@codemem/server 0.32.3 → 0.33.0-alpha.2

package/static/app.js

@@ -3200,21 +3200,6 @@
 	async function loadPairing(includeDiagnostics = false) {
 		return fetchJson(`/api/sync/pairing${includeDiagnostics ? "?includeDiagnostics=1" : ""}`);
 	}
-	async function updatePeerScope(peerDeviceId, include, exclude, inheritGlobal = false) {
-		const resp = await fetch("/api/sync/peers/scope", {
-			method: "POST",
-			headers: { "Content-Type": "application/json" },
-			body: JSON.stringify({
-				peer_device_id: peerDeviceId,
-				include,
-				exclude,
-				inherit_global: inheritGlobal
-			})
-		});
-		const { text, payload } = await readJsonPayload(resp);
-		if (!resp.ok) throw new Error(payloadError(payload) || text || "request failed");
-		return payload;
-	}
 	async function assignPeerActor(peerDeviceId, actorId) {
 		const resp = await fetch("/api/sync/peers/identity", {
 			method: "POST",
@@ -3497,7 +3482,7 @@
 	function escapeHtml(value) {
 		return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
 	}
-	function escapeRegExp(value) {
+	function escapeRegExp$1(value) {
 		return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 	}
 	function highlightText(text, query) {
@@ -3505,7 +3490,7 @@
 		if (!q) return escapeHtml(text);
 		const safe = escapeHtml(text);
 		try {
-			const re = new RegExp(`(${escapeRegExp(q)})`, "ig");
+			const re = new RegExp(`(${escapeRegExp$1(q)})`, "ig");
 			return safe.replace(re, "<mark class=\"match\">$1</mark>");
 		} catch {
 			return safe;
@@ -4103,6 +4088,23 @@
 		return /* @__PURE__ */ u("input", { ...props });
 	}
 	//#endregion
+	//#region src/tabs/coordinator-admin/data/device-card.ts
+	function coordinatorAdminDeviceCardCopy(device, fallbackTeamId) {
+		const deviceId = String(device.device_id || "").trim();
+		const teamId = String(device.group_id || fallbackTeamId || "").trim();
+		const displayName = String(device.display_name || deviceId || "Unnamed device");
+		const enabled = device.enabled !== false && device.enabled !== 0;
+		const advancedParts = [`Device ID ${deviceId || "unknown"}`];
+		if (teamId) advancedParts.push(`Team ID ${teamId}`);
+		return {
+			advancedDetail: `Advanced: ${advancedParts.join(" · ")}`,
+			deviceId,
+			displayName,
+			statusLabel: enabled ? "Enabled in this Team" : "Disabled in this Team",
+			teamId
+		};
+	}
+	//#endregion
 	//#region src/tabs/coordinator-admin/data/state.ts
 	var ADMIN_TARGET_GROUP_KEY = "codemem-coordinator-admin-target-group";
 	var coordinatorAdminState = {
@@ -4138,17 +4140,16 @@
 		return _$3(RadixTabsContent, {
 			className: "coordinator-admin-panel",
 			value: "devices"
-		}, _$3("h3", null, "Enrolled devices"), _$3("p", { class: "peer-submeta" }, summary.readiness === "ready" ? "Rename, disable, re-enable, or remove enrolled devices from the operator surface without confusing this with direct sync state." : "Finish setup first. Device administration stays disabled until coordinator admin is ready."), !items.length ? _$3("div", { class: "peer-meta" }, summary.readiness === "ready" ? "No enrolled devices found for the active coordinator group." : "Device administration will appear here once setup is complete.") : _$3("div", { class: "peer-list" }, items.map((item) => {
-			const deviceId = String(item.device_id || "").trim();
-			const groupId = String(item.group_id || state.lastCoordinatorAdminStatus?.active_group || "").trim();
-			const displayName = String(item.display_name || deviceId || "Unnamed device");
+		}, _$3("h3", null, "Enrolled devices"), _$3("p", { class: "peer-submeta" }, summary.readiness === "ready" ? "Rename, disable, re-enable, or remove Team devices here. Space access is granted from Spaces below; Team membership alone does not share memories." : "Finish setup first. Device administration stays disabled until coordinator admin is ready."), !items.length ? _$3("div", { class: "peer-meta" }, summary.readiness === "ready" ? "No enrolled devices found for the active coordinator group." : "Device administration will appear here once setup is complete.") : _$3("div", { class: "peer-list" }, items.map((item) => {
+			const copy = coordinatorAdminDeviceCardCopy(item, String(state.lastCoordinatorAdminStatus?.active_group || ""));
+			const { deviceId, displayName, teamId } = copy;
 			const pending = coordinatorAdminState.deviceActionPendingId === deviceId;
 			const draft = coordinatorAdminState.deviceRenameDrafts.get(deviceId) ?? String(item.display_name || "");
 			const enabled = item.enabled !== false && item.enabled !== 0;
 			return _$3("div", {
 				class: "peer-card peer-card--padded",
 				key: deviceId || String(item.fingerprint || "unknown")
-			}, _$3("div", { class: "peer-title" }, _$3("strong", null, draft || displayName)), _$3("div", { class: "peer-meta" }, `Device: ${deviceId || "unknown"}`), groupId ? _$3("div", { class: "peer-submeta" }, `Group: ${groupId}`) : null, _$3("div", { class: "peer-submeta" }, enabled ? "Enabled" : "Disabled"), _$3("div", { class: "coordinator-admin-form-grid" }, _$3("label", { class: "coordinator-admin-field" }, _$3("span", null, "Display name"), _$3(TextInput, {
+			}, _$3("div", { class: "peer-title" }, _$3("strong", null, draft || displayName)), _$3("div", { class: "peer-submeta" }, copy.statusLabel), _$3("div", { class: "peer-meta" }, copy.advancedDetail), _$3("div", { class: "coordinator-admin-form-grid" }, _$3("label", { class: "coordinator-admin-field" }, _$3("span", null, "Display name"), _$3(TextInput, {
 				class: "peer-scope-input",
 				disabled: summary.readiness !== "ready" || pending,
 				onInput: (event) => {
@@ -4159,22 +4160,22 @@
 			}))), _$3("div", { class: "peer-actions" }, _$3("button", {
 				class: "settings-button",
 				disabled: !deviceId || pending || summary.readiness !== "ready",
-				onClick: () => runDevice(deviceId, groupId, displayName, "rename"),
+				onClick: () => runDevice(deviceId, teamId, displayName, "rename"),
 				type: "button"
 			}, pending && coordinatorAdminState.deviceActionPendingKind === "rename" ? "Renaming…" : "Rename"), enabled ? _$3("button", {
 				class: "settings-button danger",
 				disabled: !deviceId || pending || summary.readiness !== "ready",
-				onClick: () => runDevice(deviceId, groupId, displayName, "disable"),
+				onClick: () => runDevice(deviceId, teamId, displayName, "disable"),
 				type: "button"
 			}, pending && coordinatorAdminState.deviceActionPendingKind === "disable" ? "Disabling…" : "Disable") : _$3("button", {
 				class: "settings-button",
 				disabled: !deviceId || pending || summary.readiness !== "ready",
-				onClick: () => runDevice(deviceId, groupId, displayName, "enable"),
+				onClick: () => runDevice(deviceId, teamId, displayName, "enable"),
 				type: "button"
 			}, pending && coordinatorAdminState.deviceActionPendingKind === "enable" ? "Enabling…" : "Enable"), _$3("button", {
 				class: "settings-button danger",
 				disabled: !deviceId || pending || summary.readiness !== "ready",
-				onClick: () => runDevice(deviceId, groupId, displayName, "remove"),
+				onClick: () => runDevice(deviceId, teamId, displayName, "remove"),
 				type: "button"
 			}, pending && coordinatorAdminState.deviceActionPendingKind === "remove" ? "Removing…" : "Remove")));
 		})));
@@ -10057,6 +10058,36 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		const value = String(status || "active").trim();
 		return value ? value.replaceAll("_", " ") : "active";
 	}
+	function spaceCardCopy(scope) {
+		const title = String(scope.label || "").trim() || "Untitled Space";
+		const status = scopeStatusLabel(scope.status);
+		const kind = String(scope.kind || "user").replaceAll("_", " ");
+		const scopeId = String(scope.scope_id || "").trim() || "unknown";
+		const epoch = scope.membership_epoch == null ? "—" : String(scope.membership_epoch);
+		return {
+			title,
+			summary: `${status} Space · ${kind}`,
