Skip to content

v2.55.4

Choose a tag to compare

View all tags
@m-aebrer m-aebrer released this 11 Aug 18:11
· 32 commits to master since this release
v2.55.4
d7332cf
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Bounded dashboard fleet and session inventory payloads

Fleet, session-inventory, and recovery responses no longer serialize internal session-search text to the browser.

What changed

  • Explicit wire projection. The dashboard server now constructs each on-disk session's browser DTO field by field instead of casting internal session objects, so allMessagesText, parentSessionPath, and any future internal fields can never reach browser JSON.
  • Bounded first-message previews. firstMessage is capped at 256 Unicode code points, truncated by code point so surrogate pairs are never split.
  • One boundary for every path. The shared projection feeds GET /api/fleet, GET /api/sessions, GET /api/resync, and memory-scope cwd inventory; missing-cwd filtering and the path/cwd values behind resume and deletion are unchanged.
  • Type-checked injection. The server's session-list injection is typed against the projection source rather than unknown[], so the production SessionManager.listAll() registration is compile-time checked.
  • Boxed payload growth. A many-session fixture with very large searchable transcripts proves encoded responses scale with session count × preview limit instead of transcript size; exact-shape tests cover all three endpoints, ISO timestamps, and the astral-Unicode cut point.

Previously an observed /api/fleet response encoded ~17.8 MB, dominated by ~16.4 MB of internal search text; it is now bounded by design.

Implemented in PR 451.

Assets 2
Loading