@domino-sdk/relay 1.55.0 → 1.59.0

package/dist/server/index.js

@@ -1,7 +1,7 @@
 import {
   attemptCaptureSchema,
   capturedFactSchema
-} from "../chunk-XALIFNMD.js";
+} from "../chunk-KBCTII6C.js";
 import {
   activityTypeSchema,
   activityTypes,
@@ -27,7 +27,7 @@ import {
   publishDeploymentSchema,
   rejectDeploymentSchema,
   submitDeploymentSchema
-} from "../chunk-IUF7DW76.js";
+} from "../chunk-M2JQPDUX.js";
 import {
   analyticsBreakdowns,
   analyticsCatalog,
@@ -42,7 +42,7 @@ import {
   analyticsRanges,
   analyticsReadSchema,
   dashboardDefinitionSchema
-} from "../chunk-F6HECAXA.js";
+} from "../chunk-W42KMMH5.js";
 import "../chunk-4OC7REYX.js";
 import {
   DEFAULT_MANAGEMENT_TIMEOUT,
@@ -63,31 +63,31 @@ import {
   participantExchangeSchema,
   questConfiguration,
   sequenceCursorSchema
-} from "../chunk-WUEQOKJH.js";
+} from "../chunk-LDLOB2UZ.js";
 import {
   parseImageExtraction,
   parseImageResult
-} from "../chunk-YE3XYB2F.js";
+} from "../chunk-YRSU2X2P.js";
 import {
   imageAssetArtifactSchema,
   xUserLookupInputSchema,
   xUserSchema,
   xUsernameSchema
-} from "../chunk-YEVD4A5X.js";
+} from "../chunk-IBROKMFV.js";
 import {
   sourceDataSchema,
   sourceRoles,
   validateQuestShape
-} from "../chunk-SABMNPF2.js";
+} from "../chunk-YMWRLAAP.js";
 import {
   isIntegrationParticipantPath,
   isParticipantRoute,
   participantRoutePattern,
   participantRoutes
-} from "../chunk-MLIXJPKL.js";
+} from "../chunk-MHPKEVEW.js";
 import {
   withActionId
-} from "../chunk-WHG5WE43.js";
+} from "../chunk-KYUQEZZA.js";
 import {
   allocateQuestSchema,
   allocatedQuestSchema,
@@ -96,6 +96,8 @@ import {
   collectionBeginSchema,
   collectionPreviewSchema,
   collectionResolveSchema,
+  creatorAccountProviderSchema,
+  discordRoleRewardsSchema,
   memberEnrollmentInputSchema,
   publishQuestDraftSchema,
   questCatalogSchema,
@@ -106,7 +108,7 @@ import {
   rewardDeliveryQuerySchema,
   rewardDeliverySchema,
   saveQuestDraftSchema
-} from "../chunk-UY6KMLQG.js";
+} from "../chunk-6U5WWH3W.js";
 import {
   badgeMutationResultSchema,
   badgeMutationSchema,
@@ -154,7 +156,7 @@ import {
   referralQualificationSchema,
   referralRewardResolutionSchema,
   referralSuspensionSchema
-} from "../chunk-C7QZ4UBB.js";
+} from "../chunk-UEMLYPKJ.js";
 import {
   createPointLedgerSchema,
   managedPointLedgerSchema,
@@ -167,12 +169,13 @@ import {
   telegramChatConnectionSchema,
   telegramChatIdSchema,
   telegramChatsSchema
-} from "../chunk-WHMXXHPX.js";
-import "../chunk-TLK2MD4S.js";
-import "../chunk-VFBQVY4X.js";
-import "../chunk-56DBFNR2.js";
+} from "../chunk-XGXDINGM.js";
+import "../chunk-R4S6BFOH.js";
+import "../chunk-TZJT5CRF.js";
+import "../chunk-EQF4ID47.js";
 import {
   CompletionSourceKind,
+  acceptAnywaySchema,
   addGroupMemberSchema,
   appIdentityKindSchema,
   attemptSchema,
@@ -200,6 +203,7 @@ import {
   eventSchema,
   evmAddressSchema,
   evmChainIdSchema,
+  groupArchiveInputSchema,
   groupMemberPageSchema,
   groupMemberSchema,
   groupPageQuerySchema,
@@ -207,13 +211,16 @@ import {
   identifier,
   knownResponse,
   lazyResponseReaders,
+  lifecycleReasonSchema,
   linkedWalletSchema,
   managedGroupSchema,
+  managedTrackerCreateSchema,
   managementStateQuerySchema,
   memberCampaignEnrollmentInputSchema,
   memberCampaignWithdrawalInputSchema,
   memberIdentitySchema,
   memberProgressSchema,
+  offsetDateTimeSchema,
   pageCursorSchema,
   pageQuerySchema,
   pickupAvailabilitySchema,
@@ -236,7 +243,6 @@ import {
   trackerContentReadSchema,
   trackerContentSchema,
   trackerControlSchema,
-  trackerCreateSchema,
   trackerDataIssue,
   trackerDataIssues,
   trackerIngestResultSchema,
@@ -260,7 +266,7 @@ import {
   walletSignInNetworksSchema,
   walletUnlinkInputSchema,
   whereSchemaIssue
-} from "../chunk-YCOKTQ4E.js";
+} from "../chunk-AWWCEP7F.js";
 
 // src/server/identity-links.ts
 import * as z from "zod";
@@ -381,162 +387,210 @@ var memberIdentitySignInInputSchema = z2.strictObject({
   enabled: z2.boolean()
 });
 
-// src/server/settlement-reviews.ts
+// src/server/creator-accounts.ts
 import * as z3 from "zod";
-var timestamp = z3.number().int().safe().nonnegative();
+var managedCreatorAccountSchema = z3.object({
+  provider: creatorAccountProviderSchema,
+  /** The platform's account ID, such as a YouTube channel ID (`UC…`) or a TikTok `open_id`. */
+  subject: z3.string().min(1),
+  revision: z3.number().int().nonnegative(),
+  /** When the member linked it, epoch milliseconds. */
+  linkedAt: z3.number().int().nonnegative().nullable(),
+  status: z3.enum(["connected", "needs-reconnect"]),
+  /** Why the member must link it again: `revoked`, `expired` or `missing-scope`. */
+  reason: z3.string().optional(),
+  /** The public name, handle and picture the platform reported at link time. */
+  profile: z3.object({
+    name: z3.string().optional(),
+    username: z3.string().optional(),
+    imageUrl: z3.string().optional()
+  }).nullable()
+});
+var managedCreatorAccountsSchema = z3.object({
+  accounts: z3.array(managedCreatorAccountSchema)
+});
+var memberCreatorAccountUnlinkInputSchema = z3.strictObject({
+  provider: creatorAccountProviderSchema,
+  subject: z3.string().min(1).max(4096),
+  revision: z3.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER - 1),
+  reason: z3.string().trim().min(1).max(500)
+});
+
+// src/server/settlement-reviews.ts
+import * as z4 from "zod";
+var timestamp = z4.number().int().safe().nonnegative();
 var decision = {
-  status: z3.enum(["pending", "approved", "rejected"]),
+  status: z4.enum(["pending", "approved", "rejected"]),
   /**
    * Present while the window has ended but Relay is still taking closing measurements of the
    * content its engagement points pay for. The settlement reads as `pending` with no rows, cannot
    * be approved yet, and freezes when the measurements arrive or their wait ends after `deadline`.
    */
-  closing: z3.object({ startedAt: timestamp, deadline: timestamp }).optional(),
-  rejectedAt: z3.number().int().safe().nonnegative().nullable(),
-  rejectedBy: z3.string().nullable(),
-  rejectionReason: z3.string().nullable()
+  closing: z4.object({ startedAt: timestamp, deadline: timestamp }).optional(),
+  rejectedAt: z4.number().int().safe().nonnegative().nullable(),
+  rejectedBy: z4.string().nullable(),
+  rejectionReason: z4.string().nullable()
 };
 var leaderboardSettlementReviewSummarySchema = leaderboardSettlementSummarySchema.extend(decision);
 var leaderboardSettlementReviewSchema = leaderboardSettlementSchema.extend(decision);
-var leaderboardSettlementReviewQuerySchema = z3.strictObject({
+var leaderboardSettlementReviewQuerySchema = z4.strictObject({
   cursor: pageCursorSchema.optional(),
-  limit: z3.coerce.number().int().min(1).max(100).default(25)
+  limit: z4.coerce.number().int().min(1).max(100).default(25)
 });
-var leaderboardSettlementReviewPageSchema = z3.object({
-  items: z3.array(leaderboardSettlementReviewSummarySchema),
+var leaderboardSettlementReviewPageSchema = z4.object({
+  items: z4.array(leaderboardSettlementReviewSummarySchema),
   nextCursor: pageCursorSchema.nullable()
 });
-var leaderboardSettlementRejectionSchema = z3.strictObject({
-  actionId: z3.string().uuid().default(() => crypto.randomUUID()),
-  expectedCreatedAt: z3.number().int().safe().nonnegative(),
-  reason: z3.string().trim().min(1).max(500)
+var leaderboardSettlementRejectionSchema = z4.strictObject({
+  actionId: z4.string().uuid().default(() => crypto.randomUUID()),
+  expectedCreatedAt: z4.number().int().safe().nonnegative(),
+  reason: z4.string().trim().min(1).max(500)
 });
-var leaderboardSettlementMeasurementRetrySchema = z3.strictObject({
-  actionId: z3.string().uuid().default(() => crypto.randomUUID())
+var leaderboardSettlementMeasurementRetrySchema = z4.strictObject({
+  actionId: z4.string().uuid().default(() => crypto.randomUUID())
 });
-var leaderboardSettlementExportSchema = z3.object({
+var leaderboardSettlementExportSchema = z4.object({
   settlement: identifier,
   leaderboard: identifier,
-  title: z3.string(),
-  period: z3.object({ start: timestamp, end: timestamp }),
-  status: z3.enum(["pending", "approved", "rejected"]),
+  title: z4.string(),
+  period: z4.object({ start: timestamp, end: timestamp }),
+  status: z4.enum(["pending", "approved", "rejected"]),
   pool: leaderboardSettlementPoolSchema.nullable(),
-  rows: z3.array(
-    z3.object({
+  rows: z4.array(
+    z4.object({
       member: identifier,
-      score: z3.number().int().safe(),
-      rank: z3.number().int().safe().positive(),
+      score: z4.number().int().safe(),
+      rank: z4.number().int().safe().positive(),
       /** The pool share in base units; null without a pool. */
       share: baseUnitsSchema.nullable(),
       /** The pool share in whole units: `"600.5"` for 600500000 USDC base units. */
-      amount: z3.string().nullable(),
+      amount: z4.string().nullable(),
       /** Linked wallets the member proved, on every chain, newest first per chain. */
-      wallets: z3.array(
-        z3.object({
+      wallets: z4.array(
+        z4.object({
           chain: walletChainSchema,
           /** The CAIP-2 network, for Cosmos wallets only. */
-          network: z3.string().nullable(),
-          address: z3.string()
+          network: z4.string().nullable(),
+          address: z4.string()
         })
       )
     })
   )
 });
+var csvField = (value) => {
+  const text = value == null ? "" : String(value);
+  return /[",\r\n]/.test(text) ? `"${text.replaceAll('"', '""')}"` : text;
+};
+function settlementPayoutCsv(exported) {
+  const unit = exported.pool === null ? "" : exported.pool.unit === "points" ? "points" : exported.pool.unit.code;
+  return [
+    ["member", "score", "rank", "share", "amount", "unit", "wallets"],
+    ...exported.rows.map((row) => [
+      row.member,
+      row.score,
+      row.rank,
+      row.share,
+      row.amount,
+      row.share === null ? "" : unit,
+      row.wallets.map((wallet) => `${wallet.network ?? wallet.chain}:${wallet.address}`).join(" ")
+    ])
+  ].map((fields) => fields.map(csvField).join(",")).join("\n");
+}
 
 // src/server/inventory-items.ts
-import * as z4 from "zod";
-var inventoryItemStateSchema = z4.object({
+import * as z5 from "zod";
+var inventoryItemStateSchema = z5.object({
   item: identifier,
-  name: z4.string().nullable(),
-  available: z4.number().int().safe().nonnegative(),
-  reserved: z4.number().int().safe().nonnegative(),
-  allocated: z4.number().int().safe().nonnegative(),
-  offers: z4.array(identifier),
-  revision: z4.number().int().nonnegative(),
-  archivedAt: z4.number().int().safe().nonnegative().nullable()
+  name: z5.string().nullable(),
+  available: z5.number().int().safe().nonnegative(),
+  reserved: z5.number().int().safe().nonnegative(),
+  allocated: z5.number().int().safe().nonnegative(),
+  offers: z5.array(identifier),
+  revision: z5.number().int().nonnegative(),
+  archivedAt: z5.number().int().safe().nonnegative().nullable()
 });
 var correction = {
-  actionId: z4.string().uuid().default(() => crypto.randomUUID()),
-  expectedRevision: z4.number().int().nonnegative(),
-  reason: z4.string().trim().min(1).max(500)
+  actionId: z5.string().uuid().default(() => crypto.randomUUID()),
+  expectedRevision: z5.number().int().nonnegative(),
+  reason: z5.string().trim().min(1).max(500)
 };
-var inventoryItemActionSchema = z4.strictObject(correction);
-var inventoryItemRenameSchema = z4.strictObject({
+var inventoryItemActionSchema = z5.strictObject(correction);
+var inventoryItemRenameSchema = z5.strictObject({
   ...correction,
-  name: z4.string().trim().min(1).max(200)
+  name: z5.string().trim().min(1).max(200)
 });
-var inventoryStockCorrectionSchema = z4.strictObject({
+var inventoryStockCorrectionSchema = z5.strictObject({
   ...correction,
-  delta: z4.number().int().safe()
+  delta: z5.number().int().safe()
 });
-var inventoryItemPageSchema = z4.object({
-  items: z4.array(inventoryItemStateSchema),
+var inventoryItemPageSchema = z5.object({
+  items: z5.array(inventoryItemStateSchema),
   nextCursor: pageCursorSchema.nullable()
 });
 
 // src/server/quest-enrollments.ts
-import * as z5 from "zod";
+import * as z6 from "zod";
 var questEnrollmentStateSchema = questEnrollmentSchema.extend({
-  revision: z5.number().int().nonnegative(),
-  withdrawnAt: z5.number().int().safe().nonnegative().nullable(),
-  withdrawalReason: z5.string().nullable()
+  revision: z6.number().int().nonnegative(),
+  withdrawnAt: z6.number().int().safe().nonnegative().nullable(),
+  withdrawalReason: z6.string().nullable()
 });
 var managedQuestEnrollmentSchema = questEnrollmentStateSchema.extend({
-  title: z5.string(),
-  key: z5.string().nullable()
+  title: z6.string(),
+  key: z6.string().nullable()
 });
-var questEnrollmentWithdrawalInputSchema = z5.object({
-  actionId: z5.string().uuid().default(() => crypto.randomUUID()),
-  expectedRevision: z5.number().int().nonnegative(),
-  reason: z5.string().trim().min(1).max(500)
+var questEnrollmentWithdrawalInputSchema = z6.object({
+  actionId: z6.string().uuid().default(() => crypto.randomUUID()),
+  expectedRevision: z6.number().int().nonnegative(),
+  reason: z6.string().trim().min(1).max(500)
 }).strict();
-var managedQuestEnrollmentPageSchema = z5.object({
-  items: z5.array(managedQuestEnrollmentSchema),
+var managedQuestEnrollmentPageSchema = z6.object({
+  items: z6.array(managedQuestEnrollmentSchema),
   nextCursor: pageCursorSchema.nullable()
 });
 
 // src/server/test-members.ts
-import * as z6 from "zod";
-var testMemberWalletSchema = z6.object({
+import * as z7 from "zod";
+var testMemberWalletSchema = z7.object({
   chain: walletChainSchema,
   /** CAIP-2 network, Cosmos only. */
   network: cosmosNetworkSchema.nullable(),
-  address: z6.string()
+  address: z7.string()
 });
-var testMemberAccountSchema = z6.object({
-  provider: z6.enum(["x", "discord"]),
+var testMemberAccountSchema = z7.object({
+  provider: z7.enum(["x", "discord"]),
   /** The X user ID or Discord user ID. */
-  id: z6.string(),
+  id: z7.string(),
   /** The X handle, when the account was linked by username; otherwise null. */
-  username: z6.string().nullable(),
+  username: z7.string().nullable(),
   /**
    * `linked`: an operator linked a real account with `linkAccount`. `synthetic`: the account Relay
    * linked for synthetic records. `connected`: the member connected it through X or Discord while
    * a staging site acted as them.
    */
-  source: z6.enum(["linked", "synthetic", "connected"])
+  source: z7.enum(["linked", "synthetic", "connected"])
 });
-var testMemberSchema = z6.object({
+var testMemberSchema = z7.object({
   id: identifier,
-  name: z6.string(),
-  test: z6.literal(true),
+  name: z7.string(),
+  test: z7.literal(true),
   /** Current project-calendar date (YYYY-MM-DD), computed by the server. */
-  today: z6.iso.date().optional(),
+  today: z7.iso.date().optional(),
   /** Number of calendar days advanced; absent means zero for older servers. */
-  offsetDays: z6.number().int().min(0).optional(),
+  offsetDays: z7.number().int().min(0).optional(),
   /** Linked wallet addresses, by chain then newest first; absent from older servers. */
-  wallets: z6.array(testMemberWalletSchema).optional(),
+  wallets: z7.array(testMemberWalletSchema).optional(),
   /** Its X and Discord accounts, X first; absent from older servers. */
-  accounts: z6.array(testMemberAccountSchema).optional()
+  accounts: z7.array(testMemberAccountSchema).optional()
 });
-var testMemberCreateSchema = z6.object({
+var testMemberCreateSchema = z7.object({
   actionId: identifier,
-  name: z6.string().trim().min(1).max(40)
+  name: z7.string().trim().min(1).max(40)
 }).strict();
 var testMemberActionSchema = submitSchema.omit({ member: true, faultAfterReview: true }).extend({
-  operation: z6.literal("attempts.submit")
+  operation: z7.literal("attempts.submit")
 }).strict();
-var testMemberPassSchema = z6.object({
+var testMemberPassSchema = z7.object({
   actionId: identifier,
   /** A manual quest, by key or ID. Automatic quests start from their tracker or schedule. */
   quest: identifier,
@@ -547,77 +601,77 @@ var testMemberPassSchema = z6.object({
    */
   completionKey: completionKeySchema.optional()
 }).strict();
-var testMemberAcceptAnywaySchema = z6.object({
+var testMemberAcceptAnywaySchema = z7.object({
   actionId: identifier,
   attempt: identifier
 }).strict();
-var testMemberReferralAcceptSchema = z6.union([
-  z6.object({ actionId: identifier, code: identifier }).strict(),
-  z6.object({ actionId: identifier, inviter: identifier }).strict()
+var testMemberReferralAcceptSchema = z7.union([
+  z7.object({ actionId: identifier, code: identifier }).strict(),
+  z7.object({ actionId: identifier, inviter: identifier }).strict()
 ]);
-var testMemberResetSchema = z6.object({ actionId: identifier }).strict();
-var testMemberAdvanceSchema = z6.object({
+var testMemberResetSchema = z7.object({ actionId: identifier }).strict();
+var testMemberAdvanceSchema = z7.object({
   actionId: identifier,
-  days: z6.number().int().min(1).max(30)
+  days: z7.number().int().min(1).max(30)
 }).strict();
-var testMemberResetResultSchema = z6.object({
+var testMemberResetResultSchema = z7.object({
   member: identifier,
-  deleted: z6.literal(true)
+  deleted: z7.literal(true)
 });
-var testMemberWalletLinkSchema = z6.discriminatedUnion("chain", [
-  z6.object({
+var testMemberWalletLinkSchema = z7.discriminatedUnion("chain", [
+  z7.object({
     actionId: identifier,
-    chain: z6.literal("solana"),
+    chain: z7.literal("solana"),
     address: solanaAddressSchema
   }).strict(),
-  z6.object({
+  z7.object({
     actionId: identifier,
-    chain: z6.literal("eip155"),
+    chain: z7.literal("eip155"),
     address: evmAddressSchema
   }).strict(),
-  z6.object({
+  z7.object({
     actionId: identifier,
-    chain: z6.literal("cosmos"),
+    chain: z7.literal("cosmos"),
     network: cosmosNetworkSchema,
     address: cosmosAddressSchema
   }).strict()
 ]);
-var testMemberWalletUnlinkSchema = z6.object({
+var testMemberWalletUnlinkSchema = z7.object({
   actionId: identifier,
   chain: walletChainSchema,
-  address: z6.string().min(1).max(100)
+  address: z7.string().min(1).max(100)
 }).strict();
-var snowflake = z6.string().regex(/^[0-9]{1,20}$/);
-var accountId = z6.string().regex(/^[0-9]{1,20}$/, "Use the numeric user ID");
-var testMemberAccountLinkSchema = z6.union([
-  z6.object({
+var snowflake = z7.string().regex(/^[0-9]{1,20}$/);
+var accountId = z7.string().regex(/^[0-9]{1,20}$/, "Use the numeric user ID");
+var testMemberAccountLinkSchema = z7.union([
+  z7.object({
     actionId: identifier,
-    provider: z6.enum(["x", "discord"]),
+    provider: z7.enum(["x", "discord"]),
     id: accountId
   }).strict(),
-  z6.object({
+  z7.object({
     actionId: identifier,
-    provider: z6.literal("x"),
+    provider: z7.literal("x"),
     username: xUsernameSchema
   }).strict()
 ]);
-var testMemberAccountUnlinkSchema = z6.object({
+var testMemberAccountUnlinkSchema = z7.object({
   actionId: identifier,
-  provider: z6.enum(["x", "discord"]),
+  provider: z7.enum(["x", "discord"]),
   id: accountId
 }).strict();
-var metric = z6.number().int().nonnegative().safe();
-var testMemberXPostSchema = z6.strictObject({
-  content: z6.string().max(4e3).default(""),
-  author: z6.strictObject({
+var metric = z7.number().int().nonnegative().safe();
+var testMemberXPostSchema = z7.strictObject({
+  content: z7.string().max(4e3).default(""),
+  author: z7.strictObject({
     /** Defaults to `test_` and the end of the synthetic account ID. */
-    username: z6.string().min(1).max(50).optional(),
+    username: z7.string().min(1).max(50).optional(),
     /** Defaults to the test member's name. */
-    name: z6.string().min(1).max(100).optional()
+    name: z7.string().min(1).max(100).optional()
   }).default({}),
-  isReply: z6.boolean().default(false),
-  isRetweet: z6.boolean().default(false),
-  isQuoteTweet: z6.boolean().default(false),
+  isReply: z7.boolean().default(false),
+  isRetweet: z7.boolean().default(false),
+  isQuoteTweet: z7.boolean().default(false),
   likeCount: metric.default(0),
   replyCount: metric.default(0),
   retweetCount: metric.default(0),
@@ -625,23 +679,23 @@ var testMemberXPostSchema = z6.strictObject({
   viewCount: metric.default(0),
   bookmarkCount: metric.default(0)
 });
-var testMemberDiscordMessageSchema = z6.strictObject({
+var testMemberDiscordMessageSchema = z7.strictObject({
   channelId: snowflake.optional(),
   replyTo: snowflake.nullable().default(null),
-  text: z6.string().max(4e3).optional()
+  text: z7.string().max(4e3).optional()
 });
-var testMemberDiscordReactionSchema = z6.strictObject({
+var testMemberDiscordReactionSchema = z7.strictObject({
   channelId: snowflake.optional(),
   messageId: snowflake.optional(),
-  emoji: z6.strictObject({
+  emoji: z7.strictObject({
     /** A custom emoji's ID, or null for a Unicode emoji. */
     id: snowflake.nullable().default(null),
-    name: z6.string().min(1).max(100)
+    name: z7.string().min(1).max(100)
   }).default({ id: null, name: "\u{1F44D}" }),
-  reactorRoles: z6.array(snowflake).max(50).default([]),
-  messagePublishedAt: z6.number().int().nonnegative().safe().optional()
+  reactorRoles: z7.array(snowflake).max(50).default([]),
+  messagePublishedAt: z7.number().int().nonnegative().safe().optional()
 });
-var testMemberRecordSchema = z6.object({
+var testMemberRecordSchema = z7.object({
   actionId: identifier,
   /** A managed X or Discord tracker, by key or ID. */
   tracker: identifier,
@@ -649,16 +703,16 @@ var testMemberRecordSchema = z6.object({
    * The record account the test member holds. `messageAuthor` (Discord reactions only) makes the
    * member the reacted-to message's author, and the reactor a synthetic account no member holds.
    */
-  as: z6.enum(["author", "messageAuthor"]).default("author"),
-  data: z6.record(z6.string(), z6.json()).default({})
+  as: z7.enum(["author", "messageAuthor"]).default("author"),
+  data: z7.record(z7.string(), z7.json()).default({})
 }).strict();
 var testMemberRecordResultSchema = trackerIngestResultSchema.extend({
   /** The tracker's stable ID. */
   tracker: identifier,
   /** The stored record's ID. */
-  record: z6.string(),
+  record: z7.string(),
   /** The account the record names for the test member: its linked one, else its synthetic one. */
-  account: z6.object({ kind: z6.enum(["x", "discord"]), id: z6.string() })
+  account: z7.object({ kind: z7.enum(["x", "discord"]), id: z7.string() })
 });
 var TestMemberDecisionKind = {
   /** `testMembers.pass`: the quest's check never ran. */
@@ -666,113 +720,113 @@ var TestMemberDecisionKind = {
   /** `testMembers.acceptAnyway`: the attempt was rejected, then accepted. */
   AcceptAnyway: "accept-anyway"
 };
-var testMemberDecisionKindSchema = z6.string();
-var testMemberOperatorDecisionSchema = z6.object({
+var testMemberDecisionKindSchema = z7.string();
+var testMemberOperatorDecisionSchema = z7.object({
   kind: testMemberDecisionKindSchema,
   /** The operator who decided, as audit history names them. */
-  actor: z6.string().nullable(),
-  at: z6.number().int().nonnegative().safe()
+  actor: z7.string().nullable(),
+  at: z7.number().int().nonnegative().safe()
 });
-var testMemberHistoryQuerySchema = z6.object({
+var testMemberHistoryQuerySchema = z7.object({
   /** Inclusive lower bound on credited activity time, in epoch milliseconds. */
-  since: z6.coerce.number().int().nonnegative().safe().optional()
+  since: z7.coerce.number().int().nonnegative().safe().optional()
 });
-var testMemberHistorySchema = z6.object({
+var testMemberHistorySchema = z7.object({
   /** Newest credited activity first, up to 500 attempts. */
-  attempts: z6.array(
+  attempts: z7.array(
     attemptSchema.extend({
-      eligibleAt: z6.number().int().nonnegative().safe(),
+      eligibleAt: z7.number().int().nonnegative().safe(),
       /** Set when an operator decided the attempt in place of its evaluator; absent otherwise. */
       operatorDecision: testMemberOperatorDecisionSchema.optional(),
       /**
        * Rewards of this attempt's completion that Relay never sent, each with why: a role reward
        * for a test-linked Discord account. Absent when every reward was sent.
        */
-      rewardsNotSent: z6.array(z6.object({ reason: z6.string() })).optional()
+      rewardsNotSent: z7.array(z7.object({ reason: z7.string() })).optional()
     })
   ),
   /** Tracker trigger outcomes that admitted no attempt, newest occurrence first, up to 500. */
-  skipped: z6.array(
-    z6.object({
+  skipped: z7.array(
+    z7.object({
       quest: identifier,
       tracker: identifier,
-      record: z6.string(),
-      code: z6.string().min(1),
-      occurredAt: z6.number().int().nonnegative().safe()
+      record: z7.string(),
+      code: z7.string().min(1),
+      occurredAt: z7.number().int().nonnegative().safe()
     })
   ),
   /** False when older entries were omitted from either list. */
-  complete: z6.boolean()
+  complete: z7.boolean()
 });
 
