@domino-sdk/relay 1.24.0 → 1.29.0

package/dist/server/index.js

@@ -1,7 +1,7 @@
 import {
   attemptCaptureSchema,
   capturedFactSchema
-} from "../chunk-G75JVB4D.js";
+} from "../chunk-DDA7G23P.js";
 import {
   activityTypeSchema,
   activityTypes,
@@ -25,8 +25,8 @@ import {
   publishDeploymentSchema,
   rejectDeploymentSchema,
   submitDeploymentSchema
-} from "../chunk-UCZGXYCN.js";
-import "../chunk-MC6V6VMG.js";
+} from "../chunk-6YLULKQM.js";
+import "../chunk-4OC7REYX.js";
 import {
   DEFAULT_MANAGEMENT_TIMEOUT,
   ManagementError,
@@ -44,28 +44,28 @@ import {
   participantExchangeSchema,
   questConfiguration,
   sequenceCursorSchema
-} from "../chunk-NXWPYO6U.js";
+} from "../chunk-V4FGPIR3.js";
 import {
   parseImageExtraction,
   parseImageResult
-} from "../chunk-ENBQ6UEE.js";
+} from "../chunk-W2HGXOZ5.js";
 import {
   imageAssetArtifactSchema
-} from "../chunk-B4EZ76WX.js";
+} from "../chunk-22QERRAG.js";
 import {
   sourceDataSchema,
   sourceRoles,
   validateQuestShape
-} from "../chunk-AXQYGVOP.js";
+} from "../chunk-LPURBE7D.js";
 import {
   isIntegrationParticipantPath,
   isParticipantRoute,
   participantRoutePattern,
   participantRoutes
-} from "../chunk-USVER53M.js";
+} from "../chunk-DP4YWFMY.js";
 import {
   withActionId
-} from "../chunk-E7MVYASS.js";
+} from "../chunk-W7PDXGYB.js";
 import {
   allocateQuestSchema,
   allocatedQuestSchema,
@@ -83,7 +83,7 @@ import {
   rewardDeliveriesSchema,
   rewardDeliverySchema,
   saveQuestDraftSchema
-} from "../chunk-GB26FIZT.js";
+} from "../chunk-MNL5NSC4.js";
 import {
   badgeMutationResultSchema,
   badgeMutationSchema,
@@ -101,6 +101,8 @@ import {
   engagementRuleVersionPageSchema,
   engagementVersionPageSchema,
   engagementVersionQuerySchema,
+  leaderboardExclusionGroupBindingSchema,
+  leaderboardExclusionGroupSchema,
   leaderboardExclusionSchema,
   leaderboardGroupSchema,
   leaderboardPageSchema,
@@ -133,15 +135,15 @@ import {
   referralQualificationSchema,
   referralRewardResolutionSchema,
   referralSuspensionSchema
-} from "../chunk-MRU7GX2V.js";
+} from "../chunk-C3KL5SGM.js";
 import {
   telegramChatConnectionSchema,
   telegramChatIdSchema,
   telegramChatsSchema
-} from "../chunk-W33PYWYQ.js";
-import "../chunk-WOGCRDFT.js";
-import "../chunk-MO2FASX4.js";
-import "../chunk-JUQ2GNMD.js";
+} from "../chunk-JNBNL7FE.js";
+import "../chunk-CCTZIHWN.js";
+import "../chunk-5FQ2BNG2.js";
+import "../chunk-PNCLJOUD.js";
 import {
   CompletionSourceKind,
   addGroupMemberSchema,
@@ -193,6 +195,7 @@ import {
   projectGroupKey,
   publishedReleaseSchema,
   questSettingsInputSchema,
+  questSubmissionSchema,
   removeGroupMemberSchema,
   responseSchema,
   snapshotSchema,
@@ -200,6 +203,7 @@ import {
   solanaMainnet,
   staffDecisionSchema,
   stockItemSchema,
+  streakProgressSchema,
   submitSchema,
   trackerContentReadSchema,
   trackerContentSchema,
@@ -226,10 +230,10 @@ import {
   walletSignInNetworksSchema,
   walletUnlinkInputSchema,
   whereSchemaIssue
-} from "../chunk-6UFXPKLA.js";
+} from "../chunk-BVEWY2ZL.js";
 
 // src/server/identity-links.ts
-import { z } from "zod";
+import * as z from "zod";
 var walletIdentitySelectorSchema = walletUnlinkInputSchema.extend({
   kind: z.literal("wallet")
 });
@@ -275,247 +279,319 @@ var memberIdentityLinkPageSchema = z.object({
   nextCursor: pageCursorSchema.nullable()
 });
 
+// src/server/identity-states.ts
+import * as z2 from "zod";
+var telegramIdentitySelectorSchema = z2.strictObject({
+  kind: z2.literal("telegram"),
+  subject: z2.string().min(1).max(4096)
+});
+var appIdentitySelectorSchema = z2.strictObject({
+  kind: z2.literal("app"),
+  appKind: appIdentityKindSchema,
+  subject: z2.string().min(1).max(256)
+});
+var memberIdentitySelectorSchema = z2.discriminatedUnion("kind", [
+  walletIdentitySelectorSchema,
+  oauthIdentitySelectorSchema,
+  telegramIdentitySelectorSchema,
+  appIdentitySelectorSchema
+]);
+var state2 = {
+  /** Every identity state belongs to the member's project and environment. */
+  scope: z2.literal("project"),
+  /**
+   * What `expectedRevision` names. A wallet and an app identity count their own changes; an X,
+   * Discord or Telegram account shares its provider's selection revision with the member's other
+   * accounts of that provider, because the member selects one of them at a time.
+   */
+  revision: z2.number().int().safe().nonnegative(),
+  /** Whether trackers attribute records to the member through this identity. */
+  linked: z2.boolean(),
+  /** When the current link began; null while unlinked, or for a link older than link times. */
+  linkedAt: z2.number().int().safe().nonnegative().nullable(),
+  /** When an operator or the member unlinked a wallet or app identity; null otherwise. */
+  unlinkedAt: z2.number().int().safe().nonnegative().nullable(),
+  /** "member", or the operator or key that unlinked it. */
+  unlinkedBy: z2.string().nullable(),
+  canUnlink: z2.boolean(),
+  /**
+   * False while linked, and for an X, Discord or Telegram account while the member has selected
+   * another account of that provider: unlink that one first.
+   */
+  canRelink: z2.boolean(),
+  /**
+   * For a wallet: whether it signs the member in, which `setSignIn` changes on its own. Null for
+   * the other kinds: an app identity signs in exactly while it is linked, and an X, Discord or
+   * Telegram account signs in as its provider allows, whatever its link.
+   */
+  signIn: z2.boolean().nullable()
+};
+var memberIdentityStateSchema = z2.discriminatedUnion("kind", [
+  walletIdentitySelectorSchema.strip().extend(state2),
+  oauthIdentitySelectorSchema.strip().extend(state2),
+  telegramIdentitySelectorSchema.strip().extend(state2),
+  appIdentitySelectorSchema.strip().extend(state2)
+]);
+var memberIdentityStatePageSchema = z2.object({
+  items: z2.array(memberIdentityStateSchema),
+  nextCursor: pageCursorSchema.nullable()
+});
+var command = {
+  actionId: z2.string().uuid().default(() => crypto.randomUUID()),
+  reason: z2.string().trim().min(1).max(500)
+};
+var memberIdentityLinkChangeInputSchema = z2.strictObject({
+  ...command,
+  identity: memberIdentitySelectorSchema,
+  expectedRevision: z2.number().int().safe().nonnegative()
+});
+var memberIdentitySignInInputSchema = z2.strictObject({
+  ...command,
+  identity: z2.discriminatedUnion("kind", [walletIdentitySelectorSchema]),
+  enabled: z2.boolean()
+});
+
 // src/server/settlement-reviews.ts
-import { z as z2 } from "zod";
+import * as z3 from "zod";
 var decision = {
-  status: z2.enum(["pending", "approved", "rejected"]),
-  rejectedAt: z2.number().int().safe().nonnegative().nullable(),
-  rejectedBy: z2.string().nullable(),
-  rejectionReason: z2.string().nullable()
+  status: z3.enum(["pending", "approved", "rejected"]),
+  rejectedAt: z3.number().int().safe().nonnegative().nullable(),
+  rejectedBy: z3.string().nullable(),
+  rejectionReason: z3.string().nullable()
 };
 var leaderboardSettlementReviewSummarySchema = leaderboardSettlementSummarySchema.extend(decision);
 var leaderboardSettlementReviewSchema = leaderboardSettlementSchema.extend(decision);
-var leaderboardSettlementReviewQuerySchema = z2.strictObject({
+var leaderboardSettlementReviewQuerySchema = z3.strictObject({
   cursor: pageCursorSchema.optional(),
-  limit: z2.coerce.number().int().min(1).max(100).default(25)
+  limit: z3.coerce.number().int().min(1).max(100).default(25)
 });
-var leaderboardSettlementReviewPageSchema = z2.object({
-  items: z2.array(leaderboardSettlementReviewSummarySchema),
+var leaderboardSettlementReviewPageSchema = z3.object({
+  items: z3.array(leaderboardSettlementReviewSummarySchema),
   nextCursor: pageCursorSchema.nullable()
 });
-var leaderboardSettlementRejectionSchema = z2.strictObject({
-  actionId: z2.string().uuid().default(() => crypto.randomUUID()),
-  expectedCreatedAt: z2.number().int().safe().nonnegative(),
-  reason: z2.string().trim().min(1).max(500)
+var leaderboardSettlementRejectionSchema = z3.strictObject({
+  actionId: z3.string().uuid().default(() => crypto.randomUUID()),
+  expectedCreatedAt: z3.number().int().safe().nonnegative(),
+  reason: z3.string().trim().min(1).max(500)
 });
 
 // src/server/inventory-items.ts
-import { z as z3 } from "zod";
-var inventoryItemStateSchema = z3.object({
+import * as z4 from "zod";
+var inventoryItemStateSchema = z4.object({
   item: identifier,
-  name: z3.string().nullable(),
-  available: z3.number().int().safe().nonnegative(),
-  reserved: z3.number().int().safe().nonnegative(),
-  allocated: z3.number().int().safe().nonnegative(),
-  offers: z3.array(identifier),
-  revision: z3.number().int().nonnegative(),
-  archivedAt: z3.number().int().safe().nonnegative().nullable()
+  name: z4.string().nullable(),
+  available: z4.number().int().safe().nonnegative(),
+  reserved: z4.number().int().safe().nonnegative(),
+  allocated: z4.number().int().safe().nonnegative(),
+  offers: z4.array(identifier),
+  revision: z4.number().int().nonnegative(),
+  archivedAt: z4.number().int().safe().nonnegative().nullable()
 });
 var correction = {
-  actionId: z3.string().uuid().default(() => crypto.randomUUID()),
-  expectedRevision: z3.number().int().nonnegative(),
-  reason: z3.string().trim().min(1).max(500)
+  actionId: z4.string().uuid().default(() => crypto.randomUUID()),
+  expectedRevision: z4.number().int().nonnegative(),
+  reason: z4.string().trim().min(1).max(500)
 };
-var inventoryItemActionSchema = z3.strictObject(correction);
-var inventoryItemRenameSchema = z3.strictObject({
+var inventoryItemActionSchema = z4.strictObject(correction);
+var inventoryItemRenameSchema = z4.strictObject({
   ...correction,
-  name: z3.string().trim().min(1).max(200)
+  name: z4.string().trim().min(1).max(200)
 });
-var inventoryStockCorrectionSchema = z3.strictObject({
+var inventoryStockCorrectionSchema = z4.strictObject({
   ...correction,
-  delta: z3.number().int().safe()
+  delta: z4.number().int().safe()
 });
-var inventoryItemPageSchema = z3.object({
-  items: z3.array(inventoryItemStateSchema),
+var inventoryItemPageSchema = z4.object({
+  items: z4.array(inventoryItemStateSchema),
   nextCursor: pageCursorSchema.nullable()
 });
 
 // src/server/quest-enrollments.ts
-import { z as z4 } from "zod";
+import * as z5 from "zod";
 var questEnrollmentStateSchema = questEnrollmentSchema.extend({
-  revision: z4.number().int().nonnegative(),
-  withdrawnAt: z4.number().int().safe().nonnegative().nullable(),
-  withdrawalReason: z4.string().nullable()
+  revision: z5.number().int().nonnegative(),
+  withdrawnAt: z5.number().int().safe().nonnegative().nullable(),
+  withdrawalReason: z5.string().nullable()
 });
 var managedQuestEnrollmentSchema = questEnrollmentStateSchema.extend({
-  title: z4.string(),
-  key: z4.string().nullable()
+  title: z5.string(),
+  key: z5.string().nullable()
 });
-var questEnrollmentWithdrawalInputSchema = z4.object({
-  actionId: z4.string().uuid().default(() => crypto.randomUUID()),
-  expectedRevision: z4.number().int().nonnegative(),
-  reason: z4.string().trim().min(1).max(500)
+var questEnrollmentWithdrawalInputSchema = z5.object({
+  actionId: z5.string().uuid().default(() => crypto.randomUUID()),
+  expectedRevision: z5.number().int().nonnegative(),
+  reason: z5.string().trim().min(1).max(500)
 }).strict();
-var managedQuestEnrollmentPageSchema = z4.object({
-  items: z4.array(managedQuestEnrollmentSchema),
+var managedQuestEnrollmentPageSchema = z5.object({
+  items: z5.array(managedQuestEnrollmentSchema),
   nextCursor: pageCursorSchema.nullable()
 });
 
