riverbankcms 0.26.0 → 0.28.0

package/dist/{entryCommands-61TwBBCA.mjs → entryCommands-Bus1LjSx.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { $n as slugifyMediaIdentifier, $t as asFooterLookId, A as getSiteCommandMetadata, B as eventBookingOfferIntentSchema, E as parseAndPlanCommandBatchForTypes, J as createCommandRef, O as evaluateSiteCommandBatchExposure, P as entryIdentifierForCommand, Qn as resolveMediaIdentifier, Rr as parseSurfaceTree, T as createDryRunReport, Y as createContentEntryRef, Yn as buildMediaIdentifierFromFilename, _r as asAppearancePresetId, an as buttonStyleSelectionSchema, ar as normalizeAmbiguousStoragePathForSite, at as slugPart, br as asPageFlowPresetId, cr as MAX_MANAGEMENT_MEDIA_UPLOAD_BYTES, dn as footerPreferencesSchema, dt as headerPreferencesSchema, en as footerLookIdValues, in as headerStyleIdValues, k as evaluateSiteCommandExposure, kt as themeSchema, ln as pageDesignBoundaryTreatmentSchema, m as isInternalResolvedLinkValue, n as sdkCourseBookingSettingsSchema, nn as asHeaderStyleId, nr as getExtensionForMimeType, nt as createSiteCommandSiteRef, r as sdkEventOccurrenceInputSchema, rn as headerLayoutIdValues, rr as getMimeType, s as RESOLVED_INTERNAL_LINK_ENTITY_TYPES, sr as FILE_SIZE_LIMITS, tn as asHeaderLayoutId, un as pageDesignIntentSchemaVersion, w as stableStringify, x as resolvePageUpsertSeo, xr as asSiteStyleId, y as eventVisibilitySchema, zn as getDirectImageUrlForSiteScopedPath } from "./sdk-event-upsert-CH3xwzuX.mjs";
-import { $n as ok, C as exposeSecret, Cn as unsafeAsAppointmentResourceId, In as unsafeAsOccurrenceId, K as locationValueSchema, Mn as unsafeAsEventOfferingId, N as parseFooterCompositionV1, Nn as unsafeAsEventSeriesId, Qn as err, S as createSecret, _t as parseBookingLocalDate, bn as parseSiteId, c as parseVerticalId, cn as assertNever, d as DEFAULT_EVENT_TYPE_PRESETS, f as EVENT_PRESET_VALUES, g as publicReadFreshnessSeconds, l as parseVerticalPresetId, o as areConfiguredBookingVerticalConfigsEqual, qn as unsafeAsStaffMemberId, r as resolveEventCatalogue, s as canonicalizeConfiguredBookingVerticalConfig, t as committedWriteProofSchema, tt as formatDate, u as resolveSiteVerticalBookingConfig, vn as parsePageId, w as parseManagementKey, xt as resolveBookingTimeZoneId } from "./src-DsR6-gBQ.mjs";
-import { n as CliSdkPeerError, t as loadConfigFile } from "./load-config-C7Ght4_r.mjs";
+import { A as evaluateSiteCommandExposure, E as parseAndPlanCommandBatchForTypes, F as entryIdentifierForCommand, It as themeSchema, K as bookingQuestionAttachmentSchema, Mr as asPageFlowPresetId, Nr as asSiteStyleId, T as createDryRunReport, V as eventBookingOfferIntentSchema, X as createCommandRef, Xr as parseSurfaceTree, Z as createContentEntryRef, Zn as getDirectImageUrlForSiteScopedPath, _n as pageDesignIntentSchemaVersion, _r as normalizeAmbiguousStoragePathForSite, br as MAX_MANAGEMENT_MEDIA_UPLOAD_BYTES, cn as asHeaderLayoutId, ct as require_dist, dn as headerStyleIdValues, dr as slugifyMediaIdentifier, fn as buttonStyleSelectionSchema, gn as pageDesignBoundaryTreatmentSchema, gt as headerPreferencesSchema, hr as getMimeType, it as createSiteCommandSiteRef, j as getSiteCommandMetadata, k as evaluateSiteCommandBatchExposure, kr as asAppearancePresetId, ln as asHeaderStyleId, m as isInternalResolvedLinkValue, mr as getExtensionForMimeType, n as sdkCourseBookingSettingsSchema, on as asFooterLookId, r as sdkEventOccurrenceInputSchema, s as RESOLVED_INTERNAL_LINK_ENTITY_TYPES, sn as footerLookIdValues, sr as buildMediaIdentifierFromFilename, st as slugPart, un as headerLayoutIdValues, ur as resolveMediaIdentifier, vn as footerPreferencesSchema, w as stableStringify, x as resolvePageUpsertSeo, y as eventVisibilitySchema, yr as FILE_SIZE_LIMITS } from "./sdk-event-upsert-BrJvTQ-D.mjs";
