@domino-sdk/relay 1.61.0 → 1.62.0

package/dist/{chunk-DHXDBAJF.js → chunk-UPQPUJOU.js}

@@ -1,23 +1,18 @@
 import {
   MANAGEMENT_TIMEOUT,
+  clientIdentity,
   lifetime,
   retryAfter,
   retrying,
   validTimeout
-} from "./chunk-XBV2CK2H.js";
+} from "./chunk-3PYYGFSB.js";
 import {
-  clientIdentity
-} from "./chunk-EN3M5Z4J.js";
-import {
-  authScopeSchema
-} from "./chunk-PPB7HALD.js";
+  knownResponse
+} from "./chunk-MK425RXJ.js";
 import {
   RequestError,
-  appIdentityKindSchema,
-  isRequestError,
-  knownResponse,
-  openIdentityKindSchema
-} from "./chunk-ZDJLPN4L.js";
+  isRequestError
+} from "./chunk-K2KS3JLY.js";
 
 // src/configuration.ts
 function questConfiguration(release) {
@@ -33,104 +28,8 @@ function questConfiguration(release) {
   };
 }
 
-// src/credential-secrets.ts
-import * as z from "zod";
-var credentialSecretSchema = z.object({
-  id: z.string().uuid(),
-  /** The secret's last four characters, to tell secrets apart; null for one issued before hints. */
-  hint: z.string().nullable(),
-  createdAt: z.number(),
-  /** When the secret stops working; null when it never expires. */
-  expiresAt: z.number().nullable(),
-  /** When the secret last authenticated a request; null when it never has. */
-  lastUsedAt: z.number().nullable()
-});
-var credentialSecretInputSchema = z.object({
-  expiresInDays: z.number().int().min(1).max(3650).optional()
-}).strict();
-
-// src/identity-integration.ts
-import * as z2 from "zod";
-var identityIntegrationInputSchema = z2.object({
-  name: z2.string().trim().min(1).max(80),
-  origin: z2.string().url().refine((value) => {
-    const url = new URL(value);
-    return url.protocol === "https:" && url.origin === value;
-  }, "Use an exact HTTPS application origin"),
-  /**
-   * The identity kind this integration owns in the project and environment, such as
-   * `app:telegram`. Each member it signs in gets the exchanged subject as an identity of this
-   * kind, which tracker attribution and `ctx.member.identities()` read. Its kind cannot change.
-   * Omit it for an integration that only signs members in.
-   *
-   * A kind belongs to the integration that first claimed it, also after that integration is
-   * disconnected. A new integration takes a kind that already has identities only by adopting
-   * them with `adoptIdentitiesFrom`.
-   */
-  identityKind: appIdentityKindSchema.optional(),
-  /**
-   * Adopt the identities of a disconnected integration's `identityKind`: its ID, as
-   * `identityIntegrations.kinds()` lists it. Adopt only when this app's user IDs mean the same
-   * users as that integration's, because each one then signs in as the member that ID is linked
-   * to. Needs `reason`, which the audit log keeps.
-   */
-  adoptIdentitiesFrom: z2.string().uuid().optional(),
-  /** Why the identities are adopted; required with `adoptIdentitiesFrom`. */
-  reason: z2.string().trim().min(1).max(500).optional(),
-  /** Days until the first secret expires. Omit it for a key that never expires. */
-  expiresInDays: z2.number().int().min(1).max(3650).optional()
-}).strict().refine(
-  (input) => !input.adoptIdentitiesFrom || input.identityKind,
-  "Adopting identities needs the identityKind they have"
-).refine(
-  (input) => !input.adoptIdentitiesFrom === !input.reason,
-  "Give a reason when adopting identities, and only then"
-);
-var identityIntegrationSchema = z2.object({
-  ...authScopeSchema.shape,
-  id: z2.string().uuid(),
-  name: z2.string(),
-  origin: z2.string(),
-  /**
-   * When the integration's last working secret expires: 8640000000000000 (the latest date
-   * JavaScript represents) when one never does.
-   *
-   * @deprecated Read `secrets`, which gives each secret's own expiry.
-   */
-  expiresAt: z2.number(),
-  /** The integration's working secrets, oldest first. Any of them authenticates it. */
-  secrets: z2.array(credentialSecretSchema).default([]),
-  /** The latest use of any of its secrets, revoked ones included; null when none was used. */
-  lastUsedAt: z2.number().nullable().default(null),
-  /** The identity kind the integration owns; null when it only signs members in. */
-  identityKind: openIdentityKindSchema.nullable().default(null)
-});
-var identityIntegrationSecretSchema = identityIntegrationSchema.extend(
-  {
-    token: z2.string()
-  }
-);
-var identityKindClaimSchema = z2.object({
-  kind: openIdentityKindSchema,
-  /** The owning integration's ID; it stays after the integration is disconnected. */
-  integration: z2.string(),
-  /** The owning integration's name when it claimed or adopted the kind. */
-  integrationName: z2.string(),
-  /** Whether the owning integration is still connected. */
-  connected: z2.boolean(),
-  /** Linked identities of the kind; adopting them is required to reuse the kind. */
-  linked: z2.number().int().nonnegative(),
-  /** Identities an operator unlinked. */
-  unlinked: z2.number().int().nonnegative(),
-  claimedAt: z2.number().int().nonnegative()
-});
-var participantExchangeSchema = z2.object({
-  subject: z2.string().min(1).max(200),
-  previousToken: z2.string().max(200).optional()
-}).strict();
-
 // src/server/errors.ts
-import * as z3 from "zod";
+import * as z from "zod";
 var ManagementErrorCode = {
   /** The input or an option failed validation before anything was sent (kind `client`). */
   InvalidInput: "invalid-input",
@@ -141,9 +40,9 @@ var ManagementErrorCode = {
   Aborted: "aborted",
   InvalidResponse: "invalid-response"
 };
-var managementErrorSchema = z3.looseObject({
-  error: z3.string(),
-  code: z3.string().optional()
+var managementErrorSchema = z.looseObject({
+  error: z.string(),
+  code: z.string().optional()
 });
 var uncertainStatuses = /* @__PURE__ */ new Set([500, 502, 504]);
 function uncertainOutcome(init) {
@@ -195,7 +94,17 @@ var ManagementError = class extends RequestError {
 var DEFAULT_MANAGEMENT_TIMEOUT = MANAGEMENT_TIMEOUT;
 
