@brust/core 2.0.0-alpha.1 → 2.0.0-alpha.2

package/native/index.d.ts

@@ -43,10 +43,14 @@ export declare function compileTree(path: string, root: string, runtimeImport: s
 /** The bound address as `host:port` (port 0 resolves here). */
 export declare function localAddr(): string
 
-/** M3-F A3 consumer `{ prefix?, maxBodyBytes? }` (defaults `/_brust/action`, 262144). Present = actions on. */
+/** M3-F A3 consumer `{ prefix?, maxBodyBytes?, maxResponseBytes? }` (defaults `/_brust/action`, 1 MiB, 8 MiB). Present = actions on. */
 export interface NapiActionsOptions {
   prefix?: string
   maxBodyBytes?: number
+  /** F82: cap on an action response body (default 8388608). */
+  maxResponseBytes?: number
+  /** `"reject"` (default) or `"allow"` (F87): cross-site mutating action requests. */
+  crossSite?: string
 }
 
 /**
@@ -91,6 +95,13 @@ export interface NapiInvalidateResult {
  */
 export declare function planJobs(slot: number, len: number): string
 
+/**
+ * F82: hand Rust the response body of the calling worker's in-flight `fetch` call for `slot`
+ * (too large for the SAB slot). `false` = declined (over `max_response_bytes`, not in a `fetch`
+ * call, already put, nothing bound). Sync, on the worker's JS thread; never throws.
+ */
+export declare function putFetchReply(slot: number, body: Uint8Array): boolean
+
 /**
  * Register the calling worker with the current server. `buf` is a view of
  * the worker's SharedArrayBuffer, which must outlive the process's use of
@@ -137,6 +148,13 @@ export interface StartOptions {
  */
 export declare function startServer(opts: StartOptions): void
 
+/**
+ * F82: the heap request body of the calling worker's in-flight `fetch` call for `slot`, once.
+ * `None` when there is none, nothing is bound, or the binding is ambiguous. Sync, on the
+ * worker's JS thread; never throws.
+ */
+export declare function takeFetchBody(slot: number): Uint8Array | null
+
 /**
  * Resolves once `workers` workers registered with the current server;
  * rejects after `timeout_ms` (the caller decides the exit policy).

