flowspeech 0.2.0 → 0.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 77ffd1136c8cf4e44cffce0e60f46a55a785d3011f228eb894fa12674a5b0f3a
-  data.tar.gz: cbcf965a998720defa2dce9286b132b22cde88bf4e5c243bbae19e1e62579e27
+  metadata.gz: a3a94e1d6e6d165af4cbffe0b09add95d1cbe1a1e0bfef60a486f522b19eab09
+  data.tar.gz: fbb53b24d39482a7043052d7da00c7f79f33277f6e9ea860e109e90f80872d3c
 SHA512:
-  metadata.gz: 6af7176948a2a08e459f9ccc6afdb9efe51f6384086b54fa0806c3333cac25217174b69a3c6a30a1f0e4e3421b7b003ddc7f53ac9a280c0a54acb1fd78426ac5
-  data.tar.gz: 514fa7b5655ffa6ae3a4f84d486437939988f3bfbac8526c7faa8921b5edee280c67b5d6278c93782c049255b4de262f7a7e29db6b0b5bf4c961bc9c9e9772c9
+  metadata.gz: efb94ab0287fa9b3038ad490e109902542cacfea5884fcd950b29f32b2d4016a8c21aa3ca0738d3d239ab301c7c864791d7aa91fbeb2e981537fcf6c29d82d08
+  data.tar.gz: 5bf7e1ea264d6388d395b96e60f391132f6548911eba5cddbe8b7b1f45d87d9d12a4b0a47f5e7911cbd2d4786ead246e918e66e9c615ec01f9a4f75ff46944ef

data/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.2.1 - 2026-10-27
+
+- Suppress raw download transport causes so full_message does not reveal private result URLs; preserve recovery IDs.
+- Use generic API error messages and filter reflected key/URL values from error codes and traces, including terminal job errors.
+- Do not retry a known permanent HTTP error or redirect when its body is interrupted; audio downloads remain single-attempt operations.
+- Preserve received HTTP status, Retry-After and trace metadata when a response body is interrupted; retries keep the same UUID and bytes. Previously published 0.2.0 artifacts remain unchanged.
+
 ## 0.2.0
 
 - Validate RIFF/WAVE chunk sizes, 24000 Hz mono 16-bit PCM format and complete aligned nonempty audio data; preserve valid files byte-for-byte and reject malformed downloads without resubmitting.

data/README.md

@@ -5,12 +5,21 @@ using only the standard library at runtime. Requires an active paid Basic, Pro
 or Scale subscription (not a trial) and a key from [API settings](https://flowspeech.io/settings/apikeys).
 
 ```ruby
-gem "flowspeech", "~> 0.2.0"
+gem "flowspeech", "~> 0.2.1"
 ```
 
 Set `FLOWSPEECH_API_KEY` through your environment or secret manager. Use this gem
 on your server, never in a public client. Generation consumes account credits.
 
