKER" >> "$GITHUB_ENV"
+              echo "$value" >> "$GITHUB_ENV"
+              echo "$EOF_MARKER" >> "$GITHUB_ENV"
+            done
+
+      # Verify secrets were loaded
+      - name: Verify secrets
+        run: |
+          missing=()
+          for var in APPLE_DEVELOPER_ID_P12 APPLE_DEVELOPER_ID_P12_PASSWORD \
+                     APPLE_NOTARIZATION_DICTARE_KEY APPLE_NOTARIZATION_DICTARE_KEY_ID \
+                     APPLE_NOTARIZATION_ISSUER_ID; do
+            if [[ -z "${!var:-}" ]]; then
+              missing+=("$var")
+            else
+              val="${!var}"
+              echo "✓ $var is set (${#val} chars)"
+            fi
+          done
+          if [[ ${#missing[@]} -gt 0 ]]; then
+            echo "::error::Missing secrets: ${missing[*]}"
+            exit 1
+          fi
+
+      # Import Developer ID certificate into a temporary keychain
+      - name: Import signing certificate
+        run: |
+          KEYCHAIN="$RUNNER_TEMP/signing.keychain-db"
+          security create-keychain -p "" "$KEYCHAIN"
+          security set-keychain-settings -lut 21600 "$KEYCHAIN"
+          echo "$APPLE_DEVELOPER_ID_P12" | base64 -d > "$RUNNER_TEMP/cert.p12"
+          security import "$RUNNER_TEMP/cert.p12" -k "$KEYCHAIN" \
+            -P "$APPLE_DEVELOPER_ID_P12_PASSWORD" -T /usr/bin/codesign
+          security set-key-partition-list -S apple-tool:,apple: \
+            -s -k "" "$KEYCHAIN"
+          security list-keychains -d user -s "$KEYCHAIN" login.keychain
+
+      # Build universal binary + sign with Hardened Runtime
+      - name: Build and sign launcher
+        run: |
+          DICTARE_SIGN_IDENTITY="Developer ID Application" \
+            ./scripts/macos/sign-launcher.sh
+
+      # Assemble the complete .app bundle (binary + Info.plist + icon)
+      # python_path is NOT inside the bundle — the launcher reads it from
+      # ~/.dictare/python_path at runtime, so the signed bundle stays immutable.
+      - name: Assemble .app bundle
+        run: |
+          VERSION=$(grep -E '^__version__' src/dictare/__init__.py | sed 's/.*"\(.*\)"/\1/')
+          BUNDLE="build/bundle/Dictare.app"
+          CONTENTS="$BUNDLE/Contents"
+          MACOS_DIR="$CONTENTS/MacOS"
+          RESOURCES_DIR="$CONTENTS/Resources"
+
+          mkdir -p "$MACOS_DIR" "$RESOURCES_DIR"
+
+          # Binary
+          cp build/launcher/Dictare "$MACOS_DIR/Dictare"
+
+          # Info.plist
+          /usr/libexec/PlistBuddy -c "Clear dict" "$CONTENTS/Info.plist" 2>/dev/null || true
+          cat > "$CONTENTS/Info.plist" << 'PLIST'
+          <?xml version="1.0" encoding="UTF-8"?>
+          <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
+            "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+          <plist version="1.0">
+          <dict>
+            <key>CFBundleName</key>
+            <string>Dictare</string>
+            <key>CFBundleDisplayName</key>
+            <string>Dictare</string>
+            <key>CFBundleIdentifier</key>
+            <string>dev.dragfly.dictare</string>
+            <key>CFBundleVersion</key>
+            <string>VERSION_PLACEHOLDER</string>
+            <key>CFBundleShortVersionString</key>
+            <string>VERSION_PLACEHOLDER</string>
+            <key>CFBundlePackageType</key>
+            <string>APPL</string>
+            <key>CFBundleExecutable</key>
+            <string>Dictare</string>
+            <key>CFBundleIconFile</key>
+            <string>Dictare</string>
