pediatric-ai-scribe-v3/docs
Daniel bf4f895f2c
Some checks failed
Forgejo Android APK / Root app tests (push) Successful in 47s
Forgejo Docker Build / Root app tests (push) Successful in 49s
Forgejo Android APK / Build signed APK (push) Successful in 1m55s
Forgejo Docker Build / Build Docker image (push) Successful in 9s
Forgejo Docker Build / Deploy to the host (push) Failing after 0s
fix: article uploads are 10 MB, type-checked both ways, and sniffed
The ceiling was 100 MB per file with ten files allowed at once, and every file
is held whole in memory to be parsed — so the old limit let a single request ask
for a gigabyte of heap. A source article that size is not a thing anyone
uploads here. Now 10 MB, defined once and used by both the multer limit and the
post-upload check.

The filter accepted `allowed mime OR allowed extension`, so naming a file .pdf
was enough on its own, whatever it declared — and the extension is chosen by
whoever uploads. Both are required now.

Neither of those sees any bytes: multer filters on the headers, before the file
has arrived. verifySources() runs once the buffer exists and refuses a file
whose contents are not what its type claims, using the same helper as documents,
S3 uploads and assistant attachments. It runs before extraction, because an
extractor handed a malformed file is where the damage would happen.

The CMS screen said 100 MB and listed four of the ten accepted formats; it now
says what the server actually does.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Dv6sqaY6Vq3ChZHMem3cnU
2026-09-12 19:25:41 +02:00
..
logic docs: merge the duplicate pairs and correct them against the running app 2026-09-12 04:57:35 +02:00
ai-providers.md docs: merge the duplicate pairs and correct them against the running app 2026-09-12 04:57:35 +02:00
api-reference.md docs: merge the duplicate pairs and correct them against the running app 2026-09-12 04:57:35 +02:00
architecture.md docs: merge the duplicate pairs and correct them against the running app 2026-09-12 04:57:35 +02:00
authentication.md docs: accounts in the README, and the sign-in code path is verified end to end 2026-09-11 22:02:25 +02:00
clinical-assistant.md feat: a text-only model can ask a model that can see; and the image regex is gone 2026-09-12 15:43:36 +02:00
configuration.md docs: merge the duplicate pairs and correct them against the running app 2026-09-12 04:57:35 +02:00
database.md docs: merge the duplicate pairs and correct them against the running app 2026-09-12 04:57:35 +02:00
deployment.md docs: deploy.sh is the deploy path, and it was documented nowhere 2026-09-12 06:04:13 +02:00
developer-guide.md docs: deploy.sh is the deploy path, and it was documented nowhere 2026-09-12 06:04:13 +02:00
embeddings-setup.md simplify speech and embeddings through litellm 2026-05-09 05:09:02 +02:00
features-explained.md docs: merge the duplicate pairs and correct them against the running app 2026-09-12 04:57:35 +02:00
global-prompt-administration.md fix: reviewer findings — mhchem macro wrapping, regenerate history dedupe, strict safe image allowlist, stale docs 2026-09-08 19:25:31 +02:00
improvements.md docs: merge the duplicate pairs and correct them against the running app 2026-09-12 04:57:35 +02:00
learning-hub.md fix: article uploads are 10 MB, type-checked both ways, and sniffed 2026-09-12 19:25:41 +02:00
migrations.md docs: rewrite architecture, authentication, configuration, deployment, ai-providers, speech, database, learning-hub, migrations, developer-guide for public audience 2026-04-15 00:26:38 +02:00
mobile-build.md ci: route Android APK through Forgejo releases 2026-05-11 04:21:15 +02:00
module-conventions.md docs: merge the duplicate pairs and correct them against the running app 2026-09-12 04:57:35 +02:00
my-resources.md fix: the last run's illustration no longer sits under an empty form 2026-09-12 17:43:19 +02:00
openid-setup.md feat: ED multi-stage UX, extensions polish, docs viewer + application-logic docs 2026-04-28 03:09:38 +02:00
ops-docs-ped-ai-and-milvus.md docs: Ops Docs page on how Ped-AI and the two Milvus servers work 2026-09-10 18:37:41 +02:00
retrieval-tuning.md docs: My Resources, sign-in codes, invitations, and what the image carries 2026-09-11 20:49:10 +02:00
scaling.md docs: merge the duplicate pairs and correct them against the running app 2026-09-12 04:57:35 +02:00
speech.md docs: merge the duplicate pairs and correct them against the running app 2026-09-12 04:57:35 +02:00