stitchkit 0.110.5 → 0.111.0

package/dist/entrypoints/cli/publish.js

@@ -15,7 +15,7 @@ import {
   gzipCliAsset,
   decodeCliAsset,
   compareCliVersions2
-} from "../../index-s0xbnpfh.js";
+} from "../../index-kdnfe0sr.js";
 import {
   withExclusiveLock2
 } from "../../index-w9mqgnz9.js";

package/dist/entrypoints/cli.js

@@ -16,7 +16,7 @@ import {
   renderCliView2,
   pollUntilDone2,
   createCli2
-} from "../index-n7hrpngg.js";
+} from "../index-syzngt7v.js";
 import"../index-fynr93w4.js";
 import"../index-ct75c3at.js";
 import"../index-q6crhe1n.js";
@@ -40,7 +40,7 @@ import {
   checkCliUpdate2,
   applyCliUpdate2,
   rollbackCliUpdate2
-} from "../index-s0xbnpfh.js";
+} from "../index-kdnfe0sr.js";
 import {
   writeFileAtomicSync2
 } from "../index-07dcf2yn.js";

package/dist/entrypoints/http.d.ts

@@ -3,4 +3,6 @@ export { ApiError } from '../browser/api-error.js';
 export { type ChunkedUploadConfig, type ChunkedUploadPart, type ChunkedUploadProgress, type ChunkedUploadStart, type ChunkSource, uploadInChunks, } from '../browser/chunked-upload.js';
 export { type ClientConfig, type ClientContract, type ClientFetch, type ClientRegistryValue, type ContractClientConfig, contractEndpointMatchers, createClient, createClients, createScopedClients, createScopedUrlBuilders, createUrlBuilder, createUrlBuilders, type PathPrefixArgs, type RegistryScope, type ScopeClientConfigs, type ScopedClientRegistry, type ScopedUrlBuilderRegistry, type UrlBuilderConfig, } from '../browser/client.js';
 export { type ApiEvent, type ApiEventListener, type ConfiguredHttpClient, createHttpClient, type HeaderProvider, type HttpClient, type HttpClientConfig, type RequestOptions, type UnauthorizedMatcher, } from '../browser/http.js';
+export { type BoundedBodyOptions, readBoundedBody } from '../internal/bounded-body.js';
+export type { StreamByteSource } from '../internal/stream-chunks.js';
 //# sourceMappingURL=http.d.ts.map

package/dist/entrypoints/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/entrypoints/http.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,cAAc,GACf,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,wBAAwB,EACxB,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,mBAAmB,GACzB,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/entrypoints/http.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,cAAc,GACf,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,wBAAwB,EACxB,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,mBAAmB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,KAAK,kBAAkB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AACpF,YAAY,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/entrypoints/http.js

@@ -14,10 +14,13 @@ import {
   createUrlBuilder2,
   createUrlBuilders2,
   createScopedUrlBuilders2
-} from "../index-jk44mbqb.js";
+} from "../index-1y0arq4z.js";
 import {
   ApiError2
 } from "../index-kfjkb396.js";
+import {
+  readBoundedBody2
+} from "../index-qndsr7f0.js";
 export {
   ApiError2 as ApiError,
   contractEndpointMatchers2 as contractEndpointMatchers,
@@ -28,5 +31,6 @@ export {
   createScopedUrlBuilders2 as createScopedUrlBuilders,
   createUrlBuilder2 as createUrlBuilder,
   createUrlBuilders2 as createUrlBuilders,
+  readBoundedBody2 as readBoundedBody,
   uploadInChunks2 as uploadInChunks
 };

package/dist/entrypoints/index.d.ts

@@ -13,6 +13,7 @@ export type { RealtimeClient, RealtimeClientOptions, SocketEventMap, SocketIOCli
 export { createRealtimeClient, createSocketIOClient } from '../browser/socket-io.js';
 export { createNDJSONDecoder, type NDJSONDecoder, type ParseNDJSONOptions, type ParseSSEOptions, parseNDJSON, parseSSE, type StreamByteSource, StreamLineLimitError, StreamTruncatedLineError, } from '../browser/stream.js';
 export { type Backoff, type BackoffPolicy, BackoffPolicySchema, createBackoff, } from '../internal/backoff.js';
+export { type BoundedBodyOptions, readBoundedBody } from '../internal/bounded-body.js';
 export type { StitchLogger } from '../internal/logger.js';
 export { formatZodError, type ZodIssueSummary, zodIssues } from '../internal/zod-issues.js';
 export { childSpan, createTraceContext, formatTraceparent, parseTraceparent, type TraceContext, } from '../observability/trace.js';

