@awiki/dsh-plugin 0.3.11 → 0.3.16

package/lib/client.js

@@ -4165,10 +4165,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				"previousDid": intersection(string(), unknown()).readonly().optional(),
 				"currentDid": intersection(string(), unknown()).readonly(),
 				"phase": union([
+					literal("remote_committed"),
 					literal("awaiting_factor"),
 					literal("ready_to_commit"),
 					literal("remote_outcome_unknown"),
-					literal("remote_committed"),
 					literal("identity_transition_pending"),
 					literal("applied"),
 					literal("quarantined_key_unavailable")
@@ -5213,10 +5213,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				"previousDid": intersection(string(), unknown()).readonly().optional(),
 				"currentDid": intersection(string(), unknown()).readonly(),
 				"phase": union([
+					literal("remote_committed"),
 					literal("awaiting_factor"),
 					literal("ready_to_commit"),
 					literal("remote_outcome_unknown"),
-					literal("remote_committed"),
 					literal("identity_transition_pending"),
 					literal("applied"),
 					literal("quarantined_key_unavailable")
@@ -5892,11 +5892,38 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		}), object({
 			"ok": literal(true).readonly(),
 			"value": object({
+				"creationMethods": array(union([literal("wba"), literal("web")])).readonly().optional(),
+				"pendingRegistrations": array(object({
+					"did": string().readonly(),
+					"fullHandle": string().readonly(),
+					"method": union([literal("wba"), literal("web")]).readonly(),
+					"displayName": string().readonly(),
+					"verificationKind": string().readonly(),
+					"phase": union([
+						literal("prepared"),
+						literal("remote_committed"),
+						literal("local_committed")
+					]).readonly()
+				})).readonly().optional(),
+				"methodCapabilities": object({
+					"method": union([literal("wba"), literal("web")]).readonly(),
+					"handleRecovery": boolean().readonly(),
+					"rootImport": boolean().readonly(),
+					"rootTransfer": boolean().readonly(),
+					"servicesUpdate": boolean().readonly()
+				}).readonly().optional(),
 				"choice": union([literal(null), object({
 					"status": literal("join-required").readonly(),
 					"fullHandle": intersection(string(), unknown()).readonly(),
 					"mode": union([literal("ordinary"), literal("handle-recovery-rebind")]).readonly(),
-					"requiresUserPresence": boolean().readonly()
+					"requiresUserPresence": boolean().readonly(),
+					"methodCapabilities": object({
+						"method": union([literal("wba"), literal("web")]).readonly(),
+						"handleRecovery": boolean().readonly(),
+						"rootImport": boolean().readonly(),
+						"rootTransfer": boolean().readonly(),
+						"servicesUpdate": boolean().readonly()
+					}).readonly().optional()
 				})]).readonly(),
 				"joining": boolean().readonly(),
 				"recoveries": array(object({
@@ -5905,6 +5932,83 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				})).readonly()
 			}).readonly()
 		})]);
+		const _awiki_dsh_plugin_awiki_getIdentityServices_result$schema = union([object({
+			"ok": literal(false).readonly(),
+			"error": object({
+				"code": union([
+					literal("client-version-unsupported"),
+					literal("not-registered"),
+					literal("signed-out"),
+					literal("already-registered"),
+					literal("invalid-request"),
+					literal("invalid-otp"),
+					literal("challenge-expired"),
+					literal("handle-unavailable"),
+					literal("short-handle-invite-required"),
+					literal("not-found"),
+					literal("forbidden"),
+					literal("device-rejoin-required"),
+					literal("identity-recovery-required"),
+					literal("conflict"),
+					literal("state-in-use"),
+					literal("rate-limited"),
+					literal("group-membership-required"),
+					literal("group-identity-stale"),
+					literal("attachment-too-large"),
+					literal("summary-unavailable"),
+					literal("summary-timeout"),
+					literal("summary-cancelled"),
+					literal("summary-invalid-output"),
+					literal("summary-failed"),
+					literal("delivery-unknown"),
+					literal("network"),
+					literal("remote")
+				]).readonly(),
+				"message": string().readonly(),
+				"mailRecoveryObservability": object({
+					"current_principal_matches_recovery": boolean().readonly(),
+					"request_generation_classification": union([literal("current"), literal("replaced")]).readonly(),
+					"mail_ingress_classification": union([
+						literal("reached"),
+						literal("not_reached"),
+						literal("unknown")
+					]).readonly(),
+					"auth_status_class": union([
+						literal("unknown"),
+						literal("accepted"),
+						literal("rejected"),
+						literal("dependency_unavailable")
+					]).readonly(),
+					"auth_stable_machine_code": string().readonly().optional(),
+					"retryable": boolean().readonly(),
+					"mail_closed_classification": union([
+						literal("unknown"),
+						literal("dependency_unavailable"),
+						literal("success"),
+						literal("authentication_rejected"),
+						literal("no_active_handle"),
+						literal("multiple_active_handles"),
+						literal("no_mailbox"),
+						literal("owner_conflict")
+					]).readonly()
+				}).readonly().optional()
+			}).readonly()
+		}), object({
+			"ok": literal(true).readonly(),
+			"value": object({
+				"did": string().readonly(),
+				"canManage": boolean().readonly(),
+				"pending": boolean().readonly(),
+				"services": array(object({
+					"id": string().readonly(),
+					"type": string().readonly(),
+					"serviceEndpoint": string().readonly(),
+					"serviceDid": string().readonly().optional(),
+					"profiles": array(string()).readonly().optional(),
+					"securityProfiles": array(string()).readonly().optional()
+				})).readonly()
+			}).readonly()
+		})]);
 		const _awiki_dsh_plugin_awiki_getIntegration_result$schema = union([object({
 			"ok": literal(false).readonly(),
 			"error": object({
@@ -6275,10 +6379,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				"previousDid": intersection(string(), unknown()).readonly().optional(),
 				"currentDid": intersection(string(), unknown()).readonly(),
 				"phase": union([
+					literal("remote_committed"),
 					literal("awaiting_factor"),
 					literal("ready_to_commit"),
 					literal("remote_outcome_unknown"),
-					literal("remote_committed"),
 					literal("identity_transition_pending"),
 					literal("applied"),
 					literal("quarantined_key_unavailable")
@@ -6403,7 +6507,11 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				})
 			]).readonly()
 		})]);
-		const _awiki_dsh_plugin_awiki_inspectIdentityAccess_parameter_0$schema = object({ "handle": string().readonly() });
+		const _awiki_dsh_plugin_awiki_inspectIdentityAccess_parameter_0$schema = object({
+			"inviteCode": string().readonly().optional(),
+			"phone": string().readonly().optional(),
+			"handle": string().readonly()
+		});
 		const _awiki_dsh_plugin_awiki_inspectIdentityAccess_result$schema = union([object({
 			"ok": literal(false).readonly(),
 			"error": object({
@@ -6468,7 +6576,18 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		}), object({
 			"ok": literal(true).readonly(),
 			"value": object({
-				"status": union([literal("available"), literal("existing")]).readonly(),
+				"status": union([
+					literal("unavailable"),
+					literal("available"),
+					literal("existing")
+				]).readonly(),
+				"inviteRequired": boolean().readonly().optional(),
+				"inviteStatus": union([
+					literal("not_required"),
+					literal("required"),
+					literal("valid"),
+					literal("invalid")
+				]).readonly().optional(),
 				"fullHandle": string().readonly()
 			}).readonly()
 		})]);
@@ -7243,10 +7362,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				"previousDid": intersection(string(), unknown()).readonly().optional(),
 				"currentDid": intersection(string(), unknown()).readonly(),
 				"phase": union([
+					literal("remote_committed"),
 					literal("awaiting_factor"),
 					literal("ready_to_commit"),
 					literal("remote_outcome_unknown"),
-					literal("remote_committed"),
 					literal("identity_transition_pending"),
 					literal("applied"),
 					literal("quarantined_key_unavailable")
@@ -7520,6 +7639,13 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		}), object({
 			"ok": literal(true).readonly(),
 			"value": object({
+				"methodCapabilities": object({
+					"method": union([literal("wba"), literal("web")]).readonly(),
+					"handleRecovery": boolean().readonly(),
+					"rootImport": boolean().readonly(),
+					"rootTransfer": boolean().readonly(),
+					"servicesUpdate": boolean().readonly()
+				}).readonly().optional(),
 				"canManage": boolean().readonly(),
 				"rootTransferSupported": boolean().readonly(),
 				"role": union([literal("member"), literal("admin")]).readonly().optional(),
@@ -7537,6 +7663,16 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					"status": union([literal("active"), literal("revoked")]).readonly(),
 					"role": union([literal("member"), literal("admin")]).readonly(),
 					"managementReady": boolean().readonly(),
+					"provisioning": object({
+						"phase": union([
+							literal("pending"),
+							literal("waiting"),
+							literal("failed"),
+							literal("complete")
+						]).readonly(),
+						"attempts": number().readonly(),
+						"requiresRejoin": boolean().readonly().optional()
+					}).readonly().optional(),
 					"isCurrent": boolean().readonly()
 				})).readonly(),
 				"requests": array(object({
@@ -7559,6 +7695,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			}).readonly()
 		})]);
 		const _awiki_dsh_plugin_awiki_registerIdentity_parameter_0$schema = object({
+			"inviteCode": string().readonly().optional(),
+			"didMethod": union([literal("wba"), literal("web")]).readonly().optional(),
 			"handle": string().readonly(),
 			"phone": string().readonly(),
 			"otp": string().readonly()
@@ -7638,7 +7776,14 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				"status": literal("join-required").readonly(),
 				"fullHandle": intersection(string(), unknown()).readonly(),
 				"mode": union([literal("ordinary"), literal("handle-recovery-rebind")]).readonly(),
-				"requiresUserPresence": boolean().readonly()
+				"requiresUserPresence": boolean().readonly(),
+				"methodCapabilities": object({
+					"method": union([literal("wba"), literal("web")]).readonly(),
+					"handleRecovery": boolean().readonly(),
+					"rootImport": boolean().readonly(),
+					"rootTransfer": boolean().readonly(),
+					"servicesUpdate": boolean().readonly()
+				}).readonly().optional()
 			})]).readonly()
 		})]);
 		const _awiki_dsh_plugin_awiki_rejectDeviceJoin_parameter_0$schema = object({
@@ -7934,6 +8079,84 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				"conversationId": intersection(string(), unknown()).readonly()
 			}).readonly()
 		})]);
+		const _awiki_dsh_plugin_awiki_resumeIdentityServicesUpdate_parameter_0$schema = object({ "did": string().readonly() });
+		const _awiki_dsh_plugin_awiki_resumeIdentityServicesUpdate_result$schema = union([object({
+			"ok": literal(false).readonly(),
+			"error": object({
+				"code": union([
+					literal("client-version-unsupported"),
+					literal("not-registered"),
+					literal("signed-out"),
+					literal("already-registered"),
+					literal("invalid-request"),
+					literal("invalid-otp"),
+					literal("challenge-expired"),
+					literal("handle-unavailable"),
+					literal("short-handle-invite-required"),
+					literal("not-found"),
+					literal("forbidden"),
+					literal("device-rejoin-required"),
+					literal("identity-recovery-required"),
+					literal("conflict"),
+					literal("state-in-use"),
+					literal("rate-limited"),
