stitchkit 0.110.6 → 0.111.0

package/dist/{index-s6d8zsha.js → index-krng2a5j.js}

@@ -27,6 +27,14 @@ import {
   bindContract,
   mediaTypeEssence
 } from "./index-pzw0fpek.js";
+import {
+  readBoundedChunks,
+  concatChunks,
+  readBoundedBody2
+} from "./index-qndsr7f0.js";
+import {
+  abortReason
+} from "./index-a5qr2rj6.js";
 import {
   assertPositiveSafeInteger
 } from "./index-0s4xebbg.js";
@@ -418,27 +426,10 @@ async function collectFile(part, stream) {
   });
 }
 async function readText(stream, maxBytes) {
-  const chunks = [];
-  const reader = stream.getReader();
-  let total = 0;
-  while (true) {
-    const result = await reader.read();
-    if (result.done)
-      break;
-    total += result.value.length;
-    if (total > maxBytes) {
-      await reader.cancel();
-      badRequest2(`Multipart text field exceeds ${maxBytes} bytes`);
-    }
-    chunks.push(result.value);
-  }
-  const value = new Uint8Array(total);
-  let offset = 0;
-  for (const chunk of chunks) {
-    value.set(chunk, offset);
-    offset += chunk.length;
-  }
-  return decoder.decode(value);
+  const result = await readBoundedChunks(stream, { maxBytes });
+  if (result.kind === "over-limit")
+    badRequest2(`Multipart text field exceeds ${maxBytes} bytes`);
+  return decoder.decode(concatChunks(result.chunks, result.total));
 }
 function required(policy) {
   return policy.required !== false;
@@ -896,63 +887,16 @@ function mergeContextContribution(ctx, value, scope) {
 }
 
 // src/server/request-body.ts
-function requestAbortReason(req) {
-  return req.signal.reason ?? new DOMException("The connection was closed", "AbortError");
-}
-function throwIfRequestAborted(req) {
-  if (req.signal.aborted)
-    throw requestAbortReason(req);
-}
 async function readRequestText(req, maxBytes) {
-  throwIfRequestAborted(req);
+  if (req.signal.aborted)
+    throw abortReason(req.signal);
   if (maxBytes === undefined)
     return req.text();
   assertPositiveSafeInteger("maxJsonBodyBytes", maxBytes, Error);
-  const reader = req.body?.getReader();
-  if (!reader)
-    return "";
-  const chunks = [];
-  let total = 0;
-  let rejectAbortedRead = (_reason) => {
-    return;
-  };
-  const abortedRead = new Promise((_resolve, reject) => {
-    rejectAbortedRead = reject;
-  });
-  const onAbort = () => {
-    const reason = requestAbortReason(req);
-    rejectAbortedRead(reason);
-    reader.cancel(reason).catch(() => {
-      return;
-    });
-  };
-  req.signal.addEventListener("abort", onAbort, { once: true });
-  if (req.signal.aborted)
-    onAbort();
-  try {
-    while (true) {
-      const { done, value } = await Promise.race([reader.read(), abortedRead]);
-      if (done)
-        break;
-      total += value.byteLength;
-      if (total > maxBytes) {
-        await reader.cancel();
-        badRequest2(`JSON body exceeds the ${maxBytes}-byte limit`);
-      }
-      chunks.push(value);
-    }
-  } finally {
-    req.signal.removeEventListener("abort", onAbort);
-    if (!req.signal.aborted)
-      reader.releaseLock();
-  }
-  const bytes = new Uint8Array(total);
-  let offset = 0;
-  for (const chunk of chunks) {
-    bytes.set(chunk, offset);
-    offset += chunk.byteLength;
-  }
-  return new TextDecoder().decode(bytes);
+  const result = await readBoundedChunks(req.body, { maxBytes, signal: req.signal });
+  if (result.kind === "over-limit")
+    badRequest2(`JSON body exceeds the ${maxBytes}-byte limit`);
+  return new TextDecoder().decode(concatChunks(result.chunks, result.total));
 }
 
 // src/server/context.ts
@@ -1979,13 +1923,25 @@ function logOutgoing(entry) {
 
 // src/server/request-completion.ts
 var BODY_METHODS = new Set(["POST", "PUT", "PATCH", "DELETE"]);
+var DEFAULT_PAYLOAD_LOG_BYTES = 1024 * 1024;
+async function readPayload(clone, maxBytes) {
+  try {
+    const result = await readBoundedChunks(clone.body, { maxBytes, signal: clone.signal });
+    if (result.kind === "over-limit")
+      return { value: undefined, truncated: true };
+    return {
+      value: JSON.parse(new TextDecoder().decode(concatChunks(result.chunks, result.total))),
+      truncated: false
+    };
+  } catch {
+    return { value: undefined, truncated: false };
+  }
+}
 function openRequestCompletion(state, window) {
   const { logConfig, customLogger, useDefaultLog, observability } = state;
   const { req, url, traceId, startedAt, ipAddress } = window;
   const shouldLogRequest = logConfig !== null && shouldLog(url.pathname, req.method) && !shouldSkipLog(logConfig, req, url);
-  const payload = observability?.includePayload && BODY_METHODS.has(req.method) ? req.clone().json().catch(() => {
-    return;
-  }) : undefined;
+  const payloadRead = observability?.includePayload && BODY_METHODS.has(req.method) ? readPayload(req.clone(), observability.payloadMaxBytes ?? state.config.maxJsonBodyBytes ?? DEFAULT_PAYLOAD_LOG_BYTES) : undefined;
   const logFormat = resolveLogFormat(logConfig?.format);
   let reqLog;
   if (shouldLogRequest && useDefaultLog) {
@@ -2026,7 +1982,10 @@ function openRequestCompletion(state, window) {
           context,
           statusCode: status,
           durationMs,
-          payload,
+          ...payloadRead && {
+            payload: payloadRead.then((read) => read.value),
+            payloadTruncated: payloadRead.then((read) => read.truncated)
+          },
           ...outcome !== undefined && { outcome }
         });
       } catch {}
@@ -2367,6 +2326,23 @@ function bindProcessSignals2(handle, options = {}) {
   return { promise, close };
 }
 
