PartnerDocumentação do DocumentationParceiro

Integrate Guessiano end-to-end. You host nothing of the game: the SDK loads from our CDN and renders into a <canvas> on your site; engine, RNG and matchmaking stay on our backend.Integre o Guessiano de ponta a ponta. Você não hospeda nada do jogo: a SDK carrega do nosso CDN e renderiza num <canvas> no seu site; engine, RNG e matchmaking ficam no nosso backend.

OverviewVisão geral

Quickstart (5 min)Quickstart (5 min)

Paste into your site (UMD, zero build). Pin the version and validate with the integrity published in /sdk/<version>/manifest.json:Cole no seu site (UMD, zero build). Fixe a versão e valide com o integrity publicado em /sdk/<versão>/manifest.json:

<div id="guessiano"></div>
<script src="https://cdn.YOUR-DOMAIN.com/sdk/1.0.0/guessiano.umd.js"
        integrity="sha384-…" crossorigin="anonymous"></script>
<script>
  Guessiano.mount('#guessiano', {
    apiUrl: 'https://api.YOUR-DOMAIN.com',
    launchToken: '<token minted by YOUR backend>',
  });
</script>

With a bundler: npm i @guessiano/sdk and import { Guessiano } from '@guessiano/sdk'.Com bundler: npm i @guessiano/sdk e import { Guessiano } from '@guessiano/sdk'.

3-step flowFluxo de 3 passos

Wallet models —Modelos de wallet — internal × seamless

Each tenant uses one model, set by the Guessiano team. You don't change the SDK.Cada tenant usa um modelo, definido pela equipe Guessiano. Você não troca de SDK.

Seamless end-to-endSeamless end-to-end recommendedrecomendado

In seamless mode your system is the wallet of record. Guessiano never holds funds: it only runs the game, keeps the display balance in sync and hands you the result to settle.No modo seamless o seu sistema é a carteira de registro. A Guessiano nunca segura fundos: só roda o jogo, mantém o saldo de exibição sincronizado e te entrega o resultado para liquidar.

The wallet.settlement contractO contrato do wallet.settlement

Front: capture the result and settleFront: capture o resultado e liquide

const game = await Guessiano.mount('#guessiano', { apiUrl, launchToken });

game.on('wallet.settlement', async (e) => {
  const { walletMode, outcome, stake, payout, net, balanceAfter } = e.payload;
  if (walletMode === 'external') {
    // call YOUR backend to credit/debit the player wallet
    await fetch('/your-backend/settle', {
      method: 'POST',
      body: JSON.stringify({ outcome, net, stake, payout }),
    });
  }
  // the game screen already shows balanceAfter — nothing to do on the front
});

HMAC signingAssinatura HMAC backend

Every server-to-server call is signed with the hmacSecret:Toda chamada server-to-server é assinada com o hmacSecret:

Signature = HMAC-SHA256(hmacSecret,
              timestamp + "\n" + METHOD + "\n" + path + "\n" + sha256(body))

Headers: X-Operator-ID, X-Operator-Timestamp (epoch s), X-Operator-Signature (hex). 60s window, anti-replay.Headers: X-Operator-ID, X-Operator-Timestamp (epoch s), X-Operator-Signature (hex). Janela de 60 s, anti-replay.

import { createHash, createHmac } from 'node:crypto';
const ts = Math.floor(Date.now() / 1000);
const path = '/v1/sessions';
const body = JSON.stringify({ externalPlayerId:'user-42', displayName:'Ana', balanceCents:100000 });
const bodyHash = createHash('sha256').update(body).digest('hex');
const msg = `${ts}\nPOST\n${path}\n${bodyHash}`;
const sig = createHmac('sha256', HMAC_SECRET).update(msg).digest('hex');
// headers: X-Operator-ID, X-Operator-Timestamp=ts, X-Operator-Signature=sig

$ts   = time();
$path = '/v1/sessions';
$body = json_encode(['externalPlayerId'=>'user-42','displayName'=>'Ana','balanceCents'=>100000]);
$msg = "$ts\nPOST\n$path\n" . hash('sha256', $body);
$sig = hash_hmac('sha256', $msg, $HMAC_SECRET);

import hashlib, hmac, json, time
ts   = int(time.time())
path = '/v1/sessions'
body = json.dumps({'externalPlayerId':'user-42','displayName':'Ana','balanceCents':100000})
msg  = f'{ts}\nPOST\n{path}\n' + hashlib.sha256(body.encode()).hexdigest()
sig  = hmac.new(HMAC_SECRET.encode(), msg.encode(), hashlib.sha256).hexdigest()

POST /v1/sessions HMAC

Body { externalPlayerId, displayName, currency?, balanceCents? } → { launchToken, region, expiresInSec: 300, walletMode }. In seamless, balanceCents sets the displayed balance. Call from your backend; deliver the launchToken to your front.Body { externalPlayerId, displayName, currency?, balanceCents? } → { launchToken, region, expiresInSec: 300, walletMode }. No seamless, balanceCents define o saldo exibido. Chame do seu backend; entregue o launchToken ao seu front.

POST /v1/sessions/redeem browser

The SDK does this for you. Body { launchToken } → { gameJwt, refreshToken, playerId, tenantId, displayName, gemBalance, expiresInSec }.A SDK faz isso por você. Body { launchToken } → { gameJwt, refreshToken, playerId, tenantId, displayName, gemBalance, expiresInSec }.

CORS

The SDK calls the API from your domain (cross-origin). Register the origins where the SDK runs in the portal ("Allowed origins" tab) — without this the browser blocks it. Changes apply in ~60s, no redeploy.A SDK chama a API a partir do seu domínio (cross-origin). Cadastre as origens onde a SDK roda no portal (aba "Origens permitidas") — sem isso o navegador bloqueia. As mudanças valem em ~60 s, sem redeploy.

Guessiano.mount(selector, options)

Instance: on/off, pause/resume, setLocale, unmount, playerId().Instância: on/off, pause/resume, setLocale, unmount, playerId().

EventsEventos

ready · match.matched · match.started · match.ended · balance.changed · wallet.settlement · navigation.lobby · error.

Guess feedback uses color + shape (accessible):O feedback de palpite usa cor + forma (acessível):

Distribution & SRIDistribuição & SRI

Formats: guessiano.umd.js (script), .esm.js (bundlers), .cjs.js (Node). SemVer: a breaking change → new major in the path.Formatos: guessiano.umd.js (script), .esm.js (bundlers), .cjs.js (Node). SemVer: breaking change → novo major no caminho.

Self-service portalPortal self-service

At /portal/ you can: view/rotate/create credentials (the hmacSecret appears once), manage CORS origins and track your KPIs. Sign in with the e-mail + temporary password from provisioning.Em /portal/ você: vê/rotaciona/cria credenciais (o hmacSecret aparece uma vez), gerencia as origens CORS e acompanha seus KPIs. Login com o e-mail + senha temporária do provisionamento.

Errors & troubleshootingErros & troubleshooting

Guessiano · homeinício · portal · provably-fair