@flayerlabs/gamemode-gate 0.1.0

package/dist/claims.js

@@ -0,0 +1,128 @@
+import { maxUint256 } from 'viem';
+import { Ledger } from './ledger.js';
+/**
+ * Turning points into something a player can actually spend.
+ *
+ * Two parties have to agree before a buy can happen, and they check different things. The ledger
+ * knows what this player earned and what they have already been authorised for. The signer knows
+ * whether it is willing to vouch for this pool at all. Only when both say yes does an
+ * authorisation exist.
+ *
+ * The order matters and is not interchangeable: the hold is recorded first, then signed. A
+ * signature that exists without a hold is spending nobody is tracking; a hold without a signature
+ * is a refund waiting to happen. Only one of those costs money.
+ */
+/** How long an authorisation stays valid. Long enough to approve in a wallet, short enough that an
+ *  abandoned one does not sit around spendable. */
+export const CLAIM_AUTHORIZATION_TTL_MS = 5 * 60_000;
+const DEADLINE_SECONDS = CLAIM_AUTHORIZATION_TTL_MS / 1_000;
+const REQUEST_ID = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/;
+/** Request ids cross an unauthenticated parser before they reach Postgres, so bound them here too. */
+export function isClaimRequestId(value) {
+    return typeof value === 'string' && REQUEST_ID.test(value);
+}
+/** The signed message carries uint256, while JavaScript's bigint has no upper bound. */
+export function isClaimAmount(value) {
+    return typeof value === 'bigint' && value > 0n && value <= maxUint256;
+}
+export class Claims {
+    pool;
+    ledger;
+    signer;
+    onStrandedHold;
+    now;
+    constructor(pool, ledger, signer, 
+    /** Called when a hold could neither be signed nor released, and needs a human. */
+    onStrandedHold, 
+    /** An internal seam for exact window-boundary tests. Production uses the process clock. */
+    now = Date.now) {
+        this.pool = pool;
+        this.ledger = ledger;
+        this.signer = signer;
+        this.onStrandedHold = onStrandedHold;
+        this.now = now;
+    }
+    /**
+     * Authorise a player to spend up to `upToWei`, or explain why not.
+     *
+     * The ledger's ceiling is a conservative mirror of the chain's: the contract tracks
+     * `walletSpentWei` per pool per wallet and enforces it whatever we believe. Being ahead of the
+     * chain is safe — we simply authorise less than we could. Being behind it would mean issuing a
+     * signature that reverts at the swap, which to a player is indistinguishable from being robbed.
+     */
+    async authorise(roundId, player, upToWei, requestId) {
+        if (!isClaimRequestId(requestId))
+            return { ok: false, refuse: 'claim.request_invalid' };
+        if (!isClaimAmount(upToWei))
+            return { ok: false, refuse: 'claim.amount_invalid' };
+        const round = await this.pool.query(`select pool_id from rounds where id = $1`, [roundId]);
+        const row = round.rows[0];
+        if (!row)
+            return { ok: false, refuse: 'claim.no_such_round' };
+        // The deadline is decided before the hold so both agree on when it stops being spendable.
+        const now = this.now();
+        const deadline = BigInt(Math.floor(now / 1000) + DEADLINE_SECONDS);
+        // Idempotency and the clock are decided under the same player lock. If an accepted request is
+        // still committing at the buzzer, a retry waits for it and recovers it rather than observing
+        // no row outside the transaction and being refused as a new, late request.
+        const held = await this.ledger.claim(roundId, player, upToWei, requestId, deadline, now);
+        if (!held.ok)
+            return { ok: false, refuse: held.refuse };
+        // Another replica may have completed the request while this one waited for the balance lock.
+        if (held.claim.signature && held.claim.signer) {
+            return { ok: true, payload: payload(row.pool_id, held.claim) };
+        }
+        if (held.claim.status === 'released')
+            return { ok: false, refuse: 'claim.request_released' };
+        return this.finish(row.pool_id, held.claim);
+    }
+    async finish(poolId, claim) {
+        try {
+            const candidate = await this.signer.sign(claim.player, poolId, claim.deadline, claim.wei, claim.nonce);
+            // Never return bytes that were not durably recorded. Concurrent signers both return the one
+            // stored winner, so retries stay byte-identical even if an implementation signs randomly.
+            const completed = await this.ledger.completeClaim(claim.nonce, candidate.signature, candidate.signer);
+            if (!completed?.signature || !completed.signer)
+                throw new Error('claim could not be completed');
+            return { ok: true, payload: payload(poolId, completed) };
+        }
+        catch (error) {
+            // The hold was taken and nothing will ever be spent against it, so it goes back. Without
+            // this, a signer outage quietly eats a player's allowance for the rest of the round.
+            //
+            // If the release ALSO fails, the original error still wins. Replacing it with a database
+            // error would hide the reason and leave the nonce nowhere in the logs — so it is named here,
+            // because that number is what a person needs to give the allowance back by hand.
+            await this.ledger.releaseUnsigned(claim.nonce).catch((releaseError) => {
+                this.onStrandedHold?.(claim.nonce, releaseError);
+            });
+            throw error;
+        }
+    }
+    /** Give back every authorisation that expired unspent. */
+    releaseExpired() {
+        return this.ledger.releaseExpired(Math.floor(this.now() / 1000));
+    }
+    /** What this player could spend right now. */
+    availableWei(roundId, player) {
+        return this.ledger.availableWei(roundId, player);
+    }
+    /** Full authoritative balance for live snapshots. */
+    economyBalance(roundId, player) {
+        return this.ledger.economyBalance(roundId, player);
+    }
+}
+function payload(poolId, claim) {
+    if (!claim.signature || !claim.signer)
+        throw new Error('claim is not signed');
+    return {
+        buyer: claim.player,
+        poolId: poolId,
+        deadline: claim.deadline,
+        maxSpendWei: claim.wei,
+        nonce: claim.nonce,
+        signature: claim.signature,
+        signer: claim.signer,
+    };
+}
+//# sourceMappingURL=claims.js.map

