@stamprally/core 0.6.0 → 0.7.0

package/dist/index.d.cts

@@ -110,6 +110,116 @@ type Result<T, E> = {
     readonly error: E;
 };
 
+/** A human-readable value that may be supplied in one or more locales. */
+type UniversalLocalizedText<TLocale extends string = string> = string | Partial<Record<TLocale, string>>;
+/** A link to an entity owned by the host application or another system. */
+interface ExternalReference$1 {
+    readonly type: string;
+    readonly id: string;
+    readonly url?: string;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+/** Server-only verification material. Never send this shape to a browser. */
+type VerificationCondition = {
+    readonly type: "qr";
+    readonly secretToken: string;
+    readonly qrEntryUrl?: string;
+} | {
+    readonly type: "passcode";
+    readonly code: string;
+    readonly caseSensitive?: boolean;
+} | {
+    readonly type: "gps";
+    readonly latitude: number;
+    readonly longitude: number;
+    readonly radiusMeters: number;
+} | {
+    readonly type: "custom";
+    readonly validatorName: string;
+    readonly secretParams?: Readonly<Record<string, unknown>>;
+};
+/** Safe condition metadata intended for a participant client. */
+type PublicCheckInCondition = {
+    readonly type: "qr";
+    readonly qrEntryUrl: string;
+} | {
+    readonly type: "passcode";
+} | {
+    readonly type: "gps";
+    readonly latitude: number;
+    readonly longitude: number;
+    readonly radiusMeters: number;
+} | {
+    readonly type: "custom";
+    readonly validatorName: string;
+};
+interface UniversalSpotItem<TLocale extends string = string, TMeta extends Record<string, unknown> = Record<string, unknown>> {
+    readonly id: string;
+    readonly orderIndex: number;
+    readonly name: UniversalLocalizedText<TLocale>;
+    readonly description?: UniversalLocalizedText<TLocale>;
+    readonly hint?: UniversalLocalizedText<TLocale>;
+    readonly imageUrl?: string;
+    readonly iconUrl?: string;
+    readonly redirectUrlAfterClaim?: string;
+    readonly externalReferences?: ReadonlyArray<ExternalReference$1>;
+    readonly metadata?: TMeta;
+    readonly conditions: ReadonlyArray<VerificationCondition>;
+    readonly prerequisites?: ReadonlyArray<string>;
+}
+type AdminReward<TLocale extends string = string> = {
+    readonly id: string;
+    readonly title: UniversalLocalizedText<TLocale>;
+    readonly description?: UniversalLocalizedText<TLocale>;
+    readonly type: "digital" | "in_person";
+    readonly redemptionMethod: "manual_slide" | "staff_passcode" | "view_only" | "server_claim";
+    readonly requiredStampCount: number;
+    readonly conditions?: ReadonlyArray<RewardUnlockCondition$1>;
+    readonly stockLimit?: number;
+    readonly userClaimLimit?: number;
+    readonly staffPasscode?: string;
+    readonly digitalContentUrl?: string;
+};
+type PublicReward<TLocale extends string = string> = Omit<AdminReward<TLocale>, "staffPasscode" | "digitalContentUrl">;
+type RewardUnlockCondition$1 = {
+    readonly type: "stamp_count";
+    readonly count: number;
+} | {
+    readonly type: "stamps";
+    readonly stampIds: ReadonlyArray<string>;
+} | {
+    readonly type: "all" | "any";
+    readonly conditions: ReadonlyArray<RewardUnlockCondition$1>;
+};
+interface AdminRallyConfig<TLocale extends string = string, TMeta extends Record<string, unknown> = Record<string, unknown>> {
+    readonly id: string;
+    readonly version: string;
+    readonly title: UniversalLocalizedText<TLocale>;
+    readonly description?: UniversalLocalizedText<TLocale>;
+    readonly theme?: SheetTheme;
+    readonly spots: ReadonlyArray<UniversalSpotItem<TLocale, TMeta>>;
+    readonly rewards: ReadonlyArray<AdminReward<TLocale>>;
+    readonly serverEndpoint?: string;
+    readonly metadata?: TMeta;
+}
+interface PublicRallyConfig<TLocale extends string = string, TMeta extends Record<string, unknown> = Record<string, unknown>> {
+    readonly id: string;
+    readonly version: string;
+    readonly title: UniversalLocalizedText<TLocale>;
+    readonly description?: UniversalLocalizedText<TLocale>;
+    readonly theme?: SheetTheme;
+    readonly spots: ReadonlyArray<Omit<UniversalSpotItem<TLocale, TMeta>, "conditions"> & {
+        readonly conditions: ReadonlyArray<PublicCheckInCondition>;
+    }>;
+    readonly rewards: ReadonlyArray<PublicReward<TLocale>>;
+    readonly serverEndpoint?: string;
+    readonly metadata?: TMeta;
+}
+/** Produce the browser-safe projection without mutating the admin config. */
+declare function toPublicRallyConfig<TLocale extends string, TMeta extends Record<string, unknown>>(config: AdminRallyConfig<TLocale, TMeta>): PublicRallyConfig<TLocale, TMeta>;
+/** Runtime guard for values crossing the public configuration boundary. */
+declare function isPublicRallyConfig(value: unknown): value is PublicRallyConfig;
+
 type SupportedLocale = "ja" | "en";
 type LocalizedString<TLocale extends string = SupportedLocale> = Record<TLocale, string>;
 type LocalizedText$1<TLocale extends string = string> = string | Partial<Record<TLocale, string>>;
@@ -152,6 +262,10 @@ interface SpotItem<TLocale extends string = SupportedLocale, TMeta extends Recor
     readonly externalUrl?: string;
     readonly redirectUrlAfterClaim?: string;
     readonly metadata?: TMeta;
+    /** Canonical universal-model conditions. Legacy `condition` remains for engine internals. */
+    readonly conditions?: ReadonlyArray<VerificationCondition>;
+    readonly externalReferences?: ReadonlyArray<ExternalReference$1>;
+    readonly prerequisites?: ReadonlyArray<string>;
     readonly dependsOn?: ReadonlyArray<string>;
     readonly requiresStampIds?: ReadonlyArray<string>;
 }
@@ -231,13 +345,28 @@ declare function toLocalizedString<TLocale extends string>(text: LocalizedText$1
 declare function migrateRallyConfig<TLocale extends string = SupportedLocale>(raw: unknown): RallyConfig<TLocale>;
 
