@domino-sdk/relay 0.2.0 → 0.4.0

package/dist/index.js

@@ -1,7 +1,6 @@
 import {
   QuestUpdatedError,
   RelayError,
-  authScopeSchema,
   catalogDeploymentPreviewSchema,
   catalogDeploymentSchema,
   collectionBeginSchema,
@@ -14,10 +13,12 @@ import {
   createRelayClient,
   deploymentPreviewSchema,
   deploymentResultSchema,
-  exchangeResultSchema,
-  exchangeSchema,
+  identityIntegrationInputSchema,
+  identityIntegrationSchema,
+  identityIntegrationSecretSchema,
   interactionSchema,
-  principalSchema,
+  participantExchangeSchema,
+  projectCatalogArtifactSchema,
   projectDeploymentSchema,
   publishDeploymentSchema,
   publishQuestDraftSchema,
@@ -35,28 +36,68 @@ import {
   questViewSchema,
   reconcileQuestDraft,
   saveQuestDraftSchema,
-  sessionSchema,
   solanaAddressSchema,
   solanaBalanceSchema,
   walletChallengeInputSchema,
   walletChallengeSchema,
   walletConnectionSchema,
   walletProofSchema
-} from "./chunk-NC3UAP6T.js";
+} from "./chunk-KQVL6MOH.js";
+import {
+  defineLeaderboard,
+  defineReferral,
+  leaderboardArtifactSchema,
+  leaderboardDefinitionSchema,
+  leaderboardExclusionSchema,
+  leaderboardGroupSchema,
+  leaderboardPageSchema,
+  leaderboardPreviewSchema,
+  leaderboardQuerySchema,
+  leaderboardRowSchema,
+  leaderboardWindowSchema,
+  pointsAccountSchema,
+  pointsEntrySchema,
+  pointsMutationSchema,
+  pointsResultSchema,
+  publishedLeaderboardSchema,
+  publishedReferralSchema,
+  referralAcceptSchema,
+  referralAccountSchema,
+  referralArtifactSchema,
+  referralControlSchema,
+  referralDefinitionSchema,
+  referralHistorySchema,
+  referralManagementSchema,
+  referralRelationshipSchema,
+  referralSummarySchema
+} from "./chunk-TXL43HL3.js";
+import {
+  authScopeSchema,
+  exchangeResultSchema,
+  exchangeSchema,
+  principalSchema,
+  sessionSchema
+} from "./chunk-QWRSUSNB.js";
 import {
+  accountConnectionSchema,
   artifactSchema,
   attemptSchema,
+  authProviderSchema,
   batchReleaseSchema,
   beginHandoverSchema,
   completionRecordSchema,
   configurePickupSchema,
   confirmHandoverSchema,
   decisionSchema,
+  discordMemberInputSchema,
+  discordMemberSchema,
+  discordServerSchema,
   entitlementSchema,
   errorSchema,
   eventSchema,
   evidenceSchema,
   identifier,
+  integrationProviderSchema,
   mediaUrlSchema,
   memberListSchema,
   memberPageSchema,
@@ -70,6 +111,7 @@ import {
   pickupSelectionSchema,
   pointsRewardSchema,
   prerequisiteSchema,
+  projectIntegrationSchema,
   publishedReleaseSchema,
   questAvailabilitySchema,
   questDescriptionSchema,
@@ -102,12 +144,14 @@ import {
   tierRewardSchema,
   tieredRewardDefinitionSchema,
   triggerSchema
-} from "./chunk-C2KOMNLG.js";
+} from "./chunk-3IQ4KUKF.js";
 export {
   QuestUpdatedError,
   RelayError,
+  accountConnectionSchema,
   artifactSchema,
   attemptSchema,
+  authProviderSchema,
   authScopeSchema,
   batchReleaseSchema,
   beginHandoverSchema,
@@ -125,8 +169,13 @@ export {
   confirmHandoverSchema,
   createRelayClient,
   decisionSchema,
+  defineLeaderboard,
+  defineReferral,
   deploymentPreviewSchema,
   deploymentResultSchema,
+  discordMemberInputSchema,
+  discordMemberSchema,
+  discordServerSchema,
   entitlementSchema,
   errorSchema,
   eventSchema,
@@ -134,24 +183,46 @@ export {
   exchangeResultSchema,
   exchangeSchema,
   identifier,
+  identityIntegrationInputSchema,
+  identityIntegrationSchema,
+  identityIntegrationSecretSchema,
+  integrationProviderSchema,
   interactionSchema,
+  leaderboardArtifactSchema,
+  leaderboardDefinitionSchema,
+  leaderboardExclusionSchema,
+  leaderboardGroupSchema,
+  leaderboardPageSchema,
+  leaderboardPreviewSchema,
+  leaderboardQuerySchema,
+  leaderboardRowSchema,
+  leaderboardWindowSchema,
   mediaUrlSchema,
   memberListSchema,
   memberPageSchema,
   memberProgressSchema,
   parseSettings,
+  participantExchangeSchema,
   photoResultSchema,
   pickupAllocationSchema,
   pickupAvailabilitySchema,
   pickupCatalogSchema,
   pickupPolicySchema,
   pickupSelectionSchema,
+  pointsAccountSchema,
+  pointsEntrySchema,
+  pointsMutationSchema,
+  pointsResultSchema,
   pointsRewardSchema,
   prerequisiteSchema,
   principalSchema,
+  projectCatalogArtifactSchema,
   projectDeploymentSchema,
+  projectIntegrationSchema,
   publishDeploymentSchema,
   publishQuestDraftSchema,
+  publishedLeaderboardSchema,
+  publishedReferralSchema,
   publishedReleaseSchema,
   questActions,
   questAvailabilitySchema,
@@ -176,6 +247,15 @@ export {
   quizQuestionSchema,
   quizQuestionsSchema,
   reconcileQuestDraft,
+  referralAcceptSchema,
+  referralAccountSchema,
+  referralArtifactSchema,
+  referralControlSchema,
+  referralDefinitionSchema,
+  referralHistorySchema,
+  referralManagementSchema,
+  referralRelationshipSchema,
+  referralSummarySchema,
   releaseSchema,
   reservationSchema,
   reviewItemSchema,

