@bolloon/bolloon-agent 0.4.32 → 0.5.0

package/dist/web/mobile-core.js

@@ -1374,7 +1374,7 @@
   }
   function encode(data, alphabet4, bitsPerChar) {
     const pad2 = alphabet4[alphabet4.length - 1] === "=";
-    const mask = (1 << bitsPerChar) - 1;
+    const mask2 = (1 << bitsPerChar) - 1;
     let out = "";
     let bits = 0;
     let buffer6 = 0;
@@ -1383,11 +1383,11 @@
       bits += 8;
       while (bits > bitsPerChar) {
         bits -= bitsPerChar;
-        out += alphabet4[mask & buffer6 >> bits];
+        out += alphabet4[mask2 & buffer6 >> bits];
       }
     }
     if (bits !== 0) {
-      out += alphabet4[mask & buffer6 << bitsPerChar - bits];
+      out += alphabet4[mask2 & buffer6 << bitsPerChar - bits];
     }
     if (pad2) {
       while ((out.length * bitsPerChar & 7) !== 0) {
@@ -3361,8 +3361,8 @@
   }
   function encodeInteger(value2) {
     const contents = new Uint8ArrayList();
-    const mask = 128;
-    const positive2 = (value2.subarray()[0] & mask) === mask;
+    const mask2 = 128;
+    const positive2 = (value2.subarray()[0] & mask2) === mask2;
     if (positive2) {
       contents.append(Uint8Array.from([0]));
     }
@@ -4974,13 +4974,13 @@
     const windows = Math.ceil(scalarBits2 / W2) + 1;
     const windowSize = 2 ** (W2 - 1);
     const maxNumber = 2 ** W2;
-    const mask = bitMask(W2);
+    const mask2 = bitMask(W2);
     const shiftBy = BigInt(W2);
-    return { windows, windowSize, mask, maxNumber, shiftBy };
+    return { windows, windowSize, mask: mask2, maxNumber, shiftBy };
   }
   function calcOffsets(n, window2, wOpts) {
-    const { windowSize, mask, maxNumber, shiftBy } = wOpts;
-    let wbits = Number(n & mask);
+    const { windowSize, mask: mask2, maxNumber, shiftBy } = wOpts;
+    let wbits = Number(n & mask2);
     let nextN = n >> shiftBy;
     if (wbits > windowSize) {
       wbits -= maxNumber;
@@ -6801,18 +6801,18 @@
          * Zig-zag encodes this long bits
          */
         zzEncode() {
-          const mask = this.hi >> 31;
-          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask) >>> 0;
-          this.lo = (this.lo << 1 ^ mask) >>> 0;
+          const mask2 = this.hi >> 31;
+          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask2) >>> 0;
+          this.lo = (this.lo << 1 ^ mask2) >>> 0;
           return this;
         }
         /**
          * Zig-zag decodes this long bits
          */
         zzDecode() {
-          const mask = -(this.lo & 1);
-          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask) >>> 0;
-          this.hi = (this.hi >>> 1 ^ mask) >>> 0;
+          const mask2 = -(this.lo & 1);
+          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask2) >>> 0;
+          this.hi = (this.hi >>> 1 ^ mask2) >>> 0;
           return this;
         }
         /**
@@ -12897,9 +12897,9 @@ ${indent}[Error list was empty]`;
       }
     }
   }
-  function simpleMaskLength(mask) {
+  function simpleMaskLength(mask2) {
     let ones = 0;
-    for (let [index, byte] of mask.entries()) {
+    for (let [index, byte] of mask2.entries()) {
       if (byte === 255) {
         ones += 8;
         continue;
@@ -12911,8 +12911,8 @@ ${indent}[Error list was empty]`;
       if ((byte & 128) != 0) {
         return -1;
       }
-      for (let i = index + 1; i < mask.length; i++) {
-        if (mask[i] != 0) {
+      for (let i = index + 1; i < mask2.length; i++) {
+        if (mask2[i] != 0) {
           return -1;
         }
       }
@@ -12920,9 +12920,9 @@ ${indent}[Error list was empty]`;
     }
     return ones;
   }
-  function maskToHex(mask) {
+  function maskToHex(mask2) {
     let hex = "0x";
-    for (const byte of mask) {
+    for (const byte of mask2) {
       hex += (byte >> 4).toString(16) + (byte & 15).toString(16);
     }
     return hex;
@@ -12934,20 +12934,20 @@ ${indent}[Error list was empty]`;
   });
 
   // node_modules/@chainsafe/netmask/dist/src/ip.js
-  function maskIp(ip, mask) {
-    if (mask.length === IPv6Len && ip.length === IPv4Len && allFF(mask, 0, 11)) {
-      mask = mask.slice(12);
+  function maskIp(ip, mask2) {
+    if (mask2.length === IPv6Len && ip.length === IPv4Len && allFF(mask2, 0, 11)) {
+      mask2 = mask2.slice(12);
     }
-    if (mask.length === IPv4Len && ip.length === IPv6Len && deepEqual(ip, ipv4Prefix, 0, 11)) {
+    if (mask2.length === IPv4Len && ip.length === IPv6Len && deepEqual(ip, ipv4Prefix, 0, 11)) {
       ip = ip.slice(12);
     }
     const n = ip.length;
-    if (n != mask.length) {
+    if (n != mask2.length) {
       throw new Error("Failed to mask ip");
     }
     const out = new Uint8Array(n);
     for (let i = 0; i < n; i++) {
-      out[i] = ip[i] & mask[i];
+      out[i] = ip[i] & mask2[i];
     }
     return out;
   }
@@ -13009,10 +13009,10 @@ ${indent}[Error list was empty]`;
     if (Number.isNaN(m2) || String(m2).length !== maskString.length || m2 < 0 || m2 > ipLength * 8) {
       throw new Error("Failed to parse given CIDR: " + s2);
     }
-    const mask = cidrMask(m2, 8 * ipLength);
+    const mask2 = cidrMask(m2, 8 * ipLength);
     return {
-      network: maskIp(ip, mask),
-      mask
+      network: maskIp(ip, mask2),
+      mask: mask2
     };
   }
   function cidrMask(ones, bits) {
@@ -13054,18 +13054,18 @@ ${indent}[Error list was empty]`;
          * @param ipOrCidr either network ip or full cidr address
          * @param mask in case ipOrCidr is network this can be either mask in decimal format or as ip address
          */
-        constructor(ipOrCidr, mask) {
-          if (mask == null) {
+        constructor(ipOrCidr, mask2) {
+          if (mask2 == null) {
             ({ network: this.network, mask: this.mask } = parseCidr(ipOrCidr));
           } else {
             const ipResult = parseIP(ipOrCidr);
             if (ipResult == null) {
               throw new Error("Failed to parse network");
             }
-            mask = String(mask);
-            const m2 = parseInt(mask, 10);
-            if (Number.isNaN(m2) || String(m2).length !== mask.length || m2 < 0 || m2 > ipResult.length * 8) {
-              const maskResult = parseIP(mask);
+            mask2 = String(mask2);
+            const m2 = parseInt(mask2, 10);
+            if (Number.isNaN(m2) || String(m2).length !== mask2.length || m2 < 0 || m2 > ipResult.length * 8) {
+              const maskResult = parseIP(mask2);
               if (maskResult == null) {
                 throw new Error("Failed to parse mask");
               }
@@ -13087,8 +13087,8 @@ ${indent}[Error list was empty]`;
         /**Serializes back to string format */
         toString() {
           const l = simpleMaskLength(this.mask);
-          const mask = l !== -1 ? String(l) : maskToHex(this.mask);
-          return ipToString(this.network) + "/" + mask;
+          const mask2 = l !== -1 ? String(l) : maskToHex(this.mask);
+          return ipToString(this.network) + "/" + mask2;
         }
       };
     }
@@ -13309,11 +13309,11 @@ ${indent}[Error list was empty]`;
         }
       }
       var Netmask4Impl = class _Netmask4Impl {
-        constructor(net, mask) {
+        constructor(net, mask2) {
           if (typeof net !== "string") {
             throw new Error("Missing `net' parameter");
           }
-          let maskStr = mask;
+          let maskStr = mask2;
           if (!maskStr) {
             const parts = net.split("/", 2);
             net = parts[0];
@@ -13498,11 +13498,11 @@ ${indent}[Error list was empty]`;
         }
       }
       var Netmask6Impl = class _Netmask6Impl {
-        constructor(net, mask) {
+        constructor(net, mask2) {
           if (typeof net !== "string") {
             throw new Error("Missing `net' parameter");
           }
-          let prefixLen = mask;
+          let prefixLen = mask2;
           if (prefixLen === void 0 || prefixLen === null) {
             const slashIdx = net.indexOf("/");
             if (slashIdx !== -1) {
@@ -13585,15 +13585,15 @@ ${indent}[Error list was empty]`;
       } });
       var netmask6_1 = require_netmask6();
       var Netmask2 = class _Netmask {
-        constructor(net, mask) {
+        constructor(net, mask2) {
           if (typeof net !== "string") {
             throw new Error("Missing `net' parameter");
           }
           const addrPart = net.indexOf("/") !== -1 ? net.substring(0, net.indexOf("/")) : net;
           if (addrPart.indexOf(":") !== -1) {
-            this._impl = new netmask6_1.Netmask6Impl(net, mask);
+            this._impl = new netmask6_1.Netmask6Impl(net, mask2);
           } else {
-            this._impl = new netmask4_1.Netmask4Impl(net, mask);
+            this._impl = new netmask4_1.Netmask4Impl(net, mask2);
           }
           this.base = this._impl.base;
           this.mask = this._impl.mask;
@@ -18414,11 +18414,11 @@ ${indent}[Error list was empty]`;
   function toToken2(data, pos, prefix, length20, options2) {
     const totLength = prefix + length20;
     assertEnoughData(data, pos, totLength);
-    const tok = new Token(Type.string, toStr(data, pos + prefix, pos + totLength), totLength);
+    const tok2 = new Token(Type.string, toStr(data, pos + prefix, pos + totLength), totLength);
     if (options2.retainStringBytes === true) {
-      tok.byteValue = data.slice(pos + prefix, pos + totLength);
+      tok2.byteValue = data.slice(pos + prefix, pos + totLength);
     }
-    return tok;
+    return tok2;
   }
   function decodeStringCompact(data, pos, minor, options2) {
     return toToken2(data, pos, 1, minor, options2);
@@ -21481,18 +21481,18 @@ ${indent}[Error list was empty]`;
          * Zig-zag encodes this long bits
          */
         zzEncode() {
-          const mask = this.hi >> 31;
-          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask) >>> 0;
-          this.lo = (this.lo << 1 ^ mask) >>> 0;
+          const mask2 = this.hi >> 31;
+          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask2) >>> 0;
+          this.lo = (this.lo << 1 ^ mask2) >>> 0;
           return this;
         }
         /**
          * Zig-zag decodes this long bits
          */
         zzDecode() {
-          const mask = -(this.lo & 1);
-          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask) >>> 0;
-          this.hi = (this.hi >>> 1 ^ mask) >>> 0;
+          const mask2 = -(this.lo & 1);
+          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask2) >>> 0;
+          this.hi = (this.hi >>> 1 ^ mask2) >>> 0;
           return this;
         }
         /**
@@ -24141,18 +24141,18 @@ ${indent}[Error list was empty]`;
          * Zig-zag encodes this long bits
          */
         zzEncode() {
-          const mask = this.hi >> 31;
-          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask) >>> 0;
-          this.lo = (this.lo << 1 ^ mask) >>> 0;
+          const mask2 = this.hi >> 31;
+          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask2) >>> 0;
+          this.lo = (this.lo << 1 ^ mask2) >>> 0;
           return this;
         }
         /**
          * Zig-zag decodes this long bits
          */
         zzDecode() {
-          const mask = -(this.lo & 1);
-          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask) >>> 0;
-          this.hi = (this.hi >>> 1 ^ mask) >>> 0;
+          const mask2 = -(this.lo & 1);
+          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask2) >>> 0;
+          this.hi = (this.hi >>> 1 ^ mask2) >>> 0;
           return this;
         }
         /**
@@ -28712,18 +28712,18 @@ ${indent}[Error list was empty]`;
   }
   function multiaddrToIpNet(ma) {
     const config = getNetConfig(ma);
-    let mask = config.cidr;
+    let mask2 = config.cidr;
     if (config.type !== "ip4" && config.type !== "ip6") {
       throw new InvalidParametersError(`Multiaddr ${ma} was not an IPv4 or IPv6 address`);
     }
-    if (mask == null) {
+    if (mask2 == null) {
       switch (config.type) {
         case "ip4": {
-          mask = 32;
+          mask2 = 32;
           break;
         }
         case "ip6": {
-          mask = 128;
+          mask2 = 128;
           break;
         }
         default: {
@@ -28731,7 +28731,7 @@ ${indent}[Error list was empty]`;
         }
       }
     }
-    return new IpNet(config.host, mask);
+    return new IpNet(config.host, mask2);
   }
   function isDirect(ma) {
     return !Circuit.exactMatch(ma);
@@ -35926,12 +35926,12 @@ ${[...listenStats.errors.entries()].map(([addr, err2]) => {
             g[i] &= 8191;
           }
           g[9] -= 1 << 13;
-          let mask = (c ^ 1) - 1;
+          let mask2 = (c ^ 1) - 1;
           for (let i = 0; i < 10; i++)
-            g[i] &= mask;
-          mask = ~mask;
+            g[i] &= mask2;
+          mask2 = ~mask2;
           for (let i = 0; i < 10; i++)
-            h3[i] = h3[i] & mask | g[i];
+            h3[i] = h3[i] & mask2 | g[i];
           h3[0] = (h3[0] | h3[1] << 13) & 65535;
           h3[1] = (h3[1] >>> 3 | h3[2] << 10) & 65535;
           h3[2] = (h3[2] >>> 6 | h3[3] << 7) & 65535;
@@ -36669,7 +36669,7 @@ ${[...listenStats.errors.entries()].map(([addr, err2]) => {
   }
   function encode10(data, alphabet4, bitsPerChar) {
     const pad2 = alphabet4[alphabet4.length - 1] === "=";
-    const mask = (1 << bitsPerChar) - 1;
+    const mask2 = (1 << bitsPerChar) - 1;
     let out = "";
     let bits = 0;
     let buffer6 = 0;
@@ -36678,11 +36678,11 @@ ${[...listenStats.errors.entries()].map(([addr, err2]) => {
       bits += 8;
       while (bits > bitsPerChar) {
         bits -= bitsPerChar;
-        out += alphabet4[mask & buffer6 >> bits];
+        out += alphabet4[mask2 & buffer6 >> bits];
       }
     }
     if (bits !== 0) {
-      out += alphabet4[mask & buffer6 << bitsPerChar - bits];
+      out += alphabet4[mask2 & buffer6 << bitsPerChar - bits];
     }
     if (pad2) {
       while ((out.length * bitsPerChar & 7) !== 0) {
@@ -38978,18 +38978,18 @@ ${[...listenStats.errors.entries()].map(([addr, err2]) => {