+					literal("group-membership-required"),
+					literal("group-identity-stale"),
+					literal("attachment-too-large"),
+					literal("summary-unavailable"),
+					literal("summary-timeout"),
+					literal("summary-cancelled"),
+					literal("summary-invalid-output"),
+					literal("summary-failed"),
+					literal("delivery-unknown"),
+					literal("network"),
+					literal("remote")
+				]).readonly(),
+				"message": string().readonly(),
+				"mailRecoveryObservability": object({
+					"current_principal_matches_recovery": boolean().readonly(),
+					"request_generation_classification": union([literal("current"), literal("replaced")]).readonly(),
+					"mail_ingress_classification": union([
+						literal("reached"),
+						literal("not_reached"),
+						literal("unknown")
+					]).readonly(),
+					"auth_status_class": union([
+						literal("unknown"),
+						literal("accepted"),
+						literal("rejected"),
+						literal("dependency_unavailable")
+					]).readonly(),
+					"auth_stable_machine_code": string().readonly().optional(),
+					"retryable": boolean().readonly(),
+					"mail_closed_classification": union([
+						literal("unknown"),
+						literal("dependency_unavailable"),
+						literal("success"),
+						literal("authentication_rejected"),
+						literal("no_active_handle"),
+						literal("multiple_active_handles"),
+						literal("no_mailbox"),
+						literal("owner_conflict")
+					]).readonly()
+				}).readonly().optional()
+			}).readonly()
+		}), object({
+			"ok": literal(true).readonly(),
+			"value": object({
+				"did": string().readonly(),
+				"canManage": boolean().readonly(),
+				"pending": boolean().readonly(),
+				"services": array(object({
+					"id": string().readonly(),
+					"type": string().readonly(),
+					"serviceEndpoint": string().readonly(),
+					"serviceDid": string().readonly().optional(),
+					"profiles": array(string()).readonly().optional(),
+					"securityProfiles": array(string()).readonly().optional()
+				})).readonly()
+			}).readonly()
+		})]);
 		const _awiki_dsh_plugin_awiki_resumeRecovery_parameter_0$schema = object({ "operationId": string().readonly() });
 		const _awiki_dsh_plugin_awiki_resumeRecovery_result$schema = union([object({
 			"ok": literal(false).readonly(),
@@ -8004,10 +8227,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				"previousDid": intersection(string(), unknown()).readonly().optional(),
 				"currentDid": intersection(string(), unknown()).readonly(),
 				"phase": union([
+					literal("remote_committed"),
 					literal("awaiting_factor"),
 					literal("ready_to_commit"),
 					literal("remote_outcome_unknown"),
-					literal("remote_committed"),
 					literal("identity_transition_pending"),
 					literal("applied"),
 					literal("quarantined_key_unavailable")
@@ -8120,6 +8343,72 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			"ok": literal(true).readonly(),
 			"value": object({ "completed": literal(true).readonly() }).readonly()
 		})]);
+		const _awiki_dsh_plugin_awiki_retryDeviceManagement_parameter_0$schema = object({ "deviceRef": string().readonly() });
+		const _awiki_dsh_plugin_awiki_retryDeviceManagement_result$schema = union([object({
+			"ok": literal(false).readonly(),
+			"error": object({
+				"code": union([
+					literal("client-version-unsupported"),
+					literal("not-registered"),
+					literal("signed-out"),
+					literal("already-registered"),
+					literal("invalid-request"),
+					literal("invalid-otp"),
+					literal("challenge-expired"),
+					literal("handle-unavailable"),
+					literal("short-handle-invite-required"),
+					literal("not-found"),
+					literal("forbidden"),
+					literal("device-rejoin-required"),
+					literal("identity-recovery-required"),
+					literal("conflict"),
+					literal("state-in-use"),
+					literal("rate-limited"),
+					literal("group-membership-required"),
+					literal("group-identity-stale"),
+					literal("attachment-too-large"),
+					literal("summary-unavailable"),
+					literal("summary-timeout"),
+					literal("summary-cancelled"),
+					literal("summary-invalid-output"),
+					literal("summary-failed"),
+					literal("delivery-unknown"),
+					literal("network"),
+					literal("remote")
+				]).readonly(),
+				"message": string().readonly(),
+				"mailRecoveryObservability": object({
+					"current_principal_matches_recovery": boolean().readonly(),
+					"request_generation_classification": union([literal("current"), literal("replaced")]).readonly(),
+					"mail_ingress_classification": union([
+						literal("reached"),
+						literal("not_reached"),
+						literal("unknown")
+					]).readonly(),
+					"auth_status_class": union([
+						literal("unknown"),
+						literal("accepted"),
+						literal("rejected"),
+						literal("dependency_unavailable")
+					]).readonly(),
+					"auth_stable_machine_code": string().readonly().optional(),
+					"retryable": boolean().readonly(),
+					"mail_closed_classification": union([
+						literal("unknown"),
+						literal("dependency_unavailable"),
+						literal("success"),
+						literal("authentication_rejected"),
+						literal("no_active_handle"),
+						literal("multiple_active_handles"),
+						literal("no_mailbox"),
+						literal("owner_conflict")
+					]).readonly()
+				}).readonly().optional()
+			}).readonly()
+		}), object({
+			"ok": literal(true).readonly(),
+			"value": literal(null).readonly()
+		})]);
 		const _awiki_dsh_plugin_awiki_revokeDevice_parameter_0$schema = object({
 			"deviceRef": string().readonly(),
 			"confirmation": string().readonly()
@@ -8188,6 +8477,13 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		}), object({
 			"ok": literal(true).readonly(),
 			"value": object({
+				"methodCapabilities": object({
+					"method": union([literal("wba"), literal("web")]).readonly(),
+					"handleRecovery": boolean().readonly(),
+					"rootImport": boolean().readonly(),
+					"rootTransfer": boolean().readonly(),
+					"servicesUpdate": boolean().readonly()
+				}).readonly().optional(),
 				"canManage": boolean().readonly(),
 				"rootTransferSupported": boolean().readonly(),
 				"role": union([literal("member"), literal("admin")]).readonly().optional(),
@@ -8205,6 +8501,16 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					"status": union([literal("active"), literal("revoked")]).readonly(),
 					"role": union([literal("member"), literal("admin")]).readonly(),
 					"managementReady": boolean().readonly(),
+					"provisioning": object({
+						"phase": union([
+							literal("pending"),
+							literal("waiting"),
+							literal("failed"),
+							literal("complete")
+						]).readonly(),
+						"attempts": number().readonly(),
+						"requiresRejoin": boolean().readonly().optional()
+					}).readonly().optional(),
 					"isCurrent": boolean().readonly()
 				})).readonly(),
 				"requests": array(object({
@@ -8286,13 +8592,22 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			}).readonly()
 		})]);
 		const _awiki_dsh_plugin_awiki_sendAttachment_parameter_0$schema = object({
-			"target": union([object({
-				"kind": literal("direct").readonly(),
-				"peer": string().readonly()
-			}), object({
-				"kind": literal("group").readonly(),
-				"group": string().readonly()
-			})]).readonly(),
+			"target": union([
+				object({
+					"kind": literal("direct").readonly(),
+					"peer": string().readonly(),
+					"conversationId": never().readonly().optional()
+				}),
+				object({
+					"kind": literal("direct").readonly(),
+					"conversationId": intersection(string(), unknown()).readonly(),
+					"peer": never().readonly().optional()
+				}),
+				object({
+					"kind": literal("group").readonly(),
+					"group": string().readonly()
+				})
+			]).readonly(),
 			"fileName": string().readonly(),
 			"mimeType": string().readonly(),
 			"bytesBase64": string().readonly(),
@@ -8550,6 +8865,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			}).readonly()
 		})]);
 		const _awiki_dsh_plugin_awiki_sendRegistrationOtp_parameter_0$schema = object({
+			"inviteCode": string().readonly().optional(),
+			"didMethod": union([literal("wba"), literal("web")]).readonly().optional(),
 			"handle": string().readonly(),
 			"phone": string().readonly()
 		});
@@ -8622,13 +8939,22 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			}).readonly()
 		})]);
 		const _awiki_dsh_plugin_awiki_sendText_parameter_0$schema = object({
-			"target": union([object({
-				"kind": literal("direct").readonly(),
-				"peer": string().readonly()
-			}), object({
-				"kind": literal("group").readonly(),
-				"group": string().readonly()
-			})]).readonly(),
+			"target": union([
+				object({
+					"kind": literal("direct").readonly(),
+					"peer": string().readonly(),
+					"conversationId": never().readonly().optional()
+				}),
+				object({
+					"kind": literal("direct").readonly(),
+					"conversationId": intersection(string(), unknown()).readonly(),
+					"peer": never().readonly().optional()
+				}),
+				object({
+					"kind": literal("group").readonly(),
+					"group": string().readonly()
+				})
+			]).readonly(),
 			"text": string().readonly(),
 			"idempotencyKey": string().readonly(),
 			"mentions": array(object({
@@ -9080,6 +9406,94 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				"registeredAt": number().readonly()
 			}).readonly()
 		})]);
+		const _awiki_dsh_plugin_awiki_updateIdentityServices_parameter_0$schema = object({
+			"services": array(object({
+				"id": string().readonly(),
+				"type": string().readonly(),
+				"serviceEndpoint": string().readonly(),
+				"serviceDid": string().readonly().optional(),
+				"profiles": array(string()).readonly().optional(),
+				"securityProfiles": array(string()).readonly().optional()
+			})).readonly(),
+			"did": string().readonly()
+		});
+		const _awiki_dsh_plugin_awiki_updateIdentityServices_result$schema = union([object({
+			"ok": literal(false).readonly(),
+			"error": object({
+				"code": union([
+					literal("client-version-unsupported"),
+					literal("not-registered"),
+					literal("signed-out"),
+					literal("already-registered"),
+					literal("invalid-request"),
+					literal("invalid-otp"),
+					literal("challenge-expired"),
+					literal("handle-unavailable"),
+					literal("short-handle-invite-required"),
+					literal("not-found"),
+					literal("forbidden"),
+					literal("device-rejoin-required"),
+					literal("identity-recovery-required"),
+					literal("conflict"),
+					literal("state-in-use"),
+					literal("rate-limited"),
+					literal("group-membership-required"),
+					literal("group-identity-stale"),
+					literal("attachment-too-large"),
+					literal("summary-unavailable"),
+					literal("summary-timeout"),
+					literal("summary-cancelled"),
+					literal("summary-invalid-output"),
+					literal("summary-failed"),
+					literal("delivery-unknown"),
+					literal("network"),
+					literal("remote")
+				]).readonly(),
+				"message": string().readonly(),
+				"mailRecoveryObservability": object({
+					"current_principal_matches_recovery": boolean().readonly(),
+					"request_generation_classification": union([literal("current"), literal("replaced")]).readonly(),
+					"mail_ingress_classification": union([
+						literal("reached"),
+						literal("not_reached"),
+						literal("unknown")
+					]).readonly(),
+					"auth_status_class": union([
+						literal("unknown"),
+						literal("accepted"),
+						literal("rejected"),
+						literal("dependency_unavailable")
+					]).readonly(),
+					"auth_stable_machine_code": string().readonly().optional(),
+					"retryable": boolean().readonly(),
+					"mail_closed_classification": union([
+						literal("unknown"),
