@veryfront/ext-content-mdx 0.1.1186 → 0.1.1189

package/esm/src/platform/compat/process/env.js

@@ -60,47 +60,34 @@ export function getHostEnv(key) {
         return runtimeProcess.env[key];
     return undefined;
 }
-// Lazy-loaded references to project-env/storage.ts functions.
-// Uses globalThis to avoid circular imports (process compat is low-level, project-env is high-level).
-// IMPORTANT: Only cache when the real getter is found. If storage.ts hasn't loaded yet,
-// re-check globalThis on every call to avoid permanently caching the fallback.
-let _getProjectEnv = null;
-let _isProjectEnvActive = null;
-function getProjectEnvSafe(key) {
-    if (_getProjectEnv === null) {
-        const mod = dntShim.dntGlobalThis.__vfProjectEnvGetter;
-        if (mod) {
-            _getProjectEnv = mod;
-        }
-        else {
-            return undefined;
-        }
+let _trustedProjectEnvSnapshot = null;
+/**
+ * Register the server-owned project environment snapshot bridge.
+ *
+ * Kept out of the public process barrel so project code cannot replace the
+ * callback through a supported package export. Re-registering a different
+ * function is rejected rather than silently widening an isolation boundary.
+ */
+export function registerTrustedProjectEnvSnapshot(getter) {
+    if (_trustedProjectEnvSnapshot && _trustedProjectEnvSnapshot !== getter) {
+        throw new Error("Project environment snapshot bridge is already registered");
     }
-    return _getProjectEnv(key);
+    _trustedProjectEnvSnapshot = getter;
 }
-function isProjectEnvActiveSafe() {
-    if (_isProjectEnvActive === null) {
-        const mod = dntShim.dntGlobalThis.__vfProjectEnvActiveChecker;
-        if (mod) {
-            _isProjectEnvActive = mod;
-        }
-        else {
-            return false;
-        }
-    }
-    return _isProjectEnvActive();
+/** Return the active server-owned project env snapshot, if registered. */
+export function getTrustedProjectEnvSnapshot() {
+    return _trustedProjectEnvSnapshot?.();
 }
 /** Read an environment variable from the active project scope. */
 export function getEnv(key) {
-    // Check per-request project env overlay first (AsyncLocalStorage)
-    const projectValue = getProjectEnvSafe(key);
-    if (projectValue !== undefined)
-        return projectValue;
-    // When a project env overlay is active (remote project request), do NOT
-    // fall through to host process env. This prevents remote projects from
-    // reading host-level secrets like AWS_SECRET_ACCESS_KEY, DATABASE_URL, etc.
-    if (isProjectEnvActiveSafe())
-        return undefined;
+    const projectEnv = getTrustedProjectEnvSnapshot();
+    if (projectEnv !== undefined) {
+        // The registered snapshot is authoritative even when the requested key is
+        // absent. Falling through here would expose host process configuration to
+        // a remote project. Never discover this boundary through replaceable
+        // globalThis hooks.
+        return projectEnv[key];
+    }
     return getHostEnv(key);
 }
 const DEFAULT_ENV_TRUE_VALUES = ["1", "true", "yes"];
@@ -119,8 +106,11 @@ export function getEnvNumber(key, fallback) {
     const value = getEnvString(key);
     if (value === undefined)
         return fallback;
-    const parsed = Number.parseInt(value, 10);
-    if (Number.isNaN(parsed))
+    const normalized = value.trim();
+    if (!/^[+-]?\d+$/.test(normalized))
+        return fallback ?? Number.NaN;
+    const parsed = Number(normalized);
+    if (!Number.isSafeInteger(parsed))
         return fallback ?? Number.NaN;
     return parsed;
 }

