@looplay/sdk 0.5.1 → 0.6.0

package/dist/looplay-sdk.esm.js

@@ -29,6 +29,12 @@ var NotAuthenticatedError = class extends LooplaySDKError {
     this.name = "NotAuthenticatedError";
   }
 };
+var MissingStoreError = class extends LooplaySDKError {
+  constructor(gameId) {
+    super(`Game ${gameId} has no storefront configured.`);
+    this.name = "MissingStoreError";
+  }
+};
 
 // src/auth/storage.ts
 var MemoryAuthStorage = class {
@@ -257,32 +263,39 @@ var ServiceClient = class {
   async listRecentPlayed(bearerToken, query) {
     return this.http.request("GET", "/sdk/games/recent-play", { bearerToken, query });
   }
-  async trackView(auth, gameId) {
-    await this.http.request("POST", `/sdk/games/${encodeURIComponent(gameId)}/view`, {
+  async recordGameView(auth, gameId) {
+    await this.http.request("POST", `/sdk/games/${encodeURIComponent(gameId)}/views/record`, {
       ...auth,
       headers: this.trackingHeaders(auth)
     });
     return true;
   }
-  async trackPlay(auth, gameId, attemptId, playTimeSeconds) {
-    const body = { playTimeSeconds, attemptId };
-    await this.http.request("POST", `/sdk/games/${encodeURIComponent(gameId)}/play`, {
+  /** Signs a fresh `attemptToken` — required by `completeGameplayAttempt`/`completeGameplayMatch`/`recordGameplayAction`. */
+  async startGameplayAttempt(auth, gameId, body = {}) {
+    return this.http.request("POST", `/sdk/games/${encodeURIComponent(gameId)}/attempts/start`, {
+      ...auth,
+      headers: this.trackingHeaders(auth),
+      body
+    });
+  }
+  async completeGameplayAttempt(auth, gameId, body) {
+    await this.http.request("POST", `/sdk/games/${encodeURIComponent(gameId)}/attempts/complete`, {
       ...auth,
       headers: this.trackingHeaders(auth),
       body
     });
     return true;
   }
-  async trackMatchEnd(auth, gameId, body) {
-    await this.http.request("POST", `/sdk/games/${encodeURIComponent(gameId)}/end`, {
+  async completeGameplayMatch(auth, gameId, body) {
+    await this.http.request("POST", `/sdk/games/${encodeURIComponent(gameId)}/matches/complete`, {
       ...auth,
       headers: this.trackingHeaders(auth),
       body
     });
     return true;
   }
-  async emitGameEvent(auth, gameId, body) {
-    return this.http.request("POST", `/sdk/games/${encodeURIComponent(gameId)}/emit`, {
+  async recordGameplayAction(auth, gameId, body) {
+    return this.http.request("POST", `/sdk/games/${encodeURIComponent(gameId)}/actions/record`, {
       ...auth,
       headers: this.trackingHeaders(auth),
       body
@@ -293,7 +306,7 @@ var ServiceClient = class {
    * runtimes should still call it to get a `trackingSessionId` for unified
    * tracing — see `GameTrackingSessionDto`.
    */
-  async issueTrackingSession(anonId) {
+  async bootstrapTrackingSession(anonId) {
     return this.http.request("POST", "/sdk/games/tracking/bootstrap", {
       headers: { "x-looplay-anon-id": anonId }
     });
@@ -305,22 +318,104 @@ var ServiceClient = class {
     };
   }
   // ─────────────────────────────────────────────────────────────────────────────
-  // Game assets — spend coin balance on assets defined by the game's
-  // creator. Coin balance itself comes from getBalances()/getMyBalance().
+  // Game store (JWT tier, keyed by `storeId`) — spend coin balance on offers
+  // (single asset or bundle) defined by the game's creator. Coin balance
+  // itself comes from getBalances()/getMyBalance(). Purchases require a
+  // signed `checkoutToken` from `createStoreCheckoutIntent` first.
