support for 202507 endpoints (#37)

* [auth][api] accept the 20250424.01 client

* [2025] unstable

* 20250718.0

* correct one this time

* stubs

* more stubs

* more stubs

* [lists] add worker

* [ai] route stubs

* [api] player photo setting

* [econ] add roomEconConfig route

* [infra] update worker generators

* [worker] add cards/moderation/platformnotification workers

* [lists] updates to some endpoints

* [clubs] stub out announcement endpoint, for now

* [econ] stub out season endpoints for now

* [chat] apps/chat stub out party endpoint not sure the shape yet

* [api] stub out statsig and lockeditems

* [doc] new services

* [lists] stub the bulk endpoint

* [datacollection] add placeholder service until we can kill it

* [api] set gifting to lvl5

* update lock

* [cdn] enable cache

* [match] matchmake v2

* [lists] stub some lists

* [ai] stubs

* [rooms] new subroom save endpoint

* [econ] add bulk purchase endpoint

* [discovery] update featured creator to 1 for fun

* [api] add photo settings flag

* [chat] fixup chat permissions (sorta)

* [auth] restrictions endpoint

* [rooms] contributed endpoint

* [api] fix outfit endpoint

* [discovery] attempt to fix store

* [chat] privacy endpoints

* [api] cheered images

* [rooms] add xp endpoint (disbaled)

* [rooms] add xp endpoint (disabled)

* update images-db for cheers

* [rooms] add autocomplete endpoint

* [cdn/img] increase cache ttl for statics

* [api] bulk route for images

* [accounts] add banner image

* [api] add misc missing endpoints

* [discovery] remove AI tab

* [platformnotifications] stub some endpoints

* [lists] add some more lists

* [rooms] additional endpoints

* [chat] stub a few privacy endpoints

* [econ] stub some endpoints

* misc db fixes

* [api] tweak shape for images v6

* [rooms] dont show trending RROs

apps/accounts/src/accounts.app.ts

@@ -25,6 +25,7 @@ import { validateAndGetAccountId } from '@repo/jwt'
 import { NotificationType } from '../../notify/src/notification-types'
 import {
 	AccountDto,
+	BannerImageRequest,
 	BioRequest,
 	BioResponse,
 	CreateAccountRequest,
@@ -108,6 +109,10 @@ function toAccountDto(account: Account) {
 		username: account.username,
 		displayName: account.displayName,
 		profileImage: account.profileImage,
+		// Nothing writes these yet, and rows stored before they existed have neither
+		// key — always emit them as "" rather than letting them go missing.
+		bannerImage: account.bannerImage ?? '',
+		displayEmoji: account.displayEmoji ?? '',
 		isJunior: account.isJunior,
 		platforms: account.platforms,
 		personalPronouns: account.personalPronouns,
@@ -657,6 +662,41 @@ const app = new Hono<App>()
 		}
 	)
 
+	// The profile banner — the wide image behind the header on a player's profile. Same
+	// shape as the avatar below: the body names an image the player has already uploaded
+	// (the client posts one of their own photos, `sharecamera/<date>/<uuid>.jpg`), so this
+	// stores a key and never bytes.
+	//
+	// Broadcasts the AccountUpdate like every other profile mutation here — the banner rides
+	// along in the DTO payload, so anyone looking at the profile redraws it without a refetch.
+	.put(
+		'/account/me/bannerimage',
+		describeRoute({
+			tags: ['Profile'],
+			summary: 'Set profile banner image',
+			description:
+				'Persists the banner object key and broadcasts it in the AccountUpdate payload. The ' +
+				'key names an image the player already uploaded — typically one of their own photos ' +
+				'(`sharecamera/…`) — so nothing is uploaded here.',
+			security: AUTHED,
+			requestBody: form(BannerImageRequest, 'The banner object key'),
+			responses: {
+				200: json(SuccessResponse, 'Updated'),
+				400: { description: 'Empty imageName (empty body)' },
+				401: UNAUTHORIZED_RESPONSE,
+			},
+		}),
+		async (c) => {
+			const id = await authedId(c)
+			if (id === null) return unauthorized(c)
+			const imageName = await formField(c, 'imageName')
+			if (!imageName) return c.body(null, 400)
+			const account = await updateAccount(c.env.DB, id, { bannerImage: imageName })
+			await pushAccountUpdate(c, account)
+			return c.json({ success: true })
+		}
+	)
+
 	.put(
 		'/account/me/profileimage',
 		describeRoute({