@basaltkit/hono 1.0.0 → 1.1.0

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 Machize Contributors
+Copyright (c) 2026 Basalt Contributors
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/dist/index.d.ts

@@ -5,12 +5,20 @@ import { BasaltRoute, RequestEnricher, RouteGuard } from '@basaltkit/http';
 import { Hono } from 'hono';
 
 declare const HONO: _basaltkit_core.Token<Hono<any, hono_types.BlankSchema, "/">>;
+/** Default maximum request body size (1 MiB) — override via honoPlugin({ bodyLimit }). */
+declare const DEFAULT_BODY_LIMIT = 1048576;
 /** Mounts Basalt routes on a Hono app (usable without the plugin). */
 declare function registerRoutes(app: Hono<any>, routes: BasaltRoute[], container?: Container, enrichers?: RequestEnricher[], guards?: RouteGuard[]): void;
 interface HonoPluginOptions {
     routes?: BasaltRoute[];
     /** Bring your own Hono app; otherwise a fresh one is created. */
     app?: Hono<any>;
+    /**
+     * Maximum request body size in bytes. A request whose `Content-Length`
+     * exceeds this is rejected with 413 before the body is read — Hono/edge has
+     * no default cap, so without this a large upload is unbounded. Default: 1 MiB.
+     */
+    bodyLimit?: number;
 }
 /**
  * Runs Basalt on Hono (Node, Bun, Deno, edge). The same routes, enrichers and
@@ -19,4 +27,4 @@ interface HonoPluginOptions {
  */
 declare function honoPlugin(options?: HonoPluginOptions): _basaltkit_core.BasaltPlugin<unknown>;
 
-export { HONO, type HonoPluginOptions, honoPlugin, registerRoutes };
+export { DEFAULT_BODY_LIMIT, HONO, type HonoPluginOptions, honoPlugin, registerRoutes };

package/dist/index.js

@@ -8,6 +8,7 @@ import {
 } from "@basaltkit/http";
 import { Hono } from "hono";
 var HONO = createToken("hono");
+var DEFAULT_BODY_LIMIT = 1048576;
 async function parseBody(context) {
   const method = context.req.method;
   if (method === "GET" || method === "HEAD") return void 0;
@@ -119,7 +120,18 @@ function honoPlugin(options = {}) {
       const metadata = ensureMetadata(container);
       const enrichers = metadata.get("http:enrichers");
       const guards = metadata.get("http:guards");
+      const bodyLimit = options.bodyLimit ?? DEFAULT_BODY_LIMIT;
       hooks.on("app:booted", () => {
+        app.use(async (context, next) => {
+          const declared = Number(context.req.header("content-length") ?? "");
+          if (Number.isFinite(declared) && declared > bodyLimit) {
+            return context.json(
+              { code: "PAYLOAD_TOO_LARGE", message: `Request body exceeds the ${bodyLimit}-byte limit.` },
+              413
+            );
+          }
+          return next();
+        });
         if (collector.afterHooks.length) {
           app.use(async (context, next) => {
             const start = Date.now();
@@ -157,6 +169,7 @@ function honoPlugin(options = {}) {
   });
 }
 export {
+  DEFAULT_BODY_LIMIT,
   HONO,
   honoPlugin,
   registerRoutes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@basaltkit/hono",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "Hono adapter for Basalt: run the same typed routes, enrichers and guards on Hono (Node, Bun, Deno, edge) as on Fastify or Express.",
   "license": "MIT",
   "type": "module",
@@ -15,7 +15,7 @@
   ],
   "dependencies": {
     "@basaltkit/core": "^1.0.0",
-    "@basaltkit/http": "^1.0.0"
+    "@basaltkit/http": "^1.3.0"
   },
   "peerDependencies": {
     "hono": "^4.0.0"