+import { C as createSecret, Cn as parsePageId, Et as resolveBookingTimeZoneId, L as parseFooterCompositionV1, Ln as unsafeAsEventOfferingId, On as unsafeAsAppointmentResourceId, Qn as unsafeAsStaffMemberId, Rn as unsafeAsEventSeriesId, St as parseBookingLocalDate, T as parseManagementKey, Tn as parseSiteId, Vn as unsafeAsOccurrenceId, Z as locationValueSchema, _ as publicReadFreshnessSeconds, c as parseVerticalId, d as DEFAULT_EVENT_TYPE_PRESETS, f as EVENT_PRESET_VALUES, g as getPublicReadCachePolicy, ir as ok, l as parseVerticalPresetId, o as areConfiguredBookingVerticalConfigsEqual, ot as formatDate, pn as assertNever, r as resolveEventCatalogue, rr as err, s as canonicalizeConfiguredBookingVerticalConfig, t as committedWriteProofSchema, u as resolveSiteVerticalBookingConfig, w as exposeSecret } from "./src-D9-RAM-l.mjs";
+import { n as CliSdkPeerError, t as loadConfigFile } from "./load-config-9DBnYiBm.mjs";
 import { Command } from "commander";
 import { AsyncLocalStorage } from "node:async_hooks";
 import * as fs$1 from "fs/promises";
@@ -473,19 +473,39 @@ const retentionPolicyRegistry = {
 	},
 	email_audit_metadata: {
 		dataClass: "email_audit_metadata",
-		policyKind: "documented_manual",
+		policyKind: "platform_auto_delete",
 		trigger: "created_at",
 		window: {
 			kind: "relative",
 			unit: "months",
 			value: 12
 		},
-		action: "retain",
+		action: "hard_delete",
 		automation: {
-			kind: "documented_manual",
-			deferredReason: "depends_on_secondary_copy_minimization"
+			kind: "scheduled",
+			jobKind: "email_audit_metadata_cleanup",
+			executionModes: ["dry_run", "scheduled"],
+			executionSubstrate: "vercel_cron"
 		},
-		rationale: "Email metadata has some support value but the exact long-lived shape should be implemented alongside secondary-copy minimization work."
+		rationale: "Sent email records are kept for twelve months; send jobs and delivery receipts preserve their independent history."
+	},
+	transactional_email_job_payload: {
+		dataClass: "transactional_email_job_payload",
+		policyKind: "platform_auto_delete",
+		trigger: "delivery_finished_at",
+		window: {
+			kind: "relative",
+			unit: "days",
+			value: 90
+		},
+		action: "hard_delete",
+		automation: {
+			kind: "scheduled",
+			jobKind: "transactional_email_payload_cleanup",
+			executionModes: ["dry_run", "scheduled"],
+			executionSubstrate: "vercel_cron"
+		},
+		rationale: "Finished email jobs lose copied content after ninety days once completion work is settled; delivery and replay evidence remain."
 	},
 	dsar_run_metadata: {
 		dataClass: "dsar_run_metadata",
@@ -914,6 +934,13 @@ function pageCommitReasonFromTag(tag) {
 //#endregion
 //#region ../api/src/pageJournalEndpoints.ts
 const PAGE_JOURNAL_ENDPOINT_DEFINITIONS = {
+	getPagePublishReadinessFacts: {
+		path: "/sites/{siteId}/pages/readiness-facts",
+		method: "POST",
+		auth: "user",
+		responseKind: "json",
+		errors: ["validation:invalid_input", "server:internal_error"]
+	},
 	replayThemeJournalChange: {
 		path: "/sites/{siteId}/theme/journal",
 		method: "POST",
@@ -1452,6 +1479,26 @@ function normalizeSiteCacheId(id) {
 	const parsed = parseSiteId(id);
 	return parsed.ok ? parsed.value : id;
 }
+/** Memory caches follow the same public-read policy as HTTP and batch readers. */
+function buildPublicReadMemoryCacheTags(endpoint, params) {
+	const policy = getPublicReadCachePolicy(endpoint);
+	if (policy.kind === "live") return [];
+	const templates = {
+		published_content: TAG_TEMPLATES.siteRoutableContent,
+		public_team_members: TAG_TEMPLATES.publicTeamMembers,
+		public_products: TAG_TEMPLATES.publicShop,
+		site_forms: TAG_TEMPLATES.siteForms
+	};
+	return buildCacheReadTags([
+		...policy.tags.map((kind) => templates[kind]),
+		...endpoint === "checkRedirect" ? [
+			TAG_TEMPLATES.siteRedirects,
+			TAG_TEMPLATES.siteBySlug,
+			TAG_TEMPLATES.siteById
+		] : [],
+		...endpoint === "getPublicFormById" ? [TAG_TEMPLATES.formById] : []
+	], params);
+}
 
 //#endregion
 //#region ../api/src/sdkEntryReadEndpoints.ts
@@ -3057,6 +3104,7 @@ const SDK_APPOINTMENT_SERVICE_ENDPOINT_DEFINITIONS = defineEndpointDefinitions({
 		errors: [
 			"validation:invalid_input",
