@codemem/core 0.43.2 → 0.44.0-beta.1

package/dist/{coordinator-api-DGTIU3Ri.js → coordinator-api-BAufmPEa.js}

@@ -1,57 +1,338 @@
 import { resolve as e } from "node:path";
 import { createHash as t } from "node:crypto";
+function n(e) {
+	if (e.devices.length > 500 || e.projects.length > 500 || e.devices.length * e.projects.length > 1e4) throw Error("legacy_team_setup_roster_too_large");
+}
+function r(e) {
+	if (e.projectIdentities.size * e.deviceCount > 1e4) throw Error("legacy_team_setup_roster_too_large");
+}
+function i(e, t, n) {
+	if (n.length === 0) return;
+	let r = Number(e.prepare("SELECT COUNT(*) FROM identity_devices").pluck().get() ?? 0);
+	if ((t.length + r) * n.length > 1e4) throw Error("legacy_team_setup_roster_too_large");
+}
+function a(e, t, n, r) {
+	if (!r) return;
+	let i = [...new Set(t.map((e) => e.deviceId))], a = i.map(() => "?").join(", "), o = a ? `AND device_id NOT IN (${a})` : "", s = Number(e.prepare(`SELECT COUNT(*) FROM legacy_team_setup_draft_devices
+				 WHERE attempt_id = ? ${o}`).pluck().get(r, ...i) ?? 0), c = t.length + s;
+	if (c > 500 || c * n.length > 1e4) throw Error("legacy_team_setup_roster_too_large");
+}
+//#endregion
+//#region src/recipient-policy-identifiers.ts
+function o(e, t) {
+	return e < t ? -1 : +(e > t);
+}
+var s = /[\p{Cc}\p{Cf}]/u;
+function c(e, t) {
+	return typeof e == "string" && e.length > 0 && e === e.trim() && e.length <= t && !s.test(e);
+}
+function l(e) {
+	return c(e, 256);
+}
+function u(e) {
+	return c(e, 2048);
+}
+var d = "Recipient policy value must be strict JSON data";
+function f() {
+	throw TypeError(d);
+}
+function p(e) {
+	let t = JSON.stringify(e);
+	return t === void 0 ? f() : t;
+}
+function m(e, t) {
+	if (e === null) return "null";
+	if (typeof e == "boolean") return e ? "true" : "false";
+	if (typeof e == "string") return p(e);
+	if (typeof e == "number") return !Number.isFinite(e) || Object.is(e, -0) ? f() : String(e);
+	if (typeof e != "object" || t.has(e)) return f();
+	t.add(e);
+	try {
+		if (Array.isArray(e)) {
+			if (Object.getPrototypeOf(e) !== Array.prototype) return f();
+			let n = Reflect.ownKeys(e);
+			if (n.length !== e.length + 1 || n.some((e) => typeof e != "string")) return f();
+			let r = [];
+			for (let n = 0; n < e.length; n += 1) {
+				let i = Object.getOwnPropertyDescriptor(e, String(n));
+				if (!i?.enumerable || !("value" in i)) return f();
+				r.push(m(i.value, t));
+			}
+			return `[${r.join(",")}]`;
+		}
+		let n = Object.getPrototypeOf(e);
+		return n !== Object.prototype && n !== null ? f() : `{${Reflect.ownKeys(e).map((t) => {
+			if (typeof t != "string") return f();
+			let n = Object.getOwnPropertyDescriptor(e, t);
+			return !n?.enumerable || !("value" in n) ? f() : [t, n.value];
+		}).toSorted(([e], [t]) => o(e, t)).map(([e, n]) => `${p(e)}:${m(n, t)}`).join(",")}}`;
+	} finally {
+		t.delete(e);
+	}
+}
+function h(e) {
+	return m(e, /* @__PURE__ */ new WeakSet());
+}
+function g(e, n) {
+	if (e.includes("\0") || !e.isWellFormed()) throw TypeError("Recipient policy digest prefix must be well-formed without NUL");
+	return `${e}:${t("sha256").update(e, "utf8").update("\0", "utf8").update(h(n), "utf8").digest("hex")}`;
+}
+function _(e, n) {
+	return `${e}:${t("sha256").update(h(n), "utf8").digest("hex")}`;
+}
+var v = ["team_invite", "coordinator_invite"];
+function y(e, n) {
+	return `legacy-team-candidate:${t("sha256").update(JSON.stringify([e, n])).digest("hex").slice(0, 32)}`;
+}
+function ee(e, t) {
+	return g("legacy-team-project-ref-v1", [e, t]);
+}
+function b(e, t) {
+	return g("legacy-team-canonical-project-ref-v1", [e, t]);
+}
+function x(e, t) {
+	return g("legacy-team-device-ref-v1", [e, t]);
+}
+function S(e) {
+	return _("policy-team-v1", e);
+}
+function te(e) {
+	return g("legacy-team-roster-v1", e.map((e) => ({
+		deviceId: e.deviceId,
+		fingerprint: e.fingerprint,
+		enabled: e.enabled,
+		identityId: e.identityId
+	})).toSorted((e, t) => o(e.deviceId, t.deviceId)));
+}
+//#endregion
+//#region src/coordinator-legacy-team-completion.ts
+var C = 1, w = 50, T = 500, E = 15e5, ne = 25 * E, re = 256, ie = 37661024, ae = "completion_conflict", oe = class extends Error {
+	code = ae;
+	constructor() {
+		super(ae), this.name = "CoordinatorLegacyTeamCompletionConflictError";
+	}
+};
+function D() {
+	throw Error("completion_manifest_invalid");
+}
+function O(e) {
+	return (!e || typeof e != "object" || Array.isArray(e)) && D(), e;
+}
+function k(e, t) {
+	let n = new Set(t);
+	Object.keys(e).some((e) => !n.has(e)) && D();
+}
+function se(e) {
+	return /^(?:[\\/]{2}|\.{1,2}[\\/]|\/|~[\\/]|[a-z]:[\\/]|file:)/iu.test(e);
+}
+function A(e) {
+	return (typeof e != "string" || !e || e !== e.trim() || e.length > re || /[\p{Cc}\p{Cf}]/u.test(e) || se(e)) && D(), e;
+}
+function j(e) {
+	let t = A(e);
+	return /^[a-f0-9]{64}$/u.test(t) || D(), t;
+}
+function ce(e) {
+	typeof e != "string" && D();
+	let t = e.normalize("NFC").trim();
+	return (!t || [...t].length > 120 || /[\p{Cc}\p{Cf}]/u.test(t) || se(t)) && D(), t;
+}
+function le(e) {
+	(typeof e != "string" || !e) && D();
+	let t = new Date(e);
+	return (Number.isNaN(t.getTime()) || t.toISOString() !== e) && D(), e;
+}
+function ue(e, t) {
+	return (!Array.isArray(e) || e.length > t) && D(), e;
+}
+function M(e, t) {
+	let n = e.toSorted((e, n) => o(t(e), t(n)));
+	return n.some((e, r) => r > 0 && t(n[r - 1]) === t(e)) && D(), n;
+}
+function de(e) {
+	return M(ue(e, 50).map(A), (e) => e);
+}
+function fe(e) {
+	let t = A(e);
+	return /^legacy-team-candidate:[a-f0-9]{32}$/u.test(t) || D(), t;
+}
+function pe(e) {
+	let t = O(e);
+	k(t, [
+		"version",
+		"coordinator_id",
+		"candidate_ref",
+		"candidate_digest",
+		"team_id",
+		"team_digest",
+		"source_digest",
+		"finish_digest",
+		"access_delta_digest",
+		"team",
+		"memberships",
+		"device_decisions",
+		"project_mappings",
+		"project_recipients",
+		"completed_at"
+	]), t.version !== 1 && D();
+	let n = O(t.team);
+	k(n, [
+		"display_name",
+		"policy_revision",
+		"device_eligibility_mode"
+	]), n.device_eligibility_mode !== "reviewed_allowlist" && D();
+	let r = A(t.team_id), i = M(ue(t.memberships, 500).map((e) => {
+		let t = O(e);
+		return k(t, ["identity_id", "role"]), t.role !== "member" && D(), {
+			identity_id: A(t.identity_id),
+			role: "member"
+		};
+	}), (e) => e.identity_id), a = M(ue(t.device_decisions, 500).map((e) => {
+		let t = O(e);
+		k(t, [
+			"device_id",
+			"key_fingerprint",
+			"enabled",
+			"identity_id",
+			"decision"
+		]), t.decision !== "included" && t.decision !== "excluded" && D(), typeof t.enabled != "boolean" && D();
+		let n = t.identity_id == null ? null : A(t.identity_id);
+		t.decision === "included" != !!n && D(), t.decision === "included" && !t.enabled && D();
+		let r = t.decision;
+		return {
+			device_id: A(t.device_id),
+			key_fingerprint: j(t.key_fingerprint),
+			enabled: t.enabled,
+			identity_id: n,
+			decision: r
+		};
+	}), (e) => e.device_id);
+	a.length === 0 && D();
+	let s = new Set(i.map((e) => e.identity_id)), c = new Set(a.flatMap((e) => e.identity_id ? [e.identity_id] : []));
+	(s.size !== c.size || [...c].some((e) => !s.has(e))) && D();
+	let l = M(ue(t.project_mappings, 500).map((e) => {
+		let t = O(e);
+		k(t, [
+			"project_ref",
+			"resolved_project_ref",
+			"scope_id"
+		]);
+		let n = A(t.project_ref), r = A(t.resolved_project_ref);
+		return /^legacy-team-project-ref-v1:[0-9a-f]{64}$/u.test(n) || D(), /^legacy-team-resolved-project-ref-v1:[0-9a-f]{64}$/u.test(r) || D(), {
+			project_ref: n,
+			resolved_project_ref: r,
+			scope_id: A(t.scope_id)
+		};
+	}), (e) => e.project_ref), u = /* @__PURE__ */ new Map();
+	for (let e of l) {
+		let t = u.get(e.resolved_project_ref);
+		t && t !== e.scope_id && D(), u.set(e.resolved_project_ref, e.scope_id);
+	}
+	let d = M(ue(t.project_recipients, 500).map((e) => {
+		let t = O(e);
+		k(t, ["resolved_project_ref", "team_id"]);
+		let n = A(t.team_id);
+		n !== r && D();
+		let i = A(t.resolved_project_ref);
+		return /^legacy-team-resolved-project-ref-v1:[0-9a-f]{64}$/u.test(i) || D(), {
+			resolved_project_ref: i,
+			team_id: n
+		};
+	}), (e) => e.resolved_project_ref), f = [...new Set(l.map((e) => e.resolved_project_ref))].toSorted(o), p = d.map((e) => e.resolved_project_ref);
+	JSON.stringify(p) !== JSON.stringify(f) && D();
+	let m = {
+		version: 1,
+		coordinator_id: A(t.coordinator_id),
+		candidate_ref: fe(t.candidate_ref),
+		candidate_digest: j(t.candidate_digest),
+		team_id: r,
+		team_digest: j(t.team_digest),
+		source_digest: j(t.source_digest),
+		finish_digest: j(t.finish_digest),
+		access_delta_digest: j(t.access_delta_digest),
+		team: {
+			display_name: ce(n.display_name),
+			policy_revision: j(n.policy_revision),
+			device_eligibility_mode: "reviewed_allowlist"
+		},
+		memberships: i,
+		device_decisions: a,
+		project_mappings: l,
+		project_recipients: d,
+		completed_at: le(t.completed_at)
+	};
+	return new TextEncoder().encode(JSON.stringify(m)).byteLength > 15e5 && D(), m;
+}
+function me(e) {
+	return JSON.stringify(pe(e));
+}
+function he(e) {
+	e.team_id !== S(e.candidate_ref) && D();
+}
+function ge(e, t) {
+	y(e.coordinator_id, t) !== e.candidate_ref && D();
+}
+function _e(e, t, n) {
+	ge(e, t);
+	let r = new Set(e.project_mappings.map((e) => e.scope_id));
+	n.length !== r.size && D();
+	let i = e.coordinator_id;
+	for (let e of n) (!e.scope_id || !r.has(e.scope_id) || e.authority_type !== "coordinator" || !e.coordinator_id || e.group_id !== t || e.status !== "active" || e.coordinator_id !== i) && D();
+	return i;
+}
+//#endregion
 //#region src/coordinator-membership-effects.ts
-var n = "scope_membership_effect_conflict", r = {
+var ve = "scope_membership_effect_conflict", ye = {
 	device_not_enrolled: "device must be enrolled and enabled in the scope group.",
 	scope_group_mismatch: "membership groupId must match the scope groupId.",
 	scope_inactive: "scope is not active.",
 	scope_not_found: "scopeId must reference an existing scope."
-}, i = class extends Error {
+}, N = class extends Error {
 	code;
 	constructor(e) {
-		super(r[e]), this.name = "CoordinatorMembershipError", this.code = e;
+		super(ye[e]), this.name = "CoordinatorMembershipError", this.code = e;
 	}
 };
-function a(e) {
+function P(e) {
 	return e?.trim() || null;
 }
-function o(e) {
-	let t = a(e);
+function be(e) {
+	let t = P(e);
 	if (!t) throw Error("effectId is required.");
 	if (t.length > 512 || /[\p{Cc}\p{Cf}]/u.test(t)) throw Error("effectId is invalid.");
 	return t;
 }
-function s(e) {
+function xe(e) {
 	return JSON.stringify({
-		scopeId: a(e.scopeId),
-		deviceId: a(e.deviceId),
-		role: a(e.role),
+		scopeId: P(e.scopeId),
+		deviceId: P(e.deviceId),
+		role: P(e.role),
 		membershipEpoch: e.membershipEpoch ?? null,
-		coordinatorId: a(e.coordinatorId),
-		groupId: a(e.groupId),
-		manifestIssuerDeviceId: a(e.manifestIssuerDeviceId),
-		manifestHash: a(e.manifestHash),
-		signedManifestJson: a(e.signedManifestJson),
-		actorType: a(e.actorType),
-		actorId: a(e.actorId)
+		coordinatorId: P(e.coordinatorId),
+		groupId: P(e.groupId),
+		manifestIssuerDeviceId: P(e.manifestIssuerDeviceId),
+		manifestHash: P(e.manifestHash),
+		signedManifestJson: P(e.signedManifestJson),
+		actorType: P(e.actorType),
+		actorId: P(e.actorId)
 	});
 }
-function c(e) {
+function Se(e) {
 	return JSON.stringify({
-		scopeId: a(e.scopeId),
-		deviceId: a(e.deviceId),
-		groupId: a(e.groupId),
+		scopeId: P(e.scopeId),
+		deviceId: P(e.deviceId),
+		groupId: P(e.groupId),
 		membershipEpoch: e.membershipEpoch ?? null,
-		manifestHash: a(e.manifestHash),
-		signedManifestJson: a(e.signedManifestJson),
-		actorType: a(e.actorType),
-		actorId: a(e.actorId)
+		manifestHash: P(e.manifestHash),
+		signedManifestJson: P(e.signedManifestJson),
+		actorType: P(e.actorType),
+		actorId: P(e.actorId)
 	});
 }
-function l(e, t, r) {
-	if (e.action !== t || e.request_json !== r) throw Error(n);
+function Ce(e, t, n) {
+	if (e.action !== t || e.request_json !== n) throw Error(ve);
 }
-function u(e) {
+function we(e) {
 	if (e.action !== "grant" || e.outcome_applied !== 1 || e.role == null || e.status == null || e.membership_epoch == null || e.updated_at == null) throw Error("scope_membership_effect_receipt_invalid");
 	return {
 		scope_id: e.scope_id,
@@ -69,242 +350,242 @@ function u(e) {
 }
 //#endregion
 //#region src/coordinator-store-contract.ts
-function d(e) {
+function Te(e) {
 	let t = e.trim(), n = new Date(t);
 	if (!t || Number.isNaN(n.getTime())) throw Error("expiresAt must be a valid date.");
 	return n.toISOString();
 }
-var f = /^identity:[A-Za-z0-9_-]{18,24}$/u;
-function p(e) {
-	return typeof e == "string" && e === e.trim() && f.test(e);
+var Ee = /^identity:[A-Za-z0-9_-]{18,24}$/u;
+function De(e) {
+	return typeof e == "string" && e === e.trim() && Ee.test(e);
 }
-function m(e) {
+function Oe(e) {
 	return String(e.kind === "team_member" ? e.assigned_identity_id ?? "" : e.target_identity_id ?? "").trim();
 }
-var h = "reciprocal_approval_request_changed", g = class extends Error {
-	code = h;
+var ke = "reciprocal_approval_request_changed", Ae = class extends Error {
+	code = ke;
 	constructor() {
-		super(h), this.name = "CoordinatorReciprocalApprovalRequestChangedError";
+		super(ke), this.name = "CoordinatorReciprocalApprovalRequestChangedError";
 	}
-}, _ = 120, v = /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/iu, y = /^(?:actor|device|identity|local):\S+$/iu, b = /^(?:actor|device|identity)[_-][a-z0-9][a-z0-9._:-]{4,}$/iu, x = /^pending[_-]\S+$/iu, S = /^[a-f0-9]{12,64}$/iu;
-function C(e, t) {
+}, je = 120, Me = /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/iu, Ne = /^(?:actor|device|identity|local):\S+$/iu, Pe = /^(?:actor|device|identity)[_-][a-z0-9][a-z0-9._:-]{4,}$/iu, Fe = /^pending[_-]\S+$/iu, Ie = /^[a-f0-9]{12,64}$/iu;
+function F(e, t) {
 	if ([...e].some((e) => /[\p{Cc}\p{Cf}]/u.test(e))) throw Error(`${t}_invalid`);
 	let n = e.replace(/\s+/gu, " ").trim();
 	if (!n) throw Error(`${t}_required`);
-	if ([...n].length > _) throw Error(`${t}_too_long`);
+	if ([...n].length > je) throw Error(`${t}_too_long`);
 	return n;
 }
-function w(e) {
+function Le(e) {
 	if (typeof e != "string") return !1;
 	let t;
 	try {
-		t = C(e, "display_name");
+		t = F(e, "display_name");
 	} catch {
 		return !1;
 	}
 	return ![
-		v,
-		y,
-		b,
-		x,
-		S
+		Me,
+		Ne,
+		Pe,
+		Fe,
+		Ie
 	].some((e) => e.test(t));
 }
-function T(e, t) {
-	let n = C(e, t);
-	if (!w(n)) throw Error(`${t}_invalid`);
+function I(e, t) {
+	let n = F(e, t);
+	if (!Le(n)) throw Error(`${t}_invalid`);
 	return n;
 }
-function E(e) {
+function Re(e) {
 	let t = String(e ?? "").replace(/\.local$/iu, "");
-	return t.trim() ? C(t.replace(/[-_]+/gu, " "), "device_display_name") : null;
+	return t.trim() ? F(t.replace(/[-_]+/gu, " "), "device_display_name") : null;
 }
-function D(e) {
+function ze(e) {
 	for (let t of [
 		e.explicitName,
 		e.osName,
 		e.coordinatorName
 	]) {
 		let e = String(t ?? "").replace(/\.local$/iu, "").trim();
-		if (!(!e || !w(e))) try {
-			let e = E(t);
-			if (e && w(e)) return e;
+		if (!(!e || !Le(e))) try {
+			let e = Re(t);
+			if (e && Le(e)) return e;
 		} catch {}
 	}
 	let t = String(e.fallbackSeed ?? "").replace(/[^a-z0-9]/giu, "").slice(0, 6);
 	return t ? `Codemem device ${t}` : "Codemem device";
 }
-function ee(e) {
+function Be(e) {
 	if (!Array.isArray(e) || e.length === 0 || e.length > 100) throw Error("project_summaries_invalid");
 	return e.map((e) => {
 		if (!e || typeof e != "object" || Array.isArray(e)) throw Error("project_summaries_invalid");
 		let t = e;
 		if (!Number.isSafeInteger(t.existing_memory_count) || Number(t.existing_memory_count) < 0) throw Error("project_summaries_invalid");
 		return {
-			display_name: C(String(t.display_name ?? ""), "project_name"),
+			display_name: F(String(t.display_name ?? ""), "project_name"),
 			existing_memory_count: Number(t.existing_memory_count)
 		};
 	});
 }
 //#endregion
 //#region src/recipient-reviewed-intent.ts
-var O = 1, k = class extends Error {
+var Ve = 1, L = class extends Error {
 	code;
 	constructor(e) {
 		super(e), this.name = "RecipientReviewedIntentError", this.code = e;
 	}
-}, A = /[\p{Cc}\p{Cf}]/u, te = 100, ne = 64 * 1024;
-function j() {
-	throw new k("recipient_reviewed_intent_invalid");
+}, He = /[\p{Cc}\p{Cf}]/u, Ue = 100, We = 65536;
+function R() {
+	throw new L("recipient_reviewed_intent_invalid");
 }
-function M(e) {
-	return (!e || typeof e != "object" || Array.isArray(e)) && j(), e;
+function z(e) {
+	return (!e || typeof e != "object" || Array.isArray(e)) && R(), e;
 }
-function N(e, t) {
-	Object.keys(e).some((e) => !t.includes(e)) && j();
+function B(e, t) {
+	Object.keys(e).some((e) => !t.includes(e)) && R();
 }
-function P(e, t) {
-	return (typeof e != "string" || !e || e !== e.trim() || e.length > t || A.test(e)) && j(), e;
+function V(e, t) {
+	return (typeof e != "string" || !e || e !== e.trim() || e.length > t || He.test(e)) && R(), e;
 }
-function re(e) {
-	(typeof e != "string" || A.test(e)) && j();
+function Ge(e) {
+	(typeof e != "string" || He.test(e)) && R();
 	let t = e.trim().replace(/\s+/gu, " ");
-	return (!t || t.length > 256) && j(), t;
+	return (!t || t.length > 256) && R(), t;
 }
-function ie(e) {
-	typeof e != "string" && j();
+function Ke(e) {
+	typeof e != "string" && R();
 	try {
-		return C(e, "identity_display_name");
+		return F(e, "identity_display_name");
 	} catch {
-		return j();
+		return R();
 	}
 }
-function ae(e) {
-	return (typeof e != "number" || !Number.isSafeInteger(e) || e < 0) && j(), e;
+function qe(e) {
+	return (typeof e != "number" || !Number.isSafeInteger(e) || e < 0) && R(), e;
 }
-function oe(e, t) {
+function Je(e, t) {
 	return e < t ? -1 : +(e > t);
 }
-function se(e) {
+function Ye(e) {
 	return e.kind === "direct" ? "direct" : `team\u0000${e.teamId}`;
 }
-function ce(e) {
-	let t = M(e);
