stitchkit 0.110.6 → 0.111.1

package/dist/entrypoints/node.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../src/entrypoints/node.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,SAAS,EACT,KAAK,qBAAqB,EAC1B,KAAK,WAAW,GACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,6BAA6B,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,4BAA4B,EACjC,KAAK,sBAAsB,GAC5B,MAAM,8BAA8B,CAAC;AACtC,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,SAAS,GACV,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,YAAY,GAClB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,qBAAqB,EACrB,KAAK,cAAc,EACnB,oBAAoB,EACpB,KAAK,aAAa,EAClB,mBAAmB,EACnB,KAAK,cAAc,EACnB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,wBAAwB,IAAI,oBAAoB,EAChD,KAAK,wBAAwB,IAAI,oBAAoB,EACrD,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,GAC1B,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,aAAa,EACb,UAAU,EACV,QAAQ,EACR,eAAe,EACf,aAAa,EACb,cAAc,EACd,UAAU,GACX,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,yBAAyB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,wBAAwB,EACxB,KAAK,4BAA4B,EACjC,KAAK,oBAAoB,GAC1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,WAAW,EACX,YAAY,GACb,MAAM,YAAY,CAAC"}
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../src/entrypoints/node.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,SAAS,EACT,KAAK,qBAAqB,EAC1B,KAAK,WAAW,GACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,6BAA6B,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,4BAA4B,EACjC,KAAK,sBAAsB,GAC5B,MAAM,8BAA8B,CAAC;AACtC,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,SAAS,GACV,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,YAAY,GAClB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,qBAAqB,EACrB,KAAK,cAAc,EACnB,oBAAoB,EACpB,KAAK,aAAa,EAClB,mBAAmB,EACnB,KAAK,cAAc,EACnB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,wBAAwB,IAAI,oBAAoB,EAChD,KAAK,wBAAwB,IAAI,oBAAoB,EACrD,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,GAC1B,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,aAAa,EACb,UAAU,EACV,QAAQ,EACR,eAAe,EACf,aAAa,EACb,cAAc,EACd,UAAU,GACX,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,yBAAyB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,wBAAwB,EACxB,KAAK,4BAA4B,EACjC,KAAK,oBAAoB,GAC1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,WAAW,EACX,YAAY,GACb,MAAM,YAAY,CAAC"}

package/dist/entrypoints/node.js

@@ -19,10 +19,11 @@ import {
   implementRegistry2,
   createImplementRegistry2,
   bindProcessSignals2,
+  defineRequestIngress2,
   createSocketIOServer2,
   UnixClientTransportError2,
   createUnixClientTransport2
-} from "../index-s6d8zsha.js";
+} from "../index-2qymcsq2.js";
 import {
   bindRealtimeServer2
 } from "../index-xmgjtkvr.js";
@@ -292,6 +293,7 @@ export {
   createScopedImplementRegistry2 as createScopedImplementRegistry,
   createNodeSocketIOServer as createSocketIOServer,
   createUnixClientTransport2 as createUnixClientTransport,
+  defineRequestIngress2 as defineRequestIngress,
   forbidden2 as forbidden,
   implement2 as implement,
   implementRegistry2 as implementRegistry,

