Remove orphaned react-qr-code entries from lockfile

bun.lock was out of date with package.json (react-qr-code was removed
without reinstalling), failing the frozen-lockfile install in CI.

.github/workflows/release.yml

@@ -340,64 +340,3 @@ jobs:
           name: voicebox-server-cuda-windows
           path: backend/dist/voicebox-server-cuda/
           retention-days: 7
-
-  build-rocm-windows:
-    runs-on: windows-latest
-    permissions:
-      contents: write
-
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Setup Python
-        uses: actions/setup-python@v5
-        with:
-          # ROCm wheels are cp312-cp312-specific — build_binary.py --rocm enforces this.
-          python-version: "3.12"
-          cache: "pip"
-
-      - name: Install Python dependencies
-        run: |
-          python -m pip install --upgrade pip
-          pip install pyinstaller
-          pip install -r backend/requirements.txt
-          pip install --no-deps chatterbox-tts
-          pip install --no-deps hume-tada
-
-      - name: Build ROCm server binary (onedir)
-        shell: bash
-        working-directory: backend
-        # build_binary.py --rocm pulls the official AMD Radeon torch + rocm_sdk
-        # wheels (rocm-rel-7.2.1) itself when ROCm torch is not already present,
-        # then restores the dev torch afterwards.
-        run: python build_binary.py --rocm
-
-      - name: Package into server core + ROCm libs archives
-        shell: bash
-        run: |
-          python scripts/package_rocm.py \
-            backend/dist/voicebox-server-rocm/ \
-            --output release-assets/ \
-            --rocm-libs-version rocm7.2-v1 \
-            --torch-compat ">=2.9.0,<2.10.0"
-
-      - name: Upload archives to GitHub Release
-        if: startsWith(github.ref, 'refs/tags/')
-        uses: softprops/action-gh-release@v2
-        with:
-          files: |
-            release-assets/voicebox-server-rocm.tar.gz
-            release-assets/voicebox-server-rocm.tar.gz.sha256
-            release-assets/rocm-libs-rocm7.2-v1.tar.gz
-            release-assets/rocm-libs-rocm7.2-v1.tar.gz.sha256
-            release-assets/rocm-libs.json
-          draft: true
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Upload onedir as workflow artifact
-        uses: actions/upload-artifact@v4
-        with:
-          name: voicebox-server-rocm-windows
-          path: backend/dist/voicebox-server-rocm/
-          retention-days: 7

CHANGELOG.md

@@ -5,17 +5,6 @@
 
 # Changelog
 
-## [Unreleased]
-
-### Linux
-
-- **ROCm setup works on Linux AMD systems.** Docker ROCm builds now keep PyTorch
-  on the ROCm wheel index during dependency installation, so later installs do
-  not replace it with CUDA wheels. The ROCm compose overlay no longer assumes
-  Ubuntu render/video group IDs; the container joins the groups that own the GPU
-  device nodes at startup. Native Linux setup now picks ROCm wheels for AMD GPUs
-  and CUDA wheels for NVIDIA GPUs before installing backend dependencies.
-
 ## [0.5.0] - 2026-04-22
 
 **The Capture release.** Voicebox stops being just a voice-cloning studio and becomes a full AI voice studio. Hold a key anywhere on your machine, speak, release — the transcript lands in the focused text field. Flip the primitive around and any MCP-aware agent — Claude Code, Cursor, Spacebot — speaks back through an on-screen pill in one of your cloned voices. A local LLM sits between the two, so transcripts come out clean and voice profiles can carry a personality that reshapes what the agent says before it gets spoken.

Dockerfile

@@ -1,15 +1,8 @@
 # ============================================================
-# Voicebox — Local TTS Server with Web UI
+# Voicebox — Local TTS Server with Web UI (CPU)
 # 3-stage build: Frontend → Python deps → Runtime
-#
-# Build variants:
-#   CPU (default):  docker compose up --build
-#   ROCm (AMD GPU): docker compose -f docker-compose.yml -f docker-compose.rocm.yml up --build
 # ============================================================
 
-# Top-level ARG so it is visible to all stages.
-ARG PYTORCH_VARIANT=cpu
-
 # === Stage 1: Build frontend ===
 FROM oven/bun:1 AS frontend
 
@@ -31,9 +24,6 @@ RUN cd web && bunx --bun vite build
 # === Stage 2: Build Python dependencies ===
 FROM python:3.11-slim AS backend-builder
 
-# Re-declare ARG inside the stage (Docker scoping requirement).
-ARG PYTORCH_VARIANT=cpu
-
 WORKDIR /build
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
@@ -44,19 +34,6 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 RUN pip install --no-cache-dir --upgrade pip
 
 COPY backend/requirements.txt .
-
-# ROCm wheel index. Default 6.3 (RDNA1/2/3); set ROCM_VERSION=7.2 for RDNA4.
-ARG ROCM_VERSION=6.3
-
-# For ROCm, make the PyTorch ROCm index primary so every install below resolves
-# torch to ROCm wheels instead of the default CUDA build.
-RUN if [ "$PYTORCH_VARIANT" = "rocm" ]; then \
-      pip install --no-cache-dir --prefix=/install \
-        --index-url "https://download.pytorch.org/whl/rocm${ROCM_VERSION}" \
-        torch torchaudio && \
-      printf '[global]\nindex-url = https://download.pytorch.org/whl/rocm%s\nextra-index-url = https://pypi.org/simple\n' "$ROCM_VERSION" > /etc/pip.conf; \
-    fi
-
 RUN pip install --no-cache-dir --prefix=/install -r requirements.txt
 RUN pip install --no-cache-dir --prefix=/install --no-deps chatterbox-tts
 RUN pip install --no-cache-dir --prefix=/install --no-deps hume-tada
@@ -67,17 +44,16 @@ RUN pip install --no-cache-dir --prefix=/install \
 # === Stage 3: Runtime ===
 FROM python:3.11-slim
 
-# Create non-root user; the entrypoint joins GPU device groups at runtime.
+# Create non-root user for security
 RUN groupadd -r voicebox && \
     useradd -r -g voicebox -m -s /bin/bash voicebox
 
 WORKDIR /app
 
-# Install only runtime system dependencies (gosu drops root in the entrypoint)
+# Install only runtime system dependencies
 RUN apt-get update && apt-get install -y --no-install-recommends \
     ffmpeg \
     curl \
-    gosu \
     && rm -rf /var/lib/apt/lists/*
 
 # Copy installed Python packages from builder stage
@@ -93,6 +69,9 @@ COPY --from=frontend --chown=voicebox:voicebox /build/web/dist /app/frontend/
 RUN mkdir -p /app/data/generations /app/data/profiles /app/data/cache \
     && chown -R voicebox:voicebox /app/data
 
+# Switch to non-root user
+USER voicebox
+
 # Expose the API port
 EXPOSE 17493
 
@@ -100,7 +79,5 @@ EXPOSE 17493
 HEALTHCHECK --interval=30s --timeout=10s --retries=3 --start-period=60s \
     CMD curl -f http://localhost:17493/health || exit 1
 
-# Entrypoint joins GPU groups then drops to the voicebox user
-COPY --chmod=755 scripts/rocm-entrypoint.sh /usr/local/bin/entrypoint.sh
-ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
+# Start the FastAPI server
 CMD ["uvicorn", "backend.main:app", "--host", "0.0.0.0", "--port", "17493"]

app/src/components/ServerSettings/GpuAcceleration.tsx

@@ -5,7 +5,7 @@ import { Button } from '@/components/ui/button';
 import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/card';
 import { Progress } from '@/components/ui/progress';
 import { apiClient } from '@/lib/api/client';
-import type { CudaDownloadProgress, RocmDownloadProgress } from '@/lib/api/types';
+import type { CudaDownloadProgress } from '@/lib/api/types';
 import { useServerHealth } from '@/lib/hooks/useServer';
 import { usePlatform } from '@/platform/PlatformContext';
 import { useServerStore } from '@/stores/serverStore';
@@ -21,9 +21,6 @@ export function GpuAcceleration() {
   const [restartPhase, setRestartPhase] = useState<RestartPhase>('idle');
   const [error, setError] = useState<string | null>(null);
   const [downloadProgress, setDownloadProgress] = useState<CudaDownloadProgress | null>(null);
-  const [rocmDownloadProgress, setRocmDownloadProgress] = useState<RocmDownloadProgress | null>(
-    null,
-  );
   const healthPollRef = useRef<ReturnType<typeof setInterval> | null>(null);
 
   // Query CUDA backend status
@@ -39,26 +36,10 @@ export function GpuAcceleration() {
     enabled: !!health, // Only fetch when backend is reachable
   });
 
-  // Query ROCm backend status
-  const {
-    data: rocmStatus,
-    isLoading: _rocmStatusLoading,
-    refetch: refetchRocmStatus,
-  } = useQuery({
-    queryKey: ['rocm-status', serverUrl],
-    queryFn: () => apiClient.getRocmStatus(),
-    refetchInterval: (query) => (query.state.status === 'pending' ? false : 10000),
-    retry: 1,
-    enabled: !!health, // Only fetch when backend is reachable
-  });
-
   // Derived state
   const isCurrentlyCuda = health?.backend_variant === 'cuda';
-  const isCurrentlyRocm = health?.backend_variant === 'rocm';
   const cudaAvailable = cudaStatus?.available ?? false;
   const cudaDownloading = cudaStatus?.downloading ?? false;
-  const rocmAvailable = rocmStatus?.available ?? false;
-  const rocmDownloading = rocmStatus?.downloading ?? false;
 
   // Clean up health poll on unmount
   useEffect(() => {
@@ -70,7 +51,7 @@ export function GpuAcceleration() {
     };
   }, []);
 
-  // SSE progress tracking during CUDA download
+  // SSE progress tracking during download
   useEffect(() => {
     if (!cudaDownloading || !serverUrl) {
       return;
@@ -107,43 +88,6 @@ export function GpuAcceleration() {
     };
   }, [cudaDownloading, serverUrl, refetchCudaStatus]);
 
-  // SSE progress tracking during ROCm download
-  useEffect(() => {
-    if (!rocmDownloading || !serverUrl) {
-      return;
-    }
-
-    const eventSource = new EventSource(`${serverUrl}/backend/rocm-progress`);
-
-    eventSource.onmessage = (event) => {
-      try {
-        const data = JSON.parse(event.data) as RocmDownloadProgress;
-        setRocmDownloadProgress(data);
-
-        if (data.status === 'complete') {
-          eventSource.close();
-          setRocmDownloadProgress(null);
-          refetchRocmStatus();
-        } else if (data.status === 'error') {
-          eventSource.close();
-          setError(data.error || 'Download failed');
-          setRocmDownloadProgress(null);
-          refetchRocmStatus();
-        }
-      } catch (e) {
-        console.error('Error parsing ROCm progress event:', e);
-      }
-    };
-
-    eventSource.onerror = () => {
-      eventSource.close();
-    };
-
-    return () => {
-      eventSource.close();
-    };
-  }, [rocmDownloading, serverUrl, refetchRocmStatus]);
-
   // Start aggressive health polling during restart
   const startHealthPolling = useCallback(() => {
     if (healthPollRef.current) return;
@@ -169,7 +113,7 @@ export function GpuAcceleration() {
     }, 1000);
   }, [queryClient]);
 
-  const handleDownloadCuda = async () => {
+  const handleDownload = async () => {
     setError(null);
     try {
       await apiClient.downloadCudaBackend();
@@ -184,21 +128,6 @@ export function GpuAcceleration() {
     }
   };
 
-  const handleDownloadRocm = async () => {
-    setError(null);
-    try {
-      await apiClient.downloadRocmBackend();
-      refetchRocmStatus();
-    } catch (e: unknown) {
-      const msg = e instanceof Error ? e.message : 'Failed to start download';
-      if (msg.includes('already downloaded')) {
-        refetchRocmStatus();
-      } else {
-        setError(msg);
-      }
-    }
-  };
-
   const handleRestart = async () => {
     setError(null);
     setRestartPhase('stopping');
@@ -225,17 +154,18 @@ export function GpuAcceleration() {
     }
   };
 
-  const handleSwitchToCpuFromCuda = async () => {
+  const handleSwitchToCpu = async () => {
+    // To switch to CPU: delete the CUDA binary, then restart.
+    // start_server always prefers CUDA if present, so we must remove it first.
     setError(null);
     setRestartPhase('stopping');
 
     try {
-      // Tell Rust launcher to skip GPU binary detection on next start.
-      // We cannot delete an active .exe on Windows, so we override instead.
-      await platform.lifecycle.setBackendOverride('cpu');
+      await apiClient.deleteCudaBackend();
       setRestartPhase('waiting');
       startHealthPolling();
       await platform.lifecycle.restartServer();
+      // Invoke resolved — server is likely ready
       if (healthPollRef.current) {
         clearInterval(healthPollRef.current);
         healthPollRef.current = null;
@@ -254,36 +184,7 @@ export function GpuAcceleration() {
     }
   };
 
-  const handleSwitchToCpuFromRocm = async () => {
-    setError(null);
-    setRestartPhase('stopping');
-
-    try {
-      // Tell Rust launcher to skip GPU binary detection on next start.
-      // We cannot delete an active .exe on Windows, so we override instead.
-      await platform.lifecycle.setBackendOverride('cpu');
-      setRestartPhase('waiting');
-      startHealthPolling();
-      await platform.lifecycle.restartServer();
-      if (healthPollRef.current) {
-        clearInterval(healthPollRef.current);
-        healthPollRef.current = null;
-      }
-      setRestartPhase('ready');
-      queryClient.invalidateQueries();
-      setTimeout(() => setRestartPhase('idle'), 2000);
-    } catch (e: unknown) {
-      setRestartPhase('idle');
-      if (healthPollRef.current) {
-        clearInterval(healthPollRef.current);
-        healthPollRef.current = null;
-      }
-      setError(e instanceof Error ? e.message : 'Failed to switch to CPU');
-      refetchRocmStatus();
-    }
-  };
-
-  const handleDeleteCuda = async () => {
+  const handleDelete = async () => {
     setError(null);
     try {
       await apiClient.deleteCudaBackend();
@@ -293,16 +194,6 @@ export function GpuAcceleration() {
     }
   };
 
-  const handleDeleteRocm = async () => {
-    setError(null);
-    try {
-      await apiClient.deleteRocmBackend();
-      refetchRocmStatus();
-    } catch (e: unknown) {
-      setError(e instanceof Error ? e.message : 'Failed to delete ROCm backend');
-    }
-  };
-
   const formatBytes = (bytes: number): string => {
     if (bytes === 0) return '0 B';
     const k = 1024;
@@ -314,7 +205,7 @@ export function GpuAcceleration() {
   // Don't render until health data is available
   if (!health) return null;
 
-  // If the system already has native GPU (MPS, ROCm active, etc.), only show info - no download needed
+  // If the system already has native GPU (MPS, etc.), only show info - no CUDA needed
   const hasNativeGpu =
     health.gpu_available &&
     !isCurrentlyCuda &&
@@ -350,6 +241,8 @@ export function GpuAcceleration() {
           )}
         </div>
 
+        {/* Native GPU detected - no CUDA download needed */}
+
         {/* Currently running CUDA - show switch back to CPU */}
         {isCurrentlyCuda && platform.metadata.isTauri && (
           <>
@@ -368,12 +261,7 @@ export function GpuAcceleration() {
                   Running with CUDA GPU acceleration. Switch back to CPU if needed (you can
                   re-download later).
                 </p>
-                <Button
-                  onClick={handleSwitchToCpuFromCuda}
-                  variant="outline"
-                  className="w-full"
-                  size="sm"
-                >
+                <Button onClick={handleSwitchToCpu} variant="outline" className="w-full" size="sm">
                   <RotateCw className="h-4 w-4 mr-2" />
                   Switch to CPU Backend
                 </Button>
@@ -388,207 +276,39 @@ export function GpuAcceleration() {
           </>
         )}
 
-        {/* Currently running ROCm - show switch back to CPU */}
-        {isCurrentlyRocm && platform.metadata.isTauri && (
+        {/* CUDA download/manage section - show when no native GPU and not currently running CUDA */}
+        {!hasNativeGpu && !isCurrentlyCuda && (
           <>
-            {restartPhase !== 'idle' ? (
-              <div className="flex items-center gap-2 p-3 rounded-lg bg-primary/5 border">
-                <Loader2 className="h-4 w-4 animate-spin" />
-                <span className="text-sm">
-                  {restartPhase === 'stopping' && 'Stopping server...'}
-                  {restartPhase === 'waiting' && 'Restarting server...'}
-                  {restartPhase === 'ready' && 'Server restarted successfully!'}
-                </span>
-              </div>
-            ) : (
-              <div className="space-y-3">
-                <p className="text-sm text-muted-foreground">
-                  Running with ROCm GPU acceleration for AMD. Switch back to CPU if needed (you can
-                  re-download later).
-                </p>
-                <Button
-                  onClick={handleSwitchToCpuFromRocm}
-                  variant="outline"
-                  className="w-full"
-                  size="sm"
-                >
-                  <RotateCw className="h-4 w-4 mr-2" />
-                  Switch to CPU Backend
-                </Button>
-              </div>
-            )}
-            {error && (
-              <div className="flex items-center gap-2 text-sm text-destructive">
-                <AlertCircle className="h-4 w-4 shrink-0" />
-                <span>{error}</span>
-              </div>
-            )}
-          </>
-        )}
-
-        {/* Backend download/manage sections - show when no native GPU and not currently running GPU */}
-        {!hasNativeGpu && !isCurrentlyCuda && !isCurrentlyRocm && (
-          <>
-            {/* CUDA Section */}
-            <div className="space-y-4">
-              <div className="text-sm font-medium">NVIDIA (CUDA)</div>
-
-              {/* CUDA Download progress */}
-              {cudaDownloading && downloadProgress && (
-                <div className="space-y-2">
-                  <div className="flex items-center justify-between text-sm">
-                    <div className="flex items-center gap-2">
-                      <Loader2 className="h-4 w-4 animate-spin" />
-                      <span>
-                        {downloadProgress.filename ||
-                          (cudaAvailable
-                            ? 'Updating CUDA backend...'
-                            : 'Downloading CUDA backend...')}
-                      </span>
-                    </div>
-                    {downloadProgress.total > 0 && (
-                      <span className="text-muted-foreground">
-                        {downloadProgress.progress.toFixed(1)}%
-                      </span>
-                    )}
+            {/* Download progress (manual download or auto-update) */}
+            {cudaDownloading && downloadProgress && (
+              <div className="space-y-2">
+                <div className="flex items-center justify-between text-sm">
+                  <div className="flex items-center gap-2">
+                    <Loader2 className="h-4 w-4 animate-spin" />
+                    <span>
+                      {downloadProgress.filename ||
+                        (cudaAvailable
+                          ? 'Updating CUDA backend...'
+                          : 'Downloading CUDA backend...')}
+                    </span>
                   </div>
                   {downloadProgress.total > 0 && (
-                    <>
-                      <Progress value={downloadProgress.progress} className="h-2" />
-                      <div className="text-xs text-muted-foreground">
-                        {formatBytes(downloadProgress.current)} /{' '}
-                        {formatBytes(downloadProgress.total)}
-                      </div>
-                    </>
+                    <span className="text-muted-foreground">
+                      {downloadProgress.progress.toFixed(1)}%
+                    </span>
                   )}
                 </div>
-              )}
-
-              {/* CUDA Actions */}
-              {restartPhase === 'idle' && !cudaDownloading && (
-                <div className="space-y-2">
-                  {!cudaAvailable && (
-                    <div className="space-y-3">
-                      <p className="text-sm text-muted-foreground">
-                        Download the CUDA backend (~2.4 GB) for NVIDIA GPU acceleration. Requires an
-                        NVIDIA GPU with CUDA support.
-                      </p>
-                      <Button onClick={handleDownloadCuda} className="w-full" size="sm">
-                        <Download className="h-4 w-4 mr-2" />
-                        Download CUDA Backend
-                      </Button>
+                {downloadProgress.total > 0 && (
+                  <>
+                    <Progress value={downloadProgress.progress} className="h-2" />
+                    <div className="text-xs text-muted-foreground">
+                      {formatBytes(downloadProgress.current)} /{' '}
+                      {formatBytes(downloadProgress.total)}
                     </div>
-                  )}
-
-                  {cudaAvailable && platform.metadata.isTauri && (
-                    <div className="space-y-3">
-                      <p className="text-sm text-muted-foreground">
-                        CUDA backend is downloaded and ready. Restart the server to enable GPU
-                        acceleration.
-                      </p>
-                      <Button onClick={handleRestart} className="w-full" size="sm">
-                        <RotateCw className="h-4 w-4 mr-2" />
-                        Switch to CUDA Backend
-                      </Button>
-                    </div>
-                  )}
-
-                  {cudaAvailable && (
-                    <Button
-                      onClick={handleDeleteCuda}
-                      variant="ghost"
-                      className="w-full text-muted-foreground hover:text-destructive"
-                      size="sm"
-                    >
-                      <Trash2 className="h-4 w-4 mr-2" />
-                      Remove CUDA Backend
-                    </Button>
-                  )}
-                </div>
-              )}
-            </div>
-
-            {/* Divider */}
-            <div className="border-t" />
-
-            {/* ROCm Section */}
-            <div className="space-y-4">
-              <div className="text-sm font-medium">AMD (ROCm)</div>
-
-              {/* ROCm Download progress */}
-              {rocmDownloading && rocmDownloadProgress && (
-                <div className="space-y-2">
-                  <div className="flex items-center justify-between text-sm">
-                    <div className="flex items-center gap-2">
-                      <Loader2 className="h-4 w-4 animate-spin" />
-                      <span>
-                        {rocmDownloadProgress.filename ||
-                          (rocmAvailable
-                            ? 'Updating ROCm backend...'
-                            : 'Downloading ROCm backend...')}
-                      </span>
-                    </div>
-                    {rocmDownloadProgress.total > 0 && (
-                      <span className="text-muted-foreground">
-                        {rocmDownloadProgress.progress.toFixed(1)}%
-                      </span>
-                    )}
-                  </div>
-                  {rocmDownloadProgress.total > 0 && (
-                    <>
-                      <Progress value={rocmDownloadProgress.progress} className="h-2" />
-                      <div className="text-xs text-muted-foreground">
-                        {formatBytes(rocmDownloadProgress.current)} /{' '}
-                        {formatBytes(rocmDownloadProgress.total)}
-                      </div>
-                    </>
-                  )}
-                </div>
-              )}
-
-              {/* ROCm Actions */}
-              {restartPhase === 'idle' && !rocmDownloading && (
-                <div className="space-y-2">
-                  {!rocmAvailable && (
-                    <div className="space-y-3">
-                      <p className="text-sm text-muted-foreground">
-                        Download the ROCm backend (~2-3 GB) for AMD GPU acceleration. Requires an
-                        AMD Radeon GPU with ROCm support.
-                      </p>
-                      <Button onClick={handleDownloadRocm} className="w-full" size="sm">
-                        <Download className="h-4 w-4 mr-2" />
-                        Download AMD ROCm Backend
-                      </Button>
-                    </div>
-                  )}
-
-                  {rocmAvailable && platform.metadata.isTauri && (
-                    <div className="space-y-3">
-                      <p className="text-sm text-muted-foreground">
-                        ROCm backend is downloaded and ready. Restart the server to enable AMD GPU
-                        acceleration.
-                      </p>
-                      <Button onClick={handleRestart} className="w-full" size="sm">
-                        <RotateCw className="h-4 w-4 mr-2" />
-                        Switch to ROCm Backend
-                      </Button>
-                    </div>
-                  )}
-
-                  {rocmAvailable && (
-                    <Button
-                      onClick={handleDeleteRocm}
-                      variant="ghost"
-                      className="w-full text-muted-foreground hover:text-destructive"
-                      size="sm"
-                    >
-                      <Trash2 className="h-4 w-4 mr-2" />
-                      Remove ROCm Backend
-                    </Button>
-                  )}
-                </div>
-              )}
-            </div>
+                  </>
+                )}
+              </div>
+            )}
 
             {/* Restart in progress */}
             {restartPhase !== 'idle' && (
@@ -609,6 +329,52 @@ export function GpuAcceleration() {
                 <span>{error}</span>
               </div>
             )}
+
+            {/* Actions */}
+            {restartPhase === 'idle' && !cudaDownloading && (
+              <div className="space-y-2">
+                {/* Not downloaded yet - show download button */}
+                {!cudaAvailable && (
+                  <div className="space-y-3">
+                    <p className="text-sm text-muted-foreground">
+                      Download the CUDA backend (~2.4 GB) for NVIDIA GPU acceleration. Requires an
+                      NVIDIA GPU with CUDA support.
+                    </p>
+                    <Button onClick={handleDownload} className="w-full" size="sm">
+                      <Download className="h-4 w-4 mr-2" />
+                      Download CUDA Backend
+                    </Button>
+                  </div>
+                )}
+
+                {/* Downloaded but not active - show switch button */}
+                {cudaAvailable && platform.metadata.isTauri && (
+                  <div className="space-y-3">
+                    <p className="text-sm text-muted-foreground">
+                      CUDA backend is downloaded and ready. Restart the server to enable GPU
+                      acceleration.
+                    </p>
+                    <Button onClick={handleRestart} className="w-full" size="sm">
+                      <RotateCw className="h-4 w-4 mr-2" />
+                      Switch to CUDA Backend
+                    </Button>
+                  </div>
+                )}
+
+                {/* Delete option when downloaded (and not active) */}
+                {cudaAvailable && (
+                  <Button
+                    onClick={handleDelete}
+                    variant="ghost"
+                    className="w-full text-muted-foreground "
+                    size="sm"
+                  >
+                    <Trash2 className="h-4 w-4 mr-2" />
+                    Remove CUDA Backend
+                  </Button>
+                )}
+              </div>
+            )}
           </>
         )}
       </CardContent>

app/src/components/ServerTab/CloudSection.tsx

@@ -0,0 +1,151 @@
+import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query';
+import { Cloud, Loader2 } from 'lucide-react';
+import { useEffect, useState } from 'react';
+import { Button } from '@/components/ui/button';
+import { useToast } from '@/components/ui/use-toast';
+import { apiClient } from '@/lib/api/client';
+import { SettingRow, SettingSection } from './SettingRow';
+
+// "Log in with browser" device pairing. The backend opens the system browser
+// and completes the code exchange; here we just kick it off and poll status
+// until the link goes live. The API key never touches the frontend.
+export function CloudSection() {
+  const { toast } = useToast();
+  const queryClient = useQueryClient();
+  const [polling, setPolling] = useState(false);
+
+  const { data: status } = useQuery({
+    queryKey: ['cloud-status'],
+    queryFn: () => apiClient.getCloudStatus(),
+    refetchInterval: polling ? 2000 : false,
+  });
+
+  const connected = status?.connected ?? false;
+
+  // Once the browser flow completes, stop polling and celebrate.
+  useEffect(() => {
+    if (connected && polling) {
+      setPolling(false);
+      toast({
+        title: 'Connected to Voicebox Cloud',
+        description: `Linked as ${status?.device_name ?? 'this device'}.`,
+      });
+    }
+  }, [connected, polling, status?.device_name, toast]);
+
+  // Give up after two minutes so an abandoned browser flow doesn't leave the
+  // button stuck on "Waiting for browser…". The backend state stays valid for
+  // ten, so the user can simply start again.
+  useEffect(() => {
+    if (!polling) return;
+    const timeoutId = window.setTimeout(() => {
+      setPolling(false);
+      toast({
+        title: 'Sign-in timed out',
+        description: 'The browser sign-in was not completed. Try again.',
+        variant: 'destructive',
+      });
+    }, 120_000);
+    return () => window.clearTimeout(timeoutId);
+  }, [polling, toast]);
+
+  const startLogin = useMutation({
+    mutationFn: () => apiClient.startCloudLogin(),
+    onSuccess: () => {
+      setPolling(true);
+      toast({
+        title: 'Continue in your browser',
+        description: 'Authorize this device, then return here.',
+      });
+    },
+    onError: (error: Error) =>
+      toast({
+        title: 'Could not start sign-in',
+        description: error.message,
+        variant: 'destructive',
+      }),
+  });
+
+  const disconnect = useMutation({
+    mutationFn: () => apiClient.disconnectCloud(),
+    onSuccess: () => {
+      queryClient.invalidateQueries({ queryKey: ['cloud-status'] });
+      toast({
+        title: 'Disconnected',
+        description:
+          'This device is no longer linked. The key stays valid until revoked in your account.',
+      });
+    },
+    onError: (error: Error) =>
+      toast({ title: 'Could not disconnect', description: error.message, variant: 'destructive' }),
+  });
+
+  const busy = startLogin.isPending || polling;
+
+  return (
+    <SettingSection
+      title="Voicebox Cloud"
+      description="End-to-end encrypted backup & sync across your devices."
+    >
+      <SettingRow
+        title={connected ? 'Connected' : 'Account'}
+        description={
+          connected
+            ? `Linked as ${status?.device_name ?? 'this device'}${
+                status?.key_prefix ? ` · ${status.key_prefix}…` : ''
+              }`
+            : 'Log in to back up and sync your captures and generations.'
+        }
+        action={
+          connected ? (
+            <Button
+              disabled={disconnect.isPending}
+              onClick={() => disconnect.mutate()}
+              size="sm"
+              variant="outline"
+            >
+              {disconnect.isPending ? (
+                <>
+                  <Loader2 className="h-3.5 w-3.5 mr-1.5 animate-spin" />
+                  Disconnecting…
+                </>
+              ) : (
+                'Disconnect'
+              )}
+            </Button>
+          ) : (
+            <Button disabled={busy} onClick={() => startLogin.mutate()} size="sm">
+              {busy ? (
+                <>
+                  <Loader2 className="h-3.5 w-3.5 mr-1.5 animate-spin" />
+                  {polling ? 'Waiting for browser…' : 'Opening…'}
+                </>
+              ) : (
+                <>
+                  <Cloud className="h-3.5 w-3.5 mr-1.5" />
+                  Log in with browser
+                </>
+              )}
+            </Button>
+          )
+        }
+      />
+
+      {connected && (
+        <SettingRow
+          title="Manage"
+          description="Revoke this device, add API keys, or manage billing from your account."
+        >
+          <a
+            className="text-sm text-accent hover:underline"
+            href={status?.dashboard_url ?? 'https://voicebox.sh/account'}
+            rel="noopener noreferrer"
+            target="_blank"
+          >
+            Open account dashboard ↗
+          </a>
+        </SettingRow>
+      )}
+    </SettingSection>
+  );
+}

app/src/components/ServerTab/GeneralPage.tsx

@@ -14,6 +14,7 @@ import { useAutoUpdater } from '@/hooks/useAutoUpdater';
 import { useServerHealth } from '@/lib/hooks/useServer';
 import { usePlatform } from '@/platform/PlatformContext';
 import { useServerStore } from '@/stores/serverStore';
+import { CloudSection } from './CloudSection';
 import { LanguageSelect } from './LanguageSelect';
 import { SettingRow, SettingSection } from './SettingRow';
 import { ThemeSelect } from './ThemeSelect';
@@ -207,6 +208,8 @@ export function GeneralPage() {
         />
       </SettingSection>
 
