@telecrypt-io/storage 0.6.1 → 0.7.1

package/README.md

@@ -5,21 +5,21 @@
 End-to-end encrypted file storage and sharing, built on Matrix.
 
 The current public TeleCrypt architecture, responsibilities, and product limits are authoritative at
-[telecrypt.io/llms.txt](https://telecrypt.io/llms.txt). This README documents this SDK's package API
+[telecrypt-io.github.io/llms-authority/llms.txt](https://telecrypt-io.github.io/llms-authority/llms.txt). This README documents this SDK's package API
 and development workflow.
 
 Files are encrypted on the client before upload. The server stores only opaque ciphertext and
 never holds the decryption keys. Shared vaults let multiple people add and read files, and a
 Recovery Key restores your files on a new device — even if you lose the original.
 
-This repository publishes the library package from annotated exact-version tags whose resulting
-GitHub Release is immutable, with NPM Trusted Publishing/OIDC provenance. The command-line client
-is maintained in its own repository.
+This repository publishes the library package from annotated version tags using npm Trusted
+Publishing. GitHub Releases identify the corresponding source version. The command-line client is
+maintained in its own repository.
 
 ## Install
 
 ```bash
-npm install @telecrypt-io/storage@0.6.0
+npm install @telecrypt-io/storage
 ```
 
 This gives you the `TeleCryptIOStorage` library and its browser-safe `core` API.
@@ -120,15 +120,12 @@ a production server. This is the shared fixture for the SDK, CLI, and Web functi
 start it from this checkout and reuse it for the sibling repositories. Unit tests may use mocks for
 isolated boundaries, but they do not replace the real-stack checks.
 
-If setup or tests fail, preserve the fixture and its diagnostics; do not run
-`npm run synapse:down` before the private Harness investigation is complete. The fixture scripts do
-not provide that workflow; follow the [Harness operator workflow](https://github.com/TeleCrypt-io/Harness/blob/main/docs/release.md#required-stage-first-sequence)
-for the canonical ordering and stopping boundary.
+If setup or tests fail, inspect the relevant logs, then run `npm run synapse:down` when finished.
 
 After a successful run, use `npm run synapse:down` for scoped teardown. Use
 `./throwaway_synapse/down.sh --wipe` only when a complete fixture reset is explicitly required.
 
-See [RELEASING.md](./RELEASING.md) for the guarded npm release procedure.
+See [RELEASING.md](./RELEASING.md) for the npm release procedure.
 
 ## Licence
 

package/dist/TeleCryptIOStorage.d.ts

@@ -115,7 +115,7 @@ export interface CreateFromOidcOptions {
 /** Waits for one Matrix mutation to settle without aborting the shared client.
  * If cancellation arrives after the mutation starts, the outcome is explicitly
  * unknown: the caller must reconcile and may safely retry idempotent work. */
-export declare function withMatrixMutationAbort<T>(_client: MatrixClient, operation: () => Promise<T>, signal?: AbortSignal, operationName?: string): Promise<T>;
+export declare function withMatrixMutationAbort<T>(operation: () => Promise<T>, signal?: AbortSignal, operationName?: string): Promise<T>;
 export declare function boundedMatrixFetch(fetchFn: typeof fetch): typeof fetch;
 export interface MatrixRequestOptions {
     signal?: AbortSignal;

