pub struct Limits {Show 276 fields
pub max_input_bytes: u64,
pub max_output_bytes: u64,
pub max_replay_bytes: u64,
pub max_record_len: u32,
pub max_record_count: u32,
pub max_object_count: u32,
pub max_graph_ops: u32,
pub max_repeat_count: u64,
pub max_channel_symbols: u64,
pub max_model_count: u32,
pub max_channel_count: u32,
pub max_entropy_model_bytes: u32,
pub max_pdf_spans: u32,
pub max_index_selectors: u32,
pub max_directory_bytes: u32,
pub max_checkpoint_bytes: u32,
pub max_zip_members: u32,
pub max_zip_member_compressed: u64,
pub max_zip_member_uncompressed: u64,
pub max_zip_aggregate_uncompressed: u64,
pub max_zip_compression_ratio: u32,
pub max_zip_name_bytes: u32,
pub max_zip_extra_bytes: u32,
pub max_zip_entry_comment_bytes: u32,
pub max_zip_archive_comment_bytes: u32,
pub max_zip_central_dir_bytes: u64,
pub max_zip_prefix_bytes: u64,
pub max_zip_trailing_bytes: u64,
pub max_xml_depth: u32,
pub max_xml_part_bytes: u64,
pub max_xml_events: u64,
pub max_xml_nodes: u64,
pub max_xml_attrs_per_element: u32,
pub max_xml_text_bytes: u64,
pub max_xml_document_bytes: u64,
pub max_opc_rels: u32,
pub max_opc_rel_depth: u32,
pub max_opc_content_types_overrides: u32,
pub max_opc_part_name_bytes: u32,
pub max_epub_rootfiles: u32,
pub max_epub_manifest_items: u32,
pub max_epub_spine_items: u32,
pub max_epub_nav_depth: u32,
pub max_epub_fallback_chain: u32,
pub max_xhtml_nodes: u32,
pub max_odt_manifest_entries: u32,
pub max_odt_blocks: u32,
pub max_odt_notes: u32,
pub max_ods_sheets: u32,
pub max_ods_cells: u64,
pub max_ods_repeated_span: u32,
pub max_ods_merges: u32,
pub max_ods_named_expressions: u32,
pub max_ods_styles: u32,
pub max_ods_comments: u32,
pub max_xlsx_sheets: u32,
pub max_xlsx_cells: u64,
pub max_xlsx_shared_strings: u32,
pub max_xlsx_merges: u32,
pub max_xlsx_hyperlinks: u32,
pub max_xlsx_comments: u32,
pub max_xlsx_tables: u32,
pub max_xlsx_table_columns: u32,
pub max_xlsx_defined_names: u32,
pub max_xlsx_drawings: u32,
pub max_xlsx_style_records: u32,
pub max_xlsx_col: u32,
pub max_xlsx_row: u32,
pub max_pptx_slides: u32,
pub max_pptx_shapes_per_slide: u32,
pub max_pptx_text_runs: u32,
pub max_pptx_group_depth: u32,
pub max_pptx_media: u32,
pub max_pptx_tables: u32,
pub max_pptx_table_cells: u32,
pub max_pptx_notes: u32,
pub max_pptx_layouts: u32,
pub max_pptx_masters: u32,
pub max_odp_slides: u32,
pub max_odp_shapes_per_slide: u32,
pub max_odp_text_runs: u32,
pub max_odp_group_depth: u32,
pub max_odp_media: u32,
pub max_odp_tables: u32,
pub max_odp_table_cells: u32,
pub max_odp_notes: u32,
pub max_odp_masters: u32,
pub max_json_depth: u32,
pub max_json_nodes: u32,
pub max_json_string_bytes: u64,
pub max_json_document_bytes: u64,
pub max_json5_depth: u32,
pub max_json5_nodes: u32,
pub max_json5_string_bytes: u64,
pub max_json5_comments: u32,
pub max_json5_document_bytes: u64,
pub max_yaml_depth: u32,
pub max_yaml_nodes: u32,
pub max_yaml_scalars: u32,
pub max_yaml_anchors: u32,
pub max_yaml_documents: u32,
pub max_yaml_string_bytes: u64,
pub max_yaml_document_bytes: u64,
pub max_csv_rows: u32,
pub max_csv_cols: u32,
pub max_csv_record_bytes: u32,
pub max_csv_field_bytes: u32,
pub max_csv_document_bytes: u64,
pub max_csv_sampled_records_for_detection: u32,
pub max_markdown_depth: u32,
pub max_markdown_nodes: u32,
pub max_markdown_blocks: u32,
pub max_markdown_inline_spans: u32,
pub max_markdown_code_bytes: u64,
pub max_markdown_document_bytes: u64,
pub max_html_depth: u32,
pub max_html_nodes: u32,
pub max_html_attrs: u64,
pub max_html_text_bytes: u64,
pub max_html_script_bytes: u64,
pub max_html_document_bytes: u64,
pub max_toml_depth: u32,
pub max_toml_nodes: u32,
pub max_toml_keys: u64,
pub max_toml_string_bytes: u64,
pub max_toml_document_bytes: u64,
pub max_jsonl_records: u32,
pub max_jsonl_line_bytes: u64,
pub max_jsonl_nodes: u32,
pub max_jsonl_document_bytes: u64,
pub max_eml_depth: u32,
pub max_eml_parts: u32,
pub max_eml_headers: u32,
pub max_eml_part_bytes: u64,
pub max_eml_decoded_bytes: u64,
pub max_eml_document_bytes: u64,
pub max_parquet_row_groups: u32,
pub max_parquet_columns: u32,
pub max_parquet_pages_per_chunk: u32,
pub max_parquet_values: u64,
pub max_parquet_decompressed_bytes: u64,
pub max_parquet_document_bytes: u64,
pub max_parquet_footer_bytes: u64,
pub max_arrow_messages: u32,
pub max_arrow_columns: u32,
pub max_arrow_batches: u32,
pub max_arrow_rows: u64,
pub max_arrow_buffers: u64,
pub max_arrow_values: u64,
pub max_arrow_decompressed_bytes: u64,
pub max_arrow_document_bytes: u64,
pub max_arrow_metadata_bytes: u64,
pub max_cbor_depth: u32,
pub max_cbor_nodes: u32,
pub max_cbor_string_bytes: u64,
pub max_cbor_document_bytes: u64,
pub max_msgpack_depth: u32,
pub max_msgpack_nodes: u32,
pub max_msgpack_str_bytes: u64,
pub max_msgpack_bin_bytes: u64,
pub max_msgpack_ext_bytes: u64,
pub max_msgpack_document_bytes: u64,
pub max_config_lines: u32,
pub max_config_nodes: u32,
pub max_config_entries: u32,
pub max_config_depth: u32,
