@flayerlabs/gamemode-client 0.3.0 → 0.4.0

package/README.md

@@ -45,23 +45,21 @@ and real spending. Call `unsubscribe()`, then `room.dispose()` when the game clo
 An embedded game first receives its context and restricted host services from the trusted parent:
 
 ```ts
-import { connectEmbeddedGame, joinRoom } from '@flayerlabs/gamemode-client'
+import { connectHost, joinRoom } from '@flayerlabs/gamemode-client'
 
-const embedded = await connectEmbeddedGame({
-  parentOrigin: 'https://flaunch.gg',
-})
+const embedded = await connectHost()
+if (!embedded) throw new Error('open this game from its coin page')
 
 const room = await joinRoom({
   gateUrl: embedded.context.gateUrl,
   roundId: embedded.context.roundId,
   launch: embedded.context.launch,
   host: embedded.host,
-  platform: embedded.platform,
 })
 ```
 
 Creator code sends game actions and reads room state. It cannot send a wallet transaction or create
-Flaunch calldata. The trusted parent uses `serveEmbeddedGame` to provide the permitted wallet,
+Flaunch calldata. The trusted parent uses `attachGameHost` to provide the permitted wallet,
 market and identity operations to one known iframe.
 
 Call `room.dispose()` and `embedded.dispose()` when the iframe closes.
@@ -71,18 +69,16 @@ Call `room.dispose()` and `embedded.dispose()` when the iframe closes.
 Use `joinEconomy()` when your existing server owns gameplay and scoring:
 
 ```ts
-import { connectEmbeddedGame, joinEconomy } from '@flayerlabs/gamemode-client'
+import { connectHost, joinEconomy } from '@flayerlabs/gamemode-client'
 
-const embedded = await connectEmbeddedGame({
-  parentOrigin: 'https://flaunch.gg',
-})
+const embedded = await connectHost()
+if (!embedded) throw new Error('open this game from its coin page')
 
 const gameMode = await joinEconomy({
   gateUrl: embedded.context.gateUrl,
   roundId: embedded.context.roundId,
   launch: embedded.context.launch,
   host: embedded.host,
-  platform: embedded.platform,
 })
 
 const stop = gameMode.economy.subscribe(renderAllowance)
@@ -129,7 +125,7 @@ to build market presentation without a live chain.
 ## Integrate the trusted parent
 
 Read the [trusted platform integration guide](https://github.com/flayerlabs/gamemode-sdk/blob/main/docs/guides/integrate-the-platform.md)
-before implementing `serveEmbeddedGame`, `Host` or a production `joinRoom` call.
+before implementing `attachGameHost`, `Host` or a production `joinRoom` call.
 
 The [quiz example](https://github.com/flayerlabs/gamemode-sdk/tree/main/examples/quiz) shows a live
 rules room. The [external-server example](https://github.com/flayerlabs/gamemode-sdk/tree/main/examples/external-server)

package/dist/embed.d.ts

@@ -1,45 +1,34 @@
-import { type EmbeddedContext } from '@flayerlabs/gamemode-spec/embed';
-import type { ClientPlatform } from './index.js';
-import { type Authorisation, type Host } from './live.js';
-export interface EmbedEventWindow {
-    addEventListener(type: string, listener: EventListenerOrEventListenerObject | null): void;
-    removeEventListener(type: string, listener: EventListenerOrEventListenerObject | null): void;
+import type { Host } from './live.js';
+import { type EmbedContext } from '@flayerlabs/gamemode-spec/frame';
+/**
+ * Where frames come from and go to. The default is the real window; tests inject a pair of these
+ * to run both ends of the protocol in one process with no DOM.
