Say at the receiver route where its 1 MB body cap lives (closes #173)

/h/{uuid} has no MaxBodySize middleware, unlike the page route
groups; its cap is in the handler, which owns the 413 senders get.
A comment at the route registration now says so, and the handler's
read function notes it is the receiver's only body cap.

A new routing test sends a body exactly at the cap and one byte over
it through the production router, and checks the second is refused
with the handler's 413 and message.

Model: opus-5-5

README.md

@@ -1780,7 +1780,7 @@ retries) is individually logged for full observability.
 #### EventTotals and TargetTotals
 
 Running counts in each event database, read by the statistics pane at the
-top of the webhook page and by the webhook list. `EventTotals` is one row:
+top of the webhook page. `EventTotals` is one row:
 
 | Field            | Type      | Description |
 | ---------------- | --------- | ----------- |
@@ -1812,14 +1812,6 @@ target. Its failure percentage for a window is the deliveries that became
 `failed` in it out of all that became `delivered` or `failed` in it, and
 a dash when none did.
 
-The webhook list at `/hooks` shows three of the pane's figures for each
-webhook: its events within retention and its last event, both from
-`EventTotals`, and its deliveries that failed in the last 24 hours,
-counted with the pane's query. It opens each webhook's event database once
-(the handle stays open) and runs those two reads there, so its cost grows
-with the number of webhooks and, for each, with the deliveries that
-finished in the last 24 hours, never with the events stored.
-
 #### Event-tier indexes
 
 These indexes on the per-webhook event databases are declared in the model
@@ -1827,7 +1819,7 @@ tags, so `AutoMigrate` creates them on a fresh database:
 
 | Table              | Columns                     | Serves |
 | ------------------ | --------------------------- | ------ |
-| `deliveries`       | `status`, `deleted_at`, `finished_at`, `target_id` | Startup recovery, the retry and pending sweeps every 60 seconds and the queue-depth sampler every 30 seconds, which select deliveries by status, and the webhook page's statistics and the webhook list, which count each target's deliveries by status and when they finished |
+| `deliveries`       | `status`, `deleted_at`, `finished_at`, `target_id` | Startup recovery, the retry and pending sweeps every 60 seconds and the queue-depth sampler every 30 seconds, which select deliveries by status, and the webhook page's statistics, which count each target's deliveries by status and when they finished |
 | `deliveries`       | `event_id`, `deleted_at`    | The event log, which loads each event's deliveries, and retention, which counts and deletes the deliveries of expired events |
 | `delivery_results` | `delivery_id`, `deleted_at` | The event log, which loads the attempts of a page's deliveries, and retention, which deletes the attempts of expired events |
 | `events`           | `deleted_at`, `created_at`  | The webhook page's statistics, which count recent events |

