@domino-sdk/relay 1.56.0 → 1.59.0

package/dist/server/index.js

@@ -1,7 +1,7 @@
 import {
   attemptCaptureSchema,
   capturedFactSchema
-} from "../chunk-MNU6UPXY.js";
+} from "../chunk-KBCTII6C.js";
 import {
   activityTypeSchema,
   activityTypes,
@@ -27,7 +27,7 @@ import {
   publishDeploymentSchema,
   rejectDeploymentSchema,
   submitDeploymentSchema
-} from "../chunk-CXKXPB7K.js";
+} from "../chunk-M2JQPDUX.js";
 import {
   analyticsBreakdowns,
   analyticsCatalog,
@@ -42,7 +42,7 @@ import {
   analyticsRanges,
   analyticsReadSchema,
   dashboardDefinitionSchema
-} from "../chunk-ULQU7KC4.js";
+} from "../chunk-W42KMMH5.js";
 import "../chunk-4OC7REYX.js";
 import {
   DEFAULT_MANAGEMENT_TIMEOUT,
@@ -63,22 +63,22 @@ import {
   participantExchangeSchema,
   questConfiguration,
   sequenceCursorSchema
-} from "../chunk-G6XVBYH7.js";
+} from "../chunk-LDLOB2UZ.js";
 import {
   parseImageExtraction,
   parseImageResult
-} from "../chunk-W5U2WXG3.js";
+} from "../chunk-YRSU2X2P.js";
 import {
   imageAssetArtifactSchema,
   xUserLookupInputSchema,
   xUserSchema,
   xUsernameSchema
-} from "../chunk-CK7HO32Z.js";
+} from "../chunk-IBROKMFV.js";
 import {
   sourceDataSchema,
   sourceRoles,
   validateQuestShape
-} from "../chunk-H2MD6E7Z.js";
+} from "../chunk-YMWRLAAP.js";
 import {
   isIntegrationParticipantPath,
   isParticipantRoute,
@@ -87,7 +87,7 @@ import {
 } from "../chunk-MHPKEVEW.js";
 import {
   withActionId
-} from "../chunk-INSWI2VZ.js";
+} from "../chunk-KYUQEZZA.js";
 import {
   allocateQuestSchema,
   allocatedQuestSchema,
@@ -97,6 +97,7 @@ import {
   collectionPreviewSchema,
   collectionResolveSchema,
   creatorAccountProviderSchema,
+  discordRoleRewardsSchema,
   memberEnrollmentInputSchema,
   publishQuestDraftSchema,
   questCatalogSchema,
@@ -107,7 +108,7 @@ import {
   rewardDeliveryQuerySchema,
   rewardDeliverySchema,
   saveQuestDraftSchema
-} from "../chunk-RBPMT53S.js";
+} from "../chunk-6U5WWH3W.js";
 import {
   badgeMutationResultSchema,
   badgeMutationSchema,
@@ -155,7 +156,7 @@ import {
   referralQualificationSchema,
   referralRewardResolutionSchema,
   referralSuspensionSchema
-} from "../chunk-BJYMTCWG.js";
+} from "../chunk-UEMLYPKJ.js";
 import {
   createPointLedgerSchema,
   managedPointLedgerSchema,
@@ -168,12 +169,13 @@ import {
   telegramChatConnectionSchema,
   telegramChatIdSchema,
   telegramChatsSchema
-} from "../chunk-VSHV7FEA.js";
-import "../chunk-KBVH4XZC.js";
-import "../chunk-ABJ4G47X.js";
-import "../chunk-QNQNKIAA.js";
+} from "../chunk-XGXDINGM.js";
+import "../chunk-R4S6BFOH.js";
+import "../chunk-TZJT5CRF.js";
+import "../chunk-EQF4ID47.js";
 import {
   CompletionSourceKind,
+  acceptAnywaySchema,
   addGroupMemberSchema,
   appIdentityKindSchema,
   attemptSchema,
@@ -201,6 +203,7 @@ import {
   eventSchema,
   evmAddressSchema,
   evmChainIdSchema,
+  groupArchiveInputSchema,
   groupMemberPageSchema,
   groupMemberSchema,
   groupPageQuerySchema,
@@ -208,13 +211,16 @@ import {
   identifier,
   knownResponse,
   lazyResponseReaders,
+  lifecycleReasonSchema,
   linkedWalletSchema,
   managedGroupSchema,
+  managedTrackerCreateSchema,
   managementStateQuerySchema,
   memberCampaignEnrollmentInputSchema,
   memberCampaignWithdrawalInputSchema,
   memberIdentitySchema,
   memberProgressSchema,
+  offsetDateTimeSchema,
   pageCursorSchema,
   pageQuerySchema,
   pickupAvailabilitySchema,
@@ -237,7 +243,6 @@ import {
   trackerContentReadSchema,
   trackerContentSchema,
   trackerControlSchema,
-  trackerCreateSchema,
   trackerDataIssue,
   trackerDataIssues,
   trackerIngestResultSchema,
@@ -261,7 +266,7 @@ import {