+      <CloudSection />
+
       <ApiReferenceCard serverUrl={serverUrl} />
 
       {platform.metadata.isTauri && <UpdatesSection />}

app/src/components/ServerTab/GpuPage.tsx

@@ -5,7 +5,7 @@ import { useTranslation } from 'react-i18next';
 import { Button } from '@/components/ui/button';
 import { Progress } from '@/components/ui/progress';
 import { apiClient } from '@/lib/api/client';
-import type { CudaDownloadProgress, RocmDownloadProgress, HealthResponse } from '@/lib/api/types';
+import type { CudaDownloadProgress, HealthResponse } from '@/lib/api/types';
 import { useServerHealth } from '@/lib/hooks/useServer';
 import { usePlatform } from '@/platform/PlatformContext';
 import { useServerStore } from '@/stores/serverStore';
@@ -50,10 +50,7 @@ function GpuInfoCard({ health }: { health: HealthResponse }) {
     : null;
   const gpuBackend = hasGpu ? health.gpu_type!.replace(/\s*\(.+\)$/, '') : null;
   const isApple = gpuBackend === 'MPS' || gpuBackend === 'Metal';
-  const showBackendVariant = 
-    health.backend_variant && 
-    health.backend_variant !== 'cpu' &&
-    health.backend_variant.toLowerCase() !== gpuBackend?.toLowerCase();
+  const showBackendVariant = health.backend_variant && health.backend_variant !== 'cpu';
 
   return (
     <div className="rounded-lg border border-border/60 p-4">
@@ -118,14 +115,10 @@ export function GpuPage() {
 
   const [restartPhase, setRestartPhase] = useState<RestartPhase>('idle');
   const [error, setError] = useState<string | null>(null);
-  const [cudaStreaming, setCudaStreaming] = useState(false);
-  const [rocmStreaming, setRocmStreaming] = useState(false);
   const [downloadProgress, setDownloadProgress] = useState<CudaDownloadProgress | null>(null);
-  const [rocmDownloadProgress, setRocmDownloadProgress] = useState<RocmDownloadProgress | null>(
-    null,
-  );
   const healthPollRef = useRef<ReturnType<typeof setInterval> | null>(null);
-
+  // Hold the latest `t` in a ref so the CUDA progress SSE effect below doesn't
+  // tear down and reconnect the EventSource every time the language changes.
   const tRef = useRef(t);
   useEffect(() => {
     tRef.current = t;
@@ -143,27 +136,9 @@ export function GpuPage() {
     enabled: !!health,
   });
 
-  const {
-    data: rocmStatus,
-    isLoading: _rocmStatusLoading,
-    refetch: refetchRocmStatus,
-  } = useQuery({
-    queryKey: ['rocm-status', serverUrl],
-    queryFn: () => apiClient.getRocmStatus(),
-    refetchInterval: (query) => (query.state.status === 'pending' ? false : 10000),
-    retry: 1,
-    enabled: !!health,
-  });
-
   const isCurrentlyCuda = health?.backend_variant === 'cuda';
-  const isCurrentlyRocm = health?.backend_variant === 'rocm';
   const cudaAvailable = cudaStatus?.available ?? false;
   const cudaDownloading = cudaStatus?.downloading ?? false;
-  const rocmAvailable = rocmStatus?.available ?? false;
-  const rocmDownloading = rocmStatus?.downloading ?? false;
-  // The ROCm backend only applies to AMD GPUs on Windows. Show the section when
-  // the backend detects applicable hardware, or it is already downloaded/active.
-  const supportsRocm = (health?.supports_rocm ?? false) || rocmAvailable || isCurrentlyRocm;
 
   useEffect(() => {
     return () => {
@@ -175,7 +150,7 @@ export function GpuPage() {
   }, []);
 
   useEffect(() => {
-    if ((!cudaDownloading && !cudaStreaming) || !serverUrl) return;
+    if (!cudaDownloading || !serverUrl) return;
 
     const eventSource = new EventSource(`${serverUrl}/backend/cuda-progress`);
 
@@ -187,13 +162,11 @@ export function GpuPage() {
         if (data.status === 'complete') {
           eventSource.close();
           setDownloadProgress(null);
-          setCudaStreaming(false);
           refetchCudaStatus();
         } else if (data.status === 'error') {
           eventSource.close();
           setError(data.error || tRef.current('settings.gpu.errors.downloadFailed'));
           setDownloadProgress(null);
-          setCudaStreaming(false);
           refetchCudaStatus();
         }
       } catch (e) {
@@ -203,50 +176,12 @@ export function GpuPage() {
 
     eventSource.onerror = () => {
       eventSource.close();
-      setCudaStreaming(false);
     };
 
     return () => {
       eventSource.close();
     };
-  }, [cudaDownloading, cudaStreaming, serverUrl, refetchCudaStatus]);
-
-  useEffect(() => {
-    if ((!rocmDownloading && !rocmStreaming) || !serverUrl) return;
-
-    const eventSource = new EventSource(`${serverUrl}/backend/rocm-progress`);
-
-    eventSource.onmessage = (event) => {
-      try {
-        const data = JSON.parse(event.data) as RocmDownloadProgress;
-        setRocmDownloadProgress(data);
-
-        if (data.status === 'complete') {
-          eventSource.close();
-          setRocmDownloadProgress(null);
-          setRocmStreaming(false);
-          refetchRocmStatus();
-        } else if (data.status === 'error') {
-          eventSource.close();
-          setError(data.error || tRef.current('settings.gpu.errors.downloadFailed'));
-          setRocmDownloadProgress(null);
-          setRocmStreaming(false);
-          refetchRocmStatus();
-        }
-      } catch (e) {
-        console.error('Error parsing ROCm progress event:', e);
-      }
-    };
-
-    eventSource.onerror = () => {
-      eventSource.close();
-      setRocmStreaming(false);
-    };
-
-    return () => {
-      eventSource.close();
-    };
-  }, [rocmDownloading, rocmStreaming, serverUrl, refetchRocmStatus]);
+  }, [cudaDownloading, serverUrl, refetchCudaStatus]);
 
   const clearHealthPolling = useCallback(() => {
     if (healthPollRef.current) {
@@ -289,11 +224,10 @@ export function GpuPage() {
     [platform, startHealthPolling, clearHealthPolling],
   );
 
-  const handleDownloadCuda = async () => {
+  const handleDownload = async () => {
     setError(null);
     try {
       await apiClient.downloadCudaBackend();
-      setCudaStreaming(true);
       refetchCudaStatus();
     } catch (e: unknown) {
       const msg = e instanceof Error ? e.message : t('settings.gpu.errors.downloadStart');
@@ -305,64 +239,28 @@ export function GpuPage() {
     }
   };
 
-  const handleDownloadRocm = async () => {
+  const handleRestart = async () => {
     setError(null);
     try {
-      await apiClient.downloadRocmBackend();
-      setRocmStreaming(true);
-      refetchRocmStatus();
+      await restartServerWithPolling(t('settings.gpu.errors.restartFailed'));
     } catch (e: unknown) {
-      const msg = e instanceof Error ? e.message : t('settings.gpu.errors.downloadStart');
-      if (msg.includes('already downloaded')) {
-        refetchRocmStatus();
-      } else {
-        setError(msg);
-      }
+      setError(e instanceof Error ? e.message : t('settings.gpu.errors.restartFailed'));
     }
   };
 
-
   const handleSwitchToCpu = async () => {
     setError(null);
     setRestartPhase('stopping');
     try {
-      await platform.lifecycle.setBackendOverride('cpu');
+      await apiClient.deleteCudaBackend();
       await restartServerWithPolling(t('settings.gpu.errors.switchCpu'));
     } catch (e: unknown) {
-      setRestartPhase('idle');
       setError(e instanceof Error ? e.message : t('settings.gpu.errors.switchCpu'));
       refetchCudaStatus();
-      refetchRocmStatus();
     }
   };
 
-  const handleSwitchToCuda = async () => {
-    setError(null);
-    setRestartPhase('stopping');
-    try {
-      await platform.lifecycle.setBackendOverride('cuda');
-      await restartServerWithPolling(t('settings.gpu.errors.restartFailed'));
-    } catch (e: unknown) {
-      setRestartPhase('idle');
-      setError(e instanceof Error ? e.message : t('settings.gpu.errors.restartFailed'));
-      refetchCudaStatus();
-    }
-  };
-
-  const handleSwitchToRocm = async () => {
-    setError(null);
-    setRestartPhase('stopping');
-    try {
-      await platform.lifecycle.setBackendOverride('rocm');
-      await restartServerWithPolling(t('settings.gpu.errors.restartFailed'));
-    } catch (e: unknown) {
-      setRestartPhase('idle');
-      setError(e instanceof Error ? e.message : t('settings.gpu.errors.restartFailed'));
-      refetchRocmStatus();
-    }
-  };
-
-  const handleDeleteCuda = async () => {
+  const handleDelete = async () => {
     setError(null);
     try {
       await apiClient.deleteCudaBackend();
@@ -372,16 +270,6 @@ export function GpuPage() {
     }
   };
 
-  const handleDeleteRocm = async () => {
-    setError(null);
-    try {
-      await apiClient.deleteRocmBackend();
-      refetchRocmStatus();
-    } catch (e: unknown) {
-      setError(e instanceof Error ? e.message : t('settings.gpu.errors.deleteRocm'));
-    }
-  };
-
   const formatBytes = (bytes: number): string => {
     if (bytes === 0) return '0 B';
     const k = 1024;
@@ -395,7 +283,6 @@ export function GpuPage() {
   const hasNativeGpu =
     health.gpu_available &&
     !isCurrentlyCuda &&
-    !isCurrentlyRocm &&
     health.gpu_type &&
     !health.gpu_type.includes('CUDA');
 
@@ -403,188 +290,33 @@ export function GpuPage() {
     <div className="space-y-8 max-w-2xl">
       <GpuInfoCard health={health} />
 
-      {!hasNativeGpu && !isCurrentlyCuda && !isCurrentlyRocm && (
-        <>
-          <SettingSection
-            title={t('settings.gpu.cuda.title')}
-            description={t('settings.gpu.cuda.description')}
-          >
-            {cudaDownloading && downloadProgress && (
-              <SettingRow title={t('settings.gpu.cuda.downloading')}>
-                <div className="space-y-1.5">
-                  <Progress value={downloadProgress.progress} className="h-2" />
-                  <div className="flex items-center justify-between text-xs text-muted-foreground">
-                    <span>
-                      {downloadProgress.filename ||
-                        (cudaAvailable
-                          ? t('settings.gpu.cuda.updating')
-                          : t('settings.gpu.cuda.downloadingShort'))}
-                    </span>
-                    <span>
-                      {downloadProgress.total > 0
-                        ? `${formatBytes(downloadProgress.current)} / ${formatBytes(downloadProgress.total)}`
-                        : `${downloadProgress.progress.toFixed(1)}%`}
-                    </span>
-                  </div>
-                </div>
-              </SettingRow>
-            )}
-
-            {restartPhase !== 'idle' && (
-              <SettingRow
-                title={
-                  restartPhase === 'ready'
-                    ? t('settings.gpu.restart.ready')
-                    : restartPhase === 'waiting'
-                      ? t('settings.gpu.restart.waiting')
-                      : t('settings.gpu.restart.stopping')
-                }
-                action={<Loader2 className="h-4 w-4 animate-spin text-muted-foreground" />}
-              />
-            )}
-
-            {error && (
-              <SettingRow title={t('common.error')}>
-                <div className="flex items-center gap-2 text-sm text-destructive">
-                  <AlertCircle className="h-4 w-4 shrink-0" />
-                  <span>{error}</span>
-                </div>
-              </SettingRow>
-            )}
-
-            {restartPhase === 'idle' && !cudaDownloading && (
-              <>
-                {!cudaAvailable && !isCurrentlyCuda && (
-                  <SettingRow
-                    title={t('settings.gpu.download.title')}
-                    description={t('settings.gpu.download.description')}
-                    action={
-                      <Button onClick={handleDownloadCuda} size="sm">
-                        <Download className="h-3.5 w-3.5 mr-1.5" />
-                        {t('settings.gpu.download.button')}
-                      </Button>
-                    }
-                  />
-                )}
-
-                {cudaAvailable && !isCurrentlyCuda && platform.metadata.isTauri && (
-                  <SettingRow
-                    title={t('settings.gpu.switchToCuda.title')}
-                    description={t('settings.gpu.switchToCuda.description')}
-                    action={
-                      <Button onClick={handleSwitchToCuda} size="sm">
-                        <RotateCw className="h-3.5 w-3.5 mr-1.5" />
-                        {t('settings.gpu.switchToCuda.button')}
-                      </Button>
-                    }
-                  />
-                )}
-
-                {cudaAvailable && !isCurrentlyCuda && (
-                  <SettingRow
-                    title={t('settings.gpu.remove.title')}
-                    description={t('settings.gpu.remove.description')}
-                    action={
-                      <Button
-                        onClick={handleDeleteCuda}
-                        variant="ghost"
-                        size="sm"
-                        className="text-muted-foreground hover:text-destructive"
-                      >
-                        <Trash2 className="h-3.5 w-3.5 mr-1.5" />
-                        {t('settings.gpu.remove.button')}
-                      </Button>
-                    }
-                  />
-                )}
-              </>
-            )}
-          </SettingSection>
-
-          {supportsRocm && (
-          <SettingSection
-            title={t('settings.gpu.rocm.title')}
-            description={t('settings.gpu.rocm.description')}
-          >
-            {rocmDownloading && rocmDownloadProgress && (
-              <SettingRow title={t('settings.gpu.rocm.downloading')}>
-                <div className="space-y-1.5">
-                  <Progress value={rocmDownloadProgress.progress} className="h-2" />
-                  <div className="flex items-center justify-between text-xs text-muted-foreground">
-                    <span>
-                      {rocmDownloadProgress.filename ||
-                        (rocmAvailable
-                          ? t('settings.gpu.rocm.updating')
-                          : t('settings.gpu.rocm.downloadingShort'))}
-                    </span>
-                    <span>
-                      {rocmDownloadProgress.total > 0
-                        ? `${formatBytes(rocmDownloadProgress.current)} / ${formatBytes(rocmDownloadProgress.total)}`
-                        : `${rocmDownloadProgress.progress.toFixed(1)}%`}
-                    </span>
-                  </div>
-                </div>
-              </SettingRow>
-            )}
-
-            {restartPhase === 'idle' && !rocmDownloading && (
-              <>
-                {!rocmAvailable && !isCurrentlyRocm && (
-                  <SettingRow
-                    title={t('settings.gpu.downloadRocm.title')}
-                    description={t('settings.gpu.downloadRocm.description')}
-                    action={
-                      <Button onClick={handleDownloadRocm} size="sm">
-                        <Download className="h-3.5 w-3.5 mr-1.5" />
-                        {t('settings.gpu.downloadRocm.button')}
-                      </Button>
-                    }
-                  />
-                )}
-
-                {rocmAvailable && !isCurrentlyRocm && platform.metadata.isTauri && (
-                  <SettingRow
-                    title={t('settings.gpu.switchToRocm.title')}
-                    description={t('settings.gpu.switchToRocm.description')}
-                    action={
-                      <Button onClick={handleSwitchToRocm} size="sm">
-                        <RotateCw className="h-3.5 w-3.5 mr-1.5" />
-                        {t('settings.gpu.switchToRocm.button')}
-                      </Button>
-                    }
-                  />
-                )}
-
-                {rocmAvailable && !isCurrentlyRocm && (
-                  <SettingRow
-                    title={t('settings.gpu.removeRocm.title')}
-                    description={t('settings.gpu.removeRocm.description')}
-                    action={
-                      <Button
-                        onClick={handleDeleteRocm}
-                        variant="ghost"
-                        size="sm"
-                        className="text-muted-foreground hover:text-destructive"
-                      >
-                        <Trash2 className="h-3.5 w-3.5 mr-1.5" />
-                        {t('settings.gpu.removeRocm.button')}
-                      </Button>
-                    }
-                  />
-                )}
-              </>
-            )}
-          </SettingSection>
-          )}
-        </>
-      )}
-
-      {(isCurrentlyCuda || isCurrentlyRocm) && platform.metadata.isTauri && (
+      {!hasNativeGpu && !isCurrentlyCuda && (
         <SettingSection
-          title={isCurrentlyCuda ? t('settings.gpu.cuda.activeTitle') : t('settings.gpu.rocm.activeTitle')}
-          description={t('settings.gpu.activeBackend.description')}
+          title={t('settings.gpu.cuda.title')}
+          description={t('settings.gpu.cuda.description')}
         >
-          {restartPhase !== 'idle' ? (
+          {cudaDownloading && downloadProgress && (
+            <SettingRow title={t('settings.gpu.cuda.downloading')}>
+              <div className="space-y-1.5">
+                <Progress value={downloadProgress.progress} className="h-2" />
+                <div className="flex items-center justify-between text-xs text-muted-foreground">
+                  <span>
+                    {downloadProgress.filename ||
+                      (cudaAvailable
+                        ? t('settings.gpu.cuda.updating')
+                        : t('settings.gpu.cuda.downloadingShort'))}
+                  </span>
+                  <span>
+                    {downloadProgress.total > 0
+                      ? `${formatBytes(downloadProgress.current)} / ${formatBytes(downloadProgress.total)}`
+                      : `${downloadProgress.progress.toFixed(1)}%`}
+                  </span>
+                </div>
+              </div>
+            </SettingRow>
+          )}
+
+          {restartPhase !== 'idle' && (
             <SettingRow
               title={
                 restartPhase === 'ready'
@@ -595,18 +327,8 @@ export function GpuPage() {
               }
               action={<Loader2 className="h-4 w-4 animate-spin text-muted-foreground" />}
             />
-          ) : (
-            <SettingRow
-              title={t('settings.gpu.switchToCpu.title')}
-              description={t('settings.gpu.switchToCpu.description')}
-              action={
-                <Button onClick={handleSwitchToCpu} variant="outline" size="sm">
-                  <RotateCw className="h-3.5 w-3.5 mr-1.5" />
-                  {t('settings.gpu.switchToCpu.button')}
-                </Button>
-              }
-            />
           )}
+
           {error && (
             <SettingRow title={t('common.error')}>
               <div className="flex items-center gap-2 text-sm text-destructive">
@@ -615,6 +337,67 @@ export function GpuPage() {
               </div>
             </SettingRow>
           )}
+
+          {restartPhase === 'idle' && !cudaDownloading && (
+            <>
+              {!cudaAvailable && !isCurrentlyCuda && (
+                <SettingRow
+                  title={t('settings.gpu.download.title')}
+                  description={t('settings.gpu.download.description')}
+                  action={
+                    <Button onClick={handleDownload} size="sm">
+                      <Download className="h-3.5 w-3.5 mr-1.5" />
+                      {t('settings.gpu.download.button')}
+                    </Button>
+                  }
+                />
+              )}
+
+              {cudaAvailable && !isCurrentlyCuda && platform.metadata.isTauri && (
+                <SettingRow
+                  title={t('settings.gpu.switchToCuda.title')}
+                  description={t('settings.gpu.switchToCuda.description')}
+                  action={
+                    <Button onClick={handleRestart} size="sm">
+                      <RotateCw className="h-3.5 w-3.5 mr-1.5" />
+                      {t('settings.gpu.switchToCuda.button')}
+                    </Button>
+                  }
+                />
+              )}
+
+              {isCurrentlyCuda && platform.metadata.isTauri && (
+                <SettingRow
+                  title={t('settings.gpu.switchToCpu.title')}
+                  description={t('settings.gpu.switchToCpu.description')}
+                  action={
+                    <Button onClick={handleSwitchToCpu} variant="outline" size="sm">
+                      <RotateCw className="h-3.5 w-3.5 mr-1.5" />
+                      {t('settings.gpu.switchToCpu.button')}
+                    </Button>
+                  }
+                />
+              )}
+
+              {cudaAvailable && !isCurrentlyCuda && (
+                <SettingRow
+                  title={t('settings.gpu.remove.title')}
+                  description={t('settings.gpu.remove.description')}
+                  action={
+                    <Button
+                      onClick={handleDelete}
+                      variant="ghost"
+                      size="sm"
+                      className="text-muted-foreground "
+                    >
+                      <Trash2 className="h-3.5 w-3.5 mr-1.5" />
+                      {t('settings.gpu.remove.button')}
+                    </Button>
+                  }
+                />
+              )}
+            </>
+          )}
         </SettingSection>
       )}
 

app/src/i18n/index.ts

@@ -3,18 +3,14 @@ import LanguageDetector from 'i18next-browser-languagedetector';
 import { initReactI18next } from 'react-i18next';
 import en from './locales/en/translation.json';
 import ja from './locales/ja/translation.json';
-import ptBR from './locales/pt-BR/translation.json';
 import zhCN from './locales/zh-CN/translation.json';
 import zhTW from './locales/zh-TW/translation.json';
-import fr from './locales/fr/translation.json';
 
 export const SUPPORTED_LANGUAGES = [
   { code: 'en', label: 'English' },
-  { code: 'pt-BR', label: 'Português (Brasil)' },
   { code: 'ja', label: '日本語' },
   { code: 'zh-CN', label: '简体中文' },
   { code: 'zh-TW', label: '繁體中文' },
-  { code: 'fr', label: 'Français' },
 ] as const;
 
 export type LanguageCode = (typeof SUPPORTED_LANGUAGES)[number]['code'];
@@ -25,11 +21,9 @@ i18n
   .init({
     resources: {
       en: { translation: en },
-      'pt-BR': { translation: ptBR },
       ja: { translation: ja },
       'zh-CN': { translation: zhCN },
       'zh-TW': { translation: zhTW },
-      fr: { translation: fr },
     },
     fallbackLng: 'en',
     supportedLngs: SUPPORTED_LANGUAGES.map((l) => l.code),

app/src/i18n/locales/en/translation.json

@@ -760,13 +760,8 @@
       }
     },
     "general": {
-      "docs": {
-        "title": "Read the Docs"
-      },
-      "discord": {
-        "title": "Join the Discord",
-        "subtitle": "Get help & share voices"
-      },
+      "docs": { "title": "Read the Docs" },
+      "discord": { "title": "Join the Discord", "subtitle": "Get help & share voices" },
       "serverUrl": {
         "title": "Server URL",
         "description": "The address of your voicebox backend server.",
@@ -1096,15 +1091,11 @@
       "active": "Active",
       "cuda": {
         "title": "CUDA Backend",
-        "activeTitle": "CUDA Backend Active",
         "description": "NVIDIA GPU acceleration via a downloadable CUDA backend.",
         "downloading": "Downloading CUDA backend…",
         "downloadingShort": "Downloading…",
         "updating": "Updating…"
       },
-      "activeBackend": {
-        "description": "GPU acceleration is currently enabled."
-      },
       "restart": {
         "ready": "Server restarted successfully",
         "waiting": "Restarting server…",
@@ -1122,9 +1113,10 @@
       },
       "switchToCpu": {
         "title": "Switch to CPU backend",
-        "description": "Disable GPU acceleration. You can re-download the GPU backend later.",
+        "description": "Disable GPU acceleration. You can re-download CUDA later.",
         "button": "Switch"
-      },      "remove": {
+      },
+      "remove": {
         "title": "Remove CUDA backend",
         "description": "Delete the downloaded CUDA binary to free disk space.",
         "button": "Remove"
@@ -1134,33 +1126,9 @@
         "downloadStart": "Failed to start download",
         "restartFailed": "Restart failed",
         "switchCpu": "Failed to switch to CPU",
-        "deleteCuda": "Failed to delete CUDA backend",
-        "deleteRocm": "Failed to delete ROCm backend"
+        "deleteCuda": "Failed to delete CUDA backend"
       },
-      "footer": "Voicebox automatically detects and uses the best available GPU on your system. On Apple Silicon Macs, the MLX backend runs natively on the Neural Engine and GPU via Metal Performance Shaders (MPS), with no additional setup required. On Windows, you can download optional CUDA (NVIDIA) or ROCm (AMD) backends for hardware-accelerated inference. Intel XPU and DirectML are also supported where available through PyTorch. When no GPU is detected, Voicebox falls back to CPU — all engines still work, just slower.",
-      "rocm": {
-        "title": "AMD ROCm Backend",
-        "activeTitle": "ROCm Backend Active",
-        "description": "AMD GPU acceleration via a downloadable ROCm backend.",
-        "downloading": "Downloading ROCm backend…",
-        "downloadingShort": "Downloading…",
-        "updating": "Updating…"
-      },
-      "downloadRocm": {
-        "title": "Download AMD ROCm backend",
-        "description": "~2-3 GB download. Requires an AMD Radeon GPU with ROCm support.",
-        "button": "Download"
-      },
-      "switchToRocm": {
-        "title": "Switch to ROCm backend",
-        "description": "ROCm backend is downloaded and ready. Restart to enable.",
-        "button": "Restart"
-      },
-      "removeRocm": {
-        "title": "Remove ROCm backend",
-        "description": "Delete the downloaded ROCm binary to free disk space.",
-        "button": "Remove"
-      }
+      "footer": "Voicebox automatically detects and uses the best available GPU on your system. On Apple Silicon Macs, the MLX backend runs natively on the Neural Engine and GPU via Metal Performance Shaders (MPS), with no additional setup required. On Windows and Linux with NVIDIA GPUs, you can download an optional CUDA backend for hardware-accelerated inference. AMD ROCm, Intel XPU, and DirectML are also supported where available through PyTorch. When no GPU is detected, Voicebox falls back to CPU — all engines still work, just slower."
     },
     "logs": {
       "title": "Server Logs",

app/src/lib/api/client.ts

@@ -20,7 +20,6 @@ import type {
   PresetVoice,
   PersonalityTextResponse,
   ProfileSampleResponse,
-  RocmStatus,
   StoryCreate,
   StoryDetailResponse,
   StoryItemBatchUpdate,
@@ -51,6 +50,8 @@ import type {
   MCPClientBinding,
   MCPClientBindingListResponse,
   MCPClientBindingUpsert,
+  CloudLoginStartResponse,
+  CloudStatus,
 } from './types';
 
 function formatErrorDetail(detail: unknown, fallback: string): string {
@@ -694,23 +695,6 @@ class ApiClient {
     });
   }
 
-  // ROCm Backend Management
-  async getRocmStatus(): Promise<RocmStatus> {
-    return this.request<RocmStatus>('/backend/rocm-status');
-  }
-
-  async downloadRocmBackend(): Promise<{ message: string; progress_key: string }> {
-    return this.request<{ message: string; progress_key: string }>('/backend/download-rocm', {
-      method: 'POST',
-    });
-  }
-
-  async deleteRocmBackend(): Promise<{ message: string }> {
-    return this.request<{ message: string }>('/backend/rocm', {
-      method: 'DELETE',
-    });
-  }
-
   // Stories
   async listStories(): Promise<StoryResponse[]> {
     return this.request<StoryResponse[]>('/stories');
@@ -938,6 +922,21 @@ class ApiClient {
 
     return response.blob();
   }
+
+  // Cloud (backup & sync) — browser-based device login. startCloudLogin opens
+  // the system browser server-side; the UI then polls getCloudStatus until the
+  // backend completes the exchange and the link goes live.
+  async getCloudStatus(): Promise<CloudStatus> {
+    return this.request<CloudStatus>('/cloud/status');
+  }
+
+  async startCloudLogin(): Promise<CloudLoginStartResponse> {
+    return this.request<CloudLoginStartResponse>('/cloud/login/start', { method: 'POST' });
+  }
+
+  async disconnectCloud(): Promise<CloudStatus> {
+    return this.request<CloudStatus>('/cloud/disconnect', { method: 'POST' });
+  }
 }
 
 export const apiClient = new ApiClient();

app/src/lib/api/models/ModelStatus.ts

@@ -9,7 +9,7 @@ export type ModelStatus = {
   model_name: string;
   display_name: string;
   downloaded: boolean;
-  downloading?: boolean; // True if download is in progress
+  downloading?: boolean;  // True if download is in progress
   size_mb?: number | null;
   loaded?: boolean;
 };

app/src/lib/api/types.ts

@@ -269,8 +269,7 @@ export interface HealthResponse {
   gpu_type?: string;
   vram_used_mb?: number;
   backend_type?: string;
-  backend_variant?: string; // "cpu", "cuda", or "rocm"
-  supports_rocm?: boolean; // AMD GPU on Windows — the ROCm backend is applicable
+  backend_variant?: string; // "cpu" or "cuda"
 }
 
 export interface CudaDownloadProgress {
@@ -292,26 +291,6 @@ export interface CudaStatus {
   download_progress?: CudaDownloadProgress;
 }
 