pub max_config_line_bytes: u64,
pub max_config_key_bytes: u64,
pub max_config_value_bytes: u64,
pub max_config_document_bytes: u64,
pub max_feed_entries: u32,
pub max_feed_fields: u32,
pub max_feed_field_bytes: u64,
pub max_feed_text_bytes: u64,
pub max_feed_document_bytes: u64,
pub max_geojson_features: u32,
pub max_geojson_geometries: u32,
pub max_geojson_coordinates: u64,
pub max_geojson_depth: u32,
pub max_geojson_nodes: u32,
pub max_geojson_document_bytes: u64,
pub max_gis_placemarks: u32,
pub max_gis_tracks: u32,
pub max_gis_points: u32,
pub max_gis_depth: u32,
pub max_gis_nodes: u32,
pub max_gis_text_bytes: u64,
pub max_gis_document_bytes: u64,
pub max_notebook_cells: u32,
pub max_notebook_outputs: u32,
pub max_notebook_nodes: u32,
pub max_notebook_depth: u32,
pub max_notebook_source_bytes: u64,
pub max_notebook_document_bytes: u64,
pub max_fixedwidth_rows: u32,
pub max_fixedwidth_cols: u32,
pub max_fixedwidth_record_bytes: u32,
pub max_fixedwidth_field_bytes: u32,
pub max_fixedwidth_document_bytes: u64,
pub max_fixedwidth_sampled_lines_for_detection: u32,
pub max_rst_blocks: u32,
pub max_rst_inline_spans: u32,
pub max_rst_nodes: u32,
pub max_rst_depth: u32,
pub max_rst_line_bytes: u64,
pub max_rst_document_bytes: u64,
pub max_asciidoc_blocks: u32,
pub max_asciidoc_inline_spans: u32,
pub max_asciidoc_nodes: u32,
pub max_asciidoc_depth: u32,
pub max_asciidoc_line_bytes: u64,
pub max_asciidoc_document_bytes: u64,
pub max_mdx_esm_statements: u32,
pub max_mdx_jsx_blocks: u32,
pub max_mdx_expressions: u32,
pub max_mdx_nodes: u32,
pub max_mdx_depth: u32,
pub max_mdx_line_bytes: u64,
pub max_mdx_document_bytes: u64,
pub max_mhtml_parts: u32,
pub max_mhtml_headers: u32,
pub max_mhtml_depth: u32,
pub max_mhtml_resources: u32,
pub max_mhtml_decoded_bytes: u64,
pub max_mhtml_nodes: u32,
pub max_mhtml_document_bytes: u64,
pub max_logstream_records: u32,
pub max_logstream_fields: u64,
pub max_logstream_sd_elements: u64,
pub max_logstream_line_bytes: u64,
pub max_logstream_depth: u32,
pub max_logstream_document_bytes: u64,
pub max_pkgmeta_nodes: u32,
pub max_pkgmeta_sections: u32,
pub max_pkgmeta_entries: u32,
pub max_pkgmeta_depth: u32,
pub max_pkgmeta_document_bytes: u64,
pub max_apispec_nodes: u32,
pub max_apispec_objects: u32,
pub max_apispec_members: u32,
pub max_apispec_refs: u32,
pub max_apispec_depth: u32,
pub max_apispec_document_bytes: u64,
pub max_bib_entries: u32,
pub max_bib_fields: u64,
pub max_bib_value_bytes: u64,
pub max_bib_nodes: u32,
pub max_bib_depth: u32,
pub max_bib_document_bytes: u64,
pub max_rtf_groups: u32,
pub max_rtf_depth: u32,
pub max_rtf_control_words: u64,
pub max_rtf_text_bytes: u64,
pub max_rtf_hex_escapes: u64,
pub max_rtf_document_bytes: u64,
pub max_container_members: u64,
pub max_container_name_bytes: u64,
pub max_container_entry_name_bytes: u64,
pub max_container_extensions: u64,
pub max_container_path_depth: u64,
pub max_container_document_bytes: u64,
pub max_hdf_objects: u64,
pub max_hdf_dimensions: u64,
pub max_hdf_attributes: u64,
pub max_hdf_depth: u32,
pub max_hdf_name_bytes: u64,
pub max_hdf_entry_name_bytes: u64,
pub max_hdf_attr_value_bytes: u64,
pub max_hdf_document_bytes: u64,
pub max_cfbf_entries: u64,
pub max_cfbf_streams: u64,
pub max_cfbf_depth: u32,
pub max_cfbf_name_bytes: u64,
pub max_cfbf_entry_name_bytes: u64,
pub max_cfbf_chain_sectors: u64,
pub max_cfbf_document_bytes: u64,
}Expand description
Hard upper bounds applied while parsing and materializing a descriptor.
Fields§
§max_input_bytes: u64Maximum accepted source/descriptor input size.
max_output_bytes: u64Maximum reconstructed output size for a single materialization.
max_replay_bytes: u64Admission cap on the output of a single DEFLATE_REPLAY.
This is a VOLE replay-profile policy limit, not an RFC 1951 maximum.
RFC 1951 permits arbitrarily many empty non-final stored blocks, so it
gives no finite f(decompressed_size) bound on compressed_size; a
bitstream that inflates to zero bytes may be arbitrarily large. VOLE
therefore declines to replay a descriptor whose declared output exceeds
this policy cap (see ADR-0016).
max_record_len: u32Maximum length of a single record payload.
max_record_count: u32Maximum number of records in a container.
max_object_count: u32Maximum number of distinct byte objects (OBJECT records).
max_graph_ops: u32Maximum number of DRA instructions in a reconstruction graph.
max_repeat_count: u64Maximum repeat count for a single REPEAT_LAST instruction.
max_channel_symbols: u64Maximum number of symbols in a single entropy channel.
max_model_count: u32Maximum number of distinct entropy models (MODEL records).
max_channel_count: u32Maximum number of entropy channels (ENTROPY_CHANNEL records).
max_entropy_model_bytes: u32Maximum encoded size of a single entropy model payload.
max_pdf_spans: u32Maximum number of lexical spans produced for a PDF input.
max_index_selectors: u32Maximum number of selectors in a single OBSERVATION_INDEX record.