 // src/server/member-imports.ts
-import * as z7 from "zod";
-var importTimeSchema = z7.union([
-  z7.number().int().nonnegative().safe(),
-  z7.iso.datetime({ offset: true }).transform((value) => Date.parse(value))
+import * as z8 from "zod";
+var importTimeSchema = z8.union([
+  z8.number().int().nonnegative().safe(),
+  offsetDateTimeSchema().transform((value) => Date.parse(value))
 ]);
-var importWalletSchema = z7.discriminatedUnion("chain", [
-  z7.object({
-    kind: z7.literal("wallet"),
-    chain: z7.literal("solana"),
+var importWalletSchema = z8.discriminatedUnion("chain", [
+  z8.object({
+    kind: z8.literal("wallet"),
+    chain: z8.literal("solana"),
     address: solanaAddressSchema
   }).strict(),
-  z7.object({
-    kind: z7.literal("wallet"),
-    chain: z7.literal("eip155"),
+  z8.object({
+    kind: z8.literal("wallet"),
+    chain: z8.literal("eip155"),
     address: evmAddressSchema
   }).strict(),
-  z7.object({
-    kind: z7.literal("wallet"),
-    chain: z7.literal("cosmos"),
+  z8.object({
+    kind: z8.literal("wallet"),
+    chain: z8.literal("cosmos"),
     network: cosmosNetworkSchema,
     address: cosmosAddressSchema
   }).strict()
 ]);
-var importXSchema = z7.object({
-  kind: z7.literal("x"),
-  subject: z7.string().regex(/^[1-9][0-9]{0,19}$/, "Use the numeric X user ID")
+var importXSchema = z8.object({
+  kind: z8.literal("x"),
+  subject: z8.string().regex(/^[1-9][0-9]{0,19}$/, "Use the numeric X user ID")
 }).strict();
-var importAppIdentitySchema = z7.object({ kind: appIdentityKindSchema, subject: z7.string().min(1).max(256) }).strict();
-var memberImportIdentitySchema = z7.union([
+var importAppIdentitySchema = z8.object({ kind: appIdentityKindSchema, subject: z8.string().min(1).max(256) }).strict();
+var memberImportIdentitySchema = z8.union([
   importAppIdentitySchema,
   importWalletSchema,
   importXSchema
 ]);
-var memberImportAccountSchema = z7.union([
+var memberImportAccountSchema = z8.union([
   importWalletSchema,
   importXSchema
 ]);
-var memberImportActionSchema = z7.object({
+var memberImportActionSchema = z8.object({
   at: importTimeSchema,
-  key: z7.string().min(1).max(200).optional()
+  key: z8.string().min(1).max(200).optional()
 }).strict();
-var memberImportRowSchema = z7.object({
+var memberImportRowSchema = z8.object({
   /** The member's ID on the platform they come from. Unique within an import. */
-  ref: z7.string().trim().min(1).max(200),
+  ref: z8.string().trim().min(1).max(200),
   identity: memberImportIdentitySchema,
-  accounts: z7.array(memberImportAccountSchema).max(20).default([]),
+  accounts: z8.array(memberImportAccountSchema).max(20).default([]),
   /** Opening balances, credited once per ledger as an imported entry. */
-  points: z7.array(
-    z7.object({
-      ledger: z7.string().min(1).max(200),
-      balance: z7.number().int().positive().safe()
+  points: z8.array(
+    z8.object({
+      ledger: z8.string().min(1).max(200),
+      balance: z8.number().int().positive().safe()
     }).strict()
   ).max(50).default([]),
   /** Quest progress, by quest authoring key or ID. */
-  quests: z7.array(
-    z7.object({
-      quest: z7.string().min(1).max(200),
-      actions: z7.array(memberImportActionSchema).min(1).max(3660)
+  quests: z8.array(
+    z8.object({
+      quest: z8.string().min(1).max(200),
+      actions: z8.array(memberImportActionSchema).min(1).max(3660)
     }).strict()
   ).max(200).default([])
 }).strict();
-var memberImportCreateSchema = z7.object({
+var memberImportCreateSchema = z8.object({
   actionId: identifier,
   /** Where the members come from, such as "legacy-domino". */
-  source: z7.string().trim().min(1).max(100)
+  source: z8.string().trim().min(1).max(100)
 }).strict();
-var memberImportRowsInputSchema = z7.object({ rows: z7.array(memberImportRowSchema).min(1).max(500) }).strict();
+var memberImportRowsInputSchema = z8.object({ rows: z8.array(memberImportRowSchema).min(1).max(500) }).strict();
 var MemberImportRefusalCode = {
   /** An account or identity belongs to another member in the project. */
   AccountLinkedElsewhere: "account-linked-elsewhere",
@@ -799,57 +853,57 @@ var MemberImportRefusalCode = {
   /** The row names one point ledger or quest twice, by any of its names. */
   DuplicateEntry: "duplicate-entry"
 };
-var refusalCodeSchema = z7.string();
-var memberImportRefusalSchema = z7.object({
+var refusalCodeSchema = z8.string();
+var memberImportRefusalSchema = z8.object({
   code: refusalCodeSchema,
-  message: z7.string()
+  message: z8.string()
 });
-var memberImportRowResultSchema = z7.object({
-  line: z7.number().int().positive(),
-  ref: z7.string(),
-  status: z7.enum(["pending", "ready", "applied", "refused"]),
+var memberImportRowResultSchema = z8.object({
+  line: z8.number().int().positive(),
+  ref: z8.string(),
+  status: z8.enum(["pending", "ready", "applied", "refused"]),
   /** The member the row resolves to: an existing member, or the one applying created. */
   member: identifier.nullable(),
   /** Whether the row's identity names a member who already exists. Null until checked. */
-  existing: z7.boolean().nullable(),
-  refusals: z7.array(memberImportRefusalSchema)
+  existing: z8.boolean().nullable(),
+  refusals: z8.array(memberImportRefusalSchema)
 });
-var memberImportRowPageSchema = z7.object({
-  items: z7.array(memberImportRowResultSchema),
-  nextCursor: z7.string().nullable()
+var memberImportRowPageSchema = z8.object({
+  items: z8.array(memberImportRowResultSchema),
+  nextCursor: z8.string().nullable()
 });
-var memberImportRowQuerySchema = z7.object({
-  status: z7.enum(["pending", "ready", "applied", "refused"]).optional(),
-  cursor: z7.string().max(200).optional(),
-  limit: z7.coerce.number().int().min(1).max(500).optional()
+var memberImportRowQuerySchema = z8.object({
+  status: z8.enum(["pending", "ready", "applied", "refused"]).optional(),
+  cursor: z8.string().max(200).optional(),
+  limit: z8.coerce.number().int().min(1).max(500).optional()
 }).strict();
-var memberImportSummarySchema = z7.object({
-  rows: z7.number().int().nonnegative(),
-  ready: z7.number().int().nonnegative(),
-  refused: z7.number().int().nonnegative(),
-  members: z7.object({
-    created: z7.number().int().nonnegative(),
-    existing: z7.number().int().nonnegative()
+var memberImportSummarySchema = z8.object({
+  rows: z8.number().int().nonnegative(),
+  ready: z8.number().int().nonnegative(),
+  refused: z8.number().int().nonnegative(),
+  members: z8.object({
+    created: z8.number().int().nonnegative(),
+    existing: z8.number().int().nonnegative()
   }),
   /** Identities and accounts the ready rows attach, sign-in identities included. */
-  accounts: z7.number().int().nonnegative(),
+  accounts: z8.number().int().nonnegative(),
   /** Opening balance totals, by ledger as the rows name it. */
-  points: z7.array(
-    z7.object({ ledger: z7.string(), total: z7.number().int().nonnegative() })
+  points: z8.array(
+    z8.object({ ledger: z8.string(), total: z8.number().int().nonnegative() })
   ),
   /** Imported actions, by quest as the rows name it. */
-  actions: z7.array(
-    z7.object({ quest: z7.string(), total: z7.number().int().nonnegative() })
+  actions: z8.array(
+    z8.object({ quest: z8.string(), total: z8.number().int().nonnegative() })
   ),
   /** Refused rows, by refusal code. A row can have several. */
-  refusals: z7.array(
-    z7.object({ code: refusalCodeSchema, rows: z7.number().int().nonnegative() })
+  refusals: z8.array(
+    z8.object({ code: refusalCodeSchema, rows: z8.number().int().nonnegative() })
   )
 });
-var memberImportSchema = z7.object({
+var memberImportSchema = z8.object({
   id: identifier,
-  source: z7.string(),
-  status: z7.enum([
+  source: z8.string(),
+  status: z8.enum([
     "open",
     "checking",
     "checked",
@@ -857,115 +911,115 @@ var memberImportSchema = z7.object({
     "applied",
     "canceled"
   ]),
-  rows: z7.number().int().nonnegative(),
+  rows: z8.number().int().nonnegative(),
   /** The latest check's summary, or null before the first check and after rows change. */
   summary: memberImportSummarySchema.nullable(),
   /** While applying and after: rows applied and refused so far. */
-  progress: z7.object({
-    applied: z7.number().int().nonnegative(),
-    refused: z7.number().int().nonnegative()
+  progress: z8.object({
+    applied: z8.number().int().nonnegative(),
+    refused: z8.number().int().nonnegative()
   }),
-  createdAt: z7.number().int(),
-  createdBy: z7.string().nullable(),
-  checkedAt: z7.number().int().nullable(),
-  appliedAt: z7.number().int().nullable(),
-  appliedBy: z7.string().nullable(),
-  canceledAt: z7.number().int().nullable(),
-  canceledBy: z7.string().nullable()
-});
-var memberImportPageSchema = z7.object({
-  items: z7.array(memberImportSchema),
-  nextCursor: z7.string().nullable()
-});
-var memberImportListQuerySchema = z7.object({
-  cursor: z7.string().max(200).optional(),
-  limit: z7.coerce.number().int().min(1).max(100).optional()
+  createdAt: z8.number().int(),
+  createdBy: z8.string().nullable(),
+  checkedAt: z8.number().int().nullable(),
+  appliedAt: z8.number().int().nullable(),
+  appliedBy: z8.string().nullable(),
+  canceledAt: z8.number().int().nullable(),
+  canceledBy: z8.string().nullable()
+});
+var memberImportPageSchema = z8.object({
+  items: z8.array(memberImportSchema),
+  nextCursor: z8.string().nullable()
+});
+var memberImportListQuerySchema = z8.object({
+  cursor: z8.string().max(200).optional(),
+  limit: z8.coerce.number().int().min(1).max(100).optional()
 }).strict();
 
 // src/server/webhooks.ts
-import * as z8 from "zod";
+import * as z9 from "zod";
 var PayoutSourceKind = {
   Quest: "quest",
   Leaderboard: "leaderboard",
   Engagement: "engagement",
   Manual: "manual"
 };
-var webhookEventSchema = z8.object({
-  id: z8.string().uuid(),
-  version: z8.literal(1),
+var webhookEventSchema = z9.object({
+  id: z9.string().uuid(),
+  version: z9.literal(1),
   type: activityTypeSchema,
-  createdAt: z8.number().int().nonnegative(),
-  organization: z8.string(),
-  project: z8.string(),
-  environment: z8.enum(["test", "live"]),
-  data: z8.record(z8.string(), z8.json())
-});
-var webhookControlInputSchema = z8.object({ actionId: z8.string().uuid().optional() }).strict();
-var webhookInputSchema = z8.object({
-  url: z8.url().max(2048).refine((value) => {
+  createdAt: z9.number().int().nonnegative(),
+  organization: z9.string(),
+  project: z9.string(),
+  environment: z9.enum(["test", "live"]),
+  data: z9.record(z9.string(), z9.json())
+});
+var webhookControlInputSchema = z9.object({ actionId: z9.string().uuid().optional() }).strict();
+var webhookInputSchema = z9.object({
+  url: z9.url().max(2048).refine((value) => {
     const url2 = new URL(value);
     return url2.protocol === "https:" && !url2.username && !url2.password && !url2.hash;
   }, "Use an HTTPS URL without credentials or a fragment"),
-  types: z8.array(activityTypeSchema).min(1).max(100).refine((v) => new Set(v).size === v.length)
+  types: z9.array(activityTypeSchema).min(1).max(100).refine((v) => new Set(v).size === v.length)
 }).strict();
-var webhookCreateInputSchema = webhookInputSchema.extend({ actionId: z8.string().uuid().optional() }).strict();
-var webhookRotateInputSchema = z8.object({ actionId: z8.string().uuid().optional() }).strict();
-var webhookUpdateSchema = webhookInputSchema.partial().extend({ enabled: z8.boolean().optional() }).strict();
-var webhookEndpointSchema = z8.object({
+var webhookCreateInputSchema = webhookInputSchema.extend({ actionId: z9.string().uuid().optional() }).strict();
+var webhookRotateInputSchema = z9.object({ actionId: z9.string().uuid().optional() }).strict();
+var webhookUpdateSchema = webhookInputSchema.partial().extend({ enabled: z9.boolean().optional() }).strict();
+var webhookEndpointSchema = z9.object({
   ...webhookInputSchema.shape,
-  id: z8.string().uuid(),
-  enabled: z8.boolean(),
-  disabledReason: z8.string().nullable(),
-  consecutiveFailures: z8.number().int().nonnegative(),
-  createdAt: z8.number(),
-  updatedAt: z8.number()
+  id: z9.string().uuid(),
+  enabled: z9.boolean(),
+  disabledReason: z9.string().nullable(),
+  consecutiveFailures: z9.number().int().nonnegative(),
+  createdAt: z9.number(),
+  updatedAt: z9.number()
 });
 var webhookEndpointStateSchema = webhookEndpointSchema.extend({
-  revision: z8.number().int().nonnegative(),
-  deletedAt: z8.number().int().safe().nonnegative().nullable()
+  revision: z9.number().int().nonnegative(),
+  deletedAt: z9.number().int().safe().nonnegative().nullable()
 });
-var webhookDeleteInputSchema = z8.strictObject({
-  actionId: z8.string().uuid().default(() => crypto.randomUUID()),
-  expectedRevision: z8.number().int().nonnegative(),
-  reason: z8.string().trim().min(1).max(500)
+var webhookDeleteInputSchema = z9.strictObject({
+  actionId: z9.string().uuid().default(() => crypto.randomUUID()),
+  expectedRevision: z9.number().int().nonnegative(),
+  reason: z9.string().trim().min(1).max(500)
 });
-var webhookStateQuerySchema = z8.strictObject({
+var webhookStateQuerySchema = z9.strictObject({
   cursor: pageCursorSchema.optional(),
-  limit: z8.coerce.number().int().min(1).max(100).default(50)
+  limit: z9.coerce.number().int().min(1).max(100).default(50)
 });
-var webhookStatePageSchema = z8.object({
-  items: z8.array(webhookEndpointStateSchema),
+var webhookStatePageSchema = z9.object({
+  items: z9.array(webhookEndpointStateSchema),
   nextCursor: pageCursorSchema.nullable()
 });
-var webhookSecretSchema = z8.object({
+var webhookSecretSchema = z9.object({
   endpoint: webhookEndpointSchema,
-  secret: z8.string(),
-  previousValidUntil: z8.number().nullable()
+  secret: z9.string(),
+  previousValidUntil: z9.number().nullable()
 });
-var webhookDeliverySchema = z8.object({
-  id: z8.string().uuid(),
-  endpoint: z8.string().uuid(),
+var webhookDeliverySchema = z9.object({
+  id: z9.string().uuid(),
+  endpoint: z9.string().uuid(),
   event: webhookEventSchema,
-  status: z8.enum(["pending", "delivered", "failed", "skipped"]),
-  attempts: z8.number().int().nonnegative(),
-  responseStatus: z8.number().nullable(),
-  lastError: z8.string().nullable(),
-  createdAt: z8.number(),
-  deliveredAt: z8.number().nullable(),
-  replayOf: z8.string().uuid().nullable()
-});
-var webhookQuerySchema = z8.object({
+  status: z9.enum(["pending", "delivered", "failed", "skipped"]),
+  attempts: z9.number().int().nonnegative(),
+  responseStatus: z9.number().nullable(),
+  lastError: z9.string().nullable(),
+  createdAt: z9.number(),
+  deliveredAt: z9.number().nullable(),
+  replayOf: z9.string().uuid().nullable()
+});
+var webhookQuerySchema = z9.object({
   /** A page's `nextCursor`: the deliveries after it, newest first. */
   cursor: pageCursorSchema.optional(),
   /** @deprecated Use `cursor`. Removed in 2.0.0. */
-  before: z8.string().uuid().optional(),
-  limit: z8.coerce.number().int().min(1).max(100).default(50)
+  before: z9.string().uuid().optional(),
+  limit: z9.coerce.number().int().min(1).max(100).default(50)
 }).strict();
-var webhookDeliveryPageSchema = z8.object({
-  items: z8.array(webhookDeliverySchema),
+var webhookDeliveryPageSchema = z9.object({
+  items: z9.array(webhookDeliverySchema),
   nextCursor: pageCursorSchema.nullable().default(null),
   /** @deprecated Use `nextCursor`, passed back as `cursor`. Removed in 2.0.0. */
-  next: z8.string().uuid().nullable()
+  next: z9.string().uuid().nullable()
 });
 var WEBHOOK_MAX_BYTES = 64 * 1024;
 async function verifyWebhook(input) {
@@ -1009,8 +1063,8 @@ async function verifyWebhook(input) {
 }
 
 // src/server/resource-lifecycle.ts
-import * as z9 from "zod";
-var resourceLifecycleKindSchema = z9.enum([
+import * as z10 from "zod";
+var resourceLifecycleKindSchema = z10.enum([
   "tracker",
   "referral",
   "leaderboard",
@@ -1020,24 +1074,24 @@ var resourceLifecycleKindSchema = z9.enum([
   "image",
   "point-ledger"
 ]);
-var managedResourceSchema = z9.object({
+var managedResourceSchema = z10.object({
   kind: resourceLifecycleKindSchema,
   id: identifier,
   key: identifier.nullable(),
-  title: z9.string(),
-  archivedAt: z9.number().int().nonnegative().nullable()
+  title: z10.string(),
+  archivedAt: z10.number().int().nonnegative().nullable()
 });
-var resourceLifecycleInputSchema = z9.object({
-  actionId: z9.string().uuid(),
+var resourceLifecycleInputSchema = z10.object({
+  actionId: z10.string().uuid(),
   kind: resourceLifecycleKindSchema,
   resource: identifier,
-  archived: z9.boolean(),
-  reason: z9.string().trim().min(1).max(500),
-  expectedArchivedAt: z9.number().int().nonnegative().nullable().optional()
+  archived: z10.boolean(),
+  reason: lifecycleReasonSchema,
+  expectedArchivedAt: z10.number().int().nonnegative().nullable().optional()
 }).strict();
-var resourceLifecycleResultSchema = z9.object({
+var resourceLifecycleResultSchema = z10.object({
   resource: managedResourceSchema,
-  changed: z9.boolean()
+  changed: z10.boolean()
 });
 var resourceLifecyclePaths = {
   tracker: "/trackers",
@@ -1056,8 +1110,8 @@ var resourceArchiveInputSchema = resourceLifecycleInputSchema.omit({
 });
 
