@ghostlytools/cli 1.0.1 → 1.0.2

package/dist/ghostly.mjs

@@ -50,7 +50,7 @@ var __exportAll = (all, no_symbols) => {
 };
 var package_default = {
 	name: "@ghostlytools/cli",
-	version: "1.0.1",
+	version: "1.0.2",
 	type: "module",
 	description: "Ghostly for bots and terminals: the app's own engine, headless on Node, behind a daemon and a `ghostly` command with JSON output.",
 	license: "MIT",
@@ -94,7 +94,7 @@ var package_default = {
 		"@scure/bip39": "2.4.0",
 		"@scure/btc-signer": "2.4.1",
 		"@secondts/bark": "0.25.0",
-		"@synonymdev/pubky": "0.13.0",
+		"@synonymdev/pubky": "0.14.0",
 		"@tetherto/wdk-wallet-evm": "1.0.0-beta.19",
 		"b4a": "1.9.0",
 		"bittorrent-dht": "11.0.12",
@@ -4032,7 +4032,87 @@ var LinkSession = class {
 	}
 };
 //#endregion
-//#region ../core/src/datalink.ts
+//#region ../core/src/directPath.ts
+/** Evidence older than this says nothing about the network now. */
+var DIRECT_EVIDENCE_MS = 18e5;
+/** Server reflexive candidates on one address with this many different ports: a mapping per destination. */
+var SYMMETRIC_PORTS = 3;
+/**
+* Whether a local description shows a NAT that maps each destination apart: the app asks several STUN servers from one
+* socket, and a NAT that keeps one mapping answers with one address and port (the browser lists it once). Three ports
+* on one address, not two: a device on two interfaces behind one router (Wi-Fi and a cable) has two.
+*/
+function symmetricNat(sdp) {
+	const ports = /* @__PURE__ */ new Map();
+	for (const [, address, port] of (sdp ?? "").matchAll(/^a=candidate:\S+ \d+ udp \d+ (\S+) (\d+) typ srflx\b/gim)) {
+		const seen = ports.get(address) ?? /* @__PURE__ */ new Set();
+		ports.set(address, seen.add(port));
+	}
+	return [...ports.values()].some((seen) => seen.size >= SYMMETRIC_PORTS);
+}
+/** The rule alone: whether `failures` (every one after the last `open`) say direct connections are blocked at `now`. */
+function directBlocked(failures, now) {
+	const fresh = failures.filter((f) => now - f.at < DIRECT_EVIDENCE_MS);
+	if (fresh.filter((f) => f.kind !== "no-path").length >= 2) return true;
+	return new Set(fresh.map((f) => f.peer)).size >= 3;
+}
+var DirectPathWatch = class {
+	onChange;
+	now;
+	failures = [];
+	/** Contacts a WebRTC connection is open with now. */
+	open = /* @__PURE__ */ new Set();
+	was = false;
+	timer = null;
+	/** `onChange`: `blocked` changed (evidence came, a connection opened, the network changed, the evidence aged out). */
+	constructor(onChange = () => {}, now = Date.now) {
+		this.onChange = onChange;
+		this.now = now;
+	}
+	/** One WebRTC attempt with `peer` ended this way (or its open connection closed). */
+	note(peer, evidence) {
+		if (evidence === "open") {
+			this.open.add(peer);
+			this.failures = [];
+		} else if (evidence === "closed") this.open.delete(peer);
+		else this.failures = [...this.failures, {
+			peer,
+			kind: evidence,
+			at: this.now()
+		}].slice(-64);
+		this.settle();
+	}
+	/** The network changed: what failed on the old one says nothing about this one. */
+	reset() {
+		this.failures = [];
+		this.settle();
+	}
+	get blocked() {
+		return !this.open.size && directBlocked(this.failures, this.now());
+	}
+	/** Stops the timer that lets the evidence age out. */
+	close() {
+		if (this.timer) clearTimeout(this.timer);
+		this.timer = null;
+	}
+	settle() {
+		this.close();
+		const blocked = this.blocked;
+		if (blocked) {
+			const oldest = Math.min(...this.failures.map((f) => f.at));
+			this.timer = setTimeout(() => {
+				this.failures = this.failures.filter((f) => this.now() - f.at < DIRECT_EVIDENCE_MS);
+				this.settle();
+			}, Math.max(1e3, oldest + DIRECT_EVIDENCE_MS - this.now()));
+			this.timer.unref?.();
+		}
+		if (blocked === this.was) return;
+		this.was = blocked;
+		this.onChange(blocked);
+	}
+};
+/** A candidate another network can reach: server reflexive (STUN answered), relayed (TURN), or learnt from the peer. */
+var PUBLIC_CANDIDATE = /^a=candidate:.* typ (srflx|relay|prflx)\b/m;
 var CONNECT_TIMEOUT_MS = 9e4;
 var ICE_GATHERING_TIMEOUT_MS = 5e3;
 /**
@@ -4052,6 +4132,8 @@ var DataLink = class {
 	lastSignalTs = 0;
 	/** The peer's description as this connection was given it: Chrome shows it as `remoteDescription` only once applied. */
 	remoteSdp = null;
+	/** When the connection had both descriptions (`connecting`). */
+	connectingSince = 0;
 	connectTimer = null;
 	disconnectTimer = null;
 	/** The offer this side answered in the current attempt, and how many times it answered it again. */
@@ -4093,7 +4175,10 @@ var DataLink = class {
 			this.lastSignalTs = signal.ts;
 			const wasOpen = this.state === "open";
 			this.teardown();
-			if (wasOpen) this.options.onClose();
+			if (wasOpen) {
+				this.options.onDirect?.("closed");
+				this.options.onClose();
+			}
 			this.answered = {
 				offer: signal,
 				again: 0
@@ -4134,8 +4219,20 @@ var DataLink = class {
 		}
 	}
 	close() {
+		const evidence = Date.now() - this.connectingSince >= 5e3 ? this.directEvidence() : null;
 		this.answered = null;
 		this.reset();
+		if (evidence) this.options.onDirect?.(evidence);
+	}
+	/**
+	* What this attempt says about direct connections if it ends now without opening: nothing unless both descriptions
+	* were exchanged (this side's offer answered, or its answer out). Then, what this device gathered: no public
+	* candidate, a public port per STUN server, or (for the side that offered) candidates that read as reachable.
+	*/
+	directEvidence() {
+		if (this.state !== "connecting" || !this.pc) return null;
+		const local = this.pc.localDescription?.sdp ?? "";
+		return !PUBLIC_CANDIDATE.test(local) ? "no-public" : symmetricNat(local) ? "symmetric" : this.myOfferTs ? "no-path" : null;
 	}
 	/**
 	* The attempt on this connection failed (it timed out, ICE failed or closed, its channel closed). An answer the
@@ -4145,6 +4242,7 @@ var DataLink = class {
 	failed() {
 		const answered = this.state === "connecting" ? this.answered : null;
 		const left = answered ? CONNECT_TIMEOUT_MS - (Date.now() - answered.offer.ts) : 0;
+		const evidence = this.directEvidence();
 		if (answered && answered.again < 2 && left > REANSWER_MARGIN_MS && this.options.offerStanding?.(answered.offer.ts)) {
 			answered.again++;
 			traceLink(this.options.myPubKeyZ32, "reanswer", {
@@ -4156,6 +4254,7 @@ var DataLink = class {
 			return;
 		}
 		this.reset();
+		if (evidence) this.options.onDirect?.(evidence);
 	}
 	async answer(offer) {
 		this.setState("answering");
@@ -4213,6 +4312,7 @@ var DataLink = class {
 			});
 			if (attempt >= 3) {
 				this.reset();
+				this.options.onDirect?.("no-public");
 				return null;
 			}
 			stalled = pc;
@@ -4233,6 +4333,7 @@ var DataLink = class {
 			this.setState("open");
 			this.options.setFastPoll(false);
 			this.options.publishSignal(null);
+			this.options.onDirect?.("open");
 			this.options.onOpen(wrapDataChannel(dc));
 		});
 		dc.addEventListener("close", () => {
@@ -4295,11 +4396,15 @@ var DataLink = class {
 		this.setState("idle");
 		this.options.setFastPoll(false);
 		this.options.publishSignal(null);
-		if (wasOpen) this.options.onClose();
+		if (wasOpen) {
+			this.options.onDirect?.("closed");
+			this.options.onClose();
+		}
 	}
 	setState(state) {
 		if (this.state === state) return;
 		this.state = state;
+		if (state === "connecting") this.connectingSince = Date.now();
 		this.options.onState?.(state);
 	}
 };
@@ -4575,19 +4680,43 @@ function verifyChain(raw, groupId) {
 //#endregion
 //#region ../core/src/messageTime.ts
 /**
-* How far ahead of this device's clock a received message may say it was sent: clocks drift, but a time past this
-* is the peer's choice, not its clock.
