@bli-cockpit/telemetry-core 0.1.19 → 0.1.20

package/dist/evidence-upload.js

@@ -19,11 +19,22 @@ export const RAW_EVIDENCE_UPLOAD_DEFAULT_CHUNK_BYTES = RAW_EVIDENCE_UPLOAD_MAX_C
 // by Vercel's ~4.5MB request-body limit (see header comment). 192 chunks
 // * 3 MiB gives a 576 MiB protocol ceiling above the current file cap.
 export const RAW_EVIDENCE_UPLOAD_MAX_CHUNK_COUNT = 192;
-// Final-object cap. The commit route still assembles and redaction-scans text
-// in memory, so keep this below V8's string ceiling with practical headroom for
-// buffers and redaction copies. 256 MiB covers the largest observed fleet
-// session (118 MiB) with >2x headroom. Raising it requires a streaming commit.
-export const RAW_EVIDENCE_UPLOAD_MAX_FILE_BYTES = 256 * 1024 * 1024;
+// Final-object cap. The server's Supabase project-level (global) storage
+// limit was raised from 50 MiB to 512 MiB on 2026-07-04 (BLI-2528; see
+// docs/runbooks/cockpit-stuck-evidence-uploads.md) after that ceiling silently
+// rejected every larger raw-evidence object for 57 days, so this constant must
+// track the server's real ceiling rather than trail it. It cannot simply BE
+// 512 MiB, though: the commit route (apps/dashboard .../evidence/upload/commit)
+// still assembles the object into one Buffer and calls
+// `assembled.toString("utf8")` for the secret-content scan, and 512 MiB
+// (536,870,912 bytes) is 24 bytes PAST V8's `MAX_STRING_LENGTH`
+// (536,870,888 on Node 22 / this repo's pinned runtime) — a file at the literal
+// 512 MiB ceiling would crash the commit route with a RangeError instead of
+// committing, the same silent-loss failure mode BLI-2528 was about. 500 MiB
+// keeps ~12.6 MiB of real headroom under that hard ceiling for the
+// Buffer.concat + string-conversion overhead, while still fitting the chunk
+// protocol's 576 MiB ceiling (192 chunks * 3 MiB).
+export const RAW_EVIDENCE_UPLOAD_MAX_FILE_BYTES = 500 * 1024 * 1024;
 export const RAW_EVIDENCE_UPLOAD_MAX_OBJECTS_PER_BEGIN = 25;
 export const CODEX_SESSION_REPORT_MAX_SESSIONS = 200;
 const SafeLabelSchema = z

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/telemetry-core",
-  "version": "0.1.19",
+  "version": "0.1.20",
   "private": false,
   "type": "module",
   "main": "./dist/index.js",