@spacemolt/lib 15.2.0 → 16.0.0

package/dist/node.js

@@ -6,6 +6,11 @@ import { dirname } from "node:path";
 function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
+function requireRecord(value, source) {
+  if (!isRecord(value))
+    throw new TypeError(`${source} must be a JSON object`);
+  return value;
+}
 
 // src/auth/credentials.ts
 function hasString(value, key) {
@@ -29,6 +34,24 @@ function isStoredAccount(value) {
   }
 }
 
+class MemoryCredentialStore {
+  accounts = new Map;
+  list() {
+    return Promise.resolve([...this.accounts.values()]);
+  }
+  get(id) {
+    return Promise.resolve(this.accounts.get(id));
+  }
+  put(account) {
+    this.accounts.set(account.id, account);
+    return Promise.resolve();
+  }
+  remove(id) {
+    this.accounts.delete(id);
+    return Promise.resolve();
+  }
+}
+
 // src/auth/file-store.ts
 class FileCredentialStore {
   path;
@@ -91,3 +114,6 @@ function isMissingFileError(error) {
 export {
   FileCredentialStore
 };
+
+//# debugId=120575AA408B48D964756E2164756E21
+//# sourceMappingURL=node.js.map

package/dist/node.js.map

@@ -0,0 +1,12 @@
+{
+  "version": 3,
+  "sources": ["../src/auth/file-store.ts", "../src/validation.ts", "../src/auth/credentials.ts"],
+  "sourcesContent": [
+    "/**\n * File-backed credential store (Node / Bun).\n *\n * Persists accounts as JSON. Credentials are stored in plaintext — the same\n * tradeoff the CLI makes — so point it at a path your environment protects.\n * Imports Node built-ins; do not import this from browser bundles (use a\n * custom `CredentialStore` there instead).\n */\n\nimport { readFile, writeFile, rename, mkdir } from 'node:fs/promises';\nimport { dirname } from 'node:path';\nimport { isStoredAccount, type CredentialStore, type StoredAccount } from './credentials.ts';\nimport { isRecord } from '../validation.ts';\n\ninterface FileShape {\n  version: 1;\n  accounts: Record<string, StoredAccount>;\n}\n\nexport class FileCredentialStore implements CredentialStore {\n  private cache: Record<string, StoredAccount> | null = null;\n\n  constructor(private readonly path: string) {}\n\n  private async load(): Promise<Record<string, StoredAccount>> {\n    if (this.cache) return this.cache;\n    try {\n      const raw = await readFile(this.path, 'utf-8');\n      const parsed: unknown = JSON.parse(raw);\n      if (!isRecord(parsed) || parsed.version !== 1 || !isRecord(parsed.accounts)) {\n        throw new Error(`Invalid credential store format in ${this.path}`);\n      }\n      const accounts: Record<string, StoredAccount> = {};\n      for (const [id, account] of Object.entries(parsed.accounts)) {\n        if (!isStoredAccount(account) || account.id !== id) {\n          throw new Error(`Invalid account ${JSON.stringify(id)} in credential store ${this.path}`);\n        }\n        accounts[id] = account;\n      }\n      this.cache = accounts;\n    } catch (error) {\n      if (isMissingFileError(error)) this.cache = {};\n      else throw error;\n    }\n    return this.cache;\n  }\n\n  private async save(): Promise<void> {\n    const data: FileShape = { version: 1, accounts: this.cache ?? {} };\n    await mkdir(dirname(this.path), { recursive: true });\n    // Atomic write: temp file + rename, so a crash can't truncate the store.