fix : fixing the RESET button

main.py

@@ -40,11 +40,12 @@ except ImportError:
 ai = None
 p  = inflect.engine()
 
-MAX_CONCURRENT_INFERENCES = int(os.getenv("MAX_CONCURRENT_INFERENCES", "6"))
+MAX_CONCURRENT_INFERENCES = int(os.getenv("MAX_CONCURRENT_INFERENCES", "1"))  # InsightFace ONNX is NOT thread-safe
 _inference_sem: asyncio.Semaphore
 _pinecone_pool = OrderedDict()
 _POOL_MAX      = 64
 IDX_FACES      = "enterprise-faces"
+MAX_FILES_PER_UPLOAD = 20  # cap to prevent memory corruption on large batches
 IDX_OBJECTS    = "enterprise-objects"
 
 # ════════════════════════════════════════════════════════════════
@@ -297,6 +298,9 @@ async def upload_new_images(
         log("ERROR", "upload.missing_keys", user_id=user_id or "anonymous", ip=ip, mode=mode)
         raise HTTPException(400, "API Keys are missing. If you are a guest, the server is missing its DEFAULT_ secrets in Hugging Face.")
 
+    if len(files) > MAX_FILES_PER_UPLOAD:
+        raise HTTPException(400, f"Maximum {MAX_FILES_PER_UPLOAD} files per upload. Please split into smaller batches.")
+
     folder = standardize_category_name(folder_name)
     creds  = get_cloudinary_creds(actual_cld_url)
     if not creds.get("cloud_name"):
@@ -670,6 +674,34 @@ def _cld_remove_folder(folder: str, creds: dict):
             api_key=creds["api_key"], api_secret=creds["api_secret"], cloud_name=creds["cloud_name"])
     except Exception: pass
 
+def _cld_delete_all_paginated(creds: dict):
+    """Delete ALL Cloudinary resources in batches of 100 until none left."""
+    deleted = 0
+    while True:
+        try:
+            res = cloudinary.api.resources(
+                type="upload", max_results=100,
+                api_key=creds["api_key"], api_secret=creds["api_secret"],
+                cloud_name=creds["cloud_name"],
+            )
+            resources = res.get("resources", [])
+            if not resources:
+                break
+            public_ids = [r["public_id"] for r in resources]
+            cloudinary.api.delete_resources(
+                public_ids,
+                api_key=creds["api_key"], api_secret=creds["api_secret"],
+                cloud_name=creds["cloud_name"],
+            )
+            deleted += len(public_ids)
+            print(f"🗑️  Deleted {deleted} resources so far...")
+            if not res.get("next_cursor"):
+                break
+        except Exception as e:
+            print(f"Cloudinary batch delete error: {e}")
+            break
+    return deleted
+
 @app.post("/api/delete-folder")
 async def delete_folder(
     request:             Request,
@@ -736,20 +768,26 @@ async def reset_database(
     creds = get_cloudinary_creds(user_cloudinary_url)
     if not creds.get("cloud_name"): raise HTTPException(400, "Invalid Cloudinary URL.")
 
+    # ── Cloudinary: paginated delete ALL resources then folders ────
     try:
-        await asyncio.to_thread(lambda: cloudinary.api.delete_all_resources(
-            api_key=creds["api_key"], api_secret=creds["api_secret"], cloud_name=creds["cloud_name"]))
+        deleted = await asyncio.to_thread(_cld_delete_all_paginated, creds)
+        _log_fn("INFO", f"Cloudinary: deleted {deleted} resources")
     except Exception as e:
         _log_fn("WARNING", f"Cloudinary wipe: {e}")
 
-    # Delete Cloudinary folders too
     try:
         folders_res = await asyncio.to_thread(_cld_root_folders, creds)
-        for folder in folders_res.get("folders", []):
-            await asyncio.to_thread(_cld_remove_folder, folder["name"], creds)
+        # Delete all folders in parallel
+        folder_tasks = [
+            asyncio.to_thread(_cld_remove_folder, f["name"], creds)
+            for f in folders_res.get("folders", [])
+        ]
+        if folder_tasks:
+            await asyncio.gather(*folder_tasks, return_exceptions=True)
     except Exception as e:
         _log_fn("WARNING", f"Cloudinary folder cleanup: {e}")
 
+    # ── Pinecone: delete both indexes + recreate ─────────────────
     try:
         pc       = _get_pinecone(user_pinecone_key)
         existing = {idx.name for idx in await asyncio.to_thread(pc.list_indexes)}
@@ -757,7 +795,7 @@ async def reset_database(
         if IDX_OBJECTS in existing: tasks.append(asyncio.to_thread(pc.delete_index, IDX_OBJECTS))
         if IDX_FACES   in existing: tasks.append(asyncio.to_thread(pc.delete_index, IDX_FACES))
         if tasks: await asyncio.gather(*tasks)
-        await asyncio.sleep(2)
+        await asyncio.sleep(3)  # wait for Pinecone to fully delete
         await asyncio.gather(
             asyncio.to_thread(pc.create_index, name=IDX_OBJECTS, dimension=1536, metric="cosine",
                 spec=ServerlessSpec(cloud="aws", region="us-east-1")),
@@ -797,20 +835,26 @@ async def delete_account(
         raise HTTPException(403, "Account deletion is not allowed on the shared demo database.")
 
     creds = get_cloudinary_creds(user_cloudinary_url)
+
+    # ── Cloudinary: paginated delete ALL resources then folders ────
     try:
-        await asyncio.to_thread(lambda: cloudinary.api.delete_all_resources(
-            api_key=creds["api_key"], api_secret=creds["api_secret"], cloud_name=creds["cloud_name"]))
+        deleted = await asyncio.to_thread(_cld_delete_all_paginated, creds)
+        _log_fn("INFO", f"Account delete Cloudinary: {deleted} resources removed")
     except Exception as e:
         _log_fn("WARNING", f"Account delete Cloudinary: {e}")
 
-    # Delete Cloudinary folders
     try:
         folders_res = await asyncio.to_thread(_cld_root_folders, creds)
-        for folder in folders_res.get("folders", []):
-            await asyncio.to_thread(_cld_remove_folder, folder["name"], creds)
+        folder_tasks = [
+            asyncio.to_thread(_cld_remove_folder, f["name"], creds)
+            for f in folders_res.get("folders", [])
+        ]
+        if folder_tasks:
+            await asyncio.gather(*folder_tasks, return_exceptions=True)
     except Exception as e:
         _log_fn("WARNING", f"Account delete Cloudinary folders: {e}")
 
+    # ── Pinecone: delete both indexes ────────────────────────────
     try:
         pc       = _get_pinecone(user_pinecone_key)
         existing = {idx.name for idx in await asyncio.to_thread(pc.list_indexes)}