@domino-sdk/relay 1.62.0 → 1.63.0

package/dist/{chunk-UAKYDVT3.js → chunk-KP2MCX3R.js}

@@ -1,7 +1,7 @@
 import {
   authScopeSchema,
   exchangeResultSchema
-} from "./chunk-XJFYAXET.js";
+} from "./chunk-N4BDKS6Y.js";
 import {
   appIdentityKindSchema,
   cosmosAddressSchema,
@@ -11,11 +11,11 @@ import {
   offsetDateTimeSchema,
   openIdentityKindSchema,
   solanaAddressSchema
-} from "./chunk-MK425RXJ.js";
+} from "./chunk-ID3BZXFZ.js";
 
 // src/credential-secrets.ts
 import * as z from "zod";
-var credentialSecretSchema = z.object({
+var credentialSecretSchema = /* @__PURE__ */ (() => z.object({
   id: z.string().uuid(),
   /** The secret's last four characters, to tell secrets apart; null for one issued before hints. */
   hint: z.string().nullable(),
@@ -24,18 +24,18 @@ var credentialSecretSchema = z.object({
   expiresAt: z.number().nullable(),
   /** When the secret last authenticated a request; null when it never has. */
   lastUsedAt: z.number().nullable()
-});
-var credentialSecretInputSchema = z.object({
+}))();
+var credentialSecretInputSchema = /* @__PURE__ */ (() => z.object({
   expiresInDays: z.number().int().min(1).max(3650).optional()
-}).strict();
+}).strict())();
 
 // src/server/member-imports.ts
 import * as z2 from "zod";
-var importTimeSchema = z2.union([
+var importTimeSchema = /* @__PURE__ */ (() => z2.union([
   z2.number().int().nonnegative().safe(),
   offsetDateTimeSchema().transform((value) => Date.parse(value))
-]);
-var importWalletSchema = z2.discriminatedUnion("chain", [
+]))();
+var importWalletSchema = /* @__PURE__ */ (() => z2.discriminatedUnion("chain", [
   z2.object({
     kind: z2.literal("wallet"),
     chain: z2.literal("solana"),
@@ -52,47 +52,47 @@ var importWalletSchema = z2.discriminatedUnion("chain", [
     network: cosmosNetworkSchema,
     address: cosmosAddressSchema
   }).strict()
-]);
-var importXSchema = z2.object({
+]))();
+var importXSchema = /* @__PURE__ */ (() => z2.object({
   kind: z2.literal("x"),
   subject: z2.string().regex(/^[1-9][0-9]{0,19}$/, "Use the numeric X user ID")
-}).strict();
-var importTelegramSchema = z2.object({
+}).strict())();
+var importTelegramSchema = /* @__PURE__ */ (() => z2.object({
   kind: z2.literal("telegram"),
   subject: z2.string().regex(/^[1-9][0-9]{0,19}$/, "Use the numeric Telegram user ID")
-}).strict();
-var importDiscordSchema = z2.object({
+}).strict())();
+var importDiscordSchema = /* @__PURE__ */ (() => z2.object({
   kind: z2.literal("discord"),
   subject: z2.string().regex(/^[1-9][0-9]{0,19}$/, "Use the numeric Discord user ID")
-}).strict();
-var importAppIdentitySchema = z2.object({ kind: appIdentityKindSchema, subject: z2.string().min(1).max(256) }).strict();
-var memberImportIdentitySchema = z2.union([
+}).strict())();
+var importAppIdentitySchema = /* @__PURE__ */ (() => z2.object({ kind: appIdentityKindSchema, subject: z2.string().min(1).max(256) }).strict())();
+var memberImportIdentitySchema = /* @__PURE__ */ (() => z2.union([
   importAppIdentitySchema,
   importWalletSchema,
   importXSchema
-]);
-var memberImportAccountSchema = z2.union([
+]))();
+var memberImportAccountSchema = /* @__PURE__ */ (() => z2.union([
   importWalletSchema,
   importXSchema
-]);
-var memberImportVouchedAccountSchema = z2.union([
+]))();
+var memberImportVouchedAccountSchema = /* @__PURE__ */ (() => z2.union([
   importWalletSchema,
   importXSchema,
   importTelegramSchema,
   importDiscordSchema
-]);
-var identityReferenceSchema = z2.union([
+]))();
+var identityReferenceSchema = /* @__PURE__ */ (() => z2.union([
   importAppIdentitySchema,
   importWalletSchema,
   importXSchema,
   importTelegramSchema,
   importDiscordSchema
-]);
-var memberImportActionSchema = z2.object({
+]))();
+var memberImportActionSchema = /* @__PURE__ */ (() => z2.object({
   at: importTimeSchema,
   key: z2.string().min(1).max(200).optional()
-}).strict();
-var memberImportReferralSchema = z2.object({
+}).strict())();
+var memberImportReferralSchema = /* @__PURE__ */ (() => z2.object({
   /**
    * The inviter: the `ref` of another row of this import, or the sign-in identity of a member
    * who already exists in this environment.
