@volter/teams 0.1.74 → 0.1.75

package/browser-channel.d.ts

@@ -54,7 +54,8 @@ export declare class TurnDeliveryUnconfirmedError extends Error {
 /**
  * One line typed into the channel's session as its user's own turn; rejects when the machine refuses the stream.
  * `turnKey`: one per typed line, reused on retry, so the machine types the line once.
- * Receipt waits time out after thirty seconds. Cancellation stops waiting; it
+ * Receipt waits time out after thirty seconds and retain at most 256 KB of UTF-8 text.
+ * Cancellation stops waiting; it
  * does not undo delivery. After acceptance, a lost, invalid or cancelled receipt
  * rejects with TurnDeliveryUnconfirmedError. Reuse the same key when retrying it.
  */

package/browser-channel.mjs

@@ -185,7 +185,7 @@ export async function sendBrowserTurn(channel, text, { turnKey, signal } = {}) {
   signal?.throwIfAborted();
   const stream = await channel.open('mail', { request: { op: 'turn', text, ...(turnKey ? { turn_key: String(turnKey) } : {}) } });
   return new Promise((resolve, reject) => {
-    let answer = '', settled = false;
+    let answer = '', bytes = 0, settled = false;
     const cleanup = () => { clearTimeout(timer); stream.off('data', data); stream.off('close', closed); signal?.removeEventListener('abort', cancelled); };
     const fail = error => {
       if (settled) return;
@@ -196,7 +196,13 @@ export async function sendBrowserTurn(channel, text, { turnKey, signal } = {}) {
     };
     const cancelled = () => fail(new TurnDeliveryUnconfirmedError('Turn delivery wait cancelled'));
     const timer = setTimeout(() => fail(new TurnDeliveryUnconfirmedError('Turn delivery acknowledgement timed out')), 30_000);
-    const data = chunk => { answer += chunk; if (answer.length > 256_000) fail(new TurnDeliveryUnconfirmedError('Turn delivery receipt too large')); };
+    const data = chunk => {
+      if (typeof chunk !== 'string') { fail(new TurnDeliveryUnconfirmedError('Invalid turn delivery receipt frame')); return; }
+      if (chunk.length > 256_000 - bytes) { fail(new TurnDeliveryUnconfirmedError('Turn delivery receipt too large')); return; }
+      bytes += encoder.encode(chunk).byteLength;
+      if (bytes > 256_000) { fail(new TurnDeliveryUnconfirmedError('Turn delivery receipt too large')); return; }
+      answer += chunk;
+    };
     const closed = reason => {
       if (settled) return;
       settled = true; cleanup();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/teams",
-  "version": "0.1.74",
+  "version": "0.1.75",
   "type": "module",
   "description": "Volter Teams, the neutral team plane: machine identity and daemon core, the local door and server link, admission from machine grants, product doors, and the Teams server's neutral routes (company RFC 0008).",
   "license": "MIT",