ryu-stt 0.1.3

//! Speech-to-text (STT) modality primitive: `transcribe(audio) -> text` behind a
//! swappable engine seam.
//!
//! Three engines, one dispatch ([`transcribe_wav_detailed`]):
//! - **parakeet** (default where the `voice-parakeet` feature is compiled): the
//!   in-process ONNX engine — the genuinely in-process hot path, never IPC (see
//!   [`parakeet`]).
//! - **whisper**: forwarded to a local whisper.cpp voice server's `/inference`
//!   (a thin HTTP proxy).
//! - **gateway**: the swappable cloud STT slot, routed through the Gateway's
//!   `/v1/audio/transcriptions` with the per-attribute `x-ryu-slot-stt-*` headers
//!   (a thin HTTP proxy).
//!
//! Per the Core-vs-Gateway rule the *dispatch* is a Core concern (it decides
//! *what runs* — which local voice engine handles the audio); this crate owns the
//! reusable transcription logic + result types, while the host couplings it
//! cannot own — the whisper base-url, the Gateway url/bearer, and the parakeet
//! model directory — are injected via the narrow [`SttHost`] trait. The crate has
//! ZERO dependency on `apps/core` (mirrors `ryu-search`'s `SearchEmbedder` seam).

use std::path::PathBuf;

use serde_json::{json, Value};

pub mod parakeet;

/// Narrow host seam for the STT dispatch: the couplings the crate cannot own
/// because they read Core config/paths (the whisper sidecar base-url, the Gateway
/// url + bearer, and the extracted parakeet model directory). Core implements
/// this in `apps/core/src/stt_host.rs`.
pub trait SttHost: Send + Sync {
    /// Base URL of the local whisper.cpp voice server (`{base}/inference`).
    fn whisper_base_url(&self) -> String;
    /// Base URL of the Gateway (`{base}/v1/audio/transcriptions`).
    fn gateway_url(&self) -> String;
    /// The Gateway bearer token slot (never a raw provider API key).
    fn gateway_bearer(&self) -> Result<String, String>;
    /// The extracted parakeet ONNX model directory (a `~/.ryu` path Core owns).
    fn parakeet_model_dir(&self) -> PathBuf;
}

/// One timestamped transcript segment. Serialized camelCase
/// (`startMs`/`endMs`/`text`) so it matches the cross-surface clip contract.
#[derive(Debug, Clone, Default, serde::Serialize)]
#[serde(rename_all = "camelCase")]
pub struct TranscriptSegment {
    pub start_ms: u64,
    pub end_ms: u64,
    pub text: String,
}

/// A transcription result: the full text plus optional timestamped segments.
/// Segments are populated whenever the engine returns them (Whisper
/// `verbose_json` via the Gateway or local whisper.cpp); parakeet returns text
/// only, so its `segments` is empty.
#[derive(Debug, Clone, Default)]
pub struct Transcription {
    pub text: String,
    pub segments: Vec<TranscriptSegment>,
}

/// Parse OpenAI/whisper `verbose_json` `segments` (each with `start`/`end` in
/// seconds and `text`) into millisecond [`TranscriptSegment`]s. An absent or
/// malformed array yields an empty vec.
fn parse_verbose_segments(body: &Value) -> Vec<TranscriptSegment> {
    body.get("segments")
        .and_then(Value::as_array)
        .map(|arr| {
            arr.iter()
                .filter_map(|s| {
                    let start = s.get("start").and_then(Value::as_f64)?;
                    let end = s.get("end").and_then(Value::as_f64)?;
                    let text = s
                        .get("text")
                        .and_then(Value::as_str)
                        .unwrap_or("")
                        .trim()
                        .to_string();
                    Some(TranscriptSegment {
                        start_ms: (start.max(0.0) * 1000.0) as u64,
                        end_ms: (end.max(0.0) * 1000.0) as u64,
                        text,
                    })
                })
                .collect()
        })
        .unwrap_or_default()
}

