databricks-tellr-app 0.4.3.dev1__tar.gz → 0.4.3.dev3__tar.gz

{databricks_tellr_app-0.4.3.dev1 → databricks_tellr_app-0.4.3.dev3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: databricks-tellr-app
-Version: 0.4.3.dev1
+Version: 0.4.3.dev3
 Summary: Tellr application package for Databricks Apps
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown

{databricks_tellr_app-0.4.3.dev1 → databricks_tellr_app-0.4.3.dev3}/databricks_tellr_app.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: databricks-tellr-app
-Version: 0.4.3.dev1
+Version: 0.4.3.dev3
 Summary: Tellr application package for Databricks Apps
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown

{databricks_tellr_app-0.4.3.dev1 → databricks_tellr_app-0.4.3.dev3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "databricks-tellr-app"
-version = "0.4.3.dev1"
+version = "0.4.3.dev3"
 description = "Tellr application package for Databricks Apps"
 readme = "README.md"
 requires-python = ">=3.10"

{databricks_tellr_app-0.4.3.dev1 → databricks_tellr_app-0.4.3.dev3}/src/api/routes/chat.py

@@ -384,7 +384,7 @@ async def send_message(
         logger.error(f"Chat request failed: {e}", exc_info=True)
         raise HTTPException(
             status_code=500,
-            detail=f"Failed to process message: {str(e)}",
+            detail="Failed to process message",
         ) from e
     finally:
         await asyncio.to_thread(
@@ -662,7 +662,7 @@ async def submit_chat_async(
             session_manager.release_session_lock, request.session_id
         )
         logger.error(f"Failed to submit async chat: {e}")
-        raise HTTPException(status_code=500, detail=str(e))
+        raise HTTPException(status_code=500, detail="Internal server error")
 
 
 @router.get("/chat/poll/{request_id}")

{databricks_tellr_app-0.4.3.dev1 → databricks_tellr_app-0.4.3.dev3}/src/api/routes/export.py

@@ -754,13 +754,13 @@ async def export_to_pptx(request: ExportPPTXRequest):
                     temp_dir.rmdir()
             except Exception:
                 pass
-            raise HTTPException(status_code=500, detail=f"Export failed: {str(e)}")
+            raise HTTPException(status_code=500, detail="Export failed")
         
     except HTTPException:
         raise
     except Exception as e:
         logger.error("PPTX export failed", exc_info=True, extra={"error": str(e)})
-        raise HTTPException(status_code=500, detail=f"Export failed: {str(e)}")
+        raise HTTPException(status_code=500, detail="Export failed")
 
 
 # =============================================================================
@@ -893,7 +893,7 @@ async def start_pptx_export_async(request: ExportPPTXRequest):
     except Exception as e:
         total_time = time.time() - start_time
         logger.error(f"Failed to start async export after {total_time:.2f}s: {e}", exc_info=True)
-        raise HTTPException(status_code=500, detail=str(e))
+        raise HTTPException(status_code=500, detail="Failed to start export")
 
 
 @router.get("/pptx/poll/{job_id}", response_model=ExportJobResponse)
@@ -1038,7 +1038,7 @@ async def export_pptx_editable_from_records(request: ExportPPTXFromRecordsReques
         pptx_bytes = build_pptx(title, request.slides, font_mode=font_mode)
     except Exception as e:
         logger.exception(f"Editable PPTX emission failed: {e}")
-        raise HTTPException(status_code=500, detail=str(e))
+        raise HTTPException(status_code=500, detail="Editable PPTX export failed")
 
     safe = "".join(c if c.isalnum() or c in "-_" else "_" for c in title).strip("_") or "slides"
     from fastapi.responses import Response

{databricks_tellr_app-0.4.3.dev1 → databricks_tellr_app-0.4.3.dev3}/src/api/routes/google_slides.py