+ */
+export interface FrameEndpoint {
+    /** Deliver every incoming message with its origin and source; returns an unlisten. */
+    listen(handler: (data: unknown, origin: string, source: unknown) => void): () => void;
+    post(message: unknown, targetOrigin: string): void;
+    /** What a trusted message's source must equal. Null when there is no parent to talk to. */
+    parentSource(): unknown;
 }
-export interface EmbedTargetWindow {
-    postMessage(message: unknown, targetOrigin: string): void;
-}
-export interface EmbeddedGameConnection {
-    context: EmbeddedContext;
-    host: Host;
-    platform: ClientPlatform;
-    dispose(): void;
-}
-export interface ConnectEmbeddedGameOptions {
-    /** Fixed in trusted game code, never taken from a query string supplied by the parent. */
-    parentOrigin: string;
+export interface ConnectHostOptions {
+    /** Default: the `parentOrigin` query parameter of the page's own URL. */
+    parentOrigin?: string;
     timeoutMs?: number;
-    currentWindow?: EmbedEventWindow;
-    parentWindow?: EmbedTargetWindow;
+    endpoint?: FrameEndpoint;
 }
-/** Connect an untrusted game frame to the semantic services of its trusted parent. */
-export declare function connectEmbeddedGame(options: ConnectEmbeddedGameOptions): Promise<EmbeddedGameConnection>;
-export interface ServeEmbeddedGameOptions {
-    currentWindow?: EmbedEventWindow;
-    frameWindow: EmbedTargetWindow;
-    gameOrigin: string;
-    context: EmbeddedContext;
+export interface EmbeddedHost {
     host: Host;
-    /**
-     * Verify the gate signature and signer for the canonical spend fields.
-     *
-     * The bridge itself checks the complete ABI encoding, including the required zero referrer,
-     * before calling this seam. A false result fails closed before any wallet UI can open.
-     */
-    validateAuthorisation(authorisation: Authorisation, context: EmbeddedContext, signal?: AbortSignal): boolean | Promise<boolean>;
-    platform?: ClientPlatform;
-    /** Display domain used by the gate's canonical wallet challenge. */
-    signInDomain?: string;
+    context: EmbedContext;
+    dispose(): void;
 }
-/** Serve one known iframe. Both its origin and WindowProxy are required for every request. */
-export declare function serveEmbeddedGame(options: ServeEmbeddedGameOptions): () => void;
+/**
+ * Connect to the embedding page, or learn that there is none.
+ *
+ * Resolves null when the game is not in an iframe, when no `parentOrigin` was provided, or when
+ * the page does not answer within the timeout — a page that answers late was never going to
+ * service a buy either. After it resolves, individual Host calls have no timeout of their own:
+ * sign-in and buy legitimately wait on a human, and the page always answers, refusals included.
+ */
+export declare function connectHost(options?: ConnectHostOptions): Promise<EmbeddedHost | null>;
 //# sourceMappingURL=embed.d.ts.map

package/dist/embed.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"embed.d.ts","sourceRoot":"","sources":["../src/embed.ts"],"names":[],"mappings":"AACA,OAAO,EAUL,KAAK,eAAe,EAGrB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,KAAK,EAAE,cAAc,EAA8B,MAAM,YAAY,CAAC;AAC7E,OAAO,EAA+B,KAAK,aAAa,EAAE,KAAK,IAAI,EAAwB,MAAM,WAAW,CAAC;AAO7G,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,kCAAkC,GAAG,IAAI,GAAG,IAAI,CAAC;IAC1F,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,kCAAkC,GAAG,IAAI,GAAG,IAAI,CAAC;CAC9F;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3D;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,eAAe,CAAC;IACzB,IAAI,EAAE,IAAI,CAAC;IACX,QAAQ,EAAE,cAAc,CAAC;IACzB,OAAO,IAAI,IAAI,CAAC;CACjB;AAUD,MAAM,WAAW,0BAA0B;IACzC,0FAA0F;IAC1F,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,gBAAgB,CAAC;IACjC,YAAY,CAAC,EAAE,iBAAiB,CAAC;CAClC;AAED,sFAAsF;AACtF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAkIxG;AAED,MAAM,WAAW,wBAAwB;IACvC,aAAa,CAAC,EAAE,gBAAgB,CAAC;IACjC,WAAW,EAAE,iBAAiB,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,eAAe,CAAC;IACzB,IAAI,EAAE,IAAI,CAAC;IACX;;;;;OAKG;IACH,qBAAqB,CACnB,aAAa,EAAE,aAAa,EAC5B,OAAO,EAAE,eAAe,EACxB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAYD,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,MAAM,IAAI,CA4K/E"}
