fix(jq): cap file binding memory

[chaliy]

What

Adds defensive count and cumulative byte limits for jq --rawfile/--slurpfile bindings, with regression coverage for repeated bindings to the same VFS file.

Why

Repeated jq file bindings could retain and clone one bounded file many times across jq globals and $ARGS.named, allowing a small script to amplify memory use beyond VFS and output limits.

How

• Caps file binding requests at parse time.
• Counts cumulative file-bound bytes per binding before retaining jq globals.
• Documents TM-DOS-062 in the threat model.

Risk

• Low
• Very large or highly repetitive jq file-binding invocations now fail with exit code 2 instead of attempting unbounded allocation.

Checklist

• Tests added or updated
• Backward compatibility considered

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	bashkit	8f54fd1	Commit Preview URL	May 08 2026, 08:09 PM