          * Zig-zag encodes this long bits
          */
         zzEncode() {
-          const mask = this.hi >> 31;
-          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask) >>> 0;
-          this.lo = (this.lo << 1 ^ mask) >>> 0;
+          const mask2 = this.hi >> 31;
+          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask2) >>> 0;
+          this.lo = (this.lo << 1 ^ mask2) >>> 0;
           return this;
         }
         /**
          * Zig-zag decodes this long bits
          */
         zzDecode() {
-          const mask = -(this.lo & 1);
-          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask) >>> 0;
-          this.hi = (this.hi >>> 1 ^ mask) >>> 0;
+          const mask2 = -(this.lo & 1);
+          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask2) >>> 0;
+          this.hi = (this.hi >>> 1 ^ mask2) >>> 0;
           return this;
         }
         /**
@@ -41706,18 +41706,18 @@ ${[...listenStats.errors.entries()].map(([addr, err2]) => {
          * Zig-zag encodes this long bits
          */
         zzEncode() {
-          const mask = this.hi >> 31;
-          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask) >>> 0;
-          this.lo = (this.lo << 1 ^ mask) >>> 0;
+          const mask2 = this.hi >> 31;
+          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask2) >>> 0;
+          this.lo = (this.lo << 1 ^ mask2) >>> 0;
           return this;
         }
         /**
          * Zig-zag decodes this long bits
          */
         zzDecode() {
-          const mask = -(this.lo & 1);
-          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask) >>> 0;
-          this.hi = (this.hi >>> 1 ^ mask) >>> 0;
+          const mask2 = -(this.lo & 1);
+          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask2) >>> 0;
+          this.hi = (this.hi >>> 1 ^ mask2) >>> 0;
           return this;
         }
         /**
@@ -43635,18 +43635,18 @@ ${[...listenStats.errors.entries()].map(([addr, err2]) => {
          * Zig-zag encodes this long bits
          */
         zzEncode() {
-          const mask = this.hi >> 31;
-          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask) >>> 0;
-          this.lo = (this.lo << 1 ^ mask) >>> 0;
+          const mask2 = this.hi >> 31;
+          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask2) >>> 0;
+          this.lo = (this.lo << 1 ^ mask2) >>> 0;
           return this;
         }
         /**
          * Zig-zag decodes this long bits
          */
         zzDecode() {
-          const mask = -(this.lo & 1);
-          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask) >>> 0;
-          this.hi = (this.hi >>> 1 ^ mask) >>> 0;
+          const mask2 = -(this.lo & 1);
+          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask2) >>> 0;
+          this.hi = (this.hi >>> 1 ^ mask2) >>> 0;
           return this;
         }
         /**
@@ -45169,18 +45169,18 @@ ${[...listenStats.errors.entries()].map(([addr, err2]) => {
          * Zig-zag encodes this long bits
          */
         zzEncode() {
-          const mask = this.hi >> 31;
-          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask) >>> 0;
-          this.lo = (this.lo << 1 ^ mask) >>> 0;
+          const mask2 = this.hi >> 31;
+          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask2) >>> 0;
+          this.lo = (this.lo << 1 ^ mask2) >>> 0;
           return this;
         }
         /**
          * Zig-zag decodes this long bits
          */
         zzDecode() {
-          const mask = -(this.lo & 1);
-          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask) >>> 0;
-          this.hi = (this.hi >>> 1 ^ mask) >>> 0;
+          const mask2 = -(this.lo & 1);
+          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask2) >>> 0;
+          this.hi = (this.hi >>> 1 ^ mask2) >>> 0;
           return this;
         }
         /**
@@ -66360,8 +66360,8 @@ ${[...listenStats.errors.entries()].map(([addr, err2]) => {
           const view = new DataView(localKadId.buffer, localKadId.byteOffset, localKadId.byteLength);
           const localPrefix = view.getUint16(0, false);
           const toggledLocalPrefix = localPrefix ^ 32768 >> targetCommonPrefixLength;
-          const mask = 65535 << 16 - (targetCommonPrefixLength + 1);
-          const targetPrefix = toggledLocalPrefix & mask | randomPrefix & ~mask;
+          const mask2 = 65535 << 16 - (targetCommonPrefixLength + 1);
+          const targetPrefix = toggledLocalPrefix & mask2 | randomPrefix & ~mask2;
           const keyPrefix3 = generated_prefix_list_browser_default[targetPrefix];
           const keyBuffer = new ArrayBuffer(34);
           const keyView = new DataView(keyBuffer, 0, keyBuffer.byteLength);
@@ -67641,18 +67641,18 @@ ${[...listenStats.errors.entries()].map(([addr, err2]) => {
          * Zig-zag encodes this long bits
          */
         zzEncode() {
-          const mask = this.hi >> 31;
-          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask) >>> 0;
-          this.lo = (this.lo << 1 ^ mask) >>> 0;
+          const mask2 = this.hi >> 31;
+          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask2) >>> 0;
+          this.lo = (this.lo << 1 ^ mask2) >>> 0;
           return this;
         }
         /**
          * Zig-zag decodes this long bits
          */
         zzDecode() {
-          const mask = -(this.lo & 1);
-          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask) >>> 0;
-          this.hi = (this.hi >>> 1 ^ mask) >>> 0;
+          const mask2 = -(this.lo & 1);
+          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask2) >>> 0;
+          this.hi = (this.hi >>> 1 ^ mask2) >>> 0;
           return this;
         }
         /**
@@ -75209,18 +75209,18 @@ ${[...listenStats.errors.entries()].map(([addr, err2]) => {
          * Zig-zag encodes this long bits
          */
         zzEncode() {
-          const mask = this.hi >> 31;
-          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask) >>> 0;
-          this.lo = (this.lo << 1 ^ mask) >>> 0;
+          const mask2 = this.hi >> 31;
+          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask2) >>> 0;
+          this.lo = (this.lo << 1 ^ mask2) >>> 0;
           return this;
         }
         /**
          * Zig-zag decodes this long bits
          */
         zzDecode() {
-          const mask = -(this.lo & 1);
-          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask) >>> 0;
-          this.hi = (this.hi >>> 1 ^ mask) >>> 0;
+          const mask2 = -(this.lo & 1);
+          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask2) >>> 0;
+          this.hi = (this.hi >>> 1 ^ mask2) >>> 0;
           return this;
         }
         /**
@@ -81244,7 +81244,7 @@ ${[...listenStats.errors.entries()].map(([addr, err2]) => {
     let carry = 0;
     let pos = 0;
     const max = powers[from6];
-    const mask = powers[to] - 1;
+    const mask2 = powers[to] - 1;
     const res = [];
     for (const n of data) {
       anumber6(n);
@@ -81255,13 +81255,13 @@ ${[...listenStats.errors.entries()].map(([addr, err2]) => {
         throw new Error(`convertRadix2: carry overflow pos=${pos} from=${from6}`);
       pos += from6;
       for (; pos >= to; pos -= to)
-        res.push((carry >> pos - to & mask) >>> 0);
+        res.push((carry >> pos - to & mask2) >>> 0);
       const pow = powers[pos];
       if (pow === void 0)
         throw new Error("invalid carry");
       carry &= pow - 1;
     }
-    carry = carry << to - pos & mask;
+    carry = carry << to - pos & mask2;
     if (!padding2 && pos >= from6)
       throw new Error("Excess padding");
     if (!padding2 && carry > 0)
@@ -84769,13 +84769,13 @@ zoo`.split("\n");
     const windows = Math.ceil(scalarBits2 / W2) + 1;
     const windowSize = 2 ** (W2 - 1);
     const maxNumber = 2 ** W2;
-    const mask = bitMask2(W2);
+    const mask2 = bitMask2(W2);
     const shiftBy = BigInt(W2);
-    return { windows, windowSize, mask, maxNumber, shiftBy };
+    return { windows, windowSize, mask: mask2, maxNumber, shiftBy };
   }
   function calcOffsets2(n, window2, wOpts) {
-    const { windowSize, mask, maxNumber, shiftBy } = wOpts;
-    let wbits = Number(n & mask);
+    const { windowSize, mask: mask2, maxNumber, shiftBy } = wOpts;
+    let wbits = Number(n & mask2);
     let nextN = n >> shiftBy;
     if (wbits > windowSize) {
       wbits -= maxNumber;
@@ -87666,6 +87666,406 @@ ${r.steps.map((s3) => `${s3.ok ? "\u2713" : "\u2717"} ${s3.step}: ${s3.note}`).j
     }
   });
 
+  // src/agents/contacts/grant-payload.ts
+  function canonicalGrantPayload(g) {
+    return JSON.stringify({
+      grantId: g.grantId,
+      identityId: g.identityId,
+      ownerDid: g.ownerDid,
+      level: g.level,
+      channels: g.channels,
+      contactScope: g.contactScope,
+      taskScope: g.taskScope,
+      contentScope: g.contentScope,
+      replyWakeAllowed: g.replyWakeAllowed,
+      autoSend: g.autoSend,
+      sensitiveContentAllowed: g.sensitiveContentAllowed,
+      newRecipientAllowed: g.newRecipientAllowed,
+      grantedAt: g.grantedAt,
+      grantedBy: g.grantedBy,
+      grantedVia: g.grantedVia,
+      deviceIds: [...g.deviceIds].sort(),
+      status: g.status,
+      revokedAt: g.revokedAt || "",
+      grantVersion: g.grantVersion
+    });
+  }
+  function canonicalRevocationPayload(r) {
+    return JSON.stringify({ grantId: r.grantId, grantVersion: r.grantVersion, revokedAt: r.revokedAt, by: r.by });
+  }
+  function presetForChoice(choice) {
+    const base6 = { channels: "both", replyWakeAllowed: true, autoSend: true, newRecipientAllowed: false };
+    switch (choice) {
+      case "task_once":
+        return { ...base6, level: "task_once", contactScope: "verified_contacts", taskScope: "current_goal", contentScope: "normal", autoSend: false, sensitiveContentAllowed: false };
+      case "persistent":
+        return { ...base6, level: "persistent", contactScope: "verified_contacts", taskScope: "all_future_goals", contentScope: "normal", sensitiveContentAllowed: false };
+      case "full_contact_access":
+        return { ...base6, level: "full_contact_access", contactScope: "all_contacts", taskScope: "all_future_goals", contentScope: "sensitive", sensitiveContentAllowed: true };
+    }
+  }
+  var init_grant_payload = __esm({
+    "src/agents/contacts/grant-payload.ts"() {
+      "use strict";
+    }
+  });
+
+  // src/web/mobile-contacts.ts
+  var mobile_contacts_exports = {};
+  __export(mobile_contacts_exports, {
+    authorizeFromPhone: () => authorizeFromPhone,
+    bindFromPhone: () => bindFromPhone,
+    buildPhoneCard: () => buildPhoneCard,
+    decideApprovalFromPhone: () => decideApprovalFromPhone,
+    ed25519Available: () => ed25519Available,
+    flushQueuedGrants: () => flushQueuedGrants,
+    loadCapabilityCopy: () => loadCapabilityCopy,
+    loadFromDesktop: () => loadFromDesktop,
+    loadOrCreateDeviceKey: () => loadOrCreateDeviceKey,
+    pendingQueue: () => pendingQueue,
+    registerDeviceOnDesktop: () => registerDeviceOnDesktop,
+    revokeFromPhone: () => revokeFromPhone,
+    saveCapabilityCopy: () => saveCapabilityCopy,
+    sha256HexOf: () => sha256HexOf,
+    signGrantOnDevice: () => signGrantOnDevice,
+    signPayloadOnDevice: () => signPayloadOnDevice,
+    signPayloadWithMaterial: () => signPayloadWithMaterial,
+    signRevocationOnDevice: () => signRevocationOnDevice,
+    verifyFromPhone: () => verifyFromPhone
+  });
+  function ed25519Available(c) {
+    const cobj = cryptoOf(c);
+    if (!cobj?.subtle) return false;
+    try {
+      const alg = { name: "Ed25519" };
+      return typeof cobj.subtle.importKey === "function" && !!alg;
+    } catch {
+      return false;
+    }
+  }
+  function bytesOf(s2) {
+    const src4 = new TextEncoder().encode(s2);
+    const out = new Uint8Array(new ArrayBuffer(src4.byteLength));
+    out.set(src4);
+    return out;
+  }
+  function b64(buf) {
+    const arr = new Uint8Array(buf);
+    let out = "";
+    for (let i = 0; i < arr.length; i++) out += String.fromCharCode(arr[i]);
+    return btoa(out);
+  }
+  function pemFromSpki(spki) {
+    const b = b64(spki).replace(/(.{64})/g, "$1\n").trim();
+    return `-----BEGIN PUBLIC KEY-----
+${b}
+-----END PUBLIC KEY-----
+`;
+  }
+  async function sha256Hex(c, text) {
+    const d2 = await c.subtle.digest("SHA-256", bytesOf(text));
+    return [...new Uint8Array(d2)].map((x) => x.toString(16).padStart(2, "0")).join("");
+  }
+  async function loadOrCreateDeviceKey(storage2, c) {
+    const cobj = cryptoOf(c);
+    if (!cobj?.subtle) throw new Error("device_signing_unavailable: \u672C\u673A\u6CA1\u6709 WebCrypto");
+    const raw = storage2.getItem(K_DEVICE);
+    if (raw) {
+      try {
+        const parsed = JSON.parse(raw);
+        if (parsed?.privateKeyJwk && parsed?.publicKeyPem && parsed?.deviceId) return parsed;
+      } catch {
+      }
+    }
+    let pair;
+    try {
+      pair = await cobj.subtle.generateKey({ name: "Ed25519" }, true, ["sign", "verify"]);
+    } catch (err2) {
+      throw new Error(`device_signing_unavailable: ${String(err2?.message || err2)}`);
+    }
+    const publicKeyPem = pemFromSpki(await cobj.subtle.exportKey("spki", pair.publicKey));
+    const privateKeyJwk = await cobj.subtle.exportKey("jwk", pair.privateKey);
+    const deviceId = `dev-${(await sha256Hex(cobj, publicKeyPem)).slice(0, 12)}`;
+    const material = { deviceId, publicKeyPem, privateKeyJwk };
+    storage2.setItem(K_DEVICE, JSON.stringify(material));
+    return material;
+  }
+  async function signGrantOnDevice(grant, storage2, c) {
+    return signPayloadOnDevice(canonicalGrantPayload(grant), storage2, c);
+  }
+  async function signRevocationOnDevice(rev, storage2, c) {
+    return signPayloadOnDevice(canonicalRevocationPayload(rev), storage2, c);
+  }
+  async function signPayloadOnDevice(payload, storage2, c) {
