@agentxm/extension-content 0.30.2 → 0.31.0

package/dist/src/packaging/input-normalization.js

@@ -5,6 +5,7 @@ import { enforceArchiveContentType, enforceArchiveSizeLimit, } from "./ingest-li
 import { resolveManifest, validateDeclaredManifestAlignment, } from "./manifest-policy.js";
 import { FilteredPackageError, validateFilteredPackage } from "./filtered-package-validation.js";
 const LOCAL_FILE_HEADER_SIZE = 30;
+const INFLATE_CHUNK_SIZE = 16 * 1024;
 export const defaultReadEntry = (archiveBytes, entry) => Effect.gen(function* () {
     const { localHeaderOffset, compressedSize, compressionMethod, fileName } = entry;
     if (localHeaderOffset + LOCAL_FILE_HEADER_SIZE > archiveBytes.length) {
@@ -38,11 +39,19 @@ export const defaultReadEntry = (archiveBytes, entry) => Effect.gen(function* ()
         return compressedData;
     }
     if (compressionMethod === 8) {
-        // Cap actual decompression at the declared (guardrail-validated) size so a
-        // small deflate stream cannot expand into a memory bomb, and route any
-        // inflate throw into the typed error channel instead of an uncaught defect.
+        const expansionFailure = () => new ArchiveGuardrailError({
+            code: "decompression_limit_exceeded",
+            message: `Entry "${fileName}" decompresses beyond its declared size of ${entry.uncompressedSize} bytes.`,
+            entry: fileName,
+        });
+        // workerd grows its bounded zlib buffer by whole chunks, including the
+        // final partial chunk. Reserve one chunk of codec headroom, then enforce
+        // the exact declared size below. Expansion remains bounded during decode.
         const result = yield* Effect.try({
-            try: () => inflateRawSync(compressedData, { maxOutputLength: entry.uncompressedSize }),
+            try: () => inflateRawSync(compressedData, {
+                chunkSize: INFLATE_CHUNK_SIZE,
+                maxOutputLength: entry.uncompressedSize + INFLATE_CHUNK_SIZE,
+            }),
             catch: (error) => {
                 const errorCode = typeof error === "object" &&
                     error !== null &&
@@ -50,12 +59,9 @@ export const defaultReadEntry = (archiveBytes, entry) => Effect.gen(function* ()
                     typeof error.code === "string"
                     ? error.code
                     : "";
-                return errorCode === "ERR_BUFFER_TOO_LARGE"
-                    ? new ArchiveGuardrailError({
-                        code: "decompression_limit_exceeded",
-                        message: `Entry "${fileName}" decompresses beyond its declared size of ${entry.uncompressedSize} bytes.`,
-                        entry: fileName,
-                    })
+                return errorCode === "ERR_BUFFER_TOO_LARGE" ||
+                    (error instanceof RangeError && error.message === "Memory limit exceeded")
+                    ? expansionFailure()
                     : new ArchiveGuardrailError({
                         code: "malformed_archive",
                         message: `Failed to decompress entry "${fileName}".`,
@@ -63,6 +69,8 @@ export const defaultReadEntry = (archiveBytes, entry) => Effect.gen(function* ()
                     });
             },
         });
+        if (result.byteLength > entry.uncompressedSize)
+            return yield* expansionFailure();
         return new Uint8Array(result.buffer, result.byteOffset, result.byteLength);
     }
     return yield* new ArchiveGuardrailError({

package/package.json

@@ -4,7 +4,7 @@
     "url": "https://github.com/agentxm/axm/issues"
   },
   "dependencies": {
-    "@agentxm/extension-model": "^0.30.2",
+    "@agentxm/extension-model": "^0.31.0",
     "effect": "4.0.0-rc.115",
     "yaml": "^2.9.0"
   },
@@ -58,5 +58,5 @@
   },
   "sideEffects": false,
   "type": "module",
-  "version": "0.30.2"
+  "version": "0.31.0"
 }