/// The cross-surface default STT engine, resolved as a swappable default (never
/// a hardcoded literal). Parakeet v3 (in-process ONNX) is the default whenever
/// this build compiled the `voice-parakeet` feature. Lean builds omit the feature
/// and default to whisper.cpp so transcription still works there.
/// `RYU_STT_ENGINE` overrides both, so one env var re-points every surface.
///
/// Which builds carry the feature is a *release-pipeline* fact, and it has been
/// wrong before: the flag lived only in `apps/core/package.json` (`dev`/
/// `dev:watch`/`build`), so every developer had parakeet while the three binaries
/// users actually install — `.github/workflows/release.yml`,
/// `scripts/release/release-local.sh`, `Dockerfile` — were built featureless and
/// silently defaulted to whisper. All four sites now pass
/// `--features sandbox-wasmtime,voice-parakeet,voice-vad`; keep them in sync (the
/// release workflow asserts the resolved feature graph).
pub fn default_stt_engine() -> String {
    if let Ok(env_engine) = std::env::var("RYU_STT_ENGINE") {
        let trimmed = env_engine.trim();
        if !trimmed.is_empty() {
            return trimmed.to_string();
        }
    }
    #[cfg(feature = "voice-parakeet")]
    {
        "parakeet".to_string()
    }
    #[cfg(not(feature = "voice-parakeet"))]
    {
        "whisper".to_string()
    }
}

/// Transcribe raw audio bytes to text. Routes to the in-process parakeet engine
/// (the default — see [`default_stt_engine`]) or the whisper.cpp voice server
/// (`engine == Some("whisper")`).
///
/// The reusable core of the `/api/voice/transcribe` route, factored out so other
/// Core callers (e.g. the meetings pipeline) can transcribe a WAV chunk without
/// going through an HTTP multipart handler. Returns the transcript or a
/// human-readable error string.
pub async fn transcribe_wav(
    client: &reqwest::Client,
    host: &dyn SttHost,
    bytes: Vec<u8>,
    filename: String,
    engine: Option<&str>,
) -> Result<String, String> {
    transcribe_wav_detailed(client, host, bytes, filename, engine)
        .await
        .map(|t| t.text)
}

/// Like [`transcribe_wav`] but also returns timestamped segments when the engine
/// provides them (Whisper `verbose_json` via the Gateway or local whisper.cpp).
/// Parakeet (the in-process default) returns text only, so its segments are empty.
pub async fn transcribe_wav_detailed(
    client: &reqwest::Client,
    host: &dyn SttHost,
    bytes: Vec<u8>,
    filename: String,
    engine: Option<&str>,
) -> Result<Transcription, String> {
    // Resolve the engine: an explicit non-empty selector wins; otherwise fall
    // back to the swappable cross-surface default (parakeet where compiled in).
    let engine = engine
        .map(str::trim)
        .filter(|s| !s.is_empty())
        .map(str::to_string)
        .unwrap_or_else(default_stt_engine);

    // Route to the in-process parakeet engine (default). Text only — no segments.
    //
    // No silent fallback to whisper on a lean build. `parakeet::transcribe` hard-
    // errors when `voice-parakeet` is off, and that error is surfaced verbatim on
    // purpose: reaching here at all means parakeet was *named* — either explicitly
    // per-request, via `RYU_STT_ENGINE`, or by a stored preference — because
    // [`default_stt_engine`] already picks whisper when the feature is absent.
    // Honouring a named engine by quietly running a different one is the silent
    // swap `ryu_sandbox::select_backend` refuses for the same reason: the caller
    // would get whisper's accuracy/latency while believing it measured parakeet.
    // The error text names both remedies (switch to whisper, or rebuild).
    if engine == "parakeet" {
        return parakeet::transcribe(bytes, host.parakeet_model_dir())
            .await
            .map(|text| Transcription {
                text,
                segments: Vec::new(),
            })
            .map_err(|e| format!("parakeet transcription failed: {e:#}"));
    }

    // Gateway-routed Whisper: the swappable cloud STT slot (default provider
    // OpenAI, default model Groq's `whisper-large-v3`). Core emits only the
    // per-attribute slot headers + a bearer to the Gateway — never a raw provider
    // key (CLAUDE.md §1: routing/measuring the model call is a Gateway concern).
    if engine == "gateway" {
        return transcribe_via_gateway(client, host, bytes).await;
    }

    // Default: forward to whisper.cpp's `/inference` multipart endpoint. Request
    // `verbose_json` so the response carries per-segment timings (whisper.cpp
    // degrades to a plain `{ "text": ... }` when it can't, which parses to no
    // segments — never an error).
    let part = reqwest::multipart::Part::bytes(bytes).file_name(filename);
    let form = reqwest::multipart::Form::new()
        .part("file", part)
        .text("response_format", "verbose_json");

    let url = format!("{}/inference", host.whisper_base_url());
    let resp = client
        .post(&url)
        .multipart(form)
        .send()
        .await
        .map_err(|e| {
            format!(
                "whisper voice engine not reachable at {url}: {e}. \
             Install + start `whispercpp` from the Store first."
            )
        })?;

    if !resp.status().is_success() {
        let status = resp.status();
        let body = resp.text().await.unwrap_or_default();
        return Err(format!("whisper returned {status}: {body}"));
    }

