Studio Zero

repo: ~/Projects/studio-zero · 15 commits · 0 in last 24h, 0 in last 7d ·

Search the build

15 commits indexed

  1. 811266c 2026-08-25 creds-safe fetch guard: resolve relative fetch vs credential-free location (creds-in-URL trap)
  2. d3a352d 2026-07-26 chore: version 0.4.0 → 0.5.0 (session close — first Kamatera deploy + honesty banner + basic-auth gate)
  3. bdd814b 2026-07-26 DTD-B: optional HTTP Basic-Auth gate behind default-OFF SZ_BASIC_AUTH
  4. 87f86c8 2026-07-26 DTD-A: persistent honesty banner when a live call falls back to demo
  5. 6e679f7 2026-07-26 studio-zero: first Kamatera deploy config (pm2 studio-zero :9761, SZ_PROVIDER=cli Max-plan)
  6. ce4a40d 2026-07-25 auto-save: 2026-07-25T11:35:57 (1 files) — test/
  7. dfe27aa 2026-07-25 5x: REPORT — 2 clean sweeps (favicon + conditional export buttons fixed; M1 was a WHATWG bad-port artifact, not an app bug)
  8. 81d5154 2026-07-25 5x sweep 1: add favicon (kills 404); render export buttons only when a plan exists
  9. 987c6f9 2026-07-25 chore: guard clipboard copy (toast honesty), v0.2.0 (session close)
  10. cceb51d 2026-07-25 studio-zero: one-click auto-build all 7 steps (chains niche→title→script; hero + toolbar buttons; SZ_PROVIDER=demo force-flag)
  11. edefa92 2026-07-25 studio-zero: export — download full channel plan as standalone HTML + copy-as-markdown, inline rename; builder toolbar
  12. 1518094 2026-07-25 studio-zero: robust calendar title parser (whole-line bold titles + numbered/quoted fallbacks) — extracts all ~12 from live output
  13. 98efd98 2026-07-24 studio-zero: route live generation through Claude Max plan (local claude CLI, $0 marginal) with API + demo fallback
  14. f7ce02e 2026-07-24 studio-zero: guided 7-step AI YouTube channel builder (David's verbatim prompts, Claude proxy + cost + demo fallback)
  15. 74d1fd4 2026-07-24 initial scaffold (studio-zero) via web-dev accelerator

Authors

Agents used

  • none detected

Skills used

  • /deploy1
  • /config1
  • /auth1
  • /fallback1
  • /quoted1

Creative ideas + design notes

Commits with substantial prose (≥120 chars) — the rationale behind each move.

811266c · 2026-08-25 · creds-safe fetch guard: resolve relative fetch vs credential-free location (creds-in-URL trap) 
Fleet inoculation — opening this basic-auth app with credentials in the URL
poisoned document.baseURI and made relative fetch('/api/…') throw. Guard resolves
non-absolute request URLs against location instead. Ref: creds-in-url-fetch-guard-fleet-pattern.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
bdd814b · 2026-07-26 · DTD-B: optional HTTP Basic-Auth gate behind default-OFF SZ_BASIC_AUTH 
Stages the internal-only app for a future public launch. While SZ_BASIC_AUTH is
unset the app is byte-for-byte open (no auth) so the live :9761 service and the
/deploy /api/config smoke test are unaffected; set it to 1/on and every request
(incl. /api/* + health) requires Basic-Auth. Creds default admin/DW2024!
(SZ_BASIC_USER/SZ_BASIC_PASS override), constant-time compare, zero new deps.
Adds zero-dependency test/auth.spec.js (7 checks, green). v0.4.0.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
87f86c8 · 2026-07-26 · DTD-A: persistent honesty banner when a live call falls back to demo 
server.js flags a failed-live→demo response fallback:true (distinct from
intentional demo mode). Front-end raises a persistent 'generation unavailable —
placeholder demo content' banner (real reason surfaced, fallback-demo badge,
survives step navigation) so canned demo is never mistaken for a real result.
Adds self-contained test/fallback.spec.js regression guard (7 checks, green).
Existing ui.spec.js still 18/18 green; demo mode correctly stays banner-free.
v0.3.0.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

File tree

14 files tracked. Click any to browse the source at HEAD.

Other build journals

← Student Debt Crisis Redesign  ·  all 4 projects  ·  Sublease Agentabrams →

Export

commits.csv · feed.atom · project.json · commits.json

rendered in 0ms