@codemem/core 0.46.0-alpha.2 → 0.46.0-beta.2

package/dist/{coordinator-api-BToPmSNg.js → coordinator-api-CdUQtf5l.js}

@@ -42,31 +42,40 @@ function f(e) {
 	return !n && r.some(i) && (o = JSON.stringify(r)), `unmapped:${t("sha256").update(o, "utf8").digest("hex")}`;
 }
 function p(e) {
-	let t = a(e.gitRemote), n = a(e.gitBranch), r = a(e.cwd), i = a(e.workspaceId), o = a(e.project);
+	let t = a(e.gitRemote), n = a(e.gitBranch), r = a(e.repositoryIdentity), i = a(e.cwd), o = a(e.workspaceId), s = a(e.project);
+	if (r && !e.branchScoped) return {
+		value: l(r),
+		source: "git_repository",
+		displayProject: s
+	};
 	if (t) {
 		let r = l(t);
 		return e.branchScoped && n ? {
 			value: `${r}:${n}`,
 			source: "git_remote_branch",
-			displayProject: o
+			displayProject: s
 		} : {
 			value: r,
 			source: "git_remote",
-			displayProject: o
+			displayProject: s
 		};
 	}
 	return r ? {
-		value: u(r),
-		source: "cwd",
-		displayProject: o
+		value: l(r),
+		source: "git_repository",
+		displayProject: s
 	} : i ? {
-		value: l(i),
+		value: u(i),
+		source: "cwd",
+		displayProject: s
+	} : o ? {
+		value: l(o),
 		source: "workspace_id",
-		displayProject: o
+		displayProject: s
 	} : {
 		value: f(e),
 		source: "unmapped",
-		displayProject: o
+		displayProject: s
 	};
 }
 function m(e) {
@@ -99,11 +108,17 @@ function b(e) {
 }
 function x(e, t) {
 	let n = [t.value];
-	if (t.source !== "git_remote" && t.source !== "git_remote_branch") return n;
+	if (e.allowRepositoryCwdFallback === !1 || t.source !== "git_repository" && t.source !== "git_remote" && t.source !== "git_remote_branch") return n;
 	let r = a(e.cwd);
 	return r && n.push(u(r)), n;
 }
 function S(e, t) {
+	let n = [t.value];
+	if (e.allowRepositoryCwdFallback === !1 || t.source !== "git_repository" && t.source !== "git_remote" && t.source !== "git_remote_branch") return n;
+	let r = a(e.cwd);
+	return r && n.push(u(r)), n;
+}
+function C(e, t) {
 	for (let n of t) {
 		let t = b(e.filter((e) => d(e.workspace_identity) === n).map((e) => ({
 			mapping: e,
@@ -114,7 +129,7 @@ function S(e, t) {
 	}
 	return null;
 }
-function te(e, t) {
+function w(e, t) {
 	return b(t.flatMap((t) => e.flatMap((e) => {
 		if (c(e.workspace_identity)) return [];
 		let n = c(e.project_pattern);
@@ -125,7 +140,16 @@ function te(e, t) {
 		}];
 	})));
 }
-function C(e) {
+function T(e, t) {
+	let n = [...t].map(l), r = /* @__PURE__ */ new Set();
+	for (let t of e) {
+		if (c(t.workspace_identity)) continue;
+		let e = c(t.project_pattern);
+		!e || !n.some((t) => _(t, e)) || r.add(t.scope_id);
+	}
+	return r;
+}
+function E(e) {
 	let t = p(e), n = c(e.explicitScopeId);
 	if (n) return {
 		scopeId: n,
@@ -141,21 +165,21 @@ function C(e) {
 		mapping: null,
 		matchedPattern: null
 	};
-	let r = e.mappings ?? [], i = x(e, t), a = S(r, i);
-	if (a) return {
-		scopeId: a.mapping.scope_id,
+	let r = e.mappings ?? [], i = C(r, x(e, t));
+	if (i) return {
+		scopeId: i.mapping.scope_id,
 		reason: "exact_mapping",
 		workspaceIdentity: t,
-		mapping: a.mapping,
+		mapping: i.mapping,
 		matchedPattern: null
 	};
-	let o = te(r, i);
-	return o ? {
-		scopeId: o.mapping.scope_id,
+	let a = w(r, S(e, t));
+	return a ? {
+		scopeId: a.mapping.scope_id,
 		reason: "pattern_mapping",
 		workspaceIdentity: t,
-		mapping: o.mapping,
-		matchedPattern: o.matchedPattern
+		mapping: a.mapping,
+		matchedPattern: a.matchedPattern
 	} : {
 		scopeId: e.localDefaultScopeId ?? "local-default",
 		reason: "local_default",
@@ -164,7 +188,7 @@ function C(e) {
 		matchedPattern: null
 	};
 }
-function w(e, t) {
+function te(e, t) {
 	let n = /* @__PURE__ */ new Set([
 		"",
 		o,
@@ -175,18 +199,18 @@ function w(e, t) {
 	for (let e of i) e.scope_id != null && n.add(e.scope_id);
 	return [...n];
 }
-function T(e) {
+function ne(e) {
 	if (e.devices.length > 500 || e.projects.length > 500 || e.devices.length * e.projects.length > 1e4) throw Error("legacy_team_setup_roster_too_large");
 }
-function ne(e) {
+function re(e) {
 	if (e.projectIdentities.size * e.deviceCount > 1e4) throw Error("legacy_team_setup_roster_too_large");
 }
-function re(e, t, n) {
+function ie(e, t, n) {
 	if (n.length === 0) return;
 	let r = [...new Set(t.map((e) => e.deviceId))], i = r.length > 0 ? `WHERE device_id NOT IN (${r.map(() => "?").join(", ")})` : "", a = Number(e.prepare(`SELECT COUNT(*) FROM identity_devices ${i}`).pluck().get(...r) ?? 0);
 	if ((r.length + a) * n.length > 1e4) throw Error("legacy_team_setup_roster_too_large");
 }
-function ie(e, t, n, r) {
+function ae(e, t, n, r) {
 	if (!r) return;
 	let i = [...new Set(t.map((e) => e.deviceId))], a = i.map(() => "?").join(", "), o = a ? `AND device_id NOT IN (${a})` : "", s = Number(e.prepare(`SELECT COUNT(*) FROM legacy_team_setup_draft_devices
 				 WHERE attempt_id = ? ${o}`).pluck().get(r, ...i) ?? 0), c = t.length + s;
@@ -194,31 +218,31 @@ function ie(e, t, n, r) {
 }
 //#endregion
 //#region src/recipient-policy-identifiers.ts
-function E(e, t) {
+function oe(e, t) {
 	return e < t ? -1 : +(e > t);
 }
-var ae = /[\p{Cc}\p{Cf}]/u;
-function oe(e, t) {
-	return typeof e == "string" && e.length > 0 && e === e.trim() && e.length <= t && !ae.test(e);
+var se = /[\p{Cc}\p{Cf}]/u;
+function ce(e, t) {
+	return typeof e == "string" && e.length > 0 && e === e.trim() && e.length <= t && !se.test(e);
 }
-function se(e) {
-	return oe(e, 256);
+function le(e) {
+	return ce(e, 256);
 }
-function ce(e) {
-	return oe(e, 2048);
+function ue(e) {
+	return ce(e, 2048);
 }
-var le = "Recipient policy value must be strict JSON data";
+var de = "Recipient policy value must be strict JSON data";
 function D() {
-	throw TypeError(le);
+	throw TypeError(de);
 }
-function ue(e) {
+function fe(e) {
 	let t = JSON.stringify(e);
 	return t === void 0 ? D() : t;
 }
-function de(e, t) {
+function pe(e, t) {
 	if (e === null) return "null";
 	if (typeof e == "boolean") return e ? "true" : "false";
-	if (typeof e == "string") return ue(e);
+	if (typeof e == "string") return fe(e);
 	if (typeof e == "number") return !Number.isFinite(e) || Object.is(e, -0) ? D() : String(e);
 	if (typeof e != "object" || t.has(e)) return D();
 	t.add(e);
@@ -231,7 +255,7 @@ function de(e, t) {
 			for (let n = 0; n < e.length; n += 1) {
 				let i = Object.getOwnPropertyDescriptor(e, String(n));
 				if (!i?.enumerable || !("value" in i)) return D();
-				r.push(de(i.value, t));
+				r.push(pe(i.value, t));
 			}
 			return `[${r.join(",")}]`;
 		}
@@ -240,51 +264,51 @@ function de(e, t) {
 			if (typeof t != "string") return D();
 			let n = Object.getOwnPropertyDescriptor(e, t);
 			return !n?.enumerable || !("value" in n) ? D() : [t, n.value];
-		}).toSorted(([e], [t]) => E(e, t)).map(([e, n]) => `${ue(e)}:${de(n, t)}`).join(",")}}`;
+		}).toSorted(([e], [t]) => oe(e, t)).map(([e, n]) => `${fe(e)}:${pe(n, t)}`).join(",")}}`;
 	} finally {
 		t.delete(e);
 	}
 }
-function fe(e) {
-	return de(e, /* @__PURE__ */ new WeakSet());
+function me(e) {
+	return pe(e, /* @__PURE__ */ new WeakSet());
 }
 function O(e, n) {
 	if (e.includes("\0") || !e.isWellFormed()) throw TypeError("Recipient policy digest prefix must be well-formed without NUL");
-	return `${e}:${t("sha256").update(e, "utf8").update("\0", "utf8").update(fe(n), "utf8").digest("hex")}`;
+	return `${e}:${t("sha256").update(e, "utf8").update("\0", "utf8").update(me(n), "utf8").digest("hex")}`;
 }
-function pe(e, n) {
-	return `${e}:${t("sha256").update(fe(n), "utf8").digest("hex")}`;
-}
-var me = ["team_invite", "coordinator_invite"];
 function he(e, n) {
+	return `${e}:${t("sha256").update(me(n), "utf8").digest("hex")}`;
+}
+var ge = ["team_invite", "coordinator_invite"];
+function _e(e, n) {
 	return `legacy-team-candidate:${t("sha256").update(JSON.stringify([e, n])).digest("hex").slice(0, 32)}`;
 }
-function ge(e, t) {
+function ve(e, t) {
 	return O("legacy-team-project-ref-v1", [e, t]);
 }
-function _e(e, t) {
+function ye(e, t) {
 	return O("legacy-team-canonical-project-ref-v1", [e, t]);
 }
-function ve(e, t) {
+function be(e, t) {
 	return O("legacy-team-device-ref-v1", [e, t]);
 }
-function ye(e) {
-	return pe("policy-team-v1", e);
+function xe(e) {
+	return he("policy-team-v1", e);
 }
-function be(e) {
+function Se(e) {
 	return O("legacy-team-roster-v1", e.map((e) => ({
 		deviceId: e.deviceId,
 		fingerprint: e.fingerprint,
 		enabled: e.enabled,
 		identityId: e.identityId
-	})).toSorted((e, t) => E(e.deviceId, t.deviceId)));
+	})).toSorted((e, t) => oe(e.deviceId, t.deviceId)));
 }
 //#endregion
 //#region src/coordinator-legacy-team-completion.ts
-var xe = 1, Se = 50, Ce = 500, we = 15e5, Te = 25 * we, Ee = 256, De = 37661024, Oe = "completion_conflict", ke = class extends Error {
-	code = Oe;
+var Ce = 1, we = 50, Te = 500, Ee = 15e5, De = 25 * Ee, Oe = 256, ke = 37661024, Ae = "completion_conflict", je = class extends Error {
+	code = Ae;
 	constructor() {
-		super(Oe), this.name = "CoordinatorLegacyTeamCompletionConflictError";
+		super(Ae), this.name = "CoordinatorLegacyTeamCompletionConflictError";
 	}
 };
 function k() {
@@ -297,41 +321,41 @@ function j(e, t) {
 	let n = new Set(t);
 	Object.keys(e).some((e) => !n.has(e)) && k();
 }
-function Ae(e) {
+function Me(e) {
 	return /^(?:[\\/]{2}|\.{1,2}[\\/]|\/|~[\\/]|[a-z]:[\\/]|file:)/iu.test(e);
 }
 function M(e) {
-	return (typeof e != "string" || !e || e !== e.trim() || e.length > Ee || /[\p{Cc}\p{Cf}]/u.test(e) || Ae(e)) && k(), e;
+	return (typeof e != "string" || !e || e !== e.trim() || e.length > Oe || /[\p{Cc}\p{Cf}]/u.test(e) || Me(e)) && k(), e;
 }
 function N(e) {
 	let t = M(e);
 	return /^[a-f0-9]{64}$/u.test(t) || k(), t;
 }
-function je(e) {
+function Ne(e) {
 	typeof e != "string" && k();
 	let t = e.normalize("NFC").trim();
-	return (!t || [...t].length > 120 || /[\p{Cc}\p{Cf}]/u.test(t) || Ae(t)) && k(), t;
+	return (!t || [...t].length > 120 || /[\p{Cc}\p{Cf}]/u.test(t) || Me(t)) && k(), t;
 }
-function Me(e) {
+function Pe(e) {
 	(typeof e != "string" || !e) && k();
 	let t = new Date(e);
 	return (Number.isNaN(t.getTime()) || t.toISOString() !== e) && k(), e;
 }
-function Ne(e, t) {
+function Fe(e, t) {
 	return (!Array.isArray(e) || e.length > t) && k(), e;
 }
-function P(e, t) {
-	let n = e.toSorted((e, n) => E(t(e), t(n)));
+function Ie(e, t) {
+	let n = e.toSorted((e, n) => oe(t(e), t(n)));
 	return n.some((e, r) => r > 0 && t(n[r - 1]) === t(e)) && k(), n;
 }
-function Pe(e) {
-	return P(Ne(e, 50).map(M), (e) => e);
+function Le(e) {
+	return Ie(Fe(e, 50).map(M), (e) => e);
 }
-function Fe(e) {
+function Re(e) {
 	let t = M(e);
 	return /^legacy-team-candidate:[a-f0-9]{32}$/u.test(t) || k(), t;
 }
-function Ie(e) {
+function ze(e) {
 	let t = A(e);
 	j(t, [
 		"version",
@@ -356,13 +380,13 @@ function Ie(e) {
 		"policy_revision",
 		"device_eligibility_mode"
 	]), n.device_eligibility_mode !== "reviewed_allowlist" && k();
-	let r = M(t.team_id), i = P(Ne(t.memberships, 500).map((e) => {
+	let r = M(t.team_id), i = Ie(Fe(t.memberships, 500).map((e) => {
 		let t = A(e);
 		return j(t, ["identity_id", "role"]), t.role !== "member" && k(), {
 			identity_id: M(t.identity_id),
 			role: "member"
 		};
-	}), (e) => e.identity_id), a = P(Ne(t.device_decisions, 500).map((e) => {
+	}), (e) => e.identity_id), a = Ie(Fe(t.device_decisions, 500).map((e) => {
 		let t = A(e);
 		j(t, [
 			"device_id",
@@ -385,7 +409,7 @@ function Ie(e) {
 	a.length === 0 && k();
 	let o = new Set(i.map((e) => e.identity_id)), s = new Set(a.flatMap((e) => e.identity_id ? [e.identity_id] : []));
 	(o.size !== s.size || [...s].some((e) => !o.has(e))) && k();
-	let c = P(Ne(t.project_mappings, 500).map((e) => {
+	let c = Ie(Fe(t.project_mappings, 500).map((e) => {
 		let t = A(e);
 		j(t, [
 			"project_ref",
@@ -403,7 +427,7 @@ function Ie(e) {
 		let t = l.get(e.resolved_project_ref);
 		t && t !== e.scope_id && k(), l.set(e.resolved_project_ref, e.scope_id);
 	}
-	let u = P(Ne(t.project_recipients, 500).map((e) => {
+	let u = Ie(Fe(t.project_recipients, 500).map((e) => {
 		let t = A(e);
 		j(t, ["resolved_project_ref", "team_id"]);
 		let n = M(t.team_id);
@@ -413,12 +437,12 @@ function Ie(e) {
 			resolved_project_ref: i,
 			team_id: n
 		};
-	}), (e) => e.resolved_project_ref), d = [...new Set(c.map((e) => e.resolved_project_ref))].toSorted(E), f = u.map((e) => e.resolved_project_ref);
+	}), (e) => e.resolved_project_ref), d = [...new Set(c.map((e) => e.resolved_project_ref))].toSorted(oe), f = u.map((e) => e.resolved_project_ref);
 	JSON.stringify(f) !== JSON.stringify(d) && k();
 	let p = {
 		version: 1,
 		coordinator_id: M(t.coordinator_id),
-		candidate_ref: Fe(t.candidate_ref),
+		candidate_ref: Re(t.candidate_ref),
 		candidate_digest: N(t.candidate_digest),
 		team_id: r,
 		team_digest: N(t.team_digest),
@@ -426,7 +450,7 @@ function Ie(e) {
 		finish_digest: N(t.finish_digest),
 		access_delta_digest: N(t.access_delta_digest),
 		team: {
-			display_name: je(n.display_name),
+			display_name: Ne(n.display_name),
 			policy_revision: N(n.policy_revision),
 			device_eligibility_mode: "reviewed_allowlist"
 		},
@@ -434,21 +458,21 @@ function Ie(e) {
 		device_decisions: a,
 		project_mappings: c,
 		project_recipients: u,
-		completed_at: Me(t.completed_at)
+		completed_at: Pe(t.completed_at)
 	};
 	return new TextEncoder().encode(JSON.stringify(p)).byteLength > 15e5 && k(), p;
 }
-function Le(e) {
-	return JSON.stringify(Ie(e));
+function Be(e) {
+	return JSON.stringify(ze(e));
 }
-function Re(e) {
-	e.team_id !== ye(e.candidate_ref) && k();
+function Ve(e) {
+	e.team_id !== xe(e.candidate_ref) && k();
 }
-function ze(e, t) {
-	he(e.coordinator_id, t) !== e.candidate_ref && k();
+function He(e, t) {
+	_e(e.coordinator_id, t) !== e.candidate_ref && k();
 }
-function Be(e, t, n) {
-	ze(e, t);
+function Ue(e, t, n) {
+	He(e, t);
 	let r = new Set(e.project_mappings.map((e) => e.scope_id));
 	n.length !== r.size && k();
 	let i = e.coordinator_id;
@@ -457,57 +481,57 @@ function Be(e, t, n) {
 }
 //#endregion
 //#region src/coordinator-membership-effects.ts
-var Ve = "scope_membership_effect_conflict", He = {
+var We = "scope_membership_effect_conflict", Ge = {
 	device_not_enrolled: "device must be enrolled and enabled in the scope group.",
 	scope_group_mismatch: "membership groupId must match the scope groupId.",
 	scope_inactive: "scope is not active.",
 	scope_not_found: "scopeId must reference an existing scope."
