@flayerlabs/gamemode-cli 0.3.1 → 0.4.0

package/dist/scaffold.js

@@ -67,16 +67,19 @@ const files = async (name) => {
             type: 'module',
             scripts: {
                 dev: 'vite',
+                gate: 'tsx src/gate.ts',
                 test: 'gamemode check src/game/rules.ts && vitest run',
                 check: 'gamemode check src/game/rules.ts',
                 typecheck: 'tsc --noEmit',
             },
             dependencies: {
                 '@flayerlabs/gamemode-client': sdk,
+                '@flayerlabs/gamemode-gate': sdk,
                 '@flayerlabs/gamemode-spec': sdk,
             },
             devDependencies: {
                 '@flayerlabs/gamemode-cli': sdk,
+                tsx: '^4.23.12',
                 typescript: '^5.7.2',
                 vite: '^5.4.21',
                 vitest: '^2.1.8',
@@ -106,6 +109,28 @@ pnpm test
 pnpm typecheck
 \`\`\`
 
+## Deploy your gate
+
+Game Mode needs your game to bring its own round server — a gate — and its public https origin is
+exactly the **Gate URL** you enter when you submit the game at flaunch.gg/game-mode/create. Flaunch
+never runs a gate for you and never holds your signing key.
+
+\`src/gate.ts\` is the whole entrypoint; \`.env.example\` is the whole contract. On Railway:
+
+1. Create a project from this repo (\`railpack.json\` names the build and start commands) and
+   attach a Postgres whose URL lands in \`DATABASE_URL\`.
+2. Set the variables from \`.env.example\`, generating the key and secret fresh.
+3. Give the service a public domain, set it as \`GATE_ORIGIN\`, and smoke-test it:
+
+\`\`\`bash
+curl https://<your-gate>/health   # { "ok": true }
+curl https://<your-gate>/config   # chainId must be the chain you meant; note "signer"
+\`\`\`
+
+A gate that boots is a gate whose signatures a swap can verify — boot refuses loudly on a
+wrong-chain RPC, a demo key, or an economy your rewardBounds cannot honour. The full environment
+table lives in \`@flayerlabs/gamemode-gate\`'s DEPLOY.md.
+
 ## Work with an agent
 
 Ask the agent to read \`AGENTS.md\` before it edits the game. Use \`$build-game-mode\` when the
@@ -321,11 +346,72 @@ export interface PlayerView {
   wasRight: boolean | null;
 }
 `,
-        'src/play.ts': `import { createMockRoom, type Snapshot } from '@flayerlabs/gamemode-client';
+        'src/gate.ts': `import { startGate } from '@flayerlabs/gamemode-gate';
+import { rules, type Config } from './game/rules.js';
+
+/**
+ * Your game's own server, as a deployable process.
+ *
+ * A gate holds YOUR signing key and runs YOUR rules: a creator who launches a coin through your
+ * game writes your signer's address into their pool, and the chain trusts it for that pool alone.
+ * Flaunch never holds the key. \`startGate\` does the wiring — database migrations, the chain
+ * address book, boot refusals for anything misconfigured, /config for launch tooling — and this
+ * file stays what it should be: your round's economy, stated once.
+ *
+ * Everything environment-shaped comes from the environment; see .env.example.
+ */
+const config: Config = { rounds: 3, ceiling: 10, points: 500, roundMs: 10_000 };
+
+const { port, signer } = await startGate(rules, config);
+
+// The signer address is what a launch must name for this gate to adopt it — it belongs in the
+// deploy log, where an operator can read it back without a debugger.
+console.log(\`[gate] listening on \${port} — signer \${signer}\`);
+`,
+        '.env.example': `# The environment contract for \`pnpm gate\` (full table: @flayerlabs/gamemode-gate DEPLOY.md).
+# Generate SIGNER_PRIVATE_KEY and SESSION_SECRET fresh for every environment — a key shared
+# between two environments lets one gate's bug mint authorisations against the other's pools.
+
+# The one chain this process serves. 84532 (Base Sepolia) is in the address book.
+CHAIN_ID=84532
+# An RPC endpoint for that chain; boot checks its eth_chainId matches.
+RPC_URL=https://sepolia.base.org
+# Your key, generated by you, never shared. openssl rand -hex 32 (prefix with 0x).
+SIGNER_PRIVATE_KEY=
+# Postgres. Migrations run at boot.
+DATABASE_URL=
+# At least 32 characters. openssl rand -hex 32
+SESSION_SECRET=
+# The page the player is looking at when they sign in — the embedding site, not this gate.
+SIGN_IN_DOMAIN=flaunch.gg
+# This gate's own public https origin — the exact value you submit as the Gate URL.
+GATE_ORIGIN=
+# Comma-separated origins allowed to call this gate: your game's hosted origin(s) and the pages
+# that embed it. One * may span a single DNS label.
+ALLOWED_ORIGINS=https://*.games.moongate.com,https://flaunch.gg
+`,
+        'railpack.json': `${JSON.stringify({
+            $schema: 'https://schema.railpack.com',
+            build: { builder: 'RAILPACK', buildCommand: 'pnpm install' },
+            deploy: { startCommand: 'pnpm gate' },
+        }, null, 2)}\n`,
+        'src/play.ts': `import { connectHost, createMockRoom, joinRoom, type Snapshot } from '@flayerlabs/gamemode-client';
 import { rules, type Action, type Config, type PlayerView, type PublicView } from './game/rules.js';
 
