fix(media): Add MAX_CONTENT_LENGTH and debug file capture - v1.4.2

- Set Flask MAX_CONTENT_LENGTH to 50MB (matches MAX_FILE_SIZE)
- Save failed uploads to data/debug/ for analysis
- Log magic bytes when both Pillow and HEIC parsers fail

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

starpunk/config.py

@@ -86,6 +86,10 @@ def load_config(app, config_override=None):
     app.config["FEED_CACHE_ENABLED"] = os.getenv("FEED_CACHE_ENABLED", "true").lower() == "true"
     app.config["FEED_CACHE_MAX_SIZE"] = int(os.getenv("FEED_CACHE_MAX_SIZE", "50"))
 
+    # Upload limits (v1.4.2)
+    # Flask MAX_CONTENT_LENGTH limits request body size (matches media.py MAX_FILE_SIZE)
+    app.config["MAX_CONTENT_LENGTH"] = 50 * 1024 * 1024  # 50MB
+
     # Metrics configuration (v1.1.2 Phase 1)
     app.config["METRICS_ENABLED"] = os.getenv("METRICS_ENABLED", "true").lower() == "true"
     app.config["METRICS_SLOW_QUERY_THRESHOLD"] = float(os.getenv("METRICS_SLOW_QUERY_THRESHOLD", "1.0"))

starpunk/media.py

@@ -122,13 +122,19 @@ def validate_image(file_data: bytes, filename: str) -> Tuple[bytes, str, int, in
                 # Mark as HEIF so conversion happens below
                 img.format = 'HEIF'
             except Exception as heic_error:
-                # Log the magic bytes for debugging (if in app context)
+                # Log the magic bytes and save file for debugging (if in app context)
                 try:
                     magic = file_data[:12].hex() if len(file_data) >= 12 else file_data.hex()
                     current_app.logger.warning(
                         f'Media upload failed both Pillow and HEIC: filename="{filename}", '
                         f'magic_bytes={magic}, pillow_error="{e}", heic_error="{heic_error}"'
                     )
+                    # Save failed file for analysis
+                    debug_dir = Path(current_app.config.get('DATA_PATH', 'data')) / 'debug'
+                    debug_dir.mkdir(parents=True, exist_ok=True)
+                    debug_file = debug_dir / f"failed_{datetime.now().strftime('%Y%m%d_%H%M%S')}_{filename}"
+                    debug_file.write_bytes(file_data)
+                    current_app.logger.info(f'Saved failed upload for analysis: {debug_file}')
                 except RuntimeError:
                     pass  # Outside app context (e.g., tests)
                 raise ValueError(f"Invalid or corrupted image: {e}")