@domino-sdk/relay 1.66.0 → 1.67.0

package/CHANGELOG.md

@@ -1,5 +1,34 @@
 # @domino-sdk/relay
 
+## 1.67.0
+
+### Minor Changes
+
+- 8c070ca: **Automation keys for only the projects they create.** `management.automationKeys.create` accepts `projects: []` when `createProjects` is true: the key starts with no project and reaches only the projects it creates, so an agent that starts its own throwaway projects no longer needs a key for every project. An empty list without `createProjects` is still refused, and omitting `projects` still means every project. Console's **Chosen projects** allows no project picked once **Create projects** is checked.
+- 844caae: **Yearly Checkout takes promotion codes (experimental).** `management.billing.checkout()` with `interval: "year"` opens a Checkout page with a promotion code field; monthly Checkout has none. The subscription read (`management.billing.read()`, and `subscription` in the project's plan read) gains `discount`: while a code discounts the current period, what the period costs (`amount`) instead of its list price (`listAmount`), in US cents with tax included, and when that period ends (`until`); null otherwise. A first-year code ends with the first renewal, which bills the list price. `domino billing show` prints the discount and its end.
+- e73e721: **`management.quests.listWithoutCode()` lists quests without their code.** It answers what `management.quests.list()` does, each quest's current release with archived quests included and the most recently published first, without each release's evaluator `code` (`GET /management/v1/quests/list-without-code`). Code is most of a release's size, up to a megabyte per quest, so a project's full list can reach tens of megabytes. Use the new read whenever you show or match quests rather than run them. `quests.list()` is unchanged.
+- 8b195a4: **Self-hosted wallet apps: loopback origins on Test app login keys, and `verifyWalletSignIn`.**
+
+  - **Loopback origins.** An app login key in **Test** now accepts `http://localhost:<port>`, `http://127.0.0.1:<port>` and `http://[::1]:<port>` as well as HTTPS, so `next dev` signs members in against real Domino. `identityIntegrationInputSchema` accepts them, with the message "Use an HTTPS origin, or a loopback origin such as http://localhost:3000 for a Test key." for any other `http:` origin. Relay refuses a loopback origin on a **Live** key with 400 `invalid-request`, "Live app login keys need an HTTPS origin. Loopback origins such as http://localhost:3000 work only on Test keys."
+  - **`verifyWalletSignIn`** (`@experimental`) from `@domino-sdk/relay/server` verifies a Sign-In with Ethereum (EIP-4361) or Sign-In with Solana message and its signature in your server, without calling any network: domain and URI against your origin, the nonce you issued, issue time, expiry and `Not Before`, and the chains you accept. It answers the wallet as `authenticate()` vouches for it, with its CAIP-10 `accountId`, and throws `WalletSignInError` (`isWalletSignInError`) with a `code` when it refuses. Smart-contract wallets (ERC-1271) are refused with `invalid-signature`.
+
+  The SDK now depends on `@noble/curves` and `@noble/hashes` for EVM signature checks. See [Wallet sign-in in your own Next.js app](https://console.domino.run/docs/build/self-hosted-wallet-sign-in).
+
+- 19bbb9c: Smart-contract wallets can link and sign in: Base Account, Privy and Dynamic smart wallets, and any EVM wallet that signs with ERC-1271, or ERC-6492 before it is deployed. Relay checks such a signature on the chain in the message's Chain ID line (the signer's `chainId()`), one of the EVM chains `GET /management/v1/wallet-balance-chains` lists; an EOA's signature is still checked without a network call. `walletSignatureSchema` accepts signatures up to 16,384 characters, so update the SDK before linking smart wallets: earlier releases refuse their signatures before sending them. A linked smart wallet's `LinkedWallet` has `provedOn`, the CAIP-2 network whose contract checked its latest proof, and it is an account on that chain only: quest balance, NFT, event and contract-call reads, `wallet.balances()` samples and tracker attribution use it there, the testing kit does the same, payout lists name it as `<provedOn>:<address>`, and `caip10(wallet)` names that chain and throws for another. A chain that does not answer is refused with code `unavailable` and leaves the challenge usable; smart-wallet checks are limited to 10 per member (sign-in: per client IP) and 600 per project environment in 10 minutes.
+- 1e2edc6: **Solana devnet in quests and trackers, and Anchor 1.0 IDLs.** Quest checks and trackers can read Solana devnet the way they read an EVM testnet: pass `chain: "solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1"` (exported as `solanaDevnet`) to `ctx.wallet.balance()`, `ctx.wallet.transactions()` or `wallet.balances()`, or name a devnet collection `solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1/nft:<collection mint>` in `settings.nft()`. Reads run in test and live, against the same linked Solana wallets as mainnet. `settings.chain()` accepts the devnet ID, `management.walletBalanceChains()` lists Solana Devnet (`testnet: true`) after Solana, and `domino trackers create --chain` takes it. `ctx.wallet.transactions()` without `chain` reads mainnet and sends the request it always did. New exports: `solanaDevnet`, `isSolanaNetwork()` and the `SolanaNetwork` type.
+
+  A `settings.solanaProgram()` program is now accepted when it is an executable program on mainnet or, when mainnet has none, on devnet, so a devnet-only program can be published. Saving the setting also finds the IDL Anchor 1.0 and later publish to the Program Metadata Program, besides the legacy IDL account.
+
+  **Behaviour change: a pasted IDL now takes precedence over the program's on-chain IDL.** Before, a save replaced a pasted IDL once the program published one on chain. Now a pasted IDL stays until an operator removes it (Console's **Remove pasted IDL**, or `solanaIdls: { [key]: null }` in `quests.updateSettings()`), and Console offers **Replace IDL** for a program that publishes one.
+
+  **Breaking types.** This minor widens released types that named Solana mainnet alone, as a deliberate break (docs/releases.md#deliberate-breaks). Code that never names devnet keeps compiling and running. Code that handles every value of one of these types now meets devnet and may need a case for it: `BalanceChain`, `NftCollection`, `NftCollectionParts` (from `parseNftCollection()`), `WalletBalanceQuery`, `WalletNftsQuery`, `WalletBalanceChains`, the testing kit's `CapabilityRequest` and the CLI's tracker results (a `wallet.balances()` source's `chain`). A hand-written `WalletReader` or `EvaluationContext` that takes mainnet alone no longer fits; build fakes with `@domino-sdk/relay/testing`.
+
+  **Upgrade before adding a devnet tracker.** Earlier SDK and CLI releases cannot read a project's trackers once it has a devnet `wallet.balances()` tracker, and cannot replay an attempt that read devnet. Relay keeps devnet out of `GET /wallet-balance-chains` for clients before this release, so their `management.walletBalanceChains()` keeps working.
+
+## 1.66.1
+
+No changes in this release.
+
 ## 1.66.0
 
