@gpc-cli/api 1.0.37 → 1.0.38

package/dist/index.js

@@ -35,6 +35,37 @@ function isResumeIncomplete(response) {
   return response.headers.get("X-Http-Status-Code-Override") === "308";
 }
 var DEFAULT_CHUNK_SIZE = 8 * 1024 * 1024;
+function validateSessionUri(sessionUri, uploadUrl) {
+  let session;
+  let upload;
+  try {
+    session = new URL(sessionUri);
+    upload = new URL(uploadUrl);
+  } catch {
+    throw new PlayApiError(
+      "Invalid session URI or upload URL",
+      "UPLOAD_INVALID_URI",
+      0,
+      "The resumable session URI must be a valid HTTPS URL."
+    );
+  }
+  if (session.protocol !== "https:") {
+    throw new PlayApiError(
+      "Resumable session URI must use HTTPS",
+      "UPLOAD_INSECURE_URI",
+      0,
+      "Only HTTPS session URIs are accepted."
+    );
+  }
+  if (session.hostname !== upload.hostname && !session.hostname.endsWith(".googleapis.com")) {
+    throw new PlayApiError(
+      `Session URI host "${session.hostname}" does not match upload host "${upload.hostname}"`,
+      "UPLOAD_URI_HOST_MISMATCH",
+      0,
+      "The session URI must point to the same Google API host as the upload URL."
+    );
+  }
+}
 var RESUMABLE_THRESHOLD = 5 * 1024 * 1024;
 function envInt(name) {
   const val = process.env[name];
@@ -66,6 +97,9 @@ async function resumableUpload(uploadUrl, filePath, contentType, ctx, options) {
   const fileStats = await stat(filePath);
   const totalBytes = fileStats.size;
   let sessionUri = options?.resumeSessionUri;
+  if (sessionUri) {
+    validateSessionUri(sessionUri, uploadUrl);
+  }
   if (!sessionUri) {
     sessionUri = await initiateSession(
       uploadUrl,
@@ -225,6 +259,7 @@ async function initiateSession(uploadUrl, contentType, totalBytes, ctx, initialM
       "This is a Google API issue. Try again."
     );
   }
+  validateSessionUri(location, url);
   return location;
 }
 async function sendChunk(sessionUri, chunk, contentRange, ctx) {
@@ -399,6 +434,12 @@ function sanitizeErrorBody(body) {
   const cleaned = body.startsWith("<") ? stripHtml(body) : body;
   return cleaned.length > 200 ? cleaned.slice(0, 200) + "..." : cleaned;
 }
+var SENSITIVE_PATH_SEGMENTS = /\/(tokens|purchases|purchaseToken)\/([^/?#]*)/gi;
+function redactPath(path) {
+  return path.replace(SENSITIVE_PATH_SEGMENTS, (_match, segment) => {
+    return `/${segment}/***REDACTED***`;
+  });
+}
 function validateFilePath(filePath) {
   const resolved = resolve(filePath);
   if (!isAbsolute(resolved)) {
@@ -694,7 +735,7 @@ function createHttpClient(options) {
         const errorBody = await response.text();
         const mapped = mapStatusToError(response.status, errorBody);
         const err = new PlayApiError(
-          mapped.message ?? `${method} ${path} failed with status ${response.status}: ${sanitizeErrorBody(errorBody)}`,
+          mapped.message ?? `${method} ${redactPath(path)} failed with status ${response.status}: ${sanitizeErrorBody(errorBody)}`,
           mapped.code,
           response.status,
           mapped.suggestion
@@ -705,7 +746,7 @@ function createHttpClient(options) {
           onRetry?.({
             attempt: attempt + 1,
             method,
-            path,
+            path: redactPath(path),
             status: response.status,
             error: err.message,
             delayMs: Math.round(delay),
@@ -725,7 +766,7 @@ function createHttpClient(options) {
         }
         if (error instanceof DOMException && error.name === "AbortError") {
           const timeoutErr = new PlayApiError(
-            `${method} ${path} timed out after ${timeout}ms`,
+            `${method} ${redactPath(path)} timed out after ${timeout}ms`,
             "API_TIMEOUT",
             void 0,
             "The request exceeded the configured timeout. Consider increasing the timeout value."
@@ -735,7 +776,7 @@ function createHttpClient(options) {
             onRetry?.({
               attempt: attempt + 1,
               method,
-              path,
+              path: redactPath(path),
               error: timeoutErr.message,
               delayMs: Math.round(jitteredDelay2(baseDelay, attempt, maxDelay)),
               timestamp: (/* @__PURE__ */ new Date()).toISOString()
@@ -745,7 +786,7 @@ function createHttpClient(options) {
           throw timeoutErr;
         }
         const networkErr = new PlayApiError(
-          `${method} ${path} failed: ${error instanceof Error ? error.message : String(error)}`,
+          `${method} ${redactPath(path)} failed: ${error instanceof Error ? error.message : String(error)}`,
           "API_NETWORK_ERROR",
           void 0,
           "A network error occurred. Check your internet connection."
@@ -755,7 +796,7 @@ function createHttpClient(options) {
           onRetry?.({
             attempt: attempt + 1,
             method,
-            path,
+            path: redactPath(path),
             error: networkErr.message,
             delayMs: Math.round(jitteredDelay2(baseDelay, attempt, maxDelay)),
             timestamp: (/* @__PURE__ */ new Date()).toISOString()
@@ -848,7 +889,7 @@ function createHttpClient(options) {
         if (error instanceof DOMException && error.name === "AbortError") {
           const sizeMb = Math.round(fileBuffer.byteLength / (1024 * 1024));
           const timeoutErr = new PlayApiError(
-            `POST upload ${path} timed out after ${effectiveTimeout}ms (file: ${sizeMb} MB)`,
+            `POST upload ${redactPath(path)} timed out after ${effectiveTimeout}ms (file: ${sizeMb} MB)`,
             "API_TIMEOUT",
             void 0,
             `Upload timed out. Set GPC_UPLOAD_TIMEOUT=${effectiveTimeout * 2} (ms) or use --timeout to increase.`
@@ -858,7 +899,7 @@ function createHttpClient(options) {
             onRetry?.({
               attempt: attempt + 1,
               method: "POST",
-              path: `upload ${path}`,
+              path: `upload ${redactPath(path)}`,
               error: timeoutErr.message,
               delayMs: Math.round(jitteredDelay2(baseDelay, attempt, maxDelay)),
               timestamp: (/* @__PURE__ */ new Date()).toISOString()
@@ -868,7 +909,7 @@ function createHttpClient(options) {
           throw timeoutErr;
         }
         const networkErr = new PlayApiError(
-          `POST upload ${path} failed: ${error instanceof Error ? error.message : String(error)}`,
+          `POST upload ${redactPath(path)} failed: ${error instanceof Error ? error.message : String(error)}`,
           "API_NETWORK_ERROR",
           void 0,
           "A network error occurred. Check your internet connection."
