@shivaedev/platform 0.10.0 → 0.11.0

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.11.0 - 2026-10-16
+
+### Added
+
+- Export `readBoundedBody` and `RequestBodyTooLarge` from `@shivaedev/platform/boundedBody.ts`. Native Node HTTP routes can apply Effect's `HttpIncomingMessage.MaxBodySize` and return 413 for oversized content lengths or chunked bodies while keeping the connection usable and preserving accepted bytes.
+
 ## 0.10.0 - 2026-10-16
 
 ### Added

package/README.md

@@ -67,6 +67,21 @@ The listener uses `HOST` or `127.0.0.1`, uses `PORT` or 3000, and reads `DATABAS
 
 RPC request bodies are limited to 1 MiB by default. Set `MAX_BODY_SIZE` to a byte count or override it with `config.maxBodySize`, a nonnegative safe integer. An oversized NDJSON body returns a 4xx before any RPC handler runs; real HTTP tests cover fixed-length and chunked requests, byte counting, and configuration precedence. This limit applies to the host's RPC route.
 
+For a native Node HTTP route, use `readBoundedBody` from `@shivaedev/platform/boundedBody.ts` with Effect's `HttpIncomingMessage.MaxBodySize`. It returns an `ArrayBuffer` without decoding the bytes. Oversized `content-length` headers are rejected before reading; chunked overflow drains the remaining body and preserves the connection for another request. `RequestBodyTooLarge` is a typed failure that implements Effect's `HttpServerRespondable` protocol with status 413; other read errors remain native `HttpServerError` failures. Consume the body once through this reader and decode the result in the application.
+
+```ts
+import { ByteSize, Effect } from "effect";
+import { HttpIncomingMessage, HttpRouter, HttpServerResponse } from "effect/http";
+import { readBoundedBody } from "@shivaedev/platform/boundedBody.ts";
+
+const routes = HttpRouter.add("POST", "/webhook", (request) =>
+  readBoundedBody(request).pipe(
+    Effect.map((body) => HttpServerResponse.uint8Array(new Uint8Array(body))),
+    Effect.provideService(HttpIncomingMessage.MaxBodySize, ByteSize.bytes(64 * 1024)),
+  ),
+);
+```
+
 RPC uses the existing `localRpcGuard`: it requires a loopback peer and Host, same-origin or absent Origin, and the NDJSON content type. Session lookup uses transport headers. With a session policy, contracts declare `Authenticated`, `MaybeAuthenticated` and `RequestTracing` as needed; the host supplies their implementations. For `AuthenticatedUser`, merge `authenticatedUserLayer(sessions)` beside the handlers as shown below. Declared errors retain their Schema types. Applications still own resource authorization and use `rpcBoundary` when they need to map unexpected failures.
 
 For local tools, use `policy: "loopback"` with contracts that do not use session middleware to serve RPC without a session provider. The guard requires a loopback peer and Host, absent or same-origin Origin, and NDJSON content type. This policy does not use `TRUSTED_PROXY` or `config.trustedProxy`. Set `rpcPath` to choose another native RPC route; `/rpc` remains the default.

package/dist/server/boundedBody.d.ts

@@ -0,0 +1,14 @@
+import { Effect } from "effect";
+import { HttpServerError, type HttpServerRequest, HttpServerRespondable, HttpServerResponse } from "effect/http";
+declare const RequestBodyTooLarge_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "RequestBodyTooLarge";
+} & Readonly<A>;
+export declare class RequestBodyTooLarge extends RequestBodyTooLarge_base<{
+    readonly request: HttpServerRequest.HttpServerRequest;
+    readonly limit: bigint;
+}> implements HttpServerRespondable.Respondable {
+    [HttpServerRespondable.symbol](): Effect.Effect<HttpServerResponse.HttpServerResponse, never, never>;
+}
+export declare const readBoundedBody: (request: HttpServerRequest.HttpServerRequest) => Effect.Effect<ArrayBuffer, HttpServerError.HttpServerError | RequestBodyTooLarge, never>;
+export {};
+//# sourceMappingURL=boundedBody.d.ts.map

package/dist/server/boundedBody.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boundedBody.d.ts","sourceRoot":"","sources":["../../src/server/boundedBody.ts"],"names":[],"mappings":"AACA,OAAO,EAAQ,MAAM,EAAU,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAuB,eAAe,EAAE,KAAK,iBAAiB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;;;;AAEtI,qBAAa,mBACZ,SAAQ,yBAAwC;IAC/C,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC,iBAAiB,CAAC;IACtD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACvB,CACD,YAAW,qBAAqB,CAAC,WAAW;IAE5C,CAAC,qBAAqB,CAAC,MAAM,CAAC,uEAE7B;CACD;AAED,eAAO,MAAM,eAAe,4IA4B1B,CAAC"}

