@spacemolt/lib 4.6.0 → 7.1.0

package/dist/node.js

@@ -2,6 +2,52 @@
 import { readFile, writeFile, rename, mkdir } from "node:fs/promises";
 import { dirname } from "node:path";
 
+// src/validation.ts
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
+// src/auth/credentials.ts
+function hasString(value, key) {
+  return typeof value[key] === "string";
+}
+function isStoredAccount(value) {
+  if (!isRecord(value) || !hasString(value, "id") || !isRecord(value.credentials))
+    return false;
+  const credentials = value.credentials;
+  switch (credentials.kind) {
+    case "login":
+      return hasString(credentials, "username") && hasString(credentials, "password");
+    case "login_token":
+      return hasString(credentials, "token");
+    case "clerk":
+      return hasString(credentials, "apiKey") && hasString(credentials, "playerId") && hasString(credentials, "httpBaseUrl");
+    case "register":
+      return hasString(credentials, "username") && hasString(credentials, "empire") && (credentials.registration_code === undefined || typeof credentials.registration_code === "string");
+    default:
+      return false;
+  }
+}
+
+class MemoryCredentialStore {
+  accounts = new Map;
+  list() {
+    return Promise.resolve([...this.accounts.values()]);
+  }
+  get(id) {
+    return Promise.resolve(this.accounts.get(id));
+  }
+  put(account) {
+    this.accounts.set(account.id, account);
+    return Promise.resolve();
+  }
+  remove(id) {
+    this.accounts.delete(id);
+    return Promise.resolve();
+  }
+}
+
+// src/auth/file-store.ts
 class FileCredentialStore {
   path;
   cache = null;
@@ -14,9 +60,22 @@ class FileCredentialStore {
     try {
       const raw = await readFile(this.path, "utf-8");
       const parsed = JSON.parse(raw);
-      this.cache = parsed.accounts ?? {};
-    } catch {
-      this.cache = {};
+      if (!isRecord(parsed) || parsed.version !== 1 || !isRecord(parsed.accounts)) {
+        throw new Error(`Invalid credential store format in ${this.path}`);
+      }
+      const accounts = {};
+      for (const [id, account] of Object.entries(parsed.accounts)) {
+        if (!isStoredAccount(account) || account.id !== id) {
+          throw new Error(`Invalid account ${JSON.stringify(id)} in credential store ${this.path}`);
+        }
+        accounts[id] = account;
+      }
+      this.cache = accounts;
+    } catch (error) {
+      if (isMissingFileError(error))
+        this.cache = {};
+      else
+        throw error;
     }
     return this.cache;
   }
@@ -24,7 +83,7 @@ class FileCredentialStore {
     const data = { version: 1, accounts: this.cache ?? {} };
     await mkdir(dirname(this.path), { recursive: true });
     const tmp = `${this.path}.tmp-${process.pid}`;
-    await writeFile(tmp, JSON.stringify(data, null, 2));
+    await writeFile(tmp, JSON.stringify(data, null, 2), { mode: 384 });
     await rename(tmp, this.path);
   }
   async list() {
@@ -44,6 +103,9 @@ class FileCredentialStore {
     await this.save();
   }
 }
+function isMissingFileError(error) {
+  return error instanceof Error && "code" in error && error.code === "ENOENT";
+}
 export {
   FileCredentialStore
 };

package/dist/protocol.d.ts

@@ -125,6 +125,13 @@ export interface RawFrame {
     payload?: unknown;
 }
 export type OutboundFrame = ResultFrame | ActionResultFrame | ActionErrorFrame | ErrorFrame | WelcomeFrame | LoggedInFrame | RegisteredFrame | NotificationFrame;
+export declare function isResultFrame(frame: RawFrame): frame is ResultFrame;
+export declare function isActionResultFrame(frame: RawFrame): frame is ActionResultFrame;
+export declare function isActionErrorFrame(frame: RawFrame): frame is ActionErrorFrame;
+export declare function isErrorFrame(frame: RawFrame): frame is ErrorFrame;
+export declare function isWelcomeFrame(frame: RawFrame): frame is WelcomeFrame;
+export declare function isLoggedInFrame(frame: RawFrame): frame is LoggedInFrame;
+export declare function isRegisteredFrame(frame: RawFrame): frame is RegisteredFrame;
 /**
  * The cacheable game-state sections — the eight independently-tracked sections
  * the server emits deltas for. Section shapes are derived from the spec's