@@ -878,7 +919,7 @@ function createHttpClient(options) {
           onRetry?.({
             attempt: attempt + 1,
             method: "POST",
-            path: `upload ${path}`,
+            path: `upload ${redactPath(path)}`,
             error: networkErr.message,
             delayMs: Math.round(jitteredDelay2(baseDelay, attempt, maxDelay)),
             timestamp: (/* @__PURE__ */ new Date()).toISOString()
@@ -993,7 +1034,7 @@ function createHttpClient(options) {
           const errorBody = await response.text();
           const mapped = mapStatusToError(response.status, errorBody);
           throw new PlayApiError(
-            mapped.message ?? `GET ${path} failed with status ${response.status}: ${sanitizeErrorBody(errorBody)}`,
+            mapped.message ?? `GET ${redactPath(path)} failed with status ${response.status}: ${sanitizeErrorBody(errorBody)}`,
             mapped.code,
             response.status,
             mapped.suggestion
@@ -1041,40 +1082,54 @@ function createRateLimiter(buckets) {
       config: bucket
     });
   }
+  const mutexes = /* @__PURE__ */ new Map();
+  function acquireSync(state) {
+    const now = Date.now();
+    const elapsed = now - state.lastRefillTime;
+    const refill = Math.floor(elapsed / state.config.refillIntervalMs * state.config.refillRate);
+    if (refill > 0) {
+      state.tokens = Math.min(state.config.maxTokens, state.tokens + refill);
+      state.lastRefillTime = now;
+    }
+    if (state.tokens > 0) {
+      state.tokens--;
+      return 0;
+    }
+    return Math.ceil(1 / state.config.refillRate * state.config.refillIntervalMs);
+  }
   return {
     async acquire(bucket) {
       const state = states.get(bucket);
       if (!state) return;
-      const now = Date.now();
-      const elapsed = now - state.lastRefillTime;
-      const refill = Math.floor(
-        elapsed / state.config.refillIntervalMs * state.config.refillRate
-      );
-      if (refill > 0) {
-        state.tokens = Math.min(state.config.maxTokens, state.tokens + refill);
-        state.lastRefillTime = now;
-      }
-      if (state.tokens > 0) {
-        state.tokens--;
-        return;
-      }
-      const tokensNeeded = 1;
-      const waitMs = Math.ceil(
-        tokensNeeded / state.config.refillRate * state.config.refillIntervalMs
-      );
-      await new Promise((r) => setTimeout(r, waitMs));
-      const afterWait = Date.now();
-      const totalElapsed = afterWait - state.lastRefillTime;
-      const newTokens = Math.floor(
-        totalElapsed / state.config.refillIntervalMs * state.config.refillRate
-      );
-      state.tokens = Math.max(0, Math.min(state.config.maxTokens, newTokens) - 1);
-      state.lastRefillTime = afterWait;
+      const prev = mutexes.get(bucket) ?? Promise.resolve();
+      const next = prev.then(async () => {
+        const waitMs = acquireSync(state);
+        if (waitMs <= 0) return;
+        await new Promise((r) => setTimeout(r, waitMs));
+        const afterWait = Date.now();
+        const totalElapsed = afterWait - state.lastRefillTime;
+        const newTokens = Math.floor(
+          totalElapsed / state.config.refillIntervalMs * state.config.refillRate
+        );
+        state.tokens = Math.max(0, Math.min(state.config.maxTokens, newTokens) - 1);
+        state.lastRefillTime = afterWait;
+      });
+      mutexes.set(bucket, next);
+      await next;
     }
   };
 }
 
 // src/client.ts
+var p = (segment) => encodeURIComponent(segment);
+var _deprecationWarned = /* @__PURE__ */ new Set();
+function warnOnce(code, msg) {
+  if (_deprecationWarned.has(code)) return;
+  _deprecationWarned.add(code);
+  if (typeof process !== "undefined" && process.emitWarning) {
+    process.emitWarning(msg, { type: "DeprecationWarning", code });
+  }
+}
 var DEFAULT_REGIONS_VERSION = "2022/02";
 function applyMutationOptions(params, options) {
   if (options?.allowMissing) params["allowMissing"] = "true";
@@ -1115,19 +1170,19 @@ function createApiClient(options) {
   return {
     edits: {
       async insert(packageName) {
-        const { data } = await http.post(`/${packageName}/edits`);
+        const { data } = await http.post(`/${p(packageName)}/edits`);
         return data;
       },
       async get(packageName, editId) {
-        const { data } = await http.get(`/${packageName}/edits/${editId}`);
+        const { data } = await http.get(`/${p(packageName)}/edits/${p(editId)}`);
         return data;
       },
       async validate(packageName, editId) {
-        const { data } = await http.post(`/${packageName}/edits/${editId}:validate`);
+        const { data } = await http.post(`/${p(packageName)}/edits/${p(editId)}:validate`);
         return data;
       },
       async commit(packageName, editId, options2) {
-        let path = `/${packageName}/edits/${editId}:commit`;
+        let path = `/${p(packageName)}/edits/${p(editId)}:commit`;
         if (options2?.changesNotSentForReview || options2?.changesInReviewBehavior) {
           const params = new URLSearchParams();
           if (options2.changesNotSentForReview) params.set("changesNotSentForReview", "true");
@@ -1139,24 +1194,26 @@ function createApiClient(options) {
         return data;
       },
       async delete(packageName, editId) {
-        await http.delete(`/${packageName}/edits/${editId}`);
+        await http.delete(`/${p(packageName)}/edits/${p(editId)}`);
       }
     },
     details: {
       async get(packageName, editId) {
-        const { data } = await http.get(`/${packageName}/edits/${editId}/details`);
+        const { data } = await http.get(
+          `/${p(packageName)}/edits/${p(editId)}/details`
+        );
         return data;
       },
       async update(packageName, editId, details) {
         const { data } = await http.put(
-          `/${packageName}/edits/${editId}/details`,
+          `/${p(packageName)}/edits/${p(editId)}/details`,
           details
         );
         return data;
       },
       async patch(packageName, editId, partial) {
         const { data } = await http.patch(
-          `/${packageName}/edits/${editId}/details`,
+          `/${p(packageName)}/edits/${p(editId)}/details`,
           partial
         );
         return data;
@@ -1165,12 +1222,12 @@ function createApiClient(options) {
     bundles: {
       async list(packageName, editId) {
         const { data } = await http.get(
-          `/${packageName}/edits/${editId}/bundles`
+          `/${p(packageName)}/edits/${p(editId)}/bundles`
         );
         return data.bundles;
       },
       async upload(packageName, editId, filePath, uploadOptions, deviceTierConfigId) {
-        let bundlePath = `/${packageName}/edits/${editId}/bundles`;
+        let bundlePath = `/${p(packageName)}/edits/${p(editId)}/bundles`;
         if (deviceTierConfigId) {
           bundlePath += `?${new URLSearchParams({ deviceTierConfigId }).toString()}`;
         }
@@ -1194,30 +1251,35 @@ function createApiClient(options) {
     tracks: {
       async list(packageName, editId) {
         const { data } = await http.get(
-          `/${packageName}/edits/${editId}/tracks`
+          `/${p(packageName)}/edits/${p(editId)}/tracks`
         );
         return data.tracks;
       },
       async get(packageName, editId, track) {
-        const { data } = await http.get(`/${packageName}/edits/${editId}/tracks/${track}`);
+        const { data } = await http.get(
+          `/${p(packageName)}/edits/${p(editId)}/tracks/${p(track)}`
+        );
         return data;
       },
       async create(packageName, editId, trackName) {
-        const { data } = await http.post(`/${packageName}/edits/${editId}/tracks`, {
+        const { data } = await http.post(`/${p(packageName)}/edits/${p(editId)}/tracks`, {
           track: trackName
         });