package/dist/claims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claims.js","sourceRoot":"","sources":["../src/claims.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAClC,OAAO,EAAE,MAAM,EAA+B,MAAM,aAAa,CAAC;AAGlE;;;;;;;;;;;GAWG;AAEH;mDACmD;AACnD,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,GAAG,MAAM,CAAC;AACrD,MAAM,gBAAgB,GAAG,0BAA0B,GAAG,KAAK,CAAC;AAC5D,MAAM,UAAU,GAAG,qCAAqC,CAAC;AAEzD,sGAAsG;AACtG,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,GAAG,EAAE,IAAI,KAAK,IAAI,UAAU,CAAC;AACxE,CAAC;AAMD,MAAM,OAAO,MAAM;IAEE;IACA;IACA;IAEA;IAEA;IAPnB,YACmB,IAAU,EACV,MAAc,EACd,MAAqB;IACtC,kFAAkF;IACjE,cAAwD;IACzE,2FAA2F;IAC1E,MAAoB,IAAI,CAAC,GAAG;QAN5B,SAAI,GAAJ,IAAI,CAAM;QACV,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAe;QAErB,mBAAc,GAAd,cAAc,CAA0C;QAExD,QAAG,GAAH,GAAG,CAAyB;IAC5C,CAAC;IAEJ;;;;;;;OAOG;IACH,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,MAAgB,EAAE,OAAe,EAAE,SAAiB;QACnF,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;QACxF,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;QAElF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAsB,0CAA0C,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAChH,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAE9D,0FAA0F;QAC1F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,gBAAgB,CAAC,CAAC;QACnE,8FAA8F;QAC9F,6FAA6F;QAC7F,2EAA2E;QAC3E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QACzF,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAExD,6FAA6F;QAC7F,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAC9C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;QAC7F,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,KAAY;QAC/C,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACtC,KAAK,CAAC,MAAuB,EAC7B,MAAuB,EACvB,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,KAAK,CACZ,CAAC;YACF,4FAA4F;YAC5F,0FAA0F;YAC1F,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;YACtG,IAAI,CAAC,SAAS,EAAE,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAChG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yFAAyF;YACzF,qFAAqF;YACrF,EAAE;YACF,yFAAyF;YACzF,6FAA6F;YAC7F,iFAAiF;YACjF,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,YAAqB,EAAE,EAAE;gBAC7E,IAAI,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,cAAc;QACZ,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,8CAA8C;IAC9C,YAAY,CAAC,OAAe,EAAE,MAAgB;QAC5C,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnD,CAAC;IAED,qDAAqD;IACrD,cAAc,CAAC,OAAe,EAAE,MAAgB;QAC9C,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;CACF;AAED,SAAS,OAAO,CAAC,MAAc,EAAE,KAAY;IAC3C,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC9E,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,MAAuB;QACpC,MAAM,EAAE,MAAuB;QAC/B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,GAAG;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;AACJ,CAAC"}

