requirements-secure.txt

# Clank Security-Hardened Dependencies
# Enhanced with additional security libraries

# Core dependencies from original requirements.txt
numpy>=1.21.0
onnxruntime>=1.15.0
tokenizers>=0.13.0
silero-vad>=4.0.0
sounddevice>=0.4.6
requests>=2.28.0

# Official Moonshine ONNX library (security-hardened with local models)
useful-moonshine-onnx @ git+https://github.com/usefulsensors/moonshine.git#subdirectory=moonshine-onnx

# Security enhancements
cryptography>=41.0.0      # For HTTPS certificate generation
PyYAML>=6.0               # For secure configuration management
zeroconf>=0.127.0         # For mDNS service discovery
ipaddress>=1.0.23         # For network validation (Python 3.3+ builtin)

# Enhanced HTTP client with security features
urllib3>=2.0.0            # Modern HTTP client with security improvements
certifi>=2023.7.22        # Certificate validation

# Additional security utilities (built-in modules, no need to install)
# secrets                 # Cryptographically secure random generation (builtin)
# hashlib                 # Secure hashing (builtin)
# hmac                    # Hash-based message authentication (builtin)

# Development and testing (optional)
pytest>=7.0.0             # For running tests
black>=23.0.0             # Code formatting
flake8>=6.0.0             # Code linting

# System dependencies that may need to be installed via system package manager:
# - libsndfile1 (for sounddevice)
# - portaudio19-dev (for sounddevice)
# 
# On Ubuntu/Debian: sudo apt-get install libsndfile1 portaudio19-dev
# On Arch Linux: sudo pacman -S libsndfile portaudio
# On macOS with Homebrew: brew install portaudio