package/dist/portal-proxy.d.ts

@@ -1,7 +1,22 @@
-/** Server-only proxy: browser cookies stay on the participant origin. */
+/**
+ * Server-only proxy: browser cookies stay on the participant origin.
+ * Point upstream at a participant deployment with trusted server scope configured.
+ * Browser Authorization and organization/project/environment selectors are discarded.
+ * This does not provide backend identity exchange or configure upstream scope.
+ */
 declare function proxyParticipant(request: Request, upstream: {
     baseUrl: string;
     fetch: typeof fetch;
 }): Promise<Response>;
+/** Use only in an app server route. authenticate must verify the app's own session. */
+declare function createParticipantBackend(options: {
+    baseUrl: string;
+    integrationKey: string;
+    origin: string;
+    authenticate: (request: Request) => Promise<{
+        subject: string;
+    } | null>;
+    fetch?: typeof fetch;
+}): (request: Request) => Promise<Response>;
 
-export { proxyParticipant };
+export { createParticipantBackend, proxyParticipant };

package/dist/portal-proxy.js

@@ -1,12 +1,17 @@
+import {
+  exchangeResultSchema
+} from "./chunk-QWRSUSNB.js";
+import "./chunk-3IQ4KUKF.js";
+
 // src/portal-proxy.ts
 async function proxyParticipant(request, upstream) {
   const incoming = new URL(request.url);
   const path = incoming.pathname.slice("/relay".length);
-  const allowed = incoming.pathname.startsWith("/relay/") && (/^\/v1\/auth\/(providers|connections|start|authorize|complete|session|logout|email\/start|email\/verify|callback\/(google|apple|x|discord))$/.test(
+  const allowed = incoming.pathname.startsWith("/relay/") && (/^\/v1\/auth\/(providers|connections|accounts(?:\/disconnect)?|start|authorize|complete|session|logout|email\/start|email\/verify|callback\/[a-z][a-z0-9-]*)$/.test(
     path
   ) || /^\/v1\/me\/(progress|experience|attempts|evidence|pass|collection-pass|wallet(?:\/challenge|\/verify)?)$/.test(
     path
-  ) || /^\/v1\/attempts\/[\w-]+(?:\/retry)?$/.test(path));
+  ) || /^\/v1\/attempts\/[\w-]+(?:\/retry)?$/.test(path) || /^\/v1\/referrals(?:\/(me|history))?$/.test(path) && request.method === "GET" || path === "/v1/referrals/accept" && request.method === "POST" || request.method === "GET" && /^\/v1\/leaderboards(?:\/[\w-]+)?$/.test(path));
   if (!allowed || !["GET", "POST"].includes(request.method))
     return Response.json({ error: "Route not found" }, { status: 404 });
   const target = new URL(upstream.baseUrl);
@@ -43,6 +48,76 @@ async function proxyParticipant(request, upstream) {
     headers: resultHeaders
   });
 }
+function createParticipantBackend(options) {
+  const origin = new URL(options.origin);
+  const base = new URL(options.baseUrl);
+  if (origin.protocol !== "https:" || origin.origin !== options.origin || base.protocol !== "https:" || base.origin !== options.baseUrl)
+    throw new Error(
+      "Configure exact HTTPS application and participant API origins"
+    );
+  if (!options.integrationKey.startsWith("di_"))
+    throw new Error(
+      "Use an identity integration server key from Console Settings"
+    );
+  const send = options.fetch ?? fetch;
+  const cookie = (token) => `domino_app_session=${token}; Path=/relay; HttpOnly; Secure; SameSite=Lax; Max-Age=${token ? 28800 : 0}`;
+  return async (request) => {
+    const url = new URL(request.url);
+    const reject = (error, status) => Response.json(
+      { error },
+      { status, headers: { "Cache-Control": "no-store" } }
+    );
+    if (url.origin !== options.origin)
+      return reject("Unexpected application origin", 403);
+    if (request.method !== "GET" && (request.headers.get("Origin") !== options.origin || request.headers.get("X-Relay-CSRF") !== "1"))
+      return reject("Untrusted browser request", 403);
+    const identity = await options.authenticate(request);
+    if (!identity)
+      return Response.json(
+        url.pathname === "/relay/v1/auth/session" ? null : { error: "Sign in to the application" },
+        {
+          status: url.pathname === "/relay/v1/auth/session" ? 200 : 401,
+          headers: { "Set-Cookie": cookie(""), "Cache-Control": "no-store" }
+        }
+      );
+    const previousToken = request.headers.get("Cookie")?.split(";").map((value) => value.trim()).find((value) => value.startsWith("domino_app_session="))?.slice("domino_app_session=".length);
+    const exchanged = await send(options.baseUrl + "/v1/auth/exchange", {
+      method: "POST",
+      redirect: "manual",
+      headers: {
+        Authorization: "Bearer " + options.integrationKey,
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({ subject: identity.subject, previousToken })
+    });
+    if (!exchanged.ok)
+      return reject(
+        "Domino identity exchange failed. Check the server integration key and its expiry in Console Settings.",
+        exchanged.status
+      );
+    const { token } = exchangeResultSchema.parse(await exchanged.json());
+    const response = await proxyParticipant(request, {
+      baseUrl: options.baseUrl,
+      fetch: async (target, init) => {
+        const headers2 = new Headers(init?.headers);
+        headers2.delete("Cookie");
+        const returnBinding = request.headers.get("Cookie")?.split(";").map((value) => value.trim()).find((value) => value.startsWith("relay_auth_return="));
+        if (returnBinding) headers2.set("Cookie", returnBinding);
+        headers2.set("Authorization", "Bearer " + token);
+        headers2.set("X-Relay-Integration-Key", options.integrationKey);
+        headers2.set("Origin", options.origin);
+        return send(target, { ...init, headers: headers2, redirect: "manual" });
+      }
+    });
+    const headers = new Headers(response.headers);
+    headers.append(
+      "Set-Cookie",
+      cookie(url.pathname === "/relay/v1/auth/logout" ? "" : token)
+    );
+    return new Response(response.body, { status: response.status, headers });
+  };
+}
 export {
+  createParticipantBackend,
   proxyParticipant
 };

