40e42590cc
Release v1.6.0: a11y (WCAG AA), i18n (DE), PWA, perf, tests, Cast UX
...
Cast: card/list views, sort & filter, online voice picker, "Hear a line"
sample button, AI character notes, import auto-save.
Platform: WCAG 2.1 AA accessibility pass; German UI translation + language
picker; installable PWA with offline shell; GZip + content-visibility
virtualization + lazy images + Rehearser PCM memory cap (mobile stability);
Playwright suite (desktop + iPhone); opt-in minified bundle build.
Fixes: screenplay parser false characters; Fish-Speech inline-tag tones;
narrator/voice pickers list full library; clone GUI rework; fish.audio
import dedup; voice-ID rename; bulk-delete modal.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-03 14:23:35 +02:00
c7a1e35539
Security audit, modular refactor, and container-name field
...
Security fixes:
- Block /proc /sys /dev /run /boot in /api/browse-dirs (path traversal)
- Verify yt-dlp output stays inside TEMP_DIR before registration
- Remove Access-Control-Allow-Origin: * from /api/proxy-audio
- TTL-based temp file registry (default 2h) to prevent disk fill
Performance:
- Cache settings + routing rules in memory (mtime-checked); eliminates
per-request disk reads on every TTS call
UI:
- Add container name (optional) field to Docker stack TTS/STT engine
cards (Qwen3 Voice Clone, Voice Design, Custom Voice, Streaming,
NVIDIA Magpie, Parakeet) — enables Stop/Start/Restart buttons on
all engine cards, matching the existing Other Local TTS/STT cards
Refactor — backend:
- server.py: 5560 lines → 43-line entry point
- core/ package: constants, registry, validation, docker_client,
config, routing, audio, voice, presets, tts_helpers
- routes/ package: admin, settings, library, stt, sources, docker,
tts, conversation (FastAPI APIRouter modules)
- Dockerfile + docker-compose.yml updated to include core/ and routes/
Refactor — frontend:
- static/app.js: 8744 lines → 16 modules in static/js/
utils, voice-inspector, voice-sources, integrations, routing,
settings, voice-clone, voice-library, tts-preview, benchmark,
stt, init, engines, ai-backends, generation, conversation
- static/loader.js updated to load modules sequentially
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-29 12:13:07 +02:00