+			advancedDetail: `Advanced: Space ID ${scopeId} · Membership epoch ${epoch}`
+		};
+	}
+	function spaceAccessDeviceCopy(row) {
+		const statusLabel = {
+			active: "Space access active",
+			revoked: "Space access revoked",
+			not_member: "No Space access"
+		};
+		const role = row.role.replaceAll("_", " ");
+		const detail = row.status === "not_member" ? statusLabel[row.status] : `${statusLabel[row.status]} · ${role}`;
+		const epoch = row.membershipEpoch == null ? "—" : String(row.membershipEpoch);
+		return {
+			statusLabel: statusLabel[row.status],
+			detail,
+			advancedDetail: `Advanced: membership epoch ${epoch}`
+		};
+	}
+	function spaceRevokeMemberTitle(scope, displayName, deviceId) {
+		return `Revoke ${displayName || deviceId || "this device"} from ${spaceCardCopy(scope).title}?`;
+	}
 	function deriveScopeMembershipDeviceRows(devices, members) {
 		const memberByDevice = new Map(members.map((member) => [String(member.device_id || "").trim(), member]).filter(([deviceId]) => deviceId.length > 0));
 		return devices.map((device) => {
@@ -10251,7 +10282,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		const scopeId = String(scope.scope_id || "").trim();
 		if (!scopeId) return;
 		if (!await openSyncConfirmDialog({
-			title: `Revoke ${displayName || deviceId} from ${scope.label || scopeId}?`,
+			title: spaceRevokeMemberTitle(scope, displayName, deviceId),
 			description: "Revocation only blocks future sync for this Space. Data already copied to that device can remain there.",
 			confirmLabel: "Revoke membership",
 			cancelLabel: "Keep membership",
@@ -10290,31 +10321,30 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 			const pending = draft.actionPendingKey === pendingKey;
 			const canGrant = row.enabled && row.status !== "active";
 			const canRevoke = row.status === "active";
-			const statusCopy = row.status === "not_member" ? "Not a member" : row.status === "revoked" ? "Revoked" : "Active member";
-			const epochCopy = row.membershipEpoch == null ? "epoch —" : `epoch ${row.membershipEpoch}`;
+			const copy = spaceAccessDeviceCopy(row);
 			return _$3("div", {
 				class: "coordinator-admin-scope-member-row",
 				key: row.deviceId
-			}, _$3("div", { class: "coordinator-admin-scope-member-copy" }, _$3("strong", null, row.displayName), _$3("span", null, `${statusCopy} · ${row.role} · ${epochCopy}`), row.enabled ? null : _$3("span", null, "Device is disabled in this Team.")), _$3("div", { class: "peer-actions" }, canGrant ? _$3("button", {
+			}, _$3("div", { class: "coordinator-admin-scope-member-copy" }, _$3("strong", null, row.displayName), _$3("span", null, copy.detail), _$3("span", { class: "peer-meta" }, copy.advancedDetail), row.enabled ? null : _$3("span", null, "Device is disabled in this Team.")), _$3("div", { class: "peer-actions" }, canGrant ? _$3("button", {
 				class: "settings-button",
 				disabled: !ready || Boolean(draft.actionPendingKey),
 				onClick: () => void grantMember(groupId, scopeId, row.deviceId, renderShell),
 				type: "button"
-			}, pending && draft.actionPendingKind === "grant" ? "Granting…" : "Grant") : null, canRevoke ? _$3("button", {
+			}, pending && draft.actionPendingKind === "grant" ? "Granting…" : "Grant access") : null, canRevoke ? _$3("button", {
 				class: "settings-button danger",
 				disabled: !ready || Boolean(draft.actionPendingKey),
 				onClick: () => void revokeMember(groupId, scope, row.deviceId, row.displayName, renderShell),
 				type: "button"
-			}, pending && draft.actionPendingKind === "revoke" ? "Revoking…" : "Revoke") : null));
+			}, pending && draft.actionPendingKind === "revoke" ? "Revoking…" : "Revoke access") : null));
 		}));
 	}
 	function renderScopeCard(groupId, scope, draft, ready, renderShell) {
 		const scopeId = String(scope.scope_id || "").trim();
-		const label = String(scope.label || scopeId || "Untitled Space");
+		const copy = spaceCardCopy(scope);
 		return _$3("div", {
 			class: "peer-card peer-card--padded coordinator-admin-scope-card",
-			key: scopeId || label
-		}, _$3("div", { class: "peer-title" }, _$3("strong", null, label)), _$3("div", { class: "peer-submeta" }, `Status: ${scopeStatusLabel(scope.status)} · Kind: ${scope.kind || "user"}`), _$3("div", { class: "peer-meta" }, `Advanced: Space ID ${scopeId || "unknown"} · Membership epoch ${scope.membership_epoch ?? 0}`), _$3("div", { class: "peer-submeta" }, "Devices below are enrolled in the Team; only active Space members can sync this data boundary."), renderMembershipRows(groupId, scope, draft, ready, renderShell));
+			key: scopeId || copy.title
+		}, _$3("div", { class: "peer-title" }, _$3("strong", null, copy.title)), _$3("div", { class: "peer-submeta" }, copy.summary), _$3("div", { class: "peer-meta" }, copy.advancedDetail), _$3("div", { class: "peer-submeta" }, "Devices below are enrolled in the Team; only active Space members can sync this data boundary."), renderMembershipRows(groupId, scope, draft, ready, renderShell));
 	}
 	function renderGroupScopeManagementPanel(deps) {
 		const { groupId, ready, summary, renderShell } = deps;
@@ -10482,10 +10512,10 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		const includeLabelId = `coord-admin-scope-include-${groupId}`;
 		const excludeLabelId = `coord-admin-scope-exclude-${groupId}`;
 		const fieldsDisabled = !ready || draft.saving || !draft.auto_seed_scope;
-		return _$3(k$3, null, _$3("h4", { class: "coordinator-admin-drawer-title" }, "Team defaults"), _$3("div", { class: "peer-submeta" }, "Project filters only narrow what future writes sync; they never grant Space access by themselves. Use the default Space toggle to control whether newly joined devices receive the Team's default Space."), _$3("label", { class: "coordinator-admin-inline-filter" }, _$3("span", {
+		return _$3(k$3, null, _$3("h4", { class: "coordinator-admin-drawer-title" }, "Team defaults"), _$3("div", { class: "peer-submeta" }, "Space access grants decide what new devices can sync. Advanced sharing rules only narrow future writes after Space access already exists."), _$3("label", { class: "coordinator-admin-inline-filter" }, _$3("span", {
 			class: "section-meta",
 			id: autoSeedLabelId
-		}, "Auto-seed project filters"), _$3(RadixSwitch, {
+		}, "Auto-apply advanced rules to new devices"), _$3(RadixSwitch, {
 			"aria-labelledby": autoSeedLabelId,
 			checked: draft.auto_seed_scope,
 			className: "coordinator-admin-switch",
@@ -10516,7 +10546,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 				renderShell();
 			},
 			thumbClassName: "coordinator-admin-switch-thumb"
-		})), draft.default_space_scope_id ? _$3("div", { class: "peer-submeta" }, "Default Space configured.") : _$3("div", { class: "peer-submeta" }, "No default Space has been created yet."), _$3("div", { class: "coordinator-admin-field" }, _$3("span", { id: includeLabelId }, "Include projects"), _$3(ProjectScopePicker, {
+		})), draft.default_space_scope_id ? _$3("div", { class: "peer-submeta" }, "Default Space configured.") : _$3("div", { class: "peer-submeta" }, "No default Space has been created yet."), _$3("div", { class: "coordinator-admin-field" }, _$3("span", { id: includeLabelId }, "Include template"), _$3(ProjectScopePicker, {
 			"aria-labelledby": includeLabelId,
 			availableProjects: coordinatorAdminState.availableProjects,
 			disabled: fieldsDisabled,
@@ -10531,7 +10561,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 			},
 			placeholder: "Add project",
 			values: draft.projects_include
-		}), _$3("span", { class: "peer-submeta" }, "Leave empty to allow every project. Type to search or create a new name.")), _$3("div", { class: "coordinator-admin-field" }, _$3("span", { id: excludeLabelId }, "Exclude projects"), _$3(ProjectScopePicker, {
