@isomorph.ai/app-sdk 2.8.0 → 2.8.1

package/README.md

@@ -413,8 +413,10 @@ The call goes through this app's own gateway with the workload token and the per
 `RATE_LIMITED`). It works only from an action a signed-in person started: a job keeps using a service credential.
 A journey of the called app plays the caller with a POST to `/_harbour/api/<action>` carrying
 `X-Harbour-Call-Host: <caller address>` and one of the check's identity tokens as the bearer.
+The input may be up to 16 MiB (5 MiB when the called app runs on a serverless cell), as on the direct
+integration route; the answer stays at most 4 MiB.
 
-(2.8.0; data plane ADR 2026-11-07)
+(2.8.0, input limits 2.8.1; data plane ADR 2026-11-07)
 
 ## Browser read tools
 

package/dist/runtime.js

@@ -90,6 +90,9 @@ export const CANCEL_RUN_ACTION = 'isomorph-jobs-cancel';
 export const LIST_RUNS_ACTION = 'isomorph-jobs-list';
 const LOGICAL_NAME = /^[a-z0-9][a-z0-9_-]{0,63}$/;
 const MAX_BODY_BYTES = 1 << 20;
+// Another app's call (ctx.caller) carries what the gateway's direct route admits: 16 MiB to a cluster runtime, 5 MiB
+// to a Lambda; the gateway holds every other entrance to 1 MiB.
+const APP_CALL_MAX_BODY_BYTES = 16 << 20;
 const LEASE_MS = 5 * 60_000;
 const QUEUE_WORKERS = 2;
 const QUEUE_POLL_MS = 2_000;
@@ -225,12 +228,12 @@ function refusal(error) {
         return { status: REFUSAL_STATUS[code], category: code, message: error.message };
     return undefined;
 }
-async function readBody(request) {
+async function readBody(request, limit = MAX_BODY_BYTES) {
     const chunks = [];
     let size = 0;
     for await (const chunk of request) {
         size += chunk.length;
-        if (size > MAX_BODY_BYTES)
+        if (size > limit)
             return undefined;
         chunks.push(chunk);
     }
@@ -814,9 +817,10 @@ export class Runtime {
         };
         const caller = verifiedCaller(request);
         const context = { computerView: header(request, 'X-Harbour-Computer-View') === '1', signal: controller.signal, user, tenant, app, requestId: requestId ?? '', progress, transaction: (fn) => this.transaction(name, fn), ...(caller ? { caller } : {}) };
-        const raw = await readBody(request);
+        const limit = caller ? APP_CALL_MAX_BODY_BYTES : MAX_BODY_BYTES;
+        const raw = await readBody(request, limit);
         if (raw === undefined)
-            return refuse(response, 413, 'VALIDATION_FAILED', 'the request body is larger than 1 MiB', requestId);
+            return refuse(response, 413, 'VALIDATION_FAILED', `the request body is larger than ${limit >> 20} MiB`, requestId);
         if (name === 'isomorph-mail-arrival' && header(request, 'X-Harbour-Verified-Hook')) {
             // The gateway's hooks route: the provider's raw body and headers, the gateway's verified
             // headers beside them. The answer is what the provider reads, so it is not enveloped.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@isomorph.ai/app-sdk",
-  "version": "2.8.0",
+  "version": "2.8.1",
   "type": "module",
   "repository": {
     "type": "git",