Options every IHttpAdapter implementation in this package
accepts, supplied by RuntimePlugin when it constructs one.
They are grouped into an object rather than appended as another positional
parameter because the four adapters already take different leading arguments
(an injected serve host, a ws module, a WebSocket host), so a positional
addition would sit at a different index in each.
maxBodyBytes: number
Maximum request-body size, in bytes, enforced where the body is actually read. Omitted, the read is unbounded — the released behaviour.
This is the layer a request header cannot switch off.
HttpSecurityPlugin({ requestSize: { maxBodySize } }) refuses on a
declared Content-Length before anything is read, which is cheaper and
reports earlier; a chunked request declares no length, so only the read
itself can bound it. Set both, and set this one to the same value or
higher.