@domino-sdk/relay 1.0.0 → 1.1.1

package/dist/server/index.js

@@ -161,59 +161,79 @@ import {
   trackerSummarySchema
 } from "../chunk-JON5SESL.js";
 
-// src/server/webhooks.ts
+// src/server/test-members.ts
 import { z } from "zod";
-var webhookEventSchema = z.object({
-  id: z.string().uuid(),
-  version: z.literal(1),
+var testMemberSchema = z.object({
+  id: identifier,
+  name: z.string(),
+  test: z.literal(true)
+});
+var testMemberCreateSchema = z.object({
+  actionId: identifier,
+  name: z.string().trim().min(1).max(40)
+}).strict();
+var testMemberActionSchema = submitSchema.omit({ member: true, faultAfterReview: true }).extend({
+  operation: z.literal("attempts.submit")
+}).strict();
+var testMemberResetSchema = z.object({ actionId: identifier }).strict();
+var testMemberResetResultSchema = z.object({
+  member: identifier,
+  deleted: z.literal(true)
+});
+
+// src/server/webhooks.ts
+import { z as z2 } from "zod";
+var webhookEventSchema = z2.object({
+  id: z2.string().uuid(),
+  version: z2.literal(1),
   type: activityTypeSchema,
-  createdAt: z.number().int().nonnegative(),
-  organization: z.string(),
-  project: z.string(),
-  environment: z.enum(["test", "live"]),
-  data: z.record(z.string(), z.json())
+  createdAt: z2.number().int().nonnegative(),
+  organization: z2.string(),
+  project: z2.string(),
+  environment: z2.enum(["test", "live"]),
+  data: z2.record(z2.string(), z2.json())
 });
-var webhookInputSchema = z.object({
-  url: z.url().max(2048).refine((value) => {
+var webhookInputSchema = z2.object({
+  url: z2.url().max(2048).refine((value) => {
     const url = new URL(value);
     return url.protocol === "https:" && !url.username && !url.password && !url.hash;
   }, "Use an HTTPS URL without credentials or a fragment"),
-  types: z.array(activityTypeSchema).min(1).max(100).refine((v) => new Set(v).size === v.length)
+  types: z2.array(activityTypeSchema).min(1).max(100).refine((v) => new Set(v).size === v.length)
 }).strict();
-var webhookUpdateSchema = webhookInputSchema.partial().extend({ enabled: z.boolean().optional() }).strict();
-var webhookEndpointSchema = z.object({
+var webhookUpdateSchema = webhookInputSchema.partial().extend({ enabled: z2.boolean().optional() }).strict();
+var webhookEndpointSchema = z2.object({
   ...webhookInputSchema.shape,
-  id: z.string().uuid(),
-  enabled: z.boolean(),
-  disabledReason: z.string().nullable(),
-  consecutiveFailures: z.number().int().nonnegative(),
-  createdAt: z.number(),
-  updatedAt: z.number()
+  id: z2.string().uuid(),
+  enabled: z2.boolean(),
+  disabledReason: z2.string().nullable(),
+  consecutiveFailures: z2.number().int().nonnegative(),
+  createdAt: z2.number(),
+  updatedAt: z2.number()
 });
-var webhookSecretSchema = z.object({
+var webhookSecretSchema = z2.object({
   endpoint: webhookEndpointSchema,
-  secret: z.string(),
-  previousValidUntil: z.number().nullable()
+  secret: z2.string(),
+  previousValidUntil: z2.number().nullable()
 });
-var webhookDeliverySchema = z.object({
-  id: z.string().uuid(),
-  endpoint: z.string().uuid(),
+var webhookDeliverySchema = z2.object({
+  id: z2.string().uuid(),
+  endpoint: z2.string().uuid(),
   event: webhookEventSchema,
-  status: z.enum(["pending", "delivered", "failed", "skipped"]),
-  attempts: z.number().int().nonnegative(),
-  responseStatus: z.number().nullable(),
-  lastError: z.string().nullable(),
-  createdAt: z.number(),
-  deliveredAt: z.number().nullable(),
-  replayOf: z.string().uuid().nullable()
+  status: z2.enum(["pending", "delivered", "failed", "skipped"]),
+  attempts: z2.number().int().nonnegative(),
+  responseStatus: z2.number().nullable(),
+  lastError: z2.string().nullable(),
+  createdAt: z2.number(),
+  deliveredAt: z2.number().nullable(),
+  replayOf: z2.string().uuid().nullable()
 });
-var webhookQuerySchema = z.object({
-  before: z.string().uuid().optional(),
-  limit: z.coerce.number().int().min(1).max(100).default(50)
+var webhookQuerySchema = z2.object({
+  before: z2.string().uuid().optional(),
+  limit: z2.coerce.number().int().min(1).max(100).default(50)
 }).strict();
-var webhookDeliveryPageSchema = z.object({
-  items: z.array(webhookDeliverySchema),
-  next: z.string().uuid().nullable()
+var webhookDeliveryPageSchema = z2.object({
+  items: z2.array(webhookDeliverySchema),
+  next: z2.string().uuid().nullable()
 });
 var WEBHOOK_MAX_BYTES = 64 * 1024;
 async function verifyWebhook(input) {
@@ -257,8 +277,8 @@ async function verifyWebhook(input) {
 }
 
 // src/server/resource-lifecycle.ts
-import { z as z2 } from "zod";
-var resourceLifecycleKindSchema = z2.enum([
+import { z as z3 } from "zod";
+var resourceLifecycleKindSchema = z3.enum([
   "tracker",
   "referral",
   "leaderboard",
@@ -268,28 +288,28 @@ var resourceLifecycleKindSchema = z2.enum([
   "image",
   "point-ledger"
 ]);
-var managedResourceSchema = z2.object({
+var managedResourceSchema = z3.object({
   kind: resourceLifecycleKindSchema,
   id: identifier,
   key: identifier.nullable(),
-  title: z2.string(),
-  archivedAt: z2.number().int().nonnegative().nullable()
+  title: z3.string(),
+  archivedAt: z3.number().int().nonnegative().nullable()
 });
-var resourceLifecycleInputSchema = z2.object({
-  actionId: z2.string().uuid(),
+var resourceLifecycleInputSchema = z3.object({
+  actionId: z3.string().uuid(),
   kind: resourceLifecycleKindSchema,
   resource: identifier,
-  archived: z2.boolean(),
-  reason: z2.string().trim().min(1).max(500),
-  expectedArchivedAt: z2.number().int().nonnegative().nullable().optional()
+  archived: z3.boolean(),
+  reason: z3.string().trim().min(1).max(500),
+  expectedArchivedAt: z3.number().int().nonnegative().nullable().optional()
 }).strict();
-var resourceLifecycleResultSchema = z2.object({
+var resourceLifecycleResultSchema = z3.object({
   resource: managedResourceSchema,
-  changed: z2.boolean()
+  changed: z3.boolean()
 });
 
 // src/server/index.ts
-import { z as z7 } from "zod";
+import { z as z8 } from "zod";
 
 // src/server/errors.ts
 var ManagementErrorCode = {
@@ -352,10 +372,10 @@ var ManagementError = class extends RequestError {
 var DEFAULT_MANAGEMENT_TIMEOUT = MANAGEMENT_TIMEOUT;
 
 // src/server/hosting.ts
-import { z as z4 } from "zod";
+import { z as z5 } from "zod";
 
 // src/server/starters.ts
-import { z as z3 } from "zod";
+import { z as z4 } from "zod";
 var starterTemplates = [
   {
     id: "campaign",
@@ -388,66 +408,66 @@ var starterTemplates = [
     summary: "A headless Worker with typed routes and interactive API docs, for plugging Domino into your own product."