 			"resource:not_found",
+			"resource:conflict",
 			"server:internal_error"
 		]
 	},
@@ -3075,6 +3123,7 @@ const SDK_APPOINTMENT_SERVICE_ENDPOINT_DEFINITIONS = defineEndpointDefinitions({
 		errors: [
 			"validation:invalid_input",
 			"resource:not_found",
+			"resource:conflict",
 			"server:internal_error"
 		]
 	}
@@ -5281,6 +5330,7 @@ const ENDPOINT_DEFINITIONS = {
 		responseKind: "json"
 	},
 	createContentEntry: {
+		editLease: "unleased-editor",
 		path: "/sites/{siteId}/content/{type}",
 		method: "POST",
 		tags: ["site-{siteId}", "content-{siteId}-{type}"],
@@ -5603,6 +5653,29 @@ const ENDPOINT_DEFINITIONS = {
 		auth: "user",
 		responseKind: "json"
 	},
+	previewSiteBrandingOperation: {
+		path: "/sites/{siteId}/settings/general/preview",
+		method: "POST",
+		auth: "user",
+		responseKind: "json",
+		errors: [
+			"validation:invalid_input",
+			"auth:insufficient_permissions",
+			"server:internal_error"
+		]
+	},
+	confirmSiteBrandingOperation: {
+		path: "/sites/{siteId}/settings/general/confirm",
+		method: "POST",
+		auth: "user",
+		responseKind: "json",
+		tags: [TAG_TEMPLATES.site, TAG_TEMPLATES.siteSettings],
+		errors: [
+			"validation:invalid_input",
+			"auth:insufficient_permissions",
+			"server:internal_error"
+		]
+	},
 	getSiteFooterBlocks: {
 		path: "/sites/{siteId}/content/footer-blocks",
 		method: "GET",
@@ -5625,6 +5698,7 @@ const ENDPOINT_DEFINITIONS = {
 		errors: [
 			"validation:invalid_input",
 			"resource:not_found",
+			"resource:conflict",
 			"auth:forbidden",
 			"server:internal_error"
 		]
@@ -6683,48 +6757,6 @@ const ENDPOINT_DEFINITIONS = {
 		auth: "user",
 		responseKind: "json"
 	},
-	classifyMediaAsset: {
-		path: "/media/{assetId}/classify",
-		method: "POST",
-		tags: ["media", "media-{assetId}"],
-		auth: "user",
-		responseKind: "json"
-	},
-	classifyMediaBatch: {
-		path: "/media/classify",
-		method: "POST",
-		tags: ["media"],
-		auth: "user",
-		responseKind: "json"
-	},
-	mediaJobsStatus: {
-		path: "/media/jobs/status",
-		method: "GET",
-		tags: ["media"],
-		auth: "user",
-		responseKind: "json"
-	},
-	enqueueMediaClassifyJob: {
-		path: "/media/jobs",
-		method: "POST",
-		tags: ["media"],
-		auth: "user",
-		responseKind: "json"
-	},
-	runMediaClassifyJob: {
-		path: "/media/jobs/run",
-		method: "POST",
-		tags: ["media"],
-		auth: "user",
-		responseKind: "json"
-	},
-	runAllMediaClassifyJobs: {
-		path: "/media/jobs/run-all",
-		method: "POST",
-		tags: ["media"],
-		auth: "user",
-		responseKind: "json"
-	},
 	initSiteContent: {
 		path: "/sites/{siteId}/content/init",
 		method: "POST",
@@ -6990,14 +7022,6 @@ const ENDPOINT_DEFINITIONS = {
 		auth: "user",
 		responseKind: "json"
 	},
-	getPageDesignEditorState: {
-		path: "/sites/{siteId}/pages/{pageId}/design",
-		method: "GET",
-		tags: [TAG_TEMPLATES.siteRoutableContent, TAG_TEMPLATES.pageById],
-		auth: "user",
-		responseKind: "json",
-		errors: ["resource:not_found", "server:internal_error"]
-	},
 	savePageDesignState: {
 		editLease: "managed",
 		path: "/sites/{siteId}/pages/{pageId}/design-state",
@@ -7615,6 +7639,14 @@ const ENDPOINT_DEFINITIONS = {
 		auth: "admin",
 		responseKind: "json"
 	},
+	adminClearSitePublicCache: {
+		path: "/admin/sites/{siteId}/cache/clear",
+		method: "POST",
+		tags: ["admin", "sites"],
+		auth: "admin",
+		errors: [],
+		responseKind: "json"
+	},
 	adminDeleteSite: {
 		path: "/admin/sites/{siteId}",
 		method: "DELETE",
@@ -10433,6 +10465,7 @@ function normalizeSdkThemeWire(theme) {
 
 //#endregion
 //#region ../api/src/sdkPullResponseSchemas.ts
+var import_dist = require_dist();
 const sdkIdentifierSchema$1 = z.string().min(1);
 const sdkTimestampSchema$2 = z.string().min(1);
 const sdkJsonObjectSchema$1 = z.record(z.string(), z.unknown());
@@ -10548,29 +10581,16 @@ const sdkPullSettingsSchema = sdkSettingsUpdateSchema.extend({
 	seoDefaults: sdkSeoDefaultsSchema.nullable(),
 	verticalConfig: sdkConfiguredBookingVerticalConfigSchema.optional()
 });