+		}), _$3("span", { class: "peer-submeta" }, "Leave empty to allow every project inside the granted Space. Type to search or create a new name.")), _$3("div", { class: "coordinator-admin-field" }, _$3("span", { id: excludeLabelId }, "Exclude template"), _$3(ProjectScopePicker, {
 			"aria-labelledby": excludeLabelId,
 			availableProjects: coordinatorAdminState.availableProjects,
 			disabled: fieldsDisabled,
@@ -10837,7 +10867,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		return _$3(RadixTabsContent, {
 			className: "coordinator-admin-panel",
 			value: "join-requests"
-		}, _$3("h3", null, "Pending join requests"), _$3("p", { class: "peer-submeta" }, summary.readiness === "ready" ? "Approve or deny teammate join requests from the dedicated operator surface instead of burying them in Sync." : "Finish setup first. Join request review stays disabled until coordinator admin is ready."), !items.length ? _$3("div", { class: "peer-meta" }, summary.readiness === "ready" ? "No pending join requests right now." : "Join request review will appear here once setup is complete.") : _$3("div", { class: "peer-list" }, items.map((item) => {
+		}, _$3("h3", null, "Pending join requests"), _$3("p", { class: "peer-submeta" }, summary.readiness === "ready" ? "Approve or deny devices that want to join this Team. Default Space access is handled by Team defaults and can be reviewed in Spaces." : "Finish setup first. Join request review stays disabled until coordinator admin is ready."), !items.length ? _$3("div", { class: "peer-meta" }, summary.readiness === "ready" ? "No pending join requests right now." : "Join request review will appear here once setup is complete.") : _$3("div", { class: "peer-list" }, items.map((item) => {
 			const requestId = String(item.request_id || "").trim();
 			const deviceId = String(item.device_id || "unknown-device");
 			const displayName = String(item.display_name || deviceId);
@@ -10845,7 +10875,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 			return _$3("div", {
 				class: "peer-card peer-card--padded",
 				key: requestId || deviceId
-			}, _$3("div", { class: "peer-title" }, _$3("strong", null, displayName)), _$3("div", { class: "peer-meta" }, `Device: ${deviceId}`), _$3("div", { class: "peer-actions" }, _$3("button", {
+			}, _$3("div", { class: "peer-title" }, _$3("strong", null, displayName)), _$3("div", { class: "peer-meta" }, `Advanced: Device ID ${deviceId}`), _$3("div", { class: "peer-actions" }, _$3("button", {
 				class: "settings-button",
 				disabled: !requestId || pending,
 				onClick: () => reviewJoinRequest(requestId, "approve"),
@@ -10963,7 +10993,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 				state.lastTeamInvite = result;
 				coordinatorAdminState.inviteGroup = groupId;
 				const warnings = Array.isArray(result.warnings) ? result.warnings : [];
-				showGlobalNotice(warnings.length ? `Invite created. Review ${warnings.length === 1 ? "the warning" : `${warnings.length} warnings`} before sharing it.` : "Invite created. Copy it from Coordinator Admin and share it with your teammate.", warnings.length ? "warning" : "success");
+				showGlobalNotice(warnings.length ? `Invite created. Review ${warnings.length === 1 ? "the warning" : `${warnings.length} warnings`} before sharing it.` : "Invite created. Copy it from Teams and share it with your teammate.", warnings.length ? "warning" : "success");
 			} catch (error) {
 				showGlobalNotice(error instanceof Error ? error.message : "Failed to create invite.", "warning");
 			} finally {
@@ -18095,11 +18125,16 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 				warning: false
 			};
 		}
-		if (failedItems.filter((item) => cleanText(item.error).toLowerCase().includes("401") && cleanText(item.error).toLowerCase().includes("unauthorized")).length === failedItems.length) return {
+		if (failedItems.filter((item) => isTrustFailureError(cleanText(item.error))).length === failedItems.length) return {
 			ok: false,
 			message: "This device no longer has two-way trust with the peer. Pair it again from the other device, or remove the stale local record if it should be gone.",
 			warning: true
 		};
+		if (failedItems.filter((item) => isScopeMembershipFailureError(cleanText(item.error))).length === failedItems.length) return {
+			ok: false,
+			message: "Sync ran, but the peer is not authorized for one or more Spaces. Review Space access for this device in Teams, then sync again.",
+			warning: true
+		};
 		if (failedItems.length < items.length) return {
 			ok: false,
 			message: `${failedItems.length} of ${items.length} device sync attempts failed. Open the affected device cards for the specific errors.`,
@@ -18111,6 +18146,41 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 			warning: true
 		};
 	}
+	/**
+	* True when a sync-failure error string looks like a two-way-trust failure
+	* (401 unauthorized on the peer's /v1/status), which is the only class of
+	* failure that should trigger the "no longer has two-way trust" toast. Any
+	* other class — connectivity, scope/membership, generation mismatch — flows
+	* through the generic mixed-failure or scoped paths so users do not get
+	* pointed at re-pairing for problems that re-pairing will not fix.
+	*/
+	function isTrustFailureError(error) {
+		const lower = error.toLowerCase();
+		return lower.includes("401") && lower.includes("unauthorized");
+	}
+	/**
+	* True when a sync-failure error string indicates the peer is not authorized
+	* for a Space (or is authorized at a stale epoch). These failures map to the
+	* scoped-sync protocol classes documented in
+	* docs/plans/2026-05-25-scoped-sync-protocol.md:
+	*
+	* - `403: scope_rejected` from POST /v1/ops outbound scope filter.
+	* - `409: reset_required` with `reason=missing_scope` or `stale_epoch`
+	*   from GET /v1/ops or GET /v1/snapshot.
+	* - syncOneScope's aggregate string only when it includes one of those wire
+	*   reasons. Other scoped-sync failures remain generic sync failures.
+	*
+	* Detection is intentionally substring-based because the wire reason can
+	* arrive embedded in a longer error string from the address-fallback loop.
+	*/
+	function isScopeMembershipFailureError(error) {
+		const lower = error.toLowerCase();
+		if (lower.includes("scope_rejected")) return true;
+		if (lower.includes("missing_scope")) return true;
+		if (lower.includes("stale_epoch")) return true;
+		if (lower.includes("scope_inactive")) return true;
+		return false;
+	}
 	function outboundFilterLabel(detail) {
 		const reason = cleanText(detail?.reason);
 		return OUTBOUND_FILTER_LABELS[reason] ?? (reason.replaceAll("_", " ") || "sync filters");
@@ -18261,8 +18331,9 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 	function derivePeerAuthorizedDomainsView(peer) {
 		const domains = (Array.isArray(peer.authorized_scopes) ? peer.authorized_scopes : []).map((scope) => {
 			const scopeId = cleanText(scope.scope_id);
-			const label = cleanText(scope.label) ?? scopeId;
-			if (!scopeId && !label) return null;
+			const rawLabel = cleanText(scope.label);
+			if (!scopeId && !rawLabel) return null;
+			const label = rawLabel || "Untitled Space";
 			const detail = [
 				labelPart(cleanText(scope.kind), "user"),
 				labelPart(cleanText(scope.authority_type), "local"),
@@ -18270,17 +18341,17 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 			].filter(Boolean).join(" · ");
 			return {
 				scopeId: scopeId || label,
-				label: label || scopeId,
+				label,
 				detail
 			};
 		}).filter((item) => item != null);
 		const total = domains.length;
 		return {
 			total,
-			badgeLabel: total === 1 ? "1 Sharing domain" : total > 1 ? `${total} Sharing domains` : "No Sharing domains",
+			badgeLabel: total === 1 ? "1 Space" : total > 1 ? `${total} Spaces` : "No Space access",
 			isWarning: total === 0,
 			domains,
-			emptyMessage: "No Sharing-domain grants exist for this device yet. Project filters below cannot send data by themselves."
