mirror of
https://github.com/hanzoai/ingress.git
synced 2026-10-20 15:07:40 +00:00
The route ladder was gated on looksLikeAsset, which decides from path.Ext. That predicate is right about "/chunk-abc123.js" and wrong about a URL segment that merely contains a dot: "/models/z-ai/glm-5.2" has extension ".2", and "/models/meta-llama/llama-3.2-1b-instruct" has ".2-1b-instruct". Both are pages. Measured live on hanzo.ai: 181 of 773 routes 404d — every model page carrying a version number — while the dotless ones served. The gate is removed rather than made cleverer. No pattern reliably separates a page from a file by name, and the ladder never needed it: it asks for ONE exact file per candidate and never falls back to a shell, so it has nothing to mask anything with. A missing chunk looks for "nope.js.html" and "nope.js/index.html", finds neither, and is still a bare 404 — now guaranteed by construction instead of by a guess. looksLikeAsset keeps gating SPA mode, which is where the risk actually lives: that path answers with the shell for anything, so it is the one that must never answer an asset request. Co-authored-by: Hanzo Dev <[email protected]>