+// src/server/request-ingress.ts
+function defineRequestIngress2(name) {
+  const values = new WeakMap;
+  return {
+    name,
+    attach(request, value) {
+      if (values.has(request)) {
+        throw new TypeError(`[stitchkit] request ingress ${JSON.stringify(name)} is already attached to this request`);
+      }
+      values.set(request, value);
+    },
+    from(source) {
+      return source.req && values.get(source.req);
+    }
+  };
+}
+
 // src/server/websocket.ts
 function webSocketLane2(lane) {
   const { match, handlers } = lane;
@@ -2630,39 +2606,17 @@ import {
 
 // src/server/unix-client-body.ts
 async function readBoundedRequestBody(request, maxBytes) {
-  const body = request.body;
-  if (!body)
+  if (!request.body)
     return;
+  const tooLarge = () => new UnixClientTransportError2("UNIX_REQUEST_TOO_LARGE", `Unix request body exceeds the ${maxBytes} byte limit`, "not-dispatched");
   const declared = request.headers.get("content-length");
-  if (declared !== null && Number(declared) > maxBytes) {
-    throw new UnixClientTransportError2("UNIX_REQUEST_TOO_LARGE", `Unix request body exceeds the ${maxBytes} byte limit`, "not-dispatched");
-  }
-  const reader = body.getReader();
-  const chunks = [];
-  let total = 0;
-  try {
-    for (;; ) {
-      if (request.signal.aborted)
-        throw request.signal.reason;
-      const chunk = await reader.read();
-      if (chunk.done)
-        break;
-      total += chunk.value.byteLength;
-      if (total > maxBytes) {
-        throw new UnixClientTransportError2("UNIX_REQUEST_TOO_LARGE", `Unix request body exceeds the ${maxBytes} byte limit`, "not-dispatched");
-      }
-      chunks.push(chunk.value);
-    }
-  } finally {
-    reader.releaseLock();
-  }
-  const result = new Uint8Array(total);
-  let offset = 0;
-  for (const chunk of chunks) {
-    result.set(chunk, offset);
-    offset += chunk.byteLength;
-  }
-  return result;
+  if (declared !== null && Number(declared) > maxBytes)
+    throw tooLarge();
+  return readBoundedBody2(request.body, {
+    maxBytes,
+    signal: request.signal,
+    limitError: tooLarge
+  });
 }
 function incomingResponseBody(response, maxBytes, onDone) {
   let finished = false;
@@ -3474,4 +3428,4 @@ function createUnixClientTransport2(config) {
   };
 }
 
-export { contextContributionDelta, prepareContextContribution, mergeContextContribution, parseMultipart2, DEFAULT_STREAM_HEARTBEAT_MS2, streamingRoute2, ndjsonRoute2, sseRoute2, createHandler2, createScopedImplementRegistry2, implementRegistry2, createImplementRegistry2, bindProcessSignals2, webSocketLane2, composeWebSocketHandlers2, createSocketIOServer2, socketIoLane2, UnixClientTransportError2, createUnixClientTransport2 };
+export { contextContributionDelta, prepareContextContribution, mergeContextContribution, parseMultipart2, DEFAULT_STREAM_HEARTBEAT_MS2, streamingRoute2, ndjsonRoute2, sseRoute2, createHandler2, createScopedImplementRegistry2, implementRegistry2, createImplementRegistry2, bindProcessSignals2, defineRequestIngress2, webSocketLane2, composeWebSocketHandlers2, createSocketIOServer2, socketIoLane2, UnixClientTransportError2, createUnixClientTransport2 };

package/dist/index-qndsr7f0.js

@@ -0,0 +1,55 @@
+import {
+  chunksOf
+} from "./index-cjbn98zt.js";
+import {
+  abortReason
+} from "./index-a5qr2rj6.js";
+import {
+  assertPositiveSafeInteger
+} from "./index-0s4xebbg.js";
+
+// src/internal/bounded-body.ts
+async function readBoundedChunks(source, options) {
+  options.signal?.throwIfAborted();
+  const chunks = [];
+  let total = 0;
+  if (source === null)
+    return { kind: "complete", chunks, total };
+  for await (const chunk of chunksOf(source, options.signal)) {
+    if (!(chunk instanceof Uint8Array)) {
+      throw new TypeError("A bounded body source must yield bytes (Uint8Array chunks)");
+    }
+    total += chunk.byteLength;
+    options.onChunk?.(chunk);
+    if (total > options.maxBytes)
+      return { kind: "over-limit", total };
+    chunks.push(chunk);
+  }
+  return { kind: "complete", chunks, total };
+}
+function concatChunks(chunks, total) {
+  const bytes = new Uint8Array(total);
+  let offset = 0;
+  for (const chunk of chunks) {
+    bytes.set(chunk, offset);
+    offset += chunk.byteLength;
+  }
+  return bytes;
+}
+async function readBoundedBody2(source, options) {
+  assertPositiveSafeInteger("maxBytes", options.maxBytes);
+  let result;
+  try {
+    result = await readBoundedChunks(source, options);
+  } catch (error) {
+    const { signal, abortError } = options;
+    if (signal?.aborted && abortError)
+      throw abortError(abortReason(signal));
+    throw error;
+  }
+  if (result.kind === "over-limit")
+    throw options.limitError(result.total);
+  return concatChunks(result.chunks, result.total);
+}
+
+export { readBoundedChunks, concatChunks, readBoundedBody2 };