-export interface RocmDownloadProgress {
-  model_name: string;
-  current: number;
-  total: number;
-  progress: number;
-  filename?: string;
-  status: 'downloading' | 'extracting' | 'complete' | 'error';
-  timestamp: string;
-  error?: string;
-}
-
-export interface RocmStatus {
-  available: boolean; // ROCm binary exists on disk
-  active: boolean; // Currently running the ROCm binary
-  binary_path?: string;
-  rocm_libs_version?: string;
-  downloading: boolean; // Download in progress
-  download_progress?: RocmDownloadProgress;
-}
-
 export interface ModelProgress {
   model_name: string;
   current: number;
@@ -542,3 +521,18 @@ export interface MCPClientBindingUpsert {
 export interface MCPClientBindingListResponse {
   items: MCPClientBinding[];
 }
+
+/* ─── Cloud (backup & sync) ───────────────────────────────────────────── */
+
+export interface CloudLoginStartResponse {
+  authorize_url: string;
+}
+
+export interface CloudStatus {
+  connected: boolean;
+  device_name: string | null;
+  account_user_id: string | null;
+  key_prefix: string | null;
+  connected_at: string | null;
+  dashboard_url: string;
+}

app/src/lib/utils/format.ts

@@ -1,5 +1,5 @@
 import { formatDistance } from 'date-fns';
-import { ja, zhCN, zhTW, fr } from 'date-fns/locale';
+import { ja, zhCN, zhTW } from 'date-fns/locale';
 import i18n from '@/i18n';
 
 export function formatDuration(seconds: number): string {
@@ -16,8 +16,6 @@ function getDateLocale() {
       return zhCN;
     case 'zh-TW':
       return zhTW;
-    case 'fr':
-      return fr;
     default:
       return undefined;
   }

app/src/platform/types.ts

@@ -60,7 +60,6 @@ export interface PlatformLifecycle {
   stopServer(): Promise<void>;
   restartServer(modelsDir?: string | null): Promise<string>;
   setKeepServerRunning(keep: boolean): Promise<void>;
-  setBackendOverride(backend?: string | null): Promise<void>;
   setupWindowCloseHandler(): Promise<void>;
   subscribeToServerLogs(callback: (entry: ServerLogEntry) => void): () => void;
   onServerReady?: () => void;

backend/app.py

@@ -3,8 +3,6 @@
 import asyncio
 import logging
 import os
-import re
-import subprocess
 import sys
 from contextlib import asynccontextmanager
 from pathlib import Path
@@ -39,59 +37,8 @@ logging.basicConfig(
 logger = logging.getLogger(__name__)
 
 # AMD GPU environment variables must be set before torch import
-# Only set HSA_OVERRIDE_GFX_VERSION for older GPUs that need it.
-# RDNA 3+ (gfx1100+) and RDNA 4 (gfx1200+) are natively supported by ROCm
-# and the override can cause suboptimal performance or errors.
 if not os.environ.get("HSA_OVERRIDE_GFX_VERSION"):
-    try:
-        result = subprocess.run(
-            ["rocminfo"],
-            capture_output=True,
-            text=True,
-            timeout=5,
-        )
-        if result.returncode == 0:
-            # Collect all GPUs found in rocminfo output
-            gfx_versions = []
-            for line in result.stdout.splitlines():
-                line_lower = line.lower()
-                if "gfx" in line_lower:
-                    match = re.search(r"(gfx\d+)", line_lower)
-                    if match:
-                        gfx_versions.append(match.group(1))
-
-            if gfx_versions:
-                # Check if any GPU needs the override (RDNA 2 and older)
-                # Use the oldest GPU (lowest gfx number) for the decision
-                try:
-                    gfx_nums = []
-                    for v in gfx_versions:
-                        m = re.search(r"\d+", v)
-                        if m:
-                            gfx_nums.append(int(m.group()))
-                    if gfx_nums:
-                        oldest_num = min(gfx_nums)
-                        oldest_gfx = gfx_versions[gfx_nums.index(oldest_num)]
-                        if oldest_num < 1100:
-                            os.environ["HSA_OVERRIDE_GFX_VERSION"] = "10.3.0"
-                            logger.info(
-                                "AMD GPU detected (%s), setting HSA_OVERRIDE_GFX_VERSION=10.3.0 for compatibility. All GPUs: %s",
-                                oldest_gfx,
-                                ", ".join(gfx_versions),
-                            )
-                        else:
-                            logger.info(
-                                "AMD GPU detected (%s), native ROCm support available, skipping HSA_OVERRIDE_GFX_VERSION. All GPUs: %s",
-                                oldest_gfx,
-                                ", ".join(gfx_versions),
-                            )
-                except (ValueError, AttributeError) as e:
-                    logger.info("Could not parse GPU version from rocminfo output: %s", e)
-    except (FileNotFoundError, subprocess.TimeoutExpired, Exception) as e:
-        logger.info(
-            "Could not detect AMD GPU via rocminfo, skipping automatic HSA_OVERRIDE_GFX_VERSION configuration: %s",
-            e,
-        )
+    os.environ["HSA_OVERRIDE_GFX_VERSION"] = "10.3.0"
 if not os.environ.get("MIOPEN_LOG_LEVEL"):
     os.environ["MIOPEN_LOG_LEVEL"] = "4"
 
@@ -326,10 +273,8 @@ async def _run_startup(application: FastAPI) -> None:
         logger.warning("GPU COMPATIBILITY: %s", _cuda_warning)
 
     from .services.cuda import check_and_update_cuda_binary
-    from .services.rocm import check_and_update_rocm_binary
 
     create_background_task(check_and_update_cuda_binary())
-    create_background_task(check_and_update_rocm_binary())
 
     try:
         progress_manager = get_progress_manager()

backend/backends/base.py

@@ -138,11 +138,6 @@ def check_cuda_compatibility() -> tuple[bool, str | None]:
     if not torch.cuda.is_available():
         return True, None
 
-    # ROCm/HIP uses the cuda frontend but has different architecture names (gfx*).
-    # Skip NVIDIA-specific compute capability checks on AMD hardware.
-    if hasattr(torch.version, "hip") and torch.version.hip:
-        return True, None
-
     major, minor = torch.cuda.get_device_capability(0)
     capability = f"{major}.{minor}"
     device_name = torch.cuda.get_device_name(0)

backend/backends/hume_backend.py

@@ -146,15 +146,7 @@ class HumeTadaBackend:
             )
 
             # Determine dtype — use bf16 on CUDA/XPU for ~50% memory savings
-            # On ROCm/AMD, torch.cuda.is_bf16_supported() works via the HIP abstraction,
-            # but we wrap it defensively in case an older build lacks the symbol.
-            _bf16_ok = False
-            if device == "cuda":
-                try:
-                    _bf16_ok = torch.cuda.is_bf16_supported()
-                except Exception:
-                    _bf16_ok = False
-            if _bf16_ok:
+            if device == "cuda" and torch.cuda.is_bf16_supported():
                 model_dtype = torch.bfloat16
             elif device == "xpu":
                 # Intel Arc (Alchemist+) supports bf16 natively

backend/build_binary.py

@@ -22,34 +22,24 @@ def is_apple_silicon():
     return platform.system() == "Darwin" and platform.machine() == "arm64"
 
 
-def build_server(cuda=False, rocm=False):
+def build_server(cuda=False):
     """Build Python server as standalone binary.
 
     Args:
         cuda: If True, build with CUDA support and name the binary
               voicebox-server-cuda instead of voicebox-server.
-        rocm: If True, build with ROCm support and name the binary
-              voicebox-server-rocm instead of voicebox-server.
     """
-    if cuda and rocm:
-        raise ValueError("Cannot build with both CUDA and ROCm support")
-
     backend_dir = Path(__file__).parent
 
-    if rocm:
-        binary_name = "voicebox-server-rocm"
-    elif cuda:
-        binary_name = "voicebox-server-cuda"
-    else:
-        binary_name = "voicebox-server"
+    binary_name = "voicebox-server-cuda" if cuda else "voicebox-server"
 
     # PyInstaller arguments
-    # CUDA and ROCm builds use --onedir so we can split the output into two archives:
+    # CUDA builds use --onedir so we can split the output into two archives:
     #   1. Server core (~200-400MB) — versioned with the app
-    #   2. GPU libs (~2GB) — versioned independently (only redownloaded on
-    #      GPU toolkit / torch major version changes)
+    #   2. CUDA libs (~2GB) — versioned independently (only redownloaded on
+    #      CUDA toolkit / torch major version changes)
     # CPU builds remain --onefile for simplicity.
-    pack_mode = "--onedir" if (cuda or rocm) else "--onefile"
+    pack_mode = "--onedir" if cuda else "--onefile"
     args = [
         "server.py",  # Use server.py as entry point instead of main.py
         pack_mode,
@@ -330,74 +320,22 @@ def build_server(cuda=False, rocm=False):
         ]
     )
 
-    # Add CUDA/ROCm-specific hidden imports
-    if cuda or rocm:
-        variant = "ROCm" if rocm else "CUDA"
-        logger.info("Building with %s support", variant)
-        gpu_hidden = [
-            "--hidden-import",
-            "torch.cuda",
-        ]
-        # cudnn is NVIDIA-specific; ROCm uses MIOpen under the abstraction layer
-        if cuda:
-            gpu_hidden.extend(
-                [
-                    "--hidden-import",
-                    "torch.backends.cudnn",
-                ]
-            )
-        args.extend(gpu_hidden)
-
-    if rocm:
-        # rocm_sdk imports its backend packages dynamically via
-        # importlib.import_module(py_package_name), which PyInstaller's
-        # static analyzer cannot see. We must collect them explicitly —
-        # otherwise only the pure-python rocm_sdk wrapper ships and
-        # rocm_sdk.find_libraries crashes with UnboundLocalError at boot.
-        #
-        # The backend packages also contain the HIP/MIOpen/hipBLAS DLLs
-        # under bin/ (plus ~750 MB of tensile kernel files under
-        # bin/rocblas/library and bin/hipblaslt/library) — collect-all
-        # walks the tree recursively so both DLLs and kernel data are
-        # bundled. See rocm_sdk/_dist_info.py for the package mapping.
+    # Add CUDA-specific hidden imports
+    if cuda:
+        logger.info("Building with CUDA support")
         args.extend(
             [
-                "--collect-all",
-                "rocm_sdk",
-                "--collect-all",
-                "_rocm_sdk_core",
-                "--collect-all",
-                "_rocm_sdk_libraries_custom",
-                "--collect-all",
-                "rocm_sdk_core",
-                "--collect-all",
-                "rocm_sdk_libraries_custom",
                 "--hidden-import",
-                "_rocm_sdk_core",
+                "torch.cuda",
                 "--hidden-import",
-                "_rocm_sdk_libraries_custom",
-                "--hidden-import",
-                "rocm_sdk_core",
-                "--hidden-import",
-                "rocm_sdk_libraries_custom",
-                "--copy-metadata",
-                "rocm",
-                "--copy-metadata",
-                "rocm-sdk-core",
-                "--copy-metadata",
-                "rocm-sdk-libraries-custom",
-                # Repair rocm_sdk.find_libraries (masks UnboundLocalError
-                # with a readable ModuleNotFoundError on missing backends).
-                "--runtime-hook",
-                "pyi_rth_rocm_sdk.py",
+                "torch.backends.cudnn",
             ]
         )
-
-    # Exclude NVIDIA CUDA packages from non-CUDA builds to keep binary small.
-    # When building from a venv with CUDA torch installed, PyInstaller would
-    # bundle ~3GB of NVIDIA shared libraries. We exclude both the Python
-    # modules and the binary DLLs. This applies to CPU and ROCm builds.
-    if not cuda:
+    else:
+        # Exclude NVIDIA CUDA packages from CPU-only builds to keep binary small.
+        # When building from a venv with CUDA torch installed, PyInstaller would
+        # bundle ~3GB of NVIDIA shared libraries. We exclude both the Python
+        # modules and the binary DLLs.
         nvidia_packages = [
             "nvidia",
             "nvidia.cublas",
@@ -416,8 +354,8 @@ def build_server(cuda=False, rocm=False):
         for pkg in nvidia_packages:
             args.extend(["--exclude-module", pkg])
 
-    # Add MLX-specific imports if building on Apple Silicon (never for GPU builds)
-    if is_apple_silicon() and not cuda and not rocm:
+    # Add MLX-specific imports if building on Apple Silicon (never for CUDA builds)
+    if is_apple_silicon() and not cuda:
         logger.info("Building for Apple Silicon - including MLX dependencies")
         args.extend(
             [
@@ -461,7 +399,7 @@ def build_server(cuda=False, rocm=False):
                 "mlx_lm",
             ]
         )
-    elif not cuda and not rocm:
+    elif not cuda:
         logger.info("Building for non-Apple Silicon platform - PyTorch only")
 
     dist_dir = str(backend_dir / "dist")
@@ -482,128 +420,43 @@ def build_server(cuda=False, rocm=False):
     os.chdir(backend_dir)
 
     # For CPU builds on Windows, ensure we're using CPU-only torch.
-    # If CUDA or ROCm torch is installed (local dev), swap to CPU torch before
-    # building, then restore afterwards. This prevents PyInstaller from bundling
-    # GPU libraries into the CPU binary.
-    restore_torch = None
+    # If CUDA torch is installed (local dev), swap to CPU torch before building,
+    # then restore CUDA torch after. This prevents PyInstaller from bundling
+    # ~3GB of CUDA DLLs into the CPU binary.
+    restore_cuda = False
+    if not cuda and platform.system() == "Windows":
+        import subprocess
+
+        result = subprocess.run(
+            [sys.executable, "-c", "import torch; print(torch.version.cuda or '')"], capture_output=True, text=True
+        )
+        has_cuda_torch = bool(result.stdout.strip())
+        if has_cuda_torch:
+            logger.info("CUDA torch detected — installing CPU torch for CPU build...")
+            subprocess.run(
+                [
+                    sys.executable,
+                    "-m",
+                    "pip",
+                    "install",
+                    "torch",
+                    "torchvision",
+                    "torchaudio",
+                    "--index-url",
+                    "https://download.pytorch.org/whl/cpu",
+                    "--force-reinstall",
+                    "-q",
+                ],
+                check=True,
+            )
+            restore_cuda = True
+
+    # Run PyInstaller
     try:
-        if not cuda and not rocm and platform.system() == "Windows":
-            import subprocess
-
-            cuda_result = subprocess.run(
-                [sys.executable, "-c", "import torch; print(torch.version.cuda or '')"], capture_output=True, text=True
-            )
-            rocm_result = subprocess.run(
-                [sys.executable, "-c", "import torch; print(torch.version.hip or '')"], capture_output=True, text=True
-            )
-
-            if cuda_result.stdout.strip():
-                restore_torch = "cuda"
-                logger.info("CUDA torch detected — installing CPU torch for CPU build...")
-                subprocess.run(
-                    [
-                        sys.executable,
-                        "-m",
-                        "pip",
-                        "install",
-                        "torch",
-                        "torchvision",
-                        "torchaudio",
-                        "--index-url",
-                        "https://download.pytorch.org/whl/cpu",
-                        "--force-reinstall",
-                        "--no-deps",
-                        "-q",
-                    ],
-                    check=True,
-                )
-            elif rocm_result.stdout.strip():
-                restore_torch = "rocm"
-                logger.info("ROCm torch detected — installing CPU torch for CPU build...")
-                subprocess.run(
-                    [
-                        sys.executable,
-                        "-m",
-                        "pip",
-                        "install",
-                        "torch",
-                        "torchvision",
-                        "torchaudio",
-                        "--index-url",
-                        "https://download.pytorch.org/whl/cpu",
-                        "--force-reinstall",
-                        "--no-deps",
-                        "-q",
-                    ],
-                    check=True,
-                )
-
-        # For ROCm builds on Windows, ensure ROCm torch is installed.
-        if rocm and platform.system() == "Windows":
-            import subprocess
-
-            if sys.implementation.name != "cpython" or sys.version_info[:2] != (3, 12):
-                raise RuntimeError(
-                    "ROCm wheels are cp312-cp312-specific; "
-                    f"got {sys.implementation.name} {sys.version.split()[0]}. "
-                    "Use CPython 3.12 to build the ROCm binary."
-                )
-
-            result = subprocess.run(
-                [sys.executable, "-c", "import torch; print(torch.version.hip or '')"], capture_output=True, text=True
-            )
-            has_rocm_torch = bool(result.stdout.strip())
-            if not has_rocm_torch:
-                logger.info("ROCm torch not detected — installing ROCm torch for ROCm build...")
-
-                # Determine what to restore BEFORE overwriting the environment
-                cuda_result = subprocess.run(
-                    [sys.executable, "-c", "import torch; print(torch.version.cuda or '')"],
-                    capture_output=True,
-                    text=True,
-                )
-                if cuda_result.stdout.strip():
-                    restore_torch = "cuda"
-                else:
-                    restore_torch = "cpu"
-
-                # Now overwrite the environment safely
-                subprocess.run(
-                    [
-                        sys.executable,
-                        "-m",
-                        "pip",
-                        "install",
-                        "https://repo.radeon.com/rocm/windows/rocm-rel-7.2.1/rocm_sdk_core-7.2.1-py3-none-win_amd64.whl",
-                        "https://repo.radeon.com/rocm/windows/rocm-rel-7.2.1/rocm_sdk_devel-7.2.1-py3-none-win_amd64.whl",
-                        "https://repo.radeon.com/rocm/windows/rocm-rel-7.2.1/rocm_sdk_libraries_custom-7.2.1-py3-none-win_amd64.whl",
-                        "https://repo.radeon.com/rocm/windows/rocm-rel-7.2.1/rocm-7.2.1.tar.gz",
-                        "--no-deps",
-                        "-q",
-                    ],
-                    check=True,
-                )
-                subprocess.run(
-                    [
-                        sys.executable,
-                        "-m",
-                        "pip",
-                        "install",
-                        "https://repo.radeon.com/rocm/windows/rocm-rel-7.2.1/torch-2.9.1%2Brocm7.2.1-cp312-cp312-win_amd64.whl",
-                        "https://repo.radeon.com/rocm/windows/rocm-rel-7.2.1/torchaudio-2.9.1%2Brocm7.2.1-cp312-cp312-win_amd64.whl",
-                        "https://repo.radeon.com/rocm/windows/rocm-rel-7.2.1/torchvision-0.24.1%2Brocm7.2.1-cp312-cp312-win_amd64.whl",
-                        "--force-reinstall",
-                        "--no-deps",
-                        "-q",
-                    ],
-                    check=True,
-                )
-
-        # Run PyInstaller
         PyInstaller.__main__.run(args)
     finally:
-        # Restore torch if we swapped it out (even on build failure)
-        if restore_torch == "cuda":
+        # Restore CUDA torch if we swapped it out (even on build failure)
+        if restore_cuda:
             logger.info("Restoring CUDA torch...")
             import subprocess
 
@@ -619,52 +472,10 @@ def build_server(cuda=False, rocm=False):
                     "--index-url",
                     "https://download.pytorch.org/whl/cu128",
                     "--force-reinstall",
-                    "--no-deps",
                     "-q",
                 ],
                 check=True,
             )
-        elif restore_torch == "rocm":
-            logger.info("Restoring ROCm torch...")
-            import subprocess
-
-            subprocess.run(
-                [
-                    sys.executable,
-                    "-m",
-                    "pip",
-                    "install",
-                    "https://repo.radeon.com/rocm/windows/rocm-rel-7.2.1/torch-2.9.1%2Brocm7.2.1-cp312-cp312-win_amd64.whl",
-                    "https://repo.radeon.com/rocm/windows/rocm-rel-7.2.1/torchaudio-2.9.1%2Brocm7.2.1-cp312-cp312-win_amd64.whl",
-                    "https://repo.radeon.com/rocm/windows/rocm-rel-7.2.1/torchvision-0.24.1%2Brocm7.2.1-cp312-cp312-win_amd64.whl",
-                    "--force-reinstall",
-                    "--no-deps",
-                    "-q",
-                ],
-                check=True,
-            )
-        elif restore_torch == "cpu":
-            logger.info("Restoring CPU torch...")
-            import subprocess
-
-            subprocess.run(
-                [
-                    sys.executable,
-                    "-m",
-                    "pip",
-                    "install",
-                    "torch",
-                    "torchvision",
-                    "torchaudio",
-                    "--index-url",
-                    "https://download.pytorch.org/whl/cpu",
-                    "--force-reinstall",
-                    "--no-deps",
-                    "-q",
-                ],
-                check=True,
-            )
-
 
     logger.info("Binary built in %s", backend_dir / "dist" / binary_name)
 
@@ -766,11 +577,6 @@ if __name__ == "__main__":
         action="store_true",
         help="Build CUDA-enabled binary (voicebox-server-cuda)",
     )
-    parser.add_argument(
-        "--rocm",
-        action="store_true",
-        help="Build ROCm-enabled binary (voicebox-server-rocm) for AMD GPUs",
-    )
     parser.add_argument(
         "--shim",
         action="store_true",
@@ -780,5 +586,4 @@ if __name__ == "__main__":
     if cli_args.shim:
         build_shim()
     else:
-        build_server(cuda=cli_args.cuda, rocm=cli_args.rocm)
-
+        build_server(cuda=cli_args.cuda)

backend/config.py

@@ -138,3 +138,17 @@ def get_models_dir() -> Path:
     path = _data_dir / "models"
     path.mkdir(parents=True, exist_ok=True)
     return path
+
+
+# Voicebox Cloud (backup & sync). Two hosts: the web app owns auth + device
+# pairing (voicebox.sh), the API owns sync + account endpoints
+# (api.voicebox.sh). Override both for local development, e.g.
+# VOICEBOX_CLOUD_URL=http://localhost:17592 VOICEBOX_CLOUD_API_URL=http://localhost:17593
+def get_cloud_web_url() -> str:
+    """Base URL of the Voicebox Cloud web app (auth + /connect + exchange)."""
+    return os.environ.get("VOICEBOX_CLOUD_URL", "https://voicebox.sh").rstrip("/")
+
+
+def get_cloud_api_url() -> str:
+    """Base URL of the Voicebox Cloud API (bearer-authenticated sync/account)."""
+    return os.environ.get("VOICEBOX_CLOUD_API_URL", "https://api.voicebox.sh").rstrip("/")

backend/database/__init__.py

@@ -11,6 +11,7 @@ from .models import (
     Capture,
     CaptureSettings,
     ChannelDeviceMapping,
+    CloudSettings,
     EffectPreset,
     Generation,
     GenerationSettings,
@@ -32,6 +33,7 @@ __all__ = [
     "Capture",
     "CaptureSettings",
     "ChannelDeviceMapping",
+    "CloudSettings",
     "EffectPreset",
     "Generation",
     "GenerationSettings",

backend/database/models.py

@@ -234,6 +234,28 @@ class GenerationSettings(Base):
     updated_at = Column(DateTime, default=datetime.utcnow, onupdate=datetime.utcnow)
 
 
+class CloudSettings(Base):
+    """Singleton row holding the link to a Voicebox Cloud account.
+
+    Populated by the "Log in with browser" pairing flow (see services/cloud.py):
+    the browser hands back a one-time code, which the backend exchanges for an
+    ``api_key`` it stores here. The key is a bearer credential for
+    api.voicebox.sh — auth only, never an encryption key (E2E key material lives
+    elsewhere). Stored in the local app database alongside the user's other data;
+    moving it to the OS keychain is a future hardening step. The ``id`` is
+    always 1; a null ``api_key`` means "not connected".
+    """
+
+    __tablename__ = "cloud_settings"
+
+    id = Column(Integer, primary_key=True, default=1)
+    api_key = Column(String, nullable=True)
+    device_name = Column(String, nullable=True)
+    account_user_id = Column(String, nullable=True)
+    connected_at = Column(DateTime, nullable=True)
+    updated_at = Column(DateTime, default=datetime.utcnow, onupdate=datetime.utcnow)
+
+
 class MCPClientBinding(Base):
     """Per-MCP-client settings (voice profile, engine, personality default).
 

backend/models.py

@@ -442,8 +442,7 @@ class HealthResponse(BaseModel):
     gpu_type: Optional[str] = None  # GPU type (CUDA, MPS, or None)
     vram_used_mb: Optional[float] = None
     backend_type: Optional[str] = None  # Backend type (mlx or pytorch)
-    backend_variant: Optional[str] = None  # Binary variant (cpu, cuda, or rocm)
-    supports_rocm: bool = False  # AMD GPU on Windows — the ROCm backend is applicable
+    backend_variant: Optional[str] = None  # Binary variant (cpu or cuda)
     gpu_compatibility_warning: Optional[str] = None  # Warning if GPU arch unsupported
 
 
@@ -794,3 +793,24 @@ class AvailableEffectsResponse(BaseModel):
     """Response listing all available effect types."""
 
     effects: List[AvailableEffect]
+
+
+# ─── Cloud (backup & sync) ──────────────────────────────────────────────
+
+
+class CloudLoginStartResponse(BaseModel):
+    """Returned when the desktop kicks off browser login. The backend has
+    already opened the browser; the URL is included for fallback/debugging."""
+
+    authorize_url: str
+
+
+class CloudStatusResponse(BaseModel):
+    """Current link between this device and a Voicebox Cloud account."""
+
+    connected: bool
+    device_name: Optional[str] = None
+    account_user_id: Optional[str] = None
+    key_prefix: Optional[str] = None
+    connected_at: Optional[datetime] = None
+    dashboard_url: str

backend/pyi_rth_rocm_sdk.py

@@ -1,85 +0,0 @@
-"""
-Runtime hook: repair rocm_sdk.find_libraries under PyInstaller.
-
-rocm_sdk 7.2.x ships a find_libraries() with a latent bug: when the
-backend package (_rocm_sdk_core / _rocm_sdk_libraries_{target}) cannot
-be imported, the except clause records the miss but falls through to
-`py_root = Path(py_module.__file__).parent`, where py_module was never
-assigned. This surfaces as UnboundLocalError instead of the intended
-ModuleNotFoundError, masking the real cause.
-
-Frozen apps trip this because rocm_sdk imports the backend packages
-dynamically via importlib, which PyInstaller's static analyzer cannot
-see. We re-collect those packages in build_binary.py; this hook is
-defense-in-depth: it replaces find_libraries with a corrected version
-so any future missing-package case surfaces a readable error.
-"""
-
-
-def _patch_rocm_sdk():
-    try:
-        import rocm_sdk
-        from rocm_sdk import _dist_info
-    except ModuleNotFoundError as e:
-        if e.name not in {"rocm_sdk", "rocm_sdk._dist_info"}:
-            raise
-        return
-
-    import importlib
-    import platform
-    from pathlib import Path
-
-    def find_libraries(*shortnames):
-        paths = []
-        missing_extras = set()
-        is_windows = platform.system() == "Windows"
-        for shortname in shortnames:
-            try:
-                lib_entry = _dist_info.ALL_LIBRARIES[shortname]
-            except KeyError:
-                raise ModuleNotFoundError(f"Unknown rocm library '{shortname}'") from None
-
-            if is_windows and not lib_entry.dll_pattern:
-                continue
-
-            package = lib_entry.package
-            target_family = None
-            if package.is_target_specific:
-                target_family = _dist_info.determine_target_family()
-            py_package_name = package.get_py_package_name(target_family)
-            try:
-                py_module = importlib.import_module(py_package_name)
-            except ModuleNotFoundError as e:
-                if e.name != py_package_name:
-                    raise
-                missing_extras.add(package.logical_name)
-                continue
-
-            py_root = Path(py_module.__file__).parent
-            if is_windows:
-                relpath = py_root / lib_entry.windows_relpath
-                entry_pattern = lib_entry.dll_pattern
-            else:
-                relpath = py_root / lib_entry.posix_relpath
-                entry_pattern = lib_entry.so_pattern
-            matching_paths = sorted(relpath.glob(entry_pattern))
-            if len(matching_paths) == 0:
-                raise FileNotFoundError(
-                    f"Could not find rocm library '{shortname}' at path "
-                    f"'{relpath},' no match for pattern '{entry_pattern}'"
-                )
-            paths.append(matching_paths[0])
-
-        if missing_extras:
-            raise ModuleNotFoundError(
-                f"Missing required rocm backend packages: "
-                f"{', '.join(sorted(missing_extras))}. The frozen build did "
-                f"not bundle _rocm_sdk_core / _rocm_sdk_libraries_<target>. "
-                f"Check build_binary.py --collect-all flags."
-            )
-        return paths
-
-    rocm_sdk.find_libraries = find_libraries
-
-
-_patch_rocm_sdk()

backend/requirements-rocm.txt

@@ -1,4 +0,0 @@
---extra-index-url https://repo.radeon.com/rocm/windows/rocm-rel-7.2.1/
-torch==2.9.1+rocm7.2.1
-torchaudio==2.9.1+rocm7.2.1
-torchvision==0.24.1+rocm7.2.1

backend/routes/__init__.py

@@ -20,10 +20,10 @@ def register_routers(app: FastAPI) -> None:
     from .settings import router as settings_router
     from .tasks import router as tasks_router
     from .cuda import router as cuda_router
-    from .rocm import router as rocm_router
     from .speak import router as speak_router
     from .mcp_bindings import router as mcp_bindings_router
     from .events import router as events_router
+    from .cloud import router as cloud_router
 
     app.include_router(health_router)
     app.include_router(profiles_router)
@@ -40,7 +40,7 @@ def register_routers(app: FastAPI) -> None:
     app.include_router(settings_router)
     app.include_router(tasks_router)
     app.include_router(cuda_router)
-    app.include_router(rocm_router)
     app.include_router(speak_router)
     app.include_router(mcp_bindings_router)
     app.include_router(events_router)
+    app.include_router(cloud_router)

backend/routes/cloud.py

@@ -0,0 +1,75 @@
+"""Voicebox Cloud device login routes.
+
+The browser-based pairing flow:
+  1. POST /cloud/login/start  — opens the browser to the cloud authorize page.
+  2. GET  /cloud/callback     — the browser lands here with a one-time code;
+                                the backend exchanges it for an API key.
+  3. GET  /cloud/status       — the UI polls this to learn when it connected.
+  4. POST /cloud/disconnect   — forget the local credential.
+"""
+
+import socket
+
+from fastapi import APIRouter, Depends, Request
+from fastapi.responses import HTMLResponse
+from sqlalchemy.orm import Session
+
+from .. import models
+from ..database import get_db
+from ..services import cloud as cloud_service
+
+router = APIRouter(prefix="/cloud", tags=["cloud"])
+
+
+def _callback_url(request: Request) -> str:
+    # Always loopback — the cloud only redirects codes to 127.0.0.1/localhost.
+    port = request.url.port or 17493
+    return f"http://127.0.0.1:{port}/cloud/callback"
+
+
+@router.post("/login/start", response_model=models.CloudLoginStartResponse)
+async def start_cloud_login(request: Request):
+    device_name = socket.gethostname() or "Desktop"
+    authorize_url = cloud_service.start_login(_callback_url(request), device_name)
+    return models.CloudLoginStartResponse(authorize_url=authorize_url)
+
+
+@router.get("/callback", response_class=HTMLResponse)
+async def cloud_callback(
+    request: Request,
+    code: str = "",
+    state: str = "",
+    db: Session = Depends(get_db),
+):
+    ok, message = await cloud_service.handle_callback(db, code=code, state=state)
+    heading = "You're connected" if ok else "Couldn't connect"
+    accent = "#16a34a" if ok else "#dc2626"
+    sub = (
+        "Voicebox is now linked to your account. You can close this tab and return to the app."
+        if ok
+        else message
+    )
+    html = f"""<!doctype html>
+<html lang="en"><head><meta charset="utf-8" />
+<meta name="viewport" content="width=device-width, initial-scale=1" />
+<title>Voicebox Cloud</title>
+<style>
+  body {{ margin:0; min-height:100vh; display:flex; align-items:center; justify-content:center;
+    font-family: ui-sans-serif, system-ui, -apple-system, sans-serif; background:#0b0b0d; color:#e7e7ea; }}
+  .card {{ max-width:28rem; padding:2.5rem; text-align:center; }}
+  h1 {{ font-size:1.5rem; margin:0 0 .5rem; color:{accent}; }}
+  p {{ color:#a1a1aa; line-height:1.5; }}
+</style></head>
+<body><div class="card"><h1>{heading}</h1><p>{sub}</p></div></body></html>"""
+    return HTMLResponse(content=html, status_code=200 if ok else 400)
+
+
+@router.get("/status", response_model=models.CloudStatusResponse)
+async def cloud_status(db: Session = Depends(get_db)):
+    return models.CloudStatusResponse(**cloud_service.get_status(db))
+
+
+@router.post("/disconnect", response_model=models.CloudStatusResponse)
+async def cloud_disconnect(db: Session = Depends(get_db)):
+    cloud_service.disconnect(db)
+    return models.CloudStatusResponse(**cloud_service.get_status(db))

backend/routes/health.py

@@ -13,7 +13,7 @@ from sqlalchemy.orm import Session
 from .. import config, models
 from ..services import tts
 from ..database import get_db
-from ..utils.platform_detect import get_backend_type, is_amd_gpu_windows
+from ..utils.platform_detect import get_backend_type
 
 router = APIRouter()
 
