@codemem/core 0.29.2 → 0.30.0-alpha.1

package/dist/{coordinator-api-Dbgsu1O8.js → coordinator-api-B9ooTSx5.js}

@@ -358,13 +358,13 @@ var o = (e, t, n) => {
 	"delete",
 	"options",
 	"patch"
-], O = "Can not add a route since the matcher is already built.", k = class extends Error {}, se = "__COMPOSED_HANDLER", A = (e) => e.text("404 Not Found", 404), j = (e, t) => {
+], O = "Can not add a route since the matcher is already built.", k = class extends Error {}, se = "__COMPOSED_HANDLER", ce = (e) => e.text("404 Not Found", 404), A = (e, t) => {
 	if ("getResponse" in e) {
 		let n = e.getResponse();
 		return t.newResponse(n.body, n);
 	}
 	return console.error(e), t.text("Internal Server Error", 500);
-}, ce = class e {
+}, le = class e {
 	get;
 	post;
 	put;
@@ -405,13 +405,13 @@ var o = (e, t, n) => {
 		});
 		return t.errorHandler = this.errorHandler, t.#n = this.#n, t.routes = this.routes, t;
 	}
-	#n = A;
-	errorHandler = j;
+	#n = ce;
+	errorHandler = A;
 	route(e, n) {
 		let r = this.basePath(e);
 		return n.routes.map((e) => {
 			let i;
-			n.errorHandler === j ? i = e.handler : (i = async (r, i) => (await t([], n.errorHandler)(r, () => e.handler(r, i))).res, i[se] = e.handler), r.#r(e.method, e.path, i);
+			n.errorHandler === A ? i = e.handler : (i = async (r, i) => (await t([], n.errorHandler)(r, () => e.handler(r, i))).res, i[se] = e.handler), r.#r(e.method, e.path, i);
 		}), this;
 	}
 	basePath(e) {
@@ -497,13 +497,13 @@ var o = (e, t, n) => {
 			e.respondWith(this.#a(e.request, e, void 0, e.request.method));
 		});
 	};
-}, M = [];
-function N(e, t) {
+}, j = [];
+function ue(e, t) {
 	let n = this.buildAllMatchers(), r = ((e, t) => {
 		let r = n[e] || n.ALL, i = r[2][t];
 		if (i) return i;
 		let a = t.match(r[0]);
-		if (!a) return [[], M];
+		if (!a) return [[], j];
 		let o = a.indexOf("", 1);
 		return [r[1][o], a];
 	});
@@ -511,17 +511,17 @@ function N(e, t) {
 }
 //#endregion
 //#region ../../node_modules/.pnpm/hono@4.12.14/node_modules/hono/dist/router/reg-exp-router/node.js
-var P = "[^/]+", F = ".*", I = "(?:|/.*)", L = /* @__PURE__ */ Symbol(), le = /* @__PURE__ */ new Set(".\\+*[^]$()");
-function ue(e, t) {
-	return e.length === 1 ? t.length === 1 ? e < t ? -1 : 1 : -1 : t.length === 1 || e === F || e === I ? 1 : t === F || t === I ? -1 : e === P ? 1 : t === P ? -1 : e.length === t.length ? e < t ? -1 : 1 : t.length - e.length;
+var M = "[^/]+", N = ".*", P = "(?:|/.*)", F = /* @__PURE__ */ Symbol(), de = /* @__PURE__ */ new Set(".\\+*[^]$()");
+function fe(e, t) {
+	return e.length === 1 ? t.length === 1 ? e < t ? -1 : 1 : -1 : t.length === 1 || e === N || e === P ? 1 : t === N || t === P ? -1 : e === M ? 1 : t === M ? -1 : e.length === t.length ? e < t ? -1 : 1 : t.length - e.length;
 }
-var de = class e {
+var pe = class e {
 	#e;
 	#t;
 	#n = /* @__PURE__ */ Object.create(null);
 	insert(t, n, r, i, a) {
 		if (t.length === 0) {
-			if (this.#e !== void 0) throw L;
+			if (this.#e !== void 0) throw F;
 			if (a) return;
 			this.#e = n;
 			return;
@@ -529,42 +529,42 @@ var de = class e {
 		let [o, ...s] = t, c = o === "*" ? s.length === 0 ? [
 			"",
 			"",
-			F
+			N
 		] : [
 			"",
 			"",
-			P
+			M
 		] : o === "/*" ? [
 			"",
 			"",
-			I
+			P
 		] : o.match(/^\:([^\{\}]+)(?:\{(.+)\})?$/), l;
 		if (c) {
-			let t = c[1], n = c[2] || P;
-			if (t && c[2] && (n === ".*" || (n = n.replace(/^\((?!\?:)(?=[^)]+\)$)/, "(?:"), /\((?!\?:)/.test(n)))) throw L;
+			let t = c[1], n = c[2] || M;
+			if (t && c[2] && (n === ".*" || (n = n.replace(/^\((?!\?:)(?=[^)]+\)$)/, "(?:"), /\((?!\?:)/.test(n)))) throw F;
 			if (l = this.#n[n], !l) {
-				if (Object.keys(this.#n).some((e) => e !== F && e !== I)) throw L;
+				if (Object.keys(this.#n).some((e) => e !== N && e !== P)) throw F;
 				if (a) return;
 				l = this.#n[n] = new e(), t !== "" && (l.#t = i.varIndex++);
 			}
 			!a && t !== "" && r.push([t, l.#t]);
 		} else if (l = this.#n[o], !l) {
-			if (Object.keys(this.#n).some((e) => e.length > 1 && e !== F && e !== I)) throw L;
+			if (Object.keys(this.#n).some((e) => e.length > 1 && e !== N && e !== P)) throw F;
 			if (a) return;
 			l = this.#n[o] = new e();
 		}
 		l.insert(s, n, r, i, a);
 	}
 	buildRegExpStr() {
-		let e = Object.keys(this.#n).sort(ue).map((e) => {
+		let e = Object.keys(this.#n).sort(fe).map((e) => {
 			let t = this.#n[e];
-			return (typeof t.#t == "number" ? `(${e})@${t.#t}` : le.has(e) ? `\\${e}` : e) + t.buildRegExpStr();
+			return (typeof t.#t == "number" ? `(${e})@${t.#t}` : de.has(e) ? `\\${e}` : e) + t.buildRegExpStr();
 		});
 		return typeof this.#e == "number" && e.unshift(`#${this.#e}`), e.length === 0 ? "" : e.length === 1 ? e[0] : "(?:" + e.join("|") + ")";
 	}
