@mpgd/game-services 0.16.0 → 0.17.1

package/dist/types.js

@@ -1,18 +1,26 @@
+import { assertOwnEnumerablePropertyLimit, gameServicesRequestLimits, toGameServicesRequestValidationError, } from './validation.js';
+/**
+ * Validates an untrusted purchase verification request. Failures throw
+ * `GameServicesRequestValidationError` so transports can answer with a stable 400.
+ */
 export function assertVerifyPurchaseRequest(input) {
-    assertRecord(input, 'VerifyPurchaseRequest');
-    assertStoreTarget(input.target);
-    assertOptionalGameServicesDeploymentTarget(input.deploymentTarget);
-    assertNonEmptyString(input.playerId, 'playerId');
-    assertNonEmptyString(input.productId, 'productId');
-    assertNonEmptyString(input.platformTransactionId, 'platformTransactionId');
-    assertNonEmptyString(input.idempotencyKey, 'idempotencyKey');
-    assertNonEmptyString(input.purchasedAt, 'purchasedAt');
-    assertOptionalEvidenceEnvelope(input.evidence);
-    return input;
+    return validateRequest(() => {
+        assertRecord(input, 'VerifyPurchaseRequest');
+        assertStoreTarget(input.target);
+        assertOptionalGameServicesDeploymentTarget(input.deploymentTarget);
+        assertRequestString(input.playerId, 'playerId');
+        assertRequestString(input.productId, 'productId');
+        assertRequestString(input.platformTransactionId, 'platformTransactionId');
+        assertRequestString(input.idempotencyKey, 'idempotencyKey');
+        assertRequestString(input.purchasedAt, 'purchasedAt');
+        assertOptionalEvidenceEnvelope(input.evidence);
+        return input;
+    });
 }
 export function assertVerifyPurchaseResponse(input) {
     assertRecord(input, 'VerifyPurchaseResponse');
     assertBoolean(input.verified, 'verified');
+    assertOptionalNonGrantDisposition(input.disposition, input.verified);
     assertOptionalNonEmptyString(input.ledgerEntryId, 'ledgerEntryId');
     assertBoolean(input.alreadyProcessed, 'alreadyProcessed');
     assertOptionalNonEmptyString(input.reason, 'reason');
@@ -42,35 +50,49 @@ export function assertPurchaseGrantFinalization(input) {
     }
     return input;
 }
+/**
+ * Validates an untrusted ad reward claim. Failures throw
+ * `GameServicesRequestValidationError` so transports can answer with a stable 400.
+ */
 export function assertClaimAdRewardRequest(input) {
-    assertRecord(input, 'ClaimAdRewardRequest');
-    assertAdRewardTarget(input.target);
-    assertOptionalGameServicesDeploymentTarget(input.deploymentTarget);
-    assertNonEmptyString(input.playerId, 'playerId');
-    assertNonEmptyString(input.placementId, 'placementId');
-    assertOptionalNonEmptyString(input.platformImpressionId, 'platformImpressionId');
-    assertNonEmptyString(input.idempotencyKey, 'idempotencyKey');
-    assertNonEmptyString(input.completedAt, 'completedAt');
-    assertOptionalEvidenceEnvelope(input.evidence);
-    return input;
+    return validateRequest(() => {
+        assertRecord(input, 'ClaimAdRewardRequest');
+        assertAdRewardTarget(input.target);
+        assertOptionalGameServicesDeploymentTarget(input.deploymentTarget);
+        assertRequestString(input.playerId, 'playerId');
+        assertRequestString(input.placementId, 'placementId');
+        assertOptionalRequestString(input.platformImpressionId, 'platformImpressionId');
+        assertRequestString(input.idempotencyKey, 'idempotencyKey');
+        assertRequestString(input.completedAt, 'completedAt');
+        assertOptionalEvidenceEnvelope(input.evidence);
+        return input;
+    });
 }
 export function assertClaimAdRewardResponse(input) {
     assertRecord(input, 'ClaimAdRewardResponse');
     assertBoolean(input.granted, 'granted');
+    assertOptionalNonGrantDisposition(input.disposition, input.granted);
     assertOptionalNonEmptyString(input.ledgerEntryId, 'ledgerEntryId');
     assertBoolean(input.alreadyProcessed, 'alreadyProcessed');
     assertOptionalNonEmptyString(input.reason, 'reason');
     return input;
 }
+/**
+ * Validates an untrusted leaderboard score submission. Failures throw
+ * `GameServicesRequestValidationError` so transports can answer with a stable 400.
