Merge origin/main into feat/api-file-upload

Keep the API file upload branch current with main, enforce the documented JSON base64 per-file limit, and avoid leaking document extraction error strings into user prompts. Made-with: Cursor
2026-04-14 12:29:43 +00:00
parent a068df5a79 0a51344483
commit 2502fc616b
93 changed files with 14003 additions and 761 deletions
@@ -84,6 +84,10 @@ def _save_base64_data_url(data_url: str, media_dir: Path) -> str | None:
        raw = base64.b64decode(b64_payload)
    except Exception:
        return None
+    if len(raw) > MAX_FILE_SIZE:
+        raise _FileSizeExceeded(
+            f"File exceeds {MAX_FILE_SIZE // (1024 * 1024)}MB limit"
+        )
    ext = mimetypes.guess_extension(mime_type) or ".bin"
    filename = f"{uuid.uuid4().hex[:12]}{ext}"
    dest = media_dir / safe_filename(filename)