rozod 6.1.1 → 6.3.0

package/README.md

@@ -335,6 +335,40 @@ RoZod automatically handles advanced Roblox security requirements:
 - **✅ Hardware-Backed Authentication** - Full HBA signature support  
 - **✅ Challenge Handling** - Captchas, 2FA, and other authentication challenges
 - **✅ Cookie Security** - Secure cookie parsing and validation
+- **✅ Cookie Rotation** - Automatic handling of Roblox's cookie rotation
+
+### Cookie Rotation Handling
+
+Roblox is gradually implementing `.ROBLOSECURITY` cookie rotation for improved security. RoZod automatically detects when cookies are rotated and can notify you to persist the new values:
+
+```ts
+import { configureServer, refreshCookie, getCookies } from 'rozod';
+
+configureServer({
+  cookies: process.env.ROBLOX_COOKIE,
+  onCookieRefresh: async ({ oldCookie, newCookie, poolIndex }) => {
+    // Roblox rotated the cookie - persist the new value
+    await db.updateCookie(poolIndex, newCookie);
+    console.log('Cookie rotated and saved!');
+  }
+});
+```
+
+The internal cookie pool updates automatically, so the callback is only needed if you want to persist cookies across restarts.
+
+You can also proactively refresh cookies before they expire:
+
+```ts
+// Refresh on a schedule or before important operations
+const result = await refreshCookie(0);
+if (result.success) {
+  await db.updateCookie(0, result.newCookie);
+}
+
+// Utility functions
+const allCookies = getCookies();        // Get current cookie values
+updateCookie(0, 'new_value');           // Manually update a cookie
+```
 
 ### Challenge Handling
 

package/lib/endpoints/accountinformationv1.d.ts

@@ -1,5 +1,5 @@
-import { z } from 'zod';
-import { endpoint } from '..';
+import { z } from "zod";
+import { endpoint } from "..";
 