-	return t.kind === "direct" ? (N(t, ["kind"]), { kind: "direct" }) : (t.kind !== "team" && j(), N(t, [
+function Xe(e) {
+	let t = z(e);
+	return t.kind === "direct" ? (B(t, ["kind"]), { kind: "direct" }) : (t.kind !== "team" && R(), B(t, [
 		"kind",
 		"teamId",
 		"displayName"
 	]), {
 		kind: "team",
-		teamId: P(t.teamId, 256),
-		displayName: re(t.displayName)
+		teamId: V(t.teamId, 256),
+		displayName: Ge(t.displayName)
 	});
 }
-function le(e) {
-	let t = M(e);
-	N(t, [
+function Ze(e) {
+	let t = z(e);
+	B(t, [
 		"canonicalProjectIdentity",
 		"displayName",
 		"existingMemoryCount",
 		"futureMemoriesShared",
 		"sources"
-	]), (t.futureMemoriesShared !== !0 || !Array.isArray(t.sources) || !t.sources.length) && j();
-	let n = t.sources.map(ce).toSorted((e, t) => oe(se(e), se(t)));
-	return new Set(n.map(se)).size !== n.length && j(), {
-		canonicalProjectIdentity: P(t.canonicalProjectIdentity, 512),
-		displayName: re(t.displayName),
-		existingMemoryCount: ae(t.existingMemoryCount),
+	]), (t.futureMemoriesShared !== !0 || !Array.isArray(t.sources) || !t.sources.length) && R();
+	let n = t.sources.map(Xe).toSorted((e, t) => Je(Ye(e), Ye(t)));
+	return new Set(n.map(Ye)).size !== n.length && R(), {
+		canonicalProjectIdentity: V(t.canonicalProjectIdentity, 512),
+		displayName: Ge(t.displayName),
+		existingMemoryCount: qe(t.existingMemoryCount),
 		futureMemoriesShared: !0,
 		sources: n
 	};
 }
-function ue(e) {
-	let t = M(e);
-	return N(t, [
+function Qe(e) {
+	let t = z(e);
+	return B(t, [
 		"canonicalProjectIdentity",
 		"displayName",
 		"existingMemoryCount"
 	]), {
-		canonicalProjectIdentity: P(t.canonicalProjectIdentity, 512),
-		displayName: re(t.displayName),
-		existingMemoryCount: ae(t.existingMemoryCount)
+		canonicalProjectIdentity: V(t.canonicalProjectIdentity, 512),
+		displayName: Ge(t.displayName),
+		existingMemoryCount: qe(t.existingMemoryCount)
 	};
 }
-function de(e) {
-	(!Array.isArray(e.projects) || !Array.isArray(e.excludedProjects) || e.projects.length > te) && j();
-	let t = e.projects.map(le).toSorted((e, t) => oe(e.canonicalProjectIdentity, t.canonicalProjectIdentity)), n = e.excludedProjects.map(ue).toSorted((e, t) => oe(e.canonicalProjectIdentity, t.canonicalProjectIdentity)), r = t.map((e) => e.canonicalProjectIdentity), i = n.map((e) => e.canonicalProjectIdentity);
-	return (new Set(r).size !== r.length || new Set(i).size !== i.length || i.some((e) => r.includes(e))) && j(), {
+function $e(e) {
+	(!Array.isArray(e.projects) || !Array.isArray(e.excludedProjects) || e.projects.length > Ue) && R();
+	let t = e.projects.map(Ze).toSorted((e, t) => Je(e.canonicalProjectIdentity, t.canonicalProjectIdentity)), n = e.excludedProjects.map(Qe).toSorted((e, t) => Je(e.canonicalProjectIdentity, t.canonicalProjectIdentity)), r = t.map((e) => e.canonicalProjectIdentity), i = n.map((e) => e.canonicalProjectIdentity);
+	return (new Set(r).size !== r.length || new Set(i).size !== i.length || i.some((e) => r.includes(e))) && R(), {
 		projects: t,
 		excludedProjects: n
 	};
 }
-function fe(e, t) {
-	if (!(e.journey === "team" && t.kind === "team_member" && e.team.teamId === t.policyTeamId || e.journey === "add_device" && t.kind === "add_device" && e.targetIdentity.identityId === t.targetIdentityId)) throw new k("recipient_invite_intent_mismatch");
+function et(e, t) {
+	if (!(e.journey === "team" && t.kind === "team_member" && e.team.teamId === t.policyTeamId || e.journey === "add_device" && t.kind === "add_device" && e.targetIdentity.identityId === t.targetIdentityId)) throw new L("recipient_invite_intent_mismatch");
 }
-function pe(e, t) {
-	let n = M(e);
-	n.version !== 1 && j();
-	let r = de(n), i;
+function tt(e, t) {
+	let n = z(e);
+	n.version !== 1 && R();
+	let r = $e(n), i;
 	if (n.journey === "team") {
-		N(n, [
+		B(n, [
 			"version",
 			"journey",
 			"team",
 			"projects",
 			"excludedProjects"
 		]);
-		let e = M(n.team);
-		N(e, [
+		let e = z(n.team);
+		B(e, [
 			"teamId",
 			"displayName",
 			"futureProjectsInherit"
-		]), e.futureProjectsInherit !== !0 && j(), i = {
+		]), e.futureProjectsInherit !== !0 && R(), i = {
 			version: 1,
 			journey: "team",
 			team: {
-				teamId: P(e.teamId, 256),
-				displayName: re(e.displayName),
+				teamId: V(e.teamId, 256),
+				displayName: Ge(e.displayName),
 				futureProjectsInherit: !0
 			},
 			...r
 		};
 	} else if (n.journey === "add_device") {
-		N(n, [
+		B(n, [
 			"version",
 			"journey",
 			"targetIdentity",
 			"projects",
 			"excludedProjects"
 		]);
-		let e = M(n.targetIdentity);
-		N(e, ["identityId", "displayName"]), i = {
+		let e = z(n.targetIdentity);
+		B(e, ["identityId", "displayName"]), i = {
 			version: 1,
 			journey: "add_device",
 			targetIdentity: {
-				identityId: P(e.identityId, 256),
-				displayName: ie(e.displayName)
+				identityId: V(e.identityId, 256),
+				displayName: Ke(e.displayName)
 			},
 			...r
 		};
-	} else j();
-	return t && fe(i, t), new TextEncoder().encode(F(i)).byteLength > ne && j(), i;
+	} else R();
+	return t && et(i, t), new TextEncoder().encode(H(i)).byteLength > We && R(), i;
 }
-function F(e) {
-	return Array.isArray(e) ? `[${e.map(F).join(",")}]` : e && typeof e == "object" ? `{${Object.entries(e).toSorted(([e], [t]) => oe(e, t)).map(([e, t]) => `${JSON.stringify(e)}:${F(t)}`).join(",")}}` : JSON.stringify(e) ?? "null";
+function H(e) {
+	return Array.isArray(e) ? `[${e.map(H).join(",")}]` : e && typeof e == "object" ? `{${Object.entries(e).toSorted(([e], [t]) => Je(e, t)).map(([e, t]) => `${JSON.stringify(e)}:${H(t)}`).join(",")}}` : JSON.stringify(e) ?? "null";
 }
-function me(e, t) {
-	return F(pe(e, t));
+function nt(e, t) {
+	return H(tt(e, t));
 }
-async function he(e, t) {
-	let n = me(e, t), r = new TextEncoder().encode(`recipient-reviewed-intent-v1\n${n}`), i = await globalThis.crypto.subtle.digest("SHA-256", r);
+async function rt(e, t) {
+	let n = nt(e, t), r = new TextEncoder().encode(`recipient-reviewed-intent-v1\n${n}`), i = await globalThis.crypto.subtle.digest("SHA-256", r);
 	return Array.from(new Uint8Array(i), (e) => e.toString(16).padStart(2, "0")).join("");
 }
-async function ge(e, t) {
-	let n = pe(e, t.target);
-	if (await he(n) !== t.digest) throw new k("recipient_invite_intent_mismatch");
+async function it(e, t) {
+	let n = tt(e, t.target);
+	if (await rt(n) !== t.digest) throw new L("recipient_invite_intent_mismatch");
 	return n;
 }
-async function _e(e, t) {
+async function at(e, t) {
 	if (!e) throw Error("recipient_invite_review_unavailable");
 	let n;
 	try {
@@ -313,21 +594,21 @@ async function _e(e, t) {
 		throw Error("recipient_invite_review_unavailable");
 	}
 	try {
-		let r = pe(n, t.target);
-		if (F(r) !== e) throw Error("recipient_invite_review_unavailable");
-		return await ge(r, t);
+		let r = tt(n, t.target);
+		if (H(r) !== e) throw Error("recipient_invite_review_unavailable");
+		return await it(r, t);
 	} catch (e) {
-		throw e instanceof k && e.code === "recipient_invite_intent_mismatch" || e instanceof Error && e.message === "recipient_invite_review_unavailable" ? e : Error("recipient_invite_review_unavailable");
+		throw e instanceof L && e.code === "recipient_invite_intent_mismatch" || e instanceof Error && e.message === "recipient_invite_review_unavailable" ? e : Error("recipient_invite_review_unavailable");
 	}
 }
 //#endregion
 //#region src/sync-fingerprint.ts
-function ve(e) {
+function ot(e) {
 	return t("sha256").update(e, "utf-8").digest("hex");
 }
 //#endregion
-//#region ../../node_modules/.pnpm/hono@4.12.26/node_modules/hono/dist/compose.js
-var ye = (e, t, n) => (r, i) => {
+//#region ../../node_modules/.pnpm/hono@4.13.5/node_modules/hono/dist/compose.js
+var st = (e, t, n) => (r, i) => {
 	let a = -1;
 	return o(0);
 	async function o(s) {
@@ -343,40 +624,45 @@ var ye = (e, t, n) => (r, i) => {
 		else r.finalized === !1 && n && (c = await n(r));
 		return c && (r.finalized === !1 || l) && (r.res = c), r;
 	}
-}, be = /* @__PURE__ */ Symbol(), xe = async (e, t = /* @__PURE__ */ Object.create(null)) => {
-	let { all: n = !1, dot: r = !1 } = t, i = (e instanceof He ? e.raw.headers : e.headers).get("Content-Type");
-	return i?.startsWith("multipart/form-data") || i?.startsWith("application/x-www-form-urlencoded") ? Se(e, {
+}, ct = /* @__PURE__ */ Symbol(), lt = (e, t) => new Response(e, { headers: { "Content-Type": t.replace(/^[^;]+/, (e) => e.toLowerCase()) } }).formData(), ut = 32, dt = 1e4, ft = (e) => "headers" in e, pt = async (e, t = /* @__PURE__ */ Object.create(null)) => {
+	let { all: n = !1, dot: r = !1 } = t, i = (ft(e) ? e.headers : e.raw.headers).get("Content-Type")?.split(";")[0].trim().toLowerCase();
+	return i === "multipart/form-data" || i === "application/x-www-form-urlencoded" ? mt(e, {
 		all: n,
 		dot: r
 	}) : {};
 };
-async function Se(e, t) {
-	let n = await e.formData();
-	return n ? Ce(n, t) : {};
-}
-function Ce(e, t) {
-	let n = /* @__PURE__ */ Object.create(null);
+async function mt(e, t) {
+	if (!ft(e) && e.bodyCache.formData) return ht(await e.bodyCache.formData, t);
+	let n = ft(e) ? e.headers : e.raw.headers, r = lt(await e.arrayBuffer(), n.get("Content-Type") || "");
+	ft(e) || (e.bodyCache.formData = r);
+	let i = await r;
+	return i ? ht(i, t) : {};
+}
+function ht(e, t) {
+	let n = /* @__PURE__ */ Object.create(null), r = { count: 0 };
 	return e.forEach((e, r) => {
-		t.all || r.endsWith("[]") ? we(n, r, e) : n[r] = e;
+		t.all || r.endsWith("[]") ? gt(n, r, e) : n[r] = e;
 	}), t.dot && Object.entries(n).forEach(([e, t]) => {
-		e.includes(".") && (Te(n, e, t), delete n[e]);
+		e.includes(".") && (_t(n, e, t, r), delete n[e]);
 	}), n;
 }
-var we = (e, t, n) => {
-	e[t] === void 0 ? t.endsWith("[]") ? e[t] = [n] : e[t] = n : Array.isArray(e[t]) ? e[t].push(n) : e[t] = [e[t], n];
-}, Te = (e, t, n) => {
+var gt = (e, t, n) => {
+	e[t] === void 0 ? e[t] = t.endsWith("[]") ? [n] : n : Array.isArray(e[t]) ? e[t].push(n) : e[t] = [e[t], n];
+}, _t = (e, t, n, r) => {
 	if (/(?:^|\.)__proto__\./.test(t)) return;
-	let r = e, i = t.split(".");
-	i.forEach((e, t) => {
-		t === i.length - 1 ? r[e] = n : ((!r[e] || typeof r[e] != "object" || Array.isArray(r[e]) || r[e] instanceof File) && (r[e] = /* @__PURE__ */ Object.create(null)), r = r[e]);
+	let i = e, a = t.split(".", ut + 2);
+	a.length > ut + 1 && vt(), a.forEach((e, t) => {
+		t === a.length - 1 ? i[e] = n : ((!i[e] || typeof i[e] != "object" || Array.isArray(i[e]) || i[e] instanceof File) && (r.count++ >= dt && vt(), i[e] = /* @__PURE__ */ Object.create(null)), i = i[e]);
 	});
-}, Ee = (e) => {
+}, vt = () => {
+	throw Error("Nesting limit exceeded");
+}, yt = (e) => {
 	let t = e.split("/");
 	return t[0] === "" && t.shift(), t;
-}, De = (e) => {
-	let { groups: t, path: n } = Oe(e);
-	return ke(Ee(n), t);
-}, Oe = (e) => {
+}, bt = (e) => {
+	let { groups: t, path: n } = xt(e);
+	return St(yt(n), t);
+}, xt = (e) => {
 	let t = [];
 	return e = e.replace(/\{[^}]+\}/g, (e, n) => {
 		let r = `@${n}`;
@@ -385,7 +671,7 @@ var we = (e, t, n) => {
 		groups: t,
 		path: e
 	};
-}, ke = (e, t) => {
+}, St = (e, t) => {
 	for (let n = t.length - 1; n >= 0; n--) {
 		let [r] = t[n];
 		for (let i = e.length - 1; i >= 0; i--) if (e[i].includes(r)) {
@@ -394,12 +680,12 @@ var we = (e, t, n) => {
 		}
 	}
 	return e;
-}, I = {}, Ae = (e, t) => {
+}, Ct = {}, wt = (e, t) => {
 	if (e === "*") return "*";
 	let n = e.match(/^\:([^\{\}]+)(?:\{(.+)\})?$/);
 	if (n) {
 		let r = `${e}#${t}`;
-		return I[r] || (n[2] ? I[r] = t && t[0] !== ":" && t[0] !== "*" ? [
+		return Ct[r] || (Ct[r] = n[2] ? t && t[0] !== ":" && t[0] !== "*" ? [
 			r,
 			n[1],
 			RegExp(`^${n[2]}(?=/${t})`)
@@ -407,14 +693,14 @@ var we = (e, t, n) => {
 			e,
 			n[1],
 			RegExp(`^${n[2]}$`)
-		] : I[r] = [
+		] : [
 			e,
 			n[1],
 			!0
-		]), I[r];
+		]), Ct[r];
 	}
 	return null;
-}, je = (e, t) => {
+}, Tt = (e, t) => {
 	try {
 		return t(e);
 	} catch {
@@ -426,58 +712,64 @@ var we = (e, t, n) => {
 			}
 		});
 	}
-}, Me = (e) => je(e, decodeURI), Ne = (e) => {
+}, Et = (e) => Tt(e, decodeURI), Dt = (e) => {
 	let t = e.url, n = t.indexOf("/", t.indexOf(":") + 4), r = n;
 	for (; r < t.length; r++) {
 		let e = t.charCodeAt(r);
 		if (e === 37) {
 			let e = t.indexOf("?", r), i = t.indexOf("#", r), a = e === -1 ? i === -1 ? void 0 : i : i === -1 ? e : Math.min(e, i), o = t.slice(n, a);
-			return Me(o.includes("%25") ? o.replace(/%25/g, "%2525") : o);
-		} else if (e === 63 || e === 35) break;
+			return Et(o.includes("%25") ? o.replace(/%25/g, "%2525") : o);
+		}
+		if (e === 63 || e === 35) break;
 	}
 	return t.slice(n, r);
-}, Pe = (e) => {
-	let t = Ne(e);
+}, Ot = (e) => {
+	let t = Dt(e);
 	return t.length > 1 && t.at(-1) === "/" ? t.slice(0, -1) : t;
-}, L = (e, t, ...n) => (n.length && (t = L(t, ...n)), `${e?.[0] === "/" ? "" : "/"}${e}${t === "/" ? "" : `${e?.at(-1) === "/" ? "" : "/"}${t?.[0] === "/" ? t.slice(1) : t}`}`), Fe = (e) => {
+}, U = (e, t, ...n) => (n.length && (t = U(t, ...n)), `${e?.[0] === "/" ? "" : "/"}${e}${t === "/" ? "" : `${e?.at(-1) === "/" ? "" : "/"}${t?.[0] === "/" ? t.slice(1) : t}`}`), kt = (e) => {
 	if (e.charCodeAt(e.length - 1) !== 63 || !e.includes(":")) return null;
 	let t = e.split("/"), n = [], r = "";
 	return t.forEach((e) => {
 		if (e !== "" && !/\:/.test(e)) r += "/" + e;
-		else if (/\:/.test(e)) if (/\?/.test(e)) {
-			n.length === 0 && r === "" ? n.push("/") : n.push(r);
-			let t = e.replace("?", "");
-			r += "/" + t, n.push(r);
-		} else r += "/" + e;
+		else if (/\:/.test(e)) {
+			if (e.charCodeAt(e.length - 1) === 63) {
+				n.length === 0 && r === "" ? n.push("/") : n.push(r);
+				let t = e.slice(0, -1);
+				r += "/" + t, n.push(r);
+			} else r += "/" + e;
+		}
 	}), n.filter((e, t, n) => n.indexOf(e) === t);
-}, Ie = (e) => /[%+]/.test(e) ? (e.indexOf("+") !== -1 && (e = e.replace(/\+/g, " ")), e.indexOf("%") === -1 ? e : je(e, Be)) : e, Le = (e, t, n) => {
-	let r;
-	if (!n && t && !/[%+]/.test(t)) {
+}, At = (e) => e.indexOf("%") === -1 ? e : Tt(e, Ft), jt = (e) => (e.indexOf("+") !== -1 && (e = e.replace(/\+/g, " ")), At(e)), Mt = (e, t, n) => {
+	let r = e.indexOf("#", 8);
+	r !== -1 && (e = e.slice(0, r));
+	let i;
+	if (!n && t && t.indexOf("%") === -1 && t.indexOf("+") === -1) {
 		let n = e.indexOf("?", 8);
 		if (n === -1) return;
 		for (e.startsWith(t, n + 1) || (n = e.indexOf(`&${t}`, n + 1)); n !== -1;) {
 			let r = e.charCodeAt(n + t.length + 1);
 			if (r === 61) {
 				let r = n + t.length + 2, i = e.indexOf("&", r);
-				return Ie(e.slice(r, i === -1 ? void 0 : i));
-			} else if (r == 38 || isNaN(r)) return "";
+				return jt(e.slice(r, i === -1 ? void 0 : i));
+			}
+			if (r == 38 || isNaN(r)) return "";
 			n = e.indexOf(`&${t}`, n + 1);
 		}
-		if (r = /[%+]/.test(e), !r) return;
+		if (i = /[%+]/.test(e), !i) return;
 	}
-	let i = {};
-	r ??= /[%+]/.test(e);
-	let a = e.indexOf("?", 8);
-	for (; a !== -1;) {
-		let t = e.indexOf("&", a + 1), o = e.indexOf("=", a);
-		o > t && t !== -1 && (o = -1);
-		let s = e.slice(a + 1, o === -1 ? t === -1 ? void 0 : t : o);
-		if (r && (s = Ie(s)), a = t, s === "") continue;
+	let a = /* @__PURE__ */ Object.create(null);
+	i ??= /[%+]/.test(e);
+	let o = e.indexOf("?", 8);
+	for (; o !== -1;) {
+		let t = e.indexOf("&", o + 1), r = e.indexOf("=", o);
+		r > t && t !== -1 && (r = -1);
+		let s = e.slice(o + 1, r === -1 ? t === -1 ? void 0 : t : r);
+		if (i && (s = jt(s)), o = t, s === "") continue;
 		let c;
-		o === -1 ? c = "" : (c = e.slice(o + 1, t === -1 ? void 0 : t), r && (c = Ie(c))), n ? (i[s] && Array.isArray(i[s]) || (i[s] = []), i[s].push(c)) : i[s] ??= c;
+		r === -1 ? c = "" : (c = e.slice(r + 1, t === -1 ? void 0 : t), i && (c = jt(c))), n ? (a[s] && Array.isArray(a[s]) || (a[s] = []), a[s].push(c)) : a[s] ??= c;
 	}
-	return t ? i[t] : i;
-}, Re = Le, ze = (e, t) => Le(e, t, !0), Be = decodeURIComponent, Ve = (e) => je(e, Be), He = class {
+	return t ? a[t] : a;
+}, Nt = Mt, Pt = (e, t) => Mt(e, t, !0), Ft = decodeURIComponent, It = class {
 	raw;
 	#e;
 	#t;
@@ -485,20 +777,20 @@ var we = (e, t, n) => {
 	path;
 	bodyCache = {};
 	constructor(e, t = "/", n = [[]]) {
-		this.raw = e, this.path = t, this.#t = n, this.#e = {};
+		this.raw = e, this.path = t, this.#t = n;
 	}
 	param(e) {
 		return e ? this.#n(e) : this.#r();
 	}
 	#n(e) {
-		let t = this.#t[0][this.routeIndex][1][e], n = this.#i(t);
-		return n && /\%/.test(n) ? Ve(n) : n;
+		let t = this.#t[0][this.routeIndex]?.[1][e], n = this.#i(t);
+		return n && At(n);
 	}
 	#r() {
-		let e = {}, t = Object.keys(this.#t[0][this.routeIndex][1]);
+		let e = {}, t = Object.keys(this.#t[0][this.routeIndex]?.[1] ?? {});
 		for (let n of t) {
 			let t = this.#i(this.#t[0][this.routeIndex][1][n]);
-			t !== void 0 && (e[n] = /\%/.test(t) ? Ve(t) : t);
+			t !== void 0 && (e[n] = At(t));
 		}
 		return e;
 	}
@@ -506,26 +798,26 @@ var we = (e, t, n) => {
 		return this.#t[1] ? this.#t[1][e] : e;
 	}
 	query(e) {
-		return Re(this.url, e);
+		return Nt(this.url, e);
 	}
 	queries(e) {
-		return ze(this.url, e);
+		return Pt(this.url, e);
 	}
 	header(e) {
 		if (e) return this.raw.headers.get(e) ?? void 0;
-		let t = {};
+		let t = /* @__PURE__ */ Object.create(null);
 		return this.raw.headers.forEach((e, n) => {
 			t[n] = e;
 		}), t;
 	}
 	async parseBody(e) {
-		return xe(this, e);
+		return pt(this, e);
 	}
 	#a = (e) => {
 		let { bodyCache: t, raw: n } = this, r = t[e];
 		if (r) return r;
-		let i = Object.keys(t)[0];
-		return i ? t[i].then((t) => (i === "json" && (t = JSON.stringify(t)), new Response(t)[e]())) : t[e] = n[e]();
+		for (let n in t) return t[n].then((t) => (n === "json" && (t = JSON.stringify(t)), new Response(t)[e]()));
+		return t[e] = n[e]();
 	};
 	json() {
 		return this.#a("text").then((e) => JSON.parse(e));
@@ -546,10 +838,10 @@ var we = (e, t, n) => {
 		return this.#a("formData");
 	}
 	addValidatedData(e, t) {
-		this.#e[e] = t;
+		(this.#e ??= {})[e] = t;
 	}
 	valid(e) {
-		return this.#e[e];
+		return this.#e?.[e];
 	}
 	get url() {
