b7bc526d50
#1000 was stale-fixed: BrainService::recall() validates filter input via the shared validator at line 489, which already bounds org, project, type, agent_id. forget() bounds id at line 499. These tests pin the safety claim explicitly: - project=129 chars rejected - agent_id=65 chars rejected - project="core" accepted (sanity) - project=128 chars accepted (boundary) Note: BrainList.php (separate MCP list path) still lacks explicit max lengths for project + agent_id — file outside this lane's allow- list. File a follow-up if that surface needs the same bounds. Co-authored-by: Codex <noreply@openai.com> Closes tasks.lthn.sh/view.php?id=1000 |
||
|---|---|---|
| .. | ||
| Feature | ||
| Fixtures | ||
| Unit | ||
| UseCase | ||
| views | ||
| .DS_Store | ||
| Pest.php | ||
| TestCase.php | ||