-}, fe = class {
+}, me = class {
 	#e = { varIndex: 0 };
-	#t = new de();
+	#t = new pe();
 	insert(e, t, n) {
 		let r = [], i = [];
 		for (let t = 0;;) {
@@ -598,29 +598,29 @@ var de = class e {
 			r
 		];
 	}
-}, pe = [
+}, he = [
 	/^$/,
 	[],
 	/* @__PURE__ */ Object.create(null)
-], R = /* @__PURE__ */ Object.create(null);
-function z(e) {
-	return R[e] ??= RegExp(e === "*" ? "" : `^${e.replace(/\/\*$|([.\\+*[^\]$()])/g, (e, t) => t ? `\\${t}` : "(?:|/.*)")}$`);
+], I = /* @__PURE__ */ Object.create(null);
+function L(e) {
+	return I[e] ??= RegExp(e === "*" ? "" : `^${e.replace(/\/\*$|([.\\+*[^\]$()])/g, (e, t) => t ? `\\${t}` : "(?:|/.*)")}$`);
 }
-function B() {
-	R = /* @__PURE__ */ Object.create(null);
+function ge() {
+	I = /* @__PURE__ */ Object.create(null);
 }
-function me(e) {
-	let t = new fe(), n = [];
-	if (e.length === 0) return pe;
+function _e(e) {
+	let t = new me(), n = [];
+	if (e.length === 0) return he;
 	let r = e.map((e) => [!/\*|\/:/.test(e[0]), ...e]).sort(([e, t], [n, r]) => e ? 1 : n ? -1 : t.length - r.length), i = /* @__PURE__ */ Object.create(null);
 	for (let e = 0, a = -1, o = r.length; e < o; e++) {
 		let [o, s, c] = r[e];
-		o ? i[s] = [c.map(([e]) => [e, /* @__PURE__ */ Object.create(null)]), M] : a++;
+		o ? i[s] = [c.map(([e]) => [e, /* @__PURE__ */ Object.create(null)]), j] : a++;
 		let l;
 		try {
 			l = t.insert(s, a, o);
 		} catch (e) {
-			throw e === L ? new k(s) : e;
+			throw e === F ? new k(s) : e;
 		}
 		o || (n[a] = c.map(([e, t]) => {
 			let n = /* @__PURE__ */ Object.create(null);
@@ -646,12 +646,12 @@ function me(e) {
 		i
 	];
 }
-function V(e, t) {
+function R(e, t) {
 	if (e) {
-		for (let n of Object.keys(e).sort((e, t) => t.length - e.length)) if (z(n).test(t)) return [...e[n]];
+		for (let n of Object.keys(e).sort((e, t) => t.length - e.length)) if (L(n).test(t)) return [...e[n]];
 	}
 }
-var he = class {
+var ve = class {
 	name = "RegExpRouter";
 	#e;
 	#t;
@@ -668,10 +668,10 @@ var he = class {
 		}), t === "/*" && (t = "*");
 		let a = (t.match(/\/:/g) || []).length;
 		if (/\*$/.test(t)) {
-			let o = z(t);
+			let o = L(t);
 			e === "ALL" ? Object.keys(r).forEach((e) => {
-				r[e][t] ||= V(r[e], t) || V(r.ALL, t) || [];
-			}) : r[e][t] ||= V(r[e], t) || V(r.ALL, t) || [], Object.keys(r).forEach((t) => {
+				r[e][t] ||= R(r[e], t) || R(r.ALL, t) || [];
+			}) : r[e][t] ||= R(r[e], t) || R(r.ALL, t) || [], Object.keys(r).forEach((t) => {
 				(e === "ALL" || e === t) && Object.keys(r[t]).forEach((e) => {
 					o.test(e) && r[t][e].push([n, a]);
 				});
@@ -684,25 +684,25 @@ var he = class {
 		for (let t = 0, s = o.length; t < s; t++) {
 			let c = o[t];
 			Object.keys(i).forEach((o) => {
-				(e === "ALL" || e === o) && (i[o][c] ||= [...V(r[o], c) || V(r.ALL, c) || []], i[o][c].push([n, a - s + t + 1]));
+				(e === "ALL" || e === o) && (i[o][c] ||= [...R(r[o], c) || R(r.ALL, c) || []], i[o][c].push([n, a - s + t + 1]));
 			});
 		}
 	}
-	match = N;
+	match = ue;
 	buildAllMatchers() {
 		let e = /* @__PURE__ */ Object.create(null);
 		return Object.keys(this.#t).concat(Object.keys(this.#e)).forEach((t) => {
 			e[t] ||= this.#n(t);
-		}), this.#e = this.#t = void 0, B(), e;
+		}), this.#e = this.#t = void 0, ge(), e;
 	}
 	#n(e) {
 		let t = [], n = e === "ALL";
 		return [this.#e, this.#t].forEach((r) => {
 			let i = r[e] ? Object.keys(r[e]).map((t) => [t, r[e][t]]) : [];
 			i.length === 0 ? e !== "ALL" && t.push(...Object.keys(r.ALL).map((e) => [e, r.ALL[e]])) : (n ||= !0, t.push(...i));
-		}), n ? me(t) : null;
+		}), n ? _e(t) : null;
 	}
-}, ge = class {
+}, ye = class {
 	name = "SmartRouter";
 	#e = [];
 	#t = [];
@@ -739,15 +739,15 @@ var he = class {
 		if (this.#t || this.#e.length !== 1) throw Error("No active router has been determined yet.");
 		return this.#e[0];
 	}
-}, H = /* @__PURE__ */ Object.create(null), _e = (e) => {
+}, z = /* @__PURE__ */ Object.create(null), be = (e) => {
 	for (let t in e) return !0;
 	return !1;
-}, ve = class e {
+}, xe = class e {
 	#e;
 	#t;
 	#n;
 	#r = 0;
-	#i = H;
+	#i = z;
 	constructor(e, t, n) {
 		if (this.#t = n || /* @__PURE__ */ Object.create(null), this.#e = [], e && t) {
 			let n = /* @__PURE__ */ Object.create(null);
@@ -779,7 +779,7 @@ var he = class {
 	#a(e, t, n, r, i) {
 		for (let a = 0, o = t.#e.length; a < o; a++) {
 			let o = t.#e[a], s = o[n] || o.ALL, c = {};
-			if (s !== void 0 && (s.params = /* @__PURE__ */ Object.create(null), e.push(s), r !== H || i && i !== H)) for (let e = 0, t = s.possibleKeys.length; e < t; e++) {
+			if (s !== void 0 && (s.params = /* @__PURE__ */ Object.create(null), e.push(s), r !== z || i && i !== z)) for (let e = 0, t = s.possibleKeys.length; e < t; e++) {
