@roj-ai/sdk 0.1.35 → 0.2.1

package/dist/transport/http/routes/resources.js

@@ -7,70 +7,105 @@
  * organization resources into sessions, bypassing the uploads/attachment pipeline.
  */
 import { Hono } from 'hono';
-import { getServices } from '../app.js';
-import { SessionId } from '../../../core/sessions/schema.js';
+import z from 'zod/v4';
+import { parseSessionId } from '../../../core/sessions/schema.js';
+import { ResourceBasenameSchema } from '../../../plugins/resources/filename.js';
+import { getServices } from '../context.js';
+import { readBodyWithLimit, safeFetch } from '../fetch-guard.js';
+import { invalidSessionId, parseError, sessionNotFound } from '../responses.js';
+const ResourceRequestSchema = z.object({
+    url: z.string().min(1),
+    filename: z.string().min(1),
+    mimeType: z.string().min(1),
+    metadata: z.object({
+        slug: z.string().optional(),
+        name: z.string().optional(),
+    }).optional(),
+}).superRefine((body, refinement) => {
+    if (body.mimeType !== 'application/zip' && !ResourceBasenameSchema.safeParse(body.filename).success) {
+        refinement.addIssue({
+            code: 'custom',
+            path: ['filename'],
+            message: 'Resource filename must be a basename',
+        });
+    }
+});
+const ResourceInjectResultSchema = z.object({
+    resourceId: z.string(),
+    paths: z.array(z.string()),
+});
 export function createResourceRoutes() {
     const app = new Hono();
     app.post('/:sessionId/inject-resource', async (c) => {
-        const { sessionRuntime, logger } = getServices(c);
-        const sessionId = SessionId(c.req.param('sessionId'));
-        // 1. Verify session exists
-        const sessionResult = await sessionRuntime.getSession(sessionId);
-        if (!sessionResult.ok) {
-            return c.json({ error: { type: 'session_not_found', message: `Session not found: ${sessionId}` } }, 404);
-        }
-        // 2. Parse JSON body
-        let body;
-        try {
-            body = await c.req.json();
-        }
-        catch {
-            return c.json({ error: { type: 'parse_error', message: 'Failed to parse JSON body' } }, 400);
-        }
-        if (!body.url || !body.filename || !body.mimeType) {
-            return c.json({ error: { type: 'validation_error', message: 'Missing required fields: url, filename, mimeType' } }, 400);
+        const { sessionRuntime, logger, config } = getServices(c);
+        const sessionIdResult = parseSessionId(c.req.param('sessionId'));
+        if (!sessionIdResult.ok)
+            return invalidSessionId(c, sessionIdResult.error);
+        const sessionId = sessionIdResult.value;
+        const leaseResult = await sessionRuntime.acquireSessionLease(sessionId, 'http:inject-resource');
+        if (!leaseResult.ok) {
+            return sessionNotFound(c, sessionId);
         }
-        // 3. Fetch URL
-        const maxSize = 50 * 1024 * 1024; // 50MB
-        let response;
         try {
-            response = await fetch(body.url, { signal: AbortSignal.timeout(120_000) });
+            // 2. Parse JSON body
+            let rawBody;
+            try {
+                rawBody = await c.req.json();
+            }
+            catch {
+                return parseError(c, 'Failed to parse JSON body');
+            }
+            const parsedBody = ResourceRequestSchema.safeParse(rawBody);
+            if (!parsedBody.success) {
+                return c.json({ error: { type: 'validation_error', message: parsedBody.error.message } }, 400);
+            }
+            const body = parsedBody.data;
+            // 3. Fetch URL — guarded, redirects included (twin of upload-from-url)
+            const maxSize = 50 * 1024 * 1024; // 50MB
+            const fetched = await safeFetch(body.url, { timeoutMs: 120_000, allowedHosts: config.remoteFetchAllowedHosts });
+            if (!fetched.ok) {
+                return c.json({ error: { type: fetched.error.type, message: fetched.error.message } }, 400);
