@awiki/dsh-plugin 0.3.12 → 0.3.17

package/lib/client.js

@@ -4165,10 +4165,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				"previousDid": intersection(string(), unknown()).readonly().optional(),
 				"currentDid": intersection(string(), unknown()).readonly(),
 				"phase": union([
+					literal("remote_committed"),
 					literal("awaiting_factor"),
 					literal("ready_to_commit"),
 					literal("remote_outcome_unknown"),
-					literal("remote_committed"),
 					literal("identity_transition_pending"),
 					literal("applied"),
 					literal("quarantined_key_unavailable")
@@ -5213,10 +5213,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				"previousDid": intersection(string(), unknown()).readonly().optional(),
 				"currentDid": intersection(string(), unknown()).readonly(),
 				"phase": union([
+					literal("remote_committed"),
 					literal("awaiting_factor"),
 					literal("ready_to_commit"),
 					literal("remote_outcome_unknown"),
-					literal("remote_committed"),
 					literal("identity_transition_pending"),
 					literal("applied"),
 					literal("quarantined_key_unavailable")
@@ -5892,11 +5892,38 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		}), object({
 			"ok": literal(true).readonly(),
 			"value": object({
+				"creationMethods": array(union([literal("wba"), literal("web")])).readonly().optional(),
+				"pendingRegistrations": array(object({
+					"did": string().readonly(),
+					"fullHandle": string().readonly(),
+					"method": union([literal("wba"), literal("web")]).readonly(),
+					"displayName": string().readonly(),
+					"verificationKind": string().readonly(),
+					"phase": union([
+						literal("prepared"),
+						literal("remote_committed"),
+						literal("local_committed")
+					]).readonly()
+				})).readonly().optional(),
+				"methodCapabilities": object({
+					"method": union([literal("wba"), literal("web")]).readonly(),
+					"handleRecovery": boolean().readonly(),
+					"rootImport": boolean().readonly(),
+					"rootTransfer": boolean().readonly(),
+					"servicesUpdate": boolean().readonly()
+				}).readonly().optional(),
 				"choice": union([literal(null), object({
 					"status": literal("join-required").readonly(),
 					"fullHandle": intersection(string(), unknown()).readonly(),
 					"mode": union([literal("ordinary"), literal("handle-recovery-rebind")]).readonly(),
-					"requiresUserPresence": boolean().readonly()
+					"requiresUserPresence": boolean().readonly(),
+					"methodCapabilities": object({
+						"method": union([literal("wba"), literal("web")]).readonly(),
+						"handleRecovery": boolean().readonly(),
+						"rootImport": boolean().readonly(),
+						"rootTransfer": boolean().readonly(),
+						"servicesUpdate": boolean().readonly()
+					}).readonly().optional()
 				})]).readonly(),
 				"joining": boolean().readonly(),
 				"recoveries": array(object({
@@ -5905,6 +5932,83 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				})).readonly()
 			}).readonly()
 		})]);
+		const _awiki_dsh_plugin_awiki_getIdentityServices_result$schema = union([object({
+			"ok": literal(false).readonly(),
+			"error": object({
+				"code": union([
+					literal("client-version-unsupported"),
+					literal("not-registered"),
+					literal("signed-out"),
+					literal("already-registered"),
+					literal("invalid-request"),
+					literal("invalid-otp"),
+					literal("challenge-expired"),
+					literal("handle-unavailable"),
+					literal("short-handle-invite-required"),
+					literal("not-found"),
+					literal("forbidden"),
+					literal("device-rejoin-required"),
+					literal("identity-recovery-required"),
+					literal("conflict"),
+					literal("state-in-use"),
+					literal("rate-limited"),
+					literal("group-membership-required"),
+					literal("group-identity-stale"),
+					literal("attachment-too-large"),
+					literal("summary-unavailable"),
+					literal("summary-timeout"),
+					literal("summary-cancelled"),
+					literal("summary-invalid-output"),
+					literal("summary-failed"),
+					literal("delivery-unknown"),
+					literal("network"),
+					literal("remote")
+				]).readonly(),
+				"message": string().readonly(),
+				"mailRecoveryObservability": object({
+					"current_principal_matches_recovery": boolean().readonly(),
+					"request_generation_classification": union([literal("current"), literal("replaced")]).readonly(),
+					"mail_ingress_classification": union([
+						literal("reached"),
+						literal("not_reached"),
+						literal("unknown")
+					]).readonly(),
+					"auth_status_class": union([
+						literal("unknown"),
+						literal("accepted"),
+						literal("rejected"),
+						literal("dependency_unavailable")
+					]).readonly(),
+					"auth_stable_machine_code": string().readonly().optional(),
+					"retryable": boolean().readonly(),
+					"mail_closed_classification": union([
+						literal("unknown"),
+						literal("dependency_unavailable"),
+						literal("success"),
+						literal("authentication_rejected"),
+						literal("no_active_handle"),
+						literal("multiple_active_handles"),
+						literal("no_mailbox"),
+						literal("owner_conflict")
+					]).readonly()
+				}).readonly().optional()
+			}).readonly()
+		}), object({
+			"ok": literal(true).readonly(),
+			"value": object({
+				"did": string().readonly(),
+				"canManage": boolean().readonly(),
+				"pending": boolean().readonly(),
+				"services": array(object({
+					"id": string().readonly(),
+					"type": string().readonly(),
+					"serviceEndpoint": string().readonly(),
+					"serviceDid": string().readonly().optional(),
+					"profiles": array(string()).readonly().optional(),
+					"securityProfiles": array(string()).readonly().optional()
+				})).readonly()
+			}).readonly()
+		})]);
 		const _awiki_dsh_plugin_awiki_getIntegration_result$schema = union([object({
 			"ok": literal(false).readonly(),
 			"error": object({
@@ -6275,10 +6379,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				"previousDid": intersection(string(), unknown()).readonly().optional(),
 				"currentDid": intersection(string(), unknown()).readonly(),
 				"phase": union([
+					literal("remote_committed"),
 					literal("awaiting_factor"),
 					literal("ready_to_commit"),
 					literal("remote_outcome_unknown"),
-					literal("remote_committed"),
 					literal("identity_transition_pending"),
 					literal("applied"),
 					literal("quarantined_key_unavailable")
@@ -6403,7 +6507,11 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				})
 			]).readonly()
 		})]);
-		const _awiki_dsh_plugin_awiki_inspectIdentityAccess_parameter_0$schema = object({ "handle": string().readonly() });
+		const _awiki_dsh_plugin_awiki_inspectIdentityAccess_parameter_0$schema = object({
+			"inviteCode": string().readonly().optional(),
+			"phone": string().readonly().optional(),
+			"handle": string().readonly()
+		});
 		const _awiki_dsh_plugin_awiki_inspectIdentityAccess_result$schema = union([object({
 			"ok": literal(false).readonly(),
 			"error": object({
@@ -6468,7 +6576,18 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		}), object({
 			"ok": literal(true).readonly(),
 			"value": object({
-				"status": union([literal("available"), literal("existing")]).readonly(),
+				"status": union([
+					literal("unavailable"),
+					literal("available"),
+					literal("existing")
+				]).readonly(),
+				"inviteRequired": boolean().readonly().optional(),
+				"inviteStatus": union([
+					literal("not_required"),
+					literal("required"),
+					literal("valid"),
+					literal("invalid")
+				]).readonly().optional(),
 				"fullHandle": string().readonly()
 			}).readonly()
 		})]);
@@ -7243,10 +7362,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				"previousDid": intersection(string(), unknown()).readonly().optional(),
 				"currentDid": intersection(string(), unknown()).readonly(),
 				"phase": union([
+					literal("remote_committed"),
 					literal("awaiting_factor"),
 					literal("ready_to_commit"),
 					literal("remote_outcome_unknown"),
-					literal("remote_committed"),
 					literal("identity_transition_pending"),
 					literal("applied"),
 					literal("quarantined_key_unavailable")
@@ -7520,6 +7639,13 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		}), object({
 			"ok": literal(true).readonly(),
 			"value": object({
+				"methodCapabilities": object({
+					"method": union([literal("wba"), literal("web")]).readonly(),
+					"handleRecovery": boolean().readonly(),
+					"rootImport": boolean().readonly(),
+					"rootTransfer": boolean().readonly(),
+					"servicesUpdate": boolean().readonly()
+				}).readonly().optional(),
 				"canManage": boolean().readonly(),
 				"rootTransferSupported": boolean().readonly(),
 				"role": union([literal("member"), literal("admin")]).readonly().optional(),
@@ -7537,6 +7663,16 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					"status": union([literal("active"), literal("revoked")]).readonly(),