   walletSignInNetworksSchema,
   walletUnlinkInputSchema,
   whereSchemaIssue
-} from "../chunk-BHHUSBSD.js";
+} from "../chunk-AWWCEP7F.js";
 
 // src/server/identity-links.ts
 import * as z from "zod";
@@ -472,6 +477,25 @@ var leaderboardSettlementExportSchema = z4.object({
     })
   )
 });
+var csvField = (value) => {
+  const text = value == null ? "" : String(value);
+  return /[",\r\n]/.test(text) ? `"${text.replaceAll('"', '""')}"` : text;
+};
+function settlementPayoutCsv(exported) {
+  const unit = exported.pool === null ? "" : exported.pool.unit === "points" ? "points" : exported.pool.unit.code;
+  return [
+    ["member", "score", "rank", "share", "amount", "unit", "wallets"],
+    ...exported.rows.map((row) => [
+      row.member,
+      row.score,
+      row.rank,
+      row.share,
+      row.amount,
+      row.share === null ? "" : unit,
+      row.wallets.map((wallet) => `${wallet.network ?? wallet.chain}:${wallet.address}`).join(" ")
+    ])
+  ].map((fields) => fields.map(csvField).join(",")).join("\n");
+}
 
 // src/server/inventory-items.ts
 import * as z5 from "zod";
@@ -739,7 +763,7 @@ var testMemberHistorySchema = z7.object({
 import * as z8 from "zod";
 var importTimeSchema = z8.union([
   z8.number().int().nonnegative().safe(),
-  z8.iso.datetime({ offset: true }).transform((value) => Date.parse(value))
+  offsetDateTimeSchema().transform((value) => Date.parse(value))
 ]);
 var importWalletSchema = z8.discriminatedUnion("chain", [
   z8.object({
@@ -1062,7 +1086,7 @@ var resourceLifecycleInputSchema = z10.object({
   kind: resourceLifecycleKindSchema,
   resource: identifier,
   archived: z10.boolean(),
-  reason: z10.string().trim().min(1).max(500),
+  reason: lifecycleReasonSchema,
   expectedArchivedAt: z10.number().int().nonnegative().nullable().optional()
 }).strict();
 var resourceLifecycleResultSchema = z10.object({
@@ -1407,6 +1431,10 @@ function nextScheduleRun(schedule, after) {
   return next.getTime();
 }
 var appScheduleStateSchema = z14.enum(["active", "paused", "archived"]);
+var appScheduleStateInputSchema = z14.object({
+  state: appScheduleStateSchema,
+  reason: lifecycleReasonSchema.optional()
+}).strict();
 var APP_SCHEDULE_RESULT_BYTES = 16384;
 var appScheduleDiagnosticSchema = z14.object({
   level: z14.enum(["error", "warning", "info"]),
@@ -1537,6 +1565,46 @@ ${body}`)
 
 // src/server/starters.ts
 import * as z15 from "zod";
+var starters = [
+  {
+    id: "campaign",
+    title: "Campaign tour",
+    summary: "A neutral quest app with a guided tour of every quest kind. The blank canvas for anything."
+  },
+  {
+    id: "classic",
+    title: "Classic questboard",
+    summary: "The familiar Domino portal: quests in a grid grouped by section, a claim page, points, and a leaderboard."
+  },
+  {
+    id: "waitlist",
+    title: "Waitlist",
+    summary: "Collect sign-ups before launch. People move up the line by inviting friends."
+  },
+  {
+    id: "referral",
+    title: "Referral program",
+    summary: "Give every member an invite link and reward them when friends join and qualify."
+  },
+  {
+    id: "discord",
+    title: "Discord activation",
+    summary: "Turn new Discord members into regulars with quests for joining, introducing themselves, and taking part, rewarded with roles."
+  },
+  {
+    id: "loyalty",
+    title: "Loyalty program",
+    summary: "Members earn points in a campaign, qualify into a members' group, and spend points on offers, some for members only."
+  },
+  {
+    id: "api",
+    title: "API",
+    summary: "A headless Worker with typed routes and interactive API docs, for plugging Domino into your own product."
