rozod 6.1.0 → 6.2.0

package/README.md

@@ -335,6 +335,40 @@ RoZod automatically handles advanced Roblox security requirements:
 - **✅ Hardware-Backed Authentication** - Full HBA signature support  
 - **✅ Challenge Handling** - Captchas, 2FA, and other authentication challenges
 - **✅ Cookie Security** - Secure cookie parsing and validation
+- **✅ Cookie Rotation** - Automatic handling of Roblox's cookie rotation
+
+### Cookie Rotation Handling
+
+Roblox is gradually implementing `.ROBLOSECURITY` cookie rotation for improved security. RoZod automatically detects when cookies are rotated and can notify you to persist the new values:
+
+```ts
+import { configureServer, refreshCookie, getCookies } from 'rozod';
+
+configureServer({
+  cookies: process.env.ROBLOX_COOKIE,
+  onCookieRefresh: async ({ oldCookie, newCookie, poolIndex }) => {
+    // Roblox rotated the cookie - persist the new value
+    await db.updateCookie(poolIndex, newCookie);
+    console.log('Cookie rotated and saved!');
+  }
+});
+```
+
+The internal cookie pool updates automatically, so the callback is only needed if you want to persist cookies across restarts.
+
+You can also proactively refresh cookies before they expire:
+
+```ts
+// Refresh on a schedule or before important operations
+const result = await refreshCookie(0);
+if (result.success) {
+  await db.updateCookie(0, result.newCookie);
+}
+
+// Utility functions
+const allCookies = getCookies();        // Get current cookie values
+updateCookie(0, 'new_value');           // Manually update a cookie
+```
 
 ### Challenge Handling
 

package/lib/endpoints/accountinformationv1.d.ts

@@ -1,18 +1,11 @@
-import { z } from 'zod';
-import { endpoint } from '..';
+import { z } from "zod";
+import { endpoint } from "..";
 