 const config: Config = { rounds: 3, ceiling: 10, points: 500, roundMs: 10_000 };
-const room = createMockRoom(rules, { config, lobbyMs: 1_000, roundMs: 60_000 });
+
+// Embedded on flaunch.gg, the page tells this game which gate and round to join and services its
+// wallet calls over the frame bridge. Standing alone (pnpm dev), there is no page to ask — null is
+// that answer, and the mock room runs the same rules with the chain and wallet faked.
+const embedded = await connectHost();
+const room = embedded
+  ? await joinRoom<PublicView, PlayerView, Action>({
+      gateUrl: embedded.context.gateUrl,
+      roundId: embedded.context.roundId,
+      host: embedded.host,
+      ...(embedded.context.launch ? { launch: embedded.context.launch } : {}),
+    })
+  : createMockRoom(rules, { config, lobbyMs: 1_000, roundMs: 60_000 });
 const app = document.querySelector<HTMLElement>('#app');
 if (!app) throw new Error('the page needs an #app element');
 const gameRoot = app;

package/dist/scaffold.js.map

@@ -1 +1 @@
-{"version":3,"file":"scaffold.js","sourceRoot":"","sources":["../src/scaffold.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY;IACzC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;IACvC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAErD,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB;IAC9B,OAAO,SAAS,CAAC,aAAa,EAAE,sCAAsC,CAAC,CAAC;AAC1E,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC7B,OAAO,SAAS,CAAC,4BAA4B,EAAE,kDAAkD,CAAC,CAAC;AACrG,CAAC;AAED,KAAK,UAAU,wBAAwB;IACrC,OAAO,SAAS,CACd,sCAAsC,EACtC,4DAA4D,CAC7D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,QAAgB,EAAE,MAAc;IACvD,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QACpE,OAAO,QAAQ,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,IACE,OAAO,OAAO,KAAK,QAAQ;QAC3B,CAAC,gGAAgG,CAAC,IAAI,CACpG,OAAO,CACR,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,eAAe;IAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAE9F,CAAC;IACF,OAAO,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,KAAK,GAAG,KAAK,EAAE,IAAY,EAAmC,EAAE;IACpE,MAAM,GAAG,GAAG,MAAM,eAAe,EAAE,CAAC;IACpC,OAAO;QACP,cAAc,EAAE,GAAG,IAAI,CAAC,SAAS,CAC/B;YACE,IAAI;YACJ,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE;gBACP,GAAG,EAAE,MAAM;gBACX,IAAI,EAAE,gDAAgD;gBACtD,KAAK,EAAE,kCAAkC;gBACzC,SAAS,EAAE,cAAc;aAC1B;YACD,YAAY,EAAE;gBACZ,6BAA6B,EAAE,GAAG;gBAClC,2BAA2B,EAAE,GAAG;aACjC;YACD,eAAe,EAAE;gBACf,0BAA0B,EAAE,GAAG;gBAC/B,UAAU,EAAE,QAAQ;gBACpB,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,QAAQ;aACjB;SACF,EACD,IAAI,EACJ,CAAC,CACF,IAAI;QAEL,WAAW,EAAE,MAAM,iBAAiB,EAAE;QAEtC,WAAW,EAAE,KAAK,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6CvB;QAEC,yCAAyC,EAAE,MAAM,gBAAgB,EAAE;QACnE,mDAAmD,EAAE,MAAM,wBAAwB,EAAE;QAErF,mBAAmB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SAgDd,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6IZ;QAEC,aAAa,EAAE;;;;;;;;;;;;;;;;;;;;2BAoBU,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2C9B;QAEC,YAAY,EAAE;;;;;aAKH,IAAI;;;;;;;;;;;;;;;;;;;;;;;CAuBhB;QAEC,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAkCZ,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqFf;QAEC,eAAe,EAAE,GAAG,IAAI,CAAC,SAAS,CAChC;YACE,eAAe,EAAE;gBACf,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,UAAU;gBAClB,gBAAgB,EAAE,UAAU;gBAC5B,MAAM,EAAE,IAAI;gBACZ,wBAAwB,EAAE,IAAI;gBAC9B,oBAAoB,EAAE,IAAI;gBAC1B,YAAY,EAAE,IAAI;gBAClB,MAAM,EAAE,IAAI;aACb;YACD,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;SACzB,EACD,IAAI,EACJ,CAAC,CACF,IAAI;QAEL,YAAY,EAAE,wBAAwB;KACrC,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"scaffold.js","sourceRoot":"","sources":["../src/scaffold.