web-csv-toolbox 0.13.1-next-afac98bd3a41b6e902268ac4ca6a99a8da883c81 → 0.14.0-next-120af8840dd0795dac94d59e32713b96a34e2a41

package/README.md

@@ -56,13 +56,13 @@ A CSV Toolbox utilizing Web Standard APIs.
   - ⏳ Use [`AbortSignal.timeout`](https://developer.mozilla.org/docs/Web/API/AbortSignal/timeout_static) to automatically cancel operations that exceed a specified time limit.
 - 🛡️ **Memory Safety Protection**: Built-in limits prevent memory exhaustion attacks.
   - 🔒 Configurable maximum buffer size (default: 10M characters) to prevent DoS attacks via unbounded input.
-  - 🚨 Throws `RangeError` when buffer exceeds the limit.
+    - 🚨 Throws `RangeError` when buffer exceeds the limit.
   - 📊 Configurable maximum field count (default: 100,000 fields/record) to prevent excessive column attacks.
-  - ⚠️ Throws `RangeError` when field count exceeds the limit.
+    - ⚠️ Throws `RangeError` when field count exceeds the limit.
   - 💾 Configurable maximum binary size (default: 100MB bytes) for ArrayBuffer/Uint8Array inputs.
-  - 🛑 Throws `RangeError` when binary size exceeds the limit.
+    - 🛑 Throws `RangeError` when binary size exceeds the limit.
 - 🎨 **Flexible Source Support**
-  - 🧩 Parse CSVs directly from `string`s, `ReadableStream`s, or `Response` objects.
+  - 🧩 Parse CSVs directly from `string`s, `ReadableStream`s, `Response` objects, `Blob`/`File` objects, or `Request` objects.
 - ⚙️ **Advanced Parsing Options**: Customize your experience with various delimiters and quotation marks.
   - 🔄 Defaults to `,` and `"` respectively.
 - 💾 **Specialized Binary CSV Parsing**: Leverage Stream-based processing for versatility and strength.
@@ -173,6 +173,47 @@ for await (const record of parse(response)) {
 // { name: 'Bob', age: '69' }
 ```
 
+### Parsing CSV files from `Blob` or `File` objects
+
+```js
+import { parse } from 'web-csv-toolbox';
+
+// From file input
+const fileInput = document.querySelector('input[type="file"]');
+fileInput.addEventListener('change', async (e) => {
+  const file = e.target.files[0];
+
+  for await (const record of parse(file)) {
+    console.log(record);
+  }
+  // Prints:
+  // { name: 'Alice', age: '42' }
+  // { name: 'Bob', age: '69' }
+});
+```
+
+### Parsing CSV files from `Request` objects (Server-side)
+
+```js
+import { parse } from 'web-csv-toolbox';
+
+// Cloudflare Workers / Service Workers
+export default {
+  async fetch(request) {
+    if (request.method === 'POST') {
+      for await (const record of parse(request)) {
+        console.log(record);
+      }
+      // Prints:
+      // { name: 'Alice', age: '42' }
+      // { name: 'Bob', age: '69' }
+
+      return new Response('OK', { status: 200 });
+    }
+  }
+};
+```
+
 ### Parsing CSV files with different delimiters and quotation characters
 
 ```js
@@ -316,6 +357,19 @@ try {
 
 - Verify that JavaScript is executable on the Deno. [![Deno CI](https://github.com/kamiazya/web-csv-toolbox/actions/workflows/deno.yaml/badge.svg)](https://github.com/kamiazya/web-csv-toolbox/actions/workflows/deno.yaml)
 
+### Platform-Specific Usage Guide 📚
+
+For detailed examples and best practices for your specific runtime environment, see:
+
+**[Platform-Specific Usage Guide](./docs/how-to-guides/platform-usage/)**
+
+This guide covers:
+- 🌐 **Browser**: File input, drag-and-drop, Clipboard API, FormData, Fetch API
+- 🟢 **Node.js**: Buffer, fs.ReadStream, HTTP requests, stdin/stdout
+- 🦕 **Deno**: Deno.readFile, Deno.open, fetch API
+- ⚡ **Edge**: Cloudflare Workers, Deno Deploy, Vercel Edge Functions
+- 🐰 **Bun**: File API, HTTP server
+
 ## APIs 🧑‍💻
 
 ### High-level APIs 🚀
@@ -328,11 +382,14 @@ providing an intuitive and straightforward experience for users.
 - **`function parse.toArray(input[, options]): Promise<CSVRecord[]>`**: [📑](https://kamiazya.github.io/web-csv-toolbox/functions/parse.toArray.html)
   - Parses CSV input into an array of records, ideal for smaller data sets.
