@mpgd/game-services 0.15.1 → 0.15.2

package/dist/admob-ssv-conformance.js

@@ -11,7 +11,7 @@ export const adMobSsvConformanceChecks = [
     'timestamp age and future-skew boundaries fail closed',
     'callbacks sharing one signed transaction preserve one authority identity',
 ];
-const fixtureTimestampMs = 1784160000000;
+const fixtureTimestampMs = 1_784_160_000_000;
 const fixtureKeyId = '1234567890';
 const fixturePublicKey = 'MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEvYnh4p45wAsdENipvmqwXzvdNaCgRqx2IvxoYI8kiummEYytzHIhL738YLr3vs5vG/A8xY8QiCLDqVV2c5sUZw==';
 const firstFixtureSignature = 'MEYCIQDR1_VmQ4xw4WHff8KGDgv4insP7p5VAw8MhP5mZTFTgAIhAJ2Ejy5MU75UxeAxFqdLzvJwzL43qXl3PwuHMGYbjaiR';
@@ -67,7 +67,7 @@ async function createAdMobSsvConformanceContext(input, options) {
             callbackSource,
             publicKeySource,
             subtle,
-            now: () => fixtureTimestampMs + 1000,
+            now: () => fixtureTimestampMs + 1_000,
         }),
     };
 }
@@ -96,7 +96,7 @@ export async function runAdMobSsvConformance(input = {}) {
         callbackSource: mapCallbackSource(new Map()),
         publicKeySource,
         subtle,
-        now: () => fixtureTimestampMs + 1000,
+        now: () => fixtureTimestampMs + 1_000,
     }).verifyAdReward(verificationInput(firstRequest));
     assertDecision(pending, 'pending', 'ADMOB_SSV_EVIDENCE_PENDING');
     const tamperedCallback = fixtureCallback('reward-1', `${firstFixtureSignature.slice(0, -1)}S`);
@@ -104,14 +104,14 @@ export async function runAdMobSsvConformance(input = {}) {
         callbackSource: fixedCallbackSource(tamperedCallback),
         publicKeySource,
         subtle,
-        now: () => fixtureTimestampMs + 1000,
+        now: () => fixtureTimestampMs + 1_000,
     }).verifyAdReward(verificationInput(firstRequest));
     assertDecision(tampered, 'rejected', 'ADMOB_SSV_SIGNATURE_INVALID');
     const equivalentPercentEncoding = await createAdMobSsvEvidenceVerifier({
         callbackSource: fixedCallbackSource(fixtureCallback('reward-1', firstFixtureSignature).replace('%7B', '%7b')),
         publicKeySource,
         subtle,
-        now: () => fixtureTimestampMs + 1000,
+        now: () => fixtureTimestampMs + 1_000,
     }).verifyAdReward(verificationInput(firstRequest));
     assert(equivalentPercentEncoding.status === 'verified', 'equivalent percent-encoding must verify against AdMob-decoded query bytes');
     const validCallback = fixtureCallback('reward-1', firstFixtureSignature);
@@ -119,21 +119,21 @@ export async function runAdMobSsvConformance(input = {}) {
         callbackSource: fixedCallbackSource(validCallback.replace('&signature=', '&user_id=player-1&signature=')),
         publicKeySource,
         subtle,
-        now: () => fixtureTimestampMs + 1000,
+        now: () => fixtureTimestampMs + 1_000,
     }).verifyAdReward(verificationInput(firstRequest));
     assertDecision(duplicateSignedField, 'rejected', 'ADMOB_SSV_CALLBACK_INVALID');
     const missingSignedField = await createAdMobSsvEvidenceVerifier({
         callbackSource: fixedCallbackSource(validCallback.replace('&user_id=player-1', '')),
         publicKeySource,
         subtle,
-        now: () => fixtureTimestampMs + 1000,
+        now: () => fixtureTimestampMs + 1_000,
     }).verifyAdReward(verificationInput(firstRequest));
     assertDecision(missingSignedField, 'rejected', 'ADMOB_SSV_CALLBACK_INVALID');
     const unknownKey = await createAdMobSsvEvidenceVerifier({
         callbackSource: fixedCallbackSource(fixtureCallback('reward-1', firstFixtureSignature).replace(`key_id=${fixtureKeyId}`, 'key_id=9999999999')),
         publicKeySource,
         subtle,
-        now: () => fixtureTimestampMs + 1000,
+        now: () => fixtureTimestampMs + 1_000,
     }).verifyAdReward(verificationInput(firstRequest));
     assertDecision(unknownKey, 'rejected', 'ADMOB_SSV_KEY_UNAVAILABLE');
     const secp256k1Decision = await verifier.verifyAdReward(verificationInput(rewardRequest('reward-secp')));
@@ -149,28 +149,28 @@ export async function runAdMobSsvConformance(input = {}) {
         callbackSource,
         publicKeySource,
         subtle,
-        now: () => fixtureTimestampMs + 86400001,
+        now: () => fixtureTimestampMs + 86_400_001,
     }).verifyAdReward(verificationInput(firstRequest));
     assertDecision(expired, 'rejected', 'ADMOB_SSV_CALLBACK_EXPIRED');
     const future = await createAdMobSsvEvidenceVerifier({
         callbackSource,
         publicKeySource,
         subtle,
-        now: () => fixtureTimestampMs - 300001,
+        now: () => fixtureTimestampMs - 300_001,
     }).verifyAdReward(verificationInput(firstRequest));
     assertDecision(future, 'rejected', 'ADMOB_SSV_TIMESTAMP_IN_FUTURE');
     const ageBoundary = await createAdMobSsvEvidenceVerifier({
         callbackSource,
         publicKeySource,
         subtle,
-        now: () => fixtureTimestampMs + 86400000,
+        now: () => fixtureTimestampMs + 86_400_000,
     }).verifyAdReward(verificationInput(firstRequest));
     assert(ageBoundary.status === 'verified', 'the maximum callback age boundary must remain valid');
     const futureSkewBoundary = await createAdMobSsvEvidenceVerifier({
         callbackSource,
         publicKeySource,
         subtle,
-        now: () => fixtureTimestampMs - 300000,
+        now: () => fixtureTimestampMs - 300_000,
     }).verifyAdReward(verificationInput(firstRequest));
     assert(futureSkewBoundary.status === 'verified', 'the maximum future skew boundary must remain valid');
     const sharedTransactionDecision = await verifier.verifyAdReward(verificationInput(rewardRequest('reward-2')));
@@ -188,7 +188,7 @@ function verificationInput(request) {
         placement,
         platformPlacementId: placement.platformPlacementIds.android,
         signal: new AbortController().signal,
-        timeoutMs: 10000,
+        timeoutMs: 10_000,
     };
 }
 function rewardRequest(idempotencyKey) {