 					"role": union([literal("member"), literal("admin")]).readonly(),
 					"managementReady": boolean().readonly(),
+					"provisioning": object({
+						"phase": union([
+							literal("pending"),
+							literal("waiting"),
+							literal("failed"),
+							literal("complete")
+						]).readonly(),
+						"attempts": number().readonly(),
+						"requiresRejoin": boolean().readonly().optional()
+					}).readonly().optional(),
 					"isCurrent": boolean().readonly()
 				})).readonly(),
 				"requests": array(object({
@@ -7559,6 +7695,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			}).readonly()
 		})]);
 		const _awiki_dsh_plugin_awiki_registerIdentity_parameter_0$schema = object({
+			"inviteCode": string().readonly().optional(),
+			"didMethod": union([literal("wba"), literal("web")]).readonly().optional(),
 			"handle": string().readonly(),
 			"phone": string().readonly(),
 			"otp": string().readonly()
@@ -7638,7 +7776,14 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				"status": literal("join-required").readonly(),
 				"fullHandle": intersection(string(), unknown()).readonly(),
 				"mode": union([literal("ordinary"), literal("handle-recovery-rebind")]).readonly(),
-				"requiresUserPresence": boolean().readonly()
+				"requiresUserPresence": boolean().readonly(),
+				"methodCapabilities": object({
+					"method": union([literal("wba"), literal("web")]).readonly(),
+					"handleRecovery": boolean().readonly(),
+					"rootImport": boolean().readonly(),
+					"rootTransfer": boolean().readonly(),
+					"servicesUpdate": boolean().readonly()
+				}).readonly().optional()
 			})]).readonly()
 		})]);
 		const _awiki_dsh_plugin_awiki_rejectDeviceJoin_parameter_0$schema = object({
@@ -7934,6 +8079,84 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				"conversationId": intersection(string(), unknown()).readonly()
 			}).readonly()
 		})]);
+		const _awiki_dsh_plugin_awiki_resumeIdentityServicesUpdate_parameter_0$schema = object({ "did": string().readonly() });
+		const _awiki_dsh_plugin_awiki_resumeIdentityServicesUpdate_result$schema = union([object({
+			"ok": literal(false).readonly(),
+			"error": object({
+				"code": union([
+					literal("client-version-unsupported"),
+					literal("not-registered"),
+					literal("signed-out"),
+					literal("already-registered"),
+					literal("invalid-request"),
+					literal("invalid-otp"),
+					literal("challenge-expired"),
+					literal("handle-unavailable"),
+					literal("short-handle-invite-required"),
+					literal("not-found"),
+					literal("forbidden"),
+					literal("device-rejoin-required"),
+					literal("identity-recovery-required"),
+					literal("conflict"),
+					literal("state-in-use"),
+					literal("rate-limited"),
+					literal("group-membership-required"),
+					literal("group-identity-stale"),
+					literal("attachment-too-large"),
+					literal("summary-unavailable"),
+					literal("summary-timeout"),
+					literal("summary-cancelled"),
+					literal("summary-invalid-output"),
+					literal("summary-failed"),
+					literal("delivery-unknown"),
+					literal("network"),
+					literal("remote")
+				]).readonly(),
+				"message": string().readonly(),
+				"mailRecoveryObservability": object({
+					"current_principal_matches_recovery": boolean().readonly(),
+					"request_generation_classification": union([literal("current"), literal("replaced")]).readonly(),
+					"mail_ingress_classification": union([
+						literal("reached"),
+						literal("not_reached"),
+						literal("unknown")
+					]).readonly(),
+					"auth_status_class": union([
+						literal("unknown"),
+						literal("accepted"),
+						literal("rejected"),
+						literal("dependency_unavailable")
+					]).readonly(),
+					"auth_stable_machine_code": string().readonly().optional(),
+					"retryable": boolean().readonly(),
+					"mail_closed_classification": union([
+						literal("unknown"),
+						literal("dependency_unavailable"),
+						literal("success"),
+						literal("authentication_rejected"),
+						literal("no_active_handle"),
+						literal("multiple_active_handles"),
+						literal("no_mailbox"),
+						literal("owner_conflict")
+					]).readonly()
+				}).readonly().optional()
+			}).readonly()
+		}), object({
+			"ok": literal(true).readonly(),
+			"value": object({
+				"did": string().readonly(),
+				"canManage": boolean().readonly(),
+				"pending": boolean().readonly(),
+				"services": array(object({
+					"id": string().readonly(),
+					"type": string().readonly(),
+					"serviceEndpoint": string().readonly(),
+					"serviceDid": string().readonly().optional(),
+					"profiles": array(string()).readonly().optional(),
+					"securityProfiles": array(string()).readonly().optional()
+				})).readonly()
+			}).readonly()
+		})]);
 		const _awiki_dsh_plugin_awiki_resumeRecovery_parameter_0$schema = object({ "operationId": string().readonly() });
 		const _awiki_dsh_plugin_awiki_resumeRecovery_result$schema = union([object({
 			"ok": literal(false).readonly(),
@@ -8004,10 +8227,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				"previousDid": intersection(string(), unknown()).readonly().optional(),
 				"currentDid": intersection(string(), unknown()).readonly(),
 				"phase": union([
+					literal("remote_committed"),
 					literal("awaiting_factor"),
 					literal("ready_to_commit"),
 					literal("remote_outcome_unknown"),
-					literal("remote_committed"),
 					literal("identity_transition_pending"),
 					literal("applied"),
 					literal("quarantined_key_unavailable")
@@ -8120,6 +8343,72 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			"ok": literal(true).readonly(),
 			"value": object({ "completed": literal(true).readonly() }).readonly()
 		})]);
+		const _awiki_dsh_plugin_awiki_retryDeviceManagement_parameter_0$schema = object({ "deviceRef": string().readonly() });
+		const _awiki_dsh_plugin_awiki_retryDeviceManagement_result$schema = union([object({
+			"ok": literal(false).readonly(),
+			"error": object({
+				"code": union([
+					literal("client-version-unsupported"),
+					literal("not-registered"),
+					literal("signed-out"),
+					literal("already-registered"),
+					literal("invalid-request"),
+					literal("invalid-otp"),
+					literal("challenge-expired"),
+					literal("handle-unavailable"),
+					literal("short-handle-invite-required"),
+					literal("not-found"),
+					literal("forbidden"),
+					literal("device-rejoin-required"),
+					literal("identity-recovery-required"),
+					literal("conflict"),
+					literal("state-in-use"),
+					literal("rate-limited"),
+					literal("group-membership-required"),
+					literal("group-identity-stale"),
+					literal("attachment-too-large"),
+					literal("summary-unavailable"),
+					literal("summary-timeout"),
+					literal("summary-cancelled"),
+					literal("summary-invalid-output"),
+					literal("summary-failed"),
+					literal("delivery-unknown"),
+					literal("network"),
+					literal("remote")
+				]).readonly(),
+				"message": string().readonly(),
+				"mailRecoveryObservability": object({
+					"current_principal_matches_recovery": boolean().readonly(),
+					"request_generation_classification": union([literal("current"), literal("replaced")]).readonly(),
+					"mail_ingress_classification": union([
+						literal("reached"),
+						literal("not_reached"),
+						literal("unknown")
+					]).readonly(),
+					"auth_status_class": union([
+						literal("unknown"),
+						literal("accepted"),
+						literal("rejected"),
+						literal("dependency_unavailable")
+					]).readonly(),
+					"auth_stable_machine_code": string().readonly().optional(),
+					"retryable": boolean().readonly(),
+					"mail_closed_classification": union([
+						literal("unknown"),
+						literal("dependency_unavailable"),
+						literal("success"),
+						literal("authentication_rejected"),
+						literal("no_active_handle"),
+						literal("multiple_active_handles"),
+						literal("no_mailbox"),
+						literal("owner_conflict")
+					]).readonly()
+				}).readonly().optional()
+			}).readonly()
+		}), object({
+			"ok": literal(true).readonly(),
+			"value": literal(null).readonly()
+		})]);
 		const _awiki_dsh_plugin_awiki_revokeDevice_parameter_0$schema = object({
 			"deviceRef": string().readonly(),
 			"confirmation": string().readonly()
@@ -8188,6 +8477,13 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		}), object({
 			"ok": literal(true).readonly(),
 			"value": object({
+				"methodCapabilities": object({
+					"method": union([literal("wba"), literal("web")]).readonly(),
+					"handleRecovery": boolean().readonly(),
+					"rootImport": boolean().readonly(),
+					"rootTransfer": boolean().readonly(),
+					"servicesUpdate": boolean().readonly()
+				}).readonly().optional(),
 				"canManage": boolean().readonly(),
 				"rootTransferSupported": boolean().readonly(),
 				"role": union([literal("member"), literal("admin")]).readonly().optional(),