-/** A form's schema as the SDK pulls it; the push route extends it. */
-const sdkPullFormSchema = z.object({
+/** Existing flat form wire shape; detailed questionnaires retain their canonical sections. */
+const sdkPullFlatFormSchema = z.object({
+	schemaVersion: z.undefined().optional(),
 	version: z.string().optional(),
-	fields: z.array(z.object({
-		id: sdkIdentifierSchema$1,
-		label: z.string(),
-		type: z.string(),
-		required: z.boolean().optional(),
-		placeholder: z.string().optional(),
-		helpText: z.string().optional(),
-		layout: z.object({ width: z.enum(["full", "half"]).optional() }).optional(),
-		options: z.array(z.object({
-			value: z.string(),
-			label: z.string()
-		})).optional(),
-		multiple: z.boolean().optional(),
-		minLength: z.number().optional(),
-		maxLength: z.number().optional(),
-		pattern: z.string().optional(),
-		min: z.number().optional(),
-		max: z.number().optional()
-	}))
+	sections: z.never().optional(),
+	fields: z.array(import_dist.formFieldTransportSchema)
 });
+const sdkPullFormSchema = z.discriminatedUnion("schemaVersion", [sdkPullFlatFormSchema, import_dist.bookingQuestionsDetailedSchemaSchema]);
+/** The same pulled definition, with nonempty fields required on a flat write. */
+const sdkFormDefinitionInputSchema = z.discriminatedUnion("schemaVersion", [sdkPullFlatFormSchema.extend({ fields: sdkPullFlatFormSchema.shape.fields.min(1, "Form must have at least one field") }), import_dist.bookingQuestionsDetailedSchemaSchema]);
 const sdkPullFormSchemaWithId = z.object({
 	id: sdkIdentifierSchema$1,
 	slug: sdkIdentifierSchema$1,
@@ -10654,6 +10674,7 @@ const sdkPullEventRunCommonSchema = z.object({
 	bookingOffer: eventBookingOfferIntentSchema,
 	venueRef: z.string().nullable(),
 	formRef: z.string().nullable(),
+	bookingQuestions: bookingQuestionAttachmentSchema.nullable().optional(),
 	settings: sdkJsonObjectSchema$1,
 	presentation: z.unknown().optional(),
 	tags: z.array(z.string()),
@@ -10756,14 +10777,11 @@ function authoredThemeJournalValue(input) {
 		body: {
 			...input.selections,
 			theme,
-			themeId: input.themeId,
-			selectionId: input.selectionId,
 			overrides: input.overrides
 		},
 		preferences: input.preferences
 	};
 }
-/** Shared request/value wire contract: authored theme bytes exclude compiled chrome. */
 const chromelessBodyThemeSchema = themeSchema.omit({
 	header: true,
 	footer: true
@@ -10780,22 +10798,27 @@ const themeSaveBodySchema = z.object({
 	}).strict().optional(),
 	footerLookId: z.enum(footerLookIdValues).transform(asFooterLookId).nullable().optional()
 }).strict();
-const themeJournalValueSchema = z.object({
+const themeJournalValueShape = {
 	snapshot: themeSchema,
-	body: themeSaveBodySchema,
+	body: themeSaveBodySchema.omit({
+		themeId: true,
+		selectionId: true
+	}),
 	preferences: z.object({
 		header: headerPreferencesSchema.nullable(),
 		footer: footerPreferencesSchema
 	}).strict()
-}).strict();
-const themeJournalEvidenceSchema = z.object({
+};
+const themeJournalValueSchema = z.object(themeJournalValueShape).strict();
+const themeJournalEvidenceShape = {
 	siteId: z.string().uuid(),
 	selectionId: z.string().uuid(),
 	expectedRevision: z.number().int().nonnegative(),
 	revision: z.number().int().nonnegative(),
 	before: themeJournalValueSchema,
 	after: themeJournalValueSchema
-}).strict();
+};
+const themeJournalEvidenceSchema = z.object(themeJournalEvidenceShape).strict();
 
 //#endregion
 //#region ../api/src/bookingSettingsSections.ts
@@ -10849,13 +10872,8 @@ const BOOKING_SETTINGS_SECTION_KEYS = {
 * Whether each email is sent, and when. No section owns these: the command
 * behind an email's own screen (`updateEmailSendSetting`) is their only writer,
 * so a section save can neither send them nor overwrite them.
-*
-* `remindersEnabled` is the old shared reminders switch. Nothing writes it any
-* more. It's read only as the fallback for a reminder switch that hasn't been
-* set, until stored settings are backfilled and the key is removed.