 // src/server/transport.ts
-import * as z4 from "zod";
+import * as z2 from "zod";
+var ManagementUploadBody = class {
+  constructor(body, headers, actionId) {
+    this.body = body;
+    this.headers = headers;
+    this.actionId = actionId;
+  }
+  body;
+  headers;
+  actionId;
+};
 function failureCause(error) {
   if (typeof error !== "object" || error === null || !("cause" in error)) {
     return {};
@@ -204,6 +113,9 @@ function failureCause(error) {
   return typeof cause === "object" && cause !== null ? cause : {};
 }
 function actionIdOf(input) {
+  if (input instanceof ManagementUploadBody) {
+    return input.actionId;
+  }
   return typeof input === "object" && input !== null && "actionId" in input && typeof input.actionId === "string" ? input.actionId : void 0;
 }
 function unsent(error) {
@@ -425,7 +337,14 @@ function managementTransport(options) {
     const fetchInit = {
       method,
       headers: tolerant ? { "X-Domino-Response": "tolerant-v1" } : void 0,
-      ...input === void 0 ? {} : {
+      ...input === void 0 ? {} : input instanceof ManagementUploadBody ? {
+        headers: {
+          "Content-Type": input.body.type,
+          ...input.headers,
+          ...tolerant ? { "X-Domino-Response": "tolerant-v1" } : {}
+        },
+        body: input.body
+      } : {
         headers: {
           "Content-Type": "application/json",
           ...tolerant ? { "X-Domino-Response": "tolerant-v1" } : {}
@@ -491,7 +410,7 @@ function managementTransport(options) {
     replaySafe
   }) => exchange(
     path,
-    z4.unknown(),
+    z2.unknown(),
     body,
     method,
     void 0,
@@ -501,8 +420,8 @@ function managementTransport(options) {
 }
 
 // src/sequence-cursor.ts
-import * as z5 from "zod";
-var sequenceCursorSchema = z5.string().regex(/^[1-9][0-9]{0,15}$/, "Invalid cursor").transform(Number).pipe(z5.number().int().positive().safe());
+import * as z3 from "zod";
+var sequenceCursorSchema = z3.string().regex(/^[1-9][0-9]{0,15}$/, "Invalid cursor").transform(Number).pipe(z3.number().int().positive().safe());
 