    // whisper.cpp returns `{ "text": "...", "segments": [...] }` for verbose_json.
    let value: Value = resp
        .json()
        .await
        .map_err(|e| format!("could not parse whisper response: {e}"))?;
    let text = value
        .get("text")
        .and_then(Value::as_str)
        .unwrap_or("")
        .trim()
        .to_string();
    let segments = parse_verbose_segments(&value);
    Ok(Transcription { text, segments })
}

/// Transcribe audio through the Gateway's `/v1/audio/transcriptions`, the
/// swappable cloud STT slot. The audio is base64-encoded into a JSON body (Core
/// carries no multipart to the Gateway) with the per-attribute slot headers that
/// tell the Gateway which provider/model to route to. Bearer is the Gateway
/// token slot — never a raw provider API key.
///
/// FLAG (whisper-gateway, pre-existing gap owned by `apps/gateway`, out of scope
/// here): for true end-to-end the Gateway's OpenAI provider must re-multipart
/// this base64 audio upstream — real Groq/OpenAI `/audio/transcriptions` need a
/// multipart file, but `providers/openai.rs` currently forwards JSON verbatim.
/// The Gateway owner must also point `modality_map[Stt]`/`base_url` at Groq. Until
/// then, set `RYU_CLIP_STT_ENGINE=whisper` (local whisper.cpp) to ship without
/// waiting — and captions-first means most YouTube ingests never hit Whisper.
async fn transcribe_via_gateway(
    client: &reqwest::Client,
    host: &dyn SttHost,
    bytes: Vec<u8>,
) -> Result<Transcription, String> {
    use base64::Engine as _;

    let audio_b64 = base64::engine::general_purpose::STANDARD.encode(&bytes);

    let provider = std::env::var("RYU_STT_GATEWAY_PROVIDER")
        .ok()
        .map(|s| s.trim().to_string())
        .filter(|s| !s.is_empty())
        .unwrap_or_else(|| "openai".to_string());
    let model = std::env::var("RYU_STT_GATEWAY_MODEL")
        .ok()
        .map(|s| s.trim().to_string())
        .filter(|s| !s.is_empty())
        .unwrap_or_else(|| "whisper-large-v3".to_string());

    let base = host.gateway_url();
    let base = base.trim_end_matches('/');
    let url = format!("{base}/v1/audio/transcriptions");
    let bearer = host.gateway_bearer()?;

    let payload = json!({
        "model": model,
        "file": audio_b64,
        "response_format": "verbose_json",
    });

    let resp = client
        .post(&url)
        .bearer_auth(bearer)
        .header("x-ryu-slot-stt-provider", &provider)
        .header("x-ryu-slot-stt-model", &model)
        .json(&payload)
        .send()
        .await
        .map_err(|e| format!("gateway STT unreachable at {url}: {e}"))?;

    if !resp.status().is_success() {
        let status = resp.status();
        let detail = resp.text().await.unwrap_or_default();
        return Err(format!("gateway STT returned {status}: {detail}"));
    }

    let value: Value = resp
        .json()
        .await
        .map_err(|e| format!("could not parse gateway STT response: {e}"))?;
    let text = value
        .get("text")
        .and_then(Value::as_str)
        .unwrap_or("")
        .trim()
        .to_string();
    let segments = parse_verbose_segments(&value);
    Ok(Transcription { text, segments })
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn parses_verbose_segments_seconds_to_ms() {
        let body = json!({
            "text": "hello world",
            "segments": [
                { "start": 0.0, "end": 1.5, "text": " hello" },
                { "start": 1.5, "end": 2.25, "text": " world " },
            ]
        });
        let segs = parse_verbose_segments(&body);
        assert_eq!(segs.len(), 2);
        assert_eq!(segs[0].start_ms, 0);
        assert_eq!(segs[0].end_ms, 1500);
        assert_eq!(segs[0].text, "hello");
        assert_eq!(segs[1].start_ms, 1500);
        assert_eq!(segs[1].end_ms, 2250);
        assert_eq!(segs[1].text, "world");
    }

