@volter/teams 0.1.0

package/server/request-json.mjs

@@ -0,0 +1,74 @@
+import { ContractError } from './wire.mjs';
+
+function rejectDuplicateKeys(text) {
+  let at = 0;
+  const whitespace = () => { while (/\s/.test(text[at] ?? '')) at++; };
+  const string = () => {
+    const start = at++;
+    while (at < text.length) {
+      if (text[at] === '\\') { at += 2; continue; }
+      if (text[at++] === '"') return JSON.parse(text.slice(start, at));
+    }
+    throw new Error('unterminated string');
+  };
+  const value = () => {
+    whitespace();
+    if (text[at] === '{') return object();
+    if (text[at] === '[') {
+      at++; whitespace();
+      if (text[at] === ']') { at++; return; }
+      for (;;) {
+        value(); whitespace();
+        if (text[at] === ']') { at++; return; }
+        if (text[at++] !== ',') throw new Error('invalid array');
+      }
+    }
+    if (text[at] === '"') { string(); return; }
+    const match = /^(?:-?(?:0|[1-9]\d*)(?:\.\d+)?(?:[eE][+-]?\d+)?|true|false|null)/.exec(text.slice(at));
+    if (!match) throw new Error('invalid value');
+    at += match[0].length;
+  };
+  const object = () => {
+    at++; const keys = new Set(); whitespace();
+    if (text[at] === '}') { at++; return; }
+    for (;;) {
+      whitespace();
+      if (text[at] !== '"') throw new Error('invalid object key');
+      const key = string();
+      if (keys.has(key)) throw new Error('duplicate object key');
+      keys.add(key); whitespace();
+      if (text[at++] !== ':') throw new Error('invalid object');
+      value(); whitespace();
+      if (text[at] === '}') { at++; return; }
+      if (text[at++] !== ',') throw new Error('invalid object');
+    }
+  };
+  value(); whitespace();
+  if (at !== text.length) throw new Error('trailing JSON');
+}
+
+export async function parseJson(req, fail, maxBytes = 8 * 1024 * 1024) {
+  if (Object.hasOwn(req, '_parsedBody')) return req._parsedBody;
+  let size = 0; const chunks = [];
+  for await (const chunk of req) {
+    size += chunk.length;
+    if (size > maxBytes) fail(413, 'request_too_large', 'request body exceeds 8 MiB');
+    chunks.push(chunk);
+  }
+  if (!size) return (req._parsedBody = null);
+  try {
+    const text = new TextDecoder('utf-8', { fatal: true }).decode(Buffer.concat(chunks));
+    rejectDuplicateKeys(text);
+    return (req._parsedBody = JSON.parse(text, (_key, value) => {
+      if (typeof value === 'number' && !Number.isFinite(value)) throw new Error('non-finite number');
+      return value;
+    }));
+  } catch {
+    fail(400, 'invalid_request', 'request body must be JSON with unique object keys');
+  }
+}
+
+export function exact(value, keys, name = 'body') {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) throw new ContractError(`${name} must be an object`);
+  for (const key of Object.keys(value)) if (!keys.includes(key)) throw new ContractError(`${name}.${key} is unknown`);
+}

package/server/wire.mjs

@@ -0,0 +1,10 @@
+// The Teams wire's shared pieces: the contract error and its failure body, canonical
+// JSON (what digests are taken over), and the opaque cursor and hash helpers.
+import { createHash, randomBytes } from 'node:crypto';
+
+export class ContractError extends Error { constructor(message, details = null) { super(message); this.name = 'ContractError'; this.code = 'invalid_request'; this.details = details; } }
+export function canonicalJson(value) { if (Array.isArray(value)) return `[${value.map(canonicalJson).join(',')}]`; if (value && typeof value === 'object') return `{${Object.keys(value).sort().map(k => `${JSON.stringify(k)}:${canonicalJson(value[k])}`).join(',')}}`; return JSON.stringify(value); }
+export function validationFailure(error, requestId) { return { version:1, error:{ code:error?.code ?? 'invalid_request', message:error?.message ?? 'invalid request', request_id:requestId, retryable:false, details:error?.details ?? null } }; }
+export const cursorToken = () => randomBytes(32).toString('base64url');
+export const cursorHash = token => createHash('sha256').update(token).digest('hex');
+export const sha256 = value => createHash('sha256').update(value).digest('hex');