 type PublicRewardItem<TLocale extends string = string> = Omit<RewardItem<TLocale>, "staffPasscode">;
-type PublicRallyConfig<TLocale extends string = string, TMeta extends Record<string, unknown> = Record<string, unknown>> = Omit<RallyConfig<TLocale, TMeta>, "rewards"> & {
+type LegacyPublicRallyConfig<TLocale extends string = string, TMeta extends Record<string, unknown> = Record<string, unknown>> = Omit<RallyConfig<TLocale, TMeta>, "rewards"> & {
     readonly rewards?: ReadonlyArray<PublicRewardItem<TLocale>>;
 };
-declare function stripSensitiveConfig<TLocale extends string, TMeta extends Record<string, unknown>>(config: RallyConfig<TLocale, TMeta>): PublicRallyConfig<TLocale, TMeta>;
+declare function stripSensitiveConfig<TLocale extends string, TMeta extends Record<string, unknown>>(config: AdminRallyConfig<TLocale, TMeta>): PublicRallyConfig<TLocale, TMeta>;
+declare function stripSensitiveConfig<TLocale extends string, TMeta extends Record<string, unknown>>(config: RallyConfig<TLocale, TMeta>): LegacyPublicRallyConfig<TLocale, TMeta>;
 
 declare const THEME_PRESETS: ReadonlyArray<ThemePreset>;
 
+interface UniversalValidationError {
+    readonly path: string;
+    readonly code: "INVALID_TYPE" | "REQUIRED" | "EMPTY_STRING" | "DUPLICATE_ID" | "INVALID_COORDINATES" | "INVALID_RADIUS" | "INVALID_VERSION" | "INVALID_REWARD" | "CYCLE_DETECTED" | "SECRET_IN_PUBLIC_CONFIG";
+    readonly message: string;
+}
+interface UniversalValidationResult {
+    readonly valid: boolean;
+    readonly errors: ReadonlyArray<UniversalValidationError>;
+}
+declare function validateAdminRallyConfig(value: unknown): UniversalValidationResult;
+declare function validatePublicRallyConfig(value: unknown): UniversalValidationResult;
+declare function isAdminRallyConfig(value: unknown): value is AdminRallyConfig;
+declare function isPublicRallyConfigShape(value: unknown): value is PublicRallyConfig;
+
 declare const CURRENT_RALLY_CONFIG_VERSION = 2;
 interface ValidationError {
     readonly path: string;
@@ -449,7 +578,7 @@ declare class StampRallyClient {
         readonly events: true;
     }): () => void;
     subscribeEvents(listener: StampRallyEventListener): () => void;
-    updateConfig(newConfig: PublicRallyConfig): Promise<StampRallyState>;
+    updateConfig(newConfig: LegacyPublicRallyConfig): Promise<StampRallyState>;
     notifyRewardClaimed(rewardId: string, state?: StampRallyState | null): void;
     notifySyncCompleted(state?: StampRallyState | null): void;
     init(): Promise<StampRallyState>;
@@ -741,4 +870,4 @@ type SnapshotTokenVerification<T extends SnapshotTokenPayload = SnapshotTokenPay
 declare function createSignedSnapshotToken<T extends SnapshotTokenPayload>(payload: T, secretKey: SnapshotSecretKey): Promise<string>;
 declare function verifySnapshotToken<T extends SnapshotTokenPayload = SnapshotTokenPayload>(token: string, secretKey: SnapshotSecretKey, now?: number): Promise<SnapshotTokenVerification<T>>;
 