+  }
+];
+var offeredStarterSchema = z15.string().refine((id) => starters.some((starter) => starter.id === id), {
+  error: `Unknown starter. Choose one of: ${starters.map((starter) => starter.id).join(", ")}.`
+});
 var starterTemplates = [
   {
     id: "campaign",
@@ -1810,6 +1878,10 @@ var repositorySchema = z16.object({
   defaultBranch: z16.string(),
   status: z16.enum(["provisioning", "ready"])
 });
+var repositoryCreateSchema = z16.object({
+  /** Omitted: the starter chosen at project setup, else `campaign`. */
+  starter: offeredStarterSchema.optional()
+}).strict();
 var createRepositorySchema = z16.object({
   /** Omitted: the starter chosen at project setup, else `campaign`. */
   starter: starterIdSchema.optional()
@@ -1922,10 +1994,18 @@ var stagingAccessInputSchema = z16.discriminatedUnion("mode", [
     password: z16.string().min(8).max(128)
   }).strict()
 ]);
-var stagingPathSchema = z16.string().max(2048).refine(
-  (path) => path.startsWith("/") && !path.startsWith("//") && !path.includes("\\"),
-  "Expected a path on the staging host"
-);
+var stagingOrigin = "https://staging.invalid";
+var stagingPathSchema = z16.string().max(2048).refine((path) => {
+  if (!path.startsWith("/") || path.startsWith("//") || path.includes("\\") || // oxlint-disable-next-line no-control-regex
+  /[\u0000-\u001f\u007f]/.test(path)) {
+    return false;
+  }
+  try {
+    return new URL(path, stagingOrigin).origin === stagingOrigin;
+  } catch {
+    return false;
+  }
+}, "Expected a path on the staging host");
 var stagingLinkSchema = z16.object({
   url: z16.string().url(),
   expiresAt: z16.number()
@@ -1984,12 +2064,13 @@ var artifactFields = {
     }).strict()
   ).max(500)
 };
+var inlineCode = () => z16.unknown().optional().transform((value) => value);
 var buildArtifactsSchema = z16.discriminatedUnion("format", [
   z16.object({
     format: z16.literal(1),
     ...artifactFields,
-    quests: z16.unknown(),
-    catalog: z16.unknown()
+    quests: inlineCode(),
+    catalog: inlineCode()
   }).strict(),
   z16.object({
     format: z16.literal(2),
@@ -2192,6 +2273,13 @@ var projectSchema = z19.object({
     path: ["creator"]
   }
 );
+var projectCreateInputSchema = z19.object({
+  actionId: identifier,
+  name: z19.string().trim().min(1).max(80),
+  setup: projectSetupSchema.optional(),
+  /** The starter a new hosted app begins from, with `setup.mode` "new". */
+  starter: offeredStarterSchema.optional()
+}).strict();
 var projectInputSchema = z19.object({
   actionId: identifier,
   name: z19.string().trim().min(1).max(80),
@@ -2200,7 +2288,7 @@ var projectInputSchema = z19.object({
   starter: starterIdSchema.optional()
 }).strict();
 var projectUpdateInputSchema = z19.union([
-  z19.object({ name: projectInputSchema.shape.name }).strict(),
+  z19.object({ name: projectCreateInputSchema.shape.name }).strict(),
   z19.object({
     slug: projectSchema.shape.slug,
     confirm: z19.string().min(1).max(80)
@@ -2309,12 +2397,87 @@ var completionRevocationSchema = z19.object({
   ),
   streakMilestone: z19.boolean()
 });
+var completionRestoreSchema = z19.object({
+  actionId: identifier,
+  reason: z19.string().trim().min(1).max(500)
+}).strict();
+var RestoredEntitlementOutcome = {
+  /** The revocation voided it, and it is available again. */
+  Restored: "restored",
+  /** The revocation lowered or flagged it: its earned tier is the completion's again. */
+  Raised: "raised",
+  /** It changed since the revocation (an operator restored, voided or corrected it), so it stays. */
+  Kept: "kept"
+};
+var RestoredDeliveryOutcome = {
+  /** The grant had not reached Discord, and it is queued again. */
+  Requeued: "requeued",
+  /** The grant counts again for reconciliation, and its delivery status stays. */
+  Kept: "kept"
+};
+var RestoredReferralOutcome = {
+  /** The member qualifies on this completion again. */
+  Qualified: "qualified",
+  /** The program is disabled or gone, or the referral is suspended, so nothing changed. */
+  Kept: "kept"
+};
+var openOutcome = z19.string().min(1).max(64);
+var completionRestorationSchema = z19.object({
+  completion: identifier,
+  /** The quest ID, or the board ID when `source.kind` is `leaderboard`. */
+  quest: identifier,
+  member: identifier,
+  source: completionSourceSchema.optional(),
+  restoredAt: z19.number(),
+  points: z19.array(
+    z19.object({
+      entry: identifier,
+      balance: identifier,
