@domino-sdk/relay 1.63.0 → 1.66.0

package/dist/server/index.js

@@ -1,111 +1,111 @@
 import {
   attemptCaptureSchema,
   capturedFactSchema
-} from "../chunk-VWQGWGCH.js";
+} from "../chunk-OWDIR7ZU.js";
 import {
-  activityTypeSchema,
-  activityTypes,
-  automaticCatchUpConfirmSchema,
-  automaticCatchUpInputSchema,
-  automaticCatchUpPreviewSchema,
-  automaticCatchUpResultSchema,
-  automaticOutcomePageSchema,
-  automaticOutcomeQuerySchema,
-  automaticSchedulingPageSchema,
-  automaticSchedulingQuerySchema,
-  automaticSchedulingRetrySchema,
-  automaticSchedulingSchema,
-  deploymentActionSchema,
-  deploymentHistoryPageSchema,
-  deploymentHistoryQuerySchema,
-  deploymentPreviewSchema,
-  deploymentRecordSchema,
-  deploymentRejectionSchema,
-  deploymentResultSchema,
-  projectDeploymentSchema,
-  promoteDeploymentSchema,
-  publishDeploymentSchema,
-  rejectDeploymentSchema,
-  submitDeploymentSchema
-} from "../chunk-4GQW43UU.js";
-import "../chunk-TLSQETTY.js";
-import "../chunk-MWMCQLCG.js";
-import {
-  APP_SCHEDULE_LIMIT,
-  APP_SCHEDULE_MIN_INTERVAL,
-  APP_SCHEDULE_RESULT_BYTES,
-  APP_SCHEDULE_TIMEOUT,
   DEFAULT_MANAGEMENT_TIMEOUT,
   ManagementError,
   ManagementErrorCode,
   ManagementUploadBody,
   REFERRAL_INTEGRATION_REWARD_ERROR,
   actionIdOf,
-  appScheduleDiagnosticSchema,
-  appScheduleListSchema,
-  appScheduleNameSchema,
-  appSchedulePathSchema,
-  appScheduleResultSchema,
-  appScheduleRunSchema,
-  appScheduleRunsSchema,
-  appScheduleSchema,
-  appScheduleStateInputSchema,
-  appScheduleStateSchema,
-  appSchedulesSchema,
   containsReferralIntegrationReward,
   isManagementError,
   managementErrorSchema,
   managementTransport,
-  nextScheduleRun,
   questConfiguration,
-  scheduleResult,
-  scheduledInvocationSchema,
-  sequenceCursorSchema,
-  verifyScheduledRequest
-} from "../chunk-NQDEWJWE.js";
+  sequenceCursorSchema
+} from "../chunk-KHXCURXB.js";
 import {
   parseImageExtraction,
   parseImageResult
-} from "../chunk-N4LNEGQX.js";
-import {
-  imageAssetArtifactSchema,
-  xUserLookupInputSchema,
-  xUserSchema,
-  xUsernameSchema
-} from "../chunk-7X67QLPB.js";
+} from "../chunk-FU3W4IQN.js";
 import {
   sourceDataSchema,
   sourceRoles,
   validateQuestShape
-} from "../chunk-7Z4SZ6YM.js";
-import {
-  analyticsBreakdowns,
-  analyticsCatalog,
-  analyticsCatalogSchema,
-  analyticsCharts,
-  analyticsFilters,
-  analyticsMetricIds,
-  analyticsMetricQuerySchema,
-  analyticsMetricResultSchema,
-  analyticsQueryLimit,
-  analyticsQuerySchema,
-  analyticsRanges,
-  analyticsReadSchema,
-  dashboardDefinitionSchema
-} from "../chunk-FU5CGNTR.js";
+} from "../chunk-5DYS2OIP.js";
 import {
+  APP_KV_LIMIT,
+  APP_MIGRATION_FILE_BYTES,
+  APP_MIGRATION_LIMIT,
+  APP_MIGRATION_TOTAL_BYTES,
+  APP_SCHEDULE_LIMIT,
+  APP_SCHEDULE_MIN_INTERVAL,
+  APP_SCHEDULE_RESULT_BYTES,
+  APP_SCHEDULE_TIMEOUT,
+  APP_SECRET_LIMIT,
+  APP_SQL_LIMIT,
+  APP_STORAGE_CELL_CHARACTERS,
+  APP_STORAGE_PREVIEW_CHARACTERS,
+  APP_STORAGE_ROW_LIMIT,
   MemberImportRefusalCode,
   MemberImportState,
   accountVouchedBySchema,
+  appMigrationNameSchema,
+  appRoutingSchema,
+  appScheduleDiagnosticSchema,
+  appScheduleListSchema,
+  appScheduleNameSchema,
+  appSchedulePathSchema,
+  appScheduleResultSchema,
+  appScheduleRunSchema,
+  appScheduleRunsSchema,
+  appScheduleSchema,
+  appScheduleStateInputSchema,
+  appScheduleStateSchema,
+  appSchedulesSchema,
+  appSecretDeclarationSchema,
+  appSecretDeclarationsSchema,
+  appSecretInputSchema,
+  appSecretListSchema,
+  appSecretNameSchema,
+  appSecretSchema,
+  appSecretValueSchema,
+  appStorageCellPageSchema,
+  appStorageCellSchema,
+  appStorageKeysSchema,
+  appStorageKindSchema,
+  appStorageKvClearResultSchema,
+  appStorageKvClearSchema,
+  appStorageListSchema,
+  appStorageRowsSchema,
+  appStorageSchema,
+  appStorageSqlClearResultSchema,
+  appStorageSqlClearSchema,
+  appStorageTablesSchema,
+  appStorageValueSchema,
+  assetPathSchema,
+  buildArtifactsSchema,
+  buildIdentitySchema,
+  buildPhaseSchema,
+  buildSnapshotSchema,
+  buildStatusSchema,
+  commitSchema,
+  compareAppMigrations,
+  createRepositorySchema,
   credentialSecretInputSchema,
   credentialSecretSchema,
+  customDomainInputSchema,
+  customDomainListSchema,
+  customDomainRecordSchema,
+  customDomainSchema,
+  customDomainStateSchema,
+  deviceApproveSchema,
+  deviceRedeemSchema,
+  deviceStartSchema,
+  hostedAppSchema,
+  hostedAppSecretsSchema,
+  hostedBuildSchema,
   identityIntegrationAccountVouchingInputSchema,
+  identityIntegrationAppSecretSchema,
   identityIntegrationInputSchema,
   identityIntegrationKeySchema,
   identityIntegrationSchema,
   identityIntegrationSecretSchema,
   identityKindClaimSchema,
   identityReferenceSchema,
+  liveAppSchema,
   memberImportAccountSchema,
   memberImportActionSchema,
   memberImportCommandSchema,
@@ -129,19 +129,90 @@ import {
   memberImportSchema,
   memberImportSummarySchema,
   memberImportVouchedAccountSchema,
+  nextScheduleRun,
+  offeredStarterSchema,
   participantExchangeAccountResultSchema,
   participantExchangeResultSchema,
-  participantExchangeSchema
-} from "../chunk-KP2MCX3R.js";
+  participantExchangeSchema,
+  repositoryCreateSchema,
+  repositorySchema,
+  scheduleResult,
+  scheduledInvocationSchema,
+  stageRequestSchema,
+  stagedDeploymentContentSchema,
+  stagedDeploymentKey,
+  stagedDeploymentLimits,
+  stagedDeploymentSchema,
+  stagingAccessInputSchema,
+  stagingAccessModeSchema,
+  stagingAccessSchema,
+  stagingLinkSchema,
+  stagingPathSchema,
+  starterIdSchema,
+  starterTemplates,
+  starters,
+  verifyScheduledRequest
+} from "../chunk-CJDB6W6I.js";
 import {
   isIntegrationParticipantPath,
   isParticipantRoute,
   participantRoutePattern,
   participantRoutes
 } from "../chunk-U66GUVSG.js";
+import {
+  activityTypeSchema,
+  activityTypes,
+  automaticCatchUpConfirmSchema,
+  automaticCatchUpInputSchema,
+  automaticCatchUpPreviewSchema,
+  automaticCatchUpResultSchema,
+  automaticOutcomePageSchema,
+  automaticOutcomeQuerySchema,
+  automaticSchedulingPageSchema,
+  automaticSchedulingQuerySchema,
+  automaticSchedulingRetrySchema,
+  automaticSchedulingSchema,
+  deploymentActionSchema,
+  deploymentHistoryPageSchema,
+  deploymentHistoryQuerySchema,
+  deploymentPreviewSchema,
+  deploymentRecordSchema,
+  deploymentRejectionSchema,
+  deploymentResultSchema,
+  projectDeploymentSchema,
+  promoteDeploymentSchema,
+  publishDeploymentSchema,
+  rejectDeploymentSchema,
+  submitDeploymentSchema
+} from "../chunk-M66Y5OMJ.js";
+import {
+  xUserLookupInputSchema,
+  xUserSchema,
+  xUsernameSchema
+} from "../chunk-ANVAUOJP.js";
+import {
+  analyticsBreakdowns,
+  analyticsCatalog,
+  analyticsCatalogSchema,
+  analyticsCharts,
+  analyticsFilters,
+  analyticsMetricIds,
+  analyticsMetricQuerySchema,
+  analyticsMetricResultSchema,
+  analyticsQueryLimit,
+  analyticsQuerySchema,
+  analyticsRanges,
+  analyticsReadSchema,
+  dashboardDefinitionSchema
+} from "../chunk-QYHEHMCG.js";
+import "../chunk-MWMCQLCG.js";
 import {
   withActionId
-} from "../chunk-AQOL3SK5.js";
+} from "../chunk-BQXRCJ3N.js";
+import {
+  withQuery
+} from "../chunk-5BMZZDGY.js";
+import "../chunk-TCYDFNV4.js";
 import {
   collectionBeginSchema,
   collectionPreviewSchema,
@@ -156,7 +227,7 @@ import {
   rewardDeliveriesSchema,
   rewardDeliveryQuerySchema,
   rewardDeliverySchema
-} from "../chunk-EHUSD3O2.js";
+} from "../chunk-CGUL4MRE.js";
 import {
   allocateQuestSchema,
   allocatedQuestSchema,
@@ -167,7 +238,7 @@ import {
   questDraftSchema,
   questPublicationPreviewSchema,
   saveQuestDraftSchema
-} from "../chunk-4NOFSGAL.js";
+} from "../chunk-7MQCQYEE.js";
 import {
   engagementBoundaryPageSchema,
   engagementChangePreviewInputSchema,
@@ -193,45 +264,7 @@ import {
   referralQualificationSchema,
   referralRewardResolutionSchema,
   referralSuspensionSchema
-} from "../chunk-QR6HH4DI.js";
-import {
-  badgeMutationResultSchema,
-  badgeMutationSchema,
-  badgePropertiesSchema,
-  baseUnitsSchema,
-  createBadgeSchema,
-  createPointLedgerSchema,
-  leaderboardExclusionGroupBindingSchema,
-  leaderboardExclusionGroupSchema,
-  leaderboardExclusionSchema,
-  leaderboardGroupSchema,
-  leaderboardPageSchema,
-  leaderboardQuerySchema,
-  leaderboardSettlementApprovalSchema,
-  leaderboardSettlementPoolSchema,
-  leaderboardSettlementSchema,
-  leaderboardSettlementSummarySchema,
-  managedBadgeSchema,
-  managedPointHistoryPageSchema,
-  managedPointLedgerSchema,
-  managedProfileSchema,
-  memberBadgesSchema,
-  pointLedgerPropertiesSchema,
-  pointLedgerSchema,
-  pointsAccountSchema,
-  pointsMutationSchema,
-  pointsResultSchema,
-  profileModerationSchema,
-  profileSettingsInputSchema,
-  profileSettingsSchema,
-  publishedLeaderboardSchema
-} from "../chunk-W7YSMSGC.js";
-import {
-  withQuery
-} from "../chunk-ICXZZNPS.js";
-import "../chunk-FO2LCZTL.js";
-import "../chunk-3RFP6GT5.js";
-import "../chunk-N4BDKS6Y.js";
+} from "../chunk-5LD5DKOM.js";
 import {
   CompletionSourceKind,
   acceptAnywaySchema,
@@ -239,6 +272,10 @@ import {
   appIdentityKindSchema,
   attemptSchema,
   authProviderSchema,
+  badgeMutationResultSchema,
+  badgeMutationSchema,
+  badgePropertiesSchema,
+  baseUnitsSchema,
   beginHandoverSchema,
   campaignEnrollmentSchema,
   completionKeySchema,
@@ -255,7 +292,9 @@ import {
   counterHistorySchema,
   counterModerationResultSchema,
   counterModerationSchema,
+  createBadgeSchema,
   createGroupSchema,
+  createPointLedgerSchema,
   createStockItemSchema,
   discordServerSchema,
   entitlementCorrectionSchema,
@@ -263,6 +302,7 @@ import {
   eventSchema,
   evidenceRedactionInputSchema,
   evidenceRetentionInputSchema,
+  evidenceRetentionSettingInputSchema,
   evidenceSchema,
   evmAddressSchema,
   evmChainIdSchema,
@@ -272,12 +312,27 @@ import {
   groupPageQuerySchema,
   groupPageSchema,
   identifier,
+  leaderboardExclusionGroupBindingSchema,
+  leaderboardExclusionGroupSchema,
+  leaderboardExclusionSchema,
+  leaderboardGroupSchema,
+  leaderboardPageSchema,
+  leaderboardQuerySchema,
+  leaderboardSettlementApprovalSchema,
+  leaderboardSettlementPoolSchema,
+  leaderboardSettlementSchema,
+  leaderboardSettlementSummarySchema,
   lifecycleReasonSchema,
   limits,
   linkedWalletSchema,
+  managedBadgeSchema,
   managedGroupSchema,
+  managedPointHistoryPageSchema,
+  managedPointLedgerSchema,
+  managedProfileSchema,
   managedTrackerCreateSchema,
   managementStateQuerySchema,
+  memberBadgesSchema,
   memberCampaignEnrollmentInputSchema,
   memberCampaignWithdrawalInputSchema,
   memberIdentitySchema,
@@ -288,10 +343,19 @@ import {
   pageQuerySchema,
   pickupAvailabilitySchema,
   pickupCatalogSchema,
+  pointLedgerPropertiesSchema,
+  pointLedgerSchema,
+  pointsAccountSchema,
+  pointsMutationSchema,
+  pointsResultSchema,
+  profileModerationSchema,
+  profileSettingsInputSchema,
+  profileSettingsSchema,
   projectCalendarInputSchema,
   projectCalendarSchema,
   projectGroupKey,
   projectIntegrationSchema,
+  publishedLeaderboardSchema,
   publishedReleaseSchema,
   questSettingsInputSchema,
   questSubmissionSchema,
@@ -336,8 +400,10 @@ import {
   walletSignInNetworksSchema,
   walletUnlinkInputSchema,
   whereSchemaIssue
-} from "../chunk-ID3BZXFZ.js";
-import "../chunk-GLH6MEI2.js";
+} from "../chunk-XCEGNKGH.js";
+import {
+  issueText
+} from "../chunk-FGXLXENM.js";
 