         return data;
       },
       async update(packageName, editId, track, release) {
-        const { data } = await http.put(`/${packageName}/edits/${editId}/tracks/${track}`, {
-          track,
-          releases: [release]
-        });
+        const { data } = await http.put(
+          `/${p(packageName)}/edits/${p(editId)}/tracks/${p(track)}`,
+          {
+            track,
+            releases: [release]
+          }
+        );
         return data;
       },
       async patch(packageName, editId, track, release) {
         const { data } = await http.patch(
-          `/${packageName}/edits/${editId}/tracks/${track}`,
+          `/${p(packageName)}/edits/${p(editId)}/tracks/${p(track)}`,
           {
             track,
             releases: [release]
@@ -1229,19 +1291,21 @@ function createApiClient(options) {
     releases: {
       async list(packageName, track) {
         const { data } = await http.get(
-          `/${packageName}/tracks/${track}/releases`
+          `/${p(packageName)}/tracks/${p(track)}/releases`
         );
         return data.releases ?? [];
       }
     },
     apks: {
       async list(packageName, editId) {
-        const { data } = await http.get(`/${packageName}/edits/${editId}/apks`);
+        const { data } = await http.get(
+          `/${p(packageName)}/edits/${p(editId)}/apks`
+        );
         return data.apks || [];
       },
       async upload(packageName, editId, filePath, uploadOptions) {
         const { data } = await http.uploadResumable(
-          `/${packageName}/edits/${editId}/apks`,
+          `/${p(packageName)}/edits/${p(editId)}/apks`,
           filePath,
           "application/vnd.android.package-archive",
           uploadOptions
@@ -1258,7 +1322,7 @@ function createApiClient(options) {
       },
       async addExternallyHosted(packageName, editId, apkData) {
         const { data } = await http.post(
-          `/${packageName}/edits/${editId}/apks/externallyHosted`,
+          `/${p(packageName)}/edits/${p(editId)}/apks/externallyHosted`,
           { externallyHostedApk: apkData }
         );
         return data;
@@ -1267,47 +1331,47 @@ function createApiClient(options) {
     listings: {
       async list(packageName, editId) {
         const { data } = await http.get(
-          `/${packageName}/edits/${editId}/listings`
+          `/${p(packageName)}/edits/${p(editId)}/listings`
         );
         return data.listings || [];
       },
       async get(packageName, editId, language) {
         const { data } = await http.get(
-          `/${packageName}/edits/${editId}/listings/${language}`
+          `/${p(packageName)}/edits/${p(editId)}/listings/${p(language)}`
         );
         return data;
       },
       async update(packageName, editId, language, listing) {
         const { data } = await http.put(
-          `/${packageName}/edits/${editId}/listings/${language}`,
+          `/${p(packageName)}/edits/${p(editId)}/listings/${p(language)}`,
           listing
         );
         return data;
       },
       async patch(packageName, editId, language, partial) {
         const { data } = await http.patch(
-          `/${packageName}/edits/${editId}/listings/${language}`,
+          `/${p(packageName)}/edits/${p(editId)}/listings/${p(language)}`,
           partial
         );
         return data;
       },
       async delete(packageName, editId, language) {
-        await http.delete(`/${packageName}/edits/${editId}/listings/${language}`);
+        await http.delete(`/${p(packageName)}/edits/${p(editId)}/listings/${p(language)}`);
       },
       async deleteAll(packageName, editId) {
-        await http.delete(`/${packageName}/edits/${editId}/listings`);
+        await http.delete(`/${p(packageName)}/edits/${p(editId)}/listings`);
       }
     },
     images: {
       async list(packageName, editId, language, imageType) {
         const { data } = await http.get(
-          `/${packageName}/edits/${editId}/listings/${language}/${imageType}`
+          `/${p(packageName)}/edits/${p(editId)}/listings/${p(language)}/${p(imageType)}`
         );
         return data.images || [];
       },
       async upload(packageName, editId, language, imageType, filePath) {
         const { data } = await http.upload(
-          `/${packageName}/edits/${editId}/listings/${language}/${imageType}`,
+          `/${p(packageName)}/edits/${p(editId)}/listings/${p(language)}/${p(imageType)}`,
           filePath,
           filePath.endsWith(".png") ? "image/png" : "image/jpeg"
         );
@@ -1323,12 +1387,12 @@ function createApiClient(options) {
       },
       async delete(packageName, editId, language, imageType, imageId) {
         await http.delete(
-          `/${packageName}/edits/${editId}/listings/${language}/${imageType}/${imageId}`
+          `/${p(packageName)}/edits/${p(editId)}/listings/${p(language)}/${p(imageType)}/${p(imageId)}`
         );
       },
       async deleteAll(packageName, editId, language, imageType) {
         const { data } = await http.delete(
-          `/${packageName}/edits/${editId}/listings/${language}/${imageType}`
+          `/${p(packageName)}/edits/${p(editId)}/listings/${p(language)}/${p(imageType)}`
         );
         return data.deleted || [];
       }
@@ -1336,27 +1400,27 @@ function createApiClient(options) {
     expansionFiles: {
       async get(packageName, editId, apkVersionCode, expansionFileType) {
         const { data } = await http.get(
-          `/${packageName}/edits/${editId}/apks/${apkVersionCode}/expansionFiles/${expansionFileType}`
+          `/${p(packageName)}/edits/${p(editId)}/apks/${p(String(apkVersionCode))}/expansionFiles/${p(expansionFileType)}`
         );
         return data;
       },
       async update(packageName, editId, apkVersionCode, expansionFileType, body) {
         const { data } = await http.put(
-          `/${packageName}/edits/${editId}/apks/${apkVersionCode}/expansionFiles/${expansionFileType}`,
+          `/${p(packageName)}/edits/${p(editId)}/apks/${p(String(apkVersionCode))}/expansionFiles/${p(expansionFileType)}`,
           body
         );
         return data;
       },
       async patch(packageName, editId, apkVersionCode, expansionFileType, body) {
         const { data } = await http.patch(
-          `/${packageName}/edits/${editId}/apks/${apkVersionCode}/expansionFiles/${expansionFileType}`,
+          `/${p(packageName)}/edits/${p(editId)}/apks/${p(String(apkVersionCode))}/expansionFiles/${p(expansionFileType)}`,
           body
         );
         return data;
       },
       async upload(packageName, editId, apkVersionCode, expansionFileType, filePath) {
         const { data } = await http.upload(
-          `/${packageName}/edits/${editId}/apks/${apkVersionCode}/expansionFiles/${expansionFileType}`,
+          `/${p(packageName)}/edits/${p(editId)}/apks/${p(String(apkVersionCode))}/expansionFiles/${p(expansionFileType)}`,
           filePath,
           "application/octet-stream"
         );
@@ -1374,14 +1438,14 @@ function createApiClient(options) {
     countryAvailability: {
       async get(packageName, editId, track) {
         const { data } = await http.get(
-          `/${packageName}/edits/${editId}/countryAvailability/${track}`
+          `/${p(packageName)}/edits/${p(editId)}/countryAvailability/${p(track)}`
         );
         return data;
       }
     },
     dataSafety: {
       async update(packageName, body) {
-        const { data } = await http.post(`/${packageName}/dataSafety`, body);
+        const { data } = await http.post(`/${p(packageName)}/dataSafety`, body);
         return data;
       }
     },
@@ -1395,7 +1459,7 @@ function createApiClient(options) {
           params["translationLanguage"] = options2.translationLanguage;