\n    const tmp = `${this.path}.tmp-${process.pid}`;\n    await writeFile(tmp, JSON.stringify(data, null, 2), { mode: 0o600 });\n    await rename(tmp, this.path);\n  }\n\n  async list(): Promise<StoredAccount[]> {\n    return Object.values(await this.load());\n  }\n  async get(id: string): Promise<StoredAccount | undefined> {\n    return (await this.load())[id];\n  }\n  async put(account: StoredAccount): Promise<void> {\n    const accounts = await this.load();\n    accounts[account.id] = account;\n    await this.save();\n  }\n  async remove(id: string): Promise<void> {\n    const accounts = await this.load();\n    delete accounts[id];\n    await this.save();\n  }\n}\n\nfunction isMissingFileError(error: unknown): error is NodeJS.ErrnoException {\n  return error instanceof Error && 'code' in error && error.code === 'ENOENT';\n}\n",
+    "/** True when a value is a non-null, non-array object with string keys. */\nexport function isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\n/** Require an object at an external-data boundary and include its source in failures. */\nexport function requireRecord(value: unknown, source: string): Record<string, unknown> {\n  if (!isRecord(value)) throw new TypeError(`${source} must be a JSON object`);\n  return value;\n}\n",
+    "/**\n * Pluggable credential storage for multi-account use.\n *\n * The `CredentialStore` interface is the only persistence seam in the library;\n * swap the implementation to control where credentials live (memory, a file,\n * the browser, a secrets manager, …). The core never imports Node built-ins —\n * the file-backed store does, and lives here in `src/auth/` for that reason.\n */\n\nimport { isRecord } from '../validation.ts';\n\n/**\n * How an account authenticates. Raw credentials (login / login_token / register)\n * plus `clerk`: a Clerk API key + the owned player's id, from which the account\n * mints a fresh single-use WS token on each (re)connect (see `src/auth/clerk.ts`).\n */\nexport type AuthCredentials =\n  | { kind: 'login'; username: string; password: string }\n  | { kind: 'login_token'; token: string }\n  | { kind: 'clerk'; apiKey: string; playerId: string; httpBaseUrl: string }\n  | { kind: 'register'; username: string; empire: string; registration_code?: string };\n\nexport interface StoredAccount {\n  /** Stable handle for this account within the client (e.g. the username). */\n  id: string;\n  credentials: AuthCredentials;\n  /** Filled in after a successful auth. */\n  playerId?: string;\n}\n\nexport interface CredentialStore {\n  list(): Promise<StoredAccount[]>;\n  get(id: string): Promise<StoredAccount | undefined>;\n  put(account: StoredAccount): Promise<void>;\n  remove(id: string): Promise<void>;\n}\n\nfunction hasString(value: Record<string, unknown>, key: string): boolean {\n  return typeof value[key] === 'string';\n}\n\nexport function isStoredAccount(value: unknown): value is StoredAccount {\n  if (!isRecord(value) || !hasString(value, 'id') || !isRecord(value.credentials)) return false;\n  const credentials = value.credentials;\n  switch (credentials.kind) {\n    case 'login':\n      return hasString(credentials, 'username') && hasString(credentials, 'password');\n    case 'login_token':\n      return hasString(credentials, 'token');\n    case 'clerk':\n      return (\n        hasString(credentials, 'apiKey') && hasString(credentials, 'playerId') && hasString(credentials, 'httpBaseUrl')\n      );\n    case 'register':\n      return (\n        hasString(credentials, 'username') &&\n        hasString(credentials, 'empire') &&\n        (credentials.registration_code === undefined || typeof credentials.registration_code === 'string')\n      );\n    default:\n      return false;\n  }\n}\n\n/** In-memory store. The