@scalebun/web 1.0.0

package/dist/features/engage/gameLogic.js

@@ -0,0 +1,213 @@
+/**
+ * Which ACTION each gamified variant performs. `play` grants, `load` reads existing state,
+ * `check_in` is a once-a-day grant, `submit_quiz` carries an answer. The host's backend switches on
+ * this, so it has to match mobile exactly.
+ */
+const GAME_ACTIONS = {
+    spin_wheel: 'play',
+    scratch_card: 'play',
+    slot_reward: 'play',
+    mystery_box: 'play',
+    progress_unlock: 'load',
+    streak_reward: 'load',
+    daily_check_in: 'check_in',
+    quiz_card: 'submit_quiz',
+};
+const rec = (v) => v !== null && typeof v === 'object' && !Array.isArray(v) ? v : {};
+const str = (v) => (typeof v === 'string' ? v.trim() : '');
+export function isInAppGameVariant(value) {
+    return typeof value === 'string' && Object.prototype.hasOwnProperty.call(GAME_ACTIONS, value);
+}
+export function inAppGameActionFor(value) {
+    return isInAppGameVariant(value) ? GAME_ACTIONS[value] : null;
+}
+/** Presentation-declared ids are validation hints, never probability or grant logic. */
+export function inAppGameAllowedOutcomeIds(ext) {
+    const e = rec(ext);
+    const sources = [e.outcomes, e.rewards, e.segments];
+    const ids = sources.flatMap((source) => (Array.isArray(source) ? source : []).map((item) => {
+        const value = rec(item);
+        return str(value.id ?? value.value ?? value.code);
+    }));
+    return [...new Set(ids.filter(Boolean))];
+}
+/** Build a correctly discriminated host request from the mounted game. */
+export function buildInAppGameRequest(input) {
+    const base = {
+        campaignId: input.campaignId,
+        gameKey: input.gameKey,
+        attemptId: input.attemptId,
+        attempt: Math.max(1, Math.floor(input.attempt)),
+        ...(input.payload ? { input: input.payload } : {}),
+        ...(input.allowedOutcomeIds?.length ? { allowedOutcomeIds: input.allowedOutcomeIds } : {}),
+    };
+    switch (input.variantKey) {
+        case 'spin_wheel':
+        case 'scratch_card':
+        case 'slot_reward':
+        case 'mystery_box':
+            return { ...base, variantKey: input.variantKey, action: 'play' };
+        case 'progress_unlock':
+        case 'streak_reward':
+            return { ...base, variantKey: input.variantKey, action: 'load' };
+        case 'daily_check_in':
+            return { ...base, variantKey: input.variantKey, action: 'check_in' };
+        case 'quiz_card':
+            return { ...base, variantKey: input.variantKey, action: 'submit_quiz' };
+    }
+}
+/**
+ * Reject malformed, mismatched, or presentation-incompatible backend results.
+ *
+ * This is the security boundary. A host that is buggy, compromised, or replaying an old response
+ * must not be able to make the SDK paint a prize the campaign never authored — so a mismatched
+ * `attemptId` throws, and an outcome outside `allowedOutcomeIds` throws even though the host is
+ * nominally the authority. The client still never DECIDES; it only refuses.
+ */
+export function validateInAppGameResult(request, value) {
+    const result = rec(value);
+    if (str(result.attemptId) !== request.attemptId) {
+        throw new Error('Game result attemptId does not match the request');
+    }
+    if (result.status === 'unavailable') {
+        return {
+            attemptId: request.attemptId,
+            status: 'unavailable',
+            ...(typeof result.retryable === 'boolean' ? { retryable: result.retryable } : {}),
+            ...(str(result.message) ? { message: str(result.message) } : {}),
+        };
+    }
+    if (result.status !== 'resolved')
+        throw new Error('Game result status is invalid');
+    const raw = rec(result.outcome);
+    const id = str(raw.id);
+    if (!id)
+        throw new Error('Game result outcome.id is required');
+    const segmentId = str(raw.segmentId);
+    const segmentIndex = raw.segmentIndex;
+    if (segmentIndex !== undefined &&
+        (typeof segmentIndex !== 'number' || !Number.isInteger(segmentIndex) || segmentIndex < 0)) {
+        throw new Error('Game result segmentIndex is invalid');
+    }
+    const allowed = request.allowedOutcomeIds ?? [];
+    const indexedSegmentId = typeof segmentIndex === 'number' ? allowed[segmentIndex] : undefined;
+    if (allowed.length > 0 && !allowed.includes(segmentId || indexedSegmentId || id)) {
+        throw new Error('Game result is not one of the authored outcomes');
+    }
+    const symbols = Array.isArray(raw.symbols) ? raw.symbols.map(str).filter(Boolean) : undefined;
+    if (raw.symbols !== undefined && (!symbols || symbols.length === 0 || symbols.length > 3)) {
+        throw new Error('Game result symbols are invalid');
+    }
+    const state = raw.state;
+    if (state !== undefined && (state === null || typeof state !== 'object' || Array.isArray(state))) {
+        throw new Error('Game result state is invalid');
+    }
+    const rawValue = raw.value;
+    const hasValue = typeof rawValue === 'string' || typeof rawValue === 'number' || typeof rawValue === 'boolean';