package/esm/src/platform/compat/process/global-error.d.ts

@@ -0,0 +1,19 @@
+export type GlobalErrorType = "uncaughtException" | "unhandledRejection";
+export type GlobalErrorHandler = (error: Error, type: GlobalErrorType) => boolean | void;
+type HandlerFailureReporter = (error: Error, type: GlobalErrorType) => void;
+/**
+ * Convert an arbitrary thrown value without invoking object conversion hooks.
+ *
+ * Rejected promises and manual event dispatch can carry any JavaScript value.
+ * Calling String(value) is unsafe here because a hostile toString or
+ * Symbol.toPrimitive implementation can throw while the runtime is already
+ * handling a global failure.
+ */
+export declare function normalizeGlobalError(value: unknown): Error;
+/**
+ * Invoke a global error callback while preserving the runtime's fatal default
+ * when the callback itself fails.
+ */
+export declare function invokeGlobalErrorHandler(handler: GlobalErrorHandler, error: Error, type: GlobalErrorType, reportFailure?: HandlerFailureReporter): boolean;
+export {};
+//# sourceMappingURL=global-error.d.ts.map

package/esm/src/platform/compat/process/global-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"global-error.d.ts","sourceRoot":"","sources":["../../../../../src/src/platform/compat/process/global-error.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GAAG,mBAAmB,GAAG,oBAAoB,CAAC;AAEzE,MAAM,MAAM,kBAAkB,GAAG,CAC/B,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,eAAe,KAClB,OAAO,GAAG,IAAI,CAAC;AAEpB,KAAK,sBAAsB,GAAG,CAC5B,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,eAAe,KAClB,IAAI,CAAC;AAIV;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,CAgB1D;AAwBD;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,eAAe,EACrB,aAAa,GAAE,sBAA6C,GAC3D,OAAO,CAOT"}

package/esm/src/platform/compat/process/global-error.js

@@ -0,0 +1,57 @@
+const NON_ERROR_VALUE_MESSAGE = "A non-Error object was thrown";
+/**
+ * Convert an arbitrary thrown value without invoking object conversion hooks.
+ *
+ * Rejected promises and manual event dispatch can carry any JavaScript value.
+ * Calling String(value) is unsafe here because a hostile toString or
+ * Symbol.toPrimitive implementation can throw while the runtime is already
+ * handling a global failure.
+ */
+export function normalizeGlobalError(value) {
+    if (value instanceof Error)
+        return value;
+    if (value === null)
+        return new Error("null");
+    switch (typeof value) {
+        case "string":
+            return new Error(value);
+        case "number":
+        case "boolean":
+        case "bigint":
+        case "symbol":
+        case "undefined":
+            return new Error(String(value));
+        default:
+            return new Error(NON_ERROR_VALUE_MESSAGE);
+    }
+}
+function reportHandlerFailure(error, type) {
+    let message = "Unknown handler failure";
+    try {
+        if (typeof error.message === "string" && error.message) {
+            message = error.message;
+        }
+    }
+    catch {
+        // Error.message can be replaced with a throwing accessor.
+    }
+    try {
+        console.error(`Global error handler threw while processing ${type}: ${message}`);
+    }
+    catch {
+        // A replaced console implementation must not recurse into global handling.
+    }
+}
+/**
+ * Invoke a global error callback while preserving the runtime's fatal default
+ * when the callback itself fails.
+ */
+export function invokeGlobalErrorHandler(handler, error, type, reportFailure = reportHandlerFailure) {
+    try {
+        return handler(error, type) === true;
+    }
+    catch (handlerError) {
+        reportFailure(normalizeGlobalError(handlerError), type);
+        return false;
+    }
+}

package/esm/src/platform/compat/process/lifecycle.d.ts

@@ -1,4 +1,5 @@
 import * as dntShim from "../../../../_dnt.shims.js";
+import { type GlobalErrorHandler } from "./global-error.js";
 /** Get command-line arguments (cross-runtime: Deno.args or process.argv). */
 export declare function getArgs(): string[];
 /** Exit the process with an optional code (cross-runtime: Deno.exit or process.exit). */
@@ -39,9 +40,15 @@ export declare function getRuntimeVersion(): string;
  */
 export declare function getOsType(): string;
 /**
- * Register a signal handler (SIGINT, SIGTERM) for graceful shutdown
+ * Register a SIGINT or SIGTERM handler for graceful shutdown.
+ *
+ * If registration fails after a runtime partially installs the handler, this
+ * function removes that exact registration. When removal also fails, both
+ * failures are exposed in registration-first order through an AggregateError.
+ *
+ * @returns An idempotent disposer for the exact signal and handler pair.
  */
-export declare function onSignal(signal: "SIGINT" | "SIGTERM", handler: () => void): void;
+export declare function onSignal(signal: "SIGINT" | "SIGTERM", handler: () => void): () => void;
 /**
  * Register global error handlers for uncaught exceptions and unhandled promise rejections.
  * These handlers prevent the process from crashing due to application code errors.
@@ -51,7 +58,7 @@ export declare function onSignal(signal: "SIGINT" | "SIGTERM", handler: () => vo
  *
  * @param onError - Callback invoked with the error. Return true to prevent process exit.
  */
-export declare function onGlobalError(onError: (error: Error, type: "uncaughtException" | "unhandledRejection") => boolean | void): void;
+export declare function onGlobalError(onError: GlobalErrorHandler): void;
 /**
  * Unreference a timer to prevent it from keeping the process alive
  */