 		return this.raw.url;
@@ -557,7 +849,7 @@ var we = (e, t, n) => {
 	get method() {
 		return this.raw.method;
 	}
-	get [be]() {
+	get [ct]() {
 		return this.#t;
 	}
 	get matchedRoutes() {
@@ -566,14 +858,14 @@ var we = (e, t, n) => {
 	get routePath() {
 		return this.#t[0].map(([[, e]]) => e)[this.routeIndex].path;
 	}
-}, Ue = {
+}, Lt = {
 	Stringify: 1,
 	BeforeStream: 2,
 	Stream: 3
-}, We = (e, t) => {
+}, Rt = (e, t) => {
 	let n = new String(e);
 	return n.isEscaped = !0, n.callbacks = t, n;
-}, Ge = async (e, t, n, r, i) => {
+}, zt = async (e, t, n, r, i) => {
 	typeof e == "object" && !(e instanceof String) && (e instanceof Promise || (e = e.toString()), e instanceof Promise && (e = await e));
 	let a = e.callbacks;
 	if (!a?.length) return Promise.resolve(e);
@@ -582,12 +874,12 @@ var we = (e, t, n) => {
 		phase: t,
 		buffer: i,
 		context: r
-	}))).then((e) => Promise.all(e.filter(Boolean).map((e) => Ge(e, t, !1, r, i))).then(() => i[0]));
-	return n ? We(await o, a) : o;
-}, Ke = "text/plain; charset=UTF-8", qe = (e, t) => ({
+	}))).then((e) => Promise.all(e.filter(Boolean).map((e) => zt(e, t, !1, r, i))).then(() => i[0]));
+	return n ? Rt(await o, a) : o;
+}, Bt = "text/plain; charset=UTF-8", Vt = (e, t) => ({
 	"Content-Type": e,
 	...t
-}), R = (e, t) => new Response(e, t), Je = class {
+}), W = (e, t) => new Response(e, t), Ht = class {
 	#e;
 	#t;
 	env = {};
@@ -607,7 +899,7 @@ var we = (e, t, n) => {
 		this.#e = e, t && (this.#i = t.executionCtx, this.env = t.env, this.#c = t.notFoundHandler, this.#d = t.path, this.#u = t.matchResult);
 	}
 	get req() {
-		return this.#t ??= new He(this.#e, this.#d, this.#u), this.#t;
+		return this.#t ??= new It(this.#e, this.#d, this.#u), this.#t;
 	}
 	get event() {
 		if (this.#i && "respondWith" in this.#i) return this.#i;
@@ -618,16 +910,18 @@ var we = (e, t, n) => {
 		throw Error("This context has no ExecutionContext");
 	}
 	get res() {
-		return this.#a ||= R(null, { headers: this.#l ??= new Headers() });
+		return this.#a ||= W(null, { headers: this.#l ??= new Headers() });
 	}
 	set res(e) {
 		if (this.#a && e) {
-			e = R(e.body, e);
-			for (let [t, n] of this.#a.headers.entries()) if (t !== "content-type") if (t === "set-cookie") {
-				let t = this.#a.headers.getSetCookie();
-				e.headers.delete("set-cookie");
-				for (let n of t) e.headers.append("set-cookie", n);
-			} else e.headers.set(t, n);
+			e = W(e.body, e);
+			for (let [t, n] of this.#a.headers.entries()) if (t !== "content-type") {
+				if (t === "set-cookie") {
+					let t = this.#a.headers.getSetCookie();
+					e.headers.delete("set-cookie");
+					for (let n of t) e.headers.append("set-cookie", n);
+				} else e.headers.set(t, n);
+			}
 		}
 		this.#a = e, this.finalized = !0;
 	}
@@ -638,7 +932,7 @@ var we = (e, t, n) => {
 		this.#s = e;
 	};
 	header = (e, t, n) => {
-		this.finalized && (this.#a = R(this.#a.body, this.#a));
+		this.finalized && (this.#a = W(this.#a.body, this.#a));
 		let r = this.#a ? this.#a.headers : this.#l ??= new Headers();
 		t === void 0 ? r.delete(e) : n?.append ? r.append(e, t) : r.set(e, t);
 	};
@@ -653,54 +947,68 @@ var we = (e, t, n) => {
 		return this.#n ? Object.fromEntries(this.#n) : {};
 	}
 	#f(e, t, n) {
-		let r = this.#a ? new Headers(this.#a.headers) : this.#l ?? new Headers();
-		if (typeof t == "object" && "headers" in t) {
-			let e = t.headers instanceof Headers ? t.headers : new Headers(t.headers);
-			for (let [t, n] of e) t.toLowerCase() === "set-cookie" ? r.append(t, n) : r.set(t, n);
-		}
-		if (n) for (let [e, t] of Object.entries(n)) if (typeof t == "string") r.set(e, t);
-		else {
-			r.delete(e);
-			for (let n of t) r.append(e, n);
+		let r = this.#a ? new Headers(this.#a.headers) : this.#l;
+		if (typeof t == "object" && t.headers) {
+			r ??= new Headers();
+			for (let [e, n] of new Headers(t.headers)) e === "set-cookie" ? r.append(e, n) : r.set(e, n);
+		}
+		if (n) {
+			if (!r) {
+				let e = 0;
+				for (let t in n) if (++e > 1 || typeof n[t] != "string") {
+					r = new Headers();
+					break;
+				}
+			}
+			if (r) for (let e in n) {
+				let t = n[e];
+				if (typeof t == "string") r.set(e, t);
+				else {
+					r.delete(e);
+					for (let n of t) r.append(e, n);
+				}
+			}
 		}
-		return R(e, {
+		return W(e, {
 			status: typeof t == "number" ? t : t?.status ?? this.#r,
-			headers: r
+			headers: r ?? n
 		});
 	}
 	newResponse = (...e) => this.#f(...e);
 	body = (e, t, n) => this.#f(e, t, n);
-	text = (e, t, n) => !this.#l && !this.#r && !t && !n && !this.finalized ? new Response(e) : this.#f(e, t, qe(Ke, n));
-	json = (e, t, n) => this.#f(JSON.stringify(e), t, qe("application/json", n));
+	text = (e, t, n) => !this.#l && !this.#r && !t && !n && !this.finalized ? new Response(e) : this.#f(e, t, Vt(Bt, n));
+	json = (e, t, n) => this.#f(JSON.stringify(e), t, Vt("application/json", n));
 	html = (e, t, n) => {
-		let r = (e) => this.#f(e, t, qe("text/html; charset=UTF-8", n));
-		return typeof e == "object" ? Ge(e, Ue.Stringify, !1, {}).then(r) : r(e);
+		let r = (e) => this.#f(e, t, Vt("text/html; charset=UTF-8", n));
+		return typeof e == "object" ? zt(e, Lt.Stringify, !1, {}).then(r) : r(e);
 	};
 	redirect = (e, t) => {
 		let n = String(e);
 		return this.header("Location", /[^\x00-\xFF]/.test(n) ? encodeURI(n) : n), this.newResponse(null, t ?? 302);
 	};
-	notFound = () => (this.#c ??= () => R(), this.#c(this));
-}, Ye = [
+	notFound = () => (this.#c ??= () => W(), this.#c(this));
+}, Ut = [
 	"get",
 	"post",
 	"put",
 	"delete",
 	"options",
-	"patch"
-], Xe = "Can not add a route since the matcher is already built.", Ze = class extends Error {}, Qe = "__COMPOSED_HANDLER", $e = (e) => e.text("404 Not Found", 404), et = (e, t) => {
+	"patch",
+	"query"
+], Wt = "Can not add a route since the matcher is already built.", Gt = class extends Error {}, Kt = "__COMPOSED_HANDLER", qt = (e) => e.text("404 Not Found", 404), Jt = (e, t) => {
 	if ("getResponse" in e) {
 		let n = e.getResponse();
 		return t.newResponse(n.body, n);
 	}
 	return console.error(e), t.text("Internal Server Error", 500);
-}, tt = class e {
+}, Yt = class e {
 	get;
 	post;
 	put;
 	delete;
 	options;
 	patch;
+	query;
 	all;
 	on;
 	use;
@@ -710,7 +1018,7 @@ var we = (e, t, n) => {
 	#e = "/";
 	routes = [];
 	constructor(e = {}) {
-		[...Ye, "all"].forEach((e) => {
+		[...Ut, "all"].forEach((e) => {
 			this[e] = (t, ...n) => (typeof t == "string" ? this.#e = t : this.#r(e, this.#e, t), n.forEach((t) => {
 				this.#r(e, this.#e, t);
 			}), this);
@@ -726,7 +1034,7 @@ var we = (e, t, n) => {
 			this.#r("ALL", this.#e, e);
 		}), this);
 		let { strict: t, ...n } = e;
-		Object.assign(this, n), this.getPath = t ?? !0 ? e.getPath ?? Ne : Pe;
+		Object.assign(this, n), this.getPath = t ?? !0 ? e.getPath ?? Dt : Ot;
 	}
 	#t() {
 		let t = new e({
@@ -735,18 +1043,18 @@ var we = (e, t, n) => {
 		});
 		return t.errorHandler = this.errorHandler, t.#n = this.#n, t.routes = this.routes, t;
 	}
-	#n = $e;
-	errorHandler = et;
+	#n = qt;
+	errorHandler = Jt;
 	route(e, t) {
 		let n = this.basePath(e);
 		return t.routes.map((e) => {
 			let r;
-			t.errorHandler === et ? r = e.handler : (r = async (n, r) => (await ye([], t.errorHandler)(n, () => e.handler(n, r))).res, r[Qe] = e.handler), n.#r(e.method, e.path, r, e.basePath);
+			t.errorHandler === Jt ? r = e.handler : (r = async (n, r) => (await st([], t.errorHandler)(n, () => e.handler(n, r))).res, r[Kt] = e.handler), n.#r(e.method, e.path, r, e.basePath);
 		}), this;
 	}
 	basePath(e) {
 		let t = this.#t();
-		return t._basePath = L(this._basePath, e), t;
+		return t._basePath = U(this._basePath, e), t;
 	}
 	onError = (e) => (this.errorHandler = e, this);
 	notFound = (e) => (this.#n = e, this);
@@ -764,21 +1072,21 @@ var we = (e, t, n) => {
 			return [e.env, t];
 		};
 		return r ||= (() => {
-			let t = L(this._basePath, e), n = t === "/" ? 0 : t.length;
+			let t = U(this._basePath, e), n = t === "/" ? 0 : t.length;
 			return (e) => {
 				let t = new URL(e.url);
 				return t.pathname = this.getPath(e).slice(n) || "/", new Request(t, e);
 			};
-		})(), this.#r("ALL", L(e, "*"), async (e, n) => {
+		})(), this.#r("ALL", U(e, "*"), async (e, n) => {
 			let i = await t(r(e.req.raw), ...a(e));
 			if (i) return i;
 			await n();
 		}), this;
 	}
 	#r(e, t, n, r) {
-		e = e.toUpperCase(), t = L(this._basePath, t);
+		e = e.toUpperCase(), t = U(this._basePath, t);
 		let i = {
-			basePath: r === void 0 ? this._basePath : L(this._basePath, r),
+			basePath: r === void 0 ? this._basePath : U(this._basePath, r),
 			path: t,
 			method: e,
 			handler: n
@@ -791,7 +1099,7 @@ var we = (e, t, n) => {
 	}
 	#a(e, t, n, r) {
 		if (r === "HEAD") return (async () => new Response(null, await this.#a(e, t, n, "GET")))();
-		let i = this.getPath(e, { env: n }), a = this.router.match(r, i), o = new Je(e, {
+		let i = this.getPath(e, { env: n }), a = this.router.match(r, i), o = new Ht(e, {
 			path: i,
 			matchResult: a,
 			env: n,
@@ -809,7 +1117,7 @@ var we = (e, t, n) => {
 			}
 			return e instanceof Promise ? e.then((e) => e || (o.finalized ? o.res : this.#n(o))).catch((e) => this.#i(e, o)) : e ?? this.#n(o);
 		}
-		let s = ye(a[0], this.errorHandler, this.#n);
+		let s = st(a[0], this.errorHandler, this.#n);
 		return (async () => {
 			try {
 				let e = await s(o);
@@ -821,98 +1129,103 @@ var we = (e, t, n) => {
 		})();
 	}
 	fetch = (e, ...t) => this.#a(e, t[1], t[0], e.method);
-	request = (e, t, n, r) => e instanceof Request ? this.fetch(t ? new Request(e, t) : e, n, r) : (e = e.toString(), this.fetch(new Request(/^https?:\/\//.test(e) ? e : `http://localhost${L("/", e)}`, t), n, r));
+	request = (e, t, n, r) => e instanceof Request ? this.fetch(t ? new Request(e, t) : e, n, r) : (e = e.toString(), this.fetch(new Request(/^https?:\/\//.test(e) ? e : `http://localhost${U("/", e)}`, t), n, r));
 	fire = () => {
 		addEventListener("fetch", (e) => {
 			e.respondWith(this.#a(e.request, e, void 0, e.request.method));
 		});
 	};
-}, nt = [];
-function rt(e, t) {
+}, G = () => /* @__PURE__ */ Object.create(null), Xt = [];
+function Zt(e, t) {
 	let n = this.buildAllMatchers(), r = ((e, t) => {
 		let r = n[e] || n.ALL, i = r[2][t];
 		if (i) return i;
 		let a = t.match(r[0]);
-		if (!a) return [[], nt];
+		if (!a) return [[], Xt];
 		let o = a.indexOf("", 1);
 		return [r[1][o], a];
 	});
 	return this.match = r, r(e, t);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/hono@4.12.26/node_modules/hono/dist/router/reg-exp-router/node.js
-var z = "[^/]+", B = ".*", V = "(?:|/.*)", H = /* @__PURE__ */ Symbol(), it = /* @__PURE__ */ new Set(".\\+*[^]$()");
-function at(e, t) {
-	return e.length === 1 ? t.length === 1 ? e < t ? -1 : 1 : -1 : t.length === 1 || e === B || e === V ? 1 : t === B || t === V ? -1 : e === z ? 1 : t === z ? -1 : e.length === t.length ? e < t ? -1 : 1 : t.length - e.length;
+//#region ../../node_modules/.pnpm/hono@4.13.5/node_modules/hono/dist/router/reg-exp-router/node.js
+var Qt = "[^/]+", $t = "(?:|/.*)", K = /* @__PURE__ */ Symbol(), en = /* @__PURE__ */ new Set(".\\+*[^]$()");
+function tn(e, t) {
+	return e.length === 1 ? t.length === 1 ? e < t ? -1 : 1 : -1 : t.length === 1 ? 1 : e === ".*" || e === "(?:|/.*)" ? t === "(?:|/.*)" ? -1 : 1 : t === ".*" || t === "(?:|/.*)" ? -1 : e === "[^/]+" ? 1 : t === "[^/]+" ? -1 : e.length === t.length ? e < t ? -1 : 1 : t.length - e.length;
 }
-var ot = class e {
+var nn = class e {
 	#e;
 	#t;
-	#n = /* @__PURE__ */ Object.create(null);
+	#n = G();
 	insert(t, n, r, i, a) {
-		if (t.length === 0) {
-			if (this.#e !== void 0) throw H;
-			if (a) return;
-			this.#e = n;
-			return;
-		}
-		let [o, ...s] = t, c = o === "*" ? s.length === 0 ? [
-			"",
-			"",
-			B
-		] : [
-			"",
-			"",
-			z
-		] : o === "/*" ? [
-			"",
-			"",
-			V
-		] : o.match(/^\:([^\{\}]+)(?:\{(.+)\})?$/), l;
-		if (c) {
-			let t = c[1], n = c[2] || z;
-			if (t && c[2] && (n === ".*" || (n = n.replace(/^\((?!\?:)(?=[^)]+\)$)/, "(?:"), /\((?!\?:)/.test(n)))) throw H;
-			if (l = this.#n[n], !l) {
-				if (Object.keys(this.#n).some((e) => e !== B && e !== V)) throw H;
-				if (a) return;
-				l = this.#n[n] = new e(), t !== "" && (l.#t = i.varIndex++);
+		let o = this;
+		for (let n = 0, a = t.length; n < a; n++) {
+			let s = t[n], c = s.length === 1 ? s === "*" ? n === a - 1 ? [
+				"",
+				"",
+				".*"
+			] : [
+				"",
+				"",
+				Qt
+			] : null : s === "/*" ? [
+				"",
+				"",
+				$t
+			] : s.match(/^\:([^\{\}]+)(?:\{(.+)\})?$/), l;
+			if (c) {
+				let t = c[1], n = c[2] || "[^/]+";
+				if (t && c[2] && (n === ".*" || (n = n.replace(/^\((?!\?:)(?=[^)]+\)$)/, "(?:"), /\((?!\?:)/.test(n)) || n.length === 1 && en.has(n))) throw K;
+				if (l = o.#n[n], !l) {
+					if (n !== ".*" && n !== "(?:|/.*)") {
+						for (let e in o.#n) if ((n.length > 1 || e.length > 1) && e !== ".*" && e !== "(?:|/.*)") throw K;
+					}
+					l = o.#n[n] = new e();
+				}
+				t !== "" && (l.#t ??= i.varIndex++, r.push([t, l.#t]));
+			} else if (l = o.#n[s], !l) {
+				for (let e in o.#n) if (e.length > 1 && e !== ".*" && e !== "(?:|/.*)") throw K;
+				l = o.#n[s] = new e();
 			}
-			!a && t !== "" && r.push([t, l.#t]);
-		} else if (l = this.#n[o], !l) {
-			if (Object.keys(this.#n).some((e) => e.length > 1 && e !== B && e !== V)) throw H;
-			if (a) return;
-			l = this.#n[o] = new e();
+			o = l;
 		}
-		l.insert(s, n, r, i, a);
+		if (o.#e !== void 0) throw K;
+		o.#e = a ? -1 : n;
 	}
 	buildRegExpStr() {
-		let e = Object.keys(this.#n).sort(at).map((e) => {
-			let t = this.#n[e];
-			return (typeof t.#t == "number" ? `(${e})@${t.#t}` : it.has(e) ? `\\${e}` : e) + t.buildRegExpStr();
-		});
-		return typeof this.#e == "number" && e.unshift(`#${this.#e}`), e.length === 0 ? "" : e.length === 1 ? e[0] : "(?:" + e.join("|") + ")";
+		let e = Object.keys(this.#n).sort(tn).map((e) => {
+			let t = this.#n[e], n = t.buildRegExpStr();
+			return n === "" ? "" : (typeof t.#t == "number" ? `(${e})@${t.#t}` : en.has(e) ? `\\${e}` : e) + n;
+		}).filter(Boolean);
+		return typeof this.#e == "number" && this.#e !== -1 && e.unshift(`#${this.#e}`), e.length === 0 ? "" : e.length === 1 ? e[0] : "(?:" + e.join("|") + ")";
 	}
-}, st = class {
+}, rn = class {
 	#e = { varIndex: 0 };
-	#t = new ot();
-	insert(e, t, n) {
-		let r = [], i = [];
-		for (let t = 0;;) {
-			let n = !1;
-			if (e = e.replace(/\{[^}]+\}/g, (e) => {
-				let r = `@\\${t}`;
-				return i[t] = [r, e], t++, n = !0, r;
-			}), !n) break;
-		}
-		let a = e.match(/(?::[^\/]+)|(?:\/\*$)|./g) || [];
-		for (let e = i.length - 1; e >= 0; e--) {
-			let [t] = i[e];
+	#t = new nn();
+	#n = 0;
+	paths = G();
+	insert(e, t) {
+		if (t) {
+			this.#t.insert(e.split(""), 0, [], this.#e, !0);
+			return;
+		}
+		let n = [], r = [], i = e;
+		for (let e = 0;;) {
+			let t = !1;
+			if (i = i.replace(/\{[^}]+\}/g, (n) => {
+				let i = `@\\${e}`;
+				return r[e] = [i, n], e++, t = !0, i;
+			}), !t) break;
+		}
+		let a = i.match(/(?::[^\/]+)|(?:\/\*$)|./g) || [];
+		for (let e = r.length - 1; e >= 0; e--) {
+			let [t] = r[e];
 			for (let n = a.length - 1; n >= 0; n--) if (a[n].indexOf(t) !== -1) {
-				a[n] = a[n].replace(t, i[e][1]);
+				a[n] = a[n].replace(t, r[e][1]);
 				break;
 			}
 		}
-		return this.#t.insert(a, t, r, this.#e, n), r;
+		this.#t.insert(a, this.#n, n, this.#e, !1), this.paths[e] = [this.#n++, n];
 	}
 	buildRegExp() {
 		let e = this.#t.buildRegExpStr();
@@ -928,111 +1241,72 @@ var ot = class e {
 			r
 		];
 	}
-}, ct = [
-	/^$/,
-	[],
-	/* @__PURE__ */ Object.create(null)
-], lt = /* @__PURE__ */ Object.create(null);
-function ut(e) {
-	return lt[e] ??= RegExp(e === "*" ? "" : `^${e.replace(/\/\*$|([.\\+*[^\]$()])/g, (e, t) => t ? `\\${t}` : "(?:|/.*)")}$`);
-}
-function dt() {
-	lt = /* @__PURE__ */ Object.create(null);
-}
-function ft(e) {
-	let t = new st(), n = [];
-	if (e.length === 0) return ct;
-	let r = e.map((e) => [!/\*|\/:/.test(e[0]), ...e]).sort(([e, t], [n, r]) => e ? 1 : n ? -1 : t.length - r.length), i = /* @__PURE__ */ Object.create(null);
-	for (let e = 0, a = -1, o = r.length; e < o; e++) {
-		let [o, s, c] = r[e];
-		o ? i[s] = [c.map(([e]) => [e, /* @__PURE__ */ Object.create(null)]), nt] : a++;
-		let l;
-		try {
-			l = t.insert(s, a, o);
-		} catch (e) {
-			throw e === H ? new Ze(s) : e;
-		}
-		o || (n[a] = c.map(([e, t]) => {
-			let n = /* @__PURE__ */ Object.create(null);
-			for (--t; t >= 0; t--) {
-				let [e, r] = l[t];
-				n[e] = r;
-			}
-			return [e, n];
-		}));
-	}
-	let [a, o, s] = t.buildRegExp();
-	for (let e = 0, t = n.length; e < t; e++) for (let t = 0, r = n[e].length; t < r; t++) {
-		let r = n[e][t]?.[1];
-		if (!r) continue;
-		let i = Object.keys(r);
-		for (let e = 0, t = i.length; e < t; e++) r[i[e]] = s[r[i[e]]];
-	}
-	let c = [];
-	for (let e in o) c[e] = n[o[e]];
-	return [
-		a,
-		c,
-		i
-	];
-}
-function U(e, t) {
-	if (e) {
-		for (let n of Object.keys(e).sort((e, t) => t.length - e.length)) if (ut(n).test(t)) return [...e[n]];
-	}
-}
-var pt = class {
+}, an = G();
+function on(e) {
+	return an[e] ??= RegExp(`^${e.replace(/\/:[^/{}]+(?:\{\[\^\/]\+})?(?=[/{]|$)|\/?\*$|([.\\+*[^\]$()?{}|])/g, (e, t) => t ? `\\${t}` : e === "/*" ? $t : e === "*" ? ".*" : `/:${Qt}`)}$`);
+}
+function sn(e, t) {
+	for (let n of Object.keys(e).sort((e, t) => t.length - e.length)) if (on(n).test(t)) return [...e[n]];
+}
+var cn = class {
 	name = "RegExpRouter";
 	#e;
 	#t;
+	#n;
 	constructor() {
-		this.#e = { ALL: /* @__PURE__ */ Object.create(null) }, this.#t = { ALL: /* @__PURE__ */ Object.create(null) };
+		this.#e = { ALL: G() }, this.#t = { ALL: G() }, this.#n = { ALL: new rn() };
+	}
+	#r(e, t) {
+		try {
+			this.#n[e].insert(t, !/\*|\/:/.test(t));
+		} catch (e) {
+			throw e === K ? new Gt(t) : e;
+		}
 	}
 	add(e, t, n) {
 		let r = this.#e, i = this.#t;
-		if (!r || !i) throw Error(Xe);
-		r[e] || [r, i].forEach((t) => {
-			t[e] = /* @__PURE__ */ Object.create(null), Object.keys(t.ALL).forEach((n) => {