+            }
+            const response = fetched.value;
+            if (!response.ok) {
+                return c.json({ error: { type: 'fetch_error', message: `URL returned ${response.status}` } }, 400);
+            }
+            // 4. Read response with size limit, capped on real bytes rather than the declared length
+            const contentLength = response.headers.get('Content-Length');
+            if (contentLength && Number.parseInt(contentLength, 10) > maxSize) {
+                return c.json({ error: { type: 'validation_error', message: 'File too large (max 50MB)' } }, 400);
+            }
+            const fileBuffer = await readBodyWithLimit(response, maxSize);
+            if (!fileBuffer) {
+                return c.json({ error: { type: 'validation_error', message: 'File too large (max 50MB)' } }, 400);
+            }
+            // 5. Call resources plugin
+            const result = await sessionRuntime.callPluginMethod(sessionId, 'resources.inject', {
+                sessionId: String(sessionId),
+                filename: body.filename,
+                mimeType: body.mimeType,
+                size: fileBuffer.length,
+                fileBuffer,
+                metadata: body.metadata,
+            });
+            if (!result.ok) {
+                logger.error('Resource injection failed', undefined, { sessionId: String(sessionId), error: result.error });
+                return c.json({ error: { type: result.error.type, message: 'Resource injection failed' } }, 400);
+            }
+            const injectResult = ResourceInjectResultSchema.safeParse(result.value);
+            if (!injectResult.success) {
+                logger.error('Resource injection returned an invalid result', undefined, { sessionId: String(sessionId) });
+                return c.json({ error: { type: 'internal_error', message: 'Resource injection returned an invalid result' } }, 500);
+            }
+            return c.json({
+                ok: true,
+                resourceId: injectResult.data.resourceId,
+                paths: injectResult.data.paths,
+            }, 201);
         }
-        catch (err) {
-            return c.json({ error: { type: 'fetch_error', message: `Failed to fetch URL: ${err instanceof Error ? err.message : String(err)}` } }, 400);
-        }
-        if (!response.ok) {
-            return c.json({ error: { type: 'fetch_error', message: `URL returned ${response.status}` } }, 400);
-        }
-        // 4. Read response with size limit
-        const contentLength = response.headers.get('Content-Length');
-        if (contentLength && Number.parseInt(contentLength, 10) > maxSize) {
-            return c.json({ error: { type: 'validation_error', message: 'File too large (max 50MB)' } }, 400);
-        }
-        const arrayBuffer = await response.arrayBuffer();
-        if (arrayBuffer.byteLength > maxSize) {
-            return c.json({ error: { type: 'validation_error', message: 'File too large (max 50MB)' } }, 400);
-        }
-        const fileBuffer = Buffer.from(arrayBuffer);
-        // 5. Call resources plugin
-        const result = await sessionRuntime.callPluginMethod(sessionId, 'resources.inject', {
-            sessionId: String(sessionId),
-            filename: body.filename,
-            mimeType: body.mimeType,
-            size: fileBuffer.length,
-            fileBuffer,
-            metadata: body.metadata,
-        });
-        if (!result.ok) {
-            logger.error('Resource injection failed', undefined, { sessionId: String(sessionId), error: result.error });
-            return c.json({ error: { type: result.error.type, message: 'Resource injection failed' } }, 400);
+        finally {
+            leaseResult.value.release();
         }
-        const injectResult = result.value;
-        return c.json({
-            ok: true,
-            resourceId: injectResult.resourceId,
-            paths: injectResult.paths,
-        }, 201);
     });
     return app;
 }

