mirror of
https://github.com/langgenius/dify.git
synced 2026-10-04 13:47:55 +08:00
Keys are credentials by their last segment (api_key, access_token, Authorization), not by containing "token" or "password", so password_policy / token_limit defaults survive. URL hosts stop at the first non-URL character and drop trailing punctuation, so a goal that names a host at the end of a sentence or next to CJK text is recognised. Placeholder tokens like <…> only count under a credential key or an auth scheme. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>