default; nothing is persisted across process restarts. */\nexport class MemoryCredentialStore implements CredentialStore {\n  private readonly accounts = new Map<string, StoredAccount>();\n\n  list(): Promise<StoredAccount[]> {\n    return Promise.resolve([...this.accounts.values()]);\n  }\n  get(id: string): Promise<StoredAccount | undefined> {\n    return Promise.resolve(this.accounts.get(id));\n  }\n  put(account: StoredAccount): Promise<void> {\n    this.accounts.set(account.id, account);\n    return Promise.resolve();\n  }\n  remove(id: string): Promise<void> {\n    this.accounts.delete(id);\n    return Promise.resolve();\n  }\n}\n"
+  ],
+  "mappings": ";AASA;AACA;;;ACTO,SAAS,QAAQ,CAAC,OAAkD;AAAA,EACzE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAAA;AAIrE,SAAS,aAAa,CAAC,OAAgB,QAAyC;AAAA,EACrF,IAAI,CAAC,SAAS,KAAK;AAAA,IAAG,MAAM,IAAI,UAAU,GAAG,8BAA8B;AAAA,EAC3E,OAAO;AAAA;;;AC6BT,SAAS,SAAS,CAAC,OAAgC,KAAsB;AAAA,EACvE,OAAO,OAAO,MAAM,SAAS;AAAA;AAGxB,SAAS,eAAe,CAAC,OAAwC;AAAA,EACtE,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,UAAU,OAAO,IAAI,KAAK,CAAC,SAAS,MAAM,WAAW;AAAA,IAAG,OAAO;AAAA,EACxF,MAAM,cAAc,MAAM;AAAA,EAC1B,QAAQ,YAAY;AAAA,SACb;AAAA,MACH,OAAO,UAAU,aAAa,UAAU,KAAK,UAAU,aAAa,UAAU;AAAA,SAC3E;AAAA,MACH,OAAO,UAAU,aAAa,OAAO;AAAA,SAClC;AAAA,MACH,OACE,UAAU,aAAa,QAAQ,KAAK,UAAU,aAAa,UAAU,KAAK,UAAU,aAAa,aAAa;AAAA,SAE7G;AAAA,MACH,OACE,UAAU,aAAa,UAAU,KACjC,UAAU,aAAa,QAAQ,MAC9B,YAAY,sBAAsB,aAAa,OAAO,YAAY,sBAAsB;AAAA;AAAA,MAG3F,OAAO;AAAA;AAAA;AAAA;AAKN,MAAM,sBAAiD;AAAA,EAC3C,WAAW,IAAI;AAAA,EAEhC,IAAI,GAA6B;AAAA,IAC/B,OAAO,QAAQ,QAAQ,CAAC,GAAG,KAAK,SAAS,OAAO,CAAC,CAAC;AAAA;AAAA,EAEpD,GAAG,CAAC,IAAgD;AAAA,IAClD,OAAO,QAAQ,QAAQ,KAAK,SAAS,IAAI,EAAE,CAAC;AAAA;AAAA,EAE9C,GAAG,CAAC,SAAuC;AAAA,IACzC,KAAK,SAAS,IAAI,QAAQ,IAAI,OAAO;AAAA,IACrC,OAAO,QAAQ,QAAQ;AAAA;AAAA,EAEzB,MAAM,CAAC,IAA2B;AAAA,IAChC,KAAK,SAAS,OAAO,EAAE;AAAA,IACvB,OAAO,QAAQ,QAAQ;AAAA;AAE3B;;;AF/DO,MAAM,oBAA+C;AAAA,EAG7B;AAAA,EAFrB,QAA8C;AAAA,EAEtD,WAAW,CAAkB,MAAc;AAAA,IAAd;AAAA;AAAA,OAEf,KAAI,GAA2C;AAAA,IAC3D,IAAI,KAAK;AAAA,MAAO,OAAO,KAAK;AAAA,IAC5B,IAAI;AAAA,MACF,MAAM,MAAM,MAAM,SAAS,KAAK,MAAM,OAAO;AAAA,MAC7C,MAAM,SAAkB,KAAK,MAAM,GAAG;AAAA,MACtC,IAAI,CAAC,SAAS,MAAM,KAAK,OAAO,YAAY,KAAK,CAAC,SAAS,OAAO,QAAQ,GAAG;AAAA,QAC3E,MAAM,IAAI,MAAM,sCAAsC,KAAK,MAAM;AAAA,MACnE;AAAA,MACA,MAAM,WAA0C,CAAC;AAAA,MACjD,YAAY,IAAI,YAAY,OAAO,QAAQ,OAAO,QAAQ,GAAG;AAAA,QAC3D,IAAI,CAAC,gBAAgB,OAAO,KAAK,QAAQ,OAAO,IAAI;AAAA,UAClD,MAAM,IAAI,MAAM,mBAAmB,KAAK,UAAU,EAAE,yBAAyB,KAAK,MAAM;AAAA,QAC1F;AAAA,QACA,SAAS,MAAM;AAAA,MACjB;AAAA,MACA,KAAK,QAAQ;AAAA,MACb,OAAO,OAAO;AAAA,MACd,IAAI,mBAAmB,KAAK;AAAA,QAAG,KAAK,QAAQ,CAAC;AAAA,MACxC;AAAA,cAAM;AAAA;AAAA,IAEb,OAAO,KAAK;AAAA;AAAA,OAGA,KAAI,GAAkB;AAAA,IAClC,MAAM,OAAkB,EAAE,SAAS,GAAG,UAAU,KAAK,SAAS,CAAC,EAAE;AAAA,IACjE,MAAM,MAAM,QAAQ,KAAK,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,IAEnD,MAAM,MAAM,GAAG,KAAK,YAAY,QAAQ;AAAA,IACxC,MAAM,UAAU,KAAK,KAAK,UAAU,MAAM,MAAM,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;AAAA,IACnE,MAAM,OAAO,KAAK,KAAK,IAAI;AAAA;AAAA,OAGvB,KAAI,GAA6B;AAAA,IACrC,OAAO,OAAO,OAAO,MAAM,KAAK,KAAK,CAAC;AAAA;AAAA,OAElC,IAAG,CAAC,IAAgD;AAAA,IACxD,QAAQ,MAAM,KAAK,KAAK,GAAG;AAAA;AAAA,OAEvB,IAAG,CAAC,SAAuC;AAAA,IAC/C,MAAM,WAAW,MAAM,KAAK,KAAK;AAAA,IACjC,SAAS,QAAQ,MAAM;AAAA,IACvB,MAAM,KAAK,KAAK;AAAA;AAAA,OAEZ,OAAM,CAAC,IAA2B;AAAA,IACtC,MAAM,WAAW,MAAM,KAAK,KAAK;AAAA,IACjC,OAAO,SAAS;AAAA,IAChB,MAAM,KAAK,KAAK;AAAA;AAEpB;AAEA,SAAS,kBAAkB,CAAC,OAAgD;AAAA,EAC1E,OAAO,iBAAiB,SAAS,UAAU,SAAS,MAAM,SAAS;AAAA;",
+  "debugId": "120575AA408B48D964756E2164756E21",
+  "names": []
+}