 ### Minor Changes

package/dist/{accounts-_lNsiR2k.d.ts → accounts-C2O8mpB8.d.ts}

@@ -1,6 +1,6 @@
 import * as z from 'zod';
-import { R as ResourceHandle, G as GroupHandle } from './tracker-data-Bl-qPIvZ.js';
-import { S as SolanaIdlSource } from './wallet-B7e06v4m.js';
+import { R as ResourceHandle, G as GroupHandle } from './tracker-data-BqY-9Vu-.js';
+import { S as SolanaIdlSource } from './wallet-Btng186v.js';
 
 /**
  * The modules this SDK knows a quest can declare to enable provider readers. Project connections

package/dist/{attempt-captures-BqPggxTU.d.ts → attempt-captures-ClHAoo_n.d.ts}

@@ -1,4 +1,4 @@
-import { O as OpenIdentityKind } from './tracker-data-Bl-qPIvZ.js';
+import { O as OpenIdentityKind } from './tracker-data-BqY-9Vu-.js';
 import * as z from 'zod';
 
 /** One capability call of the captured evaluation run, as Relay stored it. */

package/dist/authoring.d.ts

@@ -1,21 +1,21 @@
-import { _ as EngagementBudget, $ as leaderboardDefinitionSchema, Z as AuthoringIdentity, a0 as pointLedgerDeclarationSchema, a1 as referralAuthoringSchema, a2 as discordMessagesSourceSchema, a3 as DiscordMessageData, a4 as DiscordMessageTextData, a5 as discordReactionsSourceSchema, a6 as DiscordReactionData, a7 as KnownIntegrationModule, P as PointBalance, C as CampaignDefinition, a8 as TextReviewInput, a9 as TextResult, aa as PhotoResult, ab as DiscordReader, ac as Decision, ad as rewardSchema, ae as triggerSchema, af as IntegrationModule, D as QuestPresentation, d as AvailabilityWindow, F as QuestProfile, G as QuizEvidence, W as IntegrationModuleProvider, ag as TieredRewardDefinition } from './accounts-_lNsiR2k.js';
-export { ah as KnownIntegrationModuleProvider, ai as defineCampaign, aj as defineGroup } from './accounts-_lNsiR2k.js';
-import { x as xContentBodySchema, I as IdentityKind, j as customSourceSchema, W as WithRecordData, k as WithContent, l as WithAccountRoles, R as ResourceHandle, Q as QuestHandle, L as LedgerReference, G as GroupHandle, m as TrackerSource, n as trackerDefinitionSchema, o as Tracker, p as TrackerData, q as SourceRoles, r as LedgerHandle, i as TrackerDataSchema, u as xSearchSourceSchema, X as XTweet, v as XContentMetric, y as TrackerTriggerPolicy, z as Where, M as MemberIdentity, A as ReferralHandle, B as TrackerTriggerContext, C as TrackerReader, D as TrackerTriggerMode, E as RoleOf, F as WhereSetting, H as ContentBody, J as BadgeHandle, N as ContentMetricName } from './tracker-data-Bl-qPIvZ.js';
-export { P as LedgerSetting, U as TrackerPage, V as TrackerReadQuery, Y as trackerDataSchema, Z as trackerTriggerContextSchema } from './tracker-data-Bl-qPIvZ.js';
+import { _ as EngagementBudget, $ as leaderboardDefinitionSchema, Z as AuthoringIdentity, a0 as pointLedgerDeclarationSchema, a1 as referralAuthoringSchema, a2 as discordMessagesSourceSchema, a3 as DiscordMessageData, a4 as DiscordMessageTextData, a5 as discordReactionsSourceSchema, a6 as DiscordReactionData, a7 as KnownIntegrationModule, P as PointBalance, C as CampaignDefinition, a8 as TextReviewInput, a9 as TextResult, aa as PhotoResult, ab as DiscordReader, ac as Decision, ad as rewardSchema, ae as triggerSchema, af as IntegrationModule, D as QuestPresentation, d as AvailabilityWindow, F as QuestProfile, G as QuizEvidence, W as IntegrationModuleProvider, ag as TieredRewardDefinition } from './accounts-C2O8mpB8.js';
+export { ah as KnownIntegrationModuleProvider, ai as defineCampaign, aj as defineGroup } from './accounts-C2O8mpB8.js';
+import { x as xContentBodySchema, I as IdentityKind, j as customSourceSchema, W as WithRecordData, k as WithContent, l as WithAccountRoles, R as ResourceHandle, Q as QuestHandle, L as LedgerReference, G as GroupHandle, m as TrackerSource, n as trackerDefinitionSchema, o as Tracker, p as TrackerData, q as SourceRoles, r as LedgerHandle, i as TrackerDataSchema, u as xSearchSourceSchema, X as XTweet, v as XContentMetric, y as TrackerTriggerPolicy, z as Where, M as MemberIdentity, A as ReferralHandle, B as TrackerTriggerContext, C as TrackerReader, D as TrackerTriggerMode, E as RoleOf, F as WhereSetting, H as ContentBody, J as BadgeHandle, N as ContentMetricName } from './tracker-data-BqY-9Vu-.js';
+export { P as LedgerSetting, U as TrackerPage, V as TrackerReadQuery, Y as trackerDataSchema, Z as trackerTriggerContextSchema } from './tracker-data-BqY-9Vu-.js';
 import { R as ResourceSource, M as MemberCompletion, B as Budget, A as AuthorBudget, a as Announcement } from './capability-error-CuI_F7yM.js';
 export { C as CapabilityError, b as CapabilityErrorCode, T as TikTokVideoBody, c as TikTokVideoMetric, Y as YouTubeShortBody, d as YouTubeShortMetric, e as capabilityErrorCodes } from './capability-error-CuI_F7yM.js';
