@genex-ai/embed-sdk 0.15.0 → 0.17.0

package/dist/{chunk-DWDBRKRS.js → chunk-DNLXNEPL.js}

@@ -341,7 +341,7 @@ var RETRY_FLAG = "genex:embed:retry";
 var POPOVER_DISMISSED_FLAG = "genex:guest:popover-dismissed";
 var LOCAL_AUTH_FLAG = "genex:embed:local-auth";
 var PLAYER_ID_KEY = "genex:player";
-var SDK_VERSION = "0.15.0";
+var SDK_VERSION = "0.17.0";
 var config = null;
 var state = "pending";
 var user = null;
@@ -366,6 +366,8 @@ var nativeReauthTimeoutMs = 3e4;
 var heartbeatIntervalMs = 3e4;
 var handshakeTimer;
 var refreshTimer;
+var unattendedWaiterTimer;
+var earlyWaiterWarned = false;
 var messageHandler;
 var listeners = /* @__PURE__ */ new Map();
 var authWaiters = [];
@@ -382,8 +384,16 @@ function win() {
 function doc() {
   return globalThis.document;
 }
-function doFetch(input, init) {
-  return globalThis.fetch(input, init);
+function doFetch(input, init, timeoutMs) {
+  let signal;
+  if (timeoutMs !== void 0) {
+    try {
+      const ctor = globalThis.AbortSignal;
+      if (ctor && typeof ctor.timeout === "function") signal = ctor.timeout(timeoutMs);
+    } catch {
+    }
+  }
+  return globalThis.fetch(input, signal ? { ...init, signal } : init);
 }
 function readRetryFlag() {
   try {
@@ -449,6 +459,10 @@ function initEmbed(cfg2) {
   if (!w) return;
   if (initialized) return;
   initialized = true;
+  if (unattendedWaiterTimer !== void 0) {
+    clearTimeout(unattendedWaiterTimer);
+    unattendedWaiterTimer = void 0;
+  }
   config = {
     slug: cfg2.slug,
     apiUrl: cfg2.apiUrl.replace(/\/$/, ""),
@@ -506,6 +520,7 @@ function getColyseusUrls() {
 function waitForAuth() {
   if (state === "authenticated" && user) return Promise.resolve({ user });
   if (state === "blocked") return Promise.reject(new Error("genex embed auth: blocked"));
+  noteWaiterBeforeInit("waitForAuth");
   return new Promise((resolve, reject) => {
     authWaiters.push({ resolve, reject });
   });
@@ -515,10 +530,29 @@ function waitForPlayer() {
     return Promise.resolve({ user, guest: state === "guest" });
   }
   if (state === "blocked") return Promise.reject(new Error("genex embed auth: blocked"));
+  noteWaiterBeforeInit("waitForPlayer");
   return new Promise((resolve, reject) => {
     playerWaiters.push({ resolve, reject });
   });
 }
+function noteWaiterBeforeInit(fn) {
+  if (initialized) return;
+  if (!earlyWaiterWarned) {
+    earlyWaiterWarned = true;
+    try {
+      console.error(
+        `[genex] ${fn}() called before initEmbed() \u2014 identity can never resolve and the game will sit black. Call initEmbed({ slug, apiUrl, dashboardOrigins }) first (genex-threejs-embed-auth), and draw a frame before you await identity.`
+      );
+    } catch {
+    }
+  }
+  if (unattendedWaiterTimer === void 0) {
+    unattendedWaiterTimer = setTimeout(() => {
+      unattendedWaiterTimer = void 0;
+      if (!initialized) enterBlocked("no-identity");
+    }, handshakeTimeoutMs);
+  }
+}
 function on(event, cb) {
   let set = listeners.get(event);
   if (!set) {
@@ -841,16 +875,25 @@ function postToParent(message, targetOrigin) {
 async function startStandaloneFlow(w) {
   const frag = readFragment(w);
   if (frag.ticket) {
+    armStandaloneWatchdog();
     await redeemTicket(frag.ticket);
     return;
   }
   if (frag.guest) {
+    armStandaloneWatchdog();
     await requestGuestSession();
     return;
   }
   showOverlay("redirecting");
   await redirectToAuthorize(w, { guestOk: true });
 }
+function armStandaloneWatchdog() {
+  if (handshakeTimer !== void 0) clearTimeout(handshakeTimer);
+  handshakeTimer = setTimeout(() => {
+    handshakeTimer = void 0;
+    if (state === "pending") enterBlocked("no-identity");
+  }, handshakeTimeoutMs);
+}
 var stashedTicketHash = null;
 function _stashTicketFromUrl() {
   const w = win();
@@ -929,11 +972,15 @@ async function redeemTicket(ticket) {
   const epoch = ++identityEpoch;
   redeeming = true;
   try {
-    const res = await doFetch(`${config.apiUrl}/api/embed/session`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ ticket })
-    });
+    const res = await doFetch(
+      `${config.apiUrl}/api/embed/session`,
+      {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ ticket })
+      },
+      handshakeTimeoutMs
+    );
     if (epoch !== identityEpoch) return;
     if (!res.ok) {
       emit("error", { error: new Error(`ticket redemption failed (${res.status})`) });
@@ -946,6 +993,8 @@ async function redeemTicket(ticket) {
     user = body.user;
     colyseusUrls = body.colyseus?.urls;
     state = "authenticated";
+    if (handshakeTimer !== void 0) clearTimeout(handshakeTimer);
+    handshakeTimer = void 0;
     clearRetryFlag();
     removeOverlay();
     removeGuestPopover();
@@ -984,7 +1033,7 @@ async function requestGuestSession() {
       // guest id and the token is unchanged — this just lets the play event
       // key on something that survives the tab.
       body: JSON.stringify({ slug: config.slug, playerId: playerId() })
-    });
+    }, handshakeTimeoutMs);
     if (epoch !== identityEpoch) return;
     if (!res.ok) {
       emit("error", { error: new Error(`guest session failed (${res.status})`) });
@@ -1076,6 +1125,8 @@ function enterLocalTestMode(w) {
 }
 async function handleRedeemFailure() {
   const w = win();
+  if (handshakeTimer !== void 0) clearTimeout(handshakeTimer);
+  handshakeTimer = void 0;
   if (inNativeMode()) {
     clearNativeReauth();
     postNativeError("ticket-rejected");
@@ -1469,8 +1520,11 @@ function __resetForTests(overrides) {
   messageHandler = void 0;
   if (handshakeTimer !== void 0) clearTimeout(handshakeTimer);
   if (refreshTimer !== void 0) clearTimeout(refreshTimer);
+  if (unattendedWaiterTimer !== void 0) clearTimeout(unattendedWaiterTimer);
   handshakeTimer = void 0;
   refreshTimer = void 0;
+  unattendedWaiterTimer = void 0;
+  earlyWaiterWarned = false;
   stopNativeTimers();
   if (w) delete w[NATIVE_RECEIVER];
   nativeEntry = null;

