@domino-sdk/relay 1.70.0 → 1.72.0

package/dist/server/index.js

@@ -1,7 +1,7 @@
 import {
   attemptCaptureSchema,
   capturedFactSchema
-} from "../chunk-OKKZPDCQ.js";
+} from "../chunk-GHBYWDEZ.js";
 import {
   PayoutSourceKind,
   RestoredDeliveryOutcome,
@@ -41,7 +41,7 @@ import {
   webhookStatePageSchema,
   webhookStateQuerySchema,
   webhookUpdateSchema
-} from "../chunk-RSZAYW3T.js";
+} from "../chunk-W6DBNBMT.js";
 import {
   DEFAULT_MANAGEMENT_TIMEOUT,
   ManagementError,
@@ -51,6 +51,7 @@ import {
   actionIdOf,
   canonicalWalletAddress,
   containsReferralIntegrationReward,
+  csvLines,
   hex,
   isManagementError,
   managementErrorSchema,
@@ -59,16 +60,16 @@ import {
   sequenceCursorSchema,
   solanaRpc,
   walletSignatureValid
-} from "../chunk-NOQSKRSS.js";
+} from "../chunk-2UELTHW6.js";
 import {
   parseImageExtraction,
   parseImageResult
-} from "../chunk-SDWG7CWQ.js";
+} from "../chunk-HN7DE2UN.js";
 import {
   sourceDataSchema,
   sourceRoles,
   validateQuestShape
-} from "../chunk-RYUM6X2K.js";
+} from "../chunk-UEVZ3TST.js";
 import {
   APP_KV_LIMIT,
   APP_MIGRATION_FILE_BYTES,
@@ -188,22 +189,29 @@ import {
   stagedDeploymentKey,
   stagedDeploymentLimits,
   stagedDeploymentSchema,
+  stagingAccessChangeSchema,
   stagingAccessInputSchema,
   stagingAccessModeSchema,
   stagingAccessSchema,
   stagingLinkSchema,
   stagingPathSchema,
+  stagingServerAccessSchema,
+  stagingServerKeyCreatedSchema,
+  stagingServerKeyInputSchema,
+  stagingServerKeyListSchema,
+  stagingServerKeySchema,
+  stagingServerPathSchema,
   starterIdSchema,
   starterTemplates,
   starters,
   verifyScheduledRequest
-} from "../chunk-25WA4XYZ.js";
+} from "../chunk-I7XIBXT2.js";
 import {
   isIntegrationParticipantPath,
   isParticipantRoute,
   participantRoutePattern,
   participantRoutes
-} from "../chunk-LZXDYSUH.js";
+} from "../chunk-PYZSCFMJ.js";
 import {
   activityTypeSchema,
   activityTypes,
@@ -229,12 +237,12 @@ import {
   publishDeploymentSchema,
   rejectDeploymentSchema,
   submitDeploymentSchema
-} from "../chunk-UKUIE2ND.js";
+} from "../chunk-KIRXE37T.js";
 import {
   xUserLookupInputSchema,
   xUserSchema,
   xUsernameSchema
-} from "../chunk-HICAGUT5.js";
+} from "../chunk-VFHLMNYV.js";
 import {
   analyticsBreakdowns,
   analyticsCatalog,
@@ -249,15 +257,15 @@ import {
   analyticsRanges,
   analyticsReadSchema,
   dashboardDefinitionSchema
-} from "../chunk-BJ2W5ZVQ.js";
+} from "../chunk-CVJTIVAP.js";
 import "../chunk-MWMCQLCG.js";
 import {
   withActionId
 } from "../chunk-5RLIPTL7.js";
 import {
   withQuery
-} from "../chunk-4BBDHTBF.js";
-import "../chunk-FHOKCBTJ.js";
+} from "../chunk-ASBDB436.js";
+import "../chunk-ETGKC2SB.js";
 import {
   collectionBeginSchema,
   collectionPreviewSchema,
@@ -272,7 +280,7 @@ import {
   rewardDeliveriesSchema,
   rewardDeliveryQuerySchema,
   rewardDeliverySchema
-} from "../chunk-SELJYCYY.js";
+} from "../chunk-3KKRXN5E.js";
 import {
   allocateQuestSchema,
   allocatedQuestSchema,
@@ -283,7 +291,7 @@ import {
   questDraftSchema,
   questPublicationPreviewSchema,
   saveQuestDraftSchema
-} from "../chunk-2GVGZ7AN.js";
+} from "../chunk-TW4RABVS.js";
 import {
   engagementBoundaryPageSchema,
   engagementChangePreviewInputSchema,
@@ -309,7 +317,7 @@ import {
   referralQualificationSchema,
   referralRewardResolutionSchema,
   referralSuspensionSchema
-} from "../chunk-XD6EUA27.js";
+} from "../chunk-FGZGL5PG.js";
 import {
   CompletionSourceKind,
   acceptAnywaySchema,
@@ -324,6 +332,7 @@ import {
   base58Bytes,
   baseUnitsSchema,
   beginHandoverSchema,
+  booleanQuery,
   caip10,
   campaignEnrollmentSchema,
   completionKeySchema,
@@ -428,7 +437,10 @@ import {
   solanaTransactionFixtureInputSchema,
   solanaTransactionSubmissionSchema,
   staffDecisionSchema,
+  staffReasonInputSchema,
   stakeTrackerCreateSchema,
+  stationCheckInSchema,
+  stationCodeSubmissionSchema,
   stationRefusal,
   stockItemSchema,
   streakProgressSchema,
@@ -464,7 +476,7 @@ import {
   walletTransactionsSchema,
   walletUnlinkInputSchema,
   whereSchemaIssue
-} from "../chunk-4VDRNYUG.js";
+} from "../chunk-74SMLZZ5.js";
 import {
   issueText
 } from "../chunk-VNEJH4NT.js";
@@ -762,13 +774,9 @@ var leaderboardSettlementExportSchema = /* @__PURE__ */ (() => z6.object({
     })
   )
 }))();
-var csvField = (value) => {
-  const text = value == null ? "" : String(value);
-  return /[",\r\n]/.test(text) ? `"${text.replaceAll('"', '""')}"` : text;
-};
 function settlementPayoutCsv(exported) {
   const unit = exported.pool === null ? "" : exported.pool.unit === "points" ? "points" : exported.pool.unit.code;
-  return [
+  return csvLines([
     ["member", "score", "rank", "share", "amount", "unit", "wallets"],
     ...exported.rows.map((row) => [
       row.member,
@@ -781,7 +789,7 @@ function settlementPayoutCsv(exported) {
         (wallet) => `${wallet.provedOn ?? wallet.network ?? wallet.chain}:${wallet.address}`
       ).join(" ")
     ])
-  ].map((fields) => fields.map(csvField).join(",")).join("\n");
+  ]);
 }
 
 // src/server/inventory-items.ts
@@ -1243,7 +1251,7 @@ var dashboardReadSchema = /* @__PURE__ */ (() => z11.object({
 }))();
 
 // src/server/index.ts
-import * as z62 from "zod";
+import * as z63 from "zod";
 
 // src/server/client/http.ts
 import * as z14 from "zod";
@@ -3059,6 +3067,33 @@ function attempts({ get, post }) {
       solanaTransactionSubmissionSchema.parse(input),
       call
     ),
+    /**
+     * Checks a member in at a quest's code station (`proof: "code"`) with the code they entered,
+     * for an app that checks codes in its own server; `member` is the member the app signed in,
+     * such as `signedInMember`'s. Requires `ingest` permission, from a key not limited to selected
+     * trackers. Relay checks the code against the one set for the station in this environment and
+     * runs a normal attempt, which the quest's evaluator decides with `{ kind: "station-code",
+     * reference: station }` in `ctx.action`; the attempt carries the station as `station`, not as
+     * `action`. Resolves with the queued attempt, or with the first attempt when the `actionId`
+     * was already submitted. The code is never stored, logged or answered.
+     *
+     * Refusals, in the order Relay checks them: 422 `station-unknown` when the quest has no such
+     * station, 422 `station-proof-mismatch` when transactions prove it, 409
+     * `station-code-not-set` while it has no code in this environment, 409 `station-revoked`
+     * when an operator revoked it, 409 `station-closed` outside its window at submission, and 422
+     * `station-code-invalid` for a wrong code. Only wrong codes count toward the guess limits: 10
+     * per member and station per hour, and 600 per station per 10 minutes across members. While
+     * either is spent, every check-in it covers, a right code included, answers 429 `rate-limited`
+     * with `Retry-After`.
+     *
+     * @experimental A minor release can change this method and its result.
+     */
+    submitStationCode: (input, call) => post(
+      "/attempts/station-code",
+      attemptSchema,
+      stationCodeSubmissionSchema.parse(withActionId(input)),
+      call
+    ),
     /**
      * Accepts or rejects an attempt waiting for review, at the `generation` the reviewer saw,
      * with a reason; requires `review` permission.
@@ -3275,6 +3310,215 @@ function completions({ get, post }) {
 }
 var completionsApi = (http) => completions(http);
 
+// src/server/galleries.ts
+import * as z31 from "zod";
+var gallerySchema = /* @__PURE__ */ (() => z31.object({
+  /** The quest's ID. */
+  quest: identifier,
+  /** The key the quest is written under in code. */
+  key: z31.string(),
+  title: z31.string(),
+  kind: z31.string(),
+  photos: z31.number().int().nonnegative(),
+  hiddenPhotos: z31.number().int().nonnegative()
+}))();
+var galleryListSchema = /* @__PURE__ */ (() => z31.object({ items: z31.array(gallerySchema) }))();
+var galleryHiddenFilterSchema = /* @__PURE__ */ (() => z31.enum(["include", "exclude", "only"]))();
+var galleryPhotoQuerySchema = /* @__PURE__ */ (() => z31.strictObject({
+  quest: z31.string().min(1).max(200).optional(),
+  day: z31.iso.date().optional(),
+  hidden: galleryHiddenFilterSchema.optional(),
+  winners: booleanQuery.optional(),
+  cursor: pageCursorSchema.optional(),
+  limit: pageLimit
+}))();
+var galleryExportQuerySchema = /* @__PURE__ */ (() => z31.strictObject({
+  quest: z31.string().min(1).max(200).optional(),
+  day: z31.iso.date().optional(),
+  includeHidden: booleanQuery.optional(),
+  cursor: pageCursorSchema.optional()
+}))();
+var galleryPhotoHiddenSchema = evidenceRedactionSchema;
+var galleryWinnerRewardSchema = /* @__PURE__ */ (() => z31.object({
+  quest: identifier,
+  attempt: identifier
+}))();
+var galleryWinnerSchema = /* @__PURE__ */ (() => z31.object({
+  at: z31.number(),
+  actor: z31.string().nullable(),
+  reward: galleryWinnerRewardSchema.nullable()
+}))();
+var galleryPhotoSchema = /* @__PURE__ */ (() => z31.object({
+  attempt: identifier,
+  quest: identifier,
+  member: identifier,
+  name: z31.string().nullable(),
+  evidence: identifier,
+  submittedAt: z31.number().int().nonnegative(),
+  decidedAt: z31.number().int().nonnegative().nullable(),
+  hidden: galleryPhotoHiddenSchema.nullable(),
+  winner: galleryWinnerSchema.nullable()
+}))();
+var galleryPhotoPageSchema = /* @__PURE__ */ (() => z31.object({
+  items: z31.array(galleryPhotoSchema),
+  nextCursor: pageCursorSchema.nullable()
+}))();
+var galleryPhotoHideInputSchema = staffReasonInputSchema;
+var galleryPhotoHideResultSchema = /* @__PURE__ */ (() => z31.object({
+  attempt: identifier,
+  hidden: galleryPhotoHiddenSchema.nullable()
+}))();
+var galleryWinnerMarkInputSchema = /* @__PURE__ */ (() => z31.object({
+  actionId: identifier,
+  reward: z31.object({ quest: identifier }).strict().optional()
+}).strict())();
+var galleryWinnerUnmarkInputSchema = /* @__PURE__ */ (() => z31.object({ actionId: identifier }).strict())();
+var galleryWinnerResultSchema = /* @__PURE__ */ (() => z31.object({
+  attempt: identifier,
+  winner: galleryWinnerSchema.nullable()
+}))();
+
+// src/server/client/galleries.ts
+function galleries({ get, post, raw }) {
+  const hiding = (action) => pathFirst(
+    "attempt",
+    (attempt, body, call) => post(
+      `/galleries/photos/${identifier.parse(attempt)}/${action}`,
+      galleryPhotoHideResultSchema,
+      galleryPhotoHideInputSchema.parse(withActionId(body)),
+      call
+    )
+  );
+  return {
+    /**
+     * The project's photo galleries: each quest whose current release declares `gallery`, with its
+     * key, title, kind and how many photos it holds, visible (`photos`) and hidden
+     * (`hiddenPhotos`); requires `review` permission.
+     *
+     * @experimental A minor release can change photo galleries.
+     */
+    list: (call) => get("/galleries", galleryListSchema, call),
+    /**
+     * One page of gallery photos, newest submission first, `limit` at a time (1 to 100, 100 by
+     * default): accepted attempts with
+     * photo evidence that was not deleted, of every gallery or of one `quest` (ID or key), and of
+     * one project-calendar `day` (`YYYY-MM-DD`) of submission; requires `review` permission.
+     * `hidden` is `include` (the default: every photo, each with its `hidden`), `exclude` or
+     * `only`, for the photos a reviewer hid; `winners: true` answers only contest winners, each
+     * with its `winner`. Pass
+     * a page's `nextCursor` back as `cursor` for the next page. Evidence that staff, the retention
+     * pass or a member's erasure deleted leaves the gallery with it. Fails with 404 `not-found`
+     * for a quest that is not a gallery.
+     *
+     * @experimental A minor release can change photo galleries.
+     */
+    photos: (query = {}, call) => get(
+      `/galleries/photos${queryString(galleryPhotoQuerySchema.parse(query))}`,
+      galleryPhotoPageSchema,
+      call
+    ),
+    /**
+     * One part of a gallery export, as a zip that streams; requires `review` permission. The zip
+     * holds, oldest submission first, the accepted photos of every gallery or of one `quest` (ID or
+     * key), of one project-calendar `day` (`YYYY-MM-DD`), the hidden ones only with
+     * `includeHidden: true`. Each photo is `<day>/<quest key>/<attempt>.jpg` or `.png`, a copy
+     * re-encoded at its full size with EXIF orientation applied and no EXIF, GPS, XMP or other
+     * metadata, and `manifest.csv` lists them: `file, attempt, quest, quest_title, member,
+     * display_name, submitted_at, winner`, and `hidden` with `includeHidden`; a photo that can't
+     * be re-encoded (over 25 megapixels, say) is listed in `skipped.csv` instead. A part holds at most
+     * 1,000 photos and 2 GiB of stored photos, which keeps it a plain zip every unzip tool opens
+     * and one download a few minutes long: pass `nextCursor` back as `cursor` for the next part
+     * until it is null. Answers `{ body, photos, nextCursor }`; read `body` to the end, or cancel
+     * it. A connection that drops, or storage that fails, mid-part errors `body` rather than ending
+     * the zip early. Records a `gallery-exported` audit event per part. Fails with 404 `not-found`
+     * for a quest that is not a gallery, and 503 when evidence storage fails before the zip starts.
+     *
+     * @experimental A minor release can change photo galleries.
+     */
+    export: async (query = {}, call) => {
+      const response = await raw(
+        `/galleries/export${queryString(galleryExportQuerySchema.parse(query))}`,
+        call
+      );
+      if (!response.body) {
+        throw new TypeError("The gallery export answered no zip");
+      }
+      return {
+        body: response.body,
+        photos: Number(response.headers.get("X-Domino-Photos") ?? 0),
+        nextCursor: response.headers.get("X-Domino-Next-Cursor")
+      };
+    },
+    /**
+     * Hides a gallery photo, by its attempt, with a reason (1 to 2000 characters); requires
+     * `review` permission. Presentation only: the attempt, its completion and rewards stay. A
+     * contest winner can't be hidden (409 `gallery-photo-winner`): unmark it first.
+     * Answers `{ attempt, hidden }`; hiding a hidden photo answers its hiding as it is and
+     * records nothing, and replaying the action ID returns the first answer. Records a
+     * `gallery-photo-hidden` audit event. An attempt whose photo is not in a gallery, or whose
+     * evidence was deleted, fails with 404 `not-found`. Takes the attempt first,
+     * `hide(attempt, { reason })`, or inside the input.
+     *
+     * @experimental A minor release can change photo galleries.
+     */
+    hide: hiding("hide"),
+    /**
+     * Shows a hidden gallery photo again, with a reason; requires `review` permission. Answers
+     * `{ attempt, hidden: null }`; unhiding a photo that shows records nothing, and replaying
+     * the action ID returns the first answer. Records a `gallery-photo-unhidden` audit event.
+     * Fails as `hide` does.
+     *
+     * @experimental A minor release can change photo galleries.
+     */
+    unhide: hiding("unhide"),
+    /**
+     * Marks a contest photo, by its attempt, as a winner; requires `review` permission. A contest
+     * has any number of winners. With `reward: { quest }` (ID or key), the mark also confirms that
+     * staff-confirmed quest for the photo's member, as `attempts.confirm` does, which also requires
+     * `confirm` permission (403 `permission-required` without it): its rules, rewards, budgets and
+     * webhooks apply. The confirmation's action ID comes from the photo's attempt, so marking the
+     * same photo again never pays twice. A refused confirmation (`member-banned`, a completion
+     * limit, …) fails with its own error and saves no mark. Answers
+     * `{ attempt, winner: { at, actor, reward: { quest, attempt } | null } }`; marking a winner
+     * answers its mark as it is, and replaying the action ID returns the first answer. Records a
+     * `gallery-winner-marked` audit event. A wall gallery's photo fails with 409
+     * `gallery-not-contest`, a hidden photo with 409 `gallery-photo-hidden`, and an attempt whose
+     * photo is not in a gallery with 404 `not-found`. Takes the attempt first,
+     * `markWinner(attempt, { reward })`, or inside the input.
+     *
+     * @experimental A minor release can change photo galleries.
+     */
+    markWinner: pathFirst(
+      "attempt",
+      (attempt, body, call) => post(
+        `/galleries/photos/${identifier.parse(attempt)}/mark-winner`,
+        galleryWinnerResultSchema,
+        galleryWinnerMarkInputSchema.parse(withActionId(body)),
+        call
+      )
+    ),
+    /**
+     * Takes a photo's winner mark back; requires `review` permission. The reward the mark paid
+     * stays: revoke its completion to take it back. Answers `{ attempt, winner: null }`; unmarking
+     * a photo that is no winner records nothing, and replaying the action ID returns the first
+     * answer. Records a `gallery-winner-unmarked` audit event. An attempt whose photo is not in a
+     * gallery fails with 404 `not-found`.
+     *
+     * @experimental A minor release can change photo galleries.
+     */
+    unmarkWinner: pathFirst(
+      "attempt",
+      (attempt, body, call) => post(
+        `/galleries/photos/${identifier.parse(attempt)}/unmark-winner`,
+        galleryWinnerResultSchema,
+        galleryWinnerUnmarkInputSchema.parse(withActionId(body)),
+        call
+      )
+    )
+  };
+}
+var galleriesApi = (http) => galleries(http);
+
 // src/server/client/handover.ts
 function handover({ post }) {
   return {
@@ -3309,20 +3553,20 @@ function handover({ post }) {
 var handoverApi = (http) => handover(http);
 
