Closes task #44 ahead of v1.0.7-rc1 tag. Dispute-class webhooks
(axis-1 P1.6, v1.0.8 scope) may carry metadata beyond the typical
1-5 KB event size — a 64KB cap created a non-zero risk of silent
drops that exactly the wrong class of event to lose. 256KB gives
10x headroom above the inflated-dispute ceiling while staying
tightly bounded against log-spam DoS: sustained ceiling at the
rate-limit floor is ~25MB/s, cleaned daily.
Rationale documented in the comment above the const so future
readers see the reasoning before the number. The rate limit
remains the primary DoS defense; this cap is defense in depth.
No live Hyperswitch docs verification (no internet access in this
session) — decision based on typical PSP webhook shapes + user's
explicit flag that losing a legit dispute = weekend lost. Task
#44 closed with that caveat noted; a proper docs review can
re-tune if observed traffic shows the 256KB ceiling is also too
aggressive (unlikely).
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
6773f66dd3