Cap RPC streaming decoder buffers

[tim-smart]

Summary

• cap retained NDJSON and MessagePack decoder buffers with a 16 MiB default
• expose configurable limits and an explicit "unbounded" opt-out, including layer constructors
• propagate the NDJSON cap through NDJSON-RPC framing
• close socket transports with code 1009 when the typed buffer overflow error is raised
• add regression coverage and a patch changeset for @effect/rpc

Why

Incomplete MessagePack frames and newline-free NDJSON streams could retain and repeatedly grow per-connection parser state without a bound. The configurable cap limits that retained state while allowing applications with legitimate large frames to raise or disable the limit.

Validation

• pnpm test run packages/rpc/test/RpcSerialization.test.ts
• pnpm lint-fix
• pnpm check
• pnpm build
• pnpm docgen

Closes EFF-259

[pullfrog]

Run failed. View the logs →

  ^{｜ Rerun failed job ➔ ｜ View workflow run ｜ via Pullfrog ｜ Using DeepSeek Pro (free via Pullfrog for OSS) (Kimi K2 not used — the program covers this model; add its provider key to run your pick) ｜ 𝕏}

[changeset-bot]

🦋 Changeset detected

Latest commit: cfe446b

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 3 packages

Name	Type
@effect/rpc	Patch
@effect/platform-node	Patch
@effect/platform-bun	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR