@flayerlabs/gamemode-gate 0.1.0

package/dist/ledger.d.ts

@@ -0,0 +1,87 @@
+import type { Pool } from 'pg';
+import type { PlayerId } from '@flayerlabs/gamemode-spec';
+import type { EconomyBalance } from '@flayerlabs/gamemode-spec/live';
+/**
+ * What a player has earned, what they have been authorised to spend, and what is still available.
+ *
+ * Two ceilings bind, and they are different in kind. The first is what the game says they earned.
+ * The second is the pool's on-chain per-wallet cap, which the contract enforces whatever this file
+ * believes — so issuing past it does not overspend, it produces an authorisation that reverts at
+ * the swap and looks to the player like theft. Both are checked here.
+ *
+ * Every claim takes a row lock on the player's balance for the length of the transaction. Two
+ * claims arriving at once therefore serialise, rather than each reading the same balance and each
+ * deciding it fits. That is the whole reason this is in the database and not in a Map.
+ */
+export interface Claim {
+    nonce: bigint;
+    player: PlayerId;
+    requestId: string;
+    requestedWei: bigint;
+    wei: bigint;
+    deadline: bigint;
+    status: 'held' | 'released';
+    signature: `0x${string}` | null;
+    signer: `0x${string}` | null;
+}
+export type ClaimResult = {
+    ok: true;
+    claim: Claim;
+} | {
+    ok: false;
+    refuse: string;
+};
+export interface BalanceKey {
+    roundId: string;
+    player: PlayerId;
+}
+export declare class Ledger {
+    private readonly pool;
+    constructor(pool: Pool);
+    /** Convenience for tests and boot. The schema itself lives in store.ts. */
+    migrate(): Promise<void>;
+    /** Credit points. Called once per award the game emits. */
+    award(roundId: string, player: PlayerId, points: number): Promise<void>;
+    /**
+     * Authorise up to `upToWei`, or refuse.
+     *
+     * Returns the largest amount available rather than refusing an over-ask: a player pressing buy
+     * wants to spend what they have, and telling them "you asked for too much" when they asked for
+     * everything is a worse product than giving them everything.
+     */
+    claim(roundId: string, player: PlayerId, upToWei: bigint, requestId: string, deadline: bigint, at?: number): Promise<ClaimResult>;
+    /** Store exactly one signature and return the stored winner to every concurrent signer. */
+    completeClaim(nonce: bigint, signature: `0x${string}`, signer: `0x${string}`): Promise<Claim | null>;
+    /**
+     * Release only a reservation that provably never became a bearer authorisation.
+     *
+     * A signed payload cannot be revoked. Releasing one because a wallet dialog was declined would
+     * let a new nonce spend the same earned allowance while the first payload remained usable.
+     */
+    releaseUnsigned(nonce: bigint): Promise<void>;
+    /**
+     * Record what the chain says a wallet has spent on this pool.
+     *
+     * Never allowed to go backwards: a read from a lagging node must not undo what a later one saw.
+     */
+    recordChainSpend(roundId: string, player: PlayerId, spentWei: bigint): Promise<boolean>;
+    /** Everyone with a balance in this round, for the reconciler to ask the chain about. */
+    playersIn(roundId: string): Promise<PlayerId[]>;
+    /**
+     * Give back every hold whose deadline has passed.
+     *
+     * An expired authorisation cannot be spent — the contract checks the same deadline — so a hold
+     * still sitting against it is allowance the player earned, cannot use, and would never get back.
+     * A player who opens the buy dialog and wanders off would otherwise lose it for the round.
+     *
+     * Returns how many were returned, so a caller can log something worth reading.
+     */
+    releaseExpired(nowSeconds: number): Promise<BalanceKey[]>;
+    availableWei(roundId: string, player: PlayerId): Promise<bigint>;
+    /** The authoritative balance snapshot, derived from the same state and ceiling as `claim`. */
+    economyBalance(roundId: string, player: PlayerId): Promise<EconomyBalance>;
+    private readState;
+    private findClaimWith;
+    private findClaimByNonce;
+}
+//# sourceMappingURL=ledger.d.ts.map

package/dist/ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.d.ts","sourceRoot":"","sources":["../src/ledger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAGrE;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,KAAK;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,QAAQ,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC;IAC5B,SAAS,EAAE,KAAK,MAAM,EAAE,GAAG,IAAI,CAAC;IAChC,MAAM,EAAE,KAAK,MAAM,EAAE,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,MAAM,WAAW,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAErF,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,QAAQ,CAAC;CAClB;AA8CD,qBAAa,MAAM;IACL,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,IAAI;IAEvC,2EAA2E;IACrE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAI9B,2DAA2D;IACrD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS7E;;;;;;OAMG;IACG,KAAK,CACT,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,QAAQ,EAChB,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,EAAE,GAAE,MAAmB,GACtB,OAAO,CAAC,WAAW,CAAC;IAiDvB,2FAA2F;IACrF,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAgB1G;;;;;OAKG;IACG,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQnD;;;;OAIG;IACG,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAS7F,wFAAwF;IAClF,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAQrD;;;;;;;;OAQG;IACG,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAczD,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC;IAItE,8FAA8F;IACxF,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAC;YAkBlE,SAAS;YA4CT,aAAa;YAeb,gBAAgB;CAS/B"}

package/dist/ledger.js

@@ -0,0 +1,222 @@
+import { inTransaction, migrate, toBigInt } from './store.js';
+/**
+ * The one place the ceiling rule lives.