package/dist/entrypoints/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/entrypoints/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,cAAc,GACf,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,wBAAwB,EACxB,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,mBAAmB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,yBAAyB,EACzB,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,KAAK,yBAAyB,EAC9B,+BAA+B,EAC/B,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,oBAAoB,EACpB,KAAK,eAAe,EACpB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,KAAK,wBAAwB,GAC9B,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,yBAAyB,EACzB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,YAAY,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,wBAAwB,EACxB,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,GAC9B,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EACL,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,WAAW,EACX,QAAQ,EACR,KAAK,gBAAgB,EACrB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,OAAO,EACZ,KAAK,aAAa,EAClB,mBAAmB,EACnB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKvD,OAAO,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAGzF,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,YAAY,GAClB,MAAM,wBAAwB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/entrypoints/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,cAAc,GACf,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,wBAAwB,EACxB,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,mBAAmB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,yBAAyB,EACzB,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,KAAK,yBAAyB,EAC9B,+BAA+B,EAC/B,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,oBAAoB,EACpB,KAAK,eAAe,EACpB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,KAAK,wBAAwB,GAC9B,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,yBAAyB,EACzB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,YAAY,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,wBAAwB,EACxB,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,GAC9B,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EACL,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,WAAW,EACX,QAAQ,EACR,KAAK,gBAAgB,EACrB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,OAAO,EACZ,KAAK,aAAa,EAClB,mBAAmB,EACnB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,KAAK,kBAAkB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AACpF,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKvD,OAAO,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAGzF,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,YAAY,GAClB,MAAM,wBAAwB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/entrypoints/index.js

@@ -71,7 +71,7 @@ import {
   createUrlBuilder2,
   createUrlBuilders2,
   createScopedUrlBuilders2
-} from "../index-jk44mbqb.js";
+} from "../index-1y0arq4z.js";
 import {
   createRetainedTopics2,
   createRealtimeClientWithPeer,
@@ -83,6 +83,9 @@ import {
 import {
   ApiError2
 } from "../index-kfjkb396.js";
+import {
+  readBoundedBody2
+} from "../index-qndsr7f0.js";
 import {
   sleep
 } from "../index-eemvahkc.js";
@@ -419,6 +422,7 @@ export {
   parseSSE2 as parseSSE,
   parseTraceparent2 as parseTraceparent,
   rateLimited2 as rateLimited,
+  readBoundedBody2 as readBoundedBody,
   resumableIterator,
   unauthorized2 as unauthorized,
   uploadInChunks2 as uploadInChunks,

package/dist/entrypoints/node.d.ts

@@ -11,6 +11,7 @@ export type { LogFormat } from '../server/logger.js';
 export { type NodeRuntimeServer, type NodeServerConfig, type NodeServerHandle, type NodeSocketLifecycle, serveNode, } from '../server/node.js';
 export { bindProcessSignals, type ProcessSignalName, type ProcessSignalsBinding, type ProcessSignalsErrorPhase, type ProcessSignalsOptions, type ShutdownTarget, type SignalSource, } from '../server/process-signals.js';
 export { bindRealtimeServer, type RealtimeServer, type RealtimeServerConnection, type RealtimeServerHandle, } from '../server/realtime.js';
+export { defineRequestIngress, type RequestIngress, type RequestIngressSource, } from '../server/request-ingress.js';
 export { type ManagedServerHandle, type ShutdownOptions, ShutdownOptionsSchema, type ShutdownResult, ShutdownResultSchema, type ShutdownState, ShutdownStateSchema, type ShutdownStatus, ShutdownStatusSchema, } from '../server/shutdown.js';
 export { createNodeSocketIOServer as createSocketIOServer, type NodeSocketIOServerHandle as SocketIOServerHandle, type SocketIOHandshakeConfig, type SocketIOPeerLoaders, type SocketIORequestPolicy, type SocketIOServerConfig, } from '../server/socket-io-node.js';
 export type { EffectiveScope, FetchComposition, FetchHandler, HandlerConfig, LoggingConfig, LogOutcome, RawRoute, RawRouteContext, ScopeContexts, ScopedHandlers, ServiceDef, } from '../server/types.js';