package/dist/transport/http/routes/resources.js.map

@@ -1 +1 @@
-{"version":3,"file":"resources.js","sourceRoot":"","sources":["../../../../src/transport/http/routes/resources.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAErD,MAAM,UAAU,oBAAoB;IACnC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,KAAK,EAAE,CAAa,EAAE,EAAE;QAC/D,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;QACjD,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAE,CAAC,CAAA;QAEtD,2BAA2B;QAC3B,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QAChE,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACvB,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,sBAAsB,SAAS,EAAE,EAAE,EAAE,EACpF,GAAG,CACH,CAAA;QACF,CAAC;QAED,qBAAqB;QACrB,IAAI,IAAsG,CAAA;QAC1G,IAAI,CAAC;YACJ,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;QAC1B,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,2BAA2B,EAAE,EAAE,EACxE,GAAG,CACH,CAAA;QACF,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnD,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,kDAAkD,EAAE,EAAE,EACpG,GAAG,CACH,CAAA;QACF,CAAC;QAED,eAAe;QACf,MAAM,OAAO,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA,CAAC,OAAO;QACxC,IAAI,QAAkB,CAAA;QACtB,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,wBAAwB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EACvH,GAAG,CACH,CAAA;QACF,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,gBAAgB,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,EAC9E,GAAG,CACH,CAAA;QACF,CAAC;QAED,mCAAmC;QACnC,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;QAC5D,IAAI,aAAa,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC;YACnE,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,2BAA2B,EAAE,EAAE,EAC7E,GAAG,CACH,CAAA;QACF,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAA;QAChD,IAAI,WAAW,CAAC,UAAU,GAAG,OAAO,EAAE,CAAC;YACtC,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,2BAA2B,EAAE,EAAE,EAC7E,GAAG,CACH,CAAA;QACF,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAE3C,2BAA2B;QAC3B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,CAAC,SAAS,EAAE,kBAAkB,EAAE;YACnF,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;YAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,UAAU,CAAC,MAAM;YACvB,UAAU;YACV,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACvB,CAAC,CAAA;QAEF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;YAC3G,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,2BAA2B,EAAE,EAAE,EAC5E,GAAG,CACH,CAAA;QACF,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,KAAgD,CAAA;QAE5E,OAAO,CAAC,CAAC,IAAI,CAAC;YACb,EAAE,EAAE,IAAI;YACR,UAAU,EAAE,YAAY,CAAC,UAAU;YACnC,KAAK,EAAE,YAAY,CAAC,KAAK;SACzB,EAAE,GAAG,CAAC,CAAA;IACR,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACX,CAAC"}
+{"version":3,"file":"resources.js","sourceRoot":"","sources":["../../../../src/transport/http/routes/resources.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,CAAC,MAAM,QAAQ,CAAA;AACtB,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAA;AAExE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAC3C,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAChE,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAE/E,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC3B,CAAC,CAAC,QAAQ,EAAE;CACb,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE;IACnC,IAAI,IAAI,CAAC,QAAQ,KAAK,iBAAiB,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC;QACrG,UAAU,CAAC,QAAQ,CAAC;YACnB,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,OAAO,EAAE,sCAAsC;SAC/C,CAAC,CAAA;IACH,CAAC;AACF,CAAC,CAAC,CAAA;AAEF,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC1B,CAAC,CAAA;AAEF,MAAM,UAAU,oBAAoB;IACnC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,KAAK,EAAE,CAAa,EAAE,EAAE;QAC/D,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;QACzD,MAAM,eAAe,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAE,CAAC,CAAA;QACjE,IAAI,CAAC,eAAe,CAAC,EAAE;YAAE,OAAO,gBAAgB,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAA;QAC1E,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAA;QAEvC,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,mBAAmB,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAA;QAC/F,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;YACrB,OAAO,eAAe,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;QACrC,CAAC;QACD,IAAI,CAAC;YACJ,qBAAqB;YACrB,IAAI,OAAgB,CAAA;YACpB,IAAI,CAAC;gBACJ,OAAO,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,UAAU,CAAC,CAAC,EAAE,2BAA2B,CAAC,CAAA;YAClD,CAAC;YAED,MAAM,UAAU,GAAG,qBAAqB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;YAC3D,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACzB,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAC1E,GAAG,CACH,CAAA;YACF,CAAC;YACD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAA;YAE5B,uEAAuE;YACvE,MAAM,OAAO,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA,CAAC,OAAO;YACxC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAA;YAC/G,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EACvE,GAAG,CACH,CAAA;YACF,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAA;YAE9B,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,gBAAgB,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,EAC9E,GAAG,CACH,CAAA;YACF,CAAC;YAED,yFAAyF;YACzF,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;YAC5D,IAAI,aAAa,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC;gBACnE,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,2BAA2B,EAAE,EAAE,EAC7E,GAAG,CACH,CAAA;YACF,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;YAC7D,IAAI,CAAC,UAAU,EAAE,CAAC;gBACjB,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,2BAA2B,EAAE,EAAE,EAC7E,GAAG,CACH,CAAA;YACF,CAAC;YAED,2BAA2B;YAC3B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,CAAC,SAAS,EAAE,kBAAkB,EAAE;gBACnF,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;gBAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,UAAU,CAAC,MAAM;gBACvB,UAAU;gBACV,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACvB,CAAC,CAAA;YAEF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;gBAC3G,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,2BAA2B,EAAE,EAAE,EAC5E,GAAG,CACH,CAAA;YACF,CAAC;YAED,MAAM,YAAY,GAAG,0BAA0B,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACvE,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;gBAC3B,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;gBAC1G,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,+CAA+C,EAAE,EAAE,EAC/F,GAAG,CACH,CAAA;YACF,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CAAC;gBACb,EAAE,EAAE,IAAI;gBACR,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,UAAU;gBACxC,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK;aAC9B,EAAE,GAAG,CAAC,CAAA;QACR,CAAC;gBAAS,CAAC;YACV,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,CAAA;QAC5B,CAAC;IACF,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACX,CAAC"}