 // src/server/test-members.ts
-import { z as z5 } from "zod";
-var testMemberWalletSchema = z5.object({
+import * as z6 from "zod";
+var testMemberWalletSchema = z6.object({
   chain: walletChainSchema,
   /** CAIP-2 network, Cosmos only. */
   network: cosmosNetworkSchema.nullable(),
-  address: z5.string()
+  address: z6.string()
 });
-var testMemberSchema = z5.object({
+var testMemberSchema = z6.object({
   id: identifier,
-  name: z5.string(),
-  test: z5.literal(true),
+  name: z6.string(),
+  test: z6.literal(true),
   /** Current project-calendar date (YYYY-MM-DD), computed by the server. */
-  today: z5.iso.date().optional(),
+  today: z6.iso.date().optional(),
   /** Number of calendar days advanced; absent means zero for older servers. */
-  offsetDays: z5.number().int().min(0).optional(),
+  offsetDays: z6.number().int().min(0).optional(),
   /** Linked wallet addresses, by chain then newest first; absent from older servers. */
-  wallets: z5.array(testMemberWalletSchema).optional()
+  wallets: z6.array(testMemberWalletSchema).optional()
 });
-var testMemberCreateSchema = z5.object({
+var testMemberCreateSchema = z6.object({
   actionId: identifier,
-  name: z5.string().trim().min(1).max(40)
+  name: z6.string().trim().min(1).max(40)
 }).strict();
 var testMemberActionSchema = submitSchema.omit({ member: true, faultAfterReview: true }).extend({
-  operation: z5.literal("attempts.submit")
+  operation: z6.literal("attempts.submit")
 }).strict();
-var testMemberResetSchema = z5.object({ actionId: identifier }).strict();
-var testMemberAdvanceSchema = z5.object({
+var testMemberResetSchema = z6.object({ actionId: identifier }).strict();
+var testMemberAdvanceSchema = z6.object({
   actionId: identifier,
-  days: z5.number().int().min(1).max(30)
+  days: z6.number().int().min(1).max(30)
 }).strict();
-var testMemberResetResultSchema = z5.object({
+var testMemberResetResultSchema = z6.object({
   member: identifier,
-  deleted: z5.literal(true)
+  deleted: z6.literal(true)
 });
-var testMemberWalletLinkSchema = z5.discriminatedUnion("chain", [
-  z5.object({
+var testMemberWalletLinkSchema = z6.discriminatedUnion("chain", [
+  z6.object({
     actionId: identifier,
-    chain: z5.literal("solana"),
+    chain: z6.literal("solana"),
     address: solanaAddressSchema
   }).strict(),
-  z5.object({
+  z6.object({
     actionId: identifier,
-    chain: z5.literal("eip155"),
+    chain: z6.literal("eip155"),
     address: evmAddressSchema
   }).strict(),
-  z5.object({
+  z6.object({
     actionId: identifier,
-    chain: z5.literal("cosmos"),
+    chain: z6.literal("cosmos"),
     network: cosmosNetworkSchema,
     address: cosmosAddressSchema
   }).strict()
 ]);
-var testMemberWalletUnlinkSchema = z5.object({
+var testMemberWalletUnlinkSchema = z6.object({
   actionId: identifier,
   chain: walletChainSchema,
-  address: z5.string().min(1).max(100)
+  address: z6.string().min(1).max(100)
 }).strict();
-var testMemberHistoryQuerySchema = z5.object({
+var testMemberHistoryQuerySchema = z6.object({
   /** Inclusive lower bound on credited activity time, in epoch milliseconds. */
-  since: z5.coerce.number().int().nonnegative().safe().optional()
+  since: z6.coerce.number().int().nonnegative().safe().optional()
 });
-var testMemberHistorySchema = z5.object({
+var testMemberHistorySchema = z6.object({
   /** Newest credited activity first, up to 500 attempts. */
-  attempts: z5.array(
-    attemptSchema.extend({ eligibleAt: z5.number().int().nonnegative().safe() })
+  attempts: z6.array(
+    attemptSchema.extend({ eligibleAt: z6.number().int().nonnegative().safe() })
   ),
   /** Tracker trigger outcomes that admitted no attempt, newest occurrence first, up to 500. */
-  skipped: z5.array(
-    z5.object({
+  skipped: z6.array(
+    z6.object({
       quest: identifier,
       tracker: identifier,
-      record: z5.string(),
-      code: z5.string().min(1),
-      occurredAt: z5.number().int().nonnegative().safe()
+      record: z6.string(),
+      code: z6.string().min(1),
+      occurredAt: z6.number().int().nonnegative().safe()
     })
   ),
   /** False when older entries were omitted from either list. */
-  complete: z5.boolean()
+  complete: z6.boolean()
 });
 
 // src/server/webhooks.ts
-import { z as z6 } from "zod";
+import * as z7 from "zod";
 var PayoutSourceKind = {
   Quest: "quest",
   Leaderboard: "leaderboard",
   Engagement: "engagement",
   Manual: "manual"
 };
-var webhookEventSchema = z6.object({
-  id: z6.string().uuid(),
-  version: z6.literal(1),
+var webhookEventSchema = z7.object({
+  id: z7.string().uuid(),
+  version: z7.literal(1),
   type: activityTypeSchema,
-  createdAt: z6.number().int().nonnegative(),
-  organization: z6.string(),
-  project: z6.string(),
-  environment: z6.enum(["test", "live"]),
-  data: z6.record(z6.string(), z6.json())
+  createdAt: z7.number().int().nonnegative(),
+  organization: z7.string(),
+  project: z7.string(),
+  environment: z7.enum(["test", "live"]),
+  data: z7.record(z7.string(), z7.json())
 });
-var webhookControlInputSchema = z6.object({ actionId: z6.string().uuid().optional() }).strict();
-var webhookInputSchema = z6.object({
-  url: z6.url().max(2048).refine((value) => {
-    const url = new URL(value);
-    return url.protocol === "https:" && !url.username && !url.password && !url.hash;
+var webhookControlInputSchema = z7.object({ actionId: z7.string().uuid().optional() }).strict();
+var webhookInputSchema = z7.object({
+  url: z7.url().max(2048).refine((value) => {
+    const url2 = new URL(value);
+    return url2.protocol === "https:" && !url2.username && !url2.password && !url2.hash;
   }, "Use an HTTPS URL without credentials or a fragment"),
-  types: z6.array(activityTypeSchema).min(1).max(100).refine((v) => new Set(v).size === v.length)
+  types: z7.array(activityTypeSchema).min(1).max(100).refine((v) => new Set(v).size === v.length)
 }).strict();
-var webhookCreateInputSchema = webhookInputSchema.extend({ actionId: z6.string().uuid().optional() }).strict();
-var webhookRotateInputSchema = z6.object({ actionId: z6.string().uuid().optional() }).strict();
-var webhookUpdateSchema = webhookInputSchema.partial().extend({ enabled: z6.boolean().optional() }).strict();
-var webhookEndpointSchema = z6.object({
+var webhookCreateInputSchema = webhookInputSchema.extend({ actionId: z7.string().uuid().optional() }).strict();
+var webhookRotateInputSchema = z7.object({ actionId: z7.string().uuid().optional() }).strict();
+var webhookUpdateSchema = webhookInputSchema.partial().extend({ enabled: z7.boolean().optional() }).strict();
+var webhookEndpointSchema = z7.object({
   ...webhookInputSchema.shape,
-  id: z6.string().uuid(),
-  enabled: z6.boolean(),
-  disabledReason: z6.string().nullable(),
-  consecutiveFailures: z6.number().int().nonnegative(),
-  createdAt: z6.number(),
-  updatedAt: z6.number()
+  id: z7.string().uuid(),
+  enabled: z7.boolean(),
+  disabledReason: z7.string().nullable(),
+  consecutiveFailures: z7.number().int().nonnegative(),
+  createdAt: z7.number(),
+  updatedAt: z7.number()
 });
 var webhookEndpointStateSchema = webhookEndpointSchema.extend({
-  revision: z6.number().int().nonnegative(),
-  deletedAt: z6.number().int().safe().nonnegative().nullable()
+  revision: z7.number().int().nonnegative(),
+  deletedAt: z7.number().int().safe().nonnegative().nullable()
 });
-var webhookDeleteInputSchema = z6.strictObject({
-  actionId: z6.string().uuid().default(() => crypto.randomUUID()),
-  expectedRevision: z6.number().int().nonnegative(),
-  reason: z6.string().trim().min(1).max(500)
+var webhookDeleteInputSchema = z7.strictObject({
+  actionId: z7.string().uuid().default(() => crypto.randomUUID()),
+  expectedRevision: z7.number().int().nonnegative(),
+  reason: z7.string().trim().min(1).max(500)
 });
-var webhookStateQuerySchema = z6.strictObject({
+var webhookStateQuerySchema = z7.strictObject({
   cursor: pageCursorSchema.optional(),
-  limit: z6.coerce.number().int().min(1).max(100).default(50)
+  limit: z7.coerce.number().int().min(1).max(100).default(50)
 });
-var webhookStatePageSchema = z6.object({
-  items: z6.array(webhookEndpointStateSchema),
+var webhookStatePageSchema = z7.object({
+  items: z7.array(webhookEndpointStateSchema),
   nextCursor: pageCursorSchema.nullable()
 });
-var webhookSecretSchema = z6.object({
+var webhookSecretSchema = z7.object({
   endpoint: webhookEndpointSchema,
-  secret: z6.string(),
-  previousValidUntil: z6.number().nullable()
+  secret: z7.string(),
+  previousValidUntil: z7.number().nullable()
 });
-var webhookDeliverySchema = z6.object({
-  id: z6.string().uuid(),
-  endpoint: z6.string().uuid(),
+var webhookDeliverySchema = z7.object({
+  id: z7.string().uuid(),
+  endpoint: z7.string().uuid(),
   event: webhookEventSchema,
-  status: z6.enum(["pending", "delivered", "failed", "skipped"]),
-  attempts: z6.number().int().nonnegative(),
-  responseStatus: z6.number().nullable(),
-  lastError: z6.string().nullable(),
-  createdAt: z6.number(),
-  deliveredAt: z6.number().nullable(),
-  replayOf: z6.string().uuid().nullable()
+  status: z7.enum(["pending", "delivered", "failed", "skipped"]),
+  attempts: z7.number().int().nonnegative(),
+  responseStatus: z7.number().nullable(),
+  lastError: z7.string().nullable(),
+  createdAt: z7.number(),
+  deliveredAt: z7.number().nullable(),
+  replayOf: z7.string().uuid().nullable()
 });
-var webhookQuerySchema = z6.object({
+var webhookQuerySchema = z7.object({
   /** A page's `nextCursor`: the deliveries after it, newest first. */
   cursor: pageCursorSchema.optional(),
   /** @deprecated Use `cursor`. Removed in 2.0.0. */
-  before: z6.string().uuid().optional(),
-  limit: z6.coerce.number().int().min(1).max(100).default(50)
+  before: z7.string().uuid().optional(),
+  limit: z7.coerce.number().int().min(1).max(100).default(50)
 }).strict();
-var webhookDeliveryPageSchema = z6.object({
-  items: z6.array(webhookDeliverySchema),
+var webhookDeliveryPageSchema = z7.object({
+  items: z7.array(webhookDeliverySchema),
   nextCursor: pageCursorSchema.nullable().default(null),
   /** @deprecated Use `nextCursor`, passed back as `cursor`. Removed in 2.0.0. */
-  next: z6.string().uuid().nullable()
+  next: z7.string().uuid().nullable()
 });
 var WEBHOOK_MAX_BYTES = 64 * 1024;
 async function verifyWebhook(input) {
@@ -559,8 +635,8 @@ async function verifyWebhook(input) {
 }
 
 // src/server/resource-lifecycle.ts
-import { z as z7 } from "zod";
-var resourceLifecycleKindSchema = z7.enum([
+import * as z8 from "zod";
+var resourceLifecycleKindSchema = z8.enum([
   "tracker",
   "referral",
   "leaderboard",
@@ -570,24 +646,24 @@ var resourceLifecycleKindSchema = z7.enum([
   "image",
   "point-ledger"
 ]);
-var managedResourceSchema = z7.object({
+var managedResourceSchema = z8.object({
   kind: resourceLifecycleKindSchema,
   id: identifier,
   key: identifier.nullable(),
-  title: z7.string(),
-  archivedAt: z7.number().int().nonnegative().nullable()
+  title: z8.string(),
+  archivedAt: z8.number().int().nonnegative().nullable()
 });
-var resourceLifecycleInputSchema = z7.object({
-  actionId: z7.string().uuid(),
+var resourceLifecycleInputSchema = z8.object({
+  actionId: z8.string().uuid(),
   kind: resourceLifecycleKindSchema,
   resource: identifier,
-  archived: z7.boolean(),
-  reason: z7.string().trim().min(1).max(500),
-  expectedArchivedAt: z7.number().int().nonnegative().nullable().optional()
+  archived: z8.boolean(),
+  reason: z8.string().trim().min(1).max(500),
+  expectedArchivedAt: z8.number().int().nonnegative().nullable().optional()
 }).strict();
-var resourceLifecycleResultSchema = z7.object({
+var resourceLifecycleResultSchema = z8.object({
   resource: managedResourceSchema,
-  changed: z7.boolean()
+  changed: z8.boolean()
 });
 var resourceLifecyclePaths = {
   tracker: "/trackers",
@@ -606,19 +682,19 @@ var resourceArchiveInputSchema = resourceLifecycleInputSchema.omit({
 });
 
 // src/server/index.ts
-import { z as z13 } from "zod";
+import * as z14 from "zod";
 
 // src/server/hosting.ts
-import { z as z10 } from "zod";
+import * as z11 from "zod";
 
 // src/server/schedules.ts
-import { z as z8 } from "zod";
+import * as z9 from "zod";
 import { Cron } from "croner";
 var APP_SCHEDULE_LIMIT = 10;
 var APP_SCHEDULE_MIN_INTERVAL = 3e5;
 var APP_SCHEDULE_TIMEOUT = 3e4;
-var appScheduleNameSchema = z8.string().regex(/^[a-z][a-z0-9-]{0,63}$/);
-var appSchedulePathSchema = z8.string().min(2).max(512).refine((path) => {
+var appScheduleNameSchema = z9.string().regex(/^[a-z][a-z0-9-]{0,63}$/);
+var appSchedulePathSchema = z9.string().min(2).max(512).refine((path) => {
   if (!/^\/[a-zA-Z0-9_/-]+$/.test(path) || path.startsWith("//")) {
     return false;
   }
@@ -629,11 +705,11 @@ function interval(value) {
   const unit = value.slice(-1);
   return amount * (unit === "m" ? 6e4 : unit === "h" ? 36e5 : 864e5);
 }
-var everySchema = z8.string().regex(/^[1-9]\d{0,3}[mhd]$/).refine(
+var everySchema = z9.string().regex(/^[1-9]\d{0,3}[mhd]$/).refine(
   (value) => interval(value) >= APP_SCHEDULE_MIN_INTERVAL && interval(value) <= 365 * 864e5,
   "Use an interval from 5 minutes to 365 days, such as 5m, 1h or 1d"
 );
-var cronSchema = z8.string().max(120).refine((value) => {
+var cronSchema = z9.string().max(120).refine((value) => {
   const fields = value.trim().split(/\s+/);
   if (fields.length !== 5 || fields.some((field) => !/^[\d*,/-]+$/.test(field))) {
     return false;
@@ -658,15 +734,15 @@ var cronSchema = z8.string().max(120).refine((value) => {
 var declaration = {
   name: appScheduleNameSchema,
   path: appSchedulePathSchema,
-  description: z8.string().min(1).max(500)
+  description: z9.string().min(1).max(500)
 };
-var everySchedule = z8.object({ ...declaration, every: everySchema });
-var cronSchedule = z8.object({ ...declaration, cron: cronSchema });
-var appScheduleSchema = z8.union([
+var everySchedule = z9.object({ ...declaration, every: everySchema });
+var cronSchedule = z9.object({ ...declaration, cron: cronSchema });
+var appScheduleSchema = z9.union([
   everySchedule.strict(),
   cronSchedule.strict()
 ]);
-var appSchedulesSchema = z8.array(appScheduleSchema).max(APP_SCHEDULE_LIMIT).refine(
+var appSchedulesSchema = z9.array(appScheduleSchema).max(APP_SCHEDULE_LIMIT).refine(
   (items) => new Set(items.map((item) => item.name)).size === items.length,
   "Schedule names must be unique"
 );
@@ -683,40 +759,40 @@ function nextScheduleRun(schedule, after) {
   }
   return next.getTime();
 }
-var appScheduleStateSchema = z8.enum(["active", "paused", "archived"]);
-var appScheduleRunSchema = z8.object({
-  id: z8.string().uuid(),
-  build: z8.string().uuid(),
-  startedAt: z8.number(),
-  scheduledAt: z8.number(),
-  manual: z8.boolean(),
-  status: z8.enum(["queued", "running", "succeeded", "failed", "uncertain"]),
-  duration: z8.number().nullable(),
-  error: z8.string().nullable()
+var appScheduleStateSchema = z9.enum(["active", "paused", "archived"]);
+var appScheduleRunSchema = z9.object({
+  id: z9.string().uuid(),
+  build: z9.string().uuid(),
+  startedAt: z9.number(),
+  scheduledAt: z9.number(),
+  manual: z9.boolean(),
+  status: z9.enum(["queued", "running", "succeeded", "failed", "uncertain"]),
+  duration: z9.number().nullable(),
+  error: z9.string().nullable()
 });
-var appScheduleListSchema = z8.object({
+var appScheduleListSchema = z9.object({
   state: appScheduleStateSchema,
-  schedules: z8.array(
-    z8.object({
-      declaration: z8.union([everySchedule, cronSchedule]),
-      nextRun: z8.number().nullable(),
-      blocked: z8.boolean(),
+  schedules: z9.array(
+    z9.object({
+      declaration: z9.union([everySchedule, cronSchedule]),
+      nextRun: z9.number().nullable(),
+      blocked: z9.boolean(),
       lastRun: appScheduleRunSchema.nullable()
     })
   )
 });
-var scheduledInvocationSchema = z8.object({
-  id: z8.string().uuid(),
-  build: z8.string().uuid(),
+var scheduledInvocationSchema = z9.object({
+  id: z9.string().uuid(),
+  build: z9.string().uuid(),
   name: appScheduleNameSchema,
-  scheduledAt: z8.number().int(),
-  startedAt: z8.number().int(),
-  manual: z8.boolean()
+  scheduledAt: z9.number().int(),
+  startedAt: z9.number().int(),
+  manual: z9.boolean()
 }).strict();
 async function verifyScheduledRequest(request, key) {
   const signature = request.headers.get("X-Domino-Schedule-Signature");
-  const url = new URL(request.url);
-  if (request.method !== "POST" || url.search !== "" || url.hash !== "" || !key || !signature || !/^[a-f0-9]{64}$/.test(signature)) {
+  const url2 = new URL(request.url);
+  if (request.method !== "POST" || url2.search !== "" || url2.hash !== "" || !key || !signature || !/^[a-f0-9]{64}$/.test(signature)) {
     return null;
   }
   const reader = request.clone().body?.getReader();
@@ -760,7 +836,7 @@ async function verifyScheduledRequest(request, key) {
     secret,
     bytes,
     new TextEncoder().encode(`POST
-${url.pathname}
+${url2.pathname}
 ${body}`)
   );
   if (!valid) {
@@ -776,7 +852,7 @@ ${body}`)
 }
 