   }
 ];
-var starterIdSchema = z3.enum(
+var starterIdSchema = z4.enum(
   starterTemplates.map((template) => template.id)
 );
 
 // src/server/hosting.ts
-var outputPathSchema = z4.string().min(1).max(512).refine(
+var outputPathSchema = z5.string().min(1).max(512).refine(
   (path) => path.split("/").every(
     (part) => /^[\w-][\w.-]*$/.test(part) && part !== "node_modules"
   ),
   "Expected a relative build output path without hidden segments"
 );
-var appRoutingSchema = z4.enum(["legacy", "transparent"]).default("legacy");
+var appRoutingSchema = z5.enum(["legacy", "transparent"]).default("legacy");
 var APP_SECRET_LIMIT = 50;
-var appSecretNameSchema = z4.string().regex(
+var appSecretNameSchema = z5.string().regex(
   /^[A-Z_][A-Z0-9_]{0,63}$/,
   "Use 1-64 uppercase letters, digits, and underscores, not starting with a digit"
 ).refine(
   (name) => !name.startsWith("DOMINO_") && name !== "ASSETS",
   "DOMINO_ names and ASSETS are reserved for Domino's own bindings"
 );
-var appSecretValueSchema = z4.string().min(1).refine(
+var appSecretValueSchema = z5.string().min(1).refine(
   (value) => new TextEncoder().encode(value).length <= 5120,
   "Secret values can be at most 5 KiB"
 );
-var appSecretInputSchema = z4.object({ value: appSecretValueSchema }).strict();
-var appSecretSchema = z4.object({
+var appSecretInputSchema = z5.object({ value: appSecretValueSchema }).strict();
+var appSecretSchema = z5.object({
   name: appSecretNameSchema,
-  updatedAt: z4.number(),
-  updatedBy: z4.string()
+  updatedAt: z5.number(),
+  updatedBy: z5.string()
 });
-var appSecretDeclarationSchema = z4.object({
-  description: z4.string().trim().min(1).max(500),
-  required: z4.boolean().default(true)
+var appSecretDeclarationSchema = z5.object({
+  description: z5.string().trim().min(1).max(500),
+  required: z5.boolean().default(true)
 }).strict();
-var appSecretDeclarationsSchema = z4.record(appSecretNameSchema, appSecretDeclarationSchema).refine(
+var appSecretDeclarationsSchema = z5.record(appSecretNameSchema, appSecretDeclarationSchema).refine(
   (secrets) => Object.keys(secrets).length <= APP_SECRET_LIMIT,
   `Declare at most ${APP_SECRET_LIMIT} app secrets`
 );
-var appSecretListSchema = z4.object({
-  secrets: z4.array(appSecretSchema),
-  declared: z4.array(appSecretDeclarationSchema.extend({ name: appSecretNameSchema })).default([])
+var appSecretListSchema = z5.object({
+  secrets: z5.array(appSecretSchema),
+  declared: z5.array(appSecretDeclarationSchema.extend({ name: appSecretNameSchema })).default([])
 });
-var hostedAppSecretsSchema = z4.object({ secrets: z4.record(appSecretNameSchema, appSecretValueSchema) }).strict();
+var hostedAppSecretsSchema = z5.object({ secrets: z5.record(appSecretNameSchema, appSecretValueSchema) }).strict();
 var appScripts = {
   routing: appRoutingSchema,
-  devScript: z4.string().regex(/^[\w:-]+$/),
-  checkScript: z4.string().regex(/^[\w:-]+$/),
-  buildScript: z4.string().regex(/^[\w:-]+$/)
+  devScript: z5.string().regex(/^[\w:-]+$/),
+  checkScript: z5.string().regex(/^[\w:-]+$/),
+  buildScript: z5.string().regex(/^[\w:-]+$/)
 };
 var workerSettings = {
-  runWorkerFirst: z4.boolean().default(false),
+  runWorkerFirst: z5.boolean().default(false),
   main: outputPathSchema.refine(
     (path) => /\.m?js$/.test(path),
     "Expected a compiled JavaScript entry"
   ),
-  compatibilityDate: z4.string().regex(/^\d{4}-\d{2}-\d{2}$/),
-  compatibilityFlags: z4.array(z4.string().min(1)).max(50).default([]),
-  vars: z4.record(
-    z4.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/).refine((name) => name !== "ASSETS"),
-    z4.string()
+  compatibilityDate: z5.string().regex(/^\d{4}-\d{2}-\d{2}$/),
+  compatibilityFlags: z5.array(z5.string().min(1)).max(50).default([]),
+  vars: z5.record(
+    z5.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/).refine((name) => name !== "ASSETS"),
+    z5.string()
   ).default({}),
   secrets: appSecretDeclarationsSchema.default({})
 };
@@ -456,62 +476,62 @@ var distinctBindingsMessage = {
   message: "A name can't be both an app var and a declared secret",
   path: ["secrets"]
 };
-var hostedAppSchema = z4.discriminatedUnion("kind", [
-  z4.object({
-    kind: z4.literal("static"),
+var hostedAppSchema = z5.discriminatedUnion("kind", [
+  z5.object({
+    kind: z5.literal("static"),
     directory: outputPathSchema,
     ...appScripts
   }).strict(),
-  z4.object({
-    kind: z4.literal("worker"),
+  z5.object({
+    kind: z5.literal("worker"),
     directory: outputPathSchema,
     assetsDirectory: outputPathSchema.optional(),
     ...appScripts,
     ...workerSettings
   }).strict().refine(distinctBindings, distinctBindingsMessage)
 ]);
-var repositorySchema = z4.object({
-  id: z4.string().uuid(),
+var repositorySchema = z5.object({
+  id: z5.string().uuid(),
   organization: identifier,
   project: identifier,
-  remote: z4.string().url(),
-  defaultBranch: z4.string(),
-  status: z4.enum(["provisioning", "ready"])
+  remote: z5.string().url(),
+  defaultBranch: z5.string(),
+  status: z5.enum(["provisioning", "ready"])
 });
-var createRepositorySchema = z4.object({
+var createRepositorySchema = z5.object({
   /** Omitted: the starter chosen at project setup, else `campaign`. */
   starter: starterIdSchema.optional()
 }).strict();
-var deviceStartSchema = z4.object({
-  challenge: z4.string().regex(/^[a-f0-9]{64}$/)
+var deviceStartSchema = z5.object({
+  challenge: z5.string().regex(/^[a-f0-9]{64}$/)
 }).strict();
-var deviceRedeemSchema = z4.object({
-  id: z4.string().uuid(),
-  verifier: z4.string().min(43).max(128)
+var deviceRedeemSchema = z5.object({
+  id: z5.string().uuid(),
+  verifier: z5.string().min(43).max(128)
 }).strict();
-var deviceApproveSchema = z4.object({
-  id: z4.string().uuid(),
-  code: z4.string().regex(/^[A-F0-9]{4}-[A-F0-9]{4}$/)
+var deviceApproveSchema = z5.object({
+  id: z5.string().uuid(),
+  code: z5.string().regex(/^[A-F0-9]{4}-[A-F0-9]{4}$/)
 }).strict();
-var commitSchema = z4.string().regex(/^[a-f0-9]{40}$/);
-var stageRequestSchema = z4.object({
+var commitSchema = z5.string().regex(/^[a-f0-9]{40}$/);
+var stageRequestSchema = z5.object({
   commit: commitSchema,
-  requestId: z4.string().uuid()
+  requestId: z5.string().uuid()
 }).strict();
-var buildIdentitySchema = z4.object({
+var buildIdentitySchema = z5.object({
   routing: appRoutingSchema,
-  slug: z4.string().min(1).max(35).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/).optional(),
-  runtime: z4.enum(["simulation", "hosted-test"]).default("simulation"),
-  id: z4.string().uuid(),
-  repository: z4.string().uuid(),
+  slug: z5.string().min(1).max(35).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/).optional(),
+  runtime: z5.enum(["simulation", "hosted-test"]).default("simulation"),
+  id: z5.string().uuid(),
+  repository: z5.string().uuid(),
   organization: identifier,
   project: identifier,
   commit: commitSchema,
-  createdAt: z4.number(),
-  actor: z4.string(),
-  commitMessage: z4.string().max(500).optional()
+  createdAt: z5.number(),
+  actor: z5.string(),
+  commitMessage: z5.string().max(500).optional()
 });
-var buildPhaseSchema = z4.enum([
+var buildPhaseSchema = z5.enum([
   "queued",
   "source",
   "install",
@@ -521,71 +541,71 @@ var buildPhaseSchema = z4.enum([
   "ready",
   "failed"
 ]);
-var buildStatusSchema = z4.object({
+var buildStatusSchema = z5.object({
   phase: buildPhaseSchema,
   failedPhase: buildPhaseSchema.optional(),
-  updatedAt: z4.number(),
-  message: z4.string()
+  updatedAt: z5.number(),
+  message: z5.string()
 });
 var hostedBuildSchema = buildIdentitySchema.extend({
   ...buildStatusSchema.shape,
-  finished: z4.boolean(),
-  current: z4.boolean(),
-  stagingUrl: z4.string().url()
+  finished: z5.boolean(),
+  current: z5.boolean(),
+  stagingUrl: z5.string().url()
 });
-var stagingAccessModeSchema = z4.enum(["console", "password"]);
-var stagingAccessSchema = z4.object({ mode: stagingAccessModeSchema });
-var stagingAccessInputSchema = z4.discriminatedUnion("mode", [
-  z4.object({ mode: z4.literal("console") }).strict(),
-  z4.object({
-    mode: z4.literal("password"),
-    password: z4.string().min(8).max(128)
+var stagingAccessModeSchema = z5.enum(["console", "password"]);
+var stagingAccessSchema = z5.object({ mode: stagingAccessModeSchema });
+var stagingAccessInputSchema = z5.discriminatedUnion("mode", [
+  z5.object({ mode: z5.literal("console") }).strict(),
+  z5.object({
+    mode: z5.literal("password"),
+    password: z5.string().min(8).max(128)
   }).strict()
 ]);
-var stagingPathSchema = z4.string().max(2048).refine(
+var stagingPathSchema = z5.string().max(2048).refine(
   (path) => path.startsWith("/") && !path.startsWith("//") && !path.includes("\\"),
   "Expected a path on the staging host"
 );
-var stagingLinkSchema = z4.object({
-  url: z4.string().url(),
-  expiresAt: z4.number()
+var stagingLinkSchema = z5.object({
+  url: z5.string().url(),
+  expiresAt: z5.number()
 });
-var buildSnapshotSchema = z4.object({
-  builds: z4.array(hostedBuildSchema),
+var buildSnapshotSchema = z5.object({
+  builds: z5.array(hostedBuildSchema),
   current: hostedBuildSchema.nullable(),
   selected: hostedBuildSchema.nullable(),
-  logs: z4.string()
+  logs: z5.string()
 });
-var assetPathSchema = z4.string().max(512).refine(
+var assetPathSchema = z5.string().max(512).refine(
   (path) => path.startsWith("/") && // oxlint-disable-next-line no-control-regex -- Asset paths must reject control characters.