+						literal("dependency_unavailable"),
+						literal("success"),
+						literal("authentication_rejected"),
+						literal("no_active_handle"),
+						literal("multiple_active_handles"),
+						literal("no_mailbox"),
+						literal("owner_conflict")
+					]).readonly()
+				}).readonly().optional()
+			}).readonly()
+		}), object({
+			"ok": literal(true).readonly(),
+			"value": object({
+				"did": string().readonly(),
+				"canManage": boolean().readonly(),
+				"pending": boolean().readonly(),
+				"services": array(object({
+					"id": string().readonly(),
+					"type": string().readonly(),
+					"serviceEndpoint": string().readonly(),
+					"serviceDid": string().readonly().optional(),
+					"profiles": array(string()).readonly().optional(),
+					"securityProfiles": array(string()).readonly().optional()
+				})).readonly()
+			}).readonly()
+		})]);
 		const _awiki_dsh_plugin_awiki_updateIntegration_parameter_0$schema = object({
 			"expectedRevision": number().readonly(),
 			"idempotencyKey": string().readonly(),
@@ -9251,7 +9665,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 206,
+						"line": 222,
 						"column": 9
 					}
 				},
@@ -9278,7 +9692,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 242,
+						"line": 258,
 						"column": 3
 					}
 				},
@@ -9305,7 +9719,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 166,
+						"line": 179,
 						"column": 9
 					}
 				},
@@ -9323,7 +9737,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 146,
+						"line": 150,
 						"column": 9
 					}
 				},
@@ -9341,7 +9755,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 155,
+						"line": 159,
 						"column": 9
 					}
 				},
@@ -9368,7 +9782,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 302,
+						"line": 318,
 						"column": 3
 					}
 				},
@@ -9395,7 +9809,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 114,
+						"line": 118,
 						"column": 3
 					}
 				},
@@ -9422,7 +9836,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 186,
+						"line": 202,
 						"column": 9
 					}
 				},
@@ -9449,7 +9863,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 224,
+						"line": 240,
 						"column": 9
 					}
 				},
@@ -9476,7 +9890,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 105,
+						"line": 109,
 						"column": 3
 					}
 				},
@@ -9503,7 +9917,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 218,
+						"line": 234,
 						"column": 9
 					}
 				},
@@ -9530,7 +9944,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 279,
+						"line": 295,
 						"column": 9
 					}
 				},
@@ -9557,7 +9971,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 297,
+						"line": 313,
 						"column": 9
 					}
 				},
@@ -9584,7 +9998,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 215,
+						"line": 231,
 						"column": 9
 					}
 				},
@@ -9602,7 +10016,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 99,
+						"line": 103,
 						"column": 9
 					}
 				},
@@ -9620,7 +10034,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 248,
+						"line": 264,
 						"column": 3
 					}
 				},
@@ -9638,7 +10052,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 152,
+						"line": 156,
 						"column": 9
 					}
 				},
@@ -9665,7 +10079,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 236,
+						"line": 252,
 						"column": 3
 					}
 				},
@@ -9692,7 +10106,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 227,
+						"line": 243,
 						"column": 3
 					}
 				},
@@ -9719,7 +10133,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 259,
+						"line": 275,
 						"column": 3
 					}
 				},
@@ -9737,7 +10151,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 120,
+						"line": 124,
 						"column": 9
 					}
 				},
@@ -9755,7 +10169,25 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 149,
+						"line": 153,
+						"column": 3
+					}
+				},
+				{
+					id: "@awiki/dsh-plugin#awiki/getIdentityServices",
+					service: "awiki",
+					namespace: "awiki",
+					method: "getIdentityServices",
+					invocation: { kind: "direct" },
+					parameters: [],
+					result: {
+						mode: "strict",
+						typeSymbol: "@awiki/dsh-plugin/types#AwikiResult",
+						schema: _awiki_dsh_plugin_awiki_getIdentityServices_result$schema
+					},
+					sourceLocation: {
+						"file": "packages/dsh-awiki/src/index.ts",
+						"line": 165,
 						"column": 3
 					}
 				},
@@ -9773,7 +10205,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 102,
+						"line": 106,
 						"column": 3
 					}
 				},
@@ -9800,7 +10232,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 262,
+						"line": 278,
 						"column": 3
 					}
 				},
@@ -9818,7 +10250,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 282,
+						"line": 298,
 						"column": 3
 					}
 				},
@@ -9836,7 +10268,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 194,
+						"line": 210,
 						"column": 3
 					}
 				},
@@ -9863,7 +10295,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 209,
+						"line": 225,
 						"column": 9
 					}
 				},
@@ -9881,7 +10313,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 123,
+						"line": 127,
 						"column": 9
 					}
 				},
@@ -9908,7 +10340,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 132,
+						"line": 136,
 						"column": 9
 					}
 				},
@@ -9935,7 +10367,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 230,
+						"line": 246,
 						"column": 3
 					}
 				},
@@ -9962,7 +10394,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 233,
+						"line": 249,
 						"column": 9
 					}
 				},
@@ -9990,7 +10422,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 256,
+						"line": 272,
 						"column": 3
 					}
 				},
@@ -10017,7 +10449,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 239,
+						"line": 255,
 						"column": 3
 					}
 				},
@@ -10045,7 +10477,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 285,
+						"line": 301,
 						"column": 9
 					}
 				},
@@ -10063,7 +10495,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 129,
+						"line": 133,
 						"column": 3
 					}
 				},
@@ -10090,7 +10522,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 126,
+						"line": 130,
 						"column": 3
 					}
 				},
@@ -10117,7 +10549,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 270,
+						"line": 286,
 						"column": 3
 					}
 				},
@@ -10144,7 +10576,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 291,
+						"line": 307,
 						"column": 3
 					}
 				},
@@ -10171,7 +10603,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 203,
+						"line": 219,
 						"column": 3
 					}
 				},
@@ -10198,7 +10630,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 181,
+						"line": 197,
 						"column": 9
 					}
 				},
@@ -10225,7 +10657,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 288,
+						"line": 304,
 						"column": 9
 					}
 				},
@@ -10243,7 +10675,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 158,
+						"line": 162,
 						"column": 3
 					}
 				},
@@ -10270,7 +10702,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 140,
+						"line": 144,
 						"column": 9
 					}
 				},
@@ -10297,7 +10729,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 171,
+						"line": 187,
 						"column": 9
 					}
 				},
@@ -10324,15 +10756,42 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 245,
+						"line": 261,
+						"column": 3
+					}
+				},
+				{
+					id: "@awiki/dsh-plugin#awiki/reopenIntegration",
+					service: "awiki",
+					namespace: "awiki",
+					method: "reopenIntegration",
+					invocation: { kind: "direct" },
+					parameters: [{
+						name: "request",
+						wire: "request",
+						source: "json",
+						codec: {
+							mode: "strict",
+							typeSymbol: "@awiki/dsh-plugin/types#AwikiReopenIntegrationRequest",
+							schema: _awiki_dsh_plugin_awiki_reopenIntegration_parameter_0$schema
+						}
+					}],
+					result: {
+						mode: "strict",
+						typeSymbol: "@awiki/dsh-plugin/types#AwikiIntegrationResult",
+						schema: _awiki_dsh_plugin_awiki_reopenIntegration_result$schema
+					},
+					sourceLocation: {
+						"file": "packages/dsh-awiki/src/index.ts",
+						"line": 121,
 						"column": 3
 					}
 				},
 				{
-					id: "@awiki/dsh-plugin#awiki/reopenIntegration",
+					id: "@awiki/dsh-plugin#awiki/resolvePeer",
 					service: "awiki",
 					namespace: "awiki",
-					method: "reopenIntegration",
+					method: "resolvePeer",
 					invocation: { kind: "direct" },
 					parameters: [{
 						name: "request",
@@ -10340,26 +10799,26 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 						source: "json",
 						codec: {
 							mode: "strict",
-							typeSymbol: "@awiki/dsh-plugin/types#AwikiReopenIntegrationRequest",
-							schema: _awiki_dsh_plugin_awiki_reopenIntegration_parameter_0$schema
+							typeSymbol: "@awiki/dsh-plugin/types#AwikiResolvePeerRequest",
+							schema: _awiki_dsh_plugin_awiki_resolvePeer_parameter_0$schema
 						}
 					}],
 					result: {
 						mode: "strict",
-						typeSymbol: "@awiki/dsh-plugin/types#AwikiIntegrationResult",
-						schema: _awiki_dsh_plugin_awiki_reopenIntegration_result$schema
+						typeSymbol: "@awiki/dsh-plugin/types#AwikiResult",
+						schema: _awiki_dsh_plugin_awiki_resolvePeer_result$schema
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 117,
+						"line": 237,
 						"column": 3
 					}
 				},
 				{
-					id: "@awiki/dsh-plugin#awiki/resolvePeer",
+					id: "@awiki/dsh-plugin#awiki/resumeIdentityServicesUpdate",
 					service: "awiki",
 					namespace: "awiki",
-					method: "resolvePeer",
+					method: "resumeIdentityServicesUpdate",
 					invocation: { kind: "direct" },
 					parameters: [{
 						name: "request",
@@ -10367,18 +10826,18 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 						source: "json",
 						codec: {
 							mode: "strict",
-							typeSymbol: "@awiki/dsh-plugin/types#AwikiResolvePeerRequest",
-							schema: _awiki_dsh_plugin_awiki_resolvePeer_parameter_0$schema
+							typeSymbol: "@awiki/dsh-plugin/types#AwikiIdentityServicesRequest",
+							schema: _awiki_dsh_plugin_awiki_resumeIdentityServicesUpdate_parameter_0$schema
 						}
 					}],
 					result: {
 						mode: "strict",
 						typeSymbol: "@awiki/dsh-plugin/types#AwikiResult",
-						schema: _awiki_dsh_plugin_awiki_resolvePeer_result$schema
+						schema: _awiki_dsh_plugin_awiki_resumeIdentityServicesUpdate_result$schema
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 221,
+						"line": 171,
 						"column": 3
 					}
 				},
@@ -10405,7 +10864,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 212,
+						"line": 228,
 						"column": 9
 					}
 				},
@@ -10423,10 +10882,37 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 143,
+						"line": 147,
 						"column": 3
 					}
 				},
+				{
+					id: "@awiki/dsh-plugin#awiki/retryDeviceManagement",
+					service: "awiki",
+					namespace: "awiki",
+					method: "retryDeviceManagement",
+					invocation: { kind: "direct" },
+					parameters: [{
+						name: "request",
+						wire: "request",
+						source: "json",
+						codec: {
+							mode: "strict",
+							typeSymbol: "@awiki/dsh-plugin/types#AwikiPrepareRootTransferRequest",
+							schema: _awiki_dsh_plugin_awiki_retryDeviceManagement_parameter_0$schema
+						}
+					}],
+					result: {
+						mode: "strict",
+						typeSymbol: "@awiki/dsh-plugin/types#AwikiResult",
+						schema: _awiki_dsh_plugin_awiki_retryDeviceManagement_result$schema
+					},
+					sourceLocation: {
+						"file": "packages/dsh-awiki/src/index.ts",
+						"line": 184,
+						"column": 9
+					}
+				},
 				{