+* How far ahead of this device's clock a number a peer made from its clock may be (a pin's number, a status card's
+* times): clocks drift, but a time past this is the peer's choice, not its clock.
 */
 var MESSAGE_CLOCK_SKEW_MS = 3e5;
 /**
-* The time a received message is kept under. A peer picks the `ts` of what it sends, and one far in the future
-* would pin its chat to the top of the list (and past 8.64e15 ms no date can hold it): it is taken as the moment
-* of receipt at the latest. A time that is not a positive number is taken as now.
+* The time a line of a group's history is kept under (a membership change, a rename): what its commit says, but at
+* most `MESSAGE_CLOCK_SKEW_MS` past this clock, and now when it is not a positive number. Messages do not use it:
+* they are placed where they arrive (below).
 */
 function receivedTimestamp(ts, now = Date.now()) {
 	if (!Number.isFinite(ts) || ts <= 0) return now;
 	return Math.min(ts, now + MESSAGE_CLOCK_SKEW_MS);
 }
+/** The latest moment a date can hold. */
+var MAX_DATE_MS = 864e13;
+/** The time a sender says, as it is kept: a positive time a date can hold, or nothing. */
+function claimedTime(ts) {
+	return typeof ts === "number" && Number.isFinite(ts) && ts > 0 && ts <= MAX_DATE_MS ? ts : void 0;
+}
+/**
+* The place of a row stored now: this clock, and past the last place given in its chat, so rows that come in the
+* same millisecond (a hold pickup, a group's catch-up) keep the order they came in.
+*/
+function arrivalKey(now, last = 0) {
+	return Math.max(now, last + 1);
+}
+/** The time a message shows: what its sender said, never later than when it came. A row of mine shows its own time. */
+function shownTime(message) {
+	return message.sentAt === void 0 ? message.timestamp : Math.min(message.sentAt, message.timestamp);
+}
+/**
+* When something a peer dated happened (an edit), for this device: what the peer says, now at the latest, and now
+* when it says nothing a date can hold.
+*/
+function heardTime(ts, now = Date.now()) {
+	return Math.min(claimedTime(ts) ?? now, now);
+}
 //#endregion
 //#region ../core/src/statusCards.ts
 var STATUS_CARD_LIMITS = {
@@ -6945,6 +7074,10 @@ var PairedFiles = class {
 		this.channel = channel;
 		this.events = events;
 	}
+	/** A file going either way on this session right now. */
+	get busy() {
+		return this.incoming.size > 0 || this.outgoing.size > 0;
+	}
 	sendFrame(frame) {
 		if (this.closed) throw new Error("Connection lost");
 		this.channel.send(JSON.stringify(frame));
@@ -7196,6 +7329,31 @@ var TRANSPORTS = [
 	"hyperdht/1",
 	"webrtc/1"
 ];
+function irohRelayUrl(value, spelling = "dotted") {
+	let url;
+	try {
+		url = new URL(value);
+	} catch {
+		return value;
+	}
+	const host = url.hostname, name = host.replace(/\.$/, "");
+	if (!name.includes(".") && name !== "localhost") return value;
+	if (name.startsWith("[") || /^\d+(\.\d+){3}$/.test(name)) return value;
+	const wanted = spelling === "plain" || name === "localhost" ? name : `${name}.`;
+	if (wanted === host) return value;
+	url.hostname = wanted;
+	return url.href;
+}
+/** An Iroh descriptor with its relay in one spelling (`irohRelayUrl`); anything else as it is. */
+function irohDescriptor(descriptor, spelling = "dotted") {
+	const relay = descriptor?.relay;
+	if (typeof relay !== "string") return descriptor;
+	const canonical = irohRelayUrl(relay, spelling);
+	return canonical === relay ? descriptor : {
+		...descriptor,
+		relay: canonical
+	};
+}
 /**
 * Relay only (WISP 100, "Relayed"): the transport reaches this contact only through a relay server, never
 * directly. A descriptor says so with `relayed: true`, and an Iroh descriptor with no direct address is relayed
@@ -10044,7 +10202,7 @@ function vapidKeysMatch(keys) {
 }
 /**
 * The push services a browser subscribes with: Google (Chrome, Edge on Android, Brave, Opera), Apple (Safari), Mozilla
-* (Firefox), Microsoft (Edge on Windows). The same list as the push relay's (services/push-relay/relay.mjs).
+* (Firefox), Microsoft (Edge on Windows). The same list as the push relay's (infra/services/push-relay/relay.mjs).
 */
 var PUSH_SERVICE_HOSTS = [
 	/^fcm\.googleapis\.com$/,
@@ -11633,6 +11791,13 @@ function parsePairedCallFrame(frame, now = Date.now()) {
 	if (typeof signal !== "string" || signal.length > 8192) return null;
 	return parseCallSignal(signal, now) ? signal : null;
 }
+function signalKind(signal) {
+	try {
+		return JSON.parse(signal).t;
+	} catch {
+		return;
+	}
+}
 /**
 * This side's latest call signal. What could not go (the session dropped between two frames) goes on the
 * next session while it is still fresh, as the `_call` record of a compatibility chat is read on the next
@@ -11641,11 +11806,16 @@ function parsePairedCallFrame(frame, now = Date.now()) {
 var PairedCalls = class {
 	now;
 	latest = null;
+	/** When this side last said anything about a call, a clear included. */
+	saidAt = 0;
+	/** The contact's latest signal on a session: its kind, and when it came. */
+	peer = null;
 	constructor(now = Date.now) {
 		this.now = now;
 	}
 	/** A new signal to send (null clears it). Returns the frame to send now, if any. */
 	set(signal) {
+		this.saidAt = this.now();
 		if (signal === null) {
 			this.latest = null;
 			return null;
@@ -11653,13 +11823,34 @@ var PairedCalls = class {
 		if (signal.length > 8192) throw new Error("Call signal too large");
 		this.latest = {
 			signal,
-			at: this.now()
+			at: this.saidAt
 		};
 		return {
 			t: PAIRED_CALL_FRAME,
 			s: signal
 		};
 	}
+	/** A signal the contact sent (one `parsePairedCallFrame` took). */
+	heard(signal) {
+		this.peer = {
+			kind: signalKind(signal),
+			at: this.now()
+		};
+	}
+	/**
+	* Whether a call is on, as the latest signal of either side says: an answer or a picture change, or an offer still
+	* fresh enough to ring. A hang-up, a clear, or an offer nobody answered in time ends it. Read by kind, as `hangUp` is:
+	* the media runs on a connection of its own, so an hour-long call shows nothing else on the session.
+	*/
+	get on() {
+		const own = {
+			kind: this.latest ? signalKind(this.latest.signal) : "h",
+			at: this.saidAt
+		};
+		const last = this.peer && this.peer.at > own.at ? this.peer : own;
+		if (last.kind === "a" || last.kind === "v") return true;
+		return last.kind === "o" && this.now() - last.at <= 12e4;
+	}
 	/**
 	* This app is going away: a call it placed or answered is hung up, as its person would (its latest signal an
 	* offer, an answer, or a picture change, which only a call on sends). Returns the hang-up to send before the
@@ -11799,14 +11990,16 @@ function unpack(bytes, withLoad, max) {
 /**
 * The hubs that take turns at the door (WISP 9xx § Admission): those that said so lately and have
 * been hubs for a minute, so that every hub, having read the beacon at least once since, agrees on
-* the same set. Only when there is none, every hub that said so lately. And when none did, a hub asking (`me`)
+* the same set. Only when there is none (a group's first minute), the one that has been a hub longest. And when none said so lately, a hub asking (`me`)
 * that sees no other fresh hub in the beacon is the door alone, listed or not: its own entry may not have reached the
 * relays yet (a new group's first hub, whose write the relays' budget holds back), and there is nobody to agree with.
 */
 function doorHubs(hubs, now = Date.now(), me) {
 	const lately = hubs.filter((h) => now - h.ts < COMMUNITY_TOPOLOGY.beaconEveryMs * 1.5);
 	const settled = lately.filter((h) => now - (h.since ?? h.ts) >= 6e4);
-	const door = (settled.length ? settled : lately).map((h) => h.key);
+	const since = (h) => Math.floor((h.since ?? h.ts) / 1e3);
+	const first = [...lately].sort((a, b) => since(a) - since(b) || (a.key < b.key ? -1 : 1)).slice(0, 1);
+	const door = (settled.length ? settled : first).map((h) => h.key);
 	if (door.length || me === void 0 || freshHubs(hubs, now).some((h) => h.key !== me)) return door;
 	return [me];
 }
@@ -12222,6 +12415,20 @@ var RACE_DIRECT_MS = 8e3;
 * over a relay stays there (no probing while live, WISP 100), where the answer would have made it direct.