-}, F = class extends Error {
+}, P = class extends Error {
 	code;
 	constructor(e) {
-		super(He[e]), this.name = "CoordinatorMembershipError", this.code = e;
+		super(Ge[e]), this.name = "CoordinatorMembershipError", this.code = e;
 	}
 };
-function I(e) {
+function F(e) {
 	return e?.trim() || null;
 }
-function Ue(e) {
-	let t = I(e);
+function Ke(e) {
+	let t = F(e);
 	if (!t) throw Error("effectId is required.");
 	if (t.length > 512 || /[\p{Cc}\p{Cf}]/u.test(t)) throw Error("effectId is invalid.");
 	return t;
 }
-function We(e) {
+function qe(e) {
 	return JSON.stringify({
-		scopeId: I(e.scopeId),
-		deviceId: I(e.deviceId),
-		role: I(e.role),
+		scopeId: F(e.scopeId),
+		deviceId: F(e.deviceId),
+		role: F(e.role),
 		membershipEpoch: e.membershipEpoch ?? null,
-		coordinatorId: I(e.coordinatorId),
-		groupId: I(e.groupId),
-		manifestIssuerDeviceId: I(e.manifestIssuerDeviceId),
-		manifestHash: I(e.manifestHash),
-		signedManifestJson: I(e.signedManifestJson),
-		actorType: I(e.actorType),
-		actorId: I(e.actorId)
+		coordinatorId: F(e.coordinatorId),
+		groupId: F(e.groupId),
+		manifestIssuerDeviceId: F(e.manifestIssuerDeviceId),
+		manifestHash: F(e.manifestHash),
+		signedManifestJson: F(e.signedManifestJson),
+		actorType: F(e.actorType),
+		actorId: F(e.actorId)
 	});
 }
-function Ge(e) {
+function Je(e) {
 	return JSON.stringify({
-		scopeId: I(e.scopeId),
-		deviceId: I(e.deviceId),
-		groupId: I(e.groupId),
+		scopeId: F(e.scopeId),
+		deviceId: F(e.deviceId),
+		groupId: F(e.groupId),
 		membershipEpoch: e.membershipEpoch ?? null,
-		manifestHash: I(e.manifestHash),
-		signedManifestJson: I(e.signedManifestJson),
-		actorType: I(e.actorType),
-		actorId: I(e.actorId)
+		manifestHash: F(e.manifestHash),
+		signedManifestJson: F(e.signedManifestJson),
+		actorType: F(e.actorType),
+		actorId: F(e.actorId)
 	});
 }
-function Ke(e, t, n) {
-	if (e.action !== t || e.request_json !== n) throw Error(Ve);
+function Ye(e, t, n) {
+	if (e.action !== t || e.request_json !== n) throw Error(We);
 }
-function qe(e) {
+function Xe(e) {
 	if (e.action !== "grant" || e.outcome_applied !== 1 || e.role == null || e.status == null || e.membership_epoch == null || e.updated_at == null) throw Error("scope_membership_effect_receipt_invalid");
 	return {
 		scope_id: e.scope_id,
@@ -525,254 +549,254 @@ function qe(e) {
 }
 //#endregion
 //#region src/coordinator-store-contract.ts
-function Je(e) {
+function Ze(e) {
 	let t = e.trim(), n = new Date(t);
 	if (!t || Number.isNaN(n.getTime())) throw Error("expiresAt must be a valid date.");
 	return n.toISOString();
 }
-var Ye = /^identity:[A-Za-z0-9_-]{18,24}$/u;
-function Xe(e) {
-	return typeof e == "string" && e === e.trim() && Ye.test(e);
+var Qe = /^identity:[A-Za-z0-9_-]{18,24}$/u;
+function $e(e) {
+	return typeof e == "string" && e === e.trim() && Qe.test(e);
 }
-function Ze(e) {
+function et(e) {
 	return String(e.kind === "team_member" ? e.assigned_identity_id ?? "" : e.target_identity_id ?? "").trim();
 }
-var Qe = "reciprocal_approval_request_changed", $e = class extends Error {
-	code = Qe;
+var tt = "reciprocal_approval_request_changed", nt = class extends Error {
+	code = tt;
 	constructor() {
-		super(Qe), this.name = "CoordinatorReciprocalApprovalRequestChangedError";
+		super(tt), this.name = "CoordinatorReciprocalApprovalRequestChangedError";
 	}
-}, et = 120, tt = /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/iu, nt = /^(?:actor|device|identity|local):\S+$/iu, rt = /^(?:actor|device|identity)[_-][a-z0-9][a-z0-9._:-]{4,}$/iu, it = /^pending[_-]\S+$/iu, at = /^[a-f0-9]{12,64}$/iu, ot = /^(?=.{1,253}$)(?:(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.){2,}[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?|[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.local)$/iu;
-function L(e, t) {
+}, rt = 120, it = /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/iu, at = /^(?:actor|device|identity|local):\S+$/iu, ot = /^(?:actor|device|identity)[_-][a-z0-9][a-z0-9._:-]{4,}$/iu, st = /^pending[_-]\S+$/iu, ct = /^[a-f0-9]{12,64}$/iu, lt = /^(?=.{1,253}$)(?:(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.){2,}[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?|[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.local)$/iu;
+function I(e, t) {
 	if ([...e].some((e) => /[\p{Cc}\p{Cf}]/u.test(e))) throw Error(`${t}_invalid`);
 	let n = e.replace(/\s+/gu, " ").trim();
 	if (!n) throw Error(`${t}_required`);
-	if ([...n].length > et) throw Error(`${t}_too_long`);
+	if ([...n].length > rt) throw Error(`${t}_too_long`);
 	return n;
 }
-function R(e) {
+function L(e) {
 	if (typeof e != "string") return !1;
 	let t;
 	try {
-		t = L(e, "display_name");
+		t = I(e, "display_name");
 	} catch {
 		return !1;
 	}
 	return ![
-		tt,
-		nt,
-		rt,
 		it,
-		at
+		at,
+		ot,
+		st,
+		ct
 	].some((e) => e.test(t));
 }
-function z(e, t) {
-	let n = L(e, t);
-	if (!R(n)) throw Error(`${t}_invalid`);
+function R(e, t) {
+	let n = I(e, t);
+	if (!L(n)) throw Error(`${t}_invalid`);
 	return n;
 }
-function st(e, t) {
-	let n = L(e, t);
-	if (!ot.test(n) && !R(n)) throw Error(`${t}_invalid`);
+function ut(e, t) {
+	let n = I(e, t);
+	if (!lt.test(n) && !L(n)) throw Error(`${t}_invalid`);
 	return n;
 }
-function ct(e) {
+function dt(e) {
 	let t = String(e ?? "").trim(), n = t.replace(/\.local$/iu, "");
-	return n ? st(ot.test(t) ? n : n.replace(/[-_]+/gu, " "), "device_display_name") : null;
+	return n ? ut(lt.test(t) ? n : n.replace(/[-_]+/gu, " "), "device_display_name") : null;
 }
-function lt(e) {
+function ft(e) {
 	for (let t of [
 		e.explicitName,
 		e.osName,
 		e.coordinatorName
 	]) {
 		let e = String(t ?? "").trim(), n = e.replace(/\.local$/iu, "");
-		if (ot.test(e)) {
+		if (lt.test(e)) {
 			try {
-				let t = ct(e);
+				let t = dt(e);
 				if (t) return t;
 			} catch {}
 			continue;
 		}
-		if (!(!n || !R(n))) try {
-			let e = ct(t);
-			if (e && R(e)) return e;
+		if (!(!n || !L(n))) try {
+			let e = dt(t);
+			if (e && L(e)) return e;
 		} catch {}
 	}
 	let t = String(e.fallbackSeed ?? "").replace(/[^a-z0-9]/giu, "").slice(0, 6);
 	return t ? `Codemem device ${t}` : "Codemem device";
 }
-function ut(e) {
+function pt(e) {
 	if (!Array.isArray(e) || e.length === 0 || e.length > 100) throw Error("project_summaries_invalid");
 	return e.map((e) => {
 		if (!e || typeof e != "object" || Array.isArray(e)) throw Error("project_summaries_invalid");
 		let t = e;
 		if (!Number.isSafeInteger(t.existing_memory_count) || Number(t.existing_memory_count) < 0) throw Error("project_summaries_invalid");
 		return {
-			display_name: L(String(t.display_name ?? ""), "project_name"),
+			display_name: I(String(t.display_name ?? ""), "project_name"),
 			existing_memory_count: Number(t.existing_memory_count)
 		};
 	});
 }
 //#endregion
 //#region src/recipient-reviewed-intent.ts
-var dt = 1, B = class extends Error {
+var mt = 1, z = class extends Error {
 	code;
 	constructor(e) {
 		super(e), this.name = "RecipientReviewedIntentError", this.code = e;
 	}
-}, ft = /[\p{Cc}\p{Cf}]/u, pt = 100, mt = 65536;
-function V() {
-	throw new B("recipient_reviewed_intent_invalid");
+}, ht = /[\p{Cc}\p{Cf}]/u, gt = 100, _t = 65536;
+function B() {
+	throw new z("recipient_reviewed_intent_invalid");
 }
-function H(e) {
-	return (!e || typeof e != "object" || Array.isArray(e)) && V(), e;
+function V(e) {
+	return (!e || typeof e != "object" || Array.isArray(e)) && B(), e;
 }
-function U(e, t) {
-	Object.keys(e).some((e) => !t.includes(e)) && V();
+function H(e, t) {
+	Object.keys(e).some((e) => !t.includes(e)) && B();
 }
-function W(e, t) {
-	return (typeof e != "string" || !e || e !== e.trim() || e.length > t || ft.test(e)) && V(), e;
+function U(e, t) {
+	return (typeof e != "string" || !e || e !== e.trim() || e.length > t || ht.test(e)) && B(), e;
 }
-function ht(e) {
-	(typeof e != "string" || ft.test(e)) && V();
+function vt(e) {
+	(typeof e != "string" || ht.test(e)) && B();
 	let t = e.trim().replace(/\s+/gu, " ");
-	return (!t || t.length > 256) && V(), t;
+	return (!t || t.length > 256) && B(), t;
 }
-function gt(e) {
-	typeof e != "string" && V();
+function yt(e) {
+	typeof e != "string" && B();
 	try {
-		return L(e, "identity_display_name");
+		return I(e, "identity_display_name");
 	} catch {
-		return V();
+		return B();
 	}
 }
-function _t(e) {
-	return (typeof e != "number" || !Number.isSafeInteger(e) || e < 0) && V(), e;
+function bt(e) {
+	return (typeof e != "number" || !Number.isSafeInteger(e) || e < 0) && B(), e;
 }
-function vt(e, t) {
+function xt(e, t) {
 	return e < t ? -1 : +(e > t);
 }
-function yt(e) {
+function St(e) {
 	return e.kind === "direct" ? "direct" : `team\u0000${e.teamId}`;
 }
-function bt(e) {
-	let t = H(e);
-	return t.kind === "direct" ? (U(t, ["kind"]), { kind: "direct" }) : (t.kind !== "team" && V(), U(t, [
+function Ct(e) {
+	let t = V(e);
+	return t.kind === "direct" ? (H(t, ["kind"]), { kind: "direct" }) : (t.kind !== "team" && B(), H(t, [
 		"kind",
 		"teamId",
 		"displayName"
 	]), {
 		kind: "team",
-		teamId: W(t.teamId, 256),
-		displayName: ht(t.displayName)
+		teamId: U(t.teamId, 256),
+		displayName: vt(t.displayName)
 	});
 }
-function xt(e) {
-	let t = H(e);
-	U(t, [
+function wt(e) {
+	let t = V(e);
+	H(t, [
 		"canonicalProjectIdentity",
 		"displayName",
 		"existingMemoryCount",
 		"futureMemoriesShared",
 		"sources"
-	]), (t.futureMemoriesShared !== !0 || !Array.isArray(t.sources) || !t.sources.length) && V();
-	let n = t.sources.map(bt).toSorted((e, t) => vt(yt(e), yt(t)));
-	return new Set(n.map(yt)).size !== n.length && V(), {
-		canonicalProjectIdentity: W(t.canonicalProjectIdentity, 512),
-		displayName: ht(t.displayName),
-		existingMemoryCount: _t(t.existingMemoryCount),
+	]), (t.futureMemoriesShared !== !0 || !Array.isArray(t.sources) || !t.sources.length) && B();
+	let n = t.sources.map(Ct).toSorted((e, t) => xt(St(e), St(t)));
+	return new Set(n.map(St)).size !== n.length && B(), {
+		canonicalProjectIdentity: U(t.canonicalProjectIdentity, 512),
+		displayName: vt(t.displayName),
+		existingMemoryCount: bt(t.existingMemoryCount),
 		futureMemoriesShared: !0,
 		sources: n
 	};
 }
-function St(e) {
-	let t = H(e);
-	return U(t, [
+function Tt(e) {
+	let t = V(e);
+	return H(t, [
 		"canonicalProjectIdentity",
 		"displayName",
 		"existingMemoryCount"
 	]), {
-		canonicalProjectIdentity: W(t.canonicalProjectIdentity, 512),
-		displayName: ht(t.displayName),
-		existingMemoryCount: _t(t.existingMemoryCount)
+		canonicalProjectIdentity: U(t.canonicalProjectIdentity, 512),
+		displayName: vt(t.displayName),
+		existingMemoryCount: bt(t.existingMemoryCount)
 	};
 }
-function Ct(e) {
-	(!Array.isArray(e.projects) || !Array.isArray(e.excludedProjects) || e.projects.length > pt) && V();
-	let t = e.projects.map(xt).toSorted((e, t) => vt(e.canonicalProjectIdentity, t.canonicalProjectIdentity)), n = e.excludedProjects.map(St).toSorted((e, t) => vt(e.canonicalProjectIdentity, t.canonicalProjectIdentity)), r = t.map((e) => e.canonicalProjectIdentity), i = n.map((e) => e.canonicalProjectIdentity);
-	return (new Set(r).size !== r.length || new Set(i).size !== i.length || i.some((e) => r.includes(e))) && V(), {
+function Et(e) {
+	(!Array.isArray(e.projects) || !Array.isArray(e.excludedProjects) || e.projects.length > gt) && B();
+	let t = e.projects.map(wt).toSorted((e, t) => xt(e.canonicalProjectIdentity, t.canonicalProjectIdentity)), n = e.excludedProjects.map(Tt).toSorted((e, t) => xt(e.canonicalProjectIdentity, t.canonicalProjectIdentity)), r = t.map((e) => e.canonicalProjectIdentity), i = n.map((e) => e.canonicalProjectIdentity);
+	return (new Set(r).size !== r.length || new Set(i).size !== i.length || i.some((e) => r.includes(e))) && B(), {
 		projects: t,
 		excludedProjects: n
 	};
 }
-function wt(e, t) {
-	if (!(e.journey === "team" && t.kind === "team_member" && e.team.teamId === t.policyTeamId || e.journey === "add_device" && t.kind === "add_device" && e.targetIdentity.identityId === t.targetIdentityId)) throw new B("recipient_invite_intent_mismatch");
+function Dt(e, t) {
+	if (!(e.journey === "team" && t.kind === "team_member" && e.team.teamId === t.policyTeamId || e.journey === "add_device" && t.kind === "add_device" && e.targetIdentity.identityId === t.targetIdentityId)) throw new z("recipient_invite_intent_mismatch");
 }
-function Tt(e, t) {
-	let n = H(e);
-	n.version !== 1 && V();
-	let r = Ct(n), i;
+function Ot(e, t) {
+	let n = V(e);
+	n.version !== 1 && B();
+	let r = Et(n), i;
 	if (n.journey === "team") {
-		U(n, [
+		H(n, [
 			"version",
 			"journey",
 			"team",
 			"projects",
 			"excludedProjects"
