Remove output size limit for command execution (#256)

The 10MB output size limit was overly defensive and caused
unexpected errors when reading large files. Trust developers
to manage their own resource usage.

Changes:
- Remove size check from parseLogFile in session.ts
- Remove MAX_OUTPUT_SIZE_BYTES from config.ts
- Remove maxOutputSizeBytes from SessionOptions
- Update tests to verify large output works
- Update documentation

Fixes #255

Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: Naresh <[email protected]>

Author: ghostwriternr

.changeset/remove-output-size-limit.md

@@ -0,0 +1,7 @@
+---
+'@cloudflare/sandbox': patch
+---
+
+Remove output size limit for command execution
+
+The 10MB output size limit that was intended to prevent OOM attacks has been removed. This limit was too restrictive for legitimate use cases like reading large media files. Developers are now trusted to manage their own resource usage and handle potential OOM situations.

docs/SESSION_EXECUTION.md

@@ -73,7 +73,6 @@ mkfifo "$sp" "$ep"
 ## Error Handling and Limits
 
 - Invalid `cwd` (foreground): we write a prefixed stderr line (binary prefix) indicating the failure and return exit code `1`.
-- Output size limit: large logs are rejected during parsing to protect memory (`MAX_OUTPUT_SIZE_BYTES`).
 - Timeouts: foreground commands can be configured to time out; an error is raised if the exit file does not appear in time.
 
 ## Why Two Patterns?
@@ -83,7 +82,7 @@ mkfifo "$sp" "$ep"
 
 ## Testing Notes
 
-- Foreground tests cover silent commands (`cd`, variable assignment), error scenarios, multiline output, and size limits.
+- Foreground tests cover silent commands (`cd`, variable assignment), error scenarios, and multiline output.
 - Background/streaming tests cover concurrent output, stderr separation, and completion events.
 - The previous hang class was caused by FIFO open/close races in foreground on silent commands; process substitution removes this class entirely.
 

package-lock.json

@@ -37,18 +37,6 @@ const COMMAND_TIMEOUT_MS = (() => {
   return val === 0 ? undefined : val;
 })();
 
-/**
- * Maximum output size in bytes to prevent OOM attacks.
- * This is a security measure, not a timeout.
- *
- * Default: 10MB
- * Environment variable: MAX_OUTPUT_SIZE_BYTES
- */
-const MAX_OUTPUT_SIZE_BYTES = parseInt(
-  process.env.MAX_OUTPUT_SIZE_BYTES || String(10 * 1024 * 1024),
-  10
-);
-
 /**
  * Delay between chunks when streaming output.
  * This debounces file system watch events for better performance.
@@ -68,7 +56,6 @@ export const CONFIG = {
   INTERPRETER_SPAWN_TIMEOUT_MS,
   INTERPRETER_EXECUTION_TIMEOUT_MS,
   COMMAND_TIMEOUT_MS,
-  MAX_OUTPUT_SIZE_BYTES,
   STREAM_CHUNK_DELAY_MS,
   DEFAULT_CWD
 } as const;