+    const cobj = cryptoOf(c);
+    if (!cobj?.subtle) throw new Error("device_signing_unavailable: \u672C\u673A\u6CA1\u6709 WebCrypto");
+    const material = await loadOrCreateDeviceKey(storage2, cobj);
+    const key = await cobj.subtle.importKey("jwk", material.privateKeyJwk, { name: "Ed25519" }, false, ["sign"]);
+    const bytes = bytesOf(String(payload ?? ""));
+    const sig = await cobj.subtle.sign({ name: "Ed25519" }, key, bytes);
+    return { deviceId: material.deviceId, alg: "ed25519", payloadHash: await sha256Hex(cobj, String(payload ?? "")), sig: b64(sig) };
+  }
+  async function sha256HexOf(text, c) {
+    const cobj = cryptoOf(c);
+    if (!cobj?.subtle) throw new Error("device_signing_unavailable: \u672C\u673A\u6CA1\u6709 WebCrypto");
+    return sha256Hex(cobj, String(text ?? ""));
+  }
+  async function signPayloadWithMaterial(payload, material, c) {
+    const cobj = cryptoOf(c);
+    if (!cobj?.subtle) throw new Error("device_signing_unavailable: \u672C\u673A\u6CA1\u6709 WebCrypto");
+    const key = await cobj.subtle.importKey("jwk", material.privateKeyJwk, { name: "Ed25519" }, false, ["sign"]);
+    const sig = await cobj.subtle.sign({ name: "Ed25519" }, key, bytesOf(String(payload ?? "")));
+    return { deviceId: material.deviceId, alg: "ed25519", payloadHash: await sha256Hex(cobj, String(payload ?? "")), sig: b64(sig) };
+  }
+  async function post(base6, path, body, f) {
+    const res = await f(`${String(base6).replace(/\/+$/, "")}${path}`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body ?? {})
+    });
+    let json = null;
+    try {
+      json = await res.json();
+    } catch {
+    }
+    return { status: res.status, json };
+  }
+  async function get(base6, path, f) {
+    const res = await f(`${String(base6).replace(/\/+$/, "")}${path}`);
+    let json = null;
+    try {
+      json = await res.json();
+    } catch {
+    }
+    return { status: res.status, json };
+  }
+  async function registerDeviceOnDesktop(base6, storage2, opts = {}) {
+    const f = opts.fetchImpl || fetch;
+    const dev = await loadOrCreateDeviceKey(storage2, opts.cryptoObj);
+    const r = await post(base6, "/api/contacts/devices", { deviceId: dev.deviceId, publicKeyPem: dev.publicKeyPem, label: opts.label || "\u624B\u673A" }, f);
+    if (r.status !== 200 || !r.json?.ok) return { ok: false, error: `\u684C\u9762\u672A\u63A5\u53D7\u8BBE\u5907\u767B\u8BB0: ${r.json?.error || r.status}`, data: dev };
+    return { ok: true, data: dev };
+  }
+  function saveCapabilityCopy(storage2, items) {
+    const clean8 = (items || []).map((c) => ({
+      contactId: String(c.contactId || ""),
+      kind: c.kind,
+      displayValue: String(c.displayValue || ""),
+      verificationStatus: String(c.verificationStatus || ""),
+      capabilities: [...c.capabilities || []],
+      provider: c.provider ? String(c.provider) : void 0,
+      state: c.state ? String(c.state) : void 0
+    }));
+    storage2.setItem(K_CAPS, JSON.stringify(clean8));
+  }
+  function loadCapabilityCopy(storage2) {
+    try {
+      const v = JSON.parse(storage2.getItem(K_CAPS) || "[]");
+      return Array.isArray(v) ? v : [];
+    } catch {
+      return [];
+    }
+  }
+  function pendingQueue(storage2) {
+    try {
+      const v = JSON.parse(storage2.getItem(K_QUEUE) || "[]");
+      return Array.isArray(v) ? v : [];
+    } catch {
+      return [];
+    }
+  }
+  function setQueue(storage2, q) {
+    storage2.setItem(K_QUEUE, JSON.stringify(q.slice(-20)));
+  }
+  async function flushQueuedGrants(base6, storage2, opts = {}) {
+    const f = opts.fetchImpl || fetch;
+    const q = pendingQueue(storage2);
+    const keep = [];
+    const results = [];
+    let sent = 0, failed = 0;
+    for (const item of q) {
+      try {
+        const r = await post(base6, "/api/contacts/grants/sync", { grant: { ...item.grant, signature: item.signature } }, f);
+        if (r.status === 200 && r.json?.ok) {
+          sent++;
+          results.push({ grantId: item.grant.grantId, ok: true });
+          continue;
+        }
+        failed++;
+        keep.push(item);
+        results.push({ grantId: item.grant.grantId, ok: false, error: r.json?.code || r.status });
+      } catch {
+        failed++;
+        keep.push(item);
+        results.push({ grantId: item.grant.grantId, ok: false, error: "network" });
+      }
+    }
+    setQueue(storage2, keep);
+    return { sent, failed, results };
+  }
+  async function authorizeFromPhone(input) {
+    const c = cryptoOf(input.cryptoObj);
+    if (!ed25519Available(c || void 0)) {
+      return { ok: false, error: "device_signing_unavailable: \u672C\u673A WebView \u4E0D\u652F\u6301 Ed25519 \u8BBE\u5907\u7B7E\u540D \u2014\u2014 \u8BF7\u5728\u684C\u9762\u7AEF\u6388\u6743 (\u6216\u5347\u7EA7\u7CFB\u7EDF WebView)" };
+    }
+    const dev = await loadOrCreateDeviceKey(input.storage, c);
+    const preset = presetForChoice(input.choice);
+    const grant = {
+      grantId: `gr-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`,
+      identityId: input.identityId || `sid-phone-${dev.deviceId.slice(-6)}`,
+      ownerDid: input.ownerDid,
+      ...preset,
+      grantedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      grantedBy: input.grantedBy || "leo",
+      grantedVia: "mobile",
+      deviceIds: [dev.deviceId],
+      status: "active",
+      grantVersion: 1
+    };
+    const signature = await signGrantOnDevice(grant, input.storage, c);
+    const f = input.fetchImpl || fetch;
+    const reg = await registerDeviceOnDesktop(input.base, input.storage, { fetchImpl: f, cryptoObj: c }).catch(() => ({ ok: false }));
+    if (!reg.ok) {
+      const q2 = pendingQueue(input.storage);
+      q2.push({ grant, signature, queuedAt: (/* @__PURE__ */ new Date()).toISOString() });
+      setQueue(input.storage, q2);
+      return {
+        ok: false,
+        queued: true,
+        error: `\u684C\u9762\u6682\u4E0D\u53EF\u8FBE \u2192 \u6388\u6743\u5DF2\u5B58\u5728\u624B\u673A, \u5F85\u684C\u9762\u5728\u7EBF\u65F6\u81EA\u52A8\u540C\u6B65 (${reg.error || "offline"})`,
+        data: { grantId: grant.grantId, level: grant.level, signature },
+        note: "\u684C\u9762\u4E0D\u5728\u7EBF\u65F6\u4E0D\u5047\u88C5\u5DF2\u751F\u6548: \u6388\u6743\u5728\u672C\u5730\u961F\u5217\u91CC, \u684C\u9762\u4E00\u4E0A\u7EBF\u5C31\u8865\u540C\u6B65"
+      };
+    }
+    const r = await post(input.base, "/api/contacts/grants/sync", { grant: { ...grant, signature } }, f);
+    if (r.status === 200 && r.json?.ok) {
+      return { ok: true, data: { grantId: grant.grantId, level: grant.level, signature }, note: "\u684C\u9762\u5DF2\u9A8C\u7B7E\u63A5\u53D7" };
+    }
+    const q = pendingQueue(input.storage);
+    q.push({ grant, signature, queuedAt: (/* @__PURE__ */ new Date()).toISOString() });
+    setQueue(input.storage, q);
+    return {
+      ok: false,
+      queued: true,
+      error: `\u684C\u9762\u62D2\u7EDD/\u672A\u63A5\u53D7: ${r.json?.code || r.json?.reason || r.status}`,
+      data: { grantId: grant.grantId, level: grant.level, signature },
+      note: "\u5DF2\u4FDD\u5B58\u5728\u624B\u673A\u672C\u5730\u961F\u5217 (\u4E0D\u4F1A\u56E0\u4E3A\u5931\u8D25\u5C31\u5F53\u6210\u5DF2\u6388\u6743)"
+    };
+  }
+  async function revokeFromPhone(opts) {
+    const c = cryptoOf(opts.cryptoObj);
+    if (!ed25519Available(c || void 0)) return { ok: false, error: "device_signing_unavailable: \u672C\u673A\u4E0D\u652F\u6301\u8BBE\u5907\u7B7E\u540D, \u64A4\u9500\u9700\u5728\u684C\u9762\u7AEF\u8FDB\u884C" };
+    const revokedAt = (/* @__PURE__ */ new Date()).toISOString();
+    const payload = { grantId: opts.grantId, grantVersion: opts.version || 1, revokedAt, by: "mobile" };
+    const signature = await signRevocationOnDevice(payload, opts.storage, c);
+    const f = opts.fetchImpl || fetch;
+    const r = await post(opts.base, "/api/contacts/grants/revoke-sync", { grantId: opts.grantId, by: "mobile", reason: opts.reason, version: payload.grantVersion, revokedAt, signature }, f);
+    if (r.status === 200 && r.json?.ok) return { ok: true, data: { grantId: opts.grantId }, note: "\u684C\u9762\u5DF2\u9A8C\u7B7E\u5E76\u7ACB\u5373\u5931\u6548" };
+    return { ok: false, error: `\u64A4\u9500\u672A\u9001\u8FBE: ${r.json?.code || r.json?.error || r.status}`, note: "\u684C\u9762\u4E0D\u5728\u7EBF\u65F6\u64A4\u9500**\u4E0D\u4F1A**\u88AB\u5F53\u4F5C\u5DF2\u5B8C\u6210 \u2014\u2014 \u8BF7\u5728\u684C\u9762\u5728\u7EBF\u540E\u91CD\u8BD5 (\u6216\u684C\u9762\u7AEF\u64A4\u9500)" };
+  }
+  async function loadFromDesktop(base6, storage2, opts = {}) {
+    const f = opts.fetchImpl || fetch;
+    if (!base6) {
+      const caps = loadCapabilityCopy(storage2);
+      return {
+        ok: false,
+        error: "desktop_offline",
+        data: { contacts: caps, grants: [], effective: "\u684C\u9762\u4E0D\u5728\u7EBF (\u663E\u793A\u624B\u673A\u672C\u5730\u526F\u672C)", approvals: [], waiting: [] },
+        note: "\u4EE5\u4E0B\u662F\u4F60\u624B\u673A\u4E0A\u4FDD\u5B58\u7684\u80FD\u529B\u526F\u672C (\u4E0D\u662F\u684C\u9762\u5B9E\u65F6\u72B6\u6001)"
+      };
+    }
+    try {
+      const a = await get(base6, "/api/contacts", f);
+      const b = await get(base6, "/api/contacts/grants", f);
+      if (a.status !== 200 && b.status !== 200) return { ok: false, error: `desktop_http_${a.status || b.status}` };
+      const view = {
+        contacts: a.json?.contacts || [],
+        grants: b.json?.grants || [],
+        effective: b.json?.effective || "",
+        approvals: a.json?.approvals || [],
+        waiting: a.json?.waiting || []
+      };
+      saveCapabilityCopy(storage2, (view.contacts || []).filter((c) => c.capabilities?.includes("send")).map((c) => ({
+        contactId: c.contactId,
+        kind: c.kind,
+        displayValue: c.displayValue,
+        verificationStatus: c.status,
+        capabilities: c.capabilities,
+        provider: c.provider,
+        state: c.status
+      })));
+      return { ok: true, data: view };
+    } catch (err2) {
+      const caps = loadCapabilityCopy(storage2);
+      return {
+        ok: false,
+        error: "desktop_offline",
+        data: { contacts: caps, grants: [], effective: "\u684C\u9762\u4E0D\u5728\u7EBF (\u663E\u793A\u624B\u673A\u672C\u5730\u526F\u672C)", approvals: [], waiting: [] },
+        note: `\u8FDE\u4E0D\u4E0A\u684C\u9762 (${String(err2?.message || err2).slice(0, 60)}) \u2014\u2014 \u663E\u793A\u672C\u5730\u526F\u672C`
+      };
+    }
+  }
+  async function bindFromPhone(base6, opts, storage2, f) {
+    const impl = f || fetch;
+    if (!base6) return { ok: false, error: "desktop_offline: \u7ED1\u5B9A\u9700\u8981\u684C\u9762\u7AEF\u5728\u7EBF (\u684C\u9762\u8D1F\u8D23\u843D\u76D8\u4E0E\u9A8C\u8BC1\u7801\u901A\u9053)" };
+    const r = await post(base6, "/api/contacts/bind", { kind: opts.kind, value: opts.value, region: opts.region }, impl);
+    if (r.status === 200 && r.json?.ok) return { ok: true, data: r.json };
+    return { ok: false, error: r.json?.error || `HTTP ${r.status}` };
+  }
+  async function verifyFromPhone(base6, opts, storage2, f) {
+    const impl = f || fetch;
+    if (!base6) return { ok: false, error: "desktop_offline: \u9A8C\u8BC1\u9700\u8981\u684C\u9762\u7AEF\u5728\u7EBF" };
+    const r = await post(base6, "/api/contacts/verify", { contactId: opts.contactId, challengeId: opts.challengeId, code: opts.code }, impl);
+    if (r.status === 200 && r.json?.ok) return { ok: true, data: r.json };
+    return { ok: false, error: r.json?.error || `HTTP ${r.status}` };
+  }
+  async function decideApprovalFromPhone(base6, opts, f) {
+    const impl = f || fetch;
+    if (!base6) return { ok: false, error: "desktop_offline: \u6279\u51C6\u9700\u8981\u684C\u9762\u7AEF\u5728\u7EBF (\u624B\u673A\u4E0D\u5728\u7EBF\u65F6\u4E0D\u4F1A\u5047\u88C5\u5DF2\u6279\u51C6)" };
+    const r = await post(base6, `/api/contacts/approvals/${encodeURIComponent(opts.consentId)}/${opts.action}`, { by: "leo", via: "mobile", body: opts.body, reason: opts.reason }, impl);
+    if (r.status === 200 && r.json?.ok) return { ok: true, data: r.json };
+    return { ok: false, error: r.json?.error || `HTTP ${r.status}` };
+  }
+  function buildPhoneCard(view, opts) {
+    return {
+      title: "\u8BA9 Bolloon \u4EE3\u8868\u4F60\u8054\u7CFB\u5916\u90E8\u7684\u4EBA",
+      effective: view?.effective || opts.offline || "\u672A\u77E5",
+      contacts: (view?.contacts || []).map((c) => ({
+        displayValue: c.displayValue || "",
+        kind: c.kind || "",
+        state: c.status || c.verificationStatus || "",
+        label: c.capabilities?.includes("send") ? "\u53EF\u8054\u7CFB" : "\u4E0D\u53EF\u8054\u7CFB"
+      })),
+      approvals: (view?.approvals || []).map((a) => ({
+        consentId: a.consentId,
+        contactName: a.contactName,
+        channel: a.channel,
+        subject: a.subject,
+        bodyPreview: a.bodyPreview || "",
+        reason: a.reason,
+        reallySent: !!a.reallySent
+      })),
+      choices: [
+        { id: "task_once", label: "\u4EC5\u672C\u6B21\u4EFB\u52A1" },
+        { id: "persistent", label: "\u957F\u671F\u4F7F\u7528 (\u63A8\u8350)" },
+        { id: "full_contact_access", label: "\u5B8C\u5168\u6388\u6743\u8054\u7CFB\u65B9\u5F0F\u80FD\u529B" }
+      ],
+      willNotGet: ["\u8BFB\u53D6\u5168\u90E8\u90AE\u7BB1", "\u8BFB\u53D6\u901A\u8BAF\u5F55", "\u7FA4\u53D1\u6D88\u606F", "\u81EA\u52A8\u652F\u4ED8/\u8F6C\u8D26", "\u4EE3\u8868\u4F60\u7B7E\u7F72\u5408\u540C", "\u62FF\u5230\u624B\u673A\u53F7/\u90AE\u7BB1\u660E\u6587"],
+      deviceSigning: opts.deviceSigning
+    };
+  }
+  var K_DEVICE, K_QUEUE, K_CAPS, cryptoOf;
+  var init_mobile_contacts = __esm({
+    "src/web/mobile-contacts.ts"() {
+      "use strict";
+      init_grant_payload();
+      K_DEVICE = "bolloon.contacts.device.v1";
+      K_QUEUE = "bolloon.contacts.queue.v1";
+      K_CAPS = "bolloon.contacts.capabilities.v1";
+      cryptoOf = (c) => c || globalThis.crypto || null;
+    }
+  });
+
   // src/web/mobile-social.ts