package/dist/TeleCryptIOStorage.js

@@ -4,7 +4,7 @@ import { ClientPrefix } from "matrix-js-sdk/lib/http-api/prefix.js";
 import { encryptAttachment, decryptAttachment } from "matrix-encrypt-attachment";
 import { decodeRecoveryKey } from "matrix-js-sdk/lib/crypto-api/recovery-key.js";
 import { FileTooLargeError, RecoveryAlreadyConfiguredError, RecoveryRestoreError, RecoverySetupAmbiguousError, RecoverySetupError, RecoveryRestoreAmbiguousError, MutationOutcomeUnknownError, RoomCreationAmbiguousError, RoomCleanupIncompleteError, StorageError, UndecryptableFileError, } from "./core/errors.js";
-import { MAX_MEDIA_FILE_BYTES, MAX_MATRIX_IDENTIFIER_LENGTH, validateCanonicalMatrixUserId, validateMatrixDeviceId, validateMatrixEventId, validateMatrixRoomId, } from "./core/constants.js";
+import { MAX_MEDIA_FILE_BYTES, MAX_MATRIX_IDENTIFIER_BYTES, validateCanonicalMatrixUserId, validateMatrixDeviceId, validateMatrixEventId, validateMatrixRoomId, } from "./core/constants.js";
 import { cancelResponseBody, raceWithAbort, readMediaResponseBody, readResponseBody, ResponseBodyReadError, } from "./core/http.js";
 import { sanitizeDiagnosticText } from "./core/oidc.js";
 import { validateName } from "./core/validation.js";
@@ -16,9 +16,6 @@ const MEDIA_TIMEOUT_MS = 30000;
 const MATRIX_HTTP_TIMEOUT_MS = 30000;
 const CLEANUP_TIMEOUT_MS = 30000;
 const RECOVERY_CRYPTO_TIMEOUT_MS = 60000;
-const MAX_MEDIA_REDIRECTS = 5;
-const MAX_MATRIX_TOKEN_LENGTH = 8192;
-const MAX_MIMETYPE_LENGTH = 255;
 function cloneCryptoCallbacks(callbacks) {
     // MatrixClient retains this object for the lifetime of the client. Keep the
     // caller's object immutable: recovery temporarily installs key callbacks on
@@ -29,7 +26,7 @@ function cloneCryptoCallbacks(callbacks) {
 /** Waits for one Matrix mutation to settle without aborting the shared client.
  * If cancellation arrives after the mutation starts, the outcome is explicitly
  * unknown: the caller must reconcile and may safely retry idempotent work. */
-export function withMatrixMutationAbort(_client, operation, signal, operationName = "Matrix mutation") {
+export function withMatrixMutationAbort(operation, signal, operationName = "Matrix mutation") {
     if (!signal)
         return operation();
     if (signal.aborted)
@@ -114,7 +111,7 @@ export function boundedMatrixFetch(fetchFn) {
                     response.type === "opaqueredirect" ||
                     (response.status >= 300 && response.status < 400)) {
                     const failure = new Error("Matrix redirect rejected");
-                    await cancelResponseBody(response, "Matrix redirect", failure);
+                    cancelResponseBody(response);
                     throw failure;
                 }
                 return await readMatrixResponse(response, controller.signal, () => (timedOut ? new Error("Matrix request timed out") : new DOMException("The operation was aborted", "AbortError")));
@@ -151,7 +148,6 @@ function isLoopbackHostname(hostname) {
 function validateHomeserverUrl(value) {
     if (typeof value !== "string" ||
         value.length === 0 ||
-        value.length > 2048 ||
         value.trim() !== value ||
         /[\s\u0000-\u001f\u007f]/.test(value)) {
         throw new Error("invalid Matrix homeserver URL");
@@ -177,7 +173,6 @@ function validateHomeserverUrl(value) {
 function validateMatrixToken(value) {
     if (typeof value !== "string" ||
         value.length === 0 ||
-        value.length > MAX_MATRIX_TOKEN_LENGTH ||
         value.trim() !== value ||
         /[\s\u0000-\u001f\u007f]/.test(value)) {
         throw new Error("invalid Matrix token");
@@ -186,7 +181,7 @@ function validateMatrixToken(value) {
 function validateMatrixIdentifier(value, name) {
     if (typeof value !== "string" ||
         value.length === 0 ||
-        value.length > MAX_MATRIX_IDENTIFIER_LENGTH ||
+        new TextEncoder().encode(value).byteLength > MAX_MATRIX_IDENTIFIER_BYTES ||
         /[\s\u0000-\u001f\u007f]/.test(value)) {
         throw new Error(`invalid Matrix ${name}`);
     }
@@ -197,7 +192,6 @@ function validateFileName(value) {
 function validateMimetype(value) {
     if (typeof value !== "string" ||
         value.length === 0 ||
-        value.length > MAX_MIMETYPE_LENGTH ||
         /[\u0000-\u001f\u007f]/.test(value) ||
         !/^[!#$%&'*+.^_`|~0-9A-Za-z-]+\/[!#$%&'*+.^_`|~0-9A-Za-z-]+(?:\s*;\s*[!#$%&'*+.^_`|~0-9A-Za-z-]+=[^;\r\n]+)*$/.test(value)) {