package/native/index.js

@@ -89,8 +89,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-android-arm64')
         const bindingPackageVersion = require('@brust/native-android-arm64/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -105,8 +105,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-android-arm-eabi')
         const bindingPackageVersion = require('@brust/native-android-arm-eabi/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -126,8 +126,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-win32-x64-gnu')
           const bindingPackageVersion = require('@brust/native-win32-x64-gnu/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -142,8 +142,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-win32-x64-msvc')
           const bindingPackageVersion = require('@brust/native-win32-x64-msvc/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -159,8 +159,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-win32-ia32-msvc')
         const bindingPackageVersion = require('@brust/native-win32-ia32-msvc/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -175,8 +175,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-win32-arm64-msvc')
         const bindingPackageVersion = require('@brust/native-win32-arm64-msvc/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -194,8 +194,8 @@ function requireNative() {
     try {
       const binding = require('@brust/native-darwin-universal')
       const bindingPackageVersion = require('@brust/native-darwin-universal/package.json').version
-      if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-        throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+      if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+        throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
       }
       return binding
     } catch (e) {
@@ -210,8 +210,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-darwin-x64')
         const bindingPackageVersion = require('@brust/native-darwin-x64/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -226,8 +226,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-darwin-arm64')
         const bindingPackageVersion = require('@brust/native-darwin-arm64/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -246,8 +246,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-freebsd-x64')
         const bindingPackageVersion = require('@brust/native-freebsd-x64/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -262,8 +262,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-freebsd-arm64')
         const bindingPackageVersion = require('@brust/native-freebsd-arm64/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -283,8 +283,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-x64-musl')
           const bindingPackageVersion = require('@brust/native-linux-x64-musl/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -299,8 +299,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-x64-gnu')
           const bindingPackageVersion = require('@brust/native-linux-x64-gnu/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -317,8 +317,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-arm64-musl')
           const bindingPackageVersion = require('@brust/native-linux-arm64-musl/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -333,8 +333,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-arm64-gnu')
           const bindingPackageVersion = require('@brust/native-linux-arm64-gnu/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -351,8 +351,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-arm-musleabihf')
           const bindingPackageVersion = require('@brust/native-linux-arm-musleabihf/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -367,8 +367,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-arm-gnueabihf')
           const bindingPackageVersion = require('@brust/native-linux-arm-gnueabihf/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -385,8 +385,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-loong64-musl')
           const bindingPackageVersion = require('@brust/native-linux-loong64-musl/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -401,8 +401,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-loong64-gnu')
           const bindingPackageVersion = require('@brust/native-linux-loong64-gnu/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -419,8 +419,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-riscv64-musl')
           const bindingPackageVersion = require('@brust/native-linux-riscv64-musl/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -435,8 +435,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-riscv64-gnu')
           const bindingPackageVersion = require('@brust/native-linux-riscv64-gnu/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -452,8 +452,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-linux-ppc64-gnu')
         const bindingPackageVersion = require('@brust/native-linux-ppc64-gnu/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -468,8 +468,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-linux-s390x-gnu')
         const bindingPackageVersion = require('@brust/native-linux-s390x-gnu/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -488,8 +488,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-openharmony-arm64')
         const bindingPackageVersion = require('@brust/native-openharmony-arm64/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -504,8 +504,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-openharmony-x64')
         const bindingPackageVersion = require('@brust/native-openharmony-x64/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -520,8 +520,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-openharmony-arm')
         const bindingPackageVersion = require('@brust/native-openharmony-arm/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.1' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -661,8 +661,8 @@ if (!nativeBinding || forceWasi) {
       if (!candidateFailed) {
         if (process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
           const bindingPackageVersion = require('@brust/native-wasm32-wasi/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.1') {
-            throw new Error(`WASI binding package version mismatch, expected 2.0.0-alpha.1 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.2') {
+            throw new Error(`WASI binding package version mismatch, expected 2.0.0-alpha.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
         }
         wasiBinding = require('@brust/native-wasm32-wasi')
@@ -784,6 +784,8 @@ module.exports.cacheStats = nativeBinding.cacheStats
 module.exports.compileTree = nativeBinding.compileTree
 module.exports.localAddr = nativeBinding.localAddr
 module.exports.planJobs = nativeBinding.planJobs
+module.exports.putFetchReply = nativeBinding.putFetchReply
 module.exports.registerWorker = nativeBinding.registerWorker
 module.exports.startServer = nativeBinding.startServer
+module.exports.takeFetchBody = nativeBinding.takeFetchBody
 module.exports.untilReady = nativeBinding.untilReady

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brust/core",
-  "version": "2.0.0-alpha.1",
+  "version": "2.0.0-alpha.2",
   "description": "brust v2 — React components compiled to Rust-rendered templates",
   "license": "MIT",
   "repository": {
@@ -44,7 +44,7 @@
     ]
   },
   "dependencies": {
-    "@brust/runtime-dom": "2.0.0-alpha.1"
+    "@brust/runtime-dom": "2.0.0-alpha.2"
   },
   "peerDependencies": {
     "react": "^19.0.0",
@@ -81,11 +81,11 @@
     "access": "public"
   },
   "optionalDependencies": {
-    "@brust/native-darwin-x64": "2.0.0-alpha.1",
-    "@brust/native-darwin-arm64": "2.0.0-alpha.1",
-    "@brust/native-linux-x64-gnu": "2.0.0-alpha.1",
-    "@brust/native-linux-arm64-gnu": "2.0.0-alpha.1",
-    "@brust/native-linux-x64-musl": "2.0.0-alpha.1",
-    "@brust/native-linux-arm64-musl": "2.0.0-alpha.1"
+    "@brust/native-darwin-x64": "2.0.0-alpha.2",
+    "@brust/native-darwin-arm64": "2.0.0-alpha.2",
+    "@brust/native-linux-x64-gnu": "2.0.0-alpha.2",
+    "@brust/native-linux-arm64-gnu": "2.0.0-alpha.2",
+    "@brust/native-linux-x64-musl": "2.0.0-alpha.2",
+    "@brust/native-linux-arm64-musl": "2.0.0-alpha.2"
   }
 }