 // src/server/starters.ts
-import { z as z9 } from "zod";
+import * as z10 from "zod";
 var starterTemplates = [
   {
     id: "campaign",
@@ -809,63 +885,63 @@ var starterTemplates = [
     summary: "A headless Worker with typed routes and interactive API docs, for plugging Domino into your own product."
   }
 ];
-var starterIdSchema = z9.enum(
+var starterIdSchema = z10.enum(
   starterTemplates.map((template) => template.id)
 );
 
 // src/server/hosting.ts
-var outputPathSchema = z10.string().min(1).max(512).refine(
+var outputPathSchema = z11.string().min(1).max(512).refine(
   (path) => path.split("/").every(
     (part) => /^[\w-][\w.-]*$/.test(part) && part !== "node_modules"
   ),
   "Expected a relative build output path without hidden segments"
 );
-var appRoutingSchema = z10.enum(["legacy", "transparent"]).default("legacy");
+var appRoutingSchema = z11.enum(["legacy", "transparent"]).default("legacy");
 var APP_SECRET_LIMIT = 50;
 var APP_KV_LIMIT = 5;
 var APP_SQL_LIMIT = 5;
 var APP_MIGRATION_LIMIT = 100;
 var APP_MIGRATION_FILE_BYTES = 9e4;
 var APP_MIGRATION_TOTAL_BYTES = 1e6;
-var appSecretNameSchema = z10.string().regex(
+var appSecretNameSchema = z11.string().regex(
   /^[A-Z_][A-Z0-9_]{0,63}$/,
   "Use 1-64 uppercase letters, digits, and underscores, not starting with a digit"
 ).refine(
   (name) => !name.startsWith("DOMINO_") && name !== "ASSETS",
   "DOMINO_ names and ASSETS are reserved for Domino's own bindings"
 );
-var appSecretValueSchema = z10.string().min(1).refine(
+var appSecretValueSchema = z11.string().min(1).refine(
   (value) => new TextEncoder().encode(value).length <= 5120,
   "Secret values can be at most 5 KiB"
 );
-var appSecretInputSchema = z10.object({ value: appSecretValueSchema }).strict();
-var appSecretSchema = z10.object({
+var appSecretInputSchema = z11.object({ value: appSecretValueSchema }).strict();
+var appSecretSchema = z11.object({
   name: appSecretNameSchema,
-  updatedAt: z10.number(),
-  updatedBy: z10.string()
+  updatedAt: z11.number(),
+  updatedBy: z11.string()
 });
-var appSecretDeclarationSchema = z10.object({
-  description: z10.string().trim().min(1).max(500),
-  required: z10.boolean().default(true)
+var appSecretDeclarationSchema = z11.object({
+  description: z11.string().trim().min(1).max(500),
+  required: z11.boolean().default(true)
 }).strict();
-var appSecretDeclarationsSchema = z10.record(appSecretNameSchema, appSecretDeclarationSchema).refine(
+var appSecretDeclarationsSchema = z11.record(appSecretNameSchema, appSecretDeclarationSchema).refine(
   (secrets) => Object.keys(secrets).length <= APP_SECRET_LIMIT,
   `Declare at most ${APP_SECRET_LIMIT} app secrets`
 );
-var appSecretListSchema = z10.object({
-  secrets: z10.array(appSecretSchema),
-  declared: z10.array(appSecretDeclarationSchema.extend({ name: appSecretNameSchema })).default([])
+var appSecretListSchema = z11.object({
+  secrets: z11.array(appSecretSchema),
+  declared: z11.array(appSecretDeclarationSchema.extend({ name: appSecretNameSchema })).default([])
 });
-var hostedAppSecretsSchema = z10.object({ secrets: z10.record(appSecretNameSchema, appSecretValueSchema) }).strict();
-var storageDescription = z10.object({
-  description: z10.string().trim().min(1).max(500)
+var hostedAppSecretsSchema = z11.object({ secrets: z11.record(appSecretNameSchema, appSecretValueSchema) }).strict();
+var storageDescription = z11.object({
+  description: z11.string().trim().min(1).max(500)
 }).strict();
-var appStorageSchema = z10.object({
-  kv: z10.record(appSecretNameSchema, storageDescription).refine(
+var appStorageSchema = z11.object({
+  kv: z11.record(appSecretNameSchema, storageDescription).refine(
     (stores) => Object.keys(stores).length <= APP_KV_LIMIT,
     `Declare at most ${APP_KV_LIMIT} KV stores`
   ).default({}),
-  sql: z10.record(
+  sql: z11.record(
     appSecretNameSchema,
     storageDescription.extend({
       migrations: outputPathSchema.optional()
@@ -875,60 +951,60 @@ var appStorageSchema = z10.object({
     `Declare at most ${APP_SQL_LIMIT} SQL stores`
   ).default({})
 }).strict();
-var appStorageKindSchema = z10.enum(["kv", "sql"]);
-var appStorageListSchema = z10.object({
-  stores: z10.array(
-    z10.object({
-      kind: z10.string(),
+var appStorageKindSchema = z11.enum(["kv", "sql"]);
+var appStorageListSchema = z11.object({
+  stores: z11.array(
+    z11.object({
+      kind: z11.string(),
       name: appSecretNameSchema,
-      createdAt: z10.number().nullable(),
-      declared: z10.boolean(),
-      description: z10.string().optional()
+      createdAt: z11.number().nullable(),
+      declared: z11.boolean(),
+      description: z11.string().optional()
     })
   )
 });
 var APP_STORAGE_ROW_LIMIT = 50;
 var APP_STORAGE_PREVIEW_CHARACTERS = 2e3;
-var appStorageCellSchema = z10.union([
-  z10.string(),
-  z10.number(),
-  z10.null(),
-  z10.object({ text: z10.string(), truncated: z10.literal(true) }),
-  z10.object({ blob: z10.number().int().min(0) })
+var appStorageCellSchema = z11.union([
+  z11.string(),
+  z11.number(),
+  z11.null(),
+  z11.object({ text: z11.string(), truncated: z11.literal(true) }),
+  z11.object({ blob: z11.number().int().min(0) })
 ]);
-var appStorageTablesSchema = z10.object({
-  tables: z10.array(
+var appStorageTablesSchema = z11.object({
+  tables: z11.array(
     /** `kind` is SQLite's: `table` or `view`. */
-    z10.object({ name: z10.string(), kind: z10.string() })
+    z11.object({ name: z11.string(), kind: z11.string() })
   )
 });
-var appStorageRowsSchema = z10.object({
-  table: z10.string(),
-  columns: z10.array(z10.string()),
-  rows: z10.array(z10.array(appStorageCellSchema)),
+var appStorageRowsSchema = z11.object({
+  table: z11.string(),
+  columns: z11.array(z11.string()),
+  rows: z11.array(z11.array(appStorageCellSchema)),
   /** How many rows come before this page in storage order. */
-  offset: z10.number().int().min(0),
-  total: z10.number().int().min(0),
+  offset: z11.number().int().min(0),
+  total: z11.number().int().min(0),
   /** Pass back as `cursor` for the next page; null on the last one. */
   nextCursor: pageCursorSchema.nullable().default(null)
 });
-var appStorageKeysSchema = z10.object({
-  keys: z10.array(
-    z10.object({ name: z10.string(), expiration: z10.number().nullable() })
+var appStorageKeysSchema = z11.object({
+  keys: z11.array(
+    z11.object({ name: z11.string(), expiration: z11.number().nullable() })
   ),
   /** Pass back as `cursor` for the next page; null on the last one. */
   nextCursor: pageCursorSchema.nullable().default(null),
   /** @deprecated Use `nextCursor`. Removed in 2.0.0. */
-  cursor: z10.string().nullable()
+  cursor: z11.string().nullable()
 });
-var appStorageValueSchema = z10.object({
-  key: z10.string(),
-  size: z10.number().int().min(0),
+var appStorageValueSchema = z11.object({
+  key: z11.string(),
+  size: z11.number().int().min(0),
   /** Null when the value is not UTF-8 text. */
-  text: z10.string().nullable(),
-  truncated: z10.boolean()
+  text: z11.string().nullable(),
+  truncated: z11.boolean()
 });
-var appMigrationNameSchema = z10.string().max(255).regex(/^[\w-][\w.-]*\.sql$/);
+var appMigrationNameSchema = z11.string().max(255).regex(/^[\w-][\w.-]*\.sql$/);
 function compareAppMigrations(a, b) {
   const left = Number.parseInt(a.split("_")[0], 10);
   const right = Number.parseInt(b.split("_")[0], 10);
@@ -945,12 +1021,12 @@ function compareAppMigrations(a, b) {
   }
   return a < b ? -1 : a > b ? 1 : 0;
 }
-var appMigrationsSchema = z10.record(
+var appMigrationsSchema = z11.record(
   appSecretNameSchema,
-  z10.array(
-    z10.object({
+  z11.array(
+    z11.object({
       name: appMigrationNameSchema,
-      sql: z10.string().min(1).refine(
+      sql: z11.string().min(1).refine(
         (sql) => new TextEncoder().encode(sql).length <= APP_MIGRATION_FILE_BYTES,
         `A migration file must not exceed ${APP_MIGRATION_FILE_BYTES} bytes`
       )
@@ -968,21 +1044,21 @@ var appMigrationsSchema = z10.record(
 );
 var appScripts = {
   routing: appRoutingSchema,
-  devScript: z10.string().regex(/^[\w:-]+$/),
-  checkScript: z10.string().regex(/^[\w:-]+$/),
-  buildScript: z10.string().regex(/^[\w:-]+$/)
+  devScript: z11.string().regex(/^[\w:-]+$/),
+  checkScript: z11.string().regex(/^[\w:-]+$/),
+  buildScript: z11.string().regex(/^[\w:-]+$/)
 };
 var workerSettings = {
-  runWorkerFirst: z10.boolean().default(false),
+  runWorkerFirst: z11.boolean().default(false),
   main: outputPathSchema.refine(
     (path) => /\.m?js$/.test(path),
     "Expected a compiled JavaScript entry"
   ),
-  compatibilityDate: z10.string().regex(/^\d{4}-\d{2}-\d{2}$/),
-  compatibilityFlags: z10.array(z10.string().min(1)).max(50).default([]),
-  vars: z10.record(
-    z10.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/).refine((name) => name !== "ASSETS"),
-    z10.string()
+  compatibilityDate: z11.string().regex(/^\d{4}-\d{2}-\d{2}$/),
+  compatibilityFlags: z11.array(z11.string().min(1)).max(50).default([]),
+  vars: z11.record(
+    z11.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/).refine((name) => name !== "ASSETS"),
+    z11.string()
   ).default({}),
   secrets: appSecretDeclarationsSchema.default({}),
   storage: appStorageSchema.optional(),
@@ -1011,62 +1087,62 @@ var distinctBindings = (worker, ctx) => {
     }
   }
 };
-var hostedAppSchema = z10.discriminatedUnion("kind", [
-  z10.object({
-    kind: z10.literal("static"),
+var hostedAppSchema = z11.discriminatedUnion("kind", [
+  z11.object({
+    kind: z11.literal("static"),
     directory: outputPathSchema,
     ...appScripts
   }).strict(),
-  z10.object({
-    kind: z10.literal("worker"),
+  z11.object({
+    kind: z11.literal("worker"),
     directory: outputPathSchema,
     assetsDirectory: outputPathSchema.optional(),
     ...appScripts,
     ...workerSettings
   }).strict().superRefine(distinctBindings)
 ]);
-var repositorySchema = z10.object({
-  id: z10.string().uuid(),
+var repositorySchema = z11.object({
+  id: z11.string().uuid(),
   organization: identifier,
   project: identifier,
-  remote: z10.string().url(),
-  defaultBranch: z10.string(),
-  status: z10.enum(["provisioning", "ready"])
+  remote: z11.string().url(),
+  defaultBranch: z11.string(),
+  status: z11.enum(["provisioning", "ready"])
 });
-var createRepositorySchema = z10.object({
+var createRepositorySchema = z11.object({
   /** Omitted: the starter chosen at project setup, else `campaign`. */
   starter: starterIdSchema.optional()
 }).strict();
-var deviceStartSchema = z10.object({
-  challenge: z10.string().regex(/^[a-f0-9]{64}$/)
+var deviceStartSchema = z11.object({
+  challenge: z11.string().regex(/^[a-f0-9]{64}$/)
 }).strict();
-var deviceRedeemSchema = z10.object({
-  id: z10.string().uuid(),
-  verifier: z10.string().min(43).max(128)
+var deviceRedeemSchema = z11.object({
+  id: z11.string().uuid(),
+  verifier: z11.string().min(43).max(128)
 }).strict();
-var deviceApproveSchema = z10.object({
-  id: z10.string().uuid(),
-  code: z10.string().regex(/^[A-F0-9]{4}-[A-F0-9]{4}$/)
+var deviceApproveSchema = z11.object({
+  id: z11.string().uuid(),
+  code: z11.string().regex(/^[A-F0-9]{4}-[A-F0-9]{4}$/)
 }).strict();
-var commitSchema = z10.string().regex(/^[a-f0-9]{40}$/);
-var stageRequestSchema = z10.object({
+var commitSchema = z11.string().regex(/^[a-f0-9]{40}$/);
+var stageRequestSchema = z11.object({
   commit: commitSchema,
-  requestId: z10.string().uuid()
+  requestId: z11.string().uuid()
 }).strict();
-var buildIdentitySchema = z10.object({
+var buildIdentitySchema = z11.object({
   routing: appRoutingSchema,
-  slug: z10.string().min(1).max(35).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/).optional(),
-  runtime: z10.enum(["simulation", "hosted-test"]).default("simulation"),
-  id: z10.string().uuid(),
-  repository: z10.string().uuid(),
+  slug: z11.string().min(1).max(35).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/).optional(),
+  runtime: z11.enum(["simulation", "hosted-test"]).default("simulation"),
+  id: z11.string().uuid(),
+  repository: z11.string().uuid(),
   organization: identifier,
   project: identifier,
   commit: commitSchema,
-  createdAt: z10.number(),
-  actor: z10.string(),
-  commitMessage: z10.string().max(500).optional()
+  createdAt: z11.number(),
+  actor: z11.string(),
+  commitMessage: z11.string().max(500).optional()
 });
-var buildPhaseSchema = z10.enum([
+var buildPhaseSchema = z11.enum([
   "queued",
   "source",
   "install",
@@ -1076,72 +1152,72 @@ var buildPhaseSchema = z10.enum([
   "ready",
   "failed"
 ]);
-var buildStatusSchema = z10.object({
+var buildStatusSchema = z11.object({
   phase: buildPhaseSchema,
   failedPhase: buildPhaseSchema.optional(),
-  updatedAt: z10.number(),
-  message: z10.string()
+  updatedAt: z11.number(),
+  message: z11.string()
 });
 var hostedBuildSchema = buildIdentitySchema.extend({
   ...buildStatusSchema.shape,
-  finished: z10.boolean(),
-  current: z10.boolean(),
-  stagingUrl: z10.string().url()
+  finished: z11.boolean(),
+  current: z11.boolean(),
+  stagingUrl: z11.string().url()
 });
-var stagingAccessModeSchema = z10.enum(["console", "password"]);
-var stagingAccessSchema = z10.object({ mode: stagingAccessModeSchema });
-var stagingAccessInputSchema = z10.discriminatedUnion("mode", [
-  z10.object({ mode: z10.literal("console") }).strict(),
-  z10.object({
-    mode: z10.literal("password"),
-    password: z10.string().min(8).max(128)
+var stagingAccessModeSchema = z11.enum(["console", "password"]);
+var stagingAccessSchema = z11.object({ mode: stagingAccessModeSchema });
+var stagingAccessInputSchema = z11.discriminatedUnion("mode", [
+  z11.object({ mode: z11.literal("console") }).strict(),
+  z11.object({
+    mode: z11.literal("password"),
+    password: z11.string().min(8).max(128)
   }).strict()
 ]);
-var stagingPathSchema = z10.string().max(2048).refine(
+var stagingPathSchema = z11.string().max(2048).refine(
   (path) => path.startsWith("/") && !path.startsWith("//") && !path.includes("\\"),
   "Expected a path on the staging host"
 );
-var stagingLinkSchema = z10.object({
-  url: z10.string().url(),
-  expiresAt: z10.number()
+var stagingLinkSchema = z11.object({
+  url: z11.string().url(),
+  expiresAt: z11.number()
 });
-var buildSnapshotSchema = z10.object({
-  builds: z10.array(hostedBuildSchema),
+var buildSnapshotSchema = z11.object({
+  builds: z11.array(hostedBuildSchema),
   current: hostedBuildSchema.nullable(),
   selected: hostedBuildSchema.nullable(),
-  logs: z10.string()
+  logs: z11.string()
 });
-var assetPathSchema = z10.string().max(512).refine(
+var assetPathSchema = z11.string().max(512).refine(
   (path) => path.startsWith("/") && // oxlint-disable-next-line no-control-regex -- Asset paths must reject control characters.
   !/[\\\u0000-\u001f?#%]/.test(path) && path.slice(1).split("/").every((part) => part.length > 0 && !part.startsWith(".")),
   "Expected a public asset path without hidden segments"
 );
-var base64Schema = z10.string().regex(/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/);
+var base64Schema = z11.string().regex(/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/);
 var stagedDeploymentLimits = {
   /** Bytes of JSON, uncompressed. */
   size: 64e6,
   /** Bytes of the Brotli-compressed object. */
   compressedSize: 1e7
 };
-var stagedDeploymentSchema = z10.object({
-  encoding: z10.literal("br"),
-  sha256: z10.string().regex(/^[0-9a-f]{64}$/),
-  compressedSize: z10.number().int().positive().max(stagedDeploymentLimits.compressedSize),
-  size: z10.number().int().positive().max(stagedDeploymentLimits.size)
+var stagedDeploymentSchema = z11.object({
+  encoding: z11.literal("br"),
+  sha256: z11.string().regex(/^[0-9a-f]{64}$/),
+  compressedSize: z11.number().int().positive().max(stagedDeploymentLimits.compressedSize),
+  size: z11.number().int().positive().max(stagedDeploymentLimits.size)
 }).strict();
 var stagedDeploymentContentSchema = stagedDeploymentSchema.extend({
-  content: z10.string().max(Math.ceil(stagedDeploymentLimits.compressedSize / 3) * 4)
+  content: z11.string().max(Math.ceil(stagedDeploymentLimits.compressedSize / 3) * 4)
 }).strict();
 var stagedDeploymentKey = (build, sha256) => `builds/${build}/deployment/${sha256}.br`;
 var artifactFields = {
   routing: appRoutingSchema,
-  worker: z10.object({
+  worker: z11.object({
     ...workerSettings,
     migrations: appMigrationsSchema.optional(),
-    modules: z10.array(
-      z10.object({
+    modules: z11.array(
+      z11.object({
         path: outputPathSchema.refine((path) => path !== "metadata"),
-        type: z10.enum([
+        type: z11.enum([
           "application/javascript+module",
           "application/wasm",
           "text/plain",
@@ -1151,26 +1227,26 @@ var artifactFields = {
       }).strict()
     ).min(1).max(500)
   }).strict().superRefine(distinctBindings).optional(),
-  assets: z10.array(
-    z10.object({
+  assets: z11.array(
+    z11.object({
       path: assetPathSchema,
       content: base64Schema.max(14e6),
-      size: z10.number().int().min(0).max(1e7)
+      size: z11.number().int().min(0).max(1e7)
     }).strict()
   ).max(500)
 };
-var buildArtifactsSchema = z10.discriminatedUnion("format", [
-  z10.object({
-    format: z10.literal(1),
+var buildArtifactsSchema = z11.discriminatedUnion("format", [
+  z11.object({
+    format: z11.literal(1),
     ...artifactFields,
-    quests: z10.unknown(),
-    catalog: z10.unknown()
+    quests: z11.unknown(),
+    catalog: z11.unknown()
   }).strict(),
-  z10.object({
-    format: z10.literal(2),
+  z11.object({
+    format: z11.literal(2),
     ...artifactFields,
     deployment: stagedDeploymentSchema,
-    images: z10.array(imageAssetArtifactSchema).max(10)
+    images: z11.array(imageAssetArtifactSchema).max(10)
   }).strict()
 ]).superRefine((value, ctx) => {
   if (value.worker) {
@@ -1222,39 +1298,39 @@ var buildArtifactsSchema = z10.discriminatedUnion("format", [
 });
 
