@ghostlytools/cli 1.1.3 → 1.1.5

package/dist/assets/{src-C_E99PGx.js → src-C6qQYrAH.js}

@@ -1961,13 +1961,13 @@ function turnName(name) {
 	}
 	return out;
 }
-function u32$2(value) {
+function u32$3(value) {
 	return Uint8Array.of(value >>> 24 & 255, value >>> 16 & 255, value >>> 8 & 255, value & 255);
 }
 /** What a release signs: `"ghostly-turn-release" || turnAddress(32) || turn(4) || toKey(32) || H(32)`. */
 function turnReleaseMessage(address, turn, toKey, h) {
 	if (address.length !== 32 || toKey.length !== 32 || h.length !== 32) throw new Error("A release names 32-byte values");
-	return concatBytes$1(RELEASE_DOMAIN, address, u32$2(turn), toKey, h);
+	return concatBytes$1(RELEASE_DOMAIN, address, u32$3(turn), toKey, h);
 }
 /** What the author signs: `"ghostly-turn" || turnAddress(32) || body[0..310]`. */
 function turnSignedMessage(address, unsigned) {
@@ -1985,8 +1985,8 @@ function encodeTurnFields(fields) {
 	if (tombstone ? fields.active !== 255 : !held(fields.active)) throw new Error(tombstone ? "A tombstone names no active device" : "The active device has no slot");
 	const body = /* @__PURE__ */ new Uint8Array(310);
 	body[OFFSET.version] = 1;
-	body.set(u32$2(fields.turn), OFFSET.turn);
-	body.set(u32$2(fields.rev).subarray(1), OFFSET.rev);
+	body.set(u32$3(fields.turn), OFFSET.turn);
+	body.set(u32$3(fields.rev).subarray(1), OFFSET.rev);
 	body[OFFSET.author] = fields.author;
 	body[OFFSET.active] = fields.active;
 	body[OFFSET.count] = fields.slots.filter(Boolean).length;
@@ -2238,7 +2238,7 @@ var TURN_PUT_WINDOW_MS = 1e4;
 var TURN_RAISE_READ_TIMEOUT_MS = 5e3;
 /** `T`: how long a device that raised the turn waits, from the end of its put, before the read that may make it active. `T >= P + 2V`. */
 var TURN_SETTLE_MS = 3e4;
-function compareBytes$2(a, b) {
+function compareBytes$3(a, b) {
 	for (let i = 0; i < Math.min(a.length, b.length); i++) if (a[i] !== b[i]) return a[i] - b[i];
 	return a.length - b.length;
 }
@@ -2249,7 +2249,7 @@ function compareBytes$2(a, b) {
 * reader still agrees.
 */
 function keptAtEqualSequence(a, b) {
-	return compareBytes$2(a.record.instance, b.record.instance) || compareBytes$2(a.record.body, b.record.body) || compareBytes$2(a.payload, b.payload);
+	return compareBytes$3(a.record.instance, b.record.instance) || compareBytes$3(a.record.body, b.record.body) || compareBytes$3(a.payload, b.payload);
 }
 var kept = (f) => ({
 	record: f.read.record,
@@ -3368,15 +3368,15 @@ var VERSION_TEXT = /^[0-9A-Za-z.+_-]{1,40}$/;
 var PART = /^(db\/[A-Za-z0-9_-]{1,64}|local|devices|file\/[A-Za-z0-9_-]{43}|wallet\/[a-z0-9-]{1,32}\/[A-Za-z0-9_.-]{1,100})$/;
 /** The largest part the reader accepts: a file of WISP 501 has no limit beneath this. */
 var MAX_PART = 2 ** 50;
-var isCount = (value, max = Number.MAX_SAFE_INTEGER) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0 && value <= max;
-var isText = (value, pattern) => typeof value === "string" && pattern.test(value);
+var isCount$1 = (value, max = Number.MAX_SAFE_INTEGER) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0 && value <= max;
+var isText$2 = (value, pattern) => typeof value === "string" && pattern.test(value);
 var isHandoffPartName = (name) => typeof name === "string" && PART.test(name);
 /** The part a file is: `file/<its SHA-256, base64url>`. */
 var filePartName = (sha256B64) => `file/${sha256B64}`;
 /** The digest a file part names, or null for any other part. */
 var filePartDigest = (name) => name.startsWith("file/") && DIGEST$1.test(name.slice(5)) ? name.slice(5) : null;
 function isPart(value) {
-	return Array.isArray(value) && value.length === 3 && isHandoffPartName(value[0]) && isCount(value[1], MAX_PART) && isText(value[2], DIGEST$1) && (filePartDigest(value[0]) === null || filePartDigest(value[0]) === value[2]);
+	return Array.isArray(value) && value.length === 3 && isHandoffPartName(value[0]) && isCount$1(value[1], MAX_PART) && isText$2(value[2], DIGEST$1) && (filePartDigest(value[0]) === null || filePartDigest(value[0]) === value[2]);
 }
 /** Names compared as UTF-8 byte strings, as `H` sorts them. */
 function compareNames(a, b) {
@@ -3404,7 +3404,7 @@ function sortParts(parts) {
 * and every part the taker already held and keeps, as `[name, size, sha256]` sorted by name. Keys are base64url.
 */
 function handoffDigest(turn, fromKey, toKey, parts) {
-	if (!isCount(turn, TURN_MAX)) throw new Error("A turn is at most 2^32 - 2");
+	if (!isCount$1(turn, TURN_MAX)) throw new Error("A turn is at most 2^32 - 2");
 	if (fromKey.length !== 32 || toKey.length !== 32) throw new Error("A device signing key is 32 bytes");
 	for (const part of parts) if (!isPart(part)) throw new Error("A part is [name, size, sha256]");
 	return sha256(utf8Encode(JSON.stringify([
@@ -3418,7 +3418,7 @@ function handoffDigest(turn, fromKey, toKey, parts) {
 /** What `handoff-verified` signs: `["ghostly-handoff-verified", turnAddress, N + 1, H]`, the bytes in base64url. */
 function handoffVerifiedMessage(turnAddress, turn, h) {
 	if (turnAddress.length !== 32 || h.length !== 32) throw new Error("A turn address and H are 32 bytes");
-	if (!isCount(turn, TURN_MAX)) throw new Error("A turn is at most 2^32 - 2");
+	if (!isCount$1(turn, TURN_MAX)) throw new Error("A turn is at most 2^32 - 2");
 	return utf8Encode(JSON.stringify([
 		"ghostly-handoff-verified",
 		toBase64Url(turnAddress),
@@ -3470,7 +3470,7 @@ function handoffStreamKey(ownSecret, peerPublic, k, transcriptHash) {
 * does not open there. (XSalsa20-Poly1305 takes no associated data; the header inside the box does that job.)
 */
 function pieceHeader(part, offset) {
-	if (!isCount(offset, MAX_PART)) throw new Error("A piece's offset is a whole number of bytes");
+	if (!isCount$1(offset, MAX_PART)) throw new Error("A piece's offset is a whole number of bytes");
 	const header = /* @__PURE__ */ new Uint8Array(16);
 	header.set(sha256(utf8Encode(`ghostly-handoff-piece/1${part}`)).subarray(0, 8), 0);
 	new DataView(header.buffer).setBigUint64(8, BigInt(offset));
@@ -3484,7 +3484,7 @@ function sealHandoffPiece(key, part, offset, piece, nonce = randomBytes(24)) {
 	if (key.length !== 32 || nonce.length !== 24) throw new Error("A stream key is 32 bytes and a nonce 24");
 	return concatBytes$1(nonce, xsalsa20poly1305(key, nonce).encrypt(concatBytes$1(pieceHeader(part, offset), piece)));
 }
-var isPins = (value) => !!value && typeof value === "object" && !Array.isArray(value) && Object.keys(value).length <= 16 && Object.entries(value).every(([type, version]) => /^[a-z0-9-]{1,32}$/.test(type) && isText(version, VERSION_TEXT));
+var isPins = (value) => !!value && typeof value === "object" && !Array.isArray(value) && Object.keys(value).length <= 16 && Object.entries(value).every(([type, version]) => /^[a-z0-9-]{1,32}$/.test(type) && isText$2(version, VERSION_TEXT));
 function handoffHelloFrame(hello) {
 	return {
 		t: HANDOFF_HELLO,
@@ -3493,12 +3493,12 @@ function handoffHelloFrame(hello) {
 }
 function readHandoffHello(frame) {
 	if (frame.t !== "handoff-hello" || frame.v !== 1) return null;
-	if (!isText(frame.e, KEY$3) || fromBase64Url(frame.e).length !== 32) return null;
-	if (!isText(frame.app, VERSION_TEXT) || !isCount(frame.db, 1e6) || !isPins(frame.pins)) return null;
+	if (!isText$2(frame.e, KEY$3) || fromBase64Url(frame.e).length !== 32) return null;
+	if (!isText$2(frame.app, VERSION_TEXT) || !isCount$1(frame.db, 1e6) || !isPins(frame.pins)) return null;
 	if (typeof frame.room !== "number" || !Number.isSafeInteger(frame.room) || frame.room < -1) return null;
 	if (typeof frame.metered !== "boolean") return null;
-	if (frame.later !== void 0 && !isCount(frame.later)) return null;
-	if (frame.id !== void 0 && !isText(frame.id, ID$5)) return null;
+	if (frame.later !== void 0 && !isCount$1(frame.later)) return null;
+	if (frame.id !== void 0 && !isText$2(frame.id, ID$5)) return null;
 	const kind = DEVICE_KINDS.includes(frame.kind) ? frame.kind : "web";
 	return {
 		v: 1,
@@ -3524,8 +3524,8 @@ var handoffOfferFrame = (turn, id, bytes) => ({
 });
 function readHandoffTurnFrame(frame) {
 	if (frame.t !== "handoff-request" && frame.t !== "handoff-offer") return null;
-	if (!isCount(frame.turn, TURN_MAX) || !isText(frame.id, ID$5)) return null;
-	if (frame.t === "handoff-offer") return isCount(frame.bytes) ? {
+	if (!isCount$1(frame.turn, TURN_MAX) || !isText$2(frame.id, ID$5)) return null;
+	if (frame.t === "handoff-offer") return isCount$1(frame.bytes) ? {
 		turn: frame.turn,
 		id: frame.id,
 		bytes: frame.bytes
@@ -3558,8 +3558,8 @@ function readHandoffPake(frame) {
 		n: 3,
 		wrong: true
 	} : null;
-	if (!isText(frame.m, B64$4) || !frame.m.length || frame.m.length > 4096) return null;
-	if (frame.n === 3 && !isText(frame.c, KEY$3)) return null;
+	if (!isText$2(frame.m, B64$4) || !frame.m.length || frame.m.length > 4096) return null;
+	if (frame.n === 3 && !isText$2(frame.c, KEY$3)) return null;
 	return {
 		n: frame.n,
 		m: frame.m,
@@ -3567,12 +3567,12 @@ function readHandoffPake(frame) {
 	};
 }
 function readHandoffHave(frame) {
-	if (frame.t !== "handoff-have" || !Array.isArray(frame.d) || frame.d.length > 300 || !frame.d.every((d) => isText(d, DIGEST$1))) return null;
+	if (frame.t !== "handoff-have" || !Array.isArray(frame.d) || frame.d.length > 300 || !frame.d.every((d) => isText$2(d, DIGEST$1))) return null;
 	const p = {};
 	if (frame.p !== void 0) {
 		if (!frame.p || typeof frame.p !== "object" || Array.isArray(frame.p) || Object.keys(frame.p).length > 300) return null;
 		for (const [name, offset] of Object.entries(frame.p)) {
-			if (!isHandoffPartName(name) || !isCount(offset, MAX_PART)) return null;
+			if (!isHandoffPartName(name) || !isCount$1(offset, MAX_PART)) return null;
 			p[name] = offset;
 		}
 	}
@@ -3615,7 +3615,7 @@ var handoffDataFrame = (part, offset, sealed) => ({
 	d: toBase64Url(sealed)
 });
 function readHandoffAck(frame) {
-	if (frame.t !== "handoff-ack" || !isHandoffPartName(frame.p) || !isCount(frame.o, MAX_PART)) return null;
+	if (frame.t !== "handoff-ack" || !isHandoffPartName(frame.p) || !isCount$1(frame.o, MAX_PART)) return null;
 	return {
 		part: frame.p,
 		offset: frame.o
@@ -3623,7 +3623,7 @@ function readHandoffAck(frame) {
 }
 /** `H` of a `handoff-verified` that B's key signed for this turn address and turn, or null. */
 function readHandoffVerified(frame, turnAddress, turn, takerKey) {
-	if (frame.t !== "handoff-verified" || !isText(frame.h, DIGEST$1) || !isText(frame.s, SIGNATURE)) return null;
+	if (frame.t !== "handoff-verified" || !isText$2(frame.h, DIGEST$1) || !isText$2(frame.s, SIGNATURE)) return null;
 	const h = fromBase64Url(frame.h);
 	try {
 		return verify(fromBase64Url(frame.s), handoffVerifiedMessage(turnAddress, turn, h), takerKey) ? h : null;
@@ -3636,7 +3636,7 @@ var handoffReleaseFrame = (release) => ({
 	...release
 });
 function readHandoffDone(frame) {
-	return frame.t === "handoff-done" && isCount(frame.seq) ? frame.seq : null;
+	return frame.t === "handoff-done" && isCount$1(frame.seq) ? frame.seq : null;
 }
 /**
 * Whether two devices can hand over (WISP 06 § Versions), seen from the taker: a taker whose database is older than
@@ -4349,7 +4349,7 @@ function buildSdpFromSignal(signal) {
 function sdpHasCandidates(sdp) {
 	return /^a=candidate:/m.test(sdp ?? "");
 }
-/** How long to keep collecting after the candidate we were waiting for showed up. */
+/** How long to keep collecting after the candidate we were waiting for showed up (a call's; a chat's data link sets its own). */
 var ICE_SETTLE_MS = 400;
 /** IPv4 ranges that are not reachable from the internet: this network, private, shared (CGNAT), loopback, link-local, the documentation ones, benchmarking, multicast and up. */
 var NOT_GLOBAL_IPV4 = [
@@ -4393,7 +4393,7 @@ function isGlobalIpv4Host(candidate) {
 * (`isGlobalIpv4Host`): a device with no NAT gets none, and its offers waited
 * the whole timeout whenever gathering did not complete.
 */
-function waitForIceGathering(pc, timeoutMs = 1e4, { stallMs, fresh = false } = {}) {
+function waitForIceGathering(pc, timeoutMs = 1e4, { stallMs, fresh = false, settleMs = ICE_SETTLE_MS, hostBoundMs } = {}) {
 	return new Promise((resolve) => {
 		if (pc.iceGatheringState === "complete" && (!fresh || sdpHasCandidates(pc.localDescription?.sdp))) {
 			resolve();
@@ -4406,6 +4406,7 @@ function waitForIceGathering(pc, timeoutMs = 1e4, { stallMs, fresh = false } = {
 		const finish = () => {
 			clearTimeout(timeout);
 			if (stalled) clearTimeout(stalled);
+			if (bounded) clearTimeout(bounded);
 			if (settle) clearTimeout(settle);
 			pc.removeEventListener("icegatheringstatechange", onState);
 			pc.removeEventListener("icecandidate", onCandidate);
@@ -4415,13 +4416,16 @@ function waitForIceGathering(pc, timeoutMs = 1e4, { stallMs, fresh = false } = {
 		const stalled = stallMs === void 0 ? null : setTimeout(() => {
 			if (!found && !sdpHasCandidates(pc.localDescription?.sdp)) finish();
 		}, stallMs);
+		const bounded = hostBoundMs === void 0 ? null : setTimeout(() => {
+			if (found || sdpHasCandidates(pc.localDescription?.sdp)) finish();
+		}, hostBoundMs);
 		const onState = () => {
 			if (pc.iceGatheringState === "complete" && (!fresh || sdpHasCandidates(pc.localDescription?.sdp))) finish();
 		};
 		const onCandidate = (event) => {
 			if (event.candidate) found = true;
 			const line = event.candidate?.candidate;
-			if (!settle && line && (line.includes(wanted) || !usesTurn && isGlobalIpv4Host(line))) settle = setTimeout(finish, ICE_SETTLE_MS);
+			if (!settle && line && (line.includes(wanted) || !usesTurn && isGlobalIpv4Host(line))) settle = setTimeout(finish, settleMs);
 		};
 		pc.addEventListener("icegatheringstatechange", onState);
 		pc.addEventListener("icecandidate", onCandidate);
@@ -6087,11 +6091,27 @@ var DirectPathWatch = class {
 		this.onChange(blocked);
 	}
 };
+//#endregion
+//#region ../core/src/datalink.ts
+/**
+* An attempt ended from outside (another transport went live first) that had both descriptions for this long and no
+* connection says what one that failed does: a path that exists connects within a second or two.
+*/
+var STALLED_EVIDENCE_MS = 5e3;
 /** A candidate another network can reach: server reflexive (STUN answered), relayed (TURN), or learnt from the peer. */
 var PUBLIC_CANDIDATE = /^a=candidate:.* typ (srflx|relay|prflx)\b/m;
 var CONNECT_TIMEOUT_MS = 9e4;
 var ICE_GATHERING_TIMEOUT_MS = 5e3;
 /**
+* An offer with its host candidates waits this long at most for a server reflexive one (STUN answered), not
+* `ICE_GATHERING_TIMEOUT_MS`. Where the STUN servers answer, they do in some 50 ms (0.44 s an offer took here, with the
+* settle); where they do not, every offer of a first pairing waited the full 5 s, twice when the inviter offered too
+* (One's e2e runs: 13 offers of 89 at 5 s, 9 more at 1.3-3 s, 2026-10-05). An offer without one still connects to most
+* contacts (their checks learn this side's address from its own); behind a restricted NAT on the contact's side it may
+* not, and the next offer of the chat then waits as long as it takes (`fullGather`).
+*/
+var OFFER_HOST_GATHER_MS = 2e3;
+/**
 * A connection with no candidate at all by then has stalled: Chromium, rarely and under load, gathers none, and an
 * offer or answer without one can never connect. It is made again in its place, up to `GATHER_ATTEMPTS` in all.
 */
@@ -6105,6 +6125,13 @@ var DataLink = class {
 	state = "idle";
 	pc = null;
 	myOfferTs = 0;
+	/**
+	* An offer of this side's that went without a public candidate came to nothing (it was answered, and no path
+	* connected): the next one waits for its STUN servers as long as it takes (`ICE_GATHERING_TIMEOUT_MS`).
+	*/
+	fullGather = false;
+	/** The offer out has no public candidate (as it went: the connection's description gains any that come later). */
+	offerLacksPublic = false;
 	lastSignalTs = 0;
 	/** The peer's description as this connection was given it: Chrome shows it as `remoteDescription` only once applied. */
 	remoteSdp = null;
@@ -6114,21 +6141,41 @@ var DataLink = class {
 	disconnectTimer = null;
 	/** The offer this side answered in the current attempt, when it took it (this clock), and how many times it answered it again. */
 	answered = null;
+	/** Answers refused since a connection last opened, each followed by a new offer at once (`ANSWER_REFUSED_REDIALS`). */
+	refusedAnswers = 0;
 	constructor(options) {
 		this.options = options;
 	}
 	/** Offers a connection to the peer. Resolves once the offer is published. */
-	async connect() {
+	/**
+	* Makes an offer and publishes it. `gate`: gathered ahead, while the caller still finds out whether the peer is there
+	* (a joiner reading the inviter's record): the link stays idle meanwhile, and the offer goes once the gate says yes.
+	* On no, the connection is dropped, nothing having been said, and `"held"` is the answer.
+	*/
+	async connect(gate) {
 		if (this.state !== "idle") return;
 		this.answered = null;
-		this.setState("offering");
-		this.options.setFastPoll(true, true);
+		if (!gate) {
+			this.setState("offering");
+			this.options.setFastPoll(true, true);
+		}
 		try {
 			const pc = await this.gathered(true, async (pc) => {
 				await pc.setLocalDescription(await pc.createOffer());
 			});
 			if (!pc) return;
+			if (gate) {
+				const go = await gate;
+				if (this.pc !== pc || this.state !== "idle") return;
+				if (!go) {
+					this.teardown();
+					return "held";
+				}
+				this.setState("offering");
+				this.options.setFastPoll(true, true);
+			}
 			this.myOfferTs = Date.now();
+			this.offerLacksPublic = !PUBLIC_CANDIDATE.test(pc.localDescription?.sdp ?? "");
 			const signal = {
 				t: "o",
 				ts: this.myOfferTs,
@@ -6201,8 +6248,8 @@ var DataLink = class {
 					sdp: this.remoteSdp
 				});
 				if (this.pc === pc && this.state === "offering") this.setState("connecting");
-			} catch {
-				if (this.pc === pc) this.reset();
+			} catch (error) {
+				if (this.pc === pc) this.answerRefused(error);
 			}
 		}
 	}
@@ -6221,11 +6268,17 @@ var DataLink = class {
 		}
 	}
 	close() {
-		const evidence = Date.now() - this.connectingSince >= 5e3 ? this.directEvidence() : null;
+		const stalled = Date.now() - this.connectingSince >= STALLED_EVIDENCE_MS;
+		const evidence = stalled ? this.directEvidence() : null;
+		this.noteNoPublic(stalled);
 		this.answered = null;
 		this.reset();
 		if (evidence) this.options.onDirect?.(evidence);
 	}
+	/** This side's offer went with no public candidate, was answered, and came to nothing: the next offer gathers for as long as it takes. */
+	noteNoPublic(ended) {
+		if (ended && this.myOfferTs && this.offerLacksPublic && this.state === "connecting") this.fullGather = true;
+	}
 	/**
 	* What this attempt says about direct connections if it ends now without opening: nothing unless both descriptions
 	* were exchanged (this side's offer answered, or its answer out). Then, what this device gathered: no public
@@ -6242,9 +6295,14 @@ var DataLink = class {
 	* else goes back to idle.
