@crowdedkingdoms/crowdyjs 17.1.0 → 17.2.0-test.1

package/dist/domains/hosting.js

@@ -0,0 +1,136 @@
+import { AbandonGamePublishDocument, AllHostedGamesDocument, BeginGamePublishDocument, ClaimGameHostingDocument, CompleteGamePublishDocument, HostedGameDocument, HostedGamePublishesDocument, HostedGamesDocument, MyHostedGamesDocument, SetHostedGameEnabledDocument, SetHostedGameListingDocument, TakeDownHostedGameDocument, } from '../generated/graphql.js';
+/**
+ * Third-party game hosting on Crowdy Games (ck-api v2.1, 2026-09-13).
+ *
+ * A developer publishes a built static bundle to the platform; players reach it at
+ * `https://<games host>/<slug>/` (a first-party shell page) while it executes on
+ * `https://<slug>.<content host>`, an origin of its own. The API returns both URLs
+ * (`launchUrl`, `contentOrigin`); nothing here spells a hostname.
+ *
+ * WHICH TOKEN. Every mutation here needs an IDENTITY SESSION (`client.auth.login`
+ * from Node, or a Studio session) with `manage_apps` on the app -- never an app
+ * token. A game's own bundle can therefore never publish a replacement for itself.
+ * The two reads a page needs (`game`, `listed`) are public.
+ *
+ * THE FLOW: `claim` once per app -> build -> `beginPublish` with the manifest ->
+ * PUT every file to its presigned URL with exactly the returned headers ->
+ * `completePublish`. `@crowdedkingdoms/crowdyjs/hosting`'s `publishDirectory` does
+ * the last three steps for a `dist/` directory in Node.
+ */
+export class HostingAPI {
+    constructor(api) {
+        this.api = api;
+    }
+    /** Public: a hosted game by slug, or null. The shell's question. */
+    async game(slug) {
+        const data = await this.api.request(HostedGameDocument, { slug });
+        return data.hostedGame;
+    }
+    /** Public: the LIVE, LISTED hosted games -- the lobby's list. */
+    async listed() {
+        const data = await this.api.request(HostedGamesDocument, {});
+        return data.hostedGames;
+    }
+    /** Operator: every hosted game on the tier. */
+    async all() {
+        const data = await this.api.request(AllHostedGamesDocument, {});
+        return data.allHostedGames;
+    }
+    /** The hosted games the caller can manage. Session token. */
+    async mine() {
+        const data = await this.api.request(MyHostedGamesDocument, {});
+        return data.myHostedGames;
+    }
+    /** Publish history for a game, newest first. Session token + manage_apps. */
+    async publishes(slug, limit) {
+        const data = await this.api.request(HostedGamePublishesDocument, { slug, limit: limit ?? null });
+        return data.hostedGamePublishes;
+    }
+    /**
+     * Claim (or re-assert) the hosting slug for an app. Idempotent; a different slug
+     * MOVES the game. Registers the shell page and the game origin as redirect URIs
+     * and sets `launch_url`. Refuses reserved, taken or malformed slugs
+     * (`HOSTED_SLUG_UNAVAILABLE`) and a tier without hosting (`CONTENT_HOSTING_DISABLED`).
+     */
+    async claim(params) {
+        const data = await this.api.request(ClaimGameHostingDocument, {
+            input: { appId: params.appId, slug: params.slug ?? null },
+        });
+        return data.claimGameHosting;
+    }
+    /** Declare a publish; returns one presigned PUT per file. */
+    async beginPublish(params) {
+        const data = await this.api.request(BeginGamePublishDocument, { input: params });
+        return data.beginGamePublish;
+    }
+    /** Verify, promote, record LIVE, invalidate. */
+    async completePublish(slug, publishId) {
+        const data = await this.api.request(CompleteGamePublishDocument, { slug, publishId });
+        return data.completeGamePublish;
+    }
+    async abandonPublish(slug, publishId) {
+        const data = await this.api.request(AbandonGamePublishDocument, { slug, publishId });
+        return data.abandonGamePublish;
+    }
+    /** Developer switch: off (DISABLED) or on (LIVE). */
+    async setEnabled(slug, enabled) {
+        const data = await this.api.request(SetHostedGameEnabledDocument, { input: { slug, enabled } });
+        return data.setHostedGameEnabled;
+    }
+    /** Operator: list or unlist in the lobby and the management UI. */
+    async setListing(slug, listed) {
+        const data = await this.api.request(SetHostedGameListingDocument, { input: { slug, listed } });
+        return data.setHostedGameListing;
+    }
+    /** Operator: take down (or restore with `false`). */
+    async takeDown(slug, takenDown = true) {
+        const data = await this.api.request(TakeDownHostedGameDocument, { slug, takenDown });
+        return data.takeDownHostedGame;
+    }
+}
+/**
+ * Upload every file of a publish to its presigned URL, with bounded concurrency and
+ * a retry per file. Works in Node 20+ and in a browser (`fetch`, `Blob`/`Uint8Array`
+ * bodies). `read(path)` returns the bytes for a manifest path.
+ */
+export async function uploadPublishFiles(uploads, read, options = {}) {
+    const concurrency = Math.max(1, options.concurrency ?? 8);
+    const retries = Math.max(0, options.retries ?? 2);
+    const queue = [...uploads];
+    const failures = [];
+    const worker = async () => {
+        for (;;) {
+            const u = queue.shift();
+            if (!u)
+                return;
+            let ok = false;
+            for (let attempt = 0; attempt <= retries && !ok; attempt++) {
+                try {
+                    const body = await read(u.path);
+                    const res = await fetch(u.url, {
+                        method: u.method,
+                        headers: Object.fromEntries(u.headers.map((h) => [h.name, h.value])),
+                        body: body,
+                    });
+                    ok = res.ok;
+                    if (!ok && res.status >= 400 && res.status < 500 && res.status !== 429) {
+                        // A 4xx that is not throttling will not get better: BadDigest, expired URL.
+                        failures.push(`${u.path}: HTTP ${res.status} ${(await res.text()).slice(0, 200)}`);
+                        break;
+                    }
+                }
+                catch (error) {
+                    if (attempt === retries)
+                        failures.push(`${u.path}: ${error.message}`);
+                }
+            }
+            options.onFile?.(u.path, ok);
+            if (!ok && !failures.some((f) => f.startsWith(`${u.path}:`)))
+                failures.push(`${u.path}: upload failed`);
+        }
+    };
+    await Promise.all(Array.from({ length: Math.min(concurrency, uploads.length) }, worker));
+    if (failures.length) {
+        throw new Error(`${failures.length} upload(s) failed:\n${failures.join('\n')}`);
+    }
+}