-import { N as NftCollection, p as ContractCall, q as ContractEvent, r as SolanaProgram, s as WalletBalanceSourceQuery, t as WalletTransaction, u as WalletInstruction, e as ProfileReferral, v as WalletReader } from './wallet-B7e06v4m.js';
-export { w as ContractCallParts, x as ContractCallReturnType, y as ContractEventInput, z as ContractEventParts, B as ContractFunction, D as CosmosDenom, a as CosmosNetwork, E as EvmChainId, F as NftCollectionParts, G as NftStandard, H as WalletBalance, I as WalletBalanceChange, o as WalletBalanceQuery, J as WalletBalanceSample, K as WalletCall, M as WalletCallArgument, Q as WalletCallQuery, R as WalletDelegations, T as WalletDelegationsQuery, U as WalletEventCondition, V as WalletEventValue, X as WalletEvents, Y as WalletEventsQuery, Z as WalletNfts, _ as WalletNftsQuery, $ as WalletTransactions, a0 as WalletTransactionsQuery, a1 as cosmosDenomSchema, a2 as cosmosNetworkSchema, a3 as isContractCall, a4 as isContractEvent, a5 as isEvmChainId, a6 as isNftCollection, a7 as isSolanaProgram, a8 as maxWalletEventLogs, a9 as maxWalletEventLookback, aa as maxWalletTransactionLookback, ab as maxWalletTransactions, ac as parseContractCall, ad as parseContractEvent, ae as parseContractFunction, af as parseNftCollection } from './wallet-B7e06v4m.js';
+import { N as NftCollection, q as ContractCall, r as ContractEvent, s as SolanaProgram, t as WalletBalanceSourceQuery, u as WalletTransaction, v as WalletInstruction, e as ProfileReferral, w as WalletReader } from './wallet-Btng186v.js';
+export { x as ContractCallParts, y as ContractCallReturnType, z as ContractEventInput, B as ContractEventParts, D as ContractFunction, E as CosmosDenom, a as CosmosNetwork, F as EvmChainId, G as NftCollectionParts, H as NftStandard, I as WalletBalance, J as WalletBalanceChange, o as WalletBalanceQuery, K as WalletBalanceSample, M as WalletCall, Q as WalletCallArgument, R as WalletCallQuery, T as WalletDelegations, U as WalletDelegationsQuery, V as WalletEventCondition, X as WalletEventValue, Y as WalletEvents, Z as WalletEventsQuery, _ as WalletNfts, $ as WalletNftsQuery, a0 as WalletTransactions, a1 as WalletTransactionsQuery, a2 as cosmosDenomSchema, a3 as cosmosNetworkSchema, a4 as isContractCall, a5 as isContractEvent, a6 as isEvmChainId, a7 as isNftCollection, a8 as isSolanaProgram, a9 as maxWalletEventLogs, aa as maxWalletEventLookback, ab as maxWalletTransactionLookback, ac as maxWalletTransactions, ad as parseContractCall, ae as parseContractEvent, af as parseContractFunction, ag as parseNftCollection } from './wallet-Btng186v.js';
 import * as z from 'zod';
 export { z } from 'zod';
-import { g as badgeDeclarationSchema, h as OfferAuthoring, B as Badge } from './offers-Hw2P6tcK.js';
+import { g as badgeDeclarationSchema, h as OfferAuthoring, B as Badge } from './offers-BpYenB9i.js';
 import { a as StreakPolicy, Q as QuizContent } from './streaks-0YuipsUQ.js';
-import { S as Setting, A as AmountSetting, B as BalanceChain, a as BoundSettings } from './dashboards-pVfclkyh.js';
-export { D as DashboardInput, b as DashboardPanelInput, e as defineDashboard } from './dashboards-pVfclkyh.js';
-import { e as TelegramReader, P as Prerequisite, b as TextEvidence, U as UrlEvidence, c as TextOptions, d as UrlOptions } from './submission-input-ChL1aYNH.js';
-export { f as TelegramChatMember, g as TelegramChatMemberStatus, h as TelegramConnection, i as TelegramMessageData, j as TelegramReactionData, k as balanceAtLeast, l as completed, m as inGroup } from './submission-input-ChL1aYNH.js';
-import { I as ImageReader, X as XReader } from './limits-pE04y9O2.js';
-export { L as Limits, l as limits } from './limits-pE04y9O2.js';
+import { S as Setting, A as AmountSetting, B as BalanceChain, a as BoundSettings } from './dashboards-jGPM3AxF.js';
+export { D as DashboardInput, b as DashboardPanelInput, e as defineDashboard } from './dashboards-jGPM3AxF.js';
+import { e as TelegramReader, P as Prerequisite, b as TextEvidence, U as UrlEvidence, c as TextOptions, d as UrlOptions } from './submission-input-C152xIdn.js';
+export { f as TelegramChatMember, g as TelegramChatMemberStatus, h as TelegramConnection, i as TelegramMessageData, j as TelegramReactionData, k as balanceAtLeast, l as completed, m as inGroup } from './submission-input-C152xIdn.js';
+import { I as ImageReader, X as XReader } from './limits-C4RzrOV4.js';
+export { L as Limits, l as limits } from './limits-C4RzrOV4.js';
 export { f as formatUnits, p as parseUnits } from './units-CwgsPB_r.js';
 