package/dist/demo.d.ts

@@ -0,0 +1,40 @@
+import pg from 'pg';
+import type { FastifyInstance } from 'fastify';
+import type { GameModule } from '@flayerlabs/gamemode-spec';
+export interface DemoOptions<Config, State, Event, Action, PublicView, PlayerView> {
+    game: GameModule<Config, State, Event, Action, PublicView, PlayerView>;
+    config: Config;
+    /** Default `postgres://postgres:gamemode@127.0.0.1:55439/gamemode`, or `DATABASE_URL`. */
+    databaseUrl?: string;
+    /** How long before the round opens. Short, because someone is waiting. */
+    lobbyMs?: number;
+    roundMs?: number;
+    /** The cap a wallet may spend, as a real launch would set on chain. Default 0.025 ETH. */
+    walletCapWei?: bigint;
+    pointsPerDollar?: number;
+    usdPerEth?: number;
+    roundId?: string;
+    /** Exact origin where this demo gate will listen. Default `http://127.0.0.1:4000`. */
+    gateOrigin?: string;
+}
+export interface Demo {
+    app: FastifyInstance;
+    roundId: string;
+    opensAt: number;
+    /** The throwaway wallet standing in for the player's real one. */
+    walletAddress: `0x${string}`;
+    /** Everything the fake wallet was asked to buy, in order. Empty until somebody buys. */
+    purchases: {
+        maxSpendWei: string;
+        at: number;
+    }[];
+    pool: pg.Pool;
+}
+/**
+ * Boot a gate, a round and a stand-in wallet.
+ *
+ * The caller owns serving their own game's files and calling `listen`, because how a game is built
+ * is the one part of this that genuinely differs between games.
+ */
+export declare function createDemoGate<Config, State, Event, Action, PublicView, PlayerView>(options: DemoOptions<Config, State, Event, Action, PublicView, PlayerView>): Promise<Demo>;
+//# sourceMappingURL=demo.d.ts.map

package/dist/demo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"demo.d.ts","sourceRoot":"","sources":["../src/demo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AA+B5D,MAAM,WAAW,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU;IAC/E,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IACvE,MAAM,EAAE,MAAM,CAAC;IACf,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0FAA0F;IAC1F,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,IAAI;IACnB,GAAG,EAAE,eAAe,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,aAAa,EAAE,KAAK,MAAM,EAAE,CAAC;IAC7B,wFAAwF;IACxF,SAAS,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACjD,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;CACf;AAID;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EACvF,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,GACzE,OAAO,CAAC,IAAI,CAAC,CA4Ef"}

package/dist/demo.js

@@ -0,0 +1,90 @@
+import pg from 'pg';
+import { privateKeyToAccount } from 'viem/accounts';
+import { createGate } from './server.js';
+import { Room } from './room.js';
+import { Ledger } from './ledger.js';
+import { Claims } from './claims.js';
+import { Sessions } from './sessions.js';
+import { PayloadSigner } from './chain/signer.js';
+import { migrate } from './store.js';
+import { resolveEconomy } from './economy.js';
+/**
+ * A whole gate on a laptop, with the chain taken out.
+ *
+ * Real gate, real database, real socket, real EIP-712 signatures. What is faked is the one thing a
+ * laptop cannot provide: a chain. The wallet is a throwaway key and the purchase is recorded rather
+ * than submitted, so every step up to and including the signature is the genuine one — which is
+ * what makes this a playtest rather than a mock-up.
+ *
+ * This lived inside the quiz example, where no other game could reach it. Nothing about it was ever
+ * quiz-specific.
+ *
+ * Not for production, and it refuses to pretend otherwise: the signing key is a constant, the pool
+ * id is invented, and no chain is ever consulted.
+ */
+/** A key nobody should ever fund. Constant so a restart does not change who you are. */
+const DEMO_SIGNING_KEY = `0x${'11'.repeat(32)}`;
+const DEMO_WALLET_KEY = `0x${'77'.repeat(32)}`;
+const DEMO_POOL_ID = `0x${'ab'.repeat(32)}`;
+const DEMO_CALCULATOR = `0x${'cd'.repeat(20)}`;
+const ETH = 1000000000000000000n;
+/**
+ * Boot a gate, a round and a stand-in wallet.
+ *
+ * The caller owns serving their own game's files and calling `listen`, because how a game is built
+ * is the one part of this that genuinely differs between games.
+ */
+export async function createDemoGate(options) {
+    const { game, config, databaseUrl = process.env.DATABASE_URL ?? 'postgres://postgres:gamemode@127.0.0.1:55439/gamemode', lobbyMs = 8_000, roundMs = 10 * 60_000, walletCapWei = ETH / 40n, pointsPerDollar = 100, usdPerEth = 3_000, roundId = 'dev', gateOrigin = 'http://127.0.0.1:4000', } = options;
+    // The same check the real gate runs at boot. A demo that silently used an impossible economy
+    // would teach a builder that their numbers work when they do not.
+    const economy = resolveEconomy({
+        maxPointsPerPlayer: game.rewardBounds(config).maxPointsPerPlayer,
+        walletCapWei,
+        pointsPerDollar,
+        usdPerEth,
+    });
+    if (!economy.ok) {
+        throw new Error(`That economy does not work: ${economy.problem}. Try ${economy.suggestedPointsPerDollar} points per dollar.`);
+    }
+    const pool = new pg.Pool({ connectionString: databaseUrl });
+    await migrate(pool);
+    // Same round id every run, so a reload is the same game rather than an accumulating pile.
+    await pool.query('delete from rounds where id = $1', [roundId]);
+    const opensAt = Date.now() + lobbyMs;
+    await Room.create(pool, game, {
+        id: roundId,
+        config,
+        seed: Math.floor(Math.random() * 1_000_000),
+        window: { opensAt, closesAt: opensAt + roundMs },
+        weiPerPoint: economy.economy.weiPerPoint,
+        walletCapWei,
+        poolId: DEMO_POOL_ID,
+    });
+    const app = createGate({
+        pool,
+        game,
+        config,
+        pointsPerDollar,
+        usdPerEth,
+        sessions: new Sessions(process.env.SESSION_SECRET ?? 'dev-secret-that-is-long-enough-to-pass', 'localhost', gateOrigin),
+        claims: new Claims(pool, new Ledger(pool), new PayloadSigner(DEMO_SIGNING_KEY, 8453, DEMO_CALCULATOR)),
+        // Anything, because this is a laptop and the browser is on some port nobody can predict.
+        allowedOrigins: true,
+    });
+    const wallet = privateKeyToAccount(DEMO_WALLET_KEY);
+    const purchases = [];
+    // Standing in for the page a game is embedded in. In production this is flaunch.gg holding the
+    // player's real wallet; here the signature is real and the purchase is only written down.
+    app.get('/dev/wallet', () => ({ address: wallet.address }));
+    app.post('/dev/wallet/sign', async (request) => ({
+        signature: await wallet.signMessage({ message: request.body.message }),
+    }));
+    app.post('/dev/wallet/buy', (request) => {
+        const { maxSpendWei } = request.body;
+        purchases.push({ maxSpendWei, at: Date.now() });
+        return { spentWei: maxSpendWei };
+    });
+    return { app, roundId, opensAt, walletAddress: wallet.address, purchases, pool };
+}
+//# sourceMappingURL=demo.js.map

