@ghostlytools/cli 1.0.3 → 1.1.1

package/dist/ghostly.mjs

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
-import { a as fileBytesOf, d as __exportAll, i as fileBytes, l as FILE_BYTES_STEP } from "./assets/fileBytes-Br_MpeNT.js";
-import { $ as atprotoProofRecord, B as parseSshPublicKey, Ca as callRtcConfig, Cn as wellKnownUrl, Ct as parseDid, Da as signalHasVideo, Dn as engineText, Dr as checkPushEndpoint, Dt as staticDidDocument, Ea as parseCallSignal, En as engineError, Et as signingKeys, G as verifyBitcoinMessage, Gi as RUN_RESULTS, Gr as IdentityCheckUnavailable, H as sameSshKey, Ha as setLinkTraceSink, Hi as replySnippet, I as groupName, Ia as inviteLink, J as ATPROTO_DECLARED_SCOPE, Ja as RELAY_PAYLOAD_MAX_BYTES, Ji as checkStatusCard, Jt as walletNetworkOf, K as BitcoinAddressError, Ki as STATUS_CARD_LIMITS, Nt as resolveDidDht, On as decodeBolt11, Ot as strictBase64Url, Q as atprotoDidMethod, R as SSHSIG_NAMESPACE, Sa as buildSdpFromSignal, Sn as txtValue, St as normalizeDid, Ta as extractParamsFromSdp, Tn as resolveLightningDestination, Tt as parseDidSignaturePaste, U as sshSignCommand, Ut as WALLET_NETWORKS, V as parseSshSignature, W as verifySshSignature, Wi as ITEM_STATES, X as ATPROTO_PROOF_COLLECTION, Xr as identityStatement, Y as ATPROTO_FULL_SCOPE, Z as ATPROTO_PROOF_SCOPE, Za as openRelayPayload, _i as parseVoiceMeta, _n as nip05RootKey, _t as didWebDocumentUrl, an as pubkyProofCapability, at as shortAtprotoDid, ba as RTC_CONFIG, bn as recordsFromWellKnown, bt as didWebFileUrl, cn as homeserverWebEndpoint, co as toBase64Url$1, ct as DID_DOCUMENT_MAX_BYTES$1, di as sanitizeFileName, dn as decodeDnsResponse, do as utf8Encode, dr as TYPING_REFRESH_MS, dt as DidError, en as PUBKY_PROOF_MAX_BYTES, et as atprotoProofRkey, fa as GhostlyHttpError, fi as sanitizeMime, fn as dnsProofName, ft as checkDidJws, ga as LIMITS, gn as isPublicAddress, gt as didSignedMessages, hi as baseMime, hn as encodeDnsQuery, ht as didJwsAlg, in as normalizePubkyKey, io as sanitizeAvatar, it as parseAtprotoDidDocument, kr as BUTTONS_CAPABILITY, li as readImageMeta, ln as pubkyHomeserverOf, lt as DID_FILE_MAX_BYTES, mi as VOICE_LIMITS, mn as domainWellKnownFile, mt as didGhostlyServiceEntry, nn as isPubkyProofFolder, nt as isAtprotoDid, on as pubkyProofFile, oo as fromBase64Url$1, ot as AtprotoProofError, pi as PLAYABLE_AUDIO, pn as domainTxtRecord, pr as sanitizeTypingStatus, pt as checkDidSignature, q as decodeAnyBitcoinAddress, qi as buttonLabelClash, qr as boundVerifiedIdentity, rn as newPubkyProofFolder, ro as MAX_AVATAR_LENGTH, rt as normalizeAtprotoHandle, sn as pubkyProofPath, so as randomBytes$1, st as verifyAtprotoRecordProof, tn as isPubkyKey, tt as checkAtprotoProofRecord, un as DOMAIN_FILE_MAX_BYTES, uo as utf8Decode, ur as TYPING_KINDS, vi as voicePeaksOf, vn as normalizeDomain, vt as didWebFile, wa as callSignalHeardAt, wn as requestLnurlInvoice, wt as parseDidDocument, xa as answersOffer, xn as recordsName, xt as didWebHost, ya as CALL_SIGNAL_MAX_AGE_MS, yn as recordsFromTxt, yt as didWebFileNames, z as SshSigError } from "./assets/src-7sdQpCoi.js";
-import { d as wrap, l as store$1, n as STORES, o as fileStore, s as openDb, u as transact } from "./assets/idb-DIN_Miwb.js";
+import { a as fileBytesOf, d as __exportAll, i as fileBytes, l as FILE_BYTES_STEP } from "./assets/fileBytes-DxiJHmTk.js";
+import { $ as checkAtprotoProofRecord, $s as randomBytes$1, $t as isPubkyKey, Aa as RTC_CONFIG, Ai as voicePeaksOf, B as sameSshKey, Ci as sanitizeFileName, Cn as resolveLightningDestination, Ct as parseDidSignaturePaste, Di as baseMime, Ea as LIMITS, Ei as VOICE_LIMITS, En as decodeBolt11, Et as strictBase64Url, Fa as extractParamsFromSdp, G as decodeAnyBitcoinAddress, H as verifySshSignature, Hs as openRelayPayload, I as SSHSIG_NAMESPACE, Ia as parseCallSignal, Ir as BUTTONS_CAPABILITY, J as ATPROTO_PROOF_COLLECTION, K as ATPROTO_DECLARED_SCOPE, Kt as walletNetworkOf, L as SshSigError, La as signalHasVideo, Ma as buildSdpFromSignal, Na as callRtcConfig, Ns as setLinkTraceSink, P as groupName, Pa as callSignalHeardAt, Pr as checkPushEndpoint, Q as atprotoProofRkey, Qi as replySnippet, Qr as IdentityCheckUnavailable, Qs as fromBase64Url$1, Qt as PUBKY_PROOF_MAX_BYTES, R as parseSshPublicKey, Sa as GhostlyHttpError, Sn as requestLnurlInvoice, St as parseDidDocument, Ti as PLAYABLE_AUDIO, Tn as engineText, Tt as staticDidDocument, U as verifyBitcoinMessage, V as sshSignCommand, Vt as WALLET_NETWORKS, W as BitcoinAddressError, X as atprotoDidMethod, Xs as sanitizeAvatar, Y as ATPROTO_PROOF_SCOPE, Ys as MAX_AVATAR_LENGTH, Z as atprotoProofRecord, _n as recordsFromTxt, _t as didWebFileNames, an as pubkyProofPath, at as verifyAtprotoRecordProof, bn as txtValue, bt as normalizeDid, cn as DOMAIN_FILE_MAX_BYTES, dn as domainTxtRecord, dt as checkDidSignature, ea as ITEM_STATES, ec as toBase64Url$1, ei as boundVerifiedIdentity, en as isPubkyProofFolder, et as isAtprotoDid, fn as domainWellKnownFile, ft as didGhostlyServiceEntry, gn as normalizeDomain, gr as TYPING_REFRESH_MS, gt as didWebFile, hn as nip05RootKey, hr as TYPING_KINDS, ht as didWebDocumentUrl, ia as checkStatusCard, in as pubkyProofFile, it as AtprotoProofError, ja as answersOffer, jt as resolveDidDht, ka as CALL_SIGNAL_MAX_AGE_MS, ki