package/dist/entrypoints/node.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../src/entrypoints/node.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,SAAS,EACT,KAAK,qBAAqB,EAC1B,KAAK,WAAW,GACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,6BAA6B,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,4BAA4B,EACjC,KAAK,sBAAsB,GAC5B,MAAM,8BAA8B,CAAC;AACtC,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,SAAS,GACV,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,YAAY,GAClB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,qBAAqB,EACrB,KAAK,cAAc,EACnB,oBAAoB,EACpB,KAAK,aAAa,EAClB,mBAAmB,EACnB,KAAK,cAAc,EACnB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,wBAAwB,IAAI,oBAAoB,EAChD,KAAK,wBAAwB,IAAI,oBAAoB,EACrD,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,GAC1B,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,aAAa,EACb,UAAU,EACV,QAAQ,EACR,eAAe,EACf,aAAa,EACb,cAAc,EACd,UAAU,GACX,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,yBAAyB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,wBAAwB,EACxB,KAAK,4BAA4B,EACjC,KAAK,oBAAoB,GAC1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,WAAW,EACX,YAAY,GACb,MAAM,YAAY,CAAC"}
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../src/entrypoints/node.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,SAAS,EACT,KAAK,qBAAqB,EAC1B,KAAK,WAAW,GACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,6BAA6B,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,4BAA4B,EACjC,KAAK,sBAAsB,GAC5B,MAAM,8BAA8B,CAAC;AACtC,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,SAAS,GACV,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,YAAY,GAClB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,qBAAqB,EACrB,KAAK,cAAc,EACnB,oBAAoB,EACpB,KAAK,aAAa,EAClB,mBAAmB,EACnB,KAAK,cAAc,EACnB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,wBAAwB,IAAI,oBAAoB,EAChD,KAAK,wBAAwB,IAAI,oBAAoB,EACrD,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,GAC1B,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,aAAa,EACb,UAAU,EACV,QAAQ,EACR,eAAe,EACf,aAAa,EACb,cAAc,EACd,UAAU,GACX,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,yBAAyB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,wBAAwB,EACxB,KAAK,4BAA4B,EACjC,KAAK,oBAAoB,GAC1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,WAAW,EACX,YAAY,GACb,MAAM,YAAY,CAAC"}

package/dist/entrypoints/node.js

@@ -19,10 +19,11 @@ import {
   implementRegistry2,
   createImplementRegistry2,
   bindProcessSignals2,
+  defineRequestIngress2,
   createSocketIOServer2,
   UnixClientTransportError2,
   createUnixClientTransport2
-} from "../index-s6d8zsha.js";
+} from "../index-krng2a5j.js";
 import {
   bindRealtimeServer2
 } from "../index-xmgjtkvr.js";
@@ -292,6 +293,7 @@ export {
   createScopedImplementRegistry2 as createScopedImplementRegistry,
   createNodeSocketIOServer as createSocketIOServer,
   createUnixClientTransport2 as createUnixClientTransport,
+  defineRequestIngress2 as defineRequestIngress,
   forbidden2 as forbidden,
   implement2 as implement,
   implementRegistry2 as implementRegistry,

package/dist/entrypoints/observability.js

@@ -10,6 +10,9 @@ import {
   withinBound,
   createBoundedSinkManager
 } from "../index-qaet40b2.js";
+import {
+  assertPositiveSafeInteger
+} from "../index-0s4xebbg.js";
 import {
   redact2,
   truncatePreview2,
@@ -108,7 +111,17 @@ function readMcpContext(value) {
 function createSinkManager(config) {
   return createBoundedSinkManager(config);
 }
+async function settlePayload(payload, payloadTruncated) {
+  if (!payload)
+    return { body: undefined, truncated: false };
+  try {
+    return { body: await payload, truncated: await payloadTruncated ?? false };
+  } catch {
+    return { body: undefined, truncated: false };
+  }
+}
 function createObservability(config) {
+  assertPositiveSafeInteger("request.payloadMaxBytes", config.request?.payloadMaxBytes);
   const requestManager = config.request ? createSinkManager(config.request) : undefined;
   const toolManager = config.tools ? createSinkManager(config.tools) : undefined;
   let closed = false;
@@ -117,7 +130,15 @@ function createObservability(config) {
   let unbounded;
   const request = config.request ? {
     includePayload: config.request.includePayload ?? false,
-    complete: ({ context, statusCode, durationMs, payload, outcome }) => {
+    payloadMaxBytes: config.request.payloadMaxBytes,
+    complete: ({
+      context,
+      statusCode,
+      durationMs,
+      payload,
+      payloadTruncated,
+      outcome
+    }) => {
       const requestConfig = config.request;
       if (!requestConfig)
         return;
@@ -125,14 +146,7 @@ function createObservability(config) {
       if (cancelled && !requestConfig.includeCancelled)
         return;
       requestManager?.submit(async () => {
-        let body;
-        if (!cancelled && payload) {
-          try {
-            body = await payload;
-          } catch {
-            body = undefined;
-          }
-        }
+        const { body, truncated } = cancelled ? { body: undefined, truncated: false } : await settlePayload(payload, payloadTruncated);
         return {
           source: context.source,
           kind: context.kind ?? "request",
@@ -161,6 +175,7 @@ function createObservability(config) {
             }
           },
           payload: cancelled ? null : sanitizePayload2(body, requestConfig.sanitize),
+          ...truncated && { payloadTruncated: true },
           resultSize: null,
           responseBytes: 0,
           userId: context.userId,