 // src/server/entitlements.ts
-import * as z31 from "zod";
-var managedEntitlementQuerySchema = /* @__PURE__ */ (() => z31.strictObject({
-  q: z31.string().max(200).optional(),
-  status: z31.string().min(1).max(50).optional(),
+import * as z32 from "zod";
+var managedEntitlementQuerySchema = /* @__PURE__ */ (() => z32.strictObject({
+  q: z32.string().max(200).optional(),
+  status: z32.string().min(1).max(50).optional(),
   limit: pageLimit,
   cursor: pageCursorSchema.optional()
 }))();
-var managedEntitlementPageSchema = /* @__PURE__ */ (() => z31.object({
-  items: z31.array(entitlementSchema),
-  people: z31.array(personSchema),
-  total: z31.number().int().nonnegative(),
-  nextCursor: z31.string().nullable()
+var managedEntitlementPageSchema = /* @__PURE__ */ (() => z32.object({
+  items: z32.array(entitlementSchema),
+  people: z32.array(personSchema),
+  total: z32.number().int().nonnegative(),
+  nextCursor: z32.string().nullable()
 }))();
-var managedEntitlementSchema = /* @__PURE__ */ (() => z31.object({
+var managedEntitlementSchema = /* @__PURE__ */ (() => z32.object({
   entitlement: entitlementSchema,
   person: personSchema
 }))();
@@ -3414,11 +3658,11 @@ function collection({ post }) {
 var collectionApi = (http) => collection(http);
 
 // src/server/client/operations.ts
-import * as z32 from "zod";
+import * as z33 from "zod";
 function operations({ get, post }) {
   return {
     /** Every paused or resumed operation: redemptions and each quest's participation; requires `read`. */
-    list: (call) => get("/operations", z32.array(operationSchema), call),
+    list: (call) => get("/operations", z33.array(operationSchema), call),
     /**
      * Pauses or resumes redemptions or one quest's participation, against the `revision` the
      * operator saw, with a reason; requires `publish` permission.
@@ -3454,7 +3698,7 @@ function redemptions(http) {
 var redemptionsApi = (http) => redemptions(http);
 
 // src/server/client/inventory.ts
-import * as z33 from "zod";
+import * as z34 from "zod";
 function inventory({ create, get, post }) {
   return {
     /** Includes archived items and revision fences; requires read permission. */
@@ -3488,7 +3732,7 @@ function inventory({ create, get, post }) {
       call
     ),
     /** Every stock item with its counts and the offers that sell it; requires `read` permission. */
-    list: (call) => get("/stock-items", z33.array(managedStockItemSchema), call),
+    list: (call) => get("/stock-items", z34.array(managedStockItemSchema), call),
     createItem: (input, call) => create(
       "/stock-items",
       stockItemSchema,
@@ -3503,7 +3747,7 @@ function inventory({ create, get, post }) {
       stockInputSchema.parse(withActionId(input)),
       call
     ),
-    catalog: (call) => get("/pickup-inventory", z33.array(pickupCatalogSchema), call),
+    catalog: (call) => get("/pickup-inventory", z34.array(pickupCatalogSchema), call),
     configure: (input, call) => post(
       "/pickup-inventory",
       pickupCatalogSchema,
@@ -3520,7 +3764,7 @@ function inventory({ create, get, post }) {
 var inventoryApi = (http) => inventory(http);
 
 // src/server/client/offers.ts
-import * as z34 from "zod";
+import * as z35 from "zod";
 function offers({ get, post }) {
   return {
     /**
@@ -3558,7 +3802,7 @@ function offers({ get, post }) {
       ),
       call
     ),
-    list: (call) => get("/offers", z34.array(offerSchema), call),
+    list: (call) => get("/offers", z35.array(offerSchema), call),
     /**
      * Every redemption, or one member's, newest first, in one unbounded response.
      *
@@ -3566,7 +3810,7 @@ function offers({ get, post }) {
      */
     redemptions: (input = {}, call) => get(
       `/redemptions${queryString({ member: input.member })}`,
-      z34.array(redemptionSchema),
+      z35.array(redemptionSchema),
       call
     ),
     /** Pauses or resumes an offer at the revision the operator saw. */
@@ -3591,16 +3835,16 @@ function offers({ get, post }) {
 var offersApi = (http) => offers(http);
 
 // src/server/client/tokens.ts
-import * as z37 from "zod";
+import * as z38 from "zod";
 
 // src/server/api-keys.ts
-import * as z36 from "zod";
+import * as z37 from "zod";
 
 // src/server/permissions.ts
-import * as z35 from "zod";
-var environmentSchema = /* @__PURE__ */ (() => z35.enum(["test", "live"]))();
-var roleSchema = /* @__PURE__ */ (() => z35.enum(["editor", "reviewer", "staff"]))();
-var permissionSchema = /* @__PURE__ */ (() => z35.enum([
+import * as z36 from "zod";
+var environmentSchema = /* @__PURE__ */ (() => z36.enum(["test", "live"]))();
+var roleSchema = /* @__PURE__ */ (() => z36.enum(["editor", "reviewer", "staff"]))();
+var permissionSchema = /* @__PURE__ */ (() => z36.enum([
   "read",
   "publish",
   "review",
@@ -3620,7 +3864,7 @@ var permissionSchema = /* @__PURE__ */ (() => z35.enum([
    */
   "enroll"
 ]))();
-var permissionListSchema = /* @__PURE__ */ (() => z35.array(z35.string()).transform(
+var permissionListSchema = /* @__PURE__ */ (() => z36.array(z36.string()).transform(
   (values) => values.filter(
     (value) => permissionSchema.safeParse(value).success
   )
@@ -3630,8 +3874,8 @@ var rolePermissions = {
   reviewer: ["read", "review"],
   staff: ["read", "confirm", "handover"]
 };
-var projectRoleSchema = /* @__PURE__ */ (() => z35.enum([...roleSchema.options, "viewer"]))();
-var projectPermissionSchema = /* @__PURE__ */ (() => z35.enum([
+var projectRoleSchema = /* @__PURE__ */ (() => z36.enum([...roleSchema.options, "viewer"]))();
+var projectPermissionSchema = /* @__PURE__ */ (() => z36.enum([
   ...permissionSchema.options,
   "dashboards"
 ]))();
@@ -3643,55 +3887,55 @@ var projectRolePermissions = {
 };
 
 // src/server/api-keys.ts
-var ingestTrackerScopeSchema = /* @__PURE__ */ (() => z36.array(identifier).min(1).max(100).nullable())();
-var tokenScopeInputSchema = /* @__PURE__ */ (() => z36.object({ ingestTrackers: ingestTrackerScopeSchema }).strict())();
-var tokenInputSchema = /* @__PURE__ */ (() => z36.object({
-  name: z36.string().trim().min(1).max(80),
+var ingestTrackerScopeSchema = /* @__PURE__ */ (() => z37.array(identifier).min(1).max(100).nullable())();
+var tokenScopeInputSchema = /* @__PURE__ */ (() => z37.object({ ingestTrackers: ingestTrackerScopeSchema }).strict())();
+var tokenInputSchema = /* @__PURE__ */ (() => z37.object({
+  name: z37.string().trim().min(1).max(80),
   project: identifier,
   environment: environmentSchema,
-  permissions: z36.array(permissionSchema).min(1),
+  permissions: z37.array(permissionSchema).min(1),
   ingestTrackers: ingestTrackerScopeSchema.optional(),
-  days: z36.number().int().min(1).max(90).default(30)
+  days: z37.number().int().min(1).max(90).default(30)
 }).strict())();
-var tokenSchema = /* @__PURE__ */ (() => z36.object({
-  id: z36.string(),
-  name: z36.string(),
-  project: z36.string(),
+var tokenSchema = /* @__PURE__ */ (() => z37.object({
+  id: z37.string(),
+  name: z37.string(),
+  project: z37.string(),
   environment: environmentSchema,
   permissions: permissionListSchema,
   ingestTrackers: ingestTrackerScopeSchema.optional(),
-  expiresAt: z36.number()
+  expiresAt: z37.number()
 }))();
-var issuedTokenSchema = /* @__PURE__ */ (() => tokenSchema.extend({ token: z36.string() }))();
-var serviceKeyInputSchema = /* @__PURE__ */ (() => z36.object({
-  name: z36.string().trim().min(1).max(80),
-  permissions: z36.array(permissionSchema).min(1).refine(
+var issuedTokenSchema = /* @__PURE__ */ (() => tokenSchema.extend({ token: z37.string() }))();
+var serviceKeyInputSchema = /* @__PURE__ */ (() => z37.object({
+  name: z37.string().trim().min(1).max(80),
+  permissions: z37.array(permissionSchema).min(1).refine(
     (permissions) => !permissions.includes("access"),
     "Service keys cannot hold the access permission"
   ),
   /** Days until the first secret expires. Omit it for a key that never expires. */
-  expiresInDays: z36.number().int().min(1).max(3650).optional()
+  expiresInDays: z37.number().int().min(1).max(3650).optional()
 }).strict())();
-var serviceKeySchema = /* @__PURE__ */ (() => z36.object({
-  id: z36.string().uuid(),
-  organization: z36.string(),
-  project: z36.string(),
+var serviceKeySchema = /* @__PURE__ */ (() => z37.object({
+  id: z37.string().uuid(),
+  organization: z37.string(),
+  project: z37.string(),
   environment: environmentSchema,
-  name: z36.string(),
+  name: z37.string(),
   permissions: permissionListSchema,
   /** The Clerk user ID of the administrator who created it. */
-  createdBy: z36.string(),
-  createdAt: z36.number(),
+  createdBy: z37.string(),
+  createdAt: z37.number(),
   /** The latest use of any of its secrets, revoked ones included; null when none was used. */
-  lastUsedAt: z36.number().nullable(),
+  lastUsedAt: z37.number().nullable(),
   /** Its working secrets, oldest first. Any of them authenticates the key. */
-  secrets: z36.array(credentialSecretSchema)
+  secrets: z37.array(credentialSecretSchema)
 }))();
 var issuedServiceKeySchema = /* @__PURE__ */ (() => serviceKeySchema.extend({
-  secret: z36.string().uuid(),
-  token: z36.string()
+  secret: z37.string().uuid(),
+  token: z37.string()
 }))();
-var automationKeyPermissionSchema = /* @__PURE__ */ (() => z36.enum([
+var automationKeyPermissionSchema = /* @__PURE__ */ (() => z37.enum([
   "read",
   "publish",
   "inventory",
@@ -3699,47 +3943,47 @@ var automationKeyPermissionSchema = /* @__PURE__ */ (() => z36.enum([
   "ingest",
   "enroll"
 ]))();
-var automationKeyInputSchema = /* @__PURE__ */ (() => z36.object({
-  name: z36.string().trim().min(1).max(80),
-  permissions: z36.array(automationKeyPermissionSchema).min(1),
+var automationKeyInputSchema = /* @__PURE__ */ (() => z37.object({
+  name: z37.string().trim().min(1).max(80),
+  permissions: z37.array(automationKeyPermissionSchema).min(1),
   /**
    * The projects it reaches. Omit it for every project of the organization, current and future.
    * An empty list, allowed only with `createProjects`, reaches only the projects it creates.
    */
-  projects: z36.array(identifier).max(100).optional(),
+  projects: z37.array(identifier).max(100).optional(),
   /** Whether it may create projects. A project it creates joins its `projects` list. */
-  createProjects: z36.boolean().default(false),
+  createProjects: z37.boolean().default(false),
   /** Days until the first secret expires. Omit it for a key that never expires. */
-  expiresInDays: z36.number().int().min(1).max(3650).optional()
+  expiresInDays: z37.number().int().min(1).max(3650).optional()
 }).strict().refine((key2) => key2.projects?.length !== 0 || key2.createProjects, {
   message: "Choose a project, or let the key create projects",
   path: ["projects"]
 }))();
-var automationKeySchema = /* @__PURE__ */ (() => z36.object({
-  id: z36.string().uuid(),
-  organization: z36.string(),
-  name: z36.string(),
+var automationKeySchema = /* @__PURE__ */ (() => z37.object({
+  id: z37.string().uuid(),
+  organization: z37.string(),
+  name: z37.string(),
   permissions: permissionListSchema,
   /** The projects it reaches; null for every project of the organization. */
-  projects: z36.array(z36.string()).nullable(),
-  createProjects: z36.boolean(),
+  projects: z37.array(z37.string()).nullable(),
+  createProjects: z37.boolean(),
   /** The Clerk user ID of the administrator who created it. */
-  createdBy: z36.string(),
-  createdAt: z36.number(),
+  createdBy: z37.string(),
+  createdAt: z37.number(),
   /** The latest use of any of its secrets, revoked ones included; null when none was used. */
-  lastUsedAt: z36.number().nullable(),
+  lastUsedAt: z37.number().nullable(),
   /** Its working secrets, oldest first. Any of them authenticates the key. */
-  secrets: z36.array(credentialSecretSchema)
+  secrets: z37.array(credentialSecretSchema)
 }))();
 var issuedAutomationKeySchema = /* @__PURE__ */ (() => automationKeySchema.extend({
-  secret: z36.string().uuid(),
-  token: z36.string()
+  secret: z37.string().uuid(),
+  token: z37.string()
 }))();
 