package/dist/admob-ssv.js

@@ -1,10 +1,10 @@
 import { Point, verify as verifySecp256k1 } from '@noble/secp256k1';
 export const admobSsvCustomDataSchema = 'mpgd.admob.ssv.binding.v1';
-export const defaultAdMobSsvMaximumCallbackAgeMs = 86400000;
-export const defaultAdMobSsvMaximumFutureSkewMs = 300000;
+export const defaultAdMobSsvMaximumCallbackAgeMs = 86_400_000;
+export const defaultAdMobSsvMaximumFutureSkewMs = 300_000;
 const signatureMarker = '&signature=';
-const maximumCallbackUrlLength = 65536;
-const maximumDateTimestampMs = 8640000000000000;
+const maximumCallbackUrlLength = 65_536;
+const maximumDateTimestampMs = 8_640_000_000_000_000;
 const ecPublicKeyObjectIdentifier = Uint8Array.of(0x2a, 0x86, 0x48, 0xce, 0x3d, 0x02, 0x01);
 const p256ObjectIdentifier = Uint8Array.of(0x2a, 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07);
 const p384ObjectIdentifier = Uint8Array.of(0x2b, 0x81, 0x04, 0x00, 0x22);

package/dist/apps-in-toss-evidence-verification-conformance.js

@@ -391,7 +391,7 @@ async function runRewardTimestampValidationScenario(createVerifier, now) {
 async function runAuthorityErrorsAndRewardMatchingScenario(createVerifier, now) {
     const fixture = createAppsInTossProductionEvidenceAuthorityFixture();
     const diagnosticReason = `Authority temporarily unavailable: ${'x'.repeat(512)} `;
-    const oversizedDiagnosticReason = 'x'.repeat(4097);
+    const oversizedDiagnosticReason = 'x'.repeat(4_097);
     fixture.enqueuePurchaseResult({ decision: 'rejected', reason: diagnosticReason });
     fixture.enqueuePurchaseResult({ decision: 'pending', reason: diagnosticReason });
     fixture.enqueuePurchaseResult({ decision: 'pending', reason: oversizedDiagnosticReason });