+{"version":3,"file":"embed.d.ts","sourceRoot":"","sources":["../src/embed.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAmB,MAAM,WAAW,CAAC;AAEvD,OAAO,EAIL,KAAK,YAAY,EAGlB,MAAM,iCAAiC,CAAC;AAuBzC;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,sFAAsF;IACtF,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IACtF,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACnD,2FAA2F;IAC3F,YAAY,IAAI,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,yEAAyE;IACzE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,aAAa,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,IAAI,CAAC;IACX,OAAO,EAAE,YAAY,CAAC;IACtB,OAAO,IAAI,IAAI,CAAC;CACjB;AAqCD;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAAC,OAAO,GAAE,kBAAuB,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CA6HhG"}

package/dist/embed.js

@@ -1,329 +1,178 @@
-import { EMBED_CHANNEL, EMBED_PROTOCOL_VERSION, isCanonicalSpendHookData, isPlayerIdentities, isSessionChallenge, parseGameToHostMessage, parseHostToGameMessage, } from '@flayerlabs/gamemode-spec/embed';
-import { immutableLaunch, marketFrom } from './live.js';
-import { Signal } from './signal.js';
-const DEFAULT_TIMEOUT_MS = 120_000;
-/** A room uses far fewer; refusing after the cap keeps lifetime replay memory strictly bounded. */
-const MAX_ACCEPTED_REQUEST_IDS = 1_024;
-/** Connect an untrusted game frame to the semantic services of its trusted parent. */
-export function connectEmbeddedGame(options) {
-    const current = options.currentWindow ?? window;
-    const parent = options.parentWindow ?? window.parent;
-    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-    const market = new Signal({ status: 'unavailable', prices: [], trades: [], marketCapUsd: null });
+import { FRAME_PROTOCOL_VERSION, hostFrameFrom, } from '@flayerlabs/gamemode-spec/frame';
+/**
+ * The game's end of the frame protocol: a {@link Host} reconstructed over `postMessage`.
+ *
+ * A game on flaunch.gg runs in a cross-origin iframe, so the page cannot hand it a Host object —
+ * the three Host calls travel as `gm:` frames instead (see `@flayerlabs/gamemode-spec/frame` for the
+ * shapes and the trust story). This file exists so a game never touches `postMessage` itself: it
+ * calls {@link connectHost} once and receives either a working Host plus the round to join, or
+ * `null` — which is an answer, not an error. Null means "not embedded", and the caller's right
+ * move is a mock room, so `pnpm dev` and the real page run the same entry file.
+ *
+ * Trust is decided once, before any message is read: the parent's origin comes from the one query
+ * parameter the page stamps on the iframe URL, and every frame is checked against both that origin
+ * and the parent window itself. A frame from anywhere else is silently ignored — this listener
+ * shares the window with whatever else the page runs.
+ */
+/** How often the game announces itself until the page answers. */
+const HELLO_INTERVAL_MS = 250;
+/** How long to wait for the page before concluding this is not an embed. */
+const DEFAULT_TIMEOUT_MS = 3_000;
+function windowEndpoint() {
+    if (typeof window === 'undefined')
+        return null;
+    return {
+        listen(handler) {
+            const onMessage = (event) => handler(event.data, event.origin, event.source);
+            window.addEventListener('message', onMessage);
+            return () => window.removeEventListener('message', onMessage);
+        },
+        post(message, targetOrigin) {
+            window.parent.postMessage(message, targetOrigin);
+        },
+        parentSource() {
+            return window.parent === window ? null : window.parent;
+        },
+    };
+}
+function parentOriginFromLocation() {
+    if (typeof window === 'undefined')
+        return null;
+    const origin = new URLSearchParams(window.location.search).get('parentOrigin');
+    return origin && origin.length > 0 ? origin : null;
+}
+/** What the game is told when the page refuses a call outright rather than failing a buy. */
+const failureFor = (code) => (code === 'declined' ? 'declined' : 'try-again');
+/**
+ * Connect to the embedding page, or learn that there is none.
