@codemem/server 0.30.0 → 0.31.1

package/static/app.js

@@ -3268,6 +3268,14 @@
 		if (!resp.ok) throw new Error(detail || payloadError(payload) || text || "request failed");
 		return payload;
 	}
+	var ProjectForgetConfirmationError = class extends Error {
+		preview;
+		constructor(preview) {
+			super("Project forget confirmation required");
+			this.name = "ProjectForgetConfirmationError";
+			this.preview = preview;
+		}
+	};
 	var SharingDomainGuardrailConfirmationError = class extends Error {
 		requiredGuardrails;
 		requiredGuardrailTokens;
@@ -3280,9 +3288,26 @@
 			this.guardrailWarnings = input.guardrail_warnings ?? [];
 		}
 	};
+	var LegacySharedReviewConfirmationError = class extends Error {
+		preview;
+		constructor(preview) {
+			super("Legacy shared review confirmation required");
+			this.name = "LegacySharedReviewConfirmationError";
+			this.preview = preview;
+		}
+	};
 	async function loadSharingDomainSettings() {
 		return fetchJson("/api/sync/sharing-domains/settings");
 	}
+	async function loadProjectScopeInventory(input = {}) {
+		const params = new URLSearchParams();
+		for (const [key, value] of Object.entries(input)) {
+			if (value == null || value === "") continue;
+			params.set(key, String(value));
+		}
+		const query = params.toString();
+		return fetchJson(`/api/sync/projects${query ? `?${query}` : ""}`);
+	}
 	async function saveSharingDomainProjectMapping(input) {
 		const resp = await fetch("/api/sync/sharing-domains/project-mappings", {
 			method: "PUT",
@@ -3301,12 +3326,65 @@
 			guardrail_warnings: payload.guardrail_warnings ?? mapping.guardrail_warnings
 		};
 	}
+	async function saveSharingDomainProjectMappings(input) {
+		const resp = await fetch("/api/sync/sharing-domains/project-mappings/bulk", {
+			method: "PUT",
+			headers: { "Content-Type": "application/json" },
+			body: JSON.stringify(input)
+		});
+		const { text, payload } = await readJsonPayload(resp);
+		if (!resp.ok) {
+			if (payload?.error === "guardrail_confirmation_required") throw new SharingDomainGuardrailConfirmationError(payload);
+			throw new Error(payloadError(payload) || text || "request failed");
+		}
+		if (!Array.isArray(payload?.mappings)) throw new Error("response missing mappings");
+		return payload.mappings;
+	}
 	async function deleteSharingDomainProjectMapping(id) {
 		const resp = await fetch(`/api/sync/sharing-domains/project-mappings/${encodeURIComponent(id)}`, { method: "DELETE" });
 		const { text, payload } = await readJsonPayload(resp);
 		if (!resp.ok) throw new Error(payloadError(payload) || text || "request failed");
 		return Boolean(payload?.deleted);
 	}
+	async function reassignProjectInventoryProject(input) {
+		const resp = await fetch("/api/sync/projects/reassign-project", {
+			method: "POST",
+			headers: { "Content-Type": "application/json" },
+			body: JSON.stringify(input)
+		});
+		const { text, payload } = await readJsonPayload(resp);
+		if (!resp.ok) throw new Error(payloadError(payload) || text || "request failed");
+		if (!payload?.workspace_identity) throw new Error("response missing project reassignment");
+		return payload;
+	}
+	async function forgetProjectInventoryMemories(input) {
+		const resp = await fetch("/api/sync/projects/forget", {
+			method: "POST",
+			headers: { "Content-Type": "application/json" },
+			body: JSON.stringify(input)
+		});
+		const { text, payload } = await readJsonPayload(resp);
+		if (!resp.ok) {
+			if (payload?.error === "project_forget_confirmation_required" && payload.preview) throw new ProjectForgetConfirmationError(payload.preview);
+			throw new Error(payloadError(payload) || text || "request failed");
+		}
+		if (!payload?.workspace_identity) throw new Error("response missing project forget result");
+		return payload;
+	}
+	async function reassignLegacySharedReviewGroup$1(input) {
+		const resp = await fetch("/api/sync/legacy-shared-review/reassign", {
+			method: "POST",
+			headers: { "Content-Type": "application/json" },
+			body: JSON.stringify(input)
+		});
+		const { text, payload } = await readJsonPayload(resp);
+		if (!resp.ok) {
+			if (payload?.error === "legacy_review_confirmation_required" && payload.preview) throw new LegacySharedReviewConfirmationError(payload.preview);
+			throw new Error(payloadError(payload) || text || "request failed");
+		}
+		if (!payload?.workspace_identity) throw new Error("response missing legacy review reassignment");
+		return payload;
+	}
 	async function loadCoordinatorGroupPreferences(groupId) {
 		const resp = await fetch(`/api/coordinator/admin/groups/${encodeURIComponent(groupId)}/preferences`);
 		const { text, payload } = await readJsonPayload(resp);
@@ -3397,7 +3475,7 @@
 	}
 	//#endregion
 	//#region src/lib/dom.ts
-	function el(tag, className, text) {
+	function el$1(tag, className, text) {
 		const node = document.createElement(tag);
 		if (className) node.className = className;
 		if (text !== void 0 && text !== null) node.textContent = String(text);
@@ -3445,8 +3523,9 @@
 	//#region src/lib/state.ts
 	var ALL_TAB_IDS = [
 		"feed",
-		"health",
+		"projects",
 		"sync",
+		"health",
 		"coordinator-admin"
 	];
 	var TAB_KEY = "codemem-tab";
@@ -13465,7 +13544,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		}) : null, _$3(Tooltip, {
 			label: formatDate(createdAtRaw),
 			side: "left"
-		}, _$3("div", { className: "small feed-age" }, relative)), Boolean(item.owned_by_self) && memoryId > 0 ? _$3(FeedItemMenu, {
+		}, _$3("div", { className: "small feed-age" }, relative)), item.owned_by_self && memoryId > 0 ? _$3(FeedItemMenu, {
 			assignProjectDisabled: movingProject,
 			disabled: deletingMemory,
 			onAssignProject: () => void moveProject(),
@@ -13480,7 +13559,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		})), _$3("div", { className: "feed-meta" }, metaText || "No tags, files, or provenance details attached."), bodyContent, _$3("div", { className: "feed-footer" }, _$3("div", { className: "feed-footer-left" }, tags.length ? _$3("div", { className: "feed-tags" }, tags.map((tag, index) => _$3(TagChip, {
 			key: `${String(tag)}-${index}`,
 			tag
-		}))) : null, Boolean(item.owned_by_self) && memoryId > 0 ? _$3("div", { className: "feed-visibility-controls" }, _$3("select", {
+		}))) : null, item.owned_by_self && memoryId > 0 ? _$3("div", { className: "feed-visibility-controls" }, _$3("select", {
 			"aria-label": `Visibility for ${String(item.title || "memory")}`,
 			className: "feed-visibility-select",
 			disabled: savingVisibility,
@@ -14344,6 +14423,552 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		if (state.activeTab === "feed" && previousActorId !== nextActorId) updateFeedView(true);
 	}
 	//#endregion
+	//#region src/tabs/projects.ts
+	var STATUS_OPTIONS = [
+		["", "All projects"],
+		["needs_attention", "Needs review"],
+		["suggested", "Has suggestion"],
+		["local_only", "Stays on this device"],
+		["explicitly_mapped", "Already assigned"],
+		["legacy_review", "Older shared data"],
+		["unmapped", "Missing project identity"]
+	];
+	var refreshProjects = null;
+	var currentOffset = 0;
+	var lastLimit = 250;
+	var scopes = [];
+	var openProjectDetails = /* @__PURE__ */ new Set();
+	var openProjectClusters = /* @__PURE__ */ new Set();
+	var draftDomainSelections = /* @__PURE__ */ new Map();
+	var pendingConfirmations = /* @__PURE__ */ new Map();
+	var pendingForgetConfirmations = /* @__PURE__ */ new Map();
+	function el(id) {
+		return document.getElementById(id);
+	}
+	function formatStatus(status) {
+		return STATUS_OPTIONS.find(([value]) => value === status)?.[1] ?? status.replaceAll("_", " ");
+	}
+	function formatResolution(reason) {
+		switch (reason) {
+			case "exact_mapping": return "assigned to a Sharing domain";
+			case "pattern_mapping": return "assigned by matching rule";
+			case "explicit_override": return "manually assigned";
+			default: return "stays on this device";
+		}
+	}
+	function formatLatest(value) {
+		if (!value) return "No recent sessions";
+		const date = new Date(value);
+		if (Number.isNaN(date.getTime())) return value;
+		return date.toLocaleString();
+	}
+	function strongestSignal(project) {
+		if (project.git_remote) return project.git_remote;
+		if (project.cwd) return project.cwd;
+		return project.workspace_identity;
+	}
+	function projectClusterKey(project) {
+		if (project.git_remote) return `git:${project.git_remote}`;
+		if (project.project) return `project:${project.project}`;
+		return `identity:${project.workspace_identity}`;
+	}
+	function projectClusterLabel(project) {
+		return project.project || project.display_project || strongestSignal(project);
+	}
+	function scopeLabel(scopeId) {
+		if (!scopeId) return "—";
+		const scope = scopes.find((item) => item.scope_id === scopeId);
+		return scope?.label ? `${scope.label} (${scope.scope_id})` : scopeId;
+	}
+	function assignableScopes() {
+		return scopes.filter((scope) => scope.scope_id !== "legacy-shared-review");
+	}
+	function guardrailHeading(warning) {
+		switch (warning.code) {
+			case "unknown_project_local_only": return "Current behavior";
+			case "basename_collision_review": return "Name collision";
+			case "scope_reassignment_old_copies": return "Previous copies";
+			case "broad_org_domain_pattern":
+			case "home_directory_org_domain_pattern": return "Broad mapping";
+			default: return "Review item";
+		}
+	}
+	async function saveProjectMapping(project, scopeId, confirmedGuardrailTokens = []) {
+		try {
+			await saveSharingDomainProjectMapping({
+				...project.mapping_id && project.resolution_reason === "exact_mapping" ? { id: project.mapping_id } : {},