package/dist/transport/http/routes/rpc.d.ts

@@ -8,13 +8,18 @@
  * - Single: { method, input } → { ok: true, value } | { ok: false, error }
  * - Batch:  { batch: [{ method, input }, ...] } → { results: [{ ok: true, value } | { ok: false, error }, ...] }
  *
+ * A batch is all-settled: every item runs and gets its own envelope, so `results`
+ * always has the length of `batch`. A shorter array would leave the caller unable
+ * to tell a completed batch from a truncated one — and because running every item
+ * makes the batch length the work one request buys, the length is capped.
+ *
  * Routing order:
  * 1. Manager methods (session creation, listing, etc.)
  * 2. Session plugin methods (require sessionId in input)
  * 3. 404 if not found
  */
 import { Hono } from 'hono';
-import type { AppEnv } from '../app.js';
+import type { AppEnv } from '../context.js';
 /**
  * Creates the RPC routes.
  */

package/dist/transport/http/routes/rpc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rpc.d.ts","sourceRoot":"","sources":["../../../../src/transport/http/routes/rpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAQ3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AAwEvC;;GAEG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC,CAwD9C"}
+{"version":3,"file":"rpc.d.ts","sourceRoot":"","sources":["../../../../src/transport/http/routes/rpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAQ3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AA+F3C;;GAEG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC,CAiE9C"}