@@ -198,17 +198,19 @@ async def auth_callback(
             "Google Slides OAuth callback successful",
             extra={"user": _get_user_identity()},
         )
-    except Exception as exc:
+    except Exception:
+        # F-CR-2 (SDR-4437): never reflect the raw exception into the HTML page —
+        # it is logged server-side above. Show a static, generic failure message.
         logger.error("OAuth callback failed", exc_info=True)
         return HTMLResponse(
-            content=f"""
+            content="""
             <html><body>
                 <h2>Authorization Failed</h2>
-                <p>{exc}</p>
+                <p>Authorization could not be completed. Please close this window and try again.</p>
                 <script>
-                    if (window.opener) {{
-                        window.opener.postMessage({{ type: 'google-slides-auth', success: false }}, '*');
-                    }}
+                    if (window.opener) {
+                        window.opener.postMessage({ type: 'google-slides-auth', success: false }, '*');
+                    }
                     setTimeout(() => window.close(), 3000);
                 </script>
             </body></html>
@@ -284,7 +286,7 @@ async def start_google_slides_export(
         slide_deck = chat_service.get_slides(request_body.session_id)
     except Exception as exc:
         logger.error("Failed to fetch slides", exc_info=True)
-        raise HTTPException(status_code=500, detail=f"Failed to fetch slides: {exc}") from exc
+        raise HTTPException(status_code=500, detail="Failed to fetch slides") from exc
 
     if not slide_deck or not slide_deck.get("slides"):
         raise HTTPException(status_code=404, detail="No slides available")
@@ -448,7 +450,7 @@ async def export_google_slides_from_records(
             )
     except Exception as exc:
         logger.error("Drive upload failed", exc_info=True)
-        raise HTTPException(status_code=502, detail=f"Drive upload failed: {exc}") from exc
+        raise HTTPException(status_code=502, detail="Drive upload failed") from exc
 
     session_manager.set_google_slides_info(
         session_id=request.session_id,
@@ -598,7 +600,7 @@ async def export_google_slides_from_huashu(
         logger.error("Drive upload failed (huashu path)", exc_info=True)
         raise HTTPException(
             status_code=502,
-            detail=f"Drive upload failed: {exc}",
+            detail="Drive upload failed",
         ) from exc
 
     session_manager.set_google_slides_info(

{databricks_tellr_app-0.4.3.dev1 → databricks_tellr_app-0.4.3.dev3}/src/api/routes/images.py

@@ -1,5 +1,4 @@
 """Image upload and management API endpoints."""
-import base64
 import logging
 import os
 from typing import List, Optional
@@ -21,7 +20,7 @@ router = APIRouter(prefix="/api/images", tags=["images"])
 
 class ImageResponse(BaseModel):
     """Response schema for image metadata."""
-    id: str  # Opaque token (SDR-4437 F-TM-7) — the internal int PK is never exposed.
+    id: int
     filename: str
     original_filename: str
     mime_type: str
@@ -47,7 +46,7 @@ class ImageListResponse(BaseModel):
 
 class ImageDataResponse(BaseModel):
     """Response containing image base64 data."""
-    id: str  # Opaque token (SDR-4437 F-TM-7).
+    id: int
     mime_type: str
     base64_data: str
     data_uri: str  # Ready-to-use: "data:image/png;base64,..."
@@ -81,7 +80,7 @@ def _get_current_user() -> str:
 
 def _image_to_response(img: ImageAsset) -> ImageResponse:
     return ImageResponse(
-        id=img.token,  # Expose the opaque token, never the enumerable int PK.
+        id=img.id,
         filename=img.filename,
         original_filename=img.original_filename,
         mime_type=img.mime_type,
@@ -168,75 +167,58 @@ def list_images(
         )
 
 
-def _deny_ephemeral_cross_user(image: ImageAsset) -> None:
-    """Defense-in-depth (SDR-4437 F-TM-7): chat-pasted ("ephemeral") images are
-    private to their uploader. Library images stay open-read. Raise 404 (not 403)
-    so a wrong caller cannot even confirm the image exists.
-    """
-    if image.category == "ephemeral" and image.uploaded_by != _get_current_user():
-        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Image not found")
-
-
-@router.get("/{token}", response_model=ImageResponse)
-def get_image(token: str, db: Session = Depends(get_db)):
-    """Get image metadata by opaque token."""
+@router.get("/{image_id}", response_model=ImageResponse)
+def get_image(image_id: int, db: Session = Depends(get_db)):
+    """Get image metadata by ID."""
     try:
         image = db.query(ImageAsset).filter(
-            ImageAsset.token == token,
+            ImageAsset.id == image_id,
             ImageAsset.is_active == True,
         ).first()
         if not image:
             raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Image not found")
-        _deny_ephemeral_cross_user(image)
         return _image_to_response(image)
     except HTTPException:
         raise
     except Exception as e:
-        logger.error(f"Error getting image: {e}", exc_info=True)
+        logger.error(f"Error getting image {image_id}: {e}", exc_info=True)
         raise HTTPException(
             status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
             detail="Failed to get image",
         )
 