 					id: "@awiki/dsh-plugin#awiki/revokeDevice",
 					service: "awiki",
@@ -10450,7 +10936,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 176,
+						"line": 192,
 						"column": 9
 					}
 				},
@@ -10477,7 +10963,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 111,
+						"line": 115,
 						"column": 3
 					}
 				},
@@ -10504,7 +10990,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 276,
+						"line": 292,
 						"column": 9
 					}
 				},
@@ -10531,7 +11017,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 294,
+						"line": 310,
 						"column": 9
 					}
 				},
@@ -10558,7 +11044,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 200,
+						"line": 216,
 						"column": 3
 					}
 				},
@@ -10585,7 +11071,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 137,
+						"line": 141,
 						"column": 9
 					}
 				},
@@ -10612,7 +11098,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 273,
+						"line": 289,
 						"column": 3
 					}
 				},
@@ -10639,7 +11125,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 161,
+						"line": 174,
 						"column": 9
 					}
 				},
@@ -10666,7 +11152,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 265,
+						"line": 281,
 						"column": 9
 					}
 				},
@@ -10693,7 +11179,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 251,
+						"line": 267,
 						"column": 3
 					}
 				},
@@ -10720,10 +11206,37 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 191,
+						"line": 207,
 						"column": 9
 					}
 				},
+				{
+					id: "@awiki/dsh-plugin#awiki/updateIdentityServices",
+					service: "awiki",
+					namespace: "awiki",
+					method: "updateIdentityServices",
+					invocation: { kind: "direct" },
+					parameters: [{
+						name: "request",
+						wire: "request",
+						source: "json",
+						codec: {
+							mode: "strict",
+							typeSymbol: "@awiki/dsh-plugin/types#AwikiUpdateIdentityServicesRequest",
+							schema: _awiki_dsh_plugin_awiki_updateIdentityServices_parameter_0$schema
+						}
+					}],
+					result: {
+						mode: "strict",
+						typeSymbol: "@awiki/dsh-plugin/types#AwikiResult",
+						schema: _awiki_dsh_plugin_awiki_updateIdentityServices_result$schema
+					},
+					sourceLocation: {
+						"file": "packages/dsh-awiki/src/index.ts",
+						"line": 168,
+						"column": 3
+					}
+				},
 				{
 					id: "@awiki/dsh-plugin#awiki/updateIntegration",
 					service: "awiki",
@@ -10747,7 +11260,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 108,
+						"line": 112,
 						"column": 3
 					}
 				},
@@ -10774,7 +11287,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 197,
+						"line": 213,
 						"column": 3
 					}
 				}
@@ -10964,7 +11477,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		//#endregion
 		//#region lib/types/registration-policy.js
 		/** Registration presentation and Handle normalization; admission is owned by the server. */
-		const SHORT_HANDLE_INVITE_MESSAGE = "注册少于5位的handle需要使用邀请码，目前暂不支持自主注册。";
+		const SHORT_HANDLE_INVITE_MESSAGE = "此 Handle 注册需要邀请码，请输入后继续。";
 		//#endregion
 		//#region lib/types/client/otp-cooldown.js
 		/** Retain the server cooldown across panel remounts, without persisting OTPs. */
@@ -11678,8 +12191,15 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			const recoveryCooldown = useRecoveryOtpCooldown();
 			const [phone, setPhone] = useDraftState("identity:phone", "");
 			const [handle, setHandle] = useDraftState("identity:handle", "");
+			const [inviteCode, setInviteCode] = useDraftState("identity:inviteCode", "");
+			const entryInFlight = (0, react.useRef)(false);
+			const [entryPending, setEntryPending] = (0, react.useState)(false);
 			const [otp, setOtp] = useDraftState("identity:otp", "");
 			const [registrationOtpSent, setRegistrationOtpSent] = useDraftState("identity:registrationOtpSent", false, false);
+			const [didMethod, setDidMethod] = useDraftState("identity:didMethod", "wba", false);
+			const [pendingRegistration, setPendingRegistration] = useDraftState("identity:pendingRegistration", null, false);
+			const creationMethods = props.access?.creationMethods ?? ["wba"];
+			const canRegister = creationMethods.includes(didMethod) || pendingRegistration?.method === didMethod && pendingRegistration.fullHandle === handle.trim();
 			const [recoveryFactorContext, setRecoveryFactorContext] = useDraftState("identity:recoveryFactorContext", null, false);
 			const [notice, setNotice] = useDraftState("identity:notice", null, false);
 			const [error, setError] = useDraftState("identity:error", null, false);
@@ -11692,12 +12212,20 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			const [recoveryChoice, setRecoveryChoice] = useDraftState("identity:recoveryChoice", null, false);
 			const [recoveryRiskConfirmed, setRecoveryRiskConfirmed] = useDraftState("identity:recoveryRiskConfirmed", false, false);
 			const [recoveryEntryOpen, setRecoveryEntryOpen] = useDraftState("identity:recoveryEntryOpen", false, false);
-			const validRecoveryEntryOpen = recoveryEntryOpen && props.sessionStatus === "recovery-required";
+			const validRecoveryEntryOpen = recoveryEntryOpen && props.sessionStatus === "recovery-required" && props.access?.methodCapabilities?.handleRecovery !== false;
 			const recoveryConfirmationInFlight = (0, react.useRef)(false);
 			const [recoveryConfirming, setRecoveryConfirming] = (0, react.useState)(false);
 			const [joinCheck, setJoinCheck] = (0, react.useState)("loading");
 			const [joinProgress, setJoinProgress] = (0, react.useState)(null);
 			const [deviceRejoinHandle, setDeviceRejoinHandle] = useDraftState("identity:deviceRejoinHandle", null, false);
+			(0, react.useEffect)(() => {
+				if (!registrationOtpSent && pendingRegistration === null && creationMethods.length > 0 && !creationMethods.includes(didMethod)) setDidMethod(creationMethods.includes("wba") ? "wba" : creationMethods[0]);
+			}, [
+				props.access?.creationMethods,
+				registrationOtpSent,
+				pendingRegistration,
+				didMethod
+			]);
 			(0, react.useEffect)(() => {
 				if (retryDeadline === null) return;
 				const update = () => {
@@ -11722,6 +12250,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				setRegistrationConfirmation(null);
 				setShortHandleInviteNotice(false);
 				setOtp("");
+				setInviteCode("");
 				setRegistrationOtpSent(false);
 				setRecoveryFactorContext(null);
 				setRecoveryChoice(null);
@@ -11744,35 +12273,63 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			};
 			const requestRegistrationOtp = async () => {
 				setError(null);
-				const result = await props.sendRegistrationOtp({
-					handle: handle.trim(),
-					phone: phone.trim()
-				});
-				if (!result.ok) {
-					if (result.failureCode === "short-handle-invite-required") {
-						setNotice(null);
+				if (entryInFlight.current) return;
+				entryInFlight.current = true;
+				setEntryPending(true);
+				try {
+					const checked = await props.inspectIdentityAccess({
+						handle: handle.trim(),
+						phone: phone.trim(),
+						...inviteCode.trim() === "" ? {} : { inviteCode: inviteCode.trim() }
+					});
+					if (!checked.ok) return setError(checked.error);
+					if (checked.value.status === "unavailable") return setError("此 Handle 暂不可注册，请更换后重试。");
+					if (checked.value.status !== "existing" && checked.value.inviteRequired && checked.value.inviteStatus !== "valid") {
 						setShortHandleInviteNotice(true);
+						setNotice(null);
+						if (checked.value.inviteStatus === "invalid") setError("邀请码无效或不适用于当前账号，请检查后重试。");
 						return;
 					}
-					setError(result.error);
-					return;
+					if (checked.value.status !== "existing" && !canRegister) return setError("当前服务暂不接受所选方法的新注册。");
+					const admissionInvite = checked.value.status === "existing" ? "" : inviteCode.trim();
+					if (checked.value.status === "existing") {
+						setInviteCode("");
+						setShortHandleInviteNotice(false);
+					}
+					const result = await props.sendRegistrationOtp({
+						handle: handle.trim(),
+						phone: phone.trim(),
+						...didMethod === "web" ? { didMethod } : {},
+						...admissionInvite === "" ? {} : { inviteCode: admissionInvite }
+					});
+					if (!result.ok) {
+						if (result.failureCode === "short-handle-invite-required") {
+							setNotice(null);
+							setShortHandleInviteNotice(true);
+							return;
+						}
+						setError(result.error);
+						return;
+					}
+					const cooldownSeconds = Math.max(0, Math.ceil(result.value.retryAfterSeconds));
+					setRegistrationOtpSent(true);
+					setRetryDeadline(Date.now() + cooldownSeconds * 1e3);
+					setRetrySeconds(cooldownSeconds);
+					setNotice(`注册验证码已发送；${cooldownSeconds} 秒后可重新获取。`);
+				} finally {
+					entryInFlight.current = false;
+					setEntryPending(false);
 				}
-				const cooldownSeconds = Math.max(0, Math.ceil(result.value.retryAfterSeconds));
-				setRegistrationOtpSent(true);
-				setRetryDeadline(Date.now() + cooldownSeconds * 1e3);
-				setRetrySeconds(cooldownSeconds);
-				setNotice(`注册验证码已发送；${cooldownSeconds} 秒后可重新获取。`);
 			};
 			const requestIdentityOtp = async () => {
 				setError(null);
-				const result = await props.continueRecoveryForHandle?.(handle.trim());
+				const result = didMethod === "wba" ? await props.continueRecoveryForHandle?.(handle.trim()) : void 0;
 				if (result !== void 0 && !result.ok) return setError(result.error);
 				if (result?.ok && result.value) return;
-				setShortHandleInviteNotice(false);
 				await requestRegistrationOtp();
 			};
 			const completeRegistration = async () => {
-				if (!registrationOtpSent || registrationConfirmation === null || registrationInFlight.current || props.pending) return;
+				if (!canRegister || !registrationOtpSent || registrationConfirmation === null || registrationInFlight.current || props.pending) return;
 				registrationInFlight.current = true;
 				setRegistrationSubmitting(true);
 				setError(null);
@@ -11793,13 +12350,15 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 						setOtp("");
 						setJoinContext({
 							fullHandle: result.value.fullHandle,
-							phone: phone.trim()
+							phone: phone.trim(),
+							...result.value.methodCapabilities === void 0 ? {} : { methodCapabilities: result.value.methodCapabilities }
 						});
 						return;
 					}
 					setPhone("");
 					setHandle("");
 					setDeviceRejoinHandle(null);
+					setPendingRegistration(null);
 					resetIdentityEntry();
 				} catch {
 					setRegistrationConfirmation(null);
@@ -11814,7 +12373,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				const choice = props.access.choice;
 				setJoinContext(choice === null ? null : {
 					fullHandle: choice.fullHandle,
-					phone
+					phone,
+					...choice.methodCapabilities === void 0 ? {} : { methodCapabilities: choice.methodCapabilities }
 				});
 			}, [props.access]);
 			const beginJoin = async () => {
@@ -11983,7 +12543,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				setDeviceRejoinHandle(currentHandle);
 				resetIdentityEntry();
 			};
-			const signedOutRecoveryOpen = props.sessionStatus === "signed-out" && signedOutAlternative === "recover";
+			const signedOutRecoveryOpen = props.sessionStatus === "signed-out" && signedOutAlternative === "recover" && props.access?.methodCapabilities?.handleRecovery === true;
 			const revokedHandle = props.sessionStatus === "recovery-required" ? props.identity?.handle : void 0;
 			if (props.recoveryOperationId !== null && !signedOutRecoveryOpen) return (0, react_jsx_runtime.jsx)(Recovery, {
 				...props,
@@ -11996,6 +12556,18 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					requestDescription: "这个 Handle 已在另一台设备完成了更新恢复，当前设备的旧凭证因此失效。验证绑定手机号后即可继续使用本机数据。"