@@ -8205,6 +8501,16 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					"status": union([literal("active"), literal("revoked")]).readonly(),
 					"role": union([literal("member"), literal("admin")]).readonly(),
 					"managementReady": boolean().readonly(),
+					"provisioning": object({
+						"phase": union([
+							literal("pending"),
+							literal("waiting"),
+							literal("failed"),
+							literal("complete")
+						]).readonly(),
+						"attempts": number().readonly(),
+						"requiresRejoin": boolean().readonly().optional()
+					}).readonly().optional(),
 					"isCurrent": boolean().readonly()
 				})).readonly(),
 				"requests": array(object({
@@ -8559,6 +8865,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			}).readonly()
 		})]);
 		const _awiki_dsh_plugin_awiki_sendRegistrationOtp_parameter_0$schema = object({
+			"inviteCode": string().readonly().optional(),
+			"didMethod": union([literal("wba"), literal("web")]).readonly().optional(),
 			"handle": string().readonly(),
 			"phone": string().readonly()
 		});
@@ -9098,6 +9406,94 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				"registeredAt": number().readonly()
 			}).readonly()
 		})]);
+		const _awiki_dsh_plugin_awiki_updateIdentityServices_parameter_0$schema = object({
+			"services": array(object({
+				"id": string().readonly(),
+				"type": string().readonly(),
+				"serviceEndpoint": string().readonly(),
+				"serviceDid": string().readonly().optional(),
+				"profiles": array(string()).readonly().optional(),
+				"securityProfiles": array(string()).readonly().optional()
+			})).readonly(),
+			"did": string().readonly()
+		});
+		const _awiki_dsh_plugin_awiki_updateIdentityServices_result$schema = union([object({
+			"ok": literal(false).readonly(),
+			"error": object({
+				"code": union([
+					literal("client-version-unsupported"),
+					literal("not-registered"),
+					literal("signed-out"),
+					literal("already-registered"),
+					literal("invalid-request"),
+					literal("invalid-otp"),
+					literal("challenge-expired"),
+					literal("handle-unavailable"),
+					literal("short-handle-invite-required"),
+					literal("not-found"),
+					literal("forbidden"),
+					literal("device-rejoin-required"),
+					literal("identity-recovery-required"),
+					literal("conflict"),
+					literal("state-in-use"),
+					literal("rate-limited"),
+					literal("group-membership-required"),
+					literal("group-identity-stale"),
+					literal("attachment-too-large"),
+					literal("summary-unavailable"),
+					literal("summary-timeout"),
+					literal("summary-cancelled"),
+					literal("summary-invalid-output"),
+					literal("summary-failed"),
+					literal("delivery-unknown"),
+					literal("network"),
+					literal("remote")
+				]).readonly(),
+				"message": string().readonly(),
+				"mailRecoveryObservability": object({
+					"current_principal_matches_recovery": boolean().readonly(),
+					"request_generation_classification": union([literal("current"), literal("replaced")]).readonly(),
+					"mail_ingress_classification": union([
+						literal("reached"),
+						literal("not_reached"),
+						literal("unknown")
+					]).readonly(),
+					"auth_status_class": union([
+						literal("unknown"),
+						literal("accepted"),
+						literal("rejected"),
+						literal("dependency_unavailable")
+					]).readonly(),
+					"auth_stable_machine_code": string().readonly().optional(),
+					"retryable": boolean().readonly(),
+					"mail_closed_classification": union([
+						literal("unknown"),
+						literal("dependency_unavailable"),
+						literal("success"),
+						literal("authentication_rejected"),
+						literal("no_active_handle"),
+						literal("multiple_active_handles"),
+						literal("no_mailbox"),
+						literal("owner_conflict")
+					]).readonly()
+				}).readonly().optional()
+			}).readonly()
+		}), object({
+			"ok": literal(true).readonly(),
+			"value": object({
+				"did": string().readonly(),
+				"canManage": boolean().readonly(),
+				"pending": boolean().readonly(),
+				"services": array(object({
+					"id": string().readonly(),
+					"type": string().readonly(),
+					"serviceEndpoint": string().readonly(),
+					"serviceDid": string().readonly().optional(),
+					"profiles": array(string()).readonly().optional(),
+					"securityProfiles": array(string()).readonly().optional()
+				})).readonly()
+			}).readonly()
+		})]);
 		const _awiki_dsh_plugin_awiki_updateIntegration_parameter_0$schema = object({
 			"expectedRevision": number().readonly(),
 			"idempotencyKey": string().readonly(),
@@ -9269,7 +9665,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 206,
+						"line": 222,
 						"column": 9
 					}
 				},
@@ -9296,7 +9692,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 242,
+						"line": 258,
 						"column": 3
 					}
 				},
@@ -9323,7 +9719,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 166,
+						"line": 179,
 						"column": 9
 					}
 				},
@@ -9341,7 +9737,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 146,
+						"line": 150,
 						"column": 9
 					}
 				},
@@ -9359,7 +9755,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 155,
+						"line": 159,
 						"column": 9
 					}
 				},
@@ -9386,7 +9782,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 302,
+						"line": 318,
 						"column": 3
 					}
 				},
@@ -9413,7 +9809,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 114,
+						"line": 118,
 						"column": 3
 					}
 				},
@@ -9440,7 +9836,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 186,
+						"line": 202,
 						"column": 9
 					}
 				},
@@ -9467,7 +9863,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 224,
+						"line": 240,
 						"column": 9
 					}
 				},
@@ -9494,7 +9890,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 105,
+						"line": 109,
 						"column": 3
 					}
 				},
@@ -9521,7 +9917,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 218,
+						"line": 234,
 						"column": 9
 					}
 				},
@@ -9548,7 +9944,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 279,
+						"line": 295,
 						"column": 9
 					}
 				},
@@ -9575,7 +9971,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 297,
+						"line": 313,
 						"column": 9
 					}
 				},
@@ -9602,7 +9998,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 215,
+						"line": 231,
 						"column": 9
 					}
 				},
@@ -9620,7 +10016,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 99,
+						"line": 103,
 						"column": 9
 					}
 				},
@@ -9638,7 +10034,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 248,
+						"line": 264,
 						"column": 3
 					}
 				},
@@ -9656,7 +10052,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 152,
+						"line": 156,
 						"column": 9
 					}
 				},
@@ -9683,7 +10079,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 236,
+						"line": 252,
 						"column": 3
 					}
 				},
@@ -9710,7 +10106,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 227,
+						"line": 243,
 						"column": 3
 					}
 				},
@@ -9737,7 +10133,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 259,
+						"line": 275,
 						"column": 3
 					}
 				},
@@ -9751,29 +10147,47 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					result: {
 						mode: "strict",
 						typeSymbol: "@awiki/dsh-plugin/types#AwikiResult",
-						schema: _awiki_dsh_plugin_awiki_getIdentity_result$schema
+						schema: _awiki_dsh_plugin_awiki_getIdentity_result$schema
+					},
+					sourceLocation: {
+						"file": "packages/dsh-awiki/src/index.ts",
+						"line": 124,
+						"column": 9
+					}
+				},
+				{
+					id: "@awiki/dsh-plugin#awiki/getIdentityAccessState",
+					service: "awiki",
+					namespace: "awiki",
+					method: "getIdentityAccessState",
+					invocation: { kind: "direct" },
+					parameters: [],
+					result: {
+						mode: "strict",
+						typeSymbol: "@awiki/dsh-plugin/types#AwikiResult",
+						schema: _awiki_dsh_plugin_awiki_getIdentityAccessState_result$schema
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 120,
-						"column": 9
+						"line": 153,
+						"column": 3
 					}
 				},
 				{
-					id: "@awiki/dsh-plugin#awiki/getIdentityAccessState",
+					id: "@awiki/dsh-plugin#awiki/getIdentityServices",
 					service: "awiki",
 					namespace: "awiki",
-					method: "getIdentityAccessState",
+					method: "getIdentityServices",
 					invocation: { kind: "direct" },
 					parameters: [],
 					result: {
 						mode: "strict",
 						typeSymbol: "@awiki/dsh-plugin/types#AwikiResult",
-						schema: _awiki_dsh_plugin_awiki_getIdentityAccessState_result$schema
+						schema: _awiki_dsh_plugin_awiki_getIdentityServices_result$schema
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 149,
+						"line": 165,
 						"column": 3
 					}
 				},
@@ -9791,7 +10205,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 102,