 // src/server/development.ts
-import { z as z11 } from "zod";
-var developmentPreflightSchema = z11.object({
-  organization: z11.string(),
-  project: z11.string(),
-  environment: z11.enum(["test", "live"]),
-  identity: z11.object({
-    exchange: z11.literal("supported"),
-    activeIntegrations: z11.number().int().nonnegative()
+import * as z12 from "zod";
+var developmentPreflightSchema = z12.object({
+  organization: z12.string(),
+  project: z12.string(),
+  environment: z12.enum(["test", "live"]),
+  identity: z12.object({
+    exchange: z12.literal("supported"),
+    activeIntegrations: z12.number().int().nonnegative()
   }).optional(),
-  staging: z11.enum(["configured", "blocked"]),
-  development: z11.object({
-    status: z11.enum(["configured", "blocked"]),
+  staging: z12.enum(["configured", "blocked"]),
+  development: z12.object({
+    status: z12.enum(["configured", "blocked"]),
     // How `domino dev` reaches the preview origin: a Cloudflare tunnel, or a direct route on a
     // local development stack. APIs that predate the field use tunnels.
-    transport: z11.enum(["tunnel", "direct"]).default("tunnel"),
-    missing: z11.array(z11.string()),
-    authentication: z11.array(z11.string())
+    transport: z12.enum(["tunnel", "direct"]).default("tunnel"),
+    missing: z12.array(z12.string()),
+    authentication: z12.array(z12.string())
   }),
-  checks: z11.array(
-    z11.object({
-      id: z11.string(),
-      status: z11.enum(["ok", "error"]),
-      message: z11.string(),
-      missing: z11.array(z11.string()).optional(),
-      issues: z11.array(z11.string()).optional()
+  checks: z12.array(
+    z12.object({
+      id: z12.string(),
+      status: z12.enum(["ok", "error"]),
+      message: z12.string(),
+      missing: z12.array(z12.string()).optional(),
+      issues: z12.array(z12.string()).optional()
     })
   )
 });
 
 // src/server/hosted.ts
-import { z as z12 } from "zod";
+import * as z13 from "zod";
 var hostedKeyPermissions = ["read", "points", "ingest"];
-var hostedKeyPermissionList = z12.array(z12.string()).transform(
+var hostedKeyPermissionList = z13.array(z13.string()).transform(
   (values) => values.filter(
     (value) => hostedKeyPermissions.includes(value)
   )
@@ -1266,17 +1342,17 @@ var hostedManagementBindings = [
   "DOMINO_PROJECT",
   "DOMINO_ENVIRONMENT"
 ];
-var hostedKeySecretSchema = z12.string().regex(/^dhk_[A-Za-z0-9_-]{43}$/, "Expected a hosted app key");
-var hostedKeySchema = z12.object({
-  id: z12.string().uuid(),
+var hostedKeySecretSchema = z13.string().regex(/^dhk_[A-Za-z0-9_-]{43}$/, "Expected a hosted app key");
+var hostedKeySchema = z13.object({
+  id: z13.string().uuid(),
   token: hostedKeySecretSchema,
   organization: identifier,
   project: identifier,
-  environment: z12.enum(["test", "live"]),
+  environment: z13.enum(["test", "live"]),
   permissions: hostedKeyPermissionList,
-  expiresAt: z12.number().nullable()
+  expiresAt: z13.number().nullable()
 }).strict();
-var hostedDeploymentKeySchema = hostedKeySchema.extend({ apiUrl: z12.string().url() }).strict();
+var hostedDeploymentKeySchema = hostedKeySchema.extend({ apiUrl: z13.string().url() }).strict();
 function hostedManagementClient(env) {
   const missing = hostedManagementBindings.filter((name) => !env[name]);
   if (missing.length) {
@@ -1284,7 +1360,7 @@ function hostedManagementClient(env) {
       `Missing ${missing.join(", ")}. Domino sets these for hosted apps and domino dev; update the project's vite.config.ts to forward them in development.`
     );
   }
-  const environment = z12.enum(["test", "live"]).parse(env.DOMINO_ENVIRONMENT);
+  const environment = z13.enum(["test", "live"]).parse(env.DOMINO_ENVIRONMENT);
   const token = env.DOMINO_MANAGEMENT_KEY;
   return createManagementClient({
     baseUrl: env.DOMINO_API_URL.replace(/\/+$/, ""),
@@ -1296,9 +1372,9 @@ function hostedManagementClient(env) {
 }
 