    #[test]
    fn missing_or_malformed_segments_yield_empty() {
        assert!(parse_verbose_segments(&json!({ "text": "x" })).is_empty());
        assert!(parse_verbose_segments(&json!({ "segments": "not-an-array" })).is_empty());
        // An entry missing start/end is skipped, not an error.
        let partial = json!({ "segments": [ { "text": "no timings" } ] });
        assert!(parse_verbose_segments(&partial).is_empty());
    }

    #[test]
    fn default_engine_env_override_wins() {
        // Save/restore to avoid leaking into other tests in the same process.
        let prev = std::env::var("RYU_STT_ENGINE").ok();
        std::env::set_var("RYU_STT_ENGINE", "gateway");
        assert_eq!(default_stt_engine(), "gateway");
        std::env::set_var("RYU_STT_ENGINE", "   ");
        // Blank falls through to the compiled default (parakeet or whisper).
        let compiled = default_stt_engine();
        assert!(compiled == "parakeet" || compiled == "whisper");
        match prev {
            Some(v) => std::env::set_var("RYU_STT_ENGINE", v),
            None => std::env::remove_var("RYU_STT_ENGINE"),
        }
    }

    #[test]
    fn transcript_segment_serializes_camel_case() {
        let seg = TranscriptSegment {
            start_ms: 10,
            end_ms: 20,
            text: "hi".into(),
        };
        let v = serde_json::to_value(&seg).unwrap();
        assert_eq!(v["startMs"], 10);
        assert_eq!(v["endMs"], 20);
        assert_eq!(v["text"], "hi");
    }

    // ── negative / clamp edge cases for the parser ────────────────────────────

    #[test]
    fn verbose_segments_clamp_negative_timestamps_to_zero() {
        // A defensive engine could emit a negative offset; the parser clamps to 0
        // rather than underflowing the u64 cast.
        let body = json!({
            "segments": [ { "start": -1.0, "end": -0.5, "text": "  neg  " } ]
        });
        let segs = parse_verbose_segments(&body);
        assert_eq!(segs.len(), 1);
        assert_eq!(segs[0].start_ms, 0);
        assert_eq!(segs[0].end_ms, 0);
        assert_eq!(segs[0].text, "neg");
    }

    #[test]
    fn verbose_segment_missing_text_defaults_empty_but_keeps_timing() {
        // start/end present but no `text` → kept with an empty string, not dropped.
        let body = json!({ "segments": [ { "start": 1.0, "end": 2.0 } ] });
        let segs = parse_verbose_segments(&body);
        assert_eq!(segs.len(), 1);
        assert_eq!(segs[0].start_ms, 1000);
        assert_eq!(segs[0].end_ms, 2000);
        assert_eq!(segs[0].text, "");
    }

    #[test]
    fn transcription_and_segment_defaults_are_empty() {
        let t = Transcription::default();
        assert!(t.text.is_empty());
        assert!(t.segments.is_empty());
        let s = TranscriptSegment::default();
        assert_eq!(s.start_ms, 0);
        assert_eq!(s.end_ms, 0);
        assert!(s.text.is_empty());
        // Clone/Debug are derived — exercise them so they count.
        let _ = format!("{:?}", t.clone());
        let _ = format!("{:?}", s.clone());
    }

    // ── HTTP-proxy engine dispatch (whisper.cpp + Gateway) ────────────────────
    //
    // These stand up a loopback axum server so the success / non-2xx / bad-body
    // branches run deterministically without any real voice server or network.

    use std::path::PathBuf;
    use std::sync::{Arc, Mutex};

    use axum::{http::HeaderMap, http::StatusCode, Router};
    use tokio::net::TcpListener;

    /// Serializes the few tests that read/write process-global env vars
    /// (`RYU_STT_ENGINE`, `RYU_STT_GATEWAY_PROVIDER`, `RYU_STT_GATEWAY_MODEL`).
    static ENV_LOCK: Mutex<()> = Mutex::new(());
    fn env_guard() -> std::sync::MutexGuard<'static, ()> {
        ENV_LOCK.lock().unwrap_or_else(|e| e.into_inner())
    }

    struct FakeHost {
        whisper: String,
        gateway: String,
        bearer: Result<String, String>,
    }

    impl Default for FakeHost {
        fn default() -> Self {
            Self {
                whisper: "http://127.0.0.1:0".to_string(),
                gateway: "http://127.0.0.1:0".to_string(),
                bearer: Ok("testtoken".to_string()),
            }
        }
    }

    impl SttHost for FakeHost {
        fn whisper_base_url(&self) -> String {
            self.whisper.clone()
        }
        fn gateway_url(&self) -> String {
            self.gateway.clone()
        }
        fn gateway_bearer(&self) -> Result<String, String> {
            self.bearer.clone()
        }
        fn parakeet_model_dir(&self) -> PathBuf {
            PathBuf::from("/nonexistent/parakeet-model")
        }
    }