package/dist/apps-in-toss-evidence-verification.js

@@ -1,10 +1,10 @@
 export const appsInTossPurchaseCallbackEvidenceSchema = 'apps-in-toss.iap.callback.v1';
 export const appsInTossRewardCallbackEvidenceSchema = 'apps-in-toss.rewarded-ad.callback.v1';
 /** Leaves five seconds of headroom inside the SDK's documented 30-second window. */
-export const appsInTossProductGrantCallbackTimeoutMs = 25000;
+export const appsInTossProductGrantCallbackTimeoutMs = 25_000;
 // Offset-free order-status timestamps are documented as KST (UTC+09:00).
 const appsInTossKstOffsetMinutes = 9 * 60;
-const appsInTossAuthorityReasonMaxLength = 4096;
+const appsInTossAuthorityReasonMaxLength = 4_096;
 const appsInTossTimestampPattern = new RegExp(String.raw `^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})`
     + String.raw `(?:\.(\d{1,3}))?(Z|([+-])(\d{2}):(\d{2}))?$`, 'u');
 const appsInTossProductGrantVerificationPortBrand = Symbol('AppsInTossProductGrantVerificationPort');
@@ -393,7 +393,7 @@ function normalizeTimestamp(value, offsetFreeOffsetMinutes) {
     if (offsetMinutes === undefined) {
         return undefined;
     }
-    return new Date(wallClock - offsetMinutes * 60000).toISOString();
+    return new Date(wallClock - offsetMinutes * 60_000).toISOString();
 }
 function pending(reason) {
     return { status: 'pending', reason };