 				let t = s.possibleKeys[e], n = c[s.score];
 				s.params[t] = i?.[t] && !n ? i[t] : r[t] ?? i?.[t], c[s.score] = !0;
 			}
@@ -787,7 +787,7 @@ var he = class {
 	}
 	search(e, t) {
 		let n = [];
-		this.#i = H;
+		this.#i = z;
 		let r = [this], i = c(t), a = [], o = i.length, s = null;
 		for (let c = 0; c < o; c++) {
 			let l = i[c], u = c === o - 1, d = [];
@@ -795,7 +795,7 @@ var he = class {
 				let p = r[f], m = p.#t[l];
 				m && (m.#i = p.#i, u ? (m.#t["*"] && this.#a(n, m.#t["*"], e, p.#i), this.#a(n, m, e, p.#i)) : d.push(m));
 				for (let r = 0, f = p.#n.length; r < f; r++) {
-					let f = p.#n[r], m = p.#i === H ? {} : { ...p.#i };
+					let f = p.#n[r], m = p.#i === z ? {} : { ...p.#i };
 					if (f === "*") {
 						let t = p.#t["*"];
 						t && (this.#a(n, t, e, p.#i), t.#i = m, d.push(t));
@@ -812,7 +812,7 @@ var he = class {
 						}
 						let r = t.substring(s[c]), l = _.exec(r);
 						if (l) {
-							if (m[g] = l[0], this.#a(n, v, e, p.#i, m), _e(v.#t)) {
+							if (m[g] = l[0], this.#a(n, v, e, p.#i, m), be(v.#t)) {
 								v.#i = m;
 								let e = l[0].match(/\//)?.length ?? 0;
 								(a[e] ||= []).push(v);
@@ -828,11 +828,11 @@ var he = class {
 		}
 		return n.length > 1 && n.sort((e, t) => e.score - t.score), [n.map(({ handler: e, params: t }) => [e, t])];
 	}
-}, ye = class {
+}, Se = class {
 	name = "TrieRouter";
 	#e;
 	constructor() {
-		this.#e = new ve();
+		this.#e = new xe();
 	}
 	add(e, t, n) {
 		let r = y(t);
@@ -845,43 +845,43 @@ var he = class {
 	match(e, t) {
 		return this.#e.search(e, t);
 	}
-}, U = class extends ce {
+}, Ce = class extends le {
 	constructor(e = {}) {
-		super(e), this.router = e.router ?? new ge({ routers: [new he(), new ye()] });
+		super(e), this.router = e.router ?? new ye({ routers: [new ve(), new Se()] });
 	}
 };
 //#endregion
 //#region src/coordinator-invites.ts
-function be(e) {
+function we(e) {
 	let t = "";
 	for (let n of e) t += String.fromCharCode(n);
 	return btoa(t);
 }
-function xe(e) {
+function Te(e) {
 	let t = atob(e), n = new Uint8Array(t.length);
 	for (let e = 0; e < t.length; e += 1) n[e] = t.charCodeAt(e);
 	return n;
 }
-function Se(e) {
+function Ee(e) {
 	return e.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
-function Ce(e) {
+function De(e) {
 	let t = e.replace(/-/g, "+").replace(/_/g, "/");
 	return t + "=".repeat((4 - t.length % 4) % 4);
 }
-function W(e) {
+function B(e) {
 	let t = JSON.stringify(e);
-	return Se(be(new TextEncoder().encode(t)));
+	return Ee(we(new TextEncoder().encode(t)));
 }
-function we(e) {
-	let t = new TextDecoder().decode(xe(Ce(e))), n = JSON.parse(t);
+function Oe(e) {
+	let t = new TextDecoder().decode(Te(De(e))), n = JSON.parse(t);
 	if (typeof n != "object" || !n) throw Error("invalid invite payload");
 	return n;
 }
-function G(e) {
+function V(e) {
 	return `codemem://join?invite=${encodeURIComponent(e)}`;
 }
-function Te(e) {
+function ke(e) {
 	let t = e.trim();
 	if (t.startsWith("codemem://")) {
 		let e = new URL(t).searchParams.get("invite") ?? "";
@@ -892,20 +892,20 @@ function Te(e) {
 }
 //#endregion
 //#region ../../node_modules/.pnpm/limiter@3.0.0/node_modules/limiter/dist/esm/clock.js
-function Ee(e) {
+function Ae(e) {
 	let t = performance.now() * .001, n = Math.floor(t), r = Math.floor(t % 1 * 1e9);
 	return e != null && (n -= e[0], r -= e[1], r < 0 && (n--, r += 1e9)), [n, r];
 }
-function K() {
-	let [e, t] = Ee();
+function H() {
+	let [e, t] = Ae();
 	return e * 1e3 + Math.floor(t / 1e6);
 }
-function q(e) {
+function U(e) {
 	return new Promise((t) => setTimeout(t, e));
 }
 //#endregion
 //#region ../../node_modules/.pnpm/limiter@3.0.0/node_modules/limiter/dist/esm/TokenBucket.js
-var De = class {
+var je = class {
 	bucketSize;
 	tokensPerInterval;
 	interval;
@@ -932,13 +932,13 @@ var De = class {
 			default: throw Error("Invalid interval " + n);
 		}
 		else this.interval = n;
-		this.parentBucket = r, this.content = 0, this.lastDrip = K();
+		this.parentBucket = r, this.content = 0, this.lastDrip = H();
 	}
 	async removeTokens(e) {
 		if (this.bucketSize === 0) return Infinity;
 		if (e > this.bucketSize) throw Error(`Requested tokens ${e} exceeds bucket size ${this.bucketSize}`);
 		this.drip();
-		let t = async () => (await q(Math.ceil((e - this.content) * (this.interval / this.tokensPerInterval))), this.removeTokens(e));
+		let t = async () => (await U(Math.ceil((e - this.content) * (this.interval / this.tokensPerInterval))), this.removeTokens(e));
 		if (e > this.content) return t();
 		if (this.parentBucket != null) {
 			let n = await this.parentBucket.removeTokens(e);
@@ -953,30 +953,30 @@ var De = class {
 			let e = this.content;
 			return this.content = this.bucketSize, this.content > e;
