mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-10-26 02:00:52 +01:00
Priya RamanandPaperclip
2215416898
Bound the pre-READY readiness buffer, apply the header allowlist on the host duplex forward path, derive the nested broker budgets from the forward budget, and remove a dead cleanup branch. - The readiness gate caps the pre-READY buffer at the codec frame-size bound plus one line of margin. Past the cap with no newline, the gate finishes with protocol contamination. The gate drops later bytes after it settles, so a failed handshake never grows the buffer. - The broker forward callback applies the host header allowlist next to the route check, so a frame header outside the allowlist never reaches the authenticated fetch. The sandbox-side filter stays a convenience. - The broker budgets derive the response budget and the gateway wait budget from the forward budget, so any forward budget keeps the nested order. The host constructs the broker inside the guarded region, so a construction throw closes the channel and selects the file bridge. - The channel-open catch block drops the dead `if (channel)` branch, because the open call is the last statement of the try. Co-authored-by: Paperclip <noreply@paperclip.ing>