package/src/actions/prefix.ts

@@ -1,6 +1,8 @@
 // Browser-safe (the client imports it): no elysia import.
 export const DEFAULT_ACTION_PREFIX = '/_brust/action'
-export const DEFAULT_MAX_BODY_BYTES = 262_144
+export const DEFAULT_MAX_BODY_BYTES = 1_048_576
+export const DEFAULT_MAX_RESPONSE_BYTES = 8_388_608
+export const MAX_ACTION_BYTES = 67_108_864
 const SEG = /^[A-Za-z0-9._~-]+$/
 
 /** Why `p` cannot be the actions prefix, or null. Segment-safe like the server's match. */

package/src/actions-bridge.ts

@@ -1,6 +1,7 @@
 // The worker side of the `fetch` call kind (design E4/E5, contracts A1/A2). Rust forwards the actions prefix subtree
 // here; the app registered with `setActionsApp` (Elysia 2 via brust() — m3f-actions-elysia) answers a web Request
 // with a web Response, framed into this worker's SAB slot. No Elysia import: the app is anything with `fetch`.
+import { putFetchReply, takeFetchBody } from './native'
 import type { LoaderReq } from './routes'
 import { runInStoreContext } from './store/server-context'
 
@@ -9,6 +10,7 @@ export interface ActionsManifest {
   entry: string
   prefix: string
   maxBodyBytes: number
+  maxResponseBytes?: number
 }
 /** What the worker drives: an Elysia 2 app (`app.fetch`, web-standard), or anything with that shape. */
 export interface ActionsApp {
@@ -20,13 +22,30 @@ export interface FetchRequest {
   method: string
   url: string
   headers: [string, string][]
-  body: { text: string } | { b64: string } | null
+  /** `{heap: n}` (F82): more than 262144 bytes, fetched with `takeFetchBody(slot)`. */
+  body: { text: string } | { b64: string } | { heap: number } | null
   req: LoaderReq
 }
-/** A2 meta: exactly these two keys (never a store). */
+/** A2 meta: `status`, `headers`, and (F82) `heap` — the byte length of a response body that crossed by
+ * `putFetchReply` instead of the slot (the slot body is then empty). Never a store. */
 export interface FetchMeta {
   status: number
   headers: [string, string][]
+  heap?: number
+}
+
+/** F82: the worker→Rust heap channel for the in-flight `fetch` call of a slot. The default is the napi addon,
+ * loaded lazily (so a fetch that never needs it never touches the binding). */
+export interface HeapIo {
+  takeBody(slot: number): Uint8Array | null
+  putReply(slot: number, body: Uint8Array): boolean
+}
+const nativeHeapIo: HeapIo = { takeBody: (slot) => takeFetchBody(slot), putReply: (slot, body) => putFetchReply(slot, body) }
+
+let maxResponseBytes = 8_388_608
+/** `startWorker` sets the manifest's `actions.maxResponseBytes` (R5). Default 8388608. */
+export function setActionsLimits(l: { maxResponseBytes: number }): void {
+  maxResponseBytes = l.maxResponseBytes
 }
 
 let app: ActionsApp | null = null
@@ -49,21 +68,22 @@ const TEXT_PLAIN: [string, string][] = [['content-type', 'text/plain; charset=ut
 