 */
 const BOOKING_SETTINGS_EMAIL_SEND_KEYS = [
-	"remindersEnabled",
 	"eventRemindersEnabled",
 	"eventReminderHours",
 	"appointmentRemindersEnabled",
@@ -14370,6 +14388,25 @@ function parsePublicProductCategorySelector(value) {
 	return undefined;
 }
 
+//#endregion
+//#region ../api/src/request-error.ts
+var ApiRequestError = class extends Error {
+	constructor(message, options) {
+		super(message);
+		this.name = "ApiRequestError";
+		this.endpoint = options.endpoint;
+		this.status = options.status;
+		this.method = options.method;
+		this.auth = options.auth;
+		this.requestId = options.requestId;
+		this.body = options.body;
+		this.cause = options.cause;
+		this.errorCode = options.errorCode;
+		this.tag = options.tag;
+		this.retryAfterMs = options.retryAfterMs;
+	}
+};
+
 //#endregion
 //#region ../api/src/token.ts
 async function getAuthHeaders(supabase) {
@@ -14885,22 +14922,6 @@ function setSdkVersion(version) {
 function getSdkVersion() {
 	return sdkVersion;
 }
-var ApiRequestError = class extends Error {
-	constructor(message, options) {
-		super(message);
-		this.name = "ApiRequestError";
-		this.endpoint = options.endpoint;
-		this.status = options.status;
-		this.method = options.method;
-		this.auth = options.auth;
-		this.requestId = options.requestId;
-		this.body = options.body;
-		this.cause = options.cause;
-		this.errorCode = options.errorCode;
-		this.tag = options.tag;
-		this.retryAfterMs = options.retryAfterMs;
-	}
-};
 /**
 * Parse the Retry-After header value to milliseconds.
 * The header can be either:
@@ -15360,6 +15381,7 @@ function normalizeApiError(error, fallback) {
 			body: error.body,
 			cause: error,
 			errorCode: error.errorCode,
+			tag: error.tag,
 			retryAfterMs: error.retryAfterMs
 		});
 	}
@@ -16605,6 +16627,268 @@ function linkPayloadKindToNavigationUrlType(kind) {
 	return LINK_PAYLOAD_NAVIGATION_URL_TYPES[kind];
 }
 
+//#endregion
+//#region ../api/src/admin.ts
+async function startImpersonation(apiClient, body, options) {
+	try {
+		return unwrapResponse(await apiClient({
+			endpoint: "adminStartImpersonation",
+			body,
+			options
+		}));
+	} catch (error) {
+		return normalizeApiError(error, "Failed to start impersonation session");
+	}
+}
+async function stopImpersonation(apiClient, body, options) {
+	try {
+		return unwrapResponse(await apiClient({
+			endpoint: "adminStopImpersonation",
+			body,
+			options
+		}));
+	} catch (error) {
+		return normalizeApiError(error, "Failed to stop impersonation session");
+	}
+}
+async function assignAdminRole(apiClient, body, options) {
+	try {
+		return unwrapResponse(await apiClient({
+			endpoint: "adminAssignRole",
+			body,
+			options
+		}));
+	} catch (error) {
+		return normalizeApiError(error, "Failed to assign admin role");
+	}
+}
+async function revokeAdminRole(apiClient, body, options) {
+	try {
+		return unwrapResponse(await apiClient({
+			endpoint: "adminRevokeRole",
+			body,
+			options
+		}));
+	} catch (error) {
+		return normalizeApiError(error, "Failed to revoke admin role");
+	}
+}
+async function adminChangePlan(apiClient, body, options) {
+	try {
+		return unwrapResponse(await apiClient({
+			endpoint: "adminChangePlan",
+			body: {
+				...body,
+				attemptId: body.attemptId ?? crypto.randomUUID()
+			},
+			options
+		}));
+	} catch (error) {
+		return normalizeApiError(error, "Failed to update billing plan");
+	}
+}
+async function listAdminInvites(apiClient, params = {}, options) {
+	try {
+		return unwrapResponse(await apiClient({
+			endpoint: "adminListInvites",
+			params,
+			options
+		}));
+	} catch (error) {
+		return normalizeApiError(error, "Failed to load invites");
+	}
+}
+async function createAdminInvite(apiClient, body, options) {
+	try {
+		return unwrapResponse(await apiClient({
+			endpoint: "adminCreateInvite",
+			body,
+			options
+		}));
+	} catch (error) {
+		return normalizeApiError(error, "Failed to create invite");
+	}
+}
+async function revokeAdminInvite(apiClient, inviteId, options) {
+	try {
+		return unwrapResponse(await apiClient({
+			endpoint: "adminRevokeInvite",
+			params: { inviteId },
+			options
+		}));
+	} catch (error) {
+		return normalizeApiError(error, "Failed to revoke invite");
+	}
+}
+async function createAdminUser(apiClient, body, options) {
+	try {
+		return unwrapResponse(await apiClient({
+			endpoint: "adminCreateUser",
+			body,
+			options
+		}));
+	} catch (error) {