internal/handlers/source_list_test.go

@@ -1,405 +0,0 @@
-package handlers_test
-
-import (
-	"net/http"
-	"net/http/httptest"
-	"regexp"
-	"strings"
-	"testing"
-	"time"
-
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-	"gorm.io/gorm"
-	"gorm.io/gorm/clause"
-	"sneak.berlin/go/webhooker/internal/database"
-	"sneak.berlin/go/webhooker/internal/handlers"
-	"sneak.berlin/go/webhooker/internal/logger"
-	"sneak.berlin/go/webhooker/internal/session"
-)
-
-// failedHighlight is how the list marks a number of failed deliveries
-// that is not zero.
-const failedHighlight = `class="font-medium text-red-600"`
-
-// listWebhook adds a webhook with the given name, owned by the test
-// user.
-func listWebhook(
-	t *testing.T, db *database.Database, name string,
-) *database.Webhook {
-	t.Helper()
-
-	wh := &database.Webhook{UserID: deleteTestUserID, Name: name}
-	require.NoError(t, db.DB().Omit(clause.Associations).Create(wh).Error)
-
-	return wh
-}
-
-// addEntrypoints adds the given number of entrypoints, all active or
-// all inactive, to a webhook and returns their paths.
-func addEntrypoints(
-	t *testing.T, db *database.Database, webhookID string,
-	count int, active bool,
-) []string {
-	t.Helper()
-
-	paths := make([]string, count)
-	for i := range paths {
-		paths[i] = statsEntrypoint(t, db, webhookID, active)
-	}
-
-	return paths
-}
-
-// addTargets adds the given number of targets, all active or all
-// inactive, to a webhook and returns them.
-func addTargets(
-	t *testing.T, db *database.Database, webhookID string,
-	count int, active bool,
-) []*database.Target {
-	t.Helper()
-
-	targets := make([]*database.Target, count)
-	for i := range targets {
-		targets[i] = seedTarget(t, db, webhookID, database.TargetTypeLog)
-		require.NoError(t, db.DB().Model(targets[i]).
-			Update("active", active).Error)
-	}
-
-	return targets
-}
-
-// renderWebhookList runs the real webhook list handler as the test user
-// and returns the rendered page.
-func renderWebhookList(
-	t *testing.T, h *handlers.Handlers, sess *session.Session,
-) string {
-	t.Helper()
-
-	cookies := authenticatedCookies(
-		t, sess, deleteTestUserID, deleteTestUsername,
-	)
-
-	w := httptest.NewRecorder()
-	h.HandleSourceList().ServeHTTP(
-		w, getRequest(t, "/hooks", cookies, nil),
-	)
-	require.Equal(t, http.StatusOK, w.Code)
-
-	return w.Body.String()
-}
-
-// listCard returns one webhook's entry in a rendered webhook list, its
-// markup as rendered and its text with the markup taken out and each
-// run of space made one space.
-func listCard(t *testing.T, page, webhookID string) (string, string) {
-	t.Helper()
-
-	_, card, found := strings.Cut(page, `href="/hook/`+webhookID+`"`)
-	require.True(t, found, "the list has no entry for %s", webhookID)
-
-	card, _, _ = strings.Cut(card, "</a>")
-	text := regexp.MustCompile(`<[^>]*>`).ReplaceAllString(card, " ")
-
-	return card, strings.Join(strings.Fields(text), " ")
-}
-
-// receiveEvents posts the given number of events to an entrypoint
-// through the real receiver, and returns the webhook's event database
-// and its events, oldest first.
-func receiveEvents(
-	t *testing.T,
-	h *handlers.Handlers,
-	dbMgr *database.WebhookDBManager,
-	webhookID, path string,