-				t[e][n] = [...t.ALL[n]];
-			});
-		}), t === "/*" && (t = "*");
-		let a = (t.match(/\/:/g) || []).length;
+		if (!r) throw Error(Wt);
+		if (!r[e]) {
+			this.#n[e] = new rn();
+			for (let t of [r, i]) {
+				t[e] = G();
+				for (let n in t.ALL) t[e][n] = [...t.ALL[n]], this.#r(e, n);
+			}
+		}
+		t === "/*" && (t = "*");
+		let a = e === "ALL" ? Object.keys(r) : [e];
 		if (/\*$/.test(t)) {
-			let o = ut(t);
-			e === "ALL" ? Object.keys(r).forEach((e) => {
-				r[e][t] ||= U(r[e], t) || U(r.ALL, t) || [];
-			}) : r[e][t] ||= U(r[e], t) || U(r.ALL, t) || [], Object.keys(r).forEach((t) => {
-				(e === "ALL" || e === t) && Object.keys(r[t]).forEach((e) => {
-					o.test(e) && r[t][e].push([n, a]);
-				});
-			}), Object.keys(i).forEach((t) => {
-				(e === "ALL" || e === t) && Object.keys(i[t]).forEach((e) => o.test(e) && i[t][e].push([n, a]));
-			});
+			let e = on(t);
+			for (let e of a) r[e][t] || (this.#r(e, t), r[e][t] = sn(r[e], t) || sn(r.ALL, t) || []);
+			for (let o of [r, i]) for (let r of a) for (let i in o[r]) e.test(i) && o[r][i].push([n, t]);
 			return;
 		}
-		let o = Fe(t) || [t];
-		for (let t = 0, s = o.length; t < s; t++) {
-			let c = o[t];
-			Object.keys(i).forEach((o) => {
-				(e === "ALL" || e === o) && (i[o][c] ||= [...U(r[o], c) || U(r.ALL, c) || []], i[o][c].push([n, a - s + t + 1]));
-			});
-		}
+		let o = kt(t) || [t];
+		for (let e of o) for (let t of a) i[t][e] || (this.#r(t, e), i[t][e] = sn(r[t], e) || sn(r.ALL, e) || []), i[t][e].push([n, e]);
 	}
-	match = rt;
+	match = Zt;
 	buildAllMatchers() {
-		let e = /* @__PURE__ */ Object.create(null);
-		return Object.keys(this.#t).concat(Object.keys(this.#e)).forEach((t) => {
-			e[t] ||= this.#n(t);
-		}), this.#e = this.#t = void 0, dt(), e;
+		let e = G();
+		for (let t of Object.keys(this.#t)) e[t] = this.#i(t);
+		return this.#e = this.#t = this.#n = void 0, an = G(), e;
 	}
-	#n(e) {
-		let t = [], n = e === "ALL";
-		return [this.#e, this.#t].forEach((r) => {
-			let i = r[e] ? Object.keys(r[e]).map((t) => [t, r[e][t]]) : [];
-			i.length === 0 ? e !== "ALL" && t.push(...Object.keys(r.ALL).map((e) => [e, r.ALL[e]])) : (n ||= !0, t.push(...i));
-		}), n ? ft(t) : null;
+	#i(e) {
+		let t = this.#e[e], n = this.#t[e], r = this.#n[e], i = G(), a = [], [o, s, c] = r.buildRegExp();
+		for (let e of [t, n]) for (let t in e) {
+			let n = e[t], o = r.paths[t];
+			if (!o) {
+				i[t] = [n.map(([e]) => [e, G()]), Xt];
+				continue;
+			}
+			a[o[0]] = n.map(([e, t]) => [e, r.paths[t][1].reduceRight((e, [t], n) => (e[t] = c[o[1][n][1]], e), G())]);
+		}
+		return [
+			o,
+			s.map((e) => a[e]),
+			i
+		];
 	}
-}, mt = class {
+}, ln = class {
 	name = "SmartRouter";
 	#e = [];
 	#t = [];
@@ -1040,7 +1314,7 @@ var pt = class {
 		this.#e = e.routers;
 	}
 	add(e, t, n) {
-		if (!this.#t) throw Error(Xe);
+		if (!this.#t) throw Error(Wt);
 		this.#t.push([
 			e,
 			t,
@@ -1056,7 +1330,7 @@ var pt = class {
 				for (let e = 0, t = r.length; e < t; e++) i.add(...r[e]);
 				o = i.match(e, t);
 			} catch (e) {
-				if (e instanceof Ze) continue;
+				if (e instanceof Gt) continue;
 				throw e;
 			}
 			this.match = i.match.bind(i), this.#e = [i], this.#t = void 0;
@@ -1069,149 +1343,126 @@ var pt = class {
 		if (this.#t || this.#e.length !== 1) throw Error("No active router has been determined yet.");
 		return this.#e[0];
 	}
-}, W = /* @__PURE__ */ Object.create(null), ht = (e) => {
-	for (let t in e) return !0;
-	return !1;
-}, gt = class e {
-	#e;
-	#t;
-	#n;
-	#r = 0;
-	#i = W;
-	constructor(e, t, n) {
-		if (this.#t = n || /* @__PURE__ */ Object.create(null), this.#e = [], e && t) {
-			let n = /* @__PURE__ */ Object.create(null);
-			n[e] = {
-				handler: t,
-				possibleKeys: [],
-				score: 0
-			}, this.#e = [n];
-		}
-		this.#n = [];
-	}
+}, un = G(), dn = 0, fn = class e {
+	#e = [];
+	#t = G();
+	#n = [];
+	#r;
+	#i = un;
 	insert(t, n, r) {
-		this.#r = ++this.#r;
-		let i = this, a = De(n), o = [];
-		for (let t = 0, n = a.length; t < n; t++) {
-			let n = a[t], r = a[t + 1], s = Ae(n, r), c = Array.isArray(s) ? s[0] : n;
-			if (c in i.#t) {
-				i = i.#t[c], s && o.push(s[1]);
-				continue;
-			}
-			i.#t[c] = new e(), s && (i.#n.push(s), o.push(s[1])), i = i.#t[c];
+		let i = this, a = bt(n), o = /* @__PURE__ */ new Set(), s = 0;
+		for (let t of a) {
+			let n = a[++s], r = wt(t, n) || (n === void 0 && t && t.indexOf("*") === t.length - 1 ? t : null), c = Array.isArray(r), l = c ? r[0] : r || t, u = i.#t[l] ||= new e();
+			r && !u.#r && (u.#r = r, i.#n.push(u)), i = u, c && o.add(r[1]);
 		}
-		return i.#e.push({ [t]: {
+		i.#e.push({ [t]: {
 			handler: r,
-			possibleKeys: o.filter((e, t, n) => n.indexOf(e) === t),
-			score: this.#r
-		} }), i;
+			possibleKeys: [...o],
+			score: ++dn
+		} });
 	}
 	#a(e, t, n, r, i) {
 		for (let a = 0, o = t.#e.length; a < o; a++) {
-			let o = t.#e[a], s = o[n] || o.ALL, c = {};
-			if (s !== void 0 && (s.params = /* @__PURE__ */ Object.create(null), e.push(s), r !== W || i && i !== W)) for (let e = 0, t = s.possibleKeys.length; e < t; e++) {
-				let t = s.possibleKeys[e], n = c[s.score];
-				s.params[t] = i?.[t] && !n ? i[t] : r[t] ?? i?.[t], c[s.score] = !0;
+			let o = t.#e[a], s = o[n] || o.ALL;
+			if (s) {
+				s.params = G(), e.push(s);
+				for (let e = 0, t = s.possibleKeys.length; e < t; e++) {
+					let t = s.possibleKeys[e];
+					s.params[t] = i?.[t] && !e ? i[t] : r[t] ?? i?.[t];
+				}
 			}
 		}
 	}
 	search(e, t) {
 		let n = [];
-		this.#i = W;
-		let r = [this], i = Ee(t), a = [], o = i.length, s = null;
+		this.#i = un;
+		let r = [this], i = yt(t), a = [], o = i.length, s = null;
 		for (let c = 0; c < o; c++) {
 			let l = i[c], u = c === o - 1, d = [];
 			for (let f = 0, p = r.length; f < p; f++) {
 				let p = r[f], m = p.#t[l];
 				m && (m.#i = p.#i, u ? (m.#t["*"] && this.#a(n, m.#t["*"], e, p.#i), this.#a(n, m, e, p.#i)) : d.push(m));
-				for (let r = 0, f = p.#n.length; r < f; r++) {
-					let f = p.#n[r], m = p.#i === W ? {} : { ...p.#i };
-					if (f === "*") {
-						let t = p.#t["*"];
-						t && (this.#a(n, t, e, p.#i), t.#i = m, d.push(t));
+				for (let r of p.#n) {
+					let f = r.#r, m = p.#i === un ? {} : { ...p.#i };
+					if (typeof f == "string") {
+						(f === "*" || l.startsWith(f.slice(0, -1))) && (this.#a(n, r, e, p.#i), f === "*" && (r.#i = m, d.push(r)));
 						continue;
 					}
-					let [h, g, _] = f;
-					if (!l && !(_ instanceof RegExp)) continue;
-					let v = p.#t[h];
-					if (_ instanceof RegExp) {
-						if (s === null) {
-							s = Array(o);
-							let e = +(t[0] === "/");
-							for (let t = 0; t < o; t++) s[t] = e, e += i[t].length + 1;
-						}
-						let r = t.substring(s[c]), l = _.exec(r);
-						if (l) {
-							if (m[g] = l[0], this.#a(n, v, e, p.#i, m), ht(v.#t)) {
-								v.#i = m;
-								let e = l[0].match(/\//)?.length ?? 0;
-								(a[e] ||= []).push(v);
+					let [, h, g] = f;
+					if (!(!l && g === !0)) {
+						if (g !== !0) {
+							if (!s) {
+								s = [];
+								let e = +(t[0] === "/");
+								for (let t = 0; t < o; t++) s[t] = e, e += i[t].length + 1;
+							}
+							let l = t.slice(s[c]), u = g.exec(l);
+							if (u) {
+								m[h] = u[0], this.#a(n, r, e, p.#i, m), u[0].length === l.length && r.#t["*"] && this.#a(n, r.#t["*"], e, p.#i, m);
+								for (let e in r.#t) {
+									r.#i = m;
+									let e = u[0].match(/\//g)?.length ?? 0;
+									(a[e] ||= []).push(r);
+									break;
+								}
+								continue;
 							}
-							continue;
 						}
+						(g === !0 || g.test(l)) && (m[h] = l, u ? (this.#a(n, r, e, m, p.#i), r.#t["*"] && this.#a(n, r.#t["*"], e, m, p.#i)) : (r.#i = m, d.push(r)));
 					}
-					(_ === !0 || _.test(l)) && (m[g] = l, u ? (this.#a(n, v, e, m, p.#i), v.#t["*"] && this.#a(n, v.#t["*"], e, m, p.#i)) : (v.#i = m, d.push(v)));
 				}
 			}
 			let f = a.shift();
 			r = f ? d.concat(f) : d;
 		}
-		return n.length > 1 && n.sort((e, t) => e.score - t.score), [n.map(({ handler: e, params: t }) => [e, t])];
+		return n[1] && n.sort((e, t) => e.score - t.score), [n.map(({ handler: e, params: t }) => [e, t])];
 	}
-}, _t = class {
+}, pn = class {
 	name = "TrieRouter";
-	#e;
-	constructor() {
-		this.#e = new gt();
-	}
+	#e = new fn();
 	add(e, t, n) {
-		let r = Fe(t);
-		if (r) {
-			for (let t = 0, i = r.length; t < i; t++) this.#e.insert(e, r[t], n);
-			return;
-		}
-		this.#e.insert(e, t, n);
+		for (let r of kt(t) || [t]) this.#e.insert(e, r, n);
 	}
 	match(e, t) {
 		return this.#e.search(e, t);
 	}
-}, vt = class extends tt {
+}, mn = class extends Yt {
 	constructor(e = {}) {
-		super(e), this.router = e.router ?? new mt({ routers: [new pt(), new _t()] });
+		super(e), this.router = e.router ?? new ln({ routers: [new cn(), new pn()] });
 	}
 };
 //#endregion
 //#region src/coordinator-invites.ts
-function yt(e) {
+function hn(e) {
 	let t = "";
 	for (let n of e) t += String.fromCharCode(n);
 	return btoa(t);
 }
-function bt(e) {
+function gn(e) {
 	let t = atob(e), n = new Uint8Array(t.length);
 	for (let e = 0; e < t.length; e += 1) n[e] = t.charCodeAt(e);
 	return n;
 }
-function xt(e) {
+function _n(e) {
 	return e.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
-function St(e) {
+function vn(e) {
 	let t = e.replace(/-/g, "+").replace(/_/g, "/");
 	return t + "=".repeat((4 - t.length % 4) % 4);
 }
-function G(e) {
+function yn(e) {
 	let t = JSON.stringify(e);
-	return xt(yt(new TextEncoder().encode(t)));
+	return _n(hn(new TextEncoder().encode(t)));
 }
-function Ct(e) {
-	let t = new TextDecoder().decode(bt(St(e))), n = JSON.parse(t);
+function bn(e) {
+	let t = new TextDecoder().decode(gn(vn(e))), n = JSON.parse(t);
 	if (typeof n != "object" || !n) throw Error("invalid invite payload");
 	return n;
 }
-function K(e) {
+function xn(e) {
 	return `codemem://join?invite=${encodeURIComponent(e)}`;
 }
-function wt(e) {
+function Sn(e) {
 	let t = e.trim();
 	if (t.startsWith("codemem://")) {
 		let e = new URL(t).searchParams.get("invite") ?? "";
@@ -1222,44 +1473,62 @@ function wt(e) {
 }
 //#endregion
 //#region src/project-invite-acceptance.ts
-var Tt = "pending_setup", Et = "project_sync_enablement_failed", Dt = "Invitation was accepted, but sync could not be enabled. Make the codemem config writable, then retry.", Ot = class extends Error {
-	code = Et;
-	detail = Dt;
+var Cn = "pending_setup", wn = "project_sync_enablement_failed", Tn = "Invitation was accepted, but sync could not be enabled. Make the codemem config writable, then retry.", En = class extends Error {
+	code = wn;
+	detail = Tn;
 	constructor(e) {
-		super(Dt, e), this.name = "ProjectSyncEnablementError";
+		super(Tn, e), this.name = "ProjectSyncEnablementError";
 	}
 };
-function kt(e) {
+function Dn(e) {
 	return typeof e == "object" && !!e && "code" in e && e.code === "project_sync_enablement_failed" && "detail" in e && e.detail === "Invitation was accepted, but sync could not be enabled. Make the codemem config writable, then retry.";
 }
 //#endregion
-//#region src/scope-resolution.ts
-var At = "local-default", jt = "legacy-shared-review";
+//#region src/project-identity.ts
+var On = /^(?:command failed(?:\s|:)|error:\s|fatal:\s|git:\s)/iu, kn = /^(?:giterror|git error|git command failed):[^\r\n]*(?:not a git repository|unknown revision or path|no such remote)\b/iu;
+function An(e) {
+	if (typeof e != "string") return !1;
+	let t = e.trim();
+	return t ? t.includes("\n") || t.includes("\r") ? !0 : On.test(t) || kn.test(t) : !1;
+}
 function q(e) {
-	return e?.trim() || null;
+	let t = e?.trim();
+	return !t || An(t) ? null : t;
 }
+//#endregion
+//#region src/scope-resolution.ts
+var jn = "local-default", Mn = "legacy-shared-review";
 function J(e) {
+	return e?.trim() || null;
+}
+function Y(e) {
 	return e.trim().replaceAll("\\", "/").replace(/\/+$/, "") || e.trim();
 }
-function Mt(t) {
-	return J(e(t));
+function Nn(t) {
+	return Y(e(t));
 }
-function Nt(e) {
-	let t = q(e);
-	return t ? J(t) : null;
+function Pn(e) {
+	let t = J(e);
+	return t ? Y(t) : null;
 }
-function Pt(e) {
+function Fn(e) {
 	let n = [
 		e.cwd,
 		e.project,
 		e.workspaceId
-	].map((e) => q(e)).find((e) => e != null);
-	return `unmapped:${t("sha256").update(n ?? "unknown", "utf8").digest("hex")}`;
+	].map((e) => q(e)).find((e) => e !== null), r = [
+		e.gitRemote,
+		e.gitBranch,
+		e.cwd,
+		e.project,
+		e.workspaceId
+	].map((e) => typeof e == "string" ? e.trim() : null), i = n ?? "unknown";
+	return !n && r.some(An) && (i = JSON.stringify(r)), `unmapped:${t("sha256").update(i, "utf8").digest("hex")}`;
 }
-function Ft(e) {
+function In(e) {
 	let t = q(e.gitRemote), n = q(e.gitBranch), r = q(e.cwd), i = q(e.workspaceId), a = q(e.project);
 	if (t) {
-		let r = J(t);
+		let r = Y(t);
 		return e.branchScoped && n ? {
 			value: `${r}:${n}`,
 			source: "git_remote_branch",
@@ -1271,49 +1540,49 @@ function Ft(e) {
 		};
 	}
 	return r ? {
-		value: Mt(r),
+		value: Nn(r),
 		source: "cwd",
 		displayProject: a
 	} : i ? {
-		value: J(i),
+		value: Y(i),
 		source: "workspace_id",
 		displayProject: a
 	} : {
-		value: Pt(e),
+		value: Fn(e),
 		source: "unmapped",
 		displayProject: a
 	};
 }
-function It(e) {
+function Ln(e) {
 	return !/[\\/:]/.test(e);
 }
-function Lt(e) {
+function Rn(e) {
 	return e.replace(/[|\\{}()[\]^$+?.*]/g, "\\$&");
 }
-function Rt(e) {
+function zn(e) {
 	return e.replace(/[*?]/g, "").length;
 }
-function zt(e, t) {
-	let n = J(t);
-	return !n || It(n) ? !1 : /[*?]/.test(n) ? RegExp(`^${Lt(n).replaceAll("\\*", ".*").replaceAll("\\?", ".")}$`).test(e) : e === n;
+function Bn(e, t) {
+	let n = Y(t);
+	return !n || Ln(n) ? !1 : /[*?]/.test(n) ? RegExp(`^${Rn(n).replaceAll("\\*", ".*").replaceAll("\\?", ".")}$`).test(e) : e === n;
 }
-function Bt(e) {
+function Vn(e) {
 	return e.mapping.priority ?? 0;
 }
-function Vt(e) {
-	let t = q(e.mapping.updated_at);
+function Hn(e) {
+	let t = J(e.mapping.updated_at);
 	if (!t) return 0;
 	let n = Date.parse(t);
 	return Number.isFinite(n) ? n : 0;
 }
-function Ht(e, t) {
-	return Bt(t) - Bt(e) || t.specificity - e.specificity || Vt(t) - Vt(e) || (t.mapping.id ?? 0) - (e.mapping.id ?? 0) || e.mapping.scope_id.localeCompare(t.mapping.scope_id);
+function Un(e, t) {
+	return Vn(t) - Vn(e) || t.specificity - e.specificity || Hn(t) - Hn(e) || (t.mapping.id ?? 0) - (e.mapping.id ?? 0) || e.mapping.scope_id.localeCompare(t.mapping.scope_id);
 }
-function Ut(e) {
-	return e.toSorted(Ht)[0] ?? null;
+function Wn(e) {
+	return e.toSorted(Un)[0] ?? null;
 }
-function Wt(e) {
-	let t = Ft(e), n = q(e.explicitScopeId);
+function Gn(e) {
+	let t = In(e), n = J(e.explicitScopeId);
 	if (n) return {
 		scopeId: n,
 		reason: "explicit_override",
@@ -1328,7 +1597,7 @@ function Wt(e) {
 		mapping: null,
 		matchedPattern: null
 	};
-	let r = e.mappings ?? [], i = Ut(r.filter((e) => Nt(e.workspace_identity) === t.value).map((e) => ({
+	let r = e.mappings ?? [], i = Wn(r.filter((e) => Pn(e.workspace_identity) === t.value).map((e) => ({
 		mapping: e,
 		matchedPattern: null,
 		specificity: t.value.length
@@ -1340,13 +1609,13 @@ function Wt(e) {
 		mapping: i.mapping,
 		matchedPattern: null
 	};
-	let a = Ut(r.flatMap((e) => {
-		if (q(e.workspace_identity)) return [];
-		let n = q(e.project_pattern);
-		return !n || !zt(t.value, n) ? [] : [{
+	let a = Wn(r.flatMap((e) => {
+		if (J(e.workspace_identity)) return [];
+		let n = J(e.project_pattern);
+		return !n || !Bn(t.value, n) ? [] : [{
 			mapping: e,
-			matchedPattern: J(n),
-			specificity: Rt(n)
+			matchedPattern: Y(n),
+			specificity: zn(n)
 		}];
 	}));
 	return a ? {
@@ -1363,11 +1632,11 @@ function Wt(e) {
 		matchedPattern: null
 	};
 }
-function Gt(e, t) {
-	let n = new Set([
+function Kn(e, t) {
+	let n = /* @__PURE__ */ new Set([
 		"",
-		At,
-		jt
+		jn,
+		Mn
 	]), r = e.prepare("SELECT scope_id\n			 FROM replication_scopes\n			 WHERE status = 'active' AND authority_type = 'local'").all();
 	for (let e of r) e.scope_id != null && n.add(e.scope_id);
 	let i = e.prepare("SELECT sm.scope_id AS scope_id\n			 FROM scope_memberships sm\n			 JOIN replication_scopes rs ON rs.scope_id = sm.scope_id\n			 WHERE sm.device_id = ?\n			   AND sm.status = 'active'\n			   AND rs.status = 'active'\n			   AND sm.membership_epoch >= rs.membership_epoch").all(t);
@@ -1376,29 +1645,29 @@ function Gt(e, t) {
 }
 //#endregion
 //#region src/project-share-intent.ts
-var Kt = "existing_and_future";
-function qt(e) {
+var qn = "existing_and_future";
+function Jn(e) {
 	return t("sha256").update(JSON.stringify(e)).digest("hex");
 }
-function Jt(e) {
-	return qt({
+function Yn(e) {
+	return Jn({
 		v: 1,
-		historyPolicy: Kt,
+		historyPolicy: qn,
 		projects: e.map((e) => ({
 			canonicalIdentity: e.canonicalIdentity,
 			existingMemoryCount: e.existingMemoryCount
 		})).toSorted((e, t) => e.canonicalIdentity.localeCompare(t.canonicalIdentity))
 	});
 }
-function Yt(e) {
-	return Jt(e.map((e) => ({
+function Xn(e) {
+	return Yn(e.map((e) => ({
 		canonicalIdentity: e.canonical_identity,
 		displayName: e.display_name,
 		identitySource: "coordinator_acceptance",
 		existingMemoryCount: e.existing_memory_count
 	})));
 }
-function Xt(e) {
+function Zn(e) {
 	if (!Array.isArray(e) || e.length === 0 || e.length > 100) throw Error("operation_intent_invalid");
 	let t = e.map((e) => {
 		if (!e || typeof e != "object" || Array.isArray(e)) throw Error("operation_intent_invalid");
@@ -1406,11 +1675,11 @@ function Xt(e) {
 		if (typeof t.canonical_identity != "string" || typeof t.display_name != "string") throw Error("operation_intent_invalid");
 		let n = t.canonical_identity, r = n.trim(), i = t.display_name, a;
 		try {
-			a = C(i, "project_name");
+			a = F(i, "project_name");
 		} catch {
 			throw Error("operation_intent_invalid");
 		}
-		let o = t.existing_memory_count, s = Ft({ gitRemote: r }).value;
+		let o = t.existing_memory_count, s = In({ gitRemote: r }).value;