+ */
 export function assertRecordLeaderboardScoreRequest(input) {
+    return validateRequest(() => validateRecordLeaderboardScoreRequest(input));
+}
+function validateRecordLeaderboardScoreRequest(input) {
     assertRecord(input, 'RecordLeaderboardScoreRequest');
     assertLeaderboardTarget(input.target);
-    assertNonEmptyString(input.playerId, 'playerId');
-    assertNonEmptyString(input.leaderboardId, 'leaderboardId');
+    assertRequestString(input.playerId, 'playerId');
+    assertRequestString(input.leaderboardId, 'leaderboardId');
     assertFiniteNumber(input.score, 'score');
-    assertNonEmptyString(input.runId, 'runId');
-    assertNonEmptyString(input.submittedAt, 'submittedAt');
-    assertOptionalNonEmptyString(input.platformSubmissionId, 'platformSubmissionId');
+    assertRequestString(input.runId, 'runId');
+    assertRequestString(input.submittedAt, 'submittedAt');
+    assertOptionalRequestString(input.platformSubmissionId, 'platformSubmissionId');
     return input;
 }
 export function assertRecordLeaderboardScoreResponse(input) {
@@ -117,7 +139,7 @@ export function assertProductGrantTransaction(input) {
     return input;
 }
 export function assertLeaderboardScoreTransaction(input) {
-    assertRecordLeaderboardScoreRequest(input);
+    validateRecordLeaderboardScoreRequest(input);
     assertNonEmptyString(input.ledgerEntryId, 'ledgerEntryId');
     assertNonEmptyString(input.recordedAt, 'recordedAt');
     return input;
@@ -178,11 +200,31 @@ function assertLeaderboardTarget(input) {
         throw new Error('target must be browser, microsoft-store, android, ios, ait, or reddit.');
     }
 }
+function validateRequest(validate) {
+    try {
+        return validate();
+    }
+    catch (error) {
+        throw toGameServicesRequestValidationError(error);
+    }
+}
 function assertNonEmptyString(input, label) {
     if (typeof input !== 'string' || input.length === 0) {
         throw new Error(`${label} must be a non-empty string.`);
     }
 }
+/** Client-supplied identifiers feed ledger keys, so they are bounded as well as non-empty. */
+function assertRequestString(input, label) {
+    assertNonEmptyString(input, label);
+    if (input.length > gameServicesRequestLimits.maxStringLength) {
+        throw new Error(`${label} must not exceed ${String(gameServicesRequestLimits.maxStringLength)} characters.`);
+    }
+}
+function assertOptionalRequestString(input, label) {
+    if (input !== undefined) {
+        assertRequestString(input, label);
+    }
+}
 function assertOptionalNonEmptyString(input, label) {
     if (input !== undefined) {
         assertNonEmptyString(input, label);
@@ -198,6 +240,17 @@ function assertBoolean(input, label) {
         throw new Error(`${label} must be a boolean.`);
     }
 }
+function assertOptionalNonGrantDisposition(input, granted) {
+    if (input === undefined) {
+        return;
+    }
+    if (input !== 'pending' && input !== 'rejected') {
+        throw new Error('disposition must be pending or rejected.');
+    }
+    if (granted) {
+        throw new Error('A granted result cannot have a non-grant disposition.');
+    }
+}
 function assertPurchaseGrantFinalizationAction(input) {
     if (input !== 'acknowledge'
         && input !== 'consume'
@@ -248,6 +301,7 @@ function assertOptionalEvidenceEnvelope(input) {
         return;
     }
     assertRecord(input, 'evidence');
-    assertNonEmptyString(input.schema, 'evidence.schema');
+    assertRequestString(input.schema, 'evidence.schema');
     assertPayload(input.payload);
+    assertOwnEnumerablePropertyLimit(input.payload, gameServicesRequestLimits.maxEvidencePayloadEntries, 'evidence.payload');
 }

package/dist/validation.d.ts

@@ -1 +1,19 @@
+/** Hard limits applied to untrusted client requests before they reach ledger keys. */
+export declare const gameServicesRequestLimits: {
+  /** Maximum length of any identifier or timestamp string in a client request. */
+  readonly maxStringLength: 256;
+  /** Maximum number of entries accepted inside a platform evidence payload. */
+  readonly maxEvidencePayloadEntries: 64;
+  /** Maximum request body size accepted by the HTTP and oRPC fetch handlers. */
+  readonly maxBodyBytes: number;
+};
+/**
+* A client-supplied request failed validation. Handlers map this error to a 400 response
+* with the stable `INVALID_REQUEST` code; every other error is treated as internal.
