From 452c239fee95601ae72d07882a4d5b14275d8667 Mon Sep 17 00:00:00 2001
From: JimmyDaddy <heyjimmygo@gmail.com>
Date: Sun, 19 Jul 2026 09:42:20 +0800
Subject: [PATCH 1/4] feat: harden cross-platform package and runtime

---
 .github/CODEOWNERS                            |   1 +
 .github/ISSUE_TEMPLATE/bug.yml                |  49 ++++
 .github/ISSUE_TEMPLATE/config.yml             |   8 +
 .github/ISSUE_TEMPLATE/feature.yml            |  23 ++
 .github/PULL_REQUEST_TEMPLATE.md              |  23 ++
 .github/dependabot.yml                        |  34 +++
 .github/workflows/ci.yml                      |  75 +++++-
 .github/workflows/npm-publish.yml             |   2 +
 CHANGELOG.md                                  |  15 ++
 README.md                                     |  46 +++-
 README.zh-CN.md                               |  45 +++-
 SECURITY.md                                   |  29 ++
 .../bsdiffpatch/BsDiffPatchNative.kt          |  31 ++-
 benchmarks/README.md                          |  15 ++
 benchmarks/web-wasm.json                      |  32 +++
 compatibility/android-api/build.gradle        |  61 +++++
 compatibility/android-api/gradle.properties   |   3 +
 compatibility/android-api/settings.gradle     |  21 ++
 .../android-api/src/main/AndroidManifest.xml  |   1 +
 .../bsdiffpatch/NativeBsDiffPatchSpec.kt      |  23 ++
 cpp/bsdiff.c                                  | 120 ++++++---
 cpp/bsdiff.h                                  |   1 -
 cpp/bspatch.c                                 | 140 ++++++----
 cpp/bspatch.h                                 |   1 -
 cpp/fuzz/bspatch_fuzzer.c                     |  95 +++++++
 docs/api-reference.md                         |  43 ++-
 docs/architecture.md                          |  34 ++-
 docs/development.md                           |  36 ++-
 docs/getting-started.md                       |  15 +-
 docs/platform-support.md                      |  14 +-
 docs/recipes.md                               |  29 +-
 docs/troubleshooting.md                       |  22 +-
 docs/zh-CN/api-reference.md                   |  37 ++-
 docs/zh-CN/architecture.md                    |  29 +-
 docs/zh-CN/development.md                     |  31 ++-
 docs/zh-CN/getting-started.md                 |  14 +-
 docs/zh-CN/platform-support.md                |  10 +-
 docs/zh-CN/recipes.md                         |  28 +-
 docs/zh-CN/troubleshooting.md                 |  18 +-
 example/src/App.tsx                           |  95 ++++++-
 fixtures/cross-platform.json                  |   6 +
 ios/BsDiffPatch.mm                            |  18 +-
 package.json                                  |  31 ++-
 scripts/benchmark-web.mjs                     |  80 ++++++
 scripts/prepare-package.mjs                   |  27 ++
 scripts/test-native-fuzz.sh                   |  44 +++
 scripts/test-package-consumers.mjs            | 224 ++++++++++++++++
 scripts/test-rn-android-compatibility.sh      |  28 ++
 scripts/test-site-browser.mjs                 |   2 +
 scripts/test-site.mjs                         |   5 +
 scripts/test-web-browser.mjs                  |   5 +
 scripts/test-web.mjs                          |  42 +++
 scripts/web-test.html                         |  59 +++-
 site/assets/site.css                          | 162 +++++++++++
 site/index.html                               |  95 ++++++-
 src/index.ts                                  |  15 +-
 web/bsdiffpatch.mjs                           | Bin 162119 -> 157668 bytes
 web/index.d.mts                               |  12 +-
 web/index.mjs                                 | 252 +++++++++++++++---
 web/operations.mjs                            | 100 +++++--
 web/worker.mjs                                |  42 +--
 61 files changed, 2345 insertions(+), 253 deletions(-)
 create mode 100644 .github/CODEOWNERS
 create mode 100644 .github/ISSUE_TEMPLATE/bug.yml
 create mode 100644 .github/ISSUE_TEMPLATE/config.yml
 create mode 100644 .github/ISSUE_TEMPLATE/feature.yml
 create mode 100644 .github/PULL_REQUEST_TEMPLATE.md
 create mode 100644 .github/dependabot.yml
 create mode 100644 CHANGELOG.md
 create mode 100644 SECURITY.md
 create mode 100644 benchmarks/README.md
 create mode 100644 benchmarks/web-wasm.json
 create mode 100644 compatibility/android-api/build.gradle
 create mode 100644 compatibility/android-api/gradle.properties
 create mode 100644 compatibility/android-api/settings.gradle
 create mode 100644 compatibility/android-api/src/main/AndroidManifest.xml
 create mode 100644 compatibility/android-api/src/newarchStubs/kotlin/com/jimmydaddy/bsdiffpatch/NativeBsDiffPatchSpec.kt
 create mode 100644 cpp/fuzz/bspatch_fuzzer.c
 create mode 100644 fixtures/cross-platform.json
 create mode 100644 scripts/benchmark-web.mjs
 create mode 100644 scripts/prepare-package.mjs
 create mode 100755 scripts/test-native-fuzz.sh
 create mode 100644 scripts/test-package-consumers.mjs
 create mode 100755 scripts/test-rn-android-compatibility.sh

diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 0000000..e953d2a
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1 @@
+* @JimmyDaddy
diff --git a/.github/ISSUE_TEMPLATE/bug.yml b/.github/ISSUE_TEMPLATE/bug.yml
new file mode 100644
index 0000000..601df58
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/bug.yml
@@ -0,0 +1,49 @@
+name: Bug report
+description: Report a reproducible runtime, build, packaging, or documentation defect.
+title: '[Bug]: '
+labels:
+  - bug
+body:
+  - type: checkboxes
+    attributes:
+      label: Before submitting
+      options:
+        - label: I searched existing issues and read the troubleshooting guide.
+          required: true
+        - label: This report does not contain sensitive files or a security vulnerability.
+          required: true
+  - type: input
+    attributes:
+      label: Package version
+      placeholder: 0.2.0
+    validations:
+      required: true
+  - type: dropdown
+    attributes:
+      label: Runtime
+      options:
+        - Android legacy architecture
+        - Android New Architecture
+        - iOS legacy architecture
+        - iOS New Architecture
+        - React Native Web
+    validations:
+      required: true
+  - type: input
+    attributes:
+      label: React Native and bundler versions
+      description: Include React Native, browser, Metro, Webpack, or Vite versions that apply.
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Reproduction
+      description: Provide minimal code, exact commands, and non-sensitive input sizes.
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Expected and actual behavior
+      description: Include the complete error code and message when available.
+    validations:
+      required: true
diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml
new file mode 100644
index 0000000..f597d6d
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/config.yml
@@ -0,0 +1,8 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Security vulnerability
+    url: https://github.com/JimmyDaddy/react-native-bs-diff-patch/security/advisories/new
+    about: Report security issues privately through GitHub.
+  - name: Documentation
+    url: https://bs-dff-patch.corerobin.com/docs/
+    about: Check setup, API, platform, and troubleshooting guidance first.
diff --git a/.github/ISSUE_TEMPLATE/feature.yml b/.github/ISSUE_TEMPLATE/feature.yml
new file mode 100644
index 0000000..d2866d5
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/feature.yml
@@ -0,0 +1,23 @@
+name: Feature request
+description: Propose a focused addition to the public API, runtime support, or tooling.
+title: '[Feature]: '
+labels:
+  - enhancement
+body:
+  - type: textarea
+    attributes:
+      label: Problem
+      description: Describe the user problem and the affected runtime.
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Proposed behavior
+      description: Explain the desired API or workflow, including compatibility expectations.
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Alternatives considered
+    validations:
+      required: false
diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md
new file mode 100644
index 0000000..93c2eae
--- /dev/null
+++ b/.github/PULL_REQUEST_TEMPLATE.md
@@ -0,0 +1,23 @@
+## Summary
+
+<!-- What changes, and why? -->
+
+## Runtime impact
+
+- [ ] Android legacy architecture
+- [ ] Android New Architecture
+- [ ] iOS legacy architecture
+- [ ] iOS New Architecture
+- [ ] React Native Web
+- [ ] Documentation or tooling only
+
+## Verification
+
+<!-- List the exact commands and device/browser checks run. -->
+
+## Checklist
+
+- [ ] Public API changes include TypeScript declarations and bilingual docs.
+- [ ] Native C changes include malformed-input coverage and a rebuilt WebAssembly bundle.
+- [ ] Compatibility or behavior changes include focused regression tests.
+- [ ] The packed npm artifact was inspected when package contents changed.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..8fe96e9
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,34 @@
+version: 2
+updates:
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+      time: '03:00'
+      timezone: Asia/Shanghai
+    open-pull-requests-limit: 5
+    groups:
+      development-dependencies:
+        dependency-type: development
+        update-types:
+          - minor
+          - patch
+
+  - package-ecosystem: bundler
+    directory: /example
+    schedule:
+      interval: monthly
+      day: monday
+      time: '03:30'
+      timezone: Asia/Shanghai
+    open-pull-requests-limit: 3
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: monthly
+      day: monday
+      time: '04:00'
+      timezone: Asia/Shanghai
+    open-pull-requests-limit: 3
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index cda5f40..3d0e3b3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -61,7 +61,16 @@ jobs:
                   site=true
                   web=true
                   ;;
-                src/**|cpp/**|assets/**)
+                src/**|assets/**)
+                  android=true
+                  ios=true
+                  quality=true
+                  web=true
+                  ;;
+                cpp/fuzz/**|scripts/test-native-fuzz.sh)
+                  quality=true
+                  ;;
+                cpp/**)
                   android=true
                   ios=true
                   quality=true
@@ -71,6 +80,10 @@ jobs:
                   android=true
                   quality=true
                   ;;
+                compatibility/android-api/**|scripts/test-rn-android-compatibility.sh)
+                  android=true
+                  quality=true
+                  ;;
                 ios/**|example/ios/**|*.podspec)
                   ios=true
                   quality=true
@@ -80,14 +93,28 @@ jobs:
                   ios=true
                   quality=true
                   ;;
-                web/**|scripts/build-web-wasm.sh|scripts/test-web*.mjs|scripts/web-*)
+                web/**|fixtures/**|scripts/build-web-wasm.sh|scripts/test-web*.mjs|scripts/web-*)
+                  android=true
+                  ios=true
                   web=true
                   quality=true
                   site=true
                   ;;
+                scripts/prepare-package.mjs|scripts/test-package-consumers.mjs)
+                  quality=true
+                  web=true
+                  ;;
+                benchmarks/**|scripts/benchmark-web.mjs)
+                  quality=true
+                  site=true
+                  web=true
+                  ;;
                 site/**|docs/**|README*.md|CONTRIBUTING.md|scripts/build-site.mjs|scripts/test-site*.mjs|.github/workflows/pages.yml)
                   site=true
                   ;;
+                .github/ISSUE_TEMPLATE/**|.github/PULL_REQUEST_TEMPLATE.md|.github/CODEOWNERS|.github/dependabot.yml)
+                  quality=true
+                  ;;
                 *.md)
                   site=true
                   ;;
@@ -238,6 +265,36 @@ jobs:
           if-no-files-found: ignore
           retention-days: 7
 
+  android-rn-compatibility:
+    name: Android RN API Compatibility (${{ matrix.react-native }})
+    needs: changes
+    if: needs.changes.outputs.android == 'true'
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    strategy:
+      fail-fast: true
+      max-parallel: 2
+      matrix:
+        react-native: ['0.73.11', '0.74.7', '0.86.0']
+    steps:
+      - name: Checkout the code
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+
+      - name: Set up JDK
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5
+        with:
+          distribution: zulu
+          java-version: 17
+
+      - name: Set up Gradle
+        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6
+        with:
+          cache-provider: basic
+          cache-read-only: ${{ github.event_name == 'pull_request' }}
+
+      - name: Compile library against React Native Android APIs
+        run: sh scripts/test-rn-android-compatibility.sh ${{ matrix.react-native }} new
+
   ios-build-test:
     name: iOS (newArch=${{ matrix.new-arch }})
     needs: changes
@@ -331,6 +388,7 @@ jobs:
           yarn test:web
           yarn test:web:browser
           yarn test:web:metro
+          yarn test:package
 
       - name: Verify npm package contents
         run: npm pack --dry-run --ignore-scripts
@@ -354,6 +412,7 @@ jobs:
           yarn typecheck
           yarn lint
           yarn test --runInBand
+          FUZZ_RUNS=2000 yarn test:fuzz
 
   site-test:
     name: Documentation Site and Playground Test
@@ -380,7 +439,17 @@ jobs:
 
   ci-complete:
     name: Complete CI
-    needs: [changes, quality, android-build, android-api-level-test, ios-build-test, web-test, site-test]
+    needs:
+      [
+        changes,
+        quality,
+        android-build,
+        android-api-level-test,
+        android-rn-compatibility,
+        ios-build-test,
+        web-test,
+        site-test,
+      ]
     if: always()
     runs-on: ubuntu-latest
     timeout-minutes: 5
diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
index e97eba4..ce70662 100644
--- a/.github/workflows/npm-publish.yml
+++ b/.github/workflows/npm-publish.yml
@@ -81,9 +81,11 @@ jobs:
           yarn typecheck
           yarn lint
           yarn test --runInBand
+          FUZZ_RUNS=2000 yarn test:fuzz
           yarn test:web
           yarn test:web:browser
           yarn test:web:metro
+          yarn test:package
           npm pack --dry-run --ignore-scripts
         env:
           CHROME_PATH: /usr/bin/google-chrome
diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..5439eca
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,15 @@
+# Changelog
+
+All notable changes to this project are documented in this file. Releases use
+[Semantic Versioning](https://semver.org/) and are generated from Conventional
+Commits by release-it.
+
+## [0.1.0](https://github.com/JimmyDaddy/react-native-bs-diff-patch/releases/tag/v0.1.0) (2026-07-18)
+
+### Features
+
+- add React Native Web support backed by WebAssembly and module Workers;
+- support both the React Native legacy and New Architecture runtimes;
+- add Android and iOS device-level runtime assertions;
+- publish through npm Trusted Publishing with provenance;
+- add bilingual documentation, an interactive Playground, and GitHub Pages.
diff --git a/README.md b/README.md
index 07348cb..552294d 100644
--- a/README.md
+++ b/README.md
@@ -13,7 +13,9 @@ all use the compatible `ENDSLEY/BSDIFF43` wire format.
 - **One patch format:** generate on one supported runtime and apply on another.
 - **Both React Native architectures:** legacy bridge and TurboModule/New Architecture.
 - **Responsive by default:** native work uses dedicated serial queues; Web work
-  runs in an isolated module Worker.
+  reuses a module Worker and cached WebAssembly instance off the page thread.
+- **Bound untrusted Web work:** built-in cancellation and input/output byte
+  limits reject predictably with stable error codes.
 - **No Web service required:** the browser implementation is the same bundled C
   core compiled to WebAssembly.
 
@@ -76,11 +78,20 @@ success.
 ```ts
 import { diffBytes, patchBytes } from 'react-native-bs-diff-patch';
 
-export async function webRoundTrip(oldFile: File, newFile: File) {
+export async function webRoundTrip(
+  oldFile: File,
+  newFile: File,
+  signal?: AbortSignal
+) {
   const oldData = await oldFile.arrayBuffer();
   const newData = await newFile.arrayBuffer();
-  const patchData = await diffBytes(oldData, newData);
-  const restoredData = await patchBytes(oldData, patchData);
+  const options = {
+    signal,
+    maxInputBytes: 64 * 1024 * 1024,
+    maxOutputBytes: 64 * 1024 * 1024,
+  };
+  const patchData = await diffBytes(oldData, newData, options);
+  const restoredData = await patchBytes(oldData, patchData, options);
 
   return { patchData, restoredData };
 }
@@ -88,18 +99,19 @@ export async function webRoundTrip(oldFile: File, newFile: File) {
 
 `diffBytes` and `patchBytes` accept `ArrayBuffer`, any `ArrayBufferView`
 (including typed arrays and `DataView`), or `Blob`. They resolve to a new
-`Uint8Array` and leave the caller's buffers usable.
+`Uint8Array` and leave the caller's buffers usable. Aborted operations reject
+with `EABORTED`; configured size limits reject with `ERESOURCE`.
 
 ## Platform API matrix
 
-| API                                     | Android | iOS | Web |
-| --------------------------------------- | ------- | --- | --- |
-| `diff(oldPath, newPath, patchPath)`     | Yes     | Yes | No  |
-| `patch(oldPath, outputPath, patchPath)` | Yes     | Yes | No  |
-| `diffBytes(oldData, newData)`           | No      | No  | Yes |
-| `patchBytes(oldData, patchData)`        | No      | No  | Yes |
-| Legacy architecture                     | Yes     | Yes | N/A |
-| New Architecture / TurboModule          | Yes     | Yes | N/A |
+| API                                        | Android | iOS | Web |
+| ------------------------------------------ | ------- | --- | --- |
+| `diff(oldPath, newPath, patchPath)`        | Yes     | Yes | No  |
+| `patch(oldPath, outputPath, patchPath)`    | Yes     | Yes | No  |
+| `diffBytes(oldData, newData, options?)`    | No      | No  | Yes |
+| `patchBytes(oldData, patchData, options?)` | No      | No  | Yes |
+| Legacy architecture                        | Yes     | Yes | N/A |
+| New Architecture / TurboModule             | Yes     | Yes | N/A |
 
 Calling an API family that is unavailable on the current platform rejects with
 `EUNSUPPORTED` instead of silently choosing different behavior.
@@ -117,6 +129,11 @@ Calling an API family that is unavailable on the current platform rejects with
 See [Production recipes](./docs/recipes.md) for error handling, downloads,
 cross-runtime patch exchange, and integrity checks.
 
+CI directly compiles the Android New Architecture sources against React Native
+0.73.11, 0.74.7, and 0.86.0. Packed-consumer tests also verify that browser,
+ESM, CommonJS, and TypeScript resolution work without installing optional React
+Native peers for Web-only consumers.
+
 ## Documentation
 
 - [Getting started](./docs/getting-started.md)
@@ -130,7 +147,8 @@ cross-runtime patch exchange, and integrity checks.
 ## Contributing
 
 See [CONTRIBUTING.md](./CONTRIBUTING.md) for the local workflow and quality
-gates.
+gates. Release history is in [CHANGELOG.md](./CHANGELOG.md); security reports
+follow [SECURITY.md](./SECURITY.md).
 
 ## License
 
diff --git a/README.zh-CN.md b/README.zh-CN.md
index de8eafc..39d7aa7 100644
--- a/README.zh-CN.md
+++ b/README.zh-CN.md
@@ -11,7 +11,9 @@ Android、iOS 与 React Native Web 共用兼容的 `ENDSLEY/BSDIFF43` 补丁格
 
 - **统一补丁格式：** 可以在一个受支持的运行时生成补丁，在另一个运行时应用。
 - **兼容 RN 两种架构：** 同时支持旧桥接架构和 TurboModule / 新架构。
-- **默认不阻塞 UI：** 原生端使用专用串行队列，Web 端使用独立模块 Worker。
+- **默认不阻塞 UI：** 原生端使用专用串行队列；Web 端复用模块 Worker 和已初始化的
+  WebAssembly 实例，让计算离开页面线程。
+- **限制不可信 Web 任务：** 内置取消与输入/输出字节上限，并提供稳定错误码。
 - **Web 无需后端服务：** 浏览器直接运行由同一套 C 核心编译而来的 WebAssembly。
 
 | 运行时       | 输入方式       | 生成补丁    | 应用补丁     |
@@ -71,11 +73,20 @@ export async function nativeRoundTrip({
 ```ts
 import { diffBytes, patchBytes } from 'react-native-bs-diff-patch';
 
-export async function webRoundTrip(oldFile: File, newFile: File) {
+export async function webRoundTrip(
+  oldFile: File,
+  newFile: File,
+  signal?: AbortSignal
+) {
   const oldData = await oldFile.arrayBuffer();
   const newData = await newFile.arrayBuffer();
-  const patchData = await diffBytes(oldData, newData);
-  const restoredData = await patchBytes(oldData, patchData);
+  const options = {
+    signal,
+    maxInputBytes: 64 * 1024 * 1024,
+    maxOutputBytes: 64 * 1024 * 1024,
+  };
+  const patchData = await diffBytes(oldData, newData, options);
+  const restoredData = await patchBytes(oldData, patchData, options);
 
   return { patchData, restoredData };
 }
@@ -83,18 +94,19 @@ export async function webRoundTrip(oldFile: File, newFile: File) {
 
 `diffBytes` 和 `patchBytes` 接受 `ArrayBuffer`、任意 `ArrayBufferView`
 （包括 TypedArray 和 `DataView`）或 `Blob`。它们返回新的 `Uint8Array`，且不会
-转移或失效调用方传入的缓冲区。
+转移或失效调用方传入的缓冲区。取消以 `EABORTED` 拒绝，命中配置的大小上限时以
+`ERESOURCE` 拒绝。
 
 ## 平台能力矩阵
 
-| API                                     | Android | iOS    | Web    |
-| --------------------------------------- | ------- | ------ | ------ |
-| `diff(oldPath, newPath, patchPath)`     | 支持    | 支持   | 不支持 |
-| `patch(oldPath, outputPath, patchPath)` | 支持    | 支持   | 不支持 |
-| `diffBytes(oldData, newData)`           | 不支持  | 不支持 | 支持   |
-| `patchBytes(oldData, patchData)`        | 不支持  | 不支持 | 支持   |
-| 旧架构                                  | 支持    | 支持   | 不适用 |
-| 新架构 / TurboModule                    | 支持    | 支持   | 不适用 |
+| API                                        | Android | iOS    | Web    |
+| ------------------------------------------ | ------- | ------ | ------ |
+| `diff(oldPath, newPath, patchPath)`        | 支持    | 支持   | 不支持 |
+| `patch(oldPath, outputPath, patchPath)`    | 支持    | 支持   | 不支持 |
+| `diffBytes(oldData, newData, options?)`    | 不支持  | 不支持 | 支持   |
+| `patchBytes(oldData, patchData, options?)` | 不支持  | 不支持 | 支持   |
+| 旧架构                                     | 支持    | 支持   | 不适用 |
+| 新架构 / TurboModule                       | 支持    | 支持   | 不适用 |
 
 调用当前平台不可用的 API 会以 `EUNSUPPORTED` 拒绝，不会静默切换成其他行为。
 
@@ -110,6 +122,10 @@ export async function webRoundTrip(oldFile: File, newFile: File) {
 错误处理、补丁下载、跨运行时交换和完整性校验示例见
 [生产实践](./docs/zh-CN/recipes.md)。
 
+CI 会直接使用 React Native 0.73.11、0.74.7 与 0.86.0 编译 Android 新架构
+源码。真实 npm tarball 消费测试还会验证 browser、ESM、CommonJS 与 TypeScript
+解析，并确保仅使用 Web 的消费者不会被强制安装可选 React Native peer。
+
 ## 完整文档
 
 - [快速开始](./docs/zh-CN/getting-started.md)
@@ -122,7 +138,8 @@ export async function webRoundTrip(oldFile: File, newFile: File) {
 
 ## 参与贡献
 
-本地开发流程和质量门禁见 [CONTRIBUTING.md](./CONTRIBUTING.md)。
+本地开发流程和质量门禁见 [CONTRIBUTING.md](./CONTRIBUTING.md)。发布记录见
+[CHANGELOG.md](./CHANGELOG.md)，安全问题报告流程见 [SECURITY.md](./SECURITY.md)。
 
 ## License
 
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..177ccc0
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,29 @@
+# Security policy
+
+## Supported versions
+
+Security fixes are provided for the latest published minor release.
+
+| Version | Supported |
+| ------- | --------- |
+| Latest  | Yes       |
+| Older   | No        |
+
+## Reporting a vulnerability
+
+Please do not open a public issue for a suspected vulnerability. Use
+[GitHub private vulnerability reporting](https://github.com/JimmyDaddy/react-native-bs-diff-patch/security/advisories/new)
+and include the affected version, platform, architecture mode, reproduction
+steps, and impact.
+
+You should receive an acknowledgement within 3 business days. We will confirm
+the assessment and planned disclosure timeline after reproducing the report.
+
+## Patch trust boundary
+
+This library validates its patch format and rejects malformed inputs, but it
+does not authenticate patches. Applications distributing remote patches must
+verify a trusted signature or digest before applying a patch and verify the
+restored output before replacing application data. Use the Web resource limits
+for untrusted browser inputs and enforce equivalent product-specific limits
+around native file operations.
diff --git a/android/src/main/java/com/jimmydaddy/bsdiffpatch/BsDiffPatchNative.kt b/android/src/main/java/com/jimmydaddy/bsdiffpatch/BsDiffPatchNative.kt
index 2bf283e..e684827 100644
--- a/android/src/main/java/com/jimmydaddy/bsdiffpatch/BsDiffPatchNative.kt
+++ b/android/src/main/java/com/jimmydaddy/bsdiffpatch/BsDiffPatchNative.kt
@@ -29,10 +29,14 @@ internal object BsDiffPatchNative {
       throw BsDiffPatchException("EEXIST", "newFile: $newFile already exists")
     }
 
-    return bsPatchFile(
-      oldFileObj.absolutePath,
-      newFileObj.absolutePath,
-      patchFileObj.absolutePath
+    return requireSuccess(
+      "EPATCH",
+      "patch",
+      bsPatchFile(
+        oldFileObj.absolutePath,
+        newFileObj.absolutePath,
+        patchFileObj.absolutePath
+      )
     )
   }
 
@@ -56,13 +60,24 @@ internal object BsDiffPatchNative {
       throw BsDiffPatchException("EEXIST", "patchFile: $patchFile already exists")
     }
 
-    return bsDiffFile(
-      oldFileObj.absolutePath,
-      newFileObj.absolutePath,
-      patchFileObj.absolutePath
+    return requireSuccess(
+      "EDIFF",
+      "diff",
+      bsDiffFile(
+        oldFileObj.absolutePath,
+        newFileObj.absolutePath,
+        patchFileObj.absolutePath
+      )
     )
   }
 