         throw new Error("invalid MIME type");
@@ -354,7 +348,7 @@ function parseMatrixStateResponse(value) {
             throw new Error("invalid Matrix room state response");
         }
         validateMatrixIdentifier(event.type, "state event type");
-        if (event.state_key.length > MAX_MATRIX_IDENTIFIER_LENGTH ||
+        if (new TextEncoder().encode(event.state_key).byteLength > MAX_MATRIX_IDENTIFIER_BYTES ||
             /[\s\u0000-\u001f\u007f]/.test(event.state_key)) {
             throw new Error("invalid Matrix state event key");
         }
@@ -391,30 +385,8 @@ function isGoneRoomError(error) {
         (error.errcode === "M_NOT_FOUND" || error.errcode === "M_UNKNOWN"));
 }
 function throwWithCleanupDetail(error, roomId, cleanupError) {
-    const cleanupCause = cleanupError === undefined
-        ? error
-        : new AggregateError([error, cleanupError], "operation and room cleanup failed", { cause: error });
-    const cleanup = new RoomCleanupIncompleteError(roomId, cleanupCause);
-    if (error instanceof Error) {
-        try {
-            Object.defineProperty(error, "cleanupIncomplete", {
-                value: true,
-                enumerable: false,
-            });
-            Object.defineProperty(error, "cleanupError", {
-                value: cleanup,
-                enumerable: false,
-            });
-        }
-        catch {
-            // A non-extensible provider error cannot carry the cleanup marker. Throw
-            // the existing typed cleanup error and retain the provider error as cause
-            // so callers cannot mistake the mutation for a safe retry.
-            throw cleanup;
-        }
-        throw error;
-    }
-    throw cleanup;
+    const cause = new AggregateError([error, cleanupError], "operation and room cleanup failed", { cause: error });
+    throw new RoomCleanupIncompleteError(roomId, cause);
 }
 /**
  * Serializes all tree mutations for one MatrixClient. A single queue is
@@ -996,7 +968,6 @@ export class TeleCryptIOStorage {
         const crypto = this.requireCrypto();
         if (typeof recoveryKey !== "string" ||
             recoveryKey.length === 0 ||
-            recoveryKey.length > 256 ||
             /[^A-Za-z0-9 ]/.test(recoveryKey)) {
             throw new RecoveryRestoreError();
         }
@@ -1150,19 +1121,17 @@ export class TeleCryptIOStorage {
         return tree;
     }
     /** Cleans up only a room created by this operation and reports incomplete cleanup. */
-    async cleanupCreatedRoom(roomId, _signal) {
+    async cleanupCreatedRoom(roomId) {
         // Cleanup is compensating work. It must not inherit the caller's already
         // aborted deadline, or a timed-out create could never even attempt leave.
         const cleanupSignal = new AbortController().signal;
-        let incomplete = false;
         let safeToForget = true;
         const failures = [];
         try {
-            await TeleCryptIOStorage.withTimeout(withMatrixMutationAbort(this.client, () => this.client.leave(roomId), cleanupSignal), CLEANUP_TIMEOUT_MS, "room leave cleanup", cleanupSignal);
+            await TeleCryptIOStorage.withTimeout(withMatrixMutationAbort(() => this.client.leave(roomId), cleanupSignal), CLEANUP_TIMEOUT_MS, "room leave cleanup", cleanupSignal);
         }
         catch (error) {
             if (!isGoneRoomError(error)) {
-                incomplete = true;
                 failures.push(error);
                 // A timed-out or failed leave may still be in flight. Do not race a
                 // forget request against it; the caller must retry cleanup later.
@@ -1171,16 +1140,15 @@ export class TeleCryptIOStorage {
         }
         if (safeToForget) {
             try {
-                await TeleCryptIOStorage.withTimeout(withMatrixMutationAbort(this.client, () => this.client.forget(roomId), cleanupSignal), CLEANUP_TIMEOUT_MS, "room forget cleanup", cleanupSignal);
+                await TeleCryptIOStorage.withTimeout(withMatrixMutationAbort(() => this.client.forget(roomId), cleanupSignal), CLEANUP_TIMEOUT_MS, "room forget cleanup", cleanupSignal);
             }
             catch (error) {
                 if (!isGoneRoomError(error)) {
-                    incomplete = true;
                     failures.push(error);
                 }
             }
         }
-        if (incomplete) {
