edfcore 0.6.259 → 0.6.261

package/dist/constants.d.ts

@@ -109,5 +109,5 @@ export declare const SIGNAL_FIELD_BLOCK_OFFSETS: {
     readonly reserved: 224;
 };
 /** Published package version. Kept in sync with package.json by a test. */
-export declare const VERSION = "0.6.259";
+export declare const VERSION = "0.6.261";
 //# sourceMappingURL=constants.d.ts.map

package/dist/constants.js

@@ -79,5 +79,5 @@ export const SIGNAL_FIELD_BLOCK_OFFSETS = {
     reserved: 224,
 };
 /** Published package version. Kept in sync with package.json by a test. */
-export const VERSION = '0.6.259';
+export const VERSION = '0.6.261';
 //# sourceMappingURL=constants.js.map

package/dist/options.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,MAAM,CAqBR;AAED;;;;;;;;;;;;;GAaG;AACH;;;;;;;;;;;;;;;GAeG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAc7E;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CA6BlF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAQ5F;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAOzF;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CA4BjF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAQ1E"}
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,MAAM,CAqBR;AAED;;;;;;;;;;;;;GAaG;AACH;;;;;;;;;;;;;;;GAeG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAiC7E;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CA6ClF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAQ5F;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAOzF;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CA4BjF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAQ1E"}

package/dist/options.js

@@ -101,6 +101,23 @@ export function assertMaterializeOptions(options, call) {
             'than an entry in a list, so this call took the default budget. Next: pass it on an ' +
             'options object.');
     }
+    /*
+     * A PENDING PROMISE, the other object the check below lets through — and in this family the one
+     * field is the whole of the argument, so there is nothing left on it to look wrong.
+     *
+     * 0.6.248 added this guard because `MaterializeOptions` "carries that field and nothing else, so
+     * the number is the WHOLE of what a caller holds". A Promise is that sentence again: the budget
+     * read as `undefined`, `resolveMaterializeBudget` returned the 256 MiB default, and the allocation
+     * went ahead — on the option whose entire job is to "refuse before allocating rather than dying
+     * inside it".
+     *
+     * A property read, never a call.
+     */
+    if (typeof options?.then === 'function') {
+        throw new RangeError(`${call}(): the options are a pending Promise, and maxMaterializeBytes is read off the ` +
+            'object rather than awaited — so this call took the default budget and allocated. Next: ' +
+            'await them before passing them.');
+    }
     if (options === undefined || options === null || typeof options === 'object')
         return;
     throw new RangeError(`${call}(): the options are ${describeValue(options)}, not an object — maxMaterializeBytes ` +
@@ -128,6 +145,20 @@ export function assertOptions(options, call, listed) {
             'options rather than entries in a list — so nothing was redacted and every ' +
             `${listed} was listed. Next: pass them on an object.`);
     }
+    /*
+     * A PENDING PROMISE, the other object the check below lets through. 0.6.258 and 0.6.259 closed the
+     * read and parse halves; this is the family where the dropped option is `redactFields`, and
+     * `format.ts` says what that costs: it is "the one option in this package whose silent failure
+     * sends a person's name somewhere it should not go".
+     *
+     * Both options go at once, so a listing asked for twenty rows printed fifty thousand with the
+     * identification bytes in them. A property read, never a call.
+     */
+    if (typeof options?.then === 'function') {
+        throw new RangeError(`${call}(): the options are a pending Promise, and maxItems and redactFields are read off ` +
+            `the object rather than awaited — so nothing was redacted and every ${listed} was ` +
+            'listed. Next: await them before passing them.');
+    }
     if (options === undefined || typeof options === 'object')
         return;
     throw new RangeError(`${call}(): the options are ${describeValue(options)}, not an object — maxItems is a field ` +