 	*/
 	failed() {
+		if (this.state === "offering" && this.remoteSdp) {
+			this.answerRefused("failed");
+			return;
+		}
 		const answered = this.state === "connecting" ? this.answered : null;
 		const left = answered ? CONNECT_TIMEOUT_MS - (Date.now() - answered.at) : 0;
 		const evidence = this.directEvidence();
+		this.noteNoPublic(true);
 		if (answered && answered.again < 2 && left > REANSWER_MARGIN_MS && this.options.offerStanding?.(answered.offer.ts)) {
 			answered.again++;
 			traceLink(this.options.myPubKeyZ32, "reanswer", {
@@ -6258,6 +6316,18 @@ var DataLink = class {
 		this.reset();
 		if (evidence) this.options.onDirect?.(evidence);
 	}
+	/** The answer to this side's offer did not go in (`ANSWER_REFUSED_REDIALS`): the attempt ends, and the caller may offer again now. */
+	answerRefused(error) {
+		const again = this.refusedAnswers < 4;
+		traceLink(this.options.myPubKeyZ32, "answer-refused", {
+			error: error instanceof Error ? error.message : String(error),
+			again
+		});
+		this.reset();
+		if (!again) return;
+		this.refusedAnswers++;
+		this.options.onAnswerReplaced?.();
+	}
 	async answer(offer) {
 		this.setState("answering");
 		this.options.setFastPoll(true);
@@ -6296,7 +6366,11 @@ var DataLink = class {
 			await describe(pc);
 			if (this.pc !== pc) return null;
 			const gathering = Date.now();
-			await waitForIceGathering(pc, ICE_GATHERING_TIMEOUT_MS, { stallMs: GATHER_STALL_MS });
+			await waitForIceGathering(pc, ICE_GATHERING_TIMEOUT_MS, {
+				stallMs: GATHER_STALL_MS,
+				settleMs: 150,
+				...offer && !this.fullGather ? { hostBoundMs: OFFER_HOST_GATHER_MS } : {}
+			});
 			if (this.pc !== pc) return null;
 			const ms = Date.now() - gathering;
 			if (sdpHasCandidates(pc.localDescription?.sdp)) {
@@ -6332,6 +6406,8 @@ var DataLink = class {
 			if (this.pc !== pc) return;
 			this.clearTimers();
 			this.answered = null;
+			this.refusedAnswers = 0;
+			this.fullGather = false;
 			this.setState("open");
 			this.options.setFastPoll(false);
 			this.options.publishSignal(null);
@@ -6704,6 +6780,311 @@ function rememberAlone(alone, key, present) {
 }
 var GROUP_ADMIN_OFF_ERROR = "Managing this group is off on this device. Turn on Manage groups from this device first.";
 //#endregion
+//#region ../core/src/canonicalJson.ts
+/** True when `s` holds a lone UTF-16 surrogate, which I-JSON (and so JCS) does not allow. */
+function hasLoneSurrogate(s) {
+	for (let i = 0; i < s.length; i++) {
+		const c = s.charCodeAt(i);
+		if (c >= 55296 && c <= 56319) {
+			const next = s.charCodeAt(i + 1);
+			if (next >= 56320 && next <= 57343) {
+				i++;
+				continue;
+			}
+			return true;
+		}
+		if (c >= 56320 && c <= 57343) return true;
+	}
+	return false;
+}
+function write(value, depth) {
+	if (depth > 64) throw new Error("JSON nested deeper than 64 levels");
+	if (value === null) return "null";
+	if (typeof value === "boolean") return value ? "true" : "false";
+	if (typeof value === "number") {
+		if (!Number.isFinite(value)) throw new Error("JSON numbers must be finite");
+		return JSON.stringify(value);
+	}
+	if (typeof value === "string") {
+		if (hasLoneSurrogate(value)) throw new Error("A JSON string holds a lone surrogate");
+		return JSON.stringify(value);
+	}
+	if (Array.isArray(value)) return `[${value.map((v) => write(v, depth + 1)).join(",")}]`;
+	if (typeof value === "object") {
+		const record = value;
+		return `{${Object.keys(value).filter((k) => record[k] !== void 0).sort((a, b) => a < b ? -1 : a > b ? 1 : 0).map((k) => {
+			if (hasLoneSurrogate(k)) throw new Error("A JSON key holds a lone surrogate");
+			return `${JSON.stringify(k)}:${write(record[k], depth + 1)}`;
+		}).join(",")}}`;
+	}
+	throw new Error(`Not a JSON value: ${typeof value}`);
+}
+/** The canonical text of a JSON value. Throws on a value JSON cannot hold (a non-finite number, a lone surrogate). */
+function canonicalJson(value) {
+	return write(value, 0);
+}
+/** The canonical UTF-8 bytes of a JSON value. */
+function canonicalJsonBytes(value) {
+	return utf8Encode(canonicalJson(value));
+}
+/**
+* Reads bytes that must be the canonical form of a JSON value: `not-json` when they are not UTF-8 JSON, `not-canonical`
+* when writing the value again gives other bytes.
+*/
+function readCanonicalJson(bytes) {
+	let value;
+	try {
+		value = JSON.parse(utf8Decode(bytes));
+	} catch (error) {
+		return {
+			ok: false,
+			reason: "not-json",
+			detail: error instanceof Error ? error.message : String(error)
+		};
+	}
+	let again;
+	try {
+		again = canonicalJsonBytes(value);
+	} catch (error) {
+		return {
+			ok: false,
+			reason: "not-canonical",
+			detail: error instanceof Error ? error.message : String(error)
+		};
+	}
+	if (!bytesEqual(again, bytes)) return {
+		ok: false,
+		reason: "not-canonical"
+	};
+	return {
+		ok: true,
+		value
+	};
+}
+//#endregion
+//#region ../core/src/appStatements.ts
+/** The prefixes of phase 1. The others of the WISP (reports, reviews, licences, rotation, publisher proofs) come later. */
+var APP_PREFIXES = {
+	app: "ghostly-app/1",
+	store: "ghostly-store/1",
+	revoke: "ghostly-revoke/1"
+};
+var APP_STATEMENT_LIMITS = {
+	/** A signature statement's canonical bytes: 52 + 86 characters of values and the keys around them. */
+	signatureBytes: 1024,
+	/** Digests named by one revocation. */
+	revokeDigests: 64,
+	/** A revocation's reason, in characters. */
+	reason: 200,
+	/** Revocations in one `ghostly-revoke.json`. */
+	revocations: 4096
+};
+/** A z-base32 Ed25519 public key: 52 characters that decode to 32 bytes and encode back to the same text. */
+function isAppKey(value) {
+	if (typeof value !== "string" || !/^[ybndrfg8ejkmcpqxot1uwisza345h769]{52}$/.test(value)) return false;
+	const bytes = fromZ32(value);
+	return bytes.length === 32 && toZ32(bytes) === value;
+}
+/** A SHA-256 in base64url without padding: 43 characters that decode to 32 bytes and encode back to the same text. */
+function isAppHash(value) {
+	if (typeof value !== "string" || !/^[A-Za-z0-9_-]{43}$/.test(value)) return false;
+	return toBase64Url(fromBase64Url(value)) === value;
+}
+/** An app reference, `<publisher key>/<name>`. */
+var APP_NAME = /^[a-z][a-z0-9-]{0,31}$/;
+function isAppRef(value) {
+	if (typeof value !== "string") return false;
+	return value.indexOf("/") === 52 && isAppKey(value.slice(0, 52)) && APP_NAME.test(value.slice(53));
+}
+function appRef(publisher, name) {
+	return `${publisher}/${name}`;
+}
+/** The publisher key of a reference. */
+function appRefPublisher(ref) {
+	return ref.slice(0, 52);
+}
+/**
+* The publisher fingerprint people see: the first 16 z-base32 characters of the key (80 bits), in four groups.
+*/
+function appFingerprint(key) {
+	return (key.slice(0, 16).match(/.{1,4}/g) ?? []).join(" ");
+}
+/** The bytes a signature covers: the prefix, a zero byte, then the SHA-256 of the object's canonical bytes. */
+function appSignedBytes(prefix, canonical) {
+	const p = utf8Encode(prefix);
+	const out = new Uint8Array(p.length + 1 + 32);
+	out.set(p, 0);
+	out.set(sha256(canonical), p.length + 1);
+	return out;
+}
+/** Signs an object under a prefix: its canonical bytes and the signature statement. */
+async function signAppObject(prefix, value, signer) {
+	const bytes = canonicalJsonBytes(value);
+	const sig = await signer.sign(appSignedBytes(prefix, bytes));
+	return {
+		bytes,
+		signature: {
+			alg: "ed25519",
+			key: toZ32(signer.publicKey),
+			sig: toBase64Url(sig)
+		}
+	};
+}
+/**
+* Ed25519 verification as RFC 8032 writes it (`zip215: false`): canonical encodings of the point and the scalar only,
+* so every parser (this one, a Rust one with `verify_strict`) accepts exactly the same signatures.
+*/
+function strictVerify(signature, message, publicKey) {
+	try {
+		return ed25519.verify(signature, message, publicKey, { zip215: false });
+	} catch {
+		return false;
+	}
+}
+var exactKeys$1 = (value, keys, optional = []) => {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+	const have = Object.keys(value);
+	return keys.every((k) => have.includes(k)) && have.every((k) => keys.includes(k) || optional.includes(k));
+};
+/** Checks the shape of a signature statement: exactly `alg`, `key` and `sig`, a 64-byte signature. */
+function isAppSignature(value) {
+	if (!exactKeys$1(value, [
+		"alg",
+		"key",
+		"sig"
+	])) return false;
+	if (value.alg !== "ed25519" || !isAppKey(value.key)) return false;
+	return typeof value.sig === "string" && /^[A-Za-z0-9_-]{86}$/.test(value.sig) && toBase64Url(fromBase64Url(value.sig)) === value.sig;
+}
+/** Reads a signature statement from its bytes, which must be canonical. */
+function readAppSignature(bytes) {
+	if (bytes.length > APP_STATEMENT_LIMITS.signatureBytes) return {
+		ok: false,
+		reason: "bad-signature-statement",
+		detail: "Too large"
+	};
+	const read = readCanonicalJson(bytes);
+	if (!read.ok) return {
+		ok: false,
+		reason: "bad-signature-statement",
+		detail: read.reason
+	};
+	if (!isAppSignature(read.value)) return {
+		ok: false,
+		reason: "bad-signature-statement",
+		detail: "Not {alg, key, sig}"
+	};
+	return {
+		ok: true,
+		signature: read.value
+	};
+}
+/**
+* Verifies a signature over an object's canonical bytes under a prefix, made by `key`: `signature-key` when the
+* statement names another key, `bad-signature` when it does not verify.
+*/
+function verifyAppSignature(prefix, canonical, signature, key) {
+	if (!isAppSignature(signature)) return {
+		ok: false,
+		reason: "bad-signature-statement"
+	};
+	if (signature.key !== key) return {
+		ok: false,
+		reason: "signature-key"
+	};
+	return strictVerify(fromBase64Url(signature.sig), appSignedBytes(prefix, canonical), fromZ32(key)) ? { ok: true } : {
+		ok: false,
+		reason: "bad-signature"
+	};
+}
+var isSequence = (v) => typeof v === "number" && Number.isSafeInteger(v) && v >= 1;
+var isPlainLine = (v, max) => typeof v === "string" && [...v].length <= max && !/\p{Cc}/u.test(v);
+/** Checks a revocation statement's shape; the reason it is refused, or null. */
+function checkAppRevokeStatement(value) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return "Not an object";
+	const v = value;
+	const byDigests = "digests" in v;
+	if (!exactKeys$1(v, [
+		"ghostlyRevoke",
+		"app",
+		byDigests ? "digests" : "upTo"
+	], ["reason"])) return "Keys are not ghostlyRevoke, app, and exactly one of digests and upTo (reason optional)";
+	if (v.ghostlyRevoke !== 1) return "ghostlyRevoke is not 1";
+	if (!isAppRef(v.app)) return "app is not a reference";
+	if (byDigests) {
+		const d = v.digests;
+		if (!Array.isArray(d) || d.length < 1 || d.length > APP_STATEMENT_LIMITS.revokeDigests) return "digests is not 1 to 64 digests";
+		if (!d.every(isAppHash) || new Set(d).size !== d.length) return "digests holds a bad or repeated digest";
+	} else if (!isSequence(v.upTo)) return "upTo is not a sequence";
+	if (v.reason !== void 0 && !isPlainLine(v.reason, APP_STATEMENT_LIMITS.reason)) return "reason is not one line of 200 characters";
+	return null;
+}
+/** Signs a revocation with the publisher's key. */
+async function signAppRevocation(statement, signer) {
+	const problem = checkAppRevokeStatement(statement);
+	if (problem) throw new Error(`Not a revocation: ${problem}`);
+	if (toZ32(signer.publicKey) !== appRefPublisher(statement.app)) throw new Error("A revocation is signed by its app's publisher");
+	const { signature } = await signAppObject(APP_PREFIXES.revoke, statement, signer);
+	return {
+		statement,
+		signature
+	};
+}
+/**
+* Reads one signed revocation (a parsed value, from `ghostly-revoke.json` or a store index's `revoked`): its shape, then
+* the signature under `ghostly-revoke/1` by the publisher its `app` names.
+*/
+function readAppRevocation(value) {
+	if (!exactKeys$1(value, ["statement", "signature"])) return {
+		ok: false,
+		reason: "bad-revocation",
+		detail: "Keys are not statement and signature"
+	};
+	const problem = checkAppRevokeStatement(value.statement);
+	if (problem) return {
+		ok: false,
+		reason: "bad-revocation",
+		detail: problem
+	};
+	if (!isAppSignature(value.signature)) return {
+		ok: false,
+		reason: "bad-signature-statement"
+	};
+	const statement = value.statement;
+	const checked = verifyAppSignature(APP_PREFIXES.revoke, canonicalJsonBytes(statement), value.signature, appRefPublisher(statement.app));
+	if (!checked.ok) return checked;
+	return {
+		ok: true,
+		revocation: {
+			statement,
+			signature: value.signature
+		}
+	};
+}
+/**
+* Reads `ghostly-revoke.json`: canonical bytes holding a list of signed revocations. One that does not verify refuses the
+* file, as a store index's `revoked` does.
+*/
+function readAppRevocations(bytes) {
+	const read = readCanonicalJson(bytes);
+	if (!read.ok) return read;
+	if (!Array.isArray(read.value) || read.value.length > APP_STATEMENT_LIMITS.revocations) return {
+		ok: false,
+		reason: "bad-revocation",
+		detail: "Not a list of at most 4096 revocations"
+	};
+	const revocations = [];
+	for (const entry of read.value) {
+		const one = readAppRevocation(entry);
+		if (!one.ok) return one;
+		revocations.push(one.revocation);
+	}
+	return {
+		ok: true,
+		revocations
+	};
+}
+//#endregion
 //#region ../core/src/messageTime.ts
 /**
 * How far ahead of this device's clock a number a peer made from its clock may be (a pin's number, a status card's
@@ -6775,7 +7156,10 @@ var STATUS_CARD_LIMITS = {
 	/** A button's id: what a press names. */
 	buttonId: 32,
 	/** A button's label, in characters. */
-	buttonLabel: 40
+	buttonLabel: 40,
+	/** An app card's title and version, in characters (WISP 405 § An app): the manifest's bounds. */
+	appTitle: 40,
+	appVersion: 32
 };
 /** How a button looks: `primary` is the one highlighted, `danger` warns; `neutral` when none is said. */
 var BUTTON_STYLES = [
@@ -6841,8 +7225,8 @@ var sameButtonText = (a, b) => a.trim().toLowerCase() === b.trim().toLowerCase()
 * them (one line, cleaned). `at` is the button that clashes, `with` the one it clashes with.
 */
 function buttonLabelClash(buttons) {
-	const labels = buttons.map((button) => isObject$2(button) ? cardLine(button.label, Infinity) : void 0);
-	const ids = buttons.map((button) => isObject$2(button) && typeof button.id === "string" ? button.id : void 0);
+	const labels = buttons.map((button) => isObject$4(button) ? cardLine(button.label, Infinity) : void 0);
+	const ids = buttons.map((button) => isObject$4(button) && typeof button.id === "string" ? button.id : void 0);
 	for (const [at, label] of labels.entries()) {
 		if (!label) continue;
 		const twin = labels.findIndex((other, i) => i < at && !!other && sameButtonText(other, label));
@@ -6859,7 +7243,13 @@ function buttonLabelClash(buttons) {
 		};
 	}
 }
-var isObject$2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+/** An app card's id, made from its reference: the app's name, a dot, the first 16 characters of the publisher key. */
+function appCardId(ref) {
+	return `${ref.slice(53)}.${ref.slice(0, 16)}`;
+}
+/** An app card's `sequence`: a whole number from 0 to 2^53 - 1. */
+var appSequence = (value) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
+var isObject$4 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 /** One line of display text: runs of space (line breaks included) become one space, then the display rules for names. */
 function cardLine(value, max) {
 	if (typeof value !== "string") return void 0;
@@ -6888,7 +7278,7 @@ function readLinks(raw) {
 	if (!Array.isArray(raw)) return [];
 	const links = [];
 	for (const entry of raw.slice(0, STATUS_CARD_LIMITS.links)) {
-		if (!isObject$2(entry)) continue;
+		if (!isObject$4(entry)) continue;
 		const url = cardUrl(entry.url);
 		if (!url) continue;
 		const label = cardLine(entry.label, STATUS_CARD_LIMITS.linkLabel);
@@ -6911,7 +7301,7 @@ function readTags(raw) {
 	return tags;
 }
 function readRun(raw, now) {
-	if (!isObject$2(raw)) return void 0;
+	if (!isObject$4(raw)) return void 0;
 	const at = time(raw.at, now + MESSAGE_CLOCK_SKEW_MS), result = oneOf(RUN_RESULTS, raw.result);
 	if (!at || !result) return void 0;
 	const summary = cardLine(raw.summary, STATUS_CARD_LIMITS.line);
@@ -6936,9 +7326,26 @@ function statusCardBytes(card) {
 * routine's next run up to a year ahead). The message is always kept: without a card it shows its text.
 */
 function readStatusCard(raw, now = Date.now()) {
-	if (!isObject$2(raw) || statusCardBytes(raw) > STATUS_CARD_LIMITS.bytes) return void 0;
+	if (!isObject$4(raw) || statusCardBytes(raw) > STATUS_CARD_LIMITS.bytes) return void 0;
 	const id = typeof raw.id === "string" && ID$4.test(raw.id) ? raw.id : void 0;
 	if (!id) return void 0;
+	if (raw.kind === "app") {
+		if (!isAppRef(raw.ref) || id !== appCardId(raw.ref) || !isAppHash(raw.digest) || !appSequence(raw.sequence)) return void 0;
+		const title = cardLine(raw.title, STATUS_CARD_LIMITS.appTitle);
+		if (!title) return void 0;
+		const version = cardLine(raw.version, STATUS_CARD_LIMITS.appVersion), url = cardUrl(raw.url);
+		return {
+			kind: "app",
+			id,
+			ref: raw.ref,
+			digest: raw.digest,
+			sequence: raw.sequence,
+			title,
+			...version && { version },
+			...url && { url },
+			...raw.opened === true && { opened: true }
+		};
+	}
 	const latest = now + MESSAGE_CLOCK_SKEW_MS;
 	const links = readLinks(raw.links);
 	if (raw.kind === "task") {
@@ -6949,7 +7356,7 @@ function readStatusCard(raw, now = Date.now()) {
 		if (done === void 0 || total === void 0 || done > total) done = total = void 0;
 		const step = cardLine(raw.step, STATUS_CARD_LIMITS.line), branch = cardLine(raw.branch, STATUS_CARD_LIMITS.branch);
 		let pr;
-		if (isObject$2(raw.pr)) {
+		if (isObject$4(raw.pr)) {
 			const url = cardUrl(raw.pr.url);
 			if (url) {
 				const number = count(raw.pr.number, 1), additions = count(raw.pr.additions), deletions = count(raw.pr.deletions), files = count(raw.pr.files);
@@ -6967,7 +7374,7 @@ function readStatusCard(raw, now = Date.now()) {
 		}
 		const items = [];
 		if (Array.isArray(raw.items)) for (const entry of raw.items.slice(0, STATUS_CARD_LIMITS.items)) {
-			if (!isObject$2(entry)) continue;
+			if (!isObject$4(entry)) continue;
 			const text = cardLine(entry.text, STATUS_CARD_LIMITS.line);
 			if (text) items.push({
 				text,
@@ -7026,7 +7433,7 @@ function readStatusCard(raw, now = Date.now()) {
 		if (!Array.isArray(raw.buttons)) return void 0;
 		const buttons = [], seen = /* @__PURE__ */ new Set();
 		for (const entry of raw.buttons.slice(0, STATUS_CARD_LIMITS.buttons)) {
-			if (!isObject$2(entry) || typeof entry.id !== "string" || !BUTTON_ID.test(entry.id) || seen.has(entry.id)) continue;
+			if (!isObject$4(entry) || typeof entry.id !== "string" || !BUTTON_ID.test(entry.id) || seen.has(entry.id)) continue;
 			const label = cardLine(entry.label, STATUS_CARD_LIMITS.buttonLabel);
 			if (!label) continue;
 			seen.add(entry.id);
@@ -7055,10 +7462,10 @@ function readStatusCard(raw, now = Date.now()) {
 * at once and nothing it said is lost on the way. Line breaks and invisible characters are cleaned, as a reader would.
 */
 function checkStatusCard(raw, now = Date.now()) {
-	if (!isObject$2(raw)) return { error: "A card is an object" };
+	if (!isObject$4(raw)) return { error: "A card is an object" };
 	const bytes = statusCardBytes(raw);
 	if (bytes > STATUS_CARD_LIMITS.bytes) return { error: `The card takes ${bytes} bytes; at most ${STATUS_CARD_LIMITS.bytes}` };
-	if (raw.kind !== "task" && raw.kind !== "routine" && raw.kind !== "buttons") return { error: "kind is task, routine or buttons" };
+	if (raw.kind !== "task" && raw.kind !== "routine" && raw.kind !== "buttons" && raw.kind !== "app") return { error: "kind is task, routine, buttons or app" };
 	if (typeof raw.id !== "string" || !ID$4.test(raw.id)) return { error: `id is 1 to ${STATUS_CARD_LIMITS.id} of A-Z a-z 0-9 _ . : - and does not start with -` };
 	const line = (field, value, max, required = false) => {
 		if (value === void 0 && !required) return null;
@@ -7072,20 +7479,29 @@ function checkStatusCard(raw, now = Date.now()) {
 	if (raw.links !== void 0) {
 		if (!Array.isArray(raw.links) || raw.links.length > STATUS_CARD_LIMITS.links) errors.push(`links is a list of at most ${STATUS_CARD_LIMITS.links}`);
 		else for (const [i, link] of raw.links.entries()) {
-			if (!isObject$2(link)) {
+			if (!isObject$4(link)) {
 				errors.push(`links[${i}] is an object`);
 				continue;
 			}
 			errors.push(url(`links[${i}].url`, link.url), line(`links[${i}].label`, link.label, STATUS_CARD_LIMITS.linkLabel));
 		}
 	}
-	if (raw.kind === "buttons") {
+	if (raw.kind === "app") {
+		if (raw.links !== void 0) errors.push("an app card takes no links");
+		if (!isAppRef(raw.ref)) errors.push("ref is <publisher key in z-base32>/<name>");
+		else if (raw.id !== appCardId(raw.ref)) errors.push(`id is ${appCardId(raw.ref)}, made from ref`);
+		if (!isAppHash(raw.digest)) errors.push("digest is a SHA-256 in base64url without padding");
+		if (!appSequence(raw.sequence)) errors.push("sequence is a whole number from 0 to 2^53 - 1");
+		errors.push(line("title", raw.title, STATUS_CARD_LIMITS.appTitle, true), line("version", raw.version, STATUS_CARD_LIMITS.appVersion));
+		if (raw.url !== void 0) errors.push(url("url", raw.url));
+		if (raw.opened !== void 0 && raw.opened !== true) errors.push("opened is true or left out");
+	} else if (raw.kind === "buttons") {
 		if (raw.links !== void 0) errors.push("buttons take no links");
 		if (!Array.isArray(raw.buttons) || !raw.buttons.length || raw.buttons.length > STATUS_CARD_LIMITS.buttons) errors.push(`buttons is a list of 1 to ${STATUS_CARD_LIMITS.buttons}`);
 		else {
 			const ids = /* @__PURE__ */ new Set();
 			for (const [i, button] of raw.buttons.entries()) {
-				if (!isObject$2(button)) {
+				if (!isObject$4(button)) {
 					errors.push(`buttons[${i}] is an object`);
 					continue;
 				}
@@ -7112,7 +7528,7 @@ function checkStatusCard(raw, now = Date.now()) {
 		}
 		errors.push(line("step", raw.step, STATUS_CARD_LIMITS.line), line("branch", raw.branch, STATUS_CARD_LIMITS.branch));
 		if (raw.pr !== void 0) {
-			if (!isObject$2(raw.pr)) errors.push("pr is an object");
+			if (!isObject$4(raw.pr)) errors.push("pr is an object");
 			else {
 				errors.push(url("pr.url", raw.pr.url), whole("pr.number", raw.pr.number, 1), whole("pr.additions", raw.pr.additions), whole("pr.deletions", raw.pr.deletions), whole("pr.files", raw.pr.files));
 				if (raw.pr.state !== void 0 && !oneOf(PR_STATES, raw.pr.state)) errors.push(`pr.state is one of ${PR_STATES.join(", ")}`);
@@ -7144,7 +7560,7 @@ function checkStatusCard(raw, now = Date.now()) {
 		if (raw.items !== void 0) {
 			if (!Array.isArray(raw.items) || raw.items.length > STATUS_CARD_LIMITS.items) errors.push(`items is a list of at most ${STATUS_CARD_LIMITS.items}`);
 			else for (const [i, item] of raw.items.entries()) {
-				if (!isObject$2(item)) {
+				if (!isObject$4(item)) {
 					errors.push(`items[${i}] is an object`);
 					continue;
 				}
@@ -7158,7 +7574,7 @@ function checkStatusCard(raw, now = Date.now()) {
 		if (raw.cron !== void 0 && !(typeof raw.cron === "string" && CRON.test(raw.cron.trim()))) errors.push(`cron is a cron line of at most ${STATUS_CARD_LIMITS.cron} characters`);
 		if (raw.nextRunAt !== void 0 && !(typeof raw.nextRunAt === "number" && Number.isSafeInteger(raw.nextRunAt) && raw.nextRunAt > 0 && raw.nextRunAt <= now + STATUS_CARD_LIMITS.nextRunMs)) errors.push("nextRunAt is a time in milliseconds, within a year");
 		const run = (field, value) => {
-			if (!isObject$2(value)) return errors.push(`${field} is an object`);
+			if (!isObject$4(value)) return errors.push(`${field} is an object`);
 			if (!(typeof value.at === "number" && Number.isSafeInteger(value.at) && value.at > 0 && value.at <= now + 3e5)) errors.push(`${field}.at is a time in milliseconds, not in the future`);
 			if (!oneOf(RUN_RESULTS, value.result)) errors.push(`${field}.result is one of ${RUN_RESULTS.join(", ")}`);
 			errors.push(line(`${field}.summary`, value.summary, STATUS_CARD_LIMITS.line));
@@ -7209,6 +7625,10 @@ function cardTimeUtc(ms) {
 * and search finds. Plain lines, the first naming the card, no bars or layout that would read badly elsewhere.