   // ─────────────────────────────────────────────────────────────────────────────
-  async listGameAssets(gameId, bearerToken) {
-    return this.http.request("GET", `/sdk/games/${encodeURIComponent(gameId)}/assets`, {
+  async getStoreByStoreId(storeId) {
+    return this.http.request("GET", `/sdk/games/store/${encodeURIComponent(storeId)}`);
+  }
+  async listMyStorePurchasesByStoreId(bearerToken, storeId) {
+    return this.http.request("GET", `/sdk/games/store/${encodeURIComponent(storeId)}/purchases/me`, {
       bearerToken
     });
   }
-  async purchaseGameAsset(bearerToken, gameId, assetCode, body = {}) {
-    return this.http.request(
-      "POST",
-      `/sdk/games/${encodeURIComponent(gameId)}/assets/${encodeURIComponent(assetCode)}/purchase`,
-      { bearerToken, body }
-    );
+  async createStoreCheckoutIntent(bearerToken, body, trackingSessionId) {
+    return this.http.request("POST", "/sdk/games/store/by-store-id/checkout-intent", {
+      bearerToken,
+      headers: { "x-game-tracking-session-id": trackingSessionId },
+      body
+    });
+  }
+  async purchaseStoreOffer(bearerToken, body, trackingSessionId) {
+    return this.http.request("POST", "/sdk/games/store/by-store-id/purchase", {
+      bearerToken,
+      headers: { "x-game-tracking-session-id": trackingSessionId },
+      body
+    });
   }
   // ─────────────────────────────────────────────────────────────────────────────
+  // Runtime tier (`x-game-key`) — for a game embedding the SDK with its own
+  // public `appId`, without needing a resolved `gameId`/`storeId` first or a
+  // logged-in user (anonymous tracking still works via `TrackingAuth.anonId`).
+  // Never use the creator-secret tier (`x-creator-key`/`x-game-secret`) from
+  // client/browser code — that would leak the secret to every player.
+  // ─────────────────────────────────────────────────────────────────────────────
+  async recordGameViewForGameKey(gameKey, auth = {}) {
+    await this.http.request("POST", "/sdk/games/runtime/views/record", {
+      ...auth,
+      headers: { "x-game-key": gameKey, ...this.trackingHeaders(auth) }
+    });
+    return true;
+  }
+  async startGameplayAttemptForGameKey(gameKey, auth = {}, body = {}) {
+    return this.http.request("POST", "/sdk/games/runtime/attempts/start", {
+      ...auth,
+      headers: { "x-game-key": gameKey, ...this.trackingHeaders(auth) },
+      body
+    });
+  }
+  async completeGameplayAttemptForGameKey(gameKey, auth = {}, body) {
+    await this.http.request("POST", "/sdk/games/runtime/attempts/complete", {
+      ...auth,
+      headers: { "x-game-key": gameKey, ...this.trackingHeaders(auth) },
+      body
+    });
+    return true;
+  }
+  async completeGameplayMatchForGameKey(gameKey, auth = {}, body) {
+    await this.http.request("POST", "/sdk/games/runtime/matches/complete", {
+      ...auth,
+      headers: { "x-game-key": gameKey, ...this.trackingHeaders(auth) },
+      body
+    });
+    return true;
+  }
+  async recordGameplayActionForGameKey(gameKey, auth = {}, body) {
+    return this.http.request("POST", "/sdk/games/runtime/actions/record", {
+      ...auth,
+      headers: { "x-game-key": gameKey, ...this.trackingHeaders(auth) },
+      body
+    });
+  }
+  async getStoreForGameKey(gameKey) {
+    return this.http.request("GET", "/sdk/games/store/current", {
+      headers: { "x-game-key": gameKey }
+    });
+  }
+  async listGameAssetsForGameKey(gameKey) {
+    return this.http.request("GET", "/sdk/games/store/assets", {
+      headers: { "x-game-key": gameKey }
+    });
+  }
+  async listMyOwnedAssetsForGameKey(bearerToken, gameKey) {
+    return this.http.request("GET", "/sdk/games/store/assets/me", {
+      bearerToken,
+      headers: { "x-game-key": gameKey }
+    });
+  }
+  async listMyStorePurchasesForGameKey(bearerToken, gameKey) {
+    return this.http.request("GET", "/sdk/games/store/purchases/me", {
+      bearerToken,
+      headers: { "x-game-key": gameKey }
+    });
+  }
+  // No public/anonymous purchase route exists for the runtime tier —
+  // purchases move real coin balance and always require the JWT tier
+  // (createStoreCheckoutIntent/purchaseStoreOffer above) or the
+  // creator-secret tier, which this SDK intentionally never wires up.