+						"line": 106,
 						"column": 3
 					}
 				},
@@ -9818,7 +10232,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 262,
+						"line": 278,
 						"column": 3
 					}
 				},
@@ -9836,7 +10250,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 282,
+						"line": 298,
 						"column": 3
 					}
 				},
@@ -9854,7 +10268,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 194,
+						"line": 210,
 						"column": 3
 					}
 				},
@@ -9881,7 +10295,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 209,
+						"line": 225,
 						"column": 9
 					}
 				},
@@ -9899,7 +10313,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 123,
+						"line": 127,
 						"column": 9
 					}
 				},
@@ -9926,7 +10340,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 132,
+						"line": 136,
 						"column": 9
 					}
 				},
@@ -9953,7 +10367,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 230,
+						"line": 246,
 						"column": 3
 					}
 				},
@@ -9980,7 +10394,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 233,
+						"line": 249,
 						"column": 9
 					}
 				},
@@ -10008,7 +10422,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 256,
+						"line": 272,
 						"column": 3
 					}
 				},
@@ -10035,7 +10449,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 239,
+						"line": 255,
 						"column": 3
 					}
 				},
@@ -10063,7 +10477,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 285,
+						"line": 301,
 						"column": 9
 					}
 				},
@@ -10081,7 +10495,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 129,
+						"line": 133,
 						"column": 3
 					}
 				},
@@ -10108,7 +10522,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 126,
+						"line": 130,
 						"column": 3
 					}
 				},
@@ -10135,7 +10549,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 270,
+						"line": 286,
 						"column": 3
 					}
 				},
@@ -10162,7 +10576,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 291,
+						"line": 307,
 						"column": 3
 					}
 				},
@@ -10189,7 +10603,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 203,
+						"line": 219,
 						"column": 3
 					}
 				},
@@ -10216,7 +10630,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 181,
+						"line": 197,
 						"column": 9
 					}
 				},
@@ -10243,7 +10657,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 288,
+						"line": 304,
 						"column": 9
 					}
 				},
@@ -10261,7 +10675,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 158,
+						"line": 162,
 						"column": 3
 					}
 				},
@@ -10288,7 +10702,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 140,
+						"line": 144,
 						"column": 9
 					}
 				},
@@ -10315,7 +10729,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 171,
+						"line": 187,
 						"column": 9
 					}
 				},
@@ -10342,7 +10756,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 245,
+						"line": 261,
 						"column": 3
 					}
 				},
@@ -10369,7 +10783,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 117,
+						"line": 121,
 						"column": 3
 					}
 				},
@@ -10396,7 +10810,34 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 221,
+						"line": 237,
+						"column": 3
+					}
+				},
+				{
+					id: "@awiki/dsh-plugin#awiki/resumeIdentityServicesUpdate",
+					service: "awiki",
+					namespace: "awiki",
+					method: "resumeIdentityServicesUpdate",
+					invocation: { kind: "direct" },
+					parameters: [{
+						name: "request",
+						wire: "request",
+						source: "json",
+						codec: {
+							mode: "strict",
+							typeSymbol: "@awiki/dsh-plugin/types#AwikiIdentityServicesRequest",
+							schema: _awiki_dsh_plugin_awiki_resumeIdentityServicesUpdate_parameter_0$schema
+						}
+					}],
+					result: {
+						mode: "strict",
+						typeSymbol: "@awiki/dsh-plugin/types#AwikiResult",
+						schema: _awiki_dsh_plugin_awiki_resumeIdentityServicesUpdate_result$schema
+					},
+					sourceLocation: {
+						"file": "packages/dsh-awiki/src/index.ts",
+						"line": 171,
 						"column": 3
 					}
 				},
@@ -10423,7 +10864,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 212,
+						"line": 228,
 						"column": 9
 					}
 				},
@@ -10441,10 +10882,37 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 143,
+						"line": 147,
 						"column": 3
 					}
 				},
+				{
+					id: "@awiki/dsh-plugin#awiki/retryDeviceManagement",
+					service: "awiki",
+					namespace: "awiki",
+					method: "retryDeviceManagement",
+					invocation: { kind: "direct" },
+					parameters: [{
+						name: "request",
+						wire: "request",
+						source: "json",
+						codec: {
+							mode: "strict",
+							typeSymbol: "@awiki/dsh-plugin/types#AwikiPrepareRootTransferRequest",
+							schema: _awiki_dsh_plugin_awiki_retryDeviceManagement_parameter_0$schema
+						}
+					}],
+					result: {
+						mode: "strict",
+						typeSymbol: "@awiki/dsh-plugin/types#AwikiResult",
+						schema: _awiki_dsh_plugin_awiki_retryDeviceManagement_result$schema
+					},
+					sourceLocation: {
+						"file": "packages/dsh-awiki/src/index.ts",
+						"line": 184,
+						"column": 9
+					}
+				},
 				{
 					id: "@awiki/dsh-plugin#awiki/revokeDevice",
 					service: "awiki",
@@ -10468,7 +10936,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 176,
+						"line": 192,
 						"column": 9
 					}
 				},
@@ -10495,7 +10963,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 111,
+						"line": 115,
 						"column": 3
 					}
 				},
@@ -10522,7 +10990,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 276,
+						"line": 292,
 						"column": 9
 					}
 				},
@@ -10549,7 +11017,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 294,
+						"line": 310,
 						"column": 9
 					}
 				},
@@ -10576,7 +11044,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 200,
+						"line": 216,
 						"column": 3
 					}
 				},
@@ -10603,7 +11071,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 137,
+						"line": 141,
 						"column": 9
 					}
 				},
@@ -10630,7 +11098,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 273,
+						"line": 289,
 						"column": 3
 					}
 				},
@@ -10657,7 +11125,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 161,
+						"line": 174,
 						"column": 9
 					}
 				},
@@ -10684,7 +11152,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 265,
+						"line": 281,
 						"column": 9
 					}
 				},
@@ -10711,7 +11179,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 251,
+						"line": 267,
 						"column": 3
 					}
 				},
@@ -10738,10 +11206,37 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 191,
+						"line": 207,
 						"column": 9
 					}
 				},
+				{
+					id: "@awiki/dsh-plugin#awiki/updateIdentityServices",
+					service: "awiki",
+					namespace: "awiki",
+					method: "updateIdentityServices",
+					invocation: { kind: "direct" },
+					parameters: [{
+						name: "request",
+						wire: "request",
+						source: "json",
+						codec: {
+							mode: "strict",
+							typeSymbol: "@awiki/dsh-plugin/types#AwikiUpdateIdentityServicesRequest",
+							schema: _awiki_dsh_plugin_awiki_updateIdentityServices_parameter_0$schema
+						}
+					}],
+					result: {
+						mode: "strict",
+						typeSymbol: "@awiki/dsh-plugin/types#AwikiResult",
+						schema: _awiki_dsh_plugin_awiki_updateIdentityServices_result$schema
+					},
+					sourceLocation: {
+						"file": "packages/dsh-awiki/src/index.ts",
+						"line": 168,
+						"column": 3
+					}
+				},
 				{
 					id: "@awiki/dsh-plugin#awiki/updateIntegration",
 					service: "awiki",
@@ -10765,7 +11260,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 108,
+						"line": 112,
 						"column": 3
 					}
 				},
@@ -10792,7 +11287,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-awiki/src/index.ts",
-						"line": 197,
+						"line": 213,
 						"column": 3
 					}
 				}
@@ -10982,7 +11477,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		//#endregion
 		//#region lib/types/registration-policy.js
 		/** Registration presentation and Handle normalization; admission is owned by the server. */
-		const SHORT_HANDLE_INVITE_MESSAGE = "注册少于5位的handle需要使用邀请码，目前暂不支持自主注册。";
+		const SHORT_HANDLE_INVITE_MESSAGE = "此 Handle 注册需要邀请码，请输入后继续。";
 		//#endregion
 		//#region lib/types/client/otp-cooldown.js
 		/** Retain the server cooldown across panel remounts, without persisting OTPs. */
@@ -11696,8 +12191,15 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			const recoveryCooldown = useRecoveryOtpCooldown();
 			const [phone, setPhone] = useDraftState("identity:phone", "");
 			const [handle, setHandle] = useDraftState("identity:handle", "");
+			const [inviteCode, setInviteCode] = useDraftState("identity:inviteCode", "");
+			const entryInFlight = (0, react.useRef)(false);
+			const [entryPending, setEntryPending] = (0, react.useState)(false);
 			const [otp, setOtp] = useDraftState("identity:otp", "");
 			const [registrationOtpSent, setRegistrationOtpSent] = useDraftState("identity:registrationOtpSent", false, false);
+			const [didMethod, setDidMethod] = useDraftState("identity:didMethod", "wba", false);
+			const [pendingRegistration, setPendingRegistration] = useDraftState("identity:pendingRegistration", null, false);
+			const creationMethods = props.access?.creationMethods ?? ["wba"];
+			const canRegister = creationMethods.includes(didMethod) || pendingRegistration?.method === didMethod && pendingRegistration.fullHandle === handle.trim();
 			const [recoveryFactorContext, setRecoveryFactorContext] = useDraftState("identity:recoveryFactorContext", null, false);
 			const [notice, setNotice] = useDraftState("identity:notice", null, false);
 			const [error, setError] = useDraftState("identity:error", null, false);
@@ -11710,12 +12212,20 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			const [recoveryChoice, setRecoveryChoice] = useDraftState("identity:recoveryChoice", null, false);
 			const [recoveryRiskConfirmed, setRecoveryRiskConfirmed] = useDraftState("identity:recoveryRiskConfirmed", false, false);
 			const [recoveryEntryOpen, setRecoveryEntryOpen] = useDraftState("identity:recoveryEntryOpen", false, false);
-			const validRecoveryEntryOpen = recoveryEntryOpen && props.sessionStatus === "recovery-required";
+			const validRecoveryEntryOpen = recoveryEntryOpen && props.sessionStatus === "recovery-required" && props.access?.methodCapabilities?.handleRecovery !== false;
 			const recoveryConfirmationInFlight = (0, react.useRef)(false);
 			const [recoveryConfirming, setRecoveryConfirming] = (0, react.useState)(false);
 			const [joinCheck, setJoinCheck] = (0, react.useState)("loading");
 			const [joinProgress, setJoinProgress] = (0, react.useState)(null);
 			const [deviceRejoinHandle, setDeviceRejoinHandle] = useDraftState("identity:deviceRejoinHandle", null, false);
+			(0, react.useEffect)(() => {
+				if (!registrationOtpSent && pendingRegistration === null && creationMethods.length > 0 && !creationMethods.includes(didMethod)) setDidMethod(creationMethods.includes("wba") ? "wba" : creationMethods[0]);
+			}, [
+				props.access?.creationMethods,
+				registrationOtpSent,
+				pendingRegistration,
+				didMethod
+			]);
 			(0, react.useEffect)(() => {
 				if (retryDeadline === null) return;
 				const update = () => {
@@ -11740,6 +12250,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				setRegistrationConfirmation(null);
 				setShortHandleInviteNotice(false);
 				setOtp("");
+				setInviteCode("");
 				setRegistrationOtpSent(false);
 				setRecoveryFactorContext(null);
 				setRecoveryChoice(null);
@@ -11762,35 +12273,63 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			};
 			const requestRegistrationOtp = async () => {
 				setError(null);
-				const result = await props.sendRegistrationOtp({
-					handle: handle.trim(),
-					phone: phone.trim()
-				});
-				if (!result.ok) {
-					if (result.failureCode === "short-handle-invite-required") {
-						setNotice(null);
+				if (entryInFlight.current) return;
+				entryInFlight.current = true;
+				setEntryPending(true);
+				try {
+					const checked = await props.inspectIdentityAccess({
+						handle: handle.trim(),
+						phone: phone.trim(),
+						...inviteCode.trim() === "" ? {} : { inviteCode: inviteCode.trim() }
+					});
+					if (!checked.ok) return setError(checked.error);
+					if (checked.value.status === "unavailable") return setError("此 Handle 暂不可注册，请更换后重试。");
+					if (checked.value.status !== "existing" && checked.value.inviteRequired && checked.value.inviteStatus !== "valid") {
 						setShortHandleInviteNotice(true);
+						setNotice(null);
+						if (checked.value.inviteStatus === "invalid") setError("邀请码无效或不适用于当前账号，请检查后重试。");
 						return;
 					}
-					setError(result.error);
-					return;
+					if (checked.value.status !== "existing" && !canRegister) return setError("当前服务暂不接受所选方法的新注册。");
+					const admissionInvite = checked.value.status === "existing" ? "" : inviteCode.trim();
+					if (checked.value.status === "existing") {
+						setInviteCode("");
+						setShortHandleInviteNotice(false);
+					}
+					const result = await props.sendRegistrationOtp({
+						handle: handle.trim(),
+						phone: phone.trim(),
+						...didMethod === "web" ? { didMethod } : {},
+						...admissionInvite === "" ? {} : { inviteCode: admissionInvite }
+					});
+					if (!result.ok) {
+						if (result.failureCode === "short-handle-invite-required") {
+							setNotice(null);
+							setShortHandleInviteNotice(true);
+							return;
+						}
+						setError(result.error);
+						return;
+					}
+					const cooldownSeconds = Math.max(0, Math.ceil(result.value.retryAfterSeconds));
+					setRegistrationOtpSent(true);
+					setRetryDeadline(Date.now() + cooldownSeconds * 1e3);
+					setRetrySeconds(cooldownSeconds);
+					setNotice(`注册验证码已发送；${cooldownSeconds} 秒后可重新获取。`);
+				} finally {
+					entryInFlight.current = false;
+					setEntryPending(false);
 				}
-				const cooldownSeconds = Math.max(0, Math.ceil(result.value.retryAfterSeconds));
-				setRegistrationOtpSent(true);
-				setRetryDeadline(Date.now() + cooldownSeconds * 1e3);
-				setRetrySeconds(cooldownSeconds);
-				setNotice(`注册验证码已发送；${cooldownSeconds} 秒后可重新获取。`);
 			};
 			const requestIdentityOtp = async () => {
 				setError(null);
-				const result = await props.continueRecoveryForHandle?.(handle.trim());
+				const result = didMethod === "wba" ? await props.continueRecoveryForHandle?.(handle.trim()) : void 0;
 				if (result !== void 0 && !result.ok) return setError(result.error);
 				if (result?.ok && result.value) return;
-				setShortHandleInviteNotice(false);
 				await requestRegistrationOtp();
 			};
 			const completeRegistration = async () => {
-				if (!registrationOtpSent || registrationConfirmation === null || registrationInFlight.current || props.pending) return;
+				if (!canRegister || !registrationOtpSent || registrationConfirmation === null || registrationInFlight.current || props.pending) return;
 				registrationInFlight.current = true;
 				setRegistrationSubmitting(true);
 				setError(null);
@@ -11811,13 +12350,15 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 						setOtp("");
 						setJoinContext({
 							fullHandle: result.value.fullHandle,
-							phone: phone.trim()
+							phone: phone.trim(),
+							...result.value.methodCapabilities === void 0 ? {} : { methodCapabilities: result.value.methodCapabilities }
 						});
 						return;
 					}
 					setPhone("");
 					setHandle("");
 					setDeviceRejoinHandle(null);
+					setPendingRegistration(null);
 					resetIdentityEntry();
 				} catch {
 					setRegistrationConfirmation(null);
@@ -11832,7 +12373,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				const choice = props.access.choice;
 				setJoinContext(choice === null ? null : {
 					fullHandle: choice.fullHandle,
-					phone
+					phone,
+					...choice.methodCapabilities === void 0 ? {} : { methodCapabilities: choice.methodCapabilities }
 				});
 			}, [props.access]);
 			const beginJoin = async () => {
@@ -12001,7 +12543,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				setDeviceRejoinHandle(currentHandle);
 				resetIdentityEntry();
 			};
-			const signedOutRecoveryOpen = props.sessionStatus === "signed-out" && signedOutAlternative === "recover";
+			const signedOutRecoveryOpen = props.sessionStatus === "signed-out" && signedOutAlternative === "recover" && props.access?.methodCapabilities?.handleRecovery === true;
 			const revokedHandle = props.sessionStatus === "recovery-required" ? props.identity?.handle : void 0;
 			if (props.recoveryOperationId !== null && !signedOutRecoveryOpen) return (0, react_jsx_runtime.jsx)(Recovery, {
 				...props,
@@ -12014,6 +12556,18 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					requestDescription: "这个 Handle 已在另一台设备完成了更新恢复，当前设备的旧凭证因此失效。验证绑定手机号后即可继续使用本机数据。"
 				}
 			});
+			if (props.sessionStatus === "recovery-required" && props.access?.methodCapabilities?.handleRecovery === false) return (0, react_jsx_runtime.jsxs)(AwikiIdentityPage, { children: [(0, react_jsx_runtime.jsx)("p", {
+				role: "status",
+				children: "此身份不支持恢复。Web 首个管理员丢失后无法恢复管理能力；可使用仍有效的设备继续访问。"
+			}), (0, react_jsx_runtime.jsx)("button", {
+				type: "button",
+				className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.secondary,
+				disabled: props.accessLoading,
+				onClick: () => {
+					props.refreshIdentityAccess?.();
+				},
+				children: "重新检查身份状态"
+			})] });
 			if (!validRecoveryEntryOpen && (props.access === null && props.accessLoading || props.access === null && props.accessError)) return (0, react_jsx_runtime.jsxs)(AwikiIdentityPage, { children: [(0, react_jsx_runtime.jsx)("p", {
 				role: "status",
 				children: props.accessError ?? "正在确认本机身份操作…"
@@ -12232,13 +12786,17 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 						},
