Function getEntryBounded

src/services/SessionMemory/multiStore.ts:221–260

(
  store: string,
  key: string,
  maxBytes: number,
)

 * (truncateUtf8 in LocalMemoryRecallTool).
 */
export function getEntryBounded(
  store: string,
  key: string,
  maxBytes: number,
): { value: string; truncated: boolean } | null {
  validateStoreName(store)
  validateKey(key)
  const entryPath = getEntryPath(store, key)
  if (!existsSync(entryPath)) return null
  const stat = statSync(entryPath)
  const total = stat.size
  const readBytes = Math.min(total, maxBytes)
  const buf = Buffer.alloc(readBytes)
  const fd = openSync(entryPath, 'r')
  // M5 fix (codecov-100 audit #9): track how many bytes we ACTUALLY read,
  // and surface short-reads as truncation. Previously the loop returned
  // `buf` (a `readBytes`-sized allocation) regardless of whether the
  // readSync calls cumulatively delivered that many bytes — a file that
  // was truncated on disk between statSync and readSync would yield a
  // half-zeroed buffer with truncated=false, silently corrupting the
  // returned string.
  let offset = 0
  try {
    while (offset < readBytes) {
      const n = readSync(fd, buf, offset, readBytes - offset, offset)
      if (n === 0) break // EOF: file shrank between stat and read
      // n < 0 cannot happen — Node's readSync throws on errno < 0 — but
      // belt-and-suspenders for clarity: treat negative as EOF.
      if (n < 0) break
      offset += n
    }
  } finally {
    closeSync(fd)
  }
  // M5: include `offset < readBytes` in the truncated flag so callers see
  // EOF-during-read as truncation. Use subarray(0, offset) so the value
  // length matches what we actually read (no trailing zero bytes).
  const truncated = total > maxBytes || offset < readBytes
  return { value: buf.subarray(0, offset).toString('utf8'), truncated }
}

/** Delete an entry from a store. Returns true if it existed. */
export function deleteEntry(store: string, key: string): boolean {