package/dist/{index-n7hrpngg.js → index-syzngt7v.js}

@@ -26,7 +26,7 @@ import {
 import {
   fetchGuarded,
   readCapped
-} from "./index-3h0ztg0z.js";
+} from "./index-t65erk4z.js";
 import {
   isWithinDir2
 } from "./index-5cc6r990.js";

package/dist/{index-3h0ztg0z.js → index-t65erk4z.js}

@@ -1,6 +1,9 @@
 import {
   raceAbort
 } from "./index-b0kddvzw.js";
+import {
+  readBoundedChunks
+} from "./index-qndsr7f0.js";
 
 // src/internal/secure-fetch.ts
 import { lookup } from "node:dns/promises";
@@ -259,27 +262,8 @@ async function fetchPinnedDocument(start, options) {
   throw new Error("too many redirects");
 }
 async function readCapped(res, max) {
-  const reader = res.body?.getReader();
-  if (!reader)
-    return Buffer.alloc(0);
-  const chunks = [];
-  let total = 0;
-  try {
-    while (true) {
-      const { done, value } = await reader.read();
-      if (done)
-        break;
-      total += value.length;
-      if (total > max) {
-        await reader.cancel();
-        return null;
-      }
-      chunks.push(value);
-    }
-  } finally {
-    reader.releaseLock();
-  }
-  return Buffer.concat(chunks);
+  const result = await readBoundedChunks(res.body, { maxBytes: max });
+  return result.kind === "over-limit" ? null : Buffer.concat(result.chunks);
 }
 
 export { fetchGuarded, PrivateAddressRefusal, fetchPinnedDocument, readCapped };

package/dist/internal/bounded-body.d.ts

@@ -0,0 +1,44 @@
+import { type StreamByteSource } from './stream-chunks.js';
+/** How a bounded read of a byte source ended, other than by an abort. */
+export type BoundedChunksResult = {
+    readonly kind: 'complete';
+    readonly chunks: Uint8Array[];
+    readonly total: number;
+}
+/** The source crossed `maxBytes`; `total` counts the chunk that crossed it. */
+ | {
+    readonly kind: 'over-limit';
+    readonly total: number;
+};
+export interface BoundedChunksOptions {
+    readonly maxBytes: number;
+    readonly signal?: AbortSignal;
+    /** Called with every chunk read, including the one that crosses the limit. */
+    readonly onChunk?: (chunk: Uint8Array) => void;
+}
+/**
+ * Read a source up to `maxBytes`. The read stops at the first chunk that crosses the limit, so
+ * memory stays bounded by the limit plus one chunk, and the source is cancelled. A `null` source
+ * is empty. An abort rejects with the signal's reason, before the first read as well as during
+ * one; it is checked ahead of the empty-source answer.
+ */
+export declare function readBoundedChunks(source: StreamByteSource | null, options: BoundedChunksOptions): Promise<BoundedChunksResult>;
+/** One byte array from the chunks of a finished read. */
+export declare function concatChunks(chunks: readonly Uint8Array[], total: number): Uint8Array<ArrayBuffer>;
+export interface BoundedBodyOptions {
+    /** The most bytes the body may hold; a body of exactly `maxBytes` is read, one byte more is not. */
+    maxBytes: number;
+    /** Stops the read; the source is cancelled and the read rejects with `abortError` or the signal's reason. */
+    signal?: AbortSignal;
+    /** The error to throw when the body crosses `maxBytes`; `observedBytes` counts the chunk that crossed it. */
+    limitError: (observedBytes: number) => unknown;
+    /** The error to throw when `signal` aborts; the signal's reason when omitted. */
+    abortError?: (reason: unknown) => unknown;
+}
+/**
+ * The whole body as bytes, never reading past `maxBytes` plus one chunk. A `null` body is an empty
+ * result. The source is cancelled when the limit is crossed and when the signal aborts, and the
+ * caller picks both errors, so a limit and a cancellation stay different outcomes.
+ */
+export declare function readBoundedBody(source: StreamByteSource | null, options: BoundedBodyOptions): Promise<Uint8Array<ArrayBuffer>>;
+//# sourceMappingURL=bounded-body.d.ts.map

package/dist/internal/bounded-body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-body.d.ts","sourceRoot":"","sources":["../../src/internal/bounded-body.ts"],"names":[],"mappings":"AACA,OAAO,EAAY,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAGlE,yEAAyE;AACzE,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AACtF,+EAA+E;GAC7E;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;CAChD;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,gBAAgB,GAAG,IAAI,EAC/B,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,mBAAmB,CAAC,CAiB9B;AAED,yDAAyD;AACzD,wBAAgB,YAAY,CAC1B,MAAM,EAAE,SAAS,UAAU,EAAE,EAC7B,KAAK,EAAE,MAAM,GACZ,UAAU,CAAC,WAAW,CAAC,CAQzB;AAED,MAAM,WAAW,kBAAkB;IACjC,oGAAoG;IACpG,QAAQ,EAAE,MAAM,CAAC;IACjB,6GAA6G;IAC7G,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,6GAA6G;IAC7G,UAAU,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC;IAC/C,iFAAiF;IACjF,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC;CAC3C;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,gBAAgB,GAAG,IAAI,EAC/B,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAYlC"}

