peter f76cd6ef36 fix(quota): don't let the demo account persist deep_requested (S1, finding 2) ...

The demo account is shared, so writing deep_requested onto its subscription polluted
shared state (harmless today — the scheduler's deep paths are human-only — but a
future scheduler path trusting the flag would leak quota). Guard the flag WRITE at the
source (not user.is_demo), which also makes deep_turned_on always False for demo, so
the redundant is_demo check on the immediate backfill is removed.

2026-07-22 00:00:44 +02:00

..

alembic

feat(plex): full-library cast backfill via a batched rich re-sync (S1b)

2026-07-19 04:50:45 +02:00

app

fix(quota): don't let the demo account persist deep_requested (S1, finding 2)

2026-07-22 00:00:44 +02:00

tests

fix(downloads): cap the media filename by BYTES, not characters

2026-07-22 00:00:44 +02:00

alembic.ini

feat: M1 foundation — compose stack, FastAPI, Google OAuth, encrypted tokens

2026-06-11 01:01:37 +02:00

Dockerfile

feat: M1 foundation — compose stack, FastAPI, Google OAuth, encrypted tokens

2026-06-11 01:01:37 +02:00

Dockerfile.test

test(backend): pure-logic pytest harness, run in an isolated test image

2026-07-21 03:29:24 +02:00

entrypoint.sh

harden(auth): SA3 review follow-ups — IPv6-mapped match + no-proxy-headers guardrail

2026-07-12 03:49:08 +02:00

log_config.json

chore: rename remaining subfeed references to siftlode

2026-06-21 06:53:12 +02:00

pytest.ini

test(backend): pure-logic pytest harness, run in an isolated test image

2026-07-21 03:29:24 +02:00

requirements-dev.txt

test(backend): pin the traversal guard against a string-prefix bypass

2026-07-21 03:36:42 +02:00

requirements.txt

feat(downloads): Deno JS runtime + web/android clients to complete the POT setup

2026-07-03 22:46:32 +02:00

ruff.toml

chore(hygiene): Phase 4 guardrails — noUnusedLocals/Parameters + dead-code sweep

2026-07-12 02:15:52 +02:00