 		]);
-		let e = H(n.team);
-		U(e, [
+		let e = V(n.team);
+		H(e, [
 			"teamId",
 			"displayName",
 			"futureProjectsInherit"
-		]), e.futureProjectsInherit !== !0 && V(), i = {
+		]), e.futureProjectsInherit !== !0 && B(), i = {
 			version: 1,
 			journey: "team",
 			team: {
-				teamId: W(e.teamId, 256),
-				displayName: ht(e.displayName),
+				teamId: U(e.teamId, 256),
+				displayName: vt(e.displayName),
 				futureProjectsInherit: !0
 			},
 			...r
 		};
 	} else if (n.journey === "add_device") {
-		U(n, [
+		H(n, [
 			"version",
 			"journey",
 			"targetIdentity",
 			"projects",
 			"excludedProjects"
 		]);
-		let e = H(n.targetIdentity);
-		U(e, ["identityId", "displayName"]), i = {
+		let e = V(n.targetIdentity);
+		H(e, ["identityId", "displayName"]), i = {
 			version: 1,
 			journey: "add_device",
 			targetIdentity: {
-				identityId: W(e.identityId, 256),
-				displayName: gt(e.displayName)
+				identityId: U(e.identityId, 256),
+				displayName: yt(e.displayName)
 			},
 			...r
 		};
-	} else V();
-	return t && wt(i, t), new TextEncoder().encode(G(i)).byteLength > mt && V(), i;
+	} else B();
+	return t && Dt(i, t), new TextEncoder().encode(W(i)).byteLength > _t && B(), i;
 }
-function G(e) {
-	return Array.isArray(e) ? `[${e.map(G).join(",")}]` : e && typeof e == "object" ? `{${Object.entries(e).toSorted(([e], [t]) => vt(e, t)).map(([e, t]) => `${JSON.stringify(e)}:${G(t)}`).join(",")}}` : JSON.stringify(e) ?? "null";
+function W(e) {
+	return Array.isArray(e) ? `[${e.map(W).join(",")}]` : e && typeof e == "object" ? `{${Object.entries(e).toSorted(([e], [t]) => xt(e, t)).map(([e, t]) => `${JSON.stringify(e)}:${W(t)}`).join(",")}}` : JSON.stringify(e) ?? "null";
 }
-function Et(e, t) {
-	return G(Tt(e, t));
+function kt(e, t) {
+	return W(Ot(e, t));
 }
-async function Dt(e, t) {
-	let n = Et(e, t), r = new TextEncoder().encode(`recipient-reviewed-intent-v1\n${n}`), i = await globalThis.crypto.subtle.digest("SHA-256", r);
+async function At(e, t) {
+	let n = kt(e, t), r = new TextEncoder().encode(`recipient-reviewed-intent-v1\n${n}`), i = await globalThis.crypto.subtle.digest("SHA-256", r);
 	return Array.from(new Uint8Array(i), (e) => e.toString(16).padStart(2, "0")).join("");
 }
-async function K(e, t) {
-	let n = Tt(e, t.target);
-	if (await Dt(n) !== t.digest) throw new B("recipient_invite_intent_mismatch");
+async function G(e, t) {
+	let n = Ot(e, t.target);
+	if (await At(n) !== t.digest) throw new z("recipient_invite_intent_mismatch");
 	return n;
 }
-async function Ot(e, t) {
+async function jt(e, t) {
 	if (!e) throw Error("recipient_invite_review_unavailable");
 	let n;
 	try {
@@ -781,16 +805,16 @@ async function Ot(e, t) {
 		throw Error("recipient_invite_review_unavailable");
 	}
 	try {
-		let r = Tt(n, t.target);
-		if (G(r) !== e) throw Error("recipient_invite_review_unavailable");
-		return await K(r, t);
+		let r = Ot(n, t.target);
+		if (W(r) !== e) throw Error("recipient_invite_review_unavailable");
+		return await G(r, t);
 	} catch (e) {
-		throw e instanceof B && e.code === "recipient_invite_intent_mismatch" || e instanceof Error && e.message === "recipient_invite_review_unavailable" ? e : Error("recipient_invite_review_unavailable");
+		throw e instanceof z && e.code === "recipient_invite_intent_mismatch" || e instanceof Error && e.message === "recipient_invite_review_unavailable" ? e : Error("recipient_invite_review_unavailable");
 	}
 }
 //#endregion
 //#region src/coordinator-store-input-rules.ts
-function kt(e) {
+function Mt(e) {
 	let t = e.trim();
 	if (!t) return "";
 	let n = t.includes("://") ? t : `http://${t}`;
@@ -801,7 +825,7 @@ function kt(e) {
 		return "";
 	}
 }
-function At(e) {
+function Nt(e) {
 	if (!e) return "";
 	try {
 		let t = new URL(e), n = t.hostname.toLowerCase();
@@ -809,15 +833,15 @@ function At(e) {
 	} catch {}
 	return e;
 }
-function jt(e, t) {
+function Pt(e, t) {
 	let n = [], r = /* @__PURE__ */ new Set();
 	for (let i of [...e, ...t]) {
-		let e = kt(i), t = At(e);
+		let e = Mt(i), t = Nt(e);
 		!e || r.has(t) || (r.add(t), n.push(e));
 	}
 	return n;
 }
-function Mt(e) {
+function Ft(e) {
 	if (!e) return null;
 	let t = String(e.seedDeviceId ?? "").trim(), n = String(e.expiresAt ?? "").trim(), r = String(e.createdBy ?? "").trim() || null;
 	if (!t || !n) throw Error("bootstrapGrant.seedDeviceId and expiresAt are required.");
@@ -829,7 +853,7 @@ function Mt(e) {
 		createdBy: r
 	};
 }
-function Nt(e) {
+function It(e) {
 	let t = String(e.groupId ?? "").trim(), n = String(e.seedDeviceId ?? "").trim(), r = String(e.workerDeviceId ?? "").trim(), i = String(e.expiresAt ?? "").trim(), a = String(e.createdBy ?? "").trim() || null;
 	if (!t || !n || !r || !i) throw Error("groupId, seedDeviceId, workerDeviceId, and expiresAt are required.");
 	return {
@@ -840,21 +864,21 @@ function Nt(e) {
 		createdBy: a
 	};
 }
-function q(e) {
+function K(e) {
 	return e?.trim() || null;
 }
-var Pt = /* @__PURE__ */ new Set([
+var Lt = /* @__PURE__ */ new Set([
 	"legacy_enrollment",
 	"project_share",
 	"team_member",
 	"add_device"
 ]);
-function Ft(e) {
-	if (!Pt.has(e.inviteKind)) throw Error("inviteKind is invalid.");
+function Rt(e) {
+	if (!Lt.has(e.inviteKind)) throw Error("inviteKind is invalid.");
 	if ([e.policyTeamId, e.targetIdentityId].filter((e) => !!e).some((e) => e.length > 256 || /[\p{Cc}\p{Cf}]/u.test(e))) throw Error("recipient invite identifier is invalid.");
 	if (e.reviewedPreviewDigest && !/^[a-f0-9]{64}$/u.test(e.reviewedPreviewDigest)) throw Error("reviewedPreviewDigest must be a SHA-256 digest.");
 }
-var It = {
+var zt = {
 	project_share(e, t) {
 		if (!e) throw Error("project_share invite requires operationId.");
 		if (t.policyTeamId || t.targetIdentityId || t.reviewedPreviewDigest) throw Error("recipient invite metadata requires a recipient invite kind.");
@@ -870,10 +894,10 @@ var It = {
 		if (!t.targetIdentityId || !t.reviewedPreviewDigest || t.policyTeamId || e) throw Error("add_device invite metadata is invalid.");
 	}
 };
-function Lt(e, t) {
-	It[t.inviteKind](q(e.operationId), t);
+function Bt(e, t) {
+	zt[t.inviteKind](K(e.operationId), t);
 }
-function Rt(e) {
+function Vt(e) {
 	if (e.inviteKind === "team_member" && e.policyTeamId && e.reviewedPreviewDigest) return {
 		target: {
 			kind: "team_member",
@@ -890,33 +914,33 @@ function Rt(e) {
 	};
 	throw Error("recipient invite metadata requires a recipient invite kind.");
 }
-async function zt(e) {
+async function Ht(e) {
 	let t = {
-		inviteKind: e.inviteKind ?? (q(e.operationId) ? "project_share" : "legacy_enrollment"),
-		policyTeamId: q(e.policyTeamId),
-		targetIdentityId: q(e.targetIdentityId),
-		reviewedPreviewDigest: q(e.reviewedPreviewDigest)
+		inviteKind: e.inviteKind ?? (K(e.operationId) ? "project_share" : "legacy_enrollment"),
+		policyTeamId: K(e.policyTeamId),
+		targetIdentityId: K(e.targetIdentityId),
+		reviewedPreviewDigest: K(e.reviewedPreviewDigest)
 	};
-	if (Ft(t), Lt(e, t), e.reviewedIntent === void 0 || e.reviewedIntent === null) {
+	if (Rt(t), Bt(e, t), e.reviewedIntent === void 0 || e.reviewedIntent === null) {
 		if (t.inviteKind === "team_member" || t.inviteKind === "add_device") throw Error("recipient_invite_review_unavailable");
 		return {
 			...t,
 			reviewedIntentJson: null
 		};
 	}
-	let n = Rt(t);
-	return await K(e.reviewedIntent, {
+	let n = Vt(t);
+	return await G(e.reviewedIntent, {
 		target: n.target,
 		digest: n.digest
 	}), {
 		...t,
-		reviewedIntentJson: Et(e.reviewedIntent, n.target)
+		reviewedIntentJson: kt(e.reviewedIntent, n.target)
 	};
 }
-async function Bt(e) {
+async function Ut(e) {
 	if (e.invite_kind === "team_member") {
-		if (!e.policy_team_id || !Xe(e.assigned_identity_id) || !e.reviewed_preview_digest) throw Error("invite_invalid");
-		let t = await Ot(e.reviewed_intent_json, {
+		if (!e.policy_team_id || !$e(e.assigned_identity_id) || !e.reviewed_preview_digest) throw Error("invite_invalid");
+		let t = await jt(e.reviewed_intent_json, {
 			target: {
 				kind: "team_member",
 				policyTeamId: e.policy_team_id
@@ -935,7 +959,7 @@ async function Bt(e) {
 	}
 	if (e.invite_kind === "add_device") {
 		if (!e.target_identity_id || !e.reviewed_preview_digest) throw Error("invite_invalid");
-		let t = await Ot(e.reviewed_intent_json, {
+		let t = await jt(e.reviewed_intent_json, {
 			target: {
 				kind: "add_device",
 				targetIdentityId: e.target_identity_id
@@ -953,94 +977,94 @@ async function Bt(e) {
 	}
 	return null;
 }
-function Vt(e, t = 0) {
+function Wt(e, t = 0) {
 	if (e == null) return t;
 	if (!Number.isFinite(e) || e < 0) throw Error("membershipEpoch must be non-negative.");
 	return Math.trunc(e);
 }
-function Ht(e) {
-	let t = q(e.scopeId), n = q(e.label);
+function Gt(e) {
+	let t = K(e.scopeId), n = K(e.label);
 	if (!t || !n) throw Error("scopeId and label are required.");
 	return {
 		scopeId: t,
 		label: n,
-		kind: q(e.kind) ?? "user",
-		authorityType: q(e.authorityType) ?? "coordinator",
-		coordinatorId: q(e.coordinatorId),
-		groupId: q(e.groupId),
-		manifestIssuerDeviceId: q(e.manifestIssuerDeviceId),
-		membershipEpoch: Vt(e.membershipEpoch),
-		manifestHash: q(e.manifestHash),
-		status: q(e.status) ?? "active"
+		kind: K(e.kind) ?? "user",
+		authorityType: K(e.authorityType) ?? "coordinator",
+		coordinatorId: K(e.coordinatorId),
+		groupId: K(e.groupId),
+		manifestIssuerDeviceId: K(e.manifestIssuerDeviceId),
+		membershipEpoch: Wt(e.membershipEpoch),
+		manifestHash: K(e.manifestHash),
+		status: K(e.status) ?? "active"
 	};
 }
-function Ut(e, t, n) {
+function Kt(e, t, n) {
 	if (e === void 0) return t;
-	let r = q(e);
+	let r = K(e);
 	if (!r) throw Error(`${n} must not be empty.`);
 	return r;
 }
-function Wt(e, t) {
-	return e === void 0 ? t : q(e);
+function qt(e, t) {
+	return e === void 0 ? t : K(e);
 }
-function Gt(e, t) {
-	let n = q(e.scopeId);
+function Jt(e, t) {
+	let n = K(e.scopeId);
 	if (!n) throw Error("scopeId is required.");
-	let r = e.membershipEpoch == null ? null : Vt(e.membershipEpoch);
+	let r = e.membershipEpoch == null ? null : Wt(e.membershipEpoch);
 	if (r != null && r < t.membership_epoch) throw Error("membershipEpoch must not move backwards.");
 	return {
 		scopeId: n,
-		label: Ut(e.label, t.label, "label"),
-		kind: Ut(e.kind, t.kind, "kind"),
-		authorityType: Ut(e.authorityType, t.authority_type, "authorityType"),
-		coordinatorId: Wt(e.coordinatorId, t.coordinator_id),
-		groupId: Wt(e.groupId, t.group_id),
-		manifestIssuerDeviceId: Wt(e.manifestIssuerDeviceId, t.manifest_issuer_device_id),
+		label: Kt(e.label, t.label, "label"),
+		kind: Kt(e.kind, t.kind, "kind"),
+		authorityType: Kt(e.authorityType, t.authority_type, "authorityType"),
+		coordinatorId: qt(e.coordinatorId, t.coordinator_id),
+		groupId: qt(e.groupId, t.group_id),
+		manifestIssuerDeviceId: qt(e.manifestIssuerDeviceId, t.manifest_issuer_device_id),
 		membershipEpoch: r ?? t.membership_epoch,
-		manifestHash: Wt(e.manifestHash, t.manifest_hash),
-		status: Ut(e.status, t.status, "status")
+		manifestHash: qt(e.manifestHash, t.manifest_hash),
+		status: Kt(e.status, t.status, "status")
 	};
 }
-function Kt(e, t, n) {
-	let r = q(e.scopeId), i = q(e.deviceId);
+function Yt(e, t, n) {
+	let r = K(e.scopeId), i = K(e.deviceId);
 	if (!r || !i) throw Error("scopeId and deviceId are required.");
-	qt(e, t);
-	let a = Jt(e, t, n);
+	Xt(e, t);
+	let a = Zt(e, t, n);
 	return {
 		scopeId: r,
 		deviceId: i,
-		role: q(e.role) ?? "member",
+		role: K(e.role) ?? "member",
 		membershipEpoch: a,
 		coordinatorId: t?.coordinator_id ?? null,
 		groupId: t?.group_id ?? null,
-		manifestIssuerDeviceId: q(e.manifestIssuerDeviceId) ?? t?.manifest_issuer_device_id ?? null,
-		manifestHash: q(e.manifestHash) ?? t?.manifest_hash ?? null,
-		signedManifestJson: q(e.signedManifestJson),
-		actorType: q(e.actorType),
-		actorId: q(e.actorId)
+		manifestIssuerDeviceId: K(e.manifestIssuerDeviceId) ?? t?.manifest_issuer_device_id ?? null,
+		manifestHash: K(e.manifestHash) ?? t?.manifest_hash ?? null,
+		signedManifestJson: K(e.signedManifestJson),
+		actorType: K(e.actorType),
+		actorId: K(e.actorId)
 	};
 }
-function qt(e, t) {
-	if (q(e.coordinatorId) && q(e.coordinatorId) !== t?.coordinator_id) throw Error("membership coordinatorId must match the scope coordinatorId.");
-	if (q(e.groupId) && q(e.groupId) !== t?.group_id) throw new F("scope_group_mismatch");
+function Xt(e, t) {
+	if (K(e.coordinatorId) && K(e.coordinatorId) !== t?.coordinator_id) throw Error("membership coordinatorId must match the scope coordinatorId.");
+	if (K(e.groupId) && K(e.groupId) !== t?.group_id) throw new P("scope_group_mismatch");