+			emptyMessage: "No Space access grants exist for this device yet. Advanced project filters cannot send data by themselves."
 		};
 	}
 	var PERSONAL_SCOPE_WORDS = [
@@ -18360,25 +18431,32 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 			title: ""
 		};
 		return {
-			badgeLabel: "Review domain fit",
-			detail: "Coordinator/group context helps find the device, and project filters only narrow already-authorized domains. Neither one grants a missing work/client domain.",
+			badgeLabel: "Review Space fit",
+			detail: "Team discovery helps find the device, and advanced project filters only narrow already-authorized Spaces. Neither one grants missing work/client Space access.",
 			isVisible: true,
-			message: "This coordinator-discovered device has personal or OSS Sharing-domain grants, but no separate work/client-like domain grant. If this device is meant for work/client sync, add that Sharing domain explicitly before treating sync as validated.",
-			title: "Check this device's Sharing-domain role"
+			message: "This Team-discovered device has personal or OSS Space access, but no separate work/client-like Space access. If this device is meant for work/client sync, grant that Space explicitly before treating sync as validated.",
+			title: "Check this device's Space access"
 		};
 	}
+	function hasActiveProjectNarrowing(include, exclude) {
+		const normalizedInclude = include.map((item) => item.trim()).filter(Boolean);
+		return normalizedInclude.length > 0 && !normalizedInclude.includes("*") || exclude.length > 0;
+	}
 	function derivePeerProjectNarrowingView(scope) {
 		const effectiveInclude = cleanList(scope?.effective_include);
 		const effectiveExclude = cleanList(scope?.effective_exclude);
 		const sourceLabel = scope?.inherits_global ? "Global defaults" : "Device override";
 		const includeLabel = `Include filter: ${shortList(effectiveInclude, "all projects")}`;
 		const excludeLabel = `Exclude filter: ${shortList(effectiveExclude, "no exclusions")}`;
+		const hasAdvancedFilters = hasActiveProjectNarrowing(effectiveInclude, effectiveExclude);
 		return {
+			hasAdvancedFilters,
+			statusLabel: hasAdvancedFilters ? "Advanced filters active" : "No advanced filters",
 			sourceLabel,
 			includeLabel,
 			excludeLabel,
 			summary: `${sourceLabel}. ${includeLabel}; ${excludeLabel}.`,
-			note: "Project filters only narrow data after Sharing domain authorization; they never grant access to another domain."
+			note: "Advanced filters only narrow data after Space access; they never grant access to another Space."
 		};
 	}
 	//#endregion
@@ -18685,6 +18763,18 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		const unique = Array.from(new Set(addresses.filter(Boolean)));
 		return typeof unique[0] === "string" ? unique[0] : "";
 	}
+	/**
+	* Returns true when a "Removed peer X" style feedback message is stale
+	* because the related peer has reappeared in the loaded peers list (e.g.
+	* the user re-paired the same device they just removed). Used by
+	* renderSyncPeers to clear the persistent banner once the user's view
+	* of reality contradicts it.
+	*/
+	function shouldClearStalePeersFeedback(feedback, peers) {
+		const id = String(feedback?.relatedPeerDeviceId ?? "").trim();
+		if (!id) return false;
+		return peers.some((peer) => String(peer?.peer_device_id ?? "").trim() === id);
+	}
 	function actorLabel(actor) {
 		if (!actor || typeof actor !== "object") return "Unknown person";
 		const displayName = String(actor.display_name || "").trim();
@@ -18730,208 +18820,6 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		if (!targetActorId || !target) return "Choose which person should keep these devices.";
 		return `Merge into ${actorDisplayLabel(target)}. Assigned devices move now; existing memories keep their current provenance.`;
 	}
-	function createChipEditor(initialValues, placeholder, emptyLabel, availableProjects = []) {
-		let values = [...initialValues];
-		let query = "";
-		let activeIndex = 0;
-		let popoverOpen = false;
-		const container = el$1("div", "project-scope-picker");
-		const selectedList = el$1("ul", "project-scope-picker-selected");
-		const trigger = el$1("button", "project-scope-picker-trigger settings-button");
-		trigger.type = "button";
-		const triggerLabel = el$1("span", null, placeholder || "Add project");
-		const triggerPlus = el$1("span", null, "+");
-		triggerPlus.setAttribute("aria-hidden", "true");
-		trigger.append(triggerPlus, triggerLabel);
-		trigger.setAttribute("aria-haspopup", "listbox");
-		trigger.setAttribute("aria-expanded", "false");
-		const popover = el$1("div", "project-scope-picker-popover project-scope-picker-popover--inline");
-		popover.hidden = true;
-		const search = el$1("input", "project-scope-picker-search");
-		search.type = "text";
-		search.placeholder = "Search or create…";
-		search.setAttribute("aria-label", "Search projects");
-		const results = el$1("div", "project-scope-picker-results");
-		results.setAttribute("role", "listbox");
-		popover.append(search, results);
-		const knownPool = () => {
-			const seen = /* @__PURE__ */ new Set();
-			const out = [];
-			for (const item of [...availableProjects, ...values]) {
-				const trimmed = item.trim();
-				if (!trimmed || seen.has(trimmed)) continue;
-				seen.add(trimmed);
-				out.push(trimmed);
-			}
-			return out.sort((a, b) => a.localeCompare(b));
-		};
-		const filteredRows = () => {
-			const all = knownPool();
-			const q = query.trim().toLowerCase();
-			if (!q) return all;
-			return all.filter((project) => project.toLowerCase().includes(q));
-		};
-		const shouldShowCreateRow = () => {
-			const q = query.trim();
-			if (!q) return false;
-			return !knownPool().some((project) => project.toLowerCase() === q.toLowerCase());
-		};
-		const toggleValue = (project) => {
-			if (values.includes(project)) values = values.filter((value) => value !== project);
-			else values = Array.from(new Set([...values, project]));
-			renderSelected();
-			renderResults();
-		};
-		const createFromQuery = () => {
-			const trimmed = query.trim();
-			if (!trimmed) return;
-			values = Array.from(new Set([...values, trimmed]));
-			query = "";
-			search.value = "";
-			activeIndex = 0;
-			renderSelected();
-			renderResults();
-		};
-		const activateRow = (index) => {
-			const rows = filteredRows();
-			if (index < rows.length) {
-				const project = rows[index];
-				if (project) toggleValue(project);
-				return;
-			}
-			if (shouldShowCreateRow()) createFromQuery();
-		};
-		const renderSelected = () => {
-			selectedList.textContent = "";
-			if (!values.length) {
-				const note = el$1("li", "project-scope-picker-selected-empty", emptyLabel);
-				selectedList.appendChild(note);
-				return;
-			}
-			values.forEach((value) => {
-				const chip = el$1("li", "project-scope-picker-selected-chip");
-				const label = el$1("span", null, value);
-				const remove = el$1("button", "project-scope-picker-selected-remove", "×");
-				remove.type = "button";
-				remove.setAttribute("aria-label", `Remove ${value}`);
-				remove.addEventListener("click", () => {
-					values = values.filter((existing) => existing !== value);
-					renderSelected();
-					renderResults();
-				});
-				chip.append(label, remove);
-				selectedList.appendChild(chip);
-			});
-		};
-		const renderResults = () => {
-			results.textContent = "";
-			const rows = filteredRows();
-			const withCreate = shouldShowCreateRow();
-			const rowCount = rows.length + (withCreate ? 1 : 0);
-			if (activeIndex >= rowCount) activeIndex = Math.max(0, rowCount - 1);
-			if (!rows.length && !withCreate) {
-				const empty = el$1("div", "project-scope-picker-empty-row", "No projects yet. Type a name to create one.");
-				results.appendChild(empty);
-				return;
-			}
-			rows.forEach((project, index) => {
-				const selected = values.includes(project);
