Hartmut 1833182e90 fix(security): harden input validation schemas and fix SSR sanitize bypass ...

- blueprint rolePresets: cap array at 100 items to prevent storage abuse
- notification CreateManagedNotification: add .max() on title (500),
  body (2000), type (100), entityType/entityId (200), link (1000),
  taskAction (200)
- settings: add .max() on all string config fields; add regex allowlist
  (/^[a-zA-Z0-9._-]+$/) on model name fields (geminiModel,
  azureDalleDeployment, azureOpenAiDeployment) to prevent path manipulation
- sanitizeHtml: fix SSR bypass — server-side branch now strips HTML tags
  instead of returning the raw string unchanged

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-09 21:38:16 +02:00

..

scripts

feat(platform): checkpoint current implementation state

2026-04-01 07:42:03 +02:00

src

fix(security): harden input validation schemas and fix SSR sanitize bypass

2026-04-09 21:38:16 +02:00

package.json

test(api): add assistant split regression runner

2026-04-01 00:51:23 +02:00

tsconfig.json

chore: full technical rename planarchy → capakraken

2026-03-27 13:18:09 +01:00

vitest.config.ts

feat: Sprint 2 — test coverage, Dependabot, coverage gates, E2E expansion

2026-03-19 21:29:58 +01:00