 const Roblox_AccountInformation_Api_Models_BirthdateResponse = z.object({
   birthMonth: z.number().int(),
@@ -45,41 +45,37 @@ const Roblox_AccountInformation_Api_Models_PhoneRequest = z.object({
   password: z.string(),
   verificationChannel: z.string(),
 });
-const Roblox_Platform_UserPhoneNumberVerification_Models_PendingVerificationResponse = z.object({
-  verificationChannel: z.string(),
-  data: z.string(),
-});
-const Roblox_AccountInformation_Api_Models_PromotionChannelsResponse = z.object({
-  promotionChannelsVisibilityPrivacy: z.string(),
-  facebook: z.string(),
-  twitter: z.string(),
-  youtube: z.string(),
-  twitch: z.string(),
-  guilded: z.string(),
-});
+const Roblox_Platform_UserPhoneNumberVerification_Models_PendingVerificationResponse =
+  z.object({ verificationChannel: z.string(), data: z.string() });
+const Roblox_AccountInformation_Api_Models_PromotionChannelsResponse = z.object(
+  {
+    promotionChannelsVisibilityPrivacy: z.string(),
+    facebook: z.string(),
+    twitter: z.string(),
+    youtube: z.string(),
+    twitch: z.string(),
+  }
+);
 const Roblox_AccountInformation_Api_Models_PromotionChannelsRequest = z.object({
   facebook: z.string(),
   twitter: z.string(),
   youtube: z.string(),
   twitch: z.string(),
-  guilded: z.string(),
   promotionChannelsVisibilityPrivacy: z.string(),
 });
-const Roblox_AccountInformation_Api_Models_StarCodeAffiliateResponse = z.object({
-  userId: z.number().int(),
-  name: z.string(),
-  code: z.string(),
-});
+const Roblox_AccountInformation_Api_Models_StarCodeAffiliateResponse = z.object(
+  { userId: z.number().int(), name: z.string(), code: z.string() }
+);
 const Roblox_AccountInformation_Api_Models_StarCodeAffiliateRequest = z.object({
   code: z.string(),
 });
-const Roblox_AccountInformation_Api_Models_PromotionChannelsByUserIdResponse = z.object({
-  facebook: z.string(),
-  twitter: z.string(),
-  youtube: z.string(),
-  twitch: z.string(),
-  guilded: z.string(),
-});
+const Roblox_AccountInformation_Api_Models_PromotionChannelsByUserIdResponse =
+  z.object({
+    facebook: z.string(),
+    twitter: z.string(),
+    youtube: z.string(),
+    twitch: z.string(),
+  });
 const Roblox_AccountInformation_Api_RobloxBadgeResponse = z.object({
   id: z.number().int(),
   name: z.string(),
@@ -102,10 +98,10 @@ const Roblox_AccountInformation_Api_Models_VerifyPhoneRequest = z.object({
  * @summary Get the user's birthdate
  */
 export const getBirthdate = endpoint({
-  method: 'GET',
-  path: '/v1/birthdate',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "GET",
+  path: "/v1/birthdate",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   response: Roblox_AccountInformation_Api_Models_BirthdateResponse,
   errors: [
     {
@@ -123,10 +119,10 @@ export const getBirthdate = endpoint({
  * @summary Get the user's description
  */
 export const getDescription = endpoint({
-  method: 'GET',
-  path: '/v1/description',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "GET",
+  path: "/v1/description",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   response: z.object({ description: z.string() }),
   errors: [
     {
@@ -145,10 +141,10 @@ export const getDescription = endpoint({
  * @param body The Roblox.AccountInformation.Api.Models.DescriptionRequest
  */
 export const postDescription = endpoint({
-  method: 'POST',
-  path: '/v1/description',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "POST",
+  path: "/v1/description",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   serializationMethod: {
     body: {},
   },
@@ -184,10 +180,10 @@ export const postDescription = endpoint({
  * @param body Roblox.AccountInformation.Api.Models.VerifyEmailRequest
  */
 export const postEmailVerify = endpoint({
-  method: 'POST',
-  path: '/v1/email/verify',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "POST",
+  path: "/v1/email/verify",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   serializationMethod: {
     body: {},
   },
@@ -206,10 +202,10 @@ export const postEmailVerify = endpoint({
  * @summary Get the user's gender
  */
 export const getGender = endpoint({
-  method: 'GET',
-  path: '/v1/gender',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "GET",
+  path: "/v1/gender",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   response: z.object({ gender: z.number().int() }),
   errors: [
     {
@@ -228,10 +224,10 @@ export const getGender = endpoint({
  * @param body The Roblox.AccountInformation.Api.Models.GenderRequest
  */
 export const postGender = endpoint({
-  method: 'POST',
-  path: '/v1/gender',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "POST",
+  path: "/v1/gender",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   serializationMethod: {
     body: {},
   },
@@ -263,10 +259,10 @@ export const postGender = endpoint({
  * @summary Get the metadata
  */
 export const getMetadata = endpoint({
-  method: 'GET',
-  path: '/v1/metadata',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "GET",
+  path: "/v1/metadata",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   response: Roblox_AccountInformation_Api_Models_MetadataResponse,
   errors: [],
 });
@@ -275,10 +271,10 @@ export const getMetadata = endpoint({
  * @summary Get Verified Phone Number
  */
 export const getPhone = endpoint({
-  method: 'GET',
-  path: '/v1/phone',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "GET",
+  path: "/v1/phone",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   response: Roblox_AccountInformation_Api_Models_PhoneResponse,
   errors: [
     {
@@ -297,16 +293,17 @@ export const getPhone = endpoint({
  * @param body Roblox.AccountInformation.Api.Models.PhoneRequest
  */
 export const postPhone = endpoint({
-  method: 'POST',
-  path: '/v1/phone',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "POST",
+  path: "/v1/phone",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   serializationMethod: {
     body: {},
   },
   parameters: {},
   body: Roblox_AccountInformation_Api_Models_PhoneRequest,
-  response: Roblox_Platform_UserPhoneNumberVerification_Models_PendingVerificationResponse,
