AIKIDO-2026-53296

TL;DR

LineBuffer reassembles each ACP JSON-RPC message from the chunks of a byte stream and keeps the current incomplete line in a plain array with no byte limit. Standard input/output uses that stream for a spawned agent, and HTTP with Server-Sent Events uses it for a remote agent. Either the agent or the client can send one message large enough that the receiver keeps appending chunks to that line until it runs out of memory, which kills the connection and every session running on it. The fix adds a configurable maximum message and line size that rejects an oversized line before it is fully buffered.