+  // ─────────────────────────────────────────────────────────────────────────────
   // Balance
   // ─────────────────────────────────────────────────────────────────────────────
   async getBalances(bearerToken, query) {
@@ -350,11 +445,11 @@ var ServiceClient = class {
   // ─────────────────────────────────────────────────────────────────────────────
   // Tasks
   // ─────────────────────────────────────────────────────────────────────────────
-  async listTasks(bearerToken) {
-    return this.http.request("GET", "/sdk/task", { bearerToken });
+  async listTasks(bearerToken, query) {
+    return this.http.request("GET", "/sdk/task", { bearerToken, query: { ...query } });
   }
-  async listFinishedTasks(bearerToken) {
-    return this.http.request("GET", "/sdk/task/finished", { bearerToken });
+  async listFinishedTasks(bearerToken, query) {
+    return this.http.request("GET", "/sdk/task/finished", { bearerToken, query: { ...query } });
   }
   async startTask(bearerToken, body) {
     return this.http.request("POST", "/sdk/task/start", { bearerToken, body });
@@ -382,6 +477,8 @@ var ApiClient = class {
   trackingSession;
   trackingSessionPromise;
   currentAttemptId;
+  gameplayAttempt;
+  gameplayAttemptPromise;
   constructor(options) {
     if (!options.baseUrl) throw new MissingBaseUrlError();
     this.raw = new ServiceClient({
@@ -437,7 +534,7 @@ var ApiClient = class {
       return this.trackingSession;
     }
     if (!this.trackingSessionPromise) {
-      this.trackingSessionPromise = this.raw.issueTrackingSession(anonId).then((dto) => {
+      this.trackingSessionPromise = this.raw.bootstrapTrackingSession(anonId).then((dto) => {
         this.trackingSession = {
           trackingSessionId: dto.trackingSessionId,
           anonTrackingToken: dto.trackingToken,
@@ -450,10 +547,42 @@ var ApiClient = class {
     }
     return this.trackingSessionPromise;
   }
+  /**
+   * Signs (and caches until near expiry) the `attemptToken` required by
+   * `trackPlay`/`trackMatch`/`emit` for the current attempt — does not
+   * swallow failures, unlike `ensureTrackingSession`, since these calls
+   * are rejected outright without a valid token.
+   */
+  async ensureGameplayAttempt(auth, gameId, attemptId) {
+    const now = Date.now();
+    if (this.gameplayAttempt && this.gameplayAttempt.gameId === gameId && this.gameplayAttempt.attemptId === attemptId && this.gameplayAttempt.expiresAtMs > now + 1e4) {
+      return this.gameplayAttempt;
+    }
+    if (!this.gameplayAttemptPromise) {
+      this.gameplayAttemptPromise = this.raw.startGameplayAttempt(auth, gameId, { attemptId }).then((dto) => {
+        this.gameplayAttempt = {
+          gameId,
+          attemptId: dto.attemptId,
+          attemptToken: dto.attemptToken,
+          expiresAtMs: new Date(dto.expiresAt).getTime()
+        };
+        return this.gameplayAttempt;
+      }).finally(() => {
+        this.gameplayAttemptPromise = void 0;
+      });
+    }
+    return this.gameplayAttemptPromise;
+  }
   async getGameDetail(gameId) {
     const token = await this.getAccessToken?.();
     return this.raw.getGameDetail(gameId, token);
   }
+  async resolveStoreId(gameId) {
+    const detail = await this.getGameDetail(gameId);
+    const storeId = detail?.storeId;
+    if (!storeId) throw new MissingStoreError(gameId);
+    return storeId;
+  }
   async listRecentPlayed(query) {
     const token = await this.requireToken();
     return this.raw.listRecentPlayed(token, query);
@@ -461,45 +590,74 @@ var ApiClient = class {
   /** Call once when the game view opens, before any play/match tracking. */
   async trackView(gameId) {
     const auth = await this.resolveTrackingAuth();
-    return this.raw.trackView(auth, gameId);
+    return this.raw.recordGameView(auth, gameId);
   }
   /**
    * Starts a new play attempt and returns its id. Call when the user
-   * presses Play; `trackPlay` reuses this id across calls until the next
+   * presses Play; `trackPlay`/`trackMatch`/`emit` reuse this id (and the
+   * signed `attemptToken` backing it) across calls until the next
    * `startAttempt()`, auto-starting one on first use if none was started.