as parseVoiceMeta, ln as decodeDnsResponse, lt as DidError, mn as isPublicAddress, mt as didSignedMessages, na as STATUS_CARD_LIMITS, nc as utf8Decode, nn as normalizePubkyKey, ns as inviteLink, nt as parseAtprotoDidDocument, on as homeserverWebEndpoint, ot as DID_DOCUMENT_MAX_BYTES$1, pn as encodeDnsQuery, pt as didJwsAlg, q as ATPROTO_FULL_SCOPE, ra as buttonLabelClash, rc as utf8Encode, ri as identityStatement, rn as pubkyProofCapability, rt as shortAtprotoDid, sn as pubkyHomeserverOf, st as DID_FILE_MAX_BYTES, ta as RUN_RESULTS, tn as newPubkyProofFolder, tt as normalizeAtprotoHandle, un as dnsProofName, ut as checkDidJws, vn as recordsFromWellKnown, vr as sanitizeTypingStatus, vt as didWebFileUrl, wi as sanitizeMime, wn as engineError, wt as signingKeys, xi as readImageMeta, xn as wellKnownUrl, xt as parseDid, yn as recordsName, yt as didWebHost, z as parseSshSignature, zs as RELAY_PAYLOAD_MAX_BYTES } from "./assets/src-CJdPTl7Q.js";
+import { d as wrap, i as databaseName, l as store$1, n as STORES, o as fileStore, s as openDb, u as transact } from "./assets/idb-Co2lObpU.js";
 import { createRequire } from "node:module";
 import { spawn } from "node:child_process";
 import { connect, createServer, isIP } from "node:net";
 import { appendFileSync, chmodSync, closeSync, existsSync, fsyncSync, lstatSync, mkdirSync, openAsBlob, openSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync, writeSync } from "node:fs";
 import { ed25519 } from "@noble/curves/ed25519.js";
-import { createBase58check } from "@scure/base";
 import { sha256 } from "@noble/hashes/sha2.js";
+import { createBase58check } from "@scure/base";
 import { schnorr } from "@noble/curves/secp256k1.js";
 import { wordlist } from "@scure/bip39/wordlists/english.js";
 import { link, mkdir, open, readFile, readdir, rename, rm, stat, writeFile } from "node:fs/promises";
@@ -22,7 +22,7 @@ import { createServer as createServer$1 } from "node:http";
 import { Readable } from "node:stream";
 import { pipeline } from "node:stream/promises";
 import { homedir } from "node:os";
-import { generateMnemonic } from "@scure/bip39";
+import { generateMnemonic, validateMnemonic } from "@scure/bip39";
 import { createInterface } from "node:readline";
 import { lookup } from "node:dns/promises";
 import { fileURLToPath, pathToFileURL } from "node:url";
@@ -34,7 +34,7 @@ import { IDBFactory, IDBKeyRange as IDBKeyRange$1, IDBTransaction } from "fake-i
 import { format } from "node:util";
 var package_default = {
 	name: "@ghostlytools/cli",
-	version: "1.0.3",
+	version: "1.1.1",
 	type: "module",
 	description: "Ghostly for bots and terminals: the app's own engine, headless on Node, behind a daemon and a `ghostly` command with JSON output.",
 	license: "MIT",
@@ -78,6 +78,7 @@ var package_default = {
 		"@scure/bip39": "2.4.0",
 		"@scure/btc-signer": "2.4.1",
 		"@secondts/bark": "0.25.0",
+		"@serenity-kit/opaque": "1.1.0",
 		"@synonymdev/pubky": "0.14.0",
 		"@tetherto/wdk-wallet-evm": "1.0.0-beta.19",
 		"b4a": "1.9.0",
@@ -644,6 +645,7 @@ var ENGINE_METHODS = [
 	"setWakeSubscription",
 	"setWakeMuted",
 	"wakeForCall",
+	"wakeConfirm",
 	"setFastPoll",
 	"createGroup",
 	"inviteToGroup",
@@ -666,7 +668,37 @@ var ENGINE_METHODS = [
 	"setGroupPicture",
 	"renameGroup",
 	"setGroupTyping",
-	"forgetGroup"
+	"forgetGroup",
+	"setGroupManage",
+	"deviceEnrollInvite",
+	"deviceEnrollConfirm",
+	"deviceEnrollCancel",
+	"deviceEnrollView",
+	"deviceEnrollJoin",
+	"deviceEnrollFinish",
+	"deviceEnrollRemove",
+	"deviceSet",
+	"devicePing",
+	"deviceHandoffVerifier",
+	"deviceHandoffPush",
+	"deviceHandoffPull",
+	"deviceHandoffAccept",
+	"deviceHandoffSettle",
+	"deviceHandoffCancel",
+	"deviceHandoffView",
+	"deviceHandoffAllow",
+	"deviceTakeoverInfo",
+	"deviceTakeover",
+	"deviceTurnPeek",
+	"deviceForkDiscard",
+	"deviceRestoreStartOwn",
+	"deviceRemove",
+	"deviceNewSecret",
+	"deviceSecretOfferDismiss",
+	"deviceSetNoticeSeen",
+	"deviceTurnCheck",
+	"devicePushState",
+	"devicePushSet"
 ];
 /** Reads the hosts use outside `EngineApi`: the whole state, and one chat's stored messages. */
 var ENGINE_READS = ["getState", "getMessages"];
@@ -1628,6 +1660,7 @@ var FILE_METHODS = {
 		});
 		const stored = await fileStore.get(fileId);
 		if (!stored?.metadata) throw new CliError("not_found", `No file ${fileId}`);
+		if (stored.leftOut) throw new CliError("not_found", "Not in this backup: the light backup this profile was restored from left the file out");
 		const transfer = state(ctx).transfers[fileId] ?? stored.transfer;
 		if (transfer && transfer.state !== "done") throw new CliError("unavailable", `The file is not all here yet (${transfer.transferred} of ${transfer.size} bytes)`);
 		const target = str(params, "path") ? resolve(str(params, "path", true)) : join(resolve(str(params, "dir") ?? "."), sanitizeFileName(stored.metadata.name));
@@ -1643,7 +1676,8 @@ var FILE_METHODS = {
 		try {
 			const backend = stored.bytes ? await fileBytesOf(stored.bytes) : null;
 			if (backend) {
-				const size = await backend.size(fileId) ?? 0;
+				const size = await backend.size(fileId);
+				if (size === null) throw new CliError("not_found", "The file's bytes are not on this device");
 				for (let offset = 0; offset < size; offset += FILE_BYTES_STEP) {
 					const chunk = await backend.read(fileId, offset, FILE_BYTES_STEP);
 					await out.write(chunk);
@@ -2992,7 +3026,7 @@ function nostrProofTemplate(statement) {
 		tags: [["d", "ghostly-identity-proof"], ["expiration", String(expiresAt)]]
 	};
 }
-var hex$3 = (b) => Array.from(b, (x) => x.toString(16).padStart(2, "0")).join("");
+var hex$4 = (b) => Array.from(b, (x) => x.toString(16).padStart(2, "0")).join("");
 var unhex$1 = (s) => Uint8Array.from(s.match(/../g), (x) => parseInt(x, 16));
 function normalizeNostrKey(input) {
 	const value = input.trim();
@@ -3076,7 +3110,7 @@ var nostr = {
 		const expected = nostrProofTemplate(statement);
 		if (event.pubkey !== statement.binding.subject) throw new Error("Signed by another Nostr key");
 		if (event.kind !== expected.kind || event.created_at !== expected.created_at || event.content !== expected.content || JSON.stringify(event.tags) !== JSON.stringify(expected.tags)) throw new Error("The signer did not sign the exact Ghostly statement");
-		const id = hex$3(sha256(utf8Encode(JSON.stringify([
+		const id = hex$4(sha256(utf8Encode(JSON.stringify([
 			0,
 			event.pubkey,
 			event.created_at,
@@ -6430,7 +6464,7 @@ async function approveAndWork(options, work, { grant, cookie, opened, settled, c
 		throw e;
 	}
 	const fail = (what) => (e) => {
-		if (viaCookie && !cookieKept && refused(e)) throw new Error("Pubky Ring approved, but this browser blocked the sign-in cookie of your homeserver, so nothing was changed. Approve with Pubky Passport instead, or use Ghostly in Chrome or the desktop app.");
+		if (viaCookie && !cookieKept && refused(e)) throw new Error("Pubky Ring approved, but this browser blocks your homeserver's sign-in cookie (Vanadium and Safari block cookies from other sites), so nothing was written. Approve with Pubky Passport instead, or use Firefox or the Ghostly desktop app.");
 		throw failure(what, e);
 	};
 	const approved = session;
@@ -6568,7 +6602,7 @@ var testIdentitiesEnabled = () => {
 	}
 };
 var HEX64 = /^[a-f0-9]{64}$/;
-var hex$2 = (b) => Array.from(b, (x) => x.toString(16).padStart(2, "0")).join("");
+var hex$3 = (b) => Array.from(b, (x) => x.toString(16).padStart(2, "0")).join("");
 var unhex = (s) => Uint8Array.from(s.match(/../g), (x) => parseInt(x, 16));
 var normalizeHexKey = (input) => {
 	const v = input.trim().toLowerCase();
@@ -6578,7 +6612,7 @@ var normalizeHexKey = (input) => {
 var exactKeys = (raw, keys) => !!raw && typeof raw === "object" && !Array.isArray(raw) && Object.keys(raw).sort().join(",") === keys;
 /** The key behind the fake in-app signer. Tests may replace it. */
 var fakeKeyring = { seed: ed25519.utils.randomSecretKey() };
-var fakeKeySubject = (seed = fakeKeyring.seed) => hex$2(ed25519.getPublicKey(seed));
+var fakeKeySubject = (seed = fakeKeyring.seed) => hex$3(ed25519.getPublicKey(seed));
 var fakeKeySign = (statement, seed = fakeKeyring.seed) => ({ sig: toBase64Url$1(ed25519.sign(statement.bytes, seed)) });
 var fakeKey = {
 	id: "fake-key",
@@ -7842,18 +7876,18 @@ var BackupWriter = class BackupWriter {
 		this.signal = signal;
 	}
 	/** `passphrase` null: a backup anyone can read (the caller has made sure that is what the person chose). */
-	static async start(sink, passphrase, signal) {
+	static async start(sink, passphrase, signal, version = 2) {
 		if (passphrase !== null && passphrase.length < 12) throw new Error("Use at least 12 characters for the backup passphrase");
 		check(signal);
 		const salt = crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(16)), base = crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(7));
 		const header = passphrase === null ? {
 			format: "ghostly-backup",
-			version: 2,
+			version,
 			protection: "none",
 			check: { name: "SHA-256-chain" }
 		} : {
 			format: "ghostly-backup",
-			version: 2,
+			version,
 			protection: "passphrase",
 			kdf: {
 				name: "PBKDF2-SHA256",
@@ -7933,7 +7967,7 @@ async function readBackupHeader(source) {
 		return null;
 	}
 	if (header?.format !== "ghostly-backup" || typeof header.version !== "number" || header.version < 2) return null;
-	if (header.version !== 2) throw new Error("This backup comes from a newer Ghostly; update to restore it");
+	if (header.version !== 2 && header.version !== 3) throw new Error("This backup comes from a newer Ghostly; update to restore it");
 	if (header.protection === "none") {
 		if (header.check?.name !== "SHA-256-chain") throw new Error("Unsupported backup format");
 	} else if (header.protection === "passphrase") {
@@ -8046,6 +8080,21 @@ var BackupReader = class BackupReader {
 	}
 };
 //#endregion
+//#region ../browser/src/backup/light.ts
+/**
+* A light backup (WISP 05 § Light backups): everything of a profile but the bytes of its larger files. Their messages
+* and records stay; after a restore they show as not in this backup.
+*
+* The cut: a file of at most 1 MiB keeps its bytes (a short clip, a sticker, a screenshot, a document), and so does a
+* voice message of at most 4 MiB. Voice messages are part of the conversation, and the longest one the apps record
+* (15 minutes at 32 kbit/s, `VOICE_LIMITS`) is about 3.6 MB, so every recorded one stays. Photos from a camera
+* (usually 2 to 8 MB), videos and large files are what is left out.
+*/
+var LIGHT_FILE_BYTES = 1048576;
+var LIGHT_VOICE_BYTES = 4194304;
+/** Whether a file of this size keeps its bytes in a light backup. */
+var keptInLight = (size, voice) => size <= (voice ? LIGHT_VOICE_BYTES : LIGHT_FILE_BYTES);
+//#endregion
 //#region src/profiles.ts
 /**
 * Profiles on disk (WISP 11xx § Profiles and files): `<home>/profiles/<name>/`, 0700, one engine store each.
@@ -8213,7 +8262,8 @@ var BACKUP_METHODS = {
 /**
 * Writes the backup to `path` (resolved by the command), sealed with `passphrase`, or not encrypted when
 * `noPassphrase` is true: one of the two, never a guess. The store is folded first, so the copy is whole. It is
-* written beside `path` and only takes its name once it is complete: a backup that fails leaves no file.
+* written beside `path` and only takes its name once it is complete: a backup that fails leaves no file. `light`:
+* the files over the cut (`keptInLight`) are left out, their records kept.
 */
 async "profile.backup"(ctx, params) {
 	const path = resolve(str(params, "path", true));
@@ -8224,11 +8274,16 @@ async "profile.backup"(ctx, params) {
 	await ctx.runtime.store.compact();
 	const paths = ctx.runtime.paths;
 	const store = join(paths.db, "snapshot.bin");
-	const files = await Promise.all((await walk(paths.files)).map(async (name) => ({
+	const light = bool(params, "light");
+	const all = await Promise.all((await walk(paths.files)).map(async (name) => ({
 		name,
 		size: (await stat(join(paths.files, name))).size
 	})));
+	const kept = async (file) => keptInLight(file.size, false) || file.size <= 4194304 && !!(await fileStore.get(basename(file.name)).catch(() => void 0))?.metadata?.voice;
+	const files = [], leftOut = [];
+	for (const file of all) (!light || await kept(file) ? files : leftOut).push(file);
 	const storeSize = (await stat(store)).size, bytes = files.reduce((sum, file) => sum + file.size, 0);
+	const leftOutBytes = leftOut.reduce((sum, file) => sum + file.size, 0);
 	const partial = `${path}.partial-${process.pid}`;
 	let out = null;
 	try {
@@ -8248,7 +8303,14 @@ async "profile.backup"(ctx, params) {
 			format: FORMAT$1,
 			createdAt: Date.now(),
 			files: files.length,
-			bytes
+			bytes,
+			...light && { light: {
+				maxFileBytes: 1048576,
+				maxVoiceBytes: 4194304,
+				files: leftOut.length,
+				bytes: leftOutBytes,
+				ids: leftOut.map((file) => basename(file.name))
+			} }
 		});
 		await put({
 			t: "file",
@@ -8283,7 +8345,12 @@ async "profile.backup"(ctx, params) {
 			path,
 			bytes: written,
 			files: files.length,
-			protection: unsealed ? "none" : "passphrase"
+			protection: unsealed ? "none" : "passphrase",
+			...light && {
+				light: true,
+				leftOut: leftOut.length,
+				leftOutBytes
+			}
 		};
 	} finally {
 		await out?.close().catch(() => {});
@@ -8376,10 +8443,13 @@ async function restoringFolder(home, name) {
 		files: join(dir, "files")
 	};
 }
-/** The folder is whole: marked as a restored copy (`RESTORED_MARK`), then given the profile's name. Never over a profile. */
-async function finishRestore(home, name, work) {
+/**
+* The folder is whole: marked as a restored copy (`RESTORED_MARK`, which names the files a light backup left out),
+* then given the profile's name. Never over a profile.
+*/
+async function finishRestore(home, name, work, leftOut = []) {
 	const paths = profilePaths(home, name);
-	await writeFile(join(work.dir, RESTORED_MARK), "", { mode: 384 });
+	await writeFile(join(work.dir, RESTORED_MARK), leftOut.length ? JSON.stringify({ leftOut }) : "", { mode: 384 });
 	if (existsSync(paths.dir)) throw new CliError("refused", `Profile ${name} exists: restore into a new name`);
 	await rename(work.dir, paths.dir);
 	return paths;
@@ -8424,6 +8494,7 @@ async function restoreProfile(home, name, file, passphrase) {
 		const first = await next();
 		const head = first?.json === void 0 ? null : parse(first.json);
 		if (head?.t !== "profile" || head.format !== FORMAT$1) throw new CliError("refused", "This backup is not a headless Ghostly profile");
+		const leftOut = Array.isArray(head.light?.ids) ? head.light.ids.filter((id) => typeof id === "string") : [];
 		work = await restoringFolder(home, name);
 		const paths = work;
 		await mkdir(paths.db, {
@@ -8474,7 +8545,7 @@ async function restoreProfile(home, name, file, passphrase) {
 		} finally {
 			await out?.handle.close().catch(() => {});
 		}
-		return await finishRestore(home, name, work);
+		return await finishRestore(home, name, work, leftOut);
 	} catch (error) {
 		if (work) await rm(work.dir, {
 			recursive: true,
@@ -9000,6 +9071,45 @@ async function unsealSeed(seed, password) {
 	}
 }
 //#endregion
+//#region ../browser/src/engine/paymentAdapters/away.ts
+var away = /* @__PURE__ */ new Map();
+/** The wallets away from this device, by wallet id, with the name of their home device ("" when it has none here). */
+function setAwayWallets(next) {
+	away = new Map(next);
+}
+/** The home device's name of a wallet away from this device, or undefined when it is here. */
+function awayFrom(id) {
+	return away.get(id);
+}
+/** A wallet that cannot be used here: it is at home on another device. */
+var WalletAwayError = class extends Error {
+	constructor(wallet, device) {
+		super(device ? engineText("walletAway", {
+			wallet,
+			device
+		}) : engineText("walletAwayUnnamed", { wallet }));
+		this.name = "WalletAwayError";
+	}
+};
+/**
+* Whether a single-writer wallet (Ark, Bark, Spark and the Breez source, Fedimint) may open its SDK now: the engine
+* says, from a good turn read under 60 seconds old (WISP 06 § Wallets). Every open asks, the retries of each wallet
+* included, so a device replaced while it was offline does not reopen one on a retry.
+*/
+var turnGate = async () => true;
+function setSingleWriterGate(gate) {
+	turnGate = gate ?? (async () => true);
+}
+/** Throws (the wallet tries again later, as it does when its server does not answer) without a fresh good turn read. */
+async function requireTurn() {
+	if (!await turnGate().catch(() => false)) throw new Error("Checking which device is active");
+}
+/** Throws when the wallet `id` is at home on another device. */
+function refuseAway(id, wallet) {
+	const device = awayFrom(id);
+	if (device !== void 0) throw new WalletAwayError(wallet, device);
+}
+//#endregion
 //#region ../browser/src/engine/paymentAdapters/providers/sources.ts
 /** Where a source is stored: the mode's one, or one of several (`key`). */
 var sourceKey = (kind, mode, key) => `${kind}Source-${mode}${key ? `-${key}` : ""}`;
@@ -9117,6 +9227,13 @@ var ProviderSources = class {
 		await this.load(this.mode);
 		this.view = this.idle();
 	}
+	/** One saved secret of the source (a handoff asks whether an LND card pins its certificate, and a Breez phrase), or undefined. */
+	async secret(name) {
+		const stored = this.stored;
+		if (!stored?.secrets) return void 0;
+		const value = JSON.parse(await unsealSeed(stored.secrets, stored.deviceKey ?? ""))[name];
+		return typeof value === "string" && value ? value : void 0;
+	}
 	/** The list of providers changed (a plugin registered): the picker is told, nothing reconnects. */
 	refreshOffered() {
 		this.view = {
@@ -9214,6 +9331,7 @@ var ProviderSources = class {
 	}
 	/** Creates a provider and checks it is on a network of this mode before anything uses it. */
 	async open(descriptor, settings, controller = this.controller) {
+		if (descriptor.id === "breez") await requireTurn();
 		const signal = controller.signal;
 		const provider = await this.gate.within(abortable(descriptor.create(settings, {
 			...this.options.host(),
@@ -9384,7 +9502,7 @@ var ProviderSources = class {
 				s[STORES.settings].delete(sourceKey(this.options.kind, this.mode, this.options.key));
 				s[STORES.settings].delete(seenKey(this.options.kind, this.mode, this.options.key));
 			});
-			await this.disconnect();
+			await this.disconnect(true);
 			this.stored = void 0;
 			this.seen = void 0;
 			this.failures = 0;
@@ -9407,7 +9525,7 @@ var ProviderSources = class {
 			});
 			this.stopped = true;
 			this.gate.close();
-			await this.disconnect();
+			await this.disconnect(true);
 			this.stored = void 0;
 			this.seen = void 0;
 			this.view = {
@@ -9448,13 +9566,24 @@ var ProviderSources = class {
 	async refresh() {
 		clearTimeout(this.timer);
 		const provider = this.provider;
-		if (!provider || !this.options.refresh) return;
+		if (!provider) return;
+		if (!this.options.refresh) {
+			if (!this.view.read) {
+				this.view = {
+					...this.view,
+					read: true
+				};
+				this.options.changed();
+			}
+			return;
+		}
 		try {
 			const details = await this.options.refresh(provider);
 			if (provider !== this.provider) return;
 			this.view = {
 				...this.view,
 				...details,
+				read: true,
 				balanceAt: void 0,
 				error: void 0
 			};
@@ -9486,7 +9615,8 @@ var ProviderSources = class {
 			s[STORES.settings].put(seen, key);
 		}).catch(() => {});
 	}
-	async disconnect() {
+	/** `forget`: the source is removed, so what it keeps on this device goes too (a provider's own `forget`). */
+	async disconnect(forget = false) {
 		clearTimeout(this.timer);
 		clearTimeout(this.retry);
 		this.controller.abort();
@@ -9495,7 +9625,7 @@ var ProviderSources = class {
 		this.provider = void 0;
 		this.descriptor = void 0;
 		this.secrets = {};
-		await provider?.close().catch(() => {});
+		await (forget && provider?.forget ? provider.forget() : provider?.close())?.catch(() => {});
 	}
 	/** Shutting down: nothing reconnects afterwards. */
 	async stop() {
@@ -9510,6 +9640,9 @@ var PREFIX = "lightningOp-";
 var opKey = (direction, hash) => `${PREFIX}${direction}-${hash}`;
 var RANGE$1 = () => IDBKeyRange.bound(PREFIX, `${PREFIX}\uffff`);
 /** Every Lightning operation journaled, of every network and card. */
+/** Lightning payments whose call to the source has not returned, on any card of this page (WISP 06 § Payments in flight). */
+var paying = 0;
+var lightningPaying = () => paying;
 async function readLightningJournal() {
 	return wrap((await store$1(STORES.settings, "readonly")).getAll(RANGE$1()));
 }
@@ -9748,6 +9881,7 @@ var LightningService = class {
 			ref: quote.provider.paymentRef?.(quote.invoice)
 		};
 		await this.put(op);
+		paying += 1;
 		try {
 			const result = await quote.provider.payInvoice(quote.invoice, quote.maxFee, context.note);
 			op = result.state === "paid" ? {
@@ -9775,6 +9909,8 @@ var LightningService = class {
 				state: "unknown",
 				error: quote.provider.capabilities.lookup ? "No answer from the source. It is being checked; nothing is paid again." : "No answer from the source, and it cannot be asked: check this payment in the wallet itself. It is never paid again."
 			};
+		} finally {
+			paying -= 1;
 		}
 		await this.put(op);
 		if (op.state !== "paid") this.schedule(OUT_POLL_MS);
@@ -9939,6 +10075,156 @@ var LightningService = class {
 	}
 };
 //#endregion
+//#region ../browser/src/engine/paymentAdapters/providers/breezDatabases.ts
+var netOf = (network) => network === "bitcoin" || network === "mainnet" ? "mainnet" : "regtest";
+var hex$2 = (bytes) => Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+var digest = (text) => hex$2(sha256(new TextEncoder().encode(text))).slice(0, 16);
+/** What a Breez database name looks like, old or new: nothing about the seed or the profile shows in it. */
+var BREEZ_DATABASE = /^ghostly-breez-(mainnet|regtest)-[0-9a-f]{16}$/;
+/** The name every profile of the origin used for this phrase before databases were per profile. */
+var breezLegacyName = (network, mnemonic) => `ghostly-breez-${netOf(network)}-${digest(`ghostly-breez:${netOf(network)}:${mnemonic}`)}`;
+/** The name of this phrase's Breez database in one profile (`space`: the profile's peer database, WISP 04). */
+var breezDatabaseName = (network, mnemonic, space = databaseName()) => `ghostly-breez-${netOf(network)}-${digest(`ghostly-breez:${space}:${netOf(network)}:${mnemonic}`)}`;
+/**
+* The databases the SDK keeps under one storage name. SDK 0.26 roots them there: `<name>/<network>/<identity>` and
+* `<name>/<network>/<identity>-tree`, the identity read from the seed inside the SDK. Older builds kept `<name>`
+* itself. A browser without `indexedDB.databases()` cannot list them: only the bare names are known there.
+*/
+async function breezDatabaseFiles(name) {
+	const files = [name, `${name}-tree`];
+	if (typeof indexedDB.databases !== "function") return files;
+	const under = (await indexedDB.databases()).map((d) => d.name ?? "").filter((file) => file.startsWith(`${name}/`));
+	return [.../* @__PURE__ */ new Set([...files, ...under])];
+}
+var REGISTER = "ghostly-breez";
+var STORE = "databases";
+var request$1 = (r) => new Promise((resolve, reject) => {
+	r.onsuccess = () => resolve(r.result);
+	r.onerror = () => reject(r.error);
+});
+function openRegister() {
+	return new Promise((resolve, reject) => {
+		const open = indexedDB.open(REGISTER, 1);
+		open.onupgradeneeded = () => {
+			if (!open.result.objectStoreNames.contains(STORE)) open.result.createObjectStore(STORE);
+		};
+		open.onsuccess = () => resolve(open.result);
+		open.onerror = () => reject(open.error);
+		open.onblocked = () => reject(/* @__PURE__ */ new Error("The Breez register is blocked"));
+	});
+}
+async function withRegister(mode, run) {
+	const db = await openRegister();
+	try {
+		const tx = db.transaction(STORE, mode);
+		const done = new Promise((resolve, reject) => {
+			tx.oncomplete = () => resolve();
+			tx.onerror = tx.onabort = () => reject(tx.error);
+		});
+		const result = await run(tx.objectStore(STORE));
+		await done;
+		return result;
+	} finally {
+		db.close();
+	}
+}
+/**
+* Whether the SDK keeps a wallet under this storage name on this device (`breezDatabaseFiles`). A browser that cannot
+* list databases is answered yes: the first profile then takes the old name whether or not it is there, which is
+* safe, since only one profile ever has it.
+*/
+async function exists(name) {
+	if (typeof indexedDB.databases !== "function") return true;
+	return (await indexedDB.databases()).some((d) => d.name === name || !!d.name?.startsWith(`${name}/`));
+}
+/**
+* The Breez database this profile opens for this phrase: the old shared one when this profile owns it (or is the
+* first to claim it), else the profile's own. Noted in the register either way. A device whose IndexedDB cannot be
+* read gets the profile's own name: never a database another profile may use.
+*/
+async function breezDatabase(network, mnemonic, space = databaseName()) {
+	const fresh = breezDatabaseName(network, mnemonic, space);
+	if (typeof indexedDB === "undefined") return fresh;
+	const legacy = breezLegacyName(network, mnemonic);
+	try {
+		const legacyHere = await exists(legacy);
+		return await withRegister("readwrite", async (store) => {
+			const [owner, own] = await Promise.all([request$1(store.get(legacy)), request$1(store.get(fresh))]);
+			if (owner?.space === space) return legacy;
+			if (!own && !owner && legacyHere) {
+				store.put({
+					name: legacy,
+					space,
+					network: netOf(network),
+					legacy: true
+				}, legacy);
+				return legacy;
+			}
+			if (!own) store.put({
+				name: fresh,
+				space,
+				network: netOf(network)
+			}, fresh);
+			return fresh;
+		});
+	} catch {
+		return fresh;
+	}
+}
+/** The names this profile has noted for this phrase (nothing is claimed): what removing the wallet deletes. */
+async function breezDatabasesFor(network, mnemonic, space = databaseName()) {
+	const names = [breezLegacyName(network, mnemonic), breezDatabaseName(network, mnemonic, space)];
+	return (await breezDatabasesOf(space)).filter((name) => names.includes(name));
+}
+/**
+* The name this profile uses for this phrase, read without claiming anything: the one it noted (`breezDatabase`), else
+* the profile's own name. What a handoff deletes and compares (WISP 06 § Wallets): never the old shared database of
+* another profile that has not opened the phrase since the change.
+*/
+async function breezDatabaseInUse(network, mnemonic, space = databaseName()) {
+	return (await breezDatabasesFor(network, mnemonic, space))[0] ?? breezDatabaseName(network, mnemonic, space);
+}
+/** Every Breez database name noted for a profile of this device. */
+async function breezDatabasesOf(space) {
+	if (typeof indexedDB === "undefined") return [];
+	try {
+		return (await withRegister("readonly", (store) => request$1(store.getAll()))).filter((e) => e?.space === space && BREEZ_DATABASE.test(e.name)).map((e) => e.name);
+	} catch {
+		return [];
+	}
+}
+var deleteDatabase = (name) => new Promise((resolve) => {
+	try {
+		const r = indexedDB.deleteDatabase(name);
+		r.onsuccess = r.onerror = r.onblocked = () => resolve();
+	} catch {
+		resolve();
+	}
+});
+var deleteStrictly = (name) => new Promise((resolve, reject) => {
+	const r = indexedDB.deleteDatabase(name);
+	r.onsuccess = () => resolve();
+	r.onerror = () => reject(r.error ?? /* @__PURE__ */ new Error(`${name} was not deleted`));
+	r.onblocked = () => reject(/* @__PURE__ */ new Error(`${name} is still open`));
+});
+/**
+* Deletes one Breez wallet's databases (all the SDK keeps under the name) and its note in the register. Anything else
+* is refused. `strict` (a handoff, WISP 06 § Wallets): a delete that is blocked or fails rejects and the note stays,
+* so the caller tries again.
+*/
+async function dropBreezDatabase(name, options = {}) {
+	if (!BREEZ_DATABASE.test(name) || typeof indexedDB === "undefined") return;
+	for (const file of await breezDatabaseFiles(name).catch(() => [name, `${name}-tree`])) await (options.strict ? deleteStrictly(file) : deleteDatabase(file));
+	await withRegister("readwrite", (store) => {
+		store.delete(name);
+	}).catch(() => {});
+}
+//#endregion
+//#region ../browser/src/engine/paymentAdapters/providers/recoveryPhrase.ts
+/** A phrase as BIP 39 wants it, however it was typed or pasted. */
+var normalizePhrase = (text = "") => text.trim().toLowerCase().split(/\s+/).join(" ");
+var isRecoveryPhrase = (text) => validateMnemonic(normalizePhrase(text), wordlist);
+//#endregion
 //#region ../browser/src/engine/paymentAdapters/providers/lightningCards.ts
 /** The card of Lightning through the Cashu mints: at most one per network, shown while the network has mints. */
 var CASHU_CARD = "cashu";
@@ -10275,14 +10561,37 @@ var LightningCards = class {
 	list() {
 		return readLightningJournal();
 	}
+	/**
+	* What a handoff needs to know of the cards (WISP 06 § Wallets), from their sealed settings: the LND cards that pin a
+	* certificate, and each Breez card's database on this device, by wallet id.