-export { type AuditLoggerAdapter, type AuthContextAdapter, CURRENT_RALLY_CONFIG_VERSION, type CheckInAttemptAuditEntry, type CheckInContext, type CheckInErrorCode, type CheckInInput, type CheckInResult$1 as CheckInResult, type ClaimTicketOptions, type Clock, type CompositeConditionFailure, type ConditionMatch, type ConditionMismatch, type ConditionVerifierPlugin, type ConsumeResult, type ConsumeRewardParams, DEFAULT_SHEET_THEME, type DetectorError, type DetectorErrorCode, type DetectorKind, type DetectorResult, type EventPublisherAdapter, type ExternalReference, type FontFamily, type GeoDetectorOptions, type GeoVerificationContext, type LocalizedText as HeadlessLocalizedText, type IdGeneratorAdapter, InMemoryStorage, IndexedDBAdapter, type IndexedDBAdapterOptions, LocalStorageAdapter, type LocalStorageAdapterOptions, type LocalStorageFailureMode, type LocaleDictionary, type LocalizedString, type LocalizedText$1 as LocalizedText, type Metadata, type NfcDetectorOptions, type PasscodeCondition, type ProcessStampValue, type PublicRallyConfig, type PublicRewardItem, type QrDetectorOptions, type RallyCompletedEvent, type RallyConfig, type RallyConfigValidationResult, type RallyDefinition, type RallyEvent, type RallyId, type RallyProgress, type RallySnapshot, type RedemptionMethod, type Result, type RewardConsumeError, type RewardItem, type RewardState, type RewardStatus, type RewardType, type RewardUnlockCondition, type SchemaVersion, type SecureTokenError, type SecureTokenErrorCode, type SecureTokenOptions, type SecureTokenPayload, type SecureTokenSecretKey, type SecureTokenVerification, type ServerRallyConfig, type SheetTheme, type SlotShape, type SnapshotSecretKey, type SnapshotTokenError, type SnapshotTokenErrorCode, type SnapshotTokenPayload, type SnapshotTokenVerification, type SpotDefinition, type SpotId, type SpotItem, type SpotVerificationSecret, type StampAcquiredEvent, type StampCondition, type StampDefinition, type StampError, StampRallyClient, type StampRallyClientEvent, type StampRallyEvent, type StampRallyEventListener, type StampRallyListener, type StampRallyProgress, type StampRallyState, type StampRecord$1 as StampRecord, type StampStorage, type StateMigrator, type StorageAdapter, StorageAdapterError, type StorageAdapterErrorCode, type StorageLike, type StorageOperation, type StorageSaveOutcome, type StorageSaveRequest, type StorageWarningHandler, type SupportedLocale, type SystemClockAdapter, THEME_PRESETS, type ThemePreset, type ThemePresetId, type TokenVerificationContext, type UserId, type ValidationError, type ValidationInput, type ValidationOutcome, type VerificationContext, type VerificationCoordinates, type VerificationRequirement, calculateDistanceMeters, calculateProgress, consumeReward, createClaimTicketNumber, createSecureToken, createSignedSnapshotToken, createUniqueClaimTicketNumber, evaluateCheckIn, evaluateCondition, evaluateConditionDetailed, exportProgressToken, getCurrentGeoContext, importProgressToken, isGeolocationSupported, isNfcSupported, isQrSupported, isRewardState, isStampRallyState, issueClaimTicketNumber, migrateRallyConfig, normalizePasscode, processStamp, readNfcContext, readQrContext, reconcileRewardStates, resolveLocalizedText, stripSensitiveConfig, toLocalizedString, validateRallyConfig, verifyPasscode, verifySecureToken, verifySnapshotToken };
+export { type AdminRallyConfig, type AdminReward, type AuditLoggerAdapter, type AuthContextAdapter, CURRENT_RALLY_CONFIG_VERSION, type CheckInAttemptAuditEntry, type CheckInContext, type CheckInErrorCode, type CheckInInput, type CheckInResult$1 as CheckInResult, type ClaimTicketOptions, type Clock, type CompositeConditionFailure, type ConditionMatch, type ConditionMismatch, type ConditionVerifierPlugin, type ConsumeResult, type ConsumeRewardParams, DEFAULT_SHEET_THEME, type DetectorError, type DetectorErrorCode, type DetectorKind, type DetectorResult, type EventPublisherAdapter, type ExternalReference$1 as ExternalReference, type FontFamily, type GeoDetectorOptions, type GeoVerificationContext, type LocalizedText as HeadlessLocalizedText, type IdGeneratorAdapter, InMemoryStorage, IndexedDBAdapter, type IndexedDBAdapterOptions, type LegacyPublicRallyConfig, LocalStorageAdapter, type LocalStorageAdapterOptions, type LocalStorageFailureMode, type LocaleDictionary, type LocalizedString, type LocalizedText$1 as LocalizedText, type Metadata, type NfcDetectorOptions, type PasscodeCondition, type ProcessStampValue, type PublicCheckInCondition, type PublicRallyConfig, type PublicReward, type PublicRewardItem, type QrDetectorOptions, type RallyCompletedEvent, type RallyConfig, type RallyConfigValidationResult, type RallyDefinition, type RallyEvent, type RallyId, type RallyProgress, type RallySnapshot, type RedemptionMethod, type Result, type RewardConsumeError, type RewardItem, type RewardState, type RewardStatus, type RewardType, type RewardUnlockCondition, type SchemaVersion, type SecureTokenError, type SecureTokenErrorCode, type SecureTokenOptions, type SecureTokenPayload, type SecureTokenSecretKey, type SecureTokenVerification, type ServerRallyConfig, type SheetTheme, type SlotShape, type SnapshotSecretKey, type SnapshotTokenError, type SnapshotTokenErrorCode, type SnapshotTokenPayload, type SnapshotTokenVerification, type SpotDefinition, type SpotId, type SpotItem, type SpotVerificationSecret, type StampAcquiredEvent, type StampCondition, type StampDefinition, type StampError, StampRallyClient, type StampRallyClientEvent, type StampRallyEvent, type StampRallyEventListener, type StampRallyListener, type StampRallyProgress, type StampRallyState, type StampRecord$1 as StampRecord, type StampStorage, type StateMigrator, type StorageAdapter, StorageAdapterError, type StorageAdapterErrorCode, type StorageLike, type StorageOperation, type StorageSaveOutcome, type StorageSaveRequest, type StorageWarningHandler, type SupportedLocale, type SystemClockAdapter, THEME_PRESETS, type ThemePreset, type ThemePresetId, type TokenVerificationContext, type UniversalLocalizedText, type UniversalSpotItem, type UniversalValidationError, type UniversalValidationResult, type UserId, type ValidationError, type ValidationInput, type ValidationOutcome, type VerificationCondition, type VerificationContext, type VerificationCoordinates, type VerificationRequirement, calculateDistanceMeters, calculateProgress, consumeReward, createClaimTicketNumber, createSecureToken, createSignedSnapshotToken, createUniqueClaimTicketNumber, evaluateCheckIn, evaluateCondition, evaluateConditionDetailed, exportProgressToken, getCurrentGeoContext, importProgressToken, isAdminRallyConfig, isGeolocationSupported, isNfcSupported, isPublicRallyConfig, isPublicRallyConfigShape, isQrSupported, isRewardState, isStampRallyState, issueClaimTicketNumber, migrateRallyConfig, normalizePasscode, processStamp, readNfcContext, readQrContext, reconcileRewardStates, resolveLocalizedText, stripSensitiveConfig, toLocalizedString, toPublicRallyConfig, validateAdminRallyConfig, validatePublicRallyConfig, validateRallyConfig, verifyPasscode, verifySecureToken, verifySnapshotToken };

package/dist/index.d.ts

@@ -110,6 +110,116 @@ type Result<T, E> = {
     readonly error: E;
 };
 