package/dist/demo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"demo.js","sourceRoot":"","sources":["../src/demo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAGpD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C;;;;;;;;;;;;;GAaG;AAEH,wFAAwF;AACxF,MAAM,gBAAgB,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAW,CAAC;AACzD,MAAM,eAAe,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAW,CAAC;AACxD,MAAM,YAAY,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAW,CAAC;AACrD,MAAM,eAAe,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAW,CAAC;AA8BxD,MAAM,GAAG,GAAG,oBAA0B,CAAC;AAEvC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAA0E;IAE1E,MAAM,EACJ,IAAI,EACJ,MAAM,EACN,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,uDAAuD,EACjG,OAAO,GAAG,KAAK,EACf,OAAO,GAAG,EAAE,GAAG,MAAM,EACrB,YAAY,GAAG,GAAG,GAAG,GAAG,EACxB,eAAe,GAAG,GAAG,EACrB,SAAS,GAAG,KAAK,EACjB,OAAO,GAAG,KAAK,EACf,UAAU,GAAG,uBAAuB,GACrC,GAAG,OAAO,CAAC;IAEZ,6FAA6F;IAC7F,kEAAkE;IAClE,MAAM,OAAO,GAAG,cAAc,CAAC;QAC7B,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,kBAAkB;QAChE,YAAY;QACZ,eAAe;QACf,SAAS;KACV,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,+BAA+B,OAAO,CAAC,OAAO,SAAS,OAAO,CAAC,wBAAwB,qBAAqB,CAC7G,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC,CAAC;IAC5D,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,0FAA0F;IAC1F,MAAM,IAAI,CAAC,KAAK,CAAC,kCAAkC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAEhE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IACrC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE;QAC5B,EAAE,EAAE,OAAO;QACX,MAAM;QACN,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC;QAC3C,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,GAAG,OAAO,EAAE;QAChD,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW;QACxC,YAAY;QACZ,MAAM,EAAE,YAAY;KACrB,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,UAAU,CAAC;QACrB,IAAI;QACJ,IAAI;QACJ,MAAM;QACN,eAAe;QACf,SAAS;QACT,QAAQ,EAAE,IAAI,QAAQ,CACpB,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,wCAAwC,EACtE,WAAW,EACX,UAAU,CACX;QACD,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,aAAa,CAAC,gBAAgB,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;QACtG,yFAAyF;QACzF,cAAc,EAAE,IAA2B;KAC5C,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,mBAAmB,CAAC,eAAe,CAAC,CAAC;IACpD,MAAM,SAAS,GAA0C,EAAE,CAAC;IAE5D,+FAA+F;IAC/F,0FAA0F;IAC1F,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC5D,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAC/C,SAAS,EAAE,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,OAAO,EAAG,OAAO,CAAC,IAA4B,CAAC,OAAO,EAAE,CAAC;KAChG,CAAC,CAAC,CAAC;IACJ,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,OAAO,EAAE,EAAE;QACtC,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,IAA+B,CAAC;QAChE,SAAS,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAChD,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACnF,CAAC"}

