Matt Miller 2015bbb54a fix(assets): cap cursors by encoded wire size, not just char count ... Char-count guards on value/id can still let multibyte or escape-heavy inputs blow past MAX_ENCODED_CURSOR_LENGTH once UTF-8 + escape expansion + base64url runs. A 512-character name of 'é' (2 bytes UTF-8) or '<' (serializes to the 6-byte '<' escape) passes the char check, mints a ~1500-byte cursor, then 400s when handed back on the next request. Compute the final encoded form and reject it before returning if it exceeds the wire cap. Adds regression tests for both inflation paths.		2026-05-21 14:41:17 -07:00
..
api	fix(assets): address ultrareview findings on cursor pagination	2026-05-21 14:29:27 -07:00
database	feat(assets): thread cursor through schemas, service, and query layer	2026-05-20 12:58:55 -07:00
services	fix(assets): cap cursors by encoded wire size, not just char count	2026-05-21 14:41:17 -07:00
helpers.py	refactor(assets): modular architecture + async two-phase scanner & background seeder (#12621)	2026-03-07 20:37:25 -05:00
scanner.py	feat(assets): register output files as assets after prompt execution (#12812)	2026-03-24 20:48:55 -07:00
seeder.py	feat(assets): register output files as assets after prompt execution (#12812)	2026-03-24 20:48:55 -07:00