@nac3/forge-cli 1.0.92 → 1.0.93

package/dist/chat/server.js

@@ -7604,13 +7604,24 @@ function generateRequestId() {
     }
     return s;
 }
-async function readBody(req) {
+/* Cap for JSON request bodies. Raised from the old hardcoded 1MB, which
+ * rejected legitimate large chat turns (long history + pasted docs)
+ * BEFORE they ever reached Claude -- the panel surfaced it as if the
+ * model failed. The panel<->server link is local and the relay path is
+ * authenticated, so a generous cap matching the Anthropic API ceiling
+ * (~32MB) is safe. Parameterizable so a specific endpoint can opt into a
+ * tighter limit if ever needed. (Pablo 2026-08-05) */
+const MAX_JSON_BODY_BYTES = 32 * 1024 * 1024;
+async function readBody(req, maxBytes = MAX_JSON_BODY_BYTES) {
     const chunks = [];
+    let total = 0;
     for await (const chunk of req) {
-        chunks.push(chunk);
-        if (chunks.reduce((s, c) => s + c.length, 0) > 1_000_000) {
-            throw new Error('request body too large (>1MB)');
+        const buf = chunk;
+        total += buf.length;
+        if (total > maxBytes) {
+            throw new Error('request body too large (>' + maxBytes + ' bytes)');
         }
+        chunks.push(buf);
     }
     return Buffer.concat(chunks).toString('utf-8');
 }