   !/[\\\u0000-\u001f?#%]/.test(path) && path.slice(1).split("/").every((part) => part.length > 0 && !part.startsWith(".")),
   "Expected a public asset path without hidden segments"
 );
-var base64Schema = z4.string().regex(/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/);
+var base64Schema = z5.string().regex(/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/);
 var stagedDeploymentLimits = {
   /** Bytes of JSON, uncompressed. */
   size: 64e6,
   /** Bytes of the Brotli-compressed object. */
   compressedSize: 1e7
 };
-var stagedDeploymentSchema = z4.object({
-  encoding: z4.literal("br"),
-  sha256: z4.string().regex(/^[0-9a-f]{64}$/),
-  compressedSize: z4.number().int().positive().max(stagedDeploymentLimits.compressedSize),
-  size: z4.number().int().positive().max(stagedDeploymentLimits.size)
+var stagedDeploymentSchema = z5.object({
+  encoding: z5.literal("br"),
+  sha256: z5.string().regex(/^[0-9a-f]{64}$/),
+  compressedSize: z5.number().int().positive().max(stagedDeploymentLimits.compressedSize),
+  size: z5.number().int().positive().max(stagedDeploymentLimits.size)
 }).strict();
 var stagedDeploymentContentSchema = stagedDeploymentSchema.extend({
-  content: z4.string().max(Math.ceil(stagedDeploymentLimits.compressedSize / 3) * 4)
+  content: z5.string().max(Math.ceil(stagedDeploymentLimits.compressedSize / 3) * 4)
 }).strict();
 var stagedDeploymentKey = (build, sha256) => `builds/${build}/deployment/${sha256}.br`;
 var artifactFields = {
   routing: appRoutingSchema,
-  worker: z4.object({
+  worker: z5.object({
     ...workerSettings,
-    modules: z4.array(
-      z4.object({
+    modules: z5.array(
+      z5.object({
         path: outputPathSchema.refine((path) => path !== "metadata"),
-        type: z4.enum([
+        type: z5.enum([
           "application/javascript+module",
           "application/wasm",
           "text/plain",
@@ -595,26 +615,26 @@ var artifactFields = {
       }).strict()
     ).min(1).max(500)
   }).strict().refine(distinctBindings, distinctBindingsMessage).optional(),
-  assets: z4.array(
-    z4.object({
+  assets: z5.array(
+    z5.object({
       path: assetPathSchema,
       content: base64Schema.max(14e6),
-      size: z4.number().int().min(0).max(1e7)
+      size: z5.number().int().min(0).max(1e7)
     }).strict()
   ).max(500)
 };
-var buildArtifactsSchema = z4.discriminatedUnion("format", [
-  z4.object({
-    format: z4.literal(1),
+var buildArtifactsSchema = z5.discriminatedUnion("format", [
+  z5.object({
+    format: z5.literal(1),
     ...artifactFields,
-    quests: z4.unknown(),
-    catalog: z4.unknown()
+    quests: z5.unknown(),
+    catalog: z5.unknown()
   }).strict(),
-  z4.object({
-    format: z4.literal(2),
+  z5.object({
+    format: z5.literal(2),
     ...artifactFields,
     deployment: stagedDeploymentSchema,
-    images: z4.array(imageAssetArtifactSchema).max(10)
+    images: z5.array(imageAssetArtifactSchema).max(10)
   }).strict()
 ]).superRefine((value, ctx) => {
   if (value.worker) {
@@ -658,39 +678,39 @@ var buildArtifactsSchema = z4.discriminatedUnion("format", [
 });
 
 // src/server/development.ts
-import { z as z5 } from "zod";
-var developmentPreflightSchema = z5.object({
-  organization: z5.string(),
-  project: z5.string(),
-  environment: z5.enum(["test", "live"]),
-  identity: z5.object({
-    exchange: z5.literal("supported"),
-    activeIntegrations: z5.number().int().nonnegative()
+import { z as z6 } from "zod";
+var developmentPreflightSchema = z6.object({
+  organization: z6.string(),
+  project: z6.string(),
+  environment: z6.enum(["test", "live"]),
+  identity: z6.object({
+    exchange: z6.literal("supported"),
+    activeIntegrations: z6.number().int().nonnegative()
   }).optional(),
-  staging: z5.enum(["configured", "blocked"]),
-  development: z5.object({
-    status: z5.enum(["configured", "blocked"]),
+  staging: z6.enum(["configured", "blocked"]),
+  development: z6.object({
+    status: z6.enum(["configured", "blocked"]),
     // How `domino dev` reaches the preview origin: a Cloudflare tunnel, or a direct route on a
     // local development stack. APIs that predate the field use tunnels.