package/esm/src/platform/compat/process/lifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../../../../src/src/platform/compat/process/lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,2BAA2B,CAAC;AAIrD,6EAA6E;AAC7E,wBAAgB,OAAO,IAAI,MAAM,EAAE,CAKlC;AAED,yFAAyF;AACzF,wBAAgB,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,KAAK,CAKzC;AAED,4CAA4C;AAC5C,wBAAgB,GAAG,IAAI,MAAM,CAK5B;AAED,wBAAgB,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAW7C;AAED,wBAAgB,GAAG,IAAI,MAAM,CAK5B;AAED,wBAAgB,WAAW,IAAI;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAaA;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAKvC;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,OAAO,CAKrC;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAqBnE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAQ1C;AAED;;;GAGG;AACH,wBAAgB,SAAS,IAAI,MAAM,CASlC;AAED;;GAEG;AACH,wBAAgB,QAAQ,CACtB,MAAM,EAAE,QAAQ,GAAG,SAAS,EAC5B,OAAO,EAAE,MAAM,IAAI,GAClB,IAAI,CAON;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,GAAG,oBAAoB,KAAK,OAAO,GAAG,IAAI,GAC1F,IAAI,CAiDN;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAahF;AAED;;GAEG;AACH,wBAAgB,QAAQ,IAAI,MAAM,CAKjC;AAED;;;GAGG;AACH,wBAAgB,MAAM,IAAI,MAAM,CAW/B;AAED;;;GAGG;AACH,wBAAgB,SAAS,IAAI;IAAE,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,GAAG,IAAI,CAWpE;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAE9C;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAexE;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG1D;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,IAAI,CAuBjD"}
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../../../../src/src/platform/compat/process/lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,2BAA2B,CAAC;AAErD,OAAO,EACL,KAAK,kBAAkB,EAGxB,MAAM,mBAAmB,CAAC;AAG3B,6EAA6E;AAC7E,wBAAgB,OAAO,IAAI,MAAM,EAAE,CAKlC;AAED,yFAAyF;AACzF,wBAAgB,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,KAAK,CAKzC;AAED,4CAA4C;AAC5C,wBAAgB,GAAG,IAAI,MAAM,CAK5B;AAED,wBAAgB,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAW7C;AAED,wBAAgB,GAAG,IAAI,MAAM,CAK5B;AAED,wBAAgB,WAAW,IAAI;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAaA;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAKvC;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,OAAO,CAKrC;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAqBnE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAQ1C;AAED;;;GAGG;AACH,wBAAgB,SAAS,IAAI,MAAM,CASlC;AAED;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CACtB,MAAM,EAAE,QAAQ,GAAG,SAAS,EAC5B,OAAO,EAAE,MAAM,IAAI,GAClB,MAAM,IAAI,CA+CZ;AAgBD;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,kBAAkB,GAC1B,IAAI,CAgDN;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAahF;AAED;;GAEG;AACH,wBAAgB,QAAQ,IAAI,MAAM,CAKjC;AAED;;;GAGG;AACH,wBAAgB,MAAM,IAAI,MAAM,CAW/B;AAED;;;GAGG;AACH,wBAAgB,SAAS,IAAI;IAAE,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,GAAG,IAAI,CAWpE;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAE9C;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAexE;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG1D;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,IAAI,CAuBjD"}