package/dist/economy.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Turning points into money, and refusing a round whose sums do not work.
+ *
+ * This file exists because of a real incident. A gate ran with a per-wallet cap twenty times the
+ * value its own deployment guide prescribed, and over 48 hours roughly 2 ETH went to wallets whose
+ * scores were in the bot range. Nothing was broken: every detector worked. One number in an
+ * environment variable was wrong, and no code was in a position to notice.
+ *
+ * So the arithmetic lives here, runs at round creation with the actual values, and refuses. A
+ * creator sets one human number — how many points a dollar is worth — and never sees wei.
+ */
+export interface EconomyInput {
+    /** The most one player can earn, declared by the game itself via `rewardBounds`. */
+    maxPointsPerPlayer: number;
+    /** The pool's on-chain per-wallet ceiling. The chain enforces this whatever we do. */
+    walletCapWei: bigint;
+    /** The creator's one knob. 100 means 100 points is worth a dollar. */
+    pointsPerDollar: number;
+    usdPerEth: number;
+}
+export interface Economy {
+    weiPerPoint: bigint;
+    /** What a flawless round pays. Always at or under `walletCapWei`, or this would not exist. */
+    maxPayoutWei: bigint;
+}
+export type EconomyResult = {
+    ok: true;
+    economy: Economy;
+} | {
+    ok: false;
+    problem: string;
+    suggestedPointsPerDollar: number;
+};
+/**
+ * Resolve the rate for one round, or refuse with the number that fixes it.
+ *
+ * The rule is single and total: **a flawless round must fit under the wallet cap.** If it does not,
+ * a player earns points the chain will not let them spend — the game shows a reward and the buy
+ * refuses it, which is the worst failure available because it looks like theft.
+ *
+ * Refusals carry the corrected `pointsPerDollar` rather than a diagnosis. An operator reading
+ * "raise it to 250" fixes this in one step; an operator reading "the cap binds below the ceiling"
+ * goes and reads this file.
+ */
+export declare function resolveEconomy(input: EconomyInput): EconomyResult;
+//# sourceMappingURL=economy.d.ts.map

package/dist/economy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"economy.d.ts","sourceRoot":"","sources":["../src/economy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,MAAM,WAAW,YAAY;IAC3B,oFAAoF;IACpF,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sFAAsF;IACtF,YAAY,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,OAAO;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,8FAA8F;IAC9F,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAC9B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,wBAAwB,EAAE,MAAM,CAAA;CAAE,CAAC;AAErE;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,aAAa,CAwDjE"}

package/dist/economy.js

@@ -0,0 +1,100 @@
+/**
+ * Turning points into money, and refusing a round whose sums do not work.
+ *
+ * This file exists because of a real incident. A gate ran with a per-wallet cap twenty times the
+ * value its own deployment guide prescribed, and over 48 hours roughly 2 ETH went to wallets whose
+ * scores were in the bot range. Nothing was broken: every detector worked. One number in an
+ * environment variable was wrong, and no code was in a position to notice.
+ *
+ * So the arithmetic lives here, runs at round creation with the actual values, and refuses. A
+ * creator sets one human number — how many points a dollar is worth — and never sees wei.
+ */
+/** 1 ETH in wei. */
+const WEI_PER_ETH = 1000000000000000000n;
+/**
+ * Resolve the rate for one round, or refuse with the number that fixes it.
+ *
+ * The rule is single and total: **a flawless round must fit under the wallet cap.** If it does not,
+ * a player earns points the chain will not let them spend — the game shows a reward and the buy
+ * refuses it, which is the worst failure available because it looks like theft.
+ *
+ * Refusals carry the corrected `pointsPerDollar` rather than a diagnosis. An operator reading
+ * "raise it to 250" fixes this in one step; an operator reading "the cap binds below the ceiling"
+ * goes and reads this file.
+ */
+export function resolveEconomy(input) {
+    const { maxPointsPerPlayer, walletCapWei, pointsPerDollar, usdPerEth } = input;
+    if (!Number.isFinite(pointsPerDollar) || pointsPerDollar <= 0) {
+        return { ok: false, problem: 'points per dollar must be a positive number', suggestedPointsPerDollar: 100 };
+    }
+    if (!Number.isFinite(usdPerEth) || usdPerEth <= 0) {
+        return { ok: false, problem: 'the ETH price must be a positive number', suggestedPointsPerDollar: pointsPerDollar };
+    }
+    if (!Number.isFinite(maxPointsPerPlayer) || maxPointsPerPlayer <= 0) {
+        return {
+            ok: false,
+            problem: 'the game says a player can earn at most 0 points, so there is nothing to pay',
+            suggestedPointsPerDollar: pointsPerDollar,
+        };
+    }
+    if (walletCapWei <= 0n) {
+        return {
+            ok: false,
+            problem: 'this launch has no per-wallet spending cap, so nothing can be authorised',
+            suggestedPointsPerDollar: pointsPerDollar,
+        };
+    }
+    // How many points one ETH buys. Checked before it becomes a divisor: `pointsPerDollar` is
+    // guarded as positive above, but a small enough positive value still rounds this product to
+    // zero — and dividing by it threw `Division by zero` out of the one function whose entire job is
+    // to refuse a bad economy with a sentence an operator can act on.
+    const pointsPerEth = Math.round(usdPerEth * pointsPerDollar);
+    if (pointsPerEth <= 0) {
+        return {
+            ok: false,
+            problem: 'one point would be worth more than a whole ETH, which cannot be what was meant',
+            suggestedPointsPerDollar: minimumPointsPerDollar(input),
+        };
+    }
+    const weiPerPoint = WEI_PER_ETH / BigInt(pointsPerEth);
+    if (weiPerPoint <= 0n) {
+        return {
+            ok: false,
+            problem: 'each point would be worth less than the smallest unit of ETH',
+            suggestedPointsPerDollar: Math.max(1, Math.floor(pointsPerDollar / 1000)),
+        };
+    }
+    const maxPayoutWei = BigInt(Math.floor(maxPointsPerPlayer)) * weiPerPoint;
+    if (maxPayoutWei > walletCapWei) {
+        return {
+            ok: false,
+            problem: 'a perfect round would earn more than this launch lets one wallet spend',
+            suggestedPointsPerDollar: minimumPointsPerDollar(input),
+        };
+    }
+    return { ok: true, economy: { weiPerPoint, maxPayoutWei } };
+}
+/**
+ * The smallest `pointsPerDollar` that keeps a flawless round inside the cap.
+ *
+ * Rounded up, then nudged until it actually passes: the division that produces it floors, and a
+ * value that is correct to the last wei but fails the check is worse than useless in an error
+ * message. Two steps is enough for any input — the loop is a guard against an off-by-one in the
+ * rounding, not an iterative search.
+ */
+function minimumPointsPerDollar(input) {
+    const { maxPointsPerPlayer, walletCapWei, usdPerEth } = input;
+    const points = BigInt(Math.floor(maxPointsPerPlayer));
+    const maxWeiPerPoint = walletCapWei / points;
+    if (maxWeiPerPoint <= 0n)
+        return Math.ceil(maxPointsPerPlayer);
+    let candidate = Math.ceil(Number(WEI_PER_ETH / maxWeiPerPoint) / usdPerEth);
+    for (let i = 0; i < 3; i++) {
+        const result = resolveEconomy({ ...input, pointsPerDollar: candidate });
+        if (result.ok)
+            return candidate;
+        candidate += 1;
+    }
+    return candidate;
+}
+//# sourceMappingURL=economy.js.map