+  private fun requireSuccess(code: String, operation: String, result: Int): Int {
+    if (result != 0) {
+      throw BsDiffPatchException(code, "$operation failed with native result $result")
+    }
+    return result
+  }
+
   private fun validateNonEmpty(value: String, fieldName: String) {
     if (value.isEmpty()) {
       throw BsDiffPatchException("EINVAL", "$fieldName can not be null or empty")
diff --git a/benchmarks/README.md b/benchmarks/README.md
new file mode 100644
index 0000000..aa2cd48
--- /dev/null
+++ b/benchmarks/README.md
@@ -0,0 +1,15 @@
+# Benchmarks
+
+`web-wasm.json` is a reproducible reference measurement for the checked-in
+WebAssembly implementation. It is not a performance guarantee: file contents,
+hardware, browser scheduling, and available memory can change results.
+
+Regenerate the 1, 10, and 50 MiB workload with:
+
+```sh
+BENCHMARK_OUTPUT=benchmarks/web-wasm.json yarn benchmark:web
+```
+
+The workload changes one byte per 4 KiB and verifies every restored byte. The
+benchmark measures the WebAssembly core after a small initialization warm-up;
+the public browser API additionally transfers data through a module Worker.
diff --git a/benchmarks/web-wasm.json b/benchmarks/web-wasm.json
new file mode 100644
index 0000000..76cafa3
--- /dev/null
+++ b/benchmarks/web-wasm.json
@@ -0,0 +1,32 @@
+{
+  "generatedAt": "2026-07-19T01:33:43.029Z",
+  "runtime": {
+    "cpu": "Apple M3 Pro",
+    "node": "v26.5.0",
+    "platform": "darwin-arm64"
+  },
+  "workload": {
+    "description": "Deterministic buffers with one changed byte per 4 KiB",
+    "initializationMs": 14.6
+  },
+  "results": [
+    {
+      "sizeMiB": 1,
+      "diffMs": 158.5,
+      "patchMs": 7.7,
+      "patchBytes": 110
+    },
+    {
+      "sizeMiB": 10,
+      "diffMs": 4243.6,
+      "patchMs": 57.5,
+      "patchBytes": 118
+    },
+    {
+      "sizeMiB": 50,
+      "diffMs": 30697.5,
+      "patchMs": 285.2,
+      "patchBytes": 203
+    }
+  ]
+}
diff --git a/compatibility/android-api/build.gradle b/compatibility/android-api/build.gradle
new file mode 100644
index 0000000..5d32d09
--- /dev/null
+++ b/compatibility/android-api/build.gradle
@@ -0,0 +1,61 @@
+plugins {
+  id "com.android.library" version "8.1.4"
+  id "org.jetbrains.kotlin.android"
+}
+
+def reactNativeVersion = providers.gradleProperty("reactNativeVersion").get()
+def architecture = providers.gradleProperty("architecture").orElse("new").get()
+def versionMatch = reactNativeVersion =~ /^(\d+)\.(\d+)\./
+
+if (!versionMatch.find()) {
+  throw new GradleException("Unsupported React Native version: ${reactNativeVersion}")
+}
+
+def reactNativeMinor = versionMatch.group(2).toInteger()
+def repositoryRoot = file("../..").canonicalFile
+def libraryAndroidRoot = new File(repositoryRoot, "android")
+def librarySourceDirectories = [
+  new File(libraryAndroidRoot, "src/main/java")
+]
+
+if (architecture == "new") {
+  librarySourceDirectories += new File(libraryAndroidRoot, "newarch/java")
+  librarySourceDirectories += new File(
+    libraryAndroidRoot,
+    reactNativeMinor >= 74 ? "newarch74/java" : "newarch73/java"
+  )
+  librarySourceDirectories += file("src/newarchStubs/kotlin")
+} else if (architecture == "old") {
+  librarySourceDirectories += new File(libraryAndroidRoot, "oldarch/java")
+} else {
+  throw new GradleException("Unsupported architecture: ${architecture}")
+}
+
+android {
+  namespace "com.jimmydaddy.bsdiffpatch.compatibility"
+  compileSdk 36
+
+  defaultConfig {
+    minSdk 24
+  }
+
+  sourceSets {
+    main {
+      java.srcDirs = librarySourceDirectories
+      manifest.srcFile "src/main/AndroidManifest.xml"
+    }
+  }
+
+  compileOptions {
+    sourceCompatibility JavaVersion.VERSION_17
+    targetCompatibility JavaVersion.VERSION_17
+  }
+
+  kotlinOptions {
+    jvmTarget = "17"
+  }
+}
+
+dependencies {
+  compileOnly "com.facebook.react:react-android:${reactNativeVersion}"
+}
diff --git a/compatibility/android-api/gradle.properties b/compatibility/android-api/gradle.properties
new file mode 100644
index 0000000..a20a517
--- /dev/null
+++ b/compatibility/android-api/gradle.properties
@@ -0,0 +1,3 @@
+android.useAndroidX=true
+android.suppressUnsupportedCompileSdk=36
+org.gradle.jvmargs=-Xmx3g -Dfile.encoding=UTF-8
diff --git a/compatibility/android-api/settings.gradle b/compatibility/android-api/settings.gradle
new file mode 100644
index 0000000..4d8f684
--- /dev/null
+++ b/compatibility/android-api/settings.gradle
@@ -0,0 +1,21 @@
+pluginManagement {
+  plugins {
+    id "org.jetbrains.kotlin.android" version providers.gradleProperty("kotlinVersion").orElse("1.9.22").get()
+  }
+
+  repositories {
+    google()
+    mavenCentral()
+    gradlePluginPortal()
+  }
+}
+
+dependencyResolutionManagement {
+  repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS)
+  repositories {
+    google()
+    mavenCentral()
+  }
+}
+
+rootProject.name = "react-native-bs-diff-patch-android-api-compatibility"
diff --git a/compatibility/android-api/src/main/AndroidManifest.xml b/compatibility/android-api/src/main/AndroidManifest.xml
new file mode 100644
index 0000000..94cbbcf
--- /dev/null
+++ b/compatibility/android-api/src/main/AndroidManifest.xml
@@ -0,0 +1 @@
+<manifest xmlns:android="http://schemas.android.com/apk/res/android" />
diff --git a/compatibility/android-api/src/newarchStubs/kotlin/com/jimmydaddy/bsdiffpatch/NativeBsDiffPatchSpec.kt b/compatibility/android-api/src/newarchStubs/kotlin/com/jimmydaddy/bsdiffpatch/NativeBsDiffPatchSpec.kt
new file mode 100644
index 0000000..54a22de
--- /dev/null
+++ b/compatibility/android-api/src/newarchStubs/kotlin/com/jimmydaddy/bsdiffpatch/NativeBsDiffPatchSpec.kt
@@ -0,0 +1,23 @@
+package com.jimmydaddy.bsdiffpatch
+
+import com.facebook.react.bridge.Promise
+import com.facebook.react.bridge.ReactApplicationContext
+import com.facebook.react.bridge.ReactContextBaseJavaModule
+
+abstract class NativeBsDiffPatchSpec(
+  reactContext: ReactApplicationContext
+) : ReactContextBaseJavaModule(reactContext) {
+  abstract fun patch(
+    oldFile: String,
+    newFile: String,
+    patchFile: String,
+    promise: Promise
+  )
+
+  abstract fun diff(
+    oldFile: String,
+    newFile: String,
+    patchFile: String,
+    promise: Promise
+  )
+}
diff --git a/cpp/bsdiff.c b/cpp/bsdiff.c
index abe7f3a..d35f30f 100644
--- a/cpp/bsdiff.c
+++ b/cpp/bsdiff.c
@@ -328,6 +328,13 @@ int bsdiff(const uint8_t* oldBuf, int64_t oldsize, const uint8_t* newBuf, int64_
 	int result;
 	struct bsdiff_request req;
 
+	if (oldBuf == NULL || newBuf == NULL || stream == NULL ||
+		stream->malloc == NULL || stream->free == NULL || stream->write == NULL ||
+		oldsize < 0 || newsize < 0 ||
+		(uint64_t)oldsize > (SIZE_MAX / sizeof(int64_t)) - 1 ||
+		(uint64_t)newsize > SIZE_MAX - 1)
+		return -1;
+
 	if((req.I=stream->malloc((oldsize+1)*sizeof(int64_t)))==NULL)
 		return -1;
 
@@ -385,66 +392,103 @@ static int bz2_write(struct bsdiff_stream* stream, const void* buffer, int size)
 
 int bsDiffFile(const char* oldFile, const char* newFile, const char* patchFile)
 {
-    int fd;
+    int fd = -1;
     int bz2err;
-    uint8_t *old,*new;
-    off_t oldsize,newsize;
+    int closeResult;
+    int outputCreated = 0;
+    int result = -1;
+    uint8_t *old = NULL, *new = NULL;
+    int64_t oldsize = 0, newsize = 0;
+    off_t measuredSize;
     uint8_t buf[8];
-    FILE * pf;
+    FILE * pf = NULL;
     struct bsdiff_stream stream;
-    BZFILE* bz2;
+    BZFILE* bz2 = NULL;
 
-    memset(&bz2, 0, sizeof(bz2));
     stream.malloc = malloc;
     stream.free = free;
     stream.write = bz2_write;
 
-    /* Allocate oldsize+1 bytes instead of oldsize bytes to ensure
-        that we never try to malloc(0) and get a NULL pointer */
-    if(((fd=open(oldFile,O_RDONLY,0))<0) ||
-        ((oldsize=lseek(fd,0,SEEK_END))==-1) ||
-        ((old=malloc(oldsize+1))==NULL) ||
-        (lseek(fd,0,SEEK_SET)!=0) ||
-        (readFileToBuffer(fd,old,oldsize)!=oldsize) ||
-        (close(fd)==-1)) err(1,"%s",oldFile);
-
-    /* Allocate newsize+1 bytes instead of newsize bytes to ensure
-        that we never try to malloc(0) and get a NULL pointer */
-    if(((fd=open(newFile,O_RDONLY,0))<0) ||
-        ((newsize=lseek(fd,0,SEEK_END))==-1) ||
-        ((new=malloc(newsize+1))==NULL) ||
-        (lseek(fd,0,SEEK_SET)!=0) ||
-        (readFileToBuffer(fd,new,newsize)!=newsize) ||
-        (close(fd)==-1)) err(1,"%s",newFile);
+    if (oldFile == NULL || newFile == NULL || patchFile == NULL)
+        goto cleanup;
+
+    fd = open(oldFile, O_RDONLY, 0);
+    if (fd < 0)
+        goto cleanup;
+    measuredSize = lseek(fd, 0, SEEK_END);
+    if (measuredSize < 0 || (uint64_t)measuredSize > SIZE_MAX - 1)
+        goto cleanup;
+    oldsize = (int64_t)measuredSize;
+    old = malloc((size_t)oldsize + 1);
+    if (old == NULL || lseek(fd, 0, SEEK_SET) != 0 ||
+        readFileToBuffer(fd, old, (off_t)oldsize) != (off_t)oldsize)
+        goto cleanup;
+    closeResult = close(fd);
+    fd = -1;
+    if (closeResult != 0)
+        goto cleanup;
+
+    fd = open(newFile, O_RDONLY, 0);
+    if (fd < 0)
+        goto cleanup;
+    measuredSize = lseek(fd, 0, SEEK_END);
+    if (measuredSize < 0 || (uint64_t)measuredSize > SIZE_MAX - 1)
+        goto cleanup;
+    newsize = (int64_t)measuredSize;
+    new = malloc((size_t)newsize + 1);
+    if (new == NULL || lseek(fd, 0, SEEK_SET) != 0 ||
+        readFileToBuffer(fd, new, (off_t)newsize) != (off_t)newsize)
+        goto cleanup;
+    closeResult = close(fd);
+    fd = -1;
+    if (closeResult != 0)
+        goto cleanup;
 
     /* Create the patch file */
-    if ((pf = fopen(patchFile, "w")) == NULL)
-        err(1, "%s", patchFile);
+    fd = open(patchFile, O_CREAT|O_EXCL|O_WRONLY, 0666);
+    if (fd < 0)
+        goto cleanup;
+    outputCreated = 1;
+    pf = fdopen(fd, "wb");
+    if (pf == NULL)
+        goto cleanup;
+    fd = -1;
 
     /* Write header (signature+newsize)*/
     offtout(newsize, buf);
     if (fwrite("ENDSLEY/BSDIFF43", 16, 1, pf) != 1 ||
         fwrite(buf, sizeof(buf), 1, pf) != 1)
-        err(1, "Failed to write header");
-
+        goto cleanup;
 
-    if (NULL == (bz2 = BZ2_bzWriteOpen(&bz2err, pf, 9, 0, 0)))
-        errx(1, "BZ2_bzWriteOpen, bz2err=%d", bz2err);
+    bz2 = BZ2_bzWriteOpen(&bz2err, pf, 9, 0, 0);
+    if (bz2 == NULL || bz2err != BZ_OK)
+        goto cleanup;
 
     stream.opaque = bz2;
     if (bsdiff(old, oldsize, new, newsize, &stream))
-        err(1, "bsdiff");
+        goto cleanup;
 
     BZ2_bzWriteClose(&bz2err, bz2, 0, NULL, NULL);
+    bz2 = NULL;
     if (bz2err != BZ_OK)
-        err(1, "BZ2_bzWriteClose, bz2err=%d", bz2err);
-
-    if (fclose(pf))
-        err(1, "fclose");
-
-    /* Free the memory we used */
+        goto cleanup;
+
+    closeResult = fclose(pf);
+    pf = NULL;
+    if (closeResult != 0)
+        goto cleanup;
+    result = 0;
+
+cleanup:
+    if (bz2 != NULL)
+        BZ2_bzWriteClose(&bz2err, bz2, 1, NULL, NULL);
+    if (pf != NULL)
+        fclose(pf);
+    if (fd >= 0)
+        close(fd);
+    if (result != 0 && outputCreated && patchFile != NULL)
+        unlink(patchFile);
     free(old);
     free(new);
-
-    return 0;
+    return result;
 }
diff --git a/cpp/bsdiff.h b/cpp/bsdiff.h
index 01c22d7..9809e1a 100644
--- a/cpp/bsdiff.h
+++ b/cpp/bsdiff.h
@@ -38,7 +38,6 @@
 #endif
 
 #include <stdio.h>
-#include <err.h>
 #include <fcntl.h>
 #include <stdlib.h>
 #include <unistd.h>
diff --git a/cpp/bspatch.c b/cpp/bspatch.c
index 7c4c748..bb9040b 100644
--- a/cpp/bspatch.c
+++ b/cpp/bspatch.c
@@ -46,13 +46,27 @@ static int64_t offtin(uint8_t *buf)
 	return y;
 }
 
+static int checked_add_int64(int64_t left, int64_t right, int64_t *result)
+{
+	if ((right > 0 && left > INT64_MAX - right) ||
+		(right < 0 && left < INT64_MIN - right))
+		return -1;
+	*result = left + right;
+	return 0;
+}
+
 int bspatch(const uint8_t* oldbuf, int64_t oldsize, uint8_t* newbuf, int64_t newsize, struct bspatch_stream* stream)
 {
 	uint8_t buf[8];
 	int64_t oldpos,newpos;
+	int64_t nextoldpos;
 	int64_t ctrl[3];
 	int64_t i;
 
+	if (oldbuf == NULL || newbuf == NULL || stream == NULL ||
+		stream->read == NULL || oldsize < 0 || newsize < 0)
+		return -1;
+
 	oldpos=0;newpos=0;
 	while(newpos<newsize) {
 		/* Read control data */
@@ -65,7 +79,8 @@ int bspatch(const uint8_t* oldbuf, int64_t oldsize, uint8_t* newbuf, int64_t new
 		/* Sanity-check */
 		if (ctrl[0]<0 || ctrl[0]>INT_MAX ||
 			ctrl[1]<0 || ctrl[1]>INT_MAX ||
-			newpos+ctrl[0]>newsize)
+			ctrl[0]>newsize-newpos ||
+			checked_add_int64(oldpos, ctrl[0], &nextoldpos))
 			return -1;
 
 		/* Read diff string */
@@ -79,10 +94,10 @@ int bspatch(const uint8_t* oldbuf, int64_t oldsize, uint8_t* newbuf, int64_t new
 
 		/* Adjust pointers */
 		newpos+=ctrl[0];
-		oldpos+=ctrl[0];
+		oldpos=nextoldpos;
 
 		/* Sanity-check */
-		if(newpos+ctrl[1]>newsize)
+		if(ctrl[1]>newsize-newpos)
 			return -1;
 
 		/* Read extra string */
@@ -91,7 +106,9 @@ int bspatch(const uint8_t* oldbuf, int64_t oldsize, uint8_t* newbuf, int64_t new
 
 		/* Adjust pointers */
 		newpos+=ctrl[1];
-		oldpos+=ctrl[2];
+		if (checked_add_int64(oldpos, ctrl[2], &nextoldpos))
+			return -1;
+		oldpos=nextoldpos;
 	};
 
 	return 0;
@@ -151,71 +168,100 @@ static off_t writeFileFromBuffer(int fd, uint8_t* buffer, off_t bufferSize)
 
 int bsPatchFile(const char* oldFile, const char* newFile, const char* patchFile)
 {
-  FILE * f;
-  int fd;
+  FILE * f = NULL;
+  int fd = -1;
   int bz2err;
+  int closeResult;
+  int result = -1;
+  int outputCreated = 0;
   uint8_t header[24];
-  uint8_t *old, *new;
-  int64_t oldsize, newsize;
-  BZFILE* bz2;
+  uint8_t *old = NULL, *new = NULL;
+  int64_t oldsize = 0, newsize = 0;
+  off_t measuredSize;
+  BZFILE* bz2 = NULL;
   struct bspatch_stream stream;
-  struct stat sb;
+
+  if (oldFile == NULL || newFile == NULL || patchFile == NULL)
+      goto cleanup;
 
   /* Open patch file */
-  if ((f = fopen(patchFile, "r")) == NULL) {
-      printf ("Cannot open file %s \n", patchFile);
-      err(1, "fopen(%s)", patchFile);
-  }
+  f = fopen(patchFile, "rb");
+  if (f == NULL)
+      goto cleanup;
 
   /* Read header */
-  if (fread(header, 1, 24, f) != 24) {
-      if (feof(f)) {
-          printf ("Corrupt patch %s \n", patchFile);
-          errx(1, "Corrupt patch\n");
-      }
-      err(1, "fread(%s)", patchFile);
-  }
+  if (fread(header, 1, 24, f) != 24)
+      goto cleanup;
 
   /* Check for appropriate magic */
-  if (memcmp(header, "ENDSLEY/BSDIFF43", 16) != 0) {
-      errx(1, "Corrupt patch\n");
-  }
+  if (memcmp(header, "ENDSLEY/BSDIFF43", 16) != 0)
+      goto cleanup;
 
   /* Read lengths from header */
   newsize=offtin(header+16);
-  if(newsize<0) {
-      errx(1,"Corrupt patch\n");
-  }
+  if(newsize < 0 || (uint64_t)newsize > SIZE_MAX - 1)
+      goto cleanup;
 
   /* Close patch file and re-open it via libbzip2 at the right places */
-  if(((fd=open(oldFile,O_RDONLY,0))<0) ||
-      ((oldsize=lseek(fd,0,SEEK_END))==-1) ||
-      ((old=malloc(oldsize+1))==NULL) ||
-      (lseek(fd,0,SEEK_SET)!=0) ||
-      (readFileToBuffer(fd,old,oldsize)!=oldsize) ||
-      (fstat(fd, &sb)) ||
-      (close(fd)==-1)) err(1,"%s", oldFile);
-  if((new=malloc(newsize+1))==NULL) err(1,NULL);
-  if (NULL == (bz2 = BZ2_bzReadOpen(&bz2err, f, 0, 1, NULL, 0))) {
-      errx(1, "BZ2_bzReadOpen, bz2err=%d", bz2err);
-  }
+  fd = open(oldFile, O_RDONLY, 0);
+  if (fd < 0)
+      goto cleanup;
+  measuredSize = lseek(fd, 0, SEEK_END);
+  if (measuredSize < 0 || (uint64_t)measuredSize > SIZE_MAX - 1)
+      goto cleanup;
+  oldsize = (int64_t)measuredSize;
+  old = malloc((size_t)oldsize + 1);
+  if (old == NULL || lseek(fd, 0, SEEK_SET) != 0 ||
+      readFileToBuffer(fd, old, (off_t)oldsize) != (off_t)oldsize)
+      goto cleanup;
+  closeResult = close(fd);
+  fd = -1;
+  if (closeResult != 0)
+      goto cleanup;
+
+  new = malloc((size_t)newsize + 1);
+  if (new == NULL)
+      goto cleanup;
+  bz2 = BZ2_bzReadOpen(&bz2err, f, 0, 1, NULL, 0);
+  if (bz2 == NULL || bz2err != BZ_OK)
+      goto cleanup;
 
   stream.read = bz2_read;
   stream.opaque = bz2;
-  if (bspatch(old, oldsize, new, newsize, &stream)) {
-      errx(1, "bspatch");
-  }
+  if (bspatch(old, oldsize, new, newsize, &stream))
+      goto cleanup;
 
   /* Clean up the bzip2 reads */
   BZ2_bzReadClose(&bz2err, bz2);
-  fclose(f);
+  bz2 = NULL;
+  closeResult = fclose(f);
+  f = NULL;
+  if (closeResult != 0)
+      goto cleanup;
 
   /* Write the new file */
-  if(((fd=open(newFile,O_CREAT|O_TRUNC|O_WRONLY,0666))<0) ||
-      (writeFileFromBuffer(fd,new,newsize)!=newsize) || (close(fd)==-1)) {
-      err(1,"%s",newFile);
-  }
+  fd = open(newFile, O_CREAT|O_EXCL|O_WRONLY, 0666);
+  if (fd < 0)
+      goto cleanup;
+  outputCreated = 1;
+  if (writeFileFromBuffer(fd, new, (off_t)newsize) != (off_t)newsize)
+      goto cleanup;
+  closeResult = close(fd);
+  fd = -1;
+  if (closeResult != 0)
+      goto cleanup;
+  result = 0;
+
+cleanup:
+  if (bz2 != NULL)
+      BZ2_bzReadClose(&bz2err, bz2);
+  if (f != NULL)
+      fclose(f);
+  if (fd >= 0)
+      close(fd);
+  if (result != 0 && outputCreated && newFile != NULL)
+      unlink(newFile);
   free(new);
   free(old);
-  return 0;
+  return result;
 }
diff --git a/cpp/bspatch.h b/cpp/bspatch.h
index f83e490..04b8c75 100644
--- a/cpp/bspatch.h
+++ b/cpp/bspatch.h
@@ -38,7 +38,6 @@
 #include <stdint.h>
 #include <stdio.h>
 #include <string.h>
-#include <err.h>
 #include <sys/types.h>
 #include <sys/stat.h>
 #include <unistd.h>
diff --git a/cpp/fuzz/bspatch_fuzzer.c b/cpp/fuzz/bspatch_fuzzer.c
new file mode 100644
index 0000000..362b8aa
--- /dev/null
+++ b/cpp/fuzz/bspatch_fuzzer.c
@@ -0,0 +1,95 @@
+#include <stddef.h>
+#include <stdint.h>
+#include <string.h>
+
+#ifdef BSDIFFPATCH_STANDALONE_FUZZ
+#include <stdio.h>
+#include <stdlib.h>
+#endif
+
+#include "bspatch.h"
+
+struct fuzz_input {
+  const uint8_t *data;
+  size_t size;
+  size_t offset;
+};
+
+static int fuzz_read(
+    const struct bspatch_stream *stream,
+    void *buffer,
+    int length)
+{
+  struct fuzz_input *input = (struct fuzz_input *)stream->opaque;
+
+  if (length < 0 || (size_t)length > input->size - input->offset)
+    return -1;
+
+  memcpy(buffer, input->data + input->offset, (size_t)length);
+  input->offset += (size_t)length;
+  return 0;
+}
+
+int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
+{
+  uint8_t old_buffer[64] = {0};
+  uint8_t new_buffer[64] = {0};
+  struct fuzz_input input;
+  struct bspatch_stream stream;
+  size_t old_size;
+  size_t new_size;
+  size_t copied_old_size;
+
+  if (size < 2)
+    return 0;
+
+  old_size = data[0] % sizeof(old_buffer);
+  new_size = data[1] % sizeof(new_buffer);
+  copied_old_size = old_size < size - 2 ? old_size : size - 2;
+  memcpy(old_buffer, data + 2, copied_old_size);
+
+  input.data = data + 2 + copied_old_size;
+  input.size = size - 2 - copied_old_size;
+  input.offset = 0;
+  stream.opaque = &input;
+  stream.read = fuzz_read;
+
+  (void)bspatch(
+      old_buffer,
+      (int64_t)old_size,
+      new_buffer,
+      (int64_t)new_size,
+      &stream);
+  return 0;
+}
+
+#ifdef BSDIFFPATCH_STANDALONE_FUZZ
+static uint32_t next_random(uint32_t *state)
+{
+  uint32_t value = *state;
+  value ^= value << 13;
+  value ^= value >> 17;
+  value ^= value << 5;
+  *state = value;
+  return value;
+}
+
+int main(int argc, char **argv)
+{
+  uint8_t input[512];
+  uint32_t state = 0x42534450u;
+  long runs = argc > 1 ? strtol(argv[1], NULL, 10) : 5000;
+  long run;
+
+  for (run = 0; run < runs; run++) {
+    size_t size = (size_t)(next_random(&state) % sizeof(input));
+    size_t index;
+    for (index = 0; index < size; index++)
+      input[index] = (uint8_t)next_random(&state);
+    LLVMFuzzerTestOneInput(input, size);
+  }
+
+  printf("Standalone sanitizer fuzz passed %ld runs\n", runs);
+  return 0;
+}
+#endif
diff --git a/docs/api-reference.md b/docs/api-reference.md
index 8c1ac65..825e6e0 100644
--- a/docs/api-reference.md
+++ b/docs/api-reference.md
@@ -10,6 +10,7 @@ import {
   diffBytes,
   patchBytes,
   type BinaryInput,
+  type BinaryOperationOptions,
 } from 'react-native-bs-diff-patch';
 ```
 
@@ -56,9 +57,16 @@ Reconstructs the target file at `outputFile`. Available on Android and iOS.
 ```ts
 type BinaryInput = ArrayBuffer | ArrayBufferView | Blob;
 
+interface BinaryOperationOptions {
+  signal?: AbortSignal;
+  maxInputBytes?: number;
+  maxOutputBytes?: number;
+}
+
 function diffBytes(
   oldData: BinaryInput,
-  newData: BinaryInput
+  newData: BinaryInput,
+  options?: BinaryOperationOptions
 ): Promise<Uint8Array>;
 ```
 
@@ -67,13 +75,16 @@ Creates a binary patch in a Web Worker. Available on Web.
 - Accepts `ArrayBuffer`, any typed-array or `DataView`, and `Blob`.
 - Copies inputs, so buffers owned by the caller are not detached.
 - Resolves to a new `Uint8Array` containing an `ENDSLEY/BSDIFF43` patch.
+- Checks each input against `maxInputBytes` and the generated patch against
+  `maxOutputBytes` when those limits are configured.
 
 ## `patchBytes`
 
 ```ts
 function patchBytes(
   oldData: BinaryInput,
-  patchData: BinaryInput
+  patchData: BinaryInput,
+  options?: BinaryOperationOptions
 ): Promise<Uint8Array>;
 ```
 
@@ -83,6 +94,21 @@ bytes. Available on Web.
 - Validates the patch header before invoking the WebAssembly core.
 - Copies inputs and resolves to a new `Uint8Array`.
 - Does not mutate `oldData` or `patchData`.
+- Rejects before allocating the declared output when the patch header exceeds
+  `maxOutputBytes`.
+
+## Web operation options
+
+- `signal` cancels the current Web operation. A call with a signal receives a
+  dedicated Worker so aborting it cannot interrupt another request.
+- `maxInputBytes` limits each supplied binary input, not their sum.
+- `maxOutputBytes` limits the generated patch or restored output.
+- Limits must be non-negative safe integers. Invalid limits reject with
+  `EINVAL`; exceeded limits reject with `ERESOURCE`.
+
+The binary APIs accept the options argument on native only to keep shared
+wrappers source-compatible, then reject with `EUNSUPPORTED` as usual. Native
+resource policy remains the application's filesystem/workflow responsibility.
 
 ## Availability behavior
 
@@ -110,6 +136,10 @@ type PatchError = Error & { code?: string };
 | `EEXIST`       | A native output path already exists.                        |
 | `EUNSUPPORTED` | The selected API is not available on the current platform.  |
 | `EUNAVAILABLE` | The native module worker has already shut down.             |
+| `EABORTED`     | The Web operation was cancelled through its signal.         |
+| `ERESOURCE`    | A configured Web input or output byte limit was exceeded.   |
+| `EDIFF`        | The native diff core rejected or could not write the input. |
+| `EPATCH`       | The native patch core rejected a malformed patch or output. |
 | `EWEBASSEMBLY` | WebAssembly loading, patch validation, or execution failed. |
 | `EUNSPECIFIED` | An unclassified native exception occurred.                  |
 
@@ -122,10 +152,11 @@ Worker startup, patch validation, or WebAssembly execution use
 
 ## Concurrency and ordering
 
-Each native platform uses a serial library-owned queue. Every Web call creates
-an isolated module Worker and terminates it after completion. Do not rely on
-operations completing in submission order across separate Web calls, and apply
-an application-level concurrency limit for large browser inputs.
+Each native platform uses a serial library-owned queue. Web calls without a
+signal share one module Worker, a serialized request queue, and a cached
+WebAssembly module. Calls with a signal use a dedicated Worker so cancellation
+is operation-local. Apply an application-level concurrency and memory budget
+for large browser inputs.
 
 ## Patch format
 
diff --git a/docs/architecture.md b/docs/architecture.md
index 65f1026..f4e4e98 100644
--- a/docs/architecture.md
+++ b/docs/architecture.md
@@ -15,7 +15,7 @@ React Native JavaScript
 
 React Native Web
   -> typed public API
-  -> module Web Worker
+  -> shared or cancellation-scoped module Web Worker
   -> Emscripten MEMFS
   -> the same bsdiff + bzip2 C sources compiled to WebAssembly
 ```
@@ -24,6 +24,12 @@ The worker boundaries keep expensive binary work away from the JavaScript/UI
 thread. They do not make the algorithm free: callers remain responsible for
 product-specific input-size and time limits.
 