-				const row = el$1("button", index === activeIndex ? "project-scope-picker-row project-scope-picker-row--active" : "project-scope-picker-row");
-				row.type = "button";
-				row.setAttribute("role", "option");
-				row.setAttribute("aria-selected", selected ? "true" : "false");
-				const check = el$1("span", "project-scope-picker-row-check", selected ? "✓" : "");
-				check.setAttribute("aria-hidden", "true");
-				const labelEl = el$1("span", "project-scope-picker-row-label", project);
-				row.append(check, labelEl);
-				row.addEventListener("click", () => {
-					activeIndex = index;
-					toggleValue(project);
-				});
-				row.addEventListener("mouseenter", () => {
-					activeIndex = index;
-					renderResults();
-				});
-				results.appendChild(row);
-			});
-			if (withCreate) {
-				const index = rows.length;
-				const row = el$1("button", index === activeIndex ? "project-scope-picker-row project-scope-picker-row--create project-scope-picker-row--active" : "project-scope-picker-row project-scope-picker-row--create");
-				row.type = "button";
-				row.setAttribute("role", "option");
-				const check = el$1("span", "project-scope-picker-row-check", "+");
-				check.setAttribute("aria-hidden", "true");
-				const labelEl = el$1("span", "project-scope-picker-row-label", `Create "${query.trim()}"`);
-				row.append(check, labelEl);
-				row.addEventListener("click", () => createFromQuery());
-				row.addEventListener("mouseenter", () => {
-					activeIndex = index;
-					renderResults();
-				});
-				results.appendChild(row);
-			}
-		};
-		const setOpen = (next) => {
-			popoverOpen = next;
-			popover.hidden = !next;
-			trigger.setAttribute("aria-expanded", next ? "true" : "false");
-			if (next) {
-				query = "";
-				search.value = "";
-				activeIndex = 0;
-				renderResults();
-				requestAnimationFrame(() => search.focus());
-			}
-		};
-		trigger.addEventListener("click", (event) => {
-			event.stopPropagation();
-			setOpen(!popoverOpen);
-		});
-		search.addEventListener("input", () => {
-			query = search.value;
-			activeIndex = 0;
-			renderResults();
-		});
-		search.addEventListener("keydown", (event) => {
-			const rowCount = filteredRows().length + (shouldShowCreateRow() ? 1 : 0);
-			if (event.key === "ArrowDown") {
-				event.preventDefault();
-				activeIndex = Math.min(rowCount - 1, activeIndex + 1);
-				renderResults();
-				return;
-			}
-			if (event.key === "ArrowUp") {
-				event.preventDefault();
-				activeIndex = Math.max(0, activeIndex - 1);
-				renderResults();
-				return;
-			}
-			if (event.key === "Enter") {
-				event.preventDefault();
-				activateRow(activeIndex);
-				return;
-			}
-			if (event.key === "Escape") {
-				event.preventDefault();
-				setOpen(false);
-			}
-		});
-		const onDocumentClick = (event) => {
-			if (!popoverOpen) return;
-			const target = event.target;
-			if (!target) return;
-			if (container.contains(target)) return;
-			setOpen(false);
-		};
-		document.addEventListener("click", onDocumentClick);
-		container.append(selectedList, trigger, popover);
-		renderSelected();
-		renderResults();
-		return {
-			element: container,
-			values: () => [...values]
-		};
-	}
 	function renderActionList(container, actions) {
 		if (!container) return;
 		container.textContent = "";
@@ -18974,6 +18862,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 			if (isError && attempt.error) {
 				const errText = String(attempt.error);
 				detailParts.push(redact ? redactIpOctets(errText) : errText);
+				if (redact && /enable diagnostics for details/i.test(errText)) detailParts.push("Turn off Redact in Advanced diagnostics to reveal the full error.");
 			}
 			if (!isError && (attempt.ops_in || attempt.ops_out)) detailParts.push(`${attempt.ops_in ?? 0} in · ${attempt.ops_out ?? 0} out`);
 			if (!redact && attempt.address) detailParts.push(attempt.address);
@@ -19528,46 +19417,6 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		});
 	}
 	//#endregion
-	//#region src/tabs/sync/peer-scope-collapsible.tsx
-	function PeerScopeCollapsible({ contentHost, initialOpen, onOpenChange, children }) {
-		const [open, setOpen] = d$2(initialOpen);
-		const contentRef = A$1(null);
-		y$2(() => {
-			setOpen(initialOpen);
-		}, [initialOpen]);
-		_$2(() => {
-			onOpenChange(open);
-		}, [onOpenChange, open]);
-		y$2(() => {
-			if (!open) return;
-			queueMicrotask(() => {
-				(contentRef.current?.querySelector("button:not([disabled]), input:not([disabled]), textarea:not([disabled]), select:not([disabled]), [tabindex]:not([tabindex=\"-1\"])"))?.focus();
-			});
-		}, [open]);
-		return /* @__PURE__ */ u(Root$3, {
-			open,
-			onOpenChange: setOpen,
-			children: [/* @__PURE__ */ u(Trigger$4, {
-				asChild: true,
-				children: /* @__PURE__ */ u("button", {
-					type: "button",
-					className: "settings-button",
-					children: open ? "Hide sharing scope" : "Show sharing scope"
-				})
-			}), contentHost ? $$1(/* @__PURE__ */ u(Content$2, {
-				forceMount: true,
-				ref: contentRef,
-				className: `peer-scope-editor-wrap${open ? "" : " collapsed"}`,
-				hidden: !open,
-				inert: !open,
-				children: /* @__PURE__ */ u(ScopeEditorContent, { children })
-			}), contentHost) : null]
-		});
-	}
-	function ScopeEditorContent({ children }) {
-		return /* @__PURE__ */ u("div", { children });
-	}
-	//#endregion
 	//#region src/tabs/sync/components/sync-inline-feedback.tsx
 	function SyncInlineFeedback({ feedback }) {
 		if (!feedback?.message) return null;
@@ -19636,42 +19485,27 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		},
 		none: null
 	};
-	function listText(value) {
-		return Array.isArray(value) ? value.map((item) => String(item || "").trim()).filter(Boolean) : [];
-	}
 	function claimedLocalActorScopeMessage(scope) {
-		const scopeId = String(scope?.scope_id || "").trim();
-		if (!scope) return "Private same-person sync is limited to an allowed personal Sharing domain; team or org domains do not carry your private memories.";
-		if (scope.authorized) return `Private same-person sync is limited to personal Sharing domain ${scopeId || "this device's personal domain"}. Team and org domains do not carry your private memories.`;
-		return `Private same-person sync is blocked until this device is granted ${scopeId || "its personal Sharing domain"}.`;
+		if (!scope) return "Private same-person sync is limited to an allowed personal Space; team or org Spaces do not carry your private memories.";
+		if (scope.authorized) return "Private same-person sync is limited to your personal Space. Team and org Spaces do not carry your private memories.";
+		return "Private same-person sync is blocked until this device is granted an allowed personal Space.";
 	}
-	function ExistingElementSlot$1({ element }) {
-		const hostRef = A$1(null);
-		_$2(() => {
-			const host = hostRef.current;
-			if (!host) return;
-			if (element.parentElement !== host) host.appendChild(element);
-			return () => {
-				if (element.parentElement === host) host.removeChild(element);
-			};
-		}, [element]);
-		return /* @__PURE__ */ u("div", { ref: hostRef });
+	function openTeamsAccessManagement() {
+		window.location.hash = "coordinator-admin";
 	}
-	function SyncPeerCard({ peer, onAssignActor, onRemove, onRename, onResetScope, onSaveScope, onSync }) {
+	function SyncPeerCard({ peer, onAssignActor, onRemove, onRename, onSync }) {
 		const peerId = String(peer.peer_device_id || "");
 		const displayName = peer.name || (peerId ? peerId.slice(0, 8) : "unknown");
 		const destructiveLabel = peer.name || peerId || displayName;
-		const pendingScopeReview = isPeerScopeReviewPending(peerId);
 		const trustSummary = derivePeerTrustSummary(peer);
 		const directionHint = DIRECTION_GLYPH[derivePeerDirection(peer)];
 		const peerStatus = peer.status || {};
 		const authorizedDomains = derivePeerAuthorizedDomainsView(peer);
+		const rawPendingScopeReview = isPeerScopeReviewPending(peerId);
+		const pendingScopeReview = rawPendingScopeReview && authorizedDomains.total === 0;