package/esm/src/platform/compat/process/lifecycle.js

@@ -1,5 +1,6 @@
 import * as dntShim from "../../../../_dnt.shims.js";
 import { getDenoRuntime, isBun as IS_BUN, isDeno as IS_DENO } from "../runtime.js";
+import { invokeGlobalErrorHandler, normalizeGlobalError, } from "./global-error.js";
 import { runtimeProcess } from "./runtime-process.js";
 /** Get command-line arguments (cross-runtime: Deno.args or process.argv). */
 export function getArgs() {
@@ -137,16 +138,75 @@ export function getOsType() {
     return "unknown";
 }
 /**
- * Register a signal handler (SIGINT, SIGTERM) for graceful shutdown
+ * Register a SIGINT or SIGTERM handler for graceful shutdown.
+ *
+ * If registration fails after a runtime partially installs the handler, this
+ * function removes that exact registration. When removal also fails, both
+ * failures are exposed in registration-first order through an AggregateError.
+ *
+ * @returns An idempotent disposer for the exact signal and handler pair.
  */
 export function onSignal(signal, handler) {
     const deno = IS_DENO ? getDenoRuntime() : undefined;
     if (deno) {
-        deno.addSignalListener(signal, handler);
-        return;
+        try {
+            deno.addSignalListener(signal, handler);
+        }
+        catch (error) {
+            // Older Deno builds can retain the callback before native binding fails.
+            try {
+                deno.removeSignalListener(signal, handler);
+            }
+            catch (cleanupError) {
+                throw new AggregateError([error, cleanupError], `Failed to register and roll back ${signal} handler`);
+            }
+            throw error;
+        }
+        return createIdempotentDisposer(() => {
+            deno.removeSignalListener(signal, handler);
+        });
     }
-    if (runtimeProcess)
-        runtimeProcess.on(signal, handler);
+    if (runtimeProcess) {
+        const process = runtimeProcess;
+        const remove = () => {
+            if (typeof process.off === "function") {
+                process.off(signal, handler);
+            }
+            else {
+                process.removeListener(signal, handler);
+            }
+        };
+        try {
+            process.on(signal, handler);
+        }
+        catch (error) {
+            // A runtime hook can throw after installing the listener.
+            try {
+                remove();
+            }
+            catch (cleanupError) {
+                throw new AggregateError([error, cleanupError], `Failed to register and roll back ${signal} handler`);
+            }
+            throw error;
+        }
+        return createIdempotentDisposer(remove);
+    }
+    return () => { };
+}
+function createIdempotentDisposer(dispose) {
+    let active = true;
+    return () => {
+        if (!active)
+            return;
+        active = false;
+        try {
+            dispose();
+        }
+        catch (error) {
+            active = true;
+            throw error;
+        }
+    };
 }
 /**
  * Register global error handlers for uncaught exceptions and unhandled promise rejections.
@@ -161,14 +221,16 @@ export function onGlobalError(onError) {
     if (IS_DENO) {
         // Intentionally permanent: process-level handlers must persist for the entire runtime
         globalThis.addEventListener("error", (event) => {
-            const error = event.error instanceof Error ? event.error : new Error(String(event.error));
-            if (onError(error, "uncaughtException"))
+            const error = normalizeGlobalError(event.error);
+            if (invokeGlobalErrorHandler(onError, error, "uncaughtException")) {
                 event.preventDefault();
+            }
         });
         globalThis.addEventListener("unhandledrejection", (event) => {
-            const error = event.reason instanceof Error ? event.reason : new Error(String(event.reason));
-            if (onError(error, "unhandledRejection"))
+            const error = normalizeGlobalError(event.reason);
+            if (invokeGlobalErrorHandler(onError, error, "unhandledRejection")) {
                 event.preventDefault();
+            }
         });
         return;
     }
@@ -176,17 +238,7 @@ export function onGlobalError(onError) {
         return;
     const process = runtimeProcess;
     const handleNodeGlobalError = (error, type) => {
-        let shouldPreventExit = false;
-        try {
-            shouldPreventExit = onError(error, type) === true;
-        }
-        catch (handlerError) {
-            const handlerException = handlerError instanceof Error
-                ? handlerError
-                : new Error(String(handlerError));
-            console.error("Global error handler threw while processing", type, handlerException);
-        }
-        if (shouldPreventExit)
+        if (invokeGlobalErrorHandler(onError, error, type))
             return;
         // Node/Bun suppress default fatal behavior when a listener is registered.
         // If the callback did not explicitly handle the error, exit to preserve
@@ -194,11 +246,10 @@ export function onGlobalError(onError) {
         process.exit(1);
     };
     runtimeProcess.on("uncaughtException", (error) => {
-        handleNodeGlobalError(error, "uncaughtException");
+        handleNodeGlobalError(normalizeGlobalError(error), "uncaughtException");
     });
     runtimeProcess.on("unhandledRejection", (reason) => {
-        const error = reason instanceof Error ? reason : new Error(String(reason));
-        handleNodeGlobalError(error, "unhandledRejection");
+        handleNodeGlobalError(normalizeGlobalError(reason), "unhandledRejection");
     });
 }
 /**

package/esm/src/platform/compat/process/project-env-contract.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Low-level project environment contract shared by server admission and
+ * routing worker boundaries.
+ *
+ * Keep this module free of runtime and server dependencies so higher layers
+ * can share one immutable contract without reversing dependency direction.
+ *
+ * @module platform/compat/process/project-env-contract
+ */
+/** Immutable project environment admitted to runtime and worker boundaries. */
+export type ProjectEnvSnapshot = Readonly<Record<string, string>>;
+/** Fixed resource limits for every project environment admission boundary. */
+export declare const PROJECT_ENV_SNAPSHOT_LIMITS: Readonly<{
+    maxEntries: 128;
+    maxKeyChars: 1024;
+    maxValueChars: number;
+    maxUtf8Bytes: number;
+}>;
+//# sourceMappingURL=project-env-contract.d.ts.map

package/esm/src/platform/compat/process/project-env-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-env-contract.d.ts","sourceRoot":"","sources":["../../../../../src/src/platform/compat/process/project-env-contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,+EAA+E;AAC/E,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAElE,8EAA8E;AAC9E,eAAO,MAAM,2BAA2B;;;;;EAOtC,CAAC"}

package/esm/src/platform/compat/process/project-env-contract.js

@@ -0,0 +1,19 @@
+/**
+ * Low-level project environment contract shared by server admission and
+ * routing worker boundaries.
+ *
+ * Keep this module free of runtime and server dependencies so higher layers
+ * can share one immutable contract without reversing dependency direction.
+ *
+ * @module platform/compat/process/project-env-contract
+ */
+const objectFreeze = Object.freeze;
+/** Fixed resource limits for every project environment admission boundary. */
+export const PROJECT_ENV_SNAPSHOT_LIMITS = objectFreeze({
+    // The API returns at most 100 tenant entries. Runtime-owned scoped values
+    // may be added afterward without exceeding this boundary.
+    maxEntries: 128,
+    maxKeyChars: 1_024,
+    maxValueChars: 1024 * 1024,
+    maxUtf8Bytes: 1024 * 1024,
+});

package/esm/src/platform/compat/runtime.d.ts

@@ -1,4 +1,12 @@
 import * as dntShim from "../../../_dnt.shims.js";
+export type RuntimeKind = "bun" | "cloudflare" | "deno" | "node" | "unknown";
+/** @internal Exported so overlapping host signals can be regression-tested. */
+export declare function classifyRuntimeSignals(signals: {
+    bun: boolean;
+    cloudflare: boolean;
+    deno: boolean;
+    node: boolean;
+}): RuntimeKind;
 export declare function getDenoRuntime(): typeof dntShim.Deno | undefined;
 /**
  * Check if an executable path is a compiled Deno binary.
@@ -6,11 +14,14 @@ export declare function getDenoRuntime(): typeof dntShim.Deno | undefined;
  * @internal Exported for testing only.
  */
 export declare function testDenoCompiledDetection(execPath: string, standalone?: boolean): boolean;
-/** True if running in Bun runtime (check first since Bun has process.versions.node) */
+export declare const runtimeKind: RuntimeKind;
+/** True if running in Bun runtime (Bun also exposes process.versions.node). */
 export declare const isBun: boolean;
-/** True if running in Node.js runtime (has process.versions.node, not Bun, not shimmed Deno) */
+/** True if running in Cloudflare Workers, including nodejs_compat workers. */
+export declare const isCloudflare: boolean;
+/** True if running in Node.js rather than a more specific compatible host. */
 export declare const isNode: boolean;
-/** True if running in real Deno runtime (not dnt shim) */
+/** True if running in the real Deno runtime rather than a dnt shim. */
 export declare const isDeno: boolean;
 /**
  * True if running in a compiled Deno binary.
@@ -18,8 +29,6 @@ export declare const isDeno: boolean;
  * This is evaluated once at module load time.
  */
 export declare const isDenoCompiled: boolean;
-/** True if running in Cloudflare Workers runtime */
-export declare const isCloudflare: boolean;
 /**
  * Detect if running in Node.js (vs Deno) at call time.
  * Use this function instead of the constant when runtime detection needs to happen

package/esm/src/platform/compat/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../../src/src/platform/compat/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,wBAAwB,CAAC;AAelD,wBAAgB,cAAc,IAAI,OAAO,OAAO,CAAC,IAAI,GAAG,SAAS,CAWhE;AAMD;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,GAAG,OAAO,CAQzF;AAuBD,uFAAuF;AACvF,eAAO,MAAM,KAAK,EAAE,OAAwB,CAAC;AAE7C,gGAAgG;AAChG,eAAO,MAAM,MAAM,EAAE,OAAoC,CAAC;AAE1D,0DAA0D;AAC1D,eAAO,MAAM,MAAM,EAAE,OAA4C,CAAC;AAElE;;;;GAIG;AACH,eAAO,MAAM,cAAc,EAAE,OAA0C,CAAC;AAExE,oDAAoD;AACpD,eAAO,MAAM,YAAY,EAAE,OAAgC,CAAC;AAE5D;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAEvC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAK7C;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,IAAI,OAAO,CAE9C"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../../src/src/platform/compat/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,wBAAwB,CAAC;AAMlD,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AAE7E,+EAA+E;AAC/E,wBAAgB,sBAAsB,CAAC,OAAO,EAAE;IAC9C,GAAG,EAAE,OAAO,CAAC;IACb,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;CACf,GAAG,WAAW,CAQd;AAWD,wBAAgB,cAAc,IAAI,OAAO,OAAO,CAAC,IAAI,GAAG,SAAS,CAWhE;AAMD;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,GAAG,OAAO,CAQzF;AAuBD,eAAO,MAAM,WAAW,EAAE,WAKxB,CAAC;AAEH,+EAA+E;AAC/E,eAAO,MAAM,KAAK,EAAE,OAA+B,CAAC;AAEpD,8EAA8E;AAC9E,eAAO,MAAM,YAAY,EAAE,OAAsC,CAAC;AAElE,8EAA8E;AAC9E,eAAO,MAAM,MAAM,EAAE,OAAgC,CAAC;AAEtD,uEAAuE;AACvE,eAAO,MAAM,MAAM,EAAE,OAAgC,CAAC;AAEtD;;;;GAIG;AACH,eAAO,MAAM,cAAc,EAAE,OAA0C,CAAC;AAExE;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAOvC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAK7C;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,IAAI,OAAO,CAE9C"}

package/esm/src/platform/compat/runtime.js

@@ -1,4 +1,18 @@
 import * as dntShim from "../../../_dnt.shims.js";
+/** @internal Exported so overlapping host signals can be regression-tested. */
+export function classifyRuntimeSignals(signals) {
+    // Bun exposes Node compatibility globals. Cloudflare Workers can do the same
+    // when nodejs_compat is enabled, so the more specific host signals must win.
+    if (signals.bun)
+        return "bun";
+    if (signals.cloudflare)
+        return "cloudflare";
+    if (signals.node)
+        return "node";
+    if (signals.deno)
+        return "deno";
+    return "unknown";
+}
 function hasNodeProcess() {
     const global = dntShim.dntGlobalThis;
     return global.process?.versions?.node != null && !global.process?.versions?.deno;
@@ -51,27 +65,38 @@ function isDenoCompiledBinary() {
 function hasCloudflareGlobals() {
     return "caches" in dntShim.dntGlobalThis && "WebSocketPair" in dntShim.dntGlobalThis;
 }
-/** True if running in Bun runtime (check first since Bun has process.versions.node) */
-export const isBun = hasBunGlobal();
-/** True if running in Node.js runtime (has process.versions.node, not Bun, not shimmed Deno) */
-export const isNode = !isBun && hasNodeProcess();
-/** True if running in real Deno runtime (not dnt shim) */
-export const isDeno = !isNode && !isBun && hasRealDeno();
+export const runtimeKind = classifyRuntimeSignals({
+    bun: hasBunGlobal(),
+    cloudflare: hasCloudflareGlobals(),
+    deno: hasRealDeno(),
+    node: hasNodeProcess(),
+});
+/** True if running in Bun runtime (Bun also exposes process.versions.node). */
+export const isBun = runtimeKind === "bun";
+/** True if running in Cloudflare Workers, including nodejs_compat workers. */
+export const isCloudflare = runtimeKind === "cloudflare";
+/** True if running in Node.js rather than a more specific compatible host. */
+export const isNode = runtimeKind === "node";
+/** True if running in the real Deno runtime rather than a dnt shim. */
+export const isDeno = runtimeKind === "deno";
 /**
  * True if running in a compiled Deno binary.
  * Compiled binaries cannot dynamically import HTTP URLs - they must use local file:// paths.
  * This is evaluated once at module load time.
  */
 export const isDenoCompiled = isDeno && isDenoCompiledBinary();
-/** True if running in Cloudflare Workers runtime */
-export const isCloudflare = hasCloudflareGlobals();
 /**
  * Detect if running in Node.js (vs Deno) at call time.
  * Use this function instead of the constant when runtime detection needs to happen
  * at call time (e.g., when bundled with esbuild's __esm lazy initialization pattern).
  */
 export function isNodeRuntime() {
-    return !hasBunGlobal() && hasNodeProcess();
+    return classifyRuntimeSignals({
+        bun: hasBunGlobal(),
+        cloudflare: hasCloudflareGlobals(),
+        deno: false,
+        node: hasNodeProcess(),
+    }) === "node";
 }
 /**
  * Detect if code is executing in a server environment (SSR).

package/esm/src/platform/compat/std/front-matter-yaml.d.ts

@@ -8,6 +8,18 @@ export interface Extract<T> {
     body: string;
     frontMatter: string;
 }
+/**
+ * Extracts YAML front matter with the compatibility behavior used by existing
+ * framework consumers. Scalar roots become an empty attribute object while
+ * object-like roots, including sequences, are returned unchanged.
+ */
 export declare function extract<T = Record<string, unknown>>(text: string): Extract<T>;
+/**
+ * Extracts YAML front matter and requires its root to be a plain mapping.
+ *
+ * Use this at trust boundaries where silently coercing a scalar or sequence
+ * would hide malformed metadata.
+ */
+export declare function extractMapping(text: string): Extract<Record<string, unknown>>;
 export declare function test(text: string): boolean;
 //# sourceMappingURL=front-matter-yaml.d.ts.map

package/esm/src/platform/compat/std/front-matter-yaml.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"front-matter-yaml.d.ts","sourceRoot":"","sources":["../../../../../src/src/platform/compat/std/front-matter-yaml.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,WAAW,OAAO,CAAC,CAAC;IACxB,KAAK,EAAE,CAAC,CAAC;IACT,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAID,wBAAgB,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAkB7E;AAED,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1C"}
+{"version":3,"file":"front-matter-yaml.d.ts","sourceRoot":"","sources":["../../../../../src/src/platform/compat/std/front-matter-yaml.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,WAAW,OAAO,CAAC,CAAC;IACxB,KAAK,EAAE,CAAC,CAAC;IACT,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAuBD;;;;GAIG;AACH,wBAAgB,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAQ7E;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAkBlC;AAED,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1C"}