-    transport: z5.enum(["tunnel", "direct"]).default("tunnel"),
-    missing: z5.array(z5.string()),
-    authentication: z5.array(z5.string())
+    transport: z6.enum(["tunnel", "direct"]).default("tunnel"),
+    missing: z6.array(z6.string()),
+    authentication: z6.array(z6.string())
   }),
-  checks: z5.array(
-    z5.object({
-      id: z5.string(),
-      status: z5.enum(["ok", "error"]),
-      message: z5.string(),
-      missing: z5.array(z5.string()).optional(),
-      issues: z5.array(z5.string()).optional()
+  checks: z6.array(
+    z6.object({
+      id: z6.string(),
+      status: z6.enum(["ok", "error"]),
+      message: z6.string(),
+      missing: z6.array(z6.string()).optional(),
+      issues: z6.array(z6.string()).optional()
     })
   )
 });
 
 // src/server/hosted.ts
-import { z as z6 } from "zod";
+import { z as z7 } from "zod";
 var hostedKeyPermissions = ["read", "points", "ingest"];
-var hostedKeyPermissionList = z6.array(z6.string()).transform(
+var hostedKeyPermissionList = z7.array(z7.string()).transform(
   (values) => values.filter(
     (value) => hostedKeyPermissions.includes(value)
   )
@@ -702,17 +722,17 @@ var hostedManagementBindings = [
   "DOMINO_PROJECT",
   "DOMINO_ENVIRONMENT"
 ];
-var hostedKeySecretSchema = z6.string().regex(/^dhk_[A-Za-z0-9_-]{43}$/, "Expected a hosted app key");
-var hostedKeySchema = z6.object({
-  id: z6.string().uuid(),
+var hostedKeySecretSchema = z7.string().regex(/^dhk_[A-Za-z0-9_-]{43}$/, "Expected a hosted app key");
+var hostedKeySchema = z7.object({
+  id: z7.string().uuid(),
   token: hostedKeySecretSchema,
   organization: identifier,
   project: identifier,
-  environment: z6.enum(["test", "live"]),
+  environment: z7.enum(["test", "live"]),
   permissions: hostedKeyPermissionList,
-  expiresAt: z6.number().nullable()
+  expiresAt: z7.number().nullable()
 }).strict();
-var hostedDeploymentKeySchema = hostedKeySchema.extend({ apiUrl: z6.string().url() }).strict();
+var hostedDeploymentKeySchema = hostedKeySchema.extend({ apiUrl: z7.string().url() }).strict();
 function hostedManagementClient(env) {
   const missing = hostedManagementBindings.filter((name) => !env[name]);
   if (missing.length) {
@@ -720,7 +740,7 @@ function hostedManagementClient(env) {
       `Missing ${missing.join(", ")}. Domino sets these for hosted apps and domino dev; update the project's vite.config.ts to forward them in development.`
     );
   }
-  const environment = z6.enum(["test", "live"]).parse(env.DOMINO_ENVIRONMENT);
+  const environment = z7.enum(["test", "live"]).parse(env.DOMINO_ENVIRONMENT);
   const token = env.DOMINO_MANAGEMENT_KEY;
   return createManagementClient({
     baseUrl: env.DOMINO_API_URL.replace(/\/+$/, ""),
@@ -732,9 +752,9 @@ function hostedManagementClient(env) {
 }
 
 // src/server/index.ts
-var environmentSchema = z7.enum(["test", "live"]);
-var roleSchema = z7.enum(["editor", "reviewer", "staff"]);
-var permissionSchema = z7.enum([
+var environmentSchema = z8.enum(["test", "live"]);
+var roleSchema = z8.enum(["editor", "reviewer", "staff"]);
+var permissionSchema = z8.enum([
   "read",
   "publish",
   "review",
@@ -754,7 +774,7 @@ var permissionSchema = z7.enum([
    */
   "enroll"
 ]);
-var permissionListSchema = z7.array(z7.string()).transform(
+var permissionListSchema = z8.array(z8.string()).transform(
   (values) => values.filter(
     (value) => permissionSchema.safeParse(value).success
   )
@@ -764,58 +784,58 @@ var rolePermissions = {
   reviewer: ["read", "review"],
   staff: ["read", "confirm", "handover"]
 };
-var projectSetupSchema = z7.object({
-  mode: z7.enum(["new", "existing"]),
-  brief: z7.string().trim().min(1).max(4e3)
+var projectSetupSchema = z8.object({
+  mode: z8.enum(["new", "existing"]),
+  brief: z8.string().trim().min(1).max(4e3)
 }).strict();
-var projectSchema = z7.object({
-  slug: z7.string().min(1).max(35).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/),
+var projectSchema = z8.object({
+  slug: z8.string().min(1).max(35).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/),
   /** A response, so fields a newer server adds to the setup are dropped, not rejected. */
-  setup: z7.object(projectSetupSchema.shape).optional(),
+  setup: z8.object(projectSetupSchema.shape).optional(),
   /** The starter chosen at setup. A plain string, so later starters still parse. */
-  starter: z7.string().optional(),
-  id: z7.string().min(1),
+  starter: z8.string().optional(),
+  id: z8.string().min(1),
   organization: identifier,
   project: identifier,
-  name: z7.string(),
-  subtitle: z7.string(),
-  initials: z7.string(),
-  color: z7.string(),
+  name: z8.string(),
+  subtitle: z8.string(),
+  initials: z8.string(),
+  color: z8.string(),
   permissions: permissionListSchema,
-  environments: z7.array(environmentSchema)
+  environments: z8.array(environmentSchema)
 });
-var projectInputSchema = z7.object({
+var projectInputSchema = z8.object({
   actionId: identifier,
-  name: z7.string().trim().min(1).max(80),
+  name: z8.string().trim().min(1).max(80),
   setup: projectSetupSchema.optional(),
   /** The starter a new hosted app begins from, with `setup.mode` "new". */
   starter: starterIdSchema.optional()
 }).strict();
-var projectDeletionInputSchema = z7.object({ confirm: z7.string().min(1).max(80) }).strict();
-var projectDeletionSchema = z7.object({
+var projectDeletionInputSchema = z8.object({ confirm: z8.string().min(1).max(80) }).strict();
+var projectDeletionSchema = z8.object({
   project: identifier,
-  purgeAfter: z7.number().int()
+  purgeAfter: z8.number().int()
 });
-var projectTransferInputSchema = z7.object({ organization: identifier, confirm: z7.string().min(1).max(80) }).strict();
-var projectTransferSchema = z7.object({
+var projectTransferInputSchema = z8.object({ organization: identifier, confirm: z8.string().min(1).max(80) }).strict();
+var projectTransferSchema = z8.object({
   organization: identifier,
   project: identifier
 });
-var grantSchema = z7.object({
-  subject: z7.string().min(1).max(200),
-  roles: z7.array(roleSchema),
-  environments: z7.array(environmentSchema)
+var grantSchema = z8.object({
+  subject: z8.string().min(1).max(200),
+  roles: z8.array(roleSchema),
+  environments: z8.array(environmentSchema)
 }).strict();
-var grantRecordSchema = z7.object(grantSchema.shape);
-var stockAdditionSchema = z7.object({
+var grantRecordSchema = z8.object(grantSchema.shape);
+var stockAdditionSchema = z8.object({
   item: identifier,
-  quantity: z7.number().int(),
+  quantity: z8.number().int(),
   actionId: identifier
 });
-var completionRevokeSchema = z7.object({
+var completionRevokeSchema = z8.object({
   actionId: identifier,
-  reason: z7.string().trim().min(1).max(500),
-  freeOccurrence: z7.boolean().default(false)
+  reason: z8.string().trim().min(1).max(500),
+  freeOccurrence: z8.boolean().default(false)
 }).strict();
 var RevokedEntitlementOutcome = {
   /** No other completion grants the reward: it is void, after cancelling a handover in progress. */
@@ -843,207 +863,209 @@ var RevokedReferralOutcome = {
   /** Qualified on another accepted completion of the program's quest instead. */
   Requalified: "requalified"
 };
-var entitlementOutcomeSchema = z7.string().min(1).max(64);
-var deliveryOutcomeSchema = z7.string().min(1).max(64);
-var referralOutcomeSchema = z7.string().min(1).max(64);
-var completionRevocationSchema = z7.object({
+var entitlementOutcomeSchema = z8.string().min(1).max(64);
+var deliveryOutcomeSchema = z8.string().min(1).max(64);
+var referralOutcomeSchema = z8.string().min(1).max(64);
+var completionRevocationSchema = z8.object({
   completion: identifier,
   quest: identifier,
   member: identifier,
-  revokedAt: z7.number(),
-  occurrenceFreed: z7.boolean(),
-  points: z7.array(
-    z7.object({
+  revokedAt: z8.number(),
+  occurrenceFreed: z8.boolean(),
+  points: z8.array(
+    z8.object({
       entry: identifier,
       balance: identifier,
       reversal: identifier.nullable(),
-      reversed: z7.number().int(),
-      unreversed: z7.number().int()
+      reversed: z8.number().int(),
+      unreversed: z8.number().int()
     })
   ),
-  entitlements: z7.array(
-    z7.object({
+  entitlements: z8.array(
+    z8.object({
       entitlement: identifier,
       reward: identifier,
       outcome: entitlementOutcomeSchema,
-      status: z7.string()
+      status: z8.string()
     })
   ),
-  deliveries: z7.array(
-    z7.object({
-      delivery: z7.string(),
-      roleId: z7.string(),
+  deliveries: z8.array(
+    z8.object({
+      delivery: z8.string(),
+      roleId: z8.string(),
       outcome: deliveryOutcomeSchema,
       /**
        * By Relay's records, another accepted, unrevoked completion of the member also granted this
        * role to the same Discord account and server. Relay does not read Discord's membership.
