fix(zapscript): bound ZapScript length and stop re-parsing every token - #1385

Merged

wizzomafizzo merged 14 commits into

mainfrom

fix/zapscript-parse-cost

Sep 2, 2026

Commits on Sep 2, 2026

fix(zapscript): reject ZapScript over a maximum length
wizzomafizzo
committed
36525ba
perf(api): redact run params only when debug logging is on
wizzomafizzo
committed
cf9d3c9
perf(zapscript): redact from a single parse, and only when one is needed
wizzomafizzo
committed
0b06278
test(service): stub the platform calls the scan benchmark reaches
wizzomafizzo
committed
a90f9a2
chore(deps): bump go-zapscript to v0.19.0
wizzomafizzo
committed
87f0f7d
fix(zapscript): redact a credential whatever case its argument key uses
wizzomafizzo
committed
121d6e1
fix(api): bound a mapping override in bytes, not runes
wizzomafizzo
committed
b5b9b8d
fix(service): bound a mapping override where it replaces the token text
wizzomafizzo
committed
9d3979c
fix(service): bound and redact a reader scan before it is logged
wizzomafizzo
committed
950df85
fix(api): report an over-long script as an invalid script
wizzomafizzo
committed
17b411c
fix(userdb): stop logging the switch ID a profile lookup missed
wizzomafizzo
committed
3405068
fix(readers): redact and bound the token text drivers log
wizzomafizzo
committed
d90638e
docs(api): document the ZapScript length limit
wizzomafizzo
committed
df80d44
fix(readers): only build the log text when debug logging is on
wizzomafizzo
committed
8a4984a