playkit-sdk 1.1.0-beta → 1.1.1-beta

package/dist/playkit-sdk.cjs.js

@@ -1,5 +1,5 @@
 /**
- * playkit-sdk v1.1.0-beta
+ * playkit-sdk v1.1.1-beta
  * PlayKit SDK for JavaScript
  * @license SEE LICENSE IN LICENSE
  */
@@ -210,7 +210,7 @@ class TokenStorage {
 const translations$1 = {
     en: {
         signIn: 'Sign In / Register',
-        signInSubtitle: 'If you don\'t have an account, we\'ll create one for you. Sign up and get free credits!',
+        signInSubtitle: 'This game uses PlayKit for cost management.\nIf you don\'t have an account, we\'ll automatically register you. Sign up and get free AI game credits!',
         email: 'Email',
         phone: 'Phone',
         emailPlaceholder: 'Enter your email address',
@@ -228,7 +228,7 @@ const translations$1 = {
     },
     zh: {
         signIn: '登录/注册',
-        signInSubtitle: '如果您没有帐户，我们会为您自动注册。注册即送积分！',
+        signInSubtitle: '本游戏使用PlayKit进行成本管理。\n如果您没有帐户，我们会为您自动注册。注册即送AI游戏积分！',
         email: '邮箱',
         phone: '手机',
         emailPlaceholder: '请输入邮箱地址',
@@ -246,7 +246,7 @@ const translations$1 = {
     },
     'zh-TW': {
         signIn: '登入/註冊',
-        signInSubtitle: '如果您沒有帳戶，我們會為您自動註冊。註冊即送積分！',
+        signInSubtitle: '本遊戲使用PlayKit進行成本管理。\n如果您沒有帳戶，我們會為您自動註冊。註冊即送AI遊戲積分！',
         email: '電子郵件',
         phone: '手機',
         emailPlaceholder: '請輸入電子郵件地址',
@@ -264,7 +264,7 @@ const translations$1 = {
     },
     ja: {
         signIn: 'サインイン/登録',
-        signInSubtitle: 'アカウントをお持ちでない場合は、自動的に作成します。登録すると無料クレジットがもらえます！',
+        signInSubtitle: 'このゲームはPlayKitでコスト管理を行っています。\nアカウントをお持ちでない場合は、自動的に登録します。登録するとAIゲームクレジットがもらえます！',
         email: 'メール',
         phone: '電話',
         emailPlaceholder: 'メールアドレスを入力してください',
@@ -282,7 +282,7 @@ const translations$1 = {
     },
     ko: {
         signIn: '로그인/가입',
-        signInSubtitle: '계정이 없으시면 자동으로 생성해 드립니다. 가입하면 무료 크레딧을 받으세요！',
+        signInSubtitle: '이 게임은 PlayKit으로 비용 관리를 합니다.\n계정이 없으시면 자동으로 등록해 드립니다. 가입하면 AI 게임 크레딧을 받으세요！',
         email: '이메일',
         phone: '전화',
         emailPlaceholder: '이메일 주소를 입력하세요',
@@ -300,7 +300,7 @@ const translations$1 = {
     },
 };
 class AuthFlowManager extends EventEmitter {
-    constructor(baseURL = 'https://playkit.agentlandlab.com') {
+    constructor(baseURL) {
         super();
         this.currentSessionId = null;
         this.uiContainer = null;
@@ -311,7 +311,8 @@ class AuthFlowManager extends EventEmitter {
         this.identifierPanel = null;
         this.verificationPanel = null;
         this.loadingOverlay = null;
-        this.baseURL = baseURL;
+        // @ts-ignore - replaced at build time
+        this.baseURL = baseURL || "https://playkit.agentlandlab.com";
         this.currentLanguage = this.detectLanguage();
     }
     /**
@@ -801,6 +802,10 @@ class AuthFlowManager extends EventEmitter {
         codeInputs === null || codeInputs === void 0 ? void 0 : codeInputs.forEach((input, index) => {
             input.addEventListener('input', (e) => {
                 const target = e.target;
+                // Only allow digits and limit to 1 character
+                const value = target.value.replace(/\D/g, '');
+                target.value = value.slice(0, 1);
+                // Move to next input if a digit was entered
                 if (target.value.length === 1 && index < codeInputs.length - 1) {
                     codeInputs[index + 1].focus();
                 }
@@ -1052,16 +1057,178 @@ class AuthFlowManager extends EventEmitter {
     }
 }
 
+/**
+ * External Authentication Flow Manager
+ * Manages OAuth-like popup authentication flow for external_auth channel
+ */
+class ExternalAuthFlowManager extends EventEmitter {
+    constructor(baseURL, gameId) {
+        super();
+        this.baseURL = baseURL;
+        this.gameId = gameId;
+    }
+    /**
+     * Generate a random string for PKCE code verifier
+     * @private
+     */
+    generateCodeVerifier() {
+        const array = new Uint8Array(32);
+        crypto.getRandomValues(array);
+        return this.base64URLEncode(array);
+    }
+    /**
+     * Generate PKCE code challenge from verifier
+     * @private
+     */
+    async generateCodeChallenge(verifier) {
+        const encoder = new TextEncoder();
+        const data = encoder.encode(verifier);
+        const hash = await crypto.subtle.digest('SHA-256', data);
+        return this.base64URLEncode(new Uint8Array(hash));
+    }
+    /**
+     * Base64 URL encode
+     * @private
+     */
+    base64URLEncode(buffer) {
+        const base64 = btoa(String.fromCharCode(...buffer));
+        return base64.replace(/\+/g, '-').replace(/\//g, '_').replace(/=/g, '');
+    }
+    /**
+     * Generate a random state for CSRF protection