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY;IACzC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;IACvC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAErD,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB;IAC9B,OAAO,SAAS,CAAC,aAAa,EAAE,sCAAsC,CAAC,CAAC;AAC1E,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC7B,OAAO,SAAS,CAAC,4BAA4B,EAAE,kDAAkD,CAAC,CAAC;AACrG,CAAC;AAED,KAAK,UAAU,wBAAwB;IACrC,OAAO,SAAS,CACd,sCAAsC,EACtC,4DAA4D,CAC7D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,QAAgB,EAAE,MAAc;IACvD,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QACpE,OAAO,QAAQ,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,IACE,OAAO,OAAO,KAAK,QAAQ;QAC3B,CAAC,gGAAgG,CAAC,IAAI,CACpG,OAAO,CACR,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,eAAe;IAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAE9F,CAAC;IACF,OAAO,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,KAAK,GAAG,KAAK,EAAE,IAAY,EAAmC,EAAE;IACpE,MAAM,GAAG,GAAG,MAAM,eAAe,EAAE,CAAC;IACpC,OAAO;QACP,cAAc,EAAE,GAAG,IAAI,CAAC,SAAS,CAC/B;YACE,IAAI;YACJ,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE;gBACP,GAAG,EAAE,MAAM;gBACX,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,gDAAgD;gBACtD,KAAK,EAAE,kCAAkC;gBACzC,SAAS,EAAE,cAAc;aAC1B;YACD,YAAY,EAAE;gBACZ,6BAA6B,EAAE,GAAG;gBAClC,2BAA2B,EAAE,GAAG;gBAChC,2BAA2B,EAAE,GAAG;aACjC;YACD,eAAe,EAAE;gBACf,0BAA0B,EAAE,GAAG;gBAC/B,GAAG,EAAE,UAAU;gBACf,UAAU,EAAE,QAAQ;gBACpB,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,QAAQ;aACjB;SACF,EACD,IAAI,EACJ,CAAC,CACF,IAAI;QAEL,WAAW,EAAE,MAAM,iBAAiB,EAAE;QAEtC,WAAW,EAAE,KAAK,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmEvB;QAEC,yCAAyC,EAAE,MAAM,gBAAgB,EAAE;QACnE,mDAAmD,EAAE,MAAM,wBAAwB,EAAE;QAErF,mBAAmB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SAgDd,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6IZ;QAEC,aAAa,EAAE;;;;;;;;;;;;;;;;;;;;;CAqBhB;QAEC,cAAc,EAAE;;;;;;;;;;;;;;;;;;;;;CAqBjB;QAEC,eAAe,EAAE,GAAG,IAAI,CAAC,SAAS,CAChC;YACE,OAAO,EAAE,6BAA6B;YACtC,KAAK,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE;YAC5D,MAAM,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE;SACtC,EACD,IAAI,EACJ,CAAC,CACF,IAAI;QAEL,aAAa,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAgCU,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2C9B;QAEC,YAAY,EAAE;;;;;aAKH,IAAI;;;;;;;;;;;;;;;;;;;;;;;CAuBhB;QAEC,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAkCZ,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqFf;QAEC,eAAe,EAAE,GAAG,IAAI,CAAC,SAAS,CAChC;YACE,eAAe,EAAE;gBACf,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,UAAU;gBAClB,gBAAgB,EAAE,UAAU;gBAC5B,MAAM,EAAE,IAAI;gBACZ,wBAAwB,EAAE,IAAI;gBAC9B,oBAAoB,EAAE,IAAI;gBAC1B,YAAY,EAAE,IAAI;gBAClB,MAAM,EAAE,IAAI;aACb;YACD,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;SACzB,EACD,IAAI,EACJ,CAAC,CACF,IAAI;QAEL,YAAY,EAAE,wBAAwB;KACrC,CAAC;AACJ,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flayerlabs/gamemode-cli",
-  "version": "0.3.1",
+  "version": "0.4.0",
   "description": "Create and validate Flaunch Game Modes",
   "license": "MIT",
   "author": "Flayer Labs",