 
-@router.get("/{token}/data", response_model=ImageDataResponse)
-def get_image_data(token: str, db: Session = Depends(get_db)):
-    """Get full image as base64 data (for embedding in slides), keyed by token."""
+@router.get("/{image_id}/data", response_model=ImageDataResponse)
+def get_image_data(image_id: int, db: Session = Depends(get_db)):
+    """Get full image as base64 data (for embedding in slides)."""
     try:
-        image = db.query(ImageAsset).filter(
-            ImageAsset.token == token,
-            ImageAsset.is_active == True,
-        ).first()
-        if not image:
-            raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Image not found")
-        _deny_ephemeral_cross_user(image)
-        b64_data = base64.b64encode(image.image_data).decode("utf-8")
+        b64_data, mime_type = image_service.get_image_base64(db, image_id)
         return ImageDataResponse(
-            id=image.token,
-            mime_type=image.mime_type,
+            id=image_id,
+            mime_type=mime_type,
             base64_data=b64_data,
-            data_uri=f"data:{image.mime_type};base64,{b64_data}",
+            data_uri=f"data:{mime_type};base64,{b64_data}",
         )
-    except HTTPException:
-        raise
+    except ValueError as e:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail=str(e))
     except Exception as e:
-        logger.error(f"Error getting image data: {e}", exc_info=True)
+        logger.error(f"Error getting image data {image_id}: {e}", exc_info=True)
         raise HTTPException(
             status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
             detail="Failed to get image data",
         )
 
 
-@router.put("/{token}", response_model=ImageResponse)
+@router.put("/{image_id}", response_model=ImageResponse)
 def update_image(
-    token: str,
+    image_id: int,
     request: ImageUpdateRequest,
     db: Session = Depends(get_db),
 ):
     """Update image metadata (tags, description, category)."""
     try:
         image = db.query(ImageAsset).filter(
-            ImageAsset.token == token,
+            ImageAsset.id == image_id,
             ImageAsset.is_active == True,
         ).first()
         if not image:
@@ -264,20 +246,20 @@ def update_image(
         raise
     except Exception as e:
         db.rollback()
-        logger.error(f"Error updating image: {e}", exc_info=True)
+        logger.error(f"Error updating image {image_id}: {e}", exc_info=True)
         raise HTTPException(
             status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
             detail="Failed to update image",
         )
 
 
-@router.delete("/{token}", status_code=status.HTTP_204_NO_CONTENT)
-def delete_image(token: str, db: Session = Depends(get_db)):
+@router.delete("/{image_id}", status_code=status.HTTP_204_NO_CONTENT)
+def delete_image(image_id: int, db: Session = Depends(get_db)):
     """Soft-delete an image."""
     try:
         user = _get_current_user()
         image = db.query(ImageAsset).filter(
-            ImageAsset.token == token,
+            ImageAsset.id == image_id,
             ImageAsset.is_active == True,  # noqa: E712
         ).first()
         if not image:
@@ -288,14 +270,14 @@ def delete_image(token: str, db: Session = Depends(get_db)):
                 status_code=status.HTTP_403_FORBIDDEN,
                 detail="You don't have permission to modify this image",
             )
-        image_service.delete_image(db, token, user)
+        image_service.delete_image(db, image_id, user)
     except HTTPException:
         raise
     except ValueError as e:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail=str(e))
     except Exception as e:
         db.rollback()
-        logger.error(f"Error deleting image: {e}", exc_info=True)
+        logger.error(f"Error deleting image {image_id}: {e}", exc_info=True)
         raise HTTPException(
             status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
             detail="Failed to delete image",

