From 83e39824ce0dc544350acbaba1455cba4caeff57 Mon Sep 17 00:00:00 2001
From: Jannik Reinhard <jannik.reinhard@epicfusion.com>
Date: Sun, 26 Jul 2026 16:28:33 +0200
Subject: [PATCH 1/2] fix runtime setup and proxy handling

---
 .github/workflows/ci.yml                      |  38 +++++++++++++++++
 Dockerfile                                    |   5 ++-
 app/__init__.py                               |   2 +-
 app/__pycache__/__init__.cpython-314.pyc      | Bin 0 -> 1086 bytes
 app/__pycache__/config.cpython-314.pyc        | Bin 0 -> 11710 bytes
 app/config.py                                 |  39 +++++++++--------
 app/database.py                               |   7 +--
 app/main.py                                   |  10 ++---
 .../__pycache__/__init__.cpython-314.pyc      | Bin 0 -> 225 bytes
 .../rate_limit_middleware.cpython-314.pyc     | Bin 0 -> 11744 bytes
 app/middleware/rate_limit_middleware.py       |  36 +++++++++-------
 frontend/login.html                           |   7 ++-
 setup.ps1                                     |  37 +++++++++-------
 supervisord.conf                              |   4 +-
 ...configuration.cpython-314-pytest-9.1.1.pyc | Bin 0 -> 6774 bytes
 tests/test_runtime_configuration.py           |  40 ++++++++++++++++++
 16 files changed, 162 insertions(+), 63 deletions(-)
 create mode 100644 .github/workflows/ci.yml
 create mode 100644 app/__pycache__/__init__.cpython-314.pyc
 create mode 100644 app/__pycache__/config.cpython-314.pyc
 create mode 100644 app/middleware/__pycache__/__init__.cpython-314.pyc
 create mode 100644 app/middleware/__pycache__/rate_limit_middleware.cpython-314.pyc
 create mode 100644 tests/__pycache__/test_runtime_configuration.cpython-314-pytest-9.1.1.pyc
 create mode 100644 tests/test_runtime_configuration.py

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 0000000..cbf75af
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,38 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v7
+        with:
+          python-version: "3.12"
+          cache: pip
+      - name: Install test dependencies
+        run: pip install fastapi pydantic-settings sqlalchemy loguru pytest
+      - name: Run regression tests
+        run: python -m pytest tests -q
+      - name: Parse PowerShell scripts
+        shell: pwsh
+        run: |
+          $errors = @()
+          Get-ChildItem -Recurse -Include *.ps1,*.psm1 | ForEach-Object {
+            $tokens = $null
+            $parseErrors = $null
+            [System.Management.Automation.Language.Parser]::ParseFile($_.FullName, [ref]$tokens, [ref]$parseErrors) > $null
+            $errors += $parseErrors
+          }
+          if ($errors.Count -gt 0) {
+            $errors | Format-List
+            exit 1
+          }
diff --git a/Dockerfile b/Dockerfile
index 7cdb018..4a99ae2 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -90,7 +90,8 @@ ENV PYTHONUNBUFFERED=1 \
     # Application settings (should be overridden in production)
     DATABASE_URL=sqlite:///./data/documents.db \
     SECRET_KEY=MUST-BE-SET-IN-PRODUCTION \
-    AI_PROVIDER=openai
+    AI_PROVIDER=openai \
+    TRUSTED_PROXY_IPS=127.0.0.1
 
 # Add metadata labels
 LABEL maintainer="Document Manager Team" \
@@ -106,4 +107,4 @@ HEALTHCHECK --interval=30s --timeout=10s --start-period=40s --retries=3 \
     CMD curl -f http://localhost:8000/api/health || exit 1
 
 # Use entrypoint script for initialization
-ENTRYPOINT ["/app/docker-entrypoint.sh"]
\ No newline at end of file
+ENTRYPOINT ["/app/docker-entrypoint.sh"]
diff --git a/app/__init__.py b/app/__init__.py
index 2ddc165..37b1d2d 100644
--- a/app/__init__.py
+++ b/app/__init__.py
@@ -4,7 +4,7 @@
 
 # Configure loguru to write logs to the logs directory
 log_dir = Path(__file__).parent.parent / "data" / "logs"
-log_dir.mkdir(exist_ok=True)
+log_dir.mkdir(parents=True, exist_ok=True)
 
 # Remove default logger
 logger.remove()
diff --git a/app/__pycache__/__init__.cpython-314.pyc b/app/__pycache__/__init__.cpython-314.pyc
new file mode 100644
index 0000000000000000000000000000000000000000..94873b988acf3c23598d4d4d15d13711ac59d219
GIT binary patch
literal 1086
zcmZ`%%}*0S6rb&Gx9!%Jf`FKqv;+gGx?My<4Ivy56%HU-z{CXH4Bde)>_;=ZB~T=(
zXrhT14jw#m)SLebiG(_diHY&x4MU7q-)t#z(6`w)zxOro?fdP`bV@-WR?q7C*9b!2
zxY3ft892QzAXG<BkuFT5DIpND97m=jQ(_=y(X!BsmZf3H;W8KA*TgOTFP|>nO19z%
z>C#0jkeB7Tw!hI9(xdRmMVONdbQb3_O?*-JqTw?$%;>lnYvNv{$F3kft|xS*C^min
z&s~=F<i+Wr?vkF;(|VhpDax&Cy}b|RJAQC8FED8i2W2>A+gn>Blu0HIFq6RY7xEDn
zt6)mpz-Mu?W%+^OZIsT|7hV?y&Br>u2C9yh&SQ^}4kWY|01YFIcN2+g!V#@d%MG~g
z_-j5d>Sw;T=o9K|>)3UzjRGZ>TgKGXCcRSC;Uj4GJd<o`LxV#j>R?eF8qwBBnW&KG
zU|U@wRK>PUR0kYHUB}zBjL(Z_u#4gAG+e1@hGDr@U>JqUHj9th*jX|0IOQa!;q^J!
zb@X=e-JOGpqppEdFj4K%PGC7?^a+SMGowyU=BB1b9cR?{3-j~yySZn%9h+<tJ47ya
z$nNOQYSk?TmgfSrVWi!hn%i-R@53OwOq!m3@F*`b$+z4MCa-$b!2yegm(&zk#3rEy
zAb~|E?@uf~tVM4R=4K{paxrJ(ZJ&uXtCE)~|6}N7t~x=nIQ0U|Te1Wt0ql&!WXW?X
z6#9ZOn^!oaLD{xeDCaGty-KT83hNDH)v}3UFu6%Pi@^wnX;Bt+Huxb^;&_{ciP$th
zAj<z~%C`oKbUd?alX2PyCTG-t0qR5)1mQdC`GT(glu@$n_12rhv64Mhvd2pQq0;}p
z`$*9~_8%#C>#+uky-Gb#?VAS+_0%VH<3vURc=l2++nP|>Q$8mK8p)-GlKB;rgvd#n
gXMnqr$n1|DC9+|xy^-o{q`MoLuHUJc5DAC;19~L>=Kufz

literal 0
HcmV?d00001

diff --git a/app/__pycache__/config.cpython-314.pyc b/app/__pycache__/config.cpython-314.pyc
new file mode 100644
index 0000000000000000000000000000000000000000..0de06ef9bbd6235e41f269bda2c4b3d4189f2239
GIT binary patch
literal 11710
zcmdryZFC#QaeKhwg9P{mkl+_cfCNdA5<!q6B}$a6Sd=X5lcJ9n+{C015IB;MKmgi1
zNFr;$;<;%nzov<tFUw7nQhjM7HSUY@k{?O`)NY#B=9hV*BCuEW)oI<A=YK?~KH2?I
zcV_Pn1Swihn)XkZkAt1r*}b{l*_qkd+f`XnPN2NfICJ59&4m0LB1W<3mGvA{a^yS_
zxD!OiU(*ThxJfo0H_K)p;^q_laf@s@Zk4SJ=TF#<+hx0t)R8tKSn7#joiYuXwejRK
zMzsOeK2=tvmJ6KZ5S&68(97#dvO3AhPQg)6<O+ccke-V7vHMt$Np+4!C2>NO<wR;$
zQe8&vNIEr>m_3?^$-rYjn~@XgR5YoY52qGxbE<7Zlq8_UG$Ax-(~<QrafC$S9jA!Q
z2}CxXx5;J?Ny8h<ykL?of?2i-ylfLJvK{`*056AshhPO6Z6Kjdt`zKYl~5*E3*~YR
zw7CR_>=vAItxzG?36-)(sFLf2YPmtEksAe<+%(lZzOPgmt=>k?`-eapEOHBs(<-=S
z-}zSAFVxCyLY>?$c;tXkFLwwHa;MNJcL`1M4ruQ_Z<2eacEWtu31*>LunFE_ULR*y
zm<)143(TrrXvMjed#8eo=3_KJ(uOo<BKPTSZLF<*Q(H)H3$V71O>O;pTPJJl+SE3n
zx9wnU-J9BWGf8@|MIID(%0poy?-9(f=DSq8vAT;b(xqfV7Dqy%P+uq>m7}3}I+mRm
zQ?k?-pH{8ujF^fh#uh!YcvTLH^V4EH4hj++3`+CSWOC6ln~{S<>EL`Kl~{D`?%zEW
z?B5sc9|&fscsU_nQHffXOvj?hxwIrF4*Lk;#V0IQ>d%zq=q!x7Xw~o%dYVRO#YKnC
zmrTz}i>^>sqM_+TDkOvQi8LCM7wra3wG8z4pBY_j&%|eXGpX6$3mN<uXM5$u%uMg}
ze5O~vD)-{ssFvdsyZ7u>9dYrpm`rEzrH?Hho|EMaOh-}Zk-`4{{@%x^`%0(-yNCPw
z;cs9Bsf!gwymw?|K;=)29Xp%I9U>%Ay@QbFdw8`n274_ci76=|CoYSsT})k$%p{Vc
zT8*{DY${E~h&Z2-7u0g3z--PWuEtP<buA{Sg}C?EI{+NyawJU7oA!N<kT_7i<T-AR
z6SxWPMX)P^Ib?!$=ifI0tLlmvs~?HP(kV6-Rw~L_ni}ijs1<l%t6OK%bUrGp6~L5?
zN>UswKqMmJ2<<ubQs^AaycD_+O{EeS`>2>m%|&TEbktCu(2;apycz<9*c<F04({F?
znic27An<|O1gAwB1nm)n^FR=T7orPvE?Vq-CYpjpr=e&j69NIj{PblORA(dt4@=8Y
zS&T%~I^!MsO3C9Oodh~YKFE<rgtwgL3Jl(Mud&}dwHm$-EF^~SVic^yyxG??P{|Pi
zW)lb7TK2>2$2)O;p}n-f&NyyZ_mYl=1rWG>#|iXH;i|DBz^dSXk6EqC&~!W-L+cuu
zhpAJ`Hwa^(G1W*+f{uvExCELbs}9hM1Wl(<ZB<J$eMO|S9fpOq<0UaULmL5M>($jo
zTcEC1X=7wyCq`hq%4$P#61TLlc^rg3IkILY&X%R4`HuZc$Nqbc{i}f;`M{tO7|aLu
zD}nthfdfB$NeP^~cJ#i}UoaEr2=zn1O`59DEm_BwCuwR3Jko6wZ2&gf1fYjg`D8)@
z&qKkB66yt@Yan|g+KN<M?-#J89spZ-&N2ZDkMK4uIR0)31w5?aLa_zE0TtXl+b#Ea
zajCRU2nAv|l4^2}%bNN~)^yBI$fcSmE&jOS6gLJUhGLAFPQk*JkyaQf15=PS`B*JM
zz{7IAu=+08EU>`w2$(H28tIgzTBHnEZupUDB15}iT$m=XFGMv1m$vYJZQ<)5?;gQ<
zRsBT;_!y2bj3<o%$dPwLgZa=gC3GwwI<16G|HH(+&~qzQf)aY}mihIv*UG-^$XB;1
z)ou5y13*)%gk`(%;oT}h!kPYN*I^sKNhxq<@qfJ^z>|~$Oc>XT+MpLy61ocz(3D>I
zQOz&|pR6G-0;_~tq-)3&(~v3d=Fn~PpYKO4nR=3zya_#jV=dYFNm_!-hh-LK#!F7Y
zTZg$PX%%P=Ou=@VL;GMDuq)13no5y0O@M!u=l~GuZfwz2#j3a97VXltrKYrtrYB8B
zJ$bC{Gtg5y001;3IFJt>Qi6x_!J|s>=vx!_f+tq0CY9icrM>S={&e!4^IxgFZhhVP
zn)7RwKvb$Gm+h0FB9rSFEq}BAa1H<0wE+H?^@I+?=%1`05qyyn1qm|+33Ipk+Y^6P
zh6)n?|EM4}GR;adm=^FiR~I6Q%r;tL0&1y-cpmGcsfn+sCfhTd$0^ozrL!mBc|hqr
zkncRKbRK>yaIf>&O4T`~^VkjgPWMl{-`V+<^6RG8?XTItRt`j^>fEyZ9O%k93USnL
z;9i*J0KZ~Rq<#gr5<`J&0WhOsv$PcmfSVKS=LtTg3&Mn7$66SkAj56H-#2`YVIkt+
z(Y<7{=vBfH><K(q^i6`Pw<HwVj0HZ%st9JovlXAx@jrjc)@PQ=YCH!*AB$=_Gdh+a
zJXmtmv!n0-*GC_H1Rk$qK6;f!#1Sd6D5{ohCL>aeljG8rggi%&!J-&O%#JJ(@B*8Z
z)V*nh$n*l77F2IhL$_(2#?^iq0GKj&ecs)vxI6RiU5b0xiaU7CzUpx29bU!Zz43hB
z(SFy_{=n_Ies#&b<huUyio5d`|1)>*E%|5e!DZ**YDHbXqE)GAy&>l-I__3<d>rqc
z_|M!U%g&MaaI7yswe0k7sFe}v<JM!Y(hrp<xyqtzgfJct!JlmO=7DQN!8wZ`?VSIO
z0Q=dH1h`m1i9izjI{M>}Q*emkI5<eaxeAVxk(qQdE>aK(bxOhk^k~%1n&Szo))W`T
zASIEvl0D<yDtErhr&Rft?Y<3xjHv;w(Wa&eCTaVr2@yO59WV(T#z=bIq}SO2sWiF(
zK642lUsAV})U8kGZ+k+Uy=08Cl6rYb-BD6^>U9&yRZ&8()a%>HUsb|aT~e<psk=(*
z?vi?KNxiP5?kTC)m(&~d`gU?Omhd&{b$pNJ61rEfn}Oa^LT@dp`%3D5y^iCwmDJly
z>VcAa2iC#Lbh1N*>O=*b#<O>pCRIl?fnM)&0u)rO)G{5BXeJT4C@!c~#astFk0sUe
z*j!ZB>y>aqO)f|YNylrWi&;3ZZyBO)6BSHXCJkOkZP-M{=Us-QG{p3(cT)>{UR=y1
z(+lj3*S@K>D4rB4;c>*~XnH;x!EB3aAel6kRgc~hOT)QaJ7=b%^P=jY>9nlxQngY~
z#OOGE9%c`TEDK{WIWP-jAeF@&Oe7PP=Tv7VoyjCc$}oBg`cn+>)pALUL5_h<ZRLe4
zG8|!xcv&<#3vsACH?KBFV=+kTMC9~EF$JfcOai7Aa!Xlw4DH0x+7XN(IE>>$a%nb_
z!~~970n3TW42VVM;b2q^sGi=?DK4N;@lsZV^RJwk7t>i;tppmn0+5X+M5%{ohLfW2
zWIjgar_<@=CmT|9#8L$qp%4Cmyh48Ns#Eykf`xEgp`0M%D>x9TCUq@uOnmi>!gm*H
zkl-SoMui_NxDlx(HMI&KDAXb1A$1K3zoSr(h?g`6ZVrAUsPKJ-79_M1Z^z9e-*`&l
zLj@la{KVI;@cRmFh_sVHm%{HX1Q6*UJ-rIwU+6?+CzGbVunUo1hBOy~i1d*bzrqI#
zAw-6VtLcrvS6dXmv#<vVdzmyl3&V))(_d*nA|ras0Ynb6mX5+xh>UWqsjqN^L-Z&|
z+#ZE*FFeE0lN_n7S9pKn6hlvQq|vMJqlGgJo#fbDgbGs(Jr6?_CoaNBpXErkTj9Nh
zC_|??(%z}?Jq0*Dz{BF4E{Vv{8IE|G6uzx6%g{MZlotyLhF;)EL$kv77A`V0qmA5L
zxWv%QnxL(PD-6BLk$N`N0z(%yx&4LTX6Q@WJ2(IGWki|70^f&9+p|}-M<TfAAbnLH
zLCcX%VjU7&m$K2M-cl8Tu!l-=5)xynbR<H53sv#c2=J&yUqmp8U<v_-)D({{^s@+}
z2&NHW=t|=VL<BPkW)a|?rgI1q2reMFh+t#0+O*9nsTJBj1Y;>hXGDr_nPSL5QwY)s
zw%L?4gAJDuPy`YJ83DR$)u|<$w9FpuMv@)OFvNHA0>wy}9z<{i!C3_70H`%3dA^x!
zDuy{g$VWmtFcFJHW!SybXe59PoW+b~OiU&t5m*5)jKQLhr?t!xo;WE2wsB!8apOYV
z*D#zr4Joe%f9@3gboS)NR+|TNXIDLe+{x9Z9l0@}?g}mQ4XX$nS3CAC^WN3&oy)v`
zwXc7f@50W3+^N<2W&rKMWxfe0?OlL0?S#SVeZ^V_dqi^xs15DxsZDLUGpntm%e-f;
zn$)-EJ-hCDcHJ6X@r2;v9o@iK=gpm1-O;nm`&R3r|EjkQWNUaacY3v@cbTt)M|pq)
zewutRl(%h}uU&2R!+@(z&AG9kyE{?5mercN)y9@pciqDZTdg&B`jHD$rCN$~%}K14
zk4%^}TQ@^>ja8wWMxENAPH{zQc!L@?sBloy2Y}j|OYiS54(fk&#td8JcM01hY%Ne{
ziv@KB%lb<Iq9n?d+#_Y!JrW#w;2y~l=HM2_g!dfm#>0#?cFzR|c4*-d$J;WvpRqEE
zl~LfP3@A26u`>$XkpaaHH%(<>PA(6V1Dx!D;K8X@AJyXqBT`)q88yEQVSzuHj>aXw
zrqWpoI+;%SXTTHtjeuiQP6OP;uO86f))JzsDLze6S)b^O)RwK1Zpx42PTUChZI&K9
z$o9N3%zoH9Y)Xow7j$5_j}`@^YqUFBnJ|aRXJLupV$3AKg<gmYn?^aF_~2~0L+6Rt
z>WOk3XG;ll#u?BDy&(+_|B$XKix@W{W495vNLhC7i?D<>Y;Jc1r#gaj8!_e<oHjm^
z{vH6;dhtq>!UblTZUw+bpeA*7_2#sl|A)xcxXm<SN*uVMS;7?A2RZW4O3Er<wcWKh
zDE8e;L(BHvxAxw(?|uX+@yb<ab>7*bI6Ibv`_696d{=4{h({Cr$MS0}H2oa(_~a#~
zzYlD<CpH$c+0s`a0B+8*pT`%{4(xDlbFSY9iQvu|cFqZMoXbF>dHaMz*kmlvlM>e%
zbJz??a6W4aVG<lJ94;Ll$7gLRVSXG<?UpiaItA%AOkQRz89r<ouh_x>D7phI)#TW_
zgj@mX>Fi_`BLR59I)pO}#ZWmtaSAsGlQmjPDObkcOeWn1J#3!@1=Y&dapHcK_`n+l
zR$j1%ZR2>MvZWaE3H*L&F>c*`<P<pUO;5rDGb@ih31o#tPRWxdF$u{^*k-Ik$;hz$
zn@08;+`q!ecn!qLwj+NZ(#^KwOftE`)^WUE*;0g}b`-f`O*X#;JOMNg3(Us5gq-?U
zZLRSJTEF1n6U0v@{m6r5vR(TnWYA<KaTkv0E18*3Tc0l(vxPjvopQpRDmh?oAqlR>
zve<kYOoLz2KVjHxe{XZl!$1h8AMnP&y6}*u6jg3OH7`Ku?^3NSGLbY+3mg>af@+4F
z5!H+*Ld)f764)(pT|O_Vwz;T;VTWp)6(I<LN_j$p9J?G%#YCEgS5YC1VlC`)h8{zb
zWd_WbOwVAwJdEQ#LundLpNEYIhT%PBB^Is1a5ZP}3J}sN(|G@<eWrnrz?xcNkRo_d
zOaB-iK)=qOg0e-J=u#OFy1M*Y(X8R;k*DKvYxua8WhSQ{EL)EJyL}J1{`$t(=U$t;
z@$!l%nD-1Qo`Dt5;5A3VN{(`8xs`^qZy)%f?N6KEXkMEA_WaHHyN!cyAGlVr+;A4U
zHh1Tnf=W~HepBexlh=+ssPbHw^Hpv4s@mRb=~#Mxr6qK|e9h#n>3dM$wzTujc)ot{
zZvEhc2Hz5YYtMHN+&=J~r<M<nE4#+;H$3;CF|c&<2j+a^(A~x%#`5Oit?YM3?l<h!
znk@Ooy>}b;YE66Y)P3jR{f2#D!@X^{%-?n1cHa3+zWeFB-A_O829}QA%HH?x0c+lK
zm|Jfq&HW$#(ncD`xep$8kjB8b#+K^`9}*7as%^e;bSay!4KCLP*UUiqPiYTK<zM=q
z;rO>dHTaCx^tVI10RFfQ;onu-5PCcagHC`yv9>(ZZTZO#4&bKPzzU<_##!$Luzg0$
zxYoy;F~JPb6vEFsc<tg8z2L_B_n0XfWbIUoV?Qx`V7}!I;F54Jf(Lv=DlBk?3gG7O
z8vc9_ZqniBN00)CAI;OCe>I9OzH_~uX-d)4@E_}Gc*DkR=V`!mZ0Ao*c#~f22O-MV
zV%X)3C2TQllx9&Ti(V#NOm~MZDVs6EnT{~uM#84;_yp6i?r&gRZoKGWjJ{w$ErwL=
zeT%+kgTs&v!XCD0i)|Cp%c4K(2jelD6b<v`m(#`Ak$wrf!@3nW^;l0ieI01bP|+Ju
zgU>Y*Ng2KXKpwC%c!Jc{oEZUgG#*#2vGhD7MtZCpwq;{T`YjyqF91lmgk4bl`h8%v
z1Oh@vrWkLjZI9WDtt?E3W?&%0Sh(w6?|!ZO##1Y<p1iAHarNJ6$q$Sw1EX)nlz|f~
zu9JD!xZ)aLaS7LKzi_x7czsKjub;g3>>r)^xhHVT{DZ+e+3%0s^BlVN?5eZ!i^pC)
zc76EsXWzA#f3fV<vM)F^Jp_&WzmL3b;S`~_X1l{`IRe*&2yb4|el<~aH32q4id*8(
z0QtD2`F39#7^(un59H8T@Dm7|w!04&iqUjY*};au4KjQn0be#0m7B@KzzZ%={|yHX
z0WSt(+Q%r1otjD}lm1wiQuw~a&`POPEmbapU#37(L;E&}{t1i>i9R_>W$lvY4iGj4
z=jH7C6_x~19a>%UOlU$jG_IDZ6FA;YTGzR~)@@;9>+>lX4nAG6lkVPczkKuM{EiW2
z$H@I12Nh@F+R0USOWxhBxVvw;^X}k1cW|}3HecPTRCg{--?@0ddUV}Fx}Rd}NMD74
z=mfrolU~O96$DoiEC5h#@bYQMMNm9dP;{mgUz+|1!S5i*0VsY%rKclI^b6SJ1;DPX
zp4O8RuOJlxCQzh(06xT|#6R-;AMtQb`wu*<J#s;yzlPENqY<#c%o;yxMGbt!^l*(q
zO?n(^lXJmoX3hol2?pNoi?K;)(TZT2G#PdF{g}DL!C*WKCJBu*vqF$!!LXI3SlYGF
z0(6hCFLb_-4cGzwiIb}<Ao$7)Yxwh~oncH~CMvM8qKnF}e+Ez#wW!%(z#-Jc&CW^~
z&W^)679blU&wyJ1zT(-_*i90*!2@2?v^e~%Sfb!Y2-oXR>)*O27ufM0%=2R*CHh+M
zusF|f;50%o%`E>75KHg7oDe5&u)GbeY+mrSU|!0Jz5GFyZ)x|vs;*^w7o0rpHFs?d
z4{E(%K6$O|Jx48Ma<oYT{$jz`hV|sx2Ndwt8YgK7Y13l6Ac8oMoDlu9$@FwIxv_<f
zH^h(q-hu%%CHG?u&j)HH#jYEo{uqcTE(;&o2VpgJubg1QXj`L_E@Ho$%tAbx!gO45
zB2d?~q@Pt@$iNJ0iFLGyaIJ7D8BNCK#QB9j_|$MimDqG@lHp@1K7Xr>_Jdmb^bq}f
zXvJxeo(2Gs7{~n+sr&^w^e@E!&!qh!Kg)6cYcD+{`1?>WAL5R1*RMV#_`5c0A{8~c
QvPV29;zO^Qt79+q-_u6x9{>OV

literal 0
HcmV?d00001

diff --git a/app/config.py b/app/config.py
index 772dbf0..78edfed 100644
--- a/app/config.py
+++ b/app/config.py
@@ -24,13 +24,6 @@ class Settings(BaseSettings):
     azure_openai_chat_deployment: str = ""
     azure_openai_embeddings_deployment: str = ""
     
-    def __init__(self, **kwargs):
-        # Don't use any values from kwargs that might come from env vars
-        # Only use explicitly passed values (which should be none for base Settings)
-        # Filter out any kwargs that might come from env vars
-        filtered_kwargs = {k: v for k, v in kwargs.items() if not k.startswith('NEVER_MATCH_THIS_PREFIX_')}
-        super().__init__(**filtered_kwargs)
-    
     # ChromaDB
     chroma_host: str = "localhost"
     chroma_port: int = 8001
@@ -61,7 +54,10 @@ def __init__(self, **kwargs):
     jwt_secret_key: Optional[str] = None  # JWT secret key for authentication
     algorithm: str = "HS256"
     access_token_expire_minutes: int = 30
+    environment: str = "development"
     production_mode: bool = False  # Set to True in production for secure cookies
+    cors_origins: str = "http://localhost:3000,http://localhost:8000,http://127.0.0.1:8000"
+    trusted_proxy_ips: str = "127.0.0.1,::1"
     
     # Logging
     log_level: str = "INFO"
@@ -73,21 +69,31 @@ def __init__(self, **kwargs):
     ai_max_retries: int = 2  # Maximum number of retries for failed AI requests
     
     model_config = SettingsConfigDict(
-        # No env_file - all settings come from database or defaults
+        # Runtime values may be supplied by Docker/Kubernetes environment
+        # variables. Database-backed settings still override these defaults.
         case_sensitive=False,
-        # Explicitly disable reading from environment variables
         env_file=None,
-        # Don't read from environment variables at all
-        # This ensures settings only come from database or defaults
         env_ignore_empty=True,
-        # This is the key setting to disable env vars completely
-        # By setting a prefix that will never match, we prevent env var loading
-        env_prefix="NEVER_MATCH_THIS_PREFIX_"
+        env_prefix=""
     )
 
+    def model_post_init(self, __context: Any) -> None:
+        # Keep the existing ENVIRONMENT=production setup contract while still
+        # allowing an explicit PRODUCTION_MODE value to override it.
+        if "production_mode" not in self.model_fields_set:
+            self.production_mode = self.environment.lower() == "production"
+
     @property
     def allowed_extensions_list(self) -> list:
         return [ext.strip().lower() for ext in self.allowed_extensions.split(",")]
+
+    @property
+    def cors_origins_list(self) -> list[str]:
+        return [origin.strip() for origin in self.cors_origins.split(",") if origin.strip()]
+
+    @property
+    def trusted_proxy_ips_list(self) -> list[str]:
+        return [ip.strip() for ip in self.trusted_proxy_ips.split(",") if ip.strip()]
     
     @property
     def max_file_size_bytes(self) -> int:
@@ -107,8 +113,8 @@ class DatabaseSettings(Settings):
     """Settings that loads configuration from database"""
     
     def __init__(self, db: Session = None, **kwargs):
-        # First, load defaults WITHOUT environment variables
-        # We pass _env_file=None to ensure no env vars are loaded
+        # Load defaults and runtime environment variables first. Persisted
+        # application settings take precedence when a database is available.
         super().__init__(_env_file=None, **kwargs)
         
         # Then override with database values if available
@@ -188,4 +194,3 @@ def reset_settings():
     """Reset the global settings instance"""
     global _settings
     _settings = None
-
diff --git a/app/database.py b/app/database.py
index a573d3f..0652cae 100644
--- a/app/database.py
+++ b/app/database.py
@@ -3,9 +3,10 @@
 from sqlalchemy.orm import sessionmaker, Session
 from loguru import logger
 import os
+from .config import get_settings
 
-# Use simple SQLite database with default path
-DATABASE_URL = "sqlite:///./data/documents.db"
+# Honour the documented DATABASE_URL runtime setting.
+DATABASE_URL = get_settings().database_url
 
 # Ensure data directory exists
 os.makedirs("data", exist_ok=True)
@@ -13,7 +14,7 @@
 # Create engine with minimal configuration
 engine = create_engine(
     DATABASE_URL,
-    connect_args={"check_same_thread": False}
+    connect_args={"check_same_thread": False} if DATABASE_URL.startswith("sqlite") else {}
 )
 
 # Create session factory
diff --git a/app/main.py b/app/main.py
index 6d72a18..84f5768 100644
--- a/app/main.py
+++ b/app/main.py
@@ -29,10 +29,12 @@
     version="1.0.0"
 )
 