+      reversal: identifier,
+      amount: z19.number().int()
+    })
+  ),
+  badges: z19.array(z19.object({ badge: identifier })),
+  groups: z19.array(z19.object({ group: identifier, added: z19.boolean() })),
+  entitlements: z19.array(
+    z19.object({
+      entitlement: identifier,
+      reward: identifier,
+      outcome: openOutcome,
+      status: z19.string()
+    })
+  ),
+  deliveries: z19.array(
+    z19.object({
+      delivery: z19.string(),
+      roleId: z19.string(),
+      outcome: openOutcome
+    })
+  ),
+  referrals: z19.array(
+    z19.object({
+      program: identifier,
+      outcome: openOutcome
+    })
+  ),
+  streakMilestone: z19.boolean()
+});
 var accessSchema = z19.object({
   actor: z19.string(),
   organization: z19.string(),
   admin: z19.boolean(),
   local: z19.boolean(),
-  projects: z19.array(projectSchema)
+  projects: z19.array(projectSchema),
+  /** The credential's own kind and scope, when it is an organization automation key. */
+  credential: z19.object({
+    kind: z19.string(),
+    id: z19.string(),
+    name: z19.string(),
+    /** The projects it reaches; null for every project of the organization. */
+    projects: z19.array(z19.string()).nullable(),
+    createProjects: z19.boolean(),
+    permissions: permissionListSchema
+  }).optional()
 });
 var querySchema = z19.object({
   q: z19.string().max(200).default(""),
@@ -2569,6 +2732,17 @@ var participantSignInSchema = z19.object({
     login: z19.boolean(),
     miniAppBotId: telegramBotIdSchema.nullable()
   }).optional(),
+  /**
+   * The creator-account providers, such as `youtube`, and whether Domino configured each, so
+   * members can link accounts that trackers like `youtube.shorts()` read. Absent from older Relay
+   * versions.
+   */
+  creatorAccounts: z19.array(
+    z19.object({
+      provider: creatorAccountProviderSchema,
+      configured: z19.boolean()
+    })
+  ).optional(),
   updatedAt: z19.number().nullable(),
   updatedBy: z19.string().nullable()
 });
@@ -2582,12 +2756,24 @@ var completionRevocationShortfallSchema = z19.object({
   revokedAt: z19.number().int().nonnegative().safe(),
   unreversedPoints: z19.record(identifier, z19.number().int().positive().safe())
 });
+var revokedCompletionSchema = z19.object({
+  completion: identifier,
+  quest: identifier,
+  /** The completion key: its occurrence, such as `once` or a day. */
+  key: z19.string(),
+  revokedAt: z19.number().int().nonnegative().safe(),
+  /** Why it was revoked, and what the revoke did, which a restore re-applies. */
+  reason: z19.string().optional(),
+  revocation: completionRevocationSchema.optional()
+});
 var memberDetailSchema = z19.object({
   snapshot: snapshotSchema,
   member: memberSchema,
   progress: memberProgressSchema,
   /** Up to 25 revoked completions with an unreversed point remainder, newest first. */
   revocationShortfalls: z19.array(completionRevocationShortfallSchema).default([]),
+  /** Up to 25 revoked completions, newest first. Relay older than restore leaves it out. */
+  revokedCompletions: z19.array(revokedCompletionSchema).optional(),
   /** Current and historical campaign enrollment state, including inactive enrollments. */
   campaignEnrollments: z19.array(campaignEnrollmentSchema).default([]),
   passes: z19.array(
@@ -2682,6 +2868,44 @@ var issuedServiceKeySchema = serviceKeySchema.extend({
   secret: z19.string().uuid(),
   token: z19.string()
 });
+var automationKeyPermissionSchema = z19.enum([
+  "read",
+  "publish",
+  "inventory",
+  "points",
+  "ingest",
+  "enroll"
+]);
+var automationKeyInputSchema = z19.object({
+  name: z19.string().trim().min(1).max(80),
+  permissions: z19.array(automationKeyPermissionSchema).min(1),
+  /** The projects it reaches. Omit it for every project of the organization, current and future. */
+  projects: z19.array(identifier).min(1).max(100).optional(),
+  /** Whether it may create projects. A project it creates joins its `projects` list. */
+  createProjects: z19.boolean().default(false),
+  /** Days until the first secret expires. Omit it for a key that never expires. */
+  expiresInDays: z19.number().int().min(1).max(3650).optional()
+}).strict();
+var automationKeySchema = z19.object({
+  id: z19.string().uuid(),
+  organization: z19.string(),
+  name: z19.string(),
+  permissions: permissionListSchema,
+  /** The projects it reaches; null for every project of the organization. */