+Web calls without an `AbortSignal` reuse one Worker and a cached Emscripten
+module, avoiding repeated Worker and WebAssembly initialization. Calls with a
+signal use a dedicated Worker; aborting the signal terminates only that Worker.
+Every Worker serializes its own request queue and removes temporary MEMFS files
+after each operation.
+
 ## Patch wire format
 
 Patches begin with a 24-byte header:
@@ -55,6 +61,32 @@ manifest when distributing patches.
 The generated `web/bsdiffpatch.mjs` is published with the package. Consumers do
 not need Emscripten.
 
+## Compatibility verification
+
+A checked-in golden fixture proves that the Web implementation generates the
+same deterministic patch bytes consumed by Android and iOS. Device runtime
+tests also apply the golden Web patch and reject a truncated patch without
+leaving partial output. The C patch core has sanitizer-backed malformed-input
+fuzz coverage and never terminates the hosting process for invalid data.
+
+## Reference Web benchmark
+
+`yarn benchmark:web` runs deterministic one-byte-per-4-KiB changes and verifies
+the restored result byte-for-byte. On an Apple M3 Pro with Node 26.5.0, the
+checked-in 2026-07-19 reference recorded:
+
+| Input  | Diff        | Patch    | Patch bytes |
+| ------ | ----------- | -------- | ----------- |
+| 1 MiB  | 158.5 ms    | 7.7 ms   | 110         |
+| 10 MiB | 4,243.6 ms  | 57.5 ms  | 118         |
+| 50 MiB | 30,697.5 ms | 285.2 ms | 203         |
+
+These figures are a reproducible development baseline, not a device or browser
+performance guarantee. Input similarity, CPU, browser, memory pressure, and
+toolchain version materially affect results. The full machine-readable record
+is in
+[`benchmarks/web-wasm.json`](https://github.com/JimmyDaddy/react-native-bs-diff-patch/blob/main/benchmarks/web-wasm.json).
+
 ## Memory model
 
 Native operations read the old and target files into process memory. Web calls
diff --git a/docs/development.md b/docs/development.md
index 72507b0..158fd03 100644
--- a/docs/development.md
+++ b/docs/development.md
@@ -31,12 +31,37 @@ yarn test --runInBand
 yarn test:web
 yarn test:web:browser
 yarn test:web:metro
+yarn test:package
 ```
 
 - `test:web` checks the WebAssembly round trip and patch magic.
 - `test:web:browser` runs the public Worker API in Chrome.
 - `test:web:metro` proves Metro selects the `.web` entry rather than the native
   TurboModule facade.
+- `test:package` installs the real tarball into a clean consumer and verifies
+  browser, ESM, CommonJS, TypeScript, and optional-peer behavior.
+
+## Native robustness and compatibility
+
+```sh
+FUZZ_RUNS=2000 yarn test:fuzz
+scripts/test-rn-android-compatibility.sh 0.73.11 new
+scripts/test-rn-android-compatibility.sh 0.74.7 new
+scripts/test-rn-android-compatibility.sh 0.86.0 new
+```
+
+The fuzz gate uses libFuzzer with AddressSanitizer and UndefinedBehaviorSanitizer
+when the local Clang runtime provides it, otherwise it runs a deterministic
+sanitizer corpus. The compatibility fixture compiles the actual Android module
+sources against the selected React Native artifact instead of relying on
+source-pattern assertions.
+
+Run the repeatable Web performance baseline with:
+
+```sh
+yarn benchmark:web
+BENCHMARK_OUTPUT=/tmp/web-wasm.json yarn benchmark:web
+```
 
 ## Site and documentation
 
@@ -65,16 +90,19 @@ Commit the regenerated `web/bsdiffpatch.mjs` with the C source change.
 
 ## Native verification
 
-Android CI builds both architecture modes and runs the New Architecture device
-round trip on its emulator matrix. iOS CI uses the CocoaPods version locked in
-the example Gemfile to build and test both legacy and New Architecture modes.
+Android CI builds both architecture modes, directly compiles New Architecture
+sources against React Native 0.73.11, 0.74.7, and 0.86.0, and runs the New
+Architecture device round trip on its emulator matrix. iOS CI uses the CocoaPods
+version locked in the example Gemfile to build and test both legacy and New
+Architecture modes. Device tests include cross-platform golden patches and
+malformed-patch rejection.
 
 For local example commands, see [CONTRIBUTING.md](../CONTRIBUTING.md).
 
 ## Publishing checklist
 
 1. Run the core, Web, and site gates.
-2. Inspect `npm pack --dry-run --ignore-scripts` and confirm `web/` is present.
+2. Run `yarn test:package` and inspect `npm pack --dry-run --ignore-scripts`.
 3. Confirm public docs match the exported TypeScript declarations.
 4. Confirm English and Chinese public guides describe the same behavior.
 5. Use `yarn release` to create the version, tag, and GitHub Release. It does not
diff --git a/docs/getting-started.md b/docs/getting-started.md
index d621057..80f585d 100644
--- a/docs/getting-started.md
+++ b/docs/getting-started.md
@@ -87,8 +87,14 @@ const encoder = new TextEncoder();
 const oldData = encoder.encode('version 1');
 const newData = encoder.encode('version 2 with web support');
 
-const patchData = await diffBytes(oldData, newData);
-const restoredData = await patchBytes(oldData, patchData);
+const controller = new AbortController();
+const options = {
+  signal: controller.signal,
+  maxInputBytes: 32 * 1024 * 1024,
+  maxOutputBytes: 32 * 1024 * 1024,
+};
+const patchData = await diffBytes(oldData, newData, options);
+const restoredData = await patchBytes(oldData, patchData, options);
 
 const matches =
   restoredData.length === newData.length &&
@@ -102,6 +108,11 @@ if (!matches) {
 Inputs are copied before being transferred to the module Worker, so the
 caller's buffers remain usable. Each result is a new `Uint8Array`.
 
+Call `controller.abort()` to reject the active operation with `EABORTED`.
+Configured byte limits reject with `ERESOURCE`. Calls without a signal reuse a
+shared Worker and WebAssembly instance; calls with a signal use a dedicated
+Worker so aborting one operation cannot interrupt another.
+
 ## Use browser files
 
 ```ts
diff --git a/docs/platform-support.md b/docs/platform-support.md
index 057f532..fd6a8b7 100644
--- a/docs/platform-support.md
+++ b/docs/platform-support.md
@@ -11,9 +11,11 @@
 | Background execution           | Serial executor    | Serial dispatch queue | Module Web Worker  |
 | Patch format                   | `ENDSLEY/BSDIFF43` | `ENDSLEY/BSDIFF43`    | `ENDSLEY/BSDIFF43` |
 
-The example application continuously exercises React Native 0.73. CI also
-builds consumer fixtures against newer New Architecture package APIs, including
-the Android package API split described below.
+The example application continuously exercises React Native 0.73.2. A direct
+Android source-compatibility matrix compiles the New Architecture integration
+against React Native 0.73.11, 0.74.7, and 0.86.0. The regular Android build also
+compiles the 0.73 legacy architecture. These are tested versions, not a promise
+that every intermediate or future React Native release is compatible.
 
 ## Android
 
@@ -49,6 +51,7 @@ The browser must support:
 - Module Web Workers.
 - `ArrayBuffer` and typed arrays.
 - `Blob.arrayBuffer()` when `Blob` inputs are used.
+- `AbortController` when operation cancellation is used.
 
 Webpack and Vite understand the standard
 `new Worker(new URL(..., import.meta.url), { type: 'module' })` pattern. A Metro
@@ -57,6 +60,11 @@ Web setup must preserve module-worker URLs in its Web serializer.
 The Web entry is browser-oriented rather than a Node.js filesystem adapter. It
 does not make the native file-path APIs available in Node.js.
 
+Calls without an `AbortSignal` share a module Worker and initialized
+WebAssembly module. Calls with a signal receive a dedicated Worker so
+cancellation is isolated to that operation. Both paths serialize work inside
+their Worker; callers should still enforce an application memory budget.
+
 ## Server-side rendering
 
 Importing the Web entry does not create a worker. Calling `diffBytes` or
diff --git a/docs/recipes.md b/docs/recipes.md
index c25a3c2..d7c6058 100644
--- a/docs/recipes.md
+++ b/docs/recipes.md
@@ -75,11 +75,34 @@ the input or output size. Before starting an operation:
 - reject input larger than the product's tested limit;
 - confirm sufficient local storage for native temporary outputs;
 - prevent unbounded simultaneous calls from user actions;
-- expose cancellation at the surrounding workflow level when appropriate;
+- pass an `AbortSignal` to Web operations when cancellation is appropriate;
 - move very large update generation to controlled backend infrastructure.
 
-Native calls share a library-owned serial queue. Separate Web calls each create
-their own Worker, so the application should limit Web concurrency explicitly.
+Native calls share a library-owned serial queue. Web calls without a signal
+reuse a shared Worker and WebAssembly instance. Signalled calls use dedicated
+Workers so they can be terminated independently. The application should still
+limit aggregate Web concurrency and memory explicitly.
+
+```ts
+const controller = new AbortController();
+const options = {
+  signal: controller.signal,
+  maxInputBytes: 64 * 1024 * 1024,
+  maxOutputBytes: 64 * 1024 * 1024,
+};
+
+try {
+  const patchData = await diffBytes(oldData, newData, options);
+  const restoredData = await patchBytes(oldData, patchData, options);
+} catch (error) {
+  if (isPatchError(error) && error.code === 'EABORTED') return;
+  if (isPatchError(error) && error.code === 'ERESOURCE') {
+    // Show the product's size-limit guidance.
+    return;
+  }
+  throw error;
+}
+```
 
 ## Download a Web patch
 
diff --git a/docs/troubleshooting.md b/docs/troubleshooting.md
index 94e3079..c117416 100644
--- a/docs/troubleshooting.md
+++ b/docs/troubleshooting.md
@@ -7,6 +7,8 @@ Start with the error `code`, then confirm the runtime and input model:
 | Native module cannot be found    | Rebuild the installed native application         |
 | `ENOENT`, `EEXIST`, `EINVAL`     | Inspect path state before starting native work   |
 | `EUNSUPPORTED`                   | Confirm that the correct API family was selected |
+| `EABORTED`, `ERESOURCE`          | Check Web cancellation and byte limits           |
+| `EDIFF`, `EPATCH`                | Check native I/O and patch integrity             |
 | Worker or `EWEBASSEMBLY` failure | Check emitted Web assets, CSP, and patch magic   |
 | High memory use                  | Enforce input and concurrency limits             |
 
@@ -45,6 +47,14 @@ The path-based `diff` and `patch` APIs are native-only. Use `diffBytes` and
 `patchBytes` in React Native Web. If a binary API reports that Web Workers are
 required, call it in browser/client code rather than during SSR.
 
+## `EABORTED` or `ERESOURCE`
+
+`EABORTED` means the `AbortSignal` supplied to a Web operation was already
+aborted or became aborted while its dedicated Worker was active. `ERESOURCE`
+means an input, generated patch, or declared restored output exceeded the
+configured byte limit. Both are expected control-flow errors rather than a
+WebAssembly failure.
+
 ## Worker failed to load
 
 Confirm the bundler emits module-worker assets and that the deployed server
@@ -55,20 +65,26 @@ Open the browser network panel and confirm `worker.mjs`, `operations.mjs`, and
 `bsdiffpatch.mjs` are returned with successful status codes rather than the
 application HTML fallback.
 
-## `EWEBASSEMBLY` or corrupt patch
+## `EPATCH`, `EWEBASSEMBLY`, or corrupt patch
 
 Check the first 16 bytes of the patch. Supported patches begin with
 `ENDSLEY/BSDIFF43`. A truncated patch, a `BSDIFF40` patch, or unrelated binary
 data will be rejected.
 
+Native corrupt-patch failures use `EPATCH`; native patch-generation failures
+use `EDIFF`. Web validation and C-core failures use `EWEBASSEMBLY` unless a
+resource limit supplied the more specific `ERESOURCE` code. Failed native calls
+remove any partial output owned by that operation.
+
 ## High memory use
 
 The algorithm and adapters operate on complete in-memory buffers. Add a size
 check before calling the library and avoid accepting arbitrary large untrusted
 files. Web execution is off-main-thread but still consumes the tab's memory.
 
-Multiple Web operations create separate Workers. Debounce repeated user actions
-and add an application-level queue if large calls can overlap.
+Unsignalled Web operations queue through a shared Worker. Signalled operations
+use dedicated Workers for isolated cancellation. Debounce repeated user actions
+and add an application-level budget if large calls can overlap.
 
 ## Restored output does not match
 
diff --git a/docs/zh-CN/api-reference.md b/docs/zh-CN/api-reference.md
index b5684d5..c912c01 100644
--- a/docs/zh-CN/api-reference.md
+++ b/docs/zh-CN/api-reference.md
@@ -10,6 +10,7 @@ import {
   diffBytes,
   patchBytes,
   type BinaryInput,
+  type BinaryOperationOptions,
 } from 'react-native-bs-diff-patch';
 ```
 
@@ -53,9 +54,16 @@ function patch(
 ```ts
 type BinaryInput = ArrayBuffer | ArrayBufferView | Blob;
 
+interface BinaryOperationOptions {
+  signal?: AbortSignal;
+  maxInputBytes?: number;
+  maxOutputBytes?: number;
+}
+
 function diffBytes(
   oldData: BinaryInput,
-  newData: BinaryInput
+  newData: BinaryInput,
+  options?: BinaryOperationOptions
 ): Promise<Uint8Array>;
 ```
 
@@ -64,13 +72,16 @@ function diffBytes(
 - 接受 `ArrayBuffer`、任意 TypedArray、`DataView` 和 `Blob`。
 - 会复制输入，不会让调用方缓冲区失效。
 - 返回包含 `ENDSLEY/BSDIFF43` 补丁的新 `Uint8Array`。
+- 配置上限后，分别用 `maxInputBytes` 检查每个输入，并用 `maxOutputBytes`
+  检查生成补丁。
 
 ## `patchBytes`
 
 ```ts
 function patchBytes(
   oldData: BinaryInput,
-  patchData: BinaryInput
+  patchData: BinaryInput,
+  options?: BinaryOperationOptions
 ): Promise<Uint8Array>;
 ```
 
@@ -79,6 +90,19 @@ function patchBytes(
 - 进入 WebAssembly 核心前会校验补丁头。
 - 复制输入并返回新的 `Uint8Array`。
 - 不会修改 `oldData` 或 `patchData`。
+- 当补丁头声明的输出超过 `maxOutputBytes` 时，会在分配输出前拒绝。
+
+## Web 操作选项
+
+- `signal` 取消当前 Web 操作。带 signal 的调用使用专用 Worker，因此取消不会中断
+  其他请求。
+- `maxInputBytes` 分别限制每个二进制输入，而不是输入之和。
+- `maxOutputBytes` 限制生成补丁或还原输出。
+- 上限必须是非负安全整数；非法上限以 `EINVAL` 拒绝，超过上限以 `ERESOURCE`
+  拒绝。
+
+原生端的二进制 API 接受 options 参数只是为了让共享封装保持源码兼容，随后仍会以
+`EUNSUPPORTED` 拒绝。原生资源策略由应用的文件系统与外围流程负责。
 
 ## 平台不可用时的行为
 
@@ -103,6 +127,10 @@ type PatchError = Error & { code?: string };
 | `EEXIST`       | 原生端输出路径已经存在。                  |
 | `EUNSUPPORTED` | 当前平台不支持所选 API。                  |
 | `EUNAVAILABLE` | 原生模块工作队列已经关闭。                |
+| `EABORTED`     | Web 操作被传入的 signal 取消。            |
+| `ERESOURCE`    | 超过配置的 Web 输入或输出字节上限。       |
+| `EDIFF`        | 原生 diff 核心拒绝输入或无法写入补丁。    |
+| `EPATCH`       | 原生 patch 核心拒绝损坏补丁或输出失败。   |
 | `EWEBASSEMBLY` | Worker、补丁校验或 WebAssembly 执行失败。 |
 | `EUNSPECIFIED` | 未分类的原生异常。                        |
 
@@ -110,8 +138,9 @@ type PatchError = Error & { code?: string };
 
 ## 并发与顺序
 
-每个原生平台使用库内部的串行队列。每次 Web 调用会创建独立模块 Worker，并在完成后
-终止。不要假设不同 Web 调用会按提交顺序结束；对大输入应设置应用级并发限制。
+每个原生平台使用库内部的串行队列。不带 signal 的 Web 调用共用一个模块 Worker、
+串行请求队列和已缓存的 WebAssembly 模块；带 signal 的调用使用专用 Worker，确保
+取消仅影响当前操作。对大输入仍应设置应用级并发和内存预算。
 
 ## 补丁格式
 
diff --git a/docs/zh-CN/architecture.md b/docs/zh-CN/architecture.md
index 572ad65..c836113 100644
--- a/docs/zh-CN/architecture.md
+++ b/docs/zh-CN/architecture.md
@@ -14,7 +14,7 @@ React Native JavaScript
 
 React Native Web
   -> 强类型公开 API
-  -> 模块 Web Worker
+  -> 共享或取消任务专用的模块 Web Worker
   -> Emscripten MEMFS
   -> 由同一套 bsdiff + bzip2 C 源码编译的 WebAssembly
 ```
@@ -22,6 +22,11 @@ React Native Web
 Worker 边界让高开销二进制计算离开 JavaScript / UI 线程，但不会消除算法成本。
 调用方仍需设置符合产品场景的输入大小和时间限制。
 
+未传 `AbortSignal` 的 Web 调用复用一个 Worker 和已缓存的 Emscripten 模块，避免
+重复初始化 Worker 与 WebAssembly。带 signal 的调用使用专用 Worker，取消 signal
+只会终止该 Worker。每个 Worker 在自己的队列内串行执行，并在每次操作后删除
+MEMFS 临时文件。
+
 ## 补丁线格式
 
 补丁以 24 字节头开始：
@@ -50,6 +55,28 @@ bsdiff 和 bzip2 源码，从而保持跨平台兼容。
 
 生成的 `web/bsdiffpatch.mjs` 随 npm 包发布，消费者无需安装 Emscripten。
 
+## 兼容性验证
+
+仓库内 golden fixture 证明 Web 实现生成的确定性补丁字节可被 Android 与 iOS
+消费。设备运行时测试还会应用 Web golden patch，并验证截断补丁会被拒绝且不会
+留下残缺输出。C patch 核心具有 sanitizer 支持的畸形输入 fuzz 覆盖，非法数据不会
+终止宿主进程。
+
+## Web 参考基准
+
+`yarn benchmark:web` 使用每 4 KiB 修改一个字节的确定性输入，并逐字节验证还原
+结果。在 Apple M3 Pro、Node 26.5.0 上，仓库记录的 2026-07-19 基准如下：
+
+| 输入   | Diff        | Patch    | 补丁字节数 |
+| ------ | ----------- | -------- | ---------- |
+| 1 MiB  | 158.5 ms    | 7.7 ms   | 110        |
+| 10 MiB | 4,243.6 ms  | 57.5 ms  | 118        |
+| 50 MiB | 30,697.5 ms | 285.2 ms | 203        |
+
+这些数据是可复现的开发基线，不是设备或浏览器性能保证。输入相似度、CPU、浏览器、
+内存压力和工具链版本都会显著影响结果。完整机器可读记录位于
+[`benchmarks/web-wasm.json`](https://github.com/JimmyDaddy/react-native-bs-diff-patch/blob/main/benchmarks/web-wasm.json)。
+
 ## 内存模型
 
 原生操作会把旧文件与目标文件读入进程内存。Web 调用先复制输入再传给 Worker，
diff --git a/docs/zh-CN/development.md b/docs/zh-CN/development.md
index 3032db5..6598e43 100644
--- a/docs/zh-CN/development.md
+++ b/docs/zh-CN/development.md
@@ -31,11 +31,34 @@ yarn test --runInBand
 yarn test:web
 yarn test:web:browser
 yarn test:web:metro
+yarn test:package
 ```
 
 - `test:web` 检查 WebAssembly 往返和补丁 magic。
 - `test:web:browser` 在 Chrome 中运行公开 Worker API。
 - `test:web:metro` 证明 Metro 选择 `.web` 入口，而不是原生 TurboModule facade。
+- `test:package` 将真实 tarball 安装到干净消费者，验证 browser、ESM、CommonJS、
+  TypeScript 与可选 peer 行为。
+
+## 原生健壮性与兼容性
+
+```sh
+FUZZ_RUNS=2000 yarn test:fuzz
+scripts/test-rn-android-compatibility.sh 0.73.11 new
+scripts/test-rn-android-compatibility.sh 0.74.7 new
+scripts/test-rn-android-compatibility.sh 0.86.0 new
+```
+
+本地 Clang runtime 支持时，fuzz 门禁使用 libFuzzer、AddressSanitizer 与
+UndefinedBehaviorSanitizer；否则运行确定性 sanitizer 语料。兼容 fixture 会使用所选
+React Native artifact 直接编译真实 Android 模块源码，不依赖源码文本断言。
+
+可复现的 Web 性能基准命令：
+
+```sh
+yarn benchmark:web
+BENCHMARK_OUTPUT=/tmp/web-wasm.json yarn benchmark:web
+```
 
 ## 站点与文档
 
@@ -63,8 +86,10 @@ yarn test:web:browser
 
 ## 原生验证
 
-Android CI 构建两种架构模式，并在模拟器矩阵执行新架构设备级往返测试。iOS CI
-使用示例 Gemfile 锁定的 CocoaPods 版本构建并测试旧架构和新架构配置。
+Android CI 构建两种架构模式，使用 React Native 0.73.11、0.74.7 与 0.86.0
+直接编译新架构源码，并在模拟器矩阵执行新架构设备级往返测试。iOS CI 使用示例
+Gemfile 锁定的 CocoaPods 版本构建并测试旧架构和新架构配置。设备测试包含跨平台
+golden patch 和损坏补丁拒绝断言。
 
 本地示例命令见仓库
 [CONTRIBUTING.md](https://github.com/JimmyDaddy/react-native-bs-diff-patch/blob/main/CONTRIBUTING.md)。
@@ -72,7 +97,7 @@ Android CI 构建两种架构模式，并在模拟器矩阵执行新架构设备
 ## 发布检查清单
 
 1. 执行核心、Web 和站点门禁。
-2. 检查 `npm pack --dry-run --ignore-scripts`，确认包含 `web/`。
+2. 运行 `yarn test:package`，并检查 `npm pack --dry-run --ignore-scripts`。
 3. 确认公开文档与导出的 TypeScript 声明一致。
 4. 确认中英文指南描述同一套公开行为。
 5. 运行 `yarn release` 创建版本、tag 和 GitHub Release；该命令不直接发布 npm。
diff --git a/docs/zh-CN/getting-started.md b/docs/zh-CN/getting-started.md
index 557cfdd..e7d68e6 100644
--- a/docs/zh-CN/getting-started.md
+++ b/docs/zh-CN/getting-started.md
@@ -82,8 +82,14 @@ const encoder = new TextEncoder();
 const oldData = encoder.encode('version 1');
 const newData = encoder.encode('version 2 with web support');
 
-const patchData = await diffBytes(oldData, newData);
-const restoredData = await patchBytes(oldData, patchData);
+const controller = new AbortController();
+const options = {
+  signal: controller.signal,
+  maxInputBytes: 32 * 1024 * 1024,
+  maxOutputBytes: 32 * 1024 * 1024,
+};
+const patchData = await diffBytes(oldData, newData, options);
+const restoredData = await patchBytes(oldData, patchData, options);
 
 const matches =
   restoredData.length === newData.length &&
@@ -97,6 +103,10 @@ if (!matches) {
 输入在传给模块 Worker 前会被复制，因此调用方持有的缓冲区仍可继续使用。每次调用
 都会返回新的 `Uint8Array`。
 
+调用 `controller.abort()` 会让当前操作以 `EABORTED` 拒绝；命中配置的字节上限时
+以 `ERESOURCE` 拒绝。不带 signal 的调用会复用共享 Worker 与 WebAssembly 实例；
+带 signal 的调用使用专用 Worker，因此取消一个操作不会中断其他操作。
+
 ## 使用浏览器文件
 
 ```ts
diff --git a/docs/zh-CN/platform-support.md b/docs/zh-CN/platform-support.md
index 4ea881f..6632d46 100644
--- a/docs/zh-CN/platform-support.md
+++ b/docs/zh-CN/platform-support.md
@@ -11,8 +11,9 @@
 | 后台执行             | 串行 executor      | 串行队列 | 模块 Web Worker  |
 | 补丁格式             | `ENDSLEY/BSDIFF43` | 同左     | 同左             |
 
-示例应用持续验证 React Native 0.73。CI 也通过消费者 fixture 构建验证较新的新架构
-包 API，包括下面说明的 Android 包 API 分界。
+示例应用持续验证 React Native 0.73.2。Android 源码兼容矩阵会直接使用 React
+Native 0.73.11、0.74.7 与 0.86.0 编译新架构集成；常规 Android 构建还会编译
+0.73 旧架构。这些是已测试版本，并不承诺所有中间版本或未来版本必然兼容。
 
 ## Android
 
@@ -47,6 +48,7 @@ TurboModule 实例。
 - 模块 Web Worker；
 - `ArrayBuffer` 与 TypedArray；
 - 使用 `Blob` 输入时的 `Blob.arrayBuffer()`。
+- 使用操作取消功能时的 `AbortController`。
 
 Webpack 与 Vite 能识别标准的
 `new Worker(new URL(..., import.meta.url), { type: 'module' })` 模式。Metro Web
@@ -55,6 +57,10 @@ Webpack 与 Vite 能识别标准的
 Web 入口面向浏览器，不是 Node.js 文件系统适配器；它不会在 Node.js 中提供原生
 文件路径 API。
 
+未传 `AbortSignal` 的调用共用模块 Worker 与已初始化的 WebAssembly 模块；带
+signal 的调用使用专用 Worker，保证取消只影响当前任务。两种路径都会在各自 Worker
+内串行执行，但调用方仍应设置应用级内存预算。
+
 ## 服务端渲染
 
