@h-ai/serv 0.1.0-alpha.68 → 0.1.0-alpha.70

package/dist/features/feedback.js

@@ -0,0 +1,82 @@
+import { implement, servM } from '../chunk-TWHCU6HT.js';
+import { apiContract } from '@h-ai/api-contract';
+import { core, err, HaiCommonError } from '@h-ai/core';
+
+function createFeedbackProcedures(deps) {
+  const contextFor = async (context) => {
+    try {
+      const actor = await deps.resolveContext(context);
+      if (!actor?.scopeId || actor.userId !== context.session.userId)
+        return err(HaiCommonError.FORBIDDEN, servM("serv_errorForbidden", { locale: context.locale }));
+      return { success: true, data: actor };
+    } catch {
+      return err(HaiCommonError.INTERNAL_ERROR, servM("serv_errorInternal", { locale: context.locale }));
+    }
+  };
+  const router = implement(apiContract.feedback).context();
+  return router.route("reports.submit").auth().handle(async ({ input, context }) => {
+    const actor = await contextFor(context);
+    if (!actor.success)
+      return actor;
+    return core.context.run(actor.data, () => deps.feedback.submit(input, actor.data));
+  }).route("reports.list").auth().handle(async ({ input, context }) => {
+    const actor = await contextFor(context);
+    if (!actor.success)
+      return actor;
+    return core.context.run(actor.data, () => deps.feedback.list(input, actor.data));
+  }).route("reports.get").auth().handle(async ({ input, context }) => {
+    const actor = await contextFor(context);
+    if (!actor.success)
+      return actor;
+    return core.context.run(actor.data, () => deps.feedback.get(input.id, actor.data));
+  }).route("reports.getEvidence").auth().handle(async ({ input, context }) => {
+    const actor = await contextFor(context);
+    if (!actor.success)
+      return actor;
+    return core.context.run(actor.data, () => deps.feedback.getEvidence(input, actor.data));
+  }).route("reports.setStatus").auth().handle(async ({ input, context }) => {
+    const actor = await contextFor(context);
+    if (!actor.success)
+      return actor;
+    return core.context.run(actor.data, () => deps.feedback.setStatus(input, actor.data));
+  }).route("reports.retry").auth().handle(async ({ input, context }) => {
+    const actor = await contextFor(context);
+    if (!actor.success)
+      return actor;
+    return core.context.run(actor.data, () => deps.feedback.retry(input, actor.data));
+  }).route("reports.export").auth().handle(async ({ input, context }) => {
+    const actor = await contextFor(context);
+    if (!actor.success)
+      return actor;
+    return core.context.run(actor.data, () => deps.feedback.export(input, actor.data));
+  }).route("reports.getExport").auth().handle(async ({ input, context }) => {
+    const actor = await contextFor(context);
+    if (!actor.success)
+      return actor;
+    return core.context.run(actor.data, () => deps.feedback.getExport(input, actor.data));
+  }).route("reports.appendEvidence").auth().handle(async ({ input, context }) => {
+    const actor = await contextFor(context);
+    if (!actor.success)
+      return actor;
+    return core.context.run(actor.data, () => deps.feedback.appendEvidence(input, actor.data));
+  }).route("reports.completeCollection").auth().handle(async ({ input, context }) => {
+    const actor = await contextFor(context);
+    if (!actor.success)
+      return actor;
+    return core.context.run(actor.data, () => deps.feedback.completeCollection(input, actor.data));
+  }).route("attachments.upload").auth().handle(async ({ input, context }) => {
+    const actor = await contextFor(context);
+    if (!actor.success)
+      return actor;
+    return core.context.run(actor.data, () => deps.feedback.uploadAttachment(input, actor.data));
+  }).route("attachments.get").auth().handle(async ({ input, context }) => {
+    const actor = await contextFor(context);
+    if (!actor.success)
+      return actor;
+    return core.context.run(actor.data, () => deps.feedback.getAttachment(input, actor.data));
+  }).build();
+}
+
+export { createFeedbackProcedures };
+//# sourceMappingURL=feedback.js.map
+//# sourceMappingURL=feedback.js.map