+ *
+ * Resolves null when the game is not in an iframe, when no `parentOrigin` was provided, or when
+ * the page does not answer within the timeout — a page that answers late was never going to
+ * service a buy either. After it resolves, individual Host calls have no timeout of their own:
+ * sign-in and buy legitimately wait on a human, and the page always answers, refusals included.
+ */
+export async function connectHost(options = {}) {
+    const endpoint = options.endpoint ?? windowEndpoint();
+    if (!endpoint)
+        return null;
+    const parentOrigin = options.parentOrigin ?? parentOriginFromLocation();
+    if (!parentOrigin)
+        return null;
+    const parent = endpoint.parentSource();
+    if (parent === null)
+        return null;
     const pending = new Map();
+    let unlisten = () => { };
     let disposed = false;
-    let context = null;
-    let resolveContext;
-    let rejectContext;
-    const ready = new Promise((resolve, reject) => {
-        resolveContext = resolve;
-        rejectContext = reject;
-    });
-    const post = (message) => parent.postMessage(message, options.parentOrigin);
-    const request = (value, progress) => {
-        if (disposed)
-            return Promise.reject(new Error('the embedded connection is closed'));
-        const id = globalThis.crypto.randomUUID();
-        return new Promise((resolve, reject) => {
-            const timer = setTimeout(() => {
-                pending.delete(id);
-                reject(new Error('the trusted parent did not answer in time'));
-            }, timeoutMs);
-            pending.set(id, { method: value.method, resolve, reject, timer, ...(progress ? { progress } : {}) });
-            post({ channel: EMBED_CHANNEL, v: EMBED_PROTOCOL_VERSION, type: 'request', id, request: value });
-        });
-    };
-    const onMessage = (rawEvent) => {
-        const event = rawEvent;
-        if (event.origin !== options.parentOrigin || event.source !== parent)
-            return;
-        const message = parseHostToGameMessage(event.data);
-        if (!message)
-            return;
-        if (message.type === 'context') {
-            if (context === null) {
-                context = Object.freeze({ ...message.context, launch: immutableLaunch(message.context.launch) });
-                resolveContext(context);
-            }
-            return;
-        }
-        if (message.type === 'market') {
-            const parsed = marketFrom(message.market);
-            if (parsed)
-                market.set(parsed);
-            return;
-        }
-        const waiting = pending.get(message.id);
-        if (!waiting)
-            return;
-        if (message.type === 'buy-progress') {
-            waiting.progress?.(message.transactionHash
-                ? { state: 'pending', transactionHash: message.transactionHash }
-                : { state: 'pending' });
-            return;
-        }
-        pending.delete(message.id);
-        clearTimeout(waiting.timer);
-        if (!message.ok) {
-            if (waiting.method === 'buy') {
-                const reason = message.error === 'no-wallet' ? 'try-again' : message.error;
-                waiting.resolve({ failed: { bought: false, reason } });
+    const send = (frame) => endpoint.post(frame, parentOrigin);
+    const context = await new Promise((resolveContext) => {
+        let settled = false;
+        const hello = setInterval(() => send({ v: FRAME_PROTOCOL_VERSION, type: 'gm:hello' }), HELLO_INTERVAL_MS);
+        const deadline = setTimeout(() => {
+            if (settled)
+                return;
+            settled = true;
+            clearInterval(hello);
+            unlisten();
+            resolveContext(null);
+        }, options.timeoutMs ?? DEFAULT_TIMEOUT_MS);
+        unlisten = endpoint.listen((data, origin, source) => {
+            // Both checks, always: the origin says who wrote the frame, the source says which window
+            // sent it, and either alone can be satisfied by a page we never agreed to trust.
+            if (origin !== parentOrigin || source !== parent)
+                return;
+            const frame = hostFrameFrom(data);
+            if (!frame)
+                return;
+            if (frame.type === 'gm:context') {
+                // First context wins; the page re-sends it for every hello and nothing may move the game
+                // to a different round mid-flight.