+				...confirmedGuardrailTokens.length > 0 ? { confirmed_guardrail_tokens: confirmedGuardrailTokens } : {},
+				project_pattern: project.display_project,
+				scope_id: scopeId,
+				workspace_identity: project.workspace_identity
+			});
+			pendingConfirmations.delete(project.workspace_identity);
+			draftDomainSelections.delete(project.workspace_identity);
+			showGlobalNotice("Project Sharing domain updated. Device access grants are unchanged.");
+			refreshProjects?.();
+		} catch (error) {
+			if (error instanceof SharingDomainGuardrailConfirmationError) {
+				pendingConfirmations.set(project.workspace_identity, {
+					requiredGuardrailTokens: error.requiredGuardrailTokens,
+					scopeId,
+					warnings: error.guardrailWarnings
+				});
+				refreshProjects?.();
+				return;
+			}
+			showGlobalNotice(error instanceof Error ? error.message : "Unable to update project Sharing domain.", "warning");
+		}
+	}
+	async function saveProjectClusterMapping(projects, scopeId) {
+		const assignable = projects.filter((project) => project.identity_source !== "unmapped");
+		if (assignable.length === 0) return;
+		try {
+			await saveSharingDomainProjectMappings({ mappings: assignable.map((project) => ({
+				...project.mapping_id && project.resolution_reason === "exact_mapping" ? { id: project.mapping_id } : {},
+				project_pattern: project.display_project,
+				scope_id: scopeId,
+				workspace_identity: project.workspace_identity
+			})) });
+			showGlobalNotice(`Updated ${assignable.length} project identit${assignable.length === 1 ? "y" : "ies"}. Device access grants are unchanged.`);
+			refreshProjects?.();
+		} catch (error) {
+			showGlobalNotice(error instanceof SharingDomainGuardrailConfirmationError ? "One or more identities in this group need review before bulk assignment. Expand the group and save those identities directly." : error instanceof Error ? error.message : "Unable to update project Sharing domains.", "warning");
+		}
+	}
+	async function removeProjectMapping(project) {
+		if (project.mapping_id == null) return;
+		try {
+			await deleteSharingDomainProjectMapping(project.mapping_id);
+			pendingConfirmations.delete(project.workspace_identity);
+			draftDomainSelections.delete(project.workspace_identity);
+			showGlobalNotice("Project Sharing domain mapping removed. The next fallback now applies.");
+			refreshProjects?.();
+		} catch (error) {
+			showGlobalNotice(error instanceof Error ? error.message : "Unable to remove project Sharing domain mapping.", "warning");
+		}
+	}
+	async function forgetProjectMemories(project, confirmed = false) {
+		try {
+			const pending = pendingForgetConfirmations.get(project.workspace_identity);
+			const result = await forgetProjectInventoryMemories({
+				...confirmed && pending ? { confirmation_token: pending.confirmationToken } : {},
+				confirmed,
+				workspace_identity: project.workspace_identity
+			});
+			pendingForgetConfirmations.delete(project.workspace_identity);
+			showGlobalNotice(`Forgot ${result.forgotten_memory_count.toLocaleString()} local memor${result.forgotten_memory_count === 1 ? "y" : "ies"}. ${result.peer_owned_memory_count.toLocaleString()} peer-owned memor${result.peer_owned_memory_count === 1 ? "y was" : "ies were"} left unchanged.`);
+			refreshProjects?.();
+		} catch (error) {
+			if (error instanceof ProjectForgetConfirmationError) {
+				pendingForgetConfirmations.set(project.workspace_identity, {
+					confirmationToken: error.preview.confirmation_token,
+					localOwnedMemoryCount: error.preview.local_owned_memory_count,
+					peerOwnedMemoryCount: error.preview.peer_owned_memory_count
+				});
+				refreshProjects?.();
+				return;
+			}
+			showGlobalNotice(error instanceof Error ? error.message : "Unable to forget project memories.", "warning");
+		}
+	}
+	async function reassignProject(project) {
+		if (project.identity_source === "unmapped") return;
+		const currentProject = String(project.project || project.display_project || "").trim();
+		let suggestions = [];
+		try {
+			suggestions = (await loadProjects$1()).filter((name) => name && name !== currentProject);
+		} catch {}
+		const nextProject = await openSyncInputDialog({
+			cancelLabel: "Cancel",
+			confirmLabel: "Change project",
+			description: `This will update ${project.session_count} session${project.session_count === 1 ? "" : "s"} and ${project.memory_count ?? 0} memor${project.memory_count === 1 ? "y" : "ies"} by changing the stored project. Sharing-domain assignment stays unchanged.`,
+			initialValue: currentProject,
+			placeholder: "Project name",
+			suggestions,
+			title: "Change project",
+			validate: (value) => {
+				const trimmed = value.trim();
+				if (!trimmed) return "Enter a project name.";
+				if (trimmed === currentProject) return "Already assigned to this project.";
+				return null;
+			}
+		});
+		if (nextProject == null) return;
+		try {
+			const result = await reassignProjectInventoryProject({
+				project: nextProject.trim(),
+				workspace_identity: project.workspace_identity
+			});
+			showGlobalNotice(`Changed project to ${result.project} for ${result.moved_session_count} session${result.moved_session_count === 1 ? "" : "s"}.`);
+			refreshProjects?.();
+		} catch (error) {
+			showGlobalNotice(error instanceof Error ? error.message : "Unable to change project.", "warning");
+		}
+	}
+	function renderProjectActions(project) {
+		const actions = document.createElement("div");
+		actions.className = "project-inventory-actions";
+		if (project.identity_source === "unmapped") {
+			const note = document.createElement("div");
+			note.className = "settings-note";
+			note.textContent = "This project is missing a stable path, git remote, or workspace id. It stays Local only until it has a stable identity.";
+			actions.appendChild(note);
+			return actions;
+		}
+		const label = document.createElement("label");
+		label.className = "sr-only";
+		const selectId = `project-domain-${project.workspace_identity.replace(/[^a-z0-9_-]/gi, "-")}`;
+		label.htmlFor = selectId;
+		label.textContent = `Sharing domain for ${project.display_project}`;
+		const select = document.createElement("select");
+		select.id = selectId;
+		select.className = "project-domain-select";
+		const currentAssignable = assignableScopes().some((scope) => scope.scope_id === project.resolved_scope_id);
+		if (!currentAssignable && project.resolved_scope_id) {
+			const current = document.createElement("option");
+			current.value = project.resolved_scope_id;
+			current.textContent = `${scopeLabel(project.resolved_scope_id)} — not assignable`;
+			current.disabled = true;
+			select.appendChild(current);
+		}
+		for (const scope of assignableScopes()) {
+			const option = document.createElement("option");
+			option.value = scope.scope_id;
+			option.textContent = scope.label ? `${scope.label} · ${scope.scope_id}` : scope.scope_id;
+			select.appendChild(option);
+		}
+		select.value = draftDomainSelections.get(project.workspace_identity) ?? project.suggested_scope_id ?? project.resolved_scope_id;
+		const save = document.createElement("button");
+		save.className = "settings-button";
+		save.type = "button";
+		save.textContent = project.suggested_scope_id && select.value === project.suggested_scope_id ? "Confirm suggestion" : "Save domain";
+		save.disabled = select.value === project.resolved_scope_id && !currentAssignable;
+		save.addEventListener("click", () => void saveProjectMapping(project, select.value));
+		select.addEventListener("change", () => {
+			draftDomainSelections.set(project.workspace_identity, select.value);
+			pendingConfirmations.delete(project.workspace_identity);
+			save.textContent = "Save domain";
+			save.disabled = false;
+			refreshProjects?.();
+		});
+		const keepLocal = document.createElement("button");
+		keepLocal.className = "settings-button";
+		keepLocal.type = "button";
+		keepLocal.textContent = "Keep local-only";
+		keepLocal.addEventListener("click", () => void saveProjectMapping(project, "local-default"));
+		const remove = document.createElement("button");
+		remove.className = "settings-button";
+		remove.type = "button";
+		remove.textContent = "Remove mapping";
+		remove.disabled = project.mapping_id == null || project.resolution_reason !== "exact_mapping";
+		remove.addEventListener("click", () => void removeProjectMapping(project));
+		const changeProject = document.createElement("button");
+		changeProject.className = "settings-button";
+		changeProject.type = "button";
+		changeProject.textContent = "Change project…";
+		changeProject.disabled = project.session_count === 0;
+		if (changeProject.disabled) changeProject.title = "No sessions are available to reassign for this saved mapping.";
+		changeProject.addEventListener("click", () => void reassignProject(project));
+		const forget = document.createElement("button");
+		forget.className = "settings-button danger";
+		forget.type = "button";
+		forget.textContent = "Forget local memories…";
+		forget.disabled = (project.memory_count ?? 0) === 0;
+		forget.addEventListener("click", () => void forgetProjectMemories(project));
+		actions.append(label, select, save, keepLocal, remove, changeProject, forget);
+		const pending = pendingConfirmations.get(project.workspace_identity);
+		if (pending) {
+			const warningBox = document.createElement("div");
+			warningBox.className = "settings-note project-guardrail-confirmation";
+			warningBox.setAttribute("role", "alert");
+			const title = document.createElement("strong");
+			title.textContent = "Confirmation required before saving this Sharing domain.";
+			const intro = document.createElement("p");