package/dist/domains/portal.d.ts

@@ -39,6 +39,7 @@
  */
 import type { GraphQLClient } from '../client.js';
 import type { SessionStore } from '../session.js';
+import type { EmbeddedHost } from './embedded-host.js';
 export interface AppTokenResponse {
     /** Opaque app-scoped gameplay token. Send to the app's Game API as a Bearer. */
     token: string;
@@ -162,9 +163,15 @@ export interface SignInParams {
     /**
      * `false` to only compute and return the URL without navigating (tests,
      * SSR, a custom link). Default: navigate with `location.assign` when a
-     * browser `location` exists.
+     * browser `location` exists -- or, when a Crowdy Games shell frames this page,
+     * ask the shell to navigate (see `embedded-host.ts`).
      */
     navigate?: boolean;
+    /**
+     * `false` to ignore a framing Crowdy Games shell and run the top-level flow with
+     * the given `redirectUri` even when embedded. Default: consult the shell.
+     */
+    embedded?: boolean;
 }
 /**
  * The hosted sign-in page for the tier a GraphQL endpoint belongs to.
@@ -187,7 +194,21 @@ export declare class PortalAPI {
     private readonly api;
     private readonly session;
     private readonly pkceStore;
-    constructor(api: GraphQLClient, session: SessionStore, pkceStore?: PkceStore);
+    /**
+     * The Crowdy Games shell bridge, when this page may be framed by one
+     * (`createCrowdyClient` supplies it in a browser; `embeddedHost: false` opts out).
+     * See `embedded-host.ts` for what changes when a shell answers.
+     */
+    private readonly embeddedHost;
+    constructor(api: GraphQLClient, session: SessionStore, pkceStore?: PkceStore, 
+    /**
+     * The Crowdy Games shell bridge, when this page may be framed by one
+     * (`createCrowdyClient` supplies it in a browser; `embeddedHost: false` opts out).
+     * See `embedded-host.ts` for what changes when a shell answers.
+     */
+    embeddedHost?: EmbeddedHost | null);
+    /** The shell framing this game, if one has said hello. Null when top-level or self-hosted. */
+    embeddedHostInfo(): import("./embedded-host.js").EmbeddedHostInfo | null;
     /**
      * Native/direct mint: exchange the caller's identity session token for an
      * app-scoped gameplay token. Returns the token; it is NOT stored on this

