8 Commits

Author	SHA1	Message	Date
cyq	65d9603c8c	fix(memory): validate session owner on manual add (#3807)	2026-06-11 15:44:10 +02:00
Kenny Van de Maele	2404b00f18	refactor(uploads): centralize upload byte-limits in upload_limits.py (#3364) (#3518) ... Move every per-route upload byte-limit into src/upload_limits.py as a validated, env-overridable constant via read_byte_limit_env: - Add GALLERY_UPLOAD_MAX_BYTES, GALLERY_TRANSFORM_UPLOAD_MAX_BYTES, MEMORY_IMPORT_MAX_BYTES, PERSONAL_UPLOAD_MAX_BYTES, EMAIL_COMPOSE_UPLOAD_MAX_BYTES, STT_MAX_AUDIO_BYTES, ICS_MAX_BYTES. - Routes import their constant instead of defining it locally: replaces 4 raw int(os.getenv(...)) and removes 3 hardcoded literals. - The 3 previously-hardcoded limits (email compose, STT audio, calendar ICS) are now env-overridable with the same ODYSSEUS_*_MAX_BYTES naming. - Defaults unchanged, so behavior is unchanged unless an env var is set; an invalid value now fails fast with a clear message instead of a bare int() ValueError. - Document all env vars in .env.example and the README. Fixes #3364	2026-06-09 01:24:30 +02:00
Vykos	ff4508d396	Scope vision model resolution by owner (#3009)	2026-06-07 12:39:02 +02:00
Vykos	193dc2f085	fix(uploads): bound direct upload reads ... * Stabilize full test collection * Add bounded reads for direct uploads	2026-06-04 00:32:50 +01:00
Afonso Coutinho	b6607d219d	fix(memory): owner-scope memory route session access	2026-06-03 23:13:56 +01:00
Georgiy	34c81e5b16	Auth: use require_user for remaining guarded routes	2026-06-02 20:55:50 +09:00
Filip	92a81480f7	feat: allow memory import without session (#493)	2026-06-01 22:32:17 +09:00
pewdiepie-archdaemon	e5c99a5eee	Odysseus v1.0	2026-05-31 23:58:26 +09:00