scorezilla 0.5.0 → 0.5.1

package/API.md

@@ -111,17 +111,22 @@ Violations throw a plain `Error` (not `ScorezillaError`) before any network call
 
 #### Errors
 
-| Code                             | Status | Meaning                                                                                                                         |
-| -------------------------------- | ------ | ------------------------------------------------------------------------------------------------------------------------------- |
-| `unauthorized`                   | 401    | Invalid `publicKey`.                                                                                                            |
-| `forbidden`                      | 403    | Key is not bound to this `boardId`.                                                                                             |
-| `not_found`                      | 404    | Board doesn't exist.                                                                                                            |
-| `out_of_bounds`                  | 422    | Score outside the board's `[minScore, maxScore]`. `error.reason` is `'below_min'` or `'above_max'`; `error.bound` is the limit. |
-| `rate_limited`                   | 429    | Throttled. `error.retryAfter` (seconds), `error.layer`.                                                                         |
-| `invalid_input` / `invalid_json` | 400    | Malformed body.                                                                                                                 |
-| `network_error`                  | 0      | Could not reach the API.                                                                                                        |
-| `timeout`                        | 0      | Request exceeded `timeoutMs`.                                                                                                   |
-| `aborted`                        | 0      | Caller-provided `AbortSignal` fired.                                                                                            |
+| Code                             | Status | Meaning                                                                                                                                               |
+| -------------------------------- | ------ | ----------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `unauthorized`                   | 401    | Invalid `publicKey`.                                                                                                                                  |
+| `forbidden`                      | 403    | Key is not bound to this `boardId`.                                                                                                                   |
+| `origin_not_allowed`             | 403    | Request `Origin` is not in the board's allowlist (configured in the dashboard). Gates browser submits only — server-to-server calls send no `Origin`. |
+| `player_banned`                  | 403    | The player is on this board's denylist (banned by the game owner).                                                                                    |
+| `turnstile_required`             | 403    | The board requires a Cloudflare Turnstile token and none was sent.                                                                                    |
+| `turnstile_failed`               | 403    | The supplied Turnstile token failed verification.                                                                                                     |
+| `turnstile_hostname_mismatch`    | 403    | The Turnstile token was solved on an origin not allowed for this game.                                                                                |
+| `not_found`                      | 404    | Board doesn't exist.                                                                                                                                  |
+| `out_of_bounds`                  | 422    | Score outside the board's `[minScore, maxScore]`. `error.reason` is `'below_min'` or `'above_max'`; `error.bound` is the limit.                       |
+| `rate_limited`                   | 429    | Throttled. `error.retryAfter` (seconds), `error.layer`.                                                                                               |
+| `invalid_input` / `invalid_json` | 400    | Malformed body.                                                                                                                                       |
+| `network_error`                  | 0      | Could not reach the API.                                                                                                                              |
+| `timeout`                        | 0      | Request exceeded `timeoutMs`.                                                                                                                         |
+| `aborted`                        | 0      | Caller-provided `AbortSignal` fired.                                                                                                                  |
 