 导入 Web 入口不会创建 Worker。在没有 `Worker` 的环境调用 `diffBytes` 或
diff --git a/docs/zh-CN/recipes.md b/docs/zh-CN/recipes.md
index 4ef914f..2f6b192 100644
--- a/docs/zh-CN/recipes.md
+++ b/docs/zh-CN/recipes.md
@@ -66,11 +66,33 @@ try {
 - 拒绝超过产品验证上限的输入；
 - 确认原生端临时输出所需的本地空间；
 - 防止用户操作触发无限并发；
-- 在外围流程适合的位置提供取消能力；
+- Web 操作需要取消时传入 `AbortSignal`；
 - 将超大更新的生成工作放到受控后端基础设施。
 
-原生调用共用库内部串行队列；不同 Web 调用各自创建 Worker，因此应用应显式限制
-Web 并发。
+原生调用共用库内部串行队列。不带 signal 的 Web 调用复用共享 Worker 与
+WebAssembly 实例；带 signal 的调用使用专用 Worker，因此可以独立终止。应用仍应
+显式限制 Web 总并发和内存。
+
+```ts
+const controller = new AbortController();
+const options = {
+  signal: controller.signal,
+  maxInputBytes: 64 * 1024 * 1024,
+  maxOutputBytes: 64 * 1024 * 1024,
+};
+
+try {
+  const patchData = await diffBytes(oldData, newData, options);
+  const restoredData = await patchBytes(oldData, patchData, options);
+} catch (error) {
+  if (isPatchError(error) && error.code === 'EABORTED') return;
+  if (isPatchError(error) && error.code === 'ERESOURCE') {
+    // 展示产品自己的大小限制说明。
+    return;
+  }
+  throw error;
+}
+```
 
 ## 下载 Web 补丁
 
diff --git a/docs/zh-CN/troubleshooting.md b/docs/zh-CN/troubleshooting.md
index 8d919bc..b6cf2c2 100644
--- a/docs/zh-CN/troubleshooting.md
+++ b/docs/zh-CN/troubleshooting.md
@@ -7,6 +7,8 @@
 | 找不到原生模块                | 重新构建并安装原生应用          |
 | `ENOENT`、`EEXIST`、`EINVAL`  | 在原生任务开始前检查路径状态    |
 | `EUNSUPPORTED`                | 确认选择了当前平台对应的 API 族 |
+| `EABORTED`、`ERESOURCE`       | 检查 Web 取消与配置的字节上限   |
+| `EDIFF`、`EPATCH`             | 检查原生 I/O 与补丁完整性       |
 | Worker 或 `EWEBASSEMBLY` 失败 | 检查 Web 资源、CSP 和补丁 magic |
 | 内存占用过高                  | 设置输入大小和并发限制          |
 
@@ -42,6 +44,12 @@
 路径版 `diff` 和 `patch` 仅原生可用。React Native Web 应使用 `diffBytes` 和
 `patchBytes`。如果错误指出需要 Web Worker，请在浏览器客户端而不是 SSR 中调用。
 
+## `EABORTED` 或 `ERESOURCE`
+
+`EABORTED` 表示传给 Web 操作的 `AbortSignal` 在开始前或专用 Worker 运行时被取消。
+`ERESOURCE` 表示输入、生成补丁或补丁声明的还原输出超过配置的字节上限。二者是预期
+控制流错误，并不表示 WebAssembly 损坏。
+
 ## Worker 加载失败
 
 确认打包器输出了模块 Worker 资源，并且服务器将 `.mjs` 作为 JavaScript 提供。
@@ -50,18 +58,22 @@
 在浏览器网络面板中确认 `worker.mjs`、`operations.mjs` 和 `bsdiffpatch.mjs`
 返回成功状态，而不是应用 HTML fallback。
 
-## `EWEBASSEMBLY` 或补丁损坏
+## `EPATCH`、`EWEBASSEMBLY` 或补丁损坏
 
 检查补丁前 16 字节。受支持补丁以 `ENDSLEY/BSDIFF43` 开头。截断补丁、
 `BSDIFF40` 补丁或其他二进制数据都会被拒绝。
 
+原生端损坏补丁使用 `EPATCH`，补丁生成失败使用 `EDIFF`。Web 校验与 C 核心失败使用
+`EWEBASSEMBLY`，除非资源上限提供了更具体的 `ERESOURCE`。原生调用失败时会删除该
+操作拥有的残留输出。
+
 ## 内存占用过高
 
 算法和适配器处理完整内存缓冲区。调用前添加大小限制，不要接受任意大的不可信文件。
 Web 虽在主线程外执行，仍会消耗当前标签页内存。
 
-不同 Web 操作会创建不同 Worker。对重复用户操作进行防抖；大任务可能重叠时使用
-应用级队列。
+不带 signal 的 Web 操作在共享 Worker 中排队；带 signal 的操作使用专用 Worker，
+以实现隔离取消。对重复用户操作进行防抖；大任务可能重叠时设置应用级预算。
 
 ## 还原结果不一致
 
diff --git a/example/src/App.tsx b/example/src/App.tsx
index bd379b5..d8ecd8a 100644
--- a/example/src/App.tsx
+++ b/example/src/App.tsx
@@ -4,11 +4,21 @@ import { StyleSheet, View, Text } from 'react-native';
 import { diff, patch } from 'react-native-bs-diff-patch';
 import * as FS from 'react-native-fs';
 
+import crossPlatformFixture from '../../fixtures/cross-platform.json';
+
 export default function App() {
   const newFile = FS.DocumentDirectoryPath + '/test1.txt';
   const oldFile = FS.DocumentDirectoryPath + '/test.txt';
   const patchFile = FS.DocumentDirectoryPath + '/patch.txt';
   const newFile1 = FS.DocumentDirectoryPath + '/test2.txt';
+  const goldenOldFile = FS.DocumentDirectoryPath + '/golden-old.bin';
+  const goldenNewFile = FS.DocumentDirectoryPath + '/golden-new.bin';
+  const goldenPatchFile = FS.DocumentDirectoryPath + '/golden.patch';
+  const goldenOutputFile = FS.DocumentDirectoryPath + '/golden-output.bin';
+  const generatedGoldenPatchFile =
+    FS.DocumentDirectoryPath + '/golden-generated.patch';
+  const corruptPatchFile = FS.DocumentDirectoryPath + '/corrupt.patch';
+  const corruptOutputFile = FS.DocumentDirectoryPath + '/corrupt-output.bin';
 
   const [textLength, setTextLength] = React.useState<number | undefined>();
   const [patchFileUri, setPatchFileUri] = React.useState<string | undefined>();
@@ -31,6 +41,20 @@ export default function App() {
           await FS.unlink(newFile1);
         }
 
+        for (const file of [
+          goldenOldFile,
+          goldenNewFile,
+          goldenPatchFile,
+          goldenOutputFile,
+          generatedGoldenPatchFile,
+          corruptPatchFile,
+          corruptOutputFile,
+        ]) {
+          if (await FS.exists(file)) {
+            await FS.unlink(file);
+          }
+        }
+
         const diffResult = await diff(oldFile, newFile, patchFile);
         const patchFileInfo = await FS.stat(patchFile);
         const patchResult = await patch(oldFile, newFile1, patchFile);
@@ -46,6 +70,63 @@ export default function App() {
           );
         }
 
+        await FS.writeFile(
+          goldenOldFile,
+          crossPlatformFixture.oldBase64,
+          'base64'
+        );
+        await FS.writeFile(
+          goldenNewFile,
+          crossPlatformFixture.newBase64,
+          'base64'
+        );
+        await FS.writeFile(
+          goldenPatchFile,
+          crossPlatformFixture.patchBase64,
+          'base64'
+        );
+        await diff(goldenOldFile, goldenNewFile, generatedGoldenPatchFile);
+        const generatedGoldenPatch = await FS.readFile(
+          generatedGoldenPatchFile,
+          'base64'
+        );
+        if (generatedGoldenPatch !== crossPlatformFixture.patchBase64) {
+          throw new Error('native diff did not match the cross-platform patch');
+        }
+
+        await patch(goldenOldFile, goldenOutputFile, goldenPatchFile);
+        const restoredGoldenFile = await FS.readFile(
+          goldenOutputFile,
+          'base64'
+        );
+        if (restoredGoldenFile !== crossPlatformFixture.newBase64) {
+          throw new Error(
+            'native patch did not restore the cross-platform fixture'
+          );
+        }
+
+        await FS.writeFile(
+          corruptPatchFile,
+          'bm90IGEgYnNkaWZmIHBhdGNo',
+          'base64'
+        );
+        let corruptPatchErrorCode: string | undefined;
+        try {
+          await patch(goldenOldFile, corruptOutputFile, corruptPatchFile);
+        } catch (error) {
+          corruptPatchErrorCode = (error as { code?: string }).code;
+        }
+        if (corruptPatchErrorCode !== 'EPATCH') {
+          throw new Error(
+            `corrupt patch should reject with EPATCH, got ${String(
+              corruptPatchErrorCode
+            )}`
+          );
+        }
+        if (await FS.exists(corruptOutputFile)) {
+          throw new Error('corrupt patch left a partial output file');
+        }
+
         if (!cancelled) {
           setPatchFileUri(patchFileInfo.path);
           setTextLength(patchedContent.length);
@@ -75,7 +156,19 @@ export default function App() {
         }
       });
     };
-  }, [newFile, newFile1, oldFile, patchFile]);
+  }, [
+    corruptOutputFile,
+    corruptPatchFile,
+    generatedGoldenPatchFile,
+    goldenNewFile,
+    goldenOldFile,
+    goldenOutputFile,
+    goldenPatchFile,
+    newFile,
+    newFile1,
+    oldFile,
+    patchFile,
+  ]);
 
   return (
     <View style={styles.container}>
diff --git a/fixtures/cross-platform.json b/fixtures/cross-platform.json
new file mode 100644
index 0000000..4ab403f
--- /dev/null
+++ b/fixtures/cross-platform.json
@@ -0,0 +1,6 @@
+{
+  "format": "ENDSLEY/BSDIFF43",
+  "oldBase64": "Y3Jvc3MtcGxhdGZvcm0gYmFzZWxpbmUgdjEK",
+  "newBase64": "Y3Jvc3MtcGxhdGZvcm0gYmFzZWxpbmUgdjIgd2l0aCBzaGFyZWQgcGF0Y2gK",
+  "patchBase64": "RU5EU0xFWS9CU0RJRkY0My0AAAAAAAAAQlpoOTFBWSZTWU/af/UAAAj5gGgQBCRAABAALmBcgCAAIiZpAAYhTCaaA0xFmBIiUy2lBpcXTr9bweGczhPi7kinChIJ+0/+oA=="
+}
diff --git a/ios/BsDiffPatch.mm b/ios/BsDiffPatch.mm
index 3649814..bcc29a6 100644
--- a/ios/BsDiffPatch.mm
+++ b/ios/BsDiffPatch.mm
@@ -63,8 +63,13 @@ - (dispatch_queue_t)methodQueue
     const char *newFileCString = [newFile UTF8String];
     const char *patchFileCString = [patchFile UTF8String];
 
-    NSNumber *result = @(bsdiffpatch::patchFile(oldFileCString, newFileCString, patchFileCString));
-    resolve(result);
+    int result = bsdiffpatch::patchFile(oldFileCString, newFileCString, patchFileCString);
+    if (result != 0) {
+        NSString *message = [NSString stringWithFormat:@"patch failed with native result %d", result];
+        reject(@"EPATCH", message, nil);
+        return;
+    }
+    resolve(@(result));
 }
 
 RCT_EXPORT_METHOD(diff:(NSString*) oldFile
@@ -105,8 +110,13 @@ - (dispatch_queue_t)methodQueue
     const char *newFileCString = [newFile UTF8String];
     const char *patchFileCString = [patchFile UTF8String];
 
-    NSNumber *result = @(bsdiffpatch::diffFile(oldFileCString, newFileCString, patchFileCString));
-    resolve(result);
+    int result = bsdiffpatch::diffFile(oldFileCString, newFileCString, patchFileCString);
+    if (result != 0) {
+        NSString *message = [NSString stringWithFormat:@"diff failed with native result %d", result];
+        reject(@"EDIFF", message, nil);
+        return;
+    }
+    resolve(@(result));
 }
 
 #ifdef RCT_NEW_ARCH_ENABLED
diff --git a/package.json b/package.json
index 1827061..b60f322 100644
--- a/package.json
+++ b/package.json
@@ -8,6 +8,17 @@
   "types": "lib/typescript/src/index.d.ts",
   "react-native": "src/index",
   "source": "src/index",
+  "exports": {
+    ".": {
+      "types": "./lib/typescript/src/index.d.ts",
+      "react-native": "./src/index.ts",
+      "browser": "./web/index.mjs",
+      "import": "./lib/module/index.js",
+      "require": "./lib/commonjs/index.js",
+      "default": "./lib/commonjs/index.js"
+    },
+    "./package.json": "./package.json"
+  },
   "files": [
     "src",
     "lib",
@@ -15,7 +26,6 @@
     "ios",
     "cpp",
     "web",
-    "scripts/build-web-wasm.sh",
     "*.podspec",
     "!ios/build",
     "!android/build",
@@ -29,6 +39,7 @@
     "!**/__tests__",
     "!**/__fixtures__",
     "!**/__mocks__",
+    "!cpp/fuzz",
     "!**/.*"
   ],
   "scripts": {
@@ -37,6 +48,9 @@
     "test:web": "node scripts/test-web.mjs",
     "test:web:browser": "node scripts/test-web-browser.mjs",
     "test:web:metro": "node scripts/test-web-metro.mjs",
+    "test:package": "node scripts/test-package-consumers.mjs",
+    "test:fuzz": "sh scripts/test-native-fuzz.sh",
+    "benchmark:web": "node scripts/benchmark-web.mjs",
     "site:build": "node scripts/build-site.mjs",
     "site:test": "node scripts/test-site.mjs",
     "site:test:browser": "node scripts/test-site-browser.mjs",
@@ -44,7 +58,7 @@
     "typecheck": "tsc --noEmit",
     "lint": "eslint \"**/*.{js,ts,tsx}\"",
     "clean": "del-cli android/build example/android/build example/android/app/build example/ios/build lib",
-    "prepare": "bob build",
+    "prepare": "bob build && node scripts/prepare-package.mjs",
     "build:web": "bash scripts/build-web-wasm.sh",
     "release": "release-it"
   },
@@ -64,7 +78,7 @@
   "bugs": {
     "url": "https://github.com/JimmyDaddy/react-native-bs-diff-patch/issues"
   },
-  "homepage": "https://github.com/JimmyDaddy/react-native-bs-diff-patch#readme",
+  "homepage": "https://bs-dff-patch.corerobin.com",
   "publishConfig": {
     "registry": "https://registry.npmjs.org/"
   },
@@ -99,6 +113,14 @@
     "react": "*",
     "react-native": "*"
   },
+  "peerDependenciesMeta": {
+    "react": {
+      "optional": true
+    },
+    "react-native": {
+      "optional": true
+    }
+  },
   "workspaces": [
     "example"
   ],
@@ -131,7 +153,8 @@
     },
     "plugins": {
       "@release-it/conventional-changelog": {
-        "preset": "angular"
+        "preset": "angular",
+        "infile": "CHANGELOG.md"
       }
     }
   },
diff --git a/scripts/benchmark-web.mjs b/scripts/benchmark-web.mjs
new file mode 100644
index 0000000..d08bdee
--- /dev/null
+++ b/scripts/benchmark-web.mjs
@@ -0,0 +1,80 @@
+import { cpus } from 'node:os';
+import { writeFile } from 'node:fs/promises';
+import { performance } from 'node:perf_hooks';
+
+import { runOperation } from '../web/operations.mjs';
+
+const mebibyte = 1024 * 1024;
+const sizes = (process.env.BENCHMARK_SIZES_MIB || '1,10,50')
+  .split(',')
+  .map((value) => Number(value.trim()));
+
+if (
+  sizes.some(
+    (value) => !Number.isSafeInteger(value) || value <= 0 || value > 512
+  )
+) {
+  throw new Error('BENCHMARK_SIZES_MIB must contain integers from 1 to 512');
+}
+
+function createInputs(size) {
+  const oldData = new Uint8Array(size);
+  for (let index = 0; index < oldData.length; index += 1) {
+    oldData[index] = (index * 31 + (index >>> 8)) & 0xff;
+  }
+  const newData = oldData.slice();
+  for (let index = 0; index < newData.length; index += 4096) {
+    newData[index] ^= 0x5a;
+  }
+  return { oldData, newData };
+}
+
+const warmup = createInputs(64 * 1024);
+const initializationStartedAt = performance.now();
+await runOperation('diff', warmup.oldData, warmup.newData);
+const initializationMs = performance.now() - initializationStartedAt;
+const results = [];
+
+for (const sizeMiB of sizes) {
+  const { oldData, newData } = createInputs(sizeMiB * mebibyte);
+  const diffStartedAt = performance.now();
+  const patchData = await runOperation('diff', oldData, newData);
+  const diffMs = performance.now() - diffStartedAt;
+  const patchStartedAt = performance.now();
+  const restoredData = await runOperation('patch', oldData, patchData);
+  const patchMs = performance.now() - patchStartedAt;
+
+  if (
+    restoredData.byteLength !== newData.byteLength ||
+    !restoredData.every((value, index) => value === newData[index])
+  ) {
+    throw new Error(`Benchmark round trip failed for ${sizeMiB} MiB`);
+  }
+
+  results.push({
+    sizeMiB,
+    diffMs: Number(diffMs.toFixed(1)),
+    patchMs: Number(patchMs.toFixed(1)),
+    patchBytes: patchData.byteLength,
+  });
+}
+
+const report = {
+  generatedAt: new Date().toISOString(),
+  runtime: {
+    cpu: cpus()[0]?.model || 'unknown',
+    node: process.version,
+    platform: `${process.platform}-${process.arch}`,
+  },
+  workload: {
+    description: 'Deterministic buffers with one changed byte per 4 KiB',
+    initializationMs: Number(initializationMs.toFixed(1)),
+  },
+  results,
+};
+const serializedReport = `${JSON.stringify(report, null, 2)}\n`;
+
+if (process.env.BENCHMARK_OUTPUT) {
+  await writeFile(process.env.BENCHMARK_OUTPUT, serializedReport);
+}
+process.stdout.write(serializedReport);
diff --git a/scripts/prepare-package.mjs b/scripts/prepare-package.mjs
new file mode 100644
index 0000000..f40c168
--- /dev/null
+++ b/scripts/prepare-package.mjs
@@ -0,0 +1,27 @@
+import { mkdir, readFile, readdir, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const scriptDirectory = path.dirname(fileURLToPath(import.meta.url));
+const repositoryDirectory = path.resolve(scriptDirectory, '..');
+const moduleDirectory = path.join(repositoryDirectory, 'lib/module');
+
+await mkdir(moduleDirectory, { recursive: true });
+await writeFile(
+  path.join(moduleDirectory, 'package.json'),
+  `${JSON.stringify({ type: 'module' }, null, 2)}\n`
+);
+
+for (const filename of await readdir(moduleDirectory)) {
+  if (!filename.endsWith('.js')) {
+    continue;
+  }
+  const filePath = path.join(moduleDirectory, filename);
+  const source = await readFile(filePath, 'utf8');
+  const nodeCompatibleSource = source.replace(
+    /(from\s+['"])(\.\.?\/[^'"]+)(['"])/g,
+    (match, prefix, specifier, suffix) =>
+      path.extname(specifier) ? match : `${prefix}${specifier}.js${suffix}`
+  );
+  await writeFile(filePath, nodeCompatibleSource);
+}
diff --git a/scripts/test-native-fuzz.sh b/scripts/test-native-fuzz.sh
new file mode 100755
index 0000000..1414022
--- /dev/null
+++ b/scripts/test-native-fuzz.sh
@@ -0,0 +1,44 @@
+#!/bin/sh
+
+set -eu
+
+repository_directory=$(CDPATH='' cd -- "$(dirname -- "$0")/.." && pwd)
+temporary_directory=$(mktemp -d)
+fuzz_runs="${FUZZ_RUNS:-5000}"
+compiler="${CC:-clang}"
+
+cleanup() {
+  rm -rf "$temporary_directory"
+}
+trap cleanup EXIT INT TERM
+
+if "$compiler" \
+  -std=c11 \
+  -g \
+  -O1 \
+  -fno-omit-frame-pointer \
+  -fsanitize=fuzzer,address,undefined \
+  -I"$repository_directory/cpp" \
+  "$repository_directory/cpp/bspatch.c" \
+  "$repository_directory/cpp/fuzz/bspatch_fuzzer.c" \
+  -lbz2 \
+  -o "$temporary_directory/bspatch-fuzzer" 2>/dev/null; then
+  "$temporary_directory/bspatch-fuzzer" \
+    -runs="$fuzz_runs" \
+    -max_len=512 \
+    -print_final_stats=1
+else
+  "$compiler" \
+    -std=c11 \
+    -g \
+    -O1 \
+    -fno-omit-frame-pointer \
+    -DBSDIFFPATCH_STANDALONE_FUZZ=1 \
+    -fsanitize=address,undefined \
+    -I"$repository_directory/cpp" \
+    "$repository_directory/cpp/bspatch.c" \
+    "$repository_directory/cpp/fuzz/bspatch_fuzzer.c" \
+    -lbz2 \
+    -o "$temporary_directory/bspatch-fuzzer"
+  "$temporary_directory/bspatch-fuzzer" "$fuzz_runs"
+fi
diff --git a/scripts/test-package-consumers.mjs b/scripts/test-package-consumers.mjs
new file mode 100644
index 0000000..17449dd
--- /dev/null
+++ b/scripts/test-package-consumers.mjs
@@ -0,0 +1,224 @@
+import assert from 'node:assert/strict';
+import { spawnSync } from 'node:child_process';
+import {
+  access,
+  mkdir,
+  mkdtemp,
+  readFile,
+  rm,
+  writeFile,
+} from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const scriptDirectory = path.dirname(fileURLToPath(import.meta.url));
+const repositoryDirectory = path.resolve(scriptDirectory, '..');
+const temporaryDirectory = await mkdtemp(
+  path.join(os.tmpdir(), 'react-native-bs-diff-patch-consumer-')
+);
+const consumerDirectory = path.join(temporaryDirectory, 'consumer');
+
+function run(command, args, options = {}) {
+  const result = spawnSync(command, args, {
+    cwd: options.cwd || repositoryDirectory,
+    encoding: 'utf8',
+    env: { ...process.env, ...options.env },
+  });
+
+  if (result.status !== 0) {
+    throw new Error(
+      `${command} ${args.join(' ')} failed:\n${result.stdout || ''}${
+        result.stderr || ''
+      }`
+    );
+  }
+
+  return result.stdout.trim();
+}
+
+async function pathExists(candidate) {
+  try {
+    await access(candidate);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+try {
+  const packOutput = JSON.parse(
+    run('npm', [
+      'pack',
+      '--ignore-scripts',
+      '--json',
+      '--pack-destination',
+      temporaryDirectory,
+    ])
+  );
+  const tarballPath = path.join(temporaryDirectory, packOutput[0].filename);
+
+  await mkdir(consumerDirectory, { recursive: true });
+  await writeFile(
+    path.join(consumerDirectory, 'package.json'),
+    `${JSON.stringify(
+      { name: 'package-consumer-smoke', private: true },
+      null,
+      2
+    )}\n`
+  );
+  run(
+    'npm',
+    [
+      'install',
+      tarballPath,
+      '--ignore-scripts',
+      '--no-audit',
+      '--no-fund',
+      '--package-lock=false',
+    ],
+    { cwd: consumerDirectory }
+  );
+
+  assert.equal(
+    await pathExists(path.join(consumerDirectory, 'node_modules/react')),
+    false,
+    'A browser-only install must not auto-install the optional React peer'
+  );
+  assert.equal(
+    await pathExists(path.join(consumerDirectory, 'node_modules/react-native')),
+    false,
+    'A browser-only install must not auto-install the optional React Native peer'
+  );
+
+  const fakeReactNativeDirectory = path.join(
+    consumerDirectory,
+    'node_modules/react-native'
+  );
+  await mkdir(fakeReactNativeDirectory, { recursive: true });
+  await writeFile(
+    path.join(fakeReactNativeDirectory, 'package.json'),
+    `${JSON.stringify(
+      {
+        name: 'react-native',
+        version: '0.0.0-test',
+        exports: { import: './index.mjs', require: './index.cjs' },
+      },
+      null,
+      2
+    )}\n`
+  );
+  const fakeRegistry =
+    'const moduleValue = { diff: async () => 0, patch: async () => 0 };\n';
+  await writeFile(
+    path.join(fakeReactNativeDirectory, 'index.mjs'),
+    `${fakeRegistry}export const TurboModuleRegistry = { getEnforcing: () => moduleValue };\n`
+  );
+  await writeFile(
+    path.join(fakeReactNativeDirectory, 'index.cjs'),
+    `${fakeRegistry}exports.TurboModuleRegistry = { getEnforcing: () => moduleValue };\n`
+  );
+
+  const installedPackageDirectory = path.join(
+    consumerDirectory,
+    'node_modules/react-native-bs-diff-patch'
+  );
+  const installedManifest = JSON.parse(
+    await readFile(path.join(installedPackageDirectory, 'package.json'), 'utf8')
+  );
+  assert.equal(installedManifest.exports['.'].browser, './web/index.mjs');
+  assert.equal(
+    installedManifest.exports['.']['react-native'],
+    './src/index.ts'
+  );
+
+  await writeFile(
+    path.join(consumerDirectory, 'resolve.cjs'),
+    "console.log(require.resolve('react-native-bs-diff-patch'));\n"
+  );
+  assert.match(
+    run('node', ['resolve.cjs'], { cwd: consumerDirectory }),
+    /lib\/commonjs\/index\.js$/
+  );
+
+  await writeFile(
+    path.join(consumerDirectory, 'resolve.mjs'),
+    "console.log(import.meta.resolve('react-native-bs-diff-patch'));\n"
+  );
+  assert.match(
+    run('node', ['resolve.mjs'], { cwd: consumerDirectory }),
+    /lib\/module\/index\.js$/
+  );
+
+  await writeFile(
+    path.join(consumerDirectory, 'load.mjs'),
+    [
+      "import { diff, diffBytes } from 'react-native-bs-diff-patch';",
+      "if ((await diff('old', 'new', 'patch')) !== 0) throw new Error('ESM diff failed');",
+      'const error = await diffBytes(new Uint8Array(), new Uint8Array()).catch((value) => value);',
+      "if (!error || error.code !== 'EUNSUPPORTED') throw new Error('ESM facade failed');",
+    ].join('\n')
+  );
+  run('node', ['load.mjs'], { cwd: consumerDirectory });
+
+  await writeFile(
+    path.join(consumerDirectory, 'load.cjs'),
+    [
+      "const { diff, diffBytes } = require('react-native-bs-diff-patch');",
+      'void (async () => {',
+      "  if ((await diff('old', 'new', 'patch')) !== 0) throw new Error('CJS diff failed');",
+      '  const error = await diffBytes(new Uint8Array(), new Uint8Array()).catch((value) => value);',
+      "  if (!error || error.code !== 'EUNSUPPORTED') throw new Error('CJS facade failed');",
+      '})().catch((error) => { console.error(error); process.exitCode = 1; });',
+    ].join('\n')
+  );
+  run('node', ['load.cjs'], { cwd: consumerDirectory });
+
+  await writeFile(
+    path.join(consumerDirectory, 'browser.mjs'),
+    [
+      "import { diffBytes, patch } from 'react-native-bs-diff-patch';",
+      "if (typeof diffBytes !== 'function') throw new Error('Missing Web binary API');",
+      "const error = await patch('old', 'new', 'patch').catch((value) => value);",
+      "if (!error || error.code !== 'EUNSUPPORTED') throw new Error('Wrong Web path API');",
+    ].join('\n')
+  );
+  run('node', ['--conditions=browser', 'browser.mjs'], {
+    cwd: consumerDirectory,
+  });
+
+  await writeFile(
+    path.join(consumerDirectory, 'consumer.ts'),
+    [
+      "import { diffBytes, type BinaryInput } from 'react-native-bs-diff-patch';",
+      'const input: BinaryInput = new Uint8Array([1, 2, 3]);',
+      'void diffBytes(input, input);',
+    ].join('\n')
+  );
+  run(
+    process.execPath,
+    [
+      path.join(repositoryDirectory, 'node_modules/typescript/bin/tsc'),
+      '--noEmit',
+      '--strict',
+      '--target',
+      'ES2022',
+      '--module',
+      'NodeNext',
+      '--moduleResolution',
+      'NodeNext',
+      '--customConditions',
+      'browser',
+      '--lib',
+      'ES2022,DOM',
+      'consumer.ts',
+    ],
+    { cwd: consumerDirectory }
+  );
+
+  console.log(
+    'Packed consumer install, optional peers, conditional exports, and types passed'
+  );
+} finally {
+  await rm(temporaryDirectory, { recursive: true, force: true });
+}
diff --git a/scripts/test-rn-android-compatibility.sh b/scripts/test-rn-android-compatibility.sh
new file mode 100755
index 0000000..9c0e5bb
--- /dev/null
+++ b/scripts/test-rn-android-compatibility.sh
@@ -0,0 +1,28 @@
+#!/bin/sh
+
+set -eu
+
+if [ "$#" -lt 1 ] || [ "$#" -gt 2 ]; then
+  echo "Usage: $0 <react-native-version> [old|new]" >&2
+  exit 2
+fi
+
+react_native_version="$1"
+architecture="${2:-new}"
+repository_directory=$(CDPATH='' cd -- "$(dirname -- "$0")/.." && pwd)
+react_native_minor=$(printf '%s\n' "$react_native_version" | cut -d. -f2)
+
+if [ "$react_native_minor" -ge 86 ]; then
+  kotlin_version=2.1.20
+else
+  kotlin_version=1.9.22
+fi
+
+"$repository_directory/example/android/gradlew" \
+  -p "$repository_directory/compatibility/android-api" \
+  --no-daemon \
+  --stacktrace \
+  -PreactNativeVersion="$react_native_version" \
+  -PkotlinVersion="$kotlin_version" \
+  -Parchitecture="$architecture" \
+  clean compileReleaseKotlin
diff --git a/scripts/test-site-browser.mjs b/scripts/test-site-browser.mjs
index 56e02fd..0344d9e 100644
--- a/scripts/test-site-browser.mjs
+++ b/scripts/test-site-browser.mjs
@@ -89,10 +89,12 @@ try {
     heading: document.querySelector('h1')?.textContent,
     patchSize: document.querySelector('#patch-size')?.textContent,
     status: document.querySelector('#playground-status')?.textContent?.trim(),
+    evidenceRows: document.querySelectorAll('.benchmark-table tbody tr').length,
   }));
   assert.match(result.heading || '', /Binary deltas/);
   assert.notEqual(result.patchSize, '—');
   assert.match(result.status || '', /verified byte-for-byte/);
+  assert.equal(result.evidenceRows, 3);
 