 */
 var RACE_RELAYED_MS = 4e4;
+/**
+* A WebRTC offer this side made that was answered, and has not connected this long after the answer was applied: where
+* a path exists ICE finds it in a second or two, so there is none (a VPN's NAT, a firewall that drops UDP, and no TURN
+* server), and every transport ranked after WebRTC is dialled now, the relayed ones too, the attempt still standing.
+* Without it the chat waited for ICE to give up (about 15 s in Chromium, the attempt's 90 s where the connection never
+* says `failed`), then for the next attempt.
+*/
+var RACE_ANSWERED_MS = 6e3;
+/**
+* WebRTC that could not start an attempt at all (no candidate gathered: UDP blocked, a VPN's browser extension; or no
+* connection could be made) is tried last for this long: each try costs its stall time (`GATHER_STALL_MS` three times
+* over) before the transport that works is dialled.
+*/
+var RTC_UNSTARTED_MS = 6e5;
 /** A transport due in the race that cannot be dialled yet (its endpoint still starting, no address of the contact's) is looked at again this often. */
 var RACE_RETRY_MS = 2e3;
 var DEMOTE_MS = 36e5;
@@ -12249,6 +12456,35 @@ var LIVENESS_PING_MS = 15e3;
 */
 var SWITCH_RETIRE_MS = 3e3;
 /**
+* Frames that keep a session going rather than say something of the two people's: what the contact sent last outside
+* these is when the chat was last in use (`canYieldEndpoint`). Every other frame (a text, a receipt, typing, a
+* reaction, an edit, a file, a call, a payment) is use; what this side sends is answered with one of them.
+*/
+/** How long a session giving its listener up waits after its goodbye before it closes, so the goodbye gets there. */
+var YIELD_BYE_MS = 300;
+var QUIET_FRAMES = /* @__PURE__ */ new Set([
+	"paired-ping",
+	"paired-pong",
+	"paired-bye",
+	"paired-policy",
+	"paired-switch-plan",
+	"paired-switch-ready",
+	"paired-switch-failed",
+	"paired-switch-keep",
+	"paired-rtc",
+	"paired-adapters",
+	"paired-nick",
+	"paired-avatar",
+	"paired-capabilities",
+	"paired-wake",
+	"paired-hold",
+	"paired-payments",
+	"paired-groups",
+	"paired-services",
+	"paired-reconnect",
+	"paired-reconnect-ack"
+]);
+/**
 * A ping with nothing at all back this long after it went: the contact may have crashed and started again, with its new
 * offer waiting on the relays, while this side still holds the old session and reads them at a live chat's pace (30 s).
 * They are read now. Nothing more: the session is let go only by `LIVENESS_MISSED_PINGS`, or by the contact's offer
@@ -12300,7 +12536,8 @@ function recordDescriptor(transport, known, record, newer, listed) {
 	if (!known) return record;
 	const k = known, r = record;
 	if (transport === "iroh/1" ? k.id !== r.id : k.publicKey !== r.publicKey) return newer ? record : known;
-	if (!r.relay || r.relay === k.relay || k.relay && !newer) return known;
+	const same = r.relay === k.relay || transport === "iroh/1" && typeof r.relay === "string" && typeof k.relay === "string" && irohRelayUrl(r.relay) === irohRelayUrl(k.relay);
+	if (!r.relay || same || k.relay && !newer) return known;
 	return transport === "iroh/1" ? {
 		...k,
 		relay: r.relay
@@ -12440,6 +12677,14 @@ var GhostLink = class {
 	racing = false;
 	/** The WebRTC offer this side's dial made last, with fallback allowed: what a transport that comes up meanwhile joins. */
 	offered;
+	/** When that offer's answer was applied (`RACE_ANSWERED_MS`); 0 while the data link is not connecting on it. */
+	answeredAt = 0;
+	/** This side's offer is out unanswered, or answered and not connected yet: what is ranked after WebRTC may race it. */
+	get offerOut() {
+		return this.dataLink.state === "offering" || this.dataLink.state === "connecting" && this.answeredAt > 0;
+	}
+	/** The attempt (`connectionEpoch`) in which the data link began answering the contact's offer. */
+	answeringEpoch = -1;
 	lastAutoConnectAt = 0;
 	autoConnectFailures = 0;
 	/** Native transports a record just read listed with no way to dial them (`record-undescribed`), until one describes them again. */
@@ -12459,6 +12704,10 @@ var GhostLink = class {
 	peerSeenAt = 0;
 	/** When the channel carrying the chat now was attached. */
 	channelSince = 0;
+	/** When the contact last sent something other than the session's upkeep (`QUIET_FRAMES`) on a session. */
+	activityAt = 0;
+	/** Set while `yieldEndpoint` ends the session to let its listener go: nothing dials meanwhile. */
+	yielding = false;
 	/**
 	* The contact said goodbye on the live session (`paired-bye`): its app is going away, likely to restart. Its packet
 	* then was `packet`; it is dialled again once a newer one shows it back, or after `until`.
@@ -12660,6 +12909,7 @@ var GhostLink = class {
 			setFastPoll: (fast, offer) => this.session.setFastPoll(fast, !!offer && !!options.pairing?.credentials.peerKey),
 			offerStanding: (ts) => !this.leaving && !this.stopped && !this.streamBlocked && this.peerOfferTs() === ts,
 			onAnswerReplaced: () => this.redial(),
+			onDirect: (evidence) => events.onDirectEvidence?.(evidence),
 			onOpen: (channel) => {
 				if (this.streamBlocked || this.keyStopped) {
 					channel.close();
@@ -12677,12 +12927,21 @@ var GhostLink = class {
 				if (wasLive) this.peerLost("closed");
 			},
 			onState: (state) => {
+				const was = this.lastDataLinkState;
 				traceLink(this.myPubKeyZ32, "datalink", { state });
 				this.trackDataLink(state);
 				if (this.activeBinding) return;
 				events.onDataLinkState?.(state);
 				if (state === "open") this.afterRtc = void 0;
+				if (state === "answering") this.answeringEpoch = this.connectionEpoch;
+				this.answeredAt = 0;
+				if (state === "connecting" && was === "offering" && this.offered?.epoch === this.connectionEpoch) {
+					this.answeredAt = Date.now();
+					this.scheduleRace(this.offered.epoch, this.offered.at);
+				}
 				if (state !== "idle") return;
+				const unanswerable = was === "answering" && this.answeringEpoch === this.connectionEpoch && !this.channel && !this.stopped && !this.leaving;
+				if (unanswerable) this.rtcUnstarted();
 				this.clearRace();
 				if (this.racing) return;
 				const next = this.afterRtc;
@@ -12695,6 +12954,7 @@ var GhostLink = class {
 				this.afterRtc = void 0;
 				if (!this.dialing) this.attemptEnded();
 				this.rejectWaiters(new GhostlyHttpError("unreachable", "Could not connect to the peer"));
+				if (unanswerable && this.dialsPastRtc()) this.redial();
 			},
 			attemptTimeoutMs: () => this.tracker && !this.tracker.done ? PAIRING_ATTEMPT_MS : void 0,
 			onDisconnected: (disconnected) => {
@@ -13542,6 +13802,46 @@ var GhostLink = class {
 		this.advertiseTransports();
 		this.options.events?.onTransportsChanged?.();
 	}
+	/** When the chat was last in use on its session: the contact's last frame of use, or the session's start. */
+	get lastActivityAt() {
+		return Math.max(this.activityAt, this.channelSince);
+	}
+	/**
+	* Whether the live session on this transport may end so another chat takes its listener (`yieldEndpoint`): open, and
+	* unused, for `idleMs` at least (a session that just started has been in use for none of it); no call on, no file
+	* moving, nothing being dialled or switched. `canReleaseEndpoint` never gives up a live session; this does, once idle.
+	*/
+	canYieldEndpoint(transport, idleMs) {
+		if (this.activeBinding?.transport !== transport || !this.isDataLinkOpen || this.paired?.state.status !== "ready") return false;
+		if (this.candidate || this.dialing || this.switcher.pending || this.transitionTarget) return false;
+		if (this.pairedCalls.on || this.pairedFiles?.busy) return false;
+		return Date.now() - this.lastActivityAt >= idleMs;
+	}
+	/**
+	* Ends the idle live session on this transport and lets its listener go, for a chat in use that found every one
+	* taken. The contact hears a goodbye, as when an app quits, rather than finding out when its pings go unanswered; the
+	* record then lists the transport undescribed, so it stops dialling here. The chat goes on over the DHT (or WebRTC),
+	* and takes a listener again the same way once it is in use. False when the session may not end (see above).
