@vonpay/checkout-cli 0.12.0 → 0.14.0

package/dist/utils/sse-parser.js

@@ -1,149 +0,0 @@
-/**
- * Pure incremental parser for the Server-Sent Events wire format
- * (WHATWG HTML §9.2.6 "Parsing an event stream").
- *
- * Decoupled from I/O so the consumer can drive it from any byte source
- * (fetch ReadableStream, Node Readable, in-memory buffer in tests).
- *
- * Spec details that are easy to get wrong:
- *   - Frame separator is one blank line — any of `\n\n`, `\r\n\r\n`, `\r\r`.
- *   - A line starting with `:` is a comment — ignored (used as heartbeat).
- *   - `field: value` — the single space after `:` is stripped if present.
- *   - Multiple `data:` lines within a frame concatenate with `\n` between them.
- *   - `id:` sets the parser's lastEventId for the NEXT and subsequent
- *     dispatched events (sticky across frames until overridden).
- *   - `event:` defaults to `"message"` when absent.
- *   - `retry:` is reported on the event but the consumer decides whether
- *     to honor it (we expose it; consumer caps with its own backoff).
- *   - Unknown fields are ignored — additive evolution is safe.
- *
- * Stateful only in `lastEventId` (per spec). Caller drives by repeatedly
- * calling feed(chunk) on incoming bytes; events come back per call.
- */
-const FRAME_SEPARATOR_RE = /\r\n\r\n|\r\r|\n\n/;
-const LINE_SEPARATOR_RE = /\r\n|\r|\n/;
-/**
- * Hard cap on the in-flight buffer. A malicious or buggy SSE source
- * could otherwise stream bytes without ever emitting a frame separator
- * and grow the buffer until OOM. 1 MB is comfortably larger than any
- * realistic single webhook-attempt frame (low-tens-of-KB even with
- * deep metadata) but small enough that a runaway can never crash a
- * developer's CLI. Tunable via the constructor option.
- */
-const DEFAULT_MAX_BUFFER_BYTES = 1_048_576;
-export class SseBufferOverflowError extends Error {
-    cap;
-    constructor(cap) {
-        super(`SSE frame buffer exceeded ${cap} bytes — closing stream`);
-        this.cap = cap;
-        this.name = "SseBufferOverflowError";
-    }
-}
-export class SseParser {
-    buffer = "";
-    lastEventId;
-    maxBufferBytes;
-    constructor(options = {}) {
-        this.maxBufferBytes = options.maxBufferBytes ?? DEFAULT_MAX_BUFFER_BYTES;
-    }
-    /**
-     * Feed a chunk of decoded text. Returns any events that completed within
-     * this chunk. The remainder (partial frame) is held internally and
-     * concatenated with the next chunk.
-     *
-     * Throws {@link SseBufferOverflowError} when the in-flight buffer
-     * exceeds `maxBufferBytes` — the consumer's reconnect-on-error loop
-     * recovers by discarding the buffer and re-establishing the
-     * connection.
-     */
-    feed(chunk) {
-        if (this.buffer.length + chunk.length > this.maxBufferBytes) {
-            this.buffer = "";
-            throw new SseBufferOverflowError(this.maxBufferBytes);
-        }
-        this.buffer += chunk;
-        const out = [];
-        let match = FRAME_SEPARATOR_RE.exec(this.buffer);
-        while (match) {
-            const frame = this.buffer.slice(0, match.index);
-            this.buffer = this.buffer.slice(match.index + match[0].length);
-            const event = this.parseFrame(frame);
-            if (event)
-                out.push(event);
-            match = FRAME_SEPARATOR_RE.exec(this.buffer);
-        }
-        return out;
-    }
-    /** Drain any in-flight buffer as a final event. Used when the source closes mid-frame and the consumer wants to surface the partial. Returns at most one event. Most callers don't need this — for a well-behaved server-side stream the parser never holds a complete trailing event without a separator. */
-    flush() {
-        if (this.buffer.length === 0)
-            return undefined;
-        const frame = this.buffer;
-        this.buffer = "";
-        return this.parseFrame(frame);
-    }
-    parseFrame(frame) {
-        const lines = frame.split(LINE_SEPARATOR_RE);
-        let type = "message";
-        const dataLines = [];
-        let frameId = undefined;
-        let frameRetry = undefined;
-        let sawAnyField = false;
-        for (const line of lines) {
-            if (line.length === 0)
-                continue;
-            if (line.startsWith(":"))
-                continue; // comment
-            const colonIdx = line.indexOf(":");
-            const field = colonIdx === -1 ? line : line.slice(0, colonIdx);
-            let value = colonIdx === -1
-                ? ""
-                : line.slice(colonIdx + 1).replace(/^ /, ""); // strip single leading space per spec
-            sawAnyField = true;
-            switch (field) {
-                case "event":
-                    if (value.length > 0)
-                        type = value;
-                    break;
-                case "data":
-                    dataLines.push(value);
-                    break;
-                case "id":
-                    // Per spec: id cannot contain NUL. We additionally cap length —
-                    // an attacker who controls the SSE source could otherwise grow
-                    // lastEventId without bound across reconnects.
-                    if (!value.includes("\0") && value.length <= 256) {
-                        frameId = value;
-                        this.lastEventId = value;
-                    }
-                    break;
-                case "retry":
-                    if (/^\d+$/.test(value)) {
-                        frameRetry = parseInt(value, 10);
-                    }
-                    break;
-                // unknown fields are ignored per spec
-            }
-        }
-        // Per spec: a frame with no data fields is not dispatched, even if it
-        // had an `id:` (id is sticky but the frame itself emits nothing).
-        if (dataLines.length === 0) {
-            // If the frame had ONLY comments / heartbeat / id, we still consumed
-            // the frame separator — return undefined so the consumer doesn't see
-            // a noise event. lastEventId is already updated above.
-            void sawAnyField;
-            return undefined;
-        }
-        return {
-            type,
-            data: dataLines.join("\n"),
-            lastEventId: frameId ?? this.lastEventId,
-            retry: frameRetry,
-        };
-    }
-    /** Current sticky id. Consumer uses this for the Last-Event-ID header on reconnect. */
-    getLastEventId() {
-        return this.lastEventId;
-    }
-}
-//# sourceMappingURL=sse-parser.js.map

