Kristoffer Dalby 2e837a9072 api/v2: bound every request body ...

huma gives RawBody no limit, and validates a whole body before
the handler runs. The token form is parsed before the secret check.

2026-10-28 14:42:28 +00:00

..

v1

db, state: keep the ephemeral flag a node was created with

2026-10-28 14:42:23 +00:00

v2

api/v2: bound every request body

2026-10-28 14:42:28 +00:00