8ad7c54da4
Block SSRF on media_url downloads (transcribe-url/summarize-url)
...
downloadDirect fetched any caller-supplied media_url with redirect-follow
and no host/scheme validation; the route is reachable via a self-chosen
X-Recap-Install-Id, so a caller could probe the operator's LAN or cloud
metadata (169.254.169.254). Add safe-url.js: assertPublicHttpUrl rejects
non-http(s) schemes and hosts resolving to private/loopback/link-local/
reserved ranges, and safeFetch follows redirects manually, re-validating
each hop. Route downloadDirect through it (covers transcribe-url,
summarize-url, and admin-test-run).
2026-06-13 16:23:26 -05:00
318c6c4b81
Wire new routes; identity, summarize-url, dashboard, admin
2026-06-13 13:36:30 -05:00
04dcf86fa4
Add TTS backends (ElevenLabs, Kokoro) and /relay/tts
2026-06-13 13:36:05 -05:00
0aa648706e
Add self-serve billing: tiers, credits, BTCPay and Zaprite
2026-06-13 13:36:05 -05:00
84d56c94c9
Add Spark Control hardware backend (diarize, queue, discovery)
2026-06-13 13:36:04 -05:00
705807e286
Add internal-meetings pipeline and post-hoc speaker tools
2026-06-13 13:35:53 -05:00
b7f75904bb
v0.2.11 /relay/capabilities + /relay/transcribe-url (yt-dlp in container)
2026-05-12 01:33:34 -05:00
0a0fa009ec
v0.2.10 hardware backend URL normalization + path fallback
2026-05-12 01:00:48 -05:00
8ffc3ffb73
v0.2.9 Gemini model selects + fallback chain
2026-05-12 00:45:41 -05:00
05ebeb5d51
v0.2.8 operator dashboard with per-call audit log + cost tracking
2026-05-12 00:26:59 -05:00
9af70302b1
v0.2.7 configurable Gemini models + per-pipeline backend preference
2026-05-12 00:15:07 -05:00
cd377683fb
v0.2.6 calendar-anniversary billing
2026-05-11 23:02:57 -05:00
45c8462fa2
v0.2.5 grouped actions
2026-05-11 22:12:02 -05:00
e612e8b8e8
v0.2.4 max-monthly union + /relay/policy
2026-05-11 22:02:38 -05:00
6797aae404
v0.2.3 Core tier 10/5/5 split + dynamic health version
2026-05-11 21:53:50 -05:00
07fe14010c
v0.2.2 balance peek endpoint
2026-05-11 21:34:31 -05:00
c9f051cd07
v0.2.1 model names config-driven
2026-05-11 20:27:19 -05:00
cccbee27e4
v0.2 hardware backend
2026-05-11 20:14:50 -05:00
b9d86fa303
initial relay scaffold
2026-05-11 20:03:27 -05:00
Keysat