Web Entry

Zhmyak Start

Public auth and bootstrap surface for sign in, sign up, referral capture, platform selection, and mobile handoff.

Thin orchestration shell

Zhmyak Start

Prepare single-use bootstrap exchange back to the client.

`/handoff` now supports both native and web continuation: it can prepare a client return URI with `bootstrap_token` or exchange that token directly when browser continuation is intended.

Continue

Finish sign-in and return to the selected client

This step completes the flow. Native targets receive a one-time token through the return URI. Browser continuation can exchange the token here and keep going in the web shell.

No handoff token is available yet.

Start from the account entry flow first. `/handoff` expects to receive a one-time token after `/player-accounts/entry`.

Inbound contract

Flow context

Target client
web
Provider
Not provided
Return URI
Not provided
Referral code
Not provided
Provider payload
No extra provider payload