 declare function defineBadge(input: z.input<typeof badgeDeclarationSchema>): {
@@ -823,26 +823,27 @@ declare const settings: {
         decimals?: number;
     }): AmountSetting<z.ZodDefault<z.ZodString>>;
     /**
-     * A chain `ctx.wallet.balance()` reads: `"solana"` (or Solana mainnet's CAIP-2 ID), or an EVM
-     * chain's CAIP-2 ID such as `"eip155:8453"`. Typed as the query's chain, so it passes to
+     * A chain `ctx.wallet.balance()` reads: `"solana"` (or Solana mainnet's CAIP-2 ID), Solana
+     * devnet's CAIP-2 ID, or an EVM chain's CAIP-2 ID such as `"eip155:8453"`. Typed as the query's chain, so it passes to
      * `ctx.wallet.balance({ chain })` as it is.
      */
     chain(options: Label & {
         default: BalanceChain;
-    }): Setting<"text", z.ZodDefault<z.ZodPipe<z.ZodString, z.ZodTransform<"solana" | "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp" | `eip155:${number}`, string>>>>;
+    }): Setting<"text", z.ZodDefault<z.ZodPipe<z.ZodString, z.ZodTransform<"solana" | "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp" | "solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1" | `eip155:${number}`, string>>>>;
     /**
      * An NFT collection `ctx.wallet.nfts()` reads, as a CAIP-19 asset type: an EVM chain, the
      * standard and the contract, such as `"eip155:1/erc721:0x…"`, or `"eip155:8453/erc1155:0x…/1"` for
-     * one ERC-1155 token ID; or a Metaplex collection NFT's mint on Solana mainnet,
-     * `"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp/nft:<mint>"`. Relay checks it when the collection is
+     * one ERC-1155 token ID; or a Solana cluster and a Metaplex collection NFT's mint there,
+     * `"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp/nft:<mint>"` on mainnet or
+     * `"solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1/nft:<mint>"` on devnet. Relay checks it when the collection is
      * published or edited: an EVM chain must be one `ctx.wallet.balance()` reads and the contract
      * must report the standard through ERC-165 `supportsInterface`; a Solana mint must be a Metaplex
-     * collection NFT. Typed as the query's collection, so it passes to
+     * collection NFT on its cluster. Typed as the query's collection, so it passes to
      * `ctx.wallet.nfts({ collection })` as it is.
      */
     nft(options: Label & {
         default: NftCollection;
-    }): Setting<"text", z.ZodDefault<z.ZodPipe<z.ZodString, z.ZodTransform<`eip155:${number}/erc721:0x${string}` | `eip155:${number}/erc1155:0x${string}/${string}` | `solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp/nft:${string}`, string>>>>;
+    }): Setting<"text", z.ZodDefault<z.ZodPipe<z.ZodString, z.ZodTransform<`eip155:${number}/erc721:0x${string}` | `eip155:${number}/erc1155:0x${string}/${string}` | `solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp/nft:${string}` | `solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1/nft:${string}`, string>>>>;
     /**
      * A contract function `ctx.wallet.call()` reads: the contract's CAIP-10 account ID on an EVM
      * chain, a space, and the function's human-readable signature, such as
@@ -867,9 +868,9 @@ declare const settings: {
         default: ContractEvent;
     }): Setting<"text", z.ZodDefault<z.ZodPipe<z.ZodString, z.ZodTransform<`eip155:${number}:0x${string} ${string}`, string>>>>;
     /**
-     * A Solana mainnet program `ctx.wallet.transactions()` reads: its base58 address, such as
-     * Jupiter's `"JUP6LkbZbjS1jKKwapdHNy74zcZ3tLUZoi5QNyVTaV4"`. Relay checks it when it is published
-     * or edited: the account must exist and be an executable program.
+     * A Solana program `ctx.wallet.transactions()` reads: its base58 address, such as Jupiter's
+     * `"JUP6LkbZbjS1jKKwapdHNy74zcZ3tLUZoi5QNyVTaV4"`. Relay checks it when it is published or
+     * edited: the account must be an executable program on Solana mainnet or devnet.
      */
     solanaProgram(options: Label & {
         default: SolanaProgram;