 // src/server/identity-links.ts
 import * as z from "zod";
@@ -1233,7 +1299,7 @@ var dashboardReadSchema = /* @__PURE__ */ (() => z12.object({
 }))();
 
 // src/server/index.ts
-import * as z63 from "zod";
+import * as z62 from "zod";
 
 // src/server/client/http.ts
 import * as z15 from "zod";
@@ -2747,6 +2813,16 @@ var evidenceRetentionResultSchema = /* @__PURE__ */ (() => z30.object({
   more: z30.boolean(),
   redaction: evidenceRedactionSchema
 }))();
+var evidenceRetentionSettingSchema = /* @__PURE__ */ (() => z30.object({
+  evidenceRetention: z30.union([
+    z30.object({ days: z30.number().int() }),
+    z30.literal("keep")
+  ]),
+  noticeEndsAt: z30.number()
+}))();
+function shortensEvidenceRetention(before, after) {
+  return after !== "keep" && (before === "keep" || after.days < before.days);
+}
 var managedAttemptSchema = /* @__PURE__ */ (() => z30.object({
   attempt: attemptSchema,
   release: publishedReleaseSchema.nullable(),
@@ -2874,6 +2950,31 @@ function attempts({ get, post }) {
       evidenceRetentionInputSchema.parse(withActionId(input)),
       call
     ),
+    /**
+     * How long the project keeps submitted evidence, in both environments: `{ days }` after the
+     * decision (90 unless changed) or `"keep"`, and `noticeEndsAt`, before which nothing is
+     * deleted automatically. Requires `read` permission.
+     *
+     * @experimental A minor release can change this method and its result.
+     */
+    evidenceRetention: (call) => get("/evidence-retention", evidenceRetentionSettingSchema, call),
+    /**
+     * Sets how long the project keeps submitted evidence, in both environments: `{ days }`, 1 to
+     * 3650 days after the decision, or `"keep"`. Domino's hourly job deletes the evidence of
+     * decided attempts once their decision is older than the period, as `redactEvidenceBefore`
+     * does. Requires `publish` permission. Shortening the period, or switching from `"keep"` to
+     * days, deletes evidence sooner, so it also requires an organization administrator's Console
+     * session or personal key, or a service key, else 403 `permission-required`. Each change
+     * records an `evidence-retention-changed` audit event with the old and new period.
+     *
+     * @experimental A minor release can change this method and its result.
+     */
+    setEvidenceRetention: (input, call) => post(
+      "/evidence-retention",
+      evidenceRetentionSettingSchema,
+      evidenceRetentionSettingInputSchema.parse(withActionId(input)),
+      call
+    ),
     /**
      * Evaluates a failed attempt again under a new generation; requires `review` permission. An
      * attempt whose evidence was deleted is refused with 409 `evidence-redacted`.
@@ -3866,6 +3967,21 @@ function identityIntegrations({
       identityIntegrationInputSchema.parse(input),
       call
     ),
+    /**
+     * Creates the key and stores its secret as the hosted app secret `appSecret` (such as
+     * `APP_IDENTITY_KEY`) in the key's environment, in one step: no response carries the secret,
+     * and a refused app secret leaves no key. Needs publish permission, which app secrets need.
+     * The app reads the secret from its next deploy.
+     */
+    createIntoAppSecret: (input, appSecret, call) => post(
+      "/identity-integrations",
+      identityIntegrationAppSecretSchema,
+      {
+        ...identityIntegrationInputSchema.parse(input),
+        appSecret: appSecretNameSchema.parse(appSecret)
+      },
+      call
+    ),
     /**
      * Replaces every secret with one new secret that never expires; the old secrets stop working
      * at once.
@@ -3888,6 +4004,19 @@ function identityIntegrations({
       credentialSecretInputSchema.parse(input),
       call
     ),
+    /**
+     * `addSecret`, storing the new secret as the hosted app secret `appSecret` in the key's
+     * environment instead of answering it, as `createIntoAppSecret` does.
+     */
+    addSecretIntoAppSecret: (id, appSecret, input = {}, call) => post(
+      `/identity-integrations/${z44.string().uuid().parse(id)}/secrets`,
+      identityIntegrationAppSecretSchema,
+      {
+        ...credentialSecretInputSchema.parse(input),
+        appSecret: appSecretNameSchema.parse(appSecret)
+      },
+      call
+    ),
     /**
      * Stops one secret working; member sessions stay signed in. The last secret cannot be
      * revoked; disconnect the integration with `revoke` instead.
@@ -3961,7 +4090,7 @@ var auditRecordSchema = /* @__PURE__ */ (() => z45.object({
   detail: z45.string(),
   at: z45.number(),
   attempt: z45.string().nullable()
-}).refine((record6) => !record6.user || record6.user.id === record6.actor, {
+}).refine((record5) => !record5.user || record5.user.id === record5.actor, {
   message: "User profile must match the recorded actor",
   path: ["user"]
 }))();
@@ -4364,29 +4493,122 @@ function memberImports({ get, post }) {
 var memberImportsApi = (http) => memberImports(http);
 
 // src/server/client/members.ts
-import * as z50 from "zod";
+import * as z51 from "zod";
 
 // src/server/members.ts
-import * as z48 from "zod";
+import * as z49 from "zod";
 
-// src/server/wallets.ts
+// src/server/member-bans.ts
 import * as z47 from "zod";
+var memberBanRollbackSchema = /* @__PURE__ */ (() => z47.object({
+  completions: z47.boolean().default(false),
+  referralPayouts: z47.boolean().default(false),
+  pointAwards: z47.boolean().default(false)
+}).strict())();
+var banReason = /* @__PURE__ */ (() => z47.string().trim().min(1).max(500))();
+var memberBanInputSchema = /* @__PURE__ */ (() => z47.object({
+  actionId: identifier,
+  reason: banReason,
+  rollback: memberBanRollbackSchema.optional()
+}).strict())();
+var memberBanPreviewInputSchema = /* @__PURE__ */ (() => z47.object({ rollback: memberBanRollbackSchema.optional() }).strict())();
+var memberUnbanInputSchema = /* @__PURE__ */ (() => z47.object({
+  actionId: identifier,
+  reason: banReason,
+  restoreCompletions: z47.boolean().default(false)
+}).strict())();
+var points2 = /* @__PURE__ */ (() => z47.number().int().nonnegative())();
+var memberBanOutcomeSchema = /* @__PURE__ */ (() => z47.object({
+  attemptsRejected: points2,
+  completionsRevoked: points2,
+  completionsRestored: points2,
+  completionsKept: z47.array(
+    z47.object({ completion: identifier, code: z47.string() })
+  ),
+  entriesReversed: points2,
+  referralAccounts: points2,
+  points: z47.array(
+    z47.object({ ledger: identifier, reversed: points2, unreversed: points2 })
+  ),
+  referralDebt: z47.array(z47.object({ ledger: identifier, amount: points2 }))
+}))();
+var runStatusSchema = /* @__PURE__ */ (() => z47.string())();
+var runSchema = /* @__PURE__ */ (() => z47.object({
+  status: runStatusSchema,
+  finishedAt: z47.number().int().nullable(),
+  outcome: memberBanOutcomeSchema.nullable()
+}))();
+var memberBanSchema = /* @__PURE__ */ (() => z47.object({
+  id: identifier,
+  member: identifier,
+  reason: z47.string(),
+  bannedAt: z47.number().int(),
+  bannedBy: z47.string().nullable(),
+  rollback: runSchema.extend({
+    completions: z47.boolean(),
+    referralPayouts: z47.boolean(),
+    pointAwards: z47.boolean()
+  }),
+  unban: z47.object({
+    reason: z47.string(),
+    unbannedAt: z47.number().int(),
+    by: z47.string().nullable(),
+    restoreCompletions: z47.boolean(),
+    restore: runSchema.nullable()
+  }).nullable()
+}))();
+var memberBanPreviewSchema = /* @__PURE__ */ (() => z47.object({
+  member: identifier,
+  banned: z47.boolean(),
+  attempts: points2,
+  completions: points2,
+  entries: points2,
+  referralAccounts: points2,
+  points: z47.array(
+    z47.object({
+      ledger: identifier,
+      completions: points2,
+      pointAwards: points2,
+      referralPayouts: points2,
+      available: points2,
+      reversed: points2,
+      unreversed: points2,
+      referralDebt: points2
+    })
+  ),
+  inviters: z47.array(
+    z47.object({
+      member: identifier,
+      ledgers: z47.array(
+        z47.object({
+          ledger: identifier,
+          bonus: points2,
+          reversed: points2,
+          referralDebt: points2
+        })
+      )
+    })
+  )
+}))();
+
+// src/server/wallets.ts
+import * as z48 from "zod";
 var managedWalletSchema = /* @__PURE__ */ (() => linkedWalletSchema.extend({
   /**
    * True when the organization vouched for the wallet (a member import, or an app login's server at
    * sign-in), and the member has not proved it since. Absent from Relay versions without imports.
    */
-  imported: z47.boolean().optional(),
+  imported: z48.boolean().optional(),
   /**
    * The app login that vouched for the wallet at sign-in, while `imported` is true and no member
    * import attached it. Absent from Relay versions without it.
    */
   vouchedBy: accountVouchedBySchema.optional(),
   ...identitySourceFields,
-  status: z47.enum(["linked", "unlinked"]),
-  unlinkedAt: z47.number().int().nullable(),
+  status: z48.enum(["linked", "unlinked"]),
+  unlinkedAt: z48.number().int().nullable(),
   /** "member", or the operator or key that unlinked it. */
-  unlinkedBy: z47.string().nullable()
+  unlinkedBy: z48.string().nullable()
 }))();
 var balanceCheckSchema = /* @__PURE__ */ (() => walletBalanceSchema.pick({
   chain: true,
@@ -4396,58 +4618,65 @@ var balanceCheckSchema = /* @__PURE__ */ (() => walletBalanceSchema.pick({
   wallets: true,
   observedAt: true
 }).extend({ attempt: identifier }))();
-var walletBalanceChainsSchema = /* @__PURE__ */ (() => z47.object({
-  chains: z47.array(
-    z47.object({
-      chain: z47.union([
-        z47.literal(solanaMainnet),
+var walletBalanceChainsSchema = /* @__PURE__ */ (() => z48.object({
+  chains: z48.array(
+    z48.object({
+      chain: z48.union([
+        z48.literal(solanaMainnet),
         cosmosNetworkSchema,
         evmChainIdSchema
       ]),
-      name: z47.string(),
-      testnet: z47.boolean()
+      name: z48.string(),
+      testnet: z48.boolean()
     })
   )
 }))();
-var memberWalletUnlinkInputSchema = /* @__PURE__ */ (() => walletUnlinkInputSchema.extend({ reason: z47.string().trim().min(1).max(500) }).strict())();
+var memberWalletUnlinkInputSchema = /* @__PURE__ */ (() => walletUnlinkInputSchema.extend({ reason: z48.string().trim().min(1).max(500) }).strict())();
 var memberWalletSignInInputSchema = /* @__PURE__ */ (() => walletUnlinkInputSchema.extend({
-  enabled: z47.boolean(),
-  reason: z47.string().trim().min(1).max(500)
+  enabled: z48.boolean(),
+  reason: z48.string().trim().min(1).max(500)
 }).strict())();
 
