@mulmobridge/chat-service 1.0.3 → 1.1.0

package/dist/socket.js

@@ -45,6 +45,15 @@ export const CHAT_SOCKET_EVENTS = {
     /** server → bridge streaming text chunk (Phase C of #268). */
     textChunk: "textChunk",
 };
+// Hard limits to prevent oversized payloads from bridges (DoS /
+// accidental misconfiguration). Express's JSON body limit (50 MB)
+// is the outer gate; these are tighter, attachment-specific caps.
+const MAX_ATTACHMENT_COUNT = 10;
+const MAX_ATTACHMENT_TOTAL_BYTES = 20 * 1024 * 1024; // 20 MB base64
+/** Transport ceiling for one socket frame. Headroom over the attachment
+ *  budget for the rest of the payload (text, ids, options) so the
+ *  application-level cap is what a bridge actually hits. */
+const MAX_SOCKET_PAYLOAD_BYTES = MAX_ATTACHMENT_TOTAL_BYTES + 4 * 1024 * 1024;
 export function bridgeRoom(transportId) {
     return `bridge:${transportId}`;
 }
@@ -55,6 +64,12 @@ export function attachChatSocket(server, deps) {
         // Loopback-only deployment; skip long-polling negotiation for
         // the same reason `/ws/pubsub` does (#311).
         transports: ["websocket"],
+        // Socket.IO's default is 1 MB — below the attachment budget
+        // `parseAttachments` enforces, so a bridge shipping a 900 KB image
+        // had its connection closed before the ack instead of a reply.
+        // `parseAttachments` stays the real gate; this only has to be
+        // wide enough not to pre-empt it.
+        maxHttpBufferSize: MAX_SOCKET_PAYLOAD_BYTES,
     });
     io.use((socket, next) => {
         const result = validateHandshake(socket.handshake.auth, tokenProvider);
@@ -232,11 +247,6 @@ function parseMessagePayload(payload) {
     const attachments = parseAttachments(payload.attachments);
     return { ok: true, externalChatId, text, attachments };
 }
-// Hard limits to prevent oversized payloads from bridges (DoS /
-// accidental misconfiguration). Express's JSON body limit (50 MB)
-// is the outer gate; these are tighter, attachment-specific caps.
-const MAX_ATTACHMENT_COUNT = 10;
-const MAX_ATTACHMENT_TOTAL_BYTES = 20 * 1024 * 1024; // 20 MB base64
 export function parseAttachments(raw) {
     if (!Array.isArray(raw) || raw.length === 0)
         return undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mulmobridge/chat-service",
-  "version": "1.0.3",
+  "version": "1.1.0",
   "description": "Server-side chat service for MulmoBridge — socket.io + REST bridge to Claude Code agents",
   "type": "module",
   "main": "./dist/index.js",