zandClaude Opus 4.8 20d2f809af fix(studio/create): RED findings — dedup double-bill, dim type-confusion, alg over-match, sub-caption XSS (v0.18.2) ...

- F1 (MED): _dedup_key now keys on stable identity (org|kind|prompt|refs|uploads),
  not the random-tagged output_prefix, so two identical creates collapse to one
  dispatch (the anti-double-bill guard actually fires now).
- F2 (LOW): _image_graph/_video_graph raise DispatchError on non-numeric dims (clean 400, not 500).
- F3 (LOW): alg allowlist tightened to the exact JWS set in gateway_auth + documents.
- F4 (INFO): esc() the gallery sub-caption (crafted-upload filename_prefix XSS).
Red verified /v1/library/image cross-org/traversal/secret-exfil fail closed. +8 tests, 65 pass.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-25 09:31:48 -07:00

..

__init__.py

studio: native IAM auth + multi-tenant isolation + GPU federation

2026-07-03 14:38:19 -07:00

billing_test.py

studio: video lane — generate/card/ingest/judge over the shared library and flywheel

2026-07-18 02:02:30 -07:00

content_publish_test.py

fix(test): force CPU device path before importing execution — GPU-less CI runner has no NVIDIA driver

2026-07-12 22:32:52 -07:00

copilot_test.py

studio v0.18.1: text-to-image default create + fail-closed gateway auth + UX fixes

2026-07-25 09:04:03 -07:00

engine_selector_test.py

studio: crash-durable SQLite render queue + engine selector

2026-07-03 15:43:42 -07:00

gateway_auth_test.py

fix(studio/create): RED findings — dedup double-bill, dim type-confusion, alg over-match, sub-caption XSS (v0.18.2)

2026-07-25 09:31:48 -07:00

gpu_dispatch_test.py

dispatch: retry enqueue across the cloud tasks-backend deploy gap

2026-07-21 15:51:14 -07:00

iam_auth_test.py

studio: framed unauth navigation gets a same-origin connect card, not the IdP 302 — makes the console's Studio embed work (the IdP refuses framing)

2026-07-21 21:51:04 -07:00

mcp_test.py

studio: /v1/mcp render tools (fix/compose/ask) for the cloud chat tool registry

2026-07-16 09:01:36 -07:00

quality_gate_test.py

gate: survive reasoning judges — verdict from reasoning_content, last-token rule, unstarved budget

2026-07-17 23:10:10 -07:00

quality_gate_video_test.py

studio: video lane — generate/card/ingest/judge over the shared library and flywheel

2026-07-18 02:02:30 -07:00

session_test.py

studio: IAM identity menu + session API + de-Comfy display strings

2026-07-04 13:15:51 -07:00

studio_home_fix_test.py

test(studio): split semicolon statements — green the ruff gate on main

2026-07-24 16:58:10 -07:00

studio_home_model3d_test.py

style(studio): clear pre-existing ruff E702/F841 in 3D + video tests

2026-07-18 17:31:25 -07:00

studio_home_video_test.py

feat: per-GPU gpu-jobs queue + worker-mode gate (no hidden runs) (#30)

2026-07-21 14:14:23 -07:00

tasks_queue_test.py

studio: crash-durable SQLite render queue + engine selector

2026-07-03 15:43:42 -07:00

worker_seam_test.py

feat: per-GPU gpu-jobs queue + worker-mode gate (no hidden runs) (#30)

2026-07-21 14:14:23 -07:00

worklog_test.py

Queue transparency: which node runs it + position/ETA/elapsed (#10)

2026-07-16 16:28:30 -07:00