 		const grantRoleMismatch = derivePeerGrantRoleMismatchView(peer);
 		const scopeRejections = derivePeerScopeRejectionsView(peer);
-		const scope = peer.project_scope || {};
-		const projectNarrowing = derivePeerProjectNarrowingView(scope);
-		const includeList = listText(scope.include);
-		const excludeList = listText(scope.exclude);
+		const projectNarrowing = derivePeerProjectNarrowingView(peer.project_scope || {});
 		const primaryAddress = pickPrimaryAddress(peer.addresses);
 		const peerAddresses = Array.isArray(peer.addresses) ? Array.from(new Set(peer.addresses.filter(Boolean).map((value) => String(value)))) : [];
 		const rawHiddenAddressCount = Number(peer.address_count ?? 0);
@@ -19680,11 +19514,9 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		const assignmentSummary = peer.actor_display_name ? `This device belongs to ${peer.claimed_local_actor ? "you" : String(peer.actor_display_name)}.` : "This device is not assigned to anyone yet.";
 		const lastSyncAt = String(peerStatus.last_sync_at || peerStatus.last_sync_at_utc || "");
 		const lastPingAt = String(peerStatus.last_ping_at || peerStatus.last_ping_at_utc || "");
-		const discoverySummary = peer.discovered_via_group_id ? `Discovery: seen through coordinator group ${peer.discovered_via_group_id}. Discovery helps find devices; Sharing-domain grants above decide data access.` : peer.discovered_via_coordinator_id ? `Discovery: seen through coordinator ${peer.discovered_via_coordinator_id}. Discovery helps find devices; Sharing-domain grants above decide data access.` : null;
-		const scopeEditorOpen = openPeerScopeEditors.has(peerId);
+		const discoverySummary = peer.discovered_via_group_id ? `Discovery: seen through Team ${peer.discovered_via_group_id}. Discovery helps find devices; Space access above decides data access.` : peer.discovered_via_coordinator_id ? `Discovery: seen through coordinator ${peer.discovered_via_coordinator_id}. Discovery helps find devices; Space access above decides data access.` : null;
 		const scopeReviewRequested = consumePeerScopeReviewRequest(peerId);
 		const cardRef = A$1(null);
-		const [scopeHost, setScopeHost] = d$2(null);
 		const [renameValue, setRenameValue] = d$2(displayName);
 		const [feedback, setFeedback] = d$2(() => state.syncPeerFeedbackById.get(peerId) ?? null);
 		const [renameBusy, setRenameBusy] = d$2(false);
@@ -19695,10 +19527,6 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		const [selectedActorId, setSelectedActorId] = d$2(String(peer.actor_id || ""));
 		const [applyActorBusy, setApplyActorBusy] = d$2(false);
 		const [applyActorLabel, setApplyActorLabel] = d$2("Save assignment");
-		const [saveScopeBusy, setSaveScopeBusy] = d$2(false);
-		const [saveScopeLabel, setSaveScopeLabel] = d$2("Save scope");
-		const [resetScopeBusy, setResetScopeBusy] = d$2(false);
-		const [resetScopeLabel, setResetScopeLabel] = d$2("Reset to global scope");
 		const actorSelectOptions = T$1(() => {
 			const options = buildActorSelectOptions(selectedActorId);
 			const hasSelected = options.some((option) => option.value === selectedActorId);
@@ -19715,15 +19543,12 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 			state.lastSyncPeers,
 			state.lastSyncViewModel
 		]);
-		const includeEditor = T$1(() => createChipEditor(includeList, "Add project", "All projects", state.knownProjects), [
-			peerId,
-			includeList.join("|"),
-			state.knownProjects.join("|")
-		]);
-		const excludeEditor = T$1(() => createChipEditor(excludeList, "Add project", "No exclusions", state.knownProjects), [
+		y$2(() => {
+			if (rawPendingScopeReview && authorizedDomains.total > 0) clearPeerScopeReview(peerId);
+		}, [
+			authorizedDomains.total,
 			peerId,
-			excludeList.join("|"),
-			state.knownProjects.join("|")
+			rawPendingScopeReview
 		]);
 		y$2(() => {
 			setRenameValue(displayName);
@@ -19736,16 +19561,10 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 			setSelectedActorId(String(peer.actor_id || ""));
 			setApplyActorBusy(false);
 			setApplyActorLabel("Save assignment");
-			setSaveScopeBusy(false);
-			setSaveScopeLabel("Save scope");
-			setResetScopeBusy(false);
-			setResetScopeLabel("Reset to global scope");
 		}, [
 			displayName,
 			peer.actor_id,
-			peerId,
-			includeList.join("|"),
-			excludeList.join("|")
+			peerId
 		]);
 		y$2(() => {
 			if (!scopeReviewRequested || !cardRef.current) return;
@@ -19783,10 +19602,10 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		async function sync() {
 			if (pendingScopeReview) {
 				if (!await openSyncConfirmDialog({
-					title: `Sync ${displayName} before scope review?`,
-					description: "This manual sync will use the current effective scope until you finish reviewing and saving the device scope.",
+					title: `Sync ${displayName} before advanced rule review?`,
+					description: "This manual sync will use the current Space access and advanced filters until you review them in Teams.",
 					confirmLabel: "Sync anyway",
-					cancelLabel: "Review scope first"
+					cancelLabel: "Review in Teams first"
 				})) return;
 			}
 			setSyncBusy(true);
@@ -19835,36 +19654,6 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 				setApplyActorBusy(false);
 			}
 		}
-		async function saveScope() {
-			if (!peerId) return;
-			setSaveScopeBusy(true);
-			setSaveScopeLabel("Saving…");
-			try {
-				const nextFeedback = await onSaveScope(peerId, includeEditor.values(), excludeEditor.values());
-				setFeedback(nextFeedback);
-				state.syncPeerFeedbackById.set(peerId, nextFeedback);
-				setSaveScopeLabel("Save scope");
-			} catch {
-				setSaveScopeLabel("Retry");
-			} finally {
-				setSaveScopeBusy(false);
-			}
-		}
-		async function resetScope() {
-			if (!peerId) return;
-			setResetScopeBusy(true);
-			setResetScopeLabel("Resetting…");
-			try {
-				const nextFeedback = await onResetScope(peerId);
-				setFeedback(nextFeedback);
-				state.syncPeerFeedbackById.set(peerId, nextFeedback);
-				setResetScopeLabel("Reset to global scope");
-			} catch {
-				setResetScopeLabel("Retry");
-			} finally {
-				setResetScopeBusy(false);
-			}
-		}
 		const isExpanded = useExpandedPeer() === peerId && peerId !== "";
 		const drawerId = `device-drawer-${peerId || "unknown"}`;
 		const presenceState = presenceForPeer(peer);
@@ -19911,11 +19700,11 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 									}),
 									pendingScopeReview ? /* @__PURE__ */ u("span", {
 										className: "badge actor-badge",
-										children: "Needs scope review"
+										children: "Review advanced rules"
 									}) : null,
 									/* @__PURE__ */ u("span", {
 										className: `badge ${authorizedDomains.isWarning ? "badge-offline" : "actor-badge"}`,
-										title: "Sharing domains are the hard access boundary; project filters only narrow inside them.",
+										title: "Spaces are the hard access boundary; advanced filters only narrow inside them.",
 										children: authorizedDomains.badgeLabel
 									}),
 									scopeRejections.badgeLabel ? /* @__PURE__ */ u("span", {
@@ -19925,7 +19714,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 									}) : null,
 									grantRoleMismatch.badgeLabel ? /* @__PURE__ */ u("span", {
 										className: "badge badge-offline",
-										title: "Review whether explicit Sharing-domain grants match this device's intended role.",
+										title: "Review whether explicit Space access matches this device's intended role.",
 										children: grantRoleMismatch.badgeLabel
 									}) : null,
 									peer.discovered_via_group_id ? /* @__PURE__ */ u("span", {
@@ -19999,10 +19788,10 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 						children: [
 							scopeReviewRequested ? /* @__PURE__ */ u("div", {
 								className: "peer-meta",
-								children: "Review this device's sharing rules now if the defaults are too broad."
