@veryfront/ext-content-mdx 0.1.1185 → 0.1.1188

package/esm/src/observability/tracing/otlp-setup.js

@@ -12,9 +12,13 @@
  * - OTEL_EXPORTER_OTLP_HEADERS: Auth headers
  **************************/
 import { isTruthyEnvValue } from "../../utils/constants/env.js";
-import { serverLogger } from "../../utils/logger/logger.js";
+import { MAX_SPAN_NAME_LENGTH } from "../../utils/constants/index.js";
+import { __registerTraceContextGetter, serverLogger } from "../../utils/logger/logger.js";
+import { sanitizeUrlForSpan } from "../../utils/logger/redact.js";
 import { context as shimContext, defaultTextMapGetter, defaultTextMapSetter, getTracer, getTracerProviderRevision, propagation as shimPropagation, SpanKind, SpanStatusCode, trace as shimTrace, } from "./api-shim.js";
 import { getHostTelemetryEnv } from "./telemetry-env.js";
+import { sanitizeErrorForTelemetry, sanitizeTelemetryAttributes, sanitizeTelemetryAttributeValue, sanitizeTelemetryText, } from "../telemetry-error.js";
+import { runAsyncWithContextFallback, runSyncWithContextFallback } from "./context-callback.js";
 const logger = serverLogger.component("otel");
 function parseHeaders(headerString) {
     if (!headerString)
@@ -89,22 +93,123 @@ export async function initializeOTLPWithApis() {
 // ---------------------------------------------------------------------------
 // Span helpers — delegate to shim (which delegates to SDK if wired)
 // ---------------------------------------------------------------------------
+function reportTelemetryFailure(failureMessage, error) {
+    try {
+        logger.debug(failureMessage, error);
+    }
+    catch (_) {
+        /* expected: telemetry and logging failures must not affect application work */
+    }
+}
+function runTelemetryOperation(operation, failureMessage) {
+    try {
+        operation();
+    }
+    catch (error) {
+        reportTelemetryFailure(failureMessage, error);
+    }
+}
+function createInertContext(entries = new Map()) {
+    const values = new Map(entries);
+    return Object.freeze({
+        getValue: (key) => values.get(key),
+        setValue(key, value) {
+            const next = new Map(values);
+            next.set(key, value);
+            return createInertContext(next);
+        },
+        deleteValue(key) {
+            const next = new Map(values);
+            next.delete(key);
+            return createInertContext(next);
+        },
+    });
+}
+function createInertSpan() {
+    const spanContext = Object.freeze({
+        traceId: "00000000000000000000000000000000",
+        spanId: "0000000000000000",
+        traceFlags: 0,
+    });
+    const span = Object.freeze({
+        setAttribute: () => span,
+        setAttributes: () => span,
+        setStatus: () => span,
+        recordException: () => { },
+        addEvent: () => span,
+        end: () => { },
+        spanContext: () => spanContext,
+        updateName: () => { },
+    });
+    return span;
+}
+function isUsableSpan(value) {
+    if ((typeof value !== "object" && typeof value !== "function") || value === null)
+        return false;
+    try {
+        const candidate = value;
+        return typeof candidate.setAttribute === "function" &&
+            typeof candidate.setAttributes === "function" &&
+            typeof candidate.setStatus === "function" &&
+            typeof candidate.recordException === "function" &&
+            typeof candidate.addEvent === "function" &&
+            typeof candidate.end === "function" &&
+            typeof candidate.spanContext === "function" &&
+            typeof candidate.updateName === "function";
+    }
+    catch (_) {
+        return false;
+    }
+}
+function getActiveContextSafely() {
+    try {
+        const activeContext = shimContext.active();
+        if (activeContext)
+            return activeContext;
+    }
+    catch (error) {
+        reportTelemetryFailure("Failed to read active tracing context", error);
+    }
+    return createInertContext();
+}
+function startSpanWithFallback(name, attributes, options) {
+    const parentContext = getActiveContextSafely();
+    let span = createInertSpan();
+    try {
+        const candidate = getTracingRuntime().tracer.startSpan(sanitizeTelemetryText(name, MAX_SPAN_NAME_LENGTH), {
+            kind: options?.kind ?? SpanKind.INTERNAL,
+            attributes: sanitizeTelemetryAttributes(attributes),
+        }, parentContext);
+        if (!isUsableSpan(candidate)) {
+            throw new TypeError("Tracer returned an invalid span");
+        }
+        span = candidate;
+    }
+    catch (error) {
+        reportTelemetryFailure("Failed to start span; using inert span", error);
+    }
+    let spanContext = parentContext;
+    try {
+        spanContext = shimTrace.setSpan(parentContext, span);
+    }
+    catch (error) {
+        reportTelemetryFailure("Failed to associate span with context", error);
+    }
+    return { span, context: spanContext };
+}
 function setSpanErrorStatus(span, error) {
-    span.setStatus({
+    const telemetryError = sanitizeErrorForTelemetry(error);
+    runTelemetryOperation(() => span.setStatus({
         code: SpanStatusCode.ERROR,
-        message: error instanceof Error ? error.message : String(error),
-    });
-    if (error instanceof Error)
-        span.recordException(error);
+        message: telemetryError.message,
+    }), "Failed to set span error status");
+    runTelemetryOperation(() => span.recordException(telemetryError), "Failed to record span exception");
 }
 /** Applies span. */
 export async function withSpan(name, fn, attributes, options) {
-    const { tracer } = getTracingRuntime();
-    const parentContext = shimContext.active();
-    const span = tracer.startSpan(name, { kind: options?.kind ?? SpanKind.INTERNAL, attributes }, parentContext);
-    const spanContext = shimTrace.setSpan(parentContext, span);
+    const { span, context: spanContext } = startSpanWithFallback(name, attributes, options);
     try {
-        const result = await shimContext.with(spanContext, () => fn(span));
+        const result = await runAsyncWithContextFallback((callback) => shimContext.with(spanContext, callback), () => fn(span), (error) => reportTelemetryFailure("Failed to activate span context", error));
         return result;
     }
     catch (error) {
@@ -112,17 +217,15 @@ export async function withSpan(name, fn, attributes, options) {
         throw error;
     }
     finally {
-        span.end();
+        runTelemetryOperation(() => span.end(), "Failed to end span");
     }
 }
 /** Applies span sync. */
 export function withSpanSync(name, fn, attributes, options) {
-    const { tracer } = getTracingRuntime();
-    const parentContext = shimContext.active();
-    const span = tracer.startSpan(name, { kind: options?.kind ?? SpanKind.INTERNAL, attributes }, parentContext);
+    const { span, context: spanContext } = startSpanWithFallback(name, attributes, options);
     try {
-        const result = fn();
-        span.setStatus({ code: SpanStatusCode.OK });
+        const result = runSyncWithContextFallback((callback) => shimContext.with(spanContext, callback), fn, (error) => reportTelemetryFailure("Failed to activate span context", error));
+        runTelemetryOperation(() => span.setStatus({ code: SpanStatusCode.OK }), "Failed to set span success status");
         return result;
     }
     catch (error) {
@@ -130,73 +233,105 @@ export function withSpanSync(name, fn, attributes, options) {
         throw error;
     }
     finally {
-        span.end();
+        runTelemetryOperation(() => span.end(), "Failed to end span");
     }
 }
 /** Context for extract. */
 export function extractContext(headers) {
-    const carrier = {};
-    for (const [k, v] of headers)
-        carrier[k.toLowerCase()] = v;
-    return shimPropagation.extract(shimContext.active(), carrier, defaultTextMapGetter);
+    try {
+        const carrier = {};
+        for (const [k, v] of headers)
+            carrier[k.toLowerCase()] = v;
+        return shimPropagation.extract(getActiveContextSafely(), carrier, defaultTextMapGetter);
+    }
+    catch (error) {
+        reportTelemetryFailure("Failed to extract tracing context", error);
+        return undefined;
+    }
 }
 /** Context for inject. */
 export function injectContext(headers) {
-    const carrier = {};
-    shimPropagation.inject(shimContext.active(), carrier, defaultTextMapSetter);
-    for (const [k, v] of Object.entries(carrier))
-        headers.set(k, v);
+    try {
+        const carrier = {};
+        shimPropagation.inject(getActiveContextSafely(), carrier, defaultTextMapSetter);
+        for (const [k, v] of Object.entries(carrier))
+            headers.set(k, v);
+    }
+    catch (error) {
+        reportTelemetryFailure("Failed to inject tracing context", error);
+    }
 }
 /** Starts server span. */
 export function startServerSpan(method, path, parentContext) {
-    const { tracer } = getTracingRuntime();
-    const ctx = (parentContext || shimContext.active());
-    const span = tracer.startSpan(`${method} ${path}`, { kind: SpanKind.SERVER }, ctx);
-    span.setAttribute("http.method", method);
-    span.setAttribute("http.target", path);
-    return { span, context: shimTrace.setSpan(ctx, span) };
+    let ctx;
+    let spanPath;
+    let span;
+    try {
+        ctx = (parentContext ?? getActiveContextSafely());
+        spanPath = sanitizeUrlForSpan(path);
+        const candidate = getTracingRuntime().tracer.startSpan(sanitizeTelemetryText(`${method} ${spanPath}`, MAX_SPAN_NAME_LENGTH), { kind: SpanKind.SERVER }, ctx);
+        if (!isUsableSpan(candidate))
+            throw new TypeError("Tracer returned an invalid server span");
+        span = candidate;
+    }
+    catch (error) {
+        reportTelemetryFailure("Failed to start server span", error);
+        return null;
+    }
+    runTelemetryOperation(() => span.setAttribute("http.method", sanitizeTelemetryAttributeValue("http.method", method)), "Failed to set server span method");
+    runTelemetryOperation(() => span.setAttribute("http.target", sanitizeTelemetryAttributeValue("http.target", spanPath)), "Failed to set server span target");
+    let spanContext = ctx;
+    try {
+        spanContext = shimTrace.setSpan(ctx, span);
+    }
+    catch (error) {
+        reportTelemetryFailure("Failed to associate server span with context", error);
+    }
+    return { span, context: spanContext };
 }
 /** End an active server tracing span. */
 export function endServerSpan(span, statusCode, error) {
     if (!span)
         return;
     const otelSpan = span;
-    otelSpan.setAttribute("http.status_code", statusCode);
+    runTelemetryOperation(() => otelSpan.setAttribute("http.status_code", statusCode), "Failed to set server span status code");
     if (error) {
         setSpanErrorStatus(otelSpan, error);
-        otelSpan.end();
+        runTelemetryOperation(() => otelSpan.end(), "Failed to end server span");
         return;
     }
     if (statusCode >= 400) {
-        otelSpan.setStatus({ code: SpanStatusCode.ERROR });
-        otelSpan.end();
+        runTelemetryOperation(() => otelSpan.setStatus({ code: SpanStatusCode.ERROR }), "Failed to set server span error status");
+        runTelemetryOperation(() => otelSpan.end(), "Failed to end server span");
         return;
     }
-    otelSpan.setStatus({ code: SpanStatusCode.OK });
-    otelSpan.end();
+    runTelemetryOperation(() => otelSpan.setStatus({ code: SpanStatusCode.OK }), "Failed to set server span success status");
+    runTelemetryOperation(() => otelSpan.end(), "Failed to end server span");
 }
 /** Sets span attributes. */
 export function setSpanAttributes(span, attributes) {
     if (!span)
         return;
     const otelSpan = span;
-    for (const [key, value] of Object.entries(attributes))
-        otelSpan.setAttribute(key, value);
+    for (const [key, value] of Object.entries(sanitizeTelemetryAttributes(attributes))) {
+        runTelemetryOperation(() => otelSpan.setAttribute(key, value), "Failed to set span attribute");
+    }
 }
 /** Adds an event to a span. */
 export function addSpanEvent(span, name, attributes) {
     if (!span)
         return;
     const otelSpan = span;
-    otelSpan.addEvent(name, attributes);
+    runTelemetryOperation(() => otelSpan.addEvent(sanitizeTelemetryText(name, MAX_SPAN_NAME_LENGTH), sanitizeTelemetryAttributes(attributes)), "Failed to add span event");
 }
 /** Sets active span attributes. */
 export function setActiveSpanAttributes(attributes) {
     const span = shimTrace.getActiveSpan?.();
     if (!span)
         return;
-    for (const [key, value] of Object.entries(attributes))
-        span.setAttribute(key, value);
+    for (const [key, value] of Object.entries(sanitizeTelemetryAttributes(attributes))) {
+        runTelemetryOperation(() => span.setAttribute(key, value), "Failed to set active span attribute");
+    }
 }
 /** Marks the active span as failed. */
 export function setActiveSpanErrorStatus(error) {
@@ -207,13 +342,22 @@ export function setActiveSpanErrorStatus(error) {
 }
 /** Context for with. */
 export async function withContext(spanContext, fn) {
-    return shimContext.with(spanContext, fn);
+    return await runAsyncWithContextFallback((callback) => shimContext.with(spanContext, callback), fn, (error) => logger.debug("Failed to activate explicit span context", error));
 }
 /** Context for get trace. */
 export function getTraceContext() {
     const span = shimTrace.getActiveSpan?.();
     if (!span)
         return {};
-    const ctx = span.spanContext();
-    return { traceId: ctx.traceId, spanId: ctx.spanId };
+    try {
+        const ctx = span.spanContext();
+        return { traceId: ctx.traceId, spanId: ctx.spanId };
+    }
+    catch (_) {
+        return {};
+    }
 }
+// The higher observability layer owns this adapter registration. Keeping the
+// dependency direction here prevents generic logging utilities from importing
+// OpenTelemetry implementation code.
+__registerTraceContextGetter(getTraceContext);

package/esm/src/platform/adapters/base.d.ts

@@ -122,10 +122,61 @@ export interface Server {
     };
 }
 export interface FileSystemAdapter {
+    /**
+     * Explicitly declares that paths in this adapter cannot traverse symbolic
+     * links. The backing store may reject links or expose them only as inert
+     * entries, but it must never resolve a path through one. Native/local
+     * adapters must omit this marker and provide lstat and realPath instead.
+     */
+    readonly symlinkSemantics?: "none";
+    /** Adapter is immutably bound to one project and needs no request scope. */
+    readonly projectContextSemantics?: "fixed";
     readFile(path: string): Promise<string>;
     /** Read raw bytes when binary-safe access is required */
     readFileBytes?(path: string): Promise<Uint8Array>;
+    /**
+     * Fixed whole-object ceiling enforced by the backing store or transport
+     * before a complete response can be materialized.
+     *
+     * This capability is distinct from `readFileBytesBounded`: the caller does
+     * not choose the read size, and the implementation may materialize up to
+     * this advertised ceiling even for a smaller file. It may be advertised
+     * only alongside `readFileBytes` and only when the upstream boundary itself
+     * rejects larger objects before returning them.
+     */
+    readonly maxWholeFileReadBytes?: number;
+    /**
+     * Read a prefix without materializing more than `byteLimit` bytes.
+     *
+     * Implementations must enforce the limit while reading from their backing
+     * store and continue until EOF or `byteLimit`; reading the complete object
+     * and slicing afterward does not satisfy this capability. Callers can
+     * request their accepted maximum plus one byte to distinguish an exact-size
+     * file from an oversized file. Non-native adapters used for bounded Skill
+     * discovery or strict Skill runtime reads must implement this capability.
+     */
+    readFileBytesBounded?(path: string, byteLimit: number): Promise<Uint8Array>;
+    /**
+     * Read the complete file only when it is no larger than `byteLimit`.
+     *
+     * Implementations must enforce the limit while reading and reject when the
+     * source has even one additional byte. They must not implement this by
+     * materializing the whole object or by retaining a `byteLimit + 1` prefix.
+     * Oversized sources reject with `RangeError`; other I/O failures propagate.
+     */
+    readFileBytesWithinLimit?(path: string, byteLimit: number): Promise<Uint8Array>;
+    /**
+     * Read one stable file snapshot beneath `containmentRoot` without following
+     * links and only when its complete contents fit within `byteLimit`.
+     */
+    readFileSnapshotWithinLimit?(path: string, containmentRoot: string, byteLimit: number): Promise<Uint8Array>;
     writeFile(path: string, content: string): Promise<void>;
+    /** Write raw bytes when binary-safe output is required. */
+    writeFileBytes?(path: string, content: Uint8Array): Promise<void>;
+    /** Create a new byte file without replacing an existing path. */
+    createFileBytesExclusive?(path: string, content: Uint8Array): Promise<void>;
+    /** Atomically replace a path when the runtime supports same-filesystem rename. */
+    rename?(from: string, to: string): Promise<void>;
     exists(path: string): Promise<boolean>;
     readDir(path: string): AsyncIterable<DirEntry>;
     stat(path: string): Promise<FileInfo>;
@@ -168,6 +219,10 @@ export interface FileSystemAdapter {
      */
     getSourceSnapshotVersion?(): number | undefined | Promise<number | undefined>;
 }
+/** A filesystem adapter that advertises genuine bounded byte reads. */
+export type BoundedFileSystemAdapter = FileSystemAdapter & Required<Pick<FileSystemAdapter, "readFileBytesBounded">>;
+/** A filesystem adapter that can return only complete, size-admitted files. */
+export type ExactBoundedFileSystemAdapter = FileSystemAdapter & Required<Pick<FileSystemAdapter, "readFileBytesWithinLimit">>;
 export interface ResolveFileOptions {
     allowPagesPrefix?: boolean;
 }
@@ -200,11 +255,18 @@ export interface FileChangeEvent {
 }
 export interface FileWatcher extends AsyncIterable<FileChangeEvent> {
     close(): void;
+    /**
+     * Resolves once the underlying watcher has been installed and can observe
+     * subsequent filesystem changes. Rejects when any requested watch root
+     * cannot be acquired; callers must not advertise watching before it resolves.
+     */
+    ready?: Promise<void>;
     /**
      * Resolves once the watcher's internal loop has fully stopped, including
      * any in-flight filesystem operations. close() only signals shutdown;
      * await this to guarantee no pending async ops remain (e.g. before test
-     * sanitizer checks or process exit).
+     * sanitizer checks or process exit). Rejects when the native watcher fails
+     * or teardown cannot complete cleanly.
      */
     done?: Promise<void>;
 }

package/esm/src/platform/adapters/base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../../src/src/platform/adapters/base.ts"],"names":[],"mappings":"AAAA;;yBAEyB;AACzB,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAEvF,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,YAAY,GAAG,QAAQ,CAAC;AAE1E;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,yCAAyC;IACzC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IAEvB,sCAAsC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,iDAAiD;IACjD,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAE3C,4BAA4B;IAC5B,EAAE,EAAE,iBAAiB,CAAC;IAEtB,kCAAkC;IAClC,GAAG,EAAE,kBAAkB,CAAC;IAExB,6BAA6B;IAC7B,MAAM,EAAE,aAAa,CAAC;IAEtB,KAAK,CACH,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,EAC3D,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,yCAAyC;IACzC,KAAK,CAAC,EAAE,YAAY,CAAC;IAErB,+CAA+C;IAC/C,EAAE,CAAC,EAAE,cAAc,CAAC;IAEpB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAE7B,4DAA4D;IAC5D,UAAU,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7B,+CAA+C;IAC/C,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,oDAAoD;IACpD,UAAU,EAAE,OAAO,CAAC;IAEpB,6BAA6B;IAC7B,GAAG,EAAE,OAAO,CAAC;IAEb,4BAA4B;IAC5B,KAAK,EAAE,OAAO,CAAC;IAEf,wBAAwB;IACxB,SAAS,EAAE,OAAO,CAAC;IAEnB,2CAA2C;IAC3C,OAAO,EAAE,OAAO,CAAC;IAEjB,2BAA2B;IAC3B,YAAY,EAAE,OAAO,CAAC;IAEtB,8BAA8B;IAC9B,KAAK,EAAE,OAAO,CAAC;IAEf,gCAAgC;IAChC,OAAO,EAAE,OAAO,CAAC;IAEjB,yDAAyD;IACzD,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,uBAAuB,GAAG,gBAAgB,CAAC;CACzF;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACjG,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,GAAG,IAAI,CAAC;CAClE;AAED,QAAA,MAAM,+BAA+B,sBAAsB,CAAC;AAE5D;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,OAAO,+BAA+B,CAAC;IACtD,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,QAAQ,EAAE,QAAQ,GAAG,wBAAwB,CAAC;CAC/C;AAED,wBAAgB,8BAA8B,CAC5C,KAAK,GAAE;IAAE,OAAO,CAAC,EAAE,WAAW,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACzD,wBAAwB,CAQ1B;AAuCD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,wBAAwB,CA0B5F;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAChE;;;;OAIG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAC;CACrE;AAED,MAAM,WAAW,MAAM;IACrB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1C;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,yDAAyD;IACzD,aAAa,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAClD,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtC;;;;;;OAMG;IACH,KAAK,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxC;;;;;;OAMG;IACH,QAAQ,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,WAAW,CAAC;IACrE,sFAAsF;IACtF,WAAW,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACrF,0FAA0F;IAC1F,qBAAqB,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD;;;OAGG;IACH,yBAAyB,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D;;;OAGG;IACH,wBAAwB,CAAC,IAAI,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC/E;AAED,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,IAAI,GAAG,IAAI,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACrC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEpE,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,WAAY,SAAQ,aAAa,CAAC,eAAe,CAAC;IACjE,KAAK,IAAI,IAAI,CAAC;IACd;;;;;OAKG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,WAAW,EAAE,OAAO,CAAA;KAAE,CAAC;IAClE,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzC,GAAG,CACD,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,GACnC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,WAAW,CAAC;CACtE"}
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../../src/src/platform/adapters/base.ts"],"names":[],"mappings":"AAAA;;yBAEyB;AACzB,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAEvF,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,YAAY,GAAG,QAAQ,CAAC;AAE1E;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,yCAAyC;IACzC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IAEvB,sCAAsC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,iDAAiD;IACjD,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAE3C,4BAA4B;IAC5B,EAAE,EAAE,iBAAiB,CAAC;IAEtB,kCAAkC;IAClC,GAAG,EAAE,kBAAkB,CAAC;IAExB,6BAA6B;IAC7B,MAAM,EAAE,aAAa,CAAC;IAEtB,KAAK,CACH,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,EAC3D,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,yCAAyC;IACzC,KAAK,CAAC,EAAE,YAAY,CAAC;IAErB,+CAA+C;IAC/C,EAAE,CAAC,EAAE,cAAc,CAAC;IAEpB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAE7B,4DAA4D;IAC5D,UAAU,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7B,+CAA+C;IAC/C,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,oDAAoD;IACpD,UAAU,EAAE,OAAO,CAAC;IAEpB,6BAA6B;IAC7B,GAAG,EAAE,OAAO,CAAC;IAEb,4BAA4B;IAC5B,KAAK,EAAE,OAAO,CAAC;IAEf,wBAAwB;IACxB,SAAS,EAAE,OAAO,CAAC;IAEnB,2CAA2C;IAC3C,OAAO,EAAE,OAAO,CAAC;IAEjB,2BAA2B;IAC3B,YAAY,EAAE,OAAO,CAAC;IAEtB,8BAA8B;IAC9B,KAAK,EAAE,OAAO,CAAC;IAEf,gCAAgC;IAChC,OAAO,EAAE,OAAO,CAAC;IAEjB,yDAAyD;IACzD,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,uBAAuB,GAAG,gBAAgB,CAAC;CACzF;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACjG,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,GAAG,IAAI,CAAC;CAClE;AAED,QAAA,MAAM,+BAA+B,sBAAsB,CAAC;AAE5D;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,OAAO,+BAA+B,CAAC;IACtD,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,QAAQ,EAAE,QAAQ,GAAG,wBAAwB,CAAC;CAC/C;AAED,wBAAgB,8BAA8B,CAC5C,KAAK,GAAE;IAAE,OAAO,CAAC,EAAE,WAAW,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACzD,wBAAwB,CAQ1B;AAuCD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,wBAAwB,CA6B5F;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAChE;;;;OAIG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAC;CACrE;AAED,MAAM,WAAW,MAAM;IACrB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1C;AAED,MAAM,WAAW,iBAAiB;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,4EAA4E;IAC5E,QAAQ,CAAC,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,yDAAyD;IACzD,aAAa,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAClD;;;;;;;;;OASG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC;;;;;;;;;OASG;IACH,oBAAoB,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5E;;;;;;;OAOG;IACH,wBAAwB,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAChF;;;OAGG;IACH,2BAA2B,CAAC,CAC1B,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,UAAU,CAAC,CAAC;IACvB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,2DAA2D;IAC3D,cAAc,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,iEAAiE;IACjE,wBAAwB,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5E,kFAAkF;IAClF,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtC;;;;;;OAMG;IACH,KAAK,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxC;;;;;;OAMG;IACH,QAAQ,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,WAAW,CAAC;IACrE,sFAAsF;IACtF,WAAW,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACrF,0FAA0F;IAC1F,qBAAqB,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD;;;OAGG;IACH,yBAAyB,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D;;;OAGG;IACH,wBAAwB,CAAC,IAAI,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC/E;AAED,uEAAuE;AACvE,MAAM,MAAM,wBAAwB,GAChC,iBAAiB,GACjB,QAAQ,CAAC,IAAI,CAAC,iBAAiB,EAAE,sBAAsB,CAAC,CAAC,CAAC;AAE9D,+EAA+E;AAC/E,MAAM,MAAM,6BAA6B,GACrC,iBAAiB,GACjB,QAAQ,CAAC,IAAI,CAAC,iBAAiB,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAElE,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,IAAI,GAAG,IAAI,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACrC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEpE,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,WAAY,SAAQ,aAAa,CAAC,eAAe,CAAC;IACjE,KAAK,IAAI,IAAI,CAAC;IACd;;;;OAIG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,WAAW,EAAE,OAAO,CAAA;KAAE,CAAC;IAClE,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzC,GAAG,CACD,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,GACnC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,WAAW,CAAC;CACtE"}

package/esm/src/platform/adapters/base.js

@@ -52,8 +52,10 @@ export function isWebSocketUpgradeResponse(value) {
         return false;
     }
     try {
-        // Verify the native Headers internal slot without consulting hostile
-        // properties or Symbol.hasInstance hooks.
+        // A structural object with a `get()` method is not a Headers instance and
+        // can run arbitrary code when the transport clones it. Invoke a captured
+        // Web IDL primordial to verify the native internal slot without consulting
+        // attacker-controlled properties or Symbol.hasInstance hooks.
         Reflect.apply(headersGet, headers.value, ["upgrade"]);
     }
     catch {

package/esm/src/platform/adapters/bounded-file-read.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Minimal handle contract shared by native filesystem adapters.
+ *
+ * The caller supplies the handle factory so each runtime can choose its native
+ * open semantics while this helper owns bounded chunking and cleanup.
+ */
+export interface BoundedFileReader {
+    read(buffer: Uint8Array): Promise<number | null>;
+}
+export interface BoundedFileReadHandle extends BoundedFileReader {
+    close(): void | Promise<void>;
+}
+/**
+ * Run one operation against one opened file handle, then close it exactly once.
+ *
+ * When the operation and cleanup both fail, the aggregate retains the primary
+ * operation failure first and the cleanup failure second.
+ */
+export declare function withFileHandle<THandle extends {
+    close(): void | Promise<void>;
+}, TResult>(openHandle: () => Promise<THandle>, operation: (handle: THandle) => Promise<TResult>, aggregateFailureMessage: string): Promise<TResult>;
+export declare function requireBoundedFileReadLimit(byteLimit: unknown): number;
+/**
+ * Read at most `byteLimit` bytes without first materializing the whole file.
+ *
+ * A full-length result is intentionally ambiguous: callers that need to
+ * distinguish an exact-size file from an oversized file request their accepted
+ * maximum plus one byte.
+ */
+export declare function readBoundedFilePrefix(openHandle: () => Promise<BoundedFileReadHandle>, byteLimit: number): Promise<Uint8Array>;
+/**
+ * Read the complete file only when it fits within `byteLimit`.
+ *
+ * Unlike a prefix read, reaching the limit triggers one additional EOF probe.
+ * The probe reuses the final byte of the accepted buffer, so the helper never
+ * retains more than `byteLimit` bytes from the source.
+ */
+export declare function readFileWithinLimit(openHandle: () => Promise<BoundedFileReadHandle>, byteLimit: number): Promise<Uint8Array>;
+/** Read a bounded prefix while leaving ownership of the open handle to the caller. */
+export declare function readBoundedFileHandlePrefix(reader: BoundedFileReader, byteLimit: number): Promise<Uint8Array>;
+/** Read a complete bounded file while leaving ownership of the handle to the caller. */
+export declare function readFileHandleWithinLimit(reader: BoundedFileReader, byteLimit: number): Promise<Uint8Array>;
+//# sourceMappingURL=bounded-file-read.d.ts.map

package/esm/src/platform/adapters/bounded-file-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-file-read.d.ts","sourceRoot":"","sources":["../../../../src/src/platform/adapters/bounded-file-read.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC9D,KAAK,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/B;AAwED;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,OAAO,SAAS;IAAE,KAAK,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,EACjD,OAAO,EAEP,UAAU,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,EAClC,SAAS,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,EAChD,uBAAuB,EAAE,MAAM,GAC9B,OAAO,CAAC,OAAO,CAAC,CA0BlB;AAED,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,CAKtE;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,MAAM,OAAO,CAAC,qBAAqB,CAAC,EAChD,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,UAAU,CAAC,CAOrB;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,OAAO,CAAC,qBAAqB,CAAC,EAChD,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,UAAU,CAAC,CAOrB;AAED,sFAAsF;AACtF,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,iBAAiB,EACzB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,UAAU,CAAC,CAoDrB;AAED,wFAAwF;AACxF,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,iBAAiB,EACzB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,UAAU,CAAC,CAuBrB"}