 		if (!r || r !== n || r.length > 2048 || r.startsWith("unmapped:") || s !== r || a !== i || !Number.isSafeInteger(o) || Number(o) < 0 || /[\p{Cc}\p{Cf}]/u.test(r) || /[\p{Cc}\p{Cf}]/u.test(a)) throw Error("operation_intent_invalid");
 		return {
 			canonical_identity: r,
@@ -1423,20 +1692,20 @@ function Xt(e) {
 }
 //#endregion
 //#region ../../node_modules/.pnpm/limiter@3.0.0/node_modules/limiter/dist/esm/clock.js
-function Zt(e) {
+function Qn(e) {
 	let t = performance.now() * .001, n = Math.floor(t), r = Math.floor(t % 1 * 1e9);
 	return e != null && (n -= e[0], r -= e[1], r < 0 && (n--, r += 1e9)), [n, r];
 }
-function Y() {
-	let [e, t] = Zt();
+function $n() {
+	let [e, t] = Qn();
 	return e * 1e3 + Math.floor(t / 1e6);
 }
-function Qt(e) {
+function er(e) {
 	return new Promise((t) => setTimeout(t, e));
 }
 //#endregion
 //#region ../../node_modules/.pnpm/limiter@3.0.0/node_modules/limiter/dist/esm/TokenBucket.js
-var $t = class {
+var tr = class {
 	bucketSize;
 	tokensPerInterval;
 	interval;
@@ -1451,30 +1720,31 @@ var $t = class {
 				break;
 			case "min":
 			case "minute":
-				this.interval = 1e3 * 60;
+				this.interval = 6e4;
 				break;
 			case "hr":
 			case "hour":
-				this.interval = 1e3 * 60 * 60;
+				this.interval = 36e5;
 				break;
 			case "day":
-				this.interval = 1e3 * 60 * 60 * 24;
+				this.interval = 864e5;
 				break;
 			default: throw Error("Invalid interval " + n);
 		}
 		else this.interval = n;
-		this.parentBucket = r, this.content = 0, this.lastDrip = Y();
+		this.parentBucket = r, this.content = 0, this.lastDrip = $n();
 	}
 	async removeTokens(e) {
 		if (this.bucketSize === 0) return Infinity;
 		if (e > this.bucketSize) throw Error(`Requested tokens ${e} exceeds bucket size ${this.bucketSize}`);
 		this.drip();
-		let t = async () => (await Qt(Math.ceil((e - this.content) * (this.interval / this.tokensPerInterval))), this.removeTokens(e));
+		let t = async () => (await er(Math.ceil((e - this.content) * (this.interval / this.tokensPerInterval))), this.removeTokens(e));
 		if (e > this.content) return t();
 		if (this.parentBucket != null) {
 			let n = await this.parentBucket.removeTokens(e);
 			return e > this.content ? t() : (this.content -= e, Math.min(n, this.content));
-		} else return this.content -= e, this.content;
+		}
+		return this.content -= e, this.content;
 	}
 	tryRemoveTokens(e) {
 		return this.bucketSize ? e > this.bucketSize || (this.drip(), e > this.content) || this.parentBucket && !this.parentBucket.tryRemoveTokens(e) ? !1 : (this.content -= e, !0) : !0;
@@ -1484,30 +1754,30 @@ var $t = class {
 			let e = this.content;
 			return this.content = this.bucketSize, this.content > e;
 		}
-		let e = Y(), t = Math.max(e - this.lastDrip, 0);
+		let e = $n(), t = Math.max(e - this.lastDrip, 0);
 		this.lastDrip = e;
 		let n = t * (this.tokensPerInterval / this.interval), r = this.content;
 		return this.content = Math.min(this.content + n, this.bucketSize), Math.floor(this.content) > Math.floor(r);
 	}
-}, en = class {
+}, nr = class {
 	tokenBucket;
 	curIntervalStart;
 	tokensThisInterval;
 	fireImmediately;
 	constructor({ tokensPerInterval: e, interval: t, fireImmediately: n }) {
-		this.tokenBucket = new $t({
+		this.tokenBucket = new tr({
 			bucketSize: e,
 			tokensPerInterval: e,
 			interval: t
-		}), this.tokenBucket.content = e, this.curIntervalStart = Y(), this.tokensThisInterval = 0, this.fireImmediately = n ?? !1;
+		}), this.tokenBucket.content = e, this.curIntervalStart = $n(), this.tokensThisInterval = 0, this.fireImmediately = n ?? !1;
 	}
 	async removeTokens(e) {
 		if (e > this.tokenBucket.bucketSize) throw Error(`Requested tokens ${e} exceeds maximum tokens per interval ${this.tokenBucket.bucketSize}`);
-		let t = Y();
+		let t = $n();
 		if ((t < this.curIntervalStart || t - this.curIntervalStart >= this.tokenBucket.interval) && (this.curIntervalStart = t, this.tokensThisInterval = 0), e > this.tokenBucket.tokensPerInterval - this.tokensThisInterval) {
 			if (this.fireImmediately) return -1;
 			{
-				await Qt(Math.ceil(this.curIntervalStart + this.tokenBucket.interval - t));
+				await er(Math.ceil(this.curIntervalStart + this.tokenBucket.interval - t));
 				let n = await this.tokenBucket.removeTokens(e);
 				return this.tokensThisInterval += e, n;
 			}
@@ -1517,7 +1787,7 @@ var $t = class {
 	}
 	tryRemoveTokens(e) {
 		if (e > this.tokenBucket.bucketSize) return !1;
-		let t = Y();
+		let t = $n();
 		if ((t < this.curIntervalStart || t - this.curIntervalStart >= this.tokenBucket.interval) && (this.curIntervalStart = t, this.tokensThisInterval = 0), e > this.tokenBucket.tokensPerInterval - this.tokensThisInterval) return !1;
 		let n = this.tokenBucket.tryRemoveTokens(e);
 		return n && (this.tokensThisInterval += e), n;
@@ -1528,7 +1798,7 @@ var $t = class {
 };
 //#endregion
 //#region src/request-rate-limit.ts
-function tn(e = {}) {
+function rr(e = {}) {
 	let t = Math.max(1e3, Math.trunc(e.windowMs ?? 6e4)), n = e.now ?? (() => Date.now()), r = /* @__PURE__ */ new Map(), i = 0;
 	function a(e) {
 		return Math.max(1, Math.ceil(t / Math.max(1, e) / 1e3));
@@ -1545,7 +1815,7 @@ function tn(e = {}) {
 		o(l);
 		let u = `${c}:${e}`, d = r.get(u);
 		return d || (d = {
-			limiter: new en({
+			limiter: new nr({
 				tokensPerInterval: c,
 				interval: t,
 				fireImmediately: !0
@@ -1562,8 +1832,8 @@ function tn(e = {}) {
 }
 //#endregion
 //#region src/scope-membership-semantics.ts
-var nn = "Revocation blocks future sync for this Space. It does not remove data already copied to the revoked device; offline devices, backups, copied databases, malicious peers, or old versions may retain data.";
-function rn(e) {
+var ir = "Revocation blocks future sync for this Space. It does not remove data already copied to the revoked device; offline devices, backups, copied databases, malicious peers, or old versions may retain data.";
+function ar(e) {
 	let t = Number.isFinite(e.membershipEpoch) ? Number(e.membershipEpoch) : null, n = Number.isFinite(e.requiredEpoch) ? Number(e.requiredEpoch) : null;
 	return t == null || n == null ? {
 		membership_epoch: t,
@@ -1577,19 +1847,19 @@ function rn(e) {
 		reason: t < n ? "stale_epoch" : "current"
 	};
 }
-function an(e) {
+function or(e) {
 	return {
 		scope_id: e.scopeId,
 		device_id: e.deviceId,
 		membership_epoch: Number.isFinite(e.membershipEpoch) ? Number(e.membershipEpoch) : null,
 		prevents_future_sync: !0,
 		deletes_already_copied_data: !1,
-		message: nn
+		message: ir
 	};
 }
 //#endregion
 //#region src/sync-auth-constants.ts
-var on = 300, sn = 64 * 1024, X = "X-Codemem-Coordinator-Admin", cn = "X-Codemem-Coordinator-Admin-Actor", ln = 120, un = 30;
+var sr = 300, cr = 65536, lr = E + 1024, X = "X-Codemem-Coordinator-Admin", ur = "X-Codemem-Coordinator-Admin-Actor", dr = 120, fr = 30;
 function Z(e, t) {
 	let n = t.adminSecret();
 	if (!n) return {
@@ -1608,14 +1878,14 @@ function Z(e, t) {
 		error: "missing_admin_header"
 	};
 }
-function dn(e) {
+function pr(e) {
 	let t = new URL(e);
 	return t.search ? `${t.pathname}${t.search}` : t.pathname;
 }
-async function fn(e, t, n, r) {
+async function mr(e, t, n, r) {
 	return await e.recordNonce(t, n, r);
 }
-async function pn(e, t) {
+async function hr(e, t) {
 	await e.cleanupNonces(t);
 }
 async function Q(e, t, n, r) {
@@ -1651,7 +1921,7 @@ async function Q(e, t, n, r) {
 	try {
 		u = await n({
 			method: r.method,
-			pathWithQuery: dn(r.url),
+			pathWithQuery: pr(r.url),
 			bodyBytes: r.body,
 			timestamp: o,
 			nonce: s,
@@ -1672,7 +1942,7 @@ async function Q(e, t, n, r) {
 		enrollment: null
 	};
 	let d = t.now();
-	return await fn(e, i, s, d) ? (await pn(e, (/* @__PURE__ */ new Date(new Date(d).getTime() - 300 * 2 * 1e3)).toISOString()), {
+	return await mr(e, i, s, d) ? (await hr(e, (/* @__PURE__ */ new Date(new Date(d).getTime() - 6e5)).toISOString()), {
 		ok: !0,
 		error: "ok",
 		enrollment: c
@@ -1685,54 +1955,54 @@ async function Q(e, t, n, r) {
 function $(e) {
 	return e === "device_disabled" ? 403 : e === "group_archived" ? 409 : 401;
 }
-function mn(e) {
+function gr(e) {
 	if (!e?.storeFactory || !e.runtime || !e.requestVerifier) throw Error("createCoordinatorApp requires storeFactory, runtime, and requestVerifier.");
-	let t = e.runtime, n = e.storeFactory, r = e.requestVerifier, a = e.requestRateLimit ?? {}, o = a.limiter ?? tn(), s = Math.max(1, Math.trunc(a.readLimit ?? ln)), c = Math.max(1, Math.trunc(a.mutationLimit ?? un)), l = Math.max(1, Math.trunc(a.unauthenticatedReadLimit ?? Math.min(20, s))), u = Math.max(1, Math.trunc(a.unauthenticatedMutationLimit ?? Math.min(10, c))), d = new vt(), f = new TextDecoder();
-	function p(e, t, n) {
-		let r = e.req.method === "GET" || e.req.method === "HEAD" || e.req.method === "OPTIONS", i = o.check(`${e.req.method}:${n ? "auth" : "anon"}:${t}`, n ? r ? s : c : r ? l : u);
+	let t = e.runtime, n = e.storeFactory, r = e.requestVerifier, i = e.requestRateLimit ?? {}, a = i.limiter ?? rr(), o = Math.max(1, Math.trunc(i.readLimit ?? dr)), s = Math.max(1, Math.trunc(i.mutationLimit ?? fr)), c = Math.max(1, Math.trunc(i.unauthenticatedReadLimit ?? Math.min(20, o))), l = Math.max(1, Math.trunc(i.unauthenticatedMutationLimit ?? Math.min(10, s))), u = new mn(), d = new TextDecoder();
+	function f(e, t, n) {
+		let r = e.req.method === "GET" || e.req.method === "HEAD" || e.req.method === "OPTIONS", i = a.check(`${e.req.method}:${n ? "auth" : "anon"}:${t}`, n ? r ? o : s : r ? c : l);
 		return i.allowed ? null : (e.header("Retry-After", String(i.retryAfterS)), e.json({
 			error: "rate_limited",
 			retry_after_s: i.retryAfterS
 		}, 429));
 	}
-	async function m(e) {
-		let t = Number.parseInt(e.req.header("content-length") ?? "", 10);
-		if (Number.isFinite(t) && t > sn) return null;
-		let n = e.req.raw.body;
-		if (!n) return new Uint8Array();
-		let r = n.getReader(), i = [], a = 0;
+	async function p(e, t = cr) {
+		let n = Number.parseInt(e.req.header("content-length") ?? "", 10);
+		if (Number.isFinite(n) && n > t) return null;
+		let r = e.req.raw.body;
+		if (!r) return /* @__PURE__ */ new Uint8Array();
+		let i = r.getReader(), a = [], o = 0;
 		try {
 			for (;;) {
-				let { done: e, value: t } = await r.read();
+				let { done: e, value: n } = await i.read();
 				if (e) break;
-				if (t) {
-					if (a += t.byteLength, a > sn) return await r.cancel(), null;
-					i.push(t);
+				if (n) {
+					if (o += n.byteLength, o > t) return await i.cancel(), null;
+					a.push(n);
 				}
 			}
 		} finally {
-			r.releaseLock();
+			i.releaseLock();
 		}
-		let o = new Uint8Array(a), s = 0;
-		for (let e of i) o.set(e, s), s += e.byteLength;
-		return o;
+		let s = new Uint8Array(o), c = 0;
+		for (let e of a) s.set(e, c), c += e.byteLength;
+		return s;
 	}
-	function h(e) {
+	function m(e) {
 		try {
-			let t = JSON.parse(f.decode(e));
+			let t = JSON.parse(d.decode(e));
 			return typeof t != "object" || !t || Array.isArray(t) ? null : t;
 		} catch {
 			return null;
 		}
 	}
-	function _(e, t) {
+	function h(e, t) {
 		let n = e[t];
 		return n == null ? null : String(n).trim() || null;
 	}
-	function v(e) {
+	function g(e) {
 		return e?.trim() || null;
 	}
-	function y(e, t) {
+	function _(e, t) {
 		let n = e[t];
 		if (n == null || n === "") return null;
 		if (typeof n != "number" && typeof n != "string") return NaN;
@@ -1745,45 +2015,45 @@ function mn(e) {
 		let r = n;
 		return Number.isFinite(r) ? Math.trunc(r) : NaN;
 	}
-	function b(e) {
+	function v(e) {
 		return [
 			"1",
 			"true",
 			"yes"
 		].includes(String(e ?? "").trim().toLowerCase());
 	}
-	function x(e) {
+	function y(e) {
 		try {
-			return Xt(JSON.parse(e ?? ""));
+			return Zn(JSON.parse(e ?? ""));
 		} catch {
 			throw Error("operation_intent_invalid");
 		}
 	}
-	function S(e) {
+	function ee(e) {
 		let t = String(e.operation_id ?? "").trim(), n = String(e.reviewed_project_set_digest ?? "").trim();
 		if (!/^share_[a-f0-9]{40}$/u.test(t) || !/^[a-f0-9]{64}$/u.test(n)) throw Error("operation_intent_invalid");
-		let r = x(e.project_intent_json);
-		if (Yt(r) !== n) throw Error("operation_intent_invalid");
+		let r = y(e.project_intent_json);
+		if (Xn(r) !== n) throw Error("operation_intent_invalid");
 		return {
 			operation_id: t,
 			reviewed_project_set_digest: n,
 			projects: r
 		};
 	}
-	function C(e) {
+	function b(e) {
 		try {
-			return ee(JSON.parse(e ?? ""));
+			return Be(JSON.parse(e ?? ""));
 		} catch {
 			throw Error("operation_intent_invalid");
 		}
 	}
-	async function w(e, t, n) {
+	async function x(e, t, n) {
 		if (!t) return n.json({ error: "group_id_required" }, 400);
 		let r = await e.getGroup(t);
 		return r ? r.archived_at ? n.json({ error: "group_archived" }, 409) : null : n.json({ error: "group_not_found" }, 404);
 	}
-	async function E(e, t, n, r) {
-		let i = await w(e, t, r);
+	async function S(e, t, n, r) {
+		let i = await x(e, t, r);
 		if (i) return {
 			scope: null,
 			response: i
@@ -1804,12 +2074,12 @@ function mn(e) {
 			response: r.json({ error: "scope_not_found" }, 404)
 		};
 	}
-	async function D(e, n, i) {
+	async function te(e, n, i) {
 		let a = await Q(e, t, r, {
 			method: i.req.method,
 			url: i.req.url,
 			groupId: n,
-			body: new Uint8Array(),
+			body: /* @__PURE__ */ new Uint8Array(),
 			deviceId: i.req.header("X-Opencode-Device") ?? null,
 			signature: i.req.header("X-Opencode-Signature") ?? null,
 			timestamp: i.req.header("X-Opencode-Timestamp") ?? null,
@@ -1817,22 +2087,19 @@ function mn(e) {
 		});
 		return !a.ok || !a.enrollment ? {
 			auth: a,
-			response: p(i, i.req.path, !1) ?? i.json({ error: a.error }, $(a.error))
+			response: f(i, i.req.path, !1) ?? i.json({ error: a.error }, $(a.error))
 		} : {
 			auth: a,
-			response: p(i, String(a.enrollment.device_id), !0)
+			response: f(i, String(a.enrollment.device_id), !0)
 		};
 	}
-	function O(e, t) {
+	function C(e, t) {
 		return e.status === "active" && e.membership_epoch >= t.membership_epoch;
 	}
-	async function A(e, t, n) {
-		return (await e.listScopeMemberships(t.scope_id, !1)).some((e) => e.device_id === n && O(e, t));
-	}
-	return d.post("/v1/presence", async (e) => {
-		let i = await m(e);
+	return u.post("/v1/presence", async (e) => {
+		let i = await p(e);
 		if (i == null) return e.json({ error: "body_too_large" }, 413);
-		let a = h(i);
+		let a = m(i);
 		if (!a) return e.json({ error: "invalid_json" }, 400);
 		let o = String(a.group_id ?? "").trim();
 		if (!o) return e.json({ error: "group_id_required" }, 400);
@@ -1848,8 +2115,8 @@ function mn(e) {
 				timestamp: e.req.header("X-Opencode-Timestamp") ?? null,
 				nonce: e.req.header("X-Opencode-Nonce") ?? null
 			});
-			if (!n.ok || !n.enrollment) return p(e, e.req.path, !1) || e.json({ error: n.error }, $(n.error));
-			let c = p(e, String(n.enrollment.device_id), !0);
+			if (!n.ok || !n.enrollment) return f(e, e.req.path, !1) || e.json({ error: n.error }, $(n.error));
+			let c = f(e, String(n.enrollment.device_id), !0);
 			if (c) return c;
 			if (a.fingerprint && String(a.fingerprint) !== String(n.enrollment.fingerprint)) return e.json({ error: "fingerprint_mismatch" }, 401);
 			let l = a.addresses ?? [];
@@ -1874,7 +2141,7 @@ function mn(e) {
 		} finally {
 			await s.close();
 		}
-	}), d.get("/v1/peers", async (e) => {
+	}), u.get("/v1/peers", async (e) => {
 		let i = (e.req.query("group_id") ?? "").trim();
 		if (!i) return e.json({ error: "group_id_required" }, 400);
 		let a = n();
@@ -1883,44 +2150,47 @@ function mn(e) {
 				method: e.req.method,
 				url: e.req.url,
 				groupId: i,
-				body: new Uint8Array(),
+				body: /* @__PURE__ */ new Uint8Array(),
 				deviceId: e.req.header("X-Opencode-Device") ?? null,
 				signature: e.req.header("X-Opencode-Signature") ?? null,
 				timestamp: e.req.header("X-Opencode-Timestamp") ?? null,
 				nonce: e.req.header("X-Opencode-Nonce") ?? null
 			});
-			if (!n.ok || !n.enrollment) return p(e, e.req.path, !1) || e.json({ error: n.error }, $(n.error));
-			let o = p(e, String(n.enrollment.device_id), !0);
+			if (!n.ok || !n.enrollment) return f(e, e.req.path, !1) || e.json({ error: n.error }, $(n.error));
+			let o = f(e, String(n.enrollment.device_id), !0);
 			if (o) return o;
 			let s = await a.listGroupPeers(i, String(n.enrollment.device_id));
 			return e.json({ items: s });
 		} finally {
 			await a.close();
 		}
-	}), d.get("/v1/scopes", async (e) => {
+	}), u.get("/v1/scopes", async (e) => {
 		let t = (e.req.query("group_id") ?? "").trim();
 		if (!t) return e.json({ error: "group_id_required" }, 400);
 		let r = n();
 		try {
-			let { auth: n, response: i } = await D(r, t, e);
+			let { auth: n, response: i } = await te(r, t, e);
 			if (i) return i;
 			if (!n.enrollment) return e.json({ error: "unknown_device" }, 401);
 			let a = await r.listScopes({
 				groupId: t,
 				includeInactive: !1
-			}), o = [];
-			for (let e of a) e.status === "active" && await A(r, e, String(n.enrollment.device_id)) && o.push(e);
-			return e.json({ items: o });
+			}), o = await r.listDeviceScopeMemberships(String(n.enrollment.device_id), !1), s = new Map(o.map((e) => [e.scope_id, e])), c = a.filter((e) => {
+				if (e.status !== "active") return !1;
+				let t = s.get(e.scope_id);
+				return !!(t && C(t, e));
+			});
+			return e.json({ items: c });
 		} finally {
 			await r.close();
 		}
-	}), d.get("/v1/scopes/:scope_id/members", async (e) => {
+	}), u.get("/v1/scopes/:scope_id/members", async (e) => {
 		let t = (e.req.query("group_id") ?? "").trim(), r = String(e.req.param("scope_id") ?? "").trim();
 		if (!t) return e.json({ error: "group_id_required" }, 400);
 		if (!r) return e.json({ error: "scope_id_required" }, 400);
 		let i = n();
 		try {
-			let { auth: n, response: a } = await D(i, t, e);
+			let { auth: n, response: a } = await te(i, t, e);
 			if (a) return a;
 			if (!n.enrollment) return e.json({ error: "unknown_device" }, 401);
 			let o = (await i.listScopes({
@@ -1929,11 +2199,11 @@ function mn(e) {
 			})).find((e) => e.scope_id === r) ?? null;
 			if (o?.status !== "active") return e.json({ error: "scope_not_found" }, 404);
 			let s = await i.listScopeMemberships(r, !1);
-			return s.some((e) => e.device_id === String(n.enrollment?.device_id) && O(e, o)) ? e.json({ items: s.filter((e) => O(e, o)) }) : e.json({ error: "scope_not_authorized" }, 403);
+			return s.some((e) => e.device_id === String(n.enrollment?.device_id) && C(e, o)) ? e.json({ items: s.filter((e) => C(e, o)) }) : e.json({ error: "scope_not_authorized" }, 403);
 		} finally {
 			await i.close();
 		}
-	}), d.get("/v1/reciprocal-approvals", async (e) => {
+	}), u.get("/v1/reciprocal-approvals", async (e) => {
 		let i = (e.req.query("group_id") ?? "").trim(), a = (e.req.query("direction") ?? "incoming").trim(), o = (e.req.query("status") ?? "pending").trim() || "pending";
 		if (!i) return e.json({ error: "group_id_required" }, 400);
 		if (!["incoming", "outgoing"].includes(a)) return e.json({ error: "direction_must_be_incoming_or_outgoing" }, 400);
@@ -1943,14 +2213,14 @@ function mn(e) {
 				method: e.req.method,
 				url: e.req.url,
 				groupId: i,
-				body: new Uint8Array(),
+				body: /* @__PURE__ */ new Uint8Array(),
 				deviceId: e.req.header("X-Opencode-Device") ?? null,
 				signature: e.req.header("X-Opencode-Signature") ?? null,
 				timestamp: e.req.header("X-Opencode-Timestamp") ?? null,
 				nonce: e.req.header("X-Opencode-Nonce") ?? null
 			});
-			if (!n.ok || !n.enrollment) return p(e, e.req.path, !1) ?? e.json({ error: n.error }, $(n.error));
-			let c = p(e, String(n.enrollment.device_id), !0);
+			if (!n.ok || !n.enrollment) return f(e, e.req.path, !1) ?? e.json({ error: n.error }, $(n.error));
+			let c = f(e, String(n.enrollment.device_id), !0);
 			if (c) return c;
 			let l = await s.listReciprocalApprovals({
 				groupId: i,
@@ -1962,10 +2232,10 @@ function mn(e) {
 		} finally {
 			await s.close();
 		}
-	}), d.post("/v1/reciprocal-approvals", async (e) => {
-		let i = await m(e);
+	}), u.post("/v1/reciprocal-approvals", async (e) => {
+		let i = await p(e);
 		if (i == null) return e.json({ error: "body_too_large" }, 413);
-		let a = h(i);
+		let a = m(i);
 		if (!a) return e.json({ error: "invalid_json" }, 400);
 		let o = String(a.group_id ?? "").trim(), s = String(a.requested_device_id ?? "").trim(), c = Object.hasOwn(a, "expected_incoming_request_id") ? String(a.expected_incoming_request_id ?? "").trim() : void 0;
 		if (!o || !s) return e.json({ error: "group_id_and_requested_device_id_required" }, 400);
@@ -1981,8 +2251,8 @@ function mn(e) {
 				timestamp: e.req.header("X-Opencode-Timestamp") ?? null,
 				nonce: e.req.header("X-Opencode-Nonce") ?? null
 			});
-			if (!n.ok || !n.enrollment) return p(e, e.req.path, !1) ?? e.json({ error: n.error }, $(n.error));
-			let a = p(e, String(n.enrollment.device_id), !0);
+			if (!n.ok || !n.enrollment) return f(e, e.req.path, !1) ?? e.json({ error: n.error }, $(n.error));
+			let a = f(e, String(n.enrollment.device_id), !0);
 			if (a) return a;
 			if (s === String(n.enrollment.device_id)) return e.json({ error: "requested_device_must_differ" }, 400);
 			if (!await l.getEnrollment(o, s)) return e.json({ error: "requested_device_not_found" }, 404);
@@ -1998,18 +2268,18 @@ function mn(e) {
 					request: t
 				});
 			} catch (t) {
-				if (t instanceof g) return e.json({ error: t.code }, 409);
+				if (t instanceof Ae) return e.json({ error: t.code }, 409);
 				throw t;
 			}
 		} finally {
 			await l.close();
 		}
-	}), d.post("/v1/invites/add-device", async (e) => {
-		let i = await m(e);
+	}), u.post("/v1/invites/add-device", async (e) => {
+		let i = await p(e);
 		if (i == null) return e.json({ error: "body_too_large" }, 413);
-		let a = h(i);
+		let a = m(i);
 		if (!a) return e.json({ error: "invalid_json" }, 400);
-		let o = new Set([
+		let o = /* @__PURE__ */ new Set([
 			"group_id",
 			"expires_at",
 			"reviewed_preview_digest",
@@ -2033,14 +2303,14 @@ function mn(e) {
 				timestamp: e.req.header("X-Opencode-Timestamp") ?? null,
 				nonce: e.req.header("X-Opencode-Nonce") ?? null
 			});
-			if (!n.ok || !n.enrollment) return p(e, e.req.path, !1) ?? e.json({ error: n.error }, $(n.error));
-			let o = p(e, String(n.enrollment.device_id), !0);
+			if (!n.ok || !n.enrollment) return f(e, e.req.path, !1) ?? e.json({ error: n.error }, $(n.error));
+			let o = f(e, String(n.enrollment.device_id), !0);
 			if (o) return o;
 			let d = n.enrollment.identity_id;
 			if (!d || d !== d.trim() || d.length > 256 || /[\p{Cc}\p{Cf}]/u.test(d)) return e.json({ error: "identity_binding_required" }, 403);
-			let f;
+			let p;
 			try {
-				f = await ge(a.reviewed_intent, {
+				p = await it(a.reviewed_intent, {
 					target: {
 						kind: "add_device",
 						targetIdentityId: d
@@ -2048,7 +2318,7 @@ function mn(e) {
 					digest: l
 				});
 			} catch (t) {
-				return t instanceof k && t.code === "recipient_invite_intent_mismatch" ? e.json({ error: t.code }, 409) : e.json({ error: "recipient_invite_review_unavailable" }, 400);
+				return t instanceof L && t.code === "recipient_invite_intent_mismatch" ? e.json({ error: t.code }, 409) : e.json({ error: "recipient_invite_review_unavailable" }, 400);
 			}
 			let m = await u.createInvite({
 				groupId: s,
@@ -2059,7 +2329,7 @@ function mn(e) {
 				inviteKind: "add_device",
 				targetIdentityId: d,
 				reviewedPreviewDigest: l,
-				reviewedIntent: f
+				reviewedIntent: p
 			}), h = {
 				v: 1,
 				kind: "add_device",
@@ -2072,45 +2342,45 @@ function mn(e) {
 				target_identity_id: m.target_identity_id ?? void 0,
 				inviter_device_id: m.inviter_device_id ?? void 0,
 				reviewed_preview_digest: m.reviewed_preview_digest ?? void 0
-			}, g = G(h), { token: _, ...v } = m;
+			}, g = yn(h), { token: _, ...v } = m;
 			return e.json({
 				ok: !0,
 				invite: v,
 				payload: h,
 				encoded: g,
-				link: K(g)
+				link: xn(g)
 			});
 		} finally {
 			await u.close();
 		}
-	}), d.post("/v1/admin/devices", async (e) => {
+	}), u.post("/v1/admin/devices", async (e) => {
 		let r = Z(e.req.header(X), t);
-		if (!r.ok) return p(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
-		let i = p(e, "admin", !0);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
 		if (i) return i;
-		let a = await m(e);
+		let a = await p(e);
 		if (a == null) return e.json({ error: "body_too_large" }, 413);
-		let o = h(a);
+		let o = m(a);
 		if (!o) return e.json({ error: "invalid_json" }, 400);
 		let s = String(o.group_id ?? "").trim(), c = String(o.device_id ?? "").trim(), l = String(o.fingerprint ?? "").trim(), u = String(o.public_key ?? "").trim(), d = String(o.display_name ?? "").trim() || null;
 		if (!s || !c || !l || !u) return e.json({ error: "group_id_device_id_fingerprint_public_key_required" }, 400);
-		if (ve(u) !== l) return e.json({ error: "fingerprint_mismatch" }, 400);
-		let f = n();
+		if (ot(u) !== l) return e.json({ error: "fingerprint_mismatch" }, 400);
+		let h = n();
 		try {
-			await f.createGroup(s), await f.enrollDevice(s, {
+			await h.createGroup(s), await h.enrollDevice(s, {
 				deviceId: c,
 				fingerprint: l,
 				publicKey: u,
 				displayName: d
 			});
 		} finally {
-			await f.close();
+			await h.close();
 		}
 		return e.json({ ok: !0 });
-	}), d.get("/v1/admin/groups", async (e) => {
+	}), u.get("/v1/admin/groups", async (e) => {
 		let r = Z(e.req.header(X), t);
-		if (!r.ok) return p(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
-		let i = p(e, "admin", !0);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
 		if (i) return i;
 		let a = [
 			"1",
@@ -2122,14 +2392,14 @@ function mn(e) {
 		} finally {
 			await o.close();
 		}
-	}), d.post("/v1/admin/groups", async (e) => {
+	}), u.post("/v1/admin/groups", async (e) => {
 		let r = Z(e.req.header(X), t);
-		if (!r.ok) return p(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
-		let i = p(e, "admin", !0);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
 		if (i) return i;
-		let a = await m(e);
+		let a = await p(e);
 		if (a == null) return e.json({ error: "body_too_large" }, 413);
-		let o = h(a);
+		let o = m(a);
 		if (!o) return e.json({ error: "invalid_json" }, 400);
 		let s = String(o.group_id ?? "").trim(), c = String(o.display_name ?? "").trim() || null;
 		if (!s) return e.json({ error: "group_id_required" }, 400);
@@ -2142,14 +2412,14 @@ function mn(e) {
 		} finally {
 			await l.close();
 		}
-	}), d.post("/v1/admin/groups/rename", async (e) => {
+	}), u.post("/v1/admin/groups/rename", async (e) => {
 		let r = Z(e.req.header(X), t);
-		if (!r.ok) return p(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
-		let i = p(e, "admin", !0);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
 		if (i) return i;
-		let a = await m(e);
+		let a = await p(e);
 		if (a == null) return e.json({ error: "body_too_large" }, 413);
-		let o = h(a);
+		let o = m(a);
 		if (!o) return e.json({ error: "invalid_json" }, 400);
 		let s = String(o.group_id ?? "").trim(), c = String(o.display_name ?? "").trim();
 		if (!s || !c) return e.json({ error: "group_id_and_display_name_required" }, 400);
@@ -2162,14 +2432,14 @@ function mn(e) {
 		} finally {
 			await l.close();
 		}
-	}), d.post("/v1/admin/groups/archive", async (e) => {
+	}), u.post("/v1/admin/groups/archive", async (e) => {
 		let r = Z(e.req.header(X), t);
-		if (!r.ok) return p(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
-		let i = p(e, "admin", !0);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
 		if (i) return i;
-		let a = await m(e);
+		let a = await p(e);
 		if (a == null) return e.json({ error: "body_too_large" }, 413);
-		let o = h(a);
+		let o = m(a);
 		if (!o) return e.json({ error: "invalid_json" }, 400);
 		let s = String(o.group_id ?? "").trim();
 		if (!s) return e.json({ error: "group_id_required" }, 400);
@@ -2182,14 +2452,14 @@ function mn(e) {
 		} finally {
 			await c.close();
 		}
-	}), d.post("/v1/admin/groups/unarchive", async (e) => {
+	}), u.post("/v1/admin/groups/unarchive", async (e) => {
 		let r = Z(e.req.header(X), t);
-		if (!r.ok) return p(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
-		let i = p(e, "admin", !0);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
 		if (i) return i;
-		let a = await m(e);
+		let a = await p(e);
 		if (a == null) return e.json({ error: "body_too_large" }, 413);
-		let o = h(a);
+		let o = m(a);
 		if (!o) return e.json({ error: "invalid_json" }, 400);
 		let s = String(o.group_id ?? "").trim();
 		if (!s) return e.json({ error: "group_id_required" }, 400);
@@ -2202,16 +2472,16 @@ function mn(e) {
 		} finally {
 			await c.close();
 		}
-	}), d.get("/v1/admin/groups/:group_id/scopes", async (e) => {
+	}), u.get("/v1/admin/groups/:group_id/scopes", async (e) => {
 		let r = Z(e.req.header(X), t);
-		if (!r.ok) return p(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
-		let i = p(e, "admin", !0);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
 		if (i) return i;
 		let a = String(e.req.param("group_id") ?? "").trim(), o = n();
 		try {
-			let t = await w(o, a, e);
+			let t = await x(o, a, e);
 			if (t) return t;
-			let n = b(e.req.query("include_inactive"));
+			let n = v(e.req.query("include_inactive"));
 			return e.json({ items: await o.listScopes({
 				groupId: a,
 				includeInactive: n
@@ -2219,33 +2489,33 @@ function mn(e) {
 		} finally {
 			await o.close();
 		}
-	}), d.post("/v1/admin/groups/:group_id/scopes", async (e) => {
+	}), u.post("/v1/admin/groups/:group_id/scopes", async (e) => {
 		let r = Z(e.req.header(X), t);
-		if (!r.ok) return p(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
-		let i = p(e, "admin", !0);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
 		if (i) return i;
-		let a = await m(e);
+		let a = await p(e);
 		if (a == null) return e.json({ error: "body_too_large" }, 413);
-		let o = h(a);
+		let o = m(a);
 		if (!o) return e.json({ error: "invalid_json" }, 400);
-		let s = String(e.req.param("group_id") ?? "").trim(), c = _(o, "scope_id"), l = _(o, "label"), u = y(o, "membership_epoch");
+		let s = String(e.req.param("group_id") ?? "").trim(), c = h(o, "scope_id"), l = h(o, "label"), u = _(o, "membership_epoch");
 		if (!c || !l) return e.json({ error: "scope_id_and_label_required" }, 400);
 		if (Number.isNaN(u)) return e.json({ error: "membership_epoch_must_be_number" }, 400);
 		let d = n();
 		try {
-			let t = await w(d, s, e);
+			let t = await x(d, s, e);
 			if (t) return t;
 			let n = await d.createScope({
 				scopeId: c,
 				label: l,
-				kind: _(o, "kind"),
-				authorityType: _(o, "authority_type"),
-				coordinatorId: _(o, "coordinator_id"),
+				kind: h(o, "kind"),
+				authorityType: h(o, "authority_type"),
+				coordinatorId: h(o, "coordinator_id"),
 				groupId: s,
-				manifestIssuerDeviceId: _(o, "manifest_issuer_device_id"),
+				manifestIssuerDeviceId: h(o, "manifest_issuer_device_id"),
 				membershipEpoch: u,
-				manifestHash: _(o, "manifest_hash"),
-				status: _(o, "status")
+				manifestHash: h(o, "manifest_hash"),
+				status: h(o, "status")
 			});
 			return e.json({
 				ok: !0,
@@ -2256,33 +2526,33 @@ function mn(e) {
 		} finally {
 			await d.close();
 		}
-	}), d.patch("/v1/admin/groups/:group_id/scopes/:scope_id", async (e) => {
+	}), u.patch("/v1/admin/groups/:group_id/scopes/:scope_id", async (e) => {
 		let r = Z(e.req.header(X), t);
-		if (!r.ok) return p(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
-		let i = p(e, "admin", !0);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
 		if (i) return i;
-		let a = await m(e);
+		let a = await p(e);
 		if (a == null) return e.json({ error: "body_too_large" }, 413);
-		let o = h(a);
+		let o = m(a);
 		if (!o) return e.json({ error: "invalid_json" }, 400);
-		let s = String(e.req.param("group_id") ?? "").trim(), c = String(e.req.param("scope_id") ?? "").trim(), l = y(o, "membership_epoch");
+		let s = String(e.req.param("group_id") ?? "").trim(), c = String(e.req.param("scope_id") ?? "").trim(), l = _(o, "membership_epoch");
 		if (!c) return e.json({ error: "scope_id_required" }, 400);
 		if (Number.isNaN(l)) return e.json({ error: "membership_epoch_must_be_number" }, 400);
 		let u = n();
 		try {
-			let t = await E(u, s, c, e);
+			let t = await S(u, s, c, e);
 			if (t.response) return t.response;
 			let n = await u.updateScope({
 				scopeId: c,
-				label: o.label === void 0 ? void 0 : _(o, "label"),
-				kind: o.kind === void 0 ? void 0 : _(o, "kind"),
-				authorityType: o.authority_type === void 0 ? void 0 : _(o, "authority_type"),
-				coordinatorId: o.coordinator_id === void 0 ? void 0 : _(o, "coordinator_id"),
+				label: o.label === void 0 ? void 0 : h(o, "label"),
+				kind: o.kind === void 0 ? void 0 : h(o, "kind"),
+				authorityType: o.authority_type === void 0 ? void 0 : h(o, "authority_type"),
+				coordinatorId: o.coordinator_id === void 0 ? void 0 : h(o, "coordinator_id"),
 				groupId: s,
-				manifestIssuerDeviceId: o.manifest_issuer_device_id === void 0 ? void 0 : _(o, "manifest_issuer_device_id"),
+				manifestIssuerDeviceId: o.manifest_issuer_device_id === void 0 ? void 0 : h(o, "manifest_issuer_device_id"),
 				membershipEpoch: l,
-				manifestHash: o.manifest_hash === void 0 ? void 0 : _(o, "manifest_hash"),
-				status: o.status === void 0 ? void 0 : _(o, "status")
+				manifestHash: o.manifest_hash === void 0 ? void 0 : h(o, "manifest_hash"),
+				status: o.status === void 0 ? void 0 : h(o, "status")
 			});
 			return n ? e.json({
 				ok: !0,
@@ -2293,48 +2563,48 @@ function mn(e) {
 		} finally {
 			await u.close();
 		}
-	}), d.get("/v1/admin/groups/:group_id/scopes/:scope_id/members", async (e) => {
+	}), u.get("/v1/admin/groups/:group_id/scopes/:scope_id/members", async (e) => {
 		let r = Z(e.req.header(X), t);
-		if (!r.ok) return p(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
-		let i = p(e, "admin", !0);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
 		if (i) return i;
 		let a = String(e.req.param("group_id") ?? "").trim(), o = String(e.req.param("scope_id") ?? "").trim(), s = n();
 		try {
-			let t = await E(s, a, o, e);
-			return t.response ? t.response : e.json({ items: await s.listScopeMemberships(o, b(e.req.query("include_revoked"))) });
+			let t = await S(s, a, o, e);
+			return t.response ? t.response : e.json({ items: await s.listScopeMemberships(o, v(e.req.query("include_revoked"))) });
 		} finally {
 			await s.close();
 		}
-	}), d.post("/v1/admin/groups/:group_id/scopes/:scope_id/members", async (e) => {
+	}), u.post("/v1/admin/groups/:group_id/scopes/:scope_id/members", async (e) => {
 		let r = Z(e.req.header(X), t);
-		if (!r.ok) return p(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
-		let a = p(e, "admin", !0);
-		if (a) return a;
-		let o = await m(e);
-		if (o == null) return e.json({ error: "body_too_large" }, 413);
-		let s = h(o);
-		if (!s) return e.json({ error: "invalid_json" }, 400);
-		let c = String(e.req.param("group_id") ?? "").trim(), l = String(e.req.param("scope_id") ?? "").trim(), u = _(s, "effect_id"), d = _(s, "device_id"), f = y(s, "membership_epoch");
-		if (!u) return e.json({ error: "effect_id_required" }, 400);
-		if (!d) return e.json({ error: "device_id_required" }, 400);
-		if (Number.isNaN(f)) return e.json({ error: "membership_epoch_must_be_number" }, 400);
-		let g = n();
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
+		if (i) return i;
+		let a = await p(e);
+		if (a == null) return e.json({ error: "body_too_large" }, 413);
+		let o = m(a);
+		if (!o) return e.json({ error: "invalid_json" }, 400);
+		let s = String(e.req.param("group_id") ?? "").trim(), c = String(e.req.param("scope_id") ?? "").trim(), l = h(o, "effect_id"), u = h(o, "device_id"), d = _(o, "membership_epoch");
+		if (!l) return e.json({ error: "effect_id_required" }, 400);
+		if (!u) return e.json({ error: "device_id_required" }, 400);