 						children: "加入新设备（推荐）"
 					}),
-					(0, react_jsx_runtime.jsx)("button", {
+					joinContext.methodCapabilities?.handleRecovery === true && (0, react_jsx_runtime.jsx)("button", {
 						type: "button",
 						className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.dangerLink,
 						disabled: props.pending,
 						onClick: chooseRecovery,
 						children: "恢复 Handle（会替换 DID）"
 					}),
+					joinContext.methodCapabilities?.method === "web" && (0, react_jsx_runtime.jsx)("p", {
+						className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.notice,
+						children: "Web 身份不支持恢复或管理权转移；首个管理员丢失后无法恢复管理能力。请使用已有管理设备批准加入。"
+					}),
 					(0, react_jsx_runtime.jsx)("button", {
 						type: "button",
 						className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.secondary,
@@ -12256,7 +12814,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				]
 			}) });
 			if (props.sessionStatus === "signed-out") {
-				if (signedOutAlternative === "recover") return (0, react_jsx_runtime.jsx)(Recovery, {
+				if (signedOutRecoveryOpen) return (0, react_jsx_runtime.jsx)(Recovery, {
 					...props,
 					onExit: exitRecovery,
 					onExitLabel: "返回本机身份"
@@ -12348,7 +12906,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 							role: "alert",
 							children: error
 						}),
-						loginFailed && (0, react_jsx_runtime.jsxs)("div", {
+						loginFailed && props.access?.methodCapabilities?.handleRecovery === true && (0, react_jsx_runtime.jsxs)("div", {
 							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.recoveryHelp,
 							children: [(0, react_jsx_runtime.jsx)("p", { children: "如果本机身份凭证已经损坏或不可用，可以验证原绑定手机号后恢复这个身份。" }), (0, react_jsx_runtime.jsx)("button", {
 								type: "button",
@@ -12378,7 +12936,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 						if (registrationOtpSent) setRegistrationConfirmation({
 							phone: phone.trim(),
 							handle: handle.trim(),
-							otp: otp.trim()
+							otp: otp.trim(),
+							...didMethod === "web" ? { didMethod } : {},
+							...inviteCode.trim() === "" ? {} : { inviteCode: inviteCode.trim() }
 						});
 						else requestIdentityOtp();
 					},
@@ -12391,15 +12951,59 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.headingGroup,
 							children: [(0, react_jsx_runtime.jsx)("h3", { children: registrationOtpSent ? "验证身份" : deviceRejoinHandle === null ? "进入 AWiki" : "重新加入设备" }), (0, react_jsx_runtime.jsx)("p", { children: registrationOtpSent ? "输入注册验证码。新 Handle 会创建身份，已有 Handle 会进入设备加入选择。" : deviceRejoinHandle === null ? "输入 Handle 和手机号继续。已有恢复进度会直接继续，无需重复获取验证码。" : "验证绑定手机号后，这台设备会以一把新密钥重新申请加入；本机消息数据不会清除。" })]
 						}),
+						!registrationOtpSent && (props.access?.pendingRegistrations?.length ?? 0) > 0 && (0, react_jsx_runtime.jsxs)("div", {
+							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.actionStack,
+							"aria-label": "未完成的注册",
+							children: [(0, react_jsx_runtime.jsx)("p", { children: "选择原注册继续；请重新输入手机号和有效验证码。" }), props.access?.pendingRegistrations?.filter((value) => value.verificationKind === "phone").map((value) => (0, react_jsx_runtime.jsxs)("button", {
+								type: "button",
+								className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.secondary,
+								disabled: entryPending || props.pending,
+								onClick: () => {
+									setPendingRegistration(value);
+									setHandle(value.fullHandle);
+									setDidMethod(value.method);
+									setOtp("");
+									setNotice("将继续原注册，保留同一个 DID。");
+								},
+								children: ["继续注册 ", value.fullHandle]
+							}, value.did))]
+						}),
+						(creationMethods.length > 1 || creationMethods.length === 1 && creationMethods[0] === "web") && (0, react_jsx_runtime.jsxs)("label", {
+							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.field,
+							children: ["身份方法", (0, react_jsx_runtime.jsx)("select", {
+								"aria-label": "身份方法",
+								value: didMethod,
+								disabled: entryPending || registrationOtpSent || props.pending,
+								onChange: (event) => {
+									setDidMethod(event.target.value);
+									setPendingRegistration(null);
+								},
+								children: creationMethods.map((method) => (0, react_jsx_runtime.jsx)("option", {
+									value: method,
+									children: method === "wba" ? "WBA（默认）" : "Web"
+								}, method))
+							})]
+						}),
+						didMethod === "web" && (0, react_jsx_runtime.jsx)("p", {
+							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.notice,
+							children: "Web 身份支持独立设备加入和撤销，不支持恢复或管理权转移。首个管理员丢失后无法恢复管理能力。"
+						}),
+						!canRegister && (0, react_jsx_runtime.jsx)("p", {
+							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.notice,
+							children: "当前服务暂不接受所选方法的新注册。可继续已保存的注册，或重新检查。"
+						}),
 						(0, react_jsx_runtime.jsxs)("label", {
 							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.field,
 							children: ["Handle", (0, react_jsx_runtime.jsx)("input", {
 								value: handle,
 								onChange: (event) => {
 									setHandle(event.target.value);
+									setPendingRegistration(null);
 									setShortHandleInviteNotice(false);
+									setInviteCode("");
+									setError(null);
 								},
-								readOnly: registrationOtpSent || deviceRejoinHandle !== null,
+								readOnly: entryPending || props.pending || registrationOtpSent || deviceRejoinHandle !== null,
 								autoComplete: "username",
 								placeholder: "例如 alice",
 								autoFocus: props.autoFocusHandle
@@ -12412,11 +13016,25 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 								onChange: (event) => {
 									setPhone(event.target.value);
 								},
-								readOnly: registrationOtpSent,
+								readOnly: entryPending || props.pending || registrationOtpSent,
 								type: "tel",
 								autoComplete: "tel"
 							})]
 						}),
+						shortHandleInviteNotice && (0, react_jsx_runtime.jsxs)("label", {
+							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.field,
+							children: ["邀请码", (0, react_jsx_runtime.jsx)("input", {
+								value: inviteCode,
+								onChange: (event) => {
+									setInviteCode(event.target.value);
+									setError(null);
+								},
+								readOnly: entryPending || props.pending || registrationOtpSent,
+								autoComplete: "off",
+								maxLength: 512,
+								placeholder: "请输入邀请码"
+							})]
+						}),
 						registrationOtpSent && (0, react_jsx_runtime.jsxs)("label", {
 							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.field,
 							children: ["注册验证码", (0, react_jsx_runtime.jsx)("input", {
@@ -12432,13 +13050,13 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 						(0, react_jsx_runtime.jsx)("button", {
 							type: "submit",
 							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.primary,
-							disabled: props.pending || props.accessLoading || handle.trim() === "" || phone.trim() === "" || registrationOtpSent && otp.trim() === "",
+							disabled: entryPending || props.pending || props.accessLoading || shortHandleInviteNotice && inviteCode.trim() === "" || handle.trim() === "" || phone.trim() === "" || registrationOtpSent && otp.trim() === "",
 							children: registrationOtpSent ? "继续" : "获取验证码"
 						}),
 						registrationOtpSent && (0, react_jsx_runtime.jsx)("button", {
 							type: "button",
 							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.linkButton,
-							disabled: props.pending || retrySeconds > 0,
+							disabled: entryPending || props.pending || retrySeconds > 0,
 							onClick: () => {
 								requestRegistrationOtp();
 							},
@@ -12447,7 +13065,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 						shortHandleInviteNotice && (0, react_jsx_runtime.jsx)("div", {
 							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.inviteNotice,
 							role: "alert",
-							children: "注册少于5位的handle需要使用邀请码，目前暂不支持自主注册。"
+							children: "此 Handle 注册需要邀请码，请输入后继续。"
 						}),
 						notice !== null && (0, react_jsx_runtime.jsx)("small", {
 							className: _dsh_awiki_css_AwikiIdentityAccess_module_css_default.notice,
@@ -13810,14 +14428,20 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			async beginDeviceJoin() {
 				const generation = this.generation;
 				const result = await this.withPending("开始加入设备", () => call(() => this.remote.beginDeviceJoin()));
-				if (result.ok && this.current(generation)) this.publish({
-					...this.view,
-					identityAccess: {
-						choice: null,
-						joining: true,
-						recoveries: []
-					}
-				});
+				if (result.ok && this.current(generation)) {
+					this.recoveryRevision++;
+					this.accessRequest = void 0;
+					this.publish({
+						...this.view,
+						identityAccess: {
+							choice: null,
+							joining: true,
+							recoveries: []
+						},
+						accessLoading: false,
+						accessError: null
+					});
+				}
 				return result;
 			}
 			async getDeviceJoinStatus() {
@@ -13938,6 +14562,15 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					};