+								children: "Review this device's Space access and advanced rules in Teams if the defaults are too broad."
 							}) : pendingScopeReview ? /* @__PURE__ */ u("div", {
 								className: "peer-meta",
-								children: "Sharing rule review is still pending for this device."
+								children: "Advanced rule review is still pending for this device."
 							}) : null,
 							/* @__PURE__ */ u("div", {
 								className: "peer-scope-summary",
@@ -20022,15 +19811,15 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 							}),
 							/* @__PURE__ */ u("div", {
 								className: "peer-scope-summary",
-								children: "Authorized Sharing domains"
+								children: "Space access"
 							}),
 							/* @__PURE__ */ u("div", {
 								className: "peer-meta",
-								children: authorizedDomains.total > 0 ? "These Sharing domains are the hard access boundary for this device." : authorizedDomains.emptyMessage
+								children: authorizedDomains.total > 0 ? "These Spaces are the hard access boundary for this device." : authorizedDomains.emptyMessage
 							}),
 							authorizedDomains.domains.length > 0 ? /* @__PURE__ */ u("ul", {
 								className: "peer-scope-chips",
-								"aria-label": "Authorized Sharing domains",
+								"aria-label": "Authorized Spaces",
 								children: authorizedDomains.domains.map((domain) => /* @__PURE__ */ u("li", {
 									className: "peer-scope-chip",
 									title: domain.detail,
@@ -20116,41 +19905,28 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 							}),
 							/* @__PURE__ */ u("div", {
 								className: "peer-scope-summary",
-								children: "Project filters (narrowing only)"
+								children: "Advanced sharing rules"
 							}),
 							/* @__PURE__ */ u("div", {
 								className: "peer-meta",
-								children: [projectNarrowing.summary, " Review or tighten these filters when this device should receive fewer projects from its authorized Sharing domains."]
+								children: [
+									projectNarrowing.statusLabel,
+									". ",
+									projectNarrowing.summary,
+									" ",
+									projectNarrowing.note
+								]
 							}),
-							/* @__PURE__ */ u(PeerScopeCollapsible, {
-								contentHost: scopeHost,
-								initialOpen: scopeEditorOpen,
-								onOpenChange: (open) => {
-									if (open) openPeerScopeEditors.add(peerId);
-									else openPeerScopeEditors.delete(peerId);
-								},
-								children: /* @__PURE__ */ u("div", { children: [/* @__PURE__ */ u("div", {
-									className: "peer-scope-row",
-									children: [/* @__PURE__ */ u(ExistingElementSlot$1, { element: includeEditor.element }), /* @__PURE__ */ u(ExistingElementSlot$1, { element: excludeEditor.element })]
-								}), /* @__PURE__ */ u("div", {
-									className: "peer-scope-actions",
-									children: [/* @__PURE__ */ u("button", {
-										type: "button",
-										className: "settings-button",
-										disabled: saveScopeBusy,
-										onClick: () => void saveScope(),
-										children: saveScopeLabel
-									}), /* @__PURE__ */ u("button", {
-										type: "button",
-										className: "settings-button",
-										disabled: resetScopeBusy,
-										onClick: () => void resetScope(),
-										children: resetScopeLabel
-									})]
-								})] })
+							/* @__PURE__ */ u("div", {
+								className: "peer-actions",
+								children: /* @__PURE__ */ u("button", {
+									type: "button",
+									className: "settings-button",
+									onClick: openTeamsAccessManagement,
+									children: "Manage Spaces in Teams"
+								})
 							}),
-							/* @__PURE__ */ u(SyncInlineFeedback, { feedback }),
-							/* @__PURE__ */ u("div", { ref: setScopeHost })
+							/* @__PURE__ */ u(SyncInlineFeedback, { feedback })
 						]
 					})]
 				})]
@@ -20249,8 +20025,10 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		if (!syncPeers) return;
 		hideSkeleton("syncPeersSkeleton");
 		const peers = state.lastSyncPeers;
+		const peersArray = Array.isArray(peers) ? peers : [];
+		if (shouldClearStalePeersFeedback(state.syncPeersSectionFeedback, peersArray)) state.syncPeersSectionFeedback = null;
 		renderSyncPeersList(syncPeers, {
-			peers: Array.isArray(peers) ? peers : [],
+			peers: peersArray,
 			onRename: async (peerId, nextName) => {
 				try {
 					await renamePeer(peerId, nextName);
@@ -20279,7 +20057,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 						tone: "warning"
 					};
 					else if (peerId && isPeerScopeReviewPending(peerId)) feedback = {
-						message: `Triggered sync for ${peer?.name || (peerId ? peerId.slice(0, 8) : "unknown")}. Review scope in this card if you want tighter sharing rules.`,
+						message: `Triggered sync for ${peer?.name || (peerId ? peerId.slice(0, 8) : "unknown")}. Review Space access and advanced rules in Teams if this device needs tighter sharing.`,
 						tone: "warning"
 					};
 					else feedback = {
@@ -20310,7 +20088,10 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 						tone: "success"
 					};
 					state.syncPeerFeedbackById.delete(peerId);
-					state.syncPeersSectionFeedback = feedback;
+					state.syncPeersSectionFeedback = {
+						...feedback,
+						relatedPeerDeviceId: peerId
+					};
 					await _loadSyncData();
 					return feedback;
 				} catch (error) {
@@ -20334,38 +20115,6 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 						tone: "warning"
 					};
 				}
-			},
-			onSaveScope: async (peerId, include, exclude) => {
-				try {
-					await updatePeerScope(peerId, include, exclude);
-					clearPeerScopeReview(peerId);
-					await _loadSyncData();
-					return {
-						message: "Device sync scope saved.",
-						tone: "success"
-					};
-				} catch (error) {
-					return {
-						message: friendlyError(error, "Failed to save device scope. The current sharing rules are still active."),
-						tone: "warning"
-					};
-				}
-			},
-			onResetScope: async (peerId) => {
-				try {
-					await updatePeerScope(peerId, null, null, true);
-					clearPeerScopeReview(peerId);
-					await _loadSyncData();
-					return {
-						message: "Device sync scope reset to global defaults.",
-						tone: "success"
-					};
-				} catch (error) {
-					return {
-						message: friendlyError(error, "Failed to reset device scope. The current sharing rules are still active."),
-						tone: "warning"
-					};
-				}
 			}
 		});
 	}
@@ -20988,10 +20737,18 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 							onClick: async () => {
 								setBusy("review");
 								setReviewLabel("Pairing…");
+								setFeedback({
+									message: `Pairing ${row.displayName}. Keep this page open while the device is approved and refreshed.`,
+									tone: "success"
+								});
 								try {
 									setFeedback(await onReview(row) || null);
 									setReviewLabel(row.actionLabel || defaultReviewLabel);
 								} catch {
+									setFeedback({
+										message: `Pairing ${row.displayName} failed. Try again.`,
+										tone: "warning"
+									});
 									setReviewLabel("Retry");
 								} finally {
 									setBusy(null);
@@ -21366,7 +21123,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 				actionMessage = "This device appears in multiple coordinator groups. Review team setup first or ask an admin to clean up the duplicate enrollment before approving it here.";
 				mode = "ambiguous";
 			} else if (pairedPeer && isPeerScopeReviewPending(deviceId)) {
-				actionMessage = `Finish this device's scope review in People & devices before you sync it.`;
+				actionMessage = "Review this device's Space access and advanced rules in Teams before you sync it.";
 				mode = "scope-pending";
 			} else if (pairedPeer?.last_error) {
 				noteParts.push(`error: ${String(pairedPeer.last_error)}`);
@@ -21554,14 +21311,41 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		const label = group.displayProject.toLowerCase();
 		return label.includes("fatal:") || label.includes("not a git repository") || label === "unknown project" || group.identitySource === "unmapped";
 	}
+	function displayProjectTitle(group) {