 // src/server/client/tokens.ts
 function tokens({ get, post, request }) {
   return {
-    list: (call) => get("/tokens", z37.array(tokenSchema), call),
+    list: (call) => get("/tokens", z38.array(tokenSchema), call),
     /**
      * Issues a key for one project and environment, limited to permissions the caller holds
      * there. It expires after `days`, 1 to 90 (default 30). The secret `token` is in this
@@ -3748,14 +3992,14 @@ function tokens({ get, post, request }) {
     create: (input, call) => post("/tokens", issuedTokenSchema, tokenInputSchema.parse(input), call),
     /** Replace a personal key's ingestion restriction without changing its secret. */
     scope: (id, input, call) => request(
-      `/tokens/${encodeURIComponent(z37.string().min(1).parse(id))}/scope`,
+      `/tokens/${encodeURIComponent(z38.string().min(1).parse(id))}/scope`,
       tokenSchema,
       tokenScopeInputSchema.parse(input),
       "PUT",
       call
     ),
     revoke: (id, call) => request(
-      `/tokens/${encodeURIComponent(z37.string().min(1).parse(id))}`,
+      `/tokens/${encodeURIComponent(z38.string().min(1).parse(id))}`,
       ok,
       void 0,
       "DELETE",
@@ -3766,10 +4010,10 @@ function tokens({ get, post, request }) {
 var tokensApi = (http) => tokens(http);
 
 // src/server/client/service-keys.ts
-import * as z38 from "zod";
+import * as z39 from "zod";
 function serviceKeys({ get, post, request }) {
   return {
-    list: (call) => get("/service-keys", z38.array(serviceKeySchema), call),
+    list: (call) => get("/service-keys", z39.array(serviceKeySchema), call),
     /** The secret `token` is in this response only. */
     create: (input, call) => post(
       "/service-keys",
@@ -3782,14 +4026,14 @@ function serviceKeys({ get, post, request }) {
      * them with `revokeSecret`. The new `token` is in this response only.
      */
     addSecret: (id, input = {}, call) => post(
-      `/service-keys/${z38.string().uuid().parse(id)}/secrets`,
+      `/service-keys/${z39.string().uuid().parse(id)}/secrets`,
       issuedServiceKeySchema,
       credentialSecretInputSchema.parse(input),
       call
     ),
     /** Stops one secret working. A key's last secret cannot be revoked; revoke the key instead. */
     revokeSecret: (id, secret, call) => request(
-      `/service-keys/${z38.string().uuid().parse(id)}/secrets/${z38.string().uuid().parse(secret)}`,
+      `/service-keys/${z39.string().uuid().parse(id)}/secrets/${z39.string().uuid().parse(secret)}`,
       serviceKeySchema,
       void 0,
       "DELETE",
@@ -3797,8 +4041,8 @@ function serviceKeys({ get, post, request }) {
     ),
     /** Deletes the key; every secret stops working. */
     revoke: (id, call) => request(
-      `/service-keys/${z38.string().uuid().parse(id)}`,
-      z38.null(),
+      `/service-keys/${z39.string().uuid().parse(id)}`,
+      z39.null(),
       void 0,
       "DELETE",
       call
@@ -3808,10 +4052,10 @@ function serviceKeys({ get, post, request }) {
 var serviceKeysApi = (http) => serviceKeys(http);
 
 // src/server/client/automation-keys.ts
-import * as z39 from "zod";
+import * as z40 from "zod";
 function automationKeys({ get, post, request }) {
   return {
-    list: (call) => get("/automation-keys", z39.array(automationKeySchema), call),
+    list: (call) => get("/automation-keys", z40.array(automationKeySchema), call),
     /** The secret `token` is in this response only. */
     create: (input, call) => post(
       "/automation-keys",
@@ -3824,14 +4068,14 @@ function automationKeys({ get, post, request }) {
      * them with `revokeSecret`. The new `token` is in this response only.
      */
     addSecret: (id, input = {}, call) => post(
-      `/automation-keys/${z39.string().uuid().parse(id)}/secrets`,
+      `/automation-keys/${z40.string().uuid().parse(id)}/secrets`,
       issuedAutomationKeySchema,
       credentialSecretInputSchema.parse(input),
       call
     ),
     /** Stops one secret working. A key's last secret cannot be revoked; revoke the key instead. */
     revokeSecret: (id, secret, call) => request(
-      `/automation-keys/${z39.string().uuid().parse(id)}/secrets/${z39.string().uuid().parse(secret)}`,
+      `/automation-keys/${z40.string().uuid().parse(id)}/secrets/${z40.string().uuid().parse(secret)}`,
       automationKeySchema,
       void 0,
       "DELETE",
@@ -3839,8 +4083,8 @@ function automationKeys({ get, post, request }) {
     ),
     /** Deletes the key; every secret stops working. */
     revoke: (id, call) => request(
-      `/automation-keys/${z39.string().uuid().parse(id)}`,
-      z39.null(),
+      `/automation-keys/${z40.string().uuid().parse(id)}`,
+      z40.null(),
       void 0,
       "DELETE",
       call
@@ -3850,26 +4094,26 @@ function automationKeys({ get, post, request }) {
 var automationKeysApi = (http) => automationKeys(http);
 
 // src/server/client/grants.ts
-import * as z41 from "zod";
+import * as z42 from "zod";
 
 // src/server/grants.ts
-import * as z40 from "zod";
-var grantSchema = /* @__PURE__ */ (() => z40.object({
-  subject: z40.string().min(1).max(200),
-  roles: z40.array(roleSchema),
-  environments: z40.array(environmentSchema)
+import * as z41 from "zod";
+var grantSchema = /* @__PURE__ */ (() => z41.object({
+  subject: z41.string().min(1).max(200),
+  roles: z41.array(roleSchema),
+  environments: z41.array(environmentSchema)
 }).strict())();
-var projectGrantSchema = /* @__PURE__ */ (() => z40.object({
+var projectGrantSchema = /* @__PURE__ */ (() => z41.object({
   subject: grantSchema.shape.subject,
-  roles: z40.array(projectRoleSchema),
+  roles: z41.array(projectRoleSchema),
   environments: grantSchema.shape.environments,
   /**
    * When the grant stops giving access (epoch ms). Omit it, or send null, for a grant without
    * an end. An ended grant stays listed, so the project's access shows who had it and until when.
    */
-  expiresAt: z40.number().int().positive().nullable().optional()
+  expiresAt: z41.number().int().positive().nullable().optional()
 }).strict())();
-var grantRecordSchema = /* @__PURE__ */ (() => z40.object({
+var grantRecordSchema = /* @__PURE__ */ (() => z41.object({
   ...grantSchema.shape,
   /**
    * Every role the grant gives, `viewer` included, which `roles` leaves out. Absent from Relay
@@ -3877,23 +4121,23 @@ var grantRecordSchema = /* @__PURE__ */ (() => z40.object({
    *
    * @experimental
    */
-  projectRoles: z40.array(z40.string()).optional(),
+  projectRoles: z41.array(z41.string()).optional(),
   /**
    * When the grant stops giving access (epoch ms), or null for no end. A grant past it is still
    * listed and gives no permission.
    *
    * @experimental
    */
-  expiresAt: z40.number().nullable().optional()
+  expiresAt: z41.number().nullable().optional()
 }))();
-var teamSchema = /* @__PURE__ */ (() => z40.array(
-  z40.object({ id: z40.string(), label: z40.string() })
+var teamSchema = /* @__PURE__ */ (() => z41.array(
+  z41.object({ id: z41.string(), label: z41.string() })
 ))();
 
 // src/server/client/grants.ts
 function grants({ get, request }) {
   return {
-    list: (call) => get("/grants", z41.array(grantRecordSchema), call),
+    list: (call) => get("/grants", z42.array(grantRecordSchema), call),
     /**
      * Replaces one person's roles, environments and end date on the project. The audit log
      * records it. `viewer` and `expiresAt` are experimental.
@@ -3918,14 +4162,14 @@ function team({ get }) {
 var teamApi = (http) => team(http);
 
 // src/server/client/webhooks.ts
-import * as z42 from "zod";
+import * as z43 from "zod";
 function webhooks({ get, post, request }) {
   function rotateWebhookSecret(id, inputOrCall, call) {
     const isInput = call !== void 0 || inputOrCall !== void 0 && "actionId" in inputOrCall;
     const input = isInput ? inputOrCall ?? {} : {};
     const options = isInput ? call : inputOrCall;
     return post(
-      `/webhooks/${z42.string().uuid().parse(id)}/rotate-secret`,
+      `/webhooks/${z43.string().uuid().parse(id)}/rotate-secret`,
       webhookSecretSchema,
       webhookRotateInputSchema.parse(withActionId(input)),
       options
@@ -3933,7 +4177,7 @@ function webhooks({ get, post, request }) {
   }
   return {
     state: (id, call) => get(
-      `/webhooks/${z42.string().uuid().parse(id)}/state`,
+      `/webhooks/${z43.string().uuid().parse(id)}/state`,
       webhookEndpointStateSchema,
       call
     ),
@@ -3944,24 +4188,24 @@ function webhooks({ get, post, request }) {
       call
     ),
     delete: (id, input, call) => post(
-      `/webhooks/${z42.string().uuid().parse(id)}/delete`,
+      `/webhooks/${z43.string().uuid().parse(id)}/delete`,
       webhookEndpointStateSchema,
       webhookDeleteInputSchema.parse(withActionId(input)),
       call
     ),
     pause: (id, input = {}, call) => post(
-      `/webhooks/${z42.string().uuid().parse(id)}/pause`,
+      `/webhooks/${z43.string().uuid().parse(id)}/pause`,
       webhookEndpointSchema,
       webhookControlInputSchema.parse(withActionId(input)),
       call
     ),
     resume: (id, input = {}, call) => post(
-      `/webhooks/${z42.string().uuid().parse(id)}/resume`,
+      `/webhooks/${z43.string().uuid().parse(id)}/resume`,
       webhookEndpointSchema,
       webhookControlInputSchema.parse(withActionId(input)),
       call
     ),
-    list: (call) => get("/webhooks", z42.array(webhookEndpointSchema), call),
+    list: (call) => get("/webhooks", z43.array(webhookEndpointSchema), call),
     /** Pass an `actionId` to recover the endpoint and its secret after a lost answer. */
     create: (input, call) => post(
       "/webhooks",
@@ -3970,7 +4214,7 @@ function webhooks({ get, post, request }) {
       call
     ),
     update: (id, input, call) => request(
-      `/webhooks/${z42.string().uuid().parse(id)}`,
+      `/webhooks/${z43.string().uuid().parse(id)}`,
       webhookEndpointSchema,
       webhookUpdateSchema.parse(input),
       "PUT",
@@ -3978,14 +4222,14 @@ function webhooks({ get, post, request }) {
     ),
     /** @deprecated Use pause. Removed in 2.0.0. */
     disable: (id, call) => post(
-      `/webhooks/${z42.string().uuid().parse(id)}/disable`,
+      `/webhooks/${z43.string().uuid().parse(id)}/disable`,
       webhookEndpointSchema,
       {},
       call
     ),
     rotateSecret: rotateWebhookSecret,
     deliveries: (id, query = {}, call) => get(
-      `/webhooks/${z42.string().uuid().parse(id)}/deliveries${queryString(webhookQuerySchema.parse(query))}`,
+      `/webhooks/${z43.string().uuid().parse(id)}/deliveries${queryString(webhookQuerySchema.parse(query))}`,
       webhookDeliveryPageSchema,
       call
     ),
@@ -3995,7 +4239,7 @@ function webhooks({ get, post, request }) {
      */
     replay: (id, delivery, ...rest) => actionCommand(
       (webhook, input, call) => post(
-        `/webhooks/${z42.string().uuid().parse(webhook)}/deliveries/${z42.string().uuid().parse(delivery)}/replay`,
+        `/webhooks/${z43.string().uuid().parse(webhook)}/deliveries/${z43.string().uuid().parse(delivery)}/replay`,
         webhookDeliverySchema,
         webhookControlInputSchema.parse(input),
         call
@@ -4006,7 +4250,7 @@ function webhooks({ get, post, request }) {
 var webhooksApi = (http) => webhooks(http);
 