package/dist/transport/http/routes/rpc.js

@@ -8,6 +8,11 @@
  * - Single: { method, input } → { ok: true, value } | { ok: false, error }
  * - Batch:  { batch: [{ method, input }, ...] } → { results: [{ ok: true, value } | { ok: false, error }, ...] }
  *
+ * A batch is all-settled: every item runs and gets its own envelope, so `results`
+ * always has the length of `batch`. A shorter array would leave the caller unable
+ * to tell a completed batch from a truncated one — and because running every item
+ * makes the batch length the work one request buys, the length is capped.
+ *
  * Routing order:
  * 1. Manager methods (session creation, listing, etc.)
  * 2. Session plugin methods (require sessionId in input)
@@ -16,8 +21,8 @@
 import { Hono } from 'hono';
 import { AgentId } from '../../../core/agents/schema.js';
 import { DEFAULT_CALLER } from '../../../core/plugins/plugin-builder.js';
-import { SessionId } from '../../../core/sessions/schema.js';
-import { getServices } from '../app.js';
+import { parseSessionId } from '../../../core/sessions/schema.js';
+import { getServices } from '../context.js';
 function formatError(error) {
     return { ok: false, error: { type: error.type, message: error.message } };
 }
@@ -36,23 +41,33 @@ async function dispatchMethod(sessionRuntime, method, input) {
     }
     // 2. Try session plugin methods (require sessionId in input)
     if (typeof input === 'object' && input !== null && 'sessionId' in input && typeof input.sessionId === 'string') {
-        const sessionId = SessionId(input.sessionId);
+        // Checked before the lease: acquiring one loads the session, which joins the id into a path.
+        const sessionIdResult = parseSessionId(input.sessionId);
+        if (!sessionIdResult.ok) {
+            return { httpStatus: 400, body: formatError(sessionIdResult.error) };
+        }
+        const sessionId = sessionIdResult.value;
         const agentId = 'agentId' in input && typeof input.agentId === 'string' ? AgentId(input.agentId) : undefined;
-        // Extract caller context injected by worker, strip from input
+        // Stripped from the input before dispatch. Unvalidated: anything holding the bearer
+        // token can set it, so it is a hint about the caller, not proof of one.
         const caller = '_caller' in input && typeof input._caller === 'object' && input._caller !== null
             ? input._caller
             : DEFAULT_CALLER;
         const { _caller: _, ...cleanInput } = input;
-        const sessionResult = await sessionRuntime.getSession(sessionId);
+        const sessionResult = await sessionRuntime.acquireSessionLease(sessionId, `http:rpc:${method}`);
         if (sessionResult.ok) {
-            const session = sessionResult.value;
-            const pluginMethods = session.getPluginMethods();
-            if (pluginMethods.has(method)) {
-                const result = await sessionRuntime.callPluginMethod(sessionId, method, cleanInput, agentId, caller);
-                if (!result.ok) {
-                    return { httpStatus: 200, body: formatError(result.error) };
+            try {
+                const pluginMethods = sessionResult.value.session.getPluginMethods();
+                if (pluginMethods.has(method)) {
+                    const result = await sessionRuntime.callPluginMethod(sessionId, method, cleanInput, agentId, caller);
+                    if (!result.ok) {
+                        return { httpStatus: 200, body: formatError(result.error) };
+                    }
+                    return { httpStatus: 200, body: { ok: true, value: result.value } };
                 }
-                return { httpStatus: 200, body: { ok: true, value: result.value } };
+            }
+            finally {
+                sessionResult.value.release();
             }
         }
         else if (sessionResult.error.type === 'session_not_found') {
@@ -62,6 +77,13 @@ async function dispatchMethod(sessionRuntime, method, input) {
     // 3. Method not found — transport error, use 400
     return { httpStatus: 400, body: { ok: false, error: { type: 'method_not_found', message: `Unknown method: ${method}` } } };
 }
+/** Every item runs, so one request buys this much dispatch and no more. */
+const MAX_BATCH_ITEMS = 100;
+/** Items stay `unknown` until here — `{"batch":[null]}` used to reach `call.method` and 500. */
+function isBatchCall(value) {
+    return typeof value === 'object' && value !== null && 'method' in value && typeof value.method === 'string'
+        && value.method !== '';
+}
 function isBatchRequest(body) {
     return typeof body === 'object' && body !== null && 'batch' in body && Array.isArray(body.batch);
 }
@@ -78,21 +100,29 @@ export function createRpcRoutes() {
         catch {
             return c.json({ ok: false, error: { type: 'invalid_json', message: 'Invalid JSON in request body' } }, 400);
         }
-        const { sessionRuntime } = getServices(c);
-        // Batch request
+        const { sessionRuntime, logger } = getServices(c);
+        // Batch request. The status describes the envelope, never an item: the body is
+        // `{results}` with no top-level `error`, so a non-2xx here reads as a transport
+        // failure and hides the per-item error the client would otherwise surface.
         if (isBatchRequest(body)) {
+            if (body.batch.length > MAX_BATCH_ITEMS) {
+                return c.json({ ok: false, error: { type: 'batch_too_large', message: `Batch holds more than ${MAX_BATCH_ITEMS} calls` } }, 400);
+            }
             const results = [];
             for (const call of body.batch) {
-                if (!call.method || typeof call.method !== 'string') {
+                if (!isBatchCall(call)) {
                     results.push({ ok: false, error: { type: 'missing_method', message: "Missing 'method' field in batch call" } });
-                    break;
+                    continue;
+                }
+                try {
+                    results.push((await dispatchMethod(sessionRuntime, call.method, call.input)).body);
                 }
-                const { body: resultBody } = await dispatchMethod(sessionRuntime, call.method, call.input);
-                if (!resultBody.ok) {
-                    results.push(resultBody);
-                    break;
+                catch (error) {
+                    logger.error('Batch RPC call failed', error instanceof Error ? error : new Error(String(error)), {
+                        method: call.method,
+                    });
+                    results.push({ ok: false, error: { type: 'internal_error', message: 'Internal server error' } });
                 }
-                results.push(resultBody);
             }
             return c.json({ results });
         }

