@omnitronix/game-engine-sdk 1.0.2 → 1.0.3

package/dist/bootstrap/index.d.ts

@@ -5,6 +5,8 @@ export interface GameEngineAppOptions {
     bootstrapOptions?: {
         driver: 'database' | 'in-memory';
     };
+    /** Allowed CORS origins. Defaults to false (CORS disabled). */
+    corsOrigins?: string[] | boolean;
 }
 /**
  * Creates and bootstraps a game engine NestJS application with

package/dist/bootstrap/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/bootstrap/index.ts"],"names":[],"mappings":"AAUA,OAAO,EAAsD,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAK1F,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,gBAAgB,CAAC,EAAE;QAAE,MAAM,EAAE,UAAU,GAAG,WAAW,CAAA;KAAE,CAAC;CACzD;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,2DAwHtE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/bootstrap/index.ts"],"names":[],"mappings":"AAUA,OAAO,EAAsD,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAK1F,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,gBAAgB,CAAC,EAAE;QAAE,MAAM,EAAE,UAAU,GAAG,WAAW,CAAA;KAAE,CAAC;IACxD,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;CAClC;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,2DA0HtE"}

package/dist/bootstrap/index.js

@@ -51,7 +51,7 @@ const http2 = __importStar(require("http2"));
  * Swagger docs, Connect RPC gRPC server, and graceful shutdown.
  */
 async function createGameEngineApp(options) {
-    const { serviceName, appModule, bootstrapOptions } = options;
+    const { serviceName, appModule, bootstrapOptions, corsOrigins = false } = options;
     const logger = new logger_1.Logger(serviceName);
     const moduleArg = bootstrapOptions
         ? appModule.register
@@ -61,7 +61,9 @@ async function createGameEngineApp(options) {
     const app = await core_1.NestFactory.create(moduleArg, {
         logger: logger,
     });
-    app.enableCors({ origin: true });
+    if (corsOrigins) {
+        app.enableCors({ origin: corsOrigins });
+    }
     const configService = app.get(config_1.ConfigService);
     const shutdownService = app.get(shutdown_out_port_1.SHUTDOWN_OUT_PORT);
     let isShuttingDown = false;

package/dist/common/api-docs/setup-documentation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup-documentation.d.ts","sourceRoot":"","sources":["../../../src/common/api-docs/setup-documentation.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAMlD,eAAO,MAAM,kBAAkB,GAC7B,KAAK,gBAAgB,CAAC,GAAG,CAAC,EAC1B,MAAM,MAAM,EACZ,cAAc,MAAM,kBAqBrB,CAAC"}
+{"version":3,"file":"setup-documentation.d.ts","sourceRoot":"","sources":["../../../src/common/api-docs/setup-documentation.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAMlD,eAAO,MAAM,kBAAkB,GAC7B,KAAK,gBAAgB,CAAC,GAAG,CAAC,EAC1B,MAAM,MAAM,EACZ,cAAc,MAAM,kBA0BrB,CAAC"}

package/dist/common/api-docs/setup-documentation.js

@@ -5,6 +5,10 @@ const swagger_1 = require("@nestjs/swagger");
 const logger_1 = require("../logger/logger");
 const logger = new logger_1.Logger('ApiDocs');
 const setupDocumentation = async (app, port, serviceName) => {
+    if (process.env.NODE_ENV === 'production' && process.env.ENABLE_SWAGGER !== 'true') {
+        logger.log('Swagger docs disabled in production (set ENABLE_SWAGGER=true to override)');
+        return;
+    }
     const config = new swagger_1.DocumentBuilder()
         .setTitle(serviceName ? `${serviceName} API` : 'Game Engine API')
         .setDescription('API documentation')

package/dist/common/error-handling/all-exceptions.filter.js

@@ -100,7 +100,7 @@ let ExceptionsFilter = ExceptionsFilter_1 = class ExceptionsFilter {
         return this.buildResponsePayload({
             status: common_1.HttpStatus.INTERNAL_SERVER_ERROR,
             internalCode: internal_error_code_1.InternalErrorCode.INTERNAL_SERVER_ERROR,
-            message: exception.message,
+            message: 'Internal server error',
             path: request.url,
         });
     }

package/dist/common/logger/logging.middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logging.middleware.d.ts","sourceRoot":"","sources":["../../../src/common/logger/logging.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAM1D,qBACa,iBAAkB,YAAW,cAAc;IACtD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;;IAMhC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY;CAwBpD"}
+{"version":3,"file":"logging.middleware.d.ts","sourceRoot":"","sources":["../../../src/common/logger/logging.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AA4B1D,qBACa,iBAAkB,YAAW,cAAc;IACtD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;;IAMhC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY;CAkBpD"}