 
-The `input` paramater can be a `string`, a [ReadableStream](https://developer.mozilla.org/docs/Web/API/ReadableStream)
-of `string`s or [Uint8Array](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Uint8Array)s,
-or a [Uint8Array](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Uint8Array) object,
-or a [ArrayBuffer](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/ArrayBuffer) object,
-or a [Response](https://developer.mozilla.org/docs/Web/API/Response) object.
+The `input` paramater can be:
+- a `string`
+- a [ReadableStream](https://developer.mozilla.org/docs/Web/API/ReadableStream) of `string`s or [Uint8Array](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Uint8Array)s
+- a [Uint8Array](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Uint8Array) object
+- an [ArrayBuffer](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/ArrayBuffer) object
+- a [Response](https://developer.mozilla.org/docs/Web/API/Response) object
+- a [Blob](https://developer.mozilla.org/docs/Web/API/Blob) or [File](https://developer.mozilla.org/docs/Web/API/File) object
+- a [Request](https://developer.mozilla.org/docs/Web/API/Request) object (server-side)
 
 ### Middle-level APIs 🧱
 
@@ -345,6 +402,12 @@ catering to users who need more detailed and fine-tuned functionality.
   - Parse CSV Binary of ArrayBuffer or Uint8Array.
 - **`function parseResponse(response[, options])`**: [📑](https://kamiazya.github.io/web-csv-toolbox/functions/parseResponse-1.html)
   - Customized parsing directly from `Response` objects.
+- **`function parseRequest(request[, options])`**: [📑](https://kamiazya.github.io/web-csv-toolbox/functions/parseRequest-1.html)
+  - Server-side parsing from `Request` objects (Cloudflare Workers, Service Workers, etc.).
+- **`function parseBlob(blob[, options])`**: [📑](https://kamiazya.github.io/web-csv-toolbox/functions/parseBlob-1.html)
+  - Parse CSV data from `Blob` or `File` objects.
+- **`function parseFile(file[, options])`**: [📑](https://kamiazya.github.io/web-csv-toolbox/functions/parseFile-1.html)
+  - Alias for `parseBlob`, semantically clearer for `File` objects.
 - **`function parseStream(stream[, options])`**: [📑](https://kamiazya.github.io/web-csv-toolbox/functions/parseStream-1.html)
   - Stream-based parsing for larger or continuous data.
 - **`function parseStringStream(stream[, options])`**: [📑](https://kamiazya.github.io/web-csv-toolbox/functions/parseStringStream-1.html)

package/dist/CSVRecordAssembler.js

@@ -92,6 +92,20 @@ class CSVRecordAssembler {
   }
   /**
    * Flushes any remaining buffered data as a final record.
+   *
+   * @remarks
+   * Prototype Pollution Safety:
+   * This method uses Object.fromEntries() to create record objects from CSV data.
+   * Object.fromEntries() is safe from prototype pollution because it creates
+   * own properties (not prototype properties) even when keys like "__proto__",
+   * "constructor", or "prototype" are used.
+   *
+   * For example, Object.fromEntries([["__proto__", "value"]]) creates an object
+   * with an own property "__proto__" set to "value", which does NOT pollute
+   * Object.prototype and does NOT affect other objects.
+   *
+   * This safety is verified by regression tests in:
+   * CSVRecordAssembler.prototype-safety.test.ts
    */
   *#flush() {
     if (this.#header !== void 0) {

package/dist/CSVRecordAssembler.js.map

@@ -1 +1 @@