package/dist/server/boundedBody.js

@@ -0,0 +1,36 @@
+import { NodeHttpServerRequest, NodeStream } from "@effect/platform-node";
+import { Data, Effect, Stream } from "effect";
+import { HttpIncomingMessage, HttpServerError, HttpServerRespondable, HttpServerResponse } from "effect/http";
+export class RequestBodyTooLarge extends Data.TaggedError("RequestBodyTooLarge") {
+    [HttpServerRespondable.symbol]() {
+        return Effect.succeed(HttpServerResponse.empty({ status: 413 }));
+    }
+}
+export const readBoundedBody = Effect.fnUntraced(function* (request) {
+    const incoming = NodeHttpServerRequest.toIncomingMessage(request);
+    const limit = yield* HttpIncomingMessage.MaxBodySize;
+    const read = Effect.gen(function* () {
+        const length = request.headers["content-length"];
+        if (limit !== undefined && length !== undefined && BigInt(length) > limit) {
+            return yield* new RequestBodyTooLarge({ limit, request });
+        }
+        const chunks = [];
+        let size = 0n;
+        yield* NodeStream.fromReadable({
+            closeOnDone: false,
+            evaluate: () => incoming,
+            onError: (cause) => new HttpServerError.HttpServerError({ reason: new HttpServerError.RequestParseError({ cause, request }) }),
+        }).pipe(Stream.runForEach((chunk) => {
+            size += BigInt(chunk.byteLength);
+            if (limit !== undefined && size > limit) {
+                return Effect.fail(new RequestBodyTooLarge({ limit, request }));
+            }
+            chunks.push(chunk);
+            return Effect.void;
+        }));
+        return Uint8Array.from(Buffer.concat(chunks)).buffer;
+    });
+    // Drain unread bytes without destroying the socket so the server can send a response.
+    return yield* read.pipe(Effect.onError(() => Effect.sync(() => incoming.resume())));
+});
+//# sourceMappingURL=boundedBody.js.map

package/dist/server/boundedBody.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"boundedBody.js","sourceRoot":"","sources":["../../src/server/boundedBody.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAA0B,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtI,MAAM,OAAO,mBACZ,SAAQ,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAG5C;IAGF,CAAC,qBAAqB,CAAC,MAAM,CAAC;QAC7B,OAAO,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC;CACD;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAA4C;IACvG,MAAM,QAAQ,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAChC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC;YAC3E,OAAO,KAAK,CAAC,CAAC,IAAI,mBAAmB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,KAAK,CAAC,CAAC,UAAU,CAAC,YAAY,CAA8C;YAC3E,WAAW,EAAE,KAAK;YAClB,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ;YACxB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,eAAe,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,eAAe,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;SAC9H,CAAC,CAAC,IAAI,CACN,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE;YAC3B,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACjC,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;gBACzC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YACjE,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,OAAO,MAAM,CAAC,IAAI,CAAC;QACpB,CAAC,CAAC,CACF,CAAC;QACF,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IACtD,CAAC,CAAC,CAAC;IACH,sFAAsF;IACtF,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC,CAAC,CAAC"}

package/dist/server/boundedRpcRequest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"boundedRpcRequest.d.ts","sourceRoot":"","sources":["../../src/server/boundedRpcRequest.ts"],"names":[],"mappings":"AAEA,OAAO,EAAwC,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAE3F,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC,iBAAiB,GAAG,iBAAiB,CAAC,iBAAiB,CA0CnH"}
+{"version":3,"file":"boundedRpcRequest.d.ts","sourceRoot":"","sources":["../../src/server/boundedRpcRequest.ts"],"names":[],"mappings":"AACA,OAAO,EAAmB,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGtE,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC,iBAAiB,GAAG,iBAAiB,CAAC,iBAAiB,CAuBnH"}