 // src/referral-reward-kinds.ts
 var REFERRAL_INTEGRATION_REWARD_ERROR = "Referral programs can grant points and tiered rewards; Discord roles need a quest";
@@ -524,18 +443,12 @@ function containsReferralIntegrationReward(value) {
 
 export {
   questConfiguration,
-  credentialSecretSchema,
-  credentialSecretInputSchema,
-  identityIntegrationInputSchema,
-  identityIntegrationSchema,
-  identityIntegrationSecretSchema,
-  identityKindClaimSchema,
-  participantExchangeSchema,
   ManagementErrorCode,
   managementErrorSchema,
   isManagementError,
   ManagementError,
   DEFAULT_MANAGEMENT_TIMEOUT,
+  ManagementUploadBody,
   actionIdOf,
   managementTransport,
   sequenceCursorSchema,

package/dist/{chunk-24I4R732.js → chunk-UW5232GG.js}

@@ -1,12 +1,14 @@
 import {
   createRelayClient
-} from "./chunk-SKGTNTLF.js";
+} from "./chunk-GKIFABGN.js";
+import {
+  cosmosChain
+} from "./chunk-MK425RXJ.js";
 import {
   RelayErrorCode,
   asRelayError,
-  clientError,
-  cosmosChain
-} from "./chunk-ZDJLPN4L.js";
+  clientError
+} from "./chunk-K2KS3JLY.js";
 
 // src/base58.ts
 var alphabet = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
@@ -370,6 +372,10 @@ var providerLabels = {
   x: "X",
   discord: "Discord"
 };
+var signInProviderLabels = new Map([
+  ...Object.entries(providerLabels),
+  ["telegram", "Telegram"]
+]);
 var familyLabels = {
   solana: "Solana",
   eip155: "EVM",
@@ -462,8 +468,22 @@ function signInOptionsFrom(methods, wallets, input) {
     });
   }
   const telegram = actions.telegram;
+  const start = actions.provider;
+  const configured = methods.signInProviders ?? [
+    ...methods.providers,
+    ...methods.telegram?.login ? ["telegram"] : []
+  ];
   return {
     options,
+    ...start ? {
+      signInProviders: configured.map((provider) => ({
+        kind: "provider",
+        id: provider,
+        label: signInProviderLabels.get(provider) ?? provider,
+        icon: provider,
+        start: () => start(provider)
+      }))
+    } : {},
     unavailable,
     ...methods.telegram?.login && telegram ? {
       telegram: {
@@ -482,6 +502,9 @@ async function readSignInMethods(relay) {
     const result = await relay.auth.providers();
     return {
       providers: result.providers.filter((entry) => entry.configured).map((entry) => entry.provider),
+      ...result.signInProviders ? {
+        signInProviders: result.signInProviders.filter((entry) => entry.configured).map((entry) => entry.provider)
+      } : {},
       email: result.email,
       wallets: result.wallets,
       ...result.telegram ? { telegram: result.telegram } : {}
@@ -512,6 +535,13 @@ async function signInOptions(relay, input = {}) {
         const { url } = await relay.auth.start(provider, "sign-in");
         window.location.assign(url);
       },
+      async provider(provider) {
+        const { url } = await relay.auth.start(
+          provider,
+          "sign-in"
+        );
+        window.location.assign(url);
+      },
       async sendCode(email) {
         challenge = null;
         challenge = (await relay.auth.emailStart(email)).challenge;
@@ -537,20 +567,6 @@ async function signInOptions(relay, input = {}) {
   });
 }
 
-// src/telegram-browser.ts
-function telegramMiniAppInitData() {
-  const scope = globalThis;
-  const fromScript = scope.Telegram?.WebApp?.initData;
-  if (typeof fromScript === "string" && fromScript.length > 0) {
-    return fromScript;
-  }
-  const hash = scope.location?.hash;
-  if (!hash) {
-    return null;
-  }
-  return new URLSearchParams(hash.replace(/^#/, "")).get("tgWebAppData") || null;
-}
-
 // src/member-time.ts
 function memberTime(me, at = Date.now()) {
   return at + (me.clock?.offsetMs ?? 0);
@@ -734,7 +750,6 @@ export {
   signInOptionsFrom,
   readSignInMethods,
   signInOptions,
-  telegramMiniAppInitData,
   memberTime,
   createBrowserRelayClient,
   browserSubmissionStore