@longstoryshort/vtt-sdk 0.3.0 → 0.4.0

package/dist/adapters/owlbear/index.d.ts

@@ -1,4 +1,5 @@
 import { V as VTTAdapter, a as VTTUser, S as SheetEvent, N as NotifyVariant } from '../../types-w2_82sqo.js';
+import * as _owlbear_rodeo_sdk from '@owlbear-rodeo/sdk';
 
 /**
  * Owlbear Rodeo implementation of {@link VTTAdapter}.
@@ -19,7 +20,6 @@ declare class OwlbearAdapter implements VTTAdapter {
     get isAvailable(): boolean;
     ready(): Promise<boolean>;
     private init;
-    private loadSdk;
     getSessionId(): string | undefined;
     getCurrentUser(): VTTUser | undefined;
     broadcast(event: SheetEvent): void;
@@ -48,4 +48,36 @@ declare const LABEL_METADATA_KEY = "rodeo.lss/label";
 /** How long a roll label floats over a token before it is removed. */
 declare const DEFAULT_LABEL_TTL_MS = 4000;
 
-export { BROADCAST_CHANNEL, DEFAULT_LABEL_TTL_MS, LABEL_METADATA_KEY, OwlbearAdapter, syncObrref };
+interface ObrLike {
+    onReady(cb: () => void): void;
+}
+/** Promisifies `OBR.onReady` — resolves once the OBR_READY handshake completes. */
+declare function whenObrReady(obr: ObrLike): Promise<void>;
+
+type OwlbearSdk = typeof _owlbear_rodeo_sdk;
+/**
+ * The window shape expected by the SDK preload contract.
+ * Set `__lssObrSdk` at the app entry (before any navigation) so
+ * `loadObrSdk` can reuse the already-imported module and avoid missing
+ * the one-shot OBR_READY handshake.
+ */
+interface ObrPreloadWindow {
+    __lssObrSdk?: OwlbearSdk;
+}
+/**
+ * Call this at the bridge entry module — before any client-side navigation —
+ * to stash the already-imported OBR SDK so `loadObrSdk` can find it.
+ */
+declare function preloadObrSdk(sdk: OwlbearSdk): void;
+/**
+ * Retrieves the OBR SDK for use inside an OBR extension frame.
+ *
+ * Prefers the copy stashed by `preloadObrSdk` (imported early enough to catch
+ * the one-shot OBR_READY handshake). Falls back to a dynamic import if the
+ * stash is absent, with a warning — the dynamic path may miss OBR_READY.
+ *
+ * Returns `null` when not running in a browser or when the import fails.
+ */
+declare function loadObrSdk(): Promise<OwlbearSdk | null>;
+
+export { BROADCAST_CHANNEL, DEFAULT_LABEL_TTL_MS, LABEL_METADATA_KEY, type ObrPreloadWindow, OwlbearAdapter, loadObrSdk, preloadObrSdk, syncObrref, whenObrReady };

package/dist/adapters/owlbear/index.js

@@ -44,8 +44,44 @@ function syncObrref() {
   }
 }
 
-// src/adapters/owlbear/OwlbearAdapter.ts
+// src/adapters/owlbear/loadObrSdk.ts
 var DEV2 = process.env["NODE_ENV"] !== "production";
+function preloadObrSdk(sdk) {
+  window.__lssObrSdk = sdk;
+}
+async function loadObrSdk() {
+  if (typeof window === "undefined") {
+    return null;
+  }
+  const host = window;
+  for (let i = 0; i < 10 && !host.__lssObrSdk; i += 1) {
+    await new Promise((resolve) => {
+      window.setTimeout(resolve, 50);
+    });
+  }
+  if (host.__lssObrSdk) {
+    return host.__lssObrSdk;
+  }
+  if (DEV2) {
+    console.warn("[LSS/OBR] no preloaded SDK \u2014 importing now (may miss OBR_READY)");
+  }
+  try {
+    return await import('@owlbear-rodeo/sdk');
+  } catch (error) {
+    console.error("[LSS/OBR] SDK import failed:", error);
+    return null;
+  }
+}
+
+// src/adapters/owlbear/whenObrReady.ts
+function whenObrReady(obr) {
+  return new Promise((resolve) => {
+    obr.onReady(resolve);
+  });
+}
+
+// src/adapters/owlbear/OwlbearAdapter.ts
+var DEV3 = process.env["NODE_ENV"] !== "production";
 var NOTIFY_VARIANT = {
   info: "INFO",
   success: "SUCCESS",
@@ -73,13 +109,13 @@ var OwlbearAdapter = class {
       return false;
     }
     syncObrref();
-    const sdk = await this.loadSdk();
+    const sdk = await loadObrSdk();
     if (!sdk) {
       return false;
     }
     this.sdk = sdk;
     this.obr = sdk.default;
-    if (DEV2) {
+    if (DEV3) {
       console.info(
         "[LSS/OBR] init \u2014 isAvailable:",
         this.obr.isAvailable,
@@ -88,18 +124,16 @@ var OwlbearAdapter = class {
       );
     }
     if (!this.obr.isAvailable) {
-      if (DEV2) {
+      if (DEV3) {
         console.warn("[LSS/OBR] not embedded (origin empty) \u2014 obrref missing at SDK load.");
       }
       return false;
     }
-    if (DEV2) {
+    if (DEV3) {
       console.info("[LSS/OBR] awaiting onReady (isReady =", this.obr.isReady, ")");
     }
-    await new Promise((resolve) => {
-      this.obr.onReady(resolve);
-    });
-    if (DEV2) {
+    await whenObrReady(this.obr);
+    if (DEV3) {
       console.info("[LSS/OBR] onReady fired \u2014 fetching player\u2026");
     }
     if (this.disposed) {
@@ -112,31 +146,11 @@ var OwlbearAdapter = class {
       this.obr.player.getRole()
     ]);
     this.user = { id, name, role: role === "GM" ? "gm" : "player" };
-    if (DEV2) {
+    if (DEV3) {
       console.info("[LSS/OBR] ready \u2014 room:", this.sessionId, "user:", this.user);
     }
     return true;
   }
-  async loadSdk() {
-    const host = window;
-    for (let i = 0; i < 10 && !host.__lssObrSdk; i += 1) {
-      await new Promise((resolve) => {
-        window.setTimeout(resolve, 50);
-      });
-    }
-    if (host.__lssObrSdk) {
-      return host.__lssObrSdk;
-    }
-    if (DEV2) {
-      console.warn("[LSS/OBR] no preloaded SDK \u2014 importing now (may miss OBR_READY)");
-    }
-    try {
-      return await import('@owlbear-rodeo/sdk');
-    } catch (error) {
-      console.error("[LSS/OBR] SDK import failed:", error);
-      return null;
-    }
-  }
   getSessionId() {
     return this.sessionId;
   }
@@ -168,14 +182,14 @@ var OwlbearAdapter = class {
     try {
       const selection = await obr.player.getSelection();
       if (!selection || selection.length !== 1) {
-        if (DEV2) {
+        if (DEV3) {
           console.warn("[OwlbearAdapter] label skipped \u2014 selected tokens:", selection?.length ?? 0);
         }
         return false;
       }
       const [token] = await obr.scene.items.getItems(selection);
       if (!token) {
-        if (DEV2) {
+        if (DEV3) {
           console.warn("[OwlbearAdapter] label skipped \u2014 selected item not found in scene");
         }
         return false;
@@ -188,7 +202,7 @@ var OwlbearAdapter = class {
       }, ttlMs);
       return true;
     } catch (error) {
-      if (DEV2) {
+      if (DEV3) {
         console.warn("[OwlbearAdapter] label error:", error);
       }
       return false;
@@ -199,4 +213,4 @@ var OwlbearAdapter = class {
   }
 };
 