   await page.setViewport({ width: 390, height: 844, deviceScaleFactor: 1 });
   await page.reload({ waitUntil: 'networkidle0' });
diff --git a/scripts/test-site.mjs b/scripts/test-site.mjs
index d5688d5..3db4514 100644
--- a/scripts/test-site.mjs
+++ b/scripts/test-site.mjs
@@ -155,6 +155,11 @@ const homepage = await readFile(
 );
 assert.match(homepage, /id="playground"/);
 assert.match(homepage, /id="generate-patch"/);
+assert.match(homepage, /id="evidence"/);
+assert.match(homepage, /RN 0\.73\.11/);
+assert.match(homepage, /RN 0\.86\.0/);
+assert.match(homepage, /111 KiB packed/);
+assert.match(homepage, /30,697\.5 ms/);
 assert.match(homepage, /assets\/playground\.js/);
 
 console.log('Site structure and local links passed');
diff --git a/scripts/test-web-browser.mjs b/scripts/test-web-browser.mjs
index d44462b..38f6e15 100644
--- a/scripts/test-web-browser.mjs
+++ b/scripts/test-web-browser.mjs
@@ -81,11 +81,16 @@ try {
 
   const result = await page.evaluate(() => window.__bsdiffWebTestResult);
   assert.deepEqual(result, {
+    activeAbortErrorCode: 'EABORTED',
+    abortErrorCode: 'EABORTED',
     inputsPreserved: true,
+    inputLimitErrorCode: 'ERESOURCE',
     invalidInputErrorCode: 'EINVAL',
+    outputLimitErrorCode: 'ERESOURCE',
     patchLength: result.patchLength,
     pathApiErrorCode: 'EUNSUPPORTED',
     restoredMatches: true,
+    sharedSurvivedAbort: true,
   });
   assert.ok(result.patchLength > 24);
   console.log('Browser Web Worker diff/patch round trip passed');
diff --git a/scripts/test-web.mjs b/scripts/test-web.mjs
index d8053e9..9def537 100644
--- a/scripts/test-web.mjs
+++ b/scripts/test-web.mjs
@@ -1,7 +1,18 @@
 import assert from 'node:assert/strict';
+import { readFile } from 'node:fs/promises';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
 
 import { runOperation } from '../web/operations.mjs';
 
+const scriptDirectory = path.dirname(fileURLToPath(import.meta.url));
+const fixture = JSON.parse(
+  await readFile(
+    path.join(scriptDirectory, '../fixtures/cross-platform.json'),
+    'utf8'
+  )
+);
+
 const encoder = new TextEncoder();
 const oldData = encoder.encode('hello from the old file\n'.repeat(128));
 const newData = encoder.encode(
@@ -23,10 +34,41 @@ assert.deepEqual(
   'patch should reconstruct the new bytes'
 );
 
+const goldenOldData = new Uint8Array(Buffer.from(fixture.oldBase64, 'base64'));
+const goldenNewData = new Uint8Array(Buffer.from(fixture.newBase64, 'base64'));
+const goldenPatchData = new Uint8Array(
+  Buffer.from(fixture.patchBase64, 'base64')
+);
+
+await assert.rejects(
+  runOperation('patch', goldenOldData, goldenPatchData, {
+    maxOutputBytes: goldenNewData.byteLength - 1,
+  }),
+  (error) => error && error.code === 'ERESOURCE',
+  'declared patch outputs over the configured limit should reject before patching'
+);
+
+await assert.rejects(
+  runOperation('patch', goldenOldData, goldenPatchData.subarray(0, 25)),
+  (error) => error && error.code === 'EWEBASSEMBLY',
+  'truncated compressed patch data should fail without exiting the runtime'
+);
+
 await assert.rejects(
   runOperation('patch', oldData, new Uint8Array([1, 2, 3])),
   (error) => error && error.code === 'EWEBASSEMBLY',
   'corrupt patches should reject with a WebAssembly error'
 );
 
+assert.deepEqual(
+  await runOperation('diff', goldenOldData, goldenNewData),
+  goldenPatchData,
+  'Web diff output should remain byte-compatible with the cross-platform fixture'
+);
+assert.deepEqual(
+  await runOperation('patch', goldenOldData, goldenPatchData),
+  goldenNewData,
+  'Web should apply the patch shared with Android and iOS'
+);
+
 console.log('WebAssembly diff/patch round trip passed');
diff --git a/scripts/web-test.html b/scripts/web-test.html
index 55a11ce..e07ba88 100644
--- a/scripts/web-test.html
+++ b/scripts/web-test.html
@@ -45,21 +45,78 @@ <h1>BsDiffPatch Web Test</h1>
           invalidInputErrorCode = error.code;
         }
 
+        let inputLimitErrorCode;
+        try {
+          await diffBytes(oldData, newData, { maxInputBytes: 1 });
+        } catch (error) {
+          inputLimitErrorCode = error.code;
+        }
+
+        let outputLimitErrorCode;
+        try {
+          await patchBytes(oldData, patchData, {
+            maxOutputBytes: newData.byteLength - 1,
+          });
+        } catch (error) {
+          outputLimitErrorCode = error.code;
+        }
+
+        const abortController = new AbortController();
+        abortController.abort();
+        let abortErrorCode;
+        try {
+          await diffBytes(oldData, newData, {
+            signal: abortController.signal,
+          });
+        } catch (error) {
+          abortErrorCode = error.code;
+        }
+
+        const activeAbortController = new AbortController();
+        const activeOldData = new Uint8Array(4 * 1024 * 1024);
+        const activeNewData = activeOldData.slice();
+        activeNewData[activeNewData.length - 1] = 1;
+        const activeOperation = diffBytes(activeOldData, activeNewData, {
+          signal: activeAbortController.signal,
+        });
+        setTimeout(() => activeAbortController.abort(), 20);
+        let activeAbortErrorCode;
+        try {
+          await activeOperation;
+        } catch (error) {
+          activeAbortErrorCode = error.code;
+        }
+
+        const afterAbortData = await patchBytes(oldData, patchData);
+        const sharedSurvivedAbort =
+          afterAbortData.length === newData.length &&
+          afterAbortData.every((value, index) => value === newData[index]);
+
         if (
           !restoredMatches ||
           !inputsPreserved ||
+          activeAbortErrorCode !== 'EABORTED' ||
+          abortErrorCode !== 'EABORTED' ||
+          inputLimitErrorCode !== 'ERESOURCE' ||
           invalidInputErrorCode !== 'EINVAL' ||
-          pathApiErrorCode !== 'EUNSUPPORTED'
+          outputLimitErrorCode !== 'ERESOURCE' ||
+          pathApiErrorCode !== 'EUNSUPPORTED' ||
+          !sharedSurvivedAbort
         ) {
           throw new Error('browser assertions failed');
         }
 
         window.__bsdiffWebTestResult = {
+          activeAbortErrorCode,
+          abortErrorCode,
           inputsPreserved,
+          inputLimitErrorCode,
           invalidInputErrorCode,
+          outputLimitErrorCode,
           patchLength: patchData.length,
           pathApiErrorCode,
           restoredMatches,
+          sharedSurvivedAbort,
         };
         document.body.dataset.status = 'passed';
         status.textContent = 'Passed';
diff --git a/site/assets/site.css b/site/assets/site.css
index bbbbf07..0808a0b 100644
--- a/site/assets/site.css
+++ b/site/assets/site.css
@@ -695,6 +695,7 @@ code {
 
 .architecture h2,
 .proof-copy h2,
+.evidence-heading h2,
 .docs-cta h2,
 .docs-hero h1 {
   margin: 0;
@@ -813,6 +814,132 @@ code {
   line-height: 1.65;
 }
 
+.evidence-section {
+  border-bottom: 1px solid var(--line);
+  background: linear-gradient(145deg, var(--panel-black), var(--panel));
+}
+
+.evidence-heading {
+  display: grid;
+  grid-template-columns: 1.1fr 0.9fr;
+  align-items: end;
+  gap: 72px;
+  padding: 68px 48px 46px;
+  border-bottom: 1px solid var(--line);
+}
+
+.evidence-heading h2 {
+  max-width: 720px;
+}
+
+.evidence-heading > p {
+  margin: 0;
+  color: var(--muted);
+  font-size: 15px;
+  line-height: 1.7;
+}
+
+.compatibility-strip {
+  display: grid;
+  grid-template-columns: repeat(4, 1fr);
+  border-bottom: 1px solid var(--line);
+}
+
+.compatibility-strip article {
+  min-width: 0;
+  padding: 30px;
+  border-right: 1px solid var(--line);
+}
+
+.compatibility-strip article:last-child {
+  border-right: 0;
+}
+
+.compatibility-strip span {
+  display: block;
+  margin-bottom: 20px;
+  color: var(--cyan);
+  font: 700 11px/1 var(--mono);
+  text-transform: uppercase;
+}
+
+.compatibility-strip strong {
+  font: 750 15px/1.3 var(--mono);
+}
+
+.compatibility-strip p {
+  margin: 10px 0 0;
+  color: var(--muted);
+  font-size: 12px;
+  line-height: 1.5;
+}
+
+.compatibility-strip .package-footprint span {
+  color: var(--lime);
+}
+
+.benchmark-panel {
+  display: grid;
+  grid-template-columns: minmax(280px, 0.75fr) minmax(560px, 1.25fr);
+}
+
+.benchmark-copy {
+  padding: 50px 48px;
+  border-right: 1px solid var(--line);
+}
+
+.benchmark-copy h3 {
+  margin: 0;
+  font: 750 24px/1.2 var(--mono);
+}
+
+.benchmark-copy > p:not(.section-kicker) {
+  margin: 18px 0 24px;
+  color: var(--muted);
+  font-size: 13px;
+  line-height: 1.65;
+}
+
+.benchmark-table-wrap {
+  align-self: center;
+  overflow-x: auto;
+  padding: 36px 40px;
+}
+
+.benchmark-table {
+  width: 100%;
+  min-width: 560px;
+  border-collapse: collapse;
+  font: 700 12px/1.4 var(--mono);
+}
+
+.benchmark-table th,
+.benchmark-table td {
+  padding: 18px 14px;
+  text-align: right;
+  border-bottom: 1px solid var(--line);
+}
+
+.benchmark-table th:first-child,
+.benchmark-table td:first-child {
+  text-align: left;
+}
+
+.benchmark-table thead th {
+  color: var(--muted-dark);
+  font-size: 10px;
+  text-transform: uppercase;
+}
+
+.benchmark-table tbody th {
+  color: var(--lime);
+}
+
+.benchmark-table tbody tr:last-child th,
+.benchmark-table tbody tr:last-child td {
+  border-bottom: 0;
+}
+
 .docs-cta {
   display: grid;
   grid-template-columns: 1.1fr 0.85fr auto;
@@ -1170,6 +1297,27 @@ code {
     grid-template-columns: 1fr 1fr;
   }
 
+  .compatibility-strip {
+    grid-template-columns: repeat(2, 1fr);
+  }
+
+  .compatibility-strip article:nth-child(2) {
+    border-right: 0;
+  }
+
+  .compatibility-strip article:nth-child(-n + 2) {
+    border-bottom: 1px solid var(--line);
+  }
+
+  .benchmark-panel {
+    grid-template-columns: 1fr;
+  }
+
+  .benchmark-copy {
+    border-right: 0;
+    border-bottom: 1px solid var(--line);
+  }
+
   .cta-actions {
     grid-column: 1 / -1;
     grid-template-columns: repeat(2, max-content);
@@ -1278,6 +1426,7 @@ code {
   }
 
   .proof-section,
+  .evidence-heading,
   .docs-cta {
     grid-template-columns: 1fr;
   }
@@ -1292,6 +1441,19 @@ code {
     padding: 54px 28px;
   }
 
+  .evidence-heading {
+    gap: 24px;
+    padding: 54px 28px 40px;
+  }
+
+  .benchmark-copy {
+    padding: 42px 28px;
+  }
+
+  .benchmark-table-wrap {
+    padding: 26px 22px;
+  }
+
   .cta-actions {
     grid-column: auto;
   }
diff --git a/site/index.html b/site/index.html
index 952eca6..031be57 100644
--- a/site/index.html
+++ b/site/index.html
@@ -34,6 +34,7 @@
       <nav class="nav-links" aria-label="Primary navigation">
         <a href="#playground">Playground</a>
         <a href="#architecture">Architecture</a>
+        <a href="#evidence">Evidence</a>
         <a href="./docs/">Docs</a>
         <a
           class="github-link"
@@ -255,8 +256,8 @@ <h3>New Architecture ready</h3>
             <span class="card-number">02</span>
             <h3>Web Worker by default</h3>
             <p>
-              WASM work runs outside the page thread and terminates after each
-              operation.
+              WASM work runs outside the page thread; shared calls reuse the
+              initialized runtime and cancellation stays operation-local.
             </p>
           </article>
           <article>
@@ -277,6 +278,96 @@ <h3>Release-grade checks</h3>
         </div>
       </section>
 
+      <section
+        id="evidence"
+        class="evidence-section"
+        aria-labelledby="evidence-title"
+      >
+        <div class="evidence-heading">
+          <div>
+            <p class="section-kicker">Measured and compiled</p>
+            <h2 id="evidence-title">
+              Evidence behind the compatibility claim.
+            </h2>
+          </div>
+          <p>
+            The release gates compile real React Native artifacts, exercise one
+            golden patch across native and Web, fuzz malformed patches, and
+            install the packed npm tarball in clean consumers.
+          </p>
+        </div>
+
+        <div class="compatibility-strip" aria-label="React Native test matrix">
+          <article>
+            <span>RN 0.73.11</span>
+            <strong>Legacy + New</strong>
+            <p>TurboReactPackage boundary</p>
+          </article>
+          <article>
+            <span>RN 0.74.7</span>
+            <strong>New Architecture</strong>
+            <p>BaseReactPackage boundary</p>
+          </article>
+          <article>
+            <span>RN 0.86.0</span>
+            <strong>New Architecture</strong>
+            <p>Current matrix anchor</p>
+          </article>
+          <article class="package-footprint">
+            <span>npm tarball</span>
+            <strong>111 KiB packed</strong>
+            <p>390 KiB unpacked · 56 files</p>
+          </article>
+        </div>
+
+        <div class="benchmark-panel">
+          <div class="benchmark-copy">
+            <p class="section-kicker">WebAssembly reference</p>
+            <h3>Repeatable, not theoretical.</h3>
+            <p>
+              Apple M3 Pro · Node 26.5.0 · one changed byte per 4 KiB. Every run
+              verifies the restored bytes. Treat these as a development
+              baseline, not a browser performance guarantee.
+            </p>
+            <a class="text-link" href="./docs/architecture/"
+              >Benchmark methodology →</a
+            >
+          </div>
+          <div class="benchmark-table-wrap">
+            <table class="benchmark-table">
+              <thead>
+                <tr>
+                  <th scope="col">Input</th>
+                  <th scope="col">Diff</th>
+                  <th scope="col">Patch</th>
+                  <th scope="col">Delta</th>
+                </tr>
+              </thead>
+              <tbody>
+                <tr>
+                  <th scope="row">1 MiB</th>
+                  <td>158.5 ms</td>
+                  <td>7.7 ms</td>
+                  <td>110 B</td>
+                </tr>
+                <tr>
+                  <th scope="row">10 MiB</th>
+                  <td>4,243.6 ms</td>
+                  <td>57.5 ms</td>
+                  <td>118 B</td>
+                </tr>
+                <tr>
+                  <th scope="row">50 MiB</th>
+                  <td>30,697.5 ms</td>
+                  <td>285.2 ms</td>
+                  <td>203 B</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+        </div>
+      </section>
+
       <section class="docs-cta" aria-labelledby="docs-title">
         <div>
           <p class="section-kicker">Documentation</p>
diff --git a/src/index.ts b/src/index.ts
index 26b21b9..d51f6b4 100644
--- a/src/index.ts
+++ b/src/index.ts
@@ -2,6 +2,15 @@ import BsDiffPatch from './NativeBsDiffPatch';
 
 export type BinaryInput = ArrayBuffer | ArrayBufferView | Blob;
 
