Files
stegasoo/TODO-4.2.1.md
Aaron D. Lee 3b5ab41ce9 Add stegasoo-cli AUR package (CLI-only, no web deps)
New package in aur-cli/ for CLI-only installation:
- Installs [cli,dct,compression] extras only
- No flask/gunicorn/fastapi/uvicorn/pyzbar dependencies
- 68MB vs 79MB for full package
- Conflicts with stegasoo-git (can't install both)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-11 17:19:31 -05:00

1.8 KiB

Stegasoo 4.2.1 Plan

Bugs

  • Fix EXIF viewer panel not loading metadata in Web UI
    • Redesigned with card-based grid layout and categories
    • Compact styling for better space usage
  • DCT mode: portrait photos export rotated 90° (EXIF orientation not handled)
    • Added _apply_exif_orientation() to apply EXIF rotation before embedding
  • DCT mode: add rotation fallback (try as-is, rotate 90°, retry on failure)
    • Added rotation fallback in extract_from_dct() with quick header validation
  • Rotate tool: use jpegtran for lossless JPEG rotation (preserves DCT stego!)
    • Web UI rotate tool now uses jpegtran for JPEGs
    • DCT decode rotation fallback now uses jpegtran for JPEGs
    • Dynamic UI shows "DCT Safe" for JPEGs, warning for other formats

Tools Audit

  • Web UI tools - full shakedown and fixes
    • Compress, Rotate, Strip, EXIF viewer all working
    • Rotate uses jpegtran for lossless JPEG rotation
    • Compact UI styling
  • CLI tools - full shakedown and fixes
    • Fixed encode to output JPEG when carrier is JPEG (was always PNG)
    • Fixed jpegtran -trim flag destroying DCT stego data
    • Added compress, rotate, convert tools (matching Web UI)
    • Rotate uses jpegtran for JPEGs, supports flip-only operations

AUR Packages

  • stegasoo-cli - standalone CLI package (no web dependencies)
    • Created aur-cli/PKGBUILD with [cli,dct,compression] extras only
    • No flask/gunicorn/fastapi/uvicorn/pyzbar deps
    • 68MB vs 79MB for full package
  • stegasoo-api - REST API package (needs auth overhaul first)

API Auth Work (blocking stegasoo-api)

  • Implement OAuth2 authentication
  • TLS 1.3 support with self-signed certificates
  • Figure out cert trust/distribution for clients

API Documentation

  • Postman collection
  • Environment variable templates