feat(demo): server-side 8000-char (~2000 token) input limit on /api/demo

2026-05-07 02:35:29 -05:00
parent aedb14f86c
commit 7c4c0d9963
1 changed files with 4 additions and 0 deletions
@@ -1084,6 +1084,10 @@ fn handle_request_inner(method: String, path: String, body: String) -> String {
            if str_eq(msg, "") {
                return "{\"error\":\"message required\"}"
            }
+            // Input length guard: ~2000 tokens ≈ 8000 characters
+            if str_len(msg) > 8000 {
+                return "{\"error\":\"Message too long. Please keep your message under 8000 characters.\"}"
+            }
            // Rate limit: 10 chats per uid per day (UTC day, keyed by uid).
            // State key: "__rl_<uid>" → "<count>|<day_number>"
            // day_number = unix_timestamp / 86400 (integer UTC day)