package/dist/entrypoints/process.js

@@ -9,7 +9,7 @@ import {
 } from "../index-84bf5spd.js";
 import {
   startNativeCommand
-} from "../index-e1sjcjfy.js";
+} from "../index-7r4knwf8.js";
 // src/process/command.ts
 function runNativeCommand(input) {
   return startNativeCommand(input).result;

package/dist/entrypoints/remote.js

@@ -4,7 +4,7 @@ import"../index-p6apg0jg.js";
 import {
   endpointHasArguments,
   createClient2
-} from "../index-jk44mbqb.js";
+} from "../index-1y0arq4z.js";
 import {
   ApiError2
 } from "../index-kfjkb396.js";

package/dist/entrypoints/server.d.ts

@@ -23,10 +23,12 @@ export { createTrustFence, isLoopbackAddress, type TrustFence, type TrustFenceCo
 export { type MultipartLifecycle, type MultipartResult, parseMultipart, } from '../server/multipart.js';
 export { generateOpenApiDocument, type OpenApiConfig, type OpenApiDocument, type OpenApiInfo, type OpenApiServer, openApiRoute, } from '../server/openapi.js';
 export { bindProcessSignals, type ProcessSignalName, type ProcessSignalsBinding, type ProcessSignalsErrorPhase, type ProcessSignalsOptions, type ShutdownTarget, type SignalSource, } from '../server/process-signals.js';
+export type { ProxyOriginConfig } from '../server/proxy-origin.js';
 export { createRateLimiter, type RateLimitConfig } from '../server/rate-limit.js';
 export { errorResponse, parseBody, respondJson } from '../server/raw.js';
 export { bindRealtimeServer, type RealtimeServer, type RealtimeServerConnection, type RealtimeServerHandle, } from '../server/realtime.js';
 export { bindReleaseRefreshSignal, type ReleaseRefreshSignal, type ReleaseRefreshSignalOptions, } from '../server/release-signal.js';
+export { defineRequestIngress, type RequestIngress, type RequestIngressSource, } from '../server/request-ingress.js';
 export { type ManagedServerHandle, type ShutdownOptions, ShutdownOptionsSchema, type ShutdownResult, ShutdownResultSchema, type ShutdownState, ShutdownStateSchema, type ShutdownStatus, ShutdownStatusSchema, } from '../server/shutdown.js';
 export type { SocketIOHandshakeConfig, SocketIOPeerLoaders, SocketIORequestPolicy, SocketIOServerConfig, SocketIOServerHandle, SocketIOServerLifecycle, } from '../server/socket-io.js';
 export { createSocketIOServer, socketIoLane } from '../server/socket-io.js';