+            <key>LSUIElement</key>
+            <true/>
+            <key>NSMicrophoneUsageDescription</key>
+            <string>Dictare needs microphone access for voice-to-text.</string>
+            <key>NSInputMonitoringUsageDescription</key>
+            <string>Dictare uses Input Monitoring to detect the global Right ⌘ hotkey.</string>
+          </dict>
+          </plist>
+          PLIST
+          # Inject actual version
+          sed -i '' "s/VERSION_PLACEHOLDER/$VERSION/g" "$CONTENTS/Info.plist"
+
+          # Icon
+          cp src/dictare/resources/Dictare.icns "$RESOURCES_DIR/Dictare.icns"
+
+          # Launcher metadata — stored in Resources/ (not MacOS/) because
+          # codesign requires all files in MacOS/ to be signed Mach-O binaries.
+          HASH=$(shasum -a 256 src/dictare/resources/launcher.swift | cut -c1-16)
+          echo "$HASH" > "$RESOURCES_DIR/launcher_hash"
+          echo "true" > "$RESOURCES_DIR/launcher_signed"
+
+          echo "==> Bundle assembled: $BUNDLE (version $VERSION)"
+          ls -laR "$BUNDLE"
+
+      # Sign the complete .app bundle (not just the binary)
+      - name: Sign bundle
+        run: |
+          codesign --force --options runtime \
+            --entitlements src/dictare/resources/Dictare.entitlements \
+            --sign "Developer ID Application" \
+            build/bundle/Dictare.app
+          codesign --verify --strict build/bundle/Dictare.app
+          echo "==> Bundle signed and verified"
+
+      # Notarize the complete bundle
+      - name: Notarize
+        run: |
+          echo "$APPLE_NOTARIZATION_DICTARE_KEY" > "$RUNNER_TEMP/AuthKey.p8"
+          ditto -c -k --keepParent build/bundle/Dictare.app build/bundle/Dictare.app.zip
+          xcrun notarytool submit build/bundle/Dictare.app.zip \
+            --key "$RUNNER_TEMP/AuthKey.p8" \
+            --key-id "$APPLE_NOTARIZATION_DICTARE_KEY_ID" \
+            --issuer "$APPLE_NOTARIZATION_ISSUER_ID" \
+            --wait --timeout 10m
+
+      # Staple the notarization ticket to the bundle
+      - name: Staple
+        run: |
+          xcrun stapler staple build/bundle/Dictare.app
+          echo "==> Notarization ticket stapled"
+
+      # Upload to the fixed "launcher" release tag (version-independent)
+      - name: Upload to launcher release
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          ZIP="Dictare-launcher-universal.zip"
+          # ditto -c -k on a directory zips its CONTENTS, losing the .app
+          # wrapper.  Use -keepParent to preserve the Dictare.app directory
+          # so extraction yields Dictare.app/Contents/... as expected.
+          ditto -c -k --keepParent build/bundle/Dictare.app "$ZIP"
+          # Create or update the fixed "launcher" release.
+          # First try to upload to existing release; if it doesn't exist, create it.
+          if gh release view "launcher" &>/dev/null; then
+            gh release upload "launcher" "$ZIP" --clobber
+          else
+            gh release create "launcher" "$ZIP" \
+              --title "Universal Dictare Launcher" \
+              --notes "Pre-built signed + notarized Dictare.app bundle. Downloaded automatically by install.sh."
+          fi
+          echo "==> Uploaded $ZIP to 'launcher' release"
+
+      # Upload as artifact (always, for manual builds)
+      - name: Upload artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: Dictare-launcher-universal
+          path: build/bundle/Dictare.app