+ *
+ * Two limits bind and the smaller wins: what the game says was earned, and what the pool lets one
+ * wallet spend. Issuing past the second does not overspend — the chain refuses it — it mints a
+ * signature that reverts at the swap, which to a player is indistinguishable from being robbed.
+ */
+function availableFrom({ points, weiPerPoint, capWei, heldWei, chainSpentWei }) {
+    const earnedWei = points * weiPerPoint;
+    const ceiling = earnedWei < capWei ? earnedWei : capWei;
+    // Spent-on-chain PLUS still-outstanding, never the larger of the two.
+    //
+    // Taking the larger looked safe and was not. Hold 40, spend it, let the hold expire, then hold
+    // 60: the chain has 40 gone and 60 is outstanding, so nothing remains — but `max(60, 40)` says
+    // 40 is available and a further 40 gets authorised. Against a cap of 100 that is 140 of live
+    // authorisations, and the surplus does not overspend, it reverts at the swap, which to a player
+    // is indistinguishable from being robbed.
+    //
+    // Adding them double-counts a hold whose swap has already landed, until that hold expires. That
+    // errs towards authorising too little, which is the direction that costs nobody anything.
+    const available = ceiling - (chainSpentWei + heldWei);
+    return available > 0n ? available : 0n;
+}
+export class Ledger {
+    pool;
+    constructor(pool) {
+        this.pool = pool;
+    }
+    /** Convenience for tests and boot. The schema itself lives in store.ts. */
+    async migrate() {
+        await migrate(this.pool);
+    }
+    /** Credit points. Called once per award the game emits. */
+    async award(roundId, player, points) {
+        if (points <= 0)
+            return;
+        await this.pool.query(`insert into balances (round_id, player, points) values ($1, $2, $3)
+       on conflict (round_id, player) do update set points = balances.points + excluded.points`, [roundId, player, Math.floor(points)]);
+    }
+    /**
+     * Authorise up to `upToWei`, or refuse.
+     *
+     * Returns the largest amount available rather than refusing an over-ask: a player pressing buy
+     * wants to spend what they have, and telling them "you asked for too much" when they asked for
+     * everything is a worse product than giving them everything.
+     */
+    async claim(roundId, player, upToWei, requestId, deadline, at = Date.now()) {
+        return inTransaction(this.pool, async (tx) => {
+            // The lock is the point. Held for the transaction, it serialises every concurrent claim by
+            // this player, so two requests cannot both read the same balance and both decide they fit.
+            //
+            // It only works because a claim needs a balance row to exist: `for update` on a row that is
+            // not there locks NOTHING, and would serialise nothing. The `points <= 0` refusal below is
+            // therefore load-bearing rather than a convenience — it is what guarantees that by the time
+            // any claim proceeds past this point, there is a row holding the lock. Do not reorder it, and
+            // do not make the ledger issue against a player it has never credited.
+            const state = await this.readState(tx, roundId, player, true);
+            if (!state)
+                return { ok: false, refuse: 'claim.no_such_round' };
+            // Inside the same player lock as the balance calculation. Two replicas handling one retried
+            // HTTP request therefore converge on one reservation instead of racing an uncommitted row.
+            const existing = await this.findClaimWith(tx, roundId, player, requestId);
+            if (existing) {
+                if (existing.requestedWei !== upToWei)
+                    return { ok: false, refuse: 'claim.request_mismatch' };
+                return { ok: true, claim: existing };
+            }
+            // Existing requests deliberately win over the clock: they were issued under the earlier
+            // call's window. Only a genuinely new reservation is subject to the current instant.
