2 Commits

Include renames

Author	SHA1	Message	Date
peter	b1832afd18	style: apply ruff format across backend + scripts (line-length 100) ... Mechanical, whole-tree `ruff format` pass — no behaviour change. Recorded in .git-blame-ignore-revs (next commit) so git blame skips it.	2026-08-23 07:43:06 +02:00
peter	3e1ad6188e	feat(downloads): public share-by-link + watch page backend ... Share a download by a capability URL (/watch/{token}) that anyone can play on a login-free page — distinct from the registered-user ACL share. Per-link controls: optional expiry, allow-download toggle (stream-only vs downloadable), optional argon2 password. Revoke = delete. - migration 0042 + DownloadLink model; app/downloads/links.py (token, HMAC grant sign/verify) - owner endpoints (POST/GET/PATCH/DELETE links) + /recipients for the internal user picker - public router (no auth): watch meta / password unlock→signed grant / range-aware file serve (inline vs attachment); unlock is rate-limited; meta verifies the file exists on disk Verified end-to-end: 206 range, inline vs attachment, wrong-password 403, tampered-grant 403.	2026-07-04 04:19:29 +02:00