Spaces:
Sleeping
Sleeping
Commit History
-
security: require a shared service key on /tts and /extract-resume
Both compute endpoints were reachable by anyone who knew the Space URL. require_service_key checks x-service-key with hmac.compare_digest and fails closed when SERVICE_API_KEY is unset. /health stays open for platform probes. SERVICE_API_KEY is set on this Space and the backend already sends it.97e667f
-
Add Kokoro TTS (fp32 ONNX + misaki, cached, warmed) — /tts endpoint
Syncs the Space with the GitHub feat/kokoro-tts branch: Kokoro-82M via kokoro-onnx (fp32 = same audio quality as torch, 2-4x faster CPU, no torch in the image), misaki G2P, LRU response cache, startup warmup, concurrency guard, and optional Ogg/Opus output. The Dockerfile now downloads the fp32 model files at build. /tts degrades to 503 when unavailable so the web client falls back to browser speech. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>bf6e45c