package/src/scaffold.ts

@@ -86,16 +86,19 @@ const files = async (name: string): Promise<Record<string, string>> => {
       type: 'module',
       scripts: {
         dev: 'vite',
+        gate: 'tsx src/gate.ts',
         test: 'gamemode check src/game/rules.ts && vitest run',
         check: 'gamemode check src/game/rules.ts',
         typecheck: 'tsc --noEmit',
       },
       dependencies: {
         '@flayerlabs/gamemode-client': sdk,
+        '@flayerlabs/gamemode-gate': sdk,
         '@flayerlabs/gamemode-spec': sdk,
       },
       devDependencies: {
         '@flayerlabs/gamemode-cli': sdk,
+        tsx: '^4.23.12',
         typescript: '^5.7.2',
         vite: '^5.4.21',
         vitest: '^2.1.8',
@@ -130,6 +133,28 @@ pnpm test
 pnpm typecheck
 \`\`\`
 
+## Deploy your gate
+
+Game Mode needs your game to bring its own round server — a gate — and its public https origin is
+exactly the **Gate URL** you enter when you submit the game at flaunch.gg/game-mode/create. Flaunch
+never runs a gate for you and never holds your signing key.
+
+\`src/gate.ts\` is the whole entrypoint; \`.env.example\` is the whole contract. On Railway:
+
+1. Create a project from this repo (\`railpack.json\` names the build and start commands) and
+   attach a Postgres whose URL lands in \`DATABASE_URL\`.
+2. Set the variables from \`.env.example\`, generating the key and secret fresh.
+3. Give the service a public domain, set it as \`GATE_ORIGIN\`, and smoke-test it:
+
+\`\`\`bash
+curl https://<your-gate>/health   # { "ok": true }
+curl https://<your-gate>/config   # chainId must be the chain you meant; note "signer"
+\`\`\`
+
+A gate that boots is a gate whose signatures a swap can verify — boot refuses loudly on a
+wrong-chain RPC, a demo key, or an economy your rewardBounds cannot honour. The full environment
+table lives in \`@flayerlabs/gamemode-gate\`'s DEPLOY.md.
+
 ## Work with an agent
 
 Ask the agent to read \`AGENTS.md\` before it edits the game. Use \`$build-game-mode\` when the
@@ -348,11 +373,79 @@ export interface PlayerView {
 }
 `,
 