+            if (at < state.opensAt)
+                return { ok: false, refuse: 'claim.not_open_yet' };
+            if (at >= state.closesAt)
+                return { ok: false, refuse: 'claim.window_closed' };
+            if (state.points <= 0n)
+                return { ok: false, refuse: 'claim.nothing_earned' };
+            const available = availableFrom(state);
+            if (available <= 0n)
+                return { ok: false, refuse: 'claim.nothing_available' };
+            const wei = upToWei < available ? upToWei : available;
+            if (wei <= 0n)
+                return { ok: false, refuse: 'claim.nothing_available' };
+            // Record the hold BEFORE anything signs against it. A signature that exists without a hold is
+            // allowance nobody is tracking; a hold without a signature is merely a refund waiting to
+            // happen. Only one of those two failures costs money.
+            const inserted = await tx.query(`insert into claims (round_id, player, request_id, requested_wei, wei, status, deadline)
+         values ($1, $2, $3, $4, $5, 'held', $6)
+         returning nonce::text, player, request_id, requested_wei::text, wei::text, deadline::text,
+                   status, signature, signer`, [roundId, player, requestId, upToWei.toString(), wei.toString(), deadline.toString()]);
+            const created = inserted.rows[0];
+            if (!created)
+                throw new Error(`${roundId}: claim reservation disappeared before commit`);
+            return { ok: true, claim: claimFrom(created) };
+        });
+    }
+    /** Store exactly one signature and return the stored winner to every concurrent signer. */
+    async completeClaim(nonce, signature, signer) {
+        return inTransaction(this.pool, async (tx) => {
+            const current = await this.findClaimByNonce(tx, nonce, true);
+            if (!current || current.status !== 'held')
+                return current?.signature ? current : null;
+            if (!current.signature) {
+                await tx.query(`update claims set signature = $2, signer = $3 where nonce = $1`, [
+                    nonce.toString(),
+                    signature,
+                    signer,
+                ]);
+            }
+            return this.findClaimByNonce(tx, nonce);
+        });
+    }
+    /**
+     * Release only a reservation that provably never became a bearer authorisation.
+     *
+     * A signed payload cannot be revoked. Releasing one because a wallet dialog was declined would
+     * let a new nonce spend the same earned allowance while the first payload remained usable.
+     */
+    async releaseUnsigned(nonce) {
+        await this.pool.query(`update claims set status = 'released'
+       where nonce = $1 and status = 'held' and signature is null`, [nonce.toString()]);
+    }
+    /**
+     * Record what the chain says a wallet has spent on this pool.
+     *
+     * Never allowed to go backwards: a read from a lagging node must not undo what a later one saw.
+     */
+    async recordChainSpend(roundId, player, spentWei) {
+        const result = await this.pool.query(`update balances set chain_spent_wei = greatest(chain_spent_wei, $3)
+       where round_id = $1 and player = $2 and chain_spent_wei < $3`, [roundId, player, spentWei.toString()]);
+        return result.rowCount === 1;
+    }
+    /** Everyone with a balance in this round, for the reconciler to ask the chain about. */
+    async playersIn(roundId) {
+        const result = await this.pool.query(`select player from balances where round_id = $1`, [roundId]);
+        return result.rows.map((row) => row.player);
+    }
+    /**
+     * Give back every hold whose deadline has passed.
+     *
+     * An expired authorisation cannot be spent — the contract checks the same deadline — so a hold
+     * still sitting against it is allowance the player earned, cannot use, and would never get back.
+     * A player who opens the buy dialog and wanders off would otherwise lose it for the round.
+     *
+     * Returns how many were returned, so a caller can log something worth reading.
+     */
+    async releaseExpired(nowSeconds) {
+        const result = await this.pool.query(`update claims set status = 'released'
+       where status = 'held' and deadline < $1
+       returning round_id, player`, [nowSeconds]);
+        const unique = new Map(result.rows.map((row) => [
+            `${row.round_id}\u0000${row.player}`,
+            { roundId: row.round_id, player: row.player },
+        ]));
+        return [...unique.values()];
+    }
+    async availableWei(roundId, player) {
+        return (await this.economyBalance(roundId, player)).availableWei;
+    }
+    /** The authoritative balance snapshot, derived from the same state and ceiling as `claim`. */
+    async economyBalance(roundId, player) {
+        const state = await this.readState(this.pool, roundId, player);
+        if (!state) {
+            return { weiPerPoint: 0n, earnedWei: 0n, heldWei: 0n, spentWei: 0n, availableWei: 0n, holdExpiresAt: null };
+        }
+        return {
+            weiPerPoint: state.weiPerPoint,
+            earnedWei: state.points * state.weiPerPoint,
+            heldWei: state.heldWei,
+            spentWei: state.chainSpentWei,
+            availableWei: availableFrom(state),
+            // Seconds on the way in, because that is what the contract checks against; milliseconds on
+            // the way out, because that is what a browser counts down with.
+            holdExpiresAt: state.holdExpiresAtSeconds === null ? null : state.holdExpiresAtSeconds * 1000,
+        };
+    }
+    async readState(q, roundId, player, lock = false) {
+        const round = await q.query(`select wei_per_point, wallet_cap_wei, opens_at, closes_at from rounds where id = $1`, [roundId]);
+        const row = round.rows[0];
+        if (!row)
+            return null;
+        const balance = await q.query(`select points, chain_spent_wei from balances where round_id = $1 and player = $2${lock ? ' for update' : ''}`, [roundId, player]);
+        // Sum and earliest deadline together: they come from the same rows, and asking twice would let
+        // a hold expire between the two reads and report a total that no deadline explains.
+        const held = await q.query(`select coalesce(sum(wei), 0)::text as total, min(deadline)::text as earliest from claims
+       where round_id = $1 and player = $2 and status = 'held'`, [roundId, player]);
+        const earliest = held.rows[0]?.earliest;
+        return {
+            points: toBigInt(balance.rows[0]?.points),
+            chainSpentWei: toBigInt(balance.rows[0]?.chain_spent_wei),
+            weiPerPoint: toBigInt(row.wei_per_point),
+            capWei: toBigInt(row.wallet_cap_wei),
+            opensAt: Number(row.opens_at),
+            closesAt: Number(row.closes_at),
+            heldWei: toBigInt(held.rows[0]?.total),
+            holdExpiresAtSeconds: earliest == null ? null : Number(earliest),
+        };
+    }
+    async findClaimWith(q, roundId, player, requestId) {
+        const result = await q.query(`select nonce::text, player, request_id, requested_wei::text, wei::text, deadline::text,
+              status, signature, signer
+       from claims where round_id = $1 and player = $2 and request_id = $3`, [roundId, player, requestId]);
+        return result.rows[0] ? claimFrom(result.rows[0]) : null;
+    }
+    async findClaimByNonce(q, nonce, lock = false) {
+        const result = await q.query(`select nonce::text, player, request_id, requested_wei::text, wei::text, deadline::text,
+              status, signature, signer
+       from claims where nonce = $1${lock ? ' for update' : ''}`, [nonce.toString()]);
+        return result.rows[0] ? claimFrom(result.rows[0]) : null;
+    }
+}
+const claimFrom = (row) => ({
+    nonce: BigInt(row.nonce),
+    player: row.player,
+    requestId: row.request_id,
+    requestedWei: BigInt(row.requested_wei),
+    wei: BigInt(row.wei),
+    deadline: BigInt(row.deadline),
+    status: row.status,
+    signature: row.signature,
+    signer: row.signer,
+});
+//# sourceMappingURL=ledger.js.map

package/dist/ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.js","sourceRoot":"","sources":["../src/ledger.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAoD9D;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAe;IACzF,MAAM,SAAS,GAAG,MAAM,GAAG,WAAW,CAAC;IACvC,MAAM,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IAExD,sEAAsE;IACtE,EAAE;IACF,+FAA+F;IAC/F,+FAA+F;IAC/F,6FAA6F;IAC7F,gGAAgG;IAChG,0CAA0C;IAC1C,EAAE;IACF,gGAAgG;IAChG,0FAA0F;IAC1F,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,aAAa,GAAG,OAAO,CAAC,CAAC;IACtD,OAAO,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;AACzC,CAAC;AAGD,MAAM,OAAO,MAAM;IACY;IAA7B,YAA6B,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAE3C,2EAA2E;IAC3E,KAAK,CAAC,OAAO;QACX,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,KAAK,CAAC,OAAe,EAAE,MAAgB,EAAE,MAAc;QAC3D,IAAI,MAAM,IAAI,CAAC;YAAE,OAAO;QACxB,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB;+FACyF,EACzF,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CACtC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,KAAK,CACT,OAAe,EACf,MAAgB,EAChB,OAAe,EACf,SAAiB,EACjB,QAAgB,EAChB,KAAa,IAAI,CAAC,GAAG,EAAE;QAEvB,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAC3C,2FAA2F;YAC3F,2FAA2F;YAC3F,EAAE;YACF,4FAA4F;YAC5F,2FAA2F;YAC3F,4FAA4F;YAC5F,8FAA8F;YAC9F,uEAAuE;YACvE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAC9D,IAAI,CAAC,KAAK;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;YAEhE,4FAA4F;YAC5F,2FAA2F;YAC3F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAC1E,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,QAAQ,CAAC,YAAY,KAAK,OAAO;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;gBAC9F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;YACvC,CAAC;YAED,wFAAwF;YACxF,qFAAqF;YACrF,IAAI,EAAE,GAAG,KAAK,CAAC,OAAO;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;YAC3E,IAAI,EAAE,IAAI,KAAK,CAAC,QAAQ;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;YAC9E,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;YAE7E,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,SAAS,IAAI,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;YAE7E,MAAM,GAAG,