@thehonestmachine/oath-core 0.1.0

package/src/validate.ts

@@ -0,0 +1,81 @@
+import { ProtocolError } from './errors.js';
+
+/** Spec §1.2: lowercase alphanumeric + hyphens, 1–64 chars, no edge hyphens. */
+export const HANDLE_RE = /^[a-z0-9]([a-z0-9-]{0,62}[a-z0-9])?$/;
+
+export function isHandle(value: unknown): value is string {
+  return typeof value === 'string' && HANDLE_RE.test(value);
+}
+
+const TIMESTAMP_RE =
+  /^(\d{4})-(0[1-9]|1[0-2])-(0[1-9]|[12]\d|3[01])T([01]\d|2[0-3]):[0-5]\d:[0-5]\d(\.\d{1,9})?Z$/;
+
+const DAYS_IN_MONTH = [31, 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31] as const;
+
+function isLeapYear(year: number): boolean {
+  return (year % 4 === 0 && year % 100 !== 0) || year % 400 === 0;
+}
+
+/**
+ * Spec §1.2: RFC 3339 UTC with Z suffix. Calendar validity is checked
+ * explicitly — Date.parse silently rolls over impossible dates like Feb 30.
+ */
+export function isTimestamp(value: unknown): value is string {
+  if (typeof value !== 'string') return false;
+  const m = TIMESTAMP_RE.exec(value);
+  if (m === null) return false;
+  const year = Number(m[1]);
+  const month = Number(m[2]);
+  const day = Number(m[3]);
+  const maxDay = month === 2 && isLeapYear(year) ? 29 : DAYS_IN_MONTH[month - 1]!;
+  return day <= maxDay;
+}
+
+/** Lowercase hex of exactly `byteLength` bytes. */
+export function isHex(value: unknown, byteLength: number): value is string {
+  return (
+    typeof value === 'string' &&
+    value.length === byteLength * 2 &&
+    /^[0-9a-f]*$/.test(value)
+  );
+}
+
+export function isPositiveInteger(value: unknown): value is number {
+  return typeof value === 'number' && Number.isSafeInteger(value) && value >= 1;
+}
+
+export function isNonNegativeInteger(value: unknown): value is number {
+  return typeof value === 'number' && Number.isSafeInteger(value) && value >= 0;
+}
+
+export function isNonEmptyString(value: unknown): value is string {
+  return typeof value === 'string' && value.length > 0;
+}
+
+export function assertPlainObject(value: unknown, label: string): Record<string, unknown> {
+  if (value === null || typeof value !== 'object' || Array.isArray(value)) {
+    throw new ProtocolError(`${label} must be a JSON object`);
+  }
+  const proto = Object.getPrototypeOf(value);
+  if (proto !== Object.prototype && proto !== null) {
+    throw new ProtocolError(`${label} must be a plain JSON object`);
+  }
+  return value as Record<string, unknown>;
+}
+
+/** Spec §1.2: unknown fields MUST be rejected. */
+export function assertKeys(
+  obj: Record<string, unknown>,
+  label: string,
+  required: readonly string[],
+  optional: readonly string[],
+): void {
+  for (const key of required) {
+    if (!(key in obj)) throw new ProtocolError(`${label} is missing required field "${key}"`);
+  }
+  for (const key of Object.keys(obj)) {
+    if (!required.includes(key) && !optional.includes(key)) {
+      throw new ProtocolError(`${label} has unknown field "${key}"`);
+    }
+  }
+}