 */
 function statusCardText(card) {
+	if (card.kind === "app") {
+		const named = `${card.title}${card.version ? ` ${card.version}` : ""}`;
+		return [card.opened ? `🧩 Opened ${named} in this chat (Ghostly app)` : `🧩 ${named} (Ghostly app)`, ...card.url ? [card.url] : []].join("\n");
+	}
 	if (card.kind === "buttons") return `Reply: ${card.buttons.map((b) => b.label).join(" / ")}`;
 	if (card.kind === "task") {
 		const progress = taskProgress(card);
@@ -7970,10 +8390,20 @@ var INVISIBLE = /[\p{Cc}\p{Cf}\p{Zl}\p{Zp}]/gu;
 * "CON", "nul.txt", "COM1 .log" open a device there, not a file.
 */
 var WINDOWS_DEVICE = /^(CON|PRN|AUX|NUL|CONIN\$|CONOUT\$|COM[0-9¹²³]|LPT[0-9¹²³])\s*(\.|$)/i;
+/**
+* At most `MAX_NAME_LENGTH` characters. A longer name loses the end of its stem, not its extension (up to 15
+* characters after the last dot): "…report.pdf" stays a PDF to the system it is saved on.
+*/
+function shorten(name) {
+	const chars = [...name];
+	if (chars.length <= MAX_NAME_LENGTH) return name;
+	const extension = [.../\.[^.\s]{1,15}$/u.exec(name)?.[0] ?? ""];
+	return chars.slice(0, MAX_NAME_LENGTH - extension.length).join("").trimEnd() + extension.join("");
+}
 /** A file name is display text and a download suggestion, never a path. */
 function sanitizeFileName(name) {
-	const clean = [...name.replace(INVISIBLE, "").replace(/[/\\:]/g, "").replace(/^[\s.]+/, "")].slice(0, MAX_NAME_LENGTH).join("").trim();
-	if (WINDOWS_DEVICE.test(clean)) return [..."_" + clean].slice(0, MAX_NAME_LENGTH).join("");
+	const clean = shorten(name.replace(INVISIBLE, "").replace(/[/\\:]/g, "").replace(/^[\s.]+/, "").trim());
+	if (WINDOWS_DEVICE.test(clean)) return shorten("_" + clean);
 	return clean || "file";
 }
 function sanitizeMime(mime) {
@@ -8451,6 +8881,8 @@ var DhtDelivery = class DhtDelivery {
 	/** Until when the relays' request budget holds publications back: what is due then goes at once. */
 	budgetUntil = 0;
 	errors = {};
+	/** When the device's network last came back (`networkBack`): a read or publication started before failed for want of it. */
+	networkBackAt = -Infinity;
 	foreignKeySeenAt;
 	/** When the pinned mailbox was last looked in while the contact had not said it uses it. */
 	pinnedProbeAt = 0;
@@ -8640,6 +9072,18 @@ var DhtDelivery = class DhtDelivery {
 		this.tick();
 	}
 	/**
+	* The device's network came back: a read or publication error from while it was away says nothing now (No Pkarr
+	* relay reachable). It goes at once, and the mailbox is read now: one that still fails says so again.
+	*/
+	networkBack() {
+		this.networkBackAt = Date.now();
+		if (!this.errors.read && !this.errors.publish) return;
+		delete this.errors.read;
+		delete this.errors.publish;
+		this.changed();
+		this.tick();
+	}
+	/**
 	* Reads the contact's mailbox at the signaling pace for a while (a fresh packet of a contact not pinned yet).
 	* `signal`: the contact is leaving DHT only (a fresh packet on its link key, or its offer), and the live link waits
 	* on a read to say so: the next read goes now, and it and the next ones while the contact still says DHT only
@@ -9286,18 +9730,20 @@ var DhtDelivery = class DhtDelivery {
 				const signal = this.signalReads > 0;
 				this.urgent = false;
 				if (signal) this.signalReads--;
+				const readAt = Date.now();
 				try {
 					await this.read(background, signal);
 					if (!this.running) return;
 					delete this.errors.read;
 				} catch (error) {
-					if (!isDiscoveryBudgetError(error)) this.errors.read = `Could not read DHT delivery: ${error instanceof Error ? error.message : String(error)}`;
+					if (!isDiscoveryBudgetError(error) && readAt >= this.networkBackAt) this.errors.read = `Could not read DHT delivery: ${error instanceof Error ? error.message : String(error)}`;
 				}
 				if (this.state.peerMode !== "dht") this.signalReads = 0;
+				const publishAt = Date.now();
 				try {
 					await this.publish();
 				} catch (error) {
-					if (!isDiscoveryBudgetError(error)) this.errors.publish = `Could not publish DHT delivery: ${error instanceof Error ? error.message : String(error)}`;
+					if (!isDiscoveryBudgetError(error) && publishAt >= this.networkBackAt) this.errors.publish = `Could not publish DHT delivery: ${error instanceof Error ? error.message : String(error)}`;
 				}
 				this.changed();
 			});
@@ -9723,6 +10169,8 @@ var TransportSwitch = class {
 	settled = "";
 	failed = "";
 	preparing = false;
+	/** The coordinator's dial for the pending plan has started (`dialing`): from then on a newer choice waits for it. */
+	dialStarted = false;
 	/** This side chose while no session was open: the next one begins with it as a choice. */
 	apart = false;
 	constructor(options) {
@@ -9795,7 +10243,10 @@ var TransportSwitch = class {
 	begin(context, actual, migrated = false) {
 		const landed = migrated ? this.plan : null;
 		this.settled = landed ? this.signature(landed.local, landed.remote) : "";
-		if (!migrated) this.failed = "";
+		if (!migrated) {
+			this.failed = "";
+			this.remote = null;
+		}
 		if (this.apart) {
 			this.intent = Math.max(this.intent, this.lastRemote?.intent ?? 0) + 1;
 			this.apart = false;
@@ -9817,6 +10268,7 @@ var TransportSwitch = class {
 		} else if (userIntent) this.intent = Math.max(this.intent, this.remote?.intent ?? 0) + 1;
 		this.failed = "";
 		this.announce();
+		this.supersede();
 		this.reconcile();
 	}
 	/**
@@ -9846,7 +10298,7 @@ var TransportSwitch = class {
 	keep(reason) {
 		const target = this.plan?.choices[0];
 		if (this.plan) this.settled = this.signature(this.plan.local, this.plan.remote);
-		if (target && target !== this.actual) this.options.kept?.(target, reason);
+		if (target && target !== this.actual && !this.plan?.upgrade) this.options.kept?.(target, reason);
 		this.send({
 			t: "paired-switch-keep",
 			id: this.plan?.id
@@ -9884,9 +10336,33 @@ var TransportSwitch = class {
 		this.timer = null;
 		this.plan = null;
 		this.preparing = false;
+		this.dialStarted = false;
+	}
+	/** The coordinator starts dialling the pending plan (a move back to WebRTC first waits for the old session to retire). */
+	dialing(plan) {
+		if (this.plan === plan) this.dialStarted = true;
+	}
+	/**
+	* A newer choice (this side's, or the contact's policy) while a plan both sides agreed has not started its dial: a
+	* move back to WebRTC waits for the WebRTC session it left to retire (`SWITCH_RETIRE_MS`), and nothing has been tried
+	* yet. The coordinator drops that plan, so the chat does not move there only to move again; the other side is told
+	* with `paired-switch-keep`, and whatever the newer policies call for is planned next. A plan already dialling goes
+	* on: a choice made then is planned once it ended (`replanIfMoved`).
+	*/
+	supersede() {
+		const plan = this.plan;
+		if (!plan || !this.preparing || this.dialStarted || !this.context || !this.remote || this.options.key > this.options.peerKey) return;
+		if (this.choices(this.local(), this.remote)[0] === plan.choices[0]) return;
+		this.send({
+			t: "paired-switch-keep",
+			id: plan.id
+		});
+		this.clearPlan();
+		this.options.cancel();
+		this.options.state();
 	}
 	fail(error) {
-		const target = this.plan?.choices[0];
+		const target = this.plan?.choices[0], upgrade = !!this.plan?.upgrade;
 		if (this.plan) this.failed = this.signature(this.plan.local, this.plan.remote);
 		this.send({
 			t: "paired-switch-failed",
@@ -9894,7 +10370,8 @@ var TransportSwitch = class {
 		});
 		this.clearPlan();
 		this.options.cancel();
-		this.unreached(target, error, error);
+		if (upgrade) this.options.state();
+		else this.unreached(target, error, error);
 		this.replanIfMoved();
 	}
 	/**
@@ -9916,13 +10393,29 @@ var TransportSwitch = class {
 		const ranked = rankTransports(allowedTransports(local), allowedTransports(remote), relayed);
 		if (!ranked.length) return [];
 		const winner = this.winner(local, remote);
-		const target = winner.intent === 0 && this.actual && ranked.includes(this.actual) ? this.actual : ranked.includes(winner.preferred) ? winner.preferred : ranked[0];
+		const target = this.upgrading(winner, ranked, relayed) ? ranked[0] : winner.intent === 0 && this.actual && ranked.includes(this.actual) ? this.actual : ranked.includes(winner.preferred) ? winner.preferred : ranked[0];
 		return [target, ...local.fallback && remote.fallback ? ranked.filter((t) => t !== target) : []];
 	}
+	/** Nobody chose, the session is on a relayed transport, a direct one ranks first, and both sides move (`upgrade/1`). */
+	upgrading(winner, ranked, relayed) {
+		return winner.intent === 0 && !!this.actual && relayed.includes(this.actual) && ranked.includes(this.actual) && ranked[0] !== this.actual && !relayed.includes(ranked[0]) && !!this.options.upgrade?.();
+	}
+	isUpgrade(local, remote) {
+		const relayed = relayedTransports(local.descriptors, remote.descriptors);
+		return this.upgrading(this.winner(local, remote), rankTransports(allowedTransports(local), allowedTransports(remote), relayed), relayed);
+	}
+	/**
+	* Something `upgrade` depends on changed (what the contact's app offers on this session, said once it is ready): plan
+	* again. The session's first agreement, made before that, settled on the relay it is on; a move off it is not that.
+	*/
+	reconsider() {
+		if (this.context && this.remote && !this.plan && this.isUpgrade(this.local(), this.remote) && this.settled === this.signature(this.local(), this.remote)) this.settled = "";
+		this.reconcile();
+	}
 	install(plan) {
 		this.clearPlan();
 		this.plan = plan;
-		this.options.state(void 0, plan.choices[0]);
+		this.options.state(void 0, plan.upgrade ? void 0 : plan.choices[0]);
 		this.timer = setTimeout(() => this.fail("Transport change timed out. Your previous connection is kept when available; retry or choose another transport."), this.options.timeoutMs ?? 3e4);
 	}
 	reconcile() {
@@ -9944,11 +10437,16 @@ var TransportSwitch = class {
 			return;
 		}
 		if (signature === this.failed) return;
-		this.options.state(void 0, choices[0]);
+		const upgrade = this.isUpgrade(local, remote);
+		this.options.state(void 0, upgrade ? void 0 : choices[0]);
 		if (this.options.key > this.options.peerKey) {
 			if (!this.timer) this.timer = setTimeout(() => {
 				this.failed = signature;
 				this.clearPlan();
+				if (upgrade) {
+					this.options.state();
+					return;
+				}
 				this.unreached(choices[0], "Your contact did not acknowledge the transport change. Retry when both peers are connected.", "Your contact did not answer");
 			}, this.options.timeoutMs ?? 3e4);
 			return;
@@ -9957,7 +10455,8 @@ var TransportSwitch = class {
 			id: `${signature}:${choices[0]}`,
 			local,
 			remote,
-			choices
+			choices,
+			...upgrade && { upgrade }
 		};
 		this.install(plan);
 		this.send({
@@ -9984,6 +10483,7 @@ var TransportSwitch = class {
 			this.remote = this.lastRemote = policy;
 			this.options.peer(policy);
 			if (changed && this.plan && !this.preparing) this.clearPlan();
+			else if (changed) this.supersede();
 			this.reconcile();
 			return true;
 		}
@@ -9998,7 +10498,8 @@ var TransportSwitch = class {
 				id: String(frame.id),
 				local,
 				remote,
-				choices
+				choices,
+				...this.isUpgrade(local, remote) && { upgrade: true }
 			});
 			this.options.prepare(this.plan, false);
 			this.send({
@@ -10009,17 +10510,24 @@ var TransportSwitch = class {
 		}
 		if (!this.plan || frame.id !== this.plan.id) return true;
 		if (frame.t === "paired-switch-failed") {
-			const target = this.plan.choices[0];
+			const target = this.plan.choices[0], upgrade = !!this.plan.upgrade;
 			this.failed = this.signature(this.plan.local, this.plan.remote);
 			this.clearPlan();
 			this.options.cancel();
-			this.unreached(target, "The transport change failed. Retry or choose another transport.");
+			if (upgrade) this.options.state();
+			else this.unreached(target, "The transport change failed. Retry or choose another transport.");
 			this.replanIfMoved();
 			return true;
 		}
 		if (frame.t === "paired-switch-keep") {
+			if (this.preparing && this.remote && this.choices(this.local(), this.remote)[0] !== this.plan.choices[0]) {
+				this.clearPlan();
+				this.options.state();
+				this.reconcile();
+				return true;
+			}
 			if (this.actual && this.plan.choices.includes(this.actual)) {
-				if (this.plan.choices[0] !== this.actual) this.options.kept?.(this.plan.choices[0]);
+				if (this.plan.choices[0] !== this.actual && !this.plan.upgrade) this.options.kept?.(this.plan.choices[0]);
 				this.settled = this.signature(this.plan.local, this.plan.remote);
 				this.clearPlan();
 				this.options.state();
@@ -10438,7 +10946,7 @@ var lastOf = (timeline, side, proofs) => {
 /**
 * The timeline after one step. A share already on it is updated in place, never repeated: a request sent again at
 * a reconnect, a second share of a proof the contact already verified. A new attempt after a failure or a stop is
-* a new entry. A stop is written once.
+* a new entry. A stop is written once; a withdrawal later found revoked becomes a revocation in place.
 */
 function applyIdentityEvent(timeline, event, at) {
 	const out = [...timeline];
@@ -10498,7 +11006,13 @@ function applyIdentityEvent(timeline, event, at) {
 			break;
 		}
 		case "stopped":
-			if (last?.kind === "stopped") break;
+			if (last?.kind === "stopped") {
+				if (last.reason === "withdrawn" && event.reason === "revoked") out[i] = {
+					...last,
+					reason: "revoked"
+				};
+				break;
+			}
 			add({
 				proof: event.proof,
 				side: event.side,
@@ -11165,11 +11679,17 @@ var CAPS_READ_SPACING_MS = 15e3;
 * already knows and looks the key up behind it, and a lookup that started before the publication landed finds the old
 * one; a relay may serve an old copy for a while too. The envelope names each revision once, so one read was the last
 * until the next envelope, minutes away, and the chat stayed on the DHT with no descriptors to dial.
+*
+* The first ones come soon: a contact's record that lists a native transport with no descriptor is the "Peer native
+* address unavailable" a dial ends with, and its revision with the descriptors is usually out a second or two after the
+* first (its endpoints were starting). Read 5 s, then 20 s after, two Desktops DHT direct with Iroh's relay out of reach
+* went live 11 to 28 s after their chats opened (2026-10-07). One read more than before, three in the first 7 s.
 */
 var CAPS_READ_RETRY_MS = [
-	5e3,
+	1e3,
+	2e3,
+	4e3,
 	15e3,
-	3e4,
 	6e4
 ];
 var NATIVE = ["iroh/1", "hyperdht/1"];
@@ -11761,7 +12281,7 @@ var KINDS$1 = [
 var WIRE_ID = /^[A-Za-z0-9_-]{8,64}$/;
 var MAILBOX = /^[A-Za-z0-9_-]{22}$/;
 var SIG$3 = /^[A-Za-z0-9_-]{86}$/;
-var MAGIC$1 = utf8Encode("GHLD");
+var MAGIC$2 = utf8Encode("GHLD");
 var VERSION = 1;
 var NONCE$2 = 24;
 /** Why a bundle, manifest or pointer was refused. Never a reason to trust it a little. */
@@ -11827,7 +12347,7 @@ var HoldKeys = class {
 		new DataView(length.buffer).setUint32(0, header.length);
 		const nonce = randomBytes(NONCE$2);
 		const box = xsalsa20poly1305(this.sealKey, nonce).encrypt(concatBytes$1(length, header, body));
-		return concatBytes$1(MAGIC$1, new Uint8Array([VERSION]), nonce, box);
+		return concatBytes$1(MAGIC$2, new Uint8Array([VERSION]), nonce, box);
 	}
 	/**
 	* Opens a bundle the contact sealed for me. Everything is checked before anything is returned: the
@@ -11837,11 +12357,11 @@ var HoldKeys = class {
 	open(bytes, expect = {}) {
 		const now = expect.now ?? Date.now();
 		if (bytes.length > (expect.maxBytes ?? HOLD_LIMITS.maxBundleBytes)) throw new HoldRefusedError("size", "The held item is larger than allowed");
-		if (bytes.length < MAGIC$1.length + 1 + NONCE$2 + 16 + 4 || !MAGIC$1.every((b, i) => bytes[i] === b)) throw new HoldRefusedError("format", "Not a held item");
-		if (bytes[MAGIC$1.length] !== VERSION) throw new HoldRefusedError("format", "Held item from a newer Ghostly");
+		if (bytes.length < MAGIC$2.length + 1 + NONCE$2 + 16 + 4 || !MAGIC$2.every((b, i) => bytes[i] === b)) throw new HoldRefusedError("format", "Not a held item");
+		if (bytes[MAGIC$2.length] !== VERSION) throw new HoldRefusedError("format", "Held item from a newer Ghostly");
 		let plain;
 		try {
-			plain = xsalsa20poly1305(this.sealKey, bytes.subarray(MAGIC$1.length + 1, MAGIC$1.length + 1 + NONCE$2)).decrypt(bytes.subarray(MAGIC$1.length + 1 + NONCE$2));
+			plain = xsalsa20poly1305(this.sealKey, bytes.subarray(MAGIC$2.length + 1, MAGIC$2.length + 1 + NONCE$2)).decrypt(bytes.subarray(MAGIC$2.length + 1 + NONCE$2));
 		} catch {
 			throw new HoldRefusedError("tampered", "The held item was changed or is not for this chat");
 		}
@@ -12449,6 +12969,19 @@ var STATUS_CARD_CAPABILITY = "status-card/1";
 * a press reads as an ordinary reply there. It tells a bot whether its contact can press at all.
 */
 var BUTTONS_CAPABILITY = "buttons/1";
+/**
+* A session live on a relayed transport while a direct one ranks first, with nobody's choice behind it, moves to the
+* direct one once, in place, its signaling on the session (WISP 100 § Back to a quiet contact): what a chat that came
+* back over a relay at once (rather than wait for an offer's answer) needs to end where a direct path would have put
+* it. Both sides must say it: the switch is planned by one and checked by the other. Also in the capability record
+* (WISP 03), so an app back after an absence knows before any session whether a relay can carry it there at once.
+*/
+var UPGRADE_CAPABILITY = "upgrade/1";
+/**
+* Mini-apps in a 1:1 chat: `paired-app` frames on this session, live only (WISP 1200 § In a chat: `apps/1`,
+* `pairedApps.ts`). Offered only while the apps feature is on.
+*/
+var APPS_CAPABILITY = "apps/1";
 /** Every capability this app knows on a session: what `receive` reports changes of. */
 var KNOWN_SESSION_CAPABILITIES = [
 	CALLS_CAPABILITY,
@@ -12460,7 +12993,9 @@ var KNOWN_SESSION_CAPABILITIES = [
 	WAKE_SESSION_CAPABILITY,
 	PIN_CAPABILITY,
 	STATUS_CARD_CAPABILITY,
-	BUTTONS_CAPABILITY
+	BUTTONS_CAPABILITY,
+	UPGRADE_CAPABILITY,
+	APPS_CAPABILITY
 ];
 var SESSION_CAPABILITIES_FRAME = "paired-capabilities";
 var MAX_ENTRIES$1 = 32;
@@ -12527,77 +13062,340 @@ var SessionCapabilities = class {
 	}
 };
 //#endregion
-//#region ../core/src/webPush.ts
-var WebPushError = class extends Error {};
-var RECORD_SIZE = 4096;
-/** Push services refuse a token valid for more than 24 hours; 12 leaves room for skewed clocks. */
-var TOKEN_SECONDS = 43200;
-function point(value, what) {
-	let bytes;
-	try {
-		bytes = fromBase64Url(value);
-	} catch {
-		throw new WebPushError(`${what} is not base64url`);
-	}
-	if (bytes.length !== 65 || bytes[0] !== 4) throw new WebPushError(`${what} is not an uncompressed P-256 key`);
-	try {
-		p256.Point.fromBytes(bytes);
-	} catch {
-		throw new WebPushError(`${what} is not a point on P-256`);
-	}
-	return bytes;
+//#region ../core/src/pairedApps.ts
+/**
+* Mini-apps talking in a 1:1 chat (WISP 1200 § In a chat: `apps/1`): the same app on both sides sends JSON to the
+* other over the live session, in one frame with three forms.
+*
+*     {"t":"paired-app","a":"<chat app id>","o":"open","v":"1.2.0"}
+*     {"t":"paired-app","a":"<chat app id>","o":"close"}
+*     {"t":"paired-app","a":"<chat app id>","d":<JSON value>}
+*
+* It needs `apps/1` in `paired-capabilities` on both sides. Live only: never on the DHT, never held, never queued for
+* later; while the session is not live a send fails with `offline`. An `open` goes when the person opens the app in
+* the chat, again on an update, and again on every session that comes back while the app is open. The receiver
+* enforces the limits (the sender's client may be the attacker): at most `APP_DATA_MAX_BYTES` of data, at most
+* `APP_RATE_LIMIT` frames a second per app, data only for an app open on both sides, at most `APP_PEER_OPEN_MAX`
+* apps the peer has open, and nothing unless both sides offer `apps/1`.
+*
+* The chat app id names one app in one chat: the first 16 bytes of HMAC-SHA-256 keyed by the two pinned participation
+* keys over the app reference `<publisher key in z-base32>/<name>`. One app's id differs in each chat, so ids cannot
+* be matched across a person's chats; it travels only inside the encrypted session.
+*/
+var APP_FRAME = "paired-app";
+var DOMAIN = "ghostly-apps/1";
+var APP_ID = /^[A-Za-z0-9_-]{22}$/;
+/** Semantic versioning 2.0.0, as a manifest's `version` is. */
+var SEMVER$1 = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/;
+/** A chat app id as it is on the wire: 22 base64url characters (16 bytes, no padding). */
+function isChatAppId(value) {
+	return typeof value === "string" && APP_ID.test(value);
+}
+/** A version an `open` may carry: semantic versioning, at most `APP_VERSION_MAX` characters. */
+function isAppVersion(value) {
+	return typeof value === "string" && value.length <= 64 && SEMVER$1.test(value);
 }
-/** Whether a VAPID key pair is well formed and its halves belong together. */
-function vapidKeysMatch(keys) {
-	try {
-		const secret = fromBase64Url(keys.privateKey);
-		return secret.length === 32 && toBase64Url(p256.getPublicKey(secret, false)) === toBase64Url(point(keys.publicKey, "The VAPID key"));
-	} catch {
-		return false;
-	}
+function compareBytes$2(a, b) {
+	for (let i = 0; i < Math.min(a.length, b.length); i++) if (a[i] !== b[i]) return a[i] - b[i];
+	return a.length - b.length;
 }
 /**
-* The push services a browser subscribes with: Google (Chrome, Edge on Android, Brave, Opera), Apple (Safari), Mozilla
-* (Firefox), Microsoft (Edge on Windows). The same list as the push relay's (infra/services/push-relay/relay.mjs).
-*/
-var PUSH_SERVICE_HOSTS = [
-	/^fcm\.googleapis\.com$/,
-	/(^|\.)push\.apple\.com$/,
-	/(^|\.)push\.services\.mozilla\.com$/,
-	/(^|\.)notify\.windows\.com$/
-];
-/**
-* Only https, on one of the push services' host names and their default port, without credentials. The endpoint came
-* from a contact: it must not turn this app into a way to post to the contact's choice of address, local or not.
+* The chat app id of `ref` in the chat between these two participation keys (raw, 32 bytes each, in either order):
+* HMAC-SHA-256 keyed by SHA-256(`ghostly-apps/1`, 0x00, the lower key, the higher key), over the UTF-8 reference;
+* its first 16 bytes, base64url without padding.
 */
-function checkPushEndpoint(endpoint) {
-	let url;
+function chatAppId(keyA, keyB, ref) {
+	if (keyA.length !== 32 || keyB.length !== 32) throw new Error("A participation key is 32 bytes");
+	if (!isAppRef(ref)) throw new Error("Not an app reference");
+	const [low, high] = compareBytes$2(keyA, keyB) <= 0 ? [keyA, keyB] : [keyB, keyA];
+	const key = sha256(concatBytes$1(utf8Encode(DOMAIN), new Uint8Array([0]), low, high));
+	return toBase64Url(hmac(sha256, key, utf8Encode(ref)).slice(0, 16));
+}
+/** The size of a value as compact UTF-8 JSON; Infinity when it is not JSON (undefined, a function, a cycle, a BigInt). */
+function appDataBytes(value) {
+	let json;
 	try {
-		url = new URL(endpoint);
+		json = JSON.stringify(value);
 	} catch {
-		throw new WebPushError("The push endpoint is not a URL");
+		return Infinity;
 	}
-	if (url.protocol !== "https:") throw new WebPushError("The push endpoint is not https");
-	if (url.username || url.password) throw new WebPushError("The push endpoint carries credentials");
-	if (url.port) throw new WebPushError("The push endpoint names a port");
-	const host = url.hostname.toLowerCase();
-	if (!PUSH_SERVICE_HOSTS.some((pattern) => pattern.test(host))) throw new WebPushError("The push endpoint is not a push service");
-	if (endpoint.length > 2048) throw new WebPushError("The push endpoint is too long");
-	return url;
-}
-/** `Authorization: vapid t=<JWT>, k=<public key>` for a request to `endpoint` (RFC 8292). */
-function vapidAuthorization(endpoint, keys, subject, now = Date.now()) {
-	const audience = checkPushEndpoint(endpoint).origin;
-	const encode = (value) => toBase64Url(utf8Encode(JSON.stringify(value)));
-	const unsigned = `${encode({
-		typ: "JWT",
-		alg: "ES256"
-	})}.${encode({
-		aud: audience,
-		exp: Math.floor(now / 1e3) + TOKEN_SECONDS,
-		sub: subject
-	})}`;
-	return `vapid t=${unsigned}.${toBase64Url(p256.sign(utf8Encode(unsigned), fromBase64Url(keys.privateKey)))}, k=${keys.publicKey}`;
+	return json === void 0 ? Infinity : utf8Encode(json).length;
+}
+function appOpenFrame(app, version) {
+	if (!isChatAppId(app) || !isAppVersion(version)) throw new Error("Not an app open");
+	return {
+		t: APP_FRAME,
+		a: app,
+		o: "open",
+		v: version
+	};
+}
+function appCloseFrame(app) {
+	if (!isChatAppId(app)) throw new Error("Not an app close");
+	return {
+		t: APP_FRAME,
+		a: app,
+		o: "close"
+	};
+}
+function appDataFrame(app, data) {
+	if (!isChatAppId(app) || appDataBytes(data) > 32768) throw new Error("Not app data");
+	return {
+		t: APP_FRAME,
+		a: app,
+		d: data
+	};
+}
+/**
+* A `paired-app` frame as the peer sent it, or why a reader must refuse it: no valid `a` (22 base64url characters),
+* both or neither of `o` and `d`, an unknown `o`, an `open` without a valid `v`, or a `d` over `APP_DATA_MAX_BYTES`.
+* Other keys are ignored, so a later version can add some.
+*/
+function readAppFrame(frame) {
+	const refuse = (refusal) => ({
+		ok: false,
+		refusal
+	});
+	if (frame?.t !== "paired-app") return refuse("not-app");
+	if (!isChatAppId(frame.a)) return refuse("bad-a");
+	const own = (key) => Object.prototype.hasOwnProperty.call(frame, key);
+	const hasO = own("o"), hasD = own("d");
+	if (hasO && hasD) return refuse("o-and-d");
+	if (!hasO && !hasD) return refuse("no-o-or-d");
+	if (hasD) return appDataBytes(frame.d) <= 32768 ? {
+		ok: true,
+		frame: {
+			t: APP_FRAME,
+			a: frame.a,
+			d: frame.d
+		}
+	} : refuse("too-large");
+	if (frame.o === "close") return {
+		ok: true,
+		frame: {
+			t: APP_FRAME,
+			a: frame.a,
+			o: "close"
+		}
+	};
+	if (frame.o !== "open") return refuse("unknown-o");
+	return isAppVersion(frame.v) ? {
+		ok: true,
+		frame: {
+			t: APP_FRAME,
+			a: frame.a,
+			o: "open",
+			v: frame.v
+		}
+	} : refuse("bad-v");
+}
+/** A `paired-app` frame as the peer sent it, or null when a reader must refuse it (`readAppFrame` says why). */
+function parseAppFrame(frame) {
+	const read = readAppFrame(frame);
+	return read.ok ? read.frame : null;
+}
+/** Frames per app in a sliding window, for at most `max` apps at once. */
+var RateWindows = class {
+	limit;
+	max;
+	windows = /* @__PURE__ */ new Map();
+	constructor(limit, max) {
+		this.limit = limit;
+		this.max = max;
+	}
+	/** Counts one frame for `app` at `now`; false when it is over the limit (not counted then). */
+	take(app, now) {
+		let window = this.windows.get(app);
+		if (!window) {
+			if (this.windows.size >= this.max) this.prune(now);
+			if (this.windows.size >= this.max) return false;
+			window = [];
+			this.windows.set(app, window);
+		}
+		while (window.length && now - window[0] >= 1e3) window.shift();
+		if (window.length >= this.limit) return false;
+		window.push(now);
+		return true;
+	}
+	prune(now) {
+		for (const [app, window] of this.windows) if (!window.length || now - window[window.length - 1] >= 1e3) this.windows.delete(app);
+	}
+	clear() {
+		this.windows.clear();
+	}
+};
+/**
+* The apps of one chat on its live sessions. `open` (this side's apps, by chat app id, with their versions) lasts
+* across sessions, so each new one says `open` again; what the peer has open lasts one session.
+*/
+var AppSessions = class {
+	open;
+	now;
+	peer = /* @__PURE__ */ new Map();
+	/** What the peer had open on a session that ended, held for `APP_RESUME_GRACE_MS` until it says so again. */
+	held = /* @__PURE__ */ new Map();
+	received = new RateWindows(50, 64);
+	sent = new RateWindows(48, 64);
+	constructor(open = /* @__PURE__ */ new Map(), now = Date.now) {
+		this.open = open;
+		this.now = now;
+	}
+	/** The peer has this app open on this session, at this version. */
+	peerVersion(app) {
+		return this.peer.get(app);
+	}
+	/** The apps the peer has open on this session. */
+	get peerOpen() {
+		return this.peer;
+	}
+	/**
+	* A `paired-app` frame from the peer, on a session where both sides offer `apps/1`. Counted before it is read; the
+	* event to pass on, or null when it was dropped (malformed, over the rate, a data frame for an app not open on both
+	* sides, an `open` past `APP_PEER_OPEN_MAX`, a `close` of an app the peer did not have open).
+	*/
+	receive(frame) {
+		if (!isChatAppId(frame?.a) || !this.received.take(frame.a, this.now())) return null;
+		const parsed = parseAppFrame(frame);
+		if (!parsed) return null;
+		const app = parsed.a;
+		if ("d" in parsed) return this.open.has(app) && this.peer.has(app) ? {
+			app,
+			d: parsed.d
+		} : null;
+		if (parsed.o === "close") return this.peer.delete(app) || this.held.delete(app) ? {
+			app,
+			o: "close"
+		} : null;
+		if (!this.peer.has(app) && this.peer.size >= 16) return null;
+		this.held.delete(app);
+		this.peer.set(app, parsed.v);
+		return {
+			app,
+			o: "open",
+			v: parsed.v
+		};
+	}
+	/** Whether a data frame for `app` may go now, the session being live with `apps/1` agreed; counted when it may. */
+	canSend(app, data) {
+		if (!this.open.has(app)) return "not-open";
+		if (appDataBytes(data) > 32768) return "too-large";
+		if (!this.peer.has(app)) return "peer-closed";
+		return this.sent.take(app, this.now()) ? null : "too-fast";
+	}
+	/**
+	* The session ended, or `apps/1` is no longer agreed: what the peer had open is gone, and each such app hears a
+	* `close` with `offline`. This side's open apps stay, and say `open` again on the next session.
+	*/
+	sessionEnded() {
+		const closed = [.../* @__PURE__ */ new Set([...this.held.keys(), ...this.peer.keys()])].map((app) => ({
+			app,
+			o: "close",
+			offline: true
+		}));
+		this.peer.clear();
+		this.held.clear();
+		this.received.clear();
+		this.sent.clear();
+		return closed;
+	}
+	/**
+	* The session ended or was replaced, and another may follow at once: what the peer had open is held, not closed (no
+	* event now). Nothing is sent to a held app; an `open` on the next session takes it back, a `close` closes it, and
+	* `heldExpired` closes the rest once `APP_RESUME_GRACE_MS` has passed.
+	*/
+	sessionSuspended() {
+		for (const [app, version] of this.peer) this.held.set(app, version);
+		this.peer.clear();
+		this.received.clear();
+		this.sent.clear();
+	}
+	/** Whether any of the peer's apps is held, waiting for its next session. */
+	get holding() {
+		return this.held.size > 0;
+	}
+	/** The grace is over: each app still held is closed, with `offline`. */
+	heldExpired() {
+		const closed = [...this.held.keys()].map((app) => ({
+			app,
+			o: "close",
+			offline: true
+		}));
+		this.held.clear();
+		return closed;
+	}
+};
+//#endregion
+//#region ../core/src/webPush.ts
+var WebPushError = class extends Error {};
+var RECORD_SIZE = 4096;
+/** Push services refuse a token valid for more than 24 hours; 12 leaves room for skewed clocks. */
+var TOKEN_SECONDS = 43200;
+function point(value, what) {
+	let bytes;
+	try {
+		bytes = fromBase64Url(value);
+	} catch {
+		throw new WebPushError(`${what} is not base64url`);
+	}
+	if (bytes.length !== 65 || bytes[0] !== 4) throw new WebPushError(`${what} is not an uncompressed P-256 key`);
+	try {
+		p256.Point.fromBytes(bytes);
+	} catch {
+		throw new WebPushError(`${what} is not a point on P-256`);
+	}
+	return bytes;
+}
+/** Whether a VAPID key pair is well formed and its halves belong together. */
+function vapidKeysMatch(keys) {
+	try {
+		const secret = fromBase64Url(keys.privateKey);
+		return secret.length === 32 && toBase64Url(p256.getPublicKey(secret, false)) === toBase64Url(point(keys.publicKey, "The VAPID key"));
+	} catch {
+		return false;
+	}
+}
+/**
+* The push services a browser subscribes with: Google (Chrome, Edge on Android, Brave, Opera), Apple (Safari), Mozilla
+* (Firefox), Microsoft (Edge on Windows). The same list as the push relay's (infra/services/push-relay/relay.mjs).
+*/
+var PUSH_SERVICE_HOSTS = [
+	/^fcm\.googleapis\.com$/,
+	/(^|\.)push\.apple\.com$/,
+	/(^|\.)push\.services\.mozilla\.com$/,
+	/(^|\.)notify\.windows\.com$/
+];
+/**
+* Only https, on one of the push services' host names and their default port, without credentials. The endpoint came
+* from a contact: it must not turn this app into a way to post to the contact's choice of address, local or not.
+*/
+function checkPushEndpoint(endpoint) {
+	let url;
+	try {
+		url = new URL(endpoint);
+	} catch {
+		throw new WebPushError("The push endpoint is not a URL");
+	}
+	if (url.protocol !== "https:") throw new WebPushError("The push endpoint is not https");
+	if (url.username || url.password) throw new WebPushError("The push endpoint carries credentials");
+	if (url.port) throw new WebPushError("The push endpoint names a port");
+	const host = url.hostname.toLowerCase();
+	if (!PUSH_SERVICE_HOSTS.some((pattern) => pattern.test(host))) throw new WebPushError("The push endpoint is not a push service");
+	if (endpoint.length > 2048) throw new WebPushError("The push endpoint is too long");
+	return url;
+}
+/** `Authorization: vapid t=<JWT>, k=<public key>` for a request to `endpoint` (RFC 8292). */
+function vapidAuthorization(endpoint, keys, subject, now = Date.now()) {
+	const audience = checkPushEndpoint(endpoint).origin;
+	const encode = (value) => toBase64Url(utf8Encode(JSON.stringify(value)));
+	const unsigned = `${encode({
+		typ: "JWT",
+		alg: "ES256"
+	})}.${encode({
+		aud: audience,
+		exp: Math.floor(now / 1e3) + TOKEN_SECONDS,
+		sub: subject
+	})}`;
+	return `vapid t=${unsigned}.${toBase64Url(p256.sign(utf8Encode(unsigned), fromBase64Url(keys.privateKey)))}, k=${keys.publicKey}`;
 }
 /**
 * `plaintext` encrypted for a subscription (RFC 8291 with RFC 8188 `aes128gcm`, one record). `sender` fixes
@@ -12887,6 +13685,8 @@ function parsePinnedFrame(frame) {
 * DHT, never stored, never counted as unread, no message id (older apps drop it). While the person keeps typing,
 * `start` is said again at most every `TYPING_REFRESH_MS`; the receiver shows it until `stop`, a message from that
 * contact, the end of the session, or `TYPING_TIMEOUT_MS` without a new `start` (so a dropped link never leaves it on).
+* A start standing when a session ends (a transport switch, a reconnect) is said again once the next one agreed
+* `typing/1`, if the person's last word is still that recent.
 *
 * A `start` may say what the contact is doing (`kind`: typing, recording a voice note, thinking) and, for bots, a
 * short `status` line. Both are optional: an app that knows neither shows "typing…", and so does a kind it does not
@@ -12950,12 +13750,21 @@ function parseTypingActivity(frame) {
 	return typingActivity(frame?.kind, frame?.status);
 }
 var sameActivity = (a, b) => a?.kind === b?.kind && a?.status === b?.status;
-/** This side's word: when to say `start` again, and whether a `stop` is owed. One per session. */
+/**
+* This side's word: when to say `start` again, and whether a `stop` is owed. One per chat; what was said is per session
+* (`reset`), what the person is doing is not: a new session (a transport switch, a reconnect) says a standing start
+* again (`resume`), since the contact's reader cleared it when the old session ended.
+*
+* The rate window is not per session: the reader's is per chat too (it is not cleared when a session ends), so a
+* window that started afresh on each session could put a start past the reader's limit just after a switch.
+*/
 var TypingSender = class {
 	now;
 	startedAt = 0;
 	standing = null;
 	recent = [];
+	/** What the person is doing, and when it last said so: kept across sessions, until it stops. */
+	wanted = null;
 	constructor(now = Date.now) {
 		this.now = now;
 	}
@@ -12966,6 +13775,33 @@ var TypingSender = class {
 	typing(activity = { kind: "typing" }) {
 		const now = this.now();
 		const word = typingActivity(activity.kind, activity.status);
+		this.wanted = {
+			activity: word,
+			at: now
+		};
+		return this.say(word, now);
+	}
+	/**
+	* The person typed while nothing can be said (no session, or `typing/1` not agreed on it yet): kept, so the start
+	* goes once a session can carry it (`resume`).
+	*/
+	want(activity = { kind: "typing" }) {
+		this.wanted = {
+			activity: typingActivity(activity.kind, activity.status),
+			at: this.now()
+		};
+	}
+	/**
+	* A new session agreed `typing/1`: the `start` to say on it when the person was still at it, its last word less than
+	* `TYPING_TIMEOUT_MS` ago (as long as the contact would still have shown it). Null otherwise, when a start already
+	* went on this session, or when the window is full (the person's next keystroke says it).
+	*/
+	resume() {
+		const wanted = this.wanted, now = this.now();
+		if (!wanted || this.startedAt || now - wanted.at >= 6e3) return null;
+		return this.say(wanted.activity, now);
+	}
+	say(word, now) {
 		if (this.startedAt && now - this.startedAt < 3e3 && sameActivity(this.standing, word)) return null;
 		this.recent = this.recent.filter((at) => now - at < TYPING_RATE_WINDOW_MS);
 		if (this.recent.length >= 6) return null;
@@ -12974,8 +13810,12 @@ var TypingSender = class {
 		this.standing = word;
 		return typingFrame("start", word);
 	}
-	/** The person stopped (cleared the text, sent it, left the chat): a `stop`, only when a `start` is standing. */
+	/**
+	* The person stopped (cleared the text, sent it, left the chat): a `stop`, only when a `start` is standing on this
+	* session. Nothing is said again on the next one either way.
+	*/
 	stopped() {
+		this.wanted = null;
 		if (!this.startedAt) return null;
 		this.recent.push(this.now());
 		this.startedAt = 0;
@@ -12986,7 +13826,7 @@ var TypingSender = class {
 	get active() {
 		return this.startedAt !== 0;
 	}
-	/** The session ended: nothing is standing on the next one. */
+	/** The session ended: nothing is standing on the next one until `resume` (or the next keystroke) says it. */
 	reset() {
 		this.startedAt = 0;
 		this.standing = null;
@@ -15041,6 +15881,12 @@ var DHT_PIN_GRACE_MS = 1e4;
 var RESUME_WAIT_MS = 1e4;
 /** Two dials crossing: how long the lower key's side waits for its own to connect before it takes the contact's. */
 var CROSSED_WAIT_MS = 3e3;
+/** A WebRTC attempt under way, not yet open: what a member's packet saying it has no WebRTC ends (`peerPacketTransports`). */
+var WEBRTC_ATTEMPT = /* @__PURE__ */ new Set([
+	"offering",
+	"answering",
+	"connecting"
+]);
 /** What a joiner is told when someone else used the invite first (`DhtDeliveryView.inviteTaken`). */
 var INVITE_TAKEN = "Someone else joined with this invite first. Ask your contact for a new one.";
 /**
@@ -15148,6 +15994,11 @@ var QUIET_FRAMES = /* @__PURE__ */ new Set([
 */
 var PONG_WAIT_MS = 4e3;
 /**
+* Back in front after an absence (`wake`), a live session that ends this soon after it was lost while the app was
+* away (a phone that put it to sleep): the chat resumes as after a restart, not as a session the contact closed.
+*/
+var WAKE_LOST_MS = 1e4;
+/**
 * A `paired-message` frame. The preview (`pv`) is left out when the frame would pass `MAX_PAIRED_MESSAGE_FRAME`
 * with it: the text matters, the card does not. A reply (`r`, WISP 401 § Replies) is a few hundred bytes at most
 * and always goes, and so does a forwarded message's hop count (`fw`, WISP 401 § Forwards) and a status card (`sc`,
@@ -15186,6 +16037,11 @@ function pairedMessageFrame(id, ts, m, preview, reply, forwarded, card) {
 * names the transport. One just read that names it with no descriptor says its endpoint is not up (WISP 03: still
 * starting, or no free listener there): the one known is not dialled meanwhile (none, `undefined`).
 */
+/** The endpoint a descriptor names (Iroh's endpoint id, HyperDHT's public key), whatever relay it is homed on. */
+function endpointId(transport, descriptor) {
+	const d = descriptor;
+	return transport === "iroh/1" ? d?.id : d?.publicKey;
+}
 function recordDescriptor(transport, known, record, newer, listed) {
 	if (!record) return newer && listed ? void 0 : known;
 	if (!known) return record;
@@ -15240,6 +16096,9 @@ var GhostLink = class {
 	endpoints = /* @__PURE__ */ new Map();
 	activeBinding;
 	dialing = false;
+	/** A joiner's dial made as the link starts (`dialEarly`): its offer goes once the first look finds the inviter. */
+	dialGate;
+	firstLookDone;
 	dhtPinGrace = null;
 	/** Native attempts that failed in a row, and transports demoted until when (WISP 100, demotion). */
 	nativeFailures = /* @__PURE__ */ new Map();
@@ -15306,6 +16165,8 @@ var GhostLink = class {
 	/** Typing on this session (`typing/1`): when to say `start` again, and the contact's word with its timeout. */
 	typingSender = new TypingSender();
 	typingReceiver = new TypingReceiver((typing, activity) => this.options.events?.onPeerTyping?.(typing, activity));
+	/** Mini-apps on this session (`apps/1`): this side's open apps (kept across sessions), the peer's, the limits. */
+	apps;
 	/** Reaction frames the contact may send per window; the rest go unconfirmed and come again. */
 	reactionsReceived = new ReactionWindow(REACTION_LIMITS.receive);
 	/** Pin frames the contact may send per window; the rest go unconfirmed and come again. */
@@ -15323,6 +16184,8 @@ var GhostLink = class {
 	unansweredPings = 0;
 	/** The last ping's `PONG_WAIT_MS`: running until something comes back from the contact. */
 	pongWait = null;
+	/** The last ping's wait ran out with nothing back, and nothing came since (`restartedRedial`). */
+	pongLate = false;
 	openWaiters = [];
 	/** Set while a WebRTC attempt this side dialled is pending: the ranked transports to try if it fails. */
 	afterRtc;
@@ -15330,8 +16193,15 @@ var GhostLink = class {
 	raceTimer = null;
 	/** Set while `race` dials: the offer ending meanwhile is followed up by the race. */
 	racing = false;
-	/** The WebRTC offer this side's dial made last, with fallback allowed: what a transport that comes up meanwhile joins. */
+	/**
+	* The WebRTC offer this side's dial made last, with fallback allowed: what a transport that comes up meanwhile joins.
+	* `resume`: the dial that made it is this side back after an absence, over WebRTC (`resuming`); `woke`: the absence
+	* was the app's in the background, not a restart (`resumeAfterAbsence`).
+	*/
 	offered;
+	/** The attempt (its epoch) whose direct transports were knocked on as its offer went out (`knockEarly`), and whether that is under way. */
+	knockedEarly = -1;
+	knockingEarly = false;
 	/** When that offer's answer was applied (`RACE_ANSWERED_MS`); 0 while the data link is not connecting on it. */
 	answeredAt = 0;
 	/** This side's offer is out unanswered, or answered and not connected yet: what is ranked after WebRTC may race it. */
@@ -15342,8 +16212,21 @@ var GhostLink = class {
 	answeringEpoch = -1;
 	lastAutoConnectAt = 0;
 	autoConnectFailures = 0;
+	/** The look due when a failed dial's backoff ends (`lookAtRetry`). */
+	retryLook = null;
+	/** This side's offer is out to the data link and has not reached the relays yet. */
+	offerUnsent = false;
+	/** The last dial ended with its offer never out (`offerUnsent`): the contact saw nothing of it. */
+	dialUnseen = false;
 	/** Native transports a record just read listed with no way to dial them (`record-undescribed`), until one describes them again. */
 	undescribed = /* @__PURE__ */ new Set();
+	/**
+	* The native dial under way (`dialNative`): its attempt, its transport, the endpoint it went to (`redescribedDial`),
+	* and whether it started with this device offline (`networkBack`).
+	*/
+	nativeDial = null;
+	/** When the device's network last came back (`wake({ network: true })`): a dial under way across it is no failure. */
+	networkBackAt = -Infinity;
 	/** The peer's packet I last looked fast for its offer after (its timestamp): once per packet. */
 	offerAwaitedFor = 0;
 	/** Whether the stream was blocked (DHT-only on either side) when last looked at. */
@@ -15391,8 +16274,15 @@ var GhostLink = class {
 	resuming;
 	/** Until then, a dial waits for the native endpoint `resuming` names to start (it is knocked on as it does). */
 	resumeWaitUntil = 0;
+	/** What the last live session ran on, kept after it ended: a wake resumes on it (`resumeAfterAbsence`). */
+	lastLiveOn;
+	/** `resuming` is a wake's, not a restart's. */
+	resumingWoke = false;
+	/** Until then, a session that ends was lost while the app was away (`WAKE_LOST_MS`). */
+	wokeUntil = 0;
 	constructor(options) {
 		this.options = options;
+		this.apps = new AppSessions(options.appsOpen);
 		if (options.pairing?.credentials.signer && (options.dht || options.params.deliveryMode === "dht")) throw new Error("A link that signs through a signer has no DHT delivery");
 		this.deliveryMode = options.params.deliveryMode ?? "stream";
 		this.tracker = options.pairingProgress && options.pairing && !options.pairing.credentials.peerKey && this.deliveryMode !== "dht" ? new PairingTracker(options.pairingProgress.role, options.pairingProgress.startedAt, (progress) => {
@@ -15501,7 +16391,10 @@ var GhostLink = class {
 			firstPublish: options.firstPublish ?? (this.tracker && options.pairingProgress?.role === "joiner" || this.resuming ? "after-first-poll" : "at-start"),
 			events: {
 				onFirstPoll: () => {
-					if (!this.dialing) this.session.ensureAdvertised();
+					const online = this.session.peerPresence.online, early = this.firstLookDone;
+					this.firstLookDone = void 0;
+					early?.(online);
+					if (!this.dialing || early && !online) this.session.ensureAdvertised();
 				},
 				onMessages: (messages, batch) => {
 					if (options.params.profile) return;
@@ -15525,9 +16418,13 @@ var GhostLink = class {
 						this.tracker?.failed("publish", true, result.error);
 						return;
 					}
-					if (result.signalOut) this.dataLink.signalWentOut();
+					if (result.signalOut) {
+						this.offerUnsent = false;
+						this.dataLink.signalWentOut();
+					}
 					this.tracker?.published();
 					this.publishRecovered();
+					this.dialSeenNow();
 				},
 				onPeerAck: (ack) => events.onPeerAck?.(ack),
 				onCallSignal: (signal) => {
@@ -15622,13 +16519,25 @@ var GhostLink = class {
 				if (this.activeBinding) return;
 				events.onDataLinkState?.(state);
 				if (state === "open") this.afterRtc = void 0;
-				if (state === "answering") this.answeringEpoch = this.connectionEpoch;
+				if (state === "offering") {
+					this.offerUnsent = true;
+					this.dialUnseen = false;
+				}
+				if (state === "answering") {
+					this.answeringEpoch = this.connectionEpoch;
+					if (this.resumingOverRtc) {
+						const epoch = this.connectionEpoch;
+						setTimeout(() => this.maybeKnockAnswering(epoch), 0);
+					}
+				}
 				this.answeredAt = 0;
 				if (state === "connecting" && was === "offering" && this.offered?.epoch === this.connectionEpoch) {
 					this.answeredAt = Date.now();
 					this.scheduleRace(this.offered.epoch, this.offered.at);
 				}
 				if (state !== "idle") return;
+				this.dialUnseen = was === "offering" && this.offerUnsent;
+				this.offerUnsent = false;
 				const unanswerable = was === "answering" && this.answeringEpoch === this.connectionEpoch && !this.channel && !this.stopped && !this.leaving;
 				if (unanswerable) this.rtcUnstarted();
 				this.clearRace();
@@ -15641,7 +16550,10 @@ var GhostLink = class {
 					return;
 				}
 				this.afterRtc = void 0;
-				if (!this.dialing) this.attemptEnded();
+				if (!this.dialing) {
+					this.attemptEnded();
+					this.lookAtRetry();
+				}
 				this.rejectWaiters(new GhostlyHttpError("unreachable", "Could not connect to the peer"));
 				if (unanswerable && this.dialsPastRtc()) this.redial();
 			},
@@ -15700,7 +16612,8 @@ var GhostLink = class {
 			},
 			unreached: (target, reason) => {
 				this.unreached(target, reason);
-			}
+			},
+			upgrade: () => !!this.options.upgradeSupport && this.sessionCapabilities.agreed("upgrade/1")
 		});
 		if (options.native?.automatic === false) this.switcher.choseApart();
 	}
@@ -15967,16 +16880,46 @@ var GhostLink = class {
 			this.session.expectPeer();
 			this.resumeWaitUntil = Date.now() + RESUME_WAIT_MS;
 		}
-		if (this.tracker && !this.tracker.done && this.options.pairingProgress?.role === "joiner") this.dht?.expect();
+		if (this.tracker && !this.tracker.done && this.options.pairingProgress?.role === "joiner") {
+			this.dht?.expect();
+			this.dialEarly();
+		}
 		this.dht?.start();
 	}
+	/**
+	* A joiner's offer is gathered as the link starts, while its first look at the inviter's record is under way, and goes
+	* once that look finds the inviter (`dialGate`): the two used to come one after the other, the read (0.15 to 0.8 s)
+	* then the gathering (0.2 s to 2 s).
+	*/
+	dialEarly() {
+		if (!this.options.params.profile || !this.options.autoConnect || this.deliveryMode === "dht" || this.streamBlocked || this.dialing || this.channel) return;
+		const startedAt = this.options.pairingProgress?.startedAt ?? 0;
+		if (Date.now() - startedAt > 6e4) return;
+		this.dialGate = new Promise((resolve) => {
+			this.firstLookDone = (online) => {
+				if (online) {
+					this.lastAutoConnectAt = Date.now();
+					this.autoConnectFailures++;
+				}
+				resolve(online);
+			};
+		});
+		traceLink(this.myPubKeyZ32, "dial", { early: true });
+		this.dial().catch((error) => {
+			this.tracker?.failed("transport", true);
+			this.dialFailed(error instanceof Error ? error.message : String(error));
+			this.lookAtRetry();
+		});
+	}
 	async stop(announce = true) {
 		this.stopped = true;
 		this.clearRace();
+		if (this.retryLook) clearTimeout(this.retryLook);
 		if (this.dhtPinGrace) clearTimeout(this.dhtPinGrace);
 		if (this.waiting?.timer) clearTimeout(this.waiting.timer);
 		await this.dht?.stop();
 		this.disconnect();
+		this.appsEnded();
 		await Promise.allSettled([...this.endpoints.values()].map((endpoint) => endpoint.close()));
 		this.endpoints.clear();
 		await this.session.stop(announce);
@@ -16021,18 +16964,32 @@ var GhostLink = class {
 		});
 	}
 	/** Closes what a switch replaced once the contact has had time to move too. */
-	retire(old, also) {
+	retire(old, also, rtc = false) {
 		if (this.retiring.has(old)) return;
+		let closed = () => {};
+		const done = new Promise((resolve) => {
+			closed = resolve;
+		});
 		const close = () => {
 			this.retiring.delete(old);
 			old.close();
 			also();
+			closed();
 		};
 		this.retiring.set(old, {
 			close,
-			timer: setTimeout(close, SWITCH_RETIRE_MS)
+			timer: setTimeout(close, SWITCH_RETIRE_MS),
+			rtc,
+			closed: done
 		});
 	}
+	/**
+	* The WebRTC session a switch moved off is still retiring (`SWITCH_RETIRE_MS`): its data link is open, and a new offer
+	* cannot go until it closes. Resolves once it has (at once when none is).
+	*/
+	rtcRetired() {
+		return Promise.all([...this.retiring.values()].filter((entry) => entry.rtc).map((entry) => entry.closed)).then(() => {});
+	}
 	closeRetired() {
 		for (const { timer, close } of [...this.retiring.values()]) {
 			clearTimeout(timer);
@@ -16104,7 +17061,7 @@ var GhostLink = class {
 		const listed = !!wanted && !!this.peerRecordTransports?.includes(wanted), dialable = !!wanted && !!this.peerDescriptors[wanted];
 		this.peerRecordTransports = [...transports];
 		let changed = false, redescribed = false, again = false, news = false;
-		const renamed = /* @__PURE__ */ new Set();
+		const renamed = /* @__PURE__ */ new Set(), reidentified = /* @__PURE__ */ new Set();
 		for (const t of ["iroh/1", "hyperdht/1"]) {
 			const known = this.peerDescriptors[t], next = recordDescriptor(t, known, descriptors[t], fresh, transports.includes(t));
 			if (next === known) continue;
@@ -16124,6 +17081,7 @@ var GhostLink = class {
 			changed = true;
 			redescribed ||= t === wanted;
 			renamed.add(t);
+			if (known && endpointId(t, known) !== endpointId(t, next)) reidentified.add(t);
 			this.nativeFailures.delete(t);
 			this.demotedUntil.delete(t);
 		}
@@ -16149,6 +17107,8 @@ var GhostLink = class {
 			this.redial();
 			return;
 		}
+		if (held && heldOn && reidentified.has(heldOn) && this.restartedRedial(held, heldOn)) return;
+		if (this.redescribedDial()) return;
 		if (this.channel || this.dialing) return;
 		if (news || !again) {
 			this.autoConnectFailures = 0;
@@ -16351,6 +17311,7 @@ var GhostLink = class {
 			return;
 		}
 		this.endpoints.set(endpoint.transport, endpoint);
+		traceLink(this.myPubKeyZ32, "endpoint-up", { transport: endpoint.transport });
 		endpoint.onConnection = ({ channel, binding }) => {
 			traceLink(this.myPubKeyZ32, "dialed-in", {
 				transport: binding.transport,
@@ -16361,6 +17322,7 @@ var GhostLink = class {
 		};
 		endpoint.onUnavailable = () => {
 			if (this.endpoints.get(endpoint.transport) !== endpoint) return;
+			traceLink(this.myPubKeyZ32, "endpoint-gone", { transport: endpoint.transport });
 			this.endpoints.delete(endpoint.transport);
 			this.advertiseTransports();
 			this.options.events?.onTransportsChanged?.();
@@ -16427,7 +17389,7 @@ var GhostLink = class {
 		if (!said) return;
 		const transports = said.transports, descriptors = dialDescriptors(said.descriptors);
 		traceLink(this.myPubKeyZ32, "packet-transports", { transports });
-		if (!transports.includes("webrtc/1") && !this.channel && this.dataLink.state === "offering") this.disconnect();
+		if (!transports.includes("webrtc/1") && !this.channel && WEBRTC_ATTEMPT.has(this.dataLink.state)) this.disconnect();
 		this.options.events?.onPacketTransports?.(transports, descriptors);
 		this.learnPeerTransports(transports, descriptors, true);
 	}
@@ -16496,7 +17458,10 @@ var GhostLink = class {
 	* simply be away. Two dials crossing are settled by key order (see `registerEndpoint`).
 	*/
 	async knock(transport) {
-		if (this.resuming === transport) this.resuming = void 0;
+		if (this.resuming === transport) {
+			this.resuming = void 0;
+			this.resumingWoke = false;
+		}
 		const endpoint = this.endpoints.get(transport), descriptor = this.peerDescriptors[transport];
 		if (!endpoint || !descriptor || this.channel || this.dialing || this.stopped || this.streamBlocked || this.keyStopped) return;
 		if (!this.transportOffer().includes(transport)) return;
@@ -16649,7 +17614,11 @@ var GhostLink = class {
 			const remembered = this.peerTransports && rankTransports(local, this.peerFallback ? this.peerTransports : this.peerTransports.slice(0, 1), relayed);
 			const ranked = remembered?.length ? remembered : this.peerTransports ? rankTransports(local, this.peerTransports, relayed) : local.filter((t) => t === "webrtc/1");
 			const chosen = this.switcher.chosenTarget ?? this.choiceApart?.transport ?? this.resuming;
-			if (chosen && chosen === this.resuming && ranked.includes(chosen)) this.resuming = void 0;
+			const resume = this.resuming === "webrtc/1", woke = resume && this.resumingWoke;
+			if (chosen && chosen === this.resuming && ranked.includes(chosen)) {
+				this.resuming = void 0;
+				this.resumingWoke = false;
+			}
 			const choices = chosen && ranked.includes(chosen) ? [chosen, ...ranked.filter((t) => t !== chosen)] : ranked;
 			if (!choices.length) {
 				if (this.options.packetTransports && this.autoConnectFailures <= PACKET_TRANSPORTS_FAST_ATTEMPTS) this.session.expectPeer();
@@ -16668,12 +17637,22 @@ var GhostLink = class {
 						epoch,
 						rest
 					} : void 0;
-					const offeredAt = Date.now();
-					this.offered = fallback ? {
+					const standing = this.offerOut && this.offered?.epoch === epoch ? this.offered : void 0;
+					const offeredAt = standing?.at ?? Date.now();
+					this.offered = fallback ? standing ?? {
 						epoch,
-						at: offeredAt
+						at: offeredAt,
+						...resume && { resume },
+						...woke && { woke }
 					} : void 0;
-					await this.dataLink.connect();
+					const gate = this.dialGate;
+					this.dialGate = void 0;
+					if (await this.dataLink.connect(gate) === "held") {
+						traceLink(this.myPubKeyZ32, "dial-held", {});
+						this.afterRtc = void 0;
+						this.offered = void 0;
+						return;
+					}
 					if (this.dataLink.state !== "idle" || epoch !== this.connectionEpoch) {
 						this.scheduleRace(epoch, offeredAt);
 						return;
@@ -16695,6 +17674,7 @@ var GhostLink = class {
 			if (epoch === this.connectionEpoch) this.attemptEnded(error instanceof Error ? error.message : String(error));
 			throw error;
 		} finally {
+			this.dialGate = void 0;
 			if (epoch === this.connectionEpoch) {
 				this.dialing = false;
 				if (!this.channel && !this.afterRtc && this.dataLink.state === "idle") this.attemptEnded();
@@ -16711,6 +17691,12 @@ var GhostLink = class {
 		const descriptor = this.peerDescriptors[transport];
 		if (!endpoint || !descriptor) return /* @__PURE__ */ new Error("Peer native address unavailable; reconnect WebRTC once to exchange endpoints");
 		const started = Date.now();
+		const dialed = this.nativeDial = {
+			epoch,
+			transport,
+			endpoint: endpointId(transport, descriptor),
+			offline: this.isOffline()
+		};
 		try {
 			const { channel, binding } = await endpoint.connect(descriptor);
 			this.nativeFailures.delete(transport);
@@ -16729,6 +17715,10 @@ var GhostLink = class {
 			});
 			if (epoch !== this.connectionEpoch) return true;
 			this.attemptFailed(transport, error instanceof Error ? error.message : String(error));
+			if (dialed.offline || this.isOffline() || this.networkBackAt >= started) {
+				traceLink(this.myPubKeyZ32, "dial-failed-offline", { transport });
+				return error instanceof Error ? error : new Error(String(error));
+			}
 			const failures = (this.nativeFailures.get(transport) ?? 0) + 1;
 			if (failures >= 3) {
 				this.nativeFailures.delete(transport);
@@ -16736,7 +17726,58 @@ var GhostLink = class {
 				traceLink(this.myPubKeyZ32, "demote", { transport });
 			} else this.nativeFailures.set(transport, failures);
 			return error instanceof Error ? error : new Error(String(error));
+		} finally {
+			if (this.nativeDial === dialed) this.nativeDial = null;
+		}
+	}
+	/**
+	* The native dial under way went to an endpoint the contact's newer packet no longer names for that transport: its
+	* app started again (a page reloading, as both devices of a handoff do), and the endpoint dialled went with the old
+	* one. That dial would end only at its connect timeout (Iroh: 20 s, then the next attempt's wait): it is let go, and
+	* the endpoint the packet names dialled now. Not while a WebRTC offer of this attempt stands: the race that follows
+	* it keeps its own order.
+	*/
+	redescribedDial() {
+		const dial = this.nativeDial;
+		if (!dial || dial.epoch !== this.connectionEpoch || !this.dialing || this.channel || this.dataLink.state !== "idle") return false;
+		const now = this.peerDescriptors[dial.transport];
+		if (!now || endpointId(dial.transport, now) === dial.endpoint) return false;
+		traceLink(this.myPubKeyZ32, "redescribed-dial", { transport: dial.transport });
+		this.nativeDial = null;
+		this.connectionEpoch++;
+		this.dialing = false;
+		this.clearRace();
+		this.afterRtc = void 0;
+		this.autoConnectFailures = Math.max(0, this.autoConnectFailures - 1);
+		this.redial();
+		return true;
+	}
+	/** Whether this device has no network now (`GhostLinkOptions.offline`). */
+	isOffline() {
+		return this.options.offline ? this.options.offline() : globalThis.navigator?.onLine === false;
+	}
+	/**
+	* The device's network came back. A native dial that started while it was away would end only at its connect timeout
+	* (Iroh: 20 s), well past the return: it is let go, and the chat dialled again now. Its WebRTC offer, if one stands,
+	* was made with no network too, and goes with it.
+	*/
+	networkBack() {
+		this.networkBackAt = Date.now();
+		const dial = this.nativeDial;
+		if (!dial?.offline || dial.epoch !== this.connectionEpoch || !this.dialing || this.channel) return;
+		if (this.stopped || this.leaving || this.streamBlocked || this.keyStopped || !this.options.autoConnect) return;
+		traceLink(this.myPubKeyZ32, "offline-dial", { transport: dial.transport });
+		this.nativeDial = null;
+		if (this.dataLink.state !== "idle") this.disconnect();
+		else {
+			this.connectionEpoch++;
+			this.dialing = false;
+			this.clearRace();
+			this.afterRtc = void 0;
 		}
+		this.autoConnectFailures = 0;
+		this.lastAutoConnectAt = 0;
+		this.redial();
 	}
 	/** A WebRTC attempt this side dialled ended without opening: the next ranked transports, in order. */
 	async dialAfterRtc(next) {
@@ -16772,12 +17813,68 @@ var GhostLink = class {
 		const answered = this.answeredAt ? this.answeredAt + RACE_ANSWERED_MS : Infinity;
 		const at = next.rest.filter((t) => t !== "webrtc/1").map((t) => Math.max(Math.min(offeredAt + (relayed.includes(t) ? RACE_RELAYED_MS : RACE_DIRECT_MS), answered), this.canDial(t) ? 0 : now + RACE_RETRY_MS));
 		if (!at.length) return;
+		if (this.offered?.resume && this.knockedEarly !== epoch) setTimeout(() => this.maybeKnockEarly(epoch), 0);
 		this.raceTimer = setTimeout(() => {
 			this.raceTimer = null;
 			this.race(epoch, offeredAt);
 		}, Math.max(0, Math.min(...at) - now));
 	}
 	/**
+	* Back after an absence, this side answers an offer the contact made while it was away (it dials whatever its key):
+	* the contact looks for that answer at the pace of an offer out a while (every 8 s on the relays), and its attempt may
+	* end before it does. The direct transports both run are knocked on meanwhile, and the relayed ones where both apps
+	* move off a relay once live (`upgrade/1`): the first live wins, and a knock that does not connect counts as nothing.
+	*/
+	maybeKnockAnswering(epoch) {
+		if (!this.resumingOverRtc || epoch !== this.connectionEpoch || this.knockedEarly === epoch || this.dataLink.state === "idle") return;
+		if (this.channel || this.dialing || this.stopped || this.streamBlocked || this.keyStopped || !this.contactQuiet(1e4)) return;
+		if (!this.fallback || !this.peerFallback) return;
+		this.knockedEarly = epoch;
+		if (this.resuming === "webrtc/1") {
+			this.resuming = void 0;
+			this.resumingWoke = false;
+		}
+		const relayed = this.upgradesFromRelay() ? [] : this.relayedTransports;
+		const offer = this.transportOffer();
+		const direct = TRANSPORTS.filter((t) => t !== "webrtc/1" && offer.includes(t) && !!this.peerTransports?.includes(t) && !relayed.includes(t) && this.canDial(t));
+		if (!direct.length) return;
+		this.knockEarly(epoch, direct, () => this.dataLink.state === "answering" || this.dataLink.state === "connecting");
+	}
+	/** Back after an absence over WebRTC: not dialled yet, or this attempt's offer is the resume's (`offered.resume`). */
+	get resumingOverRtc() {
+		return this.resuming === "webrtc/1" || !!this.offered?.resume && this.offered.epoch === this.connectionEpoch;
+	}
+	/** Both apps move a chat off a relay once live (`upgrade/1`): this one, and the contact's by its capability record. */
+	upgradesFromRelay() {
+		return !!this.options.upgradeSupport && !!this.options.peerUpgrades?.();
+	}
+	/** The contact's newest packet is older than `EXPECT_PEER_MS`: it is not signalling, and reads at a slow pace. */
+	contactQuiet(ms = EXPECT_PEER_MS) {
+		return Date.now() - presenceSeenAt(this.session.peerPresence) >= ms;
+	}
+	/** The direct transports of an attempt that resumes to a quiet contact, knocked on while its offer stands (`scheduleRace`). */
+	maybeKnockEarly(epoch) {
+		const next = this.afterRtc;
+		if (!this.offered?.resume || this.offered.epoch !== epoch || this.knockedEarly === epoch || next?.epoch !== epoch || epoch !== this.connectionEpoch) return;
+		if (this.dialing || this.channel || this.stopped || !this.offerOut || !(this.offered.woke || this.contactQuiet())) return;
+		const relayed = this.upgradesFromRelay() ? [] : this.relayedTransports;
+		const direct = next.rest.filter((t) => !relayed.includes(t) && this.canDial(t));
+		if (!direct.length) return;
+		this.knockedEarly = epoch;
+		this.knockEarly(epoch, direct);
+	}
+	async knockEarly(epoch, transports, standing = () => this.offerOut) {
+		this.knockingEarly = true;
+		try {
+			for (const transport of transports) {
+				if (epoch !== this.connectionEpoch || this.channel || this.stopped || !standing()) return;
+				await this.knock(transport);
+			}
+		} finally {
+			this.knockingEarly = false;
+		}
+	}
+	/**
 	* A native endpoint that started while this side's offer is out unanswered: its transport was not up when the dial
 	* ranked what to try, and joins the race (and what the offer ending goes on to) if both sides allow it.
 	*/
@@ -16822,6 +17919,13 @@ var GhostLink = class {
 	*/
 	async race(epoch, offeredAt) {
 		const next = this.afterRtc;
+		if (this.knockingEarly && next?.epoch === epoch && epoch === this.connectionEpoch && !this.channel) {
+			this.raceTimer = setTimeout(() => {
+				this.raceTimer = null;
+				this.race(epoch, offeredAt);
+			}, RACE_RETRY_MS);
+			return;
+		}
 		if (!next || next.epoch !== epoch || epoch !== this.connectionEpoch || this.channel || this.dialing || this.stopped || this.leaving || this.streamBlocked || this.keyStopped || !this.offerOut) return;
 		const relayed = this.relayedTransports;
 		const late = Date.now() - offeredAt >= 4e4 || this.answeredAt > 0 && Date.now() - this.answeredAt >= 6e3;
@@ -17113,6 +18217,7 @@ var GhostLink = class {
 				failures: this.autoConnectFailures,
 				left: wait - (Date.now() - this.lastAutoConnectAt)
 			});
+			this.lookAtRetry();
 			return;
 		}
 		traceLink(this.myPubKeyZ32, "dial", { failures: this.autoConnectFailures });
@@ -17121,6 +18226,7 @@ var GhostLink = class {
 		this.dial().catch((error) => {
 			this.tracker?.failed("transport", true);
 			this.dialFailed(error instanceof Error ? error.message : String(error));
+			this.lookAtRetry();
 		});
 	}
 	/**
@@ -17140,8 +18246,42 @@ var GhostLink = class {
 		this.dial().catch((error) => {
 			this.tracker?.failed("transport", true);
 			this.dialFailed(error instanceof Error ? error.message : String(error));
+			this.lookAtRetry();
 		});
 	}
+	/**
+	* A failed dial waits `dialWait` before the next, and only a look at the contact's record dials: the next one came at
+	* the link's own pace (30 s in the background), which knows nothing of the backoff. A member let in to a group
+	* reached one of its members 72 s after its welcome, 40 s of backoff and 32 s more for its next look (meshSignals on
+	* CI, 2026-10-06). One look goes when the backoff ends (`liveAttempt.retryAt`), and its read decides, as any look's
+	* does. A dial or a reset of the backoff since makes it moot: what comes next arms its own.
+	*/
+	lookAtRetry() {
+		if (this.retryLook) clearTimeout(this.retryLook);
+		this.retryLook = null;
+		const from = this.lastAutoConnectAt;
+		if (!from || this.stopped || this.leaving || this.streamBlocked || this.keyStopped || !this.options.autoConnect) return;
+		this.retryLook = setTimeout(() => {
+			this.retryLook = null;
+			if (this.lastAutoConnectAt !== from || this.stopped || this.leaving || this.yielding || this.streamBlocked || this.keyStopped || this.channel || this.dialing || this.dataLink.state !== "idle") return;
+			traceLink(this.myPubKeyZ32, "retry-look", { failures: this.autoConnectFailures });
+			this.session.lookNow();
+		}, Math.max(0, from + this.dialWait() - Date.now()));
+	}
+	/**
+	* A packet of this link reached the relays after a dial whose offer never did (the relays failed, or their budget held
+	* it, for the whole attempt): the contact saw nothing of that dial, so it is no reason to wait, and the next goes now.
+	* Without this a dial made during an outage set the wait, three minutes once it had grown, from when the relays
+	* answered again.
+	*/
+	dialSeenNow() {
+		if (!this.dialUnseen) return;
+		this.dialUnseen = false;
+		if (this.channel || this.dialing || this.dataLink.state !== "idle") return;
+		traceLink(this.myPubKeyZ32, "dial-unseen", { failures: this.autoConnectFailures });
+		this.lastAutoConnectAt = 0;
+		this.maybeAutoConnect(this.presence);
+	}
 	/** How long after the last automatic dial the next one may go. A first pairing tries again sooner: the contact just read the invite and is waiting. */
 	dialWait() {
 		return !!this.tracker && !this.tracker.done && this.tracker.progress.stage !== "on-dht" ? Math.min(PAIRING_RETRY_MS * 2 ** this.autoConnectFailures, PAIRING_MAX_RETRY_MS) : Math.min(AUTO_CONNECT_RETRY_MS * 2 ** this.autoConnectFailures, AUTO_CONNECT_MAX_RETRY_MS);
@@ -17387,6 +18527,8 @@ var GhostLink = class {
 		if (this.options.pinSupport) offered.push(PIN_CAPABILITY);
 		if (this.options.statusCardSupport) offered.push(STATUS_CARD_CAPABILITY);
 		if (this.options.buttonsSupport) offered.push(BUTTONS_CAPABILITY);
+		if (this.options.upgradeSupport) offered.push(UPGRADE_CAPABILITY);
+		if (this.options.appsSupport) offered.push(APPS_CAPABILITY);
 		if (this.options.deviceCapabilities) offered.push(...this.options.deviceCapabilities);
 		return offered;
 	}
@@ -17531,12 +18673,90 @@ var GhostLink = class {
 	*/
 	setTyping(typing, activity) {
 		if (!this.options.params.profile) return;
-		const frame = typing ? this.supportsTyping ? this.typingSender.typing(activity) : null : this.typingSender.stopped();
+		if (typing && !this.supportsTyping) {
+			this.typingSender.want(activity);
+			return;
+		}
+		const frame = typing ? this.typingSender.typing(activity) : this.typingSender.stopped();
 		if (!frame || !this.channel || !this.supportsTyping) return;
 		try {
 			this.channel.send(JSON.stringify(frame));
 		} catch {}
 	}
+	resumeTyping() {
+		const frame = this.typingSender.resume();
+		if (!frame || !this.channel) return;
+		try {
+			this.channel.send(JSON.stringify(frame));
+		} catch {}
+	}
+	/** Both sides offer `apps/1` on the open session: mini-apps can talk (WISP 1200 § In a chat). */
+	get supportsApps() {
+		return !!this.options.params.profile && this.isDataLinkOpen && this.sessionCapabilities.agreed("apps/1");
+	}
+	/** The apps the contact has open on this session (chat app id to version). */
+	get peerApps() {
+		return this.apps.peerOpen;
+	}
+	/**
+	* This side opened an app in this chat (or updated it): `open` goes now when both sides offer `apps/1` on the live
+	* session, and again on every session that comes back while the app stays open. Never on the DHT.
+	*/
+	openApp(app, version) {
+		const frame = JSON.stringify(appOpenFrame(app, version));
+		this.apps.open.set(app, version);
+		if (this.supportsApps && this.channel) try {
+			this.channel.send(frame);
+		} catch {}
+	}
+	/** This side closed an app in this chat: `close` goes now when it can; nothing is said later. */
+	closeApp(app) {
+		const frame = JSON.stringify(appCloseFrame(app));
+		if (!this.apps.open.delete(app)) return;
+		if (this.supportsApps && this.channel) try {
+			this.channel.send(frame);
+		} catch {}
+	}
+	/**
+	* One data frame of an app open on both sides, on the live session only. An error when it did not go: nothing is
+	* kept to send later.
+	*/
+	sendAppData(app, data) {
+		if (!this.apps.open.has(app)) return "not-open";
+		if (appDataBytes(data) > 32768) return "too-large";
+		if (!this.channel || !this.isDataLinkOpen) return "offline";
+		if (!this.supportsApps) return "peer-closed";
+		const refused = this.apps.canSend(app, data);
+		if (refused) return refused;
+		try {
+			this.channel.send(JSON.stringify(appDataFrame(app, data)));
+			return null;
+		} catch {
+			return "offline";
+		}
+	}
+	/** What the contact had open is gone (`apps/1` is no longer agreed, or this link stopped): each app hears it now. */
+	appsEnded() {
+		if (this.appsGrace) {
+			clearTimeout(this.appsGrace);
+			this.appsGrace = null;
+		}
+		for (const event of this.apps.sessionEnded()) this.options.events?.onAppFrame?.(event);
+	}
+	appsGrace = null;
+	/**
+	* The session ended or a new one took its place (a transport switch, a resume, a re-dial): what the contact had open
+	* is held for `APP_RESUME_GRACE_MS` (WISP 1200 § In a chat). The next session's `open` takes each back, and the app
+	* hears only that open, not a close first; one not said again by then is closed with `offline`.
+	*/
+	appsSuspended() {
+		this.apps.sessionSuspended();
+		if (!this.apps.holding || this.appsGrace) return;
+		this.appsGrace = setTimeout(() => {
+			this.appsGrace = null;
+			for (const event of this.apps.heldExpired()) this.options.events?.onAppFrame?.(event);
+		}, this.options.appResumeGraceMs ?? 1e4);
+	}
 	/** Whether files/3 was agreed on the session open now; kept to say when that changes. */
 	filesOpen = false;
 	emitFilesSession(again = false) {
@@ -17609,14 +18829,24 @@ var GhostLink = class {
 				this.channel.send(JSON.stringify(pending));
 			} catch {}
 		}
-		if (changed.includes("typing/1") && !this.supportsTyping) {
-			this.typingSender.reset();
-			this.typingReceiver.clear();
+		if (changed.includes("typing/1")) {
+			if (!this.supportsTyping) {
+				this.typingSender.reset();
+				this.typingReceiver.clear();
+			} else this.resumeTyping();
 		}
 		if (changed.includes("react/1")) this.options.events?.onReactionsSupport?.(this.supportsReactions);
 		if (changed.includes("edit/1")) this.options.events?.onEditSupport?.(this.supportsEdits);
 		if (changed.includes("pin/1")) this.options.events?.onPinSupport?.(this.supportsPins);
 		if (changed.includes("wake/1")) this.options.events?.onWakeSupport?.(this.supportsWake);
+		if (changed.includes("upgrade/1")) this.switcher.reconsider();
+		if (changed.includes("apps/1")) {
+			if (this.supportsApps && this.channel) for (const [app, version] of this.apps.open) try {
+				this.channel.send(JSON.stringify(appOpenFrame(app, version)));
+			} catch {}
+			if (!this.supportsApps) this.appsEnded();
+			this.options.events?.onAppsSupport?.(this.supportsApps);
+		}
 		const devices = this.options.deviceCapabilities;
 		if (devices && changed.some((capability) => devices.includes(capability))) this.options.events?.onDeviceCapabilities?.(devices.filter((capability) => this.supportsDevice(capability)));
 		this.emitPairingState();
@@ -17715,13 +18945,18 @@ var GhostLink = class {
 					};
 					if (transport === "webrtc/1") {
 						this.rtcCandidateWaiter = done;
-						this.dataLink.connect().catch(done.reject);
+						this.rtcRetired().then(() => {
+							if (!active || epoch !== this.candidateEpoch || this.switcher.pending !== plan) return;
+							this.switcher.dialing(plan);
+							return this.dataLink.connect();
+						}).catch(done.reject);
 					} else {
 						const endpoint = this.endpoints.get(transport), descriptor = plan.remote.descriptors[transport];
 						if (!endpoint || !descriptor) {
 							done.reject(/* @__PURE__ */ new Error("Peer native address unavailable"));
 							return;
 						}
+						this.switcher.dialing(plan);
 						endpoint.connect(descriptor).then(({ channel, binding }) => {
 							if (!active || epoch !== this.candidateEpoch || this.switcher.pending !== plan) {
 								channel.close();
@@ -17969,7 +19204,7 @@ var GhostLink = class {
 						oldPaired?.stop();
 						if (oldChannel) this.retire(oldChannel, () => {
 							if (!oldBinding && this.activeBinding) this.dataLink.close();
-						});
+						}, !oldBinding);
 						this.session.setDataLinkOpen(true);
 						if (migration.plan) switched = {
 							from,
@@ -18004,6 +19239,7 @@ var GhostLink = class {
 					this.sessionCapabilities.reset();
 					this.typingSender.reset();
 					this.typingReceiver.clear();
+					this.appsSuspended();
 					this.pairedHttp?.close();
 					this.pairedHttp = new PairedHttp(channel, this.options.getHostedHttpService, this.options.localFetch);
 					this.emitPairingState();
@@ -18184,6 +19420,12 @@ var GhostLink = class {
 						if (this.supportsTyping) this.typingReceiver.receive(frame);
 						return;
 					}
+					if (frame?.t === "paired-app") {
+						if (!this.supportsApps) return;
+						const event = this.apps.receive(frame);
+						if (event) this.options.events?.onAppFrame?.(event);
+						return;
+					}
 					if (frame?.t === "paired-reaction") {
 						if (!this.supportsReactions || !this.reactionsReceived.take()) return;
 						const reaction = parseReactionFrame(frame);
@@ -18388,6 +19630,7 @@ var GhostLink = class {
 				this.pongWait = null;
 				if (this.channel !== channel || this.stopped) return;
 				traceLink(this.myPubKeyZ32, "pong-late", { unanswered: this.unansweredPings });
+				this.pongLate = true;
 				this.session.pollNow();
 			}, PONG_WAIT_MS);
 		};
@@ -18424,6 +19667,24 @@ var GhostLink = class {
 	heardFromPeer() {
 		if (this.pongWait) clearTimeout(this.pongWait);
 		this.pongWait = null;
+		this.pongLate = false;
+	}
+	/**
+	* The session runs on a native transport, its last ping went unanswered, and the contact's newer packet names another
+	* endpoint for that transport: the contact's app started again (a web page reloading, as a device that takes the
+	* profile does twice), and the endpoint this session runs on went with it, with nothing said. A browser's relay-only
+	* Iroh closes nothing as a page goes, and QUIC notices only at its idle timeout (30 s): until then this side held a
+	* session nothing answered, and the contact, whose key does not dial, waited for it to dial (a Use here said hello
+	* into that session and gave up "unreachable", Omarchy 2026-10-05). The session is let go, and the new endpoint
+	* dialled now, as when the session closes.
+	*/
+	restartedRedial(channel, transport) {
+		if (!this.pongLate || this.channel !== channel || this.paired?.state.status !== "ready") return false;
+		traceLink(this.myPubKeyZ32, "restarted-redial", { transport });
+		this.stopLiveness();
+		this.disconnect();
+		this.peerLost("restarted");
+		return true;
 	}
 	dropDeadSession(channel) {
 		this.stopLiveness();
@@ -18438,6 +19699,10 @@ var GhostLink = class {
 	peerLost(why) {
 		if (this.stopped || this.leaving || this.yielding) return;
 		traceLink(this.myPubKeyZ32, "peer-lost", { why });
+		if (Date.now() < this.wokeUntil) {
+			this.wokeUntil = 0;
+			this.resumeAfterAbsence();
+		}
 		this.lostUntil = Date.now() + WATCH_PEER_MS;
 		this.autoConnectFailures = 0;
 		this.lastAutoConnectAt = 0;
@@ -18503,18 +19768,78 @@ var GhostLink = class {
 	}
 	/**
 	* Someone is here again (the chat was opened, the window came back): look now, and try at once rather
-	* than after the wait between failed attempts.
+	* than after the wait between failed attempts. `network`: the device's network just came back.
 	*/
-	wake() {
+	wake(params = {}) {
+		if (params.network) {
+			this.dht?.networkBack();
+			this.networkBack();
+		}
 		this.autoConnectFailures = 0;
 		this.lastAutoConnectAt = 0;
 		this.session.pollNow();
-		if (!this.channel) {
+		if (this.channel) {
+			this.wokeUntil = Date.now() + WAKE_LOST_MS;
+			this.probeAfterWake(this.channel);
+		} else {
+			this.resumeAfterAbsence();
 			if (!this.session.publishedRecently(RECENTLY_PUBLISHED_MS)) this.session.refreshAdvertisement();
 			this.maybeAutoConnect(this.presence);
 		}
 	}
+	/**
+	* Back in front with no session, after one was live: the contact likely did not notice this app go (a phone puts a
+	* backgrounded app to sleep without a word), and reads this chat at its slow pace (30 s on the relays in the
+	* background), so an offer or a fresh packet of this side's waited about that long for it. The chat resumes as after a
+	* restart (WISP 100, "Back after a restart"): this side dials whatever its key, on the transport it was live on, and
+	* knocks on the contact's other transports as its offer goes out, which reaches the contact at once.
+	*/
+	resumeAfterAbsence() {
+		const transport = this.lastLiveOn;
+		if (!transport || this.resuming || this.departed || !this.options.pairing?.credentials.peerKey || !this.options.params.profile || this.deliveryMode === "dht") return;
+		this.lastLiveOn = void 0;
+		this.resuming = transport;
+		this.resumingWoke = true;
+		this.knockedEarly = -1;
+		traceLink(this.myPubKeyZ32, "wake-resume", { transport });
+		if (transport !== "webrtc/1") {
+			this.resumeWaitUntil = Date.now() + RESUME_WAIT_MS;
+			return;
+		}
+		if (this.dataLink.state === "answering" && this.answeringEpoch === this.connectionEpoch) {
+			const epoch = this.connectionEpoch;
+			setTimeout(() => this.maybeKnockAnswering(epoch), 0);
+			return;
+		}
+		const offered = this.offered;
+		if (!offered || offered.resume || offered.epoch !== this.connectionEpoch || !this.offerOut && !this.dialing) return;
+		this.resuming = void 0;
+		this.resumingWoke = false;
+		offered.resume = true;
+		offered.woke = true;
+		if (!this.dialing) setTimeout(() => this.maybeKnockEarly(offered.epoch), 0);
+	}
+	/** A ping on the session right after a wake, with `PONG_WAIT_MS` for its answer: none, and the session is dead. */
+	probeAfterWake(channel) {
+		if (!this.peerAnswersPings || this.paired?.state.status !== "ready") return;
+		this.unansweredPings++;
+		try {
+			this.pingSentAt = Date.now();
+			channel.send(JSON.stringify({ t: "paired-ping" }));
+		} catch {
+			this.dropDeadSession(channel);
+			return;
+		}
+		if (this.pongWait) clearTimeout(this.pongWait);
+		this.pongWait = setTimeout(() => {
+			this.pongWait = null;
+			if (this.channel !== channel || this.stopped) return;
+			traceLink(this.myPubKeyZ32, "wake-unanswered", {});
+			this.dropDeadSession(channel);
+		}, PONG_WAIT_MS);
+	}
 	detach() {
+		if (this.channel && this.paired?.state.status === "ready") this.lastLiveOn = this.activeBinding?.transport ?? "webrtc/1";
 		this.stopLiveness();
 		const wasNative = !!this.activeBinding;
 		this.applicationOpen = false;
@@ -18540,6 +19865,7 @@ var GhostLink = class {
 		this.sessionCapabilities.reset();
 		this.typingSender.reset();
 		this.typingReceiver.clear();
+		this.appsSuspended();
 		this.emitFilesSession();
 		if (this.peerGroupVersions) {
 			this.peerGroupVersions = null;
@@ -20403,7 +21729,7 @@ var DID_GHOSTLY_SERVICE = "GhostlyIdentityProof";
 var METHOD_NAME = /^[a-z0-9]+$/;
 var Z32_KEY = /^[ybndrfg8ejkmcpqxot1uwisza345h769]{52}$/;
 var B64URL = /^[A-Za-z0-9_-]*$/;
-var SEGMENT = /^[A-Za-z0-9._~-]{1,64}$/;
+var SEGMENT$1 = /^[A-Za-z0-9._~-]{1,64}$/;
 var HEX64 = /^[a-f0-9]{64}$/;
 var METHOD_LIST = "did:key, did:jwk, did:dht and did:web";
 /** base64url without padding, strictly: decoding and encoding again gives the same text. */
@@ -20414,7 +21740,7 @@ function strictBase64Url(value) {
 	if (toBase64Url(bytes) !== value) throw new DidError("Not canonical base64url");
 	return bytes;
 }
-var isObject$1 = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+var isObject$3 = (v) => !!v && typeof v === "object" && !Array.isArray(v);
 /**
 * The DID a person typed, checked and in canonical form, or a message they can act on. Methods other than
 * the four Ghostly checks are refused with "not supported yet"; a DID URL (a `#fragment`, `?query` or
@@ -20488,7 +21814,7 @@ function parseWeb(id) {
 		if (!(port >= 1 && port <= 65535) || String(port) !== portMatch[2]) throw new DidError("did:web: that port is not valid");
 	}
 	if (path.length > 8) throw new DidError("did:web: at most 8 path segments");
-	for (const segment of path) if (!SEGMENT.test(segment) || segment === "." || segment === "..") throw new DidError("did:web: each path segment is letters, digits, dots, dashes, underscores or tildes");
+	for (const segment of path) if (!SEGMENT$1.test(segment) || segment === "." || segment === "..") throw new DidError("did:web: each path segment is letters, digits, dots, dashes, underscores or tildes");
 	return {
 		id: [`${host}${port ? `%3A${port}` : ""}`, ...path].join(":"),
 		host,
@@ -20532,7 +21858,7 @@ function didWebFileNames(text, did, statement) {
 	} catch {
 		return false;
 	}
-	return isObject$1(body) && body.ghostly === 1 && body.did === did && body.statement === statement;
+	return isObject$3(body) && body.ghostly === 1 && body.did === did && body.statement === statement;
 }
 /** The service entry a did.json can carry instead of the file. */
 function didGhostlyServiceEntry(did, key, proofId) {
@@ -20614,7 +21940,7 @@ var JWK_CURVES = {
 };
 /** A public JWK. Other curves are `undefined`; a malformed one throws. */
 function jwkKey(jwk) {
-	if (!isObject$1(jwk)) throw new DidError("That JWK is not an object");
+	if (!isObject$3(jwk)) throw new DidError("That JWK is not an object");
 	const spec = typeof jwk.crv === "string" ? JWK_CURVES[jwk.crv] : void 0;
 	if (!spec || jwk.kty !== spec.kty) return void 0;
 	const coordinate = (v) => {
@@ -20659,7 +21985,7 @@ function staticKey(did) {
 	} catch {
 		throw new DidError("That did:jwk does not hold a JSON Web Key");
 	}
-	if (!isObject$1(jwk)) throw new DidError("That did:jwk does not hold a JSON Web Key");
+	if (!isObject$3(jwk)) throw new DidError("That did:jwk does not hold a JSON Web Key");
 	if ("d" in jwk || "p" in jwk || "k" in jwk) throw new DidError("That did:jwk contains a private key. Never share it: make a new key");
 	const key = jwkKey(jwk);
 	if (!key) throw new DidError("That did:jwk is not an Ed25519, secp256k1 or P-256 key");
@@ -20722,13 +22048,13 @@ var list = (value, name) => {
 * `GhostlyIdentityProof` services are kept. Keys Ghostly cannot use are counted in `skipped`.
 */
 function parseDidDocument(did, raw) {
-	if (!isObject$1(raw)) throw new DidError("The DID document is not a JSON object");
+	if (!isObject$3(raw)) throw new DidError("The DID document is not a JSON object");
 	if (raw.id !== did) throw new DidError(typeof raw.id === "string" ? `The DID document is for another DID (${raw.id.slice(0, 80)})` : "The DID document has no id");
 	const keys = /* @__PURE__ */ new Map();
 	const unusable = /* @__PURE__ */ new Set();
 	let skipped = 0;
 	const add = (vm) => {
-		if (!isObject$1(vm)) {
+		if (!isObject$3(vm)) {
 			skipped++;
 			return;
 		}
@@ -20759,10 +22085,10 @@ function parseDidDocument(did, raw) {
 	}
 	const services = [];
 	for (const s of list(raw.service, "service")) {
-		if (!isObject$1(s)) continue;
+		if (!isObject$3(s)) continue;
 		const types = Array.isArray(s.type) ? s.type : [s.type];
 		const endpoint = s.serviceEndpoint;
-		if (!types.includes("GhostlyIdentityProof") || !isObject$1(endpoint)) continue;
+		if (!types.includes("GhostlyIdentityProof") || !isObject$3(endpoint)) continue;
 		if (typeof endpoint.key === "string" && Z32_KEY.test(endpoint.key) && typeof endpoint.proof === "string" && HEX64.test(endpoint.proof)) services.push({
 			id: typeof s.id === "string" ? s.id.slice(0, 200) : "",
 			key: endpoint.key,
@@ -20805,7 +22131,7 @@ function parseDidJws(input) {
 	} catch {
 		throw new DidError("The JWS header is not base64url JSON");
 	}
-	if (!isObject$1(header)) throw new DidError("The JWS header is not a JSON object");
+	if (!isObject$3(header)) throw new DidError("The JWS header is not a JSON object");
 	const alg = header.alg;
 	if (typeof alg !== "string" || !DID_JWS_ALGS[alg]) throw new DidError(`The JWS uses ${typeof alg === "string" ? alg.slice(0, 16) : "no algorithm"}: Ghostly checks EdDSA, ES256K and ES256`);
 	if (header.kid !== void 0 && (typeof header.kid !== "string" || header.kid.length > 640)) throw new DidError("The JWS kid is not a key id");
@@ -21617,7 +22943,7 @@ function compactSize(n) {
 	throw new Error("Too large");
 }
 var varBytes = (b) => concatBytes$1(compactSize(b.length), b);
-var u32$1 = (n) => {
+var u32$2 = (n) => {
 	const b = /* @__PURE__ */ new Uint8Array(4);
 	new DataView(b.buffer).setUint32(0, n >>> 0, true);
 	return b;
@@ -21628,14 +22954,14 @@ var u64 = (n) => {
 	return b;
 };
 function encodeTx(tx, withWitness = tx.inputs.some((i) => i.witness.length > 0)) {
-	const parts = [u32$1(tx.version)];
+	const parts = [u32$2(tx.version)];
 	if (withWitness) parts.push(Uint8Array.of(0, 1));
 	parts.push(compactSize(tx.inputs.length));
-	for (const i of tx.inputs) parts.push(i.txid, u32$1(i.vout), varBytes(i.scriptSig), u32$1(i.sequence));
+	for (const i of tx.inputs) parts.push(i.txid, u32$2(i.vout), varBytes(i.scriptSig), u32$2(i.sequence));
 	parts.push(compactSize(tx.outputs.length));
 	for (const o of tx.outputs) parts.push(u64(o.value), varBytes(o.script));
 	if (withWitness) for (const i of tx.inputs) parts.push(encodeWitness(i.witness));
-	parts.push(u32$1(tx.lockTime));
+	parts.push(u32$2(tx.lockTime));
 	return concatBytes$1(...parts);
 }
 var encodeWitness = (stack) => concatBytes$1(compactSize(stack.length), ...stack.map(varBytes));
@@ -21801,12 +23127,12 @@ function decodeBase64(text) {
 /** BIP 143, for witness v0. `scriptCode` is the P2PKH script of the key. */
 function sighashV0(tx, scriptCode, hashType) {
 	const input = tx.inputs[0];
-	return sha256d(u32$1(tx.version), sha256d(...tx.inputs.map((i) => concatBytes$1(i.txid, u32$1(i.vout)))), sha256d(...tx.inputs.map((i) => u32$1(i.sequence))), input.txid, u32$1(input.vout), varBytes(scriptCode), u64(0n), u32$1(input.sequence), sha256d(...tx.outputs.map((o) => concatBytes$1(u64(o.value), varBytes(o.script)))), u32$1(tx.lockTime), u32$1(hashType));
+	return sha256d(u32$2(tx.version), sha256d(...tx.inputs.map((i) => concatBytes$1(i.txid, u32$2(i.vout)))), sha256d(...tx.inputs.map((i) => u32$2(i.sequence))), input.txid, u32$2(input.vout), varBytes(scriptCode), u64(0n), u32$2(input.sequence), sha256d(...tx.outputs.map((o) => concatBytes$1(u64(o.value), varBytes(o.script)))), u32$2(tx.lockTime), u32$2(hashType));
 }
 /** BIP 341 key path, SIGHASH_DEFAULT or SIGHASH_ALL, no annex. */
 function sighashV1(tx, scriptPubKey, hashType) {
 	const input = tx.inputs[0];
-	return schnorr.utils.taggedHash("TapSighash", concatBytes$1(Uint8Array.of(0, hashType), u32$1(tx.version), u32$1(tx.lockTime), sha256(concatBytes$1(input.txid, u32$1(input.vout))), sha256(u64(0n)), sha256(varBytes(scriptPubKey)), sha256(u32$1(input.sequence)), sha256(concatBytes$1(...tx.outputs.map((o) => concatBytes$1(u64(o.value), varBytes(o.script))))), Uint8Array.of(0), u32$1(0)));
+	return schnorr.utils.taggedHash("TapSighash", concatBytes$1(Uint8Array.of(0, hashType), u32$2(tx.version), u32$2(tx.lockTime), sha256(concatBytes$1(input.txid, u32$2(input.vout))), sha256(u64(0n)), sha256(varBytes(scriptPubKey)), sha256(u32$2(input.sequence)), sha256(concatBytes$1(...tx.outputs.map((o) => concatBytes$1(u64(o.value), varBytes(o.script))))), Uint8Array.of(0), u32$2(0)));
 }
 /** The original sighash, for P2PKH: the input's script replaced by the spent output's, the rest as is. */
 function sighashLegacy(tx, scriptPubKey, hashType) {
@@ -21817,7 +23143,7 @@ function sighashLegacy(tx, scriptPubKey, hashType) {
 			witness: [],
 			scriptSig: n === 0 ? scriptPubKey : /* @__PURE__ */ new Uint8Array(0)
 		}))
-	}, false), u32$1(hashType));
+	}, false), u32$2(hashType));
 }
 /** A check that throws on malformed input (a point off the curve…) simply does not hold. */
 function holds(check) {
@@ -22002,11 +23328,11 @@ function verifyBip322(address, message, signature) {
 */
 var MAX_MESSAGE = 16384;
 var MAX_SIGNATURE = 16384;
-var MAGIC = utf8Encode("Bitcoin Signed Message:\n");
+var MAGIC$1 = utf8Encode("Bitcoin Signed Message:\n");
 /** The digest `signmessage` signs: double SHA-256 of the length-prefixed magic and message. */
 function legacyMessageHash(message) {
 	const bytes = utf8Encode(message);
-	return sha256d(compactSize(MAGIC.length), MAGIC, compactSize(bytes.length), bytes);
+	return sha256d(compactSize(MAGIC$1.length), MAGIC$1, compactSize(bytes.length), bytes);
 }
 /** Header bytes 27-34 are P2PKH (uncompressed 27-30, compressed 31-34); 35-42 are BIP 137 SegWit headers. */
 var isLegacySignature = (bytes) => bytes.length === 65 && bytes[0] >= 27 && bytes[0] <= 42;
@@ -22133,8 +23459,8 @@ var Reader = class {
 		if (!this.done) fail("Trailing bytes in SSH data");
 	}
 };
-var u32 = (n) => Uint8Array.of(n >>> 24, n >>> 16 & 255, n >>> 8 & 255, n & 255);
-var sshString = (b) => concatBytes$1(u32(b.length), b);
+var u32$1 = (n) => Uint8Array.of(n >>> 24, n >>> 16 & 255, n >>> 8 & 255, n & 255);
+var sshString = (b) => concatBytes$1(u32$1(b.length), b);
 function strictBase64(text, max) {
 	if (text.length > max || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(text)) fail("Invalid base64");
 	const bytes = fromBase64(text);
@@ -22300,7 +23626,7 @@ async function verifySshSignature(armored, message, options = {}) {
 			userVerified: !!(flags & SK_USER_VERIFIED),
 			counter
 		};
-		data = concatBytes$1(sha256(utf8Encode(key.application)), Uint8Array.of(flags), u32(counter), sha256(signed));
+		data = concatBytes$1(sha256(utf8Encode(key.application)), Uint8Array.of(flags), u32$1(counter), sha256(signed));
 	}
 	r.end();
 	const verifyWith = async () => {
@@ -24816,7 +26142,7 @@ var pairAad = (f, to) => JSON.stringify([
 	f.ts,
 	to
 ]);
-var isObject = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+var isObject$2 = (v) => !!v && typeof v === "object" && !Array.isArray(v);
 var messageSigned = (f) => utf8Encode(JSON.stringify([
 	"ghostly-group/2 msg",
 	f.g,
@@ -25746,7 +27072,7 @@ var CommunitySession = class {
 	sendApp(frame, nick, now = Date.now()) {
 		return this.serialize(async () => {
 			if (!this.isMember) return { error: this.state.statusReason ?? "You are not in this group" };
-			if (!isObject(frame) || utf8Encode(JSON.stringify(frame)).length > COMMUNITY_LIMITS.appBytes) return { error: "Too large for the group" };
+			if (!isObject$2(frame) || utf8Encode(JSON.stringify(frame)).length > COMMUNITY_LIMITS.appBytes) return { error: "Too large for the group" };
 			const sent = await this.sendPayload(() => ({ x: frame }), nick, now);
 			if ("error" in sent) return sent;
 			await this.say(sent.frame);
@@ -25795,7 +27121,7 @@ var CommunitySession = class {
 		return this.serialize(async () => {
 			if (!this.isMember) return { error: this.state.statusReason ?? "You are not in this group" };
 			if (to === this.myKey || !rosterHas(this.roster, to)) return { error: "Not a member of this group" };
-			if (!isObject(payload)) return { error: "Nothing to send" };
+			if (!isObject$2(payload)) return { error: "Nothing to send" };
 			const plain = utf8Encode(JSON.stringify(payload));
 			if (plain.length > COMMUNITY_LIMITS.appBytes) return { error: "Too large for the group" };
 			const sent = await this.sendPayload((header) => ({ p: {
@@ -25908,7 +27234,7 @@ var CommunitySession = class {
 			try {
 				parsed = plain === null ? null : JSON.parse(plain);
 			} catch {}
-			if (!isObject(parsed) || isObject(parsed.p)) continue;
+			if (!isObject$2(parsed) || isObject$2(parsed.p)) continue;
 			const o = readOriginal(parsed.o, f) ?? {
 				e: f.e,
 				h: f.h,
@@ -26056,7 +27382,7 @@ var CommunitySession = class {
 		} catch {
 			return false;
 		}
-		if (!isObject(parsed)) return false;
+		if (!isObject$2(parsed)) return false;
 		const original = parsed.o === void 0 ? null : readOriginal(parsed.o, raw);
 		if (parsed.o !== void 0 && !original) return false;
 		const first = original ? {
@@ -26074,8 +27400,8 @@ var CommunitySession = class {
 		const text = typeof parsed.text === "string" ? parsed.text.slice(0, COMMUNITY_LIMITS.textBytes) : void 0;
 		if ([
 			text !== void 0,
-			isObject(parsed.x),
-			isObject(parsed.p)
+			isObject$2(parsed.x),
+			isObject$2(parsed.p)
 		].filter(Boolean).length !== 1) return false;
 		const nick = typeof parsed.nick === "string" ? sanitizeNick(parsed.nick) : void 0;
 		if (nick && this.state.nicks[raw.s] !== nick) {
@@ -26100,7 +27426,7 @@ var CommunitySession = class {
 				...forwarded ? { forwarded } : {},
 				...card ? { card } : {}
 			});
-		} else if (isObject(parsed.x)) await this.hooks.app?.({
+		} else if (isObject$2(parsed.x)) await this.hooks.app?.({
 			id,
 			sender: raw.s,
 			epoch: raw.e,
@@ -26116,7 +27442,7 @@ var CommunitySession = class {
 				try {
 					opened = plain && plain.length <= COMMUNITY_LIMITS.appBytes ? JSON.parse(utf8Decode(plain)) : null;
 				} catch {}
-				if (isObject(opened)) await this.hooks.pair?.({
+				if (isObject$2(opened)) await this.hooks.pair?.({
 					id,
 					sender: raw.s,
 					epoch: raw.e,
@@ -26571,6 +27897,663 @@ var GroupTypingBoard = class {
 	}
 };
 //#endregion
-export { checkAtprotoProofRecord as $, filePartName as $a, BUTTON_ID as $i, freshHubs as $n, createChatInvite as $o, IdentityExchange as $r, randomBytes as $s, isPubkyKey as $t, GROUP_EDIT_TEXT_BYTES as A, RTC_CONFIG as Aa, voicePeaksOf as Ai, findEndpoint as An, readSetUpdate as Ao, newWakeToken as Ar, RelayTransport as As, encodeDidDhtPacket as At, sameSshKey as B, LEGACY_SERVICES as Ba, GROUP_REACTION_FRAME as Bi, SIGNAL_FRESH_MS as Bn, enrollCancelReason as Bo, HOLD_LIMITS as Br, createRelayPayload as Bs, USDT_PUBLIC_RPC as Bt, groupWakes as C, formatLocalTarget as Ca, sanitizeFileName as Ci, resolveLightningDestination as Cn, readHandoffHello as Co, nextPinNumber as Cr, nextTurnPosition as Cs, parseDidSignaturePaste as Ct, GroupSession as D, decodeControl as Da, baseMime as Di, ENDPOINT as Dn, sealHandoffPiece as Do, WAKE_CALL_INTERVAL_MS as Dr, turnKeys as Ds, didDhtDocument as Dt, GROUP_READ_NOTE as E, LIMITS as Ea, VOICE_LIMITS as Ei, decodeBolt11 as En, readHandoffVerified as Eo, readPin as Er, signTurnRelease as Es, strictBase64Url as Et, SSHSIG_MAX_ARMOR as F, extractParamsFromSdp as Fa, dhtEditId as Fi, INVITE_TAKEN as Fn, ENROLL_DONE as Fo, vapidKeysMatch as Fr, budgetRetryMs as Fs, ONCHAIN_PROVIDER as Ft, decodeAnyBitcoinAddress as G, HANDOFF_HAVE as Ga, reactionEmoji as Gi, MESH_HUBS as Gn, enrollProofFrame as Go, CapsExchange as Gr, identityFromSeed as Gs, validatePaymentTarget as Gt, verifySshSignature as H, HANDOFF_ACK as Ha, ReactionWindow as Hi, SIGNAL_REPLY_MS as Hn, enrollDoneFrame as Ho, HoldRefusedError as Hr, openRelayPayload as Hs, assertTokenUnits as Ht, SSHSIG_NAMESPACE as I, parseCallSignal as Ia, parseLinkPreview as Ii, LIVENESS_PING_MS as In, ENROLL_GRANT as Io, BUTTONS_CAPABILITY as Ir, isDiscoveryBudgetError as Is, PaymentPreflightError as It, ATPROTO_PROOF_COLLECTION as J, HANDOFF_PAKE as Ja, validReactionNumber as Ji, pickMeshHubs as Jn, verifyEnrollProof as Jo, dialDescriptors as Jr, verify as Js, SPARK_PROVIDER as Jt, ATPROTO_DECLARED_SCOPE as K, HANDOFF_HELLO as Ka, reactionIsNewer as Ki, mayBeHub as Kn, readEnrollGrant as Ko, DHT_TEXT_CAPABILITY as Kr, identityFromSeedB64 as Ks, walletNetworkOf as Kt, SshSigError as L, signalHasVideo as La, forwardedAgain as Li, pairedMessageFrame as Ln, ENROLL_HELLO as Lo, EDIT_CAPABILITY as Lr, withRequestOptions as Ls, SEPOLIA_TEST_USDT as Lt, parseCommunityEdit as M, buildSdpFromSignal as Ma, EDIT_BUFFER_MS as Mi, parseCashuRequestPayload as Mn, setUpdateFrame as Mo, relayRequest as Mr, normalizeRelayUrl as Ms, signDidDhtPacket as Mt, mentionsMember as N, callRtcConfig as Na, EDIT_RATE_WINDOW_MS as Ni, parseFedimintRequestPayload as Nn, signTombstone as No, wakeRequest as Nr, setLinkTraceSink as Ns, ETHEREUM_USDT as Nt, COMMUNITY_EDIT_FRAME as O, encodeControl as Oa, fileMessageText as Oi, cashuRequestPayload as On, SET_ACK as Oo, WakeLimiter as Or, turnName as Os, didDhtFromPublicKey as Ot, groupName as P, callSignalHeardAt as Pa, RateWindow as Pi, GhostLink as Pn, verifySetUpdate as Po, checkPushEndpoint as Pr, traceLink as Ps, EVM_TEST_CHAINS as Pt, atprotoProofRkey as Q, HANDOFF_VERIFIED as Qa, replySnippet as Qi, doorHubs as Qn, OwnInviteError as Qo, IdentityCheckUnavailable as Qr, fromBase64Url as Qs, PUBKY_PROOF_MAX_BYTES as Qt, parseSshPublicKey as R, emptyLinkRecords as Ra, readForwarded as Ri, CarriedTransport as Rn, ENROLL_PROOF as Ro, HOLD_CAPABILITY as Rr, PacketTooLargeError as Rs, SEPOLIA_TEST_USDT_FAUCET as Rt, groupWakeFrame as S, GhostlyHttpError as Sa, safeBlobType as Si, requestLnurlInvoice as Sn, readHandoffHave as So, mayPin as Sr, firstDeviceSetSecret as Ss, parseDidDocument as St, GROUP_REACTED_FRAME as T, webLocalFetch as Ta, PLAYABLE_AUDIO as Ti, engineText as Tn, readHandoffTurnFrame as To, pinNumberHolds as Tr, signTurnPacket as Ts, staticDidDocument as Tt, verifyBitcoinMessage as U, HANDOFF_CANCEL as Ua, nextReactionNumber as Ui, groupSignalFrame as Un, enrollGrantFrame as Uo, newMailbox as Ur, parseRelayPayload as Us, assertWholeSats as Ut, sshSignCommand as V, serviceIdFromName as Va, REACTION_LIMITS as Vi, SIGNAL_HOLD_MS as Vn, enrollDigits as Vo, HoldKeys as Vr, newerPacket as Vs, WALLET_NETWORKS as Vt, BitcoinAddressError as W, HANDOFF_DONE as Wa, queueReaction as Wi, readGroupSignal as Wn, enrollHelloFrame as Wo, readManifest as Wr, createIdentity as Ws, formatPaymentAmount as Wt, atprotoDidMethod as X, HANDOFF_REQUEST as Xa, pairedReplyAuthor as Xi, beaconKeys as Xn, deviceInviteJoinerParams as Xo, IDENTITY_MAX_VALIDITY as Xr, sanitizeAvatar as Xs, sparkInvoiceDetails as Xt, ATPROTO_PROOF_SCOPE as Y, HANDOFF_PIECE_BYTES as Ya, wireReaction as Yi, COMMUNITY_TOPOLOGY as Yn, createDeviceInvite as Yo, IDENTITY_MAX_EVIDENCE as Yr, MAX_AVATAR_LENGTH as Ys, sparkAddressKind as Yt, atprotoProofRecord as Z, HANDOFF_TIMINGS as Za, readReply as Zi, beaconRecords as Zn, readDeviceInvite as Zo, IDENTITY_REVOCATION_LABEL as Zr, bytesEqual as Zs, isBitcoinAddress as Zt, knockRecords as _, edgeParams as _a, peekDhtMailbox as _i, recordsFromTxt as _n, handoffVersions as _o, TypingSender as _r, TURN_SETTLE_MS as _s, didWebFileNames as _t, sealGroupTyping as a, sameButtonText as aa, receivedIdentityStatus as ai, pubkyProofPath as an, handoffContext as ao, pickHubs as ar, ENROLL_CAPABILITY as as, verifyAtprotoRecordProof as at, GROUP_WAKE_FRAME as b, RELAY_POLL_INTERVALS as ba, parseImageMeta as bi, txtValue as bn, readHandoffCancel as bo, GROUP_PIN_FRAME as br, TURN_LAST_SEQUENCE as bs, normalizeDid as bt, GROUP_READ_NOTE_COMMUNITY as c, claimedTime as ca, PeerProofs as ci, DOMAIN_FILE_MAX_BYTES as cn, handoffDigest as co, readBeaconHead as cr, deviceEchoNonce as cs, DID_JWS_MAX_LENGTH as ct, encodeCommunityLink as d, shownTime as da, TRANSPORTS as di, domainTxtRecord as dn, handoffManifestFrames as do, ChatFiles as dr, devicePingFrame as ds, checkDidSignature as dt, ITEM_STATES as ea, toBase64Url as ec, boundVerifiedIdentity as ei, isPubkyProofFolder as en, handoffAttemptAllowed as eo, lobbyKeys as er, decodeInviteCode as es, isAtprotoDid as et, KNOCK_TTL_MS as f, GROUP_MEMBER_CAP as fa, automaticTransport as fi, domainWellKnownFile as fn, handoffOfferFrame as fo, FILE_LIMITS as fr, newDeviceSetSecret as fs, didGhostlyServiceEntry as ft, knockIdentity as g, verifyCommitSignature as ga, DHT_MESSAGE_TTL as gi, normalizeDomain as gn, handoffStreamKey as go, TYPING_REFRESH_MS as gr, TURN_RAISE_READ_TIMEOUT_MS as gs, didWebFile as gt, entryParams as h, rosterHas as ha, DHT_FILE_TOO_LARGE as hi, nip05RootKey as hn, handoffRetryAfter as ho, TYPING_KINDS as hr, TURN_PUT_WINDOW_MS as hs, didWebDocumentUrl as ht, openGroupTyping as i, checkStatusCard as ia, newIdentityBinding as ii, pubkyProofFile as in, handoffCancelFrame as io, newerHead as ir, DEVICES_CAPABILITY as is, AtprotoProofError as it, carryMentions as j, answersOffer as ja, parseVideoMeta as ji, isFederationId as jn, setAckFrame as jo, parseWakeFrame as jr, currentRelays as js, resolveDidDht as jt, GROUP_EDIT_FRAME as k, CALL_SIGNAL_MAX_AGE_MS as ka, parseVoiceMeta as ki, fedimintRequestPayload as kn, SET_UPDATE as ko, deviceWakeRequest as kr, DEFAULT_RELAYS as ks, encodeDidDhtDeactivated as kt, communityHasFrame as l, heardTime as la, emptyProofLedger as li, decodeDnsResponse as ln, handoffEphemeral as lo, readLobby as lr, deviceKeyZ32 as ls, DidError as lt, encodeGroupEntryLink as m, MEMBER_KEY as ma, irohRelayUrl as mi, isPublicAddress as mn, handoffReleaseFrame as mo, transferStalled as mr, webCryptoSigner as ms, didSignedMessages as mt, GroupTypingBoard as n, STATUS_CARD_LIMITS as na, utf8Decode as nc, identityRevocationValue as ni, normalizePubkyKey as nn, handoffAttemptSucceeded as no, mergeBeacon as nr, inviteLink as ns, parseAtprotoDidDocument as nt, COMMUNITY_LIMITS as o, statusCardText as oa, revokesIdentity as oi, homeserverWebEndpoint as on, handoffContextProof as oo, rankHubs as or, HANDOFF_CAPABILITY as os, DID_DOCUMENT_MAX_BYTES as ot, decodeGroupEntryLink as p, MAX_GROUP_CHAIN as pa, irohDescriptor as pi, encodeDnsQuery as pn, handoffPakeFrame as po, transferEnded as pr, seedSigner as ps, didJwsAlg as pt, ATPROTO_FULL_SCOPE as q, HANDOFF_OFFER as qa, readReaction as qi, meshHubs as qn, readEnrollHello as qo, capsDescriptors as qr, publicKeyFromZ32 as qs, SPARK_NETWORKS as qt, groupTypingEpoch as r, buttonLabelClash as ra, utf8Encode as rc, identityStatement as ri, pubkyProofCapability as rn, handoffBusyFrame as ro, mergeLobby as rr, inviteOwnership as rs, shortAtprotoDid as rt, CommunitySession as s, arrivalKey as sa, lastSharedWithMe as si, pubkyHomeserverOf as sn, handoffDataFrame as so, readBeacon as sr, deviceEchoFrame as ss, DID_FILE_MAX_BYTES as st, GROUP_TYPING_FRAME as t, RUN_RESULTS as ta, toZ32 as tc, emptyIdentityLedger as ti, newPubkyProofFolder as tn, handoffAttemptFailed as to, lobbyRecords as tr, encodeInviteCode as ts, normalizeAtprotoHandle as tt, decodeCommunityLink as u, receivedTimestamp as ua, validExternalKey as ui, dnsProofName as un, handoffHelloFrame as uo, shouldBeHub as ur, deviceLinkPairing as us, checkDidJws as ut, mergeKnocks as v, DirectPathWatch as va, DHT_FILE_CAPABILITY as vi, recordsFromWellKnown as vn, newHandoffId as vo, sanitizeTypingStatus as vr, classifyTurnRead as vs, didWebFileUrl as vt, parseGroupWakeFrame as w, parseLocalTarget as wa, sanitizeMime as wi, engineError as wn, readHandoffPake as wo, pinIsNewer as wr, readTurnPacket as ws, signingKeys as wt, GroupWakeLimiter as x, presenceSeenAt as xa, readImageMeta as xi, wellKnownUrl as xn, readHandoffDone as xo, PIN_LIMITS as xr, TURN_MAX as xs, parseDid as xt, readKnocks as y, EXPECT_PEER_MS as ya, dhtFileId as yi, recordsName as yn, readHandoffAck as yo, typingActivity as yr, turnPutSummary as ys, didWebHost as yt, parseSshSignature as z, HTTP_SERVICE_PROTO as za, COMMUNITY_REACTION_FRAME as zi, GROUP_SIGNAL_FRAME as zn, enrollCancelFrame as zo, HOLD_DATED_BACK_MS as zr, RELAY_PAYLOAD_MAX_BYTES as zs, TEST_USDT_FAUCET_AMOUNT as zt };
+//#region ../core/src/appBundle.ts
+var APP_BUNDLE_MAGIC = "GHOSTLYAPP1";
+var MAGIC = utf8Encode(APP_BUNDLE_MAGIC);
+var APP_BUNDLE_LIMITS = {
+	/** The whole bundle, phase 1. */
+	bundleBytes: 16777216,
+	files: 64,
+	manifestBytes: 65536,
+	/** A path, in bytes (paths are ASCII). */
+	pathBytes: 128,
+	iconBytes: 262144,
+	screenshots: 8,
+	/** Lengths in Unicode code points. */
+	title: 40,
+	tagline: 80,
+	description: 2e3,
+	releaseNotes: 500,
+	version: 64,
+	license: 128,
+	/** An https URL, in characters. */
+	url: 512,
+	sources: 8
+};
+var APP_ICON_PATH = "icon.png";
+var SCREENSHOT_TYPES = /\.(png|jpg|webp)$/;
+/**
+* The permissions of phase 1 (WISP 1200 · Permissions). `internet`: the app reaches HTTPS and WSS servers of its
+* choosing (the client runs it in its network runner); without it, an app has no network.
