Repository navigation
Kaeso 0.3.5
·
214 commits
to dev
since this release
Immutable
release. Only release title and notes can be modified.
Kaeso 0.3.5 lowers request body limits, bounds gateway memory, and tightens second-factor, SSO, invitation and project membership rules.
Highlights
- Lower request body limits. The model API accepts 8 MiB bodies by default instead of 32 MiB, so raise
body_limits.model_apifor large uploads. - Bounded gateway memory. Requests are counted before decoding and translation shares a memory budget set by
body_limits.in_flight, so one request can no longer exhaust memory. - Second-factor lockout. Wrong second-factor codes now count against the sign-in, and ten in a row stop authenticator codes until a recovery code or email reset.
- SSO start links need confirmation. An SSO start link no longer signs a browser in by itself when someone is already signed in, and it cannot replace that person's session.
- Spend budgets refuse unpriced options. Under a spend budget, requests using provider-side tools, MCP servers, search options or service tiers that Kaeso cannot price are refused.