package/dist/internal/bounded-lines.d.ts

@@ -1,3 +1,4 @@
+import { type StreamByteSource } from './stream-chunks.js';
 export declare const DEFAULT_STREAM_LINE_BYTES: number;
 /**
  * A line grew past its byte limit. The reader throws as soon as the retained bytes cross the
@@ -24,8 +25,6 @@ export declare class StreamTruncatedLineError extends SyntaxError {
     /** Bytes of the unterminated final line. */
     lineBytes: number);
 }
-/** Bytes a line reader accepts: a `Response` body, a web stream, or any async byte iterable. */
-export type StreamByteSource = Response | ReadableStream<Uint8Array> | AsyncIterable<Uint8Array>;
 /**
  * Push-driven bounded line splitter for sources that deliver bytes through a callback, such as
  * a `Bun.listen`/`Bun.connect` socket's `data` handler. Lines are split on `\n` in bytes and

package/dist/internal/bounded-lines.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bounded-lines.d.ts","sourceRoot":"","sources":["../../src/internal/bounded-lines.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,yBAAyB,QAAc,CAAC;AAErD;;;GAGG;AACH,qBAAa,oBAAqB,SAAQ,UAAU;IAGhD,qCAAqC;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM;IAC3B,yFAAyF;IACzF,QAAQ,CAAC,SAAS,EAAE,MAAM;IAL5B,SAAkB,IAAI,0BAA0B;IAChD;IACE,qCAAqC;IAC5B,UAAU,EAAE,MAAM;IAC3B,yFAAyF;IAChF,SAAS,EAAE,MAAM,EAG3B;CACF;AAED,iGAAiG;AACjG,qBAAa,wBAAyB,SAAQ,WAAW;IAGrD,4CAA4C;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM;IAH5B,SAAkB,IAAI,8BAA8B;IACpD;IACE,4CAA4C;IACnC,SAAS,EAAE,MAAM,EAG3B;CACF;AAED,gGAAgG;AAChG,MAAM,MAAM,gBAAgB,GACxB,QAAQ,GACR,cAAc,CAAC,UAAU,CAAC,GAC1B,aAAa,CAAC,UAAU,CAAC,CAAC;AAE9B;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,0EAA0E;IAC1E,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,EAAE,CAAC;IAClC;;;OAGG;IACH,GAAG,IAAI,MAAM,EAAE,CAAC;CACjB;AAiFD,wBAAgB,wBAAwB,CACtC,YAAY,CAAC,EAAE,MAAM,EACrB,mBAAmB,UAAQ,GAC1B,kBAAkB,CAGpB;AAkDD,6EAA6E;AAC7E,wBAAuB,oBAAoB,CACzC,MAAM,EAAE,gBAAgB,EACxB,YAAY,CAAC,EAAE,MAAM,EACrB,mBAAmB,UAAQ,EAC3B,MAAM,CAAC,EAAE,WAAW,GACnB,cAAc,CAAC,MAAM,CAAC,CAcxB"}
+{"version":3,"file":"bounded-lines.d.ts","sourceRoot":"","sources":["../../src/internal/bounded-lines.ts"],"names":[],"mappings":"AACA,OAAO,EAAY,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAElE,eAAO,MAAM,yBAAyB,QAAc,CAAC;AAErD;;;GAGG;AACH,qBAAa,oBAAqB,SAAQ,UAAU;IAGhD,qCAAqC;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM;IAC3B,yFAAyF;IACzF,QAAQ,CAAC,SAAS,EAAE,MAAM;IAL5B,SAAkB,IAAI,0BAA0B;IAChD;IACE,qCAAqC;IAC5B,UAAU,EAAE,MAAM;IAC3B,yFAAyF;IAChF,SAAS,EAAE,MAAM,EAG3B;CACF;AAED,iGAAiG;AACjG,qBAAa,wBAAyB,SAAQ,WAAW;IAGrD,4CAA4C;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM;IAH5B,SAAkB,IAAI,8BAA8B;IACpD;IACE,4CAA4C;IACnC,SAAS,EAAE,MAAM,EAG3B;CACF;AAED;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,0EAA0E;IAC1E,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,EAAE,CAAC;IAClC;;;OAGG;IACH,GAAG,IAAI,MAAM,EAAE,CAAC;CACjB;AAiFD,wBAAgB,wBAAwB,CACtC,YAAY,CAAC,EAAE,MAAM,EACrB,mBAAmB,UAAQ,GAC1B,kBAAkB,CAGpB;AAED,6EAA6E;AAC7E,wBAAuB,oBAAoB,CACzC,MAAM,EAAE,gBAAgB,EACxB,YAAY,CAAC,EAAE,MAAM,EACrB,mBAAmB,UAAQ,EAC3B,MAAM,CAAC,EAAE,WAAW,GACnB,cAAc,CAAC,MAAM,CAAC,CAcxB"}

