fix(memory-lancedb): use truncateUtf16Safe for sanitize text truncation

lzyyzznl · lzyyzznl · commit 0fa3981678ed · 2026-07-09T19:51:27.000+08:00
diff --git a/extensions/memory-lancedb/index.ts b/extensions/memory-lancedb/index.ts
@@ -1168,7 +1168,7 @@ export function sanitizeForMemoryCapture(text: string): string {
 
   // Pre-truncate to cap regex work on very large inputs (ReDoS mitigation)
   const MAX_SANITIZE_CHARS = 10_000;
-  let cleaned = text.length > MAX_SANITIZE_CHARS ? text.slice(0, MAX_SANITIZE_CHARS) : text;
+  let cleaned = text.length > MAX_SANITIZE_CHARS ? truncateUtf16Safe(text, MAX_SANITIZE_CHARS) : text;
   let strippedInjectedContext = false;
 
   // Strip leading timestamp prefix