 				}
 			});
+			if (props.sessionStatus === "recovery-required" && props.access?.methodCapabilities?.handleRecovery === false) return (0, react_jsx_runtime.jsxs)(AwikiIdentityPage, { children: [(0, react_jsx_runtime.jsx)("p", {
+				role: "status",
+				children: "此身份不支持恢复。Web 首个管理员丢失后无法恢复管理能力；可使用仍有效的设备继续访问。"
+			}), (0, react_jsx_runtime.jsx)("button", {
+				type: "button",
+				className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.secondary,
+				disabled: props.accessLoading,
+				onClick: () => {
+					props.refreshIdentityAccess?.();
+				},
+				children: "重新检查身份状态"
+			})] });
 			if (!validRecoveryEntryOpen && (props.access === null && props.accessLoading || props.access === null && props.accessError)) return (0, react_jsx_runtime.jsxs)(AwikiIdentityPage, { children: [(0, react_jsx_runtime.jsx)("p", {
 				role: "status",
 				children: props.accessError ?? "正在确认本机身份操作…"
@@ -12214,13 +12786,17 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 						},
 						children: "加入新设备（推荐）"
 					}),
-					(0, react_jsx_runtime.jsx)("button", {
+					joinContext.methodCapabilities?.handleRecovery === true && (0, react_jsx_runtime.jsx)("button", {
 						type: "button",
 						className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.dangerLink,
 						disabled: props.pending,
 						onClick: chooseRecovery,
 						children: "恢复 Handle（会替换 DID）"
 					}),
+					joinContext.methodCapabilities?.method === "web" && (0, react_jsx_runtime.jsx)("p", {
+						className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.notice,
+						children: "Web 身份不支持恢复或管理权转移；首个管理员丢失后无法恢复管理能力。请使用已有管理设备批准加入。"
+					}),
 					(0, react_jsx_runtime.jsx)("button", {
 						type: "button",
 						className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.secondary,
@@ -12238,7 +12814,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				]
 			}) });
 			if (props.sessionStatus === "signed-out") {
-				if (signedOutAlternative === "recover") return (0, react_jsx_runtime.jsx)(Recovery, {
+				if (signedOutRecoveryOpen) return (0, react_jsx_runtime.jsx)(Recovery, {
 					...props,
 					onExit: exitRecovery,
 					onExitLabel: "返回本机身份"
@@ -12330,7 +12906,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 							role: "alert",
 							children: error
 						}),
-						loginFailed && (0, react_jsx_runtime.jsxs)("div", {
+						loginFailed && props.access?.methodCapabilities?.handleRecovery === true && (0, react_jsx_runtime.jsxs)("div", {
 							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.recoveryHelp,
 							children: [(0, react_jsx_runtime.jsx)("p", { children: "如果本机身份凭证已经损坏或不可用，可以验证原绑定手机号后恢复这个身份。" }), (0, react_jsx_runtime.jsx)("button", {
 								type: "button",
@@ -12360,7 +12936,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 						if (registrationOtpSent) setRegistrationConfirmation({
 							phone: phone.trim(),
 							handle: handle.trim(),
-							otp: otp.trim()
+							otp: otp.trim(),
+							...didMethod === "web" ? { didMethod } : {},
+							...inviteCode.trim() === "" ? {} : { inviteCode: inviteCode.trim() }
 						});
 						else requestIdentityOtp();
 					},
@@ -12373,15 +12951,59 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.headingGroup,
 							children: [(0, react_jsx_runtime.jsx)("h3", { children: registrationOtpSent ? "验证身份" : deviceRejoinHandle === null ? "进入 AWiki" : "重新加入设备" }), (0, react_jsx_runtime.jsx)("p", { children: registrationOtpSent ? "输入注册验证码。新 Handle 会创建身份，已有 Handle 会进入设备加入选择。" : deviceRejoinHandle === null ? "输入 Handle 和手机号继续。已有恢复进度会直接继续，无需重复获取验证码。" : "验证绑定手机号后，这台设备会以一把新密钥重新申请加入；本机消息数据不会清除。" })]
 						}),
+						!registrationOtpSent && (props.access?.pendingRegistrations?.length ?? 0) > 0 && (0, react_jsx_runtime.jsxs)("div", {
+							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.actionStack,
+							"aria-label": "未完成的注册",
+							children: [(0, react_jsx_runtime.jsx)("p", { children: "选择原注册继续；请重新输入手机号和有效验证码。" }), props.access?.pendingRegistrations?.filter((value) => value.verificationKind === "phone").map((value) => (0, react_jsx_runtime.jsxs)("button", {
+								type: "button",
+								className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.secondary,
+								disabled: entryPending || props.pending,
+								onClick: () => {
+									setPendingRegistration(value);
+									setHandle(value.fullHandle);
+									setDidMethod(value.method);
+									setOtp("");
+									setNotice("将继续原注册，保留同一个 DID。");
+								},
+								children: ["继续注册 ", value.fullHandle]
+							}, value.did))]
+						}),
+						(creationMethods.length > 1 || creationMethods.length === 1 && creationMethods[0] === "web") && (0, react_jsx_runtime.jsxs)("label", {
+							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.field,
+							children: ["身份方法", (0, react_jsx_runtime.jsx)("select", {
+								"aria-label": "身份方法",
+								value: didMethod,
+								disabled: entryPending || registrationOtpSent || props.pending,
+								onChange: (event) => {
+									setDidMethod(event.target.value);
+									setPendingRegistration(null);
+								},
+								children: creationMethods.map((method) => (0, react_jsx_runtime.jsx)("option", {
+									value: method,
+									children: method === "wba" ? "WBA（默认）" : "Web"
+								}, method))
+							})]
+						}),
+						didMethod === "web" && (0, react_jsx_runtime.jsx)("p", {
+							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.notice,
+							children: "Web 身份支持独立设备加入和撤销，不支持恢复或管理权转移。首个管理员丢失后无法恢复管理能力。"
+						}),
+						!canRegister && (0, react_jsx_runtime.jsx)("p", {
+							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.notice,
+							children: "当前服务暂不接受所选方法的新注册。可继续已保存的注册，或重新检查。"
+						}),
 						(0, react_jsx_runtime.jsxs)("label", {
 							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.field,
 							children: ["Handle", (0, react_jsx_runtime.jsx)("input", {
 								value: handle,
 								onChange: (event) => {
 									setHandle(event.target.value);
+									setPendingRegistration(null);
 									setShortHandleInviteNotice(false);
+									setInviteCode("");
+									setError(null);
 								},
-								readOnly: registrationOtpSent || deviceRejoinHandle !== null,
+								readOnly: entryPending || props.pending || registrationOtpSent || deviceRejoinHandle !== null,
 								autoComplete: "username",
 								placeholder: "例如 alice",
 								autoFocus: props.autoFocusHandle
@@ -12394,11 +13016,25 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 								onChange: (event) => {
 									setPhone(event.target.value);
 								},
-								readOnly: registrationOtpSent,
+								readOnly: entryPending || props.pending || registrationOtpSent,
 								type: "tel",
 								autoComplete: "tel"
 							})]
 						}),
+						shortHandleInviteNotice && (0, react_jsx_runtime.jsxs)("label", {
+							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.field,
+							children: ["邀请码", (0, react_jsx_runtime.jsx)("input", {
+								value: inviteCode,
+								onChange: (event) => {
+									setInviteCode(event.target.value);
+									setError(null);
+								},
+								readOnly: entryPending || props.pending || registrationOtpSent,
+								autoComplete: "off",
+								maxLength: 512,
+								placeholder: "请输入邀请码"
+							})]
+						}),
 						registrationOtpSent && (0, react_jsx_runtime.jsxs)("label", {
 							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.field,
 							children: ["注册验证码", (0, react_jsx_runtime.jsx)("input", {
@@ -12414,13 +13050,13 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 						(0, react_jsx_runtime.jsx)("button", {
 							type: "submit",
 							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.primary,
-							disabled: props.pending || props.accessLoading || handle.trim() === "" || phone.trim() === "" || registrationOtpSent && otp.trim() === "",
+							disabled: entryPending || props.pending || props.accessLoading || shortHandleInviteNotice && inviteCode.trim() === "" || handle.trim() === "" || phone.trim() === "" || registrationOtpSent && otp.trim() === "",
 							children: registrationOtpSent ? "继续" : "获取验证码"
 						}),
 						registrationOtpSent && (0, react_jsx_runtime.jsx)("button", {
 							type: "button",
 							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.linkButton,
-							disabled: props.pending || retrySeconds > 0,
+							disabled: entryPending || props.pending || retrySeconds > 0,
 							onClick: () => {
 								requestRegistrationOtp();
 							},
@@ -12429,7 +13065,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 						shortHandleInviteNotice && (0, react_jsx_runtime.jsx)("div", {
 							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.inviteNotice,
 							role: "alert",
-							children: "注册少于5位的handle需要使用邀请码，目前暂不支持自主注册。"
+							children: "此 Handle 注册需要邀请码，请输入后继续。"
 						}),
 						notice !== null && (0, react_jsx_runtime.jsx)("small", {
 							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.notice,
@@ -13294,7 +13930,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		function targetOf(conversation) {
 			return conversation.kind === "direct" ? {
 				kind: "direct",
-				peer: conversation.peerDid
+				conversationId: conversation.id
 			} : {
 				kind: "group",
 				group: conversation.groupDid
@@ -13792,14 +14428,20 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			async beginDeviceJoin() {
 				const generation = this.generation;
 				const result = await this.withPending("开始加入设备", () => call(() => this.remote.beginDeviceJoin()));
-				if (result.ok && this.current(generation)) this.publish({
-					...this.view,
-					identityAccess: {
-						choice: null,
-						joining: true,
-						recoveries: []
-					}
-				});
+				if (result.ok && this.current(generation)) {
+					this.recoveryRevision++;
+					this.accessRequest = void 0;
+					this.publish({
+						...this.view,
+						identityAccess: {
+							choice: null,
+							joining: true,
+							recoveries: []
+						},
+						accessLoading: false,
+						accessError: null
+					});
+				}
 				return result;
 			}
 			async getDeviceJoinStatus() {
@@ -13920,6 +14562,15 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					};
 				});
 			}
+			getIdentityServices() {
+				return call(() => this.remote.getIdentityServices());
+			}
+			updateIdentityServices(request) {
+				return this.withPending("更新身份服务", () => call(() => this.remote.updateIdentityServices(request)));
+			}
+			resumeIdentityServicesUpdate(request) {
+				return this.withPending("继续身份服务更新", () => call(() => this.remote.resumeIdentityServicesUpdate(request)));
+			}
 			refreshDeviceManagement() {
 				return call(() => this.remote.refreshDeviceManagement());
 			}
@@ -13935,6 +14586,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			revokeDevice(request) {
 				return this.withPending("撤销设备", () => call(() => this.remote.revokeDevice(request)));
 			}
+			retryDeviceManagement(request) {
+				return this.withPending("重试配置管理设备", () => call(() => this.remote.retryDeviceManagement(request)));
+			}
 			prepareRootTransfer(request) {
 				return this.withPending("准备授予管理权", () => call(() => this.remote.prepareRootTransfer(request)));
 			}
@@ -16942,6 +17596,201 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			"verificationIntro": "xQ4iKW_verificationIntro"
 		};
 		//#endregion
+		//#region lib/types/client/AwikiIdentityServices.js
+		/** Public services editor. Core owns authorization, protected fields and durable writes. */
+		const protectedTypes = /* @__PURE__ */ new Set([
+			"AgentDescription",
+			"ANPHandleService",
+			"ANPMessageService"
+		]);
+		function AwikiIdentityServices(props) {