Bounds the admissions of the optional partial-decode index (Phase 7.3) before allocation: an index whose selector table would exceed this is rejected at parse and declined by the index builder. It mirrors the object/graph scale so the table cannot dwarf the document it describes.
max_directory_bytes: u32Maximum accepted size of an optional DIRECTORY record payload.
Bounds the seek directory (Phase 8) before allocation: a directory larger
than this is declined at decode rather than trusted. A directory is roughly
13 * record_count bytes, so this also caps the record count a directory
can describe.
max_checkpoint_bytes: u32Maximum accepted size of an optional CHECKPOINT record payload.
Bounds the byte-level partial-materialization checkpoint (Phase 13.4)
before allocation: a checkpoint larger than this is declined at decode
rather than trusted. A checkpoint is 20 + 16 * op_count bytes, so this
also caps the op count a checkpoint can describe.
max_zip_members: u32Maximum number of ZIP members accepted in one archive (Phase 12, Z2).
max_zip_member_compressed: u64Maximum declared compressed size of a single ZIP member (Phase 12, Z1).
max_zip_member_uncompressed: u64Maximum declared uncompressed size of a single ZIP member (Phase 12, Z1).
max_zip_aggregate_uncompressed: u64Maximum sum of declared uncompressed sizes across all members (Z2).
max_zip_compression_ratio: u32Maximum declared uncompressed/compressed ratio for one member (Z1).
max_zip_name_bytes: u32Maximum raw name byte length of one member (Phase 12, Z13/Z14).
max_zip_extra_bytes: u32Maximum raw extra-field byte length of one member (Z7/Z14).
max_zip_entry_comment_bytes: u32Maximum per-entry comment byte length (Z14).
max_zip_archive_comment_bytes: u32Maximum archive comment byte length (Z14/Z15).
max_zip_central_dir_bytes: u64Maximum central-directory byte length (Z14).
max_zip_prefix_bytes: u64Maximum leading bytes before the first local header (Z14).
max_zip_trailing_bytes: u64Maximum trailing bytes after the EOCD record (Z14).
max_xml_depth: u32Maximum XML element nesting depth before a typed decline (Phase 12, §2).
max_xml_part_bytes: u64Maximum decoded byte length of a single XML part (Phase 12, §2).
max_xml_events: u64Maximum number of XML pull events in a single part (Phase 12, §2).
max_xml_nodes: u64Maximum number of XML element nodes in a single part (Phase 12, §2).
max_xml_attrs_per_element: u32Maximum number of attributes on a single XML element (Phase 12, §2).
max_xml_text_bytes: u64Maximum total text bytes accepted across a single XML part (Phase 12, §2).
max_xml_document_bytes: u64Maximum source length admitted for byte-based standalone XML detection
(Phase 21.9). A bare XML source above this cap — whose adapter reads the
whole source as one DocumentExact — falls back to
crate::field::document_format::DocumentFormat::Opaque.
max_opc_rels: u32Maximum relationships across all .rels parts (Phase 12, §3).
max_opc_rel_depth: u32Maximum internal relationship traversal depth (Phase 12 cycles, §3).
max_opc_content_types_overrides: u32Maximum Default+Override entries in [Content_Types].xml (Phase 12, §3).
max_opc_part_name_bytes: u32Maximum byte length of an OPC part name (Phase 12, §3).
max_epub_rootfiles: u32Maximum rootfile entries accepted in META-INF/container.xml (Phase 12, §4).
max_epub_manifest_items: u32Maximum Package Document manifest items accepted (Phase 12, §4).
max_epub_spine_items: u32Maximum Package Document spine itemrefs accepted (Phase 12, §4).
Maximum navigation-document nesting depth accepted (Phase 12, §4).
max_epub_fallback_chain: u32Maximum manifest fallback chain length followed (Phase 12, §4).
max_xhtml_nodes: u32Maximum XHTML element nodes accepted in one content/nav document (Phase 12, §4).
max_odt_manifest_entries: u32Maximum file-entry elements accepted in META-INF/manifest.xml (Phase 13.3).
max_odt_blocks: u32Maximum block elements accepted in one OpenDocument content part (Phase 13.3).
max_odt_notes: u32Maximum notes accepted in one OpenDocument content part (Phase 13.3).
max_ods_sheets: u32Maximum table:table sheets accepted in one OpenDocument spreadsheet
content part (Phase 21.3.1).
max_ods_cells: u64Maximum expanded grid slots accepted across one spreadsheet, after
table:number-rows-repeated/table:number-columns-repeated expansion
(Phase 21.3.1). Each expanded row charges at least one slot even when it
declares no cells, so an empty-row repeat bomb still declines. This is the
ODS analogue of the XLSX coordinate bound (ADR-0059): a repeated span is
bounded and the expanded count declines typed rather than allocating.
max_ods_repeated_span: u32Maximum repeat count admitted for a single
table:number-columns-repeated/table:number-rows-repeated attribute
(Phase 21.3.1). A declaration above this bound is a typed resource-limit
decline, never an allocation.
max_ods_merges: u32Maximum merged spans (table:number-columns-spanned>1 or
table:number-rows-spanned>1) accepted across one spreadsheet
(Phase 21.3.1).
max_ods_named_expressions: u32Maximum named expressions
(table:named-range/table:named-expression) accepted across one
spreadsheet (Phase 21.3.1).
max_ods_styles: u32Maximum style:style cell-style records accepted in one spreadsheet’s
automatic styles or styles part (Phase 21.3.1).
max_ods_comments: u32Maximum office:annotation cell comments accepted across one spreadsheet
(Phase 21.3.1).
max_xlsx_sheets: u32Maximum <sheet> declarations accepted in one workbook (Phase 21.1.1).
max_xlsx_cells: u64Maximum cells accepted in one worksheet part (Phase 21.1.1).