{databricks_tellr_app-0.4.3.dev1 → databricks_tellr_app-0.4.3.dev3}/src/api/routes/sessions.py

@@ -553,7 +553,7 @@ async def duplicate_session(
         logger.error(f"Failed to duplicate session: {e}", exc_info=True)
         raise HTTPException(
             status_code=500,
-            detail=f"Failed to duplicate session: {str(e)}",
+            detail="Failed to duplicate session",
         ) from e
 
 

{databricks_tellr_app-0.4.3.dev1 → databricks_tellr_app-0.4.3.dev3}/src/api/routes/settings/identities.py

@@ -109,7 +109,7 @@ def list_users(
         logger.error(f"Failed to list users: {e}", exc_info=True)
         raise HTTPException(
             status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
-            detail=f"Failed to list users: {e}",
+            detail="Failed to list users",
         )
 
 
@@ -149,7 +149,7 @@ def list_groups(
         logger.error(f"Failed to list groups: {e}", exc_info=True)
         raise HTTPException(
             status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
-            detail=f"Failed to list groups: {e}",
+            detail="Failed to list groups",
         )
 
 
@@ -203,5 +203,5 @@ def search_identities(
         logger.error(f"Failed to search identities: {e}", exc_info=True)
         raise HTTPException(
             status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
-            detail=f"Failed to search identities: {e}",
+            detail="Failed to search identities",
         )

{databricks_tellr_app-0.4.3.dev1 → databricks_tellr_app-0.4.3.dev3}/src/api/routes/setup.py

@@ -123,7 +123,7 @@ async def configure_workspace(request: ConfigureWorkspaceRequest):
         logger.error(f"Failed to configure workspace: {e}")
         raise HTTPException(
             status_code=500,
-            detail=f"Failed to save configuration: {str(e)}"
+            detail="Failed to save configuration"
         )
 
 
@@ -154,5 +154,5 @@ async def test_connection():
         logger.error(f"Connection test failed: {e}")
         raise HTTPException(
             status_code=400,
-            detail=f"Connection failed: {str(e)}"
+            detail="Connection failed"
         )

{databricks_tellr_app-0.4.3.dev1 → databricks_tellr_app-0.4.3.dev3}/src/api/routes/slides.py

@@ -105,7 +105,7 @@ async def get_slides(
         raise
     except Exception as e:
         logger.error(f"Failed to get slides: {e}", exc_info=True)
-        raise HTTPException(status_code=500, detail=str(e))
+        raise HTTPException(status_code=500, detail="Internal server error")
 
 
 @router.put("/reorder")
@@ -167,7 +167,7 @@ async def reorder_slides(request: ReorderRequest, db: Session = Depends(get_db))
         raise HTTPException(status_code=400, detail=str(e))
     except Exception as e:
         logger.error(f"Failed to reorder slides: {e}", exc_info=True)
-        raise HTTPException(status_code=500, detail=str(e))
+        raise HTTPException(status_code=500, detail="Internal server error")
     finally:
         await asyncio.to_thread(
             session_manager.release_session_lock,
@@ -235,7 +235,7 @@ async def update_slide(index: int, request: UpdateSlideRequest, db: Session = De
         raise HTTPException(status_code=400, detail=str(e))
     except Exception as e:
         logger.error(f"Failed to update slide: {e}", exc_info=True)
-        raise HTTPException(status_code=500, detail=str(e))
+        raise HTTPException(status_code=500, detail="Internal server error")
     finally:
         await asyncio.to_thread(
             session_manager.release_session_lock,
@@ -303,7 +303,7 @@ async def duplicate_slide(index: int, request: SlideActionRequest, db: Session =
         raise HTTPException(status_code=400, detail=str(e))
     except Exception as e:
         logger.error(f"Failed to duplicate slide: {e}", exc_info=True)
-        raise HTTPException(status_code=500, detail=str(e))
+        raise HTTPException(status_code=500, detail="Internal server error")
     finally:
         await asyncio.to_thread(
             session_manager.release_session_lock,
@@ -377,7 +377,7 @@ async def delete_slide(
         raise HTTPException(status_code=400, detail=str(e))
     except Exception as e:
         logger.error(f"Failed to delete slide: {e}", exc_info=True)
-        raise HTTPException(status_code=500, detail=str(e))
+        raise HTTPException(status_code=500, detail="Internal server error")
     finally:
         await asyncio.to_thread(
             session_manager.release_session_lock,
@@ -476,7 +476,7 @@ async def update_slide_verification(index: int, request: UpdateVerificationReque
         raise
     except Exception as e:
         logger.error(f"Failed to update slide verification: {e}", exc_info=True)
-        raise HTTPException(status_code=500, detail=str(e))
+        raise HTTPException(status_code=500, detail="Internal server error")
 
 
 # ============================================================================
@@ -546,7 +546,7 @@ async def create_version(request: CreateVersionRequest):
         raise HTTPException(status_code=400, detail=str(e))
     except Exception as e:
         logger.error(f"Failed to create version: {e}", exc_info=True)
-        raise HTTPException(status_code=500, detail=str(e))
+        raise HTTPException(status_code=500, detail="Internal server error")
 
 
 @router.patch("/versions/{version_number}/verification")
@@ -595,7 +595,7 @@ async def update_version_verification(
         raise HTTPException(status_code=400, detail=str(e))
     except Exception as e:
         logger.error(f"Failed to update version verification: {e}", exc_info=True)
-        raise HTTPException(status_code=500, detail=str(e))
+        raise HTTPException(status_code=500, detail="Internal server error")
 
 
 class SyncVerificationRequest(BaseModel):
@@ -663,7 +663,7 @@ async def sync_latest_version_verification(request: SyncVerificationRequest):
 
     except Exception as e:
         logger.error(f"Failed to sync version verification: {e}", exc_info=True)
-        raise HTTPException(status_code=500, detail=str(e))
+        raise HTTPException(status_code=500, detail="Internal server error")
 
 
 @router.get("/versions")
@@ -701,7 +701,7 @@ async def list_versions(session_id: str = Query(..., description="Session ID")):
         return {"versions": [], "current_version": None}
     except Exception as e:
         logger.error(f"Failed to list versions: {e}", exc_info=True)
-        raise HTTPException(status_code=500, detail=str(e))
+        raise HTTPException(status_code=500, detail="Internal server error")
 
 
 # NOTE: must be registered BEFORE the parameterized "/versions/{version_number}"
@@ -738,7 +738,7 @@ async def get_current_version(session_id: str = Query(..., description="Session
         return {"current_version": None}
     except Exception as e:
         logger.error(f"Failed to get current version: {e}", exc_info=True)
-        raise HTTPException(status_code=500, detail=str(e))
+        raise HTTPException(status_code=500, detail="Internal server error")
 
 
 @router.get("/versions/{version_number}")
@@ -789,7 +789,7 @@ async def preview_version(
         raise
     except Exception as e:
         logger.error(f"Failed to preview version: {e}", exc_info=True)
-        raise HTTPException(status_code=500, detail=str(e))
+        raise HTTPException(status_code=500, detail="Internal server error")
 
 
 @router.post("/versions/{version_number}/restore")
@@ -859,7 +859,7 @@ async def restore_version(version_number: int, request: RestoreVersionRequest):
         raise HTTPException(status_code=400, detail=str(e))
     except Exception as e:
         logger.error(f"Failed to restore version: {e}", exc_info=True)
-        raise HTTPException(status_code=500, detail=str(e))
+        raise HTTPException(status_code=500, detail="Internal server error")
     finally:
         await asyncio.to_thread(
             session_manager.release_session_lock,

{databricks_tellr_app-0.4.3.dev1 → databricks_tellr_app-0.4.3.dev3}/src/api/routes/verification.py

@@ -291,7 +291,7 @@ async def verify_slide(slide_index: int, request: VerifySlideRequest):
         logger.error(f"Verification failed: {e}", exc_info=True)
         raise HTTPException(
             status_code=500,
-            detail=f"Verification failed: {str(e)}",
+            detail="Verification failed",
         )
 
 
@@ -413,7 +413,7 @@ async def submit_feedback(slide_index: int, request: FeedbackRequest):
         logger.error(f"Failed to submit feedback: {e}", exc_info=True)
         raise HTTPException(
             status_code=500,
-            detail=f"Failed to submit feedback: {str(e)}",
+            detail="Failed to submit feedback",
         )
 