package/dist/features/feedback.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/features/serv-feature-feedback.ts"],"names":[],"mappings":";;;;AAgCO,SAAS,yBAAyB,IAAA,EAA6B;AACpE,EAAA,MAAM,UAAA,GAAa,OAAO,OAAA,KAAsC;AAC9D,IAAA,IAAI;AACF,MAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,cAAA,CAAe,OAAO,CAAA;AAC/C,MAAA,IAAI,CAAC,KAAA,EAAO,OAAA,IAAW,KAAA,CAAM,MAAA,KAAW,QAAQ,OAAA,CAAQ,MAAA;AACtD,QAAA,OAAO,GAAA,CAAI,cAAA,CAAe,SAAA,EAAW,KAAA,CAAM,qBAAA,EAAuB,EAAE,MAAA,EAAQ,OAAA,CAAQ,MAAA,EAAQ,CAAC,CAAA;AAC/F,MAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAe,IAAA,EAAM,KAAA,EAAM;AAAA,IAC/C,CAAA,CAAA,MACM;AACJ,MAAA,OAAO,GAAA,CAAI,cAAA,CAAe,cAAA,EAAgB,KAAA,CAAM,oBAAA,EAAsB,EAAE,MAAA,EAAQ,OAAA,CAAQ,MAAA,EAAQ,CAAC,CAAA;AAAA,IACnG;AAAA,EACF,CAAA;AACA,EAAA,MAAM,MAAA,GAAS,SAAA,CAAU,WAAA,CAAY,QAAQ,EAAE,OAAA,EAAqB;AACpE,EAAA,OAAO,MAAA,CACJ,KAAA,CAAM,gBAAgB,CAAA,CACtB,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,MAAA,CAAO,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EACnF,CAAC,CAAA,CACA,KAAA,CAAM,cAAc,CAAA,CACpB,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,IAAA,CAAK,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EACjF,CAAC,CAAA,CACA,KAAA,CAAM,aAAa,CAAA,CACnB,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,EAAA,EAAI,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EACnF,CAAC,CAAA,CACA,KAAA,CAAM,qBAAqB,CAAA,CAC3B,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,WAAA,CAAY,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EACxF,CAAC,CAAA,CACA,KAAA,CAAM,mBAAmB,CAAA,CACzB,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,SAAA,CAAU,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EACtF,CAAC,CAAA,CACA,KAAA,CAAM,eAAe,CAAA,CACrB,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,KAAA,CAAM,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EAClF,CAAC,CAAA,CACA,KAAA,CAAM,gBAAgB,CAAA,CACtB,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,MAAA,CAAO,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EACnF,CAAC,CAAA,CACA,KAAA,CAAM,mBAAmB,CAAA,CACzB,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,SAAA,CAAU,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EACtF,CAAC,CAAA,CACA,KAAA,CAAM,wBAAwB,CAAA,CAC9B,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,cAAA,CAAe,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EAC3F,CAAC,CAAA,CACA,KAAA,CAAM,4BAA4B,CAAA,CAClC,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,kBAAA,CAAmB,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EAC/F,CAAC,CAAA,CACA,KAAA,CAAM,oBAAoB,CAAA,CAC1B,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,gBAAA,CAAiB,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EAC7F,CAAC,CAAA,CACA,KAAA,CAAM,iBAAiB,CAAA,CACvB,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,aAAA,CAAc,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EAC1F,CAAC,EACA,KAAA,EAAM;AACX","file":"feedback.js","sourcesContent":["/** @h-ai/serv — 按需挂载反馈领域，不接收客户端身份或对象存储路径。 */\nimport type { FeedbackContext, FeedbackFunctions } from '@h-ai/feedback'\nimport type { ServContext } from '../serv-context.js'\nimport type { AuthenticatedServContext } from '../serv-router.js'\nimport { apiContract } from '@h-ai/api-contract'\nimport { core, err, HaiCommonError } from '@h-ai/core'\nimport { servM } from '../serv-i18n.js'\nimport { implement } from '../serv-router.js'\n\n/**\n * 已认证请求到反馈范围的可信映射，返回 null 时拒绝访问。