+/** A human-readable value that may be supplied in one or more locales. */
+type UniversalLocalizedText<TLocale extends string = string> = string | Partial<Record<TLocale, string>>;
+/** A link to an entity owned by the host application or another system. */
+interface ExternalReference$1 {
+    readonly type: string;
+    readonly id: string;
+    readonly url?: string;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+/** Server-only verification material. Never send this shape to a browser. */
+type VerificationCondition = {
+    readonly type: "qr";
+    readonly secretToken: string;
+    readonly qrEntryUrl?: string;
+} | {
+    readonly type: "passcode";
+    readonly code: string;
+    readonly caseSensitive?: boolean;
+} | {
+    readonly type: "gps";
+    readonly latitude: number;
+    readonly longitude: number;
+    readonly radiusMeters: number;
+} | {
+    readonly type: "custom";
+    readonly validatorName: string;
+    readonly secretParams?: Readonly<Record<string, unknown>>;
+};
+/** Safe condition metadata intended for a participant client. */
+type PublicCheckInCondition = {
+    readonly type: "qr";
+    readonly qrEntryUrl: string;
+} | {
+    readonly type: "passcode";
+} | {
+    readonly type: "gps";
+    readonly latitude: number;
+    readonly longitude: number;
+    readonly radiusMeters: number;
+} | {
+    readonly type: "custom";
+    readonly validatorName: string;
+};
+interface UniversalSpotItem<TLocale extends string = string, TMeta extends Record<string, unknown> = Record<string, unknown>> {
+    readonly id: string;
+    readonly orderIndex: number;
+    readonly name: UniversalLocalizedText<TLocale>;
+    readonly description?: UniversalLocalizedText<TLocale>;
+    readonly hint?: UniversalLocalizedText<TLocale>;
+    readonly imageUrl?: string;
+    readonly iconUrl?: string;
+    readonly redirectUrlAfterClaim?: string;
+    readonly externalReferences?: ReadonlyArray<ExternalReference$1>;
+    readonly metadata?: TMeta;
+    readonly conditions: ReadonlyArray<VerificationCondition>;
+    readonly prerequisites?: ReadonlyArray<string>;
+}
+type AdminReward<TLocale extends string = string> = {
+    readonly id: string;
+    readonly title: UniversalLocalizedText<TLocale>;
+    readonly description?: UniversalLocalizedText<TLocale>;
+    readonly type: "digital" | "in_person";
+    readonly redemptionMethod: "manual_slide" | "staff_passcode" | "view_only" | "server_claim";
+    readonly requiredStampCount: number;
+    readonly conditions?: ReadonlyArray<RewardUnlockCondition$1>;
+    readonly stockLimit?: number;
+    readonly userClaimLimit?: number;
+    readonly staffPasscode?: string;
+    readonly digitalContentUrl?: string;
+};
+type PublicReward<TLocale extends string = string> = Omit<AdminReward<TLocale>, "staffPasscode" | "digitalContentUrl">;
+type RewardUnlockCondition$1 = {
+    readonly type: "stamp_count";
+    readonly count: number;
+} | {
+    readonly type: "stamps";
+    readonly stampIds: ReadonlyArray<string>;
+} | {
+    readonly type: "all" | "any";
+    readonly conditions: ReadonlyArray<RewardUnlockCondition$1>;
+};
+interface AdminRallyConfig<TLocale extends string = string, TMeta extends Record<string, unknown> = Record<string, unknown>> {
+    readonly id: string;
+    readonly version: string;
+    readonly title: UniversalLocalizedText<TLocale>;
+    readonly description?: UniversalLocalizedText<TLocale>;
+    readonly theme?: SheetTheme;
+    readonly spots: ReadonlyArray<UniversalSpotItem<TLocale, TMeta>>;
+    readonly rewards: ReadonlyArray<AdminReward<TLocale>>;
+    readonly serverEndpoint?: string;
+    readonly metadata?: TMeta;
+}
+interface PublicRallyConfig<TLocale extends string = string, TMeta extends Record<string, unknown> = Record<string, unknown>> {
+    readonly id: string;
+    readonly version: string;
+    readonly title: UniversalLocalizedText<TLocale>;
+    readonly description?: UniversalLocalizedText<TLocale>;
+    readonly theme?: SheetTheme;
+    readonly spots: ReadonlyArray<Omit<UniversalSpotItem<TLocale, TMeta>, "conditions"> & {
+        readonly conditions: ReadonlyArray<PublicCheckInCondition>;
+    }>;
+    readonly rewards: ReadonlyArray<PublicReward<TLocale>>;
+    readonly serverEndpoint?: string;
+    readonly metadata?: TMeta;
+}
+/** Produce the browser-safe projection without mutating the admin config. */
+declare function toPublicRallyConfig<TLocale extends string, TMeta extends Record<string, unknown>>(config: AdminRallyConfig<TLocale, TMeta>): PublicRallyConfig<TLocale, TMeta>;
+/** Runtime guard for values crossing the public configuration boundary. */
+declare function isPublicRallyConfig(value: unknown): value is PublicRallyConfig;
+
 type SupportedLocale = "ja" | "en";
 type LocalizedString<TLocale extends string = SupportedLocale> = Record<TLocale, string>;
 type LocalizedText$1<TLocale extends string = string> = string | Partial<Record<TLocale, string>>;
@@ -152,6 +262,10 @@ interface SpotItem<TLocale extends string = SupportedLocale, TMeta extends Recor
     readonly externalUrl?: string;
     readonly redirectUrlAfterClaim?: string;
     readonly metadata?: TMeta;
+    /** Canonical universal-model conditions. Legacy `condition` remains for engine internals. */
+    readonly conditions?: ReadonlyArray<VerificationCondition>;
+    readonly externalReferences?: ReadonlyArray<ExternalReference$1>;
+    readonly prerequisites?: ReadonlyArray<string>;
     readonly dependsOn?: ReadonlyArray<string>;
     readonly requiresStampIds?: ReadonlyArray<string>;
 }
@@ -231,13 +345,28 @@ declare function toLocalizedString<TLocale extends string>(text: LocalizedText$1
 declare function migrateRallyConfig<TLocale extends string = SupportedLocale>(raw: unknown): RallyConfig<TLocale>;
 
