@domino-sdk/relay 1.31.0 → 1.32.0

package/dist/browser.js

@@ -12,14 +12,14 @@ import {
   solanaSigner,
   telegramMiniAppInitData,
   walletStandardSolanaSigner
-} from "./chunk-WULPIU3Z.js";
-import "./chunk-F3JLZ7MR.js";
+} from "./chunk-CUT62B37.js";
+import "./chunk-HSH7OBUX.js";
 import "./chunk-IJT4EKFY.js";
 import "./chunk-MHPTCD5O.js";
 import "./chunk-5QZGXYH7.js";
 import "./chunk-BUHGXKPY.js";
 import "./chunk-V7K7XXFB.js";
-import "./chunk-A7SJDWBR.js";
+import "./chunk-CCUJ4UJG.js";
 import "./chunk-466IRAJP.js";
 import "./chunk-OW22TOV7.js";
 export {

package/dist/{chunk-LSJPJQW4.js → chunk-BSOXLXQO.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-V7K7XXFB.js";
 import {
   clientIdentity
-} from "./chunk-A7SJDWBR.js";
+} from "./chunk-CCUJ4UJG.js";
 import {
   authScopeSchema
 } from "./chunk-466IRAJP.js";
@@ -33,11 +33,27 @@ function questConfiguration(release) {
   };
 }
 
-// src/identity-integration.ts
+// src/credential-secrets.ts
 import * as z from "zod";
-var identityIntegrationInputSchema = z.object({
-  name: z.string().trim().min(1).max(80),
-  origin: z.string().url().refine((value) => {
+var credentialSecretSchema = z.object({
+  id: z.string().uuid(),
+  /** The secret's last four characters, to tell secrets apart; null for one issued before hints. */
+  hint: z.string().nullable(),
+  createdAt: z.number(),
+  /** When the secret stops working; null when it never expires. */
+  expiresAt: z.number().nullable(),
+  /** When the secret last authenticated a request; null when it never has. */
+  lastUsedAt: z.number().nullable()
+});
+var credentialSecretInputSchema = z.object({
+  expiresInDays: z.number().int().min(1).max(3650).optional()
+}).strict();
+
+// src/identity-integration.ts
+import * as z2 from "zod";
+var identityIntegrationInputSchema = z2.object({
+  name: z2.string().trim().min(1).max(80),
+  origin: z2.string().url().refine((value) => {
     const url = new URL(value);
     return url.protocol === "https:" && url.origin === value;
   }, "Use an exact HTTPS application origin"),
@@ -58,9 +74,11 @@ var identityIntegrationInputSchema = z.object({
    * users as that integration's, because each one then signs in as the member that ID is linked
    * to. Needs `reason`, which the audit log keeps.
    */
-  adoptIdentitiesFrom: z.string().uuid().optional(),
+  adoptIdentitiesFrom: z2.string().uuid().optional(),
   /** Why the identities are adopted; required with `adoptIdentitiesFrom`. */
-  reason: z.string().trim().min(1).max(500).optional()
+  reason: z2.string().trim().min(1).max(500).optional(),
+  /** Days until the first secret expires. Omit it for a key that never expires. */
+  expiresInDays: z2.number().int().min(1).max(3650).optional()
 }).strict().refine(
   (input) => !input.adoptIdentitiesFrom || input.identityKind,
   "Adopting identities needs the identityKind they have"
@@ -68,41 +86,51 @@ var identityIntegrationInputSchema = z.object({
   (input) => !input.adoptIdentitiesFrom === !input.reason,
   "Give a reason when adopting identities, and only then"
 );
-var identityIntegrationSchema = z.object({
+var identityIntegrationSchema = z2.object({
   ...authScopeSchema.shape,
-  id: z.string().uuid(),
-  name: z.string(),
-  origin: z.string(),
-  expiresAt: z.number(),
+  id: z2.string().uuid(),
+  name: z2.string(),
+  origin: z2.string(),
+  /**
+   * When the integration's last working secret expires: 8640000000000000 (the latest date
+   * JavaScript represents) when one never does.
+   *
+   * @deprecated Read `secrets`, which gives each secret's own expiry.
+   */
+  expiresAt: z2.number(),
+  /** The integration's working secrets, oldest first. Any of them authenticates it. */
+  secrets: z2.array(credentialSecretSchema).default([]),
+  /** The latest use of any of its secrets, revoked ones included; null when none was used. */
+  lastUsedAt: z2.number().nullable().default(null),
   /** The identity kind the integration owns; null when it only signs members in. */
   identityKind: openIdentityKindSchema.nullable().default(null)
 });
 var identityIntegrationSecretSchema = identityIntegrationSchema.extend(
   {
-    token: z.string()
+    token: z2.string()
   }
 );
-var identityKindClaimSchema = z.object({
+var identityKindClaimSchema = z2.object({
   kind: openIdentityKindSchema,
   /** The owning integration's ID; it stays after the integration is disconnected. */
-  integration: z.string(),
+  integration: z2.string(),
   /** The owning integration's name when it claimed or adopted the kind. */
-  integrationName: z.string(),
+  integrationName: z2.string(),
   /** Whether the owning integration is still connected. */
-  connected: z.boolean(),
+  connected: z2.boolean(),
   /** Linked identities of the kind; adopting them is required to reuse the kind. */
-  linked: z.number().int().nonnegative(),
+  linked: z2.number().int().nonnegative(),
   /** Identities an operator unlinked. */
-  unlinked: z.number().int().nonnegative(),
-  claimedAt: z.number().int().nonnegative()
+  unlinked: z2.number().int().nonnegative(),
+  claimedAt: z2.number().int().nonnegative()
 });
-var participantExchangeSchema = z.object({
-  subject: z.string().min(1).max(200),
-  previousToken: z.string().max(200).optional()
+var participantExchangeSchema = z2.object({
+  subject: z2.string().min(1).max(200),
+  previousToken: z2.string().max(200).optional()
 }).strict();
 
 // src/server/errors.ts
-import * as z2 from "zod";
+import * as z3 from "zod";
 var ManagementErrorCode = {
   /** The input or an option failed validation before anything was sent (kind `client`). */
   InvalidInput: "invalid-input",
@@ -113,9 +141,9 @@ var ManagementErrorCode = {
   Aborted: "aborted",
   InvalidResponse: "invalid-response"
 };
-var managementErrorSchema = z2.looseObject({
-  error: z2.string(),
-  code: z2.string().optional()
+var managementErrorSchema = z3.looseObject({
+  error: z3.string(),
+  code: z3.string().optional()
 });
 var uncertainStatuses = /* @__PURE__ */ new Set([500, 502, 504]);
 function uncertainOutcome(init) {
@@ -167,7 +195,7 @@ var ManagementError = class extends RequestError {
 var DEFAULT_MANAGEMENT_TIMEOUT = MANAGEMENT_TIMEOUT;
 
 // src/server/transport.ts
-import * as z3 from "zod";
+import * as z4 from "zod";
 function failureCause(error) {
   if (typeof error !== "object" || error === null || !("cause" in error)) {
     return {};
@@ -463,7 +491,7 @@ function managementTransport(options) {
     replaySafe
   }) => exchange(
     path,
-    z3.unknown(),
+    z4.unknown(),
     body,
     method,
     void 0,
@@ -473,8 +501,8 @@ function managementTransport(options) {
 }
 
 // src/sequence-cursor.ts
-import * as z4 from "zod";
-var sequenceCursorSchema = z4.string().regex(/^[1-9][0-9]{0,15}$/, "Invalid cursor").transform(Number).pipe(z4.number().int().positive().safe());
+import * as z5 from "zod";
+var sequenceCursorSchema = z5.string().regex(/^[1-9][0-9]{0,15}$/, "Invalid cursor").transform(Number).pipe(z5.number().int().positive().safe());
 
 // src/referral-reward-kinds.ts
 var REFERRAL_INTEGRATION_REWARD_ERROR = "Referral programs can grant points and tiered rewards; Discord roles need a quest";
@@ -496,6 +524,8 @@ function containsReferralIntegrationReward(value) {
 
 export {
   questConfiguration,
+  credentialSecretSchema,
+  credentialSecretInputSchema,
   identityIntegrationInputSchema,
   identityIntegrationSchema,
   identityIntegrationSecretSchema,

package/dist/{chunk-A7SJDWBR.js → chunk-CCUJ4UJG.js}

@@ -1,6 +1,6 @@
 // package.json
 var name = "@domino-sdk/relay";
-var version = "1.31.0";
+var version = "1.32.0";
 
 // src/client-identity.ts
 function clientIdentity() {

package/dist/{chunk-WULPIU3Z.js → chunk-CUT62B37.js}

@@ -1,6 +1,6 @@
 import {
   createRelayClient
-} from "./chunk-F3JLZ7MR.js";
+} from "./chunk-HSH7OBUX.js";
 import {
   RelayErrorCode,
   asRelayError,

package/dist/{chunk-F3JLZ7MR.js → chunk-HSH7OBUX.js}

@@ -61,7 +61,7 @@ import {
 } from "./chunk-V7K7XXFB.js";
 import {
   clientIdentity
-} from "./chunk-A7SJDWBR.js";
+} from "./chunk-CCUJ4UJG.js";
 import {
   exchangeResultSchema,
   exchangeSchema,

package/dist/index.js

@@ -5,7 +5,7 @@ import {
 import {
   QuestUpdatedError,
   createRelayClient
-} from "./chunk-F3JLZ7MR.js";
+} from "./chunk-HSH7OBUX.js";
 import {
   createRelayAction
 } from "./chunk-IJT4EKFY.js";
@@ -17,7 +17,7 @@ import {
 } from "./chunk-5QZGXYH7.js";
 import "./chunk-BUHGXKPY.js";
 import "./chunk-V7K7XXFB.js";
-import "./chunk-A7SJDWBR.js";
+import "./chunk-CCUJ4UJG.js";
 import {
   sessionMember
 } from "./chunk-466IRAJP.js";

package/dist/internal.d.ts

@@ -1,4 +1,4 @@
-export { I as IdentityKindClaim, M as ManagementTransportOptions, P as ParticipantRoute, R as REFERRAL_INTEGRATION_REWARD_ERROR, c as containsReferralIntegrationReward, i as identityIntegrationInputSchema, a as identityIntegrationSchema, b as identityIntegrationSecretSchema, d as identityKindClaimSchema, e as isIntegrationParticipantPath, f as isParticipantRoute, m as managementTransport, p as parseImageExtraction, g as parseImageResult, h as participantExchangeSchema, j as participantRoutePattern, k as participantRoutes, q as questConfiguration, s as sequenceCursorSchema, l as sourceDataSchema, n as sourceRoles, v as validateQuestShape } from './transport-leWfCbHS.js';
+export { I as IdentityKindClaim, M as ManagementTransportOptions, P as ParticipantRoute, R as REFERRAL_INTEGRATION_REWARD_ERROR, c as containsReferralIntegrationReward, i as identityIntegrationInputSchema, a as identityIntegrationSchema, b as identityIntegrationSecretSchema, d as identityKindClaimSchema, e as isIntegrationParticipantPath, f as isParticipantRoute, m as managementTransport, p as parseImageExtraction, g as parseImageResult, h as participantExchangeSchema, j as participantRoutePattern, k as participantRoutes, q as questConfiguration, s as sequenceCursorSchema, l as sourceDataSchema, n as sourceRoles, v as validateQuestShape } from './transport-VyYo2pIQ.js';
 export { E as Extracted } from './x-58jkoblN.js';
 import { c as RequestErrorKind } from './action-DBzILFx9.js';
 export { i as TrackerDataBudget, s as schemaCheckedReader, t as trackerDataBatchSteps, j as trackerDataIssue, k as trackerDataIssues, l as trackerDataPathTypes, m as trackerDataRecordSteps, w as whereSchemaIssue } from './schema-DquhoBae.js';