-{"version":3,"file":"CSVRecordAssembler.js","sources":["../src/CSVRecordAssembler.ts"],"sourcesContent":["import { FieldDelimiter, RecordDelimiter } from \"./common/constants.ts\";\nimport { ParseError } from \"./common/errors.ts\";\nimport type {\n  CSVRecord,\n  CSVRecordAssemblerOptions,\n  Token,\n} from \"./common/types.ts\";\n\n/**\n * Default maximum field count per record (100,000 fields).\n */\nconst DEFAULT_MAX_FIELD_COUNT = 100_000;\n\n/**\n * Options for the CSVRecordAssembler.assemble method.\n */\nexport interface CSVRecordAssemblerAssembleOptions {\n  /**\n   * If true, indicates that more tokens are expected.\n   * If false or omitted, flushes remaining data.\n   */\n  stream?: boolean;\n}\n\n/**\n * CSV Record Assembler.\n *\n * CSVRecordAssembler assembles tokens into CSV records.\n */\nexport class CSVRecordAssembler<Header extends ReadonlyArray<string>> {\n  #fieldIndex = 0;\n  #row: string[] = [];\n  #header: Header | undefined;\n  #dirty = false;\n  #signal?: AbortSignal;\n  #maxFieldCount: number;\n  #skipEmptyLines: boolean;\n\n  constructor(options: CSVRecordAssemblerOptions<Header> = {}) {\n    const mfc = options.maxFieldCount ?? DEFAULT_MAX_FIELD_COUNT;\n    // Validate maxFieldCount\n    if (\n      !(Number.isFinite(mfc) || mfc === Number.POSITIVE_INFINITY) ||\n      (Number.isFinite(mfc) && (mfc < 1 || !Number.isInteger(mfc)))\n    ) {\n      throw new RangeError(\n        \"maxFieldCount must be a positive integer or Number.POSITIVE_INFINITY\",\n      );\n    }\n    this.#maxFieldCount = mfc;\n    this.#skipEmptyLines = options.skipEmptyLines ?? false;\n    if (options.header !== undefined && Array.isArray(options.header)) {\n      this.#setHeader(options.header);\n    }\n    if (options.signal) {\n      this.#signal = options.signal;\n    }\n  }\n\n  /**\n   * Assembles tokens into CSV records.\n   * @param input - A single token or an iterable of tokens. Omit to flush remaining data.\n   * @param options - Assembler options.\n   * @returns An iterable iterator of CSV records.\n   */\n  public *assemble(\n    input?: Token | Iterable<Token>,\n    options?: CSVRecordAssemblerAssembleOptions,\n  ): IterableIterator<CSVRecord<Header>> {\n    const stream = options?.stream ?? false;\n\n    if (input !== undefined) {\n      // Check if input is iterable (has Symbol.iterator)\n      if (this.#isIterable(input)) {\n        for (const token of input) {\n          yield* this.#processToken(token);\n        }\n      } else {\n        // Single token\n        yield* this.#processToken(input);\n      }\n    }\n\n    if (!stream) {\n      yield* this.#flush();\n    }\n  }\n\n  /**\n   * Checks if a value is iterable.\n   */\n  #isIterable(value: any): value is Iterable<Token> {\n    return value != null && typeof value[Symbol.iterator] === \"function\";\n  }\n\n  /**\n   * Processes a single token and yields a record if one is completed.\n   */\n  *#processToken(token: Token): IterableIterator<CSVRecord<Header>> {\n    this.#signal?.throwIfAborted();\n\n    switch (token.type) {\n      case FieldDelimiter:\n        this.#fieldIndex++;\n        this.#checkFieldCount();\n        this.#dirty = true;\n        break;\n      case RecordDelimiter:\n        if (this.#header === undefined) {\n          this.#setHeader(this.#row as unknown as Header);\n        } else {\n          if (this.#dirty) {\n            yield Object.fromEntries(\n              this.