feat(api): cap request body at 10 MB with CKAN 413 envelope

.env.example

@@ -2,7 +2,7 @@
 # Every field below maps 1:1 to a field on app.core.config.Config.
 
 # --- Application ---
-MAX_REQUEST_BODY_MB=50
+MAX_REQUEST_BODY_MB=10
 LOG_LEVEL=INFO
 # One JSON analytics event per datastore action / dump request.
 # false leaves the analytics middleware unmounted.

datastore/api/middleware.py

@@ -1,14 +1,16 @@
 from __future__ import annotations
 
+import orjson
 from starlette.types import ASGIApp, Receive, Scope, Send
 
 
 class BodySizeLimitMiddleware:
     """Reject requests whose `Content-Length` exceeds `max_bytes` with 413.
 
-    Streaming bodies that omit `Content-Length` are not inspected here; cap
-    those at the ASGI server (uvicorn `--limit-max-request-size`) or behind
-    an ingress layer.
+
+    Streaming bodies that omit `Content-Length` are not inspected here;
+    cap those at the ASGI server (uvicorn `--limit-max-request-size`)
+    or behind an ingress layer.
     """
 
     def __init__(self, app: ASGIApp, max_bytes: int) -> None:
@@ -24,19 +26,38 @@ async def __call__(self, scope: Scope, receive: Receive, send: Send) -> None:
                     except ValueError:
                         break
                     if size > self.max_bytes:
-                        await send(
-                            {
-                                "type": "http.response.start",
-                                "status": 413,
-                                "headers": [(b"content-type", b"application/json")],
-                            }
-                        )
-                        await send(
-                            {
-                                "type": "http.response.body",
-                                "body": b'{"detail":"request body too large"}',
-                            }
-                        )
+                        await self._reject(scope, send, size)
                         return
                     break
         await self.app(scope, receive, send)
+
+    async def _reject(self, scope: Scope, send: Send, size: int) -> None:
+        limit_mb = self.max_bytes / (1024 * 1024)
+        size_mb = size / (1024 * 1024)
+        path = scope.get("path", "")
+        body = orjson.dumps(
+            {
+                "help": path,
+                "success": False,
+                "error": {
+                    "__type": "Payload Too Large",
+                    "message": (
+                        f"Request body is {size_mb:.2f} MB; limit is "
+                        f"{limit_mb:.0f} MB. Single write "
+                        "at 10 MB — split the records into smaller "
+                        "batches and retry."
+                    ),
+                },
+            }
+        )
+        await send(
+            {
+                "type": "http.response.start",
+                "status": 413,
+                "headers": [
+                    (b"content-type", b"application/json"),
+                    (b"content-length", str(len(body)).encode()),
+                ],
+            }
+        )
+        await send({"type": "http.response.body", "body": body})

datastore/core/config.py

@@ -54,7 +54,7 @@ class Config(BaseSettings):
 
     # Request limits
     MAX_REQUEST_BODY_MB: int = Field(
-        default=50,
+        default=10,
         ge=1,
         le=1000,
         description="Maximum request body size in MB",