package/esm/src/platform/compat/std/front-matter-yaml.js

@@ -5,7 +5,7 @@
  */
 import { parse } from "../../../../deps/jsr.io/@std/yaml/1.1.0/parse.js";
 const FRONTMATTER_RE = /^---\r?\n([\s\S]*?)(?:\r?\n)?---(?:\r?\n|$)([\s\S]*)$/;
-export function extract(text) {
+function extractUnknown(text) {
     const match = text.match(FRONTMATTER_RE);
     if (!match) {
         return {
@@ -16,13 +16,45 @@ export function extract(text) {
     }
     const frontMatter = match[1] ?? "";
     const parsed = frontMatter.trim() ? parse(frontMatter) : {};
-    const attrs = (parsed && typeof parsed === "object" ? parsed : {});
     return {
-        attrs,
+        attrs: parsed,
         body: match[2] ?? "",
         frontMatter,
     };
 }
+/**
+ * Extracts YAML front matter with the compatibility behavior used by existing
+ * framework consumers. Scalar roots become an empty attribute object while
+ * object-like roots, including sequences, are returned unchanged.
+ */
+export function extract(text) {
+    const extracted = extractUnknown(text);
+    return {
+        ...extracted,
+        attrs: (extracted.attrs && typeof extracted.attrs === "object" ? extracted.attrs : {}),
+    };
+}
+/**
+ * Extracts YAML front matter and requires its root to be a plain mapping.
+ *
+ * Use this at trust boundaries where silently coercing a scalar or sequence
+ * would hide malformed metadata.
+ */
+export function extractMapping(text) {
+    const extracted = extractUnknown(text);
+    const parsed = extracted.attrs;
+    if (!parsed ||
+        typeof parsed !== "object" ||
+        Array.isArray(parsed) ||
+        (Reflect.getPrototypeOf(parsed) !== Object.prototype &&
+            Reflect.getPrototypeOf(parsed) !== null)) {
+        throw new TypeError("YAML front matter must be a mapping");
+    }
+    return {
+        ...extracted,
+        attrs: parsed,
+    };
+}
 export function test(text) {
     return /^---\r?\n/.test(text);
 }

package/esm/src/platform/compat/temp-directory-prefix.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Validate a prefix before combining it with an operating-system temp root.
+ *
+ * Prefixes are file-name fragments, not paths. Rejecting separators and null
+ * bytes keeps every runtime adapter beneath its selected temp root.
+ */
+export declare function validateTempDirectoryPrefix(prefix: unknown): string;
+//# sourceMappingURL=temp-directory-prefix.d.ts.map

package/esm/src/platform/compat/temp-directory-prefix.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"temp-directory-prefix.d.ts","sourceRoot":"","sources":["../../../../src/src/platform/compat/temp-directory-prefix.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAUnE"}

package/esm/src/platform/compat/temp-directory-prefix.js

@@ -0,0 +1,15 @@
+/**
+ * Validate a prefix before combining it with an operating-system temp root.
+ *
+ * Prefixes are file-name fragments, not paths. Rejecting separators and null
+ * bytes keeps every runtime adapter beneath its selected temp root.
+ */
+export function validateTempDirectoryPrefix(prefix) {
+    if (typeof prefix !== "string") {
+        throw new TypeError("Temporary directory prefix must be a string");
+    }
+    if (prefix.includes("/") || prefix.includes("\\") || prefix.includes("\0")) {
+        throw new TypeError("Temporary directory prefix must not contain path separators or null bytes");
+    }
+    return prefix;
+}

package/esm/src/utils/abort.d.ts

@@ -0,0 +1,10 @@
+/** Convert an arbitrary abort reason into the framework's stable Error shape. */
+export declare function createAbortError(reason?: unknown): Error;
+/** Throw the normalized abort reason when a signal has already been aborted. */
+export declare function throwIfAborted(abortSignal?: AbortSignal): void;
+/**
+ * Await a value while allowing cancellation to win even when the producer
+ * ignores its signal.
+ */
+export declare function awaitAbortable<T>(value: T | PromiseLike<T>, abortSignal?: AbortSignal): Promise<T>;
+//# sourceMappingURL=abort.d.ts.map

package/esm/src/utils/abort.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"abort.d.ts","sourceRoot":"","sources":["../../../src/src/utils/abort.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,wBAAgB,gBAAgB,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,KAAK,CASxD;AAED,gFAAgF;AAChF,wBAAgB,cAAc,CAAC,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,CAI9D;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,CAAC,EACpC,KAAK,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,EACzB,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,CAAC,CAAC,CAqBZ"}