 
@@ -541,6 +541,6 @@ async def get_genie_link(
         logger.error(f"Failed to get Genie link: {e}", exc_info=True)
         raise HTTPException(
             status_code=500,
-            detail=f"Failed to get Genie link: {str(e)}",
+            detail="Failed to get Genie link",
         )
 

{databricks_tellr_app-0.4.3.dev1 → databricks_tellr_app-0.4.3.dev3}/src/api/schemas/requests.py

@@ -74,9 +74,9 @@ class ChatRequest(BaseModel):
         default=None,
         description="Optional context containing the slides to edit",
     )
-    image_ids: Optional[list[str]] = Field(
+    image_ids: Optional[list[int]] = Field(
         default=None,
-        description="Opaque tokens of images attached to this message (SDR-4437 F-TM-7)",
+        description="IDs of images attached to this message (from upload or paste)",
     )
     agent_config: Optional[dict] = Field(
         default=None,

{databricks_tellr_app-0.4.3.dev1 → databricks_tellr_app-0.4.3.dev3}/src/api/services/chat_service.py

@@ -345,7 +345,7 @@ class ChatService:
         session_id: str,
         message: str,
         slide_context: Optional[Dict[str, Any]] = None,
-        image_ids: Optional[List[str]] = None,
+        image_ids: Optional[List[int]] = None,
     ) -> Dict[str, Any]:
         """Send a message to the agent and get response.
 
@@ -828,7 +828,7 @@ class ChatService:
         message: str,
         slide_context: Optional[Dict[str, Any]] = None,
         request_id: Optional[str] = None,
-        image_ids: Optional[List[str]] = None,
+        image_ids: Optional[List[int]] = None,
         is_first_message_override: Optional[bool] = None,
     ) -> Generator[StreamEvent, None, None]:
         """Send a message and yield streaming events.
@@ -1993,30 +1993,27 @@ class ChatService:
         
         return ([], None)
 
-    def _inject_image_context(self, message: str, image_ids: List[str]) -> str:
-        """Append image metadata to user message so the agent knows about attached images.
-
-        ``image_ids`` are opaque image tokens (SDR-4437 F-TM-7), not int PKs.
-        """
+    def _inject_image_context(self, message: str, image_ids: List[int]) -> str:
+        """Append image metadata to user message so the agent knows about attached images."""
         from src.core.database import get_db_session
         from src.services import image_service
 
         image_descriptions = []
         with get_db_session() as db:
-            for img_token in image_ids:
+            for img_id in image_ids:
                 try:
                     img = db.query(image_service.ImageAsset).filter(
-                        image_service.ImageAsset.token == img_token,
+                        image_service.ImageAsset.id == img_id,
                         image_service.ImageAsset.is_active == True,
                     ).first()
                     if img:
                         image_descriptions.append(
-                            f'- Image ID {img.token}: "{img.original_filename}" '
+                            f'- Image ID {img.id}: "{img.original_filename}" '
                             f'({img.description or "no description"}). '
-                            f'Use: <img src="{{{{image:{img.token}}}}}" alt="{img.description or img.original_filename}" />'
+                            f'Use: <img src="{{{{image:{img.id}}}}}" alt="{img.description or img.original_filename}" />'
                         )
                 except Exception as e:
-                    logger.warning(f"Failed to load image {img_token} for context injection: {e}")
+                    logger.warning(f"Failed to load image {img_id} for context injection: {e}")
 
         if not image_descriptions:
             return message

{databricks_tellr_app-0.4.3.dev1 → databricks_tellr_app-0.4.3.dev3}/src/core/database.py

@@ -524,8 +524,6 @@ def _run_migrations(engine, schema: str | None = None):
         # --- image_assets.tags: json → jsonb (PostgreSQL) for native @> queries ---
         _migrate_image_assets_tags_json_to_jsonb(conn, schema, _qual, is_sqlite)
 