-  'src/play.ts': `import { createMockRoom, type Snapshot } from '@flayerlabs/gamemode-client';
+  'src/gate.ts': `import { startGate } from '@flayerlabs/gamemode-gate';
+import { rules, type Config } from './game/rules.js';
+
+/**
+ * Your game's own server, as a deployable process.
+ *
+ * A gate holds YOUR signing key and runs YOUR rules: a creator who launches a coin through your
+ * game writes your signer's address into their pool, and the chain trusts it for that pool alone.
+ * Flaunch never holds the key. \`startGate\` does the wiring — database migrations, the chain
+ * address book, boot refusals for anything misconfigured, /config for launch tooling — and this
+ * file stays what it should be: your round's economy, stated once.
+ *
+ * Everything environment-shaped comes from the environment; see .env.example.
+ */
+const config: Config = { rounds: 3, ceiling: 10, points: 500, roundMs: 10_000 };
+
+const { port, signer } = await startGate(rules, config);
+
+// The signer address is what a launch must name for this gate to adopt it — it belongs in the
+// deploy log, where an operator can read it back without a debugger.
+console.log(\`[gate] listening on \${port} — signer \${signer}\`);
+`,
+
+  '.env.example': `# The environment contract for \`pnpm gate\` (full table: @flayerlabs/gamemode-gate DEPLOY.md).
+# Generate SIGNER_PRIVATE_KEY and SESSION_SECRET fresh for every environment — a key shared
+# between two environments lets one gate's bug mint authorisations against the other's pools.
+
+# The one chain this process serves. 84532 (Base Sepolia) is in the address book.
+CHAIN_ID=84532
+# An RPC endpoint for that chain; boot checks its eth_chainId matches.
+RPC_URL=https://sepolia.base.org
+# Your key, generated by you, never shared. openssl rand -hex 32 (prefix with 0x).
+SIGNER_PRIVATE_KEY=
+# Postgres. Migrations run at boot.
+DATABASE_URL=
+# At least 32 characters. openssl rand -hex 32
+SESSION_SECRET=
+# The page the player is looking at when they sign in — the embedding site, not this gate.
+SIGN_IN_DOMAIN=flaunch.gg
+# This gate's own public https origin — the exact value you submit as the Gate URL.
+GATE_ORIGIN=
+# Comma-separated origins allowed to call this gate: your game's hosted origin(s) and the pages
+# that embed it. One * may span a single DNS label.
+ALLOWED_ORIGINS=https://*.games.moongate.com,https://flaunch.gg
+`,
+
+  'railpack.json': `${JSON.stringify(
+    {
+      $schema: 'https://schema.railpack.com',
+      build: { builder: 'RAILPACK', buildCommand: 'pnpm install' },
+      deploy: { startCommand: 'pnpm gate' },
+    },
+    null,
+    2,
+  )}\n`,
+
+  'src/play.ts': `import { connectHost, createMockRoom, joinRoom, type Snapshot } from '@flayerlabs/gamemode-client';
 import { rules, type Action, type Config, type PlayerView, type PublicView } from './game/rules.js';
 
 const config: Config = { rounds: 3, ceiling: 10, points: 500, roundMs: 10_000 };
-const room = createMockRoom(rules, { config, lobbyMs: 1_000, roundMs: 60_000 });
+
+// Embedded on flaunch.gg, the page tells this game which gate and round to join and services its
+// wallet calls over the frame bridge. Standing alone (pnpm dev), there is no page to ask — null is
+// that answer, and the mock room runs the same rules with the chain and wallet faked.
+const embedded = await connectHost();
+const room = embedded
+  ? await joinRoom<PublicView, PlayerView, Action>({
+      gateUrl: embedded.context.gateUrl,
+      roundId: embedded.context.roundId,
+      host: embedded.host,
+      ...(embedded.context.launch ? { launch: embedded.context.launch } : {}),
+    })
+  : createMockRoom(rules, { config, lobbyMs: 1_000, roundMs: 60_000 });
 const app = document.querySelector<HTMLElement>('#app');
 if (!app) throw new Error('the page needs an #app element');
 const gameRoot = app;