+app_settings = get_settings()
+
 # CORS middleware
 app.add_middleware(
     CORSMiddleware,
-    allow_origins=["http://localhost:3000", "http://localhost:8000", "http://127.0.0.1:8000"],  # Restrict origins
+    allow_origins=app_settings.cors_origins_list,
     allow_credentials=True,
     allow_methods=["GET", "POST", "PUT", "DELETE"],
     allow_headers=["Content-Type", "Authorization", "X-CSRF-Token"],  # Restrict headers
@@ -44,9 +46,6 @@
 app.add_exception_handler(StarletteHTTPException, ErrorHandler.starlette_exception_handler)
 app.add_exception_handler(Exception, ErrorHandler.general_exception_handler)
 
-# Get settings to determine production mode
-app_settings = get_settings()
-
 # Enable CSRF protection
 csrf_protect = CSRFProtect(
     secure=app_settings.production_mode,  # Use secure cookies in production
@@ -71,7 +70,8 @@
     default_limit=100,  # 100 requests per minute for general endpoints
     window_seconds=60,
     login_limit=5,  # 5 login attempts per 5 minutes
-    login_window_seconds=300
+    login_window_seconds=300,
+    trusted_proxy_ips=app_settings.trusted_proxy_ips_list,
 )
 rate_limit.init_app(app)
 
diff --git a/app/middleware/__pycache__/__init__.cpython-314.pyc b/app/middleware/__pycache__/__init__.cpython-314.pyc
new file mode 100644
index 0000000000000000000000000000000000000000..5b6db50eba5853fa28727897aace694f114058d4
GIT binary patch
literal 225
zcmdPq<K<!i0ygoqED<367{q}AMkwPm8<5e!5X7L&pvmaBlA(wR$o~wIyj7<kTAW%`
zte=&bmzSBXSCpEWmyuYMqVJNQT$-DjS5mC+oS%|fp>JehWTtCiu4`nbpPrhLstZ(?
zo0y}Ulv<>ln3I#Ln+p_3)y+z*EXqiPYxYgdOH5BK(oZZX(9g|GNy$kqPb^B+kB`sH
o%PfhH*DI*J#bJ}1pHiBWYFESxbPmYD#UREfW=2NFB4!{90CE{StpET3

literal 0
HcmV?d00001

diff --git a/app/middleware/__pycache__/rate_limit_middleware.cpython-314.pyc b/app/middleware/__pycache__/rate_limit_middleware.cpython-314.pyc
new file mode 100644
index 0000000000000000000000000000000000000000..7afc78f243c83acd179ed3d5e9f28636b19cd782
GIT binary patch
literal 11744
zcmcIKYiwKBdFS$Z`H)CGsW&OnmO|@6Te4-z56O0HS&C&@xppW!QN_~amBg4L*?TW*
zTV4=v=`bbDmc-s>bp=)j?JyZ_S7ljI2N=+FO9Kxm1~HOC=GH+BEPwn@jy$LtI&|N6
zE-y(bbnFe-5%lrg@4V0X&i6WBYjKg8Kzh$H`C>;CA^(9NYSL#i>pz0bRl*U8Oc0J4
zVk8EBHA9*~t)v~)NxDJ3q#ra$1}Bzlhm3=)#L~QO$TVn{%rvhbvJ6@!E6p2*iUy0N
zVwyJ&*#_;Bo#vUL5~&3GV24Tv%cL?VsUVGnGdT!n{zma`tuh~}oMJ72weHqra1|Wm
zCZ3|%GiELz@vcaCCM<=cQ?8kCC=}r@1_a(U853Ls0Z}?UI^>dKuDHN|n~zGa^Fjg|
zKw*$~1tcjDydb&)(U1$P1<of#zQa7?(aE}_;h-e5LlQ3p&PRBeJr$S2v1lM7>(3<O
z5#GbdmJmM~NJOL%)V#&WMvnhhf)^zyu|9M9)Ck9m@mN&Enx#hqB0qTM%;?GN^Z;9f
z82|3hUjLa>r~D@mkDT*!$DV!e*y%H;p;R{<3tk9jj)eZ`G9T-I37G&1FjvVph{V7-
zX(oy#Z6%2@93$ztVjt7Ra2f}Rus#AgE#@Nj2qWn^or6dQTCPVdX8>rIj1*&}7?xsK
zih+}WI%bM7Q4E{{V5}5l=87bXkCCiCvY(NP;5=+{86L+lo<?q|v;Y3+Lz1Qgl1mck
zDG18`iLN*=xQ0euflx@`MX|$d9^eB~0`mLJ?XFQ?Xoo@}|JVV2G(0)U3wXek7DRgd
zp)8V*hT^esR1%@;=}0()v~n>V4aF{grKiIQDK-<3!a-Ls!Uv*>xGOg4ibX;$=v)Z%
zqB+RG{^LKUV)#cwU7rAO0FJ~*CNw?YAtVIYI`S+t4To}?c>yjEg<1-A6zVB70K^(t
zu5GJ<ZZau9?=`^o8t)_d%S9Qw^V5~e#mYMTA|H%JL!xYn#HPa0Okuh5v89SVvob&I
z2rqmah`K})5~9S1{Ba?6>9Ri@7vT<Qp;$nw6L5vHR+I#fMmE6Rf&Gz-{Qh7hAc{!-
ze!qxQYq~0b*ZZ8v3!?YMKr|Y@&>`^Q=yX5`d5^||i5b{I(ff2P#9#7u?(FPt-?_KF
zv)enxPxI|iZzd3FKM$uHh(!4I89?yuF9t3P(}8T`lYwYpiWj_rc-))2>0YD-Wxf6!
zwj+L7w)*`rjhKYxe%V!kHaqfbRKpTP4#4lOk`3b0_dcM&K&oojjQGit>bf-(=FFtB
zdd-44D{(fh6=ANJ)HbZyFlQ%q+uk0$b^7m4uGV%wC;`+u^h$y(!c0Ow4BN`C&jTqT
z;f$*#<TTvdZvr>=F}pKl<|JdTXomL@GPW~{2SU@>p{U9i$k=EUT4nIxj2hJZxJ}KS
zG45wtG9OcvK%Im$s-yTwG&{rbGPMmy93-y>l^<9(?oey&&SapyRmE|PkBnw}Q?aln
zGMeonhwajEn*U{eEyr>?&cx|C)~kn+i`3r6>(tz6gPP0zHsTB#bKh!CU4yz(*cZHV
z=Ac>ue{t7wU)Eg!;KWoWK*qCYqqcXGTg-?@Bj6#(x=2`*ZV>_JBh(^>JrD`ZoDT*1
z<c`8r8IFeGR&^YR#Dal{*asP<ejBtFaR;xG-&|OEeqv?BPrIG9!L0~;0|{x`OYi(_
zT@E4gQX=lfF2iugK*kBP6|^*zy_F!-Vu8@CRcRFV27xiFeTKdKCFIf4h~S2iJ(~OF
z@N@rwlBbJ8qVkl;dNBdaTW0;hS#bVB3E+iN1h{Vkwi7A<05jnwp%Opo4i#sZzdsmD
z0Fw}qj$qqB1j;s*cPm$1l#K!Lax@r@$(Eo1f`Ru-0r7%d4%~>cYd`R6e}-3kOtMbo
zBa^ZgSjHnKL+2rzGW-m9nF&U3&ZMjKz=Rz*p}Ma-E6P3Ihibq*9+neR@vFupTQy&{
z!q%tjcdW2A>4vrywl-bcyuwzcxAm;BjcM0TD81XbZE1UVYWsnu?FVi*EjJ#V)2*-#
z4-I7h0FxZ>FYo&%B5LoJS6v^N)4gt5V@XlNO<l^hGwIs7xGmLrBH4Lj$vK?1?pQdJ
zYCo84KX_Y8^`A}lpIvG@m$tfZo=sb8<_FW(`uR(17K6)-{nb4zB_?}{t^J6toj;nY
z+mo!@vs}0LW44FV6BTl>7@8~qUm?W0{vzCfCgKF*tIgwAqgm?D)Q2B>&$65;hga{%
zanLNWw@b`b?XcbqeU4}O)o3=CYu8BB8ybHEXW7sAnS>^x^=E5BpEz@x;MQk(lZqo`
zG|L%tICUI#rgn0S8GyEN&EtCWY4Sz(ll49DkI=Jr9PbHDFi*TLTM}UL>TF4>HXPR#
zUft&T_%<mQcJiG5IYUC*K@yq)xWX6V3<cj<MOz+s_UR@xZCQyzNDs_Rks2p}iH-TX
zG$Wc5E<#MCfh4qXLmc>Up<UiOk7iiMlhw@MPgQOyiq(m~ebPQya^jzqIX=mlTSocA
zqeo$ZE=~ab;OaS0@;FAdSe#gLjSwUJ4o4FjXJ&W8#6?<(I>Hp}cpV8tX+2Os{z0ps
z60%=gPr}R|ZJ6<BW{-fn8;*gB1xnFnMIm*eMhfa^hGVK~X}*m!!_UNo%dYdl(xr|O
zk45mpjstU!@O)fhzd9*A1F9CFg(d_jR%G1;{<0`*X9AZLmW?FmF$$enW(_6;RImNm
zP}YRwGOO}s*$gfGii#;~BvIBYOxy_Vnq4$0JaiX!^i)9}T7Y-&huY$C5V7}x-P|iK
zy<1v+qy1VtGQK@Y*Pi9l?v%BA$=ZFl*7<|pzv=z{{<-0MB^5WSZ&Y8e{=BAPUP?JT
zlg`eRb8phQciGvSs@eDEk-OWTS}0F>4kSGXZgZ=iLn+U(r03YO=lI9l2Itw&x93Vj
zslKsf-`Mi@v-9SAy$4gh!^z&^JKSpT=+d+2KJI<~p;mja=9Av%Zw)ORNjqCtojVuz
zz0dr-FX=q|P)q8cn&-ZMBH8==7g%jxm#S(_R<$l1S*`LevdOC6H7jv#Qzp3Bx$5j*
zyp(bt`q+6W4OmxK($%$iWYx9zHv5t5@Pi7neTZ4BA$6`)ZAY@UV?jvOc79yjnFd6i
zH(BRh)GXI^J#doR{Tq5xT6?Yf3nMAo`{jBm482hVm>bn^RsUWbh7J9b?E_uR-!lUh
zx`lSg{i@<f=|F@2Ut6jMs)|3*84+6c0Or^F4um~e`k~nhRX?mUV7|dJu+#LR#|)TF
zb`Y|9VCQ5VFZW~ZAjYc!<w`5qp|WhuP_k?gKu-~(pf#c5C{zJ}Jjzu8&7zEnq0ka4
zc|tvaGgyK;6^PvpV%JwcK=Ah18veXfM!yt^mM^7ns_<`J7l6R7f~GwRh^<MzsUgsG
z>mE_3knB4NydbU_bBz{|f4wkB=%q}51?1c)>K<DXr%`25T<g<jX9XFUm3A~M<8sY7
zt=eLO<nz$ctd^XsyE~J0;|ia2Mmn{BkUhHWj6jOPjC79~1&>}o+j30NDS@elfv@Bl
z{H{qMHlwn)4%wK9UWmpnMrUnj+XrF-_;x~k2y-&iHfuWD&henr4vl(@vO(!e)=kI2
zR7K@dHcs<_5ZI%#c8ZsP1I8m^`~gEg?$J}uCOnPxOrfyAgB=TetqAN}We`8)kU9eq
zG>B0UHX}b%H25Ou5L8Z_JGN>p#MU-dp@jM>bOPM0wex3vKkHlQd-M2>k+()t<t-nT
zx7@xwXIe88YelN6BU#n4V(CcNxqoo#d#993zO?i3a@~=+lb_k@(vEE@$Bv|9$3oY#
z!@J0=IyzI1o}{B^*|BfQzVBXT{f*dLu~eleS?O75U9Rk&JN}uiGVN%%@zPr_U4MDW
z-h9tiwZvBC6g}0D!Q-d57<K!{-{OqdLesTL@yWm2x_CgE7LG!1aNF@h3%HE}nvRdZ
z+LKUAbOWGQo7L}qKmfemwT3^p_PkT}PH?g6r~MTB)hmvdk6!VAfDBx5Qs|10;%c`f
z^+MRmfGeXIx#4Q$DMD%kU-n|ES0JMvfkNfeqTqK^^#H~$aIpYez(DT8>%q*rkMmNV
zYl^zF0xmJm2g8%#n!;`E01EDasmS`U#LtMbS(E~TBwh@|j%V#Ik4~X-q&~Sw71@4l
zFB=qBnTR`ul&uhUF;cCNb*acrkD}~c9ePkB(92b_W+2TwQrmlz+j~>n`;*)IKi+;g
zX>FW4nYNX^@$#!L&%cziwXfLP(~kOUMGy3(`3M6<Z!b^T8k4rho4Zr)?xeeW$=1EZ
zc7K&Vk$qA6oPf+@=@XpO=v(8^+s1JE47DPTV)7Z|77EtG85pQ^67VJn2LZ@>#ouO7
zG#!Pg^$JlVJyXh-b?0NT2z8o0p1$MIN_-jsrSC?)^8o?ywtEeK-YKI$@13SU|E3_5
z+*tDLcyeMgIrZY|#D%4^7go6lZKdp0K8+foV@m&LLGT64`3|N+HzCi!(vO|VHv?j3
zpwxWf2_0i9WN<-Eq^2#&$K>zzW^*8J7{{5?<THc2nn4${&tT7*aamDg920x~8N?@S
zSsfYA3QF2aad#JL#pcYmvG1Ust0td5f0gPe6HI=cxQWyHOkH4BCN$t~g1?-S4+7Jm
z-uuvToYR<()90^rv+&IyZGu5#Dg;A;z%+batFM%9+RM$e?b2ZFW?10KGM}N4820HW
zn650>LMK<@m3_UT!s*-@GsR<^?R$Ef4_<JECtcDsk79f}AiDTVL7oRWO>xL56t_HO
zW72dODr6k;9h)2tc(=RYf4vXD0Y-5(oFN0SSJXf)^)aWlNCO!@TMT?wbBSElJIRUi
zj41{@7mX*O5xSuMs#`i))3H<N$L~V`WUJ~9r~Hy~KbK4K^T?(HQ+$-a6c_sB?m~<&
zEave>K9uL6Q`^nL5bJILzeB@ijcA*SKWXXyo@c%(T~;w)mn_@9p(Q1i*YrPp`O9?_
z0Iyi;nd|0yMW2Rmn*J|4!8~p!g!9n1!tT`t3p}6%WZ-{{W%=`NDgETBz2EDd?@T+Y
z=f{%{56rv5aqY;DZC?u0Q2ETr{XanRXa+{WO6<XYs6mPM2mE`9889WoQ7Y?Y1Nh(I
z$iWmvYcj`Fg>T>|a&rOgJ=v!E0f9y&uwfAqL=`K87iBxxzVONh4o21Fw1C+lT=oYh
z;VnZ5K`$a|#MFI9jn6}hT(fOCI@$dM=Sx}ie?xb`qCa=k-ne}2^7Sio*0jUD>S&v@
z-YY73<J=qPzI*OoLsP0@SF&N(V$*8Fp2g|ahW@!z;KFk@J<Jfmx)umwooJoKbEi<^
zIah2gpSzo(nC>$ax0FKhw$dfL>mdsbmzp|PoA%$1tTsKf+;HMfV71}Yo0hbrcK(GW
z$5R__QtWu`+{O;*=;nd<n^rrIy&qWZ99(q|-r2R{9=_Moy(p}<?7O{dwdLULm+uIx
z{oK;&Gpqg2EuB5L+JA1T`S~|(H#HyG-5{__Tq%2V(%!saT?{O>^sLx>@0B%d^uh?r
z;{HoS8|>Y~?MJKh|I%ti*mbxDem<zO9QBws*?}l0kapKy0KQH_dl`_i8b!uF4Rr;S
z0*{xO*P)gOS6z{r-TJBr1i;%<^hXhbIJ}yyka-2|yg|6;0jt7L3R`=HL|h@I5BxkC
zby;QpQ+1S$7qlS@^~z~_&I0pStR)S2O0zwJS5%wt6$KGPMsZ`dq+AQI2uUHE@yXYy
zu7)z$W6)axdva`7A(f%f+QyFUMurNB_BWL$A_G)xXDv`p=hIpVr+@O9T1jWt?gZa%
z)^|H@S4Jct&Nw5y3z;~x&*;^1mfS0rFZ;^HS@W>j{<xw%tX|y{u9&lVb)0=~hNj>=
zzV^K0@N!qkQ~L;22~E^3X|tF1$@eB-?TDMk(bS@8G@DZ~=$ltfoXsjw%sP&a6q<Zi
zP{m59DrPF6ikZjj)tVDz?3sMkChL{9a9aG!DNK1goZWXHTj-UJv!W7{S3i3qkEma?
zx&B#;dV-IrUySvAtXuKX{@h50Kl^%>XV{<Tmo1%b8x>+f2u@J+8zpdohLM1r14nI6
z<AFefj#;A@Of!fmn6=R7HSkG9r0J2_S`<JT#VD&VfzJVzs9BvW7In#n5HAJ7ky#p7
zv8Af42YCk`iZUE6^Zu=NBYX?iH*4WgGPWN^$v9gAt`ev?jKLZ06wa3BqsC}B#B4=A
zj^k$n@RApul9`<zt!%+%Bt&?m3-PiM!VM%4&B8M<)c?O0_bA;(_GVX=3pwcsg+(xN
zgVP1{vtPn=g((E6#CYtoHX%d=w2y@`1kWOP9)SQr*2e`5gFtITK+dQbd|5?D(R(gn
z!9E1I8J?ni&l0-s{h(4xvMK8>%BelF8PpPLSn?ryXfg|dE;MjRh+>B^0J2F?4?<CJ
zkconVL)9Au85M_BmtFX!QZ1!2^tT|y6b;ottYvTPe|3M#Qk%5YrYy}#OY_akDa)>p
zEV~xRe(}OPFQoPyOYS*#r+#IR@004Ln|qh5TT^ANOV(CU9xAF+<;}_R=9?Fn%e~;i
zGLY)}jJNyv&raMrk!m}TY&)=Ab@0`qIX#rRTT)Hk$)@hKwc^H=x2~idElEeqLdCjP
z<2EN*=bU+iCDzK%ttCt4-bK^GmD}5HU;O2j_pYS+PbK?LE%l8ql|H*-<v_P8cipY)
zzE@ti)X<eKuU)F|OqVy_+`nejRhNQ$y`t$yT{o{RyP>S*CuIxI{kSGw{?t$03zI)?
zO_#SWoL)2Ot4kl+ipq=ENKsMo0~e`rt1FvhVWP#QiuRMvs&<~$h6A_9e)+<CFQg8h
zOddSB+AuPAD*ODfP`O&`og2Q}&{#<21C_42ZvOCm0-XKJReR@#Hf*3@!5i$Z-HXTG
zHP5jrwhEq$m#W*6Z2Mh6`rfV0A={H|$KBm~Z=2p7$su<p*<JT+jyc;GJVVOc9vnru
z0TTzc?e`*@JFgrr9c%(8KQn07{i^b52Yh_c&I}gmKIo`|{I3m%I|pt04|@)m!PlK4
z2BFO|=rrA_VIl7^(Z?dinbd*ANXb6;l8>6c@`w)x8hA|ZqxLPJT67;h5%=4G#sqYE
zj(CbOC?Fb`!9X0d-#-%zB_f!I5S?!&0+CFK&F`NK3!)T(;Gbv=ij96h#3(=@!4B+s
z7lO_AQ}|QB$rbQuPdTg~Li&X8c?j_np>;`Kh*FS;Yv|8LEh(R%Z=xv7Jue(mZju0o
zC7}Q_;vj%8|BPHE4>YWv-6)5Ep8v$qpf8Rx4*l+pPIzgc&kY;fz%fa^lN;sW!l9m<
zjR6J})D6^9*AP%0m3AG3Ub9K{udL&I0x(oIwC^`Gv=5#bA+*mxgZZ+7e4HLa_lU%D
z=rc6R_ADm^=_G+Wd$!j+$VV`ojz(%x>l=lIB1kX>E*y2KF_I{`;GGep93kdzB&f~^
zr-<qgFh6#E7&2GMm>pS@k{~cCqYi^WW%zQc3X?*Lb53amzXMq5_)o2La1Eo;5B~dD
zbTT|8vov@F<^u)PTvSRgfLDG>6mc%i&27pv5R!#ly>;CX)uqIrB%xSr0&tb2%PL=I
z)0K6vTkctkU+Yg>?QfiX_2j(!V{5|$EwR=rwnP4+k%VC|upMXzg>|vUyx5;E#*6y8
z4ytcSM;INv@6wo6&20OS5{MI?<u@w|8Se<6e<bjHtCfo(6f!TgO`*=ef-!)8vl~R8
z$C{g!efeuBEU+)?#-^cI1gi!11vs6_nqq4{Vry35d6Df~-1dvscUo82KDr|?0`9(m
zqbY}F5?;gncM-gf;Lj2K1p<0WacJQU1aAWHFv{gZ8p+(P>sW^1H}FqQ%ik$?OQUBW
zvU<I9qgbo&2gixNU%4z;*Hfts(F1weAYG0F^$K`eG&WI*Qp5v;pr9DU4+be2E3rk!
zNr(c5;3)d4D3@fuAT&`Cvm%x4ay8TuBD^H=9eF{7=OJ)cFk`>=Tsg9ugs5l(^kv-y
z9(Q<W!YNsCN|bxhWxDaR0Rd{(5cZ`ozCPiH@QHgO9tE(bWf<mxM#JdV4TQ0NMmm>C
x=cmN|DXIOG?D&-Qd`kBImK1+VY98vYXqc*{nzn}oGaG-Tw=w<e1OOf7e*h#nl}7*o