+		return normalizeApiError(error, "Failed to create user");
+	}
+}
+async function adminDeleteSite(apiClient, siteId, options) {
+	try {
+		return unwrapResponse(await apiClient({
+			endpoint: "adminDeleteSite",
+			params: { siteId },
+			options
+		}));
+	} catch (error) {
+		return normalizeApiError(error, "Failed to delete site");
+	}
+}
+async function adminDeleteUser(apiClient, userId, params = {}, options) {
+	const forceQuery = params.force ? { force: "true" } : {};
+	try {
+		return unwrapResponse(await apiClient({
+			endpoint: "adminDeleteUser",
+			params: {
+				userId,
+				...forceQuery
+			},
+			options
+		}));
+	} catch (error) {
+		return normalizeApiError(error, "Failed to delete user");
+	}
+}
+async function listAllowedDomains(apiClient, params = {}, options) {
+	try {
+		return unwrapResponse(await apiClient({
+			endpoint: "adminListAllowedDomains",
+			params,
+			options
+		}));
+	} catch (error) {
+		return normalizeApiError(error, "Failed to load allowed domains");
+	}
+}
+async function addAllowedDomain(apiClient, body, options) {
+	try {
+		return unwrapResponse(await apiClient({
+			endpoint: "adminAddAllowedDomain",
+			body,
+			options
+		}));
+	} catch (error) {
+		return normalizeApiError(error, "Failed to add domain");
+	}
+}
+async function deleteAllowedDomain(apiClient, domainId, options) {
+	try {
+		return unwrapResponse(await apiClient({
+			endpoint: "adminDeleteAllowedDomain",
+			params: { domainId },
+			options
+		}));
+	} catch (error) {
+		return normalizeApiError(error, "Failed to remove domain");
+	}
+}
+async function listGscPropertiesAdmin(apiClient, options) {
+	try {
+		return unwrapResponse(await apiClient({
+			endpoint: "listGscPropertiesAdmin",
+			options
+		}));
+	} catch (error) {
+		return normalizeApiError(error, "Failed to load GSC properties");
+	}
+}
+async function setGscPersistEnabled(apiClient, body, options) {
+	try {
+		return unwrapResponse(await apiClient({
+			endpoint: "adminGscMetaPersist",
+			body,
+			options
+		}));
+	} catch (error) {
+		return normalizeApiError(error, "Failed to update GSC persist toggle");
+	}
+}
+async function startGscVerification(apiClient, body, options) {
+	try {
+		return unwrapResponse(await apiClient({
+			endpoint: "adminGscVerifyStart",
+			body,
+			options
+		}));
+	} catch (error) {
+		return normalizeApiError(error, "Failed to start GSC verification");
+	}
+}
+async function confirmGscVerification(apiClient, body, options) {
+	try {
+		return unwrapResponse(await apiClient({
+			endpoint: "adminGscVerifyConfirm",
+			body,
+			options
+		}));
+	} catch (error) {
+		return normalizeApiError(error, "Failed to confirm GSC verification");
+	}
+}
+async function runGscIngestionForSite(apiClient, body, options) {
+	try {
+		return unwrapResponse(await apiClient({
+			endpoint: "adminSeoIngestRun",
+			body,
+			options
+		}));
+	} catch (error) {
+		return normalizeApiError(error, "Failed to run GSC ingestion");
+	}
+}
+async function getPriceOverride(apiClient, params, options) {
+	try {
+		return unwrapResponse(await apiClient({
+			endpoint: "adminGetPriceOverride",
+			params,
+			options
+		}));
+	} catch (error) {
+		return normalizeApiError(error, "Failed to get price override");
+	}
+}
+async function upsertPriceOverride(apiClient, body, options) {
+	try {
+		return unwrapResponse(await apiClient({
+			endpoint: "adminUpsertPriceOverride",
+			body,
+			options
+		}));
+	} catch (error) {
+		return normalizeApiError(error, "Failed to set custom price");
+	}
+}
+async function deletePriceOverride(apiClient, body, options) {
+	try {
+		return unwrapResponse(await apiClient({
+			endpoint: "adminDeletePriceOverride",
+			body,
+			options
+		}));
+	} catch (error) {
+		return normalizeApiError(error, "Failed to clear custom price");
+	}
+}
+async function adminClearSitePublicCache(apiClient, siteId, options) {
+	try {
+		return unwrapResponse(await apiClient({
+			endpoint: "adminClearSitePublicCache",
+			params: { siteId },
+			options
+		}));
+	} catch (error) {
+		return normalizeApiError(error, "The public page cache could not be cleared.");
+	}
+}
+
 //#endregion
 //#region ../api/src/accessAdmin.ts
 const STAFF_OPERATIONAL_CAPABILITIES = ["appointments", "event_ops"];
@@ -17270,8 +17554,8 @@ const SETTINGS_SURFACE_POLICIES = {
 	},
 	"settings.emails.sent": {
 		surfaceId: "settings.emails.sent",
-		navVisibilityPolicy: administratorPolicy,