+  response:
+    Roblox_Platform_UserPhoneNumberVerification_Models_PendingVerificationResponse,
   errors: [
     {
       status: 400,
@@ -344,10 +341,10 @@ export const postPhone = endpoint({
  * @param body Roblox.AccountInformation.Api.Models.PhoneRequest
  */
 export const postPhoneDelete = endpoint({
-  method: 'POST',
-  path: '/v1/phone/delete',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "POST",
+  path: "/v1/phone/delete",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   serializationMethod: {
     body: {},
   },
@@ -384,10 +381,10 @@ export const postPhoneDelete = endpoint({
  * @param body Roblox.AccountInformation.Api.Models.PhoneRequest
  */
 export const postPhoneResend = endpoint({
-  method: 'POST',
-  path: '/v1/phone/resend',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "POST",
+  path: "/v1/phone/resend",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   serializationMethod: {
     body: {},
   },
@@ -423,10 +420,10 @@ export const postPhoneResend = endpoint({
  * @param body Roblox.AccountInformation.Api.Models.VerifyPhoneRequest
  */
 export const postPhoneVerify = endpoint({
-  method: 'POST',
-  path: '/v1/phone/verify',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "POST",
+  path: "/v1/phone/verify",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   serializationMethod: {
     body: {},
   },
@@ -470,21 +467,21 @@ export const postPhoneVerify = endpoint({
  * @param onlyShortenTwitter Whether all promotion channels links except for Twitter should be returned as full URLs. If false, all promotion channels will be shortened.
  */
 export const getPromotionChannels = endpoint({
-  method: 'GET',
-  path: '/v1/promotion-channels',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "GET",
+  path: "/v1/promotion-channels",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   serializationMethod: {
     alwaysReturnUrls: {
-      style: 'form',
+      style: "form",
       explode: true,
     },
     filterLink: {
-      style: 'form',
+      style: "form",
       explode: true,
     },
     onlyShortenTwitter: {
-      style: 'form',
+      style: "form",
       explode: true,
     },
   },
@@ -511,10 +508,10 @@ export const getPromotionChannels = endpoint({
  * @param body The Roblox.AccountInformation.Api.Models.PromotionChannelsRequest
  */
 export const postPromotionChannels = endpoint({
-  method: 'POST',
-  path: '/v1/promotion-channels',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "POST",
+  path: "/v1/promotion-channels",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   serializationMethod: {
     body: {},
   },
@@ -528,8 +525,7 @@ export const postPromotionChannels = endpoint({
 11: The Facebook profile url is invalid.
 12: The Twitter handle is invalid.
 13: The YouTube url is invalid.
-14: The Twitch profile url is invalid.
-15: The Guilded profile url is invalid.`,
+14: The Twitch profile url is invalid.`,
     },
     {
       status: 401,
@@ -547,10 +543,10 @@ export const postPromotionChannels = endpoint({
  * @summary Gets a star code affiliate supporter for the authenticated user
  */
 export const getStarCodeAffiliates = endpoint({
-  method: 'GET',
-  path: '/v1/star-code-affiliates',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "GET",
+  path: "/v1/star-code-affiliates",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   response: Roblox_AccountInformation_Api_Models_StarCodeAffiliateResponse,
   errors: [
     {
@@ -569,10 +565,10 @@ export const getStarCodeAffiliates = endpoint({
  * @param body Roblox.AccountInformation.Api.Models.StarCodeAffiliateRequest
  */
 export const postStarCodeAffiliates = endpoint({
-  method: 'POST',
-  path: '/v1/star-code-affiliates',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "POST",
+  path: "/v1/star-code-affiliates",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   serializationMethod: {
     body: {},
   },
@@ -603,10 +599,10 @@ export const postStarCodeAffiliates = endpoint({
  * @summary Removes the star code affiliate supporter for the authenticated user
  */
 export const deleteStarCodeAffiliates = endpoint({
-  method: 'DELETE',
-  path: '/v1/star-code-affiliates',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "DELETE",
+  path: "/v1/star-code-affiliates",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   response: z.object({}),
   errors: [
     {
@@ -631,20 +627,20 @@ export const deleteStarCodeAffiliates = endpoint({
  * @param filterLink Whether all promotion channel links should be filtered.
  */
 export const getUsersUseridPromotionChannels = endpoint({
-  method: 'GET',
-  path: '/v1/users/:userId/promotion-channels',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "GET",
+  path: "/v1/users/:userId/promotion-channels",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   serializationMethod: {
     userId: {
-      style: 'simple',
+      style: "simple",
     },
     alwaysReturnUrls: {
-      style: 'form',
+      style: "form",
       explode: true,
     },
     filterLink: {
-      style: 'form',
+      style: "form",
       explode: true,
     },
   },
@@ -653,7 +649,8 @@ export const getUsersUseridPromotionChannels = endpoint({
     alwaysReturnUrls: z.boolean().optional(),
     filterLink: z.boolean().optional(),
   },
-  response: Roblox_AccountInformation_Api_Models_PromotionChannelsByUserIdResponse,
+  response:
+    Roblox_AccountInformation_Api_Models_PromotionChannelsByUserIdResponse,
   errors: [
     {
       status: 400,
@@ -667,13 +664,13 @@ export const getUsersUseridPromotionChannels = endpoint({
  * @param userId
  */
 export const getUsersUseridRobloxBadges = endpoint({
-  method: 'GET',
-  path: '/v1/users/:userId/roblox-badges',
-  baseUrl: 'https://accountinformation.roblox.com',
-  requestFormat: 'json',
+  method: "GET",
+  path: "/v1/users/:userId/roblox-badges",
+  baseUrl: "https://accountinformation.roblox.com",
+  requestFormat: "json",
   serializationMethod: {
     userId: {
-      style: 'simple',
+      style: "simple",
     },
   },
   parameters: {

