What
Notification frames arriving over a thin-client or remote stream are normalized through a shared mapper before they reach the local notification queue, so a remote peer cannot flood or corrupt it.
Details
- Keys are prefixed with
remote:, text has whitespace collapsed and is truncated, andtimeout_msis clamped. - Colors that collide with Object.prototype are rejected, and priority "immediate" is downgraded to "high".
- A queue cap evicts the oldest
remote:notification. - Malformed frames are dropped and logged as "[useThinClientSession] Dropping malformed notification frame".
- Routing outcomes are reported via
tengu_remote_notification_routed.
Evidence
[useThinClientSession] Dropping malformed notification frame
Strings lifted out of the shipped bundle, so the claim above can be checked against them.