 /** A1 → web Request (R8 origin: `http://<host>` when the host pair is sane, else `localhost`). Bytes, never a
  * string body, so no content-type is invented. GET/HEAD never carry a body (R4; `new Request` forbids one). */
-export function toRequest(r: FetchRequest): Request {
+export function toRequest(r: FetchRequest, heapBody?: Uint8Array): Request {
   const host = r.headers.find(([k]) => k === 'host')?.[1]
   const origin = `http://${host && HOST.test(host) ? host : 'localhost'}`
   const bodyless = r.method === 'GET' || r.method === 'HEAD'
-  const body = bodyless || !r.body ? undefined : 'text' in r.body ? enc.encode(r.body.text) : Buffer.from(r.body.b64, 'base64')
+  const b = r.body
+  const body = bodyless || !b ? undefined : 'heap' in b ? (heapBody as BodyInit | undefined) : 'text' in b ? enc.encode(b.text) : Buffer.from(b.b64, 'base64')
   return new Request(origin + r.url, { method: r.method, headers: r.headers, body })
 }
 
 /** A2 writer at `slot`'s sub-region `[slot*sub, slot*sub+sub)`, `sub = floor(view.byteLength / slots)`:
  * `[u32 LE meta_len][meta JSON][body]`; returns the byte length. A frame that does not fit becomes R10's 500
  * (always fits a real slot); 0 when not even that fits (Rust: BadResponse → 500). */
-export function writeFramed(view: Uint8Array, slot: number, slots: number, status: number, headers: [string, string][], body: Uint8Array): number {
+export function writeFramed(view: Uint8Array, slot: number, slots: number, status: number, headers: [string, string][], body: Uint8Array, heap?: number): number {
   const sub = Math.floor(view.byteLength / Math.max(1, slots))
   const dst = view.subarray(slot * sub, slot * sub + sub)
-  const meta = enc.encode(JSON.stringify({ status, headers } satisfies FetchMeta))
+  const meta = enc.encode(JSON.stringify((heap === undefined ? { status, headers } : { status, headers, heap }) satisfies FetchMeta))
   const total = 4 + meta.length + body.length
   if (total <= sub) return put(dst, meta, body)
   console.error(`[brust] action response ${total} bytes exceeds the ${sub}-byte slot (F82) — answered 500`)
@@ -92,12 +112,21 @@ export function readFramed(view: Uint8Array, slot: number, slots: number, len: n
 
 const fail = (view: Uint8Array, slot: number, slots: number, msg: string) => writeFramed(view, slot, slots, 500, TEXT_PLAIN, enc.encode(msg))
 