package/dist/common/logger/logging.middleware.js

@@ -14,19 +14,37 @@ exports.LoggingMiddleware = void 0;
 const common_1 = require("@nestjs/common");
 const logger_1 = require("./logger");
 const BLOCKED_ENDPOINTS = ['/api/races/active'];
+const SENSITIVE_FIELDS = new Set([
+    'password', 'token', 'secret', 'authorization',
+    'apikey', 'api_key', 'accesstoken', 'refreshtoken',
+    'creditcard', 'ssn', 'private_key', 'privatekey',
+]);
+function sanitize(obj) {
+    if (obj === null || obj === undefined || typeof obj !== 'object')
+        return obj;
+    if (Array.isArray(obj))
+        return obj.map(sanitize);
+    const result = {};
+    for (const [key, value] of Object.entries(obj)) {
+        if (SENSITIVE_FIELDS.has(key.toLowerCase())) {
+            result[key] = '***';
+        }
+        else if (typeof value === 'object' && value !== null) {
+            result[key] = sanitize(value);
+        }
+        else {
+            result[key] = value;
+        }
+    }
+    return result;
+}
 let LoggingMiddleware = LoggingMiddleware_1 = class LoggingMiddleware {
     constructor() {
         this.logger = new logger_1.Logger(LoggingMiddleware_1.name);
     }
     use(req, res, next) {
         const { method, originalUrl, body } = req;
-        const sanitizedBody = { ...body };
-        if (sanitizedBody.password) {
-            sanitizedBody.password = '***';
-        }
-        if (sanitizedBody.token) {
-            sanitizedBody.token = '***';
-        }
+        const sanitizedBody = sanitize(body);
         res.on('finish', () => {
             const isBlockedEndpoint = BLOCKED_ENDPOINTS.some(endpoint => originalUrl.includes(endpoint));
             const isSuccessfulRequest = res.statusCode < 400;

package/dist/esm/bootstrap/index.js

@@ -15,7 +15,7 @@ import * as http2 from 'http2';
  * Swagger docs, Connect RPC gRPC server, and graceful shutdown.
  */
 export async function createGameEngineApp(options) {
-    const { serviceName, appModule, bootstrapOptions } = options;
+    const { serviceName, appModule, bootstrapOptions, corsOrigins = false } = options;
     const logger = new Logger(serviceName);
     const moduleArg = bootstrapOptions
         ? appModule.register
@@ -25,7 +25,9 @@ export async function createGameEngineApp(options) {
     const app = await NestFactory.create(moduleArg, {
         logger: logger,
     });
-    app.enableCors({ origin: true });
+    if (corsOrigins) {
+        app.enableCors({ origin: corsOrigins });
+    }
     const configService = app.get(ConfigService);
     const shutdownService = app.get(SHUTDOWN_OUT_PORT);
     let isShuttingDown = false;

package/dist/esm/common/api-docs/setup-documentation.js

@@ -2,6 +2,10 @@ import { DocumentBuilder, SwaggerModule } from '@nestjs/swagger';
 import { Logger } from '../logger/logger';
 const logger = new Logger('ApiDocs');
 export const setupDocumentation = async (app, port, serviceName) => {
+    if (process.env.NODE_ENV === 'production' && process.env.ENABLE_SWAGGER !== 'true') {
+        logger.log('Swagger docs disabled in production (set ENABLE_SWAGGER=true to override)');
+        return;
+    }
     const config = new DocumentBuilder()
         .setTitle(serviceName ? `${serviceName} API` : 'Game Engine API')
         .setDescription('API documentation')

package/dist/esm/common/error-handling/all-exceptions.filter.js

@@ -97,7 +97,7 @@ let ExceptionsFilter = ExceptionsFilter_1 = class ExceptionsFilter {
         return this.buildResponsePayload({
             status: HttpStatus.INTERNAL_SERVER_ERROR,
             internalCode: InternalErrorCode.INTERNAL_SERVER_ERROR,
-            message: exception.message,
+            message: 'Internal server error',
             path: request.url,
         });
     }

package/dist/esm/common/logger/logging.middleware.js

@@ -11,19 +11,37 @@ var LoggingMiddleware_1;
 import { Injectable } from '@nestjs/common';
 import { Logger } from './logger';
 const BLOCKED_ENDPOINTS = ['/api/races/active'];
+const SENSITIVE_FIELDS = new Set([
+    'password', 'token', 'secret', 'authorization',
+    'apikey', 'api_key', 'accesstoken', 'refreshtoken',
+    'creditcard', 'ssn', 'private_key', 'privatekey',
+]);
+function sanitize(obj) {
+    if (obj === null || obj === undefined || typeof obj !== 'object')
+        return obj;
+    if (Array.isArray(obj))
+        return obj.map(sanitize);
+    const result = {};
+    for (const [key, value] of Object.entries(obj)) {
+        if (SENSITIVE_FIELDS.has(key.toLowerCase())) {
+            result[key] = '***';
+        }
+        else if (typeof value === 'object' && value !== null) {
+            result[key] = sanitize(value);
+        }
+        else {
+            result[key] = value;
+        }
+    }
+    return result;
+}
 let LoggingMiddleware = LoggingMiddleware_1 = class LoggingMiddleware {
     constructor() {
         this.logger = new Logger(LoggingMiddleware_1.name);
     }
     use(req, res, next) {
         const { method, originalUrl, body } = req;
-        const sanitizedBody = { ...body };
-        if (sanitizedBody.password) {
-            sanitizedBody.password = '***';
-        }
-        if (sanitizedBody.token) {
-            sanitizedBody.token = '***';
-        }
+        const sanitizedBody = sanitize(body);
         res.on('finish', () => {
             const isBlockedEndpoint = BLOCKED_ENDPOINTS.some(endpoint => originalUrl.includes(endpoint));
             const isSuccessfulRequest = res.statusCode < 400;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@omnitronix/game-engine-sdk",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "Shared NestJS infrastructure SDK for Omnitronix game engine services",
   "main": "dist/index.js",
   "module": "dist/esm/index.js",