package/dist/internal.js

@@ -9,7 +9,7 @@ import {
   participantExchangeSchema,
   questConfiguration,
   sequenceCursorSchema
-} from "./chunk-LSJPJQW4.js";
+} from "./chunk-BSOXLXQO.js";
 import {
   parseImageExtraction,
   parseImageResult
@@ -32,7 +32,7 @@ import {
   retryAfter,
   retrying
 } from "./chunk-V7K7XXFB.js";
-import "./chunk-A7SJDWBR.js";
+import "./chunk-CCUJ4UJG.js";
 import "./chunk-466IRAJP.js";
 import {
   schemaCheckedReader,

package/dist/portal-proxy.js

@@ -3,7 +3,7 @@ import {
 } from "./chunk-DP4YWFMY.js";
 import {
   clientIdentity
-} from "./chunk-A7SJDWBR.js";
+} from "./chunk-CCUJ4UJG.js";
 import {
   exchangeResultSchema
 } from "./chunk-466IRAJP.js";

package/dist/react/index.js

@@ -9,8 +9,8 @@ import {
   readSignInMethods,
   signInOptionsFrom,
   telegramMiniAppInitData
-} from "../chunk-WULPIU3Z.js";
-import "../chunk-F3JLZ7MR.js";
+} from "../chunk-CUT62B37.js";
+import "../chunk-HSH7OBUX.js";
 import {
   createRelayAction
 } from "../chunk-IJT4EKFY.js";
@@ -18,7 +18,7 @@ import "../chunk-MHPTCD5O.js";
 import "../chunk-5QZGXYH7.js";
 import "../chunk-BUHGXKPY.js";
 import "../chunk-V7K7XXFB.js";
-import "../chunk-A7SJDWBR.js";
+import "../chunk-CCUJ4UJG.js";
 import {
   sessionMember
 } from "../chunk-466IRAJP.js";