        */
-      stillGranted: z7.boolean()
+      stillGranted: z8.boolean()
     })
   ),
-  referrals: z7.array(
-    z7.object({
+  referrals: z8.array(
+    z8.object({
       program: identifier,
       outcome: referralOutcomeSchema
     })
   ),
-  streakMilestone: z7.boolean()
+  streakMilestone: z8.boolean()
 });
-var accessSchema = z7.object({
-  actor: z7.string(),
-  organization: z7.string(),
-  admin: z7.boolean(),
-  local: z7.boolean(),
-  projects: z7.array(projectSchema)
+var accessSchema = z8.object({
+  actor: z8.string(),
+  organization: z8.string(),
+  admin: z8.boolean(),
+  local: z8.boolean(),
+  projects: z8.array(projectSchema)
 });
-var querySchema = z7.object({
-  q: z7.string().max(200).default(""),
-  filter: z7.string().max(50).default("all"),
-  offset: z7.coerce.number().int().min(0).max(1e6).default(0),
-  limit: z7.coerce.number().int().min(1).max(100).default(25)
+var querySchema = z8.object({
+  q: z8.string().max(200).default(""),
+  filter: z8.string().max(50).default("all"),
+  offset: z8.coerce.number().int().min(0).max(1e6).default(0),
+  limit: z8.coerce.number().int().min(1).max(100).default(25)
 });
-var accountProfileSchema = z7.object({
-  name: z7.string().optional(),
+var accountProfileSchema = z8.object({
+  name: z8.string().optional(),
   /** The account's handle, where the provider has one (X and Discord). */
-  username: z7.string().optional(),
-  email: z7.string().optional(),
-  emailVerified: z7.boolean().default(false),
-  imageUrl: z7.string().url().optional()
+  username: z8.string().optional(),
+  email: z8.string().optional(),
+  emailVerified: z8.boolean().default(false),
+  imageUrl: z8.string().url().optional()
 });
-var memberAccountSchema = z7.object({
+var memberAccountSchema = z8.object({
   /** `wallet` for wallet sign-in, `account` for every other connected account. */
-  kind: z7.enum(["account", "wallet"]),
-  provider: z7.string(),
-  subject: z7.string(),
-  signInEnabled: z7.boolean(),
+  kind: z8.enum(["account", "wallet"]),
+  provider: z8.string(),
+  subject: z8.string(),
+  signInEnabled: z8.boolean(),
   profile: accountProfileSchema.optional()
 });
-var operationSchema = z7.object({
-  target: z7.string(),
-  paused: z7.boolean(),
-  revision: z7.number().int(),
-  reason: z7.string(),
-  actor: z7.string().nullable(),
-  changedAt: z7.number()
+var operationSchema = z8.object({
+  target: z8.string(),
+  paused: z8.boolean(),
+  revision: z8.number().int(),
+  reason: z8.string(),
+  actor: z8.string().nullable(),
+  changedAt: z8.number()
 });
-var operationInputSchema = z7.object({
-  target: z7.union([
-    z7.literal("redemptions"),
-    z7.string().regex(/^quest:[\w-]+$/)
+var operationInputSchema = z8.object({
+  target: z8.union([
+    z8.literal("redemptions"),
+    z8.string().regex(/^quest:[\w-]+$/)
   ]),
-  paused: z7.boolean(),
-  revision: z7.number().int().nonnegative(),
-  reason: z7.string().trim().min(1).max(500),
+  paused: z8.boolean(),
+  revision: z8.number().int().nonnegative(),
+  reason: z8.string().trim().min(1).max(500),
   actionId: identifier
 }).strict();
-var questLifecycleInputSchema = z7.object({
+var questLifecycleInputSchema = z8.object({
   quest: identifier,
   expectedRelease: identifier.optional(),
-  archived: z7.boolean(),
-  reason: z7.string().trim().min(1).max(500),
+  archived: z8.boolean(),
+  reason: z8.string().trim().min(1).max(500),
   actionId: identifier
 }).strict();
-var questLifecycleSchema = z7.object({
+var questLifecycleSchema = z8.object({
   quest: identifier,
   key: identifier.nullable(),
-  title: z7.string(),
+  title: z8.string(),
   release: identifier,
-  lifecycle: z7.enum(["active", "paused", "archived"]),
-  changed: z7.boolean()
+  lifecycle: z8.enum(["active", "paused", "archived"]),
+  changed: z8.boolean()
 });
-var memberSchema = z7.object({
-  id: z7.string(),
-  accounts: z7.array(memberAccountSchema).default([]),
-  attempts: z7.number(),
-  completions: z7.number(),
-  rewards: z7.number(),
-  lastActivity: z7.number().nullable()
+var memberSchema = z8.object({
+  id: z8.string(),
+  test: z8.boolean().optional(),
+  name: z8.string().nullable().optional(),
+  accounts: z8.array(memberAccountSchema).default([]),
+  attempts: z8.number(),
+  completions: z8.number(),
+  rewards: z8.number(),
+  lastActivity: z8.number().nullable()
 });
-var personSchema = z7.object({
-  id: z7.string(),
-  accounts: z7.array(memberAccountSchema).default([])
+var personSchema = z8.object({
+  id: z8.string(),
+  accounts: z8.array(memberAccountSchema).default([])
 });
-var metricsSchema = z7.object({
-  quests: z7.number(),
-  members: z7.number(),
-  attempts: z7.number(),
-  completions: z7.number(),
-  review: z7.number(),
-  failed: z7.number(),
-  entitlements: z7.number()
+var metricsSchema = z8.object({
+  quests: z8.number(),
+  members: z8.number(),
+  attempts: z8.number(),
+  completions: z8.number(),
+  review: z8.number(),
+  failed: z8.number(),
+  entitlements: z8.number()
 });
-var readinessSchema = z7.object({
-  checks: z7.array(
-    z7.object({
-      id: z7.string(),
-      status: z7.enum(["ready", "blocked"]),
-      title: z7.string(),
-      detail: z7.string()
+var readinessSchema = z8.object({
+  checks: z8.array(
+    z8.object({
+      id: z8.string(),
+      status: z8.enum(["ready", "blocked"]),
+      title: z8.string(),
+      detail: z8.string()
     })
   )
 });
-var inventorySchema = z7.object({
-  item: z7.string(),
-  name: z7.string().nullable().default(null),
-  available: z7.number(),
-  reserved: z7.number(),
-  allocated: z7.number().default(0)
+var inventorySchema = z8.object({
+  item: z8.string(),
+  name: z8.string().nullable().default(null),
+  available: z8.number(),
+  reserved: z8.number(),
+  allocated: z8.number().default(0)
 });
-var auditRecordSchema = z7.object({
-  id: z7.string(),
-  action: z7.string(),
-  actor: z7.string().nullable(),
-  detail: z7.string(),
-  at: z7.number(),
-  attempt: z7.string().nullable()
+var auditRecordSchema = z8.object({
+  id: z8.string(),
+  action: z8.string(),
+  actor: z8.string().nullable(),
+  detail: z8.string(),
+  at: z8.number(),
+  attempt: z8.string().nullable()
 });
-var pageSchema = z7.object({
+var pageSchema = z8.object({
   snapshot: snapshotSchema,
-  members: z7.array(memberSchema),
-  people: z7.array(personSchema).default([]),
+  members: z8.array(memberSchema),