-	count int,
-) (*gorm.DB, []database.Event) {
-	t.Helper()
-
-	router := receiverRouter(h)
-
-	for range count {
-		require.Equal(t, http.StatusOK, postReceiver(t, router, path))
-	}
-
-	webhookDB, err := dbMgr.GetDB(webhookID)
-	require.NoError(t, err)
-
-	events := listEvents(t, webhookDB)
-	require.Len(t, events, count)
-
-	return webhookDB, events
-}
-
-// seedFailingWebhook adds a webhook with six entrypoints, two of them
-// inactive, and seven targets, five of them inactive. Four events reach
-// its two active targets, each event arriving at a different time.
-// Three deliveries failed in the last 24 hours, two to the first target
-// and one to the second, one failed 30 hours ago, and one was
-// delivered. It returns the webhook and its newest event.
-func seedFailingWebhook(
-	t *testing.T,
-	h *handlers.Handlers,
-	db *database.Database,
-	dbMgr *database.WebhookDBManager,
-) (*database.Webhook, database.Event) {
-	t.Helper()
-
-	wh := listWebhook(t, db, "failing")
-	paths := addEntrypoints(t, db, wh.ID, 4, true)
-	addEntrypoints(t, db, wh.ID, 2, false)
-
-	active := addTargets(t, db, wh.ID, 2, true)
-	first, second := active[0], active[1]
-
-	addTargets(t, db, wh.ID, 5, false)
-
-	webhookDB, events := receiveEvents(t, h, dbMgr, wh.ID, paths[0], 4)
-	now := time.Now()
-
-	statsAge(t, webhookDB, events[0].ID, now.Add(-31*time.Hour))
-	statsAge(t, webhookDB, events[1].ID, now.Add(-2*time.Hour))
-	statsAge(t, webhookDB, events[2].ID, now.Add(-10*time.Minute))
-
-	statsFinish(t, webhookDB,
-		statsDelivery(t, webhookDB, events[0].ID, first.ID),
-		database.DeliveryStatusFailed, now.Add(-30*time.Hour))
-	statsFinish(t, webhookDB,
-		statsDelivery(t, webhookDB, events[1].ID, first.ID),
-		database.DeliveryStatusFailed, now.Add(-time.Hour))
-	statsFinish(t, webhookDB,
-		statsDelivery(t, webhookDB, events[2].ID, first.ID),
-		database.DeliveryStatusFailed, now.Add(-time.Minute))
-	statsFinish(t, webhookDB,
-		statsDelivery(t, webhookDB, events[2].ID, second.ID),
-		database.DeliveryStatusFailed, now.Add(-time.Minute))
-	statsFinish(t, webhookDB,
-		statsDelivery(t, webhookDB, events[3].ID, second.ID),
-		database.DeliveryStatusDelivered, now.Add(-time.Minute))
-
-	return wh, events[3]
-}
-
-// seedHealthyWebhook adds a webhook with four entrypoints and two
-// targets, all active, and three events, each delivered to both
-// targets. It returns the webhook and its newest event.
-func seedHealthyWebhook(
-	t *testing.T,
-	h *handlers.Handlers,
-	db *database.Database,
-	dbMgr *database.WebhookDBManager,
-) (*database.Webhook, database.Event) {
-	t.Helper()
-
-	wh := listWebhook(t, db, "healthy")
-	paths := addEntrypoints(t, db, wh.ID, 4, true)
-	targets := addTargets(t, db, wh.ID, 2, true)
-
-	webhookDB, events := receiveEvents(t, h, dbMgr, wh.ID, paths[0], 3)
-
-	for _, ev := range events {
-		for _, target := range targets {
-			statsFinish(t, webhookDB,
-				statsDelivery(t, webhookDB, ev.ID, target.ID),
-				database.DeliveryStatusDelivered, time.Now())
-		}
-	}
-
-	return wh, events[2]
-}
-
-// lastEventText is how the list shows the arrival of an event.
-func lastEventText(ev database.Event) string {
-	return ev.CreatedAt.UTC().Format("2006-01-02 15:04:05 UTC")