+                if (settled)
+                    return;
+                settled = true;
+                clearInterval(hello);
+                clearTimeout(deadline);
+                resolveContext(frame.context);
+                return;
             }
-            else {
-                waiting.reject(new Error(message.error));
+            if (frame.type === 'gm:progress') {
+                const request = pending.get(frame.id);
+                if (request?.kind === 'buy') {
+                    request.progress?.(frame.progress.transactionHash !== undefined
+                        ? { state: 'pending', transactionHash: frame.progress.transactionHash }
+                        : { state: 'pending' });
+                }
+                return;
             }
-            return;
-        }
-        waiting.resolve(message.value);
-    };
-    current.addEventListener('message', onMessage);
-    const contextTimer = setTimeout(() => {
-        disposed = true;
-        current.removeEventListener('message', onMessage);
-        rejectContext(new Error('the trusted parent did not provide game context'));
-    }, timeoutMs);
-    post({ channel: EMBED_CHANNEL, v: EMBED_PROTOCOL_VERSION, type: 'ready' });
-    return ready.then((trustedContext) => {
-        clearTimeout(contextTimer);
-        const host = {
-            address: async () => {
-                const value = await request({ method: 'address' });
-                return typeof value === 'string' || value === null ? value : null;
-            },
-            signIn: async (message) => {
-                const value = await request({ method: 'sign-in', message });
-                if (typeof value !== 'string' || !/^0x[0-9a-fA-F]+$/.test(value))
-                    throw new Error('invalid signature response');
-                return value;
-            },
-            sessionEvidence: () => request({ method: 'session-evidence' }),
-            buy: async (authorisation, progress) => {
-                const value = await request({ method: 'buy', authorisation }, progress);
-                if (typeof value !== 'object' || value === null)
-                    return { failed: { bought: false, reason: 'try-again' } };
-                const spent = value.spentWei;
-                try {
-                    const spentWei = BigInt(String(spent));
-                    return spentWei >= 0n ? { spentWei } : { failed: { bought: false, reason: 'try-again' } };
+            // gm:res — terminal, exactly once per id. A late or repeated answer finds nothing here.
+            const request = pending.get(frame.id);
+            if (!request)
+                return;
+            pending.delete(frame.id);
+            if (request.kind === 'buy') {
+                if (!frame.ok) {
+                    request.resolve({ failed: { bought: false, reason: failureFor(frame.error.code) } });
                 }
-                catch {
-                    return { failed: { bought: false, reason: 'try-again' } };
+                else if (frame.result.method !== 'buy') {
+                    request.resolve({ failed: { bought: false, reason: 'try-again' } });
                 }
-            },
-        };
-        const identity = {
-            resolve: async (players) => {
-                const value = await request({ method: 'identity', players });
-                return isPlayerIdentities(value) ? value : [];
-            },
-        };
-        const marketReadable = {
-            current: () => market.current(),
-            subscribe: (listener) => market.subscribe(listener),
-        };
-        return {
-            context: trustedContext,
-            host,
-            platform: { identity, market: marketReadable },
-            dispose: () => {
-                if (disposed)
-                    return;
-                disposed = true;
-                current.removeEventListener('message', onMessage);
-                for (const waiting of pending.values()) {
-                    clearTimeout(waiting.timer);
-                    waiting.reject(new Error('the embedded connection is closed'));
+                else if ('spentWei' in frame.result.outcome) {
+                    request.resolve({ spentWei: BigInt(frame.result.outcome.spentWei) });
                 }
-                pending.clear();
-                market.clear();
-            },
-        };
-    });
-}
-function wireMarket(state) {
-    return { ...state, trades: state.trades.map((trade) => ({ ...trade, spendWei: trade.spendWei.toString() })) };
-}
-function failure(reason) {
-    return ['nothing-to-spend', 'declined', 'not-enough-for-fees', 'window-closed'].includes(reason)
-        ? reason
-        : 'try-again';
-}
-/** Serve one known iframe. Both its origin and WindowProxy are required for every request. */
-export function serveEmbeddedGame(options) {
-    const current = options.currentWindow ?? window;
-    const active = new Set();
-    const acceptedRequestIds = new Set();