package/dist/authoring.js

@@ -6,14 +6,14 @@ import {
   sourceDataSchema,
   sourceRoles,
   validateQuestShape
-} from "./chunk-5DYS2OIP.js";
+} from "./chunk-MVQQDPQX.js";
 import {
   defineDashboard,
   tiktokVideoBodySchema,
   tiktokVideoMetrics,
   youtubeShortBodySchema,
   youtubeShortMetrics
-} from "./chunk-QYHEHMCG.js";
+} from "./chunk-QYC3CZVD.js";
 import {
   CapabilityError,
   capabilityErrorCodes
@@ -24,7 +24,7 @@ import {
   engagementScoreSchema,
   offerAuthoringSchema,
   referralAuthoringSchema
-} from "./chunk-5LD5DKOM.js";
+} from "./chunk-5DZNMLDM.js";
 import {
   announcementSchema,
   authorBudgetSchema,
@@ -64,6 +64,7 @@ import {
   isContractEvent,
   isEvmChainId,
   isNftCollection,
+  isSolanaNetwork,
   isSolanaProgram,
   leaderboardAuthoringSchema,
   ledgerKey,
@@ -120,7 +121,7 @@ import {
   whereSettings,
   xSearchSourceSchema,
   youtubeShortsNamespace
-} from "./chunk-XCEGNKGH.js";
+} from "./chunk-P33ZAJMS.js";
 import {
   parseDefinition
 } from "./chunk-FGXLXENM.js";
@@ -477,13 +478,13 @@ function walletBalanceSource(query) {
   if (given !== null && typeof given !== "string") {
     throw new Error("wallet.balances() takes the token as a string");
   }
-  if (chain === "solana" || chain === solanaMainnet) {
+  if (chain === "solana" || typeof chain === "string" && isSolanaNetwork(chain)) {
     if (given !== null && !solanaAddressSchema.safeParse(given).success) {
       throw new Error(
         "wallet.balances() on Solana takes an SPL or Token-2022 mint address (base58)"
       );
     }
-    return { chain: solanaMainnet, token: given };
+    return { chain: chain === "solana" ? solanaMainnet : chain, token: given };
   }
   if (typeof chain === "string" && isEvmChainId(chain)) {
     if (given !== null && !/^0x[0-9a-fA-F]{40}$/.test(given)) {
@@ -629,14 +630,14 @@ var settings = {
     );
   },
   /**
-   * A chain `ctx.wallet.balance()` reads: `"solana"` (or Solana mainnet's CAIP-2 ID), or an EVM
-   * chain's CAIP-2 ID such as `"eip155:8453"`. Typed as the query's chain, so it passes to
+   * A chain `ctx.wallet.balance()` reads: `"solana"` (or Solana mainnet's CAIP-2 ID), Solana
+   * devnet's CAIP-2 ID, or an EVM chain's CAIP-2 ID such as `"eip155:8453"`. Typed as the query's chain, so it passes to
    * `ctx.wallet.balance({ chain })` as it is.
    */
   chain(options) {
     if (!isBalanceChain(options.default)) {
       throw new Error(
-        `settings.chain() takes "solana" or an EVM chain ID such as "eip155:8453" as its default, not "${options.default}"`
+        `settings.chain() takes "solana", a Solana cluster ID or an EVM chain ID such as "eip155:8453" as its default, not "${options.default}"`
       );
     }
     const field = {
@@ -655,11 +656,12 @@ var settings = {
   /**
    * An NFT collection `ctx.wallet.nfts()` reads, as a CAIP-19 asset type: an EVM chain, the
    * standard and the contract, such as `"eip155:1/erc721:0x…"`, or `"eip155:8453/erc1155:0x…/1"` for
-   * one ERC-1155 token ID; or a Metaplex collection NFT's mint on Solana mainnet,
-   * `"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp/nft:<mint>"`. Relay checks it when the collection is
+   * one ERC-1155 token ID; or a Solana cluster and a Metaplex collection NFT's mint there,
+   * `"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp/nft:<mint>"` on mainnet or
+   * `"solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1/nft:<mint>"` on devnet. Relay checks it when the collection is
    * published or edited: an EVM chain must be one `ctx.wallet.balance()` reads and the contract
    * must report the standard through ERC-165 `supportsInterface`; a Solana mint must be a Metaplex
-   * collection NFT. Typed as the query's collection, so it passes to
+   * collection NFT on its cluster. Typed as the query's collection, so it passes to
    * `ctx.wallet.nfts({ collection })` as it is.
    */
   nft(options) {
@@ -737,9 +739,9 @@ var settings = {
     );
   },
   /**
-   * A Solana mainnet program `ctx.wallet.transactions()` reads: its base58 address, such as
-   * Jupiter's `"JUP6LkbZbjS1jKKwapdHNy74zcZ3tLUZoi5QNyVTaV4"`. Relay checks it when it is published
-   * or edited: the account must exist and be an executable program.
+   * A Solana program `ctx.wallet.transactions()` reads: its base58 address, such as Jupiter's
+   * `"JUP6LkbZbjS1jKKwapdHNy74zcZ3tLUZoi5QNyVTaV4"`. Relay checks it when it is published or
+   * edited: the account must be an executable program on Solana mainnet or devnet.
    */
   solanaProgram(options) {
     if (!isSolanaProgram(options.default)) {

package/dist/{automatic-outcomes-BzAvfcpd.d.ts → automatic-outcomes-BEnPn4Uh.d.ts}