+			intro.textContent = "Codemem can save this change after you acknowledge the checks below. Verify the workspace details, then confirm to complete the save.";
+			const list = document.createElement("ul");
+			for (const warning of pending.warnings) {
+				const item = document.createElement("li");
+				const itemTitle = document.createElement("strong");
+				itemTitle.textContent = `${guardrailHeading(warning)}: `;
+				const message = document.createElement("span");
+				message.textContent = warning.message;
+				item.append(itemTitle, message);
+				list.appendChild(item);
+			}
+			const confirm = document.createElement("button");
+			confirm.className = "settings-button";
+			confirm.type = "button";
+			confirm.textContent = "I understand, save domain";
+			confirm.addEventListener("click", () => {
+				const currentPending = pendingConfirmations.get(project.workspace_identity);
+				if (!currentPending || currentPending.scopeId !== select.value) return;
+				saveProjectMapping(project, currentPending.scopeId, currentPending.requiredGuardrailTokens);
+			});
+			const cancel = document.createElement("button");
+			cancel.className = "settings-button";
+			cancel.type = "button";
+			cancel.textContent = "Cancel";
+			cancel.addEventListener("click", () => {
+				pendingConfirmations.delete(project.workspace_identity);
+				refreshProjects?.();
+			});
+			warningBox.append(title, intro, list, confirm, cancel);
+			actions.appendChild(warningBox);
+		}
+		const pendingForget = pendingForgetConfirmations.get(project.workspace_identity);
+		if (pendingForget) {
+			const warningBox = document.createElement("div");
+			warningBox.className = "settings-note project-guardrail-confirmation";
+			warningBox.setAttribute("role", "alert");
+			const title = document.createElement("strong");
+			title.textContent = "Confirm project memory cleanup.";
+			const intro = document.createElement("p");
+			intro.textContent = `${pendingForget.localOwnedMemoryCount.toLocaleString()} locally owned memor${pendingForget.localOwnedMemoryCount === 1 ? "y" : "ies"} will be forgotten. ${pendingForget.peerOwnedMemoryCount.toLocaleString()} peer-owned memor${pendingForget.peerOwnedMemoryCount === 1 ? "y" : "ies"} will be left unchanged.`;
+			const detail = document.createElement("p");
+			detail.textContent = "Use this only to clean up wrongly attributed local project inventory; it forgets actual local memories on this device.";
+			const confirm = document.createElement("button");
+			confirm.className = "settings-button danger";
+			confirm.type = "button";
+			confirm.textContent = "I understand, forget local memories";
+			confirm.addEventListener("click", () => void forgetProjectMemories(project, true));
+			const cancel = document.createElement("button");
+			cancel.className = "settings-button";
+			cancel.type = "button";
+			cancel.textContent = "Cancel";
+			cancel.addEventListener("click", () => {
+				pendingForgetConfirmations.delete(project.workspace_identity);
+				refreshProjects?.();
+			});
+			warningBox.append(title, intro, detail, confirm, cancel);
+			actions.appendChild(warningBox);
+		}
+		return actions;
+	}
+	function renderProjectRow(project) {
+		const row = document.createElement("article");
+		row.className = "project-inventory-row";
+		const header = document.createElement("div");
+		header.className = "project-inventory-row-header";
+		const title = document.createElement("div");
+		title.className = "project-inventory-title";
+		title.textContent = project.display_project;
+		header.appendChild(title);
+		const domain = document.createElement("div");
+		domain.className = "project-inventory-domain";
+		domain.textContent = scopeLabel(project.resolved_scope_id);
+		header.appendChild(domain);
+		row.appendChild(header);
+		const meta = document.createElement("div");
+		meta.className = "project-inventory-meta";
+		meta.textContent = `${formatResolution(project.resolution_reason)} · ${project.identity_source} · ${formatLatest(project.latest_session_at)}`;
+		row.appendChild(meta);
+		const signal = document.createElement("div");
+		signal.className = "project-inventory-signal mono";
+		signal.textContent = strongestSignal(project);
+		row.appendChild(signal);
+		if (project.suggested_scope_id && project.suggested_scope_id !== project.resolved_scope_id) {
+			const suggestion = document.createElement("div");
+			suggestion.className = "settings-note project-suggestion-note";
+			suggestion.textContent = project.suggestion_reason ? `Suggestion: ${project.suggestion_reason}` : `Suggestion: map this project to ${scopeLabel(project.suggested_scope_id)}.`;
+			row.appendChild(suggestion);
+		}
+		const warnings = project.guardrail_warnings.filter((warning) => warning.severity === "warning");
+		if (warnings.length > 0) {
+			const warningBox = document.createElement("div");
+			warningBox.className = "settings-note project-attention-note";
+			warningBox.textContent = `Needs attention: ${warnings.map((warning) => warning.message).join(" ")}`;
+			row.appendChild(warningBox);
+		}
+		if (project.statuses.length > 0) {
+			const badges = document.createElement("div");
+			badges.className = "project-inventory-badges";
+			for (const status of project.statuses) {
+				const badge = document.createElement("span");
+				badge.className = `project-status-badge ${status}`;
+				badge.textContent = formatStatus(status);
+				badges.appendChild(badge);
+			}
+			row.appendChild(badges);
+		}
+		const detail = document.createElement("details");
+		detail.className = "project-inventory-details";
+		detail.open = openProjectDetails.has(project.workspace_identity);
+		detail.addEventListener("toggle", () => {
+			if (detail.open) openProjectDetails.add(project.workspace_identity);
+			else openProjectDetails.delete(project.workspace_identity);
+		});
+		const summary = document.createElement("summary");
+		summary.textContent = "Identity and mapping details";
+		detail.appendChild(summary);
+		const list = document.createElement("dl");
+		list.className = "project-detail-grid";
+		const fields = [
+			["Workspace identity", project.workspace_identity],
+			["Project", project.project],
+			["CWD", project.cwd],
+			["Git remote", project.git_remote],
+			["Git branch", project.git_branch],
+			["Suggested domain", project.suggested_scope_id],
+			["Suggestion reason", project.suggestion_reason],
+			["Sessions", project.session_count],
+			["Memories", project.memory_count ?? "count unavailable"]
+		];
+		for (const [label, value] of fields) {
+			const dt = document.createElement("dt");
+			dt.textContent = label;
+			const dd = document.createElement("dd");
+			dd.textContent = value == null || value === "" ? "—" : String(value);
+			list.append(dt, dd);
+		}
+		detail.appendChild(list);
+		detail.appendChild(renderProjectActions(project));
+		row.appendChild(detail);
+		return row;
+	}
+	function clusterDomainLabel(projects) {
+		const uniqueScopes = [...new Set(projects.map((project) => project.resolved_scope_id))];
+		return uniqueScopes.length === 1 ? scopeLabel(uniqueScopes[0]) : "Mixed Sharing domains";
+	}
+	function renderProjectCluster(projects) {
+		if (projects.length === 1) return renderProjectRow(projects[0]);
+		const clusterKey = projectClusterKey(projects[0]);
+		const row = document.createElement("article");
+		row.className = "project-inventory-row project-inventory-cluster";
+		const header = document.createElement("div");
+		header.className = "project-inventory-row-header";
+		const title = document.createElement("div");
+		title.className = "project-inventory-title";
+		title.textContent = projectClusterLabel(projects[0]);
+		header.appendChild(title);
+		const domain = document.createElement("div");
+		domain.className = "project-inventory-domain";
+		domain.textContent = clusterDomainLabel(projects);
+		header.appendChild(domain);
+		row.appendChild(header);
+		const memoryCount = projects.reduce((total, project) => total + (project.memory_count ?? 0), 0);
+		const sessionCount = projects.reduce((total, project) => total + project.session_count, 0);
+		const meta = document.createElement("div");
+		meta.className = "project-inventory-meta";
+		meta.textContent = `${projects.length} identities · ${sessionCount.toLocaleString()} sessions · ${memoryCount.toLocaleString()} memories`;
+		row.appendChild(meta);
+		const actions = document.createElement("div");
+		actions.className = "project-inventory-actions";
+		const hasGuardrailWarnings = projects.some((project) => project.guardrail_warnings.length > 0);
+		const suggestedScopes = new Set(projects.map((project) => project.suggested_scope_id).filter((scopeId) => Boolean(scopeId)));
+		const resolvedScopes = new Set(projects.map((project) => project.resolved_scope_id));
+		const select = document.createElement("select");
+		select.className = "project-domain-select";
+		select.setAttribute("aria-label", `Sharing domain for ${projectClusterLabel(projects[0])} group`);
+		const placeholder = document.createElement("option");
+		placeholder.value = "";
+		placeholder.textContent = "Choose domain…";
+		select.appendChild(placeholder);
+		for (const scope of assignableScopes()) {
+			const option = document.createElement("option");
+			option.value = scope.scope_id;
+			option.textContent = scope.label ? `${scope.label} · ${scope.scope_id}` : scope.scope_id;
+			select.appendChild(option);
+		}
+		select.value = "";
+		const save = document.createElement("button");
+		save.className = "settings-button";
+		save.type = "button";
+		save.textContent = `Save domain for ${projects.length} identities`;
+		save.disabled = true;
+		save.addEventListener("click", () => void saveProjectClusterMapping(projects, select.value));