 // src/server/members.ts
-var memberSchema = /* @__PURE__ */ (() => z48.object({
-  id: z48.string(),
-  test: z48.boolean().optional(),
-  name: z48.string().nullable().optional(),
-  accounts: z48.array(memberAccountSchema).default([]),
+var memberSchema = /* @__PURE__ */ (() => z49.object({
+  id: z49.string(),
+  test: z49.boolean().optional(),
+  name: z49.string().nullable().optional(),
+  accounts: z49.array(memberAccountSchema).default([]),
   /** The member's linked app identities, by kind. Absent from Relay versions without it. */
-  appIdentities: z48.array(memberAppIdentitySchema).optional(),
-  attempts: z48.number(),
-  completions: z48.number(),
-  rewards: z48.number(),
-  lastActivity: z48.number().nullable(),
+  appIdentities: z49.array(memberAppIdentitySchema).optional(),
+  attempts: z49.number(),
+  completions: z49.number(),
+  rewards: z49.number(),
+  lastActivity: z49.number().nullable(),
   /**
    * When the customer erased the member (`members.erase`), in Unix milliseconds: it keeps its ID
    * and accounting, with no profile, accounts or identities. Absent on a member that was not erased.
    */
-  erasedAt: z48.number().optional()
+  erasedAt: z49.number().optional(),
+  /**
+   * When an operator banned the member (`members.ban`), in Unix milliseconds. Absent on a member
+   * who is not banned now.
+   *
+   * @experimental A minor release can change member bans.
+   */
+  bannedAt: z49.number().optional()
 }))();
-var managedOAuthAccountBaseSchema = /* @__PURE__ */ (() => z48.object({
-  provider: z48.enum(["x", "discord"]),
-  revision: z48.number().int().nonnegative()
+var managedOAuthAccountBaseSchema = /* @__PURE__ */ (() => z49.object({
+  provider: z49.enum(["x", "discord"]),
+  revision: z49.number().int().nonnegative()
 }))();
-var managedOAuthAccountSchema = /* @__PURE__ */ (() => z48.discriminatedUnion("status", [
+var managedOAuthAccountSchema = /* @__PURE__ */ (() => z49.discriminatedUnion("status", [
   managedOAuthAccountBaseSchema.extend({
-    status: z48.literal("connected"),
-    subject: z48.string().min(1),
-    linkedAt: z48.number(),
+    status: z49.literal("connected"),
+    subject: z49.string().min(1),
+    linkedAt: z49.number(),
     /**
      * True when the organization vouched for the account, not the member's proof: a member import
      * attached it, or an app login's server did at sign-in (`vouchedBy`). Absent from Relay
      * versions without imports.
      */
-    imported: z48.boolean().optional(),
+    imported: z49.boolean().optional(),
     /**
      * The app login that vouched for the account at sign-in, for an account with `imported` set
      * that no member import attached. Absent from Relay versions without it.
@@ -4457,26 +4686,26 @@ var managedOAuthAccountSchema = /* @__PURE__ */ (() => z48.discriminatedUnion("s
      * True for a real account an operator linked to a test member without OAuth
      * (`testMembers.linkAccount`). Absent from Relay versions without it.
      */
-    testLinked: z48.boolean().optional(),
+    testLinked: z49.boolean().optional(),
     ...identitySourceFields
   }),
-  managedOAuthAccountBaseSchema.extend({ status: z48.literal("disconnected") })
+  managedOAuthAccountBaseSchema.extend({ status: z49.literal("disconnected") })
 ]))();
 var managedTelegramAccountBaseSchema = /* @__PURE__ */ (() => managedOAuthAccountBaseSchema.extend({
-  provider: z48.literal("telegram")
+  provider: z49.literal("telegram")
 }))();
-var managedTelegramAccountSchema = /* @__PURE__ */ (() => z48.discriminatedUnion("status", [
+var managedTelegramAccountSchema = /* @__PURE__ */ (() => z49.discriminatedUnion("status", [
   managedTelegramAccountBaseSchema.extend({
-    status: z48.literal("connected"),
+    status: z49.literal("connected"),
     /** The numeric Telegram user ID. */
-    subject: z48.string().min(1),
-    linkedAt: z48.number(),
+    subject: z49.string().min(1),
+    linkedAt: z49.number(),
     /**
      * True when the organization vouched for the account, not the member's proof: a member import
      * attached it, or an app login's server did at sign-in (`vouchedBy`). Absent from Relay
      * versions without it.
      */
-    imported: z48.boolean().optional(),
+    imported: z49.boolean().optional(),
     /**
      * The app login that vouched for the account at sign-in, for an account with `imported` set
      * that no member import attached. Absent from Relay versions without it.
@@ -4485,14 +4714,14 @@ var managedTelegramAccountSchema = /* @__PURE__ */ (() => z48.discriminatedUnion
     ...identitySourceFields
   }),
   managedTelegramAccountBaseSchema.extend({
-    status: z48.literal("disconnected")
+    status: z49.literal("disconnected")
   })
 ]))();
-var memberOAuthUnlinkInputSchema = /* @__PURE__ */ (() => z48.object({
-  provider: z48.enum(["x", "discord"]),
-  subject: z48.string().min(1).max(4096),
-  revision: z48.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER - 1),
-  reason: z48.string().trim().min(1).max(500)
+var memberOAuthUnlinkInputSchema = /* @__PURE__ */ (() => z49.object({
+  provider: z49.enum(["x", "discord"]),
+  subject: z49.string().min(1).max(4096),
+  revision: z49.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER - 1),
+  reason: z49.string().trim().min(1).max(500)
 }).strict())();
 var memberTelegramUnlinkInputSchema = /* @__PURE__ */ (() => memberOAuthUnlinkInputSchema.omit({ provider: true }).strict())();
 var managedMemberIdentitySchema = /* @__PURE__ */ (() => memberIdentitySchema.extend({
@@ -4501,7 +4730,7 @@ var managedMemberIdentitySchema = /* @__PURE__ */ (() => memberIdentitySchema.ex
    * login's server at sign-in), until the member links that provider's account, or signs in with
    * the X account, through Domino. Absent from Relay versions without imports.
    */
-  imported: z48.boolean().optional(),
+  imported: z49.boolean().optional(),
   /**
    * The app login that vouched for the account at sign-in, for an `imported` account no member
    * import attached. Absent from Relay versions without it.
@@ -4511,40 +4740,40 @@ var managedMemberIdentitySchema = /* @__PURE__ */ (() => memberIdentitySchema.ex
    * True for a real X or Discord account an operator linked to a test member without OAuth
    * (`testMembers.linkAccount`). Absent from Relay versions without it.
    */
-  testLinked: z48.boolean().optional(),
+  testLinked: z49.boolean().optional(),
   ...identitySourceFields,
-  status: z48.enum(["linked", "unlinked"]),
-  unlinkedAt: z48.number().int().nullable(),
+  status: z49.enum(["linked", "unlinked"]),
+  unlinkedAt: z49.number().int().nullable(),
   /** The operator or key that unlinked it. */
-  unlinkedBy: z48.string().nullable()
+  unlinkedBy: z49.string().nullable()
 }))();
-var memberIdentityChangeInputSchema = /* @__PURE__ */ (() => z48.object({
+var memberIdentityChangeInputSchema = /* @__PURE__ */ (() => z49.object({
   kind: appIdentityKindSchema,
-  subject: z48.string().min(1).max(256),
-  reason: z48.string().trim().min(1).max(500)
+  subject: z49.string().min(1).max(256),
+  reason: z49.string().trim().min(1).max(500)
 }).strict())();
-var memberDetailSchema = /* @__PURE__ */ (() => z48.object({
+var memberDetailSchema = /* @__PURE__ */ (() => z49.object({
   snapshot: snapshotSchema,
   member: memberSchema,
   progress: memberProgressSchema,
   /** Up to 25 revoked completions with an unreversed point remainder, newest first. */
-  revocationShortfalls: z48.array(completionRevocationShortfallSchema).default([]),
+  revocationShortfalls: z49.array(completionRevocationShortfallSchema).default([]),
   /** Up to 25 revoked completions, newest first. Relay older than restore leaves it out. */
-  revokedCompletions: z48.array(revokedCompletionSchema).optional(),
+  revokedCompletions: z49.array(revokedCompletionSchema).optional(),
   /** Current and historical campaign enrollment state, including inactive enrollments. */
-  campaignEnrollments: z48.array(campaignEnrollmentSchema).default([]),
-  passes: z48.array(
-    z48.object({
-      provider: z48.string(),
-      event: z48.string(),
-      subject: z48.string(),
+  campaignEnrollments: z49.array(campaignEnrollmentSchema).default([]),
+  passes: z49.array(
+    z49.object({
+      provider: z49.string(),
+      event: z49.string(),
+      subject: z49.string(),
       attempt: identifier.nullable()
     })
   ).default([]),
   /** Linked and unlinked wallets. */
-  wallets: z48.array(managedWalletSchema),
+  wallets: z49.array(managedWalletSchema),
   /** The member's 10 most recent recorded balance reads, newest first. */
-  balanceChecks: z48.array(balanceCheckSchema),
+  balanceChecks: z49.array(balanceCheckSchema),
   /** The member's participant profile in this project. */
   profile: managedProfileSchema.nullable(),
   /**
@@ -4552,26 +4781,33 @@ var memberDetailSchema = /* @__PURE__ */ (() => z48.object({
    * member ID: their selected X and Discord accounts and their `app:<name>` identities in this
    * project, including app identities an operator unlinked, by kind.
    */
-  identities: z48.array(managedMemberIdentitySchema),
+  identities: z49.array(managedMemberIdentitySchema),
   /**
    * The creator accounts the member linked (a YouTube channel), whose content managed tracker
    * sources attribute to them. Absent from Relay versions without creator accounts.
    */
-  creatorAccounts: z48.array(managedCreatorAccountSchema).optional(),
+  creatorAccounts: z49.array(managedCreatorAccountSchema).optional(),
   /**
    * Who invited the member, when they accepted, and the member import that recorded it, or null
    * when nobody invited them. Absent from Relay versions before imported referrals.
    */
-  referral: z48.object({
+  referral: z49.object({
     inviter: identifier,
-    acceptedAt: z48.number().int().nonnegative(),
-    suspended: z48.boolean(),
+    acceptedAt: z49.number().int().nonnegative(),
+    suspended: z49.boolean(),
     import: identifier.nullable()
-  }).nullable().optional()
+  }).nullable().optional(),
+  /**
+   * The member's latest ban, in force or lifted, with its rollback; null when they were never
+   * banned. Absent from Relay versions without member bans.
+   *
+   * @experimental A minor release can change member bans.
+   */
+  ban: memberBanSchema.nullable().optional()
 }))();
-var managedMemberProgressSchema = /* @__PURE__ */ (() => z48.object({
+var managedMemberProgressSchema = /* @__PURE__ */ (() => z49.object({
   member: identifier,
-  quests: z48.array(
+  quests: z49.array(
     memberProgressSchema.shape.quests.element.extend({
       /** The streak as `members.get` reports it, without the list of qualifying days. */
       streak: streakProgressSchema.omit({ days: true }).nullable().optional()
@@ -4582,10 +4818,10 @@ var managedMemberProgressSchema = /* @__PURE__ */ (() => z48.object({
   /** Each point balance the member has, by balance ID. */
   balances: snapshotSchema.shape.balances
 }))();
-var memberLookupSchema = /* @__PURE__ */ (() => z48.union([
-  z48.object({
-    provider: z48.string().min(1).max(200),
-    subject: z48.string().min(1).max(2048)
+var memberLookupSchema = /* @__PURE__ */ (() => z49.union([
+  z49.object({
+    provider: z49.string().min(1).max(200),
+    subject: z49.string().min(1).max(2048)
   }).strict(),
   identityReferenceSchema.transform(
     (reference) => reference.kind === "wallet" ? { provider: reference.chain, subject: reference.address } : { provider: reference.kind, subject: reference.subject }
@@ -4596,50 +4832,50 @@ var memberLookupSchema = /* @__PURE__ */ (() => z48.union([
     subject: address
   }))
 ]))();
-var booleanQuery = /* @__PURE__ */ (() => z48.union([
-  z48.boolean(),
-  z48.enum(["true", "false"]).transform((v) => v === "true")
+var booleanQuery = /* @__PURE__ */ (() => z49.union([
+  z49.boolean(),
+  z49.enum(["true", "false"]).transform((v) => v === "true")
 ]))();
-var managedMemberQuerySchema = /* @__PURE__ */ (() => z48.strictObject({
-  q: z48.string().max(200).optional(),
+var managedMemberQuerySchema = /* @__PURE__ */ (() => z49.strictObject({
+  q: z49.string().max(200).optional(),
   needsReview: booleanQuery.optional(),
-  limit: z48.coerce.number().int().min(1).max(100).optional(),
+  limit: z49.coerce.number().int().min(1).max(100).optional(),
   cursor: pageCursorSchema.optional()
 }))();
-var managedMemberPageSchema = /* @__PURE__ */ (() => z48.object({
-  items: z48.array(memberSchema),
-  total: z48.number().int().nonnegative(),
-  nextCursor: z48.string().nullable()
+var managedMemberPageSchema = /* @__PURE__ */ (() => z49.object({
+  items: z49.array(memberSchema),
+  total: z49.number().int().nonnegative(),
+  nextCursor: z49.string().nullable()
 }))();
 
 // src/server/member-erasure.ts
-import * as z49 from "zod";
+import * as z50 from "zod";
 var memberErasureInputSchema = evidenceRedactionInputSchema;
-var memberErasureDeletedSchema = /* @__PURE__ */ (() => z49.object({
+var memberErasureDeletedSchema = /* @__PURE__ */ (() => z50.object({
   /** The profile: display name and avatar. 0 or 1. */
-  profiles: z49.number().int().nonnegative(),
+  profiles: z50.number().int().nonnegative(),
   /** Sign-in identities. */
-  identities: z49.number().int().nonnegative(),
+  identities: z50.number().int().nonnegative(),
   /** Linked X, Discord, Telegram, Google, Apple and email accounts. */
-  accounts: z49.number().int().nonnegative(),
+  accounts: z50.number().int().nonnegative(),
   /** `app:<name>` identities your app's integration or an import gave. */
-  appIdentities: z49.number().int().nonnegative(),
+  appIdentities: z50.number().int().nonnegative(),
   /** Linked wallet addresses. */
-  wallets: z49.number().int().nonnegative(),
+  wallets: z50.number().int().nonnegative(),
   /** Signed-in sessions, ended at once. */
-  sessions: z49.number().int().nonnegative(),
+  sessions: z50.number().int().nonnegative(),
   /** Marketing consent records. */
-  consents: z49.number().int().nonnegative(),
+  consents: z50.number().int().nonnegative(),
   /** Leaderboard aliases. */
-  aliases: z49.number().int().nonnegative(),
+  aliases: z50.number().int().nonnegative(),
   /** Attempts whose submitted evidence (photo, text, URL or answers) was deleted. */
-  evidence: z49.number().int().nonnegative(),
+  evidence: z50.number().int().nonnegative(),
   /** Tracker records the member's accounts authored, whose stored content was forgotten. */
-  records: z49.number().int().nonnegative()
+  records: z50.number().int().nonnegative()
 }))();
-var memberErasureResultSchema = /* @__PURE__ */ (() => z49.object({
+var memberErasureResultSchema = /* @__PURE__ */ (() => z50.object({
   member: identifier,
-  erasedAt: z49.number().int(),
+  erasedAt: z50.number().int(),
   deleted: memberErasureDeletedSchema
 }))();
 