+     * @private
+     */
+    generateState() {
+        const array = new Uint8Array(16);
+        crypto.getRandomValues(array);
+        return this.base64URLEncode(array);
+    }
+    /**
+     * Start the external authentication flow
+     * Opens a popup window for user to login and authorize
+     *
+     * @returns {Promise<string>} Player token
+     */
+    async startFlow() {
+        return new Promise(async (resolve, reject) => {
+            // Generate PKCE parameters
+            const codeVerifier = this.generateCodeVerifier();
+            const codeChallenge = await this.generateCodeChallenge(codeVerifier);
+            const state = this.generateState();
+            // Build authorization URL with postmessage redirect
+            const redirectUri = 'postmessage';
+            const params = new URLSearchParams({
+                response_type: 'code',
+                game_id: this.gameId,
+                redirect_uri: redirectUri,
+                code_challenge: codeChallenge,
+                code_challenge_method: 'S256',
+                state: state,
+            });
+            const authUrl = `${this.baseURL}/external-auth/authorize?${params}`;
+            // Open popup window
+            const popup = window.open(authUrl, 'agentland_external_auth', 'width=500,height=700,scrollbars=yes');
+            if (!popup) {
+                reject(new PlayKitError('Failed to open popup window. Please allow popups for this site.', 'POPUP_BLOCKED'));
+                return;
+            }
+            // Listen for messages from popup
+            const messageHandler = async (event) => {
+                // Verify origin
+                const allowedOrigin = new URL(this.baseURL).origin;
+                if (event.origin !== allowedOrigin) {
+                    return;
+                }
+                // Check message type
+                if (event.data.type !== 'external_auth_callback') {
+                    return;
+                }
+                // Cleanup
+                window.removeEventListener('message', messageHandler);
+                clearInterval(checkClosed);
+                if (popup && !popup.closed) {
+                    popup.close();
+                }
+                try {
+                    // Extract data from message
+                    const { code, state: returnedState, error, error_description } = event.data;
+                    // Check for errors
+                    if (error) {
+                        reject(new PlayKitError(error_description || error, 'AUTH_ERROR'));
+                        return;
+                    }
+                    // Verify state
+                    if (returnedState !== state) {
+                        reject(new PlayKitError('State mismatch - possible CSRF attack', 'STATE_MISMATCH'));
+                        return;
+                    }
+                    if (!code) {
+                        reject(new PlayKitError('No authorization code received', 'NO_CODE'));
+                        return;
+                    }
+                    // Exchange code for token
+                    const token = await this.exchangeCodeForToken(code, codeVerifier, redirectUri);
+                    resolve(token);
+                }
+                catch (err) {
+                    reject(err);
+                }
+            };
+            window.addEventListener('message', messageHandler);
+            // Check if popup was closed without completing auth
+            const checkClosed = setInterval(() => {
+                if (popup.closed) {
+                    clearInterval(checkClosed);
+                    window.removeEventListener('message', messageHandler);
+                    reject(new PlayKitError('Authentication cancelled by user', 'USER_CANCELLED'));
+                }
+            }, 1000);
+        });
+    }
+    /**
+     * Exchange authorization code for access token
+     * @private
+     */
+    async exchangeCodeForToken(code, codeVerifier, redirectUri) {
+        const response = await fetch(`${this.baseURL}/api/external-auth/token`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+            },
+            body: JSON.stringify({
+                grant_type: 'authorization_code',
+                code: code,
+                code_verifier: codeVerifier,
+                redirect_uri: redirectUri,
+            }),
+        });
+        if (!response.ok) {
+            const error = await response.json().catch(() => ({ error_description: 'Token exchange failed' }));
+            throw new PlayKitError(error.error_description || 'Token exchange failed', 'TOKEN_EXCHANGE_FAILED', response.status);