-}
-
-// TestSourceList_ShowsActivityOfEachWebhook checks the figures the list
-// shows for a webhook with recent failures, a healthy one, a new one
-// that has received no event, and one without an event database.
-func TestSourceList_ShowsActivityOfEachWebhook(t *testing.T) {
-	t.Parallel()
-
-	var (
-		h     *handlers.Handlers
-		sess  *session.Session
-		db    *database.Database
-		dbMgr *database.WebhookDBManager
-	)
-
-	app := newTestApp(t, &h, &sess, &db, &dbMgr)
-	app.RequireStart()
-
-	t.Cleanup(app.RequireStop)
-
-	failing, failingNewest := seedFailingWebhook(t, h, db, dbMgr)
-	healthy, healthyNewest := seedHealthyWebhook(t, h, db, dbMgr)
-
-	// Creating a webhook creates its event database.
-	fresh := listWebhook(t, db, "fresh")
-	require.NoError(t, dbMgr.CreateDB(fresh.ID))
-	addEntrypoints(t, db, fresh.ID, 2, true)
-	addTargets(t, db, fresh.ID, 3, true)
-
-	quiet := listWebhook(t, db, "quiet")
-	addEntrypoints(t, db, quiet.ID, 2, true)
-	addTargets(t, db, quiet.ID, 3, true)
-
-	page := renderWebhookList(t, h, sess)
-
-	card, text := listCard(t, page, failing.ID)
-	assert.Contains(t, text, "6 entrypoints, 2 inactive")
-	assert.Contains(t, text, "7 targets, 5 inactive")
-	assert.Contains(t, text, "4 events within retention")
-	assert.Contains(t, text, "Last event "+lastEventText(failingNewest))
-	assert.Contains(t, card,
-		failedHighlight+">3 failed deliveries in the last 24 hours<")
-
-	card, text = listCard(t, page, healthy.ID)
-	assert.Contains(t, text, "4 entrypoints")
-	assert.Contains(t, text, "2 targets")
-	assert.Contains(t, text, "3 events within retention")
-	assert.Contains(t, text, "Last event "+lastEventText(healthyNewest))
-	assert.Contains(t, text, "0 failed deliveries in the last 24 hours")
-	assert.NotContains(t, text, "inactive")
-	assert.NotContains(t, card, failedHighlight)
-
-	card, text = listCard(t, page, fresh.ID)
-	assert.Contains(t, text, "2 entrypoints")
-	assert.Contains(t, text, "3 targets")
-	assert.Contains(t, text, "0 events within retention")
-	assert.Contains(t, text, "No events yet")
-	assert.Contains(t, text, "0 failed deliveries in the last 24 hours")
-	assert.NotContains(t, card, failedHighlight)
-
-	card, text = listCard(t, page, quiet.ID)
-	assert.Contains(t, text, "2 entrypoints")
-	assert.Contains(t, text, "3 targets")
-	assert.Contains(t, text, "0 events within retention")
-	assert.Contains(t, text, "No events yet")
-	assert.Contains(t, text, "0 failed deliveries in the last 24 hours")
-	assert.NotContains(t, card, failedHighlight)
-	assert.False(t, dbMgr.DBExists(quiet.ID),
-		"showing the list must not create an event database")
-}
-
-// TestSourceList_CountsOnlyEventsWithinRetention checks that once
-// retention has removed one of a webhook's three events, the list
-// counts the two still stored.
-func TestSourceList_CountsOnlyEventsWithinRetention(t *testing.T) {
-	t.Parallel()
-
-	var (
-		h     *handlers.Handlers
-		sess  *session.Session
-		db    *database.Database
-		dbMgr *database.WebhookDBManager
-		log   *logger.Logger
-	)
-
-	app := newTestApp(t, &h, &sess, &db, &dbMgr, &log)
-	app.RequireStart()
-
-	t.Cleanup(app.RequireStop)
-
-	wh := &database.Webhook{
-		UserID: deleteTestUserID, Name: "pruned", RetentionDays: 14,