@@ -4667,6 +4903,54 @@ function members({ get, post }) {
       memberErasureInputSchema.parse(withActionId(input)),
       call
     ),
+    /**
+     * Bans a member in this project and environment, live or test, with a reason; requires
+     * `review` permission, and `publish` too when `rollback` reverses referral payouts or point
+     * awards. While banned, the member's attempts, completions and invitations are refused with 403
+     * `member-banned`, tracker records they author are skipped and never decided again,
+     * leaderboards and settlements leave them out, and referral payouts to and from them stop.
+     * Attempts waiting for a decision are rejected. `rollback` takes back what it names, a step at
+     * a time in the background: `ban.rollback.status` is `running` until it is `finished`. Banning
+     * a banned member adds the rollback it names to the ban in force, or answers the ban unchanged.
+     * Replaying the action ID returns the first result. Preview it first with `previewBan`.
+     *
+     * @experimental A minor release can change member bans.
+     */
+    ban: (member, input, call) => post(
+      `/members/${identifier.parse(member)}/ban`,
+      memberBanSchema,
+      memberBanInputSchema.parse(withActionId(input)),
+      call
+    ),
+    /**
+     * The dry run of `ban`: what banning the member with `rollback` would take back now, per
+     * point ledger, and what it would correct for their inviter; requires `review` permission.
+     * Changes nothing.
+     *
+     * @experimental A minor release can change member bans.
+     */
+    previewBan: (member, input = {}, call) => post(
+      `/members/${identifier.parse(member)}/ban/preview`,
+      memberBanPreviewSchema,
+      memberBanPreviewInputSchema.parse(input),
+      call
+    ),
+    /**
+     * Lifts the member's ban, with a reason; requires `review` permission. The member takes part
+     * again from now on: what they did while banned stays skipped. A rollback still running stops.
+     * `restoreCompletions` restores the completions the rollback revoked, in the background
+     * (`ban.unban.restore`); reversed referral payouts and point awards stay reversed. Refused
+     * with 409 `member-not-banned` when no ban is in force. Replaying the action ID returns the
+     * first result.
+     *
+     * @experimental A minor release can change member bans.
+     */
+    unban: (member, input, call) => post(
+      `/members/${identifier.parse(member)}/unban`,
+      memberBanSchema,
+      memberUnbanInputSchema.parse(withActionId(input)),
+      call
+    ),
     /**
      * Every identity a member proved, by kind: wallets, X, Discord and Telegram accounts, and
      * `app:<name>` identities, each with its link, sign-in and the actions an operator can take.
@@ -4814,7 +5098,7 @@ function members({ get, post }) {
     /** Who each member is: up to 100 distinct IDs; unknown IDs come back without accounts. */
     people: (members2, call) => get(
       `/people${queryString({ ids: members2.join(",") })}`,
-      z50.array(personSchema),
+      z51.array(personSchema),
       call
     ),
     /**
@@ -4824,7 +5108,7 @@ function members({ get, post }) {
      */
     oauthAccounts: (member, call) => get(
       `/members/${encodeURIComponent(member)}/oauth-accounts`,
-      z50.array(managedOAuthAccountSchema),
+      z51.array(managedOAuthAccountSchema),
       call
     ),
     /**
@@ -4836,7 +5120,7 @@ function members({ get, post }) {
      */
     unlinkOAuthAccount: (member, input, call) => post(
       `/members/${encodeURIComponent(member)}/oauth-accounts/unlink`,
-      z50.array(managedOAuthAccountSchema),
+      z51.array(managedOAuthAccountSchema),
       expectedRevision(memberOAuthUnlinkInputSchema).parse(input),
       call
     ),
@@ -4919,7 +5203,7 @@ function members({ get, post }) {
      */
     unlinkWallet: (member, input, call) => post(
       `/members/${encodeURIComponent(member)}/wallets/unlink`,
-      z50.array(managedWalletSchema),
+      z51.array(managedWalletSchema),
       memberWalletUnlinkInputSchema.parse(input),
       call
     ),
@@ -4932,7 +5216,7 @@ function members({ get, post }) {
      */
     unlinkIdentity: (member, input, call) => post(
       `/members/${encodeURIComponent(member)}/identities/unlink`,
-      z50.array(managedMemberIdentitySchema),
+      z51.array(managedMemberIdentitySchema),
       memberIdentityChangeInputSchema.parse(input),
       call
     ),
@@ -4943,7 +5227,7 @@ function members({ get, post }) {
      */
     relinkIdentity: (member, input, call) => post(
       `/members/${encodeURIComponent(member)}/identities/relink`,
-      z50.array(managedMemberIdentitySchema),
+      z51.array(managedMemberIdentitySchema),
       memberIdentityChangeInputSchema.parse(input),
       call
     ),
@@ -4955,7 +5239,7 @@ function members({ get, post }) {
      */
     setWalletSignIn: (member, input, call) => post(
       `/members/${encodeURIComponent(member)}/wallets/sign-in`,
-      z50.array(managedWalletSchema),
+      z51.array(managedWalletSchema),
       memberWalletSignInInputSchema.parse(input),
       call
     )
@@ -4963,584 +5247,6 @@ function members({ get, post }) {
 }
 var membersApi = (http) => members(http);
 