-        # --- image_assets.token: unguessable external id + backfill (SDR-4437 F-TM-7) ---
-        _migrate_image_assets_add_token(conn, inspector, schema, _qual, is_sqlite)
         # --- agent_config: style precedence in the DB, for the raw-SQL writers no
         # --- Python-side bind hook can see (PostgreSQL only; no-op on SQLite) ---
         _migrate_agent_config_precedence_trigger(
@@ -1060,44 +1058,6 @@ def _ensure_llm_judge_backend_default(
         )
 
 
-def _migrate_image_assets_add_token(conn, inspector, schema, _qual, is_sqlite) -> None:
-    """Add the unguessable ``token`` column to image_assets and backfill (SDR-4437 F-TM-7).
-
-    The int PK is enumerable, so image reads now key on an opaque token. Fresh
-    installs get the column via create_all(); existing tables need this ALTER +
-    per-row backfill. Idempotent: gated on the column's absence.
-    """
-    import secrets
-
-    from sqlalchemy import text
-
-    table = "image_assets"
-    try:
-        cols = {c["name"] for c in inspector.get_columns(table, schema=schema)}
-    except Exception:
-        return
-    if not cols or "token" in cols:
-        return
-
-    q = _qual(table)
-    logger.info(f"Migration: adding token column to {table} (SDR-4437 F-TM-7)")
-    # Add nullable first so the ALTER succeeds on a populated table.
-    conn.execute(text(f"ALTER TABLE {q} ADD COLUMN token VARCHAR(64)"))
-
-    # Backfill every existing row with a distinct unguessable token.
-    row_ids = [r[0] for r in conn.execute(text(f"SELECT id FROM {q} WHERE token IS NULL")).fetchall()]
-    for row_id in row_ids:
-        conn.execute(
-            text(f"UPDATE {q} SET token = :tok WHERE id = :id"),
-            {"tok": secrets.token_urlsafe(32), "id": row_id},
-        )
-
-    # Enforce uniqueness (and non-null on PostgreSQL, now that every row has a token).
-    conn.execute(text(
-        f"CREATE UNIQUE INDEX IF NOT EXISTS ix_image_assets_token ON {q} (token)"
-    ))
-    if not is_sqlite:
-        conn.execute(text(f"ALTER TABLE {q} ALTER COLUMN token SET NOT NULL"))
 #: The one place the precedence rule is written in SQL. ``$$``-quoted so the body
 #: needs no escaping, and named after the rule rather than the tables, since both
 #: ``agent_config`` columns share it.

{databricks_tellr_app-0.4.3.dev1 → databricks_tellr_app-0.4.3.dev3}/src/database/models/image.py

@@ -1,5 +1,4 @@
 """Image asset model — metadata and binary data stored together in Lakebase."""
-import secrets
 from datetime import datetime
 
 from sqlalchemy import Boolean, Column, DateTime, Integer, JSON, LargeBinary, String, Text
@@ -11,17 +10,6 @@ from src.core.database import Base
 _TagsColumn = JSON().with_variant(JSONB(), "postgresql")
 
 
-def _new_image_token() -> str:
-    """Unguessable external identifier (SDR-4437 F-TM-7).
-
-    The autoincrement int PK is enumerable, so it is never exposed. This
-    opaque token is the only identifier that leaves the server — it is what
-    the API returns, what chat sends in ``image_ids``, and what goes in
-    ``{{image:...}}`` slide placeholders.
-    """
-    return secrets.token_urlsafe(32)
-
-
 class ImageAsset(Base):
     """Uploaded image with binary data stored directly in PostgreSQL.
 
@@ -32,9 +20,7 @@ class ImageAsset(Base):
 
     __tablename__ = "image_assets"
 
-    id = Column(Integer, primary_key=True)  # Internal only — never serialized.
-    # Unguessable external identifier (SDR-4437 F-TM-7). token_urlsafe(32) → 43 chars.
-    token = Column(String(64), unique=True, nullable=False, index=True, default=_new_image_token)
+    id = Column(Integer, primary_key=True)
     filename = Column(String(255), nullable=False)           # Generated: {uuid}.{ext}
     original_filename = Column(String(255), nullable=False)  # User's original filename
     mime_type = Column(String(50), nullable=False)           # image/png, image/jpeg, image/gif, image/svg+xml