fitini 0.1.0__tar.gz

fitini-0.1.0/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or Derivative
+          Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and do
+          not modify the License. You may add Your own attribution notices
+          within Derivative Works that You distribute, alongside or as an
+          addendum to the NOTICE text from the Work, provided that such
+          additional attribution notices cannot be construed as modifying
+          the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 VD Info
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

fitini-0.1.0/NOTICE

@@ -0,0 +1,4 @@
+Fitini — moteur d'aide à l'investigation
+Copyright 2026 VD Info
+
+This product is licensed under the Apache License, Version 2.0 (see LICENSE).

fitini-0.1.0/PKG-INFO

@@ -0,0 +1,118 @@
+Metadata-Version: 2.4
+Name: fitini
+Version: 0.1.0
+Summary: Fitini — du cas au dossier : moteur d'aide à l'investigation, hors-ligne et déterministe.
+Author: VD Info
+License: Apache-2.0
+Keywords: investigation,osint,transcription,dossier,offline
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+License-File: NOTICE
+Requires-Dist: fastapi>=0.115
+Requires-Dist: uvicorn[standard]>=0.30
+Requires-Dist: websockets>=13
+Requires-Dist: python-multipart>=0.0.9
+Requires-Dist: pymupdf>=1.24
+Requires-Dist: python-docx>=1.1
+Requires-Dist: fpdf2>=2.7
+Provides-Extra: audio
+Requires-Dist: faster-whisper>=1.0; extra == "audio"
+Requires-Dist: sounddevice>=0.5; extra == "audio"
+Requires-Dist: numpy>=1.26; extra == "audio"
+Provides-Extra: ocr
+Requires-Dist: rapidocr-onnxruntime>=1.3; extra == "ocr"
+Provides-Extra: ner
+Requires-Dist: spacy>=3.7; extra == "ner"
+Provides-Extra: all
+Requires-Dist: faster-whisper>=1.0; extra == "all"
+Requires-Dist: sounddevice>=0.5; extra == "all"
+Requires-Dist: numpy>=1.26; extra == "all"
+Requires-Dist: rapidocr-onnxruntime>=1.3; extra == "all"
+Requires-Dist: spacy>=3.7; extra == "all"
+Dynamic: license-file
+
+<p align="center">
+  <img src="fitini/static/fitini_logo.png" alt="Fitini" width="180">
+</p>
+
+<h1 align="center">Fitini — Les murs ont des oreilles</h1>
+
+
+Fitini analyse des **sources texte et audio** (les fichiers de l'utilisateur, ou des sources web qu'il verse lui-même) pour mener une investigation : il extrait les entités d'intérêt, les corrèle, bâtit un graphe et une chronologie, flague les signaux, monte un **dossier d'enquête** et l'exporte — le tout **tracé à la source**. 
+
+Trois domaines (packs de connaissances) : **cybersécurité (CTI)**, **justice / Journalisme**, **santé / biomédical / pharmacovigilance**.
+
+## Fonctions clés
+- **INTERCEPT** — écoute micro en direct (FR/EN auto, transcription faster-whisper, VAD énergétique), flags et flèches en temps réel, modal d'alerte.
+- **ANALYSE** — dépôt de fichiers (PDF / DOCX / images OCR / audio) → extraction → corrélation → rapport.
+- **DOSSIER** — monte un dossier autour d'un sujet : **recherche web** (opt-in) → résultats **cochables** → téléchargement dans le dossier → **juxtaposition avant/maintenant** datée et sourcée → **export Markdown / PDF**.
+- **Rapport déterministe** — ce qui ressort, qui est lié à qui, chronologie, flags, passages-clés **sourcés**. Aucun jugement émis : l'outil surface et aligne, **l'humain juge**.
+
+## Extraction ouverte
+- **Sélecteurs génériques** (sans lexique) : e-mail, téléphone, IP, URL, @pseudo, montants/FCFA, dates, coordonnées GPS, CVE, IBAN.
+- **NER spaCy** (optionnelle) : PERSON / ORG / LIEU / DATE / MONEY, même pour des entités jamais listées. Repli propre si le modèle est absent.