+export interface BinaryOperationOptions {
+  /** Cancel the Web Worker operation. */
+  signal?: AbortSignal;
+  /** Reject when either input exceeds this number of bytes. */
+  maxInputBytes?: number;
+  /** Reject when the generated or restored output exceeds this number of bytes. */
+  maxOutputBytes?: number;
+}
+
 /**
  * generate new file from old file and patch file
  * @param oldFile orignal file path
@@ -44,7 +53,8 @@ function rejectWebOnlyApi(methodName: string): Promise<never> {
  */
 export function diffBytes(
   _oldData: BinaryInput,
-  _newData: BinaryInput
+  _newData: BinaryInput,
+  _options?: BinaryOperationOptions
 ): Promise<Uint8Array> {
   return rejectWebOnlyApi('diffBytes');
 }
@@ -54,7 +64,8 @@ export function diffBytes(
  */
 export function patchBytes(
   _oldData: BinaryInput,
-  _patchData: BinaryInput
+  _patchData: BinaryInput,
+  _options?: BinaryOperationOptions
 ): Promise<Uint8Array> {
   return rejectWebOnlyApi('patchBytes');
 }
diff --git a/web/bsdiffpatch.mjs b/web/bsdiffpatch.mjs
index 106150e00e34ba3a2dbb8d79d89378db45519055..0519c6611772d77a8e0455117fa61716e5ba3c89 100644
GIT binary patch
delta 17153
zcmbVz33MFCd1h7job2&T;|68`vbqV1pafB%cnY8h^jIRPle8#NwlX#k@elzD5{4js
zh+sn@ZBrH<(Qa8Itz?T%Xp1XL7S~`*IhL*Uv^Ux8+kLiQj+gBECEks*&gMlvv+-{1
zWcT~3dvJ)7@^;CG?&_+)s{a44|Ej-g{@~}?AATo$ab}Txc;?cgKbHPU*}B{GeP8;!
zB_D?G3zUSe6uT2>Vzud?@a2i!LJ$DoDc0*!+CSbXCIA$TaU38?U5yUtiE)qn@;C=Q
zfnm^e;=~C()^V|0NZ+_8FZakjLgKksB=NjoKlkb9ej!kEK&0_JsGkoA3*|$)epKX8
z9@Bjf>zW6JiJEa?n%+pFQZ-C7DP=030f;n(%*sqbBxE*`kkZeX2L73bkY>UbO^N2p
zcuJb46e1<?uSJ^aL{dI1Z9AEkvi_S!eY!qvq%vTZS3es*max)JMm~i84~skGgt$dk
z#TI!)Y?PDYc6n6XCXb0*vu#p%(kg6iZXM{_eDh83F5fuf4R6ZHQl>Iq|3dv!$&tXx
zx60mNUB28rq~y(s5pzTdmGm%~oew^dFTN{pMW3U+!de>qn|#ZC0Fa)r`;_6?tQ`hD
zOND2Txw4l{^{2DzjD(U(tTTiczTU1thC=C;^yb8f7k)19)z4)->4mRuuv?0jXWEsj
zu)^o9V55C=@zhYCA#SNu(O)G-9bt^{zZae!3ZA#GO4lz9dH4&yYk$tHzcv&cX}Z%1
z&)=v_j17!X990q%D~Tbz`m2C`btw3orq7hlaA1|xIGh<$rp9i1$P1^3f^*GX8&9)+
zOQo9fFs>INe>y4@EY6Q+HysafIv#+aMB`j@d(hQ#{VaMrTmG{~i_^V5TKBeoViS66
zP8BTj=yiDqI-u~XobbZuhDII3@JTQyPk3O8XC9k$#RS$$^I>`0(OwemBn%&n0_>|A
zHU(HY=^7CrSn&I8-z<kug4`$B?#VG%c)k)Pu)(shaNw9S4!c5`cCTwH5h0G+5->BB
z9Jj(pE6aoP?bn#({~xyxm53iY$UY-HKja#HM#k0bW&6sG&3b)4+;L3=XEfl%0=Tf_
zJ<BwmkO$3T60AsRMpJ6eQaao@bPd>^=DLw-NfdIH)gaiqnKENN;2D#|=f>bmoj)_V
z_Mh*%&E)q_y1uO6=Zbe}%zjz?WC7!lu}LspOIWS6YnWqGf>@yp6u|Qg1TmMjREpBV
z9>y)~F%1Bfg5YcLGhptSp}^}NTzqC2KwP0GS;$FX`SftvUr*G}4hNs_Zn^5ru&RuE
zxl!+7EcDa$7sJogUrZk1K=pIOvG`rw6#SrD-4VXDNn^<=&+B4F$x%0}GIvy}S(Q{-
z=u6fz(0p;zwL*9aGA&XZR%*$2lk9$JQ*dw3%BGTQc>d-}73=CGG)hnR^q1p#h<H3t
z5-LcU$2<v0NE-7bES0cJSat)tB6CT6Dq~EgCtOqqixv;OCnDN4AT^1xQ4f$~6Ru&G
z^o$TPsx?M)jGSpfH++m^K*26<;vWe05>>Flg4rlJ1}se}_|)S58-P)a6>*Bx^8&$@
z&}(sFlU5_mg@|A?CfHcA!q-;C6+i~)+)<+Tgr}nAwLIYnDBLEM(93vflU{Wyis$Q^
zr=jC|MfK`TN2^0i>6w!*)J!X?3weYZK#N$o0HyY@M#57dPb5Jf%*-mMB}1{*a`J;E
zOVZ(44E@}2ut*Jb(<XTzQs$TkUW(CJsA2<EQOjn5&#0~?njU4`HlL1&vq`<k|3R%Z
zx!C`t1`IuMmjThd)0vy{Lr(wt@U=}V46)v@NyDY6obgbL@64!1^a{4rr-y?dIR}<%
zr4@6=NqSgXt+KJrff4xWRZD|s+}m7jpd<ydp{+?ki%C}tD(iyW(yuLzR7<E7#0@-x
zcA<QQcCAPypiUQu0;hL-Y}6BPY1F^h+oq^`kzG*{(3=hS_j>Q0HQK9}eZv8&8j>8L
zFVP0TnD0wEuDbY^#HX(y{#Zn~m`}K7)1;f6wadS?{6F?^(&Ri(LFrZ^o-}x*?>lcf
zp?SrGox$TPK2VzDwn|5Ap7R2ktN%#PW^gu$3Q1fz+pn+w{YBB*YK!>YYdW>Pf8&}p
z7I>$n7Zx%Y=<iwvBOq)MX_Z&n0;7<C|G60XGtW<Y@GM(`Tl<%qT&`;Wx0}PuhBSTc
zsUQqWx{2T;D-XAsCIn-;{+snv83?g?#Fb-82LE<tSI~Oh#+?zkg3<Nh4JaCz7iJDc
zqo~zTE1GVDRH23O1XiAHuJjm1%nlD{C0uh%nHav^g$Wb{lORHlI&;0@jA6E5o`Rj%
zxi=>0m?x;n78<OGV$1_S#fHr#D+@OW_i49Udu0M{)$Yas@N~H*8T?|~>TB!g=?EyM
zC~5bCf%=Tyb~9j`t*Ujmf!OW@t@XtX!B?)^=vT(E{#wwz0cxVpAmrkPXtksjJ}xC0
zqlAtG&S|d%%gw1B_B%aDO5++OtGZHS;gWNb%;_^)`RLvf^^2fbv%w91a{aNu9(eec
z=@N~>B-R8^6g!V$fwYsYPnZ5*YJ)!<=<9jM(SrOc*O)HNT)*mGDXYOJ*WQ=s!qgw#
zy^V~!I5hLiwZAsa_emKvt?LN(4~{HdDZm1#>g$3w1Eu=3Kf%R*-Q?P8JMj;L6}dFn
zG4z0Rf^Q5xQ(6HTL$J~cAG(fDWx^l9jal_e!NkVDgzE{uwXrRD=*HLmFSZ&jzHtKK
z?FjrJqNFs}ZX@(+#i-McS7rIA(}8#2sMAC>=YI&Za8i^iC#O=XQU!X^|MZbtA+x$}
z)Illkpro6EG`SYzZ&oTSHRQ_m8Ir4%BO%P7Z5cf-J}I%*wSpCBw$N-aG=Tu8SZ|=a
z0srAx-ZCxVXjHi|_f4p{oj@k5w1g-iY9rK7RjTO*jj&X$7}4_`n>_Bvd;?={Wjxq4
z+~H$3rx^i^V_SevfhV9j1GrQ_3Go!nwzmZC3FubFi9X*RoFzP_SAQ)06ih!B2$Y~Z
zJ!NH_j78X2but`9Hbzm~NHwO4Lt1vfn*FspYGz#x#nQ@98IRGFUiLN$1knBE@PJ=n
ztc7I;O~j=cQ9f%Tl_!s*bp;L0_$%nZgfb%B6wC*$aS9(!0TvBp$3lRwJAs-fRAJ01
zAYQFchtmS+bBeULan!!b1<ck;727+N?lU%02O%0@X*Re#vfKc6e>vhp)uB(L9ytKp
z#@?pJcXAYy(vU?6OROp=5KwuLR*a-rfN?R3m2rYQ*#>@D;HOc6=up%twnT~$8X0U3
zomO+i$J(@b-B=$8VxH@VF!$?X%-f7`k8-Ek)Zz^uR;f`hd}7Tgg%ztYrlr)&01V+;
z#1)DFd;u38Smu-sB=A8ig+S3Jp%fR9%dv-v8gp!NbcHF_n*$VM(v|_D0{~Noy^I8K
z3}8amMeP6s3Z8-pSl~OA>yZf;#l|8`l$;E}Z7+N*<Fu(J&_=y7{9xkOt-*9TyCkn^
z2&dh=w_`%(fplTQGdGt|Y$>^^;6iyNggksyjOEjIyVY*nHfTgmAfQuLt_|p~FbAA2
zPJt+x$muDx0<)xAxc4{AM0YaP4d^~&0Jeanmlk{#XTRz%tv5xktMTnuhos1LHa@F^
zLgYGTzc^6)>{rya&GIrTtFm6^juKWm<58Iq+5$HVOpqF7x63V-#a&z>aL~y?1+m1?
zS5>UP04`iB!gCu`t~%%op^D{1{j`SH+NMof*LH3kFgP{X#3+elWWuP^<{6Gn-MM0_
zg>$4Qya7^!(akGHkH<As)>lX!5HG2+TR{)SgFJV;%3=r5PnU)2nsU1!Ij}~0ttl<k
zLwf=aL)U$R+USLkgAI>SJYZGrk_DOQQcZS;11W3;zr<FEQWKgZQGy_~mK>k<40GK@
zLz3mA$;n}zvpHDGtm@jXnqXF8XlD_mIHs=^15OGXQ-sE|c3&^b?AJC3m<##b(hy6~
z0_mV(d^w8^x0{1hniKD*nyU<-;2#ARMT0bqHF~Q&O(%iT1ltKvL@1SUegXNo4+ilP
zRML52RzCRF%}f0}gQGl~IiyLGiT<2YM^E|22u4xQq(M2mhJ!H#?YS{1DsV;#K5d-L
zq{3UU;u5R^gX1F50tuCB0lbOUvFK~&!lZ#=*j;D2s9*#ZnpN0ADFp+nGIl|)J$J=9
zSdHQ)1117SA~Wj3mJHCIs+0wPhhFrc%A)DcfeZnt#Hh;Iu8XCEDK5a(0eDP%2j3$7
zP;1~0_sDIuL`LC8(vi~Oxd;hB0122hh!v65c04lb1Ccv!Ob8vrnAn@^DM2$mn@V9i
zsUStD&ci*&v%>PnEZ3xRmdJ@5!DN^Y{|k`(R4y}5OtTSwpzIoR08r3#z_qAkQ)QfH
znYJ>WtBivz#0aF020WD$77Q5ppH<CZj0yEf`H-sw+F_K5zX1QK&n9d%!e4tCU@BGJ
zALCZW8Gc~#IAUd-AsL%F(}H0DbY(xdv8<(iOb(_9E`Lx|mU})VL_rBDB2+1G3ULZc
z)~%E%==A)^$&4s3K;LY#I7{we-8#WUBorVmSVO%~LbWLyoEF|dR0p=!rxRo=tB@x`
zUZJ3T0co%_T-<k#{gI2rN<$z7=`<t3&>=Z6h5fZ4cv|JXkuk)EDAr%${s!S<cou46
zq7oSvqyx?%$V6TTx(Z?U`oh;NwwOLLRcF|KTDx_?pft+YS%EYrmH<o=Td}LcW(w(2
z{&As_-mVGEA8m}h`h^=%Nzp`!UD1Th(+yD)sebx~GMp=F&J&F3p7S^8>}O6w{?UwD
z%Do4Bg^VmHl1R#;2pL$2P(*^p3PGnz052kim<34;4$~w=Q6mwdfO&LEWe%4!8U=ty
zNUcEEq>@%qj}sB6lJH7&lQ1tu%?gPu^UUxqD-F3M7{BdWc`kVFwxWSF#P8j<L0%pF
z;<l~+)d*8Ce-WOHQ(NKbcpVUjVijUWg<pqFLVRO)YGz#=^11;`Wk$~0ZgsiM$6}*G
z8Kmi~w2{y8uCY6ngz0j0G;VmXmZ%NCA~x&fsWGC0AOBf)55vVMQb%40;+3F1pN5mv
zTBXY%i<$5Q$g)T61U$dqiD0T}S=9+2oe*1RYzG493)=<=P_&VN!F&I_#|LaszW{Nv
zX@mhrN!-qENQ^Qkk50XKAqTJULIUe{ya<%TJKBaadxq5oUKn7Vu?F;GQyOJD5PN!x
zY5nlYXoG2BOL~gSM$x@9hfb320qL3Hplgj=*76hWwe;$e>IHR-E_4VD1IQ2tUfi&+
zC)Y79|AHsh^xnFlOElX%55q;Wuh)Zc<@I2C?PorG`>h5xd^oEpfk5e5b7vJ$J4p(#
z<qm#)XEy}O+P29*O-kn-VGz#(L%5g{*T9zE&>Bef02?*7U|U47p~(+*C6-sG1h6=4
z2G1knv5X|1R710*R~W?!NTfAB)W(y{E>O%0kO~={tb`{e&Q>rY>533%F+5dSPRRP%
z%5tuu&QhWe)|yQPq(Ipmo~|s{9uS&Qzf@VSxBY^<dyED9fUT>ZQ)nyH2_n%A25B0j
z>tucXwaW4)C=<JcXa6ODCp)$OXpDe4Fl}RmMlI`r%EC6oZVonYyGgDH9^d9-Nxr;o
zjS+rw=AXC!wt;Lwu>0=S!Jq7S48`BseYa%I&vw2LWOx2|rV4(x^MA;E{iE<w*an3c
z<*023KYFik)gR4!4mb>E&m4K*1E%!_Y{N@&#g8gq$h<3jJg57>D5K9a`!5>P#o)FB
zi}@NmaF0~Mw+?(5&!K~l=<=%IZw`90Y3Aw&ymYn+wm<xG+HRVeeCU@_HU)<#mgSz0
z20W_={OrVF?rRLipeU%gF8Hg7-nI3UmbW%Sf+t^OY%AlOKErkl1Ul_r0wD^8c|N+s
z)tZ^RMDK`n1_z({tD{@enDm;diT*FaXR<+)foK2$;iQ|t6N9ytD5~K}5Z>U#zn?k`
zWM|g;U3_huUY(FDXHK5#Nami`sKVlL_%A-T)X4o#UL$`|0Qs3edHnk=?+TySIE3d=
zWe2Z6zr?AZj%KI3!WkbG9bUVIVr9YR*w@bdpXbl#td}FGkui+@@=GU;T>VT`Gr-w4
zzVZjCc{Zw1tSNkDgR|)Cnwv0__RM?!Xs_A3Qj6h*gl90k1T>}ce3Y{Pxb6(3{`5~D
zg*HJkU+=K>`y285wfOz@`298ghVH=oW^`z@4Ep+<RyLanKAm*Z*-WrfjA?(AMDDL>
zg`ZByq_0m)W7Wg~S*(t*^&Eo72H?g5g``bO;Nc~YVG{xlK}+Fqw4P9H=_X>egh=SD
zWzs|yQ?B*%)ESta%5r>MKu~Z3=Y23x)bv=pO|9!@pO1MEUvUi(o<OQ*A<aGm=W1hl
zoIoc8c4_#|;SdIflw&+yS?(bB>Vc#1PxJ;k#y2?JVN9OTroyz>au)1t5E`I2%5c$r
z#v0l@o}r-{)&wB|QcH{?G}v~6+^z*1<AdSA!opmf6|~@3v;OhQa>Q^3e1AkG4vt(n
zS+L7)iPP~Y&vFk)m=*)cgadD)otOZpfOB}trv+37@r;53o!gu3ifWu+bt6)E(}3FT
zi`djQ%<Me=>ZA*W4l~WSp3vO|rqjQ|b|SENC)4`>Z8z;^5GuTnM8bv_#mE|7Z^#q4
z+W_gpK3zbB$QrZ$0?sm&IaPnbz5yH;w_|~@%!&HT$8p+g+)Z{tB&@rGzrSHc)`TtB
z!XNYvE}i+OKM$oGocY#&Ig%)ZXT#G1r_xx-@M3s6c=r#sXR}2EuJT+s9enl&y=&?h
z!fEIapX550Wm0E7AZG$Q4J`WfYRwU>Ta$@dt?-k<Z~PGFRY4{=^TQrHd@AF#XixbJ
zHsnucg0KDXz3)cgjy+C6$Lir1xlzyPNYOP*Uic!mO((O;M5<cJy(QczVCb(va0)4U
zot8uBAKd-dE9BCd6My}cl<Wvr{oTo)`GYdjf*B!rv{MMa_jhXnmwscX%m*KMqdi^!
zQr45W7V*d%CDhm6*ns-)zEMH>+8^I}JyS?J18XX)s&x@eh<Z>&nSAA87BaLbTU$#Q
z=;a^xZy*Xy%2rKdcAlY;#Z-;nws_f551VOQFEVL~u>)U0%uLfy)=Esh<)?>C<ZFW8
z{pq*2b1ZNn-uFOn=TQ@*5Vs|P%@_lBZis+UW|m=5pJ<NY4}Z2|6^tHO0>1z&nG|+P
zSS1}qY~;z$mFGR-ZwFWXd<O)`j0Nb_&mWi12lg*MoHb_ap8Um66YW<0)4}P#f3fEp
zSX-V&V^joYs}xQ|VdqpAgvVYpv+aK_K@_kwc=(q;=WE~p(y#aa@4w~OP5=03d@cUf
zVa5Vyeswjx;$<8$9k3ULk7rdcB3awM+}9%iaoM6TXFMzr1A@ydZ;+FV()CYgRIhE<
zUVOLwDMqP1cawaE@AWs!r}_Tg&GHGp_imOS;rlN(%POY1eAgD)$}pt%z*c!5E55x|
z{<kCw!I@v(UHkQ&veGk+ks0CJw0r|}8`^7m;b(<?ZSB}LIi1&3Z-HIVMAs7A<stux
zf?@g1@o7V{m-d^noZi~;xSW<6ZUQD<myNk{6uhRe(-|=kuYVo-@oMHRcRB_(fN0~U
zhTT!b&W4+rEsoDa5UzC<FTx;kXm^%qpP>?Jw)P8AErF2kj)wr0-VwQ3Kqsn@LsVSG
z7D-oR;)>6s0xkttY`&`R-_YaYK7gLU@Sz~K#3|q0fe##rp?xnr8TUBM;J~18PP^Yt
z>knJd(Ku<QC3qo8rRVrUR*@yzV<jODUZ+aiYrIanvm!=Mt}s<O{Am5T`lssc{|beF
z9e%3*(sfMv#m#-SpKX_IK0nKVUnK_kxSo$Se5_N+ez6|;k<4WM<uYu|H)Z`~{Z!em
ze~is*%bEJe>Zj%^R=>GoRinbSr(g(>z(G>OE{ETYavz1A#KniPL+Eb<WoRuvAYF@@
z?1|iJstnU=x4SJ1x*4hk8C|GutB(C)4FM+X_9*KHGX#@rZ%{3uRzl8Fb{n<OZuDUS
zUkeoZr<sU(HzJ=^r30bYL0}NaGZ5s2_C$L7jQb6h<=jwXB~U-5qbG`Q+z$&msP`wz
zKyD)5a(E1MUghS4t=!zOggT6+;8l6?2Q`RKxUGQk3NMA15Kq`$t~oakHibCC;au=)
zk)PK6nDNkC4^wZ3xdq4A;rUKw5{2#vlln`Xl@;~pP>Nul1dQ#;LD3h%hG$Sw8{Hw7
z`-bHvw5?C#K!wc1g_(6mC-{WCWOt;MhF0V(7@YJvM_pKisEe(W@aBj{6q!s!@fq5S
z1h#{Wg^X2rA>(TFivp6V_{`&!39lTEpzyMs4k!<R#+^>SvrZRZ83!R5e8pQ0R*D8g
zCV+#1W)9ZF7Y>5>!dQ#>&LTmMSH@X#<yd8=lOtjGBWYKKSiJL*D68i9yCeSYjK90$
z?_&LwTbROb1xauSd%irI=7X?<{VKOWn^bq)zZCcHiNF2UxMFc!(H4I%!351ysu=@u
zg64%2;EV?jcj}%wE_XzXfrkav`G}vnh@Tet8F2>OBWE<*GGJSw?2Ef_MlpwegA5!;
z*FSm>f_#KYP_rfmU-|kA^HvwqkS~jSAu?qgE21oUAcI%^B*%+&KV3iREQW+2@KNo@
z-L{>8K}uLP9mj}nM)@?}3R^vVqBM#OgGFErbINUFmnBh`Ce;>qiF+)W-=k1Aj=Kf5
zm{!k1&<N$x^R=p$`zX}&r;Piz>i(<aDVxF1Jg{<Orp^-GyntvdY-POm#@(_!q*ot8
z%GD{9#XaZ_Z1X^Uj)#rXEH44LL*;{2KWz0?VQPowFS;DZNqm!P#_Y=8K@#W=aGYR7
z?f@q@I6j8=vRA|Q7nv%?1y}8V5Xpy+VuuA&3RQ<GO<*<hSQ|SEoo5voP6`xGZDJA)
z?8y5d9~(!ku7N`cPtq=p+J>8s10sD%QD1;@(mY2_a37`7!JW&5O7s3*6oNy)8G=J1
z8zH#eM)|~An9R}($I8(!!^&V;Xn#q_7Ua<FVo^r~_BsTN4p@$;0FY2+Giv14$iY63
zkTmX0H{!mDiN9o&v9@X-dY}B2Tw9yGPyUww)n!K037d&9Ty`kIks@Eh3}nf}#;PAL
zn9x4NBul}dXg9=6AZ)UJmS|6v_D&_nU5gRcY42pfbts6rc2L<_+17qdWgE_>{brwI
z5pK>yWg8|EsgY<4gYY)m!oVHh3T-fPXsLHFS+EbedQ@b=I+9LrW&mrT#nc4J(M~f$
z3;DPhrKT7qKYYDFZ9&JPKE$lQfLx~bp50MIfjd2M+d?#j>c(N>2GvAIIyZ4FV~AEB
zm8vw$5CkOPQuw=!U=-%l7;aD{q!f^gHAb)-&U)}SO4%)OTCn7;8AaN8UKN>&d$J|^
zV}~RPrRF<h=SpYXMkndabH;JMw%8fhM&2(w{Z7@^aIq-C>1jvYrWB`WYxrnjiCw|P
z`b^}1J1}wwT6I#9fE{d}4nG?{3l73TgEBj+JRN?nQCZ~e8x461C$<_+AZ3DNJBDNQ
zC3FUh0rG%qi!zfiyC^XLfRXNC`V3NC1bmMws!n7p=QYoEu?Wd+whu7zHegBB12|u|
zS}~tgTO*k0U_w2-m{1*MTvJ0hT%T6!ktpfV@ymG>y!t1@%j?z|TM428z<_h+dT34u
zSGEr?P~01RDb=Q<48|K#iSb688tjO}ln$LeIv3AyJNdNExJi#~tT)!+JA7K;axK_w
z=;Nf0TIVj=?YCKON2HH&L{d^1vKMyEgkpowV{WSsNID^gC9ikXT@3T&Mw*PGK5kZX
zYAP9iDl|l=snA!qhyy|%y<%aSq;R|RbntP|73Fg@*6Op8E_TddlMh3M>GU|dwN3YF
z)#%$qAFbK#ZV%_m;!?m#2bY@5iTkjyK;^Z_6Tmm>YgMf<1_>Box072J999Aofg2=c
zd3^mAQ{X@!4f0J5je6W6T+pFWkIR(v>udjMuPphEnXa4%-4d7&X5GZgHC0kOPpd3Z
z)e2-B(;NXNz;oWf$^<CR;=l<Y4ELcwGtnnDi~18ML~KQj>Fe*#=v&3j3KJ)fy9o%H
zq32YsxaNUJ_-Y}14M)JRO~e7>Ws<GrDPGwq!oUj=#=PYvt2L$(PZv;H`|%#RsMtlz
zOCnT)sB4~Jlv8f1_7{6(QFhg4_DJ0JZm)fR4+L-_xP^NbS$2z8m2#-@d)w7*BhTDU
zJt61nWMsoHeMboTtvWp%mgy=W1JAGkU~L3pygft&U@ict)%VJ)nxd)aja>WZy>eM=
z8;lX=*9_(Ql3lfp_shi~{WtKcow#4N&(V!*{>W-!l?;dn1m7w%i`u2D(LG5PXrIWH
zK?N@0pehqpo3!iLGnK{rAp2dQ*2Etg?@FA&C$8PV{YBWINXEweu66H|ODcmL2?0tL
zagby*kWq;#)F9C}<wB(p@*;}pQpso#$|<5D$0VApzG8Sw<*?Qt!x4Q~t+r40w>FfK
zI$9YAD}ZC|JNsnYutqi#jA(TFBZ^HbLKCEv4T{ZMx7L>Km#fXjXtnYEGVQ0STlo1w
zq+4J_Y)(|u_QVK6qfX!rim|OF7qw3uK`4mp9LL?{y<lKcx1|B5E6Z}qLD=o!=8$8n
zq{};r#t4W&pDEDTt$^I91K;CNi+ltVZU(Amzz_jS^AQxDKJMan4`j1TS+k6EX_ByC
zDmqX%EFlsgQ^;ZG5bou6xNRi}wd*BtYeEUNq>39mSPG1}1YFWtWn?4}lkjE;+WA_d
zd~_H?ug1L`7gkf>%UJ@IaA6nt>e<X8VS9Byyp|}JH-xZF=e<x%b*i2*FaXEtP#Uon
zp_^)(fb^HJfndCZf(cB^#`_?TsHnf-2y)ddx9YP4P|}47A`Ns4HF;3B7TdAs1Gzn*
zphqjLpcaC(V(q$vQsui;W{xwNMjzBQ`d}LT$f42a@q@Cj8HnH-Dr_DvcjXua*Z$o>
zxwJbS+j|0cV+VmjP~42T&q>!34@lQ1M57)cT!~o--X@``cCj-$j!pJG82nA}Sj748
z)Lg8b8SN#M2_fN?mE3!v3*s)W8?Z~4Gsme-7(KO*Bb$wZnQAAh#R!EdW~OZV3gmW(
z2lj({WNv@Kd|X@;Sh^<M&_UGNs6(g^Fw_J3J@ks{TK16KgdYwv=B<o#x0nIdCiXq?
zeBErQ#$V(P))xv*^^Kj>luGKa#MC`*u>=<jv!GDmd5^`|6}AdjUB+RQXryV9kh=u(
z;-2`jE+@n$If<F!u3(BZrQNmfACg@%Q~QTQa;dM0qN><C6!sz%Dp*6J236*@+bP!~
zuM$8VY_+D`mMLt3ZMJCb<lNLyT1wKJ!IA>Om@+tfVo{h!C~#y|URT|sMPo`65At_F
z&`Bvdk9`pto(3#)UJ!Poqta6liz$a|oKP)OTzeo3+4`@evc)fK#9FpuV>(bjy-}oe
zv5&>1E-Dt`ZUNBAqN$5Ei-s;{Sd=JYeA?h-dAR;@*Q|dO{B!dg1+E%m$FB#^>!KbU
z`&Cw}x{uyDUDm_%9#|f^MbrXwmi72q6zzzkmGR>wJ~MwBbEB{UVMf!m>!O~fO&2u{
zt-7cuY0*VJNwcrZdXgp-3*`;<(^OrAlE@P?3KBa?gCdQ#{F~dbfNU%1A>Pyv!o{`@
zwHTpGrw%ZY_kvaTVbx7Wix?UCkt7YVS-WspUZsUUKFV4k><jc@3`r0LC`dYzOps98
zjOwhs0JbozGa43NiK3Cw5)oxT-g*)+a6wOPBx`#flmiD$kiiRJ;7m`07PnY`>9}K(
zAhh++J{R?m-RPKMXZ7B8j$AN{=^)4lT`Rp*6ev+c%E#Xeg-O<4*(Ez-F3`r&)Twl=
z2oc$^bRe6Eur*CVj+C^~Ob`4H&F0%TC&~$`h95CX<u$9Ip1271R=CjS(y~N~mycXH
zsKT+XBhU@>(h4MJ6F%_s^S|z+TY}~$G;8TDBF^%*OvKv6+p!js1N#`W7J32S-V)oF
zW|$=0(_`#F(;Az2IU88a?pUB`+%54up_69b;SS7Rk8Qf%R~guyGnIsamgZpKx#vQV
z!TmS@rM=!FfKJdbXTZ$MI@ouB<IZ+e(~dk$H~vadE@r8f5KDz+<AM7I_*JMYFt@N$
zc;Gr#A5sSAhJn%s9J*kOjqM-4_)~EGF+J>Etqac)1}8B1u&nxp>q^wrj1^vPu5Fl<
z2V2MYjEh6#2Sj!9n(E<w;)8odb#HCcQMtPI(W7#A?Qf6Di<e(KCSQ>+ocfSVrG)-h
z>-`vhd~m9C`QXRovVxyOCI29<@9<av)%b|sAZ4}1@Hg(>XvMc4m~XU#zO|Oug^R0Q
zU0tk8@*!&WQ*x~tetvE3)~DohtN!ddOXdLl!n)e@Q?l#2@H42e!J*Huv)T&ikl;gP
zZ9WB_XsbW5-jdCDKfAv6-KV5`Q~2riR=$Y#Vv$e$%cAw<21~XQdV|&0!Akwewz4Sj
zWZO3Y(~j95+fW;+$$lR{(z3Gkv%OLSB>{2j21{aNhWjNqSe5Y%>eKk!fS{^=2~Au~
zfMgo^&c++frw6U<hr0DZARYq@S~AaWgBE^VAOs0RL<bTv#u+q9fgdCQD%luB&wFmj
zGVGqq-A~J}edF?poyJ$wwb7kMYw76t;X~tNdnWt#9jYGK*Z=UI$p`um9Nu&A$cjg5
zSH0i3`OZTJ`kc68^Ny7fcpt%5Ozl5>WWPeYZocux8`rM7e#IjIsy>Lp=D|Et-9LG>
zI)3f-8>VWnJZRiq+r86RR9o`_!?}F@E@M}rHuV8x@8u`Pjo(YjiQ274jWx1b^N$+K
zYA22wO|@G;C*M_jil09^YP2Mdy6+#VJ@h%*Q!5=a^72^i>SKm0AFADP%(z$XuYKW|
z;cPne(EXE#`}Yp++O_M*hmYL9=kVcO4?Vnpe9vV6;rVq9;`<MxcF*32s*}4$kMtj?
zE%~5vRsSgJj_jX2G<oR3{Z-bF4er|i;F0^QhaR5XKfbHF|Hz?_?BDgk{yh)(kJlzX
iXtZ?f8{BnZ9~$=T>wiEOkL=$+)_?!yXFq7XB>yjd+Y4v_