 				});
 			}
+			getIdentityServices() {
+				return call(() => this.remote.getIdentityServices());
+			}
+			updateIdentityServices(request) {
+				return this.withPending("更新身份服务", () => call(() => this.remote.updateIdentityServices(request)));
+			}
+			resumeIdentityServicesUpdate(request) {
+				return this.withPending("继续身份服务更新", () => call(() => this.remote.resumeIdentityServicesUpdate(request)));
+			}
 			refreshDeviceManagement() {
 				return call(() => this.remote.refreshDeviceManagement());
 			}
@@ -13953,6 +14586,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			revokeDevice(request) {
 				return this.withPending("撤销设备", () => call(() => this.remote.revokeDevice(request)));
 			}
+			retryDeviceManagement(request) {
+				return this.withPending("重试配置管理设备", () => call(() => this.remote.retryDeviceManagement(request)));
+			}
 			prepareRootTransfer(request) {
 				return this.withPending("准备授予管理权", () => call(() => this.remote.prepareRootTransfer(request)));
 			}
@@ -16960,6 +17596,201 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			"verificationIntro": "xQ4iKW_verificationIntro"
 		};
 		//#endregion
+		//#region lib/types/client/AwikiIdentityServices.js
+		/** Public services editor. Core owns authorization, protected fields and durable writes. */
+		const protectedTypes = /* @__PURE__ */ new Set([
+			"AgentDescription",
+			"ANPHandleService",
+			"ANPMessageService"
+		]);
+		function AwikiIdentityServices(props) {
+			const [snapshot, setSnapshot] = (0, react.useState)(null);
+			const [error, setError] = (0, react.useState)(null);
+			const [busy, setBusy] = (0, react.useState)(false);
+			const [editing, setEditing] = (0, react.useState)(null);
+			const [existingId, setExistingId] = (0, react.useState)(null);
+			const alive = (0, react.useRef)(false);
+			const writing = (0, react.useRef)(false);
+			const canEdit = snapshot?.canManage === true && !snapshot.pending && !busy;
+			const read = async () => {
+				const result = await props.getIdentityServices();
+				if (!alive.current) return;
+				if (result.ok) setSnapshot(result.value);
+				else {
+					setSnapshot(null);
+					setError(result.error);
+				}
+			};
+			(0, react.useEffect)(() => {
+				alive.current = true;
+				read();
+				return () => {
+					alive.current = false;
+				};
+			}, []);
+			const write = async (services) => {
+				if (writing.current || snapshot?.canManage !== true) return;
+				if (services !== void 0 && snapshot.pending) return;
+				writing.current = true;
+				setBusy(true);
+				setError(null);
+				try {
+					const result = services === void 0 ? await props.resumeIdentityServicesUpdate({ did: snapshot.did }) : await props.updateIdentityServices({
+						did: snapshot.did,
+						services
+					});
+					if (!alive.current) return;
+					if (result.ok) {
+						setSnapshot(result.value);
+						setEditing(null);
+					} else setError(result.error);
+					await read();
+				} finally {
+					writing.current = false;
+					if (alive.current) setBusy(false);
+				}
+			};
+			return (0, react_jsx_runtime.jsxs)("section", {
+				className: _dsh_awiki_css_AwikiDevices_module_css_default.section,
+				"aria-label": "身份服务",
+				children: [
+					(0, react_jsx_runtime.jsxs)("div", {
+						className: _dsh_awiki_css_AwikiDevices_module_css_default.sectionHeading,
+						children: [(0, react_jsx_runtime.jsx)("h4", { children: "身份服务" }), (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							disabled: busy,
+							onClick: () => {
+								read();
+							},
+							children: "重新检查服务"
+						})]
+					}),
+					snapshot?.pending && (0, react_jsx_runtime.jsxs)("div", {
+						className: _dsh_awiki_css_AwikiDevices_module_css_default.notice,
+						role: "status",
+						children: [
+							(0, react_jsx_runtime.jsx)("strong", { children: "服务更新尚未确认" }),
+							(0, react_jsx_runtime.jsx)("span", { children: "已保存原更新，关闭或重新打开页面不会重复提交。" }),
+							snapshot.canManage && (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								disabled: busy,
+								onClick: () => {
+									write();
+								},
+								children: "继续原服务更新"
+							})
+						]
+					}),
+					snapshot?.services.map((service) => (0, react_jsx_runtime.jsxs)("article", {
+						className: _dsh_awiki_css_AwikiDevices_module_css_default.card,
+						children: [
+							(0, react_jsx_runtime.jsx)("strong", { children: service.type }),
+							(0, react_jsx_runtime.jsx)("p", { children: service.id }),
+							(0, react_jsx_runtime.jsx)("p", { children: service.serviceEndpoint }),
+							protectedTypes.has(service.type) ? (0, react_jsx_runtime.jsx)("small", { children: "系统服务，只读" }) : canEdit && (0, react_jsx_runtime.jsxs)("div", {
+								className: _dsh_awiki_css_AwikiDevices_module_css_default.actions,
+								children: [(0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									onClick: () => {
+										setExistingId(service.id);
+										setEditing(service);
+									},
+									children: "编辑服务"
+								}), (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									onClick: () => {
+										write(snapshot.services.filter((value) => value.id !== service.id));
+									},
+									children: "删除服务"
+								})]
+							})
+						]
+					}, service.id)),
+					canEdit && (0, react_jsx_runtime.jsx)("button", {
+						type: "button",
+						onClick: () => {
+							setExistingId(null);
+							setEditing({
+								id: `${snapshot.did}#`,
+								type: "",
+								serviceEndpoint: ""
+							});
+						},
+						children: "添加服务"
+					}),
+					canEdit && editing !== null && (0, react_jsx_runtime.jsxs)("form", {
+						className: _dsh_awiki_css_AwikiDevices_module_css_default.card,
+						onSubmit: (event) => {
+							event.preventDefault();
+							const services = existingId === null ? [...snapshot.services, editing] : snapshot.services.map((value) => value.id === existingId ? editing : value);
+							write(services);
+						},
+						children: [
+							(0, react_jsx_runtime.jsxs)("label", {
+								className: _dsh_awiki_css_AwikiDevices_module_css_default.field,
+								children: ["服务标识", (0, react_jsx_runtime.jsx)("input", {
+									"aria-label": "服务标识",
+									value: editing.id,
+									readOnly: existingId !== null,
+									onChange: (event) => {
+										setEditing({
+											...editing,
+											id: event.target.value
+										});
+									},
+									required: true
+								})]
+							}),
+							(0, react_jsx_runtime.jsxs)("label", {
+								className: _dsh_awiki_css_AwikiDevices_module_css_default.field,
+								children: ["服务类型", (0, react_jsx_runtime.jsx)("input", {
+									"aria-label": "服务类型",
+									value: editing.type,
+									onChange: (event) => {
+										setEditing({
+											...editing,
+											type: event.target.value
+										});
+									},
+									required: true
+								})]
+							}),
+							(0, react_jsx_runtime.jsxs)("label", {
+								className: _dsh_awiki_css_AwikiDevices_module_css_default.field,
+								children: ["服务地址", (0, react_jsx_runtime.jsx)("input", {
+									"aria-label": "服务地址",
+									value: editing.serviceEndpoint,
+									onChange: (event) => {
+										setEditing({
+											...editing,
+											serviceEndpoint: event.target.value
+										});
+									},
+									required: true
+								})]
+							}),
+							(0, react_jsx_runtime.jsx)("button", {
+								type: "submit",
+								children: "保存服务"
+							}),
+							(0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								onClick: () => {
+									setEditing(null);
+								},
+								children: "取消编辑"
+							})
+						]
+					}),
+					error !== null && (0, react_jsx_runtime.jsx)("p", {
+						className: _dsh_awiki_css_AwikiDevices_module_css_default.error,
+						role: "alert",
+						children: error
+					})
+				]
+			});
+		}
+		//#endregion
 		//#region lib/types/client/AwikiDevices.js
 		/** Foreground-only ready-admin device management. SAS remains component-local. */
 		const requestStateLabels = {
@@ -17287,7 +18118,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 									onClick: () => {
 										approve();
 									},
-									children: "批准为 member"
+									children: "批准加入并自动配置管理权"
 								})
 							]
 						}),
@@ -17320,9 +18151,14 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 							role: "status",
 							children: ["管理能力已发送；目标设备完成接收后会显示为 admin。接受时间：", readableDate(rootReceipt.acceptedAt)]
 						}),
-						!snapshot.rootTransferSupported && (0, react_jsx_runtime.jsxs)("div", {
+						!snapshot.rootTransferSupported && (snapshot.methodCapabilities?.method === "web" || snapshot.devices.some((device) => device.role === "member" && device.provisioning === void 0)) && (0, react_jsx_runtime.jsxs)("div", {
 							className: _dsh_awiki_css_AwikiDevices_module_css_default.notice,
-							children: [(0, react_jsx_runtime.jsx)("strong", { children: "管理权转移暂不可用" }), (0, react_jsx_runtime.jsx)("span", { children: "该功能目前只能在配备 Intel 芯片的 Mac 上通过系统身份验证使用。" })]