         const hasParams = Object.keys(params).length > 0;
         const { data } = await http.get(
-          `/${packageName}/reviews`,
+          `/${p(packageName)}/reviews`,
           hasParams ? params : void 0
         );
         return data;
@@ -1405,7 +1469,7 @@ function createApiClient(options) {
         if (translationLanguage) params["translationLanguage"] = translationLanguage;
         const hasParams = Object.keys(params).length > 0;
         const { data } = await http.get(
-          `/${packageName}/reviews/${reviewId}`,
+          `/${p(packageName)}/reviews/${p(reviewId)}`,
           hasParams ? params : void 0
         );
         return data;
@@ -1413,7 +1477,7 @@ function createApiClient(options) {
       async reply(packageName, reviewId, replyText) {
         const body = { replyText };
         const { data } = await http.post(
-          `/${packageName}/reviews/${reviewId}:reply`,
+          `/${p(packageName)}/reviews/${p(reviewId)}:reply`,
           body
         );
         return data;
@@ -1426,20 +1490,22 @@ function createApiClient(options) {
         if (options2?.pageSize) params["pageSize"] = String(options2.pageSize);
         const hasParams = Object.keys(params).length > 0;
         const { data } = await http.get(
-          `/${packageName}/subscriptions`,
+          `/${p(packageName)}/subscriptions`,
           hasParams ? params : void 0
         );
         return data;
       },
       async get(packageName, productId) {
-        const { data } = await http.get(`/${packageName}/subscriptions/${productId}`);
+        const { data } = await http.get(
+          `/${p(packageName)}/subscriptions/${p(productId)}`
+        );
         return data;
       },
       async create(packageName, body, productId, regionsVersion) {
         const params = {};
         if (productId) params["productId"] = productId;
         params["regionsVersion.version"] = regionsVersion || DEFAULT_REGIONS_VERSION;
-        const path = `/${packageName}/subscriptions?${new URLSearchParams(params).toString()}`;
+        const path = `/${p(packageName)}/subscriptions?${new URLSearchParams(params).toString()}`;
         const { data } = await http.post(path, body);
         return data;
       },
@@ -1448,65 +1514,67 @@ function createApiClient(options) {
         if (updateMask) params["updateMask"] = updateMask;
         params["regionsVersion.version"] = regionsVersion || DEFAULT_REGIONS_VERSION;
         applyMutationOptions(params, options2);
-        const path = `/${packageName}/subscriptions/${productId}?${new URLSearchParams(params).toString()}`;
+        const path = `/${p(packageName)}/subscriptions/${p(productId)}?${new URLSearchParams(params).toString()}`;
         const { data } = await http.patch(path, body);
         return data;
       },
       async delete(packageName, productId) {
-        await http.delete(`/${packageName}/subscriptions/${productId}`);
+        await http.delete(`/${p(packageName)}/subscriptions/${p(productId)}`);
       },
       async batchGet(packageName, productIds) {
         const params = productIds.map((id) => `productIds=${encodeURIComponent(id)}`).join("&");
         const { data } = await http.get(
-          `/${packageName}/subscriptions:batchGet?${params}`
+          `/${p(packageName)}/subscriptions:batchGet?${params}`
         );
         return data.subscriptions ?? [];
       },
       async batchUpdate(packageName, requests) {
         const { data } = await http.post(
-          `/${packageName}/subscriptions:batchUpdate`,
+          `/${p(packageName)}/subscriptions:batchUpdate`,
           requests
         );
         return data;
       },
       async activateBasePlan(packageName, productId, basePlanId) {
         const { data } = await http.post(
-          `/${packageName}/subscriptions/${productId}/basePlans/${basePlanId}:activate`
+          `/${p(packageName)}/subscriptions/${p(productId)}/basePlans/${p(basePlanId)}:activate`
         );
         return data;
       },
       async deactivateBasePlan(packageName, productId, basePlanId) {
         const { data } = await http.post(
-          `/${packageName}/subscriptions/${productId}/basePlans/${basePlanId}:deactivate`
+          `/${p(packageName)}/subscriptions/${p(productId)}/basePlans/${p(basePlanId)}:deactivate`
         );
         return data;
       },
       async deleteBasePlan(packageName, productId, basePlanId) {
-        await http.delete(`/${packageName}/subscriptions/${productId}/basePlans/${basePlanId}`);
+        await http.delete(
+          `/${p(packageName)}/subscriptions/${p(productId)}/basePlans/${p(basePlanId)}`
+        );
       },
       async migratePrices(packageName, productId, basePlanId, body) {
         const { data } = await http.post(
-          `/${packageName}/subscriptions/${productId}/basePlans/${basePlanId}:migratePrices`,
+          `/${p(packageName)}/subscriptions/${p(productId)}/basePlans/${p(basePlanId)}:migratePrices`,
           body
         );
         return data;
       },
       async batchMigratePrices(packageName, productId, body) {
         const { data } = await http.post(
-          `/${packageName}/subscriptions/${productId}/basePlans:batchMigratePrices`,
+          `/${p(packageName)}/subscriptions/${p(productId)}/basePlans:batchMigratePrices`,
           body
         );
         return data;
       },
       async listOffers(packageName, productId, basePlanId) {
         const { data } = await http.get(
-          `/${packageName}/subscriptions/${productId}/basePlans/${basePlanId}/offers`
+          `/${p(packageName)}/subscriptions/${p(productId)}/basePlans/${p(basePlanId)}/offers`
         );
         return data;
       },
       async getOffer(packageName, productId, basePlanId, offerId) {
         const { data } = await http.get(
-          `/${packageName}/subscriptions/${productId}/basePlans/${basePlanId}/offers/${offerId}`
+          `/${p(packageName)}/subscriptions/${p(productId)}/basePlans/${p(basePlanId)}/offers/${p(offerId)}`
         );
         return data;
       },
@@ -1514,7 +1582,7 @@ function createApiClient(options) {
         const params = {};
         if (offerId) params["offerId"] = offerId;
         params["regionsVersion.version"] = regionsVersion || DEFAULT_REGIONS_VERSION;
-        const path = `/${packageName}/subscriptions/${productId}/basePlans/${basePlanId}/offers?${new URLSearchParams(params).toString()}`;
+        const path = `/${p(packageName)}/subscriptions/${p(productId)}/basePlans/${p(basePlanId)}/offers?${new URLSearchParams(params).toString()}`;
         const { data } = await http.post(path, body);
         return data;
       },
@@ -1523,51 +1591,51 @@ function createApiClient(options) {
         if (updateMask) params["updateMask"] = updateMask;
         params["regionsVersion.version"] = regionsVersion || DEFAULT_REGIONS_VERSION;
         applyMutationOptions(params, options2);
-        const path = `/${packageName}/subscriptions/${productId}/basePlans/${basePlanId}/offers/${offerId}?${new URLSearchParams(params).toString()}`;
+        const path = `/${p(packageName)}/subscriptions/${p(productId)}/basePlans/${p(basePlanId)}/offers/${p(offerId)}?${new URLSearchParams(params).toString()}`;
         const { data } = await http.patch(path, body);
         return data;
       },
       async deleteOffer(packageName, productId, basePlanId, offerId) {
         await http.delete(
-          `/${packageName}/subscriptions/${productId}/basePlans/${basePlanId}/offers/${offerId}`
+          `/${p(packageName)}/subscriptions/${p(productId)}/basePlans/${p(basePlanId)}/offers/${p(offerId)}`
         );
       },
       async activateOffer(packageName, productId, basePlanId, offerId) {
         const { data } = await http.post(