+			const [snapshot, setSnapshot] = (0, react.useState)(null);
+			const [error, setError] = (0, react.useState)(null);
+			const [busy, setBusy] = (0, react.useState)(false);
+			const [editing, setEditing] = (0, react.useState)(null);
+			const [existingId, setExistingId] = (0, react.useState)(null);
+			const alive = (0, react.useRef)(false);
+			const writing = (0, react.useRef)(false);
+			const canEdit = snapshot?.canManage === true && !snapshot.pending && !busy;
+			const read = async () => {
+				const result = await props.getIdentityServices();
+				if (!alive.current) return;
+				if (result.ok) setSnapshot(result.value);
+				else {
+					setSnapshot(null);
+					setError(result.error);
+				}
+			};
+			(0, react.useEffect)(() => {
+				alive.current = true;
+				read();
+				return () => {
+					alive.current = false;
+				};
+			}, []);
+			const write = async (services) => {
+				if (writing.current || snapshot?.canManage !== true) return;
+				if (services !== void 0 && snapshot.pending) return;
+				writing.current = true;
+				setBusy(true);
+				setError(null);
+				try {
+					const result = services === void 0 ? await props.resumeIdentityServicesUpdate({ did: snapshot.did }) : await props.updateIdentityServices({
+						did: snapshot.did,
+						services
+					});
+					if (!alive.current) return;
+					if (result.ok) {
+						setSnapshot(result.value);
+						setEditing(null);
+					} else setError(result.error);
+					await read();
+				} finally {
+					writing.current = false;
+					if (alive.current) setBusy(false);
+				}
+			};
+			return (0, react_jsx_runtime.jsxs)("section", {
+				className: _dsh_awiki_css_AwikiDevices_module_css_default.section,
+				"aria-label": "身份服务",
+				children: [
+					(0, react_jsx_runtime.jsxs)("div", {
+						className: _dsh_awiki_css_AwikiDevices_module_css_default.sectionHeading,
+						children: [(0, react_jsx_runtime.jsx)("h4", { children: "身份服务" }), (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							disabled: busy,
+							onClick: () => {
+								read();
+							},
+							children: "重新检查服务"
+						})]
+					}),
+					snapshot?.pending && (0, react_jsx_runtime.jsxs)("div", {
+						className: _dsh_awiki_css_AwikiDevices_module_css_default.notice,
+						role: "status",
+						children: [
+							(0, react_jsx_runtime.jsx)("strong", { children: "服务更新尚未确认" }),
+							(0, react_jsx_runtime.jsx)("span", { children: "已保存原更新，关闭或重新打开页面不会重复提交。" }),
+							snapshot.canManage && (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								disabled: busy,
+								onClick: () => {
+									write();
+								},
+								children: "继续原服务更新"
+							})
+						]
+					}),
+					snapshot?.services.map((service) => (0, react_jsx_runtime.jsxs)("article", {
+						className: _dsh_awiki_css_AwikiDevices_module_css_default.card,
+						children: [
+							(0, react_jsx_runtime.jsx)("strong", { children: service.type }),
+							(0, react_jsx_runtime.jsx)("p", { children: service.id }),
+							(0, react_jsx_runtime.jsx)("p", { children: service.serviceEndpoint }),
+							protectedTypes.has(service.type) ? (0, react_jsx_runtime.jsx)("small", { children: "系统服务，只读" }) : canEdit && (0, react_jsx_runtime.jsxs)("div", {
+								className: _dsh_awiki_css_AwikiDevices_module_css_default.actions,
+								children: [(0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									onClick: () => {
+										setExistingId(service.id);
+										setEditing(service);
+									},
+									children: "编辑服务"
+								}), (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									onClick: () => {
+										write(snapshot.services.filter((value) => value.id !== service.id));
+									},
+									children: "删除服务"
+								})]
+							})
+						]
+					}, service.id)),
+					canEdit && (0, react_jsx_runtime.jsx)("button", {
+						type: "button",
+						onClick: () => {
+							setExistingId(null);
+							setEditing({
+								id: `${snapshot.did}#`,
+								type: "",
+								serviceEndpoint: ""
+							});
+						},
+						children: "添加服务"
+					}),
+					canEdit && editing !== null && (0, react_jsx_runtime.jsxs)("form", {
+						className: _dsh_awiki_css_AwikiDevices_module_css_default.card,
+						onSubmit: (event) => {
+							event.preventDefault();
+							const services = existingId === null ? [...snapshot.services, editing] : snapshot.services.map((value) => value.id === existingId ? editing : value);
+							write(services);
+						},
+						children: [
+							(0, react_jsx_runtime.jsxs)("label", {
+								className: _dsh_awiki_css_AwikiDevices_module_css_default.field,
+								children: ["服务标识", (0, react_jsx_runtime.jsx)("input", {
+									"aria-label": "服务标识",
+									value: editing.id,
+									readOnly: existingId !== null,
+									onChange: (event) => {
+										setEditing({
+											...editing,
+											id: event.target.value
+										});
+									},
+									required: true
+								})]
+							}),
+							(0, react_jsx_runtime.jsxs)("label", {
+								className: _dsh_awiki_css_AwikiDevices_module_css_default.field,
+								children: ["服务类型", (0, react_jsx_runtime.jsx)("input", {
+									"aria-label": "服务类型",
+									value: editing.type,
+									onChange: (event) => {
+										setEditing({
+											...editing,
+											type: event.target.value
+										});
+									},
+									required: true
+								})]
+							}),
+							(0, react_jsx_runtime.jsxs)("label", {
+								className: _dsh_awiki_css_AwikiDevices_module_css_default.field,
+								children: ["服务地址", (0, react_jsx_runtime.jsx)("input", {
+									"aria-label": "服务地址",
+									value: editing.serviceEndpoint,
+									onChange: (event) => {
+										setEditing({
+											...editing,
+											serviceEndpoint: event.target.value
+										});
+									},
+									required: true
+								})]
+							}),
+							(0, react_jsx_runtime.jsx)("button", {
+								type: "submit",
+								children: "保存服务"
+							}),
+							(0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								onClick: () => {
+									setEditing(null);
+								},
+								children: "取消编辑"
+							})
+						]
+					}),
+					error !== null && (0, react_jsx_runtime.jsx)("p", {
+						className: _dsh_awiki_css_AwikiDevices_module_css_default.error,
+						role: "alert",
+						children: error
+					})
+				]
+			});
+		}
+		//#endregion
 		//#region lib/types/client/AwikiDevices.js
 		/** Foreground-only ready-admin device management. SAS remains component-local. */
 		const requestStateLabels = {
@@ -17269,7 +18118,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 									onClick: () => {
 										approve();
 									},
-									children: "批准为 member"
+									children: "批准加入并自动配置管理权"
 								})
 							]
 						}),
@@ -17302,9 +18151,14 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 							role: "status",
 							children: ["管理能力已发送；目标设备完成接收后会显示为 admin。接受时间：", readableDate(rootReceipt.acceptedAt)]
 						}),
-						!snapshot.rootTransferSupported && (0, react_jsx_runtime.jsxs)("div", {
+						!snapshot.rootTransferSupported && (snapshot.methodCapabilities?.method === "web" || snapshot.devices.some((device) => device.role === "member" && device.provisioning === void 0)) && (0, react_jsx_runtime.jsxs)("div", {
 							className: _dsh_awiki_css_AwikiDevices_module_css_default.notice,
-							children: [(0, react_jsx_runtime.jsx)("strong", { children: "管理权转移暂不可用" }), (0, react_jsx_runtime.jsx)("span", { children: "该功能目前只能在配备 Intel 芯片的 Mac 上通过系统身份验证使用。" })]
+							children: [(0, react_jsx_runtime.jsx)("strong", { children: "管理权转移暂不可用" }), (0, react_jsx_runtime.jsx)("span", { children: snapshot.methodCapabilities?.method === "web" ? "Web 身份不支持恢复或管理权转移；首个管理员丢失后无法恢复管理能力。" : "该功能目前只能在配备 Intel 芯片的 Mac 上通过系统身份验证使用。" })]
+						}),
+						snapshot.methodCapabilities?.servicesUpdate === true && props.getIdentityServices !== void 0 && props.updateIdentityServices !== void 0 && props.resumeIdentityServicesUpdate !== void 0 && (0, react_jsx_runtime.jsx)(AwikiIdentityServices, {
+							getIdentityServices: props.getIdentityServices,
+							updateIdentityServices: props.updateIdentityServices,
+							resumeIdentityServicesUpdate: props.resumeIdentityServicesUpdate
 						}),
 						(0, react_jsx_runtime.jsxs)("section", {
 							className: _dsh_awiki_css_AwikiDevices_module_css_default.section,
@@ -17369,7 +18223,26 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 													})
 												]
 											}),
-											snapshot.rootTransferSupported && !device.isCurrent && device.status === "active" && device.role === "member" && !device.managementReady && (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+											device.provisioning !== void 0 && !device.managementReady && (0, react_jsx_runtime.jsxs)("div", {
+												role: "status",
+												children: [
+													device.provisioning.phase === "failed" ? "自动配置失败" : device.provisioning.phase === "waiting" ? "已发送，等待设备接收" : "正在自动配置管理权",
+													"（已尝试 ",
+													device.provisioning.attempts,
+													" 次）",
+													device.provisioning.requiresRejoin && (0, react_jsx_runtime.jsx)("p", { children: "管理权限配置已失效，请撤销此成员设备，再在该设备上退出本地身份（保留数据）后重新加入。" }),
+													device.provisioning.phase === "failed" && !device.provisioning.requiresRejoin && props.retryDeviceManagement !== void 0 && (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+														className: _dsh_awiki_css_AwikiDevices_module_css_default.button,
+														type: "button",
+														disabled: props.pending,
+														onClick: () => {
+															props.retryDeviceManagement?.({ deviceRef: device.deviceRef }).then((result) => result.ok ? refresh() : setError(result.error));
+														},
+														children: "重试自动配置"
+													})
+												]
+											}),
+											device.provisioning === void 0 && snapshot.rootTransferSupported && !device.isCurrent && device.status === "active" && device.role === "member" && !device.managementReady && (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
 												className: _dsh_awiki_css_AwikiDevices_module_css_default.button,
 												type: "button",
 												variant: "outline",
@@ -17571,13 +18444,17 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					active: managing,
 					pending: props.pending,
 					refreshDeviceManagement: props.refreshDeviceManagement,
+					...props.getIdentityServices === void 0 ? {} : { getIdentityServices: props.getIdentityServices },
+					...props.updateIdentityServices === void 0 ? {} : { updateIdentityServices: props.updateIdentityServices },
+					...props.resumeIdentityServicesUpdate === void 0 ? {} : { resumeIdentityServicesUpdate: props.resumeIdentityServicesUpdate },
 					startDeviceJoinVerification: props.startDeviceJoinVerification,
 					approveDeviceJoin: props.approveDeviceJoin,
 					rejectDeviceJoin: props.rejectDeviceJoin,
 					revokeDevice: props.revokeDevice,
+					retryDeviceManagement: props.retryDeviceManagement,
 					prepareRootTransfer: props.prepareRootTransfer,
 					confirmRootTransfer: props.confirmRootTransfer
-				})
+				}, props.identityKey)
 			})] });
 		}
 		//#endregion
@@ -20284,10 +21161,14 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					identityKey: view.identity?.did ?? null,
 					pending: view.pending !== null,
 					refreshDeviceManagement: props.refreshDeviceManagement,
+					...props.getIdentityServices === void 0 ? {} : { getIdentityServices: props.getIdentityServices },
+					...props.updateIdentityServices === void 0 ? {} : { updateIdentityServices: props.updateIdentityServices },
