Update app.py

app.py

@@ -1,52 +1,161 @@
 import os
-import smtplib
-from email.mime.text import MIMEText
-import gradio as gr
 import time
+from pydub import AudioSegment
+from openai import OpenAI
+import gradio as gr
+
+# ========================
+# 🔐 設定區
+# ========================
+PASSWORD = os.getenv("APP_PASSWORD", "defaultpass")
+MAX_SIZE = 25 * 1024 * 1024
+client = OpenAI(api_key=os.getenv("OPENAI_API_KEY"))
+
+# ========================
+# ⚔️ 防暴力破解
+# ========================
+MAX_FAILED_IN_WINDOW = 10
+WINDOW_SECONDS = 24 * 3600
+LOCK_DURATION_SECONDS = 24 * 3600
+SHORT_BURST_LIMIT = 5
+SHORT_BURST_SECONDS = 60
+
+attempts = {}
+locked = {}
+
+def _now(): return int(time.time())
+
+def prune_old_attempts(sid):
+    cutoff = _now() - WINDOW_SECONDS
+    if sid in attempts:
+        attempts[sid] = [t for t in attempts[sid] if t >= cutoff]
+        if not attempts[sid]:
+            del attempts[sid]
+
+def check_lock(sid):
+    if sid in locked:
+        if _now() < locked[sid]:
+            remain = locked[sid] - _now()
+            return True, f"🔒 已被鎖定，請 {remain // 60} 分鐘後再試。"
+        else:
+            locked.pop(sid, None)
+            attempts.pop(sid, None)
+    prune_old_attempts(sid)
+    cnt = len(attempts.get(sid, []))
+    if cnt >= MAX_FAILED_IN_WINDOW:
+        locked[sid] = _now() + LOCK_DURATION_SECONDS
+        return True, f"🔒 嘗試過多，已鎖定 24 小時。"
+    return False, ""
+
+def record_failed_attempt(sid):
+    now = _now()
+    attempts.setdefault(sid, []).append(now)
+    prune_old_attempts(sid)
+    recent_cutoff = now - SHORT_BURST_SECONDS
+    recent = [t for t in attempts[sid] if t >= recent_cutoff]
+    if len(recent) >= SHORT_BURST_LIMIT:
+        locked[sid] = now + 300
+        return len(attempts[sid]), "⚠️ 多次快速嘗試，暫時鎖定5分鐘。"
+    return len(attempts[sid]), ""
+
+def clear_attempts(sid):
+    attempts.pop(sid, None)
+    locked.pop(sid, None)
+
+# ========================
+# 🎧 音訊轉錄
+# ========================
+def split_audio_if_needed(path):
+    size = os.path.getsize(path)
+    if size <= MAX_SIZE:
+        return [path]
+    audio = AudioSegment.from_file(path)
+    num = int(size / MAX_SIZE) + 1
+    chunk_ms = len(audio) / num
+    files = []
+    for i in range(num):
+        start, end = int(i * chunk_ms), int((i + 1) * chunk_ms)
+        chunk = audio[start:end]
+        fn = f"chunk_{i+1}.wav"
+        chunk.export(fn, format="wav")
+        files.append(fn)
+    return files
+
+def transcribe_core(path, model):
+    chunks = split_audio_if_needed(path)
+    txts = []
+    for f in chunks:
+        with open(f, "rb") as af:
+            res = client.audio.transcriptions.create(model=model, file=af, response_format="text")
+        txts.append(res)
+    full = "\n".join(txts)
+    res = client.chat.completions.create(
+        model="gpt-4o-mini",
+        messages=[{"role":"user","content":f"請用繁體中文摘要以下內容：\n{full}"}],
+        temperature=0.4,
+    )
+    summ = res.choices[0].message.content.strip()
+    return full, summ
+
+# ========================
+# 💬 主流程
+# ========================
+def transcribe_with_password(session_id, password, file, model_choice):
+    locked_flag, msg = check_lock(session_id)
+    if locked_flag:
+        return msg, "", ""
+    if password != PASSWORD:
+        cnt, msg2 = record_failed_attempt(session_id)
+        return msg2 or f"密碼錯誤（第 {cnt} 次）", "", ""
+    if not file:
+        return "請上傳音訊檔。", "", ""
+    clear_attempts(session_id)
+    full, summ = transcribe_core(file, model_choice)
+    return "✅ 轉錄完成", full, summ
+
+def ask_about_transcript(full_text, q):
+    if not full_text.strip():
+        return "⚠️ 尚未有轉錄內容"
+    if not q.strip():
+        return "請輸入問題"
+    prompt = f"以下是轉錄內容：\n{full_text}\n\n問題：{q}\n請用繁體中文回答。"
+    res = client.chat.completions.create(
+        model="gpt-4o-mini", messages=[{"role":"user","content":prompt}], temperature=0.6)
+    return res.choices[0].message.content.strip()
+
+# ========================
+# 🌐 Gradio 介面
+# ========================
+with gr.Blocks(theme=gr.themes.Soft()) as demo:
+    gr.Markdown("## 🎧 語音轉錄與摘要工具（防暴力破解）")
+
+    session_state = gr.State(value=None)
+
+    with gr.Row():
+        password_input = gr.Textbox(label="輸入密碼", type="password")
+        model_choice = gr.Dropdown(["whisper-1", "gpt-4o-mini-transcribe"], value="whisper-1", label="選擇模型")
+
+    audio_input = gr.Audio(type="filepath", label="上傳音訊 (.m4a, .aac, .wav)")
+    transcribe_btn = gr.Button("開始轉錄與摘要 🚀")
+    status_box = gr.Textbox(label="狀態", interactive=False)
+    transcript_box = gr.Textbox(label="完整轉錄文字", lines=10)
+    summary_box = gr.Textbox(label="摘要結果", lines=10)
+
+    with gr.Accordion("💬 進一步問 AI", open=False):
+        user_q = gr.Textbox(label="輸入問題", lines=2)
+        ask_btn = gr.Button("詢問 AI 🤔")
+        ai_reply = gr.Textbox(label="AI 回覆", lines=6)
+
+    def init_session():
+        import uuid
+        return str(uuid.uuid4())
+    demo.load(init_session, None, session_state)
 