package/dist/internal/secure-fetch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secure-fetch.d.ts","sourceRoot":"","sources":["../../src/internal/secure-fetch.ts"],"names":[],"mappings":"AAkEA,iFAAiF;AACjF,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CA8D/C;AAED;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAEnF;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,wBAAsB,YAAY,CAChC,KAAK,EAAE,GAAG,EACV,YAAY,EAAE,OAAO,EACrB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,QAAQ,CAAC,CAiDnB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,6DAA6D;IAC7D,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,UAAU,CAAC;IACjB,GAAG,EAAE,GAAG,CAAC;CACV;AAED;;;;;;;;GAQG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,2BAA2B;CACzC;AA8CD;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,GAAG,EACV,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,sBAAsB,CAAC,CAkFjC;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAoBnF"}
+{"version":3,"file":"secure-fetch.d.ts","sourceRoot":"","sources":["../../src/internal/secure-fetch.ts"],"names":[],"mappings":"AAmEA,iFAAiF;AACjF,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CA8D/C;AAED;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAEnF;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,wBAAsB,YAAY,CAChC,KAAK,EAAE,GAAG,EACV,YAAY,EAAE,OAAO,EACrB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,QAAQ,CAAC,CAiDnB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,6DAA6D;IAC7D,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,UAAU,CAAC;IACjB,GAAG,EAAE,GAAG,CAAC;CACV;AAED;;;;;;;;GAQG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,2BAA2B;CACzC;AA8CD;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,GAAG,EACV,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,sBAAsB,CAAC,CAkFjC;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAGnF"}

package/dist/internal/stream-chunks.d.ts

@@ -0,0 +1,13 @@
+/** Bytes a stream reader accepts: a `Response` body, a web stream, or any async byte iterable. */
+export type StreamByteSource = Response | ReadableStream<Uint8Array> | AsyncIterable<Uint8Array>;
+/**
+ * Every chunk of a byte source: the chunk loop the line readers and the bounded body readers
+ * share. The source is cancelled or returned on every exit path.
+ *
+ * An abort ends the loop with the signal's reason even while a read is pending: the pending read
+ * is cancelled but not waited for, because a transport stream may leave it pending for good. For
+ * the same reason a lock is not released after an abort — releasing it under a pending read throws
+ * on some runtimes — and the cancellation is not awaited.
+ */
+export declare function chunksOf(source: StreamByteSource, signal?: AbortSignal): AsyncGenerator<Uint8Array>;
+//# sourceMappingURL=stream-chunks.d.ts.map

package/dist/internal/stream-chunks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-chunks.d.ts","sourceRoot":"","sources":["../../src/internal/stream-chunks.ts"],"names":[],"mappings":"AAEA,kGAAkG;AAClG,MAAM,MAAM,gBAAgB,GACxB,QAAQ,GACR,cAAc,CAAC,UAAU,CAAC,GAC1B,aAAa,CAAC,UAAU,CAAC,CAAC;AAE9B;;;;;;;;GAQG;AACH,wBAAuB,QAAQ,CAC7B,MAAM,EAAE,gBAAgB,EACxB,MAAM,CAAC,EAAE,WAAW,GACnB,cAAc,CAAC,UAAU,CAAC,CA+C5B"}

package/dist/internal/upgrade-affects.d.ts

@@ -48,6 +48,11 @@ export declare class UpgradeAffectsError extends Error {
  * it, and the next unindented line closes it.
  */
 export declare function breakingItems(section: string): UpgradeBreakingItemText[];
+/**
+ * The items of every `### Fixed` section of a release body; a release may hold more than one.
+ * A section ends at the next `### ` heading outside a fence.
+ */
+export declare function fixedSectionItems(releaseBody: string): UpgradeBreakingItemText[];
 /**
  * The text after `**Affects:**` in an item, or undefined when it declares none.
  * An item carries at most one such line; a second is refused, never dropped.

package/dist/internal/upgrade-affects.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upgrade-affects.d.ts","sourceRoot":"","sources":["../../src/internal/upgrade-affects.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,sEAAsE;AACtE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,yFAAyF;IACzF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,2EAA2E;AAC3E,MAAM,MAAM,oBAAoB,GAC5B;IACE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,qBAAqB,EAAE,CAAC;CACpD,GACD;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GAC3D;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;CAAE,CAAC;AAEjE,gFAAgF;AAChF,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAOD,yEAAyE;AACzE,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,SAAkB,IAAI,yBAAyB;CAChD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,uBAAuB,EAAE,CA6BxE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAiBtE;AAyDD,+FAA+F;AAC/F,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,EAAE,CAGrE"}
+{"version":3,"file":"upgrade-affects.d.ts","sourceRoot":"","sources":["../../src/internal/upgrade-affects.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,sEAAsE;AACtE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,yFAAyF;IACzF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,2EAA2E;AAC3E,MAAM,MAAM,oBAAoB,GAC5B;IACE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,qBAAqB,EAAE,CAAC;CACpD,GACD;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GAC3D;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;CAAE,CAAC;AAEjE,gFAAgF;AAChF,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAOD,yEAAyE;AACzE,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,SAAkB,IAAI,yBAAyB;CAChD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,uBAAuB,EAAE,CA6BxE;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,uBAAuB,EAAE,CAmBhF;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAiBtE;AAyDD,+FAA+F;AAC/F,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,EAAE,CAGrE"}