package/dist/domains/portal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"portal.d.ts","sourceRoot":"","sources":["../../src/domains/portal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAGlD,MAAM,WAAW,gBAAgB;IAC/B,gFAAgF;IAChF,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,SAAS,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,sDAAsD;IACtD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B;;;;;;;;;;;;;;;OAeG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,sDAAsD;IACtD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC/D;AAED,gIAAgI;AAChI,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,8EAA8E;AAC9E,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC3D,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C;AAED,iFAAiF;AACjF,qBAAa,uBAAwB,YAAW,SAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,SAAmB;IACtD,OAAO,CAAC,EAAE;IAGV,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAGjC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IAG1C,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;CAG5B;AA8CD,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,kEAAkE;IAClE,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,EAAE,OAAO,CAAC;IACxB,8EAA8E;IAC9E,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,qFAAqF;AACrF,qBAAa,0BAA2B,SAAQ,KAAK;aAEjC,KAAK,EAAE,MAAM;aACb,OAAO,EAAE,MAAM,GAAG,IAAI;gBADtB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GAAG,IAAI;CAKzC;AA4CD,MAAM,WAAW,gBAAgB;IAC/B,sCAAsC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,wFAAwF;IACxF,YAAY,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,WAAW,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,sCAAsC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CAYtE;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAgBnE;AAED,qBAAa,SAAS;IAElB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAFT,GAAG,EAAE,aAAa,EAClB,OAAO,EAAE,YAAY,EACrB,SAAS,GAAE,SAAyC;IAGvE;;;;;OAKG;IACG,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAO5D;;;;OAIG;IACG,uBAAuB,CAAC,MAAM,EAAE;QACpC,KAAK,EAAE,MAAM,CAAC;QACd,aAAa,EAAE,MAAM,CAAC;QACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAQpC;;;;OAIG;IACG,YAAY,CAChB,IAAI,EAAE,MAAM,EACZ,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,gBAAgB,CAAC;IAQ5B;;;;OAIG;IACG,OAAO,CAAC,aAAa,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAgBvE,6EAA6E;IACvE,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAK5D,2EAA2E;IACrE,YAAY,CAChB,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,MAAM,EAAE,GAChB,OAAO,CAAC,qBAAqB,CAAC;IAOjC,gFAAgF;IAC1E,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAO7D,+DAA+D;IACzD,gBAAgB,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAK1D,8EAA8E;IACxE,oBAAoB,CAAC,KAAK,EAAE;QAChC,KAAK,EAAE,MAAM,CAAC;QACd,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAS/B;;;;;;;;;;;;;;;;;OAiBG;IACG,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IAiBnD;;;;;;OAMG;IACG,oBAAoB,CACxB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAQnC;;;;OAIG;IACG,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC;IAa3D;;;;;;OAMG;IACG,sBAAsB,CAC1B,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GACtD,OAAO,CAAC,MAAM,CAAC;IAoClB;;;;;OAKG;IACG,aAAa,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;CAmBvE"}
+{"version":3,"file":"portal.d.ts","sourceRoot":"","sources":["../../src/domains/portal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,WAAW,gBAAgB;IAC/B,gFAAgF;IAChF,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,SAAS,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,sDAAsD;IACtD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B;;;;;;;;;;;;;;;OAeG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,sDAAsD;IACtD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC/D;AAED,gIAAgI;AAChI,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,8EAA8E;AAC9E,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC3D,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C;AAED,iFAAiF;AACjF,qBAAa,uBAAwB,YAAW,SAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,SAAmB;IACtD,OAAO,CAAC,EAAE;IAGV,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAGjC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IAG1C,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;CAG5B;AA8CD,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,kEAAkE;IAClE,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,EAAE,OAAO,CAAC;IACxB,8EAA8E;IAC9E,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,qFAAqF;AACrF,qBAAa,0BAA2B,SAAQ,KAAK;aAEjC,KAAK,EAAE,MAAM;aACb,OAAO,EAAE,MAAM,GAAG,IAAI;gBADtB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GAAG,IAAI;CAKzC;AA4CD,MAAM,WAAW,gBAAgB;IAC/B,sCAAsC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,wFAAwF;IACxF,YAAY,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,WAAW,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,sCAAsC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CAYtE;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAgBnE;AAED,qBAAa,SAAS;IAElB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,YAAY;gBARZ,GAAG,EAAE,aAAa,EAClB,OAAO,EAAE,YAAY,EACrB,SAAS,GAAE,SAAyC;IACrE;;;;OAIG;IACc,YAAY,GAAE,YAAY,GAAG,IAAW;IAG3D,8FAA8F;IAC9F,gBAAgB;IAIhB;;;;;OAKG;IACG,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAO5D;;;;OAIG;IACG,uBAAuB,CAAC,MAAM,EAAE;QACpC,KAAK,EAAE,MAAM,CAAC;QACd,aAAa,EAAE,MAAM,CAAC;QACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAQpC;;;;OAIG;IACG,YAAY,CAChB,IAAI,EAAE,MAAM,EACZ,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,gBAAgB,CAAC;IAQ5B;;;;OAIG;IACG,OAAO,CAAC,aAAa,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAgBvE,6EAA6E;IACvE,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAK5D,2EAA2E;IACrE,YAAY,CAChB,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,MAAM,EAAE,GAChB,OAAO,CAAC,qBAAqB,CAAC;IAOjC,gFAAgF;IAC1E,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAO7D,+DAA+D;IACzD,gBAAgB,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAK1D,8EAA8E;IACxE,oBAAoB,CAAC,KAAK,EAAE;QAChC,KAAK,EAAE,MAAM,CAAC;QACd,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAS/B;;;;;;;;;;;;;;;;;OAiBG;IACG,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IA8BnD;;;;;;OAMG;IACG,oBAAoB,CACxB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAQnC;;;;OAIG;IACG,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC;IAa3D;;;;;;OAMG;IACG,sBAAsB,CAC1B,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GACtD,OAAO,CAAC,MAAM,CAAC;IAoClB;;;;;OAKG;IACG,aAAa,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;CAmBvE"}