 		}
-		let e = K(), t = Math.max(e - this.lastDrip, 0);
+		let e = H(), t = Math.max(e - this.lastDrip, 0);
 		this.lastDrip = e;
 		let n = t * (this.tokensPerInterval / this.interval), r = this.content;
 		return this.content = Math.min(this.content + n, this.bucketSize), Math.floor(this.content) > Math.floor(r);
 	}
-}, Oe = class {
+}, Me = class {
 	tokenBucket;
 	curIntervalStart;
 	tokensThisInterval;
 	fireImmediately;
 	constructor({ tokensPerInterval: e, interval: t, fireImmediately: n }) {
-		this.tokenBucket = new De({
+		this.tokenBucket = new je({
 			bucketSize: e,
 			tokensPerInterval: e,
 			interval: t
-		}), this.tokenBucket.content = e, this.curIntervalStart = K(), this.tokensThisInterval = 0, this.fireImmediately = n ?? !1;
+		}), this.tokenBucket.content = e, this.curIntervalStart = H(), this.tokensThisInterval = 0, this.fireImmediately = n ?? !1;
 	}
 	async removeTokens(e) {
 		if (e > this.tokenBucket.bucketSize) throw Error(`Requested tokens ${e} exceeds maximum tokens per interval ${this.tokenBucket.bucketSize}`);
-		let t = K();
+		let t = H();
 		if ((t < this.curIntervalStart || t - this.curIntervalStart >= this.tokenBucket.interval) && (this.curIntervalStart = t, this.tokensThisInterval = 0), e > this.tokenBucket.tokensPerInterval - this.tokensThisInterval) {
 			if (this.fireImmediately) return -1;
 			{
-				await q(Math.ceil(this.curIntervalStart + this.tokenBucket.interval - t));
+				await U(Math.ceil(this.curIntervalStart + this.tokenBucket.interval - t));
 				let n = await this.tokenBucket.removeTokens(e);
 				return this.tokensThisInterval += e, n;
 			}
@@ -986,7 +986,7 @@ var De = class {
 	}
 	tryRemoveTokens(e) {
 		if (e > this.tokenBucket.bucketSize) return !1;
-		let t = K();
+		let t = H();
 		if ((t < this.curIntervalStart || t - this.curIntervalStart >= this.tokenBucket.interval) && (this.curIntervalStart = t, this.tokensThisInterval = 0), e > this.tokenBucket.tokensPerInterval - this.tokensThisInterval) return !1;
 		let n = this.tokenBucket.tryRemoveTokens(e);
 		return n && (this.tokensThisInterval += e), n;
@@ -997,7 +997,7 @@ var De = class {
 };
 //#endregion
 //#region src/request-rate-limit.ts
-function ke(e = {}) {
+function Ne(e = {}) {
 	let t = Math.max(1e3, Math.trunc(e.windowMs ?? 6e4)), n = e.now ?? (() => Date.now()), r = /* @__PURE__ */ new Map(), i = 0;
 	function a(e) {
 		return Math.max(1, Math.ceil(t / Math.max(1, e) / 1e3));
@@ -1014,7 +1014,7 @@ function ke(e = {}) {
 		o(l);
 		let u = `${c}:${e}`, d = r.get(u);
 		return d || (d = {
-			limiter: new Oe({
+			limiter: new Me({
 				tokensPerInterval: c,
 				interval: t,
 				fireImmediately: !0
@@ -1030,16 +1030,43 @@ function ke(e = {}) {
 	} };
 }
 //#endregion
+//#region src/scope-membership-semantics.ts
+var W = "Revocation prevents future sync only; it does not remove data already copied to the revoked device.";
+function Pe(e) {
+	let t = Number.isFinite(e.membershipEpoch) ? Number(e.membershipEpoch) : null, n = Number.isFinite(e.requiredEpoch) ? Number(e.requiredEpoch) : null;
+	return t == null || n == null ? {
+		membership_epoch: t,
+		required_epoch: n,
+		stale: !1,
+		reason: "unknown_epoch"
+	} : {
+		membership_epoch: t,
+		required_epoch: n,
+		stale: t < n,
+		reason: t < n ? "stale_epoch" : "current"
+	};
+}
+function G(e) {
+	return {
+		scope_id: e.scopeId,
+		device_id: e.deviceId,
+		membership_epoch: Number.isFinite(e.membershipEpoch) ? Number(e.membershipEpoch) : null,
+		prevents_future_sync: !0,
+		deletes_already_copied_data: !1,
+		message: W
+	};
+}
+//#endregion
 //#region src/sync-auth-constants.ts
-var Ae = 300;
+var K = 300;
 //#endregion
 //#region src/sync-fingerprint.ts
-function J(t) {
+function q(t) {
 	return e("sha256").update(t, "utf-8").digest("hex");
 }
 //#endregion
 //#region src/coordinator-api.ts
-var Y = 64 * 1024, X = "X-Codemem-Coordinator-Admin", je = 120, Me = 30;
+var J = 64 * 1024, Y = "X-Codemem-Coordinator-Admin", X = "X-Codemem-Coordinator-Admin-Actor", Fe = 120, Ie = 30;
 function Z(e, t) {
 	let n = t.adminSecret();
 	if (!n) return {
@@ -1058,14 +1085,14 @@ function Z(e, t) {
 		error: "missing_admin_header"
 	};
 }
-function Ne(e) {
+function Le(e) {
 	let t = new URL(e);
 	return t.search ? `${t.pathname}${t.search}` : t.pathname;
 }
-async function Pe(e, t, n, r) {
+async function Re(e, t, n, r) {
 	return await e.recordNonce(t, n, r);
 }
-async function Fe(e, t) {
+async function ze(e, t) {
 	await e.cleanupNonces(t);
 }
 async function Q(e, t, n, r) {
@@ -1085,7 +1112,7 @@ async function Q(e, t, n, r) {
 	try {
 		l = await n({
 			method: r.method,
-			pathWithQuery: Ne(r.url),
+			pathWithQuery: Le(r.url),
 			bodyBytes: r.body,
 			timestamp: o,
 			nonce: s,