+	*/
+	async yieldEndpoint(transport, idleMs) {
+		if (!this.canYieldEndpoint(transport, idleMs)) return false;
+		traceLink(this.myPubKeyZ32, "native-yield", {
+			transport,
+			idle: Date.now() - this.lastActivityAt
+		});
+		this.yielding = true;
+		try {
+			try {
+				this.channel?.send(JSON.stringify({ t: "paired-bye" }));
+			} catch {}
+			await new Promise((resolve) => setTimeout(resolve, YIELD_BYE_MS));
+			this.disconnect();
+			await this.releaseEndpoint(transport);
+		} finally {
+			this.yielding = false;
+		}
+		return !this.endpoints.has(transport);
+	}
 	advertiseTransports() {
 		this.publishPacketTransports();
 		if (this.paired?.state.status !== "ready" || !this.options.params.profile) return;
@@ -13641,11 +13941,15 @@ var GhostLink = class {
 						at: offeredAt
 					} : void 0;
 					await this.dataLink.connect();
-					if (!this.afterRtc || this.dataLink.state !== "idle" || epoch !== this.connectionEpoch) {
+					if (this.dataLink.state !== "idle" || epoch !== this.connectionEpoch) {
 						this.scheduleRace(epoch, offeredAt);
 						return;
 					}
+					this.rtcUnstarted();
+					const next = this.afterRtc;
+					if (!next) return;
 					this.afterRtc = void 0;
+					for (const joined of next.rest) if (!ordered.includes(joined)) ordered.push(joined);
 					continue;
 				}
 				const result = await this.dialNative(transport, epoch);
@@ -13730,9 +14034,10 @@ var GhostLink = class {
 	scheduleRace(epoch, offeredAt) {
 		this.clearRace();
 		const next = this.afterRtc;
-		if (!next || next.epoch !== epoch || epoch !== this.connectionEpoch || this.dataLink.state !== "offering") return;
+		if (!next || next.epoch !== epoch || epoch !== this.connectionEpoch || !this.offerOut) return;
 		const relayed = this.relayedTransports, now = Date.now();
-		const at = next.rest.filter((t) => t !== "webrtc/1").map((t) => Math.max(offeredAt + (relayed.includes(t) ? RACE_RELAYED_MS : RACE_DIRECT_MS), this.canDial(t) ? 0 : now + RACE_RETRY_MS));
+		const answered = this.answeredAt ? this.answeredAt + RACE_ANSWERED_MS : Infinity;
+		const at = next.rest.filter((t) => t !== "webrtc/1").map((t) => Math.max(Math.min(offeredAt + (relayed.includes(t) ? RACE_RELAYED_MS : RACE_DIRECT_MS), answered), this.canDial(t) ? 0 : now + RACE_RETRY_MS));
 		if (!at.length) return;
 		this.raceTimer = setTimeout(() => {
 			this.raceTimer = null;
@@ -13745,7 +14050,7 @@ var GhostLink = class {
 	*/
 	joinRace(transport) {
 		const offered = this.offered;
-		if (!offered || offered.epoch !== this.connectionEpoch || this.dataLink.state !== "offering" || this.channel) return;
+		if (!offered || offered.epoch !== this.connectionEpoch || !this.offerOut || this.channel) return;
 		if (!this.peerFallback || !this.peerTransports?.includes(transport) || !this.transportOffer().includes(transport)) return;
 		const rest = this.afterRtc?.epoch === offered.epoch ? this.afterRtc.rest : [];
 		if (rest.includes(transport)) return;
@@ -13756,6 +14061,19 @@ var GhostLink = class {
 		traceLink(this.myPubKeyZ32, "race-join", { transport });
 		if (!this.racing) this.scheduleRace(offered.epoch, offered.at);
 	}
+	/** WebRTC could not start an attempt here: it goes last in the dial order for `RTC_UNSTARTED_MS`, while another transport remains. */
+	rtcUnstarted() {
+		traceLink(this.myPubKeyZ32, "rtc-unstarted", {});
+		this.demotedUntil.set("webrtc/1", Date.now() + RTC_UNSTARTED_MS);
+	}
+	/**
+	* Whether this side dials although its key says it waits for the contact's offer: WebRTC cannot start here for now
+	* (`rtcUnstarted`), so an offer of the contact's finds no answer, and this side has a native transport to dial, with
+	* fallback allowed on both sides.
+	*/
+	dialsPastRtc() {
+		return (this.demotedUntil.get("webrtc/1") ?? 0) > Date.now() && this.fallback && this.peerFallback && TRANSPORTS.some((t) => this.canDial(t) && !!this.peerTransports?.includes(t) && this.transportOffer().includes(t));
+	}
 	/** Whether a native dial of `transport` can go now: this side's endpoint is up and the contact's descriptor known. */
 	canDial(transport) {
 		return transport !== "webrtc/1" && this.endpoints.has(transport) && !!this.peerDescriptors[transport];
@@ -13771,8 +14089,9 @@ var GhostLink = class {
 	*/
 	async race(epoch, offeredAt) {
 		const next = this.afterRtc;
-		if (!next || next.epoch !== epoch || epoch !== this.connectionEpoch || this.channel || this.dialing || this.stopped || this.leaving || this.streamBlocked || this.keyStopped || this.dataLink.state !== "offering") return;
-		const relayed = this.relayedTransports, late = Date.now() - offeredAt >= RACE_RELAYED_MS;
+		if (!next || next.epoch !== epoch || epoch !== this.connectionEpoch || this.channel || this.dialing || this.stopped || this.leaving || this.streamBlocked || this.keyStopped || !this.offerOut) return;
+		const relayed = this.relayedTransports;
+		const late = Date.now() - offeredAt >= 4e4 || this.answeredAt > 0 && Date.now() - this.answeredAt >= 6e3;
 		const due = next.rest.filter((t) => this.canDial(t) && (late || !relayed.includes(t)));
 		const left = next.rest.filter((t) => t !== "webrtc/1" && !due.includes(t));
 		if (!due.length) {
@@ -14014,7 +14333,7 @@ var GhostLink = class {
 	* the lower-key rule settles any collision, on both sides.
 	*/
 	maybeAutoConnect(presence) {
-		if (this.stopped || this.leaving || this.streamBlocked || this.keyStopped || !this.options.autoConnect || !presence.online || this.channel || this.dialing || this.dataLink.state !== "idle") return;
+		if (this.stopped || this.leaving || this.yielding || this.streamBlocked || this.keyStopped || !this.options.autoConnect || !presence.online || this.channel || this.dialing || this.dataLink.state !== "idle") return;
 		if (this.resuming && this.resuming !== "webrtc/1" && !this.endpoints.has(this.resuming) && Date.now() < this.resumeWaitUntil) return;
 		if (this.departed) {
 			if (presence.lastPacketAt === this.departed.packet && Date.now() < this.departed.until) return;
@@ -14027,7 +14346,7 @@ var GhostLink = class {
 				this.session.expectPeer();
 				return;
 			}
-		} else if (role !== "joiner" && this.myPubKeyZ32 > this.options.params.peerPubKeyZ32 && !this.resuming) {
+		} else if (role !== "joiner" && this.myPubKeyZ32 > this.options.params.peerPubKeyZ32 && !this.resuming && !this.dialsPastRtc()) {
 			if (Date.now() - presence.lastPacketAt < 3e4 && presence.lastPacketAt !== this.offerAwaitedFor) {
 				this.offerAwaitedFor = presence.lastPacketAt;
 				this.session.expectPeer();
@@ -14954,6 +15273,7 @@ var GhostLink = class {
 					} catch {
 						return;
 					}
+					if (frame && typeof frame === "object" && !QUIET_FRAMES.has(String(frame.t))) this.activityAt = Date.now();
 					if (frame?.t === "paired-ping") {
 						try {
 							channel.send(JSON.stringify({ t: "paired-pong" }));
@@ -15125,6 +15445,7 @@ var GhostLink = class {
 					}
 					if (frame?.t === "paired-call") {
 						const signal = this.supportsCalls ? parsePairedCallFrame(frame) : null;
+						if (signal) this.pairedCalls.heard(signal);
 						if (signal) this.options.events?.onCallSignal?.(signal);
 						return;
 					}
@@ -15326,7 +15647,7 @@ var GhostLink = class {
 	* once, and the contact is watched closely for a while, since an app that went away is usually back in seconds.
