Brokkr

Libby

scene actions: device-name spellings, missing glTF references, link message kept, no folders on refused render

- check_relative: spaces before the first dot are dropped (CON .txt), superscript COM/LPT digits are device names.
- gltf_references refuses a reference to a missing file; drops the broad ValueError catch and redundant relative_to so the specific refusal (a link) reaches the receipt.
- _render_still makes folders only after every Blender-side refusal (unknown engine used to leave them behind).
- Tests for each.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

dbd4cc05d1

2026-11-07 15:10:58 +00:00

Libby

scene actions: junction refusal on Windows, direct path-rule tests, live junction smoke, TOCTOU doc

- resolve_inside maps OSError from resolving a component (WinError 448 on a mklink /J junction) to a link refusal.
- Direct check_relative test for '..' and NUL; OSError mapping test.
- headless_smoke.py makes real junctions on Windows (outside and inside the root) and an existing-output case.
- install.md documents the path rules and the residual TOCTOU.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

5adff0f8a2

2026-11-07 15:05:48 +00:00

Libby

scene actions: gltf reference check, relative-only names, link walk, no-overwrite output

WIP for review fixes, tests pass (61); mutation confirmation and Starfire re-run pending.

- importGltf parses .gltf JSON and .glb's JSON chunk, checks every buffers/images uri.
- Names are relative plain paths: no drive, UNC, extended, ':' (ADS), '..', device names.
- No symlink/junction component under the root; output must not already exist.
- Path and file stamps re-checked right before use; residual TOCTOU documented in code.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

72b52b5d0e

2026-11-07 13:20:30 +00:00

Libby

renderStill: ask Blender for the engine by assignment; add headless live smoke

Found by running the actions on Blender 5.2.3 headless: the render engine enum is
dynamic, bl_rna lists only BLENDER_EEVEE, so CYCLES and WORKBENCH were refused.
The fake in the tests now behaves like the real enum. surfaces/blender/tests/live/
headless_smoke.py runs every scene action against real bpy.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

4b2fefa368

2026-11-07 13:14:47 +00:00

Libby

Merge main (server hardening, PR #1 ) into blender-scene-actions

Resolved blender_target.py: both the server-guard fields and the action directories kept.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

e9a780569f

2026-11-07 12:52:59 +00:00

Libby

Blender add-on: importGltf, setCamera, setLight, setWorld, renderStill actions

Paths for importGltf and renderStill are confined to the Import Directory and
Render Output Directory preferences (empty disables the action; .. , absolute
paths and escaping symlinks are refused). Every field is validated before bpy is
touched. renderStill restores render settings afterwards. Tests use a fake bpy;
Blender was not run.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

2246584416

2026-11-07 12:43:45 +00:00

Blender add-on: importGltf, setCamera, setLight, setWorld, renderStill #2

2026-11-07