 type PublicRewardItem<TLocale extends string = string> = Omit<RewardItem<TLocale>, "staffPasscode">;
-type PublicRallyConfig<TLocale extends string = string, TMeta extends Record<string, unknown> = Record<string, unknown>> = Omit<RallyConfig<TLocale, TMeta>, "rewards"> & {
+type LegacyPublicRallyConfig<TLocale extends string = string, TMeta extends Record<string, unknown> = Record<string, unknown>> = Omit<RallyConfig<TLocale, TMeta>, "rewards"> & {
     readonly rewards?: ReadonlyArray<PublicRewardItem<TLocale>>;
 };
-declare function stripSensitiveConfig<TLocale extends string, TMeta extends Record<string, unknown>>(config: RallyConfig<TLocale, TMeta>): PublicRallyConfig<TLocale, TMeta>;
+declare function stripSensitiveConfig<TLocale extends string, TMeta extends Record<string, unknown>>(config: AdminRallyConfig<TLocale, TMeta>): PublicRallyConfig<TLocale, TMeta>;
+declare function stripSensitiveConfig<TLocale extends string, TMeta extends Record<string, unknown>>(config: RallyConfig<TLocale, TMeta>): LegacyPublicRallyConfig<TLocale, TMeta>;
 
 declare const THEME_PRESETS: ReadonlyArray<ThemePreset>;
 
+interface UniversalValidationError {
+    readonly path: string;
+    readonly code: "INVALID_TYPE" | "REQUIRED" | "EMPTY_STRING" | "DUPLICATE_ID" | "INVALID_COORDINATES" | "INVALID_RADIUS" | "INVALID_VERSION" | "INVALID_REWARD" | "CYCLE_DETECTED" | "SECRET_IN_PUBLIC_CONFIG";
+    readonly message: string;
+}
+interface UniversalValidationResult {
+    readonly valid: boolean;
+    readonly errors: ReadonlyArray<UniversalValidationError>;
+}
+declare function validateAdminRallyConfig(value: unknown): UniversalValidationResult;
+declare function validatePublicRallyConfig(value: unknown): UniversalValidationResult;
+declare function isAdminRallyConfig(value: unknown): value is AdminRallyConfig;
+declare function isPublicRallyConfigShape(value: unknown): value is PublicRallyConfig;
+
 declare const CURRENT_RALLY_CONFIG_VERSION = 2;
 interface ValidationError {
     readonly path: string;
@@ -449,7 +578,7 @@ declare class StampRallyClient {
         readonly events: true;
     }): () => void;
     subscribeEvents(listener: StampRallyEventListener): () => void;
-    updateConfig(newConfig: PublicRallyConfig): Promise<StampRallyState>;
+    updateConfig(newConfig: LegacyPublicRallyConfig): Promise<StampRallyState>;
     notifyRewardClaimed(rewardId: string, state?: StampRallyState | null): void;
     notifySyncCompleted(state?: StampRallyState | null): void;
     init(): Promise<StampRallyState>;
@@ -741,4 +870,4 @@ type SnapshotTokenVerification<T extends SnapshotTokenPayload = SnapshotTokenPay
 declare function createSignedSnapshotToken<T extends SnapshotTokenPayload>(payload: T, secretKey: SnapshotSecretKey): Promise<string>;
 declare function verifySnapshotToken<T extends SnapshotTokenPayload = SnapshotTokenPayload>(token: string, secretKey: SnapshotSecretKey, now?: number): Promise<SnapshotTokenVerification<T>>;
 
