Function validate_content_length

core/src/workspace/s3.rs:994–1023

Decide whether a `GetObject` response is safe to buffer fully into memory. Returns `Ok(())` when the advertised `Content-Length` is non-negative and within `max_bytes`. Rejects in three cases: `Content-Length` was not advertised (we refuse to read without a size guard rather than risking OOM); the advertised length is negative (protocol violation); the advertised length exceeds `max_bytes`. Extr

(
    advertised: Option<i64>,
    max_bytes: u64,
    bucket: &str,
    key: &str,
)

/// Extracted as a free function so it can be unit-tested without standing up
/// an `aws_sdk_s3::Client`.
fn validate_content_length(
    advertised: Option<i64>,
    max_bytes: u64,
    bucket: &str,
    key: &str,
) -> Result<()> {
    match advertised {
        Some(n) if n < 0 => Err(anyhow!(
            "S3 object s3://{}/{} reported invalid content-length {}",
            bucket,
            key,
            n
        )),
        Some(n) if (n as u64) > max_bytes => Err(anyhow!(
            "S3 object s3://{}/{} is {} bytes, exceeds workspace max_read_bytes ({}); \
             raise S3BackendConfig::max_read_bytes if the read is legitimate",
            bucket,
            key,
            n,
            max_bytes
        )),
        Some(_) => Ok(()),
        None => Err(anyhow!(
            "S3 object s3://{}/{} did not report Content-Length; refusing to read \
             without a size guard. Check that the endpoint is S3-compliant.",
            bucket,
            key
        )),
    }
}

fn normalize_prefix(prefix: &str) -> String {
    prefix