package/dist/entrypoints/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/entrypoints/server.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,KAAK,qBAAqB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC9F,OAAO,EACL,KAAK,eAAe,EACpB,SAAS,EACT,eAAe,EACf,aAAa,EACb,UAAU,EACV,eAAe,EACf,cAAc,GACf,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAIrD,OAAO,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACzF,OAAO,EACL,KAAK,oBAAoB,EACzB,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,mBAAmB,IAAI,gBAAgB,EAC5C,KAAK,eAAe,IAAI,YAAY,EACpC,KAAK,gBAAgB,IAAI,aAAa,EACtC,KAAK,WAAW,IAAI,QAAQ,EAC5B,KAAK,kBAAkB,IAAI,eAAe,EAC1C,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,KAAK,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACL,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,aAAa,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,cAAc,EACd,KAAK,eAAe,EACpB,KAAK,QAAQ,EACb,KAAK,eAAe,EACpB,KAAK,YAAY,GAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,KAAK,SAAS,EACd,cAAc,EACd,KAAK,gBAAgB,EACrB,SAAS,EACT,WAAW,EACX,QAAQ,GACT,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,KAAK,gBAAgB,EACrB,SAAS,EACT,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,GACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,6BAA6B,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,4BAA4B,EACjC,KAAK,sBAAsB,GAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,oBAAoB,EACzB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,GACpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,KAAK,SAAS,EACd,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,eAAe,GAChB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,KAAK,UAAU,EACf,WAAW,EACX,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,OAAO,EACP,KAAK,gBAAgB,EACrB,SAAS,GACV,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,KAAK,UAAU,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAC7F,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,KAAK,kBAAkB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,cAAc,GACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,YAAY,GACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,YAAY,GAClB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAAE,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EACL,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,wBAAwB,EACxB,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,GACjC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,qBAAqB,EACrB,KAAK,cAAc,EACnB,oBAAoB,EACpB,KAAK,aAAa,EAClB,mBAAmB,EACnB,KAAK,cAAc,EACnB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,uBAAuB,EACvB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EACL,2BAA2B,EAC3B,WAAW,EACX,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,QAAQ,EACR,cAAc,GACf,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,oBAAoB,EACpB,cAAc,EACd,sBAAsB,EACtB,QAAQ,EACR,cAAc,EACd,aAAa,EACb,UAAU,EACV,SAAS,EACT,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,EACjB,UAAU,EACV,eAAe,EACf,aAAa,EACb,cAAc,EACd,UAAU,EACV,YAAY,EACZ,gCAAgC,GACjC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,yBAAyB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,wBAAwB,EACxB,KAAK,4BAA4B,EACjC,KAAK,oBAAoB,GAC1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,YAAY,EACjB,wBAAwB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,SAAS,EACT,iBAAiB,EACjB,QAAQ,EACR,WAAW,EACX,mBAAmB,EACnB,KAAK,eAAe,EACpB,YAAY,GACb,MAAM,YAAY,CAAC"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/entrypoints/server.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,KAAK,qBAAqB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC9F,OAAO,EACL,KAAK,eAAe,EACpB,SAAS,EACT,eAAe,EACf,aAAa,EACb,UAAU,EACV,eAAe,EACf,cAAc,GACf,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAIrD,OAAO,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACzF,OAAO,EACL,KAAK,oBAAoB,EACzB,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,mBAAmB,IAAI,gBAAgB,EAC5C,KAAK,eAAe,IAAI,YAAY,EACpC,KAAK,gBAAgB,IAAI,aAAa,EACtC,KAAK,WAAW,IAAI,QAAQ,EAC5B,KAAK,kBAAkB,IAAI,eAAe,EAC1C,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,KAAK,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACL,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,aAAa,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,cAAc,EACd,KAAK,eAAe,EACpB,KAAK,QAAQ,EACb,KAAK,eAAe,EACpB,KAAK,YAAY,GAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,KAAK,SAAS,EACd,cAAc,EACd,KAAK,gBAAgB,EACrB,SAAS,EACT,WAAW,EACX,QAAQ,GACT,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,KAAK,gBAAgB,EACrB,SAAS,EACT,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,GACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,6BAA6B,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,4BAA4B,EACjC,KAAK,sBAAsB,GAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,oBAAoB,EACzB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,GACpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,KAAK,SAAS,EACd,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,eAAe,GAChB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,KAAK,UAAU,EACf,WAAW,EACX,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,OAAO,EACP,KAAK,gBAAgB,EACrB,SAAS,GACV,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,KAAK,UAAU,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAC7F,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,KAAK,kBAAkB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,cAAc,GACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,YAAY,GACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,YAAY,GAClB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EACL,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,wBAAwB,EACxB,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,GACjC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,qBAAqB,EACrB,KAAK,cAAc,EACnB,oBAAoB,EACpB,KAAK,aAAa,EAClB,mBAAmB,EACnB,KAAK,cAAc,EACnB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,uBAAuB,EACvB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EACL,2BAA2B,EAC3B,WAAW,EACX,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,QAAQ,EACR,cAAc,GACf,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,oBAAoB,EACpB,cAAc,EACd,sBAAsB,EACtB,QAAQ,EACR,cAAc,EACd,aAAa,EACb,UAAU,EACV,SAAS,EACT,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,EACjB,UAAU,EACV,eAAe,EACf,aAAa,EACb,cAAc,EACd,UAAU,EACV,YAAY,EACZ,gCAAgC,GACjC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,yBAAyB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,wBAAwB,EACxB,KAAK,4BAA4B,EACjC,KAAK,oBAAoB,GAC1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,YAAY,EACjB,wBAAwB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,SAAS,EACT,iBAAiB,EACjB,QAAQ,EACR,WAAW,EACX,mBAAmB,EACnB,KAAK,eAAe,EACpB,YAAY,GACb,MAAM,YAAY,CAAC"}

