From 7a2411e147fcf4c2f79d2ee8d86cae231c0c040e Mon Sep 17 00:00:00 2001
From: Philipinho <16838612+Philipinho@users.noreply.github.com>
Date: Mon, 17 Aug 2026 01:48:54 +0100
Subject: [PATCH] fix(ai): harden turbopuffer misconfiguration and reset
 failure paths

---
 apps/server/src/ee                                           | 2 +-
 .../src/integrations/environment/environment.validation.ts   | 5 +++++
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/apps/server/src/ee b/apps/server/src/ee
index 9b999c687..5d371309c 160000
--- a/apps/server/src/ee
+++ b/apps/server/src/ee
@@ -1 +1 @@
-Subproject commit 9b999c687f9742b5ea579c89ccadc17087bb24a1
+Subproject commit 5d371309ca9a23b9e98c93b449b7fb6af0c13a11
diff --git a/apps/server/src/integrations/environment/environment.validation.ts b/apps/server/src/integrations/environment/environment.validation.ts
index e584e8125..d431d7e3a 100644
--- a/apps/server/src/integrations/environment/environment.validation.ts
+++ b/apps/server/src/integrations/environment/environment.validation.ts
@@ -5,6 +5,7 @@ import {
   IsOptional,
   IsString,
   IsUrl,
+  Matches,
   MinLength,
   ValidateIf,
   validateSync,
@@ -137,6 +138,10 @@ export class EnvironmentVariables {
 
   @IsOptional()
   @IsString()
+  @Matches(/^[A-Za-z0-9\-_.]{1,90}$/, {
+    message:
+      'TURBOPUFFER_NAMESPACE_PREFIX may only contain letters, digits, dot, dash, underscore (max 90 chars)',
+  })
   TURBOPUFFER_NAMESPACE_PREFIX: string;
 
   @IsOptional()