package/dist/server/boundedRpcRequest.js

@@ -1,30 +1,11 @@
-import { NodeHttpServerRequest, NodeStream } from "@effect/platform-node";
-import { Effect, Stream } from "effect";
-import { HttpIncomingMessage, HttpServerError } from "effect/http";
+import { Effect } from "effect";
+import { HttpServerError } from "effect/http";
+import { readBoundedBody } from "./boundedBody.js";
 export function boundedRpcRequest(request) {
-    const incoming = NodeHttpServerRequest.toIncomingMessage(request);
-    function error(cause) {
-        return new HttpServerError.HttpServerError({ reason: new HttpServerError.RequestParseError({ cause, request }) });
-    }
-    const text = Effect.gen(function* () {
-        const limit = yield* HttpIncomingMessage.MaxBodySize;
-        const chunks = [];
-        let size = 0n;
-        yield* NodeStream.fromReadable({
-            closeOnDone: false,
-            evaluate: () => incoming,
-            onError: error,
-        }).pipe(Stream.runForEach((chunk) => {
-            size += BigInt(chunk.byteLength);
-            if (limit !== undefined && size > limit) {
-                return Effect.fail(error(new Error("RPC body exceeds MAX_BODY_SIZE")));
-            }
-            chunks.push(chunk);
-            return Effect.void;
-        }));
-        return Buffer.concat(chunks).toString("utf8");
-    }).pipe(Effect.onError(() => Effect.sync(() => incoming.resume())), Effect.cached, Effect.runSync);
-    const arrayBuffer = Effect.map(text, (body) => new TextEncoder().encode(body).buffer);
+    const arrayBuffer = readBoundedBody(request).pipe(Effect.mapError((cause) => cause._tag === "RequestBodyTooLarge"
+        ? new HttpServerError.HttpServerError({ reason: new HttpServerError.RequestParseError({ cause, request }) })
+        : cause), Effect.cached, Effect.runSync);
+    const text = Effect.map(arrayBuffer, (body) => new TextDecoder().decode(body));
     // The native text reader destroys the HTTP socket on overflow, preventing a 4xx response.
     return new Proxy(request, {
         get: (target, key, receiver) => {

package/dist/server/boundedRpcRequest.js.map

@@ -1 +1 @@
-{"version":3,"file":"boundedRpcRequest.js","sourceRoot":"","sources":["../../src/server/boundedRpcRequest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAA0B,MAAM,aAAa,CAAC;AAE3F,MAAM,UAAU,iBAAiB,CAAC,OAA4C;IAC7E,MAAM,QAAQ,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAClE,SAAS,KAAK,CAAC,KAAc;QAC5B,OAAO,IAAI,eAAe,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,eAAe,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACnH,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAChC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC;QACrD,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,KAAK,CAAC,CAAC,UAAU,CAAC,YAAY,CAA8C;YAC3E,WAAW,EAAE,KAAK;YAClB,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK;SACd,CAAC,CAAC,IAAI,CACN,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE;YAC3B,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACjC,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;gBACzC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC,CAAC;YACxE,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,OAAO,MAAM,CAAC,IAAI,CAAC;QACpB,CAAC,CAAC,CACF,CAAC;QACF,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC,IAAI,CACN,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,EAC1D,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,OAAO,CACd,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC;IACtF,0FAA0F;IAC1F,OAAO,IAAI,KAAK,CAAC,OAAO,EAAE;QACzB,GAAG,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;YAC9B,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;gBACpB,OAAO,IAAI,CAAC;YACb,CAAC;YACD,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;gBAC3B,OAAO,WAAW,CAAC;YACpB,CAAC;YACD,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC;KACD,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"boundedRpcRequest.js","sourceRoot":"","sources":["../../src/server/boundedRpcRequest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,eAAe,EAA0B,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,UAAU,iBAAiB,CAAC,OAA4C;IAC7E,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC,IAAI,CAChD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACzB,KAAK,CAAC,IAAI,KAAK,qBAAqB;QACnC,CAAC,CAAC,IAAI,eAAe,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,eAAe,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAC5G,CAAC,CAAC,KAAK,CACR,EACD,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,OAAO,CACd,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/E,0FAA0F;IAC1F,OAAO,IAAI,KAAK,CAAC,OAAO,EAAE;QACzB,GAAG,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;YAC9B,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;gBACpB,OAAO,IAAI,CAAC;YACb,CAAC;YACD,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;gBAC3B,OAAO,WAAW,CAAC;YACpB,CAAC;YACD,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC;KACD,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shivaedev/platform",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "Opinionated Effect application infrastructure for ShivaeDev services",
   "homepage": "https://github.com/ShivaeDev/platform/tree/main/packages/platform#readme",
   "bugs": {
@@ -168,6 +168,12 @@
     }
   },
   "exports": {
+    "./boundedBody.ts": {
+      "types": "./dist/server/boundedBody.d.ts",
+      "source": "./src/server/boundedBody.ts",
+      "import": "./dist/server/boundedBody.js",
+      "default": "./dist/server/boundedBody.js"
+    },
     "./appHost.ts": {
       "types": "./dist/server/appHost.d.ts",
       "source": "./src/server/appHost.ts",
@@ -341,7 +347,7 @@
     "@prisma-next/target-postgres": "0.16.0",
     "@shivaedev/effect-prisma": "0.9.0",
     "@shivaedev/effect-trpc": "0.7.0",
-    "@shivaedev/quality": "0.21.0",
+    "@shivaedev/quality": "0.21.1",
     "@trpc/client": "11.19.0",
     "@trpc/server": "11.19.0",
     "@types/node": "24.19.1",