package/dist/server/index.d.ts

@@ -6,7 +6,7 @@ export { G as GroupMember, y as GroupMemberPage, z as GroupPage, B as GroupPageQ
 import 'zod';
 import '../profiles-BHuQdzsW.js';
 import '../automatic-outcomes-CHiFP_U-.js';
-export { A as APP_KV_LIMIT, o as APP_MIGRATION_FILE_BYTES, r as APP_MIGRATION_LIMIT, t as APP_MIGRATION_TOTAL_BYTES, u as APP_SCHEDULE_LIMIT, w as APP_SCHEDULE_MIN_INTERVAL, x as APP_SCHEDULE_TIMEOUT, y as APP_SECRET_LIMIT, z as APP_SQL_LIMIT, B as APP_STORAGE_PREVIEW_CHARACTERS, C as APP_STORAGE_ROW_LIMIT, D as Access, E as AccessHistoryQuery, F as AppSchedule, G as AppScheduleList, H as AppSchedules, J as AppSecret, K as AppSecretDeclaration, L as AppSecretInput, N as AppSecretList, O as AppStorage, Q as AppStorageCell, S as AppStorageKeys, T as AppStorageKind, U as AppStorageList, V as AppStorageRows, W as AppStorageTables, X as AppStorageValue, Y as AuditPage, Z as AuditQuery, _ as AuditRecord, $ as BalanceCheck, a0 as BuildArtifacts, a1 as BuildIdentity, a2 as BuildSnapshot, a3 as BuildStatus, a4 as CompletionRevocation, a5 as CompletionRevocationShortfall, a6 as CompletionRevokeInput, a7 as DEFAULT_MANAGEMENT_TIMEOUT, a8 as HostedAppSecrets, a9 as HostedBuild, aa as HostedDeploymentKey, ab as HostedKey, ac as HostedKeyPermission, ad as HostedManagementEnv, ae as IdentityLinkRelinkInput, af as InventoryItemAction, ag as InventoryItemRename, ah as InventoryItemState, ai as InventoryStockCorrection, aj as KnownPayoutSourceKind, ak as LeaderboardSettlementRejection, al as LeaderboardSettlementReview, am as ListQuery, an as ManagedAttempt, ao as ManagedAttemptPage, ap as ManagedAttemptQuery, aq as ManagedEntitlement, ar as ManagedEntitlementPage, as as ManagedEntitlementQuery, at as ManagedMemberIdentity, au as ManagedMemberPage, av as ManagedMemberProgress, aw as ManagedMemberQuery, ax as ManagedOAuthAccount, ay as ManagedQuestEnrollment, az as ManagedReleasePage, aA as ManagedReleaseQuery, aB as ManagedResource, aC as ManagedStockItem, aD as ManagedTelegramAccount, aE as ManagedWallet, aF as ManagementCallOptions, aG as ManagementClient, aH as ManagementClientOptions, aI as ManagementError, aJ as ManagementErrorCode, aK as ManagementErrorInit, aL as ManagementErrorKind, aM as ManagementPage, aN as ManagementRawInit, aO as MemberDetail, aP as MemberIdentityLink, aQ as MemberIdentityLinkChangeInput, aR as MemberIdentitySelector, aS as MemberIdentitySignInInput, aT as MemberIdentityState, aU as MemberIdentityStatePage, aV as OperatorUser, aW as ParticipantSignIn, aX as ParticipantSignInInput, aY as PayoutSourceKind, aZ as Permission, a_ as Person, a$ as Project, b0 as ProjectMetrics, b1 as QuestEnrollmentState, b2 as QuestEnrollmentWithdrawalInput, b3 as QuestLifecycle, b4 as QuestLifecycleInput, R as REFERRAL_INTEGRATION_REWARD_ERROR, b5 as ResourceArchiveInput, b6 as ResourceLifecycleInput, b7 as RevokedDeliveryOutcome, b8 as RevokedEntitlementOutcome, b9 as RevokedReferralOutcome, ba as ScheduledInvocation, bb as StagedDeployment, bc as StagedDeploymentContent, bd as StagingAccess, be as StagingAccessInput, bf as StagingLink, bg as StarterId, bh as StarterTemplate, bi as TestMember, bj as TestMemberActionInput, bk as TestMemberAdvanceInput, bl as TestMemberCreateInput, bm as TestMemberHistory, bn as TestMemberHistoryQuery, bo as TestMemberResetInput, bp as TestMemberResetResult, bq as TestMemberWallet, br as TestMemberWalletLinkInput, bs as TestMemberWalletUnlinkInput, bt as WEBHOOK_MAX_BYTES, bu as WalletBalanceChains, bv as WebhookDeleteInput, bw as WebhookEndpointState, bx as WebhookEvent, by as accessHistoryQuerySchema, bz as accessSchema, bA as accountProfileSchema, bB as appIdentitySelectorSchema, bC as appMigrationNameSchema, bD as appRoutingSchema, bE as appScheduleListSchema, bF as appScheduleNameSchema, bG as appSchedulePathSchema, bH as appScheduleRunSchema, bI as appScheduleSchema, bJ as appScheduleStateSchema, bK as appSchedulesSchema, bL as appSecretDeclarationSchema, bM as appSecretDeclarationsSchema, bN as appSecretInputSchema, bO as appSecretListSchema, bP as appSecretNameSchema, bQ as appSecretSchema, bR as appSecretValueSchema, bS as appStorageCellSchema, bT as appStorageKeysSchema, bU as appStorageKindSchema, bV as appStorageListSchema, bW as appStorageRowsSchema, bX as appStorageSchema, bY as appStorageTablesSchema, bZ as appStorageValueSchema, b_ as assetPathSchema, b$ as auditPageSchema, c0 as auditQuerySchema, c1 as auditRecordSchema, c2 as balanceCheckSchema, c3 as buildArtifactsSchema, c4 as buildIdentitySchema, c5 as buildPhaseSchema, c6 as buildSnapshotSchema, c7 as buildStatusSchema, c8 as commitSchema, c9 as compareAppMigrations, ca as completionRevocationSchema, cb as completionRevocationShortfallSchema, cc as completionRevokeSchema, c as containsReferralIntegrationReward, cd as createManagementClient, ce as createRepositorySchema, cf as developmentPreflightSchema, cg as deviceApproveSchema, ch as deviceRedeemSchema, ci as deviceStartSchema, cj as environmentSchema, ck as grantRecordSchema, cl as grantSchema, cm as hostedAppSchema, cn as hostedAppSecretsSchema, co as hostedBuildSchema, cp as hostedDeploymentKeySchema, cq as hostedKeyPermissions, cr as hostedKeySchema, cs as hostedKeySecretSchema, ct as hostedManagementBindings, cu as hostedManagementClient, i as identityIntegrationInputSchema, a as identityIntegrationSchema, d as identityKindClaimSchema, cv as identityLinkRelinkInputSchema, cw as identityLinkSelectorSchema, cx as ingestTrackerScopeSchema, cy as inventoryItemActionSchema, cz as inventoryItemPageSchema, cA as inventoryItemRenameSchema, cB as inventoryItemStateSchema, cC as inventorySchema, cD as inventoryStockCorrectionSchema, e as isIntegrationParticipantPath, cE as isManagementError, f as isParticipantRoute, cF as issuedTokenSchema, cG as leaderboardSettlementRejectionSchema, cH as leaderboardSettlementReviewPageSchema, cI as leaderboardSettlementReviewQuerySchema, cJ as leaderboardSettlementReviewSchema, cK as leaderboardSettlementReviewSummarySchema, cL as managedAttemptPageSchema, cM as managedAttemptQuerySchema, cN as managedAttemptSchema, cO as managedEntitlementPageSchema, cP as managedEntitlementQuerySchema, cQ as managedEntitlementSchema, cR as managedMemberIdentitySchema, cS as managedMemberPageSchema, cT as managedMemberProgressSchema, cU as managedMemberQuerySchema, cV as managedOAuthAccountSchema, cW as managedQuestEnrollmentPageSchema, cX as managedQuestEnrollmentSchema, cY as managedReleasePageSchema, cZ as managedReleaseQuerySchema, c_ as managedResourceSchema, c$ as managedStockItemSchema, d0 as managedTelegramAccountSchema, d1 as managedWalletSchema, d2 as managementErrorSchema, d3 as managementResponseSchemas, d4 as managementResponses, d5 as memberAccountSchema, d6 as memberDetailSchema, d7 as memberIdentityChangeInputSchema, d8 as memberIdentityLinkChangeInputSchema, d9 as memberIdentityLinkPageSchema, da as memberIdentityLinkSchema, db as memberIdentitySelectorSchema, dc as memberIdentitySignInInputSchema, dd as memberIdentityStatePageSchema, de as memberIdentityStateSchema, df as memberLookupSchema, dg as memberOAuthUnlinkInputSchema, dh as memberSchema, di as memberTelegramUnlinkInputSchema, dj as memberWalletSignInInputSchema, dk as memberWalletUnlinkInputSchema, dl as metricsSchema, dm as nextScheduleRun, dn as oauthIdentitySelectorSchema, dp as operationInputSchema, dq as operationSchema, dr as operatorUserSchema, ds as pageSchema, p as parseImageExtraction, g as parseImageResult, h as participantExchangeSchema, j as participantRoutePattern, k as participantRoutes, dt as participantSignInInputSchema, du as participantSignInSchema, dv as permissionSchema, dw as personSchema, dx as projectDeletionInputSchema, dy as projectDeletionSchema, dz as projectInputSchema, dA as projectMetricsSchema, dB as projectSchema, dC as projectSetupSchema, dD as projectTransferInputSchema, dE as projectTransferSchema, dF as projectUpdateInputSchema, dG as querySchema, q as questConfiguration, dH as questEnrollmentStateSchema, dI as questEnrollmentWithdrawalInputSchema, dJ as questLifecycleInputSchema, dK as questLifecycleSchema, dL as readinessSchema, dM as repositorySchema, dN as resourceArchiveInputSchema, dO as resourceLifecycleInputSchema, dP as resourceLifecycleKindSchema, dQ as resourceLifecyclePaths, dR as resourceLifecycleResultSchema, dS as rolePermissions, dT as roleSchema, dU as scheduledInvocationSchema, s as sequenceCursorSchema, l as sourceDataSchema, n as sourceRoles, dV as stageRequestSchema, dW as stagedDeploymentContentSchema, dX as stagedDeploymentKey, dY as stagedDeploymentLimits, dZ as stagedDeploymentSchema, d_ as stagingAccessInputSchema, d$ as stagingAccessModeSchema, e0 as stagingAccessSchema, e1 as stagingLinkSchema, e2 as stagingPathSchema, e3 as starterIdSchema, e4 as starterTemplates, e5 as stockAdditionSchema, e6 as stockInputSchema, e7 as teamSchema, e8 as telegramBotIdSchema, e9 as telegramIdentitySelectorSchema, ea as testMemberActionSchema, eb as testMemberAdvanceSchema, ec as testMemberCreateSchema, ed as testMemberHistoryQuerySchema, ee as testMemberHistorySchema, ef as testMemberResetResultSchema, eg as testMemberResetSchema, eh as testMemberSchema, ei as testMemberWalletLinkSchema, ej as testMemberWalletSchema, ek as testMemberWalletUnlinkSchema, el as tokenInputSchema, em as tokenSchema, en as tokenScopeInputSchema, v as validateQuestShape, eo as verifiedPassSchema, ep as verifyScheduledRequest, eq as verifyWebhook, er as walletBalanceChainsSchema, es as walletIdentitySelectorSchema, et as webhookControlInputSchema, eu as webhookCreateInputSchema, ev as webhookDeleteInputSchema, ew as webhookDeliveryPageSchema, ex as webhookDeliverySchema, ey as webhookEndpointSchema, ez as webhookEndpointStateSchema, eA as webhookEventSchema, eB as webhookInputSchema, eC as webhookQuerySchema, eD as webhookRotateInputSchema, eE as webhookSecretSchema, eF as webhookStatePageSchema, eG as webhookStateQuerySchema, eH as webhookUpdateSchema } from '../transport-leWfCbHS.js';