 	*/
 	peerLost(why) {
-		if (this.stopped || this.leaving) return;
+		if (this.stopped || this.leaving || this.yielding) return;
 		traceLink(this.myPubKeyZ32, "peer-lost", { why });
 		this.lostUntil = Date.now() + WATCH_PEER_MS;
 		this.autoConnectFailures = 0;
@@ -20842,6 +21163,7 @@ var GroupSession = class {
 		if (frame.e > this.epoch) {
 			this.ask(from);
 			this.offerMeta(from, frame.mt);
+			this.handOwn(from, frame);
 			return;
 		}
 		if (frame.h !== commitHash(this.state.chain[frame.e])) {
@@ -20872,7 +21194,7 @@ var GroupSession = class {
 			secrets: secrets.slice(i, i + GROUP_LIMITS.secretsPerFrame)
 		});
 		const lacks = missingIn(frame, from);
-		for (const sent of this.state.sent) if (rosterHas(this.state.chain[sent.e].m, from) && lacks(sent)) this.hooks.send(from, sent);
+		this.handOwn(from, frame);
 		const asked = new Set(Array.isArray(frame.ask) ? frame.ask.filter((k) => typeof k === "string" && k !== from && k !== this.myKey && rosterHas(this.roster, k)) : []);
 		if (asked.size) {
 			for (const kept of this.state.relay ?? []) if (asked.has(kept.s) && this.state.chain[kept.e] && rosterHas(this.state.chain[kept.e].m, from) && lacks(kept)) this.hooks.send(from, kept);
@@ -20883,6 +21205,11 @@ var GroupSession = class {
 		}
 		this.offerMeta(from, frame.mt);
 	}
+	/** My own messages a member's sync says it lacks, from my bounded log, for the epochs it was a member of. */
+	handOwn(to, frame) {
+		const lacks = missingIn(frame, to);
+		for (const sent of this.state.sent) if (this.state.chain[sent.e] && rosterHas(this.state.chain[sent.e].m, to) && lacks(sent)) this.hooks.send(to, sent);
+	}
 	/** Sets (or, with null, removes) the group's picture: only the admin, signed under the current commit. */
 	setPicture(picture, now = Date.now()) {
 		return this.serialize(async () => {
@@ -20947,7 +21274,7 @@ var GroupSession = class {
 			for (const key of this.others) this.hooks.send(key, frame);
 		}
 		const change = groupMetaChange(before, meta, this.state.name);
-		if (change) this.hooks.metaChanged?.(this.myKey, change);
+		if (change) this.hooks.metaChanged?.(this.myKey, change, meta.ts);
 		this.hooks.changed();
 	}
 	/** My statement, to a member whose sync says it holds an older one (or none); nothing to an app that says nothing. */
@@ -20992,7 +21319,7 @@ var GroupSession = class {
 		this.state.meta = opened.meta;
 		await this.persist();
 		const change = !before && !rosterHas(commit.m, this.myKey) ? null : groupMetaChange(before, opened.meta, this.state.name);
-		if (change) this.hooks.metaChanged?.(s.by, change);
+		if (change) this.hooks.metaChanged?.(s.by, change, opened.meta.ts);
 		this.hooks.changed();
 		this.took({
 			t: "group-meta",
@@ -21715,12 +22042,44 @@ var CommunitySession = class {
 	}
 	/** Someone the chain took out (removed or left) and who is not back in. */
 	wasRemoved(key) {
-		if (rosterHas(this.roster, key)) return false;
+		return this.outIndex(key) >= 0;
+	}
+	/** When the chain took them out (the commit's time, by its signer's clock), if it did and they are not back in. */
+	outAt(key) {
+		const i = this.outIndex(key);
+		return i < 0 ? void 0 : this.state.chain[i].ts;
+	}
+	outIndex(key) {
+		if (rosterHas(this.roster, key)) return -1;
 		for (let i = this.state.chain.length - 1; i >= 0; i--) {
 			const c = this.state.chain[i];
-			if ((c.k === "remove" || c.k === "leave") && c.s === key) return true;
+			if ((c.k === "remove" || c.k === "leave") && c.s === key) return i;
 		}
-		return false;
+		return -1;
+	}
+	/**
+	* What someone the chain took out is told when it comes back (WISP 9xx § Leaving and removal): the commits from where
+	* it says it is (`sync`: its tip, or its locator) up to the one that took it out, and nothing after. Later commits
+	* are not its business (a `link` commit names the new entry key); no secret, no stored frame, no seed goes with them.
+	* Empty when it is a member, was never one, or already holds that commit.
+	*/
+	farewell(key, sync) {
+		if (!this.isMember) return [];
+		const chain = this.state.chain, out = this.outIndex(key);
+		if (out < 0) return [];
+		let start;
+		if (typeof sync.h === "string" && this.mainIndex.has(sync.h)) start = this.mainIndex.get(sync.h) + 1;
+		else {
+			const path = typeof sync.h === "string" && this.known.has(sync.h) ? this.pathToMain(sync.h) : null;
+			const common = (Array.isArray(sync.loc) ? sync.loc : []).find((x) => typeof x === "string" && this.mainIndex.has(x));
+			start = path ? this.mainIndex.get(this.known.get(path[0]).p) + 1 : common !== void 0 ? this.mainIndex.get(common) + 1 : Math.max(0, out + 1 - COMMUNITY_LIMITS.side);
+		}
+		return chain.slice(start, out + 1).map((commit) => ({
+			t: "group-commit",
+			v: 2,
+			g: this.id,
+			commit
+		}));
 	}
 	missing(sender) {
 		const entry = this.state.seen[sender]?.[seenKey$1(this.epoch, shortHash(this.topHash))];
@@ -22812,7 +23171,7 @@ var CommunitySession = class {
 		const frame = this.metaFrame();
 		if (frame) this.hooks.broadcast(frame);
 		const change = groupMetaChange(before, meta, this.state.name);
-		if (change) this.hooks.metaChanged?.(this.myKey, change);
+		if (change) this.hooks.metaChanged?.(this.myKey, change, meta.ts);
 		this.hooks.changed();
 	}
 	/** My statement sealed under my current epoch, when I hold its secret. */
@@ -22865,7 +23224,7 @@ var CommunitySession = class {
 		this.state.meta = opened.meta;
 		await this.persist();
 		const change = !before && !rosterHas(this.rosterAt(s.h) ?? [], this.myKey) ? null : groupMetaChange(before, opened.meta, this.state.name);
-		if (change) this.hooks.metaChanged?.(s.by, change);
+		if (change) this.hooks.metaChanged?.(s.by, change, opened.meta.ts);
 		this.hooks.changed();
 		return true;
 	}
@@ -24906,7 +25265,7 @@ async function sendCard(ctx, params, kind) {
 			text,
 			card
 		});
-		if (result.error || !result.messageId) throw new CliError("unavailable", result.error ?? "Nothing to send");
+		if (result.error || !result.messageId) throw new CliError(result.refused ? "refused" : "unavailable", result.error ?? "Nothing to send");
 		const edges = wait === "sent" ? await waitForGroupFrame(ctx, target.id, result.messageId, void 0, ms) : void 0;
 		return answer(target, kind, id, result.messageId, {
 			card,
@@ -25306,10 +25665,20 @@ function resumeHolds(ctx) {
 }
 //#endregion
 //#region src/views.ts
+/**
+* A live session carries the chat now, in this run: its link is open and, on a paired chat, the session authenticated
+* on a transport. The engine's own rule for a chat's connection line (`observeTransport`). `textDelivery` alone says
+* how a text would go, and nothing the engine remembers from an earlier run (a chat that was live when the app last
+* ran, WISP 100) counts: until the contact answers again the link is not open and the pairing is `connecting`.