 // src/server/client/identity-integrations.ts
-import * as z43 from "zod";
+import * as z44 from "zod";
 function identityIntegrations({
   exchange,
   get,
@@ -4014,7 +4258,7 @@ function identityIntegrations({
   request
 }) {
   return {
-    list: (call) => get("/identity-integrations", z43.array(identityIntegrationSchema), call),
+    list: (call) => get("/identity-integrations", z44.array(identityIntegrationSchema), call),
     /** The secret `token` is in this response only. */
     create: (input, call) => post(
       "/identity-integrations",
@@ -4044,7 +4288,7 @@ function identityIntegrations({
      * @deprecated Use `addSecret`, then `revokeSecret` the old secret once your app uses the new one.
      */
     rotate: (id, call) => post(
-      `/identity-integrations/${z43.string().uuid().parse(id)}/rotate`,
+      `/identity-integrations/${z44.string().uuid().parse(id)}/rotate`,
       identityIntegrationSecretSchema,
       {},
       call
@@ -4054,7 +4298,7 @@ function identityIntegrations({
      * revoke them with `revokeSecret`. The new `token` is in this response only.
      */
     addSecret: (id, input = {}, call) => post(
-      `/identity-integrations/${z43.string().uuid().parse(id)}/secrets`,
+      `/identity-integrations/${z44.string().uuid().parse(id)}/secrets`,
       identityIntegrationSecretSchema,
       credentialSecretInputSchema.parse(input),
       call
@@ -4064,7 +4308,7 @@ function identityIntegrations({
      * environment instead of answering it, as `createIntoAppSecret` does.
      */
     addSecretIntoAppSecret: (id, appSecret, input = {}, call) => post(
-      `/identity-integrations/${z43.string().uuid().parse(id)}/secrets`,
+      `/identity-integrations/${z44.string().uuid().parse(id)}/secrets`,
       identityIntegrationAppSecretSchema,
       {
         ...credentialSecretInputSchema.parse(input),
@@ -4077,7 +4321,7 @@ function identityIntegrations({
      * revoked; disconnect the integration with `revoke` instead.
      */
     revokeSecret: (id, secret, call) => request(
-      `/identity-integrations/${z43.string().uuid().parse(id)}/secrets/${z43.string().uuid().parse(secret)}`,
+      `/identity-integrations/${z44.string().uuid().parse(id)}/secrets/${z44.string().uuid().parse(secret)}`,
       identityIntegrationSchema,
       void 0,
       "DELETE",
@@ -4085,7 +4329,7 @@ function identityIntegrations({
     ),
     /** Makes one secret never expire. */
     removeSecretExpiry: (id, secret, call) => request(
-      `/identity-integrations/${z43.string().uuid().parse(id)}/secrets/${z43.string().uuid().parse(secret)}/expiry`,
+      `/identity-integrations/${z44.string().uuid().parse(id)}/secrets/${z44.string().uuid().parse(secret)}/expiry`,
       identityIntegrationSchema,
       void 0,
       "DELETE",
@@ -4098,7 +4342,7 @@ function identityIntegrations({
      */
     kinds: (call) => get(
       "/identity-integrations/kinds",
-      z43.array(identityKindClaimSchema),
+      z44.array(identityKindClaimSchema),
       call
     ),
     /**
@@ -4110,7 +4354,7 @@ function identityIntegrations({
     setAccountVouching: (id, input, call) => (
       // The action ID's receipt makes a repeat apply once, so the client may resend it.
       exchange(
-        `/identity-integrations/${z43.string().uuid().parse(id)}/account-vouching`,
+        `/identity-integrations/${z44.string().uuid().parse(id)}/account-vouching`,
         identityIntegrationSchema,
         identityIntegrationAccountVouchingInputSchema.parse(
           withActionId(input)
@@ -4125,8 +4369,8 @@ function identityIntegrations({
      * and keep attributing tracker records; unlink them on the member to stop that.
      */
     revoke: (id, call) => request(
-      `/identity-integrations/${z43.string().uuid().parse(id)}`,
-      z43.null(),
+      `/identity-integrations/${z44.string().uuid().parse(id)}`,
+      z44.null(),
       void 0,
       "DELETE",
       call
@@ -4136,35 +4380,35 @@ function identityIntegrations({
 var identityIntegrationsApi = (http) => identityIntegrations(http);
 
 // src/server/audit.ts
-import * as z44 from "zod";
-var auditRecordSchema = /* @__PURE__ */ (() => z44.object({
-  id: z44.string(),
-  action: z44.string(),
-  actor: z44.string().nullable(),
+import * as z45 from "zod";
+var auditRecordSchema = /* @__PURE__ */ (() => z45.object({
+  id: z45.string(),
+  action: z45.string(),
+  actor: z45.string().nullable(),
   user: operatorUserSchema.nullable().optional(),
-  detail: z44.string(),
-  at: z44.number(),
-  attempt: z44.string().nullable()
+  detail: z45.string(),
+  at: z45.number(),
+  attempt: z45.string().nullable()
 }).refine((record3) => !record3.user || record3.user.id === record3.actor, {
   message: "User profile must match the recorded actor",
   path: ["user"]
 }))();
-var auditQuerySchema = /* @__PURE__ */ (() => z44.strictObject({
-  category: z44.enum(["reviews", "rewards", "configuration"]).optional(),
-  q: z44.string().max(200).optional(),
+var auditQuerySchema = /* @__PURE__ */ (() => z45.strictObject({
+  category: z45.enum(["reviews", "rewards", "configuration"]).optional(),
+  q: z45.string().max(200).optional(),
   limit: pageLimit,
   cursor: pageCursorSchema.optional()
 }))();
 var auditListQuerySchema = /* @__PURE__ */ (() => auditQuerySchema.extend({
-  category: z44.enum(["reviews", "rewards", "configuration", "test-members"]).optional()
+  category: z45.enum(["reviews", "rewards", "configuration", "test-members"]).optional()
 }))();
 var accessHistoryQuerySchema = /* @__PURE__ */ (() => auditQuerySchema.omit({
   category: true
 }))();
-var auditPageSchema = /* @__PURE__ */ (() => z44.object({
-  items: z44.array(auditRecordSchema),
-  total: z44.number().int().nonnegative(),
-  nextCursor: z44.string().nullable()
+var auditPageSchema = /* @__PURE__ */ (() => z45.object({
+  items: z45.array(auditRecordSchema),
+  total: z45.number().int().nonnegative(),
+  nextCursor: z45.string().nullable()
 }))();
 
 // src/server/client/audit.ts
@@ -4261,7 +4505,7 @@ function discordRoles({ get, post }) {
 var discordRolesApi = (http) => discordRoles(http);
 
 // src/server/client/test-members.ts
-import * as z45 from "zod";
+import * as z46 from "zod";
 function testMembers({ get, post }) {
   return {
     create: (input, call) => post(
@@ -4270,7 +4514,7 @@ function testMembers({ get, post }) {
       testMemberCreateSchema.parse(withActionId(input)),
       call
     ),
-    list: (call) => get("/test-members", z45.array(testMemberSchema), call),
+    list: (call) => get("/test-members", z46.array(testMemberSchema), call),
     history: (member, query = {}, call) => get(
       `/test-members/${identifier.parse(member)}/history${queryString(testMemberHistoryQuerySchema.parse(query))}`,
       testMemberHistorySchema,
@@ -4289,7 +4533,7 @@ function testMembers({ get, post }) {
      */
     uploadEvidence: (member, file, input = {}, call) => {
       const { actionId: actionId3 } = withActionId(
-        z45.object({ actionId: identifier.optional() }).strict().parse(input)
+        z46.object({ actionId: identifier.optional() }).strict().parse(input)
       );
       return post(
         `/test-members/${identifier.parse(member)}/evidence`,
@@ -4548,79 +4792,79 @@ function memberImports({ get, post }) {
 var memberImportsApi = (http) => memberImports(http);
 
 // src/server/client/members.ts
-import * as z50 from "zod";
+import * as z51 from "zod";
 
 // src/server/members.ts
-import * as z48 from "zod";
+import * as z49 from "zod";
 
 // src/server/member-bans.ts
-import * as z46 from "zod";
-var memberBanRollbackSchema = /* @__PURE__ */ (() => z46.object({
-  completions: z46.boolean().default(false),
-  referralPayouts: z46.boolean().default(false),
-  pointAwards: z46.boolean().default(false)
+import * as z47 from "zod";
+var memberBanRollbackSchema = /* @__PURE__ */ (() => z47.object({
+  completions: z47.boolean().default(false),
+  referralPayouts: z47.boolean().default(false),
+  pointAwards: z47.boolean().default(false)
 }).strict())();
-var banReason = /* @__PURE__ */ (() => z46.string().trim().min(1).max(500))();
-var memberBanInputSchema = /* @__PURE__ */ (() => z46.object({
+var banReason = /* @__PURE__ */ (() => z47.string().trim().min(1).max(500))();
+var memberBanInputSchema = /* @__PURE__ */ (() => z47.object({
   actionId: identifier,
   reason: banReason,
   rollback: memberBanRollbackSchema.optional()
 }).strict())();
-var memberBanPreviewInputSchema = /* @__PURE__ */ (() => z46.object({ rollback: memberBanRollbackSchema.optional() }).strict())();
-var memberUnbanInputSchema = /* @__PURE__ */ (() => z46.object({
+var memberBanPreviewInputSchema = /* @__PURE__ */ (() => z47.object({ rollback: memberBanRollbackSchema.optional() }).strict())();
+var memberUnbanInputSchema = /* @__PURE__ */ (() => z47.object({
   actionId: identifier,
   reason: banReason,
-  restoreCompletions: z46.boolean().default(false)
+  restoreCompletions: z47.boolean().default(false)
 }).strict())();
-var points2 = /* @__PURE__ */ (() => z46.number().int().nonnegative())();
-var memberBanOutcomeSchema = /* @__PURE__ */ (() => z46.object({
+var points2 = /* @__PURE__ */ (() => z47.number().int().nonnegative())();
+var memberBanOutcomeSchema = /* @__PURE__ */ (() => z47.object({
   attemptsRejected: points2,
   completionsRevoked: points2,
   completionsRestored: points2,
-  completionsKept: z46.array(
-    z46.object({ completion: identifier, code: z46.string() })
+  completionsKept: z47.array(
+    z47.object({ completion: identifier, code: z47.string() })
   ),
   entriesReversed: points2,
   referralAccounts: points2,
-  points: z46.array(
-    z46.object({ ledger: identifier, reversed: points2, unreversed: points2 })
+  points: z47.array(
+    z47.object({ ledger: identifier, reversed: points2, unreversed: points2 })
   ),
-  referralDebt: z46.array(z46.object({ ledger: identifier, amount: points2 }))
+  referralDebt: z47.array(z47.object({ ledger: identifier, amount: points2 }))
 }))();
-var runStatusSchema = /* @__PURE__ */ (() => z46.string())();
-var runSchema = /* @__PURE__ */ (() => z46.object({
+var runStatusSchema = /* @__PURE__ */ (() => z47.string())();
+var runSchema = /* @__PURE__ */ (() => z47.object({
   status: runStatusSchema,
-  finishedAt: z46.number().int().nullable(),
+  finishedAt: z47.number().int().nullable(),
   outcome: memberBanOutcomeSchema.nullable()
 }))();
-var memberBanSchema = /* @__PURE__ */ (() => z46.object({
+var memberBanSchema = /* @__PURE__ */ (() => z47.object({
   id: identifier,
   member: identifier,
-  reason: z46.string(),
-  bannedAt: z46.number().int(),
-  bannedBy: z46.string().nullable(),
+  reason: z47.string(),
+  bannedAt: z47.number().int(),
+  bannedBy: z47.string().nullable(),
   rollback: runSchema.extend({
-    completions: z46.boolean(),
-    referralPayouts: z46.boolean(),
-    pointAwards: z46.boolean()
+    completions: z47.boolean(),
+    referralPayouts: z47.boolean(),
+    pointAwards: z47.boolean()
   }),
-  unban: z46.object({
-    reason: z46.string(),
-    unbannedAt: z46.number().int(),
-    by: z46.string().nullable(),
-    restoreCompletions: z46.boolean(),
+  unban: z47.object({
+    reason: z47.string(),
+    unbannedAt: z47.number().int(),
+    by: z47.string().nullable(),
+    restoreCompletions: z47.boolean(),
     restore: runSchema.nullable()
   }).nullable()
 }))();
-var memberBanPreviewSchema = /* @__PURE__ */ (() => z46.object({
+var memberBanPreviewSchema = /* @__PURE__ */ (() => z47.object({
   member: identifier,
-  banned: z46.boolean(),
+  banned: z47.boolean(),
   attempts: points2,
   completions: points2,
   entries: points2,
   referralAccounts: points2,
-  points: z46.array(
-    z46.object({
+  points: z47.array(
+    z47.object({
       ledger: identifier,
       completions: points2,
       pointAwards: points2,
@@ -4631,11 +4875,11 @@ var memberBanPreviewSchema = /* @__PURE__ */ (() => z46.object({
       referralDebt: points2
     })
   ),
-  inviters: z46.array(
-    z46.object({
+  inviters: z47.array(
+    z47.object({
       member: identifier,
-      ledgers: z46.array(
-        z46.object({
+      ledgers: z47.array(
+        z47.object({
           ledger: identifier,
           bonus: points2,
           reversed: points2,
@@ -4647,13 +4891,13 @@ var memberBanPreviewSchema = /* @__PURE__ */ (() => z46.object({
 }))();
 
 // src/server/wallets.ts
-import * as z47 from "zod";
+import * as z48 from "zod";
 var managedWalletSchema = /* @__PURE__ */ (() => linkedWalletSchema.extend({
   /**
    * True when the organization vouched for the wallet (a member import, or an app login's server at
    * sign-in), and the member has not proved it since. Absent from Relay versions without imports.
    */
-  imported: z47.boolean().optional(),
+  imported: z48.boolean().optional(),
   /**
    * The app login that vouched for the wallet at sign-in, while `imported` is true and no member
    * import attached it. Absent from Relay versions without it.
@@ -4667,11 +4911,11 @@ var managedWalletSchema = /* @__PURE__ */ (() => linkedWalletSchema.extend({
    *
    * @experimental A minor release can change `.sol` names.
    */
-  name: z47.string().optional(),
-  status: z47.enum(["linked", "unlinked"]),
-  unlinkedAt: z47.number().int().nullable(),
+  name: z48.string().optional(),
+  status: z48.enum(["linked", "unlinked"]),
+  unlinkedAt: z48.number().int().nullable(),
   /** "member", or the operator or key that unlinked it. */
-  unlinkedBy: z47.string().nullable()
+  unlinkedBy: z48.string().nullable()
 }))();
 var balanceCheckSchema = /* @__PURE__ */ (() => walletBalanceSchema.pick({
   chain: true,
@@ -4681,66 +4925,66 @@ var balanceCheckSchema = /* @__PURE__ */ (() => walletBalanceSchema.pick({
   wallets: true,
   observedAt: true
 }).extend({ attempt: identifier }))();
-var walletBalanceChainsSchema = /* @__PURE__ */ (() => z47.object({
-  chains: z47.array(
-    z47.object({
-      chain: z47.union([
-        z47.literal(solanaMainnet),
-        z47.literal(solanaDevnet),
+var walletBalanceChainsSchema = /* @__PURE__ */ (() => z48.object({
+  chains: z48.array(
+    z48.object({
+      chain: z48.union([
+        z48.literal(solanaMainnet),
+        z48.literal(solanaDevnet),
         cosmosNetworkSchema,
         evmChainIdSchema
       ]),
-      name: z47.string(),
-      testnet: z47.boolean()
+      name: z48.string(),
+      testnet: z48.boolean()
     })
   )
 }))();
-var memberWalletUnlinkInputSchema = /* @__PURE__ */ (() => walletUnlinkInputSchema.extend({ reason: z47.string().trim().min(1).max(500) }).strict())();
+var memberWalletUnlinkInputSchema = /* @__PURE__ */ (() => walletUnlinkInputSchema.extend({ reason: z48.string().trim().min(1).max(500) }).strict())();
 var memberWalletSignInInputSchema = /* @__PURE__ */ (() => walletUnlinkInputSchema.extend({
-  enabled: z47.boolean(),
-  reason: z47.string().trim().min(1).max(500)
+  enabled: z48.boolean(),
+  reason: z48.string().trim().min(1).max(500)
 }).strict())();
 