 }
-function Jt(e, t, n) {
-	let r = e.membershipEpoch == null ? null : Vt(e.membershipEpoch), i = t?.membership_epoch ?? 0;
+function Zt(e, t, n) {
+	let r = e.membershipEpoch == null ? null : Wt(e.membershipEpoch), i = t?.membership_epoch ?? 0;
 	if (r != null && r < i) throw Error("membershipEpoch must not be lower than the scope membershipEpoch.");
 	if (r != null && n && r < (n.status === "revoked" ? n.membership_epoch + 1 : n.membership_epoch)) throw Error("membershipEpoch must not move backwards.");
 	return r ?? (n ? Math.max(i, n.membership_epoch + +(n.status === "revoked")) : i);
 }
-function Yt(e) {
+function Qt(e) {
 	return e == null || !Number.isFinite(e) ? 100 : Math.max(1, Math.min(1e3, Math.trunc(e)));
 }
 //#endregion
 //#region src/sync-fingerprint.ts
-function Xt(e) {
+function $t(e) {
 	return t("sha256").update(e, "utf-8").digest("hex");
 }
 //#endregion
 //#region ../../node_modules/.pnpm/hono@4.13.5/node_modules/hono/dist/compose.js
-var Zt = (e, t, n) => (r, i) => {
+var en = (e, t, n) => (r, i) => {
 	let a = -1;
 	return o(0);
 	async function o(s) {
@@ -1056,45 +1080,45 @@ var Zt = (e, t, n) => (r, i) => {
 		else r.finalized === !1 && n && (c = await n(r));
 		return c && (r.finalized === !1 || l) && (r.res = c), r;
 	}
-}, Qt = /* @__PURE__ */ Symbol(), $t = (e, t) => new Response(e, { headers: { "Content-Type": t.replace(/^[^;]+/, (e) => e.toLowerCase()) } }).formData(), en = 32, tn = 1e4, nn = (e) => "headers" in e, rn = async (e, t = /* @__PURE__ */ Object.create(null)) => {
-	let { all: n = !1, dot: r = !1 } = t, i = (nn(e) ? e.headers : e.raw.headers).get("Content-Type")?.split(";")[0].trim().toLowerCase();
-	return i === "multipart/form-data" || i === "application/x-www-form-urlencoded" ? an(e, {
+}, tn = /* @__PURE__ */ Symbol(), nn = (e, t) => new Response(e, { headers: { "Content-Type": t.replace(/^[^;]+/, (e) => e.toLowerCase()) } }).formData(), rn = 32, an = 1e4, on = (e) => "headers" in e, sn = async (e, t = /* @__PURE__ */ Object.create(null)) => {
+	let { all: n = !1, dot: r = !1 } = t, i = (on(e) ? e.headers : e.raw.headers).get("Content-Type")?.split(";")[0].trim().toLowerCase();
+	return i === "multipart/form-data" || i === "application/x-www-form-urlencoded" ? cn(e, {
 		all: n,
 		dot: r
 	}) : {};
 };
-async function an(e, t) {
-	if (!nn(e) && e.bodyCache.formData) return on(await e.bodyCache.formData, t);
-	let n = nn(e) ? e.headers : e.raw.headers, r = $t(await e.arrayBuffer(), n.get("Content-Type") || "");
-	nn(e) || (e.bodyCache.formData = r);
+async function cn(e, t) {
+	if (!on(e) && e.bodyCache.formData) return ln(await e.bodyCache.formData, t);
+	let n = on(e) ? e.headers : e.raw.headers, r = nn(await e.arrayBuffer(), n.get("Content-Type") || "");
+	on(e) || (e.bodyCache.formData = r);
 	let i = await r;
-	return i ? on(i, t) : {};
+	return i ? ln(i, t) : {};
 }
-function on(e, t) {
+function ln(e, t) {
 	let n = /* @__PURE__ */ Object.create(null), r = { count: 0 };
 	return e.forEach((e, r) => {
-		t.all || r.endsWith("[]") ? sn(n, r, e) : n[r] = e;
+		t.all || r.endsWith("[]") ? un(n, r, e) : n[r] = e;
 	}), t.dot && Object.entries(n).forEach(([e, t]) => {
-		e.includes(".") && (cn(n, e, t, r), delete n[e]);
+		e.includes(".") && (dn(n, e, t, r), delete n[e]);
 	}), n;
 }
-var sn = (e, t, n) => {
+var un = (e, t, n) => {
 	e[t] === void 0 ? e[t] = t.endsWith("[]") ? [n] : n : Array.isArray(e[t]) ? e[t].push(n) : e[t] = [e[t], n];
-}, cn = (e, t, n, r) => {
+}, dn = (e, t, n, r) => {
 	if (/(?:^|\.)__proto__\./.test(t)) return;
-	let i = e, a = t.split(".", en + 2);
-	a.length > en + 1 && ln(), a.forEach((e, t) => {
-		t === a.length - 1 ? i[e] = n : ((!i[e] || typeof i[e] != "object" || Array.isArray(i[e]) || i[e] instanceof File) && (r.count++ >= tn && ln(), i[e] = /* @__PURE__ */ Object.create(null)), i = i[e]);
+	let i = e, a = t.split(".", rn + 2);
+	a.length > rn + 1 && fn(), a.forEach((e, t) => {
+		t === a.length - 1 ? i[e] = n : ((!i[e] || typeof i[e] != "object" || Array.isArray(i[e]) || i[e] instanceof File) && (r.count++ >= an && fn(), i[e] = /* @__PURE__ */ Object.create(null)), i = i[e]);
 	});
-}, ln = () => {
+}, fn = () => {
 	throw Error("Nesting limit exceeded");
-}, un = (e) => {
+}, pn = (e) => {
 	let t = e.split("/");
 	return t[0] === "" && t.shift(), t;
-}, dn = (e) => {
-	let { groups: t, path: n } = fn(e);
-	return pn(un(n), t);
-}, fn = (e) => {
+}, mn = (e) => {
+	let { groups: t, path: n } = hn(e);
+	return gn(pn(n), t);
+}, hn = (e) => {
 	let t = [];
 	return e = e.replace(/\{[^}]+\}/g, (e, n) => {
 		let r = `@${n}`;
@@ -1103,7 +1127,7 @@ var sn = (e, t, n) => {
 		groups: t,
 		path: e
 	};
-}, pn = (e, t) => {
+}, gn = (e, t) => {
 	for (let n = t.length - 1; n >= 0; n--) {
 		let [r] = t[n];
 		for (let i = e.length - 1; i >= 0; i--) if (e[i].includes(r)) {
@@ -1112,12 +1136,12 @@ var sn = (e, t, n) => {
 		}
 	}
 	return e;
-}, mn = {}, hn = (e, t) => {
+}, _n = {}, vn = (e, t) => {
 	if (e === "*") return "*";
 	let n = e.match(/^\:([^\{\}]+)(?:\{(.+)\})?$/);
 	if (n) {
 		let r = `${e}#${t}`;
-		return mn[r] || (mn[r] = n[2] ? t && t[0] !== ":" && t[0] !== "*" ? [
+		return _n[r] || (_n[r] = n[2] ? t && t[0] !== ":" && t[0] !== "*" ? [
 			r,
 			n[1],
 			RegExp(`^${n[2]}(?=/${t})`)
@@ -1129,10 +1153,10 @@ var sn = (e, t, n) => {
 			e,
 			n[1],
 			!0
-		]), mn[r];
+		]), _n[r];
 	}
 	return null;
-}, gn = (e, t) => {
+}, yn = (e, t) => {
 	try {
 		return t(e);
 	} catch {
@@ -1144,21 +1168,21 @@ var sn = (e, t, n) => {
 			}
 		});
 	}
-}, _n = (e) => gn(e, decodeURI), vn = (e) => {
+}, bn = (e) => yn(e, decodeURI), xn = (e) => {
 	let t = e.url, n = t.indexOf("/", t.indexOf(":") + 4), r = n;
 	for (; r < t.length; r++) {
 		let e = t.charCodeAt(r);
 		if (e === 37) {
 			let e = t.indexOf("?", r), i = t.indexOf("#", r), a = e === -1 ? i === -1 ? void 0 : i : i === -1 ? e : Math.min(e, i), o = t.slice(n, a);
-			return _n(o.includes("%25") ? o.replace(/%25/g, "%2525") : o);
+			return bn(o.includes("%25") ? o.replace(/%25/g, "%2525") : o);
 		}
 		if (e === 63 || e === 35) break;
 	}
 	return t.slice(n, r);
-}, yn = (e) => {
-	let t = vn(e);
+}, Sn = (e) => {
+	let t = xn(e);
 	return t.length > 1 && t.at(-1) === "/" ? t.slice(0, -1) : t;
-}, J = (e, t, ...n) => (n.length && (t = J(t, ...n)), `${e?.[0] === "/" ? "" : "/"}${e}${t === "/" ? "" : `${e?.at(-1) === "/" ? "" : "/"}${t?.[0] === "/" ? t.slice(1) : t}`}`), bn = (e) => {
+}, q = (e, t, ...n) => (n.length && (t = q(t, ...n)), `${e?.[0] === "/" ? "" : "/"}${e}${t === "/" ? "" : `${e?.at(-1) === "/" ? "" : "/"}${t?.[0] === "/" ? t.slice(1) : t}`}`), Cn = (e) => {
 	if (e.charCodeAt(e.length - 1) !== 63 || !e.includes(":")) return null;
 	let t = e.split("/"), n = [], r = "";
 	return t.forEach((e) => {
@@ -1171,7 +1195,7 @@ var sn = (e, t, n) => {
 			} else r += "/" + e;
 		}
 	}), n.filter((e, t, n) => n.indexOf(e) === t);
-}, xn = (e) => e.indexOf("%") === -1 ? e : gn(e, En), Sn = (e) => (e.indexOf("+") !== -1 && (e = e.replace(/\+/g, " ")), xn(e)), Cn = (e, t, n) => {
+}, wn = (e) => e.indexOf("%") === -1 ? e : yn(e, kn), Tn = (e) => (e.indexOf("+") !== -1 && (e = e.replace(/\+/g, " ")), wn(e)), En = (e, t, n) => {
 	let r = e.indexOf("#", 8);
 	r !== -1 && (e = e.slice(0, r));
 	let i;
@@ -1182,7 +1206,7 @@ var sn = (e, t, n) => {
 			let r = e.charCodeAt(n + t.length + 1);
 			if (r === 61) {
 				let r = n + t.length + 2, i = e.indexOf("&", r);
-				return Sn(e.slice(r, i === -1 ? void 0 : i));
+				return Tn(e.slice(r, i === -1 ? void 0 : i));
 			}
 			if (r == 38 || isNaN(r)) return "";
 			n = e.indexOf(`&${t}`, n + 1);
@@ -1196,12 +1220,12 @@ var sn = (e, t, n) => {
 		let t = e.indexOf("&", o + 1), r = e.indexOf("=", o);
 		r > t && t !== -1 && (r = -1);
 		let s = e.slice(o + 1, r === -1 ? t === -1 ? void 0 : t : r);
-		if (i && (s = Sn(s)), o = t, s === "") continue;
+		if (i && (s = Tn(s)), o = t, s === "") continue;
 		let c;
-		r === -1 ? c = "" : (c = e.slice(r + 1, t === -1 ? void 0 : t), i && (c = Sn(c))), n ? (a[s] && Array.isArray(a[s]) || (a[s] = []), a[s].push(c)) : a[s] ??= c;
+		r === -1 ? c = "" : (c = e.slice(r + 1, t === -1 ? void 0 : t), i && (c = Tn(c))), n ? (a[s] && Array.isArray(a[s]) || (a[s] = []), a[s].push(c)) : a[s] ??= c;
 	}
 	return t ? a[t] : a;
-}, wn = Cn, Tn = (e, t) => Cn(e, t, !0), En = decodeURIComponent, Dn = class {
+}, Dn = En, On = (e, t) => En(e, t, !0), kn = decodeURIComponent, An = class {
 	raw;
 	#e;
 	#t;
@@ -1216,13 +1240,13 @@ var sn = (e, t, n) => {
 	}
 	#n(e) {
 		let t = this.#t[0][this.routeIndex]?.[1][e], n = this.#i(t);
-		return n && xn(n);
+		return n && wn(n);
 	}
 	#r() {
 		let e = {}, t = Object.keys(this.#t[0][this.routeIndex]?.[1] ?? {});
 		for (let n of t) {
 			let t = this.#i(this.#t[0][this.routeIndex][1][n]);
-			t !== void 0 && (e[n] = xn(t));
+			t !== void 0 && (e[n] = wn(t));
 		}
 		return e;
 	}
@@ -1230,10 +1254,10 @@ var sn = (e, t, n) => {
 		return this.#t[1] ? this.#t[1][e] : e;
 	}
 	query(e) {
-		return wn(this.url, e);
+		return Dn(this.url, e);
 	}
 	queries(e) {
-		return Tn(this.url, e);
+		return On(this.url, e);
 	}
 	header(e) {
 		if (e) return this.raw.headers.get(e) ?? void 0;
@@ -1243,7 +1267,7 @@ var sn = (e, t, n) => {
 		}), t;
 	}
 	async parseBody(e) {
-		return rn(this, e);
+		return sn(this, e);
 	}
 	#a = (e) => {
 		let { bodyCache: t, raw: n } = this, r = t[e];
@@ -1281,7 +1305,7 @@ var sn = (e, t, n) => {
 	get method() {
 		return this.raw.method;
 	}
-	get [Qt]() {
+	get [tn]() {
 		return this.#t;
 	}
 	get matchedRoutes() {
@@ -1290,14 +1314,14 @@ var sn = (e, t, n) => {
 	get routePath() {
 		return this.#t[0].map(([[, e]]) => e)[this.routeIndex].path;
 	}
-}, On = {
+}, jn = {
 	Stringify: 1,
 	BeforeStream: 2,
 	Stream: 3
-}, kn = (e, t) => {
+}, Mn = (e, t) => {
 	let n = new String(e);
 	return n.isEscaped = !0, n.callbacks = t, n;
-}, An = async (e, t, n, r, i) => {
+}, Nn = async (e, t, n, r, i) => {
 	typeof e == "object" && !(e instanceof String) && (e instanceof Promise || (e = e.toString()), e instanceof Promise && (e = await e));
 	let a = e.callbacks;
 	if (!a?.length) return Promise.resolve(e);
@@ -1306,12 +1330,12 @@ var sn = (e, t, n) => {
 		phase: t,
 		buffer: i,
 		context: r
-	}))).then((e) => Promise.all(e.filter(Boolean).map((e) => An(e, t, !1, r, i))).then(() => i[0]));
-	return n ? kn(await o, a) : o;
-}, jn = "text/plain; charset=UTF-8", Mn = (e, t) => ({
+	}))).then((e) => Promise.all(e.filter(Boolean).map((e) => Nn(e, t, !1, r, i))).then(() => i[0]));
+	return n ? Mn(await o, a) : o;
+}, Pn = "text/plain; charset=UTF-8", Fn = (e, t) => ({
 	"Content-Type": e,
 	...t
-}), Nn = (e, t) => new Response(e, t), Pn = class {
+}), J = (e, t) => new Response(e, t), In = class {
 	#e;
 	#t;
 	env = {};
@@ -1331,7 +1355,7 @@ var sn = (e, t, n) => {
 		this.#e = e, t && (this.#i = t.executionCtx, this.env = t.env, this.#c = t.notFoundHandler, this.#d = t.path, this.#u = t.matchResult);
 	}
 	get req() {
-		return this.#t ??= new Dn(this.#e, this.#d, this.#u), this.#t;
+		return this.#t ??= new An(this.#e, this.#d, this.#u), this.#t;
 	}
 	get event() {
 		if (this.#i && "respondWith" in this.#i) return this.#i;
@@ -1342,11 +1366,11 @@ var sn = (e, t, n) => {
 		throw Error("This context has no ExecutionContext");
 	}
 	get res() {
-		return this.#a ||= Nn(null, { headers: this.#l ??= new Headers() });
+		return this.#a ||= J(null, { headers: this.#l ??= new Headers() });
 	}
 	set res(e) {
 		if (this.#a && e) {
-			e = Nn(e.body, e);
+			e = J(e.body, e);
 			for (let [t, n] of this.#a.headers.entries()) if (t !== "content-type") {
 				if (t === "set-cookie") {
 					let t = this.#a.headers.getSetCookie();
@@ -1364,7 +1388,7 @@ var sn = (e, t, n) => {
 		this.#s = e;
 	};
 	header = (e, t, n) => {
-		this.finalized && (this.#a = Nn(this.#a.body, this.#a));
+		this.finalized && (this.#a = J(this.#a.body, this.#a));
 		let r = this.#a ? this.#a.headers : this.#l ??= new Headers();
 		t === void 0 ? r.delete(e) : n?.append ? r.append(e, t) : r.set(e, t);
 	};
@@ -1401,25 +1425,25 @@ var sn = (e, t, n) => {
 				}
 			}
 		}
-		return Nn(e, {
+		return J(e, {
 			status: typeof t == "number" ? t : t?.status ?? this.#r,
 			headers: r ?? n
 		});
 	}
 	newResponse = (...e) => this.#f(...e);
 	body = (e, t, n) => this.#f(e, t, n);
-	text = (e, t, n) => !this.#l && !this.#r && !t && !n && !this.finalized ? new Response(e) : this.#f(e, t, Mn(jn, n));
-	json = (e, t, n) => this.#f(JSON.stringify(e), t, Mn("application/json", n));
+	text = (e, t, n) => !this.#l && !this.#r && !t && !n && !this.finalized ? new Response(e) : this.#f(e, t, Fn(Pn, n));