#header\n                .map((header, index) => [header, index] as const)\n                .filter(([header]) => header)\n                .map(([header, index]) => [header, this.#row.at(index)]),\n            ) as unknown as CSVRecord<Header>;\n          } else {\n            if (!this.#skipEmptyLines) {\n              yield Object.fromEntries(\n                this.#header\n                  .filter((header) => header)\n                  .map((header) => [header, \"\"]),\n              ) as CSVRecord<Header>;\n            }\n          }\n        }\n        // Reset the row fields buffer.\n        this.#fieldIndex = 0;\n        this.#row = new Array(this.#header?.length).fill(\"\");\n        this.#dirty = false;\n        break;\n      default:\n        this.#dirty = true;\n        this.#row[this.#fieldIndex] = token.value;\n        break;\n    }\n  }\n\n  /**\n   * Flushes any remaining buffered data as a final record.\n   */\n  *#flush(): IterableIterator<CSVRecord<Header>> {\n    if (this.#header !== undefined) {\n      if (this.#dirty) {\n        yield Object.fromEntries(\n          this.#header\n            .map((header, index) => [header, index] as const)\n            .filter(([header]) => header)\n            .map(([header, index]) => [header, this.#row.at(index)]),\n        ) as unknown as CSVRecord<Header>;\n      }\n    }\n  }\n\n  #checkFieldCount(): void {\n    if (this.#fieldIndex + 1 > this.#maxFieldCount) {\n      throw new RangeError(\n        `Field count (${this.#fieldIndex + 1}) exceeded maximum allowed count of ${this.#maxFieldCount}`,\n      );\n    }\n  }\n\n  #setHeader(header: Header) {\n    if (header.length > this.#maxFieldCount) {\n      throw new RangeError(\n        `Header field count (${header.length}) exceeded maximum allowed count of ${this.#maxFieldCount}`,\n      );\n    }\n    this.#header = header;\n    if (this.#header.length === 0) {\n      throw new ParseError(\"The header must not be empty.\");\n    }\n    if (new Set(this.#header).size !== this.#header.length) {\n      throw new ParseError(\"The header must not contain duplicate fields.\");\n    }\n  }\n}\n"],"names":[],"mappings":";;;AAWA,MAAM,uBAAA,GAA0B,GAAA;AAkBzB,MAAM,kBAAA,CAAyD;AAAA,EACpE,WAAA,GAAc,CAAA;AAAA,EACd,OAAiB,EAAC;AAAA,EAClB,OAAA;AAAA,EACA,MAAA,GAAS,KAAA;AAAA,EACT,OAAA;AAAA,EACA,cAAA;AAAA,EACA,eAAA;AAAA,EAEA,WAAA,CAAY,OAAA,GAA6C,EAAC,EAAG;AAC3D,IAAA,MAAM,GAAA,GAAM,QAAQ,aAAA,IAAiB,uBAAA;AAErC,IAAA,IACE,EAAE,MAAA,CAAO,QAAA,CAAS,GAAG,CAAA,IAAK,GAAA,KAAQ,OAAO,iBAAA,CAAA,IACxC,MAAA,CAAO,QAAA,CAAS,GAAG,MAAM,GAAA,GAAM,CAAA,IAAK,CAAC,MAAA,CAAO,SAAA,CAAU,GAAG,CAAA,CAAA,EAC1D;AACA,MAAA,MAAM,IAAI,UAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AACA,IAAA,IAAA,CAAK,cAAA,GAAiB,GAAA;AACtB,IAAA,IAAA,CAAK,eAAA,GAAkB,QAAQ,cAAA,IAAkB,KAAA;AACjD,IAAA,IAAI,QAAQ,MAAA,KAAW,MAAA,IAAa,MAAM,OAAA,CAAQ,OAAA,CAAQ,MAAM,CAAA,EAAG;AACjE,MAAA,IAAA,CAAK,UAAA,CAAW,QAAQ,MAAM,CAAA;AAAA,IAChC;AACA,IAAA,IAAI,QAAQ,MAAA,EAAQ;AAClB,MAAA,IAAA,CAAK,UAAU,OAAA,CAAQ,MAAA;AAAA,IACzB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,CAAQ,QAAA,CACN,KAAA,EACA,OAAA,EACqC;AACrC,IAAA,MAAM,MAAA,GAAS,SAAS,MAAA,IAAU,KAAA;AAElC,IAAA,IAAI,UAAU,MAAA,EAAW;AAEvB,MAAA,IAAI,IAAA,CAAK,WAAA,CAAY,KAAK,CAAA,EAAG;AAC3B,QAAA,KAAA,MAAW,SAAS,KAAA,EAAO;AACzB,UAAA,OAAO,IAAA,CAAK,cAAc,KAAK,CAAA;AAAA,QACjC;AAAA,MACF,CAAA,MAAO;AAEL,QAAA,OAAO,IAAA,CAAK,cAAc,KAAK,CAAA;AAAA,