-	}
-	require.NoError(t, db.DB().Omit(clause.Associations).Create(wh).Error)
-
-	paths := addEntrypoints(t, db, wh.ID, 3, true)
-	addTargets(t, db, wh.ID, 4, true)
-
-	webhookDB, events := receiveEvents(t, h, dbMgr, wh.ID, paths[0], 3)
-
-	statsAge(t, webhookDB, events[0].ID, time.Now().Add(-15*24*time.Hour))
-	statsPrune(t, db, dbMgr, log, webhookDB)
-	require.Len(t, listEvents(t, webhookDB), 2)
-
-	_, text := listCard(t, renderWebhookList(t, h, sess), wh.ID)
-	assert.Contains(t, text, "3 entrypoints")
-	assert.Contains(t, text, "4 targets")
-	assert.Contains(t, text, "2 events within retention")
-}
-
-// TestSourceList_LastEventSurvivesPruningEveryEvent checks that once
-// retention has removed every event of a webhook, the list still shows
-// when the last one arrived rather than "No events yet".
-func TestSourceList_LastEventSurvivesPruningEveryEvent(t *testing.T) {
-	t.Parallel()
-
-	var (
-		h     *handlers.Handlers
-		sess  *session.Session
-		db    *database.Database
-		dbMgr *database.WebhookDBManager
-		log   *logger.Logger
-	)
-
-	app := newTestApp(t, &h, &sess, &db, &dbMgr, &log)
-	app.RequireStart()
-
-	t.Cleanup(app.RequireStop)
-
-	wh := &database.Webhook{
-		UserID: deleteTestUserID, Name: "emptied", RetentionDays: 1,
-	}
-	require.NoError(t, db.DB().Omit(clause.Associations).Create(wh).Error)
-
-	paths := addEntrypoints(t, db, wh.ID, 2, true)
-	addTargets(t, db, wh.ID, 3, true)
-
-	webhookDB, events := receiveEvents(t, h, dbMgr, wh.ID, paths[0], 1)
-
-	statsAge(t, webhookDB, events[0].ID, time.Now().Add(-50*time.Hour))
-	statsPrune(t, db, dbMgr, log, webhookDB)
-	require.Empty(t, listEvents(t, webhookDB))
-
-	_, text := listCard(t, renderWebhookList(t, h, sess), wh.ID)
-	assert.Contains(t, text, "0 events within retention")
-	assert.Contains(t, text, "Last event "+lastEventText(events[0]))
-	assert.NotContains(t, text, "No events yet")
-}
-
-// TestSourceList_UnreadableEventDatabase checks that a webhook whose
-// event database cannot be read says so in its entry instead of
-// showing zeros, and that the rest of the list is still shown.
-func TestSourceList_UnreadableEventDatabase(t *testing.T) {
-	t.Parallel()
-
-	var (
-		h     *handlers.Handlers
-		sess  *session.Session
-		db    *database.Database
-		dbMgr *database.WebhookDBManager
-	)
-
-	app := newTestApp(t, &h, &sess, &db, &dbMgr)
-	app.RequireStart()
-
-	t.Cleanup(app.RequireStop)
-
-	broken := listWebhook(t, db, "broken")
-	addEntrypoints(t, db, broken.ID, 2, true)
-	addTargets(t, db, broken.ID, 3, true)
-
-	brokenDB, err := dbMgr.GetDB(broken.ID)
-	require.NoError(t, err)
-	require.NoError(t,
-		brokenDB.Migrator().DropTable(&database.EventTotals{}))
-
-	quiet := listWebhook(t, db, "quiet")
-	addEntrypoints(t, db, quiet.ID, 2, true)
-	addTargets(t, db, quiet.ID, 3, true)
-
-	page := renderWebhookList(t, h, sess)
-
-	_, text := listCard(t, page, broken.ID)
-	assert.Contains(t, text, "2 entrypoints")
-	assert.Contains(t, text, "3 targets")
-	assert.Contains(t, text, "The event figures could not be read.")
-	assert.NotContains(t, text, "events")
-	assert.NotContains(t, text, "failed")
-
-	_, text = listCard(t, page, quiet.ID)
-	assert.Contains(t, text, "No events yet")
-}