literal 0
HcmV?d00001

diff --git a/app/middleware/rate_limit_middleware.py b/app/middleware/rate_limit_middleware.py
index 866cf7a..a9419d6 100644
--- a/app/middleware/rate_limit_middleware.py
+++ b/app/middleware/rate_limit_middleware.py
@@ -2,7 +2,7 @@
 Rate limiting middleware for FastAPI to prevent brute force attacks and API abuse.
 """
 import time
-from typing import Dict, Optional, Tuple
+from typing import Dict, Iterable, Optional, Tuple
 from collections import defaultdict
 from fastapi import Request
 from fastapi.responses import JSONResponse
@@ -29,7 +29,8 @@ def __init__(
         window_seconds: int = 60,  # 1 minute window
         login_limit: int = 5,  # stricter limit for login attempts
         login_window_seconds: int = 300,  # 5 minute window for login
-        cleanup_interval: int = 300  # cleanup every 5 minutes
+        cleanup_interval: int = 300,  # cleanup every 5 minutes
+        trusted_proxy_ips: Optional[Iterable[str]] = None,
     ):
         super().__init__(app)
         self.default_limit = default_limit
@@ -37,6 +38,7 @@ def __init__(
         self.login_limit = login_limit
         self.login_window_seconds = login_window_seconds
         self.cleanup_interval = cleanup_interval
+        self.trusted_proxy_ips = set(trusted_proxy_ips or ())
         
         # Store request counts: {ip: {endpoint: [(timestamp, count)]}}
         self.request_counts: Dict[str, Dict[str, list]] = defaultdict(lambda: defaultdict(list))
@@ -81,19 +83,21 @@ async def _cleanup_old_entries(self):
     
     def get_client_ip(self, request: Request) -> str:
         """Extract client IP address from request."""
-        # Check for proxy headers
-        forwarded_for = request.headers.get("X-Forwarded-For")
-        if forwarded_for:
-            # Take the first IP in the chain
-            return forwarded_for.split(",")[0].strip()
-        
-        # Check for other proxy headers
-        real_ip = request.headers.get("X-Real-IP")
-        if real_ip:
-            return real_ip
-        
-        # Fallback to direct connection
-        return request.client.host if request.client else "unknown"
+        direct_ip = request.client.host if request.client else "unknown"
+
+        # Forwarding headers are attacker-controlled unless the direct peer is
+        # a configured reverse proxy. Never let an arbitrary client choose the
+        # rate-limit bucket used for its request.
+        if direct_ip in self.trusted_proxy_ips:
+            forwarded_for = request.headers.get("X-Forwarded-For")
+            if forwarded_for:
+                return forwarded_for.split(",")[0].strip()
+
+            real_ip = request.headers.get("X-Real-IP")
+            if real_ip:
+                return real_ip.strip()
+
+        return direct_ip
     
     def get_rate_limit(self, path: str) -> Tuple[int, int]:
         """Get rate limit for a specific path."""
@@ -212,4 +216,4 @@ def __init__(self, app=None, **kwargs):
     def init_app(self, app):
         """Initialize rate limiting for the FastAPI app."""
         # Add rate limit middleware
-        app.add_middleware(RateLimitMiddleware, **self.config)
\ No newline at end of file
+        app.add_middleware(RateLimitMiddleware, **self.config)
diff --git a/frontend/login.html b/frontend/login.html
index df61331..02fb414 100644
--- a/frontend/login.html
+++ b/frontend/login.html
@@ -378,7 +378,10 @@ <h4><i class="fas fa-user-shield me-2"></i>Admin User Setup</h4>
 
     <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js"></script>
     <script>
-        const API_BASE = 'http://localhost:8000/api';
+        // Keep API requests on the same scheme, host and externally mapped port
+        // as the page. Hard-coding port 8000 breaks Docker mappings such as
+        // `-p 8042:8000` and HTTPS reverse proxies.
+        const API_BASE = `${window.location.origin}/api`;
 
         // Check if initial setup is needed
         async function checkSetupStatus() {
@@ -793,4 +796,4 @@ <h4><i class="fas fa-user-shield me-2"></i>Admin User Setup</h4>
     </script>
 </body>
 
-</html>
\ No newline at end of file
+</html>
diff --git a/setup.ps1 b/setup.ps1
index 897cbfa..c5ea698 100644
--- a/setup.ps1
+++ b/setup.ps1
@@ -32,11 +32,18 @@ function Require-Docker() {
 function New-EnvFile() {
   if (-not (Test-Path .env)) {
     Info 'Creating .env file...'
-    $secret = try { python - <<'PY'
-import secrets
-print(secrets.token_urlsafe(32))
-PY
-    } catch { 'change-me-in-production' }
+    $secret = 'change-me-in-production'
+    $pythonCommand = Get-Command python3, python -ErrorAction SilentlyContinue | Select-Object -First 1
+    if ($pythonCommand) {
+      try {
+        $generatedSecret = & $pythonCommand.Source -c 'import secrets; print(secrets.token_urlsafe(32))'
+        if ($LASTEXITCODE -eq 0 -and $generatedSecret) {
+          $secret = $generatedSecret.Trim()
+        }
+      } catch {
+        Warn 'Could not generate a random secret with Python; update SECRET_KEY manually.'
+      }
+    }
 
     @"
 # Security - CHANGE THIS IN PRODUCTION!
@@ -94,22 +101,23 @@ function Invoke-Prod() {
     exit 1
   }
 
-  $env = Get-Content .env | Where-Object { $_ -notmatch '^#' -and $_.Trim() }
-  foreach ($line in $env) {
+  $envValues = @{}
+  $envLines = Get-Content .env | Where-Object { $_ -notmatch '^#' -and $_.Trim() }
+  foreach ($line in $envLines) {
     $kv = $line.Split('=',2)
-    if ($kv.Length -eq 2) { $env:$($kv[0]) = $kv[1] }
+    if ($kv.Length -eq 2) { $envValues[$kv[0].Trim()] = $kv[1] }
   }
 
   $pwdPath = (Get-Location).Path
   docker run -d `
     --name "$ContainerName" `
     -p 8000:8000 `
-    -e SECRET_KEY="$env:SECRET_KEY" `
-    -e DATABASE_URL="$env:DATABASE_URL" `
-    -e AI_PROVIDER="$env:AI_PROVIDER" `
-    -e OPENAI_API_KEY="$env:OPENAI_API_KEY" `
-    -e ENVIRONMENT="$env:ENVIRONMENT" `
-    -e LOG_LEVEL="$env:LOG_LEVEL" `
+    -e "SECRET_KEY=$($envValues['SECRET_KEY'])" `
+    -e "DATABASE_URL=$($envValues['DATABASE_URL'])" `
+    -e "AI_PROVIDER=$($envValues['AI_PROVIDER'])" `
+    -e "OPENAI_API_KEY=$($envValues['OPENAI_API_KEY'])" `
+    -e "ENVIRONMENT=$($envValues['ENVIRONMENT'])" `
+    -e "LOG_LEVEL=$($envValues['LOG_LEVEL'])" `
     -v "$pwdPath/data:/app/data" `
     -v "$pwdPath/staging:/app/staging" `
     -v "$pwdPath/storage:/app/storage" `
@@ -176,4 +184,3 @@ Examples:
 "@
   }
 }
-
diff --git a/supervisord.conf b/supervisord.conf
index 40d821d..df41bd1 100644
--- a/supervisord.conf
+++ b/supervisord.conf
@@ -14,7 +14,7 @@ stderr_logfile=/app/data/logs/chromadb.stderr.log
 environment=IS_PERSISTENT="TRUE",ANONYMIZED_TELEMETRY="FALSE",ALLOW_RESET="FALSE"
 
 [program:documentmanager]
-command=python -m uvicorn app.main:app --host 0.0.0.0 --port 8000 --proxy-headers --forwarded-allow-ips='*'
+command=python -m uvicorn app.main:app --host 0.0.0.0 --port 8000 --proxy-headers --forwarded-allow-ips=%(ENV_TRUSTED_PROXY_IPS)s
 directory=/app
 autostart=true
 autorestart=true
@@ -35,4 +35,4 @@ chmod=0700
 supervisor.rpcinterface_factory = supervisor.rpcinterface:make_main_rpcinterface
 