delta 21563
zcmbV!36LDsndW<$Sr=J!W%YeYdX<t;x73oFOA<m7odxJXClcZ;kXqf<QXi^rRaFZF
z-AVzv5aKNC0)w&e;N`FY4b52C2#Cq_t~YkZJL}l>*dEW08OLty_!u8EJ9dP3XJfzr
zy{tYY;n-M&I$yr?zps3)|Mpk0@BCBj+{6{(1NQxG?KhTR`!TPb`0f=SarbFnw_A5z
zm%F<)*JZmowKy6EI)h&H=<Z>cAKuNFoXmEIXcV&|?wD+0ih(I=!5D3Z`R?wp9F)Cd
zE+12y(yB_oOFJDte3;?%F}9m=SGzC4yLmU$@N*B-@w0~+_}MFeX64U5#?Z5uas1rJ
zO#JL;A^aSW{evuy_K@6RzuY0mBIp@r5&h<LG{$v<>smOIkA;}4>6)f<jcHYwA4)Jw
zOGc@ObG)OcI$Fasxv-||8e?IG|7tZoVubhzPbNbV&b`Mp?}&Fq3r9gZ$3Nm<Fw96Q
z%11QD53p@K&o=P_yNwsw8a~Rl@`G#(e~@jC)pO=>^J;5jUH!_I4eQsfy|wG6n{P=w
zaV|1B?}YbCDBZvWTg;dv4%}*V2`)6jtVJceD($Wo99?>sU?Sw;a4R8ndJfvU<A2IG
zX7bE5X;A1^!c=nx<}tIKb9XLttU+6w$FLt?ro|oaP5(4b65L@9vzmnFSTwh5axTYQ
zpjM7A(+q&Ymbn^pyk}Yjw~~T6{(F(NMwjEiTkUvfq7GLZS~bn4qg$MrSdH~U8?qU|
zS!C;iVLpyQZwsK)1<#rOvz+Ufz%~t5$A8g(p0#OgnZ{h9S=R`LL#JRjow(KH_^)O1
zfPfy>oN0jg=YS&?r$DB2{!_APINn#x6w?6u8UJbOvH|-`l6qQ~q_D$MJkCvE&x=dB
zcO+`_TQhmSj(Yr4vj<X)sLXKG6xL2AX9;zRFaWG0&lWnG0cjmhWbux~OIIXrH9o-E
zrP~wr#)s7CPh4gCucPJ2pQSG*UJdzYX=J&zWr6p??Lt??^Iq_uV*|uNkP$FB{+n_Y
z{Ve?(>kIA$G=P%`N#@X-gn_`J-RUO{vjLk(3NAn%^Tc6@5P^chb(wtFk*7N}NA=5Q
z!knCBM}i}0QE&tRj$pck`|HW|Gcfu?@^2&_1Q!VMNAdWV>QigwE)Y76K~}Kor+hOO
z5-|LL<DK@OVFM{ma}~XaiG~9ib@YQpn~~xKg#5T>bfG#cWoWL}MJtF_v?7cZyl87`
zx}@NpwVw#@C^mQGPt0=opv@dtuoi$~n%+lkr90~ug%q2P*4;Qq!D53QZJPJOR$FV+
zqBda}K=3zpYXer!tzT4`4INao0mzKm{q?sm3a|rj1BMWyg7Aw<{Pbz~{iOcJt0e~_
zl2b%_5kfO=f>jknO_E+=?sK#voqBue)`s7P<Y?)J#*I4loM?PkK36nt51@Uj>8TpY
z1R_-k#8=>y+M9Q6l>Jf&Rj1H!B&Z*SYQ$rvfcON0W@{U0CB4D$ga>VsT*oK5R6k4K
zX<nJVpmdyO9#u`KpW~lIJMAu~1xKg}i+hHwF8wj6+oOdroKAee894x3;l1sD!FxMY
zkcT{rK_$W788l0Gw}`vESJ09e;V=k>dWi}?V8=vsGrR+=XKVwWriKZ$j%=|(B!~3K
zKML^4O<t$H|82{XnpRtL+_jlJEL+M@AeW5Rj_S!XrRkzGOKVzN8(SeW8gz}vL#8l<
zHYg$oY{P0T<y$+OD|E0msHibG0IR7D9<VhGf2(!&90`~Lk7U$<2E!(Ct2G7tiaGz>
z+HtGIZW2dfD2;c#z@Q37oRM!*%?Mw~7eY*@A&J=Cv)Wy<Rn!Y=!tQCCTcmzbuVlOl
zd&$V^f)~>C$(3?QsgdInKfIGtuL54no^x0tIiz<%di0_Vg$$J2h7?1c1cx}I_2O1c
z0F&SrK{5v6kRoL`ZKR$LfjADR2VEuM4<t*>o&$4Bhx(_9=xb+p+R7kefi4%o3@U-7
z-PE3?=V#BKvFwxCP4fc^2yG+D=oIFVX=5M-XDn&;yV*-Zs<mKF=f=+gP${Z}1Kv@c
z4=f{r83suQoHiI_IQA*fzci=gX74PJXxG?s%_1t%iSjM#$Px5K2P9Q5&j_M*>0jsc
zwFl;fO*fwKbTG<fJOgV;zNqw{=FKg=B{sGN29%TdPg#`^*07>2RYUcb>QmobL}*K4
z5n-rPKvam$<#oS3YJivIh)XGZ+gu_G77Jr7(OEG|GISb${@ku>ljb3?j=|)aehBAE
zH}vQBT{GO!oVg!MH$(>z6_q=c=1aTSo&M|GbDvAB$YqFiutF#{lTeblMLRUj&+ME3
zmnrh<<R?J*01WAo*(4aH+pqeo&jmog3;>O#`xZPfXF9h?tcXd|ecXRp@So+`8l4T%
zRV29h>~FXIyNV+MEh~<QLue{)C?W#ZOIdlZ{knu?fl@$8{9m;<@%5#Sg>yrS!`l~r
z+x5PpsfZ7uAG8%wVu&n-e;SGog9a6c1#{Z`3nq<(+GqsBClRI!nu68<J)T7rByFR$
z#9`|V*KtD-GAVfxXV(D;jdb^2)YS=l1@nP5h+#X?0<x`wrP*@bqVbMY7;6D|2St78
zu)qV8oW7M=fMzp=dlw(Bpe5^UEiqH@Z3gC3EKM8COET814#IgNjIGt%TAbUa)uzA|
zdA!4bzKN;S&A={kfNZ(L&_`Huipde;gJudJ4PtBSrM5*wb%qWjeZ+grI~pZBRDk&t
zy!6?k`qHP1ZURQu9KlMbJ8Z6(-s@;Y42&S^z}glwM#yMGR=s(bhV13AhHcIuP%dp;
zylRdqQJ4I3ItdaNL7yC!UZQkpNkKceq_k^k(~@&baHJD0LXR2`3caAhi_hyVUB9#~
zSV@nEm)dwtyt?!*zQ%u=L$H7ulaA%tiUlFAS+i4Mh4-O~-fg&0>JvOq-M)0Df48`W
z&o2F8@nhS@iA-Iz5dcG&1p6a6{5NfjI1*k4x(Ji2#^7u)M&1N$r!j~gtU0Vgg{Y-X
z9apW<FrOpXoSY3uE7+jvzpbDK`TP%5o`IQc3m}x~0%^_rtn^<u*mr!Wh7lXU4PKa>
z3#?>%GSx5P1J&t-m5jwTpf2+?%~~OC9v!5PD>=8#b1&I|EH4nar2pcLiKdl}LB|08
zX4R4|*)+FJrh-#x<IL3TKKK-zNC1CMYG%s32qun_OO*l5W#C{COgJs;TEJ5T<>UgS
zgh7!Z{br%`yUu$p4bI(rboW;B1~g;hfvf+w&Ucm;|ES$GrWTfV{b+9K-s|sOeA!Ib
zKLX)_hFz5DE-n4p^>YHt^n>d&d|~OjW&5<ug3_0lz0|T48ih!{7J=b1`YH5*lz}kK
z^e&WcU;dLQwuALa@>1uDzjn{oYBjEQ7_{jcu%j?(h$ok6s}QcY52PCK$SfF0HR9Pe
zkg6v6q(4wzmWq(rr80RD5miu6^(RueEtA)%YamrsnJ%~;fwbCjDgaQYh)aD&YU)Db
zB9)AFK1GyxjbrEdV#b~M>o6S0ux64s7)V8^U&C?=K2mXKK8YXd1`(0T4<fCb4v5_Z
zP-2vG17QM_>I#ueK2kxERKrb095<B&NW23Fb`IL66Qg1TX^iH~qks*>2L*9{sz#Wp
zq>1$igjRtBF|3Pp5N3`*df?1Khz0mbC+XopOA!}3-V^?F@Hf~Bh+#45u}MVcVpA-i
ziqRgtvWM78L@?>R>8mB4I4<rigzu9U#|$9m0mNqMhbuc>OQ48BmOz#PYLE}31Ek~9
zLIt=3_8R=P;<~AXh1n6<4^oB*lp<w8jDc++3wYZCpd2Qw!IULpFf#rT2EYl=sIzLo
zT5My^`b<8PONwZlwu%fKBm|_*<Vr8yxPY4_??&4-VP*%QRb-n{@}fctfGrN-NJ%pZ
zEeCS}J_Ec!y14?M8Ng@KWNcdj4jB~NA^`!PNa9I$2_!j3!h)(*st%-gBdJ=aH3b`J
zCx~ki$Nz{8I%|<Kp-&O1)>%0uA_FAQC)fZ<Ef_H<#np*oB2pDa6=FS105KeJ#zj(@
zPqNp@h?0aUi3y9xX@!m+z4X&n)jOk3CkB93*pe=r*5Q02m&7;<hmB+5ObM!()T~Di
z*l`i75dJ_*Du(Gv$NxB!OVx|&lv!H0dhVQrgw{V|C!8GzL;~O?4mkSS7Bp*H>`3W}
z)k|EU{3si&iok)^Tb2cE&{JYiBQstHK-=}s6f7w=MrKDak-AR(5w%rO#x>n&4TW1V
z9r1~%A|zX;zaZvNBi`BNI*T_|UT;K|Hr`lyBOlRFd7(Y(D=%tUo#{l8A5)4P-P}Ul
zj5$#V9efkuGJ!UtIlyZ-+bwCfofrY4!61RtU?%iYw0LiT28)^Z>?T-%{7U9B(ULa2
zlX8VrDP_W%w^8bg{Ygu8Y-AjiL>NfbJ6bA9YI4bOGmnWJa5`}S?XO?Df3P!3AwZ)+
zNZ_byx}NYN>!uJ%vmHPqnr5PT+-_d3cf#f<Hj{vp-dP9WPGsjNSV&>Sr=Sn<3&Z??
zooq275zV67Y6K-rQAgxs>mf@?Oz>Tp=|>Jgl<FWukl<zz4rIV2`dN)7;5jy~G6~S;
zZK9eCD{L)HRRvnwHoBN~rXncRP$E__{j`LDsl0E6(AkjGbt&ZM^hZQp2n-p-Be2K3
z#m?j*t3j+23+y9FF`63TGZ-uv2{M_%R4!tQbFwsqU4s=2D-6=mX`y8T#zKacd7SAz
z>XlyYs&x|-DJ5t&?XL%=XF6YoQi;ljTC+S?P9;#}sW6P728aS31_sm|fJGrHQ}h&v
zHHTBok=9q*!URg0d;;VmKD(WP^ufk~hA25@a>R9zhGHgZ2OJ?_P({qLq;ODB6NeRP
zS))bqh$36IVOu(-eH9TCo)F8(w~9DnoXHb0G0zwPd{#R;q<K!@O}JoFWKjCJI8h=l
zy(cyV93US@^=&mUipUjl!3Y*i0W7d|6pR9BY2KB(DsMe`DrHzG*N`ZvgM|raCn7kH
z3lcP(pGWb3@@O-l|KvH~6ue6T$I-D7VL?eEahSy^S&m5vf#4#&6SJ@>e5j}up=2gU
z2AeEuB%aCPT!ayXAsP2boS86qE_e|WHK33VO`<5qz&Ok`;lRKN(tkK5Kr4+jCRND|
zuyH0wAqp5t^vUEXw!<i$G-DggxnvbQT+Afz<Hp0FoQSMsnFW{y;7L_UTBOq92SS-R
zAr-%k1PlhCqEQrF=@NI8QAARaIY$%%_nJURL$ZrFDfz`jy-0%C%;^Mus1w9>QGg`s
zQYQx=7_~_-;&P^#ni;S`Idt$GlEHwjE(HXpN5;JfWEk?z6ii0c=^8`?S!H@B3?xMY
z#epLRXe2cJWjIXpFJy8PBez-_pI3Tx-D3V)>AiK$_>6#D<1f~&;GHF7{rWYXaK_+8
zGpsm;=jOu6Se|2dPLX!-3CQuk0=StYzocL~1?m&;-FBO{=(54I${Mf*7EFCMDz$BH
z1vs~EUQ-Hfb@<ZKx~(?e2ew|9?B$dgBV|J{(x%0eTIm-Z*Sa!u1AvIbR2C<z$ujxg
zZPj6ZotZbiFLHpb5|tEFsRsl2IDI8ckTsmlbZiZ$XvoPasgYSb2p42QNOdYXmnKs!
z|HFG!;sq>ZP7Fm?b3kqie@JR^1cg^Yn#7#MfP>km)xso0G9%+!#2E>y52&wa{__)O
zwtiKk1oxKh7u4h0()ByOOS!Ib$5WiTj62?#Sb1lfU+JGEy+hfN4_L|4sk_`O{Wp_N
z3g<{PCTj2Ar^inxotDX-6Zd^BdZqWiT83f?mfg^MPCK`_^o!ov^f0qK`TSCM_7Hyl
zIQxifUtK!c=kV%@|Ip_|V$~2d|J{gHJyDzcJ?GV>_{jYDakU|;4cKt?$jbN`SUCW8
z1Rd9v9v_*v!hgBSxxNAhedJSRj4(Z{lm<In?-&SP83Laf5dZB+S-<iGBn<m`6442_
zxGsW&zw^j}j>oHHzr+L~Ruw+D*;QMxTU`s>m*c%XogBSmLjZW<d*e;?_{HIC4Swy!
zoW~nN@#7L)Pr^TuJ~>y5pMujR$}%7@ap2V7)>L`#D<J$c=u4LFeRWRCe>vzvF$v!^
zDSCyis3E?pymjJBuf86?;+O=oYtTwgZ20=)THJqKE$hUhi66f69rR479zi`{Ker-v
z#aAUoEqedQ@9oj~wWV#}Z;pCjp{;Ow;roxe#0l@y21`Ca4xSf+=SRWwoAL?qLP8mp
zw%3I8!xV66i0S>Q0qs(Xfl`{%h;PLy4`WudET)isaat)fge+@R#c&qMAy?Kj9GH!D
zDFjbsXLz3Eo?=6*xdp`#xceg_==+-L!#r3t1RfM8qy0Wx+hWs4Xd@4skB;+|j%d*F
z8ai++RP!73G1T#1fjPiTm{8QU@*;#JA4g3~^1*&>kfyo{FiMIzkVJZ@14&uoalAi*
zruSmZs<+{yfU-=HkSRHk4htX933~}WGG<CMSn0#{tu9qDR0fSIIP6+T23Uw>F+;~9
zd;>;V&H~u<p%iQl$(kT7lXR0`5y%SQOUE`mFdv}>;Yqm^ESBTFNQR|D1LqJSL&C7H
z?ldZ60~=TJ-b9hXq5uiADZSf9`yoPU!vnj`!y~p#6L{c|O?c2GiY+R(lz>>FgoEt+
zbx?GwkIAZvU}lOy7qITa0A*0HVfa+fsHzc)Nb4nxiAR6*ZO&Isto?DpNFao`Kp$DL
z3iZDWrGNjEZC7M+%^D2$i~d9@_1U~D;JqerK7N+Ae%9!oTMIMXMOY_wR1{3_{g4(u
ztV7bIGjfm;K7@}nIE+jz<hWgDB$4fUG!<41Ci5OnSDZCHZ}J{b>DpoRc6uk}2=^Yh
z4et#bA3h$1tPUb{PvHBcaCM|5$Ay+&<(>47rgZpH;D8C<JNWq9g@Nh&Qagd2v@~K`
zh~m_r=)J`CG#^XpP#P?o8d9yOjQ26adtB(4Wu_%J-HY~*+-Y+XeeS&@j4^CQFbLf{
zibM%aP`CtJO#}R*;|!oekS7S1sN;X)o!}^uq(Ql$S7GURE>S}m+w2&!0_65oO@Rfx
zEto7d0YW!pe<-teRK!|Rka~pOlq{|T_8JLGDg<7`Dp0D0gO4!eO+Ww<%7FKdcRUpW
z42FbCM#>>qM7?+H2v|U0KM`4i@RAcDiVm>=q6YY6(Ora=>y3i7QvtqRZ}g5Li9+xO
z3IS$y66u{h=_D}46%IOy3ag;C+@90+U^meh@^I2~K`3YynqUb|(vUdgp)c1_u7iw8
z=|BUYHv<vTa9#}D(J$hhlnn1E=3Q1cG?ERC;F&>8SIUqQ4orb?Xqa}X07boHfcj!-
zoF*+MWEbX+R5d(<TT1*~61((u-f?hF^NxC--T-a$pKdHY{MlmNJ7JdI{%n@zokH;m
zAUfVt_<PbU{ou2^Zw9eNjY!BC)jx{<PvS7l;()EU;9CRi#ba@y<ARUids=Xdhk{-K
zP{Uv-G)X2DrTpKw^Mw<y{Qdi3-dNiD50B59zG)|BL-c66ijYgc{)g)$jj1pQt(Urg
zeog8ApUs|~fD9qOfw1N26CvsX5G>e{x8tY~CrU5<tOZ;D+0Rz+MCn&Q%b>mS=Uc8x
z;8p<=kT5uGs?=<91u;8J(Ko&^qEd&pxxNJ({l(8aRuFVa<TuGdD?xdnnL_43VSCt#
z4LHcGEsNd>%>ZzP=fu)qT+eZI_Lu!3?^#5BrSJXn+uLZj7~QUtTTqR53e^CJU@Qc9
z2H|#8W&q8dq^4REQ1ie4WBYXg9R7h~EjaiPv#OZc3c*F$jmqSgD~|hrQo89^J5T}F
zE2E{CfAu6kQ(ExrL#95h_pM+5#%M6TQt8XTd3)Z~He3e<z<`un*NYn=7nud32~Nyf
zmSVC|n)BQGiAR5{A%tC4I`+^1M2|!NQ$F_p%g^cUp5OhD9@qYUh+^8;e!md0+{9o0
zpFYd<UIixeAh%ZX{Hg^1!~FPHO$SU<(d_xI>v{2tsDB(}o@XV?AKk=%gN@4Xbn%zy
zx!&O~((|Vde}<lgG=G?$zfSW!PCDOnGq0uaxqRprelK-={}%q!5E`Y|et$>#%8fiT
z`vcmVymM0Ms084HAVMBg6deD{%o63}8~KqcNrZJIZ$yJ~?IzyuKA+HHZVlD%y=Un%
zor<KiF7*da-+#=sZnVQ#1=E8d)@elLahcOd`-CY5K&gwvsgwDE#~*S0Z$OdA_zqaL
zkZ-+R$Fj74%zMRq&ifLcZ~4!8XP3hGL!Ltz{g9WfExgVRlPkHJAu^JW$JFDfdK|~2
zgLx+?V2T#KcVHX*Phe+YJuO&5T6auKN69cu>w5gsu16=k?D)8d14D-Nw<^ut9TFnS
z8Fxb{0gEH!<+(VK!Z0#h%+ag{JCSy8r}qTPgOJ>Mn`%E8M4^DDFsnh9#WW4Ir8K(>
zQm1!8$6_Mxy)l4LKR)igVO@n=TWk|WBXOARcgActE)oENK1ZMh^3csEI+~a$Ls>*Z
zkYcjEAO-{&XGgJ%NAY9u83|w;Dt?6HF--}zWlPc5L{$Y|syOS!Va34^anNY&avn~}
zP<cEB^Kv?~0GMf*S<Y?cjUn7_@h+5~+{&A>_@v7K8QoI(5H$!){=ol0hy7}?gYXKa
zV4Y&GPF#W^X+XM=f-K;skK?_7FGBFqau2#Q<9z@{G-O0);E7fK>y5%F|La!X+^pVT
zz`KK_v<;C1?tu8GY5eMKe1R)v&ZqFv0aX53F0rcGW}66KL3Qx(O=LF2Oz$K<`WUDQ
zLq9MvNi{XRKyaSYz&VnxXS5XVkD}*k4c{rKaT?WI*?3aJ_YCSerBStoT2E*xw@$WB
zYABk5@}IMLLuGSy95!#1%dmNqY+&<d*}&#4vVpx@WdmE!y3E#Te6xohJTRpQ!V2U*
zuCzcTgZG-?J(CYQ>Vl4XczLM;A*lk^WFQc^6O_RT(ekk!JnbgO;YFfyPIBfP_?GH1
zyGB&)oJLBJM3E9<lp<xlYyevj0zJT1;SX#T{=in@4{Te2ZA4U)rdZw^V3s?@Ee-Wa
z3LvGbS!qs1dpr;m0QgT-gd0K3JWD6pj*HqcR4!2zC%X@(CGMdHz5xPi><_6x1%sR#
zNb?4Ls~JGugW|9__B?9OR_onMH>eh~|HuYdu8pArH;dw16YxS||36^?;cM<5v#To<
zmeLFiYKS~ZNuDX{fE%@AU>n46nt>Exvow(vwl@UtjpbK%@Mc$u0Q78q%UG&bREcUZ
z6S}I=XAfwmCN=VCW&tb##~TtbA8!;-Ob*HDelhdmQZWm*0aq=d)pkg};UWtaZe_^`
zBmR-hf|QzbA+x|mv@LJCG}=*c6GA79B%d6{=;RV4Ygqm4|LepT8to93-*A=Y@;j1`
z6m9^koCB0lT7Z9B4sldT`!)*7AEoq>uH9G_XAlx(U`P)2E>(k2#kndN_cfH6l9+)>
zs9eBU)9p})<6#U~x@}a9HCaCw79ILW87iV4gKp!<gcLV$5PIT*fI~?P<cE=uh>NN_
zNS;Wbs>p*9#LB#f@PWDxRa>YZxpD;1bnOFX7*5$j+FFf%ga>V^2R8dGY@Sv70J&(I
zgCNZDkI^g{j<v;+u}B*(P_{smVjK8#8P?I$KZ&-q>PS|WX<flAl!|E7doCeI%lGZ%
z|BK&HzUxl@wEL$EwdCPA)oi>o$w9joF@CLbx3yH`DdLSH2s}_N86rzQ{SOF3^8=sU
z2!SP0YYcpHO!{OfGm_(G<&~SH^w9+6k@4YxX-Ik|U2>yng6oAQ#e|_;azo&f4bed4
zHbgA&$Y_x^i^hQ30puhd5-24b3Mf7a6n<|3fdUU4uWL8JqqdM9L2wK?s}d`40EQSO
zh!q+|ivp~w0vK?Ru>zz-0ai5$7|8*S3;-h)^}a+Q+iV=9;iE<sHonO_Ve2k(FMZtB
zSFwlCt*22_Sj7&@W*arfWm8adOg0;-`G{;<)O=VrqtrYkn=6ocz5x-1#2}6*1a`FG
zBdOybk2@9wezsL3OT{|z?ZXvpz`-v|O!X3X#cYZpRRlr-2&I<JcnWc+3P9?BMfnGJ
zbK7kdb&d=|V3g`88j$9xPRyoAqHbC=;+^v*R5Vf#&8f$jiaF-c#CixYLdP%rFQep%
zfTfX2Te9<{|7xWZF-WcIJc>`Iavq1>YZQ%SqQG&E60MGBqqS1h1tx74wLF+Kc<y?-
z=LXGUm{0Dzl}y^y@Z=JcW;Rly^GBwI#4OBn<tF%wMHZ@-G`7?6-$JtzT-8&F%s*#{
z`ZVsv$$VTa$1gY3%aG}HG>{Mb=W(NWJx!4lK#4Q@a$L}>7a&9%9zcDbdK03KR(fZN
z-f33ee=m=%tPkR~dg%ww1iNn{VlC5dk^5@Pwd?TizX)~{t?|(Yb=&&#xqEr5TPy08
zY5PR8qZjETBy^_@za^t3HD=d?(-C~!mM^kCSx=)QsHf4_JGcaz)reVPAWhdL<@OeB
zpXRd46{t2;Tt^g;$wAHVRX%Op12)9cxKm5tuc!ZEm=@N%g8l3U7z7;#!G`l=08xer
zD4L+=LG={$;wn#3G+f$`(&=UU^_l%`Y9kcu#%x`LWq<(JC}V_4FbIh9)yVx()T2V2
z2;pHPsm{syV0pU^^i%re3eXXDOahE71puQoXQTE5km(g+r+g(>gjYni@)adrdPOWI
zUmMk{2wsIS+;j*w5Tc?fK;gzHUH3ms(04e-L@nLp1SnABfb?Y8<QpHiQ5vKGEtaML
z4df33v?=-%^+QugXn{GNq<wjHhDXaw?&sm_5ke{isfLDh9f<&iXkjo*O{eSRj7nX^
zEQNc0x&MCL9Fw9Vn#xNvyk2hR&fE;TC1SLxk{YV)>C!%%X`QN}QgCKSjsIyyZjgt-
z05%ZiD>9@(gqs4O1^^E2+$b7w#od-7CD_KvaR5DShBi6lb0+AO2}=B-5>4g%AK+Kj
zD=^gd)5czSfX{Dgl*%?hoRVrXN$>J^AK<e=l3(J{s)!WO7%-7^f{?cZ|N3%j7oWYb
z9>0wucaQ{<raLB!x!^o}5oS{?1j0qiyLa*0`LHO69~wo3q~I`UjL+h5vP7yhqN8!5
zOMUsJU3`9K6|F+JL(Y~{+<`LDIC@ae9EaS;5Rf8-t`{M-9N@uwhGbP#c3-kF!Xt>s
zab$J%<>uYIBRwX~0Z^Avscp#b5Z|Pp$o`5*QFmoDEa4Q5<!5*E79G>d@9yT;LWF?b
zW%da)HcCPm6`??38!Lv4T;xs}H=@`<^ily1d~{gEq2qUf-k}tYMJdgv&NLrSp^A_~
zLWWc{WQSqbG`9=5V9_{GY!RddDTX38>JDV^aBap&YcP74B&i6*PLA2QYy-uq7v>}x
zZHj*2u24@`3?+gah%NDVhuw(lPxdTFeu0Mz%j2dE7=b-ok(0r+fJBJtVMFK^h$dR;
z(JHWD5UVQJVrIc!%WE;M&{G??@#xX87I<n@(xhd0&@xooXA%E3M7PbNVUPj=T$a%g
z=n3ss(Rd(lYjjV6!qO#ZA(SC35tX6Gdn45Vd!sa0gVF*|sg@+mR{6O-ytcWC5=vZ3
z1qKaLZ#7a=0ZhuD?m>`NFCtTviB#60ud)WG*i&m-dU#tk;E0Pb3=UnqLfJ+n%R77c
z+}7xnEdzt_>#fpGtwrpXik4sKK{!J*D*ZvY2WZp`+|?oj2bPH%q_8=N4DzBG^T9-d
zzA_(_pm0?WqCy=)LYGA1w?h-ycH$eLi>9Mvq)XU6+)F#_m5qU!qJ`RWJOziF1OSjY
zG6SeAt9TPBW<+Q$xKsvV6IH1&rGb?`<Y$<Me#}PLOZ9`7diffcuE^-*y?_O-nV>Dx
zZ=yYl9Z0?@mkw|Nf04+L@(NNVFqym`-i+~`Hfy2s41^O6;3`b07jhx69j+e!5Di!x
z%xM7dY-ey|mMjm7qamD(QVvXz#I&V6l;ur4Qa+yLbKMASNve|EfhxI9GDX!YfCeo_
zc|8YjMzk^jI>>5{+co2;5G83uYA2md8cN2I@Qp~+%m6cZCPLeqhA702x)QQ$gJk5m
zL>}nx2r!idz;S>LE?m?oFHGQw=s3h;JViV<M9nzy9>7Aj4)pOF*ILC8k|RpARFLl-
zS1&Tm_l~I-8R&aQ)r$=Ey~ovy4EDXp)Qb%Fy+`Q<ry+d+V<?>nA)5$|+X)<Xk_HpO
zQBQM$C@+y#XFa8c)LEz1i#qE`^`g!?rC!uoPtZ$J(K?eGBeF!M9~r`t&(fSwaO4-&
zi#qWOTr8&{b>s_bNF7;HFY3tW)r&gvIeLMa*vlJSd}Ea8T$J2^!<5{3&!}}5jY96^
zXc?m@(%=_#;D_;91J!cGutiyHjA;-cmE%b%g@%(#;DPuEpF~xBRGzhuC#25cw{9S;
z5G4AZ5{M3jCN!x&gD6)C%)$moZL)2ci!xV5%rKYgb4uXl+z?p_2$&QkRhYW`At2z4
zm84^#@~8WFCw|o^K#)pm6#P^Ww2>-|LHQWs;}ndl<H9?ryKc}597*_tij?ExNfA2v
zHPRSE>Qs8{Zjb}tBQH#ah^j^57HJh12J(AC6D!JN{k#cZ?4sot`;l3oF-0at7z2kK
zMFmhTxoFs+7#!bbl~N@tAvlhhJRu+*Z3ZTdQP4pu8Isj`SO^I@PcgD@s1lNanEIMZ
z)@0h-y)AZVJVnN9l6>Iq#ngjoyOes68KNFk0{*@xFgn$+Q*@KIVwqihAfAjeCKD$W
zUT9sSPF3^ZjAb6mY<YcSD(z-u$SEzQLLcxzstxB1#Oh>i=yjQM(<d|Je{Z7Ze;6F5
ze3q(w&Da$e9hwmj*j&s3*X6eboQf{g?FXyyk4J<Uu3Y0io@$`ThSt7_RJj4sDUy1F
zJU(u8&_zH{fUZm!w2x@EZlK+9O_<5mfWMg<*U{xQTzpX7D;(zHY9oGGO}%fUDVyY#
zEbNcc5}=?OC7lZB5r}&yG7IS9C`BRoG63}0AgnYdFsnweb=a9chTyl8sSE$B5(Uvu
z4j6QK7=Z_k%0wSGlPhyTKHT|hrg<}0BUr+UN<B4zhbX8%?E`5h$p@vz%`%%2A5?Kc
z$epOTfI@=2-dKClu#1_~$Em3BdCM!C(h~akGJPq^3v@vfYyhZK4IqhtJw&U^@m@t8
z8<#Yx#5aYAiHgp06xZNkQGIN|U&=v}l?tR>3yPzNSSuIeSBj`4DLbenNt?-nh6wtC
zN~8A<RTwd<cgfpdj{kDdaT!s^&0JjhQR8K2kk5AE+UQp{efm9i*kWPfH}mQDzv&W{
z>ZO0g0$C$*QU}i{0!4O9^Klmr0g1D89r2Q^7zL&D3o#UtVj_OOgQmeVqo(BG7s+uI
z$fH{V^7UDIb$$AWQRrR%E}XMa4!xjedPiskw}f6!<6Q5tDBbt;&S+bh|8?%Y5jq?a
zd^Fssd&dp`Tg>~W-l6*+hrILLJH;Q?y$i-{=6@^feU+`&H|TzuGb75pQaH--2`j8E
z4DZrB_q^tROS@b5UosX&{8O6uamary<UbYiU(u{^m-Y}F*Y@h&hJTj%U(++WkpBYn
zPwQ*KTeXASdr|k^GZ?!C|2mBKF7w{icjG|*ppgpsUpE%9-6)=U&ol3>u=giCr)}ZD
z@?^}6*I<qMZ{Y^Q{LPpd&MYu)FxDG*`vjL<yywyKo=14<KR0(pXnSaPXh)ba{}lH=
zqUZDU<E?Nk(iB+}xhK*eIUFgU8RUE22ig1r+nF284L_I@*?fLD&(?PL4`q8raacT<
z?=NP>zHE1IHqUb1Iku-T(p~J?$NF=9X!rK_^|8L5q2WT7<%^5*L%l40?=`#jJbV|e
z+d7iXb%;F=UxQs&&#w$^$7a(;#Izx~>So$)+Ol%X5WlvjZy1}k%`ddGzC1RdR(bOf
z@7CuRR+i5W@%OL1c{raR9VrS4-}(FY^Y?k%j6N~HfC!J>+?~q}7X|Gn`hX{OpTA<5
z>tT1tXirbJP+%K|hO&FRhs2&kK)#SYFq+NvWZ5ml`@8!qB-)-Wj1CnA?Uc`s<g<lr
zuGqb2D9g5>r&|<@huF4ket&<V&_A3Lz1duUwwD3ze0PyLXdPbm_ZN%k-!d!;qdogv
z1<!C^^!DeoJ;mYtp~{dL$q!4=))K_ohx!Y}0=u(&Xfz8h4U3`f{NAkSqm|jd{v3GM
z+g$_{heik>0iN|_#Za~nXcI68`+?5ZQM~nu{n`C=4)7UvNAsArXS8sLZO9eDG>{Wp
z6%G}O+5MuYduT{ble5q>GMw+u_YWNsqq**bkQj;nhTOsKp?)mNW(V2L`Qbugu{uu-
z_2&k$zPoqva1M(k>DAWk7KN^xKO_l*twFw<hjTd)fv82~ErJ^$8N_gkipBo@fNyxT
zICFB}XaPiBKU^q^{(|U*Tu;7?<{&*i`y{ANZ!b132=EjOSUT?x4?-qJ`a!e}OScBP
z5b!3TngEHr)jF0Q8txga^yeWZz+#e@6)G!nnBwP#0;FT=^^WXAMMVmb-95x^eJI;Q
zeB9q%49>3*6dWGi4<Tbt&;UV!pyd8=ZZF$$X#bw!q5d98XE8K9Ji<s;a^3p_5ur(U
zKvwp5=MGItzeGP^g9}_GTY9sFo_zlZ1Q5_pvNqk_d+{&{SI@rwq25XPq)8P5Nm-o~
z&#A*n5(>1G2srHocS^i^At#c&4-SuF_u-zN(LCEx?1nxnmFpQk2wftD+xlQGOBypn
zzk0f%v9Mum?PyNP5H0K9KQfdhA}T)Z2lu<7H_!rL+@E*J=8?*5fW8*{`}(nO9_n!r
z({GVVBM<Kug(9SAKVcx%Y>Gs|ERsu-%0R``^a6?TFey)gZ2|?vzV3q9lZC_;vcLsr
zxZCo>#o?aep@8*7%K%2nOM)`s3kmHW3>Szb0EBE#0o2SE0coMwpHpTg-~>(%q;qqC
z@)TDl&wLQ_pW7=5AT3F--Q+kCa0=5I-G$K+7z3i}4he(WgceMV5R6lAlgs<M_mc^c
zbKS{pDylhsv@$5|KtL!~nK%=;E!pCO!}v|GiuPCDr)&RZ%!?~>YT<Nq(!EDv24?RW
z?dyX`C~G=JiU4OE)}u_;6deexsm{Rjz*Rs;`e0xKmWjf?(IU*0o113ax`)Wm9U?}L
z<cIf?rJ6Q6y%%Z$pCA=?Uw5t-Dsc-Lf1F!@g@Efi6v)%|K>m~zPwMq{h&c3W!&0|m
z^KKs<#s=Akda~JGAOqB4XZuI@LoP;hz3i?$2};l<6=pMhVgJ725z!5Q2J4MQ+XImk
zgIUGiDS~Z84+($vp%G~^EALCCHsrGhVTXGe^*)GM`RoAP08|t9zmUyK--TOni_PWb
zno;g(A1pb4=O~|_Sd3_st{&k>)#v=3HluvxD6d<J5BmNIX3nZCn3_PrmVBc|6=JL-
z{z+E;A4mE6koTPb1S?;2j4#;bKZ&Nv;}|bftFDHo%O9~gH5q<l)H~*%!aNJD=crYe
zz>q;dSj?iI3_oe~Q#r31`#p(P`Rp-{deCG3ldSx`W4xwn0xgr*%8BUv)iK_b@ZXW0
z^;q*wnpl0Dceoz?+Z$%AYYmsXhp>YFIR=v>08+njWM*<vj79L*KX(H<Uzg()T*{fz
zOKJrUe)s7qY}$5}+>>Eb{OS^VctS2m3%`UcQMsD=AKri_1*aF}6a=#PH-etVUDV3H
z5)%4nIZWJKx$691ALrlv_@+KGXv?l^>+9`+wzWS}%pZCrpDm8&b7IFmJ8pJ1ZQ8L!
z#-!v6+AyVK?T#gK5tg*Kmy<iSP3525rp-S8%q`kCBIWF6EtT4vEs|dyl>yooIK<U$
z?W@-m_w^TGhW6&W_m}@JqxEmzwJW<{+1G4t7uM_|y(9m*x(yb*1HKfi(CW|ay<>Ri
z9cx##U9xdodq*(!{E^LCHgSH#{o03No-b>?+I8hjua+#Y>(%PYCwsMq@=ZNjr2KHN
zR>eolPxNZ-#zFi38_T<Uv{{MO5d8hOK14>faG(8P`KP^_ZH&<H(yZ20PGz+ld0+Yd
ztd_bbpjgMi%3Zs5!I4v#wyS@*r#RHnGrf!A-R@$?F#4oP+ci+=*o&9X!MP(>zL3?f
zsu{!-1YiB+((<%sXl407Zr2(*I`*vGg*dd>(Y<n4U+*rN19W6%n+#XSKG~!&u%q|<
JiazZu|G#v)r^5gM