Maximum shared strings accepted in xl/sharedStrings.xml (Phase 21.1.1).
max_xlsx_merges: u32Maximum merged ranges accepted in one worksheet (Phase 21.1.1).
max_xlsx_hyperlinks: u32Maximum hyperlinks accepted in one worksheet (Phase 21.1.2).
max_xlsx_comments: u32Maximum comments accepted in one comments part (Phase 21.1.2).
max_xlsx_tables: u32Maximum table parts accepted across a workbook (Phase 21.1.2).
max_xlsx_table_columns: u32Maximum columns accepted in one table part (Phase 21.1.2).
max_xlsx_defined_names: u32Maximum defined/named ranges accepted in one workbook (Phase 21.1.2).
max_xlsx_drawings: u32Maximum drawing parts accepted across a workbook (Phase 21.1.2).
max_xlsx_style_records: u32Maximum style records (fonts/fills/cellXfs) accepted in styles.xml (Phase 21.1.2).
max_xlsx_col: u32Maximum 0-based column index accepted in a cell reference (Phase 21.1.2).
The Excel-conformant grid is 16,384 columns wide (A..XFD), so a valid
0-based column is < 16384; a coordinate at or beyond this bound is a
typed resource-limit decline. Bounding the coordinate here keeps a single
hostile reference from driving an unbounded projection downstream.
max_xlsx_row: u32Maximum 0-based row index accepted in a cell/row reference (Phase 21.1.2).
The Excel-conformant grid is 1,048,576 rows tall (1..1048576), so a valid
0-based row is < 1 << 20; a coordinate at or beyond this bound is a
typed resource-limit decline.
max_pptx_slides: u32Maximum slides accepted in one presentation (Phase 21.2.1).
max_pptx_shapes_per_slide: u32Maximum shapes accepted in one slide’s shape tree, including group descendants (Phase 21.2.1).
max_pptx_text_runs: u32Maximum text runs (a:t) accepted in one slide (Phase 21.2.1).
max_pptx_group_depth: u32Maximum group-shape nesting depth accepted in one slide (Phase 21.2.1).
max_pptx_media: u32Maximum media parts (images/audio/video) exposed by one presentation (Phase 21.2.1).
max_pptx_tables: u32Maximum embedded tables accepted in one slide (Phase 21.2.1).
max_pptx_table_cells: u32Maximum table cells accepted across one slide’s tables (Phase 21.2.1).
max_pptx_notes: u32Maximum notes-slide parts accepted in one presentation (Phase 21.2.1).
max_pptx_layouts: u32Maximum slide-layout parts accepted in one presentation (Phase 21.2.1).
max_pptx_masters: u32Maximum slide-master parts accepted in one presentation, and the bound applied to theme parts (Phase 21.2.1).
max_odp_slides: u32Maximum draw:page slides accepted in one OpenDocument presentation
content part (Phase 21.4.1).
max_odp_shapes_per_slide: u32Maximum shapes accepted in one slide, including group descendants (Phase 21.4.1).
max_odp_text_runs: u32Maximum text runs (text:span) accepted in one slide (Phase 21.4.1).
max_odp_group_depth: u32Maximum draw:g group nesting depth accepted in one slide (Phase 21.4.1).
max_odp_media: u32Maximum Pictures/* media parts exposed by one presentation (Phase 21.4.1).
max_odp_tables: u32Maximum embedded tables (table:table) accepted in one slide
(Phase 21.4.1).
max_odp_table_cells: u32Maximum table cells accepted across one slide’s tables, after
table:number-columns-repeated/table:number-rows-repeated expansion
(Phase 21.4.1). An over-large repeat declines typed rather than allocating.
max_odp_notes: u32Maximum notes pages (presentation:notes) accepted in one presentation
(Phase 21.4.1).
max_odp_masters: u32Maximum style:master-page master pages accepted, and the bound applied to
style:style records, in one presentation (Phase 21.4.1).
max_json_depth: u32Maximum JSON container nesting depth accepted (objects/arrays). A deeper document is not detected as JSON (and any direct parse declines typed) rather than risking unbounded recursion (Phase 21.5.1).
max_json_nodes: u32Maximum JSON nodes (values plus object member keys) accepted in one document. An over-large document declines typed rather than allocating (Phase 21.5.1).
max_json_string_bytes: u64Maximum total raw string-token bytes accepted across one JSON document (the bytes between the quotes, escapes included). A conservative upper bound on the decoded text (Phase 21.5.1).
max_json_document_bytes: u64Maximum source length admitted for byte-based JSON detection. Larger inputs
fall back to crate::field::document_format::DocumentFormat::Opaque
(Phase 21.5.1).
max_json5_depth: u32Maximum JSON5 container nesting depth accepted (objects/arrays). A deeper document is not detected as JSON5 (and any direct parse declines typed) rather than risking unbounded recursion (Phase 21.17.1).
max_json5_nodes: u32Maximum JSON5 nodes (values plus object member keys) accepted in one document. An over-large document declines typed rather than allocating (Phase 21.17.1).
max_json5_string_bytes: u64Maximum total raw string-token bytes accepted across one JSON5 document (the bytes between the quotes, escapes included). A conservative upper bound on the decoded text (Phase 21.17.1).
max_json5_comments: u32Maximum comments (// and /* … */) accepted in one JSON5 document. An
over-commented document declines typed rather than allocating (Phase
21.17.1).
max_json5_document_bytes: u64Maximum source length admitted for byte-based JSON5/JSONC detection. Larger
inputs fall back to crate::field::document_format::DocumentFormat::Opaque
(Phase 21.17.1).
max_yaml_depth: u32Maximum YAML container nesting depth accepted (mappings/sequences). A deeper document is not detected as YAML (and any direct parse declines typed) rather than risking unbounded recursion (Phase 21.6.1).
max_yaml_nodes: u32Maximum YAML nodes (containers, scalars, aliases, empties) accepted in one stream. An over-large document declines typed rather than allocating (Phase 21.6.1).
max_yaml_scalars: u32Maximum YAML scalar nodes accepted in one stream (Phase 21.6.1).
max_yaml_anchors: u32Maximum YAML anchors (&a) accepted in one stream (Phase 21.6.1).
