Daniel Han-Chen 79da5d910d Fix/adjust diffusion: round 27 follow-up P1 batch for PR #5754 ... Five additional P1 findings round 27 reviewer flagged on top of the round 27 commit 6c528fb0 (Counter refcount + handoff visibility were already covered). Three remaining studio.txt / no-torch-runtime hub suggestions are NOT applied because they would re-break CI; the empirical evidence (round 26 commit 65ea3a2c restored CI green) takes precedence over the reviewer's stale-state suggestion. 1. models/training.py TrainingStartRequest: extend the embedded HF token validator to subset, train_split, eval_split. Round 26 only added the control-char guard to those three; the token guard was asymmetric and would accept owner/data\\nFAKE hf_abcdef... payloads through subset / split fields. 2. models/datasets.py CheckFormatRequest: extend both validators (control chars + embedded HF token) to subset and train_split. Same asymmetric-fix bug as #1. 3. models/data_recipe.py SeedInspectRequest: extend both validators to subset and split. Same pattern. 4. utils/datasets/llm_assist.py precache_helper_gguf: register the helper repo in the helper/advisor refcount registry around the hf_hub_download loop, then unregister in the finally. Without this, the FastAPI-startup background pre-cache could be racing a concurrent DELETE /api/models/delete-cached against the same cache directory. The runtime helper / advisor calls already register (round 26 P1 #13/#14) but the precache was the asymmetric gap. 5. routes/models.py _loaded_model_matches_deleted_path: match bidirectionally (active under target OR target under active) so deleting a child directory of a loaded local model (.../my-flux/ text_encoder while .../my-flux is loaded) trips the guard. Mirrors the diffusion delete-guard symmetric path-overlap check. Tests: 105 targeted (diffusion + cache + inference_validation) and the broader backend suite pass locally.		2026-05-25 13:43:51 +00:00
..
.gitkeep	fix: restore models directory files deleted during restructure	2026-02-02 19:36:30 +00:00
__init__.py	Studio: Dark theme refactor, right sidebar redesign, and chat UI polish (#5150)	2026-05-07 14:33:31 +04:00
auth.py	studio: security and hardening pass (auth rate-limit, sandbox, path containment, schema validation, headers) (#5375)	2026-05-13 06:12:18 -07:00
data_recipe.py	Fix/adjust diffusion: round 27 follow-up P1 batch for PR #5754	2026-05-25 13:43:51 +00:00
datasets.py	Fix/adjust diffusion: round 27 follow-up P1 batch for PR #5754	2026-05-25 13:43:51 +00:00
export.py	Fix/adjust diffusion: round 23 P1+P2 batch for PR #5754	2026-05-25 11:20:05 +00:00
inference.py	Fix/adjust diffusion: round 21 P1+P2 batch for PR #5754	2026-05-25 10:32:43 +00:00
models.py	Studio: add folder browser modal for Custom Folders (#5035)	2026-04-15 08:04:33 -07:00
providers.py	Studio: make API key optional for local providers (llama.cpp/vLLM/Ollama) (#5457)	2026-05-15 23:33:22 +04:00
responses.py	Final cleanup	2026-03-12 18:28:04 +00:00
training.py	Fix/adjust diffusion: round 27 follow-up P1 batch for PR #5754	2026-05-25 13:43:51 +00:00
users.py	fix: remove old comments (#4292)	2026-03-14 16:50:13 +04:00