diff --git a/web/index.d.mts b/web/index.d.mts
index 9958046..3ebf585 100644
--- a/web/index.d.mts
+++ b/web/index.d.mts
@@ -1,5 +1,11 @@
 export type BinaryInput = ArrayBuffer | ArrayBufferView | Blob;
 
+export interface BinaryOperationOptions {
+  signal?: AbortSignal;
+  maxInputBytes?: number;
+  maxOutputBytes?: number;
+}
+
 export function diff(
   oldFile: string,
   newFile: string,
@@ -14,10 +20,12 @@ export function patch(
 
 export function diffBytes(
   oldData: BinaryInput,
-  newData: BinaryInput
+  newData: BinaryInput,
+  options?: BinaryOperationOptions
 ): Promise<Uint8Array>;
 
 export function patchBytes(
   oldData: BinaryInput,
-  patchData: BinaryInput
+  patchData: BinaryInput,
+  options?: BinaryOperationOptions
 ): Promise<Uint8Array>;
diff --git a/web/index.mjs b/web/index.mjs
index afbb2ab..a77df4c 100644
--- a/web/index.mjs
+++ b/web/index.mjs
@@ -4,6 +4,48 @@ function createError(code, message) {
   return error;
 }
 
+function validateLimit(value, fieldName) {
+  if (value !== undefined && (!Number.isSafeInteger(value) || value < 0)) {
+    throw createError(
+      'EINVAL',
+      `${fieldName} must be a non-negative safe integer`
+    );
+  }
+}
+
+function inputByteLength(input) {
+  if (input instanceof ArrayBuffer || ArrayBuffer.isView(input)) {
+    return input.byteLength;
+  }
+  if (typeof Blob !== 'undefined' && input instanceof Blob) {
+    return input.size;
+  }
+  return undefined;
+}
+
+function enforceLimit(actualBytes, maximumBytes, fieldName) {
+  if (maximumBytes !== undefined && actualBytes > maximumBytes) {
+    throw createError(
+      'ERESOURCE',
+      `${fieldName} is ${actualBytes} bytes and exceeds the ${maximumBytes} byte limit`
+    );
+  }
+}
+
+function patchOutputSize(patchData) {
+  if (patchData.byteLength < 24) {
+    return undefined;
+  }
+  let outputSize = 0n;
+  for (let index = 23; index >= 16; index -= 1) {
+    if (index === 23 && (patchData[index] & 0x80) !== 0) {
+      return undefined;
+    }
+    outputSize = outputSize * 256n + BigInt(patchData[index]);
+  }
+  return outputSize;
+}
+
 async function toUint8Array(input, fieldName) {
   if (input instanceof ArrayBuffer) {
     return new Uint8Array(input.slice(0));
@@ -27,19 +69,104 @@ async function toUint8Array(input, fieldName) {
   );
 }
 
-async function runWorker(operation, oldInput, input) {
-  if (typeof Worker === 'undefined') {
-    throw createError(
-      'EUNSUPPORTED',
-      'Web Workers are required to run react-native-bs-diff-patch on Web'
-    );
+let sharedWorker;
+let sharedRequestId = 0;
+const sharedRequests = new Map();
+
+function responseError(operation, workerError) {
+  return createError(
+    workerError && workerError.code ? workerError.code : 'EWEBASSEMBLY',
+    workerError && workerError.message
+      ? workerError.message
+      : `${operation} worker failed`
+  );
+}
+
+function resetSharedWorker(error) {
+  sharedWorker?.terminate();
+  sharedWorker = undefined;
+  for (const request of sharedRequests.values()) {
+    request.reject(error);
   }
+  sharedRequests.clear();
+}
 
-  const [oldFileData, inputFileData] = await Promise.all([
-    toUint8Array(oldInput, 'oldData'),
-    toUint8Array(input, operation === 'diff' ? 'newData' : 'patchData'),
-  ]);
+function getSharedWorker() {
+  if (sharedWorker) {
+    return sharedWorker;
+  }
+
+  sharedWorker = new Worker(new URL('./worker.mjs', import.meta.url), {
+    type: 'module',
+  });
+  sharedWorker.onmessage = (event) => {
+    const request = sharedRequests.get(event.data && event.data.id);
+    if (!request) {
+      return;
+    }
+    sharedRequests.delete(event.data.id);
+
+    if (event.data.ok) {
+      try {
+        enforceLimit(
+          event.data.output.byteLength,
+          request.maxOutputBytes,
+          'output'
+        );
+        request.resolve(event.data.output);
+      } catch (error) {
+        request.reject(error);
+      }
+      return;
+    }
+    request.reject(responseError(request.operation, event.data.error));
+  };
+  sharedWorker.onerror = (event) => {
+    resetSharedWorker(
+      createError(
+        'EWEBASSEMBLY',
+        event.message || 'Shared Web Worker failed to load'
+      )
+    );
+  };
+  sharedWorker.onmessageerror = () => {
+    resetSharedWorker(
+      createError('EWEBASSEMBLY', 'Shared Web Worker response was invalid')
+    );
+  };
+  return sharedWorker;
+}
+
+function runSharedWorker(operation, oldFileData, inputFileData, options) {
+  const worker = getSharedWorker();
+  const id = ++sharedRequestId;
+
+  return new Promise((resolve, reject) => {
+    sharedRequests.set(id, {
+      maxOutputBytes: options.maxOutputBytes,
+      operation,
+      reject,
+      resolve,
+    });
+    try {
+      worker.postMessage(
+        {
+          id,
+          operation,
+          oldFileData,
+          inputFileData,
+          maxOutputBytes: options.maxOutputBytes,
+        },
+        [oldFileData.buffer, inputFileData.buffer]
+      );
+    } catch (error) {
+      sharedRequests.delete(id);
+      reject(error);
+    }
+  });
+}
 
+function runDedicatedWorker(operation, oldFileData, inputFileData, options) {
   return new Promise((resolve, reject) => {
     const worker = new Worker(new URL('./worker.mjs', import.meta.url), {
       type: 'module',
@@ -51,29 +178,36 @@ async function runWorker(operation, oldInput, input) {
         return;
       }
       settled = true;
+      options.signal?.removeEventListener('abort', abort);
       worker.terminate();
       callback();
     };
+    const abort = () => {
+      finish(() => reject(createError('EABORTED', `${operation} was aborted`)));
+    };
+
+    options.signal?.addEventListener('abort', abort, { once: true });
+    if (options.signal?.aborted) {
+      abort();
+      return;
+    }
 
     worker.onmessage = (event) => {
       if (event.data && event.data.ok) {
-        finish(() => resolve(event.data.output));
+        const output = event.data.output;
+        try {
+          enforceLimit(output.byteLength, options.maxOutputBytes, 'output');
+          finish(() => resolve(output));
+        } catch (error) {
+          finish(() => reject(error));
+        }
         return;
       }
 
-      const workerError = event.data && event.data.error;
       finish(() =>
-        reject(
-          createError(
-            workerError && workerError.code ? workerError.code : 'EWEBASSEMBLY',
-            workerError && workerError.message
-              ? workerError.message
-              : `${operation} worker failed`
-          )
-        )
+        reject(responseError(operation, event.data && event.data.error))
       );
     };
-
     worker.onerror = (event) => {
       finish(() =>
         reject(
@@ -84,7 +218,6 @@ async function runWorker(operation, oldInput, input) {
         )
       );
     };
-
     worker.onmessageerror = () => {
       finish(() =>
         reject(
@@ -96,13 +229,72 @@ async function runWorker(operation, oldInput, input) {
       );
     };
 
-    worker.postMessage({ operation, oldFileData, inputFileData }, [
-      oldFileData.buffer,
-      inputFileData.buffer,
-    ]);
+    try {
+      worker.postMessage(
+        {
+          operation,
+          oldFileData,
+          inputFileData,
+          maxOutputBytes: options.maxOutputBytes,
+        },
+        [oldFileData.buffer, inputFileData.buffer]
+      );
+    } catch (error) {
+      finish(() => reject(error));
+    }
   });
 }
 
+async function runWorker(operation, oldInput, input, options = {}) {
+  if (typeof Worker === 'undefined') {
+    throw createError(
+      'EUNSUPPORTED',
+      'Web Workers are required to run react-native-bs-diff-patch on Web'
+    );
+  }
+
+  validateLimit(options.maxInputBytes, 'maxInputBytes');
+  validateLimit(options.maxOutputBytes, 'maxOutputBytes');
+  if (options.signal?.aborted) {
+    throw createError('EABORTED', `${operation} was aborted`);
+  }
+
+  const oldInputBytes = inputByteLength(oldInput);
+  const inputBytes = inputByteLength(input);
+  if (oldInputBytes !== undefined) {
+    enforceLimit(oldInputBytes, options.maxInputBytes, 'oldData');
+  }
+  if (inputBytes !== undefined) {
+    enforceLimit(
+      inputBytes,
+      options.maxInputBytes,
+      operation === 'diff' ? 'newData' : 'patchData'
+    );
+  }
+
+  const [oldFileData, inputFileData] = await Promise.all([
+    toUint8Array(oldInput, 'oldData'),
+    toUint8Array(input, operation === 'diff' ? 'newData' : 'patchData'),
+  ]);
+
+  if (operation === 'patch' && options.maxOutputBytes !== undefined) {
+    const declaredOutputSize = patchOutputSize(inputFileData);
+    if (
+      declaredOutputSize !== undefined &&
+      declaredOutputSize > BigInt(options.maxOutputBytes)
+    ) {
+      throw createError(
+        'ERESOURCE',
+        `output exceeds the configured ${options.maxOutputBytes} byte limit`
+      );
+    }
+  }
+
+  return options.signal
+    ? runDedicatedWorker(operation, oldFileData, inputFileData, options)
+    : runSharedWorker(operation, oldFileData, inputFileData, options);
+}
+
 function rejectPathApi(methodName) {
   return Promise.reject(
     createError(
@@ -120,10 +312,10 @@ export function patch() {
   return rejectPathApi('patch');
 }
 
-export function diffBytes(oldData, newData) {
-  return runWorker('diff', oldData, newData);
+export function diffBytes(oldData, newData, options) {
+  return runWorker('diff', oldData, newData, options);
 }
 
-export function patchBytes(oldData, patchData) {
-  return runWorker('patch', oldData, patchData);
+export function patchBytes(oldData, patchData, options) {
+  return runWorker('patch', oldData, patchData, options);
 }
diff --git a/web/operations.mjs b/web/operations.mjs
index a78a487..339654b 100644
--- a/web/operations.mjs
+++ b/web/operations.mjs
@@ -6,6 +6,31 @@ const OUTPUT_FILE = '/output-file';
 const PATCH_MAGIC = new Uint8Array([
   69, 78, 68, 83, 76, 69, 89, 47, 66, 83, 68, 73, 70, 70, 52, 51,
 ]);
+let modulePromise;
+
+function getModule() {
+  if (!modulePromise) {
+    const pendingModule = createBsDiffPatchModule({
+      print: () => {},
+      printErr: () => {},
+    });
+    modulePromise = pendingModule;
+    pendingModule.catch(() => {
+      if (modulePromise === pendingModule) {
+        modulePromise = undefined;
+      }
+    });
+  }
+  return modulePromise;
+}
+
+function removeFile(module, filePath) {
+  try {
+    module.FS.unlink(filePath);
+  } catch {
+    // The operation may have failed before creating every MEMFS file.
+  }
+}
 
 function validatePatchHeader(patchData) {
   if (patchData.byteLength < 24) {
@@ -21,6 +46,22 @@ function validatePatchHeader(patchData) {
   if ((patchData[23] & 0x80) !== 0) {
     throw new Error('corrupt patch output size');
   }
+
+  let outputSize = 0n;
+  for (let index = 23; index >= 16; index -= 1) {
+    outputSize = outputSize * 256n + BigInt(patchData[index]);
+  }
+  return outputSize;
+}
+
+function enforceOutputLimit(outputSize, maxOutputBytes) {
+  if (maxOutputBytes !== undefined && outputSize > BigInt(maxOutputBytes)) {
+    const error = new Error(
+      `output exceeds the configured ${maxOutputBytes} byte limit`
+    );
+    error.code = 'ERESOURCE';
+    throw error;
+  }
 }
 
 function createOperationError(operation, error) {
@@ -29,41 +70,52 @@ function createOperationError(operation, error) {
       ? error.message
       : String(error || 'unknown WebAssembly error');
   const wrapped = new Error(`${operation} failed: ${message}`);
-  wrapped.code = 'EWEBASSEMBLY';
+  wrapped.code = error && error.code ? error.code : 'EWEBASSEMBLY';
   return wrapped;
 }
 
-export async function runOperation(operation, oldFileData, inputFileData) {
+export async function runOperation(
+  operation,
+  oldFileData,
+  inputFileData,
+  options = {}
+) {
   try {
     if (operation === 'patch') {
-      validatePatchHeader(inputFileData);
+      const outputSize = validatePatchHeader(inputFileData);
+      enforceOutputLimit(outputSize, options.maxOutputBytes);
     }
 
-    const module = await createBsDiffPatchModule({
-      print: () => {},
-      printErr: () => {},
-    });
+    const module = await getModule();
 
-    module.FS.writeFile(OLD_FILE, oldFileData);
-    module.FS.writeFile(INPUT_FILE, inputFileData);
+    try {
+      module.FS.writeFile(OLD_FILE, oldFileData);
+      module.FS.writeFile(INPUT_FILE, inputFileData);
 
-    const functionName = operation === 'diff' ? 'bsDiffFile' : 'bsPatchFile';
-    const args =
-      operation === 'diff'
-        ? [OLD_FILE, INPUT_FILE, OUTPUT_FILE]
-        : [OLD_FILE, OUTPUT_FILE, INPUT_FILE];
-    const result = module.ccall(
-      functionName,
-      'number',
-      ['string', 'string', 'string'],
-      args
-    );
+      const functionName = operation === 'diff' ? 'bsDiffFile' : 'bsPatchFile';
+      const args =
+        operation === 'diff'
+          ? [OLD_FILE, INPUT_FILE, OUTPUT_FILE]
+          : [OLD_FILE, OUTPUT_FILE, INPUT_FILE];
+      const result = module.ccall(
+        functionName,
+        'number',
+        ['string', 'string', 'string'],
+        args
+      );
 
-    if (result !== 0) {
-      throw new Error(`native function returned ${result}`);
-    }
+      if (result !== 0) {
+        throw new Error(`native function returned ${result}`);
+      }
 
-    return module.FS.readFile(OUTPUT_FILE).slice();
+      const output = module.FS.readFile(OUTPUT_FILE).slice();
+      enforceOutputLimit(BigInt(output.byteLength), options.maxOutputBytes);
+      return output;
+    } finally {
+      removeFile(module, OLD_FILE);
+      removeFile(module, INPUT_FILE);
+      removeFile(module, OUTPUT_FILE);
+    }
   } catch (error) {
     throw createOperationError(operation, error);
   }
diff --git a/web/worker.mjs b/web/worker.mjs
index 9541493..8dfdc95 100644
--- a/web/worker.mjs
+++ b/web/worker.mjs
@@ -1,21 +1,29 @@
 import { runOperation } from './operations.mjs';
 
-self.onmessage = async (event) => {
-  const { operation, oldFileData, inputFileData } = event.data;
+let operationQueue = Promise.resolve();
 
-  try {
-    const output = await runOperation(operation, oldFileData, inputFileData);
-    self.postMessage({ ok: true, output }, [output.buffer]);
-  } catch (error) {
-    self.postMessage({
-      ok: false,
-      error: {
-        code: error && error.code ? error.code : 'EWEBASSEMBLY',
-        message:
-          error instanceof Error
-            ? error.message
-            : String(error || 'unknown error'),
-      },
-    });
-  }
+self.onmessage = (event) => {
+  const { id, operation, oldFileData, inputFileData, maxOutputBytes } =
+    event.data;
+
+  operationQueue = operationQueue.then(async () => {
+    try {
+      const output = await runOperation(operation, oldFileData, inputFileData, {
+        maxOutputBytes,
+      });
+      self.postMessage({ id, ok: true, output }, [output.buffer]);
+    } catch (error) {
+      self.postMessage({
+        id,
+        ok: false,
+        error: {
+          code: error && error.code ? error.code : 'EWEBASSEMBLY',
+          message:
+            error instanceof Error
+              ? error.message
+              : String(error || 'unknown error'),
+        },
+      });
+    }
+  });
 };

From 97534e1edb8f846f5518c6a1781bfa5458b99bb3 Mon Sep 17 00:00:00 2001
From: JimmyDaddy <heyjimmygo@gmail.com>
Date: Sun, 19 Jul 2026 09:45:30 +0800
Subject: [PATCH 2/4] fix: sync optional peer lock metadata

---
 yarn.lock | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/yarn.lock b/yarn.lock
index 238c828..532ee3e 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -11224,6 +11224,11 @@ __metadata:
   peerDependencies:
     react: "*"
     react-native: "*"
+  peerDependenciesMeta:
+    react:
+      optional: true
+    react-native:
+      optional: true
   languageName: unknown
   linkType: soft
 

From e0892a9c4cc38d5f087c1150eaeaeed777615a96 Mon Sep 17 00:00:00 2001
From: JimmyDaddy <heyjimmygo@gmail.com>
Date: Sun, 19 Jul 2026 09:48:58 +0800
Subject: [PATCH 3/4] fix: fuzz bundled compression sources

---
 scripts/test-native-fuzz.sh | 16 ++++++++++++++--
 1 file changed, 14 insertions(+), 2 deletions(-)

diff --git a/scripts/test-native-fuzz.sh b/scripts/test-native-fuzz.sh
index 1414022..38165fe 100755
--- a/scripts/test-native-fuzz.sh
+++ b/scripts/test-native-fuzz.sh
@@ -21,7 +21,13 @@ if "$compiler" \
   -I"$repository_directory/cpp" \
   "$repository_directory/cpp/bspatch.c" \
   "$repository_directory/cpp/fuzz/bspatch_fuzzer.c" \
-  -lbz2 \
+  "$repository_directory/cpp/bzlib/blocksort.c" \
+  "$repository_directory/cpp/bzlib/bzlib.c" \
+  "$repository_directory/cpp/bzlib/compress.c" \
+  "$repository_directory/cpp/bzlib/crctable.c" \
+  "$repository_directory/cpp/bzlib/decompress.c" \
+  "$repository_directory/cpp/bzlib/huffman.c" \
+  "$repository_directory/cpp/bzlib/randtable.c" \
   -o "$temporary_directory/bspatch-fuzzer" 2>/dev/null; then
   "$temporary_directory/bspatch-fuzzer" \
     -runs="$fuzz_runs" \
@@ -38,7 +44,13 @@ else
     -I"$repository_directory/cpp" \
     "$repository_directory/cpp/bspatch.c" \
     "$repository_directory/cpp/fuzz/bspatch_fuzzer.c" \
-    -lbz2 \
+    "$repository_directory/cpp/bzlib/blocksort.c" \
+    "$repository_directory/cpp/bzlib/bzlib.c" \
+    "$repository_directory/cpp/bzlib/compress.c" \
+    "$repository_directory/cpp/bzlib/crctable.c" \
+    "$repository_directory/cpp/bzlib/decompress.c" \
+    "$repository_directory/cpp/bzlib/huffman.c" \
+    "$repository_directory/cpp/bzlib/randtable.c" \
     -o "$temporary_directory/bspatch-fuzzer"
   "$temporary_directory/bspatch-fuzzer" "$fuzz_runs"
 fi

From c79fbaf5bc94cf23693654e22fa5670578cc769f Mon Sep 17 00:00:00 2001
From: JimmyDaddy <heyjimmygo@gmail.com>
Date: Sun, 19 Jul 2026 09:52:37 +0800
Subject: [PATCH 4/4] fix: stabilize Linux release gates

---
 scripts/test-native-fuzz.sh        |  2 ++
 scripts/test-package-consumers.mjs | 10 +++++++++-
 2 files changed, 11 insertions(+), 1 deletion(-)

diff --git a/scripts/test-native-fuzz.sh b/scripts/test-native-fuzz.sh
index 38165fe..04423ec 100755
--- a/scripts/test-native-fuzz.sh
+++ b/scripts/test-native-fuzz.sh
@@ -14,6 +14,7 @@ trap cleanup EXIT INT TERM
 
 if "$compiler" \
   -std=c11 \
+  -D_POSIX_C_SOURCE=200809L \
   -g \
   -O1 \
   -fno-omit-frame-pointer \
@@ -36,6 +37,7 @@ if "$compiler" \
 else
   "$compiler" \
     -std=c11 \
+    -D_POSIX_C_SOURCE=200809L \
     -g \
     -O1 \
     -fno-omit-frame-pointer \
diff --git a/scripts/test-package-consumers.mjs b/scripts/test-package-consumers.mjs
index 17449dd..b668b42 100644
--- a/scripts/test-package-consumers.mjs
+++ b/scripts/test-package-consumers.mjs
@@ -37,6 +37,14 @@ function run(command, args, options = {}) {
   return result.stdout.trim();
 }
 
+function parseTrailingJson(output) {
+  const start = output.startsWith('[') ? 0 : output.lastIndexOf('\n[') + 1;
+  if (start < 0 || output[start] !== '[') {
+    throw new Error(`JSON array not found in command output:\n${output}`);
+  }
+  return JSON.parse(output.slice(start));
+}
+
 async function pathExists(candidate) {
   try {
     await access(candidate);
@@ -47,7 +55,7 @@ async function pathExists(candidate) {
 }
 
 try {
-  const packOutput = JSON.parse(
+  const packOutput = parseTrailingJson(
     run('npm', [
       'pack',
       '--ignore-scripts',