-		pageAccessPolicy: administratorPolicy,
+		navVisibilityPolicy: editorPolicy,
+		pageAccessPolicy: editorPolicy,
 		actionIds: []
 	},
 	"settings.ai.siteProfile": {
@@ -24614,4 +24898,4 @@ function optionalTitle(data) {
 }
 
 //#endregion
-export { normalizeMediaValueToIdentifierOnly as $, createCommandContext as $t, formatDiffDetail as A, getEnvPrefix as An, navigationIdentity as At, buildFieldChanges as B, portablePageDesignSchema as Bn, preparePushConfigTarget as Bt, reportFromOutcomes as C, requireEnvironmentWriteAuthorization as Cn, fileExists$1 as Ct, normalizeRemoteHomepageReference as D, transportSuggestion as Dn, writeJsonFileAtomic as Dt, createEmptySyncResult as E, formatError as En, writeJsonFile$1 as Et, calculatePullDiff as F, createManagementClient as Fn, navigationCommandItemToManagementInput as Ft, syncLocalMediaForPull as G, APPOINTMENT_SERVICE_VISIBILITY_VALUES as Gt, formatFieldPath as H, API_ENDPOINTS as Hn, extractApiErrorMessage as Ht, buildJsonDiff as I, ManagementApiError as In, normalizeNavigationConfigItemForCommand as It, admitBinaryWriteDestination as J, deriveCmsApiUrlFromDashboardUrl as Jt, applyLocalMediaPush as K, ApiRequestError as Kt, hasPageOperations as L, sdkEventScheduleSchema as Ln, applyPushConfigPlan as Lt, hasPendingChanges as M, isLocalConfigured as Mn, convertPulledFooterToLocal as Mt, findChangedFieldsWithValues as N, isRemoteConfigured as Nn, convertPulledNavigationToLocal as Nt, calculateDiff as O, CliExit as On, isMediaValue as Ot, formatHumanDiff as P, loadSdkEnvironment as Pn, convertPulledPagesToLocal as Pt, normalizeMediaIdentifierInput as Q, createClientForEnv as Qt, pageMetadataForUpsert as R, sdkSettingsUpdateSchema as Rn, createPushConfigCommand as Rt, planCliCommandBatchForBindings as S, planEnvironmentWriteAuthorization as Sn, ensureDir$1 as St, executeResidualSettingsSyncPlan as T, ErrorCodes as Tn, readJsonFile as Tt, revalidateLocalMediaPushPlan as U, ApiEnvelopeError as Un, normalizeApiError as Ut, formatFieldChange as V, sdkConfiguredBookingVerticalConfigSchema as Vn, revalidatePushConfigPlan as Vt, syncLocalMediaForPush as W, unwrapResponse as Wn, isRecord$5 as Wt, writeBinaryFileAtomic as X, bindRequestTimeout as Xt, readStableBinaryFile as Y, mapEnvironmentExecutionOutcomesJson as Yt, sha256 as Z, confirmAction as Zt, commandExecutionToReport as _, withErrorHandling as _n, metadataFilePath as _t, executeEntryCommandPlanAsReport as a, getOutputContext as an, readEntries as at, executeCompiledCliCommandPlanAsReport as b, parseEnvironmentSelection as bn, writeMetadataFile as bt, titleFromEntryData as c, managementClientConfigFor as cn, readEventsMeta as ct, unsafeAsCliEntryIdentifier as d, parseJsonData as dn, readNavigationMeta as dt, createGetCommand as en, walkLocalContentMedia as et, unsafeAsCliFormSlug as f, parsePaginationOptions as fn, readPagesMeta as ft, commandCompileFailureToReport as g, withConfirmation as gn, ensureMetadataDir as gt, mutationCounterForEffect as h, withCommandContext as hn, writeMediaManifest as ht, entrySiteCommandTypes as i, formatDateShort as in, findLegacyEntryFiles as it, formatDiffSummary as j, getEnvironmentDebugInfo as jn, navigationIdentityMap as jt, calculateFooterDiff as k, createOutput as kn, duplicateNavigationIdentityMessage as kt, unsafeAsCliBlockIdentifier as l, mapEntryForOutput as ln, readFooterMeta as lt, commandReportToSyncResult as m, runWithInvocation as mn, readVenuesMeta as mt, entryCommandCompileErrorToReport as n, createOutputForCommand as nn, downloadMedia as nt, executeEntryCommandPlanAsSyncResult as o, getOutputOnlyContext as on, readAllMeta as ot, unsafeAsCliPageIdentifier as p, resolveCommandPath as pn, readSettingsMeta as pt, prepareLocalMediaForPush as q, createBearerAPIClient as qt, entryCommandReportToSyncResult as r, currentInvocationEnvelope as rn, extractMediaIdentifiers as rt, syncResultForEntryCommandCompileError as s, handleCommandError as sn, readEventCategoriesMeta as st, compileEntryPushCommands as t, createListCommand as tn, buildStorageUrl as tt, unsafeAsCliContentTypeKey as u, parseJsonArray as un, readFormsMeta as ut, commandReportHasFailures as v, withOutputOnlyErrorHandling as vn, metadataTargetFromEnvironment as vt, mergeManySyncResults as w, withRiverbankEnv as wn, listFiles as wt, formatManagementError as x, planEnvironmentExecution as xn, writeMetadataRecordMap as xt, executeCliCommandPlan as y, executeEnvironmentPlan as yn, readMetadataFile as yt, calculateEntryDiffs as z, linkPayloadSchema as zn, loadPushConfigTarget as zt };