\n * @example\n * ```ts\n * import type { FeedbackProcedureDeps } from '@h-ai/serv/features/feedback'\n * import { feedback } from '@h-ai/feedback'\n * const deps: FeedbackProcedureDeps = { feedback, resolveContext: ({ session }) => ({ scopeId: 'tenant-from-server', userId: session.userId, permissions: session.permissions }) }\n * ```\n */\nexport interface FeedbackProcedureDeps {\n  readonly feedback: FeedbackFunctions\n  readonly resolveContext: (context: AuthenticatedServContext) => FeedbackContext | null | Promise<FeedbackContext | null>\n}\n\n/**\n * 创建反馈的默认 procedures。宿主解析租户与权限，领域模块再次检查资源范围。\n * @example\n * ```ts\n * import { feedback } from '@h-ai/feedback'\n * import { createFeedbackProcedures } from '@h-ai/serv/features/feedback'\n * const procedures = createFeedbackProcedures({ feedback, resolveContext: ({ session }) => ({ scopeId: 'trusted-tenant', userId: session.userId, permissions: session.permissions }) })\n * ```\n */\nexport function createFeedbackProcedures(deps: FeedbackProcedureDeps) {\n  const contextFor = async (context: AuthenticatedServContext) => {\n    try {\n      const actor = await deps.resolveContext(context)\n      if (!actor?.scopeId || actor.userId !== context.session.userId)\n        return err(HaiCommonError.FORBIDDEN, servM('serv_errorForbidden', { locale: context.locale }))\n      return { success: true as const, data: actor }\n    }\n    catch {\n      return err(HaiCommonError.INTERNAL_ERROR, servM('serv_errorInternal', { locale: context.locale }))\n    }\n  }\n  const router = implement(apiContract.feedback).context<ServContext>()\n  return router\n    .route('reports.submit')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.submit(input, actor.data))\n    })\n    .route('reports.list')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.list(input, actor.data))\n    })\n    .route('reports.get')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.get(input.id, actor.data))\n    })\n    .route('reports.getEvidence')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.getEvidence(input, actor.data))\n    })\n    .route('reports.setStatus')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.setStatus(input, actor.data))\n    })\n    .route('reports.retry')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.retry(input, actor.data))\n    })\n    .route('reports.export')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.export(input, actor.data))\n    })\n    .route('reports.getExport')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.getExport(input, actor.data))\n    })\n    .route('reports.appendEvidence')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.appendEvidence(input, actor.data))\n    })\n    .route('reports.completeCollection')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.completeCollection(input, actor.data))\n    })\n    .route('attachments.upload')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.uploadAttachment(input, actor.data))\n    })\n    .route('attachments.get')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.getAttachment(input, actor.data))\n    })\n    .build()\n}\n"]}