+		if (Number.isNaN(d)) return e.json({ error: "membership_epoch_must_be_number" }, 400);
+		let v = n();
 		try {
-			let t = await E(g, c, l, e);
+			let t = await S(v, s, c, e);
 			if (t.response) return t.response;
-			let n = await g.grantScopeMembership({
-				effectId: u,
-				scopeId: l,
-				deviceId: d,
-				role: _(s, "role"),
-				membershipEpoch: f,
-				coordinatorId: _(s, "coordinator_id"),
-				groupId: c,
-				manifestIssuerDeviceId: _(s, "manifest_issuer_device_id"),
-				manifestHash: _(s, "manifest_hash"),
-				signedManifestJson: _(s, "signed_manifest_json"),
+			let n = await v.grantScopeMembership({
+				effectId: l,
+				scopeId: c,
+				deviceId: u,
+				role: h(o, "role"),
+				membershipEpoch: d,
+				coordinatorId: h(o, "coordinator_id"),
+				groupId: s,
+				manifestIssuerDeviceId: h(o, "manifest_issuer_device_id"),
+				manifestHash: h(o, "manifest_hash"),
+				signedManifestJson: h(o, "signed_manifest_json"),
 				actorType: "admin",
-				actorId: v(e.req.header(cn))
+				actorId: g(e.req.header(ur))
 			});
 			return e.json({
 				ok: !0,
@@ -2342,67 +2612,67 @@ function mn(e) {
 			}, 201);
 		} catch (t) {
 			let n = t instanceof Error ? t.message : String(t);
-			if (t instanceof i && (t.code === "scope_not_found" || t.code === "scope_group_mismatch")) return e.json({ error: "scope_not_found" }, 404);
-			if (t instanceof i && t.code === "device_not_enrolled") return e.json({ error: "device_not_enrolled_for_scope_group" }, 404);
-			let r = t instanceof i && t.code === "scope_inactive";
+			if (t instanceof N && (t.code === "scope_not_found" || t.code === "scope_group_mismatch")) return e.json({ error: "scope_not_found" }, 404);
+			if (t instanceof N && t.code === "device_not_enrolled") return e.json({ error: "device_not_enrolled_for_scope_group" }, 404);
+			let r = t instanceof N && t.code === "scope_inactive";
 			return e.json({ error: r ? "scope_not_active" : n }, n === "scope_membership_effect_conflict" || r ? 409 : 400);
 		} finally {
-			await g.close();
+			await v.close();
 		}
-	}), d.post("/v1/admin/groups/:group_id/scopes/:scope_id/members/:device_id/revoke", async (e) => {
+	}), u.post("/v1/admin/groups/:group_id/scopes/:scope_id/members/:device_id/revoke", async (e) => {
 		let r = Z(e.req.header(X), t);
-		if (!r.ok) return p(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
-		let a = p(e, "admin", !0);
-		if (a) return a;
-		let o = await m(e);
-		if (o == null) return e.json({ error: "body_too_large" }, 413);
-		let s = o.byteLength > 0 ? h(o) : {};
-		if (!s) return e.json({ error: "invalid_json" }, 400);
-		let c = String(e.req.param("group_id") ?? "").trim(), l = String(e.req.param("scope_id") ?? "").trim(), u = String(e.req.param("device_id") ?? "").trim(), d = _(s, "effect_id"), f = y(s, "membership_epoch");
-		if (!d) return e.json({ error: "effect_id_required" }, 400);
-		if (!u) return e.json({ error: "device_id_required" }, 400);
-		if (Number.isNaN(f)) return e.json({ error: "membership_epoch_must_be_number" }, 400);
-		let g = n();
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
+		if (i) return i;
+		let a = await p(e);
+		if (a == null) return e.json({ error: "body_too_large" }, 413);
+		let o = a.byteLength > 0 ? m(a) : {};
+		if (!o) return e.json({ error: "invalid_json" }, 400);
+		let s = String(e.req.param("group_id") ?? "").trim(), c = String(e.req.param("scope_id") ?? "").trim(), l = String(e.req.param("device_id") ?? "").trim(), u = h(o, "effect_id"), d = _(o, "membership_epoch");
+		if (!u) return e.json({ error: "effect_id_required" }, 400);
+		if (!l) return e.json({ error: "device_id_required" }, 400);
+		if (Number.isNaN(d)) return e.json({ error: "membership_epoch_must_be_number" }, 400);
+		let v = n();
 		try {
-			let t = await E(g, c, l, e);
+			let t = await S(v, s, c, e);
 			if (t.response) return t.response;
-			if (!await g.revokeScopeMembership({
-				effectId: d,
-				scopeId: l,
-				deviceId: u,
-				groupId: c,
-				membershipEpoch: f,
-				manifestHash: _(s, "manifest_hash"),
-				signedManifestJson: _(s, "signed_manifest_json"),
+			if (!await v.revokeScopeMembership({
+				effectId: u,
+				scopeId: c,
+				deviceId: l,
+				groupId: s,
+				membershipEpoch: d,
+				manifestHash: h(o, "manifest_hash"),
+				signedManifestJson: h(o, "signed_manifest_json"),
 				actorType: "admin",
-				actorId: v(e.req.header(cn))
+				actorId: g(e.req.header(ur))
 			})) return e.json({ error: "membership_not_found" }, 404);
 			let n;
 			try {
-				n = (await g.listScopeMemberships(l, !0)).find((e) => e.device_id === u);
+				n = (await v.listScopeMemberships(c, !0)).find((e) => e.device_id === l);
 			} catch {
 				n = void 0;
 			}
 			return e.json({
 				ok: !0,
-				scope_id: l,
-				device_id: u,
-				revocation: an({
-					scopeId: l,
-					deviceId: u,
-					membershipEpoch: n?.membership_epoch ?? f
+				scope_id: c,
+				device_id: l,
+				revocation: or({
+					scopeId: c,
+					deviceId: l,
+					membershipEpoch: n?.membership_epoch ?? d
 				})
 			});
 		} catch (t) {
 			let n = t instanceof Error ? t.message : String(t);
-			return t instanceof i && t.code === "scope_group_mismatch" ? e.json({ error: "scope_not_found" }, 404) : e.json({ error: n }, n === "scope_membership_effect_conflict" ? 409 : 400);
+			return t instanceof N && t.code === "scope_group_mismatch" ? e.json({ error: "scope_not_found" }, 404) : e.json({ error: n }, n === "scope_membership_effect_conflict" ? 409 : 400);
 		} finally {
-			await g.close();
+			await v.close();
 		}
-	}), d.get("/v1/admin/devices", async (e) => {
+	}), u.get("/v1/admin/devices", async (e) => {
 		let r = Z(e.req.header(X), t);
-		if (!r.ok) return p(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
-		let i = p(e, "admin", !0);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
 		if (i) return i;
 		let a = (e.req.query("group_id") ?? "").trim();
 		if (!a) return e.json({ error: "group_id_required" }, 400);
@@ -2416,21 +2686,21 @@ function mn(e) {
 		} finally {
 			await s.close();
 		}
-	}), d.post("/v1/admin/devices/rename", async (e) => {
+	}), u.post("/v1/admin/devices/rename", async (e) => {
 		let r = Z(e.req.header(X), t);
-		if (!r.ok) return p(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
-		let i = p(e, "admin", !0);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
 		if (i) return i;
-		let a = await m(e);
+		let a = await p(e);
 		if (a == null) return e.json({ error: "body_too_large" }, 413);
-		let o = h(a);
+		let o = m(a);
 		if (!o) return e.json({ error: "invalid_json" }, 400);
 		let s = String(o.group_id ?? "").trim(), c = String(o.device_id ?? "").trim(), l = String(o.display_name ?? "").trim();
 		if (!s || !c) return e.json({ error: "group_id_and_device_id_required" }, 400);
 		if (!l) return e.json({ error: "display_name_required" }, 400);
 		let u;
 		try {
-			u = T(l, "display_name");
+			u = I(l, "display_name");
 		} catch (t) {
 			return e.json({ error: t instanceof Error ? t.message : "display_name_invalid" }, 400);
 		}
@@ -2445,14 +2715,14 @@ function mn(e) {
 		} finally {
 			await d.close();
 		}
-	}), d.post("/v1/admin/devices/disable", async (e) => {
+	}), u.post("/v1/admin/devices/disable", async (e) => {
 		let r = Z(e.req.header(X), t);
-		if (!r.ok) return p(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
-		let i = p(e, "admin", !0);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
 		if (i) return i;
-		let a = await m(e);
+		let a = await p(e);
 		if (a == null) return e.json({ error: "body_too_large" }, 413);
-		let o = h(a);
+		let o = m(a);
 		if (!o) return e.json({ error: "invalid_json" }, 400);
 		let s = String(o.group_id ?? "").trim(), c = String(o.device_id ?? "").trim();
 		if (!s || !c) return e.json({ error: "group_id_and_device_id_required" }, 400);
@@ -2462,14 +2732,14 @@ function mn(e) {
 		} finally {
 			await l.close();
 		}
-	}), d.post("/v1/admin/devices/enable", async (e) => {
+	}), u.post("/v1/admin/devices/enable", async (e) => {
 		let r = Z(e.req.header(X), t);
-		if (!r.ok) return p(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
-		let i = p(e, "admin", !0);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
 		if (i) return i;
-		let a = await m(e);
+		let a = await p(e);
 		if (a == null) return e.json({ error: "body_too_large" }, 413);
-		let o = h(a);
+		let o = m(a);
 		if (!o) return e.json({ error: "invalid_json" }, 400);
 		let s = String(o.group_id ?? "").trim(), c = String(o.device_id ?? "").trim();
 		if (!s || !c) return e.json({ error: "group_id_and_device_id_required" }, 400);
@@ -2479,14 +2749,14 @@ function mn(e) {
 		} finally {
 			await l.close();
 		}
-	}), d.post("/v1/admin/devices/remove", async (e) => {
+	}), u.post("/v1/admin/devices/remove", async (e) => {
 		let r = Z(e.req.header(X), t);
-		if (!r.ok) return p(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
-		let i = p(e, "admin", !0);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
 		if (i) return i;
-		let a = await m(e);
+		let a = await p(e);
 		if (a == null) return e.json({ error: "body_too_large" }, 413);
-		let o = h(a);
+		let o = m(a);
 		if (!o) return e.json({ error: "invalid_json" }, 400);
 		let s = String(o.group_id ?? "").trim(), c = String(o.device_id ?? "").trim();
 		if (!s || !c) return e.json({ error: "group_id_and_device_id_required" }, 400);
@@ -2496,49 +2766,127 @@ function mn(e) {
 		} finally {
 			await l.close();
 		}
-	}), d.post("/v1/admin/invites", async (e) => {
+	}), u.post("/v1/admin/legacy-team-completions", async (e) => {
+		let r = Z(e.req.header(X), t);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
+		if (i) return i;
+		let a = await p(e, lr);
+		if (a == null) return e.json({ error: "body_too_large" }, 413);
+		let o = m(a);
+		if (!o) return e.json({ error: "invalid_json" }, 400);
+		if (Object.keys(o).some((e) => e !== "group_id" && e !== "manifest")) return e.json({ error: "completion_manifest_invalid" }, 400);
+		let s, c;
+		try {
+			let e = de([o.group_id])[0];
+			if (!e) throw Error("completion_manifest_invalid");
+			s = e, c = pe(o.manifest), he(c);
+		} catch {
+			return e.json({ error: "completion_manifest_invalid" }, 400);
+		}
+		let l = n();
+		try {
+			let t = await l.createLegacyTeamCompletion(s, c);
+			return e.json({
+				ok: !0,
+				...t
+			}, t.status === "created" ? 201 : 200);
+		} catch (t) {
+			if (t instanceof oe) return e.json({ error: t.code }, 409);
+			let n = t instanceof Error ? t.message : "completion_manifest_invalid";
+			if (n === "group_not_found") return e.json({ error: n }, 404);
+			if (n === "group_archived" || n === "completion_manifest_unavailable") return e.json({ error: n }, 409);
+			if (n === "completion_manifest_invalid") return e.json({ error: n }, 400);
+			throw t;
+		} finally {
+			await l.close();
+		}
+	}), u.get("/v1/admin/legacy-team-completions", async (e) => {
+		let r = Z(e.req.header(X), t);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
+		if (i) return i;
+		let a = String(e.req.query("group_id") ?? "").trim(), o;
+		try {
+			if (de([a]).length !== 1) throw Error("completion_manifest_invalid");
+			o = fe(e.req.query("candidate_ref"));
+		} catch {
+			return e.json({ error: "group_id_and_candidate_ref_required" }, 400);
+		}
+		let s = n();
+		try {
+			let t = await s.getLegacyTeamCompletion(a, o);
+			return t ? e.json({ manifest: t }) : e.json({ error: "completion_not_found" }, 404);
+		} finally {
+			await s.close();
+		}
+	}), u.post("/v1/admin/legacy-team-completions/query", async (e) => {
+		let r = Z(e.req.header(X), t);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
+		if (i) return i;
+		let a = await p(e);
+		if (a == null) return e.json({ error: "body_too_large" }, 413);
+		let o = m(a);
+		if (!o || Object.keys(o).some((e) => e !== "group_ids")) return e.json({ error: "completion_query_invalid" }, 400);
+		let s;
+		try {
+			if (s = de(o.group_ids), s.length === 0) throw Error("completion_query_invalid");
+		} catch {
+			return e.json({ error: "completion_query_invalid" }, 400);
+		}
+		let c = n();
+		try {
+			return e.json({ items: await c.listLegacyTeamCompletions(s) });
+		} catch (t) {
+			if (t instanceof Error && t.message === "completion_results_too_large") return e.json({ error: t.message }, 413);
+			throw t;
+		} finally {
+			await c.close();
+		}
+	}), u.post("/v1/admin/invites", async (e) => {
 		let r = Z(e.req.header(X), t);
-		if (!r.ok) return p(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
-		let i = p(e, "admin", !0);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
 		if (i) return i;
-		let a = await m(e);
+		let a = await p(e);
 		if (a == null) return e.json({ error: "body_too_large" }, 413);
-		let o = h(a);
+		let o = m(a);
 		if (!o) return e.json({ error: "invalid_json" }, 400);
-		let s = String(o.group_id ?? "").trim(), c = String(o.policy ?? "auto_admit").trim(), l = String(o.expires_at ?? "").trim(), u = String(o.created_by ?? "").trim() || null, d = String(o.operation_id ?? "").trim() || null, f = String(o.reviewed_project_set_digest ?? "").trim() || null, g = String(o.inviter_actor_id ?? "").trim() || null, _ = String(o.inviter_display_name ?? "").trim() || null, v = String(o.inviter_device_id ?? "").trim() || null, y = String(o.pending_person_id ?? "").trim() || null, b = String(o.invite_kind ?? o.kind ?? "").trim(), x = String(o.policy_team_id ?? "").trim() || null, S = String(o.target_identity_id ?? "").trim() || null, C = String(o.reviewed_preview_digest ?? "").trim() || null, w, E = null, D = null;
+		let s = String(o.group_id ?? "").trim(), c = String(o.policy ?? "auto_admit").trim(), l = String(o.expires_at ?? "").trim(), u = String(o.created_by ?? "").trim() || null, d = String(o.operation_id ?? "").trim() || null, h = String(o.reviewed_project_set_digest ?? "").trim() || null, g = String(o.inviter_actor_id ?? "").trim() || null, _ = String(o.inviter_display_name ?? "").trim() || null, v = String(o.inviter_device_id ?? "").trim() || null, y = String(o.pending_person_id ?? "").trim() || null, ee = String(o.invite_kind ?? o.kind ?? "").trim(), b = String(o.policy_team_id ?? "").trim() || null, x = String(o.target_identity_id ?? "").trim() || null, S = String(o.reviewed_preview_digest ?? "").trim() || null, te, C = null, w = null;
 		if (!s || !["auto_admit", "approval_required"].includes(c) || !l) return e.json({ error: "group_id_policy_and_expires_at_required" }, 400);
 		if (Object.hasOwn(o, "assigned_identity_id")) return e.json({ error: "assigned_identity_id_forbidden" }, 400);
 		if (Number.isNaN(new Date(l).getTime())) return e.json({ error: "invalid_expires_at" }, 400);
-		if (!!d != !!f) return e.json({ error: "operation_intent_reference_incomplete" }, 400);
-		let O = b || (d ? "project_share" : "legacy_enrollment");
+		if (!!d != !!h) return e.json({ error: "operation_intent_reference_incomplete" }, 400);
+		let T = ee || (d ? "project_share" : "legacy_enrollment");
 		if (![
 			"legacy_enrollment",
 			"project_share",
 			"team_member",
 			"add_device"
-		].includes(O)) return e.json({ error: "invite_kind_invalid" }, 400);
-		if (O === "project_share" ? !d : d) return e.json({ error: "invite_kind_intent_mismatch" }, 400);
-		if (C && !/^[a-f0-9]{64}$/u.test(C)) return e.json({ error: "reviewed_preview_digest_invalid" }, 400);
-		if (O === "team_member" && (!x || !C || S) || O === "add_device" && (!S || !C || x) || !["team_member", "add_device"].includes(O) && (x || S || C)) return e.json({ error: "recipient_invite_metadata_invalid" }, 400);
-		if ([x, S].filter((e) => !!e).some((e) => e.length > 256 || /[\p{Cc}\p{Cf}]/u.test(e))) return e.json({ error: "recipient_invite_identifier_invalid" }, 400);
-		if (O === "team_member" || O === "add_device") {
+		].includes(T)) return e.json({ error: "invite_kind_invalid" }, 400);
+		if (T === "project_share" ? !d : d) return e.json({ error: "invite_kind_intent_mismatch" }, 400);
+		if (S && !/^[a-f0-9]{64}$/u.test(S)) return e.json({ error: "reviewed_preview_digest_invalid" }, 400);
+		if (T === "team_member" && (!b || !S || x) || T === "add_device" && (!x || !S || b) || !["team_member", "add_device"].includes(T) && (b || x || S)) return e.json({ error: "recipient_invite_metadata_invalid" }, 400);
+		if ([b, x].filter((e) => !!e).some((e) => e.length > 256 || /[\p{Cc}\p{Cf}]/u.test(e))) return e.json({ error: "recipient_invite_identifier_invalid" }, 400);
+		if (T === "team_member" || T === "add_device") {
 			if (o.reviewed_intent == null) return e.json({ error: "recipient_invite_review_unavailable" }, 400);
 			try {
-				w = await ge(o.reviewed_intent, {
-					target: O === "team_member" ? {
+				te = await it(o.reviewed_intent, {
+					target: T === "team_member" ? {
 						kind: "team_member",
-						policyTeamId: String(x)
+						policyTeamId: String(b)
 					} : {
 						kind: "add_device",
-						targetIdentityId: String(S)
+						targetIdentityId: String(x)
 					},
-					digest: String(C)
+					digest: String(S)
 				});
 			} catch (t) {
-				return t instanceof k && t.code === "recipient_invite_intent_mismatch" ? e.json({ error: t.code }, 409) : e.json({ error: "recipient_invite_review_unavailable" }, 400);
+				return t instanceof L && t.code === "recipient_invite_intent_mismatch" ? e.json({ error: t.code }, 409) : e.json({ error: "recipient_invite_review_unavailable" }, 400);
 			}
 		} else if (o.reviewed_intent != null) return e.json({ error: "recipient_invite_metadata_invalid" }, 400);
-		if (d && !/^share_[a-f0-9]{40}$/u.test(d) || f && !/^[a-f0-9]{64}$/u.test(f)) return e.json({ error: "operation_intent_reference_invalid" }, 400);
+		if (d && !/^share_[a-f0-9]{40}$/u.test(d) || h && !/^[a-f0-9]{64}$/u.test(h)) return e.json({ error: "operation_intent_reference_invalid" }, 400);
 		if (d) {
 			if (!g || !_ || !v || !y) return e.json({ error: "project_invite_identity_context_required" }, 400);
 			if ([
@@ -2547,44 +2895,44 @@ function mn(e) {
 				y