    */
   startAttempt() {
     this.currentAttemptId = generateId();
+    this.gameplayAttempt = void 0;
     return this.currentAttemptId;
   }
   async trackPlay(gameId, playTimeSeconds) {
     const auth = await this.resolveTrackingAuth();
     const attemptId = this.currentAttemptId ?? this.startAttempt();
-    return this.raw.trackPlay(auth, gameId, attemptId, playTimeSeconds);
+    const { attemptToken } = await this.ensureGameplayAttempt(auth, gameId, attemptId);
+    return this.raw.completeGameplayAttempt(auth, gameId, { playTimeSeconds, attemptId, attemptToken });
   }
   async trackMatch(gameId, body) {
     const auth = await this.resolveTrackingAuth();
-    return this.raw.trackMatchEnd(auth, gameId, body);
+    const attemptId = this.currentAttemptId ?? this.startAttempt();
+    const { attemptToken } = await this.ensureGameplayAttempt(auth, gameId, attemptId);
+    return this.raw.completeGameplayMatch(auth, gameId, { ...body, attemptId, attemptToken });
   }
   async emit(gameId, actionCode, opts) {
     const auth = await this.resolveTrackingAuth();
+    const attemptId = this.currentAttemptId ?? this.startAttempt();
+    const { attemptToken } = await this.ensureGameplayAttempt(auth, gameId, attemptId);
     const body = {
+      attemptId,
+      attemptToken,
       actionCode,
       value: opts?.value,
       refId: opts?.refId,
       payload: opts?.payload
     };
-    return this.raw.emitGameEvent(auth, gameId, body);
+    return this.raw.recordGameplayAction(auth, gameId, body);
   }
-  /** Lists assets purchasable in `gameId`, defined by that game's creator. */
-  async listGameAssets(gameId) {
-    const token = await this.getAccessToken?.();
-    return this.raw.listGameAssets(gameId, token);
+  /** Fetches the storefront (sections + offers) for `gameId`, defined by that game's creator. */
+  async getStore(gameId) {
+    const storeId = await this.resolveStoreId(gameId);
+    return this.raw.getStoreByStoreId(storeId);
   }
-  /** Spends coin balance to purchase an asset — see PurchaseGameAssetRequest for dedupe/quantity. */
-  async purchaseGameAsset(gameId, assetCode, opts) {
-    const token = await this.requireToken();
-    return this.raw.purchaseGameAsset(token, gameId, assetCode, opts);
+  /** Purchase history for the authenticated player in `gameId`'s store. */
+  async listMyStorePurchases(gameId) {
+    const [token, storeId] = await Promise.all([this.requireToken(), this.resolveStoreId(gameId)]);
+    return this.raw.listMyStorePurchasesByStoreId(token, storeId);
+  }
+  /**
+   * Spends coin balance to purchase a store offer — signs a checkout intent
+   * first, then redeems it, mirroring the gameplay attempt flow above.
+   */
+  async purchaseStoreOffer(gameId, offerCode, opts) {
+    const [token, storeId] = await Promise.all([this.requireToken(), this.resolveStoreId(gameId)]);
+    const intent = await this.raw.createStoreCheckoutIntent(token, {
+      storeId,
+      offerCode,
+      requestId: opts?.requestId,
+      quantity: opts?.quantity
+    });
+    return this.raw.purchaseStoreOffer(token, {
+      storeId,
+      offerCode,
+      requestId: intent.requestId,
+      quantity: intent.quantity,
+      checkoutToken: intent.checkoutToken
+    });
   }
   async getMyProfile() {
     const token = await this.requireToken();
@@ -525,13 +683,13 @@ var ApiClient = class {
     const token = await this.requireToken();
     return this.raw.setReferral(token, body);
   }
-  async listTasks() {
+  async listTasks(query) {
     const token = await this.requireToken();
-    return this.raw.listTasks(token);
+    return this.raw.listTasks(token, query);
   }
-  async listFinishedTasks() {
+  async listFinishedTasks(query) {
     const token = await this.requireToken();
-    return this.raw.listFinishedTasks(token);
+    return this.raw.listFinishedTasks(token, query);
   }
   async startTask(body) {
     const token = await this.requireToken();
@@ -1185,6 +1343,6 @@ ${identity}`;
   }
 };
 
-export { ApiClient, BrowserLocalStorageAuthStorage, HttpClient, HttpError, LooplayAuth, LooplayIframeAuth, LooplaySDK, LooplaySDKError, MemoryAuthStorage, MissingAuthError, MissingBaseUrlError, NotAuthenticatedError, NotInitializedError, ServiceClient, TelegramAuthProvider };
+export { ApiClient, BrowserLocalStorageAuthStorage, HttpClient, HttpError, LooplayAuth, LooplayIframeAuth, LooplaySDK, LooplaySDKError, MemoryAuthStorage, MissingAuthError, MissingBaseUrlError, MissingStoreError, NotAuthenticatedError, NotInitializedError, ServiceClient, TelegramAuthProvider };
 //# sourceMappingURL=looplay-sdk.esm.js.map
 //# sourceMappingURL=looplay-sdk.esm.js.map