package/dist/entrypoints/observability.js

@@ -10,6 +10,9 @@ import {
   withinBound,
   createBoundedSinkManager
 } from "../index-qaet40b2.js";
+import {
+  assertPositiveSafeInteger
+} from "../index-0s4xebbg.js";
 import {
   redact2,
   truncatePreview2,
@@ -108,7 +111,17 @@ function readMcpContext(value) {
 function createSinkManager(config) {
   return createBoundedSinkManager(config);
 }
+async function settlePayload(payload, payloadTruncated) {
+  if (!payload)
+    return { body: undefined, truncated: false };
+  try {
+    return { body: await payload, truncated: await payloadTruncated ?? false };
+  } catch {
+    return { body: undefined, truncated: false };
+  }
+}
 function createObservability(config) {
+  assertPositiveSafeInteger("request.payloadMaxBytes", config.request?.payloadMaxBytes);
   const requestManager = config.request ? createSinkManager(config.request) : undefined;
   const toolManager = config.tools ? createSinkManager(config.tools) : undefined;
   let closed = false;
@@ -117,7 +130,15 @@ function createObservability(config) {
   let unbounded;
   const request = config.request ? {
     includePayload: config.request.includePayload ?? false,
-    complete: ({ context, statusCode, durationMs, payload, outcome }) => {
+    payloadMaxBytes: config.request.payloadMaxBytes,
+    complete: ({
+      context,
+      statusCode,
+      durationMs,
+      payload,
+      payloadTruncated,
+      outcome
+    }) => {
       const requestConfig = config.request;
       if (!requestConfig)
         return;
@@ -125,14 +146,7 @@ function createObservability(config) {
       if (cancelled && !requestConfig.includeCancelled)
         return;
       requestManager?.submit(async () => {
-        let body;
-        if (!cancelled && payload) {
-          try {
-            body = await payload;
-          } catch {
-            body = undefined;
-          }
-        }
+        const { body, truncated } = cancelled ? { body: undefined, truncated: false } : await settlePayload(payload, payloadTruncated);
         return {
           source: context.source,
           kind: context.kind ?? "request",
@@ -161,6 +175,7 @@ function createObservability(config) {
             }
           },
           payload: cancelled ? null : sanitizePayload2(body, requestConfig.sanitize),
+          ...truncated && { payloadTruncated: true },
           resultSize: null,
           responseBytes: 0,
           userId: context.userId,

package/dist/entrypoints/remote.js

@@ -4,7 +4,7 @@ import"../index-p6apg0jg.js";
 import {
   endpointHasArguments,
   createClient2
-} from "../index-jk44mbqb.js";
+} from "../index-c5at3ykd.js";
 import {
   ApiError2
 } from "../index-kfjkb396.js";

package/dist/entrypoints/server.d.ts

@@ -28,6 +28,7 @@ export { createRateLimiter, type RateLimitConfig } from '../server/rate-limit.js
 export { errorResponse, parseBody, respondJson } from '../server/raw.js';
 export { bindRealtimeServer, type RealtimeServer, type RealtimeServerConnection, type RealtimeServerHandle, } from '../server/realtime.js';
 export { bindReleaseRefreshSignal, type ReleaseRefreshSignal, type ReleaseRefreshSignalOptions, } from '../server/release-signal.js';
+export { defineRequestIngress, type RequestIngress, type RequestIngressSource, } from '../server/request-ingress.js';
 export { type ManagedServerHandle, type ShutdownOptions, ShutdownOptionsSchema, type ShutdownResult, ShutdownResultSchema, type ShutdownState, ShutdownStateSchema, type ShutdownStatus, ShutdownStatusSchema, } from '../server/shutdown.js';
 export type { SocketIOHandshakeConfig, SocketIOPeerLoaders, SocketIORequestPolicy, SocketIOServerConfig, SocketIOServerHandle, SocketIOServerLifecycle, } from '../server/socket-io.js';
 export { createSocketIOServer, socketIoLane } from '../server/socket-io.js';