package/dist/apps-in-toss-partner-api.js

@@ -1,11 +1,11 @@
 export const appsInTossPartnerApiBaseUrl = 'https://apps-in-toss-api.toss.im';
-export const defaultAppsInTossPartnerApiTimeoutMs = 10000;
+export const defaultAppsInTossPartnerApiTimeoutMs = 10_000;
 const verifyAnonymousKeyPath = 'api-partner/v1/apps-in-toss/users/anon-key/verify';
 const sendFunctionalMessagePath = 'api-partner/v1/apps-in-toss/messenger/send-message';
 const exchangeLoginAuthorizationCodePath = 'api-partner/v1/apps-in-toss/user/oauth2/generate-token';
 const getLoginUserPath = 'api-partner/v1/apps-in-toss/user/oauth2/login-me';
 const getIapOrderStatusPath = 'api-partner/v1/apps-in-toss/order/get-order-status';
-const maximumResponseBodyBytes = 256 * 1024;
+const maximumResponseBodyBytes = 256 * 1_024;
 export class AppsInTossPartnerApiError extends Error {
     status;
     code;
@@ -82,7 +82,7 @@ export function createAppsInTossPartnerApiClient(input) {
             return parseLoginToken(envelope.success, response.status);
         },
         async getLoginUser(request) {
-            const accessToken = normalizeOpaqueValue(request.accessToken, 'accessToken', 16384);
+            const accessToken = normalizeOpaqueValue(request.accessToken, 'accessToken', 16_384);
             const response = await requestJson({
                 mtls: input.mtls,
                 method: 'GET',
@@ -233,7 +233,7 @@ function requireSuccessEnvelope(response) {
     const error = isRecord(response.body.error) ? response.body.error : undefined;
     const code = typeof error?.errorCode === 'string' ? error.errorCode : undefined;
     const reason = typeof error?.reason === 'string'
-        ? error.reason.slice(0, 1024)
+        ? error.reason.slice(0, 1_024)
         : 'Apps in Toss partner API request failed.';
     throw new AppsInTossPartnerApiError(reason, response.status, code);
 }
@@ -261,10 +261,10 @@ function parseLoginToken(input, status) {
     }
     return {
         tokenType,
-        accessToken: requireOpaqueValue(input.accessToken, 'accessToken', status, 16384),
-        refreshToken: requireOpaqueValue(input.refreshToken, 'refreshToken', status, 16384),
+        accessToken: requireOpaqueValue(input.accessToken, 'accessToken', status, 16_384),
+        refreshToken: requireOpaqueValue(input.refreshToken, 'refreshToken', status, 16_384),
         expiresInSeconds: requirePositiveInteger(input.expiresIn, 'expiresIn', status),
-        scope: requireOpaqueValue(input.scope, 'scope', status, 4096),
+        scope: requireOpaqueValue(input.scope, 'scope', status, 4_096),
     };
 }
 function parseLoginUser(input, status) {
@@ -273,7 +273,7 @@ function parseLoginUser(input, status) {
     }
     return {
         userKey: requireTossUserKey(input.userKey, 'userKey', status),
-        scope: requireOpaqueValue(input.scope, 'scope', status, 4096),
+        scope: requireOpaqueValue(input.scope, 'scope', status, 4_096),
     };
 }
 function parseIapOrderStatus(input, status) {
@@ -286,13 +286,13 @@ function parseIapOrderStatus(input, status) {
     }
     const reason = input.reason;
     return {
-        orderId: requireOpaqueValue(input.orderId, 'orderId', status, 2048),
-        sku: requireOpaqueValue(input.sku, 'sku', status, 2048),
-        statusDeterminedAt: requireOpaqueValue(input.statusDeterminedAt, 'statusDeterminedAt', status, 2048),
+        orderId: requireOpaqueValue(input.orderId, 'orderId', status, 2_048),
+        sku: requireOpaqueValue(input.sku, 'sku', status, 2_048),
+        statusDeterminedAt: requireOpaqueValue(input.statusDeterminedAt, 'statusDeterminedAt', status, 2_048),
         status: orderStatus,
         ...(reason === undefined
             ? {}
-            : { reason: requireOpaqueValue(reason, 'reason', status, 4096) }),
+            : { reason: requireOpaqueValue(reason, 'reason', status, 4_096) }),
     };
 }
 const appsInTossIapOrderStatuses = new Set([
@@ -358,7 +358,7 @@ function normalizeContext(input) {
 function normalizeIdentifier(value, field) {
     const normalized = value.trim();
     if (normalized.length === 0
-        || normalized.length > 2048
+        || normalized.length > 2_048
         || /[\p{Cc}\p{Cf}]/u.test(normalized)) {
         throw new TypeError(`${field} must contain 1 to 2048 characters without control or format characters.`);
     }
@@ -444,7 +444,7 @@ function normalizeBaseUrl(input) {
 }
 function normalizeTimeout(value) {
     const timeoutMs = value ?? defaultAppsInTossPartnerApiTimeoutMs;
-    if (!Number.isFinite(timeoutMs) || timeoutMs <= 0 || timeoutMs > 60000) {
+    if (!Number.isFinite(timeoutMs) || timeoutMs <= 0 || timeoutMs > 60_000) {
         throw new TypeError('AIT partner API timeoutMs must be between 1 and 60000.');
     }
     return timeoutMs;

package/dist/microsoft-store-identity.js

@@ -1,7 +1,7 @@
 export const microsoftStoreIdentityCredentialsSchema = 'mpgd.microsoft-store.identity-credentials.v1';
 export const microsoftStoreIdentityCredentialsRequestUrl = 'https://microsoft-store-authority.internal/v1/credentials';
-const defaultTimeoutMs = 8000;
-const maximumResponseBytes = 16 * 1024;
+const defaultTimeoutMs = 8_000;
+const maximumResponseBytes = 16 * 1_024;
 const gameIdPattern = /^[a-z0-9][a-z0-9-]{0,63}$/u;
 export class MicrosoftStoreIdentityAuthorityError extends Error {
     code;
@@ -45,8 +45,8 @@ export function parseMicrosoftStoreIdentityCredentialsResponse(value, expectedRe
         schema: microsoftStoreIdentityCredentialsSchema,
         gameId: requireGameId(record.gameId),
         playerId: requireText(record.playerId, 'response playerId', 256),
-        accessToken: requireToken(record.accessToken, 'Microsoft Store access token', 4096),
-        userStoreId: requireToken(record.userStoreId, 'Microsoft Store User Store ID', 4096),
+        accessToken: requireToken(record.accessToken, 'Microsoft Store access token', 4_096),
+        userStoreId: requireToken(record.userStoreId, 'Microsoft Store User Store ID', 4_096),
         accountBindingId: requireText(record.accountBindingId, 'Microsoft Store account binding ID', 512),
         ...(record.sandbox === undefined
             ? {}
@@ -71,7 +71,7 @@ export async function resolveMicrosoftStoreIdentityCredentials(input) {
         playerId: input.playerId,
     });
     const timeoutMs = input.timeoutMs ?? defaultTimeoutMs;
-    if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 25000) {
+    if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 25_000) {
         throw new TypeError('Microsoft Store identity timeout is invalid.');
     }
     const abort = createAbortScope(input.signal, timeoutMs);