 // src/server/members.ts
-var memberSchema = /* @__PURE__ */ (() => z48.object({
-  id: z48.string(),
-  test: z48.boolean().optional(),
-  name: z48.string().nullable().optional(),
-  accounts: z48.array(memberAccountSchema).default([]),
+var memberSchema = /* @__PURE__ */ (() => z49.object({
+  id: z49.string(),
+  test: z49.boolean().optional(),
+  name: z49.string().nullable().optional(),
+  accounts: z49.array(memberAccountSchema).default([]),
   /** The member's linked app identities, by kind. Absent from Relay versions without it. */
-  appIdentities: z48.array(memberAppIdentitySchema).optional(),
-  attempts: z48.number(),
-  completions: z48.number(),
-  rewards: z48.number(),
-  lastActivity: z48.number().nullable(),
+  appIdentities: z49.array(memberAppIdentitySchema).optional(),
+  attempts: z49.number(),
+  completions: z49.number(),
+  rewards: z49.number(),
+  lastActivity: z49.number().nullable(),
   /**
    * When the customer erased the member (`members.erase`), in Unix milliseconds: it keeps its ID
    * and accounting, with no profile, accounts or identities. Absent on a member that was not erased.
    */
-  erasedAt: z48.number().optional(),
+  erasedAt: z49.number().optional(),
   /**
    * When an operator banned the member (`members.ban`), in Unix milliseconds. Absent on a member
    * who is not banned now.
    *
    * @experimental A minor release can change member bans.
    */
-  bannedAt: z48.number().optional()
+  bannedAt: z49.number().optional()
 }))();
-var managedOAuthAccountBaseSchema = /* @__PURE__ */ (() => z48.object({
-  provider: z48.enum(["x", "discord"]),
-  revision: z48.number().int().nonnegative()
+var managedOAuthAccountBaseSchema = /* @__PURE__ */ (() => z49.object({
+  provider: z49.enum(["x", "discord"]),
+  revision: z49.number().int().nonnegative()
 }))();
-var managedOAuthAccountSchema = /* @__PURE__ */ (() => z48.discriminatedUnion("status", [
+var managedOAuthAccountSchema = /* @__PURE__ */ (() => z49.discriminatedUnion("status", [
   managedOAuthAccountBaseSchema.extend({
-    status: z48.literal("connected"),
-    subject: z48.string().min(1),
-    linkedAt: z48.number(),
+    status: z49.literal("connected"),
+    subject: z49.string().min(1),
+    linkedAt: z49.number(),
     /**
      * True when the organization vouched for the account, not the member's proof: a member import
      * attached it, or an app login's server did at sign-in (`vouchedBy`). Absent from Relay
      * versions without imports.
      */
-    imported: z48.boolean().optional(),
+    imported: z49.boolean().optional(),
     /**
      * The app login that vouched for the account at sign-in, for an account with `imported` set
      * that no member import attached. Absent from Relay versions without it.
@@ -4750,26 +4994,26 @@ var managedOAuthAccountSchema = /* @__PURE__ */ (() => z48.discriminatedUnion("s
      * True for a real account an operator linked to a test member without OAuth
      * (`testMembers.linkAccount`). Absent from Relay versions without it.
      */
-    testLinked: z48.boolean().optional(),
+    testLinked: z49.boolean().optional(),
     ...identitySourceFields
   }),
-  managedOAuthAccountBaseSchema.extend({ status: z48.literal("disconnected") })
+  managedOAuthAccountBaseSchema.extend({ status: z49.literal("disconnected") })
 ]))();
 var managedTelegramAccountBaseSchema = /* @__PURE__ */ (() => managedOAuthAccountBaseSchema.extend({
-  provider: z48.literal("telegram")
+  provider: z49.literal("telegram")
 }))();
-var managedTelegramAccountSchema = /* @__PURE__ */ (() => z48.discriminatedUnion("status", [
+var managedTelegramAccountSchema = /* @__PURE__ */ (() => z49.discriminatedUnion("status", [
   managedTelegramAccountBaseSchema.extend({
-    status: z48.literal("connected"),
+    status: z49.literal("connected"),
     /** The numeric Telegram user ID. */
-    subject: z48.string().min(1),
-    linkedAt: z48.number(),
+    subject: z49.string().min(1),
+    linkedAt: z49.number(),
     /**
      * True when the organization vouched for the account, not the member's proof: a member import
      * attached it, or an app login's server did at sign-in (`vouchedBy`). Absent from Relay
      * versions without it.
      */
-    imported: z48.boolean().optional(),
+    imported: z49.boolean().optional(),
     /**
      * The app login that vouched for the account at sign-in, for an account with `imported` set
      * that no member import attached. Absent from Relay versions without it.
@@ -4778,14 +5022,14 @@ var managedTelegramAccountSchema = /* @__PURE__ */ (() => z48.discriminatedUnion
     ...identitySourceFields
   }),
   managedTelegramAccountBaseSchema.extend({
-    status: z48.literal("disconnected")
+    status: z49.literal("disconnected")
   })
 ]))();
-var memberOAuthUnlinkInputSchema = /* @__PURE__ */ (() => z48.object({
-  provider: z48.enum(["x", "discord"]),
-  subject: z48.string().min(1).max(4096),
-  revision: z48.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER - 1),
-  reason: z48.string().trim().min(1).max(500)
+var memberOAuthUnlinkInputSchema = /* @__PURE__ */ (() => z49.object({
+  provider: z49.enum(["x", "discord"]),
+  subject: z49.string().min(1).max(4096),
+  revision: z49.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER - 1),
+  reason: z49.string().trim().min(1).max(500)
 }).strict())();
 var memberTelegramUnlinkInputSchema = /* @__PURE__ */ (() => memberOAuthUnlinkInputSchema.omit({ provider: true }).strict())();
 var managedMemberIdentitySchema = /* @__PURE__ */ (() => memberIdentitySchema.extend({
@@ -4794,7 +5038,7 @@ var managedMemberIdentitySchema = /* @__PURE__ */ (() => memberIdentitySchema.ex
    * login's server at sign-in), until the member links that provider's account, or signs in with
    * the X account, through Domino. Absent from Relay versions without imports.
    */
-  imported: z48.boolean().optional(),
+  imported: z49.boolean().optional(),
   /**
    * The app login that vouched for the account at sign-in, for an `imported` account no member
    * import attached. Absent from Relay versions without it.
@@ -4804,40 +5048,40 @@ var managedMemberIdentitySchema = /* @__PURE__ */ (() => memberIdentitySchema.ex
    * True for a real X or Discord account an operator linked to a test member without OAuth
    * (`testMembers.linkAccount`). Absent from Relay versions without it.
    */
-  testLinked: z48.boolean().optional(),
+  testLinked: z49.boolean().optional(),
   ...identitySourceFields,
-  status: z48.enum(["linked", "unlinked"]),
-  unlinkedAt: z48.number().int().nullable(),
+  status: z49.enum(["linked", "unlinked"]),
+  unlinkedAt: z49.number().int().nullable(),
   /** The operator or key that unlinked it. */
-  unlinkedBy: z48.string().nullable()
+  unlinkedBy: z49.string().nullable()
 }))();
-var memberIdentityChangeInputSchema = /* @__PURE__ */ (() => z48.object({
+var memberIdentityChangeInputSchema = /* @__PURE__ */ (() => z49.object({
   kind: appIdentityKindSchema,
-  subject: z48.string().min(1).max(256),
-  reason: z48.string().trim().min(1).max(500)
+  subject: z49.string().min(1).max(256),
+  reason: z49.string().trim().min(1).max(500)
 }).strict())();
-var memberDetailSchema = /* @__PURE__ */ (() => z48.object({
+var memberDetailSchema = /* @__PURE__ */ (() => z49.object({
   snapshot: snapshotSchema,
   member: memberSchema,
   progress: memberProgressSchema,
   /** Up to 25 revoked completions with an unreversed point remainder, newest first. */
-  revocationShortfalls: z48.array(completionRevocationShortfallSchema).default([]),
+  revocationShortfalls: z49.array(completionRevocationShortfallSchema).default([]),
   /** Up to 25 revoked completions, newest first. Relay older than restore leaves it out. */
-  revokedCompletions: z48.array(revokedCompletionSchema).optional(),
+  revokedCompletions: z49.array(revokedCompletionSchema).optional(),
   /** Current and historical campaign enrollment state, including inactive enrollments. */
-  campaignEnrollments: z48.array(campaignEnrollmentSchema).default([]),
-  passes: z48.array(
-    z48.object({
-      provider: z48.string(),
-      event: z48.string(),
-      subject: z48.string(),
+  campaignEnrollments: z49.array(campaignEnrollmentSchema).default([]),
+  passes: z49.array(
+    z49.object({
+      provider: z49.string(),
+      event: z49.string(),
+      subject: z49.string(),
       attempt: identifier.nullable()
     })
   ).default([]),
   /** Linked and unlinked wallets. */
-  wallets: z48.array(managedWalletSchema),
+  wallets: z49.array(managedWalletSchema),
   /** The member's 10 most recent recorded balance reads, newest first. */
-  balanceChecks: z48.array(balanceCheckSchema),
+  balanceChecks: z49.array(balanceCheckSchema),
   /** The member's participant profile in this project. */
   profile: managedProfileSchema.nullable(),
   /**
@@ -4845,20 +5089,20 @@ var memberDetailSchema = /* @__PURE__ */ (() => z48.object({
    * member ID: their selected X and Discord accounts and their `app:<name>` identities in this
    * project, including app identities an operator unlinked, by kind.
    */
-  identities: z48.array(managedMemberIdentitySchema),
+  identities: z49.array(managedMemberIdentitySchema),
   /**
    * The creator accounts the member linked (a YouTube channel), whose content managed tracker
    * sources attribute to them. Absent from Relay versions without creator accounts.
    */
-  creatorAccounts: z48.array(managedCreatorAccountSchema).optional(),
+  creatorAccounts: z49.array(managedCreatorAccountSchema).optional(),
   /**
    * Who invited the member, when they accepted, and the member import that recorded it, or null
    * when nobody invited them. Absent from Relay versions before imported referrals.
    */
-  referral: z48.object({
+  referral: z49.object({
     inviter: identifier,
-    acceptedAt: z48.number().int().nonnegative(),
-    suspended: z48.boolean(),
+    acceptedAt: z49.number().int().nonnegative(),
+    suspended: z49.boolean(),
     import: identifier.nullable()
   }).nullable().optional(),
   /**
@@ -4869,9 +5113,9 @@ var memberDetailSchema = /* @__PURE__ */ (() => z48.object({
    */
   ban: memberBanSchema.nullable().optional()
 }))();
-var managedMemberProgressSchema = /* @__PURE__ */ (() => z48.object({
+var managedMemberProgressSchema = /* @__PURE__ */ (() => z49.object({
   member: identifier,
-  quests: z48.array(
+  quests: z49.array(
     memberProgressSchema.shape.quests.element.extend({
       /** The streak as `members.get` reports it, without the list of qualifying days. */
       streak: streakProgressSchema.omit({ days: true }).nullable().optional()
@@ -4882,10 +5126,10 @@ var managedMemberProgressSchema = /* @__PURE__ */ (() => z48.object({
   /** Each point balance the member has, by balance ID. */
   balances: snapshotSchema.shape.balances
 }))();
-var memberLookupSchema = /* @__PURE__ */ (() => z48.union([
-  z48.object({
-    provider: z48.string().min(1).max(200),
-    subject: z48.string().min(1).max(2048)
+var memberLookupSchema = /* @__PURE__ */ (() => z49.union([
+  z49.object({
+    provider: z49.string().min(1).max(200),
+    subject: z49.string().min(1).max(2048)
   }).strict(),
   identityReferenceSchema.transform(
     (reference) => reference.kind === "wallet" ? { provider: reference.chain, subject: reference.address } : { provider: reference.kind, subject: reference.subject }
@@ -4896,50 +5140,46 @@ var memberLookupSchema = /* @__PURE__ */ (() => z48.union([
     subject: address
   }))
 ]))();
-var booleanQuery = /* @__PURE__ */ (() => z48.union([
-  z48.boolean(),
-  z48.enum(["true", "false"]).transform((v) => v === "true")
-]))();
-var managedMemberQuerySchema = /* @__PURE__ */ (() => z48.strictObject({
-  q: z48.string().max(200).optional(),
+var managedMemberQuerySchema = /* @__PURE__ */ (() => z49.strictObject({
+  q: z49.string().max(200).optional(),
   needsReview: booleanQuery.optional(),
-  limit: z48.coerce.number().int().min(1).max(100).optional(),
+  limit: z49.coerce.number().int().min(1).max(100).optional(),
   cursor: pageCursorSchema.optional()
 }))();
-var managedMemberPageSchema = /* @__PURE__ */ (() => z48.object({
-  items: z48.array(memberSchema),
-  total: z48.number().int().nonnegative(),
-  nextCursor: z48.string().nullable()
+var managedMemberPageSchema = /* @__PURE__ */ (() => z49.object({
+  items: z49.array(memberSchema),
+  total: z49.number().int().nonnegative(),
+  nextCursor: z49.string().nullable()
 }))();
 
 // src/server/member-erasure.ts
-import * as z49 from "zod";
+import * as z50 from "zod";
 var memberErasureInputSchema = evidenceRedactionInputSchema;
-var memberErasureDeletedSchema = /* @__PURE__ */ (() => z49.object({
+var memberErasureDeletedSchema = /* @__PURE__ */ (() => z50.object({
   /** The profile: display name and avatar. 0 or 1. */
-  profiles: z49.number().int().nonnegative(),
+  profiles: z50.number().int().nonnegative(),
   /** Sign-in identities. */
-  identities: z49.number().int().nonnegative(),
+  identities: z50.number().int().nonnegative(),
   /** Linked X, Discord, Telegram, Google, Apple and email accounts. */
-  accounts: z49.number().int().nonnegative(),
+  accounts: z50.number().int().nonnegative(),
   /** `app:<name>` identities your app's integration or an import gave. */
-  appIdentities: z49.number().int().nonnegative(),
+  appIdentities: z50.number().int().nonnegative(),
   /** Linked wallet addresses. */
-  wallets: z49.number().int().nonnegative(),
+  wallets: z50.number().int().nonnegative(),
   /** Signed-in sessions, ended at once. */
-  sessions: z49.number().int().nonnegative(),
+  sessions: z50.number().int().nonnegative(),
   /** Marketing consent records. */
-  consents: z49.number().int().nonnegative(),
+  consents: z50.number().int().nonnegative(),
   /** Leaderboard aliases. */
-  aliases: z49.number().int().nonnegative(),
+  aliases: z50.number().int().nonnegative(),
   /** Attempts whose submitted evidence (photo, text, URL or answers) was deleted. */
-  evidence: z49.number().int().nonnegative(),
+  evidence: z50.number().int().nonnegative(),
   /** Tracker records the member's accounts authored, whose stored content was forgotten. */
-  records: z49.number().int().nonnegative()
+  records: z50.number().int().nonnegative()
 }))();
-var memberErasureResultSchema = /* @__PURE__ */ (() => z49.object({
+var memberErasureResultSchema = /* @__PURE__ */ (() => z50.object({
   member: identifier,
-  erasedAt: z49.number().int(),
+  erasedAt: z50.number().int(),
   deleted: memberErasureDeletedSchema
 }))();
 