package/dist/economy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"economy.js","sourceRoot":"","sources":["../src/economy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,oBAAoB;AACpB,MAAM,WAAW,GAAG,oBAA0B,CAAC;AAsB/C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,KAAmB;IAChD,MAAM,EAAE,kBAAkB,EAAE,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAE/E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,eAAe,IAAI,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,6CAA6C,EAAE,wBAAwB,EAAE,GAAG,EAAE,CAAC;IAC9G,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,yCAAyC,EAAE,wBAAwB,EAAE,eAAe,EAAE,CAAC;IACtH,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,kBAAkB,IAAI,CAAC,EAAE,CAAC;QACpE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,8EAA8E;YACvF,wBAAwB,EAAE,eAAe;SAC1C,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,IAAI,EAAE,EAAE,CAAC;QACvB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,0EAA0E;YACnF,wBAAwB,EAAE,eAAe;SAC1C,CAAC;IACJ,CAAC;IAED,0FAA0F;IAC1F,4FAA4F;IAC5F,iGAAiG;IACjG,kEAAkE;IAClE,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,eAAe,CAAC,CAAC;IAC7D,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,gFAAgF;YACzF,wBAAwB,EAAE,sBAAsB,CAAC,KAAK,CAAC;SACxD,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IACvD,IAAI,WAAW,IAAI,EAAE,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,8DAA8D;YACvE,wBAAwB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;SACxE,CAAC;IACN,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,WAAW,CAAC;IAC1E,IAAI,YAAY,GAAG,YAAY,EAAE,CAAC;QAChC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,wEAAwE;YACjF,wBAAwB,EAAE,sBAAsB,CAAC,KAAK,CAAC;SACxD,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,CAAC;AAC9D,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAAC,KAAmB;IACjD,MAAM,EAAE,kBAAkB,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,YAAY,GAAG,MAAM,CAAC;IAC7C,IAAI,cAAc,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAE/D,IAAI,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,cAAc,CAAC,GAAG,SAAS,CAAC,CAAC;IAC5E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,GAAG,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC;QACxE,IAAI,MAAM,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QAChC,SAAS,IAAI,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/game-registry.d.ts