package/dist/entrypoints/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/entrypoints/server.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,KAAK,qBAAqB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC9F,OAAO,EACL,KAAK,eAAe,EACpB,SAAS,EACT,eAAe,EACf,aAAa,EACb,UAAU,EACV,eAAe,EACf,cAAc,GACf,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAIrD,OAAO,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACzF,OAAO,EACL,KAAK,oBAAoB,EACzB,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,mBAAmB,IAAI,gBAAgB,EAC5C,KAAK,eAAe,IAAI,YAAY,EACpC,KAAK,gBAAgB,IAAI,aAAa,EACtC,KAAK,WAAW,IAAI,QAAQ,EAC5B,KAAK,kBAAkB,IAAI,eAAe,EAC1C,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,KAAK,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACL,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,aAAa,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,cAAc,EACd,KAAK,eAAe,EACpB,KAAK,QAAQ,EACb,KAAK,eAAe,EACpB,KAAK,YAAY,GAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,KAAK,SAAS,EACd,cAAc,EACd,KAAK,gBAAgB,EACrB,SAAS,EACT,WAAW,EACX,QAAQ,GACT,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,KAAK,gBAAgB,EACrB,SAAS,EACT,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,GACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,6BAA6B,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,4BAA4B,EACjC,KAAK,sBAAsB,GAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,oBAAoB,EACzB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,GACpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,KAAK,SAAS,EACd,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,eAAe,GAChB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,KAAK,UAAU,EACf,WAAW,EACX,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,OAAO,EACP,KAAK,gBAAgB,EACrB,SAAS,GACV,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,KAAK,UAAU,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAC7F,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,KAAK,kBAAkB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,cAAc,GACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,YAAY,GACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,YAAY,GAClB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EACL,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,wBAAwB,EACxB,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,GACjC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,qBAAqB,EACrB,KAAK,cAAc,EACnB,oBAAoB,EACpB,KAAK,aAAa,EAClB,mBAAmB,EACnB,KAAK,cAAc,EACnB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,uBAAuB,EACvB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EACL,2BAA2B,EAC3B,WAAW,EACX,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,QAAQ,EACR,cAAc,GACf,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,oBAAoB,EACpB,cAAc,EACd,sBAAsB,EACtB,QAAQ,EACR,cAAc,EACd,aAAa,EACb,UAAU,EACV,SAAS,EACT,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,EACjB,UAAU,EACV,eAAe,EACf,aAAa,EACb,cAAc,EACd,UAAU,EACV,YAAY,EACZ,gCAAgC,GACjC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,yBAAyB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,wBAAwB,EACxB,KAAK,4BAA4B,EACjC,KAAK,oBAAoB,GAC1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,YAAY,EACjB,wBAAwB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,SAAS,EACT,iBAAiB,EACjB,QAAQ,EACR,WAAW,EACX,mBAAmB,EACnB,KAAK,eAAe,EACpB,YAAY,GACb,MAAM,YAAY,CAAC"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/entrypoints/server.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,KAAK,qBAAqB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC9F,OAAO,EACL,KAAK,eAAe,EACpB,SAAS,EACT,eAAe,EACf,aAAa,EACb,UAAU,EACV,eAAe,EACf,cAAc,GACf,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAIrD,OAAO,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACzF,OAAO,EACL,KAAK,oBAAoB,EACzB,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,mBAAmB,IAAI,gBAAgB,EAC5C,KAAK,eAAe,IAAI,YAAY,EACpC,KAAK,gBAAgB,IAAI,aAAa,EACtC,KAAK,WAAW,IAAI,QAAQ,EAC5B,KAAK,kBAAkB,IAAI,eAAe,EAC1C,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,KAAK,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACL,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,aAAa,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,cAAc,EACd,KAAK,eAAe,EACpB,KAAK,QAAQ,EACb,KAAK,eAAe,EACpB,KAAK,YAAY,GAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,KAAK,SAAS,EACd,cAAc,EACd,KAAK,gBAAgB,EACrB,SAAS,EACT,WAAW,EACX,QAAQ,GACT,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,KAAK,gBAAgB,EACrB,SAAS,EACT,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,GACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,6BAA6B,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,4BAA4B,EACjC,KAAK,sBAAsB,GAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,oBAAoB,EACzB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,GACpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,KAAK,SAAS,EACd,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,eAAe,GAChB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,KAAK,UAAU,EACf,WAAW,EACX,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,OAAO,EACP,KAAK,gBAAgB,EACrB,SAAS,GACV,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,KAAK,UAAU,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAC7F,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,KAAK,kBAAkB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,cAAc,GACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,YAAY,GACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,YAAY,GAClB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EACL,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,wBAAwB,EACxB,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,GACjC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,qBAAqB,EACrB,KAAK,cAAc,EACnB,oBAAoB,EACpB,KAAK,aAAa,EAClB,mBAAmB,EACnB,KAAK,cAAc,EACnB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,uBAAuB,EACvB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EACL,2BAA2B,EAC3B,WAAW,EACX,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,QAAQ,EACR,cAAc,GACf,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,oBAAoB,EACpB,cAAc,EACd,sBAAsB,EACtB,QAAQ,EACR,cAAc,EACd,aAAa,EACb,UAAU,EACV,SAAS,EACT,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,EACjB,UAAU,EACV,eAAe,EACf,aAAa,EACb,cAAc,EACd,UAAU,EACV,YAAY,EACZ,gCAAgC,GACjC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,yBAAyB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,wBAAwB,EACxB,KAAK,4BAA4B,EACjC,KAAK,oBAAoB,GAC1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,YAAY,EACjB,wBAAwB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,SAAS,EACT,iBAAiB,EACjB,QAAQ,EACR,WAAW,EACX,mBAAmB,EACnB,KAAK,eAAe,EACpB,YAAY,GACb,MAAM,YAAY,CAAC"}