+		select.addEventListener("change", () => {
+			save.disabled = !select.value || hasGuardrailWarnings;
+		});
+		actions.append(select, save);
+		if (suggestedScopes.size > 1 || resolvedScopes.size > 1 || hasGuardrailWarnings) {
+			const note = document.createElement("div");
+			note.className = "settings-note project-attention-note";
+			note.textContent = hasGuardrailWarnings ? "One or more identities in this group need individual review before bulk assignment." : "This group has mixed suggestions or current domains. Choose a domain explicitly before bulk assignment.";
+			actions.appendChild(note);
+		}
+		row.appendChild(actions);
+		const details = document.createElement("details");
+		details.className = "project-inventory-details";
+		details.open = openProjectClusters.has(clusterKey);
+		details.addEventListener("toggle", () => {
+			if (details.open) openProjectClusters.add(clusterKey);
+			else openProjectClusters.delete(clusterKey);
+		});
+		const summary = document.createElement("summary");
+		summary.textContent = "Show identities in this project";
+		details.appendChild(summary);
+		for (const project of projects) details.appendChild(renderProjectRow(project));
+		row.appendChild(details);
+		return row;
+	}
+	function projectClusters(projects) {
+		const byKey = /* @__PURE__ */ new Map();
+		for (const project of projects) {
+			const key = projectClusterKey(project);
+			byKey.set(key, [...byKey.get(key) ?? [], project]);
+		}
+		return [...byKey.values()];
+	}
+	function renderEmpty(message) {
+		const list = el("projectsInventoryList");
+		if (!list) return;
+		list.textContent = "";
+		const empty = document.createElement("div");
+		empty.className = "settings-note";
+		empty.textContent = message;
+		list.appendChild(empty);
+	}
+	async function loadProjectsData() {
+		const meta = el("projectsInventoryMeta");
+		const list = el("projectsInventoryList");
+		if (!meta || !list) return;
+		meta.textContent = "Loading project inventory…";
+		try {
+			const [result, settings] = await Promise.all([loadProjectScopeInventory({
+				limit: lastLimit,
+				offset: currentOffset,
+				q: el("projectsSearch")?.value.trim() || void 0,
+				status: el("projectsStatusFilter")?.value || void 0
+			}), loadSharingDomainSettings()]);
+			scopes = settings.scopes;
+			list.textContent = "";
+			if (result.projects.length === 0) renderEmpty("No projects match those filters.");
+			else for (const cluster of projectClusters(result.projects)) list.appendChild(renderProjectCluster(cluster));
+			meta.textContent = result.total === 0 ? "0 project identities found" : `${result.total} project identit${result.total === 1 ? "y" : "ies"} found · showing ${result.offset + 1}-${Math.min(result.offset + result.projects.length, result.total)}`;
+			const prev = el("projectsPrevPage");
+			const next = el("projectsNextPage");
+			if (prev) prev.disabled = result.offset === 0;
+			if (next) next.disabled = !result.has_more;
+		} catch (error) {
+			meta.textContent = "Project inventory failed to load.";
+			renderEmpty(error instanceof Error ? error.message : "Unable to load project inventory.");
+		}
+	}
+	function initProjectsTab(refresh) {
+		refreshProjects = refresh;
+		const status = el("projectsStatusFilter");
+		if (status && status.options.length === 0) for (const [value, label] of STATUS_OPTIONS) {
+			const option = document.createElement("option");
+			option.value = value;
+			option.textContent = label;
+			status.appendChild(option);
+		}
+		const requestRefresh = () => {
+			currentOffset = 0;
+			refreshProjects?.();
+		};
+		el("projectsSearch")?.addEventListener("input", requestRefresh);
+		status?.addEventListener("change", requestRefresh);
+		el("projectsPrevPage")?.addEventListener("click", () => {
+			currentOffset = Math.max(0, currentOffset - lastLimit);
+			refreshProjects?.();
+		});
+		el("projectsNextPage")?.addEventListener("click", () => {
+			currentOffset += lastLimit;
+			refreshProjects?.();
+		});
+	}
+	//#endregion
 	//#region src/tabs/settings/data/parse.ts
 	function parseCommandArgv(raw, options) {
 		const text = raw.trim();
@@ -15964,7 +16589,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		return scopes.find((scope) => scope.scope_id === scopeId)?.label || scopeId;
 	}
 	function resetDrafts(settings) {
-		return Object.fromEntries(settings.projects.map((project) => [project.workspace_identity, project.resolved_scope_id]));
+		return Object.fromEntries(settings.projects.map((project) => [project.workspace_identity, project.suggested_scope_id ?? project.resolved_scope_id]));
 	}
 	function canAssignProject(project) {
 		return project.identity_source !== "unmapped";
@@ -15980,6 +16605,9 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 	function visibleProjectWarnings(project) {
 		return (project.guardrail_warnings ?? []).filter((warning) => warning.severity === "warning" || warning.code === "unknown_project_local_only");
 	}
+	function isUsingSuggestion(project, currentValue) {
+		return Boolean(project.suggested_scope_id && currentValue === project.suggested_scope_id && project.suggested_scope_id !== project.resolved_scope_id);
+	}
 	function settingsMappingWarnings(settings) {
 		return settings.mappings.flatMap((mapping) => mapping.guardrail_warnings ?? []);
 	}
@@ -16015,7 +16643,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		y$2(() => {
 			reload();
 		}, []);
-		const scopeOptions = T$1(() => (settings?.scopes ?? []).map((scope) => ({
+		const scopeOptions = T$1(() => (settings?.scopes ?? []).filter((scope) => scope.scope_id !== "legacy-shared-review").map((scope) => ({
 			value: scope.scope_id,
 			label: domainLabel(scope)
 		})), [settings?.scopes]);
@@ -16070,20 +16698,32 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 				setSavingKey(null);
 			}
 		};
+		const openProjects = () => {
+			window.location.hash = "projects";
+		};
 		return /* @__PURE__ */ u("div", {
 			className: "settings-group",
 			children: [
 				/* @__PURE__ */ u("h3", {
 					className: "settings-group-title",
-					children: "Sharing domains"
+					children: "Advanced Sharing-domain mappings"
 				}),
 				/* @__PURE__ */ u("div", {
 					className: "small",
-					children: "Map known projects to their default Sharing domain. This changes local scope resolution for future writes; it does not grant any peer or coordinator member access by itself."
+					children: "Use Projects for day-to-day project/domain review. This fallback panel exposes the same mapping controls for troubleshooting and recovery."
 				}),
 				/* @__PURE__ */ u("div", {
 					className: "small",
-					children: "Unmapped and unknown projects stay on Local only until you assign a domain."
+					children: "Saving a mapping changes local scope resolution for future writes; it does not grant any peer or coordinator member access by itself."
+				}),
+				/* @__PURE__ */ u("div", {
+					className: "section-actions",
+					children: /* @__PURE__ */ u("button", {
+						className: "settings-button",
+						onClick: openProjects,
+						type: "button",
+						children: "Open Projects review"
+					})
 				}),
 				settings ? /* @__PURE__ */ u(GuardrailMessages, {
 					label: "Sharing domain mapping warnings",
@@ -16109,6 +16749,8 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 					const unchanged = currentValue === project.resolved_scope_id;
 					const assignable = canAssignProject(project);
 					const currentScopeName = scopeName(settings.scopes, project.resolved_scope_id);
+					const usingSuggestion = isUsingSuggestion(project, currentValue);
+					const suggestedScopeName = project.suggested_scope_id ? scopeName(settings.scopes, project.suggested_scope_id) : null;
 					const pendingConfirmation = confirmation?.workspaceIdentity === project.workspace_identity ? confirmation : null;
 					const canRemoveProjectMapping = assignable && project.mapping_id != null && project.resolution_reason === "exact_mapping";
 					return /* @__PURE__ */ u("div", {
@@ -16150,6 +16792,15 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 									resolutionLabel(project.resolution_reason)
 								]
 							}),
+							project.suggested_scope_id && project.suggestion_reason ? /* @__PURE__ */ u("div", {
+								className: "settings-note",
+								role: "status",
+								children: [
+									/* @__PURE__ */ u("strong", { children: ["Suggested mapping: ", suggestedScopeName] }),
+									/* @__PURE__ */ u("div", { children: project.suggestion_reason }),
+									/* @__PURE__ */ u("div", { children: "Folders, paths, and git remotes are hints only. Saving this mapping requires your confirmation and does not grant any peer access." })
+								]
+							}) : null,
 							/* @__PURE__ */ u(GuardrailMessages, { warnings: visibleProjectWarnings(project) }),
 							!assignable ? /* @__PURE__ */ u("div", {
 								className: "settings-note",
@@ -16186,7 +16837,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 									disabled: !assignable || saving || unchanged,
 									onClick: () => void saveProject(project),
 									type: "button",
-									children: saving ? "Saving…" : "Save Sharing domain"
+									children: saving ? "Saving…" : usingSuggestion ? "Confirm suggested mapping" : "Save Sharing domain"
 								}), /* @__PURE__ */ u("button", {
 									className: "settings-button",
 									disabled: saving || !canRemoveProjectMapping,
@@ -17346,6 +17997,90 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 			emptyMessage: "No Sharing-domain grants exist for this device yet. Project filters below cannot send data by themselves."