 // src/server/promotions.ts
-import * as z10 from "zod";
-var promotionResourceKindSchema = z10.enum([
+import * as z11 from "zod";
+var promotionResourceKindSchema = z11.enum([
   "quest",
   "quest-type",
   "collection",
@@ -1076,176 +1130,242 @@ var promotionResourceKindSchema = z10.enum([
   "profile-settings",
   "app-build"
 ]);
-var promotionChangeSchema = z10.object({
-  kind: z10.union([promotionResourceKindSchema, z10.string()]),
-  key: z10.string(),
-  title: z10.string(),
+var promotionChangeSchema = z11.object({
+  kind: z11.union([promotionResourceKindSchema, z11.string()]),
+  key: z11.string(),
+  title: z11.string(),
   /** `added`: new in live. `changed`: live's differs. `archived` and `unarchived` change only its lifecycle. */
-  change: z10.union([
-    z10.enum(["added", "changed", "archived", "unarchived"]),
-    z10.string()
+  change: z11.union([
+    z11.enum(["added", "changed", "archived", "unarchived"]),
+    z11.string()
   ])
 });
-var promotionWarningSchema = z10.object({
-  code: z10.string(),
-  message: z10.string(),
-  kind: z10.string().optional(),
-  key: z10.string().optional()
+var promotionWarningSchema = z11.object({
+  code: z11.string(),
+  message: z11.string(),
+  kind: z11.string().optional(),
+  key: z11.string().optional()
 });
-var promotionBuildSchema = z10.object({
+var promotionBuildSchema = z11.object({
   repository: identifier,
   build: identifier
 });
-var promotionSourceSchema = z10.discriminatedUnion("kind", [
-  z10.object({ kind: z10.literal("test") }),
-  z10.object({ kind: z10.literal("rollback"), promotion: identifier }),
-  z10.object({ kind: z10.literal("deployment"), deployment: identifier })
+var promotionSourceSchema = z11.discriminatedUnion("kind", [
+  z11.object({ kind: z11.literal("test") }),
+  z11.object({ kind: z11.literal("rollback"), promotion: identifier }),
+  z11.object({ kind: z11.literal("deployment"), deployment: identifier })
 ]);
 var promotionMetadata = {
   id: identifier,
   source: promotionSourceSchema,
-  changes: z10.array(promotionChangeSchema),
-  warnings: z10.array(promotionWarningSchema),
+  changes: z11.array(promotionChangeSchema),
+  warnings: z11.array(promotionWarningSchema),
   build: promotionBuildSchema.nullable(),
-  createdAt: z10.number().int().nonnegative(),
-  createdBy: z10.string().nullable()
+  createdAt: z11.number().int().nonnegative(),
+  createdBy: z11.string().nullable()
 };
 var decided = {
-  decidedAt: z10.number().int().nonnegative(),
-  decidedBy: z10.string().nullable()
+  decidedAt: z11.number().int().nonnegative(),
+  decidedBy: z11.string().nullable()
 };
-var promotionRecordSchema = z10.discriminatedUnion("status", [
-  z10.object({ ...promotionMetadata, status: z10.literal("pending") }),
-  z10.object({ ...promotionMetadata, ...decided, status: z10.literal("applied") }),
-  z10.object({
+var promotionRecordSchema = z11.discriminatedUnion("status", [
+  z11.object({ ...promotionMetadata, status: z11.literal("pending") }),
+  z11.object({ ...promotionMetadata, ...decided, status: z11.literal("applied") }),
+  z11.object({
     ...promotionMetadata,
     ...decided,
-    status: z10.literal("rejected"),
-    reason: z10.string()
+    status: z11.literal("rejected"),
+    reason: z11.string()
   }),
-  z10.object({
+  z11.object({
     ...promotionMetadata,
     ...decided,
-    status: z10.literal("superseded")
+    status: z11.literal("superseded")
   })
 ]);
-var promotionActionSchema = z10.object({ actionId: z10.string().uuid() }).strict();
-var promotionRejectionSchema = z10.object({ reason: z10.string().trim().min(1).max(1e3) }).strict();
-var promotionHistoryQuerySchema = z10.strictObject({
+var promotionActionSchema = z11.object({ actionId: z11.string().uuid() }).strict();
+var promotionRejectionSchema = z11.object({ reason: z11.string().trim().min(1).max(1e3) }).strict();
+var promotionHistoryQuerySchema = z11.strictObject({
   cursor: pageCursorSchema.optional(),
-  limit: z10.coerce.number().int().min(1).max(100).optional()
+  limit: z11.coerce.number().int().min(1).max(100).optional()
 });
-var promotionHistoryPageSchema = z10.object({
-  items: z10.array(promotionRecordSchema),
+var promotionHistoryPageSchema = z11.object({
+  items: z11.array(promotionRecordSchema),
   nextCursor: pageCursorSchema.nullable()
 });
 
 // src/server/dashboards.ts
-import * as z11 from "zod";
-var dashboardListQuerySchema = z11.strictObject({
-  includeArchived: z11.union([z11.boolean(), z11.enum(["true", "false"])]).transform((value) => value === true || value === "true").optional()
+import * as z12 from "zod";
+var dashboardListQuerySchema = z12.strictObject({
+  includeArchived: z12.union([z12.boolean(), z12.enum(["true", "false"])]).transform((value) => value === true || value === "true").optional()
 });
 var summaryFields = {
   key: identifier,
-  title: z11.string(),
-  description: z11.string().nullable(),
+  title: z12.string(),
+  description: z12.string().nullable(),
   /** Lists order by it, dashboards without one last, then by title. */
-  position: z11.number().int().nullable(),
-  archivedAt: z11.number().int().nonnegative().nullable(),
+  position: z12.number().int().nullable(),
+  archivedAt: z12.number().int().nonnegative().nullable(),
   /** When the current version was published. */
-  updatedAt: z11.number().int().nonnegative()
+  updatedAt: z12.number().int().nonnegative()
 };
-var dashboardSummarySchema = z11.object(summaryFields);
-var dashboardListSchema = z11.array(dashboardSummarySchema);
-var dashboardLifecycleInputSchema = z11.strictObject({
-  actionId: z11.string().uuid(),
+var dashboardSummarySchema = z12.object(summaryFields);
+var dashboardListSchema = z12.array(dashboardSummarySchema);
+var dashboardLifecycleInputSchema = z12.strictObject({
+  actionId: z12.string().uuid(),
   dashboard: identifier,
-  archived: z11.boolean(),
-  reason: z11.string().trim().min(1).max(500),
-  expectedArchivedAt: z11.number().int().nonnegative().nullable().optional()
+  archived: z12.boolean(),
+  reason: z12.string().trim().min(1).max(500),
+  expectedArchivedAt: z12.number().int().nonnegative().nullable().optional()
 });
-var dashboardLifecycleResultSchema = z11.object({
+var dashboardLifecycleResultSchema = z12.object({
   dashboard: dashboardSummarySchema,
-  changed: z11.boolean()
+  changed: z12.boolean()
 });
-var dashboardReadQuerySchema = z11.strictObject({
+var dashboardReadQuerySchema = z12.strictObject({
   key: identifier,
-  range: z11.enum(analyticsRanges).optional()
+  range: z12.enum(analyticsRanges).optional()
 });
-var dashboardReadSchema = z11.object({
+var dashboardReadSchema = z12.object({
   ...summaryFields,
   definition: dashboardDefinitionSchema,
-  range: z11.enum(analyticsRanges),
-  panels: z11.array(
-    z11.object({
+  range: z12.enum(analyticsRanges),
+  panels: z12.array(
+    z12.object({
       key: identifier,
       result: analyticsMetricResultSchema.optional(),
-      error: z11.object({ code: z11.string(), message: z11.string() }).optional()
+      error: z12.object({ code: z12.string(), message: z12.string() }).optional()
     })
   )
 });
 
 // src/server/index.ts
-import * as z18 from "zod";
+import * as z19 from "zod";
 
 // src/server/billing.ts
-import { z as z12 } from "zod";
+import { z as z13 } from "zod";
 var billingSubscriptionPlans = ["launch", "growth", "scale"];
 var billingIntervals = ["month", "year"];
-var billingCheckoutInputSchema = z12.strictObject({
-  plan: z12.enum(billingSubscriptionPlans),
-  interval: z12.enum(billingIntervals)
+var billingCheckoutInputSchema = z13.strictObject({
+  plan: z13.enum(billingSubscriptionPlans),
+  interval: z13.enum(billingIntervals)
 });
-var billingPlanChangeInputSchema = z12.strictObject({
-  plan: z12.enum(billingSubscriptionPlans),
-  interval: z12.enum(billingIntervals)
+var billingPlanChangeInputSchema = z13.strictObject({
+  plan: z13.enum(billingSubscriptionPlans),
+  interval: z13.enum(billingIntervals)
 });
-var billingPlanChangeSchema = z12.object({
-  timing: z12.enum(["now", "renewal", "none"]),
-  invoiceUrl: z12.string().url().nullable()
+var billingPlanChangeSchema = z13.object({
+  timing: z13.enum(["now", "renewal", "none"]),
+  invoiceUrl: z13.string().url().nullable()
 });
 var billingTopupMaxQuantity = 10;
-var billingTopupInputSchema = z12.strictObject({
-  quantity: z12.number().int().min(1).max(billingTopupMaxQuantity)
-});
-var billingSessionSchema = z12.object({ url: z12.string().url() });
-var billingSubscriptionSchema = z12.object({
-  plan: z12.enum(billingSubscriptionPlans),
-  interval: z12.enum(billingIntervals),
-  status: z12.string(),
-  currentPeriodEnd: z12.number().int().nullable(),
-  cancelAtPeriodEnd: z12.boolean(),
-  lastInvoice: z12.enum(["paid", "failed"]).nullable(),
-  livemode: z12.boolean(),
-  scheduledChange: z12.object({
-    plan: z12.enum(billingSubscriptionPlans),
-    interval: z12.enum(billingIntervals),
-    at: z12.number().int()
+var billingTopupInputSchema = z13.strictObject({
+  quantity: z13.number().int().min(1).max(billingTopupMaxQuantity)
+});
+var billingSessionSchema = z13.object({ url: z13.string().url() });
+var billingSubscriptionSchema = z13.object({
+  plan: z13.enum(billingSubscriptionPlans),
+  interval: z13.enum(billingIntervals),
+  status: z13.string(),
+  currentPeriodEnd: z13.number().int().nullable(),
+  cancelAtPeriodEnd: z13.boolean(),
+  lastInvoice: z13.enum(["paid", "failed"]).nullable(),
+  livemode: z13.boolean(),
+  scheduledChange: z13.object({
+    plan: z13.enum(billingSubscriptionPlans),
+    interval: z13.enum(billingIntervals),
+    at: z13.number().int()
   }).nullable().default(null),
-  endedFor: z12.enum(["project-deleted", "project-transferred"]).nullable().default(null),
-  unpaid: z12.object({
-    since: z12.number().int(),
-    promotionsRefusedAt: z12.number().int(),
-    offlineAt: z12.number().int()
+  endedFor: z13.enum(["project-deleted", "project-transferred"]).nullable().default(null),
+  unpaid: z13.object({
+    since: z13.number().int(),
+    promotionsRefusedAt: z13.number().int(),
+    offlineAt: z13.number().int()
   }).nullable().default(null)
 });
-var projectBillingSchema = z12.object({
-  available: z12.boolean(),
-  reason: z12.enum(["admin-required", "staff-only", "not-configured"]).nullable(),
+var projectBillingSchema = z13.object({
+  available: z13.boolean(),
+  reason: z13.enum(["admin-required", "staff-only", "not-configured"]).nullable(),
   subscription: billingSubscriptionSchema.nullable()
 });
+var projectPlanSchema = z13.object({
+  plan: z13.string(),
+  source: z13.string().nullable(),
+  live: z13.object({
+    allowed: z13.boolean(),
+    reason: z13.string(),
+    until: z13.number().int().nullable()
+  }),
+  liveState: z13.object({
+    state: z13.string(),
+    reason: z13.string(),
+    since: z13.number().int(),
+    until: z13.number().int().nullable()
+  }).nullable(),
+  trial: z13.object({
+    state: z13.string(),
+    project: z13.string().nullable(),
+    startedAt: z13.number().int().nullable(),
+    endsAt: z13.number().int().nullable()
+  }),
+  customDomain: z13.boolean(),
+  ai: z13.object({
+    source: z13.string(),
+    allowanceUsdPerMonth: z13.number().nullable(),
+    pools: z13.array(
+      z13.object({
+        pool: z13.string(),
+        capacity: z13.number(),
+        used: z13.number(),
+        remaining: z13.number()
+      })
+    ),
+    remaining: z13.number(),
+    renewsAt: z13.number().int()
+  }),
+  subscription: billingSubscriptionSchema.nullable(),
+  enforcement: z13.boolean()
+});
+var organizationBillingSchema = z13.object({
+  billing: projectBillingSchema.pick({ available: true, reason: true }),
+  freeProjects: z13.object({
+    count: z13.number().int(),
+    limit: z13.number().int()
+  }),
+  trial: projectPlanSchema.shape.trial,
+  freeAi: z13.object({
+    usdPerMonth: z13.number(),
+    oneTimeUsd: z13.number(),
+    pools: projectPlanSchema.shape.ai.shape.pools,
+    remaining: z13.number(),
+    renewsAt: z13.number().int()
+  }),
+  aiAllowanceUsdPerMonth: z13.number(),
+  enforcement: z13.boolean(),
+  projects: z13.array(
+    z13.object({
+      id: z13.string(),
+      name: z13.string(),
+      plan: projectPlanSchema.shape.plan,
+      source: projectPlanSchema.shape.source,
+      live: projectPlanSchema.shape.live,
+      liveState: projectPlanSchema.shape.liveState,
+      subscription: billingSubscriptionSchema.nullable()
+    })
+  )
+});
 
 // src/server/hosting.ts
-import * as z15 from "zod";
+import * as z16 from "zod";
 
 // src/server/schedules.ts
-import * as z13 from "zod";
+import * as z14 from "zod";
 import { Cron } from "croner";
 var APP_SCHEDULE_LIMIT = 10;
 var APP_SCHEDULE_MIN_INTERVAL = 3e5;
 var APP_SCHEDULE_TIMEOUT = 3e4;
-var appScheduleNameSchema = z13.string().regex(/^[a-z][a-z0-9-]{0,63}$/);
-var appSchedulePathSchema = z13.string().min(2).max(512).refine((path) => {
+var appScheduleNameSchema = z14.string().regex(/^[a-z][a-z0-9-]{0,63}$/);
+var appSchedulePathSchema = z14.string().min(2).max(512).refine((path) => {
   if (!/^\/[a-zA-Z0-9_/-]+$/.test(path) || path.startsWith("//")) {
     return false;
   }
@@ -1256,11 +1376,11 @@ function interval(value) {
   const unit = value.slice(-1);
   return amount * (unit === "m" ? 6e4 : unit === "h" ? 36e5 : 864e5);
 }
-var everySchema = z13.string().regex(/^[1-9]\d{0,3}[mhd]$/).refine(
+var everySchema = z14.string().regex(/^[1-9]\d{0,3}[mhd]$/).refine(
   (value) => interval(value) >= APP_SCHEDULE_MIN_INTERVAL && interval(value) <= 365 * 864e5,
   "Use an interval from 5 minutes to 365 days, such as 5m, 1h or 1d"
 );
-var cronSchema = z13.string().max(120).refine((value) => {
+var cronSchema = z14.string().max(120).refine((value) => {
   const fields = value.trim().split(/\s+/);
   if (fields.length !== 5 || fields.some((field) => !/^[\d*,/-]+$/.test(field))) {
     return false;
@@ -1285,15 +1405,15 @@ var cronSchema = z13.string().max(120).refine((value) => {
 var declaration = {
   name: appScheduleNameSchema,
   path: appSchedulePathSchema,
-  description: z13.string().min(1).max(500)
+  description: z14.string().min(1).max(500)
 };
-var everySchedule = z13.object({ ...declaration, every: everySchema });
-var cronSchedule = z13.object({ ...declaration, cron: cronSchema });
-var appScheduleSchema = z13.union([
+var everySchedule = z14.object({ ...declaration, every: everySchema });
+var cronSchedule = z14.object({ ...declaration, cron: cronSchema });
+var appScheduleSchema = z14.union([
   everySchedule.strict(),
   cronSchedule.strict()
 ]);
-var appSchedulesSchema = z13.array(appScheduleSchema).max(APP_SCHEDULE_LIMIT).refine(
+var appSchedulesSchema = z14.array(appScheduleSchema).max(APP_SCHEDULE_LIMIT).refine(
   (items) => new Set(items.map((item) => item.name)).size === items.length,
   "Schedule names must be unique"
 );
@@ -1310,25 +1430,29 @@ function nextScheduleRun(schedule, after) {
   }
   return next.getTime();
 }
-var appScheduleStateSchema = z13.enum(["active", "paused", "archived"]);
+var appScheduleStateSchema = z14.enum(["active", "paused", "archived"]);
+var appScheduleStateInputSchema = z14.object({
+  state: appScheduleStateSchema,
+  reason: lifecycleReasonSchema.optional()
+}).strict();
 var APP_SCHEDULE_RESULT_BYTES = 16384;
-var appScheduleDiagnosticSchema = z13.object({
-  level: z13.enum(["error", "warning", "info"]),
-  message: z13.string().min(1).max(500),
+var appScheduleDiagnosticSchema = z14.object({
+  level: z14.enum(["error", "warning", "info"]),
+  message: z14.string().min(1).max(500),
   /** What the line is about, such as a member, record or tracker ID. */
-  subject: z13.string().min(1).max(200).optional(),
+  subject: z14.string().min(1).max(200).optional(),
   /** A stable code the app chooses, such as `ingest-timeout`. */
-  code: z13.string().min(1).max(100).optional()
+  code: z14.string().min(1).max(100).optional()
 });
-var appScheduleResultSchema = z13.object({
-  outcome: z13.enum(["succeeded", "partial", "failed"]),
-  summary: z13.string().min(1).max(500).optional(),
+var appScheduleResultSchema = z14.object({
+  outcome: z14.enum(["succeeded", "partial", "failed"]),
+  summary: z14.string().min(1).max(500).optional(),
   /** Counts and gauges, such as processed and failed members. */
-  metrics: z13.record(z13.string().regex(/^[A-Za-z][\w.-]{0,63}$/), z13.number()).refine(
+  metrics: z14.record(z14.string().regex(/^[A-Za-z][\w.-]{0,63}$/), z14.number()).refine(
     (metrics) => Object.keys(metrics).length <= 50,
     "Report at most 50 metrics"
   ).optional(),
-  diagnostics: z13.array(appScheduleDiagnosticSchema).max(50).optional()
+  diagnostics: z14.array(appScheduleDiagnosticSchema).max(50).optional()
 });
 function scheduleResult(result) {
   const body = JSON.stringify(appScheduleResultSchema.parse(result));
@@ -1341,41 +1465,41 @@ function scheduleResult(result) {
     headers: { "Content-Type": "application/json" }
   });
 }
-var appScheduleRunSchema = z13.object({
-  id: z13.string().uuid(),
-  build: z13.string().uuid(),
-  startedAt: z13.number(),
-  scheduledAt: z13.number(),
-  manual: z13.boolean(),
-  status: z13.enum(["queued", "running", "succeeded", "failed", "uncertain"]),
-  duration: z13.number().nullable(),
+var appScheduleRunSchema = z14.object({
+  id: z14.string().uuid(),
+  build: z14.string().uuid(),
+  startedAt: z14.number(),
+  scheduledAt: z14.number(),
+  manual: z14.boolean(),
+  status: z14.enum(["queued", "running", "succeeded", "failed", "uncertain"]),
+  duration: z14.number().nullable(),
   /** Why the run failed or is uncertain, or why Relay ignored the app's result. */
-  error: z13.string().nullable(),
+  error: z14.string().nullable(),
   /** The app's JSON answer when it sent a valid result. Absent on runs from before results. */
   result: appScheduleResultSchema.nullable().optional()
 });
-var appScheduleRunsSchema = z13.object({
+var appScheduleRunsSchema = z14.object({
   /** Newest first: the latest twenty runs of one schedule, including a queued or running one. */
-  runs: z13.array(appScheduleRunSchema)
+  runs: z14.array(appScheduleRunSchema)
 });
-var appScheduleListSchema = z13.object({
+var appScheduleListSchema = z14.object({
   state: appScheduleStateSchema,
-  schedules: z13.array(
-    z13.object({
-      declaration: z13.union([everySchedule, cronSchedule]),
-      nextRun: z13.number().nullable(),
-      blocked: z13.boolean(),
+  schedules: z14.array(
+    z14.object({
+      declaration: z14.union([everySchedule, cronSchedule]),
+      nextRun: z14.number().nullable(),
+      blocked: z14.boolean(),
       lastRun: appScheduleRunSchema.nullable()
     })
   )
 });
-var scheduledInvocationSchema = z13.object({
-  id: z13.string().uuid(),
-  build: z13.string().uuid(),
+var scheduledInvocationSchema = z14.object({
+  id: z14.string().uuid(),
+  build: z14.string().uuid(),
   name: appScheduleNameSchema,
-  scheduledAt: z13.number().int(),
-  startedAt: z13.number().int(),
-  manual: z13.boolean()
+  scheduledAt: z14.number().int(),
+  startedAt: z14.number().int(),
+  manual: z14.boolean()
 }).strict();
 async function verifyScheduledRequest(request, key) {
   const signature = request.headers.get("X-Domino-Schedule-Signature");
@@ -1440,7 +1564,47 @@ ${body}`)
 }
 
 // src/server/starters.ts
-import * as z14 from "zod";
+import * as z15 from "zod";
+var starters = [
+  {
+    id: "campaign",
+    title: "Campaign tour",
+    summary: "A neutral quest app with a guided tour of every quest kind. The blank canvas for anything."
+  },
+  {
+    id: "classic",
+    title: "Classic questboard",
+    summary: "The familiar Domino portal: quests in a grid grouped by section, a claim page, points, and a leaderboard."
+  },
+  {
+    id: "waitlist",
+    title: "Waitlist",
+    summary: "Collect sign-ups before launch. People move up the line by inviting friends."
+  },
+  {
+    id: "referral",
+    title: "Referral program",
+    summary: "Give every member an invite link and reward them when friends join and qualify."
+  },
+  {
+    id: "discord",
+    title: "Discord activation",
+    summary: "Turn new Discord members into regulars with quests for joining, introducing themselves, and taking part, rewarded with roles."
+  },
+  {
+    id: "loyalty",
+    title: "Loyalty program",
+    summary: "Members earn points in a campaign, qualify into a members' group, and spend points on offers, some for members only."
+  },
+  {
+    id: "api",
+    title: "API",
+    summary: "A headless Worker with typed routes and interactive API docs, for plugging Domino into your own product."
+  }
+];
+var offeredStarterSchema = z15.string().refine((id) => starters.some((starter) => starter.id === id), {
+  error: `Unknown starter. Choose one of: ${starters.map((starter) => starter.id).join(", ")}.`
+});
 var starterTemplates = [
   {
     id: "campaign",
@@ -1473,63 +1637,63 @@ var starterTemplates = [
     summary: "A headless Worker with typed routes and interactive API docs, for plugging Domino into your own product."
   }
 ];
-var starterIdSchema = z14.enum(
+var starterIdSchema = z15.enum(
   starterTemplates.map((template) => template.id)
 );
 