package/dist/features/iam.d.ts

@@ -4,7 +4,7 @@ import * as zod from 'zod';
 import * as _orpc_contract from '@orpc/contract';
 import { IamFunctions } from '@h-ai/iam';
 export { TokenPair } from '@h-ai/iam';
-import { S as ServContext } from '../serv-context-C48WdBcd.js';
+import { S as ServContext } from '../serv-context-B-AxU8hj.js';
 import '@h-ai/core';
 
 /**

package/dist/features/storage.d.ts

@@ -2,8 +2,8 @@ import * as _orpc_server from '@orpc/server';
 import * as zod_v4_core from 'zod/v4/core';
 import * as zod from 'zod';
 import { StorageFunctions } from '@h-ai/storage';
-import { S as ServContext } from '../serv-context-C48WdBcd.js';
-import { A as AuthenticatedServContext } from '../serv-router-BX8hgYxo.js';
+import { S as ServContext } from '../serv-context-B-AxU8hj.js';
+import { A as AuthenticatedServContext } from '../serv-router-C8dSz2k-.js';
 import '@h-ai/core';
 
 /**

package/dist/index.d.ts

@@ -3,15 +3,15 @@ import { HaiResult, ValidationFormError } from '@h-ai/core';
 import { AIFunctions, AudioWsStartMessage, AudioFormat } from '@h-ai/ai';
 import { AnyContractRouter, OpenAPI } from '@orpc/contract';
 import { ProcedureHandler, ErrorMap, Meta, ProcedureHandlerOptions, ORPCErrorConstructorMap, Router } from '@orpc/server';
-import { a as ServSession, S as ServContext, b as ServIam, R as RefreshCookieConfig, C as CreateServContext, c as ServRequestMetadata, p as parseRequestContext, d as buildAuthContextFactory } from './serv-context-C48WdBcd.js';
-export { e as CreateServContextInput, N as NativeRefreshTokenTransportConfig, f as RefreshTokenPair } from './serv-context-C48WdBcd.js';
+import { a as ServSession, S as ServContext, b as ServIam, R as RefreshCookieConfig, C as CreateServContext, c as ServRequestMetadata, p as parseRequestContext, d as buildAuthContextFactory } from './serv-context-B-AxU8hj.js';
+export { e as CreateServContextInput, N as NativeRefreshTokenTransportConfig, f as RefreshTokenPair } from './serv-context-B-AxU8hj.js';
 import { MiddlewareHandler } from 'hono';
 import { z, ZodType } from 'zod';
 import { TransportServerKeyRing, CryptoFunctions, TransportKeyStore } from '@h-ai/crypto';
 import { ServerType } from '@hono/node-server';
 import { AddressInfo } from 'node:net';
-import { i as implement } from './serv-router-BX8hgYxo.js';
-export { A as AuthenticatedServContext, S as ServImplementer, a as ServRouteHandler, b as ServRoutePath, c as ServRouterBuilder } from './serv-router-BX8hgYxo.js';
+import { i as implement } from './serv-router-C8dSz2k-.js';
+export { A as AuthenticatedServContext, S as ServImplementer, a as ServRouteHandler, b as ServRoutePath, c as ServRouterBuilder } from './serv-router-C8dSz2k-.js';
 import { StorageFunctions } from '@h-ai/storage';
 
 /**
@@ -248,6 +248,8 @@ interface ServRpcHttpConfig {
  * ```
  */
 interface ServTransportRuntimeConfig {
+    /** 双向明文 UTF-8 字节上限；省略使用 1 MiB，范围 1 KiB～64 MiB。 */
+    readonly maxPlaintextBytes?: number;
     readonly keyExchangePath: `/${string}`;
     readonly excludePaths: readonly `/${string}`[];
 }
@@ -334,6 +336,7 @@ type ServCorsRuntimeConfigInput = Partial<ServCorsRuntimeConfig>;
  * ```
  */
 type ServTransportRuntimeConfigInput = Partial<{
+    readonly maxPlaintextBytes: number;
     readonly keyExchangePath: `/${string}`;
     readonly excludePaths: readonly `/${string}`[];
 }>;
@@ -428,6 +431,7 @@ declare const ServConfigSchema: z.ZodPipe<z.ZodObject<{
         credentials: z.ZodDefault<z.ZodBoolean>;
     }, z.core.$strip>>;
     transport: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodObject<{
+        maxPlaintextBytes: z.ZodOptional<z.ZodNumber>;
         keyExchangePath: z.ZodDefault<z.ZodCustom<`/${string}`, `/${string}`>>;
         excludePaths: z.ZodDefault<z.ZodArray<z.ZodCustom<`/${string}`, `/${string}`>>>;
     }, z.core.$strip>]>>;
@@ -472,6 +476,7 @@ declare const ServConfigSchema: z.ZodPipe<z.ZodObject<{
     transport?: false | {
         keyExchangePath: `/${string}`;
         excludePaths: `/${string}`[];
+        maxPlaintextBytes?: number | undefined;
     } | undefined;
 }>>;
 