package/dist/notification-delivery.js

@@ -17,7 +17,7 @@ const notificationTopics = new Set([
     'streak-at-risk',
     'friend-challenge',
 ]);
-const defaultClaimLeaseMs = 5 * 60 * 1000;
+const defaultClaimLeaseMs = 5 * 60 * 1_000;
 const maxCompletionAttempts = 3;
 const maxNotificationTemplateDataEntries = 128;
 /** Throw only when the provider can prove that no external send was attempted. */
@@ -322,7 +322,7 @@ function normalizeTemplateData(input) {
         if (typeof value === 'number' && !Number.isFinite(value)) {
             throw new Error(`templateData.${key} must be a finite number.`);
         }
-        if (typeof value === 'string' && value.length > 16384) {
+        if (typeof value === 'string' && value.length > 16_384) {
             throw new Error(`templateData.${key} must contain at most 16384 characters.`);
         }
         return [normalizedKey, value];
@@ -390,7 +390,7 @@ function normalizeLeaseDuration(input) {
     if (typeof input !== 'number'
         || !Number.isSafeInteger(input)
         || input <= 0
-        || input > 24 * 60 * 60 * 1000) {
+        || input > 24 * 60 * 60 * 1_000) {
         throw new Error('claimLeaseMs must be a positive integer no greater than 24 hours.');
     }
     return input;
@@ -427,7 +427,7 @@ function assertRecord(input, label) {
 function normalizeIdentifier(input, label) {
     if (typeof input !== 'string'
         || input.length === 0
-        || input.length > 2048
+        || input.length > 2_048
         || input.trim() !== input) {
         throw new Error(`${label} must be a non-empty, trimmed string.`);
     }

package/dist/progress-link.js

@@ -4,8 +4,8 @@ export const gameProgressLimits = {
     maxCompletedIds: 512,
     maxMetricEntries: 512,
     maxPayloadDepth: 16,
-    maxPayloadNodes: 2048,
-    maxPayloadStringUnits: 32768,
+    maxPayloadNodes: 2_048,
+    maxPayloadStringUnits: 32_768,
 };
 const snapshotFields = new Set(['completedIds', 'bestTimesMs', 'bestScores', 'activeProgress']);
 const activeProgressFields = new Set(['id', 'updatedAt', 'payload']);

package/dist/server.js

@@ -994,14 +994,14 @@ function matchesEntitlementTransactionIdentity(transaction, identity) {
         && transaction.payload.deploymentTarget === identity.deploymentTarget;
 }
 function resolveEvidenceVerificationTimeout(timeoutMs) {
-    const resolved = timeoutMs ?? 10000;
+    const resolved = timeoutMs ?? 10_000;
     if (!Number.isFinite(resolved) || resolved <= 0) {
         throw new Error('evidenceVerificationTimeoutMs must be a positive finite number.');
     }
     return resolved;
 }
 function resolvePurchaseGrantFinalizationTimeout(timeoutMs) {
-    const resolved = timeoutMs ?? 15000;
+    const resolved = timeoutMs ?? 15_000;
     if (!Number.isFinite(resolved) || resolved <= 0) {
         throw new Error('purchaseGrantFinalizationTimeoutMs must be a positive finite number.');
     }