    #[derive(Clone, Default)]
    struct Captured {
        provider: Option<String>,
        model: Option<String>,
        authorization: Option<String>,
    }

    struct TestServer {
        addr: std::net::SocketAddr,
        captured: Arc<Mutex<Vec<Captured>>>,
        _handle: tokio::task::JoinHandle<()>,
    }

    impl TestServer {
        fn url(&self) -> String {
            format!("http://{}", self.addr)
        }
        fn last(&self) -> Captured {
            self.captured
                .lock()
                .unwrap()
                .last()
                .cloned()
                .unwrap_or_default()
        }
    }

    /// A loopback HTTP server that records the request headers of each call and
    /// replies with a fixed status + body on every path (fallback route).
    async fn spawn_server(status: StatusCode, resp_body: &'static str) -> TestServer {
        let captured: Arc<Mutex<Vec<Captured>>> = Arc::new(Mutex::new(Vec::new()));
        let cap = captured.clone();
        let app = Router::new().fallback(move |headers: HeaderMap, _body: String| {
            let cap = cap.clone();
            async move {
                let get = |k: &str| {
                    headers
                        .get(k)
                        .and_then(|v| v.to_str().ok())
                        .map(str::to_string)
                };
                cap.lock().unwrap().push(Captured {
                    provider: get("x-ryu-slot-stt-provider"),
                    model: get("x-ryu-slot-stt-model"),
                    authorization: get("authorization"),
                });
                (status, resp_body)
            }
        });
        let listener = TcpListener::bind("127.0.0.1:0").await.unwrap();
        let addr = listener.local_addr().unwrap();
        let handle = tokio::spawn(async move {
            let _ = axum::serve(listener, app).await;
        });
        TestServer {
            addr,
            captured,
            _handle: handle,
        }
    }

    /// A bound-then-dropped loopback address: connecting to it refuses instantly.
    async fn dead_url() -> String {
        let l = TcpListener::bind("127.0.0.1:0").await.unwrap();
        let addr = l.local_addr().unwrap();
        drop(l);
        format!("http://{addr}")
    }

    // ── whisper.cpp engine ────────────────────────────────────────────────────

    #[tokio::test]
    async fn whisper_success_parses_text_and_segments() {
        let server = spawn_server(
            StatusCode::OK,
            r#"{"text":"  hello there  ","segments":[{"start":0.0,"end":1.0,"text":" hello"},{"start":1.0,"end":2.0,"text":" there"}]}"#,
        )
        .await;
        let host = FakeHost {
            whisper: server.url(),
            ..FakeHost::default()
        };
        let client = reqwest::Client::new();
        let out = transcribe_wav_detailed(
            &client,
            &host,
            b"fakeaudio".to_vec(),
            "clip.wav".to_string(),
            Some("whisper"),
        )
        .await
        .expect("whisper transcription should succeed");
        assert_eq!(out.text, "hello there");
        assert_eq!(out.segments.len(), 2);
        assert_eq!(out.segments[0].text, "hello");
        assert_eq!(out.segments[1].end_ms, 2000);
    }

    #[tokio::test]
    async fn whisper_text_only_wrapper_returns_string() {
        let server = spawn_server(StatusCode::OK, r#"{"text":"just text"}"#).await;
        let host = FakeHost {
            whisper: server.url(),
            ..FakeHost::default()
        };
        let client = reqwest::Client::new();
        // The text-only wrapper `transcribe_wav` drops segments.
        let text = transcribe_wav(
            &client,
            &host,
            b"a".to_vec(),
            "c.wav".to_string(),
            Some("whisper"),
        )
        .await
        .unwrap();
        assert_eq!(text, "just text");
    }