@@ -1,6 +1,6 @@
 import * as z from 'zod';
-import { b as AttemptStatus, X as RewardType } from './accounts-_lNsiR2k.js';
-import { S as SkipEnrollment } from './tracker-data-Bl-qPIvZ.js';
+import { b as AttemptStatus, X as RewardType } from './accounts-C2O8mpB8.js';
+import { S as SkipEnrollment } from './tracker-data-BqY-9Vu-.js';
 
 declare const collectionCodeSchema: z.ZodString;
 declare const collectionPassSchema: z.ZodObject<{

package/dist/avatar.d.ts

@@ -1,4 +1,4 @@
-import { P as ProfileAvatar, L as LinkedWallet } from './wallet-B7e06v4m.js';
+import { P as ProfileAvatar, L as LinkedWallet } from './wallet-Btng186v.js';
 import 'zod';
 
 /**

package/dist/browser.d.ts

@@ -1,17 +1,17 @@
-import { o as SubmissionStore, f as RelayClientOptions, R as RelayClient } from './client-Cze4lfwA.js';
-export { C as CosmosChains, D as DiscoveredWallet, E as Eip1193Provider, a as EmailSignInOption, K as KeplrLike, O as OAuthSignInOption, P as ProviderSignInOption, S as SignInClient, b as SignInIcon, c as SignInMethods, d as SignInOption, e as SignInOptions, f as SignInUnavailable, g as SignInWallet, h as SolanaInjectedProvider, i as StandardWallet, j as StandardWalletAccount, T as TelegramSignInOption, W as WalletSignInOption, k as cosmosChainList, l as cosmosSigner, m as discoverCosmosWallets, n as discoverEvmWallets, o as discoverSignInWallets, p as discoverSolanaWallets, q as evmSigner, s as signInOptions, r as solanaSigner, t as telegramMiniAppInitData, w as walletStandardSolanaSigner } from './telegram-browser-BFs4u7lC.js';
+import { o as SubmissionStore, f as RelayClientOptions, R as RelayClient } from './client-CZPewB9h.js';
+export { C as CosmosChains, D as DiscoveredWallet, E as Eip1193Provider, a as EmailSignInOption, K as KeplrLike, O as OAuthSignInOption, P as ProviderSignInOption, S as SignInClient, b as SignInIcon, c as SignInMethods, d as SignInOption, e as SignInOptions, f as SignInUnavailable, g as SignInWallet, h as SolanaInjectedProvider, i as StandardWallet, j as StandardWalletAccount, T as TelegramSignInOption, W as WalletSignInOption, k as cosmosChainList, l as cosmosSigner, m as discoverCosmosWallets, n as discoverEvmWallets, o as discoverSignInWallets, p as discoverSolanaWallets, q as evmSigner, s as signInOptions, r as solanaSigner, t as telegramMiniAppInitData, w as walletStandardSolanaSigner } from './telegram-browser-657QqiQl.js';
 export { H as HostEnvironment, g as getHostEnvironment } from './host-environment-FN4zg3hw.js';
 import { M as MemberSummary } from './participant-activity-DXRq4s6K.js';
-import './accounts-_lNsiR2k.js';
+import './accounts-C2O8mpB8.js';
 import 'zod';
-import './tracker-data-Bl-qPIvZ.js';
-import './wallet-B7e06v4m.js';
-import './submission-input-ChL1aYNH.js';
+import './tracker-data-BqY-9Vu-.js';
+import './wallet-Btng186v.js';
+import './submission-input-C152xIdn.js';
 import './request-error-D_dUPLwo.js';
-import './reward-deliveries-BCV8hznc.js';
-import './catalog-ByZMRS7I.js';
+import './reward-deliveries-BOWpMytr.js';
+import './catalog-CbiftcxQ.js';
 import './action-9Xl0StBg.js';
-import './sign-in-providers-BAkGjSXo.js';
+import './sign-in-providers-BRYVOSlG.js';
 
 /**
  * The member's time at the real instant `at` (default now), in epoch milliseconds: what an app

package/dist/browser.js

@@ -12,22 +12,23 @@ import {
   signInOptions,
   solanaSigner,
   walletStandardSolanaSigner
-} from "./chunk-PNVQ4RBG.js";
+} from "./chunk-BMJHFWVT.js";
 import {
   telegramMiniAppInitData
 } from "./chunk-FWLQ5XCS.js";
-import "./chunk-QZNLSK4U.js";
+import "./chunk-Z2Z5DBNW.js";
 import "./chunk-BQXRCJ3N.js";
 import "./chunk-2HHZV7U3.js";
 import {
   getHostEnvironment
 } from "./chunk-UYVJZR33.js";
-import "./chunk-5BMZZDGY.js";
-import "./chunk-TCYDFNV4.js";
-import "./chunk-CGUL4MRE.js";
-import "./chunk-7MQCQYEE.js";
-import "./chunk-5LD5DKOM.js";
-import "./chunk-XCEGNKGH.js";
+import "./chunk-UWUS4OOV.js";
+import "./chunk-Q6KTTVOI.js";
+import "./chunk-5SBA6X5X.js";
+import "./chunk-NRMQVK2W.js";
+import "./chunk-DSJ46QLB.js";
+import "./chunk-5DZNMLDM.js";
+import "./chunk-P33ZAJMS.js";
 import "./chunk-FGXLXENM.js";
 export {
   browserSubmissionStore,