package/dist/verified-leaderboard-conformance.js

@@ -71,7 +71,7 @@ async function runFirstSelectionAndSnapshotScenario(context) {
         participantLabel: 'First Player',
         attemptId: 'attempt:later',
         score: 20,
-        metrics: { elapsedMs: 20000, hints: 1, mistakes: 2 },
+        metrics: { elapsedMs: 20_000, hints: 1, mistakes: 2 },
         completedAt: '2030-01-02T02:02:00.000Z',
     });
     const laterRecord = await context.service.recordVerifiedAttempt(laterRequest);
@@ -81,7 +81,7 @@ async function runFirstSelectionAndSnapshotScenario(context) {
         participantLabel: 'First Player',
         attemptId: 'attempt:earlier',
         score: 30,
-        metrics: { elapsedMs: 30000, hints: 0, mistakes: 1 },
+        metrics: { elapsedMs: 30_000, hints: 0, mistakes: 1 },
         completedAt: '2030-01-02T02:01:00.000Z',
     }));
     await context.service.recordVerifiedAttempt(createAttempt({
@@ -99,12 +99,12 @@ async function runFirstSelectionAndSnapshotScenario(context) {
         participantLabel: 'First Player',
         attemptId: 'attempt:latest',
         score: 5,
-        metrics: { elapsedMs: 5000, hints: 2, mistakes: 0 },
+        metrics: { elapsedMs: 5_000, hints: 2, mistakes: 0 },
         completedAt: '2030-01-02T02:04:00.000Z',
     }));
     assertEqual(latestRecord.retained, false, 'later completions must not replace the earliest retained attempt');
     assertEqual(latestRecord.entry.attemptId, 'attempt:earlier', 'rejected later attempts must report the retained earliest attempt');
-    assertEqual(latestRecord.entry.metrics?.elapsedMs, 30000, 'rejected attempts must report the retained entry metrics');
+    assertEqual(latestRecord.entry.metrics?.elapsedMs, 30_000, 'rejected attempts must report the retained entry metrics');
     const snapshot = await context.service.getSnapshot({
         leaderboardId: 'first:board',
         participantId: 'participant:first',
@@ -314,7 +314,7 @@ async function runIdentityAndDefinitionConflictsScenario(context) {
         participantLabel: 'Original Label',
         attemptId: 'attempt:identity',
         score: 42,
-        metrics: { elapsedMs: 42000, hints: 1, mistakes: 2 },
+        metrics: { elapsedMs: 42_000, hints: 1, mistakes: 2 },
         completedAt: '2030-01-02T02:30:00.000Z',
     });
     await context.service.recordVerifiedAttempt(request);
@@ -323,7 +323,7 @@ async function runIdentityAndDefinitionConflictsScenario(context) {
         attempt: {
             ...request.attempt,
             participantLabel: 'Changed Label',
-            metrics: { mistakes: 2, elapsedMs: 42000, hints: 1 },
+            metrics: { mistakes: 2, elapsedMs: 42_000, hints: 1 },
             completedAt: '2030-01-02T11:30:00.000+09:00',
             verification: {
                 ...request.attempt.verification,
@@ -334,7 +334,7 @@ async function runIdentityAndDefinitionConflictsScenario(context) {
     assertEqual(equivalentRetry.alreadyProcessed, true, 'equivalent retries must be idempotent');
     assertEqual(equivalentRetry.entry.participantLabel, 'Original Label', 'retry labels must not rewrite stored presentation metadata');
     assertEqual(equivalentRetry.entry.completedAt, request.attempt.completedAt, 'equivalent retries must preserve the original timestamp representation');
-    assertEqual(equivalentRetry.entry.metrics?.elapsedMs, 42000, 'equivalent retries must preserve the original metrics');
+    assertEqual(equivalentRetry.entry.metrics?.elapsedMs, 42_000, 'equivalent retries must preserve the original metrics');
     await assertRejects(() => context.service.recordVerifiedAttempt({
         ...request,
         attempt: { ...request.attempt, score: 43 },
@@ -343,7 +343,7 @@ async function runIdentityAndDefinitionConflictsScenario(context) {
         ...request,
         attempt: {
             ...request.attempt,
-            metrics: { elapsedMs: 42000, hints: 0, mistakes: 2 },
+            metrics: { elapsedMs: 42_000, hints: 0, mistakes: 2 },
         },
     }), 'attempt IDs reused with different metrics must fail closed');
     await assertRejects(() => context.service.recordVerifiedAttempt({
@@ -432,7 +432,7 @@ async function runMutationIsolationScenario(context) {
         participantLabel: 'Stable Label',
         attemptId: 'attempt:mutation',
         score: 50,
-        metrics: { elapsedMs: 50000, hints: 1, mistakes: 2 },
+        metrics: { elapsedMs: 50_000, hints: 1, mistakes: 2 },
         completedAt: '2030-01-02T02:50:00.000Z',
     });
     const response = await context.service.recordVerifiedAttempt(request);
@@ -465,7 +465,7 @@ async function runMutationIsolationScenario(context) {
     assert(participantEntry !== undefined, 'participant reads must return the retained entry');
     assertEqual(snapshot.definition.scoreOrder, 'ascending', 'stored definitions must be cloned');
     assertEqual(snapshotEntry.score, 50, 'stored attempts must resist caller mutation');
-    assertEqual(snapshotEntry.metrics?.elapsedMs, 50000, 'stored metrics must be cloned');
+    assertEqual(snapshotEntry.metrics?.elapsedMs, 50_000, 'stored metrics must be cloned');
     assertEqual(snapshotEntry.participantLabel, 'Stable Label', 'response mutation must not rewrite retained entries');
     try {
         Object.assign(snapshot.definition, { scoreOrder: 'descending' });
@@ -510,7 +510,7 @@ async function runMutationIsolationScenario(context) {
     assertEqual(rereadSnapshot?.definition.scoreOrder, 'ascending', 'snapshot definition mutation must not rewrite stored policy');
     assertEqual(rereadSnapshot?.entries[0]?.score, 50, 'snapshot entry mutation must not rewrite retained attempts');
     assertEqual(rereadSnapshot?.entries[0]?.participantLabel, 'Stable Label', 'snapshot label mutation must not rewrite presentation metadata');
-    assertEqual(rereadSnapshot?.entries[0]?.metrics?.elapsedMs, 50000, 'snapshot metric mutation must not rewrite retained metrics');
+    assertEqual(rereadSnapshot?.entries[0]?.metrics?.elapsedMs, 50_000, 'snapshot metric mutation must not rewrite retained metrics');
     assertEqual(rereadSnapshot?.entries.length, 1, 'snapshot array mutation must not rewrite retained entries');
     assertEqual(rereadSnapshot?.participantEntry?.score, 50, 'participant entry mutation must not rewrite retained attempts');
     assertEqual(rereadSnapshot?.participantEntry?.participantLabel, 'Stable Label', 'participant entry mutation must not rewrite presentation metadata');