max_yaml_documents: u32Maximum documents accepted in one YAML stream (Phase 21.6.1).
max_yaml_string_bytes: u64Maximum total raw scalar-token bytes accepted across one YAML stream. A conservative upper bound on the decoded text (Phase 21.6.1).
max_yaml_document_bytes: u64Maximum source length admitted for byte-based YAML detection. Larger inputs
fall back to crate::field::document_format::DocumentFormat::Opaque
(Phase 21.6.1).
max_csv_rows: u32Maximum records accepted in one CSV/TSV table for a built span model
(including the header row). A larger table declines typed rather than
allocating; the streaming read selectors (csv-row/csv-cell/…) are not
bounded by this (they are bounded by one record at a time) (Phase 21.7.1).
max_csv_cols: u32Maximum fields accepted in a single CSV/TSV record. A record above this bound is a typed resource-limit decline, never an allocation (Phase 21.7.1).
max_csv_record_bytes: u32Maximum byte length of a single CSV/TSV record (terminator included) when a span is retained; a longer record declines typed (Phase 21.7.1).
max_csv_field_bytes: u32Maximum byte length of a single CSV/TSV field (quotes included); a longer field declines typed (Phase 21.7.1).
max_csv_document_bytes: u64Maximum source length admitted for byte-based CSV/TSV detection and parsing.
Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.7.1).
max_csv_sampled_records_for_detection: u32Maximum records scanned when deciding whether a source is a CSV/TSV table. Detection is a bounded sample, so a huge source is classified in bounded memory (Phase 21.7.1).
max_markdown_depth: u32Maximum container nesting depth accepted (list item depth, blockquote marker depth). A deeper document is a typed resource-limit decline (Phase 21.8.1).
max_markdown_nodes: u32Maximum nodes (blocks plus inline spans) accepted in one document. An over-large document declines typed rather than allocating (Phase 21.8.1).
max_markdown_blocks: u32Maximum blocks accepted in one document (Phase 21.8.1).
max_markdown_inline_spans: u32Maximum inline spans accepted in one document (Phase 21.8.1).
max_markdown_code_bytes: u64Maximum total code content bytes accepted across one document (fenced and indented code). A larger document declines typed (Phase 21.8.1).
max_markdown_document_bytes: u64Maximum source length admitted for byte-based Markdown detection and
parsing. Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.8.1).
max_html_depth: u32Maximum element (and raw-text) nesting depth accepted. A deeper document is a typed resource-limit decline (Phase 21.10).
max_html_nodes: u32Maximum nodes (elements, text runs, comments, DOCTYPE, raw text) accepted in one document. An over-large document declines typed rather than allocating (Phase 21.10).
max_html_attrs: u64Maximum attributes accepted across one document (Phase 21.10).
max_html_text_bytes: u64Maximum total text bytes accepted across one document. A larger document declines typed (Phase 21.10).
max_html_script_bytes: u64Maximum total raw <script>/<style> content bytes accepted across one
document (their raw text is captured, never executed or parsed) (Phase
21.10).
max_html_document_bytes: u64Maximum source length admitted for byte-based HTML detection and parsing.
Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.10).
max_toml_depth: u32Maximum table/key nesting depth accepted. A deeper document is a typed resource-limit decline (Phase 21.11).
max_toml_nodes: u32Maximum nodes (tables, arrays, keys, scalars) accepted in one document. An over-large document declines typed rather than allocating (Phase 21.11).
max_toml_keys: u64Maximum keys accepted across one document (Phase 21.11).
max_toml_string_bytes: u64Maximum total string/key bytes accepted across one document. A larger document declines typed (Phase 21.11).
max_toml_document_bytes: u64Maximum source length admitted for byte-based TOML detection and parsing.
Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.11).
max_jsonl_records: u32Maximum non-blank record lines accepted in one JSONL document. A larger document declines typed rather than allocating (Phase 21.12).
max_jsonl_line_bytes: u64Maximum byte length of one record line’s JSON text (the terminator excluded). A longer line declines typed (Phase 21.12).
max_jsonl_nodes: u32Maximum total JSON nodes (values plus object member keys) accepted across all records of one JSONL document. This is a whole-document budget (a single line is additionally bounded by the JSON node cap); an over-large document declines typed rather than allocating (Phase 21.12).
max_jsonl_document_bytes: u64Maximum source length admitted for byte-based JSONL detection and parsing.
Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.12).
max_eml_depth: u32Maximum MIME part nesting depth accepted (root = 0). A deeper message is a typed resource-limit decline (Phase 21.13).
max_eml_parts: u32Maximum MIME parts accepted in one message (the root counts). An over-large message declines typed rather than allocating (Phase 21.13).
max_eml_headers: u32Maximum headers accepted across one message (all parts). A message with more declines typed (Phase 21.13).
max_eml_part_bytes: u64Maximum byte length of one part’s entity (headers + body). A larger part declines typed (Phase 21.13).
max_eml_decoded_bytes: u64Maximum total decoded bytes produced by a transfer-encoding decode (base64 / quoted-printable). A larger decode declines typed (Phase 21.13).
max_eml_document_bytes: u64Maximum source length admitted for byte-based EML detection and parsing.
Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.13).
max_parquet_row_groups: u32Maximum number of row groups accepted in one Parquet file (Phase 21.14).
max_parquet_columns: u32Maximum number of leaf columns accepted in one Parquet file (Phase 21.14).
max_parquet_pages_per_chunk: u32Maximum number of pages accepted in one column chunk (Phase 21.14). A page-bomb chunk declines typed rather than looping.
max_parquet_values: u64Maximum number of decoded values across a Parquet column (Phase 21.14).
max_parquet_decompressed_bytes: u64Maximum total decompressed page bytes across one decompression (Phase 21.14). A decompression bomb declines typed.
max_parquet_document_bytes: u64Maximum source length admitted for byte-based Parquet detection and parsing.
Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.14).
