Method validateJsonMessage

app/src/API/Server.cpp:840–883

* @brief Validates JSON message size, depth, and rate limits. */

 * @brief Validates JSON message size, depth, and rate limits.
 */
bool API::Server::validateJsonMessage(QTcpSocket* socket,
                                      ConnectionState& state,
                                      const QByteArray& jsonBytes)
{
  Q_ASSERT(socket);
  Q_ASSERT(!jsonBytes.isEmpty());

  if (jsonBytes.size() > kMaxApiMessageBytes) {
    qWarning() << "[API] Message size limit exceeded:" << state.peerAddress << ":" << state.peerPort
               << "- Message size:" << jsonBytes.size() << "- Limit:" << kMaxApiMessageBytes;

    sendResponseToSocket(
      socket,
      CommandResponse::makeError(
        QString(), ErrorCode::ExecutionError, QStringLiteral("API message exceeds size limit"))
        .toJsonBytes());
    return false;
  }

  if (exceedsJsonDepthLimit(jsonBytes, kMaxApiJsonDepth)) {
    qWarning() << "[API] JSON depth limit exceeded:" << state.peerAddress << ":" << state.peerPort
               << "- Max depth:" << kMaxApiJsonDepth;

    sendResponseToSocket(
      socket,
      CommandResponse::makeError(
        QString(), ErrorCode::ExecutionError, QStringLiteral("JSON nesting depth exceeds limit"))
        .toJsonBytes());
    return false;
  }

  if (state.messageCount >= kMaxApiMessagesPerWindow) {
    qWarning() << "[API] Message rate limit exceeded:" << state.peerAddress << ":" << state.peerPort
               << "- Messages in window:" << state.messageCount
               << "- Limit:" << kMaxApiMessagesPerWindow << "- Disconnecting client";

    disconnectClient(
      socket, state, ErrorCode::ExecutionError, QStringLiteral("API rate limit exceeded"));
    return false;
  }

  ++state.messageCount;
  return true;
}

/**
 * @brief Dispatches a validated JSON message to the appropriate handler.