+	json = (e, t, n) => this.#f(JSON.stringify(e), t, Fn("application/json", n));
 	html = (e, t, n) => {
-		let r = (e) => this.#f(e, t, Mn("text/html; charset=UTF-8", n));
-		return typeof e == "object" ? An(e, On.Stringify, !1, {}).then(r) : r(e);
+		let r = (e) => this.#f(e, t, Fn("text/html; charset=UTF-8", n));
+		return typeof e == "object" ? Nn(e, jn.Stringify, !1, {}).then(r) : r(e);
 	};
 	redirect = (e, t) => {
 		let n = String(e);
 		return this.header("Location", /[^\x00-\xFF]/.test(n) ? encodeURI(n) : n), this.newResponse(null, t ?? 302);
 	};
-	notFound = () => (this.#c ??= () => Nn(), this.#c(this));
-}, Fn = [
+	notFound = () => (this.#c ??= () => J(), this.#c(this));
+}, Ln = [
 	"get",
 	"post",
 	"put",
@@ -1427,13 +1451,13 @@ var sn = (e, t, n) => {
 	"options",
 	"patch",
 	"query"
-], In = "Can not add a route since the matcher is already built.", Ln = class extends Error {}, Rn = "__COMPOSED_HANDLER", zn = (e) => e.text("404 Not Found", 404), Bn = (e, t) => {
+], Rn = "Can not add a route since the matcher is already built.", zn = class extends Error {}, Bn = "__COMPOSED_HANDLER", Vn = (e) => e.text("404 Not Found", 404), Hn = (e, t) => {
 	if ("getResponse" in e) {
 		let n = e.getResponse();
 		return t.newResponse(n.body, n);
 	}
 	return console.error(e), t.text("Internal Server Error", 500);
-}, Vn = class e {
+}, Un = class e {
 	get;
 	post;
 	put;
@@ -1450,7 +1474,7 @@ var sn = (e, t, n) => {
 	#e = "/";
 	routes = [];
 	constructor(e = {}) {
-		[...Fn, "all"].forEach((e) => {
+		[...Ln, "all"].forEach((e) => {
 			this[e] = (t, ...n) => (typeof t == "string" ? this.#e = t : this.#r(e, this.#e, t), n.forEach((t) => {
 				this.#r(e, this.#e, t);
 			}), this);
@@ -1466,7 +1490,7 @@ var sn = (e, t, n) => {
 			this.#r("ALL", this.#e, e);
 		}), this);
 		let { strict: t, ...n } = e;
-		Object.assign(this, n), this.getPath = t ?? !0 ? e.getPath ?? vn : yn;
+		Object.assign(this, n), this.getPath = t ?? !0 ? e.getPath ?? xn : Sn;
 	}
 	#t() {
 		let t = new e({
@@ -1475,18 +1499,18 @@ var sn = (e, t, n) => {
 		});
 		return t.errorHandler = this.errorHandler, t.#n = this.#n, t.routes = this.routes, t;
 	}
-	#n = zn;
-	errorHandler = Bn;
+	#n = Vn;
+	errorHandler = Hn;
 	route(e, t) {
 		let n = this.basePath(e);
 		return t.routes.map((e) => {
 			let r;
-			t.errorHandler === Bn ? r = e.handler : (r = async (n, r) => (await Zt([], t.errorHandler)(n, () => e.handler(n, r))).res, r[Rn] = e.handler), n.#r(e.method, e.path, r, e.basePath);
+			t.errorHandler === Hn ? r = e.handler : (r = async (n, r) => (await en([], t.errorHandler)(n, () => e.handler(n, r))).res, r[Bn] = e.handler), n.#r(e.method, e.path, r, e.basePath);
 		}), this;
 	}
 	basePath(e) {
 		let t = this.#t();
-		return t._basePath = J(this._basePath, e), t;
+		return t._basePath = q(this._basePath, e), t;
 	}
 	onError = (e) => (this.errorHandler = e, this);
 	notFound = (e) => (this.#n = e, this);
@@ -1504,21 +1528,21 @@ var sn = (e, t, n) => {
 			return [e.env, t];
 		};
 		return r ||= (() => {
-			let t = J(this._basePath, e), n = t === "/" ? 0 : t.length;
+			let t = q(this._basePath, e), n = t === "/" ? 0 : t.length;
 			return (e) => {
 				let t = new URL(e.url);
 				return t.pathname = this.getPath(e).slice(n) || "/", new Request(t, e);
 			};
-		})(), this.#r("ALL", J(e, "*"), async (e, n) => {
+		})(), this.#r("ALL", q(e, "*"), async (e, n) => {
 			let i = await t(r(e.req.raw), ...a(e));
 			if (i) return i;
 			await n();
 		}), this;
 	}
 	#r(e, t, n, r) {
-		e = e.toUpperCase(), t = J(this._basePath, t);
+		e = e.toUpperCase(), t = q(this._basePath, t);
 		let i = {
-			basePath: r === void 0 ? this._basePath : J(this._basePath, r),
+			basePath: r === void 0 ? this._basePath : q(this._basePath, r),
 			path: t,
 			method: e,
 			handler: n
@@ -1531,7 +1555,7 @@ var sn = (e, t, n) => {
 	}
 	#a(e, t, n, r) {
 		if (r === "HEAD") return (async () => new Response(null, await this.#a(e, t, n, "GET")))();
-		let i = this.getPath(e, { env: n }), a = this.router.match(r, i), o = new Pn(e, {
+		let i = this.getPath(e, { env: n }), a = this.router.match(r, i), o = new In(e, {
 			path: i,
 			matchResult: a,
 			env: n,
@@ -1549,7 +1573,7 @@ var sn = (e, t, n) => {
 			}
 			return e instanceof Promise ? e.then((e) => e || (o.finalized ? o.res : this.#n(o))).catch((e) => this.#i(e, o)) : e ?? this.#n(o);
 		}
-		let s = Zt(a[0], this.errorHandler, this.#n);
+		let s = en(a[0], this.errorHandler, this.#n);
 		return (async () => {
 			try {
 				let e = await s(o);
@@ -1561,19 +1585,19 @@ var sn = (e, t, n) => {
 		})();
 	}
 	fetch = (e, ...t) => this.#a(e, t[1], t[0], e.method);
-	request = (e, t, n, r) => e instanceof Request ? this.fetch(t ? new Request(e, t) : e, n, r) : (e = e.toString(), this.fetch(new Request(/^https?:\/\//.test(e) ? e : `http://localhost${J("/", e)}`, t), n, r));
+	request = (e, t, n, r) => e instanceof Request ? this.fetch(t ? new Request(e, t) : e, n, r) : (e = e.toString(), this.fetch(new Request(/^https?:\/\//.test(e) ? e : `http://localhost${q("/", e)}`, t), n, r));
 	fire = () => {
 		addEventListener("fetch", (e) => {
 			e.respondWith(this.#a(e.request, e, void 0, e.request.method));
 		});
 	};
-}, Y = () => /* @__PURE__ */ Object.create(null), Hn = [];
-function Un(e, t) {
+}, Y = () => /* @__PURE__ */ Object.create(null), Wn = [];
+function Gn(e, t) {
 	let n = this.buildAllMatchers(), r = ((e, t) => {
 		let r = n[e] || n.ALL, i = r[2][t];
 		if (i) return i;
 		let a = t.match(r[0]);
-		if (!a) return [[], Hn];
+		if (!a) return [[], Wn];
 		let o = a.indexOf("", 1);
 		return [r[1][o], a];
 	});
@@ -1581,11 +1605,11 @@ function Un(e, t) {
 }
 //#endregion
 //#region ../../node_modules/.pnpm/hono@4.13.5/node_modules/hono/dist/router/reg-exp-router/node.js
-var Wn = "[^/]+", Gn = "(?:|/.*)", Kn = /* @__PURE__ */ Symbol(), qn = /* @__PURE__ */ new Set(".\\+*[^]$()");
-function Jn(e, t) {
+var Kn = "[^/]+", qn = "(?:|/.*)", Jn = /* @__PURE__ */ Symbol(), Yn = /* @__PURE__ */ new Set(".\\+*[^]$()");
+function Xn(e, t) {
 	return e.length === 1 ? t.length === 1 ? e < t ? -1 : 1 : -1 : t.length === 1 ? 1 : e === ".*" || e === "(?:|/.*)" ? t === "(?:|/.*)" ? -1 : 1 : t === ".*" || t === "(?:|/.*)" ? -1 : e === "[^/]+" ? 1 : t === "[^/]+" ? -1 : e.length === t.length ? e < t ? -1 : 1 : t.length - e.length;
 }
-var Yn = class e {
+var Zn = class e {
 	#e;
 	#t;
 	#n = Y();
@@ -1599,41 +1623,41 @@ var Yn = class e {
 			] : [
 				"",
 				"",
-				Wn
+				Kn
 			] : null : s === "/*" ? [
 				"",
 				"",
-				Gn
+				qn
 			] : s.match(/^\:([^\{\}]+)(?:\{(.+)\})?$/), l;
 			if (c) {
 				let t = c[1], n = c[2] || "[^/]+";
-				if (t && c[2] && (n === ".*" || (n = n.replace(/^\((?!\?:)(?=[^)]+\)$)/, "(?:"), /\((?!\?:)/.test(n)) || n.length === 1 && qn.has(n))) throw Kn;
+				if (t && c[2] && (n === ".*" || (n = n.replace(/^\((?!\?:)(?=[^)]+\)$)/, "(?:"), /\((?!\?:)/.test(n)) || n.length === 1 && Yn.has(n))) throw Jn;
 				if (l = o.#n[n], !l) {
 					if (n !== ".*" && n !== "(?:|/.*)") {
-						for (let e in o.#n) if ((n.length > 1 || e.length > 1) && e !== ".*" && e !== "(?:|/.*)") throw Kn;
+						for (let e in o.#n) if ((n.length > 1 || e.length > 1) && e !== ".*" && e !== "(?:|/.*)") throw Jn;
 					}
 					l = o.#n[n] = new e();
 				}
 				t !== "" && (l.#t ??= i.varIndex++, r.push([t, l.#t]));
 			} else if (l = o.#n[s], !l) {
-				for (let e in o.#n) if (e.length > 1 && e !== ".*" && e !== "(?:|/.*)") throw Kn;
+				for (let e in o.#n) if (e.length > 1 && e !== ".*" && e !== "(?:|/.*)") throw Jn;
 				l = o.#n[s] = new e();
 			}
 			o = l;
 		}
-		if (o.#e !== void 0) throw Kn;
+		if (o.#e !== void 0) throw Jn;
 		o.#e = a ? -1 : n;
 	}
 	buildRegExpStr() {
-		let e = Object.keys(this.#n).sort(Jn).map((e) => {
+		let e = Object.keys(this.#n).sort(Xn).map((e) => {
 			let t = this.#n[e], n = t.buildRegExpStr();
-			return n === "" ? "" : (typeof t.#t == "number" ? `(${e})@${t.#t}` : qn.has(e) ? `\\${e}` : e) + n;
+			return n === "" ? "" : (typeof t.#t == "number" ? `(${e})@${t.#t}` : Yn.has(e) ? `\\${e}` : e) + n;
 		}).filter(Boolean);
 		return typeof this.#e == "number" && this.#e !== -1 && e.unshift(`#${this.#e}`), e.length === 0 ? "" : e.length === 1 ? e[0] : "(?:" + e.join("|") + ")";
 	}
-}, Xn = class {
+}, Qn = class {
 	#e = { varIndex: 0 };
-	#t = new Yn();
+	#t = new Zn();
 	#n = 0;
 	paths = Y();
 	insert(e, t) {
@@ -1673,33 +1697,33 @@ var Yn = class e {
 			r
 		];
 	}
-}, Zn = Y();
-function Qn(e) {
-	return Zn[e] ??= RegExp(`^${e.replace(/\/:[^/{}]+(?:\{\[\^\/]\+})?(?=[/{]|$)|\/?\*$|([.\\+*[^\]$()?{}|])/g, (e, t) => t ? `\\${t}` : e === "/*" ? Gn : e === "*" ? ".*" : `/:${Wn}`)}$`);
+}, $n = Y();
+function er(e) {
+	return $n[e] ??= RegExp(`^${e.replace(/\/:[^/{}]+(?:\{\[\^\/]\+})?(?=[/{]|$)|\/?\*$|([.\\+*[^\]$()?{}|])/g, (e, t) => t ? `\\${t}` : e === "/*" ? qn : e === "*" ? ".*" : `/:${Kn}`)}$`);
 }
-function $n(e, t) {
-	for (let n of Object.keys(e).sort((e, t) => t.length - e.length)) if (Qn(n).test(t)) return [...e[n]];
+function tr(e, t) {
+	for (let n of Object.keys(e).sort((e, t) => t.length - e.length)) if (er(n).test(t)) return [...e[n]];
 }
-var er = class {
+var nr = class {
 	name = "RegExpRouter";
 	#e;
 	#t;
 	#n;
 	constructor() {
-		this.#e = { ALL: Y() }, this.#t = { ALL: Y() }, this.#n = { ALL: new Xn() };
+		this.#e = { ALL: Y() }, this.#t = { ALL: Y() }, this.#n = { ALL: new Qn() };
 	}
 	#r(e, t) {
 		try {
 			this.#n[e].insert(t, !/\*|\/:/.test(t));
 		} catch (e) {
-			throw e === Kn ? new Ln(t) : e;
+			throw e === Jn ? new zn(t) : e;
 		}
 	}
 	add(e, t, n) {
 		let r = this.#e, i = this.#t;
-		if (!r) throw Error(In);
+		if (!r) throw Error(Rn);
 		if (!r[e]) {
-			this.#n[e] = new Xn();
+			this.#n[e] = new Qn();
 			for (let t of [r, i]) {
 				t[e] = Y();
 				for (let n in t.ALL) t[e][n] = [...t.ALL[n]], this.#r(e, n);
@@ -1708,26 +1732,26 @@ var er = class {
 		t === "/*" && (t = "*");
 		let a = e === "ALL" ? Object.keys(r) : [e];
 		if (/\*$/.test(t)) {
-			let e = Qn(t);
-			for (let e of a) r[e][t] || (this.#r(e, t), r[e][t] = $n(r[e], t) || $n(r.ALL, t) || []);
+			let e = er(t);
+			for (let e of a) r[e][t] || (this.#r(e, t), r[e][t] = tr(r[e], t) || tr(r.ALL, t) || []);
 			for (let o of [r, i]) for (let r of a) for (let i in o[r]) e.test(i) && o[r][i].push([n, t]);
 			return;
 		}
-		let o = bn(t) || [t];
-		for (let e of o) for (let t of a) i[t][e] || (this.#r(t, e), i[t][e] = $n(r[t], e) || $n(r.ALL, e) || []), i[t][e].push([n, e]);
+		let o = Cn(t) || [t];
+		for (let e of o) for (let t of a) i[t][e] || (this.#r(t, e), i[t][e] = tr(r[t], e) || tr(r.ALL, e) || []), i[t][e].push([n, e]);
 	}
-	match = Un;
+	match = Gn;
 	buildAllMatchers() {
 		let e = Y();
 		for (let t of Object.keys(this.#t)) e[t] = this.#i(t);
-		return this.#e = this.#t = this.#n = void 0, Zn = Y(), e;
+		return this.#e = this.#t = this.#n = void 0, $n = Y(), e;
 	}
 	#i(e) {
 		let t = this.#e[e], n = this.#t[e], r = this.#n[e], i = Y(), a = [], [o, s, c] = r.buildRegExp();
 		for (let e of [t, n]) for (let t in e) {
 			let n = e[t], o = r.paths[t];
 			if (!o) {
-				i[t] = [n.map(([e]) => [e, Y()]), Hn];
+				i[t] = [n.map(([e]) => [e, Y()]), Wn];
 				continue;
 			}
 			a[o[0]] = n.map(([e, t]) => [e, r.paths[t][1].reduceRight((e, [t], n) => (e[t] = c[o[1][n][1]], e), Y())]);
@@ -1738,7 +1762,7 @@ var er = class {
 			i
 		];
 	}
-}, tr = class {
+}, rr = class {
 	name = "SmartRouter";
 	#e = [];
 	#t = [];
@@ -1746,7 +1770,7 @@ var er = class {
 		this.#e = e.routers;
 	}
 	add(e, t, n) {
-		if (!this.#t) throw Error(In);
+		if (!this.#t) throw Error(Rn);
 		this.#t.push([
 			e,
 			t,
@@ -1762,7 +1786,7 @@ var er = class {
 				for (let e = 0, t = r.length; e < t; e++) i.add(...r[e]);
 				o = i.match(e, t);
 			} catch (e) {
-				if (e instanceof Ln) continue;
+				if (e instanceof zn) continue;
 				throw e;
 			}
 			this.match = i.match.bind(i), this.#e = [i], this.#t = void 0;
@@ -1775,22 +1799,22 @@ var er = class {
 		if (this.#t || this.#e.length !== 1) throw Error("No active router has been determined yet.");
 		return this.#e[0];
 	}
-}, nr = Y(), rr = 0, ir = class e {
+}, ir = Y(), ar = 0, or = class e {
 	#e = [];
 	#t = Y();
 	#n = [];
 	#r;
-	#i = nr;
+	#i = ir;
 	insert(t, n, r) {
-		let i = this, a = dn(n), o = /* @__PURE__ */ new Set(), s = 0;
+		let i = this, a = mn(n), o = /* @__PURE__ */ new Set(), s = 0;
 		for (let t of a) {
-			let n = a[++s], r = hn(t, n) || (n === void 0 && t && t.indexOf("*") === t.length - 1 ? t : null), c = Array.isArray(r), l = c ? r[0] : r || t, u = i.#t[l] ||= new e();