+- **Watchlist utilisateur** : le sujet / les sélecteurs saisis pilotent flags, priorité et alertes.
+- Les packs de domaine (`profiles/*.json`) apportent une connaissance métier **optionnelle**, jamais la condition d'entrée.
+
+## Flag (par type, puis par sujet)
+Toute **entité détectée** (personne, organisation, lieu, montant, GPS, IBAN, CVE, arme/violence…) est flaguée automatiquement → flèche vers la matrice. Le **sujet déclaré** (watchlist) ajoute une couche de **priorité** et déclenche le **modal d'alerte URGENT**.
+
+## Architecture
+| Fichier | Rôle |
+|---|---|
+| `fitini_core.py` | moteur : extraction (sélecteurs + lexique + NER) → corrélation → hypothèses/lock → alertes → timeline |
+| `packs.py` | charge et fusionne les packs de domaine sélectionnés |
+| `server.py` | FastAPI : auth, WebSocket d'analyse, sessions, **dossiers**, **recherche web**, **export** |
+| `cli.py` | commande `fitini` : `serve` (interface) et `analyze` (ligne de commande) |
+| `audio_transcriber.py` | transcription micro / fichier (faster-whisper, VAD énergétique, hors boucle asyncio) |
+| `doc_ingest.py` | extraction de texte PDF (PyMuPDF) / DOCX / images (OCR RapidOCR) |
+| `dossiers.py` | store local des dossiers d'enquête (fichiers, hors-ligne) |
+| `web_collect.py` | collecte web **opt-in** (Exa / Tavily) — presse, archives |
+| `dossier_analyze.py` | juxtaposition avant/maintenant + entités sur les sources d'un dossier |
+| `dossier_export.py` | export d'un dossier en Markdown / PDF |
+| `db.py` | persistance SQLite (sessions, réglages) |
+| `auth.py` | gate par token (démo-grade — à remplacer en production) |
+| `static/index.html` | interface : INTERCEPT · ANALYSE · REPORT · DOSSIER · ARCHIVE · CONFIG |
+| `profiles/*.json` | packs de connaissances par domaine |
+
+## Structure du projet
+```
+Fitini/
+├── fitini/              # package installable (pip)
+│   ├── server.py        # FastAPI — point d'entrée : fitini.server:app
+│   ├── cli.py           # commande `fitini` (serve / analyze)
+│   ├── fitini_core.py   # moteur ; + packs, dossiers, web_collect, dossier_analyze/export, db, auth…
+│   ├── static/          # interface web + logo (servis par le serveur)
+│   ├── profiles/        # packs de domaine (cybersécurité / investigation / santé)
+│   └── config.json      # auth, pipeline, réglages par défaut
+├── pyproject.toml       # métadonnées + dépendances (installable)
+├── requirements.txt
+├── LICENSE · NOTICE
+└── README.md
+```
+Données d'exécution créées dans le dossier courant, non versionnées : `uploads/`, `dossiers/`, `fitini.db`.
+
+## Lancer
+```bash
+# Installation (depuis les sources ; à terme : pip install fitini)
+pip install .
+# extras optionnels : audio (micro), OCR, NER
+pip install ".[audio,ocr,ner]"
+
+# Interface web
+fitini serve --open                 # ouvre http://127.0.0.1:8000
+# (dev : uvicorn fitini.server:app --reload)
+
+# Ligne de commande, sans interface
+fitini analyze mon_dossier/ --subject "nom, mot-clé" --format md --out dossier.md
+```
+Recherche web (optionnelle, une clé suffit) :
+```bash
+FITINI_WEB=1 EXA_API_KEY=... fitini serve
+# ou TAVILY_API_KEY=...
+```
+Les **modèles** (Whisper, OCR RapidOCR, spaCy) ne sont **pas inclus** dans le dépôt : ils sont téléchargés / servis côté serveur. Le code reste utilisable tel quel.
+
+## Auteur & licence
+Développé par **The Day Info**. Open source sous licence **Apache-2.0** (voir [`LICENSE`](LICENSE) et [`NOTICE`](NOTICE)) — libre de télécharger, utiliser, modifier et redistribuer, avec clause de brevet.