+    return {
+        attemptId: request.attemptId,
+        status: 'resolved',
+        outcome: {
+            id,
+            ...(str(raw.label) ? { label: str(raw.label) } : {}),
+            ...(segmentId ? { segmentId } : {}),
+            ...(typeof segmentIndex === 'number' ? { segmentIndex } : {}),
+            ...(symbols ? { symbols } : {}),
+            ...(state ? { state: state } : {}),
+            ...(hasValue ? { value: rawValue } : {}),
+            ...(str(raw.receiptId) ? { receiptId: str(raw.receiptId) } : {}),
+        },
+    };
+}
+/**
+ * Send Test / live preview ONLY: normalize the dashboard's authored mock result.
+ *
+ * An author previewing a spin wheel has no backend to ask, and the registry marks these keys
+ * preview-only ("removed before campaign persistence"). So the authored `resultIndex` / `prize` /
+ * `resultSymbols` become a result in the same shape a real host returns — and it is run through
+ * `validateInAppGameResult` like any other, so the preview cannot show something production would
+ * refuse. Returns null when nothing was authored, which the caller surfaces rather than inventing.
+ */
+export function authoredPreviewGameResult(request, ext) {
+    const e = rec(ext);
+    const nested = rec(e.resultState ?? e.result ?? e.reward);
+    const commonLabel = str(e.rewardValue ?? e.prize ?? e.rewardResult ?? e.resultReward ?? e.reward ??
+        nested.label ?? nested.title ?? nested.name ?? e.resultState);
+    const commonId = str(e.outcomeId ?? e.resultId ?? e.winningId ?? e.segmentId ?? nested.id ?? nested.value);
+    let outcome = null;
+    switch (request.variantKey) {
+        case 'spin_wheel': {
+            const segmentIndex = [e.winningIndex, e.resultIndex, e.selectedIndex, nested.index].find((value) => typeof value === 'number' && Number.isInteger(value) && value >= 0);
+            const segment = typeof segmentIndex === 'number' && Array.isArray(e.segments)
+                ? rec(e.segments[segmentIndex])
+                : {};
+            const segmentId = str(e.winningId ?? e.segmentId ?? nested.segmentId ?? nested.id ??
+                segment.id ?? segment.value ?? segment.code);
+            if (!segmentId && segmentIndex === undefined && !commonLabel)
+                return null;
+            outcome = {
+                id: commonId || segmentId || `preview_segment_${segmentIndex}`,
+                ...(commonLabel ? { label: commonLabel } : {}),
+                ...(segmentId ? { segmentId } : {}),
+                ...(typeof segmentIndex === 'number' ? { segmentIndex } : {}),
+            };
+            break;
+        }
+        case 'slot_reward': {
+            const symbols = Array.isArray(e.resultSymbols) ? e.resultSymbols.map(str).filter(Boolean) : [];
+            if (symbols.length === 0)
+                return null;
+            outcome = {
+                id: commonId || `preview_${symbols.join('_')}`,
+                symbols,
+                ...(commonLabel ? { label: commonLabel } : {}),
+            };
+            break;
+        }
+        case 'scratch_card':
+        case 'mystery_box':
+            if (!commonLabel && !commonId)
+                return null;
+            outcome = { id: commonId || 'preview_reward', ...(commonLabel ? { label: commonLabel } : {}) };
+            break;
+        case 'progress_unlock':
+        case 'streak_reward':
+        case 'daily_check_in':
+            outcome = {
+                id: commonId || 'preview_state',
+                ...(commonLabel ? { label: commonLabel } : {}),
+                state: { ...e },
+            };
+            break;
+        case 'quiz_card':
+            if (!commonId && !commonLabel)
+                return null;
+            outcome = { id: commonId || 'preview_quiz', ...(commonLabel ? { label: commonLabel } : {}) };
+            break;
+    }
+    return validateInAppGameResult(request, {
+        attemptId: request.attemptId,
+        status: 'resolved',
+        outcome,
+    });
+}
+/**
+ * A stable idempotency key per (variant, attempt).
+ *
+ * The host is expected to make a repeated `attemptId` return the SAME grant rather than a second
+ * one, so the SDK must reuse the id across retries of the same attempt — a fresh id on every retry
+ * would silently turn one network hiccup into two prizes. Callers keep the map for the message's
+ * lifetime.
+ */
+export function attemptIdFor(store, variantKey, attempt, seq) {
+    const key = `${variantKey}:${Math.max(1, Math.floor(attempt))}`;
+    const existing = store.get(key);
+    if (existing)
+        return existing;
+    // Not crypto — an idempotency key needs to be unique per attempt, not unguessable; the host
+    // authenticates the user separately and the SDK never treats this as a credential.
+    const id = `scalebun_game_${Date.now().toString(36)}_${seq().toString(36)}`;
+    store.set(key, id);
+    return id;
+}
+//# sourceMappingURL=gameLogic.js.map

