fix(mobile): bound chat requests and responses

[phucnguyen1707]

Summary

• Bound serialized mobile chat requests and JSON responses to 65536 UTF-8 bytes, including history, JSON structure and multibyte characters.
• Reject excessive Content-Length early and count actual streamed bytes, cancelling oversized bodies even when the length is missing or misleading.
• Preserve the first terminal cause across cancellation, timeout and oversize races; clean up late responses/readers.
• Keep failed prompts and history visible, show explicit size errors and remove the identical retry action for oversized requests. History is never silently truncated.
• Document the buffered React Native transport limitation.

Validation

• 174 mobile tests passed across 16 files; one existing Android-only history callback case is intentionally skipped in the iOS parameterization.
• Includes 18 size-boundary cases, Unicode boundaries, cancellation ordering, retained UI state, and real loopback HTTP tests for stalled headers/body and unterminated oversized data.
• Typecheck and lint passed.
• Local Android and iOS Hermes bundle exports passed. These are compilation checks, not native device tests.
• Scoped source review and follow-up tests completed. No real AI provider was called.

Release limits

• With buffered React Native fetch, the body may already be downloaded into native memory before validation. This patch bounds JSON processing/retention, not peak native download memory.
• Native Android/iOS transport and UI still need device smoke testing before release.
• No EAS build, store submission, tag, release or deployment was triggered locally. The repository's normal PR Android APK workflow is separate from its manually triggered EAS workflow.

[github-actions]

ThreatCrush Security Scan

52 finding(s)

HIGH/CRITICAL: 3 | MEDIUM: 28 | LOW: 21

Severity	Rule	Location
HIGH	py-ssrf-outbound-request	apps/desktop/launcher/tron-tor-helper:303
HIGH	py-ssrf-outbound-request	apps/desktop/launcher/tron-tor-helper:437
HIGH	sh-remote-script-execution	apps/web/public/install.sh:879
MEDIUM	js-open-redirect	apps/desktop/extensions/ai-sidebar/install-helper.js:156
MEDIUM	js-unescaped-html-sink	apps/desktop/extensions/ai-sidebar/media.js:34
MEDIUM	js-unescaped-html-sink	apps/desktop/extensions/ai-sidebar/media.js:57
MEDIUM	js-unescaped-html-sink	apps/desktop/extensions/ai-sidebar/newtab.js:237
MEDIUM	js-unescaped-html-sink	apps/desktop/extensions/ai-sidebar/newtab.js:266
MEDIUM	js-unescaped-html-sink	apps/desktop/extensions/ai-sidebar/newtab.js:336
MEDIUM	js-unescaped-html-sink	apps/desktop/extensions/ai-sidebar/options.js:306
MEDIUM	js-unescaped-html-sink	apps/desktop/extensions/ai-sidebar/sidepanel.js:78
MEDIUM	js-unescaped-html-sink	apps/desktop/extensions/ai-sidebar/sidepanel.js:166
MEDIUM	js-unescaped-html-sink	apps/extensions/public/store.js:77
MEDIUM	js-unescaped-html-sink	apps/extensions/public/store.js:227
MEDIUM	js-unescaped-html-sink	apps/extensions/public/store.js:569
MEDIUM	js-unescaped-html-sink	apps/web/public/app.js:29
MEDIUM	js-unescaped-html-sink	apps/web/public/dns.js:54
MEDIUM	sh-remote-script-execution	apps/web/public/install.sh:164
MEDIUM	sh-remote-script-execution	apps/web/public/install.sh:169
MEDIUM	sh-remote-script-execution	apps/web/public/install.sh:404
MEDIUM	sh-remote-script-execution	apps/web/public/install.sh:422
MEDIUM	sh-remote-script-execution	apps/web/public/install.sh:935
MEDIUM	sh-remote-script-execution	apps/web/public/install.sh:986
MEDIUM	js-unescaped-html-sink	apps/web/public/settings.js:96
MEDIUM	js-unescaped-html-sink	apps/web/public/settings.js:168
MEDIUM	js-dynamic-code-execution	packages/sdk/src/mcp/tools.ts:125
MEDIUM	js-dynamic-code-execution	packages/sdk/src/page.ts:68
MEDIUM	js-dynamic-code-execution	packages/sdk/src/page.ts:73
MEDIUM	sql-template-interpolation	services/api/src/store/db.ts:116
MEDIUM	js-dynamic-code-execution	services/api/src/store/scanner.ts:44
MEDIUM	sh-predictable-temp-path	start.sh:25
LOW	js-dynamic-code-execution	apps/desktop/extensions/ai-sidebar/pit-proxy.test.js:8
LOW	js-dynamic-code-execution	packages/agent-runtime/src/analyze/form-script.test.ts:6
LOW	js-unescaped-html-sink	packages/agent-runtime/src/analyze/form-script.test.ts:26
LOW	js-unescaped-html-sink	packages/agent-runtime/src/analyze/form-script.test.ts:49
LOW	js-dynamic-code-execution	packages/browser-core/src/automation/extract-script.test.ts:6
LOW	js-unescaped-html-sink	packages/browser-core/src/automation/extract-script.test.ts:16
LOW	js-unescaped-html-sink	packages/browser-core/src/automation/extract-script.test.ts:45
LOW	js-unescaped-html-sink	packages/browser-core/src/automation/extract-script.test.ts:57
LOW	js-unescaped-html-sink	packages/browser-core/src/automation/extract-script.test.ts:80
LOW	js-unescaped-html-sink	packages/browser-core/src/automation/extract-script.test.ts:99
LOW	js-dynamic-code-execution	packages/browser-core/src/automation/snapshot-script.test.ts:11
LOW	js-unescaped-html-sink	packages/browser-core/src/automation/snapshot-script.test.ts:62
LOW	js-unescaped-html-sink	packages/browser-core/src/automation/snapshot-script.test.ts:101
LOW	js-unescaped-html-sink	packages/provenance/src/scan.test.ts:47
LOW	js-unescaped-html-sink	packages/provenance/src/scan.test.ts:170
LOW	js-unescaped-html-sink	packages/provenance/src/scan.test.ts:216
LOW	js-dynamic-code-execution	packages/sdk/src/mcp/automate.test.ts:261
LOW	secret-generic-api-key	packages/storage/src/config.ts:51
LOW	secret-generic-credential	packages/storage/src/config.ts:51

…and 2 more. Full results in the Security tab.

Snippets are redacted; ThreatCrush never prints matched credential material.