package/dist/entrypoints/server.js

@@ -42,13 +42,14 @@ import {
   implementRegistry2,
   createImplementRegistry2,
   bindProcessSignals2,
+  defineRequestIngress2,
   webSocketLane2,
   composeWebSocketHandlers2,
   createSocketIOServer2,
   socketIoLane2,
   UnixClientTransportError2,
   createUnixClientTransport2
-} from "../index-s6d8zsha.js";
+} from "../index-krng2a5j.js";
 import {
   createFileStateStore2
 } from "../index-nx49x0tw.js";
@@ -82,6 +83,13 @@ import {
   realPathWithinDir
 } from "../index-5cc6r990.js";
 import"../index-1bx1xv1k.js";
+import {
+  readBoundedChunks,
+  concatChunks
+} from "../index-qndsr7f0.js";
+import {
+  assertPositiveSafeInteger
+} from "../index-0s4xebbg.js";
 import {
   DEFAULT_CORS_ALLOW_HEADERS2,
   DEFAULT_CORS_EXPOSE_HEADERS2,
@@ -335,6 +343,53 @@ function bindSocketRegistry(server, options) {
 }
 // src/server/bun.ts
 import { chmodSync, statSync, unlinkSync } from "node:fs";
+
+// src/server/proxy-origin.ts
+import { z } from "zod";
+var ProtocolSchema = z.enum(["http", "https"]);
+var AuthoritySchema = z.string().min(1).max(1024).regex(/^[^\s/\\?#@,;]+$/);
+var conflictingHeaders = ["forwarded", "x-forwarded-host", "x-forwarded-port"];
+function createProxyOrigin(policy) {
+  const originals = new WeakMap;
+  const original = (request) => originals.get(request) ?? request;
+  return {
+    bind(server) {
+      const requestIP = server.requestIP.bind(server);
+      const timeout = server.timeout.bind(server);
+      const upgrade = server.upgrade.bind(server);
+      server.requestIP = (request) => requestIP(original(request));
+      server.timeout = (request, seconds) => timeout(original(request), seconds);
+      server.upgrade = (request, options) => upgrade(original(request), options);
+    },
+    normalize(request, server) {
+      const peer = server.requestIP(request)?.address;
+      if (!peer || !policy.trustedPeer(peer))
+        return request;
+      const protocol = ProtocolSchema.safeParse(request.headers.get("x-forwarded-proto"));
+      const authority = AuthoritySchema.safeParse(request.headers.get("host"));
+      if (!protocol.success || !authority.success || conflictingHeaders.some((name) => request.headers.has(name))) {
+        return new Response("Invalid proxy origin", { status: 400 });
+      }
+      let origin;
+      try {
+        origin = new URL(`${protocol.data}://${authority.data}`);
+      } catch {
+        return new Response("Invalid proxy origin", { status: 400 });
+      }
+      const url = new URL(request.url);
+      url.protocol = origin.protocol;
+      url.host = origin.host;
+      url.port = origin.port;
+      if (url.href === request.url)
+        return request;
+      const normalized = new Request(url, request);
+      originals.set(normalized, request);
+      return normalized;
+    }
+  };
+}
+
+// src/server/bun.ts
 function reclaimStaleUnixSocket(path) {
   const stats = statSync(path, { throwIfNoEntry: false });
   if (stats === undefined)
@@ -492,17 +547,21 @@ function createServer(config) {
   const handler = createHandler2(config);
   const consumerFetch = config.wrapFetch ? config.wrapFetch(handler) : handler;
   const admittedFetch = lifecycle.wrapFetch(consumerFetch);
+  const proxyOrigin = config.proxyOrigin && createProxyOrigin(config.proxyOrigin);
   const fetch = async (request, server) => {
+    const normalized = proxyOrigin && server ? proxyOrigin.normalize(request, server) : request;
+    if (normalized instanceof Response)
+      return normalized;
     if (socket && socketRoutePrefix) {
-      const pathname = new URL(request.url).pathname;
+      const pathname = new URL(normalized.url).pathname;
       if (pathname.startsWith(socketRoutePrefix)) {
-        return await socket.route.handler(request, {
+        return await socket.route.handler(normalized, {
           params: { socketPath: pathname.slice(socketRoutePrefix.length) },
           server
         });
       }
     }
-    return admittedFetch(request, server);
+    return admittedFetch(normalized, server);
   };
   if (unixPath !== undefined) {
     reclaimStaleUnixSocket(unixPath);
@@ -538,6 +597,7 @@ function createServer(config) {
     });
   }
   const server = runtime;
+  proxyOrigin?.bind(server);
   return {
     url: server.url.toString().replace(/\/$/, ""),
     port: server.port ?? (unixPath !== undefined ? 0 : port),
@@ -1643,13 +1703,25 @@ function errorResponse2(error) {
     res.headers.set("x-request-id", traceId);
   return res;
 }
-async function parseBody(req, schema) {
-  const raw = await req.json().catch(() => null);
+async function parseBody(req, schema, options = {}) {
+  assertPositiveSafeInteger("maxBytes", options.maxBytes);
+  const raw = await readJson(req, options.maxBytes ?? DEFAULT_PARSE_BODY_BYTES);
   if (raw === null)
     return null;
   const parsed = schema.safeParse(raw);
   return parsed.success ? parsed.data : null;
 }
+var DEFAULT_PARSE_BODY_BYTES = 1024 * 1024;
+async function readJson(req, maxBytes) {
+  try {
+    const result = await readBoundedChunks(req.body, { maxBytes, signal: req.signal });
+    if (result.kind === "over-limit")
+      return null;
+    return JSON.parse(new TextDecoder().decode(concatChunks(result.chunks, result.total)));
+  } catch {
+    return null;
+  }
+}
 // src/server/release-signal.ts
 function bindReleaseRefreshSignal(marker, options = {}) {
   const signal = options.signal ?? "SIGUSR2";
@@ -1755,6 +1827,7 @@ export {
   createUnixClientTransport2 as createUnixClientTransport,
   defineCookie,
   defineMultipartStream2 as defineMultipartStream,
+  defineRequestIngress2 as defineRequestIngress,
   deriveCodeChallenge2 as deriveCodeChallenge,
   errorCode2 as errorCode,
   errorResponse2 as errorResponse,