+			let n = a[++s], r = vn(t, n) || (n === void 0 && t && t.indexOf("*") === t.length - 1 ? t : null), c = Array.isArray(r), l = c ? r[0] : r || t, u = i.#t[l] ||= new e();
 			r && !u.#r && (u.#r = r, i.#n.push(u)), i = u, c && o.add(r[1]);
 		}
 		i.#e.push({ [t]: {
 			handler: r,
 			possibleKeys: [...o],
-			score: ++rr
+			score: ++ar
 		} });
 	}
 	#a(e, t, n, r, i) {
@@ -1807,15 +1831,15 @@ var er = class {
 	}
 	search(e, t) {
 		let n = [];
-		this.#i = nr;
-		let r = [this], i = un(t), a = [], o = i.length, s = null;
+		this.#i = ir;
+		let r = [this], i = pn(t), a = [], o = i.length, s = null;
 		for (let c = 0; c < o; c++) {
 			let l = i[c], u = c === o - 1, d = [];
 			for (let f = 0, p = r.length; f < p; f++) {
 				let p = r[f], m = p.#t[l];
 				m && (m.#i = p.#i, u ? (m.#t["*"] && this.#a(n, m.#t["*"], e, p.#i), this.#a(n, m, e, p.#i)) : d.push(m));
 				for (let r of p.#n) {
-					let f = r.#r, m = p.#i === nr ? {} : { ...p.#i };
+					let f = r.#r, m = p.#i === ir ? {} : { ...p.#i };
 					if (typeof f == "string") {
 						(f === "*" || l.startsWith(f.slice(0, -1))) && (this.#a(n, r, e, p.#i), f === "*" && (r.#i = m, d.push(r)));
 						continue;
@@ -1849,52 +1873,52 @@ var er = class {
 		}
 		return n[1] && n.sort((e, t) => e.score - t.score), [n.map(({ handler: e, params: t }) => [e, t])];
 	}
-}, ar = class {
+}, sr = class {
 	name = "TrieRouter";
-	#e = new ir();
+	#e = new or();
 	add(e, t, n) {
-		for (let r of bn(t) || [t]) this.#e.insert(e, r, n);
+		for (let r of Cn(t) || [t]) this.#e.insert(e, r, n);
 	}
 	match(e, t) {
 		return this.#e.search(e, t);
 	}
-}, or = class extends Vn {
+}, cr = class extends Un {
 	constructor(e = {}) {
-		super(e), this.router = e.router ?? new tr({ routers: [new er(), new ar()] });
+		super(e), this.router = e.router ?? new rr({ routers: [new nr(), new sr()] });
 	}
 };
 //#endregion
 //#region src/coordinator-invites.ts
-function sr(e) {
+function lr(e) {
 	let t = "";
 	for (let n of e) t += String.fromCharCode(n);
 	return btoa(t);
 }
-function cr(e) {
+function ur(e) {
 	let t = atob(e), n = new Uint8Array(t.length);
 	for (let e = 0; e < t.length; e += 1) n[e] = t.charCodeAt(e);
 	return n;
 }
-function lr(e) {
+function dr(e) {
 	return e.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
-function ur(e) {
+function fr(e) {
 	let t = e.replace(/-/g, "+").replace(/_/g, "/");
 	return t + "=".repeat((4 - t.length % 4) % 4);
 }
-function dr(e) {
+function pr(e) {
 	let t = JSON.stringify(e);
-	return lr(sr(new TextEncoder().encode(t)));
+	return dr(lr(new TextEncoder().encode(t)));
 }
-function fr(e) {
-	let t = new TextDecoder().decode(cr(ur(e))), n = JSON.parse(t);
+function mr(e) {
+	let t = new TextDecoder().decode(ur(fr(e))), n = JSON.parse(t);
 	if (typeof n != "object" || !n) throw Error("invalid invite payload");
 	return n;
 }
-function pr(e) {
+function hr(e) {
 	return `codemem://join?invite=${encodeURIComponent(e)}`;
 }
-function mr(e) {
+function gr(e) {
 	let t = e.trim();
 	if (t.startsWith("codemem://")) {
 		let e = new URL(t).searchParams.get("invite") ?? "";
@@ -1905,41 +1929,41 @@ function mr(e) {
 }
 //#endregion
 //#region src/project-invite-acceptance.ts
-var hr = "pending_setup", gr = "project_sync_enablement_failed", _r = "Invitation was accepted, but sync could not be enabled. Make the codemem config writable, then retry.", vr = class extends Error {
-	code = gr;
-	detail = _r;
+var _r = "pending_setup", vr = "project_sync_enablement_failed", yr = "Invitation was accepted, but sync could not be enabled. Make the codemem config writable, then retry.", br = class extends Error {
+	code = vr;
+	detail = yr;
 	constructor(e) {
-		super(_r, e), this.name = "ProjectSyncEnablementError";
+		super(yr, e), this.name = "ProjectSyncEnablementError";
 	}
 };
-function yr(e) {
+function xr(e) {
 	return typeof e == "object" && !!e && "code" in e && e.code === "project_sync_enablement_failed" && "detail" in e && e.detail === "Invitation was accepted, but sync could not be enabled. Make the codemem config writable, then retry.";
 }
 //#endregion
 //#region src/project-share-intent.ts
-var br = "existing_and_future";
-function xr(e) {
+var Sr = "existing_and_future";
+function Cr(e) {
 	return t("sha256").update(JSON.stringify(e)).digest("hex");
 }
-function Sr(e) {
-	return xr({
+function wr(e) {
+	return Cr({
 		v: 1,
-		historyPolicy: br,
+		historyPolicy: Sr,
 		projects: e.map((e) => ({
 			canonicalIdentity: e.canonicalIdentity,
 			existingMemoryCount: e.existingMemoryCount
 		})).toSorted((e, t) => e.canonicalIdentity.localeCompare(t.canonicalIdentity))
 	});
 }
-function Cr(e) {
-	return Sr(e.map((e) => ({
+function Tr(e) {
+	return wr(e.map((e) => ({
 		canonicalIdentity: e.canonical_identity,
 		displayName: e.display_name,
 		identitySource: "coordinator_acceptance",
 		existingMemoryCount: e.existing_memory_count
 	})));
 }
-function wr(e) {
+function Er(e) {
 	if (!Array.isArray(e) || e.length === 0 || e.length > 100) throw Error("operation_intent_invalid");
 	let t = e.map((e) => {
 		if (!e || typeof e != "object" || Array.isArray(e)) throw Error("operation_intent_invalid");
@@ -1947,7 +1971,7 @@ function wr(e) {
 		if (typeof t.canonical_identity != "string" || typeof t.display_name != "string") throw Error("operation_intent_invalid");
 		let n = t.canonical_identity, r = n.trim(), i = t.display_name, a;
 		try {
-			a = L(i, "project_name");
+			a = I(i, "project_name");
 		} catch {
 			throw Error("operation_intent_invalid");
 		}
@@ -1964,20 +1988,20 @@ function wr(e) {
 }
 //#endregion
 //#region ../../node_modules/.pnpm/limiter@3.0.0/node_modules/limiter/dist/esm/clock.js
-function Tr(e) {
+function Dr(e) {
 	let t = performance.now() * .001, n = Math.floor(t), r = Math.floor(t % 1 * 1e9);
 	return e != null && (n -= e[0], r -= e[1], r < 0 && (n--, r += 1e9)), [n, r];
 }
-function Er() {
-	let [e, t] = Tr();
+function Or() {
+	let [e, t] = Dr();
 	return e * 1e3 + Math.floor(t / 1e6);
 }
-function Dr(e) {
+function kr(e) {
 	return new Promise((t) => setTimeout(t, e));
 }
 //#endregion
 //#region ../../node_modules/.pnpm/limiter@3.0.0/node_modules/limiter/dist/esm/TokenBucket.js
-var Or = class {
+var Ar = class {
 	bucketSize;
 	tokensPerInterval;
 	interval;
@@ -2004,13 +2028,13 @@ var Or = class {
 			default: throw Error("Invalid interval " + n);
 		}
 		else this.interval = n;
-		this.parentBucket = r, this.content = 0, this.lastDrip = Er();
+		this.parentBucket = r, this.content = 0, this.lastDrip = Or();
 	}
 	async removeTokens(e) {
 		if (this.bucketSize === 0) return Infinity;
 		if (e > this.bucketSize) throw Error(`Requested tokens ${e} exceeds bucket size ${this.bucketSize}`);
 		this.drip();
-		let t = async () => (await Dr(Math.ceil((e - this.content) * (this.interval / this.tokensPerInterval))), this.removeTokens(e));
+		let t = async () => (await kr(Math.ceil((e - this.content) * (this.interval / this.tokensPerInterval))), this.removeTokens(e));
 		if (e > this.content) return t();
 		if (this.parentBucket != null) {
 			let n = await this.parentBucket.removeTokens(e);
@@ -2026,30 +2050,30 @@ var Or = class {
 			let e = this.content;
 			return this.content = this.bucketSize, this.content > e;
 		}
-		let e = Er(), t = Math.max(e - this.lastDrip, 0);
+		let e = Or(), t = Math.max(e - this.lastDrip, 0);
 		this.lastDrip = e;
 		let n = t * (this.tokensPerInterval / this.interval), r = this.content;
 		return this.content = Math.min(this.content + n, this.bucketSize), Math.floor(this.content) > Math.floor(r);
 	}
-}, kr = class {
+}, jr = class {
 	tokenBucket;
 	curIntervalStart;
 	tokensThisInterval;
 	fireImmediately;
 	constructor({ tokensPerInterval: e, interval: t, fireImmediately: n }) {
-		this.tokenBucket = new Or({
+		this.tokenBucket = new Ar({
 			bucketSize: e,
 			tokensPerInterval: e,
 			interval: t
-		}), this.tokenBucket.content = e, this.curIntervalStart = Er(), this.tokensThisInterval = 0, this.fireImmediately = n ?? !1;
+		}), this.tokenBucket.content = e, this.curIntervalStart = Or(), this.tokensThisInterval = 0, this.fireImmediately = n ?? !1;
 	}
 	async removeTokens(e) {
 		if (e > this.tokenBucket.bucketSize) throw Error(`Requested tokens ${e} exceeds maximum tokens per interval ${this.tokenBucket.bucketSize}`);
-		let t = Er();
+		let t = Or();
 		if ((t < this.curIntervalStart || t - this.curIntervalStart >= this.tokenBucket.interval) && (this.curIntervalStart = t, this.tokensThisInterval = 0), e > this.tokenBucket.tokensPerInterval - this.tokensThisInterval) {
 			if (this.fireImmediately) return -1;
 			{
-				await Dr(Math.ceil(this.curIntervalStart + this.tokenBucket.interval - t));
+				await kr(Math.ceil(this.curIntervalStart + this.tokenBucket.interval - t));
 				let n = await this.tokenBucket.removeTokens(e);
 				return this.tokensThisInterval += e, n;
 			}
@@ -2059,7 +2083,7 @@ var Or = class {
 	}
 	tryRemoveTokens(e) {
 		if (e > this.tokenBucket.bucketSize) return !1;
-		let t = Er();
+		let t = Or();
 		if ((t < this.curIntervalStart || t - this.curIntervalStart >= this.tokenBucket.interval) && (this.curIntervalStart = t, this.tokensThisInterval = 0), e > this.tokenBucket.tokensPerInterval - this.tokensThisInterval) return !1;
 		let n = this.tokenBucket.tryRemoveTokens(e);
 		return n && (this.tokensThisInterval += e), n;
@@ -2070,7 +2094,7 @@ var Or = class {
 };
 //#endregion
 //#region src/request-rate-limit.ts
-function Ar(e = {}) {
+function Mr(e = {}) {
 	let t = Math.max(1e3, Math.trunc(e.windowMs ?? 6e4)), n = e.now ?? (() => Date.now()), r = /* @__PURE__ */ new Map(), i = 0;
 	function a(e) {
 		return Math.max(1, Math.ceil(t / Math.max(1, e) / 1e3));
@@ -2087,7 +2111,7 @@ function Ar(e = {}) {
 		o(l);
 		let u = `${c}:${e}`, d = r.get(u);
 		return d || (d = {
-			limiter: new kr({
+			limiter: new jr({
 				tokensPerInterval: c,
 				interval: t,
 				fireImmediately: !0
@@ -2104,8 +2128,8 @@ function Ar(e = {}) {
 }
 //#endregion
 //#region src/scope-membership-semantics.ts
-var jr = "Revocation blocks future sync for this Space. It does not remove data already copied to the revoked device; offline devices, backups, copied databases, malicious peers, or old versions may retain data.";
-function Mr(e) {
+var Nr = "Revocation blocks future sync for this Space. It does not remove data already copied to the revoked device; offline devices, backups, copied databases, malicious peers, or old versions may retain data.";
+function Pr(e) {
 	let t = Number.isFinite(e.membershipEpoch) ? Number(e.membershipEpoch) : null, n = Number.isFinite(e.requiredEpoch) ? Number(e.requiredEpoch) : null;
 	return t == null || n == null ? {
 		membership_epoch: t,
@@ -2119,19 +2143,19 @@ function Mr(e) {
 		reason: t < n ? "stale_epoch" : "current"
 	};
 }
-function Nr(e) {
+function Fr(e) {
 	return {
 		scope_id: e.scopeId,
 		device_id: e.deviceId,
 		membership_epoch: Number.isFinite(e.membershipEpoch) ? Number(e.membershipEpoch) : null,
 		prevents_future_sync: !0,
 		deletes_already_copied_data: !1,
-		message: jr
+		message: Nr
 	};
 }
 //#endregion
 //#region src/sync-auth-constants.ts
-var Pr = 300, Fr = 65536, Ir = we + 1024, X = "X-Codemem-Coordinator-Admin", Lr = "X-Codemem-Coordinator-Admin-Actor", Rr = 120, zr = 30;
+var Ir = 300, Lr = 65536, Rr = Ee + 1024, X = "X-Codemem-Coordinator-Admin", zr = "X-Codemem-Coordinator-Admin-Actor", Br = 120, Vr = 30;
 function Z(e, t) {
 	let n = t.adminSecret();
 	if (!n) return {
@@ -2150,14 +2174,14 @@ function Z(e, t) {
 		error: "missing_admin_header"
 	};
 }
-function Br(e) {
+function Hr(e) {
 	let t = new URL(e);
 	return t.search ? `${t.pathname}${t.search}` : t.pathname;
 }
-async function Vr(e, t, n, r) {
+async function Ur(e, t, n, r) {
 	return await e.recordNonce(t, n, r);
 }
-async function Hr(e, t) {
+async function Wr(e, t) {
 	await e.cleanupNonces(t);
 }
 async function Q(e, t, n, r) {
@@ -2193,7 +2217,7 @@ async function Q(e, t, n, r) {
 	try {
 		u = await n({
 			method: r.method,
-			pathWithQuery: Br(r.url),
+			pathWithQuery: Hr(r.url),
 			bodyBytes: r.body,
 			timestamp: o,
 			nonce: s,
@@ -2214,7 +2238,7 @@ async function Q(e, t, n, r) {
 		enrollment: null
 	};
 	let d = t.now();
-	return await Vr(e, i, s, d) ? (await Hr(e, (/* @__PURE__ */ new Date(new Date(d).getTime() - 6e5)).toISOString()), {
+	return await Ur(e, i, s, d) ? (await Wr(e, (/* @__PURE__ */ new Date(new Date(d).getTime() - 6e5)).toISOString()), {
 		ok: !0,
 		error: "ok",
 		enrollment: c
@@ -2227,9 +2251,9 @@ async function Q(e, t, n, r) {
 function $(e) {
 	return e === "device_disabled" ? 403 : e === "group_archived" ? 409 : 401;
 }
-function Ur(e) {
+function Gr(e) {
