Completes the v0.1.5 -> v1.0 roadmap and hardens the path handling around it.
Features
- Auto Stitch: recommends where to cut between two clips, scoring candidates
on frame similarity and optical-flow motion continuity (recommend + Apply,
never an automatic edit).
- AI Detect: scene-change detection (ffmpeg scene score) and beat tracking
(librosa), with beats used as snap targets.
- Pre-render: flattens the marked range into one cached file for smooth
playback; invalidated automatically by any edit.
- Version Stack, Wipe Compare, Box/Shift select, per-clip Solo/Gain,
MOV/WebM export, whole-timeline Send To ComfyUI.
Security
- Contain clip paths on export. A clip's path is read from the project file
and POST /itda/api/project/<name> stores arbitrary JSON, so any local
process could point a clip at any file, have ffmpeg composite it into the
export, and fetch it back via /itda/api/file.
- Contain the export path in ITDA Load Export. The node trusted "path" from
last_export.json and handed it straight to a decoder, so a tampered
manifest could emit any file's contents as node output.
- Reject dot-only project names. safe_name() stripped separators but passed
"." and ".." through, collapsing media/<project> to the whole ITDA root;
media/delete would then accept any file under input/ITDA.
- Validate drawtext colors. Unvalidated color/shadow_color were interpolated
into the ffmpeg filter, so "ffffff:textfile=..." appended a real drawtext
option. Also set expansion=none.
Fixes
- ffmpeg no longer blocks ComfyUI's event loop (an export froze the whole UI
for its duration); all calls now run off-loop.
- Auto Stitch no longer ranks on audio: measured against known-correct cut
points it could not separate good cuts from bad, and demoted the perfect
cut to last. Frame + motion scores 5/5 on ground truth.
Removed itda_server.py, web/itda_editor.html/.css and an empty
itda_client.js (all superseded and unreferenced), and stopped tracking
__pycache__.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