package/dist/{catalog-ByZMRS7I.d.ts → catalog-CbiftcxQ.d.ts}

@@ -1,5 +1,5 @@
-import { S as SolanaIdlSource } from './wallet-B7e06v4m.js';
-import { b as AttemptStatus, V as AttemptCodeSource, W as IntegrationModuleProvider, X as RewardType, Y as questDescriptionSchema } from './accounts-_lNsiR2k.js';
+import { S as SolanaIdlSource } from './wallet-Btng186v.js';
+import { b as AttemptStatus, V as AttemptCodeSource, W as IntegrationModuleProvider, X as RewardType, Y as questDescriptionSchema } from './accounts-C2O8mpB8.js';
 import * as z from 'zod';
 
 /**

package/dist/{chunk-5LD5DKOM.js → chunk-5DZNMLDM.js}

@@ -12,7 +12,7 @@ import {
   resourceHandle,
   responseShape,
   tierRewardSchema
-} from "./chunk-XCEGNKGH.js";
+} from "./chunk-P33ZAJMS.js";
 import {
   parseDefinition
 } from "./chunk-FGXLXENM.js";

package/dist/{chunk-TCYDFNV4.js → chunk-5SBA6X5X.js}

@@ -4,7 +4,7 @@ import {
 
 // package.json
 var name = "@domino-sdk/relay";
-var version = "1.66.0";
+var version = "1.67.0";
 
 // src/client-identity.ts
 function clientIdentity() {

package/dist/{chunk-PNVQ4RBG.js → chunk-BMJHFWVT.js}

@@ -1,42 +1,18 @@
 import {
   createRelayClient
-} from "./chunk-QZNLSK4U.js";
+} from "./chunk-Z2Z5DBNW.js";
+import {
+  base58
+} from "./chunk-UWUS4OOV.js";
 import {
   cosmosChain
-} from "./chunk-XCEGNKGH.js";
+} from "./chunk-P33ZAJMS.js";
 import {
   RelayErrorCode,
   asRelayError,
   clientError
 } from "./chunk-FGXLXENM.js";
 
-// src/base58.ts
-var alphabet = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
-function base58(bytes) {
-  let zeros = 0;
-  while (zeros < bytes.length && bytes[zeros] === 0) {
-    zeros++;
-  }
-  const digits = [];
-  for (let index = zeros; index < bytes.length; index++) {
-    let carry = bytes[index];
-    for (let digit = 0; digit < digits.length; digit++) {
-      carry += digits[digit] * 256;
-      digits[digit] = carry % 58;
-      carry = Math.floor(carry / 58);
-    }
-    while (carry > 0) {
-      digits.push(carry % 58);
-      carry = Math.floor(carry / 58);
-    }
-  }
-  let result = "1".repeat(zeros);
-  for (let digit = digits.length - 1; digit >= 0; digit--) {
-    result += alphabet[digits[digit]];
-  }
-  return result;
-}
-
 // src/wallet-browser.ts
 function injected() {
   return typeof window === "undefined" ? void 0 : window;

package/dist/{chunk-7MQCQYEE.js → chunk-DSJ46QLB.js}

@@ -19,7 +19,7 @@ import {
   storedQuestDescriptionSchema,
   storedReviewModeSchema,
   tieredRewardReferenceSchema
-} from "./chunk-XCEGNKGH.js";
+} from "./chunk-P33ZAJMS.js";
 
 // src/participant-activity.ts
 import * as z from "zod";

package/dist/{chunk-KHXCURXB.js → chunk-JK3XV2CR.js}

@@ -1,16 +1,20 @@
+import {
+  base58Bytes
+} from "./chunk-UWUS4OOV.js";
 import {
   createHttpExchange,
   uncertainStatuses
-} from "./chunk-5BMZZDGY.js";
+} from "./chunk-Q6KTTVOI.js";
 import {
   MANAGEMENT_TIMEOUT,
   lifetime,
   retrying,
   validTimeout
-} from "./chunk-TCYDFNV4.js";
+} from "./chunk-5SBA6X5X.js";
 import {
+  evmAddressSchema,
   knownResponse
-} from "./chunk-XCEGNKGH.js";
+} from "./chunk-P33ZAJMS.js";
 import {
   RequestError,
   isRequestError
@@ -30,6 +34,88 @@ function questConfiguration(release) {
   };
 }
 