   var mobile_social_exports = {};
   __export(mobile_social_exports, {
@@ -90103,13 +90503,13 @@ ${r.steps.map((s3) => `${s3.ok ? "\u2713" : "\u2717"} ${s3.step}: ${s3.note}`).j
     const windows = Math.ceil(scalarBits2 / W2) + 1;
     const windowSize = 2 ** (W2 - 1);
     const maxNumber = 2 ** W2;
-    const mask = bitMask3(W2);
+    const mask2 = bitMask3(W2);
     const shiftBy = BigInt(W2);
-    return { windows, windowSize, mask, maxNumber, shiftBy };
+    return { windows, windowSize, mask: mask2, maxNumber, shiftBy };
   }
   function calcOffsets3(n, window2, wOpts) {
-    const { windowSize, mask, maxNumber, shiftBy } = wOpts;
-    let wbits = Number(n & mask);
+    const { windowSize, mask: mask2, maxNumber, shiftBy } = wOpts;
+    let wbits = Number(n & mask2);
     let nextN = n >> shiftBy;
     if (wbits > windowSize) {
       wbits -= maxNumber;
@@ -95154,10 +95554,10 @@ ${r.steps.map((s3) => `${s3.ok ? "\u2713" : "\u2717"} ${s3.step}: ${s3.note}`).j
         let f = G;
         const pow_2_w = 2 ** W;
         const maxNum = pow_2_w;
-        const mask = big(pow_2_w - 1);
+        const mask2 = big(pow_2_w - 1);
         const shiftBy = big(W);
         for (let w2 = 0; w2 < pwindows; w2++) {
-          let wbits = Number(n & mask);
+          let wbits = Number(n & mask2);
           n >>= shiftBy;
           if (wbits > pwindowSize) {
             wbits -= maxNum;
@@ -96895,11 +97295,11 @@ ${r.steps.map((s3) => `${s3.ok ? "\u2713" : "\u2717"} ${s3.step}: ${s3.note}`).j
   function toToken6(data, pos, prefix, length20, options2) {
     const totLength = prefix + length20;
     assertEnoughData2(data, pos, totLength);
-    const tok = new Token2(Type2.string, toStr2(data, pos + prefix, pos + totLength), totLength);
+    const tok2 = new Token2(Type2.string, toStr2(data, pos + prefix, pos + totLength), totLength);
     if (options2.retainStringBytes === true) {
-      tok.byteValue = data.slice(pos + prefix, pos + totLength);
+      tok2.byteValue = data.slice(pos + prefix, pos + totLength);
     }
-    return tok;
+    return tok2;
   }
   function decodeStringCompact2(data, pos, minor, options2) {
     return toToken6(data, pos, 1, minor, options2);
@@ -98382,7 +98782,7 @@ ${r.steps.map((s3) => `${s3.ok ? "\u2713" : "\u2717"} ${s3.step}: ${s3.note}`).j
   }
   function encode15(data, alphabet4, bitsPerChar) {
     const pad2 = alphabet4[alphabet4.length - 1] === "=";
-    const mask = (1 << bitsPerChar) - 1;
+    const mask2 = (1 << bitsPerChar) - 1;
     let out = "";
     let bits = 0;
     let buffer6 = 0;
@@ -98391,11 +98791,11 @@ ${r.steps.map((s3) => `${s3.ok ? "\u2713" : "\u2717"} ${s3.step}: ${s3.note}`).j
       bits += 8;
       while (bits > bitsPerChar) {
         bits -= bitsPerChar;
-        out += alphabet4[mask & buffer6 >> bits];
+        out += alphabet4[mask2 & buffer6 >> bits];
       }
     }
     if (bits !== 0) {
-      out += alphabet4[mask & buffer6 << bitsPerChar - bits];
+      out += alphabet4[mask2 & buffer6 << bitsPerChar - bits];
     }
     if (pad2) {
       while ((out.length * bitsPerChar & 7) !== 0) {
@@ -99216,7 +99616,7 @@ ${r.steps.map((s3) => `${s3.ok ? "\u2713" : "\u2717"} ${s3.step}: ${s3.note}`).j
     computeCid: () => computeCid,
     createIpfsClient: () => createIpfsClient,
     createMemoryStorage: () => createMemoryStorage,
-    defaultStorage: () => defaultStorage2,
+    defaultStorage: () => defaultStorage3,
     getIpfsConfig: () => getIpfsConfig,
     ipfsCacheGet: () => ipfsCacheGet,
     ipfsCacheSet: () => ipfsCacheSet,
@@ -99247,7 +99647,7 @@ ${r.steps.map((s3) => `${s3.ok ? "\u2713" : "\u2717"} ${s3.step}: ${s3.note}`).j
       }
     };
   }
-  function defaultStorage2() {
+  function defaultStorage3() {
     try {
       if (typeof localStorage !== "undefined" && localStorage) {
         const probe = "__bolloon_ipfs_probe__";
@@ -99317,7 +99717,7 @@ ${r.steps.map((s3) => `${s3.ok ? "\u2713" : "\u2717"} ${s3.step}: ${s3.note}`).j
       }
     }
   }
-  function getIpfsConfig(storage2 = defaultStorage2()) {
+  function getIpfsConfig(storage2 = defaultStorage3()) {
     const base6 = { mode: "public", gateways: [...DEFAULT_GATEWAYS] };
     try {
       const raw = storage2.getItem(IPFS_CONFIG_KEY);
@@ -99336,7 +99736,7 @@ ${r.steps.map((s3) => `${s3.ok ? "\u2713" : "\u2717"} ${s3.step}: ${s3.note}`).j
       return base6;
     }
   }
-  function setIpfsConfig(cfg, storage2 = defaultStorage2()) {
+  function setIpfsConfig(cfg, storage2 = defaultStorage3()) {
     try {
       if (cfg.mode !== void 0 && !VALID_MODES.includes(cfg.mode)) {
         return { ok: false, error: `\u975E\u6CD5 mode: ${String(cfg.mode)} (\u5E94\u4E3A public|remote|pinata)` };
@@ -99384,7 +99784,7 @@ ${r.steps.map((s3) => `${s3.ok ? "\u2713" : "\u2717"} ${s3.step}: ${s3.note}`).j
     }
     return kept;
   }
-  function ipfsCacheGet(cid, storage2 = defaultStorage2()) {
+  function ipfsCacheGet(cid, storage2 = defaultStorage3()) {
     try {
       const key = normalizeCid(cid);
       if (!key) return null;
@@ -99404,7 +99804,7 @@ ${r.steps.map((s3) => `${s3.ok ? "\u2713" : "\u2717"} ${s3.step}: ${s3.note}`).j
       return null;
     }
   }
-  function ipfsCacheSet(cid, text, storage2 = defaultStorage2()) {
+  function ipfsCacheSet(cid, text, storage2 = defaultStorage3()) {
     try {
       const key = normalizeCid(cid);
       if (!key) return { ok: false, error: "cid \u4E0D\u80FD\u4E3A\u7A7A" };
@@ -99488,7 +99888,7 @@ ${r.steps.map((s3) => `${s3.ok ? "\u2713" : "\u2717"} ${s3.step}: ${s3.note}`).j
   async function ipfsFetch(cid, opts = {}) {
     const key = normalizeCid(cid);
     if (!key) return { ok: false, error: "cid \u4E0D\u80FD\u4E3A\u7A7A" };
-    const storage2 = opts.storage ?? defaultStorage2();
+    const storage2 = opts.storage ?? defaultStorage3();
     const useCache = opts.useCache !== false;
     if (useCache) {
       const cached = ipfsCacheGet(key, storage2);
@@ -100794,8 +101194,8 @@ ${r.steps.map((s3) => `${s3.ok ? "\u2713" : "\u2717"} ${s3.step}: ${s3.note}`).j
   }
   function encodeInteger2(value2) {
     const contents = new Uint8ArrayList10();
-    const mask = 128;
-    const positive2 = (value2.subarray()[0] & mask) === mask;
+    const mask2 = 128;
+    const positive2 = (value2.subarray()[0] & mask2) === mask2;
     if (positive2) {
       contents.append(Uint8Array.from([0]));
     }
@@ -100952,18 +101352,18 @@ ${r.steps.map((s3) => `${s3.ok ? "\u2713" : "\u2717"} ${s3.step}: ${s3.note}`).j
          * Zig-zag encodes this long bits
          */
         zzEncode() {
-          const mask = this.hi >> 31;
-          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask) >>> 0;
-          this.lo = (this.lo << 1 ^ mask) >>> 0;
+          const mask2 = this.hi >> 31;
+          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask2) >>> 0;
+          this.lo = (this.lo << 1 ^ mask2) >>> 0;
           return this;
         }
         /**
          * Zig-zag decodes this long bits
          */
         zzDecode() {
-          const mask = -(this.lo & 1);
-          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask) >>> 0;
-          this.hi = (this.hi >>> 1 ^ mask) >>> 0;
+          const mask2 = -(this.lo & 1);
+          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask2) >>> 0;
+          this.hi = (this.hi >>> 1 ^ mask2) >>> 0;
           return this;
         }
         /**
@@ -103864,18 +104264,18 @@ ${r.steps.map((s3) => `${s3.ok ? "\u2713" : "\u2717"} ${s3.step}: ${s3.note}`).j
          * Zig-zag encodes this long bits
          */
         zzEncode() {
-          const mask = this.hi >> 31;
-          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask) >>> 0;
-          this.lo = (this.lo << 1 ^ mask) >>> 0;
+          const mask2 = this.hi >> 31;
+          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask2) >>> 0;
+          this.lo = (this.lo << 1 ^ mask2) >>> 0;
           return this;
         }
         /**
          * Zig-zag decodes this long bits
          */
         zzDecode() {
-          const mask = -(this.lo & 1);
-          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask) >>> 0;
-          this.hi = (this.hi >>> 1 ^ mask) >>> 0;
+          const mask2 = -(this.lo & 1);
+          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask2) >>> 0;
+          this.hi = (this.hi >>> 1 ^ mask2) >>> 0;
           return this;
         }
         /**
@@ -114756,18 +115156,18 @@ ${values.join("\n")}` : `${blockName} :`;
          * Zig-zag encodes this long bits
          */
         zzEncode() {
-          const mask = this.hi >> 31;
-          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask) >>> 0;
-          this.lo = (this.lo << 1 ^ mask) >>> 0;
+          const mask2 = this.hi >> 31;
+          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask2) >>> 0;
+          this.lo = (this.lo << 1 ^ mask2) >>> 0;
           return this;
         }
         /**
          * Zig-zag decodes this long bits
          */
         zzDecode() {
-          const mask = -(this.lo & 1);
-          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask) >>> 0;
-          this.hi = (this.hi >>> 1 ^ mask) >>> 0;
+          const mask2 = -(this.lo & 1);
+          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask2) >>> 0;
+          this.hi = (this.hi >>> 1 ^ mask2) >>> 0;
           return this;
         }
         /**
@@ -117096,18 +117496,18 @@ ${values.join("\n")}` : `${blockName} :`;
          * Zig-zag encodes this long bits
          */
         zzEncode() {
-          const mask = this.hi >> 31;
-          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask) >>> 0;
-          this.lo = (this.lo << 1 ^ mask) >>> 0;
+          const mask2 = this.hi >> 31;
+          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask2) >>> 0;
+          this.lo = (this.lo << 1 ^ mask2) >>> 0;
           return this;
         }
         /**
          * Zig-zag decodes this long bits
          */
         zzDecode() {
-          const mask = -(this.lo & 1);
-          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask) >>> 0;
-          this.hi = (this.hi >>> 1 ^ mask) >>> 0;
+          const mask2 = -(this.lo & 1);
+          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask2) >>> 0;
+          this.hi = (this.hi >>> 1 ^ mask2) >>> 0;
           return this;
         }
         /**
@@ -129350,12 +129750,12 @@ ${values.join("\n")}` : `${blockName} :`;
         type: MESSAGE_TYPES[opcode]
       };
     }
-    let mask;
+    let mask2;
     if (isMasked) {
       if (buf.byteLength < offset + 4) {
         return;
       }
-      mask = buf.subarray(offset, offset + 4);
+      mask2 = buf.subarray(offset, offset + 4);
       offset += 4;
     }
     if (buf.byteLength < offset + length20) {
@@ -129363,8 +129763,8 @@ ${values.join("\n")}` : `${blockName} :`;
     }
     let data = buf.subarray(offset, offset + length20);
     offset += length20;
-    if (mask != null) {
-      data = applyMask(data, mask);
+    if (mask2 != null) {
+      data = applyMask(data, mask2);
     }
     buf.consume(offset);
     return {
@@ -129372,12 +129772,12 @@ ${values.join("\n")}` : `${blockName} :`;
       data
     };
   }
-  function applyMask(data, mask) {
+  function applyMask(data, mask2) {
     let m2 = 0;
     for (let i = 0; i < data.byteLength; i++) {
-      data[i] = data[i] ^ mask[m2];
+      data[i] = data[i] ^ mask2[m2];
       m2++;
-      if (m2 === mask.byteLength) {
+      if (m2 === mask2.byteLength) {
         m2 = 0;
       }
     }
@@ -131917,18 +132317,18 @@ ${values.join("\n")}` : `${blockName} :`;
          * Zig-zag encodes this long bits
          */
         zzEncode() {
-          const mask = this.hi >> 31;
-          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask) >>> 0;
-          this.lo = (this.lo << 1 ^ mask) >>> 0;
+          const mask2 = this.hi >> 31;
+          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask2) >>> 0;
+          this.lo = (this.lo << 1 ^ mask2) >>> 0;
           return this;
         }
         /**
          * Zig-zag decodes this long bits
          */
         zzDecode() {
-          const mask = -(this.lo & 1);
-          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask) >>> 0;
-          this.hi = (this.hi >>> 1 ^ mask) >>> 0;
+          const mask2 = -(this.lo & 1);
+          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask2) >>> 0;
+          this.hi = (this.hi >>> 1 ^ mask2) >>> 0;
           return this;
         }
         /**
@@ -135418,12 +135818,12 @@ ${values.join("\n")}` : `${blockName} :`;
             g[i] &= 8191;
           }
           g[9] -= 1 << 13;
-          let mask = (c ^ 1) - 1;
+          let mask2 = (c ^ 1) - 1;
           for (let i = 0; i < 10; i++)
-            g[i] &= mask;
-          mask = ~mask;
+            g[i] &= mask2;
+          mask2 = ~mask2;
           for (let i = 0; i < 10; i++)
-            h3[i] = h3[i] & mask | g[i];
+            h3[i] = h3[i] & mask2 | g[i];
           h3[0] = (h3[0] | h3[1] << 13) & 65535;
           h3[1] = (h3[1] >>> 3 | h3[2] << 10) & 65535;
           h3[2] = (h3[2] >>> 6 | h3[3] << 7) & 65535;
@@ -136870,18 +137270,18 @@ ${values.join("\n")}` : `${blockName} :`;
          * Zig-zag encodes this long bits
          */
         zzEncode() {
-          const mask = this.hi >> 31;
-          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask) >>> 0;
-          this.lo = (this.lo << 1 ^ mask) >>> 0;
+          const mask2 = this.hi >> 31;
+          this.hi = ((this.hi << 1 | this.lo >>> 31) ^ mask2) >>> 0;
+          this.lo = (this.lo << 1 ^ mask2) >>> 0;
           return this;
         }
         /**
          * Zig-zag decodes this long bits
          */
         zzDecode() {
-          const mask = -(this.lo & 1);
-          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask) >>> 0;
-          this.hi = (this.hi >>> 1 ^ mask) >>> 0;