@@ -103,10 +103,7 @@ async def health():
 
     gpu_type = None
     if has_cuda:
-        if hasattr(torch.version, "hip") and torch.version.hip:
-            gpu_type = f"ROCm ({torch.cuda.get_device_name(0)})"
-        else:
-            gpu_type = f"CUDA ({torch.cuda.get_device_name(0)})"
+        gpu_type = f"CUDA ({torch.cuda.get_device_name(0)})"
     elif has_mps:
         gpu_type = "MPS (Apple Silicon)"
     elif backend_type == "mlx":
@@ -167,15 +164,6 @@ async def health():
     except Exception:
         pass
 
-    default_variant = "cpu"
-    if has_cuda:
-        if hasattr(torch.version, "hip") and torch.version.hip:
-            default_variant = "rocm"
-        else:
-            default_variant = "cuda"
-    elif has_xpu:
-        default_variant = "xpu"
-
     return models.HealthResponse(
         status="healthy",
         model_loaded=model_loaded,
@@ -185,8 +173,10 @@ async def health():
         gpu_type=gpu_type,
         vram_used_mb=vram_used,
         backend_type=backend_type,
-        backend_variant=os.environ.get("VOICEBOX_BACKEND_VARIANT", default_variant),
-        supports_rocm=is_amd_gpu_windows(),
+        backend_variant=os.environ.get(
+            "VOICEBOX_BACKEND_VARIANT",
+            "cuda" if torch.cuda.is_available() else ("xpu" if has_xpu else "cpu"),
+        ),
         gpu_compatibility_warning=gpu_compat_warning,
     )
 

backend/routes/rocm.py

@@ -1,79 +0,0 @@
-"""ROCm backend management endpoints."""
-
-import logging
-
-from fastapi import APIRouter, HTTPException
-from fastapi.responses import StreamingResponse
-
-from ..services.task_queue import create_background_task
-from ..utils.progress import get_progress_manager
-
-router = APIRouter()
-
-logger = logging.getLogger(__name__)
-
-
-@router.get("/backend/rocm-status")
-async def get_rocm_status():
-    """Get ROCm backend download/availability status."""
-    from ..services import rocm
-
-    return rocm.get_rocm_status()
-
-
-@router.post("/backend/download-rocm")
-async def download_rocm_backend():
-    """Download the ROCm backend binary."""
-    from ..services import rocm
-
-    progress_manager = get_progress_manager()
-    existing = progress_manager.get_progress(rocm.PROGRESS_KEY)
-    if existing and existing.get("status") in {"downloading", "extracting"}:
-        raise HTTPException(status_code=409, detail="ROCm backend download already in progress")
-
-    async def _download():
-        try:
-            await rocm.download_rocm_binary()
-        except Exception as e:
-            logger.error("ROCm download failed: %s", e)
-
-    create_background_task(_download())
-    return {"message": "ROCm backend download started", "progress_key": rocm.PROGRESS_KEY}
-
-
-@router.delete("/backend/rocm")
-async def delete_rocm_backend():
-    """Delete the downloaded ROCm backend binary."""
-    from ..services import rocm
-
-    if rocm.is_rocm_active():
-        raise HTTPException(
-            status_code=409,
-            detail="Cannot delete ROCm backend while it is active. Switch to CPU first.",
-        )
-
-    deleted = await rocm.delete_rocm_binary()
-    if not deleted:
-        raise HTTPException(status_code=404, detail="No ROCm backend found to delete")
-
-    return {"message": "ROCm backend deleted"}
-
-
-@router.get("/backend/rocm-progress")
-async def get_rocm_download_progress():
-    """Get ROCm backend download progress via Server-Sent Events."""
-    progress_manager = get_progress_manager()
-
-    async def event_generator():
-        async for event in progress_manager.subscribe("rocm-backend"):
-            yield event
-
-    return StreamingResponse(
-        event_generator(),
-        media_type="text/event-stream",
-        headers={
-            "Cache-Control": "no-cache",
-            "Connection": "keep-alive",
-            "X-Accel-Buffering": "no",
-        },
-    )

backend/server.py

@@ -7,7 +7,6 @@ absolute imports instead of relative imports.
 
 import sys
 import os
-import re
 
 # On Windows with --noconsole (PyInstaller), sys.stdout/stderr are None.
 # They can also be broken file objects in some edge cases.
@@ -48,17 +47,6 @@ if "--version" in sys.argv:
     print(f"voicebox-server {__version__}")
     sys.exit(0)
 
-# Detect backend variant from binary name BEFORE importing backend modules
-# so that env-var guards in app.py (e.g. HSA_OVERRIDE_GFX_VERSION) fire at import time.
-_binary_name = os.path.basename(sys.executable).lower()
-if re.search(r"voicebox-server-rocm(\.exe)?$", _binary_name):
-    os.environ["VOICEBOX_BACKEND_VARIANT"] = "rocm"
-elif re.search(r"voicebox-server-cuda(\.exe)?$", _binary_name):
-    os.environ["VOICEBOX_BACKEND_VARIANT"] = "cuda"
-else:
-    os.environ.setdefault("VOICEBOX_BACKEND_VARIANT", "cpu")
-
-
 import logging
 
 # Set up logging FIRST, before any imports that might fail
@@ -272,7 +260,16 @@ if __name__ == "__main__":
         if args.parent_pid is not None and args.parent_pid <= 0:
             parser.error("--parent-pid must be a positive integer")
 
-        logger.info(f"Backend variant: {os.environ.get('VOICEBOX_BACKEND_VARIANT', 'cpu').upper()}")
+        # Detect backend variant from binary name
+        # voicebox-server-cuda → sets VOICEBOX_BACKEND_VARIANT=cuda
+        import os
+        binary_name = os.path.basename(sys.executable).lower()
+        if "cuda" in binary_name:
+            os.environ["VOICEBOX_BACKEND_VARIANT"] = "cuda"
+            logger.info("Backend variant: CUDA")
+        else:
+            os.environ["VOICEBOX_BACKEND_VARIANT"] = "cpu"
+            logger.info("Backend variant: CPU")
 
         # Register parent watchdog to start after server is fully ready
         if args.parent_pid is not None:

backend/services/cloud.py

@@ -0,0 +1,183 @@
+"""
+Voicebox Cloud device login — the "Log in with browser" flow.
+
+The desktop opens the browser to ``{web}/connect``; the user authorizes while
+signed in; the cloud redirects a single-use code back to this backend's loopback
+callback. We exchange that code (server-to-server, over TLS) for a ``voicebox_…``
+API key, verify the key against the API, and store it locally. The key never
+travels through a browser URL, and an unfinished flow leaves nothing behind.
+
+The ``state`` we mint and round-trip prevents login-CSRF: a callback whose state
+we didn't issue (e.g. an attacker tricking the user into hitting the loopback
+callback with their own code) is rejected.
+"""
+
+import logging
+import secrets
+import time
+import webbrowser
+from urllib.parse import urlencode
+
+import httpx
+from sqlalchemy.exc import IntegrityError
+from sqlalchemy.orm import Session
+
+from .. import config
+from ..database import CloudSettings as DBCloudSettings
+
+logger = logging.getLogger(__name__)
+
+SINGLETON_ID = 1
+PENDING_TTL_SECONDS = 600  # the whole browser flow must finish within 10 min
+
+# state -> expiry epoch. In-memory: a single backend process owns the flow, and a
+# dropped pairing should simply be restarted.
+_pending: dict[str, float] = {}
+
+
+def _prune() -> None:
+    now = time.time()
+    for state, expiry in list(_pending.items()):
+        if expiry < now:
+            _pending.pop(state, None)
+
+
+def _json_dict(response: httpx.Response) -> dict | None:
+    """Parsed JSON body, or None when it isn't a JSON object."""
+    try:
+        payload = response.json()
+    except ValueError:
+        return None
+    return payload if isinstance(payload, dict) else None
+
+
+def _consume_state(state: str) -> bool:
+    """Validate and single-use-consume a pending state."""
+    _prune()
+    expiry = _pending.pop(state, None)
+    return expiry is not None and expiry >= time.time()
+
+
+def start_login(callback_url: str, device_name: str) -> str:
+    """Mint a state, build the authorize URL, and open the browser.
+
+    Returns the authorize URL (also opened here) so the caller can surface it as
+    a fallback if the browser didn't open.
+    """
+    state = secrets.token_urlsafe(24)
+    _prune()
+    _pending[state] = time.time() + PENDING_TTL_SECONDS
+
+    params = urlencode({"redirect_uri": callback_url, "state": state, "name": device_name})
+    authorize_url = f"{config.get_cloud_web_url()}/connect?{params}"
+
+    try:
+        webbrowser.open(authorize_url)
+    except Exception:  # pragma: no cover - platform dependent
+        logger.exception("failed to open browser for cloud login")
+
+    return authorize_url
+
+
+async def handle_callback(db: Session, code: str, state: str) -> tuple[bool, str]:
+    """Exchange the code for an API key and store it. Returns (ok, message)."""
+    if not _consume_state(state):
+        return False, "This sign-in link is invalid or has expired. Start again from the app."
+    if not code:
+        return False, "Missing authorization code."
+
+    web = config.get_cloud_web_url()
+    api = config.get_cloud_api_url()
+    try:
+        async with httpx.AsyncClient(timeout=15.0) as client:
+            exchanged = await client.post(f"{web}/api/connect/exchange", json={"code": code})
+            if exchanged.status_code != 200:
+                logger.warning("cloud exchange rejected code: %s", exchanged.status_code)
+                return False, "Could not complete sign-in — the code was rejected."
+            payload = _json_dict(exchanged)
+            if payload is None:
+                logger.warning("cloud exchange returned a non-JSON payload")
+                return False, "Voicebox Cloud returned an unexpected response."
+            api_key = payload.get("key")
+            device_name = payload.get("label")
+            if not api_key:
+                return False, "Voicebox Cloud did not return a key."
+
+            # Confirm the freshly minted key actually authenticates the API.
+            me = await client.get(
+                f"{api}/v1/account/me",
+                headers={"Authorization": f"Bearer {api_key}"},
+            )
+            if me.status_code != 200:
+                logger.warning("minted key failed verification: %s", me.status_code)
+                return False, "Sign-in succeeded but the key could not be verified."
+            # The 200 above proves the key works; the user id is best-effort.
+            data = (_json_dict(me) or {}).get("data")
+            account_user_id = data.get("userId") if isinstance(data, dict) else None
+    except httpx.HTTPError:
+        logger.exception("network error during cloud exchange")
+        return False, "Could not reach Voicebox Cloud. Check your connection and try again."
+
+    _store_key(db, api_key=api_key, device_name=device_name, account_user_id=account_user_id)
+    logger.info("connected to Voicebox Cloud as device %r", device_name)
+    return True, "Connected"
+
+
+def _get_or_create_row(db: Session) -> DBCloudSettings:
+    row = db.query(DBCloudSettings).filter(DBCloudSettings.id == SINGLETON_ID).first()
+    if row is None:
+        row = DBCloudSettings(id=SINGLETON_ID)
+        db.add(row)
+        try:
+            db.commit()
+        except IntegrityError:
+            # Another request created the singleton concurrently.
+            db.rollback()
+            row = db.query(DBCloudSettings).filter(DBCloudSettings.id == SINGLETON_ID).one()
+        else:
+            db.refresh(row)
+    return row
+
+
+def _store_key(db: Session, *, api_key: str, device_name: str | None, account_user_id: str | None):
+    from datetime import datetime
+
+    row = _get_or_create_row(db)
+    row.api_key = api_key
+    row.device_name = device_name
+    row.account_user_id = account_user_id
+    row.connected_at = datetime.utcnow()
+    db.commit()
+
+
+def get_status(db: Session) -> dict:
+    """Local view of the cloud link — never returns the full key."""
+    row = _get_or_create_row(db)
+    connected = bool(row.api_key)
+    # Prefix only: "voicebox_" (9) + 8 chars, matching the cloud's key_prefix.
+    key_prefix = row.api_key[:17] if row.api_key else None
+    return {
+        "connected": connected,
+        "device_name": row.device_name if connected else None,
+        "account_user_id": row.account_user_id if connected else None,
+        "key_prefix": key_prefix,
+        "connected_at": row.connected_at if connected else None,
+        "dashboard_url": f"{config.get_cloud_web_url()}/account",
+    }
+
+
+def disconnect(db: Session) -> None:
+    """Forget the local credential. The key remains valid on the server until
+    revoked from the account dashboard — surface that in the UI."""
+    row = _get_or_create_row(db)
+    row.api_key = None
+    row.device_name = None
+    row.account_user_id = None
+    row.connected_at = None
+    db.commit()
+
+
+def get_api_key(db: Session) -> str | None:
+    """The stored bearer key, for the (future) sync client. None if not linked."""
+    row = _get_or_create_row(db)
+    return row.api_key

backend/services/rocm.py

@@ -1,467 +0,0 @@
-"""
-ROCm backend download, assembly, and verification.
-
-Downloads two archives from GitHub Releases:
-  1. Server core (voicebox-server-rocm.tar.gz) — the exe + non-AMD deps,
-     versioned with the app.
-  2. ROCm libs (rocm-libs-{version}.tar.gz) — AMD runtime libraries,
-     versioned independently (only redownloaded on ROCm toolkit bump).
-
-Both archives are extracted into {data_dir}/backends/rocm/ which forms the
-complete PyInstaller --onedir directory structure that torch expects.
-"""
-
-import asyncio
-import hashlib
-import json
-import logging
-import os
-import shutil
-import sys
-import tarfile
-from pathlib import Path
-from typing import Optional
-
-from ..config import get_data_dir
-from ..utils.progress import get_progress_manager
-from .. import __version__
-
-logger = logging.getLogger(__name__)
-
-GITHUB_RELEASES_URL = "https://github.com/jamiepine/voicebox/releases/download"
-
-PROGRESS_KEY = "rocm-backend"
-
-# The current expected ROCm libs version.  Bump this when we change the
-# ROCm toolkit version or torch's ROCm dependency changes (e.g. rocm7.2 -> rocm7.4).
-ROCM_LIBS_VERSION = "rocm7.2-v1"
-
-# Prevents concurrent download_rocm_binary() calls from racing on the same
-# temp file.  The auto-update background task and the manual HTTP endpoint
-# can both invoke download_rocm_binary(); without this lock the progress-
-# manager status check is a TOCTOU race.
-_download_lock = asyncio.Lock()
-
-
-def get_backends_dir() -> Path:
-    """Directory where downloaded backend binaries are stored."""
-    d = get_data_dir() / "backends"
-    d.mkdir(parents=True, exist_ok=True)
-    return d
-
-
-def get_rocm_dir() -> Path:
-    """Directory where the ROCm backend (onedir) is extracted."""
-    d = get_backends_dir() / "rocm"
-    d.mkdir(parents=True, exist_ok=True)
-    return d
-
-
-def get_rocm_exe_name() -> str:
-    """Platform-specific ROCm executable filename."""
-    if sys.platform == "win32":
-        return "voicebox-server-rocm.exe"
-    return "voicebox-server-rocm"
-
-
-def get_rocm_binary_path() -> Optional[Path]:
-    """Return path to the ROCm executable if it exists inside the onedir."""
-    p = get_rocm_dir() / get_rocm_exe_name()
-    if p.exists():
-        return p
-    return None
-
-
-def get_rocm_libs_manifest_path() -> Path:
-    """Path to the rocm-libs.json manifest inside the ROCm dir."""
-    return get_rocm_dir() / "rocm-libs.json"
-
-
-def get_installed_rocm_libs_version() -> Optional[str]:
-    """Read the installed ROCm libs version from rocm-libs.json, or None."""
-    manifest_path = get_rocm_libs_manifest_path()
-    if not manifest_path.exists():
-        return None
-    try:
-        data = json.loads(manifest_path.read_text())
-        return data.get("version")
-    except Exception as e:
-        logger.warning(f"Could not read rocm-libs.json: {e}")
-        return None
-
-
-def is_rocm_active() -> bool:
-    """Check if the current process is the ROCm binary.
-
-    The ROCm binary sets this env var on startup (see server.py).
-    """
-    return os.environ.get("VOICEBOX_BACKEND_VARIANT") == "rocm"
-
-
-def get_rocm_status() -> dict:
-    """Get current ROCm backend status for the API."""
-    progress_manager = get_progress_manager()
-    rocm_path = get_rocm_binary_path()
-    progress = progress_manager.get_progress(PROGRESS_KEY)
-    rocm_libs_version = get_installed_rocm_libs_version()
-
-    return {
-        "available": rocm_path is not None,
-        "active": is_rocm_active(),
-        "binary_path": str(rocm_path) if rocm_path else None,
-        "rocm_libs_version": rocm_libs_version,
-        "downloading": progress is not None and progress.get("status") == "downloading",
-        "download_progress": progress,
-    }
-
-
-def _needs_server_download(version: Optional[str] = None) -> bool:
-    """Check if the server core archive needs to be (re)downloaded."""
-    rocm_path = get_rocm_binary_path()
-    if not rocm_path:
-        return True
-    # Check if the binary version matches the expected app version
-    installed = get_rocm_binary_version()
-    expected = version or __version__
-    if expected.startswith("v"):
-        expected = expected[1:]
-    return installed != expected
-
-
-def _needs_rocm_libs_download() -> bool:
-    """Check if the ROCm libs archive needs to be (re)downloaded."""
-    installed = get_installed_rocm_libs_version()
-    if installed is None:
-        return True
-    return installed != ROCM_LIBS_VERSION
-
-
-async def _download_and_extract_archive(
-    client,
-    url: str,
-    sha256_url: Optional[str],
-    dest_dir: Path,
-    label: str,
-    progress_offset: int,
-    total_size: int,
-):
-    """Download a .tar.gz archive and extract it into dest_dir.
-
-    Args:
-        client: httpx.AsyncClient
-        url: URL of the .tar.gz archive
-        sha256_url: URL of the .sha256 checksum file (optional)
-        dest_dir: Directory to extract into
-        label: Human-readable label for progress updates
-        progress_offset: Byte offset for progress reporting (when downloading
-            multiple archives sequentially)
-        total_size: Total bytes across all downloads (for progress bar)
-    """
-    progress = get_progress_manager()
-    temp_path = dest_dir / f".download-{label.replace(' ', '-')}.tmp"
-
-    # Clean up leftover partial download
-    if temp_path.exists():
-        temp_path.unlink()
-
-    # Fetch expected checksum (fail-fast: never extract an unverified archive)
-    expected_sha = None
-    if sha256_url:
-        try:
-            sha_resp = await client.get(sha256_url)
-            sha_resp.raise_for_status()
-            expected_sha = sha_resp.text.strip().split()[0]
-            logger.info(f"{label}: expected SHA-256: {expected_sha[:16]}...")
-        except Exception as e:
-            raise RuntimeError(f"{label}: failed to fetch checksum from {sha256_url}") from e
-
-    # Stream download, verify, and extract — always clean up temp file
-    downloaded = 0
-    try:
-        async with client.stream("GET", url) as response:
-            response.raise_for_status()
-            with open(temp_path, "wb") as f:
-                async for chunk in response.aiter_bytes(chunk_size=1024 * 1024):
-                    f.write(chunk)
-                    downloaded += len(chunk)
-                    progress.update_progress(
-                        PROGRESS_KEY,
-                        current=progress_offset + downloaded,
-                        total=total_size,
-                        filename=f"Downloading {label}",
-                        status="downloading",
-                    )
-
-        # Verify integrity
-        if expected_sha:
-            progress.update_progress(
-                PROGRESS_KEY,
-                current=progress_offset + downloaded,
-                total=total_size,
-                filename=f"Verifying {label}...",
-                status="downloading",
-            )
-            sha256 = hashlib.sha256()
-            with open(temp_path, "rb") as f:
-                while True:
-                    data = f.read(1024 * 1024)
-                    if not data:
-                        break
-                    sha256.update(data)
-            actual = sha256.hexdigest()
-            if actual != expected_sha:
-                raise ValueError(
-                    f"{label} integrity check failed: expected {expected_sha[:16]}..., got {actual[:16]}..."
-                )
-            logger.info(f"{label}: integrity verified")
-
-        # Extract (use data filter for path traversal protection on Python 3.12+)
-        progress.update_progress(
-            PROGRESS_KEY,
-            current=progress_offset + downloaded,
-            total=total_size,
-            filename=f"Extracting {label}...",
-            status="downloading",
-        )
-        with tarfile.open(temp_path, "r:gz") as tar:
-            tar.extractall(path=dest_dir, filter="data")
-
-        logger.info(f"{label}: extracted to {dest_dir}")
-    finally:
-        if temp_path.exists():
-            temp_path.unlink()
-    return downloaded
-
-
-async def download_rocm_binary(version: Optional[str] = None):
-    """Download the ROCm backend (server core + ROCm libs if needed).
-
-    Downloads both archives from GitHub Releases, extracts them into
-    {data_dir}/backends/rocm/, and writes the rocm-libs.json manifest.
-
-    Only downloads what's needed:
-    - Server core: always redownloaded (versioned with app)
-    - ROCm libs: only if missing or version mismatch
-
-    Args:
-        version: Version tag (e.g. "v0.3.0"). Defaults to current app version.
-    """
-    if _download_lock.locked():
-        logger.info("ROCm download already in progress, skipping duplicate request")
-        return
-    async with _download_lock:
-        await _download_rocm_binary_locked(version)
-
-
-async def _download_rocm_binary_locked(version: Optional[str] = None):
-    """Inner implementation of download_rocm_binary, called under _download_lock."""
-    import httpx
-
-    if version is None:
-        version = f"v{__version__}"
-
-    progress = get_progress_manager()
-    rocm_dir = get_rocm_dir()
-
-    need_server = _needs_server_download(version)
-    need_libs = _needs_rocm_libs_download()
-
-    if not need_server and not need_libs:
-        logger.info("ROCm backend is up to date, nothing to download")
-        return
-
-    logger.info(
-        f"Starting ROCm backend download for {version} "
-        f"(server={'yes' if need_server else 'cached'}, "
-        f"libs={'yes' if need_libs else 'cached'})"
-    )
-    progress.update_progress(
-        PROGRESS_KEY,
-        current=0,
-        total=0,
-        filename="Preparing download...",
-        status="downloading",
-    )
-
-    # Server core and libs archive are both published under the app-version
-    # release tag; the libs content version is encoded in the filename only.
-    server_base_url = f"{GITHUB_RELEASES_URL}/{version}"
-    libs_base_url = server_base_url
-    server_archive = "voicebox-server-rocm.tar.gz"
-    libs_archive = f"rocm-libs-{ROCM_LIBS_VERSION}.tar.gz"
-
-    # Always stage when any download is needed, then atomically rename over
-    # rocm_dir on success. This prevents a failed mid-extraction from leaving
-    # rocm_dir in a partially-installed state that still passes the
-    # get_rocm_binary_path() existence check. Existing files are pre-copied
-    # into staging so partial updates (e.g. libs-only or server-only) preserve
-    # whatever isn't being re-downloaded.
-    use_staging = need_server or need_libs
-    staging_dir = get_backends_dir() / "rocm-staging"
-
-    if use_staging:
-        if staging_dir.exists():
-            shutil.rmtree(staging_dir)
-        staging_dir.mkdir(parents=True, exist_ok=True)
-        # Preserve existing files (server or libs) that don't need re-downloading.
-        # Extracted archives will overwrite only what we actually download.
-        if rocm_dir.exists():
-            shutil.copytree(rocm_dir, staging_dir, dirs_exist_ok=True)
-        extract_dir = staging_dir
-    else:
-        extract_dir = rocm_dir
-
-    try:
-        async with httpx.AsyncClient(follow_redirects=True, timeout=30.0) as client:
-            # Estimate total download size
-            total_size = 0
-            if need_server:
-                try:
-                    head = await client.head(f"{server_base_url}/{server_archive}")
-                    total_size += int(head.headers.get("content-length", 0))
-                except Exception:
-                    pass
-            if need_libs:
-                try:
-                    head = await client.head(f"{libs_base_url}/{libs_archive}")
-                    total_size += int(head.headers.get("content-length", 0))
-                except Exception:
-                    pass
-
-            logger.info(f"Total download size: {total_size / 1024 / 1024:.1f} MB")
-
-            offset = 0
-
-            # Download server core
-            if need_server:
-                server_downloaded = await _download_and_extract_archive(
-                    client,
-                    url=f"{server_base_url}/{server_archive}",
-                    sha256_url=f"{server_base_url}/{server_archive}.sha256",
-                    dest_dir=extract_dir,
-                    label="ROCm server",
-                    progress_offset=offset,
-                    total_size=total_size,
-                )
-                offset += server_downloaded
-
-                # Make executable on Unix
-                exe_path = extract_dir / get_rocm_exe_name()
-                if sys.platform != "win32" and exe_path.exists():
-                    exe_path.chmod(0o755)
-
-            # Download ROCm libs
-            if need_libs:
-                await _download_and_extract_archive(
-                    client,
-                    url=f"{libs_base_url}/{libs_archive}",
-                    sha256_url=f"{libs_base_url}/{libs_archive}.sha256",
-                    dest_dir=extract_dir,
-                    label="ROCm libraries",
-                    progress_offset=offset,
-                    total_size=total_size,
-                )
-
-                # Write local rocm-libs.json manifest
-                manifest = {"version": ROCM_LIBS_VERSION}
-                (extract_dir / "rocm-libs.json").write_text(json.dumps(manifest, indent=2) + "\n")
-
-        # Atomic swap: replace rocm_dir with the fully-extracted staging dir
-        if use_staging:
-            backup_dir = get_backends_dir() / "rocm-backup"
-            if backup_dir.exists():
-                shutil.rmtree(backup_dir)
-            if rocm_dir.exists():
-                rocm_dir.rename(backup_dir)
-            try:
-                staging_dir.rename(rocm_dir)
-            except Exception:
-                if backup_dir.exists() and not rocm_dir.exists():
-                    backup_dir.rename(rocm_dir)
-                raise
-            else:
-                if backup_dir.exists():
-                    shutil.rmtree(backup_dir)
-
-        logger.info(f"ROCm backend ready at {rocm_dir}")
-        progress.mark_complete(PROGRESS_KEY)
-
-    except Exception as e:
-        if use_staging and staging_dir.exists():
-            shutil.rmtree(staging_dir)
-        logger.error(f"ROCm backend download failed: {e}")
-        progress.mark_error(PROGRESS_KEY, str(e))
-        raise
-
-
-def get_rocm_binary_version() -> Optional[str]:
-    """Get the version of the installed ROCm binary, or None if not installed."""
-    import subprocess
-
-    rocm_path = get_rocm_binary_path()
-    if not rocm_path:
-        return None
-    try:
-        result = subprocess.run(
-            [str(rocm_path), "--version"],
-            capture_output=True,
-            text=True,
-            timeout=30,
-            cwd=str(rocm_path.parent),  # Run from the onedir directory
-        )
-        # Output format: "voicebox-server 0.3.0"
-        for line in result.stdout.strip().splitlines():
-            if "voicebox-server" in line:
-                return line.split()[-1]
-    except Exception as e:
-        logger.warning(f"Could not get ROCm binary version: {e}")
-    return None
-
-
-async def check_and_update_rocm_binary():
-    """Check if the ROCm binary is outdated and auto-download if so.
-
-    Called on server startup. Checks both server version and ROCm libs
-    version. Downloads only what's needed.
-    """
-    rocm_path = get_rocm_binary_path()
-    if not rocm_path:
-        return  # No ROCm binary installed, nothing to update
-
-    if is_rocm_active():
-        logger.info("ROCm backend is active; skipping auto-update to avoid replacing the running backend")
-        return
-
-    need_server = _needs_server_download()
-    need_libs = _needs_rocm_libs_download()
-
-    if not need_server and not need_libs:
-        logger.info(f"ROCm binary is up to date (server=v{__version__}, libs={get_installed_rocm_libs_version()})")
-        return
-
-    reasons = []
-    if need_server:
-        rocm_version = get_rocm_binary_version()
-        reasons.append(f"server v{rocm_version} != v{__version__}")
-    if need_libs:
-        installed_libs = get_installed_rocm_libs_version()
-        reasons.append(f"libs {installed_libs} != {ROCM_LIBS_VERSION}")
-
-    logger.info(f"ROCm backend needs update ({', '.join(reasons)}). Auto-downloading...")
-
-    try:
-        await download_rocm_binary()
-    except Exception as e:
-        logger.error(f"Auto-update of ROCm binary failed: {e}")
-
-
-async def delete_rocm_binary() -> bool:
-    """Delete the downloaded ROCm backend directory. Returns True if deleted."""
-    import shutil
-
-    rocm_dir = get_rocm_dir()
-    if rocm_dir.exists() and any(rocm_dir.iterdir()):
-        shutil.rmtree(rocm_dir)
-        logger.info(f"Deleted ROCm backend directory: {rocm_dir}")
-        return True
-    return False