@@ -511,6 +516,8 @@ declare const ServConfigSchema: z.ZodPipe<z.ZodObject<{
  */
 interface ServTransportConfig {
     /** 受管服务端密钥环，仅运行时从私有 Secret 注入。 */
+    /** 双向业务明文 UTF-8 字节上限；默认 1 MiB，整数范围 1 KiB～64 MiB。 */
+    readonly maxPlaintextBytes?: number;
     readonly serverKeyRing: TransportServerKeyRing;
     /**
      * crypto 服务实例。serv 通过 `crypto.transport.createServer()` 创建

package/dist/index.js

@@ -10,12 +10,12 @@ import { Hono } from 'hono';
 import { WebSocketServer } from 'ws';
 import { Buffer } from 'buffer';
 import { BlockList, isIP } from 'net';
+import { TRANSPORT_PLAINTEXT_RANGE, TRANSPORT_BODY_LIMITS, TRANSPORT_PROTOCOL, authenticateTransportRequest, TransportTimeError, createTransportErrorResponse, TransportBodyTooLargeError, readTransportBody, isValidSM2PublicKey } from '@h-ai/crypto';
 import { z } from 'zod';
 import { getCookie } from 'hono/cookie';
 import { readFile } from 'fs/promises';
 import { OpenAPIGenerator } from '@orpc/openapi';
 import { ZodToJsonSchemaConverter } from '@orpc/zod/zod4';
-import { TRANSPORT_PROTOCOL, authenticateTransportRequest, readTransportBody, TRANSPORT_BODY_LIMITS, isValidSM2PublicKey } from '@h-ai/crypto';
 