package/dist/features/engage/gameLogic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gameLogic.js","sourceRoot":"","sources":["../../../src/features/engage/gameLogic.ts"],"names":[],"mappings":"AAqBA;;;;GAIG;AACH,MAAM,YAAY,GAA2D;IAC3E,UAAU,EAAE,MAAM;IAClB,YAAY,EAAE,MAAM;IACpB,WAAW,EAAE,MAAM;IACnB,WAAW,EAAE,MAAM;IACnB,eAAe,EAAE,MAAM;IACvB,aAAa,EAAE,MAAM;IACrB,cAAc,EAAE,UAAU;IAC1B,SAAS,EAAE,aAAa;CACzB,CAAC;AAIF,MAAM,GAAG,GAAG,CAAC,CAAU,EAAQ,EAAE,CAC/B,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAU,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9E,MAAM,GAAG,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAE5E,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,0BAA0B,CAAC,GAAY;IACrD,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACrC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACjD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,OAAO,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC,CACH,CAAC;IACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,qBAAqB,CAAC,KAQrC;IACC,MAAM,IAAI,GAAG;QACX,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/C,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,KAAK,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3F,CAAC;IACF,QAAQ,KAAK,CAAC,UAAU,EAAE,CAAC;QACzB,KAAK,YAAY,CAAC;QAClB,KAAK,cAAc,CAAC;QACpB,KAAK,aAAa,CAAC;QACnB,KAAK,aAAa;YAChB,OAAO,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACnE,KAAK,iBAAiB,CAAC;QACvB,KAAK,eAAe;YAClB,OAAO,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACnE,KAAK,gBAAgB;YACnB,OAAO,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACvE,KAAK,WAAW;YACd,OAAO,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAC5E,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAyB,EACzB,KAAc;IAEd,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACpC,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,aAAa;YACrB,GAAG,CAAC,OAAO,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAEnF,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvB,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAE/D,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;IACtC,IACE,YAAY,KAAK,SAAS;QAC1B,CAAC,OAAO,YAAY,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC,CAAC,EACzF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,IAAI,EAAE,CAAC;IAChD,MAAM,gBAAgB,GAAG,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9F,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,IAAI,gBAAgB,IAAI,EAAE,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9F,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IACxB,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACjG,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC;IAC3B,MAAM,QAAQ,GACZ,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,SAAS,CAAC;IAEhG,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE;YACP,EAAE;YACF,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAqC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAAyB,EACzB,GAAY;IAEZ,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,GAAG,CACrB,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,MAAM;QACtE,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,CAC/D,CAAC;IACF,MAAM,QAAQ,GAAG,GAAG,CAClB,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,KAAK,CACrF,CAAC;IAEF,IAAI,OAAO,GAAgB,IAAI,CAAC;IAChC,QAAQ,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3B,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,YAAY,GAAG,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CACtF,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAC9E,CAAC;YACF,MAAM,OAAO,GACX,OAAO,YAAY,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAC3D,CAAC,CAAC,GAAG,CAAE,CAAC,CAAC,QAAsB,CAAC,YAAY,CAAC,CAAC;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACT,MAAM,SAAS,GAAG,GAAG,CACnB,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,EAAE;gBACzD,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAC9C,CAAC;YACF,IAAI,CAAC,SAAS,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,WAAW;gBAAE,OAAO,IAAI,CAAC;YAC1E,OAAO,GAAG;gBACR,EAAE,EAAE,QAAQ,IAAI,SAAS,IAAI,mBAAmB,YAAY,EAAE;gBAC9D,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9C,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnC,GAAG,CAAC,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D,CAAC;YACF,MAAM;QACR,CAAC;QACD,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACtC,OAAO,GAAG;gBACR,EAAE,EAAE,QAAQ,IAAI,WAAW,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAC9C,OAAO;gBACP,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/C,CAAC;YACF,MAAM;QACR,CAAC;QACD,KAAK,cAAc,CAAC;QACpB,KAAK,aAAa;YAChB,IAAI,CAAC,WAAW,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC3C,OAAO,GAAG,EAAE,EAAE,EAAE,QAAQ,IAAI,gBAAgB,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/F,MAAM;QACR,KAAK,iBAAiB,CAAC;QACvB,KAAK,eAAe,CAAC;QACrB,KAAK,gBAAgB;YACnB,OAAO,GAAG;gBACR,EAAE,EAAE,QAAQ,IAAI,eAAe;gBAC/B,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9C,KAAK,EAAE,EAAE,GAAG,CAAC,EAAE;aAChB,CAAC;YACF,MAAM;QACR,KAAK,WAAW;YACd,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW;gBAAE,OAAO,IAAI,CAAC;YAC3C,OAAO,GAAG,EAAE,EAAE,EAAE,QAAQ,IAAI,cAAc,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7F,MAAM;IACV,CAAC;IAED,OAAO,uBAAuB,CAAC,OAAO,EAAE;QACtC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,UAAU;QAClB,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAC1B,KAA0B,EAC1B,UAAkB,EAClB,OAAe,EACf,GAAiB;IAEjB,MAAM,GAAG,GAAG,GAAG,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,4FAA4F;IAC5F,mFAAmF;IACnF,MAAM,EAAE,GAAG,iBAAiB,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;IAC5E,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACnB,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/features/engage/gameResolver.d.ts

