@codemem/server 0.47.0 → 0.47.1

package/dist/account/owner-recovery-candidates.d.ts

@@ -25,6 +25,7 @@ export declare function readRecoveryCandidates(options: {
     adminSecret: string;
     groups: readonly string[];
     device: CandidateDevice;
+    timeoutS?: number;
 }): Promise<RecoveryOwnerCandidate[]>;
 export {};
 //# sourceMappingURL=owner-recovery-candidates.d.ts.map

package/dist/account/owner-recovery-candidates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"owner-recovery-candidates.d.ts","sourceRoot":"","sources":["../../src/account/owner-recovery-candidates.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,KAAK,qCAAqC,EAG1C,MAAM,eAAe,CAAC;AAGvB,MAAM,WAAW,sBAAsB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AACD,UAAU,eAAe;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACnB;AA2BD,8FAA8F;AAC9F,wBAAgB,mBAAmB,CAClC,SAAS,EAAE,SAAS,OAAO,EAAE,EAC7B,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,GACvC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAS1B;AAqBD,wBAAgB,aAAa,CAC5B,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,EAChC,iBAAiB,EAAE,MAAM,GACvB,sBAAsB,EAAE,CAU1B;AAaD;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE;IACrD,kBAAkB,EAAE,OAAO,qCAAqC,CAAC;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,MAAM,EAAE,eAAe,CAAC;CACxB,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAqBpC"}
+{"version":3,"file":"owner-recovery-candidates.d.ts","sourceRoot":"","sources":["../../src/account/owner-recovery-candidates.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,KAAK,qCAAqC,EAG1C,MAAM,eAAe,CAAC;AAGvB,MAAM,WAAW,sBAAsB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AACD,UAAU,eAAe;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACnB;AA2BD,8FAA8F;AAC9F,wBAAgB,mBAAmB,CAClC,SAAS,EAAE,SAAS,OAAO,EAAE,EAC7B,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,GACvC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAS1B;AAqBD,wBAAgB,aAAa,CAC5B,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,EAChC,iBAAiB,EAAE,MAAM,GACvB,sBAAsB,EAAE,CAU1B;AAaD;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE;IACrD,kBAAkB,EAAE,OAAO,qCAAqC,CAAC;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,MAAM,EAAE,eAAe,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAsBpC"}

package/dist/account/owner-recovery-evidence.d.ts

@@ -5,6 +5,11 @@ export declare class AccountOwnerRecoveryError extends Error {
     readonly code: "invalid" | "busy" | "context_changed" | "unavailable";
     constructor(code?: "invalid" | "busy" | "context_changed" | "unavailable");
 }
+/**
+ * The fix for an unsafe local state directory, or null for any other error. Matches the
+ * core error by code because the bundle can carry a second copy of the core class.
+ */
+export declare function unsafeStorageMessage(error: unknown): string | null;
 export declare function requireRecovery(condition: unknown, code?: AccountOwnerRecoveryError["code"]): asserts condition;
 export declare function recoveryId(value: unknown): value is string;
 export declare function recoveryHash(value: unknown): value is string;