    #[tokio::test]
    async fn whisper_non_success_status_is_error() {
        let server = spawn_server(StatusCode::INTERNAL_SERVER_ERROR, "model exploded").await;
        let host = FakeHost {
            whisper: server.url(),
            ..FakeHost::default()
        };
        let client = reqwest::Client::new();
        let err = transcribe_wav_detailed(
            &client,
            &host,
            b"a".to_vec(),
            "c.wav".to_string(),
            Some("whisper"),
        )
        .await
        .unwrap_err();
        assert!(err.contains("whisper returned 500"), "got: {err}");
        assert!(err.contains("model exploded"), "got: {err}");
    }

    #[tokio::test]
    async fn whisper_unparseable_body_is_error() {
        let server = spawn_server(StatusCode::OK, "this is not json").await;
        let host = FakeHost {
            whisper: server.url(),
            ..FakeHost::default()
        };
        let client = reqwest::Client::new();
        let err = transcribe_wav_detailed(
            &client,
            &host,
            b"a".to_vec(),
            "c.wav".to_string(),
            Some("whisper"),
        )
        .await
        .unwrap_err();
        assert!(
            err.contains("could not parse whisper response"),
            "got: {err}"
        );
    }

    #[tokio::test]
    async fn whisper_unreachable_host_is_error() {
        let host = FakeHost {
            whisper: dead_url().await,
            ..FakeHost::default()
        };
        let client = reqwest::Client::new();
        let err = transcribe_wav_detailed(
            &client,
            &host,
            b"a".to_vec(),
            "c.wav".to_string(),
            Some("whisper"),
        )
        .await
        .unwrap_err();
        assert!(err.contains("not reachable"), "got: {err}");
        assert!(
            err.contains("whispercpp"),
            "actionable hint expected: {err}"
        );
    }

    #[tokio::test]
    async fn empty_engine_selector_falls_through_to_compiled_default() {
        // Without `voice-parakeet` (the cargo-test build), the compiled default is
        // whisper, so a blank selector must hit the whisper arm. Hold ENV_LOCK
        // because this path reads `RYU_STT_ENGINE`.
        let _g = env_guard();
        let prev = std::env::var("RYU_STT_ENGINE").ok();
        std::env::remove_var("RYU_STT_ENGINE");
        let server = spawn_server(StatusCode::OK, r#"{"text":"fallback"}"#).await;
        let host = FakeHost {
            whisper: server.url(),
            ..FakeHost::default()
        };
        let client = reqwest::Client::new();
        let out = transcribe_wav_detailed(
            &client,
            &host,
            b"a".to_vec(),
            "c.wav".to_string(),
            Some("   "),
        )
        .await
        .unwrap();
        assert_eq!(out.text, "fallback");
        if let Some(v) = prev {
            std::env::set_var("RYU_STT_ENGINE", v);
        }
    }

    // ── Gateway engine ────────────────────────────────────────────────────────

    #[tokio::test]
    async fn gateway_success_sends_default_slot_headers_and_bearer() {
        let _g = env_guard();
        std::env::remove_var("RYU_STT_GATEWAY_PROVIDER");
        std::env::remove_var("RYU_STT_GATEWAY_MODEL");
        let server = spawn_server(
            StatusCode::OK,
            r#"{"text":" gw text ","segments":[{"start":0.0,"end":0.5,"text":"gw"}]}"#,
        )
        .await;
        let host = FakeHost {
            gateway: server.url(),
            bearer: Ok("secret-slot-token".to_string()),
            ..FakeHost::default()
        };
        let client = reqwest::Client::new();
        let out = transcribe_wav_detailed(
            &client,
            &host,
            b"a".to_vec(),
            "c.wav".to_string(),
            Some("gateway"),
        )
        .await
        .unwrap();
        assert_eq!(out.text, "gw text");
        assert_eq!(out.segments.len(), 1);
        let cap = server.last();
        assert_eq!(cap.provider.as_deref(), Some("openai"));
        assert_eq!(cap.model.as_deref(), Some("whisper-large-v3"));
        assert_eq!(
            cap.authorization.as_deref(),
            Some("Bearer secret-slot-token")
        );
    }