+export { normalizeMediaValueToIdentifierOnly as $, createCommandContext as $t, formatDiffDetail as A, getEnvPrefix as An, navigationIdentity as At, buildFieldChanges as B, portablePageDesignSchema as Bn, preparePushConfigTarget as Bt, reportFromOutcomes as C, requireEnvironmentWriteAuthorization as Cn, fileExists$1 as Ct, normalizeRemoteHomepageReference as D, transportSuggestion as Dn, writeJsonFileAtomic as Dt, createEmptySyncResult as E, formatError as En, writeJsonFile$1 as Et, calculatePullDiff as F, createManagementClient as Fn, navigationCommandItemToManagementInput as Ft, syncLocalMediaForPull as G, APPOINTMENT_SERVICE_VISIBILITY_VALUES as Gt, formatFieldPath as H, API_ENDPOINTS as Hn, extractApiErrorMessage as Ht, buildJsonDiff as I, ManagementApiError as In, normalizeNavigationConfigItemForCommand as It, admitBinaryWriteDestination as J, ApiRequestError as Jt, applyLocalMediaPush as K, createBearerAPIClient as Kt, hasPageOperations as L, sdkEventScheduleSchema as Ln, applyPushConfigPlan as Lt, hasPendingChanges as M, isLocalConfigured as Mn, convertPulledFooterToLocal as Mt, findChangedFieldsWithValues as N, isRemoteConfigured as Nn, convertPulledNavigationToLocal as Nt, calculateDiff as O, CliExit as On, isMediaValue as Ot, formatHumanDiff as P, loadSdkEnvironment as Pn, convertPulledPagesToLocal as Pt, normalizeMediaIdentifierInput as Q, createClientForEnv as Qt, pageMetadataForUpsert as R, sdkSettingsUpdateSchema as Rn, createPushConfigCommand as Rt, planCliCommandBatchForBindings as S, planEnvironmentWriteAuthorization as Sn, ensureDir$1 as St, executeResidualSettingsSyncPlan as T, ErrorCodes as Tn, readJsonFile as Tt, revalidateLocalMediaPushPlan as U, ApiEnvelopeError as Un, normalizeApiError as Ut, formatFieldChange as V, sdkConfiguredBookingVerticalConfigSchema as Vn, revalidatePushConfigPlan as Vt, syncLocalMediaForPush as W, unwrapResponse as Wn, isRecord$5 as Wt, writeBinaryFileAtomic as X, bindRequestTimeout as Xt, readStableBinaryFile as Y, mapEnvironmentExecutionOutcomesJson as Yt, sha256 as Z, confirmAction as Zt, commandExecutionToReport as _, withErrorHandling as _n, metadataFilePath as _t, executeEntryCommandPlanAsReport as a, getOutputContext as an, readEntries as at, executeCompiledCliCommandPlanAsReport as b, parseEnvironmentSelection as bn, writeMetadataFile as bt, titleFromEntryData as c, managementClientConfigFor as cn, readEventsMeta as ct, unsafeAsCliEntryIdentifier as d, parseJsonData as dn, readNavigationMeta as dt, createGetCommand as en, walkLocalContentMedia as et, unsafeAsCliFormSlug as f, parsePaginationOptions as fn, readPagesMeta as ft, commandCompileFailureToReport as g, withConfirmation as gn, ensureMetadataDir as gt, mutationCounterForEffect as h, withCommandContext as hn, writeMediaManifest as ht, entrySiteCommandTypes as i, formatDateShort as in, findLegacyEntryFiles as it, formatDiffSummary as j, getEnvironmentDebugInfo as jn, navigationIdentityMap as jt, calculateFooterDiff as k, createOutput as kn, duplicateNavigationIdentityMessage as kt, unsafeAsCliBlockIdentifier as l, mapEntryForOutput as ln, readFooterMeta as lt, commandReportToSyncResult as m, runWithInvocation as mn, readVenuesMeta as mt, entryCommandCompileErrorToReport as n, createOutputForCommand as nn, downloadMedia as nt, executeEntryCommandPlanAsSyncResult as o, getOutputOnlyContext as on, readAllMeta as ot, unsafeAsCliPageIdentifier as p, resolveCommandPath as pn, readSettingsMeta as pt, prepareLocalMediaForPush as q, deriveCmsApiUrlFromDashboardUrl as qt, entryCommandReportToSyncResult as r, currentInvocationEnvelope as rn, extractMediaIdentifiers as rt, syncResultForEntryCommandCompileError as s, handleCommandError as sn, readEventCategoriesMeta as st, compileEntryPushCommands as t, createListCommand as tn, buildStorageUrl as tt, unsafeAsCliContentTypeKey as u, parseJsonArray as un, readFormsMeta as ut, commandReportHasFailures as v, withOutputOnlyErrorHandling as vn, metadataTargetFromEnvironment as vt, mergeManySyncResults as w, withRiverbankEnv as wn, listFiles as wt, formatManagementError as x, planEnvironmentExecution as xn, writeMetadataRecordMap as xt, executeCliCommandPlan as y, executeEnvironmentPlan as yn, readMetadataFile as yt, calculateEntryDiffs as z, linkPayloadSchema as zn, loadPushConfigTarget as zt };