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,IAAI,GAAG,IAAI,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;YAEvE,8FAA8F;YAC9F,yFAAyF;YACzF,sDAAsD;YACtD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,KAAK,CAC7B;;;6CAGqC,EACrC,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CACtF,CAAC;YACF,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,+CAA+C,CAAC,CAAC;YACzF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,2FAA2F;IAC3F,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,SAAwB,EAAE,MAAqB;QAChF,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAC3C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAC7D,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;YAEtF,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBACvB,MAAM,EAAE,CAAC,KAAK,CAAC,gEAAgE,EAAE;oBAC/E,KAAK,CAAC,QAAQ,EAAE;oBAChB,SAAS;oBACT,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;YACD,OAAO,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,eAAe,CAAC,KAAa;QACjC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB;kEAC4D,EAC5D,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CACnB,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,gBAAgB,CAAC,OAAe,EAAE,MAAgB,EAAE,QAAgB;QACxE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAClC;oEAC8D,EAC9D,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CACvC,CAAC;QACF,OAAO,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,wFAAwF;IACxF,KAAK,CAAC,SAAS,CAAC,OAAe;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAClC,iDAAiD,EACjD,CAAC,OAAO,CAAC,CACV,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,cAAc,CAAC,UAAkB;QACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAClC;;kCAE4B,EAC5B,CAAC,UAAU,CAAC,CACb,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;YAC9C,GAAG,GAAG,CAAC,QAAQ,SAAS,GAAG,CAAC,MAAM,EAAE;YACpC,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE;SAC9C,CAAC,CAAC,CAAC;QACJ,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,MAAgB;QAClD,OAAO,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;IACnE,CAAC;IAED,8FAA8F;IAC9F,KAAK,CAAC,cAAc,CAAC,OAAe,EAAE,MAAgB;QACpD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QAC9G,CAAC;QAED,OAAO;YACL,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,WAAW;YAC3C,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,aAAa;YAC7B,YAAY,EAAE,aAAa,CAAC,KAAK,CAAC;YAClC,2FAA2F;YAC3F,gEAAgE;YAChE,aAAa,EAAE,KAAK,CAAC,oBAAoB,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,GAAG,IAAI;SAC9F,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,SAAS,CACrB,CAAsB,EACtB,OAAe,EACf,MAAgB,EAChB,IAAI,GAAG,KAAK;QAEZ,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,KAAK,CAMzB,qFAAqF,EACrF,CAAC,OAAO,CAAC,CACV,CAAC;QACF,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAEtB,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,KAAK,CAC3B,mFAAmF,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,EAC9G,CAAC,OAAO,EAAE,MAAM,CAAC,CAClB,CAAC;QACF,+FAA+F;QAC/F,oFAAoF;QACpF,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,KAAK,CACxB;+DACyD,EACzD,CAAC,OAAO,EAAE,MAAM,CAAC,CAClB,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;QAExC,OAAO;YACL,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;YACzC,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC;YACzD,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC;YACxC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC;YACpC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC7B,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;YAC/B,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;YACtC,oBAAoB,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;SACjE,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,CAAsB,EACtB,OAAe,EACf,MAAgB,EAChB,SAAiB;QAEjB,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,KAAK,CAC1B;;2EAEqE,EACrE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAC7B,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,CAAsB,EAAE,KAAa,EAAE,IAAI,GAAG,KAAK;QAChF,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,KAAK,CAC1B;;qCAE+B,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,EAC1D,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CACnB,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,CAAC;CACF;AAcD,MAAM,SAAS,GAAG,CAAC,GAAa,EAAS,EAAE,CAAC,CAAC;IAC3C,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;IACxB,MAAM,EAAE,GAAG,CAAC,MAAM;IAClB,SAAS,EAAE,GAAG,CAAC,UAAU;IACzB,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC;IACvC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC9B,MAAM,EAAE,GAAG,CAAC,MAAM;IAClB,SAAS,EAAE,GAAG,CAAC,SAAS;IACxB,MAAM,EAAE,GAAG,CAAC,MAAM;CACnB,CAAC,CAAC"}

package/dist/registry.d.ts

@@ -0,0 +1,55 @@
+import type { Pool } from 'pg';
+import type { GameRegistration } from '@flayerlabs/gamemode-spec/embed';
+/**
+ * Which game a coin plays, and everything the page embedding it needs to know.
