@lark-sh/client 0.1.17 → 0.1.19

package/dist/fb-v8/index.mjs

@@ -7,7 +7,7 @@ import {
   ServerValue,
   generatePushId,
   isVolatilePath
-} from "../chunk-VLAAYUVX.mjs";
+} from "../chunk-UF3SZ62Y.mjs";
 
 // src/fb-v8/index.ts
 var DatabaseReference = class _DatabaseReference {

package/dist/index.js

@@ -2873,6 +2873,9 @@ function generatePushId() {
 
 // src/utils/validation.ts
 var MAX_KEY_BYTES = 768;
+var MAX_STRING_VALUE_BYTES = 10 * 1024 * 1024;
+var MAX_WRITE_BYTES = 16 * 1024 * 1024;
+var MAX_VOLATILE_WRITE_BYTES = 2 * 1024;
 var INVALID_KEY_CHARS = /[.#$\[\]\/]/;
 var CONTROL_CHARS = /[\x00-\x1f\x7f]/;
 function hasControlChars(str) {
@@ -2943,10 +2946,11 @@ function validateValue(value, context, path = "") {
     return;
   }
   if (typeof value === "string") {
-    if (hasControlChars(value)) {
+    const byteLength = getByteLength(value);
+    if (byteLength > MAX_STRING_VALUE_BYTES) {
       throw new LarkError(
         ErrorCode.INVALID_DATA,
-        `${prefix}string value${location} contains control characters (ASCII 0-31, 127 are not allowed)`
+        `${prefix}string value${location} exceeds maximum size of 10 MB (got ${Math.round(byteLength / 1024 / 1024 * 100) / 100} MB)`
       );
     }
     return;
@@ -2989,6 +2993,30 @@ function validateValue(value, context, path = "") {
 function validateWriteData(value, context) {
   validateValue(value, context);
 }
+function getJsonByteSize(value) {
+  const json = JSON.stringify(value);
+  return getByteLength(json);
+}
+function validateWriteSize(value, context) {
+  const byteSize = getJsonByteSize(value);
+  if (byteSize > MAX_WRITE_BYTES) {
+    const sizeMB = Math.round(byteSize / 1024 / 1024 * 100) / 100;
+    throw new LarkError(
+      ErrorCode.INVALID_DATA,
+      `${context ? `${context}: ` : ""}write exceeds 16 MB limit (got ${sizeMB} MB)`
+    );
+  }
+}
+function validateVolatileWriteSize(value, context) {
+  const byteSize = getJsonByteSize(value);
+  if (byteSize > MAX_VOLATILE_WRITE_BYTES) {
+    const sizeKB = Math.round(byteSize / 1024 * 100) / 100;
+    throw new LarkError(
+      ErrorCode.INVALID_DATA,
+      `${context ? `${context}: ` : ""}volatile write exceeds 2 KB limit (got ${sizeKB} KB)`
+    );
+  }
+}
 
 // src/DatabaseReference.ts
 function isInfoPath(path) {
@@ -5105,6 +5133,7 @@ var LarkDatabase = class {
     if (!this.isAuthenticatedOrThrow()) await this.waitForAuthenticated();
     const normalizedPath = normalizePath(path) || "/";
     validateWriteData(value, normalizedPath);
+    validateWriteSize(value, normalizedPath);
     const requestId = this.messageQueue.nextRequestId();
     const pendingWriteIds = this.subscriptionManager.getPendingWriteIdsForPath(normalizedPath);
     this.pendingWrites.trackWrite(requestId, "set", normalizedPath, value);
@@ -5133,6 +5162,7 @@ var LarkDatabase = class {
       const fullPath = key.startsWith("/") ? key : `${normalizedPath}/${key}`;
       validateWriteData(value, fullPath);
     }
+    validateWriteSize(values, normalizedPath);
     const requestId = this.messageQueue.nextRequestId();
     const pendingWriteIds = this.subscriptionManager.getPendingWriteIdsForPath(normalizedPath);
     this.pendingWrites.trackWrite(requestId, "update", normalizedPath, values);
@@ -5194,6 +5224,7 @@ var LarkDatabase = class {
    */
   _sendVolatileSet(path, value) {
     const normalizedPath = normalizePath(path) || "/";
+    validateVolatileWriteSize(value, normalizedPath);
     this.subscriptionManager.applyOptimisticWrite(normalizedPath, value, "", "set");
     if (this._state !== "authenticated" || !this.transport || !this.transport.connected) {
       return;
@@ -5210,6 +5241,7 @@ var LarkDatabase = class {
    */
   _sendVolatileUpdate(path, values) {
     const normalizedPath = normalizePath(path) || "/";
+    validateVolatileWriteSize(values, normalizedPath);
     this.subscriptionManager.applyOptimisticWrite(normalizedPath, values, "", "update");
     if (this._state !== "authenticated" || !this.transport || !this.transport.connected) {
       return;