+export { A as APP_KV_LIMIT, o as APP_MIGRATION_FILE_BYTES, r as APP_MIGRATION_LIMIT, t as APP_MIGRATION_TOTAL_BYTES, u as APP_SCHEDULE_LIMIT, w as APP_SCHEDULE_MIN_INTERVAL, x as APP_SCHEDULE_TIMEOUT, y as APP_SECRET_LIMIT, z as APP_SQL_LIMIT, B as APP_STORAGE_PREVIEW_CHARACTERS, C as APP_STORAGE_ROW_LIMIT, D as Access, E as AccessHistoryQuery, F as AppSchedule, G as AppScheduleList, H as AppSchedules, J as AppSecret, K as AppSecretDeclaration, L as AppSecretInput, N as AppSecretList, O as AppStorage, Q as AppStorageCell, S as AppStorageKeys, T as AppStorageKind, U as AppStorageList, V as AppStorageRows, W as AppStorageTables, X as AppStorageValue, Y as AuditPage, Z as AuditQuery, _ as AuditRecord, $ as BalanceCheck, a0 as BuildArtifacts, a1 as BuildIdentity, a2 as BuildSnapshot, a3 as BuildStatus, a4 as CompletionRevocation, a5 as CompletionRevocationShortfall, a6 as CompletionRevokeInput, a7 as CredentialSecret, a8 as DEFAULT_MANAGEMENT_TIMEOUT, a9 as HostedAppSecrets, aa as HostedBuild, ab as HostedDeploymentKey, ac as HostedKey, ad as HostedKeyPermission, ae as HostedManagementEnv, af as IdentityLinkRelinkInput, ag as InventoryItemAction, ah as InventoryItemRename, ai as InventoryItemState, aj as InventoryStockCorrection, ak as KnownPayoutSourceKind, al as LeaderboardSettlementRejection, am as LeaderboardSettlementReview, an as ListQuery, ao as ManagedAttempt, ap as ManagedAttemptPage, aq as ManagedAttemptQuery, ar as ManagedEntitlement, as as ManagedEntitlementPage, at as ManagedEntitlementQuery, au as ManagedMemberIdentity, av as ManagedMemberPage, aw as ManagedMemberProgress, ax as ManagedMemberQuery, ay as ManagedOAuthAccount, az as ManagedQuestEnrollment, aA as ManagedReleasePage, aB as ManagedReleaseQuery, aC as ManagedResource, aD as ManagedStockItem, aE as ManagedTelegramAccount, aF as ManagedWallet, aG as ManagementCallOptions, aH as ManagementClient, aI as ManagementClientOptions, aJ as ManagementError, aK as ManagementErrorCode, aL as ManagementErrorInit, aM as ManagementErrorKind, aN as ManagementPage, aO as ManagementRawInit, aP as MemberDetail, aQ as MemberIdentityLink, aR as MemberIdentityLinkChangeInput, aS as MemberIdentitySelector, aT as MemberIdentitySignInInput, aU as MemberIdentityState, aV as MemberIdentityStatePage, aW as OperatorUser, aX as ParticipantSignIn, aY as ParticipantSignInInput, aZ as PayoutSourceKind, a_ as Permission, a$ as Person, b0 as Project, b1 as ProjectMetrics, b2 as QuestEnrollmentState, b3 as QuestEnrollmentWithdrawalInput, b4 as QuestLifecycle, b5 as QuestLifecycleInput, R as REFERRAL_INTEGRATION_REWARD_ERROR, b6 as ResourceArchiveInput, b7 as ResourceLifecycleInput, b8 as RevokedDeliveryOutcome, b9 as RevokedEntitlementOutcome, ba as RevokedReferralOutcome, bb as ScheduledInvocation, bc as ServiceKey, bd as StagedDeployment, be as StagedDeploymentContent, bf as StagingAccess, bg as StagingAccessInput, bh as StagingLink, bi as StarterId, bj as StarterTemplate, bk as TestMember, bl as TestMemberActionInput, bm as TestMemberAdvanceInput, bn as TestMemberCreateInput, bo as TestMemberHistory, bp as TestMemberHistoryQuery, bq as TestMemberResetInput, br as TestMemberResetResult, bs as TestMemberWallet, bt as TestMemberWalletLinkInput, bu as TestMemberWalletUnlinkInput, bv as WEBHOOK_MAX_BYTES, bw as WalletBalanceChains, bx as WebhookDeleteInput, by as WebhookEndpointState, bz as WebhookEvent, bA as accessHistoryQuerySchema, bB as accessSchema, bC as accountProfileSchema, bD as appIdentitySelectorSchema, bE as appMigrationNameSchema, bF as appRoutingSchema, bG as appScheduleListSchema, bH as appScheduleNameSchema, bI as appSchedulePathSchema, bJ as appScheduleRunSchema, bK as appScheduleSchema, bL as appScheduleStateSchema, bM as appSchedulesSchema, bN as appSecretDeclarationSchema, bO as appSecretDeclarationsSchema, bP as appSecretInputSchema, bQ as appSecretListSchema, bR as appSecretNameSchema, bS as appSecretSchema, bT as appSecretValueSchema, bU as appStorageCellSchema, bV as appStorageKeysSchema, bW as appStorageKindSchema, bX as appStorageListSchema, bY as appStorageRowsSchema, bZ as appStorageSchema, b_ as appStorageTablesSchema, b$ as appStorageValueSchema, c0 as assetPathSchema, c1 as auditPageSchema, c2 as auditQuerySchema, c3 as auditRecordSchema, c4 as balanceCheckSchema, c5 as buildArtifactsSchema, c6 as buildIdentitySchema, c7 as buildPhaseSchema, c8 as buildSnapshotSchema, c9 as buildStatusSchema, ca as commitSchema, cb as compareAppMigrations, cc as completionRevocationSchema, cd as completionRevocationShortfallSchema, ce as completionRevokeSchema, c as containsReferralIntegrationReward, cf as createManagementClient, cg as createRepositorySchema, ch as credentialSecretInputSchema, ci as credentialSecretSchema, cj as developmentPreflightSchema, ck as deviceApproveSchema, cl as deviceRedeemSchema, cm as deviceStartSchema, cn as environmentSchema, co as grantRecordSchema, cp as grantSchema, cq as hostedAppSchema, cr as hostedAppSecretsSchema, cs as hostedBuildSchema, ct as hostedDeploymentKeySchema, cu as hostedKeyPermissions, cv as hostedKeySchema, cw as hostedKeySecretSchema, cx as hostedManagementBindings, cy as hostedManagementClient, i as identityIntegrationInputSchema, a as identityIntegrationSchema, d as identityKindClaimSchema, cz as identityLinkRelinkInputSchema, cA as identityLinkSelectorSchema, cB as ingestTrackerScopeSchema, cC as inventoryItemActionSchema, cD as inventoryItemPageSchema, cE as inventoryItemRenameSchema, cF as inventoryItemStateSchema, cG as inventorySchema, cH as inventoryStockCorrectionSchema, e as isIntegrationParticipantPath, cI as isManagementError, f as isParticipantRoute, cJ as issuedServiceKeySchema, cK as issuedTokenSchema, cL as leaderboardSettlementRejectionSchema, cM as leaderboardSettlementReviewPageSchema, cN as leaderboardSettlementReviewQuerySchema, cO as leaderboardSettlementReviewSchema, cP as leaderboardSettlementReviewSummarySchema, cQ as managedAttemptPageSchema, cR as managedAttemptQuerySchema, cS as managedAttemptSchema, cT as managedEntitlementPageSchema, cU as managedEntitlementQuerySchema, cV as managedEntitlementSchema, cW as managedMemberIdentitySchema, cX as managedMemberPageSchema, cY as managedMemberProgressSchema, cZ as managedMemberQuerySchema, c_ as managedOAuthAccountSchema, c$ as managedQuestEnrollmentPageSchema, d0 as managedQuestEnrollmentSchema, d1 as managedReleasePageSchema, d2 as managedReleaseQuerySchema, d3 as managedResourceSchema, d4 as managedStockItemSchema, d5 as managedTelegramAccountSchema, d6 as managedWalletSchema, d7 as managementErrorSchema, d8 as managementResponseSchemas, d9 as managementResponses, da as memberAccountSchema, db as memberDetailSchema, dc as memberIdentityChangeInputSchema, dd as memberIdentityLinkChangeInputSchema, de as memberIdentityLinkPageSchema, df as memberIdentityLinkSchema, dg as memberIdentitySelectorSchema, dh as memberIdentitySignInInputSchema, di as memberIdentityStatePageSchema, dj as memberIdentityStateSchema, dk as memberLookupSchema, dl as memberOAuthUnlinkInputSchema, dm as memberSchema, dn as memberTelegramUnlinkInputSchema, dp as memberWalletSignInInputSchema, dq as memberWalletUnlinkInputSchema, dr as metricsSchema, ds as nextScheduleRun, dt as oauthIdentitySelectorSchema, du as operationInputSchema, dv as operationSchema, dw as operatorUserSchema, dx as pageSchema, p as parseImageExtraction, g as parseImageResult, h as participantExchangeSchema, j as participantRoutePattern, k as participantRoutes, dy as participantSignInInputSchema, dz as participantSignInSchema, dA as permissionSchema, dB as personSchema, dC as projectDeletionInputSchema, dD as projectDeletionSchema, dE as projectInputSchema, dF as projectMetricsSchema, dG as projectSchema, dH as projectSetupSchema, dI as projectTransferInputSchema, dJ as projectTransferSchema, dK as projectUpdateInputSchema, dL as querySchema, q as questConfiguration, dM as questEnrollmentStateSchema, dN as questEnrollmentWithdrawalInputSchema, dO as questLifecycleInputSchema, dP as questLifecycleSchema, dQ as readinessSchema, dR as repositorySchema, dS as resourceArchiveInputSchema, dT as resourceLifecycleInputSchema, dU as resourceLifecycleKindSchema, dV as resourceLifecyclePaths, dW as resourceLifecycleResultSchema, dX as rolePermissions, dY as roleSchema, dZ as scheduledInvocationSchema, s as sequenceCursorSchema, d_ as serviceKeyInputSchema, d$ as serviceKeySchema, l as sourceDataSchema, n as sourceRoles, e0 as stageRequestSchema, e1 as stagedDeploymentContentSchema, e2 as stagedDeploymentKey, e3 as stagedDeploymentLimits, e4 as stagedDeploymentSchema, e5 as stagingAccessInputSchema, e6 as stagingAccessModeSchema, e7 as stagingAccessSchema, e8 as stagingLinkSchema, e9 as stagingPathSchema, ea as starterIdSchema, eb as starterTemplates, ec as stockAdditionSchema, ed as stockInputSchema, ee as teamSchema, ef as telegramBotIdSchema, eg as telegramIdentitySelectorSchema, eh as testMemberActionSchema, ei as testMemberAdvanceSchema, ej as testMemberCreateSchema, ek as testMemberHistoryQuerySchema, el as testMemberHistorySchema, em as testMemberResetResultSchema, en as testMemberResetSchema, eo as testMemberSchema, ep as testMemberWalletLinkSchema, eq as testMemberWalletSchema, er as testMemberWalletUnlinkSchema, es as tokenInputSchema, et as tokenSchema, eu as tokenScopeInputSchema, v as validateQuestShape, ev as verifiedPassSchema, ew as verifyScheduledRequest, ex as verifyWebhook, ey as walletBalanceChainsSchema, ez as walletIdentitySelectorSchema, eA as webhookControlInputSchema, eB as webhookCreateInputSchema, eC as webhookDeleteInputSchema, eD as webhookDeliveryPageSchema, eE as webhookDeliverySchema, eF as webhookEndpointSchema, eG as webhookEndpointStateSchema, eH as webhookEventSchema, eI as webhookInputSchema, eJ as webhookQuerySchema, eK as webhookRotateInputSchema, eL as webhookSecretSchema, eM as webhookStatePageSchema, eN as webhookStateQuerySchema, eO as webhookUpdateSchema } from '../transport-VyYo2pIQ.js';
 export { A as AttemptCapture, C as CapturedFact, a as attemptCaptureSchema, c as capturedFactSchema } from '../attempt-captures-nMDnKGdI.js';
 export { f as activityTypeSchema, g as activityTypes, j as deploymentActionSchema, o as deploymentRejectionSchema } from '../deployments-DMVpPnGX.js';
 export { E as Extracted } from '../x-58jkoblN.js';