package/dist/transport/correlator.d.ts

@@ -31,7 +31,7 @@
  * ordering beyond per-request_id sequencing.
  */
 import type { MutationAck, MutationResult, QueryResult, RawFrame } from '../protocol.js';
-import { ConnectionClosedError, SpacemoltError } from '../errors.js';
+import { type ConnectionClosedError, SpacemoltError } from '../errors.js';
 export type RequestKind = 'query' | 'mutation';
 export declare class Correlator {
     private readonly pending;
@@ -51,4 +51,5 @@ export declare class Correlator {
     /** Reject every in-flight request — used when the socket closes. */
     rejectAll(err: ConnectionClosedError | SpacemoltError): void;
     private settle;
+    private rejectInvalidResponse;
 }

package/dist/transport/socket.d.ts

@@ -10,18 +10,20 @@
 import type { InboundFrame, RawFrame } from '../protocol.js';
 import { ConnectionClosedError } from '../errors.js';
 /** The minimal web-standard WebSocket surface this library depends on. */
+export interface MessageEventLike {
+    data: unknown;
+}
+export interface CloseEventLike {
+    code?: number;
+    reason?: string;
+}
 export interface WebSocketLike {
     send(data: string): void;
     close(code?: number, reason?: string): void;
     addEventListener(type: 'open', listener: () => void): void;
-    addEventListener(type: 'message', listener: (ev: {
-        data: unknown;
-    }) => void): void;
-    addEventListener(type: 'close', listener: (ev: {
-        code?: number;
-        reason?: string;
-    }) => void): void;
-    addEventListener(type: 'error', listener: (ev: unknown) => void): void;
+    addEventListener(type: 'message', listener: (event: MessageEventLike) => void): void;
+    addEventListener(type: 'close', listener: (event: CloseEventLike) => void): void;
+    addEventListener(type: 'error', listener: (event: unknown) => void): void;
 }
 export type WebSocketFactory = (url: string) => WebSocketLike;
 export interface SocketOptions {

package/dist/validation.d.ts

@@ -0,0 +1,4 @@
+/** True when a value is a non-null, non-array object with string keys. */
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+/** Require an object at an external-data boundary and include its source in failures. */
+export declare function requireRecord(value: unknown, source: string): Record<string, unknown>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spacemolt/lib",
-  "version": "4.6.0",
+  "version": "7.1.0",
   "description": "The definitive TypeScript library for SpaceMolt. WebSocket-v2-first, multi-account, with local state caches. Internals are regenerated from the server's OpenAPI spec.",
   "type": "module",
   "module": "./dist/index.js",
@@ -24,26 +24,37 @@
   "scripts": {
     "fetch-spec": "bun run scripts/fetch-spec.ts",
     "generate": "bun run openapi-ts && bun run scripts/generate.ts",
+    "generate:check": "bun run scripts/check-generated.ts",
+    "check": "bun run format:check && bun run lint && bun run generate:check && bun run typecheck && bun test && bun run build:browser-check && bun run build && bun run build:smoke",
+    "format": "biome format --write .",
+    "format:check": "biome format .",
+    "lint": "biome lint .",
     "typecheck": "bun x tsc --noEmit",
     "prepare": "bun run build",
     "build": "rm -rf dist && bun build src/index.ts --outfile dist/index.js --target node --format esm && bun build src/node.ts --outfile dist/node.js --target node --format esm && bun x tsc -p tsconfig.build.json && bun run scripts/fix-dts-extensions.ts",
+    "build:smoke": "node scripts/check-build.mjs",
     "build:browser-check": "bun build src/index.ts --target browser --outfile /dev/null",
     "test": "bun test"
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/SpaceMolt/spacemolt-lib.git"
+    "url": "git+https://github.com/SpaceMolt/spacemolt-lib.git"
   },
   "homepage": "https://www.spacemolt.com",
   "license": "MIT",
+  "engines": {
+    "node": ">=22"
+  },
   "publishConfig": {
     "access": "public"
   },
   "devDependencies": {
+    "@biomejs/biome": "^2.5.3",
     "@hey-api/openapi-ts": "^0.73.0",
-    "@types/bun": "^1.3.9"
+    "@types/bun": "^1.3.9",
+    "typescript": "^5.9.3"
   },
   "peerDependencies": {
-    "typescript": "^5"
+    "typescript": "^5.5"
   }
 }