Sync revoke behavior

Access changes take effect on the next server request.

For a Team Member, revoking a client grant means:

• sync manifest no longer lists that client;
• sync pull cannot fetch that client;
• sync push is denied for that client.

Users with Full access do not depend on individual client grants. Their client access changes only when their direct Team role, Company access, account state, or Team state changes.

Archiving a Team also blocks its normal sync requests and removes it from the Team selector.

Old local files are not deleted automatically. Remove previously pulled files from the local machine when they should no longer be used.

The local workspace cannot restore access by changing a Team, client, or user ID. The server resolves identity and checks current access on every request.

Existing Team conversations have separate fail-closed behavior. See Companies and multiple Teams.

Next: Restricted runner