-def check_env_and_email():
-    results = []
-    # 檢查環境變數
-    app_pw = os.getenv("APP_PASSWORD")
-    openai_key = os.getenv("OPENAI_API_KEY")
-    alert_email = os.getenv("ALERT_EMAIL")
-    alert_pass = os.getenv("ALERT_PASS")
-
-    results.append("===== 🔍 環境變數檢查 =====")
-    results.append(f"APP_PASSWORD = {app_pw}")
-    results.append(f"OPENAI_API_KEY = {'✅ 已設定' if openai_key else '❌ 未設定'}")
-    results.append(f"ALERT_EMAIL = {alert_email}")
-    results.append(f"ALERT_PASS = {'✅ 已設定' if alert_pass else '❌ 未設定'}")
-
-    # 測試寄信
-    if not alert_email or not alert_pass:
-        results.append("\n⚠️ 無法測試寄信，請先設定 ALERT_EMAIL 與 ALERT_PASS。")
-        return "\n".join(results)
-
-    results.append("\n===== 📧 開始測試寄信 =====")
-    msg = MIMEText(f"這是一封來自 Hugging Face Space 的測試信。\n時間：{time.ctime()}", "plain", "utf-8")
-    msg["Subject"] = "✅ 測試信件：Hugging Face SMTP 設定成功"
-    msg["From"] = alert_email
-    msg["To"] = alert_email
-
-    try:
-        with smtplib.SMTP_SSL("smtp.gmail.com", 465) as server:
-            server.login(alert_email, alert_pass)
-            server.sendmail(alert_email, alert_email, msg.as_string())
-        results.append(f"✅ 測試成功！郵件已寄出至 {alert_email}")
-    except Exception as e:
-        results.append(f"❌ 寄信失敗：{e}")
-
-    return "\n".join(results)
-
-
-with gr.Blocks(title="環境與寄信測試工具") as demo:
-    gr.Markdown("## 🧪 Hugging Face Space 環境變數與 Gmail 寄信測試")
-    gr.Markdown("此頁面用來確認 Variables 是否正確設定，以及 Gmail SMTP 是否可用。")
-
-    test_button = gr.Button("🚀 開始測試")
-    output_box = gr.Textbox(label="結果輸出", lines=15)
-
-    test_button.click(fn=check_env_and_email, outputs=output_box)
+    transcribe_btn.click(
+        transcribe_with_password,
+        [session_state, password_input, audio_input, model_choice],
+        [status_box, transcript_box, summary_box],
+    )
+    ask_btn.click(ask_about_transcript, [transcript_box, user_q], [ai_reply])
 
 demo.launch()