    #[tokio::test]
    async fn gateway_env_overrides_provider_and_model() {
        let _g = env_guard();
        std::env::set_var("RYU_STT_GATEWAY_PROVIDER", "groq");
        std::env::set_var("RYU_STT_GATEWAY_MODEL", "whisper-turbo");
        let server = spawn_server(StatusCode::OK, r#"{"text":"x"}"#).await;
        // Trailing slash on the gateway base must be trimmed before the path join.
        let host = FakeHost {
            gateway: format!("{}/", server.url()),
            ..FakeHost::default()
        };
        let client = reqwest::Client::new();
        let out = transcribe_wav_detailed(
            &client,
            &host,
            b"a".to_vec(),
            "c.wav".to_string(),
            Some("gateway"),
        )
        .await
        .unwrap();
        assert_eq!(out.text, "x");
        let cap = server.last();
        assert_eq!(cap.provider.as_deref(), Some("groq"));
        assert_eq!(cap.model.as_deref(), Some("whisper-turbo"));
        std::env::remove_var("RYU_STT_GATEWAY_PROVIDER");
        std::env::remove_var("RYU_STT_GATEWAY_MODEL");
    }

    #[tokio::test]
    async fn gateway_bearer_error_short_circuits() {
        let _g = env_guard();
        std::env::remove_var("RYU_STT_GATEWAY_PROVIDER");
        std::env::remove_var("RYU_STT_GATEWAY_MODEL");
        // No server is contacted — the bearer failure must propagate before the POST.
        let host = FakeHost {
            gateway: "http://127.0.0.1:0".to_string(),
            bearer: Err("no gateway token configured".to_string()),
            ..FakeHost::default()
        };
        let client = reqwest::Client::new();
        let err = transcribe_wav_detailed(
            &client,
            &host,
            b"a".to_vec(),
            "c.wav".to_string(),
            Some("gateway"),
        )
        .await
        .unwrap_err();
        assert_eq!(err, "no gateway token configured");
    }

    #[tokio::test]
    async fn gateway_non_success_status_is_error() {
        let _g = env_guard();
        std::env::remove_var("RYU_STT_GATEWAY_PROVIDER");
        std::env::remove_var("RYU_STT_GATEWAY_MODEL");
        let server = spawn_server(StatusCode::UNAUTHORIZED, "bad key").await;
        let host = FakeHost {
            gateway: server.url(),
            ..FakeHost::default()
        };
        let client = reqwest::Client::new();
        let err = transcribe_wav_detailed(
            &client,
            &host,
            b"a".to_vec(),
            "c.wav".to_string(),
            Some("gateway"),
        )
        .await
        .unwrap_err();
        assert!(err.contains("gateway STT returned 401"), "got: {err}");
        assert!(err.contains("bad key"), "got: {err}");
    }

    #[tokio::test]
    async fn gateway_unparseable_body_is_error() {
        let _g = env_guard();
        std::env::remove_var("RYU_STT_GATEWAY_PROVIDER");
        std::env::remove_var("RYU_STT_GATEWAY_MODEL");
        let server = spawn_server(StatusCode::OK, "<html>not json</html>").await;
        let host = FakeHost {
            gateway: server.url(),
            ..FakeHost::default()
        };
        let client = reqwest::Client::new();
        let err = transcribe_wav_detailed(
            &client,
            &host,
            b"a".to_vec(),
            "c.wav".to_string(),
            Some("gateway"),
        )
        .await
        .unwrap_err();
        assert!(
            err.contains("could not parse gateway STT response"),
            "got: {err}"
        );
    }

    #[tokio::test]
    async fn gateway_unreachable_host_is_error() {
        let _g = env_guard();
        std::env::remove_var("RYU_STT_GATEWAY_PROVIDER");
        std::env::remove_var("RYU_STT_GATEWAY_MODEL");
        let host = FakeHost {
            gateway: dead_url().await,
            ..FakeHost::default()
        };
        let client = reqwest::Client::new();
        let err = transcribe_wav_detailed(
            &client,
            &host,
            b"a".to_vec(),
            "c.wav".to_string(),
            Some("gateway"),
        )
        .await
        .unwrap_err();
        assert!(err.contains("gateway STT unreachable"), "got: {err}");
    }

    // ── parakeet dispatch (feature off in `cargo test`) ───────────────────────

    #[tokio::test]
    async fn parakeet_engine_without_feature_reports_not_built() {
        let host = FakeHost::default();
        let client = reqwest::Client::new();
        let err = transcribe_wav_detailed(
            &client,
            &host,
            b"a".to_vec(),
            "c.wav".to_string(),
            Some("parakeet"),
        )
        .await
        .unwrap_err();
        assert!(err.contains("parakeet transcription failed"), "got: {err}");
        assert!(err.contains("not built"), "got: {err}");
    }
}