+        if (failures.length > 0) {
             const cause = failures.length === 1
                 ? failures[0]
                 : new AggregateError(failures, "room cleanup failed");
@@ -1203,7 +1171,7 @@ export class TeleCryptIOStorage {
         if (!currentUserId || typeof getSender !== "function" || getSender() !== currentUserId)
             return false;
         const eventId = validateMatrixEventId(event.getId(), "state event ID");
-        await withMatrixMutationAbort(this.client, () => this.client.redactEvent(roomId, eventId), signal);
+        await withMatrixMutationAbort(() => this.client.redactEvent(roomId, eventId), signal);
         return true;
     }
     async removeChildLink(parentId, childId, signal) {
@@ -1215,7 +1183,7 @@ export class TeleCryptIOStorage {
     async createTreeSpace(name, operation, signal) {
         if (signal?.aborted)
             throw new StorageError("operation cancelled");
-        const response = await TeleCryptIOStorage.withMutationTimeout(withMatrixMutationAbort(this.client, () => this.client.createRoom(this.treeRoomOptions(name)), signal, `${operation} room creation`), MATRIX_HTTP_TIMEOUT_MS, `${operation} room creation`).catch((error) => {
+        const response = await TeleCryptIOStorage.withMutationTimeout(withMatrixMutationAbort(() => this.client.createRoom(this.treeRoomOptions(name)), signal, `${operation} room creation`), MATRIX_HTTP_TIMEOUT_MS, `${operation} room creation`).catch((error) => {
             // createRoom is a server-side mutation. A rejected HTTP promise does
             // not prove that the request was rejected before commit, so every
             // non-validation failure follows the reconciliation path instead of a
@@ -1236,7 +1204,7 @@ export class TeleCryptIOStorage {
         }
         catch (error) {
             try {
-                await this.cleanupCreatedRoom(roomId, signal);
+                await this.cleanupCreatedRoom(roomId);
             }
             catch (cleanupError) {
                 throwWithCleanupDetail(error, roomId, cleanupError);
@@ -1288,12 +1256,12 @@ export class TeleCryptIOStorage {
                 if (!via)
                     throw new Error("createSubtree: Matrix client has no server domain");
                 parentLinkAttempted = true;
-                const parentLink = await TeleCryptIOStorage.withMutationTimeout(withMatrixMutationAbort(this.client, () => this.client.sendStateEvent(currentParent.id, EventType.SpaceChild, { via: [via] }, tree.id), effectiveSignal), MATRIX_HTTP_TIMEOUT_MS, "parent link");
+                const parentLink = await TeleCryptIOStorage.withMutationTimeout(withMatrixMutationAbort(() => this.client.sendStateEvent(currentParent.id, EventType.SpaceChild, { via: [via] }, tree.id), effectiveSignal), MATRIX_HTTP_TIMEOUT_MS, "parent link");
                 if (parentLink?.event_id !== undefined) {
                     parentLinkEventId = validateMatrixEventId(parentLink.event_id, "parent link response event ID");
                 }
                 childLinkAttempted = true;
-                const childLink = await TeleCryptIOStorage.withMutationTimeout(withMatrixMutationAbort(this.client, () => this.client.sendStateEvent(tree.id, EventType.SpaceParent, { via: [via] }, currentParent.id), effectiveSignal), MATRIX_HTTP_TIMEOUT_MS, "child link");
+                const childLink = await TeleCryptIOStorage.withMutationTimeout(withMatrixMutationAbort(() => this.client.sendStateEvent(tree.id, EventType.SpaceParent, { via: [via] }, currentParent.id), effectiveSignal), MATRIX_HTTP_TIMEOUT_MS, "child link");
                 if (childLink?.event_id !== undefined) {
                     childLinkEventId = validateMatrixEventId(childLink.event_id, "child link response event ID");
                 }
@@ -1311,7 +1279,6 @@ export class TeleCryptIOStorage {
                 // Reconcile and retry these idempotent relation updates with a fresh
                 // signal, then report incomplete cleanup if they cannot be verified.
                 const compensationSignal = new AbortController().signal;
-                let rollbackIncomplete = false;
                 const cleanupFailures = [];
                 // A sendStateEvent rejection is ambiguous: the homeserver may have
                 // committed the event before the client observed a transport error.
@@ -1322,7 +1289,7 @@ export class TeleCryptIOStorage {
                 if (parentLinkAttempted) {
                     try {
                         if (parentLinkEventId) {
-                            await TeleCryptIOStorage.withTimeout(withMatrixMutationAbort(this.client, () => this.client.redactEvent(currentParent.id, parentLinkEventId), compensationSignal), MATRIX_HTTP_TIMEOUT_MS, "parent link rollback", compensationSignal);
+                            await TeleCryptIOStorage.withTimeout(withMatrixMutationAbort(() => this.client.redactEvent(currentParent.id, parentLinkEventId), compensationSignal), MATRIX_HTTP_TIMEOUT_MS, "parent link rollback", compensationSignal);
                             await this.refreshRoomState(currentParent.id, { signal: compensationSignal });
                             const remaining = this.client
                                 .getRoom(currentParent.id)
@@ -1335,7 +1302,6 @@ export class TeleCryptIOStorage {
                                         !Array.isArray(content) &&
                                         Object.keys(content).length > 0);
                                 })) {
-                                rollbackIncomplete = true;
                                 cleanupFailures.push(new Error("parent link rollback could not be verified"));
                             }
                         }
@@ -1345,20 +1311,18 @@ export class TeleCryptIOStorage {
                             // Without an event ID, a missing link after one refresh does not
                             // prove that a request which timed out will never commit.
                             if (!removed) {
-                                rollbackIncomplete = true;
                                 cleanupFailures.push(new Error("parent link rollback could not be verified"));
                             }
                         }
                     }
                     catch (cleanupError) {
-                        rollbackIncomplete = true;
                         cleanupFailures.push(cleanupError);
                     }
                 }
                 if (childLinkAttempted) {
                     try {
                         if (childLinkEventId) {
-                            await TeleCryptIOStorage.withTimeout(withMatrixMutationAbort(this.client, () => this.client.redactEvent(tree.id, childLinkEventId), compensationSignal), MATRIX_HTTP_TIMEOUT_MS, "child link rollback", compensationSignal);
+                            await TeleCryptIOStorage.withTimeout(withMatrixMutationAbort(() => this.client.redactEvent(tree.id, childLinkEventId), compensationSignal), MATRIX_HTTP_TIMEOUT_MS, "child link rollback", compensationSignal);
                             await this.refreshRoomState(tree.id, { signal: compensationSignal });
                             const remaining = this.client
                                 .getRoom(tree.id)
@@ -1371,7 +1335,6 @@ export class TeleCryptIOStorage {
                                         !Array.isArray(content) &&
                                         Object.keys(content).length > 0);
                                 })) {
-                                rollbackIncomplete = true;
                                 cleanupFailures.push(new Error("child link rollback could not be verified"));
                             }
                         }
@@ -1379,23 +1342,21 @@ export class TeleCryptIOStorage {
                             await this.refreshRoomState(tree.id, { signal: compensationSignal });
                             const removed = await this.removeParentLink(tree.id, currentParent.id, compensationSignal);
                             if (!removed) {
-                                rollbackIncomplete = true;
                                 cleanupFailures.push(new Error("child link rollback could not be verified"));
                             }
                         }
                     }
                     catch (cleanupError) {
-                        rollbackIncomplete = true;
                         cleanupFailures.push(cleanupError);
                     }
                 }
                 try {
-                    await this.cleanupCreatedRoom(tree.id, effectiveSignal);
+                    await this.cleanupCreatedRoom(tree.id);
                 }
                 catch (cleanupError) {
                     cleanupFailures.push(cleanupError);
                 }
