Kristoffer Dalby 0598db4f33 api/v2: bound every request body ...

huma gives RawBody no limit, and validates a whole body before
the handler runs. The token form is parsed before the secret check.

2026-10-27 21:32:34 +00:00

..

v1

db, state: keep the ephemeral flag a node was created with

2026-10-27 21:32:33 +00:00

v2

api/v2: bound every request body

2026-10-27 21:32:34 +00:00