+          const mask2 = -(this.lo & 1);
+          this.lo = ((this.lo >>> 1 | this.hi << 31) ^ mask2) >>> 0;
+          this.hi = (this.hi >>> 1 ^ mask2) >>> 0;
           return this;
         }
         /**
@@ -139954,11 +140354,11 @@ a=end-of-candidates
   function toToken10(data, pos, prefix, length20, options2) {
     const totLength = prefix + length20;
     assertEnoughData3(data, pos, totLength);
-    const tok = new Token3(Type3.string, toStr3(data, pos + prefix, pos + totLength), totLength);
+    const tok2 = new Token3(Type3.string, toStr3(data, pos + prefix, pos + totLength), totLength);
     if (options2.retainStringBytes === true) {
-      tok.byteValue = data.slice(pos + prefix, pos + totLength);
+      tok2.byteValue = data.slice(pos + prefix, pos + totLength);
     }
-    return tok;
+    return tok2;
   }
   function decodeStringCompact3(data, pos, minor, options2) {
     return toToken10(data, pos, 1, minor, options2);
@@ -142177,11 +142577,11 @@ a=end-of-candidates
   function toToken14(data, pos, prefix, length20, options2) {
     const totLength = prefix + length20;
     assertEnoughData4(data, pos, totLength);
-    const tok = new Token4(Type4.string, toStr4(data, pos + prefix, pos + totLength), totLength);
+    const tok2 = new Token4(Type4.string, toStr4(data, pos + prefix, pos + totLength), totLength);
     if (options2.retainStringBytes === true) {
-      tok.byteValue = data.slice(pos + prefix, pos + totLength);
+      tok2.byteValue = data.slice(pos + prefix, pos + totLength);
     }
-    return tok;
+    return tok2;
   }
   function decodeStringCompact4(data, pos, minor, options2) {
     return toToken14(data, pos, 1, minor, options2);
@@ -148151,11 +148551,11 @@ ${indent}[Error list was empty]`;
   function toToken18(data, pos, prefix, length20, options2) {
     const totLength = prefix + length20;
     assertEnoughData5(data, pos, totLength);
-    const tok = new Token5(Type5.string, toStr5(data, pos + prefix, pos + totLength), totLength);
+    const tok2 = new Token5(Type5.string, toStr5(data, pos + prefix, pos + totLength), totLength);
     if (options2.retainStringBytes === true) {
-      tok.byteValue = data.slice(pos + prefix, pos + totLength);
+      tok2.byteValue = data.slice(pos + prefix, pos + totLength);
     }
-    return tok;
+    return tok2;
   }
   function decodeStringCompact5(data, pos, minor, options2) {
     return toToken18(data, pos, 1, minor, options2);
@@ -150573,14 +150973,14 @@ ${error.stack}` : head;
       return out;
     }
   }
-  function heliaEnabled(storage2 = defaultStorage2()) {
+  function heliaEnabled(storage2 = defaultStorage3()) {
     try {
       return storage2.getItem(HELIA_ENABLED_KEY) === "1";
     } catch {
       return false;
     }
   }
-  function setHeliaEnabled(enabled, storage2 = defaultStorage2()) {
+  function setHeliaEnabled(enabled, storage2 = defaultStorage3()) {
     try {
       storage2.setItem(HELIA_ENABLED_KEY, enabled ? "1" : "0");
       return { ok: true, enabled: !!enabled };
@@ -150926,8 +151326,8 @@ ${error.stack}` : head;
         N3: 40,
         N4: 10
       };
-      exports.isValid = function isValid2(mask) {
-        return mask != null && mask !== "" && !isNaN(mask) && mask >= 0 && mask <= 7;
+      exports.isValid = function isValid2(mask2) {
+        return mask2 != null && mask2 !== "" && !isNaN(mask2) && mask2 >= 0 && mask2 <= 7;
       };
       exports.from = function from6(value2) {
         return exports.isValid(value2) ? parseInt(value2, 10) : void 0;
@@ -151731,8 +152131,8 @@ ${error.stack}` : head;
       var G15 = 1 << 10 | 1 << 8 | 1 << 5 | 1 << 4 | 1 << 2 | 1 << 1 | 1 << 0;
       var G15_MASK = 1 << 14 | 1 << 12 | 1 << 10 | 1 << 4 | 1 << 1;
       var G15_BCH = Utils.getBCHDigit(G15);
-      exports.getEncodedBits = function getEncodedBits(errorCorrectionLevel, mask) {
-        const data = errorCorrectionLevel.bit << 3 | mask;
+      exports.getEncodedBits = function getEncodedBits(errorCorrectionLevel, mask2) {
+        const data = errorCorrectionLevel.bit << 3 | mask2;
         let d2 = data << 10;
         while (Utils.getBCHDigit(d2) - G15_BCH >= 0) {
           d2 ^= G15 << Utils.getBCHDigit(d2) - G15_BCH;
@@ -152459,16 +152859,16 @@ ${error.stack}` : head;
         }
         let errorCorrectionLevel = ECLevel.M;
         let version4;
-        let mask;
+        let mask2;
         if (typeof options2 !== "undefined") {
           errorCorrectionLevel = ECLevel.from(options2.errorCorrectionLevel, ECLevel.M);
           version4 = Version.from(options2.version);
-          mask = MaskPattern.from(options2.maskPattern);
+          mask2 = MaskPattern.from(options2.maskPattern);
           if (options2.toSJISFunc) {
             Utils.setToSJISFunction(options2.toSJISFunc);
           }
         }
-        return createSymbol(data, version4, errorCorrectionLevel, mask);
+        return createSymbol(data, version4, errorCorrectionLevel, mask2);
       };
     }
   });
@@ -153787,8 +154187,8 @@ ${error.stack}` : head;
                       var bitsLeft = 8 - this.bitOffset;
                       var toRead = numBits < bitsLeft ? numBits : bitsLeft;
                       var bitsToNotRead = bitsLeft - toRead;
-                      var mask = 255 >> 8 - toRead << bitsToNotRead;
-                      result = (this.bytes[this.byteOffset] & mask) >> bitsToNotRead;
+                      var mask2 = 255 >> 8 - toRead << bitsToNotRead;
+                      result = (this.bytes[this.byteOffset] & mask2) >> bitsToNotRead;
                       numBits -= toRead;
                       this.bitOffset += toRead;
                       if (this.bitOffset === 8) {
@@ -153804,8 +154204,8 @@ ${error.stack}` : head;
                       }
                       if (numBits > 0) {
                         var bitsToNotRead = 8 - numBits;
-                        var mask = 255 >> bitsToNotRead << bitsToNotRead;
-                        result = result << numBits | (this.bytes[this.byteOffset] & mask) >> bitsToNotRead;
+                        var mask2 = 255 >> bitsToNotRead << bitsToNotRead;
+                        result = result << numBits | (this.bytes[this.byteOffset] & mask2) >> bitsToNotRead;
                         this.bitOffset += numBits;
                       }
                     }
@@ -162923,133 +163323,336 @@ ${error.stack}` : head;
     return result;
   }
 
-  // src/agents/contacts/grant-payload.ts
-  function canonicalGrantPayload(g) {
+  // src/web/mobile-core.ts
+  init_mobile_contacts();
+
+  // src/agents/mobile-task-actions.ts
+  var MOBILE_TASK_ACTION_KINDS = [
+    "group_join",
+    // 入群 (加入一个 OrbitDB 群 store)
+    "group_leave",
+    // 退群
+    "group_create",
+    // 建群 (会自动入群)
+    "announce_publish",
+    // 发布任务公告 (落盘公告 + 向注册表公告 + 记脉冲)
+    "announce_to_group",
+    // 把板上的公告推进群里 (CLI: bolloon task announce)
+    "trail_post"
+    // 过程留痕: 接单/交付/初筛/终审 (CLI: bolloon task post)
+  ];
+  var TASK_ACTION_TTL_MS = 10 * 6e4;
+  var TASK_ACTION_DEFAULT_TTL_MS = 5 * 6e4;
+  var TASK_ACTION_CLOCK_SKEW_MS = 2 * 6e4;
+  function tok(v) {
+    if (v === null || v === void 0) return "-";
+    const s2 = String(v);
+    if (!s2) return "-";
+    return s2.replace(/\r?\n/g, "\\n");
+  }
+  function taskActionContentText(req) {
+    const kind = String(req?.kind ?? "");
+    const base6 = [
+      `kind=${tok(kind)}`,
+      `group=${tok(req?.groupRef)}`,
+      `ann=${tok(req?.announcementId)}`
+    ];
+    if (kind === "announce_publish") {
+      base6.push(`cap=${tok(req?.capability)}`);
+      base6.push(`budget=${tok(req?.budgetHuman)}${req?.currency ? `@${tok(req.currency)}` : ""}`);
+      base6.push(`deadline=${tok(req?.deadline)}`);
+      base6.push(`instruction=${tok(req?.instruction)}`);
+    } else if (kind === "announce_to_group") {
+      base6.push(`criteria=${tok(req?.criteria)}`);
+    } else if (kind === "trail_post") {
+      base6.push(`trail=${tok(req?.trailKind)}`);
+      base6.push(`round=${tok(req?.round)}`);
+      base6.push(`price=${tok(req?.price)}`);
+      base6.push(`hash=${tok(req?.hash)}`);
+      base6.push(`bytes=${tok(req?.bytes)}`);
+      base6.push(`checks=${tok(req?.checks)}`);
+      base6.push(`verdict=${tok(req?.verdict)}`);
+    }
+    return base6.join("\n");
+  }
+  function canonicalTaskActionPayload(a) {
     return JSON.stringify({
-      grantId: g.grantId,
-      identityId: g.identityId,
-      ownerDid: g.ownerDid,
-      level: g.level,
-      channels: g.channels,
-      contactScope: g.contactScope,
-      taskScope: g.taskScope,
-      contentScope: g.contentScope,
-      replyWakeAllowed: g.replyWakeAllowed,
-      autoSend: g.autoSend,
-      sensitiveContentAllowed: g.sensitiveContentAllowed,
-      newRecipientAllowed: g.newRecipientAllowed,
-      grantedAt: g.grantedAt,
-      grantedBy: g.grantedBy,
-      grantedVia: g.grantedVia,
-      deviceIds: [...g.deviceIds].sort(),
-      status: g.status,
-      revokedAt: g.revokedAt || "",
-      grantVersion: g.grantVersion
+      actionId: a.actionId,
+      kind: a.kind,
+      deviceId: a.deviceId,
+      ownerDid: a.ownerDid,
+      targetRef: a.targetRef || "",
+      contentDigest: a.contentDigest,
+      createdAt: a.createdAt,
+      expiresAt: a.expiresAt,
+      grantedBy: a.grantedBy,
+      via: a.via
     });
   }
-  function canonicalRevocationPayload(r) {
-    return JSON.stringify({ grantId: r.grantId, grantVersion: r.grantVersion, revokedAt: r.revokedAt, by: r.by });
-  }
-  function presetForChoice(choice) {
-    const base6 = { channels: "both", replyWakeAllowed: true, autoSend: true, newRecipientAllowed: false };
-    switch (choice) {
-      case "task_once":
-        return { ...base6, level: "task_once", contactScope: "verified_contacts", taskScope: "current_goal", contentScope: "normal", autoSend: false, sensitiveContentAllowed: false };
-      case "persistent":
-        return { ...base6, level: "persistent", contactScope: "verified_contacts", taskScope: "all_future_goals", contentScope: "normal", sensitiveContentAllowed: false };
-      case "full_contact_access":
-        return { ...base6, level: "full_contact_access", contactScope: "all_contacts", taskScope: "all_future_goals", contentScope: "sensitive", sensitiveContentAllowed: true };
-    }
+  function isIso(s2) {
+    return typeof s2 === "string" && s2.length >= 20 && Number.isFinite(Date.parse(s2));
+  }
+  function checkTaskActionFreshness(a, now) {
+    if (!isIso(a?.createdAt) || !isIso(a?.expiresAt)) return { ok: false, reason: "bad_time" };
+    const created = Date.parse(a.createdAt);
+    const expires = Date.parse(a.expiresAt);
+    if (expires - created > TASK_ACTION_TTL_MS) return { ok: false, reason: "ttl_too_long" };
+    if (expires < created) return { ok: false, reason: "bad_time" };
+    if (now > expires) return { ok: false, reason: "expired" };
+    if (now < created - TASK_ACTION_CLOCK_SKEW_MS) return { ok: false, reason: "not_yet_valid" };
+    return { ok: true };
   }
 
-  // src/web/mobile-contacts.ts
-  var K_DEVICE = "bolloon.contacts.device.v1";
-  var K_QUEUE = "bolloon.contacts.queue.v1";
-  var K_CAPS = "bolloon.contacts.capabilities.v1";
-  var cryptoOf = (c) => c || globalThis.crypto || null;
-  function ed25519Available(c) {
-    const cobj = cryptoOf(c);
-    if (!cobj?.subtle) return false;
-    try {
-      const alg = { name: "Ed25519" };
-      return typeof cobj.subtle.importKey === "function" && !!alg;
-    } catch {
-      return false;
-    }
+  // src/agents/task-public-text.ts
+  var PRIVACY_RULES = [
+    { rule: "wallet-address", why: "\u4EE5\u592A\u574A/EVM \u94B1\u5305\u5730\u5740", re: /(?<![0-9a-fA-FxX])0x[0-9a-fA-F]{40}(?![0-9a-fA-F])/ },
+    { rule: "private-key-hex", why: "32 \u5B57\u8282\u79C1\u94A5\u5F62\u6001 (0x + 64 hex)", re: /(?<![0-9a-fA-FxX])0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/ },
+    { rule: "hex-0x-blob", why: "0x \u5F00\u5934\u7684\u5341\u516D\u8FDB\u5236\u5757 (\u7B7E\u540D/\u54C8\u5E0C/\u5BC6\u94A5\u90FD\u957F\u8FD9\u6837, \u7FA4\u91CC\u4E00\u5F8B\u4E0D\u653E\u539F\u6587)", re: /(?<![0-9a-fA-FxX])0x[0-9a-fA-F]{8,}(?![0-9a-fA-F])/ },
+    { rule: "did", why: "\u53BB\u4E2D\u5FC3\u5316\u8EAB\u4EFD DID", re: /did:[a-z0-9]+:[A-Za-z0-9._:%-]{3,}/i },
+    { rule: "peer-id", why: "libp2p peerId (12D3Koo\u2026/Qm\u2026)", re: /12D3Koo[A-Za-z0-9]{8,}|Qm[1-9A-HJ-NP-Za-km-z]{30,}/ },
+    { rule: "multiaddr", why: "libp2p multiaddr \u6216 store \u5730\u5740 (/ip4 /tcp /p2p /orbitdb \u2026)", re: /\/(ip4|ip6|dns|dns4|dns6|tcp|udp|ws|wss|quic|p2p|p2p-circuit|ipfs|orbitdb)(?![A-Za-z0-9])/i },
+    { rule: "orbitdb-link", why: "OrbitDB \u94FE\u63A5 (\u7FA4\u9080\u8BF7\u94FE\u63A5\u672C\u8EAB\u4E5F\u4E0D\u8FDB\u7FA4\u6D88\u606F)", re: /orbitdb:\/\//i },
+    { rule: "ipv4", why: "IPv4 \u5730\u5740", re: /(?<!\d)\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}(?!\d)/ },
+    { rule: "ipv6", why: "IPv6 \u5730\u5740 (\u4E0D\u542B ISO \u65F6\u95F4\u6233)", re: /(?<![0-9A-Za-z])(?:[0-9a-fA-F]{1,4})?::(?:[0-9a-fA-F]{1,4}:){0,6}[0-9a-fA-F]{1,4}(?![0-9A-Za-z])|(?<![0-9A-Za-z:])(?:[0-9a-fA-F]{1,4}:){3,}[0-9a-fA-F]{1,4}(?![0-9A-Za-z])/ },
+    { rule: "pem", why: "PEM \u6750\u6599 (\u79C1\u94A5/\u8BC1\u4E66)", re: /-----BEGIN [A-Z ]*(PRIVATE KEY|CERTIFICATE)/ },
+    { rule: "secret-words", why: "\u79C1\u94A5/\u52A9\u8BB0\u8BCD/\u5BC6\u94A5\u5B57\u6837 (\u6B63\u6587\u91CC\u63D0\u5230\u5373\u505C, \u4EBA\u4E0D\u8BE5\u628A\u5BC6\u94A5\u5199\u8FDB\u7FA4)", re: /(private\s*key|seed\s*phrase|mnemonic|私钥|助记词|密钥材料)/i },
+    { rule: "url", why: "http(s) \u7AEF\u70B9 (\u7AEF\u70B9\u4F1A\u5E26 host/IP \u4E0E\u7528\u9014\u6307\u7EB9)", re: /https?:\/\/\S+/i },
+    { rule: "email", why: "\u90AE\u7BB1\u5730\u5740", re: /[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}/ }
+  ];
+  function mask(s2) {
+    const t = String(s2 || "");
+    return t.length <= 4 ? "****" : `${t.slice(0, 4)}\u2026`;
   }
-  function bytesOf(s2) {
-    const src4 = new TextEncoder().encode(s2);