@@ -1106,7 +1133,7 @@ async function Q(e, t, n, r) {
 		enrollment: null
 	};
 	let u = t.now();
-	return await Pe(e, i, s, u) ? (await Fe(e, (/* @__PURE__ */ new Date(new Date(u).getTime() - 300 * 2 * 1e3)).toISOString()), {
+	return await Re(e, i, s, u) ? (await ze(e, (/* @__PURE__ */ new Date(new Date(u).getTime() - 300 * 2 * 1e3)).toISOString()), {
 		ok: !0,
 		error: "ok",
 		enrollment: c
@@ -1116,9 +1143,9 @@ async function Q(e, t, n, r) {
 		enrollment: null
 	};
 }
-function Ie(e) {
+function Be(e) {
 	if (!e?.storeFactory || !e.runtime || !e.requestVerifier) throw Error("createCoordinatorApp requires storeFactory, runtime, and requestVerifier.");
-	let t = e.runtime, n = e.storeFactory, r = e.requestVerifier, i = e.requestRateLimit ?? {}, a = i.limiter ?? ke(), o = Math.max(1, Math.trunc(i.readLimit ?? je)), s = Math.max(1, Math.trunc(i.mutationLimit ?? Me)), c = Math.max(1, Math.trunc(i.unauthenticatedReadLimit ?? Math.min(20, o))), l = Math.max(1, Math.trunc(i.unauthenticatedMutationLimit ?? Math.min(10, s))), u = new U(), d = new TextDecoder();
+	let t = e.runtime, n = e.storeFactory, r = e.requestVerifier, i = e.requestRateLimit ?? {}, a = i.limiter ?? Ne(), o = Math.max(1, Math.trunc(i.readLimit ?? Fe)), s = Math.max(1, Math.trunc(i.mutationLimit ?? Ie)), c = Math.max(1, Math.trunc(i.unauthenticatedReadLimit ?? Math.min(20, o))), l = Math.max(1, Math.trunc(i.unauthenticatedMutationLimit ?? Math.min(10, s))), u = new Ce(), d = new TextDecoder();
 	function f(e, t, n) {
 		let r = e.req.method === "GET" || e.req.method === "HEAD" || e.req.method === "OPTIONS", i = a.check(`${e.req.method}:${n ? "auth" : "anon"}:${t}`, n ? r ? o : s : r ? c : l);
 		return i.allowed ? null : (e.header("Retry-After", String(i.retryAfterS)), e.json({
@@ -1128,7 +1155,7 @@ function Ie(e) {
 	}
 	async function p(e) {
 		let t = Number.parseInt(e.req.header("content-length") ?? "", 10);
-		if (Number.isFinite(t) && t > Y) return null;
+		if (Number.isFinite(t) && t > J) return null;
 		let n = e.req.raw.body;
 		if (!n) return new Uint8Array();
 		let r = n.getReader(), i = [], a = 0;
@@ -1137,7 +1164,7 @@ function Ie(e) {
 				let { done: e, value: t } = await r.read();
 				if (e) break;
 				if (t) {
-					if (a += t.byteLength, a > Y) return await r.cancel(), null;
+					if (a += t.byteLength, a > J) return await r.cancel(), null;
 					i.push(t);
 				}
 			}
@@ -1156,6 +1183,60 @@ function Ie(e) {
 			return null;
 		}
 	}
+	function h(e, t) {
+		let n = e[t];
+		return n == null ? null : String(n).trim() || null;
+	}
+	function g(e) {
+		return e?.trim() || null;
+	}
+	function _(e, t) {
+		let n = e[t];
+		if (n == null || n === "") return null;
+		if (typeof n != "number" && typeof n != "string") return NaN;
+		if (typeof n == "string") {
+			let e = n.trim();
+			if (!e) return NaN;
+			let t = Number(e);
+			return Number.isFinite(t) ? Math.trunc(t) : NaN;
+		}
+		let r = n;
+		return Number.isFinite(r) ? Math.trunc(r) : NaN;
+	}
+	function v(e) {
+		return [
+			"1",
+			"true",
+			"yes"
+		].includes(String(e ?? "").trim().toLowerCase());
+	}
+	async function y(e, t, n) {
+		if (!t) return n.json({ error: "group_id_required" }, 400);
+		let r = await e.getGroup(t);
+		return r ? r.archived_at ? n.json({ error: "group_archived" }, 409) : null : n.json({ error: "group_not_found" }, 404);
+	}
+	async function b(e, t, n, r) {
+		let i = await y(e, t, r);
+		if (i) return {
+			scope: null,
+			response: i
+		};
+		if (!n) return {
+			scope: null,
+			response: r.json({ error: "scope_id_required" }, 400)
+		};
+		let a = (await e.listScopes({
+			groupId: t,
+			includeInactive: !0
+		})).find((e) => e.scope_id === n) ?? null;
+		return a ? {
+			scope: a,
+			response: null
+		} : {
+			scope: null,
+			response: r.json({ error: "scope_not_found" }, 404)
+		};
+	}
 	return u.post("/v1/presence", async (e) => {
 		let i = await p(e);
 		if (i == null) return e.json({ error: "body_too_large" }, 413);
@@ -1290,7 +1371,7 @@ function Ie(e) {
 			await c.close();
 		}
 	}), u.post("/v1/admin/devices", async (e) => {
-		let r = Z(e.req.header(X), t);
+		let r = Z(e.req.header(Y), t);
 		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
 		let i = f(e, "admin", !0);
 		if (i) return i;
@@ -1300,7 +1381,7 @@ function Ie(e) {
 		if (!o) return e.json({ error: "invalid_json" }, 400);
 		let s = String(o.group_id ?? "").trim(), c = String(o.device_id ?? "").trim(), l = String(o.fingerprint ?? "").trim(), u = String(o.public_key ?? "").trim(), d = String(o.display_name ?? "").trim() || null;
 		if (!s || !c || !l || !u) return e.json({ error: "group_id_device_id_fingerprint_public_key_required" }, 400);
-		if (J(u) !== l) return e.json({ error: "fingerprint_mismatch" }, 400);