@@ -0,0 +1,35 @@
+/**
+ * G1/G2 — turn the host's `onInAppGameRequest` handler into the `requestOutcome` a mechanic block
+ * can call.
+ *
+ * This is the only place the game contract meets the renderer. Everything above it (`gameLogic`)
+ * refuses bad results; everything below it (`BlockOutcome`) knows only which segment to stop on.
+ *
+ * NEVER REJECTS. A block's draw path has no error branch — a throwing promise inside a click handler
+ * would leave a spin button disabled forever with no message. Every failure, including a host that
+ * throws, arrives as `{ ok: false }`, which is the same shape the host's own `unavailable` produces.
+ * Mobile makes the same choice: "a host can return `unavailable`, or throw; both produce the same
+ * retry-safe UI."
+ *
+ * Lazy by construction — imported only from `richInApp`, which is itself in the engage chunk.
+ */
+import type { BlockOutcome } from '../inapp/blocks/blocks';
+import type { InAppGameRequestHandler } from './gameTypes';
+type Dict = Record<string, unknown>;
+export interface GameResolverInput {
+    campaignId: string;
+    variantKey: string;
+    ext: Dict;
+    /** Send Test / dashboard preview — resolve from the authored mock instead of a live backend. */
+    preview?: boolean;
+    handler?: InAppGameRequestHandler;
+}
+/**
+ * Build the block-facing resolver, or null when this message is not a game.
+ *
+ * Returning null rather than a no-op resolver is deliberate: `ctx.requestOutcome` being absent is
+ * how a block knows it is NOT server-resolved and should keep its authored behaviour.
+ */
+export declare function makeGameResolver(input: GameResolverInput): ((attempt: number, payload?: Dict) => Promise<BlockOutcome>) | null;
+export {};
+//# sourceMappingURL=gameResolver.d.ts.map

package/dist/features/engage/gameResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gameResolver.d.ts","sourceRoot":"","sources":["../../../src/features/engage/gameResolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,KAAK,EAAE,uBAAuB,EAAuB,MAAM,aAAa,CAAC;AAUhF,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAOpC,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,IAAI,CAAC;IACV,gGAAgG;IAChG,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,uBAAuB,CAAC;CACnC;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,iBAAiB,GACvB,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC,GAAG,IAAI,CAuDrE"}