internal/handlers/source_management.go

@@ -3,12 +3,10 @@ package handlers
 import (
 	"encoding/json"
 	"errors"
-	"fmt"
 	"net/http"
 	"slices"
 	"strconv"
 	"strings"
-	"time"
 
 	"github.com/go-chi/chi"
 	"github.com/google/uuid"
@@ -22,20 +20,9 @@ import (
 type WebhookListItem struct {
 	database.Webhook
 
-	EntrypointCount         int
-	InactiveEntrypointCount int
-	TargetCount             int
-	InactiveTargetCount     int
-
-	// EventCount is how many events the webhook holds, LastEventAt
-	// when the newest arrived (nil before the first), and
-	// FailedLast24Hours how many of its deliveries failed in the last
-	// 24 hours. When the webhook's event database could not be read,
-	// EventsUnreadable is set and these three are not known.
-	EventCount        int64
-	LastEventAt       *time.Time
-	FailedLast24Hours int64
-	EventsUnreadable  bool
+	EntrypointCount int64
+	TargetCount     int64
+	EventCount      int64
 }
 
 // errMissingURL signals that a required URL was not provided.
@@ -167,12 +154,7 @@ func (h *Handlers) HandleSourceList() http.HandlerFunc {
 			return
 		}
 
-		items, err := h.buildWebhookListItems(webhooks)
-		if err != nil {
-			h.serverError(w, r, "failed to list webhooks", err)
-
-			return
-		}
+		items := h.buildWebhookListItems(webhooks)
 
 		data := map[string]any{
 			"Webhooks": items,
@@ -182,115 +164,36 @@ func (h *Handlers) HandleSourceList() http.HandlerFunc {
 	}
 }
 
-// buildWebhookListItems builds the list's entry for each webhook. It
-// fails when the main database cannot be read. A webhook whose event
-// database cannot be read is marked on its own entry, and the error is
-// logged.
+// buildWebhookListItems builds list items with counts.
 func (h *Handlers) buildWebhookListItems(
 	webhooks []database.Webhook,
-) ([]WebhookListItem, error) {
+) []WebhookListItem {
 	items := make([]WebhookListItem, len(webhooks))
-	since := time.Now().Add(-longWindow)
 
 	for i := range webhooks {
-		item := &items[i]
-		item.Webhook = webhooks[i]
+		items[i].Webhook = webhooks[i]
 
-		var err error
+		h.db.DB().Model(&database.Entrypoint{}).Where(
+			"webhook_id = ?", webhooks[i].ID,
+		).Count(&items[i].EntrypointCount)
 
-		item.EntrypointCount, item.InactiveEntrypointCount, err =
-			h.countWithInactive(&database.Entrypoint{}, item.ID)
-		if err != nil {
-			return nil, err
-		}
+		h.db.DB().Model(&database.Target{}).Where(
+			"webhook_id = ?", webhooks[i].ID,
+		).Count(&items[i].TargetCount)
 
-		item.TargetCount, item.InactiveTargetCount, err =
-			h.countWithInactive(&database.Target{}, item.ID)
-		if err != nil {
-			return nil, err
-		}
-
-		// Opening an event database that does not exist would create
-		// it, and it would hold nothing to count.
-		if !h.dbMgr.DBExists(item.ID) {
-			continue
-		}
-
-		err = h.readListEventFigures(item, since)
-		if err != nil {
-			h.log.Error(
-				"failed to read webhook list figures",
-				"webhook_id", item.ID,
-				"error", err,
+		if h.dbMgr.DBExists(webhooks[i].ID) {
+			webhookDB, err := h.dbMgr.GetDB(
+				webhooks[i].ID,
 			)
-
-			item.EventsUnreadable = true
+			if err == nil {
+				webhookDB.Model(
+					&database.Event{},
+				).Count(&items[i].EventCount)
+			}
 		}
 	}
 
-	return items, nil
-}
-
-// countWithInactive returns how many entrypoints or targets, as model
-// says, a webhook has, and how many of them are inactive.
-func (h *Handlers) countWithInactive(
-	model any, webhookID string,
-) (int, int, error) {
-	var active []bool
-
-	err := h.db.DB().Model(model).
-		Where("webhook_id = ?", webhookID).
-		Pluck("active", &active).Error
-	if err != nil {
-		return 0, 0, fmt.Errorf(
-			"reading active flags of webhook %s: %w", webhookID, err,
-		)
-	}
-
-	inactive := 0
-
-	for _, a := range active {
-		if !a {
-			inactive++
-		}
-	}
-
-	return len(active), inactive, nil
-}
-
-// readListEventFigures fills in the figures the list shows from the
-// webhook's event database, with the statistics pane's own queries:
-// the event count and last arrival from the event totals row, and the
-// deliveries that failed since the given time from the deliveries'
-// status index.
-func (h *Handlers) readListEventFigures(
-	item *WebhookListItem, since time.Time,
-) error {
-	webhookDB, err := h.dbMgr.GetDB(item.ID)
-	if err != nil {
-		return err
-	}
-
-	var totals database.EventTotals
-
-	err = webhookDB.Take(&totals).Error
-	if err != nil {
-		return fmt.Errorf("reading event totals: %w", err)
-	}
-
-	item.EventCount = totals.Events - totals.EventsRemoved
-	item.LastEventAt = totals.LastEventAt
-
-	byTarget, err := finishedByTarget(webhookDB, since)
-	if err != nil {
-		return err
-	}
-
-	for _, f := range byTarget {
-		item.FailedLast24Hours += f.Failed
-	}
-
-	return nil
+	return items
 }
 