package/dist/entrypoints/server.js

@@ -42,13 +42,14 @@ import {
   implementRegistry2,
   createImplementRegistry2,
   bindProcessSignals2,
+  defineRequestIngress2,
   webSocketLane2,
   composeWebSocketHandlers2,
   createSocketIOServer2,
   socketIoLane2,
   UnixClientTransportError2,
   createUnixClientTransport2
-} from "../index-s6d8zsha.js";
+} from "../index-2qymcsq2.js";
 import {
   createFileStateStore2
 } from "../index-nx49x0tw.js";
@@ -82,6 +83,13 @@ import {
   realPathWithinDir
 } from "../index-5cc6r990.js";
 import"../index-1bx1xv1k.js";
+import {
+  readBoundedChunks,
+  concatChunks
+} from "../index-5efrpfmj.js";
+import {
+  assertPositiveSafeInteger
+} from "../index-0s4xebbg.js";
 import {
   DEFAULT_CORS_ALLOW_HEADERS2,
   DEFAULT_CORS_EXPOSE_HEADERS2,
@@ -1695,13 +1703,25 @@ function errorResponse2(error) {
     res.headers.set("x-request-id", traceId);
   return res;
 }
-async function parseBody(req, schema) {
-  const raw = await req.json().catch(() => null);
+async function parseBody(req, schema, options = {}) {
+  assertPositiveSafeInteger("maxBytes", options.maxBytes);
+  const raw = await readJson(req, options.maxBytes ?? DEFAULT_PARSE_BODY_BYTES);
   if (raw === null)
     return null;
   const parsed = schema.safeParse(raw);
   return parsed.success ? parsed.data : null;
 }
+var DEFAULT_PARSE_BODY_BYTES = 1024 * 1024;
+async function readJson(req, maxBytes) {
+  try {
+    const result = await readBoundedChunks(req.body, { maxBytes, signal: req.signal });
+    if (result.kind === "over-limit")
+      return null;
+    return JSON.parse(new TextDecoder().decode(concatChunks(result.chunks, result.total)));
+  } catch {
+    return null;
+  }
+}
 // src/server/release-signal.ts
 function bindReleaseRefreshSignal(marker, options = {}) {
   const signal = options.signal ?? "SIGUSR2";
@@ -1807,6 +1827,7 @@ export {
   createUnixClientTransport2 as createUnixClientTransport,
   defineCookie,
   defineMultipartStream2 as defineMultipartStream,
+  defineRequestIngress2 as defineRequestIngress,
   deriveCodeChallenge2 as deriveCodeChallenge,
   errorCode2 as errorCode,
   errorResponse2 as errorResponse,

package/dist/entrypoints/telegram.js

@@ -16,9 +16,6 @@ import {
   TELEGRAM_TEXT_LIMIT2,
   truncateTelegramHtml2
 } from "../index-nmaqxdx7.js";
-import {
-  untilAborted
-} from "../index-a5qr2rj6.js";
 import {
   writeFileAtomic2
 } from "../index-07dcf2yn.js";
@@ -35,6 +32,9 @@ import {
 import {
   BOT_TOKEN_SECRET
 } from "../index-sznqf8fx.js";
+import {
+  untilAborted
+} from "../index-a5qr2rj6.js";
 import {
   isRecord,
   transportResult

package/dist/entrypoints/testing.js

@@ -35,7 +35,7 @@ import"../index-fynr93w4.js";
 import {
   createClient2,
   createClients2
-} from "../index-jk44mbqb.js";
+} from "../index-c5at3ykd.js";
 import {
   assertPositiveSafeInteger
 } from "../index-0s4xebbg.js";

