Command Index

Build the battle brain first.

The shell is in place. The next real proof is deterministic combat, canonical card data, and an NPC slice that resolves the same way every time.

Current focus

Lock movement, range, line-of-sight, and turn order in one spec.
Define replay-safe RNG before minigames and wager resolution.
Normalize the card and ability schema before inventory flows.

Account sync

Checking session

Checking whether this browser has an account-backed session and linked custody data.

Command Index

Build the battle brain first.

The shell is in place. The next real proof is deterministic combat, canonical card data, and an NPC slice that resolves the same way every time.

Current focus

Lock movement, range, line-of-sight, and turn order in one spec.
Define replay-safe RNG before minigames and wager resolution.
Normalize the card and ability schema before inventory flows.

Account sync

Checking session

Checking whether this browser has an account-backed session and linked custody data.

Back to play

Account access

Enter the keep. Keep custody separate.

Google, email OTP, and MetaMask can all open a Brimstone account session. Wallet custody still belongs in profile, where verified on-chain addresses are linked to the player record that owns decks, progression, and withdrawals.

Session policy

Remembered for 30 days

The same session policy is applied to Google redirects, email OTP, and MetaMask sign-in so the account lifetime stays predictable.

Custody network

Base

Linked wallets are verified on Base inside profile settings before deposits and withdrawals can be attributed to a Brimstone account.

Google, email OTP, or MetaMask.

Use the account entrance that fits the device in front of you. On devices with passkeys or biometrics, profile security can be hardened after sign-in. Email OTP remains the fallback path.

Remember this device for 30 days. Leave it off to keep the session limited to this browser window.

Or use OTP

Wallet-first path

MetaMask sign-in creates or resumes the Brimstone account tied to that wallet. If you start with Google or email instead, link your custody wallet later from profile so deck ownership and withdrawals stay attached to one player record.

Google uses `/auth/callback`. Email OTP verifies in-place on this screen. Wallet custody stays on the profile surface, where verified MetaMask addresses are linked to the active Brimstone account on Base.

Why auth now

The browser sandbox can already submit commander actions, but the real product needs one player account boundary across decks, rewards, linked wallets, and future trade permissions.

Custody rule

Linked wallets prove the source account for deposits and the destination account for withdrawals. Once assets enter the shared Brimstone game wallet, internal ownership moves independently of the chain wallet that brought them in.

What ships now

Google OAuth, email OTP, linked-wallet verification, and wallet-bound deposit attribution groundwork are in scope now, with profile security expanding to passkeys or biometrics on supported devices. Full custody settlement, trading, and market pricing stay on the next delivery step.