Skip to content

Harden runtime boundaries and restore regression signal#20

Open
jim-fung wants to merge 12 commits into
herimor:mainfrom
jim-fung:harden-runtime-boundaries
Open

Harden runtime boundaries and restore regression signal#20
jim-fung wants to merge 12 commits into
herimor:mainfrom
jim-fung:harden-runtime-boundaries

Conversation

@jim-fung
Copy link
Copy Markdown
Contributor

@jim-fung jim-fung commented May 5, 2026

Summary

  • Package default configs/assets and add validated config/resource loading.
  • Harden the WebSocket prompt boundary with path restrictions, upload limits, temp-file cleanup, and bounded generation.
  • Replace pickle-capable prompt/dataset loads, isolate model pool instances, stream generated audio outputs, and refresh the deterministic CLI regression fixture.

Verification

  • python3 -m py_compile voxtream/config.py voxtream/server.py voxtream/run.py voxtream/app.py voxtream/generator.py voxtream/utils/generator/text.py voxtream/utils/generator/prompt.py voxtream/utils/generator/setup.py voxtream/utils/model.py voxtream/model.py voxtream/dataset.py voxtream/train.py voxtream/trainer.py voxtream/utils/dataset/clap_ipa_aligner.py voxtream/utils/dataset/speaker_encoder.py voxtream/utils/dataset/mimi.py tests/test_config_loading.py tests/test_server_prompt_inputs.py tests/test_prompt_cache.py tests/test_model_pool.py tests/test_dataset_loading.py tests/test_run_output_regression.py
  • .venv/bin/python -m pytest tests/test_run_output_regression.py tests/test_config_loading.py tests/test_server_prompt_inputs.py tests/test_prompt_cache.py tests/test_model_pool.py tests/test_dataset_loading.py -q14 passed
  • LSP diagnostics: no errors for runtime/server/config/prompt/setup/regression files touched by the main hardening path.

Notes

This is intentionally split into atomic commits so maintainers can review or cherry-pick individual safety improvements.

jim-fung and others added 12 commits May 5, 2026 22:57
Cast prompt audio paths to strings before passing them to torchaudio's sox backend.

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant