@ghostlytools/cli 1.1.2 → 1.1.4

package/dist/ghostly.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { a as fileBytesOf, d as __exportAll, i as fileBytes, l as FILE_BYTES_STEP } from "./assets/fileBytes-DxiJHmTk.js";
-import { $ as checkAtprotoProofRecord, $s as randomBytes$1, $t as isPubkyKey, Aa as RTC_CONFIG, Ai as voicePeaksOf, B as sameSshKey, Ci as sanitizeFileName, Cn as resolveLightningDestination, Ct as parseDidSignaturePaste, Di as baseMime, Ea as LIMITS, Ei as VOICE_LIMITS, En as decodeBolt11, Et as strictBase64Url, Fa as extractParamsFromSdp, G as decodeAnyBitcoinAddress, H as verifySshSignature, Hs as openRelayPayload, I as SSHSIG_NAMESPACE, Ia as parseCallSignal, Ir as BUTTONS_CAPABILITY, J as ATPROTO_PROOF_COLLECTION, K as ATPROTO_DECLARED_SCOPE, Kt as walletNetworkOf, L as SshSigError, La as signalHasVideo, Ma as buildSdpFromSignal, Na as callRtcConfig, Ns as setLinkTraceSink, P as groupName, Pa as callSignalHeardAt, Pr as checkPushEndpoint, Q as atprotoProofRkey, Qi as replySnippet, Qr as IdentityCheckUnavailable, Qs as fromBase64Url$1, Qt as PUBKY_PROOF_MAX_BYTES, R as parseSshPublicKey, Sa as GhostlyHttpError, Sn as requestLnurlInvoice, St as parseDidDocument, Ti as PLAYABLE_AUDIO, Tn as engineText, Tt as staticDidDocument, U as verifyBitcoinMessage, V as sshSignCommand, Vt as WALLET_NETWORKS, W as BitcoinAddressError, X as atprotoDidMethod, Xs as sanitizeAvatar, Y as ATPROTO_PROOF_SCOPE, Ys as MAX_AVATAR_LENGTH, Z as atprotoProofRecord, _n as recordsFromTxt, _t as didWebFileNames, an as pubkyProofPath, at as verifyAtprotoRecordProof, bn as txtValue, bt as normalizeDid, cn as DOMAIN_FILE_MAX_BYTES, dn as domainTxtRecord, dt as checkDidSignature, ea as ITEM_STATES, ec as toBase64Url$1, ei as boundVerifiedIdentity, en as isPubkyProofFolder, et as isAtprotoDid, fn as domainWellKnownFile, ft as didGhostlyServiceEntry, gn as normalizeDomain, gr as TYPING_REFRESH_MS, gt as didWebFile, hn as nip05RootKey, hr as TYPING_KINDS, ht as didWebDocumentUrl, ia as checkStatusCard, in as pubkyProofFile, it as AtprotoProofError, ja as answersOffer, jt as resolveDidDht, ka as CALL_SIGNAL_MAX_AGE_MS, ki as parseVoiceMeta, ln as decodeDnsResponse, lt as DidError, mn as isPublicAddress, mt as didSignedMessages, na as STATUS_CARD_LIMITS, nc as utf8Decode, nn as normalizePubkyKey, ns as inviteLink, nt as parseAtprotoDidDocument, on as homeserverWebEndpoint, ot as DID_DOCUMENT_MAX_BYTES$1, pn as encodeDnsQuery, pt as didJwsAlg, q as ATPROTO_FULL_SCOPE, ra as buttonLabelClash, rc as utf8Encode, ri as identityStatement, rn as pubkyProofCapability, rt as shortAtprotoDid, sn as pubkyHomeserverOf, st as DID_FILE_MAX_BYTES, ta as RUN_RESULTS, tn as newPubkyProofFolder, tt as normalizeAtprotoHandle, un as dnsProofName, ut as checkDidJws, vn as recordsFromWellKnown, vr as sanitizeTypingStatus, vt as didWebFileUrl, wi as sanitizeMime, wn as engineError, wt as signingKeys, xi as readImageMeta, xn as wellKnownUrl, xt as parseDid, yn as recordsName, yt as didWebHost, z as parseSshSignature, zs as RELAY_PAYLOAD_MAX_BYTES } from "./assets/src-CJdPTl7Q.js";
+import { $ as checkAtprotoProofRecord, $i as replySnippet, $r as IdentityCheckUnavailable, $s as fromBase64Url$1, $t as isPubkyKey, Aa as CALL_SIGNAL_MAX_AGE_MS, Ai as parseVoiceMeta, B as sameSshKey, Bs as RELAY_PAYLOAD_MAX_BYTES, Ca as GhostlyHttpError, Cn as resolveLightningDestination, Ct as parseDidSignaturePaste, Da as LIMITS, Di as VOICE_LIMITS, Ei as PLAYABLE_AUDIO, En as decodeBolt11, Et as strictBase64Url, Fa as callSignalHeardAt, G as decodeAnyBitcoinAddress, H as verifySshSignature, I as SSHSIG_NAMESPACE, Ia as extractParamsFromSdp, Ir as BUTTONS_CAPABILITY, J as ATPROTO_PROOF_COLLECTION, K as ATPROTO_DECLARED_SCOPE, Kt as walletNetworkOf, L as SshSigError, La as parseCallSignal, Ma as answersOffer, Na as buildSdpFromSignal, Oi as baseMime, P as groupName, Pa as callRtcConfig, Pr as checkPushEndpoint, Ps as setLinkTraceSink, Q as atprotoProofRkey, Qt as PUBKY_PROOF_MAX_BYTES, R as parseSshPublicKey, Ra as signalHasVideo, Si as readImageMeta, Sn as requestLnurlInvoice, St as parseDidDocument, Ti as sanitizeMime, Tn as engineText, Tt as staticDidDocument, U as verifyBitcoinMessage, Us as openRelayPayload, V as sshSignCommand, Vt as WALLET_NETWORKS, W as BitcoinAddressError, X as atprotoDidMethod, Xs as MAX_AVATAR_LENGTH, Y as ATPROTO_PROOF_SCOPE, Z as atprotoProofRecord, Zs as sanitizeAvatar, _n as recordsFromTxt, _t as didWebFileNames, aa as checkStatusCard, an as pubkyProofPath, at as verifyAtprotoRecordProof, bn as txtValue, bt as normalizeDid, cn as DOMAIN_FILE_MAX_BYTES, dn as domainTxtRecord, dt as checkDidSignature, ec as randomBytes$1, en as isPubkyProofFolder, et as isAtprotoDid, fn as domainWellKnownFile, ft as didGhostlyServiceEntry, gn as normalizeDomain, gr as TYPING_REFRESH_MS, gt as didWebFile, hn as nip05RootKey, hr as TYPING_KINDS, ht as didWebDocumentUrl, ia as buttonLabelClash, ic as utf8Encode, ii as identityStatement, in as pubkyProofFile, it as AtprotoProofError, ja as RTC_CONFIG, ji as voicePeaksOf, jt as resolveDidDht, ln as decodeDnsResponse, lt as DidError, mn as isPublicAddress, mt as didSignedMessages, na as RUN_RESULTS, nn as normalizePubkyKey, nt as parseAtprotoDidDocument, on as homeserverWebEndpoint, ot as DID_DOCUMENT_MAX_BYTES$1, pn as encodeDnsQuery, pt as didJwsAlg, q as ATPROTO_FULL_SCOPE, ra as STATUS_CARD_LIMITS, rc as utf8Decode, rn as pubkyProofCapability, rs as inviteLink, rt as shortAtprotoDid, sn as pubkyHomeserverOf, st as DID_FILE_MAX_BYTES, ta as ITEM_STATES, tc as toBase64Url$1, ti as boundVerifiedIdentity, tn as newPubkyProofFolder, tt as normalizeAtprotoHandle, un as dnsProofName, ut as checkDidJws, vn as recordsFromWellKnown, vr as sanitizeTypingStatus, vt as didWebFileUrl, wi as sanitizeFileName, wn as engineError, wt as signingKeys, xn as wellKnownUrl, xt as parseDid, yn as recordsName, yt as didWebHost, z as parseSshSignature } from "./assets/src-K3NijMq-.js";
 import { d as wrap, i as databaseName, l as store$1, n as STORES, o as fileStore, s as openDb, u as transact } from "./assets/idb-Co2lObpU.js";
 import { createRequire } from "node:module";
 import { spawn } from "node:child_process";
@@ -34,7 +34,7 @@ import { IDBFactory, IDBKeyRange as IDBKeyRange$1, IDBTransaction } from "fake-i
 import { format } from "node:util";
 var package_default = {
 	name: "@ghostlytools/cli",
-	version: "1.1.2",
+	version: "1.1.4",
 	type: "module",
 	description: "Ghostly for bots and terminals: the app's own engine, headless on Node, behind a daemon and a `ghostly` command with JSON output.",
 	license: "MIT",
@@ -60,9 +60,9 @@ var package_default = {
 		"test": "vitest run"
 	},
 	dependencies: {
-		"@arkade-os/sdk": "0.4.76",
+		"@arkade-os/sdk": "0.4.78",
 		"@atproto/jwk-webcrypto": "^0.3.4",
-		"@atproto/oauth-client": "^0.8.7",
+		"@atproto/oauth-client": "^0.8.8",
 		"@bitcoindevkit/bdk-wallet-web": "0.3.0",
 		"@bitcoinerlab/descriptors-scure": "^3.2.0",
 		"@cashu/cashu-ts": "^4.11.0",
@@ -80,7 +80,7 @@ var package_default = {
 		"@secondts/bark": "0.25.0",
 		"@serenity-kit/opaque": "1.1.0",
 		"@synonymdev/pubky": "0.14.0",
-		"@tetherto/wdk-wallet-evm": "1.0.0-beta.19",
+		"@tetherto/wdk-wallet-evm": "1.0.0-beta.20",
 		"b4a": "1.9.0",
 		"bittorrent-dht": "11.0.12",
 		"ethers": "6.17.0",
@@ -98,10 +98,10 @@ var package_default = {
 		"@ghostly/browser": "*",
 		"@ghostly/core": "*",
 		"@ghostly/iroh-web": "*",
-		"@types/node": "^26.6.3",
+		"@types/node": "^26.6.4",
 		"typescript": "^5.9.3",
-		"vite": "^8.3.1",
-		"vitest": "^5.0.2"
+		"vite": "^8.3.2",
+		"vitest": "^5.0.3"
 	}
 };
 //#endregion
@@ -339,16 +339,29 @@ function findSecret(text) {
 * 12 to 24 words in a row from the English BIP39 list whose checksum holds, anywhere in the text; or a message that
 * is nothing but 12, 15, 18, 21 or 24 of those words (a seed with one word mistyped is still most of a seed). Prose
 * breaks a run at once: "the", "a", "is", "to", "and", "of" and "I" are not on the list.
+*
+* One word said over and over is not a seed, though one in 16 such runs passes a 12-word checksum ("word" does): a
+* window of a single word never counts, and a window mostly of one word ("abandon … about") counts only when that
+* word does not go on past it on either side.
 */
 function hasMnemonic(text) {
 	const tokens = text.toLowerCase().match(/[a-z]+/g);
 	if (!tokens || tokens.length < 12) return false;
 	let budget = CHECKSUM_BUDGET;
 	let run = [];
+	const seedLike = (start, length) => {
+		const window = run.slice(start, start + length);
+		const counts = /* @__PURE__ */ new Map();
+		for (const word of window) counts.set(word, (counts.get(word) ?? 0) + 1);
+		if (counts.size === 1) return false;
+		const [most, times] = [...counts].reduce((a, b) => b[1] > a[1] ? b : a);
+		if (times > length / 2 && (run[start - 1] === most || run[start + length] === most)) return false;
+		return checksumHolds(window);
+	};
 	const check = () => {
 		if (run.length >= 12) {
-			for (const length of MNEMONIC_LENGTHS) for (let start = 0; start + length <= run.length && budget > 0; start++, budget--) if (checksumHolds(run.slice(start, start + length))) return true;
-			if (run.length === tokens.length && MNEMONIC_LENGTHS.includes(run.length)) return true;
+			for (const length of MNEMONIC_LENGTHS) for (let start = 0; start + length <= run.length && budget > 0; start++, budget--) if (seedLike(start, length)) return true;
+			if (run.length === tokens.length && MNEMONIC_LENGTHS.includes(run.length) && new Set(run).size > 1) return true;
 		}
 		run = [];
 		return false;
@@ -495,7 +508,7 @@ function decodeCbor(bytes) {
 //#endregion
 //#region src/engineMethods.ts
 /**
-* The engine's calls the daemon passes through as `engine.<method>` (WISP 11xx § Local control API): exactly the
+* The engine's calls the daemon passes through as `engine.<method>` (WISP 1100 § Local control API): exactly the
 * app's `EngineApi` (packages/browser/src/shared/rpc.ts; `engineMethods.test.ts` keeps the two equal), plus two
 * reads every host has. Nothing else on the engine object is reachable.
 */
@@ -645,6 +658,7 @@ var ENGINE_METHODS = [
 	"setWakeSubscription",
 	"setWakeMuted",
 	"wakeForCall",
+	"setCallOn",
 	"wakeConfirm",
 	"setFastPoll",
 	"createGroup",
@@ -675,6 +689,7 @@ var ENGINE_METHODS = [
 	"deviceEnrollCancel",
 	"deviceEnrollView",
 	"deviceEnrollJoin",
+	"deviceEnrollReady",
 	"deviceEnrollFinish",
 	"deviceEnrollRemove",
 	"deviceSet",
@@ -1002,7 +1017,7 @@ function groupReply(reply, myKey) {
 //#endregion
 //#region src/typing.ts
 /**
-* `typing --for` and `group typing --for`: a `start` holds 6 s on the other side (WISP 401 § Typing, WISP 9xx · Group
+* `typing --for` and `group typing --for`: a `start` holds 6 s on the other side (WISP 401 § Typing, WISP 902 · Group
 * Mesh § Typing), so the daemon says it again until the time is up, a message goes to that chat or group, or a
 * `--stop`. The engine sends a `start` at most once per refresh, counted from when the last one went: asking every half
 * refresh missed the tick at 3 s by a millisecond about half the time, so a start went every 4.5 s, 1.5 s inside the
@@ -1415,7 +1430,7 @@ function decodeWithFfmpeg(path, command = process.env.GHOSTLY_FFMPEG || "ffmpeg"
 //#endregion
 //#region src/files.ts
 /**
-* Files and voice notes in a chat (WISP 11xx, phase 3), as the app's composer sends them (packages/browser
+* Files and voice notes in a chat (WISP 1100, phase 3), as the app's composer sends them (packages/browser
 * platform/services.ts `sendFile`): the bytes go into the profile's file store first, then the engine offers them.
 * Large files follow files/3: the receiving side's person (here, a command) accepts or declines each offer.
 */
@@ -1727,7 +1742,7 @@ async function waitForEdit(ctx, chat, messageId, ms) {
 	}
 }
 /**
-* Waits until an edge took my group message, or its edit number `edit` (WISP 9xx: a group has no receipts, so this is
+* Waits until an edge took my group message, or its edit number `edit` (WISP 902: a group has no receipts, so this is
 * as far as the author sees): a member's edge in a private group, an edge to one of my hubs in a community.
 */
 async function waitForGroupFrame(ctx, groupId, messageId, edit, ms) {
@@ -1874,7 +1889,7 @@ function answer(target, kind, id, messageId, extra) {
 	};
 }
 /**
-* A task's parent is another task of mine in the same chat or group (WISP 4xx · Status Cards § A task): one that is
+* A task's parent is another task of mine in the same chat or group (WISP 405 · Status Cards § A task): one that is
 * not there is refused here, with its name, rather than sent to stand alone on every board (a reader keeps the field
 * and shows the task ungrouped). Send the parent first.
 */
@@ -2020,7 +2035,7 @@ async function flushCardUpdates(ctx) {
 	await Promise.all(waiting.map((pace) => pace.flushed));
 }
 var STATUS_CARD_METHODS = {
-	/** WISP 4xx · Status Cards: a task card in a chat or a group; the answer names the task's id and its message. */
+	/** WISP 405 · Status Cards: a task card in a chat or a group; the answer names the task's id and its message. */
 	"task.send": (ctx, params) => sendCard(ctx, params, "task"),
 	/** A task's update: the fields given, merged over its latest state, paced one per `CARD_UPDATE_GAP_MS`. */
 	"task.update": (ctx, params) => updateCard(ctx, params, "task"),
@@ -2216,9 +2231,9 @@ async function pressButton(ctx, params) {
 	};
 }
 var BUTTON_METHODS = {
-	/** WISP 4xx · Message Buttons: a press on a button of someone else's message, as the app's tap. */
+	/** WISP 406 · Message Buttons: a press on a button of someone else's message, as the app's tap. */
 	"button.press": pressButton,
-	/** WISP 4xx · Message Buttons: the answer chosen on a question of mine, its buttons closed, or its text changed. */
+	/** WISP 406 · Message Buttons: the answer chosen on a question of mine, its buttons closed, or its text changed. */
 	"button.update": updateButtons
 };
 //#endregion
@@ -2522,7 +2537,7 @@ function groupJson(group, showSecret = false) {
 //#endregion
 //#region src/groupAdmin.ts
 /**
-* Group administration and pictures (WISP 11xx, phase 3): what the app's group menu and profile screen do. The
+* Group administration and pictures (WISP 1100, phase 3): what the app's group menu and profile screen do. The
 * engine enforces who may do what (the admin); these check the arguments and name members.
 */
 /** A member by key, unique key prefix or name; never this profile itself. */
@@ -3966,7 +3981,7 @@ async function keyserverVerifiedEmails(keyserverArmored, fingerprint, options =
 //#region ../browser/src/proofs/providers/openpgp.ts
 /**
 * OpenPGP keys, signed with the person's own gpg — a YubiKey or another OpenPGP card works unchanged,
-* since gpg drives it. The subject is the primary key's fingerprint. See docs/wisps/3xx-openpgp.md.
+* since gpg drives it. The subject is the primary key's fingerprint. See docs/wisps/305-openpgp.md.
 */
 /** A v4 (40 hex) or v6 (64 hex) fingerprint, as gpg prints it or not: spaces and 0x are dropped. */
 function normalizeFingerprint(input) {
@@ -7369,7 +7384,7 @@ var IDENTITY_METHODS = {
 //#endregion
 //#region src/services.ts
 /**
-* Shared services (WISP 700/701, WISP 11xx phase 3b): a web app on this machine a contact may open over the chat's live
+* Shared services (WISP 700/701, WISP 1100 phase 3b): a web app on this machine a contact may open over the chat's live
 * link, and a contact's app opened here on a loopback port. As on the Desktop: only loopback is reached, redirects are
 * handed back rather than followed, and a service is shared with each contact by name, never by default.
 */
@@ -8097,7 +8112,7 @@ var keptInLight = (size, voice) => size <= (voice ? LIGHT_VOICE_BYTES : LIGHT_FI
 //#endregion
 //#region src/profiles.ts
 /**
-* Profiles on disk (WISP 11xx § Profiles and files): `<home>/profiles/<name>/`, 0700, one engine store each.
+* Profiles on disk (WISP 1100 § Profiles and files): `<home>/profiles/<name>/`, 0700, one engine store each.
 * `<home>/current` names the profile commands use when none is given.
 */
 var DEFAULT_PROFILE = "default";
@@ -8225,7 +8240,7 @@ function lockOwner(paths) {
 * A headless profile's backup: the WISP 05 envelope around the profile itself, its store and its files, written and
 * read a piece at a time (envelope version 2), so a profile with large files never has to fit in memory. It restores
 * into a new headless profile; the app's own backups are made from its page's storage and are not this format
-* (WISP 11xx § Parity). A backup an older CLI made (version 1: everything in one sealed JSON document) still restores.
+* (WISP 1100 § Parity). A backup an older CLI made (version 1: everything in one sealed JSON document) still restores.
 */
 var FORMAT$1 = "ghostly-cli-profile/2";
 var FORMAT_1 = "ghostly-cli-profile/1";
@@ -8584,7 +8599,7 @@ async function writeWhole(paths, payload) {
 }
 //#endregion
 //#region src/calls/api.ts
-/** Voice calls (WISP 11xx § Calls): the API methods. The audio itself goes over each call's own socket. */
+/** Voice calls (WISP 1100 § Calls): the API methods. The audio itself goes over each call's own socket. */
 var CALL_METHODS = {
 	async "call.start"(ctx, params) {
 		return ctx.calls.start(str(params, "chat", true), { rate: params.rate });
@@ -10762,7 +10777,7 @@ function createFailure(label, error) {
 //#endregion
 //#region src/wallets.ts
 /**
-* Wallets and payments (WISP 11xx, phase 2): the app's wallet deck and a chat's payment sheet, as methods. Test
+* Wallets and payments (WISP 1100, phase 2): the app's wallet deck and a chat's payment sheet, as methods. Test
 * networks move nothing real. On Mainnet every spend passes `confirmedReal`, which the engine requires, only when the
 * call says `confirmReal: true` (the CLI's `--confirm-real`): no flag, no spend.
 */
@@ -10792,7 +10807,7 @@ var CHAT_METHODS = [
 	...METHODS$1.filter((m) => m !== "cashu")
 ];
 /**
-* What the app has and a headless Ghostly cannot run yet, and why (WISP 11xx § Wallet SDKs on Node). New offers
+* What the app has and a headless Ghostly cannot run yet, and why (WISP 1100 § Wallet SDKs on Node). New offers
 * them as unavailable; creating one is refused before the engine is asked.
 */
 var NODE_GAPS = { bark: "Bark's SDK ships a browser build only: its WebAssembly needs a browser window. Use it from the app." };
@@ -11270,7 +11285,7 @@ var TRANSPORT_NAMES = {
 	"iroh/1": "iroh/1",
 	"hyperdht/1": "hyperdht/1"
 };
-/** Code points before `index` (UTF-16) in `text`: mentions count code points (WISP 9xx § Mentions). */
+/** Code points before `index` (UTF-16) in `text`: mentions count code points (WISP 902 § Mentions). */
 var codePoints = (text, index) => [...text.slice(0, index)].length;
 /**
 * Mentions for a group message: each ref (a member key, a unique prefix of one, a member's name, or `everyone`) must
@@ -11818,7 +11833,7 @@ var METHODS = {
 		};
 	},
 	/**
-	* WISP 9xx § Edits: the whole new text of one of my messages in a group. It shows here at once and goes to the members
+	* WISP 902 § Edits: the whole new text of one of my messages in a group. It shows here at once and goes to the members
 	* (a private group's over the edges that are up, the others when theirs open; a community's through the group).
 	* `mentions`: members the new text names beyond those the message named. `sent`: no longer waiting for the pace.
 	*/
@@ -11874,7 +11889,7 @@ var METHODS = {
 		};
 	},
 	/**
-	* WISP 9xx · Group Mesh § Typing: `chat.typing` in a private group, said on the edges that are open (`reached`: to
+	* WISP 902 · Group Mesh § Typing: `chat.typing` in a private group, said on the edges that are open (`reached`: to
 	* how many members), with the same kinds, status rules, 6 s hold and `for`. A community does not carry typing yet.
 	*/
 	async "group.typing"(ctx, params) {
@@ -12110,7 +12125,7 @@ function ownSocket(path) {
 //#endregion
 //#region src/client.ts
 /**
-* A connection to a profile's daemon over its socket (WISP 11xx § Local control API). `null` from `connectDaemon`
+* A connection to a profile's daemon over its socket (WISP 1100 § Local control API). `null` from `connectDaemon`
 * means no daemon answers there: a one-shot command runs the profile itself.
 */
 var DaemonClient = class {
@@ -12262,7 +12277,7 @@ var reply = {
 	type: "string",
 	description: "Reply to this message (its id, from history or an event)"
 };
-/** Buttons under a message (WISP 4xx · Message Buttons): the text is the question. */
+/** Buttons under a message (WISP 406 · Message Buttons): the text is the question. */
 var buttonOptions = {
 	button: {
 		type: "list",
@@ -12294,7 +12309,7 @@ function cursor(value) {
 	return /^\d{10,}$/.test(text) ? Number(text) : text;
 }
 /**
-* A status card's fields given as JSON (WISP 4xx · Status Cards): inline (`{...}`), `-` for stdin, or a file's path. The
+* A status card's fields given as JSON (WISP 405 · Status Cards): inline (`{...}`), `-` for stdin, or a file's path. The
 * flags given beside it win over it.
 */
 function cardJson(value) {
@@ -14329,7 +14344,7 @@ var PlaybackQueue = class {
 //#endregion
 //#region src/calls/audioSocket.ts
 /**
-* A call's audio socket (WISP 11xx § Calls): `<profile>/calls/<call>.sock`, 0600, in a folder only the owner may
+* A call's audio socket (WISP 1100 § Calls): `<profile>/calls/<call>.sock`, 0600, in a folder only the owner may
 * open. When that path is too long for a Unix socket: `/tmp/ghostly-calls-<hash of the profile>/<call>.sock`, in a
 * folder of the owner's, 0700, checked as such before use. A named pipe on Windows.
 */
@@ -15912,7 +15927,7 @@ var EventHub = class {
 		for (const [fileId, messageId] of files) this.flushFile(fileId, messageId);
 	}
 	/**
-	* A press on a button of a message of mine (WISP 4xx · Message Buttons), after the reply's own event: the question
+	* A press on a button of a message of mine (WISP 406 · Message Buttons), after the reply's own event: the question
 	* (`messageId`), the button, its label, who pressed (`by`: the chat, or a group member's key), `name` (the chat's name
 	* here, as `chat list` gives it: its label, else the contact's own name; a group member's roster name) and the reply
 	* (`replyId`). `untrusted.name` is the name the person gave themselves, as an agent turn's: theirs to choose, so
@@ -16380,7 +16395,7 @@ async function fedimintSdkOn(platform) {
 //#endregion
 //#region src/runtime/fedimint.ts
 /**
-* The Fedimint client on Node (WISP 11xx § Wallet SDKs on Node): the app's own SDK and WebAssembly, each database in
+* The Fedimint client on Node (WISP 1100 § Wallet SDKs on Node): the app's own SDK and WebAssembly, each database in
 * a `worker_threads` worker (fedimintWorker.mjs) and a file of the profile's `fedimint/` folder, where the browser has
 * a module worker and the origin-private file system. Only the platform differs: the client and what the engine does
 * with it are the app's.
@@ -16986,7 +17001,7 @@ function irohWasmBytes() {
 	return readFileSync(createRequire(import.meta.url).resolve("@ghostly/iroh-web/wasm"));
 }
 /**
-* Starts the app's engine on this profile (WISP 11xx § Runtime): IndexedDB on disk, WebRTC through libdatachannel,
+* Starts the app's engine on this profile (WISP 1100 § Runtime): IndexedDB on disk, WebRTC through libdatachannel,
 * HyperDHT native in this process, Iroh's wasm build (relay only, as the web app), Pkarr through the relays in the
 * settings and the Mainline DHT directly (read when the relays fail, written always).
 * The caller holds the profile's lock.
@@ -17029,14 +17044,14 @@ async function startRuntime(paths, options = {}) {
 	(await import("./assets/ghostly_iroh_web-Dvzh3Y6E.js")).initSync({ module: irohWasmBytes() });
 	const [{ registerFileBytes }, { NodeFileBytes }] = await Promise.all([import("./assets/fileBytes-DxiJHmTk.js").then((n) => n.o), import("./assets/fileBytes-BQ84L9Fe.js")]);
 	registerFileBytes("native", async () => new NodeFileBytes(paths.files), true);
-	const [{ EngineServer }, { createHyperEndpoint }] = await Promise.all([import("./assets/server-vGoe9MET.js").then((n) => n.t), import("./assets/endpoint-CaSbSFDw.js")]);
+	const [{ EngineServer }, { createHyperEndpoint }] = await Promise.all([import("./assets/server-CXFTDnFI.js").then((n) => n.t), import("./assets/endpoint-CaSbSFDw.js")]);
 	const network = hyperdhtNetwork();
 	const dht = mainlineNetwork();
-	const mainline = dht.off ? null : new (await (import("./assets/mainline-CKFpwXcB.js"))).Mainline({
+	const mainline = dht.off ? null : new (await (import("./assets/mainline-dkA94eh2.js"))).Mainline({
 		bootstrap: dht.bootstrap,
 		host: dht.host
 	});
-	const transport = mainline || pinned ? new (await (import("./assets/mainline-CKFpwXcB.js"))).RelaysAndDht(mainline, pinned ? { relays: pinned } : {}, !!pinned) : null;
+	const transport = mainline || pinned ? new (await (import("./assets/mainline-dkA94eh2.js"))).RelaysAndDht(mainline, pinned ? { relays: pinned } : {}, !!pinned) : null;
 	const server = new EngineServer({
 		...transport ? { transport } : {},
 		irohWeb: true,
@@ -17368,7 +17383,7 @@ function turn(event, source, where, message) {
 		}
 	};
 }
-/** Only loopback: events carry message text, and a webhook is a local bridge (WISP 11xx § Security). */
+/** Only loopback: events carry message text, and a webhook is a local bridge (WISP 1100 § Security). */
 function checkWebhook(url) {
 	let parsed;
 	try {