backend/tests/test_amd_gpu_detect.py

@@ -1,96 +0,0 @@
-"""
-Phase 2.1 Test: AMD GPU detection on Windows.
-
-Validates is_amd_gpu_windows() via mocked WMI and torch queries.
-
-Usage:
-    python -m pytest backend/tests/test_amd_gpu_detect.py -v
-"""
-
-from unittest.mock import MagicMock, patch
-
-import pytest
-
-from backend.utils.platform_detect import is_amd_gpu_windows
-
-
-class TestAmdGpuWindows:
-    """Unit tests for is_amd_gpu_windows with mocks."""
-
-    @pytest.fixture(autouse=True)
-    def _clear_detection_cache(self):
-        # is_amd_gpu_windows is memoized; reset between cases so each mock takes effect.
-        is_amd_gpu_windows.cache_clear()
-        yield
-        is_amd_gpu_windows.cache_clear()
-
-    @patch("backend.utils.platform_detect.platform.system", return_value="Linux")
-    def test_returns_false_on_linux(self, _mock_system):
-        """Non-Windows platforms should always return False."""
-        assert is_amd_gpu_windows() is False
-
-    @patch("backend.utils.platform_detect.platform.system", return_value="Windows")
-    @patch(
-        "backend.utils.platform_detect.subprocess.run",
-        return_value=MagicMock(stdout="1\n", returncode=0),
-    )
-    def test_detects_amd_via_wmi(self, _mock_run, _mock_system):
-        """WMI reporting an AMD adapter should return True."""
-        assert is_amd_gpu_windows() is True
-
-    @patch("backend.utils.platform_detect.platform.system", return_value="Windows")
-    @patch(
-        "backend.utils.platform_detect.subprocess.run",
-        return_value=MagicMock(stdout="0\n", returncode=0),
-    )
-    def test_no_amd_via_wmi(self, _mock_run, _mock_system):
-        """WMI reporting zero AMD adapters should return False."""
-        assert is_amd_gpu_windows() is False
-
-    @patch("backend.utils.platform_detect.platform.system", return_value="Windows")
-    @patch(
-        "backend.utils.platform_detect.subprocess.run",
-        side_effect=Exception("WMI not available"),
-    )
-    @patch("torch.cuda.is_available", return_value=True)
-    @patch(
-        "torch.cuda.get_device_name",
-        return_value="AMD Radeon RX 7800 XT",
-    )
-    def test_fallback_to_torch_radeon(self, _mock_name, _mock_avail, _mock_run, _mock_system):
-        """When WMI fails, torch.cuda.get_device_name('Radeon') should return True."""
-        assert is_amd_gpu_windows() is True
-
-    @patch("backend.utils.platform_detect.platform.system", return_value="Windows")
-    @patch(
-        "backend.utils.platform_detect.subprocess.run",
-        side_effect=Exception("WMI not available"),
-    )
-    @patch("torch.cuda.is_available", return_value=True)
-    @patch(
-        "torch.cuda.get_device_name",
-        return_value="NVIDIA GeForce RTX 4090",
-    )
-    def test_fallback_to_torch_nvidia(self, _mock_name, _mock_avail, _mock_run, _mock_system):
-        """When WMI fails, torch.cuda.get_device_name('NVIDIA') should return False."""
-        assert is_amd_gpu_windows() is False
-
-    @patch("backend.utils.platform_detect.platform.system", return_value="Windows")
-    @patch(
-        "backend.utils.platform_detect.subprocess.run",
-        side_effect=Exception("WMI not available"),
-    )
-    @patch("torch.cuda.is_available", return_value=False)
-    def test_no_torch_cuda(self, _mock_avail, _mock_run, _mock_system):
-        """When WMI fails and torch.cuda is unavailable, should return False."""
-        assert is_amd_gpu_windows() is False
-
-    @patch("backend.utils.platform_detect.platform.system", return_value="Windows")
-    @patch(
-        "backend.utils.platform_detect.subprocess.run",
-        side_effect=Exception("WMI not available"),
-    )
-    def test_torch_not_installed(self, _mock_run, _mock_system):
-        """When torch is not installed, should return False without crashing."""
-        with patch.dict("sys.modules", {"torch": None}):
-            assert is_amd_gpu_windows() is False

backend/tests/test_package_rocm.py

@@ -1,121 +0,0 @@
-"""
-Tests for scripts/package_rocm.py — the ROCm onedir → server + libs splitter.
-
-The classifier can't be validated against a real AMD build on CI hardware, so
-these tests pin the file-classification rules against a synthetic onedir layout
-that mirrors the PyInstaller --rocm output (torch/lib HIP DLLs + bundled
-rocm_sdk runtime packages).
-
-Usage:
-    python -m pytest backend/tests/test_package_rocm.py -v
-"""
-
-import importlib.util
-import tarfile
-from pathlib import Path
-
-import pytest
-
-_PACKAGE_ROCM = Path(__file__).resolve().parents[2] / "scripts" / "package_rocm.py"
-_spec = importlib.util.spec_from_file_location("package_rocm", _PACKAGE_ROCM)
-package_rocm = importlib.util.module_from_spec(_spec)
-_spec.loader.exec_module(package_rocm)
-
-
-class TestIsRocmFile:
-    """Classification of individual files into core vs ROCm libs."""
-
-    @pytest.mark.parametrize(
-        "rel_path",
-        [
-            "_internal/torch/lib/amdhip64.dll",
-            "_internal/torch/lib/rocblas.dll",
-            "_internal/torch/lib/hipblaslt.dll",
-            "_internal/torch/lib/miopen.dll",
-            "_internal/_rocm_sdk_core/amd_comgr.dll",
-            "_internal/_rocm_sdk_libraries_custom/lib/rocblas/library/TensileLibrary.dat",
-            "_internal/_rocm_sdk_libraries_custom/lib/miopen/db/kernels.kdb",
-            # Windows path separators must be handled too.
-            "_internal\\torch\\lib\\rccl.dll",
-        ],
-    )
-    def test_runtime_files_are_rocm(self, rel_path):
-        assert package_rocm.is_rocm_file(rel_path) is True
-
-    @pytest.mark.parametrize(
-        "rel_path",
-        [
-            "voicebox-server-rocm.exe",
-            "_internal/python312.dll",
-            "_internal/torch/lib/torch_cpu.dll",
-            "_internal/torch/lib/c10.dll",
-            # Pure-python rocm_sdk glue stays in the core, even under an SDK dir.
-            "_internal/rocm_sdk/__init__.py",
-            "_internal/_rocm_sdk_core/_dist_info.py",
-            "_internal/torch/_inductor/codegen/something.py",
-        ],
-    )
-    def test_core_files_are_not_rocm(self, rel_path):
-        assert package_rocm.is_rocm_file(rel_path) is False
-
-
-def _write(path: Path, content: bytes = b"x"):
-    path.parent.mkdir(parents=True, exist_ok=True)
-    path.write_bytes(content)
-
-
-class TestPackage:
-    """End-to-end split of a synthetic onedir into the two archives."""
-
-    def test_split_and_manifest(self, tmp_path):
-        onedir = tmp_path / "voicebox-server-rocm"
-        _write(onedir / "voicebox-server-rocm.exe")
-        _write(onedir / "_internal" / "python312.dll")
-        _write(onedir / "_internal" / "rocm_sdk" / "__init__.py")
-        _write(onedir / "_internal" / "torch" / "lib" / "torch_cpu.dll")
-        _write(onedir / "_internal" / "torch" / "lib" / "amdhip64.dll")
-        _write(onedir / "_internal" / "_rocm_sdk_core" / "miopen.dll")
-        _write(
-            onedir
-            / "_internal"
-            / "_rocm_sdk_libraries_custom"
-            / "lib"
-            / "rocblas"
-            / "library"
-            / "TensileLibrary.dat"
-        )
-
-        out = tmp_path / "release-assets"
-        package_rocm.package(onedir, out, "rocm7.2-v1", ">=2.9.0,<2.10.0")
-
-        server = out / "voicebox-server-rocm.tar.gz"
-        libs = out / "rocm-libs-rocm7.2-v1.tar.gz"
-        assert server.exists()
-        assert libs.exists()
-        assert (out / "voicebox-server-rocm.tar.gz.sha256").exists()
-        assert (out / "rocm-libs-rocm7.2-v1.tar.gz.sha256").exists()
-
-        with tarfile.open(libs) as tar:
-            lib_names = set(tar.getnames())
-        with tarfile.open(server) as tar:
-            core_names = set(tar.getnames())
-
-        assert "_internal/torch/lib/amdhip64.dll" in lib_names
-        assert "_internal/_rocm_sdk_core/miopen.dll" in lib_names
-        assert (
-            "_internal/_rocm_sdk_libraries_custom/lib/rocblas/library/TensileLibrary.dat"
-            in lib_names
-        )
-        assert "voicebox-server-rocm.exe" in core_names
-        assert "_internal/torch/lib/torch_cpu.dll" in core_names
-        assert "_internal/rocm_sdk/__init__.py" in core_names
-        # Archives must be disjoint.
-        assert lib_names.isdisjoint(core_names)
-
-    def test_empty_rocm_set_exits(self, tmp_path):
-        onedir = tmp_path / "voicebox-server-rocm"
-        _write(onedir / "voicebox-server-rocm.exe")
-        _write(onedir / "_internal" / "torch" / "lib" / "torch_cpu.dll")
-
-        with pytest.raises(SystemExit):
-            package_rocm.package(onedir, tmp_path / "out", "rocm7.2-v1", ">=2.9.0,<2.10.0")

backend/tests/test_rocm_backends.py

@@ -1,68 +0,0 @@
-"""
-Phase 2.2 Test: Backend ROCm compatibility.
-
-Validates that check_cuda_compatibility() and other backend utilities
-behave correctly on ROCm/AMD hardware.
-
-Usage:
-    python -m pytest backend/tests/test_rocm_backends.py -v
-"""
-
-from unittest.mock import patch
-
-import pytest
-
-
-class TestCheckCudaCompatibility:
-    """Unit tests for check_cuda_compatibility with ROCm awareness."""
-
-    def test_no_gpu_returns_compatible(self):
-        from backend.backends.base import check_cuda_compatibility
-
-        with patch("torch.cuda.is_available", return_value=False):
-            compatible, warning = check_cuda_compatibility()
-            assert compatible is True
-            assert warning is None
-
-    def test_rocm_skips_compute_check(self):
-        """On ROCm, the NVIDIA compute-capability check should be skipped."""
-        from backend.backends.base import check_cuda_compatibility
-
-        with patch("torch.cuda.is_available", return_value=True):
-            with patch("torch.version.hip", "6.2.41133"):
-                compatible, warning = check_cuda_compatibility()
-                assert compatible is True
-                assert warning is None
-
-    def test_cuda_compatible_arch(self):
-        from backend.backends.base import check_cuda_compatibility
-
-        with patch("torch.cuda.is_available", return_value=True):
-            with patch("torch.version.hip", None):
-                with patch("torch.cuda.get_device_capability", return_value=(8, 6)):
-                    with patch("torch.cuda.get_device_name", return_value="NVIDIA GeForce RTX 3060"):
-                        with patch.object(
-                            __import__("torch").cuda, "_get_arch_list",
-                            return_value=["sm_80", "sm_86", "sm_89"],
-                            create=True,
-                        ):
-                            compatible, warning = check_cuda_compatibility()
-                            assert compatible is True
-                            assert warning is None
-
-    def test_cuda_incompatible_arch(self):
-        from backend.backends.base import check_cuda_compatibility
-
-        with patch("torch.cuda.is_available", return_value=True):
-            with patch("torch.version.hip", None):
-                with patch("torch.cuda.get_device_capability", return_value=(9, 0)):
-                    with patch("torch.cuda.get_device_name", return_value="NVIDIA GeForce RTX 4090"):
-                        with patch.object(
-                            __import__("torch").cuda, "_get_arch_list",
-                            return_value=["sm_80", "sm_86"],
-                            create=True,
-                        ):
-                            compatible, warning = check_cuda_compatibility()
-                            assert compatible is False
-                            assert warning is not None
-                            assert "not supported" in warning

backend/tests/test_rocm_build.py

@@ -1,129 +0,0 @@
-"""
-Phase 1.2 Test: ROCm build script configuration.
-
-Validates that build_binary.py --rocm generates the correct PyInstaller
-arguments and optionally performs a true E2E build.
-
-Usage:
-    python -m pytest backend/tests/test_rocm_build.py -v
-    python -m pytest backend/tests/test_rocm_build.py -v -m "slow"    # include E2E
-"""
-
-import subprocess
-import sys
-from pathlib import Path
-from unittest.mock import patch
-
-import pytest
-
-from build_binary import build_server
-
-
-class TestRocmBuildArgs:
-    """Validate PyInstaller arguments for ROCm builds."""
-
-    @pytest.fixture
-    def captured_args(self):
-        """Run build_server(rocm=True) with mocked PyInstaller and return args."""
-        with (
-            patch("build_binary.PyInstaller.__main__.run") as mock_run,
-            patch("build_binary.platform.system", return_value="Linux"),
-            patch("build_binary.os.chdir"),
-        ):
-            build_server(rocm=True)
-            return mock_run.call_args[0][0]
-
-    def test_binary_name(self, captured_args):
-        idx = captured_args.index("--name")
-        assert captured_args[idx + 1] == "voicebox-server-rocm"
-
-    def test_pack_mode_is_onedir(self, captured_args):
-        assert "--onedir" in captured_args
-        assert "--onefile" not in captured_args
-
-    def test_hidden_imports_cuda(self, captured_args):
-        """ROCm builds must include torch.cuda hidden imports."""
-        assert "torch.cuda" in captured_args
-
-    def test_no_cudnn_hidden_import_for_rocm(self, captured_args):
-        """ROCm builds must NOT include NVIDIA-specific cudnn hidden imports."""
-        assert "torch.backends.cudnn" not in captured_args
-
-    def test_nvidia_excludes_present(self, captured_args):
-        """ROCm builds must exclude nvidia packages to avoid bundling ~3GB of bloat."""
-        excludes = []
-        for i, arg in enumerate(captured_args):
-            if arg == "--exclude-module":
-                excludes.append(captured_args[i + 1])
-        assert "nvidia" in excludes
-        assert "nvidia.cudnn" in excludes
-
-
-class TestRocmBuildCli:
-    """Validate CLI argument parsing for --rocm."""
-
-    def test_rocm_flag_parses(self):
-        build_script = Path(__file__).parent.parent / "build_binary.py"
-        result = subprocess.run(
-            [sys.executable, str(build_script), "--rocm", "--help"],
-            capture_output=True,
-            text=True,
-        )
-        assert result.returncode == 0
-        assert "--rocm" in result.stdout
-
-    def test_cannot_combine_cuda_and_rocm(self):
-        """Building with both CUDA and ROCm should raise ValueError."""
-        with pytest.raises(ValueError, match="Cannot build with both CUDA and ROCm"):
-            build_server(cuda=True, rocm=True)
-
-
-@pytest.mark.slow()
-@pytest.mark.skipif(sys.platform != "win32", reason="ROCm build E2E only runs on Windows")
-class TestRocmBuildE2E:
-    """
-    True end-to-end build test.
-    Executes build_binary.py --rocm, verifies the binary exists, and runs it
-    with --help to confirm it boots without import errors.
-    """
-
-    def test_rocm_binary_compiles_and_runs(self, tmp_path):
-        backend_dir = Path(__file__).parent.parent
-        build_script = backend_dir / "build_binary.py"
-        dist_dir = backend_dir / "dist"
-        binary_dir = dist_dir / "voicebox-server-rocm"
-        binary_exe = binary_dir / "voicebox-server-rocm.exe"
-
-        # Clean previous dist if it exists to ensure a fresh build
-        if binary_dir.exists():
-            import shutil
-            shutil.rmtree(binary_dir)
-
-        # Run the full build (this can take several minutes)
-        result = subprocess.run(
-            [sys.executable, str(build_script), "--rocm"],
-            capture_output=True,
-            text=True,
-            cwd=str(backend_dir),
-            timeout=900,
-        )
-
-        assert result.returncode == 0, (
-            f"Build failed with stdout:\n{result.stdout}\nstderr:\n{result.stderr}"
-        )
-        assert binary_exe.exists(), (
-            f"Expected binary not found at {binary_exe}"
-        )
-
-        # Run the binary with --help to ensure it boots without import errors
-        run_result = subprocess.run(
-            [str(binary_exe), "--help"],
-            capture_output=True,
-            text=True,
-            timeout=60,
-        )
-
-        # A frozen binary may not have argparse help, but it should not crash
-        # with a ModuleNotFoundError or similar import error.
-        assert "ModuleNotFoundError" not in run_result.stderr
-        assert "ImportError" not in run_result.stderr

backend/tests/test_rocm_download.py

@@ -1,203 +0,0 @@
-"""
-Tests for the ROCm backend download service.
-
-Mocks httpx to verify download, extraction, and progress reporting
-without hitting the network.
-"""
-
-import json
-import tarfile
-import tempfile
-from io import BytesIO
-from pathlib import Path
-from unittest.mock import AsyncMock, MagicMock, patch
-
-import pytest
-
-from backend.services import rocm
-from backend.utils.progress import get_progress_manager
-
-
-@pytest.fixture(autouse=True)
-def reset_progress_manager():
-    """Reset the global progress manager before each test."""
-    import backend.utils.progress
-    backend.utils.progress._progress_manager = None
-    yield
-    backend.utils.progress._progress_manager = None
-
-
-@pytest.fixture
-def mock_backends_dir(tmp_path: Path, monkeypatch):
-    """Patch get_data_dir so downloads land in a temp directory."""
-    monkeypatch.setattr(rocm, "get_backends_dir", lambda: tmp_path / "backends")
-    return tmp_path / "backends"
-
-
-@pytest.fixture
-def fake_tar_gz():
-    """Create an in-memory .tar.gz archive containing a dummy file."""
-    buf = BytesIO()
-    with tarfile.open(fileobj=buf, mode="w:gz") as tar:
-        data = b"fake binary content"
-        info = tarfile.TarInfo(name="voicebox-server-rocm.exe")
-        info.size = len(data)
-        tar.addfile(info, BytesIO(data))
-    buf.seek(0)
-    return buf.read()
-
-
-@pytest.fixture
-def fake_sha256():
-    """Return a dummy SHA-256 hex string."""
-    return "a" * 64
-
-
-class FakeResponse:
-    """Minimal fake for httpx.Response."""
-
-    def __init__(self, content: bytes = b"", status_code: int = 200, headers: dict | None = None):
-        self.content = content
-        self.status_code = status_code
-        self.headers = headers or {}
-
-    def raise_for_status(self):
-        if self.status_code >= 400:
-            raise Exception(f"HTTP {self.status_code}")
-
-    def iter_bytes(self, chunk_size: int = 1024):
-        for i in range(0, len(self.content), chunk_size):
-            yield self.content[i : i + chunk_size]
-
-    async def aiter_bytes(self, chunk_size: int = 1024):
-        for i in range(0, len(self.content), chunk_size):
-            yield self.content[i : i + chunk_size]
-
-    @property
-    def text(self):
-        return self.content.decode()
-
-
-class FakeHttpxClient:
-    """Minimal fake for httpx.AsyncClient."""
-
-    def __init__(self, responses: dict[str, FakeResponse]):
-        self._responses = responses
-
-    async def __aenter__(self):
-        return self
-
-    async def __aexit__(self, *args):
-        return False
-
-    async def head(self, url: str):
-        return self._responses.get(url, FakeResponse(status_code=404))
-
-    async def get(self, url: str):
-        return self._responses.get(url, FakeResponse(status_code=404))
-
-    def stream(self, method: str, url: str):
-        resp = self._responses.get(url, FakeResponse(status_code=404))
-        resp.raise_for_status()
-
-        class _Streamer:
-            async def __aenter__(self):
-                return resp
-
-            async def __aexit__(self, *args):
-                return False
-
-            async def aiter_bytes(self, chunk_size: int = 1024):
-                for i in range(0, len(resp.content), chunk_size):
-                    yield resp.content[i : i + chunk_size]
-
-        return _Streamer()
-
-
-@pytest.mark.asyncio
-async def test_get_rocm_status_not_installed(mock_backends_dir):
-    status = rocm.get_rocm_status()
-    assert status["available"] is False
-    assert status["active"] is False
-    assert status["binary_path"] is None
-    assert status["downloading"] is False
-
-
-@pytest.mark.asyncio
-async def test_download_rocm_binary_progress_reporting(mock_backends_dir, fake_tar_gz, fake_sha256):
-    """
-    Verify that download_rocm_binary():
-    1. Downloads the server archive and ROCm libs archive.
-    2. Extracts them into the backends/rocm directory.
-    3. Reports progress via the progress_manager.
-    """
-    import hashlib
-
-    server_sha = hashlib.sha256(fake_tar_gz).hexdigest()
-    libs_sha = hashlib.sha256(fake_tar_gz).hexdigest()
-
-    responses = {
-        "https://github.com/jamiepine/voicebox/releases/download/v0.2.3/voicebox-server-rocm.tar.gz": FakeResponse(
-            content=fake_tar_gz,
-            headers={"content-length": str(len(fake_tar_gz))},
-        ),
-        "https://github.com/jamiepine/voicebox/releases/download/v0.2.3/voicebox-server-rocm.tar.gz.sha256": FakeResponse(
-            content=f"{server_sha}  voicebox-server-rocm.tar.gz\n".encode(),
-        ),
-        f"https://github.com/jamiepine/voicebox/releases/download/v0.2.3/rocm-libs-{rocm.ROCM_LIBS_VERSION}.tar.gz": FakeResponse(
-            content=fake_tar_gz,
-            headers={"content-length": str(len(fake_tar_gz))},
-        ),
-        f"https://github.com/jamiepine/voicebox/releases/download/v0.2.3/rocm-libs-{rocm.ROCM_LIBS_VERSION}.tar.gz.sha256": FakeResponse(
-            content=f"{libs_sha}  rocm-libs.tar.gz\n".encode(),
-        ),
-    }
-
-    fake_client = FakeHttpxClient(responses)
-
-    with patch("httpx.AsyncClient", return_value=fake_client):
-        await rocm.download_rocm_binary(version="v0.2.3")
-
-    # Verify extraction
-    rocm_dir = rocm.get_rocm_dir()
-    assert (rocm_dir / "voicebox-server-rocm.exe").exists()
-
-    # Verify manifest written
-    manifest_path = rocm.get_rocm_libs_manifest_path()
-    assert manifest_path.exists()
-    data = json.loads(manifest_path.read_text())
-    assert data["version"] == rocm.ROCM_LIBS_VERSION
-
-    # Verify progress was reported
-    progress = get_progress_manager().get_progress("rocm-backend")
-    assert progress is not None
-    assert progress["status"] == "complete"
-    assert progress["progress"] == 100.0
-
-
-@pytest.mark.asyncio
-async def test_is_rocm_active(mock_backends_dir, monkeypatch):
-    monkeypatch.setenv("VOICEBOX_BACKEND_VARIANT", "rocm")
-    assert rocm.is_rocm_active() is True
-
-    monkeypatch.setenv("VOICEBOX_BACKEND_VARIANT", "cpu")
-    assert rocm.is_rocm_active() is False
-
-    monkeypatch.delenv("VOICEBOX_BACKEND_VARIANT", raising=False)
-    assert rocm.is_rocm_active() is False
-
-
-@pytest.mark.asyncio
-async def test_delete_rocm_binary(mock_backends_dir, fake_tar_gz):
-    """Test deleting the ROCm backend directory."""
-    rocm_dir = rocm.get_rocm_dir()
-    rocm_dir.mkdir(parents=True, exist_ok=True)
-    (rocm_dir / "dummy.txt").write_text("hello")
-
-    result = await rocm.delete_rocm_binary()
-    assert result is True
-    assert not rocm_dir.exists()
-
-    # Deleting again should return False
-    result = await rocm.delete_rocm_binary()
-    assert result is False

backend/tests/test_rocm_requirements.py

@@ -1,130 +0,0 @@
-"""
-Phase 1.1 Test: ROCm requirements installation.
-
-Validates that requirements-rocm.txt correctly installs ROCm-enabled PyTorch
-and that torch.cuda.is_available() returns True on AMD hardware.
-
-Usage:
-    python -m pytest backend/tests/test_rocm_requirements.py -v
-"""
-
-import os
-import platform
-import subprocess
-import sys
-import tempfile
-from pathlib import Path
-
-import pytest
-
-
-def _has_amd_hardware():
-    """Check if AMD GPU hardware is present on Windows."""
-    if platform.system() != "Windows":
-        return False
-    try:
-        result = subprocess.run(
-            [
-                "powershell",
-                "-Command",
-                "Get-WmiObject Win32_VideoController | "
-                "Where-Object {$_.AdapterCompatibility -like '*AMD*'} | "
-                "Measure-Object | Select-Object -ExpandProperty Count",
-            ],
-            capture_output=True,
-            text=True,
-            check=True,
-        )
-        return int(result.stdout.strip()) > 0
-    except Exception:
-        return False
-
-
-@pytest.fixture()
-def backend_dir():
-    return Path(__file__).parent.parent
-
-
-class TestRocmRequirements:
-    """Validate requirements-rocm.txt content and installation."""
-
-    def test_requirements_file_exists(self, backend_dir):
-        req_file = backend_dir / "requirements-rocm.txt"
-        assert req_file.exists(), "requirements-rocm.txt must exist"
-
-    def test_requirements_file_content(self, backend_dir):
-        import re
-        req_file = backend_dir / "requirements-rocm.txt"
-        content = req_file.read_text()
-        assert "rocm7.2" in content, "Must point to ROCm 7.2 extra index"
-        # Parse exact package names to avoid false positives from URL substrings
-        package_names = re.findall(r"^([A-Za-z][A-Za-z0-9_-]*)", content, re.MULTILINE)
-        assert "torch" in package_names, "Must include torch package"
-        assert "torchaudio" in package_names, "Must include torchaudio package"
-        assert "torchvision" in package_names, "Must include torchvision package"
-
-    @pytest.mark.timeout(900)
-    @pytest.mark.skipif(
-        not os.environ.get("VOICEBOX_TEST_ROCM_INSTALL"),
-        reason="Set VOICEBOX_TEST_ROCM_INSTALL=1 to run the heavy install test",
-    )
-    def test_rocm_torch_installs_and_detects_amd(self, backend_dir):
-        """
-        Create a temporary venv, install requirements-rocm.txt, and verify
-        torch.cuda.is_available() returns True on AMD hardware.
-        """
-        req_file = backend_dir / "requirements-rocm.txt"
-        has_amd = _has_amd_hardware()
-
-        with tempfile.TemporaryDirectory() as tmpdir:
-            venv_dir = Path(tmpdir) / "venv"
-            subprocess.run(
-                [sys.executable, "-m", "venv", str(venv_dir)],
-                check=True,
-            )
-
-            if sys.platform == "win32":
-                venv_python = venv_dir / "Scripts" / "python.exe"
-            else:
-                venv_python = venv_dir / "bin" / "python"
-
-            # Upgrade pip to avoid resolver issues
-            subprocess.run(
-                [str(venv_python), "-m", "pip", "install", "--upgrade", "pip"],
-                check=True,
-            )
-
-            # Install ROCm requirements
-            subprocess.run(
-                [str(venv_python), "-m", "pip", "install", "-r", str(req_file)],
-                check=True,
-            )
-
-            # Verify torch imports and cuda availability
-            result = subprocess.run(
-                [
-                    str(venv_python),
-                    "-c",
-                    "import torch; print(torch.__version__); print(torch.cuda.is_available())",
-                ],
-                capture_output=True,
-                text=True,
-                check=True,
-            )
-
-            lines = result.stdout.strip().splitlines()
-            assert len(lines) >= 2, f"Unexpected output: {result.stdout}"
-            torch_version = lines[0]
-            cuda_available = lines[1] == "True"
-
-            # The honest test: on AMD hardware ROCm torch should report cuda available
-            if has_amd:
-                assert cuda_available, (
-                    f"AMD hardware detected but torch.cuda.is_available() returned False. "
-                    f"torch version: {torch_version}, stderr: {result.stderr}"
-                )
-            else:
-                assert not cuda_available, (
-                    f"No AMD hardware detected but torch.cuda.is_available() returned True. "
-                    f"torch version: {torch_version}"
-                )

backend/utils/platform_detect.py

@@ -3,72 +3,19 @@ Platform detection for backend selection.
 """
 
 import platform
-import subprocess
-from functools import lru_cache
 from typing import Literal
 
 
 def is_apple_silicon() -> bool:
     """
     Check if running on Apple Silicon (arm64 macOS).
-
+    
     Returns:
         True if on Apple Silicon, False otherwise
     """
     return platform.system() == "Darwin" and platform.machine() == "arm64"
 
 
-@lru_cache(maxsize=1)
-def is_amd_gpu_windows() -> bool:
-    """
-    Check if the primary GPU on Windows is an AMD Radeon card.
-
-    Uses WMI to query Win32_VideoController, with a fallback to
-    torch.cuda.get_device_name(0) if WMI is unavailable.  This is
-    useful for deciding whether the ROCm backend is appropriate.
-
-    Result is cached since it shells out to PowerShell and the GPU
-    does not change at runtime — safe to call from the health path.
-
-    Returns:
-        True if an AMD GPU is detected on Windows, False otherwise.
-    """
-    if platform.system() != "Windows":
-        return False
-
-    # Primary method: WMI query for AMD adapters
-    try:
-        result = subprocess.run(
-            [
-                "powershell",
-                "-Command",
-                "Get-CimInstance Win32_VideoController | "
-                "Where-Object {$_.AdapterCompatibility -like '*AMD*'} | "
-                "Measure-Object | Select-Object -ExpandProperty Count",
-            ],
-            capture_output=True,
-            text=True,
-            check=True,
-        )
-        if int(result.stdout.strip()) > 0:
-            return True
-    except Exception:
-        pass
-
-    # Fallback: torch.cuda.get_device_name(0) (works for ROCm/HIP too)
-    try:
-        import torch
-
-        if torch.cuda.is_available():
-            name = torch.cuda.get_device_name(0)
-            if "Radeon" in name or "AMD" in name:
-                return True
-    except Exception:
-        pass
-
-    return False
-
-
 def get_backend_type() -> Literal["mlx", "pytorch"]:
     """
     Detect the best backend for the current platform.

bun.lock

@@ -57,7 +57,6 @@
         "react-dom": "^18.3.0",
         "react-hook-form": "^7.53.0",
         "react-i18next": "^17.0.4",
-        "react-qr-code": "^2.0.18",
         "react-sound-visualizer": "^1.4.0",
         "tailwind-merge": "^2.5.4",
         "wavesurfer.js": "^7.0.0",
@@ -1006,8 +1005,6 @@
 
     "punycode": ["[email protected]", "", {}, "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg=="],
 
-    "qr.js": ["[email protected]", "", {}, "sha512-c4iYnWb+k2E+vYpRimHqSu575b1/wKl4XFeJGpFmrJQz5I88v9aY2czh7s0w36srfCM1sXgC/xpoJz5dJfq+OQ=="],
-
     "queue-microtask": ["[email protected]", "", {}, "sha512-NuaNSa6flKT5JaSYQzJok04JzTL1CA6aGhv5rfLW3PgqA+M2ChpZQnAC8h8i4ZFkBS8X5RqkDBHA7r4hej3K9A=="],
 
     "react": ["[email protected]", "", { "dependencies": { "loose-envify": "^1.1.0" } }, "sha512-wS+hAgJShR0KhEvPJArfuPVN1+Hz1t0Y6n5jLrGQbkb4urgPE/0Rve+1kMB1v/oWgHgm4WIcV+i7F2pTVj+2iQ=="],
@@ -1022,8 +1019,6 @@
 
     "react-loaders": ["[email protected]", "", { "dependencies": { "classnames": "^2.2.3" }, "peerDependencies": { "prop-types": ">=15.6.0", "react": ">=15" } }, "sha512-4igMNqs9Fb3d4Z+0UHIGQNJsw/37gX0nUO8QxupnEKRn1dtyYC1LGwk5GuaoDciMQCQc/MmPwb4Fn6ZfdoX1FQ=="],
 
-    "react-qr-code": ["[email protected]", "", { "dependencies": { "prop-types": "^15.8.1", "qr.js": "0.0.0" }, "peerDependencies": { "react": "*" } }, "sha512-v1Jqz7urLMhkO6jkgJuBYhnqvXagzceg3qJUWayuCK/c6LTIonpWbwxR1f1APGd4xrW/QcQEovNrAojbUz65Tg=="],
-
     "react-refresh": ["[email protected]", "", {}, "sha512-z6F7K9bV85EfseRCp2bzrpyQ0Gkw1uLoCel9XBVWPg/TjRj94SkJzUTGfOa4bs7iJvBWtQG0Wq7wnI0syw3EBQ=="],
 
     "react-remove-scroll": ["[email protected]", "", { "dependencies": { "react-remove-scroll-bar": "^2.3.7", "react-style-singleton": "^2.2.3", "tslib": "^2.1.0", "use-callback-ref": "^1.3.3", "use-sidecar": "^1.1.3" }, "peerDependencies": { "@types/react": "*", "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc" }, "optionalPeers": ["@types/react"] }, "sha512-Iqb9NjCCTt6Hf+vOdNIZGdTiH1QSqr27H/Ek9sv/a97gfueI/5h1s3yRi1nngzMUaOOToin5dI1dXKdXiF+u0Q=="],

docker-compose.rocm.yml

@@ -1,36 +0,0 @@
----
-# ROCm (AMD GPU) overlay for Voicebox
-#
-#   docker compose -f docker-compose.yml -f docker-compose.rocm.yml up --build
-#
-# Requires ROCm drivers on the host:
-# https://rocm.docs.amd.com/projects/install-on-linux
-# RDNA4 (RX 9000): export ROCM_VERSION=7.2 (default 6.3 covers RDNA1-3).
-
-services:
-  voicebox:
-    build:
-      context: .
-      args:
-        PYTORCH_VARIANT: rocm
-        ROCM_VERSION: ${ROCM_VERSION:-6.3}
-
-    devices:
-      - /dev/kfd
-      - /dev/dri
-
-    environment:
-      # HSA_OVERRIDE_GFX_VERSION forces the ROCm runtime to treat the GPU as a
-      # specific GFX version when auto-detection fails or the GPU is newer than
-      # the ROCm release. app.py sets 10.3.0 (RDNA2) by default; override here
-      # for your GPU family:
-      #   RDNA4 / RX 9000 series:              12.0.0
-      #                                           (requires ROCM_VERSION=7.2)
-      #   RDNA3 / RX 7000 series / Strix Halo: 11.0.0
-      #   RDNA2 / RX 6000 series:              10.3.0
-      #   RDNA1 / RX 5000 series:              10.1.0
-      #   Vega / GCN5:                          9.0.0
-      - HSA_OVERRIDE_GFX_VERSION=${HSA_OVERRIDE_GFX_VERSION:-}
-
-      # Tune the ROCm memory allocator
-      - PYTORCH_HIP_ALLOC_CONF=garbage_collection_threshold:0.8,max_split_size_mb:512

docker-compose.yml

@@ -1,7 +1,3 @@
-# Voicebox — CPU build (default)
-# For AMD ROCm GPU acceleration use the overlay:
-#   docker compose -f docker-compose.yml -f docker-compose.rocm.yml up --build
-
 services:
   voicebox:
     build: .

docs/PROJECT_STATUS.md

@@ -1,6 +1,6 @@
 # Voicebox Project Status & Roadmap
 
-> Last updated: 2026-07-02 | Current version: **v0.5.0** | 402 open issues | 88 open PRs | 1.3M downloads · 34.8k stars
+> Last updated: 2026-06-27 | Current version: **v0.5.0** | 402 open issues | 88 open PRs | 1.3M downloads · 34.8k stars
 
 ---
 
@@ -218,19 +218,6 @@ Shipped 2026-04-25 (PR #544). Voicebox went from a voice-cloning studio to a ful
 
 **Integration shape if we revive it:** Zero-shot cloning maps naturally to the Chatterbox-style backend (store `ref_audio` + `ref_text` paths in the voice prompt dict, process at generate time). Est. ~250 lines for `voxcpm_backend.py` + one `ModelConfig` entry + engine registration in `backends/__init__.py`. Frontend UI gating is the bigger lift.
 
-### Funded Roadmap (2026-H2)
-
-`$VOICEBOX` funded ~2–3 months of full-time work; cadence resumes the week of 2026-06-27. Direction committed publicly in #806:
-
-| Item | Notes |
-|------|-------|
-| **Resume merge/release cadence** | Clear the 88-PR backlog, regular commits + releases — this is the immediate focus (see Tier 1) |
-| **Mobile companion app** | New surface; already drawing issues (#773 iPhone logout) |
-| **Encrypted cloud backup/sync** | For voice profiles + generations — first cloud feature; stays opt-in, local-first remains default |
-| **More TTS models** | Engine candidates in the Landscape section below; community PRs #507/#766/#777 in queue |
-| **Better GPU support** | Blackwell/sm_120, ROCm, DirectML, Intel — incl. paying testers for hardware the dev lacks |
-| **Bug fixes** | 0.5.0 regression cluster first (macOS load crash, capture cutoffs, MCP, refinement) |
-
 ### What's In-Flight
 
 | Feature | Branch/PR | Status |
@@ -239,7 +226,7 @@ Shipped 2026-04-25 (PR #544). Voicebox went from a voice-cloning studio to a ful
 | Engine sprawl cleanup | issue #419 | First-class vs experimental TTS backends distinction |
 | Frontend tech-debt burn-down | issue #421 | Biome + a11y debt before gating CI |
 | Docker registry auto-publish | PR #463, issue #453 | ghcr.io image on tag push |
-| New model research | `voicebox-new-models` branch | Evaluating Fish Speech, XTTS-v2, Pocket TTS, VibeVoice, Fish Audio S2, index-tts2. **2026-06-27 sweep** added dots.tts, LongCat-AudioDiT, SoproTTS, NeuTTS, Nemotron/Cohere STT — see Landscape → New Candidate Sweep |
+| New model research | `voicebox-new-models` branch | Evaluating Fish Speech, XTTS-v2, Pocket TTS, VibeVoice, Fish Audio S2, index-tts2 |
 
 ### TTS Engine Comparison
 
@@ -605,43 +592,6 @@ Notable:
 4. **Instruct support fills a real gap** (#173, #224, #303). Qwen CustomVoice partially addresses it with preset speakers; zero-shot clone-with-instruct is still unmet.
 5. **Long-form + streaming are user-requested** (#363, #365, #464). Candidates with native streaming (Pocket TTS, Fish Speech) get extra weight.
 
-### New Candidate Sweep (2026-06-27)
-
-A follow-up deep-research pass, filtered against everything already tracked — the shipped engines plus MOSS-TTS-Nano, Pocket TTS, IndicF5, VibeVoice, Voxtral, Fish/Fish Audio, XTTS-v2, index-tts2, VoxCPM2, OmniVoice, MioTTS, Oolel, Faster-Qwen, Orpheus/Sesame, MiniMax, RVC, Parakeet, Qwen3-ASR, Moshi, GLM-4-Voice, Qwen2.5-Omni — kept only where a **newer sibling/variant** changes the evaluation. Same criteria as the 04-18 cycle: cross-platform, PyPI/clean packaging, permissive license, quality, instruct/style control, long-form, streaming.
-
-**Top new TTS candidates**
-
-| Candidate | Add as | Why it matters | Caveat |
-|-----------|--------|----------------|--------|
-| **[dots.tts](https://github.com/rednote-hilab/dots.tts)** (soar / mf) | **Top new TTS candidate** | 2B fully-continuous end-to-end autoregressive TTS, 48 kHz AudioVAE output, zero-shot cloning via prompt audio/text, Apache-2.0 code+checkpoints, MeanFlow-distilled variant for low latency. Freshest "serious clone engine" not yet on the roadmap. | Git-source install with constraints, not clean PyPI. Needs Windows/macOS packaging + VRAM/CPU smoke test; probably experimental until platform gating exists. |
-| **[MOSS-TTS family](https://github.com/OpenMOSS/MOSS-TTS)** / v1.5 / Local-Transformer-v1.5 | **Upgrade the MOSS-Nano entry into a MOSS family epic** | We track only Nano, but MOSS now spans MOSS-TTS, TTSD (long multi-speaker dialogue), VoiceGenerator (text-prompt voice design), TTS-Realtime, SoundEffect. v1.5 adds broader languages, long-reference cloning, pause control, 48 kHz stereo, MLX/vLLM support, Apache-2.0. | Full 4B/8B variants aren't the lightweight Nano win. Treat as several engines/features, not one checkbox. |
-| **[LongCat-AudioDiT](https://arxiv.org/html/2603.29339v1)** | **High-priority Apple Silicon candidate** | 3.5B non-autoregressive diffusion TTS in waveform latent space, zero-shot cloning, already has an MLX conversion usable via `mlx_audio` — unusually aligned with our Apple Silicon base. | zh/en only, not realtime. Quality play, not low-latency agent speech. |
-| **[SoproTTS](https://github.com/samuel-vitorino/sopro)** | **Lightweight CPU/streaming cloned TTS** | 135M zero-shot cloning, `pip install -U sopro`, streaming + non-streaming APIs, 3–12s reference, claimed 250 ms TTFA / 0.05 RTF on M3 CPU. Strong local-first/low-maintenance fit. | English-focused, self-described as inconsistent — quality-test before promoting past experimental. |
-| **[NeuTTS Air / Nano](https://github.com/neuphonic/neutts)** | **GGUF/on-device cloned TTS** | On-device instant cloning, GGUF-ready, ~3s reference, laptop/phone/Pi targets. Air is Apache-2.0. | Needs a GGUF/llama.cpp-style wrapper, not a normal PyTorch backend. Nano has a separate NeuTTS Open License — split needs review. |
-| **[X-Voice](https://github.com/sunnyxrxrx/X-Voice)** | **Small multilingual clone** | 0.4B multilingual zero-shot cloning, 30 languages, IPA-style unified rep, claims no prompt-transcript requirement — targets a real cloning-UX pain point. | Verify license, packaging, production-readiness of weights/code. |
-| **[FireRedTTS-2](https://huggingface.co/FireRedTeam/FireRedTTS2)** | **Stories / podcast / multi-speaker** | Apache-2.0 long-form streaming, 3-min / 4-speaker dialogue, cross-lingual code-switching cloning, low first-packet latency. | Stories-editor engine more than a general default. Needs platform/VRAM testing. |
-| **[Maya1](https://huggingface.co/maya-research/maya1)** | **Expressive English voice-design** | 3B Apache-2.0, voice design, streaming, emotion/style tags, vLLM-compatible, 24 kHz, single-GPU. Good "voice personalities" / game-dialogue fit. | English-only, 16 GB+ VRAM — platform gating required. |
-
-**MOSS is now a family, not one checkbox.** The single `MOSS-TTS-Nano` row above should become an epic: keep Nano as the CPU-friendly model, and track v1.5 / Local-Transformer-v1.5, Realtime, TTSD, VoiceGenerator, and SoundEffect as siblings under it.
-
-**STT / capture candidates** (feed the planned streaming-transcription roadmap)
-
-| Candidate | Add as | Why it matters | Caveat |
-|-----------|--------|----------------|--------|
-| **[Nemotron 3.5 ASR Streaming 0.6B](https://huggingface.co/mlx-community/nemotron-3.5-asr-streaming-0.6b)** | **Top new STT candidate** | Cache-aware streaming FastConformer-RNNT, 40 language-locales, punctuation/caps, language-ID conditioning, MLX conversion path — strongest fit for planned streaming transcription. | NVIDIA-origin; verify license + non-CUDA (MLX/CPU) performance. |
-| **[Cohere Transcribe 03-2026](https://huggingface.co/blog/CohereLabs/cohere-transcribe-03-2026-release)** | **High-quality offline STT** | 2B Apache-2.0, 14 languages, ONNX/INT8 exports across CPU / Apple Silicon / GPU. Cleanest-looking offline `/transcribe` + captures candidate. | Less clearly a streaming dictation model than Nemotron. |
-| **[ARK-ASR 3B / 0.6B](https://huggingface.co/AutoArk-AI/ARK-ASR-3B)** | **Multilingual STT watch** | New family, broad European/Asian coverage, strong leaderboard claims, INT8 ONNX for edge. | Very new; likely `trust_remote_code`. Validate stability first. |
-| **[IBM Granite Speech 4.1 2B / NAR](https://huggingface.co/ibm-granite/granite-speech-4.1-2b)** | **ASR + speech translation** | Compact multilingual ASR + bidirectional speech translation (en/fr/de/es/pt/ja); NAR variant for latency-sensitive work. | More compelling if we expand into translation, not just dictation. |
-
-**Watch-list / blocked** (license or platform work must land first): LEMAS-TTS, Supertonic 3, KugelAudio, GLM-TTS, KittenTTS, TinyTTS (preset/on-device, not cloning); Sarashina2.2, Higgs Audio v3, T5Gemma-TTS, Step-Audio-EditX, MisoTTS (non-commercial terms or CUDA-heavy); MegaTTS3 (incomplete WaveVAE encoder distribution); PFluxTTS, LongCat-Next (paper-only / too broad). **Low-hanging Qwen-family variants:** `Qwen3-TTS-VoiceDesign` (fills text-to-voice-design with minimal churn) and ZipVoice/ZipVoice-Dialog (only if it brings zh-en/dialogue behavior our shipped LuxTTS doesn't already expose).
-
-**Roadmap patch from this sweep** (reflected in Tier 3 below):
-1. Replace the `MOSS-TTS-Nano` checkbox with a **MOSS-TTS family** epic (Nano tracked separately as the CPU model).
-2. New Tier-3 TTS candidates, in order: **dots.tts → LongCat-AudioDiT → SoproTTS → NeuTTS → X-Voice → FireRedTTS-2 → Maya1**.
-3. New STT expansion candidates, in order: **Nemotron 3.5 → Cohere Transcribe → ARK-ASR → Granite Speech**.
-4. Keep Sarashina2.2, Higgs v3, T5Gemma, Step-Audio-EditX, MisoTTS, MegaTTS3, PFluxTTS blocked/watch-only.
-5. **Do platform gating (bottleneck #6 / `ModelConfig.requires`) before shipping GPU-only engines** — Maya1, Step-Audio-EditX, MisoTTS, and probably dots.tts stay experimental until it exists.
-
 ### Adding a New Engine (Now Straightforward)
 
 With the model config registry and shared `EngineModelSelector` component, adding a new TTS engine requires:
@@ -725,11 +675,9 @@ The two-month gap means the highest-leverage work isn't new code — it's review
 
 ### Tier 3 — Future Engines (cross-platform preferred)
 
-Committed ordering (04-18 cycle), then the 2026-06-27 sweep additions. See Landscape → New Candidate Sweep for full rationale.
-
 | Priority | Item | Notes |
 |----------|------|-------|
-| 1 | **MOSS-TTS family** (was MOSS-TTS-Nano) | Nano first: 0.1B, Apache 2.0, 4-core CPU realtime, 48 kHz stereo, streaming, 20 langs. Best alignment with our criteria. Then track v1.5 / Realtime / TTSD / VoiceGenerator / SoundEffect as siblings under one epic. |
+| 1 | **MOSS-TTS-Nano** | 0.1B, Apache 2.0, 4-core CPU realtime, 48 kHz stereo, streaming, 20 langs, released 2026-04-13. Best alignment with our criteria. Verify install ergonomics before committing. |
 | 2 | **Pocket TTS** (Kyutai) | CPU-first 100M model. MIT. Fills streaming gap without CUDA dependency. Several European langs added by Feb 2026. |
 | 3 | **IndicF5** | Fills Indian-language gap (#339). Closes many language-request issues. |
 | 4 | **VibeVoice** (Microsoft, #172) | 1.5B, long-form multi-speaker (up to 90 min, 4 speakers). Strong Stories-editor fit. |
@@ -738,25 +686,6 @@ Committed ordering (04-18 cycle), then the 2026-06-27 sweep additions. See Lands
 | 7 | **XTTS-v2** | 17+ langs, mature pip. CPML likely kills commercial use — verify. |
 | 8 | **index-tts2** (#370) | Unvetted. |
 | — | ~~**VoxCPM2**~~ | **Backlogged** — CUDA-only upstream. Revisit when tier system ships or MPS bugs are fixed upstream. |
-| — | *New (06-27 sweep), in order* → | |
-| 9 | **dots.tts** | 2B end-to-end AR, 48 kHz, Apache-2.0 + fast MeanFlow variant. Top new candidate. Git-source install — smoke-test packaging + VRAM; likely experimental until platform gating exists. |
-| 10 | **LongCat-AudioDiT** | 3.5B diffusion, has an MLX/`mlx_audio` path — best Apple Silicon fit. zh/en only, not realtime. |
-| 11 | **SoproTTS** | 135M, `pip install sopro`, streaming, ~250 ms TTFA / 0.05 RTF on M3 CPU. Quality-test first. |
-| 12 | **NeuTTS Air/Nano** | On-device GGUF cloning, ~3s reference. Needs a GGUF wrapper; Air is Apache-2.0, Nano license split needs review. |
-| 13 | **X-Voice** | 0.4B, 30 langs, no prompt-transcript required. Verify license/packaging. |
-| 14 | **FireRedTTS-2** | Apache-2.0 long-form multi-speaker/podcast streaming. Stories-editor engine; needs VRAM testing. |
-| 15 | **Maya1** | 3B Apache-2.0 expressive voice-design, emotion tags. English-only, 16 GB+ VRAM — gate behind platform tiers. |
-
-### Tier 3b — STT / Capture Candidates (06-27 sweep)
-
-Feeds the planned streaming-transcription roadmap; Whisper alternatives.
-
-| Priority | Item | Notes |
-|----------|------|-------|
-| 1 | **Nemotron 3.5 ASR Streaming 0.6B** | Cache-aware streaming FastConformer-RNNT, 40 locales, MLX path. Strongest streaming-dictation fit. Verify license + non-CUDA perf. |
-| 2 | **Cohere Transcribe 03-2026** | 2B Apache-2.0, 14 langs, ONNX/INT8 across CPU/Apple Silicon/GPU. Cleanest offline `/transcribe` candidate. |
-| 3 | **ARK-ASR 3B / 0.6B** | Broad multilingual, INT8 ONNX for edge. Very new; likely `trust_remote_code` — validate stability. |
-| 4 | **IBM Granite Speech 4.1 2B / NAR** | ASR + speech translation (en/fr/de/es/pt/ja). Compelling if we expand into translation. |
 
 ### ~~Previously Prioritized — Now Done~~
 

docs/content/docs/overview/hermes-agent.mdx

@@ -1,138 +0,0 @@
----
-title: "Hermes Agent"
-description: "Use Voicebox as the voice and ears of Hermes Agent — spoken replies and voice-message transcription, fully local."
----
-
-## Overview
-
-[Hermes Agent](https://github.com/NousResearch/hermes-agent) is Nous
-Research's open-source self-improving agent: a terminal CLI/TUI plus a
-messaging gateway that connects one agent to Telegram, Discord, WhatsApp,
-Slack, and Signal. It has first-class voice features — spoken replies,
-voice-bubble delivery on chat platforms, push-to-talk dictation, and
-automatic transcription of incoming voice messages — and every one of them
-is pluggable.
-
-Voicebox slots into both directions of that loop, entirely on-device:
-
-- **Voice out** — Hermes speaks its replies in one of your cloned or preset
-  voices instead of a stock cloud voice.
-- **Voice in** — voice messages and push-to-talk audio are transcribed by
-  the Whisper models already bundled with Voicebox. Audio never leaves your
-  machine.
-
-There are two integration surfaces, and they compose — most people will
-want both. Everything talks to the same local API
-(`http://127.0.0.1:17493` while the Voicebox app is running).
-
-<Callout type="info">
-  Running Voicebox in Docker instead of the desktop app? The API is on
-  `http://127.0.0.1:17600` — set `VOICEBOX_BASE_URL` accordingly wherever it
-  appears below. See [Docker](/overview/docker).
-</Callout>
-
-## MCP: agent-invoked voice tools
-
-Hermes speaks MCP natively, and Voicebox ships a built-in
-[MCP server](/overview/mcp-server). Voicebox is in Hermes's approved MCP
-catalog, so:
-
-```bash
-hermes mcp install voicebox
-```
-
-(Or add the block manually to `~/.hermes/config.yaml`:)
-
-```yaml
-mcp_servers:
-  voicebox:
-    url: "http://127.0.0.1:17493/mcp"
-    headers:
-      X-Voicebox-Client-Id: "hermes"
-```
-
-Hermes discovers the tools — `voicebox.speak`, `voicebox.transcribe`,
-`voicebox.list_profiles`, `voicebox.list_captures` — and the agent can now
-*choose* to use them: "read me that summary in Morgan's voice" works
-immediately, and the [per-client binding](/overview/mcp-server#per-client-bindings)
-for `hermes` lets you pin its default voice from the Voicebox UI.
-
-MCP makes Voicebox a set of tools the agent may call. It does **not**
-reroute Hermes's own voice pipeline — spoken replies, voice bubbles, and
-incoming voice-message transcription still use whatever `tts.provider` /
-`stt.provider` are set to. That's the plugin's job.
-
-## Provider plugin: Hermes's own voice pipeline
-
-[`hermes-voicebox`](https://github.com/jamiepine/hermes-voicebox) registers
-Voicebox as a Hermes **TTS provider** and **STT provider** via Hermes's
-pluggable backend interfaces (`register_tts_provider` /
-`register_transcription_provider` — see
-[Build a Hermes Plugin](https://hermes-agent.nousresearch.com/docs/developer-guide/plugins)).
-Once selected, the providers service the *entire* voice pipeline: every
-spoken reply, every Telegram voice bubble, every incoming voice memo — plus
-a bundled skill that teaches the agent when speaking aloud is appropriate
-and to recall your dictated [Captures](/overview/captures) through MCP.
-
-<Steps>
-
-### Install the plugin
-
-Into the same Python environment Hermes runs in:
-
-```bash
-pip install hermes-voicebox
-```
-
-No pip? Copy it in as a directory plugin instead:
-
-```bash
-git clone https://github.com/jamiepine/hermes-voicebox /tmp/hermes-voicebox
-cp -r /tmp/hermes-voicebox/hermes_voicebox ~/.hermes/plugins/voicebox
-hermes plugins enable voicebox
-```
-
-### Select the providers
-
-In `~/.hermes/config.yaml`:
-
-```yaml
-tts:
-  provider: voicebox
-
-stt:
-  provider: voicebox
-```
-
-### Try it
-
-With the Voicebox app open, start `hermes chat` and ask it to say
-something out loud — or send your Hermes bot a voice message on Telegram
-and watch the transcript come back from your local Whisper.
-
-</Steps>
-
-## Behavior notes
-
-- **Voicebox must be running.** The desktop app only serves the API while
-  it's open. Both providers implement availability as a live `/health`
-  check, so Hermes's provider picker reflects reality.
-- **First generation is slower** while the TTS engine loads into memory;
-  subsequent calls are fast. Same for the first transcription with a new
-  Whisper size — Voicebox answers `202` while the model downloads, and the
-  plugin surfaces a friendly "try again in a minute".
-- **Voice selection**: `tts.voice` in Hermes config (or the tool's `voice`
-  argument) accepts a Voicebox profile **name or id**. With no voice set,
-  the first profile is used.
-- **Engines**: pass a Voicebox engine id (`qwen`, `kokoro`,
-  `chatterbox`, …) as the Hermes `model` to override the profile's
-  default engine.
-
-## Next steps
-
-- [MCP Server](/overview/mcp-server) — the tool-call route, per-client
-  bindings, and the speaking pill
-- [Creating Voice Profiles](/overview/creating-voice-profiles) — clone the
-  voice Hermes will speak in
-- [Remote Mode](/overview/remote-mode) — reaching a Voicebox instance on
-  another machine (read the security notes first: the API has no auth)

docs/content/docs/overview/meta.json

@@ -13,7 +13,6 @@
     "preset-voices",
     "voice-personalities",
     "mcp-server",
-    "hermes-agent",
     "stories-editor",
     "recording-transcription",
     "generation-history",

justfile

@@ -43,26 +43,6 @@ setup-python:
     fi
     echo "Installing Python dependencies..."
     {{ pip }} install --upgrade pip -q
-    if [ "$(uname)" = "Linux" ]; then
-        torch_index=""
-        if [ -e /proc/driver/nvidia/version ] || [ -d /sys/module/nvidia ]; then
-            echo "Detected NVIDIA GPU — installing CUDA PyTorch..."
-            torch_index="https://download.pytorch.org/whl/cu128"
-        elif [ -e /dev/kfd ]; then
-            if [ -n "${VOICEBOX_ROCM_VERSION:-}" ]; then
-                rocm_ver="$VOICEBOX_ROCM_VERSION"
-            elif lspci 2>/dev/null | grep -qi "Navi 4"; then
-                rocm_ver=7.2
-            else
-                rocm_ver=6.3
-            fi
-            echo "Detected AMD GPU — installing ROCm PyTorch (rocm${rocm_ver})..."
-            torch_index="https://download.pytorch.org/whl/rocm${rocm_ver}"
-        fi
-        if [ -n "$torch_index" ]; then
-            {{ pip }} install torch torchaudio --index-url "$torch_index"
-        fi
-    fi
     {{ pip }} install -r {{ backend_dir }}/requirements.txt
     # Chatterbox pins numpy<1.26 / torch==2.6 which break on Python 3.12+
     {{ pip }} install --no-deps chatterbox-tts

landing/src/app/token/page.tsx

@@ -12,7 +12,6 @@ import type {Metadata} from "next";
 import {Footer} from "@/components/Footer";
 import {Navbar} from "@/components/Navbar";
 import {TokenSection} from "@/components/TokenSection";
-import {TokenStatsSection} from "@/components/TokenStats";
 import {
 	TOKEN_PROOFS,
 	TOKEN_SOLSCAN_URL,
@@ -31,10 +30,6 @@ export const metadata: Metadata = {
 	},
 };
 
-// Re-fetch live on-chain stats at most every 10 minutes (matches the server
-// cache in token-stats.ts). Keeps the page static-fast while staying fresh.
-export const revalidate = 600;
-
 const USE_OF_FUNDS = [
 	{
 		icon: Rocket,
@@ -82,9 +77,6 @@ export default function TokenPage() {
 			<main className="pt-16">
 				<TokenSection />
 
-				{/* ── Live on-chain stats ──────────────────────────────────── */}
-				<TokenStatsSection />
-
 				{/* ── Why a token ──────────────────────────────────────────── */}
 				<section className="border-t border-border py-20">
 					<div className="mx-auto max-w-3xl px-6">
@@ -152,6 +144,72 @@ export default function TokenPage() {
 					</div>
 				</section>
 
+				{/* ── On-chain transparency ────────────────────────────────── */}
+				<section className="border-t border-border py-20">
+					<div className="mx-auto max-w-4xl px-6">
+						<div className="text-center mb-12">
+							<div className="text-[11px] font-semibold uppercase tracking-[0.22em] text-accent mb-4">
+								On-chain transparency
+							</div>
+							<h2 className="text-3xl md:text-4xl font-semibold tracking-tight text-foreground">
+								Don't trust — verify.
+							</h2>
+							<p className="text-muted-foreground max-w-2xl mx-auto mt-4">
+								Liquidity is locked and supply is reduced through ongoing
+								buyback &amp; burns. Every action is on-chain and linked here, so
+								you never have to take my word for it.
+							</p>
+						</div>
+
+						<div className="grid gap-4 sm:grid-cols-3">
+							{TOKEN_PROOFS.map((proof, i) => {
+								const Icon = proof.kind === "lock" ? Lock : Flame;
+								return (
+									<div
+										key={`${proof.label}-${i}`}
+										className="flex flex-col rounded-xl border border-border bg-card/40 backdrop-blur-sm p-6"
+									>
+										<Icon className="h-5 w-5 text-accent mb-3" />
+										<h3 className="text-[15px] font-semibold text-foreground mb-2">
+											{proof.label}
+										</h3>
+										<p className="text-sm leading-relaxed text-muted-foreground flex-1">
+											{proof.detail}
+										</p>
+										{proof.txUrl ? (
+											<a
+												href={proof.txUrl}
+												target="_blank"
+												rel="noopener noreferrer"
+												className="mt-4 inline-flex items-center gap-1.5 text-sm font-medium text-foreground/80 hover:text-foreground transition-colors"
+											>
+												View on Solscan
+												<ArrowUpRight className="h-3.5 w-3.5" />
+											</a>
+										) : (
+											<span className="mt-4 inline-flex items-center gap-1.5 text-xs font-medium text-muted-foreground/60">
+												Proof link pending
+											</span>
+										)}
+									</div>
+								);
+							})}
+						</div>
+
+						<div className="mt-6 text-center">
+							<a
+								href={TOKEN_SOLSCAN_URL}
+								target="_blank"
+								rel="noopener noreferrer"
+								className="inline-flex items-center gap-2 text-sm text-muted-foreground hover:text-foreground transition-colors"
+							>
+								Inspect supply &amp; holders on Solscan
+								<ArrowUpRight className="h-4 w-4" />
+							</a>
+						</div>
+					</div>
+				</section>
+
 				{/* ── Official vs community ────────────────────────────────── */}
 				<section className="border-t border-border py-20">
 					<div className="mx-auto max-w-3xl px-6">

landing/src/components/TokenStats.tsx

@@ -1,309 +0,0 @@
-import {ArrowUpRight, Coins, Flame, Lock, Users, Wallet} from "lucide-react";
-import {
-	TOKEN_CONTRACT_ADDRESS,
-	TOKEN_CREATOR_ADDRESS,
-	TOKEN_SOLSCAN_URL,
-	TOKEN_TICKER,
-} from "@/lib/constants";
-import {getTokenStats, type TokenStats} from "@/lib/token-stats";
-
-// ── formatters ───────────────────────────────────────────────────────────────
-function compact(n: number | null): string {
-	if (n == null) return "—";
-	const abs = Math.abs(n);
-	if (abs >= 1_000_000_000) return `${(n / 1_000_000_000).toFixed(2)}B`;
-	if (abs >= 1_000_000) return `${(n / 1_000_000).toFixed(2)}M`;
-	if (abs >= 1_000) return `${(n / 1_000).toFixed(1)}K`;
-	return n.toLocaleString("en-US", {maximumFractionDigits: 0});
-}
-
-function pct(n: number | null): string {
-	if (n == null) return "—";
-	if (n > 0 && n < 0.01) return "<0.01%";
-	return `${n.toFixed(2)}%`;
-}
-
-function usdPrice(n: number | null): string {
-	if (n == null) return "—";
-	if (n < 0.000001) return `$${n.toExponential(2)}`;
-	if (n < 1) return `$${n.toPrecision(3)}`;
-	return `$${n.toLocaleString("en-US", {maximumFractionDigits: 2})}`;
-}
-
-function usdBig(n: number | null): string {
-	if (n == null) return "—";
-	if (n >= 1_000_000) return `$${(n / 1_000_000).toFixed(2)}M`;
-	if (n >= 1_000) return `$${(n / 1_000).toFixed(1)}K`;
-	return `$${n.toLocaleString("en-US", {maximumFractionDigits: 0})}`;
-}
-
-function sol(n: number | null): string {
-	if (n == null) return "—";
-	return `${n.toLocaleString("en-US", {maximumFractionDigits: 2})} SOL`;
-}
-
-function shortAddr(a: string): string {
-	return a.length > 12 ? `${a.slice(0, 4)}…${a.slice(-4)}` : a;
-}
-
-function solscanAccount(a: string): string {
-	return `https://solscan.io/account/${a}`;
-}
-
-function timeAgo(ts: number): string {
-	const secs = Math.max(0, Math.round((Date.now() - ts) / 1000));
-	if (secs < 60) return "just now";
-	const mins = Math.round(secs / 60);
-	if (mins < 60) return `${mins}m ago`;
-	const hrs = Math.round(mins / 60);
-	return `${hrs}h ago`;
-}
-
-export async function TokenStatsSection() {
-	const stats = await getTokenStats();
-	return <TokenStatsView stats={stats} />;
-}
-
-// Hidden for now — flip to true to bring the "fees earned for development"
-// card back. The data is still fetched; it's just not rendered.
-const SHOW_CREATOR_REWARDS = false;
-
-function TokenStatsView({stats}: {stats: TokenStats}) {
-	const cards = [
-		{
-			icon: Flame,
-			label: "Burned",
-			value: compact(stats.burned),
-			sub: stats.burnedPct != null ? `${pct(stats.burnedPct)} of initial supply` : "Removed from supply forever",
-		},
-		{
-			icon: Lock,
-			label: "Locked",
-			value: stats.locked != null ? compact(stats.locked) : "Not configured",
-			sub: stats.lockedPct != null ? `${pct(stats.lockedPct)} of supply` : "Liquidity & vesting locks",
-		},
-		{
-			icon: Wallet,
-			label: "Dev / treasury",
-			value: stats.devBalance != null ? compact(stats.devBalance) : "Not configured",
-			sub: stats.devPct != null ? `${pct(stats.devPct)} of supply` : "Team-held tokens",
-		},
-		{
-			icon: Users,
-			label: "Holders",
-			value: stats.holders != null ? `${stats.holdersCapped ? "" : ""}${stats.holders.toLocaleString("en-US")}` : "—",
-			sub: stats.holdersCapped ? "counted (capped)" : "unique wallets",
-		},
-	];
-
-	return (
-		<section className="border-t border-border py-20">
-			<div className="mx-auto max-w-5xl px-6">
-				{/* Header */}
-				<div className="text-center mb-12">
-					<div className="text-[11px] font-semibold uppercase tracking-[0.22em] text-accent mb-4">
-						Live on-chain stats
-					</div>
-					<h2 className="text-3xl md:text-4xl font-semibold tracking-tight text-foreground">
-						Every number, straight from the chain.
-					</h2>
-					<p className="text-muted-foreground max-w-2xl mx-auto mt-4">
-						Supply, holders, burns, locks and team holdings for {TOKEN_TICKER},
-						read live from Solana.
-					</p>
-				</div>
-
-				{/* Supply + market headline */}
-				<div className="grid gap-4 sm:grid-cols-3 mb-4">
-					<HeadlineStat
-						label="Circulating supply"
-						value={compact(stats.circulating)}
-						sub={
-							stats.totalSupply != null
-								? `of ${compact(stats.totalSupply)} total`
-								: undefined
-						}
-					/>
-					<HeadlineStat label="Price" value={usdPrice(stats.priceUsd)} sub="via Jupiter" />
-					<HeadlineStat label="Market cap" value={usdBig(stats.marketCapUsd)} sub="price × supply" />
-				</div>
-
-				{/* Stat cards */}
-				<div className="grid gap-4 sm:grid-cols-2 lg:grid-cols-4">
-					{cards.map((c) => {
-						const Icon = c.icon;
-						return (
-							<div
-								key={c.label}
-								className="rounded-xl border border-border bg-card/40 backdrop-blur-sm p-6"
-							>
-								<Icon className="h-5 w-5 text-accent mb-3" />
-								<div className="text-[11px] font-medium uppercase tracking-wider text-muted-foreground mb-1">
-									{c.label}
-								</div>
-								<div className="text-2xl font-semibold tracking-tight text-foreground tabular-nums">
-									{c.value}
-								</div>
-								<div className="text-xs text-muted-foreground mt-1">{c.sub}</div>
-							</div>
-						);
-					})}
-				</div>
-
-				{/* Creator rewards — pump.fun creator fees, the funding story */}
-				{SHOW_CREATOR_REWARDS && stats.creatorRewardsSol != null && (
-					<div className="mt-4 rounded-2xl border border-accent/30 bg-gradient-to-b from-accent/[0.08] to-transparent p-8 text-center">
-						<div className="mx-auto mb-3 flex h-10 w-10 items-center justify-center rounded-full border border-accent/30 bg-accent/10">
-							<Coins className="h-5 w-5 text-accent" />
-						</div>
-						<div className="text-[11px] font-semibold uppercase tracking-[0.2em] text-muted-foreground">
-							Fees earned for development
-						</div>
-						<div className="mt-2 text-4xl font-semibold tracking-tight text-foreground tabular-nums">
-							{sol(stats.creatorRewardsSol)}
-						</div>
-						{stats.creatorRewardsUsd != null && (
-							<div className="mt-1 text-sm text-muted-foreground tabular-nums">
-								≈ {usdBig(stats.creatorRewardsUsd)}
-							</div>
-						)}
-						<p className="mx-auto mt-4 max-w-md text-sm leading-relaxed text-muted-foreground">
-							Lifetime {TOKEN_TICKER} trading fees — the funding that pays for
-							full-time work on Voicebox.{" "}
-							<a
-								href={`https://solscan.io/account/${TOKEN_CREATOR_ADDRESS}`}
-								target="_blank"
-								rel="noopener noreferrer"
-								className="inline-flex items-center gap-0.5 text-foreground/80 hover:text-foreground"
-							>
-								Verify <ArrowUpRight className="h-3 w-3" />
-							</a>
-						</p>
-					</div>
-				)}
-
-				{/* Locked breakdown (only if any configured) */}
-				{stats.lockedBreakdown.length > 0 && (
-					<div className="mt-4 rounded-xl border border-border bg-card/40 backdrop-blur-sm p-6">
-						<div className="text-[11px] font-medium uppercase tracking-wider text-muted-foreground mb-4">
-							Locked &amp; vesting
-						</div>
-						<ul className="space-y-3">
-							{stats.lockedBreakdown.map((l) => (
-								<li
-									key={l.account}
-									className="flex items-center gap-3 text-sm"
-								>
-									<Lock className="h-4 w-4 shrink-0 text-accent" />
-									<span className="text-foreground/90">{l.label}</span>
-									{l.unlocksAt && (
-										<span className="text-xs text-muted-foreground">· {l.unlocksAt}</span>
-									)}
-									<span className="ml-auto font-medium tabular-nums text-foreground">
-										{compact(l.amount)}
-									</span>
-									<a
-										href={l.url ?? solscanAccount(l.account)}
-										target="_blank"
-										rel="noopener noreferrer"
-										className="text-muted-foreground hover:text-foreground"
-										aria-label="View on Solscan"
-									>
-										<ArrowUpRight className="h-4 w-4" />
-									</a>
-								</li>
-							))}
-						</ul>
-					</div>
-				)}
-
-				{/* Top holders */}
-				{stats.topHolders.length > 0 && (
-					<div className="mt-4 rounded-xl border border-border bg-card/40 backdrop-blur-sm p-6">
-						<div className="flex items-center justify-between mb-4">
-							<div className="text-[11px] font-medium uppercase tracking-wider text-muted-foreground">
-								Top holders
-							</div>
-							<a
-								href={`${TOKEN_SOLSCAN_URL}#holders`}
-								target="_blank"
-								rel="noopener noreferrer"
-								className="inline-flex items-center gap-1 text-xs text-muted-foreground hover:text-foreground"
-							>
-								All holders <ArrowUpRight className="h-3 w-3" />
-							</a>
-						</div>
-						<ul className="divide-y divide-border/60">
-							{stats.topHolders.map((h, i) => (
-								<li
-									key={h.owner}
-									className="flex items-center gap-3 py-2.5 text-sm"
-								>
-									<span className="w-5 text-xs text-muted-foreground tabular-nums">
-										{i + 1}
-									</span>
-									<a
-										href={solscanAccount(h.owner)}
-										target="_blank"
-										rel="noopener noreferrer"
-										className="font-mono text-foreground/90 hover:text-foreground hover:underline"
-									>
-										{shortAddr(h.owner)}
-									</a>
-									<span className="ml-auto tabular-nums text-foreground">
-										{compact(h.amount)}
-									</span>
-									<span className="w-16 text-right tabular-nums text-muted-foreground">
-										{pct(h.pct)}
-									</span>
-								</li>
-							))}
-						</ul>
-					</div>
-				)}
-
-				{/* Footer: provenance + freshness */}
-				<div className="mt-6 flex flex-col sm:flex-row items-center justify-between gap-3 text-xs text-muted-foreground">
-					<span>
-						{stats.live ? (
-							<>Updated {timeAgo(stats.updatedAt)} · data via Helius &amp; Jupiter</>
-						) : (
-							<>Live stats unavailable right now — verify on Solscan.</>
-						)}
-					</span>
-					<a
-						href={TOKEN_SOLSCAN_URL}
-						target="_blank"
-						rel="noopener noreferrer"
-						className="inline-flex items-center gap-1.5 hover:text-foreground transition-colors"
-					>
-						<span className="font-mono">{shortAddr(TOKEN_CONTRACT_ADDRESS)}</span>
-						Inspect on Solscan <ArrowUpRight className="h-3.5 w-3.5" />
-					</a>
-				</div>
-			</div>
-		</section>
-	);
-}
-
-function HeadlineStat({
-	label,
-	value,
-	sub,
-}: {
-	label: string;
-	value: string;
-	sub?: string;
-}) {
-	return (
-		<div className="rounded-2xl border border-border bg-card/60 backdrop-blur-sm p-6 text-center">
-			<div className="text-[11px] font-medium uppercase tracking-wider text-muted-foreground mb-2">
-				{label}
-			</div>
-			<div className="text-3xl font-semibold tracking-tight text-foreground tabular-nums">
-				{value}
-			</div>
-			{sub && <div className="text-xs text-muted-foreground mt-1">{sub}</div>}
-		</div>
-	);
-}

landing/src/lib/constants.ts

@@ -16,111 +16,6 @@ export const TOKEN_PUMP_URL = `https://pump.fun/coin/${TOKEN_CONTRACT_ADDRESS}`;
 export const TOKEN_SOLSCAN_URL = `https://solscan.io/token/${TOKEN_CONTRACT_ADDRESS}`;
 export const TOKEN_TOTAL_SUPPLY = '1B';
 
-// ── Live on-chain tracking config ───────────────────────────────────────────
-// Powers the transparency dashboard on /token. Reads are done server-side via
-// Helius (HELIUS_API_KEY). Every value below has a safe default so the page
-// still renders if something is unset — sections you haven't configured just
-// show as "not configured" rather than breaking the build.
-
-/** Mint supply at launch, used to derive burned = initial − current supply. */
-export const TOKEN_INITIAL_SUPPLY = 1_000_000_000;
-
-/**
- * pump.fun creator wallet — the address that launched the coin and earns creator
- * fees. Lifetime creator rewards (in SOL) are read from pump.fun's swap-api for
- * this wallet. Defaults to the dev wallet (they're the same here).
- */
-export const TOKEN_CREATOR_ADDRESS = envStr(
-  'TOKEN_CREATOR_ADDRESS',
-  'BSn573bjkQa5iffMg6zA8eb9mHyzewu2ps9R85qNKXC5',
-);
-
-/**
- * Dev / treasury wallets to surface as "team holdings". List every address you
- * want counted; balances are summed. Public, read-only — these are already
- * visible on-chain. Override at deploy time with TOKEN_DEV_WALLETS (comma list).
- */
-export const TOKEN_DEV_WALLETS: string[] = envList('TOKEN_DEV_WALLETS', [
-  'BSn573bjkQa5iffMg6zA8eb9mHyzewu2ps9R85qNKXC5', // Jamie's dev/treasury wallet
-]);
-
-/**
- * Locked supply: token accounts whose $VOICEBOX is locked (liquidity lockers,
- * vesting escrows). Each entry is summed into "locked"; unlocksAt is optional
- * copy for the card. Override with TOKEN_LOCKED_ACCOUNTS as a JSON array.
- */
-export interface LockedAccount {
-  label: string;
-  /** The token account or owner address holding the locked $VOICEBOX. */
-  account: string;
-  /** Human-readable unlock date, e.g. "Unlocks Jun 2027" (optional). */
-  unlocksAt?: string;
-  /** Optional Solscan/locker link proving the lock. */
-  url?: string;
-}
-export const TOKEN_LOCKED_ACCOUNTS: LockedAccount[] = envJson<LockedAccount[]>(
-  'TOKEN_LOCKED_ACCOUNTS',
-  [
-    // Streamflow locks. `account` is each lock's escrow token account (read for
-    // the live balance, so it ticks down only when actually unlocked/withdrawn);
-    // `url` is the public Streamflow contract page for verification.
-    {
-      label: 'Streamflow lock #1',
-      account: 'EaPun3ZUk5XiKft2tbvVRXgq8HyXjTmg77kUYYe7Q5HM',
-      unlocksAt: 'Unlocks Jun 2027',
-      url: 'https://app.streamflow.finance/contract/solana/mainnet/AmzHaDAZWWZPkvN5zC78mQ3QAedH7hHSCEWeYSbSWXu5',
-    },
-    {
-      label: 'Streamflow lock #2',
-      account: 'FGK5G4CbtryRdoubPN7u4y3WTYS4vqoepPLpppba92cp',
-      unlocksAt: 'Unlocks Jun 2027',
-      url: 'https://app.streamflow.finance/contract/solana/mainnet/GfBjWriW8mcJWS9njC2gBBJoJuGRQQzJLRFNg6a12bW8',
-    },
-    {
-      label: 'Streamflow lock #3',
-      account: 'ELKMRnDin7w6ht4MkQ6FnDU3LvkDtoYbtR9y3P51pf1N',
-      unlocksAt: 'Unlocks Jun 2027',
-      url: 'https://app.streamflow.finance/contract/solana/mainnet/3xa49K6b8ChsL5SoPYrAWigwKmoXAge6YCAmUJWM6Ncw',
-    },
-  ],
-);
-
-/**
- * Burn / dead address. The standard SPL incinerator by default. Buyback+burns
- * that reduce mint supply are already captured by initial − current; this is
- * only used to additionally surface anything parked at a dead address.
- */
-export const TOKEN_BURN_ADDRESS = envStr(
-  'TOKEN_BURN_ADDRESS',
-  '1nc1nerator11111111111111111111111111111111',
-);
-
-/** How long stats are cached server-side (ms). Keeps us off rate limits. */
-export const TOKEN_STATS_CACHE_MS = 1000 * 60 * 10; // 10 minutes
-
-// ── tiny env helpers (server-only; safe in this module, no secrets exposed) ──
-function envStr(key: string, fallback: string): string {
-  const v = process.env[key];
-  return v && v.trim() ? v.trim() : fallback;
-}
-function envList(key: string, fallback: string[]): string[] {
-  const v = process.env[key];
-  if (!v || !v.trim()) return fallback;
-  return v
-    .split(',')
-    .map((s) => s.trim())
-    .filter(Boolean);
-}
-function envJson<T>(key: string, fallback: T): T {
-  const v = process.env[key];
-  if (!v || !v.trim()) return fallback;
-  try {
-    return JSON.parse(v) as T;
-  } catch {
-    return fallback;
-  }
-}
-
 // On-chain transparency log — locks and buyback+burns.
 // Add a new entry every time a lock or burn happens; set `txUrl` to its Solscan
 // link to make the card a live, verifiable proof. Entries without a txUrl render

landing/src/lib/token-stats.ts

@@ -1,418 +0,0 @@
-// Live on-chain stats for $VOICEBOX, fetched server-side via Helius.
-//
-// Design goals:
-//   • Never throws. Every sub-fetch is isolated; a failure degrades that one
-//     metric to `null` and is recorded in `warnings`, so the page always renders.
-//   • Cheap. Results are cached in-memory for TOKEN_STATS_CACHE_MS, and holder
-//     enumeration is page-capped so a viral token can't blow up a request.
-//   • Honest. Numbers come straight from chain reads (Helius RPC) and Jupiter
-//     for price — nothing is asserted that can't be verified on Solscan.
-
-import {
-  TOKEN_BURN_ADDRESS,
-  TOKEN_CONTRACT_ADDRESS,
-  TOKEN_CREATOR_ADDRESS,
-  TOKEN_DEV_WALLETS,
-  TOKEN_INITIAL_SUPPLY,
-  TOKEN_LOCKED_ACCOUNTS,
-  TOKEN_STATS_CACHE_MS,
-} from './constants';
-
-const MINT = TOKEN_CONTRACT_ADDRESS;
-const WSOL_MINT = 'So11111111111111111111111111111111111111112';
-
-// Let Next cache the underlying network reads and revalidate them on the same
-// cadence as the page (ISR). Keeps /token static-fast and CDN-cacheable while
-// staying fresh, instead of forcing the route fully dynamic with `no-store`.
-const REVALIDATE_S = Math.round(TOKEN_STATS_CACHE_MS / 1000);
-
-// Public Solana mainnet RPC — used as a fallback so supply/balances/locks work
-// without any API key. Rate-limited, but our 10-minute cache keeps us under it.
-const PUBLIC_RPC = 'https://api.mainnet-beta.solana.com';
-
-function heliusRpcUrl(): string | null {
-  const key = process.env.HELIUS_API_KEY?.trim();
-  if (!key) return null;
-  return `https://mainnet.helius-rpc.com/?api-key=${key}`;
-}
-
-// Standard JSON-RPC reads (supply, balances) — Helius if configured, else public.
-function standardRpcUrl(): string {
-  return heliusRpcUrl() ?? PUBLIC_RPC;
-}
-
-// Holder enumeration needs Helius' DAS `getTokenAccounts` extension; public RPC
-// can't do it efficiently. Null when no key — holders degrade to "—".
-function dasRpcUrl(): string | null {
-  return heliusRpcUrl();
-}
-
-export interface TopHolder {
-  owner: string;
-  amount: number;
-  pct: number; // share of current supply, 0–100
-}
-
-export interface LockedEntry {
-  label: string;
-  account: string;
-  amount: number | null;
-  unlocksAt?: string;
-  url?: string;
-}
-
-export interface TokenStats {
-  /** True only if Helius is configured and the core supply read succeeded. */
-  live: boolean;
-  decimals: number;
-  initialSupply: number;
-  /** Current on-chain mint supply (UI amount). */
-  totalSupply: number | null;
-  /** initialSupply − totalSupply: tokens permanently removed by burns. */
-  burned: number | null;
-  burnedPct: number | null;
-  /** Sum of configured locked accounts. */
-  locked: number | null;
-  lockedPct: number | null;
-  lockedBreakdown: LockedEntry[];
-  /** Sum of configured dev/treasury wallets. */
-  devBalance: number | null;
-  devPct: number | null;
-  /** Unique-owner holder count (page-capped; see holdersCapped). */
-  holders: number | null;
-  holdersCapped: boolean;
-  topHolders: TopHolder[];
-  /** Spot price in USD (Jupiter). */
-  priceUsd: number | null;
-  /** priceUsd × totalSupply. */
-  marketCapUsd: number | null;
-  /** Lifetime pump.fun creator fees earned by the creator wallet, in SOL. */
-  creatorRewardsSol: number | null;
-  /** creatorRewardsSol × SOL/USD price. */
-  creatorRewardsUsd: number | null;
-  /** Float supply = total − locked − dev − burned-at-dead-address. */
-  circulating: number | null;
-  updatedAt: number;
-  /** Human-readable notes about anything unconfigured or failed. */
-  warnings: string[];
-}
-
-// Caching is handled by Next's fetch cache (revalidate per request below), so
-// this just aggregates the reads. Never throws — degrades to emptyStats.
-export async function getTokenStats(): Promise<TokenStats> {
-  try {
-    return await buildTokenStats();
-  } catch (err) {
-    console.error('getTokenStats failed:', err);
-    return emptyStats(['Live stats are temporarily unavailable.']);
-  }
-}
-
-function emptyStats(warnings: string[]): TokenStats {
-  return {
-    live: false,
-    decimals: 6,
-    initialSupply: TOKEN_INITIAL_SUPPLY,
-    totalSupply: null,
-    burned: null,
-    burnedPct: null,
-    locked: null,
-    lockedPct: null,
-    lockedBreakdown: TOKEN_LOCKED_ACCOUNTS.map((l) => ({ ...l, amount: null })),
-    devBalance: null,
-    devPct: null,
-    holders: null,
-    holdersCapped: false,
-    topHolders: [],
-    priceUsd: null,
-    marketCapUsd: null,
-    creatorRewardsSol: null,
-    creatorRewardsUsd: null,
-    circulating: null,
-    updatedAt: Date.now(),
-    warnings,
-  };
-}
-
-async function buildTokenStats(): Promise<TokenStats> {
-  const warnings: string[] = [];
-  const rpc = standardRpcUrl(); // supply/balances/locks — public RPC if no key
-  const das = dasRpcUrl(); // holder enumeration — Helius only
-
-  if (!das) {
-    warnings.push('Set HELIUS_API_KEY to enable the holder count & top holders.');
-  }
-
-  // Core supply first — everything downstream is a percentage of it.
-  const supply = await getTokenSupply(rpc).catch((e) => {
-    warnings.push('Could not read token supply.');
-    console.error('getTokenSupply:', e);
-    return null;
-  });
-
-  const decimals = supply?.decimals ?? 6;
-  const totalSupply = supply?.uiAmount ?? null;
-
-  // Run the independent reads concurrently.
-  const [holderData, devBalance, lockedAmounts, priceUsd, creatorRewardsSol, solPrice] =
-    await Promise.all([
-    das
-      ? getHolders(das).catch((e) => {
-          warnings.push('Could not enumerate holders.');
-          console.error('getHolders:', e);
-          return null;
-        })
-      : Promise.resolve(null),
-    TOKEN_DEV_WALLETS.length
-      ? getOwnersBalance(rpc, TOKEN_DEV_WALLETS).catch((e) => {
-          warnings.push('Could not read dev wallet balance.');
-          console.error('getOwnersBalance(dev):', e);
-          return null;
-        })
-      : Promise.resolve(null),
-    TOKEN_LOCKED_ACCOUNTS.length
-      ? Promise.all(
-          TOKEN_LOCKED_ACCOUNTS.map((l) =>
-            getAddressBalance(rpc, l.account)
-              .catch(() => null)
-              .then((amount) => ({ ...l, amount })),
-          ),
-        )
-      : Promise.resolve(
-          [] as Array<(typeof TOKEN_LOCKED_ACCOUNTS)[number] & { amount: number | null }>,
-        ),
-    getJupiterPrice(MINT).catch(() => {
-      warnings.push('Could not read price from Jupiter.');
-      return null;
-    }),
-    getCreatorRewardsSol().catch((e) => {
-      warnings.push('Could not read creator rewards.');
-      console.error('getCreatorRewardsSol:', e);
-      return null;
-    }),
-    getJupiterPrice(WSOL_MINT).catch(() => null),
-  ]);
-
-  if (!TOKEN_DEV_WALLETS.length) warnings.push('No dev/treasury wallet configured.');
-  if (!TOKEN_LOCKED_ACCOUNTS.length) warnings.push('No locked accounts configured.');
-
-  const locked =
-    lockedAmounts.length && lockedAmounts.some((l) => l.amount != null)
-      ? lockedAmounts.reduce((sum, l) => sum + (l.amount ?? 0), 0)
-      : lockedAmounts.length
-        ? null
-        : null;
-
-  const burned =
-    totalSupply != null ? Math.max(0, TOKEN_INITIAL_SUPPLY - totalSupply) : null;
-
-  const pct = (n: number | null): number | null =>
-    n != null && totalSupply ? (n / totalSupply) * 100 : null;
-  const pctOfInitial = (n: number | null): number | null =>
-    n != null ? (n / TOKEN_INITIAL_SUPPLY) * 100 : null;
-
-  const marketCapUsd =
-    priceUsd != null && totalSupply != null ? priceUsd * totalSupply : null;
-
-  const creatorRewardsUsd =
-    creatorRewardsSol != null && solPrice != null
-      ? creatorRewardsSol * solPrice
-      : null;
-
-  const circulating =
-    totalSupply != null
-      ? Math.max(0, totalSupply - (locked ?? 0) - (devBalance ?? 0))
-      : null;
-
-  const topHolders: TopHolder[] = (holderData?.top ?? []).map((h) => ({
-    owner: h.owner,
-    amount: h.amount,
-    pct: totalSupply ? (h.amount / totalSupply) * 100 : 0,
-  }));
-
-  return {
-    live: totalSupply != null,
-    decimals,
-    initialSupply: TOKEN_INITIAL_SUPPLY,
-    totalSupply,
-    burned,
-    burnedPct: pctOfInitial(burned),
-    locked,
-    lockedPct: pct(locked),
-    lockedBreakdown: lockedAmounts.length
-      ? lockedAmounts
-      : TOKEN_LOCKED_ACCOUNTS.map((l) => ({ ...l, amount: null })),
-    devBalance,
-    devPct: pct(devBalance),
-    holders: holderData?.count ?? null,
-    holdersCapped: holderData?.capped ?? false,
-    topHolders,
-    priceUsd,
-    marketCapUsd,
-    creatorRewardsSol,
-    creatorRewardsUsd,
-    circulating,
-    updatedAt: Date.now(),
-    warnings,
-  };
-}
-
-// ── Solana / Helius RPC primitives ───────────────────────────────────────────
-
-async function rpcCall<T>(rpc: string, method: string, params: unknown): Promise<T> {
-  const res = await fetch(rpc, {
-    method: 'POST',
-    headers: { 'Content-Type': 'application/json' },
-    next: { revalidate: REVALIDATE_S },
-    body: JSON.stringify({ jsonrpc: '2.0', id: 'voicebox', method, params }),
-  });
-  if (!res.ok) throw new Error(`RPC ${method} HTTP ${res.status}`);
-  const json = (await res.json()) as { result?: T; error?: { message: string } };
-  if (json.error) throw new Error(`RPC ${method}: ${json.error.message}`);
-  if (json.result === undefined) throw new Error(`RPC ${method}: empty result`);
-  return json.result;
-}
-
-interface SupplyResult {
-  value: { amount: string; decimals: number; uiAmount: number | null };
-}
-async function getTokenSupply(
-  rpc: string,
-): Promise<{ uiAmount: number; decimals: number }> {
-  const r = await rpcCall<SupplyResult>(rpc, 'getTokenSupply', [MINT]);
-  const decimals = r.value.decimals;
-  const uiAmount =
-    r.value.uiAmount ?? Number(r.value.amount) / 10 ** decimals;
-  return { uiAmount, decimals };
-}
-
-// Sum a single owner's balance of the mint across all their token accounts.
-async function getOwnerBalance(rpc: string, owner: string): Promise<number> {
-  const r = await rpcCall<{
-    value: Array<{
-      account: { data: { parsed: { info: { tokenAmount: { uiAmount: number | null } } } } };
-    }>;
-  }>(rpc, 'getTokenAccountsByOwner', [
-    owner,
-    { mint: MINT },
-    { encoding: 'jsonParsed' },
-  ]);
-  return r.value.reduce(
-    (sum, a) => sum + (a.account.data.parsed.info.tokenAmount.uiAmount ?? 0),
-    0,
-  );
-}
-
-async function getOwnersBalance(rpc: string, owners: string[]): Promise<number> {
-  const balances = await Promise.all(owners.map((o) => getOwnerBalance(rpc, o)));
-  return balances.reduce((a, b) => a + b, 0);
-}
-
-// Balance for a configured "account" that may be either a token-account address
-// or an owner address — try token account first, fall back to owner.
-async function getAddressBalance(rpc: string, address: string): Promise<number> {
-  try {
-    const r = await rpcCall<{
-      value: { amount: string; decimals: number; uiAmount: number | null };
-    }>(rpc, 'getTokenAccountBalance', [address]);
-    return r.value.uiAmount ?? Number(r.value.amount) / 10 ** r.value.decimals;
-  } catch {
-    // Not a token account — treat it as an owner.
-    return getOwnerBalance(rpc, address);
-  }
-}
-
-// Holder enumeration via Helius DAS getTokenAccounts. Dedupes by owner (one
-// owner can hold many token accounts) and ranks the top holders. Page-capped.
-const HOLDER_PAGE_LIMIT = 1000;
-const HOLDER_MAX_PAGES = 25; // up to 25k accounts before we stop and flag it
-const TOP_HOLDERS = 12;
-
-interface HeliusTokenAccount {
-  owner: string;
-  amount: number; // raw, needs / 10**decimals
-}
-interface HeliusTokenAccountsPage {
-  total: number;
-  limit: number;
-  page: number;
-  token_accounts: HeliusTokenAccount[];
-}
-
-async function getHolders(
-  rpc: string,
-): Promise<{ count: number; capped: boolean; top: Array<{ owner: string; amount: number }> }> {
-  const balances = new Map<string, number>(); // owner -> raw amount
-  let page = 1;
-  let capped = false;
-  let decimals = 6;
-
-  // Grab decimals once so we can return UI amounts for the top holders.
-  try {
-    decimals = (await getTokenSupply(rpc)).decimals;
-  } catch {
-    /* fall back to 6 */
-  }
-
-  for (;;) {
-    const res = await rpcCall<HeliusTokenAccountsPage>(rpc, 'getTokenAccounts', {
-      mint: MINT,
-      page,
-      limit: HOLDER_PAGE_LIMIT,
-      options: { showZeroBalance: false },
-    });
-    const accounts = res.token_accounts ?? [];
-    for (const a of accounts) {
-      if (!a.owner || !a.amount) continue;
-      balances.set(a.owner, (balances.get(a.owner) ?? 0) + a.amount);
-    }
-    if (accounts.length < HOLDER_PAGE_LIMIT) break;
-    page += 1;
-    if (page > HOLDER_MAX_PAGES) {
-      capped = true;
-      break;
-    }
-  }
-
-  const top = [...balances.entries()]
-    .sort((a, b) => b[1] - a[1])
-    .slice(0, TOP_HOLDERS)
-    .map(([owner, raw]) => ({ owner, amount: raw / 10 ** decimals }));
-
-  return { count: balances.size, capped, top };
-}
-
-// ── Price (Jupiter, no key required) ─────────────────────────────────────────
-async function getJupiterPrice(mint: string): Promise<number | null> {
-  const res = await fetch(`https://lite-api.jup.ag/price/v3?ids=${mint}`, {
-    next: { revalidate: REVALIDATE_S },
-  });
-  if (!res.ok) throw new Error(`Jupiter HTTP ${res.status}`);
-  const json = (await res.json()) as Record<string, { usdPrice?: number } | undefined>;
-  const price = json[mint]?.usdPrice;
-  return typeof price === 'number' ? price : null;
-}
-
-// ── Creator rewards (pump.fun swap-api) ──────────────────────────────────────
-// Lifetime creator fees earned by the creator wallet, in SOL. The swap-api
-// returns a daily series with a running `cumulativeCreatorFeeSOL`; the latest
-// (max) bucket is the lifetime total. The per-coin endpoint is unreliable, so
-// we use the per-creator one.
-interface CreatorFeeBucket {
-  cumulativeCreatorFeeSOL: string;
-}
-async function getCreatorRewardsSol(): Promise<number | null> {
-  const res = await fetch(
-    `https://swap-api.pump.fun/v1/creators/${TOKEN_CREATOR_ADDRESS}/fees?interval=1d`,
-    { next: { revalidate: REVALIDATE_S }, headers: { 'User-Agent': 'voicebox.sh' } },
-  );
-  if (!res.ok) throw new Error(`pump.fun swap-api HTTP ${res.status}`);
-  const buckets = (await res.json()) as CreatorFeeBucket[];
-  if (!Array.isArray(buckets) || buckets.length === 0) return null;
-  // Cumulative is monotonic, but take the max defensively.
-  const max = buckets.reduce((m, b) => {
-    const v = Number.parseFloat(b.cumulativeCreatorFeeSOL);
-    return Number.isFinite(v) && v > m ? v : m;
-  }, 0);
-  return max;
-}