-          `/${packageName}/subscriptions/${productId}/basePlans/${basePlanId}/offers/${offerId}:activate`
+          `/${p(packageName)}/subscriptions/${p(productId)}/basePlans/${p(basePlanId)}/offers/${p(offerId)}:activate`
         );
         return data;
       },
       async deactivateOffer(packageName, productId, basePlanId, offerId) {
         const { data } = await http.post(
-          `/${packageName}/subscriptions/${productId}/basePlans/${basePlanId}/offers/${offerId}:deactivate`
+          `/${p(packageName)}/subscriptions/${p(productId)}/basePlans/${p(basePlanId)}/offers/${p(offerId)}:deactivate`
         );
         return data;
       },
       async batchUpdateBasePlanStates(packageName, productId, requests) {
         const { data } = await http.post(
-          `/${packageName}/subscriptions/${productId}/basePlans:batchUpdateStates`,
+          `/${p(packageName)}/subscriptions/${p(productId)}/basePlans:batchUpdateStates`,
           requests
         );
         return data;
       },
       async batchGetOffers(packageName, productId, basePlanId, offerIds) {
         const { data } = await http.post(
-          `/${packageName}/subscriptions/${productId}/basePlans/${basePlanId}/offers:batchGet`,
+          `/${p(packageName)}/subscriptions/${p(productId)}/basePlans/${p(basePlanId)}/offers:batchGet`,
           { requests: offerIds.map((id) => ({ offerId: id })) }
         );
         return data;
       },
       async batchUpdateOffers(packageName, productId, basePlanId, requests) {
         const { data } = await http.post(
-          `/${packageName}/subscriptions/${productId}/basePlans/${basePlanId}/offers:batchUpdate`,
+          `/${p(packageName)}/subscriptions/${p(productId)}/basePlans/${p(basePlanId)}/offers:batchUpdate`,
           requests
         );
         return data;
       },
       async batchUpdateOfferStates(packageName, productId, basePlanId, requests) {
         const { data } = await http.post(
-          `/${packageName}/subscriptions/${productId}/basePlans/${basePlanId}/offers:batchUpdateStates`,
+          `/${p(packageName)}/subscriptions/${p(productId)}/basePlans/${p(basePlanId)}/offers:batchUpdateStates`,
           requests
         );
         return data;
@@ -1579,20 +1647,20 @@ function createApiClient(options) {
         if (options2?.token) params["token"] = options2.token;
         const hasParams = Object.keys(params).length > 0;
         const { data } = await http.get(
-          `/${packageName}/inappproducts`,
+          `/${p(packageName)}/inappproducts`,
           hasParams ? params : void 0
         );
         return data;
       },
       async get(packageName, sku) {
-        const { data } = await http.get(`/${packageName}/inappproducts/${sku}`);
+        const { data } = await http.get(`/${p(packageName)}/inappproducts/${p(sku)}`);
         return data;
       },
       async create(packageName, body, options2) {
         const params = {};
         if (options2?.autoConvertMissingPrices) params["autoConvertMissingPrices"] = "true";
         const hasParams = Object.keys(params).length > 0;
-        const path = hasParams ? `/${packageName}/inappproducts?${new URLSearchParams(params).toString()}` : `/${packageName}/inappproducts`;
+        const path = hasParams ? `/${p(packageName)}/inappproducts?${new URLSearchParams(params).toString()}` : `/${p(packageName)}/inappproducts`;
         const { data } = await http.post(path, body);
         return data;
       },
@@ -1601,7 +1669,7 @@ function createApiClient(options) {
         if (options2?.autoConvertMissingPrices) params["autoConvertMissingPrices"] = "true";
         if (options2?.allowMissing) params["allowMissing"] = "true";
         const hasParams = Object.keys(params).length > 0;
-        const path = hasParams ? `/${packageName}/inappproducts/${sku}?${new URLSearchParams(params).toString()}` : `/${packageName}/inappproducts/${sku}`;
+        const path = hasParams ? `/${p(packageName)}/inappproducts/${p(sku)}?${new URLSearchParams(params).toString()}` : `/${p(packageName)}/inappproducts/${p(sku)}`;
         const { data } = await http.put(path, body);
         return data;
       },
@@ -1610,16 +1678,16 @@ function createApiClient(options) {
         if (options2?.autoConvertMissingPrices) params["autoConvertMissingPrices"] = "true";
         if (options2?.latencyTolerance) params["latencyTolerance"] = options2.latencyTolerance;
         const hasParams = Object.keys(params).length > 0;
-        const path = hasParams ? `/${packageName}/inappproducts/${sku}?${new URLSearchParams(params).toString()}` : `/${packageName}/inappproducts/${sku}`;
+        const path = hasParams ? `/${p(packageName)}/inappproducts/${p(sku)}?${new URLSearchParams(params).toString()}` : `/${p(packageName)}/inappproducts/${p(sku)}`;
         const { data } = await http.patch(path, body);
         return data;
       },
       async delete(packageName, sku) {
-        await http.delete(`/${packageName}/inappproducts/${sku}`);
+        await http.delete(`/${p(packageName)}/inappproducts/${p(sku)}`);
       },
       async batchUpdate(packageName, requests) {
         const { data } = await http.post(
-          `/${packageName}/inappproducts:batchUpdate`,
+          `/${p(packageName)}/inappproducts:batchUpdate`,
           requests
         );
         return data;
@@ -1630,13 +1698,13 @@ function createApiClient(options) {
           params["sku"] = skus.join(",");
         }
         const { data } = await http.get(
-          `/${packageName}/inappproducts:batchGet`,
+          `/${p(packageName)}/inappproducts:batchGet`,
           Object.keys(params).length > 0 ? params : void 0
         );
         return data.inappproduct || [];
       },
       async batchDelete(packageName, skus) {
-        await http.post(`/${packageName}/inappproducts:batchDelete`, {
+        await http.post(`/${p(packageName)}/inappproducts:batchDelete`, {
           requests: skus.map((sku) => ({ packageName, sku }))
         });
       }
@@ -1644,74 +1712,89 @@ function createApiClient(options) {
     purchases: {
       async getProduct(packageName, productId, token) {
         const { data } = await http.get(
-          `/${packageName}/purchases/products/${productId}/tokens/${token}`
+          `/${p(packageName)}/purchases/products/${p(productId)}/tokens/${p(token)}`
         );
         return data;
       },
       async acknowledgeProduct(packageName, productId, token, body) {
         await http.post(
-          `/${packageName}/purchases/products/${productId}/tokens/${token}:acknowledge`,
+          `/${p(packageName)}/purchases/products/${p(productId)}/tokens/${p(token)}:acknowledge`,
           body
         );
       },
       async consumeProduct(packageName, productId, token) {
-        await http.post(`/${packageName}/purchases/products/${productId}/tokens/${token}:consume`);
+        await http.post(
+          `/${p(packageName)}/purchases/products/${p(productId)}/tokens/${p(token)}:consume`
+        );
       },
       async getSubscriptionV2(packageName, token) {
         const { data } = await http.get(
-          `/${packageName}/purchases/subscriptionsv2/tokens/${token}`
+          `/${p(packageName)}/purchases/subscriptionsv2/tokens/${p(token)}`
         );
         return data;
       },
       async getSubscriptionV1(packageName, subscriptionId, token) {
-        if (typeof process !== "undefined" && process.emitWarning) {
-          process.emitWarning(
-            "purchases.subscriptions.get (v1) is deprecated by Google (shutdown Aug 2027). Use getSubscriptionV2() instead.",
-            "DeprecationWarning"
-          );
-        }
+        warnOnce(
+          "GPC_DEP001",
+          "purchases.subscriptions.get (v1) is deprecated by Google (shutdown Aug 2027). Use getSubscriptionV2() instead."