 // src/server/hosting.ts
-var outputPathSchema = z15.string().min(1).max(512).refine(
+var outputPathSchema = z16.string().min(1).max(512).refine(
   (path) => path.split("/").every(
     (part) => /^[\w-][\w.-]*$/.test(part) && part !== "node_modules"
   ),
   "Expected a relative build output path without hidden segments"
 );
-var appRoutingSchema = z15.enum(["legacy", "transparent"]).default("legacy");
+var appRoutingSchema = z16.enum(["legacy", "transparent"]).default("legacy");
 var APP_SECRET_LIMIT = 50;
 var APP_KV_LIMIT = 5;
 var APP_SQL_LIMIT = 5;
 var APP_MIGRATION_LIMIT = 100;
 var APP_MIGRATION_FILE_BYTES = 9e4;
 var APP_MIGRATION_TOTAL_BYTES = 1e6;
-var appSecretNameSchema = z15.string().regex(
+var appSecretNameSchema = z16.string().regex(
   /^[A-Z_][A-Z0-9_]{0,63}$/,
   "Use 1-64 uppercase letters, digits, and underscores, not starting with a digit"
 ).refine(
   (name) => !name.startsWith("DOMINO_") && name !== "ASSETS",
   "DOMINO_ names and ASSETS are reserved for Domino's own bindings"
 );
-var appSecretValueSchema = z15.string().min(1).refine(
+var appSecretValueSchema = z16.string().min(1).refine(
   (value) => new TextEncoder().encode(value).length <= 5120,
   "Secret values can be at most 5 KiB"
 );
-var appSecretInputSchema = z15.object({ value: appSecretValueSchema }).strict();
-var appSecretSchema = z15.object({
+var appSecretInputSchema = z16.object({ value: appSecretValueSchema }).strict();
+var appSecretSchema = z16.object({
   name: appSecretNameSchema,
-  updatedAt: z15.number(),
-  updatedBy: z15.string()
+  updatedAt: z16.number(),
+  updatedBy: z16.string()
 });
-var appSecretDeclarationSchema = z15.object({
-  description: z15.string().trim().min(1).max(500),
-  required: z15.boolean().default(true)
+var appSecretDeclarationSchema = z16.object({
+  description: z16.string().trim().min(1).max(500),
+  required: z16.boolean().default(true)
 }).strict();
-var appSecretDeclarationsSchema = z15.record(appSecretNameSchema, appSecretDeclarationSchema).refine(
+var appSecretDeclarationsSchema = z16.record(appSecretNameSchema, appSecretDeclarationSchema).refine(
   (secrets) => Object.keys(secrets).length <= APP_SECRET_LIMIT,
   `Declare at most ${APP_SECRET_LIMIT} app secrets`
 );
-var appSecretListSchema = z15.object({
-  secrets: z15.array(appSecretSchema),
-  declared: z15.array(appSecretDeclarationSchema.extend({ name: appSecretNameSchema })).default([])
+var appSecretListSchema = z16.object({
+  secrets: z16.array(appSecretSchema),
+  declared: z16.array(appSecretDeclarationSchema.extend({ name: appSecretNameSchema })).default([])
 });
-var hostedAppSecretsSchema = z15.object({ secrets: z15.record(appSecretNameSchema, appSecretValueSchema) }).strict();
-var storageDescription = z15.object({
-  description: z15.string().trim().min(1).max(500)
+var hostedAppSecretsSchema = z16.object({ secrets: z16.record(appSecretNameSchema, appSecretValueSchema) }).strict();
+var storageDescription = z16.object({
+  description: z16.string().trim().min(1).max(500)
 }).strict();
-var appStorageSchema = z15.object({
-  kv: z15.record(appSecretNameSchema, storageDescription).refine(
+var appStorageSchema = z16.object({
+  kv: z16.record(appSecretNameSchema, storageDescription).refine(
     (stores) => Object.keys(stores).length <= APP_KV_LIMIT,
     `Declare at most ${APP_KV_LIMIT} KV stores`
   ).default({}),
-  sql: z15.record(
+  sql: z16.record(
     appSecretNameSchema,
     storageDescription.extend({
       migrations: outputPathSchema.optional()
@@ -1539,77 +1703,77 @@ var appStorageSchema = z15.object({
     `Declare at most ${APP_SQL_LIMIT} SQL stores`
   ).default({})
 }).strict();
-var appStorageKindSchema = z15.enum(["kv", "sql"]);
-var appStorageListSchema = z15.object({
-  stores: z15.array(
-    z15.object({
-      kind: z15.string(),
+var appStorageKindSchema = z16.enum(["kv", "sql"]);
+var appStorageListSchema = z16.object({
+  stores: z16.array(
+    z16.object({
+      kind: z16.string(),
       name: appSecretNameSchema,
-      createdAt: z15.number().nullable(),
-      declared: z15.boolean(),
-      description: z15.string().optional()
+      createdAt: z16.number().nullable(),
+      declared: z16.boolean(),
+      description: z16.string().optional()
     })
   )
 });
 var APP_STORAGE_ROW_LIMIT = 50;
 var APP_STORAGE_PREVIEW_CHARACTERS = 2e3;
-var appStorageCellSchema = z15.union([
-  z15.string(),
-  z15.number(),
-  z15.null(),
-  z15.object({ text: z15.string(), truncated: z15.literal(true) }),
-  z15.object({ blob: z15.number().int().min(0) })
+var appStorageCellSchema = z16.union([
+  z16.string(),
+  z16.number(),
+  z16.null(),
+  z16.object({ text: z16.string(), truncated: z16.literal(true) }),
+  z16.object({ blob: z16.number().int().min(0) })
 ]);
-var appStorageTablesSchema = z15.object({
-  tables: z15.array(
+var appStorageTablesSchema = z16.object({
+  tables: z16.array(
     /** `kind` is SQLite's: `table` or `view`. */
-    z15.object({ name: z15.string(), kind: z15.string() })
+    z16.object({ name: z16.string(), kind: z16.string() })
   )
 });
-var appStorageRowsSchema = z15.object({
-  table: z15.string(),
-  columns: z15.array(z15.string()),
-  rows: z15.array(z15.array(appStorageCellSchema)),
+var appStorageRowsSchema = z16.object({
+  table: z16.string(),
+  columns: z16.array(z16.string()),
+  rows: z16.array(z16.array(appStorageCellSchema)),
   /** How many rows come before this page in storage order. */
-  offset: z15.number().int().min(0),
-  total: z15.number().int().min(0),
+  offset: z16.number().int().min(0),
+  total: z16.number().int().min(0),
   /** Pass back as `cursor` for the next page; null on the last one. */
   nextCursor: pageCursorSchema.nullable().default(null)
 });
-var appStorageKeysSchema = z15.object({
-  keys: z15.array(
-    z15.object({ name: z15.string(), expiration: z15.number().nullable() })
+var appStorageKeysSchema = z16.object({
+  keys: z16.array(
+    z16.object({ name: z16.string(), expiration: z16.number().nullable() })
   ),
   /** Pass back as `cursor` for the next page; null on the last one. */
   nextCursor: pageCursorSchema.nullable().default(null),
   /** @deprecated Use `nextCursor`. Removed in 2.0.0. */
-  cursor: z15.string().nullable()
+  cursor: z16.string().nullable()
 });
-var appStorageValueSchema = z15.object({
-  key: z15.string(),
-  size: z15.number().int().min(0),
+var appStorageValueSchema = z16.object({
+  key: z16.string(),
+  size: z16.number().int().min(0),
   /** Null when the value is not UTF-8 text. */
-  text: z15.string().nullable(),
-  truncated: z15.boolean()
+  text: z16.string().nullable(),
+  truncated: z16.boolean()
 });
 var APP_STORAGE_CELL_CHARACTERS = 1e5;
-var appStorageCellPageSchema = z15.object({
-  table: z15.string(),
-  column: z15.string(),
+var appStorageCellPageSchema = z16.object({
+  table: z16.string(),
+  column: z16.string(),
   /** The row's position in storage order: a rows page's `offset` plus its index on that page. */
-  row: z15.number().int().min(0),
+  row: z16.number().int().min(0),
   /** SQLite's storage class. */
-  type: z15.enum(["text", "integer", "real", "blob", "null"]),
+  type: z16.enum(["text", "integer", "real", "blob", "null"]),
   /** Characters of text, or of a number's text form; bytes of a BLOB; null for NULL. */
-  length: z15.number().int().min(0).nullable(),
+  length: z16.number().int().min(0).nullable(),
   /** How many characters come before this page. */
-  offset: z15.number().int().min(0),
+  offset: z16.number().int().min(0),
   /** Up to 100,000 characters from `offset`. Null for a BLOB, whose bytes are never read, and NULL. */
-  text: z15.string().nullable(),
+  text: z16.string().nullable(),
   /** Pass back as `cursor` for the next page; null on the last one. */
   nextCursor: pageCursorSchema.nullable().default(null)
 });
-var appMigrationNameSchema = z15.string().max(255).regex(/^[\w-][\w.-]*\.sql$/);
+var appMigrationNameSchema = z16.string().max(255).regex(/^[\w-][\w.-]*\.sql$/);
 function compareAppMigrations(a, b) {
   const left = Number.parseInt(a.split("_")[0], 10);
   const right = Number.parseInt(b.split("_")[0], 10);
@@ -1626,12 +1790,12 @@ function compareAppMigrations(a, b) {
   }
   return a < b ? -1 : a > b ? 1 : 0;
 }
-var appMigrationsSchema = z15.record(
+var appMigrationsSchema = z16.record(
   appSecretNameSchema,
-  z15.array(
-    z15.object({
+  z16.array(
+    z16.object({
       name: appMigrationNameSchema,
-      sql: z15.string().min(1).refine(
+      sql: z16.string().min(1).refine(
         (sql) => new TextEncoder().encode(sql).length <= APP_MIGRATION_FILE_BYTES,
         `A migration file must not exceed ${APP_MIGRATION_FILE_BYTES} bytes`
       )
@@ -1649,21 +1813,21 @@ var appMigrationsSchema = z15.record(
 );
 var appScripts = {
   routing: appRoutingSchema,
-  devScript: z15.string().regex(/^[\w:-]+$/),
-  checkScript: z15.string().regex(/^[\w:-]+$/),
-  buildScript: z15.string().regex(/^[\w:-]+$/)
+  devScript: z16.string().regex(/^[\w:-]+$/),
+  checkScript: z16.string().regex(/^[\w:-]+$/),
+  buildScript: z16.string().regex(/^[\w:-]+$/)
 };
 var workerSettings = {
-  runWorkerFirst: z15.boolean().default(false),
+  runWorkerFirst: z16.boolean().default(false),
   main: outputPathSchema.refine(
     (path) => /\.m?js$/.test(path),
     "Expected a compiled JavaScript entry"
   ),
-  compatibilityDate: z15.string().regex(/^\d{4}-\d{2}-\d{2}$/),
-  compatibilityFlags: z15.array(z15.string().min(1)).max(50).default([]),
-  vars: z15.record(
-    z15.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/).refine((name) => name !== "ASSETS"),
-    z15.string()
+  compatibilityDate: z16.string().regex(/^\d{4}-\d{2}-\d{2}$/),
+  compatibilityFlags: z16.array(z16.string().min(1)).max(50).default([]),
+  vars: z16.record(
+    z16.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/).refine((name) => name !== "ASSETS"),
+    z16.string()
   ).default({}),
   secrets: appSecretDeclarationsSchema.default({}),
   storage: appStorageSchema.optional(),
@@ -1692,62 +1856,66 @@ var distinctBindings = (worker, ctx) => {
     }
   }
 };
-var hostedAppSchema = z15.discriminatedUnion("kind", [
-  z15.object({
-    kind: z15.literal("static"),
+var hostedAppSchema = z16.discriminatedUnion("kind", [
+  z16.object({
+    kind: z16.literal("static"),
     directory: outputPathSchema,
     ...appScripts
   }).strict(),
-  z15.object({
-    kind: z15.literal("worker"),
+  z16.object({
+    kind: z16.literal("worker"),
     directory: outputPathSchema,
     assetsDirectory: outputPathSchema.optional(),
     ...appScripts,
     ...workerSettings
   }).strict().superRefine(distinctBindings)
 ]);
-var repositorySchema = z15.object({
-  id: z15.string().uuid(),
+var repositorySchema = z16.object({
+  id: z16.string().uuid(),
   organization: identifier,
   project: identifier,
-  remote: z15.string().url(),
-  defaultBranch: z15.string(),
-  status: z15.enum(["provisioning", "ready"])
+  remote: z16.string().url(),
+  defaultBranch: z16.string(),
+  status: z16.enum(["provisioning", "ready"])
 });
-var createRepositorySchema = z15.object({
+var repositoryCreateSchema = z16.object({
+  /** Omitted: the starter chosen at project setup, else `campaign`. */
+  starter: offeredStarterSchema.optional()
+}).strict();
+var createRepositorySchema = z16.object({
   /** Omitted: the starter chosen at project setup, else `campaign`. */
   starter: starterIdSchema.optional()
 }).strict();
-var deviceStartSchema = z15.object({
-  challenge: z15.string().regex(/^[a-f0-9]{64}$/)
+var deviceStartSchema = z16.object({
+  challenge: z16.string().regex(/^[a-f0-9]{64}$/)
 }).strict();
-var deviceRedeemSchema = z15.object({
-  id: z15.string().uuid(),
-  verifier: z15.string().min(43).max(128)
+var deviceRedeemSchema = z16.object({
+  id: z16.string().uuid(),
+  verifier: z16.string().min(43).max(128)
 }).strict();
-var deviceApproveSchema = z15.object({
-  id: z15.string().uuid(),
-  code: z15.string().regex(/^[A-F0-9]{4}-[A-F0-9]{4}$/)
+var deviceApproveSchema = z16.object({
+  id: z16.string().uuid(),
+  code: z16.string().regex(/^[A-F0-9]{4}-[A-F0-9]{4}$/)
 }).strict();
-var commitSchema = z15.string().regex(/^[a-f0-9]{40}$/);
-var stageRequestSchema = z15.object({
+var commitSchema = z16.string().regex(/^[a-f0-9]{40}$/);
+var stageRequestSchema = z16.object({
   commit: commitSchema,
-  requestId: z15.string().uuid()
+  requestId: z16.string().uuid()
 }).strict();
-var buildIdentitySchema = z15.object({
+var buildIdentitySchema = z16.object({
   routing: appRoutingSchema,
-  slug: z15.string().min(1).max(35).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/).optional(),
-  runtime: z15.enum(["simulation", "hosted-test"]).default("simulation"),
-  id: z15.string().uuid(),
-  repository: z15.string().uuid(),
+  slug: z16.string().min(1).max(35).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/).optional(),
+  runtime: z16.enum(["simulation", "hosted-test"]).default("simulation"),
+  id: z16.string().uuid(),
+  repository: z16.string().uuid(),
   organization: identifier,
   project: identifier,
   commit: commitSchema,
-  createdAt: z15.number(),
-  actor: z15.string(),
-  commitMessage: z15.string().max(500).optional()
+  createdAt: z16.number(),
+  actor: z16.string(),
+  commitMessage: z16.string().max(500).optional()
 });
-var buildPhaseSchema = z15.enum([
+var buildPhaseSchema = z16.enum([
   "queued",
   "source",
   "install",
@@ -1757,120 +1925,128 @@ var buildPhaseSchema = z15.enum([
   "ready",
   "failed"
 ]);
-var buildStatusSchema = z15.object({
+var buildStatusSchema = z16.object({
   phase: buildPhaseSchema,
   failedPhase: buildPhaseSchema.optional(),
-  updatedAt: z15.number(),
-  message: z15.string()
+  updatedAt: z16.number(),
+  message: z16.string()
 });
 var hostedBuildSchema = buildIdentitySchema.extend({
   ...buildStatusSchema.shape,
-  finished: z15.boolean(),
-  current: z15.boolean(),
-  stagingUrl: z15.string().url()
+  finished: z16.boolean(),
+  current: z16.boolean(),
+  stagingUrl: z16.string().url()
 });
-var liveAppSchema = z15.object({
-  url: z15.string().url().nullable(),
-  state: z15.enum(["none", "deploying", "live", "failed"]),
+var liveAppSchema = z16.object({
+  url: z16.string().url().nullable(),
+  state: z16.enum(["none", "deploying", "live", "failed"]),
   /** The build the address serves, or null before the first one goes live. */
-  build: z15.string().uuid().nullable(),
+  build: z16.string().uuid().nullable(),
   /** The build the last approved promotion asked for, while it differs from `build`. */
-  requested: z15.string().uuid().nullable(),
-  failure: z15.string().nullable()
+  requested: z16.string().uuid().nullable(),
+  failure: z16.string().nullable()
 });
-var customDomainStateSchema = z15.enum([
+var customDomainStateSchema = z16.enum([
   "awaiting-dns",
   "provisioning",
   "active",
   "attention",
   "suspended"
 ]);
-var customDomainRecordSchema = z15.object({
-  type: z15.enum(["CNAME", "TXT"]),
-  name: z15.string(),
-  value: z15.string(),
+var customDomainRecordSchema = z16.object({
+  type: z16.enum(["CNAME", "TXT"]),
+  name: z16.string(),
+  value: z16.string(),
   /** The values public DNS returned: empty when it had none, null before Domino looked. */
-  found: z15.array(z15.string()).nullable(),
-  matches: z15.boolean()
+  found: z16.array(z16.string()).nullable(),
+  matches: z16.boolean()
 });
-var customDomainSchema = z15.object({
-  id: z15.string().uuid(),
-  hostname: z15.string(),
-  url: z15.string().url(),
+var customDomainSchema = z16.object({
+  id: z16.string().uuid(),
+  hostname: z16.string(),
+  url: z16.string().url(),
   state: customDomainStateSchema,
   /** What to fix, in plain words, while the domain needs attention or is suspended. */
-  issue: z15.object({ code: z15.string(), message: z15.string() }).nullable(),
-  records: z15.array(customDomainRecordSchema),
+  issue: z16.object({ code: z16.string(), message: z16.string() }).nullable(),
+  records: z16.array(customDomainRecordSchema),
   /** Cloudflare's statuses and errors in its own words, once the domain is proven. */
-  cloudflare: z15.object({
-    hostnameStatus: z15.string(),
-    certificateStatus: z15.string().nullable(),
-    validationErrors: z15.array(z15.string()),
-    verificationErrors: z15.array(z15.string()),
-    certificateExpiresAt: z15.string().nullable()
+  cloudflare: z16.object({
+    hostnameStatus: z16.string(),
+    certificateStatus: z16.string().nullable(),
+    validationErrors: z16.array(z16.string()),
+    verificationErrors: z16.array(z16.string()),
+    certificateExpiresAt: z16.string().nullable()
   }).nullable(),
-  checkedAt: z15.string().nullable(),
-  nextCheckAt: z15.string().nullable(),
-  createdAt: z15.string()
-});
-var customDomainListSchema = z15.object({
-  domains: z15.array(customDomainSchema)
-});
-var customDomainInputSchema = z15.object({ hostname: z15.string().min(1).max(300) }).strict();
-var stagingAccessModeSchema = z15.enum(["console", "password"]);
-var stagingAccessSchema = z15.object({ mode: stagingAccessModeSchema });
-var stagingAccessInputSchema = z15.discriminatedUnion("mode", [
-  z15.object({ mode: z15.literal("console") }).strict(),
-  z15.object({
-    mode: z15.literal("password"),
-    password: z15.string().min(8).max(128)
+  checkedAt: z16.string().nullable(),
+  nextCheckAt: z16.string().nullable(),
+  createdAt: z16.string()
+});
+var customDomainListSchema = z16.object({
+  domains: z16.array(customDomainSchema)
+});
+var customDomainInputSchema = z16.object({ hostname: z16.string().min(1).max(300) }).strict();
+var stagingAccessModeSchema = z16.enum(["console", "password"]);
+var stagingAccessSchema = z16.object({ mode: stagingAccessModeSchema });
+var stagingAccessInputSchema = z16.discriminatedUnion("mode", [
+  z16.object({ mode: z16.literal("console") }).strict(),
+  z16.object({
+    mode: z16.literal("password"),
+    password: z16.string().min(8).max(128)
   }).strict()
 ]);
-var stagingPathSchema = z15.string().max(2048).refine(
-  (path) => path.startsWith("/") && !path.startsWith("//") && !path.includes("\\"),
-  "Expected a path on the staging host"
-);
-var stagingLinkSchema = z15.object({
-  url: z15.string().url(),
-  expiresAt: z15.number()
+var stagingOrigin = "https://staging.invalid";
+var stagingPathSchema = z16.string().max(2048).refine((path) => {
+  if (!path.startsWith("/") || path.startsWith("//") || path.includes("\\") || // oxlint-disable-next-line no-control-regex
+  /[\u0000-\u001f\u007f]/.test(path)) {
+    return false;
+  }
+  try {
+    return new URL(path, stagingOrigin).origin === stagingOrigin;
+  } catch {
+    return false;
+  }
+}, "Expected a path on the staging host");
+var stagingLinkSchema = z16.object({
+  url: z16.string().url(),
+  expiresAt: z16.number()
 });
-var buildSnapshotSchema = z15.object({
-  builds: z15.array(hostedBuildSchema),
+var buildSnapshotSchema = z16.object({
+  builds: z16.array(hostedBuildSchema),
   current: hostedBuildSchema.nullable(),
   selected: hostedBuildSchema.nullable(),
-  logs: z15.string()
+  logs: z16.string()
 });
-var assetPathSchema = z15.string().max(512).refine(
+var assetPathSchema = z16.string().max(512).refine(
   (path) => path.startsWith("/") && // oxlint-disable-next-line no-control-regex -- Asset paths must reject control characters.
   !/[\\\u0000-\u001f?#%]/.test(path) && path.slice(1).split("/").every((part) => part.length > 0 && !part.startsWith(".")),
   "Expected a public asset path without hidden segments"
 );
-var base64Schema = z15.string().regex(/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/);
+var base64Schema = z16.string().regex(/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/);
 var stagedDeploymentLimits = {
   /** Bytes of JSON, uncompressed. */
   size: 64e6,
   /** Bytes of the Brotli-compressed object. */
   compressedSize: 1e7
 };
-var stagedDeploymentSchema = z15.object({
-  encoding: z15.literal("br"),
-  sha256: z15.string().regex(/^[0-9a-f]{64}$/),
-  compressedSize: z15.number().int().positive().max(stagedDeploymentLimits.compressedSize),
-  size: z15.number().int().positive().max(stagedDeploymentLimits.size)
+var stagedDeploymentSchema = z16.object({
+  encoding: z16.literal("br"),
+  sha256: z16.string().regex(/^[0-9a-f]{64}$/),
+  compressedSize: z16.number().int().positive().max(stagedDeploymentLimits.compressedSize),
+  size: z16.number().int().positive().max(stagedDeploymentLimits.size)
 }).strict();
 var stagedDeploymentContentSchema = stagedDeploymentSchema.extend({
-  content: z15.string().max(Math.ceil(stagedDeploymentLimits.compressedSize / 3) * 4)
+  content: z16.string().max(Math.ceil(stagedDeploymentLimits.compressedSize / 3) * 4)
 }).strict();
 var stagedDeploymentKey = (build, sha256) => `builds/${build}/deployment/${sha256}.br`;
 var artifactFields = {
   routing: appRoutingSchema,
-  worker: z15.object({
+  worker: z16.object({
     ...workerSettings,
     migrations: appMigrationsSchema.optional(),
-    modules: z15.array(
-      z15.object({
+    modules: z16.array(
+      z16.object({
         path: outputPathSchema.refine((path) => path !== "metadata"),
-        type: z15.enum([
+        type: z16.enum([
           "application/javascript+module",
           "application/wasm",
           "text/plain",
@@ -1880,26 +2056,27 @@ var artifactFields = {
       }).strict()
     ).min(1).max(500)
   }).strict().superRefine(distinctBindings).optional(),
-  assets: z15.array(
-    z15.object({
+  assets: z16.array(
+    z16.object({
       path: assetPathSchema,
       content: base64Schema.max(14e6),
-      size: z15.number().int().min(0).max(1e7)
+      size: z16.number().int().min(0).max(1e7)
     }).strict()
   ).max(500)
 };
-var buildArtifactsSchema = z15.discriminatedUnion("format", [
-  z15.object({
-    format: z15.literal(1),
+var inlineCode = () => z16.unknown().optional().transform((value) => value);
+var buildArtifactsSchema = z16.discriminatedUnion("format", [
+  z16.object({
+    format: z16.literal(1),
     ...artifactFields,
-    quests: z15.unknown(),
-    catalog: z15.unknown()
+    quests: inlineCode(),
+    catalog: inlineCode()
   }).strict(),
-  z15.object({
-    format: z15.literal(2),
+  z16.object({
+    format: z16.literal(2),
     ...artifactFields,
     deployment: stagedDeploymentSchema,
-    images: z15.array(imageAssetArtifactSchema).max(10)
+    images: z16.array(imageAssetArtifactSchema).max(10)
   }).strict()
 ]).superRefine((value, ctx) => {
   if (value.worker) {
@@ -1951,39 +2128,39 @@ var buildArtifactsSchema = z15.discriminatedUnion("format", [
 });
 
 // src/server/development.ts
-import * as z16 from "zod";
-var developmentPreflightSchema = z16.object({
-  organization: z16.string(),
-  project: z16.string(),
-  environment: z16.enum(["test", "live"]),
-  identity: z16.object({
-    exchange: z16.literal("supported"),
-    activeIntegrations: z16.number().int().nonnegative()
+import * as z17 from "zod";
+var developmentPreflightSchema = z17.object({
+  organization: z17.string(),
+  project: z17.string(),
+  environment: z17.enum(["test", "live"]),
+  identity: z17.object({
+    exchange: z17.literal("supported"),
+    activeIntegrations: z17.number().int().nonnegative()
   }).optional(),
-  staging: z16.enum(["configured", "blocked"]),
-  development: z16.object({
-    status: z16.enum(["configured", "blocked"]),
+  staging: z17.enum(["configured", "blocked"]),
+  development: z17.object({
+    status: z17.enum(["configured", "blocked"]),
     // How `domino dev` reaches the preview origin: a Cloudflare tunnel, or a direct route on a
     // local development stack. APIs that predate the field use tunnels.
-    transport: z16.enum(["tunnel", "direct"]).default("tunnel"),
-    missing: z16.array(z16.string()),
-    authentication: z16.array(z16.string())
+    transport: z17.enum(["tunnel", "direct"]).default("tunnel"),
+    missing: z17.array(z17.string()),
+    authentication: z17.array(z17.string())
   }),
-  checks: z16.array(
-    z16.object({
-      id: z16.string(),
-      status: z16.enum(["ok", "error"]),
-      message: z16.string(),
-      missing: z16.array(z16.string()).optional(),
-      issues: z16.array(z16.string()).optional()
+  checks: z17.array(
+    z17.object({
+      id: z17.string(),
+      status: z17.enum(["ok", "error"]),
+      message: z17.string(),
+      missing: z17.array(z17.string()).optional(),
+      issues: z17.array(z17.string()).optional()
     })
   )
 });
 
 // src/server/hosted.ts
-import * as z17 from "zod";
+import * as z18 from "zod";
 var hostedKeyPermissions = ["read", "points", "ingest"];
-var hostedKeyPermissionList = z17.array(z17.string()).transform(
+var hostedKeyPermissionList = z18.array(z18.string()).transform(
   (values) => values.filter(
     (value) => hostedKeyPermissions.includes(value)
   )
@@ -1995,17 +2172,17 @@ var hostedManagementBindings = [
   "DOMINO_PROJECT",
   "DOMINO_ENVIRONMENT"
 ];
-var hostedKeySecretSchema = z17.string().regex(/^dhk_[A-Za-z0-9_-]{43}$/, "Expected a hosted app key");
-var hostedKeySchema = z17.object({
-  id: z17.string().uuid(),
+var hostedKeySecretSchema = z18.string().regex(/^dhk_[A-Za-z0-9_-]{43}$/, "Expected a hosted app key");
+var hostedKeySchema = z18.object({
+  id: z18.string().uuid(),
   token: hostedKeySecretSchema,
   organization: identifier,
   project: identifier,
-  environment: z17.enum(["test", "live"]),
+  environment: z18.enum(["test", "live"]),
   permissions: hostedKeyPermissionList,
-  expiresAt: z17.number().nullable()
+  expiresAt: z18.number().nullable()
 }).strict();
-var hostedDeploymentKeySchema = hostedKeySchema.extend({ apiUrl: z17.string().url() }).strict();
+var hostedDeploymentKeySchema = hostedKeySchema.extend({ apiUrl: z18.string().url() }).strict();
 function hostedManagementClient(env) {
   const missing = hostedManagementBindings.filter((name) => !env[name]);
   if (missing.length) {
@@ -2013,7 +2190,7 @@ function hostedManagementClient(env) {
       `Missing ${missing.join(", ")}. Domino sets these for hosted apps and domino dev; update the project's vite.config.ts to forward them in development.`
     );
   }
-  const environment = z17.enum(["test", "live"]).parse(env.DOMINO_ENVIRONMENT);
+  const environment = z18.enum(["test", "live"]).parse(env.DOMINO_ENVIRONMENT);
   const token = env.DOMINO_MANAGEMENT_KEY;
   return createManagementClient({
     baseUrl: env.DOMINO_API_URL.replace(/\/+$/, ""),
@@ -2025,9 +2202,9 @@ function hostedManagementClient(env) {
 }
 