+  people: z8.array(personSchema).default([]),
   metrics: metricsSchema,
-  total: z7.number(),
-  offset: z7.number(),
-  limit: z7.number(),
-  inventory: z7.array(inventorySchema),
-  operations: z7.array(operationSchema).default([]),
-  audit: z7.array(auditRecordSchema).default([]),
-  questCounts: z7.record(z7.string(), z7.number())
+  total: z8.number(),
+  offset: z8.number(),
+  limit: z8.number(),
+  inventory: z8.array(inventorySchema),
+  operations: z8.array(operationSchema).default([]),
+  audit: z8.array(auditRecordSchema).default([]),
+  questCounts: z8.record(z8.string(), z8.number())
 });
-var managedOAuthAccountBaseSchema = z7.object({
-  provider: z7.enum(["x", "discord"]),
-  revision: z7.number().int().nonnegative()
+var managedOAuthAccountBaseSchema = z8.object({
+  provider: z8.enum(["x", "discord"]),
+  revision: z8.number().int().nonnegative()
 });
-var managedOAuthAccountSchema = z7.discriminatedUnion("status", [
+var managedOAuthAccountSchema = z8.discriminatedUnion("status", [
   managedOAuthAccountBaseSchema.extend({
-    status: z7.literal("connected"),
-    subject: z7.string().min(1),
-    linkedAt: z7.number()
+    status: z8.literal("connected"),
+    subject: z8.string().min(1),
+    linkedAt: z8.number()
   }),
-  managedOAuthAccountBaseSchema.extend({ status: z7.literal("disconnected") })
+  managedOAuthAccountBaseSchema.extend({ status: z8.literal("disconnected") })
 ]);
-var memberOAuthUnlinkInputSchema = z7.object({
-  provider: z7.enum(["x", "discord"]),
-  subject: z7.string().min(1).max(4096),
-  revision: z7.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER - 1),
-  reason: z7.string().trim().min(1).max(500)
+var memberOAuthUnlinkInputSchema = z8.object({
+  provider: z8.enum(["x", "discord"]),
+  subject: z8.string().min(1).max(4096),
+  revision: z8.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER - 1),
+  reason: z8.string().trim().min(1).max(500)
 }).strict();
 var managedWalletSchema = linkedWalletSchema.extend({
-  status: z7.enum(["linked", "unlinked"]),
-  unlinkedAt: z7.number().int().nullable(),
+  status: z8.enum(["linked", "unlinked"]),
+  unlinkedAt: z8.number().int().nullable(),
   /** "member", or the operator or key that unlinked it. */
-  unlinkedBy: z7.string().nullable()
+  unlinkedBy: z8.string().nullable()
 });
 var managedMemberIdentitySchema = memberIdentitySchema.extend({
-  status: z7.enum(["linked", "unlinked"]),
-  unlinkedAt: z7.number().int().nullable(),
+  status: z8.enum(["linked", "unlinked"]),
+  unlinkedAt: z8.number().int().nullable(),
   /** The operator or key that unlinked it. */
-  unlinkedBy: z7.string().nullable()
+  unlinkedBy: z8.string().nullable()
 });
-var memberIdentityChangeInputSchema = z7.object({
+var memberIdentityChangeInputSchema = z8.object({
   kind: appIdentityKindSchema,
-  subject: z7.string().min(1).max(256),
-  reason: z7.string().trim().min(1).max(500)
+  subject: z8.string().min(1).max(256),
+  reason: z8.string().trim().min(1).max(500)
 }).strict();
 var balanceCheckSchema = walletBalanceSchema.pick({
   chain: true,
@@ -1053,57 +1075,57 @@ var balanceCheckSchema = walletBalanceSchema.pick({
   wallets: true,
   observedAt: true
 }).extend({ attempt: identifier });
-var walletBalanceChainsSchema = z7.object({
-  chains: z7.array(
-    z7.object({
-      chain: z7.union([
-        z7.literal(solanaMainnet),
+var walletBalanceChainsSchema = z8.object({
+  chains: z8.array(
+    z8.object({
+      chain: z8.union([
+        z8.literal(solanaMainnet),
         cosmosNetworkSchema,
         evmChainIdSchema
       ]),
-      name: z7.string(),
-      testnet: z7.boolean()
+      name: z8.string(),
+      testnet: z8.boolean()
     })
   )
 });
-var memberWalletUnlinkInputSchema = walletUnlinkInputSchema.extend({ reason: z7.string().trim().min(1).max(500) }).strict();
+var memberWalletUnlinkInputSchema = walletUnlinkInputSchema.extend({ reason: z8.string().trim().min(1).max(500) }).strict();
 var memberWalletSignInInputSchema = walletUnlinkInputSchema.extend({
-  enabled: z7.boolean(),
-  reason: z7.string().trim().min(1).max(500)
+  enabled: z8.boolean(),
+  reason: z8.string().trim().min(1).max(500)
 }).strict();
-var participantSignInSchema = z7.object({
-  providers: z7.array(
-    z7.object({ provider: authProviderSchema, configured: z7.boolean() })
+var participantSignInSchema = z8.object({
+  providers: z8.array(
+    z8.object({ provider: authProviderSchema, configured: z8.boolean() })
   ),
-  email: z7.boolean(),
+  email: z8.boolean(),
   /** Wallet families: `"solana"`, `"eip155"`, `"cosmos"`. */
   wallets: walletSignInNetworksSchema,
   /** Why participants cannot sign in to this project, or null. */
-  issue: z7.string().nullable(),
-  updatedAt: z7.number().nullable(),
-  updatedBy: z7.string().nullable()
+  issue: z8.string().nullable(),
+  updatedAt: z8.number().nullable(),
+  updatedBy: z8.string().nullable()
 });
-var participantSignInInputSchema = z7.object({
+var participantSignInInputSchema = z8.object({
   wallets: walletSignInNetworksSchema
 }).strict();
-var memberDetailSchema = z7.object({
+var memberDetailSchema = z8.object({
   snapshot: snapshotSchema,
   member: memberSchema,
   progress: memberProgressSchema,
   /** Current and historical campaign enrollment state, including inactive enrollments. */
-  campaignEnrollments: z7.array(campaignEnrollmentSchema).default([]),
-  passes: z7.array(
-    z7.object({
-      provider: z7.string(),
-      event: z7.string(),
-      subject: z7.string(),
+  campaignEnrollments: z8.array(campaignEnrollmentSchema).default([]),
+  passes: z8.array(
+    z8.object({
+      provider: z8.string(),
+      event: z8.string(),
+      subject: z8.string(),
       attempt: identifier.nullable()
     })
   ).default([]),
   /** Linked and unlinked wallets. */
-  wallets: z7.array(managedWalletSchema),
+  wallets: z8.array(managedWalletSchema),
   /** The member's 10 most recent recorded balance reads, newest first. */
-  balanceChecks: z7.array(balanceCheckSchema),
+  balanceChecks: z8.array(balanceCheckSchema),
   /** The member's participant profile in this project. */
   profile: managedProfileSchema.nullable(),
   /**
@@ -1111,44 +1133,44 @@ var memberDetailSchema = z7.object({
    * member ID: their selected X and Discord accounts and their `app:<name>` identities in this
    * project, including app identities an operator unlinked, by kind.