 	if (!e?.storeFactory || !e.runtime || !e.requestVerifier) throw Error("createCoordinatorApp requires storeFactory, runtime, and requestVerifier.");
-	let t = e.runtime, n = e.storeFactory, r = e.requestVerifier, i = e.requestRateLimit ?? {}, a = i.limiter ?? Ar(), o = Math.max(1, Math.trunc(i.readLimit ?? Rr)), s = Math.max(1, Math.trunc(i.mutationLimit ?? zr)), c = Math.max(1, Math.trunc(i.unauthenticatedReadLimit ?? Math.min(20, o))), l = Math.max(1, Math.trunc(i.unauthenticatedMutationLimit ?? Math.min(10, s))), u = new or(), d = new TextDecoder();
+	let t = e.runtime, n = e.storeFactory, r = e.requestVerifier, i = e.requestRateLimit ?? {}, a = i.limiter ?? Mr(), o = Math.max(1, Math.trunc(i.readLimit ?? Br)), s = Math.max(1, Math.trunc(i.mutationLimit ?? Vr)), c = Math.max(1, Math.trunc(i.unauthenticatedReadLimit ?? Math.min(20, o))), l = Math.max(1, Math.trunc(i.unauthenticatedMutationLimit ?? Math.min(10, s))), u = new cr(), d = new TextDecoder();
 	function f(e, t, n) {
 		let r = e.req.method === "GET" || e.req.method === "HEAD" || e.req.method === "OPTIONS", i = a.check(`${e.req.method}:${n ? "auth" : "anon"}:${t}`, n ? r ? o : s : r ? c : l);
 		return i.allowed ? null : (e.header("Retry-After", String(i.retryAfterS)), e.json({
@@ -2237,7 +2261,7 @@ function Ur(e) {
 			retry_after_s: i.retryAfterS
 		}, 429));
 	}
-	async function p(e, t = Fr) {
+	async function p(e, t = Lr) {
 		let n = Number.parseInt(e.req.header("content-length") ?? "", 10);
 		if (Number.isFinite(n) && n > t) return null;
 		let r = e.req.raw.body;
@@ -2296,7 +2320,7 @@ function Ur(e) {
 	}
 	function y(e) {
 		try {
-			return wr(JSON.parse(e ?? ""));
+			return Er(JSON.parse(e ?? ""));
 		} catch {
 			throw Error("operation_intent_invalid");
 		}
@@ -2305,7 +2329,7 @@ function Ur(e) {
 		let t = String(e.operation_id ?? "").trim(), n = String(e.reviewed_project_set_digest ?? "").trim();
 		if (!/^share_[a-f0-9]{40}$/u.test(t) || !/^[a-f0-9]{64}$/u.test(n)) throw Error("operation_intent_invalid");
 		let r = y(e.project_intent_json);
-		if (Cr(r) !== n) throw Error("operation_intent_invalid");
+		if (Tr(r) !== n) throw Error("operation_intent_invalid");
 		return {
 			operation_id: t,
 			reviewed_project_set_digest: n,
@@ -2314,7 +2338,7 @@ function Ur(e) {
 	}
 	function b(e) {
 		try {
-			return ut(JSON.parse(e ?? ""));
+			return pt(JSON.parse(e ?? ""));
 		} catch {
 			throw Error("operation_intent_invalid");
 		}
@@ -2346,7 +2370,7 @@ function Ur(e) {
 			response: r.json({ error: "scope_not_found" }, 404)
 		};
 	}
-	async function te(e, n, i) {
+	async function C(e, n, i) {
 		let a = await Q(e, t, r, {
 			method: i.req.method,
 			url: i.req.url,
@@ -2365,7 +2389,7 @@ function Ur(e) {
 			response: f(i, String(a.enrollment.device_id), !0)
 		};
 	}
-	function C(e, t) {
+	function w(e, t) {
 		return e.status === "active" && e.membership_epoch >= t.membership_epoch;
 	}
 	return u.post("/v1/presence", async (e) => {
@@ -2441,7 +2465,7 @@ function Ur(e) {
 		if (!t) return e.json({ error: "group_id_required" }, 400);
 		let r = n();
 		try {
-			let { auth: n, response: i } = await te(r, t, e);
+			let { auth: n, response: i } = await C(r, t, e);
 			if (i) return i;
 			if (!n.enrollment) return e.json({ error: "unknown_device" }, 401);
 			let a = await r.listScopes({
@@ -2450,7 +2474,7 @@ function Ur(e) {
 			}), o = await r.listDeviceScopeMemberships(String(n.enrollment.device_id), !1), s = new Map(o.map((e) => [e.scope_id, e])), c = a.filter((e) => {
 				if (e.status !== "active") return !1;
 				let t = s.get(e.scope_id);
-				return !!(t && C(t, e));
+				return !!(t && w(t, e));
 			});
 			return e.json({ items: c });
 		} finally {
@@ -2462,7 +2486,7 @@ function Ur(e) {
 		if (!r) return e.json({ error: "scope_id_required" }, 400);
 		let i = n();
 		try {
-			let { auth: n, response: a } = await te(i, t, e);
+			let { auth: n, response: a } = await C(i, t, e);
 			if (a) return a;
 			if (!n.enrollment) return e.json({ error: "unknown_device" }, 401);
 			let o = (await i.listScopes({
@@ -2471,7 +2495,7 @@ function Ur(e) {
 			})).find((e) => e.scope_id === r) ?? null;
 			if (o?.status !== "active") return e.json({ error: "scope_not_found" }, 404);
 			let s = await i.listScopeMemberships(r, !1);
-			return s.some((e) => e.device_id === String(n.enrollment?.device_id) && C(e, o)) ? e.json({ items: s.filter((e) => C(e, o)) }) : e.json({ error: "scope_not_authorized" }, 403);
+			return s.some((e) => e.device_id === String(n.enrollment?.device_id) && w(e, o)) ? e.json({ items: s.filter((e) => w(e, o)) }) : e.json({ error: "scope_not_authorized" }, 403);
 		} finally {
 			await i.close();
 		}
@@ -2540,7 +2564,7 @@ function Ur(e) {
 					request: t
 				});
 			} catch (t) {
-				if (t instanceof $e) return e.json({ error: t.code }, 409);
+				if (t instanceof nt) return e.json({ error: t.code }, 409);
 				throw t;
 			}
 		} finally {
@@ -2582,7 +2606,7 @@ function Ur(e) {
 			if (!d || d !== d.trim() || d.length > 256 || /[\p{Cc}\p{Cf}]/u.test(d)) return e.json({ error: "identity_binding_required" }, 403);
 			let p;
 			try {
-				p = await K(a.reviewed_intent, {
+				p = await G(a.reviewed_intent, {
 					target: {
 						kind: "add_device",
 						targetIdentityId: d
@@ -2590,7 +2614,7 @@ function Ur(e) {
 					digest: l
 				});
 			} catch (t) {
-				return t instanceof B && t.code === "recipient_invite_intent_mismatch" ? e.json({ error: t.code }, 409) : e.json({ error: "recipient_invite_review_unavailable" }, 400);
+				return t instanceof z && t.code === "recipient_invite_intent_mismatch" ? e.json({ error: t.code }, 409) : e.json({ error: "recipient_invite_review_unavailable" }, 400);
 			}
 			let m = await u.createInvite({
 				groupId: s,
@@ -2614,13 +2638,13 @@ function Ur(e) {
 				target_identity_id: m.target_identity_id ?? void 0,
 				inviter_device_id: m.inviter_device_id ?? void 0,
 				reviewed_preview_digest: m.reviewed_preview_digest ?? void 0
-			}, g = dr(h), { token: _, ...v } = m;
+			}, g = pr(h), { token: _, ...v } = m;
 			return e.json({
 				ok: !0,
 				invite: v,
 				payload: h,
 				encoded: g,
-				link: pr(g)
+				link: hr(g)
 			});
 		} finally {
 			await u.close();
@@ -2636,7 +2660,7 @@ function Ur(e) {
 		if (!o) return e.json({ error: "invalid_json" }, 400);
 		let s = String(o.group_id ?? "").trim(), c = String(o.device_id ?? "").trim(), l = String(o.fingerprint ?? "").trim(), u = String(o.public_key ?? "").trim(), d = String(o.display_name ?? "").trim() || null;
 		if (!s || !c || !l || !u) return e.json({ error: "group_id_device_id_fingerprint_public_key_required" }, 400);
-		if (Xt(u) !== l) return e.json({ error: "fingerprint_mismatch" }, 400);
+		if ($t(u) !== l) return e.json({ error: "fingerprint_mismatch" }, 400);
 		let h = n();
 		try {
 			await h.createGroup(s), await h.enrollDevice(s, {
@@ -2876,7 +2900,7 @@ function Ur(e) {
 				manifestHash: h(o, "manifest_hash"),
 				signedManifestJson: h(o, "signed_manifest_json"),
 				actorType: "admin",
-				actorId: g(e.req.header(Lr))
+				actorId: g(e.req.header(zr))
 			});
 			return e.json({
 				ok: !0,
@@ -2884,9 +2908,9 @@ function Ur(e) {
 			}, 201);
 		} catch (t) {
 			let n = t instanceof Error ? t.message : String(t);
-			if (t instanceof F && (t.code === "scope_not_found" || t.code === "scope_group_mismatch")) return e.json({ error: "scope_not_found" }, 404);
-			if (t instanceof F && t.code === "device_not_enrolled") return e.json({ error: "device_not_enrolled_for_scope_group" }, 404);
-			let r = t instanceof F && t.code === "scope_inactive";
+			if (t instanceof P && (t.code === "scope_not_found" || t.code === "scope_group_mismatch")) return e.json({ error: "scope_not_found" }, 404);
+			if (t instanceof P && t.code === "device_not_enrolled") return e.json({ error: "device_not_enrolled_for_scope_group" }, 404);
+			let r = t instanceof P && t.code === "scope_inactive";
 			return e.json({ error: r ? "scope_not_active" : n }, n === "scope_membership_effect_conflict" || r ? 409 : 400);
 		} finally {
 			await v.close();
@@ -2917,7 +2941,7 @@ function Ur(e) {
 				manifestHash: h(o, "manifest_hash"),
 				signedManifestJson: h(o, "signed_manifest_json"),
 				actorType: "admin",
-				actorId: g(e.req.header(Lr))
+				actorId: g(e.req.header(zr))
 			})) return e.json({ error: "membership_not_found" }, 404);
 			let n;
 			try {
@@ -2929,7 +2953,7 @@ function Ur(e) {
 				ok: !0,
 				scope_id: c,
 				device_id: l,
-				revocation: Nr({
+				revocation: Fr({
 					scopeId: c,
 					deviceId: l,
 					membershipEpoch: n?.membership_epoch ?? d
@@ -2937,7 +2961,7 @@ function Ur(e) {
 			});
 		} catch (t) {
 			let n = t instanceof Error ? t.message : String(t);
-			return t instanceof F && t.code === "scope_group_mismatch" ? e.json({ error: "scope_not_found" }, 404) : e.json({ error: n }, n === "scope_membership_effect_conflict" ? 409 : 400);
+			return t instanceof P && t.code === "scope_group_mismatch" ? e.json({ error: "scope_not_found" }, 404) : e.json({ error: n }, n === "scope_membership_effect_conflict" ? 409 : 400);
 		} finally {
 			await v.close();
 		}
@@ -2972,7 +2996,7 @@ function Ur(e) {
 		if (!l) return e.json({ error: "display_name_required" }, 400);
 		let u;
 		try {
-			u = z(l, "display_name");
+			u = R(l, "display_name");
 		} catch (t) {
 			return e.json({ error: t instanceof Error ? t.message : "display_name_invalid" }, 400);
 		}
@@ -3043,16 +3067,16 @@ function Ur(e) {
 		if (!r.ok) return f(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
 		let i = f(e, "admin", !0);
 		if (i) return i;
-		let a = await p(e, Ir);
+		let a = await p(e, Rr);
 		if (a == null) return e.json({ error: "body_too_large" }, 413);
 		let o = m(a);
 		if (!o) return e.json({ error: "invalid_json" }, 400);
 		if (Object.keys(o).some((e) => e !== "group_id" && e !== "manifest")) return e.json({ error: "completion_manifest_invalid" }, 400);
 		let s, c;
 		try {
-			let e = Pe([o.group_id])[0];
+			let e = Le([o.group_id])[0];
 			if (!e) throw Error("completion_manifest_invalid");
-			s = e, c = Ie(o.manifest), Re(c);
+			s = e, c = ze(o.manifest), Ve(c);
 		} catch {
 			return e.json({ error: "completion_manifest_invalid" }, 400);
 		}
@@ -3064,7 +3088,7 @@ function Ur(e) {
 				...t
 			}, t.status === "created" ? 201 : 200);
 		} catch (t) {
-			if (t instanceof ke) return e.json({ error: t.code }, 409);
+			if (t instanceof je) return e.json({ error: t.code }, 409);
 			let n = t instanceof Error ? t.message : "completion_manifest_invalid";
 			if (n === "group_not_found") return e.json({ error: n }, 404);
 			if (n === "group_archived" || n === "completion_manifest_unavailable") return e.json({ error: n }, 409);
@@ -3080,8 +3104,8 @@ function Ur(e) {
 		if (i) return i;
 		let a = String(e.req.query("group_id") ?? "").trim(), o;
 		try {
-			if (Pe([a]).length !== 1) throw Error("completion_manifest_invalid");
-			o = Fe(e.req.query("candidate_ref"));
+			if (Le([a]).length !== 1) throw Error("completion_manifest_invalid");
+			o = Re(e.req.query("candidate_ref"));
 		} catch {
 			return e.json({ error: "group_id_and_candidate_ref_required" }, 400);
 		}
@@ -3103,7 +3127,7 @@ function Ur(e) {
 		if (!o || Object.keys(o).some((e) => e !== "group_ids")) return e.json({ error: "completion_query_invalid" }, 400);
 		let s;
 		try {
-			if (s = Pe(o.group_ids), s.length === 0) throw Error("completion_query_invalid");
+			if (s = Le(o.group_ids), s.length === 0) throw Error("completion_query_invalid");
 		} catch {
 			return e.json({ error: "completion_query_invalid" }, 400);
 		}
@@ -3125,27 +3149,27 @@ function Ur(e) {
 		if (a == null) return e.json({ error: "body_too_large" }, 413);
 		let o = m(a);
 		if (!o) return e.json({ error: "invalid_json" }, 400);
-		let s = String(o.group_id ?? "").trim(), c = String(o.policy ?? "auto_admit").trim(), l = String(o.expires_at ?? "").trim(), u = String(o.created_by ?? "").trim() || null, d = String(o.operation_id ?? "").trim() || null, h = String(o.reviewed_project_set_digest ?? "").trim() || null, g = String(o.inviter_actor_id ?? "").trim() || null, _ = String(o.inviter_display_name ?? "").trim() || null, v = String(o.inviter_device_id ?? "").trim() || null, y = String(o.pending_person_id ?? "").trim() || null, ee = String(o.invite_kind ?? o.kind ?? "").trim(), b = String(o.policy_team_id ?? "").trim() || null, x = String(o.target_identity_id ?? "").trim() || null, S = String(o.reviewed_preview_digest ?? "").trim() || null, te, C = null, w = null;