package/dist/account/owner-recovery-evidence.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"owner-recovery-evidence.d.ts","sourceRoot":"","sources":["../../src/account/owner-recovery-evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAKN,KAAK,oCAAoC,EACzC,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EACX,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,MAAM,2BAA2B,CAAC;AAEnC,eAAO,MAAM,cAAc,0CAA0C,CAAC;AAKtE,qBAAa,yBAA0B,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,iBAAiB,GAAG,aAAa;IAAjF,YAAqB,IAAI,GAAE,SAAS,GAAG,MAAM,GAAG,iBAAiB,GAAG,aAAyB,EAE5F;CACD;AACD,wBAAgB,eAAe,CAC9B,SAAS,EAAE,OAAO,EAClB,IAAI,GAAE,yBAAyB,CAAC,MAAM,CAAa,GACjD,OAAO,CAAC,SAAS,CAEnB;AACD,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAQ1D;AACD,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE5D;AACD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGtE;AACD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAIjG;AAqFD,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,oCAAoC,CAWhG;AACD,MAAM,WAAW,uBAAuB;IACvC,KAAK,EAAE,OAAO,GAAG,UAAU,GAAG,cAAc,CAAC;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,oCAAoC,CAAC;IAC/C,IAAI,EAAE,kBAAkB,EAAE,CAAC;IAC3B,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAC;CAClB;AACD,wBAAgB,sBAAsB,CACrC,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,iBAAiB,EAC5B,OAAO,EAAE,MAAM,GACb,uBAAuB,CAiDzB;AA8BD,wBAAgB,kBAAkB,CACjC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,iBAAiB,GAC1B,GAAG,CAAC,MAAM,EAAE,oCAAoC,CAAC,CAmCnD"}
+{"version":3,"file":"owner-recovery-evidence.d.ts","sourceRoot":"","sources":["../../src/account/owner-recovery-evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAKN,KAAK,oCAAoC,EACzC,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EACX,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,MAAM,2BAA2B,CAAC;AAEnC,eAAO,MAAM,cAAc,0CAA0C,CAAC;AAKtE,qBAAa,yBAA0B,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,iBAAiB,GAAG,aAAa;IAAjF,YAAqB,IAAI,GAAE,SAAS,GAAG,MAAM,GAAG,iBAAiB,GAAG,aAAyB,EAE5F;CACD;AACD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAGlE;AACD,wBAAgB,eAAe,CAC9B,SAAS,EAAE,OAAO,EAClB,IAAI,GAAE,yBAAyB,CAAC,MAAM,CAAa,GACjD,OAAO,CAAC,SAAS,CAEnB;AACD,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAQ1D;AACD,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE5D;AACD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGtE;AACD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAIjG;AAqFD,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,oCAAoC,CAWhG;AACD,MAAM,WAAW,uBAAuB;IACvC,KAAK,EAAE,OAAO,GAAG,UAAU,GAAG,cAAc,CAAC;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,oCAAoC,CAAC;IAC/C,IAAI,EAAE,kBAAkB,EAAE,CAAC;IAC3B,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAC;CAClB;AACD,wBAAgB,sBAAsB,CACrC,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,iBAAiB,EAC5B,OAAO,EAAE,MAAM,GACb,uBAAuB,CAiDzB;AA8BD,wBAAgB,kBAAkB,CACjC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,iBAAiB,GAC1B,GAAG,CAAC,MAAM,EAAE,oCAAoC,CAAC,CAmCnD"}

package/dist/account/owner-recovery-service.d.ts

@@ -14,8 +14,16 @@ export interface AccountOwnerRecoveryServiceOptions {
     reviewOwner?: typeof coordinatorAuthControllerReviewAction;
     /** Read-only device-owner preview used only to suggest recorded owners. */
     previewDeviceOwner?: typeof coordinatorAuthControllerReviewAction;
+    /** Configured `sync_coordinator_timeout_s`, read on every request. */
+    readCoordinatorTimeoutS?: () => number;
     now?: () => number;
 }
+/**
+ * Scoped owner reviews read the full Team history, and confirming sends a fresh preview
+ * and then the commit. Each request can take several seconds on the live coordinator, so
+ * the 3s sync default would abort a commit the user already approved.
+ */
+export declare const MIN_OWNER_REVIEW_TIMEOUT_S = 10;
 /** No routes or configuration composition: these callbacks are private server capabilities. */
 declare class AccountOwnerRecoveryService {
     #private;

