mirror of
https://github.com/block/buzz.git
synced 2026-08-18 06:50:31 +02:00
1. Proxy SDP exchange through the relay (transcribe.rs) The relay no longer returns the raw OpenAI client secret to the desktop client. Instead, POST /transcribe/session returns an opaque session ID, and the new POST /transcribe/sdp endpoint accepts the client's SDP offer, looks up the cached secret, forwards it to OpenAI, and returns the SDP answer. This prevents a compromised client from reusing the bearer token to open non-transcription Realtime sessions under the operator account. 2. Allow send during the transcribing grace window (MessageComposer.tsx) Previously, pressing Enter/Send while isTranscribing was true (during the 3s grace window after user-stop) blocked the send entirely. Now the send proceeds with whatever content is already in the composer (transcript deltas have been applied incrementally) and cancels the dictation run so late events don't refill the cleared composer.