package/dist/options.js.map

@@ -1 +1 @@
-{"version":3,"file":"options.js","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAyB,EACzB,IAAY,EACZ,QAAgB;IAEhB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC;;;;;;;;;;;;OAYG;IACH,MAAM,IAAI,UAAU,CAClB,WAAW,IAAI,qCAAqC,aAAa,CAAC,KAAK,CAAC,oBAAoB;QAC1F,kFAAkF;QAClF,qCAAqC,CACxC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH;;;;;;;;;;;;;;;GAeG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAgB,EAAE,IAAY;IACrE,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,UAAU,CAClB,GAAG,IAAI,kFAAkF;YACvF,qFAAqF;YACrF,iBAAiB,CACpB,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO;IACrF,MAAM,IAAI,UAAU,CAClB,GAAG,IAAI,uBAAuB,aAAa,CAAC,OAAO,CAAC,wCAAwC;QAC1F,yFAAyF;QACzF,gDAAgD,CACnD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAgB,EAAE,IAAY,EAAE,MAAc;IAC1E;;;;;;;;;;;;;;OAcG;IACH,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,UAAU,CAClB,GAAG,IAAI,gFAAgF;YACrF,4EAA4E;YAC5E,GAAG,MAAM,4CAA4C,CACxD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO;IACjE,MAAM,IAAI,UAAU,CAClB,GAAG,IAAI,uBAAuB,aAAa,CAAC,OAAO,CAAC,wCAAwC;QAC1F,gDAAgD,MAAM,0BAA0B;QAChF,2CAA2C,CAC9C,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc,EAAE,IAAY,EAAE,WAAmB;IACpF,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO;IAC9D,MAAM,IAAI,UAAU,CAClB,WAAW,IAAI,mCAAmC,aAAa,CAAC,KAAK,CAAC,mBAAmB;QACvF,4FAA4F;QAC5F,GAAG,WAAW,0EAA0E;QACxF,mDAAmD,CACtD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc,EAAE,IAAY,EAAE,OAAe;IACjF,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,OAAO;IAC/D,MAAM,IAAI,UAAU,CAClB,WAAW,IAAI,gCAAgC,aAAa,CAAC,KAAK,CAAC,kBAAkB,OAAO,IAAI;QAC9F,4FAA4F;QAC5F,kFAAkF,CACrF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAyB,EAAE,KAAa;IACvE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC;;;;;;;;;;OAUG;IACH,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,UAAU,CAClB,oDAAoD,aAAa,CAAC,KAAK,CAAC,mBAAmB;YACzF,0FAA0F;YAC1F,mDAAmD,CACtD,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,UAAU,CAClB,2FAA2F;YACzF,wFAAwF;YACxF,gCAAgC,CACnC,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAyB;IAChE,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,EAAE,qBAAqB,EAAE,6BAA6B,CAAC,CAAC;IAChG,IAAI,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IAC/B,MAAM,IAAI,UAAU,CAClB,6DAA6D,MAAM,0BAA0B;QAC3F,0DAA0D;QAC1D,GAAG,6BAA6B,gBAAgB,CACnD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAyB,EACzB,IAAY,EACZ,QAAgB;IAEhB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC;;;;;;;;;;;;OAYG;IACH,MAAM,IAAI,UAAU,CAClB,WAAW,IAAI,qCAAqC,aAAa,CAAC,KAAK,CAAC,oBAAoB;QAC1F,kFAAkF;QAClF,qCAAqC,CACxC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH;;;;;;;;;;;;;;;GAeG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAgB,EAAE,IAAY;IACrE,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,UAAU,CAClB,GAAG,IAAI,kFAAkF;YACvF,qFAAqF;YACrF,iBAAiB,CACpB,CAAC;IACJ,CAAC;IACD;;;;;;;;;;;OAWG;IACH,IAAI,OAAQ,OAAiD,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;QACnF,MAAM,IAAI,UAAU,CAClB,GAAG,IAAI,iFAAiF;YACtF,yFAAyF;YACzF,iCAAiC,CACpC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO;IACrF,MAAM,IAAI,UAAU,CAClB,GAAG,IAAI,uBAAuB,aAAa,CAAC,OAAO,CAAC,wCAAwC;QAC1F,yFAAyF;QACzF,gDAAgD,CACnD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAgB,EAAE,IAAY,EAAE,MAAc;IAC1E;;;;;;;;;;;;;;OAcG;IACH,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,UAAU,CAClB,GAAG,IAAI,gFAAgF;YACrF,4EAA4E;YAC5E,GAAG,MAAM,4CAA4C,CACxD,CAAC;IACJ,CAAC;IACD;;;;;;;;OAQG;IACH,IAAI,OAAQ,OAAiD,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;QACnF,MAAM,IAAI,UAAU,CAClB,GAAG,IAAI,oFAAoF;YACzF,sEAAsE,MAAM,OAAO;YACnF,+CAA+C,CAClD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO;IACjE,MAAM,IAAI,UAAU,CAClB,GAAG,IAAI,uBAAuB,aAAa,CAAC,OAAO,CAAC,wCAAwC;QAC1F,gDAAgD,MAAM,0BAA0B;QAChF,2CAA2C,CAC9C,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc,EAAE,IAAY,EAAE,WAAmB;IACpF,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO;IAC9D,MAAM,IAAI,UAAU,CAClB,WAAW,IAAI,mCAAmC,aAAa,CAAC,KAAK,CAAC,mBAAmB;QACvF,4FAA4F;QAC5F,GAAG,WAAW,0EAA0E;QACxF,mDAAmD,CACtD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc,EAAE,IAAY,EAAE,OAAe;IACjF,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,OAAO;IAC/D,MAAM,IAAI,UAAU,CAClB,WAAW,IAAI,gCAAgC,aAAa,CAAC,KAAK,CAAC,kBAAkB,OAAO,IAAI;QAC9F,4FAA4F;QAC5F,kFAAkF,CACrF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAyB,EAAE,KAAa;IACvE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC;;;;;;;;;;OAUG;IACH,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,UAAU,CAClB,oDAAoD,aAAa,CAAC,KAAK,CAAC,mBAAmB;YACzF,0FAA0F;YAC1F,mDAAmD,CACtD,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,UAAU,CAClB,2FAA2F;YACzF,wFAAwF;YACxF,gCAAgC,CACnC,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAyB;IAChE,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,EAAE,qBAAqB,EAAE,6BAA6B,CAAC,CAAC;IAChG,IAAI,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IAC/B,MAAM,IAAI,UAAU,CAClB,6DAA6D,MAAM,0BAA0B;QAC3F,0DAA0D;QAC1D,GAAG,6BAA6B,gBAAgB,CACnD,CAAC;AACJ,CAAC"}