-    const out = new Uint8Array(new ArrayBuffer(src4.byteLength));
-    out.set(src4);
+  function scanPublicText(text) {
+    const t = String(text ?? "");
+    const out = [];
+    const seen = /* @__PURE__ */ new Set();
+    for (const r of PRIVACY_RULES) {
+      const m2 = r.re.exec(t);
+      if (!m2) continue;
+      if (seen.has(r.rule)) continue;
+      seen.add(r.rule);
+      out.push({ rule: r.rule, why: r.why, masked: mask(String(m2[0])), chars: String(m2[0]).length });
+    }
     return out;
   }
-  function b64(buf) {
-    const arr = new Uint8Array(buf);
-    let out = "";
-    for (let i = 0; i < arr.length; i++) out += String.fromCharCode(arr[i]);
-    return btoa(out);
-  }
-  function pemFromSpki(spki) {
-    const b = b64(spki).replace(/(.{64})/g, "$1\n").trim();
-    return `-----BEGIN PUBLIC KEY-----
-${b}
------END PUBLIC KEY-----
-`;
+  function requirePublicText(text) {
+    const v = scanPublicText(text);
+    return v.length === 0 ? { ok: true } : { ok: false, violations: v };
+  }
+  var NODE_IDENTITY_RULES = PRIVACY_RULES.filter((r) => r.rule !== "orbitdb-link").map((r) => r.rule === "multiaddr" ? { ...r, re: /\/(ip4|ip6|dns|dns4|dns6|tcp|udp|ws|wss|quic|p2p|p2p-circuit|ipfs)(?![A-Za-z0-9])/i } : r);
+
+  // src/agents/mobile-task-views.ts
+  function shortId(id, n = 12) {
+    const s2 = String(id ?? "").trim();
+    if (!s2) return "";
+    return s2.length <= n ? s2 : `${s2.slice(0, n)}\u2026`;
+  }
+  function isProtocolId(s2) {
+    const v = String(s2 ?? "").trim();
+    return /^ann-[0-9a-f]{8,}$/i.test(v) || /^act-[a-z0-9-]{6,}$/i.test(v) || /^zdpu[0-9a-zA-Z]{8,}$/.test(v) || /^\/orbitdb\//.test(v);
+  }
+  function formatRelative(ms2, lang) {
+    if (ms2 === null || !Number.isFinite(ms2)) return lang === "zh" ? "\u2014" : "\u2014";
+    const past = ms2 >= 0;
+    const abs = Math.abs(ms2);
+    const min = Math.floor(abs / 6e4);
+    const hr = Math.floor(abs / 36e5);
+    const day = Math.floor(abs / 864e5);
+    const unit = day >= 1 ? lang === "zh" ? `${day} \u5929` : `${day} d` : hr >= 1 ? lang === "zh" ? `${hr} \u5C0F\u65F6` : `${hr} h` : min >= 1 ? lang === "zh" ? `${min} \u5206\u949F` : `${min} min` : lang === "zh" ? "\u4E0D\u5230 1 \u5206\u949F" : "under a minute";
+    if (lang === "zh") return past ? `${unit}\u524D` : `${unit}\u540E`;
+    return past ? `${unit} ago` : `in ${unit}`;
+  }
+  var STATUS_LABELS = {
+    open: { zh: "\u53EF\u63A5\u5355", en: "Open for claims" },
+    claimed: { zh: "\u5DF2\u88AB\u63A5\u5355", en: "Claimed" },
+    cancelled: { zh: "\u5DF2\u53D6\u6D88", en: "Cancelled" },
+    unknown: { zh: "\u72B6\u6001\u672A\u77E5", en: "Unknown status" }
+  };
+  function budgetLabelOf(b) {
+    if (!b || typeof b !== "object") return "";
+    const amt = String(b.maxAmount ?? "").trim();
+    if (!amt) return "";
+    return `${amt} ${String(b.currency || "").toUpperCase()}${b.network ? ` \xB7 ${String(b.network)}` : ""}`;
+  }
+  function boardItemOf(e, now) {
+    const dl = Number.isFinite(Number(e?.deadline)) ? Number(e.deadline) : null;
+    const ca = Number.isFinite(Number(e?.createdAt)) ? Number(e.createdAt) : null;
+    const status = String(e?.status || "unknown");
+    return {
+      idShort: shortId(e?.announcementId),
+      ref: String(e?.announcementId || ""),
+      capability: String(e?.capability || ""),
+      status,
+      statusLabel: STATUS_LABELS[status] || STATUS_LABELS.unknown,
+      budgetLabel: budgetLabelOf(e?.budget),
+      deadlineInMs: dl === null ? null : dl - now,
+      createdAtMs: ca,
+      claimCount: Number.isFinite(Number(e?.claimCount)) ? Number(e.claimCount) : 0,
+      preview: e?.instructionPreview ? String(e.instructionPreview).slice(0, 120) : null,
+      remote: !!e?.remote,
+      claimable: !!e?.claimable,
+      signatureVerified: e?.signatureVerified === true ? true : e?.signatureVerified === false ? false : null
+    };
   }
-  async function sha256Hex(c, text) {
-    const d2 = await c.subtle.digest("SHA-256", bytesOf(text));
-    return [...new Uint8Array(d2)].map((x) => x.toString(16).padStart(2, "0")).join("");
+  function buildBoardView(view, now) {
+    const items = (Array.isArray(view?.entries) ? view.entries : []).map((e) => boardItemOf(e, now));
+    return {
+      items,
+      localCount: Number(view?.localCount) || 0,
+      remoteCount: Number(view?.remoteCount) || 0,
+      registryReady: view?.registryReady === true,
+      registryError: view?.registryError ? String(view.registryError).slice(0, 160) : null,
+      notes: Array.isArray(view?.notes) ? view.notes.map((n) => String(n)) : [],
+      openCount: items.filter((i) => i.claimable).length
+    };
   }
-  async function loadOrCreateDeviceKey(storage2, c) {
-    const cobj = cryptoOf(c);
-    if (!cobj?.subtle) throw new Error("device_signing_unavailable: \u672C\u673A\u6CA1\u6709 WebCrypto");
-    const raw = storage2.getItem(K_DEVICE);
-    if (raw) {
-      try {
-        const parsed = JSON.parse(raw);
-        if (parsed?.privateKeyJwk && parsed?.publicKeyPem && parsed?.deviceId) return parsed;
-      } catch {
+  var TRAIL_KIND_LABELS = {
+    announce: { zh: "\u516C\u544A", en: "Announce" },
+    claim: { zh: "\u63A5\u5355\u58F0\u660E", en: "Claim" },
+    deliver: { zh: "\u4EA4\u4ED8", en: "Delivery" },
+    screen: { zh: "\u521D\u7B5B\u7ED3\u679C", en: "Screening" },
+    final: { zh: "\u7EC8\u5BA1\u7ED3\u8BBA", en: "Final verdict" }
+  };
+  var INCONSISTENCY_LABELS = {
+    "final-accept-without-delivery": { zh: "\u8BF4\u901A\u8FC7\u4E86, \u4F46\u7FA4\u91CC\u6CA1\u6709\u4EA4\u4ED8\u75D5\u8FF9", en: "Accepted, but no delivery trace in the group" },
+    "screen-without-delivery": { zh: "\u6709\u521D\u7B5B\u7ED3\u679C, \u4F46\u6CA1\u6709\u4EA4\u4ED8\u75D5\u8FF9", en: "Screening exists without a delivery trace" },
+    "claim-without-announce": { zh: "\u6709\u4EBA\u63A5\u5355, \u4F46\u7FA4\u91CC\u6CA1\u6709\u516C\u544A\u75D5\u8FF9", en: "Claim without an announcement trace" },
+    "deliver-without-claim": { zh: "\u6709\u4EA4\u4ED8, \u4F46\u6CA1\u4EBA\u63A5\u8FC7\u5355", en: "Delivery without a claim" },
+    "both-accept-and-reject": { zh: "\u540C\u65F6\u51FA\u73B0\u901A\u8FC7\u548C\u62D2\u7EDD", en: "Both accepted and rejected appear" },
+    "group-message-hit-privacy-rule": { zh: "\u7FA4\u91CC\u6709\u4EBA\u53D1\u4E86\u5E26\u6807\u8BC6\u7B26\u7684\u6D88\u606F (\u5DF2\u906E\u853D, \u4E0D\u5F53\u4E8B\u5B9E\u91C7\u7528)", en: "A group message hit a privacy rule (masked, not used as fact)" }
+  };
+  function buildTrailView(summary) {
+    const entries = (Array.isArray(summary?.entries) ? summary.entries : []).map((e) => {
+      const facts = [];
+      for (const [k, v] of Object.entries(e?.fields || {})) {
+        if (k === "kind") continue;
+        const raw = String(v ?? "");
+        const hit = scanPublicText(raw);
+        if (hit.length) {
+          facts.push({ k: String(k), v: `[\u5DF2\u906E\u853D:${hit[0].rule}]` });
+          continue;
+        }
+        facts.push({ k: String(k), v: k === "id" || isProtocolId(raw) ? shortId(raw) : raw });
       }
-    }
-    let pair;
+      const kind = String(e?.kind || "");
+      return {
+        idShort: shortId(e?.announcementId),
+        kind,
+        kindLabel: TRAIL_KIND_LABELS[kind] || { zh: kind, en: kind },
+        sender: String(e?.sender || "unknown"),
+        atMs: Number.isFinite(Number(e?.at)) ? Number(e.at) : 0,
+        facts
+      };
+    });
+    const inc = (Array.isArray(summary?.inconsistencies) ? summary.inconsistencies : []).map((c) => ({
+      code: String(c),
+      label: INCONSISTENCY_LABELS[String(c)] || { zh: String(c), en: String(c) }
+    }));
+    return {
+      count: Number(summary?.count) || entries.length,
+      byKind: summary?.byKind || {},
+      entries,
+      announcementIdsShort: (Array.isArray(summary?.announcements) ? summary.announcements : []).map((a) => shortId(a)),
+      flags: summary?.flags || {},
+      inconsistencies: inc,
+      redactedCount: Array.isArray(summary?.redacted) ? summary.redacted.length : 0,
+      ignoredMessages: Number(summary?.ignoredMessages) || 0,
+      privacyHits: inc.some((x) => x.code === "group-message-hit-privacy-rule") || Array.isArray(summary?.redacted) && summary.redacted.length > 0
+    };
+  }
+  function buildGroupsView(groups) {
+    return (Array.isArray(groups) ? groups : []).map((g) => ({
+      idShort: shortId(g?.id),
+      name: String(g?.name || ""),
+      joinedAt: String(g?.createdAt || "")
+    }));
+  }
+  function describeTaskActionForConfirm(kind, req) {
+    const lines = [];
+    const push = (k, kEn, v) => {
+      const s2 = String(v ?? "").trim();
+      if (s2 && s2 !== "-") lines.push({ k, kEn, v: s2 });
+    };
+    push("\u7FA4", "group", req?.groupRef ? shortId(req.groupRef, 24) : "");
+    push("\u516C\u544A\u53F7", "announcement", req?.announcementId ? shortId(req.announcementId) : "");
+    push("\u80FD\u529B", "capability", req?.capability);
+    push("\u9884\u7B97", "budget", req?.budgetHuman ? `${req.budgetHuman} ${String(req?.currency || "").toUpperCase()}` : "");
+    push("\u4EFB\u52A1\u6B63\u6587", "instruction", req?.instruction);
+    push("\u622A\u6B62", "deadline", req?.deadline);
+    push("\u9A8C\u6536\u5224\u636E", "criteria", req?.criteria);
+    push("\u671F\u53F7", "round", req?.round);
+    push("\u75D5\u8FF9\u7C7B\u578B", "trail kind", req?.trailKind ? TRAIL_KIND_LABELS[String(req.trailKind)]?.zh || String(req.trailKind) : "");
+    push("\u58F0\u660E\u4EF7\u683C", "declared price", req?.price);
+    push("\u4EA4\u4ED8\u54C8\u5E0C", "delivery hash", req?.hash);
+    push("\u5B57\u8282\u6570", "bytes", req?.bytes);
+    push("\u9010\u6761\u521D\u7B5B", "per-item screen", req?.checks);
+    push("\u7EC8\u5BA1\u7ED3\u8BBA", "final verdict", req?.verdict);
+    const titles = {
+      group_join: { zh: "\u52A0\u5165\u8FD9\u4E2A\u7FA4", en: "Join this group" },
+      group_leave: { zh: "\u9000\u51FA\u8FD9\u4E2A\u7FA4", en: "Leave this group" },
+      group_create: { zh: "\u5EFA\u4E00\u4E2A\u65B0\u7FA4", en: "Create a new group" },
+      announce_publish: { zh: "\u53D1\u5E03\u4EFB\u52A1\u516C\u544A", en: "Publish a task announcement" },
+      announce_to_group: { zh: "\u628A\u8FD9\u671F\u516C\u544A\u53D1\u8FDB\u7FA4", en: "Post this announcement into the group" },
+      trail_post: { zh: "\u5F80\u7FA4\u91CC\u7559\u4E00\u6761\u8FC7\u7A0B\u75D5\u8FF9", en: "Post a process trail entry into the group" }
+    };
+    const t = titles[String(kind)] || { zh: "\u6267\u884C\u8FD9\u4E2A\u52A8\u4F5C", en: "Run this action" };
+    return { titleZh: t.zh, titleEn: t.en, lines };
+  }
+
+  // src/agents/goal-flywheel/types.ts
+  var MUST_NOT_EXPOSE_FIELDS = [
+    "lease",
+    "reducer",
+    "internal_status",
+    "retry_counter",
+    "worker_owner"
+  ];
+
+  // src/agents/goal-flywheel/work-monitor.ts
+  var NO_PROGRESS_FALLBACK_MS = 30 * 60 * 1e3;
+  var DEFAULT_REPORT_GRACE_MS = 60 * 1e3;
+  var DEFAULT_ESCALATION_MS = 10 * 60 * 1e3;
+  var TERMINAL_GOAL_STATES = ["completed", "failed", "abandoned"];
+  var TERMINAL_GOAL_STATUSES = [...TERMINAL_GOAL_STATES];
+
+  // src/agents/mobile-flywheel-view.ts
+  function findInternalFieldLeaks(text) {
+    const t = String(text ?? "");
+    return MUST_NOT_EXPOSE_FIELDS.filter((f) => t.includes(f));
+  }
+
+  // src/web/mobile-tasks.ts
+  init_mobile_contacts();
+  var K_TASKS_HINT = "bolloon.mobile.tasks.hint.v1";
+  function defaultStorage2() {
     try {
-      pair = await cobj.subtle.generateKey({ name: "Ed25519" }, true, ["sign", "verify"]);
-    } catch (err2) {
-      throw new Error(`device_signing_unavailable: ${String(err2?.message || err2)}`);
+      if (typeof localStorage !== "undefined") return localStorage;
+    } catch {
     }
-    const publicKeyPem = pemFromSpki(await cobj.subtle.exportKey("spki", pair.publicKey));
-    const privateKeyJwk = await cobj.subtle.exportKey("jwk", pair.privateKey);
-    const deviceId = `dev-${(await sha256Hex(cobj, publicKeyPem)).slice(0, 12)}`;
-    const material = { deviceId, publicKeyPem, privateKeyJwk };
-    storage2.setItem(K_DEVICE, JSON.stringify(material));
-    return material;
+    const mem2 = /* @__PURE__ */ new Map();
+    return { getItem: (k) => mem2.has(k) ? mem2.get(k) : null, setItem: (k, v) => {
+      mem2.set(k, v);
+    }, removeItem: (k) => {
+      mem2.delete(k);
+    } };
   }
-  async function importPrivate(storage2, c) {
-    const k = await loadOrCreateDeviceKey(storage2, c);
-    return c.subtle.importKey("jwk", k.privateKeyJwk, { name: "Ed25519" }, false, ["sign"]);
-  }
-  async function signGrantOnDevice(grant, storage2, c) {
-    const cobj = cryptoOf(c);
-    const key = await importPrivate(storage2, cobj);
-    const payload = canonicalGrantPayload(grant);
-    const sig = await cobj.subtle.sign({ name: "Ed25519" }, key, bytesOf(payload));
-    const dev = await loadOrCreateDeviceKey(storage2, cobj);
-    return { deviceId: dev.deviceId, alg: "ed25519", payloadHash: await sha256Hex(cobj, payload), sig: b64(sig) };
+  async function baseOf(deps) {
+    if (deps.base && String(deps.base).trim()) return String(deps.base).replace(/\/+$/, "");
+    try {
+      if (typeof localStorage !== "undefined") {
+        const v = localStorage.getItem("bolloon_desktop_base_url");
+        if (v) return String(v).replace(/\/+$/, "");
+      }
+    } catch {
+    }
+    return "";
   }
-  async function signRevocationOnDevice(rev, storage2, c) {
-    const cobj = cryptoOf(c);
-    const key = await importPrivate(storage2, cobj);
-    const payload = canonicalRevocationPayload(rev);
-    const sig = await cobj.subtle.sign({ name: "Ed25519" }, key, bytesOf(payload));
-    const dev = await loadOrCreateDeviceKey(storage2, cobj);
-    return { deviceId: dev.deviceId, alg: "ed25519", payloadHash: await sha256Hex(cobj, payload), sig: b64(sig) };
+  function fetchOf(deps) {
+    return deps.fetchImpl || globalThis.fetch;
   }