package/dist/entrypoints/tools/connections.js

@@ -13,6 +13,10 @@ import {
 import {
   raceAbort
 } from "../../index-b0kddvzw.js";
+import {
+  readBoundedChunks,
+  concatChunks
+} from "../../index-5efrpfmj.js";
 import {
   MAX_TIMER_MS
 } from "../../index-eemvahkc.js";
@@ -243,40 +247,21 @@ function withConnectionDeadline(connectionName, context, callerSignal, body) {
   });
 }
 async function readBoundedText(response, maxBytes, connectionName, context) {
-  context?.signal?.throwIfAborted();
-  if (!response.body)
-    return "";
-  const reader = response.body.getReader();
-  const decoder = new TextDecoder;
-  let total = 0;
-  let text = "";
-  const cancel = () => void reader.cancel(context?.signal?.reason).catch(() => {
-    return;
-  });
-  context?.signal?.addEventListener("abort", cancel, { once: true });
-  try {
-    for (;; ) {
-      const { done, value } = await awaitConnection(reader.read(), context?.signal);
-      if (done)
-        break;
-      total += value.byteLength;
+  const result = await readBoundedChunks(response.body, {
+    maxBytes,
+    ...context?.signal && { signal: context.signal },
+    onChunk: (chunk) => {
       if (context)
-        context.observedReadBytes += value.byteLength;
-      if (total > maxBytes) {
-        throw new ConnectionResponseTooLargeError(connectionName, maxBytes, {
-          ...context,
-          observedReadBytes: total
-        });
-      }
-      text += decoder.decode(value, { stream: true });
+        context.observedReadBytes += chunk.byteLength;
     }
-    text += decoder.decode();
-    return text;
-  } finally {
-    context?.signal?.removeEventListener("abort", cancel);
-    cancel();
-    reader.releaseLock();
+  });
+  if (result.kind === "over-limit") {
+    throw new ConnectionResponseTooLargeError(connectionName, maxBytes, {
+      ...context,
+      observedReadBytes: result.total
+    });
   }
+  return new TextDecoder().decode(concatChunks(result.chunks, result.total));
 }
 async function readBoundedJson(response, maxBytes, connectionName, context) {
   return JSON.parse(await readBoundedText(response, maxBytes, connectionName, context));

package/dist/entrypoints/tools/mcp.js

@@ -20,7 +20,7 @@ import {
   createMcpHttpRoute2,
   createStdioMcpServer2,
   bindStdioProcessSignals2
-} from "../../index-s2eybn7b.js";
+} from "../../index-c5374vpt.js";
 import"../../index-0d8m0kee.js";
 import"../../index-636mggad.js";
 export {