-    const usedAuthorisations = new Set();
-    const requestTimes = [];
-    let buyActive = false;
-    let signInActive = false;
-    let evidenceActive = false;
-    let childReady = false;
-    let stopped = false;
-    const lifetime = new AbortController();
-    let latestMarket = options.platform?.market?.current() ?? null;
-    const post = (message) => {
-        if (!stopped)
-            options.frameWindow.postMessage(message, options.gameOrigin);
-    };
-    const answer = (id, value) => post({ channel: EMBED_CHANNEL, v: EMBED_PROTOCOL_VERSION, type: 'response', id, ok: true, value });
-    const refuse = (id, error) => post({ channel: EMBED_CHANNEL, v: EMBED_PROTOCOL_VERSION, type: 'response', id, ok: false, error });
-    const run = async (id, request) => {
-        if (stopped || acceptedRequestIds.has(id) || acceptedRequestIds.size >= MAX_ACCEPTED_REQUEST_IDS)
-            return;
-        const now = Date.now();
-        while (requestTimes[0] !== undefined && requestTimes[0] <= now - 1_000)
-            requestTimes.shift();
-        if (active.size >= 16 || requestTimes.length >= 64)
-            return;
-        requestTimes.push(now);
-        acceptedRequestIds.add(id);
-        active.add(id);
-        try {
-            switch (request.method) {
-                case 'address':
-                    answer(id, await options.host.address(lifetime.signal));
-                    break;
-                case 'sign-in':
-                    if (signInActive) {
-                        refuse(id, 'try-again');
-                        break;
-                    }
-                    signInActive = true;
-                    try {
-                        const address = await options.host.address(lifetime.signal);
-                        if (stopped)
-                            break;
-                        if (!address ||
-                            !isSessionChallenge(request.message, address, options.context.gateUrl, options.signInDomain)) {
-                            refuse(id, address ? 'try-again' : 'no-wallet');
-                            break;
-                        }
-                        const signature = await options.host.signIn(request.message, lifetime.signal);
-                        if (stopped)
-                            break;
-                        answer(id, signature);
-                    }
-                    finally {
-                        signInActive = false;
-                    }
-                    break;
-                case 'session-evidence':
-                    if (evidenceActive) {
-                        refuse(id, 'try-again');
-                        break;
-                    }
-                    evidenceActive = true;
-                    try {
-                        const evidence = await options.host.sessionEvidence?.(lifetime.signal);
-                        if (!stopped)
-                            answer(id, evidence);
-                    }
-                    finally {
-                        evidenceActive = false;
-                    }
-                    break;
-                case 'identity':
-                    answer(id, (await options.platform?.identity?.resolve(request.players)) ?? []);
-                    break;
-                case 'buy': {
-                    if (buyActive) {
-                        refuse(id, 'try-again');
-                        break;
-                    }
-                    buyActive = true;
-                    try {
-                        const address = await options.host.address(lifetime.signal);
-                        if (stopped)
-                            break;
-                        if (!address ||
-                            address.toLowerCase() !== request.authorisation.buyer.toLowerCase() ||
-                            request.authorisation.poolId.toLowerCase() !== options.context.launch.poolId.toLowerCase()) {
-                            refuse(id, address ? 'try-again' : 'no-wallet');
-                            break;
-                        }
-                        if (!isCanonicalSpendHookData(request.authorisation) ||
-                            !(await options.validateAuthorisation(request.authorisation, options.context, lifetime.signal))) {
-                            refuse(id, 'try-again');
-                            break;
-                        }
-                        if (stopped)
-                            break;
-                        const authorisationId = [
-                            request.authorisation.buyer.toLowerCase(),
-                            request.authorisation.poolId.toLowerCase(),
-                            request.authorisation.nonce,
-                        ].join(':');
-                        if (usedAuthorisations.has(authorisationId) || usedAuthorisations.size >= 256) {
-                            refuse(id, 'try-again');
-                            break;
-                        }