-export { type AuditLoggerAdapter, type AuthContextAdapter, CURRENT_RALLY_CONFIG_VERSION, type CheckInAttemptAuditEntry, type CheckInContext, type CheckInErrorCode, type CheckInInput, type CheckInResult$1 as CheckInResult, type ClaimTicketOptions, type Clock, type CompositeConditionFailure, type ConditionMatch, type ConditionMismatch, type ConditionVerifierPlugin, type ConsumeResult, type ConsumeRewardParams, DEFAULT_SHEET_THEME, type DetectorError, type DetectorErrorCode, type DetectorKind, type DetectorResult, type EventPublisherAdapter, type ExternalReference, type FontFamily, type GeoDetectorOptions, type GeoVerificationContext, type LocalizedText as HeadlessLocalizedText, type IdGeneratorAdapter, InMemoryStorage, IndexedDBAdapter, type IndexedDBAdapterOptions, LocalStorageAdapter, type LocalStorageAdapterOptions, type LocalStorageFailureMode, type LocaleDictionary, type LocalizedString, type LocalizedText$1 as LocalizedText, type Metadata, type NfcDetectorOptions, type PasscodeCondition, type ProcessStampValue, type PublicRallyConfig, type PublicRewardItem, type QrDetectorOptions, type RallyCompletedEvent, type RallyConfig, type RallyConfigValidationResult, type RallyDefinition, type RallyEvent, type RallyId, type RallyProgress, type RallySnapshot, type RedemptionMethod, type Result, type RewardConsumeError, type RewardItem, type RewardState, type RewardStatus, type RewardType, type RewardUnlockCondition, type SchemaVersion, type SecureTokenError, type SecureTokenErrorCode, type SecureTokenOptions, type SecureTokenPayload, type SecureTokenSecretKey, type SecureTokenVerification, type ServerRallyConfig, type SheetTheme, type SlotShape, type SnapshotSecretKey, type SnapshotTokenError, type SnapshotTokenErrorCode, type SnapshotTokenPayload, type SnapshotTokenVerification, type SpotDefinition, type SpotId, type SpotItem, type SpotVerificationSecret, type StampAcquiredEvent, type StampCondition, type StampDefinition, type StampError, StampRallyClient, type StampRallyClientEvent, type StampRallyEvent, type StampRallyEventListener, type StampRallyListener, type StampRallyProgress, type StampRallyState, type StampRecord$1 as StampRecord, type StampStorage, type StateMigrator, type StorageAdapter, StorageAdapterError, type StorageAdapterErrorCode, type StorageLike, type StorageOperation, type StorageSaveOutcome, type StorageSaveRequest, type StorageWarningHandler, type SupportedLocale, type SystemClockAdapter, THEME_PRESETS, type ThemePreset, type ThemePresetId, type TokenVerificationContext, type UserId, type ValidationError, type ValidationInput, type ValidationOutcome, type VerificationContext, type VerificationCoordinates, type VerificationRequirement, calculateDistanceMeters, calculateProgress, consumeReward, createClaimTicketNumber, createSecureToken, createSignedSnapshotToken, createUniqueClaimTicketNumber, evaluateCheckIn, evaluateCondition, evaluateConditionDetailed, exportProgressToken, getCurrentGeoContext, importProgressToken, isGeolocationSupported, isNfcSupported, isQrSupported, isRewardState, isStampRallyState, issueClaimTicketNumber, migrateRallyConfig, normalizePasscode, processStamp, readNfcContext, readQrContext, reconcileRewardStates, resolveLocalizedText, stripSensitiveConfig, toLocalizedString, validateRallyConfig, verifyPasscode, verifySecureToken, verifySnapshotToken };
+export { type AdminRallyConfig, type AdminReward, type AuditLoggerAdapter, type AuthContextAdapter, CURRENT_RALLY_CONFIG_VERSION, type CheckInAttemptAuditEntry, type CheckInContext, type CheckInErrorCode, type CheckInInput, type CheckInResult$1 as CheckInResult, type ClaimTicketOptions, type Clock, type CompositeConditionFailure, type ConditionMatch, type ConditionMismatch, type ConditionVerifierPlugin, type ConsumeResult, type ConsumeRewardParams, DEFAULT_SHEET_THEME, type DetectorError, type DetectorErrorCode, type DetectorKind, type DetectorResult, type EventPublisherAdapter, type ExternalReference$1 as ExternalReference, type FontFamily, type GeoDetectorOptions, type GeoVerificationContext, type LocalizedText as HeadlessLocalizedText, type IdGeneratorAdapter, InMemoryStorage, IndexedDBAdapter, type IndexedDBAdapterOptions, type LegacyPublicRallyConfig, LocalStorageAdapter, type LocalStorageAdapterOptions, type LocalStorageFailureMode, type LocaleDictionary, type LocalizedString, type LocalizedText$1 as LocalizedText, type Metadata, type NfcDetectorOptions, type PasscodeCondition, type ProcessStampValue, type PublicCheckInCondition, type PublicRallyConfig, type PublicReward, type PublicRewardItem, type QrDetectorOptions, type RallyCompletedEvent, type RallyConfig, type RallyConfigValidationResult, type RallyDefinition, type RallyEvent, type RallyId, type RallyProgress, type RallySnapshot, type RedemptionMethod, type Result, type RewardConsumeError, type RewardItem, type RewardState, type RewardStatus, type RewardType, type RewardUnlockCondition, type SchemaVersion, type SecureTokenError, type SecureTokenErrorCode, type SecureTokenOptions, type SecureTokenPayload, type SecureTokenSecretKey, type SecureTokenVerification, type ServerRallyConfig, type SheetTheme, type SlotShape, type SnapshotSecretKey, type SnapshotTokenError, type SnapshotTokenErrorCode, type SnapshotTokenPayload, type SnapshotTokenVerification, type SpotDefinition, type SpotId, type SpotItem, type SpotVerificationSecret, type StampAcquiredEvent, type StampCondition, type StampDefinition, type StampError, StampRallyClient, type StampRallyClientEvent, type StampRallyEvent, type StampRallyEventListener, type StampRallyListener, type StampRallyProgress, type StampRallyState, type StampRecord$1 as StampRecord, type StampStorage, type StateMigrator, type StorageAdapter, StorageAdapterError, type StorageAdapterErrorCode, type StorageLike, type StorageOperation, type StorageSaveOutcome, type StorageSaveRequest, type StorageWarningHandler, type SupportedLocale, type SystemClockAdapter, THEME_PRESETS, type ThemePreset, type ThemePresetId, type TokenVerificationContext, type UniversalLocalizedText, type UniversalSpotItem, type UniversalValidationError, type UniversalValidationResult, type UserId, type ValidationError, type ValidationInput, type ValidationOutcome, type VerificationCondition, type VerificationContext, type VerificationCoordinates, type VerificationRequirement, calculateDistanceMeters, calculateProgress, consumeReward, createClaimTicketNumber, createSecureToken, createSignedSnapshotToken, createUniqueClaimTicketNumber, evaluateCheckIn, evaluateCondition, evaluateConditionDetailed, exportProgressToken, getCurrentGeoContext, importProgressToken, isAdminRallyConfig, isGeolocationSupported, isNfcSupported, isPublicRallyConfig, isPublicRallyConfigShape, isQrSupported, isRewardState, isStampRallyState, issueClaimTicketNumber, migrateRallyConfig, normalizePasscode, processStamp, readNfcContext, readQrContext, reconcileRewardStates, resolveLocalizedText, stripSensitiveConfig, toLocalizedString, toPublicRallyConfig, validateAdminRallyConfig, validatePublicRallyConfig, validateRallyConfig, verifyPasscode, verifySecureToken, verifySnapshotToken };

package/dist/index.js

@@ -1878,8 +1878,61 @@ var DEFAULT_SHEET_THEME = {
   fontFamily: "serif"
 };
 
