@looplay/sdk 0.8.7 → 0.8.9

package/dist/looplay-sdk.esm.js

@@ -682,6 +682,43 @@ var ApiClient = class {
   }
 };
 
+// src/constants.ts
+var DEFAULT_API_URL = "https://miniapp-api.looplay.gg";
+function resolveEnvParentOrigin() {
+  try {
+    if (typeof import.meta !== "undefined" && import.meta.env?.VITE_PARENT_ORIGIN) {
+      const val = import.meta.env.VITE_PARENT_ORIGIN;
+      if (typeof val === "string" && val.trim().length > 0) return val.trim();
+    }
+  } catch {
+  }
+  try {
+    if (typeof process !== "undefined" && process.env?.VITE_PARENT_ORIGIN) {
+      const val = process.env.VITE_PARENT_ORIGIN;
+      if (typeof val === "string" && val.trim().length > 0) return val.trim();
+    }
+  } catch {
+  }
+  return void 0;
+}
+function resolveEnvApiUrl() {
+  try {
+    if (typeof import.meta !== "undefined" && import.meta.env) {
+      const val = import.meta.env.VITE_API_URL ?? import.meta.env.VITE_LOOPLAY_API_URL;
+      if (typeof val === "string" && val.trim().length > 0) return val.trim();
+    }
+  } catch {
+  }
+  try {
+    if (typeof process !== "undefined" && process.env) {
+      const val = process.env.VITE_API_URL ?? process.env.VITE_LOOPLAY_API_URL;
+      if (typeof val === "string" && val.trim().length > 0) return val.trim();
+    }
+  } catch {
+  }
+  return void 0;
+}
+
 // src/looplay-sdk.ts
 var LooplaySDK = class {
   auth;
@@ -689,7 +726,12 @@ var LooplaySDK = class {
   gameId;
   initialized = false;
   constructor(options = {}) {
-    const { auth, baseUrl, fetch, defaultHeaders } = options;
+    const {
+      auth,
+      baseUrl = resolveEnvApiUrl() ?? DEFAULT_API_URL,
+      fetch,
+      defaultHeaders
+    } = options;
     if (auth) {
       this.auth = new LooplayAuth(auth);
     }
@@ -774,9 +816,23 @@ var LooplaySDK = class {
     if (!this.api) throw new MissingBaseUrlError();
     await this.api.listGameAssets(params.gameId);
   }
+  /**
+   * Best-effort self-report — must never block init(). A missing/misconfigured
+   * whitelist (a separate setup step from SDK integration) makes the backend
+   * reject this call; if that rejection propagated, the whole init() would
+   * reject too and every other SDK method would throw NotInitializedError,
+   * breaking a game over what's really just an unfinished onboarding step.
+   */
   async detectIntegration(params) {
     if (!this.api) return;
-    await this.api.detectIntegration(params.gameId);
+    try {
+      await this.api.detectIntegration(params.gameId);
+    } catch (error) {
+      console.warn(
+        "[LooplaySDK] detectIntegration failed (SDK will still initialize) \u2014 check that this game has a whitelisted origin/domain configured:",
+        error
+      );
+    }
   }
 };
 
@@ -948,7 +1004,7 @@ var LooplayIframeAuth = class {
     return this.state.jwt;
   }
   getApiUrl() {
-    return this.state.apiUrl ?? this.options.apiUrl ?? null;
+    return this.state.apiUrl ?? this.options.apiUrl ?? resolveEnvApiUrl() ?? DEFAULT_API_URL;
   }
   /** Resolves to the configured `appId`, falling back to whatever the parent pushed as `gameId`. */
   getGameId() {
@@ -1150,12 +1206,13 @@ var LooplayIframeAuth = class {
   }
   /**
    * Idempotent; auto-emits GAME_STARTED exactly once per distinct auth
-   * session (bearer or anonymous), and self-reports SDK integration the
-   * same way the standalone `LooplaySDK.init()` does — without this, games
-   * embedded via iframe never trigger the active detect call, only the
-   * passive heartbeat that tracking calls leave behind (which doesn't fire
-   * at all while the game is still IN_REVIEW/not LIVE, since tracking is
-   * blocked until then).
+   * session (bearer or anonymous). SDK integration self-reporting for the
+   * iframe path lives in `detectIntegrationOnce()` (fired from `setState()`
+   * on every auth/config change, not gated behind lifecycle tracking being
+   * enabled at all) — without it, games embedded via iframe would never
+   * trigger the active detect call, only the passive heartbeat that
+   * tracking calls leave behind (which doesn't fire while the game is still
+   * IN_REVIEW/not LIVE, since tracking is blocked until then).
    */
   initLifecycleTracking() {
     if (this.lifecycleTrackingInitialized || typeof window === "undefined")
@@ -1166,11 +1223,6 @@ var LooplayIframeAuth = class {
       const key = this.getTrackingKey();
       if (!key || this.lastGameStartedKey === key) return;
       this.lastGameStartedKey = key;
-      const gameId = this.getGameId();
-      if (gameId) {
-        this.debug("auto detectIntegration dispatch", { gameId });
-        void this.getClient().detectIntegration(gameId).catch(() => void 0);
-      }
       this.debug("auto GAME_STARTED dispatch");
       void this.emitGameEvent("GAME_STARTED");
     });
@@ -1328,6 +1380,8 @@ ${gameId}`;
   }
   resolveParentOrigin() {
     if (this.options.parentOrigin) return this.options.parentOrigin;
+    const envOrigin = resolveEnvParentOrigin();
+    if (envOrigin) return envOrigin;
     if (typeof document === "undefined" || !document.referrer) return null;
     try {
       return new URL(document.referrer).origin;
@@ -1369,6 +1423,6 @@ ${gameId}`;
   }
 };
 
-export { ApiClient, BrowserLocalStorageAuthStorage, HttpClient, HttpError, LOOPLAY_SDK_VERSION, LooplayAuth, LooplayIframeAuth, LooplaySDK, LooplaySDKError, MemoryAuthStorage, MissingAuthError, MissingBaseUrlError, NotAuthenticatedError, NotInitializedError, ServiceClient, TelegramAuthProvider };
+export { ApiClient, BrowserLocalStorageAuthStorage, DEFAULT_API_URL, HttpClient, HttpError, LOOPLAY_SDK_VERSION, LooplayAuth, LooplayIframeAuth, LooplaySDK, LooplaySDKError, MemoryAuthStorage, MissingAuthError, MissingBaseUrlError, NotAuthenticatedError, NotInitializedError, ServiceClient, TelegramAuthProvider, resolveEnvApiUrl, resolveEnvParentOrigin };
 //# sourceMappingURL=looplay-sdk.esm.js.map
 //# sourceMappingURL=looplay-sdk.esm.js.map