-  async function post(base6, path, body, f) {
-    const res = await f(`${String(base6).replace(/\/+$/, "")}${path}`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify(body ?? {})
-    });
+  async function getJson(base6, path, f) {
+    const res = await f(`${base6}${path}`);
     let json = null;
     try {
       json = await res.json();
@@ -163057,8 +163660,12 @@ ${b}
     }
     return { status: res.status, json };
   }
-  async function get(base6, path, f) {
-    const res = await f(`${String(base6).replace(/\/+$/, "")}${path}`);
+  async function postJson(base6, path, body, f) {
+    const res = await f(`${base6}${path}`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body ?? {})
+    });
     let json = null;
     try {
       json = await res.json();
@@ -163066,220 +163673,237 @@ ${b}
     }
     return { status: res.status, json };
   }
-  async function registerDeviceOnDesktop(base6, storage2, opts = {}) {
-    const f = opts.fetchImpl || fetch;
-    const dev = await loadOrCreateDeviceKey(storage2, opts.cryptoObj);
-    const r = await post(base6, "/api/contacts/devices", { deviceId: dev.deviceId, publicKeyPem: dev.publicKeyPem, label: opts.label || "\u624B\u673A" }, f);
-    if (r.status !== 200 || !r.json?.ok) return { ok: false, error: `\u684C\u9762\u672A\u63A5\u53D7\u8BBE\u5907\u767B\u8BB0: ${r.json?.error || r.status}`, data: dev };
-    return { ok: true, data: dev };
+  var OFFLINE_NOTE = "\u5730\u5740\u5728 \u6211 \u2192 \u8BBE\u7F6E \u2192 \u7535\u8111\u7AEF\u5730\u5740 \u91CC\u586B; \u624B\u673A\u4E0D\u66FF\u684C\u9762\u8BB0\u8D26";
+  function mapFail(r, what) {
+    const code10 = r.json?.code ? String(r.json.code) : r.status ? `desktop_http_${r.status}` : "desktop_unreachable";
+    return { ok: false, code: code10, error: `${what} \u5931\u8D25: ${r.json?.error || r.json?.message || code10}`, note: OFFLINE_NOTE };
   }
-  function saveCapabilityCopy(storage2, items) {
-    const clean8 = (items || []).map((c) => ({
-      contactId: String(c.contactId || ""),
-      kind: c.kind,
-      displayValue: String(c.displayValue || ""),
-      verificationStatus: String(c.verificationStatus || ""),
-      capabilities: [...c.capabilities || []],
-      provider: c.provider ? String(c.provider) : void 0,
-      state: c.state ? String(c.state) : void 0
-    }));
-    storage2.setItem(K_CAPS, JSON.stringify(clean8));
+  function emptyTaskActionRequest(kind) {
+    return {
+      kind,
+      groupRef: null,
+      announcementId: null,
+      capability: null,
+      instruction: null,
+      budgetHuman: null,
+      currency: null,
+      deadline: null,
+      criteria: null,
+      round: null,
+      price: null,
+      hash: null,
+      bytes: null,
+      checks: null,
+      verdict: null,
+      trailKind: null
+    };
   }
-  function loadCapabilityCopy(storage2) {
-    try {
-      const v = JSON.parse(storage2.getItem(K_CAPS) || "[]");
-      return Array.isArray(v) ? v : [];
-    } catch {
-      return [];
+  async function signTaskAction(req, deps = {}) {
+    const storage2 = deps.storage || defaultStorage2();
+    const c = deps.cryptoObj || globalThis.crypto;
+    if (!ed25519Available(c)) {
+      return { ok: false, code: "device_signing_unavailable", error: "\u672C\u673A WebView \u4E0D\u652F\u6301 Ed25519 \u8BBE\u5907\u7B7E\u540D \u2014\u2014 \u8BF7\u5728\u684C\u9762\u7AEF\u6267\u884C\u8FD9\u4E2A\u52A8\u4F5C (\u6216\u5347\u7EA7\u7CFB\u7EDF WebView)" };
     }
-  }
-  function pendingQueue(storage2) {
-    try {
-      const v = JSON.parse(storage2.getItem(K_QUEUE) || "[]");
-      return Array.isArray(v) ? v : [];
-    } catch {
-      return [];
+    if (!MOBILE_TASK_ACTION_KINDS.includes(String(req?.kind))) {
+      return { ok: false, code: "unknown_kind", error: `\u672A\u77E5\u52A8\u4F5C: ${String(req?.kind || "")}` };
     }
-  }
-  function setQueue(storage2, q) {
-    storage2.setItem(K_QUEUE, JSON.stringify(q.slice(-20)));
-  }
-  async function flushQueuedGrants(base6, storage2, opts = {}) {
-    const f = opts.fetchImpl || fetch;
-    const q = pendingQueue(storage2);
-    const keep = [];
-    const results = [];
-    let sent = 0, failed = 0;
-    for (const item of q) {
-      try {
-        const r = await post(base6, "/api/contacts/grants/sync", { grant: { ...item.grant, signature: item.signature } }, f);
-        if (r.status === 200 && r.json?.ok) {
-          sent++;
-          results.push({ grantId: item.grant.grantId, ok: true });
-          continue;
+    const text = taskActionContentText(req);
+    if (req.kind === "trail_post" || req.kind === "announce_publish" || req.kind === "announce_to_group") {
+      for (const fieldText of [req.round, req.price, req.criteria, req.checks, req.verdict, req.capability, req.hash]) {
+        if (!fieldText) continue;
+        const gate = requirePublicText(String(fieldText));
+        if (!gate.ok) {
+          return { ok: false, code: "privacy_denied", error: `\u672C\u5730\u9690\u79C1\u95F8\u62E6\u4E0B: ${gate.violations.map((v) => v.rule).join(", ")} (\u7FA4\u91CC/\u516C\u544A\u91CC\u4E0D\u653E\u6807\u8BC6\u7B26)`, violations: gate.violations };
         }
-        failed++;
-        keep.push(item);
-        results.push({ grantId: item.grant.grantId, ok: false, error: r.json?.code || r.status });
-      } catch {
-        failed++;
-        keep.push(item);
-        results.push({ grantId: item.grant.grantId, ok: false, error: "network" });
       }
     }
-    setQueue(storage2, keep);
-    return { sent, failed, results };
-  }
-  async function authorizeFromPhone(input) {
-    const c = cryptoOf(input.cryptoObj);
-    if (!ed25519Available(c || void 0)) {
-      return { ok: false, error: "device_signing_unavailable: \u672C\u673A WebView \u4E0D\u652F\u6301 Ed25519 \u8BBE\u5907\u7B7E\u540D \u2014\u2014 \u8BF7\u5728\u684C\u9762\u7AEF\u6388\u6743 (\u6216\u5347\u7EA7\u7CFB\u7EDF WebView)" };
-    }
-    const dev = await loadOrCreateDeviceKey(input.storage, c);
-    const preset = presetForChoice(input.choice);
-    const grant = {
-      grantId: `gr-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`,
-      identityId: input.identityId || `sid-phone-${dev.deviceId.slice(-6)}`,
-      ownerDid: input.ownerDid,
-      ...preset,
-      grantedAt: (/* @__PURE__ */ new Date()).toISOString(),
-      grantedBy: input.grantedBy || "leo",
-      grantedVia: "mobile",
-      deviceIds: [dev.deviceId],
-      status: "active",
-      grantVersion: 1
+    const now = deps.now ? deps.now() : Date.now();
+    const ttl = Math.min(Number(deps.ttlMs) || TASK_ACTION_DEFAULT_TTL_MS, TASK_ACTION_DEFAULT_TTL_MS);
+    let contentDigest;
+    try {
+      contentDigest = await sha256HexOf(text, c);
+    } catch (e) {
+      return { ok: false, code: "device_signing_unavailable", error: String(e?.message || e) };
+    }
+    const action = {
+      actionId: `act-${now.toString(36)}-${Math.random().toString(36).slice(2, 8)}`,
+      kind: req.kind,
+      deviceId: "",
+      // 由 signPayloadOnDevice 填 (它知道设备 id)
+      ownerDid: String(deps.ownerDid || "").trim(),
+      targetRef: String(req.groupRef || req.announcementId || ""),
+      contentDigest,
+      createdAt: new Date(now).toISOString(),
+      expiresAt: new Date(now + ttl).toISOString(),
+      grantedBy: deps.grantedBy || "leo",
+      via: "mobile"
     };
-    const signature = await signGrantOnDevice(grant, input.storage, c);
-    const f = input.fetchImpl || fetch;
-    const reg = await registerDeviceOnDesktop(input.base, input.storage, { fetchImpl: f, cryptoObj: c }).catch(() => ({ ok: false }));
-    if (!reg.ok) {
-      const q2 = pendingQueue(input.storage);
-      q2.push({ grant, signature, queuedAt: (/* @__PURE__ */ new Date()).toISOString() });
-      setQueue(input.storage, q2);
-      return {
-        ok: false,
-        queued: true,
-        error: `\u684C\u9762\u6682\u4E0D\u53EF\u8FBE \u2192 \u6388\u6743\u5DF2\u5B58\u5728\u624B\u673A, \u5F85\u684C\u9762\u5728\u7EBF\u65F6\u81EA\u52A8\u540C\u6B65 (${reg.error || "offline"})`,
-        data: { grantId: grant.grantId, level: grant.level, signature },
-        note: "\u684C\u9762\u4E0D\u5728\u7EBF\u65F6\u4E0D\u5047\u88C5\u5DF2\u751F\u6548: \u6388\u6743\u5728\u672C\u5730\u961F\u5217\u91CC, \u684C\u9762\u4E00\u4E0A\u7EBF\u5C31\u8865\u540C\u6B65"
-      };
-    }
-    const r = await post(input.base, "/api/contacts/grants/sync", { grant: { ...grant, signature } }, f);
-    if (r.status === 200 && r.json?.ok) {
-      return { ok: true, data: { grantId: grant.grantId, level: grant.level, signature }, note: "\u684C\u9762\u5DF2\u9A8C\u7B7E\u63A5\u53D7" };
+    let signature;
+    try {
+      const { loadOrCreateDeviceKey: loadOrCreateDeviceKey2, signPayloadWithMaterial: signPayloadWithMaterial2 } = await Promise.resolve().then(() => (init_mobile_contacts(), mobile_contacts_exports));
+      const material = await loadOrCreateDeviceKey2(storage2, c);
+      action.deviceId = material.deviceId;
+      signature = await signPayloadWithMaterial2(canonicalTaskActionPayload(action), material, c);
+      if (signature.deviceId !== action.deviceId) {
+        return { ok: false, code: "device_signing_unavailable", error: "\u8BBE\u5907\u5BC6\u94A5\u4E0D\u4E00\u81F4 (\u7B7E\u540D\u4E0E\u8F7D\u8377\u8BBE\u5907\u5BF9\u4E0D\u4E0A) \u2192 \u4E0D\u53D1\u9001" };
+      }
+      const fresh = checkTaskActionFreshness(action, now);
+      if (!fresh.ok) return { ok: false, code: fresh.reason, error: `\u52A8\u4F5C\u65F6\u6548\u4E0D\u5408\u6CD5: ${fresh.reason}` };
+    } catch (e) {
+      return { ok: false, code: "device_signing_unavailable", error: String(e?.message || e).slice(0, 160) };
     }
-    const q = pendingQueue(input.storage);
-    q.push({ grant, signature, queuedAt: (/* @__PURE__ */ new Date()).toISOString() });
-    setQueue(input.storage, q);
     return {
-      ok: false,
-      queued: true,
-      error: `\u684C\u9762\u62D2\u7EDD/\u672A\u63A5\u53D7: ${r.json?.code || r.json?.reason || r.status}`,
-      data: { grantId: grant.grantId, level: grant.level, signature },
-      note: "\u5DF2\u4FDD\u5B58\u5728\u624B\u673A\u672C\u5730\u961F\u5217 (\u4E0D\u4F1A\u56E0\u4E3A\u5931\u8D25\u5C31\u5F53\u6210\u5DF2\u6388\u6743)"
+      ok: true,
+      data: { signed: { action, signature }, contentText: text, confirm: describeTaskActionForConfirm(req.kind, req) }
     };
   }
-  async function revokeFromPhone(opts) {
-    const c = cryptoOf(opts.cryptoObj);
-    if (!ed25519Available(c || void 0)) return { ok: false, error: "device_signing_unavailable: \u672C\u673A\u4E0D\u652F\u6301\u8BBE\u5907\u7B7E\u540D, \u64A4\u9500\u9700\u5728\u684C\u9762\u7AEF\u8FDB\u884C" };
-    const revokedAt = (/* @__PURE__ */ new Date()).toISOString();
-    const payload = { grantId: opts.grantId, grantVersion: opts.version || 1, revokedAt, by: "mobile" };
-    const signature = await signRevocationOnDevice(payload, opts.storage, c);
-    const f = opts.fetchImpl || fetch;
-    const r = await post(opts.base, "/api/contacts/grants/revoke-sync", { grantId: opts.grantId, by: "mobile", reason: opts.reason, version: payload.grantVersion, revokedAt, signature }, f);
-    if (r.status === 200 && r.json?.ok) return { ok: true, data: { grantId: opts.grantId }, note: "\u684C\u9762\u5DF2\u9A8C\u7B7E\u5E76\u7ACB\u5373\u5931\u6548" };
-    return { ok: false, error: `\u64A4\u9500\u672A\u9001\u8FBE: ${r.json?.code || r.json?.error || r.status}`, note: "\u684C\u9762\u4E0D\u5728\u7EBF\u65F6\u64A4\u9500**\u4E0D\u4F1A**\u88AB\u5F53\u4F5C\u5DF2\u5B8C\u6210 \u2014\u2014 \u8BF7\u5728\u684C\u9762\u5728\u7EBF\u540E\u91CD\u8BD5 (\u6216\u684C\u9762\u7AEF\u64A4\u9500)" };
+  async function executeTaskAction(req, deps = {}) {
+    const storage2 = deps.storage || defaultStorage2();
+    const base6 = await baseOf(deps);
+    if (!base6) return { ok: false, code: "desktop_offline", error: "\u8FD8\u6CA1\u8BBE\u7F6E\u7535\u8111\u7AEF\u5730\u5740: \u9AD8\u98CE\u9669\u52A8\u4F5C\u5FC5\u987B\u7531\u684C\u9762\u6267\u884C (\u624B\u673A\u7B7E\u4E86\u540D\u4E5F\u8981\u9001\u5230\u684C\u9762)", note: OFFLINE_NOTE };
+    const signed = await signTaskAction(req, { ...deps, storage: storage2 });
+    if (!signed.ok || !signed.data) return { ok: false, code: signed.code, error: signed.error, violations: signed.violations };
+    const f = fetchOf(deps);
+    let r;
+    try {
+      r = await postJson(base6, "/api/mobile/tasks/execute", { request: req, ...signed.data.signed }, f);
+    } catch (e) {
+      return { ok: false, code: "desktop_offline", error: `\u684C\u9762\u4E0D\u53EF\u8FBE: ${String(e?.message || e).slice(0, 120)}`, note: OFFLINE_NOTE };
+    }
+    if (r.status !== 200 || !r.json?.ok) return mapFail(r, "\u6267\u884C");
+    return { ok: true, data: r.json, note: "\u684C\u9762\u5DF2\u9A8C\u7B7E\u5E76\u6267\u884C (\u540C\u4E00\u5957\u5B58\u50A8\u4E0E\u534F\u8BAE)" };
   }
-  async function loadFromDesktop(base6, storage2, opts = {}) {
-    const f = opts.fetchImpl || fetch;
-    if (!base6) {
-      const caps = loadCapabilityCopy(storage2);
-      return {
-        ok: false,
-        error: "desktop_offline",
-        data: { contacts: caps, grants: [], effective: "\u684C\u9762\u4E0D\u5728\u7EBF (\u663E\u793A\u624B\u673A\u672C\u5730\u526F\u672C)", approvals: [], waiting: [] },
-        note: "\u4EE5\u4E0B\u662F\u4F60\u624B\u673A\u4E0A\u4FDD\u5B58\u7684\u80FD\u529B\u526F\u672C (\u4E0D\u662F\u684C\u9762\u5B9E\u65F6\u72B6\u6001)"
-      };
+  async function previewGroupMessage(req, deps = {}) {
+    const base6 = await baseOf(deps);
+    if (!base6) return { ok: false, code: "desktop_offline", error: "\u9884\u89C8\u9700\u8981\u684C\u9762\u5728\u7EBF (\u7FA4\u6D88\u606F\u7531\u684C\u9762\u7684\u6784\u9020\u5668\u751F\u6210)", note: OFFLINE_NOTE };
+    const c = deps.cryptoObj || globalThis.crypto;
+    let digestPreview = "";
+    try {
+      digestPreview = await sha256HexOf(taskActionContentText(req), c);
+    } catch {
+      digestPreview = "";
     }
+    const f = fetchOf(deps);