fitini-0.1.0/README.md

@@ -0,0 +1,84 @@
+<p align="center">
+  <img src="fitini/static/fitini_logo.png" alt="Fitini" width="180">
+</p>
+
+<h1 align="center">Fitini — Les murs ont des oreilles</h1>
+
+
+Fitini analyse des **sources texte et audio** (les fichiers de l'utilisateur, ou des sources web qu'il verse lui-même) pour mener une investigation : il extrait les entités d'intérêt, les corrèle, bâtit un graphe et une chronologie, flague les signaux, monte un **dossier d'enquête** et l'exporte — le tout **tracé à la source**. 
+
+Trois domaines (packs de connaissances) : **cybersécurité (CTI)**, **justice / Journalisme**, **santé / biomédical / pharmacovigilance**.
+
+## Fonctions clés
+- **INTERCEPT** — écoute micro en direct (FR/EN auto, transcription faster-whisper, VAD énergétique), flags et flèches en temps réel, modal d'alerte.
+- **ANALYSE** — dépôt de fichiers (PDF / DOCX / images OCR / audio) → extraction → corrélation → rapport.
+- **DOSSIER** — monte un dossier autour d'un sujet : **recherche web** (opt-in) → résultats **cochables** → téléchargement dans le dossier → **juxtaposition avant/maintenant** datée et sourcée → **export Markdown / PDF**.
+- **Rapport déterministe** — ce qui ressort, qui est lié à qui, chronologie, flags, passages-clés **sourcés**. Aucun jugement émis : l'outil surface et aligne, **l'humain juge**.
+
+## Extraction ouverte
+- **Sélecteurs génériques** (sans lexique) : e-mail, téléphone, IP, URL, @pseudo, montants/FCFA, dates, coordonnées GPS, CVE, IBAN.
+- **NER spaCy** (optionnelle) : PERSON / ORG / LIEU / DATE / MONEY, même pour des entités jamais listées. Repli propre si le modèle est absent.
+- **Watchlist utilisateur** : le sujet / les sélecteurs saisis pilotent flags, priorité et alertes.
+- Les packs de domaine (`profiles/*.json`) apportent une connaissance métier **optionnelle**, jamais la condition d'entrée.
+
+## Flag (par type, puis par sujet)
+Toute **entité détectée** (personne, organisation, lieu, montant, GPS, IBAN, CVE, arme/violence…) est flaguée automatiquement → flèche vers la matrice. Le **sujet déclaré** (watchlist) ajoute une couche de **priorité** et déclenche le **modal d'alerte URGENT**.
+
+## Architecture
+| Fichier | Rôle |
+|---|---|
+| `fitini_core.py` | moteur : extraction (sélecteurs + lexique + NER) → corrélation → hypothèses/lock → alertes → timeline |
+| `packs.py` | charge et fusionne les packs de domaine sélectionnés |
+| `server.py` | FastAPI : auth, WebSocket d'analyse, sessions, **dossiers**, **recherche web**, **export** |
+| `cli.py` | commande `fitini` : `serve` (interface) et `analyze` (ligne de commande) |
+| `audio_transcriber.py` | transcription micro / fichier (faster-whisper, VAD énergétique, hors boucle asyncio) |
+| `doc_ingest.py` | extraction de texte PDF (PyMuPDF) / DOCX / images (OCR RapidOCR) |
+| `dossiers.py` | store local des dossiers d'enquête (fichiers, hors-ligne) |
+| `web_collect.py` | collecte web **opt-in** (Exa / Tavily) — presse, archives |
+| `dossier_analyze.py` | juxtaposition avant/maintenant + entités sur les sources d'un dossier |
+| `dossier_export.py` | export d'un dossier en Markdown / PDF |
+| `db.py` | persistance SQLite (sessions, réglages) |
+| `auth.py` | gate par token (démo-grade — à remplacer en production) |
+| `static/index.html` | interface : INTERCEPT · ANALYSE · REPORT · DOSSIER · ARCHIVE · CONFIG |
+| `profiles/*.json` | packs de connaissances par domaine |
+
+## Structure du projet
+```
+Fitini/
+├── fitini/              # package installable (pip)
+│   ├── server.py        # FastAPI — point d'entrée : fitini.server:app
+│   ├── cli.py           # commande `fitini` (serve / analyze)
+│   ├── fitini_core.py   # moteur ; + packs, dossiers, web_collect, dossier_analyze/export, db, auth…
+│   ├── static/          # interface web + logo (servis par le serveur)
+│   ├── profiles/        # packs de domaine (cybersécurité / investigation / santé)
+│   └── config.json      # auth, pipeline, réglages par défaut
+├── pyproject.toml       # métadonnées + dépendances (installable)
+├── requirements.txt
+├── LICENSE · NOTICE
+└── README.md
+```
+Données d'exécution créées dans le dossier courant, non versionnées : `uploads/`, `dossiers/`, `fitini.db`.
+
+## Lancer
+```bash
+# Installation (depuis les sources ; à terme : pip install fitini)
+pip install .
+# extras optionnels : audio (micro), OCR, NER
+pip install ".[audio,ocr,ner]"
+
+# Interface web
+fitini serve --open                 # ouvre http://127.0.0.1:8000
+# (dev : uvicorn fitini.server:app --reload)
+
+# Ligne de commande, sans interface
+fitini analyze mon_dossier/ --subject "nom, mot-clé" --format md --out dossier.md
+```
+Recherche web (optionnelle, une clé suffit) :
+```bash
+FITINI_WEB=1 EXA_API_KEY=... fitini serve
+# ou TAVILY_API_KEY=...
+```
+Les **modèles** (Whisper, OCR RapidOCR, spaCy) ne sont **pas inclus** dans le dépôt : ils sont téléchargés / servis côté serveur. Le code reste utilisable tel quel.
+
+## Auteur & licence
+Développé par **The Day Info**. Open source sous licence **Apache-2.0** (voir [`LICENSE`](LICENSE) et [`NOTICE`](NOTICE)) — libre de télécharger, utiliser, modifier et redistribuer, avec clause de brevet.