package/dist/transport/http/routes/rpc.js.map

@@ -1 +1 @@
-{"version":3,"file":"rpc.js","sourceRoot":"","sources":["../../../../src/transport/http/routes/rpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AAEjD,OAAO,EAAsB,cAAc,EAAE,MAAM,kCAAkC,CAAA;AACrF,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAErD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAOvC,SAAS,WAAW,CAAC,KAAkB;IACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAA;AAC1E,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,cAAc,CAC5B,cAA8B,EAC9B,MAAc,EACd,KAAc;IAEd,sDAAsD;IACtD,MAAM,cAAc,GAAG,cAAc,CAAC,iBAAiB,EAAE,CAAA;IACzD,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QAEpE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;QAC5D,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,CAAA;IACpE,CAAC;IAED,6DAA6D;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,WAAW,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChH,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QAC5C,MAAM,OAAO,GAAG,SAAS,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAE5G,8DAA8D;QAC9D,MAAM,MAAM,GAAkB,SAAS,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;YAC9G,CAAC,CAAC,KAAK,CAAC,OAAwB;YAChC,CAAC,CAAC,cAAc,CAAA;QACjB,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,UAAU,EAAE,GAAG,KAAgC,CAAA;QAEtE,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QAChE,IAAI,aAAa,CAAC,EAAE,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAA;YACnC,MAAM,aAAa,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAA;YAEhD,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;gBAEpG,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;oBAChB,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;gBAC5D,CAAC;gBAED,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,CAAA;YACpE,CAAC;QACF,CAAC;aAAM,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC7D,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAA;QACnE,CAAC;IACF,CAAC;IAED,iDAAiD;IACjD,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,mBAAmB,MAAM,EAAE,EAAE,EAAE,EAAE,CAAA;AAC3H,CAAC;AAMD,SAAS,cAAc,CAAC,IAAa;IACpC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACjG,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC9B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzB,IAAI,IAAa,CAAA;QAEjB,IAAI,CAAC;YACJ,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;QAC1B,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,8BAA8B,EAAE,EAAE,EACvF,GAAG,CACH,CAAA;QACF,CAAC;QAED,MAAM,EAAE,cAAc,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;QAEzC,gBAAgB;QAChB,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAmB,EAAE,CAAA;YAElC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBACrD,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,sCAAsC,EAAE,EAAE,CAAC,CAAA;oBAC/G,MAAK;gBACN,CAAC;gBAED,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,MAAM,cAAc,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;gBAE1F,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;oBACpB,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;oBACxB,MAAK;gBACN,CAAC;gBAED,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YACzB,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC3B,CAAC;QAED,0DAA0D;QAC1D,MAAM,MAAM,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;QACtG,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;QAEnG,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC3C,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,mCAAmC,EAAE,EAAE,EAC9F,GAAG,CACH,CAAA;QACF,CAAC;QAED,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,MAAM,cAAc,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;QAC5F,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACX,CAAC"}
+{"version":3,"file":"rpc.js","sourceRoot":"","sources":["../../../../src/transport/http/routes/rpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AAEjD,OAAO,EAAsB,cAAc,EAAE,MAAM,kCAAkC,CAAA;AACrF,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAE1D,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAO3C,SAAS,WAAW,CAAC,KAAkB;IACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAA;AAC1E,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,cAAc,CAC5B,cAA8B,EAC9B,MAAc,EACd,KAAc;IAEd,sDAAsD;IACtD,MAAM,cAAc,GAAG,cAAc,CAAC,iBAAiB,EAAE,CAAA;IACzD,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QAEpE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;QAC5D,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,CAAA;IACpE,CAAC;IAED,6DAA6D;