package/dist/features/engage/gameResolver.js

@@ -0,0 +1,81 @@
+import { attemptIdFor, authoredPreviewGameResult, buildInAppGameRequest, inAppGameAllowedOutcomeIds, isInAppGameVariant, validateInAppGameResult, } from './gameLogic';
+const str = (v) => (typeof v === 'string' ? v.trim() : '');
+/** Module-scope so two messages on one page cannot mint the same attempt id. */
+let attemptSequence = 0;
+/**
+ * Build the block-facing resolver, or null when this message is not a game.
+ *
+ * Returning null rather than a no-op resolver is deliberate: `ctx.requestOutcome` being absent is
+ * how a block knows it is NOT server-resolved and should keep its authored behaviour.
+ */
+export function makeGameResolver(input) {
+    if (!isInAppGameVariant(input.variantKey))
+        return null;
+    const variantKey = input.variantKey;
+    // One store per message, so a retry of attempt N reuses attempt N's id for this message only.
+    const attempts = new Map();
+    return async (attempt, payload) => {
+        try {
+            const gameKey = str(input.ext.gameKey);
+            /**
+             * `gameKey` is the customer's stable handle for this game — their backend keys limits and
+             * inventory off it. A live campaign without one cannot be resolved, and guessing a key would
+             * silently attribute plays to the wrong game.
+             */
+            if (!input.preview && !gameKey) {
+                return { ok: false, message: 'This game is not configured.', retryable: false };
+            }
+            const request = buildInAppGameRequest({
+                campaignId: input.campaignId,
+                gameKey: gameKey || `preview:${variantKey}`,
+                variantKey,
+                attemptId: attemptIdFor(attempts, variantKey, attempt, () => (attemptSequence += 1)),
+                attempt,
+                ...(payload ? { payload } : {}),
+                allowedOutcomeIds: inAppGameAllowedOutcomeIds(input.ext),
+            });
+            if (input.preview) {
+                const previewed = authoredPreviewGameResult(request, input.ext);
+                return previewed
+                    ? toBlockOutcome(previewed)
+                    : { ok: false, message: 'No preview outcome is configured for this campaign.', retryable: false };
+            }
+            if (!input.handler) {
+                // The single most likely integration mistake, so it says what to do rather than "error".
+                return {
+                    ok: false,
+                    message: 'Rewards are unavailable right now.',
+                    retryable: false,
+                };
+            }
+            return toBlockOutcome(validateInAppGameResult(request, await input.handler(request)));
+        }
+        catch {
+            /**
+             * A host that throws, a network failure, or a result this SDK refused. Retryable on purpose:
+             * the common causes are transient, and the host owns idempotency via `attemptId`, so a retry
+             * cannot double-grant.
+             */
+            return { ok: false, message: 'Rewards are unavailable right now.', retryable: true };
+        }
+    };
+}
+/** Project a validated result onto the small shape blocks actually draw. */
+function toBlockOutcome(result) {
+    if (result.status === 'unavailable') {
+        return {
+            ok: false,
+            ...(result.message ? { message: result.message } : { message: 'Rewards are unavailable right now.' }),
+            retryable: result.retryable !== false,
+        };
+    }
+    const o = result.outcome;
+    return {
+        ok: true,
+        ...(o.label ? { label: o.label } : {}),
+        ...(typeof o.segmentIndex === 'number' ? { index: o.segmentIndex } : {}),
+        ...(o.symbols?.length ? { symbols: o.symbols } : {}),
+        ...(o.state ? { state: o.state } : {}),
+    };
+}
+//# sourceMappingURL=gameResolver.js.map

package/dist/features/engage/gameResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gameResolver.js","sourceRoot":"","sources":["../../../src/features/engage/gameResolver.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,YAAY,EACZ,yBAAyB,EACzB,qBAAqB,EACrB,0BAA0B,EAC1B,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,aAAa,CAAC;AAIrB,MAAM,GAAG,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAE5E,gFAAgF;AAChF,IAAI,eAAe,GAAG,CAAC,CAAC;AAWxB;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAwB;IAExB,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,UAAU,GAAwB,KAAK,CAAC,UAAU,CAAC;IAEzD,8FAA8F;IAC9F,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE3C,OAAO,KAAK,EAAE,OAAe,EAAE,OAAc,EAAyB,EAAE;QACtE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACvC;;;;eAIG;YACH,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,8BAA8B,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAClF,CAAC;YAED,MAAM,OAAO,GAAG,qBAAqB,CAAC;gBACpC,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,OAAO,EAAE,OAAO,IAAI,WAAW,UAAU,EAAE;gBAC3C,UAAU;gBACV,SAAS,EAAE,YAAY,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,CAAC;gBACpF,OAAO;gBACP,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/B,iBAAiB,EAAE,0BAA0B,CAAC,KAAK,CAAC,GAAG,CAAC;aACzD,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,SAAS,GAAG,yBAAyB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;gBAChE,OAAO,SAAS;oBACd,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC;oBAC3B,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,qDAAqD,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YACtG,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnB,yFAAyF;gBACzF,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,oCAAoC;oBAC7C,SAAS,EAAE,KAAK;iBACjB,CAAC;YACJ,CAAC;YAED,OAAO,cAAc,CAAC,uBAAuB,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACxF,CAAC;QAAC,MAAM,CAAC;YACP;;;;eAIG;YACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,oCAAoC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACvF,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,SAAS,cAAc,CAAC,MAAkD;IACxE,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACpC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;YACrG,SAAS,EAAE,MAAM,CAAC,SAAS,KAAK,KAAK;SACtC,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;IACzB,OAAO;QACL,EAAE,EAAE,IAAI;QACR,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvC,CAAC;AACJ,CAAC"}