@@ -107,8 +107,8 @@ var memberImportReferralSchema = z2.object({
   qualified: z2.array(
     z2.object({ program: z2.string().min(1).max(200), at: importTimeSchema }).strict()
   ).max(50).default([])
-}).strict();
-var memberImportConsentSchema = z2.object({
+}).strict())();
+var memberImportConsentSchema = /* @__PURE__ */ (() => z2.object({
   /** The channel, such as `email`. */
   channel: z2.string().min(1).max(64),
   state: z2.enum(["granted", "withdrawn"]),
@@ -121,8 +121,8 @@ var memberImportConsentSchema = z2.object({
   // The 2,000-character limit is a row refusal at check, so a long wording refuses its row
   // instead of the batch; this bound only caps what a row stores.
   wording: z2.string().max(8e3).optional()
-}).strict();
-var memberImportRowSchema = z2.object({
+}).strict())();
+var memberImportRowSchema = /* @__PURE__ */ (() => z2.object({
   /** The member's ID on the platform they come from. Unique within an import. */
   ref: z2.string().trim().min(1).max(200),
   identity: memberImportIdentitySchema,
@@ -144,17 +144,17 @@ var memberImportRowSchema = z2.object({
   referral: memberImportReferralSchema.optional(),
   /** The member's marketing consent, per channel, as the platform they come from recorded it. */
   consent: z2.array(memberImportConsentSchema).max(10).optional()
-}).strict();
-var memberImportFullRowSchema = memberImportRowSchema.extend({
+}).strict())();
+var memberImportFullRowSchema = /* @__PURE__ */ (() => memberImportRowSchema.extend({
   accounts: z2.array(memberImportVouchedAccountSchema).max(20).default([])
-}).strict();
-var memberImportCreateSchema = z2.object({
+}).strict())();
+var memberImportCreateSchema = /* @__PURE__ */ (() => z2.object({
   actionId: identifier,
   /** Where the members come from, such as "legacy-domino". */
   source: z2.string().trim().min(1).max(100)
-}).strict();
-var memberImportRowsInputSchema = z2.object({ rows: z2.array(memberImportRowSchema).min(1).max(500) }).strict();
-var memberImportFullRowsInputSchema = z2.object({ rows: z2.array(memberImportFullRowSchema).min(1).max(500) }).strict();
+}).strict())();
+var memberImportRowsInputSchema = /* @__PURE__ */ (() => z2.object({ rows: z2.array(memberImportRowSchema).min(1).max(500) }).strict())();
+var memberImportFullRowsInputSchema = /* @__PURE__ */ (() => z2.object({ rows: z2.array(memberImportFullRowSchema).min(1).max(500) }).strict())();
 var MemberImportRefusalCode = {
   /** An account or identity belongs to another member in the project. */
   AccountLinkedElsewhere: "account-linked-elsewhere",
@@ -213,12 +213,12 @@ var MemberImportRefusalCode = {
   /** No referral program of that key or ID in this environment, or it is archived. */
   UnknownReferralProgram: "unknown-referral-program"
 };
-var refusalCodeSchema = z2.string();
-var memberImportRefusalSchema = z2.object({
+var refusalCodeSchema = /* @__PURE__ */ (() => z2.string())();
+var memberImportRefusalSchema = /* @__PURE__ */ (() => z2.object({
   code: refusalCodeSchema,
   message: z2.string()
-});
-var memberImportRowResultSchema = z2.object({
+}))();
+var memberImportRowResultSchema = /* @__PURE__ */ (() => z2.object({
   line: z2.number().int().positive(),
   ref: z2.string(),
   status: z2.enum(["pending", "ready", "applied", "refused"]),
@@ -232,17 +232,17 @@ var memberImportRowResultSchema = z2.object({
    * this field.