+							children: [(0, react_jsx_runtime.jsx)("strong", { children: "管理权转移暂不可用" }), (0, react_jsx_runtime.jsx)("span", { children: snapshot.methodCapabilities?.method === "web" ? "Web 身份不支持恢复或管理权转移；首个管理员丢失后无法恢复管理能力。" : "该功能目前只能在配备 Intel 芯片的 Mac 上通过系统身份验证使用。" })]
+						}),
+						snapshot.methodCapabilities?.servicesUpdate === true && props.getIdentityServices !== void 0 && props.updateIdentityServices !== void 0 && props.resumeIdentityServicesUpdate !== void 0 && (0, react_jsx_runtime.jsx)(AwikiIdentityServices, {
+							getIdentityServices: props.getIdentityServices,
+							updateIdentityServices: props.updateIdentityServices,
+							resumeIdentityServicesUpdate: props.resumeIdentityServicesUpdate
 						}),
 						(0, react_jsx_runtime.jsxs)("section", {
 							className: _dsh_awiki_css_AwikiDevices_module_css_default.section,
@@ -17387,7 +18223,26 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 													})
 												]
 											}),
-											snapshot.rootTransferSupported && !device.isCurrent && device.status === "active" && device.role === "member" && !device.managementReady && (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+											device.provisioning !== void 0 && !device.managementReady && (0, react_jsx_runtime.jsxs)("div", {
+												role: "status",
+												children: [
+													device.provisioning.phase === "failed" ? "自动配置失败" : device.provisioning.phase === "waiting" ? "已发送，等待设备接收" : "正在自动配置管理权",
+													"（已尝试 ",
+													device.provisioning.attempts,
+													" 次）",
+													device.provisioning.requiresRejoin && (0, react_jsx_runtime.jsx)("p", { children: "管理权限配置已失效，请撤销此成员设备，再在该设备上退出本地身份（保留数据）后重新加入。" }),
+													device.provisioning.phase === "failed" && !device.provisioning.requiresRejoin && props.retryDeviceManagement !== void 0 && (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+														className: _dsh_awiki_css_AwikiDevices_module_css_default.button,
+														type: "button",
+														disabled: props.pending,
+														onClick: () => {
+															props.retryDeviceManagement?.({ deviceRef: device.deviceRef }).then((result) => result.ok ? refresh() : setError(result.error));
+														},
+														children: "重试自动配置"
+													})
+												]
+											}),
+											device.provisioning === void 0 && snapshot.rootTransferSupported && !device.isCurrent && device.status === "active" && device.role === "member" && !device.managementReady && (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
 												className: _dsh_awiki_css_AwikiDevices_module_css_default.button,
 												type: "button",
 												variant: "outline",
@@ -17589,13 +18444,17 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					active: managing,
 					pending: props.pending,
 					refreshDeviceManagement: props.refreshDeviceManagement,
+					...props.getIdentityServices === void 0 ? {} : { getIdentityServices: props.getIdentityServices },
+					...props.updateIdentityServices === void 0 ? {} : { updateIdentityServices: props.updateIdentityServices },
+					...props.resumeIdentityServicesUpdate === void 0 ? {} : { resumeIdentityServicesUpdate: props.resumeIdentityServicesUpdate },
 					startDeviceJoinVerification: props.startDeviceJoinVerification,
 					approveDeviceJoin: props.approveDeviceJoin,
 					rejectDeviceJoin: props.rejectDeviceJoin,
 					revokeDevice: props.revokeDevice,
+					retryDeviceManagement: props.retryDeviceManagement,
 					prepareRootTransfer: props.prepareRootTransfer,
 					confirmRootTransfer: props.confirmRootTransfer
-				})
+				}, props.identityKey)
 			})] });
 		}
 		//#endregion
@@ -20302,10 +21161,14 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					identityKey: view.identity?.did ?? null,
 					pending: view.pending !== null,
 					refreshDeviceManagement: props.refreshDeviceManagement,
+					...props.getIdentityServices === void 0 ? {} : { getIdentityServices: props.getIdentityServices },
+					...props.updateIdentityServices === void 0 ? {} : { updateIdentityServices: props.updateIdentityServices },
+					...props.resumeIdentityServicesUpdate === void 0 ? {} : { resumeIdentityServicesUpdate: props.resumeIdentityServicesUpdate },
 					startDeviceJoinVerification: props.startDeviceJoinVerification,
 					approveDeviceJoin: props.approveDeviceJoin,
 					rejectDeviceJoin: props.rejectDeviceJoin,
 					revokeDevice: props.revokeDevice,
+					retryDeviceManagement: props.retryDeviceManagement,
 					prepareRootTransfer: props.prepareRootTransfer,
 					confirmRootTransfer: props.confirmRootTransfer
 				}),
@@ -20968,7 +21831,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					}),
 					(0, react_jsx_runtime.jsx)("p", {
 						className: _dsh_awiki_css_AwikiSettingsSection_module_css_default.description,
-						children: t("updateCurrent", { version: update?.currentPluginVersion ?? "0.3.12" })
+						children: t("updateCurrent", { version: update?.currentPluginVersion ?? "0.3.17" })
 					}),
 					update !== void 0 && (0, react_jsx_runtime.jsx)(react_jsx_runtime.Fragment, { children: update.currentModelProxyVersion !== void 0 && (0, react_jsx_runtime.jsx)("p", {
 						className: _dsh_awiki_css_AwikiSettingsSection_module_css_default.description,
@@ -21491,13 +22354,17 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 								active: true,
 								pending: awiki.pending !== null,
 								refreshDeviceManagement: props.refreshDeviceManagement,
+								...props.getIdentityServices === void 0 ? {} : { getIdentityServices: props.getIdentityServices },
+								...props.updateIdentityServices === void 0 ? {} : { updateIdentityServices: props.updateIdentityServices },
+								...props.resumeIdentityServicesUpdate === void 0 ? {} : { resumeIdentityServicesUpdate: props.resumeIdentityServicesUpdate },
 								startDeviceJoinVerification: props.startDeviceJoinVerification,
 								approveDeviceJoin: props.approveDeviceJoin,
 								rejectDeviceJoin: props.rejectDeviceJoin,
 								revokeDevice: props.revokeDevice,
+								retryDeviceManagement: props.retryDeviceManagement,
 								prepareRootTransfer: props.prepareRootTransfer,
 								confirmRootTransfer: props.confirmRootTransfer
-							}) : (0, react_jsx_runtime.jsx)("p", {
+							}, `${tenantSnapshot.status === "ready" ? `${tenantSnapshot.value.activeTenantId}:${tenantSnapshot.value.generation}` : "unavailable"}:${awiki.identity?.did ?? "none"}`) : (0, react_jsx_runtime.jsx)("p", {
 								className: _dsh_awiki_css_AwikiSettingsSection_module_css_default.notice,
 								children: props.t("devicesUnavailable")
 							})),
@@ -23535,10 +24402,14 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 							beginRecoveryFromDeviceJoin: (request) => awiki.beginRecoveryFromDeviceJoin(request),
 							retireDeviceIdentityForRejoin: () => awiki.retireDeviceIdentityForRejoin(),
 							refreshDeviceManagement: () => awiki.refreshDeviceManagement(),
+							getIdentityServices: () => awiki.getIdentityServices(),
+							updateIdentityServices: (request) => awiki.updateIdentityServices(request),
+							resumeIdentityServicesUpdate: (request) => awiki.resumeIdentityServicesUpdate(request),
 							startDeviceJoinVerification: (request) => awiki.startDeviceJoinVerification(request),
 							approveDeviceJoin: (request) => awiki.approveDeviceJoin(request),
 							rejectDeviceJoin: (request) => awiki.rejectDeviceJoin(request),
 							revokeDevice: (request) => awiki.revokeDevice(request),
+							retryDeviceManagement: (request) => awiki.retryDeviceManagement(request),
 							prepareRootTransfer: (request) => awiki.prepareRootTransfer(request),
 							confirmRootTransfer: (request) => awiki.confirmRootTransfer(request),
 							updateDisplayName: (displayName) => awiki.updateDisplayName(displayName),
@@ -23612,10 +24483,14 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					drafts: awiki.drafts,
 					loadAwiki: () => awiki.open(),
 					refreshDeviceManagement: () => awiki.refreshDeviceManagement(),
+					getIdentityServices: () => awiki.getIdentityServices(),
+					updateIdentityServices: (request) => awiki.updateIdentityServices(request),
+					resumeIdentityServicesUpdate: (request) => awiki.resumeIdentityServicesUpdate(request),
 					startDeviceJoinVerification: (request) => awiki.startDeviceJoinVerification(request),
 					approveDeviceJoin: (request) => awiki.approveDeviceJoin(request),
 					rejectDeviceJoin: (request) => awiki.rejectDeviceJoin(request),
 					revokeDevice: (request) => awiki.revokeDevice(request),
+					retryDeviceManagement: (request) => awiki.retryDeviceManagement(request),
 					prepareRootTransfer: (request) => awiki.prepareRootTransfer(request),
 					confirmRootTransfer: (request) => awiki.confirmRootTransfer(request),
 					loadIntegration: async () => {