 			].some((e) => e.length > 256 || /[\p{Cc}\p{Cf}]/u.test(e))) return e.json({ error: "project_invite_identity_context_invalid" }, 400);
 			try {
-				if (T(_, "inviter_display_name"), E = ee(o.project_summaries), !Array.isArray(o.project_intent) || o.project_intent.length !== E.length || (D = o.project_intent.map((e, t) => {
+				if (I(_, "inviter_display_name"), C = Be(o.project_summaries), !Array.isArray(o.project_intent) || o.project_intent.length !== C.length || (w = o.project_intent.map((e, t) => {
 					let n;
 					try {
-						n = Xt([e])[0];
+						n = Zn([e])[0];
 					} catch {
 						throw Error("project_intent_invalid");
 					}
-					let r = E?.[t];
+					let r = C?.[t];
 					if (!n || !r || n.display_name !== r.display_name || n.existing_memory_count !== r.existing_memory_count) throw Error("project_intent_invalid");
 					return n;
-				}), new Set(D.map((e) => e.canonical_identity)).size !== D.length)) throw Error("project_intent_invalid");
+				}), new Set(w.map((e) => e.canonical_identity)).size !== w.length)) throw Error("project_intent_invalid");
 			} catch (t) {
 				return e.json({ error: t instanceof Error ? t.message : "project_invite_invalid" }, 400);
 			}
 		}
-		let A = n();
+		let E = n();
 		try {
-			let t = await A.getGroup(s);
+			let t = await E.getGroup(s);
 			if (!t) return e.json({ error: "group_not_found" }, 404);
 			if (t.archived_at) return e.json({ error: "group_archived" }, 409);
-			let n = await A.createInvite({
+			let n = await E.createInvite({
 				groupId: s,
 				policy: c,
 				expiresAt: l,
 				createdBy: u,
 				operationId: d,
-				reviewedProjectSetDigest: f,
+				reviewedProjectSetDigest: h,
 				inviterActorId: g,
 				inviterDisplayName: _,
 				inviterDeviceId: v,
 				pendingPersonId: y,
-				projectSummaries: E,
-				projectIntent: D,
-				inviteKind: O,
-				policyTeamId: x,
-				targetIdentityId: S,
-				reviewedPreviewDigest: C,
-				reviewedIntent: w
+				projectSummaries: C,
+				projectIntent: w,
+				inviteKind: T,
+				policyTeamId: b,
+				targetIdentityId: x,
+				reviewedPreviewDigest: S,
+				reviewedIntent: te
 			}), r = {
 				v: 1,
 				kind: n.invite_kind === "team_member" || n.invite_kind === "add_device" ? n.invite_kind : "coordinator_team_invite",
@@ -2597,7 +2945,7 @@ function mn(e) {
 				...n.operation_id ? {
 					operation_id: n.operation_id,
 					inviter_name: n.inviter_display_name ?? null,
-					project_summaries: E ?? []
+					project_summaries: C ?? []
 				} : {},
 				...n.invite_kind === "team_member" ? {
 					policy_team_id: n.policy_team_id ?? void 0,
@@ -2609,25 +2957,25 @@ function mn(e) {
 					inviter_device_id: n.inviter_device_id ?? void 0,
 					reviewed_preview_digest: n.reviewed_preview_digest ?? void 0
 				} : {}
-			}, i = G(r), { token: a, ...p } = n;
+			}, i = yn(r), { token: a, ...f } = n;
 			return e.json({
 				ok: !0,
-				invite: p,
+				invite: f,
 				payload: r,
 				encoded: i,
-				link: K(i)
+				link: xn(i)
 			});
 		} catch (t) {
 			if (t instanceof Error && t.message === "invite_operation_intent_conflict") return e.json({ error: "invite_operation_intent_conflict" }, 409);
 			if (t instanceof Error && t.message === "invite_already_bound") return e.json({ error: "invite_already_bound" }, 409);
 			throw t;
 		} finally {
-			await A.close();
+			await E.close();
 		}
-	}), d.post("/v1/invites/inspect", async (e) => {
-		let r = await m(e);
+	}), u.post("/v1/invites/inspect", async (e) => {
+		let r = await p(e);
 		if (r == null) return e.json({ error: "body_too_large" }, 413);
-		let i = h(r);
+		let i = m(r);
 		if (!i) return e.json({ error: "invalid_json" }, 400);
 		let a = String(i.token ?? "").trim();
 		if (!a) return e.json({ error: "invite_invalid" }, 404);
@@ -2667,7 +3015,7 @@ function mn(e) {
 			if (!n.project_intent_json || !n.project_summaries_json) return e.json({ error: "invite_invalid" }, 404);
 			let i;
 			try {
-				i = C(n.project_summaries_json);
+				i = b(n.project_summaries_json);
 			} catch {
 				return e.json({ error: "invite_invalid" }, 409);
 			}
@@ -2682,10 +3030,10 @@ function mn(e) {
 		} finally {
 			await o.close();
 		}
-	}), d.get("/v1/admin/invites", async (e) => {
+	}), u.get("/v1/admin/invites", async (e) => {
 		let r = Z(e.req.header(X), t);
-		if (!r.ok) return p(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
-		let i = p(e, "admin", !0);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
 		if (i) return i;
 		let a = (e.req.query("group_id") ?? "").trim();
 		if (!a) return e.json({ error: "group_id_required" }, 400);
@@ -2696,7 +3044,7 @@ function mn(e) {
 		} finally {
 			await o.close();
 		}
-	}), d.get("/v1/admin/project-invites/:operationId", async (e) => {
+	}), u.get("/v1/admin/project-invites/:operationId", async (e) => {
 		let r = Z(e.req.header(X), t);
 		if (!r.ok) return e.json({ error: r.error }, 401);
 		let i = String(e.req.param("operationId") ?? "").trim(), a = String(e.req.query("group_id") ?? "").trim();
@@ -2707,7 +3055,7 @@ function mn(e) {
 			if (!n) return e.json({ error: "operation_not_found" }, 404);
 			let r;
 			try {
-				r = x(n.project_intent_json);
+				r = y(n.project_intent_json);
 			} catch {
 				return e.json({ error: "operation_intent_invalid" }, 409);
 			}
@@ -2717,7 +3065,7 @@ function mn(e) {
 					display_name: String(e.display_name ?? ""),
 					existing_memory_count: Number(e.existing_memory_count ?? 0)
 				}));
-				s = K(G({
+				s = xn(yn({
 					v: 1,
 					kind: "coordinator_team_invite",
 					coordinator_url: new URL(e.req.url).origin,
@@ -2752,10 +3100,10 @@ function mn(e) {
 		} finally {
 			await o.close();
 		}
-	}), d.get("/v1/admin/bootstrap-grants/:grantId", async (e) => {
+	}), u.get("/v1/admin/bootstrap-grants/:grantId", async (e) => {
 		let r = Z(e.req.header(X), t);
-		if (!r.ok) return p(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
-		let i = p(e, "admin", !0);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
 		if (i) return i;
 		let a = String(e.req.param("grantId") ?? "").trim();
 		if (!a) return e.json({ error: "grant_id_required" }, 400);
@@ -2773,7 +3121,7 @@ function mn(e) {
 		} finally {
 			await o.close();
 		}
-	}), d.get("/v1/bootstrap-grants/:grantId", async (e) => {
+	}), u.get("/v1/bootstrap-grants/:grantId", async (e) => {
 		let i = String(e.req.param("grantId") ?? "").trim(), a = String(e.req.query("group_id") ?? "").trim();
 		if (!i || !a) return e.json({ error: "grant_id_and_group_id_required" }, 400);
 		let o = n();
@@ -2782,14 +3130,14 @@ function mn(e) {
 				method: e.req.method,
 				url: e.req.url,
 				groupId: a,
-				body: new Uint8Array(),
+				body: /* @__PURE__ */ new Uint8Array(),
 				deviceId: e.req.header("X-Opencode-Device") ?? null,
 				signature: e.req.header("X-Opencode-Signature") ?? null,
 				timestamp: e.req.header("X-Opencode-Timestamp") ?? null,
 				nonce: e.req.header("X-Opencode-Nonce") ?? null
 			});
-			if (!n.ok || !n.enrollment) return p(e, e.req.path, !1) ?? e.json({ error: n.error }, $(n.error));
-			let s = p(e, String(n.enrollment.device_id), !0);
+			if (!n.ok || !n.enrollment) return f(e, e.req.path, !1) ?? e.json({ error: n.error }, $(n.error));
+			let s = f(e, String(n.enrollment.device_id), !0);
 			if (s) return s;
 			let c = await o.getBootstrapGrant(i);
 			if (!c || c.group_id !== a || c.seed_device_id !== String(n.enrollment.device_id)) return e.json({ error: "grant_not_found" }, 404);
@@ -2801,10 +3149,10 @@ function mn(e) {
 		} finally {
 			await o.close();
 		}
-	}), d.get("/v1/admin/bootstrap-grants", async (e) => {
+	}), u.get("/v1/admin/bootstrap-grants", async (e) => {
 		let r = Z(e.req.header(X), t);
-		if (!r.ok) return p(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
-		let i = p(e, "admin", !0);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
 		if (i) return i;
 		let a = (e.req.query("group_id") ?? "").trim();
 		if (!a) return e.json({ error: "group_id_required" }, 400);
@@ -2814,14 +3162,14 @@ function mn(e) {
 		} finally {
 			await o.close();
 		}
-	}), d.post("/v1/admin/bootstrap-grants/revoke", async (e) => {
+	}), u.post("/v1/admin/bootstrap-grants/revoke", async (e) => {
 		let r = Z(e.req.header(X), t);
-		if (!r.ok) return p(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
-		let i = p(e, "admin", !0);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
 		if (i) return i;
-		let a = await m(e);
+		let a = await p(e);
 		if (a == null) return e.json({ error: "body_too_large" }, 413);
-		let o = h(a);
+		let o = m(a);
 		if (!o) return e.json({ error: "invalid_json" }, 400);
 		let s = String(o.grant_id ?? "").trim();
 		if (!s) return e.json({ error: "grant_id_required" }, 400);
@@ -2834,18 +3182,18 @@ function mn(e) {
 		} finally {
 			await c.close();
 		}
-	}), d.post("/v1/admin/join-requests/approve", async (e) => hn(e, !0, {
+	}), u.post("/v1/admin/join-requests/approve", async (e) => _r(e, !0, {
 		createStore: n,
 		runtime: t,
-		rateLimitedResponse: p
-	})), d.post("/v1/admin/join-requests/deny", async (e) => hn(e, !1, {
+		rateLimitedResponse: f
+	})), u.post("/v1/admin/join-requests/deny", async (e) => _r(e, !1, {
 		createStore: n,
 		runtime: t,
-		rateLimitedResponse: p
-	})), d.get("/v1/admin/join-requests", async (e) => {
+		rateLimitedResponse: f
+	})), u.get("/v1/admin/join-requests", async (e) => {
 		let r = Z(e.req.header(X), t);
-		if (!r.ok) return p(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
-		let i = p(e, "admin", !0);
+		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
+		let i = f(e, "admin", !0);
 		if (i) return i;
 		let a = (e.req.query("group_id") ?? "").trim();
 		if (!a) return e.json({ error: "group_id_required" }, 400);
@@ -2855,23 +3203,23 @@ function mn(e) {
 		} finally {
 			await o.close();
 		}
-	}), d.post("/v1/join", async (e) => {
-		let r = await m(e);
+	}), u.post("/v1/join", async (e) => {
+		let r = await p(e);
 		if (r == null) return e.json({ error: "body_too_large" }, 413);
-		let i = h(r);
+		let i = m(r);
 		if (!i) return e.json({ error: "invalid_json" }, 400);
-		let a = String(i.token ?? "").trim(), o = String(i.device_id ?? "").trim(), s = String(i.fingerprint ?? "").trim(), c = String(i.public_key ?? "").trim(), l = String(i.display_name ?? "").trim() || null, u = String(i.operation_id ?? "").trim(), d = String(i.recipient_actor_id ?? "").trim(), f = String(i.recipient_display_name ?? "").trim(), p = String(i.device_display_name ?? "").trim();
+		let a = String(i.token ?? "").trim(), o = String(i.device_id ?? "").trim(), s = String(i.fingerprint ?? "").trim(), c = String(i.public_key ?? "").trim(), l = String(i.display_name ?? "").trim() || null, u = String(i.operation_id ?? "").trim(), d = String(i.recipient_actor_id ?? "").trim(), f = String(i.recipient_display_name ?? "").trim(), h = String(i.device_display_name ?? "").trim();
 		if (!a || !o || !s || !c) return e.json({ error: "token_device_id_fingerprint_public_key_required" }, 400);
-		if (ve(c) !== s) return e.json({ error: "fingerprint_mismatch" }, 400);
+		if (ot(c) !== s) return e.json({ error: "fingerprint_mismatch" }, 400);
 		let g = n();
 		try {
 			let n = await g.getInviteByTokenForInspection(a);
 			if (!n) return e.json({ error: "invite_invalid" }, 404);
-			let r = !!(n.operation_id || n.reviewed_project_set_digest), m = n.invite_kind === "team_member" || n.invite_kind === "add_device";
-			if (n.revoked_at) return e.json({ error: r || m ? "invite_invalid" : "revoked_token" }, 400);
-			if (!n.consumed_at && new Date(n.expires_at) <= new Date(t.now())) return e.json({ error: r || m ? "invite_expired" : "expired_token" }, 410);
-			if (m) {
-				let r = new Set([
+			let r = !!(n.operation_id || n.reviewed_project_set_digest), p = n.invite_kind === "team_member" || n.invite_kind === "add_device";
+			if (n.revoked_at) return e.json({ error: r || p ? "invite_invalid" : "revoked_token" }, 400);
+			if (!n.consumed_at && new Date(n.expires_at) <= new Date(t.now())) return e.json({ error: r || p ? "invite_expired" : "expired_token" }, 410);
+			if (p) {
+				let r = /* @__PURE__ */ new Set([
 					"token",
 					"invite_kind",
 					"kind",
@@ -2890,11 +3238,11 @@ function mn(e) {
 				try {
 					if (i.recipient_display_name != null) {
 						if (typeof i.recipient_display_name != "string") throw Error("recipient_display_name_invalid");
-						d = T(i.recipient_display_name, "recipient_display_name");
+						d = I(i.recipient_display_name, "recipient_display_name");
 					}
 					if (i.device_display_name != null) {
 						if (typeof i.device_display_name != "string") throw Error("device_display_name_invalid");
-						f = T(i.device_display_name, "device_display_name");
+						f = I(i.device_display_name, "device_display_name");
 					}
 				} catch (t) {
 					return e.json({ error: t instanceof Error ? t.message : "recipient_invite_identity_invalid" }, 400);
@@ -2932,7 +3280,7 @@ function mn(e) {
 				}
 			}
 			if (n.operation_id || n.reviewed_project_set_digest) {
-				let r = new Set([
+				let r = /* @__PURE__ */ new Set([
 					"token",
 					"operation_id",
 					"device_id",
@@ -2944,18 +3292,18 @@ function mn(e) {
 					"device_display_name"
 				]);
 				if (Object.keys(i).some((e) => !r.has(e))) return e.json({ error: "unexpected_project_invite_fields" }, 400);
-				if (!u || !d || !f || !p) return e.json({ error: "project_invite_identity_required" }, 400);
+				if (!u || !d || !f || !h) return e.json({ error: "project_invite_identity_required" }, 400);
 				if (String(n.inviter_device_id ?? "").trim() === o) return e.json({ error: "project_invite_self_acceptance_forbidden" }, 409);
 				if (d.length > 256 || /[\p{Cc}\p{Cf}]/u.test(d)) return e.json({ error: "recipient_actor_id_invalid" }, 400);
-				let l, m;
+				let l, p;
 				try {
-					l = T(f, "recipient_display_name"), m = T(p, "device_display_name");
+					l = I(f, "recipient_display_name"), p = I(h, "device_display_name");
 				} catch (t) {
 					return e.json({ error: t instanceof Error ? t.message : "project_invite_identity_invalid" }, 400);
 				}
-				let h;
+				let m;
 				try {
-					h = S(n);
+					m = ee(n);
 				} catch {
 					return e.json({ error: "operation_intent_invalid" }, 409);
 				}
@@ -2968,12 +3316,12 @@ function mn(e) {
 						fingerprint: s,
 						recipientActorId: d,
 						recipientDisplayName: l,
-						deviceDisplayName: m,
+						deviceDisplayName: p,
 						now: t.now()
 					});
 					return e.json({
 						ok: !0,
-						status: Tt,
+						status: Cn,
 						group_id: n.invite.group_id,
 						operation_id: n.invite.operation_id,
 						trust_state: n.invite.trust_state,
@@ -2984,7 +3332,7 @@ function mn(e) {
 							fingerprint: n.seed_enrollment.fingerprint,
 							display_name: n.seed_enrollment.display_name
 						} : null,
-						accepted_project_intent: h
+						accepted_project_intent: m
 					});
 				} catch (t) {
 					let n = t instanceof Error ? t.message : "invite_invalid", r = n === "invite_expired" ? 410 : n === "invite_invalid" ? 404 : 409;
@@ -2997,9 +3345,9 @@ function mn(e) {
 				"recipient_display_name",
 				"device_display_name"
 			].some((e) => Object.hasOwn(i, e))) return e.json({ error: "unexpected_project_invite_fields" }, 400);
-			let h = await g.getGroup(String(n.group_id));
-			if (!h) return e.json({ error: "group_not_found" }, 404);
-			if (h.archived_at) return e.json({ error: "group_archived" }, 409);
+			let m = await g.getGroup(String(n.group_id));
+			if (!m) return e.json({ error: "group_not_found" }, 404);
+			if (m.archived_at) return e.json({ error: "group_archived" }, 409);
 			let _ = String(n.group_id);
 			if (await g.getEnrollment(_, o)) return e.json({
 				ok: !0,
@@ -3040,25 +3388,25 @@ function mn(e) {
 		} finally {
 			await g.close();
 		}
-	}), d;
+	}), u;
 }
-async function hn(e, t, n) {
+async function _r(e, t, n) {
 	let r = Z(e.req.header(X), n.runtime);
 	if (!r.ok) return n.rateLimitedResponse(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
 	let i = n.rateLimitedResponse(e, "admin", !0);
 	if (i) return i;
 	let a = await (async () => {
 		let t = Number.parseInt(e.req.header("content-length") ?? "", 10);
-		if (Number.isFinite(t) && t > sn) return null;
+		if (Number.isFinite(t) && t > cr) return null;
 		let n = e.req.raw.body;
-		if (!n) return new Uint8Array();
+		if (!n) return /* @__PURE__ */ new Uint8Array();
 		let r = n.getReader(), i = [], a = 0;
 		try {
 			for (;;) {
 				let { done: e, value: t } = await r.read();
 				if (e) break;
 				if (t) {
-					if (a += t.byteLength, a > sn) return await r.cancel(), null;
+					if (a += t.byteLength, a > cr) return await r.cancel(), null;
 					i.push(t);
 				}
 			}
@@ -3106,6 +3454,6 @@ async function hn(e, t, n) {
 	}
 }
 //#endregion
-export { he as A, p as B, K as C, me as D, k as E, T as F, s as G, m as H, C as I, c as J, u as K, ee as L, D as M, w as N, pe as O, E as P, g as R, wt as S, O as T, i as U, d as V, l as W, Dt as _, rn as a, Ct as b, Xt as c, At as d, Ft as f, Et as g, Tt as h, an as i, ge as j, _e as k, Jt as l, Gt as m, on as n, Kt as o, Wt as p, o as q, nn as r, Yt as s, mn as t, jt as u, Ot as v, ve as w, G as x, kt as y, h as z };
+export { E as $, at as A, ke as B, Sn as C, g as Ct, L as D, n as Dt, Ve as E, i as Et, Re as F, Ce as G, Te as H, I, be as J, xe as K, F as L, it as M, ze as N, nt as O, Le as P, ie as Q, Be as R, yn as S, te as St, ot as T, a as Tt, Oe as U, De as V, N as W, ae as X, Se as Y, ne as Z, wn as _, _ as _t, ar as a, fe as at, Dn as b, x as bt, Zn as c, ge as ct, jn as d, v as dt, w as et, In as f, h as ft, Cn as g, u as gt, q as h, l as ht, or as i, me as it, rt as j, tt as k, Yn as l, _e as lt, Kn as m, S as mt, sr as n, C as nt, qn as o, de as ot, Gn as p, o as pt, we as q, ir as r, oe as rt, Xn as s, pe as st, gr as t, T as tt, Mn as u, he as ut, Tn as v, y as vt, xn as w, r as wt, bn as x, ee as xt, En as y, b as yt, Ae as z };
 
-//# sourceMappingURL=coordinator-api-DGTIU3Ri.js.map
+//# sourceMappingURL=coordinator-api-BAufmPEa.js.map