package/dist/domains/portal.js

@@ -117,10 +117,21 @@ export function isHostedSignInRequiredError(error) {
     return /HOSTED_SIGN_IN_REQUIRED|only available to first-party/i.test(typeof e?.message === 'string' ? e.message : '');
 }
 export class PortalAPI {
-    constructor(api, session, pkceStore = new BrowserSessionPkceStore()) {
+    constructor(api, session, pkceStore = new BrowserSessionPkceStore(), 
+    /**
+     * The Crowdy Games shell bridge, when this page may be framed by one
+     * (`createCrowdyClient` supplies it in a browser; `embeddedHost: false` opts out).
+     * See `embedded-host.ts` for what changes when a shell answers.
+     */
+    embeddedHost = null) {
         this.api = api;
         this.session = session;
         this.pkceStore = pkceStore;
+        this.embeddedHost = embeddedHost;
+    }
+    /** The shell framing this game, if one has said hello. Null when top-level or self-hosted. */
+    embeddedHostInfo() {
+        return this.embeddedHost?.current() ?? null;
     }
     /**
      * Native/direct mint: exchange the caller's identity session token for an
@@ -225,16 +236,29 @@ export class PortalAPI {
      * navigated to (useful when `navigate: false`).
      */
     async signIn(params) {
-        const authorizeUrl = params.authorizeUrl ?? defaultHostedSignInUrl(this.api.getEndpoint());
+        // EMBEDDED IN THE CROWDY GAMES SHELL? Ask (bounded) before deciding where the code
+        // returns and who navigates. A game that is top-level, self-hosted, or framed by a
+        // page that is not a shell gets a null here and the flow below is exactly what it
+        // was. See embedded-host.ts.
+        const host = params.embedded === false ? null : await this.embeddedHost?.hello() ?? null;
+        const authorizeUrl = params.authorizeUrl ??
+            (host ? `${host.authorizeOrigin}/authorize` : defaultHostedSignInUrl(this.api.getEndpoint()));
         const url = await this.beginEntry({
             appId: params.appId,
             authorizeUrl,
-            redirectUri: params.redirectUri,
+            // The shell's page is the registered return leg; the iframe's own URL is not.
+            redirectUri: host ? host.returnUrl : params.redirectUri,
             state: params.state,
         });
+        if (params.navigate === false)
+            return url;
+        if (host) {
+            this.embeddedHost.navigate(url);
+            return url;
+        }
         const loc = globalThis
             .location;
-        if (params.navigate !== false && typeof loc?.assign === 'function') {
+        if (typeof loc?.assign === 'function') {
             loc.assign(url);
         }
         return url;