package/dist/features/engage/gameTypes.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Customer-owned gamified result contract — the WEB mirror of the React Native SDK's
+ * `features/engage/engageTypes.ts`.
+ *
+ * WHY THIS SHAPE, VERBATIM. Eight variants hand out things worth money. The outcome cannot come from
+ * the client — a browser that picks its own prize can be made to pick again — so the host app's
+ * backend decides, exactly as it already does on mobile. Copying the contract byte-for-byte means a
+ * customer writes **one** handler and serves both platforms with it; a "web-flavoured" variation
+ * would double their work and split the reviewable surface of something that grants rewards.
+ *
+ * The RN SDK is never edited. `npm run test:gameparity` reads its source from disk and fails if
+ * either side drifts.
+ *
+ * Types only — no runtime cost.
+ */
+/** Variants whose result/state must be resolved by the host app's backend. */
+export type InAppGameVariantKey = 'spin_wheel' | 'scratch_card' | 'slot_reward' | 'mystery_box' | 'progress_unlock' | 'streak_reward' | 'daily_check_in' | 'quiz_card';
+export type InAppGameAction = 'play' | 'load' | 'check_in' | 'submit_quiz';
+interface InAppGameRequestBase {
+    /** In-app campaign/message id from the served config. */
+    campaignId: string;
+    /** Stable customer-defined key authored in `spec.ext.gameKey`. */
+    gameKey: string;
+    /** Stable idempotency key. The SDK reuses it when the user retries this attempt. */
+    attemptId: string;
+    /** One-based play/check attempt number. State loads use 1. */
+    attempt: number;
+    /** Presentation-safe input only (for example quiz answer indexes and score). */
+    input?: Record<string, unknown>;
+    /** Authored outcome ids, when the presentation declares a closed set. */
+    allowedOutcomeIds?: string[];
+}
+/** Discriminated request passed to `onInAppGameRequest`. */
+export type InAppGameRequest = (InAppGameRequestBase & {
+    variantKey: 'spin_wheel' | 'scratch_card' | 'slot_reward' | 'mystery_box';
+    action: 'play';
+}) | (InAppGameRequestBase & {
+    variantKey: 'progress_unlock' | 'streak_reward';
+    action: 'load';
+}) | (InAppGameRequestBase & {
+    variantKey: 'daily_check_in';
+    action: 'check_in';
+}) | (InAppGameRequestBase & {
+    variantKey: 'quiz_card';
+    action: 'submit_quiz';
+});
+/** Presentation-safe result returned after the customer's backend grants/reserves it. */
+export interface InAppGameOutcome {
+    /** Stable backend outcome id; use a real id such as `no_reward` for non-winning plays. */
+    id: string;
+    label?: string;
+    /** Wheel segment id (preferred over a display index). */
+    segmentId?: string;
+    segmentIndex?: number;
+    /** Slot symbols, in reel order. */
+    symbols?: string[];
+    /** Progress/streak/check-in state consumed by those renderers. */
+    state?: Record<string, unknown>;
+    value?: string | number | boolean;
+    /** Customer receipt/grant id for reconciliation. Never treated as a reward by the SDK. */
+    receiptId?: string;
+}
+/** A host can return `unavailable`, or throw; both produce the same retry-safe UI. */
+export type InAppGameResult = {
+    attemptId: string;
+    status: 'resolved';
+    outcome: InAppGameOutcome;
+} | {
+    attemptId: string;
+    status: 'unavailable';
+    retryable?: boolean;
+    message?: string;
+};
+export type InAppGameRequestHandler = (request: InAppGameRequest) => Promise<InAppGameResult>;
+export {};
+//# sourceMappingURL=gameTypes.d.ts.map

