@couch-kit/core 0.10.1 → 0.10.3

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @couch-kit/core
 
+## 0.10.3
+
+### Patch Changes
+
+- [#227](https://github.com/faluciano/react-native-couch-kit/pull/227) [`8ef31ad`](https://github.com/faluciano/react-native-couch-kit/commit/8ef31adc53dc7342f1d81f8ba2e4acb6c8c1433e) Thanks [@faluciano](https://github.com/faluciano)! - A player who rejoins under a new name or avatar is renamed. `__PLAYER_RECONNECTED__` now carries the rejoining JOIN's `name` and `avatar`, and the reducer applies them. Before, a reconnect kept the old name, so "change name" in a controller did nothing. Recordings without them replay as before.
+
+## 0.10.2
+
+### Patch Changes
+
+- [#225](https://github.com/faluciano/react-native-couch-kit/pull/225) [`072bc40`](https://github.com/faluciano/react-native-couch-kit/commit/072bc40f923dd9169f2bcb344deb733223402323) Thanks [@faluciano](https://github.com/faluciano)! - **Security:** `actionValidator` drops an action whose validator throws. Before, the middleware error boundary passed it on to the reducer, so a malformed payload (exactly what makes a validator like `(a) => a.payload.points > 0` throw) skipped validation. `isValidSecret` now also rejects secrets longer than 128 hex characters (`MAX_SECRET_HEX_LENGTH`), so a client cannot make the host hash and store an arbitrarily long string.
+
 ## 0.10.1
 
 ### Patch Changes

package/README.md

@@ -84,7 +84,7 @@ actionLogger({ collapsed: false }); // expanded groups
 
 #### `actionValidator(schema)`
 
-Validates actions against a schema before they reach the reducer. If a validator returns `false`, the action is dropped and a warning is logged.
+Validates actions against a schema before they reach the reducer. If a validator returns `false` or throws, the action is dropped and a warning is logged.
 
 ```typescript
 import { actionValidator, type ActionSchema } from "@couch-kit/core";
@@ -188,7 +188,7 @@ try {
 
 #### `isValidSecret(secret: string): boolean`
 
-Validates that a string is a valid UUID format (32+ hex characters, with or without dashes).
+Validates that a string is a valid UUID format (32 to 128 hex characters, with or without dashes).
 
 #### `derivePlayerId(secret: string): Promise<string>`
 

package/dist/index.cjs

@@ -52,6 +52,7 @@ __export(exports_src, {
   KEEPALIVE_TIMEOUT: () => KEEPALIVE_TIMEOUT,
   MAX_FRAME_SIZE: () => MAX_FRAME_SIZE,
   MAX_PENDING_PINGS: () => MAX_PENDING_PINGS,
+  MAX_SECRET_HEX_LENGTH: () => MAX_SECRET_HEX_LENGTH,
   MAX_SYNC_INTERVAL: () => MAX_SYNC_INTERVAL,
   MessageTypes: () => MessageTypes,
   SYNC_BACKOFF_FACTOR: () => SYNC_BACKOFF_FACTOR,
@@ -142,7 +143,15 @@ function actionValidator(schema) {
     if (getInternalTypes().has(action.type))
       return next(action);
     const validate = schema[action.type];
-    if (validate && !validate(action)) {
+    if (!validate)
+      return next(action);
+    let valid;
+    try {
+      valid = validate(action);
+    } catch {
+      valid = false;
+    }
+    if (!valid) {
       console.warn(`[couch-kit] Action "${action.type}" failed validation, skipping`);
       return _api.getState();
     }
@@ -186,7 +195,7 @@ function createGameReducer(reducer, options) {
         };
       }
       case InternalActionTypes.PLAYER_RECONNECTED: {
-        const { playerId } = action.payload;
+        const { playerId, name, avatar } = action.payload;
         const player = state.players[playerId];
         if (!player)
           return state;
@@ -194,7 +203,12 @@ function createGameReducer(reducer, options) {
           ...state,
           players: {
             ...state.players,
-            [playerId]: { ...player, connected: true }
+            [playerId]: {
+              ...player,
+              connected: true,
+              ...name !== undefined ? { name } : {},
+              ...avatar !== undefined ? { avatar } : {}
+            }
           }
         };
       }
@@ -399,9 +413,12 @@ function generateId() {
   const b = Math.random().toString(36).substring(2, 10);
   return a + b;
 }
+var MAX_SECRET_HEX_LENGTH = 128;
 function isValidSecret(secret) {
+  if (secret.length > MAX_SECRET_HEX_LENGTH * 2)
+    return false;
   const hex = secret.replace(/-/g, "");
-  return hex.length >= 32 && /^[0-9a-f]+$/i.test(hex);
+  return hex.length >= 32 && hex.length <= MAX_SECRET_HEX_LENGTH && /^[0-9a-f]+$/i.test(hex);
 }
 async function derivePlayerId(secret) {
   if (typeof globalThis.crypto !== "undefined" && typeof globalThis.crypto.subtle?.digest === "function") {

package/dist/index.js

@@ -72,7 +72,15 @@ function actionValidator(schema) {
     if (getInternalTypes().has(action.type))
       return next(action);
     const validate = schema[action.type];
-    if (validate && !validate(action)) {
+    if (!validate)
+      return next(action);
+    let valid;
+    try {
+      valid = validate(action);
+    } catch {
+      valid = false;
+    }
+    if (!valid) {
       console.warn(`[couch-kit] Action "${action.type}" failed validation, skipping`);
       return _api.getState();
     }
@@ -116,7 +124,7 @@ function createGameReducer(reducer, options) {
         };
       }
       case InternalActionTypes.PLAYER_RECONNECTED: {
-        const { playerId } = action.payload;
+        const { playerId, name, avatar } = action.payload;
         const player = state.players[playerId];
         if (!player)
           return state;
@@ -124,7 +132,12 @@ function createGameReducer(reducer, options) {
           ...state,
           players: {
             ...state.players,
-            [playerId]: { ...player, connected: true }
+            [playerId]: {
+              ...player,
+              connected: true,
+              ...name !== undefined ? { name } : {},
+              ...avatar !== undefined ? { avatar } : {}
+            }
           }
         };
       }
@@ -329,9 +342,12 @@ function generateId() {
   const b = Math.random().toString(36).substring(2, 10);
   return a + b;
 }
+var MAX_SECRET_HEX_LENGTH = 128;
 function isValidSecret(secret) {
+  if (secret.length > MAX_SECRET_HEX_LENGTH * 2)
+    return false;
   const hex = secret.replace(/-/g, "");
-  return hex.length >= 32 && /^[0-9a-f]+$/i.test(hex);
+  return hex.length >= 32 && hex.length <= MAX_SECRET_HEX_LENGTH && /^[0-9a-f]+$/i.test(hex);
 }
 async function derivePlayerId(secret) {
   if (typeof globalThis.crypto !== "undefined" && typeof globalThis.crypto.subtle?.digest === "function") {
@@ -386,6 +402,7 @@ export {
   KEEPALIVE_TIMEOUT,
   MAX_FRAME_SIZE,
   MAX_PENDING_PINGS,
+  MAX_SECRET_HEX_LENGTH,
   MAX_SYNC_INTERVAL,
   MessageTypes,
   SYNC_BACKOFF_FACTOR,

package/lib/constants.d.ts

@@ -42,8 +42,12 @@ export declare const KEEPALIVE_TIMEOUT = 10000;
  * falling back to `crypto.getRandomValues()` for older environments.
  */
 export declare function generateId(): string;
+/** Longest secret, in hex characters, the host accepts. A UUID is 32. */
+export declare const MAX_SECRET_HEX_LENGTH = 128;
 /**
- * Validates that a string looks like a UUID (with or without dashes, 32+ hex chars).
+ * Validates that a string looks like a UUID (with or without dashes, 32 to
+ * {@link MAX_SECRET_HEX_LENGTH} hex chars). The upper bound keeps a client from
+ * making the host hash and store an arbitrarily long string.
  */
 export declare function isValidSecret(secret: string): boolean;
 /**

package/lib/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,wDAAwD;AAIxD,oDAAoD;AACpD,eAAO,MAAM,iBAAiB,OAAO,CAAC;AAEtC,4EAA4E;AAC5E,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC,0DAA0D;AAC1D,eAAO,MAAM,eAAe,QAAQ,CAAC;AAErC,8FAA8F;AAC9F,eAAO,MAAM,cAAc,QAAc,CAAC;AAE1C,4DAA4D;AAC5D,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC,oEAAoE;AACpE,eAAO,MAAM,kBAAkB,OAAO,CAAC;AAEvC,+DAA+D;AAC/D,eAAO,MAAM,iBAAiB,QAAQ,CAAC;AAEvC,oFAAoF;AACpF,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAE1C;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,QAAQ,CAAC;AAEvC,qGAAqG;AACrG,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC,0DAA0D;AAC1D,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC,+EAA+E;AAC/E,eAAO,MAAM,0BAA0B,QAAgB,CAAC;AAExD,8FAA8F;AAC9F,eAAO,MAAM,kBAAkB,QAAQ,CAAC;AAExC,8FAA8F;AAC9F,eAAO,MAAM,iBAAiB,QAAQ,CAAC;AAEvC;;;;;GAKG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAwBnC;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAGrD;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAiBpE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGrD"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,wDAAwD;AAIxD,oDAAoD;AACpD,eAAO,MAAM,iBAAiB,OAAO,CAAC;AAEtC,4EAA4E;AAC5E,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC,0DAA0D;AAC1D,eAAO,MAAM,eAAe,QAAQ,CAAC;AAErC,8FAA8F;AAC9F,eAAO,MAAM,cAAc,QAAc,CAAC;AAE1C,4DAA4D;AAC5D,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC,oEAAoE;AACpE,eAAO,MAAM,kBAAkB,OAAO,CAAC;AAEvC,+DAA+D;AAC/D,eAAO,MAAM,iBAAiB,QAAQ,CAAC;AAEvC,oFAAoF;AACpF,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAE1C;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,QAAQ,CAAC;AAEvC,qGAAqG;AACrG,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC,0DAA0D;AAC1D,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC,+EAA+E;AAC/E,eAAO,MAAM,0BAA0B,QAAgB,CAAC;AAExD,8FAA8F;AAC9F,eAAO,MAAM,kBAAkB,QAAQ,CAAC;AAExC,8FAA8F;AAC9F,eAAO,MAAM,iBAAiB,QAAQ,CAAC;AAEvC;;;;;GAKG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAwBnC;AAED,yEAAyE;AACzE,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAEzC;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAQrD;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAiBpE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGrD"}

package/lib/middleware.d.ts

@@ -53,7 +53,8 @@ export type ActionSchema<A extends IAction> = {
 };
 /**
  * Middleware that validates actions against a schema before they reach the
- * reducer. Invalid actions are silently dropped (with a console warning).
+ * reducer. Invalid actions are dropped with a console warning. A validator
+ * that throws counts as a failed validation.
  *
  * Internal actions are never validated — they always pass through.
  *

package/lib/middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,OAAO,EACP,cAAc,EACd,WAAW,EACZ,MAAM,YAAY,CAAC;AAOpB,oDAAoD;AACpD,MAAM,WAAW,aAAa,CAAC,CAAC,SAAS,UAAU;IACjD,QAAQ,EAAE,MAAM,CAAC,CAAC;CACnB;AAED,yEAAyE;AACzE,MAAM,MAAM,kBAAkB,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC,SAAS,OAAO,IAAI,CACxE,MAAM,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,KAC1B,CAAC,CAAC;AAEP;;;;;;GAMG;AACH,MAAM,MAAM,UAAU,CACpB,CAAC,SAAS,UAAU,GAAG,UAAU,EACjC,CAAC,SAAS,OAAO,GAAG,OAAO,IACzB,CACF,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,KAClB,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAM9E;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC,SAAS,OAAO,EACrE,GAAG,WAAW,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GACjC,CACD,OAAO,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,KAC3C,WAAW,CAAC,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,CAwDzC;AAMD,yDAAyD;AACzD,MAAM,WAAW,mBAAmB;IAClC,mFAAmF;IACnF,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC,SAAS,OAAO,EAClE,OAAO,CAAC,EAAE,mBAAmB,GAC5B,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAmBlB;AAeD;;;GAGG;AACH,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,OAAO,IAAI;KAC3C,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG;QAAE,IAAI,EAAE,CAAC,CAAA;KAAE,KAAK,OAAO;CACxD,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC,SAAS,OAAO,EACrE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,GACtB,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAgBlB"}
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,OAAO,EACP,cAAc,EACd,WAAW,EACZ,MAAM,YAAY,CAAC;AAOpB,oDAAoD;AACpD,MAAM,WAAW,aAAa,CAAC,CAAC,SAAS,UAAU;IACjD,QAAQ,EAAE,MAAM,CAAC,CAAC;CACnB;AAED,yEAAyE;AACzE,MAAM,MAAM,kBAAkB,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC,SAAS,OAAO,IAAI,CACxE,MAAM,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,KAC1B,CAAC,CAAC;AAEP;;;;;;GAMG;AACH,MAAM,MAAM,UAAU,CACpB,CAAC,SAAS,UAAU,GAAG,UAAU,EACjC,CAAC,SAAS,OAAO,GAAG,OAAO,IACzB,CACF,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,KAClB,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAM9E;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC,SAAS,OAAO,EACrE,GAAG,WAAW,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GACjC,CACD,OAAO,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,KAC3C,WAAW,CAAC,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,CAwDzC;AAMD,yDAAyD;AACzD,MAAM,WAAW,mBAAmB;IAClC,mFAAmF;IACnF,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC,SAAS,OAAO,EAClE,OAAO,CAAC,EAAE,mBAAmB,GAC5B,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAmBlB;AAeD;;;GAGG;AACH,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,OAAO,IAAI;KAC3C,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG;QAAE,IAAI,EAAE,CAAC,CAAA;KAAE,KAAK,OAAO;CACxD,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC,SAAS,OAAO,EACrE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,GACtB,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CA6BlB"}

package/lib/reducer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reducer.d.ts","sourceRoot":"","sources":["../src/reducer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,KAAK,EACV,UAAU,EACV,OAAO,EACP,cAAc,EACd,WAAW,EACZ,MAAM,YAAY,CAAC;AAEpB,uCAAuC;AACvC,MAAM,WAAW,wBAAwB,CACvC,CAAC,SAAS,UAAU,EACpB,CAAC,SAAS,OAAO;IAEjB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;CACjC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC,SAAS,OAAO,EACvE,OAAO,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,EAC1B,OAAO,CAAC,EAAE,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,GACvC,WAAW,CAAC,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,CAgFvC"}
+{"version":3,"file":"reducer.d.ts","sourceRoot":"","sources":["../src/reducer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,KAAK,EACV,UAAU,EACV,OAAO,EACP,cAAc,EACd,WAAW,EACZ,MAAM,YAAY,CAAC;AAEpB,uCAAuC;AACvC,MAAM,WAAW,wBAAwB,CACvC,CAAC,SAAS,UAAU,EACpB,CAAC,SAAS,OAAO;IAEjB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;CACjC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC,SAAS,OAAO,EACvE,OAAO,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,EAC1B,OAAO,CAAC,EAAE,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,GACvC,WAAW,CAAC,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,CAwFvC"}

package/lib/types.d.ts

@@ -40,7 +40,7 @@ export interface IAction {
  * - `__HYDRATE__` -- Replaces state wholesale (server-to-client sync).
  * - `__PLAYER_JOINED__` -- Adds a player to `state.players`.
  * - `__PLAYER_LEFT__` -- Marks a player as disconnected (`connected: false`).
- * - `__PLAYER_RECONNECTED__` -- Restores a returning player (`connected: true`), preserving existing data.
+ * - `__PLAYER_RECONNECTED__` -- Restores a returning player (`connected: true`), preserving existing data. A `name` or `avatar` in the payload replaces the stored one, so a player who rejoins under a new name is renamed.
  * - `__PLAYER_REMOVED__` -- Permanently removes a timed-out disconnected player from `state.players`.
  */
 export type InternalAction<S extends IGameState = IGameState> = {
@@ -62,6 +62,8 @@ export type InternalAction<S extends IGameState = IGameState> = {
     type: "__PLAYER_RECONNECTED__";
     payload: {
         playerId: string;
+        name?: string;
+        avatar?: string;
     };
 } | {
     type: "__PLAYER_REMOVED__";

package/lib/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;;;;GAKG;AACH,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,UAAU,GAAG,UAAU,IACxD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,CAAC,CAAA;CAAE,GACnC;IACE,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACxD,GACD;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,wBAAwB,CAAC;IAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACjE;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAElE,+CAA+C;AAC/C,eAAO,MAAM,mBAAmB;aAC9B,OAAO,EAAE,aAAa;aACtB,aAAa,EAAE,mBAAmB;aAClC,WAAW,EAAE,iBAAiB;aAC9B,kBAAkB,EAAE,wBAAwB;aAC5C,cAAc,EAAE,oBAAoB;CAC5B,CAAC;AAEX;;;;;GAKG;AACH,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC,SAAS,OAAO,IAAI,CACjE,KAAK,EAAE,CAAC,EACR,MAAM,EAAE,CAAC,KACN,CAAC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;;;;GAKG;AACH,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,UAAU,GAAG,UAAU,IACxD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,CAAC,CAAA;CAAE,GACnC;IACE,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACxD,GACD;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC1D;IACE,IAAI,EAAE,wBAAwB,CAAC;IAC/B,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/D,GACD;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAElE,+CAA+C;AAC/C,eAAO,MAAM,mBAAmB;aAC9B,OAAO,EAAE,aAAa;aACtB,aAAa,EAAE,mBAAmB;aAClC,WAAW,EAAE,iBAAiB;aAC9B,kBAAkB,EAAE,wBAAwB;aAC5C,cAAc,EAAE,oBAAoB;CAC5B,CAAC;AAEX;;;;;GAKG;AACH,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC,SAAS,OAAO,IAAI,CACjE,KAAK,EAAE,CAAC,EACR,MAAM,EAAE,CAAC,KACN,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@couch-kit/core",
-  "version": "0.10.1",
+  "version": "0.10.3",
   "publishConfig": {
     "access": "public",
     "provenance": true

package/src/constants.ts

@@ -84,12 +84,22 @@ export function generateId(): string {
   return a + b;
 }
 
+/** Longest secret, in hex characters, the host accepts. A UUID is 32. */
+export const MAX_SECRET_HEX_LENGTH = 128;
+
 /**
- * Validates that a string looks like a UUID (with or without dashes, 32+ hex chars).
+ * Validates that a string looks like a UUID (with or without dashes, 32 to
+ * {@link MAX_SECRET_HEX_LENGTH} hex chars). The upper bound keeps a client from
+ * making the host hash and store an arbitrarily long string.