+		return needsProjectCleanup(group) ? "Unclear project identity" : group.displayProject;
+	}
 	function canReassignLegacyGroup(group) {
 		return (group.reassignableMemoryCount ?? group.memoryCount) > 0;
 	}
-	function groupSearchText(group) {
+	function suggestedScopeText(group, targetScopes) {
+		if (!group.suggestedScopeId) return "";
+		return ` · suggested ${targetScopes.find((scope) => scope.scopeId === group.suggestedScopeId)?.label || "Space"}`;
+	}
+	function escapeRegExp(value) {
+		return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+	}
+	function targetScopeLabel(scopeId, targetScopes) {
+		return targetScopes.find((scope) => scope.scopeId === scopeId)?.label || "selected Space";
+	}
+	function authorityLabel(authorityType) {
+		switch (authorityType) {
+			case "coordinator": return "Team Space";
+			case "local": return "Local Space";
+			default: return "Other Space";
+		}
+	}
+	function formatLegacyReviewError(error, scopeId, targetScopes) {
+		let result = (error instanceof Error ? error.message : "Unable to reassign legacy review memories.").replace(/sharing domain/gi, "Space");
+		if (scopeId) result = result.replace(new RegExp(`\\b${escapeRegExp(scopeId)}\\b`, "g"), targetScopeLabel(scopeId, targetScopes));
+		return result;
+	}
+	function groupSearchText(group, targetScopes) {
+		const suggestedScopeLabel = group.suggestedScopeId ? targetScopes.find((scope) => scope.scopeId === group.suggestedScopeId)?.label : "";
 		return [
 			group.displayProject,
 			group.identitySource,
 			group.suggestedScopeId ?? "",
+			suggestedScopeLabel ?? "",
 			group.suggestionReason ?? "",
 			group.workspaceIdentity
 		].join(" ").toLowerCase();
@@ -21622,7 +21406,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 			if (filter === "cleanup" && !cleanup) return false;
 			if (filter === "no-suggestion" && (group.suggestedScopeId || cleanup)) return false;
 			if (filter === "selected" && !selectedGroups[group.workspaceIdentity]) return false;
-			return !query.trim() || groupSearchText(group).includes(query.trim().toLowerCase());
+			return !query.trim() || groupSearchText(group, targetScopes).includes(query.trim().toLowerCase());
 		});
 		async function applyGroup(group) {
 			const selectedScopeId = selectedScopes[group.workspaceIdentity] || group.suggestedScopeId || "";
@@ -21647,7 +21431,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 			} catch (error) {
 				setErrors((current) => ({
 					...current,
-					[group.workspaceIdentity]: error instanceof Error ? error.message : "Unable to reassign legacy review memories."
+					[group.workspaceIdentity]: formatLegacyReviewError(error, selectedScopeId, targetScopes)
 				}));
 			} finally {
 				setBusyIdentity(null);
@@ -21711,7 +21495,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 					} catch (error) {
 						setErrors((current) => ({
 							...current,
-							[group.workspaceIdentity]: error instanceof Error ? error.message : "Unable to reassign legacy review memories."
+							[group.workspaceIdentity]: formatLegacyReviewError(error, selectedScopeId, targetScopes)
 						}));
 					}
 				}
@@ -21739,7 +21523,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 								" older",
 								" ",
 								groupCount === 1 ? "project needs" : "projects need",
-								" a Sharing domain. They contain",
+								" a Space. They contain",
 								" ",
 								item.memoryCount.toLocaleString(),
 								" older shared memories total; review the projects, not individual memories.",
@@ -21812,7 +21596,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 								children: busyIdentity === "bulk" ? "Previewing…" : `Preview ${selectedCount.toLocaleString()} selected`
 							}) : onReassign && selectedReassignableCount > 0 ? /* @__PURE__ */ u("span", {
 								className: "legacy-review-cleanup-note",
-								children: "Add or join a Sharing domain before bulk reassignment."
+								children: "Add or join a Space before bulk reassignment."
 							}) : null,
 							selectedCount > 0 && groups.filter((group) => selectedGroups[group.workspaceIdentity] && canReassignLegacyGroup(group) && Boolean(selectedScopes[group.workspaceIdentity])).every((group) => pending[group.workspaceIdentity]) ? /* @__PURE__ */ u("span", {
 								className: "legacy-review-cleanup-note",
@@ -21832,7 +21616,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 								children: [/* @__PURE__ */ u("div", {
 									className: "legacy-review-title-wrap",
 									children: [/* @__PURE__ */ u("input", {
-										"aria-label": `Select ${group.displayProject}`,
+										"aria-label": `Select ${displayProjectTitle(group)}`,
 										checked: Boolean(selectedGroups[group.workspaceIdentity]),
 										className: "cm-checkbox",
 										disabled: !canReassignLegacyGroup(group),
@@ -21841,15 +21625,15 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 									}), /* @__PURE__ */ u("div", { children: [
 										/* @__PURE__ */ u("div", {
 											className: "legacy-review-group-title",
-											children: group.displayProject
+											children: displayProjectTitle(group)
 										}),
 										/* @__PURE__ */ u("div", {
 											className: "legacy-review-group-meta",
-											children: [formatIdentitySource(group.identitySource), group.suggestedScopeId ? ` · suggested ${group.suggestedScopeId}` : ""]
+											children: [formatIdentitySource(group.identitySource), suggestedScopeText(group, targetScopes)]
 										}),
 										!canReassignLegacyGroup(group) ? /* @__PURE__ */ u("div", {
 											className: "legacy-review-cleanup-note",
-											children: "Peer-owned only. These older memories were received from another device, so this device cannot reassign them to a Sharing domain."
+											children: "Peer-owned only. These older memories were received from another device, so this device cannot reassign them to a Space."
 										}) : group.peerOwnedMemoryCount ? /* @__PURE__ */ u("div", {
 											className: "legacy-review-cleanup-note",
 											children: [
@@ -21867,7 +21651,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 										}) : null,
 										needsProjectCleanup(group) ? /* @__PURE__ */ u("div", {
 											className: "legacy-review-cleanup-note",
-											children: "Unclear project identity. Inspect or correct the project before trusting a domain."
+											children: "Inspect or correct the project identity before assigning old shared data to a Space."
 										}) : null
 									] })]
 								}), /* @__PURE__ */ u("span", {
@@ -21906,20 +21690,20 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 							}) : null,
 							targetScopes.length > 0 && onReassign && canReassignLegacyGroup(group) ? /* @__PURE__ */ u("label", {
 								className: "legacy-review-target",
-								children: [/* @__PURE__ */ u("span", { children: "Destination Sharing domain" }), /* @__PURE__ */ u("select", {
+								children: [/* @__PURE__ */ u("span", { children: "Destination Space" }), /* @__PURE__ */ u("select", {
 									className: "peer-scope-input",
 									disabled: busyIdentity != null,
 									onChange: (event) => updateSelectedScope(group, event.currentTarget.value),
 									value: selectedScopes[group.workspaceIdentity] || "",
 									children: [/* @__PURE__ */ u("option", {
 										value: "",
-										children: "Choose domain…"
+										children: "Choose Space…"
 									}), targetScopes.map((scope) => /* @__PURE__ */ u("option", {
 										value: scope.scopeId,
 										children: [
 											scope.label,
 											" · ",
-											scope.authorityType,
+											authorityLabel(scope.authorityType),
 											scope.scopeId === group.suggestedScopeId ? " · suggested" : ""
 										]
 									}, scope.scopeId))]
@@ -22222,7 +22006,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		try {
 			const runtime = await loadRuntimeInfo();
 			if (!runtime?.version) return;
-			setRuntimeLabel(runtime.version, "882d43d");
+			setRuntimeLabel(runtime.version, "c8fe0f7");
 		} catch {}
 	}
 	var lastAnnouncedRefreshState = null;