 ### `getLeaderboard`
 
@@ -154,6 +159,12 @@ const { entries } = await sz.getLeaderboard({ boardId, top: 25 });
 for (const e of entries) console.log(`${e.rank}. ${e.playerId}: ${e.score}`);
 ```
 
+> **Read-path errors.** The read methods (`getLeaderboard`, `getPlayerRank`,
+> `getWindowAround`) share the codes in the [`submitScore` table](#errors)
+> (minus the submit-only ones), and add one: **`tenant_suspended`** (`402`) when
+> the board's tenant is suspended. (On the submit path that same condition
+> surfaces as `usage_cap_exceeded` with `reason: 'suspended'`.)
+
 ### `getPlayerRank`
 
 `GET /v1/boards/:boardId/players/:playerId/rank`. "No entry yet" is a normal

package/CHANGELOG.md

@@ -1,11 +1,20 @@
 # Changelog
 
+## 0.5.1
+
+### Patch Changes
+
+- [#66](https://github.com/isco-tec/scorezilla-js/pull/66) [`746d599`](https://github.com/isco-tec/scorezilla-js/commit/746d599880a347ca656b233a9241dc6b8cc68926) Thanks [@isco-tec](https://github.com/isco-tec)! - Add `turnstile_hostname_mismatch` to the `ScorezillaErrorCode` union — a 403 the API can return when a Turnstile token is solved on an origin not allowed for the game. It previously fell through the open union as an untyped string; now it's a first-class code (with JSDoc) and documented in the API reference alongside the other 403 codes.
+
+- [#67](https://github.com/isco-tec/scorezilla-js/pull/67) [`2966433`](https://github.com/isco-tec/scorezilla-js/commit/2966433d66883fb3eee04596aefbba5d1677c436) Thanks [@isco-tec](https://github.com/isco-tec)! - Add `tenant_suspended` to the `ScorezillaErrorCode` union — a `402` the read paths (`getLeaderboard` / `getPlayerRank` / `getWindowAround`) return when the board's tenant is suspended. It previously fell through the open union as an untyped string; now it's typed (with JSDoc) and documented in the API reference. (On submit, the same condition still surfaces as `usage_cap_exceeded` with `reason: 'suspended'`.)
+
+- [#62](https://github.com/isco-tec/scorezilla-js/pull/62) [`90b277a`](https://github.com/isco-tec/scorezilla-js/commit/90b277afb745c29fbdcca46cd6dbd14479229c2f) Thanks [@isco-tec](https://github.com/isco-tec)! - Add the newer server error codes to the `ScorezillaErrorCode` union so consumers get autocomplete + type-checking when branching on them: `player_banned`, `name_taken`, `board_archived`, `turnstile_required`, `turnstile_failed`, `origin_not_allowed`. (Runtime behavior is unchanged — the union's open tail already carried these strings at runtime.) The `submitScore` `@throws` JSDoc now lists `player_banned` and `name_taken` as possible outcomes.
+
 ## 0.5.0
 
 ### Minor Changes
 
 - [#60](https://github.com/isco-tec/scorezilla-js/pull/60) [`20ccc50`](https://github.com/isco-tec/scorezilla-js/commit/20ccc50d0f37a491c309b2f47555c698c3ceaec2) Thanks [@isco-tec](https://github.com/isco-tec)! - Add the headless, never-throws client and cross-platform submit fields.
-
   - **`scorezilla/headless`** — a new subpath exposing `createHeadlessClient(config)` with `submit(...) → { ok, rank, totalEntries, isPersonalBest } | null` and `getLeaderboard(...) → RankedEntry[]` that **never throw**: failures collapse to `null` / `[]`. This is the identical headless surface a host wraps so embedded game code never changes between platforms. Plus `isCrossOrigin(homeOrigin)` to detect cross-site embedding and decide whether the token path is needed.
   - **`submitScore` / headless `submit`** now accept an optional **`name`** (public display name) and **`turnstileToken`** (the cross-origin token path); both are forwarded on the wire.
   - **`RankedEntry`** now carries an optional **`name`** — the display name returned by the leaderboard read.

package/dist/{errors-maldlTY-.d.ts → errors-8qzE40-2.d.ts}

@@ -1,4 +1,4 @@
-import { S as ScorezillaErrorCode, O as OutOfBoundsReason, U as UsageCapReason, B as BillingTier, A as ApiError } from './types-C6VO4OWP.js';
+import { S as ScorezillaErrorCode, O as OutOfBoundsReason, U as UsageCapReason, B as BillingTier, A as ApiError } from './types-BxxzS_pF.js';
 
 /**
  * SDK error type.

package/dist/{errors-DuRShuw9.d.cts → errors-Bu084BD9.d.cts}

@@ -1,4 +1,4 @@
-import { S as ScorezillaErrorCode, O as OutOfBoundsReason, U as UsageCapReason, B as BillingTier, A as ApiError } from './types-C6VO4OWP.cjs';
+import { S as ScorezillaErrorCode, O as OutOfBoundsReason, U as UsageCapReason, B as BillingTier, A as ApiError } from './types-BxxzS_pF.cjs';
 
 /**
  * SDK error type.

package/dist/headless.cjs

@@ -656,7 +656,7 @@ function validateMetadata(metadata) {
 }
 var Scorezilla = class _Scorezilla {
   /** The package version, injected at build time from `package.json`. */
-  static version = "0.5.0";
+  static version = "0.5.1";
   #config;
   #userAgent;
   #authHeader;
@@ -696,7 +696,11 @@ var Scorezilla = class _Scorezilla {
    * @throws {ScorezillaError} `unauthorized` (bad publicKey), `forbidden`
    *   (key not bound to this board), `not_found` (board doesn't exist),
    *   `out_of_bounds` (score outside board's min/max), `rate_limited`
-   *   (Layer 2/3 throttle hit), `invalid_input`, `network_error`, `timeout`.
+   *   (Layer 2/3 throttle hit), `player_banned` (denylisted on this board),
+   *   `name_taken` (display name held by another player), `turnstile_required`
+   *   / `turnstile_failed` (Turnstile-gated board), `origin_not_allowed`
+   *   (Origin not in the board's allowlist), `invalid_input`, `network_error`,
+   *   `timeout`.
    * @since 0.1.0
    * @stability stable
    */