+ *
+ * This is our domain model, not the hosting service's. The host stores bytes and serves them under
+ * a policy; deciding that this coin plays this game against this backend is a Flaunch concern.
+ */
+export type Registration = GameRegistration;
+/**
+ * What we hand the hosting service at upload, for it to compile into headers.
+ *
+ * Semantic fields, never CSP text: a policy assembled by string concatenation somewhere else is a
+ * policy someone can inject into.
+ */
+export interface SecurityProfile {
+    kind: 'game';
+    connect: {
+        https: string;
+        wss: string;
+    };
+}
+export declare class InvalidRegistration extends Error {
+    constructor(message: string);
+}
+/** A launch is already pinned to different game bytes or a different gate. */
+export declare class RegistrationConflict extends Error {
+    constructor();
+}
+/**
+ * Check a gate origin and return exactly an origin.
+ *
+ * This value becomes a Content Security Policy `connect-src` for an untrusted game, so the rule is
+ * that the input must ALREADY be an origin. Anything the URL parser would silently rewrite into
+ * one is refused instead, because a validator that quietly fixes its input is a validator that
+ * quietly widens policy. That single equality check covers dot-segments (`/a/..`), empty query and
+ * fragment markers, empty credentials (`https://@host`), and surrounding whitespace — all of which
+ * parse cleanly and none of which anyone meant to type.
+ *
+ * HTTPS only, with no localhost exception, and neither development path needs one: the offline
+ * mock talks to nothing, and a local gate is reached directly by a dev server rather than through
+ * the hosting service.
+ */
+export declare function gateOrigin(value: unknown): string;
+/** The profile for a registration. The websocket address is derived, never supplied separately. */
+export declare function securityProfile(registration: Pick<Registration, 'gateOrigin'>): SecurityProfile;
+export declare function checkRegistration(entry: Registration): Registration;
+/**
+ * Pin a coin to a game. Repeating the same registration is safe; changing it is not.
+ */
+export declare function pinGameRegistration(pool: Pool, entry: Registration): Promise<Registration>;
+export declare function resolveGameRegistration(pool: Pool, requestedChainId: number, coin: string): Promise<Registration | null>;
+/** Stop serving a game for a coin without freeing its immutable pin. */
+export declare function disableGameRegistration(pool: Pool, requestedChainId: number, coin: string): Promise<void>;
+//# sourceMappingURL=registry.d.ts.map

package/dist/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAExE;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,gBAAgB,CAAC;AAE5C;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CACzC;AAED,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,OAAO,EAAE,MAAM;CAI5B;AAED,8EAA8E;AAC9E,qBAAa,oBAAqB,SAAQ,KAAK;;CAK9C;AAmBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CA4BjD;AAED,mGAAmG;AACnG,wBAAgB,eAAe,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,GAAG,eAAe,CAU/F;AAyBD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,YAAY,GAAG,YAAY,CAWnE;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAehG;AAED,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,IAAI,EACV,gBAAgB,EAAE,MAAM,EACxB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CA0B9B;AAED,wEAAwE;AACxE,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAW/G"}

package/dist/registry.js

@@ -0,0 +1,164 @@
+export class InvalidRegistration extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'InvalidRegistration';
+    }
+}
+/** A launch is already pinned to different game bytes or a different gate. */
+export class RegistrationConflict extends Error {
+    constructor() {
+        super('coin already has a different game registration');
+        this.name = 'RegistrationConflict';
+    }
+}
+/**
+ * A real, public hostname: at least two labels, ending in an alphabetic suffix.
+ *
+ * Written to exclude rather than to match. It refuses every IP literal — dotted (`127.0.0.1`),
+ * decimal (`2130706433`), hex (`0x7f000001`) and IPv6 (`[::1]`) — along with single-label names
+ * like `localhost`, and hostnames with a trailing dot, which are a distinct origin from the same
+ * name without one. A gate is a named host on the public internet; anything else is either a
+ * mistake or an attempt to point a game at something on the machine serving it.
+ */
+const PUBLIC_HOSTNAME = /^(?=.{1,253}$)([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z]{2,63}$/;
+const ADDRESS = /^0x[0-9a-f]{40}$/i;
+const DEPLOY_ID = /^[0-9a-f]{32}$/;
+/** Long enough for anything real, short enough that nothing unbounded reaches the database. */
+const MAX_ID = 128;
+/**
+ * Check a gate origin and return exactly an origin.