@@ -0,0 +1,17 @@
+import { type FastifyInstance } from 'fastify';
+import type { Pool } from 'pg';
+export interface GameRegistryOptions {
+    pool: Pool;
+    /** The flaunch.gg origins allowed to resolve registrations in a browser. */
+    allowedOrigins: readonly string[];
+    /** Server-to-server bearer token held only by the Flaunch launch backend. */
+    writerToken: string;
+}
+/**
+ * The stable, Flaunch-owned public read service for chain + coin → game discovery.
+ *
+ * Creator gates cannot host this route: a page needs the registration to discover which creator
+ * gate to call. Registration writes remain a trusted launch-backend operation against the store.
+ */
+export declare function createGameRegistry(options: GameRegistryOptions): FastifyInstance;
+//# sourceMappingURL=game-registry.d.ts.map

package/dist/game-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"game-registry.d.ts","sourceRoot":"","sources":["../src/game-registry.ts"],"names":[],"mappings":"AAAA,OAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,SAAS,CAAC;AAGxD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAU/B,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,IAAI,CAAC;IACX,4EAA4E;IAC5E,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,6EAA6E;IAC7E,WAAW,EAAE,MAAM,CAAC;CACrB;AA4BD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,eAAe,CAqDhF"}

package/dist/game-registry.js

@@ -0,0 +1,90 @@
+import Fastify, {} from 'fastify';
+import cors from '@fastify/cors';
+import { createHash, timingSafeEqual } from 'node:crypto';
+import { isAddress } from 'viem';
+import { InvalidRegistration, RegistrationConflict, disableGameRegistration, pinGameRegistration, resolveGameRegistration, } from './registry.js';
+const authorised = (header, token) => {
+    const supplied = header?.startsWith('Bearer ') ? header.slice('Bearer '.length) : '';
+    const digest = (value) => createHash('sha256').update(value).digest();
+    return timingSafeEqual(digest(supplied), digest(token));
+};
+const routeChainId = (value) => {
+    if (!/^[1-9][0-9]*$/.test(value))
+        return null;
+    const parsed = Number(value);
+    return Number.isSafeInteger(parsed) ? parsed : null;
+};
+const internalRoute = (request, token) => {
+    if (!authorised(request.headers.authorization, token)) {
+        return { ok: false, status: 401, message: 'registry writer authentication failed' };
+    }
+    const { chainId: rawChainId, coin } = request.params;
+    const chainId = routeChainId(rawChainId);
+    return chainId === null
+        ? { ok: false, status: 400, message: 'that is not a chain id' }
+        : { ok: true, chainId, coin };
+};
+/**
+ * The stable, Flaunch-owned public read service for chain + coin → game discovery.
+ *
+ * Creator gates cannot host this route: a page needs the registration to discover which creator
+ * gate to call. Registration writes remain a trusted launch-backend operation against the store.
+ */
+export function createGameRegistry(options) {
+    if (options.writerToken.length < 32)
+        throw new RangeError('registry writer token must be at least 32 characters');
+    const app = Fastify({ bodyLimit: 1_024 });
+    void app.register(cors, { origin: [...options.allowedOrigins], methods: ['GET'] });
+    app.get('/games/:chainId/:coin', async (request, reply) => {
+        const { chainId: rawChainId, coin } = request.params;
+        const chainId = routeChainId(rawChainId);
+        if (chainId === null) {
+            return reply.code(400).send({ message: 'that is not a chain id' });
+        }
+        if (!isAddress(coin, { strict: false })) {
+            return reply.code(400).send({ message: 'that is not a coin address' });
+        }
+        const registration = await resolveGameRegistration(options.pool, chainId, coin);
+        return registration ?? reply.code(404).send({ message: 'that coin has no registered game' });
+    });
+    app.put('/internal/games/:chainId/:coin', async (request, reply) => {
+        const route = internalRoute(request, options.writerToken);
+        if (!route.ok)
+            return reply.code(route.status).send({ message: route.message });
+        const body = (request.body ?? {});
+        try {
+            const registration = await pinGameRegistration(options.pool, {
+                chainId: route.chainId,
+                coin: route.coin,
+                gameId: body.gameId,
+                gateOrigin: body.gateOrigin,
+                deployId: body.deployId,
+            });
+            return reply.send(registration);
+        }
+        catch (error) {
+            if (error instanceof InvalidRegistration)
+                return reply.code(400).send({ message: error.message });
+            if (error instanceof RegistrationConflict) {
+                return reply.code(409).send({ message: 'that coin already has a different game' });
+            }
+            throw error;
+        }
+    });
+    app.delete('/internal/games/:chainId/:coin', async (request, reply) => {
+        const route = internalRoute(request, options.writerToken);
+        if (!route.ok)
+            return reply.code(route.status).send({ message: route.message });
+        try {
+            await disableGameRegistration(options.pool, route.chainId, route.coin);
+            return reply.code(204).send();
+        }
+        catch (error) {
+            if (error instanceof InvalidRegistration)
+                return reply.code(400).send({ message: error.message });
+            throw error;
+        }
+    });
+    return app;
+}
+//# sourceMappingURL=game-registry.js.map