package/lib/endpoints/accountinformationv1.js

@@ -57,14 +57,12 @@ const Roblox_AccountInformation_Api_Models_PromotionChannelsResponse = zod_1.z.o
     twitter: zod_1.z.string(),
     youtube: zod_1.z.string(),
     twitch: zod_1.z.string(),
-    guilded: zod_1.z.string(),
 });
 const Roblox_AccountInformation_Api_Models_PromotionChannelsRequest = zod_1.z.object({
     facebook: zod_1.z.string(),
     twitter: zod_1.z.string(),
     youtube: zod_1.z.string(),
     twitch: zod_1.z.string(),
-    guilded: zod_1.z.string(),
     promotionChannelsVisibilityPrivacy: zod_1.z.string(),
 });
 const Roblox_AccountInformation_Api_Models_StarCodeAffiliateResponse = zod_1.z.object({
@@ -80,7 +78,6 @@ const Roblox_AccountInformation_Api_Models_PromotionChannelsByUserIdResponse = z
     twitter: zod_1.z.string(),
     youtube: zod_1.z.string(),
     twitch: zod_1.z.string(),
-    guilded: zod_1.z.string(),
 });
 const Roblox_AccountInformation_Api_RobloxBadgeResponse = zod_1.z.object({
     id: zod_1.z.number().int(),
@@ -529,8 +526,7 @@ exports.postPromotionChannels = (0, __1.endpoint)({
 11: The Facebook profile url is invalid.
 12: The Twitter handle is invalid.
 13: The YouTube url is invalid.
-14: The Twitch profile url is invalid.
-15: The Guilded profile url is invalid.`,
+14: The Twitch profile url is invalid.`,
         },
         {
             status: 401,