-// src/server/hosting.ts
-import * as z52 from "zod";
-
-// src/server/starters.ts
-import * as z51 from "zod";
-var starters = [
-  {
-    id: "campaign",
-    title: "Campaign tour",
-    summary: "A neutral quest app with a guided tour of every quest kind. The blank canvas for anything."
-  },
-  {
-    id: "classic",
-    title: "Classic questboard",
-    summary: "The familiar Domino portal: quests in a grid grouped by section, a claim page, points, and a leaderboard."
-  },
-  {
-    id: "waitlist",
-    title: "Waitlist",
-    summary: "Collect sign-ups before launch. People move up the line by inviting friends."
-  },
-  {
-    id: "referral",
-    title: "Referral program",
-    summary: "Give every member an invite link and reward them when friends join and qualify."
-  },
-  {
-    id: "discord",
-    title: "Discord activation",
-    summary: "Turn new Discord members into regulars with quests for joining, introducing themselves, and taking part, rewarded with roles."
-  },
-  {
-    id: "loyalty",
-    title: "Loyalty program",
-    summary: "Members earn points in a campaign, qualify into a members' group, and spend points on offers, some for members only."
-  },
-  {
-    id: "api",
-    title: "API",
-    summary: "A headless Worker with typed routes and interactive API docs, for plugging Domino into your own product."
-  }
-];
-var offeredStarterSchema = /* @__PURE__ */ (() => z51.string().refine((id) => starters.some((starter) => starter.id === id), {
-  error: `Unknown starter. Choose one of: ${starters.map((starter) => starter.id).join(", ")}.`
-}))();
-var starterTemplates = [
-  {
-    id: "campaign",
-    title: "Campaign tour",
-    summary: "A neutral quest app with a guided tour of every quest kind. The blank canvas for anything."
-  },
-  {
-    id: "classic",
-    title: "Classic questboard",
-    summary: "The familiar Domino portal: quests in a grid grouped by section, a claim page, points, and a leaderboard."
-  },
-  {
-    id: "waitlist",
-    title: "Waitlist",
-    summary: "Collect sign-ups before launch. People move up the line by inviting friends."
-  },
-  {
-    id: "referral",
-    title: "Referral program",
-    summary: "Give every member an invite link and reward them when friends join and qualify."
-  },
-  {
-    id: "discord",
-    title: "Discord activation",
-    summary: "Turn new Discord members into regulars with quests for joining, introducing themselves, and taking part, rewarded with roles."
-  },
-  {
-    id: "api",
-    title: "API",
-    summary: "A headless Worker with typed routes and interactive API docs, for plugging Domino into your own product."
-  }
-];
-var starterIdSchema = /* @__PURE__ */ (() => z51.enum(
-  starterTemplates.map((template) => template.id)
-))();
-
-// src/server/hosting.ts
-var outputPathSchema = /* @__PURE__ */ (() => z52.string().min(1).max(512).refine(
-  (path) => path.split("/").every(
-    (part) => /^[\w-][\w.-]*$/.test(part) && part !== "node_modules"
-  ),
-  "Expected a relative build output path without hidden segments"
-))();
-var appRoutingSchema = /* @__PURE__ */ (() => z52.enum(["legacy", "transparent"]).default("legacy"))();
-var APP_SECRET_LIMIT = 50;
-var APP_KV_LIMIT = 5;
-var APP_SQL_LIMIT = 5;
-var APP_MIGRATION_LIMIT = 100;
-var APP_MIGRATION_FILE_BYTES = 9e4;
-var APP_MIGRATION_TOTAL_BYTES = 1e6;
-var appSecretNameSchema = /* @__PURE__ */ (() => z52.string().regex(
-  /^[A-Z_][A-Z0-9_]{0,63}$/,
-  "Use 1-64 uppercase letters, digits, and underscores, not starting with a digit"
-).refine(
-  (name) => !name.startsWith("DOMINO_") && name !== "ASSETS",
-  "DOMINO_ names and ASSETS are reserved for Domino's own bindings"
-))();
-var appSecretValueSchema = /* @__PURE__ */ (() => z52.string().min(1).refine(
-  (value) => new TextEncoder().encode(value).length <= 5120,
-  "Secret values can be at most 5 KiB"
-))();
-var appSecretInputSchema = /* @__PURE__ */ (() => z52.object({ value: appSecretValueSchema }).strict())();
-var appSecretSchema = /* @__PURE__ */ (() => z52.object({
-  name: appSecretNameSchema,
-  updatedAt: z52.number(),
-  updatedBy: z52.string()
-}))();
-var appSecretDeclarationSchema = /* @__PURE__ */ (() => z52.object({
-  description: z52.string().trim().min(1).max(500),
-  required: z52.boolean().default(true)
-}).strict())();
-var appSecretDeclarationsSchema = /* @__PURE__ */ (() => z52.record(appSecretNameSchema, appSecretDeclarationSchema).refine(
-  (secrets3) => Object.keys(secrets3).length <= limits.apps.secrets,
-  `Declare at most ${limits.apps.secrets} app secrets`
-))();
-var appSecretListSchema = /* @__PURE__ */ (() => z52.object({
-  secrets: z52.array(appSecretSchema),
-  declared: z52.array(appSecretDeclarationSchema.extend({ name: appSecretNameSchema })).default([])
-}))();
-var hostedAppSecretsSchema = /* @__PURE__ */ (() => z52.object({ secrets: z52.record(appSecretNameSchema, appSecretValueSchema) }).strict())();
-var storageDescription = /* @__PURE__ */ (() => z52.object({
-  description: z52.string().trim().min(1).max(500)
-}).strict())();
-var appStorageSchema = /* @__PURE__ */ (() => z52.object({
-  kv: z52.record(appSecretNameSchema, storageDescription).refine(
-    (stores) => Object.keys(stores).length <= limits.apps.kvStores,
-    `Declare at most ${limits.apps.kvStores} KV stores`
-  ).default({}),
-  sql: z52.record(
-    appSecretNameSchema,
-    storageDescription.extend({
-      migrations: outputPathSchema.optional()
-    }).strict()
-  ).refine(
-    (stores) => Object.keys(stores).length <= limits.apps.sqlStores,
-    `Declare at most ${limits.apps.sqlStores} SQL stores`
-  ).default({})
-}).strict())();
-var appStorageKindSchema = /* @__PURE__ */ (() => z52.enum(["kv", "sql"]))();
-var appStorageListSchema = /* @__PURE__ */ (() => z52.object({
-  stores: z52.array(
-    z52.object({
-      kind: z52.string(),
-      name: appSecretNameSchema,
-      createdAt: z52.number().nullable(),
-      declared: z52.boolean(),
-      description: z52.string().optional()
-    })
-  )
-}))();
-var APP_STORAGE_ROW_LIMIT = 50;
-var APP_STORAGE_PREVIEW_CHARACTERS = 2e3;
-var appStorageCellSchema = /* @__PURE__ */ (() => z52.union([
-  z52.string(),
-  z52.number(),
-  z52.null(),
-  z52.object({ text: z52.string(), truncated: z52.literal(true) }),
-  z52.object({ blob: z52.number().int().min(0) })
-]))();
-var appStorageTablesSchema = /* @__PURE__ */ (() => z52.object({
-  tables: z52.array(
-    /** `kind` is SQLite's: `table` or `view`. */
-    z52.object({ name: z52.string(), kind: z52.string() })
-  )
-}))();
-var appStorageRowsSchema = /* @__PURE__ */ (() => z52.object({
-  table: z52.string(),
-  columns: z52.array(z52.string()),
-  rows: z52.array(z52.array(appStorageCellSchema)),
-  /** How many rows come before this page in storage order. */
-  offset: z52.number().int().min(0),
-  total: z52.number().int().min(0),
-  /** Pass back as `cursor` for the next page; null on the last one. */
-  nextCursor: pageCursorSchema.nullable().default(null)
-}))();
-var appStorageKeysSchema = /* @__PURE__ */ (() => z52.object({
-  keys: z52.array(
-    z52.object({ name: z52.string(), expiration: z52.number().nullable() })
-  ),
-  /** Pass back as `cursor` for the next page; null on the last one. */
-  nextCursor: pageCursorSchema.nullable().default(null),
-  /** @deprecated Use `nextCursor`. Removed in 2.0.0. */
-  cursor: z52.string().nullable()
-}))();
-var appStorageValueSchema = /* @__PURE__ */ (() => z52.object({
-  key: z52.string(),
-  size: z52.number().int().min(0),
-  /** Null when the value is not UTF-8 text. */
-  text: z52.string().nullable(),
-  truncated: z52.boolean()
-}))();
-var APP_STORAGE_CELL_CHARACTERS = 1e5;
-var appStorageCellPageSchema = /* @__PURE__ */ (() => z52.object({
-  table: z52.string(),
-  column: z52.string(),
-  /** The row's position in storage order: a rows page's `offset` plus its index on that page. */
-  row: z52.number().int().min(0),
-  /** SQLite's storage class. */
-  type: z52.enum(["text", "integer", "real", "blob", "null"]),
-  /** Characters of text, or of a number's text form; bytes of a BLOB; null for NULL. */
-  length: z52.number().int().min(0).nullable(),
-  /** How many characters come before this page. */
-  offset: z52.number().int().min(0),
-  /** Up to 100,000 characters from `offset`. Null for a BLOB, whose bytes are never read, and NULL. */
-  text: z52.string().nullable(),
-  /** Pass back as `cursor` for the next page; null on the last one. */
-  nextCursor: pageCursorSchema.nullable().default(null)
-}))();
-var appMigrationNameSchema = /* @__PURE__ */ (() => z52.string().max(255).regex(/^[\w-][\w.-]*\.sql$/))();
-function compareAppMigrations(a, b) {
-  const left = Number.parseInt(a.split("_")[0], 10);
-  const right = Number.parseInt(b.split("_")[0], 10);
-  if (left !== right) {
-    if (Number.isFinite(left) && Number.isFinite(right)) {
-      return left - right;
-    }
-    if (Number.isFinite(left)) {
-      return -1;
-    }
-    if (Number.isFinite(right)) {
-      return 1;
-    }
-  }
-  return a < b ? -1 : a > b ? 1 : 0;
-}
-var appMigrationsSchema = /* @__PURE__ */ (() => z52.record(
-  appSecretNameSchema,
-  z52.array(
-    z52.object({
-      name: appMigrationNameSchema,
-      sql: z52.string().min(1).refine(
-        (sql) => new TextEncoder().encode(sql).length <= limits.apps.migrationFileBytes,
-        `A migration file must not exceed ${limits.apps.migrationFileBytes} bytes`
-      )
-    }).strict()
-  ).max(limits.apps.migrations).refine(
-    (files) => new Set(files.map((file) => file.name)).size === files.length,
-    "Duplicate migration filenames"
-  )
-).refine(
-  (stores) => Object.values(stores).flat().reduce(
-    (total, file) => total + new TextEncoder().encode(file.sql).length,
-    0
-  ) <= limits.apps.migrationTotalBytes,
-  `Migrations must not exceed ${limits.apps.migrationTotalBytes} bytes in total`
-))();
-var appScripts = /* @__PURE__ */ (() => ({
-  routing: appRoutingSchema,
-  devScript: z52.string().regex(/^[\w:-]+$/),
-  checkScript: z52.string().regex(/^[\w:-]+$/),
-  buildScript: z52.string().regex(/^[\w:-]+$/)
-}))();
-var workerSettings = /* @__PURE__ */ (() => ({
-  runWorkerFirst: z52.boolean().default(false),
-  main: outputPathSchema.refine(
-    (path) => /\.m?js$/.test(path),
-    "Expected a compiled JavaScript entry"
-  ),
-  compatibilityDate: z52.string().regex(/^\d{4}-\d{2}-\d{2}$/),
-  compatibilityFlags: z52.array(z52.string().min(1)).max(50).default([]),
-  vars: z52.record(
-    z52.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/).refine((name) => name !== "ASSETS"),
-    z52.string()
-  ).default({}),
-  secrets: appSecretDeclarationsSchema.default({}),
-  storage: appStorageSchema.optional(),
-  schedules: appSchedulesSchema.optional()
-}))();
-var distinctBindings = (worker, ctx) => {
-  const owners = /* @__PURE__ */ new Map();
-  const sources = [
-    ["vars", "an app var", Object.keys(worker.vars)],
-    ["secrets", "a declared secret", Object.keys(worker.secrets)],
-    ["storage", "a KV store", Object.keys(worker.storage?.kv ?? {})],
-    ["storage", "a SQL store", Object.keys(worker.storage?.sql ?? {})]
-  ];
-  for (const [path, owner, names] of sources) {
-    for (const name of names) {
-      const first = owners.get(name);
-      if (first) {
-        ctx.addIssue({
-          code: "custom",
-          message: `Binding name ${name} is used by both ${first} and ${owner}`,
-          path: [path]
-        });
-      } else {
-        owners.set(name, owner);
-      }
-    }
-  }
-};
-var hostedAppSchema = /* @__PURE__ */ (() => z52.discriminatedUnion("kind", [
-  z52.object({
-    kind: z52.literal("static"),
-    directory: outputPathSchema,
-    ...appScripts
-  }).strict(),
-  z52.object({
-    kind: z52.literal("worker"),
-    directory: outputPathSchema,
-    assetsDirectory: outputPathSchema.optional(),
-    ...appScripts,
-    ...workerSettings
-  }).strict().superRefine(distinctBindings)
-]))();
-var repositorySchema = /* @__PURE__ */ (() => z52.object({
-  id: z52.string().uuid(),
-  organization: identifier,
-  project: identifier,
-  remote: z52.string().url(),
-  defaultBranch: z52.string(),
-  status: z52.enum(["provisioning", "ready"])
-}))();
-var repositoryCreateSchema = /* @__PURE__ */ (() => z52.object({
-  /** Omitted: the starter chosen at project setup, else `campaign`. */
-  starter: offeredStarterSchema.optional()
-}).strict())();
-var createRepositorySchema = /* @__PURE__ */ (() => z52.object({
-  /** Omitted: the starter chosen at project setup, else `campaign`. */
-  starter: starterIdSchema.optional()
-}).strict())();
-var deviceStartSchema = /* @__PURE__ */ (() => z52.object({
-  challenge: z52.string().regex(/^[a-f0-9]{64}$/)
-}).strict())();
-var deviceRedeemSchema = /* @__PURE__ */ (() => z52.object({
-  id: z52.string().uuid(),
-  verifier: z52.string().min(43).max(128)
-}).strict())();
-var deviceApproveSchema = /* @__PURE__ */ (() => z52.object({
-  id: z52.string().uuid(),
-  code: z52.string().regex(/^[A-F0-9]{4}-[A-F0-9]{4}$/)
-}).strict())();
-var commitSchema = /* @__PURE__ */ (() => z52.string().regex(/^[a-f0-9]{40}$/))();
-var stageRequestSchema = /* @__PURE__ */ (() => z52.object({
-  commit: commitSchema,
-  requestId: z52.string().uuid()
-}).strict())();
-var buildIdentitySchema = /* @__PURE__ */ (() => z52.object({
-  routing: appRoutingSchema,
-  slug: z52.string().min(1).max(35).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/).optional(),
-  runtime: z52.enum(["simulation", "hosted-test"]).default("simulation"),
-  id: z52.string().uuid(),
-  repository: z52.string().uuid(),
-  organization: identifier,
-  project: identifier,
-  commit: commitSchema,
-  createdAt: z52.number(),
-  actor: z52.string(),
-  commitMessage: z52.string().max(500).optional()
-}))();
-var buildPhaseSchema = /* @__PURE__ */ (() => z52.enum([
-  "queued",
-  "source",
-  "install",
-  "check",
-  "build",
-  "deploy",
-  "ready",
-  "failed"
-]))();
-var buildStatusSchema = /* @__PURE__ */ (() => z52.object({
-  phase: buildPhaseSchema,
-  failedPhase: buildPhaseSchema.optional(),
-  updatedAt: z52.number(),
-  message: z52.string()
-}))();
-var hostedBuildSchema = /* @__PURE__ */ (() => buildIdentitySchema.extend({
-  ...buildStatusSchema.shape,
-  finished: z52.boolean(),
-  current: z52.boolean(),
-  stagingUrl: z52.string().url(),
-  /**
-   * The test deployment the build published from its quest artifacts when it activated, readable
-   * with `GET /deployments/{id}`; null until it activates. A build whose bundle declares no
-   * resources publishes none, so its ID is not found. Only `GET /builds/{id}` includes it.
-   */
-  deployment: z52.string().nullable().optional()
-}))();
-var liveAppSchema = /* @__PURE__ */ (() => z52.object({
-  url: z52.string().url().nullable(),
-  state: z52.enum(["none", "deploying", "live", "failed"]),
-  /** The build the address serves, or null before the first one goes live. */
-  build: z52.string().uuid().nullable(),
-  /** The build the last approved promotion asked for, while it differs from `build`. */
-  requested: z52.string().uuid().nullable(),
-  failure: z52.string().nullable()
-}))();
-var customDomainStateSchema = /* @__PURE__ */ (() => z52.enum([
-  "awaiting-dns",
-  "provisioning",
-  "active",
-  "attention",
-  "suspended"
-]))();
-var customDomainRecordSchema = /* @__PURE__ */ (() => z52.object({
-  type: z52.enum(["CNAME", "TXT"]),
-  name: z52.string(),
-  value: z52.string(),
-  /** The values public DNS returned: empty when it had none, null before Domino looked. */
-  found: z52.array(z52.string()).nullable(),
-  matches: z52.boolean()
-}))();
-var domainTimeMs = /* @__PURE__ */ (() => z52.number().int().nonnegative().nullish())();
-var customDomainSchema = /* @__PURE__ */ (() => z52.object({
-  id: z52.string().uuid(),
-  hostname: z52.string(),
-  url: z52.string().url(),
-  state: customDomainStateSchema,
-  /** What to fix, in plain words, while the domain needs attention or is suspended. */
-  issue: z52.object({ code: z52.string(), message: z52.string() }).nullable(),
-  records: z52.array(customDomainRecordSchema),
-  /** Cloudflare's statuses and errors in its own words, once the domain is proven. */
-  cloudflare: z52.object({
-    hostnameStatus: z52.string(),
-    certificateStatus: z52.string().nullable(),
-    validationErrors: z52.array(z52.string()),
-    verificationErrors: z52.array(z52.string()),
-    certificateExpiresAt: z52.string().nullable(),
-    certificateExpiresAtMs: domainTimeMs
-  }).nullable(),
-  checkedAt: z52.string().nullable(),
-  checkedAtMs: domainTimeMs,
-  nextCheckAt: z52.string().nullable(),
-  nextCheckAtMs: domainTimeMs,
-  createdAt: z52.string(),
-  createdAtMs: z52.number().int().nonnegative().optional()
-}))();
-var customDomainListSchema = /* @__PURE__ */ (() => z52.object({
-  domains: z52.array(customDomainSchema)
-}))();
-var customDomainInputSchema = /* @__PURE__ */ (() => z52.object({ hostname: z52.string().min(1).max(300) }).strict())();
-var stagingAccessModeSchema = /* @__PURE__ */ (() => z52.enum(["console", "password"]))();
-var stagingAccessSchema = /* @__PURE__ */ (() => z52.object({ mode: stagingAccessModeSchema }))();
-var stagingAccessInputSchema = /* @__PURE__ */ (() => z52.discriminatedUnion("mode", [
-  z52.object({ mode: z52.literal("console") }).strict(),
-  z52.object({
-    mode: z52.literal("password"),
-    password: z52.string().min(8).max(128)
-  }).strict()
-]))();
-var stagingOrigin = "https://staging.invalid";
-var stagingPathSchema = /* @__PURE__ */ (() => z52.string().max(2048).refine((path) => {
-  if (!path.startsWith("/") || path.startsWith("//") || path.includes("\\") || // oxlint-disable-next-line no-control-regex
-  /[\u0000-\u001f\u007f]/.test(path)) {
-    return false;
-  }
-  try {
-    return new URL(path, stagingOrigin).origin === stagingOrigin;
-  } catch {
-    return false;
-  }
-}, "Expected a path on the staging host"))();
-var stagingLinkSchema = /* @__PURE__ */ (() => z52.object({
-  url: z52.string().url(),
-  expiresAt: z52.number()
-}))();
-var buildSnapshotSchema = /* @__PURE__ */ (() => z52.object({
-  builds: z52.array(hostedBuildSchema),
-  current: hostedBuildSchema.nullable(),
-  selected: hostedBuildSchema.nullable(),
-  logs: z52.string()
-}))();
-var assetPathSchema = /* @__PURE__ */ (() => z52.string().max(512).refine(
-  (path) => path.startsWith("/") && // oxlint-disable-next-line no-control-regex -- Asset paths must reject control characters.
-  !/[\\\u0000-\u001f?#%]/.test(path) && path.slice(1).split("/").every((part) => part.length > 0 && !part.startsWith(".")),
-  "Expected a public asset path without hidden segments"
-))();
-var base64Schema = /* @__PURE__ */ (() => z52.string().regex(/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/))();
-var stagedDeploymentLimits = {
-  /** Bytes of JSON, uncompressed. */
-  size: 64e6,
-  /** Bytes of the Brotli-compressed object. */
-  compressedSize: 1e7
-};
-var stagedDeploymentSchema = /* @__PURE__ */ (() => z52.object({
-  encoding: z52.literal("br"),
-  sha256: z52.string().regex(/^[0-9a-f]{64}$/),
-  compressedSize: z52.number().int().positive().max(limits.stagedDeployment.compressedSize),
-  size: z52.number().int().positive().max(limits.stagedDeployment.size)
-}).strict())();
-var stagedDeploymentContentSchema = /* @__PURE__ */ (() => stagedDeploymentSchema.extend({
-  content: z52.string().max(Math.ceil(limits.stagedDeployment.compressedSize / 3) * 4)
-}).strict())();
-var stagedDeploymentKey = (build, sha256) => `builds/${build}/deployment/${sha256}.br`;
-var artifactFields = /* @__PURE__ */ (() => ({
-  routing: appRoutingSchema,
-  worker: z52.object({
-    ...workerSettings,
-    migrations: appMigrationsSchema.optional(),
-    modules: z52.array(
-      z52.object({
-        path: outputPathSchema.refine((path) => path !== "metadata"),
-        type: z52.enum([
-          "application/javascript+module",
-          "application/wasm",
-          "text/plain",
-          "application/octet-stream"
-        ]),
-        content: base64Schema.max(14e6)
-      }).strict()
-    ).min(1).max(500)
-  }).strict().superRefine(distinctBindings).optional(),
-  assets: z52.array(
-    z52.object({
-      path: assetPathSchema,
-      content: base64Schema.max(14e6),
-      size: z52.number().int().min(0).max(1e7)
-    }).strict()
-  ).max(500)
-}))();
-var inlineCode = () => z52.unknown().optional().transform((value) => value);
-var buildArtifactsSchema = /* @__PURE__ */ (() => z52.discriminatedUnion("format", [
-  z52.object({
-    format: z52.literal(1),
-    ...artifactFields,
-    quests: inlineCode(),
-    catalog: inlineCode()
-  }).strict(),
-  z52.object({
-    format: z52.literal(2),
-    ...artifactFields,
-    deployment: stagedDeploymentSchema,
-    images: z52.array(imageAssetArtifactSchema).max(10)
-  }).strict()
-]).superRefine((value, ctx) => {
-  if (value.worker) {
-    const modules = value.worker.modules;
-    for (const name of Object.keys(value.worker.migrations ?? {})) {
-      if (!value.worker.storage?.sql[name]?.migrations) {
-        ctx.addIssue({
-          code: "custom",
-          message: `Migrations for undeclared SQL store ${name}`
-        });
-      }
-    }
-    if (new Set(modules.map((m) => m.path)).size !== modules.length) {
-      ctx.addIssue({
-        code: "custom",
-        message: "Duplicate Worker module paths"
-      });
-    }
-    if (!modules.some(
-      (m) => m.path === value.worker?.main && m.type === "application/javascript+module"
-    )) {
-      ctx.addIssue({
-        code: "custom",
-        message: "Worker entry module is missing"
-      });
-    }
-    if (modules.reduce(
-      (sum, m) => sum + m.content.length * 3 / 4 - (m.content.endsWith("==") ? 2 : m.content.endsWith("=") ? 1 : 0),
-      0
-    ) > 1e7) {
-      ctx.addIssue({
-        code: "custom",
-        message: "Worker modules exceed 10 MB"
-      });
-    }
-  }
-  if (new Set(value.assets.map((a) => a.path)).size !== value.assets.length) {
-    ctx.addIssue({ code: "custom", message: "Duplicate asset paths" });
-  }
-  if (!value.worker && !value.assets.some((a) => a.path === "/index.html")) {
-    ctx.addIssue({
-      code: "custom",
-      message: "Build must include index.html"
-    });
-  }
-  if (value.assets.reduce((sum, a) => sum + a.size, 0) > 1e7) {
-    ctx.addIssue({ code: "custom", message: "Staging assets exceed 10 MB" });
-  }
-}))();
-
 // src/server/client/live-app.ts
 function liveApp({ get }) {
   return {
@@ -5583,73 +5289,76 @@ function domains({ get, post, raw }) {
 var domainsApi = (http) => domains(http);
 
 // src/server/connections.ts
-import { z as z53 } from "zod";
-var connectionPluginSchema = /* @__PURE__ */ (() => z53.string().max(40).regex(/^[a-z][a-z0-9]*(-[a-z0-9]+)*$/, "Use a kebab-case plugin ID"))();
+import { z as z52 } from "zod";
+var connectionPluginSchema = /* @__PURE__ */ (() => z52.string().max(40).regex(/^[a-z][a-z0-9]*(-[a-z0-9]+)*$/, "Use a kebab-case plugin ID"))();
 var knownConnectionStatuses = [
   "disconnected",
   "ready",
   "attention"
 ];
-var connectionStatusSchema = /* @__PURE__ */ (() => z53.string().min(1))();
+var connectionStatusSchema = /* @__PURE__ */ (() => z52.string().min(1))();
 var knownConnectionReconnectReasons = ["revoked", "expired"];
-var reconnectReasonSchema = /* @__PURE__ */ (() => z53.string().min(1))();
-var connectionSecretFieldSchema = /* @__PURE__ */ (() => z53.object({
-  name: z53.string(),
-  label: z53.string(),
-  help: z53.string().nullable(),
-  set: z53.boolean()
-}))();
-var connectionSchema = /* @__PURE__ */ (() => z53.object({
-  plugin: z53.string(),
-  name: z53.string(),
-  environment: z53.enum(["test", "live"]),
+var reconnectReasonSchema = /* @__PURE__ */ (() => z52.string().min(1))();
+var connectionSecretFieldSchema = /* @__PURE__ */ (() => z52.object({
+  name: z52.string(),
+  label: z52.string(),
+  help: z52.string().nullable(),
+  set: z52.boolean()
+}))();
+var connectionSchema = /* @__PURE__ */ (() => z52.object({
+  plugin: z52.string(),
+  name: z52.string(),
+  environment: z52.enum(["test", "live"]),
   status: connectionStatusSchema,
-  issue: z53.string().nullable(),
-  config: z53.record(z53.string(), z53.unknown()).nullable(),
-  configSchema: z53.record(z53.string(), z53.unknown()),
-  secrets: z53.array(connectionSecretFieldSchema),
-  revision: z53.number().int().nonnegative(),
-  connectedAt: z53.number().nullable(),
-  connectedBy: z53.string().nullable(),
-  updatedAt: z53.number().nullable(),
+  issue: z52.string().nullable(),
+  config: z52.record(z52.string(), z52.unknown()).nullable(),
+  configSchema: z52.record(z52.string(), z52.unknown()),
+  secrets: z52.array(connectionSecretFieldSchema),
+  revision: z52.number().int().nonnegative(),
+  connectedAt: z52.number().nullable(),
+  connectedBy: z52.string().nullable(),
+  updatedAt: z52.number().nullable(),
   // A Relay from before OAuth connections answers none.
   reconnectReason: reconnectReasonSchema.nullable().default(null),
   // A Relay from before dry runs answers none.
-  dryRun: z53.boolean().default(false)
+  dryRun: z52.boolean().default(false)
 }))();
-var connectionPageSchema = /* @__PURE__ */ (() => z53.object({
-  items: z53.array(connectionSchema),
-  nextCursor: z53.string().nullable()
+var connectionPageSchema = /* @__PURE__ */ (() => z52.object({
+  items: z52.array(connectionSchema),
+  nextCursor: z52.string().nullable()
 }))();
-var actionId = /* @__PURE__ */ (() => z53.string().uuid().default(() => crypto.randomUUID()))();
-var config = /* @__PURE__ */ (() => z53.record(z53.string(), z53.unknown()))();
-var secrets = /* @__PURE__ */ (() => z53.record(z53.string().max(64), z53.string().min(1).max(8192)))();
-var connectionConnectInputSchema = /* @__PURE__ */ (() => z53.strictObject({
+var actionId = /* @__PURE__ */ (() => z52.string().uuid().default(() => crypto.randomUUID()))();
+var config = /* @__PURE__ */ (() => z52.record(z52.string(), z52.unknown()))();
+var secrets = /* @__PURE__ */ (() => z52.record(z52.string().max(64), z52.string().min(1).max(8192)))();
+var connectionConnectInputSchema = /* @__PURE__ */ (() => z52.strictObject({
   config,
   secrets: secrets.default({}),
-  dryRun: z53.boolean().optional(),
+  dryRun: z52.boolean().optional(),
   actionId
 }))();
-var connectionAuthorizeInputSchema = /* @__PURE__ */ (() => z53.strictObject({
+var connectionAuthorizeInputSchema = /* @__PURE__ */ (() => z52.strictObject({
   config: config.default({}),
-  returnTo: z53.string().url().max(2048).optional(),
+  returnTo: z52.string().url().max(2048).optional(),
   actionId
 }))();
-var connectionAuthorizationSchema = /* @__PURE__ */ (() => z53.object({
-  authorizationUrl: z53.string().url(),
-  expiresAt: z53.number()
+var connectionAuthorizationSchema = /* @__PURE__ */ (() => z52.object({
+  authorizationUrl: z52.string().url(),
+  expiresAt: z52.number()
+}))();
+var connectionAuthorizationCompleteInputSchema = /* @__PURE__ */ (() => z52.strictObject({
+  code: z52.string().min(1).max(200)
 }))();
-var connectionUpdateInputSchema = /* @__PURE__ */ (() => z53.strictObject({
+var connectionUpdateInputSchema = /* @__PURE__ */ (() => z52.strictObject({
   config: config.optional(),
   secrets: secrets.optional(),
-  expectedRevision: z53.number().int().nonnegative().optional(),
+  expectedRevision: z52.number().int().nonnegative().optional(),
   actionId
 }).refine(
   (input) => input.config !== void 0 || Object.keys(input.secrets ?? {}).length,
   { message: "Change the config, a secret, or both" }
 ))();
-var connectionDisconnectInputSchema = /* @__PURE__ */ (() => z53.strictObject({
-  expectedRevision: z53.number().int().nonnegative().optional(),
+var connectionDisconnectInputSchema = /* @__PURE__ */ (() => z52.strictObject({
+  expectedRevision: z52.number().int().nonnegative().optional(),
   actionId
 }))();
 var knownPluginSlots = [
@@ -5660,29 +5369,29 @@ var knownPluginSlots = [
   "evaluator-capability",
   "identity"
 ];
-var pluginSlotSchema = /* @__PURE__ */ (() => z53.string().min(1))();
-var pluginSchema = /* @__PURE__ */ (() => z53.object({
-  id: z53.string(),
-  name: z53.string(),
-  slots: z53.array(pluginSlotSchema),
-  configSchema: z53.record(z53.string(), z53.unknown()),
-  secrets: z53.array(
-    z53.object({
-      name: z53.string(),
-      label: z53.string(),
-      help: z53.string().nullable()
+var pluginSlotSchema = /* @__PURE__ */ (() => z52.string().min(1))();
+var pluginSchema = /* @__PURE__ */ (() => z52.object({
+  id: z52.string(),
+  name: z52.string(),
+  slots: z52.array(pluginSlotSchema),
+  configSchema: z52.record(z52.string(), z52.unknown()),
+  secrets: z52.array(
+    z52.object({
+      name: z52.string(),
+      label: z52.string(),
+      help: z52.string().nullable()
     })
   ),
-  events: z53.array(z53.string()),
+  events: z52.array(z52.string()),
   // A Relay from before OAuth connections answers none.
-  oauth: z53.object({ configured: z53.boolean(), scopes: z53.array(z53.string()) }).nullable().default(null),
-  console: z53.object({ component: z53.string() }).nullable().default(null),
+  oauth: z52.object({ configured: z52.boolean(), scopes: z52.array(z52.string()) }).nullable().default(null),
+  console: z52.object({ component: z52.string() }).nullable().default(null),
   // A Relay from before dry runs answers none.
-  dryRun: z53.boolean().default(false)
+  dryRun: z52.boolean().default(false)
 }))();
-var pluginPageSchema = /* @__PURE__ */ (() => z53.object({
-  items: z53.array(pluginSchema),
-  nextCursor: z53.string().nullable()
+var pluginPageSchema = /* @__PURE__ */ (() => z52.object({
+  items: z52.array(pluginSchema),
+  nextCursor: z52.string().nullable()
 }))();
 var knownConnectionSyncKinds = ["connect", "resync"];
 var knownConnectionSyncStatuses = [
@@ -5690,53 +5399,53 @@ var knownConnectionSyncStatuses = [
   "finished",
   "failed"
 ];
-var connectionSyncSchema = /* @__PURE__ */ (() => z53.object({
-  kind: z53.string().min(1),
-  status: z53.string().min(1),
-  done: z53.number().int().nonnegative(),
-  total: z53.number().int().nonnegative().nullable(),
-  startedAt: z53.number(),
-  finishedAt: z53.number().nullable()
-}))();
-var connectionActivitySchema = /* @__PURE__ */ (() => z53.object({
-  plugin: z53.string(),
-  environment: z53.enum(["test", "live"]),
+var connectionSyncSchema = /* @__PURE__ */ (() => z52.object({
+  kind: z52.string().min(1),
+  status: z52.string().min(1),
+  done: z52.number().int().nonnegative(),
+  total: z52.number().int().nonnegative().nullable(),
+  startedAt: z52.number(),
+  finishedAt: z52.number().nullable()
+}))();
+var connectionActivitySchema = /* @__PURE__ */ (() => z52.object({
+  plugin: z52.string(),
+  environment: z52.enum(["test", "live"]),
   status: connectionStatusSchema,
-  dryRun: z53.boolean(),
-  lastSyncAt: z53.number().nullable(),
-  failingSince: z53.number().nullable(),
-  consecutiveFailures: z53.number().int().nonnegative(),
-  members: z53.object({
-    synced: z53.number().int().nonnegative(),
-    skipped: z53.array(
-      z53.object({
-        reason: z53.string(),
-        members: z53.number().int().nonnegative()
+  dryRun: z52.boolean(),
+  lastSyncAt: z52.number().nullable(),
+  failingSince: z52.number().nullable(),
+  consecutiveFailures: z52.number().int().nonnegative(),
+  members: z52.object({
+    synced: z52.number().int().nonnegative(),
+    skipped: z52.array(
+      z52.object({
+        reason: z52.string(),
+        members: z52.number().int().nonnegative()
       })
     )
   }),
   sync: connectionSyncSchema.nullable(),
-  errors: z53.array(
-    z53.object({ at: z53.number(), kind: z53.string(), message: z53.string() })
+  errors: z52.array(
+    z52.object({ at: z52.number(), kind: z52.string(), message: z52.string() })
   )
 }))();
-var connectionDryRunRequestSchema = /* @__PURE__ */ (() => z53.object({
-  id: z53.string(),
-  at: z53.number(),
-  member: z53.string().nullable(),
-  method: z53.string(),
-  path: z53.string(),
-  body: z53.unknown()
+var connectionDryRunRequestSchema = /* @__PURE__ */ (() => z52.object({
+  id: z52.string(),
+  at: z52.number(),
+  member: z52.string().nullable(),
+  method: z52.string(),
+  path: z52.string(),
+  body: z52.unknown()
 }))();
-var connectionDryRunPageSchema = /* @__PURE__ */ (() => z53.object({
-  items: z53.array(connectionDryRunRequestSchema),
-  nextCursor: z53.string().nullable()
+var connectionDryRunPageSchema = /* @__PURE__ */ (() => z52.object({
+  items: z52.array(connectionDryRunRequestSchema),
+  nextCursor: z52.string().nullable()
 }))();
-var connectionDryRunQuerySchema = /* @__PURE__ */ (() => z53.strictObject({
-  cursor: z53.string().min(1).max(40).optional(),
-  limit: z53.number().int().min(1).max(100).optional()
+var connectionDryRunQuerySchema = /* @__PURE__ */ (() => z52.strictObject({
+  cursor: z52.string().min(1).max(40).optional(),
+  limit: z52.number().int().min(1).max(100).optional()
 }))();
-var connectionResyncInputSchema = /* @__PURE__ */ (() => z53.strictObject({ actionId }))();
+var connectionResyncInputSchema = /* @__PURE__ */ (() => z52.strictObject({ actionId }))();
 