 // src/server/index.ts
-var environmentSchema = z13.enum(["test", "live"]);
-var roleSchema = z13.enum(["editor", "reviewer", "staff"]);
-var permissionSchema = z13.enum([
+var environmentSchema = z14.enum(["test", "live"]);
+var roleSchema = z14.enum(["editor", "reviewer", "staff"]);
+var permissionSchema = z14.enum([
   "read",
   "publish",
   "review",
@@ -1318,7 +1394,7 @@ var permissionSchema = z13.enum([
    */
   "enroll"
 ]);
-var permissionListSchema = z13.array(z13.string()).transform(
+var permissionListSchema = z14.array(z14.string()).transform(
   (values) => values.filter(
     (value) => permissionSchema.safeParse(value).success
   )
@@ -1328,33 +1404,33 @@ var rolePermissions = {
   reviewer: ["read", "review"],
   staff: ["read", "confirm", "handover"]
 };
-var projectSetupSchema = z13.object({
-  mode: z13.enum(["new", "existing"]),
-  brief: z13.string().trim().min(1).max(4e3)
+var projectSetupSchema = z14.object({
+  mode: z14.enum(["new", "existing"]),
+  brief: z14.string().trim().min(1).max(4e3)
 }).strict();
-var operatorUserSchema = z13.object({
-  id: z13.string(),
-  name: z13.string().nullable(),
-  email: z13.string().nullable(),
-  avatar: z13.string().nullable()
+var operatorUserSchema = z14.object({
+  id: z14.string(),
+  name: z14.string().nullable(),
+  email: z14.string().nullable(),
+  avatar: z14.string().nullable()
 });
-var projectSchema = z13.object({
-  slug: z13.string().min(1).max(35).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/),
-  createdBy: z13.string().nullable().optional(),
+var projectSchema = z14.object({
+  slug: z14.string().min(1).max(35).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/),
+  createdBy: z14.string().nullable().optional(),
   creator: operatorUserSchema.nullable().optional(),
   /** A response, so fields a newer server adds to the setup are dropped, not rejected. */
-  setup: z13.object(projectSetupSchema.shape).optional(),
+  setup: z14.object(projectSetupSchema.shape).optional(),
   /** The starter chosen at setup. A plain string, so later starters still parse. */
-  starter: z13.string().optional(),
-  id: z13.string().min(1),
+  starter: z14.string().optional(),
+  id: z14.string().min(1),
   organization: identifier,
   project: identifier,
-  name: z13.string(),
-  subtitle: z13.string(),
-  initials: z13.string(),
-  color: z13.string(),
+  name: z14.string(),
+  subtitle: z14.string(),
+  initials: z14.string(),
+  color: z14.string(),
   permissions: permissionListSchema,
-  environments: z13.array(environmentSchema)
+  environments: z14.array(environmentSchema)
 }).refine(
   (project) => !project.creator || project.creator.id === project.createdBy,
   {
@@ -1362,45 +1438,45 @@ var projectSchema = z13.object({
     path: ["creator"]
   }
 );
-var projectInputSchema = z13.object({
+var projectInputSchema = z14.object({
   actionId: identifier,
-  name: z13.string().trim().min(1).max(80),
+  name: z14.string().trim().min(1).max(80),
   setup: projectSetupSchema.optional(),
   /** The starter a new hosted app begins from, with `setup.mode` "new". */
   starter: starterIdSchema.optional()
 }).strict();
-var projectUpdateInputSchema = z13.union([
-  z13.object({ name: projectInputSchema.shape.name }).strict(),
-  z13.object({
+var projectUpdateInputSchema = z14.union([
+  z14.object({ name: projectInputSchema.shape.name }).strict(),
+  z14.object({
     slug: projectSchema.shape.slug,
-    confirm: z13.string().min(1).max(80)
+    confirm: z14.string().min(1).max(80)
   }).strict()
 ]);
-var projectDeletionInputSchema = z13.object({ confirm: z13.string().min(1).max(80) }).strict();
-var projectDeletionSchema = z13.object({
+var projectDeletionInputSchema = z14.object({ confirm: z14.string().min(1).max(80) }).strict();
+var projectDeletionSchema = z14.object({
   project: identifier,
-  purgeAfter: z13.number().int()
+  purgeAfter: z14.number().int()
 });
-var projectTransferInputSchema = z13.object({ organization: identifier, confirm: z13.string().min(1).max(80) }).strict();
-var projectTransferSchema = z13.object({
+var projectTransferInputSchema = z14.object({ organization: identifier, confirm: z14.string().min(1).max(80) }).strict();
+var projectTransferSchema = z14.object({
   organization: identifier,
   project: identifier
 });
-var grantSchema = z13.object({
-  subject: z13.string().min(1).max(200),
-  roles: z13.array(roleSchema),
-  environments: z13.array(environmentSchema)
+var grantSchema = z14.object({
+  subject: z14.string().min(1).max(200),
+  roles: z14.array(roleSchema),
+  environments: z14.array(environmentSchema)
 }).strict();
-var grantRecordSchema = z13.object(grantSchema.shape);
-var stockAdditionSchema = z13.object({
+var grantRecordSchema = z14.object(grantSchema.shape);
+var stockAdditionSchema = z14.object({
   item: identifier,
-  quantity: z13.number().int(),
+  quantity: z14.number().int(),
   actionId: identifier
 });
-var completionRevokeSchema = z13.object({
+var completionRevokeSchema = z14.object({
   actionId: identifier,
-  reason: z13.string().trim().min(1).max(500),
-  freeOccurrence: z13.boolean().default(false)
+  reason: z14.string().trim().min(1).max(500),
+  freeOccurrence: z14.boolean().default(false)
 }).strict();
 var RevokedEntitlementOutcome = {
   /** No other completion grants the reward: it is void, after cancelling a handover in progress. */
@@ -1428,234 +1504,234 @@ var RevokedReferralOutcome = {
   /** Qualified on another accepted completion of the program's quest instead. */
   Requalified: "requalified"
 };
-var entitlementOutcomeSchema = z13.string().min(1).max(64);
-var deliveryOutcomeSchema = z13.string().min(1).max(64);
-var referralOutcomeSchema = z13.string().min(1).max(64);
-var completionRevocationSchema = z13.object({
+var entitlementOutcomeSchema = z14.string().min(1).max(64);
+var deliveryOutcomeSchema = z14.string().min(1).max(64);
+var referralOutcomeSchema = z14.string().min(1).max(64);
+var completionRevocationSchema = z14.object({
   completion: identifier,
   /** The quest ID, or the board ID when `source.kind` is `leaderboard`. */
   quest: identifier,
   member: identifier,
   /** What paid the revoked completion. `source.id` repeats `quest`. */
   source: completionSourceSchema.optional(),
-  revokedAt: z13.number(),
-  occurrenceFreed: z13.boolean(),
-  badges: z13.array(z13.object({ badge: identifier, stillAwarded: z13.boolean() })).optional(),
-  points: z13.array(
-    z13.object({
+  revokedAt: z14.number(),
+  occurrenceFreed: z14.boolean(),
+  badges: z14.array(z14.object({ badge: identifier, stillAwarded: z14.boolean() })).optional(),
+  points: z14.array(
+    z14.object({
       entry: identifier,
       balance: identifier,
       reversal: identifier.nullable(),
-      reversed: z13.number().int(),
-      unreversed: z13.number().int()
+      reversed: z14.number().int(),
+      unreversed: z14.number().int()
     })
   ),
-  entitlements: z13.array(
-    z13.object({
+  entitlements: z14.array(
+    z14.object({
       entitlement: identifier,
       reward: identifier,
       outcome: entitlementOutcomeSchema,
-      status: z13.string()
+      status: z14.string()
     })
   ),
-  deliveries: z13.array(
-    z13.object({
-      delivery: z13.string(),
-      roleId: z13.string(),
+  deliveries: z14.array(
+    z14.object({
+      delivery: z14.string(),
+      roleId: z14.string(),
       outcome: deliveryOutcomeSchema,
       /**
        * By Relay's records, another accepted, unrevoked completion of the member also granted this
        * role to the same Discord account and server. Relay does not read Discord's membership.
        */
-      stillGranted: z13.boolean()
+      stillGranted: z14.boolean()
     })
   ),
-  referrals: z13.array(
-    z13.object({
+  referrals: z14.array(
+    z14.object({
       program: identifier,
       outcome: referralOutcomeSchema
     })
   ),
-  streakMilestone: z13.boolean()
+  streakMilestone: z14.boolean()
 });
-var accessSchema = z13.object({
-  actor: z13.string(),
-  organization: z13.string(),
-  admin: z13.boolean(),
-  local: z13.boolean(),
-  projects: z13.array(projectSchema)
+var accessSchema = z14.object({
+  actor: z14.string(),
+  organization: z14.string(),
+  admin: z14.boolean(),
+  local: z14.boolean(),
+  projects: z14.array(projectSchema)
 });
-var querySchema = z13.object({
-  q: z13.string().max(200).default(""),
-  filter: z13.string().max(50).default("all"),
-  offset: z13.coerce.number().int().min(0).max(1e6).default(0),
-  limit: z13.coerce.number().int().min(1).max(100).default(25)
+var querySchema = z14.object({
+  q: z14.string().max(200).default(""),
+  filter: z14.string().max(50).default("all"),
+  offset: z14.coerce.number().int().min(0).max(1e6).default(0),
+  limit: z14.coerce.number().int().min(1).max(100).default(25)
 });
-var accountProfileSchema = z13.object({
-  name: z13.string().optional(),
+var accountProfileSchema = z14.object({
+  name: z14.string().optional(),
   /** The account's handle, where the provider has one (X and Discord). */
-  username: z13.string().optional(),
-  email: z13.string().optional(),
-  emailVerified: z13.boolean().default(false),
-  imageUrl: z13.string().url().optional()
+  username: z14.string().optional(),
+  email: z14.string().optional(),
+  emailVerified: z14.boolean().default(false),
+  imageUrl: z14.string().url().optional()
 });
-var memberAccountSchema = z13.object({
+var memberAccountSchema = z14.object({
   /** `wallet` for wallet sign-in, `account` for every other connected account. */
-  kind: z13.enum(["account", "wallet"]),
-  provider: z13.string(),
-  subject: z13.string(),
-  signInEnabled: z13.boolean(),
+  kind: z14.enum(["account", "wallet"]),
+  provider: z14.string(),
+  subject: z14.string(),
+  signInEnabled: z14.boolean(),
   profile: accountProfileSchema.optional()
 });
-var operationSchema = z13.object({
-  target: z13.string(),
-  paused: z13.boolean(),
-  revision: z13.number().int(),
-  reason: z13.string(),
-  actor: z13.string().nullable(),
-  changedAt: z13.number()
+var operationSchema = z14.object({
+  target: z14.string(),
+  paused: z14.boolean(),
+  revision: z14.number().int(),
+  reason: z14.string(),
+  actor: z14.string().nullable(),
+  changedAt: z14.number()
 });
-var operationInputSchema = z13.object({
-  target: z13.union([
-    z13.literal("redemptions"),
-    z13.string().regex(/^quest:[\w-]+$/)
+var operationInputSchema = z14.object({
+  target: z14.union([
+    z14.literal("redemptions"),
+    z14.string().regex(/^quest:[\w-]+$/)
   ]),
-  paused: z13.boolean(),
-  revision: z13.number().int().nonnegative(),
-  reason: z13.string().trim().min(1).max(500),
+  paused: z14.boolean(),
+  revision: z14.number().int().nonnegative(),
+  reason: z14.string().trim().min(1).max(500),
   actionId: identifier
 }).strict();
-var questLifecycleInputSchema = z13.object({
+var questLifecycleInputSchema = z14.object({
   quest: identifier,
   expectedRelease: identifier.optional(),
-  archived: z13.boolean(),
-  reason: z13.string().trim().min(1).max(500),
+  archived: z14.boolean(),
+  reason: z14.string().trim().min(1).max(500),
   actionId: identifier
 }).strict();
-var questLifecycleSchema = z13.object({
+var questLifecycleSchema = z14.object({
   quest: identifier,
   key: identifier.nullable(),
-  title: z13.string(),
+  title: z14.string(),
   release: identifier,
-  lifecycle: z13.enum(["active", "paused", "archived"]),
-  changed: z13.boolean()
+  lifecycle: z14.enum(["active", "paused", "archived"]),
+  changed: z14.boolean()
 });
-var memberSchema = z13.object({
-  id: z13.string(),
-  test: z13.boolean().optional(),
-  name: z13.string().nullable().optional(),
-  accounts: z13.array(memberAccountSchema).default([]),
-  attempts: z13.number(),
-  completions: z13.number(),
-  rewards: z13.number(),
-  lastActivity: z13.number().nullable()
+var memberSchema = z14.object({
+  id: z14.string(),
+  test: z14.boolean().optional(),
+  name: z14.string().nullable().optional(),
+  accounts: z14.array(memberAccountSchema).default([]),
+  attempts: z14.number(),
+  completions: z14.number(),
+  rewards: z14.number(),
+  lastActivity: z14.number().nullable()
 });
-var personSchema = z13.object({
-  id: z13.string(),
-  test: z13.boolean().optional(),
-  name: z13.string().nullable().optional(),
-  accounts: z13.array(memberAccountSchema).default([])
+var personSchema = z14.object({
+  id: z14.string(),
+  test: z14.boolean().optional(),
+  name: z14.string().nullable().optional(),
+  accounts: z14.array(memberAccountSchema).default([])
 });
-var metricsSchema = z13.object({
-  quests: z13.number(),
-  members: z13.number(),
-  attempts: z13.number(),
-  completions: z13.number(),
-  review: z13.number(),
-  failed: z13.number(),
-  entitlements: z13.number()
+var metricsSchema = z14.object({
+  quests: z14.number(),
+  members: z14.number(),
+  attempts: z14.number(),
+  completions: z14.number(),
+  review: z14.number(),
+  failed: z14.number(),
+  entitlements: z14.number()
 });
-var readinessSchema = z13.object({
-  checks: z13.array(
-    z13.object({
-      id: z13.string(),
-      status: z13.enum(["ready", "blocked"]),
-      title: z13.string(),
-      detail: z13.string()
+var readinessSchema = z14.object({
+  checks: z14.array(
+    z14.object({
+      id: z14.string(),
+      status: z14.enum(["ready", "blocked"]),
+      title: z14.string(),
+      detail: z14.string()
     })
   )
 });
-var inventorySchema = z13.object({
-  item: z13.string(),
-  name: z13.string().nullable().default(null),
-  available: z13.number(),
-  reserved: z13.number(),
-  allocated: z13.number().default(0)
+var inventorySchema = z14.object({
+  item: z14.string(),
+  name: z14.string().nullable().default(null),
+  available: z14.number(),
+  reserved: z14.number(),
+  allocated: z14.number().default(0)
 });
-var auditRecordSchema = z13.object({
-  id: z13.string(),
-  action: z13.string(),
-  actor: z13.string().nullable(),
+var auditRecordSchema = z14.object({
+  id: z14.string(),
+  action: z14.string(),
+  actor: z14.string().nullable(),
   user: operatorUserSchema.nullable().optional(),
-  detail: z13.string(),
-  at: z13.number(),
-  attempt: z13.string().nullable()
-}).refine((record) => !record.user || record.user.id === record.actor, {
+  detail: z14.string(),
+  at: z14.number(),
+  attempt: z14.string().nullable()
+}).refine((record4) => !record4.user || record4.user.id === record4.actor, {
   message: "User profile must match the recorded actor",
   path: ["user"]
 });
-var pageSchema = z13.object({
+var pageSchema = z14.object({
   snapshot: snapshotSchema,
-  members: z13.array(memberSchema),
-  people: z13.array(personSchema).default([]),
+  members: z14.array(memberSchema),
+  people: z14.array(personSchema).default([]),
   metrics: metricsSchema,
-  total: z13.number(),
-  offset: z13.number(),
-  limit: z13.number(),
-  inventory: z13.array(inventorySchema),
-  operations: z13.array(operationSchema).default([]),
-  audit: z13.array(auditRecordSchema).default([]),
-  questCounts: z13.record(z13.string(), z13.number())
+  total: z14.number(),
+  offset: z14.number(),
+  limit: z14.number(),
+  inventory: z14.array(inventorySchema),
+  operations: z14.array(operationSchema).default([]),
+  audit: z14.array(auditRecordSchema).default([]),
+  questCounts: z14.record(z14.string(), z14.number())
 });
-var managedOAuthAccountBaseSchema = z13.object({
-  provider: z13.enum(["x", "discord"]),
-  revision: z13.number().int().nonnegative()
+var managedOAuthAccountBaseSchema = z14.object({
+  provider: z14.enum(["x", "discord"]),
+  revision: z14.number().int().nonnegative()
 });
-var managedOAuthAccountSchema = z13.discriminatedUnion("status", [
+var managedOAuthAccountSchema = z14.discriminatedUnion("status", [
   managedOAuthAccountBaseSchema.extend({
-    status: z13.literal("connected"),
-    subject: z13.string().min(1),
-    linkedAt: z13.number()
+    status: z14.literal("connected"),