+        );
         const { data } = await http.get(
-          `/${packageName}/purchases/subscriptions/${subscriptionId}/tokens/${token}`
+          `/${p(packageName)}/purchases/subscriptions/${p(subscriptionId)}/tokens/${p(token)}`
         );
         return data;
       },
       async cancelSubscription(packageName, subscriptionId, token) {
+        warnOnce(
+          "GPC_DEP002",
+          "purchases.subscriptions.cancel (v1) is deprecated by Google (shutdown Aug 2027). Use cancelSubscriptionV2() instead."
+        );
         await http.post(
-          `/${packageName}/purchases/subscriptions/${subscriptionId}/tokens/${token}:cancel`
+          `/${p(packageName)}/purchases/subscriptions/${p(subscriptionId)}/tokens/${p(token)}:cancel`
         );
       },
       async deferSubscription(packageName, subscriptionId, token, body) {
+        warnOnce(
+          "GPC_DEP003",
+          "purchases.subscriptions.defer (v1) is deprecated by Google (shutdown Aug 2027). Use deferSubscriptionV2() instead."
+        );
         const { data } = await http.post(
-          `/${packageName}/purchases/subscriptions/${subscriptionId}/tokens/${token}:defer`,
+          `/${p(packageName)}/purchases/subscriptions/${p(subscriptionId)}/tokens/${p(token)}:defer`,
           body
         );
         return data;
       },
       async acknowledgeSubscription(packageName, subscriptionId, token, body) {
+        warnOnce(
+          "GPC_DEP004",
+          "purchases.subscriptions.acknowledge (v1) is deprecated by Google (shutdown Aug 2027). No direct v2 replacement exists; prefer subscriptionsv2 surfaces where possible."
+        );
         await http.post(
-          `/${packageName}/purchases/subscriptions/${subscriptionId}/tokens/${token}:acknowledge`,
+          `/${p(packageName)}/purchases/subscriptions/${p(subscriptionId)}/tokens/${p(token)}:acknowledge`,
           body ?? {}
         );
       },
       async revokeSubscriptionV2(packageName, token, body) {
         await http.post(
-          `/${packageName}/purchases/subscriptionsv2/tokens/${token}:revoke`,
+          `/${p(packageName)}/purchases/subscriptionsv2/tokens/${p(token)}:revoke`,
           body ?? {}
         );
       },
       async cancelSubscriptionV2(packageName, token, body) {
-        await http.post(`/${packageName}/purchases/subscriptionsv2/tokens/${token}:cancel`, body);
+        await http.post(
+          `/${p(packageName)}/purchases/subscriptionsv2/tokens/${p(token)}:cancel`,
+          body
+        );
       },
       async deferSubscriptionV2(packageName, token, body) {
         const { data } = await http.post(
-          `/${packageName}/purchases/subscriptionsv2/tokens/${token}:defer`,
+          `/${p(packageName)}/purchases/subscriptionsv2/tokens/${p(token)}:defer`,
           body
         );
         return data;
       },
       async getProductV2(packageName, token) {
         const { data } = await http.get(
-          `/${packageName}/purchases/productsv2/tokens/${token}`
+          `/${p(packageName)}/purchases/productsv2/tokens/${p(token)}`
         );
         return data;
       },
@@ -1726,7 +1809,7 @@ function createApiClient(options) {
         if (options2?.token) params["token"] = options2.token;
         const hasParams = Object.keys(params).length > 0;
         const { data } = await http.get(
-          `/${packageName}/purchases/voidedpurchases`,
+          `/${p(packageName)}/purchases/voidedpurchases`,
           hasParams ? params : void 0
         );
         return data;
@@ -1734,24 +1817,24 @@ function createApiClient(options) {
     },
     orders: {
       async get(packageName, orderId) {
-        const { data } = await http.get(`/${packageName}/orders/${orderId}`);
+        const { data } = await http.get(`/${p(packageName)}/orders/${p(orderId)}`);
         return data;
       },
       async batchGet(packageName, orderIds) {
         const { data } = await http.post(
-          `/${packageName}/orders:batchGet`,
+          `/${p(packageName)}/orders:batchGet`,
           { orderIds }
         );
         return data.orders || [];
       },
       async refund(packageName, orderId, body) {
-        await http.post(`/${packageName}/orders/${orderId}:refund`, body);
+        await http.post(`/${p(packageName)}/orders/${p(orderId)}:refund`, body);
       }
     },
     monetization: {
       async convertRegionPrices(packageName, price) {
         const { data } = await http.post(
-          `/${packageName}/pricing:convertRegionPrices`,
+          `/${p(packageName)}/pricing:convertRegionPrices`,
           price
         );
         return data;
@@ -1761,7 +1844,7 @@ function createApiClient(options) {
       async list(packageName, reportType, year, month) {
         const monthStr = String(month).padStart(2, "0");
         const { data } = await http.get(
-          `/${packageName}/reports/${reportType}/${year}/${monthStr}`
+          `/${p(packageName)}/reports/${reportType}/${year}/${monthStr}`
         );
         return data;
       }
@@ -1769,20 +1852,20 @@ function createApiClient(options) {
     testers: {
       async get(packageName, editId, track) {
         const { data } = await http.get(
-          `/${packageName}/edits/${editId}/testers/${track}`
+          `/${p(packageName)}/edits/${p(editId)}/testers/${p(track)}`
         );
         return data;
       },
       async update(packageName, editId, track, testersData) {
         const { data } = await http.put(
-          `/${packageName}/edits/${editId}/testers/${track}`,
+          `/${p(packageName)}/edits/${p(editId)}/testers/${p(track)}`,
           testersData
         );
         return data;
       },
       async patch(packageName, editId, track, testersData) {
         const { data } = await http.patch(
-          `/${packageName}/edits/${editId}/testers/${track}`,
+          `/${p(packageName)}/edits/${p(editId)}/testers/${p(track)}`,
           testersData
         );
         return data;
@@ -1792,7 +1875,7 @@ function createApiClient(options) {
       async upload(packageName, editId, versionCode, filePath, fileType) {
         const deobType = fileType || "proguard";
         const { data } = await http.upload(
-          `/${packageName}/edits/${editId}/apks/${versionCode}/deobfuscationFiles/${deobType}`,
+          `/${p(packageName)}/edits/${p(editId)}/apks/${p(String(versionCode))}/deobfuscationFiles/${deobType}`,
           filePath,
           "application/octet-stream"
         );
@@ -1813,27 +1896,27 @@ function createApiClient(options) {
         if (versionCode !== void 0) params["versionCode"] = String(versionCode);
         const hasParams = Object.keys(params).length > 0;
         const { data } = await http.get(
-          `/${packageName}/appRecoveries`,
+          `/${p(packageName)}/appRecoveries`,
           hasParams ? params : void 0
         );
         return data.recoveryActions || [];
       },
       async cancel(packageName, appRecoveryId) {
-        await http.post(`/${packageName}/appRecoveries/${appRecoveryId}:cancel`);
+        await http.post(`/${p(packageName)}/appRecoveries/${p(appRecoveryId)}:cancel`);
       },
       async deploy(packageName, appRecoveryId) {
-        await http.post(`/${packageName}/appRecoveries/${appRecoveryId}:deploy`);
+        await http.post(`/${p(packageName)}/appRecoveries/${p(appRecoveryId)}:deploy`);
       },
       async create(packageName, request) {
         const { data } = await http.post(
-          `/${packageName}/appRecoveries`,
+          `/${p(packageName)}/appRecoveries`,