 [supervisorctl]
-serverurl=unix:///tmp/supervisor.sock
\ No newline at end of file
+serverurl=unix:///tmp/supervisor.sock
diff --git a/tests/__pycache__/test_runtime_configuration.cpython-314-pytest-9.1.1.pyc b/tests/__pycache__/test_runtime_configuration.cpython-314-pytest-9.1.1.pyc
new file mode 100644
index 0000000000000000000000000000000000000000..7c5ef2bd3af6e77f4aeeb8eeefc13a43cb5351f3
GIT binary patch
literal 6774
zcmeHM+i%<E6(=R?Vo{djxV4imndM8GsJ3pFZ)s<*PVD;9S~2KE+W=z(Eip1vUFeTg
z6Klv|3<FkRFZ~nzIKTD37_hy_wiX9Oitb?pwzs0`lb?3Z$BSssiC1(BFu=5QzVjXa
zzUvXcbAI%2q%*|8^_!~?AN|?KFa@mGm&a0G=0VwEe#r>z5~H)U^elSoo<3%g(|vt-
z$Ft;L4Cn!>dzXTX9eM}Vxuwt|uk(G3;Ok}du;2&TDFi@91a^>#2mgtK<l?LmT~jJ*
zS<XonSyQEg45r|ktm{g(q=DWoNV@!qQc?63rC2P>k0l}(SZjt@bimgO-<N+1;B52E
zs{1Y?;1XaBW7fL*UWM@p-g7aW;5!%N7Xod}I?jz=V^*oMd3KevDy~BH2<+Bq-aEC(
zFk5pstvjVZGR!q*-ERX|gSOT#`x)U<p3AaA*UtvCo-wO$At-dLQ!gWOHQdJAT0djY
z={A^3*H4WUv2pFPpUJah*8bWvEcTvicd3oHHFvueR_G8yt`(h)_t@hI{JB`KjZJw+
zoSkAA)hC37&b%+hp0N7YyX|?odVb5cwM&?_-|pEiH(4R_0jqjGV98zZV^14xYv4!k
z5A@^Z3qPLl*#F*-S8VUKOYoyF`9q(`?h8-8VNbr(_MokSC!_d8E`R@X^(}g?zJ1}v
zH|a$o0vSS&5uTg9KYM3(ZC-pJeA2k0ZIu;Wem|8;B~wL7mr}Z{>B-`T5xKWIpPOA0
zXIGcRkLQ2U2;z;zr}DNDzI#tt6YmL23ro4R#`R5IS2gIMSS!>ka#h!o@)HS@k7S`%
zG5Gmheo45OTba+@H$p0@73&3EsZ|ZHx}7$Hnw67abri*TBO+;<O!U}|Tk7^?Ttnkz
z?*1No?3td9vyCydkH)pouPh}tO`++ymc#{YNSZ9xNjda1Hf`P+k3-7Sn0QUQnkrW%
zMU+%Ugaw{%dHXdj3pJvNHKLT1swS2dO+VGx@F+O=<ZHTU?}=Ec6=mo^(ddeB-VwtO
zTO?OMBbf0RVfPA+(1+?adPS6o(Ipn7a#<v@N?_Yn$mfhO+!i<LN*S^~&G46NfY6L9
zqPAJ9mx~lCmddpasVr6@Pc%A2O?oI}4@P8``T+biPe_dz-QvR<sYtpgKT*q4RiYk@
zoZL2}>)$rRh@M(pJYevZS`{`~mGr_U!Su=Cah|5rGw#ZmyOK34<}@bUl_?EUROa0n
zy^P<b9>A|hOFfdRRprwpk(KJEM2e|7``4Me3!D5THJTosNTeqdqZ6r;yeTIDSCPtz
z4VffhALT>^407U;v`sc8r|}9by(AO*jA&Gfq+ZpPiYyjt)rU%{PUzMo)omk7J!AjA
zVYj8CXg?xyQ3RJNq*lcTM*K`7inLLdHG<h6u0~5hTD`+O=b}ek&py}l#jl$;XItDI
z$I$G(`G<E}+?ZoP#78Y|p>24&TW)dLzeRh0-`H9FE8l&@$M*SHlbdM{&6skZpE=^J
z&mq|Pm{WC>&!-&qfSa*v&s^vh?a@KG6=?As2Oikx2bx@Z_YoEQeENv9K8IYo$qzVH
zN5O$C$N`tOYtLNh7WU_W+zK?Hqu$u(Z#22(=6g%c_%bT-<$Zqnh_gP2VBv2#RY$?W
zEXV=3Y}cN-&@I}RgK{g-f{s17&kr`a;a%Mn{O}QHeGa+dCO_y@9R&xnAP3yAU3=z2
zx3E74<W}I$OZe5CB%GaKpcF0!a)((*0KHaiDry^`?04O_lX4XZUYgA_RR_P0zfF3z
zHGvg8lNNaqyaJbE1>dCA0!SHi7PZ<Ma8no63l!~co}(1)0X_nF&9kLpN`cNHTR_r$
zl%$QhNE(pEb%$uJo=JtyAZhK9E}L_3OPDcZ?~FZ1i=?&NolSR~c0kesLeNDY&&Ib&
z8dAFd{yJVoHqTp!(+<`V0s?s+-XV}e_*^V!?`_I=A}R6<okAq<KSeeJ>p+jq%hmH4
zbOXE=uzR*kAe&K>Y^q)$ocDz&Bu1ByJ2In_$u#_B8sX7&7L`mknMv=l2De$$^yBEy
z6Cc$GyecWmMbwVNncGvz@eE+n$;myB;V+aGIM0p1CLHz<ga{8)G(r{U6$`;<5)+!N
z5g_tb9bz{@_o8X)IO<A#GLX&~oVuM!=Lr6M_t?f7<`9q*n28T4R^s!DT&N`LqB$Q?
zQA1B}Ve2ep6zv3MDz5Ey5`3>=1VphaKNdx!ODA<rhxi16`^h%6)CfMyM(2s{$lG8e
z$kGY=f#AlIt0<5skRPGA24XKrMp4ISjr5}!0O1bnlkUoiuzuUjU(A4?$!Pe7#*Fc?
z7<m`F8K)5z0H#YsbJs;h6O~f6Mqm+ePlWhvEy>&satGSt{I!38*kN9D4IOoj9CVGe
z5+5FR&F(BeA4=^`?<}{t*o(;Z7ttT@=33G0^R9v2T=P=)JD)e|-&y!3#Dsf}c=MEp
zz&W_PaLA89RQ)nSg*&oheB?*mVbRn-f8ViTWVLEEvO;)hM`qB$xVzxk0BzSO+Ugs|
z`7+{w+zOz`Em&*;zRvZg!UMb`bixC?!-4R?eedw#y9f`q-{3&I2oLsVFzOo%59B=<
zlt4zpkOYWEulwvDi8--@q!5xsfv3ND{^7GmvMA_Dh(|sdM=^n75`=lmlPRp@YhyAE
z;*2xTBpqj+d3DV?@a*G`p5SB-`iWs*_^*Ng<h1*^6-~ow*BqK|UYhy8KJMaCBWTlK
z8mEk_qDh#OW~2pr3k2~offpb~hhxIfOl>sE89sem1!hL0U`SF`c&mX-&*bAnXlTdx
zB+x$@UIW1YRm8THhFD7NXzZab*<<L5YzDI6Pk{K>%km6a0ViQDtzn$}#>=wo*9`Mp
e<}XbD-<iIzn7MELJUjC3wIKV`?|MMcKK=zQmb<+G

literal 0
HcmV?d00001

diff --git a/tests/test_runtime_configuration.py b/tests/test_runtime_configuration.py
new file mode 100644
index 0000000..66519c6
--- /dev/null
+++ b/tests/test_runtime_configuration.py
@@ -0,0 +1,40 @@
+from types import SimpleNamespace
+
+from app.config import Settings
+from app.middleware.rate_limit_middleware import RateLimitMiddleware
+
+
+def test_settings_read_documented_environment_variables(monkeypatch):
+    monkeypatch.setenv("DATABASE_URL", "sqlite:///./data/test.db")
+    monkeypatch.setenv("OPENAI_API_KEY", "test-key")
+    monkeypatch.setenv("CORS_ORIGINS", "https://documents.example.com")
+    monkeypatch.setenv("ENVIRONMENT", "production")
+
+    settings = Settings()
+
+    assert settings.database_url == "sqlite:///./data/test.db"
+    assert settings.openai_api_key == "test-key"
+    assert settings.cors_origins_list == ["https://documents.example.com"]
+    assert settings.production_mode is True
+
+
+def test_forwarded_header_is_ignored_for_untrusted_client():
+    middleware = RateLimitMiddleware.__new__(RateLimitMiddleware)
+    middleware.trusted_proxy_ips = {"127.0.0.1"}
+    request = SimpleNamespace(
+        client=SimpleNamespace(host="203.0.113.10"),
+        headers={"X-Forwarded-For": "198.51.100.7"},
+    )
+
+    assert middleware.get_client_ip(request) == "203.0.113.10"
+
+
+def test_forwarded_header_is_used_for_trusted_proxy():
+    middleware = RateLimitMiddleware.__new__(RateLimitMiddleware)
+    middleware.trusted_proxy_ips = {"127.0.0.1"}
+    request = SimpleNamespace(
+        client=SimpleNamespace(host="127.0.0.1"),
+        headers={"X-Forwarded-For": "198.51.100.7, 127.0.0.1"},
+    )
+
+    assert middleware.get_client_ip(request) == "198.51.100.7"

From 67d5cac2be4d381af55ec6641ec0a99677fea2da Mon Sep 17 00:00:00 2001
From: Jannik Reinhard <jannik.reinhard@epicfusion.com>
Date: Sun, 26 Jul 2026 16:28:52 +0200
Subject: [PATCH 2/2] ignore Python test caches

---
 .gitignore                                      |   4 ++++
 app/__pycache__/__init__.cpython-314.pyc        | Bin 1086 -> 0 bytes
 app/__pycache__/config.cpython-314.pyc          | Bin 11710 -> 0 bytes
 .../__pycache__/__init__.cpython-314.pyc        | Bin 225 -> 0 bytes
 .../rate_limit_middleware.cpython-314.pyc       | Bin 11744 -> 0 bytes
 ...e_configuration.cpython-314-pytest-9.1.1.pyc | Bin 6774 -> 0 bytes
 6 files changed, 4 insertions(+)
 delete mode 100644 app/__pycache__/__init__.cpython-314.pyc
 delete mode 100644 app/__pycache__/config.cpython-314.pyc
 delete mode 100644 app/middleware/__pycache__/__init__.cpython-314.pyc
 delete mode 100644 app/middleware/__pycache__/rate_limit_middleware.cpython-314.pyc
 delete mode 100644 tests/__pycache__/test_runtime_configuration.cpython-314-pytest-9.1.1.pyc

diff --git a/.gitignore b/.gitignore
index 752d5af..f04fadd 100644
--- a/.gitignore
+++ b/.gitignore
@@ -22,3 +22,7 @@ data/storage/LegalAssociatesLLP/2024-09-08/4f380a04-02af-4a46-8b3d-f39bae42e9da_
 data/storage/PropertyManagementInc/2025-01-27/53b571aa-a79f-4be7-b867-7f0c258f39c8_2025-01-27_Property_Management_Inc_Medical Record.pdf
 data/storage/TechStartGmbH/2025-06-09/75d86917-31e1-4a2c-b5c4-3433f9841d1c_2025-06-09_TechStart_GmbH_Contract.pdf
 .DS_Store
+# Python bytecode and test caches
+__pycache__/
+*.py[cod]
+.pytest_cache/
diff --git a/app/__pycache__/__init__.cpython-314.pyc b/app/__pycache__/__init__.cpython-314.pyc
deleted file mode 100644
index 94873b988acf3c23598d4d4d15d13711ac59d219..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 1086
zcmZ`%%}*0S6rb&Gx9!%Jf`FKqv;+gGx?My<4Ivy56%HU-z{CXH4Bde)>_;=ZB~T=(
zXrhT14jw#m)SLebiG(_diHY&x4MU7q-)t#z(6`w)zxOro?fdP`bV@-WR?q7C*9b!2
zxY3ft892QzAXG<BkuFT5DIpND97m=jQ(_=y(X!BsmZf3H;W8KA*TgOTFP|>nO19z%
z>C#0jkeB7Tw!hI9(xdRmMVONdbQb3_O?*-JqTw?$%;>lnYvNv{$F3kft|xS*C^min
z&s~=F<i+Wr?vkF;(|VhpDax&Cy}b|RJAQC8FED8i2W2>A+gn>Blu0HIFq6RY7xEDn
zt6)mpz-Mu?W%+^OZIsT|7hV?y&Br>u2C9yh&SQ^}4kWY|01YFIcN2+g!V#@d%MG~g
z_-j5d>Sw;T=o9K|>)3UzjRGZ>TgKGXCcRSC;Uj4GJd<o`LxV#j>R?eF8qwBBnW&KG
zU|U@wRK>PUR0kYHUB}zBjL(Z_u#4gAG+e1@hGDr@U>JqUHj9th*jX|0IOQa!;q^J!
zb@X=e-JOGpqppEdFj4K%PGC7?^a+SMGowyU=BB1b9cR?{3-j~yySZn%9h+<tJ47ya
z$nNOQYSk?TmgfSrVWi!hn%i-R@53OwOq!m3@F*`b$+z4MCa-$b!2yegm(&zk#3rEy
zAb~|E?@uf~tVM4R=4K{paxrJ(ZJ&uXtCE)~|6}N7t~x=nIQ0U|Te1Wt0ql&!WXW?X
z6#9ZOn^!oaLD{xeDCaGty-KT83hNDH)v}3UFu6%Pi@^wnX;Bt+Huxb^;&_{ciP$th
zAj<z~%C`oKbUd?alX2PyCTG-t0qR5)1mQdC`GT(glu@$n_12rhv64Mhvd2pQq0;}p
z`$*9~_8%#C>#+uky-Gb#?VAS+_0%VH<3vURc=l2++nP|>Q$8mK8p)-GlKB;rgvd#n
gXMnqr$n1|DC9+|xy^-o{q`MoLuHUJc5DAC;19~L>=Kufz