package/dist/features/engage/gameTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gameTypes.d.ts","sourceRoot":"","sources":["../../../src/features/engage/gameTypes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,8EAA8E;AAC9E,MAAM,MAAM,mBAAmB,GAC3B,YAAY,GACZ,cAAc,GACd,aAAa,GACb,aAAa,GACb,iBAAiB,GACjB,eAAe,GACf,gBAAgB,GAChB,WAAW,CAAC;AAEhB,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,aAAa,CAAC;AAE3E,UAAU,oBAAoB;IAC5B,yDAAyD;IACzD,UAAU,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,oFAAoF;IACpF,SAAS,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,yEAAyE;IACzE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED,4DAA4D;AAC5D,MAAM,MAAM,gBAAgB,GACxB,CAAC,oBAAoB,GAAG;IACtB,UAAU,EAAE,YAAY,GAAG,cAAc,GAAG,aAAa,GAAG,aAAa,CAAC;IAC1E,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,GACF,CAAC,oBAAoB,GAAG;IACtB,UAAU,EAAE,iBAAiB,GAAG,eAAe,CAAC;IAChD,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,GACF,CAAC,oBAAoB,GAAG;IACtB,UAAU,EAAE,gBAAgB,CAAC;IAC7B,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC,GACF,CAAC,oBAAoB,GAAG;IACtB,UAAU,EAAE,WAAW,CAAC;IACxB,MAAM,EAAE,aAAa,CAAC;CACvB,CAAC,CAAC;AAEP,yFAAyF;AACzF,MAAM,WAAW,gBAAgB;IAC/B,0FAA0F;IAC1F,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mCAAmC;IACnC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAClC,0FAA0F;IAC1F,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,sFAAsF;AACtF,MAAM,MAAM,eAAe,GACvB;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,gBAAgB,CAAC;CAC3B,GACD;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEN,MAAM,MAAM,uBAAuB,GAAG,CACpC,OAAO,EAAE,gBAAgB,KACtB,OAAO,CAAC,eAAe,CAAC,CAAC"}

package/dist/features/engage/gameTypes.js

@@ -0,0 +1,17 @@
+/**
+ * Customer-owned gamified result contract — the WEB mirror of the React Native SDK's
+ * `features/engage/engageTypes.ts`.
+ *
+ * WHY THIS SHAPE, VERBATIM. Eight variants hand out things worth money. The outcome cannot come from
+ * the client — a browser that picks its own prize can be made to pick again — so the host app's
+ * backend decides, exactly as it already does on mobile. Copying the contract byte-for-byte means a
+ * customer writes **one** handler and serves both platforms with it; a "web-flavoured" variation
+ * would double their work and split the reviewable surface of something that grants rewards.
+ *
+ * The RN SDK is never edited. `npm run test:gameparity` reads its source from disk and fails if
+ * either side drifts.
+ *
+ * Types only — no runtime cost.
+ */
+export {};
+//# sourceMappingURL=gameTypes.js.map

package/dist/features/engage/gameTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gameTypes.js","sourceRoot":"","sources":["../../../src/features/engage/gameTypes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}

package/dist/features/engage/inappSlots.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Host-registered mount points for INLINE in-app formats.
+ *
+ * THE PROBLEM THIS SOLVES. Four variants — `inline_card`, `embedded_panel`, `empty_state_prompt`,
+ * `smart_inbox_message` — declare `mountModel: 'inline'`: they belong IN the page, in the document
+ * flow, not floating over it. The SDK had no way to know where, so they fell through to a centred
+ * modal with a backdrop. An "Inline Card" designed for a feed popped up over the whole page.
+ *
+ * Mapping them to the inline surface without solving this would have been worse, not better: the
+ * inline surface renders into a registered slot and returns `inert()` when there is none, so those
+ * four would have gone from a WRONG surface to NO surface — invisible instead of misplaced.
+ *
+ * So placement is opt-in and degrades honestly:
+ *   • host registers a slot matching the campaign's `placementKey` → renders inline, in place
+ *   • no matching slot → the existing modal, unchanged, and the fall-through is REPORTED
+ *
+ * A host that never calls `registerSlot` sees exactly today's behaviour.
+ */
+import { SlotRegistry } from '../inapp/core/slots';
+/**
+ * One registry for the whole page.
+ *
+ * Module-level because slots are registered by the HOST's own component lifecycle, long before any
+ * campaign is served — a per-render registry would be empty every time it mattered.
+ */
+export declare const engageSlots: SlotRegistry;
+/**
+ * Declare a mount point for inline in-app messages.
+ *
+ * `name` must match the campaign's placement key exactly. Returns an unregister function so a
+ * component can clean up on unmount — a stale element would have messages rendering into a detached
+ * node, which looks identical to them not rendering at all.
+ */
+export declare function registerInAppSlot(name: string, el: HTMLElement): () => void;
+/** The slot a message wants, if the author set one. */
+export declare function slotNameFor(ext: Record<string, unknown>): string | undefined;
+/** Is this message's slot actually on the page right now? */
+export declare function hasInAppSlot(ext: Record<string, unknown>): boolean;
+//# sourceMappingURL=inappSlots.d.ts.map