+*/
+function isLive(link) {
+	if (link.textDelivery !== "stream" || link.dataLink !== "open") return false;
+	return !link.profile || link.pairing?.status === "ready" && !!link.pairing.transport;
+}
 function chatJson(link) {
 	const label = link.label?.trim() || null;
 	const peerName = link.peerNick?.trim() || null;
-	const live = link.textDelivery === "stream";
+	const live = isLive(link);
 	return {
 		id: link.id,
 		name: label ?? peerName,
@@ -25364,6 +25733,7 @@ function messageJson(message) {
 		from: message.sender,
 		text: message.text,
 		timestamp: message.timestamp,
+		...message.sentAt !== void 0 ? { sentAt: message.sentAt } : {},
 		delivery: message.delivery ?? (message.sender === "peer" ? null : "sent"),
 		deliveryError: message.deliveryError ?? null,
 		via: message.via,
@@ -30599,7 +30969,7 @@ var SERVICE_METHODS = {
 		const link = chatOf(ctx, params);
 		return {
 			chat: link.id,
-			live: link.textDelivery === "stream",
+			live: isLive(link),
 			services: link.peerServices ?? []
 		};
 	},
@@ -33433,7 +33803,7 @@ var METHODS = {
 			webrtc: ctx.runtime.webrtc,
 			calls: ctx.runtime.callsUnavailable === null,
 			chats: s.links.length,
-			live: s.links.filter((l) => l.textDelivery === "stream").length,
+			live: s.links.filter(isLive).length,
 			groups: s.groups.length,
 			discovery: {
 				protocol: s.transport.protocol,
@@ -33844,14 +34214,15 @@ var METHODS = {
 		return chatJson(await waitForState(ctx, (s) => {
 			const now = s.links.find((l) => l.id === link.id);
 			if (!now) throw new CliError("not_found", `Chat ${link.id} was removed`);
-			return (until === "live" ? now.textDelivery === "stream" : until === "text" ? now.textDelivery === "stream" || now.textDelivery === "dht" || now.textDelivery === "hold" : !!now.pairingProgress?.peerSeen || now.pairing?.status === "ready" || now.textDelivery === "stream") ? now : void 0;
+			return (until === "live" ? isLive(now) : until === "text" ? now.textDelivery === "stream" || now.textDelivery === "dht" || now.textDelivery === "hold" : !!now.pairingProgress?.peerSeen || now.pairing?.status === "ready" || isLive(now)) ? now : void 0;
 		}, num(params, "timeout", 60, {
 			min: 1,
 			max: 86400
 		}) * 1e3, `chat ${link.id} to be ${until}`));
 	},
 	async "group.create"(ctx, params) {
-		const name = str(params, "name", true);
+		const name = groupName(str(params, "name", true));
+		if (!name) throw new CliError("bad_request", `A group's name is 1 to 64 characters on one line`);
 		const profile = oneOf(params, "profile", ["community", "mesh"], "community");
 		const { groupId } = await node(ctx).createGroup({
 			name,
@@ -33899,7 +34270,7 @@ var METHODS = {
 			...replyTo ? { replyTo } : {},
 			...card ? { card } : {}
 		});
-		if (result.error) throw new CliError("unavailable", result.error);
+		if (result.error) throw result.refused ? new CliError("refused", result.error) : groupSendRefused(result.error);
 		const messageId = result.messageId ?? null;
 		const edges = messageId ? wait === "sent" ? await waitForGroupFrame(ctx, group.id, messageId, void 0, num(params, "timeout", 30, {
 			min: 1,
@@ -33911,7 +34282,7 @@ var METHODS = {
 		return {
 			group: group.id,
 			messageId,
-			sent: true,
+			sent: edges > 0,
 			edges,
 			...card ? {
 				buttons: card.id,
@@ -33934,6 +34305,7 @@ var METHODS = {
 		}
 		const mentions = mentionsFor(text, list(params, "mentions"), group);
 		const wait = oneOf(params, "wait", ["none", "sent"], "none");
+		const before = (await node(ctx).groupMessages({ groupId: group.id })).find((m) => m.id === messageId)?.edit?.seq ?? 0;
 		const result = await node(ctx).editMessage({
 			linkId: `group:${group.id}`,
 			messageId,
@@ -33943,6 +34315,14 @@ var METHODS = {
 		if (result.error) throw editRefused(await node(ctx).groupMessages({ groupId: group.id }), messageId, "group", result.error, result.refused);
 		const message = (await node(ctx).groupMessages({ groupId: group.id })).find((m) => m.id === messageId);
 		const edits = message?.edit?.seq ?? 0;
+		if (edits === before) return {
+			group: group.id,
+			messageId,
+			edits,
+			sent: false,
+			edges: 0,
+			unchanged: true
+		};
 		const edges = !edits ? 0 : wait === "sent" ? await waitForGroupFrame(ctx, group.id, messageId, edits, num(params, "timeout", 30, {
 			min: 1,
 			max: 3600
@@ -34062,7 +34442,7 @@ async function react(ctx, linkId, params) {
 		messageId,
 		emoji: emoji ?? ""
 	});
-	if (result.error) throw new CliError(/not in this chat|No reaction of yours/.test(result.error) ? "not_found" : "bad_request", result.error);
+	if (result.error) throw new CliError(result.refused ? "refused" : /not in this chat|No reaction of yours/.test(result.error) ? "not_found" : "bad_request", result.error);
 	return {
 		messageId,
 		emoji: emoji || null,
@@ -34088,6 +34468,17 @@ function typingWord(params, typing) {
 	};
 }
 /**
+* A group message the engine did not send, by what a bot can do about it: a `--reply` to a message this group does not
+* have is `not_found` (exit 3), as `group react`, `group edit` and `pin` answer for one; out of the group (removed,
+* left, a forked history) is `refused`: it will not go later either. Anything else may go on a later try
+* (`unavailable`): the epoch's key is still on its way. All three were `unavailable` (exit 1) before.
+*/
+function groupSendRefused(error) {
+	if (/not in this chat|cannot be replied to/.test(error)) return new CliError("not_found", error);
+	if (/^You (were removed from|left|are no longer in) this group$|Membership changes are halted/.test(error)) return new CliError("refused", error);
+	return new CliError("unavailable", error);
+}
+/**
 * An edit the engine refused. A message that is not in the chat or group at all is `not_found` (exit 3), naming the id
 * to give, as `button update` and `task update` do; before, a mistyped or lost id read "Only your own text messages
 * can be edited" (`refused`, exit 1), as if the message were someone else's.
@@ -39066,14 +39457,14 @@ async function startRuntime(paths, options = {}) {
 	(await import("./assets/ghostly_iroh_web-CPa_YEfb.js")).initSync({ module: irohWasmBytes() });
 	const [{ registerFileBytes }, { NodeFileBytes }] = await Promise.all([Promise.resolve().then(() => fileBytes_exports), import("./assets/fileBytes-CLv0gryb.js")]);
 	registerFileBytes("native", async () => new NodeFileBytes(paths.files), true);
-	const [{ EngineServer }, { createHyperEndpoint }] = await Promise.all([import("./assets/server-C-8wbsAX.js").then((n) => n.t), import("./assets/endpoint-CaSbSFDw.js")]);
+	const [{ EngineServer }, { createHyperEndpoint }] = await Promise.all([import("./assets/server-Cajp8VLY.js").then((n) => n.t), import("./assets/endpoint-CaSbSFDw.js")]);
 	const network = hyperdhtNetwork();
 	const dht = mainlineNetwork();
-	const mainline = dht.off ? null : new (await (import("./assets/mainline-B0mUxYPH.js"))).Mainline({
+	const mainline = dht.off ? null : new (await (import("./assets/mainline-_roUnpDA.js"))).Mainline({
 		bootstrap: dht.bootstrap,
 		host: dht.host
 	});
-	const transport = mainline || pinned ? new (await (import("./assets/mainline-B0mUxYPH.js"))).RelaysAndDht(mainline, pinned ? { relays: pinned } : {}, !!pinned) : null;