+		let s = String(o.group_id ?? "").trim(), c = String(o.policy ?? "auto_admit").trim(), l = String(o.expires_at ?? "").trim(), u = String(o.created_by ?? "").trim() || null, d = String(o.operation_id ?? "").trim() || null, h = String(o.reviewed_project_set_digest ?? "").trim() || null, g = String(o.inviter_actor_id ?? "").trim() || null, _ = String(o.inviter_display_name ?? "").trim() || null, v = String(o.inviter_device_id ?? "").trim() || null, y = String(o.pending_person_id ?? "").trim() || null, ee = String(o.invite_kind ?? o.kind ?? "").trim(), b = String(o.policy_team_id ?? "").trim() || null, x = String(o.target_identity_id ?? "").trim() || null, S = String(o.reviewed_preview_digest ?? "").trim() || null, C, w = null, T = null;
 		if (!s || !["auto_admit", "approval_required"].includes(c) || !l) return e.json({ error: "group_id_policy_and_expires_at_required" }, 400);
 		if (Object.hasOwn(o, "assigned_identity_id")) return e.json({ error: "assigned_identity_id_forbidden" }, 400);
 		if (Number.isNaN(new Date(l).getTime())) return e.json({ error: "invalid_expires_at" }, 400);
 		if (!!d != !!h) return e.json({ error: "operation_intent_reference_incomplete" }, 400);
-		let T = ee || (d ? "project_share" : "legacy_enrollment");
+		let E = ee || (d ? "project_share" : "legacy_enrollment");
 		if (![
 			"legacy_enrollment",
 			"project_share",
 			"team_member",
 			"add_device"
-		].includes(T)) return e.json({ error: "invite_kind_invalid" }, 400);
-		if (T === "project_share" ? !d : d) return e.json({ error: "invite_kind_intent_mismatch" }, 400);
+		].includes(E)) return e.json({ error: "invite_kind_invalid" }, 400);
+		if (E === "project_share" ? !d : d) return e.json({ error: "invite_kind_intent_mismatch" }, 400);
 		if (S && !/^[a-f0-9]{64}$/u.test(S)) return e.json({ error: "reviewed_preview_digest_invalid" }, 400);
-		if (T === "team_member" && (!b || !S || x) || T === "add_device" && (!x || !S || b) || !["team_member", "add_device"].includes(T) && (b || x || S)) return e.json({ error: "recipient_invite_metadata_invalid" }, 400);
+		if (E === "team_member" && (!b || !S || x) || E === "add_device" && (!x || !S || b) || !["team_member", "add_device"].includes(E) && (b || x || S)) return e.json({ error: "recipient_invite_metadata_invalid" }, 400);
 		if ([b, x].filter((e) => !!e).some((e) => e.length > 256 || /[\p{Cc}\p{Cf}]/u.test(e))) return e.json({ error: "recipient_invite_identifier_invalid" }, 400);
-		if (T === "team_member" || T === "add_device") {
+		if (E === "team_member" || E === "add_device") {
 			if (o.reviewed_intent == null) return e.json({ error: "recipient_invite_review_unavailable" }, 400);
 			try {
-				te = await K(o.reviewed_intent, {
-					target: T === "team_member" ? {
+				C = await G(o.reviewed_intent, {
+					target: E === "team_member" ? {
 						kind: "team_member",
 						policyTeamId: String(b)
 					} : {
@@ -3155,7 +3179,7 @@ function Ur(e) {
 					digest: String(S)
 				});
 			} catch (t) {
-				return t instanceof B && t.code === "recipient_invite_intent_mismatch" ? e.json({ error: t.code }, 409) : e.json({ error: "recipient_invite_review_unavailable" }, 400);
+				return t instanceof z && t.code === "recipient_invite_intent_mismatch" ? e.json({ error: t.code }, 409) : e.json({ error: "recipient_invite_review_unavailable" }, 400);
 			}
 		} else if (o.reviewed_intent != null) return e.json({ error: "recipient_invite_metadata_invalid" }, 400);
 		if (d && !/^share_[a-f0-9]{40}$/u.test(d) || h && !/^[a-f0-9]{64}$/u.test(h)) return e.json({ error: "operation_intent_reference_invalid" }, 400);
@@ -3167,27 +3191,27 @@ function Ur(e) {
 				y
 			].some((e) => e.length > 256 || /[\p{Cc}\p{Cf}]/u.test(e))) return e.json({ error: "project_invite_identity_context_invalid" }, 400);
 			try {
-				if (z(_, "inviter_display_name"), C = ut(o.project_summaries), !Array.isArray(o.project_intent) || o.project_intent.length !== C.length || (w = o.project_intent.map((e, t) => {
+				if (R(_, "inviter_display_name"), w = pt(o.project_summaries), !Array.isArray(o.project_intent) || o.project_intent.length !== w.length || (T = o.project_intent.map((e, t) => {
 					let n;
 					try {
-						n = wr([e])[0];
+						n = Er([e])[0];
 					} catch {
 						throw Error("project_intent_invalid");
 					}
-					let r = C?.[t];
+					let r = w?.[t];
 					if (!n || !r || n.display_name !== r.display_name || n.existing_memory_count !== r.existing_memory_count) throw Error("project_intent_invalid");
 					return n;
-				}), new Set(w.map((e) => e.canonical_identity)).size !== w.length)) throw Error("project_intent_invalid");
+				}), new Set(T.map((e) => e.canonical_identity)).size !== T.length)) throw Error("project_intent_invalid");
 			} catch (t) {
 				return e.json({ error: t instanceof Error ? t.message : "project_invite_invalid" }, 400);
 			}
 		}
-		let ne = n();
+		let te = n();
 		try {
-			let t = await ne.getGroup(s);
+			let t = await te.getGroup(s);
 			if (!t) return e.json({ error: "group_not_found" }, 404);
 			if (t.archived_at) return e.json({ error: "group_archived" }, 409);
-			let n = await ne.createInvite({
+			let n = await te.createInvite({
 				groupId: s,
 				policy: c,
 				expiresAt: l,
@@ -3198,13 +3222,13 @@ function Ur(e) {
 				inviterDisplayName: _,
 				inviterDeviceId: v,
 				pendingPersonId: y,
-				projectSummaries: C,
-				projectIntent: w,
-				inviteKind: T,
+				projectSummaries: w,
+				projectIntent: T,
+				inviteKind: E,
 				policyTeamId: b,
 				targetIdentityId: x,
 				reviewedPreviewDigest: S,
-				reviewedIntent: te
+				reviewedIntent: C
 			}), r = {
 				v: 1,
 				kind: n.invite_kind === "team_member" || n.invite_kind === "add_device" ? n.invite_kind : "coordinator_team_invite",
@@ -3217,7 +3241,7 @@ function Ur(e) {
 				...n.operation_id ? {
 					operation_id: n.operation_id,
 					inviter_name: n.inviter_display_name ?? null,
-					project_summaries: C ?? []
+					project_summaries: w ?? []
 				} : {},
 				...n.invite_kind === "team_member" ? {
 					policy_team_id: n.policy_team_id ?? void 0,
@@ -3229,20 +3253,20 @@ function Ur(e) {
 					inviter_device_id: n.inviter_device_id ?? void 0,
 					reviewed_preview_digest: n.reviewed_preview_digest ?? void 0
 				} : {}
-			}, i = dr(r), { token: a, ...f } = n;
+			}, i = pr(r), { token: a, ...f } = n;
 			return e.json({
 				ok: !0,
 				invite: f,
 				payload: r,
 				encoded: i,
-				link: pr(i)
+				link: hr(i)
 			});
 		} catch (t) {
 			if (t instanceof Error && t.message === "invite_operation_intent_conflict") return e.json({ error: "invite_operation_intent_conflict" }, 409);
 			if (t instanceof Error && t.message === "invite_already_bound") return e.json({ error: "invite_already_bound" }, 409);
 			throw t;
 		} finally {
-			await ne.close();
+			await te.close();
 		}
 	}), u.post("/v1/invites/inspect", async (e) => {
 		let r = await p(e);
@@ -3337,7 +3361,7 @@ function Ur(e) {
 					display_name: String(e.display_name ?? ""),
 					existing_memory_count: Number(e.existing_memory_count ?? 0)
 				}));
-				s = pr(dr({
+				s = hr(pr({
 					v: 1,
 					kind: "coordinator_team_invite",
 					coordinator_url: new URL(e.req.url).origin,
@@ -3454,11 +3478,11 @@ function Ur(e) {
 		} finally {
 			await c.close();
 		}
-	}), u.post("/v1/admin/join-requests/approve", async (e) => Wr(e, !0, {
+	}), u.post("/v1/admin/join-requests/approve", async (e) => Kr(e, !0, {
 		createStore: n,
 		runtime: t,
 		rateLimitedResponse: f
-	})), u.post("/v1/admin/join-requests/deny", async (e) => Wr(e, !1, {
+	})), u.post("/v1/admin/join-requests/deny", async (e) => Kr(e, !1, {
 		createStore: n,
 		runtime: t,
 		rateLimitedResponse: f
@@ -3482,7 +3506,7 @@ function Ur(e) {
 		if (!i) return e.json({ error: "invalid_json" }, 400);
 		let a = String(i.token ?? "").trim(), o = String(i.device_id ?? "").trim(), s = String(i.fingerprint ?? "").trim(), c = String(i.public_key ?? "").trim(), l = String(i.display_name ?? "").trim() || null, u = String(i.operation_id ?? "").trim(), d = String(i.recipient_actor_id ?? "").trim(), f = String(i.recipient_display_name ?? "").trim(), h = String(i.device_display_name ?? "").trim();
 		if (!a || !o || !s || !c) return e.json({ error: "token_device_id_fingerprint_public_key_required" }, 400);
-		if (Xt(c) !== s) return e.json({ error: "fingerprint_mismatch" }, 400);
+		if ($t(c) !== s) return e.json({ error: "fingerprint_mismatch" }, 400);
 		let g = n();
 		try {
 			let n = await g.getInviteByTokenForInspection(a);
@@ -3510,11 +3534,11 @@ function Ur(e) {
 				try {
 					if (i.recipient_display_name != null) {
 						if (typeof i.recipient_display_name != "string") throw Error("recipient_display_name_invalid");
-						d = z(i.recipient_display_name, "recipient_display_name");
+						d = R(i.recipient_display_name, "recipient_display_name");
 					}
 					if (i.device_display_name != null) {
 						if (typeof i.device_display_name != "string") throw Error("device_display_name_invalid");
-						f = st(i.device_display_name, "device_display_name");
+						f = ut(i.device_display_name, "device_display_name");
 					}
 				} catch (t) {
 					return e.json({ error: t instanceof Error ? t.message : "recipient_invite_identity_invalid" }, 400);
@@ -3569,7 +3593,7 @@ function Ur(e) {
 				if (d.length > 256 || /[\p{Cc}\p{Cf}]/u.test(d)) return e.json({ error: "recipient_actor_id_invalid" }, 400);
 				let l, p;
 				try {
-					l = z(f, "recipient_display_name"), p = st(h, "device_display_name");
+					l = R(f, "recipient_display_name"), p = ut(h, "device_display_name");
 				} catch (t) {
 					return e.json({ error: t instanceof Error ? t.message : "project_invite_identity_invalid" }, 400);
 				}
@@ -3593,7 +3617,7 @@ function Ur(e) {
 					});
 					return e.json({
 						ok: !0,
-						status: hr,
+						status: _r,
 						group_id: n.invite.group_id,
 						operation_id: n.invite.operation_id,
 						trust_state: n.invite.trust_state,
@@ -3662,14 +3686,14 @@ function Ur(e) {
 		}
 	}), u;
 }
-async function Wr(e, t, n) {
+async function Kr(e, t, n) {
 	let r = Z(e.req.header(X), n.runtime);
 	if (!r.ok) return n.rateLimitedResponse(e, e.req.path, !1) ?? e.json({ error: r.error }, 401);
 	let i = n.rateLimitedResponse(e, "admin", !0);
 	if (i) return i;
 	let a = await (async () => {
 		let t = Number.parseInt(e.req.header("content-length") ?? "", 10);
-		if (Number.isFinite(t) && t > Fr) return null;
+		if (Number.isFinite(t) && t > Lr) return null;
 		let n = e.req.raw.body;
 		if (!n) return /* @__PURE__ */ new Uint8Array();
 		let r = n.getReader(), i = [], a = 0;
@@ -3678,7 +3702,7 @@ async function Wr(e, t, n) {
 				let { done: e, value: t } = await r.read();
 				if (e) break;
 				if (t) {
-					if (a += t.byteLength, a > Fr) return await r.cancel(), null;
+					if (a += t.byteLength, a > Lr) return await r.cancel(), null;
 					i.push(t);
 				}
 			}
@@ -3726,6 +3750,6 @@ async function Wr(e, t, n) {
 	}
 }
 //#endregion
-export { Ue as $, Vt as A, ie as At, ct as B, Yt as C, he as Ct, Kt as D, be as Dt, Ht as E, ge as Et, Ot as F, p as Ft, Qe as G, L as H, Dt as I, C as It, Ze as J, Xe as K, K as L, w as Lt, B as M, T as Mt, Et as N, s as Nt, zt as O, O as Ot, Tt as P, o as Pt, qe as Q, lt as R, a as Rt, jt as S, pe as St, Mt as T, ve as Tt, ut as U, z as V, $e as W, Ke as X, F as Y, We as Z, mr as _, fe as _t, Mr as a, Se as at, q as b, se as bt, wr as c, ke as ct, gr as d, Pe as dt, Ge as et, _r as f, Ie as ft, dr as g, me as gt, fr as h, Re as ht, Nr as i, we as it, dt as j, re as jt, Gt as k, ne as kt, Sr as l, Le as lt, yr as m, Be as mt, Pr as n, Te as nt, br as o, Ce as ot, vr as p, ze as pt, Je as q, jr as r, De as rt, Cr as s, xe as st, Ur as t, Oe as tt, hr as u, Fe as ut, pr as v, E as vt, Nt as w, _e as wt, Bt as x, ce as xt, Xt as y, ye as yt, R as z };
+export { Ke as $, Wt as A, ae as At, dt as B, Qt as C, _e as Ct, Yt as D, Se as Dt, Gt as E, ve as Et, jt as F, p as Ft, tt as G, I as H, At as I, E as It, et as J, $e as K, G as L, te as Lt, z as M, ne as Mt, kt as N, s as Nt, Ht as O, O as Ot, Ot as P, o as Pt, Xe as Q, ft as R, T as Rt, Pt as S, he as St, Ft as T, be as Tt, pt as U, R as V, nt as W, Ye as X, P as Y, qe as Z, gr as _, me as _t, Pr as a, we as at, K as b, le as bt, Er as c, je as ct, vr as d, Le as dt, Je as et, yr as f, ze as ft, pr as g, ge as gt, mr as h, Ve as ht, Fr as i, Ee as it, mt as j, ie as jt, Jt as k, re as kt, wr as l, Be as lt, xr as m, Ue as mt, Ir as n, De as nt, Sr as o, Te as ot, br as p, He as pt, Ze as q, Nr as r, ke as rt, Tr as s, Ce as st, Gr as t, Ae as tt, _r as u, Re as ut, hr as v, oe as vt, It as w, ye as wt, Ut as x, ue as xt, $t as y, xe as yt, L as z, a as zt };
 
-//# sourceMappingURL=coordinator-api-BToPmSNg.js.map
+//# sourceMappingURL=coordinator-api-CdUQtf5l.js.map