package/dist/server/index.js

@@ -36,6 +36,8 @@ import {
   REFERRAL_INTEGRATION_REWARD_ERROR,
   actionIdOf,
   containsReferralIntegrationReward,
+  credentialSecretInputSchema,
+  credentialSecretSchema,
   identityIntegrationInputSchema,
   identityIntegrationSchema,
   identityIntegrationSecretSchema,
@@ -46,7 +48,7 @@ import {
   participantExchangeSchema,
   questConfiguration,
   sequenceCursorSchema
-} from "../chunk-LSJPJQW4.js";
+} from "../chunk-BSOXLXQO.js";
 import {
   parseImageExtraction,
   parseImageResult
@@ -149,7 +151,7 @@ import {
   telegramChatsSchema
 } from "../chunk-BUHGXKPY.js";
 import "../chunk-V7K7XXFB.js";
-import "../chunk-A7SJDWBR.js";
+import "../chunk-CCUJ4UJG.js";
 import "../chunk-466IRAJP.js";
 import {
   CompletionSourceKind,
@@ -1870,6 +1872,34 @@ var tokenSchema = z14.object({
   expiresAt: z14.number()
 });
 var issuedTokenSchema = tokenSchema.extend({ token: z14.string() });
+var serviceKeyInputSchema = z14.object({
+  name: z14.string().trim().min(1).max(80),
+  permissions: z14.array(permissionSchema).min(1).refine(
+    (permissions) => !permissions.includes("access"),
+    "Service keys cannot hold the access permission"
+  ),
+  /** Days until the first secret expires. Omit it for a key that never expires. */
+  expiresInDays: z14.number().int().min(1).max(3650).optional()
+}).strict();
+var serviceKeySchema = z14.object({
+  id: z14.string().uuid(),
+  organization: z14.string(),
+  project: z14.string(),
+  environment: environmentSchema,
+  name: z14.string(),
+  permissions: permissionListSchema,
+  /** The Clerk user ID of the administrator who created it. */
+  createdBy: z14.string(),
+  createdAt: z14.number(),
+  /** The latest use of any of its secrets, revoked ones included; null when none was used. */
+  lastUsedAt: z14.number().nullable(),
+  /** Its working secrets, oldest first. Any of them authenticates the key. */
+  secrets: z14.array(credentialSecretSchema)
+});
+var issuedServiceKeySchema = serviceKeySchema.extend({
+  secret: z14.string().uuid(),
+  token: z14.string()
+});
 var teamSchema = z14.array(
   z14.object({ id: z14.string(), label: z14.string() })
 );
@@ -3126,6 +3156,46 @@ function managementClient(options) {
         call
       )
     },
+    /**
+     * Service keys (`dsk_`): credentials for an app's own backend in the selected project and
+     * environment, owned by no person. Only an organization administrator in Console manages them.
+     */
+    serviceKeys: {
+      list: (call) => get("/service-keys", z14.array(serviceKeySchema), call),
+      /** The secret `token` is in this response only. */
+      create: (input, call) => post(
+        "/service-keys",
+        issuedServiceKeySchema,
+        serviceKeyInputSchema.parse(input),
+        call
+      ),
+      /**
+       * Rotation: issues another secret. The key's other secrets keep working until you revoke
+       * them with `revokeSecret`. The new `token` is in this response only.
+       */
+      addSecret: (id, input = {}, call) => post(
+        `/service-keys/${z14.string().uuid().parse(id)}/secrets`,
+        issuedServiceKeySchema,
+        credentialSecretInputSchema.parse(input),
+        call
+      ),
+      /** Stops one secret working. A key's last secret cannot be revoked; revoke the key instead. */
+      revokeSecret: (id, secret, call) => request(
+        `/service-keys/${z14.string().uuid().parse(id)}/secrets/${z14.string().uuid().parse(secret)}`,
+        serviceKeySchema,
+        void 0,
+        "DELETE",
+        call
+      ),
+      /** Deletes the key; every secret stops working. */
+      revoke: (id, call) => request(
+        `/service-keys/${z14.string().uuid().parse(id)}`,
+        z14.null(),
+        void 0,
+        "DELETE",
+        call
+      )
+    },
     /** Who holds which roles on the client's project; organization administrators only. */
     grants: {
       list: (call) => get("/grants", z14.array(grantRecordSchema), call),
@@ -3221,13 +3291,47 @@ function managementClient(options) {
         identityIntegrationInputSchema.parse(input),
         call
       ),
-      /** Replaces the key's secret and extends it by 90 days; the old secret stops working. */
+      /**
+       * Replaces every secret with one new secret that never expires; the old secrets stop working
+       * at once.
+       *
+       * @deprecated Use `addSecret`, then `revokeSecret` the old secret once your app uses the new one.
+       */
       rotate: (id, call) => post(
         `/identity-integrations/${z14.string().uuid().parse(id)}/rotate`,
         identityIntegrationSecretSchema,
         {},
         call
       ),
+      /**
+       * Rotation: issues another secret. The integration's other secrets keep working until you
+       * revoke them with `revokeSecret`. The new `token` is in this response only.
+       */
+      addSecret: (id, input = {}, call) => post(
+        `/identity-integrations/${z14.string().uuid().parse(id)}/secrets`,
+        identityIntegrationSecretSchema,
+        credentialSecretInputSchema.parse(input),
+        call
+      ),
+      /**
+       * Stops one secret working; member sessions stay signed in. The last secret cannot be
+       * revoked; disconnect the integration with `revoke` instead.
+       */
+      revokeSecret: (id, secret, call) => request(
+        `/identity-integrations/${z14.string().uuid().parse(id)}/secrets/${z14.string().uuid().parse(secret)}`,
+        identityIntegrationSchema,
+        void 0,
+        "DELETE",
+        call
+      ),
+      /** Makes one secret never expire. */
+      removeSecretExpiry: (id, secret, call) => request(
+        `/identity-integrations/${z14.string().uuid().parse(id)}/secrets/${z14.string().uuid().parse(secret)}/expiry`,
+        identityIntegrationSchema,
+        void 0,
+        "DELETE",
+        call
+      ),
       /**
        * The `app:<name>` kinds claimed in the project and environment, each with the integration
        * that owns its identities, connected or not, and how many it has. A new integration reusing
@@ -4131,6 +4235,12 @@ var managementResponseSchemas = lazyResponseReaders({
   get issuedTokenSchema() {
     return knownResponse(issuedTokenSchema);
   },
+  get serviceKeySchema() {
+    return knownResponse(serviceKeySchema);
+  },
+  get issuedServiceKeySchema() {
+    return knownResponse(issuedServiceKeySchema);
+  },
   get leaderboardPageSchema() {
     return knownResponse(leaderboardPageSchema);
   },
@@ -4440,6 +4550,8 @@ var managementResponses = {
   ),
   identityKindClaimSchema: responseSchema(identityKindClaimSchema),
   issuedTokenSchema: responseSchema(issuedTokenSchema),
+  serviceKeySchema: responseSchema(serviceKeySchema),
+  issuedServiceKeySchema: responseSchema(issuedServiceKeySchema),
   leaderboardPageSchema: responseSchema(leaderboardPageSchema),
   leaderboardSettlementSchema: responseSchema(leaderboardSettlementSchema),
   leaderboardSettlementSummarySchema: responseSchema(
@@ -4596,6 +4708,8 @@ export {
   createGroupSchema,
   createManagementClient,
   createRepositorySchema,
+  credentialSecretInputSchema,
+  credentialSecretSchema,
   deploymentActionSchema,
   deploymentRejectionSchema,
   developmentPreflightSchema,
@@ -4636,6 +4750,7 @@ export {
   isIntegrationParticipantPath,
   isManagementError,
   isParticipantRoute,
+  issuedServiceKeySchema,
   issuedTokenSchema,
   leaderboardSettlementRejectionSchema,
   leaderboardSettlementReviewPageSchema,
@@ -4732,6 +4847,8 @@ export {
   roleSchema,
   scheduledInvocationSchema,
   sequenceCursorSchema,
+  serviceKeyInputSchema,
+  serviceKeySchema,
   sourceDataSchema,
   sourceRoles,
   stageRequestSchema,