package/dist/verified-leaderboard.js

@@ -572,7 +572,7 @@ function parseTimestamp(input) {
     const offsetDirection = match[9] === '-' ? -1 : 1;
     const offsetMilliseconds = offsetDirection
         * (offsetHour * 60 + offsetMinute)
-        * 60000;
+        * 60_000;
     return localTime.getTime() - offsetMilliseconds;
 }
 function compareOrdinal(left, right) {
@@ -601,7 +601,7 @@ function assertOptionalCursor(input) {
     }
     if (typeof input !== 'string'
         || input.length === 0
-        || input.length > 65536
+        || input.length > 65_536
         || !/^[A-Za-z0-9_-]+$/u.test(input)) {
         throw new VerifiedLeaderboardCursorError('cursor must be a base64url string no longer than 65536 characters.');
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mpgd/game-services",
-  "version": "0.15.1",
+  "version": "0.15.2",
   "description": "Client, contract, server, store, and test helpers for authoritative mpgd game services.",
   "license": "MIT",
   "repository": {
@@ -138,12 +138,12 @@
     "@orpc/client": "2.0.0-beta.14",
     "@orpc/contract": "2.0.0-beta.14",
     "@orpc/server": "2.0.0-beta.14",
-    "@mpgd/analytics": "0.3.12",
-    "@mpgd/catalog": "0.7.2",
-    "@mpgd/platform": "0.12.0"
+    "@mpgd/catalog": "0.7.3",
+    "@mpgd/platform": "0.12.1",
+    "@mpgd/analytics": "0.3.13"
   },
   "devDependencies": {
-    "ttsc": "0.18.4",
+    "ttsc": "0.30.4",
     "typescript": "7.0.2"
   },
   "main": "./dist/index.js",