 const Roblox_AccountInformation_Api_Models_BirthdateResponse = z.object({
   birthMonth: z.number().int(),
   birthDay: z.number().int(),
   birthYear: z.number().int(),
 });
-const Roblox_AccountInformation_Api_Models_BirthdateRequest = z.object({
-  birthMonth: z.number().int(),
-  birthDay: z.number().int(),
-  birthYear: z.number().int(),
-  password: z.string(),
-});
-const Roblox_Web_WebAPI_ApiEmptyResponseModel = z.object({});
 const Roblox_AccountInformation_Api_Models_DescriptionResponse = z.object({
   description: z.string(),
 });
@@ -25,6 +18,7 @@ const Roblox_AccountInformation_Api_Models_GenderResponse = z.object({
 const Roblox_AccountInformation_Api_Models_GenderRequest = z.object({
   gender: z.string(),
 });
+const Roblox_Web_WebAPI_ApiEmptyResponseModel = z.object({});
 const Roblox_AccountInformation_Api_Models_MetadataResponse = z.object({
   isAllowedNotificationsEndpointDisabled: z.boolean(),
   isAccountSettingsPolicyEnabled: z.boolean(),
@@ -32,9 +26,9 @@ const Roblox_AccountInformation_Api_Models_MetadataResponse = z.object({
   MaxUserDescriptionLength: z.number().int(),
   isUserDescriptionEnabled: z.boolean(),
   isUserBlockEndpointsUpdated: z.boolean(),
-  isPasswordRequiredForAgingDown: z.boolean(),
   shouldUsePersonaForIdVerification: z.boolean(),
   shouldDisplaySessionManagement: z.boolean(),
+  isPasswordRequiredForAgingDown: z.boolean(),
 });
 const Roblox_AccountInformation_Api_Models_PhoneResponse = z.object({
   countryCode: z.string(),
@@ -51,48 +45,43 @@ const Roblox_AccountInformation_Api_Models_PhoneRequest = z.object({
   password: z.string(),
   verificationChannel: z.string(),
 });
-const Roblox_Platform_UserPhoneNumberVerification_Models_PendingVerificationResponse = z.object({
-  verificationChannel: z.string(),
-  data: z.string(),
-});
-const Roblox_AccountInformation_Api_Models_PromotionChannelsResponse = z.object({
-  promotionChannelsVisibilityPrivacy: z.string(),
-  facebook: z.string(),
-  twitter: z.string(),
-  youtube: z.string(),
-  twitch: z.string(),
-  guilded: z.string(),
-});
+const Roblox_Platform_UserPhoneNumberVerification_Models_PendingVerificationResponse =
+  z.object({ verificationChannel: z.string(), data: z.string() });
+const Roblox_AccountInformation_Api_Models_PromotionChannelsResponse = z.object(
+  {
+    promotionChannelsVisibilityPrivacy: z.string(),
+    facebook: z.string(),
+    twitter: z.string(),
+    youtube: z.string(),
+    twitch: z.string(),
+  }
+);
 const Roblox_AccountInformation_Api_Models_PromotionChannelsRequest = z.object({
   facebook: z.string(),
   twitter: z.string(),
   youtube: z.string(),
   twitch: z.string(),
-  guilded: z.string(),
   promotionChannelsVisibilityPrivacy: z.string(),
 });
-const Roblox_AccountInformation_Api_Models_StarCodeAffiliateResponse = z.object({
-  userId: z.number().int(),
-  name: z.string(),
-  code: z.string(),
-});
+const Roblox_AccountInformation_Api_Models_StarCodeAffiliateResponse = z.object(
+  { userId: z.number().int(), name: z.string(), code: z.string() }
+);
 const Roblox_AccountInformation_Api_Models_StarCodeAffiliateRequest = z.object({
   code: z.string(),
 });
-const Roblox_AccountInformation_Api_Models_PromotionChannelsByUserIdResponse = z.object({
-  facebook: z.string(),
-  twitter: z.string(),
-  youtube: z.string(),
-  twitch: z.string(),
-  guilded: z.string(),
-});
+const Roblox_AccountInformation_Api_Models_PromotionChannelsByUserIdResponse =
+  z.object({
+    facebook: z.string(),
+    twitter: z.string(),
+    youtube: z.string(),
+    twitch: z.string(),
+  });
 const Roblox_AccountInformation_Api_RobloxBadgeResponse = z.object({
   id: z.number().int(),
   name: z.string(),
   description: z.string(),
   imageUrl: z.string(),
 });
-const Roblox_AccountInformation_Api_Models_ConsecutiveLoginDaysResponse = z.object({ count: z.number().int() });
 const Roblox_AccountInformation_Api_Models_VerifyEmailRequest = z.object({
   ticket: z.string(),
 });
@@ -109,10 +98,10 @@ const Roblox_AccountInformation_Api_Models_VerifyPhoneRequest = z.object({
  * @summary Get the user's birthdate
  */
 export const getBirthdate = endpoint({
-  method: 'GET',
-  path: '/v1/birthdate',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "GET",
+  path: "/v1/birthdate",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   response: Roblox_AccountInformation_Api_Models_BirthdateResponse,
   errors: [
     {
@@ -125,54 +114,15 @@ export const getBirthdate = endpoint({
     },
   ],
 });
-/**
- * @api POST https://accountinformation.roblox.com/v1/birthdate
- * @summary Update the user's birthdate
- * @param body The Roblox.AccountInformation.Api.Models.BirthdateRequest
- */
-export const postBirthdate = endpoint({
-  method: 'POST',
-  path: '/v1/birthdate',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
-  serializationMethod: {
-    body: {},
-  },
-  parameters: {},
-  body: Roblox_AccountInformation_Api_Models_BirthdateRequest,
-  response: z.object({}),
-  errors: [
-    {
-      status: 400,
-      description: `1: User not found.
-4: The birthdate provided is invalid.
-8: Password is incorrect.`,
-    },
-    {
-      status: 401,
-      description: `0: Authorization has been denied for this request.`,
-    },
-    {
-      status: 403,
-      description: `0: Token Validation Failed
-5: Invalid birthdate change.`,
-    },
-    {
-      status: 500,
-      description: `0: An unknown error occured.
-5: Invalid birthdate change.`,
-    },
-  ],
-});
 /**
  * @api GET https://accountinformation.roblox.com/v1/description
  * @summary Get the user's description
  */
 export const getDescription = endpoint({
-  method: 'GET',
-  path: '/v1/description',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "GET",
+  path: "/v1/description",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   response: z.object({ description: z.string() }),
   errors: [
     {
@@ -191,10 +141,10 @@ export const getDescription = endpoint({
  * @param body The Roblox.AccountInformation.Api.Models.DescriptionRequest
  */
 export const postDescription = endpoint({
-  method: 'POST',
-  path: '/v1/description',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "POST",
+  path: "/v1/description",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   serializationMethod: {
     body: {},
   },
@@ -230,10 +180,10 @@ export const postDescription = endpoint({
  * @param body Roblox.AccountInformation.Api.Models.VerifyEmailRequest
  */
 export const postEmailVerify = endpoint({
-  method: 'POST',
-  path: '/v1/email/verify',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "POST",
+  path: "/v1/email/verify",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   serializationMethod: {
     body: {},
   },
@@ -252,10 +202,10 @@ export const postEmailVerify = endpoint({
  * @summary Get the user's gender
  */
 export const getGender = endpoint({
-  method: 'GET',
-  path: '/v1/gender',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "GET",
+  path: "/v1/gender",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   response: z.object({ gender: z.number().int() }),
   errors: [
     {
@@ -274,10 +224,10 @@ export const getGender = endpoint({
  * @param body The Roblox.AccountInformation.Api.Models.GenderRequest
  */
 export const postGender = endpoint({
-  method: 'POST',
-  path: '/v1/gender',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "POST",
+  path: "/v1/gender",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   serializationMethod: {
     body: {},
   },
@@ -309,10 +259,10 @@ export const postGender = endpoint({
  * @summary Get the metadata
  */
 export const getMetadata = endpoint({
-  method: 'GET',
-  path: '/v1/metadata',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "GET",
