ryan 6f093e3f6f Only presign and accept images in the caller's own conversations ...

GET /api/conversation/image/<key> presigned any S3 key for any logged-in
user, and /upload-image wrote into whatever conversation_id the form named.
Both now require the conversation in the key (or form) to belong to the
caller and return 404 otherwise.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-12 23:18:41 -04:00

..

artifacts

Index conversation, message, memory and artifact foreign keys

2026-10-12 22:57:35 -04:00

beli

Accept access tokens on protected routes; persist OIDC state

2026-10-12 17:44:34 -04:00

conversation

Only presign and accept images in the caller's own conversations

2026-10-12 23:18:41 -04:00

cron

Use fresh UUID thread_id per agent run in scheduler and cron

2026-09-17 08:43:57 -04:00

email

Fix EncryptedTextField crashing on plaintext values during model creation

2026-09-17 19:54:20 -04:00

imessage

Run image decoding and resizing off the event loop

2026-10-12 22:56:13 -04:00

rag

Batch Paperless chunk embeddings during indexing

2026-10-12 22:55:04 -04:00

scheduled_messages

Use fresh UUID thread_id per agent run in scheduler and cron

2026-09-17 08:43:57 -04:00

users

Accept access tokens on protected routes; persist OIDC state

2026-10-12 17:44:34 -04:00

whatsapp

Add admin-only Homebox MCP connector

2026-10-11 11:01:19 -04:00

ynab

Sync YNAB in the background inside the tools' freshness window

2026-10-12 22:55:33 -04:00

__init__.py

reorganization

2026-01-31 17:13:27 -05:00