Reuse shared ComfyUI runtime for Deck-owned LTX video

test_endpoint.py

@@ -102,6 +102,18 @@ class EndpointTests(unittest.TestCase):
   with patch('endpoint.relay',side_effect=forward):
    code,body=self.request('/v1/models');self.assertEqual(code,207);self.assertEqual(body,{'ltx_native':'/v1/models'})
   self.ep.scheduler.gpu_mode='llm';self.ep.video=None
+ def test_comfy_browser_session_only_in_video_and_same_origin(self):
+  class NativeVideo:
+   def status(self):return {'service':{'ready':True}}
+   def relay(self,handler):handler.send({'native':True})
+  self.ep.video=NativeVideo();self.ep.scheduler.gpu_mode='video';self.ep.video_browser_auth=lambda h:h.get('Cookie')=='deck_session=synthetic'
+  for origin,expected in [(f'http://127.0.0.1:{self.port}',200),('https://foreign.example',403)]:
+   conn=http.client.HTTPConnection('127.0.0.1',self.port)
+   conn.request('GET','/',headers={'Cookie':'deck_session=synthetic','Origin':origin})
+   response=conn.getresponse();self.assertEqual(response.status,expected);response.read();conn.close()
+  conn=http.client.HTTPConnection('127.0.0.1',self.port);conn.request('GET','/',headers={'Cookie':'deck_session=wrong'})
+  response=conn.getresponse();self.assertEqual(response.status,401);response.read();conn.close()
+  self.ep.scheduler.gpu_mode='llm';self.ep.video=None
  def test_video_api_redirect_is_explicit_not_translation(self):
   code,body=self.request('/v1/videos',{'prompt':'synthetic'})
   self.assertEqual(code,410);self.assertEqual(body['error']['code'],'use_ltx_api')