Skip to content

Spec 010 T054–T055: local uploads, and the site server's proxy package - #508

Merged
adamjohnwright merged 4 commits into
mainfrom
fix/side-findings
Oct 17, 2026
Merged

adamjohnwright merged 4 commits into
mainfrom
fix/side-findings

Conversation

@adamjohnwright

Copy link
Copy Markdown
Contributor

Two side findings from spec 010's research.

  • T054: local.conf now sets client_max_body_size 64m, matching every deployment. It set nothing before, so nginx's 1 MB default refused local uploads that the deployments accept. limits.spec.ts now requires every configuration, local included, to allow at least Java's own 50 MiB upload cap. The test was shown failing on local.conf first.
  • T055: serve-prod.js is the production site server. It requires http-proxy-middleware, which was installed only as a dev package of another tool. It is now a declared dependency, pinned at the 3.0.7 already resolved.
    • Lockfile: the only change is the dev flag, removed from that package and the four packages it needs at run time. No name or version moved at any depth; I diffed the full name→version map before and after.

🤖 Generated with Claude Code

adamjohnwright and others added 4 commits October 17, 2026 14:17
… package

- local.conf sets client_max_body_size 64m, as every deployment does: it
  set nothing, so nginx's 1 MB default refused local uploads that the
  deployments accept. limits.spec.ts now holds every configuration,
  local included, to at least Java's 50 MiB upload cap (shown failing on
  local.conf first).
- serve-prod.js, the production site server, requires
  http-proxy-middleware, which was installed only as a dev package of
  another tool. It is now a declared dependency, at the 3.0.7 already
  resolved. The lockfile changes nothing but the dev flag on it and the
  four packages it needs at run time: no name or version moved at any
  depth (diffed).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
It matched only values written as "64m", so a smaller limit written as
512k (or a bare byte count) passed unseen. Every value is now converted
from its unit; one it cannot read fails. Shown: 512k and a garbage value
fail, 64M and 1g pass.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@adamjohnwright
adamjohnwright merged commit d2784a9 into main Oct 17, 2026
7 checks passed
@adamjohnwright
adamjohnwright deleted the fix/side-findings branch October 17, 2026 14:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant