@crvouga/mockingbird-service-google-maps 1.0.0 → 1.1.1

package/CHANGELOG.md

@@ -1,15 +1,25 @@
 # Changelog — @crvouga/mockingbird-service-google-maps
 
+## 1.1.1 (2026-09-26)
+
+### Fixes and improvements
+
+- take the rejected-request byte count from content-length, never by reading the body ([a0e5fb2](https://github.com/crvouga/mockingbird/commit/a0e5fb2fc80ab725c3552b612f3f091fd6c857fb))
+- reject addressLines over the vendored PostalAddress limits instead of echoing them ([843917c](https://github.com/crvouga/mockingbird/commit/843917c9fe47d83ecd5ab45166ee67c22de9d35c))
+- reject a present body by media type, and log what a rejected request sent ([12e351a](https://github.com/crvouga/mockingbird/commit/12e351aba53cfb7b41e31a7809419455fc2902eb))
+
+## 1.1.0 (2026-09-25)
+
+### Features
+
+- add the Address Validation API with USPS CASS/DPV verdicts ([7cec81e](https://github.com/crvouga/mockingbird/commit/7cec81e1d8271e4d55d6310f36324e47e135d510))
+
 ## 1.0.0 (2026-09-24)
 
 ### ⚠️ Breaking changes
 
 - vendor branding for every service; purge internal mocks and consumer names ([f689534](https://github.com/crvouga/mockingbird/commit/f6895343543550dafcb7d76b426cae7635e03226))
 
-### Dependencies
-
-- `@crvouga/mockingbird-service-sqlite`
-
 ## 0.2.0 (2026-09-23)
 
 ### Features

package/README.md

@@ -2,14 +2,18 @@
 
 Mock of the **Google Maps Platform** surface our member app uses for addresses: Places
 Autocomplete, Place Details and Find Place From Text (the JSON web services), the Geocoding API,
-and a **Maps JavaScript API shim** (`/maps/api/js?libraries=places`) exposing
-`google.maps.places.*` and `google.maps.Geocoder` over the same data. Answers come from a corpus
+a **Maps JavaScript API shim** (`/maps/api/js?libraries=places`) exposing
+`google.maps.places.*` and `google.maps.Geocoder` over the same data, and the **Address
+Validation API** (`POST /v1:validateAddress`, with USPS CASS/DPV data) for server-side ship-to
+checks. Answers come from a corpus
 matching our QA fixtures, so the address step that waits 5 s for Google predictions (and then
 falls back to manual entry) resolves instantly and deterministically.
 
 - Operation coverage: [SUPPORT.md](https://github.com/crvouga/mockingbird/blob/main/packages/service/google-maps/SUPPORT.md)
 - Google publishes no OpenAPI document for these endpoints: `openapi.yaml` is hand-authored
-  from Google's documented shapes and the fields our consumer reads.
+  from Google's documented shapes and the fields our consumer reads. Address Validation follows
+  the [REST reference](https://developers.google.com/maps/documentation/address-validation/reference/rest/v1/TopLevel/validateAddress)
+  and [`ValidationResult`](https://developers.google.com/maps/documentation/address-validation/reference/rest/v1/ValidationResult).
 
 ## Install
 
@@ -53,6 +57,39 @@ const details = await get(
 maps.applyPreset("autocomplete_over_query_limit", "default", { count: 2 })
 ```
 
+### Address Validation
+
+Google serves it from a different host, `https://addressvalidation.googleapis.com`; the paths do
+not collide, so one mock serves both. Point the server-side client's Address Validation base URL
+at the mock (or at `<mock>/ns/<namespace>`), with the key as `?key=` (or `X-Goog-Api-Key`).
+
+```ts
+import { createRuntime } from "@crvouga/mockingbird-service-google-maps"
+
+const maps = createRuntime()
+const response = await maps.fetch(
+  new Request("http://maps.test/v1:validateAddress?key=k", {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify({
+      address: {
+        regionCode: "US",
+        addressLines: ["1625 N Central Ave"],
+        locality: "Phoenix",
+        administrativeArea: "AZ",
+        postalCode: "85004",
+      },
+      enableUspsCass: true,
+    }),
+  }),
+)
+const { result } = await response.json()
+// result.verdict → PREMISE / addressComplete / ACCEPT; result.uspsData.dpvConfirmation → "Y"
+
+// Force the USPS "not deliverable" answer on the next call.
+maps.applyPreset("address_validation_dpv_n", "default", { count: 1 })
+```
+
 On web, load `<mock>/maps/api/js?key=…&libraries=places` exactly as the app loads Google's
 script; the shim calls back into the mock's REST endpoints on the same origin and namespace.
 
@@ -69,8 +106,36 @@ works from a browser.
 | `GET /maps/api/place/details/json` | `place_id` (required), `fields` (honoured: `address_component` returns only `address_components`; unknown field → `INVALID_REQUEST`), `sessiontoken`. `result` with `address_components` (`street_number`, `route`, `locality`, `administrative_area_level_2`, `administrative_area_level_1` long/short, `country`, `postal_code`), `formatted_address`, `geometry{location, viewport}`, `place_id`, `types`, `name`, `url`, `vicinity`. Unknown id → `NOT_FOUND`. |
 | `GET /maps/api/geocode/json` | `address`, `place_id` or `components=postal_code:…` (none → `INVALID_REQUEST`). `results[0]` with `address_components`, `formatted_address`, `geometry{location, location_type, viewport}`, `place_id`, `types`. A full address (`"line1, city, ST zip"`) resolves to its row or a synthesized address; a bare ZIP or `"City, ST"` to the ZIP centroid; a street without a locatable city is `ZERO_RESULTS`. |
 | `GET /maps/api/place/findplacefromtext/json` | `input` + `inputtype=textquery` (else `INVALID_REQUEST`), `fields` (default: `place_id` only, as Google). Geocoding first, then the looser autocomplete match, so it finds what our geocode fallback needs. |
+| `POST /v1:validateAddress` | Address Validation (see below). A Google Cloud API: errors are HTTP 4xx/5xx with `{"error": {code, message, status}}`, not a 200 with `status`. |
 | `GET /maps/api/js` | The shim (`text/javascript`): `google.maps.places.AutocompleteService#getPlacePredictions`, `PlacesService#getDetails` / `#findPlaceFromQuery`, `AutocompleteSessionToken`, `PlacesServiceStatus`, `google.maps.Geocoder#geocode`, `GeocoderStatus`, `LatLng` (`lat()`/`lng()`), `LatLngBounds`, `importLibrary`. Callbacks and promises (rejecting with `MapsRequestError` on errors when no callback is given). Calls `window[callback]` for `&callback=`, and `window.gm_authFailure()` when the key is refused. |
 
+### Address Validation verdicts
+
+Answers are proto3 JSON, as Google sends them: `false` booleans and empty lists are omitted
+(no `unconfirmedComponentTypes: []`). `result` carries `verdict` (`inputGranularity`,
+`validationGranularity`, `geocodeGranularity`, `addressComplete`, `has*Components`,
+`possibleNextAction`), `address` (`formattedAddress`, `postalAddress`, `addressComponents` with
+`confirmationLevel` / `inferred` / `replaced`, `missingComponentTypes`,
+`unconfirmedComponentTypes`), `geocode` (`location`, `placeId`, `placeTypes`) and, for US
+addresses, `uspsData` (`standardizedAddress`, `dpvConfirmation`, `dpvFootnote`,
+`postOfficeCity`/`State`, `errorMessage`, `cassProcessed` when `enableUspsCass`). Every answer
+has a `responseId`. Send a componentized address (line 1 + optional unit line 2, `locality`,
+`administrativeArea`, `postalCode`) or everything in `addressLines`.
+
+| Input | Verdict |
+| --- | --- |
+| A corpus row (`1625 N Central Ave`, Phoenix AZ 85004); spelled-out words (`North`, `Avenue`) match | `PREMISE`, complete, `ACCEPT`, DPV `Y`; `postalAddress` echoes the corpus spelling with a deterministic ZIP+4 (`85004-NNNN`) |
+| `<number> <street>` in a corpus city | Synthesized, as for Autocomplete: `PREMISE`, `ACCEPT`, DPV `Y`, the street USPS-abbreviated (`Maple Street` → `Maple St`) |
+| A unit on a single-delivery-point row (`… Building A`, `Apt 4`) | `PREMISE`, complete, `CONFIRM`, `subpremise` unconfirmed, DPV `Y` |
+| No house number (`N Central Ave`) in a corpus city | `ROUTE`, `FIX`, `missingComponentTypes: ["street_number"]`, no DPV code |
+| A city/ZIP the corpus does not hold | `OTHER`, `FIX`, the unplaceable components unconfirmed, DPV `N` |
+| A ZIP that is wrong for the city (or a city that is wrong for the ZIP) | Replaced: `hasReplacedComponents`, `CONFIRM`, the corrected value in `postalAddress` |
+| A row with `validation.multiUnit` | No unit: `CONFIRM_ADD_SUBPREMISES`, `missingComponentTypes: ["subpremise"]`, DPV `D`. A unit in `validation.units` (or any, when `units` is absent): `SUB_PREMISE`, `ACCEPT`, `Y`. Another unit: `PREMISE`, `CONFIRM`, `subpremise` unconfirmed, DPV `S` |
+| A row with `validation.uspsErrorMessage` | `uspsData: {errorMessage}` and no DPV code |
+| No `address`, empty `addressLines`, an unknown field, non-JSON, over 280 characters, or `enableUspsCass` outside `US`/`PR` | 400 `INVALID_ARGUMENT` |
+| No key | 403 `PERMISSION_DENIED` "The request is missing a valid API key." |
+| A key outside `settings.keys` | 400 `INVALID_ARGUMENT` "API key not valid. Please pass a valid API key." (`reason: API_KEY_INVALID`), as Google answers an unknown key; `address_validation_denied` gives the 403 of a key without the API enabled |
+
 ### Corpus
 
 59 addresses: every row of QA's `ROUTING_ZIP_CORPUS` (`packages/qa/src/world/gen/addresses.ts`,
@@ -86,7 +151,7 @@ Details needs no stored state). `GET /health` reports the corpus.
 | Route | Effect |
 | --- | --- |
 | `GET /__admin/corpus` | The namespace's addresses (custom first) and the custom count. |
-| `PUT /__admin/corpus` | `{addresses: [{line1, city, state, zip, id?, county?, lat?, lng?}]}` replaces the namespace's custom addresses (on top of the built-in corpus). |
+| `PUT /__admin/corpus` | `{addresses: [{line1, city, state, zip, id?, county?, lat?, lng?, validation?}]}` replaces the namespace's custom addresses (on top of the built-in corpus). `validation` pins Address Validation for that row: `{granularity?, addressComplete?, possibleNextAction?, dpvConfirmation?: "Y"\|"N"\|"S"\|"D", unconfirmedComponentTypes?, uspsErrorMessage?, multiUnit?, units?}`. |
 | `DELETE /__admin/corpus` | Drop the custom addresses. |
 | `GET/PUT /__admin/settings` | `{keys?: string[], publicUrl?: string \| null}`. `keys` restricts accepted API keys (others get `REQUEST_DENIED` "The provided API key is invalid."; a missing key always does). `publicUrl` is the origin the JS shim calls back to when it differs from the request's (a rewriting proxy). |
 
@@ -95,15 +160,22 @@ Fault presets (`POST /__admin/faults {"preset": "<name>", "count"?: n}`; `GET /_
 with that status), `geocode_zero_results` (exercises our Find Place fallback),
 `autocomplete_over_query_limit` (two of these flip our sheet to manual entry), `server_error`
 (HTTP 500), `slow` (6 s, past QA's 5 s wait), `script_unavailable` (the JS loader answers 503, so
-the script's `onerror` fires).
+the script's `onerror` fires). For Address Validation only: `address_validation_denied` (403
+`PERMISSION_DENIED`, a key without the API enabled), `address_validation_unavailable` (503
+`UNAVAILABLE`), `address_validation_slow` (3 s, past a 2.5 s checkout timeout),
+`address_validation_no_verdict` (200 `{"result": {}}`: not something Google sends, for a
+client's defensive branch) and `address_validation_dpv_n` (DPV `N`). `GET /__admin/metrics`
+counts `ValidateAddress` on its own.
 
 ### Namespaces
 
 `x-mockingbird-namespace`, a `/ns/<name>` prefix on the base URL (the JS shim served under a
 prefix calls back through it), or by API key:
 `PUT /__admin/credentials {"credentials": {"<PLACES_KEY>": "<namespace>"}}` (the `key` query
-parameter is the credential). The request journal records operation, status, the resolved
-`placeId` and the `sessionToken`; never the typed address.
+parameter, or `X-Goog-Api-Key` for Address Validation, is the credential). The request journal
+records operation, status, the resolved `placeId` and the `sessionToken`, and for
+`ValidateAddress` the resolved corpus row id (`addressRowId`) and the verdict class
+(`ACCEPT/Y`, `FIX/N`, …); never the typed address.
 
 ### Tests
 
@@ -115,10 +187,17 @@ parameter is the credential). The request journal records operation, status, the
   manual-entry switch), `parse-place-details.ts`, `address-autocomplete-web.tsx` and
   `use-geocoded-address.ts` (native REST and web through the shim evaluated in a fake window).
   Also served over HTTP.
+- `google-maps.address-validation.acceptance.test.ts`: every Address Validation verdict class,
+  the 400/403 envelopes, namespaces, the journal and each preset, through `test/consumer.ts`'s
+  port of a checkout's fail-open ship-to evaluation (non-2xx, no verdict → unavailable; USPS
+  error, granularity, incomplete, `FIX`/`CONFIRM_ADD_SUBPREMISES`, critical unconfirmed
+  components, DPV other than `Y`/`S` → reject). Self-parity walks include `ValidateAddress`.
 - There is no SDK drop-in test: native uses plain `fetch`, and the web SDK is Google's hosted
   script, which the shim replaces.
-- `bun scripts/parity.ts`: live parity against `maps.googleapis.com` with
-  `MOCKINGBIRD_GOOGLE_MAPS_API_KEY` (env / `.env.local`); exits 2 without it.
+- `bun scripts/parity.ts`: live parity against `maps.googleapis.com` (and
+  `addressvalidation.googleapis.com` for `ValidateAddress`) with
+  `GOOGLE_MAPS_API_KEY` (env / `.env.local`; Address Validation must be enabled on
+  the key); exits 2 without it.
 
 ### Deliberately not modelled
 
@@ -130,6 +209,13 @@ parameter is the credential). The request journal records operation, status, the
   (`places.googleapis.com`, `Place` class, `AutocompleteSuggestion`), reverse geocoding
   (`latlng=`), `locationbias`/`radius`, and billing/quotas beyond the presets.
 - Session-token billing semantics: tokens are accepted and journaled, nothing more.
+- Address Validation beyond `validateAddress`: `provideValidationFeedback`, `previousResponseId`
+  chaining, `languageOptions` and `sessionToken` (accepted, ignored), `metadata`
+  (business/residential/PO box), `englishLatinAddress`, and non-US regions (without
+  `enableUspsCass` they get a `FIX` answer and no `uspsData`; Google validates many countries).
+  ZIP+4 digits, `dpvFootnote` codes and the rest of the USPS record (carrier route, delivery
+  point, county FIPS…) are synthesized or omitted: compare verdict classes and DPV codes, not
+  those.
 
 ## API
 
@@ -139,12 +225,13 @@ parameter is the credential). The request journal records operation, status, the
 | `createRuntime` | function | The mock with the full service contract (health, admin, namespaces, credentials, presets, journal). Options: `corpus`, `settings`, `clock`, `seed`, `adminKey`, `onLog`. |
 | `GOOGLE_MAPS_PRESETS` | object | Every named fault preset. |
 | `GOOGLE_MAPS_NAMESPACE` | string | The service name, `"google-maps"`. |
-| `keyCredential` | function | The `key` query parameter of a request (how API keys map to namespaces). |
+| `keyCredential` | function | The `key` query parameter (or `X-Goog-Api-Key` header) of a request (how API keys map to namespaces). |
 | `DEFAULT_CORPUS`, `PHOENIX_DEMO_ADDRESS`, `STATE_NAMES` | values | The address corpus, the Phoenix demo member row, and state names for `administrative_area_level_1`. |
 | `corpusPlaceId` | function | The stable place id of a corpus row. |
 | `mapsJavaScript` | function | Render the Maps JavaScript shim for `{base, key, authFailed, callback}`. |
 | `normalize` | function | The address normalization used for matching. |
 | `MISSING_KEY_MESSAGE`, `INVALID_KEY_MESSAGE` | strings | Google's `error_message` for a missing / refused key. |
+| `MISSING_API_KEY_MESSAGE`, `INVALID_API_KEY_MESSAGE` | strings | Address Validation's `error.message` for a missing (403) / invalid (400) key. |
 | `document`, `operationIds`, `supportedOperationIds` | values | The OpenAPI contract and its operation ids. |
 | `createServer`, `serveTarget`, `DEFAULT_PORT` (`./server`) | Node | Serve over `node:http`; the `serve` CLI target (`--api-key`, `--public-url`); port 8814. |