+					...props.resumeIdentityServicesUpdate === void 0 ? {} : { resumeIdentityServicesUpdate: props.resumeIdentityServicesUpdate },
 					startDeviceJoinVerification: props.startDeviceJoinVerification,
 					approveDeviceJoin: props.approveDeviceJoin,
 					rejectDeviceJoin: props.rejectDeviceJoin,
 					revokeDevice: props.revokeDevice,
+					retryDeviceManagement: props.retryDeviceManagement,
 					prepareRootTransfer: props.prepareRootTransfer,
 					confirmRootTransfer: props.confirmRootTransfer
 				}),
@@ -20853,6 +21734,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		function AwikiUpdates(props) {
 			const { snapshot, t } = props;
 			const desktop = snapshot.desktop;
+			const scopedDesktop = desktop?.schemaVersion === 2 && !snapshot.value.switching && desktop.tenantId === snapshot.value.activeTenantId && desktop.tenantGeneration === snapshot.value.generation && desktop.policyOrigin === snapshot.value.tenants.find((tenant) => tenant.tenantId === snapshot.value.activeTenantId)?.backendBaseUrl;
 			const busy = snapshot.updateStatus === "loading" || snapshot.desktopStatus === "loading";
 			return (0, react_jsx_runtime.jsxs)("div", {
 				className: _dsh_awiki_css_AwikiSettingsSection_module_css_default.panel,
@@ -20884,9 +21766,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 							(0, react_jsx_runtime.jsx)("p", {
 								className: _dsh_awiki_css_AwikiSettingsSection_module_css_default.description,
 								role: "status",
-								children: t(snapshot.desktopStatus === "unavailable" || desktop.state === "failed" ? "updateFailed" : desktop.state === "checking" || snapshot.desktopStatus === "loading" ? "updateLoading" : desktop.state === "unchecked" ? "updateUnchecked" : desktop.noRelease ? "desktopNoRelease" : desktop.updateAvailable ? "updateAvailable" : "updateLatest", { version: desktop.latestVersion })
+								children: t(desktop.schemaVersion === 1 ? "desktopLegacyUpdate" : snapshot.value.switching ? "tenantSwitching" : desktop.state === "unavailable" ? "updateNoPolicy" : snapshot.desktopStatus === "unavailable" || desktop.state === "failed" ? "updateFailed" : desktop.state === "checking" || snapshot.desktopStatus === "loading" ? "updateLoading" : desktop.state === "unchecked" ? "updateUnchecked" : desktop.noRelease ? "desktopNoRelease" : desktop.updateAvailable ? "updateAvailable" : "updateLatest", { version: desktop.latestVersion })
 							}),
-							desktop.latestVersion !== void 0 && !desktop.noRelease && (0, react_jsx_runtime.jsx)("p", {
+							scopedDesktop && desktop.updateAvailable && desktop.latestVersion !== void 0 && !desktop.noRelease && (0, react_jsx_runtime.jsx)("p", {
 								className: _dsh_awiki_css_AwikiSettingsSection_module_css_default.description,
 								children: t("updateRecommended", { version: desktop.latestVersion })
 							}),
@@ -20898,16 +21780,15 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 								className: _dsh_awiki_css_AwikiSettingsSection_module_css_default.description,
 								children: t("desktopInstallHelp")
 							}),
-							(0, react_jsx_runtime.jsx)("a", {
+							scopedDesktop && desktop.downloadPageUrl !== void 0 && (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [(0, react_jsx_runtime.jsx)("a", {
 								href: desktop.downloadPageUrl,
 								target: "_blank",
 								rel: "noopener noreferrer",
 								children: t("desktopDownloadPage")
-							}),
-							(0, react_jsx_runtime.jsx)("code", {
+							}), (0, react_jsx_runtime.jsx)("code", {
 								className: _dsh_awiki_css_AwikiSettingsSection_module_css_default.updateCommand,
 								children: desktop.downloadPageUrl
-							})
+							})] })
 						]
 					}),
 					(0, react_jsx_runtime.jsx)(PluginUpdate, { ...props }, `${snapshot.value.activeTenantId}:${snapshot.value.generation}:${snapshot.update?.upgradeCommand ?? ""}:${desktop?.distributionId ?? ""}`)
@@ -20917,15 +21798,16 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		function PluginUpdate({ snapshot, t }) {
 			const [copyState, setCopyState] = (0, react.useState)("idle");
 			const tenant = snapshot.value.tenants.find((value) => value.tenantId === snapshot.value.activeTenantId);
-			const update = snapshot.update?.tenantId === snapshot.value.activeTenantId ? snapshot.update : void 0;
+			const update = snapshot.update?.tenantId === snapshot.value.activeTenantId && snapshot.update.tenantGeneration === snapshot.value.generation ? snapshot.update : void 0;
 			const desktop = snapshot.desktop;
-			const command = desktop === void 0 ? update?.upgradeCommand?.replace(/^dsh plugin add /u, "dsh plugin --profile YOUR_PROFILE add ") : update?.upgradeCommand;
+			const isDesktop = desktop !== void 0 || snapshot.desktopPresent === true;
+			const command = !isDesktop && snapshot.desktopStatus === "ready" ? update?.upgradeCommand?.replace(/^dsh plugin add /u, "dsh plugin --profile YOUR_PROFILE add ") : void 0;
 			const switching = snapshot.value.switching;
 			const state = update?.checkState ?? (update === void 0 ? "unchecked" : update.offline ? "failed" : update.policyUnavailable ? "unavailable" : "ready");
 			let desktopResolves = false;
 			try {
 				const bundled = desktop?.bundledVersions;
-				desktopResolves = desktop?.updateAvailable === true && bundled !== void 0 && update?.recommendedPluginVersion !== void 0 && compareVersions(bundled.plugin, update.recommendedPluginVersion) >= 0 && (update.currentModelProxyVersion === void 0 || update.recommendedModelProxyVersion !== void 0 && bundled.modelProxy !== void 0 && compareVersions(bundled.modelProxy, update.recommendedModelProxyVersion) >= 0);
+				desktopResolves = !switching && desktop?.schemaVersion === 2 && desktop.tenantId === snapshot.value.activeTenantId && desktop.tenantGeneration === snapshot.value.generation && desktop.policyOrigin === tenant?.backendBaseUrl && desktop.updateAvailable === true && bundled !== void 0 && update?.recommendedPluginVersion !== void 0 && compareVersions(bundled.plugin, update.recommendedPluginVersion) >= 0 && (update.currentModelProxyVersion === void 0 || update.recommendedModelProxyVersion !== void 0 && bundled.modelProxy !== void 0 && compareVersions(bundled.modelProxy, update.recommendedModelProxyVersion) >= 0);
 			} catch {}
 			const copy = async () => {
 				if (command === void 0 || switching) return;
@@ -20949,7 +21831,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					}),
 					(0, react_jsx_runtime.jsx)("p", {
 						className: _dsh_awiki_css_AwikiSettingsSection_module_css_default.description,
-						children: t("updateCurrent", { version: update?.currentPluginVersion ?? "0.3.11" })
+						children: t("updateCurrent", { version: update?.currentPluginVersion ?? "0.3.16" })
 					}),
 					update !== void 0 && (0, react_jsx_runtime.jsx)(react_jsx_runtime.Fragment, { children: update.currentModelProxyVersion !== void 0 && (0, react_jsx_runtime.jsx)("p", {
 						className: _dsh_awiki_css_AwikiSettingsSection_module_css_default.description,
@@ -20986,13 +21868,13 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 						className: _dsh_awiki_css_AwikiSettingsSection_module_css_default.description,
 						children: t("updateCached")
 					}),
-					desktop !== void 0 && (0, react_jsx_runtime.jsx)("p", {
+					isDesktop && (0, react_jsx_runtime.jsx)("p", {
 						className: _dsh_awiki_css_AwikiSettingsSection_module_css_default.description,
 						children: t(desktopResolves ? "desktopResolvesPlugin" : "desktopPluginHelp")
 					}),
-					state === "ready" && update?.updateAvailable && command === void 0 && (0, react_jsx_runtime.jsx)("p", {
+					!isDesktop && state === "ready" && update?.updateAvailable && command === void 0 && (0, react_jsx_runtime.jsx)("p", {
 						className: _dsh_awiki_css_AwikiSettingsSection_module_css_default.description,
-						children: t("updateNoCommand")
+						children: t(update.upgradeBlockedReason === "host-incompatible" ? "updateHostRequired" : update.upgradeBlockedReason === "identity-incompatible" ? "updateIdentityIncompatible" : "updateNoCommand")
 					}),
 					command !== void 0 && !switching && (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
 						(0, react_jsx_runtime.jsx)("code", {
@@ -21472,13 +22354,17 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 								active: true,
 								pending: awiki.pending !== null,
 								refreshDeviceManagement: props.refreshDeviceManagement,
+								...props.getIdentityServices === void 0 ? {} : { getIdentityServices: props.getIdentityServices },
+								...props.updateIdentityServices === void 0 ? {} : { updateIdentityServices: props.updateIdentityServices },
+								...props.resumeIdentityServicesUpdate === void 0 ? {} : { resumeIdentityServicesUpdate: props.resumeIdentityServicesUpdate },
 								startDeviceJoinVerification: props.startDeviceJoinVerification,
 								approveDeviceJoin: props.approveDeviceJoin,
 								rejectDeviceJoin: props.rejectDeviceJoin,
 								revokeDevice: props.revokeDevice,
+								retryDeviceManagement: props.retryDeviceManagement,
 								prepareRootTransfer: props.prepareRootTransfer,
 								confirmRootTransfer: props.confirmRootTransfer
-							}) : (0, react_jsx_runtime.jsx)("p", {
+							}, `${tenantSnapshot.status === "ready" ? `${tenantSnapshot.value.activeTenantId}:${tenantSnapshot.value.generation}` : "unavailable"}:${awiki.identity?.did ?? "none"}`) : (0, react_jsx_runtime.jsx)("p", {
 								className: _dsh_awiki_css_AwikiSettingsSection_module_css_default.notice,
 								children: props.t("devicesUnavailable")
 							})),
@@ -22726,7 +23612,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			desktopNoRelease: "暂未发布适用于当前发行通道的更新。",
 			updateAvailable: "有可用更新。",
 			updateRequired: "当前组件版本不满足服务要求，请升级或切换服务。",
-			updateNoCommand: "该服务暂未提供可用的独立插件升级命令。",
+			updateNoCommand: "当前租户未提供完整的安装兼容信息，请查看安装说明。",
+			updateHostRequired: "当前 DSH 宿主与推荐插件不兼容，请先按安装说明升级 DSH。",
+			updateIdentityIncompatible: "当前 Identity 插件与推荐组合不兼容，请查看安装说明；不会自动降级。",
+			desktopLegacyUpdate: "当前桌面版不支持按租户检查更新，请从当前租户的网站获取新版安装包。",
 			updateCopied: "已复制升级命令。",
 			updateCopyFailed: "复制失败，请选中上方命令手动复制。",
 			updateGuide: "查看发布与安装说明",
@@ -22735,7 +23624,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			desktopUpdateTitle: "DSH Desktop · AWiki",
 			desktopDownloadPage: "前往桌面版下载页面",
 			desktopInstallHelp: "选择适合电脑的完整安装包，完成安装后重新打开应用。",
-			desktopPluginHelp: "桌面用户可前往上方下载页面查看完整桌面版；插件兼容要求由当前服务决定。",
+			desktopPluginHelp: "桌面版通过完整安装包升级内置组件。当前租户未提供能够满足推荐组件要求的整包更新时，请等待兼容版本。",
 			desktopResolvesPlugin: "此桌面更新包含满足当前服务推荐版本要求的插件组件。",
 			updateModelRestricted: "当前模型组件低于最低支持版本 {minimum}，AWiki 模型服务暂不可用。",
 			updateTitle: "插件更新",
@@ -22847,7 +23736,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			desktopNoRelease: "No release is currently available for this channel.",
 			updateAvailable: "An update is available.",
 			updateRequired: "Your component version is unsupported. Update or switch services.",
-			updateNoCommand: "This service has not provided an independent plugin upgrade command.",
+			updateNoCommand: "This tenant has not provided complete installation compatibility information. Read the installation guide.",
+			updateHostRequired: "The recommended plugin requires a different DSH host. Upgrade DSH using the installation guide first.",
+			updateIdentityIncompatible: "The installed Identity plugin is incompatible with the recommended combination. Read the installation guide; no downgrade is performed.",
+			desktopLegacyUpdate: "This Desktop version does not support tenant-scoped updates. Get a newer installer from your current tenant’s website.",
 			updateCopied: "Upgrade command copied.",
 			updateCopyFailed: "Copy failed. Select the command above and copy it manually.",
 			updateGuide: "Release and installation guide",