    */
   reverted: z2.boolean().optional()
-});
-var memberImportRowPageSchema = z2.object({
+}))();
+var memberImportRowPageSchema = /* @__PURE__ */ (() => z2.object({
   items: z2.array(memberImportRowResultSchema),
   nextCursor: z2.string().nullable()
-});
-var memberImportRowQuerySchema = z2.object({
+}))();
+var memberImportRowQuerySchema = /* @__PURE__ */ (() => z2.object({
   status: z2.enum(["pending", "ready", "applied", "refused"]).optional(),
   cursor: z2.string().max(200).optional(),
   limit: z2.coerce.number().int().min(1).max(500).optional()
-}).strict();
-var memberImportSummarySchema = z2.object({
+}).strict())();
+var memberImportSummarySchema = /* @__PURE__ */ (() => z2.object({
   rows: z2.number().int().nonnegative(),
   ready: z2.number().int().nonnegative(),
   refused: z2.number().int().nonnegative(),
@@ -277,13 +277,13 @@ var memberImportSummarySchema = z2.object({
   refusals: z2.array(
     z2.object({ code: refusalCodeSchema, rows: z2.number().int().nonnegative() })
   )
-});
-var memberImportCommandSchema = z2.object({ actionId: identifier.optional() }).strict();
-var memberImportRevertInputSchema = z2.object({
+}))();
+var memberImportCommandSchema = /* @__PURE__ */ (() => z2.object({ actionId: identifier.optional() }).strict())();
+var memberImportRevertInputSchema = /* @__PURE__ */ (() => z2.object({
   actionId: identifier,
   reason: z2.string().trim().min(1).max(500)
-}).strict();
-var memberImportRevertOutcomeSchema = z2.object({
+}).strict())();
+var memberImportRevertOutcomeSchema = /* @__PURE__ */ (() => z2.object({
   reversed: z2.object({
     /** Applied rows the revert went through. */
     rows: z2.number().int().nonnegative(),
@@ -309,7 +309,9 @@ var memberImportRevertOutcomeSchema = z2.object({
   /**
    * Links the rows created that stay, because the member relied on them since: `signed-in` with
    * it, or `proved` a vouched wallet. `kind` is `wallet`, the provider (`x`, `telegram`,
-   * `discord`) or `app:<name>`; `account` is the address or subject.
+   * `discord`) or `app:<name>`; `account` is the address or subject. A row whose member was erased
+   * (`members.erase`) is passed over whole: one entry with `kind: "member"`, the member ID as
+   * `account` and reason `member-erased`, and nothing of that row is reversed.
    */
   keptLinks: z2.array(
     z2.object({
@@ -324,8 +326,8 @@ var memberImportRevertOutcomeSchema = z2.object({
    * links all stay, and only their balances and completions were reversed.
    */
   linksUntracked: z2.boolean()
-});
-var memberImportRevertSchema = z2.object({
+}))();
+var memberImportRevertSchema = /* @__PURE__ */ (() => z2.object({
   reason: z2.string(),
   requestedAt: z2.number().int(),
   requestedBy: z2.string().nullable(),
@@ -333,7 +335,7 @@ var memberImportRevertSchema = z2.object({
   rows: z2.number().int().nonnegative(),
   revertedAt: z2.number().int().nullable(),
   outcome: memberImportRevertOutcomeSchema.nullable()
-});
+}))();
 var MemberImportState = {
   /** Rows are being added. */
   Open: "open",
@@ -354,8 +356,8 @@ var MemberImportState = {
   /** Canceled before it was applied. */
   Canceled: "canceled"
 };
-var memberImportStateSchema = z2.string();
-var memberImportSchema = z2.object({
+var memberImportStateSchema = /* @__PURE__ */ (() => z2.string())();
+var memberImportSchema = /* @__PURE__ */ (() => z2.object({
   id: identifier,
   source: z2.string(),
   /**
@@ -395,27 +397,34 @@ var memberImportSchema = z2.object({
   stoppedBy: z2.string().nullish(),
   /** Set once a revert was asked for: the import is `reverting`, then `reverted`. */
   revert: memberImportRevertSchema.nullish()
-});
-var memberImportPageSchema = z2.object({
+}))();
+var memberImportPageSchema = /* @__PURE__ */ (() => z2.object({
   items: z2.array(memberImportSchema),
   nextCursor: z2.string().nullable()
-});
-var memberImportListQuerySchema = z2.object({
+}))();
+var memberImportListQuerySchema = /* @__PURE__ */ (() => z2.object({
   cursor: z2.string().max(200).optional(),
   limit: z2.coerce.number().int().min(1).max(100).optional()
-}).strict();
+}).strict())();
 
 // src/identity-integration.ts
 import * as z3 from "zod";
-var identityIntegrationInputSchema = z3.object({
+var identityIntegrationInputSchema = /* @__PURE__ */ (() => z3.object({
   name: z3.string().trim().min(1).max(80),
-  origin: z3.string().url().refine((value) => {
+  origin: z3.string().url().superRefine((value, context) => {
     const url = new URL(value);
-    return url.protocol === "https:" && url.origin === value;
-  }, "Use an exact HTTPS application origin"),
+    if (url.protocol !== "https:") {
+      context.addIssue({ code: "custom", message: "Use an HTTPS origin." });
+    } else if (url.origin !== value) {
+      context.addIssue({
+        code: "custom",
+        message: `Use the exact origin ${url.origin}, without a path, query or trailing slash.`
+      });
+    }
+  }),
   /**
    * The identity kind this integration owns in the project and environment, such as
-   * `app:telegram`. Each member it signs in gets the exchanged subject as an identity of this
+   * `app:game`. Each member it signs in gets the exchanged subject as an identity of this
    * kind, which tracker attribution and `ctx.member.identities()` read. Its kind cannot change.
