Tiered access, security fixes, and v1 cleanup#7

Merged

Jacob-Lasky merged 10 commits into

mainfrom

feature/tts-test-mode

Jul 25, 2026

Commits on Mar 18, 2026

feat(tts): add ElevenLabs TTS provider and Aura-2 voice dropdown

Jake Lasky
and
claude
committed

Commits on Jul 25, 2026

feat(stt): route custom base_url endpoints through raw websockets

Jake Lasky
and
claude
committed
fix(deps): drop unused av, demote websocket-client to a dev dependency

Jake Lasky
and
claude
committed
fix(security): stop base_url leaking the server API key, contain uploads

Jake Lasky
and
claude
committed
chore: retire the v1 Flask remnants and fix the SDK-bump workflow

Jake Lasky
and
claude
committed
feat(security): gate the API and the stream behind a shared access token

Jake Lasky
and
claude
committed
feat(security): make access a budget instead of a wall, and fix review findings

Jake Lasky
and
claude
committed
ci: gate the deploy on the test suite

Jake Lasky
and
claude
committed
ci: bump action pins to current majors

Jake Lasky
and
claude
committed
ci: pin setup-uv to v9.0.0 exactly

Jake Lasky
and
claude
committed