+Version 0.2.1 includes the safety fixes below. Previously published 0.2.0
+artifacts remain unchanged.
+API and terminal-job errors use local messages and filter reflected keys and
+private URLs. Download errors suppress raw causes, including `full_message`
+cause chains, while preserving recovery IDs. Interrupted responses retain HTTP
+status and cooldown; permanent failures do not retry. Do not log raw request
+objects or result URLs. Injected transports and application logging remain
+trusted boundaries.
+
 ## Generate WAV Audio
 
 ```ruby

data/lib/flowspeech/client.rb

@@ -170,6 +170,15 @@ module FlowSpeech
 
     private
 
+    def error_token(value, fallback = nil)
+      value.is_a?(String) && value.match?(/\A[A-Za-z0-9][A-Za-z0-9_.-]{0,127}\z/) && !value.include?(@api_key) ? value : fallback
+    end
+
+    def job_error(job)
+      code = job["error"].is_a?(Hash) ? job["error"]["code"] : nil
+      JobError.new(job.merge("error" => { "code" => error_token(code, "job_failed") }))
+    end
+
     def normalize_input(text, speakers, voice, segments, original)
       raise ArgumentError, "original_text is unsupported by v1" unless original.nil?
       unless segments.nil?
@@ -328,20 +337,20 @@ module FlowSpeech
         elsif job["status"] == "success" && job["resultDeleted"] != true
           return job
         else
-          raise JobError, job
+          raise job_error(job)
         end
       end
     end
 
     def download_bytes(job, deadline)
-      raise JobError, job unless job["status"] == "success" && job["resultDeleted"] != true
+      raise job_error(job) unless job["status"] == "success" && job["resultDeleted"] != true
       uri = safe_url(job.fetch("result").fetch("url"))
       req = Net::HTTP::Get.new(uri)
       response = exchange(uri, req, deadline, @max_download_bytes, @download_transport)
       raise Error, "Download HTTP #{response.code}; retry download with the same job" unless response.code.to_i == 200
       Wav.validate!(response.body.to_s) { remaining(deadline) }
     rescue IOError, SystemCallError, SocketError, Timeout::Error, OpenSSL::SSL::SSLError
-      raise Error, "Audio download failed; retry download with the same job"
+      raise Error, "Audio download failed; retry download with the same job", cause: nil
     end
 
     def request(method, path, body: nil, id: nil, deadline:)
@@ -349,6 +358,8 @@ module FlowSpeech
       attempts = 0
       loop do
         retry_after = nil
+        status = nil
+        trace_id = nil
         begin
           req = (method == :get ? Net::HTTP::Get : Net::HTTP::Post).new(uri)
           req["Authorization"] = "Bearer #{@api_key}"
@@ -358,7 +369,11 @@ module FlowSpeech
             req["Content-Type"] = "application/json"
             req.body = body
           end
-          response = exchange(uri, req, deadline, 1024 * 1024, @transport)
+          response = exchange(uri, req, deadline, 1024 * 1024, @transport) do |received|
+            status = received.code.to_i
+            retry_after = received["Retry-After"]
+            trace_id = error_token(received["X-Request-Id"])
+          end
           status = response.code.to_i
           retry_after = response["Retry-After"]
           data = begin
@@ -371,14 +386,17 @@ module FlowSpeech
             return [data, retry_after]
           end
           detail = data.is_a?(Hash) && data["error"].is_a?(Hash) ? data["error"] : {}
-          error = APIError.new(detail["message"] || "HTTP #{status}", status: status,
-            code: detail["code"], retryable: detail["retryable"] == true, retry_after: retry_after,
-            trace_id: data.is_a?(Hash) ? data["traceId"] || response["X-Request-Id"] : response["X-Request-Id"])
-          raise error unless status == 429 || (status >= 500 && error.retryable)
+          retryable = status == 429 || (status >= 500 && detail["retryable"] == true)
+          error = APIError.new("FlowSpeech API returned HTTP #{status}", status: status,
+            code: error_token(detail["code"], "api_error"), retryable: retryable, retry_after: retry_after,
+            trace_id: error_token(data.is_a?(Hash) ? data["traceId"] || response["X-Request-Id"] : response["X-Request-Id"]))
+          raise error unless error.retryable
         rescue IOError, SystemCallError, SocketError, Timeout::Error, OpenSSL::SSL::SSLError
-          error = Error.new("API transport failed")
+          retryable = status.nil? || (200..299).cover?(status) || status == 429 || (500..599).cover?(status)
+          error = APIError.new("API transport failed", status: status || 0,
+            error_code: "transport_error", retryable: retryable, retry_after: retry_after, trace_id: trace_id)
         end
-        raise error if attempts >= @max_retries
+        raise error if !error.retryable || attempts >= @max_retries
         attempts += 1
         pause(retry_after, deadline)
       end
@@ -395,6 +413,7 @@ module FlowSpeech
           http.max_retries = 0 if http.respond_to?(:max_retries=)
           result = nil
           http.request(request) do |res|
+            yield res if block_given?
             bytes = String.new(encoding: Encoding::BINARY)
             res.read_body do |chunk|
               remaining(deadline)
@@ -406,6 +425,7 @@ module FlowSpeech
           result
         end
       end
+      yield response if transport && block_given?
       remaining(deadline)
       raise Error, "Response exceeds byte limit" if response.body.to_s.bytesize > limit
       response

data/lib/flowspeech/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module FlowSpeech
-  VERSION = "0.2.0"
+  VERSION = "0.2.1"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: flowspeech
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.2.1
 platform: ruby
 authors:
 - FlowSpeech
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-10-26 00:00:00.000000000 Z
+date: 2026-10-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake