WIP: Bound request admission and handler resources #10

Closed
clawlter wants to merge 4 commits from audit/resource-bounds into main
Owner

Remediates resource-exhaustion findings by bounding request/upstream/response bytes, header/body read phases, request handlers, expensive work, crawl graph size, and path-regex complexity. Overload returns 429 while health checks retain a reserved handler slot; oversized request bodies return 413; expected disconnect write failures are suppressed.

Verification:

  • env -u PYTHONPATH uv run --with-requirements requirements-dev.txt pytest -q (30 passed)
  • env -u PYTHONPATH uv run --with-requirements requirements-dev.txt ruff check . (passed)
  • git diff --check (passed)

Kanban: t_3cb02522

Remediates resource-exhaustion findings by bounding request/upstream/response bytes, header/body read phases, request handlers, expensive work, crawl graph size, and path-regex complexity. Overload returns 429 while health checks retain a reserved handler slot; oversized request bodies return 413; expected disconnect write failures are suppressed. Verification: - env -u PYTHONPATH uv run --with-requirements requirements-dev.txt pytest -q (30 passed) - env -u PYTHONPATH uv run --with-requirements requirements-dev.txt ruff check . (passed) - git diff --check (passed) Kanban: t_3cb02522
Harden shim resource limits
Some checks failed
CI / Validate formatting, linting, and tests (pull_request) Failing after 1m12s
2874f13b5c
clawlter force-pushed audit/resource-bounds from 2874f13b5c
Some checks failed
CI / Validate formatting, linting, and tests (pull_request) Failing after 1m12s
to 1c324f6a20
All checks were successful
CI / Validate formatting, linting, and tests (pull_request) Successful in 1m37s
2026-07-11 20:39:26 -04:00
Compare
Fix health capacity and regex compatibility
All checks were successful
CI / Validate formatting, linting, and tests (pull_request) Successful in 2m49s
b3c5fa5173
Reject overlapping regex repetition chains
Some checks failed
CI / Validate formatting, linting, and tests (pull_request) Has been cancelled
86e8a67dc2
Track repetitions through regex groups
All checks were successful
CI / Validate formatting, linting, and tests (pull_request) Successful in 16m14s
d3cafd4178
Author
Owner

Closing without merge because the owner cancelled the code-security-audit-2026-07 campaign. This does not revert previously merged work.

Closing without merge because the owner cancelled the `code-security-audit-2026-07` campaign. This does not revert previously merged work.
clawlter closed this pull request 2026-07-14 08:15:29 -04:00
All checks were successful
CI / Validate formatting, linting, and tests (pull_request) Successful in 16m14s
Required
Details

Pull request closed

Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
clawlter/camofox-firecrawl-shim!10
No description provided.