dictare-0.1.140rc1/.github/workflows/ci-macos.yml

@@ -0,0 +1,25 @@
+name: "auto: test macOS"
+
+on:
+  schedule:
+    - cron: "0 4 * * *"  # daily at 04:00 UTC
+  workflow_dispatch:       # allow manual trigger from GitHub UI
+
+jobs:
+  test-macos:
+    runs-on: macos-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v4
+
+      - name: Set up Python and install deps
+        run: |
+          uv venv --python 3.11 --seed .venv
+          echo "VIRTUAL_ENV=$PWD/.venv" >> $GITHUB_ENV
+          echo "$PWD/.venv/bin" >> $GITHUB_PATH
+          .venv/bin/pip install -e ".[dev]"
+
+      - name: Run CoreAudio tests
+        run: pytest tests/ -v -m macos

dictare-0.1.140rc1/.github/workflows/ci.yml

@@ -0,0 +1,48 @@
+name: "auto: test + lint"
+
+on:
+  push:
+    branches: ["*"]  # Run on all branches
+  pull_request:
+    branches: [main]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+          cache: pip
+          cache-dependency-path: pyproject.toml
+
+      - name: Install system deps
+        run: sudo apt-get install -y libportaudio2 xvfb
+
+      - name: Install deps
+        run: pip install -e ".[dev]"
+
+      - name: Run linter
+        run: ruff check src/ tests/
+
+      - name: Run tests with coverage
+        run: xvfb-run pytest tests/ -v -m '' --cov=dictare --cov-report=term-missing
+
+  typecheck:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+          cache: pip
+          cache-dependency-path: pyproject.toml
+
+      - name: Install deps
+        run: pip install -e ".[dev]"
+
+      - name: Run mypy
+        run: mypy src/

dictare-0.1.140rc1/.github/workflows/claude-dedupe-issues.yml

@@ -0,0 +1,45 @@
+name: "claude: issue dedupe"
+
+on:
+  issues:
+    types: [opened]
+  workflow_dispatch:
+    inputs:
+      issue_number:
+        description: Issue number to check for duplicates
+        required: true
+
+jobs:
+  dedupe:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    permissions:
+      contents: read
+      issues: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Run Claude Code for Deduplication
+        timeout-minutes: 8
+        uses: anthropics/claude-code-action@v1
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_REPO: ${{ github.repository }}
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          claude_args: "--model claude-sonnet-4-6"
+          prompt: |
+            Check if this issue is a duplicate for the dictare project.
+
+            REPO: ${{ github.repository }}
+            ISSUE_NUMBER: ${{ github.event.issue.number || github.event.inputs.issue_number }}
+
+            Instructions:
+            1. Read the new issue
+            2. Search existing issues for similar ones (use gh issue list --state all --limit 200)
+            3. If a duplicate is found:
+               - Comment on the new issue linking to the original: "Duplicate of #NNN"
+               - Add the label "duplicate"
+               - Do NOT close it (the maintainer will decide)
+            4. If no duplicate, do nothing (no comment needed)

dictare-0.1.140rc1/.github/workflows/claude-issue-triage.yml

@@ -0,0 +1,49 @@
+name: "claude: issue triage"
+
+on:
+  issues:
+    types: [opened]
+  issue_comment:
+    types: [created]
+
+jobs:
+  triage-issue:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    if: >-
+      github.event_name == 'issues' ||
+      (github.event_name == 'issue_comment' && !github.event.issue.pull_request && github.event.comment.user.type != 'Bot')
+    concurrency:
+      group: issue-triage-${{ github.event.issue.number }}
+      cancel-in-progress: true
+    permissions:
+      contents: read
+      issues: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Run Claude Code for Issue Triage
+        timeout-minutes: 5
+        uses: anthropics/claude-code-action@v1
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_REPO: ${{ github.repository }}
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          allowed_non_write_users: "*"
+          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          claude_args: "--model claude-sonnet-4-6"
+          prompt: |
+            Triage this GitHub issue for the dictare project (voice-first control for AI coding agents).
+
+            REPO: ${{ github.repository }}
+            ISSUE_NUMBER: ${{ github.event.issue.number }}
+            EVENT: ${{ github.event_name }}
+
+            Instructions:
+            1. Read the issue carefully using the GitHub CLI
+            2. Add the appropriate label(s): bug, enhancement, question, documentation, good first issue
+            3. If it's a bug, ask for: OS (macOS/Linux), dictare version, steps to reproduce
+            4. If it's a feature request, acknowledge it and explain where it fits in the roadmap
+            5. If it's a question, answer it directly if possible or point to the README/docs
+            6. Be concise and friendly. Sign off as "dictare bot"