+        }
+        const data = await response.json();
+        return data.access_token;
+    }
+    /**
+     * Clean up
+     */
+    destroy() {
+        this.removeAllListeners();
+    }
+}
+
 /**
  * Authentication manager
  * Handles JWT exchange and token management
  */
-const DEFAULT_BASE_URL$3 = 'https://playkit.agentlandlab.com';
+// @ts-ignore - replaced at build time
+const DEFAULT_BASE_URL$3 = "https://playkit.agentlandlab.com";
 const JWT_EXCHANGE_ENDPOINT = '/api/external/exchange-jwt';
 class AuthManager extends EventEmitter {
     constructor(config) {
         super();
         this.authFlowManager = null;
+        this.externalAuthFlowManager = null;
         this.config = config;
         this.storage = new TokenStorage();
         this.baseURL = config.baseURL || DEFAULT_BASE_URL$3;
@@ -1115,7 +1282,9 @@ class AuthManager extends EventEmitter {
         this.emit('unauthenticated');
         // Auto-start login flow in browser environment
         if (typeof window !== 'undefined') {
-            await this.startAuthFlow();
+            // Default to external-auth if not specified
+            const useExternalAuth = this.config.authMethod !== 'headless';
+            await this.startAuthFlow(useExternalAuth);
             // If we reach here, authentication was successful
             // If it failed, startAuthFlow() will have thrown an error
         }
@@ -1126,27 +1295,53 @@ class AuthManager extends EventEmitter {
     }
     /**
      * Start the authentication flow UI
+     *
+     * @param useExternalAuth - Use external-auth OAuth flow instead of headless flow
      */
-    async startAuthFlow() {
-        var _a;
-        if (this.authFlowManager) {
+    async startAuthFlow(useExternalAuth = false) {
+        var _a, _b;
+        if (this.authFlowManager || this.externalAuthFlowManager) {
             // Already in progress
             return;
         }
         try {
-            this.authFlowManager = new AuthFlowManager(this.baseURL);
-            // Get global token from auth flow
-            const globalToken = await this.authFlowManager.startFlow();
-            // Exchange for player token
-            await this.exchangeJWT(globalToken);
-            // Clean up
-            this.authFlowManager.destroy();
-            this.authFlowManager = null;
+            if (useExternalAuth) {
+                // Use external-auth OAuth popup flow
+                this.externalAuthFlowManager = new ExternalAuthFlowManager(this.baseURL, this.config.gameId);
+                // Get player token directly from external-auth flow
+                const playerToken = await this.externalAuthFlowManager.startFlow();
+                // Update auth state with the player token
+                this.authState = {
+                    isAuthenticated: true,
+                    token: playerToken,
+                    tokenType: 'player',
+                };
+                // Save to storage
+                await this.storage.saveAuthState(this.config.gameId, this.authState);
+                await this.storage.saveSharedToken(playerToken);
+                this.emit('authenticated', this.authState);
+                // Clean up
+                this.externalAuthFlowManager.destroy();
+                this.externalAuthFlowManager = null;
+            }
+            else {
+                // Use headless verification code flow
+                this.authFlowManager = new AuthFlowManager(this.baseURL);
+                // Get global token from auth flow
+                const globalToken = await this.authFlowManager.startFlow();
+                // Exchange for player token
+                await this.exchangeJWT(globalToken);
+                // Clean up
+                this.authFlowManager.destroy();
+                this.authFlowManager = null;
+            }
         }
         catch (error) {
             // User canceled or error occurred
             (_a = this.authFlowManager) === null || _a === void 0 ? void 0 : _a.destroy();
             this.authFlowManager = null;
+            (_b = this.externalAuthFlowManager) === null || _b === void 0 ? void 0 : _b.destroy();
+            this.externalAuthFlowManager = null;
             // Re-emit error
             this.emit('error', error);
             throw error;
@@ -2787,8 +2982,10 @@ class PlayKitSDK extends EventEmitter {
     }
 }
 
+exports.AuthFlowManager = AuthFlowManager;
 exports.AuthManager = AuthManager;
 exports.ChatClient = ChatClient;
+exports.ExternalAuthFlowManager = ExternalAuthFlowManager;
 exports.ImageClient = ImageClient;
 exports.NPCClient = NPCClient;
 exports.PlayKitSDK = PlayKitSDK;