+    subject: z14.string().min(1),
+    linkedAt: z14.number()
   }),
-  managedOAuthAccountBaseSchema.extend({ status: z13.literal("disconnected") })
+  managedOAuthAccountBaseSchema.extend({ status: z14.literal("disconnected") })
 ]);
 var managedTelegramAccountBaseSchema = managedOAuthAccountBaseSchema.extend({
-  provider: z13.literal("telegram")
+  provider: z14.literal("telegram")
 });
-var managedTelegramAccountSchema = z13.discriminatedUnion("status", [
+var managedTelegramAccountSchema = z14.discriminatedUnion("status", [
   managedTelegramAccountBaseSchema.extend({
-    status: z13.literal("connected"),
+    status: z14.literal("connected"),
     /** The numeric Telegram user ID. */
-    subject: z13.string().min(1),
-    linkedAt: z13.number()
+    subject: z14.string().min(1),
+    linkedAt: z14.number()
   }),
   managedTelegramAccountBaseSchema.extend({
-    status: z13.literal("disconnected")
+    status: z14.literal("disconnected")
   })
 ]);
-var memberOAuthUnlinkInputSchema = z13.object({
-  provider: z13.enum(["x", "discord"]),
-  subject: z13.string().min(1).max(4096),
-  revision: z13.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER - 1),
-  reason: z13.string().trim().min(1).max(500)
+var memberOAuthUnlinkInputSchema = z14.object({
+  provider: z14.enum(["x", "discord"]),
+  subject: z14.string().min(1).max(4096),
+  revision: z14.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER - 1),
+  reason: z14.string().trim().min(1).max(500)
 }).strict();
 var memberTelegramUnlinkInputSchema = memberOAuthUnlinkInputSchema.omit({ provider: true }).strict();
 var managedWalletSchema = linkedWalletSchema.extend({
-  status: z13.enum(["linked", "unlinked"]),
-  unlinkedAt: z13.number().int().nullable(),
+  status: z14.enum(["linked", "unlinked"]),
+  unlinkedAt: z14.number().int().nullable(),
   /** "member", or the operator or key that unlinked it. */
-  unlinkedBy: z13.string().nullable()
+  unlinkedBy: z14.string().nullable()
 });
 var managedMemberIdentitySchema = memberIdentitySchema.extend({
-  status: z13.enum(["linked", "unlinked"]),
-  unlinkedAt: z13.number().int().nullable(),
+  status: z14.enum(["linked", "unlinked"]),
+  unlinkedAt: z14.number().int().nullable(),
   /** The operator or key that unlinked it. */
-  unlinkedBy: z13.string().nullable()
+  unlinkedBy: z14.string().nullable()
 });
-var memberIdentityChangeInputSchema = z13.object({
+var memberIdentityChangeInputSchema = z14.object({
   kind: appIdentityKindSchema,
-  subject: z13.string().min(1).max(256),
-  reason: z13.string().trim().min(1).max(500)
+  subject: z14.string().min(1).max(256),
+  reason: z14.string().trim().min(1).max(500)
 }).strict();
 var balanceCheckSchema = walletBalanceSchema.pick({
   chain: true,
@@ -1665,76 +1741,76 @@ var balanceCheckSchema = walletBalanceSchema.pick({
   wallets: true,
   observedAt: true
 }).extend({ attempt: identifier });
-var walletBalanceChainsSchema = z13.object({
-  chains: z13.array(
-    z13.object({
-      chain: z13.union([
-        z13.literal(solanaMainnet),
+var walletBalanceChainsSchema = z14.object({
+  chains: z14.array(
+    z14.object({
+      chain: z14.union([
+        z14.literal(solanaMainnet),
         cosmosNetworkSchema,
         evmChainIdSchema
       ]),
-      name: z13.string(),
-      testnet: z13.boolean()
+      name: z14.string(),
+      testnet: z14.boolean()
     })
   )
 });
-var memberWalletUnlinkInputSchema = walletUnlinkInputSchema.extend({ reason: z13.string().trim().min(1).max(500) }).strict();
+var memberWalletUnlinkInputSchema = walletUnlinkInputSchema.extend({ reason: z14.string().trim().min(1).max(500) }).strict();
 var memberWalletSignInInputSchema = walletUnlinkInputSchema.extend({
-  enabled: z13.boolean(),
-  reason: z13.string().trim().min(1).max(500)
+  enabled: z14.boolean(),
+  reason: z14.string().trim().min(1).max(500)
 }).strict();
-var telegramBotIdSchema = z13.string().regex(/^[1-9][0-9]{0,19}$/, "Enter the bot's numeric ID, such as 123456789");
-var participantSignInSchema = z13.object({
-  providers: z13.array(
-    z13.object({ provider: authProviderSchema, configured: z13.boolean() })
+var telegramBotIdSchema = z14.string().regex(/^[1-9][0-9]{0,19}$/, "Enter the bot's numeric ID, such as 123456789");
+var participantSignInSchema = z14.object({
+  providers: z14.array(
+    z14.object({ provider: authProviderSchema, configured: z14.boolean() })
   ),
-  email: z13.boolean(),
+  email: z14.boolean(),
   /** Wallet families: `"solana"`, `"eip155"`, `"cosmos"`. */
   wallets: walletSignInNetworksSchema,
   /** Why participants cannot sign in to this project, or null. */
-  issue: z13.string().nullable(),
+  issue: z14.string().nullable(),
   /**
    * Telegram, outside `providers` in SDK 1.x: whether Domino configured Telegram Login, and the
    * bot whose Mini App participants sign in from, or null when Mini App sign-in is off. Absent
    * from Relay versions without Telegram.
    */
-  telegram: z13.object({
-    login: z13.boolean(),
+  telegram: z14.object({
+    login: z14.boolean(),
     miniAppBotId: telegramBotIdSchema.nullable()
   }).optional(),
-  updatedAt: z13.number().nullable(),
-  updatedBy: z13.string().nullable()
+  updatedAt: z14.number().nullable(),
+  updatedBy: z14.string().nullable()
 });
-var participantSignInInputSchema = z13.object({
+var participantSignInInputSchema = z14.object({
   wallets: walletSignInNetworksSchema,
-  telegram: z13.object({ miniAppBotId: telegramBotIdSchema.nullable() }).strict().optional()
+  telegram: z14.object({ miniAppBotId: telegramBotIdSchema.nullable() }).strict().optional()
 }).strict();
-var completionRevocationShortfallSchema = z13.object({
+var completionRevocationShortfallSchema = z14.object({
   completion: identifier,
   quest: identifier,
-  revokedAt: z13.number().int().nonnegative().safe(),
-  unreversedPoints: z13.record(identifier, z13.number().int().positive().safe())
+  revokedAt: z14.number().int().nonnegative().safe(),
+  unreversedPoints: z14.record(identifier, z14.number().int().positive().safe())
 });
-var memberDetailSchema = z13.object({
+var memberDetailSchema = z14.object({
   snapshot: snapshotSchema,
   member: memberSchema,
   progress: memberProgressSchema,
   /** Up to 25 revoked completions with an unreversed point remainder, newest first. */
-  revocationShortfalls: z13.array(completionRevocationShortfallSchema).default([]),
+  revocationShortfalls: z14.array(completionRevocationShortfallSchema).default([]),
   /** Current and historical campaign enrollment state, including inactive enrollments. */
-  campaignEnrollments: z13.array(campaignEnrollmentSchema).default([]),
-  passes: z13.array(
-    z13.object({
-      provider: z13.string(),
-      event: z13.string(),
-      subject: z13.string(),
+  campaignEnrollments: z14.array(campaignEnrollmentSchema).default([]),
+  passes: z14.array(
+    z14.object({
+      provider: z14.string(),
+      event: z14.string(),
+      subject: z14.string(),
       attempt: identifier.nullable()
     })
   ).default([]),
   /** Linked and unlinked wallets. */
-  wallets: z13.array(managedWalletSchema),
+  wallets: z14.array(managedWalletSchema),
   /** The member's 10 most recent recorded balance reads, newest first. */
-  balanceChecks: z13.array(balanceCheckSchema),
+  balanceChecks: z14.array(balanceCheckSchema),
   /** The member's participant profile in this project. */
   profile: managedProfileSchema.nullable(),
   /**
@@ -1742,126 +1818,139 @@ var memberDetailSchema = z13.object({
    * member ID: their selected X and Discord accounts and their `app:<name>` identities in this
    * project, including app identities an operator unlinked, by kind.
    */
-  identities: z13.array(managedMemberIdentitySchema)
+  identities: z14.array(managedMemberIdentitySchema)
 });
-var stockInputSchema = z13.object({
+var managedMemberProgressSchema = z14.object({
+  member: identifier,
+  quests: z14.array(
+    memberProgressSchema.shape.quests.element.extend({
+      /** The streak as `members.get` reports it, without the list of qualifying days. */
+      streak: streakProgressSchema.omit({ days: true }).nullable().optional()
+    })
+  ),
+  /** The member's 25 most recent attempts, newest first. */
+  attempts: snapshotSchema.shape.attempts,
+  /** Each point balance the member has, by balance ID. */
+  balances: snapshotSchema.shape.balances
+});
+var stockInputSchema = z14.object({
   item: identifier,
-  quantity: z13.number().int().positive().max(1e6),
+  quantity: z14.number().int().positive().max(1e6),
   actionId: identifier
 }).strict();
-var ingestTrackerScopeSchema = z13.array(identifier).min(1).max(100).nullable();
-var tokenScopeInputSchema = z13.object({ ingestTrackers: ingestTrackerScopeSchema }).strict();
-var tokenInputSchema = z13.object({
-  name: z13.string().trim().min(1).max(80),
+var ingestTrackerScopeSchema = z14.array(identifier).min(1).max(100).nullable();
+var tokenScopeInputSchema = z14.object({ ingestTrackers: ingestTrackerScopeSchema }).strict();
+var tokenInputSchema = z14.object({
+  name: z14.string().trim().min(1).max(80),
   project: identifier,
   environment: environmentSchema,
-  permissions: z13.array(permissionSchema).min(1),
+  permissions: z14.array(permissionSchema).min(1),
   ingestTrackers: ingestTrackerScopeSchema.optional(),
-  days: z13.number().int().min(1).max(90).default(30)
+  days: z14.number().int().min(1).max(90).default(30)
 }).strict();
-var tokenSchema = z13.object({
-  id: z13.string(),
-  name: z13.string(),
-  project: z13.string(),
+var tokenSchema = z14.object({
+  id: z14.string(),
+  name: z14.string(),
+  project: z14.string(),
   environment: environmentSchema,
   permissions: permissionListSchema,
   ingestTrackers: ingestTrackerScopeSchema.optional(),
-  expiresAt: z13.number()
+  expiresAt: z14.number()
 });
-var issuedTokenSchema = tokenSchema.extend({ token: z13.string() });
-var teamSchema = z13.array(
-  z13.object({ id: z13.string(), label: z13.string() })
+var issuedTokenSchema = tokenSchema.extend({ token: z14.string() });
+var teamSchema = z14.array(
+  z14.object({ id: z14.string(), label: z14.string() })
 );
-var memberLookupSchema = z13.object({
-  provider: z13.string().min(1).max(200),
-  subject: z13.string().min(1).max(2048)
+var memberLookupSchema = z14.object({
+  provider: z14.string().min(1).max(200),
+  subject: z14.string().min(1).max(2048)
 }).strict();
-var booleanQuery = z13.union([
-  z13.boolean(),
-  z13.enum(["true", "false"]).transform((v) => v === "true")
+var booleanQuery = z14.union([
+  z14.boolean(),
+  z14.enum(["true", "false"]).transform((v) => v === "true")
 ]);
-var managedMemberQuerySchema = z13.strictObject({
-  q: z13.string().max(200).optional(),
+var managedMemberQuerySchema = z14.strictObject({
+  q: z14.string().max(200).optional(),
   needsReview: booleanQuery.optional(),
-  limit: z13.coerce.number().int().min(1).max(100).optional(),
+  limit: z14.coerce.number().int().min(1).max(100).optional(),
   cursor: pageCursorSchema.optional()
 });
-var managedMemberPageSchema = z13.object({
-  items: z13.array(memberSchema),
-  total: z13.number().int().nonnegative(),
-  nextCursor: z13.string().nullable()
+var managedMemberPageSchema = z14.object({
+  items: z14.array(memberSchema),
+  total: z14.number().int().nonnegative(),
+  nextCursor: z14.string().nullable()
 });
 var projectMetricsSchema = metricsSchema.extend({
-  completionsByQuest: z13.array(
-    z13.object({ quest: identifier, completions: z13.number() })
+  completionsByQuest: z14.array(
+    z14.object({ quest: identifier, completions: z14.number() })
   )
 });
-var pageLimit = z13.coerce.number().int().min(1).max(100).optional();
-var managedAttemptQuerySchema = z13.strictObject({
-  q: z13.string().max(200).optional(),
-  status: z13.string().min(1).max(50).optional(),
+var pageLimit = z14.coerce.number().int().min(1).max(100).optional();
+var managedAttemptQuerySchema = z14.strictObject({
+  q: z14.string().max(200).optional(),
+  status: z14.string().min(1).max(50).optional(),
   limit: pageLimit,
   cursor: pageCursorSchema.optional()
 });
-var managedAttemptPageSchema = z13.object({
-  items: z13.array(attemptSchema),
-  releases: z13.array(publishedReleaseSchema),
-  people: z13.array(personSchema),
-  total: z13.number().int().nonnegative(),
-  nextCursor: z13.string().nullable()
+var managedAttemptPageSchema = z14.object({
+  items: z14.array(attemptSchema),
+  releases: z14.array(publishedReleaseSchema),
+  people: z14.array(personSchema),
+  total: z14.number().int().nonnegative(),
+  nextCursor: z14.string().nullable()
 });
-var managedReleaseQuerySchema = z13.strictObject({
+var managedReleaseQuerySchema = z14.strictObject({
   quest: identifier.optional(),
   limit: pageLimit,
   cursor: pageCursorSchema.optional()
 });
-var managedReleasePageSchema = z13.object({
-  items: z13.array(publishedReleaseSchema),
-  nextCursor: z13.string().nullable()
+var managedReleasePageSchema = z14.object({
+  items: z14.array(publishedReleaseSchema),
+  nextCursor: z14.string().nullable()
 });
-var managedAttemptSchema = z13.object({
+var managedAttemptSchema = z14.object({
   attempt: attemptSchema,
   release: publishedReleaseSchema.nullable(),
-  events: z13.array(eventSchema),
+  events: z14.array(eventSchema),
   person: personSchema
 });
-var managedEntitlementQuerySchema = z13.strictObject({
-  q: z13.string().max(200).optional(),
-  status: z13.string().min(1).max(50).optional(),
+var managedEntitlementQuerySchema = z14.strictObject({
+  q: z14.string().max(200).optional(),
+  status: z14.string().min(1).max(50).optional(),
   limit: pageLimit,
   cursor: pageCursorSchema.optional()
 });
-var managedEntitlementPageSchema = z13.object({
-  items: z13.array(entitlementSchema),
-  people: z13.array(personSchema),
-  total: z13.number().int().nonnegative(),
-  nextCursor: z13.string().nullable()
+var managedEntitlementPageSchema = z14.object({
+  items: z14.array(entitlementSchema),
+  people: z14.array(personSchema),
+  total: z14.number().int().nonnegative(),
+  nextCursor: z14.string().nullable()
 });
-var managedEntitlementSchema = z13.object({
+var managedEntitlementSchema = z14.object({
   entitlement: entitlementSchema,
   person: personSchema
 });
 var managedStockItemSchema = inventorySchema.extend({
-  offers: z13.array(identifier)
+  offers: z14.array(identifier)
 });
-var auditQuerySchema = z13.strictObject({
-  category: z13.enum(["reviews", "rewards", "configuration"]).optional(),
-  q: z13.string().max(200).optional(),
+var auditQuerySchema = z14.strictObject({
+  category: z14.enum(["reviews", "rewards", "configuration"]).optional(),
+  q: z14.string().max(200).optional(),
   limit: pageLimit,
   cursor: pageCursorSchema.optional()
 });
 var accessHistoryQuerySchema = auditQuerySchema.omit({
   category: true
 });
-var auditPageSchema = z13.object({
-  items: z13.array(auditRecordSchema),
-  total: z13.number().int().nonnegative(),
-  nextCursor: z13.string().nullable()
+var auditPageSchema = z14.object({
+  items: z14.array(auditRecordSchema),
+  total: z14.number().int().nonnegative(),
+  nextCursor: z14.string().nullable()
 });
-var verifiedPassSchema = z13.object({
+var verifiedPassSchema = z14.object({
   provider: identifier,
   event: identifier,
-  subject: z13.string().min(1).max(2048),
+  subject: z14.string().min(1).max(2048),
   member: identifier,
   quest: identifier
 }).strict();
@@ -1885,7 +1974,7 @@ function clientFailure(error) {
   return new ManagementError({
     kind: "client",
     code: ManagementErrorCode.InvalidInput,
-    message: error instanceof z13.ZodError ? `Invalid management request: ${z13.prettifyError(error)}` : error instanceof Error ? error.message : "Invalid management request",
+    message: error instanceof z14.ZodError ? `Invalid management request: ${z14.prettifyError(error)}` : error instanceof Error ? error.message : "Invalid management request",
     cause: error
   });