-                if (rollbackIncomplete || cleanupFailures.length > 0) {
+                if (cleanupFailures.length > 0) {
                     const cleanupCause = cleanupFailures.length === 1
                         ? cleanupFailures[0]
                         : new AggregateError(cleanupFailures, "tree creation cleanup failed");
@@ -1489,7 +1450,7 @@ export class TeleCryptIOStorage {
             throw new StorageError("operation cancelled");
         let response;
         try {
-            response = await withMatrixMutationAbort(this.client, () => tree.createFile(name, new Uint8Array(encrypted.data), encrypted.info, { info: { mimetype, size: data.byteLength } }), signal, "file upload");
+            response = await withMatrixMutationAbort(() => tree.createFile(name, new Uint8Array(encrypted.data), encrypted.info, { info: { mimetype, size: data.byteLength } }), signal, "file upload");
         }
         catch (error) {
             // A transport failure after the encrypted event was submitted cannot be
@@ -1587,7 +1548,7 @@ export class TeleCryptIOStorage {
             signal?.addEventListener("abort", abortExternal, { once: true });
         let ciphertext;
         try {
-            for (let redirect = 0;; redirect += 1) {
+            for (;;) {
                 const res = await raceWithAbort(fetch(currentUrl, {
                     redirect: "manual",
                     signal: controller.signal,
@@ -1598,33 +1559,28 @@ export class TeleCryptIOStorage {
                 if ([301, 302, 303, 307, 308].includes(res.status)) {
                     let redirectError;
                     let nextUrl;
-                    if (redirect >= MAX_MEDIA_REDIRECTS) {
-                        redirectError = new Error("media download redirect limit exceeded");
+                    const location = res.headers.get("location");
+                    if (!location) {
+                        redirectError = new Error("media download redirect missing location");
                     }
                     else {
-                        const location = res.headers.get("location");
-                        if (!location) {
-                            redirectError = new Error("media download redirect missing location");
+                        try {
+                            nextUrl = new URL(location, currentUrl);
                         }
-                        else {
-                            try {
-                                nextUrl = new URL(location, currentUrl);
-                            }
-                            catch (error) {
-                                redirectError = new Error("media download redirect is invalid", { cause: error });
-                            }
-                            if (nextUrl &&
-                                ((nextUrl.protocol !== "http:" && nextUrl.protocol !== "https:") ||
-                                    nextUrl.username !== "" ||
-                                    nextUrl.password !== "")) {
-                                redirectError = new Error("media download redirect is invalid");
-                            }
-                            if (nextUrl && nextUrl.origin !== trustedOrigin) {
-                                redirectError = new Error("media download redirect crossed origin");
-                            }
+                        catch (error) {
+                            redirectError = new Error("media download redirect is invalid", { cause: error });
+                        }
+                        if (nextUrl &&
+                            ((nextUrl.protocol !== "http:" && nextUrl.protocol !== "https:") ||
+                                nextUrl.username !== "" ||
+                                nextUrl.password !== "")) {
+                            redirectError = new Error("media download redirect is invalid");
+                        }
+                        if (nextUrl && nextUrl.origin !== trustedOrigin) {
+                            redirectError = new Error("media download redirect crossed origin");
                         }
                     }
-                    await cancelResponseBody(res, "media redirect", redirectError);
+                    cancelResponseBody(res);
                     if (redirectError)
                         throw redirectError;
                     currentUrl = nextUrl;