+*/
+export declare class GameServicesRequestValidationError extends Error {
+  readonly code = "INVALID_REQUEST";
+  constructor(message: string);
+}
+export declare function toGameServicesRequestValidationError(error: unknown): GameServicesRequestValidationError;
 export declare function assertOwnEnumerablePropertyLimit(input: Record<string, unknown>, maximum: number, label: string): void;

package/dist/validation.js

@@ -1,3 +1,29 @@
+/** Hard limits applied to untrusted client requests before they reach ledger keys. */
+export const gameServicesRequestLimits = {
+    /** Maximum length of any identifier or timestamp string in a client request. */
+    maxStringLength: 256,
+    /** Maximum number of entries accepted inside a platform evidence payload. */
+    maxEvidencePayloadEntries: 64,
+    /** Maximum request body size accepted by the HTTP and oRPC fetch handlers. */
+    maxBodyBytes: 64 * 1024,
+};
+/**
+ * A client-supplied request failed validation. Handlers map this error to a 400 response
+ * with the stable `INVALID_REQUEST` code; every other error is treated as internal.
+ */
+export class GameServicesRequestValidationError extends Error {
+    code = 'INVALID_REQUEST';
+    constructor(message) {
+        super(message);
+        this.name = 'GameServicesRequestValidationError';
+    }
+}
+export function toGameServicesRequestValidationError(error) {
+    if (error instanceof GameServicesRequestValidationError) {
+        return error;
+    }
+    return new GameServicesRequestValidationError(error instanceof Error ? error.message : 'Request validation failed.');
+}
 export function assertOwnEnumerablePropertyLimit(input, maximum, label) {
     let propertyCount = 0;
     for (const key in input) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mpgd/game-services",
-  "version": "0.16.0",
+  "version": "0.17.1",
   "description": "Client, contract, server, store, and test helpers for authoritative mpgd game services.",
   "license": "MIT",
   "repository": {
@@ -29,6 +29,10 @@
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
     },
+    "./admob-client-reward": {
+      "types": "./dist/admob-client-reward.d.ts",
+      "default": "./dist/admob-client-reward.js"
+    },
     "./admob-ssv": {
       "types": "./dist/admob-ssv.d.ts",
       "default": "./dist/admob-ssv.js"
@@ -41,6 +45,10 @@
       "types": "./dist/app-store-verifier.d.ts",
       "default": "./dist/app-store-verifier.js"
     },
+    "./app-store-recovery": {
+      "types": "./dist/app-store-recovery.d.ts",
+      "default": "./dist/app-store-recovery.js"
+    },
     "./app-store-verifier-conformance": {
       "types": "./dist/app-store-verifier-conformance.d.ts",
       "default": "./dist/app-store-verifier-conformance.js"
@@ -73,6 +81,10 @@
       "types": "./dist/google-play-purchase.d.ts",
       "default": "./dist/google-play-purchase.js"
     },
+    "./google-play-publisher-client": {
+      "types": "./dist/google-play-publisher-client.d.ts",
+      "default": "./dist/google-play-publisher-client.js"
+    },
     "./guest-session": {
       "types": "./dist/guest-session.d.ts",
       "default": "./dist/guest-session.js"
@@ -142,9 +154,9 @@
     "@orpc/client": "2.0.0-beta.14",
     "@orpc/contract": "2.0.0-beta.14",
     "@orpc/server": "2.0.0-beta.14",
-    "@mpgd/analytics": "0.3.15",
-    "@mpgd/platform": "0.13.0",
-    "@mpgd/catalog": "0.7.5"
+    "@mpgd/analytics": "0.4.0",
+    "@mpgd/catalog": "0.7.6",
+    "@mpgd/platform": "0.14.0"
   },
   "devDependencies": {
     "@opentelemetry/api": "1.9.0",
@@ -163,7 +175,8 @@
     "fix": "ttsc fix",
     "build": "cd ../.. && node tools/run-ttsx.mjs tools/package/build-packages.ts @mpgd/game-services",
     "test:packed-transport": "pnpm build && node test/runtime-transport-package-import.mjs",