fitini-0.1.0/fitini/__init__.py

@@ -0,0 +1 @@
+"""Fitini — investigation assistance engine (package)."""

fitini-0.1.0/fitini/audio_transcriber.py

@@ -0,0 +1,167 @@
+"""
+audio_transcriber.py — audio acquisition + transcription for Fitini Voice Analyzer.
+
+Three sources, one async interface (`stream_transcriptions`):
+
+  * MICROPHONE            — sounddevice capture -> energy VAD gating -> faster-whisper.
+  * FILE                  — transcribe a recorded file with faster-whisper.
+
+CRITICAL FIX vs. the original spec: VAD and Whisper are synchronous, CPU-heavy
+calls. Running them directly inside the asyncio event loop blocks every WebSocket on the
+server. Here, every model call is dispatched with `asyncio.to_thread(...)` so the event
+loop stays responsive.
+"""
+
+from __future__ import annotations
+
+import asyncio
+import queue
+import time
+from typing import Any, AsyncGenerator, Dict, Optional
+
+
+class AudioStreamTranscriber:
+    def __init__(self, config: Dict[str, Any], use_microphone: bool = False):
+        p = config.get("pipeline", {})
+        self.config = config
+        self.use_microphone = use_microphone
+        self.sample_rate = int(p.get("sample_rate", 16000))
+        self.model_size = p.get("model_size", "base.en")
+        self.device = p.get("device", "cpu")
+        self.compute_type = p.get("compute_type", "int8")
+        self.vad_threshold = float(p.get("vad_threshold", 0.5))
+        self.energy_threshold = float(p.get("energy_threshold", 0.01))
+        self.silence_frames_limit = int(p.get("silence_frames", 18))
+        self.chunk_samples = int(p.get("chunk_samples", 512))
+        self.sim_interval = float(p.get("simulation_interval_seconds", 1.1))
+        self.beam_size = int(p.get("beam_size", 1))
+        lang = p.get("language", "auto")
+        # None lets faster-whisper auto-detect the language (FR or EN) per source.
+        self.language = None if lang in ("", "auto", None) else lang
+
+        self.audio_queue: "queue.Queue" = queue.Queue()
+        self.whisper_model = None
+        self.vad_model = None
+
+    # ------------------------------------------------------------------ #
+    def _load_models(self) -> None:
+        """Blocking Whisper load -- always called via asyncio.to_thread (no torch)."""
+        from faster_whisper import WhisperModel  # type: ignore
+
+        self.whisper_model = WhisperModel(
+            self.model_size, device=self.device, compute_type=self.compute_type
+        )
+
+    @staticmethod
+    def _now_ts() -> str:
+        return time.strftime("%H:%M:%S")
+
+    # ------------------------------------------------------------------ #
+    async def stream_transcriptions(self) -> AsyncGenerator[Dict[str, str], None]:
+        """Yield {'ts', 'text'} dicts as speech is transcribed (live capture)."""
+        async for item in self._stream_microphone():
+            yield item
+
+    # ------------------------------------------------------------------ #
+    def _audio_callback(self, indata, frames, time_info, status):  # pragma: no cover
+        self.audio_queue.put(indata[:, 0].copy())
+
+    def _reset_segmenter(self) -> None:
+        self._speech_buffer: list = []
+        self._silence_frames: int = 0
+
+    async def _ingest_chunk(self, chunk, vad_fn, transcribe_fn):
+        """Feed one audio chunk through the VAD-gated segmenter.
+
+        `vad_fn(chunk) -> float` and `transcribe_fn(audio) -> str` are injected so this
+        state machine can be exercised with real models (mic path) or stubs (tests),
+        and both are dispatched OFF the event loop via asyncio.to_thread. Returns a
+        transcribed string when a speech segment completes, else None.