package/dist/{transport-leWfCbHS.d.ts → transport-VyYo2pIQ.d.ts}

@@ -19,6 +19,7 @@ declare const identityIntegrationInputSchema: z.ZodObject<{
     identityKind: z.ZodOptional<z.ZodTemplateLiteral<`app:${string}`>>;
     adoptIdentitiesFrom: z.ZodOptional<z.ZodString>;
     reason: z.ZodOptional<z.ZodString>;
+    expiresInDays: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strict>;
 /** An integration as responses return it: fields a newer Relay adds are ignored. */
 declare const identityIntegrationSchema: z.ZodObject<{
@@ -26,6 +27,14 @@ declare const identityIntegrationSchema: z.ZodObject<{
     name: z.ZodString;
     origin: z.ZodString;
     expiresAt: z.ZodNumber;
+    secrets: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        hint: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodNumber;
+        expiresAt: z.ZodNullable<z.ZodNumber>;
+        lastUsedAt: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>>>;
+    lastUsedAt: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
     identityKind: z.ZodDefault<z.ZodNullable<z.ZodType<OpenIdentityKind, unknown, z.core.$ZodTypeInternals<OpenIdentityKind, unknown>>>>;
     organization: z.ZodString;
     project: z.ZodString;
@@ -39,6 +48,14 @@ declare const identityIntegrationSecretSchema: z.ZodObject<{
     name: z.ZodString;
     origin: z.ZodString;
     expiresAt: z.ZodNumber;
+    secrets: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        hint: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodNumber;
+        expiresAt: z.ZodNullable<z.ZodNumber>;
+        lastUsedAt: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>>>;
+    lastUsedAt: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
     identityKind: z.ZodDefault<z.ZodNullable<z.ZodType<OpenIdentityKind, unknown, z.core.$ZodTypeInternals<OpenIdentityKind, unknown>>>>;
     organization: z.ZodString;
     project: z.ZodString;
@@ -1157,6 +1174,24 @@ type ResourceArchiveInput = Omit<z.input<typeof resourceArchiveInputSchema>, "ac
     actionId?: string;
 };
 