 		};
 	}
+	var PERSONAL_SCOPE_WORDS = [
+		"personal",
+		"private",
+		"home",
+		"mine",
+		"me"
+	];
+	var OSS_SCOPE_WORDS = [
+		"oss",
+		"open source",
+		"opensource",
+		"community",
+		"public"
+	];
+	var WORK_LIKE_SCOPE_WORDS = ["work", "client"];
+	var LOCAL_SCOPE_WORDS = [
+		"local",
+		"legacy",
+		"review"
+	];
+	function scopeSearchText(scope) {
+		return [
+			scope.scope_id,
+			scope.label,
+			scope.kind,
+			scope.authority_type
+		].map((value) => cleanText(value) ?? "").join(" ").toLowerCase();
+	}
+	function scopeIdentitySearchText(scope) {
+		return [
+			scope.scope_id,
+			scope.label,
+			scope.kind
+		].map((value) => cleanText(value) ?? "").join(" ").toLowerCase();
+	}
+	function escapeRegex(value) {
+		return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+	}
+	function hasScopeWord(scope, words) {
+		const text = scopeSearchText(scope);
+		return words.some((word) => {
+			const escaped = escapeRegex(word.toLowerCase());
+			return new RegExp(`(^|[^a-z0-9])${escaped}([^a-z0-9]|$)`).test(text);
+		});
+	}
+	function isPersonalOrOssScope(scope) {
+		return hasScopeWord(scope, PERSONAL_SCOPE_WORDS) || hasScopeWord(scope, OSS_SCOPE_WORDS);
+	}
+	function isLocalOrLegacyScope(scope) {
+		const text = scopeIdentitySearchText(scope);
+		return LOCAL_SCOPE_WORDS.some((word) => {
+			const escaped = escapeRegex(word.toLowerCase());
+			return new RegExp(`(^|[^a-z0-9])${escaped}([^a-z0-9]|$)`).test(text);
+		});
+	}
+	function isWorkLikeScope(scope) {
+		return !isPersonalOrOssScope(scope) && (!isLocalOrLegacyScope(scope) || hasScopeWord(scope, WORK_LIKE_SCOPE_WORDS));
+	}
+	function derivePeerGrantRoleMismatchView(peer) {
+		const scopes = Array.isArray(peer.authorized_scopes) ? peer.authorized_scopes : [];
+		if (!Boolean(cleanText(peer.discovered_via_group_id) || cleanText(peer.discovered_via_coordinator_id)) || scopes.length === 0) return {
+			badgeLabel: null,
+			detail: "",
+			isVisible: false,
+			message: "",
+			title: ""
+		};
+		const hasPersonalOrOssGrant = scopes.some(isPersonalOrOssScope);
+		const hasWorkLikeGrant = scopes.some(isWorkLikeScope);
+		if (!hasPersonalOrOssGrant || hasWorkLikeGrant) return {
+			badgeLabel: null,
+			detail: "",
+			isVisible: false,
+			message: "",
+			title: ""
+		};
+		return {
+			badgeLabel: "Review domain fit",
+			detail: "Coordinator/group context helps find the device, and project filters only narrow already-authorized domains. Neither one grants a missing work/client domain.",
+			isVisible: true,
+			message: "This coordinator-discovered device has personal or OSS Sharing-domain grants, but no separate work/client-like domain grant. If this device is meant for work/client sync, add that Sharing domain explicitly before treating sync as validated.",
+			title: "Check this device's Sharing-domain role"
+		};
+	}
 	function derivePeerProjectNarrowingView(scope) {
 		const effectiveInclude = cleanList(scope?.effective_include);
 		const effectiveExclude = cleanList(scope?.effective_exclude);
@@ -17714,23 +18449,23 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		let query = "";
 		let activeIndex = 0;
 		let popoverOpen = false;
-		const container = el("div", "project-scope-picker");
-		const selectedList = el("ul", "project-scope-picker-selected");
-		const trigger = el("button", "project-scope-picker-trigger settings-button");
+		const container = el$1("div", "project-scope-picker");
+		const selectedList = el$1("ul", "project-scope-picker-selected");
+		const trigger = el$1("button", "project-scope-picker-trigger settings-button");
 		trigger.type = "button";
-		const triggerLabel = el("span", null, placeholder || "Add project");
-		const triggerPlus = el("span", null, "+");
+		const triggerLabel = el$1("span", null, placeholder || "Add project");
+		const triggerPlus = el$1("span", null, "+");
 		triggerPlus.setAttribute("aria-hidden", "true");
 		trigger.append(triggerPlus, triggerLabel);
 		trigger.setAttribute("aria-haspopup", "listbox");
 		trigger.setAttribute("aria-expanded", "false");
-		const popover = el("div", "project-scope-picker-popover project-scope-picker-popover--inline");
+		const popover = el$1("div", "project-scope-picker-popover project-scope-picker-popover--inline");
 		popover.hidden = true;
-		const search = el("input", "project-scope-picker-search");
+		const search = el$1("input", "project-scope-picker-search");
 		search.type = "text";
 		search.placeholder = "Search or create…";
 		search.setAttribute("aria-label", "Search projects");
-		const results = el("div", "project-scope-picker-results");
+		const results = el$1("div", "project-scope-picker-results");
 		results.setAttribute("role", "listbox");
 		popover.append(search, results);
 		const knownPool = () => {
@@ -17783,14 +18518,14 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		const renderSelected = () => {
 			selectedList.textContent = "";
 			if (!values.length) {
-				const note = el("li", "project-scope-picker-selected-empty", emptyLabel);
+				const note = el$1("li", "project-scope-picker-selected-empty", emptyLabel);
 				selectedList.appendChild(note);
 				return;
 			}
 			values.forEach((value) => {
-				const chip = el("li", "project-scope-picker-selected-chip");
-				const label = el("span", null, value);
-				const remove = el("button", "project-scope-picker-selected-remove", "×");
+				const chip = el$1("li", "project-scope-picker-selected-chip");
+				const label = el$1("span", null, value);
+				const remove = el$1("button", "project-scope-picker-selected-remove", "×");
 				remove.type = "button";
 				remove.setAttribute("aria-label", `Remove ${value}`);
 				remove.addEventListener("click", () => {
@@ -17809,19 +18544,19 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 			const rowCount = rows.length + (withCreate ? 1 : 0);
 			if (activeIndex >= rowCount) activeIndex = Math.max(0, rowCount - 1);
 			if (!rows.length && !withCreate) {
-				const empty = el("div", "project-scope-picker-empty-row", "No projects yet. Type a name to create one.");
+				const empty = el$1("div", "project-scope-picker-empty-row", "No projects yet. Type a name to create one.");
 				results.appendChild(empty);
 				return;
 			}
 			rows.forEach((project, index) => {
 				const selected = values.includes(project);
-				const row = el("button", index === activeIndex ? "project-scope-picker-row project-scope-picker-row--active" : "project-scope-picker-row");
+				const row = el$1("button", index === activeIndex ? "project-scope-picker-row project-scope-picker-row--active" : "project-scope-picker-row");
 				row.type = "button";
 				row.setAttribute("role", "option");
 				row.setAttribute("aria-selected", selected ? "true" : "false");
-				const check = el("span", "project-scope-picker-row-check", selected ? "✓" : "");
+				const check = el$1("span", "project-scope-picker-row-check", selected ? "✓" : "");
 				check.setAttribute("aria-hidden", "true");
-				const labelEl = el("span", "project-scope-picker-row-label", project);
+				const labelEl = el$1("span", "project-scope-picker-row-label", project);
 				row.append(check, labelEl);
 				row.addEventListener("click", () => {
 					activeIndex = index;
@@ -17835,12 +18570,12 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 			});
 			if (withCreate) {
 				const index = rows.length;
-				const row = el("button", index === activeIndex ? "project-scope-picker-row project-scope-picker-row--create project-scope-picker-row--active" : "project-scope-picker-row project-scope-picker-row--create");
+				const row = el$1("button", index === activeIndex ? "project-scope-picker-row project-scope-picker-row--create project-scope-picker-row--active" : "project-scope-picker-row project-scope-picker-row--create");
 				row.type = "button";
 				row.setAttribute("role", "option");
-				const check = el("span", "project-scope-picker-row-check", "+");
+				const check = el$1("span", "project-scope-picker-row-check", "+");
 				check.setAttribute("aria-hidden", "true");
-				const labelEl = el("span", "project-scope-picker-row-label", `Create "${query.trim()}"`);
+				const labelEl = el$1("span", "project-scope-picker-row-label", `Create "${query.trim()}"`);
 				row.append(check, labelEl);
 				row.addEventListener("click", () => createFromQuery());
 				row.addEventListener("mouseenter", () => {
@@ -17920,11 +18655,11 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		}
 		container.hidden = false;
 		actions.slice(0, 2).forEach((item) => {
-			const row = el("div", "sync-action");
-			const textWrap = el("div", "sync-action-text");
+			const row = el$1("div", "sync-action");
+			const textWrap = el$1("div", "sync-action-text");
 			textWrap.textContent = item.label;
-			textWrap.appendChild(el("span", "sync-action-command", item.command));
-			const btn = el("button", "settings-button sync-action-copy", "Copy");
+			textWrap.appendChild(el$1("span", "sync-action-command", item.command));
+			const btn = el$1("button", "settings-button sync-action-copy", "Copy");
 			btn.addEventListener("click", () => copyToClipboard(item.command, btn));
 			row.append(textWrap, btn);
 			container.appendChild(row);
@@ -18645,6 +19380,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		const directionHint = DIRECTION_GLYPH[derivePeerDirection(peer)];
 		const peerStatus = peer.status || {};
 		const authorizedDomains = derivePeerAuthorizedDomainsView(peer);
+		const grantRoleMismatch = derivePeerGrantRoleMismatchView(peer);
 		const scopeRejections = derivePeerScopeRejectionsView(peer);
 		const scope = peer.project_scope || {};
 		const projectNarrowing = derivePeerProjectNarrowingView(scope);
@@ -18900,6 +19636,11 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 										title: "Inbound ops rejected by the sharing-domain scope gate. Expand for reason codes.",
 										children: scopeRejections.badgeLabel
 									}) : null,
+									grantRoleMismatch.badgeLabel ? /* @__PURE__ */ u("span", {
+										className: "badge badge-offline",
+										title: "Review whether explicit Sharing-domain grants match this device's intended role.",
+										children: grantRoleMismatch.badgeLabel
+									}) : null,
 									peer.discovered_via_group_id ? /* @__PURE__ */ u("span", {
 										className: "badge actor-badge",
 										title: `Discovered through coordinator group ${peer.discovered_via_group_id}`,
@@ -19008,6 +19749,15 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 									children: domain.label
 								}, domain.scopeId))
 							}) : null,
+							grantRoleMismatch.isVisible ? /* @__PURE__ */ u("div", {
+								className: "settings-note",
+								role: "status",
+								children: [
+									/* @__PURE__ */ u("strong", { children: grantRoleMismatch.title }),
+									/* @__PURE__ */ u("div", { children: grantRoleMismatch.message }),
+									/* @__PURE__ */ u("div", { children: grantRoleMismatch.detail })
+								]
+							}) : null,
 							/* @__PURE__ */ u("div", {
 								className: "peer-meta",
 								children: projectNarrowing.note
@@ -20497,6 +21247,32 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 	}
 	//#endregion
 	//#region src/tabs/sync/components/sync-sharing-review.tsx
+	function formatIdentitySource(source) {
+		switch (source) {
+			case "cwd": return "Matched by folder";