package/dist/core/constants.d.ts

@@ -1,9 +1,7 @@
 /** Maximum plaintext media body accepted by the non-streaming SDK surface. */
 export declare const MAX_MEDIA_FILE_BYTES: number;
-/** Matrix's canonical identifier bounds used at authenticated-client boundaries. */
-export declare const MAX_MATRIX_USER_ID_BYTES = 255;
-export declare const MAX_MATRIX_DEVICE_ID_LENGTH = 128;
-export declare const MAX_MATRIX_IDENTIFIER_LENGTH = 512;
+/** Matrix IDs and state-event strings are limited by UTF-8 bytes, not JS characters. */
+export declare const MAX_MATRIX_IDENTIFIER_BYTES = 255;
 /**
  * Validates a new/current Matrix identity and binds its server name exactly to
  * the caller's independently trusted Matrix topology. The Matrix server name
@@ -11,6 +9,8 @@ export declare const MAX_MATRIX_IDENTIFIER_LENGTH = 512;
  * backend hostname that differs from the user-visible Matrix server name.
  */
 export declare function validateCanonicalMatrixUserId(value: unknown, serverName: unknown): string;
+/** Validates a Matrix user ID without binding it to a particular homeserver. */
+export declare function validateMatrixUserId(value: unknown): string;
 export declare function validateMatrixDeviceId(value: unknown): string;
 export declare function validateMatrixRoomId(value: unknown, name?: string): string;
 export declare function validateMatrixEventId(value: unknown, name?: string): string;

