Update main.py

main.py

@@ -435,8 +435,8 @@ def get_leads():
 @with_db_retry
 def object_detail(object_id: int):
     with cursor() as cur:
-        # CORRECTED: Fetch object by ID regardless of image_url presence
-        cur.execute("SELECT *, image_url FROM objects WHERE object_id=%s", (object_id,))
+        # Enforce that object must have an image_url to be seen
+        cur.execute("SELECT *, image_url FROM objects WHERE object_id=%s AND image_url IS NOT NULL AND image_url != ''", (object_id,))
         obj = cur.fetchone()
         if not obj:
             return jsonify({"ok": False, "error": "not_found"}), 404
@@ -455,8 +455,8 @@ def object_detail(object_id: int):
 @with_db_retry
 def graph(object_id: int):
     with cursor() as cur:
-        # CORRECTED: Fetch object by ID regardless of image_url presence
-        cur.execute("SELECT object_id, source, title FROM objects WHERE object_id=%s", (object_id,))
+        # Enforce that object must have an image_url to be seen
+        cur.execute("SELECT object_id, source, title FROM objects WHERE object_id=%s AND image_url IS NOT NULL AND image_url != ''", (object_id,))
         obj = cur.fetchone()
         if not obj:
             return jsonify({"ok": False, "error": "not_found"}), 404
@@ -471,15 +471,18 @@ def graph(object_id: int):
 @with_db_retry
 def timeline(object_id: int):
     with cursor() as cur:
-        # CORRECTED: Removed the preliminary check that was causing 404s.
-        # This endpoint will now return timeline items for any valid object_id.
+        # First, check if the object exists AND has an image. This enforces the rule.
+        cur.execute("SELECT object_id FROM objects WHERE object_id=%s AND image_url IS NOT NULL AND image_url != ''", (object_id,))
+        if not cur.fetchone():
+            return jsonify({"ok": False, "error": "not_found"}), 404
+            
+        # If the check passes, proceed to get its data
         cur.execute("SELECT seq, sentence FROM provenance_sentences WHERE object_id=%s ORDER BY seq", (object_id,))
         sents = cur.fetchall()
         cur.execute("""SELECT event_type, date_from, date_to, place, actor, source_ref
     FROM provenance_events WHERE object_id=%s
     ORDER BY COALESCE(date_from,'0001-01-01')""", (object_id,))
         events = cur.fetchall()
-        
         items = build_timeline_from_events_and_sentences(events, sents)
     return jsonify({"ok": True, "items": items})
 
@@ -558,7 +561,7 @@ def similar_search():
             rows = cur.fetchall()
         return jsonify({"ok": True, "device": _DEVICE_INFO, "query": text, "data": rows,
                         "meta": {"limit": limit, "candidates": candidates, "source": source_filter or None}})
-    except OperationalError as e:
+    except OperationalError as.e:
         # TiDB OOM (1105) → retry with smaller candidate set automatically
         if e.args and e.args[0] == 1105 and candidates > max(100, limit * 4):
             smaller = max(100, limit * 4)
@@ -603,7 +606,8 @@ def vocab():
 def explain_object(object_id: int):
     """Generate a concise, policy-aware research note for an object."""
     with cursor() as cur:
-        cur.execute("SELECT object_id, source, title, creator, date_display, risk_score FROM objects WHERE object_id=%s", (object_id,))
+        # Enforce that object must have an image_url to be seen
+        cur.execute("SELECT object_id, source, title, creator, date_display, risk_score FROM objects WHERE object_id=%s AND image_url IS NOT NULL AND image_url != ''", (object_id,))
         obj = cur.fetchone()
         if not obj:
             return jsonify({"ok": False, "error": "not_found"}), 404