-/** The `fetch` call (makeDispatch). Never rejects, never writes JSON: every outcome is a frame. */
-export async function runFetch(requestJson: string, view: Uint8Array, slot: number, slots: number): Promise<number> {
+/** The `fetch` call (makeDispatch). Never rejects, never writes JSON: every outcome is a frame. A body of
+ * more than 262144 bytes arrives by `io.takeBody` (A1 `{heap}`); a response that does not fit the slot leaves
+ * by `io.putReply` with only status/headers/`heap` in the slot (F82), unless it exceeds `max_response_bytes`. */
+export async function runFetch(requestJson: string, view: Uint8Array, slot: number, slots: number, io: HeapIo = nativeHeapIo): Promise<number> {
   const a = app
   if (!a) return fail(view, slot, slots, 'brust: actions are not configured in this worker')
   try {
-    const req = toRequest(JSON.parse(requestJson) as FetchRequest)
+    const fr = JSON.parse(requestJson) as FetchRequest
+    let heapBody: Uint8Array | undefined
+    if (fr.body && 'heap' in fr.body) {
+      const got = io.takeBody(slot)
+      if (!got || got.length !== fr.body.heap) throw new Error(`heap request body ${got ? `${got.length} != ${fr.body.heap}` : 'missing'} bytes (F82)`)
+      heapBody = got
+    }
+    const req = toRequest(fr, heapBody)
     // R1/E5: one store scope around the handler AND the body read (a lazy body may still touch stores).
     const out = await runInStoreContext(async () => {
       const res = await a.fetch(req)
@@ -108,7 +137,17 @@ export async function runFetch(requestJson: string, view: Uint8Array, slot: numb
       for (const c of res.headers.getSetCookie()) pairs.push(['set-cookie', c])
       return { status: res.status, pairs, body: new Uint8Array(await res.arrayBuffer()) }
     })
-    return writeFramed(view, slot, slots, out.status, out.pairs, out.body)
+    const sub = Math.floor(view.byteLength / Math.max(1, slots))
+    const metaLen = (m: FetchMeta) => enc.encode(JSON.stringify(m)).length
+    if (4 + metaLen({ status: out.status, headers: out.pairs }) + out.body.length <= sub) return writeFramed(view, slot, slots, out.status, out.pairs, out.body)
+    if (out.body.length > maxResponseBytes) {
+      console.error(`[brust] action response body ${out.body.length} bytes exceeds max_response_bytes ${maxResponseBytes} — answered 500`)
+      return writeFramed(view, slot, slots, 500, TEXT_PLAIN, enc.encode(`brust: action response exceeds ${maxResponseBytes} bytes`))
+    }
+    // The meta alone must fit; otherwise writeFramed's own 500 (R10) answers.
+    if (4 + metaLen({ status: out.status, headers: out.pairs, heap: out.body.length }) > sub) return writeFramed(view, slot, slots, out.status, out.pairs, out.body)
+    if (!io.putReply(slot, out.body)) throw new Error('heap reply declined by the server (F82)')
+    return writeFramed(view, slot, slots, out.status, out.pairs, new Uint8Array(0), out.body.length)
   } catch (e) {
     console.error(`[brust] action failed: ${e instanceof Error ? (e.stack ?? e.message) : String(e)}`)
     return fail(view, slot, slots, 'brust: action failed')

package/src/build/config.ts

@@ -4,18 +4,20 @@
 // `server_only` is the app config `serverOnly` of the compiler spec (§8.2): the compiler refuses
 // such an import in client code, and every browser bundle refuses to include it.
 import { join } from 'node:path'
-import { DEFAULT_ACTION_PREFIX, DEFAULT_MAX_BODY_BYTES, prefixError } from '../actions/prefix'
+import { DEFAULT_ACTION_PREFIX, DEFAULT_MAX_BODY_BYTES, DEFAULT_MAX_RESPONSE_BYTES, MAX_ACTION_BYTES, prefixError } from '../actions/prefix'
 import { BuildError } from './errors'
 
-// [actions] (opt-in, ruling R6): present table => actions on. Crosses napi as u32.
+// [actions] (opt-in, ruling R6): present table => actions on. Both byte caps cross napi as u32 (F82: 1..64 MiB / 256 KiB..64 MiB).
 //   [actions]
-//   entry = "actions.ts"   prefix = "/_brust/action"   max_body_bytes = 262144
-const MAX_U32 = 0xffff_ffff
+//   entry = "actions.ts"   prefix = "/_brust/action"   max_body_bytes = 1048576  max_response_bytes = 8388608   cross_site = "reject" | "allow" (F87)
+const MIN_RESPONSE_BYTES = 262_144
 
 export interface ActionsBuildConfig {
   entry: string
   prefix: string
   maxBodyBytes: number
+  maxResponseBytes: number
+  crossSite: 'reject' | 'allow'
 }
 