+/**
+ * One secret of a long-lived credential (a service key or an identity integration key), as
+ * responses return it. A credential has one or more secrets, and any of them authenticates it.
+ * Adding a secret is how a credential rotates: both work until the old one is revoked.
+ */
+declare const credentialSecretSchema: z.ZodObject<{
+    id: z.ZodString;
+    hint: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodNumber;
+    expiresAt: z.ZodNullable<z.ZodNumber>;
+    lastUsedAt: z.ZodNullable<z.ZodNumber>;
+}, z.core.$strip>;
+type CredentialSecret = z.infer<typeof credentialSecretSchema>;
+/** A new secret's lifetime. Omit `expiresInDays` for a secret that never expires. */
+declare const credentialSecretInputSchema: z.ZodObject<{
+    expiresInDays: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+
 /**
  * How a management call failed, as in every Domino client error (see `RequestError`):
  * - `http`: the server answered with an error status. `message`, `code` and `details` are its own.
@@ -5767,6 +5802,73 @@ declare const issuedTokenSchema: z.ZodObject<{
     expiresAt: z.ZodNumber;
     token: z.ZodString;
 }, z.core.$strip>;
+/**
+ * A new service key: a project-and-environment credential for an app's own backend that no person
+ * owns. Like a personal key it can never approve live publication, and it cannot hold `access`.
+ */
+declare const serviceKeyInputSchema: z.ZodObject<{
+    name: z.ZodString;
+    permissions: z.ZodArray<z.ZodEnum<{
+        review: "review";
+        points: "points";
+        inventory: "inventory";
+        handover: "handover";
+        access: "access";
+        read: "read";
+        ingest: "ingest";
+        publish: "publish";
+        confirm: "confirm";
+        enroll: "enroll";
+    }>>;
+    expiresInDays: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+/** A service key as responses return it, with its working secrets. */
+declare const serviceKeySchema: z.ZodObject<{
+    id: z.ZodString;
+    organization: z.ZodString;
+    project: z.ZodString;
+    environment: z.ZodEnum<{
+        test: "test";
+        live: "live";
+    }>;
+    name: z.ZodString;
+    permissions: z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<("review" | "points" | "inventory" | "handover" | "access" | "read" | "ingest" | "publish" | "confirm" | "enroll")[], string[]>>;
+    createdBy: z.ZodString;
+    createdAt: z.ZodNumber;
+    lastUsedAt: z.ZodNullable<z.ZodNumber>;
+    secrets: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        hint: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodNumber;
+        expiresAt: z.ZodNullable<z.ZodNumber>;
+        lastUsedAt: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+type ServiceKey = z.infer<typeof serviceKeySchema>;
+/** A service key with a newly issued secret: `token`, shown only in this response, is secret `secret`. */
+declare const issuedServiceKeySchema: z.ZodObject<{
+    id: z.ZodString;
+    organization: z.ZodString;
+    project: z.ZodString;
+    environment: z.ZodEnum<{
+        test: "test";
+        live: "live";
+    }>;
+    name: z.ZodString;
+    permissions: z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<("review" | "points" | "inventory" | "handover" | "access" | "read" | "ingest" | "publish" | "confirm" | "enroll")[], string[]>>;
+    createdBy: z.ZodString;
+    createdAt: z.ZodNumber;
+    lastUsedAt: z.ZodNullable<z.ZodNumber>;
+    secrets: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        hint: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodNumber;
+        expiresAt: z.ZodNullable<z.ZodNumber>;
+        lastUsedAt: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>>;
+    secret: z.ZodString;
+    token: z.ZodString;
+}, z.core.$strip>;
 /** A person in the organization: their Clerk user ID and sign-in identifier. */
 declare const teamSchema: z.ZodArray<z.ZodObject<{
     id: z.ZodString;
@@ -39211,6 +39313,96 @@ declare function managementClient(options: ManagementTransportOptions): {
             ok: true;
         }>;
     };
+    /**
+     * Service keys (`dsk_`): credentials for an app's own backend in the selected project and
+     * environment, owned by no person. Only an organization administrator in Console manages them.
+     */
+    serviceKeys: {
+        list: (call?: ManagementCallOptions) => Promise<{
+            id: string;
+            organization: string;
+            project: string;
+            environment: "test" | "live";
+            name: string;
+            permissions: ("review" | "points" | "inventory" | "handover" | "access" | "read" | "ingest" | "publish" | "confirm" | "enroll")[];
+            createdBy: string;
+            createdAt: number;
+            lastUsedAt: number | null;
+            secrets: {
+                id: string;
+                hint: string | null;
+                createdAt: number;
+                expiresAt: number | null;
+                lastUsedAt: number | null;
+            }[];
+        }[]>;
+        /** The secret `token` is in this response only. */
+        create: (input: z.input<typeof serviceKeyInputSchema>, call?: ManagementCallOptions) => Promise<{
+            id: string;
+            organization: string;
+            project: string;
+            environment: "test" | "live";
+            name: string;
+            permissions: ("review" | "points" | "inventory" | "handover" | "access" | "read" | "ingest" | "publish" | "confirm" | "enroll")[];
+            createdBy: string;
+            createdAt: number;
+            lastUsedAt: number | null;
+            secrets: {
+                id: string;
+                hint: string | null;
+                createdAt: number;
+                expiresAt: number | null;
+                lastUsedAt: number | null;
+            }[];
+            secret: string;
+            token: string;
+        }>;
+        /**
+         * Rotation: issues another secret. The key's other secrets keep working until you revoke
+         * them with `revokeSecret`. The new `token` is in this response only.
+         */
+        addSecret: (id: string, input?: z.input<typeof credentialSecretInputSchema>, call?: ManagementCallOptions) => Promise<{
+            id: string;
+            organization: string;
+            project: string;
+            environment: "test" | "live";
+            name: string;
+            permissions: ("review" | "points" | "inventory" | "handover" | "access" | "read" | "ingest" | "publish" | "confirm" | "enroll")[];
+            createdBy: string;
+            createdAt: number;
+            lastUsedAt: number | null;
+            secrets: {
+                id: string;
+                hint: string | null;
+                createdAt: number;
+                expiresAt: number | null;
+                lastUsedAt: number | null;
+            }[];
+            secret: string;
+            token: string;
+        }>;
+        /** Stops one secret working. A key's last secret cannot be revoked; revoke the key instead. */
+        revokeSecret: (id: string, secret: string, call?: ManagementCallOptions) => Promise<{
+            id: string;
+            organization: string;
+            project: string;
+            environment: "test" | "live";
+            name: string;
+            permissions: ("review" | "points" | "inventory" | "handover" | "access" | "read" | "ingest" | "publish" | "confirm" | "enroll")[];
+            createdBy: string;
+            createdAt: number;
+            lastUsedAt: number | null;
+            secrets: {
+                id: string;
+                hint: string | null;
+                createdAt: number;
+                expiresAt: number | null;
+                lastUsedAt: number | null;
+            }[];
+        }>;
+        /** Deletes the key; every secret stops working. */
+        revoke: (id: string, call?: ManagementCallOptions) => Promise<null>;
+    };
     /** Who holds which roles on the client's project; organization administrators only. */
     grants: {
         list: (call?: ManagementCallOptions) => Promise<{
@@ -39401,6 +39593,14 @@ declare function managementClient(options: ManagementTransportOptions): {
             name: string;
             origin: string;
             expiresAt: number;
+            secrets: {
+                id: string;
+                hint: string | null;
+                createdAt: number;
+                expiresAt: number | null;
+                lastUsedAt: number | null;
+            }[];
+            lastUsedAt: number | null;
             identityKind: OpenIdentityKind | null;
             organization: string;
             project: string;
@@ -39412,24 +39612,109 @@ declare function managementClient(options: ManagementTransportOptions): {
             name: string;
             origin: string;
             expiresAt: number;
+            secrets: {
+                id: string;
+                hint: string | null;
+                createdAt: number;
+                expiresAt: number | null;
+                lastUsedAt: number | null;
+            }[];
+            lastUsedAt: number | null;
             identityKind: OpenIdentityKind | null;
             organization: string;
             project: string;
             environment: "test" | "live";
             token: string;
         }>;
-        /** Replaces the key's secret and extends it by 90 days; the old secret stops working. */
+        /**
+         * Replaces every secret with one new secret that never expires; the old secrets stop working
+         * at once.
+         *
+         * @deprecated Use `addSecret`, then `revokeSecret` the old secret once your app uses the new one.
+         */
         rotate: (id: string, call?: ManagementCallOptions) => Promise<{
             id: string;
             name: string;
             origin: string;
             expiresAt: number;
+            secrets: {
+                id: string;
+                hint: string | null;
+                createdAt: number;
+                expiresAt: number | null;
+                lastUsedAt: number | null;
+            }[];
+            lastUsedAt: number | null;
             identityKind: OpenIdentityKind | null;
             organization: string;
             project: string;
             environment: "test" | "live";
             token: string;
         }>;
+        /**
+         * Rotation: issues another secret. The integration's other secrets keep working until you
+         * revoke them with `revokeSecret`. The new `token` is in this response only.
+         */
+        addSecret: (id: string, input?: z.input<typeof credentialSecretInputSchema>, call?: ManagementCallOptions) => Promise<{
+            id: string;
+            name: string;
+            origin: string;
+            expiresAt: number;
+            secrets: {
+                id: string;
+                hint: string | null;
+                createdAt: number;
+                expiresAt: number | null;
+                lastUsedAt: number | null;
+            }[];
+            lastUsedAt: number | null;
+            identityKind: OpenIdentityKind | null;
+            organization: string;
+            project: string;
+            environment: "test" | "live";
+            token: string;
+        }>;
+        /**
+         * Stops one secret working; member sessions stay signed in. The last secret cannot be
+         * revoked; disconnect the integration with `revoke` instead.
+         */
+        revokeSecret: (id: string, secret: string, call?: ManagementCallOptions) => Promise<{
+            id: string;
+            name: string;
+            origin: string;
+            expiresAt: number;
+            secrets: {
+                id: string;
+                hint: string | null;
+                createdAt: number;
+                expiresAt: number | null;
+                lastUsedAt: number | null;
+            }[];
+            lastUsedAt: number | null;
+            identityKind: OpenIdentityKind | null;
+            organization: string;
+            project: string;
+            environment: "test" | "live";
+        }>;
+        /** Makes one secret never expire. */
+        removeSecretExpiry: (id: string, secret: string, call?: ManagementCallOptions) => Promise<{
+            id: string;
+            name: string;
+            origin: string;
+            expiresAt: number;
+            secrets: {
+                id: string;
+                hint: string | null;
+                createdAt: number;
+                expiresAt: number | null;
+                lastUsedAt: number | null;
+            }[];
+            lastUsedAt: number | null;
+            identityKind: OpenIdentityKind | null;
+            organization: string;
+            project: string;
+            environment: "test" | "live";
+        }>;
         /**
          * The `app:<name>` kinds claimed in the project and environment, each with the integration
          * that owns its identities, connected or not, and how many it has. A new integration reusing
@@ -81826,6 +82111,14 @@ declare const managementResponseSchemas: {
         name: string;
         origin: string;
         expiresAt: number;
+        secrets: {
+            id: string;
+            hint: string | null;
+            createdAt: number;
+            expiresAt: number | null;
+            lastUsedAt: number | null;
+        }[];
+        lastUsedAt: number | null;
         identityKind: OpenIdentityKind | null;
         organization: string;
         project: string;
@@ -81835,6 +82128,14 @@ declare const managementResponseSchemas: {
         name: string;
         origin: string;
         expiresAt: number;
+        secrets: {
+            id: string;
+            hint: string | null;
+            createdAt: number;
+            expiresAt: number | null;
+            lastUsedAt: number | null;
+        }[];
+        lastUsedAt: number | null;
         identityKind: OpenIdentityKind | null;
         organization: string;
         project: string;
@@ -81845,6 +82146,14 @@ declare const managementResponseSchemas: {
         name: string;
         origin: string;
         expiresAt: number;
+        secrets: {
+            id: string;
+            hint: string | null;
+            createdAt: number;
+            expiresAt: number | null;
+            lastUsedAt: number | null;
+        }[];
+        lastUsedAt: number | null;
         identityKind: OpenIdentityKind | null;
         organization: string;
         project: string;
@@ -81855,6 +82164,14 @@ declare const managementResponseSchemas: {
         name: string;
         origin: string;
         expiresAt: number;
+        secrets: {
+            id: string;
+            hint: string | null;
+            createdAt: number;
+            expiresAt: number | null;
+            lastUsedAt: number | null;
+        }[];
+        lastUsedAt: number | null;
         identityKind: OpenIdentityKind | null;
         organization: string;
         project: string;
@@ -81897,6 +82214,80 @@ declare const managementResponseSchemas: {
         token: string;
         ingestTrackers?: string[] | null | undefined;
     }, unknown>>;
+    serviceKeySchema: z.ZodType<{
+        id: string;
+        organization: string;
+        project: string;
+        environment: "test" | "live";
+        name: string;
+        permissions: ("review" | "points" | "inventory" | "handover" | "access" | "read" | "ingest" | "publish" | "confirm" | "enroll")[];
+        createdBy: string;
+        createdAt: number;
+        lastUsedAt: number | null;
+        secrets: {
+            id: string;
+            hint: string | null;
+            createdAt: number;
+            expiresAt: number | null;
+            lastUsedAt: number | null;
+        }[];
+    }, unknown, z.core.$ZodTypeInternals<{
+        id: string;
+        organization: string;
+        project: string;
+        environment: "test" | "live";
+        name: string;
+        permissions: ("review" | "points" | "inventory" | "handover" | "access" | "read" | "ingest" | "publish" | "confirm" | "enroll")[];
+        createdBy: string;
+        createdAt: number;
+        lastUsedAt: number | null;
+        secrets: {
+            id: string;
+            hint: string | null;
+            createdAt: number;
+            expiresAt: number | null;
+            lastUsedAt: number | null;
+        }[];
+    }, unknown>>;
+    issuedServiceKeySchema: z.ZodType<{
+        id: string;
+        organization: string;
+        project: string;
+        environment: "test" | "live";
+        name: string;
+        permissions: ("review" | "points" | "inventory" | "handover" | "access" | "read" | "ingest" | "publish" | "confirm" | "enroll")[];
+        createdBy: string;
+        createdAt: number;
+        lastUsedAt: number | null;
+        secrets: {
+            id: string;
+            hint: string | null;
+            createdAt: number;
+            expiresAt: number | null;
+            lastUsedAt: number | null;
+        }[];
+        secret: string;
+        token: string;
+    }, unknown, z.core.$ZodTypeInternals<{
+        id: string;
+        organization: string;
+        project: string;
+        environment: "test" | "live";
+        name: string;
+        permissions: ("review" | "points" | "inventory" | "handover" | "access" | "read" | "ingest" | "publish" | "confirm" | "enroll")[];
+        createdBy: string;
+        createdAt: number;
+        lastUsedAt: number | null;
+        secrets: {
+            id: string;
+            hint: string | null;
+            createdAt: number;
+            expiresAt: number | null;
+            lastUsedAt: number | null;
+        }[];
+        secret: string;
+        token: string;
+    }, unknown>>;
     leaderboardPageSchema: z.ZodType<{
         leaderboard: string;
         title: string;
@@ -116394,6 +116785,14 @@ declare const managementResponses: {
         name: string;
         origin: string;
         expiresAt: number;
+        secrets: {
+            id: string;
+            hint: string | null;
+            createdAt: number;
+            expiresAt: number | null;
+            lastUsedAt: number | null;
+        }[];
+        lastUsedAt: number | null;
         identityKind: OpenIdentityKind | null;
         organization: string;
         project: string;
@@ -116404,6 +116803,14 @@ declare const managementResponses: {
         name: string;
         origin: string;
         expiresAt: number;
+        secrets: {
+            id: string;
+            hint: string | null;
+            createdAt: number;
+            expiresAt: number | null;
+            lastUsedAt: number | null;
+        }[];
+        lastUsedAt: number | null;
         identityKind: OpenIdentityKind | null;
         organization: string;
         project: string;
@@ -116429,6 +116836,44 @@ declare const managementResponses: {
         token: string;
         ingestTrackers?: string[] | null | undefined;
     }>>;
+    serviceKeySchema: ResponseSchema<ResponseResult<{
+        id: string;
+        organization: string;
+        project: string;
+        environment: "test" | "live";
+        name: string;
+        permissions: ("review" | "points" | "inventory" | "handover" | "access" | "read" | "ingest" | "publish" | "confirm" | "enroll")[];
+        createdBy: string;
+        createdAt: number;
+        lastUsedAt: number | null;
+        secrets: {
+            id: string;
+            hint: string | null;
+            createdAt: number;
+            expiresAt: number | null;
+            lastUsedAt: number | null;
+        }[];
+    }>>;
+    issuedServiceKeySchema: ResponseSchema<ResponseResult<{
+        id: string;
+        organization: string;
+        project: string;
+        environment: "test" | "live";
+        name: string;
+        permissions: ("review" | "points" | "inventory" | "handover" | "access" | "read" | "ingest" | "publish" | "confirm" | "enroll")[];
+        createdBy: string;
+        createdAt: number;
+        lastUsedAt: number | null;
+        secrets: {
+            id: string;
+            hint: string | null;
+            createdAt: number;
+            expiresAt: number | null;
+            lastUsedAt: number | null;
+        }[];
+        secret: string;
+        token: string;
+    }>>;
     leaderboardPageSchema: ResponseSchema<ResponseResult<{
         leaderboard: string;
         title: string;
@@ -124005,4 +124450,4 @@ declare function managementTransport(options: ManagementTransportOptions): {
     }) => Promise<unknown>;
 };
 