+	const transport = mainline || pinned ? new (await (import("./assets/mainline-_roUnpDA.js"))).RelaysAndDht(mainline, pinned ? { relays: pinned } : {}, !!pinned) : null;
 	const server = new EngineServer({
 		...transport ? { transport } : {},
 		irohWeb: true,
@@ -40606,6 +40997,6 @@ async function run(argv) {
 //#region src/bin.ts
 run(process.argv.slice(2));
 //#endregion
-export { boundedIdentityFetch as $, EXPECT_PEER_MS as $i, LIVENESS_PING_MS as $n, IDENTITY_REVOCATION_LABEL as $r, GroupWakeLimiter as $t, TEST_MINT as A, parseRelayPayload as Aa, ReactionWindow as Ai, assertTokenUnits as An, nextPinNumber as Ar, transact as At, registeredLightningProviders as B, toZ32 as Ba, replySnippet as Bi, isPubkyKey as Bn, vapidKeysMatch as Br, communityHasFrame as Bt, networkLabel as C, normalizeRelayUrl as Ca, dhtEditId as Ci, ONCHAIN_PROVIDER as Cn, transferEnded as Cr, STORES as Ct, WALLET_TYPES as D, PacketTooLargeError as Da, COMMUNITY_REACTION_FRAME as Di, TEST_USDT_FAUCET_AMOUNT as Dn, GROUP_PIN_FRAME as Dr, fileStore as Dt, MESSAGE_DETAILS_MAX_BYTES as E, withRequestOptions as Ea, readForwarded as Ei, SEPOLIA_TEST_USDT_FAUCET as En, typingActivity as Er, deleteDatabase as Et, paysItsOwnInvoices as F, sanitizeAvatar as Fa, readReaction as Fi, SPARK_NETWORKS as Fn, WakeLimiter as Fr, openGroupTyping as Ft, SourceConfigError as G, statusCardText as Gi, cashuRequestPayload as Gn, HoldKeys as Gr, decodeGroupEntryLink as Gt, reserveAdapterIds as H, utf8Encode as Ha, STATUS_CARD_LIMITS as Hi, engineText as Hn, EDIT_CAPABILITY as Hr, decodeCommunityLink as Ht, BACKUP_MEDIA_TYPE as I, bytesEqual as Ia, validReactionNumber as Ii, SPARK_PROVIDER as In, newWakeToken as Ir, sealGroupTyping as It, networkMode as J, MAX_GROUP_CHAIN as Ji, isFederationId as Jn, readManifest as Jr, knockIdentity as Jt, SourceUnreachableError as K, receivedTimestamp as Ki, fedimintRequestPayload as Kn, HoldRefusedError as Kr, encodeGroupEntryLink as Kt, MAX_BACKUP_BYTES as L, fromBase64Url$1 as La, wireReaction as Li, sparkAddressKind as Ln, relayRequest as Lr, COMMUNITY_LIMITS as Lt, isTestMint as M, identityFromSeed as Ma, queueReaction as Mi, formatPaymentAmount as Mn, pinNumberHolds as Mr, GROUP_TYPING_FRAME as Mt, isWorthlessMint as N, identityFromSeedB64 as Na, reactionEmoji as Ni, validatePaymentTarget as Nn, readPin as Nr, GroupTypingBoard as Nt, BITCOIN_INVOICE_ON_TESTNET as O, createRelayPayload as Oa, GROUP_REACTION_FRAME as Oi, USDT_PUBLIC_RPC as On, PIN_LIMITS as Or, openDb as Ot, mintNetwork as P, publicKeyFromZ32 as Pa, reactionIsNewer as Pi, walletNetworkOf as Pn, WAKE_CALL_INTERVAL_MS as Pr, groupTypingEpoch as Pt, setOwnDidSource as Q, edgeParams as Qi, INVITE_TAKEN as Qn, dialDescriptors as Qr, GROUP_WAKE_FRAME as Qt, identityProviders as R, randomBytes$1 as Ra, pairedReplyAuthor as Ri, sparkInvoiceDetails as Rn, wakeRequest as Rr, CommunitySession as Rt, WrongNetworkError as S, currentRelays as Sa, RateWindow as Si, EVM_TEST_CHAINS as Sn, FILE_LIMITS as Sr, digestText as St, cashuMint as T, isDiscoveryBudgetError as Ta, forwardedAgain as Ti, SEPOLIA_TEST_USDT as Tn, TypingSender as Tr, databaseName as Tt, NothingSpentError as U, __exportAll as Ua, checkStatusCard as Ui, decodeBolt11 as Un, HOLD_CAPABILITY as Ur, encodeCommunityLink as Ut, registeredOnchainProviders as V, utf8Decode as Va, BUTTON_ID as Vi, engineError as Vn, BUTTONS_CAPABILITY as Vr, communityMessageId as Vt, PROVIDER_PLATFORMS as W, sameButtonText as Wi, ENDPOINT as Wn, HOLD_LIMITS as Wr, KNOCK_TTL_MS as Wt, assertPublicServer as X, rosterHas as Xi, parseFedimintRequestPayload as Xn, DHT_TEXT_CAPABILITY as Xr, mergeKnocks as Xt, redact as Y, MEMBER_KEY as Yi, parseCashuRequestPayload as Yn, CapsExchange as Yr, knockRecords as Yt, resolveAtprotoDid as Z, verifyCommitSignature as Zi, GhostLink as Zn, capsDescriptors as Zr, readKnocks as Zt, newDeviceKey as _, decodeInviteCode as _a, parseVideoMeta as _i, didDhtFromPublicKey as _n, readBeacon as _r, fileBytes as _t, createFailure as a, webLocalFetch as aa, receivedIdentityStatus as ai, GroupSession as an, COMMUNITY_TOPOLOGY as ar, replyRef as at, ModeChanged as b, DEFAULT_RELAYS as ba, EDIT_BUFFER_MS as bi, signDidDhtPacket as bn, shouldBeHub as br, removeFileBytes as bt, paymentNetwork as c, encodeControl as ca, PeerProofs as ci, GROUP_EDIT_FRAME as cn, doorHubs as cr, paymentWireId as ct, networkReason as d, emptyLinkRecords as da, TRANSPORTS as di, parseCommunityEdit as dn, lobbyRecords as dr, removeStored as dt, RELAY_POLL_INTERVALS as ea, IdentityExchange as ei, groupWakeFrame as en, pairedMessageFrame as er, verifyIdentity as et, rpcHost as f, HTTP_SERVICE_PROTO as fa, automaticTransport as fi, mentionsMember as fn, mergeBeacon as fr, storedSize as ft, intentRepository as g, createChatInvite as ga, parseVoiceMeta as gi, didDhtDocument as gn, rankHubs as gr, checkFileId as gt, ProviderSources as h, OwnInviteError as ha, fileMessageText as hi, normalizeAtprotoHandle as hn, pickHubs as hr, blobDigest as ht, assertConfirmedReal as i, parseLocalTarget as ia, newIdentityBinding as ii, GROUP_READ_NOTE as in, pickMeshHubs as ir, receivedPairedReply as it, fakesLightning as j, createIdentity as ja, nextReactionNumber as ji, assertWholeSats as jn, pinIsNewer as jr, wrap as jt, DEFAULT_MINTS as k, newerPacket as ka, REACTION_LIMITS as ki, WALLET_NETWORKS as kn, mayPin as kr, store$1 as kt, paymentNetworksOf as l, RTC_CONFIG as la, emptyProofLedger as li, GROUP_EDIT_TEXT_BYTES as ln, freshHubs as lr, FileAppender as lt, LightningCards as m, serviceIdFromName as ma, safeBlobType as mi, isAtprotoDid as mn, newerHead as mr, SMALL_FILE_BYTES as mt, loadFedimintSdk as n, GhostlyHttpError as na, identityRevocationValue as ni, parseGroupWakeFrame as nn, mayBeHub as nr, groupReply as nt, createTiming as o, LIMITS as oa, revokesIdentity as oi, groupMessageId as on, beaconKeys as or, replyTo as ot, CASHU_CARD as p, LEGACY_SERVICES as pa, parseImageMeta as pi, groupName as pn, mergeLobby as pr, streamStored as pt, isNothingSpentError as q, GROUP_MEMBER_CAP as qi, findEndpoint as qn, newMailbox as qr, entryParams as qt, WALLET_NAMES as r, formatLocalTarget as ra, identityStatement as ri, GROUP_REACTED_FRAME as rn, meshHubs as rr, pairedWireReply as rt, crossNetwork as s, decodeControl as sa, lastSharedWithMe as si, COMMUNITY_EDIT_FRAME as sn, beaconRecords as sr, paymentAlias as st, fedimintDatabase as t, traceLink as ta, emptyIdentityLedger as ti, groupWakes as tn, MESH_HUBS as tr, chosenResolver as tt, walletInstances as u, parseCallSignal as ua, validExternalKey as ui, carryMentions as un, lobbyKeys as ur, readStored as ut, sealSeed as v, encodeInviteCode as va, DHT_MESSAGE_TTL as vi, encodeDidDhtDeactivated as vn, readBeaconHead as vr, fileBytesOf as vt, CASHU_MINT_SOURCE as w, budgetRetryMs as wa, parseLinkPreview as wi, PaymentPreflightError as wn, transferStalled as wr, clearProfileStores as wt, ModeGate as x, RelayTransport as xa, EDIT_RATE_WINDOW_MS as xi, ETHEREUM_USDT as xn, ChatFiles as xr, FILE_BYTES_STEP as xt, unsealSeed as y, inviteOwnership as ya, peekDhtMailbox as yi, encodeDidDhtPacket as yn, readLobby as yr, fileSpace as yt, onAdaptersChanged as z, toBase64Url$1 as za, readReply as zi, isBitcoinAddress as zn, checkPushEndpoint as zr, GROUP_READ_NOTE_COMMUNITY as zt };