  */
 export function isValidSecret(secret: string): boolean {
+  if (secret.length > MAX_SECRET_HEX_LENGTH * 2) return false;
   const hex = secret.replace(/-/g, "");
-  return hex.length >= 32 && /^[0-9a-f]+$/i.test(hex);
+  return (
+    hex.length >= 32 &&
+    hex.length <= MAX_SECRET_HEX_LENGTH &&
+    /^[0-9a-f]+$/i.test(hex)
+  );
 }
 
 /**

package/src/middleware.ts

@@ -178,7 +178,8 @@ export type ActionSchema<A extends IAction> = {
 
 /**
  * Middleware that validates actions against a schema before they reach the
- * reducer. Invalid actions are silently dropped (with a console warning).
+ * reducer. Invalid actions are dropped with a console warning. A validator
+ * that throws counts as a failed validation.
  *
  * Internal actions are never validated — they always pass through.
  *
@@ -196,8 +197,21 @@ export function actionValidator<S extends IGameState, A extends IAction>(
     if (getInternalTypes().has(action.type)) return next(action);
 
     const validate = schema[action.type as A["type"]];
+    if (!validate) return next(action);
+
+    // A validator that throws has not said yes. Malformed client payloads are
+    // exactly what makes a validator like `(a) => a.payload.points > 0` throw,
+    // so a throw counts as a failed validation. Letting the middleware error
+    // boundary fall through to `next` would hand the reducer the very action
+    // the validator exists to stop.
+    let valid: boolean;
+    try {
+      valid = validate(action as A & { type: A["type"] });
+    } catch {
+      valid = false;
+    }
 
-    if (validate && !validate(action as A & { type: A["type"] })) {
+    if (!valid) {
       console.warn(
         `[couch-kit] Action "${action.type}" failed validation, skipping`,
       );

package/src/reducer.ts

@@ -87,16 +87,24 @@ export function createGameReducer<S extends IGameState, A extends IAction>(
       }
 
       case InternalActionTypes.PLAYER_RECONNECTED: {
-        const { playerId } = (
+        const { playerId, name, avatar } = (
           action as InternalAction<S> & { type: "__PLAYER_RECONNECTED__" }
         ).payload;
         const player = state.players[playerId];
         if (!player) return state;
+        // Name and avatar come from the rejoining JOIN, so a player who changed
+        // their name and rejoined is renamed. Absent (older recordings), the
+        // stored values stand.
         return {
           ...state,
           players: {
             ...state.players,
-            [playerId]: { ...player, connected: true },
+            [playerId]: {
+              ...player,
+              connected: true,
+              ...(name !== undefined ? { name } : {}),
+              ...(avatar !== undefined ? { avatar } : {}),
+            },
           },
         };
       }

package/src/types.ts

@@ -43,7 +43,7 @@ export interface IAction {
  * - `__HYDRATE__` -- Replaces state wholesale (server-to-client sync).
  * - `__PLAYER_JOINED__` -- Adds a player to `state.players`.
  * - `__PLAYER_LEFT__` -- Marks a player as disconnected (`connected: false`).
- * - `__PLAYER_RECONNECTED__` -- Restores a returning player (`connected: true`), preserving existing data.
+ * - `__PLAYER_RECONNECTED__` -- Restores a returning player (`connected: true`), preserving existing data. A `name` or `avatar` in the payload replaces the stored one, so a player who rejoins under a new name is renamed.
  * - `__PLAYER_REMOVED__` -- Permanently removes a timed-out disconnected player from `state.players`.
  */
 export type InternalAction<S extends IGameState = IGameState> =
@@ -53,7 +53,10 @@ export type InternalAction<S extends IGameState = IGameState> =
       payload: { id: string; name: string; avatar?: string };
     }
   | { type: "__PLAYER_LEFT__"; payload: { playerId: string } }
-  | { type: "__PLAYER_RECONNECTED__"; payload: { playerId: string } }
+  | {
+      type: "__PLAYER_RECONNECTED__";
+      payload: { playerId: string; name?: string; avatar?: string };
+    }
   | { type: "__PLAYER_REMOVED__"; payload: { playerId: string } };
 
 /** Well-known internal action type strings. */