 // HandleSourceCreate shows the form to create a new webhook.

internal/handlers/webhook.go

@@ -150,7 +150,9 @@ func (h *Handlers) lookupEntrypoint(
 	return entrypoint, true
 }
 
-// readWebhookBody reads and validates the request body size.
+// readWebhookBody reads and validates the request body size. This is
+// the receiver's only body cap: /h/{uuid} has no MaxBodySize
+// middleware (see Server.setupWebhookRoutes).
 func (h *Handlers) readWebhookBody(
 	w http.ResponseWriter,
 	r *http.Request,

internal/server/routes.go

@@ -304,6 +304,12 @@ func (s *Server) setupSourceRoutes() {
 }
 
 func (s *Server) setupWebhookRoutes() {
+	// No MaxBodySize here, unlike the page groups. The receiver's 1 MB
+	// body cap is in Handlers.readWebhookBody, because the handler
+	// owns the response a sender gets for an oversized body and
+	// MaxBodySize would change it. That cap is the only bound on this
+	// unauthenticated endpoint's body; TestReceiver_OversizeBodyRefused
+	// pins it.
 	s.router.With(s.mw.ReceiverRateLimit()).HandleFunc(
 		"/h/{uuid}",
 		s.h.HandleWebhook(),

internal/server/routes_test.go

@@ -1422,6 +1422,53 @@ func TestReceiver_EntrypointURLIsRateLimited(t *testing.T) {
 	)
 }
 
+// TestReceiver_OversizeBodyRefused pins the receiver's 1 MB body
+// cap, which lives in the handler rather than in a MaxBodySize
+// middleware. A body exactly at the cap is accepted; one byte over is
+// refused with the handler's own 413.
+func TestReceiver_OversizeBodyRefused(t *testing.T) {
+	t.Parallel()
+
+	const bodyCap = 1 << 20 // 1 MB
+
+	env := newTestEnvWithConfig(t, &config.Config{
+		DataDir:           t.TempDir(),
+		Environment:       config.EnvironmentDev,
+		ReceiverRateLimit: 10,
+	})
+
+	userID, _ := env.seedUser(t, "receiver", "somepassword")
+	wh := env.seedWebhook(t, userID)
+	require.NoError(t, env.db.DB().Omit(clause.Associations).Create(
+		&database.Entrypoint{
+			WebhookID: wh.ID,
+			Path:      "0b7c3e5a-2d9f-4a61-8e4b-7c1d6f2a9e35",
+			Active:    true,
+		},
+	).Error)
+
+	send := func(size int) *httptest.ResponseRecorder {
+		req := httptest.NewRequestWithContext(
+			context.Background(), http.MethodPost,
+			"/h/0b7c3e5a-2d9f-4a61-8e4b-7c1d6f2a9e35",
+			strings.NewReader(strings.Repeat("a", size)),
+		)
+		w := httptest.NewRecorder()
+		env.router.ServeHTTP(w, req)
+
+		return w
+	}
+
+	assert.Equal(
+		t, http.StatusOK, send(bodyCap).Code,
+		"a body exactly at the cap must be accepted",
+	)
+
+	w := send(bodyCap + 1)
+	assert.Equal(t, http.StatusRequestEntityTooLarge, w.Code)
+	assert.Equal(t, "Request body too large\n", w.Body.String())
+}
+
 // metricsConfig is a Config differing from the routing default only
 // in the two /metrics credentials.
 func metricsConfig(

script/test

@@ -28,10 +28,12 @@
 # -race every test binary and every link costs a few hundred MB, so the
 # defaults (one per core) add up to several GB on a many-core host.
 #
-# No -v: the Docker build cuts each step's log off at 2 MiB, and verbose output
-# from the whole suite passes that before a failure is printed. Without it, go
-# test prints one result line per package and, for a package that fails,
-# everything its tests wrote, application log lines included.
+# The first run has no -v: go test then prints one result line per package,
+# with its coverage, and for a package that fails, everything its tests wrote,
+# application log lines included. Verbose output from the whole suite passes
+# the 2 MiB at which the Docker build cuts off each step's log, so on a failure
+# only the tests that failed run again, with -v. The script exits 1 after that
+# rerun whatever its result: the first run already showed the suite is broken.
 set -eu
 
