feat: initial prototype — core game systems (#30)

## Summary This PR represents the full v1 prototype, implementing the core game systems for Elysium. - Full idle/clicker RPG loop: resource collection, crafting, boss fights, exploration, and quests - Adventurer hiring with batch size selector and progressive tier cost scaling - Prestige, transcendence, and apotheosis systems with auto-prestige support - Character sheet, titles, leaderboards, companion system, and daily login bonuses - Auto-quest and auto-boss toggles - Discord webhook notifications on prestige/transcendence/apotheosis - Discord role awarded on apotheosis - Responsive design and overarching story/lore system - In-game sound effects and browser notifications for key events - Support link button in the resource bar - Full test coverage (100% on `apps/api` and `packages/types`) - CI pipeline: lint → build → test ## Closes Closes #1 Closes #2 Closes #3 Closes #4 Closes #5 Closes #6 Closes #7 Closes #8 Closes #9 Closes #10 Closes #11 Closes #12 Closes #13 Closes #14 Closes #16 Closes #19 Closes #20 Closes #21 Closes #22 Closes #23 Closes #24 Closes #25 Closes #26 Closes #27 Closes #29 ✨ This issue was created with help from Hikari~ 🌸 Co-authored-by: Naomi Carrigan <commits@nhcarrigan.com> Reviewed-on: #30 Co-authored-by: Hikari <hikari@nhcarrigan.com> Co-committed-by: Hikari <hikari@nhcarrigan.com>
2026-03-08 15:53:39 -07:00
parent c69e155de3
commit 29c817230d
172 changed files with 50706 additions and 0 deletions
@@ -0,0 +1,115 @@
+/**
+ * @file Discord OAuth helpers for token exchange, user fetching, and URL building.
+ * @copyright nhcarrigan
+ * @license Naomi's Public License
+ * @author Naomi Carrigan
+ */
+/* eslint-disable @typescript-eslint/naming-convention -- Discord API requires snake_case fields and HTTP headers require Pascal-Case */
+
+interface DiscordTokenResponse {
+  access_token:  string;
+  token_type:    string;
+  expires_in:    number;
+  refresh_token: string;
+  scope:         string;
+}
+
+interface DiscordUser {
+  id:            string;
+  username:      string;
+  discriminator: string;
+  avatar:        string | null;
+}
+
+/**
+ * Exchanges a Discord OAuth authorisation code for an access token.
+ * @param code - The authorisation code received from Discord's OAuth callback.
+ * @returns The Discord token response containing the access token.
+ * @throws {Error} If OAuth environment variables are missing or the exchange fails.
+ */
+const exchangeCode = async(
+  code: string,
+): Promise<DiscordTokenResponse> => {
+  const clientId = process.env.DISCORD_CLIENT_ID;
+  const clientSecret = process.env.DISCORD_CLIENT_SECRET;
+  const redirectUri = process.env.DISCORD_REDIRECT_URI;
+
+  if (
+    clientId === undefined || clientId === ""
+    || clientSecret === undefined || clientSecret === ""
+    || redirectUri === undefined || redirectUri === ""
+  ) {
+    throw new Error("Discord OAuth environment variables are required");
+  }
+
+  const parameters = new URLSearchParams({
+    client_id:     clientId,
+    client_secret: clientSecret,
+    code:          code,
+    grant_type:    "authorization_code",
+    redirect_uri:  redirectUri,
+  });
+
+  const response = await fetch("https://discord.com/api/v10/oauth2/token", {
+    body:    parameters.toString(),
+    headers: { "Content-Type": "application/x-www-form-urlencoded" },
+    method:  "POST",
+  });
+
+  if (!response.ok) {
+    throw new Error(`Discord token exchange failed: ${response.statusText}`);
+  }
+
+  /* eslint-disable-next-line @typescript-eslint/consistent-type-assertions -- Response JSON matches DiscordTokenResponse shape */
+  return await (response.json() as Promise<DiscordTokenResponse>);
+};
+
+/**
+ * Fetches the Discord user profile for the given access token.
+ * @param accessToken - A valid Discord OAuth access token.
+ * @returns The Discord user object.
+ * @throws {Error} If the user fetch fails.
+ */
+const fetchDiscordUser = async(
+  accessToken: string,
+): Promise<DiscordUser> => {
+  const response = await fetch("https://discord.com/api/v10/users/@me", {
+    headers: { Authorization: `Bearer ${accessToken}` },
+  });
+
+  if (!response.ok) {
+    throw new Error(`Discord user fetch failed: ${response.statusText}`);
+  }
+
+  /* eslint-disable-next-line @typescript-eslint/consistent-type-assertions -- Response JSON matches DiscordUser shape */
+  return await (response.json() as Promise<DiscordUser>);
+};
+
+/**
+ * Builds the Discord OAuth authorisation URL.
+ * @returns The full OAuth URL to redirect the user to.
+ * @throws {Error} If OAuth environment variables are missing.
+ */
+const buildOAuthUrl = (): string => {
+  const clientId = process.env.DISCORD_CLIENT_ID;
+  const redirectUri = process.env.DISCORD_REDIRECT_URI;
+
+  if (
+    clientId === undefined || clientId === ""
+    || redirectUri === undefined || redirectUri === ""
+  ) {
+    throw new Error("Discord OAuth environment variables are required");
+  }
+
+  const parameters = new URLSearchParams({
+    client_id:     clientId,
+    redirect_uri:  redirectUri,
+    response_type: "code",
+    scope:         "identify",
+  });
+
+  return `https://discord.com/api/oauth2/authorize?${parameters.toString()}`;
+};
+
+export type { DiscordTokenResponse, DiscordUser };
+export { buildOAuthUrl, exchangeCode, fetchDiscordUser };