 export interface BuildConfig {
@@ -41,11 +43,23 @@ function parseActions(file: string, raw: unknown): ActionsBuildConfig | null {
   let maxBodyBytes = DEFAULT_MAX_BODY_BYTES
   if (t.max_body_bytes !== undefined) {
     const n = t.max_body_bytes
-    if (typeof n !== 'number' || !Number.isInteger(n) || n < 1 || n > MAX_U32)
-      throw new BuildError('config', `${file}: actions.max_body_bytes must be an integer in 1..${MAX_U32} (got ${String(n)})`)
+    if (typeof n !== 'number' || !Number.isInteger(n) || n < 1 || n > MAX_ACTION_BYTES)
+      throw new BuildError('config', `${file}: actions.max_body_bytes must be an integer in 1..${MAX_ACTION_BYTES} (got ${String(n)})`)
     maxBodyBytes = n
   }
-  return { entry, prefix, maxBodyBytes }
+  let maxResponseBytes = DEFAULT_MAX_RESPONSE_BYTES
+  if (t.max_response_bytes !== undefined) {
+    const n = t.max_response_bytes
+    if (typeof n !== 'number' || !Number.isInteger(n) || n < MIN_RESPONSE_BYTES || n > MAX_ACTION_BYTES)
+      throw new BuildError('config', `${file}: actions.max_response_bytes must be an integer in ${MIN_RESPONSE_BYTES}..${MAX_ACTION_BYTES} (got ${String(n)})`)
+    maxResponseBytes = n
+  }
+  let crossSite: 'reject' | 'allow' = 'reject'
+  if (t.cross_site !== undefined) {
+    if (t.cross_site !== 'reject' && t.cross_site !== 'allow') throw new BuildError('config', `${file}: actions.cross_site must be "reject" or "allow"`)
+    crossSite = t.cross_site
+  }
+  return { entry, prefix, maxBodyBytes, maxResponseBytes, crossSite }
 }
 
 const DEFAULT_ENTRY = 'actions.ts'

package/src/build/index.ts

@@ -175,7 +175,7 @@ async function buildInto(
   await buildJobs(out, compiled, ctx.sourceOf, appRoot, storeModules(manifest))
   manifest.actions =
     o.actions && o.actionsEntry
-      ? { entry: await buildActions(out, o.actionsEntry), prefix: o.actions.prefix, maxBodyBytes: o.actions.maxBodyBytes }
+      ? { entry: await buildActions(out, o.actionsEntry), prefix: o.actions.prefix, maxBodyBytes: o.actions.maxBodyBytes, maxResponseBytes: o.actions.maxResponseBytes, crossSite: o.actions.crossSite }
       : null
   writeFileSync(join(out, 'manifest.json'), `${JSON.stringify(manifest, null, 2)}\n`)
   writeFileSync(join(out, MARKER), 'generated by `brust build`: this directory is replaced on every build\n')

package/src/build/manifest.ts

@@ -51,11 +51,13 @@ export interface RouteRecord {
   catch_all: boolean
 }
 
-/** `manifest.actions` (A3): `entry` is relative to dist; `maxBodyBytes` is camelCase by contract. */
+/** `manifest.actions` (A3): `entry` is relative to dist; `maxBodyBytes`/`maxResponseBytes` are camelCase by contract. */
 export interface ActionsRecord {
   entry: string
   prefix: string
   maxBodyBytes: number
+  maxResponseBytes: number
+  crossSite: 'reject' | 'allow'
 }
 
 export interface ManifestJson {

package/src/native.ts

@@ -41,10 +41,14 @@ export interface CorsOptions {
   credentials?: boolean
   maxAgeSeconds?: number
 }
-/** napi `NapiActionsOptions`; defaults `/_brust/action`, 262144. */
+/** napi `NapiActionsOptions`; defaults `/_brust/action`, 1048576, 8388608. */
 export interface ActionsOptions {
   prefix?: string
   maxBodyBytes?: number
+  /** F82: response body cap (bytes). Default 8388608. */
+  maxResponseBytes?: number
+  /** F87: cross-site mutating requests. Default `reject`. */
+  crossSite?: 'reject' | 'allow'
 }
 export type WorkerFn = (kind: 'loader' | 'jobs' | 'fetch', requestJson: string, slot: number) => Promise<number>
 export interface NativeBinding {
@@ -57,6 +61,10 @@ export interface NativeBinding {
   localAddr(): string
   /** M3-P P6 — see crates/brust-napi/src/server.rs `plan_jobs`. Never throws. */
   planJobs(slot: number, len: number): string
+  /** F82 — the heap request body of the in-flight `fetch` call, once; null if none. Never throws. */
+  takeFetchBody(slot: number): Uint8Array | null
+  /** F82 — hand Rust a response body too large for the slot; false = declined. Never throws. */
+  putFetchReply(slot: number, body: Uint8Array): boolean
 }
 