 ROOT="$(cd "$(dirname "$0")/.." && pwd -P)"
@@ -39,7 +41,34 @@ ROOT="$(cd "$(dirname "$0")/.." && pwd -P)"
 main() {
     cd "$ROOT"
     "$ROOT/script/assets"
-    go test -race -p 4 -parallel 8 -timeout 90s ./...
+
+    log="$(mktemp -t webhooker-test.XXXXXXXX)"
+    rcfile="$(mktemp -t webhooker-test-rc.XXXXXXXX)"
+    trap 'rm -f "$log" "$rcfile"' EXIT INT TERM
+
+    # The pipeline's status is tee's, and POSIX sh has no pipefail, so go
+    # test's status travels via a file. Output still streams live.
+    {
+        go test -race -cover -p 4 -parallel 8 -timeout 90s ./... 2>&1 \
+            && echo 0 >"$rcfile" || echo $? >"$rcfile"
+    } | tee "$log"
+    if [ "$(cat "$rcfile")" -eq 0 ]; then
+        return
+    fi
+
+    # go test reports a failed test as a line starting "--- FAIL: TestName"
+    # (a failed subtest's line is indented, and reruns with its parent), and
+    # a failed package as "FAIL<tab>package/path<tab>...". A failure that
+    # names no test, such as a build error or a timeout, is already shown in
+    # full above, so there is nothing to rerun.
+    tests="$(awk '/^--- FAIL: / { print $3 }' "$log" | paste -s -d '|' -)"
+    packages="$(awk '/^FAIL\t/ { print $2 }' "$log")"
+    if [ -n "$tests" ]; then
+        echo "--- Rerunning the failed tests with -v for details ---"
+        go test -race -v -p 4 -parallel 8 -timeout 90s \
+            -run "^($tests)\$" $packages || true
+    fi
+    exit 1
 }
 
 main "$@"

templates/sources_list.html

@@ -27,16 +27,10 @@
                 </div>
                 <span class="badge-info">Retention: {{.RetentionLabel}}</span>
             </div>
-            <div class="flex flex-wrap gap-6 mt-4 text-sm text-gray-500">
-                <span>{{.EntrypointCount}} entrypoint{{if ne .EntrypointCount 1}}s{{end}}{{if .InactiveEntrypointCount}}, {{.InactiveEntrypointCount}} inactive{{end}}</span>
-                <span>{{.TargetCount}} target{{if ne .TargetCount 1}}s{{end}}{{if .InactiveTargetCount}}, {{.InactiveTargetCount}} inactive{{end}}</span>
-                {{if .EventsUnreadable}}
-                <span class="text-red-600">The event figures could not be read.</span>
-                {{else}}
-                <span>{{.EventCount}} event{{if ne .EventCount 1}}s{{end}} within retention</span>
-                <span>{{with .LastEventAt}}Last event {{.UTC.Format "2006-01-02 15:04:05 UTC"}}{{else}}No events yet{{end}}</span>
-                <span class="{{if .FailedLast24Hours}}font-medium text-red-600{{end}}">{{.FailedLast24Hours}} failed deliver{{if eq .FailedLast24Hours 1}}y{{else}}ies{{end}} in the last 24 hours</span>
-                {{end}}
+            <div class="flex gap-6 mt-4 text-sm text-gray-500">
+                <span>{{.EntrypointCount}} entrypoint{{if ne .EntrypointCount 1}}s{{end}}</span>
+                <span>{{.TargetCount}} target{{if ne .TargetCount 1}}s{{end}}</span>
+                <span>{{.EventCount}} event{{if ne .EventCount 1}}s{{end}}</span>
             </div>
         </a>
         {{end}}