+		if (q(u) !== l) return e.json({ error: "fingerprint_mismatch" }, 400);
 		let h = n();
 		try {
 			await h.createGroup(s), await h.enrollDevice(s, {
@@ -1314,7 +1395,7 @@ function Ie(e) {
 		}
 		return e.json({ ok: !0 });
 	}), u.get("/v1/admin/groups", async (e) => {
-		let r = Z(e.req.header(X), t);
+		let r = Z(e.req.header(Y), t);
 		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
 		let i = f(e, "admin", !0);
 		if (i) return i;
@@ -1329,7 +1410,7 @@ function Ie(e) {
 			await o.close();
 		}
 	}), u.post("/v1/admin/groups", async (e) => {
-		let r = Z(e.req.header(X), t);
+		let r = Z(e.req.header(Y), t);
 		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
 		let i = f(e, "admin", !0);
 		if (i) return i;
@@ -1349,7 +1430,7 @@ function Ie(e) {
 			await l.close();
 		}
 	}), u.post("/v1/admin/groups/rename", async (e) => {
-		let r = Z(e.req.header(X), t);
+		let r = Z(e.req.header(Y), t);
 		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
 		let i = f(e, "admin", !0);
 		if (i) return i;
@@ -1369,7 +1450,7 @@ function Ie(e) {
 			await l.close();
 		}
 	}), u.post("/v1/admin/groups/archive", async (e) => {
-		let r = Z(e.req.header(X), t);
+		let r = Z(e.req.header(Y), t);
 		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
 		let i = f(e, "admin", !0);
 		if (i) return i;
@@ -1389,7 +1470,7 @@ function Ie(e) {
 			await c.close();
 		}
 	}), u.post("/v1/admin/groups/unarchive", async (e) => {
-		let r = Z(e.req.header(X), t);
+		let r = Z(e.req.header(Y), t);
 		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
 		let i = f(e, "admin", !0);
 		if (i) return i;
@@ -1408,8 +1489,197 @@ function Ie(e) {
 		} finally {
 			await c.close();
 		}
+	}), u.get("/v1/admin/groups/:group_id/scopes", async (e) => {
+		let r = Z(e.req.header(Y), t);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
+		if (i) return i;
+		let a = String(e.req.param("group_id") ?? "").trim(), o = n();
+		try {
+			let t = await y(o, a, e);
+			if (t) return t;
+			let n = v(e.req.query("include_inactive"));
+			return e.json({ items: await o.listScopes({
+				groupId: a,
+				includeInactive: n
+			}) });
+		} finally {
+			await o.close();
+		}
+	}), u.post("/v1/admin/groups/:group_id/scopes", async (e) => {
+		let r = Z(e.req.header(Y), t);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
+		if (i) return i;
+		let a = await p(e);
+		if (a == null) return e.json({ error: "body_too_large" }, 413);
+		let o = m(a);
+		if (!o) return e.json({ error: "invalid_json" }, 400);
+		let s = String(e.req.param("group_id") ?? "").trim(), c = h(o, "scope_id"), l = h(o, "label"), u = _(o, "membership_epoch");
+		if (!c || !l) return e.json({ error: "scope_id_and_label_required" }, 400);
+		if (Number.isNaN(u)) return e.json({ error: "membership_epoch_must_be_number" }, 400);
+		let d = n();
+		try {
+			let t = await y(d, s, e);
+			if (t) return t;
+			let n = await d.createScope({
+				scopeId: c,
+				label: l,
+				kind: h(o, "kind"),
+				authorityType: h(o, "authority_type"),
+				coordinatorId: h(o, "coordinator_id"),
+				groupId: s,
+				manifestIssuerDeviceId: h(o, "manifest_issuer_device_id"),
+				membershipEpoch: u,
+				manifestHash: h(o, "manifest_hash"),
+				status: h(o, "status")
+			});
+			return e.json({
+				ok: !0,
+				scope: n
+			}, 201);
+		} catch (t) {
+			return e.json({ error: t instanceof Error ? t.message : String(t) }, 400);
+		} finally {
+			await d.close();
+		}
+	}), u.patch("/v1/admin/groups/:group_id/scopes/:scope_id", async (e) => {
+		let r = Z(e.req.header(Y), t);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
+		if (i) return i;
+		let a = await p(e);
+		if (a == null) return e.json({ error: "body_too_large" }, 413);
+		let o = m(a);
+		if (!o) return e.json({ error: "invalid_json" }, 400);
+		let s = String(e.req.param("group_id") ?? "").trim(), c = String(e.req.param("scope_id") ?? "").trim(), l = _(o, "membership_epoch");
+		if (!c) return e.json({ error: "scope_id_required" }, 400);
+		if (Number.isNaN(l)) return e.json({ error: "membership_epoch_must_be_number" }, 400);
+		let u = n();
+		try {
+			let t = await b(u, s, c, e);
+			if (t.response) return t.response;
+			let n = await u.updateScope({
+				scopeId: c,
+				label: o.label === void 0 ? void 0 : h(o, "label"),
+				kind: o.kind === void 0 ? void 0 : h(o, "kind"),
+				authorityType: o.authority_type === void 0 ? void 0 : h(o, "authority_type"),
+				coordinatorId: o.coordinator_id === void 0 ? void 0 : h(o, "coordinator_id"),
+				groupId: s,
+				manifestIssuerDeviceId: o.manifest_issuer_device_id === void 0 ? void 0 : h(o, "manifest_issuer_device_id"),
+				membershipEpoch: l,
+				manifestHash: o.manifest_hash === void 0 ? void 0 : h(o, "manifest_hash"),
+				status: o.status === void 0 ? void 0 : h(o, "status")
+			});
+			return n ? e.json({
+				ok: !0,
+				scope: n
+			}) : e.json({ error: "scope_not_found" }, 404);
+		} catch (t) {
+			return e.json({ error: t instanceof Error ? t.message : String(t) }, 400);
+		} finally {
+			await u.close();
+		}
+	}), u.get("/v1/admin/groups/:group_id/scopes/:scope_id/members", async (e) => {
+		let r = Z(e.req.header(Y), t);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
+		if (i) return i;
+		let a = String(e.req.param("group_id") ?? "").trim(), o = String(e.req.param("scope_id") ?? "").trim(), s = n();
+		try {
+			let t = await b(s, a, o, e);
+			return t.response ? t.response : e.json({ items: await s.listScopeMemberships(o, v(e.req.query("include_revoked"))) });
+		} finally {
+			await s.close();
+		}
+	}), u.post("/v1/admin/groups/:group_id/scopes/:scope_id/members", async (e) => {
+		let r = Z(e.req.header(Y), t);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
+		if (i) return i;
+		let a = await p(e);
+		if (a == null) return e.json({ error: "body_too_large" }, 413);
+		let o = m(a);
+		if (!o) return e.json({ error: "invalid_json" }, 400);
+		let s = String(e.req.param("group_id") ?? "").trim(), c = String(e.req.param("scope_id") ?? "").trim(), l = h(o, "device_id"), u = _(o, "membership_epoch");
+		if (!l) return e.json({ error: "device_id_required" }, 400);
+		if (Number.isNaN(u)) return e.json({ error: "membership_epoch_must_be_number" }, 400);
+		let d = n();
+		try {
+			let t = await b(d, s, c, e);
+			if (t.response) return t.response;
+			if (t.scope?.status !== "active") return e.json({ error: "scope_not_active" }, 409);
+			if (!await d.getEnrollment(s, l)) return e.json({ error: "device_not_enrolled_for_scope_group" }, 404);
+			let n = await d.grantScopeMembership({
+				scopeId: c,
+				deviceId: l,
+				role: h(o, "role"),
+				membershipEpoch: u,
+				coordinatorId: h(o, "coordinator_id"),
+				groupId: s,
+				manifestIssuerDeviceId: h(o, "manifest_issuer_device_id"),
+				manifestHash: h(o, "manifest_hash"),
+				signedManifestJson: h(o, "signed_manifest_json"),
+				actorType: "admin",
+				actorId: g(e.req.header(X))
+			});
+			return e.json({
+				ok: !0,
+				membership: n
+			}, 201);
+		} catch (t) {
+			return e.json({ error: t instanceof Error ? t.message : String(t) }, 400);
+		} finally {
+			await d.close();
+		}
+	}), u.post("/v1/admin/groups/:group_id/scopes/:scope_id/members/:device_id/revoke", async (e) => {
+		let r = Z(e.req.header(Y), t);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
+		if (i) return i;
+		let a = await p(e);
+		if (a == null) return e.json({ error: "body_too_large" }, 413);
+		let o = a.byteLength > 0 ? m(a) : {};
+		if (!o) return e.json({ error: "invalid_json" }, 400);
+		let s = String(e.req.param("group_id") ?? "").trim(), c = String(e.req.param("scope_id") ?? "").trim(), l = String(e.req.param("device_id") ?? "").trim(), u = _(o, "membership_epoch");
+		if (!l) return e.json({ error: "device_id_required" }, 400);
+		if (Number.isNaN(u)) return e.json({ error: "membership_epoch_must_be_number" }, 400);
+		let d = n();
+		try {
+			let t = await b(d, s, c, e);
+			if (t.response) return t.response;
+			if (!await d.revokeScopeMembership({
+				scopeId: c,
+				deviceId: l,
+				membershipEpoch: u,
+				manifestHash: h(o, "manifest_hash"),
+				signedManifestJson: h(o, "signed_manifest_json"),
+				actorType: "admin",
+				actorId: g(e.req.header(X))
+			})) return e.json({ error: "membership_not_found" }, 404);
+			let n;
+			try {
+				n = (await d.listScopeMemberships(c, !0)).find((e) => e.device_id === l);
+			} catch {
+				n = void 0;
+			}
+			return e.json({
+				ok: !0,
+				scope_id: c,
+				device_id: l,
+				revocation: G({
+					scopeId: c,
+					deviceId: l,
+					membershipEpoch: n?.membership_epoch ?? u
+				})
+			});
+		} catch (t) {
+			return e.json({ error: t instanceof Error ? t.message : String(t) }, 400);
+		} finally {
+			await d.close();
+		}
 	}), u.get("/v1/admin/devices", async (e) => {
-		let r = Z(e.req.header(X), t);
+		let r = Z(e.req.header(Y), t);
 		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
 		let i = f(e, "admin", !0);
 		if (i) return i;
@@ -1426,7 +1696,7 @@ function Ie(e) {
 			await s.close();
 		}
 	}), u.post("/v1/admin/devices/rename", async (e) => {
-		let r = Z(e.req.header(X), t);
+		let r = Z(e.req.header(Y), t);
 		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
 		let i = f(e, "admin", !0);
 		if (i) return i;
@@ -1449,7 +1719,7 @@ function Ie(e) {
 			await u.close();
 		}
 	}), u.post("/v1/admin/devices/disable", async (e) => {
-		let r = Z(e.req.header(X), t);