package/docs/CHANGELOG.md

@@ -6,6 +6,38 @@ alone does not tell you whether you were affected.
 edfcore is pre-1.0. Patch releases have carried behaviour changes where the old behaviour was a
 defect; those are called out below.
 
+## 0.6.261
+
+- **Fixed** `MaterializeOptions` accepted as the Promise that will produce it. 0.6.248 gave this family
+  its first guard and gave the reason: it "carries that field and nothing else, so the number is the
+  WHOLE of what a caller holds". A pending Promise is that sentence from the other side — there is no
+  second field left on the object that could make the call look wrong.
+- `maxMaterializeBytes` read as `undefined`, `resolveMaterializeBudget` returned the 256 MiB default,
+  and the allocation went ahead — on the option whose entire job is to "refuse before allocating rather
+  than dying inside it". A caller who capped a browser tab at four megabytes got that cap on no call.
+- Covers `toPhysical`, `clampToDigitalRange` and `decodeDigital`, the three calls that resolve it. The
+  read half went in 0.6.258, the parse half in 0.6.259 and the listing half in 0.6.260.
+- A property read, never a call: a Promise that never settles is refused rather than awaited. The array
+  and bare-value branches keep their own sentences.
+
+## 0.6.260
+
+- **Fixed** the three listing formatters accepting their options as the Promise that will produce them.
+  `maxItems` and `redactFields` are both read off the object rather than awaited, so both took their
+  defaults at once: a call asking for twenty rows with the identification withheld printed every row it
+  had, with the identification in them, and no `... and N more` line to show the truncation — because
+  there was none.
+- This is the family where the dropped option costs the most. `format.ts` calls `redactFields` "the one
+  option in this package whose silent failure sends a person's name somewhere it should not go", and a
+  redaction policy out of a config file, a session record or a per-user setting is exactly the kind of
+  thing that sits behind an async helper.
+- `assertRedactableFields` exists so a name outside the vocabulary "is refused rather than ignored". A
+  pending Promise has no names on it at all, so that guard saw an empty list and had nothing to refuse.
+- Covers `formatDiagnostics`, `formatAnnotations` and `formatValidationReport`, which resolve these
+  options through one guard. The read half went in 0.6.258 and the parse half in 0.6.259.
+- A property read, never a call: a Promise that never settles is refused rather than awaited. The array
+  and bare-value branches keep their own sentences.
+
 ## 0.6.259
 