+  path: "/v1/metadata",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   response: Roblox_AccountInformation_Api_Models_MetadataResponse,
   errors: [],
 });
@@ -321,10 +271,10 @@ export const getMetadata = endpoint({
  * @summary Get Verified Phone Number
  */
 export const getPhone = endpoint({
-  method: 'GET',
-  path: '/v1/phone',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "GET",
+  path: "/v1/phone",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   response: Roblox_AccountInformation_Api_Models_PhoneResponse,
   errors: [
     {
@@ -343,16 +293,17 @@ export const getPhone = endpoint({
  * @param body Roblox.AccountInformation.Api.Models.PhoneRequest
  */
 export const postPhone = endpoint({
-  method: 'POST',
-  path: '/v1/phone',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "POST",
+  path: "/v1/phone",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   serializationMethod: {
     body: {},
   },
   parameters: {},
   body: Roblox_AccountInformation_Api_Models_PhoneRequest,
-  response: Roblox_Platform_UserPhoneNumberVerification_Models_PendingVerificationResponse,
+  response:
+    Roblox_Platform_UserPhoneNumberVerification_Models_PendingVerificationResponse,
   errors: [
     {
       status: 400,
@@ -390,10 +341,10 @@ export const postPhone = endpoint({
  * @param body Roblox.AccountInformation.Api.Models.PhoneRequest
  */
 export const postPhoneDelete = endpoint({
-  method: 'POST',
-  path: '/v1/phone/delete',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "POST",
+  path: "/v1/phone/delete",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   serializationMethod: {
     body: {},
   },
@@ -430,10 +381,10 @@ export const postPhoneDelete = endpoint({
  * @param body Roblox.AccountInformation.Api.Models.PhoneRequest
  */
 export const postPhoneResend = endpoint({
-  method: 'POST',
-  path: '/v1/phone/resend',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "POST",
+  path: "/v1/phone/resend",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   serializationMethod: {
     body: {},
   },
@@ -469,10 +420,10 @@ export const postPhoneResend = endpoint({
  * @param body Roblox.AccountInformation.Api.Models.VerifyPhoneRequest
  */
 export const postPhoneVerify = endpoint({
-  method: 'POST',
-  path: '/v1/phone/verify',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "POST",
+  path: "/v1/phone/verify",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   serializationMethod: {
     body: {},
   },
@@ -516,21 +467,21 @@ export const postPhoneVerify = endpoint({
  * @param onlyShortenTwitter Whether all promotion channels links except for Twitter should be returned as full URLs. If false, all promotion channels will be shortened.
  */
 export const getPromotionChannels = endpoint({
-  method: 'GET',
-  path: '/v1/promotion-channels',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "GET",
+  path: "/v1/promotion-channels",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   serializationMethod: {
     alwaysReturnUrls: {
-      style: 'form',
+      style: "form",
       explode: true,
     },
     filterLink: {
-      style: 'form',
+      style: "form",
       explode: true,
     },
     onlyShortenTwitter: {
-      style: 'form',
+      style: "form",
       explode: true,
     },
   },
@@ -557,10 +508,10 @@ export const getPromotionChannels = endpoint({
  * @param body The Roblox.AccountInformation.Api.Models.PromotionChannelsRequest
  */
 export const postPromotionChannels = endpoint({
-  method: 'POST',
-  path: '/v1/promotion-channels',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "POST",
+  path: "/v1/promotion-channels",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   serializationMethod: {
     body: {},
   },
@@ -574,8 +525,7 @@ export const postPromotionChannels = endpoint({
 11: The Facebook profile url is invalid.
 12: The Twitter handle is invalid.
 13: The YouTube url is invalid.
-14: The Twitch profile url is invalid.
-15: The Guilded profile url is invalid.`,
+14: The Twitch profile url is invalid.`,
     },
     {
       status: 401,
@@ -593,10 +543,10 @@ export const postPromotionChannels = endpoint({
  * @summary Gets a star code affiliate supporter for the authenticated user
  */
 export const getStarCodeAffiliates = endpoint({
-  method: 'GET',
-  path: '/v1/star-code-affiliates',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "GET",
+  path: "/v1/star-code-affiliates",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   response: Roblox_AccountInformation_Api_Models_StarCodeAffiliateResponse,
   errors: [
     {
@@ -615,10 +565,10 @@ export const getStarCodeAffiliates = endpoint({
  * @param body Roblox.AccountInformation.Api.Models.StarCodeAffiliateRequest
  */
 export const postStarCodeAffiliates = endpoint({
-  method: 'POST',
-  path: '/v1/star-code-affiliates',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "POST",
+  path: "/v1/star-code-affiliates",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   serializationMethod: {
     body: {},
   },
@@ -649,10 +599,10 @@ export const postStarCodeAffiliates = endpoint({
  * @summary Removes the star code affiliate supporter for the authenticated user
  */
 export const deleteStarCodeAffiliates = endpoint({
-  method: 'DELETE',
-  path: '/v1/star-code-affiliates',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "DELETE",
+  path: "/v1/star-code-affiliates",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   response: z.object({}),
   errors: [
     {
@@ -677,20 +627,20 @@ export const deleteStarCodeAffiliates = endpoint({
  * @param filterLink Whether all promotion channel links should be filtered.
  */
 export const getUsersUseridPromotionChannels = endpoint({
-  method: 'GET',
-  path: '/v1/users/:userId/promotion-channels',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "GET",
+  path: "/v1/users/:userId/promotion-channels",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   serializationMethod: {
     userId: {
-      style: 'simple',
+      style: "simple",
     },
     alwaysReturnUrls: {
-      style: 'form',
+      style: "form",
       explode: true,
     },
     filterLink: {
-      style: 'form',
+      style: "form",
       explode: true,
     },
   },
@@ -699,7 +649,8 @@ export const getUsersUseridPromotionChannels = endpoint({
     alwaysReturnUrls: z.boolean().optional(),
     filterLink: z.boolean().optional(),
   },
-  response: Roblox_AccountInformation_Api_Models_PromotionChannelsByUserIdResponse,
+  response:
+    Roblox_AccountInformation_Api_Models_PromotionChannelsByUserIdResponse,
   errors: [
     {
       status: 400,
@@ -713,13 +664,13 @@ export const getUsersUseridPromotionChannels = endpoint({
  * @param userId
  */
 export const getUsersUseridRobloxBadges = endpoint({
-  method: 'GET',
-  path: '/v1/users/:userId/roblox-badges',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "GET",
+  path: "/v1/users/:userId/roblox-badges",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   serializationMethod: {
     userId: {
-      style: 'simple',
+      style: "simple",
     },
   },
   parameters: {
@@ -728,21 +679,3 @@ export const getUsersUseridRobloxBadges = endpoint({
   response: z.array(Roblox_AccountInformation_Api_RobloxBadgeResponse),
   errors: [],
 });
-/**
- * @api GET https://accountinformation.roblox.com/v1/xbox-live/consecutive-login-days
- * @summary Returns number of consecutive login days for xbox users
- */
-export const getXboxLiveConsecutiveLoginDays = endpoint({
-  method: 'GET',
-  path: '/v1/xbox-live/consecutive-login-days',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
-  response: z.object({ count: z.number().int() }),
-  errors: [
-    {
-      status: 401,
-      description: `0: Authorization has been denied for this request.
-7: The account is not connected to an Xbox Live account`,
-    },
-  ],
-});