scripts/package_rocm.py

@@ -1,251 +0,0 @@
-"""
-Package the PyInstaller --onedir ROCm build into two archives.
-
-Takes the PyInstaller --onedir output directory and splits it into:
-  1. voicebox-server-rocm.tar.gz       — server core (exe + non-AMD deps)
-  2. rocm-libs-{version}.tar.gz        — AMD/ROCm runtime libraries only
-  3. rocm-libs.json                    — version manifest for the ROCm libs
-
-Mirrors scripts/package_cuda.py. The split lets the server core re-download on
-every app update while the much larger ROCm runtime stays cached until the
-toolkit version bumps.
-
-Usage:
-    python scripts/package_rocm.py backend/dist/voicebox-server-rocm/
-    python scripts/package_rocm.py backend/dist/voicebox-server-rocm/ --output release-assets/
-    python scripts/package_rocm.py backend/dist/voicebox-server-rocm/ --rocm-libs-version rocm7.2-v1
-"""
-
-import argparse
-import hashlib
-import json
-import sys
-import tarfile
-from pathlib import Path
-
-# DLL/.so name prefixes that identify AMD ROCm/HIP runtime libraries. They may
-# sit in torch/lib/ (torch's bundled HIP runtime) or inside the bundled ROCm SDK
-# packages. Matched case-insensitively against the file's base name.
-ROCM_DLL_PREFIXES = (
-    "amdhip",
-    "amd_comgr",
-    "amdocl",
-    "hiprtc",
-    "hipblaslt",
-    "hipblas",
-    "hipfft",
-    "hiprand",
-    "hipsolver",
-    "hipsparse",
-    "hip",
-    "rocblas",
-    "rocfft",
-    "rocrand",
-    "rocsolver",
-    "rocsparse",
-    "rocprofiler",
-    "roctracer",
-    "roctx",
-    "rocm_smi",
-    "miopen",
-    "rccl",
-    "hsa-runtime",
-    "hsa",
-)
-
-# Directory markers for the bundled ROCm SDK runtime packages. Everything under
-# these trees except Python sources (the pure-python rocm_sdk glue) is part of
-# the runtime payload — this is where rocBLAS Tensile data and MIOpen kernel
-# databases live, which dominate the download size.
-ROCM_LIB_DIR_MARKERS = (
-    "_rocm_sdk_core",
-    "_rocm_sdk_libraries_custom",
-    "rocm_sdk_core",
-    "rocm_sdk_libraries_custom",
-)
-
-# Heavy native/data extensions shipped by the ROCm runtime (HIP fat binaries,
-# rocBLAS Tensile data, MIOpen kernel DBs).
-ROCM_LIB_EXTS = (".dll", ".so", ".dat", ".db", ".kdb", ".hsaco", ".co", ".bc")
-
-# Python sources stay in the server core so the rocm_sdk import glue remains
-# alongside the exe. (Both archives extract into backends/rocm/, so this only
-# affects which archive carries the file, not runtime resolution.)
-_PYTHON_EXTS = (".py", ".pyc", ".pyi")
-
-
-def is_rocm_file(rel_path: str) -> bool:
-    """Check if a relative path belongs to the AMD ROCm runtime libraries.
-
-    Identifies large ROCm/HIP runtime DLLs and the SDK runtime payload
-    (kernel databases, Tensile data) regardless of where PyInstaller placed
-    them, while keeping pure-python glue in the server core.
-    """
-    rel_lower = rel_path.lower().replace("\\", "/")
-    name = rel_lower.rsplit("/", 1)[-1]
-
-    # Never split out Python sources / stubs.
-    if name.endswith(_PYTHON_EXTS):
-        return False
-
-    # Native payload inside the bundled ROCm SDK package trees.
-    if any(marker in rel_lower for marker in ROCM_LIB_DIR_MARKERS):
-        if name.endswith(ROCM_LIB_EXTS):
-            return True
-
-    # ROCm/HIP DLLs/shared objects anywhere (e.g. _internal/torch/lib/amdhip64.dll).
-    if name.endswith((".dll", ".so")):
-        name_no_ext = name.rsplit(".", 1)[0]
-        for prefix in ROCM_DLL_PREFIXES:
-            if name_no_ext.startswith(prefix):
-                return True
-
-    return False
-
-
-def sha256_file(path: Path) -> str:
-    """Compute SHA-256 hex digest of a file."""
-    h = hashlib.sha256()
-    with open(path, "rb") as f:
-        while True:
-            chunk = f.read(1024 * 1024)
-            if not chunk:
-                break
-            h.update(chunk)
-    return h.hexdigest()
-
-
-def package(
-    onedir_path: Path,
-    output_dir: Path,
-    rocm_libs_version: str,
-    torch_compat: str,
-):
-    output_dir.mkdir(parents=True, exist_ok=True)
-
-    # Collect all files in the onedir output, split into core vs rocm.
-    core_files = []
-    rocm_files = []
-
-    for item in sorted(onedir_path.rglob("*")):
-        if item.is_dir():
-            continue
-        rel = item.relative_to(onedir_path)
-        rel_str = str(rel)
-        if is_rocm_file(rel_str):
-            rocm_files.append((rel_str, item))
-        else:
-            core_files.append((rel_str, item))
-
-    core_size = sum(f.stat().st_size for _, f in core_files)
-    rocm_size = sum(f.stat().st_size for _, f in rocm_files)
-
-    print(f"Input directory: {onedir_path}")
-    print(f"Core files: {len(core_files)} ({core_size / (1024**2):.1f} MB)")
-    print(f"ROCm files: {len(rocm_files)} ({rocm_size / (1024**2):.1f} MB)")
-
-    if not rocm_files:
-        print(
-            f"ERROR: No ROCm files found in {onedir_path}. "
-            "Refusing to create an empty ROCm libs archive.",
-            file=sys.stderr,
-        )
-        print(
-            "Make sure you built with --rocm and the ROCm SDK packages are present. "
-            "If the layout differs, adjust ROCM_DLL_PREFIXES / ROCM_LIB_DIR_MARKERS.",
-            file=sys.stderr,
-        )
-        sys.exit(1)
-
-    # Create server core archive. Files are stored relative to the archive root
-    # (no parent prefix) so extracting to backends/rocm/ lands at the right level.
-    server_archive = output_dir / "voicebox-server-rocm.tar.gz"
-    print(f"\nCreating server core archive: {server_archive.name}")
-    with tarfile.open(server_archive, "w:gz") as tar:
-        for rel_str, full_path in core_files:
-            tar.add(full_path, arcname=rel_str)
-    server_sha = sha256_file(server_archive)
-    (output_dir / "voicebox-server-rocm.tar.gz.sha256").write_text(
-        f"{server_sha}  voicebox-server-rocm.tar.gz\n"
-    )
-    print(f"  Size: {server_archive.stat().st_size / (1024**2):.1f} MB")
-    print(f"  SHA-256: {server_sha[:16]}...")
-
-    # Create ROCm libs archive.
-    rocm_libs_archive = output_dir / f"rocm-libs-{rocm_libs_version}.tar.gz"
-    print(f"\nCreating ROCm libs archive: {rocm_libs_archive.name}")
-    with tarfile.open(rocm_libs_archive, "w:gz") as tar:
-        for rel_str, full_path in rocm_files:
-            tar.add(full_path, arcname=rel_str)
-    rocm_sha = sha256_file(rocm_libs_archive)
-    (output_dir / f"rocm-libs-{rocm_libs_version}.tar.gz.sha256").write_text(
-        f"{rocm_sha}  rocm-libs-{rocm_libs_version}.tar.gz\n"
-    )
-    print(f"  Size: {rocm_libs_archive.stat().st_size / (1024**2):.1f} MB")
-    print(f"  SHA-256: {rocm_sha[:16]}...")
-
-    # Write rocm-libs.json manifest.
-    manifest = {
-        "version": rocm_libs_version,
-        "torch_compat": torch_compat,
-        "archive": rocm_libs_archive.name,
-        "sha256": rocm_sha,
-    }
-    manifest_path = output_dir / "rocm-libs.json"
-    manifest_path.write_text(json.dumps(manifest, indent=2) + "\n")
-    print(f"\nManifest: {manifest_path.name}")
-    print(json.dumps(manifest, indent=2))
-
-    # Summary
-    total_input = core_size + rocm_size
-    total_output = server_archive.stat().st_size + rocm_libs_archive.stat().st_size
-    print(f"\nTotal input:  {total_input / (1024**3):.2f} GB")
-    print(f"Total output: {total_output / (1024**3):.2f} GB (compressed)")
-    print(
-        f"Server core:  {server_archive.stat().st_size / (1024**2):.1f} MB (redownloaded on app update)"
-    )
-    print(
-        f"ROCm libs:    {rocm_libs_archive.stat().st_size / (1024**2):.1f} MB (cached until ROCm toolkit bump)"
-    )
-
-
-def main():
-    parser = argparse.ArgumentParser(
-        description="Package PyInstaller --onedir ROCm build into server + ROCm libs archives"
-    )
-    parser.add_argument(
-        "input",
-        type=Path,
-        help="Path to PyInstaller --onedir output directory (e.g. backend/dist/voicebox-server-rocm/)",
-    )
-    parser.add_argument(
-        "--output",
-        type=Path,
-        default=None,
-        help="Output directory for archives (default: same as input parent)",
-    )
-    parser.add_argument(
-        "--rocm-libs-version",
-        type=str,
-        default="rocm7.2-v1",
-        help="Version string for the ROCm libs archive (default: rocm7.2-v1)",
-    )
-    parser.add_argument(
-        "--torch-compat",
-        type=str,
-        default=">=2.9.0,<2.10.0",
-        help="Torch version compatibility range (default: >=2.9.0,<2.10.0)",
-    )
-    args = parser.parse_args()
-
-    if not args.input.is_dir():
-        print(f"Error: {args.input} is not a directory", file=sys.stderr)
-        print("Expected a PyInstaller --onedir output directory.", file=sys.stderr)
-        sys.exit(1)
-
-    output_dir = args.output or args.input.parent
-    package(args.input, output_dir, args.rocm_libs_version, args.torch_compat)
-
-
-if __name__ == "__main__":
-    main()

scripts/rocm-entrypoint.sh

@@ -1,15 +0,0 @@
-#!/bin/sh
-set -e
-# Join whatever groups own the mounted GPU nodes so /dev/kfd and /dev/dri work
-# on any host (no RENDER_GID/VIDEO_GID needed), then drop to the app user.
-for dev in /dev/kfd /dev/dri/render*; do
-    [ -e "$dev" ] || continue
-    gid=$(stat -c %g "$dev")
-    grp=$(getent group "$gid" | cut -d: -f1)
-    [ -n "$grp" ] || {
-        grp="gpu$gid"
-        groupadd -g "$gid" "$grp"
-    }
-    usermod -aG "$grp" voicebox
-done
-exec gosu voicebox "$@"

tauri/src-tauri/src/main.rs

@@ -200,63 +200,6 @@ struct ServerState {
     server_pid: Mutex<Option<u32>>,
     keep_running_on_close: Mutex<bool>,
     models_dir: Mutex<Option<String>>,
-    /// Override the backend selection: Some("cpu") forces the CPU sidecar even
-    /// when GPU binaries exist (solving the Windows catch-22 where an active
-    /// .exe cannot be deleted), while Some("cuda")/Some("rocm") pin a specific
-    /// GPU variant when more than one is installed. None uses the on-disk
-    /// default (ROCm preferred, then CUDA). Persisted to disk so the choice
-    /// survives an app restart.
-    backend_override: Mutex<Option<String>>,
-}
-
-fn backend_override_file(data_dir: &std::path::Path) -> std::path::PathBuf {
-    data_dir.join("backend_override")
-}
-
-fn read_persisted_backend_override(data_dir: &std::path::Path) -> Option<String> {
-    std::fs::read_to_string(backend_override_file(data_dir))
-        .ok()
-        .map(|s| s.trim().to_string())
-        .filter(|s| !s.is_empty())
-}
-
-fn write_persisted_backend_override(data_dir: &std::path::Path, value: Option<&str>) {
-    let path = backend_override_file(data_dir);
-    match value {
-        Some(v) => {
-            let _ = std::fs::create_dir_all(data_dir);
-            if let Err(e) = std::fs::write(&path, v) {
-                println!("Failed to persist backend override: {}", e);
-            }
-        }
-        None => {
-            let _ = std::fs::remove_file(&path);
-        }
-    }
-}
-
-/// Run `<exe> --version` with a 10-second timeout to avoid hanging Tauri startup.
-/// Returns the last whitespace-delimited token from stdout (e.g. "0.4.4"), or None on any failure.
-async fn probe_binary_version(exe: &std::path::Path, cwd: &std::path::Path) -> Option<String> {
-    let mut cmd = tokio::process::Command::new(exe);
-    cmd.arg("--version")
-        .current_dir(cwd)
-        .kill_on_drop(true);
-
-    match tokio::time::timeout(std::time::Duration::from_secs(10), cmd.output()).await {
-        Ok(Ok(output)) => {
-            let s = String::from_utf8_lossy(&output.stdout);
-            s.trim().split_whitespace().last().map(String::from)
-        }
-        Ok(Err(e)) => {
-            println!("Version probe failed: {}", e);
-            None
-        }
-        Err(_) => {
-            println!("Version probe timed out after 10s");
-            None
-        }
-    }
 }
 
 #[command]
@@ -417,45 +360,6 @@ async fn start_server(
     println!("Data directory: {:?}", data_dir);
     println!("Remote mode: {}", remote.unwrap_or(false));
 
-    // Check for ROCm backend in data directory (onedir layout: backends/rocm/)
-    let rocm_binary = {
-        let rocm_dir = data_dir.join("backends").join("rocm");
-        let rocm_name = if cfg!(windows) {
-            "voicebox-server-rocm.exe"
-        } else {
-            "voicebox-server-rocm"
-        };
-        let exe_path = rocm_dir.join(rocm_name);
-        if exe_path.exists() {
-            println!("Found ROCm backend at {:?}", rocm_dir);
-
-            let app_version = app.config().version.clone().unwrap_or_default();
-            let binary_version = probe_binary_version(&exe_path, &rocm_dir).await;
-            let version_ok = if !app_version.is_empty()
-                && binary_version.as_deref() == Some(app_version.as_str())
-            {
-                println!("ROCm binary version {} matches app version", app_version);
-                true
-            } else {
-                println!(
-                    "ROCm binary version mismatch: binary={}, app={}. Falling back to CPU.",
-                    binary_version.as_deref().unwrap_or("<unknown>"),
-                    app_version
-                );
-                false
-            };
-
-            if version_ok {
-                Some(exe_path)
-            } else {
-                None
-            }
-        } else {
-            println!("No ROCm backend found");
-            None
-        }
-    };
-
     // Check for CUDA backend in data directory (onedir layout: backends/cuda/)
     let cuda_binary = {
         let cuda_dir = data_dir.join("backends").join("cuda");
@@ -471,19 +375,30 @@ async fn start_server(
             // Version check: run --version from the onedir directory so
             // PyInstaller can find its support files for the fast --version path
             let app_version = app.config().version.clone().unwrap_or_default();
-            let binary_version = probe_binary_version(&exe_path, &cuda_dir).await;
-            let version_ok = if !app_version.is_empty()
-                && binary_version.as_deref() == Some(app_version.as_str())
+            let version_ok = match std::process::Command::new(&exe_path)
+                .arg("--version")
+                .current_dir(&cuda_dir)
+                .output()
             {
-                println!("CUDA binary version {} matches app version", app_version);
-                true
-            } else {
-                println!(
-                    "CUDA binary version mismatch: binary={}, app={}. Falling back to CPU.",
-                    binary_version.as_deref().unwrap_or("<unknown>"),
-                    app_version
-                );
-                false
+                Ok(output) => {
+                    // Output format: "voicebox-server X.Y.Z\n"
+                    let version_str = String::from_utf8_lossy(&output.stdout);
+                    let binary_version = version_str.trim().split_whitespace().last().unwrap_or("");
+                    if binary_version == app_version {
+                        println!("CUDA binary version {} matches app version", binary_version);
+                        true
+                    } else {
+                        println!(
+                            "CUDA binary version mismatch: binary={}, app={}. Falling back to CPU.",
+                            binary_version, app_version
+                        );
+                        false
+                    }
+                }
+                Err(e) => {
+                    println!("Failed to check CUDA binary version: {}. Falling back to CPU.", e);
+                    false
+                }
             };
 
             if version_ok {
@@ -550,74 +465,24 @@ async fn start_server(
         println!("Custom models directory: {}", dir);
     }
 
-    // Respect backend override (e.g., user wants CPU even though a GPU binary
-    // exists, or pinned a specific GPU variant). The in-memory value resets to
-    // None on app launch, so fall back to the persisted choice on disk.
-    let backend_override = {
-        let in_memory = state.backend_override.lock().unwrap().clone();
-        in_memory.or_else(|| read_persisted_backend_override(&data_dir))
-    };
-
-    // Honor a pinned GPU variant by ignoring the other one — but only when the
-    // pinned variant is actually installed, so a stale pin to a deleted backend
-    // self-heals to the default order instead of forcing CPU. With no pin, both
-    // stay eligible and the launch order below prefers ROCm, then CUDA.
-    let pin = backend_override.as_deref();
-    let pin_cuda = pin == Some("cuda") && cuda_binary.is_some();
-    let pin_rocm = pin == Some("rocm") && rocm_binary.is_some();
-    let rocm_binary = if pin_cuda { None } else { rocm_binary };
-    let cuda_binary = if pin_rocm { None } else { cuda_binary };
-
-    // If ROCm binary exists, launch it from the onedir directory.
     // If CUDA binary exists, launch it from the onedir directory.
     // .current_dir() is critical: PyInstaller onedir expects all DLLs and
-    // support files relative to the exe.
-    let spawn_result = if backend_override.as_deref() != Some("cpu") {
-        let mut gpu_spawn = None;
-
-        if let Some(ref rocm_path) = rocm_binary {
-            let rocm_dir = rocm_path.parent().unwrap();
-            println!("Launching ROCm backend: {:?} (cwd: {:?})", rocm_path, rocm_dir);
-            let mut cmd = app.shell().command(rocm_path.to_str().unwrap());
-            cmd = cmd.current_dir(rocm_dir);
-            cmd = cmd.args(["--data-dir", &data_dir_str, "--port", &port_str, "--parent-pid", &parent_pid_str]);
-            if is_remote { cmd = cmd.args(["--host", "0.0.0.0"]); }
-            if let Some(ref dir) = effective_models_dir { cmd = cmd.env("VOICEBOX_MODELS_DIR", dir); }
-            match cmd.spawn() {
-                Ok(r) => { gpu_spawn = Some(Ok(r)); }
-                Err(e) => { println!("ROCm spawn failed ({}), trying CUDA/CPU fallback", e); }
-            }
+    // support files (nvidia/, _internal/, etc.) relative to the exe.
+    let spawn_result = if let Some(ref cuda_path) = cuda_binary {
+        let cuda_dir = cuda_path.parent().unwrap();
+        println!("Launching CUDA backend: {:?} (cwd: {:?})", cuda_path, cuda_dir);
+        let mut cmd = app.shell().command(cuda_path.to_str().unwrap());
+        cmd = cmd.current_dir(cuda_dir);
+        cmd = cmd.args(["--data-dir", &data_dir_str, "--port", &port_str, "--parent-pid", &parent_pid_str]);
+        if is_remote {
+            cmd = cmd.args(["--host", "0.0.0.0"]);
         }
-
-        if gpu_spawn.is_none() {
-            if let Some(ref cuda_path) = cuda_binary {
-                let cuda_dir = cuda_path.parent().unwrap();
-                println!("Launching CUDA backend: {:?} (cwd: {:?})", cuda_path, cuda_dir);
-                let mut cmd = app.shell().command(cuda_path.to_str().unwrap());
-                cmd = cmd.current_dir(cuda_dir);
-                cmd = cmd.args(["--data-dir", &data_dir_str, "--port", &port_str, "--parent-pid", &parent_pid_str]);
-                if is_remote { cmd = cmd.args(["--host", "0.0.0.0"]); }
-                if let Some(ref dir) = effective_models_dir { cmd = cmd.env("VOICEBOX_MODELS_DIR", dir); }
-                match cmd.spawn() {
-                    Ok(r) => { gpu_spawn = Some(Ok(r)); }
-                    Err(e) => { println!("CUDA spawn failed ({}), falling back to CPU", e); }
-                }
-            }
-        }
-
-        if let Some(result) = gpu_spawn {
-            result
-        } else {
-            // Fall back to bundled CPU sidecar
-            sidecar = sidecar.args(["--data-dir", &data_dir_str, "--port", &port_str, "--parent-pid", &parent_pid_str]);
-            if is_remote { sidecar = sidecar.args(["--host", "0.0.0.0"]); }
-            if let Some(ref dir) = effective_models_dir { sidecar = sidecar.env("VOICEBOX_MODELS_DIR", dir); }
-            println!("Spawning bundled CPU server process...");
-            sidecar.spawn()
+        if let Some(ref dir) = effective_models_dir {
+            cmd = cmd.env("VOICEBOX_MODELS_DIR", dir);
         }
+        cmd.spawn()
     } else {
-        // Override forces CPU — use bundled sidecar, GPU binary stays on disk
-        println!("Backend override=cpu: using bundled CPU sidecar");
+        // Use the bundled CPU sidecar
         sidecar = sidecar.args(["--data-dir", &data_dir_str, "--port", &port_str, "--parent-pid", &parent_pid_str]);
         if is_remote {
             sidecar = sidecar.args(["--host", "0.0.0.0"]);
@@ -625,6 +490,7 @@ async fn start_server(
         if let Some(ref dir) = effective_models_dir {
             sidecar = sidecar.env("VOICEBOX_MODELS_DIR", dir);
         }
+        println!("Spawning server process...");
         sidecar.spawn()
     };
 
@@ -896,9 +762,9 @@ async fn restart_server(
     println!("restart_server: waiting for port release...");
     tokio::time::sleep(tokio::time::Duration::from_millis(1000)).await;
 
-    // Start server again (will auto-detect GPU binary and use stored models_dir)
+    // Start server again (will auto-detect CUDA binary and use stored models_dir)
     println!("restart_server: starting server...");
-    start_server(app, state.clone(), None, None).await
+    start_server(app, state, None, None).await
 }
 
 #[command]
@@ -907,19 +773,6 @@ fn set_keep_server_running(state: State<'_, ServerState>, keep_running: bool) {
     *state.keep_running_on_close.lock().unwrap() = keep_running;
 }
 
-#[command]
-fn set_backend_override(
-    app: tauri::AppHandle,
-    state: State<'_, ServerState>,
-    backend: Option<String>,
-) {
-    println!("set_backend_override called with: {:?}", backend);
-    if let Ok(data_dir) = app.path().app_data_dir() {
-        write_persisted_backend_override(&data_dir, backend.as_deref());
-    }
-    *state.backend_override.lock().unwrap() = backend;
-}
-
 #[command]
 async fn start_system_audio_capture(
     state: State<'_, audio_capture::AudioCaptureState>,
@@ -1386,7 +1239,6 @@ pub fn run() {
             server_pid: Mutex::new(None),
             keep_running_on_close: Mutex::new(false),
             models_dir: Mutex::new(None),
-            backend_override: Mutex::new(None),
         })
         .manage(audio_capture::AudioCaptureState::new())
         .manage(audio_output::AudioOutputState::new())
@@ -1505,7 +1357,6 @@ pub fn run() {
             stop_server,
             restart_server,
             set_keep_server_running,
-            set_backend_override,
             start_system_audio_capture,
             stop_system_audio_capture,
             is_system_audio_supported,

tauri/src/platform/lifecycle.ts

@@ -52,15 +52,6 @@ class TauriLifecycle implements PlatformLifecycle {
     }
   }
 
-  async setBackendOverride(backend?: string | null): Promise<void> {
-    try {
-      await invoke('set_backend_override', { backend: backend ?? undefined });
-    } catch (error) {
-      console.error('Failed to set backend override:', error);
-      throw error;
-    }
-  }
-
   async setupWindowCloseHandler(): Promise<void> {
     try {
       // Listen for window close request from Rust

tauri/vite.config.ts

@@ -27,7 +27,7 @@ export default defineConfig({
     strictPort: true,
     // Watch files in the app directory for changes
     watch: {
-      ignored: ['!**/../app/**', '**/target/**'],
+      ignored: ['!**/../app/**'],
     },
   },
   envPrefix: ['VITE_', 'TAURI_'],

web/src/platform/lifecycle.ts

@@ -24,10 +24,6 @@ class WebLifecycle implements PlatformLifecycle {
     // No-op for web
   }
 
-  async setBackendOverride(_backend?: string | null): Promise<void> {
-    // No-op for web - backend variant is managed externally
-  }
-
   async setupWindowCloseHandler(): Promise<void> {
     // No-op for web - no window close handling needed
   }