newsbubbles f285715e31 fix(voice): address review (SSRF guard, auth mapping, client timeout) ...

Validates the user-supplied backend URL (http/https only, blocks the link-local
metadata range) to prevent SSRF; remaps upstream 401/403 so a bad voice API key
isn't read as the app's own auth failing; adds a client-side AbortController timeout
on the read-aloud request so the button can't sit in loading if a request stalls.

2026-06-10 17:56:02 +01:00

..

constants

…

middleware

…

modules

Remove fast project display names option

2026-06-07 08:55:16 +00:00

routes

fix: include Claude cache tokens in usage

2026-06-05 21:38:05 +03:00

services

…

shared

feat: add opencode support (#762)

2026-05-28 10:50:41 +02:00

utils

…

claude-sdk.js

fix: include Claude cache tokens in usage

2026-06-05 21:38:05 +03:00

cli.js

…

cursor-cli.js

feat: add opencode support (#762)

2026-05-28 10:50:41 +02:00

gemini-cli.js

feat: add opencode support (#762)

2026-05-28 10:50:41 +02:00

gemini-response-handler.js

fix: refine token usage reporting (#807)

2026-05-30 10:09:27 +02:00

index.js

feat(voice): add optional speech-to-text input and read-aloud TTS

2026-06-08 00:48:24 +01:00

load-env.js

…

openai-codex.js

fix: refine token usage reporting (#807)

2026-05-30 10:09:27 +02:00

opencode-cli.js

fix: refine token usage reporting (#807)

2026-05-30 10:09:27 +02:00

opencode-cli.test.js

feat: add opencode support (#762)

2026-05-28 10:50:41 +02:00

sessionManager.js

…

tsconfig.json

…

voice-proxy.js

fix(voice): address review (SSRF guard, auth mapping, client timeout)

2026-06-10 17:56:02 +01:00