package/dist/utils/sse-parser.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sse-parser.js","sourceRoot":"","sources":["../../src/utils/sse-parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAaH,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAChD,MAAM,iBAAiB,GAAG,YAAY,CAAC;AAEvC;;;;;;;GAOG;AACH,MAAM,wBAAwB,GAAG,SAAS,CAAC;AAE3C,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACnB;IAA5B,YAA4B,GAAW;QACrC,KAAK,CAAC,6BAA6B,GAAG,yBAAyB,CAAC,CAAC;QADvC,QAAG,GAAH,GAAG,CAAQ;QAErC,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAOD,MAAM,OAAO,SAAS;IACZ,MAAM,GAAG,EAAE,CAAC;IACZ,WAAW,CAAqB;IACvB,cAAc,CAAS;IAExC,YAAY,UAA4B,EAAE;QACxC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;IAC3E,CAAC;IAED;;;;;;;;;OASG;IACH,IAAI,CAAC,KAAa;QAChB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5D,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;YACjB,MAAM,IAAI,sBAAsB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;QACrB,MAAM,GAAG,GAAe,EAAE,CAAC;QAE3B,IAAI,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAChD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,KAAK;gBAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,8SAA8S;IAC9S,KAAK;QACH,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAEO,UAAU,CAAC,KAAa;QAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC7C,IAAI,IAAI,GAAG,SAAS,CAAC;QACrB,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,IAAI,OAAO,GAAuB,SAAS,CAAC;QAC5C,IAAI,UAAU,GAAuB,SAAS,CAAC;QAC/C,IAAI,WAAW,GAAG,KAAK,CAAC;QAExB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAChC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS,CAAC,UAAU;YAE9C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACnC,MAAM,KAAK,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC/D,IAAI,KAAK,GACP,QAAQ,KAAK,CAAC,CAAC;gBACb,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,sCAAsC;YAExF,WAAW,GAAG,IAAI,CAAC;YACnB,QAAQ,KAAK,EAAE,CAAC;gBACd,KAAK,OAAO;oBACV,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;wBAAE,IAAI,GAAG,KAAK,CAAC;oBACnC,MAAM;gBACR,KAAK,MAAM;oBACT,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACtB,MAAM;gBACR,KAAK,IAAI;oBACP,gEAAgE;oBAChE,+DAA+D;oBAC/D,+CAA+C;oBAC/C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;wBACjD,OAAO,GAAG,KAAK,CAAC;wBAChB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;oBAC3B,CAAC;oBACD,MAAM;gBACR,KAAK,OAAO;oBACV,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;wBACxB,UAAU,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBACnC,CAAC;oBACD,MAAM;gBACR,sCAAsC;YACxC,CAAC;QACH,CAAC;QAED,sEAAsE;QACtE,kEAAkE;QAClE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,qEAAqE;YACrE,qEAAqE;YACrE,uDAAuD;YACvD,KAAK,WAAW,CAAC;YACjB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1B,WAAW,EAAE,OAAO,IAAI,IAAI,CAAC,WAAW;YACxC,KAAK,EAAE,UAAU;SAClB,CAAC;IACJ,CAAC;IAED,uFAAuF;IACvF,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;CACF"}