diff --git a/app/__pycache__/config.cpython-314.pyc b/app/__pycache__/config.cpython-314.pyc
deleted file mode 100644
index 0de06ef9bbd6235e41f269bda2c4b3d4189f2239..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 11710
zcmdryZFC#QaeKhwg9P{mkl+_cfCNdA5<!q6B}$a6Sd=X5lcJ9n+{C015IB;MKmgi1
zNFr;$;<;%nzov<tFUw7nQhjM7HSUY@k{?O`)NY#B=9hV*BCuEW)oI<A=YK?~KH2?I
zcV_Pn1Swihn)XkZkAt1r*}b{l*_qkd+f`XnPN2NfICJ59&4m0LB1W<3mGvA{a^yS_
zxD!OiU(*ThxJfo0H_K)p;^q_laf@s@Zk4SJ=TF#<+hx0t)R8tKSn7#joiYuXwejRK
zMzsOeK2=tvmJ6KZ5S&68(97#dvO3AhPQg)6<O+ccke-V7vHMt$Np+4!C2>NO<wR;$
zQe8&vNIEr>m_3?^$-rYjn~@XgR5YoY52qGxbE<7Zlq8_UG$Ax-(~<QrafC$S9jA!Q
z2}CxXx5;J?Ny8h<ykL?of?2i-ylfLJvK{`*056AshhPO6Z6Kjdt`zKYl~5*E3*~YR
zw7CR_>=vAItxzG?36-)(sFLf2YPmtEksAe<+%(lZzOPgmt=>k?`-eapEOHBs(<-=S
z-}zSAFVxCyLY>?$c;tXkFLwwHa;MNJcL`1M4ruQ_Z<2eacEWtu31*>LunFE_ULR*y
zm<)143(TrrXvMjed#8eo=3_KJ(uOo<BKPTSZLF<*Q(H)H3$V71O>O;pTPJJl+SE3n
zx9wnU-J9BWGf8@|MIID(%0poy?-9(f=DSq8vAT;b(xqfV7Dqy%P+uq>m7}3}I+mRm
zQ?k?-pH{8ujF^fh#uh!YcvTLH^V4EH4hj++3`+CSWOC6ln~{S<>EL`Kl~{D`?%zEW
z?B5sc9|&fscsU_nQHffXOvj?hxwIrF4*Lk;#V0IQ>d%zq=q!x7Xw~o%dYVRO#YKnC
zmrTz}i>^>sqM_+TDkOvQi8LCM7wra3wG8z4pBY_j&%|eXGpX6$3mN<uXM5$u%uMg}
ze5O~vD)-{ssFvdsyZ7u>9dYrpm`rEzrH?Hho|EMaOh-}Zk-`4{{@%x^`%0(-yNCPw
z;cs9Bsf!gwymw?|K;=)29Xp%I9U>%Ay@QbFdw8`n274_ci76=|CoYSsT})k$%p{Vc
zT8*{DY${E~h&Z2-7u0g3z--PWuEtP<buA{Sg}C?EI{+NyawJU7oA!N<kT_7i<T-AR
z6SxWPMX)P^Ib?!$=ifI0tLlmvs~?HP(kV6-Rw~L_ni}ijs1<l%t6OK%bUrGp6~L5?
zN>UswKqMmJ2<<ubQs^AaycD_+O{EeS`>2>m%|&TEbktCu(2;apycz<9*c<F04({F?
znic27An<|O1gAwB1nm)n^FR=T7orPvE?Vq-CYpjpr=e&j69NIj{PblORA(dt4@=8Y
zS&T%~I^!MsO3C9Oodh~YKFE<rgtwgL3Jl(Mud&}dwHm$-EF^~SVic^yyxG??P{|Pi
zW)lb7TK2>2$2)O;p}n-f&NyyZ_mYl=1rWG>#|iXH;i|DBz^dSXk6EqC&~!W-L+cuu
zhpAJ`Hwa^(G1W*+f{uvExCELbs}9hM1Wl(<ZB<J$eMO|S9fpOq<0UaULmL5M>($jo
zTcEC1X=7wyCq`hq%4$P#61TLlc^rg3IkILY&X%R4`HuZc$Nqbc{i}f;`M{tO7|aLu
zD}nthfdfB$NeP^~cJ#i}UoaEr2=zn1O`59DEm_BwCuwR3Jko6wZ2&gf1fYjg`D8)@
z&qKkB66yt@Yan|g+KN<M?-#J89spZ-&N2ZDkMK4uIR0)31w5?aLa_zE0TtXl+b#Ea
zajCRU2nAv|l4^2}%bNN~)^yBI$fcSmE&jOS6gLJUhGLAFPQk*JkyaQf15=PS`B*JM
zz{7IAu=+08EU>`w2$(H28tIgzTBHnEZupUDB15}iT$m=XFGMv1m$vYJZQ<)5?;gQ<
zRsBT;_!y2bj3<o%$dPwLgZa=gC3GwwI<16G|HH(+&~qzQf)aY}mihIv*UG-^$XB;1
z)ou5y13*)%gk`(%;oT}h!kPYN*I^sKNhxq<@qfJ^z>|~$Oc>XT+MpLy61ocz(3D>I
zQOz&|pR6G-0;_~tq-)3&(~v3d=Fn~PpYKO4nR=3zya_#jV=dYFNm_!-hh-LK#!F7Y
zTZg$PX%%P=Ou=@VL;GMDuq)13no5y0O@M!u=l~GuZfwz2#j3a97VXltrKYrtrYB8B
zJ$bC{Gtg5y001;3IFJt>Qi6x_!J|s>=vx!_f+tq0CY9icrM>S={&e!4^IxgFZhhVP
zn)7RwKvb$Gm+h0FB9rSFEq}BAa1H<0wE+H?^@I+?=%1`05qyyn1qm|+33Ipk+Y^6P
zh6)n?|EM4}GR;adm=^FiR~I6Q%r;tL0&1y-cpmGcsfn+sCfhTd$0^ozrL!mBc|hqr
zkncRKbRK>yaIf>&O4T`~^VkjgPWMl{-`V+<^6RG8?XTItRt`j^>fEyZ9O%k93USnL
z;9i*J0KZ~Rq<#gr5<`J&0WhOsv$PcmfSVKS=LtTg3&Mn7$66SkAj56H-#2`YVIkt+
z(Y<7{=vBfH><K(q^i6`Pw<HwVj0HZ%st9JovlXAx@jrjc)@PQ=YCH!*AB$=_Gdh+a
zJXmtmv!n0-*GC_H1Rk$qK6;f!#1Sd6D5{ohCL>aeljG8rggi%&!J-&O%#JJ(@B*8Z
z)V*nh$n*l77F2IhL$_(2#?^iq0GKj&ecs)vxI6RiU5b0xiaU7CzUpx29bU!Zz43hB
z(SFy_{=n_Ies#&b<huUyio5d`|1)>*E%|5e!DZ**YDHbXqE)GAy&>l-I__3<d>rqc
z_|M!U%g&MaaI7yswe0k7sFe}v<JM!Y(hrp<xyqtzgfJct!JlmO=7DQN!8wZ`?VSIO
z0Q=dH1h`m1i9izjI{M>}Q*emkI5<eaxeAVxk(qQdE>aK(bxOhk^k~%1n&Szo))W`T
zASIEvl0D<yDtErhr&Rft?Y<3xjHv;w(Wa&eCTaVr2@yO59WV(T#z=bIq}SO2sWiF(
zK642lUsAV})U8kGZ+k+Uy=08Cl6rYb-BD6^>U9&yRZ&8()a%>HUsb|aT~e<psk=(*
z?vi?KNxiP5?kTC)m(&~d`gU?Omhd&{b$pNJ61rEfn}Oa^LT@dp`%3D5y^iCwmDJly
z>VcAa2iC#Lbh1N*>O=*b#<O>pCRIl?fnM)&0u)rO)G{5BXeJT4C@!c~#astFk0sUe
z*j!ZB>y>aqO)f|YNylrWi&;3ZZyBO)6BSHXCJkOkZP-M{=Us-QG{p3(cT)>{UR=y1
z(+lj3*S@K>D4rB4;c>*~XnH;x!EB3aAel6kRgc~hOT)QaJ7=b%^P=jY>9nlxQngY~
z#OOGE9%c`TEDK{WIWP-jAeF@&Oe7PP=Tv7VoyjCc$}oBg`cn+>)pALUL5_h<ZRLe4
zG8|!xcv&<#3vsACH?KBFV=+kTMC9~EF$JfcOai7Aa!Xlw4DH0x+7XN(IE>>$a%nb_
z!~~970n3TW42VVM;b2q^sGi=?DK4N;@lsZV^RJwk7t>i;tppmn0+5X+M5%{ohLfW2
zWIjgar_<@=CmT|9#8L$qp%4Cmyh48Ns#Eykf`xEgp`0M%D>x9TCUq@uOnmi>!gm*H
zkl-SoMui_NxDlx(HMI&KDAXb1A$1K3zoSr(h?g`6ZVrAUsPKJ-79_M1Z^z9e-*`&l
zLj@la{KVI;@cRmFh_sVHm%{HX1Q6*UJ-rIwU+6?+CzGbVunUo1hBOy~i1d*bzrqI#
zAw-6VtLcrvS6dXmv#<vVdzmyl3&V))(_d*nA|ras0Ynb6mX5+xh>UWqsjqN^L-Z&|
z+#ZE*FFeE0lN_n7S9pKn6hlvQq|vMJqlGgJo#fbDgbGs(Jr6?_CoaNBpXErkTj9Nh
zC_|??(%z}?Jq0*Dz{BF4E{Vv{8IE|G6uzx6%g{MZlotyLhF;)EL$kv77A`V0qmA5L
zxWv%QnxL(PD-6BLk$N`N0z(%yx&4LTX6Q@WJ2(IGWki|70^f&9+p|}-M<TfAAbnLH
zLCcX%VjU7&m$K2M-cl8Tu!l-=5)xynbR<H53sv#c2=J&yUqmp8U<v_-)D({{^s@+}
z2&NHW=t|=VL<BPkW)a|?rgI1q2reMFh+t#0+O*9nsTJBj1Y;>hXGDr_nPSL5QwY)s
zw%L?4gAJDuPy`YJ83DR$)u|<$w9FpuMv@)OFvNHA0>wy}9z<{i!C3_70H`%3dA^x!
zDuy{g$VWmtFcFJHW!SybXe59PoW+b~OiU&t5m*5)jKQLhr?t!xo;WE2wsB!8apOYV
z*D#zr4Joe%f9@3gboS)NR+|TNXIDLe+{x9Z9l0@}?g}mQ4XX$nS3CAC^WN3&oy)v`
zwXc7f@50W3+^N<2W&rKMWxfe0?OlL0?S#SVeZ^V_dqi^xs15DxsZDLUGpntm%e-f;
zn$)-EJ-hCDcHJ6X@r2;v9o@iK=gpm1-O;nm`&R3r|EjkQWNUaacY3v@cbTt)M|pq)
zewutRl(%h}uU&2R!+@(z&AG9kyE{?5mercN)y9@pciqDZTdg&B`jHD$rCN$~%}K14
zk4%^}TQ@^>ja8wWMxENAPH{zQc!L@?sBloy2Y}j|OYiS54(fk&#td8JcM01hY%Ne{
ziv@KB%lb<Iq9n?d+#_Y!JrW#w;2y~l=HM2_g!dfm#>0#?cFzR|c4*-d$J;WvpRqEE
zl~LfP3@A26u`>$XkpaaHH%(<>PA(6V1Dx!D;K8X@AJyXqBT`)q88yEQVSzuHj>aXw
zrqWpoI+;%SXTTHtjeuiQP6OP;uO86f))JzsDLze6S)b^O)RwK1Zpx42PTUChZI&K9
z$o9N3%zoH9Y)Xow7j$5_j}`@^YqUFBnJ|aRXJLupV$3AKg<gmYn?^aF_~2~0L+6Rt
z>WOk3XG;ll#u?BDy&(+_|B$XKix@W{W495vNLhC7i?D<>Y;Jc1r#gaj8!_e<oHjm^
z{vH6;dhtq>!UblTZUw+bpeA*7_2#sl|A)xcxXm<SN*uVMS;7?A2RZW4O3Er<wcWKh
zDE8e;L(BHvxAxw(?|uX+@yb<ab>7*bI6Ibv`_696d{=4{h({Cr$MS0}H2oa(_~a#~
zzYlD<CpH$c+0s`a0B+8*pT`%{4(xDlbFSY9iQvu|cFqZMoXbF>dHaMz*kmlvlM>e%
zbJz??a6W4aVG<lJ94;Ll$7gLRVSXG<?UpiaItA%AOkQRz89r<ouh_x>D7phI)#TW_
zgj@mX>Fi_`BLR59I)pO}#ZWmtaSAsGlQmjPDObkcOeWn1J#3!@1=Y&dapHcK_`n+l
zR$j1%ZR2>MvZWaE3H*L&F>c*`<P<pUO;5rDGb@ih31o#tPRWxdF$u{^*k-Ik$;hz$
zn@08;+`q!ecn!qLwj+NZ(#^KwOftE`)^WUE*;0g}b`-f`O*X#;JOMNg3(Us5gq-?U
zZLRSJTEF1n6U0v@{m6r5vR(TnWYA<KaTkv0E18*3Tc0l(vxPjvopQpRDmh?oAqlR>
zve<kYOoLz2KVjHxe{XZl!$1h8AMnP&y6}*u6jg3OH7`Ku?^3NSGLbY+3mg>af@+4F
z5!H+*Ld)f764)(pT|O_Vwz;T;VTWp)6(I<LN_j$p9J?G%#YCEgS5YC1VlC`)h8{zb
zWd_WbOwVAwJdEQ#LundLpNEYIhT%PBB^Is1a5ZP}3J}sN(|G@<eWrnrz?xcNkRo_d
zOaB-iK)=qOg0e-J=u#OFy1M*Y(X8R;k*DKvYxua8WhSQ{EL)EJyL}J1{`$t(=U$t;
z@$!l%nD-1Qo`Dt5;5A3VN{(`8xs`^qZy)%f?N6KEXkMEA_WaHHyN!cyAGlVr+;A4U
zHh1Tnf=W~HepBexlh=+ssPbHw^Hpv4s@mRb=~#Mxr6qK|e9h#n>3dM$wzTujc)ot{
zZvEhc2Hz5YYtMHN+&=J~r<M<nE4#+;H$3;CF|c&<2j+a^(A~x%#`5Oit?YM3?l<h!
znk@Ooy>}b;YE66Y)P3jR{f2#D!@X^{%-?n1cHa3+zWeFB-A_O829}QA%HH?x0c+lK
zm|Jfq&HW$#(ncD`xep$8kjB8b#+K^`9}*7as%^e;bSay!4KCLP*UUiqPiYTK<zM=q
z;rO>dHTaCx^tVI10RFfQ;onu-5PCcagHC`yv9>(ZZTZO#4&bKPzzU<_##!$Luzg0$
zxYoy;F~JPb6vEFsc<tg8z2L_B_n0XfWbIUoV?Qx`V7}!I;F54Jf(Lv=DlBk?3gG7O
z8vc9_ZqniBN00)CAI;OCe>I9OzH_~uX-d)4@E_}Gc*DkR=V`!mZ0Ao*c#~f22O-MV
zV%X)3C2TQllx9&Ti(V#NOm~MZDVs6EnT{~uM#84;_yp6i?r&gRZoKGWjJ{w$ErwL=
zeT%+kgTs&v!XCD0i)|Cp%c4K(2jelD6b<v`m(#`Ak$wrf!@3nW^;l0ieI01bP|+Ju
zgU>Y*Ng2KXKpwC%c!Jc{oEZUgG#*#2vGhD7MtZCpwq;{T`YjyqF91lmgk4bl`h8%v
z1Oh@vrWkLjZI9WDtt?E3W?&%0Sh(w6?|!ZO##1Y<p1iAHarNJ6$q$Sw1EX)nlz|f~
zu9JD!xZ)aLaS7LKzi_x7czsKjub;g3>>r)^xhHVT{DZ+e+3%0s^BlVN?5eZ!i^pC)
zc76EsXWzA#f3fV<vM)F^Jp_&WzmL3b;S`~_X1l{`IRe*&2yb4|el<~aH32q4id*8(
z0QtD2`F39#7^(un59H8T@Dm7|w!04&iqUjY*};au4KjQn0be#0m7B@KzzZ%={|yHX
z0WSt(+Q%r1otjD}lm1wiQuw~a&`POPEmbapU#37(L;E&}{t1i>i9R_>W$lvY4iGj4
z=jH7C6_x~19a>%UOlU$jG_IDZ6FA;YTGzR~)@@;9>+>lX4nAG6lkVPczkKuM{EiW2
z$H@I12Nh@F+R0USOWxhBxVvw;^X}k1cW|}3HecPTRCg{--?@0ddUV}Fx}Rd}NMD74
z=mfrolU~O96$DoiEC5h#@bYQMMNm9dP;{mgUz+|1!S5i*0VsY%rKclI^b6SJ1;DPX
zp4O8RuOJlxCQzh(06xT|#6R-;AMtQb`wu*<J#s;yzlPENqY<#c%o;yxMGbt!^l*(q
zO?n(^lXJmoX3hol2?pNoi?K;)(TZT2G#PdF{g}DL!C*WKCJBu*vqF$!!LXI3SlYGF
z0(6hCFLb_-4cGzwiIb}<Ao$7)Yxwh~oncH~CMvM8qKnF}e+Ez#wW!%(z#-Jc&CW^~
z&W^)679blU&wyJ1zT(-_*i90*!2@2?v^e~%Sfb!Y2-oXR>)*O27ufM0%=2R*CHh+M
zusF|f;50%o%`E>75KHg7oDe5&u)GbeY+mrSU|!0Jz5GFyZ)x|vs;*^w7o0rpHFs?d
z4{E(%K6$O|Jx48Ma<oYT{$jz`hV|sx2Ndwt8YgK7Y13l6Ac8oMoDlu9$@FwIxv_<f
zH^h(q-hu%%CHG?u&j)HH#jYEo{uqcTE(;&o2VpgJubg1QXj`L_E@Ho$%tAbx!gO45
zB2d?~q@Pt@$iNJ0iFLGyaIJ7D8BNCK#QB9j_|$MimDqG@lHp@1K7Xr>_Jdmb^bq}f
zXvJxeo(2Gs7{~n+sr&^w^e@E!&!qh!Kg)6cYcD+{`1?>WAL5R1*RMV#_`5c0A{8~c
QvPV29;zO^Qt79+q-_u6x9{>OV

diff --git a/app/middleware/__pycache__/__init__.cpython-314.pyc b/app/middleware/__pycache__/__init__.cpython-314.pyc
deleted file mode 100644
index 5b6db50eba5853fa28727897aace694f114058d4..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 225
zcmdPq<K<!i0ygoqED<367{q}AMkwPm8<5e!5X7L&pvmaBlA(wR$o~wIyj7<kTAW%`
zte=&bmzSBXSCpEWmyuYMqVJNQT$-DjS5mC+oS%|fp>JehWTtCiu4`nbpPrhLstZ(?
zo0y}Ulv<>ln3I#Ln+p_3)y+z*EXqiPYxYgdOH5BK(oZZX(9g|GNy$kqPb^B+kB`sH
o%PfhH*DI*J#bJ}1pHiBWYFESxbPmYD#UREfW=2NFB4!{90CE{StpET3

diff --git a/app/middleware/__pycache__/rate_limit_middleware.cpython-314.pyc b/app/middleware/__pycache__/rate_limit_middleware.cpython-314.pyc
deleted file mode 100644
index 7afc78f243c83acd179ed3d5e9f28636b19cd782..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 11744
zcmcIKYiwKBdFS$Z`H)CGsW&OnmO|@6Te4-z56O0HS&C&@xppW!QN_~amBg4L*?TW*
zTV4=v=`bbDmc-s>bp=)j?JyZ_S7ljI2N=+FO9Kxm1~HOC=GH+BEPwn@jy$LtI&|N6
zE-y(bbnFe-5%lrg@4V0X&i6WBYjKg8Kzh$H`C>;CA^(9NYSL#i>pz0bRl*U8Oc0J4
zVk8EBHA9*~t)v~)NxDJ3q#ra$1}Bzlhm3=)#L~QO$TVn{%rvhbvJ6@!E6p2*iUy0N
zVwyJ&*#_;Bo#vUL5~&3GV24Tv%cL?VsUVGnGdT!n{zma`tuh~}oMJ72weHqra1|Wm
zCZ3|%GiELz@vcaCCM<=cQ?8kCC=}r@1_a(U853Ls0Z}?UI^>dKuDHN|n~zGa^Fjg|
zKw*$~1tcjDydb&)(U1$P1<of#zQa7?(aE}_;h-e5LlQ3p&PRBeJr$S2v1lM7>(3<O
z5#GbdmJmM~NJOL%)V#&WMvnhhf)^zyu|9M9)Ck9m@mN&Enx#hqB0qTM%;?GN^Z;9f
z82|3hUjLa>r~D@mkDT*!$DV!e*y%H;p;R{<3tk9jj)eZ`G9T-I37G&1FjvVph{V7-
zX(oy#Z6%2@93$ztVjt7Ra2f}Rus#AgE#@Nj2qWn^or6dQTCPVdX8>rIj1*&}7?xsK
zih+}WI%bM7Q4E{{V5}5l=87bXkCCiCvY(NP;5=+{86L+lo<?q|v;Y3+Lz1Qgl1mck
zDG18`iLN*=xQ0euflx@`MX|$d9^eB~0`mLJ?XFQ?Xoo@}|JVV2G(0)U3wXek7DRgd
zp)8V*hT^esR1%@;=}0()v~n>V4aF{grKiIQDK-<3!a-Ls!Uv*>xGOg4ibX;$=v)Z%
zqB+RG{^LKUV)#cwU7rAO0FJ~*CNw?YAtVIYI`S+t4To}?c>yjEg<1-A6zVB70K^(t
zu5GJ<ZZau9?=`^o8t)_d%S9Qw^V5~e#mYMTA|H%JL!xYn#HPa0Okuh5v89SVvob&I
z2rqmah`K})5~9S1{Ba?6>9Ri@7vT<Qp;$nw6L5vHR+I#fMmE6Rf&Gz-{Qh7hAc{!-
ze!qxQYq~0b*ZZ8v3!?YMKr|Y@&>`^Q=yX5`d5^||i5b{I(ff2P#9#7u?(FPt-?_KF
zv)enxPxI|iZzd3FKM$uHh(!4I89?yuF9t3P(}8T`lYwYpiWj_rc-))2>0YD-Wxf6!
zwj+L7w)*`rjhKYxe%V!kHaqfbRKpTP4#4lOk`3b0_dcM&K&oojjQGit>bf-(=FFtB
zdd-44D{(fh6=ANJ)HbZyFlQ%q+uk0$b^7m4uGV%wC;`+u^h$y(!c0Ow4BN`C&jTqT
z;f$*#<TTvdZvr>=F}pKl<|JdTXomL@GPW~{2SU@>p{U9i$k=EUT4nIxj2hJZxJ}KS
zG45wtG9OcvK%Im$s-yTwG&{rbGPMmy93-y>l^<9(?oey&&SapyRmE|PkBnw}Q?aln
zGMeonhwajEn*U{eEyr>?&cx|C)~kn+i`3r6>(tz6gPP0zHsTB#bKh!CU4yz(*cZHV
z=Ac>ue{t7wU)Eg!;KWoWK*qCYqqcXGTg-?@Bj6#(x=2`*ZV>_JBh(^>JrD`ZoDT*1
z<c`8r8IFeGR&^YR#Dal{*asP<ejBtFaR;xG-&|OEeqv?BPrIG9!L0~;0|{x`OYi(_
zT@E4gQX=lfF2iugK*kBP6|^*zy_F!-Vu8@CRcRFV27xiFeTKdKCFIf4h~S2iJ(~OF
z@N@rwlBbJ8qVkl;dNBdaTW0;hS#bVB3E+iN1h{Vkwi7A<05jnwp%Opo4i#sZzdsmD
z0Fw}qj$qqB1j;s*cPm$1l#K!Lax@r@$(Eo1f`Ru-0r7%d4%~>cYd`R6e}-3kOtMbo
zBa^ZgSjHnKL+2rzGW-m9nF&U3&ZMjKz=Rz*p}Ma-E6P3Ihibq*9+neR@vFupTQy&{
z!q%tjcdW2A>4vrywl-bcyuwzcxAm;BjcM0TD81XbZE1UVYWsnu?FVi*EjJ#V)2*-#
z4-I7h0FxZ>FYo&%B5LoJS6v^N)4gt5V@XlNO<l^hGwIs7xGmLrBH4Lj$vK?1?pQdJ
zYCo84KX_Y8^`A}lpIvG@m$tfZo=sb8<_FW(`uR(17K6)-{nb4zB_?}{t^J6toj;nY
z+mo!@vs}0LW44FV6BTl>7@8~qUm?W0{vzCfCgKF*tIgwAqgm?D)Q2B>&$65;hga{%
zanLNWw@b`b?XcbqeU4}O)o3=CYu8BB8ybHEXW7sAnS>^x^=E5BpEz@x;MQk(lZqo`
zG|L%tICUI#rgn0S8GyEN&EtCWY4Sz(ll49DkI=Jr9PbHDFi*TLTM}UL>TF4>HXPR#
zUft&T_%<mQcJiG5IYUC*K@yq)xWX6V3<cj<MOz+s_UR@xZCQyzNDs_Rks2p}iH-TX
zG$Wc5E<#MCfh4qXLmc>Up<UiOk7iiMlhw@MPgQOyiq(m~ebPQya^jzqIX=mlTSocA
zqeo$ZE=~ab;OaS0@;FAdSe#gLjSwUJ4o4FjXJ&W8#6?<(I>Hp}cpV8tX+2Os{z0ps
z60%=gPr}R|ZJ6<BW{-fn8;*gB1xnFnMIm*eMhfa^hGVK~X}*m!!_UNo%dYdl(xr|O
zk45mpjstU!@O)fhzd9*A1F9CFg(d_jR%G1;{<0`*X9AZLmW?FmF$$enW(_6;RImNm
zP}YRwGOO}s*$gfGii#;~BvIBYOxy_Vnq4$0JaiX!^i)9}T7Y-&huY$C5V7}x-P|iK
zy<1v+qy1VtGQK@Y*Pi9l?v%BA$=ZFl*7<|pzv=z{{<-0MB^5WSZ&Y8e{=BAPUP?JT
zlg`eRb8phQciGvSs@eDEk-OWTS}0F>4kSGXZgZ=iLn+U(r03YO=lI9l2Itw&x93Vj
zslKsf-`Mi@v-9SAy$4gh!^z&^JKSpT=+d+2KJI<~p;mja=9Av%Zw)ORNjqCtojVuz
zz0dr-FX=q|P)q8cn&-ZMBH8==7g%jxm#S(_R<$l1S*`LevdOC6H7jv#Qzp3Bx$5j*
zyp(bt`q+6W4OmxK($%$iWYx9zHv5t5@Pi7neTZ4BA$6`)ZAY@UV?jvOc79yjnFd6i
zH(BRh)GXI^J#doR{Tq5xT6?Yf3nMAo`{jBm482hVm>bn^RsUWbh7J9b?E_uR-!lUh
zx`lSg{i@<f=|F@2Ut6jMs)|3*84+6c0Or^F4um~e`k~nhRX?mUV7|dJu+#LR#|)TF
zb`Y|9VCQ5VFZW~ZAjYc!<w`5qp|WhuP_k?gKu-~(pf#c5C{zJ}Jjzu8&7zEnq0ka4
zc|tvaGgyK;6^PvpV%JwcK=Ah18veXfM!yt^mM^7ns_<`J7l6R7f~GwRh^<MzsUgsG
z>mE_3knB4NydbU_bBz{|f4wkB=%q}51?1c)>K<DXr%`25T<g<jX9XFUm3A~M<8sY7
zt=eLO<nz$ctd^XsyE~J0;|ia2Mmn{BkUhHWj6jOPjC79~1&>}o+j30NDS@elfv@Bl
z{H{qMHlwn)4%wK9UWmpnMrUnj+XrF-_;x~k2y-&iHfuWD&henr4vl(@vO(!e)=kI2
zR7K@dHcs<_5ZI%#c8ZsP1I8m^`~gEg?$J}uCOnPxOrfyAgB=TetqAN}We`8)kU9eq
zG>B0UHX}b%H25Ou5L8Z_JGN>p#MU-dp@jM>bOPM0wex3vKkHlQd-M2>k+()t<t-nT
zx7@xwXIe88YelN6BU#n4V(CcNxqoo#d#993zO?i3a@~=+lb_k@(vEE@$Bv|9$3oY#
z!@J0=IyzI1o}{B^*|BfQzVBXT{f*dLu~eleS?O75U9Rk&JN}uiGVN%%@zPr_U4MDW
z-h9tiwZvBC6g}0D!Q-d57<K!{-{OqdLesTL@yWm2x_CgE7LG!1aNF@h3%HE}nvRdZ
z+LKUAbOWGQo7L}qKmfemwT3^p_PkT}PH?g6r~MTB)hmvdk6!VAfDBx5Qs|10;%c`f
z^+MRmfGeXIx#4Q$DMD%kU-n|ES0JMvfkNfeqTqK^^#H~$aIpYez(DT8>%q*rkMmNV
zYl^zF0xmJm2g8%#n!;`E01EDasmS`U#LtMbS(E~TBwh@|j%V#Ik4~X-q&~Sw71@4l
zFB=qBnTR`ul&uhUF;cCNb*acrkD}~c9ePkB(92b_W+2TwQrmlz+j~>n`;*)IKi+;g
zX>FW4nYNX^@$#!L&%cziwXfLP(~kOUMGy3(`3M6<Z!b^T8k4rho4Zr)?xeeW$=1EZ
zc7K&Vk$qA6oPf+@=@XpO=v(8^+s1JE47DPTV)7Z|77EtG85pQ^67VJn2LZ@>#ouO7
zG#!Pg^$JlVJyXh-b?0NT2z8o0p1$MIN_-jsrSC?)^8o?ywtEeK-YKI$@13SU|E3_5
z+*tDLcyeMgIrZY|#D%4^7go6lZKdp0K8+foV@m&LLGT64`3|N+HzCi!(vO|VHv?j3
zpwxWf2_0i9WN<-Eq^2#&$K>zzW^*8J7{{5?<THc2nn4${&tT7*aamDg920x~8N?@S
zSsfYA3QF2aad#JL#pcYmvG1Ust0td5f0gPe6HI=cxQWyHOkH4BCN$t~g1?-S4+7Jm
z-uuvToYR<()90^rv+&IyZGu5#Dg;A;z%+batFM%9+RM$e?b2ZFW?10KGM}N4820HW
zn650>LMK<@m3_UT!s*-@GsR<^?R$Ef4_<JECtcDsk79f}AiDTVL7oRWO>xL56t_HO
zW72dODr6k;9h)2tc(=RYf4vXD0Y-5(oFN0SSJXf)^)aWlNCO!@TMT?wbBSElJIRUi
zj41{@7mX*O5xSuMs#`i))3H<N$L~V`WUJ~9r~Hy~KbK4K^T?(HQ+$-a6c_sB?m~<&
zEave>K9uL6Q`^nL5bJILzeB@ijcA*SKWXXyo@c%(T~;w)mn_@9p(Q1i*YrPp`O9?_
z0Iyi;nd|0yMW2Rmn*J|4!8~p!g!9n1!tT`t3p}6%WZ-{{W%=`NDgETBz2EDd?@T+Y
z=f{%{56rv5aqY;DZC?u0Q2ETr{XanRXa+{WO6<XYs6mPM2mE`9889WoQ7Y?Y1Nh(I
z$iWmvYcj`Fg>T>|a&rOgJ=v!E0f9y&uwfAqL=`K87iBxxzVONh4o21Fw1C+lT=oYh
z;VnZ5K`$a|#MFI9jn6}hT(fOCI@$dM=Sx}ie?xb`qCa=k-ne}2^7Sio*0jUD>S&v@
z-YY73<J=qPzI*OoLsP0@SF&N(V$*8Fp2g|ahW@!z;KFk@J<Jfmx)umwooJoKbEi<^
zIah2gpSzo(nC>$ax0FKhw$dfL>mdsbmzp|PoA%$1tTsKf+;HMfV71}Yo0hbrcK(GW
z$5R__QtWu`+{O;*=;nd<n^rrIy&qWZ99(q|-r2R{9=_Moy(p}<?7O{dwdLULm+uIx
z{oK;&Gpqg2EuB5L+JA1T`S~|(H#HyG-5{__Tq%2V(%!saT?{O>^sLx>@0B%d^uh?r
z;{HoS8|>Y~?MJKh|I%ti*mbxDem<zO9QBws*?}l0kapKy0KQH_dl`_i8b!uF4Rr;S
z0*{xO*P)gOS6z{r-TJBr1i;%<^hXhbIJ}yyka-2|yg|6;0jt7L3R`=HL|h@I5BxkC
zby;QpQ+1S$7qlS@^~z~_&I0pStR)S2O0zwJS5%wt6$KGPMsZ`dq+AQI2uUHE@yXYy
zu7)z$W6)axdva`7A(f%f+QyFUMurNB_BWL$A_G)xXDv`p=hIpVr+@O9T1jWt?gZa%
z)^|H@S4Jct&Nw5y3z;~x&*;^1mfS0rFZ;^HS@W>j{<xw%tX|y{u9&lVb)0=~hNj>=
zzV^K0@N!qkQ~L;22~E^3X|tF1$@eB-?TDMk(bS@8G@DZ~=$ltfoXsjw%sP&a6q<Zi
zP{m59DrPF6ikZjj)tVDz?3sMkChL{9a9aG!DNK1goZWXHTj-UJv!W7{S3i3qkEma?
zx&B#;dV-IrUySvAtXuKX{@h50Kl^%>XV{<Tmo1%b8x>+f2u@J+8zpdohLM1r14nI6
z<AFefj#;A@Of!fmn6=R7HSkG9r0J2_S`<JT#VD&VfzJVzs9BvW7In#n5HAJ7ky#p7
zv8Af42YCk`iZUE6^Zu=NBYX?iH*4WgGPWN^$v9gAt`ev?jKLZ06wa3BqsC}B#B4=A
zj^k$n@RApul9`<zt!%+%Bt&?m3-PiM!VM%4&B8M<)c?O0_bA;(_GVX=3pwcsg+(xN
zgVP1{vtPn=g((E6#CYtoHX%d=w2y@`1kWOP9)SQr*2e`5gFtITK+dQbd|5?D(R(gn
z!9E1I8J?ni&l0-s{h(4xvMK8>%BelF8PpPLSn?ryXfg|dE;MjRh+>B^0J2F?4?<CJ
zkconVL)9Au85M_BmtFX!QZ1!2^tT|y6b;ottYvTPe|3M#Qk%5YrYy}#OY_akDa)>p
zEV~xRe(}OPFQoPyOYS*#r+#IR@004Ln|qh5TT^ANOV(CU9xAF+<;}_R=9?Fn%e~;i
zGLY)}jJNyv&raMrk!m}TY&)=Ab@0`qIX#rRTT)Hk$)@hKwc^H=x2~idElEeqLdCjP
z<2EN*=bU+iCDzK%ttCt4-bK^GmD}5HU;O2j_pYS+PbK?LE%l8ql|H*-<v_P8cipY)
zzE@ti)X<eKuU)F|OqVy_+`nejRhNQ$y`t$yT{o{RyP>S*CuIxI{kSGw{?t$03zI)?
zO_#SWoL)2Ot4kl+ipq=ENKsMo0~e`rt1FvhVWP#QiuRMvs&<~$h6A_9e)+<CFQg8h
zOddSB+AuPAD*ODfP`O&`og2Q}&{#<21C_42ZvOCm0-XKJReR@#Hf*3@!5i$Z-HXTG
zHP5jrwhEq$m#W*6Z2Mh6`rfV0A={H|$KBm~Z=2p7$su<p*<JT+jyc;GJVVOc9vnru
z0TTzc?e`*@JFgrr9c%(8KQn07{i^b52Yh_c&I}gmKIo`|{I3m%I|pt04|@)m!PlK4
z2BFO|=rrA_VIl7^(Z?dinbd*ANXb6;l8>6c@`w)x8hA|ZqxLPJT67;h5%=4G#sqYE
zj(CbOC?Fb`!9X0d-#-%zB_f!I5S?!&0+CFK&F`NK3!)T(;Gbv=ij96h#3(=@!4B+s
z7lO_AQ}|QB$rbQuPdTg~Li&X8c?j_np>;`Kh*FS;Yv|8LEh(R%Z=xv7Jue(mZju0o
zC7}Q_;vj%8|BPHE4>YWv-6)5Ep8v$qpf8Rx4*l+pPIzgc&kY;fz%fa^lN;sW!l9m<
zjR6J})D6^9*AP%0m3AG3Ub9K{udL&I0x(oIwC^`Gv=5#bA+*mxgZZ+7e4HLa_lU%D
z=rc6R_ADm^=_G+Wd$!j+$VV`ojz(%x>l=lIB1kX>E*y2KF_I{`;GGep93kdzB&f~^
zr-<qgFh6#E7&2GMm>pS@k{~cCqYi^WW%zQc3X?*Lb53amzXMq5_)o2La1Eo;5B~dD
zbTT|8vov@F<^u)PTvSRgfLDG>6mc%i&27pv5R!#ly>;CX)uqIrB%xSr0&tb2%PL=I
z)0K6vTkctkU+Yg>?QfiX_2j(!V{5|$EwR=rwnP4+k%VC|upMXzg>|vUyx5;E#*6y8
z4ytcSM;INv@6wo6&20OS5{MI?<u@w|8Se<6e<bjHtCfo(6f!TgO`*=ef-!)8vl~R8
z$C{g!efeuBEU+)?#-^cI1gi!11vs6_nqq4{Vry35d6Df~-1dvscUo82KDr|?0`9(m
zqbY}F5?;gncM-gf;Lj2K1p<0WacJQU1aAWHFv{gZ8p+(P>sW^1H}FqQ%ik$?OQUBW
zvU<I9qgbo&2gixNU%4z;*Hfts(F1weAYG0F^$K`eG&WI*Qp5v;pr9DU4+be2E3rk!
zNr(c5;3)d4D3@fuAT&`Cvm%x4ay8TuBD^H=9eF{7=OJ)cFk`>=Tsg9ugs5l(^kv-y
z9(Q<W!YNsCN|bxhWxDaR0Rd{(5cZ`ozCPiH@QHgO9tE(bWf<mxM#JdV4TQ0NMmm>C
x=cmN|DXIOG?D&-Qd`kBImK1+VY98vYXqc*{nzn}oGaG-Tw=w<e1OOf7e*h#nl}7*o

