SocketSVC

New

• client: A CurseForge build that never downloads code from our server
• client: Drum machine toolbar layout, per-hit volume and presets
• client: F3 + 9 opens the voice graphs from the title screen too
• client: The F3 screen names F3 + 9 under vanilla's chart keys
• server: Broadcast-enabled switches server-wide broadcast off
• client: Group overlay fills half the screen, then shows who spoke last
• client: Keep the group overlay on screen while chat is open
• client: List a group's owner first, then you, then by name
• Show broadcasts in the game, and let admins switch them from the player list
• server: /ssvc-server broadcast lets a player be heard by everyone
• client: /ssvc report copies diagnostics for a bug report
• server: Name the listeners who are losing audio
• client: Say which device System default is
• client: Warn when macOS blocks the microphone
• client: Settings polish - mute hints, translated addon problems, setup mic meter, shortcuts
• update: Trust a backup signing key and allow retiring old ones
• client: Play soundboard folders as playlists
• Accept voice on the Minecraft port on the server mods and the proxy
• paper: Accept voice on the Minecraft port
• client: List players by name and move the players tab before instrument

Fixes

• client: The mic test keeps working while deafened
• client: Leaving a world closes the local audio channels placed in it
• client: Soundboard loopback opens its device off the lock and backs off when it won't open
• client: DeepFilterNet loads off the capture thread and is picked up once downloaded
• client: LAN voice handshake brackets IPv6 hosts
• client: Mic status getters read the capture once, so a disconnect can't null it mid-call
• client: Deafening no longer saves the config while holding the voice lock
• client: Every config collection stays thread-safe after loading
• client: A speaker that fails mid-call is reopened with the mic's backoff
• cinema: Play <url> is checked and Twitch-detected like source
• cinema: The yt-dlp timeout fires while its output is still open
• updater: Stop caching replaceable release assets as immutable
• updater: Limit Bearer guesses per address and refuse a short admin token
• updater: A cold instance that cannot read addons.json fails instead of caching an empty index
• updater: Read release asset text off the CDN for a public repository
• updater: A missing or broken channel manifest keeps the pins read before
• updater: A hand-made prerelease never lands on the release channel
• signing: Addon signatures bind loader and side
• client: The looper's buttons no longer wait on a stalled line-in
• client: A superseded instrument open closes its MIDI port
• client: A hostile sound file cannot use up memory
• client: Downloads stop at their listed size and leave no .part behind
• server: Placeholder and addon name lookups stop reading PlayerList off-thread
• server: A mute issued during a listener swap survives it
• server: /ssvc-server reload starts voice after a failed start
• paper: Shutdown stops the addons and closes the spatial audio core
• server: A rejected port change hands addons the restored listener
• proxy: A bad config.yml on reload leaves the running relay up
• server: The server's update check refuses a plain-http endpoint, as the client does
• protocol: Refuse an undecodable CREATE password and rows of only spaces
• protocol: Leave room for the soundboard kind byte in the largest client frame
• server: A player who leaves voice while being set broadcasting is not left broadcasting
• server: Can_hear and the test command apply mute, deafen and the speaker's range tier
• release: Resume tags the built commit and survives a failed next-version push
• release: Preflight blocks on a missing or untrusted signing key
• release: Untracked files make the tree dirty
• scripts: Prepare_hrtf writes the bank where the client loads it
• update: Replacing a same-named jar retries while Windows releases it
• cinema: A server cannot make players listen on ports or reach their LAN
• cinema: The legacy-Minecraft cinema jar is offered only to Fabric
• server: Permission mods control every node on Forge and NeoForge
• release: Modrinth and CurseForge upload only this release's Minecraft versions
• signing: Hash each jar before signing or listing its digest
• updater: Admin login works behind a TLS proxy and its cookie is Secure
• updater: Yt-dlp releases soak for two days before players get them
• updater: A failed tool checksum read is an error, not an older or missing tool
• updater: Page through releases until the stable release and every pin are seen
• client: A malformed or oversized icon pack fails the import instead of crashing
• client: A NaN range from an addon no longer silences all audio
• update: A failed update no longer leaves the game without the mod
• client: Updates and required addons no longer go backwards
• client: The update service and addon index are only asked over https
• client: Yt-dlp and FFmpeg only download from their upstream releases
• client: A voice server can no longer exhaust memory with one frame header
• server: Vanished players stay out of group snapshots and invites
• server: A disconnect no longer locks other players' connections
• server: A deafened player's mic is never relayed
• server: A close from another thread no longer stops the voice listener
• client: White icons on primary buttons stay readable
• client: No "not on voice" icon over NPCs
• client: Group overlay rows stay put when somebody hidden talks
• server: Leave speakers in other worlds out of the speaker list
• Broadcast labels bottom right, and no action bar where the HUD says it
• core: Keep the client's send queue as it was
• client: End cut-off text in an ellipsis and show it in full on hover
• updater: Keep serving the last good answer when GitHub fails
• proxy: Replace forwarding headers a player sent to the relay
• update: Stop a download that goes past its signed size
• client: Make the < arrow on choice rows step back
• client: Keep first-run choices when setup is closed with Esc
• client: Make the zh_tw wording consistent

Performance

• server: Stop copying every relayed frame a second time
• server: Stop the audio send queue dropping frames under load
• client: Stop redoing GUI work every frame and size Done to its label
• proxy: Run relay connections on virtual threads

Changes

• client: Name mouse buttons with InputConstants instead of 0/1
• Import types instead of spelling out fully-qualified names
• cinema: One helper strips a URL's query and fragment
• scripts: One scripts/.env reader for every credential

Plus 24 maintenance commits (build, docs, tests).

Full changelog: https://github.com/HippoDev03/SocketSVC/compare/v0.2.6...v0.2.7