MACjC;AAAA,IACF;AAEA,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,OAAO,KAAK,MAAA,EAAO;AAAA,IACrB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,YAAY,KAAA,EAAsC;AAChD,IAAA,OAAO,SAAS,IAAA,IAAQ,OAAO,KAAA,CAAM,MAAA,CAAO,QAAQ,CAAA,KAAM,UAAA;AAAA,EAC5D;AAAA;AAAA;AAAA;AAAA,EAKA,CAAC,cAAc,KAAA,EAAmD;AAChE,IAAA,IAAA,CAAK,SAAS,cAAA,EAAe;AAE7B,IAAA,QAAQ,MAAM,IAAA;AAAM,MAClB,KAAK,cAAA;AACH,QAAA,IAAA,CAAK,WAAA,EAAA;AACL,QAAA,IAAA,CAAK,gBAAA,EAAiB;AACtB,QAAA,IAAA,CAAK,MAAA,GAAS,IAAA;AACd,QAAA;AAAA,MACF,KAAK,eAAA;AACH,QAAA,IAAI,IAAA,CAAK,YAAY,MAAA,EAAW;AAC9B,UAAA,IAAA,CAAK,UAAA,CAAW,KAAK,IAAyB,CAAA;AAAA,QAChD,CAAA,MAAO;AACL,UAAA,IAAI,KAAK,MAAA,EAAQ;AACf,YAAA,MAAM,MAAA,CAAO,WAAA;AAAA,cACX,IAAA,CAAK,OAAA,CACF,GAAA,CAAI,CAAC,MAAA,EAAQ,KAAA,KAAU,CAAC,MAAA,EAAQ,KAAK,CAAU,CAAA,CAC/C,MAAA,CAAO,CAAC,CAAC,MAAM,CAAA,KAAM,MAAM,CAAA,CAC3B,GAAA,CAAI,CAAC,CAAC,QAAQ,KAAK,CAAA,KAAM,CAAC,MAAA,EAAQ,IAAA,CAAK,IAAA,CAAK,EAAA,CAAG,KAAK,CAAC,CAAC;AAAA,aAC3D;AAAA,UACF,CAAA,MAAO;AACL,YAAA,IAAI,CAAC,KAAK,eAAA,EAAiB;AACzB,cAAA,MAAM,MAAA,CAAO,WAAA;AAAA,gBACX,IAAA,CAAK,OAAA,CACF,MAAA,CAAO,CAAC,MAAA,KAAW,MAAM,CAAA,CACzB,GAAA,CAAI,CAAC,MAAA,KAAW,CAAC,MAAA,EAAQ,EAAE,CAAC;AAAA,eACjC;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAEA,QAAA,IAAA,CAAK,WAAA,GAAc,CAAA;AACnB,QAAA,IAAA,CAAK,IAAA,GAAO,IAAI,KAAA,CAAM,IAAA,CAAK,SAAS,MAAM,CAAA,CAAE,KAAK,EAAE,CAAA;AACnD,QAAA,IAAA,CAAK,MAAA,GAAS,KAAA;AACd,QAAA;AAAA,MACF;AACE,QAAA,IAAA,CAAK,MAAA,GAAS,IAAA;AACd,QAAA,IAAA,CAAK,IAAA,CAAK,IAAA,CAAK,WAAW,CAAA,GAAI,KAAA,CAAM,KAAA;AACpC,QAAA;AAAA;AACJ,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,CAAC,MAAA,GAA8C;AAC7C,IAAA,IAAI,IAAA,CAAK,YAAY,MAAA,EAAW;AAC9B,MAAA,IAAI,KAAK,MAAA,EAAQ;AACf,QAAA,MAAM,MAAA,CAAO,WAAA;AAAA,UACX,IAAA,CAAK,OAAA,CACF,GAAA,CAAI,CAAC,MAAA,EAAQ,KAAA,KAAU,CAAC,MAAA,EAAQ,KAAK,CAAU,CAAA,CAC/C,MAAA,CAAO,CAAC,CAAC,MAAM,CAAA,KAAM,MAAM,CAAA,CAC3B,GAAA,CAAI,CAAC,CAAC,QAAQ,KAAK,CAAA,KAAM,CAAC,MAAA,EAAQ,IAAA,CAAK,IAAA,CAAK,EAAA,CAAG,KAAK,CAAC,CAAC;AAAA,SAC3D;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,gBAAA,GAAyB;AACvB,IAAA,IAAI,IAAA,CAAK,WAAA,GAAc,CAAA,GAAI,IAAA,CAAK,cAAA,EAAgB;AAC9C,MAAA,MAAM,IAAI,UAAA;AAAA,QACR,gBAAgB,IAAA,CAAK,WAAA,GAAc,CAAC,CAAA,oCAAA,EAAuC,KAAK,cAAc,CAAA;AAAA,OAChG;AAAA,IACF;AAAA,EACF;AAAA,EAEA,WAAW,MAAA,EAAgB;AACzB,IAAA,IAAI,MAAA,CAAO,MAAA,GAAS,IAAA,CAAK,cAAA,EAAgB;AACvC,MAAA,MAAM,IAAI,UAAA;AAAA,QACR,CAAA,oBAAA,EAAuB,MAAA,CAAO,MAAM,CAAA,oCAAA,EAAuC,KAAK,cAAc,CAAA;AAAA,OAChG;AAAA,IACF;AACA,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA;AACf,IAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG;AAC7B,MAAA,MAAM,IAAI,WAAW,+BAA+B,CAAA;AAAA,IACtD;AACA,IAAA,IAAI,IAAI,IAAI,IAAA,CAAK,OAAO,EAAE,IAAA,KAAS,IAAA,CAAK,QAAQ,MAAA,EAAQ;AACtD,MAAA,MAAM,IAAI,WAAW,+CAA+C,CAAA;AAAA,IACtE;AAAA,EACF;AACF;;;;"}
+{"version":3,"file":"CSVRecordAssembler.js","sources":["../src/CSVRecordAssembler.ts"],"sourcesContent":["import { FieldDelimiter, RecordDelimiter } from \"./common/constants.ts\";\nimport { ParseError } from \"./common/errors.ts\";\nimport type {\n  CSVRecord,\n  CSVRecordAssemblerOptions,\n  Token,\n} from \"./common/types.ts\";\n\n/**\n * Default maximum field count per record (100,000 fields).\n */\nconst DEFAULT_MAX_FIELD_COUNT = 100_000;\n\n/**\n * Options for the CSVRecordAssembler.assemble method.\n */\nexport interface CSVRecordAssemblerAssembleOptions {\n  /**\n   * If true, indicates that more tokens are expected.