+ *
+ * This value becomes a Content Security Policy `connect-src` for an untrusted game, so the rule is
+ * that the input must ALREADY be an origin. Anything the URL parser would silently rewrite into
+ * one is refused instead, because a validator that quietly fixes its input is a validator that
+ * quietly widens policy. That single equality check covers dot-segments (`/a/..`), empty query and
+ * fragment markers, empty credentials (`https://@host`), and surrounding whitespace — all of which
+ * parse cleanly and none of which anyone meant to type.
+ *
+ * HTTPS only, with no localhost exception, and neither development path needs one: the offline
+ * mock talks to nothing, and a local gate is reached directly by a dev server rather than through
+ * the hosting service.
+ */
+export function gateOrigin(value) {
+    if (typeof value !== 'string')
+        throw new InvalidRegistration('gate address must be text');
+    if (value.length > 253)
+        throw new InvalidRegistration('gate address is too long');
+    // Punycode is what `new URL` produces for non-ASCII, so `flаunch.gg` with a Cyrillic а becomes a
+    // different domain that reads identically in a console. Refuse it at the door rather than store
+    // something nobody can eyeball.
+    if (/[^\x20-\x7e]/.test(value))
+        throw new InvalidRegistration('gate address must be plain ASCII');
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new InvalidRegistration('gate address is not a URL');
+    }
+    if (url.protocol !== 'https:')
+        throw new InvalidRegistration('gate address must start with https://');
+    if (!PUBLIC_HOSTNAME.test(url.hostname)) {
+        throw new InvalidRegistration('gate address must be a public domain name, not an IP address');
+    }
+    // Two differences from the canonical origin are forgiven, because both are things a person
+    // reasonably types and neither changes what is named: a trailing slash, and an explicit :443,
+    // which is the default port `new URL` drops for us.
+    if (value.replace(/\/$/, '').replace(/:443$/, '') !== url.origin) {
+        throw new InvalidRegistration('gate address must be just the address, with nothing after it');
+    }
+    return url.origin;
+}
+/** The profile for a registration. The websocket address is derived, never supplied separately. */
+export function securityProfile(registration) {
+    // Revalidated here on purpose: this is the value that leaves for another system, and checking it
+    // at the boundary costs nothing.
+    const origin = gateOrigin(registration.gateOrigin);
+    return {
+        kind: 'game',
+        // Same host, same port, different scheme. Deriving it means the two can never name different
+        // servers, which a second hand-entered field eventually would.
+        connect: { https: origin, wss: `wss://${new URL(origin).host}` },
+    };
+}
+function id(value, what) {
+    if (typeof value !== 'string')
+        throw new InvalidRegistration(`${what} must be text`);
+    const trimmed = value.trim();
+    if (!trimmed)
+        throw new InvalidRegistration(`${what} is required`);
+    if (trimmed.length > MAX_ID)
+        throw new InvalidRegistration(`${what} is too long`);
+    return trimmed;
+}
+function deployId(value) {
+    const checked = id(value, 'deploy');
+    if (value !== checked || !DEPLOY_ID.test(checked)) {
+        throw new InvalidRegistration('deploy must be a lowercase content hash');
+    }
+    return checked;
+}
+function chainId(value) {
+    if (typeof value !== 'number' || !Number.isSafeInteger(value) || value <= 0) {
+        throw new InvalidRegistration('chain id must be a positive safe integer');
+    }
+    return value;
+}
+export function checkRegistration(entry) {
+    if (typeof entry?.coin !== 'string' || !ADDRESS.test(entry.coin)) {
+        throw new InvalidRegistration('coin must be a wallet address');
+    }
+    return {
+        chainId: chainId(entry.chainId),
+        coin: entry.coin.toLowerCase(),
+        gameId: id(entry.gameId, 'game'),
+        deployId: deployId(entry.deployId),
+        gateOrigin: gateOrigin(entry.gateOrigin),
+    };
+}
+/**
+ * Pin a coin to a game. Repeating the same registration is safe; changing it is not.
+ */
+export async function pinGameRegistration(pool, entry) {
+    const checked = checkRegistration(entry);
+    const result = await pool.query(`insert into registrations (chain_id, coin, game_id, gate_origin, deploy_id) values ($1, $2, $3, $4, $5)
+     on conflict (chain_id, coin) do update set
+       updated_at = registrations.updated_at
+     where registrations.disabled_at is null
+       and registrations.game_id = excluded.game_id
+       and registrations.gate_origin = excluded.gate_origin
+       and registrations.deploy_id = excluded.deploy_id
+     returning coin`, [checked.chainId, checked.coin, checked.gameId, checked.gateOrigin, checked.deployId]);
+    if (result.rows.length === 0)
+        throw new RegistrationConflict();
+    return checked;
+}
+export async function resolveGameRegistration(pool, requestedChainId, coin) {
+    const checkedChainId = chainId(requestedChainId);
+    if (typeof coin !== 'string' || !ADDRESS.test(coin)) {
+        throw new InvalidRegistration('coin must be a wallet address');
+    }
+    const result = await pool.query(`select chain_id::text, coin, game_id, gate_origin, deploy_id
+     from registrations where chain_id = $1 and coin = $2 and disabled_at is null`, [checkedChainId, coin.toLowerCase()]);
+    const row = result.rows[0];
+    return row
+        ? checkRegistration({
+            chainId: Number(row.chain_id),
+            coin: row.coin,
+            gameId: row.game_id,
+            gateOrigin: row.gate_origin,
+            deployId: row.deploy_id,
+        })
+        : null;
+}
+/** Stop serving a game for a coin without freeing its immutable pin. */
+export async function disableGameRegistration(pool, requestedChainId, coin) {
+    const checkedChainId = chainId(requestedChainId);
+    if (typeof coin !== 'string' || !ADDRESS.test(coin)) {
+        throw new InvalidRegistration('coin must be a wallet address');
+    }
+    await pool.query(`update registrations
+     set disabled_at = coalesce(disabled_at, now()), updated_at = now()
+     where chain_id = $1 and coin = $2`, [checkedChainId, coin.toLowerCase()]);
+}
+//# sourceMappingURL=registry.js.map

package/dist/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAsBA,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,8EAA8E;AAC9E,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C;QACE,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,eAAe,GAAG,mEAAmE,CAAC;AAE5F,MAAM,OAAO,GAAG,mBAAmB,CAAC;AACpC,MAAM,SAAS,GAAG,gBAAgB,CAAC;AAEnC,+FAA+F;AAC/F,MAAM,MAAM,GAAG,GAAG,CAAC;AAEnB;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,CAAC,CAAC;IAC1F,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,mBAAmB,CAAC,0BAA0B,CAAC,CAAC;IAElF,iGAAiG;IACjG,gGAAgG;IAChG,gCAAgC;IAChC,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,kCAAkC,CAAC,CAAC;IAElG,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,mBAAmB,CAAC,uCAAuC,CAAC,CAAC;IACtG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,mBAAmB,CAAC,8DAA8D,CAAC,CAAC;IAChG,CAAC;IACD,2FAA2F;IAC3F,8FAA8F;IAC9F,oDAAoD;IACpD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;QACjE,MAAM,IAAI,mBAAmB,CAAC,8DAA8D,CAAC,CAAC;IAChG,CAAC;IAED,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,eAAe,CAAC,YAA8C;IAC5E,iGAAiG;IACjG,iCAAiC;IACjC,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IACnD,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,6FAA6F;QAC7F,+DAA+D;QAC/D,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;KACjE,CAAC;AACJ,CAAC;AAED,SAAS,EAAE,CAAC,KAAc,EAAE,IAAY;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,mBAAmB,CAAC,GAAG,IAAI,eAAe,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,mBAAmB,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IACnE,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM;QAAE,MAAM,IAAI,mBAAmB,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IAClF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,mBAAmB,CAAC,yCAAyC,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,mBAAmB,CAAC,0CAA0C,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAmB;IACnD,IAAI,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,mBAAmB,CAAC,+BAA+B,CAAC,CAAC;IACjE,CAAC;IACD,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC/B,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE;QAC9B,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;QAChC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;QAClC,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KACzC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAU,EAAE,KAAmB;IACvE,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B;;;;;;;oBAOgB,EAChB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CACtF,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,oBAAoB,EAAE,CAAC;IAC/D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAU,EACV,gBAAwB,EACxB,IAAY;IAEZ,MAAM,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACjD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,mBAAmB,CAAC,+BAA+B,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAO7B;kFAC8E,EAC9E,CAAC,cAAc,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CACrC,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO,GAAG;QACR,CAAC,CAAC,iBAAiB,CAAC;YAChB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC7B,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,OAAO;YACnB,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,QAAQ,EAAE,GAAG,CAAC,SAAS;SACxB,CAAC;QACJ,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAAU,EAAE,gBAAwB,EAAE,IAAY;IAC9F,MAAM,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACjD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,mBAAmB,CAAC,+BAA+B,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,CAAC,KAAK,CACd;;uCAEmC,EACnC,CAAC,cAAc,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CACrC,CAAC;AACJ,CAAC"}