 // src/server/client/connections.ts
 function connectionPath(plugin) {
@@ -5765,10 +5474,13 @@ function connections({ get, post }) {
     ),
     /**
      * Starts connecting a plugin through the vendor's OAuth, or reconnecting one whose tokens
-     * stopped working: answers the authorization URL a person opens to consent. The connection
-     * becomes `ready` with `config` when the vendor sends them back. Fails with 409
-     * `oauth-not-supported` for a plugin connected with secrets, 409 `plugin-not-configured`
-     * when this deployment lacks the vendor's OAuth app, and 422 `invalid-config`.
+     * stopped working: answers the authorization URL a person opens to consent. The vendor sends
+     * the browser back to Console with a one-time `oauthCode`, and the connection becomes `ready`
+     * with `config` once the same person finishes it there (`completeAuthorization`). Fails with
+     * 403 `credential-not-allowed` for a credential no person holds (an automation, service or
+     * hosted app key), 409 `oauth-not-supported` for a plugin connected with secrets, 409
+     * `plugin-not-configured` when this deployment lacks the vendor's OAuth app, and 422
+     * `invalid-config`.
      */
     authorize: (plugin, input = {}, call) => post(
       connectionPath(plugin) + "/authorize",
@@ -5776,6 +5488,20 @@ function connections({ get, post }) {
       connectionAuthorizeInputSchema.parse(withActionId(input)),
       call
     ),
+    /**
+     * Finishes an OAuth connection with the `oauthCode` the vendor's callback added to the Console
+     * page it returned to, and answers the `ready` connection. Only the person who started it
+     * (`authorize`), on its project and environment, finishes it; the code works once, for five
+     * minutes, whoever sends it. Fails with 403 `scope-mismatch` for anyone else, 409
+     * `oauth-flow-expired` for a spent, expired or unknown code, and 502 `upstream-failed` when
+     * the vendor refuses its authorization code.
+     */
+    completeAuthorization: (plugin, input, call) => post(
+      connectionPath(plugin) + "/authorize/complete",
+      connectionSchema,
+      connectionAuthorizationCompleteInputSchema.parse(input),
+      call
+    ),
     /**
      * Replaces the config, some secrets, or both. Fails with 409 `not-connected` on a
      * disconnected plugin, 409 `connection-changed` when `expectedRevision` is stale, and 409
@@ -5901,8 +5627,22 @@ function schedules({ request, get, post }) {
 var schedulesApi = (http) => schedules(http);
 
 // src/server/client/storage.ts
-import * as z54 from "zod";
-function storage({ get, raw }) {
+import * as z53 from "zod";
+function storage({ get, post, raw }) {
+  function clear(kind, name, input, call) {
+    const path = `/storage/${kind}/${appSecretNameSchema.parse(name)}/clear`;
+    return kind === "sql" ? post(
+      path,
+      appStorageSqlClearResultSchema,
+      appStorageSqlClearSchema.parse(input),
+      call
+    ) : post(
+      path,
+      appStorageKvClearResultSchema,
+      appStorageKvClearSchema.parse(input),
+      call
+    );
+  }
   return {
     list: (call) => get("/storage", appStorageListSchema, call),
     /** A SQL store's tables and views, without SQLite's and D1's own. */
@@ -5931,7 +5671,7 @@ function storage({ get, raw }) {
       `/storage/sql/${appSecretNameSchema.parse(name)}/cell?${new URLSearchParams(
         {
           table,
-          row: String(z54.number().int().min(0).parse(options.row)),
+          row: String(z53.number().int().min(0).parse(options.row)),
           column: options.column,
           ...options.cursor === void 0 ? {} : { cursor: pageCursorSchema.parse(options.cursor) }
         }
@@ -5955,6 +5695,7 @@ function storage({ get, raw }) {
       appStorageValueSchema,
       call
     ),
+    clear,
     /** Deletes a store no serving build declares, with all of its data. */
     delete: async (kind, name, call) => {
       await raw(`/storage/${kind}/${appSecretNameSchema.parse(name)}`, {
@@ -6042,24 +5783,24 @@ function campaigns({ post }) {
 var campaignsApi = (http) => campaigns(http);
 
 // src/server/client/quests.ts
-import * as z56 from "zod";
+import * as z55 from "zod";
 
 // src/server/quests.ts
-import * as z55 from "zod";
-var questLifecycleInputSchema = /* @__PURE__ */ (() => z55.object({
+import * as z54 from "zod";
+var questLifecycleInputSchema = /* @__PURE__ */ (() => z54.object({
   quest: identifier,
   expectedRelease: identifier.optional(),
-  archived: z55.boolean(),
-  reason: z55.string().trim().min(1).max(500),
+  archived: z54.boolean(),
+  reason: z54.string().trim().min(1).max(500),
   actionId: identifier
 }).strict())();
-var questLifecycleSchema = /* @__PURE__ */ (() => z55.object({
+var questLifecycleSchema = /* @__PURE__ */ (() => z54.object({
   quest: identifier,
   key: identifier.nullable(),
-  title: z55.string(),
+  title: z54.string(),
   release: identifier,
-  lifecycle: z55.enum(["active", "paused", "archived"]),
-  changed: z55.boolean()
+  lifecycle: z54.enum(["active", "paused", "archived"]),
+  changed: z54.boolean()
 }))();
 
 // src/server/client/quests.ts
@@ -6084,7 +5825,7 @@ function quests(http) {
      * Each quest's current release, the most recently published first, archived quests
      * included; requires `read` permission.
      */
-    list: (call) => get("/quests/list", z56.array(publishedReleaseSchema), call),
+    list: (call) => get("/quests/list", z55.array(publishedReleaseSchema), call),
     /** Pending and exhausted asynchronous balance checks. Requires read. */
     automaticScheduling: (query = {}, call) => get(
       `/quests/automatic-scheduling${queryString(automaticSchedulingQuerySchema.parse(query))}`,
@@ -6129,7 +5870,7 @@ function quests(http) {
      */
     submissions: (member, call) => get(
       `/members/${encodeURIComponent(member)}/quest-submissions`,
-      z56.object({ items: z56.array(questSubmissionSchema) }),
+      z55.object({ items: z55.array(questSubmissionSchema) }),
       call
     ),
     /**
@@ -6214,15 +5955,15 @@ function x({ get }) {
 var xApi = (http) => x(http);
 
 // src/server/client/discord.ts
-import * as z57 from "zod";
+import * as z56 from "zod";
 function discord({ get, post }) {
   return {
     /** The project's Discord connection: its server and status; requires `read` permission. */
     connection: async (call) => {
-      const list = await get("/integrations", z57.array(z57.unknown()), call);
+      const list = await get("/integrations", z56.array(z56.unknown()), call);
       return projectIntegrationSchema.parse(
         list.find(
-          (item) => z57.object({ provider: z57.literal("discord") }).safeParse(item).success
+          (item) => z56.object({ provider: z56.literal("discord") }).safeParse(item).success
         )
       );
     },
@@ -6285,31 +6026,31 @@ function telegram({ request, get, post }) {
 var telegramApi = (http) => telegram(http);
 
 // src/server/projects.ts
-import * as z58 from "zod";
-var projectSetupSchema = /* @__PURE__ */ (() => z58.object({
-  mode: z58.enum(["new", "existing"]),
-  brief: z58.string().trim().min(1).max(4e3)
+import * as z57 from "zod";
+var projectSetupSchema = /* @__PURE__ */ (() => z57.object({
+  mode: z57.enum(["new", "existing"]),
+  brief: z57.string().trim().min(1).max(4e3)
 }).strict())();
-var projectSchema = /* @__PURE__ */ (() => z58.object({
+var projectSchema = /* @__PURE__ */ (() => z57.object({
   /**
    * Names the project's hosted addresses. The server gives a new project, and accepts in a
    * slug change, only slugs of at least 3 characters that Domino does not reserve. This schema
    * checks only the format, so it parses every slug that exists.
    */
-  slug: z58.string().min(1).max(35).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/),
-  createdBy: z58.string().nullable().optional(),
+  slug: z57.string().min(1).max(35).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/),
+  createdBy: z57.string().nullable().optional(),
   creator: operatorUserSchema.nullable().optional(),
   /** A response, so fields a newer server adds to the setup are dropped, not rejected. */
-  setup: z58.object(projectSetupSchema.shape).optional(),
+  setup: z57.object(projectSetupSchema.shape).optional(),
   /** The starter chosen at setup. A plain string, so later starters still parse. */
-  starter: z58.string().optional(),
-  id: z58.string().min(1),
+  starter: z57.string().optional(),
+  id: z57.string().min(1),
   organization: identifier,
   project: identifier,
-  name: z58.string(),
-  subtitle: z58.string(),
-  initials: z58.string(),
-  color: z58.string(),
+  name: z57.string(),
+  subtitle: z57.string(),
+  initials: z57.string(),
+  color: z57.string(),
   permissions: permissionListSchema,
   /**
    * Every permission the caller holds here, `dashboards` included, which `permissions` leaves
@@ -6317,8 +6058,8 @@ var projectSchema = /* @__PURE__ */ (() => z58.object({
    *
    * @experimental
    */
-  projectPermissions: z58.array(z58.string()).optional(),
-  environments: z58.array(environmentSchema)
+  projectPermissions: z57.array(z57.string()).optional(),
+  environments: z57.array(environmentSchema)
 }).refine(
   (project) => !project.creator || project.creator.id === project.createdBy,
   {
@@ -6326,103 +6067,103 @@ var projectSchema = /* @__PURE__ */ (() => z58.object({
     path: ["creator"]
   }
 ))();
-var projectCreateInputSchema = /* @__PURE__ */ (() => z58.object({
+var projectCreateInputSchema = /* @__PURE__ */ (() => z57.object({
   actionId: identifier,
-  name: z58.string().trim().min(1).max(80),
+  name: z57.string().trim().min(1).max(80),
   setup: projectSetupSchema.optional(),
   /** The starter a new hosted app begins from, with `setup.mode` "new". */
   starter: offeredStarterSchema.optional()
 }).strict())();
-var projectInputSchema = /* @__PURE__ */ (() => z58.object({
+var projectInputSchema = /* @__PURE__ */ (() => z57.object({
   actionId: identifier,
-  name: z58.string().trim().min(1).max(80),
+  name: z57.string().trim().min(1).max(80),
   setup: projectSetupSchema.optional(),
   /** The starter a new hosted app begins from, with `setup.mode` "new". */
   starter: starterIdSchema.optional()
 }).strict())();
-var projectUpdateInputSchema = /* @__PURE__ */ (() => z58.union([
-  z58.object({ name: projectCreateInputSchema.shape.name }).strict(),
-  z58.object({
+var projectUpdateInputSchema = /* @__PURE__ */ (() => z57.union([
+  z57.object({ name: projectCreateInputSchema.shape.name }).strict(),
+  z57.object({
     slug: projectSchema.shape.slug,
-    confirm: z58.string().min(1).max(80)
+    confirm: z57.string().min(1).max(80)
   }).strict()
 ]))();
-var projectDeletionInputSchema = /* @__PURE__ */ (() => z58.object({ confirm: z58.string().min(1).max(80) }).strict())();
-var projectDeletionSchema = /* @__PURE__ */ (() => z58.object({
+var projectDeletionInputSchema = /* @__PURE__ */ (() => z57.object({ confirm: z57.string().min(1).max(80) }).strict())();
+var projectDeletionSchema = /* @__PURE__ */ (() => z57.object({
   project: identifier,
-  purgeAfter: z58.number().int()
+  purgeAfter: z57.number().int()
 }))();
-var projectTransferInputSchema = /* @__PURE__ */ (() => z58.object({ organization: identifier, confirm: z58.string().min(1).max(80) }).strict())();
-var projectTransferSchema = /* @__PURE__ */ (() => z58.object({
+var projectTransferInputSchema = /* @__PURE__ */ (() => z57.object({ organization: identifier, confirm: z57.string().min(1).max(80) }).strict())();
+var projectTransferSchema = /* @__PURE__ */ (() => z57.object({
   organization: identifier,
   project: identifier
 }))();
-var accessSchema = /* @__PURE__ */ (() => z58.object({
-  actor: z58.string(),
-  organization: z58.string(),
-  admin: z58.boolean(),
-  local: z58.boolean(),
-  projects: z58.array(projectSchema),
+var accessSchema = /* @__PURE__ */ (() => z57.object({
+  actor: z57.string(),
+  organization: z57.string(),
+  admin: z57.boolean(),
+  local: z57.boolean(),
+  projects: z57.array(projectSchema),
   /** The credential's own kind and scope, when it is an organization automation key. */
-  credential: z58.object({
-    kind: z58.string(),
-    id: z58.string(),
-    name: z58.string(),
+  credential: z57.object({
+    kind: z57.string(),
+    id: z57.string(),
+    name: z57.string(),
     /** The projects it reaches; null for every project of the organization. */
-    projects: z58.array(z58.string()).nullable(),
-    createProjects: z58.boolean(),
+    projects: z57.array(z57.string()).nullable(),
+    createProjects: z57.boolean(),
     permissions: permissionListSchema
   }).optional()
 }))();
-var readinessSchema = /* @__PURE__ */ (() => z58.object({
-  checks: z58.array(
-    z58.object({
-      id: z58.string(),
-      status: z58.enum(["ready", "blocked"]),
-      title: z58.string(),
-      detail: z58.string()
+var readinessSchema = /* @__PURE__ */ (() => z57.object({
+  checks: z57.array(
+    z57.object({
+      id: z57.string(),
+      status: z57.enum(["ready", "blocked"]),
+      title: z57.string(),
+      detail: z57.string()
     })
   )
 }))();
 