 // src/server/index.ts
-var environmentSchema = z18.enum(["test", "live"]);
-var roleSchema = z18.enum(["editor", "reviewer", "staff"]);
-var permissionSchema = z18.enum([
+var environmentSchema = z19.enum(["test", "live"]);
+var roleSchema = z19.enum(["editor", "reviewer", "staff"]);
+var permissionSchema = z19.enum([
   "read",
   "publish",
   "review",
@@ -2047,7 +2224,7 @@ var permissionSchema = z18.enum([
    */
   "enroll"
 ]);
-var permissionListSchema = z18.array(z18.string()).transform(
+var permissionListSchema = z19.array(z19.string()).transform(
   (values) => values.filter(
     (value) => permissionSchema.safeParse(value).success
   )
@@ -2057,38 +2234,38 @@ var rolePermissions = {
   reviewer: ["read", "review"],
   staff: ["read", "confirm", "handover"]
 };
-var projectSetupSchema = z18.object({
-  mode: z18.enum(["new", "existing"]),
-  brief: z18.string().trim().min(1).max(4e3)
+var projectSetupSchema = z19.object({
+  mode: z19.enum(["new", "existing"]),
+  brief: z19.string().trim().min(1).max(4e3)
 }).strict();
-var operatorUserSchema = z18.object({
-  id: z18.string(),
-  name: z18.string().nullable(),
-  email: z18.string().nullable(),
-  avatar: z18.string().nullable()
+var operatorUserSchema = z19.object({
+  id: z19.string(),
+  name: z19.string().nullable(),
+  email: z19.string().nullable(),
+  avatar: z19.string().nullable()
 });
-var projectSchema = z18.object({
+var projectSchema = z19.object({
   /**
    * Names the project's hosted addresses. The server gives a new project, and accepts in a
    * slug change, only slugs of at least 3 characters that Domino does not reserve. This schema
    * checks only the format, so it parses every slug that exists.
    */
-  slug: z18.string().min(1).max(35).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/),
-  createdBy: z18.string().nullable().optional(),
+  slug: z19.string().min(1).max(35).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/),
+  createdBy: z19.string().nullable().optional(),
   creator: operatorUserSchema.nullable().optional(),
   /** A response, so fields a newer server adds to the setup are dropped, not rejected. */
-  setup: z18.object(projectSetupSchema.shape).optional(),
+  setup: z19.object(projectSetupSchema.shape).optional(),
   /** The starter chosen at setup. A plain string, so later starters still parse. */
-  starter: z18.string().optional(),
-  id: z18.string().min(1),
+  starter: z19.string().optional(),
+  id: z19.string().min(1),
   organization: identifier,
   project: identifier,
-  name: z18.string(),
-  subtitle: z18.string(),
-  initials: z18.string(),
-  color: z18.string(),
+  name: z19.string(),
+  subtitle: z19.string(),
+  initials: z19.string(),
+  color: z19.string(),
   permissions: permissionListSchema,
-  environments: z18.array(environmentSchema)
+  environments: z19.array(environmentSchema)
 }).refine(
   (project) => !project.creator || project.creator.id === project.createdBy,
   {
@@ -2096,45 +2273,52 @@ var projectSchema = z18.object({
     path: ["creator"]
   }
 );
-var projectInputSchema = z18.object({
+var projectCreateInputSchema = z19.object({
   actionId: identifier,
-  name: z18.string().trim().min(1).max(80),
+  name: z19.string().trim().min(1).max(80),
+  setup: projectSetupSchema.optional(),
+  /** The starter a new hosted app begins from, with `setup.mode` "new". */
+  starter: offeredStarterSchema.optional()
+}).strict();
+var projectInputSchema = z19.object({
+  actionId: identifier,
+  name: z19.string().trim().min(1).max(80),
   setup: projectSetupSchema.optional(),
   /** The starter a new hosted app begins from, with `setup.mode` "new". */
   starter: starterIdSchema.optional()
 }).strict();
-var projectUpdateInputSchema = z18.union([
-  z18.object({ name: projectInputSchema.shape.name }).strict(),
-  z18.object({
+var projectUpdateInputSchema = z19.union([
+  z19.object({ name: projectCreateInputSchema.shape.name }).strict(),
+  z19.object({
     slug: projectSchema.shape.slug,
-    confirm: z18.string().min(1).max(80)
+    confirm: z19.string().min(1).max(80)
   }).strict()
 ]);
-var projectDeletionInputSchema = z18.object({ confirm: z18.string().min(1).max(80) }).strict();
-var projectDeletionSchema = z18.object({
+var projectDeletionInputSchema = z19.object({ confirm: z19.string().min(1).max(80) }).strict();
+var projectDeletionSchema = z19.object({
   project: identifier,
-  purgeAfter: z18.number().int()
+  purgeAfter: z19.number().int()
 });
-var projectTransferInputSchema = z18.object({ organization: identifier, confirm: z18.string().min(1).max(80) }).strict();
-var projectTransferSchema = z18.object({
+var projectTransferInputSchema = z19.object({ organization: identifier, confirm: z19.string().min(1).max(80) }).strict();
+var projectTransferSchema = z19.object({
   organization: identifier,
   project: identifier
 });
-var grantSchema = z18.object({
-  subject: z18.string().min(1).max(200),
-  roles: z18.array(roleSchema),
-  environments: z18.array(environmentSchema)
+var grantSchema = z19.object({
+  subject: z19.string().min(1).max(200),
+  roles: z19.array(roleSchema),
+  environments: z19.array(environmentSchema)
 }).strict();
-var grantRecordSchema = z18.object(grantSchema.shape);
-var stockAdditionSchema = z18.object({
+var grantRecordSchema = z19.object(grantSchema.shape);
+var stockAdditionSchema = z19.object({
   item: identifier,
-  quantity: z18.number().int(),
+  quantity: z19.number().int(),
   actionId: identifier
 });
-var completionRevokeSchema = z18.object({
+var completionRevokeSchema = z19.object({
   actionId: identifier,
-  reason: z18.string().trim().min(1).max(500),
-  freeOccurrence: z18.boolean().default(false)
+  reason: z19.string().trim().min(1).max(500),
+  freeOccurrence: z19.boolean().default(false)
 }).strict();
 var RevokedEntitlementOutcome = {
   /** No other completion grants the reward: it is void, after cancelling a handover in progress. */
@@ -2162,238 +2346,313 @@ var RevokedReferralOutcome = {
   /** Qualified on another accepted completion of the program's quest instead. */
   Requalified: "requalified"
 };
-var entitlementOutcomeSchema = z18.string().min(1).max(64);
-var deliveryOutcomeSchema = z18.string().min(1).max(64);
-var referralOutcomeSchema = z18.string().min(1).max(64);
-var completionRevocationSchema = z18.object({
+var entitlementOutcomeSchema = z19.string().min(1).max(64);
+var deliveryOutcomeSchema = z19.string().min(1).max(64);
+var referralOutcomeSchema = z19.string().min(1).max(64);
+var completionRevocationSchema = z19.object({
   completion: identifier,
   /** The quest ID, or the board ID when `source.kind` is `leaderboard`. */
   quest: identifier,
   member: identifier,
   /** What paid the revoked completion. `source.id` repeats `quest`. */
   source: completionSourceSchema.optional(),
-  revokedAt: z18.number(),
-  occurrenceFreed: z18.boolean(),
-  badges: z18.array(z18.object({ badge: identifier, stillAwarded: z18.boolean() })).optional(),
-  groups: z18.array(z18.object({ group: identifier, stillMember: z18.boolean() })).optional(),
-  points: z18.array(
-    z18.object({
+  revokedAt: z19.number(),
+  occurrenceFreed: z19.boolean(),
+  badges: z19.array(z19.object({ badge: identifier, stillAwarded: z19.boolean() })).optional(),
+  groups: z19.array(z19.object({ group: identifier, stillMember: z19.boolean() })).optional(),
+  points: z19.array(
+    z19.object({
       entry: identifier,
       balance: identifier,
       reversal: identifier.nullable(),
-      reversed: z18.number().int(),
-      unreversed: z18.number().int()
+      reversed: z19.number().int(),
+      unreversed: z19.number().int()
     })
   ),
-  entitlements: z18.array(
-    z18.object({
+  entitlements: z19.array(
+    z19.object({
       entitlement: identifier,
       reward: identifier,
       outcome: entitlementOutcomeSchema,
-      status: z18.string()
+      status: z19.string()
     })
   ),
-  deliveries: z18.array(
-    z18.object({
-      delivery: z18.string(),
-      roleId: z18.string(),
+  deliveries: z19.array(
+    z19.object({
+      delivery: z19.string(),
+      roleId: z19.string(),
       outcome: deliveryOutcomeSchema,
       /**
        * By Relay's records, another accepted, unrevoked completion of the member also granted this
        * role to the same Discord account and server. Relay does not read Discord's membership.
        */
-      stillGranted: z18.boolean()
+      stillGranted: z19.boolean()
     })
   ),
-  referrals: z18.array(
-    z18.object({
+  referrals: z19.array(
+    z19.object({
       program: identifier,
       outcome: referralOutcomeSchema
     })
   ),
-  streakMilestone: z18.boolean()
-});
-var accessSchema = z18.object({
-  actor: z18.string(),
-  organization: z18.string(),
-  admin: z18.boolean(),
-  local: z18.boolean(),
-  projects: z18.array(projectSchema)
-});
-var querySchema = z18.object({
-  q: z18.string().max(200).default(""),
-  filter: z18.string().max(50).default("all"),
-  offset: z18.coerce.number().int().min(0).max(1e6).default(0),
-  limit: z18.coerce.number().int().min(1).max(100).default(25)
-});
-var accountProfileSchema = z18.object({
-  name: z18.string().optional(),
+  streakMilestone: z19.boolean()
+});
+var completionRestoreSchema = z19.object({
+  actionId: identifier,
+  reason: z19.string().trim().min(1).max(500)
+}).strict();
+var RestoredEntitlementOutcome = {
+  /** The revocation voided it, and it is available again. */
+  Restored: "restored",
+  /** The revocation lowered or flagged it: its earned tier is the completion's again. */
+  Raised: "raised",
+  /** It changed since the revocation (an operator restored, voided or corrected it), so it stays. */
+  Kept: "kept"
+};
+var RestoredDeliveryOutcome = {
+  /** The grant had not reached Discord, and it is queued again. */
+  Requeued: "requeued",
+  /** The grant counts again for reconciliation, and its delivery status stays. */
+  Kept: "kept"
+};
+var RestoredReferralOutcome = {
+  /** The member qualifies on this completion again. */
+  Qualified: "qualified",
+  /** The program is disabled or gone, or the referral is suspended, so nothing changed. */
+  Kept: "kept"
+};
+var openOutcome = z19.string().min(1).max(64);
+var completionRestorationSchema = z19.object({
+  completion: identifier,
+  /** The quest ID, or the board ID when `source.kind` is `leaderboard`. */
+  quest: identifier,
+  member: identifier,
+  source: completionSourceSchema.optional(),
+  restoredAt: z19.number(),
+  points: z19.array(
+    z19.object({
+      entry: identifier,
+      balance: identifier,
+      reversal: identifier,
+      amount: z19.number().int()
+    })
+  ),
+  badges: z19.array(z19.object({ badge: identifier })),
+  groups: z19.array(z19.object({ group: identifier, added: z19.boolean() })),
+  entitlements: z19.array(
+    z19.object({
+      entitlement: identifier,
+      reward: identifier,
+      outcome: openOutcome,
+      status: z19.string()
+    })
+  ),
+  deliveries: z19.array(
+    z19.object({
+      delivery: z19.string(),
+      roleId: z19.string(),
+      outcome: openOutcome
+    })
+  ),
+  referrals: z19.array(
+    z19.object({
+      program: identifier,
+      outcome: openOutcome
+    })
+  ),
+  streakMilestone: z19.boolean()
+});
+var accessSchema = z19.object({
+  actor: z19.string(),
+  organization: z19.string(),
+  admin: z19.boolean(),
+  local: z19.boolean(),
+  projects: z19.array(projectSchema),
+  /** The credential's own kind and scope, when it is an organization automation key. */
+  credential: z19.object({
+    kind: z19.string(),
+    id: z19.string(),
+    name: z19.string(),
+    /** The projects it reaches; null for every project of the organization. */
+    projects: z19.array(z19.string()).nullable(),
+    createProjects: z19.boolean(),
+    permissions: permissionListSchema
+  }).optional()
+});
+var querySchema = z19.object({
+  q: z19.string().max(200).default(""),
+  filter: z19.string().max(50).default("all"),
+  offset: z19.coerce.number().int().min(0).max(1e6).default(0),
+  limit: z19.coerce.number().int().min(1).max(100).default(25)
+});
+var accountProfileSchema = z19.object({
+  name: z19.string().optional(),
   /** The account's handle, where the provider has one (X and Discord). */
-  username: z18.string().optional(),
-  email: z18.string().optional(),
-  emailVerified: z18.boolean().default(false),
-  imageUrl: z18.string().url().optional()
+  username: z19.string().optional(),
+  email: z19.string().optional(),
+  emailVerified: z19.boolean().default(false),
+  imageUrl: z19.string().url().optional()
 });
-var memberAccountSchema = z18.object({
+var memberAccountSchema = z19.object({
   /** `wallet` for wallet sign-in, `account` for every other connected account. */
-  kind: z18.enum(["account", "wallet"]),
-  provider: z18.string(),
-  subject: z18.string(),
-  signInEnabled: z18.boolean(),
+  kind: z19.enum(["account", "wallet"]),
+  provider: z19.string(),
+  subject: z19.string(),
+  signInEnabled: z19.boolean(),
   profile: accountProfileSchema.optional(),
   /**
    * Present only for accounts Relay reads in the background with the member's own tokens:
    * `needs-reconnect` once those tokens stopped working, until the member links the account again.
    */
-  status: z18.enum(["connected", "needs-reconnect"]).optional(),
+  status: z19.enum(["connected", "needs-reconnect"]).optional(),
   /**
    * Why the account needs reconnecting: the member or the provider revoked access (`revoked`),
    * the tokens expired and cannot be refreshed (`expired`), or a source needs a permission the
    * member did not grant (`missing-scope`).
    */
-  reason: z18.enum(["revoked", "expired", "missing-scope"]).optional()
-});
-var operationSchema = z18.object({
-  target: z18.string(),
-  paused: z18.boolean(),
-  revision: z18.number().int(),
-  reason: z18.string(),
-  actor: z18.string().nullable(),
-  changedAt: z18.number()
-});
-var operationInputSchema = z18.object({
-  target: z18.union([
-    z18.literal("redemptions"),
-    z18.string().regex(/^quest:[\w-]+$/)
+  reason: z19.enum(["revoked", "expired", "missing-scope"]).optional()
+});
+var operationSchema = z19.object({
+  target: z19.string(),
+  paused: z19.boolean(),
+  revision: z19.number().int(),
+  reason: z19.string(),
+  actor: z19.string().nullable(),
+  changedAt: z19.number()
+});
+var operationInputSchema = z19.object({
+  target: z19.union([
+    z19.literal("redemptions"),
+    z19.string().regex(/^quest:[\w-]+$/)
   ]),
-  paused: z18.boolean(),
-  revision: z18.number().int().nonnegative(),
-  reason: z18.string().trim().min(1).max(500),
+  paused: z19.boolean(),
+  revision: z19.number().int().nonnegative(),
+  reason: z19.string().trim().min(1).max(500),
   actionId: identifier
 }).strict();
-var questLifecycleInputSchema = z18.object({
+var questLifecycleInputSchema = z19.object({
   quest: identifier,
   expectedRelease: identifier.optional(),
-  archived: z18.boolean(),
-  reason: z18.string().trim().min(1).max(500),
+  archived: z19.boolean(),
+  reason: z19.string().trim().min(1).max(500),
   actionId: identifier
 }).strict();
-var questLifecycleSchema = z18.object({
+var questLifecycleSchema = z19.object({
   quest: identifier,
   key: identifier.nullable(),
-  title: z18.string(),
+  title: z19.string(),
   release: identifier,
-  lifecycle: z18.enum(["active", "paused", "archived"]),
-  changed: z18.boolean()
-});
-var memberSchema = z18.object({
-  id: z18.string(),
-  test: z18.boolean().optional(),
-  name: z18.string().nullable().optional(),
-  accounts: z18.array(memberAccountSchema).default([]),
-  attempts: z18.number(),
-  completions: z18.number(),
-  rewards: z18.number(),
-  lastActivity: z18.number().nullable()
-});
-var personSchema = z18.object({
-  id: z18.string(),
-  test: z18.boolean().optional(),
-  name: z18.string().nullable().optional(),
-  accounts: z18.array(memberAccountSchema).default([])
-});
-var metricsSchema = z18.object({
-  quests: z18.number(),
-  members: z18.number(),
-  attempts: z18.number(),
-  completions: z18.number(),
-  review: z18.number(),
-  failed: z18.number(),
-  entitlements: z18.number()
-});
-var readinessSchema = z18.object({
-  checks: z18.array(
-    z18.object({
-      id: z18.string(),
-      status: z18.enum(["ready", "blocked"]),
-      title: z18.string(),
-      detail: z18.string()
+  lifecycle: z19.enum(["active", "paused", "archived"]),
+  changed: z19.boolean()
+});
+var memberSchema = z19.object({
+  id: z19.string(),
+  test: z19.boolean().optional(),
+  name: z19.string().nullable().optional(),
+  accounts: z19.array(memberAccountSchema).default([]),
+  attempts: z19.number(),
+  completions: z19.number(),
+  rewards: z19.number(),
+  lastActivity: z19.number().nullable()
+});
+var personSchema = z19.object({
+  id: z19.string(),
+  test: z19.boolean().optional(),
+  name: z19.string().nullable().optional(),
+  accounts: z19.array(memberAccountSchema).default([])
+});
+var metricsSchema = z19.object({
+  quests: z19.number(),
+  members: z19.number(),
+  attempts: z19.number(),
+  completions: z19.number(),
+  review: z19.number(),
+  failed: z19.number(),
+  entitlements: z19.number()
+});
+var readinessSchema = z19.object({
+  checks: z19.array(
+    z19.object({
+      id: z19.string(),
+      status: z19.enum(["ready", "blocked"]),
+      title: z19.string(),
+      detail: z19.string()
     })
   )
 });
-var inventorySchema = z18.object({
-  item: z18.string(),
-  name: z18.string().nullable().default(null),
-  available: z18.number(),
-  reserved: z18.number(),
-  allocated: z18.number().default(0)
-});
-var auditRecordSchema = z18.object({
-  id: z18.string(),
-  action: z18.string(),
-  actor: z18.string().nullable(),
+var inventorySchema = z19.object({
+  item: z19.string(),
+  name: z19.string().nullable().default(null),
+  available: z19.number(),
+  reserved: z19.number(),
+  allocated: z19.number().default(0)
+});
+var auditRecordSchema = z19.object({
+  id: z19.string(),
+  action: z19.string(),
+  actor: z19.string().nullable(),
   user: operatorUserSchema.nullable().optional(),
-  detail: z18.string(),
-  at: z18.number(),
-  attempt: z18.string().nullable()
+  detail: z19.string(),
+  at: z19.number(),
+  attempt: z19.string().nullable()
 }).refine((record6) => !record6.user || record6.user.id === record6.actor, {
   message: "User profile must match the recorded actor",
   path: ["user"]
 });
-var pageSchema = z18.object({
+var pageSchema = z19.object({
   snapshot: snapshotSchema,
-  members: z18.array(memberSchema),
-  people: z18.array(personSchema).default([]),
+  members: z19.array(memberSchema),
+  people: z19.array(personSchema).default([]),
   metrics: metricsSchema,
-  total: z18.number(),
-  offset: z18.number(),
-  limit: z18.number(),
-  inventory: z18.array(inventorySchema),
-  operations: z18.array(operationSchema).default([]),
-  audit: z18.array(auditRecordSchema).default([]),
-  questCounts: z18.record(z18.string(), z18.number())
-});
-var managedOAuthAccountBaseSchema = z18.object({
-  provider: z18.enum(["x", "discord"]),
-  revision: z18.number().int().nonnegative()
-});
-var managedOAuthAccountSchema = z18.discriminatedUnion("status", [
+  total: z19.number(),
+  offset: z19.number(),
+  limit: z19.number(),
+  inventory: z19.array(inventorySchema),
+  operations: z19.array(operationSchema).default([]),
+  audit: z19.array(auditRecordSchema).default([]),
+  questCounts: z19.record(z19.string(), z19.number())
+});
+var managedOAuthAccountBaseSchema = z19.object({
+  provider: z19.enum(["x", "discord"]),
+  revision: z19.number().int().nonnegative()
+});
+var managedOAuthAccountSchema = z19.discriminatedUnion("status", [
   managedOAuthAccountBaseSchema.extend({
-    status: z18.literal("connected"),
-    subject: z18.string().min(1),
-    linkedAt: z18.number(),
+    status: z19.literal("connected"),
+    subject: z19.string().min(1),
+    linkedAt: z19.number(),
     /**
      * True when a member import attached the account with the organization's word for it, not the
      * member's proof. Absent from Relay versions without imports.
      */
-    imported: z18.boolean().optional(),
+    imported: z19.boolean().optional(),
     /**
      * True for a real account an operator linked to a test member without OAuth
      * (`testMembers.linkAccount`). Absent from Relay versions without it.
      */
-    testLinked: z18.boolean().optional()
+    testLinked: z19.boolean().optional()
   }),
-  managedOAuthAccountBaseSchema.extend({ status: z18.literal("disconnected") })
+  managedOAuthAccountBaseSchema.extend({ status: z19.literal("disconnected") })
 ]);
 var managedTelegramAccountBaseSchema = managedOAuthAccountBaseSchema.extend({
-  provider: z18.literal("telegram")
+  provider: z19.literal("telegram")
 });
-var managedTelegramAccountSchema = z18.discriminatedUnion("status", [
+var managedTelegramAccountSchema = z19.discriminatedUnion("status", [
   managedTelegramAccountBaseSchema.extend({
-    status: z18.literal("connected"),
+    status: z19.literal("connected"),
     /** The numeric Telegram user ID. */
-    subject: z18.string().min(1),
-    linkedAt: z18.number()
+    subject: z19.string().min(1),
+    linkedAt: z19.number()
   }),
   managedTelegramAccountBaseSchema.extend({
-    status: z18.literal("disconnected")
+    status: z19.literal("disconnected")
   })
 ]);
-var memberOAuthUnlinkInputSchema = z18.object({
-  provider: z18.enum(["x", "discord"]),
-  subject: z18.string().min(1).max(4096),
-  revision: z18.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER - 1),
-  reason: z18.string().trim().min(1).max(500)
+var memberOAuthUnlinkInputSchema = z19.object({
+  provider: z19.enum(["x", "discord"]),
+  subject: z19.string().min(1).max(4096),
+  revision: z19.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER - 1),
+  reason: z19.string().trim().min(1).max(500)
 }).strict();
 var memberTelegramUnlinkInputSchema = memberOAuthUnlinkInputSchema.omit({ provider: true }).strict();
 var managedWalletSchema = linkedWalletSchema.extend({
@@ -2401,32 +2660,32 @@ var managedWalletSchema = linkedWalletSchema.extend({
    * True when a member import attached the wallet with the organization's word for it, and the
    * member has not proved it since. Absent from Relay versions without imports.
    */
-  imported: z18.boolean().optional(),
-  status: z18.enum(["linked", "unlinked"]),
-  unlinkedAt: z18.number().int().nullable(),
+  imported: z19.boolean().optional(),
+  status: z19.enum(["linked", "unlinked"]),
+  unlinkedAt: z19.number().int().nullable(),
   /** "member", or the operator or key that unlinked it. */
-  unlinkedBy: z18.string().nullable()
+  unlinkedBy: z19.string().nullable()
 });
 var managedMemberIdentitySchema = memberIdentitySchema.extend({
   /**
    * True for an X account a member import attached, until the member links or signs in with it
    * through X. Absent from Relay versions without imports.
    */
-  imported: z18.boolean().optional(),
+  imported: z19.boolean().optional(),
   /**
    * True for a real X or Discord account an operator linked to a test member without OAuth
    * (`testMembers.linkAccount`). Absent from Relay versions without it.
    */
-  testLinked: z18.boolean().optional(),
-  status: z18.enum(["linked", "unlinked"]),
-  unlinkedAt: z18.number().int().nullable(),
+  testLinked: z19.boolean().optional(),
+  status: z19.enum(["linked", "unlinked"]),
+  unlinkedAt: z19.number().int().nullable(),
   /** The operator or key that unlinked it. */
-  unlinkedBy: z18.string().nullable()
+  unlinkedBy: z19.string().nullable()
 });
-var memberIdentityChangeInputSchema = z18.object({
+var memberIdentityChangeInputSchema = z19.object({
   kind: appIdentityKindSchema,
-  subject: z18.string().min(1).max(256),
-  reason: z18.string().trim().min(1).max(500)
+  subject: z19.string().min(1).max(256),
+  reason: z19.string().trim().min(1).max(500)
 }).strict();
 var balanceCheckSchema = walletBalanceSchema.pick({
   chain: true,
@@ -2436,76 +2695,99 @@ var balanceCheckSchema = walletBalanceSchema.pick({
   wallets: true,
   observedAt: true
 }).extend({ attempt: identifier });
-var walletBalanceChainsSchema = z18.object({
-  chains: z18.array(
-    z18.object({
-      chain: z18.union([
-        z18.literal(solanaMainnet),
+var walletBalanceChainsSchema = z19.object({
+  chains: z19.array(
+    z19.object({
+      chain: z19.union([
+        z19.literal(solanaMainnet),
         cosmosNetworkSchema,
         evmChainIdSchema
       ]),
-      name: z18.string(),
-      testnet: z18.boolean()
+      name: z19.string(),
+      testnet: z19.boolean()
     })
   )
 });
-var memberWalletUnlinkInputSchema = walletUnlinkInputSchema.extend({ reason: z18.string().trim().min(1).max(500) }).strict();
+var memberWalletUnlinkInputSchema = walletUnlinkInputSchema.extend({ reason: z19.string().trim().min(1).max(500) }).strict();
 var memberWalletSignInInputSchema = walletUnlinkInputSchema.extend({
-  enabled: z18.boolean(),
-  reason: z18.string().trim().min(1).max(500)
+  enabled: z19.boolean(),
+  reason: z19.string().trim().min(1).max(500)
 }).strict();
-var telegramBotIdSchema = z18.string().regex(/^[1-9][0-9]{0,19}$/, "Enter the bot's numeric ID, such as 123456789");
-var participantSignInSchema = z18.object({
-  providers: z18.array(
-    z18.object({ provider: authProviderSchema, configured: z18.boolean() })
+var telegramBotIdSchema = z19.string().regex(/^[1-9][0-9]{0,19}$/, "Enter the bot's numeric ID, such as 123456789");
+var participantSignInSchema = z19.object({
+  providers: z19.array(
+    z19.object({ provider: authProviderSchema, configured: z19.boolean() })
   ),
-  email: z18.boolean(),
+  email: z19.boolean(),
   /** Wallet families: `"solana"`, `"eip155"`, `"cosmos"`. */
   wallets: walletSignInNetworksSchema,
   /** Why participants cannot sign in to this project, or null. */
-  issue: z18.string().nullable(),
+  issue: z19.string().nullable(),
   /**
    * Telegram, outside `providers` in SDK 1.x: whether Domino configured Telegram Login, and the
    * bot whose Mini App participants sign in from, or null when Mini App sign-in is off. Absent
    * from Relay versions without Telegram.
    */
-  telegram: z18.object({
-    login: z18.boolean(),
+  telegram: z19.object({
+    login: z19.boolean(),
     miniAppBotId: telegramBotIdSchema.nullable()
   }).optional(),
-  updatedAt: z18.number().nullable(),
-  updatedBy: z18.string().nullable()
+  /**
+   * The creator-account providers, such as `youtube`, and whether Domino configured each, so
+   * members can link accounts that trackers like `youtube.shorts()` read. Absent from older Relay
+   * versions.
+   */
+  creatorAccounts: z19.array(
+    z19.object({
+      provider: creatorAccountProviderSchema,
+      configured: z19.boolean()
+    })
+  ).optional(),
+  updatedAt: z19.number().nullable(),
+  updatedBy: z19.string().nullable()
 });
-var participantSignInInputSchema = z18.object({
+var participantSignInInputSchema = z19.object({
   wallets: walletSignInNetworksSchema,
-  telegram: z18.object({ miniAppBotId: telegramBotIdSchema.nullable() }).strict().optional()
+  telegram: z19.object({ miniAppBotId: telegramBotIdSchema.nullable() }).strict().optional()
 }).strict();
-var completionRevocationShortfallSchema = z18.object({
+var completionRevocationShortfallSchema = z19.object({
   completion: identifier,
   quest: identifier,
-  revokedAt: z18.number().int().nonnegative().safe(),
-  unreversedPoints: z18.record(identifier, z18.number().int().positive().safe())
+  revokedAt: z19.number().int().nonnegative().safe(),
+  unreversedPoints: z19.record(identifier, z19.number().int().positive().safe())
 });
-var memberDetailSchema = z18.object({
+var revokedCompletionSchema = z19.object({
+  completion: identifier,
+  quest: identifier,
+  /** The completion key: its occurrence, such as `once` or a day. */
+  key: z19.string(),
+  revokedAt: z19.number().int().nonnegative().safe(),
+  /** Why it was revoked, and what the revoke did, which a restore re-applies. */
+  reason: z19.string().optional(),
+  revocation: completionRevocationSchema.optional()
+});
+var memberDetailSchema = z19.object({
   snapshot: snapshotSchema,
   member: memberSchema,
   progress: memberProgressSchema,
   /** Up to 25 revoked completions with an unreversed point remainder, newest first. */
-  revocationShortfalls: z18.array(completionRevocationShortfallSchema).default([]),
+  revocationShortfalls: z19.array(completionRevocationShortfallSchema).default([]),
+  /** Up to 25 revoked completions, newest first. Relay older than restore leaves it out. */
+  revokedCompletions: z19.array(revokedCompletionSchema).optional(),
   /** Current and historical campaign enrollment state, including inactive enrollments. */
-  campaignEnrollments: z18.array(campaignEnrollmentSchema).default([]),
-  passes: z18.array(
-    z18.object({
-      provider: z18.string(),
-      event: z18.string(),
-      subject: z18.string(),
+  campaignEnrollments: z19.array(campaignEnrollmentSchema).default([]),
+  passes: z19.array(
+    z19.object({
+      provider: z19.string(),
+      event: z19.string(),
+      subject: z19.string(),
       attempt: identifier.nullable()
