@rpgjs/server 5.0.0-alpha.41 → 5.0.0-alpha.43

package/dist/index.js

@@ -1,3 +1,5 @@
+import { i as isMapUpdateAuthorized, M as MAP_UPDATE_TOKEN_HEADER, a as MAP_UPDATE_TOKEN_ENV } from './map-D4T2_hc-.js';
+
 function dset(obj, keys, val) {
 	keys.split && (keys=keys.split('.'));
 	var i=0, l=keys.length, t=obj, x, k;
@@ -27940,7 +27942,17 @@ const MapUpdateSchema = object({
   /** Width of the map in pixels (required) */
   width: number(),
   /** Height of the map in pixels (required) */
-  height: number()
+  height: number(),
+  /** Map events to spawn (optional) */
+  events: array(any()).optional(),
+  /** Optional static hitboxes (custom maps) */
+  hitboxes: array(any()).optional(),
+  /** Parsed tiled map payload (optional) */
+  parsedMap: any().optional(),
+  /** Raw map source payload (optional) */
+  data: any().optional(),
+  /** Optional map params payload */
+  params: any().optional()
 });
 const SAFE_MAP_WIDTH = 1e3;
 const SAFE_MAP_HEIGHT = 1e3;
@@ -28624,6 +28636,17 @@ let RpgMap = class extends RpgCommonMap {
     return await BaseRoom.prototype.listSaveSlots(player, value);
   }
   async updateMap(request) {
+    if (!isMapUpdateAuthorized(request.headers)) {
+      return new Response(JSON.stringify({
+        error: "Unauthorized map update",
+        message: `Provide ${MAP_UPDATE_TOKEN_HEADER} or Authorization: Bearer <token> to call /map/update when ${MAP_UPDATE_TOKEN_ENV} is set.`
+      }), {
+        status: 401,
+        headers: {
+          "Content-Type": "application/json"
+        }
+      });
+    }
     const map = await request.json();
     this.data.set(map);
     this.globalConfig = map.config;