package/dist/index.d.ts

@@ -20,7 +20,20 @@ interface Entitlement {
     id: string;
     skuId: string;
     name: string;
+    /**
+     * How the player got it: `purchase` | `gift` | `test` | `free`.
+     *
+     * Almost never what you want — branch on {@link Entitlement.skuType}.
+     */
     type: string;
+    /**
+     * What the item IS: `consumable` | `durable`. **This is the one to branch on.**
+     *
+     * A consumable is spent on use, so consume it and apply the effect once. A
+     * durable is owned forever — never consume it; its presence in this list IS
+     * the ownership.
+     */
+    skuType: string;
     quantity: number;
     consumed: boolean;
     createdAt: string;
@@ -245,7 +258,9 @@ declare function getColyseusUrls(): string[];
  * session ends up blocked. THE gate for /state saves and any account-bound
  * feature. In a guest session this stays PENDING (it is not rejected —
  * a live upgrade resolves it), so never gate scene boot or connect() on it:
- * use waitForPlayer() for those.
+ * use waitForPlayer() for those. Call initEmbed() FIRST: parked before it,
+ * this logs one console line and, unattended, ends `blocked` after the
+ * handshake budget instead of hanging.
  */
 declare function waitForAuth(): Promise<{
     user: EmbedUser;
@@ -253,7 +268,10 @@ declare function waitForAuth(): Promise<{
 /**
  * Resolves with the current player — guest OR signed-in — as soon as either
  * identity exists; rejects only if the session ends up blocked. THE gate for
- * multiplayer connect() and player-name UI.
+ * multiplayer connect() and player-name UI. Call initEmbed() FIRST — and draw
+ * a frame before awaiting this: parked before init, it logs one console line
+ * and, unattended, ends `blocked` after the handshake budget instead of
+ * leaving the page black.
  */
 declare function waitForPlayer(): Promise<{
     user: EmbedUser;

package/dist/index.js

@@ -21,7 +21,7 @@ import {
   submitScore,
   waitForAuth,
   waitForPlayer
-} from "./chunk-DWDBRKRS.js";
+} from "./chunk-DNLXNEPL.js";
 export {
   __resetForTests,
   _stashTicketFromUrl,

package/dist/sentry.js

@@ -2,7 +2,7 @@ import {
   _stashTicketFromUrl,
   getUser,
   on
-} from "./chunk-DWDBRKRS.js";
+} from "./chunk-DNLXNEPL.js";
 
 // src/sentry.ts
 import * as Sentry from "@sentry/browser";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@genex-ai/embed-sdk",
-  "version": "0.15.0",
+  "version": "0.17.0",
   "description": "Player identity + durable game state for genex games \u2014 signed-in or guest play, per-player save slots, shared world state, and soft-trust leaderboards.",
   "type": "module",
   "main": "./dist/index.js",