-export { BROADCAST_CHANNEL, DEFAULT_LABEL_TTL_MS, LABEL_METADATA_KEY, OwlbearAdapter, syncObrref };
+export { BROADCAST_CHANNEL, DEFAULT_LABEL_TTL_MS, LABEL_METADATA_KEY, OwlbearAdapter, loadObrSdk, preloadObrSdk, syncObrref, whenObrReady };

package/dist/index.d.ts

@@ -1,6 +1,13 @@
 import { b as SheetSource, V as VTTAdapter, R as RollBridgeOptions, c as SheetClientOptions, d as SheetClient, C as CapabilityManifest, S as SheetEvent, M as MessageHost, D as DiceRollPayload, N as NotifyVariant } from './types-w2_82sqo.js';
 export { e as CapabilityDescriptor, f as CapabilityOpAddTag, g as CapabilityOpAdjust, h as CapabilityOpName, i as CapabilityOpRemoveTag, j as CapabilityOpRequestRoll, k as CapabilityOpSet, l as CapabilityOpToggle, m as CapabilityOperation, H as HealthChangedPayload, n as MessageTarget, o as RollBridgeMessages, a as VTTUser, p as VTTUserRole } from './types-w2_82sqo.js';
 
+/**
+ * Minimum sandbox tokens required on the sheet iframe.
+ * `allow-same-origin` is essential — without it the sheet gets an opaque origin
+ * and auth (cookies / localStorage) breaks entirely.
+ */
+declare const SHEET_IFRAME_SANDBOX = "allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-forms allow-modals";
+
 /**
  * The default roll bridge — one opinionated policy, not the full protocol.
  *
@@ -72,4 +79,4 @@ declare function formatRollMessage(payload: DiceRollPayload): string;
 /** Maps a roll's crit state onto a toast variant. */
 declare function rollVariant(payload: DiceRollPayload): NotifyVariant;
 
-export { type BridgeSheetSource, type BridgeSheetSourceOptions, CapabilityManifest, DiceRollPayload, MessageHost, NotifyVariant, RollBridgeOptions, SheetClient, SheetClientOptions, SheetEvent, type SheetFrameRef, SheetSource, VTTAdapter, createBridgeSheetSource, createRollBridge, createSheetClient, formatRollMessage, rollVariant };
+export { type BridgeSheetSource, type BridgeSheetSourceOptions, CapabilityManifest, DiceRollPayload, MessageHost, NotifyVariant, RollBridgeOptions, SHEET_IFRAME_SANDBOX, SheetClient, SheetClientOptions, SheetEvent, type SheetFrameRef, SheetSource, VTTAdapter, createBridgeSheetSource, createRollBridge, createSheetClient, formatRollMessage, rollVariant };

package/dist/index.js

@@ -1,3 +1,6 @@
+// src/constants.ts
+var SHEET_IFRAME_SANDBOX = "allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-forms allow-modals";
+
 // src/formatRoll.ts
 function formatRollMessage(payload) {
   let crit = "";
@@ -185,4 +188,4 @@ function createBridgeSheetSource(options) {
   };
 }
 
-export { createBridgeSheetSource, createRollBridge, createSheetClient, formatRollMessage, rollVariant };
+export { SHEET_IFRAME_SANDBOX, createBridgeSheetSource, createRollBridge, createSheetClient, formatRollMessage, rollVariant };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@longstoryshort/vtt-sdk",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Embed a longstoryshort.app character sheet in any virtual tabletop via iframe and postMessage",
   "license": "MIT",
   "type": "module",