Maximum accepted Thrift-Compact footer byte length (Phase 21.14). A larger footer declines typed before it is parsed.
max_arrow_messages: u32Maximum number of encapsulated IPC messages (schema + dictionary + record batches) accepted in one Arrow file/stream (Phase 21.16).
max_arrow_columns: u32Maximum number of schema columns (fields, flattened pre-order) accepted in one Arrow file (Phase 21.16).
max_arrow_batches: u32Maximum number of record batches accepted in one Arrow file/stream (Phase 21.16).
max_arrow_rows: u64Maximum number of logical rows accepted across one Arrow file/stream (Phase 21.16). A larger file declines typed rather than allocating.
max_arrow_buffers: u64Maximum number of buffers accepted across one record batch (Phase 21.16).
max_arrow_values: u64Maximum number of decoded values across an Arrow column (Phase 21.16).
max_arrow_decompressed_bytes: u64Maximum total declared body/decompressed bytes across one decode (Phase 21.16). A body bomb declines typed.
max_arrow_document_bytes: u64Maximum source length admitted for byte-based Arrow detection and parsing.
Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.16).
max_arrow_metadata_bytes: u64Maximum accepted Flatbuffers metadata (footer or message) byte length (Phase 21.16). A larger metadata declares typed before it is parsed.
max_cbor_depth: u32Maximum CBOR nesting depth accepted (arrays/maps/tags). A deeper document is not detected as CBOR (and any direct parse declines typed) rather than risking unbounded recursion (Phase 21.18).
max_cbor_nodes: u32Maximum CBOR items accepted in one document. An over-large document declines typed rather than allocating (Phase 21.18).
max_cbor_string_bytes: u64Maximum total raw byte-/text-string payload bytes accepted across one CBOR document. An over-large document declines typed (Phase 21.18).
max_cbor_document_bytes: u64Maximum source length admitted for byte-based CBOR detection and parsing.
Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.18).
max_msgpack_depth: u32Maximum MessagePack nesting depth accepted (arrays/maps). A deeper document is not detected as MessagePack (and any direct parse declines typed) rather than risking unbounded recursion (Phase 21.19).
max_msgpack_nodes: u32Maximum MessagePack items accepted in one document. An over-large document declines typed rather than allocating (Phase 21.19).
max_msgpack_str_bytes: u64Maximum total raw str payload bytes accepted across one MessagePack
document. An over-large document declines typed (Phase 21.19).
max_msgpack_bin_bytes: u64Maximum total raw bin payload bytes accepted across one MessagePack
document. An over-large document declines typed (Phase 21.19).
max_msgpack_ext_bytes: u64Maximum total raw extension payload bytes accepted across one MessagePack document. An over-large document declines typed (Phase 21.19).
max_msgpack_document_bytes: u64Maximum source length admitted for byte-based MessagePack detection and
parsing. Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.19).
max_config_lines: u32Maximum physical lines accepted across one config document. An over-large document declines typed rather than allocating (Phase 21.20).
max_config_nodes: u32Maximum total model nodes (lines) accepted across one config document (Phase 21.20).
max_config_entries: u32Maximum entries accepted across one config document (Phase 21.20).
max_config_depth: u32Maximum properties logical-line continuation depth accepted (the number
of physical lines merged by trailing \ continuations). A deeper logical
line is not detected as config (and any direct parse declines typed) rather
than risking an unbounded scan (Phase 21.20).
max_config_line_bytes: u64Maximum length of one (logical) config line in bytes (Phase 21.20).
max_config_key_bytes: u64Maximum length of one config key token in bytes (Phase 21.20).
max_config_value_bytes: u64Maximum length of one config value token in bytes (Phase 21.20).
max_config_document_bytes: u64Maximum source length admitted for byte-based config detection and parsing.
Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.20).
max_feed_entries: u32Maximum record (<item>/<entry>) count accepted across one feed. An
over-large feed declines typed rather than allocating (Phase 21.21).
max_feed_fields: u32Maximum recognized field count (channel/feed fields plus every entry’s fields) accepted across one feed (Phase 21.21).
max_feed_field_bytes: u64Maximum length of one recognized field element’s whole span in bytes (Phase 21.21).
max_feed_text_bytes: u64Maximum length of the canonical feed text projection in bytes (Phase 21.21).
max_feed_document_bytes: u64Maximum source length admitted for byte-based feed detection and parsing.
Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.21).
max_geojson_features: u32Maximum Feature count accepted across one GeoJSON document (the root
Feature, or every element of a FeatureCollection’s features array). An
over-large document declines typed rather than allocating (Phase 21.22).
max_geojson_geometries: u32Maximum geometry object count accepted across one GeoJSON document (in
pre-order; a GeometryCollection’s members are included) (Phase 21.22).
max_geojson_coordinates: u64Maximum total coordinate-number count accepted across one GeoJSON
document’s coordinates subtrees (Phase 21.22).
max_geojson_depth: u32Maximum GeoJSON structural recursion depth (geometry/GeometryCollection
nesting and coordinates nesting) (Phase 21.22).
max_geojson_nodes: u32Maximum embedded JSON node count accepted for one GeoJSON document, in addition to the JSON caps the shared parser already enforces (Phase 21.22).
max_geojson_document_bytes: u64Maximum source length admitted for byte-based GeoJSON detection and parsing.
Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.22).
max_gis_placemarks: u32Maximum record count accepted across one GIS document (KML <Placemark>
features, or GPX top-level <wpt>/<rte>/<trk> records). An over-large
document declines typed rather than allocating (Phase 21.23).
max_gis_tracks: u32Maximum GPX <trk> track count accepted across one GIS document
(Phase 21.23).
max_gis_points: u32Maximum point count accepted across one GIS document (KML geometry elements,
or GPX <wpt>/<rtept>/<trkpt> point elements) (Phase 21.23).
max_gis_depth: u32Maximum GIS element nesting depth accepted (Phase 21.23).
max_gis_nodes: u32Maximum embedded XML node count accepted for one GIS document, in addition to the XML caps the shared parser already enforces (Phase 21.23).
max_gis_text_bytes: u64Maximum aggregate recognized-field bytes (and canonical text projection) accepted across one GIS document (Phase 21.23).
max_gis_document_bytes: u64Maximum source length admitted for byte-based GIS detection and parsing.
Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.23).
max_notebook_cells: u32Maximum cell count accepted across one notebook. An over-large document declines typed rather than allocating (Phase 21.24).
max_notebook_outputs: u32Maximum total output count accepted across one notebook (every code cell’s
outputs array) (Phase 21.24).
max_notebook_nodes: u32Maximum embedded JSON node count accepted for one notebook, in addition to the JSON caps the shared parser already enforces (Phase 21.24).
max_notebook_depth: u32Maximum notebook structural nesting depth accepted (Phase 21.24).
max_notebook_source_bytes: u64Maximum aggregate cell source token bytes accepted across one notebook
(Phase 21.24).
max_notebook_document_bytes: u64Maximum source length admitted for byte-based notebook detection and parsing.
Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.24).
max_fixedwidth_rows: u32Maximum records (lines, including the header) accepted in one fixed-width table. A larger table declines typed rather than allocating (Phase 21.25).
max_fixedwidth_cols: u32Maximum columns accepted in a fixed-width table. A table above this bound is a typed resource-limit decline, never an allocation (Phase 21.25).
max_fixedwidth_record_bytes: u32Maximum byte length of a single fixed-width record (content, terminator excluded); a longer record declines typed (Phase 21.25).
max_fixedwidth_field_bytes: u32Maximum byte length of a single fixed-width field (padding included); a longer field declines typed (Phase 21.25).
max_fixedwidth_document_bytes: u64Maximum source length admitted for byte-based fixed-width detection and parsing.
Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.25).
max_fixedwidth_sampled_lines_for_detection: u32Maximum records sampled when deciding whether a source is a fixed-width table. Detection is a bounded sample, so a huge source is classified in bounded memory (Phase 21.25).
max_rst_blocks: u32Maximum blocks accepted in one reStructuredText document (Phase 21.26.1).
max_rst_inline_spans: u32Maximum inline spans accepted in one reStructuredText document (Phase 21.26.1).
max_rst_nodes: u32Maximum nodes (blocks plus inline spans) accepted in one reStructuredText document. An over-large document declines typed rather than allocating (Phase 21.26.1).
max_rst_depth: u32Maximum section-title/list nesting depth accepted (Phase 21.26.1). A deeper document is a typed resource-limit decline.
max_rst_line_bytes: u64Maximum byte length of one physical line (content, terminator excluded) in a reStructuredText document. A longer line declines typed (Phase 21.26.1).
max_rst_document_bytes: u64Maximum source length admitted for byte-based reStructuredText detection and
parsing. Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.26.1).
max_asciidoc_blocks: u32Maximum blocks accepted in one AsciiDoc document (Phase 21.26.2).
max_asciidoc_inline_spans: u32Maximum inline spans accepted in one AsciiDoc document (Phase 21.26.2).
max_asciidoc_nodes: u32Maximum nodes (blocks plus inline spans) accepted in one AsciiDoc document. An over-large document declines typed rather than allocating (Phase 21.26.2).
max_asciidoc_depth: u32Maximum section/list nesting depth accepted (Phase 21.26.2). A deeper document is a typed resource-limit decline.
max_asciidoc_line_bytes: u64Maximum byte length of one physical line (content, terminator excluded) in an AsciiDoc document. A longer line declines typed (Phase 21.26.2).
max_asciidoc_document_bytes: u64Maximum source length admitted for byte-based AsciiDoc detection and parsing.
Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.26.2).
max_mdx_esm_statements: u32Maximum ESM statements accepted in one MDX document (Phase 21.26.3).
max_mdx_jsx_blocks: u32Maximum JSX elements/fragments accepted in one MDX document (Phase 21.26.3).
max_mdx_expressions: u32Maximum MDX expressions accepted in one MDX document (Phase 21.26.3).
max_mdx_nodes: u32Maximum nodes (ESM statements plus JSX elements plus expressions) accepted in one MDX document. An over-large document declines typed rather than allocating (Phase 21.26.3).
max_mdx_depth: u32Maximum JSX nesting depth accepted (Phase 21.26.3). A deeper document is a typed resource-limit decline.
max_mdx_line_bytes: u64Maximum byte length of one physical line (content, terminator excluded) in an MDX document. A longer line declines typed (Phase 21.26.3).
max_mdx_document_bytes: u64Maximum source length admitted for byte-based MDX detection and parsing.
Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.26.3).
max_mhtml_parts: u32Maximum MIME part count accepted across one MHTML document (the root counts). An over-large document declines typed rather than allocating (Phase 21.27).
max_mhtml_headers: u32Maximum header count accepted across one MHTML document (all parts). A document with more declines typed (Phase 21.27).
max_mhtml_depth: u32Maximum MIME nesting depth accepted (root = 0). A deeper document declines typed (Phase 21.27).
max_mhtml_resources: u32Maximum sub-resource count accepted across one MHTML document (parts carrying
a Content-Location/Content-ID). An over-large document declines typed
rather than allocating (Phase 21.27).
max_mhtml_decoded_bytes: u64Maximum total decoded bytes accepted across one MHTML document (the root part’s decoded body plus every sub-resource). A larger decode declines typed (Phase 21.27).
max_mhtml_nodes: u32Maximum embedded HTML node count accepted for the root part (Phase 21.27).
max_mhtml_document_bytes: u64Maximum source length admitted for byte-based MHTML detection and parsing.
Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.27).
max_logstream_records: u32Maximum non-blank record lines accepted in one log stream. A larger document declines typed rather than allocating (Phase 21.28).
max_logstream_fields: u64Maximum total field spans accepted across all records of one log stream. This is a whole-document budget; an over-large document declines typed rather than allocating (Phase 21.28).
max_logstream_sd_elements: u64Maximum total RFC 5424 structured-data elements accepted across one log stream. An over-large document declines typed rather than allocating (Phase 21.28).
max_logstream_line_bytes: u64Maximum byte length of one record line’s content (the terminator excluded). A longer line declines typed (Phase 21.28).
max_logstream_depth: u32Maximum structured-data nesting depth accepted (record = 1, an element = 2, a parameter = 3). A deeper record declines typed (Phase 21.28).
max_logstream_document_bytes: u64Maximum source length admitted for byte-based log-stream detection and
parsing. Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.28).
max_pkgmeta_nodes: u32Maximum reused-arena node count accepted for a package manifest (in addition to the JSON/TOML caps the shared parsers enforce). A larger document declines typed (Phase 21.29).
max_pkgmeta_sections: u32Maximum section count accepted for a package manifest. An over-large document declines typed rather than allocating (Phase 21.29).