-export { type BalanceCheck as $, APP_KV_LIMIT as A, APP_STORAGE_PREVIEW_CHARACTERS as B, APP_STORAGE_ROW_LIMIT as C, type Access as D, type AccessHistoryQuery as E, type AppSchedule as F, type AppScheduleList as G, type AppSchedules as H, type IdentityKindClaim as I, type AppSecret as J, type AppSecretDeclaration as K, type AppSecretInput as L, type ManagementTransportOptions as M, type AppSecretList as N, type AppStorage as O, type ParticipantRoute as P, type AppStorageCell as Q, REFERRAL_INTEGRATION_REWARD_ERROR as R, type AppStorageKeys as S, type AppStorageKind as T, type AppStorageList as U, type AppStorageRows as V, type AppStorageTables as W, type AppStorageValue as X, type AuditPage as Y, type AuditQuery as Z, type AuditRecord as _, identityIntegrationSchema as a, type Project as a$, type BuildArtifacts as a0, type BuildIdentity as a1, type BuildSnapshot as a2, type BuildStatus as a3, type CompletionRevocation as a4, type CompletionRevocationShortfall as a5, type CompletionRevokeInput as a6, DEFAULT_MANAGEMENT_TIMEOUT as a7, type HostedAppSecrets as a8, type HostedBuild as a9, type ManagedReleaseQuery as aA, type ManagedResource as aB, type ManagedStockItem as aC, type ManagedTelegramAccount as aD, type ManagedWallet as aE, type ManagementCallOptions as aF, type ManagementClient as aG, type ManagementClientOptions as aH, ManagementError as aI, ManagementErrorCode as aJ, type ManagementErrorInit as aK, type ManagementErrorKind as aL, type ManagementPage as aM, type ManagementRawInit as aN, type MemberDetail as aO, type MemberIdentityLink as aP, type MemberIdentityLinkChangeInput as aQ, type MemberIdentitySelector as aR, type MemberIdentitySignInInput as aS, type MemberIdentityState as aT, type MemberIdentityStatePage as aU, type OperatorUser as aV, type ParticipantSignIn as aW, type ParticipantSignInInput as aX, PayoutSourceKind as aY, type Permission as aZ, type Person as a_, type HostedDeploymentKey as aa, type HostedKey as ab, type HostedKeyPermission as ac, type HostedManagementEnv as ad, type IdentityLinkRelinkInput as ae, type InventoryItemAction as af, type InventoryItemRename as ag, type InventoryItemState as ah, type InventoryStockCorrection as ai, type KnownPayoutSourceKind as aj, type LeaderboardSettlementRejection as ak, type LeaderboardSettlementReview as al, type ListQuery as am, type ManagedAttempt as an, type ManagedAttemptPage as ao, type ManagedAttemptQuery as ap, type ManagedEntitlement as aq, type ManagedEntitlementPage as ar, type ManagedEntitlementQuery as as, type ManagedMemberIdentity as at, type ManagedMemberPage as au, type ManagedMemberProgress as av, type ManagedMemberQuery as aw, type ManagedOAuthAccount as ax, type ManagedQuestEnrollment as ay, type ManagedReleasePage as az, identityIntegrationSecretSchema as b, auditPageSchema as b$, type ProjectMetrics as b0, type QuestEnrollmentState as b1, type QuestEnrollmentWithdrawalInput as b2, type QuestLifecycle as b3, type QuestLifecycleInput as b4, type ResourceArchiveInput as b5, type ResourceLifecycleInput as b6, RevokedDeliveryOutcome as b7, RevokedEntitlementOutcome as b8, RevokedReferralOutcome as b9, accountProfileSchema as bA, appIdentitySelectorSchema as bB, appMigrationNameSchema as bC, appRoutingSchema as bD, appScheduleListSchema as bE, appScheduleNameSchema as bF, appSchedulePathSchema as bG, appScheduleRunSchema as bH, appScheduleSchema as bI, appScheduleStateSchema as bJ, appSchedulesSchema as bK, appSecretDeclarationSchema as bL, appSecretDeclarationsSchema as bM, appSecretInputSchema as bN, appSecretListSchema as bO, appSecretNameSchema as bP, appSecretSchema as bQ, appSecretValueSchema as bR, appStorageCellSchema as bS, appStorageKeysSchema as bT, appStorageKindSchema as bU, appStorageListSchema as bV, appStorageRowsSchema as bW, appStorageSchema as bX, appStorageTablesSchema as bY, appStorageValueSchema as bZ, assetPathSchema as b_, type ScheduledInvocation as ba, type StagedDeployment as bb, type StagedDeploymentContent as bc, type StagingAccess as bd, type StagingAccessInput as be, type StagingLink as bf, type StarterId as bg, type StarterTemplate as bh, type TestMember as bi, type TestMemberActionInput as bj, type TestMemberAdvanceInput as bk, type TestMemberCreateInput as bl, type TestMemberHistory as bm, type TestMemberHistoryQuery as bn, type TestMemberResetInput as bo, type TestMemberResetResult as bp, type TestMemberWallet as bq, type TestMemberWalletLinkInput as br, type TestMemberWalletUnlinkInput as bs, WEBHOOK_MAX_BYTES as bt, type WalletBalanceChains as bu, type WebhookDeleteInput as bv, type WebhookEndpointState as bw, type WebhookEvent as bx, accessHistoryQuerySchema as by, accessSchema as bz, containsReferralIntegrationReward as c, managedStockItemSchema as c$, auditQuerySchema as c0, auditRecordSchema as c1, balanceCheckSchema as c2, buildArtifactsSchema as c3, buildIdentitySchema as c4, buildPhaseSchema as c5, buildSnapshotSchema as c6, buildStatusSchema as c7, commitSchema as c8, compareAppMigrations as c9, inventoryItemRenameSchema as cA, inventoryItemStateSchema as cB, inventorySchema as cC, inventoryStockCorrectionSchema as cD, isManagementError as cE, issuedTokenSchema as cF, leaderboardSettlementRejectionSchema as cG, leaderboardSettlementReviewPageSchema as cH, leaderboardSettlementReviewQuerySchema as cI, leaderboardSettlementReviewSchema as cJ, leaderboardSettlementReviewSummarySchema as cK, managedAttemptPageSchema as cL, managedAttemptQuerySchema as cM, managedAttemptSchema as cN, managedEntitlementPageSchema as cO, managedEntitlementQuerySchema as cP, managedEntitlementSchema as cQ, managedMemberIdentitySchema as cR, managedMemberPageSchema as cS, managedMemberProgressSchema as cT, managedMemberQuerySchema as cU, managedOAuthAccountSchema as cV, managedQuestEnrollmentPageSchema as cW, managedQuestEnrollmentSchema as cX, managedReleasePageSchema as cY, managedReleaseQuerySchema as cZ, managedResourceSchema as c_, completionRevocationSchema as ca, completionRevocationShortfallSchema as cb, completionRevokeSchema as cc, createManagementClient as cd, createRepositorySchema as ce, developmentPreflightSchema as cf, deviceApproveSchema as cg, deviceRedeemSchema as ch, deviceStartSchema as ci, environmentSchema as cj, grantRecordSchema as ck, grantSchema as cl, hostedAppSchema as cm, hostedAppSecretsSchema as cn, hostedBuildSchema as co, hostedDeploymentKeySchema as cp, hostedKeyPermissions as cq, hostedKeySchema as cr, hostedKeySecretSchema as cs, hostedManagementBindings as ct, hostedManagementClient as cu, identityLinkRelinkInputSchema as cv, identityLinkSelectorSchema as cw, ingestTrackerScopeSchema as cx, inventoryItemActionSchema as cy, inventoryItemPageSchema as cz, identityKindClaimSchema as d, stagingAccessModeSchema as d$, managedTelegramAccountSchema as d0, managedWalletSchema as d1, managementErrorSchema as d2, managementResponseSchemas as d3, managementResponses as d4, memberAccountSchema as d5, memberDetailSchema as d6, memberIdentityChangeInputSchema as d7, memberIdentityLinkChangeInputSchema as d8, memberIdentityLinkPageSchema as d9, projectMetricsSchema as dA, projectSchema as dB, projectSetupSchema as dC, projectTransferInputSchema as dD, projectTransferSchema as dE, projectUpdateInputSchema as dF, querySchema as dG, questEnrollmentStateSchema as dH, questEnrollmentWithdrawalInputSchema as dI, questLifecycleInputSchema as dJ, questLifecycleSchema as dK, readinessSchema as dL, repositorySchema as dM, resourceArchiveInputSchema as dN, resourceLifecycleInputSchema as dO, resourceLifecycleKindSchema as dP, resourceLifecyclePaths as dQ, resourceLifecycleResultSchema as dR, rolePermissions as dS, roleSchema as dT, scheduledInvocationSchema as dU, stageRequestSchema as dV, stagedDeploymentContentSchema as dW, stagedDeploymentKey as dX, stagedDeploymentLimits as dY, stagedDeploymentSchema as dZ, stagingAccessInputSchema as d_, memberIdentityLinkSchema as da, memberIdentitySelectorSchema as db, memberIdentitySignInInputSchema as dc, memberIdentityStatePageSchema as dd, memberIdentityStateSchema as de, memberLookupSchema as df, memberOAuthUnlinkInputSchema as dg, memberSchema as dh, memberTelegramUnlinkInputSchema as di, memberWalletSignInInputSchema as dj, memberWalletUnlinkInputSchema as dk, metricsSchema as dl, nextScheduleRun as dm, oauthIdentitySelectorSchema as dn, operationInputSchema as dp, operationSchema as dq, operatorUserSchema as dr, pageSchema as ds, participantSignInInputSchema as dt, participantSignInSchema as du, permissionSchema as dv, personSchema as dw, projectDeletionInputSchema as dx, projectDeletionSchema as dy, projectInputSchema as dz, isIntegrationParticipantPath as e, stagingAccessSchema as e0, stagingLinkSchema as e1, stagingPathSchema as e2, starterIdSchema as e3, starterTemplates as e4, stockAdditionSchema as e5, stockInputSchema as e6, teamSchema as e7, telegramBotIdSchema as e8, telegramIdentitySelectorSchema as e9, webhookEventSchema as eA, webhookInputSchema as eB, webhookQuerySchema as eC, webhookRotateInputSchema as eD, webhookSecretSchema as eE, webhookStatePageSchema as eF, webhookStateQuerySchema as eG, webhookUpdateSchema as eH, testMemberActionSchema as ea, testMemberAdvanceSchema as eb, testMemberCreateSchema as ec, testMemberHistoryQuerySchema as ed, testMemberHistorySchema as ee, testMemberResetResultSchema as ef, testMemberResetSchema as eg, testMemberSchema as eh, testMemberWalletLinkSchema as ei, testMemberWalletSchema as ej, testMemberWalletUnlinkSchema as ek, tokenInputSchema as el, tokenSchema as em, tokenScopeInputSchema as en, verifiedPassSchema as eo, verifyScheduledRequest as ep, verifyWebhook as eq, walletBalanceChainsSchema as er, walletIdentitySelectorSchema as es, webhookControlInputSchema as et, webhookCreateInputSchema as eu, webhookDeleteInputSchema as ev, webhookDeliveryPageSchema as ew, webhookDeliverySchema as ex, webhookEndpointSchema as ey, webhookEndpointStateSchema as ez, isParticipantRoute as f, parseImageResult as g, participantExchangeSchema as h, identityIntegrationInputSchema as i, participantRoutePattern as j, participantRoutes as k, sourceDataSchema as l, managementTransport as m, sourceRoles as n, APP_MIGRATION_FILE_BYTES as o, parseImageExtraction as p, questConfiguration as q, APP_MIGRATION_LIMIT as r, sequenceCursorSchema as s, APP_MIGRATION_TOTAL_BYTES as t, APP_SCHEDULE_LIMIT as u, validateQuestShape as v, APP_SCHEDULE_MIN_INTERVAL as w, APP_SCHEDULE_TIMEOUT as x, APP_SECRET_LIMIT as y, APP_SQL_LIMIT as z };
+export { type BalanceCheck as $, APP_KV_LIMIT as A, APP_STORAGE_PREVIEW_CHARACTERS as B, APP_STORAGE_ROW_LIMIT as C, type Access as D, type AccessHistoryQuery as E, type AppSchedule as F, type AppScheduleList as G, type AppSchedules as H, type IdentityKindClaim as I, type AppSecret as J, type AppSecretDeclaration as K, type AppSecretInput as L, type ManagementTransportOptions as M, type AppSecretList as N, type AppStorage as O, type ParticipantRoute as P, type AppStorageCell as Q, REFERRAL_INTEGRATION_REWARD_ERROR as R, type AppStorageKeys as S, type AppStorageKind as T, type AppStorageList as U, type AppStorageRows as V, type AppStorageTables as W, type AppStorageValue as X, type AuditPage as Y, type AuditQuery as Z, type AuditRecord as _, identityIntegrationSchema as a, type Person as a$, type BuildArtifacts as a0, type BuildIdentity as a1, type BuildSnapshot as a2, type BuildStatus as a3, type CompletionRevocation as a4, type CompletionRevocationShortfall as a5, type CompletionRevokeInput as a6, type CredentialSecret as a7, DEFAULT_MANAGEMENT_TIMEOUT as a8, type HostedAppSecrets as a9, type ManagedReleasePage as aA, type ManagedReleaseQuery as aB, type ManagedResource as aC, type ManagedStockItem as aD, type ManagedTelegramAccount as aE, type ManagedWallet as aF, type ManagementCallOptions as aG, type ManagementClient as aH, type ManagementClientOptions as aI, ManagementError as aJ, ManagementErrorCode as aK, type ManagementErrorInit as aL, type ManagementErrorKind as aM, type ManagementPage as aN, type ManagementRawInit as aO, type MemberDetail as aP, type MemberIdentityLink as aQ, type MemberIdentityLinkChangeInput as aR, type MemberIdentitySelector as aS, type MemberIdentitySignInInput as aT, type MemberIdentityState as aU, type MemberIdentityStatePage as aV, type OperatorUser as aW, type ParticipantSignIn as aX, type ParticipantSignInInput as aY, PayoutSourceKind as aZ, type Permission as a_, type HostedBuild as aa, type HostedDeploymentKey as ab, type HostedKey as ac, type HostedKeyPermission as ad, type HostedManagementEnv as ae, type IdentityLinkRelinkInput as af, type InventoryItemAction as ag, type InventoryItemRename as ah, type InventoryItemState as ai, type InventoryStockCorrection as aj, type KnownPayoutSourceKind as ak, type LeaderboardSettlementRejection as al, type LeaderboardSettlementReview as am, type ListQuery as an, type ManagedAttempt as ao, type ManagedAttemptPage as ap, type ManagedAttemptQuery as aq, type ManagedEntitlement as ar, type ManagedEntitlementPage as as, type ManagedEntitlementQuery as at, type ManagedMemberIdentity as au, type ManagedMemberPage as av, type ManagedMemberProgress as aw, type ManagedMemberQuery as ax, type ManagedOAuthAccount as ay, type ManagedQuestEnrollment as az, identityIntegrationSecretSchema as b, appStorageValueSchema as b$, type Project as b0, type ProjectMetrics as b1, type QuestEnrollmentState as b2, type QuestEnrollmentWithdrawalInput as b3, type QuestLifecycle as b4, type QuestLifecycleInput as b5, type ResourceArchiveInput as b6, type ResourceLifecycleInput as b7, RevokedDeliveryOutcome as b8, RevokedEntitlementOutcome as b9, accessHistoryQuerySchema as bA, accessSchema as bB, accountProfileSchema as bC, appIdentitySelectorSchema as bD, appMigrationNameSchema as bE, appRoutingSchema as bF, appScheduleListSchema as bG, appScheduleNameSchema as bH, appSchedulePathSchema as bI, appScheduleRunSchema as bJ, appScheduleSchema as bK, appScheduleStateSchema as bL, appSchedulesSchema as bM, appSecretDeclarationSchema as bN, appSecretDeclarationsSchema as bO, appSecretInputSchema as bP, appSecretListSchema as bQ, appSecretNameSchema as bR, appSecretSchema as bS, appSecretValueSchema as bT, appStorageCellSchema as bU, appStorageKeysSchema as bV, appStorageKindSchema as bW, appStorageListSchema as bX, appStorageRowsSchema as bY, appStorageSchema as bZ, appStorageTablesSchema as b_, RevokedReferralOutcome as ba, type ScheduledInvocation as bb, type ServiceKey as bc, type StagedDeployment as bd, type StagedDeploymentContent as be, type StagingAccess as bf, type StagingAccessInput as bg, type StagingLink as bh, type StarterId as bi, type StarterTemplate as bj, type TestMember as bk, type TestMemberActionInput as bl, type TestMemberAdvanceInput as bm, type TestMemberCreateInput as bn, type TestMemberHistory as bo, type TestMemberHistoryQuery as bp, type TestMemberResetInput as bq, type TestMemberResetResult as br, type TestMemberWallet as bs, type TestMemberWalletLinkInput as bt, type TestMemberWalletUnlinkInput as bu, WEBHOOK_MAX_BYTES as bv, type WalletBalanceChains as bw, type WebhookDeleteInput as bx, type WebhookEndpointState as by, type WebhookEvent as bz, containsReferralIntegrationReward as c, managedQuestEnrollmentPageSchema as c$, assetPathSchema as c0, auditPageSchema as c1, auditQuerySchema as c2, auditRecordSchema as c3, balanceCheckSchema as c4, buildArtifactsSchema as c5, buildIdentitySchema as c6, buildPhaseSchema as c7, buildSnapshotSchema as c8, buildStatusSchema as c9, identityLinkSelectorSchema as cA, ingestTrackerScopeSchema as cB, inventoryItemActionSchema as cC, inventoryItemPageSchema as cD, inventoryItemRenameSchema as cE, inventoryItemStateSchema as cF, inventorySchema as cG, inventoryStockCorrectionSchema as cH, isManagementError as cI, issuedServiceKeySchema as cJ, issuedTokenSchema as cK, leaderboardSettlementRejectionSchema as cL, leaderboardSettlementReviewPageSchema as cM, leaderboardSettlementReviewQuerySchema as cN, leaderboardSettlementReviewSchema as cO, leaderboardSettlementReviewSummarySchema as cP, managedAttemptPageSchema as cQ, managedAttemptQuerySchema as cR, managedAttemptSchema as cS, managedEntitlementPageSchema as cT, managedEntitlementQuerySchema as cU, managedEntitlementSchema as cV, managedMemberIdentitySchema as cW, managedMemberPageSchema as cX, managedMemberProgressSchema as cY, managedMemberQuerySchema as cZ, managedOAuthAccountSchema as c_, commitSchema as ca, compareAppMigrations as cb, completionRevocationSchema as cc, completionRevocationShortfallSchema as cd, completionRevokeSchema as ce, createManagementClient as cf, createRepositorySchema as cg, credentialSecretInputSchema as ch, credentialSecretSchema as ci, developmentPreflightSchema as cj, deviceApproveSchema as ck, deviceRedeemSchema as cl, deviceStartSchema as cm, environmentSchema as cn, grantRecordSchema as co, grantSchema as cp, hostedAppSchema as cq, hostedAppSecretsSchema as cr, hostedBuildSchema as cs, hostedDeploymentKeySchema as ct, hostedKeyPermissions as cu, hostedKeySchema as cv, hostedKeySecretSchema as cw, hostedManagementBindings as cx, hostedManagementClient as cy, identityLinkRelinkInputSchema as cz, identityKindClaimSchema as d, serviceKeySchema as d$, managedQuestEnrollmentSchema as d0, managedReleasePageSchema as d1, managedReleaseQuerySchema as d2, managedResourceSchema as d3, managedStockItemSchema as d4, managedTelegramAccountSchema as d5, managedWalletSchema as d6, managementErrorSchema as d7, managementResponseSchemas as d8, managementResponses as d9, permissionSchema as dA, personSchema as dB, projectDeletionInputSchema as dC, projectDeletionSchema as dD, projectInputSchema as dE, projectMetricsSchema as dF, projectSchema as dG, projectSetupSchema as dH, projectTransferInputSchema as dI, projectTransferSchema as dJ, projectUpdateInputSchema as dK, querySchema as dL, questEnrollmentStateSchema as dM, questEnrollmentWithdrawalInputSchema as dN, questLifecycleInputSchema as dO, questLifecycleSchema as dP, readinessSchema as dQ, repositorySchema as dR, resourceArchiveInputSchema as dS, resourceLifecycleInputSchema as dT, resourceLifecycleKindSchema as dU, resourceLifecyclePaths as dV, resourceLifecycleResultSchema as dW, rolePermissions as dX, roleSchema as dY, scheduledInvocationSchema as dZ, serviceKeyInputSchema as d_, memberAccountSchema as da, memberDetailSchema as db, memberIdentityChangeInputSchema as dc, memberIdentityLinkChangeInputSchema as dd, memberIdentityLinkPageSchema as de, memberIdentityLinkSchema as df, memberIdentitySelectorSchema as dg, memberIdentitySignInInputSchema as dh, memberIdentityStatePageSchema as di, memberIdentityStateSchema as dj, memberLookupSchema as dk, memberOAuthUnlinkInputSchema as dl, memberSchema as dm, memberTelegramUnlinkInputSchema as dn, memberWalletSignInInputSchema as dp, memberWalletUnlinkInputSchema as dq, metricsSchema as dr, nextScheduleRun as ds, oauthIdentitySelectorSchema as dt, operationInputSchema as du, operationSchema as dv, operatorUserSchema as dw, pageSchema as dx, participantSignInInputSchema as dy, participantSignInSchema as dz, isIntegrationParticipantPath as e, stageRequestSchema as e0, stagedDeploymentContentSchema as e1, stagedDeploymentKey as e2, stagedDeploymentLimits as e3, stagedDeploymentSchema as e4, stagingAccessInputSchema as e5, stagingAccessModeSchema as e6, stagingAccessSchema as e7, stagingLinkSchema as e8, stagingPathSchema as e9, webhookControlInputSchema as eA, webhookCreateInputSchema as eB, webhookDeleteInputSchema as eC, webhookDeliveryPageSchema as eD, webhookDeliverySchema as eE, webhookEndpointSchema as eF, webhookEndpointStateSchema as eG, webhookEventSchema as eH, webhookInputSchema as eI, webhookQuerySchema as eJ, webhookRotateInputSchema as eK, webhookSecretSchema as eL, webhookStatePageSchema as eM, webhookStateQuerySchema as eN, webhookUpdateSchema as eO, starterIdSchema as ea, starterTemplates as eb, stockAdditionSchema as ec, stockInputSchema as ed, teamSchema as ee, telegramBotIdSchema as ef, telegramIdentitySelectorSchema as eg, testMemberActionSchema as eh, testMemberAdvanceSchema as ei, testMemberCreateSchema as ej, testMemberHistoryQuerySchema as ek, testMemberHistorySchema as el, testMemberResetResultSchema as em, testMemberResetSchema as en, testMemberSchema as eo, testMemberWalletLinkSchema as ep, testMemberWalletSchema as eq, testMemberWalletUnlinkSchema as er, tokenInputSchema as es, tokenSchema as et, tokenScopeInputSchema as eu, verifiedPassSchema as ev, verifyScheduledRequest as ew, verifyWebhook as ex, walletBalanceChainsSchema as ey, walletIdentitySelectorSchema as ez, isParticipantRoute as f, parseImageResult as g, participantExchangeSchema as h, identityIntegrationInputSchema as i, participantRoutePattern as j, participantRoutes as k, sourceDataSchema as l, managementTransport as m, sourceRoles as n, APP_MIGRATION_FILE_BYTES as o, parseImageExtraction as p, questConfiguration as q, APP_MIGRATION_LIMIT as r, sequenceCursorSchema as s, APP_MIGRATION_TOTAL_BYTES as t, APP_SCHEDULE_LIMIT as u, validateQuestShape as v, APP_SCHEDULE_MIN_INTERVAL as w, APP_SCHEDULE_TIMEOUT as x, APP_SECRET_LIMIT as y, APP_SQL_LIMIT as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@domino-sdk/relay",
-  "version": "1.31.0",
+  "version": "1.32.0",
   "type": "module",
   "exports": {
     ".": {