     try {
-      const a = await get(base6, "/api/contacts", f);
-      const b = await get(base6, "/api/contacts/grants", f);
-      if (a.status !== 200 && b.status !== 200) return { ok: false, error: `desktop_http_${a.status || b.status}` };
-      const view = {
-        contacts: a.json?.contacts || [],
-        grants: b.json?.grants || [],
-        effective: b.json?.effective || "",
-        approvals: a.json?.approvals || [],
-        waiting: a.json?.waiting || []
-      };
-      saveCapabilityCopy(storage2, (view.contacts || []).filter((c) => c.capabilities?.includes("send")).map((c) => ({
-        contactId: c.contactId,
-        kind: c.kind,
-        displayValue: c.displayValue,
-        verificationStatus: c.status,
-        capabilities: c.capabilities,
-        provider: c.provider,
-        state: c.status
-      })));
-      return { ok: true, data: view };
-    } catch (err2) {
-      const caps = loadCapabilityCopy(storage2);
-      return {
-        ok: false,
-        error: "desktop_offline",
-        data: { contacts: caps, grants: [], effective: "\u684C\u9762\u4E0D\u5728\u7EBF (\u663E\u793A\u624B\u673A\u672C\u5730\u526F\u672C)", approvals: [], waiting: [] },
-        note: `\u8FDE\u4E0D\u4E0A\u684C\u9762 (${String(err2?.message || err2).slice(0, 60)}) \u2014\u2014 \u663E\u793A\u672C\u5730\u526F\u672C`
-      };
+      const r = await postJson(base6, "/api/mobile/tasks/preview", { request: req }, f);
+      if (r.status !== 200 || !r.json?.ok) return mapFail(r, "\u9884\u89C8");
+      return { ok: true, data: { text: String(r.json.text || ""), contentText: taskActionContentText(req), digestPreview } };
+    } catch (e) {
+      return { ok: false, code: "desktop_offline", error: `\u684C\u9762\u4E0D\u53EF\u8FBE: ${String(e?.message || e).slice(0, 120)}`, note: OFFLINE_NOTE };
     }
   }
-  async function bindFromPhone(base6, opts, storage2, f) {
-    const impl = f || fetch;
-    if (!base6) return { ok: false, error: "desktop_offline: \u7ED1\u5B9A\u9700\u8981\u684C\u9762\u7AEF\u5728\u7EBF (\u684C\u9762\u8D1F\u8D23\u843D\u76D8\u4E0E\u9A8C\u8BC1\u7801\u901A\u9053)" };
-    const r = await post(base6, "/api/contacts/bind", { kind: opts.kind, value: opts.value, region: opts.region }, impl);
-    if (r.status === 200 && r.json?.ok) return { ok: true, data: r.json };
-    return { ok: false, error: r.json?.error || `HTTP ${r.status}` };
+  async function listGroups(deps = {}) {
+    const base6 = await baseOf(deps);
+    if (!base6) return { ok: false, code: "desktop_offline", error: "\u770B\u7FA4\u5217\u8868\u9700\u8981\u7535\u8111\u7AEF\u5728\u7EBF (\u7FA4\u5B58\u5728\u4E8E\u684C\u9762\u8282\u70B9\u7684 OrbitDB)", note: OFFLINE_NOTE };
+    try {
+      const r = await getJson(base6, "/api/mobile/tasks/groups", fetchOf(deps));
+      if (r.status !== 200 || !r.json?.ok) return mapFail(r, "\u8BFB\u7FA4\u5217\u8868");
+      return { ok: true, data: buildGroupsView(r.json.groups || []) };
+    } catch (e) {
+      return { ok: false, code: "desktop_offline", error: `\u684C\u9762\u4E0D\u53EF\u8FBE: ${String(e?.message || e).slice(0, 120)}`, note: OFFLINE_NOTE };
+    }
   }
-  async function verifyFromPhone(base6, opts, storage2, f) {
-    const impl = f || fetch;
-    if (!base6) return { ok: false, error: "desktop_offline: \u9A8C\u8BC1\u9700\u8981\u684C\u9762\u7AEF\u5728\u7EBF" };
-    const r = await post(base6, "/api/contacts/verify", { contactId: opts.contactId, challengeId: opts.challengeId, code: opts.code }, impl);
-    if (r.status === 200 && r.json?.ok) return { ok: true, data: r.json };
-    return { ok: false, error: r.json?.error || `HTTP ${r.status}` };
+  function joinGroup(link, deps = {}) {
+    const req = { ...emptyTaskActionRequest("group_join"), groupRef: String(link || "").trim() };
+    return executeTaskAction(req, deps);
   }
-  async function decideApprovalFromPhone(base6, opts, f) {
-    const impl = f || fetch;
-    if (!base6) return { ok: false, error: "desktop_offline: \u6279\u51C6\u9700\u8981\u684C\u9762\u7AEF\u5728\u7EBF (\u624B\u673A\u4E0D\u5728\u7EBF\u65F6\u4E0D\u4F1A\u5047\u88C5\u5DF2\u6279\u51C6)" };
-    const r = await post(base6, `/api/contacts/approvals/${encodeURIComponent(opts.consentId)}/${opts.action}`, { by: "leo", via: "mobile", body: opts.body, reason: opts.reason }, impl);
-    if (r.status === 200 && r.json?.ok) return { ok: true, data: r.json };
-    return { ok: false, error: r.json?.error || `HTTP ${r.status}` };
+  function leaveGroup(groupRef, deps = {}) {
+    const req = { ...emptyTaskActionRequest("group_leave"), groupRef: String(groupRef || "").trim() };
+    return executeTaskAction(req, deps);
   }
-  function buildPhoneCard(view, opts) {
-    return {
-      title: "\u8BA9 Bolloon \u4EE3\u8868\u4F60\u8054\u7CFB\u5916\u90E8\u7684\u4EBA",
-      effective: view?.effective || opts.offline || "\u672A\u77E5",
-      contacts: (view?.contacts || []).map((c) => ({
-        displayValue: c.displayValue || "",
-        kind: c.kind || "",
-        state: c.status || c.verificationStatus || "",
-        label: c.capabilities?.includes("send") ? "\u53EF\u8054\u7CFB" : "\u4E0D\u53EF\u8054\u7CFB"
-      })),
-      approvals: (view?.approvals || []).map((a) => ({
-        consentId: a.consentId,
-        contactName: a.contactName,
-        channel: a.channel,
-        subject: a.subject,
-        bodyPreview: a.bodyPreview || "",
-        reason: a.reason,
-        reallySent: !!a.reallySent
-      })),
-      choices: [
-        { id: "task_once", label: "\u4EC5\u672C\u6B21\u4EFB\u52A1" },
-        { id: "persistent", label: "\u957F\u671F\u4F7F\u7528 (\u63A8\u8350)" },
-        { id: "full_contact_access", label: "\u5B8C\u5168\u6388\u6743\u8054\u7CFB\u65B9\u5F0F\u80FD\u529B" }
-      ],
-      willNotGet: ["\u8BFB\u53D6\u5168\u90E8\u90AE\u7BB1", "\u8BFB\u53D6\u901A\u8BAF\u5F55", "\u7FA4\u53D1\u6D88\u606F", "\u81EA\u52A8\u652F\u4ED8/\u8F6C\u8D26", "\u4EE3\u8868\u4F60\u7B7E\u7F72\u5408\u540C", "\u62FF\u5230\u624B\u673A\u53F7/\u90AE\u7BB1\u660E\u6587"],
-      deviceSigning: opts.deviceSigning
+  function createGroup(name10, deps = {}) {
+    const req = { ...emptyTaskActionRequest("group_create"), groupRef: String(name10 || "").trim() };
+    return executeTaskAction(req, deps);
+  }
+  async function loadBoard(deps = {}) {
+    const base6 = await baseOf(deps);
+    if (!base6) return { ok: false, code: "desktop_offline", error: "\u770B\u677F\u9700\u8981\u7535\u8111\u7AEF\u5728\u7EBF (\u516C\u544A\u677F\u5728\u684C\u9762\u8282\u70B9\u4E0A)", note: OFFLINE_NOTE };
+    const now = deps.now ? deps.now() : Date.now();
+    try {
+      const r = await getJson(base6, "/api/mobile/tasks/board", fetchOf(deps));
+      if (r.status !== 200 || !r.json?.ok) return mapFail(r, "\u8BFB\u770B\u677F");
+      return { ok: true, data: buildBoardView(r.json, now) };
+    } catch (e) {
+      return { ok: false, code: "desktop_offline", error: `\u684C\u9762\u4E0D\u53EF\u8FBE: ${String(e?.message || e).slice(0, 120)}`, note: OFFLINE_NOTE };
+    }
+  }
+  function publishAnnouncement(input, deps = {}) {
+    const req = {
+      ...emptyTaskActionRequest("announce_publish"),
+      capability: String(input.capability || "").trim(),
+      instruction: String(input.instruction || ""),
+      budgetHuman: String(input.budgetHuman || "").trim(),
+      currency: String(input.currency || "USDC").toUpperCase(),
+      deadline: input.deadline ? String(input.deadline).trim() : null
+    };
+    return executeTaskAction(req, deps);
+  }
+  function announceIntoGroup(input, deps = {}) {
+    const req = {
+      ...emptyTaskActionRequest("announce_to_group"),
+      groupRef: String(input.groupRef || "").trim(),
+      announcementId: String(input.announcementId || "").trim(),
+      round: input.round ? String(input.round) : null,
+      criteria: input.criteria ? String(input.criteria) : null
+    };
+    return executeTaskAction(req, deps);
+  }
+  function postTrail(input, deps = {}) {
+    const req = {
+      ...emptyTaskActionRequest("trail_post"),
+      groupRef: String(input.groupRef || "").trim(),
+      announcementId: String(input.announcementId || "").trim(),
+      round: input.round ? String(input.round) : null,
+      price: input.price ? String(input.price) : null,
+      hash: input.hash ? String(input.hash) : null,
+      bytes: typeof input.bytes === "number" ? input.bytes : null,
+      checks: input.checks ? String(input.checks) : null,
+      verdict: input.verdict ? String(input.verdict) : null,
+      trailKind: input.kind
     };
+    return executeTaskAction(req, deps);
+  }
+  async function loadTrail(input, deps = {}) {
+    const base6 = await baseOf(deps);
+    if (!base6) return { ok: false, code: "desktop_offline", error: "\u8BFB\u7FA4\u75D5\u8FF9\u9700\u8981\u7535\u8111\u7AEF\u5728\u7EBF", note: OFFLINE_NOTE };
+    const q = new URLSearchParams();
+    q.set("group", String(input.groupRef || "").trim());
+    if (input.announcementId) q.set("announcementId", String(input.announcementId));
+    if (input.limit) q.set("limit", String(input.limit));
+    try {
+      const r = await getJson(base6, `/api/mobile/tasks/trail?${q.toString()}`, fetchOf(deps));
+      if (r.status !== 200 || !r.json?.ok) return mapFail(r, "\u8BFB\u7FA4\u75D5\u8FF9");
+      return { ok: true, data: buildTrailView(r.json.summary || r.json) };
+    } catch (e) {
+      return { ok: false, code: "desktop_offline", error: `\u684C\u9762\u4E0D\u53EF\u8FBE: ${String(e?.message || e).slice(0, 120)}`, note: OFFLINE_NOTE };
+    }
+  }
+  async function loadFlywheel(deps = {}) {
+    const base6 = await baseOf(deps);
+    if (!base6) return { ok: false, code: "desktop_offline", error: "\u770B\u98DE\u8F6E\u8FDB\u5EA6\u9700\u8981\u7535\u8111\u7AEF\u5728\u7EBF (Goal \u8BB0\u5F55\u5728\u684C\u9762\u8282\u70B9\u4E0A)", note: OFFLINE_NOTE };
+    try {
+      const r = await getJson(base6, "/api/mobile/tasks/flywheel", fetchOf(deps));
+      if (r.status !== 200 || !r.json?.ok) return mapFail(r, "\u8BFB\u98DE\u8F6E\u8FDB\u5EA6");
+      const goals = Array.isArray(r.json.goals) ? r.json.goals : [];
+      const leaks = findInternalFieldLeaks(JSON.stringify(goals));
+      if (leaks.length) return { ok: false, code: "view_leak", error: `\u89C6\u56FE\u91CC\u542B\u5185\u90E8\u5B57\u6BB5 (${leaks.join(", ")}) \u2192 \u62D2\u7EDD\u6E32\u67D3` };
+      return { ok: true, data: { goals, hint: r.json.hint ? String(r.json.hint) : null } };
+    } catch (e) {
+      return { ok: false, code: "desktop_offline", error: `\u684C\u9762\u4E0D\u53EF\u8FBE: ${String(e?.message || e).slice(0, 120)}`, note: OFFLINE_NOTE };
+    }
+  }
+  function setTaskHint(text, storage2 = defaultStorage2()) {
+    try {
+      storage2.setItem(K_TASKS_HINT, String(text || "").slice(0, 160));
+    } catch {
+    }
+  }
+  function getTaskHint(storage2 = defaultStorage2()) {
+    try {
+      return String(storage2.getItem(K_TASKS_HINT) || "");
+    } catch {
+      return "";
+    }
   }
 
   // src/web/mobile-core.ts
@@ -164259,6 +164883,66 @@ ${b}
         return snap && Array.isArray(snap.skills) ? snap.skills : [];
       }
     },
+    /**
+     * 任务协作 (2026-09-25) — 手机与桌面/CLI 共用同一套存储与协议:
+     *   入群 (`task group …`) · 发公告 (`task publish/announce/post`) · 看飞轮进度 (goal-flywheel 冻结类型, 只读)
+     * 四个高风险动作 (入群/退群/建群/发公告/留痕) 一律**先签设备名再由桌面验签执行** —— 手机不自己执行、不记账。
+     * 桌面不可达 → 明确失败 (任务动作**不进离线队列**: 几小时后突然生效的批准比失败更危险)。
+     */
+    tasks: {
+      /** 本机能不能签 (老 WebView 没 Ed25519 → 高风险动作一律拒, 不降级) */
+      deviceSigning() {
+        return ed25519Available();
+      },
+      /** 桌面基址 (拿不到 → null, 不猜) */
+      async desktopBase() {
+        return core.contacts.desktopBase();
+      },
+      deps() {
+        return { storage: core.contacts.storage(), ownerDid: void 0, grantedBy: "leo" };
+      },
+      /** ① 群: 列本机已加入的群 (脱敏, 只给缩短 id/群名/时间) */
+      listGroups: () => listGroups(core.tasks.deps()),
+      /** ① 入群 (高风险: 展示待发内容 → 设备签名 → 桌面验签执行) */
+      joinGroup: (link) => joinGroup(link, core.tasks.deps()),
+      /** ① 退群 (高风险) */
+      leaveGroup: (ref) => leaveGroup(ref, core.tasks.deps()),
+      /** ① 建群 (高风险; 建完自动入群) */
+      createGroup: (name10) => createGroup(name10, core.tasks.deps()),
+      /** ② 看板 (只读; 与 CLI `task board` 同一份事实) */
+      loadBoard: () => loadBoard(core.tasks.deps()),
+      /** ② 发布公告 (高风险) */
+      publishAnnouncement: (input) => publishAnnouncement(input, core.tasks.deps()),
+      /** ② 把公告发进群 (高风险; 预览 → 确认 → 签名) */
+      announceIntoGroup: (input) => announceIntoGroup(input, core.tasks.deps()),
+      /** ② 过程留痕 (高风险: claim/deliver/screen/final) */
+      postTrail: (input) => postTrail(input, core.tasks.deps()),
+      /** ② 读群里的一期痕迹 (只读) */
+      loadTrail: (input) => loadTrail(input, core.tasks.deps()),
+      /** 预览群消息那一行 (由桌面同一个构造器生成) */
+      previewGroupMessage: (req) => previewGroupMessage(req, core.tasks.deps()),
+      /** ③ 飞轮进度 (只读消费 goal-flywheel 冻结类型; 投影在桌面做) */
+      loadFlywheel: () => loadFlywheel(core.tasks.deps()),
+      /** 确认页文案 (展示待发内容) */
+      describeConfirm: (kind, req) => describeTaskActionForConfirm(kind, req),
+      /** 直接执行一个已构造好的请求 (UI 的统一入口: 签名 → 桌面验签执行) */
+      execute: (req) => executeTaskAction(req, core.tasks.deps()),
+      /** 相对时间人话 (毫秒差 → 双语; 只用于写文字节点) */
+      relative: (ms2, lang) => formatRelative(ms2, lang === "en" ? "en" : "zh"),
+      /** id 缩短 (页面上不出现原文) */
+      shorten: (id, n) => shortId(id, n),
+      /** 公开文本红线 (UI 最后一道自检: 渲染前扫一遍, 命中就不显示原文) */
+      scanText: (text) => scanPublicText(String(text ?? "")),
+      /** 构造一个空请求 (UI 填字段用) */
+      emptyRequest: (kind) => emptyTaskActionRequest(kind),
+      /** 最近一条操作提示 */
+      hint() {
+        return getTaskHint(core.contacts.storage());
+      },
+      setHint(text) {
+        setTaskHint(text, core.contacts.storage());
+      }
+    },
     message: {
       async send({ text, channelId }) {
         if (!text || !channelId) return { ok: false, error: "text \u548C channelId \u5FC5\u586B" };