+// src/domain/universalModel.ts
+function toPublicCondition(condition2) {
+  switch (condition2.type) {
+    case "qr":
+      return { type: "qr", qrEntryUrl: condition2.qrEntryUrl ?? "" };
+    case "passcode":
+      return { type: "passcode" };
+    case "gps":
+      return {
+        type: "gps",
+        latitude: condition2.latitude,
+        longitude: condition2.longitude,
+        radiusMeters: condition2.radiusMeters
+      };
+    case "custom":
+      return { type: "custom", validatorName: condition2.validatorName };
+  }
+}
+function toPublicRallyConfig(config) {
+  return {
+    ...config,
+    spots: config.spots.map((spot) => ({
+      ...spot,
+      conditions: spot.conditions.map(toPublicCondition)
+    })),
+    rewards: config.rewards.map(
+      ({ staffPasscode: _staffPasscode, digitalContentUrl: _content, ...reward }) => reward
+    )
+  };
+}
+function isPublicRallyConfig(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+  const candidate = value;
+  if (candidate.secretKey !== void 0 || candidate.verificationSecrets !== void 0)
+    return false;
+  return Array.isArray(candidate.spots) && Array.isArray(candidate.rewards) && candidate.spots.every((spot) => {
+    if (typeof spot !== "object" || spot === null || Array.isArray(spot)) return false;
+    const conditions = spot.conditions;
+    return Array.isArray(conditions) && conditions.every((condition2) => {
+      if (typeof condition2 !== "object" || condition2 === null) return false;
+      const type = condition2.type;
+      return type === "qr" || type === "passcode" || type === "gps" || type === "custom";
+    });
+  }) && candidate.rewards.every((reward) => {
+    if (typeof reward !== "object" || reward === null || Array.isArray(reward)) return false;
+    const item = reward;
+    return item.staffPasscode === void 0 && item.digitalContentUrl === void 0;
+  });
+}
+
 // src/domain/publicConfig.ts
 function stripSensitiveConfig(config) {
+  if ("spots" in config && !("stamps" in config)) {
+    return toPublicRallyConfig(config);
+  }
   const rewards = config.rewards?.map(({ staffPasscode: _staffPasscode, ...reward }) => reward);
   return {
     ...config,
@@ -1986,6 +2039,180 @@ var THEME_PRESETS = [
   }
 ];
 
+// src/domain/universalValidation.ts
+function isObject3(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function add2(errors, path, code, message) {
+  errors.push({ path, code, message });
+}
+function hasText2(value) {
+  if (typeof value === "string") return value.trim() !== "";
+  return isObject3(value) && Object.values(value).some((item) => typeof item === "string" && item.trim() !== "");
+}
+function validateCondition2(condition2, path, errors) {
+  if (!isObject3(condition2) || typeof condition2.type !== "string") {
+    add2(errors, path, "INVALID_TYPE", "Condition must have a type.");
+    return;
+  }
+  switch (condition2.type) {
+    case "qr":
+      if (typeof condition2.secretToken !== "string" || condition2.secretToken.trim() === "")
+        add2(errors, `${path}.secretToken`, "REQUIRED", "QR secretToken is required.");
+      if (condition2.qrEntryUrl !== void 0 && typeof condition2.qrEntryUrl !== "string")
+        add2(errors, `${path}.qrEntryUrl`, "INVALID_TYPE", "QR entry URL must be a string.");
+      return;
+    case "passcode":
+      if (typeof condition2.code !== "string" || condition2.code.trim() === "")
+        add2(errors, `${path}.code`, "REQUIRED", "Passcode is required.");
+      return;
+    case "gps":
+      if (typeof condition2.latitude !== "number" || !Number.isFinite(condition2.latitude) || condition2.latitude < -90 || condition2.latitude > 90 || typeof condition2.longitude !== "number" || !Number.isFinite(condition2.longitude) || condition2.longitude < -180 || condition2.longitude > 180)
+        add2(errors, path, "INVALID_COORDINATES", "GPS coordinates are invalid.");
+      if (typeof condition2.radiusMeters !== "number" || !Number.isFinite(condition2.radiusMeters) || condition2.radiusMeters <= 0)
+        add2(errors, `${path}.radiusMeters`, "INVALID_RADIUS", "GPS radius must be positive.");
+      return;
+    case "custom":
+      if (typeof condition2.validatorName !== "string" || condition2.validatorName.trim() === "")
+        add2(errors, `${path}.validatorName`, "REQUIRED", "Custom validatorName is required.");
+      return;
+    default:
+      add2(errors, `${path}.type`, "INVALID_TYPE", "Unsupported verification condition.");
+  }
+}
+function validateDag2(spots, errors) {
+  const graph = /* @__PURE__ */ new Map();
+  for (const spot of spots) {
+    if (!isObject3(spot) || typeof spot.id !== "string") continue;
+    const prerequisites = Array.isArray(spot.prerequisites) ? spot.prerequisites.filter((item) => typeof item === "string") : [];
+    graph.set(spot.id, prerequisites);
+  }
+  const visiting = /* @__PURE__ */ new Set();
+  const visited = /* @__PURE__ */ new Set();
+  const visit = (id) => {
+    if (visiting.has(id)) {
+      add2(
+        errors,
+        `spots.${id}.prerequisites`,
+        "CYCLE_DETECTED",
+        `Dependency cycle detected at '${id}'.`
+      );
+      return;
+    }
+    if (visited.has(id)) return;
+    visiting.add(id);
+    for (const prerequisite of graph.get(id) ?? [])
+      if (graph.has(prerequisite)) visit(prerequisite);
+    visiting.delete(id);
+    visited.add(id);
+  };
+  for (const id of graph.keys()) visit(id);
+}
+function validateAdminRallyConfig(value) {
+  const errors = [];
+  if (!isObject3(value))
+    return {
+      valid: false,
+      errors: [{ path: "", code: "INVALID_TYPE", message: "Admin config must be an object." }]
+    };
+  if (typeof value.id !== "string" || value.id.trim() === "")
+    add2(errors, "id", "REQUIRED", "Rally ID is required.");
+  if (typeof value.version !== "string" || value.version.trim() === "")
+    add2(errors, "version", "INVALID_VERSION", "Version is required.");
+  if (!Array.isArray(value.spots)) {
+    add2(errors, "spots", "INVALID_TYPE", "spots must be an array.");
+  } else {
+    const ids = [];
+    value.spots.forEach((spot, index) => {
+      const path = `spots[${index}]`;
+      if (!isObject3(spot)) {
+        add2(errors, path, "INVALID_TYPE", "Spot must be an object.");
+        return;
+      }
+      if (typeof spot.id !== "string" || spot.id.trim() === "")
+        add2(errors, `${path}.id`, "REQUIRED", "Spot ID is required.");
+      else if (ids.includes(spot.id))
+        add2(errors, `${path}.id`, "DUPLICATE_ID", `Duplicate spot ID '${spot.id}'.`);
+      else ids.push(spot.id);
+      if (!hasText2(spot.name)) add2(errors, `${path}.name`, "REQUIRED", "Spot name is required.");
+      if (typeof spot.orderIndex !== "number" || !Number.isInteger(spot.orderIndex))
+        add2(errors, `${path}.orderIndex`, "INVALID_TYPE", "orderIndex must be an integer.");
+      if (!Array.isArray(spot.conditions) || spot.conditions.length === 0)
+        add2(errors, `${path}.conditions`, "REQUIRED", "At least one condition is required.");
+      else {
+        spot.conditions.forEach((condition2, conditionIndex) => {
+          validateCondition2(condition2, `${path}.conditions[${conditionIndex}]`, errors);
+        });
+      }
+    });
+    validateDag2(value.spots, errors);
+  }
+  if (!Array.isArray(value.rewards))
+    add2(errors, "rewards", "INVALID_TYPE", "rewards must be an array.");
+  else {
+    const ids = [];
+    value.rewards.forEach((reward, index) => {
+      const path = `rewards[${index}]`;
+      if (!isObject3(reward)) {
+        add2(errors, path, "INVALID_TYPE", "Reward must be an object.");
+        return;
+      }
+      if (typeof reward.id !== "string" || reward.id.trim() === "")
+        add2(errors, `${path}.id`, "REQUIRED", "Reward ID is required.");
+      else if (ids.includes(reward.id))
+        add2(errors, `${path}.id`, "DUPLICATE_ID", `Duplicate reward ID '${reward.id}'.`);
+      else ids.push(reward.id);
+      if (!hasText2(reward.title))
+        add2(errors, `${path}.title`, "REQUIRED", "Reward title is required.");
+      if (typeof reward.requiredStampCount !== "number" || !Number.isInteger(reward.requiredStampCount) || reward.requiredStampCount < 0)
+        add2(
+          errors,
+          `${path}.requiredStampCount`,
+          "INVALID_REWARD",
+          "requiredStampCount must be a non-negative integer."
+        );
+    });
+  }
+  return { valid: errors.length === 0, errors };
+}
+function validatePublicRallyConfig(value) {
+  const errors = [];
+  if (!isObject3(value))
+    return {
+      valid: false,
+      errors: [{ path: "", code: "INVALID_TYPE", message: "Public config must be an object." }]
+    };
+  if ("secretKey" in value || "verificationSecrets" in value)
+    add2(
+      errors,
+      "",
+      "SECRET_IN_PUBLIC_CONFIG",
+      "Public config must not contain server verification secrets."
+    );
+  if (!Array.isArray(value.spots)) add2(errors, "spots", "INVALID_TYPE", "spots must be an array.");
+  else
+    value.spots.forEach((spot, index) => {
+      if (!isObject3(spot) || !Array.isArray(spot.conditions)) return;
+      spot.conditions.forEach((condition2, conditionIndex) => {
+        if (!isObject3(condition2)) return;
+        if ("secretToken" in condition2 || "code" in condition2 || "secretParams" in condition2)
+          add2(
+            errors,
+            `spots[${index}].conditions[${conditionIndex}]`,
+            "SECRET_IN_PUBLIC_CONFIG",
+            "Public condition contains verification secret material."
+          );
+      });
+    });
+  return { valid: errors.length === 0, errors };
+}
+function isAdminRallyConfig(value) {
+  return validateAdminRallyConfig(value).valid;
+}
+function isPublicRallyConfigShape(value) {
+  return validatePublicRallyConfig(value).valid;
+}
+
 // src/security/snapshotToken.ts
 var encoder2 = new TextEncoder();
 function cryptoApi2() {
@@ -2105,6 +2332,6 @@ async function verifySnapshotToken(token, secretKey, now = Date.now()) {
   }
 }
 