@@ -22856,7 +23748,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			desktopUpdateTitle: "DSH Desktop · AWiki",
 			desktopDownloadPage: "Visit Desktop Download Page",
 			desktopInstallHelp: "Choose the full installer for your computer, install it, then reopen the app.",
-			desktopPluginHelp: "Desktop users can visit the download page above. Plugin requirements belong to the current service.",
+			desktopPluginHelp: "Upgrade bundled components using a complete Desktop installer. If this tenant has no suitable installer, wait for a compatible release.",
 			desktopResolvesPlugin: "This Desktop update includes components meeting the current service’s recommended versions.",
 			updateModelRestricted: "The model component is below the minimum version {minimum}; the AWiki model service is unavailable.",
 			updateTitle: "Plugin updates",
@@ -22902,18 +23794,34 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		function decodeDesktopDistribution(value) {
 			if (typeof value !== "object" || value === null) return void 0;
 			const view = value;
-			if (view.schemaVersion !== 1 || view.distributionId !== "awiki-dsh-desktop" || typeof view.currentVersion !== "string" || view.channel !== "stable" && view.channel !== "prerelease" || typeof view.downloadPageUrl !== "string" || ![
+			if (view.schemaVersion !== 1 && view.schemaVersion !== 2 || view.distributionId !== "awiki-dsh-desktop" || typeof view.currentVersion !== "string" || view.channel !== "stable" && view.channel !== "prerelease" || view.downloadPageUrl !== void 0 && typeof view.downloadPageUrl !== "string" || ![
 				"unchecked",
 				"checking",
 				"ready",
-				"failed"
+				"failed",
+				"unavailable"
 			].includes(String(view.state)) || typeof view.updateAvailable !== "boolean" || typeof view.usedCache !== "boolean" || view.latestVersion !== void 0 && typeof view.latestVersion !== "string" || view.checkedAt !== void 0 && typeof view.checkedAt !== "string" || view.noRelease !== void 0 && typeof view.noRelease !== "boolean") return void 0;
 			try {
 				assertVersion(view.currentVersion);
+				if (view.schemaVersion === 1) return {
+					schemaVersion: 1,
+					distributionId: "awiki-dsh-desktop",
+					currentVersion: view.currentVersion,
+					channel: view.channel,
+					state: "unavailable",
+					updateAvailable: false,
+					usedCache: false
+				};
+				const hasTenant = view.tenantId !== void 0 || view.policyOrigin !== void 0 || view.tenantGeneration !== void 0;
+				if (hasTenant && (typeof view.tenantId !== "string" || view.tenantId.length === 0 || typeof view.policyOrigin !== "string" || new URL(view.policyOrigin).origin !== view.policyOrigin || new URL(view.policyOrigin).protocol !== "https:" || !Number.isSafeInteger(view.tenantGeneration) || view.tenantGeneration < 0)) return void 0;
+				if (!hasTenant && view.state !== "unavailable") return void 0;
+				if (view.policyRevision !== void 0 && (!Number.isSafeInteger(view.policyRevision) || view.policyRevision < 1)) return void 0;
 				if (view.latestVersion !== void 0) assertVersion(view.latestVersion);
 				if (view.checkedAt !== void 0 && !Number.isFinite(Date.parse(view.checkedAt))) return void 0;
-				const url = new URL(view.downloadPageUrl);
-				if (url.protocol !== "https:" || url.username !== "" || url.password !== "") return void 0;
+				if (typeof view.downloadPageUrl === "string") {
+					const url = new URL(view.downloadPageUrl);
+					if (url.protocol !== "https:" || url.username !== "" || url.password !== "" || url.origin !== view.policyOrigin) return void 0;
+				}
 			} catch {
 				return;
 			}
@@ -22934,11 +23842,17 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				};
 			}
 			return {
-				schemaVersion: 1,
+				schemaVersion: 2,
 				distributionId: "awiki-dsh-desktop",
 				currentVersion: view.currentVersion,
 				channel: view.channel,
-				downloadPageUrl: view.downloadPageUrl,
+				...typeof view.downloadPageUrl === "string" ? { downloadPageUrl: view.downloadPageUrl } : {},
+				...typeof view.tenantId === "string" ? {
+					tenantId: view.tenantId,
+					policyOrigin: view.policyOrigin,
+					tenantGeneration: view.tenantGeneration
+				} : {},
+				...typeof view.policyRevision === "number" ? { policyRevision: view.policyRevision } : {},
 				state: view.state,
 				updateAvailable: view.updateAvailable,
 				usedCache: view.usedCache,
@@ -23060,6 +23974,11 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				"failed"
 			].includes(String(value.checkState))) return void 0;
 			if (value.updateAvailable !== void 0 && typeof value.updateAvailable !== "boolean") return void 0;
+			if (value.upgradeBlockedReason !== void 0 && ![
+				"installation-unverified",
+				"host-incompatible",
+				"identity-incompatible"
+			].includes(String(value.upgradeBlockedReason))) return void 0;
 			return value;
 		}
 		//#endregion
@@ -23108,7 +24027,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				this.tenantSnapshot = {
 					status: connection.isLoopback ? "loading" : "unavailable",
 					value: INITIAL_TENANTS,
-					updateStatus: connection.isLoopback ? "loading" : "unavailable"
+					updateStatus: connection.isLoopback ? "loading" : "unavailable",
+					desktopStatus: connection.isLoopback ? "loading" : "unavailable"
 				};
 				this.disposeGeneration = connection.isLoopback ? connection.generation.subscribe(() => {
 					this.load();
@@ -23190,14 +24110,19 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					const value = result.ok ? decodeAwikiTenantRpcView(result.value) : void 0;
 					if (value === void 0) throw new Error("AWiki tenant catalog is unavailable");
 					const changed = value.activeTenantId !== this.tenantSnapshot.value.activeTenantId || value.generation !== this.tenantSnapshot.value.generation;
-					if (changed) this.updateRequestVersion++;
+					if (changed) {
+						this.updateRequestVersion++;
+						this.desktopRequestVersion++;
+					}
 					this.publishTenants({
 						...this.tenantSnapshot,
 						status: "ready",
 						value,
 						...changed ? {
 							update: void 0,
-							updateStatus: "loading"
+							updateStatus: "loading",
+							desktop: void 0,
+							desktopStatus: "loading"
 						} : {}
 					});
 				} catch {
@@ -23235,7 +24160,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				}
 			}
 			async loadDesktopUpdate(refresh = false) {
-				if (!this.connection.isLoopback || this.disposed) return;
+				if (!this.connection.isLoopback || this.disposed || this.tenantSnapshot.value.switching) return;
+				const tenantId = this.tenantSnapshot.value.activeTenantId;
+				const generation = this.tenantSnapshot.value.generation;
 				const request = ++this.desktopRequestVersion;
 				if (refresh) this.publishTenants({
 					...this.tenantSnapshot,
@@ -23243,14 +24170,19 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				});
 				try {
 					const result = await this.connection.rpc.call(AWIKI_SETTINGS_RPC_CHANNEL, refresh ? AWIKI_SETTINGS_RPC_ENDPOINTS.refreshDesktopUpdate : AWIKI_SETTINGS_RPC_ENDPOINTS.describeDesktopUpdate, {}, this.abort.signal);
-					if (this.disposed || request !== this.desktopRequestVersion) return;
+					if (this.disposed || request !== this.desktopRequestVersion || tenantId !== this.tenantSnapshot.value.activeTenantId || generation !== this.tenantSnapshot.value.generation) return;
 					if (!result.ok) throw new Error("Desktop update service unavailable");
 					const desktop = result.value === null ? void 0 : decodeDesktopDistribution(result.value);
 					if (result.value !== null && desktop === void 0) throw new Error("Invalid Desktop update response");
+					if (desktop?.schemaVersion === 2 && desktop.tenantId !== void 0) {
+						const tenant = this.tenantSnapshot.value.tenants.find((value) => value.tenantId === tenantId);
+						if (desktop.tenantId !== tenantId || desktop.tenantGeneration !== generation || desktop.policyOrigin !== tenant?.backendBaseUrl) throw new Error("Desktop update scope mismatch");
+					}
 					this.publishTenants({
 						...this.tenantSnapshot,
 						desktopStatus: "ready",
-						desktop
+						desktop,
+						desktopPresent: desktop !== void 0
 					});
 				} catch {
 					if (!this.disposed && request === this.desktopRequestVersion) this.publishTenants({
@@ -23351,12 +24283,15 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				if (switching) {
 					this.updateRequestVersion++;
 					this.tenantRequestVersion++;
+					this.desktopRequestVersion++;
 				}
 				this.publishTenants({
 					...this.tenantSnapshot,
 					...switching ? {
 						update: void 0,
-						updateStatus: "loading"
+						updateStatus: "loading",
+						desktop: void 0,
+						desktopStatus: "loading"
 					} : {},
 					value: {
 						...this.tenantSnapshot.value,
@@ -23376,15 +24311,15 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 						value
 					});
 					if (switching) {
-						await this.loadUpdatePolicy();
-						await this.loadUpdatePolicy(true);
+						await Promise.all([this.loadUpdatePolicy(), this.loadDesktopUpdate()]);
+						await Promise.all([this.loadUpdatePolicy(true), this.loadDesktopUpdate(true)]);
 					}
 				} catch (error) {
 					if (!this.disposed) {
 						await this.loadTenants();
 						if (switching) {
-							await this.loadUpdatePolicy();
-							this.loadUpdatePolicy(true);
+							await Promise.all([this.loadUpdatePolicy(), this.loadDesktopUpdate()]);
+							this.refreshUpdatePolicy();
 						}
 					}
 					throw error;
@@ -23467,10 +24402,14 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 							beginRecoveryFromDeviceJoin: (request) => awiki.beginRecoveryFromDeviceJoin(request),
 							retireDeviceIdentityForRejoin: () => awiki.retireDeviceIdentityForRejoin(),
 							refreshDeviceManagement: () => awiki.refreshDeviceManagement(),
+							getIdentityServices: () => awiki.getIdentityServices(),
+							updateIdentityServices: (request) => awiki.updateIdentityServices(request),
+							resumeIdentityServicesUpdate: (request) => awiki.resumeIdentityServicesUpdate(request),
 							startDeviceJoinVerification: (request) => awiki.startDeviceJoinVerification(request),
 							approveDeviceJoin: (request) => awiki.approveDeviceJoin(request),
 							rejectDeviceJoin: (request) => awiki.rejectDeviceJoin(request),
 							revokeDevice: (request) => awiki.revokeDevice(request),
+							retryDeviceManagement: (request) => awiki.retryDeviceManagement(request),
 							prepareRootTransfer: (request) => awiki.prepareRootTransfer(request),
 							confirmRootTransfer: (request) => awiki.confirmRootTransfer(request),
 							updateDisplayName: (displayName) => awiki.updateDisplayName(displayName),
@@ -23544,10 +24483,14 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					drafts: awiki.drafts,
 					loadAwiki: () => awiki.open(),
 					refreshDeviceManagement: () => awiki.refreshDeviceManagement(),
+					getIdentityServices: () => awiki.getIdentityServices(),
+					updateIdentityServices: (request) => awiki.updateIdentityServices(request),
+					resumeIdentityServicesUpdate: (request) => awiki.resumeIdentityServicesUpdate(request),
 					startDeviceJoinVerification: (request) => awiki.startDeviceJoinVerification(request),
 					approveDeviceJoin: (request) => awiki.approveDeviceJoin(request),
 					rejectDeviceJoin: (request) => awiki.rejectDeviceJoin(request),
 					revokeDevice: (request) => awiki.revokeDevice(request),
+					retryDeviceManagement: (request) => awiki.retryDeviceManagement(request),
 					prepareRootTransfer: (request) => awiki.prepareRootTransfer(request),
 					confirmRootTransfer: (request) => awiki.confirmRootTransfer(request),
 					loadIntegration: async () => {