package/dist/entrypoints/telegram.js

@@ -16,9 +16,6 @@ import {
   TELEGRAM_TEXT_LIMIT2,
   truncateTelegramHtml2
 } from "../index-nmaqxdx7.js";
-import {
-  untilAborted
-} from "../index-a5qr2rj6.js";
 import {
   writeFileAtomic2
 } from "../index-07dcf2yn.js";
@@ -29,6 +26,9 @@ import {
   MAX_TIMER_MS,
   sleep
 } from "../index-eemvahkc.js";
+import {
+  untilAborted
+} from "../index-a5qr2rj6.js";
 import {
   assertPositiveSafeInteger
 } from "../index-0s4xebbg.js";

package/dist/entrypoints/testing.js

@@ -35,7 +35,7 @@ import"../index-fynr93w4.js";
 import {
   createClient2,
   createClients2
-} from "../index-jk44mbqb.js";
+} from "../index-1y0arq4z.js";
 import {
   assertPositiveSafeInteger
 } from "../index-0s4xebbg.js";

package/dist/entrypoints/tools/connections.js

@@ -13,6 +13,10 @@ import {
 import {
   raceAbort
 } from "../../index-b0kddvzw.js";
+import {
+  readBoundedChunks,
+  concatChunks
+} from "../../index-qndsr7f0.js";
 import {
   MAX_TIMER_MS
 } from "../../index-eemvahkc.js";
@@ -243,40 +247,21 @@ function withConnectionDeadline(connectionName, context, callerSignal, body) {
   });
 }
 async function readBoundedText(response, maxBytes, connectionName, context) {
-  context?.signal?.throwIfAborted();
-  if (!response.body)
-    return "";
-  const reader = response.body.getReader();
-  const decoder = new TextDecoder;
-  let total = 0;
-  let text = "";
-  const cancel = () => void reader.cancel(context?.signal?.reason).catch(() => {
-    return;
-  });
-  context?.signal?.addEventListener("abort", cancel, { once: true });
-  try {
-    for (;; ) {
-      const { done, value } = await awaitConnection(reader.read(), context?.signal);
-      if (done)
-        break;
-      total += value.byteLength;
+  const result = await readBoundedChunks(response.body, {
+    maxBytes,
+    ...context?.signal && { signal: context.signal },
+    onChunk: (chunk) => {
       if (context)
-        context.observedReadBytes += value.byteLength;
-      if (total > maxBytes) {
-        throw new ConnectionResponseTooLargeError(connectionName, maxBytes, {
-          ...context,
-          observedReadBytes: total
-        });
-      }
-      text += decoder.decode(value, { stream: true });
+        context.observedReadBytes += chunk.byteLength;
     }
-    text += decoder.decode();
-    return text;
-  } finally {
-    context?.signal?.removeEventListener("abort", cancel);
-    cancel();
-    reader.releaseLock();
+  });
+  if (result.kind === "over-limit") {
+    throw new ConnectionResponseTooLargeError(connectionName, maxBytes, {
+      ...context,
+      observedReadBytes: result.total
+    });
   }
+  return new TextDecoder().decode(concatChunks(result.chunks, result.total));
 }
 async function readBoundedJson(response, maxBytes, connectionName, context) {
   return JSON.parse(await readBoundedText(response, maxBytes, connectionName, context));