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,WAAW,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChH,6FAA6F;QAC7F,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QACvD,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC;YACzB,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAA;QACrE,CAAC;QACD,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAA;QACvC,MAAM,OAAO,GAAG,SAAS,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAE5G,oFAAoF;QACpF,wEAAwE;QACxE,MAAM,MAAM,GAAkB,SAAS,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;YAC9G,CAAC,CAAC,KAAK,CAAC,OAAwB;YAChC,CAAC,CAAC,cAAc,CAAA;QACjB,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,UAAU,EAAE,GAAG,KAAgC,CAAA;QAEtE,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,mBAAmB,CAAC,SAAS,EAAE,YAAY,MAAM,EAAE,CAAC,CAAA;QAC/F,IAAI,aAAa,CAAC,EAAE,EAAE,CAAC;YACtB,IAAI,CAAC;gBACJ,MAAM,aAAa,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAA;gBAEpE,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC/B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;oBAEpG,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;wBAChB,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;oBAC5D,CAAC;oBAED,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,CAAA;gBACpE,CAAC;YACF,CAAC;oBAAS,CAAC;gBACV,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,CAAA;YAC9B,CAAC;QACF,CAAC;aAAM,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC7D,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAA;QACnE,CAAC;IACF,CAAC;IAED,iDAAiD;IACjD,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,mBAAmB,MAAM,EAAE,EAAE,EAAE,EAAE,CAAA;AAC3H,CAAC;AAED,2EAA2E;AAC3E,MAAM,eAAe,GAAG,GAAG,CAAA;AAW3B,gGAAgG;AAChG,SAAS,WAAW,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;WACvG,KAAK,CAAC,MAAM,KAAK,EAAE,CAAA;AACxB,CAAC;AAED,SAAS,cAAc,CAAC,IAAa;IACpC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACjG,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC9B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzB,IAAI,IAAa,CAAA;QAEjB,IAAI,CAAC;YACJ,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;QAC1B,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,8BAA8B,EAAE,EAAE,EACvF,GAAG,CACH,CAAA;QACF,CAAC;QAED,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;QAEjD,+EAA+E;QAC/E,gFAAgF;QAChF,2EAA2E;QAC3E,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;gBACzC,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,yBAAyB,eAAe,QAAQ,EAAE,EAAE,EAC5G,GAAG,CACH,CAAA;YACF,CAAC;YAED,MAAM,OAAO,GAAmB,EAAE,CAAA;YAElC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC/B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxB,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,sCAAsC,EAAE,EAAE,CAAC,CAAA;oBAC/G,SAAQ;gBACT,CAAC;gBAED,IAAI,CAAC;oBACJ,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;gBACnF,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE;wBAChG,MAAM,EAAE,IAAI,CAAC,MAAM;qBACnB,CAAC,CAAA;oBACF,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE,CAAC,CAAA;gBACjG,CAAC;YACF,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC3B,CAAC;QAED,0DAA0D;QAC1D,MAAM,MAAM,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;QACtG,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;QAEnG,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC3C,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,mCAAmC,EAAE,EAAE,EAC9F,GAAG,CACH,CAAA;QACF,CAAC;QAED,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,MAAM,cAAc,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;QAC5F,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACX,CAAC"}

package/dist/transport/http/routes/upload.d.ts

@@ -6,7 +6,7 @@
  * Business logic delegated to uploads plugin.
  */
 import { Hono } from 'hono';
-import { type AppEnv } from '../app.js';
+import { type AppEnv } from '../context.js';
 /**
  * Creates upload routes.
  */

package/dist/transport/http/routes/upload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upload.d.ts","sourceRoot":"","sources":["../../../../src/transport/http/routes/upload.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,EAAmB,KAAK,MAAM,EAAe,MAAM,WAAW,CAAA;AAMrE;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAAC,MAAM,CAAC,CAiWjD"}
+{"version":3,"file":"upload.d.ts","sourceRoot":"","sources":["../../../../src/transport/http/routes/upload.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAK3B,OAAO,EAAmB,KAAK,MAAM,EAAe,MAAM,eAAe,CAAA;AAuEzE;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAAC,MAAM,CAAC,CAiWjD"}