main · last commit
18 hours ago ·
8tmadfpi
spec-by6.1 GraphQL complexity limit on the /query surface
Lined Up
bd update spec-by6.1 --claim
bd close spec-by6.1
| Created by | Eugene Blikh |
| Owner | bigbes@gmail.com |
| Created | 2026-07-24T18:12:20Z |
| Updated | 2026-07-24T18:12:20Z |
spec.sr.ht authenticates on its own router rather than core-go's WithSchema, so nothing bounds query cost — no depth or complexity limit on /query. Low risk today: the surface is single-user and authenticated. Wire a limit if /query is ever widened beyond owner+agents. Carried over from spec-wcr item 6 (triaged 2026-07-24: a feature, not a latent bug).
spec-by6
— Phase 5: comments, webhooks, mutations, vector search
parent-child
open
Nothing depends on this issue.
spec-by6
— Phase 5: comments, webhooks, mutations, vector search
parent-child
open
spec-3vz
— Phase 4: review plane — approve/reject in a browser
blocks
closed
spec-ejq
— spec.sr.ht — reviewable document storage for humans and agents
parent-child
open
spec-zqb
— Phase 3: write plane — agents propose
blocks
closed
| id | spec-by6.1 |
| content_hash | 292b80b0c03e38b7b5d4de814769847496156234ce81eb532ca42f9c8322a01e |
| title | GraphQL complexity limit on the /query surface |
| description | spec.sr.ht authenticates on its own router rather than core-go's WithSchema, so nothing bounds query cost — no depth or complexity limit on /query. Low risk today: the surface is single-user and authenticated. Wire a limit if /query is ever widened beyond owner+agents. Carried over from spec-wcr item 6 (triaged 2026-07-24: a feature, not a latent bug). |
| design | |
| acceptance_criteria | |
| notes | |
| status | open |
| priority | 4 |
| issue_type | feature |
| assignee | NULL |
| estimated_minutes | NULL |
| created_at | 2026-07-24T18:12:20Z |
| created_by | Eugene Blikh |
| owner | bigbes@gmail.com |
| updated_at | 2026-07-24T18:12:20Z |
| closed_at | NULL |
| closed_by_session | |
| external_ref | NULL |
| spec_id | |
| compaction_level | 0 |
| compacted_at | NULL |
| compacted_at_commit | NULL |
| original_size | NULL |
| sender | |
| ephemeral | 0 |
| wisp_type | |
| pinned | 0 |
| is_template | 0 |
| mol_type | |
| work_type | |
| source_system | |
| metadata | �{} |
| source_repo | |
| close_reason | |
| event_kind | |
| actor | |
| target | |
| payload | |
| await_type | |
| await_id | |
| timeout_ns | 0 |
| waiters | |
| hook_bead | |
| role_bead | |
| agent_state | |
| last_activity | NULL |
| role_type | |
| rig | |
| due_at | NULL |
| defer_until | NULL |
| no_history | 0 |
| started_at | NULL |
| is_blocked | 0 |
| id | a7f6f9a8-2f19-52af-a66d-b7ea4f55f79f |
| issue_id | spec-by6.1 |
| type | parent-child |
| created_at | 2026-07-24T21:12:20Z |
| created_by | Eugene Blikh |
| metadata | �{} |
| thread_id | |
| depends_on_issue_id | spec-by6 |
| depends_on_wisp_id | NULL |
| depends_on_external | NULL |
| id | 019f9554-0976-7c29-971b-58c9a453838e |
| issue_id | spec-by6.1 |
| event_type | created |
| actor | Eugene Blikh |
| old_value | |
| new_value | |
| comment | NULL |
| created_at | 2026-07-24T21:12:20Z |
No comments.