@@ -5162,7 +5402,7 @@ function members({ get, post }) {
     /** Who each member is: up to 100 distinct IDs; unknown IDs come back without accounts. */
     people: (members2, call) => get(
       `/people${queryString({ ids: members2.join(",") })}`,
-      z50.array(personSchema),
+      z51.array(personSchema),
       call
     ),
     /**
@@ -5172,7 +5412,7 @@ function members({ get, post }) {
      */
     oauthAccounts: (member, call) => get(
       `/members/${encodeURIComponent(member)}/oauth-accounts`,
-      z50.array(managedOAuthAccountSchema),
+      z51.array(managedOAuthAccountSchema),
       call
     ),
     /**
@@ -5184,7 +5424,7 @@ function members({ get, post }) {
      */
     unlinkOAuthAccount: (member, input, call) => post(
       `/members/${encodeURIComponent(member)}/oauth-accounts/unlink`,
-      z50.array(managedOAuthAccountSchema),
+      z51.array(managedOAuthAccountSchema),
       expectedRevision(memberOAuthUnlinkInputSchema).parse(input),
       call
     ),
@@ -5267,7 +5507,7 @@ function members({ get, post }) {
      */
     unlinkWallet: (member, input, call) => post(
       `/members/${encodeURIComponent(member)}/wallets/unlink`,
-      z50.array(managedWalletSchema),
+      z51.array(managedWalletSchema),
       memberWalletUnlinkInputSchema.parse(input),
       call
     ),
@@ -5280,7 +5520,7 @@ function members({ get, post }) {
      */
     unlinkIdentity: (member, input, call) => post(
       `/members/${encodeURIComponent(member)}/identities/unlink`,
-      z50.array(managedMemberIdentitySchema),
+      z51.array(managedMemberIdentitySchema),
       memberIdentityChangeInputSchema.parse(input),
       call
     ),
@@ -5291,7 +5531,7 @@ function members({ get, post }) {
      */
     relinkIdentity: (member, input, call) => post(
       `/members/${encodeURIComponent(member)}/identities/relink`,
-      z50.array(managedMemberIdentitySchema),
+      z51.array(managedMemberIdentitySchema),
       memberIdentityChangeInputSchema.parse(input),
       call
     ),
@@ -5303,7 +5543,7 @@ function members({ get, post }) {
      */
     setWalletSignIn: (member, input, call) => post(
       `/members/${encodeURIComponent(member)}/wallets/sign-in`,
-      z50.array(managedWalletSchema),
+      z51.array(managedWalletSchema),
       memberWalletSignInInputSchema.parse(input),
       call
     )
@@ -5353,76 +5593,76 @@ function domains({ get, post, raw }) {
 var domainsApi = (http) => domains(http);
 
 // src/server/connections.ts
-import { z as z51 } from "zod";
-var connectionPluginSchema = /* @__PURE__ */ (() => z51.string().max(40).regex(/^[a-z][a-z0-9]*(-[a-z0-9]+)*$/, "Use a kebab-case plugin ID"))();
+import { z as z52 } from "zod";
+var connectionPluginSchema = /* @__PURE__ */ (() => z52.string().max(40).regex(/^[a-z][a-z0-9]*(-[a-z0-9]+)*$/, "Use a kebab-case plugin ID"))();
 var knownConnectionStatuses = [
   "disconnected",
   "ready",
   "attention"
 ];
-var connectionStatusSchema = /* @__PURE__ */ (() => z51.string().min(1))();
+var connectionStatusSchema = /* @__PURE__ */ (() => z52.string().min(1))();
 var knownConnectionReconnectReasons = ["revoked", "expired"];
-var reconnectReasonSchema = /* @__PURE__ */ (() => z51.string().min(1))();
-var connectionSecretFieldSchema = /* @__PURE__ */ (() => z51.object({
-  name: z51.string(),
-  label: z51.string(),
-  help: z51.string().nullable(),
-  set: z51.boolean()
-}))();
-var connectionSchema = /* @__PURE__ */ (() => z51.object({
-  plugin: z51.string(),
-  name: z51.string(),
-  environment: z51.enum(["test", "live"]),
+var reconnectReasonSchema = /* @__PURE__ */ (() => z52.string().min(1))();
+var connectionSecretFieldSchema = /* @__PURE__ */ (() => z52.object({
+  name: z52.string(),
+  label: z52.string(),
+  help: z52.string().nullable(),
+  set: z52.boolean()
+}))();
+var connectionSchema = /* @__PURE__ */ (() => z52.object({
+  plugin: z52.string(),
+  name: z52.string(),
+  environment: z52.enum(["test", "live"]),
   status: connectionStatusSchema,
-  issue: z51.string().nullable(),
-  config: z51.record(z51.string(), z51.unknown()).nullable(),
-  configSchema: z51.record(z51.string(), z51.unknown()),
-  secrets: z51.array(connectionSecretFieldSchema),
-  revision: z51.number().int().nonnegative(),
-  connectedAt: z51.number().nullable(),
-  connectedBy: z51.string().nullable(),
-  updatedAt: z51.number().nullable(),
+  issue: z52.string().nullable(),
+  config: z52.record(z52.string(), z52.unknown()).nullable(),
+  configSchema: z52.record(z52.string(), z52.unknown()),
+  secrets: z52.array(connectionSecretFieldSchema),
+  revision: z52.number().int().nonnegative(),
+  connectedAt: z52.number().nullable(),
+  connectedBy: z52.string().nullable(),
+  updatedAt: z52.number().nullable(),
   // A Relay from before OAuth connections answers none.
   reconnectReason: reconnectReasonSchema.nullable().default(null),
   // A Relay from before dry runs answers none.
-  dryRun: z51.boolean().default(false)
+  dryRun: z52.boolean().default(false)
 }))();
-var connectionPageSchema = /* @__PURE__ */ (() => z51.object({
-  items: z51.array(connectionSchema),
-  nextCursor: z51.string().nullable()
+var connectionPageSchema = /* @__PURE__ */ (() => z52.object({
+  items: z52.array(connectionSchema),
+  nextCursor: z52.string().nullable()
 }))();
-var actionId2 = /* @__PURE__ */ (() => z51.string().uuid().default(() => crypto.randomUUID()))();
-var config = /* @__PURE__ */ (() => z51.record(z51.string(), z51.unknown()))();
-var secrets = /* @__PURE__ */ (() => z51.record(z51.string().max(64), z51.string().min(1).max(8192)))();
-var connectionConnectInputSchema = /* @__PURE__ */ (() => z51.strictObject({
+var actionId2 = /* @__PURE__ */ (() => z52.string().uuid().default(() => crypto.randomUUID()))();
+var config = /* @__PURE__ */ (() => z52.record(z52.string(), z52.unknown()))();
+var secrets = /* @__PURE__ */ (() => z52.record(z52.string().max(64), z52.string().min(1).max(8192)))();
+var connectionConnectInputSchema = /* @__PURE__ */ (() => z52.strictObject({
   config,
   secrets: secrets.default({}),
-  dryRun: z51.boolean().optional(),
+  dryRun: z52.boolean().optional(),
   actionId: actionId2
 }))();
-var connectionAuthorizeInputSchema = /* @__PURE__ */ (() => z51.strictObject({
+var connectionAuthorizeInputSchema = /* @__PURE__ */ (() => z52.strictObject({
   config: config.default({}),
-  returnTo: z51.string().url().max(2048).optional(),
+  returnTo: z52.string().url().max(2048).optional(),
   actionId: actionId2
 }))();
-var connectionAuthorizationSchema = /* @__PURE__ */ (() => z51.object({
-  authorizationUrl: z51.string().url(),
-  expiresAt: z51.number()
+var connectionAuthorizationSchema = /* @__PURE__ */ (() => z52.object({
+  authorizationUrl: z52.string().url(),
+  expiresAt: z52.number()
 }))();
-var connectionAuthorizationCompleteInputSchema = /* @__PURE__ */ (() => z51.strictObject({
-  code: z51.string().min(1).max(200)
+var connectionAuthorizationCompleteInputSchema = /* @__PURE__ */ (() => z52.strictObject({
+  code: z52.string().min(1).max(200)
 }))();
-var connectionUpdateInputSchema = /* @__PURE__ */ (() => z51.strictObject({
+var connectionUpdateInputSchema = /* @__PURE__ */ (() => z52.strictObject({
   config: config.optional(),
   secrets: secrets.optional(),
-  expectedRevision: z51.number().int().nonnegative().optional(),
+  expectedRevision: z52.number().int().nonnegative().optional(),
   actionId: actionId2
 }).refine(
   (input) => input.config !== void 0 || Object.keys(input.secrets ?? {}).length,
   { message: "Change the config, a secret, or both" }
 ))();
-var connectionDisconnectInputSchema = /* @__PURE__ */ (() => z51.strictObject({
-  expectedRevision: z51.number().int().nonnegative().optional(),
+var connectionDisconnectInputSchema = /* @__PURE__ */ (() => z52.strictObject({
+  expectedRevision: z52.number().int().nonnegative().optional(),
   actionId: actionId2
 }))();
 var knownPluginSlots = [
@@ -5433,29 +5673,29 @@ var knownPluginSlots = [
   "evaluator-capability",
   "identity"
 ];
-var pluginSlotSchema = /* @__PURE__ */ (() => z51.string().min(1))();
-var pluginSchema = /* @__PURE__ */ (() => z51.object({
-  id: z51.string(),
-  name: z51.string(),
-  slots: z51.array(pluginSlotSchema),
-  configSchema: z51.record(z51.string(), z51.unknown()),
-  secrets: z51.array(
-    z51.object({
-      name: z51.string(),
-      label: z51.string(),
-      help: z51.string().nullable()
+var pluginSlotSchema = /* @__PURE__ */ (() => z52.string().min(1))();
+var pluginSchema = /* @__PURE__ */ (() => z52.object({
+  id: z52.string(),
+  name: z52.string(),
+  slots: z52.array(pluginSlotSchema),
+  configSchema: z52.record(z52.string(), z52.unknown()),
+  secrets: z52.array(
+    z52.object({
+      name: z52.string(),
+      label: z52.string(),
+      help: z52.string().nullable()
     })
   ),
-  events: z51.array(z51.string()),
+  events: z52.array(z52.string()),
   // A Relay from before OAuth connections answers none.
-  oauth: z51.object({ configured: z51.boolean(), scopes: z51.array(z51.string()) }).nullable().default(null),
-  console: z51.object({ component: z51.string() }).nullable().default(null),
+  oauth: z52.object({ configured: z52.boolean(), scopes: z52.array(z52.string()) }).nullable().default(null),
+  console: z52.object({ component: z52.string() }).nullable().default(null),
   // A Relay from before dry runs answers none.
-  dryRun: z51.boolean().default(false)
+  dryRun: z52.boolean().default(false)
 }))();
-var pluginPageSchema = /* @__PURE__ */ (() => z51.object({
-  items: z51.array(pluginSchema),
-  nextCursor: z51.string().nullable()
+var pluginPageSchema = /* @__PURE__ */ (() => z52.object({
+  items: z52.array(pluginSchema),
+  nextCursor: z52.string().nullable()
 }))();
 var knownConnectionSyncKinds = ["connect", "resync"];
 var knownConnectionSyncStatuses = [
@@ -5463,53 +5703,53 @@ var knownConnectionSyncStatuses = [
   "finished",
   "failed"
 ];
-var connectionSyncSchema = /* @__PURE__ */ (() => z51.object({
-  kind: z51.string().min(1),
-  status: z51.string().min(1),
-  done: z51.number().int().nonnegative(),
-  total: z51.number().int().nonnegative().nullable(),
-  startedAt: z51.number(),
-  finishedAt: z51.number().nullable()
-}))();
-var connectionActivitySchema = /* @__PURE__ */ (() => z51.object({
-  plugin: z51.string(),
-  environment: z51.enum(["test", "live"]),
+var connectionSyncSchema = /* @__PURE__ */ (() => z52.object({
+  kind: z52.string().min(1),
+  status: z52.string().min(1),
+  done: z52.number().int().nonnegative(),
+  total: z52.number().int().nonnegative().nullable(),
+  startedAt: z52.number(),
+  finishedAt: z52.number().nullable()
+}))();
+var connectionActivitySchema = /* @__PURE__ */ (() => z52.object({
+  plugin: z52.string(),
+  environment: z52.enum(["test", "live"]),
   status: connectionStatusSchema,
-  dryRun: z51.boolean(),
-  lastSyncAt: z51.number().nullable(),
-  failingSince: z51.number().nullable(),
-  consecutiveFailures: z51.number().int().nonnegative(),
-  members: z51.object({
-    synced: z51.number().int().nonnegative(),
-    skipped: z51.array(
-      z51.object({
-        reason: z51.string(),
-        members: z51.number().int().nonnegative()
+  dryRun: z52.boolean(),
+  lastSyncAt: z52.number().nullable(),
+  failingSince: z52.number().nullable(),
+  consecutiveFailures: z52.number().int().nonnegative(),
+  members: z52.object({
+    synced: z52.number().int().nonnegative(),
+    skipped: z52.array(
+      z52.object({
+        reason: z52.string(),
+        members: z52.number().int().nonnegative()
       })
     )
   }),
   sync: connectionSyncSchema.nullable(),
-  errors: z51.array(
-    z51.object({ at: z51.number(), kind: z51.string(), message: z51.string() })
+  errors: z52.array(
+    z52.object({ at: z52.number(), kind: z52.string(), message: z52.string() })
   )
 }))();
-var connectionDryRunRequestSchema = /* @__PURE__ */ (() => z51.object({
-  id: z51.string(),
-  at: z51.number(),
-  member: z51.string().nullable(),
-  method: z51.string(),
-  path: z51.string(),
-  body: z51.unknown()
+var connectionDryRunRequestSchema = /* @__PURE__ */ (() => z52.object({
+  id: z52.string(),
+  at: z52.number(),
+  member: z52.string().nullable(),
+  method: z52.string(),
+  path: z52.string(),
+  body: z52.unknown()
 }))();
-var connectionDryRunPageSchema = /* @__PURE__ */ (() => z51.object({
-  items: z51.array(connectionDryRunRequestSchema),
-  nextCursor: z51.string().nullable()
+var connectionDryRunPageSchema = /* @__PURE__ */ (() => z52.object({
+  items: z52.array(connectionDryRunRequestSchema),
+  nextCursor: z52.string().nullable()
 }))();
-var connectionDryRunQuerySchema = /* @__PURE__ */ (() => z51.strictObject({
-  cursor: z51.string().min(1).max(40).optional(),
-  limit: z51.number().int().min(1).max(100).optional()
+var connectionDryRunQuerySchema = /* @__PURE__ */ (() => z52.strictObject({
+  cursor: z52.string().min(1).max(40).optional(),
+  limit: z52.number().int().min(1).max(100).optional()
 }))();
-var connectionResyncInputSchema = /* @__PURE__ */ (() => z51.strictObject({ actionId: actionId2 }))();
+var connectionResyncInputSchema = /* @__PURE__ */ (() => z52.strictObject({ actionId: actionId2 }))();
 
 // src/server/client/connections.ts
 function connectionPath(plugin) {
@@ -5691,7 +5931,7 @@ function schedules({ request, get, post }) {
 var schedulesApi = (http) => schedules(http);
 
 // src/server/client/storage.ts
-import * as z52 from "zod";
+import * as z53 from "zod";
 function storage({ get, post, raw }) {
   function clear(kind, name, input, call) {
     const path = `/storage/${kind}/${appSecretNameSchema.parse(name)}/clear`;
@@ -5735,7 +5975,7 @@ function storage({ get, post, raw }) {
       `/storage/sql/${appSecretNameSchema.parse(name)}/cell?${new URLSearchParams(
         {
           table,
-          row: String(z52.number().int().min(0).parse(options.row)),
+          row: String(z53.number().int().min(0).parse(options.row)),
           column: options.column,
           ...options.cursor === void 0 ? {} : { cursor: pageCursorSchema.parse(options.cursor) }
         }
@@ -5847,61 +6087,83 @@ function campaigns({ post }) {
 var campaignsApi = (http) => campaigns(http);
 
 // src/server/client/quests.ts
-import * as z55 from "zod";
+import * as z56 from "zod";
 