\n   * If false or omitted, flushes remaining data.\n   */\n  stream?: boolean;\n}\n\n/**\n * CSV Record Assembler.\n *\n * CSVRecordAssembler assembles tokens into CSV records.\n */\nexport class CSVRecordAssembler<Header extends ReadonlyArray<string>> {\n  #fieldIndex = 0;\n  #row: string[] = [];\n  #header: Header | undefined;\n  #dirty = false;\n  #signal?: AbortSignal;\n  #maxFieldCount: number;\n  #skipEmptyLines: boolean;\n\n  constructor(options: CSVRecordAssemblerOptions<Header> = {}) {\n    const mfc = options.maxFieldCount ?? DEFAULT_MAX_FIELD_COUNT;\n    // Validate maxFieldCount\n    if (\n      !(Number.isFinite(mfc) || mfc === Number.POSITIVE_INFINITY) ||\n      (Number.isFinite(mfc) && (mfc < 1 || !Number.isInteger(mfc)))\n    ) {\n      throw new RangeError(\n        \"maxFieldCount must be a positive integer or Number.POSITIVE_INFINITY\",\n      );\n    }\n    this.#maxFieldCount = mfc;\n    this.#skipEmptyLines = options.skipEmptyLines ?? false;\n    if (options.header !== undefined && Array.isArray(options.header)) {\n      this.#setHeader(options.header);\n    }\n    if (options.signal) {\n      this.#signal = options.signal;\n    }\n  }\n\n  /**\n   * Assembles tokens into CSV records.\n   * @param input - A single token or an iterable of tokens. Omit to flush remaining data.\n   * @param options - Assembler options.\n   * @returns An iterable iterator of CSV records.\n   */\n  public *assemble(\n    input?: Token | Iterable<Token>,\n    options?: CSVRecordAssemblerAssembleOptions,\n  ): IterableIterator<CSVRecord<Header>> {\n    const stream = options?.stream ?? false;\n\n    if (input !== undefined) {\n      // Check if input is iterable (has Symbol.iterator)\n      if (this.#isIterable(input)) {\n        for (const token of input) {\n          yield* this.#processToken(token);\n        }\n      } else {\n        // Single token\n        yield* this.#processToken(input);\n      }\n    }\n\n    if (!stream) {\n      yield* this.#flush();\n    }\n  }\n\n  /**\n   * Checks if a value is iterable.\n   */\n  #isIterable(value: any): value is Iterable<Token> {\n    return value != null && typeof value[Symbol.iterator] === \"function\";\n  }\n\n  /**\n   * Processes a single token and yields a record if one is completed.\n   */\n  *#processToken(token: Token): IterableIterator<CSVRecord<Header>> {\n    this.#signal?.throwIfAborted();\n\n    switch (token.type) {\n      case FieldDelimiter:\n        this.#fieldIndex++;\n        this.#checkFieldCount();\n        this.#dirty = true;\n        break;\n      case RecordDelimiter:\n        if (this.#header === undefined) {\n          this.#setHeader(this.#row as unknown as Header);\n        } else {\n          if (this.#dirty) {\n            // SAFETY: Object.fromEntries() is safe from prototype pollution.\n            // See CSVRecordAssembler.prototype-safety.test.ts for details.\n            yield Object.fromEntries(\n              this.#header\n                .map((header, index) => [header, index] as const)\n                .filter(([header]) => header)\n                .map(([header, index]) => [header, this.#row.at(index)]),\n            ) as unknown as CSVRecord<Header>;\n          } else {\n            if (!this.#skipEmptyLines) {\n              // SAFETY: Object.fromEntries() is safe from prototype pollution.\n              // See CSVRecordAssembler.prototype-safety.test.ts for details.