Client enforcement

License shell.

This is the future contract between the Minecraft client and the account backend. It is staged now so the mod can be wired cleanly after Discord and payments are real.

Validation test

Check a license key.

API contract

What the client will call.

POST /api/license/validate
{
  "licenseKey": "GC-XXXX-XXXX",
  "deviceId": "client-generated-device-id",
  "minecraftName": "PlayerName"
}

The backend verifies Stripe ownership or Discord role before returning active access.
The response can include plan, expiry, Discord user ID, and feature flags.
The client should fail closed for protected release features once the live backend exists.
Device binding and rate limits should be forgiving at first, then tightened after support patterns are known.