 // src/server/page.ts
-import * as z59 from "zod";
-var querySchema = /* @__PURE__ */ (() => z59.object({
-  q: z59.string().max(200).default(""),
-  filter: z59.string().max(50).default("all"),
-  offset: z59.coerce.number().int().min(0).max(1e6).default(0),
-  limit: z59.coerce.number().int().min(1).max(100).default(25)
+import * as z58 from "zod";
+var querySchema = /* @__PURE__ */ (() => z58.object({
+  q: z58.string().max(200).default(""),
+  filter: z58.string().max(50).default("all"),
+  offset: z58.coerce.number().int().min(0).max(1e6).default(0),
+  limit: z58.coerce.number().int().min(1).max(100).default(25)
 }))();
-var pageSchema = /* @__PURE__ */ (() => z59.object({
+var pageSchema = /* @__PURE__ */ (() => z58.object({
   snapshot: snapshotSchema,
-  members: z59.array(memberSchema),
-  people: z59.array(personSchema).default([]),
+  members: z58.array(memberSchema),
+  people: z58.array(personSchema).default([]),
   metrics: metricsSchema,
-  total: z59.number(),
-  offset: z59.number(),
-  limit: z59.number(),
-  inventory: z59.array(inventorySchema),
-  operations: z59.array(operationSchema).default([]),
-  audit: z59.array(auditRecordSchema).default([]),
-  questCounts: z59.record(z59.string(), z59.number())
+  total: z58.number(),
+  offset: z58.number(),
+  limit: z58.number(),
+  inventory: z58.array(inventorySchema),
+  operations: z58.array(operationSchema).default([]),
+  audit: z58.array(auditRecordSchema).default([]),
+  questCounts: z58.record(z58.string(), z58.number())
 }))();
 
 // src/server/participant-sign-in.ts
-import * as z60 from "zod";
-var telegramBotIdSchema = /* @__PURE__ */ (() => z60.string().regex(/^[1-9][0-9]{0,19}$/, "Enter the bot's numeric ID, such as 123456789"))();
-var participantSignInTelegramSchema = /* @__PURE__ */ (() => z60.object({
-  login: z60.boolean(),
+import * as z59 from "zod";
+var telegramBotIdSchema = /* @__PURE__ */ (() => z59.string().regex(/^[1-9][0-9]{0,19}$/, "Enter the bot's numeric ID, such as 123456789"))();
+var participantSignInTelegramSchema = /* @__PURE__ */ (() => z59.object({
+  login: z59.boolean(),
   miniAppBotId: telegramBotIdSchema.nullable()
 }))();
-var participantSignInSchema = /* @__PURE__ */ (() => z60.object({
-  providers: z60.array(
-    z60.object({ provider: authProviderSchema, configured: z60.boolean() })
+var participantSignInSchema = /* @__PURE__ */ (() => z59.object({
+  providers: z59.array(
+    z59.object({ provider: authProviderSchema, configured: z59.boolean() })
   ),
-  email: z60.boolean(),
+  email: z59.boolean(),
   /** Wallet families: `"solana"`, `"eip155"`, `"cosmos"`. */
   wallets: walletSignInNetworksSchema,
   /** Why participants cannot sign in to this project, or null. */
-  issue: z60.string().nullable(),
+  issue: z59.string().nullable(),
   /**
    * Telegram, outside `providers` in SDK 1.x: whether Domino configured Telegram Login, and the
    * bot whose Mini App participants sign in from, or null when Mini App sign-in is off. Absent
@@ -6434,10 +6175,10 @@ var participantSignInSchema = /* @__PURE__ */ (() => z60.object({
    * members can link accounts that trackers like `youtube.shorts()` read. Absent from older Relay
    * versions.
    */
-  creatorAccounts: z60.array(
-    z60.object({
+  creatorAccounts: z59.array(
+    z59.object({
       provider: creatorAccountProviderSchema,
-      configured: z60.boolean()
+      configured: z59.boolean()
     })
   ).optional(),
   /**
@@ -6445,49 +6186,49 @@ var participantSignInSchema = /* @__PURE__ */ (() => z60.object({
    * the open sibling of `providers`, which SDK 1.x keeps to `AuthProvider`. A newer Relay may list
    * providers this SDK does not know. Absent from older Relay versions.
    */
-  signInProviders: z60.array(signInProviderOptionSchema).optional(),
-  updatedAt: z60.number().nullable(),
-  updatedBy: z60.string().nullable()
+  signInProviders: z59.array(signInProviderOptionSchema).optional(),
+  updatedAt: z59.number().nullable(),
+  updatedBy: z59.string().nullable()
 }))();
-var participantSignInInputSchema = /* @__PURE__ */ (() => z60.object({
+var participantSignInInputSchema = /* @__PURE__ */ (() => z59.object({
   wallets: walletSignInNetworksSchema,
-  telegram: z60.object({ miniAppBotId: telegramBotIdSchema.nullable() }).strict().optional()
+  telegram: z59.object({ miniAppBotId: telegramBotIdSchema.nullable() }).strict().optional()
 }).strict())();
 
 // src/server/development.ts
-import * as z61 from "zod";
-var developmentPreflightSchema = /* @__PURE__ */ (() => z61.object({
-  organization: z61.string(),
-  project: z61.string(),
-  environment: z61.enum(["test", "live"]),
-  identity: z61.object({
-    exchange: z61.literal("supported"),
-    activeIntegrations: z61.number().int().nonnegative()
+import * as z60 from "zod";
+var developmentPreflightSchema = /* @__PURE__ */ (() => z60.object({
+  organization: z60.string(),
+  project: z60.string(),
+  environment: z60.enum(["test", "live"]),
+  identity: z60.object({
+    exchange: z60.literal("supported"),
+    activeIntegrations: z60.number().int().nonnegative()
   }).optional(),
-  staging: z61.enum(["configured", "blocked"]),
-  development: z61.object({
-    status: z61.enum(["configured", "blocked"]),
+  staging: z60.enum(["configured", "blocked"]),
+  development: z60.object({
+    status: z60.enum(["configured", "blocked"]),
     // How `domino dev` reaches the preview origin: a Cloudflare tunnel, or a direct route on a
     // local development stack. APIs that predate the field use tunnels.
-    transport: z61.enum(["tunnel", "direct"]).default("tunnel"),
-    missing: z61.array(z61.string()),
-    authentication: z61.array(z61.string())
+    transport: z60.enum(["tunnel", "direct"]).default("tunnel"),
+    missing: z60.array(z60.string()),
+    authentication: z60.array(z60.string())
   }),
-  checks: z61.array(
-    z61.object({
-      id: z61.string(),
-      status: z61.enum(["ok", "error"]),
-      message: z61.string(),
-      missing: z61.array(z61.string()).optional(),
-      issues: z61.array(z61.string()).optional()
+  checks: z60.array(
+    z60.object({
+      id: z60.string(),
+      status: z60.enum(["ok", "error"]),
+      message: z60.string(),
+      missing: z60.array(z60.string()).optional(),
+      issues: z60.array(z60.string()).optional()
     })
   )
 }))();
 
 // src/server/hosted.ts
-import * as z62 from "zod";
+import * as z61 from "zod";
 var hostedKeyPermissions = ["read", "points", "ingest"];
-var hostedKeyPermissionList = /* @__PURE__ */ (() => z62.array(z62.string()).transform(
+var hostedKeyPermissionList = /* @__PURE__ */ (() => z61.array(z61.string()).transform(
   (values) => values.filter(
     (value) => hostedKeyPermissions.includes(value)
   )
@@ -6499,17 +6240,17 @@ var hostedManagementBindings = [
   "DOMINO_PROJECT",
   "DOMINO_ENVIRONMENT"
 ];
-var hostedKeySecretSchema = /* @__PURE__ */ (() => z62.string().regex(/^dhk_[A-Za-z0-9_-]{43}$/, "Expected a hosted app key"))();
-var hostedKeySchema = /* @__PURE__ */ (() => z62.object({
-  id: z62.string().uuid(),
+var hostedKeySecretSchema = /* @__PURE__ */ (() => z61.string().regex(/^dhk_[A-Za-z0-9_-]{43}$/, "Expected a hosted app key"))();
+var hostedKeySchema = /* @__PURE__ */ (() => z61.object({
+  id: z61.string().uuid(),
   token: hostedKeySecretSchema,
   organization: identifier,
   project: identifier,
-  environment: z62.enum(["test", "live"]),
+  environment: z61.enum(["test", "live"]),
   permissions: hostedKeyPermissionList,
-  expiresAt: z62.number().nullable()
+  expiresAt: z61.number().nullable()
 }).strict())();
-var hostedDeploymentKeySchema = /* @__PURE__ */ (() => hostedKeySchema.extend({ apiUrl: z62.string().url() }).strict())();
+var hostedDeploymentKeySchema = /* @__PURE__ */ (() => hostedKeySchema.extend({ apiUrl: z61.string().url() }).strict())();
 function hostedManagementClient(env) {
   const missing = hostedManagementBindings.filter((name) => !env[name]);
   if (missing.length) {
@@ -6517,7 +6258,7 @@ function hostedManagementClient(env) {
       `Missing ${missing.join(", ")}. Domino sets these for hosted apps and domino dev; update the project's vite.config.ts to forward them in development.`
     );
   }
-  const environment = z62.enum(["test", "live"]).parse(env.DOMINO_ENVIRONMENT);
+  const environment = z61.enum(["test", "live"]).parse(env.DOMINO_ENVIRONMENT);
   const token = env.DOMINO_MANAGEMENT_KEY;
   return createManagementClient({
     baseUrl: env.DOMINO_API_URL.replace(/\/+$/, ""),
@@ -6536,7 +6277,7 @@ function clientFailure(error) {
   return new ManagementError({
     kind: "client",
     code: ManagementErrorCode.InvalidInput,
-    message: error instanceof z63.ZodError ? `Invalid management request: ${z63.prettifyError(error)}` : error instanceof Error ? error.message : "Invalid management request",
+    message: error instanceof z62.ZodError ? `Invalid management request: ${issueText(error.issues)}` : error instanceof Error ? error.message : "Invalid management request",
     cause: error
   });
 }
@@ -6580,8 +6321,8 @@ function managementClient(options) {
       }
       return exchange(
         path,
-        z63.object({
-          status: z63.number(),
+        z62.object({
+          status: z62.number(),
           operationId: identifier.optional(),
           result: schema
         }),
@@ -6949,6 +6690,7 @@ var managementResponseTables = /* @__PURE__ */ (() => responseTables({
   groupMemberSchema: () => groupMemberSchema,
   groupPageSchema: () => groupPageSchema,
   identityIntegrationSchema: () => identityIntegrationSchema,
+  identityIntegrationAppSecretSchema: () => identityIntegrationAppSecretSchema,
   identityIntegrationSecretSchema: () => identityIntegrationSecretSchema,
   identityKindClaimSchema: () => identityKindClaimSchema,
   issuedTokenSchema: () => issuedTokenSchema,
@@ -6964,6 +6706,8 @@ var managementResponseTables = /* @__PURE__ */ (() => responseTables({
   managedAttemptSchema: () => managedAttemptSchema,
   evidenceRedactionResultSchema: () => evidenceRedactionResultSchema,
   memberErasureResultSchema: () => memberErasureResultSchema,
+  memberBanSchema: () => memberBanSchema,
+  memberBanPreviewSchema: () => memberBanPreviewSchema,
   evidenceRetentionResultSchema: () => evidenceRetentionResultSchema,
   managedEntitlementPageSchema: () => managedEntitlementPageSchema,
   managedEntitlementSchema: () => managedEntitlementSchema,
@@ -7136,9 +6880,13 @@ export {
   appStorageCellSchema,
   appStorageKeysSchema,
   appStorageKindSchema,
+  appStorageKvClearResultSchema,
+  appStorageKvClearSchema,
   appStorageListSchema,
   appStorageRowsSchema,
   appStorageSchema,
+  appStorageSqlClearResultSchema,
+  appStorageSqlClearSchema,
   appStorageTablesSchema,
   appStorageValueSchema,
   assetPathSchema,
@@ -7174,6 +6922,7 @@ export {
   completionRevocationShortfallSchema,
   completionRevokeSchema,
   connectionActivitySchema,
+  connectionAuthorizationCompleteInputSchema,
   connectionAuthorizationSchema,
   connectionAuthorizeInputSchema,
   connectionConnectInputSchema,
@@ -7219,6 +6968,7 @@ export {
   evidenceRedactionResultSchema,
   evidenceRedactionSchema,
   evidenceRetentionResultSchema,
+  evidenceRetentionSettingSchema,
   expectedRevision,
   grantRecordSchema,
   grantSchema,
@@ -7237,6 +6987,7 @@ export {
   hostedManagementBindings,
   hostedManagementClient,
   identityIntegrationAccountVouchingInputSchema,
+  identityIntegrationAppSecretSchema,
   identityIntegrationInputSchema,
   identityIntegrationKeySchema,
   identityIntegrationSchema,
@@ -7306,6 +7057,12 @@ export {
   memberAccountSchema,
   memberAccountUnlinkInputSchema,
   memberAppIdentitySchema,
+  memberBanInputSchema,
+  memberBanOutcomeSchema,
+  memberBanPreviewInputSchema,
+  memberBanPreviewSchema,
+  memberBanRollbackSchema,
+  memberBanSchema,
   memberCreatorAccountUnlinkInputSchema,
   memberDetailSchema,
   memberErasureDeletedSchema,
@@ -7349,6 +7106,7 @@ export {
   memberOAuthUnlinkInputSchema,
   memberSchema,
   memberTelegramUnlinkInputSchema,
+  memberUnbanInputSchema,
   memberWalletSignInInputSchema,
   memberWalletUnlinkInputSchema,
   metricsSchema,
@@ -7432,6 +7190,7 @@ export {
   serviceKeyInputSchema,
   serviceKeySchema,
   settlementPayoutCsv,
+  shortensEvidenceRetention,
   sourceDataSchema2 as sourceDataSchema,
   sourceRoles,
   stageRequestSchema,