\n              yield Object.fromEntries(\n                this.#header\n                  .filter((header) => header)\n                  .map((header) => [header, \"\"]),\n              ) as CSVRecord<Header>;\n            }\n          }\n        }\n        // Reset the row fields buffer.\n        this.#fieldIndex = 0;\n        this.#row = new Array(this.#header?.length).fill(\"\");\n        this.#dirty = false;\n        break;\n      default:\n        this.#dirty = true;\n        this.#row[this.#fieldIndex] = token.value;\n        break;\n    }\n  }\n\n  /**\n   * Flushes any remaining buffered data as a final record.\n   *\n   * @remarks\n   * Prototype Pollution Safety:\n   * This method uses Object.fromEntries() to create record objects from CSV data.\n   * Object.fromEntries() is safe from prototype pollution because it creates\n   * own properties (not prototype properties) even when keys like \"__proto__\",\n   * \"constructor\", or \"prototype\" are used.\n   *\n   * For example, Object.fromEntries([[\"__proto__\", \"value\"]]) creates an object\n   * with an own property \"__proto__\" set to \"value\", which does NOT pollute\n   * Object.prototype and does NOT affect other objects.\n   *\n   * This safety is verified by regression tests in:\n   * CSVRecordAssembler.prototype-safety.test.ts\n   */\n  *#flush(): IterableIterator<CSVRecord<Header>> {\n    if (this.#header !== undefined) {\n      if (this.#dirty) {\n        // SAFETY: Object.fromEntries() creates own properties, preventing prototype pollution\n        // even when CSV headers contain dangerous property names like __proto__, constructor, etc.\n        // See CSVRecordAssembler.prototype-safety.test.ts for verification tests.\n        yield Object.fromEntries(\n          this.#header\n            .map((header, index) => [header, index] as const)\n            .filter(([header]) => header)\n            .map(([header, index]) => [header, this.#row.at(index)]),\n        ) as unknown as CSVRecord<Header>;\n      }\n    }\n  }\n\n  #checkFieldCount(): void {\n    if (this.#fieldIndex + 1 > this.#maxFieldCount) {\n      throw new RangeError(\n        `Field count (${this.#fieldIndex + 1}) exceeded maximum allowed count of ${this.#maxFieldCount}`,\n      );\n    }\n  }\n\n  #setHeader(header: Header) {\n    if (header.length > this.#maxFieldCount) {\n      throw new RangeError(\n        `Header field count (${header.length}) exceeded maximum allowed count of ${this.#maxFieldCount}`,\n      );\n    }\n    this.#header = header;\n    if (this.#header.length === 0) {\n      throw new ParseError(\"The header must not be empty.\");\n    }\n    if (new Set(this.#header).size !== this.#header.length) {\n      throw new ParseError(\"The header must not contain duplicate fields.\");\n    }\n  }\n}\n"],"names":[],"mappings":";;;AAWA,MAAM,uBAAA,GAA0B,GAAA;AAkBzB,MAAM,kBAAA,CAAyD;AAAA,EACpE,WAAA,GAAc,CAAA;AAAA,EACd,OAAiB,EAAC;AAAA,EAClB,OAAA;AAAA,EACA,MAAA,GAAS,KAAA;AAAA,EACT,OAAA;AAAA,EACA,cAAA;AAAA,EACA,eAAA;AAAA,EAEA,WAAA,CAAY,OAAA,GAA6C,EAAC,EAAG;AAC3D,IAAA,MAAM,GAAA,GAAM,QAAQ,aAAA,IAAiB,uBAAA;AAErC,IAAA,IACE,EAAE,MAAA,CAAO,QAAA,CAAS,GAAG,CAAA,IAAK,GAAA,KAAQ,OAAO,iBAAA,CAAA,IACxC,MAAA,CAAO,QAAA,CAAS,GAAG,MAAM,GAAA,GAAM,CAAA,IAAK,CAAC,MAAA,CAAO,SAAA,CAAU,GAAG,CAAA,CAAA,EAC1D;AACA,MAAA,MAAM,IAAI,UAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AACA,IAAA,IAAA,CAAK,cAAA,GAAiB,GAAA;AACtB,IAAA,IAAA,CAAK,eAAA,GAAkB,QAAQ,cAAA,IAAkB,KAAA;AACjD,IAAA,IAAI,QAAQ,MAAA,KAAW,MAAA,IAAa,MAAM,OAAA,CAAQ,OAAA,CAAQ,MAAM,CAAA,EAAG;AACjE,MAAA,IAAA,CAAK,UAAA,CAAW,QAAQ,MAAM,CAAA;AAAA,IAChC;AACA,IAAA,IAAI,QAAQ,MAAA,EAAQ;AAClB,MAAA,IAAA,CAAK,UAAU,OAAA,CAAQ,MAAA;AAAA,IACzB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,CAAQ,QAAA,CACN,KAAA,EACA,OAAA,EACqC;AACrC,IAAA,MAAM,MAAA,GAAS,SAAS,MAAA,IAAU,KAAA;AAElC,IAAA,IAAI,UAAU,MAAA,EAAW;AAEvB,MAAA,IAAI,IAAA,CAAK,WAAA,CAAY,KAAK,CAAA,EAAG;AAC3B,QAAA,KAAA,MAAW,SAAS,KAAA,EAAO;AACzB,UAAA,OAAO,IAAA,CAAK,cAAc,KAAK,CAAA;AAAA,QACjC;AAAA,MACF,CAAA,MAAO;AAEL,QAAA,OAAO,IAAA,CAAK,cAAc,KAAK,CAAA;AAAA,MACjC;AAAA,IACF;AAEA,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,OAAO,KAAK,MAAA,EAAO;AAAA,IACrB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,YAAY,KAAA,EAAsC;AAChD,IAAA,OAAO,SAAS,IAAA,IAAQ,OAAO,KAAA,CAAM,MAAA,CAAO,QAAQ,CAAA,KAAM,UAAA;AAAA,EAC5D;AAAA;AAAA;AAAA;AAAA,EAKA,CAAC,cAAc,KAAA,EAAmD;AAChE,IAAA,IAAA,CAAK,SAAS,cAAA,EAAe;AAE7B,IAAA,QAAQ,MAAM,IAAA;AAAM,MAClB,KAAK,cAAA;AACH,QAAA,IAAA,CAAK,WAAA,EAAA;AACL,QAAA,IAAA,CAAK,gBAAA,EAAiB;AACtB,QAAA,IAAA,CAAK,MAAA,GAAS,IAAA;AACd,QAAA;AAAA,MACF,KAAK,eAAA;AACH,QAAA,IAAI,IAAA,CAAK,YAAY,MAAA,EAAW;AAC9B,UAAA,IAAA,CAAK,UAAA,CAAW,KAAK,IAAyB,CAAA;AAAA,QAChD,CAAA,MAAO;AACL,UAAA,IAAI,KAAK,MAAA,EAAQ;AAGf,YAAA,MAAM,MAAA,CAAO,WAAA;AAAA,cACX,IAAA,CAAK,OAAA,CACF,GAAA,CAAI,CAAC,MAAA,EAAQ,KAAA,KAAU,CAAC,MAAA,EAAQ,KAAK,CAAU,CAAA,CAC/C,MAAA,CAAO,CAAC,CAAC,MAAM,CAAA,KAAM,MAAM,CAAA,CAC3B,GAAA,CAAI,CAAC,CAAC,QAAQ,KAAK,CAAA,KAAM,CAAC,MAAA,EAAQ,IAAA,CAAK,IAAA,CAAK,EAAA,CAAG,KAAK,CAAC,CAAC;AAAA,aAC3D;AAAA,UACF,CAAA,MAAO;AACL,YAAA,IAAI,CAAC,KAAK,eAAA,EAAiB;AAGzB,cAAA,MAAM,MAAA,CAAO,WAAA;AAAA,gBACX,IAAA,CAAK,OAAA,CACF,MAAA,CAAO,CAAC,MAAA,KAAW,MAAM,CAAA,CACzB,GAAA,CAAI,CAAC,MAAA,KAAW,CAAC,MAAA,EAAQ,EAAE,CAAC;AAAA,eACjC;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAEA,QAAA,IAAA,CAAK,WAAA,GAAc,CAAA;AACnB,QAAA,IAAA,CAAK,IAAA,GAAO,IAAI,KAAA,CAAM,IAAA,CAAK,SAAS,MAAM,CAAA,CAAE,KAAK,EAAE,CAAA;AACnD,QAAA,IAAA,CAAK,MAAA,GAAS,KAAA;AACd,QAAA;AAAA,MACF;AACE,QAAA,IAAA,CAAK,MAAA,GAAS,IAAA;AACd,QAAA,IAAA,CAAK,IAAA,CAAK,IAAA,CAAK,WAAW,CAAA,GAAI,KAAA,CAAM,KAAA;AACpC,QAAA;AAAA;AACJ,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmBA,CAAC,MAAA,GAA8C;AAC7C,IAAA,IAAI,IAAA,CAAK,YAAY,MAAA,EAAW;AAC9B,MAAA,IAAI,KAAK,MAAA,EAAQ;AAIf,QAAA,MAAM,MAAA,CAAO,WAAA;AAAA,UACX,IAAA,CAAK,OAAA,CACF,GAAA,CAAI,CAAC,MAAA,EAAQ,KAAA,KAAU,CAAC,MAAA,EAAQ,KAAK,CAAU,CAAA,CAC/C,MAAA,CAAO,CAAC,CAAC,MAAM,CAAA,KAAM,MAAM,CAAA,CAC3B,GAAA,CAAI,CAAC,CAAC,QAAQ,KAAK,CAAA,KAAM,CAAC,MAAA,EAAQ,IAAA,CAAK,IAAA,CAAK,EAAA,CAAG,KAAK,CAAC,CAAC;AAAA,SAC3D;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,gBAAA,GAAyB;AACvB,IAAA,IAAI,IAAA,CAAK,WAAA,GAAc,CAAA,GAAI,IAAA,CAAK,cAAA,EAAgB;AAC9C,MAAA,MAAM,IAAI,UAAA;AAAA,QACR,gBAAgB,IAAA,CAAK,WAAA,GAAc,CAAC,CAAA,oCAAA,EAAuC,KAAK,cAAc,CAAA;AAAA,OAChG;AAAA,IACF;AAAA,EACF;AAAA,EAEA,WAAW,MAAA,EAAgB;AACzB,IAAA,IAAI,MAAA,CAAO,MAAA,GAAS,IAAA,CAAK,cAAA,EAAgB;AACvC,MAAA,MAAM,IAAI,UAAA;AAAA,QACR,CAAA,oBAAA,EAAuB,MAAA,CAAO,MAAM,CAAA,oCAAA,EAAuC,KAAK,cAAc,CAAA;AAAA,OAChG;AAAA,IACF;AACA,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA;AACf,IAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG;AAC7B,MAAA,MAAM,IAAI,WAAW,+BAA+B,CAAA;AAAA,IACtD;AACA,IAAA,IAAI,IAAI,IAAI,IAAA,CAAK,OAAO,EAAE,IAAA,KAAS,IAAA,CAAK,QAAQ,MAAA,EAAQ;AACtD,MAAA,MAAM,IAAI,WAAW,+CAA+C,CAAA;AAAA,IACtE;AAAA,EACF;AACF;;;;"}