+			case "git_remote": return "Matched by git remote";
+			case "workspace_id": return "Matched by workspace";
+			case "project": return "Matched by project name";
+			case "unmapped": return "Missing project identity";
+			default: return `Matched by ${source.replace(/_/g, " ")}`;
+		}
+	}
+	function needsProjectCleanup(group) {
+		const label = group.displayProject.toLowerCase();
+		return label.includes("fatal:") || label.includes("not a git repository") || label === "unknown project" || group.identitySource === "unmapped";
+	}
+	function canReassignLegacyGroup(group) {
+		return (group.reassignableMemoryCount ?? group.memoryCount) > 0;
+	}
+	function groupSearchText(group) {
+		return [
+			group.displayProject,
+			group.identitySource,
+			group.suggestedScopeId ?? "",
+			group.suggestionReason ?? "",
+			group.workspaceIdentity
+		].join(" ").toLowerCase();
+	}
 	function SharingReviewRow({ item, onReview }) {
 		return /* @__PURE__ */ u("div", {
 			className: "actor-row",
@@ -20530,31 +21306,354 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 			})]
 		});
 	}
-	function LegacySharedReviewRow({ item }) {
+	function LegacySharedReviewRow({ item, onReassign, onReview }) {
+		const groups = item.groups ?? [];
+		const targetScopes = item.targetScopes ?? [];
+		const initialSelections = Object.fromEntries(groups.map((group) => [group.workspaceIdentity, group.suggestedScopeId ?? ""]));
+		const [pending, setPending] = d$2({});
+		const [errors, setErrors] = d$2({});
+		const [selectedScopes, setSelectedScopes] = d$2(initialSelections);
+		const [selectedGroups, setSelectedGroups] = d$2({});
+		const [filter, setFilter] = d$2("all");
+		const [query, setQuery] = d$2("");
+		const [busyIdentity, setBusyIdentity] = d$2(null);
+		const shownGroupCount = groups.length;
+		const groupCount = item.totalGroupCount ?? shownGroupCount;
+		const cleanupCount = groups.filter(needsProjectCleanup).length;
+		const suggestedCount = groups.filter((group) => group.suggestedScopeId && !needsProjectCleanup(group) && canReassignLegacyGroup(group)).length;
+		const selectedReassignableCount = groups.filter((group) => selectedGroups[group.workspaceIdentity] && canReassignLegacyGroup(group)).length;
+		const selectedCount = groups.filter((group) => selectedGroups[group.workspaceIdentity] && canReassignLegacyGroup(group) && Boolean(selectedScopes[group.workspaceIdentity])).length;
+		const visibleGroups = groups.filter((group) => {
+			const cleanup = needsProjectCleanup(group);
+			if (filter === "suggested" && (!group.suggestedScopeId || cleanup)) return false;
+			if (filter === "cleanup" && !cleanup) return false;
+			if (filter === "no-suggestion" && (group.suggestedScopeId || cleanup)) return false;
+			if (filter === "selected" && !selectedGroups[group.workspaceIdentity]) return false;
+			return !query.trim() || groupSearchText(group).includes(query.trim().toLowerCase());
+		});
+		async function applyGroup(group) {
+			const selectedScopeId = selectedScopes[group.workspaceIdentity] || group.suggestedScopeId || "";
+			if (!selectedScopeId || !onReassign || busyIdentity) return;
+			setBusyIdentity(group.workspaceIdentity);
+			setErrors((current) => {
+				const next = { ...current };
+				delete next[group.workspaceIdentity];
+				return next;
+			});
+			try {
+				const preview = await onReassign(group, selectedScopeId, Boolean(pending[group.workspaceIdentity]), pending[group.workspaceIdentity]?.confirmation_token);
+				if (preview) setPending((current) => ({
+					...current,
+					[group.workspaceIdentity]: preview
+				}));
+				else setPending((current) => {
+					const next = { ...current };
+					delete next[group.workspaceIdentity];
+					return next;
+				});
+			} catch (error) {
+				setErrors((current) => ({
+					...current,
+					[group.workspaceIdentity]: error instanceof Error ? error.message : "Unable to reassign legacy review memories."
+				}));
+			} finally {
+				setBusyIdentity(null);
+			}
+		}
+		function updateSelectedScope(group, scopeId) {
+			setSelectedScopes((current) => ({
+				...current,
+				[group.workspaceIdentity]: scopeId
+			}));
+			setPending((current) => {
+				const next = { ...current };
+				delete next[group.workspaceIdentity];
+				return next;
+			});
+			setErrors((current) => {
+				const next = { ...current };
+				delete next[group.workspaceIdentity];
+				return next;
+			});
+		}
+		function toggleGroup(group, checked) {
+			setSelectedGroups((current) => ({
+				...current,
+				[group.workspaceIdentity]: checked
+			}));
+		}
+		function setVisibleSelected(checked) {
+			setSelectedGroups((current) => ({
+				...current,
+				...Object.fromEntries(visibleGroups.filter(canReassignLegacyGroup).map((group) => [group.workspaceIdentity, checked]))
+			}));
+		}
+		function selectSuggestedGroups() {
+			setSelectedGroups((current) => ({
+				...current,
+				...Object.fromEntries(groups.filter((group) => group.suggestedScopeId && !needsProjectCleanup(group) && canReassignLegacyGroup(group)).map((group) => [group.workspaceIdentity, true]))
+			}));
+		}
+		async function applySelectedGroups() {
+			if (!onReassign || busyIdentity || selectedCount === 0) return;
+			const selected = groups.filter((group) => selectedGroups[group.workspaceIdentity] && canReassignLegacyGroup(group) && Boolean(selectedScopes[group.workspaceIdentity]));
+			if (selected.every((group) => pending[group.workspaceIdentity])) return;
+			setBusyIdentity("bulk");
+			try {
+				for (const group of selected) {
+					if (pending[group.workspaceIdentity]) continue;
+					const selectedScopeId = selectedScopes[group.workspaceIdentity] || group.suggestedScopeId || "";
+					if (!selectedScopeId) continue;
+					try {
+						const preview = await onReassign(group, selectedScopeId, false);
+						setErrors((current) => {
+							const next = { ...current };
+							delete next[group.workspaceIdentity];
+							return next;
+						});
+						if (preview) setPending((current) => ({
+							...current,
+							[group.workspaceIdentity]: preview
+						}));
+					} catch (error) {
+						setErrors((current) => ({
+							...current,
+							[group.workspaceIdentity]: error instanceof Error ? error.message : "Unable to reassign legacy review memories."
+						}));
+					}
+				}
+			} finally {
+				setBusyIdentity(null);
+			}
+		}
 		return /* @__PURE__ */ u("div", {
-			className: "actor-row",
-			children: /* @__PURE__ */ u("div", {
-				className: "actor-details",
-				children: [/* @__PURE__ */ u("div", {
-					className: "actor-title",
-					children: [/* @__PURE__ */ u("strong", { children: "Legacy shared review" }), /* @__PURE__ */ u("span", {
-						className: "badge badge-offline",
-						children: "Needs review"
+			className: "legacy-review-card",
+			children: [
+				/* @__PURE__ */ u("div", {
+					className: "legacy-review-header",
+					children: [/* @__PURE__ */ u("div", { children: [
+						/* @__PURE__ */ u("div", {
+							className: "actor-title",
+							children: [/* @__PURE__ */ u("strong", { children: "Legacy shared review" }), /* @__PURE__ */ u("span", {
+								className: "badge badge-offline",
+								children: "Needs project review"
+							})]
+						}),
+						/* @__PURE__ */ u("div", {
+							className: "peer-meta legacy-review-summary",
+							children: [
+								groupCount.toLocaleString(),
+								" older",
+								" ",
+								groupCount === 1 ? "project needs" : "projects need",
+								" a Sharing domain. They contain",
+								" ",
+								item.memoryCount.toLocaleString(),
+								" older shared memories total; review the projects, not individual memories.",
+								shownGroupCount < groupCount ? ` Showing ${shownGroupCount.toLocaleString()} projects; open Projects to review the rest.` : ""
+							]
+						}),
+						/* @__PURE__ */ u("div", {
+							className: "peer-meta legacy-review-warning",
+							children: "Nothing moves automatically. Reassignment changes future sync authorization; it does not erase copies peers already received."
+						})
+					] }), /* @__PURE__ */ u("div", {
+						className: "actor-actions",
+						children: /* @__PURE__ */ u("button", {
+							type: "button",
+							className: "settings-button",
+							onClick: onReview,
+							children: "Manage all projects"
+						})
 					})]
-				}), /* @__PURE__ */ u("div", {
-					className: "peer-meta",
-					children: [
-						item.memoryCount.toLocaleString(),
-						" historical shared memories are in ",
-						item.scopeId,
-						". 0.30 placed ambiguous older shared data there conservatively; review mappings before promoting it. Remapping or revocation does not erase data already copied to peers."
-					]
-				})]
-			})
+				}),
+				/* @__PURE__ */ u("div", {
+					className: "legacy-review-toolbar",
+					children: [/* @__PURE__ */ u("div", {
+						className: "legacy-review-filter-row",
+						children: [
+							["all", `Showing ${shownGroupCount.toLocaleString()}`],
+							["suggested", `Suggested ${suggestedCount.toLocaleString()}`],
+							["cleanup", `Needs cleanup ${cleanupCount.toLocaleString()}`],
+							["no-suggestion", "No suggestion"],
+							["selected", `Selected ${selectedCount.toLocaleString()}`]
+						].map(([value, label]) => /* @__PURE__ */ u("button", {
+							className: filter === value ? "settings-button legacy-filter active" : "settings-button legacy-filter",
+							onClick: () => setFilter(value),
+							type: "button",
+							children: label
+						}, value))
+					}), /* @__PURE__ */ u("div", {
+						className: "legacy-review-bulk-row",
+						children: [
+							/* @__PURE__ */ u("input", {
+								"aria-label": "Search legacy project groups",
+								className: "peer-scope-input legacy-review-search",
+								onInput: (event) => setQuery(event.currentTarget.value),
+								placeholder: "Search project, signal, or destination…",
+								value: query
+							}),
+							/* @__PURE__ */ u("button", {
+								className: "settings-button",
+								onClick: () => setVisibleSelected(true),
+								type: "button",
+								children: "Select visible"
+							}),
+							/* @__PURE__ */ u("button", {
+								className: "settings-button",
+								onClick: selectSuggestedGroups,
+								type: "button",
+								children: "Select suggested"
+							}),
+							/* @__PURE__ */ u("button", {
+								className: "settings-button",
+								onClick: () => setVisibleSelected(false),
+								type: "button",
+								children: "Clear visible"
+							}),
+							onReassign && targetScopes.length > 0 ? /* @__PURE__ */ u("button", {
+								className: "settings-save",
+								disabled: busyIdentity != null || selectedCount === 0 || groups.filter((group) => selectedGroups[group.workspaceIdentity] && canReassignLegacyGroup(group) && Boolean(selectedScopes[group.workspaceIdentity])).every((group) => pending[group.workspaceIdentity]),
+								onClick: () => void applySelectedGroups(),
+								type: "button",
+								children: busyIdentity === "bulk" ? "Previewing…" : `Preview ${selectedCount.toLocaleString()} selected`
+							}) : onReassign && selectedReassignableCount > 0 ? /* @__PURE__ */ u("span", {
+								className: "legacy-review-cleanup-note",
+								children: "Add or join a Sharing domain before bulk reassignment."