package/dist/schema.d.ts

@@ -219,6 +219,9 @@ declare const questDescriptionSchema: z.ZodObject<{
             }, z.core.$strict>>;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
+    integrations: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+        discord: "discord";
+    }>>>;
     fields: z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"quiz">;
         default: z.ZodArray<z.ZodObject<{
@@ -401,6 +404,9 @@ declare const publishedReleaseSchema: z.ZodUnion<readonly [z.ZodObject<{
             }, z.core.$strict>>;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
+    integrations: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+        discord: "discord";
+    }>>>;
     fields: z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"quiz">;
         default: z.ZodArray<z.ZodObject<{
@@ -595,6 +601,7 @@ declare const publishedReleaseSchema: z.ZodUnion<readonly [z.ZodObject<{
             } | undefined;
         } | undefined;
     };
+    integrations: "discord"[];
     fields: Record<string, {
         kind: "quiz";
         default: {
@@ -770,6 +777,9 @@ declare const templateSchema: z.ZodObject<{
                 }, z.core.$strict>>;
             }, z.core.$strict>>;
         }, z.core.$strict>>;
+        integrations: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+            discord: "discord";
+        }>>>;
         fields: z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
             kind: z.ZodLiteral<"quiz">;
             default: z.ZodArray<z.ZodObject<{
@@ -1179,6 +1189,12 @@ declare const memberProgressSchema: z.ZodObject<{
                 }, z.core.$strict>>;
             }, z.core.$strict>>;
         }, z.core.$strict>>;
+        connections: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+            discord: "discord";
+            google: "google";
+            apple: "apple";
+            x: "x";
+        }>>>;
         trigger: z.ZodUnion<readonly [z.ZodObject<{
             kind: z.ZodLiteral<"manual">;
             input: z.ZodEnum<{
@@ -1380,6 +1396,9 @@ declare const snapshotSchema: z.ZodObject<{
                 }, z.core.$strict>>;
             }, z.core.$strict>>;
         }, z.core.$strict>>;
+        integrations: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+            discord: "discord";
+        }>>>;
         fields: z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
             kind: z.ZodLiteral<"quiz">;
             default: z.ZodArray<z.ZodObject<{
@@ -1574,6 +1593,7 @@ declare const snapshotSchema: z.ZodObject<{
                 } | undefined;
             } | undefined;
         };
+        integrations: "discord"[];
         fields: Record<string, {
             kind: "quiz";
             default: {

package/dist/schema.js

@@ -48,7 +48,7 @@ import {
   tierRewardSchema,
   tieredRewardDefinitionSchema,
   triggerSchema
-} from "./chunk-C2KOMNLG.js";
+} from "./chunk-3IQ4KUKF.js";
 export {
   artifactSchema,
   attemptSchema,