diff --git a/tests/__pycache__/test_runtime_configuration.cpython-314-pytest-9.1.1.pyc b/tests/__pycache__/test_runtime_configuration.cpython-314-pytest-9.1.1.pyc
deleted file mode 100644
index 7c5ef2bd3af6e77f4aeeb8eeefc13a43cb5351f3..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 6774
zcmeHM+i%<E6(=R?Vo{djxV4imndM8GsJ3pFZ)s<*PVD;9S~2KE+W=z(Eip1vUFeTg
z6Klv|3<FkRFZ~nzIKTD37_hy_wiX9Oitb?pwzs0`lb?3Z$BSssiC1(BFu=5QzVjXa
zzUvXcbAI%2q%*|8^_!~?AN|?KFa@mGm&a0G=0VwEe#r>z5~H)U^elSoo<3%g(|vt-
z$Ft;L4Cn!>dzXTX9eM}Vxuwt|uk(G3;Ok}du;2&TDFi@91a^>#2mgtK<l?LmT~jJ*
zS<XonSyQEg45r|ktm{g(q=DWoNV@!qQc?63rC2P>k0l}(SZjt@bimgO-<N+1;B52E
zs{1Y?;1XaBW7fL*UWM@p-g7aW;5!%N7Xod}I?jz=V^*oMd3KevDy~BH2<+Bq-aEC(
zFk5pstvjVZGR!q*-ERX|gSOT#`x)U<p3AaA*UtvCo-wO$At-dLQ!gWOHQdJAT0djY
z={A^3*H4WUv2pFPpUJah*8bWvEcTvicd3oHHFvueR_G8yt`(h)_t@hI{JB`KjZJw+
zoSkAA)hC37&b%+hp0N7YyX|?odVb5cwM&?_-|pEiH(4R_0jqjGV98zZV^14xYv4!k
z5A@^Z3qPLl*#F*-S8VUKOYoyF`9q(`?h8-8VNbr(_MokSC!_d8E`R@X^(}g?zJ1}v
zH|a$o0vSS&5uTg9KYM3(ZC-pJeA2k0ZIu;Wem|8;B~wL7mr}Z{>B-`T5xKWIpPOA0
zXIGcRkLQ2U2;z;zr}DNDzI#tt6YmL23ro4R#`R5IS2gIMSS!>ka#h!o@)HS@k7S`%
zG5Gmheo45OTba+@H$p0@73&3EsZ|ZHx}7$Hnw67abri*TBO+;<O!U}|Tk7^?Ttnkz
z?*1No?3td9vyCydkH)pouPh}tO`++ymc#{YNSZ9xNjda1Hf`P+k3-7Sn0QUQnkrW%
zMU+%Ugaw{%dHXdj3pJvNHKLT1swS2dO+VGx@F+O=<ZHTU?}=Ec6=mo^(ddeB-VwtO
zTO?OMBbf0RVfPA+(1+?adPS6o(Ipn7a#<v@N?_Yn$mfhO+!i<LN*S^~&G46NfY6L9
zqPAJ9mx~lCmddpasVr6@Pc%A2O?oI}4@P8``T+biPe_dz-QvR<sYtpgKT*q4RiYk@
zoZL2}>)$rRh@M(pJYevZS`{`~mGr_U!Su=Cah|5rGw#ZmyOK34<}@bUl_?EUROa0n
zy^P<b9>A|hOFfdRRprwpk(KJEM2e|7``4Me3!D5THJTosNTeqdqZ6r;yeTIDSCPtz
z4VffhALT>^407U;v`sc8r|}9by(AO*jA&Gfq+ZpPiYyjt)rU%{PUzMo)omk7J!AjA
zVYj8CXg?xyQ3RJNq*lcTM*K`7inLLdHG<h6u0~5hTD`+O=b}ek&py}l#jl$;XItDI
z$I$G(`G<E}+?ZoP#78Y|p>24&TW)dLzeRh0-`H9FE8l&@$M*SHlbdM{&6skZpE=^J
z&mq|Pm{WC>&!-&qfSa*v&s^vh?a@KG6=?As2Oikx2bx@Z_YoEQeENv9K8IYo$qzVH
zN5O$C$N`tOYtLNh7WU_W+zK?Hqu$u(Z#22(=6g%c_%bT-<$Zqnh_gP2VBv2#RY$?W
zEXV=3Y}cN-&@I}RgK{g-f{s17&kr`a;a%Mn{O}QHeGa+dCO_y@9R&xnAP3yAU3=z2
zx3E74<W}I$OZe5CB%GaKpcF0!a)((*0KHaiDry^`?04O_lX4XZUYgA_RR_P0zfF3z
zHGvg8lNNaqyaJbE1>dCA0!SHi7PZ<Ma8no63l!~co}(1)0X_nF&9kLpN`cNHTR_r$
zl%$QhNE(pEb%$uJo=JtyAZhK9E}L_3OPDcZ?~FZ1i=?&NolSR~c0kesLeNDY&&Ib&
z8dAFd{yJVoHqTp!(+<`V0s?s+-XV}e_*^V!?`_I=A}R6<okAq<KSeeJ>p+jq%hmH4
zbOXE=uzR*kAe&K>Y^q)$ocDz&Bu1ByJ2In_$u#_B8sX7&7L`mknMv=l2De$$^yBEy
z6Cc$GyecWmMbwVNncGvz@eE+n$;myB;V+aGIM0p1CLHz<ga{8)G(r{U6$`;<5)+!N
z5g_tb9bz{@_o8X)IO<A#GLX&~oVuM!=Lr6M_t?f7<`9q*n28T4R^s!DT&N`LqB$Q?
zQA1B}Ve2ep6zv3MDz5Ey5`3>=1VphaKNdx!ODA<rhxi16`^h%6)CfMyM(2s{$lG8e
z$kGY=f#AlIt0<5skRPGA24XKrMp4ISjr5}!0O1bnlkUoiuzuUjU(A4?$!Pe7#*Fc?
z7<m`F8K)5z0H#YsbJs;h6O~f6Mqm+ePlWhvEy>&satGSt{I!38*kN9D4IOoj9CVGe
z5+5FR&F(BeA4=^`?<}{t*o(;Z7ttT@=33G0^R9v2T=P=)JD)e|-&y!3#Dsf}c=MEp
zz&W_PaLA89RQ)nSg*&oheB?*mVbRn-f8ViTWVLEEvO;)hM`qB$xVzxk0BzSO+Ugs|
z`7+{w+zOz`Em&*;zRvZg!UMb`bixC?!-4R?eedw#y9f`q-{3&I2oLsVFzOo%59B=<
zlt4zpkOYWEulwvDi8--@q!5xsfv3ND{^7GmvMA_Dh(|sdM=^n75`=lmlPRp@YhyAE
z;*2xTBpqj+d3DV?@a*G`p5SB-`iWs*_^*Ng<h1*^6-~ow*BqK|UYhy8KJMaCBWTlK
z8mEk_qDh#OW~2pr3k2~offpb~hhxIfOl>sE89sem1!hL0U`SF`c&mX-&*bAnXlTdx
zB+x$@UIW1YRm8THhFD7NXzZab*<<L5YzDI6Pk{K>%km6a0ViQDtzn$}#>=wo*9`Mp
e<}XbD-<iIzn7MELJUjC3wIKV`?|MMcKK=zQmb<+G