+        """
+        import numpy as np  # type: ignore
+
+        # VAD inference OFF the event loop.
+        speech_prob = await asyncio.to_thread(vad_fn, chunk)
+
+        if speech_prob > self.vad_threshold:
+            self._speech_buffer.append(chunk)
+            self._silence_frames = 0
+        elif self._speech_buffer:
+            self._speech_buffer.append(chunk)
+            self._silence_frames += 1
+            if self._silence_frames > self.silence_frames_limit:
+                full_audio = np.concatenate(self._speech_buffer)
+                self._reset_segmenter()
+                # Transcription OFF the event loop.
+                text = await asyncio.to_thread(transcribe_fn, full_audio)
+                return text or None
+        return None
+
+    async def _stream_microphone(self) -> AsyncGenerator[Dict[str, str], None]:  # pragma: no cover
+        import sounddevice as sd  # type: ignore
+        import numpy as np  # type: ignore
+
+        if self.whisper_model is None:
+            await asyncio.to_thread(self._load_models)
+
+        self._reset_segmenter()
+
+        def vad_fn(chunk):
+            # Energy-based VAD (RMS) -- deterministic, offline, no torch/Silero.
+            rms = float(np.sqrt(np.mean(np.square(chunk)))) if len(chunk) else 0.0
+            return 1.0 if rms >= self.energy_threshold else 0.0
+
+        with sd.InputStream(
+            samplerate=self.sample_rate,
+            channels=1,
+            dtype="float32",
+            blocksize=self.chunk_samples,
+            callback=self._audio_callback,
+        ):
+            while True:
+                await asyncio.sleep(0.01)
+                while not self.audio_queue.empty():
+                    chunk = self.audio_queue.get_nowait()
+                    text = await self._ingest_chunk(chunk, vad_fn, self._transcribe_array)
+                    if text:
+                        yield {"ts": self._now_ts(), "text": text}
+
+    # ------------------------------------------------------------------ #
+    def _transcribe_array(self, audio) -> str:  # pragma: no cover
+        """Blocking Whisper call — always dispatched via asyncio.to_thread."""
+        segments, _ = self.whisper_model.transcribe(
+            audio, beam_size=self.beam_size, language=self.language, vad_filter=False
+        )
+        return " ".join(seg.text.strip() for seg in segments).strip()
+
+    async def transcribe_file(self, path: str) -> AsyncGenerator[Dict[str, str], None]:
+        """Transcribe a recorded file, yielding each segment as it is decoded."""
+        if self.whisper_model is None:
+            await asyncio.to_thread(self._load_models_whisper_only)
+
+        segments = await asyncio.to_thread(self._file_segments, path)
+        for seg in segments:
+            yield {"ts": self._fmt_seconds(seg["start"]), "text": seg["text"]}
+
+    def _load_models_whisper_only(self) -> None:  # pragma: no cover
+        from faster_whisper import WhisperModel  # type: ignore
+
+        self.whisper_model = WhisperModel(
+            self.model_size, device=self.device, compute_type=self.compute_type
+        )
+
+    def _file_segments(self, path: str):  # pragma: no cover
+        segments, _ = self.whisper_model.transcribe(
+            path, beam_size=self.beam_size, language=self.language, vad_filter=True
+        )
+        out = []
+        for seg in segments:
+            txt = seg.text.strip()
+            if txt:
+                out.append({"start": seg.start, "text": txt})
+        return out
+
+    @staticmethod
+    def _fmt_seconds(s: float) -> str:
+        s = int(s or 0)
+        return f"{s // 60:02d}:{s % 60:02d}"

