mirror of
https://github.com/jambonz/speech-utils.git
synced 2026-10-03 23:33:59 +00:00
Dave HortonandClaude Opus 5
89fe0b87e9
With renderForCaching unset, synthPolly returns the mediajam streaming params string, and lib/synth-audio.js:337-340 embeds accessKeyId, secretAccessKey and sessionToken in it. The test interpolated that value into its assertion message, so run 32995180996 printed live (1 hour) AWS credentials into a public build log. Every other synth test in this file passes renderForCaching: true; this one was the only exception. It now does the same, and the assertion no longer interpolates opts.filePath at all, so the streaming params string cannot leak this way again. Latent since the test was written -- it only surfaced once AWS_ROLE_ARN was wired up and the test actually ran. Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
speech-utils 
TTS-related speech utilities for jambonz.