     })
   ).default([]),
   /** Linked and unlinked wallets. */
-  wallets: z18.array(managedWalletSchema),
+  wallets: z19.array(managedWalletSchema),
   /** The member's 10 most recent recorded balance reads, newest first. */
-  balanceChecks: z18.array(balanceCheckSchema),
+  balanceChecks: z19.array(balanceCheckSchema),
   /** The member's participant profile in this project. */
   profile: managedProfileSchema.nullable(),
   /**
@@ -2513,11 +2795,16 @@ var memberDetailSchema = z18.object({
    * member ID: their selected X and Discord accounts and their `app:<name>` identities in this
    * project, including app identities an operator unlinked, by kind.
    */
-  identities: z18.array(managedMemberIdentitySchema)
+  identities: z19.array(managedMemberIdentitySchema),
+  /**
+   * The creator accounts the member linked (a YouTube channel), whose content managed tracker
+   * sources attribute to them. Absent from Relay versions without creator accounts.
+   */
+  creatorAccounts: z19.array(managedCreatorAccountSchema).optional()
 });
-var managedMemberProgressSchema = z18.object({
+var managedMemberProgressSchema = z19.object({
   member: identifier,
-  quests: z18.array(
+  quests: z19.array(
     memberProgressSchema.shape.quests.element.extend({
       /** The streak as `members.get` reports it, without the list of qualifying days. */
       streak: streakProgressSchema.omit({ days: true }).nullable().optional()
@@ -2528,172 +2815,211 @@ var managedMemberProgressSchema = z18.object({
   /** Each point balance the member has, by balance ID. */
   balances: snapshotSchema.shape.balances
 });
-var stockInputSchema = z18.object({
+var stockInputSchema = z19.object({
   item: identifier,
-  quantity: z18.number().int().positive().max(1e6),
+  quantity: z19.number().int().positive().max(1e6),
   actionId: identifier
 }).strict();
-var ingestTrackerScopeSchema = z18.array(identifier).min(1).max(100).nullable();
-var tokenScopeInputSchema = z18.object({ ingestTrackers: ingestTrackerScopeSchema }).strict();
-var tokenInputSchema = z18.object({
-  name: z18.string().trim().min(1).max(80),
+var ingestTrackerScopeSchema = z19.array(identifier).min(1).max(100).nullable();
+var tokenScopeInputSchema = z19.object({ ingestTrackers: ingestTrackerScopeSchema }).strict();
+var tokenInputSchema = z19.object({
+  name: z19.string().trim().min(1).max(80),
   project: identifier,
   environment: environmentSchema,
-  permissions: z18.array(permissionSchema).min(1),
+  permissions: z19.array(permissionSchema).min(1),
   ingestTrackers: ingestTrackerScopeSchema.optional(),
-  days: z18.number().int().min(1).max(90).default(30)
+  days: z19.number().int().min(1).max(90).default(30)
 }).strict();
-var tokenSchema = z18.object({
-  id: z18.string(),
-  name: z18.string(),
-  project: z18.string(),
+var tokenSchema = z19.object({
+  id: z19.string(),
+  name: z19.string(),
+  project: z19.string(),
   environment: environmentSchema,
   permissions: permissionListSchema,
   ingestTrackers: ingestTrackerScopeSchema.optional(),
-  expiresAt: z18.number()
+  expiresAt: z19.number()
 });
-var issuedTokenSchema = tokenSchema.extend({ token: z18.string() });
-var serviceKeyInputSchema = z18.object({
-  name: z18.string().trim().min(1).max(80),
-  permissions: z18.array(permissionSchema).min(1).refine(
+var issuedTokenSchema = tokenSchema.extend({ token: z19.string() });
+var serviceKeyInputSchema = z19.object({
+  name: z19.string().trim().min(1).max(80),
+  permissions: z19.array(permissionSchema).min(1).refine(
     (permissions) => !permissions.includes("access"),
     "Service keys cannot hold the access permission"
   ),
   /** Days until the first secret expires. Omit it for a key that never expires. */
-  expiresInDays: z18.number().int().min(1).max(3650).optional()
+  expiresInDays: z19.number().int().min(1).max(3650).optional()
 }).strict();
-var serviceKeySchema = z18.object({
-  id: z18.string().uuid(),
-  organization: z18.string(),
-  project: z18.string(),
+var serviceKeySchema = z19.object({
+  id: z19.string().uuid(),
+  organization: z19.string(),
+  project: z19.string(),
   environment: environmentSchema,
-  name: z18.string(),
+  name: z19.string(),
   permissions: permissionListSchema,
   /** The Clerk user ID of the administrator who created it. */
-  createdBy: z18.string(),
-  createdAt: z18.number(),
+  createdBy: z19.string(),
+  createdAt: z19.number(),
   /** The latest use of any of its secrets, revoked ones included; null when none was used. */
-  lastUsedAt: z18.number().nullable(),
+  lastUsedAt: z19.number().nullable(),
   /** Its working secrets, oldest first. Any of them authenticates the key. */
-  secrets: z18.array(credentialSecretSchema)
+  secrets: z19.array(credentialSecretSchema)
 });
 var issuedServiceKeySchema = serviceKeySchema.extend({
-  secret: z18.string().uuid(),
-  token: z18.string()
+  secret: z19.string().uuid(),
+  token: z19.string()
+});
+var automationKeyPermissionSchema = z19.enum([
+  "read",
+  "publish",
+  "inventory",
+  "points",
+  "ingest",
+  "enroll"
+]);
+var automationKeyInputSchema = z19.object({
+  name: z19.string().trim().min(1).max(80),
+  permissions: z19.array(automationKeyPermissionSchema).min(1),
+  /** The projects it reaches. Omit it for every project of the organization, current and future. */
+  projects: z19.array(identifier).min(1).max(100).optional(),
+  /** Whether it may create projects. A project it creates joins its `projects` list. */
+  createProjects: z19.boolean().default(false),
+  /** Days until the first secret expires. Omit it for a key that never expires. */
+  expiresInDays: z19.number().int().min(1).max(3650).optional()
+}).strict();
+var automationKeySchema = z19.object({
+  id: z19.string().uuid(),
+  organization: z19.string(),
+  name: z19.string(),
+  permissions: permissionListSchema,
+  /** The projects it reaches; null for every project of the organization. */
+  projects: z19.array(z19.string()).nullable(),
+  createProjects: z19.boolean(),
+  /** The Clerk user ID of the administrator who created it. */
+  createdBy: z19.string(),
+  createdAt: z19.number(),
+  /** The latest use of any of its secrets, revoked ones included; null when none was used. */
+  lastUsedAt: z19.number().nullable(),
+  /** Its working secrets, oldest first. Any of them authenticates the key. */
+  secrets: z19.array(credentialSecretSchema)
+});
+var issuedAutomationKeySchema = automationKeySchema.extend({
+  secret: z19.string().uuid(),
+  token: z19.string()
 });
-var teamSchema = z18.array(
-  z18.object({ id: z18.string(), label: z18.string() })
+var teamSchema = z19.array(
+  z19.object({ id: z19.string(), label: z19.string() })
 );
-var memberLookupSchema = z18.object({
-  provider: z18.string().min(1).max(200),
-  subject: z18.string().min(1).max(2048)
+var memberLookupSchema = z19.object({
+  provider: z19.string().min(1).max(200),
+  subject: z19.string().min(1).max(2048)
 }).strict();
-var booleanQuery = z18.union([
-  z18.boolean(),
-  z18.enum(["true", "false"]).transform((v) => v === "true")
+var booleanQuery = z19.union([
+  z19.boolean(),
+  z19.enum(["true", "false"]).transform((v) => v === "true")
 ]);
-var managedMemberQuerySchema = z18.strictObject({
-  q: z18.string().max(200).optional(),
+var managedMemberQuerySchema = z19.strictObject({
+  q: z19.string().max(200).optional(),
   needsReview: booleanQuery.optional(),
-  limit: z18.coerce.number().int().min(1).max(100).optional(),
+  limit: z19.coerce.number().int().min(1).max(100).optional(),
   cursor: pageCursorSchema.optional()
 });
-var managedMemberPageSchema = z18.object({
-  items: z18.array(memberSchema),
-  total: z18.number().int().nonnegative(),
-  nextCursor: z18.string().nullable()
+var managedMemberPageSchema = z19.object({
+  items: z19.array(memberSchema),
+  total: z19.number().int().nonnegative(),
+  nextCursor: z19.string().nullable()
 });
-var activeMemberMonthSchema = z18.object({
+var activeMemberMonthSchema = z19.object({
   /** `YYYY-MM`, in UTC. */
-  month: z18.string(),
-  activeMembers: z18.number().int().nonnegative()
+  month: z19.string(),
+  activeMembers: z19.number().int().nonnegative()
 });
 var activeMemberUsageSchema = activeMemberMonthSchema.extend({
-  plan: z18.string(),
-  limit: z18.number().int().nonnegative().nullable(),
-  history: z18.array(activeMemberMonthSchema)
+  plan: z19.string(),
+  limit: z19.number().int().nonnegative().nullable(),
+  history: z19.array(activeMemberMonthSchema)
 });
-var realPeopleInTestUsageSchema = z18.object({
-  realPeople: z18.number().int().nonnegative(),
-  plan: z18.string(),
-  limit: z18.number().int().nonnegative(),
-  enforced: z18.boolean()
+var realPeopleInTestUsageSchema = z19.object({
+  realPeople: z19.number().int().nonnegative(),
+  plan: z19.string(),
+  limit: z19.number().int().nonnegative(),
+  enforced: z19.boolean()
 });
 var projectMetricsSchema = metricsSchema.extend({
-  completionsByQuest: z18.array(
-    z18.object({ quest: identifier, completions: z18.number() })
+  completionsByQuest: z19.array(
+    z19.object({ quest: identifier, completions: z19.number() })
   )
 });
-var pageLimit = z18.coerce.number().int().min(1).max(100).optional();
-var managedAttemptQuerySchema = z18.strictObject({
-  q: z18.string().max(200).optional(),
+var pageLimit = z19.coerce.number().int().min(1).max(100).optional();
+var managedAttemptQuerySchema = z19.strictObject({
+  q: z19.string().max(200).optional(),
   quest: identifier.optional(),
-  status: z18.string().min(1).max(50).optional(),
+  status: z19.string().min(1).max(50).optional(),
   limit: pageLimit,
   cursor: pageCursorSchema.optional()
 });
-var managedAttemptPageSchema = z18.object({
-  items: z18.array(attemptSchema),
-  releases: z18.array(publishedReleaseSchema),
-  people: z18.array(personSchema),
-  total: z18.number().int().nonnegative(),
-  nextCursor: z18.string().nullable()
+var managedAttemptPageSchema = z19.object({
+  items: z19.array(attemptSchema),
+  releases: z19.array(publishedReleaseSchema),
+  people: z19.array(personSchema),
+  total: z19.number().int().nonnegative(),
+  nextCursor: z19.string().nullable()
 });
-var managedReleaseQuerySchema = z18.strictObject({
+var managedReleaseQuerySchema = z19.strictObject({
   quest: identifier.optional(),
   limit: pageLimit,
   cursor: pageCursorSchema.optional()
 });
-var managedReleasePageSchema = z18.object({
-  items: z18.array(publishedReleaseSchema),
-  nextCursor: z18.string().nullable()
+var managedReleasePageSchema = z19.object({
+  items: z19.array(publishedReleaseSchema),
+  nextCursor: z19.string().nullable()
 });
-var managedAttemptSchema = z18.object({
+var managedAttemptSchema = z19.object({
   attempt: attemptSchema,
   release: publishedReleaseSchema.nullable(),
-  events: z18.array(eventSchema),
+  events: z19.array(eventSchema),
+  supersededBy: z19.string().nullable().optional(),
   person: personSchema
 });
-var managedEntitlementQuerySchema = z18.strictObject({
-  q: z18.string().max(200).optional(),
-  status: z18.string().min(1).max(50).optional(),
+var managedEntitlementQuerySchema = z19.strictObject({
+  q: z19.string().max(200).optional(),
+  status: z19.string().min(1).max(50).optional(),
   limit: pageLimit,
   cursor: pageCursorSchema.optional()
 });
-var managedEntitlementPageSchema = z18.object({
-  items: z18.array(entitlementSchema),
-  people: z18.array(personSchema),
-  total: z18.number().int().nonnegative(),
-  nextCursor: z18.string().nullable()
+var managedEntitlementPageSchema = z19.object({
+  items: z19.array(entitlementSchema),
+  people: z19.array(personSchema),
+  total: z19.number().int().nonnegative(),
+  nextCursor: z19.string().nullable()
 });
-var managedEntitlementSchema = z18.object({
+var managedEntitlementSchema = z19.object({
   entitlement: entitlementSchema,
   person: personSchema
 });
 var managedStockItemSchema = inventorySchema.extend({
-  offers: z18.array(identifier)
+  offers: z19.array(identifier)
 });
-var auditQuerySchema = z18.strictObject({
-  category: z18.enum(["reviews", "rewards", "configuration"]).optional(),
-  q: z18.string().max(200).optional(),
+var auditQuerySchema = z19.strictObject({
+  category: z19.enum(["reviews", "rewards", "configuration"]).optional(),
+  q: z19.string().max(200).optional(),
   limit: pageLimit,
   cursor: pageCursorSchema.optional()
 });
 var auditListQuerySchema = auditQuerySchema.extend({
-  category: z18.enum(["reviews", "rewards", "configuration", "test-members"]).optional()
+  category: z19.enum(["reviews", "rewards", "configuration", "test-members"]).optional()
 });
 var accessHistoryQuerySchema = auditQuerySchema.omit({
   category: true
 });
-var auditPageSchema = z18.object({
-  items: z18.array(auditRecordSchema),
-  total: z18.number().int().nonnegative(),
-  nextCursor: z18.string().nullable()
+var auditPageSchema = z19.object({
+  items: z19.array(auditRecordSchema),
+  total: z19.number().int().nonnegative(),
+  nextCursor: z19.string().nullable()
 });
-var verifiedPassSchema = z18.object({
+var verifiedPassSchema = z19.object({
   provider: identifier,
   event: identifier,
-  subject: z18.string().min(1).max(2048),
+  subject: z19.string().min(1).max(2048),
   member: identifier,
   quest: identifier
 }).strict();
@@ -2729,7 +3055,7 @@ function clientFailure(error) {
   return new ManagementError({
     kind: "client",
     code: ManagementErrorCode.InvalidInput,
-    message: error instanceof z18.ZodError ? `Invalid management request: ${z18.prettifyError(error)}` : error instanceof Error ? error.message : "Invalid management request",
+    message: error instanceof z19.ZodError ? `Invalid management request: ${z19.prettifyError(error)}` : error instanceof Error ? error.message : "Invalid management request",
     cause: error
   });
 }
@@ -2767,7 +3093,7 @@ function managementClient(options) {
       call
     );
   }
-  const ok = z18.object({ ok: z18.literal(true) });
+  const ok = z19.object({ ok: z19.literal(true) });
   function pointHistory(member, ledger, query = {}, call) {
     return get(
       `/points/${identifier.parse(member)}/${identifier.parse(ledger)}/history${queryString(typeof query === "number" ? { before: query } : pageQuerySchema.parse(query))}`,
@@ -2837,6 +3163,31 @@ function managementClient(options) {
       typeof target === "string" ? call : inputOrCall
     );
   }
+  function setAppScheduleState(state3, inputOrCall, call) {
+    const reasoned = call !== void 0 || inputOrCall !== void 0 && "reason" in inputOrCall;
+    return request(
+      "/schedules/state",
+      appScheduleListSchema,
+      appScheduleStateInputSchema.parse({
+        ...reasoned ? inputOrCall : {},
+        state: state3
+      }),
+      "PUT",
+      reasoned ? call : inputOrCall
+    );
+  }
+  function archiveManagedGroup(verb) {
+    function change(group, inputOrCall, call) {
+      const reasoned = call !== void 0 || inputOrCall !== void 0 && "reason" in inputOrCall;
+      return post(
+        `/groups/${groupKey(group)}/${verb}`,
+        managedGroupSchema,
+        reasoned ? groupArchiveInputSchema.parse(inputOrCall) : {},
+        reasoned ? call : inputOrCall
+      );
+    }
+    return change;
+  }
   function archiveManagedPointLedger(ledger, inputOrCall, call) {
     const input = inputOrCall && "reason" in inputOrCall ? resourceArchiveInputSchema.parse(withActionId(inputOrCall)) : {};
     const options2 = inputOrCall && "reason" in inputOrCall ? call : inputOrCall;
@@ -2852,7 +3203,7 @@ function managementClient(options) {
     const input = isInput ? inputOrCall ?? {} : {};
     const options2 = isInput ? call : inputOrCall;
     return post(
-      `/webhooks/${z18.string().uuid().parse(id)}/rotate-secret`,
+      `/webhooks/${z19.string().uuid().parse(id)}/rotate-secret`,
       webhookSecretSchema,
       webhookRotateInputSchema.parse(withActionId(input)),
       options2
@@ -2900,8 +3251,8 @@ function managementClient(options) {
       }
       return exchange(
         path,
-        z18.object({
-          status: z18.number(),
+        z19.object({
+          status: z19.number(),
           operationId: identifier.optional(),
           result: schema
         }),
@@ -2914,22 +3265,25 @@ function managementClient(options) {
     },
     trackers: {
       /**
-       * Creates an X search tracker as data in test, with the same validation as `defineTracker`;
-       * requires `publish`. Its first collection searches from `window.start`. Live refuses it with
-       * `promotion-required`: the tracker reaches live through a promotion. A key a deployment
-       * already publishes is refused with `tracker-owned-by-code`.
+       * Creates a tracker as data in test, with the same validation as `defineTracker`; requires
+       * `publish`. Name its source with `source`, such as `{ kind: "discord-messages", text: true }`,
+       * or an X search with `query` alone. An X tracker's first collection searches from
+       * `window.start`. Live refuses it with `promotion-required`: the tracker reaches live through
+       * a promotion. A key a deployment already publishes is refused with `tracker-owned-by-code`.
        */
       create: (input, call) => create(
         "/trackers",
         trackerStatusSchema,
-        trackerCreateSchema,
+        managedTrackerCreateSchema,
         input,
         call
       ),
       /**
-       * Changes a tracker created with `create`, in test; fields left out keep their value. A new
-       * query or window collects from now on and never searches the past. A tracker defined in
-       * code changes only through a deployment (`tracker-owned-by-code`).
+       * Changes a tracker created with `create`, in test; fields left out keep their value. `source`
+       * replaces the source's settings but never its kind (`validation-failed`). A new query or
+       * window collects from now on and never searches the past, and turning Discord message text
+       * off erases the text already stored. A tracker defined in code changes only through a
+       * deployment (`tracker-owned-by-code`).
        */
       update: (reference, input, call) => post(
         `/trackers/${identifier.parse(reference)}/update`,
@@ -2956,7 +3310,7 @@ function managementClient(options) {
         call
       ),
       ...resourceArchiveMethods("tracker"),
-      list: (call) => get("/trackers", z18.array(trackerStatusSchema), call),
+      list: (call) => get("/trackers", z19.array(trackerStatusSchema), call),
       get: (reference, call) => get(
         `/trackers/${identifier.parse(reference)}`,
         trackerStatusSchema,
@@ -3072,7 +3426,7 @@ function managementClient(options) {
         engagementPublishSchema.parse(withActionId(input)),
         call
       ),
-      list: (call) => get("/engagement", z18.array(engagementRuleSchema), call),
+      list: (call) => get("/engagement", z19.array(engagementRuleSchema), call),
       page: (input, call) => get(
         "/engagement/history" + queryString(engagementPageQuerySchema.parse(input)),
         engagementPageSchema,
@@ -3092,7 +3446,7 @@ function managementClient(options) {
       )
     },
     badges: {
-      list: (call) => get("/badges", z18.array(managedBadgeSchema), call),
+      list: (call) => get("/badges", z19.array(managedBadgeSchema), call),
       create: (input, call) => create("/badges", managedBadgeSchema, createBadgeSchema, input, call),
       update: (badge, input, call) => {
         const body = badgePropertiesSchema.extend(badgeMutationSchema.shape).parse(withActionId(input));
@@ -3135,7 +3489,7 @@ function managementClient(options) {
     },
     pointLedgers: {
       unarchive: (ledger, input, call) => archiveResource("point-ledger", ledger, false, input, call),
-      list: (call) => get("/point-ledgers", z18.array(managedPointLedgerSchema), call),
+      list: (call) => get("/point-ledgers", z19.array(managedPointLedgerSchema), call),
       /**
        * Creates a point ledger, with a stable `key` when code refers to it; requires `publish`. In
        * live, only a person in Console can create one.
@@ -3165,7 +3519,7 @@ function managementClient(options) {
     },
     points: {
       /** @deprecated Use `pointLedgers.list()`, which reads the same ledgers. Removed in 2.0.0. */
-      ledgers: (call) => get("/point-ledgers", z18.array(managedPointLedgerSchema), call),
+      ledgers: (call) => get("/point-ledgers", z19.array(managedPointLedgerSchema), call),
       /** @deprecated Use `pointLedgers.create(input)`. Removed in 2.0.0. */
       createLedger: createPointLedger,
       /**
@@ -3203,7 +3557,7 @@ function managementClient(options) {
         referralHistorySchema,
         call
       ),
-      list: (call) => get("/referrals", z18.array(publishedReferralSchema), call),
+      list: (call) => get("/referrals", z19.array(publishedReferralSchema), call),
       participants: referralParticipants,
       /**
        * Suspends or restores a member's referral relationship, with a reason; requires `publish`.
@@ -3266,7 +3620,7 @@ function managementClient(options) {
     },
     leaderboards: {
       ...resourceArchiveMethods("leaderboard"),
-      list: (call) => get("/leaderboards", z18.array(publishedLeaderboardSchema), call),
+      list: (call) => get("/leaderboards", z19.array(publishedLeaderboardSchema), call),
       standings: (board, input = {}, call) => {
         const query = leaderboardQuerySchema.parse(input);
         return get(
@@ -3280,13 +3634,13 @@ function managementClient(options) {
       },
       history: (board, call) => get(
         `/leaderboards/${identifier.parse(board)}/history`,
-        z18.array(publishedLeaderboardSchema),
+        z19.array(publishedLeaderboardSchema),
         call
       ),
       /** Current members of the board's exclusion group (`exclusionGroup`), by member ID. */
       exclusions: (board, call) => get(
         `/leaderboards/${identifier.parse(board)}/exclusions`,
-        z18.array(z18.object({ member: identifier })),
+        z19.array(z19.object({ member: identifier })),
         call
       ),
       /**
@@ -3373,7 +3727,7 @@ function managementClient(options) {
       ),
       settlements: (board, call) => get(
         `/leaderboards/${identifier.parse(board)}/settlements`,
-        z18.array(leaderboardSettlementSummarySchema),
+        z19.array(leaderboardSettlementSummarySchema),
         call
       ),
       settlement: (settlement, call) => get(
@@ -3411,20 +3765,11 @@ function managementClient(options) {
       ),
       /**
        * Freezes a group's membership. Its members still count for prerequisites, leaderboards
-       * and referral rules.
+       * and referral rules. Pass `{ reason }` to record why in the audit log.
        */
-      archive: (group, call) => post(
-        `/groups/${groupKey(group)}/archive`,
-        managedGroupSchema,
-        {},
-        call
-      ),
-      unarchive: (group, call) => post(
-        `/groups/${groupKey(group)}/unarchive`,
-        managedGroupSchema,
-        {},
-        call
-      ),
+      archive: archiveManagedGroup("archive"),
+      /** Lets a group's membership change again, with an optional `{ reason }` for the audit log. */
+      unarchive: archiveManagedGroup("unarchive"),
       /** A group's current members by member ID. Pass `nextCursor` back as `cursor`. */
       members: (group, query = {}, call) => get(
         `/groups/${groupKey(group)}/members${queryString(groupPageQuerySchema.parse(query))}`,
@@ -3458,7 +3803,7 @@ function managementClient(options) {
        *
        * @deprecated Use `history`, which pages by `cursor` and `nextCursor`. Removed in 2.0.0.
        */
-      list: (call) => get("/deployments", z18.array(deploymentRecordSchema), call),
+      list: (call) => get("/deployments", z19.array(deploymentRecordSchema), call),
       /**
        * The project environment's deployments, newest first, one page at a time, with the two
        * newest published deployments beside every page. Pass a page's `nextCursor` back as
@@ -3641,14 +3986,29 @@ function managementClient(options) {
         call
       ),
       /** The Stripe customer portal for the organization's cards, invoices and billing details. */
-      portal: (call) => post("/billing/portal", billingSessionSchema, {}, call)
+      portal: (call) => post("/billing/portal", billingSessionSchema, {}, call),
+      /**
+       * The organization's billing for any of its members: each project's plan and subscription,
+       * the Free projects against their limit, the shared free AI allowance and the trial.
+       */
+      organization: (call) => get("/organization/billing", organizationBillingSchema, call),
+      /**
+       * The customer portal, as `portal()` opens it, returning to the organization's billing page in
+       * Console rather than a project's.
+       */
+      organizationPortal: (call) => post("/organization/billing/portal", billingSessionSchema, {}, call)
     },
     /** What the project uses against its plan; requires `read` permission. */
     usage: {
       /** Live active members this UTC month, the plan's limit, and the previous six months. */
       activeMembers: (call) => get("/usage/active-members", activeMemberUsageSchema, call),
       /** Real people in the test environment, against the plan's limit. */
-      realPeopleInTest: (call) => get("/usage/real-people-in-test", realPeopleInTestUsageSchema, call)
+      realPeopleInTest: (call) => get("/usage/real-people-in-test", realPeopleInTestUsageSchema, call),
+      /**
+       * The project's plan and where it came from, whether it may serve live, the organization's
+       * trial, the AI builder balance and the Stripe subscription.
+       */
+      plan: (call) => get("/usage/plan", projectPlanSchema, call)
     },
     /** The project's headline counts; requires `read` permission. */
     metrics: {
@@ -3811,6 +4171,24 @@ function managementClient(options) {
         staffDecisionSchema.parse(withActionId(input)),
         call
       ),
+      /**
+       * Accepts a rejected attempt anyway, with a reason, for any member; requires `review`
+       * permission. The evaluator's or a reviewer's rejection stays in the attempt's events, its
+       * retry cooldown ends, and the acceptance pays as a reviewer's approval would, with the
+       * normal accepted events and webhook. Only the member's latest attempt on a quest that isn't
+       * archived (409 `attempt-superseded`, `quest-archived`); a cap the acceptance would break is
+       * refused, not bypassed (409 `completion-cooldown`, `budget-exhausted`, `completion-revoked`,
+       * `already-completed`). Replaying the action ID returns the first result.
+       */
+      acceptAnyway: (input, call) => {
+        const { attempt, ...body } = input;
+        return post(
+          `/attempts/${identifier.parse(attempt)}/accept-anyway`,
+          attemptSchema,
+          acceptAnywaySchema.parse(withActionId(body)),
+          call
+        );
+      },
       /** Evaluates a failed attempt again under a new generation; requires `review` permission. */
       retry: (attempt, call) => post(
         `/attempts/${identifier.parse(attempt)}/retry`,
@@ -3850,6 +4228,26 @@ function managementClient(options) {
           completionRevokeSchema.parse(withActionId(body)),
           call
         );
+      },
+      /**
+       * Restores a revoked completion with a reason; requires `review` permission. In one
+       * transaction it clears the revocation and re-applies what the revocation recorded: awards
+       * back the points it reversed (not those it could not reverse), re-awards its badges, re-adds
+       * its group memberships, restores the tiered rewards it voided and raises those it lowered,
+       * queues its stopped Discord role grants again, re-qualifies its referrals, and restores a
+       * streak milestone. Budgets stay spent. Fails with 409 `completion-not-revoked` when the
+       * completion counts already, and with 409 `occurrence-taken` when the revocation freed the
+       * occurrence and another completion holds it now. Replaying the action ID returns the first
+       * result.
+       */
+      restore: (input, call) => {
+        const { completion, ...body } = input;
+        return post(
+          `/completions/${identifier.parse(completion)}/restore`,
+          completionRestorationSchema,
+          completionRestoreSchema.parse(withActionId(body)),
+          call
+        );
       }
     },
     /** Staff handover of a member's reward entitlement; requires `handover` permission. */
@@ -3911,6 +4309,20 @@ function managementClient(options) {
         entitlementCorrectionSchema.parse(withActionId(input)),
         call
       ),
+      /**
+       * Restores an entitlement an operator voided, at the `revision` the operator saw, with a
+       * reason. It is available again at the tier an accepted completion still earns, with any
+       * referral review the void settled. Fails with 409 `entitlement-status` when it isn't void;
+       * when a completion revocation voided it, or no accepted completion still earns it, with the