+export { boundedIdentityFetch as $, GROUP_MEMBER_CAP as $i, LIVENESS_PING_MS as $n, IDENTITY_REVOCATION_LABEL as $r, GroupWakeLimiter as $t, TEST_MINT as A, normalizeRelayUrl as Aa, GROUP_REACTION_FRAME as Ai, assertTokenUnits as An, nextPinNumber as Ar, transact as At, registeredLightningProviders as B, identityFromSeedB64 as Ba, pairedReplyAuthor as Bi, isPubkyKey as Bn, vapidKeysMatch as Br, communityHasFrame as Bt, networkLabel as C, createChatInvite as Ca, EDIT_RATE_WINDOW_MS as Ci, ONCHAIN_PROVIDER as Cn, transferEnded as Cr, STORES as Ct, WALLET_TYPES as D, DEFAULT_RELAYS as Da, forwardedAgain as Di, TEST_USDT_FAUCET_AMOUNT as Dn, GROUP_PIN_FRAME as Dr, fileStore as Dt, MESSAGE_DETAILS_MAX_BYTES as E, inviteOwnership as Ea, parseLinkPreview as Ei, SEPOLIA_TEST_USDT_FAUCET as En, typingActivity as Er, deleteDatabase as Et, paysItsOwnInvoices as F, createRelayPayload as Fa, reactionEmoji as Fi, SPARK_NETWORKS as Fn, WakeLimiter as Fr, openGroupTyping as Ft, SourceConfigError as G, randomBytes$1 as Ga, checkStatusCard as Gi, cashuRequestPayload as Gn, HoldKeys as Gr, decodeGroupEntryLink as Gt, reserveAdapterIds as H, sanitizeAvatar as Ha, replySnippet as Hi, engineText as Hn, EDIT_CAPABILITY as Hr, decodeCommunityLink as Ht, BACKUP_MEDIA_TYPE as I, newerPacket as Ia, reactionIsNewer as Ii, SPARK_PROVIDER as In, newWakeToken as Ir, sealGroupTyping as It, networkMode as J, utf8Decode as Ja, arrivalKey as Ji, isFederationId as Jn, readManifest as Jr, knockIdentity as Jt, SourceUnreachableError as K, toBase64Url$1 as Ka, sameButtonText as Ki, fedimintRequestPayload as Kn, HoldRefusedError as Kr, encodeGroupEntryLink as Kt, MAX_BACKUP_BYTES as L, parseRelayPayload as La, readReaction as Li, sparkAddressKind as Ln, relayRequest as Lr, COMMUNITY_LIMITS as Lt, isTestMint as M, isDiscoveryBudgetError as Ma, ReactionWindow as Mi, formatPaymentAmount as Mn, pinNumberHolds as Mr, GROUP_TYPING_FRAME as Mt, isWorthlessMint as N, withRequestOptions as Na, nextReactionNumber as Ni, validatePaymentTarget as Nn, readPin as Nr, GroupTypingBoard as Nt, BITCOIN_INVOICE_ON_TESTNET as O, RelayTransport as Oa, readForwarded as Oi, USDT_PUBLIC_RPC as On, PIN_LIMITS as Or, openDb as Ot, mintNetwork as P, PacketTooLargeError as Pa, queueReaction as Pi, walletNetworkOf as Pn, WAKE_CALL_INTERVAL_MS as Pr, groupTypingEpoch as Pt, setOwnDidSource as Q, shownTime as Qi, INVITE_TAKEN as Qn, dialDescriptors as Qr, GROUP_WAKE_FRAME as Qt, identityProviders as R, createIdentity as Ra, validReactionNumber as Ri, sparkInvoiceDetails as Rn, wakeRequest as Rr, CommunitySession as Rt, WrongNetworkError as S, OwnInviteError as Sa, EDIT_BUFFER_MS as Si, EVM_TEST_CHAINS as Sn, FILE_LIMITS as Sr, digestText as St, cashuMint as T, encodeInviteCode as Ta, dhtEditId as Ti, SEPOLIA_TEST_USDT as Tn, TypingSender as Tr, databaseName as Tt, NothingSpentError as U, bytesEqual as Ua, BUTTON_ID as Ui, decodeBolt11 as Un, HOLD_CAPABILITY as Ur, encodeCommunityLink as Ut, registeredOnchainProviders as V, publicKeyFromZ32 as Va, readReply as Vi, engineError as Vn, BUTTONS_CAPABILITY as Vr, communityMessageId as Vt, PROVIDER_PLATFORMS as W, fromBase64Url$1 as Wa, STATUS_CARD_LIMITS as Wi, ENDPOINT as Wn, HOLD_LIMITS as Wr, KNOCK_TTL_MS as Wt, assertPublicServer as X, __exportAll as Xa, heardTime as Xi, parseFedimintRequestPayload as Xn, DHT_TEXT_CAPABILITY as Xr, mergeKnocks as Xt, redact as Y, utf8Encode as Ya, claimedTime as Yi, parseCashuRequestPayload as Yn, CapsExchange as Yr, knockRecords as Yt, resolveAtprotoDid as Z, receivedTimestamp as Zi, GhostLink as Zn, capsDescriptors as Zr, readKnocks as Zt, newDeviceKey as _, parseCallSignal as _a, fileMessageText as _i, didDhtFromPublicKey as _n, readBeacon as _r, fileBytes as _t, createFailure as a, DirectPathWatch as aa, receivedIdentityStatus as ai, GroupSession as an, COMMUNITY_TOPOLOGY as ar, replyRef as at, ModeChanged as b, LEGACY_SERVICES as ba, DHT_MESSAGE_TTL as bi, signDidDhtPacket as bn, shouldBeHub as br, removeFileBytes as bt, paymentNetwork as c, traceLink as ca, PeerProofs as ci, GROUP_EDIT_FRAME as cn, doorHubs as cr, paymentWireId as ct, networkReason as d, parseLocalTarget as da, TRANSPORTS as di, parseCommunityEdit as dn, lobbyRecords as dr, removeStored as dt, MAX_GROUP_CHAIN as ea, IdentityExchange as ei, groupWakeFrame as en, pairedMessageFrame as er, verifyIdentity as et, rpcHost as f, webLocalFetch as fa, automaticTransport as fi, mentionsMember as fn, mergeBeacon as fr, storedSize as ft, intentRepository as g, RTC_CONFIG as ga, safeBlobType as gi, didDhtDocument as gn, rankHubs as gr, checkFileId as gt, ProviderSources as h, encodeControl as ha, parseImageMeta as hi, normalizeAtprotoHandle as hn, pickHubs as hr, blobDigest as ht, assertConfirmedReal as i, edgeParams as ia, newIdentityBinding as ii, GROUP_READ_NOTE as in, pickMeshHubs as ir, receivedPairedReply as it, fakesLightning as j, budgetRetryMs as ja, REACTION_LIMITS as ji, assertWholeSats as jn, pinIsNewer as jr, wrap as jt, DEFAULT_MINTS as k, currentRelays as ka, COMMUNITY_REACTION_FRAME as ki, WALLET_NETWORKS as kn, mayPin as kr, store$1 as kt, paymentNetworksOf as l, GhostlyHttpError as la, emptyProofLedger as li, GROUP_EDIT_TEXT_BYTES as ln, freshHubs as lr, FileAppender as lt, LightningCards as m, decodeControl as ma, irohRelayUrl as mi, isAtprotoDid as mn, newerHead as mr, SMALL_FILE_BYTES as mt, loadFedimintSdk as n, rosterHas as na, identityRevocationValue as ni, parseGroupWakeFrame as nn, mayBeHub as nr, groupReply as nt, createTiming as o, EXPECT_PEER_MS as oa, revokesIdentity as oi, groupMessageId as on, beaconKeys as or, replyTo as ot, CASHU_CARD as p, LIMITS as pa, irohDescriptor as pi, groupName as pn, mergeLobby as pr, streamStored as pt, isNothingSpentError as q, toZ32 as qa, statusCardText as qi, findEndpoint as qn, newMailbox as qr, entryParams as qt, WALLET_NAMES as r, verifyCommitSignature as ra, identityStatement as ri, GROUP_REACTED_FRAME as rn, meshHubs as rr, pairedWireReply as rt, crossNetwork as s, RELAY_POLL_INTERVALS as sa, lastSharedWithMe as si, COMMUNITY_EDIT_FRAME as sn, beaconRecords as sr, paymentAlias as st, fedimintDatabase as t, MEMBER_KEY as ta, emptyIdentityLedger as ti, groupWakes as tn, MESH_HUBS as tr, chosenResolver as tt, walletInstances as u, formatLocalTarget as ua, validExternalKey as ui, carryMentions as un, lobbyKeys as ur, readStored as ut, sealSeed as v, emptyLinkRecords as va, parseVoiceMeta as vi, encodeDidDhtDeactivated as vn, readBeaconHead as vr, fileBytesOf as vt, CASHU_MINT_SOURCE as w, decodeInviteCode as wa, RateWindow as wi, PaymentPreflightError as wn, transferStalled as wr, clearProfileStores as wt, ModeGate as x, serviceIdFromName as xa, peekDhtMailbox as xi, ETHEREUM_USDT as xn, ChatFiles as xr, FILE_BYTES_STEP as xt, unsealSeed as y, HTTP_SERVICE_PROTO as ya, parseVideoMeta as yi, encodeDidDhtPacket as yn, readLobby as yr, fileSpace as yt, onAdaptersChanged as z, identityFromSeed as za, wireReaction as zi, isBitcoinAddress as zn, checkPushEndpoint as zr, GROUP_READ_NOTE_COMMUNITY as zt };
 
 //# sourceMappingURL=ghostly.mjs.map