package/dist/state/observation.d.ts

@@ -1,5 +1,5 @@
 /**
- * Local cache of the subscribed observation watch (current POI + system).
+ * Local cache of the subscribed observation watch (current POI).
  *
  * Seeded from the `subscribe_observation` baseline and kept current by merging
  * `observation_update` pushes: `*_changed` arrays upsert entities (keyed by
@@ -7,13 +7,17 @@
  * cloaked-contact / signature hints are tracked alongside.
  *
  * Not a players-only feed: the baseline and every update also carry the
- * pirate, empire-NPC, wildlife and intact-prize presence at the watched POI,
- * each with the same changed/departed delta shape as players. It covers five
- * of `get_nearby`'s six classes — arena NPCs are the one it does not carry, so
- * a player in an arena match still has to poll `get_nearby` for their
- * opponents. `offline_collapsed` has no equivalent here either.
+ * pirate, empire-NPC, wildlife, intact-prize and arena-NPC presence at the
+ * watched POI, each with the same changed/departed delta shape as players —
+ * all six of `get_nearby`'s classes. The player list matches `get_nearby`:
+ * above 10 players, offline ones collapse into `offlineCollapsed`.
+ *
+ * Nothing here is system-wide except `shipCounts`: with a working ship
+ * scanner, the per-POI ship count for every charted POI in the system. The
+ * server sends the full map whenever any count changes, so it replaces the
+ * previous map rather than merging.
  */
-import type { CreatureInfo, EmpireNpcInfo, NotificationObservationUpdate, PirateInfo, PrizeInfo, SubscribeObservationResponse } from '../generated/openapi/types.gen.js';
+import type { ArenaNpcInfo, CreatureInfo, EmpireNpcInfo, NotificationObservationUpdate, PirateInfo, PrizeInfo, SubscribeObservationResponse } from '../generated/openapi/types.gen.js';
 export type ObservedPlayer = NonNullable<NotificationObservationUpdate['nearby_changed']>[number];
 export type CloakedContact = NonNullable<NotificationObservationUpdate['cloaked_resolved']>[number];
 export interface ObservationView {
@@ -23,8 +27,6 @@ export interface ObservationView {
     tick: number;
     /** Uncloaked players at the watched POI, keyed by player_id. */
     nearby: Map<string, ObservedPlayer>;
-    /** Uncloaked players system-wide, keyed by player_id. */
-    system: Map<string, ObservedPlayer>;
     /** Pirate NPCs at the watched POI, keyed by pirate_id. */
     pirates: Map<string, PirateInfo>;
     /** Empire NPCs at the watched POI, keyed by npc_id. */
@@ -33,6 +35,12 @@ export interface ObservationView {
     creatures: Map<string, CreatureInfo>;
     /** Intact captured ships at the watched POI, keyed by prize_id. */
     prizes: Map<string, PrizeInfo>;
+    /** Arena challenge enemies at the watched POI, keyed by npc_id. */
+    arenaNpcs: Map<string, ArenaNpcInfo>;
+    /** Offline players at the watched POI not listed in `nearby` (0 when all are listed). */
+    offlineCollapsed: number;
+    /** Ship scanner counts per charted POI in the system, keyed by POI ID. Empty without a working ship scanner. */
+    shipCounts: Map<string, number>;
     /** Cloaked contacts resolved by an active sensor sweep, keyed by target_id. */
     cloaked: Map<string, CloakedContact>;
     /** A faint cloaked-ship signature is present at the watched POI. */

