fix(inbound-api): resolve InboundAPI-002,004,006,008 — disconnect vs timeout, body size limit, active-node gate; surface InboundAPI-007

src/ScadaLink.InboundAPI/EndpointExtensions.cs

@@ -18,7 +18,10 @@ public static class EndpointExtensions
 {
     public static IEndpointRouteBuilder MapInboundAPI(this IEndpointRouteBuilder endpoints)
     {
-        endpoints.MapPost("/api/{methodName}", HandleInboundApiRequest);
+        endpoints.MapPost("/api/{methodName}", HandleInboundApiRequest)
+            // InboundAPI-006 / InboundAPI-008: active-node gating + request body
+            // size cap are enforced by the endpoint filter before the handler runs.
+            .AddEndpointFilter<InboundApiEndpointFilter>();
         return endpoints;
     }
 
@@ -86,6 +89,14 @@ public static class EndpointExtensions
 
         if (!scriptResult.Success)
         {
+            // InboundAPI-004: a client-aborted request is not a script failure.
+            // Do not pollute the failure log (reserved for genuine script errors)
+            // and do not attempt to write a 500 body to an already-gone connection.
+            if (httpContext.RequestAborted.IsCancellationRequested)
+            {
+                return Results.Empty;
+            }
+
             // WP-5: 500 for script failures, safe error message
             logger.LogWarning(
                 "Inbound API script failure for method {Method}: {Error}",