package/dist/entrypoints/tools.js

@@ -74,7 +74,7 @@ import {
   WaitTimeoutError,
   runWaitOperation,
   createCli2
-} from "../index-n7hrpngg.js";
+} from "../index-syzngt7v.js";
 import {
   ManagedFilePathSchema2,
   ManagedFileRefSchema2
@@ -97,8 +97,15 @@ import {
   fetchGuarded,
   fetchPinnedDocument,
   readCapped
-} from "../index-3h0ztg0z.js";
+} from "../index-t65erk4z.js";
 import"../index-1bx1xv1k.js";
+import {
+  readBoundedChunks,
+  concatChunks
+} from "../index-qndsr7f0.js";
+import {
+  assertPositiveSafeInteger
+} from "../index-0s4xebbg.js";
 import {
   DEFAULT_CORS_ALLOW_HEADERS2
 } from "../index-yk4g8805.js";
@@ -468,10 +475,29 @@ function redirectWith(uri, params) {
     url.searchParams.set(key, value);
   return new Response(null, { status: 302, headers: { Location: url.toString() } });
 }
-async function readForm(req) {
+var DEFAULT_OAUTH_BODY_BYTES = 64 * 1024;
+var tooLarge = () => oauthError("invalid_request", "Request body is too large", 413);
+async function readBodyText(req, config) {
+  const result = await readBoundedChunks(req.body, {
+    maxBytes: config.maxRequestBodyBytes ?? DEFAULT_OAUTH_BODY_BYTES,
+    signal: req.signal
+  });
+  return result.kind === "over-limit" ? undefined : new TextDecoder().decode(concatChunks(result.chunks, result.total));
+}
+function parseJson(text) {
+  try {
+    return JSON.parse(text);
+  } catch {
+    return null;
+  }
+}
+async function readForm(req, config) {
+  const text = await readBodyText(req, config);
+  if (text === undefined)
+    return;
   const contentType = req.headers.get("content-type") ?? "";
   if (contentType.includes("application/json")) {
-    const body = await req.json().catch(() => null);
+    const body = parseJson(text);
     const params = new URLSearchParams;
     if (isRecord(body)) {
       for (const [key, value] of Object.entries(body)) {
@@ -481,7 +507,7 @@ async function readForm(req) {
     }
     return params;
   }
-  return new URLSearchParams(await req.text());
+  return new URLSearchParams(text);
 }
 function metadataRoute(ctx) {
   const { config } = ctx;
@@ -519,7 +545,10 @@ function registerRoute(ctx) {
         return new Response(null, { status: 204, headers: PUBLIC_CORS });
       if (req.method !== "POST")
         return oauthError("invalid_request", "POST required", 405);
-      const meta = await req.json().catch(() => null);
+      const text = await readBodyText(req, config);
+      if (text === undefined)
+        return tooLarge();
+      const meta = parseJson(text);
       if (!isRecord(meta)) {
         return oauthError("invalid_client_metadata", "Body must be a JSON object");
       }
@@ -673,7 +702,9 @@ function tokenRoute(ctx) {
         return new Response(null, { status: 204, headers: PUBLIC_CORS });
       if (req.method !== "POST")
         return oauthError("invalid_request", "POST required", 405);
-      const form = await readForm(req);
+      const form = await readForm(req, config);
+      if (!form)
+        return tooLarge();
       const grantType = form.get("grant_type");
       if (grantType === "authorization_code") {
         const code = form.get("code");
@@ -745,6 +776,7 @@ function tokenRoute(ctx) {
 
 // src/server/oauth/provider.ts
 function mountOAuthProvider(config) {
+  assertPositiveSafeInteger("maxRequestBodyBytes", config.maxRequestBodyBytes);
   const base = config.basePath ?? "/oauth";
   const ttl = config.accessTokenTtlSec ?? 3600;
   const registerPath = `${base}/register`;

package/dist/{index-mpg1t7nv.js → index-0z3kfphz.js}

@@ -4,7 +4,7 @@ import {
   AgentSandboxRestrictionSchema2,
   AgentSandboxGradeSchema2,
   AGENT_CODING_TOOL_NAMES
-} from "./index-bm180f2d.js";
+} from "./index-ey15wx6j.js";
 import {
   AgentRecordIdSchema2,
   AgentRecordVersionSchema2,