package/dist/game-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"game-registry.js","sourceRoot":"","sources":["../src/game-registry.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,EAAE,EAAwB,MAAM,SAAS,CAAC;AACxD,OAAO,IAAI,MAAM,eAAe,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AAUvB,MAAM,UAAU,GAAG,CAAC,MAA0B,EAAE,KAAa,EAAW,EAAE;IACxE,MAAM,QAAQ,GAAG,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;IACtF,OAAO,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1D,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAa,EAAiB,EAAE;IACpD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CACpB,OAA6E,EAC7E,KAAa,EACb,EAAE;IACF,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,MAAM,EAAE,GAAY,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;IACxG,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAA2C,CAAC;IAC1F,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACzC,OAAO,OAAO,KAAK,IAAI;QACrB,CAAC,CAAC,EAAE,EAAE,EAAE,KAAc,EAAE,MAAM,EAAE,GAAY,EAAE,OAAO,EAAE,wBAAwB,EAAE;QACjF,CAAC,CAAC,EAAE,EAAE,EAAE,IAAa,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3C,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,UAAU,CAAC,sDAAsD,CAAC,CAAC;IAClH,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1C,KAAK,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAEnF,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACxD,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAA2C,CAAC;QAC1F,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAChF,OAAO,YAAY,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,gCAAgC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACjE,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAChF,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAmE,CAAC;QACpG,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,IAAI,EAAE;gBAC3D,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,IAAI,CAAC,MAAgB;gBAC7B,UAAU,EAAE,IAAI,CAAC,UAAoB;gBACrC,QAAQ,EAAE,IAAI,CAAC,QAAkB;aAClC,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,mBAAmB;gBAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAClG,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;gBAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,gCAAgC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACpE,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC;YACH,MAAM,uBAAuB,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACvE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,mBAAmB;gBAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAClG,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,23 @@
+/** Public server-side surface for a production Game Mode gate. */
+export { Claims, DEFAULT_SETTLEMENT_TAIL_MS, Room, Sessions, createGate, } from './server.js';
+export type { Admission, AdmissionRequest, Admit, ConfigForLaunch, GateOptions, VerifiedLaunch, } from './server.js';
+export { createTurnstileAdmit } from './turnstile.js';
+export type { TurnstileAdmitOptions } from './turnstile.js';
+export { Ledger } from './ledger.js';
+export type { BalanceKey, Claim, ClaimResult } from './ledger.js';
+export { CLAIM_AUTHORIZATION_TTL_MS } from './claims.js';
+export { PayloadSigner, encodeHookData } from './chain/signer.js';
+export type { SignedPayload } from './chain/signer.js';
+export { Discovery, poolIdOf, verifyLaunch } from './chain/discover.js';
+export type { ChainReader, Deployment, Launch, LaunchCheck, PoolKey, Refused } from './chain/discover.js';
+export { Settlement } from './settlement.js';
+export { resolveEconomy } from './economy.js';
+export type { Economy, EconomyInput, EconomyResult } from './economy.js';
+export { migrate } from './store.js';
+export { createDemoGate } from './demo.js';
+export type { Demo, DemoOptions } from './demo.js';
+export { InvalidRegistration, RegistrationConflict, checkRegistration, disableGameRegistration, gateOrigin, pinGameRegistration, resolveGameRegistration, securityProfile, } from './registry.js';
+export type { Registration, SecurityProfile } from './registry.js';
+export { createGameRegistry } from './game-registry.js';
+export type { GameRegistryOptions } from './game-registry.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,OAAO,EACL,MAAM,EACN,0BAA0B,EAC1B,IAAI,EACJ,QAAQ,EACR,UAAU,GACX,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,SAAS,EACT,gBAAgB,EAChB,KAAK,EACL,eAAe,EACf,WAAW,EACX,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,YAAY,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAE5D,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAClE,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC1G,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,uBAAuB,EACvB,UAAU,EACV,mBAAmB,EACnB,uBAAuB,EACvB,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/index.js

@@ -0,0 +1,14 @@
+/** Public server-side surface for a production Game Mode gate. */
+export { Claims, DEFAULT_SETTLEMENT_TAIL_MS, Room, Sessions, createGate, } from './server.js';
+export { createTurnstileAdmit } from './turnstile.js';
+export { Ledger } from './ledger.js';
+export { CLAIM_AUTHORIZATION_TTL_MS } from './claims.js';
+export { PayloadSigner, encodeHookData } from './chain/signer.js';
+export { Discovery, poolIdOf, verifyLaunch } from './chain/discover.js';
+export { Settlement } from './settlement.js';
+export { resolveEconomy } from './economy.js';
+export { migrate } from './store.js';
+export { createDemoGate } from './demo.js';
+export { InvalidRegistration, RegistrationConflict, checkRegistration, disableGameRegistration, gateOrigin, pinGameRegistration, resolveGameRegistration, securityProfile, } from './registry.js';
+export { createGameRegistry } from './game-registry.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,OAAO,EACL,MAAM,EACN,0BAA0B,EAC1B,IAAI,EACJ,QAAQ,EACR,UAAU,GACX,MAAM,aAAa,CAAC;AASrB,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAGtD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAElE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,uBAAuB,EACvB,UAAU,EACV,mBAAmB,EACnB,uBAAuB,EACvB,eAAe,GAChB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC"}