           request
         );
         return data;
       },
       async addTargeting(packageName, appRecoveryId, targeting) {
         const { data } = await http.post(
-          `/${packageName}/appRecoveries/${appRecoveryId}:addTargeting`,
+          `/${p(packageName)}/appRecoveries/${p(appRecoveryId)}:addTargeting`,
           targeting
         );
         return data;
@@ -1842,20 +1925,20 @@ function createApiClient(options) {
     externalTransactions: {
       async create(packageName, body) {
         const { data } = await http.post(
-          `/${packageName}/externalTransactions`,
+          `/${p(packageName)}/externalTransactions`,
           body
         );
         return data;
       },
       async get(packageName, transactionId) {
         const { data } = await http.get(
-          `/${packageName}/externalTransactions/${transactionId}`
+          `/${p(packageName)}/externalTransactions/${p(transactionId)}`
         );
         return data;
       },
       async refund(packageName, transactionId, refundData) {
         const { data } = await http.post(
-          `/${packageName}/externalTransactions/${transactionId}:refund`,
+          `/${p(packageName)}/externalTransactions/${p(transactionId)}:refund`,
           refundData
         );
         return data;
@@ -1864,19 +1947,19 @@ function createApiClient(options) {
     deviceTiers: {
       async list(packageName) {
         const { data } = await http.get(
-          `/${packageName}/deviceTierConfigs`
+          `/${p(packageName)}/deviceTierConfigs`
         );
         return data.deviceTierConfigs || [];
       },
       async get(packageName, configId) {
         const { data } = await http.get(
-          `/${packageName}/deviceTierConfigs/${configId}`
+          `/${p(packageName)}/deviceTierConfigs/${p(configId)}`
         );
         return data;
       },
       async create(packageName, config) {
         const { data } = await http.post(
-          `/${packageName}/deviceTierConfigs`,
+          `/${p(packageName)}/deviceTierConfigs`,
           config
         );
         return data;
@@ -1889,14 +1972,14 @@ function createApiClient(options) {
         if (options2?.pageSize) params["pageSize"] = String(options2.pageSize);
         const hasParams = Object.keys(params).length > 0;
         const { data } = await http.get(
-          `/${packageName}/oneTimeProducts`,
+          `/${p(packageName)}/oneTimeProducts`,
           hasParams ? params : void 0
         );
         return data;
       },
       async get(packageName, productId) {
         const { data } = await http.get(
-          `/${packageName}/oneTimeProducts/${productId}`
+          `/${p(packageName)}/oneTimeProducts/${p(productId)}`
         );
         return data;
       },
@@ -1908,7 +1991,7 @@ function createApiClient(options) {
           allowMissing: "true"
         });
         const { data } = await http.patch(
-          `/${packageName}/oneTimeProducts/${productId}?${params.toString()}`,
+          `/${p(packageName)}/oneTimeProducts/${p(productId)}?${params.toString()}`,
           body
         );
         return data;
@@ -1918,22 +2001,22 @@ function createApiClient(options) {
         if (updateMask) params["updateMask"] = updateMask;
         params["regionsVersion.version"] = regionsVersion || DEFAULT_REGIONS_VERSION;
         applyMutationOptions(params, options2);
-        const path = `/${packageName}/oneTimeProducts/${productId}?${new URLSearchParams(params).toString()}`;
+        const path = `/${p(packageName)}/oneTimeProducts/${p(productId)}?${new URLSearchParams(params).toString()}`;
         const { data } = await http.patch(path, body);
         return data;
       },
       async delete(packageName, productId) {
-        await http.delete(`/${packageName}/oneTimeProducts/${productId}`);
+        await http.delete(`/${p(packageName)}/oneTimeProducts/${p(productId)}`);
       },
       async listOffers(packageName, productId, purchaseOptionId = "-") {
         const { data } = await http.get(
-          `/${packageName}/oneTimeProducts/${productId}/purchaseOptions/${purchaseOptionId}/offers`
+          `/${p(packageName)}/oneTimeProducts/${p(productId)}/purchaseOptions/${p(purchaseOptionId)}/offers`
         );
         return data;
       },
       async getOffer(packageName, productId, purchaseOptionId, offerId) {
         const { data } = await http.get(
-          `/${packageName}/oneTimeProducts/${productId}/purchaseOptions/${purchaseOptionId}/offers/${offerId}`
+          `/${p(packageName)}/oneTimeProducts/${p(productId)}/purchaseOptions/${p(purchaseOptionId)}/offers/${p(offerId)}`
         );
         return data;
       },
@@ -1942,7 +2025,7 @@ function createApiClient(options) {
           "regionsVersion.version": regionsVersion || DEFAULT_REGIONS_VERSION
         });
         const { data } = await http.post(
-          `/${packageName}/oneTimeProducts/${productId}/purchaseOptions/${purchaseOptionId}/offers?${params.toString()}`,
+          `/${p(packageName)}/oneTimeProducts/${p(productId)}/purchaseOptions/${p(purchaseOptionId)}/offers?${params.toString()}`,
           body
         );
         return data;
@@ -1952,44 +2035,44 @@ function createApiClient(options) {
         if (updateMask) params["updateMask"] = updateMask;
         params["regionsVersion.version"] = regionsVersion || DEFAULT_REGIONS_VERSION;
         applyMutationOptions(params, options2);
-        const path = `/${packageName}/oneTimeProducts/${productId}/purchaseOptions/${purchaseOptionId}/offers/${offerId}?${new URLSearchParams(params).toString()}`;
+        const path = `/${p(packageName)}/oneTimeProducts/${p(productId)}/purchaseOptions/${p(purchaseOptionId)}/offers/${p(offerId)}?${new URLSearchParams(params).toString()}`;
         const { data } = await http.patch(path, body);
         return data;
       },
       async deleteOffer(packageName, productId, purchaseOptionId, offerId) {
         await http.delete(
-          `/${packageName}/oneTimeProducts/${productId}/purchaseOptions/${purchaseOptionId}/offers/${offerId}`
+          `/${p(packageName)}/oneTimeProducts/${p(productId)}/purchaseOptions/${p(purchaseOptionId)}/offers/${p(offerId)}`
         );
       },
       async batchGet(packageName, productIds) {
         const params = productIds.map((id) => `productIds=${encodeURIComponent(id)}`).join("&");
         const { data } = await http.get(
-          `/${packageName}/oneTimeProducts:batchGet?${params}`
+          `/${p(packageName)}/oneTimeProducts:batchGet?${params}`
         );
         return data.oneTimeProducts || [];
       },
       async batchUpdate(packageName, requests) {
         const { data } = await http.post(
-          `/${packageName}/oneTimeProducts:batchUpdate`,
+          `/${p(packageName)}/oneTimeProducts:batchUpdate`,
           requests
         );
         return data;
       },
       async batchDelete(packageName, productIds) {
-        await http.post(`/${packageName}/oneTimeProducts:batchDelete`, {
+        await http.post(`/${p(packageName)}/oneTimeProducts:batchDelete`, {
           requests: productIds.map((id) => ({ productId: id }))
         });
       },
       // Purchase option batch operations
       async batchDeletePurchaseOptions(packageName, productId, requests) {
         await http.post(
-          `/${packageName}/oneTimeProducts/${productId}/purchaseOptions:batchDelete`,
+          `/${p(packageName)}/oneTimeProducts/${p(productId)}/purchaseOptions:batchDelete`,
           { requests }
         );
       },