package/dist/internal/upgrade-plan.d.ts

@@ -8,8 +8,8 @@
  * range by whoever cut the release.
  */
 import { type UpgradeAffectsTarget } from './upgrade-affects.js';
-/** One breaking item of a release, with its machine line when it declares one. */
-export interface UpgradeBreakingItem {
+/** One `- ` item of a release section, with its machine line when it declares one. */
+export interface UpgradeItem {
     version: string;
     /** The backticked entrypoints the item leads with. */
     entrypoints: string[];
@@ -17,9 +17,12 @@ export interface UpgradeBreakingItem {
     title: string;
     /** What the item touches; `undefined` for an item written before the `**Affects:**` line. */
     affects: UpgradeAffectsTarget[] | undefined;
+    markdown: string;
+}
+/** One breaking item of a release. */
+export interface UpgradeBreakingItem extends UpgradeItem {
     /** The item's own `**Who must act:**`, or its section's. */
     whoMustAct: string;
-    markdown: string;
 }
 export interface UpgradeBreakingChange {
     version: string;
@@ -32,7 +35,19 @@ export interface UpgradeBreakingChange {
  * read it through this one expression, so a heading one accepts is a heading the other finds.
  */
 export declare const BREAKING_HEADING: RegExp;
+/** The backticked `stitchkit` (or `stitchkit-…` package) entrypoints an item leads with, in order. */
+export declare function leadingEntrypoints(item: string, accept?: (entrypoint: string) => boolean): string[];
 /** Extract every breaking section crossed by an exact `from` (exclusive) → `to` (inclusive) upgrade. */
 export declare function planUpgrade(changelog: string, from: string, to: string): UpgradeBreakingChange[];
+/** The items of every `### Fixed` section of a release body. */
+export declare function fixedItems(version: string, body: string): UpgradeItem[];
+/** The fixes of an exact `from` (exclusive) → `to` (inclusive) upgrade, oldest first. */
+export interface UpgradeFixes {
+    /** Fixes that name what they touch. */
+    declared: UpgradeItem[];
+    /** Fixes of the range that carry no machine line, before the rule that asks for one. */
+    withoutAffects: number;
+}
+export declare function planFixes(changelog: string, from: string, to: string): UpgradeFixes;
 export declare function renderUpgradePlan(changes: readonly UpgradeBreakingChange[], from: string, to: string): string;
 //# sourceMappingURL=upgrade-plan.d.ts.map

package/dist/internal/upgrade-plan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upgrade-plan.d.ts","sourceRoot":"","sources":["../../src/internal/upgrade-plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAIL,KAAK,oBAAoB,EAC1B,MAAM,mBAAmB,CAAC;AAE3B,kFAAkF;AAClF,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,6FAA6F;IAC7F,OAAO,EAAE,oBAAoB,EAAE,GAAG,SAAS,CAAC;IAC5C,4DAA4D;IAC5D,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,mBAAmB,EAAE,CAAC;CAC9B;AAED;;;GAGG;AACH,eAAO,MAAM,gBAAgB,QAA2C,CAAC;AA2EzE,wGAAwG;AACxG,wBAAgB,WAAW,CACzB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,GACT,qBAAqB,EAAE,CAgCzB;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,SAAS,qBAAqB,EAAE,EACzC,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,GACT,MAAM,CASR"}
+{"version":3,"file":"upgrade-plan.d.ts","sourceRoot":"","sources":["../../src/internal/upgrade-plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAKL,KAAK,oBAAoB,EAC1B,MAAM,mBAAmB,CAAC;AAE3B,sFAAsF;AACtF,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,6FAA6F;IAC7F,OAAO,EAAE,oBAAoB,EAAE,GAAG,SAAS,CAAC;IAC5C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,sCAAsC;AACtC,MAAM,WAAW,mBAAoB,SAAQ,WAAW;IACtD,4DAA4D;IAC5D,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,mBAAmB,EAAE,CAAC;CAC9B;AAED;;;GAGG;AACH,eAAO,MAAM,gBAAgB,QAA2C,CAAC;AAIzE,sGAAsG;AACtG,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,MAAM,GAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAoB,GACnD,MAAM,EAAE,CAcV;AA0GD,wGAAwG;AACxG,wBAAgB,WAAW,CACzB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,GACT,qBAAqB,EAAE,CAmBzB;AAED,gEAAgE;AAChE,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE,CAEvE;AAED,yFAAyF;AACzF,MAAM,WAAW,YAAY;IAC3B,uCAAuC;IACvC,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,wFAAwF;IACxF,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,YAAY,CASnF;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,SAAS,qBAAqB,EAAE,EACzC,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,GACT,MAAM,CASR"}

package/dist/internal/upgrade-usage.d.ts

@@ -12,7 +12,7 @@
  * quote or a comment marker can hide what follows it.
  */
 import type { UpgradeAffectsTarget } from './upgrade-affects.js';
-import type { UpgradeBreakingItem } from './upgrade-plan.js';
+import type { UpgradeBreakingItem, UpgradeItem } from './upgrade-plan.js';
 /** One project file, by a path relative to the project root. */
 export interface ProjectSource {
     readonly path: string;
@@ -37,22 +37,38 @@ export type UpgradeVerdict = {
     readonly kind: 'not-declared';
     readonly files: readonly string[];
 };
-export interface UpgradeItemVerdict {
-    readonly item: UpgradeBreakingItem;
+export interface UpgradeItemVerdict<TItem extends UpgradeItem = UpgradeBreakingItem> {
+    readonly item: TItem;
     readonly verdict: UpgradeVerdict;
 }
 /** Every name the given sources import from a `stitchkit` entrypoint. */
 export declare function scanStitchkitImports(sources: readonly ProjectSource[]): StitchkitImport[];
 /** One verdict per item, in plan order. */
-export declare function upgradeVerdicts(items: readonly UpgradeBreakingItem[], imports: readonly StitchkitImport[]): UpgradeItemVerdict[];
+export declare function upgradeVerdicts<TItem extends UpgradeItem>(items: readonly TItem[], imports: readonly StitchkitImport[]): UpgradeItemVerdict<TItem>[];
 /** The verdicts as the Markdown section `stitchkit upgrade` prints after the plan. */
 export declare function renderUpgradeVerdicts(verdicts: readonly UpgradeItemVerdict[]): string;
+/**
+ * The fixes of the range as the Markdown section `stitchkit upgrade` prints after the breaking
+ * verdicts. A fix of an earlier release carries no machine line and is only counted.
+ */
+export declare function renderUpgradeFixes(verdicts: readonly UpgradeItemVerdict<UpgradeItem>[], withoutAffects: number): string;
 /** The verdicts as the `--json` document's items. */
 export declare function upgradeVerdictsJson(verdicts: readonly UpgradeItemVerdict[]): {
     version: string;
     entrypoints: string[];
     title: string;
-    whoMustAct: string;
+    whoMustAct?: string | undefined;
+    affects: UpgradeAffectsTarget[] | null;
+    verdict: "affects" | "behavioural" | "not-declared" | "not-used";
+    uses?: readonly StitchkitImport[] | undefined;
+    files?: readonly string[] | undefined;
+}[];
+/** The fix verdicts as the `--json` document's `fixes`. */
+export declare function upgradeFixesJson(verdicts: readonly UpgradeItemVerdict<UpgradeItem>[]): {
+    version: string;
+    entrypoints: string[];
+    title: string;
+    whoMustAct?: string | undefined;
     affects: UpgradeAffectsTarget[] | null;
     verdict: "affects" | "behavioural" | "not-declared" | "not-used";
     uses?: readonly StitchkitImport[] | undefined;