-export { CURRENT_RALLY_CONFIG_VERSION, DEFAULT_SHEET_THEME, InMemoryStorage, IndexedDBAdapter, LocalStorageAdapter, StampRallyClient, StorageAdapterError, THEME_PRESETS, calculateDistanceMeters, calculateProgress, consumeReward, createClaimTicketNumber, createSecureToken, createSignedSnapshotToken, createUniqueClaimTicketNumber, evaluateCheckIn, evaluateCondition, evaluateConditionDetailed, exportProgressToken, getCurrentGeoContext, importProgressToken, isGeolocationSupported, isNfcSupported, isQrSupported, isRewardState, isStampRallyState, issueClaimTicketNumber, migrateRallyConfig, normalizePasscode, processStamp, readNfcContext, readQrContext, reconcileRewardStates, resolveLocalizedText, stripSensitiveConfig, toLocalizedString, validateRallyConfig, verifyPasscode, verifySecureToken, verifySnapshotToken };
+export { CURRENT_RALLY_CONFIG_VERSION, DEFAULT_SHEET_THEME, InMemoryStorage, IndexedDBAdapter, LocalStorageAdapter, StampRallyClient, StorageAdapterError, THEME_PRESETS, calculateDistanceMeters, calculateProgress, consumeReward, createClaimTicketNumber, createSecureToken, createSignedSnapshotToken, createUniqueClaimTicketNumber, evaluateCheckIn, evaluateCondition, evaluateConditionDetailed, exportProgressToken, getCurrentGeoContext, importProgressToken, isAdminRallyConfig, isGeolocationSupported, isNfcSupported, isPublicRallyConfig, isPublicRallyConfigShape, isQrSupported, isRewardState, isStampRallyState, issueClaimTicketNumber, migrateRallyConfig, normalizePasscode, processStamp, readNfcContext, readQrContext, reconcileRewardStates, resolveLocalizedText, stripSensitiveConfig, toLocalizedString, toPublicRallyConfig, validateAdminRallyConfig, validatePublicRallyConfig, validateRallyConfig, verifyPasscode, verifySecureToken, verifySnapshotToken };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map