 }
@@ -1923,7 +2012,7 @@ function managementClient(options) {
       call
     );
   }
-  const ok = z13.object({ ok: z13.literal(true) });
+  const ok = z14.object({ ok: z14.literal(true) });
   function pointHistory(member, ledger, query = {}, call) {
     return get(
       `/points/${identifier.parse(member)}/${identifier.parse(ledger)}/history${queryString(typeof query === "number" ? { before: query } : pageQuerySchema.parse(query))}`,
@@ -2008,7 +2097,7 @@ function managementClient(options) {
     const input = isInput ? inputOrCall ?? {} : {};
     const options2 = isInput ? call : inputOrCall;
     return post(
-      `/webhooks/${z13.string().uuid().parse(id)}/rotate-secret`,
+      `/webhooks/${z14.string().uuid().parse(id)}/rotate-secret`,
       webhookSecretSchema,
       webhookRotateInputSchema.parse(withActionId(input)),
       options2
@@ -2056,8 +2145,8 @@ function managementClient(options) {
       }
       return exchange(
         path,
-        z13.object({
-          status: z13.number(),
+        z14.object({
+          status: z14.number(),
           operationId: identifier.optional(),
           result: schema
         }),
@@ -2088,7 +2177,7 @@ function managementClient(options) {
         call
       ),
       ...resourceArchiveMethods("tracker"),
-      list: (call) => get("/trackers", z13.array(trackerStatusSchema), call),
+      list: (call) => get("/trackers", z14.array(trackerStatusSchema), call),
       get: (reference, call) => get(
         `/trackers/${identifier.parse(reference)}`,
         trackerStatusSchema,
@@ -2204,7 +2293,7 @@ function managementClient(options) {
         engagementPublishSchema.parse(withActionId(input)),
         call
       ),
-      list: (call) => get("/engagement", z13.array(engagementRuleSchema), call),
+      list: (call) => get("/engagement", z14.array(engagementRuleSchema), call),
       page: (input, call) => get(
         "/engagement/history" + queryString(engagementPageQuerySchema.parse(input)),
         engagementPageSchema,
@@ -2224,7 +2313,7 @@ function managementClient(options) {
       )
     },
     badges: {
-      list: (call) => get("/badges", z13.array(managedBadgeSchema), call),
+      list: (call) => get("/badges", z14.array(managedBadgeSchema), call),
       create: (input, call) => create("/badges", managedBadgeSchema, createBadgeSchema, input, call),
       update: (badge, input, call) => {
         const body = badgePropertiesSchema.extend(badgeMutationSchema.shape).parse(withActionId(input));
@@ -2267,7 +2356,7 @@ function managementClient(options) {
     },
     pointLedgers: {
       unarchive: (ledger, input, call) => archiveResource("point-ledger", ledger, false, input, call),
-      list: (call) => get("/point-ledgers", z13.array(managedPointLedgerSchema), call),
+      list: (call) => get("/point-ledgers", z14.array(managedPointLedgerSchema), call),
       /**
        * Creates a point ledger, with a stable `key` when code refers to it; requires `publish`. In
        * live, only a person in Console can create one.
@@ -2297,7 +2386,7 @@ function managementClient(options) {
     },
     points: {
       /** @deprecated Use `pointLedgers.list()`, which reads the same ledgers. Removed in 2.0.0. */
-      ledgers: (call) => get("/point-ledgers", z13.array(managedPointLedgerSchema), call),
+      ledgers: (call) => get("/point-ledgers", z14.array(managedPointLedgerSchema), call),
       /** @deprecated Use `pointLedgers.create(input)`. Removed in 2.0.0. */
       createLedger: createPointLedger,
       /**
@@ -2335,7 +2424,7 @@ function managementClient(options) {
         referralHistorySchema,
         call
       ),
-      list: (call) => get("/referrals", z13.array(publishedReferralSchema), call),
+      list: (call) => get("/referrals", z14.array(publishedReferralSchema), call),
       participants: referralParticipants,
       /**
        * Suspends or restores a member's referral relationship, with a reason; requires `publish`.
@@ -2398,7 +2487,7 @@ function managementClient(options) {
     },
     leaderboards: {
       ...resourceArchiveMethods("leaderboard"),
-      list: (call) => get("/leaderboards", z13.array(publishedLeaderboardSchema), call),
+      list: (call) => get("/leaderboards", z14.array(publishedLeaderboardSchema), call),
       standings: (board, input = {}, call) => {
         const query = leaderboardQuerySchema.parse(input);
         return get(
@@ -2412,20 +2501,45 @@ function managementClient(options) {
       },
       history: (board, call) => get(
         `/leaderboards/${identifier.parse(board)}/history`,
-        z13.array(publishedLeaderboardSchema),
+        z14.array(publishedLeaderboardSchema),
         call
       ),
+      /** Current members of the board's exclusion group (`exclusionGroup`), by member ID. */
       exclusions: (board, call) => get(
         `/leaderboards/${identifier.parse(board)}/exclusions`,
-        z13.array(z13.object({ member: identifier })),
+        z14.array(z14.object({ member: identifier })),
         call
       ),
+      /**
+       * Adds a member to, or removes one from, the board's exclusion group, creating the board's
+       * generated group on its first exclusion. A board bound to a shared group changes that
+       * group, so every board it moderates.
+       */
       exclude: (board, input, call) => post(
         `/leaderboards/${identifier.parse(board)}/exclusions`,
         ok,
         leaderboardExclusionSchema.parse(withActionId(input)),
         call
       ),
+      /**
+       * The group whose members the board leaves out. Change its members with `groups.addMember`
+       * and `groups.removeMember`, or with `exclude`.
+       */
+      exclusionGroup: (board, call) => get(
+        `/leaderboards/${identifier.parse(board)}/exclusion-group`,
+        leaderboardExclusionGroupSchema,
+        call
+      ),
+      /**
+       * Binds the board to another exclusion group, such as one shared by several boards, or back
+       * to its generated group. Settlements read the group bound at their cutoff.
+       */
+      bindExclusionGroup: (board, input, call) => post(
+        `/leaderboards/${identifier.parse(board)}/exclusion-group`,
+        leaderboardExclusionGroupSchema,
+        leaderboardExclusionGroupBindingSchema.parse(withActionId(input)),
+        call
+      ),
       /**
        * Adds a member to a group, creating the group (titled with its key) when it is new, or
        * removes one.
@@ -2458,7 +2572,7 @@ function managementClient(options) {
       ),
       settlements: (board, call) => get(
         `/leaderboards/${identifier.parse(board)}/settlements`,
-        z13.array(leaderboardSettlementSummarySchema),
+        z14.array(leaderboardSettlementSummarySchema),
         call
       ),
       settlement: (settlement, call) => get(
@@ -2538,7 +2652,7 @@ function managementClient(options) {
       )
     },
     deployments: {
-      list: (call) => get("/deployments", z13.array(deploymentRecordSchema), call),
+      list: (call) => get("/deployments", z14.array(deploymentRecordSchema), call),
       get: (deployment, call) => get(
         `/deployments/${identifier.parse(deployment)}`,
         deploymentRecordSchema,
@@ -2807,7 +2921,7 @@ function managementClient(options) {
     },
     operations: {
       /** Every paused or resumed operation: redemptions and each quest's participation; requires `read`. */
-      list: (call) => get("/operations", z13.array(operationSchema), call),
+      list: (call) => get("/operations", z14.array(operationSchema), call),
       /**
        * Pauses or resumes redemptions or one quest's participation, against the `revision` the
        * operator saw, with a reason; requires `publish` permission.
@@ -2856,7 +2970,7 @@ function managementClient(options) {
         call
       ),
       /** Every stock item with its counts and the offers that sell it; requires `read` permission. */
-      list: (call) => get("/stock-items", z13.array(managedStockItemSchema), call),
+      list: (call) => get("/stock-items", z14.array(managedStockItemSchema), call),
       createItem: (input, call) => create(
         "/stock-items",
         stockItemSchema,
@@ -2871,7 +2985,7 @@ function managementClient(options) {
         stockInputSchema.parse(withActionId(input)),
         call
       ),
-      catalog: (call) => get("/pickup-inventory", z13.array(pickupCatalogSchema), call),
+      catalog: (call) => get("/pickup-inventory", z14.array(pickupCatalogSchema), call),
       configure: (input, call) => post(
         "/pickup-inventory",
         pickupCatalogSchema,
@@ -2897,10 +3011,10 @@ function managementClient(options) {
         offerControlSchema.omit({ enabled: true }).parse(withActionId(input)),
         call
       ),
-      list: (call) => get("/offers", z13.array(offerSchema), call),
+      list: (call) => get("/offers", z14.array(offerSchema), call),
       redemptions: (input = {}, call) => get(
         `/redemptions${queryString({ member: input.member })}`,
-        z13.array(redemptionSchema),
+        z14.array(redemptionSchema),
         call
       ),
       /** Pauses or resumes an offer at the revision the operator saw. */
@@ -2949,7 +3063,7 @@ function managementClient(options) {
      * them; API keys and project-scoped playground sessions cannot.
      */
     tokens: {
-      list: (call) => get("/tokens", z13.array(tokenSchema), call),
+      list: (call) => get("/tokens", z14.array(tokenSchema), call),
       /**
        * Issues a key for one project and environment, limited to permissions the caller holds
        * there. The secret `token` is in this response only.
@@ -2957,14 +3071,14 @@ function managementClient(options) {
       create: (input, call) => post("/tokens", issuedTokenSchema, tokenInputSchema.parse(input), call),
       /** Replace a personal key's ingestion restriction without changing its secret. */
       scope: (id, input, call) => request(
-        `/tokens/${encodeURIComponent(z13.string().min(1).parse(id))}/scope`,
+        `/tokens/${encodeURIComponent(z14.string().min(1).parse(id))}/scope`,
         tokenSchema,
         tokenScopeInputSchema.parse(input),
         "PUT",
         call
       ),
       revoke: (id, call) => request(
-        `/tokens/${encodeURIComponent(z13.string().min(1).parse(id))}`,
+        `/tokens/${encodeURIComponent(z14.string().min(1).parse(id))}`,
         ok,
         void 0,
         "DELETE",
@@ -2973,7 +3087,7 @@ function managementClient(options) {
     },
     /** Who holds which roles on the client's project; organization administrators only. */
     grants: {
-      list: (call) => get("/grants", z13.array(grantRecordSchema), call),
+      list: (call) => get("/grants", z14.array(grantRecordSchema), call),
       /** Replaces one person's roles and environments on the project. The audit log records it. */
       set: (input, call) => request(
         "/grants",
@@ -2990,7 +3104,7 @@ function managementClient(options) {
     /** Signed activity notifications for one project/environment; writes require publish permission. */
     webhooks: {
       state: (id, call) => get(
-        `/webhooks/${z13.string().uuid().parse(id)}/state`,
+        `/webhooks/${z14.string().uuid().parse(id)}/state`,
         webhookEndpointStateSchema,
         call
       ),
@@ -3001,24 +3115,24 @@ function managementClient(options) {
         call
       ),
       delete: (id, input, call) => post(
-        `/webhooks/${z13.string().uuid().parse(id)}/delete`,
+        `/webhooks/${z14.string().uuid().parse(id)}/delete`,
         webhookEndpointStateSchema,
         webhookDeleteInputSchema.parse(withActionId(input)),
         call
       ),
       pause: (id, input = {}, call) => post(
-        `/webhooks/${z13.string().uuid().parse(id)}/pause`,
+        `/webhooks/${z14.string().uuid().parse(id)}/pause`,
         webhookEndpointSchema,
         webhookControlInputSchema.parse(withActionId(input)),
         call
       ),
       resume: (id, input = {}, call) => post(
-        `/webhooks/${z13.string().uuid().parse(id)}/resume`,
+        `/webhooks/${z14.string().uuid().parse(id)}/resume`,
         webhookEndpointSchema,
         webhookControlInputSchema.parse(withActionId(input)),
         call
       ),
-      list: (call) => get("/webhooks", z13.array(webhookEndpointSchema), call),
+      list: (call) => get("/webhooks", z14.array(webhookEndpointSchema), call),
       /** Pass an `actionId` to recover the endpoint and its secret after a lost answer. */
       create: (input, call) => post(
         "/webhooks",
@@ -3027,7 +3141,7 @@ function managementClient(options) {
         call
       ),
       update: (id, input, call) => request(
-        `/webhooks/${z13.string().uuid().parse(id)}`,
+        `/webhooks/${z14.string().uuid().parse(id)}`,
         webhookEndpointSchema,
         webhookUpdateSchema.parse(input),
         "PUT",
@@ -3035,19 +3149,19 @@ function managementClient(options) {
       ),
       /** @deprecated Use pause. Removed in 2.0.0. */
       disable: (id, call) => post(
-        `/webhooks/${z13.string().uuid().parse(id)}/disable`,
+        `/webhooks/${z14.string().uuid().parse(id)}/disable`,
         webhookEndpointSchema,
         {},
         call
       ),
       rotateSecret: rotateWebhookSecret,
       deliveries: (id, query = {}, call) => get(
-        `/webhooks/${z13.string().uuid().parse(id)}/deliveries${queryString(webhookQuerySchema.parse(query))}`,
+        `/webhooks/${z14.string().uuid().parse(id)}/deliveries${queryString(webhookQuerySchema.parse(query))}`,
         webhookDeliveryPageSchema,
         call
       ),
       replay: (id, delivery, call) => post(
-        `/webhooks/${z13.string().uuid().parse(id)}/deliveries/${z13.string().uuid().parse(delivery)}/replay`,
+        `/webhooks/${z14.string().uuid().parse(id)}/deliveries/${z14.string().uuid().parse(delivery)}/replay`,
         webhookDeliverySchema,
         {},
         call
@@ -3058,7 +3172,7 @@ function managementClient(options) {
      * environment. Organization administrators, from a Console session only.
      */
     identityIntegrations: {
-      list: (call) => get("/identity-integrations", z13.array(identityIntegrationSchema), call),
+      list: (call) => get("/identity-integrations", z14.array(identityIntegrationSchema), call),
       /** The secret `token` is in this response only. */
       create: (input, call) => post(
         "/identity-integrations",
@@ -3068,7 +3182,7 @@ function managementClient(options) {
       ),
       /** Replaces the key's secret and extends it by 90 days; the old secret stops working. */
       rotate: (id, call) => post(
-        `/identity-integrations/${z13.string().uuid().parse(id)}/rotate`,
+        `/identity-integrations/${z14.string().uuid().parse(id)}/rotate`,
         identityIntegrationSecretSchema,
         {},
         call
@@ -3080,7 +3194,7 @@ function managementClient(options) {
        */
       kinds: (call) => get(
         "/identity-integrations/kinds",
-        z13.array(identityKindClaimSchema),
+        z14.array(identityKindClaimSchema),
         call
       ),
       /**
@@ -3088,8 +3202,8 @@ function managementClient(options) {
        * and keep attributing tracker records; unlink them on the member to stop that.
        */
       revoke: (id, call) => request(
-        `/identity-integrations/${z13.string().uuid().parse(id)}`,
-        z13.null(),
+        `/identity-integrations/${z14.string().uuid().parse(id)}`,
+        z14.null(),
         void 0,
         "DELETE",
         call
@@ -3140,7 +3254,7 @@ function managementClient(options) {
     resources: {
       list: (call) => get(
         "/resources",
-        z13.object({ resources: z13.array(managedResourceSchema) }),
+        z14.object({ resources: z14.array(managedResourceSchema) }),
         call
       ),
       /** @deprecated Use the resource archive/unarchive methods. Removed in 2.0.0. */