 let binding: NativeBinding | null = null
@@ -83,3 +91,5 @@ export const cacheInvalidate = (args: InvalidateArgs): InvalidateResult => nativ
 export const cacheStats = (): string => native().cacheStats()
 export const localAddr = (): string => native().localAddr()
 export const planJobs = (slot: number, len: number): string => native().planJobs(slot, len)
+export const takeFetchBody = (slot: number): Uint8Array | null => native().takeFetchBody(slot)
+export const putFetchReply = (slot: number, body: Uint8Array): boolean => native().putFetchReply(slot, body)

package/src/run.ts

@@ -22,7 +22,7 @@ export interface RunOptions {
 
 /** The manifest fields `run` needs (build/manifest.ts owns the full shape). */
 export interface RunManifest {
-  actions?: { entry: string; prefix: string; maxBodyBytes: number } | null
+  actions?: { entry: string; prefix: string; maxBodyBytes: number; maxResponseBytes?: number; crossSite?: 'reject' | 'allow' } | null
 }
 
 /** Pure: the napi `StartOptions`. No actions/cors → exactly the pre-actions keys. */
@@ -35,7 +35,7 @@ export function startOptions(cfg: BrustConfig, distDir: string, m: RunManifest,
     callTimeoutMs: cfg.callTimeoutMs,
     workerThreads: cfg.ioThreads,
     generator: `brust/${version}`,
-    ...(m.actions ? { actions: { prefix: m.actions.prefix, maxBodyBytes: m.actions.maxBodyBytes } } : {}),
+    ...(m.actions ? { actions: { prefix: m.actions.prefix, maxBodyBytes: m.actions.maxBodyBytes, ...(m.actions.maxResponseBytes !== undefined ? { maxResponseBytes: m.actions.maxResponseBytes } : {}), ...(m.actions.crossSite ? { crossSite: m.actions.crossSite } : {}) } } : {}),
     ...(cfg.cors ? { cors: cfg.cors } : {}),
   }
 }

package/src/worker.ts

@@ -3,7 +3,8 @@
 // handler NEVER rejects across the tsfn: every failure becomes `{error}` / `{id, error}`.
 import { join, resolve } from 'node:path'
 import { workerData } from 'node:worker_threads'
-import { runFetch, setActionsApp } from './actions-bridge'
+import { runFetch, setActionsApp, setActionsLimits } from './actions-bridge'
+import { DEFAULT_MAX_RESPONSE_BYTES } from './actions/prefix'
 import { planJobs, registerWorker } from './native'
 import { installServerResolver, type StoreSnapshot } from './store/core-adapter'
 import { collectSnapshot, getServerInstance, runInStoreContext, touchStores } from './store/server-context'
@@ -71,7 +72,7 @@ export interface ManifestLike {
   >
   jobs_module?: string
   /** `brust build` (M3-F A3): the actions entry, relative to dist. Absent/null = no actions. */
-  actions?: { entry: string; prefix: string; maxBodyBytes: number } | null
+  actions?: { entry: string; prefix: string; maxBodyBytes: number; maxResponseBytes?: number } | null
 }
 
 // ---- SAB slot writer ----
@@ -327,6 +328,7 @@ export async function startWorker(opts: StartWorkerOptions = {}): Promise<number
     // Lazy: elysia is an optional peer, so an app without [actions] must boot without it installed (R7).
     const { loadActionsApp } = await import('./actions/load')
     setActionsApp(await loadActionsApp(join(dist, manifest.actions.entry), manifest.actions.prefix))
+    setActionsLimits({ maxResponseBytes: manifest.actions.maxResponseBytes ?? DEFAULT_MAX_RESPONSE_BYTES })
   }
   sab = opts.sab ?? new SharedArrayBuffer(SLOT_BYTES * slots)
   view = new Uint8Array(sab)