• v2.1.0 1155ac4f4e

    reserve validation slots before downloading, to stop competitors front-running our downloads

    zhoushasha released this 2026-09-18 14:33:04 +08:00 | 7 commits to main since this release

    The download queue (/adminApi/async/task/model-download-task) is readable by ANY
    account, including low-privilege xc-Token ones, so our WAITING model ids leak.
    Competitors submit those via mechanism B (which needs no download), their task
    waits for the file, and once our zhoushasha download lands it runs and wins the
    slot - leaving us with 60028 on our own download.

    New flow:
    phase 1 (reserve, instant): bi150 via zero-credit accounts that have no bi150
    task yet, hygon via zhoukaile - both mechanism B, no download required
    phase 2 (download): zhoushasha downloads only the models we reserved

    Startup now filters out accounts that already hold a bi150 task, which also makes
    the rotation cursor idempotent across redeploys.

    Co-Authored-By: Claude Opus 5 noreply@anthropic.com

    Downloads