+  projects: z19.array(z19.string()).nullable(),
+  createProjects: z19.boolean(),
+  /** The Clerk user ID of the administrator who created it. */
+  createdBy: z19.string(),
+  createdAt: z19.number(),
+  /** The latest use of any of its secrets, revoked ones included; null when none was used. */
+  lastUsedAt: z19.number().nullable(),
+  /** Its working secrets, oldest first. Any of them authenticates the key. */
+  secrets: z19.array(credentialSecretSchema)
+});
+var issuedAutomationKeySchema = automationKeySchema.extend({
+  secret: z19.string().uuid(),
+  token: z19.string()
+});
 var teamSchema = z19.array(
   z19.object({ id: z19.string(), label: z19.string() })
 );
@@ -2753,6 +2977,7 @@ var managedAttemptSchema = z19.object({
   attempt: attemptSchema,
   release: publishedReleaseSchema.nullable(),
   events: z19.array(eventSchema),
+  supersededBy: z19.string().nullable().optional(),
   person: personSchema
 });
 var managedEntitlementQuerySchema = z19.strictObject({
@@ -2938,6 +3163,31 @@ function managementClient(options) {
       typeof target === "string" ? call : inputOrCall
     );
   }
+  function setAppScheduleState(state3, inputOrCall, call) {
+    const reasoned = call !== void 0 || inputOrCall !== void 0 && "reason" in inputOrCall;
+    return request(
+      "/schedules/state",
+      appScheduleListSchema,
+      appScheduleStateInputSchema.parse({
+        ...reasoned ? inputOrCall : {},
+        state: state3
+      }),
+      "PUT",
+      reasoned ? call : inputOrCall
+    );
+  }
+  function archiveManagedGroup(verb) {
+    function change(group, inputOrCall, call) {
+      const reasoned = call !== void 0 || inputOrCall !== void 0 && "reason" in inputOrCall;
+      return post(
+        `/groups/${groupKey(group)}/${verb}`,
+        managedGroupSchema,
+        reasoned ? groupArchiveInputSchema.parse(inputOrCall) : {},
+        reasoned ? call : inputOrCall
+      );
+    }
+    return change;
+  }
   function archiveManagedPointLedger(ledger, inputOrCall, call) {
     const input = inputOrCall && "reason" in inputOrCall ? resourceArchiveInputSchema.parse(withActionId(inputOrCall)) : {};
     const options2 = inputOrCall && "reason" in inputOrCall ? call : inputOrCall;
@@ -3015,22 +3265,25 @@ function managementClient(options) {
     },
     trackers: {
       /**
-       * Creates an X search tracker as data in test, with the same validation as `defineTracker`;
-       * requires `publish`. Its first collection searches from `window.start`. Live refuses it with
-       * `promotion-required`: the tracker reaches live through a promotion. A key a deployment
-       * already publishes is refused with `tracker-owned-by-code`.
+       * Creates a tracker as data in test, with the same validation as `defineTracker`; requires
+       * `publish`. Name its source with `source`, such as `{ kind: "discord-messages", text: true }`,
+       * or an X search with `query` alone. An X tracker's first collection searches from
+       * `window.start`. Live refuses it with `promotion-required`: the tracker reaches live through
+       * a promotion. A key a deployment already publishes is refused with `tracker-owned-by-code`.
        */
       create: (input, call) => create(
         "/trackers",
         trackerStatusSchema,
-        trackerCreateSchema,
+        managedTrackerCreateSchema,
         input,
         call
       ),
       /**
-       * Changes a tracker created with `create`, in test; fields left out keep their value. A new
-       * query or window collects from now on and never searches the past. A tracker defined in
-       * code changes only through a deployment (`tracker-owned-by-code`).
+       * Changes a tracker created with `create`, in test; fields left out keep their value. `source`
+       * replaces the source's settings but never its kind (`validation-failed`). A new query or
+       * window collects from now on and never searches the past, and turning Discord message text
+       * off erases the text already stored. A tracker defined in code changes only through a
+       * deployment (`tracker-owned-by-code`).
        */
       update: (reference, input, call) => post(
         `/trackers/${identifier.parse(reference)}/update`,
@@ -3512,20 +3765,11 @@ function managementClient(options) {
       ),
       /**
        * Freezes a group's membership. Its members still count for prerequisites, leaderboards
-       * and referral rules.
+       * and referral rules. Pass `{ reason }` to record why in the audit log.
        */
-      archive: (group, call) => post(
-        `/groups/${groupKey(group)}/archive`,
-        managedGroupSchema,
-        {},
-        call
-      ),
-      unarchive: (group, call) => post(
-        `/groups/${groupKey(group)}/unarchive`,
-        managedGroupSchema,
-        {},
-        call
-      ),
+      archive: archiveManagedGroup("archive"),
+      /** Lets a group's membership change again, with an optional `{ reason }` for the audit log. */
+      unarchive: archiveManagedGroup("unarchive"),
       /** A group's current members by member ID. Pass `nextCursor` back as `cursor`. */
       members: (group, query = {}, call) => get(
         `/groups/${groupKey(group)}/members${queryString(groupPageQuerySchema.parse(query))}`,
@@ -3927,6 +4171,24 @@ function managementClient(options) {
         staffDecisionSchema.parse(withActionId(input)),
         call
       ),
+      /**
+       * Accepts a rejected attempt anyway, with a reason, for any member; requires `review`
+       * permission. The evaluator's or a reviewer's rejection stays in the attempt's events, its
+       * retry cooldown ends, and the acceptance pays as a reviewer's approval would, with the
+       * normal accepted events and webhook. Only the member's latest attempt on a quest that isn't
+       * archived (409 `attempt-superseded`, `quest-archived`); a cap the acceptance would break is
+       * refused, not bypassed (409 `completion-cooldown`, `budget-exhausted`, `completion-revoked`,
+       * `already-completed`). Replaying the action ID returns the first result.
+       */
+      acceptAnyway: (input, call) => {
+        const { attempt, ...body } = input;
+        return post(
+          `/attempts/${identifier.parse(attempt)}/accept-anyway`,
+          attemptSchema,
+          acceptAnywaySchema.parse(withActionId(body)),
+          call
+        );
+      },
       /** Evaluates a failed attempt again under a new generation; requires `review` permission. */
       retry: (attempt, call) => post(
         `/attempts/${identifier.parse(attempt)}/retry`,
@@ -3966,6 +4228,26 @@ function managementClient(options) {
           completionRevokeSchema.parse(withActionId(body)),
           call
         );
+      },
+      /**
+       * Restores a revoked completion with a reason; requires `review` permission. In one
+       * transaction it clears the revocation and re-applies what the revocation recorded: awards
+       * back the points it reversed (not those it could not reverse), re-awards its badges, re-adds
+       * its group memberships, restores the tiered rewards it voided and raises those it lowered,
+       * queues its stopped Discord role grants again, re-qualifies its referrals, and restores a
+       * streak milestone. Budgets stay spent. Fails with 409 `completion-not-revoked` when the
+       * completion counts already, and with 409 `occurrence-taken` when the revocation freed the
+       * occurrence and another completion holds it now. Replaying the action ID returns the first
+       * result.
+       */
+      restore: (input, call) => {
+        const { completion, ...body } = input;
+        return post(
+          `/completions/${identifier.parse(completion)}/restore`,
+          completionRestorationSchema,
+          completionRestoreSchema.parse(withActionId(body)),
+          call
+        );
       }
     },
     /** Staff handover of a member's reward entitlement; requires `handover` permission. */
@@ -4027,6 +4309,20 @@ function managementClient(options) {
         entitlementCorrectionSchema.parse(withActionId(input)),
         call
       ),
+      /**
+       * Restores an entitlement an operator voided, at the `revision` the operator saw, with a
+       * reason. It is available again at the tier an accepted completion still earns, with any
+       * referral review the void settled. Fails with 409 `entitlement-status` when it isn't void;
+       * when a completion revocation voided it, or no accepted completion still earns it, with the
+       * revoked `completion` to restore instead; when canceling a redemption voided it; and for a
+       * referral reward voided before voids kept their referral reviews.
+       */
+      restore: (entitlement, input, call) => post(
+        `/entitlements/${identifier.parse(entitlement)}/restore`,
+        entitlementSchema,
+        entitlementCorrectionSchema.parse(withActionId(input)),
+        call
+      ),
       /**
        * Corrects a collection recorded by mistake, at the `revision` the operator saw, with a
        * reason. The entitlement is available again and any pickup size it held returns to stock.