+	*/
+	async handoffFacts() {
+		const pinned = [], breez = /* @__PURE__ */ new Map();
+		for (const [id, service] of this.services) {
+			const wallet = `lightning:${this.network}:${id}`, providerId = service.view.providerId;
+			if (providerId === "lnd" && await service.sources.secret("certificate")) pinned.push(wallet);
+			if (providerId === "breez") {
+				const mnemonic = await service.sources.secret("mnemonic");
+				if (mnemonic) breez.set(wallet, await breezDatabaseInUse(this.network === "mainnet" ? "bitcoin" : "regtest", normalizePhrase(mnemonic)));
+			}
+		}
+		return {
+			pinned,
+			breez
+		};
+	}
+	/** The cards whose source is opened on this device: not one at home on another device (WISP 06 § Wallets that stay home). */
+	here() {
+		return [...this.services].filter(([id]) => awayFrom(`lightning:${this.network}:${id}`) === void 0).map(([, s]) => s);
+	}
 	async reconcile() {
-		await Promise.all(this.all().map((s) => s.reconcile()));
+		await Promise.all(this.here().map((s) => s.reconcile()));
 	}
 	async recover() {
-		for (const s of this.all()) await s.recover();
+		for (const s of this.here()) await s.recover();
 	}
 	async ensureReady() {
-		await Promise.all(this.all().map((s) => s.ensureReady()));
+		await Promise.all(this.here().map((s) => s.ensureReady()));
 	}
 	refreshOffered() {
 		for (const s of this.all()) s.refreshOffered();
@@ -16682,6 +16991,15 @@ function irohWasmBytes() {
 * settings and the Mainline DHT directly (read when the relays fail, written always).
 * The caller holds the profile's lock.
 */
+/** The files a light backup left out, as the restore wrote them in the mark (an empty mark: none). */
+function leftOutIn(mark) {
+	try {
+		const ids = JSON.parse(readFileSync(mark, "utf8") || "{}").leftOut;
+		return Array.isArray(ids) ? ids.filter((id) => typeof id === "string") : [];
+	} catch {
+		return [];
+	}
+}
 async function startRuntime(paths, options = {}) {
 	const pinned = pkarrRelays();
 	const trace = process.env.GHOSTLY_LINK_TRACE;
@@ -16690,7 +17008,9 @@ async function startRuntime(paths, options = {}) {
 	const restored = join(paths.dir, RESTORED_MARK);
 	if (existsSync(restored)) {
 		try {
-			await (await import("./assets/restoredRows-tVxgyG23.js")).markRestoredWallet();
+			const rows = await import("./assets/restoredRows-C1O9FfA4.js");
+			await rows.markRestoredWallet();
+			await rows.markLeftOutFiles(leftOutIn(restored));
 			await store.compact();
 		} catch (error) {
 			await store.close().catch(() => {});
@@ -16706,20 +17026,21 @@ async function startRuntime(paths, options = {}) {
 	if (testMints) (await Promise.resolve().then(() => mints_exports)).declareTestMints(testMints.split(","));
 	await installEventSource();
 	await preloadWalletModules();
-	(await import("./assets/ghostly_iroh_web-CPa_YEfb.js")).initSync({ module: irohWasmBytes() });
-	const [{ registerFileBytes }, { NodeFileBytes }] = await Promise.all([import("./assets/fileBytes-Br_MpeNT.js").then((n) => n.o), import("./assets/fileBytes-CpP9Vj7s.js")]);
+	(await import("./assets/ghostly_iroh_web-Dvzh3Y6E.js")).initSync({ module: irohWasmBytes() });
+	const [{ registerFileBytes }, { NodeFileBytes }] = await Promise.all([import("./assets/fileBytes-DxiJHmTk.js").then((n) => n.o), import("./assets/fileBytes-BQ84L9Fe.js")]);
 	registerFileBytes("native", async () => new NodeFileBytes(paths.files), true);
-	const [{ EngineServer }, { createHyperEndpoint }] = await Promise.all([import("./assets/server-BnNXYzR9.js").then((n) => n.t), import("./assets/endpoint-CaSbSFDw.js")]);
+	const [{ EngineServer }, { createHyperEndpoint }] = await Promise.all([import("./assets/server-vGoe9MET.js").then((n) => n.t), import("./assets/endpoint-CaSbSFDw.js")]);
 	const network = hyperdhtNetwork();
 	const dht = mainlineNetwork();
-	const mainline = dht.off ? null : new (await (import("./assets/mainline-CcO2f8jy.js"))).Mainline({
+	const mainline = dht.off ? null : new (await (import("./assets/mainline-CKFpwXcB.js"))).Mainline({
 		bootstrap: dht.bootstrap,
 		host: dht.host
 	});
-	const transport = mainline || pinned ? new (await (import("./assets/mainline-CcO2f8jy.js"))).RelaysAndDht(mainline, pinned ? { relays: pinned } : {}, !!pinned) : null;
+	const transport = mainline || pinned ? new (await (import("./assets/mainline-CKFpwXcB.js"))).RelaysAndDht(mainline, pinned ? { relays: pinned } : {}, !!pinned) : null;
 	const server = new EngineServer({
 		...transport ? { transport } : {},
 		irohWeb: true,
+		singleDevice: true,
 		nativeTransports: { "hyperdht/1": (seedB64) => createHyperEndpoint(fromBase64Url$1(seedB64), network) },
 		automaticWallets: false,
 		fedimintSdk: nodeFedimintSdk(join(paths.dir, "fedimint")),
@@ -17296,12 +17617,13 @@ var SPECIAL = [
 		}
 	],
 	[
-		"profile backup --out <file> [--passphrase-file f | --no-passphrase]",
+		"profile backup --out <file> [--passphrase-file f | --no-passphrase] [--light]",
 		"A backup of the profile, encrypted with a passphrase (from a file or GHOSTLY_BACKUP_PASSPHRASE); --no-passphrase makes one anyone can read",
 		{
 			out: o("string", "The backup file to write"),
 			"passphrase-file": o("string", "The passphrase, from this file (else GHOSTLY_BACKUP_PASSPHRASE)"),
-			passphrase: o("boolean", "--no-passphrase: do not encrypt. The file then holds the profile's keys and wallet secrets in the clear")