 - **Fixed** parse options handed over as the Promise that will produce them, which 0.6.258 named as

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "edfcore",
-  "version": "0.6.259",
+  "version": "0.6.261",
   "description": "Modern, typed, zero-dependency reader for EDF, EDF+, BDF and BDF+ biosignal files. Works in browsers and Node with true random access.",
   "keywords": [
     "edf",

package/src/constants.ts

@@ -93,4 +93,4 @@ export const SIGNAL_FIELD_BLOCK_OFFSETS = {
 } as const;
 
 /** Published package version. Kept in sync with package.json by a test. */
-export const VERSION = '0.6.259';
+export const VERSION = '0.6.261';

package/src/options.ts

@@ -110,6 +110,25 @@ export function assertMaterializeOptions(options: unknown, call: string): void {
         'options object.',
     );
   }
+  /*
+   * A PENDING PROMISE, the other object the check below lets through — and in this family the one
+   * field is the whole of the argument, so there is nothing left on it to look wrong.
+   *
+   * 0.6.248 added this guard because `MaterializeOptions` "carries that field and nothing else, so
+   * the number is the WHOLE of what a caller holds". A Promise is that sentence again: the budget
+   * read as `undefined`, `resolveMaterializeBudget` returned the 256 MiB default, and the allocation
+   * went ahead — on the option whose entire job is to "refuse before allocating rather than dying
+   * inside it".
+   *
+   * A property read, never a call.
+   */
+  if (typeof (options as { then?: unknown } | null | undefined)?.then === 'function') {
+    throw new RangeError(
+      `${call}(): the options are a pending Promise, and maxMaterializeBytes is read off the ` +
+        'object rather than awaited — so this call took the default budget and allocated. Next: ' +
+        'await them before passing them.',
+    );
+  }
   if (options === undefined || options === null || typeof options === 'object') return;
   throw new RangeError(
     `${call}(): the options are ${describeValue(options)}, not an object — maxMaterializeBytes ` +
@@ -141,6 +160,22 @@ export function assertOptions(options: unknown, call: string, listed: string): v
         `${listed} was listed. Next: pass them on an object.`,
     );
   }
+  /*
+   * A PENDING PROMISE, the other object the check below lets through. 0.6.258 and 0.6.259 closed the
+   * read and parse halves; this is the family where the dropped option is `redactFields`, and
+   * `format.ts` says what that costs: it is "the one option in this package whose silent failure
+   * sends a person's name somewhere it should not go".
+   *
+   * Both options go at once, so a listing asked for twenty rows printed fifty thousand with the
+   * identification bytes in them. A property read, never a call.
+   */
+  if (typeof (options as { then?: unknown } | null | undefined)?.then === 'function') {
+    throw new RangeError(
+      `${call}(): the options are a pending Promise, and maxItems and redactFields are read off ` +
+        `the object rather than awaited — so nothing was redacted and every ${listed} was ` +
+        'listed. Next: await them before passing them.',
+    );
+  }
   if (options === undefined || typeof options === 'object') return;
   throw new RangeError(
     `${call}(): the options are ${describeValue(options)}, not an object — maxItems is a field ` +