+		let r = Z(e.req.header(Y), t);
 		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
 		let i = f(e, "admin", !0);
 		if (i) return i;
@@ -1466,7 +1736,7 @@ function Ie(e) {
 			await l.close();
 		}
 	}), u.post("/v1/admin/devices/enable", async (e) => {
-		let r = Z(e.req.header(X), t);
+		let r = Z(e.req.header(Y), t);
 		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
 		let i = f(e, "admin", !0);
 		if (i) return i;
@@ -1483,7 +1753,7 @@ function Ie(e) {
 			await l.close();
 		}
 	}), u.post("/v1/admin/devices/remove", async (e) => {
-		let r = Z(e.req.header(X), t);
+		let r = Z(e.req.header(Y), t);
 		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
 		let i = f(e, "admin", !0);
 		if (i) return i;
@@ -1500,7 +1770,7 @@ function Ie(e) {
 			await l.close();
 		}
 	}), u.post("/v1/admin/invites", async (e) => {
-		let r = Z(e.req.header(X), t);
+		let r = Z(e.req.header(Y), t);
 		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
 		let i = f(e, "admin", !0);
 		if (i) return i;
@@ -1529,19 +1799,19 @@ function Ie(e) {
 				token: String(n.token ?? ""),
 				expires_at: l,
 				team_name: n.team_name_snapshot ?? null
-			}, i = W(r), { token: a, ...f } = n;
+			}, i = B(r), { token: a, ...f } = n;
 			return e.json({
 				ok: !0,
 				invite: f,
 				payload: r,
 				encoded: i,
-				link: G(i)
+				link: V(i)
 			});
 		} finally {
 			await d.close();
 		}
 	}), u.get("/v1/admin/invites", async (e) => {
-		let r = Z(e.req.header(X), t);
+		let r = Z(e.req.header(Y), t);
 		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
 		let i = f(e, "admin", !0);
 		if (i) return i;
@@ -1555,7 +1825,7 @@ function Ie(e) {
 			await o.close();
 		}
 	}), u.get("/v1/admin/bootstrap-grants/:grantId", async (e) => {
-		let r = Z(e.req.header(X), t);
+		let r = Z(e.req.header(Y), t);
 		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
 		let i = f(e, "admin", !0);
 		if (i) return i;
@@ -1576,7 +1846,7 @@ function Ie(e) {
 			await o.close();
 		}
 	}), u.get("/v1/admin/bootstrap-grants", async (e) => {
-		let r = Z(e.req.header(X), t);
+		let r = Z(e.req.header(Y), t);
 		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
 		let i = f(e, "admin", !0);
 		if (i) return i;
@@ -1589,7 +1859,7 @@ function Ie(e) {
 			await o.close();
 		}
 	}), u.post("/v1/admin/bootstrap-grants/revoke", async (e) => {
-		let r = Z(e.req.header(X), t);
+		let r = Z(e.req.header(Y), t);
 		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
 		let i = f(e, "admin", !0);
 		if (i) return i;
@@ -1617,7 +1887,7 @@ function Ie(e) {
 		runtime: t,
 		rateLimitedResponse: f
 	})), u.get("/v1/admin/join-requests", async (e) => {
-		let r = Z(e.req.header(X), t);
+		let r = Z(e.req.header(Y), t);
 		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
 		let i = f(e, "admin", !0);
 		if (i) return i;
@@ -1636,7 +1906,7 @@ function Ie(e) {
 		if (!i) return e.json({ error: "invalid_json" }, 400);
 		let a = String(i.token ?? "").trim(), o = String(i.device_id ?? "").trim(), s = String(i.fingerprint ?? "").trim(), c = String(i.public_key ?? "").trim(), l = String(i.display_name ?? "").trim() || null;
 		if (!a || !o || !s || !c) return e.json({ error: "token_device_id_fingerprint_public_key_required" }, 400);
-		if (J(c) !== s) return e.json({ error: "fingerprint_mismatch" }, 400);
+		if (q(c) !== s) return e.json({ error: "fingerprint_mismatch" }, 400);
 		let u = n();
 		try {
 			let n = await u.getInviteByToken(a);
@@ -1690,13 +1960,13 @@ function Ie(e) {
 	}), u;
 }
 async function $(e, t, n) {
-	let r = Z(e.req.header(X), n.runtime);
+	let r = Z(e.req.header(Y), n.runtime);
 	if (!r.ok) return n.rateLimitedResponse(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
 	let i = n.rateLimitedResponse(e, "admin", !0);
 	if (i) return i;
 	let a = await (async () => {
 		let t = Number.parseInt(e.req.header("content-length") ?? "", 10);
-		if (Number.isFinite(t) && t > Y) return null;
+		if (Number.isFinite(t) && t > J) return null;
 		let n = e.req.raw.body;
 		if (!n) return new Uint8Array();
 		let r = n.getReader(), i = [], a = 0;
@@ -1705,7 +1975,7 @@ async function $(e, t, n) {
 				let { done: e, value: t } = await r.read();
 				if (e) break;
 				if (t) {
-					if (a += t.byteLength, a > Y) return await r.cancel(), null;
+					if (a += t.byteLength, a > J) return await r.cancel(), null;
 					i.push(t);
 				}
 			}
@@ -1753,6 +2023,6 @@ async function $(e, t, n) {
 	}
 }
 //#endregion
-export { W as a, we as i, J as n, Te as o, Ae as r, G as s, Ie as t };
+export { G as a, B as c, W as i, ke as l, q as n, Pe as o, K as r, Oe as s, Be as t, V as u };
 
-//# sourceMappingURL=coordinator-api-Dbgsu1O8.js.map
+//# sourceMappingURL=coordinator-api-B9ooTSx5.js.map