package/dist/core/constants.js

@@ -1,15 +1,13 @@
 /** Maximum plaintext media body accepted by the non-streaming SDK surface. */
 export const MAX_MEDIA_FILE_BYTES = 128 * 1024 * 1024;
-/** Matrix's canonical identifier bounds used at authenticated-client boundaries. */
-export const MAX_MATRIX_USER_ID_BYTES = 255;
-export const MAX_MATRIX_DEVICE_ID_LENGTH = 128;
-export const MAX_MATRIX_IDENTIFIER_LENGTH = 512;
+/** Matrix IDs and state-event strings are limited by UTF-8 bytes, not JS characters. */
+export const MAX_MATRIX_IDENTIFIER_BYTES = 255;
 const MATRIX_SERVER_NAME_PATTERN = "(?:\\[[0-9A-Fa-f:.]+\\]|[A-Za-z0-9.-]+)(?::\\d{1,5})?";
 const MATRIX_SERVER_NAME_REGEXP = new RegExp(`^${MATRIX_SERVER_NAME_PATTERN}$`);
 const MATRIX_USER_ID_PATTERN = new RegExp(`^@([A-Za-z0-9._=+\\-/]+):(${MATRIX_SERVER_NAME_PATTERN})$`);
-const MATRIX_DEVICE_ID_PATTERN = /^[A-Za-z0-9._~-]{1,128}$/;
+const MATRIX_DEVICE_ID_PATTERN = /^[A-Za-z0-9._~-]+$/;
 const MATRIX_ROOM_ID_PATTERN = new RegExp(`^![A-Za-z0-9._~+\\/-]+:${MATRIX_SERVER_NAME_PATTERN}$`);
-const MATRIX_EVENT_ID_PATTERN = /^\$[A-Za-z0-9._~:/+\-]{1,511}$/;
+const MATRIX_EVENT_ID_PATTERN = /^\$[A-Za-z0-9._~:/+\-]+$/;
 /**
  * Validates a new/current Matrix identity and binds its server name exactly to
  * the caller's independently trusted Matrix topology. The Matrix server name
@@ -17,28 +15,36 @@ const MATRIX_EVENT_ID_PATTERN = /^\$[A-Za-z0-9._~:/+\-]{1,511}$/;
  * backend hostname that differs from the user-visible Matrix server name.
  */
 export function validateCanonicalMatrixUserId(value, serverName) {
-    if (typeof value !== "string" ||
-        new TextEncoder().encode(value).byteLength > MAX_MATRIX_USER_ID_BYTES) {
-        throw new Error("invalid Matrix user ID");
-    }
+    const userId = validateMatrixUserId(value);
     if (typeof serverName !== "string" || !MATRIX_SERVER_NAME_REGEXP.test(serverName)) {
         throw new Error("invalid Matrix server name");
     }
-    const match = value.match(MATRIX_USER_ID_PATTERN);
+    const match = userId.match(MATRIX_USER_ID_PATTERN);
     if (!match || match[2].toLowerCase() !== serverName.toLowerCase()) {
         throw new Error("invalid Matrix user ID for this homeserver");
     }
+    return userId;
+}
+/** Validates a Matrix user ID without binding it to a particular homeserver. */
+export function validateMatrixUserId(value) {
+    if (typeof value !== "string" ||
+        new TextEncoder().encode(value).byteLength > MAX_MATRIX_IDENTIFIER_BYTES) {
+        throw new Error("invalid Matrix user ID");
+    }
+    if (!MATRIX_USER_ID_PATTERN.test(value)) {
+        throw new Error("invalid Matrix user ID");
+    }
     return value;
 }
 export function validateMatrixDeviceId(value) {
-    if (typeof value !== "string" || value.length > MAX_MATRIX_DEVICE_ID_LENGTH || !MATRIX_DEVICE_ID_PATTERN.test(value)) {
+    if (typeof value !== "string" || !MATRIX_DEVICE_ID_PATTERN.test(value)) {
         throw new Error("invalid Matrix device ID");
     }
     return value;
 }
 export function validateMatrixRoomId(value, name = "room ID") {
     if (typeof value !== "string" ||
-        value.length > MAX_MATRIX_IDENTIFIER_LENGTH ||
+        new TextEncoder().encode(value).byteLength > MAX_MATRIX_IDENTIFIER_BYTES ||
         !MATRIX_ROOM_ID_PATTERN.test(value)) {
         throw new Error(`invalid Matrix ${name}`);
     }
@@ -46,7 +52,7 @@ export function validateMatrixRoomId(value, name = "room ID") {
 }
 export function validateMatrixEventId(value, name = "event ID") {
     if (typeof value !== "string" ||
-        value.length > MAX_MATRIX_IDENTIFIER_LENGTH ||
+        new TextEncoder().encode(value).byteLength > MAX_MATRIX_IDENTIFIER_BYTES ||
         !MATRIX_EVENT_ID_PATTERN.test(value)) {
         throw new Error(`invalid Matrix ${name}`);
     }

package/dist/core/http.d.ts

@@ -23,8 +23,8 @@ export interface ResponseBodyOptions {
  * outcome; the late operation has no second result channel.
  */
 export declare function raceWithAbort<T>(operation: PromiseLike<T>, signal: AbortSignal, error: () => Error): Promise<T>;
-/** Await cleanup for a response that is being rejected before its body is read. */
-export declare function cancelResponseBody(response: Response, operation: string, primaryError?: unknown): Promise<void>;
+/** Start discarding a rejected response without waiting for provider cleanup. */
+export declare function cancelResponseBody(response: Response): void;
 export declare function readResponseBody(response: Response, signal?: AbortSignal, options?: ResponseBodyOptions): Promise<ResponseBody>;
 /** Read successful product media with the SDK's single plaintext-size ceiling. */
 export declare function readMediaResponseBody(response: Response, maxBytes: number, signal?: AbortSignal, options?: ResponseBodyOptions): Promise<ResponseBody>;