    * Omit it for an integration that only signs members in.
    *
@@ -441,8 +450,8 @@ var identityIntegrationInputSchema = z3.object({
 ).refine(
   (input) => !input.adoptIdentitiesFrom === !input.reason,
   "Give a reason when adopting identities, and only then"
-);
-var identityIntegrationSchema = z3.object({
+))();
+var identityIntegrationSchema = /* @__PURE__ */ (() => z3.object({
   ...authScopeSchema.shape,
   id: z3.string().uuid(),
   name: z3.string(),
@@ -465,13 +474,13 @@ var identityIntegrationSchema = z3.object({
    * (`accounts` on the exchange). False in Relay versions without it.
    */
   vouchesAccounts: z3.boolean().default(false)
-});
-var identityIntegrationSecretSchema = identityIntegrationSchema.extend(
+}))();
+var identityIntegrationSecretSchema = /* @__PURE__ */ (() => identityIntegrationSchema.extend(
   {
     token: z3.string()
   }
-);
-var identityKindClaimSchema = z3.object({
+))();
+var identityKindClaimSchema = /* @__PURE__ */ (() => z3.object({
   kind: openIdentityKindSchema,
   /** The owning integration's ID; it stays after the integration is disconnected. */
   integration: z3.string(),
@@ -484,20 +493,20 @@ var identityKindClaimSchema = z3.object({
   /** Identities an operator unlinked. */
   unlinked: z3.number().int().nonnegative(),
   claimedAt: z3.number().int().nonnegative()
-});
-var identityIntegrationAccountVouchingInputSchema = z3.object({
+}))();
+var identityIntegrationAccountVouchingInputSchema = /* @__PURE__ */ (() => z3.object({
   enabled: z3.boolean(),
   reason: z3.string().trim().min(1).max(500),
   actionId: identifier.optional()
-}).strict();
+}).strict())();
 var vouchedProviders = ["x", "telegram", "discord"];
-var participantExchangeAccountsSchema = z3.array(memberImportVouchedAccountSchema).max(20).refine(
+var participantExchangeAccountsSchema = /* @__PURE__ */ (() => z3.array(memberImportVouchedAccountSchema).max(20).refine(
   (accounts) => vouchedProviders.every(
     (kind) => accounts.filter((entry) => entry.kind === kind).length <= 1
   ),
   "Vouch for at most one X, Telegram and Discord account each"
-);
-var participantExchangeSchema = z3.object({
+))();
+var participantExchangeSchema = /* @__PURE__ */ (() => z3.object({
   subject: z3.string().min(1).max(200),
   previousToken: z3.string().max(200).optional(),
   /**
@@ -506,22 +515,34 @@ var participantExchangeSchema = z3.object({
    * `ACCOUNT_VOUCHING_OFF`.
    */
   accounts: participantExchangeAccountsSchema.optional()
-}).strict();
-var participantExchangeAccountResultSchema = z3.object({
+}).strict())();
+var participantExchangeAccountResultSchema = /* @__PURE__ */ (() => z3.object({
   account: memberImportVouchedAccountSchema,
   status: z3.string(),
   code: z3.string().optional(),
   message: z3.string().optional()
-});
-var participantExchangeResultSchema = exchangeResultSchema.extend({
+}))();
+var participantExchangeResultSchema = /* @__PURE__ */ (() => exchangeResultSchema.extend({
   accounts: z3.array(participantExchangeAccountResultSchema).optional()
-});
-var accountVouchedBySchema = z3.object({
+}))();
+var identityIntegrationKeySchema = /* @__PURE__ */ (() => z3.object({
+  id: z3.string(),
+  name: z3.string(),
+  organization: z3.string(),
+  project: z3.string(),
+  environment: z3.string(),
+  origin: z3.string(),
+  identityKind: openIdentityKindSchema.nullable().default(null),
+  vouchesAccounts: z3.boolean().default(false),
+  secretExpiresAt: z3.number().nullable().default(null),
+  appOrigins: z3.array(z3.string()).default([])
+}))();
+var accountVouchedBySchema = /* @__PURE__ */ (() => z3.object({
   /** The integration's ID; it stays after the integration is disconnected. */
   integration: z3.string(),
   /** The integration's name when it vouched for the account. */
   integrationName: z3.string()
-});
+}))();
 
 export {
   credentialSecretSchema,
@@ -561,5 +582,6 @@ export {
   participantExchangeSchema,
   participantExchangeAccountResultSchema,
   participantExchangeResultSchema,
+  identityIntegrationKeySchema,
   accountVouchedBySchema
 };