    */
-  identities: z7.array(managedMemberIdentitySchema)
+  identities: z8.array(managedMemberIdentitySchema)
 });
-var stockInputSchema = z7.object({
+var stockInputSchema = z8.object({
   item: identifier,
-  quantity: z7.number().int().positive().max(1e6),
+  quantity: z8.number().int().positive().max(1e6),
   actionId: identifier
 }).strict();
-var ingestTrackerScopeSchema = z7.array(identifier).min(1).max(100).nullable();
-var tokenScopeInputSchema = z7.object({ ingestTrackers: ingestTrackerScopeSchema }).strict();
-var tokenInputSchema = z7.object({
-  name: z7.string().trim().min(1).max(80),
+var ingestTrackerScopeSchema = z8.array(identifier).min(1).max(100).nullable();
+var tokenScopeInputSchema = z8.object({ ingestTrackers: ingestTrackerScopeSchema }).strict();
+var tokenInputSchema = z8.object({
+  name: z8.string().trim().min(1).max(80),
   project: identifier,
   environment: environmentSchema,
-  permissions: z7.array(permissionSchema).min(1),
+  permissions: z8.array(permissionSchema).min(1),
   ingestTrackers: ingestTrackerScopeSchema.optional(),
-  days: z7.number().int().min(1).max(90).default(30)
+  days: z8.number().int().min(1).max(90).default(30)
 }).strict();
-var tokenSchema = z7.object({
-  id: z7.string(),
-  name: z7.string(),
-  project: z7.string(),
+var tokenSchema = z8.object({
+  id: z8.string(),
+  name: z8.string(),
+  project: z8.string(),
   environment: environmentSchema,
   permissions: permissionListSchema,
   ingestTrackers: ingestTrackerScopeSchema.optional(),
-  expiresAt: z7.number()
+  expiresAt: z8.number()
 });
-var issuedTokenSchema = tokenSchema.extend({ token: z7.string() });
-var teamSchema = z7.array(
-  z7.object({ id: z7.string(), label: z7.string() })
+var issuedTokenSchema = tokenSchema.extend({ token: z8.string() });
+var teamSchema = z8.array(
+  z8.object({ id: z8.string(), label: z8.string() })
 );
-var memberLookupSchema = z7.object({
-  provider: z7.string().min(1).max(200),
-  subject: z7.string().min(1).max(2048)
+var memberLookupSchema = z8.object({
+  provider: z8.string().min(1).max(200),
+  subject: z8.string().min(1).max(2048)
 }).strict();
-var verifiedPassSchema = z7.object({
+var verifiedPassSchema = z8.object({
   provider: identifier,
   event: identifier,
-  subject: z7.string().min(1).max(2048),
+  subject: z8.string().min(1).max(2048),
   member: identifier,
   quest: identifier
 }).strict();
@@ -1166,9 +1188,9 @@ function queryString(values) {
   ).toString();
   return query ? "?" + query : "";
 }
-var serverErrorSchema = z7.looseObject({
-  error: z7.string(),
-  code: z7.string().optional()
+var serverErrorSchema = z8.looseObject({
+  error: z8.string(),
+  code: z8.string().optional()
 });
 function checkedTimeout(timeout) {
   if (timeout !== void 0 && !validTimeout(timeout)) {
@@ -1187,7 +1209,7 @@ function clientFailure(error) {
   return new ManagementError({
     kind: "client",
     code: ManagementErrorCode.InvalidInput,
-    message: error instanceof z7.ZodError ? `Invalid management request: ${z7.prettifyError(error)}` : error instanceof Error ? error.message : "Invalid management request",
+    message: error instanceof z8.ZodError ? `Invalid management request: ${z8.prettifyError(error)}` : error instanceof Error ? error.message : "Invalid management request",
     cause: error
   });
 }
@@ -1439,12 +1461,12 @@ function createManagementClient(options) {
       call
     );
   }
-  const ok = z7.object({ ok: z7.literal(true) });
+  const ok = z8.object({ ok: z8.literal(true) });
   return guarded({
     raw,
     request,
     trackers: {
-      list: (call) => get("/trackers", z7.array(trackerStatusSchema), call),
+      list: (call) => get("/trackers", z8.array(trackerStatusSchema), call),
       get: (reference, call) => get(
         `/trackers/${identifier.parse(reference)}`,
         trackerStatusSchema,
@@ -1532,7 +1554,7 @@ function createManagementClient(options) {
         engagementPublishSchema.parse(input),
         call
       ),
-      list: (call) => get("/engagement", z7.array(engagementRuleSchema), call),
+      list: (call) => get("/engagement", z8.array(engagementRuleSchema), call),
       page: (input, call) => get(
         "/engagement/history" + queryString(engagementPageQuerySchema.parse(input)),
         engagementPageSchema,
@@ -1552,7 +1574,7 @@ function createManagementClient(options) {
       )
     },
     pointLedgers: {
-      list: (call) => get("/point-ledgers", z7.array(managedPointLedgerSchema), call),
+      list: (call) => get("/point-ledgers", z8.array(managedPointLedgerSchema), call),
       save: (input, call) => post(
         "/point-ledgers/update",
         managedPointLedgerSchema,
@@ -1567,7 +1589,7 @@ function createManagementClient(options) {
       )
     },
     points: {
-      ledgers: (call) => get("/point-ledgers", z7.array(managedPointLedgerSchema), call),
+      ledgers: (call) => get("/point-ledgers", z8.array(managedPointLedgerSchema), call),
       createLedger: (input, call) => create(
         "/point-ledgers",
         pointLedgerSchema,
@@ -1588,9 +1610,9 @@ function createManagementClient(options) {
       ),
       history: (member, balance, before, call) => get(
         `/points/${identifier.parse(member)}/${identifier.parse(balance)}/history${queryString({ before })}`,
-        z7.object({
-          items: z7.array(pointsEntrySchema),
-          next: z7.number().nullable()
+        z8.object({
+          items: z8.array(pointsEntrySchema),
+          next: z8.number().nullable()
         }),
         call
       )
@@ -1602,7 +1624,7 @@ function createManagementClient(options) {
         referralHistorySchema,
         call
       ),
-      list: (call) => get("/referrals", z7.array(publishedReferralSchema), call),
+      list: (call) => get("/referrals", z8.array(publishedReferralSchema), call),
       participants: (before, call) => get(
         `/referrals/participants${queryString({ before })}`,
         referralManagementSchema,
@@ -1616,7 +1638,7 @@ function createManagementClient(options) {
       )
     },
     leaderboards: {
-      list: (call) => get("/leaderboards", z7.array(publishedLeaderboardSchema), call),
+      list: (call) => get("/leaderboards", z8.array(publishedLeaderboardSchema), call),
       standings: (board, input = {}, call) => {
         const query = leaderboardQuerySchema.parse(input);
         return get(
@@ -1630,12 +1652,12 @@ function createManagementClient(options) {
       },
       history: (board, call) => get(
         `/leaderboards/${identifier.parse(board)}/history`,
-        z7.array(publishedLeaderboardSchema),
+        z8.array(publishedLeaderboardSchema),
         call
       ),
       exclusions: (board, call) => get(
         `/leaderboards/${identifier.parse(board)}/exclusions`,
-        z7.array(z7.object({ member: identifier })),
+        z8.array(z8.object({ member: identifier })),
         call
       ),
       exclude: (board, input, call) => post(
@@ -1652,7 +1674,7 @@ function createManagementClient(options) {
       ),
       settlements: (board, call) => get(
         `/leaderboards/${identifier.parse(board)}/settlements`,
-        z7.array(leaderboardSettlementSummarySchema),
+        z8.array(leaderboardSettlementSummarySchema),
         call
       ),
       settlement: (settlement, call) => get(
@@ -1668,7 +1690,7 @@ function createManagementClient(options) {
       )
     },
     deployments: {
-      list: (call) => get("/deployments", z7.array(deploymentRecordSchema), call),
+      list: (call) => get("/deployments", z8.array(deploymentRecordSchema), call),
       get: (deployment, call) => get(
         `/deployments/${identifier.parse(deployment)}`,
         deploymentRecordSchema,
@@ -1916,7 +1938,7 @@ function createManagementClient(options) {
         stockInputSchema.parse(withActionId(input)),
         call
       ),
-      catalog: (call) => get("/pickup-inventory", z7.array(pickupCatalogSchema), call),
+      catalog: (call) => get("/pickup-inventory", z8.array(pickupCatalogSchema), call),
       configure: (input, call) => post(
         "/pickup-inventory",
         pickupCatalogSchema,
@@ -1930,10 +1952,10 @@ function createManagementClient(options) {
       )
     },
     offers: {
-      list: (call) => get("/offers", z7.array(offerSchema), call),
+      list: (call) => get("/offers", z8.array(offerSchema), call),
       redemptions: (input = {}, call) => get(
         `/redemptions${queryString({ member: input.member })}`,
-        z7.array(redemptionSchema),
+        z8.array(redemptionSchema),
         call
       ),
       /** Pauses or resumes an offer at the revision the operator saw. */
@@ -1974,7 +1996,7 @@ function createManagementClient(options) {
      * them; API keys and project-scoped playground sessions cannot.
      */
     tokens: {
-      list: (call) => get("/tokens", z7.array(tokenSchema), call),
+      list: (call) => get("/tokens", z8.array(tokenSchema), call),
       /**
        * Issues a key for one project and environment, limited to permissions the caller holds
        * there. The secret `token` is in this response only.