package/dist/account/owner-recovery-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"owner-recovery-service.d.ts","sourceRoot":"","sources":["../../src/account/owner-recovery-service.ts"],"names":[],"mappings":"AACA,OAAO,EACN,qCAAqC,EAGrC,gCAAgC,EAChC,gDAAgD,EAChD,yCAAyC,EACzC,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAA8B,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EACN,KAAK,sBAAsB,EAE3B,MAAM,gCAAgC,CAAC;AAkBxC,OAAO,KAAK,EACX,eAAe,EACf,sBAAsB,EACtB,cAAc,EACd,iBAAiB,EACjB,MAAM,2BAA2B,CAAC;AAEnC,YAAY,EACX,eAAe,EACf,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,iBAAiB,GACjB,MAAM,2BAA2B,CAAC;AACnC,MAAM,WAAW,kCAAkC;IAClD,WAAW,EAAE,oBAAoB,CAAC;IAClC,eAAe,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACjD,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,gBAAgB,CAAC,EAAE,OAAO,gCAAgC,CAAC;IAC3D,qBAAqB,CAAC,EAAE,OAAO,yCAAyC,CAAC;IACzE,uBAAuB,CAAC,EAAE,OAAO,gDAAgD,CAAC;IAClF,WAAW,CAAC,EAAE,OAAO,qCAAqC,CAAC;IAC3D,2EAA2E;IAC3E,kBAAkB,CAAC,EAAE,OAAO,qCAAqC,CAAC;IAClE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACnB;AAkCD,+FAA+F;AAC/F,cAAM,2BAA2B;;IAOhC,YAAY,OAAO,EAAE,kCAAkC,EAEtD;IA2CK,UAAU;iBAQL,CAAC;;;;OAKX;IAsGK,OAAO,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,eAAe,CAAC,CAoBvE;IA8BK,OAAO,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAc1F;IAqJK,WAAW,CAAC,KAAK,EAAE;QACxB,SAAS,EAAE,iBAAiB,CAAC;QAC7B,SAAS,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,cAAc,CAAC,CAoB1B;IAiBK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAK3B;CACD;AACD,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,kCAAkC,+BAE5F"}
+{"version":3,"file":"owner-recovery-service.d.ts","sourceRoot":"","sources":["../../src/account/owner-recovery-service.ts"],"names":[],"mappings":"AACA,OAAO,EACN,qCAAqC,EAGrC,gCAAgC,EAChC,gDAAgD,EAChD,yCAAyC,EACzC,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAA8B,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EACN,KAAK,sBAAsB,EAE3B,MAAM,gCAAgC,CAAC;AAmBxC,OAAO,KAAK,EACX,eAAe,EACf,sBAAsB,EACtB,cAAc,EACd,iBAAiB,EACjB,MAAM,2BAA2B,CAAC;AAEnC,YAAY,EACX,eAAe,EACf,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,iBAAiB,GACjB,MAAM,2BAA2B,CAAC;AACnC,MAAM,WAAW,kCAAkC;IAClD,WAAW,EAAE,oBAAoB,CAAC;IAClC,eAAe,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACjD,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,gBAAgB,CAAC,EAAE,OAAO,gCAAgC,CAAC;IAC3D,qBAAqB,CAAC,EAAE,OAAO,yCAAyC,CAAC;IACzE,uBAAuB,CAAC,EAAE,OAAO,gDAAgD,CAAC;IAClF,WAAW,CAAC,EAAE,OAAO,qCAAqC,CAAC;IAC3D,2EAA2E;IAC3E,kBAAkB,CAAC,EAAE,OAAO,qCAAqC,CAAC;IAClE,sEAAsE;IACtE,uBAAuB,CAAC,EAAE,MAAM,MAAM,CAAC;IACvC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACnB;AACD;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAkC7C,+FAA+F;AAC/F,cAAM,2BAA2B;;IAOhC,YAAY,OAAO,EAAE,kCAAkC,EAEtD;IA+CK,UAAU;iBAQL,CAAC;;;;OAKX;IAwGK,OAAO,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,eAAe,CAAC,CAoBvE;IA8BK,OAAO,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAc1F;IAuJK,WAAW,CAAC,KAAK,EAAE;QACxB,SAAS,EAAE,iBAAiB,CAAC;QAC7B,SAAS,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,cAAc,CAAC,CAoB1B;IAmBK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAK3B;CACD;AACD,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,kCAAkC,+BAE5F"}