@@ -3156,13 +3270,32 @@ function managementClient(options) {
       rewardDeliveriesSchema,
       call
     ),
-    /** Relinquish automatic removal for an external assignment; requires `review` and an audited reason. */
+    /**
+     * Relinquish automatic removal for an external assignment; requires `review` and an audited reason.
+     *
+     * @deprecated Use `discordRoles.preserve`. Removed in 2.0.0.
+     */
     preserveRewardRole: (id, body, call) => post(
       `/reward-deliveries/${encodeURIComponent(id)}/preserve`,
       rewardDeliverySchema,
       body,
       call
     ),
+    /** Operations of the Discord role reward kind on assignments it delivered. */
+    discordRoles: {
+      /**
+       * Hands the role assignment a delivery made to an external administrator or bot: Relay stops
+       * removing it automatically, in every project and environment that shares the assignment.
+       * Never grants the role again or rewrites delivery history. Requires `review` permission and
+       * a reason the audit log keeps. A delivery of another reward kind is refused with 409.
+       */
+      preserve: (delivery, input, call) => post(
+        `/reward-deliveries/${encodeURIComponent(delivery)}/preserve`,
+        rewardDeliverySchema,
+        input,
+        call
+      )
+    },
     retryRewardDelivery: (id, call) => post(
       `/reward-deliveries/${encodeURIComponent(id)}/retry`,
       rewardDeliverySchema,
@@ -3180,7 +3313,7 @@ function managementClient(options) {
         testMemberCreateSchema.parse(withActionId(input)),
         call
       ),
-      list: (call) => get("/test-members", z13.array(testMemberSchema), call),
+      list: (call) => get("/test-members", z14.array(testMemberSchema), call),
       history: (member, query = {}, call) => get(
         `/test-members/${identifier.parse(member)}/history${queryString(testMemberHistoryQuerySchema.parse(query))}`,
         testMemberHistorySchema,
@@ -3225,6 +3358,53 @@ function managementClient(options) {
     },
     /** The project's members, as operators see them. */
     members: {
+      /**
+       * Every identity a member proved, by kind: wallets, X, Discord and Telegram accounts, and
+       * `app:<name>` identities, each with its link, sign-in and the actions an operator can take.
+       * Attribution (unlink, relink) and wallet sign-in are separate commands.
+       */
+      identityStates: {
+        /** One page of the member's identities; requires `read` permission. */
+        list: (member, query = {}, call) => get(
+          `/members/${identifier.parse(member)}/identity-states${queryString(managementStateQuerySchema.parse(query))}`,
+          memberIdentityStatePageSchema,
+          call
+        ),
+        /**
+         * Stops an identity attributing tracker records to the member, at the revision the
+         * operator reviewed; requires `review` permission. The identity stays bound to the member.
+         * Unlinking an app identity also ends the sessions its integration issued for it and
+         * refuses its sign-in until it is relinked; other kinds keep their sign-in.
+         */
+        unlink: (member, input, call) => post(
+          `/members/${identifier.parse(member)}/identity-states/unlink`,
+          memberIdentityStateSchema,
+          memberIdentityLinkChangeInputSchema.parse(withActionId(input)),
+          call
+        ),
+        /**
+         * Restores an unlinked identity's attribution for the same member, at the revision the
+         * operator reviewed; requires `review` permission. Records it could not attribute are
+         * decided again under each quest's historical policy.
+         */
+        relink: (member, input, call) => post(
+          `/members/${identifier.parse(member)}/identity-states/relink`,
+          memberIdentityStateSchema,
+          memberIdentityLinkChangeInputSchema.parse(withActionId(input)),
+          call
+        ),
+        /**
+         * Turns sign-in with a member's wallet on or off in this project and environment, whatever
+         * its link; requires `review` permission. Sessions it already issued run out within 8 hours.
+         */
+        setSignIn: (member, input, call) => post(
+          `/members/${identifier.parse(member)}/identity-states/sign-in`,
+          memberIdentityStateSchema,
+          memberIdentitySignInInputSchema.parse(withActionId(input)),
+          call
+        )
+      },
+      /** @deprecated Use `identityStates`, which covers every identity kind. Removed in 2.0.0. */
       identityLinks: {
         /** Owned wallet links and exact owned OAuth choices; requires read permission. */
         list: (member, query = {}, call) => get(
@@ -3265,6 +3445,16 @@ function managementClient(options) {
       ),
       /** A member's detail: accounts, progress, passes, wallets and profile. */
       get: (member, call) => get(`/members/${encodeURIComponent(member)}`, memberDetailSchema, call),
+      /**
+       * A member's progress on each active quest, 25 most recent attempts and point balances,
+       * without the quest releases and their evaluator code that `get` answers; requires `read`
+       * permission. Use it for reads that run often or under a deadline.
+       */
+      progress: (member, call) => get(
+        `/members/${encodeURIComponent(member)}/progress`,
+        managedMemberProgressSchema,
+        call
+      ),
       /**
        * The one member of the client's project holding exactly this account, with `provider` and `subject` as a member's
        * `accounts` list them; requires `read` permission. Fails with 404 `member-not-found` when
@@ -3279,23 +3469,35 @@ function managementClient(options) {
       /** Who each member is: up to 100 distinct IDs; unknown IDs come back without accounts. */
       people: (members, call) => get(
         `/people${queryString({ ids: members.join(",") })}`,
-        z13.array(personSchema),
+        z14.array(personSchema),
         call
       ),
-      /** Current X and Discord quest account selections; requires read permission. */
+      /**
+       * Current X and Discord quest account selections; requires read permission.
+       *
+       * @deprecated Use `identityStates.list`. Removed in 2.0.0.
+       */
       oauthAccounts: (member, call) => get(
         `/members/${encodeURIComponent(member)}/oauth-accounts`,
-        z13.array(managedOAuthAccountSchema),
+        z14.array(managedOAuthAccountSchema),
         call
       ),
-      /** Unlinks the reviewed selection in this project and environment, preserving ownership and sign-in. */
+      /**
+       * Unlinks the reviewed selection in this project and environment, preserving ownership and sign-in.
+       *
+       * @deprecated Use `identityStates.unlink`. Removed in 2.0.0.
+       */
       unlinkOAuthAccount: (member, input, call) => post(
         `/members/${encodeURIComponent(member)}/oauth-accounts/unlink`,
-        z13.array(managedOAuthAccountSchema),
+        z14.array(managedOAuthAccountSchema),
         memberOAuthUnlinkInputSchema.parse(input),
         call
       ),
-      /** The member's Telegram account selection; requires read permission. */
+      /**
+       * The member's Telegram account selection; requires read permission.
+       *
+       * @deprecated Use `identityStates.list`. Removed in 2.0.0.
+       */
       telegramAccount: (member, call) => get(
         `/members/${encodeURIComponent(member)}/telegram-account`,
         managedTelegramAccountSchema,
@@ -3304,6 +3506,8 @@ function managementClient(options) {
       /**
        * Unlinks the member's reviewed Telegram account in this project and environment, as
        * `unlinkOAuthAccount` does for X and Discord; requires `review` permission.
+       *
+       * @deprecated Use `identityStates.unlink`. Removed in 2.0.0.
        */
       unlinkTelegramAccount: (member, input, call) => post(
         `/members/${encodeURIComponent(member)}/telegram-account/unlink`,
@@ -3311,10 +3515,14 @@ function managementClient(options) {
         memberTelegramUnlinkInputSchema.parse(input),
         call
       ),
-      /** Unlinks a member's wallet from the project with a reason; requires `review` permission. The address stays bound to the member. */
+      /**
+       * Unlinks a member's wallet from the project with a reason; requires `review` permission. The address stays bound to the member.
+       *
+       * @deprecated Use `identityStates.unlink`. Removed in 2.0.0.
+       */
       unlinkWallet: (member, input, call) => post(
         `/members/${encodeURIComponent(member)}/wallets/unlink`,
-        z13.array(managedWalletSchema),
+        z14.array(managedWalletSchema),
         memberWalletUnlinkInputSchema.parse(input),
         call
       ),
@@ -3322,27 +3530,35 @@ function managementClient(options) {
        * Unlinks one of a member's `app:<name>` identities with a reason; requires `review`
        * permission. It stops attributing tracker records, the member's sessions that the kind's
        * integration issued for it end, and signing in with it fails until it is relinked.
+       *
+       * @deprecated Use `identityStates.unlink`. Removed in 2.0.0.
        */
       unlinkIdentity: (member, input, call) => post(
         `/members/${encodeURIComponent(member)}/identities/unlink`,
-        z13.array(managedMemberIdentitySchema),
+        z14.array(managedMemberIdentitySchema),
         memberIdentityChangeInputSchema.parse(input),
         call
       ),
-      /** Relinks an `app:<name>` identity an operator unlinked from this member, with a reason; requires `review` permission. */
+      /**
+       * Relinks an `app:<name>` identity an operator unlinked from this member, with a reason; requires `review` permission.
+       *
+       * @deprecated Use `identityStates.relink`. Removed in 2.0.0.
+       */
       relinkIdentity: (member, input, call) => post(
         `/members/${encodeURIComponent(member)}/identities/relink`,
-        z13.array(managedMemberIdentitySchema),
+        z14.array(managedMemberIdentitySchema),
         memberIdentityChangeInputSchema.parse(input),
         call
       ),
       /**
        * Enables or disables sign-in with a member's wallet in this project and environment, with a
        * reason; requires `review` permission. Sessions it already issued run out within 8 hours.
+       *
+       * @deprecated Use `identityStates.setSignIn`. Removed in 2.0.0.
        */
       setWalletSignIn: (member, input, call) => post(
         `/members/${encodeURIComponent(member)}/wallets/sign-in`,
-        z13.array(managedWalletSchema),
+        z14.array(managedWalletSchema),
         memberWalletSignInInputSchema.parse(input),
         call
       )
@@ -3377,10 +3593,10 @@ function managementClient(options) {
         {},
         call
       ),
-      setState: (state2, call) => request(
+      setState: (state3, call) => request(
         "/schedules/state",
         appScheduleListSchema,
-        { state: appScheduleStateSchema.parse(state2) },
+        { state: appScheduleStateSchema.parse(state3) },
         "PUT",
         call
       ),
@@ -3514,7 +3730,7 @@ function managementClient(options) {
        * Each quest's current release, the most recently published first, archived quests
        * included; requires `read` permission.
        */
-      list: (call) => get("/quests/list", z13.array(publishedReleaseSchema), call),
+      list: (call) => get("/quests/list", z14.array(publishedReleaseSchema), call),
       /** Pending and exhausted asynchronous balance checks. Requires read. */
       automaticScheduling: (query = {}, call) => get(
         `/quests/automatic-scheduling${queryString(automaticSchedulingQuerySchema.parse(query))}`,
@@ -3553,6 +3769,25 @@ function managementClient(options) {
         managedQuestEnrollmentPageSchema,
         call
       ),
+      /**
+       * A member's open quest submissions: drafts they started and have not submitted, newest
+       * change first. Each expires 7 days after its last change. Requires `read`.
+       */
+      submissions: (member, call) => get(
+        `/members/${encodeURIComponent(member)}/quest-submissions`,
+        z14.object({ items: z14.array(questSubmissionSchema) }),
+        call
+      ),
+      /**
+       * Discards a member's open quest submission, such as one stuck on a changed quest; the
+       * member starts a new one. Discarding again returns it. Requires `review` or `confirm`.
+       */
+      discardSubmission: (member, submission, call) => post(
+        `/members/${encodeURIComponent(member)}/quest-submissions/${encodeURIComponent(submission)}/discard`,
+        questSubmissionSchema,
+        {},
+        call
+      ),
       withdraw: (quest, member, input, call) => post(
         `/quests/${encodeURIComponent(quest)}/enrollments/${encodeURIComponent(member)}/withdraw`,
         questEnrollmentStateSchema,
@@ -3661,6 +3896,12 @@ var managementResponseSchemas = lazyResponseReaders({
   get memberIdentityLinkPageSchema() {
     return knownResponse(memberIdentityLinkPageSchema);
   },
+  get memberIdentityStatePageSchema() {
+    return knownResponse(memberIdentityStatePageSchema);
+  },
+  get memberIdentityStateSchema() {
+    return knownResponse(memberIdentityStateSchema);
+  },
   get managedQuestEnrollmentPageSchema() {
     return knownResponse(managedQuestEnrollmentPageSchema);
   },
@@ -3853,6 +4094,9 @@ var managementResponseSchemas = lazyResponseReaders({
   get managedMemberPageSchema() {
     return knownResponse(managedMemberPageSchema);
   },
+  get managedMemberProgressSchema() {
+    return knownResponse(managedMemberProgressSchema);
+  },
   get managedOAuthAccountSchema() {
     return knownResponse(managedOAuthAccountSchema);
   },
@@ -4048,6 +4292,8 @@ var managementResponses = {
   memberBadgesSchema: responseSchema(memberBadgesSchema),
   badgeMutationResultSchema: responseSchema(badgeMutationResultSchema),
   memberIdentityLinkPageSchema: responseSchema(memberIdentityLinkPageSchema),
+  memberIdentityStatePageSchema: responseSchema(memberIdentityStatePageSchema),
+  memberIdentityStateSchema: responseSchema(memberIdentityStateSchema),
   managedQuestEnrollmentPageSchema: responseSchema(
     managedQuestEnrollmentPageSchema
   ),
@@ -4130,6 +4376,7 @@ var managementResponses = {
   managedGroupSchema: responseSchema(managedGroupSchema),
   managedMemberIdentitySchema: responseSchema(managedMemberIdentitySchema),
   managedMemberPageSchema: responseSchema(managedMemberPageSchema),
+  managedMemberProgressSchema: responseSchema(managedMemberProgressSchema),
   managedOAuthAccountSchema: responseSchema(managedOAuthAccountSchema),
   managedTelegramAccountSchema: responseSchema(managedTelegramAccountSchema),
   telegramChatsSchema: responseSchema(telegramChatsSchema),
@@ -4224,6 +4471,7 @@ export {
   activityTypeSchema,
   activityTypes,
   addGroupMemberSchema,
+  appIdentitySelectorSchema,
   appMigrationNameSchema,
   appRoutingSchema,
   appScheduleListSchema,
@@ -4324,6 +4572,7 @@ export {
   managedGroupSchema,
   managedMemberIdentitySchema,
   managedMemberPageSchema,
+  managedMemberProgressSchema,
   managedMemberQuerySchema,
   managedOAuthAccountSchema,
   managedPointHistoryPageSchema,
@@ -4342,9 +4591,14 @@ export {
   memberAccountSchema,
   memberDetailSchema,
   memberIdentityChangeInputSchema,
+  memberIdentityLinkChangeInputSchema,
   memberIdentityLinkPageSchema,
   memberIdentityLinkSchema,
   memberIdentitySchema,
+  memberIdentitySelectorSchema,
+  memberIdentitySignInInputSchema,
+  memberIdentityStatePageSchema,
+  memberIdentityStateSchema,
   memberLookupSchema,
   memberOAuthUnlinkInputSchema,
   memberSchema,
@@ -4417,6 +4671,7 @@ export {
   stockInputSchema,
   teamSchema,
   telegramBotIdSchema,
+  telegramIdentitySelectorSchema,
   testMemberActionSchema,
   testMemberAdvanceSchema,
   testMemberCreateSchema,