@@ -1982,14 +2004,14 @@ function createManagementClient(options) {
       create: (input, call) => post("/tokens", issuedTokenSchema, tokenInputSchema.parse(input), call),
       /** Replace a personal key's ingestion restriction without changing its secret. */
       scope: (id, input, call) => request(
-        `/tokens/${encodeURIComponent(z7.string().min(1).parse(id))}/scope`,
+        `/tokens/${encodeURIComponent(z8.string().min(1).parse(id))}/scope`,
         tokenSchema,
         tokenScopeInputSchema.parse(input),
         "PUT",
         call
       ),
       revoke: (id, call) => request(
-        `/tokens/${encodeURIComponent(z7.string().min(1).parse(id))}`,
+        `/tokens/${encodeURIComponent(z8.string().min(1).parse(id))}`,
         ok,
         void 0,
         "DELETE",
@@ -1998,7 +2020,7 @@ function createManagementClient(options) {
     },
     /** Who holds which roles on the client's project; organization administrators only. */
     grants: {
-      list: (call) => get("/grants", z7.array(grantRecordSchema), call),
+      list: (call) => get("/grants", z8.array(grantRecordSchema), call),
       /** Replaces one person's roles and environments on the project. The audit log records it. */
       set: (input, call) => request(
         "/grants",
@@ -2014,7 +2036,7 @@ function createManagementClient(options) {
     },
     /** Signed activity notifications for one project/environment; writes require publish permission. */
     webhooks: {
-      list: (call) => get("/webhooks", z7.array(webhookEndpointSchema), call),
+      list: (call) => get("/webhooks", z8.array(webhookEndpointSchema), call),
       create: (input, call) => post(
         "/webhooks",
         webhookSecretSchema,
@@ -2022,31 +2044,31 @@ function createManagementClient(options) {
         call
       ),
       update: (id, input, call) => request(
-        `/webhooks/${z7.string().uuid().parse(id)}`,
+        `/webhooks/${z8.string().uuid().parse(id)}`,
         webhookEndpointSchema,
         webhookUpdateSchema.parse(input),
         "PUT",
         call
       ),
       disable: (id, call) => post(
-        `/webhooks/${z7.string().uuid().parse(id)}/disable`,
+        `/webhooks/${z8.string().uuid().parse(id)}/disable`,
         webhookEndpointSchema,
         {},
         call
       ),
       rotateSecret: (id, call) => post(
-        `/webhooks/${z7.string().uuid().parse(id)}/rotate-secret`,
+        `/webhooks/${z8.string().uuid().parse(id)}/rotate-secret`,
         webhookSecretSchema,
         {},
         call
       ),
       deliveries: (id, query = {}, call) => get(
-        `/webhooks/${z7.string().uuid().parse(id)}/deliveries${queryString(webhookQuerySchema.parse(query))}`,
+        `/webhooks/${z8.string().uuid().parse(id)}/deliveries${queryString(webhookQuerySchema.parse(query))}`,
         webhookDeliveryPageSchema,
         call
       ),
       replay: (id, delivery, call) => post(
-        `/webhooks/${z7.string().uuid().parse(id)}/deliveries/${z7.string().uuid().parse(delivery)}/replay`,
+        `/webhooks/${z8.string().uuid().parse(id)}/deliveries/${z8.string().uuid().parse(delivery)}/replay`,
         webhookDeliverySchema,
         {},
         call
@@ -2057,7 +2079,7 @@ function createManagementClient(options) {
      * environment. Organization administrators, from a Console session only.
      */
     identityIntegrations: {
-      list: (call) => get("/identity-integrations", z7.array(identityIntegrationSchema), call),
+      list: (call) => get("/identity-integrations", z8.array(identityIntegrationSchema), call),
       /** The secret `token` is in this response only. */
       create: (input, call) => post(
         "/identity-integrations",
@@ -2067,7 +2089,7 @@ function createManagementClient(options) {
       ),
       /** Replaces the key's secret and extends it by 90 days; the old secret stops working. */
       rotate: (id, call) => post(
-        `/identity-integrations/${z7.string().uuid().parse(id)}/rotate`,
+        `/identity-integrations/${z8.string().uuid().parse(id)}/rotate`,
         identityIntegrationSecretSchema,
         {},
         call
@@ -2079,7 +2101,7 @@ function createManagementClient(options) {
        */
       kinds: (call) => get(
         "/identity-integrations/kinds",
-        z7.array(identityKindClaimSchema),
+        z8.array(identityKindClaimSchema),
         call
       ),
       /**
@@ -2087,8 +2109,8 @@ function createManagementClient(options) {
        * and keep attributing tracker records; unlink them on the member to stop that.
        */
       revoke: (id, call) => request(
-        `/identity-integrations/${z7.string().uuid().parse(id)}`,
-        z7.null(),
+        `/identity-integrations/${z8.string().uuid().parse(id)}`,
+        z8.null(),
         void 0,
         "DELETE",
         call
@@ -2098,7 +2120,7 @@ function createManagementClient(options) {
     resources: {
       list: (call) => get(
         "/resources",
-        z7.object({ resources: z7.array(managedResourceSchema) }),
+        z8.object({ resources: z8.array(managedResourceSchema) }),
         call
       ),
       lifecycle: (input, call) => post(
@@ -2126,6 +2148,28 @@ function createManagementClient(options) {
       {},
       call
     ),
+    /** Console sessions with publish permission, in test only. Reset deletes the member. */
+    testMembers: {
+      create: (input, call) => post(
+        "/test-members",
+        testMemberSchema,
+        testMemberCreateSchema.parse(input),
+        call
+      ),
+      list: (call) => get("/test-members", z8.array(testMemberSchema), call),
+      act: (member, input, call) => post(
+        `/test-members/${identifier.parse(member)}/actions`,
+        attemptSchema,
+        testMemberActionSchema.parse(input),
+        call
+      ),
+      reset: (member, input, call) => post(
+        `/test-members/${identifier.parse(member)}/reset`,
+        testMemberResetResultSchema,
+        testMemberResetSchema.parse(input),
+        call
+      )
+    },
     /** The project's members, as operators see them. */
     members: {
       counters: {
@@ -2157,26 +2201,26 @@ function createManagementClient(options) {
       /** Who each member is: up to 100 distinct IDs; unknown IDs come back without accounts. */
       people: (members, call) => get(
         `/people${queryString({ ids: members.join(",") })}`,
-        z7.array(personSchema),
+        z8.array(personSchema),
         call
       ),
       /** Current X and Discord quest account selections; requires read permission. */
       oauthAccounts: (member, call) => get(
         `/members/${encodeURIComponent(member)}/oauth-accounts`,
-        z7.array(managedOAuthAccountSchema),
+        z8.array(managedOAuthAccountSchema),
         call
       ),
       /** Unlinks the reviewed selection across this organization/environment, preserving ownership and sign-in. */
       unlinkOAuthAccount: (member, input, call) => post(
         `/members/${encodeURIComponent(member)}/oauth-accounts/unlink`,
-        z7.array(managedOAuthAccountSchema),
+        z8.array(managedOAuthAccountSchema),
         memberOAuthUnlinkInputSchema.parse(input),
         call
       ),
       /** Unlinks a member's wallet from the project with a reason; requires `review` permission. The address stays bound to the member. */
       unlinkWallet: (member, input, call) => post(
         `/members/${encodeURIComponent(member)}/wallets/unlink`,
-        z7.array(managedWalletSchema),
+        z8.array(managedWalletSchema),
         memberWalletUnlinkInputSchema.parse(input),
         call
       ),
@@ -2187,14 +2231,14 @@ function createManagementClient(options) {
        */
       unlinkIdentity: (member, input, call) => post(
         `/members/${encodeURIComponent(member)}/identities/unlink`,
-        z7.array(managedMemberIdentitySchema),
+        z8.array(managedMemberIdentitySchema),
         memberIdentityChangeInputSchema.parse(input),
         call
       ),
       /** Relinks an `app:<name>` identity an operator unlinked from this member, with a reason; requires `review` permission. */
       relinkIdentity: (member, input, call) => post(
         `/members/${encodeURIComponent(member)}/identities/relink`,
-        z7.array(managedMemberIdentitySchema),
+        z8.array(managedMemberIdentitySchema),
         memberIdentityChangeInputSchema.parse(input),
         call
       ),
@@ -2204,7 +2248,7 @@ function createManagementClient(options) {
        */
       setWalletSignIn: (member, input, call) => post(
         `/members/${encodeURIComponent(member)}/wallets/sign-in`,
-        z7.array(managedWalletSchema),
+        z8.array(managedWalletSchema),
         memberWalletSignInInputSchema.parse(input),
         call
       )
@@ -2503,6 +2547,11 @@ export {
   stockAdditionSchema,
   stockInputSchema,
   teamSchema,
+  testMemberActionSchema,
+  testMemberCreateSchema,
+  testMemberResetResultSchema,
+  testMemberResetSchema,
+  testMemberSchema,
   tokenInputSchema,
   tokenSchema,
   tokenScopeInputSchema,