-    "test:unit": "cd ../.. && node tools/run-ttsx.mjs packages/game-services/src/client.test.ts && node tools/run-ttsx.mjs packages/game-services/src/client-progress.test.ts && node tools/run-ttsx.mjs packages/game-services/src/runtime.test.ts && node tools/run-ttsx.mjs packages/game-services/src/types.test.ts && node tools/run-ttsx.mjs packages/game-services/src/server.test.ts && node tools/run-ttsx.mjs packages/game-services/src/google-play-purchase.test.ts && node tools/run-ttsx.mjs packages/game-services/src/microsoft-store-purchase.test.ts && node tools/run-ttsx.mjs packages/game-services/src/microsoft-store-identity.test.ts && node tools/run-ttsx.mjs packages/game-services/src/platform-order.test.ts && node tools/run-ttsx.mjs packages/game-services/src/progress-link.test.ts && node tools/run-ttsx.mjs packages/game-services/src/notification-delivery.test.ts && node tools/run-ttsx.mjs packages/game-services/src/admob-ssv.test.ts && node tools/run-ttsx.mjs packages/game-services/src/app-store-verifier.test.ts && node tools/run-ttsx.mjs packages/game-services/src/apps-in-toss-evidence-verification-conformance.test.ts && node tools/run-ttsx.mjs packages/game-services/src/apps-in-toss-partner-api.test.ts && node tools/run-ttsx.mjs packages/game-services/src/verified-leaderboard.test.ts && node tools/run-ttsx.mjs packages/game-services/src/verified-leaderboard-conformance.test.ts && node tools/run-ttsx.mjs packages/game-services/src/verified-leaderboard-durability-conformance.test.ts && node tools/run-ttsx.mjs packages/game-services/src/verified-leaderboard-transport.test.ts && node tools/run-ttsx.mjs packages/game-services/src/guest-session.test.ts",
-    "test": "pnpm test:unit && pnpm test:packed-transport"
+    "test:unit": "cd ../.. && node tools/run-ttsx.mjs packages/game-services/src/client.test.ts && node tools/run-ttsx.mjs packages/game-services/src/client-progress.test.ts && node tools/run-ttsx.mjs packages/game-services/src/runtime.test.ts && node tools/run-ttsx.mjs packages/game-services/src/types.test.ts && node tools/run-ttsx.mjs packages/game-services/src/server.test.ts && node tools/run-ttsx.mjs packages/game-services/src/google-play-purchase.test.ts && node tools/run-ttsx.mjs packages/game-services/src/google-play-publisher-client.test.ts && node tools/run-ttsx.mjs packages/game-services/src/microsoft-store-purchase.test.ts && node tools/run-ttsx.mjs packages/game-services/src/microsoft-store-identity.test.ts && node tools/run-ttsx.mjs packages/game-services/src/platform-order.test.ts && node tools/run-ttsx.mjs packages/game-services/src/progress-link.test.ts && node tools/run-ttsx.mjs packages/game-services/src/notification-delivery.test.ts && node tools/run-ttsx.mjs packages/game-services/src/admob-ssv.test.ts && node tools/run-ttsx.mjs packages/game-services/src/app-store-verifier.test.ts && node tools/run-ttsx.mjs packages/game-services/src/apps-in-toss-evidence-verification-conformance.test.ts && node tools/run-ttsx.mjs packages/game-services/src/apps-in-toss-partner-api.test.ts && node tools/run-ttsx.mjs packages/game-services/src/verified-leaderboard.test.ts && node tools/run-ttsx.mjs packages/game-services/src/verified-leaderboard-conformance.test.ts && node tools/run-ttsx.mjs packages/game-services/src/verified-leaderboard-durability-conformance.test.ts && node tools/run-ttsx.mjs packages/game-services/src/verified-leaderboard-transport.test.ts && node tools/run-ttsx.mjs packages/game-services/src/guest-session.test.ts",
+    "test:recovery": "cd ../.. && node tools/run-ttsx.mjs packages/game-services/src/monetization-recovery.test.ts && node tools/run-ttsx.mjs packages/game-services/src/app-store-recovery.test.ts",
+    "test": "pnpm test:unit && pnpm test:recovery && pnpm test:packed-transport"
   }
 }