@open-core/framework 1.0.9 → 1.0.10

package/dist/runtime/server/controllers/player-export.controller.d.ts

@@ -23,6 +23,8 @@ export declare class PlayerExportController implements InternalPlayerExports {
     isPlayerOnline(accountId: string): boolean;
     getPlayerMeta(clientID: number, key: string): Promise<any>;
     setPlayerMeta(clientID: number, key: string, value: any): void;
+    linkPlayerAccount(clientID: number, accountID: string): void;
+    unlinkPlayerAccount(clientID: number): void;
     getPlayerStates(clientID: number): string[];
     hasPlayerState(clientID: number, state: string): boolean;
     addPlayerState(clientID: number, state: string): void;

package/dist/runtime/server/controllers/player-export.controller.js

@@ -11,6 +11,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
 import { inject } from 'tsyringe';
+import { loggers } from '../../../kernel/logger';
 import { Controller } from '../decorators/controller';
 import { Export } from '../decorators/export';
 import { serializeServerPlayerData } from '../adapter/serialization';
@@ -67,6 +68,27 @@ let PlayerExportController = class PlayerExportController {
     setPlayerMeta(clientID, key, value) {
         this.playerService.setMeta(clientID, key, value);
     }
+    linkPlayerAccount(clientID, accountID) {
+        const player = this.playerService.getByClient(clientID);
+        if (!player)
+            return;
+        player.linkAccount(accountID);
+        loggers.session.debug('Remote player account linked in CORE', {
+            clientID,
+            accountID,
+        });
+    }
+    unlinkPlayerAccount(clientID) {
+        const player = this.playerService.getByClient(clientID);
+        if (!player)
+            return;
+        const previousAccountID = player.accountID;
+        player.unlinkAccount();
+        loggers.session.debug('Remote player account unlinked in CORE', {
+            clientID,
+            accountID: previousAccountID,
+        });
+    }
     // ═══════════════════════════════════════════════════════════════
     // State Management
     // ═══════════════════════════════════════════════════════════════
@@ -141,6 +163,18 @@ __decorate([
     __metadata("design:paramtypes", [Number, String, Object]),
     __metadata("design:returntype", void 0)
 ], PlayerExportController.prototype, "setPlayerMeta", null);
+__decorate([
+    Export(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Number, String]),
+    __metadata("design:returntype", void 0)
+], PlayerExportController.prototype, "linkPlayerAccount", null);
+__decorate([
+    Export(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Number]),
+    __metadata("design:returntype", void 0)
+], PlayerExportController.prototype, "unlinkPlayerAccount", null);
 __decorate([
     Export(),
     __metadata("design:type", Function),

package/dist/runtime/server/implementations/remote/player.remote.d.ts

@@ -35,6 +35,10 @@ export declare class RemotePlayerImplementation extends Players {
      */
     private get core();
     private createPlayerFromData;
+    /**
+     * Proxies remote session mutations to CORE so security-critical data remains authoritative.
+     */
+    private attachAuthoritativeMutators;
     /**
      * Returns a Player instance with real session data from CORE.
      */

package/dist/runtime/server/implementations/remote/player.remote.js

@@ -77,7 +77,73 @@ let RemotePlayerImplementation = class RemotePlayerImplementation extends Player
         return coreExports;
     }
     createPlayerFromData(data) {
-        return createRemoteServerPlayer(data, this.playerAdapters);
+        const player = createRemoteServerPlayer(data, this.playerAdapters);
+        this.attachAuthoritativeMutators(player);
+        return player;
+    }
+    /**
+     * Proxies remote session mutations to CORE so security-critical data remains authoritative.
+     */
+    attachAuthoritativeMutators(player) {
+        const core = this.core;
+        const originalSetMeta = player.setMeta.bind(player);
+        const originalLinkAccount = player.linkAccount.bind(player);
+        const originalUnlinkAccount = player.unlinkAccount.bind(player);
+        const originalAddState = player.addState.bind(player);
+        const originalRemoveState = player.removeState.bind(player);
+        const originalToggleState = player.toggleState.bind(player);
+        player.setMeta = (key, value) => {
+            core.setPlayerMeta(player.clientID, key, value);
+            originalSetMeta(key, value);
+            loggers.session.debug('Remote player meta delegated to CORE', {
+                clientID: player.clientID,
+                key,
+            });
+        };
+        player.linkAccount = (accountID) => {
+            core.linkPlayerAccount(player.clientID, accountID.toString());
+            originalLinkAccount(accountID);
+            loggers.session.debug('Remote player linkAccount delegated to CORE', {
+                clientID: player.clientID,
+                accountID: accountID.toString(),
+            });
+        };
+        player.unlinkAccount = () => {
+            const previousAccountID = player.accountID;
+            core.unlinkPlayerAccount(player.clientID);
+            originalUnlinkAccount();
+            loggers.session.debug('Remote player unlinkAccount delegated to CORE', {
+                clientID: player.clientID,
+                accountID: previousAccountID,
+            });
+        };
+        player.addState = (state) => {
+            core.addPlayerState(player.clientID, state);
+            originalAddState(state);
+            loggers.session.debug('Remote player state added in CORE', {
+                clientID: player.clientID,
+                state,
+            });
+        };
+        player.removeState = (state) => {
+            core.removePlayerState(player.clientID, state);
+            originalRemoveState(state);
+            loggers.session.debug('Remote player state removed in CORE', {
+                clientID: player.clientID,
+                state,
+            });
+        };
+        player.toggleState = (state, force) => {
+            const next = force ?? !player.hasState(state);
+            if (next) {
+                player.addState(state);
+            }
+            else {
+                player.removeState(state);
+            }
+            originalToggleState(state, next);
+            return next;
+        };
     }
     /**
      * Returns a Player instance with real session data from CORE.

package/dist/runtime/server/types/core-exports.types.d.ts

@@ -225,6 +225,19 @@ export interface InternalPlayerExports {
      * @param value - Value to store
      */
     setPlayerMeta(clientID: number, key: string, value: unknown): void;
+    /**
+     * Links a persistent account to the authoritative CORE player session.
+     *
+     * @param clientID - FiveM client/server ID
+     * @param accountID - Persistent account identifier
+     */
+    linkPlayerAccount(clientID: number, accountID: string): void;
+    /**
+     * Removes any linked account from the authoritative CORE player session.
+     *
+     * @param clientID - FiveM client/server ID
+     */
+    unlinkPlayerAccount(clientID: number): void;
     /**
      * Gets complete serialized player data.
      *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-core/framework",
-  "version": "1.0.9",
+  "version": "1.0.10",
   "description": "Secure, event-driven TypeScript Framework & Runtime engine for CitizenFX (Cfx).",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",