package/dist/features/engage/inappSlots.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inappSlots.d.ts","sourceRoot":"","sources":["../../../src/features/engage/inappSlots.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD;;;;;GAKG;AACH,eAAO,MAAM,WAAW,cAAqB,CAAC;AAE9C;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,GAAG,MAAM,IAAI,CAI3E;AAED,uDAAuD;AACvD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,SAAS,CAG5E;AAED,6DAA6D;AAC7D,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAGlE"}

package/dist/features/engage/inappSlots.js

@@ -0,0 +1,50 @@
+/**
+ * Host-registered mount points for INLINE in-app formats.
+ *
+ * THE PROBLEM THIS SOLVES. Four variants — `inline_card`, `embedded_panel`, `empty_state_prompt`,
+ * `smart_inbox_message` — declare `mountModel: 'inline'`: they belong IN the page, in the document
+ * flow, not floating over it. The SDK had no way to know where, so they fell through to a centred
+ * modal with a backdrop. An "Inline Card" designed for a feed popped up over the whole page.
+ *
+ * Mapping them to the inline surface without solving this would have been worse, not better: the
+ * inline surface renders into a registered slot and returns `inert()` when there is none, so those
+ * four would have gone from a WRONG surface to NO surface — invisible instead of misplaced.
+ *
+ * So placement is opt-in and degrades honestly:
+ *   • host registers a slot matching the campaign's `placementKey` → renders inline, in place
+ *   • no matching slot → the existing modal, unchanged, and the fall-through is REPORTED
+ *
+ * A host that never calls `registerSlot` sees exactly today's behaviour.
+ */
+import { SlotRegistry } from '../inapp/core/slots';
+/**
+ * One registry for the whole page.
+ *
+ * Module-level because slots are registered by the HOST's own component lifecycle, long before any
+ * campaign is served — a per-render registry would be empty every time it mattered.
+ */
+export const engageSlots = new SlotRegistry();
+/**
+ * Declare a mount point for inline in-app messages.
+ *
+ * `name` must match the campaign's placement key exactly. Returns an unregister function so a
+ * component can clean up on unmount — a stale element would have messages rendering into a detached
+ * node, which looks identical to them not rendering at all.
+ */
+export function registerInAppSlot(name, el) {
+    if (!name || !el)
+        return () => { };
+    engageSlots.register(name, el);
+    return () => engageSlots.unregister(name);
+}
+/** The slot a message wants, if the author set one. */
+export function slotNameFor(ext) {
+    const key = ext.placementKey ?? ext.slot;
+    return typeof key === 'string' && key ? key : undefined;
+}
+/** Is this message's slot actually on the page right now? */
+export function hasInAppSlot(ext) {
+    const name = slotNameFor(ext);
+    return !!name && !!engageSlots.get(name);
+}
+//# sourceMappingURL=inappSlots.js.map

package/dist/features/engage/inappSlots.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inappSlots.js","sourceRoot":"","sources":["../../../src/features/engage/inappSlots.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,YAAY,EAAE,CAAC;AAE9C;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,EAAe;IAC7D,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE;QAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAClC,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/B,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,WAAW,CAAC,GAA4B;IACtD,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,IAAI,CAAC;IACzC,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,YAAY,CAAC,GAA4B;IACvD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC"}

package/dist/features/engage/normalize.d.ts

@@ -0,0 +1,11 @@
+/**
+ * E0 — the ONE defensive boundary for untrusted engage config JSON. `normalizeConfig` coerces the
+ * `/sdk/engage/config` response into typed shapes: unknown fields are ignored (additive wire), missing
+ * optionals default, and a malformed campaign/message is DROPPED rather than crashing. Pure, total, and
+ * dependency-free (web-SDK core rule) — no `as`-cast of network data leaks past this file.
+ */
+import type { EngageConfigResponse } from './types';
+/** Coerce the raw `/sdk/engage/config` JSON into a typed, safe `EngageConfigResponse`. Never throws;
+ *  malformed campaigns/messages are dropped; missing arrays become []. */
+export declare function normalizeConfig(raw: unknown): EngageConfigResponse;
+//# sourceMappingURL=normalize.d.ts.map

package/dist/features/engage/normalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.d.ts","sourceRoot":"","sources":["../../../src/features/engage/normalize.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EACV,oBAAoB,EAarB,MAAM,SAAS,CAAC;AAgMjB;0EAC0E;AAC1E,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,oBAAoB,CAYlE"}