+// src/wallet-signatures.ts
+import { secp256k1 } from "@noble/curves/secp256k1.js";
+import { keccak_256 } from "@noble/hashes/sha3.js";
+var text = /* @__PURE__ */ (() => new TextEncoder())();
+var hex = (bytes) => Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
+function evmChecksumAddress(address) {
+  const lower = address.slice(2).toLowerCase();
+  const hash = hex(keccak_256(text.encode(lower)));
+  return "0x" + Array.from(
+    lower,
+    (character, index) => parseInt(hash[index], 16) >= 8 ? character.toUpperCase() : character
+  ).join("");
+}
+function canonicalWalletAddress(chain, address) {
+  if (chain === "solana") {
+    return base58Bytes(address, 32) ? address : null;
+  }
+  if (!evmAddressSchema.safeParse(address).success) {
+    return null;
+  }
+  const digits = address.slice(2);
+  const checksummed = evmChecksumAddress(address);
+  const oneCase = digits === digits.toLowerCase() || digits === digits.toUpperCase();
+  return oneCase || checksummed === address ? checksummed : null;
+}
+function evmSigner(message, signature) {
+  if (!/^0x[0-9a-fA-F]{130}$/.test(signature)) {
+    return null;
+  }
+  const bytes = Uint8Array.from(
+    signature.slice(2).match(/../g),
+    (pair) => parseInt(pair, 16)
+  );
+  const v = bytes[64];
+  const recovery = v >= 27 ? v - 27 : v;
+  if (recovery !== 0 && recovery !== 1) {
+    return null;
+  }
+  const body = text.encode(message);
+  const digest = keccak_256(
+    new Uint8Array([
+      ...text.encode(`Ethereum Signed Message:
+${body.length}`),
+      ...body
+    ])
+  );
+  try {
+    const key = secp256k1.Signature.fromBytes(bytes.slice(0, 64), "compact").addRecoveryBit(recovery).recoverPublicKey(digest).toBytes(false);
+    return "0x" + hex(keccak_256(key.slice(1)).slice(-20));
+  } catch {
+    return null;
+  }
+}
+async function walletSignatureValid(input) {
+  if (input.chain === "eip155") {
+    const signer = evmSigner(input.message, input.signature);
+    return signer !== null && signer === input.address.toLowerCase();
+  }
+  const key = base58Bytes(input.address, 32);
+  const signature = base58Bytes(input.signature, 64);
+  if (!key || !signature) {
+    return false;
+  }
+  try {
+    const imported = await crypto.subtle.importKey(
+      "raw",
+      key,
+      "Ed25519",
+      false,
+      ["verify"]
+    );
+    return await crypto.subtle.verify(
+      "Ed25519",
+      imported,
+      signature,
+      text.encode(input.message)
+    );
+  } catch {
+    return false;
+  }
+}
+
 // src/server/errors.ts
 import * as z from "zod";
 var ManagementErrorCode = {
@@ -314,6 +400,9 @@ function containsReferralIntegrationReward(value) {
 
 export {
   questConfiguration,
+  hex,
+  canonicalWalletAddress,
+  walletSignatureValid,
   ManagementErrorCode,
   managementErrorSchema,
   isManagementError,

package/dist/{chunk-M66Y5OMJ.js → chunk-KUNPCDN6.js}

@@ -6,13 +6,13 @@ import {
   imageSightingsSchema,
   imageUploadsSchema,
   publishedImageSchema
-} from "./chunk-ANVAUOJP.js";
+} from "./chunk-X3FMVRMM.js";
 import {
   dashboardArtifactSchema,
   dashboardIssue,
   dashboardPreviewSchema,
   normalizeDashboard
-} from "./chunk-QYHEHMCG.js";
+} from "./chunk-QYC3CZVD.js";
 import {
   authProvidersSchema,
   collectionPassSchema,
@@ -23,7 +23,7 @@ import {
   questOutcomePageSchema,
   questOutcomeSchema,
   rewardDeliveriesSchema
-} from "./chunk-CGUL4MRE.js";
+} from "./chunk-NRMQVK2W.js";
 import {
   catalogDeploymentSchema,
   collectionViewSchema,
@@ -37,7 +37,7 @@ import {
   questExperienceSchema,
   questTypeVersionSchema,
   questViewSchema
-} from "./chunk-7MQCQYEE.js";
+} from "./chunk-DSJ46QLB.js";
 import {
   engagementArtifactSchema,
   engagementBoundaryPageSchema,
@@ -52,7 +52,7 @@ import {
   referralDefinitionSchema,
   referralHistorySchema,
   referralSummarySchema
-} from "./chunk-5LD5DKOM.js";
+} from "./chunk-5DZNMLDM.js";
 import {
   accountConnectionSchema,
   attemptSchema,
@@ -117,7 +117,7 @@ import {
   walletSignInNetworksSchema,
   walletTransactionsSchema,
   whereSettings
-} from "./chunk-XCEGNKGH.js";
+} from "./chunk-P33ZAJMS.js";
 
 // src/deployments.ts
 import * as z from "zod";

package/dist/{chunk-5DYS2OIP.js → chunk-MVQQDPQX.js}

@@ -5,7 +5,7 @@ import {
   isKnownTrackerSource,
   trackerDataSchema,
   xAccountRoles
-} from "./chunk-XCEGNKGH.js";
+} from "./chunk-P33ZAJMS.js";
 
 // src/quest-shape.ts
 function validateQuestShape(description, options = {}) {

package/dist/{chunk-CGUL4MRE.js → chunk-NRMQVK2W.js}

@@ -10,7 +10,7 @@ import {
   skipEnrollmentSchema,
   telegramSignInMethodsSchema,
   walletSignInNetworksSchema
-} from "./chunk-XCEGNKGH.js";
+} from "./chunk-P33ZAJMS.js";
 
 // src/sign-in-providers.ts
 import * as z from "zod";