SLICE-7: images pipeline end-to-end — fetch/host/serve + INV-12 over images (SD-0002 §7.2) #30

2026-06-12T07:59:40Z

ben.stull commented

2026-06-12 07:59:40 +00:00

SLICE-7 — the products images pipeline end-to-end (SD-0002 §7.2), closing PUC-7.

Ships: platform/images (decode + resolution bar Q-3=500px + WebP renditions) · platform/objectstore (local/GCS port) · the post-commit SSRF-guarded, bounded, resumable image-fetch phase (domains/products/imagefetch.py) · the storefront-authorized app-served image route (INV-16, immutable cache) · hosted-URL recognition extending INV-12 over images (export emits hosted detail URLs for fetched images; re-import resolves them to the existing record, never re-fetched; unknown hosted id → row error) · run-detail images section (live poll) + Products-page image-problems notice band + history image column · TEL-4/TEL-5 · v0.7.0.

Cross-repo: launch-app provision-bucket gesture built + merged (engineering #58) — the operator runs it at the PPE deploy to create wiggleverse-ecomm-ppe-media.

Invariants: INV-12 (200-seed property test mixing fetched/non-fetched), INV-14 (storefront-scoped), INV-16 (hosted-only serving), INV-18 (≤20MB/30s/image-type + SSRF public-IP-only, no cross-guard redirects). A final code review caught + fixed a Critical decompression-bomb / unexpected-error path that could wedge a run (bomb→rejection + per-image error isolation).

Gates: check.sh green (lint-imports, 202 backend pytest, frontend build, 19 vitest); e2e.sh 7/7 incl. e2e_image_outcomes (local fixture image host, no egress). Issue #13 stays open until SLICE-8 (Shopify dialect).

🤖 Generated with Claude Code

SLICE-7 — the products images pipeline end-to-end (SD-0002 §7.2), closing PUC-7. **Ships:** `platform/images` (decode + resolution bar Q-3=500px + WebP renditions) · `platform/objectstore` (local/GCS port) · the post-commit SSRF-guarded, bounded, **resumable** image-fetch phase (`domains/products/imagefetch.py`) · the storefront-authorized app-served image route (INV-16, immutable cache) · hosted-URL recognition extending **INV-12 over images** (export emits hosted detail URLs for fetched images; re-import resolves them to the existing record, never re-fetched; unknown hosted id → row error) · run-detail images section (live poll) + Products-page image-problems notice band + history image column · **TEL-4/TEL-5** · v0.7.0. **Cross-repo:** launch-app `provision-bucket` gesture built + merged (engineering #58) — the operator runs it at the PPE deploy to create `wiggleverse-ecomm-ppe-media`. **Invariants:** INV-12 (200-seed property test mixing fetched/non-fetched), INV-14 (storefront-scoped), INV-16 (hosted-only serving), INV-18 (≤20MB/30s/image-type + SSRF public-IP-only, no cross-guard redirects). A final code review caught + fixed a Critical decompression-bomb / unexpected-error path that could wedge a run (bomb→rejection + per-image error isolation). **Gates:** `check.sh` green (lint-imports, 202 backend pytest, frontend build, 19 vitest); `e2e.sh` **7/7** incl. `e2e_image_outcomes` (local fixture image host, no egress). Issue #13 stays open until SLICE-8 (Shopify dialect). 🤖 Generated with [Claude Code](https://claude.com/claude-code)

ben.stull added 13 commits 2026-06-12 07:59:41 +00:00

feat(platform): images port — decode, resolution bar (Q-3), WebP renditions (SD-0002 §6.2) f27a24353d

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

feat(platform): objectstore port — local + GCS adapters, config (SD-0002 §6.2) 0fc29a34dd

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

feat(products): hosted-image URL build/parse helpers (SD-0002 §6.3.1) da5177c950

DB-free host-agnostic helpers: image_url() builds the canonical hosted
Image Src for a fetched image; parse_image_id() recognizes one on re-import
via path-parse so exports round-trip across localhost/PPE/rebrand (INV-12).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

feat(products): export hosted detail URL for fetched images; snapshot carries status (SD-0002 §6.5.5, INV-16) 906bc87c96

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

feat(products): diff resolves hosted image URLs to existing records — INV-12 over images (SD-0002 §6.3) 984dc98dee

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

feat(products): image-phase repo helpers + run progress/outcomes/counts (SD-0002 §6.5.4) 13e74f4c61

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

feat(products): image-fetch phase — SSRF guard, bounds, renditions, resume (SD-0002 §6.5.4, §6.9, INV-18) 23267c4d4c

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

feat(products): confirm → fetching_images + post-commit fetch scheduling + startup recovery (SD-0002 §6.5.3/§6.9) 5d5341b29b

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

feat(products): app-served image route — storefront-authorized, immutable cache (SD-0002 §6.4, INV-16) 7f51f5242f

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

feat(products-ui): run-detail images section + progress poll, image-problems notice band, history images column (SD-0002 §5.2/§5.5) d81215be1d

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

test(e2e): e2e_image_outcomes — fixture image host, per-image outcomes + notice band (SD-0002 §6.8) 0775537d4c

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

docs(products): image pipeline ops + seams (DOC-1/DOC-4); overlay bucket config; v0.7.0 757412ef2a

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

fix(products): bomb-safe image processing + per-image error isolation; honest claim/resumability docs (SLICE-7 review)

ci / check (push) Has been cancelled

Details

ci / check (pull_request) Has been cancelled

Details

c929282e07

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

ben.stull merged commit 8ed9b25771 into main

2026-06-12 08:00:01 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: wiggleverse/wiggleverse-ecomm#30