@@ -4182,7 +4478,7 @@ function managementClient(options) {
     },
     readiness: (call) => get("/readiness", readinessSchema, call),
     access: (call) => get("/access", accessSchema, call),
-    createProject: (input, call) => create("/projects", projectSchema, projectInputSchema, input, call),
+    createProject: (input, call) => create("/projects", projectSchema, projectCreateInputSchema, input, call),
     updateProject: (input, call) => request(
       "/project",
       projectSchema,
@@ -4272,6 +4568,47 @@ function managementClient(options) {
         call
       )
     },
+    /**
+     * Organization automation keys (`dak_`): credentials for a headless agent or CI across the
+     * organization's projects, owned by no person. They write in test only. Only an organization
+     * administrator in Console manages them.
+     */
+    automationKeys: {
+      list: (call) => get("/automation-keys", z19.array(automationKeySchema), call),
+      /** The secret `token` is in this response only. */
+      create: (input, call) => post(
+        "/automation-keys",
+        issuedAutomationKeySchema,
+        automationKeyInputSchema.parse(input),
+        call
+      ),
+      /**
+       * Rotation: issues another secret. The key's other secrets keep working until you revoke
+       * them with `revokeSecret`. The new `token` is in this response only.
+       */
+      addSecret: (id, input = {}, call) => post(
+        `/automation-keys/${z19.string().uuid().parse(id)}/secrets`,
+        issuedAutomationKeySchema,
+        credentialSecretInputSchema.parse(input),
+        call
+      ),
+      /** Stops one secret working. A key's last secret cannot be revoked; revoke the key instead. */
+      revokeSecret: (id, secret, call) => request(
+        `/automation-keys/${z19.string().uuid().parse(id)}/secrets/${z19.string().uuid().parse(secret)}`,
+        automationKeySchema,
+        void 0,
+        "DELETE",
+        call
+      ),
+      /** Deletes the key; every secret stops working. */
+      revoke: (id, call) => request(
+        `/automation-keys/${z19.string().uuid().parse(id)}`,
+        z19.null(),
+        void 0,
+        "DELETE",
+        call
+      )
+    },
     /** Who holds which roles on the client's project; organization administrators only. */
     grants: {
       list: (call) => get("/grants", z19.array(grantRecordSchema), call),
@@ -4515,6 +4852,12 @@ function managementClient(options) {
     ),
     /** Operations of the Discord role reward kind on assignments it delivered. */
     discordRoles: {
+      /**
+       * Every Discord role the project's reward deliveries grant in this environment, with the
+       * quests that requested it and its deliveries counted by status. Unlike `rewardDeliveries`,
+       * it covers the whole history, so a role granted only long ago still appears.
+       */
+      list: (call) => get("/reward-deliveries/roles", discordRoleRewardsSchema, call),
       /**
        * Hands the role assignment a delivery made to an external administrator or bot: Relay stops
        * removing it automatically, in every project and environment that shares the assignment.
@@ -5022,13 +5365,8 @@ function managementClient(options) {
         {},
         call
       ),
-      setState: (state3, call) => request(
-        "/schedules/state",
-        appScheduleListSchema,
-        { state: appScheduleStateSchema.parse(state3) },
-        "PUT",
-        call
-      ),
+      /** Activates, pauses or archives the project's schedules, with an optional audited reason. */
+      setState: setAppScheduleState,
       recover: (name, input, call) => post(
         `/schedules/${appScheduleNameSchema.parse(name)}/recover`,
         appScheduleListSchema,
@@ -5480,6 +5818,9 @@ var managementResponseSchemas = lazyResponseReaders({
   get completionRevocationSchema() {
     return knownResponse(completionRevocationSchema);
   },
+  get completionRestorationSchema() {
+    return knownResponse(completionRestorationSchema);
+  },
   get contentPerformancePageSchema() {
     return knownResponse(contentPerformancePageSchema);
   },
@@ -5504,6 +5845,9 @@ var managementResponseSchemas = lazyResponseReaders({
   get deploymentResultSchema() {
     return knownResponse(deploymentResultSchema);
   },
+  get discordRoleRewardsSchema() {
+    return knownResponse(discordRoleRewardsSchema);
+  },
   get engagementBoundaryPageSchema() {
     return knownResponse(engagementBoundaryPageSchema);
   },
@@ -5555,6 +5899,12 @@ var managementResponseSchemas = lazyResponseReaders({
   get issuedServiceKeySchema() {
     return knownResponse(issuedServiceKeySchema);
   },
+  get automationKeySchema() {
+    return knownResponse(automationKeySchema);
+  },
+  get issuedAutomationKeySchema() {
+    return knownResponse(issuedAutomationKeySchema);
+  },
   get leaderboardPageSchema() {
     return knownResponse(leaderboardPageSchema);
   },
@@ -5956,6 +6306,9 @@ var managementResponses = lazyResponseReaders({
   get completionRevocationSchema() {
     return responseSchema(completionRevocationSchema);
   },
+  get completionRestorationSchema() {
+    return responseSchema(completionRestorationSchema);
+  },
   get contentPerformancePageSchema() {
     return responseSchema(contentPerformancePageSchema);
   },
@@ -5980,6 +6333,9 @@ var managementResponses = lazyResponseReaders({
   get deploymentResultSchema() {
     return responseSchema(deploymentResultSchema);
   },
+  get discordRoleRewardsSchema() {
+    return responseSchema(discordRoleRewardsSchema);
+  },
   get engagementBoundaryPageSchema() {
     return responseSchema(engagementBoundaryPageSchema);
   },
@@ -6031,6 +6387,12 @@ var managementResponses = lazyResponseReaders({
   get issuedServiceKeySchema() {
     return responseSchema(issuedServiceKeySchema);
   },
+  get automationKeySchema() {
+    return responseSchema(automationKeySchema);
+  },
+  get issuedAutomationKeySchema() {
+    return responseSchema(issuedAutomationKeySchema);
+  },
   get leaderboardPageSchema() {
     return responseSchema(leaderboardPageSchema);
   },
@@ -6317,6 +6679,9 @@ export {
   MemberImportRefusalCode,
   PayoutSourceKind,
   REFERRAL_INTEGRATION_REWARD_ERROR,
+  RestoredDeliveryOutcome,
+  RestoredEntitlementOutcome,
+  RestoredReferralOutcome,
   RevokedDeliveryOutcome,
   RevokedEntitlementOutcome,
   RevokedReferralOutcome,
@@ -6353,6 +6718,7 @@ export {
   appScheduleRunSchema,
   appScheduleRunsSchema,
   appScheduleSchema,
+  appScheduleStateInputSchema,
   appScheduleStateSchema,
   appSchedulesSchema,
   appSecretDeclarationSchema,
@@ -6377,6 +6743,9 @@ export {
   auditPageSchema,
   auditQuerySchema,
   auditRecordSchema,
+  automationKeyInputSchema,
+  automationKeyPermissionSchema,
+  automationKeySchema,
   balanceCheckSchema,
   billingCheckoutInputSchema,
   billingIntervals,
@@ -6395,6 +6764,8 @@ export {
   capturedFactSchema,
   commitSchema,
   compareAppMigrations,
+  completionRestorationSchema,
+  completionRestoreSchema,
   completionRevocationSchema,
   completionRevocationShortfallSchema,
   completionRevokeSchema,
@@ -6428,6 +6799,7 @@ export {
   environmentSchema,
   grantRecordSchema,
   grantSchema,
+  groupArchiveInputSchema,
   groupMemberPageSchema,
   groupMemberSchema,
   groupPageQuerySchema,
@@ -6456,6 +6828,7 @@ export {
   isIntegrationParticipantPath,
   isManagementError,
   isParticipantRoute,
+  issuedAutomationKeySchema,
   issuedServiceKeySchema,
   issuedTokenSchema,
   leaderboardSettlementExportSchema,
@@ -6528,6 +6901,7 @@ export {
   metricsSchema,
   nextScheduleRun,
   oauthIdentitySelectorSchema,
+  offeredStarterSchema,
   operationInputSchema,
   operationSchema,
   operatorUserSchema,
@@ -6544,6 +6918,7 @@ export {
   personSchema,
   pointLedgerPropertiesSchema,
   projectBillingSchema,
+  projectCreateInputSchema,
   projectDeletionInputSchema,
   projectDeletionSchema,
   projectInputSchema,
@@ -6577,12 +6952,14 @@ export {
   referralRewardResolutionSchema,
   referralSuspensionSchema,
   removeGroupMemberSchema,
+  repositoryCreateSchema,
   repositorySchema,
   resourceArchiveInputSchema,
   resourceLifecycleInputSchema,
   resourceLifecycleKindSchema,
   resourceLifecyclePaths,
   resourceLifecycleResultSchema,
+  revokedCompletionSchema,
   rolePermissions,
   roleSchema,
   scheduleResult,
@@ -6590,6 +6967,7 @@ export {
   sequenceCursorSchema,
   serviceKeyInputSchema,
   serviceKeySchema,
+  settlementPayoutCsv,
   sourceDataSchema,
   sourceRoles,
   stageRequestSchema,
@@ -6604,6 +6982,7 @@ export {
   stagingPathSchema,
   starterIdSchema,
   starterTemplates,
+  starters,
   stockAdditionSchema,
   stockInputSchema,
   teamSchema,