max_pkgmeta_entries: u32Maximum key/value entry count accepted for a package manifest. An over-large document declines typed rather than allocating (Phase 21.29).
max_pkgmeta_depth: u32Maximum structural recursion depth accepted (root = 1). A deeper document declines typed (Phase 21.29).
max_pkgmeta_document_bytes: u64Maximum source length admitted for byte-based package-metadata detection and
parsing. Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.29).
max_apispec_nodes: u32Maximum embedded JSON node count accepted for one API-spec document, in addition to the JSON caps the shared parser already enforces (Phase 21.30).
max_apispec_objects: u32Maximum recorded object count accepted across one API-spec document. An over-large document declines typed rather than allocating (Phase 21.30).
max_apispec_members: u32Maximum recorded key/value member count accepted across one API-spec document. An over-large document declines typed rather than allocating (Phase 21.30).
max_apispec_refs: u32Maximum recorded $ref count accepted across one API-spec document. An
over-large document declines typed rather than allocating (Phase 21.30).
max_apispec_depth: u32Maximum structural recursion depth accepted (root = 1). A deeper document declines typed (Phase 21.30).
max_apispec_document_bytes: u64Maximum source length admitted for byte-based API-spec detection and parsing.
Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.30).
max_bib_entries: u32Maximum entry (BibTeX/RIS) or item (CSL-JSON) count accepted for one bibliography. An over-large document declines typed rather than allocating (Phase 21.31).
max_bib_fields: u64Maximum total field (BibTeX/RIS) or member (CSL-JSON) count accepted across one bibliography. This is a whole-document budget; an over-large document declines typed rather than allocating (Phase 21.31).
max_bib_value_bytes: u64Maximum byte length of one BibTeX/RIS value (delimiters included) or one recorded CSL-JSON string value. A longer value declines typed (Phase 21.31).
max_bib_nodes: u32Maximum embedded JSON node count accepted for one CSL-JSON document, in addition to the JSON caps the shared parser already enforces (Phase 21.31).
max_bib_depth: u32Maximum structural recursion depth accepted (BibTeX/RIS brace nesting, or CSL-JSON container nesting; root = 1). A deeper document declines typed (Phase 21.31).
max_bib_document_bytes: u64Maximum source length admitted for byte-based bibliography detection and
parsing. Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.31).
max_rtf_groups: u32Maximum group ({ … }) count accepted for one RTF document. An over-large
document declines typed rather than allocating (Phase 21.32).
max_rtf_depth: u32Maximum group nesting depth accepted (the outermost group is depth 1). A deeper document declines typed (Phase 21.32).
max_rtf_control_words: u64Maximum control word / control symbol / hex escape / Unicode escape count accepted across one RTF document. An over-large document declines typed rather than allocating (Phase 21.32).
max_rtf_text_bytes: u64Maximum total plain-text byte count accepted across one RTF document. An over-large document declines typed rather than allocating (Phase 21.32).
max_rtf_hex_escapes: u64Maximum \'hh hex-escape count accepted across one RTF document. An over-large
document declines typed rather than allocating (Phase 21.32).
max_rtf_document_bytes: u64Maximum source length admitted for byte-based RTF detection and parsing. Larger
inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.32).
max_container_members: u64Maximum member count accepted for one archive container. An over-large archive declines typed rather than allocating (Phase 21.33).
max_container_name_bytes: u64Maximum aggregate name byte count accepted across one container’s members. This is a whole-archive budget; an over-large archive declines typed (Phase 21.33).
max_container_entry_name_bytes: u64Maximum byte length of one member name. A longer name declines typed (Phase 21.33).
max_container_extensions: u64Maximum TAR extension-record (GNU L/K, PAX x/g) count accepted across
one archive. An over-large archive declines typed (Phase 21.33).
max_container_path_depth: u64Maximum member path depth (number of /-separated components; a flat name is
depth 1) accepted. A deeper path declines typed (Phase 21.33).
max_container_document_bytes: u64Maximum source length admitted for byte-based container detection and parsing.
Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.33).
max_hdf_objects: u64Maximum object (group / dataset / variable) count accepted for one scientific container. An over-large source declines typed (Phase 21.34).
max_hdf_dimensions: u64Maximum dimension count accepted (NetCDF dimension table, or an HDF5 dataspace rank). An over-large source declines typed (Phase 21.34).
max_hdf_attributes: u64Maximum aggregate attribute count accepted across one source (global / root-group + every object’s attributes). An over-large source declines typed (Phase 21.34).
max_hdf_depth: u32Maximum group nesting depth accepted (root = 0). A deeper source declines typed (Phase 21.34).
max_hdf_name_bytes: u64Maximum aggregate name byte count accepted across one source. This is a whole-source budget; an over-large source declines typed (Phase 21.34).
max_hdf_entry_name_bytes: u64Maximum byte length of one name. A longer name declines typed (Phase 21.34).
max_hdf_attr_value_bytes: u64Maximum byte length of one attribute value. A larger value declines typed (Phase 21.34).
max_hdf_document_bytes: u64Maximum source length admitted for scientific-container detection and parsing.
Larger inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.34).
max_cfbf_entries: u64Maximum directory-entry count accepted for one compound file. An over-large source declines typed (Phase 21.35).
max_cfbf_streams: u64Maximum stream count accepted for one compound file. An over-large source declines typed (Phase 21.35).
max_cfbf_depth: u32Maximum reconstructed directory-tree depth accepted (the root is depth 0). A deeper tree declines typed (Phase 21.35).
max_cfbf_name_bytes: u64Maximum aggregate name byte count accepted across one compound file. This is a whole-source budget; an over-large source declines typed (Phase 21.35).
max_cfbf_entry_name_bytes: u64Maximum byte length of one entry name (a CFBF name is at most 62 bytes). A longer name declines typed (Phase 21.35).
max_cfbf_chain_sectors: u64Maximum FAT/MiniFAT entry count accepted (bounds the allocation and every chain traversal). An over-large source declines typed (Phase 21.35).
max_cfbf_document_bytes: u64Maximum source length admitted for compound-file detection and parsing. Larger
inputs fall back to
crate::field::document_format::DocumentFormat::Opaque (Phase 21.35).