+       * revoked `completion` to restore instead; when canceling a redemption voided it; and for a
+       * referral reward voided before voids kept their referral reviews.
+       */
+      restore: (entitlement, input, call) => post(
+        `/entitlements/${identifier.parse(entitlement)}/restore`,
+        entitlementSchema,
+        entitlementCorrectionSchema.parse(withActionId(input)),
+        call
+      ),
       /**
        * Corrects a collection recorded by mistake, at the `revision` the operator saw, with a
        * reason. The entitlement is available again and any pickup size it held returns to stock.
@@ -3938,7 +4350,7 @@ function managementClient(options) {
     },
     operations: {
       /** Every paused or resumed operation: redemptions and each quest's participation; requires `read`. */
-      list: (call) => get("/operations", z18.array(operationSchema), call),
+      list: (call) => get("/operations", z19.array(operationSchema), call),
       /**
        * Pauses or resumes redemptions or one quest's participation, against the `revision` the
        * operator saw, with a reason; requires `publish` permission.
@@ -3996,7 +4408,7 @@ function managementClient(options) {
         call
       ),
       /** Every stock item with its counts and the offers that sell it; requires `read` permission. */
-      list: (call) => get("/stock-items", z18.array(managedStockItemSchema), call),
+      list: (call) => get("/stock-items", z19.array(managedStockItemSchema), call),
       createItem: (input, call) => create(
         "/stock-items",
         stockItemSchema,
@@ -4011,7 +4423,7 @@ function managementClient(options) {
         stockInputSchema.parse(withActionId(input)),
         call
       ),
-      catalog: (call) => get("/pickup-inventory", z18.array(pickupCatalogSchema), call),
+      catalog: (call) => get("/pickup-inventory", z19.array(pickupCatalogSchema), call),
       configure: (input, call) => post(
         "/pickup-inventory",
         pickupCatalogSchema,
@@ -4037,7 +4449,7 @@ function managementClient(options) {
         offerControlSchema.omit({ enabled: true }).parse(withActionId(input)),
         call
       ),
-      list: (call) => get("/offers", z18.array(offerSchema), call),
+      list: (call) => get("/offers", z19.array(offerSchema), call),
       /**
        * Every redemption, or one member's, newest first, in one unbounded response.
        *
@@ -4045,7 +4457,7 @@ function managementClient(options) {
        */
       redemptions: (input = {}, call) => get(
         `/redemptions${queryString({ member: input.member })}`,
-        z18.array(redemptionSchema),
+        z19.array(redemptionSchema),
         call
       ),
       /** Pauses or resumes an offer at the revision the operator saw. */
@@ -4066,7 +4478,7 @@ function managementClient(options) {
     },
     readiness: (call) => get("/readiness", readinessSchema, call),
     access: (call) => get("/access", accessSchema, call),
-    createProject: (input, call) => create("/projects", projectSchema, projectInputSchema, input, call),
+    createProject: (input, call) => create("/projects", projectSchema, projectCreateInputSchema, input, call),
     updateProject: (input, call) => request(
       "/project",
       projectSchema,
@@ -4094,7 +4506,7 @@ function managementClient(options) {
      * them; API keys and project-scoped playground sessions cannot.
      */
     tokens: {
-      list: (call) => get("/tokens", z18.array(tokenSchema), call),
+      list: (call) => get("/tokens", z19.array(tokenSchema), call),
       /**
        * Issues a key for one project and environment, limited to permissions the caller holds
        * there. The secret `token` is in this response only.
@@ -4102,14 +4514,14 @@ function managementClient(options) {
       create: (input, call) => post("/tokens", issuedTokenSchema, tokenInputSchema.parse(input), call),
       /** Replace a personal key's ingestion restriction without changing its secret. */
       scope: (id, input, call) => request(
-        `/tokens/${encodeURIComponent(z18.string().min(1).parse(id))}/scope`,
+        `/tokens/${encodeURIComponent(z19.string().min(1).parse(id))}/scope`,
         tokenSchema,
         tokenScopeInputSchema.parse(input),
         "PUT",
         call
       ),
       revoke: (id, call) => request(
-        `/tokens/${encodeURIComponent(z18.string().min(1).parse(id))}`,
+        `/tokens/${encodeURIComponent(z19.string().min(1).parse(id))}`,
         ok,
         void 0,
         "DELETE",
@@ -4121,7 +4533,7 @@ function managementClient(options) {
      * environment, owned by no person. Only an organization administrator in Console manages them.
      */
     serviceKeys: {
-      list: (call) => get("/service-keys", z18.array(serviceKeySchema), call),
+      list: (call) => get("/service-keys", z19.array(serviceKeySchema), call),
       /** The secret `token` is in this response only. */
       create: (input, call) => post(
         "/service-keys",
@@ -4134,14 +4546,14 @@ function managementClient(options) {
        * them with `revokeSecret`. The new `token` is in this response only.
        */
       addSecret: (id, input = {}, call) => post(
-        `/service-keys/${z18.string().uuid().parse(id)}/secrets`,
+        `/service-keys/${z19.string().uuid().parse(id)}/secrets`,
         issuedServiceKeySchema,
         credentialSecretInputSchema.parse(input),
         call
       ),
       /** Stops one secret working. A key's last secret cannot be revoked; revoke the key instead. */
       revokeSecret: (id, secret, call) => request(
-        `/service-keys/${z18.string().uuid().parse(id)}/secrets/${z18.string().uuid().parse(secret)}`,
+        `/service-keys/${z19.string().uuid().parse(id)}/secrets/${z19.string().uuid().parse(secret)}`,
         serviceKeySchema,
         void 0,
         "DELETE",
@@ -4149,8 +4561,49 @@ function managementClient(options) {
       ),
       /** Deletes the key; every secret stops working. */
       revoke: (id, call) => request(
-        `/service-keys/${z18.string().uuid().parse(id)}`,
-        z18.null(),
+        `/service-keys/${z19.string().uuid().parse(id)}`,
+        z19.null(),
+        void 0,
+        "DELETE",
+        call
+      )
+    },
+    /**
+     * Organization automation keys (`dak_`): credentials for a headless agent or CI across the
+     * organization's projects, owned by no person. They write in test only. Only an organization
+     * administrator in Console manages them.
+     */
+    automationKeys: {
+      list: (call) => get("/automation-keys", z19.array(automationKeySchema), call),
+      /** The secret `token` is in this response only. */
+      create: (input, call) => post(
+        "/automation-keys",
+        issuedAutomationKeySchema,
+        automationKeyInputSchema.parse(input),
+        call
+      ),
+      /**
+       * Rotation: issues another secret. The key's other secrets keep working until you revoke
+       * them with `revokeSecret`. The new `token` is in this response only.
+       */
+      addSecret: (id, input = {}, call) => post(
+        `/automation-keys/${z19.string().uuid().parse(id)}/secrets`,
+        issuedAutomationKeySchema,
+        credentialSecretInputSchema.parse(input),
+        call
+      ),
+      /** Stops one secret working. A key's last secret cannot be revoked; revoke the key instead. */
+      revokeSecret: (id, secret, call) => request(
+        `/automation-keys/${z19.string().uuid().parse(id)}/secrets/${z19.string().uuid().parse(secret)}`,
+        automationKeySchema,
+        void 0,
+        "DELETE",
+        call
+      ),
+      /** Deletes the key; every secret stops working. */
+      revoke: (id, call) => request(
+        `/automation-keys/${z19.string().uuid().parse(id)}`,
+        z19.null(),
         void 0,
         "DELETE",
         call
@@ -4158,7 +4611,7 @@ function managementClient(options) {
     },
     /** Who holds which roles on the client's project; organization administrators only. */
     grants: {
-      list: (call) => get("/grants", z18.array(grantRecordSchema), call),
+      list: (call) => get("/grants", z19.array(grantRecordSchema), call),
       /** Replaces one person's roles and environments on the project. The audit log records it. */
       set: (input, call) => request(
         "/grants",
@@ -4175,7 +4628,7 @@ function managementClient(options) {
     /** Signed activity notifications for one project/environment; writes require publish permission. */
     webhooks: {
       state: (id, call) => get(
-        `/webhooks/${z18.string().uuid().parse(id)}/state`,
+        `/webhooks/${z19.string().uuid().parse(id)}/state`,
         webhookEndpointStateSchema,
         call
       ),
@@ -4186,24 +4639,24 @@ function managementClient(options) {
         call
       ),
       delete: (id, input, call) => post(
-        `/webhooks/${z18.string().uuid().parse(id)}/delete`,
+        `/webhooks/${z19.string().uuid().parse(id)}/delete`,
         webhookEndpointStateSchema,
         webhookDeleteInputSchema.parse(withActionId(input)),
         call
       ),
       pause: (id, input = {}, call) => post(
-        `/webhooks/${z18.string().uuid().parse(id)}/pause`,
+        `/webhooks/${z19.string().uuid().parse(id)}/pause`,
         webhookEndpointSchema,
         webhookControlInputSchema.parse(withActionId(input)),
         call
       ),
       resume: (id, input = {}, call) => post(
-        `/webhooks/${z18.string().uuid().parse(id)}/resume`,
+        `/webhooks/${z19.string().uuid().parse(id)}/resume`,
         webhookEndpointSchema,
         webhookControlInputSchema.parse(withActionId(input)),
         call
       ),
-      list: (call) => get("/webhooks", z18.array(webhookEndpointSchema), call),
+      list: (call) => get("/webhooks", z19.array(webhookEndpointSchema), call),
       /** Pass an `actionId` to recover the endpoint and its secret after a lost answer. */
       create: (input, call) => post(
         "/webhooks",
@@ -4212,7 +4665,7 @@ function managementClient(options) {
         call
       ),
       update: (id, input, call) => request(
-        `/webhooks/${z18.string().uuid().parse(id)}`,
+        `/webhooks/${z19.string().uuid().parse(id)}`,
         webhookEndpointSchema,
         webhookUpdateSchema.parse(input),
         "PUT",
@@ -4220,19 +4673,19 @@ function managementClient(options) {
       ),
       /** @deprecated Use pause. Removed in 2.0.0. */
       disable: (id, call) => post(
-        `/webhooks/${z18.string().uuid().parse(id)}/disable`,
+        `/webhooks/${z19.string().uuid().parse(id)}/disable`,
         webhookEndpointSchema,
         {},
         call
       ),
       rotateSecret: rotateWebhookSecret,
       deliveries: (id, query = {}, call) => get(
-        `/webhooks/${z18.string().uuid().parse(id)}/deliveries${queryString(webhookQuerySchema.parse(query))}`,
+        `/webhooks/${z19.string().uuid().parse(id)}/deliveries${queryString(webhookQuerySchema.parse(query))}`,
         webhookDeliveryPageSchema,
         call
       ),
       replay: (id, delivery, call) => post(
-        `/webhooks/${z18.string().uuid().parse(id)}/deliveries/${z18.string().uuid().parse(delivery)}/replay`,
+        `/webhooks/${z19.string().uuid().parse(id)}/deliveries/${z19.string().uuid().parse(delivery)}/replay`,
         webhookDeliverySchema,
         {},
         call
@@ -4243,7 +4696,7 @@ function managementClient(options) {
      * environment. Organization administrators, from a Console session only.
      */
     identityIntegrations: {
-      list: (call) => get("/identity-integrations", z18.array(identityIntegrationSchema), call),
+      list: (call) => get("/identity-integrations", z19.array(identityIntegrationSchema), call),
       /** The secret `token` is in this response only. */
       create: (input, call) => post(
         "/identity-integrations",
@@ -4258,7 +4711,7 @@ function managementClient(options) {
        * @deprecated Use `addSecret`, then `revokeSecret` the old secret once your app uses the new one.
        */
       rotate: (id, call) => post(
-        `/identity-integrations/${z18.string().uuid().parse(id)}/rotate`,
+        `/identity-integrations/${z19.string().uuid().parse(id)}/rotate`,
         identityIntegrationSecretSchema,
         {},
         call
@@ -4268,7 +4721,7 @@ function managementClient(options) {
        * revoke them with `revokeSecret`. The new `token` is in this response only.
        */
       addSecret: (id, input = {}, call) => post(
-        `/identity-integrations/${z18.string().uuid().parse(id)}/secrets`,
+        `/identity-integrations/${z19.string().uuid().parse(id)}/secrets`,
         identityIntegrationSecretSchema,
         credentialSecretInputSchema.parse(input),
         call
@@ -4278,7 +4731,7 @@ function managementClient(options) {
        * revoked; disconnect the integration with `revoke` instead.
        */
       revokeSecret: (id, secret, call) => request(
-        `/identity-integrations/${z18.string().uuid().parse(id)}/secrets/${z18.string().uuid().parse(secret)}`,
+        `/identity-integrations/${z19.string().uuid().parse(id)}/secrets/${z19.string().uuid().parse(secret)}`,
         identityIntegrationSchema,
         void 0,
         "DELETE",
@@ -4286,7 +4739,7 @@ function managementClient(options) {
       ),
       /** Makes one secret never expire. */
       removeSecretExpiry: (id, secret, call) => request(
-        `/identity-integrations/${z18.string().uuid().parse(id)}/secrets/${z18.string().uuid().parse(secret)}/expiry`,
+        `/identity-integrations/${z19.string().uuid().parse(id)}/secrets/${z19.string().uuid().parse(secret)}/expiry`,
         identityIntegrationSchema,
         void 0,
         "DELETE",
@@ -4299,7 +4752,7 @@ function managementClient(options) {
        */
       kinds: (call) => get(
         "/identity-integrations/kinds",
-        z18.array(identityKindClaimSchema),
+        z19.array(identityKindClaimSchema),
         call
       ),
       /**
@@ -4307,8 +4760,8 @@ function managementClient(options) {
        * and keep attributing tracker records; unlink them on the member to stop that.
        */
       revoke: (id, call) => request(
-        `/identity-integrations/${z18.string().uuid().parse(id)}`,
-        z18.null(),
+        `/identity-integrations/${z19.string().uuid().parse(id)}`,
+        z19.null(),
         void 0,
         "DELETE",
         call
@@ -4359,7 +4812,7 @@ function managementClient(options) {
     resources: {
       list: (call) => get(
         "/resources",
-        z18.object({ resources: z18.array(managedResourceSchema) }),
+        z19.object({ resources: z19.array(managedResourceSchema) }),
         call
       ),
       /** @deprecated Use the resource archive/unarchive methods. Removed in 2.0.0. */
@@ -4399,6 +4852,12 @@ function managementClient(options) {
     ),
     /** Operations of the Discord role reward kind on assignments it delivered. */
     discordRoles: {
+      /**
+       * Every Discord role the project's reward deliveries grant in this environment, with the
+       * quests that requested it and its deliveries counted by status. Unlike `rewardDeliveries`,
+       * it covers the whole history, so a role granted only long ago still appears.
+       */
+      list: (call) => get("/reward-deliveries/roles", discordRoleRewardsSchema, call),
       /**
        * Hands the role assignment a delivery made to an external administrator or bot: Relay stops
        * removing it automatically, in every project and environment that shares the assignment.
@@ -4430,7 +4889,7 @@ function managementClient(options) {
         testMemberCreateSchema.parse(withActionId(input)),
         call
       ),
-      list: (call) => get("/test-members", z18.array(testMemberSchema), call),
+      list: (call) => get("/test-members", z19.array(testMemberSchema), call),
       history: (member, query = {}, call) => get(
         `/test-members/${identifier.parse(member)}/history${queryString(testMemberHistoryQuerySchema.parse(query))}`,
         testMemberHistorySchema,
@@ -4714,7 +5173,7 @@ function managementClient(options) {
       /** Who each member is: up to 100 distinct IDs; unknown IDs come back without accounts. */
       people: (members, call) => get(
         `/people${queryString({ ids: members.join(",") })}`,
-        z18.array(personSchema),
+        z19.array(personSchema),
         call
       ),
       /**
@@ -4724,7 +5183,7 @@ function managementClient(options) {
        */
       oauthAccounts: (member, call) => get(
         `/members/${encodeURIComponent(member)}/oauth-accounts`,
-        z18.array(managedOAuthAccountSchema),
+        z19.array(managedOAuthAccountSchema),
         call
       ),
       /**
@@ -4734,7 +5193,7 @@ function managementClient(options) {
        */
       unlinkOAuthAccount: (member, input, call) => post(
         `/members/${encodeURIComponent(member)}/oauth-accounts/unlink`,
-        z18.array(managedOAuthAccountSchema),
+        z19.array(managedOAuthAccountSchema),
         memberOAuthUnlinkInputSchema.parse(input),
         call
       ),
@@ -4760,6 +5219,27 @@ function managementClient(options) {
         memberTelegramUnlinkInputSchema.parse(input),
         call
       ),
+      /**
+       * The member's linked creator accounts, such as a YouTube channel; requires `read`
+       * permission. Creator accounts are not identity states in SDK 1.x, so they have this read
+       * and `unlinkCreatorAccount` of their own.
+       */
+      creatorAccounts: (member, call) => get(
+        `/members/${identifier.parse(member)}/creator-accounts`,
+        managedCreatorAccountsSchema,
+        call
+      ),
+      /**
+       * Unlinks the member's reviewed creator account in this project and environment; requires
+       * `review` permission. Relay stops reading it; records it authored stay, and the account
+       * stays bound to the member.
+       */
+      unlinkCreatorAccount: (member, input, call) => post(
+        `/members/${identifier.parse(member)}/creator-accounts/unlink`,
+        managedCreatorAccountsSchema,
+        memberCreatorAccountUnlinkInputSchema.parse(input),
+        call
+      ),
       /**
        * Unlinks a member's wallet from the project with a reason; requires `review` permission. The address stays bound to the member.
        *
@@ -4767,7 +5247,7 @@ function managementClient(options) {
        */
       unlinkWallet: (member, input, call) => post(
         `/members/${encodeURIComponent(member)}/wallets/unlink`,
-        z18.array(managedWalletSchema),
+        z19.array(managedWalletSchema),
         memberWalletUnlinkInputSchema.parse(input),
         call
       ),
@@ -4780,7 +5260,7 @@ function managementClient(options) {
        */
       unlinkIdentity: (member, input, call) => post(
         `/members/${encodeURIComponent(member)}/identities/unlink`,
-        z18.array(managedMemberIdentitySchema),
+        z19.array(managedMemberIdentitySchema),
         memberIdentityChangeInputSchema.parse(input),
         call
       ),
@@ -4791,7 +5271,7 @@ function managementClient(options) {
        */
       relinkIdentity: (member, input, call) => post(
         `/members/${encodeURIComponent(member)}/identities/relink`,
-        z18.array(managedMemberIdentitySchema),
+        z19.array(managedMemberIdentitySchema),
         memberIdentityChangeInputSchema.parse(input),
         call
       ),
@@ -4803,7 +5283,7 @@ function managementClient(options) {
        */
       setWalletSignIn: (member, input, call) => post(
         `/members/${encodeURIComponent(member)}/wallets/sign-in`,
-        z18.array(managedWalletSchema),
+        z19.array(managedWalletSchema),
         memberWalletSignInInputSchema.parse(input),
         call
       )
@@ -4885,13 +5365,8 @@ function managementClient(options) {
         {},
         call
       ),
-      setState: (state3, call) => request(
-        "/schedules/state",
-        appScheduleListSchema,
-        { state: appScheduleStateSchema.parse(state3) },
-        "PUT",
-        call
-      ),
+      /** Activates, pauses or archives the project's schedules, with an optional audited reason. */
+      setState: setAppScheduleState,
       recover: (name, input, call) => post(
         `/schedules/${appScheduleNameSchema.parse(name)}/recover`,
         appScheduleListSchema,
@@ -4927,7 +5402,7 @@ function managementClient(options) {
         `/storage/sql/${appSecretNameSchema.parse(name)}/cell?${new URLSearchParams(
           {
             table,
-            row: String(z18.number().int().min(0).parse(options2.row)),
+            row: String(z19.number().int().min(0).parse(options2.row)),
             column: options2.column,
             ...options2.cursor === void 0 ? {} : { cursor: pageCursorSchema.parse(options2.cursor) }
           }
@@ -5039,7 +5514,7 @@ function managementClient(options) {
        * Each quest's current release, the most recently published first, archived quests
        * included; requires `read` permission.
        */
-      list: (call) => get("/quests/list", z18.array(publishedReleaseSchema), call),
+      list: (call) => get("/quests/list", z19.array(publishedReleaseSchema), call),
       /** Pending and exhausted asynchronous balance checks. Requires read. */
       automaticScheduling: (query = {}, call) => get(
         `/quests/automatic-scheduling${queryString(automaticSchedulingQuerySchema.parse(query))}`,
@@ -5084,7 +5559,7 @@ function managementClient(options) {
        */
       submissions: (member, call) => get(
         `/members/${encodeURIComponent(member)}/quest-submissions`,
-        z18.object({ items: z18.array(questSubmissionSchema) }),
+        z19.object({ items: z19.array(questSubmissionSchema) }),
         call
       ),
       /**
@@ -5217,9 +5692,15 @@ var managementResponseSchemas = lazyResponseReaders({
   get billingSessionSchema() {
     return knownResponse(billingSessionSchema);
   },
+  get organizationBillingSchema() {
+    return knownResponse(organizationBillingSchema);
+  },
   get projectBillingSchema() {
     return knownResponse(projectBillingSchema);
   },
+  get projectPlanSchema() {
+    return knownResponse(projectPlanSchema);
+  },
   get realPeopleInTestUsageSchema() {
     return knownResponse(realPeopleInTestUsageSchema);
   },
@@ -5337,6 +5818,9 @@ var managementResponseSchemas = lazyResponseReaders({
   get completionRevocationSchema() {
     return knownResponse(completionRevocationSchema);
   },
+  get completionRestorationSchema() {
+    return knownResponse(completionRestorationSchema);
+  },
   get contentPerformancePageSchema() {
     return knownResponse(contentPerformancePageSchema);
   },
@@ -5361,6 +5845,9 @@ var managementResponseSchemas = lazyResponseReaders({
   get deploymentResultSchema() {
     return knownResponse(deploymentResultSchema);
   },
+  get discordRoleRewardsSchema() {
+    return knownResponse(discordRoleRewardsSchema);
+  },
   get engagementBoundaryPageSchema() {
     return knownResponse(engagementBoundaryPageSchema);
   },
@@ -5412,6 +5899,12 @@ var managementResponseSchemas = lazyResponseReaders({
   get issuedServiceKeySchema() {
     return knownResponse(issuedServiceKeySchema);
   },
+  get automationKeySchema() {
+    return knownResponse(automationKeySchema);
+  },
+  get issuedAutomationKeySchema() {
+    return knownResponse(issuedAutomationKeySchema);
+  },
   get leaderboardPageSchema() {
     return knownResponse(leaderboardPageSchema);
   },
@@ -5463,6 +5956,9 @@ var managementResponseSchemas = lazyResponseReaders({
   get managedTelegramAccountSchema() {
     return knownResponse(managedTelegramAccountSchema);
   },
+  get managedCreatorAccountsSchema() {
+    return knownResponse(managedCreatorAccountsSchema);
+  },
   get telegramChatsSchema() {
     return knownResponse(telegramChatsSchema);
   },
@@ -5684,9 +6180,15 @@ var managementResponses = lazyResponseReaders({
   get billingSessionSchema() {
     return responseSchema(billingSessionSchema);
   },
+  get organizationBillingSchema() {
+    return responseSchema(organizationBillingSchema);
+  },
   get projectBillingSchema() {
     return responseSchema(projectBillingSchema);
   },
+  get projectPlanSchema() {
+    return responseSchema(projectPlanSchema);
+  },
   get realPeopleInTestUsageSchema() {
     return responseSchema(realPeopleInTestUsageSchema);
   },
@@ -5804,6 +6306,9 @@ var managementResponses = lazyResponseReaders({
   get completionRevocationSchema() {
     return responseSchema(completionRevocationSchema);
   },
+  get completionRestorationSchema() {
+    return responseSchema(completionRestorationSchema);
+  },
   get contentPerformancePageSchema() {
     return responseSchema(contentPerformancePageSchema);
   },
@@ -5828,6 +6333,9 @@ var managementResponses = lazyResponseReaders({
   get deploymentResultSchema() {
     return responseSchema(deploymentResultSchema);
   },
+  get discordRoleRewardsSchema() {
+    return responseSchema(discordRoleRewardsSchema);
+  },
   get engagementBoundaryPageSchema() {
     return responseSchema(engagementBoundaryPageSchema);
   },
@@ -5879,6 +6387,12 @@ var managementResponses = lazyResponseReaders({
   get issuedServiceKeySchema() {
     return responseSchema(issuedServiceKeySchema);
   },
+  get automationKeySchema() {
+    return responseSchema(automationKeySchema);
+  },
+  get issuedAutomationKeySchema() {
+    return responseSchema(issuedAutomationKeySchema);
+  },
   get leaderboardPageSchema() {
     return responseSchema(leaderboardPageSchema);
   },
@@ -5930,6 +6444,9 @@ var managementResponses = lazyResponseReaders({
   get managedTelegramAccountSchema() {
     return responseSchema(managedTelegramAccountSchema);
   },
+  get managedCreatorAccountsSchema() {
+    return responseSchema(managedCreatorAccountsSchema);
+  },
   get telegramChatsSchema() {
     return responseSchema(telegramChatsSchema);
   },
@@ -6162,6 +6679,9 @@ export {
   MemberImportRefusalCode,
   PayoutSourceKind,
   REFERRAL_INTEGRATION_REWARD_ERROR,
+  RestoredDeliveryOutcome,
+  RestoredEntitlementOutcome,
+  RestoredReferralOutcome,
   RevokedDeliveryOutcome,
   RevokedEntitlementOutcome,
   RevokedReferralOutcome,
@@ -6198,6 +6718,7 @@ export {
   appScheduleRunSchema,
   appScheduleRunsSchema,
   appScheduleSchema,
+  appScheduleStateInputSchema,
   appScheduleStateSchema,
   appSchedulesSchema,
   appSecretDeclarationSchema,
@@ -6222,6 +6743,9 @@ export {
   auditPageSchema,
   auditQuerySchema,
   auditRecordSchema,
+  automationKeyInputSchema,
+  automationKeyPermissionSchema,
+  automationKeySchema,
   balanceCheckSchema,
   billingCheckoutInputSchema,
   billingIntervals,
@@ -6240,6 +6764,8 @@ export {
   capturedFactSchema,
   commitSchema,
   compareAppMigrations,
+  completionRestorationSchema,
+  completionRestoreSchema,
   completionRevocationSchema,
   completionRevocationShortfallSchema,
   completionRevokeSchema,
@@ -6273,6 +6799,7 @@ export {
   environmentSchema,
   grantRecordSchema,
   grantSchema,
+  groupArchiveInputSchema,
   groupMemberPageSchema,
   groupMemberSchema,
   groupPageQuerySchema,
@@ -6301,6 +6828,7 @@ export {
   isIntegrationParticipantPath,
   isManagementError,
   isParticipantRoute,
+  issuedAutomationKeySchema,
   issuedServiceKeySchema,
   issuedTokenSchema,
   leaderboardSettlementExportSchema,
@@ -6314,6 +6842,8 @@ export {
   managedAttemptPageSchema,
   managedAttemptQuerySchema,
   managedAttemptSchema,
+  managedCreatorAccountSchema,
+  managedCreatorAccountsSchema,
   managedEntitlementPageSchema,
   managedEntitlementQuerySchema,
   managedEntitlementSchema,
@@ -6337,6 +6867,7 @@ export {
   managementResponses,
   managementStateQuerySchema,
   memberAccountSchema,
+  memberCreatorAccountUnlinkInputSchema,
   memberDetailSchema,
   memberIdentityChangeInputSchema,
   memberIdentityLinkChangeInputSchema,
@@ -6370,9 +6901,11 @@ export {
   metricsSchema,
   nextScheduleRun,
   oauthIdentitySelectorSchema,
+  offeredStarterSchema,
   operationInputSchema,
   operationSchema,
   operatorUserSchema,
+  organizationBillingSchema,
   pageSchema,
   parseImageExtraction,
   parseImageResult,
@@ -6385,10 +6918,12 @@ export {
   personSchema,
   pointLedgerPropertiesSchema,
   projectBillingSchema,
+  projectCreateInputSchema,
   projectDeletionInputSchema,
   projectDeletionSchema,
   projectInputSchema,
   projectMetricsSchema,
+  projectPlanSchema,
   projectSchema,
   projectSetupSchema,
   projectTransferInputSchema,
@@ -6417,12 +6952,14 @@ export {
   referralRewardResolutionSchema,
   referralSuspensionSchema,
   removeGroupMemberSchema,
+  repositoryCreateSchema,
   repositorySchema,
   resourceArchiveInputSchema,
   resourceLifecycleInputSchema,
   resourceLifecycleKindSchema,
   resourceLifecyclePaths,
   resourceLifecycleResultSchema,
+  revokedCompletionSchema,
   rolePermissions,
   roleSchema,
   scheduleResult,
@@ -6430,6 +6967,7 @@ export {
   sequenceCursorSchema,
   serviceKeyInputSchema,
   serviceKeySchema,
+  settlementPayoutCsv,
   sourceDataSchema,
   sourceRoles,
   stageRequestSchema,
@@ -6444,6 +6982,7 @@ export {
   stagingPathSchema,
   starterIdSchema,
   starterTemplates,
+  starters,
   stockAdditionSchema,
   stockInputSchema,
   teamSchema,