 // src/server/quests.ts
-import * as z53 from "zod";
-var questLifecycleInputSchema = /* @__PURE__ */ (() => z53.object({
+import * as z54 from "zod";
+var questLifecycleInputSchema = /* @__PURE__ */ (() => z54.object({
   quest: identifier,
   expectedRelease: identifier.optional(),
-  archived: z53.boolean(),
-  reason: z53.string().trim().min(1).max(500),
+  archived: z54.boolean(),
+  reason: z54.string().trim().min(1).max(500),
   actionId: identifier
 }).strict())();
-var questLifecycleSchema = /* @__PURE__ */ (() => z53.object({
+var questLifecycleSchema = /* @__PURE__ */ (() => z54.object({
   quest: identifier,
   key: identifier.nullable(),
-  title: z53.string(),
+  title: z54.string(),
   release: identifier,
-  lifecycle: z53.enum(["active", "paused", "archived"]),
-  changed: z53.boolean()
+  lifecycle: z54.enum(["active", "paused", "archived"]),
+  changed: z54.boolean()
 }))();
 
 // src/server/quest-stations.ts
-import * as z54 from "zod";
+import * as z55 from "zod";
 var stationOperationTarget = (quest, station) => `station:${quest}:${station}`;
-var stationRevocationInputSchema = /* @__PURE__ */ (() => z54.object({
-  reason: z54.string().trim().min(1).max(500),
+var stationRevocationInputSchema = /* @__PURE__ */ (() => z55.object({
+  reason: z55.string().trim().min(1).max(500),
   actionId: identifier
 }).strict())();
-var stationRevocationSchema = /* @__PURE__ */ (() => z54.object({
+var stationRevocationSchema = /* @__PURE__ */ (() => z55.object({
   quest: identifier,
-  station: z54.string(),
-  revoked: z54.boolean(),
-  reason: z54.string().nullable(),
-  actor: z54.string().nullable(),
+  station: z55.string(),
+  revoked: z55.boolean(),
+  reason: z55.string().nullable(),
+  actor: z55.string().nullable(),
   /** When it was last revoked or restored, epoch milliseconds. */
-  changedAt: z54.number().nullable(),
-  changed: z54.boolean()
-}))();
-var questStationStateSchema = /* @__PURE__ */ (() => z54.object({
-  key: z54.string(),
-  label: z54.string(),
-  opensAt: z54.number().optional(),
-  closesAt: z54.number().optional(),
-  status: z54.string(),
-  revocation: z54.object({
-    revoked: z54.boolean(),
-    reason: z54.string(),
-    actor: z54.string().nullable(),
-    changedAt: z54.number()
+  changedAt: z55.number().nullable(),
+  changed: z55.boolean()
+}))();
+var questStationStateSchema = /* @__PURE__ */ (() => z55.object({
+  key: z55.string(),
+  label: z55.string(),
+  opensAt: z55.number().optional(),
+  closesAt: z55.number().optional(),
+  proof: z55.string().optional(),
+  codeSet: z55.boolean().optional(),
+  status: z55.string(),
+  revocation: z55.object({
+    revoked: z55.boolean(),
+    reason: z55.string(),
+    actor: z55.string().nullable(),
+    changedAt: z55.number()
   }).nullable(),
-  completions: z54.number().int().nonnegative()
+  completions: z55.number().int().nonnegative()
+}))();
+var stationCodeSchema = /* @__PURE__ */ (() => z55.string().min(6).max(64).regex(/^[A-Za-z0-9_-]+$/, "use letters, digits, - or _"))();
+var stationCodeInputSchema = /* @__PURE__ */ (() => z55.object({ code: stationCodeSchema, actionId: identifier }).strict())();
+var stationCodeGenerateInputSchema = /* @__PURE__ */ (() => z55.object({ actionId: identifier }).strict())();
+var stationScanPageSchema = /* @__PURE__ */ (() => z55.string().max(2048).refine((value) => {
+  try {
+    return new URL(value).protocol === "https:";
+  } catch {
+    return false;
+  }
+}, "Use the https URL of your app's scan page"))();
+var stationCodeStateSchema = /* @__PURE__ */ (() => z55.object({
+  quest: z55.string(),
+  station: z55.string(),
+  codeSet: z55.boolean(),
+  replaced: z55.boolean()
+}))();
+var generatedStationCodeSchema = /* @__PURE__ */ (() => stationCodeStateSchema.extend({
+  code: z55.string()
 }))();
 
 // src/server/client/quests.ts
 function quests(http) {
-  const { get, post } = http;
+  const { get, post, exchange, raw } = http;
+  const codePath = (quest, key2) => `/quests/${identifier.parse(quest)}/stations/${encodeURIComponent(key2)}/code`;
   const station = (verb) => (quest, key2, input, call) => post(
     `/quests/${identifier.parse(quest)}/stations/${encodeURIComponent(key2)}/${verb}`,
     stationRevocationSchema,
@@ -5937,7 +6199,7 @@ function quests(http) {
        */
       list: (quest, call) => get(
         `/quests/${identifier.parse(quest)}/stations`,
-        z55.array(questStationStateSchema),
+        z56.array(questStationStateSchema),
         call
       ),
       /**
@@ -5956,20 +6218,89 @@ function quests(http) {
        *
        * @experimental A minor release can change check-in stations.
        */
-      restore: station("restore")
+      restore: station("restore"),
+      /**
+       * Sets a code station's code in this environment, replacing any it had; requires `publish`.
+       * Codes are environment bindings: test's and live's are separate, a promotion never copies
+       * them, and a CLI session may set one in live. The answer never carries the code. A station
+       * a transaction proves is refused with 422 `station-proof-mismatch`, one the quest's
+       * current release lacks with 404 `not-found`, and a deployment that can't seal codes
+       * answers 503 `not-configured`.
+       *
+       * @experimental A minor release can change check-in stations.
+       */
+      setCode: (quest, key2, input, call) => (
+        // The action ID's receipt makes a repeat apply once, so the client may resend it.
+        exchange(
+          codePath(quest, key2),
+          stationCodeStateSchema,
+          stationCodeInputSchema.parse(withActionId(input)),
+          "PUT",
+          call,
+          true
+        )
+      ),
+      /**
+       * Generates a code station's code in this environment, replacing any it had, and answers
+       * it this once: 12 characters from an alphabet without look-alikes (no `0`/`O`, `1`/`I`/`l`).
+       * No later read answers it. A retry with the same `actionId` answers the same code. Requires
+       * `publish`, and is refused as `setCode` is.
+       *
+       * @experimental A minor release can change check-in stations.
+       */
+      generateCode: (quest, key2, input = {}, call) => post(
+        `${codePath(quest, key2)}/generate`,
+        generatedStationCodeSchema,
+        stationCodeGenerateInputSchema.parse(withActionId(input)),
+        call
+      ),
+      /**
+       * Clears a code station's code in this environment; requires `publish`. Until it gets
+       * another, the station takes no check-ins there. Clearing a station without a code changes
+       * nothing (`replaced: false`).
+       *
+       * @experimental A minor release can change check-in stations.
+       */
+      clearCode: (quest, key2, call) => exchange(
+        codePath(quest, key2),
+        stationCodeStateSchema,
+        void 0,
+        "DELETE",
+        call,
+        true
+      ),
+      /**
+       * A code station's printable QR code in this environment, as SVG: a link to your app's scan
+       * page `url` (https) with the quest key, station key and the station's code added as `quest`,
+       * `station` and `code` query parameters, and the station's label under it. Requires
+       * `publish`, as the code it carries does. A station without a code is refused with 409
+       * `station-code-not-set`, a station a transaction proves with 422 `station-proof-mismatch`,
+       * and a `url` that is not https with 422 `validation-failed`.
+       *
+       * @experimental A minor release can change check-in stations.
+       */
+      codeQr: async (quest, key2, input, call) => {
+        const response = await raw(
+          `${codePath(quest, key2)}/qr${queryString({
+            url: stationScanPageSchema.parse(input.url)
+          })}`,
+          call
+        );
+        return response.text();
+      }
     },
     /**
      * Each quest's current release, the most recently published first, archived quests
      * included; requires `read` permission.
      */
-    list: (call) => get("/quests/list", z55.array(publishedReleaseSchema), call),
+    list: (call) => get("/quests/list", z56.array(publishedReleaseSchema), call),
     /**
      * `list` without each release's evaluator `code`; requires `read` permission. Code is most of
      * a release's size, up to a megabyte each, so use this to show or match quests.
      */
     listWithoutCode: (call) => get(
       "/quests/list-without-code",
-      z55.array(publishedReleaseSchema.omit({ code: true })),
+      z56.array(publishedReleaseSchema.omit({ code: true })),
       call
     ),
     /** Pending and exhausted asynchronous balance checks. Requires read. */
@@ -6016,7 +6347,7 @@ function quests(http) {
      */
     submissions: (member, call) => get(
       `/members/${encodeURIComponent(member)}/quest-submissions`,
-      z55.object({ items: z55.array(questSubmissionSchema) }),
+      z56.object({ items: z56.array(questSubmissionSchema) }),
       call
     ),
     /**
@@ -6126,15 +6457,15 @@ function solana({ post }) {
 var solanaApi = (http) => solana(http);
 
 // src/server/client/discord.ts
-import * as z56 from "zod";
+import * as z57 from "zod";
 function discord({ get, post }) {
   return {
     /** The project's Discord connection: its server and status; requires `read` permission. */
     connection: async (call) => {
-      const list = await get("/integrations", z56.array(z56.unknown()), call);
+      const list = await get("/integrations", z57.array(z57.unknown()), call);
       return projectIntegrationSchema.parse(
         list.find(
-          (item) => z56.object({ provider: z56.literal("discord") }).safeParse(item).success
+          (item) => z57.object({ provider: z57.literal("discord") }).safeParse(item).success
         )
       );
     },
@@ -6197,31 +6528,31 @@ function telegram({ request, get, post }) {
 var telegramApi = (http) => telegram(http);
 
 // src/server/projects.ts
-import * as z57 from "zod";
-var projectSetupSchema = /* @__PURE__ */ (() => z57.object({
-  mode: z57.enum(["new", "existing"]),
-  brief: z57.string().trim().min(1).max(4e3)
+import * as z58 from "zod";
+var projectSetupSchema = /* @__PURE__ */ (() => z58.object({
+  mode: z58.enum(["new", "existing"]),
+  brief: z58.string().trim().min(1).max(4e3)
 }).strict())();
-var projectSchema = /* @__PURE__ */ (() => z57.object({
+var projectSchema = /* @__PURE__ */ (() => z58.object({
   /**
    * Names the project's hosted addresses. The server gives a new project, and accepts in a
    * slug change, only slugs of at least 3 characters that Domino does not reserve. This schema
    * checks only the format, so it parses every slug that exists.
    */
-  slug: z57.string().min(1).max(35).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/),
-  createdBy: z57.string().nullable().optional(),
+  slug: z58.string().min(1).max(35).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/),
+  createdBy: z58.string().nullable().optional(),
   creator: operatorUserSchema.nullable().optional(),
   /** A response, so fields a newer server adds to the setup are dropped, not rejected. */
-  setup: z57.object(projectSetupSchema.shape).optional(),
+  setup: z58.object(projectSetupSchema.shape).optional(),
   /** The starter chosen at setup. A plain string, so later starters still parse. */
-  starter: z57.string().optional(),
-  id: z57.string().min(1),
+  starter: z58.string().optional(),
+  id: z58.string().min(1),
   organization: identifier,
   project: identifier,
-  name: z57.string(),
-  subtitle: z57.string(),
-  initials: z57.string(),
-  color: z57.string(),
+  name: z58.string(),
+  subtitle: z58.string(),
+  initials: z58.string(),
+  color: z58.string(),
   permissions: permissionListSchema,
   /**
    * Every permission the caller holds here, `dashboards` included, which `permissions` leaves
@@ -6229,8 +6560,8 @@ var projectSchema = /* @__PURE__ */ (() => z57.object({
    *
    * @experimental
    */
-  projectPermissions: z57.array(z57.string()).optional(),
-  environments: z57.array(environmentSchema)
+  projectPermissions: z58.array(z58.string()).optional(),
+  environments: z58.array(environmentSchema)
 }).refine(
   (project) => !project.creator || project.creator.id === project.createdBy,
   {
@@ -6238,103 +6569,103 @@ var projectSchema = /* @__PURE__ */ (() => z57.object({
     path: ["creator"]
   }
 ))();
-var projectCreateInputSchema = /* @__PURE__ */ (() => z57.object({
+var projectCreateInputSchema = /* @__PURE__ */ (() => z58.object({
   actionId: identifier,
-  name: z57.string().trim().min(1).max(80),
+  name: z58.string().trim().min(1).max(80),
   setup: projectSetupSchema.optional(),
   /** The starter a new hosted app begins from, with `setup.mode` "new". */
   starter: offeredStarterSchema.optional()
 }).strict())();
-var projectInputSchema = /* @__PURE__ */ (() => z57.object({
+var projectInputSchema = /* @__PURE__ */ (() => z58.object({
   actionId: identifier,
-  name: z57.string().trim().min(1).max(80),
+  name: z58.string().trim().min(1).max(80),
   setup: projectSetupSchema.optional(),
   /** The starter a new hosted app begins from, with `setup.mode` "new". */
   starter: starterIdSchema.optional()
 }).strict())();
-var projectUpdateInputSchema = /* @__PURE__ */ (() => z57.union([
-  z57.object({ name: projectCreateInputSchema.shape.name }).strict(),
-  z57.object({
+var projectUpdateInputSchema = /* @__PURE__ */ (() => z58.union([
+  z58.object({ name: projectCreateInputSchema.shape.name }).strict(),
+  z58.object({
     slug: projectSchema.shape.slug,
-    confirm: z57.string().min(1).max(80)
+    confirm: z58.string().min(1).max(80)
   }).strict()
 ]))();
-var projectDeletionInputSchema = /* @__PURE__ */ (() => z57.object({ confirm: z57.string().min(1).max(80) }).strict())();
-var projectDeletionSchema = /* @__PURE__ */ (() => z57.object({
+var projectDeletionInputSchema = /* @__PURE__ */ (() => z58.object({ confirm: z58.string().min(1).max(80) }).strict())();
+var projectDeletionSchema = /* @__PURE__ */ (() => z58.object({
   project: identifier,
-  purgeAfter: z57.number().int()
+  purgeAfter: z58.number().int()
 }))();
-var projectTransferInputSchema = /* @__PURE__ */ (() => z57.object({ organization: identifier, confirm: z57.string().min(1).max(80) }).strict())();
-var projectTransferSchema = /* @__PURE__ */ (() => z57.object({
+var projectTransferInputSchema = /* @__PURE__ */ (() => z58.object({ organization: identifier, confirm: z58.string().min(1).max(80) }).strict())();
+var projectTransferSchema = /* @__PURE__ */ (() => z58.object({
   organization: identifier,
   project: identifier
 }))();
-var accessSchema = /* @__PURE__ */ (() => z57.object({
-  actor: z57.string(),
-  organization: z57.string(),
-  admin: z57.boolean(),
-  local: z57.boolean(),
-  projects: z57.array(projectSchema),
+var accessSchema = /* @__PURE__ */ (() => z58.object({
+  actor: z58.string(),
+  organization: z58.string(),
+  admin: z58.boolean(),
+  local: z58.boolean(),
+  projects: z58.array(projectSchema),
   /** The credential's own kind and scope, when it is an organization automation key. */
-  credential: z57.object({
-    kind: z57.string(),
-    id: z57.string(),
-    name: z57.string(),
+  credential: z58.object({
+    kind: z58.string(),
+    id: z58.string(),
+    name: z58.string(),
     /** The projects it reaches; null for every project of the organization. */
-    projects: z57.array(z57.string()).nullable(),
-    createProjects: z57.boolean(),
+    projects: z58.array(z58.string()).nullable(),
+    createProjects: z58.boolean(),
     permissions: permissionListSchema
   }).optional()
 }))();
-var readinessSchema = /* @__PURE__ */ (() => z57.object({
-  checks: z57.array(
-    z57.object({
-      id: z57.string(),
-      status: z57.enum(["ready", "blocked"]),
-      title: z57.string(),
-      detail: z57.string()
+var readinessSchema = /* @__PURE__ */ (() => z58.object({
+  checks: z58.array(
+    z58.object({
+      id: z58.string(),
+      status: z58.enum(["ready", "blocked"]),
+      title: z58.string(),
+      detail: z58.string()
     })
   )
 }))();
 