package/dist/entrypoints/tools.js

@@ -60,7 +60,7 @@ import {
   createMcpHttpRoute2,
   createStdioMcpServer2,
   bindStdioProcessSignals2
-} from "../index-s2eybn7b.js";
+} from "../index-c5374vpt.js";
 import {
   AsyncOperationCancelResultSchema2,
   createAsyncOperationSnapshotSchema2,
@@ -74,7 +74,7 @@ import {
   WaitTimeoutError,
   runWaitOperation,
   createCli2
-} from "../index-n7hrpngg.js";
+} from "../index-v2eyj2ws.js";
 import {
   ManagedFilePathSchema2,
   ManagedFileRefSchema2
@@ -97,8 +97,15 @@ import {
   fetchGuarded,
   fetchPinnedDocument,
   readCapped
-} from "../index-3h0ztg0z.js";
+} from "../index-cxpcdswt.js";
 import"../index-1bx1xv1k.js";
+import {
+  readBoundedChunks,
+  concatChunks
+} from "../index-5efrpfmj.js";
+import {
+  assertPositiveSafeInteger
+} from "../index-0s4xebbg.js";
 import {
   DEFAULT_CORS_ALLOW_HEADERS2
 } from "../index-yk4g8805.js";
@@ -468,10 +475,29 @@ function redirectWith(uri, params) {
     url.searchParams.set(key, value);
   return new Response(null, { status: 302, headers: { Location: url.toString() } });
 }
-async function readForm(req) {
+var DEFAULT_OAUTH_BODY_BYTES = 64 * 1024;
+var tooLarge = () => oauthError("invalid_request", "Request body is too large", 413);
+async function readBodyText(req, config) {
+  const result = await readBoundedChunks(req.body, {
+    maxBytes: config.maxRequestBodyBytes ?? DEFAULT_OAUTH_BODY_BYTES,
+    signal: req.signal
+  });
+  return result.kind === "over-limit" ? undefined : new TextDecoder().decode(concatChunks(result.chunks, result.total));
+}
+function parseJson(text) {
+  try {
+    return JSON.parse(text);
+  } catch {
+    return null;
+  }
+}
+async function readForm(req, config) {
+  const text = await readBodyText(req, config);
+  if (text === undefined)
+    return;
   const contentType = req.headers.get("content-type") ?? "";
   if (contentType.includes("application/json")) {
-    const body = await req.json().catch(() => null);
+    const body = parseJson(text);
     const params = new URLSearchParams;
     if (isRecord(body)) {
       for (const [key, value] of Object.entries(body)) {
@@ -481,7 +507,7 @@ async function readForm(req) {
     }
     return params;
   }
-  return new URLSearchParams(await req.text());
+  return new URLSearchParams(text);
 }
 function metadataRoute(ctx) {
   const { config } = ctx;
@@ -519,7 +545,10 @@ function registerRoute(ctx) {
         return new Response(null, { status: 204, headers: PUBLIC_CORS });
       if (req.method !== "POST")
         return oauthError("invalid_request", "POST required", 405);
-      const meta = await req.json().catch(() => null);
+      const text = await readBodyText(req, config);
+      if (text === undefined)
+        return tooLarge();
+      const meta = parseJson(text);
       if (!isRecord(meta)) {
         return oauthError("invalid_client_metadata", "Body must be a JSON object");
       }
@@ -673,7 +702,9 @@ function tokenRoute(ctx) {
         return new Response(null, { status: 204, headers: PUBLIC_CORS });
       if (req.method !== "POST")
         return oauthError("invalid_request", "POST required", 405);
-      const form = await readForm(req);
+      const form = await readForm(req, config);
+      if (!form)
+        return tooLarge();
       const grantType = form.get("grant_type");
       if (grantType === "authorization_code") {
         const code = form.get("code");
@@ -745,6 +776,7 @@ function tokenRoute(ctx) {
 
 // src/server/oauth/provider.ts
 function mountOAuthProvider(config) {
+  assertPositiveSafeInteger("maxRequestBodyBytes", config.maxRequestBodyBytes);
   const base = config.basePath ?? "/oauth";
   const ttl = config.accessTokenTtlSec ?? 3600;
   const registerPath = `${base}/register`;

package/dist/entrypoints/voice.js

@@ -1,3 +1,7 @@
+import {
+  untilAborted
+} from "../index-a5qr2rj6.js";
+
 // src/voice/phases.ts
 var LIVE_VOICE_PHASES = [
   "opening",
@@ -99,10 +103,7 @@ class SpeechQueue {
   closed = false;
   cancelled = false;
   wake = null;
-  stop;
-  stopped = new Promise((resolve) => {
-    this.stop = resolve;
-  });
+  stopped = new AbortController;
   constructor(options) {
     this.options = options;
     const lookahead = options.lookahead ?? 1;
@@ -146,9 +147,16 @@ class SpeechQueue {
           this.release(outcome.value);
       });
     }
-    this.stop(CANCELLED);
+    this.stopped.abort();
     this.notify();
   }
+  async unlessStopped(pending) {
+    try {
+      return await untilAborted(pending, this.stopped.signal);
+    } catch {
+      return CANCELLED;
+    }
+  }
   notify() {
     this.wake?.();
   }
@@ -179,19 +187,18 @@ class SpeechQueue {
       }
       this.current = slot;
       try {
-        const prepared = await Promise.race([slot.result, this.stopped]);
+        const prepared = await this.unlessStopped(slot.result);
         if (prepared === CANCELLED)
           return;
         if (!prepared.ok) {
           this.report(prepared.error, slot.text);
           continue;
         }
+        if (this.cancelled)
+          return;
         this.playing = true;
         this.fill();
-        const played = await Promise.race([
-          settle(() => this.options.play(prepared.value, slot.controller.signal)),
-          this.stopped
-        ]);
+        const played = await this.unlessStopped(settle(() => this.options.play(prepared.value, slot.controller.signal)));
         if (played === CANCELLED)
           return;
         if (!played.ok)