package/src/server/boundedBody.ts

@@ -0,0 +1,45 @@
+import { NodeHttpServerRequest, NodeStream } from "@effect/platform-node";
+import { Data, Effect, Stream } from "effect";
+import { HttpIncomingMessage, HttpServerError, type HttpServerRequest, HttpServerRespondable, HttpServerResponse } from "effect/http";
+
+export class RequestBodyTooLarge
+	extends Data.TaggedError("RequestBodyTooLarge")<{
+		readonly request: HttpServerRequest.HttpServerRequest;
+		readonly limit: bigint;
+	}>
+	implements HttpServerRespondable.Respondable
+{
+	[HttpServerRespondable.symbol]() {
+		return Effect.succeed(HttpServerResponse.empty({ status: 413 }));
+	}
+}
+
+export const readBoundedBody = Effect.fnUntraced(function* (request: HttpServerRequest.HttpServerRequest) {
+	const incoming = NodeHttpServerRequest.toIncomingMessage(request);
+	const limit = yield* HttpIncomingMessage.MaxBodySize;
+	const read = Effect.gen(function* () {
+		const length = request.headers["content-length"];
+		if (limit !== undefined && length !== undefined && BigInt(length) > limit) {
+			return yield* new RequestBodyTooLarge({ limit, request });
+		}
+		const chunks: Uint8Array[] = [];
+		let size = 0n;
+		yield* NodeStream.fromReadable<Uint8Array, HttpServerError.HttpServerError>({
+			closeOnDone: false,
+			evaluate: () => incoming,
+			onError: (cause) => new HttpServerError.HttpServerError({ reason: new HttpServerError.RequestParseError({ cause, request }) }),
+		}).pipe(
+			Stream.runForEach((chunk) => {
+				size += BigInt(chunk.byteLength);
+				if (limit !== undefined && size > limit) {
+					return Effect.fail(new RequestBodyTooLarge({ limit, request }));
+				}
+				chunks.push(chunk);
+				return Effect.void;
+			}),
+		);
+		return Uint8Array.from(Buffer.concat(chunks)).buffer;
+	});
+	// Drain unread bytes without destroying the socket so the server can send a response.
+	return yield* read.pipe(Effect.onError(() => Effect.sync(() => incoming.resume())));
+});

package/src/server/boundedRpcRequest.ts

@@ -1,37 +1,18 @@
-import { NodeHttpServerRequest, NodeStream } from "@effect/platform-node";
-import { Effect, Stream } from "effect";
-import { HttpIncomingMessage, HttpServerError, type HttpServerRequest } from "effect/http";
+import { Effect } from "effect";
+import { HttpServerError, type HttpServerRequest } from "effect/http";
+import { readBoundedBody } from "./boundedBody.ts";
 
 export function boundedRpcRequest(request: HttpServerRequest.HttpServerRequest): HttpServerRequest.HttpServerRequest {
-	const incoming = NodeHttpServerRequest.toIncomingMessage(request);
-	function error(cause: unknown) {
-		return new HttpServerError.HttpServerError({ reason: new HttpServerError.RequestParseError({ cause, request }) });
-	}
-	const text = Effect.gen(function* () {
-		const limit = yield* HttpIncomingMessage.MaxBodySize;
-		const chunks: Uint8Array[] = [];
-		let size = 0n;
-		yield* NodeStream.fromReadable<Uint8Array, HttpServerError.HttpServerError>({
-			closeOnDone: false,
-			evaluate: () => incoming,
-			onError: error,
-		}).pipe(
-			Stream.runForEach((chunk) => {
-				size += BigInt(chunk.byteLength);
-				if (limit !== undefined && size > limit) {
-					return Effect.fail(error(new Error("RPC body exceeds MAX_BODY_SIZE")));
-				}
-				chunks.push(chunk);
-				return Effect.void;
-			}),
-		);
-		return Buffer.concat(chunks).toString("utf8");
-	}).pipe(
-		Effect.onError(() => Effect.sync(() => incoming.resume())),
+	const arrayBuffer = readBoundedBody(request).pipe(
+		Effect.mapError((cause) =>
+			cause._tag === "RequestBodyTooLarge"
+				? new HttpServerError.HttpServerError({ reason: new HttpServerError.RequestParseError({ cause, request }) })
+				: cause,
+		),
 		Effect.cached,
 		Effect.runSync,
 	);
-	const arrayBuffer = Effect.map(text, (body) => new TextEncoder().encode(body).buffer);
+	const text = Effect.map(arrayBuffer, (body) => new TextDecoder().decode(body));
 	// The native text reader destroys the HTTP socket on overflow, preventing a 4xx response.
 	return new Proxy(request, {
 		get: (target, key, receiver) => {