 // src/server/page.ts
-import * as z58 from "zod";
-var querySchema = /* @__PURE__ */ (() => z58.object({
-  q: z58.string().max(200).default(""),
-  filter: z58.string().max(50).default("all"),
-  offset: z58.coerce.number().int().min(0).max(1e6).default(0),
-  limit: z58.coerce.number().int().min(1).max(100).default(25)
+import * as z59 from "zod";
+var querySchema = /* @__PURE__ */ (() => z59.object({
+  q: z59.string().max(200).default(""),
+  filter: z59.string().max(50).default("all"),
+  offset: z59.coerce.number().int().min(0).max(1e6).default(0),
+  limit: z59.coerce.number().int().min(1).max(100).default(25)
 }))();
-var pageSchema = /* @__PURE__ */ (() => z58.object({
+var pageSchema = /* @__PURE__ */ (() => z59.object({
   snapshot: snapshotSchema,
-  members: z58.array(memberSchema),
-  people: z58.array(personSchema).default([]),
+  members: z59.array(memberSchema),
+  people: z59.array(personSchema).default([]),
   metrics: metricsSchema,
-  total: z58.number(),
-  offset: z58.number(),
-  limit: z58.number(),
-  inventory: z58.array(inventorySchema),
-  operations: z58.array(operationSchema).default([]),
-  audit: z58.array(auditRecordSchema).default([]),
-  questCounts: z58.record(z58.string(), z58.number())
+  total: z59.number(),
+  offset: z59.number(),
+  limit: z59.number(),
+  inventory: z59.array(inventorySchema),
+  operations: z59.array(operationSchema).default([]),
+  audit: z59.array(auditRecordSchema).default([]),
+  questCounts: z59.record(z59.string(), z59.number())
 }))();
 
 // src/server/participant-sign-in.ts
-import * as z59 from "zod";
-var telegramBotIdSchema = /* @__PURE__ */ (() => z59.string().regex(/^[1-9][0-9]{0,19}$/, "Enter the bot's numeric ID, such as 123456789"))();
-var participantSignInTelegramSchema = /* @__PURE__ */ (() => z59.object({
-  login: z59.boolean(),
+import * as z60 from "zod";
+var telegramBotIdSchema = /* @__PURE__ */ (() => z60.string().regex(/^[1-9][0-9]{0,19}$/, "Enter the bot's numeric ID, such as 123456789"))();
+var participantSignInTelegramSchema = /* @__PURE__ */ (() => z60.object({
+  login: z60.boolean(),
   miniAppBotId: telegramBotIdSchema.nullable()
 }))();
-var participantSignInSchema = /* @__PURE__ */ (() => z59.object({
-  providers: z59.array(
-    z59.object({ provider: authProviderSchema, configured: z59.boolean() })
+var participantSignInSchema = /* @__PURE__ */ (() => z60.object({
+  providers: z60.array(
+    z60.object({ provider: authProviderSchema, configured: z60.boolean() })
   ),
-  email: z59.boolean(),
+  email: z60.boolean(),
   /** Wallet families: `"solana"`, `"eip155"`, `"cosmos"`. */
   wallets: walletSignInNetworksSchema,
   /** Why participants cannot sign in to this project, or null. */
-  issue: z59.string().nullable(),
+  issue: z60.string().nullable(),
   /**
    * Telegram, outside `providers` in SDK 1.x: whether Domino configured Telegram Login, and the
    * bot whose Mini App participants sign in from, or null when Mini App sign-in is off. Absent
@@ -6346,10 +6677,10 @@ var participantSignInSchema = /* @__PURE__ */ (() => z59.object({
    * members can link accounts that trackers like `youtube.shorts()` read. Absent from older Relay
    * versions.
    */
-  creatorAccounts: z59.array(
-    z59.object({
+  creatorAccounts: z60.array(
+    z60.object({
       provider: creatorAccountProviderSchema,
-      configured: z59.boolean()
+      configured: z60.boolean()
     })
   ).optional(),
   /**
@@ -6357,13 +6688,13 @@ var participantSignInSchema = /* @__PURE__ */ (() => z59.object({
    * the open sibling of `providers`, which SDK 1.x keeps to `AuthProvider`. A newer Relay may list
    * providers this SDK does not know. Absent from older Relay versions.
    */
-  signInProviders: z59.array(signInProviderOptionSchema).optional(),
-  updatedAt: z59.number().nullable(),
-  updatedBy: z59.string().nullable()
+  signInProviders: z60.array(signInProviderOptionSchema).optional(),
+  updatedAt: z60.number().nullable(),
+  updatedBy: z60.string().nullable()
 }))();
-var participantSignInInputSchema = /* @__PURE__ */ (() => z59.object({
+var participantSignInInputSchema = /* @__PURE__ */ (() => z60.object({
   wallets: walletSignInNetworksSchema,
-  telegram: z59.object({ miniAppBotId: telegramBotIdSchema.nullable() }).strict().optional()
+  telegram: z60.object({ miniAppBotId: telegramBotIdSchema.nullable() }).strict().optional()
 }).strict())();
 
 // src/server/wallet-sign-in.ts
@@ -6911,9 +7242,9 @@ function decodeSolanaTransaction(transaction2) {
 }
 
 // src/server/hosted.ts
-import * as z60 from "zod";
+import * as z61 from "zod";
 var hostedKeyPermissions = ["read", "points", "ingest"];
-var hostedKeyPermissionList = /* @__PURE__ */ (() => z60.array(z60.string()).transform(
+var hostedKeyPermissionList = /* @__PURE__ */ (() => z61.array(z61.string()).transform(
   (values) => values.filter(
     (value) => hostedKeyPermissions.includes(value)
   )
@@ -6925,17 +7256,17 @@ var hostedManagementBindings = [
   "DOMINO_PROJECT",
   "DOMINO_ENVIRONMENT"
 ];
-var hostedKeySecretSchema = /* @__PURE__ */ (() => z60.string().regex(/^dhk_[A-Za-z0-9_-]{43}$/, "Expected a hosted app key"))();
-var hostedKeySchema = /* @__PURE__ */ (() => z60.object({
-  id: z60.string().uuid(),
+var hostedKeySecretSchema = /* @__PURE__ */ (() => z61.string().regex(/^dhk_[A-Za-z0-9_-]{43}$/, "Expected a hosted app key"))();
+var hostedKeySchema = /* @__PURE__ */ (() => z61.object({
+  id: z61.string().uuid(),
   token: hostedKeySecretSchema,
   organization: identifier,
   project: identifier,
-  environment: z60.enum(["test", "live"]),
+  environment: z61.enum(["test", "live"]),
   permissions: hostedKeyPermissionList,
-  expiresAt: z60.number().nullable()
+  expiresAt: z61.number().nullable()
 }).strict())();
-var hostedDeploymentKeySchema = /* @__PURE__ */ (() => hostedKeySchema.extend({ apiUrl: z60.string().url() }).strict())();
+var hostedDeploymentKeySchema = /* @__PURE__ */ (() => hostedKeySchema.extend({ apiUrl: z61.string().url() }).strict())();
 function hostedManagementClient(env) {
   const missing = hostedManagementBindings.filter((name) => !env[name]);
   if (missing.length) {
@@ -6943,7 +7274,7 @@ function hostedManagementClient(env) {
       `Missing ${missing.join(", ")}. Domino sets these for hosted apps and domino dev; update the project's vite.config.ts to forward them in development.`
     );
   }
-  const environment = z60.enum(["test", "live"]).parse(env.DOMINO_ENVIRONMENT);
+  const environment = z61.enum(["test", "live"]).parse(env.DOMINO_ENVIRONMENT);
   const token = env.DOMINO_MANAGEMENT_KEY;
   return createManagementClient({
     baseUrl: env.DOMINO_API_URL.replace(/\/+$/, ""),
@@ -7530,6 +7861,12 @@ function openStation(card, request) {
     throw new QuestActionRefusal(`"${card.title}" has no station "${key2}"`, 404);
   }
   const station = card.stations.find((item) => item.key === key2);
+  if (refusal?.code === "station-proof-mismatch") {
+    throw new QuestActionRefusal(
+      `${station.label} takes check-ins with its code, not a transaction`,
+      422
+    );
+  }
   if (refusal) {
     throw new QuestActionRefusal(`${station.label} is closed`, 409);
   }
@@ -7609,31 +7946,31 @@ async function findAndSubmit(client, card, chain, find) {
 }
 
 // src/server/development.ts
-import * as z61 from "zod";
-var developmentPreflightSchema = /* @__PURE__ */ (() => z61.object({
-  organization: z61.string(),
-  project: z61.string(),
-  environment: z61.enum(["test", "live"]),
-  identity: z61.object({
-    exchange: z61.literal("supported"),
-    activeIntegrations: z61.number().int().nonnegative()
+import * as z62 from "zod";
+var developmentPreflightSchema = /* @__PURE__ */ (() => z62.object({
+  organization: z62.string(),
+  project: z62.string(),
+  environment: z62.enum(["test", "live"]),
+  identity: z62.object({
+    exchange: z62.literal("supported"),
+    activeIntegrations: z62.number().int().nonnegative()
   }).optional(),
-  staging: z61.enum(["configured", "blocked"]),
-  development: z61.object({
-    status: z61.enum(["configured", "blocked"]),
+  staging: z62.enum(["configured", "blocked"]),
+  development: z62.object({
+    status: z62.enum(["configured", "blocked"]),
     // How `domino dev` reaches the preview origin: a Cloudflare tunnel, or a direct route on a
     // local development stack. APIs that predate the field use tunnels.
-    transport: z61.enum(["tunnel", "direct"]).default("tunnel"),
-    missing: z61.array(z61.string()),
-    authentication: z61.array(z61.string())
+    transport: z62.enum(["tunnel", "direct"]).default("tunnel"),
+    missing: z62.array(z62.string()),
+    authentication: z62.array(z62.string())
   }),
-  checks: z61.array(
-    z61.object({
-      id: z61.string(),
-      status: z61.enum(["ok", "error"]),
-      message: z61.string(),
-      missing: z61.array(z61.string()).optional(),
-      issues: z61.array(z61.string()).optional()
+  checks: z62.array(
+    z62.object({
+      id: z62.string(),
+      status: z62.enum(["ok", "error"]),
+      message: z62.string(),
+      missing: z62.array(z62.string()).optional(),
+      issues: z62.array(z62.string()).optional()
     })
   )
 }))();
@@ -7646,7 +7983,7 @@ function clientFailure(error) {
   return new ManagementError({
     kind: "client",
     code: ManagementErrorCode.InvalidInput,
-    message: error instanceof z62.ZodError ? `Invalid management request: ${issueText(error.issues)}` : error instanceof Error ? error.message : "Invalid management request",
+    message: error instanceof z63.ZodError ? `Invalid management request: ${issueText(error.issues)}` : error instanceof Error ? error.message : "Invalid management request",
     cause: error
   });
 }
@@ -7690,8 +8027,8 @@ function managementClient(options) {
       }
       return exchange(
         path,
-        z62.object({
-          status: z62.number(),
+        z63.object({
+          status: z63.number(),
           operationId: identifier.optional(),
           result: schema
         }),
@@ -7746,6 +8083,15 @@ function managementClient(options) {
     attempts: attemptsApi(http),
     passes: passesApi(http),
     completions: completionsApi(http),
+    /**
+     * Photo galleries: photo quests that declare `gallery`, and their accepted photos by day and
+     * quest, which reviewers hide and unhide, and contest winners, which reviewers mark and may
+     * reward. Reads, hiding and marking need `review`, as downloading a photo does; a mark's
+     * reward also needs `confirm`.
+     *
+     * @experimental A minor release can change these methods and their result.
+     */
+    galleries: galleriesApi(http),
     /** Staff handover of a member's reward entitlement; requires `handover` permission. */
     handover: handoverApi(http),
     /** Members' reward entitlements; corrections require `review` permission. */
@@ -8088,6 +8434,10 @@ var managementResponseTables = /* @__PURE__ */ (() => responseTables({
   managedMemberIdentitySchema: () => managedMemberIdentitySchema,
   managedMemberPageSchema: () => managedMemberPageSchema,
   managedMemberProgressSchema: () => managedMemberProgressSchema,
+  galleryListSchema: () => galleryListSchema,
+  galleryPhotoPageSchema: () => galleryPhotoPageSchema,
+  galleryPhotoHideResultSchema: () => galleryPhotoHideResultSchema,
+  galleryWinnerResultSchema: () => galleryWinnerResultSchema,
   memberCompletionPageSchema: () => memberCompletionPageSchema,
   memberConsentHistorySchema: () => memberConsentHistorySchema,
   memberConsentListSchema: () => memberConsentListSchema,
@@ -8354,6 +8704,22 @@ export {
   evidenceRetentionResultSchema,
   evidenceRetentionSettingSchema,
   expectedRevision,
+  galleryExportQuerySchema,
+  galleryHiddenFilterSchema,
+  galleryListSchema,
+  galleryPhotoHiddenSchema,
+  galleryPhotoHideInputSchema,
+  galleryPhotoHideResultSchema,
+  galleryPhotoPageSchema,
+  galleryPhotoQuerySchema,
+  galleryPhotoSchema,
+  gallerySchema,
+  galleryWinnerMarkInputSchema,
+  galleryWinnerResultSchema,
+  galleryWinnerRewardSchema,
+  galleryWinnerSchema,
+  galleryWinnerUnmarkInputSchema,
+  generatedStationCodeSchema,
   grantRecordSchema,
   grantSchema,
   groupArchiveInputSchema,
@@ -8606,17 +8972,31 @@ export {
   stagedDeploymentKey,
   stagedDeploymentLimits,
   stagedDeploymentSchema,
+  stagingAccessChangeSchema,
   stagingAccessInputSchema,
   stagingAccessModeSchema,
   stagingAccessSchema,
   stagingLinkSchema,
   stagingPathSchema,
+  stagingServerAccessSchema,
+  stagingServerKeyCreatedSchema,
+  stagingServerKeyInputSchema,
+  stagingServerKeyListSchema,
+  stagingServerKeySchema,
+  stagingServerPathSchema,
   starterIdSchema,
   starterTemplates,
   starters,
+  stationCheckInSchema,
+  stationCodeGenerateInputSchema,
+  stationCodeInputSchema,
+  stationCodeSchema,
+  stationCodeStateSchema,
+  stationCodeSubmissionSchema,
   stationOperationTarget,
   stationRevocationInputSchema,
   stationRevocationSchema,
+  stationScanPageSchema,
   stockAdditionSchema,
   stockInputSchema,
   takesSolanaTransaction,