package/package.json

@@ -1,9 +1,8 @@
 {
   "name": "@spacemolt/lib",
-  "version": "15.2.0",
+  "version": "16.0.0",
   "description": "The definitive TypeScript library for SpaceMolt. WebSocket-v2-first, multi-account, with local state caches. Internals are regenerated from the server's OpenAPI spec.",
   "type": "module",
-  "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "exports": {
     ".": {
@@ -25,16 +24,17 @@
     "fetch-spec": "bun run scripts/fetch-spec.ts",
     "generate": "bun run openapi-ts && bun run scripts/generate.ts",
     "generate:check": "bun run scripts/check-generated.ts",
-    "check": "bun run format:check && bun run lint && bun run generate:check && bun run typecheck && bun test && bun run build:browser-check && bun run build && bun run build:smoke",
+    "check": "bun run format:check && bun run lint && bun run generate:check && bun run typecheck && bun test && bun run build:browser-check && bun run build && bun run build:smoke && bun run check:consumer",
     "format": "biome format --write .",
     "format:check": "biome format .",
     "lint": "biome lint .",
     "typecheck": "bun x tsc --noEmit",
-    "prepare": "bun run build",
-    "build": "rm -rf dist && bun build src/index.ts --outfile dist/index.js --target node --format esm && bun build src/node.ts --outfile dist/node.js --target node --format esm && bun x tsc -p tsconfig.build.json && bun run scripts/fix-dts-extensions.ts",
+    "build": "rm -rf dist && bun build src/index.ts src/node.ts --outdir dist --target node --format esm --sourcemap=linked && bun x tsc -p tsconfig.build.json && bun run scripts/fix-dts-extensions.ts",
     "build:smoke": "node scripts/check-build.mjs",
     "build:browser-check": "bun run scripts/check-browser-build.ts",
-    "test": "bun test"
+    "test": "bun test",
+    "prepack": "bun run build",
+    "check:consumer": "bun run scripts/check-consumer.ts"
   },
   "repository": {
     "type": "git",
@@ -52,9 +52,7 @@
     "@biomejs/biome": "^2.5.3",
     "@hey-api/openapi-ts": "^0.73.0",
     "@types/bun": "^1.3.9",
+    "@types/node": "^22",
     "typescript": "^5.9.3"
-  },
-  "peerDependencies": {
-    "typescript": "^5.5"
   }
 }