Notifications sent from remote peers are now trimmed, capped and prefixed so they can't flood your queue.
What's wrong with this entry?
Notification frames arriving over a thin-client or remote stream are normalized through a shared mapper before they reach the local notification queue, so a remote peer cannot flood or corrupt it.
- Keys are prefixed with
remote:, text has whitespace collapsed and is truncated, andtimeout_msis clamped. - Colors that collide with Object.prototype are rejected, and priority "immediate" is downgraded to "high".
- A queue cap evicts the oldest
remote:notification. - Malformed frames are dropped and logged as "[useThinClientSession] Dropping malformed notification frame".
- Routing outcomes are reported via
tengu_remote_notification_routed.
[useThinClientSession] Dropping malformed notification frame
Strings lifted out of the shipped bundle, so the claim above can be checked against them.