Internal release. Studio is up at a temporary URL.
What's working:
- API key generation, hashing, and revoke
- The interactive playground hitting
/v1/analyze - Per-key usage tracking (daily and per-minute counters)
- Agent CRUD — saved bundles of model + instructions
What's not yet working:
- Webhooks (HMAC signing is in but Cloud Tasks delivery isn't)
- Auto-generated docs from the engine (build script written, not wired)
- Studio's own audit log
The interesting decision this round was using two separate Firebase projects — one for identity, one for product data. It costs us a custom-token exchange between them on every request, but the isolation is worth it. If Studio gets compromised, the auth project stays clean.
Public preview when the FAQ is done.