+							}) : null,
+							selectedCount > 0 && groups.filter((group) => selectedGroups[group.workspaceIdentity] && canReassignLegacyGroup(group) && Boolean(selectedScopes[group.workspaceIdentity])).every((group) => pending[group.workspaceIdentity]) ? /* @__PURE__ */ u("span", {
+								className: "legacy-review-cleanup-note",
+								children: "Bulk actions only preview. Confirm each project individually to avoid partial reassignment."
+							}) : null
+						]
+					})]
+				}),
+				groups.length > 0 ? /* @__PURE__ */ u("ul", {
+					className: "legacy-review-groups",
+					"aria-label": "Legacy shared review project groups",
+					children: visibleGroups.map((group) => /* @__PURE__ */ u("li", {
+						className: "legacy-review-group",
+						children: [
+							/* @__PURE__ */ u("div", {
+								className: "legacy-review-group-main",
+								children: [/* @__PURE__ */ u("div", {
+									className: "legacy-review-title-wrap",
+									children: [/* @__PURE__ */ u("input", {
+										"aria-label": `Select ${group.displayProject}`,
+										checked: Boolean(selectedGroups[group.workspaceIdentity]),
+										className: "cm-checkbox",
+										disabled: !canReassignLegacyGroup(group),
+										onChange: (event) => toggleGroup(group, event.currentTarget.checked),
+										type: "checkbox"
+									}), /* @__PURE__ */ u("div", { children: [
+										/* @__PURE__ */ u("div", {
+											className: "legacy-review-group-title",
+											children: group.displayProject
+										}),
+										/* @__PURE__ */ u("div", {
+											className: "legacy-review-group-meta",
+											children: [formatIdentitySource(group.identitySource), group.suggestedScopeId ? ` · suggested ${group.suggestedScopeId}` : ""]
+										}),
+										!canReassignLegacyGroup(group) ? /* @__PURE__ */ u("div", {
+											className: "legacy-review-cleanup-note",
+											children: "Peer-owned only. These older memories were received from another device, so this device cannot reassign them to a Sharing domain."
+										}) : group.peerOwnedMemoryCount ? /* @__PURE__ */ u("div", {
+											className: "legacy-review-cleanup-note",
+											children: [
+												(group.reassignableMemoryCount ?? group.memoryCount).toLocaleString(),
+												" ",
+												"local memor",
+												(group.reassignableMemoryCount ?? group.memoryCount) === 1 ? "y" : "ies",
+												" ",
+												"can be reassigned; ",
+												group.peerOwnedMemoryCount.toLocaleString(),
+												" peer-owned memor",
+												group.peerOwnedMemoryCount === 1 ? "y" : "ies",
+												" will stay in review."
+											]
+										}) : null,
+										needsProjectCleanup(group) ? /* @__PURE__ */ u("div", {
+											className: "legacy-review-cleanup-note",
+											children: "Unclear project identity. Inspect or correct the project before trusting a domain."
+										}) : null
+									] })]
+								}), /* @__PURE__ */ u("span", {
+									className: "legacy-review-count",
+									children: [
+										group.memoryCount.toLocaleString(),
+										" memor",
+										group.memoryCount === 1 ? "y" : "ies"
+									]
+								})]
+							}),
+							group.suggestionReason ? /* @__PURE__ */ u("div", {
+								className: "legacy-review-reason",
+								children: group.suggestionReason
+							}) : null,
+							errors[group.workspaceIdentity] ? /* @__PURE__ */ u("div", {
+								className: "legacy-review-confirmation",
+								role: "alert",
+								children: errors[group.workspaceIdentity]
+							}) : null,
+							pending[group.workspaceIdentity] ? /* @__PURE__ */ u("div", {
+								className: "legacy-review-confirmation",
+								role: "alert",
+								children: [
+									pending[group.workspaceIdentity].warning,
+									" This will reassign",
+									" ",
+									pending[group.workspaceIdentity].reassignable_memory_count.toLocaleString(),
+									" of",
+									" ",
+									pending[group.workspaceIdentity].memory_count.toLocaleString(),
+									" memories",
+									pending[group.workspaceIdentity].skipped_memory_count ? `; ${pending[group.workspaceIdentity].skipped_memory_count.toLocaleString()} peer-owned copies will be left unchanged` : "",
+									"."
+								]
+							}) : null,
+							targetScopes.length > 0 && onReassign && canReassignLegacyGroup(group) ? /* @__PURE__ */ u("label", {
+								className: "legacy-review-target",
+								children: [/* @__PURE__ */ u("span", { children: "Destination Sharing domain" }), /* @__PURE__ */ u("select", {
+									className: "peer-scope-input",
+									disabled: busyIdentity != null,
+									onChange: (event) => updateSelectedScope(group, event.currentTarget.value),
+									value: selectedScopes[group.workspaceIdentity] || "",
+									children: [/* @__PURE__ */ u("option", {
+										value: "",
+										children: "Choose domain…"
+									}), targetScopes.map((scope) => /* @__PURE__ */ u("option", {
+										value: scope.scopeId,
+										children: [
+											scope.label,
+											" · ",
+											scope.authorityType,
+											scope.scopeId === group.suggestedScopeId ? " · suggested" : ""
+										]
+									}, scope.scopeId))]
+								})]
+							}) : null,
+							targetScopes.length > 0 && onReassign && canReassignLegacyGroup(group) ? /* @__PURE__ */ u("div", {
+								className: "legacy-review-actions",
+								children: /* @__PURE__ */ u("button", {
+									type: "button",
+									className: "settings-button",
+									disabled: busyIdentity != null || !selectedScopes[group.workspaceIdentity],
+									onClick: () => void applyGroup(group),
+									children: busyIdentity === group.workspaceIdentity ? pending[group.workspaceIdentity] ? "Reassigning…" : "Previewing…" : pending[group.workspaceIdentity] ? "I understand, reassign memories" : "Preview reassignment"
+								})
+							}) : null
+						]
+					}, group.workspaceIdentity))
+				}) : null
+			]
 		});
 	}
-	function SyncSharingReview({ items, legacyReview, onReview }) {
-		return /* @__PURE__ */ u(k$3, { children: [legacyReview ? /* @__PURE__ */ u(LegacySharedReviewRow, { item: legacyReview }) : null, items.map((item) => /* @__PURE__ */ u(SharingReviewRow, {
+	function SyncSharingReview({ items, legacyReview, onLegacyReassign, onLegacyReview, onReview }) {
+		return /* @__PURE__ */ u(k$3, { children: [legacyReview ? /* @__PURE__ */ u(LegacySharedReviewRow, {
+			item: legacyReview,
+			onReassign: onLegacyReassign,
+			onReview: onLegacyReview ?? onReview
+		}) : null, items.map((item) => /* @__PURE__ */ u(SharingReviewRow, {
 			item,
 			onReview
 		}, `${item.peerName}:${item.actorId}:${item.scopeLabel}`))] });
@@ -20566,6 +21665,28 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		state.feedQuery = "";
 		window.location.hash = "feed";
 	}
+	function openProjectsReview() {
+		window.location.hash = "projects";
+	}
+	async function reassignLegacySharedReviewGroup(group, scopeId, confirmedOldCopies, confirmationToken) {
+		try {
+			const result = await reassignLegacySharedReviewGroup$1({
+				...confirmationToken ? { confirmation_token: confirmationToken } : {},
+				confirmed_old_copies: confirmedOldCopies,
+				scope_id: scopeId,
+				workspace_identity: group.workspaceIdentity
+			});
+			state.lastSyncLegacySharedReview = result.legacy_shared_review ?? null;
+			showGlobalNotice(`Reassigned ${result.reassigned_memory_count.toLocaleString()} legacy review memor${result.reassigned_memory_count === 1 ? "y" : "ies"} to ${result.target_scope_label}.`);
+			renderSyncSharingReview();
+			return null;
+		} catch (error) {
+			if (error instanceof LegacySharedReviewConfirmationError) return error.preview;
+			const message = error instanceof Error ? error.message : "Unable to reassign legacy review memories.";
+			showGlobalNotice(message, "warning");
+			throw new Error(message);
+		}
+	}
 	function renderSyncSharingReview() {
 		const panel = document.getElementById("syncSharingReview");
 		const meta = document.getElementById("syncSharingReviewMeta");
@@ -20576,8 +21697,31 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		const legacyRaw = state.lastSyncLegacySharedReview;
 		const legacyCount = Math.max(0, Number(legacyRaw?.memory_count ?? 0));
 		const legacyReview = legacyRaw?.has_data ? {
+			groups: Array.isArray(legacyRaw.groups) ? legacyRaw.groups.map((group) => {
+				const raw = group;
+				return {
+					displayProject: String(raw.display_project || raw.project || "Unknown project"),
+					identitySource: String(raw.identity_source || "unknown"),
+					lastUpdatedAt: typeof raw.last_updated_at === "string" ? raw.last_updated_at : null,
+					memoryCount: Number(raw.memory_count || 0),