+			passphrase: o("boolean", "--no-passphrase: do not encrypt. The file then holds the profile's keys and wallet secrets in the clear"),
+			light: o("boolean", "Leave out files over 1 MB (voice messages over 4 MB); their messages stay")
 		}
 	],
 	[
@@ -17475,6 +17797,10 @@ async function profileCommand(sub, argv) {
 			passphrase: {
 				type: "boolean",
 				description: ""
+			},
+			light: {
+				type: "boolean",
+				description: ""
 			}
 		},
 		restore: {
@@ -17552,16 +17878,19 @@ async function profileCommand(sub, argv) {
 		}
 		case "backup": {
 			const out = parsed.options.out;
-			if (typeof out !== "string") throw new CliError("usage", "ghostly profile backup --out <file> [--passphrase-file f | --no-passphrase] (or GHOSTLY_BACKUP_PASSPHRASE)");
+			if (typeof out !== "string") throw new CliError("usage", "ghostly profile backup --out <file> [--passphrase-file f | --no-passphrase] [--light] (or GHOSTLY_BACKUP_PASSPHRASE)");
 			const unsealed = parsed.options.passphrase === false;
 			if (parsed.options.passphrase === true) throw new CliError("usage", "The passphrase comes from --passphrase-file or GHOSTLY_BACKUP_PASSPHRASE, never the command line");
 			if (unsealed && (parsed.options["passphrase-file"] !== void 0 || process.env.GHOSTLY_BACKUP_PASSPHRASE)) throw new CliError("usage", "A passphrase is set (--passphrase-file or GHOSTLY_BACKUP_PASSPHRASE) and --no-passphrase was given: choose one");
+			const light = parsed.options.light === true ? { light: true } : {};
 			const made = await withSession(g, (s) => s.call("profile.backup", unsealed ? {
 				path: resolve(out),
-				noPassphrase: true
+				noPassphrase: true,
+				...light
 			} : {
 				path: resolve(out),
-				passphrase: backupPassphrase(parsed.options["passphrase-file"])
+				passphrase: backupPassphrase(parsed.options["passphrase-file"]),
+				...light
 			}));
 			if (unsealed) process.stderr.write("Not encrypted: this file holds the profile's keys, chats and wallet secrets in the clear. Anyone who gets it gets everything in it, including any money in its wallets.\n");
 			print(made);
@@ -18279,6 +18608,6 @@ async function run(argv) {
 //#region src/bin.ts
 run(process.argv.slice(2));
 //#endregion
-export { boundedIdentityFetch as $, TEST_MINT as A, registeredLightningProviders as B, networkLabel as C, WALLET_TYPES as D, MESSAGE_DETAILS_MAX_BYTES as E, paysItsOwnInvoices as F, SourceConfigError as G, reserveAdapterIds as H, BACKUP_MEDIA_TYPE as I, networkMode as J, SourceUnreachableError as K, MAX_BACKUP_BYTES as L, isTestMint as M, isWorthlessMint as N, BITCOIN_INVOICE_ON_TESTNET as O, mintNetwork as P, setOwnDidSource as Q, identityProviders as R, WrongNetworkError as S, cashuMint as T, NothingSpentError as U, registeredOnchainProviders as V, PROVIDER_PLATFORMS as W, assertPublicServer as X, redact as Y, resolveAtprotoDid as Z, newDeviceKey as _, createFailure as a, replyRef as at, ModeChanged as b, paymentNetwork as c, paymentWireId as ct, networkReason as d, removeStored as dt, verifyIdentity as et, rpcHost as f, storedSize as ft, intentRepository as g, ProviderSources as h, assertConfirmedReal as i, receivedPairedReply as it, fakesLightning as j, DEFAULT_MINTS as k, paymentNetworksOf as l, FileAppender as lt, LightningCards as m, loadFedimintSdk as n, groupReply as nt, createTiming as o, replyTo as ot, CASHU_CARD as p, streamStored as pt, isNothingSpentError as q, WALLET_NAMES as r, pairedWireReply as rt, crossNetwork as s, paymentAlias as st, fedimintDatabase as t, chosenResolver as tt, walletInstances as u, readStored as ut, sealSeed as v, CASHU_MINT_SOURCE as w, ModeGate as x, unsealSeed as y, onAdaptersChanged as z };
+export { onAdaptersChanged as $, intentRepository as A, MESSAGE_DETAILS_MAX_BYTES as B, ProviderSources as C, FileAppender as Ct, requireTurn as D, streamStored as Dt, refuseAway as E, storedSize as Et, ModeGate as F, fakesLightning as G, BITCOIN_INVOICE_ON_TESTNET as H, WrongNetworkError as I, mintNetwork as J, isTestMint as K, networkLabel as L, sealSeed as M, unsealSeed as N, setAwayWallets as O, ModeChanged as P, identityProviders as Q, CASHU_MINT_SOURCE as R, lightningPaying as S, paymentWireId as St, awayFrom as T, removeStored as Tt, DEFAULT_MINTS as U, WALLET_TYPES as V, TEST_MINT as W, BACKUP_MEDIA_TYPE as X, paysItsOwnInvoices as Y, MAX_BACKUP_BYTES as Z, normalizePhrase as _, pairedWireReply as _t, createFailure as a, SourceConfigError as at, breezDatabasesFor as b, replyTo as bt, paymentNetwork as c, networkMode as ct, networkReason as d, resolveAtprotoDid as dt, registeredLightningProviders as et, rpcHost as f, setOwnDidSource as ft, isRecoveryPhrase as g, groupReply as gt, cardsKey as h, chosenResolver as ht, assertConfirmedReal as i, PROVIDER_PLATFORMS as it, newDeviceKey as j, setSingleWriterGate as k, paymentNetworksOf as l, redact as lt, LightningCards as m, verifyIdentity as mt, loadFedimintSdk as n, reserveAdapterIds as nt, createTiming as o, SourceUnreachableError as ot, CASHU_CARD as p, boundedIdentityFetch as pt, isWorthlessMint as q, WALLET_NAMES as r, NothingSpentError as rt, crossNetwork as s, isNothingSpentError as st, fedimintDatabase as t, registeredOnchainProviders as tt, walletInstances as u, assertPublicServer as ut, breezDatabase as v, receivedPairedReply as vt, sourceKey as w, readStored as wt, dropBreezDatabase as x, paymentAlias as xt, breezDatabaseInUse as y, replyRef as yt, cashuMint as z };
 
 //# sourceMappingURL=ghostly.mjs.map