package/dist/index.js

@@ -1266,6 +1266,14 @@ var AccountOwnerRecoveryError = class extends Error {
 		this.code = code;
 	}
 };
+/**
+* The fix for an unsafe local state directory, or null for any other error. Matches the
+* core error by code because the bundle can carry a second copy of the core class.
+*/
+function unsafeStorageMessage(error) {
+	if (!(error instanceof Error) || !("code" in error)) return null;
+	return error.code === "account_owner_association_directory_unsafe" ? error.message : null;
+}
 function requireRecovery(condition, code = "invalid") {
 	if (!condition) throw new AccountOwnerRecoveryError(code);
 }
@@ -1574,6 +1582,11 @@ async function dispatch(c, service) {
 function accountOwnerRecoveryRoutes(service) {
 	const app = new Hono();
 	app.onError((error, c) => {
+		const storage = unsafeStorageMessage(error);
+		if (storage) return c.json({
+			error: "account_owner_recovery_storage_unsafe",
+			detail: storage
+		}, 409);
 		if (!(error instanceof AccountOwnerRecoveryError)) return c.json({ error: "account_owner_recovery_unavailable" }, 503);
 		return c.json({ error: `account_owner_recovery_${error.code}` }, {
 			invalid: 400,
@@ -15774,16 +15787,44 @@ function assertPublishedConfigLock(path, staged) {
 function accountOwnerAssociationDirectory() {
 	return join(homedir(), ".codemem", "account-owner-associations");
 }
+/**
+* A state directory that other local users could change. The message names the path and
+* the command that fixes it, because callers show it to the person who owns the directory.
+*/
+var AccountOwnerAssociationDirectoryError = class extends Error {
+	path;
+	problem;
+	code = "account_owner_association_directory_unsafe";
+	constructor(path, problem) {
+		super(directoryProblemMessage(path, problem));
+		this.path = path;
+		this.problem = problem;
+		this.name = "AccountOwnerAssociationDirectoryError";
+	}
+};
+function directoryProblemMessage(path, problem) {
+	if (problem === "shared_write") return `${path} is writable by other users. Run \`chmod go-w ${path}\`, then try again.`;
+	if (problem === "not_private") return `${path} must be private to you. Run \`chmod 700 ${path}\`, then try again.`;
+	if (problem === "wrong_owner") return `${path} is owned by another user. Make it yours.`;
+	return `${path} must be a real directory, not a file or symlink.`;
+}
+function directoryProblem(stat, options) {
+	if (!stat.isDirectory() || stat.isSymbolicLink()) return "not_directory";
+	if (typeof process.getuid === "function" && stat.uid !== process.getuid()) return "wrong_owner";
+	if (options.private) return (stat.mode & 511) === 448 ? null : "not_private";
+	return (stat.mode & 18) === 0 ? null : "shared_write";
+}
 function checkDirectory(path, options = {}) {
+	let stat;
 	try {
-		const stat = lstatSync(path);
-		const unsafeMode = options.private ? (stat.mode & 511) !== 448 : (stat.mode & 18) !== 0;
-		if (!stat.isDirectory() || stat.isSymbolicLink() || unsafeMode || typeof process.getuid === "function" && stat.uid !== process.getuid()) throw new Error("account_owner_association_invalid");
-		return true;
+		stat = lstatSync(path);
 	} catch (error) {
 		if (error && typeof error === "object" && "code" in error && error.code === "ENOENT") return false;
 		throw error;
 	}
+	const problem = directoryProblem(stat, options);
+	if (problem) throw new AccountOwnerAssociationDirectoryError(path, problem);
+	return true;
 }
 /** Missing directories stay missing during reads. Never follow a state-directory symlink. */
 function readAccountOwnerAssociationDirectory(path) {
@@ -16169,7 +16210,8 @@ async function readRecoveryCandidates(options) {
 				groupId,
 				deviceId: device.deviceId,
 				fingerprint: device.fingerprint,
-				identityId: device.identityId
+				identityId: device.identityId,
+				timeoutS: options.timeoutS
 			});
 		} catch {
 			continue;
@@ -16257,8 +16299,6 @@ function assertNoCompetingOwner(destinations, ownerIdentityId) {
 		requireRecovery(!existing || existing.ownerIdentityId === ownerIdentityId);
 	}
 }
-//#endregion
-//#region src/account/owner-recovery-service.ts
 var CANDIDATE_TTL_MS = 6e4;
 function groupAction(state) {
 	if (state === "ready") return "new";
@@ -16285,6 +16325,10 @@ var AccountOwnerRecoveryService = class {
 	#now() {
 		return (this.#options.now ?? Date.now)();
 	}
+	#timeoutS() {
+		const configured = this.#options.readCoordinatorTimeoutS?.() ?? 0;
+		return Math.max(10, Number.isFinite(configured) ? configured : 0);
+	}
 	#assertCurrent(capture, reservation) {
 		requireRecovery(!this.#closed, "unavailable");
 		requireRecovery(!reservation || reservation.isCurrent(), "context_changed");
@@ -16338,7 +16382,8 @@ var AccountOwnerRecoveryService = class {
 				deviceId: c.deviceId,
 				fingerprint: c.fingerprint,
 				identityId: c.identityId
-			}
+			},
+			timeoutS: this.#timeoutS()
 		});
 		this.#assertCurrent(capture);
 		this.#candidateCache = {
@@ -16360,7 +16405,8 @@ var AccountOwnerRecoveryService = class {
 			groupId,
 			deviceId: capture.context.deviceId,
 			fingerprint: capture.context.fingerprint,
-			identityId: selection.existingOwnerId
+			identityId: selection.existingOwnerId,
+			timeoutS: this.#timeoutS()
 		};
 	}
 	async #previewReview(entry, groupId) {
@@ -16526,7 +16572,7 @@ var AccountOwnerRecoveryService = class {
 			return { outcome: {
 				groupId,
 				status: staleDenial(error) ? "failed" : "unknown",
-				message: "Check coordinator status or import original receipts before trying again."
+				message: unsafeStorageMessage(error) ?? "Check coordinator status or import original receipts before trying again."
 			} };
 		}
 	}
@@ -16601,11 +16647,11 @@ var AccountOwnerRecoveryService = class {
 	async #importGroup(entry, groupId, receipt, reservation) {
 		try {
 			return await this.#verifyAndRetain(entry, groupId, receipt, reservation);
-		} catch {
+		} catch (error) {
 			return {
 				groupId,
 				status: "unknown",
-				message: "Context or proof outcome changed; check status before importing again."
+				message: unsafeStorageMessage(error) ?? "Context or proof outcome changed; check status before importing again."
 			};
 		}
 	}