package/dist/internal/upgrade-usage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upgrade-usage.d.ts","sourceRoot":"","sources":["../../src/internal/upgrade-usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,gEAAgE;AAChE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,0GAA0G;AAC1G,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,eAAe,EAAE,CAAA;CAAE,GACvE;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACnE;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAEzE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;CAClC;AAsHD,yEAAyE;AACzE,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,GAAG,eAAe,EAAE,CA+BzF;AAyBD,2CAA2C;AAC3C,wBAAgB,eAAe,CAC7B,KAAK,EAAE,SAAS,mBAAmB,EAAE,EACrC,OAAO,EAAE,SAAS,eAAe,EAAE,GAClC,kBAAkB,EAAE,CAiBtB;AASD,sFAAsF;AACtF,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,GAAG,MAAM,CAoBrF;AAED,qDAAqD;AACrD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,SAAS,kBAAkB,EAAE;;;;;;;;;IAa1E"}
+{"version":3,"file":"upgrade-usage.d.ts","sourceRoot":"","sources":["../../src/internal/upgrade-usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAEvE,gEAAgE;AAChE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,0GAA0G;AAC1G,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,eAAe,EAAE,CAAA;CAAE,GACvE;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACnE;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAEzE,MAAM,WAAW,kBAAkB,CAAC,KAAK,SAAS,WAAW,GAAG,mBAAmB;IACjF,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;CAClC;AAsHD,yEAAyE;AACzE,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,GAAG,eAAe,EAAE,CA+BzF;AAyBD,2CAA2C;AAC3C,wBAAgB,eAAe,CAAC,KAAK,SAAS,WAAW,EACvD,KAAK,EAAE,SAAS,KAAK,EAAE,EACvB,OAAO,EAAE,SAAS,eAAe,EAAE,GAClC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAiB7B;AA8BD,sFAAsF;AACtF,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,GAAG,MAAM,CAGrF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,SAAS,kBAAkB,CAAC,WAAW,CAAC,EAAE,EACpD,cAAc,EAAE,MAAM,GACrB,MAAM,CAWR;AAED,qDAAqD;AACrD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,SAAS,kBAAkB,EAAE;;;;;;;;;IAE1E;AAED,2DAA2D;AAC3D,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,SAAS,kBAAkB,CAAC,WAAW,CAAC,EAAE;;;;;;;;;IAEpF"}

package/dist/observability/audit.d.ts

@@ -42,6 +42,12 @@ export interface SinkDrop {
 export interface RequestObservabilityConfig extends RequestEventSinkConfig {
     /** Clone and record JSON request bodies. Default false. */
     includePayload?: boolean;
+    /**
+     * The most bytes of a request body the audit row reads, a positive safe integer. A larger body
+     * is cancelled at the limit and the row carries `payloadTruncated: true`. Default: the
+     * handler's `maxJsonBodyBytes`, or 1 MiB when that is unset.
+     */
+    payloadMaxBytes?: number;
     /** Emit client-closed HTTP requests as `outcome: 'cancelled'`. Default false. */
     includeCancelled?: boolean;
 }
@@ -59,12 +65,16 @@ export interface HttpRequestCompletion {
     statusCode?: number;
     durationMs: number;
     payload?: Promise<unknown>;
+    /** Settles `true` when the body was larger than the audit limit and `payload` is empty for that reason. */
+    payloadTruncated?: Promise<boolean>;
     /** Framework-owned neutral cancellation; currently paired with HTTP 499. */
     outcome?: 'cancelled';
 }
 /** Server-facing request projection returned by `createObservability`. */
 export interface HttpRequestObserver {
     includePayload: boolean;
+    /** The configured audit body limit; `undefined` follows the handler's `maxJsonBodyBytes`. */
+    payloadMaxBytes?: number | undefined;
     complete(completion: HttpRequestCompletion): void;
 }
 /** What `createObservability` returns — one wiring point per enabled surface. */