dictare-0.1.140rc1/.github/workflows/claude-pr-review.yml

@@ -0,0 +1,57 @@
+name: "claude: pr review"
+
+on:
+  pull_request:
+    types: [opened, synchronize]
+
+jobs:
+  review:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    # Skip PRs from the maintainer (manual review) and bots
+    if: |
+      github.event.pull_request.user.login != 'twisteroo' &&
+      github.event.pull_request.user.type != 'Bot'
+    permissions:
+      contents: read
+      pull-requests: write
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Run Claude Code for PR Review
+        timeout-minutes: 10
+        uses: anthropics/claude-code-action@v1
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_REPO: ${{ github.repository }}
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          claude_args: "--model claude-sonnet-4-6"
+          prompt: |
+            Review this pull request for the dictare project.
+
+            REPO: ${{ github.repository }}
+            PR_NUMBER: ${{ github.event.pull_request.number }}
+            PR_TITLE: ${{ github.event.pull_request.title }}
+            AUTHOR: ${{ github.event.pull_request.user.login }}
+            BASE_BRANCH: ${{ github.event.pull_request.base.ref }}
+
+            Dictare is a voice-first control layer for AI coding agents (Claude Code, Cursor, etc.).
+            It implements the OpenVIP protocol. Python 3.11, FastAPI, Typer, uv.
+
+            Review instructions:
+            1. Read the PR diff using gh CLI
+            2. Check: code correctness, test coverage, docs updates, breaking changes
+            3. Verify CHANGELOG.md is updated if the change is user-visible
+            4. Check for security concerns (no credentials hardcoded, no unsafe operations)
+            5. Verify Python 3.11 compatibility and uv/ruff style compliance
+            6. Post a concise review comment with: summary of changes, specific feedback (if any),
+               and LGTM or requested changes
+            7. Add labels: "needs-review" if changes needed, "ready-to-merge" if LGTM
+            8. Be constructive and friendly. First-time contributors deserve extra encouragement.
+            9. Sign off as "dictare bot"
+
+            Keep the review focused — max 200 words unless there are real issues to flag.

dictare-0.1.140rc1/.github/workflows/claude.yml

@@ -0,0 +1,35 @@
+name: "claude: code"
+
+on:
+  issue_comment:
+    types: [created]
+  pull_request_review_comment:
+    types: [created]
+  pull_request_review:
+    types: [submitted]
+  issues:
+    types: [opened, assigned]
+
+jobs:
+  claude:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    if: |
+      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
+      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
+      (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
+      (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
+    permissions:
+      contents: read
+      pull-requests: read
+      issues: read
+      id-token: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Run Claude Code
+        uses: anthropics/claude-code-action@v1
+        with:
+          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          claude_args: "--model claude-sonnet-4-6"

dictare-0.1.140rc1/.github/workflows/lock-closed-issues.yml

@@ -0,0 +1,53 @@
+name: "auto: lock issues"
+
+on:
+  schedule:
+    - cron: "0 14 * * *"  # daily at 14:00 UTC
+  workflow_dispatch:
+
+jobs:
+  lock:
+    runs-on: ubuntu-latest
+    permissions:
+      issues: write
+    steps:
+      - uses: actions/github-script@v7
+        with:
+          script: |
+            const sevenDaysAgo = new Date();
+            sevenDaysAgo.setDate(sevenDaysAgo.getDate() - 7);
+
+            const issues = await github.paginate(github.rest.issues.listForRepo, {
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              state: 'closed',
+              sort: 'updated',
+              direction: 'asc',
+              per_page: 100,
+            });
+
+            let locked = 0;
+            for (const issue of issues) {
+              if (issue.pull_request) continue;
+              if (issue.locked) continue;
+              if (new Date(issue.updated_at) > sevenDaysAgo) continue;
+
+              await github.rest.issues.createComment({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: issue.number,
+                body: 'This issue has been automatically locked since it has been closed ' +
+                      'and had no activity for 7 days. If you are experiencing a similar ' +
+                      'issue, please open a new one.',
+              });
+
+              await github.rest.issues.lock({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: issue.number,
+                lock_reason: 'resolved',
+              });
+
+              locked++;
+            }
+            console.log(`Locked ${locked} issues.`);

dictare-0.1.140rc1/.github/workflows/publish-pypi.yml

@@ -0,0 +1,29 @@
+name: "0 - release: publish to PyPI"
+
+on:
+  workflow_dispatch:
+
+jobs:
+  publish:
+    name: Build and publish to PyPI
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write  # Required for Trusted Publisher (OIDC)
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Install build tools
+        run: pip install build
+
+      - name: Build sdist and wheel
+        run: python -m build
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1