-                        usedAuthorisations.add(authorisationId);
-                        const result = await options.host.buy(request.authorisation, (event) => {
-                            post({
-                                channel: EMBED_CHANNEL,
-                                v: EMBED_PROTOCOL_VERSION,
-                                type: 'buy-progress',
-                                id,
-                                ...(event.transactionHash ? { transactionHash: event.transactionHash } : {}),
-                            });
-                        }, lifetime.signal);
-                        if (stopped)
-                            break;
-                        if ('failed' in result) {
-                            refuse(id, result.failed.bought ? 'try-again' : failure(result.failed.reason));
-                        }
-                        else {
-                            answer(id, { spentWei: result.spentWei.toString() });
-                        }
-                    }
-                    finally {
-                        buyActive = false;
-                    }
-                    break;
+                else {
+                    request.resolve({ failed: frame.result.outcome.failed });
                 }
+                return;
             }
-        }
-        catch {
-            refuse(id, 'try-again');
-        }
-        finally {
-            active.delete(id);
-        }
-    };
-    const onMessage = (rawEvent) => {
-        const event = rawEvent;
-        if (event.origin !== options.gameOrigin || event.source !== options.frameWindow)
-            return;
-        const message = parseGameToHostMessage(event.data);
-        if (!message)
-            return;
-        if (message.type === 'ready') {
-            if (childReady)
+            if (request.kind === 'address') {
+                if (frame.ok && frame.result.method === 'address')
+                    request.resolve(frame.result.address);
+                else
+                    request.reject(new Error(frame.ok ? 'the page answered the wrong call' : frame.error.message));
                 return;
-            childReady = true;
-            post({ channel: EMBED_CHANNEL, v: EMBED_PROTOCOL_VERSION, type: 'context', context: options.context });
-            if (latestMarket) {
-                post({ channel: EMBED_CHANNEL, v: EMBED_PROTOCOL_VERSION, type: 'market', market: wireMarket(latestMarket) });
             }
-            return;
-        }
-        void run(message.id, message.request);
+            if (frame.ok && frame.result.method === 'signIn')
+                request.resolve(frame.result.signature);
+            else
+                request.reject(new Error(frame.ok ? 'the page answered the wrong call' : frame.error.message));
+        });
+    });
+    if (!context)
+        return null;
+    const requestId = () => globalThis.crypto.randomUUID();
+    const host = {
+        address: () => new Promise((resolve, reject) => {
+            if (disposed)
+                return resolve(null);
+            const id = requestId();
+            pending.set(id, { kind: 'address', resolve, reject });
+            send({ v: FRAME_PROTOCOL_VERSION, type: 'gm:req', id, call: { method: 'address' } });
+        }),
+        signIn: (message) => new Promise((resolve, reject) => {
+            if (disposed)
+                return reject(new Error('this embed has been disposed'));
+            const id = requestId();
+            pending.set(id, { kind: 'signIn', resolve, reject });
+            send({ v: FRAME_PROTOCOL_VERSION, type: 'gm:req', id, call: { method: 'signIn', message } });
+        }),
+        buy: (authorisation, progress) => new Promise((resolve) => {
+            if (disposed)
+                return resolve({ failed: { bought: false, reason: 'try-again' } });
+            const id = requestId();
+            pending.set(id, { kind: 'buy', resolve, progress });
+            // The client's Authorisation is already all strings plus optional hookData, which is
+            // exactly the wire shape — nothing to convert, nothing to get wrong.
+            send({ v: FRAME_PROTOCOL_VERSION, type: 'gm:req', id, call: { method: 'buy', authorisation } });
+        }),
     };
-    current.addEventListener('message', onMessage);
-    const stopMarket = options.platform?.market?.subscribe((state) => {
-        latestMarket = state;
-        if (childReady) {
-            post({ channel: EMBED_CHANNEL, v: EMBED_PROTOCOL_VERSION, type: 'market', market: wireMarket(state) });
-        }
-    }) ?? (() => { });
-    return () => {
-        if (stopped)
-            return;
-        stopped = true;
-        lifetime.abort();
-        current.removeEventListener('message', onMessage);
-        stopMarket();
+    return {
+        host,
+        context,
+        dispose() {
+            disposed = true;
+            unlisten();
+            pending.clear();
+        },
     };
 }
 //# sourceMappingURL=embed.js.map