package/lib/endpoints/accountinformationv1.js

@@ -57,14 +57,12 @@ const Roblox_AccountInformation_Api_Models_PromotionChannelsResponse = zod_1.z.o
     twitter: zod_1.z.string(),
     youtube: zod_1.z.string(),
     twitch: zod_1.z.string(),
-    guilded: zod_1.z.string(),
 });
 const Roblox_AccountInformation_Api_Models_PromotionChannelsRequest = zod_1.z.object({
     facebook: zod_1.z.string(),
     twitter: zod_1.z.string(),
     youtube: zod_1.z.string(),
     twitch: zod_1.z.string(),
-    guilded: zod_1.z.string(),
     promotionChannelsVisibilityPrivacy: zod_1.z.string(),
 });
 const Roblox_AccountInformation_Api_Models_StarCodeAffiliateResponse = zod_1.z.object({
@@ -80,7 +78,6 @@ const Roblox_AccountInformation_Api_Models_PromotionChannelsByUserIdResponse = z
     twitter: zod_1.z.string(),
     youtube: zod_1.z.string(),
     twitch: zod_1.z.string(),
-    guilded: zod_1.z.string(),
 });
 const Roblox_AccountInformation_Api_RobloxBadgeResponse = zod_1.z.object({
     id: zod_1.z.number().int(),
@@ -529,8 +526,7 @@ exports.postPromotionChannels = (0, __1.endpoint)({
 11: The Facebook profile url is invalid.
 12: The Twitter handle is invalid.
 13: The YouTube url is invalid.
-14: The Twitch profile url is invalid.
-15: The Guilded profile url is invalid.`,
+14: The Twitch profile url is invalid.`,
         },
         {
             status: 401,