       async batchUpdatePurchaseOptionStates(packageName, productId, requests) {
         const { data } = await http.post(
-          `/${packageName}/oneTimeProducts/${productId}/purchaseOptions:batchUpdateStates`,
+          `/${p(packageName)}/oneTimeProducts/${p(productId)}/purchaseOptions:batchUpdateStates`,
           { requests }
         );
         return data;
@@ -1997,13 +2080,13 @@ function createApiClient(options) {
       // Offer lifecycle
       async activateOffer(packageName, productId, purchaseOptionId, offerId) {
         const { data } = await http.post(
-          `/${packageName}/oneTimeProducts/${productId}/purchaseOptions/${purchaseOptionId}/offers/${offerId}:activate`
+          `/${p(packageName)}/oneTimeProducts/${p(productId)}/purchaseOptions/${p(purchaseOptionId)}/offers/${p(offerId)}:activate`
         );
         return data;
       },
       async deactivateOffer(packageName, productId, purchaseOptionId, offerId) {
         const { data } = await http.post(
-          `/${packageName}/oneTimeProducts/${productId}/purchaseOptions/${purchaseOptionId}/offers/${offerId}:deactivate`
+          `/${p(packageName)}/oneTimeProducts/${p(productId)}/purchaseOptions/${p(purchaseOptionId)}/offers/${p(offerId)}:deactivate`
         );
         return data;
       },
@@ -2011,35 +2094,35 @@ function createApiClient(options) {
       async cancelOffer(packageName, productId, purchaseOptionId, offerId, latencyTolerance) {
         const body = latencyTolerance ? { latencyTolerance } : {};
         const { data } = await http.post(
-          `/${packageName}/oneTimeProducts/${productId}/purchaseOptions/${purchaseOptionId}/offers/${offerId}:cancel`,
+          `/${p(packageName)}/oneTimeProducts/${p(productId)}/purchaseOptions/${p(purchaseOptionId)}/offers/${p(offerId)}:cancel`,
           body
         );
         return data;
       },
       async batchGetOffers(packageName, productId, purchaseOptionId, requests) {
         const { data } = await http.post(
-          `/${packageName}/oneTimeProducts/${productId}/purchaseOptions/${purchaseOptionId}/offers:batchGet`,
+          `/${p(packageName)}/oneTimeProducts/${p(productId)}/purchaseOptions/${p(purchaseOptionId)}/offers:batchGet`,
           { requests }
         );
         return data;
       },
       async batchUpdateOffers(packageName, productId, purchaseOptionId, requests) {
         const { data } = await http.post(
-          `/${packageName}/oneTimeProducts/${productId}/purchaseOptions/${purchaseOptionId}/offers:batchUpdate`,
+          `/${p(packageName)}/oneTimeProducts/${p(productId)}/purchaseOptions/${p(purchaseOptionId)}/offers:batchUpdate`,
           { requests }
         );
         return data;
       },
       async batchUpdateOfferStates(packageName, productId, purchaseOptionId, requests) {
         const { data } = await http.post(
-          `/${packageName}/oneTimeProducts/${productId}/purchaseOptions/${purchaseOptionId}/offers:batchUpdateStates`,
+          `/${p(packageName)}/oneTimeProducts/${p(productId)}/purchaseOptions/${p(purchaseOptionId)}/offers:batchUpdateStates`,
           { requests }
         );
         return data;
       },
       async batchDeleteOffers(packageName, productId, purchaseOptionId, requests) {
         await http.post(
-          `/${packageName}/oneTimeProducts/${productId}/purchaseOptions/${purchaseOptionId}/offers:batchDelete`,
+          `/${p(packageName)}/oneTimeProducts/${p(productId)}/purchaseOptions/${p(purchaseOptionId)}/offers:batchDelete`,
           { requests }
         );
       }
@@ -2047,7 +2130,7 @@ function createApiClient(options) {
     internalAppSharing: {
       async uploadBundle(packageName, bundlePath) {
         const { data } = await http.uploadInternal(
-          `/${packageName}/artifacts/bundle`,
+          `/${p(packageName)}/artifacts/bundle`,
           bundlePath,
           "application/octet-stream"
         );
@@ -2055,7 +2138,7 @@ function createApiClient(options) {
       },
       async uploadApk(packageName, apkPath) {
         const { data } = await http.uploadInternal(
-          `/${packageName}/artifacts/apk`,
+          `/${p(packageName)}/artifacts/apk`,
           apkPath,
           "application/vnd.android.package-archive"
         );
@@ -2065,37 +2148,39 @@ function createApiClient(options) {
     generatedApks: {
       async list(packageName, versionCode) {
         const { data } = await http.get(
-          `/${packageName}/generatedApks/${versionCode}`
+          `/${p(packageName)}/generatedApks/${p(String(versionCode))}`
         );
         return data.generatedApks || [];
       },
       async download(packageName, versionCode, id) {
-        return http.download(`/${packageName}/generatedApks/${versionCode}/download/${id}`);
+        return http.download(
+          `/${p(packageName)}/generatedApks/${p(String(versionCode))}/download/${p(id)}`
+        );
       }
     },
     systemApks: {
       async create(packageName, versionCode, variant) {
         const { data } = await http.post(
-          `/${packageName}/systemApks/${versionCode}/variants`,
+          `/${p(packageName)}/systemApks/${p(String(versionCode))}/variants`,
           variant
         );
         return data;
       },
       async list(packageName, versionCode) {
         const { data } = await http.get(
-          `/${packageName}/systemApks/${versionCode}/variants`
+          `/${p(packageName)}/systemApks/${p(String(versionCode))}/variants`
         );
         return data;
       },
       async get(packageName, versionCode, variantId) {
         const { data } = await http.get(
-          `/${packageName}/systemApks/${versionCode}/variants/${variantId}`
+          `/${p(packageName)}/systemApks/${p(String(versionCode))}/variants/${p(String(variantId))}`
         );
         return data;
       },
       async download(packageName, versionCode, variantId) {
         return http.download(
-          `/${packageName}/systemApks/${versionCode}/variants/${variantId}:download`
+          `/${p(packageName)}/systemApks/${p(String(versionCode))}/variants/${p(String(variantId))}:download`
         );
       }
     }
@@ -2119,9 +2204,7 @@ function createReportingClient(options) {
     },
     async getMetricSetFreshness(packageName, metricSet) {
       await limiter.acquire("reporting");
-      const { data } = await http.get(
-        `/apps/${packageName}/${metricSet}`
-      );
+      const { data } = await http.get(`/apps/${packageName}/${metricSet}`);
       return data;
     },
     async getAnomalies(packageName) {
@@ -2141,13 +2224,23 @@ function createReportingClient(options) {
       );
       return data;
     },
-    async searchErrorReports(packageName, issueName, pageSize, pageToken) {
+    async searchErrorReports(packageName, issueId, pageSize, pageToken) {
+      if (!/^\d+$/.test(issueId)) {
+        throw new PlayApiError(
+          "Invalid error issue ID: must be numeric.",
+          "API_INVALID_INPUT",
+          void 0,
+          "Provide a valid numeric error issue ID from errorIssues.search."
+        );
+      }
       await limiter.acquire("reporting");
-      const params = {};
+      const params = {
+        filter: `errorIssueId = ${issueId}`
+      };
       if (pageSize) params["pageSize"] = String(pageSize);
       if (pageToken) params["pageToken"] = pageToken;
       const { data } = await http.get(
-        `/apps/${packageName}/errorIssues/${issueName}/reports`,
+        `/apps/${packageName}/errorReports:search`,
         params
       );
       return data;