+					peerOwnedMemoryCount: Number(raw.peer_owned_memory_count || 0),
+					reassignableMemoryCount: Number(raw.reassignable_memory_count || 0),
+					suggestedScopeId: typeof raw.suggested_scope_id === "string" ? raw.suggested_scope_id : null,
+					suggestionReason: typeof raw.suggestion_reason === "string" ? raw.suggestion_reason : null,
+					workspaceIdentity: String(raw.workspace_identity || raw.display_project || "unknown")
+				};
+			}) : [],
 			memoryCount: legacyCount,
-			scopeId: String(legacyRaw.scope_id || "legacy-shared-review")
+			scopeId: String(legacyRaw.scope_id || "legacy-shared-review"),
+			totalGroupCount: Number(legacyRaw.total_group_count || legacyRaw.groups?.length || 0),
+			targetScopes: Array.isArray(legacyRaw.target_scopes) ? legacyRaw.target_scopes.map((scope) => {
+				const raw = scope;
+				return {
+					authorityType: String(raw.authority_type || "unknown"),
+					label: String(raw.label || raw.scope_id || "Unknown domain"),
+					scopeId: String(raw.scope_id || "")
+				};
+			}).filter((scope) => scope.scopeId) : []
 		} : null;
 		if (!items.length && !legacyReview) {
 			clearSyncMount(list);
@@ -20598,6 +21742,8 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 				shareableCount: Number(item.shareable_count || 0)
 			})),
 			legacyReview,
+			onLegacyReassign: reassignLegacySharedReviewGroup,
+			onLegacyReview: openProjectsReview,
 			onReview: openFeedSharingReview
 		}));
 	}
@@ -20783,13 +21929,121 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		try {
 			const runtime = await loadRuntimeInfo();
 			if (!runtime?.version) return;
-			setRuntimeLabel(runtime.version, "21eac98");
+			setRuntimeLabel(runtime.version, "3400309");
 		} catch {}
 	}
 	var lastAnnouncedRefreshState = null;
 	var RECONNECT_POLL_MS = 1500;
+	var LEGACY_UPGRADE_NOTICE_DISMISSED_KEY = "codemem-legacy-upgrade-notice-dismissed";
 	var reconnectTimer = null;
 	var reconnecting = false;
+	var legacyUpgradeNoticeShown = false;
+	var legacyUpgradeNoticePreviousFocus = null;
+	function readNonNegativeCount(value, fallback = 0) {
+		const count = Number(value);
+		return Number.isFinite(count) ? Math.max(0, count) : fallback;
+	}
+	function readLegacyUpgradeReviewSummary(payload) {
+		if (!payload || typeof payload !== "object") return null;
+		const review = payload.legacy_shared_review ?? payload;
+		if (!review || typeof review !== "object") return null;
+		const raw = review;
+		if (raw.has_data !== true) return null;
+		const groups = Array.isArray(raw.groups) ? raw.groups : [];
+		const groupCount = readNonNegativeCount(raw.total_group_count, groups.length);
+		const memoryCount = readNonNegativeCount(raw.memory_count);
+		if (groupCount <= 0 || memoryCount <= 0) return null;
+		return {
+			groupCount,
+			memoryCount
+		};
+	}
+	function isLegacyUpgradeNoticeDismissed() {
+		try {
+			return localStorage.getItem(LEGACY_UPGRADE_NOTICE_DISMISSED_KEY) === "1";
+		} catch {
+			return false;
+		}
+	}
+	function dismissLegacyUpgradeNoticeIfRequested() {
+		if (!document.getElementById("legacyUpgradeDontShow")?.checked) return;
+		try {
+			localStorage.setItem(LEGACY_UPGRADE_NOTICE_DISMISSED_KEY, "1");
+		} catch {}
+	}
+	function legacyUpgradeFocusableElements() {
+		const modal = $("legacyUpgradeModal");
+		if (!modal || modal.hidden) return [];
+		return Array.from(modal.querySelectorAll("a[href], button:not([disabled]), input:not([disabled]), select:not([disabled]), textarea:not([disabled]), [tabindex]:not([tabindex=\"-1\"])")).filter((element) => !element.hidden && element.offsetParent !== null);
+	}
+	function focusLegacyUpgradeModal() {
+		const focusable = legacyUpgradeFocusableElements();
+		const primary = $("legacyUpgradeReviewGroups");
+		(primary && focusable.includes(primary) ? primary : focusable[0])?.focus();
+	}
+	function handleLegacyUpgradeModalKeydown(event) {
+		const modal = $("legacyUpgradeModal");
+		if (!modal || modal.hidden) return;
+		if (event.key === "Escape") {
+			event.preventDefault();
+			dismissLegacyUpgradeNoticeIfRequested();
+			setLegacyUpgradeNotice(false);
+			return;
+		}
+		if (event.key !== "Tab") return;
+		const focusable = legacyUpgradeFocusableElements();
+		if (focusable.length === 0) return;
+		const first = focusable[0];
+		const last = focusable[focusable.length - 1];
+		if (event.shiftKey && document.activeElement === first) {
+			event.preventDefault();
+			last.focus();
+			return;
+		}
+		if (!event.shiftKey && document.activeElement === last) {
+			event.preventDefault();
+			first.focus();
+		}
+	}
+	function setLegacyUpgradeBackgroundInert(inert) {
+		for (const element of document.querySelectorAll("header, .tab-bar, .tab-panel, #toastRoot, #viewerReconnectOverlay, #settingsDialogMount")) {
+			if (element.id === "viewerReconnectOverlay" && element.hidden) continue;
+			element.inert = inert;
+			if (inert) element.setAttribute("aria-hidden", "true");
+			else element.removeAttribute("aria-hidden");
+		}
+	}
+	function setLegacyUpgradeNotice(open, summary) {
+		const overlay = $("legacyUpgradeModalBackdrop");
+		const modal = $("legacyUpgradeModal");
+		const summaryEl = $("legacyUpgradeSummary");
+		if (!overlay || !modal || !summaryEl) return;
+		if (summary) summaryEl.textContent = `${summary.groupCount.toLocaleString()} older ${summary.groupCount === 1 ? "project needs" : "projects need"} a Sharing domain. They contain ${summary.memoryCount.toLocaleString()} older shared memories total; you will review the projects, not individual memories.`;
+		overlay.hidden = !open;
+		modal.hidden = !open;
+		if (open) {
+			legacyUpgradeNoticePreviousFocus = document.activeElement;
+			document.addEventListener("keydown", handleLegacyUpgradeModalKeydown);
+			focusLegacyUpgradeModal();
+			setLegacyUpgradeBackgroundInert(true);
+			return;
+		}
+		setLegacyUpgradeBackgroundInert(false);
+		document.removeEventListener("keydown", handleLegacyUpgradeModalKeydown);
+		if (legacyUpgradeNoticePreviousFocus && document.contains(legacyUpgradeNoticePreviousFocus)) legacyUpgradeNoticePreviousFocus.focus();
+		legacyUpgradeNoticePreviousFocus = null;
+	}
+	function maybeShowLegacyUpgradeNotice(summary) {
+		if (!summary || legacyUpgradeNoticeShown || isLegacyUpgradeNoticeDismissed()) return;
+		legacyUpgradeNoticeShown = true;
+		setLegacyUpgradeNotice(true, summary);
+	}
+	async function checkLegacyUpgradeNotice() {
+		if (legacyUpgradeNoticeShown || isLegacyUpgradeNoticeDismissed()) return;
+		try {
+			maybeShowLegacyUpgradeNotice(readLegacyUpgradeReviewSummary(await loadSyncStatus(false, "", { includeJoinRequests: false })));
+		} catch {}
+	}
 	function setReconnectOverlay(open, detail) {
 		const overlay = $("viewerReconnectOverlay");
 		const detailEl = $("viewerReconnectDetail");
@@ -20980,10 +22234,12 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 				state.lastCoordinatorAdminStatus = null;
 			}));
 			if (refreshTab === "feed") promises.push(loadFeedData());
+			if (refreshTab === "projects") promises.push(loadProjectsData());
 			if (refreshTab === "sync" || refreshTab === "health") promises.push(loadSyncData());
 			if (refreshTab === "coordinator-admin") promises.push(loadCoordinatorAdminData());
 			if (state.syncPairingOpen) promises.push(loadPairingData());
 			await Promise.all(promises);
+			maybeShowLegacyUpgradeNotice(readLegacyUpgradeReviewSummary(state.lastSyncLegacySharedReview));
 			const nextTab = resolveAccessibleTab(state.activeTab, state.lastCoordinatorAdminStatus);
 			if (nextTab !== state.activeTab) setActiveTab(nextTab);
 			renderTabs(state.activeTab);
@@ -21006,6 +22262,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 	setTheme(getTheme());
 	initTabs();
 	initFeedTab();
+	initProjectsTab(() => refresh());
 	initSyncTab(() => refresh());
 	initCoordinatorAdminTab();
 	initSettings(stopPolling, startPolling, () => refresh());
@@ -21028,7 +22285,23 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		} catch {}
 		if (!reconnecting) setReconnectOverlay(false);
 	});
+	$("legacyUpgradeReviewGroups")?.addEventListener("click", () => {
+		dismissLegacyUpgradeNoticeIfRequested();
+		setLegacyUpgradeNotice(false);
+		window.location.hash = "sync";
+		setTimeout(() => document.getElementById("syncSharingReview")?.scrollIntoView({ block: "start" }), 120);
+	});
+	$("legacyUpgradeReviewProjects")?.addEventListener("click", () => {
+		dismissLegacyUpgradeNoticeIfRequested();
+		setLegacyUpgradeNotice(false);
+		window.location.hash = "projects";
+	});
+	$("legacyUpgradeNotNow")?.addEventListener("click", () => {
+		dismissLegacyUpgradeNoticeIfRequested();
+		setLegacyUpgradeNotice(false);
+	});
 	loadRuntimeLabel();
+	checkLegacyUpgradeNotice();
 	refresh();
 	startPolling();
 	//#endregion