fitini-0.1.0/fitini/auth.py

@@ -0,0 +1,60 @@
+"""
+auth.py — minimal token authentication for the Fitini access gate.
+
+This is demo-grade auth: one operator credential (from config.json, overridable with the
+FITINI_PASSPHRASE env var), checked with a constant-time hash compare, issuing an opaque
+in-memory bearer token with a TTL. It is intentionally small — enough to make the login
+screen real — not a production identity system.
+"""
+
+from __future__ import annotations
+
+import hashlib
+import hmac
+import os
+import secrets
+import time
+from typing import Any, Dict, Optional
+
+
+def _sha256(value: str) -> str:
+    return hashlib.sha256(value.encode("utf-8")).hexdigest()
+
+
+class AuthManager:
+    def __init__(self, config: Dict[str, Any]):
+        auth = config.get("auth", {})
+        self.operator_id = auth.get("operator_id", "OPERATOR")
+        passphrase = os.environ.get("FITINI_PASSPHRASE", auth.get("passphrase", "fitini"))
+        self.passphrase_hash = _sha256(passphrase)
+        self.ttl = int(auth.get("token_ttl_seconds", 3600))
+        # token -> expiry epoch
+        self._tokens: Dict[str, float] = {}
+
+    def login(self, operator_id: str, passphrase: str) -> Optional[str]:
+        """Return a bearer token on success, else None."""
+        ok_pass = hmac.compare_digest(self.passphrase_hash, _sha256(passphrase or ""))
+        # Operator id is accepted loosely (demo): must be non-empty and match prefix.
+        ok_op = bool(operator_id) and operator_id.strip().upper().startswith(
+            self.operator_id.split("//")[0].strip().upper()
+        )
+        if ok_pass and ok_op:
+            token = secrets.token_urlsafe(32)
+            self._tokens[token] = time.time() + self.ttl
+            return token
+        return None
+
+    def validate(self, token: Optional[str]) -> bool:
+        if not token:
+            return False
+        expiry = self._tokens.get(token)
+        if expiry is None:
+            return False
+        if time.time() > expiry:
+            self._tokens.pop(token, None)
+            return False
+        return True
+
+    def logout(self, token: Optional[str]) -> None:
+        if token:
+            self._tokens.pop(token, None)