package/dist/observability/audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/observability/audit.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAElE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAE5D,OAAO,EAIL,KAAK,uBAAuB,EAE7B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,KAAK,kBAAkB,EAEvB,KAAK,cAAc,EAEpB,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAe,KAAK,eAAe,EAAmB,MAAM,YAAY,CAAC;AAChF,OAAO,EAEL,KAAK,wBAAwB,EAG7B,KAAK,mBAAmB,EAEzB,MAAM,UAAU,CAAC;AAGlB,kEAAkE;AAClE,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,KAAK,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,iFAAiF;IACjF,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC;IAC1C,yEAAyE;IACzE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,SAAS,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,8DAA8D;IAC9D,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AAED,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEnD,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,cAAc,CAAC;IACvB,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,0BAA2B,SAAQ,sBAAsB;IACxE,2DAA2D;IAC3D,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,iFAAiF;IACjF,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,0BAA0B,CAAC;IACrC,KAAK,CAAC,EAAE,sBAAsB,CAAC;CAChC;AAED,gEAAgE;AAChE,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,cAAc,CAAC;IACxB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3B,4EAA4E;IAC5E,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAED,0EAA0E;AAC1E,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,qBAAqB,GAAG,IAAI,CAAC;CACnD;AAED,iFAAiF;AACjF,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,QAAQ,EAAE,aAAa,CAAC;IACxB;;;;;;;;OAQG;IACH,KAAK,CAAC,KAAK,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,2EAA2E;IAC3E,SAAS,IAAI,mBAAmB,CAAC;IACjC;;;;;;OAMG;IACH,KAAK,CAAC,KAAK,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;CAC3E;AAED,YAAY,EAAE,uBAAuB,EAAE,CAAC;AAExC,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;AAE/E,8EAA8E;AAC9E,MAAM,WAAW,yBAAyB,CAAC,QAAQ,SAAS,cAAc,EAAE,OAAO;IACjF,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,KAAK,mBAAmB,CAAC;IACtE,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,KAAK,mBAAmB,CAAC;IACtF,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,SAAS,KAAK,mBAAmB,CAAC;IACrF,kEAAkE;IAClE,SAAS,CAAC,EAAE,kBAAkB,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB,CAAC,QAAQ,SAAS,cAAc,EAAE,OAAO;IAC3E,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,GAAG,IAAI,CAAC;IAClD,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,GAAG,OAAO,CAAC;IACrE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;CAClE;AAgBD;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,SAAS,cAAc,GAAG,cAAc,EAChD,OAAO,GAAG,OAAO,EAEjB,MAAM,EAAE,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,GACnD,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAcxC;AA2ED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,GAAG,aAAa,CAgM9E"}
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/observability/audit.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAGlE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAE5D,OAAO,EAIL,KAAK,uBAAuB,EAE7B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,KAAK,kBAAkB,EAEvB,KAAK,cAAc,EAEpB,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAe,KAAK,eAAe,EAAmB,MAAM,YAAY,CAAC;AAChF,OAAO,EAEL,KAAK,wBAAwB,EAG7B,KAAK,mBAAmB,EAEzB,MAAM,UAAU,CAAC;AAGlB,kEAAkE;AAClE,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,KAAK,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,iFAAiF;IACjF,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC;IAC1C,yEAAyE;IACzE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,SAAS,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,8DAA8D;IAC9D,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AAED,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEnD,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,cAAc,CAAC;IACvB,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,0BAA2B,SAAQ,sBAAsB;IACxE,2DAA2D;IAC3D,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iFAAiF;IACjF,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,0BAA0B,CAAC;IACrC,KAAK,CAAC,EAAE,sBAAsB,CAAC;CAChC;AAED,gEAAgE;AAChE,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,cAAc,CAAC;IACxB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3B,2GAA2G;IAC3G,gBAAgB,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACpC,4EAA4E;IAC5E,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAED,0EAA0E;AAC1E,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,OAAO,CAAC;IACxB,6FAA6F;IAC7F,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,qBAAqB,GAAG,IAAI,CAAC;CACnD;AAED,iFAAiF;AACjF,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,QAAQ,EAAE,aAAa,CAAC;IACxB;;;;;;;;OAQG;IACH,KAAK,CAAC,KAAK,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,2EAA2E;IAC3E,SAAS,IAAI,mBAAmB,CAAC;IACjC;;;;;;OAMG;IACH,KAAK,CAAC,KAAK,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;CAC3E;AAED,YAAY,EAAE,uBAAuB,EAAE,CAAC;AAExC,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;AAE/E,8EAA8E;AAC9E,MAAM,WAAW,yBAAyB,CAAC,QAAQ,SAAS,cAAc,EAAE,OAAO;IACjF,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,KAAK,mBAAmB,CAAC;IACtE,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,KAAK,mBAAmB,CAAC;IACtF,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,SAAS,KAAK,mBAAmB,CAAC;IACrF,kEAAkE;IAClE,SAAS,CAAC,EAAE,kBAAkB,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB,CAAC,QAAQ,SAAS,cAAc,EAAE,OAAO;IAC3E,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,GAAG,IAAI,CAAC;IAClD,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,GAAG,OAAO,CAAC;IACrE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;CAClE;AAgBD;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,SAAS,cAAc,GAAG,cAAc,EAChD,OAAO,GAAG,OAAO,EAEjB,MAAM,EAAE,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,GACnD,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAcxC;AAwFD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,GAAG,aAAa,CAqM9E"}

package/dist/observability/event.d.ts

@@ -99,6 +99,11 @@ export interface RequestEvent {
     errorDetail?: JsonValue;
     /** Sanitised request payload — the HTTP body or the tool arguments. */
     payload: JsonValue | null;
+    /**
+     * Set when an HTTP body was larger than the request sink's `payloadMaxBytes`: `payload` is
+     * `null` for that reason, not because there was no body.
+     */
+    payloadTruncated?: true;
     /** Item count of the result, when it is a list. */
     resultSize: number | null;
     /** Serialised byte length of the result. */