 // src/adapters/serv-adapter-fetch.ts
 function toFetch(app) {
@@ -724,6 +724,7 @@ var RpcHttpConfigInputSchema = z.union([
 var TransportRuntimeConfigInputSchema = z.union([
   z.literal(false),
   z.object({
+    maxPlaintextBytes: z.number().int().min(TRANSPORT_PLAINTEXT_RANGE.min).max(TRANSPORT_PLAINTEXT_RANGE.max).optional().describe("\u53CC\u5411\u4E1A\u52A1\u660E\u6587 UTF-8 \u5B57\u8282\u4E0A\u9650\uFF1B\u9ED8\u8BA4 1 MiB\uFF0C\u5BC6\u6587\u4E0E\u4EE3\u7406\u9884\u7B97\u81EA\u52A8\u63A8\u5BFC").meta({ default: TRANSPORT_BODY_LIMITS.plaintextBytes }),
     keyExchangePath: AbsolutePathSchema.default("/_hai/key-exchange"),
     excludePaths: z.array(AbsolutePathSchema).default([])
   })
@@ -786,6 +787,9 @@ function resolveServTransportRuntimeConfig(input = false) {
 var HEADER_REQUEST_ID = "x-request-id";
 var HEADER_AUTHORIZATION = "authorization";
 var HEADER_USER_AGENT = "user-agent";
+function resolveRequestId(value) {
+  return value && /^[\w.:-]{1,128}$/.test(value) ? value : core.id.uuid();
+}
 function extractBearerToken(value) {
   if (!value)
     return void 0;
@@ -796,7 +800,7 @@ function extractBearerToken(value) {
 }
 function parseRequestContext(input) {
   const headers = input.request.headers;
-  const requestId = headers.get(HEADER_REQUEST_ID) ?? core.id.uuid();
+  const requestId = core.context.get().requestId ?? resolveRequestId(headers.get(HEADER_REQUEST_ID));
   const ip = normalizeClientIp(Object.hasOwn(input, "ip") ? input.ip : input.remoteAddress);
   const locale = resolveRequestLocale(headers);
   const accessToken = extractBearerToken(headers.get(HEADER_AUTHORIZATION));
@@ -1068,12 +1072,17 @@ function createTransportMiddleware(manager, keyExchangePath, excludePaths = [])
     let requestContext;
     try {
       const verified = await authenticateTransportRequest(manager, c.req.raw);
-      if (!verified.success)
+      if (!verified.success) {
+        if (verified.error.cause instanceof TransportTimeError && verified.error.cause.context)
+          return createTransportErrorResponse(verified.error.cause, { manager, context: verified.error.cause.context });
         return jsonError(servM("serv_transportDecryptFailed"), 400);
+      }
       requestContext = verified.data.context;
       if (c.req.method !== "GET" && c.req.method !== "HEAD")
         replaceRequestBody(c, verified.data.plaintext);
     } catch (error) {
+      if (error instanceof TransportBodyTooLargeError)
+        return createTransportErrorResponse(error);
       return jsonError(servM("serv_transportInvalidPayload"), error instanceof RangeError ? 413 : 400);
     }
     await next();
@@ -1098,10 +1107,15 @@ function createTransportMiddleware(manager, keyExchangePath, excludePaths = [])
     let bodyText;
     try {
       bodyText = bodyless ? "" : await readTransportBody(response.body, {
-        maxBytes: TRANSPORT_BODY_LIMITS.plaintextBytes,
+        maxBytes: manager.bodyLimits.plaintextBytes,
+        direction: "response",
         signal: c.req.raw.signal
       });
     } catch (cause) {
+      if (cause instanceof TransportBodyTooLargeError) {
+        c.res = await createTransportErrorResponse(cause, { manager, context: requestContext });
+        return;
+      }
       logger2.warn("Failed to read response body for encryption", { error: cause });
       c.res = jsonError(servM("serv_transportEncryptFailed"), 500);
       return;
@@ -1145,7 +1159,7 @@ async function handleKeyExchange(request, manager) {
     if (new TextEncoder().encode(serverPublicKey).byteLength > TRANSPORT_BODY_LIMITS.publicKeyBytes)
       return jsonError(servM("serv_transportKeyExchangeFailed"), 500);
     const clientId = await manager.registerClientKey(body.clientPublicKey);
-    return new Response(JSON.stringify({ serverKeyId: manager.getServerKeyId(), serverPublicKey, clientId }), {
+    return new Response(JSON.stringify({ serverKeyId: manager.getServerKeyId(), serverPublicKey, clientId, maxPlaintextBytes: manager.bodyLimits.plaintextBytes }), {
       status: 200,
       headers: { "Content-Type": "application/json; charset=utf-8" }
     });
@@ -1198,7 +1212,11 @@ var audioWsServers = /* @__PURE__ */ new WeakMap();
 function createApp(options) {
   const http = resolveServHttpConfig(options.http);
   const app = new Hono();
-  app.use("*", (c, next) => core.i18n.runWithLocale(resolveRequestLocale(c.req.raw.headers), next));
+  app.use("*", async (c, next) => {
+    const requestId = resolveRequestId(c.req.header("x-request-id") ?? null);
+    await core.context.run({ requestId, userId: void 0, scopeId: void 0, jobId: void 0 }, () => core.i18n.runWithLocale(resolveRequestLocale(c.req.raw.headers), next));
+    c.header("x-request-id", requestId);
+  });
   app.notFound((c) => c.json(buildHaiErrorBody(
     HaiCommonError.NOT_FOUND,
     core.i18n.coreM("core_errorNotFound", { locale: resolveRequestLocale(c.req.raw.headers) })
@@ -1219,7 +1237,8 @@ function createApp(options) {
   if (options.transport) {
     const mgr = options.transport.crypto.transport.createServer({
       serverKeyRing: options.transport.serverKeyRing,
-      keyStore: options.transport.keyStore
+      keyStore: options.transport.keyStore,
+      maxPlaintextBytes: options.transport.maxPlaintextBytes
     });
     if (!mgr.success) {
       throw core.error.buildHaiErrorInst(
@@ -1301,7 +1320,7 @@ function mountRPCRoutes(app, procedures, rpcConfig, createContext) {
 }
 async function handleORPC(c, next, prefix, handler, createContext) {
   const context = await createContext({ request: c.req.raw, remoteAddress: readRemoteAddress(c.env) });
-  const { matched, response } = await handler.handle(c.req.raw, { prefix, context });
+  const { matched, response } = await core.context.run({ requestId: context.requestId, userId: context.session?.userId, scopeId: context.scopeId }, () => handler.handle(c.req.raw, { prefix, context }));
   if (!matched) {
     await next();
     return;