+*/
+var APP_PERMISSIONS = [
+	"chat",
+	"internet",
+	"name"
+];
+var APP_CLIENTS = [
+	"web",
+	"desktop",
+	"extension"
+];
+var REQUIRED = [
+	"ghostlyApp",
+	"publisher",
+	"name",
+	"version",
+	"sequence",
+	"kind",
+	"title",
+	"tagline",
+	"entry",
+	"permissions",
+	"runtime",
+	"license",
+	"files"
+];
+var OPTIONAL = [
+	"description",
+	"sources",
+	"proofs",
+	"homepage",
+	"support",
+	"releaseNotes"
+];
+/** Reserved for phase 2 and refused in phase 1. */
+var RESERVED = ["price", "recovery"];
+var SEMVER = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/;
+var HOST = /^>=(0|[1-9]\d*)\.(0|[1-9]\d*)(\.(0|[1-9]\d*))?$/;
+var SEGMENT = /^[A-Za-z0-9._-]+$/;
+var codePoints = (s) => [...s].length;
+/** One line: no control character. */
+var isLine$1 = (v, max, min = 0) => typeof v === "string" && codePoints(v) >= min && codePoints(v) <= max && !/\p{Cc}/u.test(v);
+/** Text of several lines: no control character but the line feed. */
+var isText$1 = (v, max) => typeof v === "string" && codePoints(v) <= max && !/[^\P{Cc}\n]/u.test(v);
+var isSafeCount = (v, min) => typeof v === "number" && Number.isSafeInteger(v) && v >= min;
+var isObject$1 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+/**
+* An https URL as WISP 1200 takes one anywhere: at most 512 characters, no user or password, and on jsDelivr only
+* `https://cdn.jsdelivr.net/gh/<owner>/<repo>@<40-hex commit>/...`, since a branch, a tag, a range or `latest` is
+* served from a copy that moves.
+*/
+function isAppUrl(value) {
+	if (typeof value !== "string" || value.length > APP_BUNDLE_LIMITS.url || !value.startsWith("https://")) return false;
+	let url;
+	try {
+		url = new URL(value);
+	} catch {
+		return false;
+	}
+	if (url.protocol !== "https:" || url.username || url.password || !url.hostname) return false;
+	const host = url.hostname.toLowerCase();
+	if (host === "jsdelivr.net" || host.endsWith(".jsdelivr.net")) return host === "cdn.jsdelivr.net" && /^\/gh\/[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+@[0-9a-f]{40}\/./.test(url.pathname);
+	return true;
+}
+/**
+* An SPDX license expression, read lightly: identifiers (`MIT`, `GPL-3.0-or-later`, `LicenseRef-x`, `Apache-2.0+`)
+* joined by `AND` and `OR`, `WITH` an exception, and parentheses; or `proprietary`.
+*/
+function isAppLicense(value) {
+	if (typeof value !== "string" || value.length < 1 || value.length > APP_BUNDLE_LIMITS.license) return false;
+	const tokens = value.match(/\(|\)|[^\s()]+/g);
+	if (!tokens || tokens.join("").length !== value.replace(/\s/g, "").length) return false;
+	let i = 0;
+	const id = () => {
+		const t = tokens[i];
+		if (t && /^[A-Za-z0-9][A-Za-z0-9.-]*\+?$/.test(t) && ![
+			"AND",
+			"OR",
+			"WITH"
+		].includes(t)) {
+			i++;
+			return true;
+		}
+		return false;
+	};
+	const term = (depth) => {
+		if (tokens[i] === "(") {
+			i++;
+			if (depth > 8 || !expr(depth + 1) || tokens[i] !== ")") return false;
+			i++;
+			return true;
+		}
+		if (!id()) return false;
+		if (tokens[i] === "WITH") {
+			i++;
+			return id();
+		}
+		return true;
+	};
+	const expr = (depth) => {
+		if (!term(depth)) return false;
+		while (tokens[i] === "AND" || tokens[i] === "OR") {
+			i++;
+			if (!term(depth)) return false;
+		}
+		return true;
+	};
+	return expr(0) && i === tokens.length;
+}
+/** A path of a bundle: relative, `/`-separated, `[A-Za-z0-9._-]` per segment, no `.` or `..`, at most 128 bytes. */
+function isAppPath(value) {
+	if (typeof value !== "string" || value.length < 1 || value.length > APP_BUNDLE_LIMITS.pathBytes) return false;
+	return value.split("/").every((s) => SEGMENT.test(s) && s !== "." && s !== "..");
+}
+var bad = (field, detail = `${field} is not valid`) => ({
+	ok: false,
+	reason: "bad-field",
+	detail
+});
+/** Checks a parsed manifest against every rule and bound of WISP 1200 that the manifest alone decides. */
+function checkAppManifest(value) {
+	if (!isObject$1(value)) return bad("manifest", "The manifest is not an object");
+	if (value.ghostlyApp !== void 0 && value.ghostlyApp !== 1) return {
+		ok: false,
+		reason: "unsupported-format",
+		detail: "ghostlyApp is not 1"
+	};
+	for (const key of Object.keys(value)) {
+		if (RESERVED.includes(key)) return {
+			ok: false,
+			reason: "reserved-key",
+			detail: key
+		};
+		if (!REQUIRED.includes(key) && !OPTIONAL.includes(key)) return {
+			ok: false,
+			reason: "unknown-key",
+			detail: key
+		};
+	}
+	for (const key of REQUIRED) if (!(key in value)) return {
+		ok: false,
+		reason: "missing-key",
+		detail: key
+	};
+	const m = value;
+	if (!isAppKey(m.publisher)) return bad("publisher");
+	if (typeof m.name !== "string" || !APP_NAME.test(m.name)) return bad("name");
+	if (typeof m.version !== "string" || m.version.length > APP_BUNDLE_LIMITS.version || !SEMVER.test(m.version)) return bad("version");
+	if (!isSafeCount(m.sequence, 1)) return bad("sequence");
+	if (m.kind !== "mini-app") return bad("kind");
+	if (!isLine$1(m.title, APP_BUNDLE_LIMITS.title, 1)) return bad("title");
+	if (!isLine$1(m.tagline, APP_BUNDLE_LIMITS.tagline, 1)) return bad("tagline");
+	if (m.description !== void 0 && !isText$1(m.description, APP_BUNDLE_LIMITS.description)) return bad("description");
+	if (m.releaseNotes !== void 0 && !isLine$1(m.releaseNotes, APP_BUNDLE_LIMITS.releaseNotes)) return bad("releaseNotes");
+	const permissions = m.permissions;
+	if (!Array.isArray(permissions) || new Set(permissions).size !== permissions.length || !permissions.every((p) => APP_PERMISSIONS.includes(p))) return bad("permissions");
+	const runtime = m.runtime;
+	if (!isObject$1(runtime) || Object.keys(runtime).length !== 2 || typeof runtime.host !== "string" || !HOST.test(runtime.host)) return bad("runtime");
+	const clients = runtime.clients;
+	if (!Array.isArray(clients) || clients.length < 1 || new Set(clients).size !== clients.length || !clients.every((c) => APP_CLIENTS.includes(c))) return bad("runtime");
+	if (!isAppLicense(m.license)) return bad("license");
+	if (m.sources !== void 0 && (!Array.isArray(m.sources) || m.sources.length > APP_BUNDLE_LIMITS.sources || !m.sources.every(isAppUrl))) return bad("sources");
+	if (m.homepage !== void 0 && !isAppUrl(m.homepage)) return bad("homepage");
+	if (m.support !== void 0 && !isAppUrl(m.support)) return bad("support");
+	if (m.proofs !== void 0) {
+		if (!Array.isArray(m.proofs)) return bad("proofs");
+		if (m.proofs.length > 0) return {
+			ok: false,
+			reason: "proofs-unsupported",
+			detail: "Publisher proofs come after phase 1"
+		};
+	}
+	const files = m.files;
+	if (!Array.isArray(files)) return bad("files");
+	if (files.length > APP_BUNDLE_LIMITS.files) return {
+		ok: false,
+		reason: "too-many-files",
+		detail: `${files.length} files`
+	};
+	const lower = /* @__PURE__ */ new Set();
+	let previous = "";
+	let screenshots = 0;
+	for (const f of files) {
+		if (!isObject$1(f) || Object.keys(f).length !== 3 || !isAppPath(f.path) || !isSafeCount(f.size, 0) || !isAppHash(f.sha256)) return isObject$1(f) && typeof f.path === "string" && !isAppPath(f.path) ? {
+			ok: false,
+			reason: "bad-path",
+			detail: f.path
+		} : bad("files", "A file is not {path, size, sha256}");
+		if (lower.has(f.path.toLowerCase())) return {
+			ok: false,
+			reason: "path-collision",
+			detail: f.path
+		};
+		lower.add(f.path.toLowerCase());
+		if (f.path <= previous) return {
+			ok: false,
+			reason: "files-unsorted",
+			detail: f.path
+		};
+		previous = f.path;
+		if (f.size > APP_BUNDLE_LIMITS.bundleBytes) return bad("files", `${f.path} is larger than a bundle`);
+		if (f.path.startsWith("screenshots/")) {
+			if (!SCREENSHOT_TYPES.test(f.path)) return {
+				ok: false,
+				reason: "bad-path",
+				detail: `${f.path}: a screenshot is .png, .jpg or .webp`
+			};
+			if (++screenshots > APP_BUNDLE_LIMITS.screenshots) return {
+				ok: false,
+				reason: "too-many-screenshots"
+			};
+		}
+		if (f.path === "icon.png" && f.size > APP_BUNDLE_LIMITS.iconBytes) return {
+			ok: false,
+			reason: "bad-icon",
+			detail: "icon.png is larger than 256 KiB"
+		};
+	}
+	const entry = m.entry;
+	if (typeof entry !== "string" || !entry.endsWith(".html") || !files.some((f) => isObject$1(f) && f.path === entry)) return {
+		ok: false,
+		reason: "bad-entry",
+		detail: "The entry is not an .html file of the bundle"
+	};
+	return {
+		ok: true,
+		manifest: m
+	};
+}
+/** The digest of a version: SHA-256 of its canonical manifest bytes, base64url. */
+function appDigest(manifestBytes) {
+	return toBase64Url(sha256(manifestBytes));
+}
+var u32 = (b, at) => (b[at] << 24 >>> 0) + (b[at + 1] << 16) + (b[at + 2] << 8) + b[at + 3];
+/** Reads and checks a bundle (the order of the checks is part of the format: see above). */
+function readAppBundle(bytes) {
+	if (bytes.length > APP_BUNDLE_LIMITS.bundleBytes) return {
+		ok: false,
+		reason: "too-large"
+	};
+	const head = bytes.subarray(0, MAGIC.length);
+	if (!head.every((b, i) => b === MAGIC[i])) return {
+		ok: false,
+		reason: "magic"
+	};
+	if (head.length < MAGIC.length) return {
+		ok: false,
+		reason: "truncated"
+	};
+	let at = MAGIC.length;
+	if (bytes.length < at + 4) return {
+		ok: false,
+		reason: "truncated"
+	};
+	const manifestLength = u32(bytes, at);
+	at += 4;
+	if (manifestLength > APP_BUNDLE_LIMITS.manifestBytes) return {
+		ok: false,
+		reason: "manifest-too-large"
+	};
+	if (bytes.length < at + manifestLength + 4) return {
+		ok: false,
+		reason: "truncated"
+	};
+	const manifestBytes = bytes.subarray(at, at + manifestLength);
+	at += manifestLength;
+	const statementLength = u32(bytes, at);
+	at += 4;
+	if (bytes.length < at + statementLength) return {
+		ok: false,
+		reason: "truncated"
+	};
+	const statementBytes = bytes.subarray(at, at + statementLength);
+	at += statementLength;
+	const read = readCanonicalJson(manifestBytes);
+	if (!read.ok) return read;
+	const checked = checkAppManifest(read.value);
+	if (!checked.ok) return checked;
+	const manifest = checked.manifest;
+	const statement = readAppSignature(statementBytes);
+	if (!statement.ok) return statement;
+	const total = manifest.files.reduce((sum, f) => sum + f.size, 0);
+	const rest = bytes.length - at;
+	if (total > rest) return {
+		ok: false,
+		reason: "truncated"
+	};
+	if (total < rest) return {
+		ok: false,
+		reason: "trailing-bytes",
+		detail: `${rest - total} bytes past the last file`
+	};
+	const signed = verifyAppSignature(APP_PREFIXES.app, manifestBytes, statement.signature, manifest.publisher);
+	if (!signed.ok) return signed;
+	const files = /* @__PURE__ */ new Map();
+	for (const f of manifest.files) {
+		const content = bytes.subarray(at, at + f.size);
+		at += f.size;
+		if (toBase64Url(sha256(content)) !== f.sha256) return {
+			ok: false,
+			reason: "file-hash",
+			detail: f.path
+		};
+		files.set(f.path, content);
+	}
+	const icon = files.get(APP_ICON_PATH);
+	if (icon) {
+		const size = imageSize(icon);
+		if (!size || icon[0] !== 137 || size.width !== size.height) return {
+			ok: false,
+			reason: "bad-icon",
+			detail: "icon.png is not a square PNG"
+		};
+	}
+	return {
+		ok: true,
+		bundle: {
+			manifest,
+			manifestBytes,
+			digest: appDigest(manifestBytes),
+			signature: statement.signature,
+			files
+		}
+	};
+}
+/** Puts a bundle's parts together, checking nothing: for builders, and for tests that need a broken bundle. */
+function assembleAppBundle(manifestBytes, statementBytes, files) {
+	const total = MAGIC.length + 8 + manifestBytes.length + statementBytes.length + files.reduce((s, f) => s + f.length, 0);
+	const out = new Uint8Array(total);
+	const view = new DataView(out.buffer);
+	let at = 0;
+	out.set(MAGIC, at);
+	at += MAGIC.length;
+	view.setUint32(at, manifestBytes.length);
+	at += 4;
+	out.set(manifestBytes, at);
+	at += manifestBytes.length;
+	view.setUint32(at, statementBytes.length);
+	at += 4;
+	out.set(statementBytes, at);
+	at += statementBytes.length;
+	for (const f of files) {
+		out.set(f, at);
+		at += f.length;
+	}
+	return out;
+}
+//#endregion
+//#region ../core/src/appStore.ts
+var APP_STORE_LIMITS = {
+	/** The index's bytes, uncompressed. */
+	indexBytes: 16777216,
+	/** How far ahead `expires` may be. */
+	expiresAheadS: 7776e3,
+	name: 40,
+	description: 2e3,
+	title: 40,
+	tagline: 80,
+	/** `category`, `developer`, `submitter`. */
+	label: 40,
+	reason: 200,
+	urls: 4,
+	apps: 4096,
+	removed: 4096,
+	revoked: 4096
+};
+var APP_STORE_KINDS = ["curated", "indexed"];
+var isObject = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var isLine = (v, max, min = 0) => typeof v === "string" && [...v].length >= min && [...v].length <= max && !/\p{Cc}/u.test(v);
+var isText = (v, max) => typeof v === "string" && [...v].length <= max && !/[^\P{Cc}\n]/u.test(v);
+var isCount = (v, min) => typeof v === "number" && Number.isSafeInteger(v) && v >= min;
+var fine = { ok: true };
+function keysOf(value, required, optional) {
+	for (const k of Object.keys(value)) if (!required.includes(k) && !optional.includes(k)) return {
+		ok: false,
+		reason: "unknown-key",
+		detail: k
+	};
+	for (const k of required) if (!(k in value)) return {
+		ok: false,
+		reason: "missing-key",
+		detail: k
+	};
+	return fine;
+}
+var LISTING_REQUIRED = [
+	"ref",
+	"sequence",
+	"digest",
+	"urls",
+	"title",
+	"tagline"
+];
+var LISTING_OPTIONAL = [
+	"category",
+	"developer",
+	"submitter",
+	"repo",
+	"support"
+];
+/** Checks one entry of `apps`, which is also the whole of a `listing.json`. */
+function checkAppListing(value) {
+	if (!isObject(value)) return {
+		ok: false,
+		reason: "bad-field",
+		detail: "A listing is not an object"
+	};
+	const keys = keysOf(value, LISTING_REQUIRED, LISTING_OPTIONAL);
+	if (!keys.ok) return keys;
+	const bad = (field) => ({
+		ok: false,
+		reason: "bad-field",
+		detail: `apps: ${field}`
+	});
+	if (!isAppRef(value.ref)) return bad("ref");
+	if (!isCount(value.sequence, 1)) return bad("sequence");
+	if (!isAppHash(value.digest)) return bad("digest");
+	const urls = value.urls;
+	if (!Array.isArray(urls) || urls.length < 1 || urls.length > APP_STORE_LIMITS.urls || !urls.every(isAppUrl)) return bad("urls");
+	if (!isLine(value.title, APP_STORE_LIMITS.title, 1)) return bad("title");
+	if (!isLine(value.tagline, APP_STORE_LIMITS.tagline, 1)) return bad("tagline");
+	for (const k of [
+		"category",
+		"developer",
+		"submitter"
+	]) if (value[k] !== void 0 && !isLine(value[k], APP_STORE_LIMITS.label, 1)) return bad(k);
+	for (const k of ["repo", "support"]) if (value[k] !== void 0 && !isAppUrl(value[k])) return bad(k);
+	return fine;
+}
+function checkRemoval(value) {
+	if (!isObject(value)) return {
+		ok: false,
+		reason: "bad-field",
+		detail: "A removal is not an object"
+	};
+	const keys = keysOf(value, [
+		"ref",
+		"digest",
+		"reason",
+		"at"
+	], []);
+	if (!keys.ok) return keys;
+	if (!isAppRef(value.ref) || !isAppHash(value.digest) || !isLine(value.reason, APP_STORE_LIMITS.reason, 1) || !isCount(value.at, 0)) return {
+		ok: false,
+		reason: "bad-field",
+		detail: "removed: not {ref, digest, reason, at}"
+	};
+	return fine;
+}
+var STORE_REQUIRED = [
+	"ghostlyStore",
+	"key",
+	"name",
+	"kind",
+	"sequence",
+	"expires",
+	"apps",
+	"removed",
+	"revoked"
+];
+/**
+* Checks an index's fields and bounds, and every revocation it carries (one that does not verify refuses the index:
+* the store copied it, so a broken one is the store's fault). The signature and `expires` are `readAppStore`'s.
+*/
+function checkAppStoreIndex(value) {
+	if (!isObject(value)) return {
+		ok: false,
+		reason: "bad-field",
+		detail: "The index is not an object"
+	};
+	if (value.ghostlyStore !== void 0 && value.ghostlyStore !== 1) return {
+		ok: false,
+		reason: "unsupported-format",
+		detail: "ghostlyStore is not 1"
+	};
+	const keys = keysOf(value, STORE_REQUIRED, ["description"]);
+	if (!keys.ok) return keys;
+	const bad = (field) => ({
+		ok: false,
+		reason: "bad-field",
+		detail: field
+	});
+	if (!isAppKey(value.key)) return bad("key");
+	if (!isLine(value.name, APP_STORE_LIMITS.name, 1)) return bad("name");
+	if (value.description !== void 0 && !isText(value.description, APP_STORE_LIMITS.description)) return bad("description");
+	if (!APP_STORE_KINDS.includes(value.kind)) return bad("kind");
+	if (!isCount(value.sequence, 1)) return bad("sequence");
+	if (!isCount(value.expires, 0)) return bad("expires");
+	const { apps, removed, revoked } = value;
+	if (!Array.isArray(apps) || apps.length > APP_STORE_LIMITS.apps) return bad("apps");
+	const refs = /* @__PURE__ */ new Set();
+	for (const listing of apps) {
+		const checked = checkAppListing(listing);
+		if (!checked.ok) return checked;
+		const ref = listing.ref;
+		if (refs.has(ref)) return {
+			ok: false,
+			reason: "duplicate-app",
+			detail: ref
+		};
+		refs.add(ref);
+	}
+	if (!Array.isArray(removed) || removed.length > APP_STORE_LIMITS.removed) return bad("removed");
+	for (const entry of removed) {
+		const checked = checkRemoval(entry);
+		if (!checked.ok) return checked;
+	}
+	if (!Array.isArray(revoked) || revoked.length > APP_STORE_LIMITS.revoked) return bad("revoked");
+	for (const entry of revoked) {
+		const read = readAppRevocation(entry);
+		if (!read.ok) return {
+			ok: false,
+			reason: "bad-revocation",
+			detail: read.detail ?? read.reason
+		};
+	}
+	return fine;
+}
+/**
+* Reads `ghostly-store.json` with its `ghostly-store.sig`, in this order: size, JSON, canonical bytes, fields and
+* revocations, the signature statement, the key the reader holds for this store (when it holds one), the signature,
+* then `expires` against `now` (seconds): more than 90 days ahead is refused, past is `expired`.
+*/
+function readAppStore(indexBytes, sigBytes, now, heldKey) {
+	if (indexBytes.length > APP_STORE_LIMITS.indexBytes) return {
+		ok: false,
+		reason: "too-large"
+	};
+	const read = readCanonicalJson(indexBytes);
+	if (!read.ok) return read;
+	const checked = checkAppStoreIndex(read.value);
+	if (!checked.ok) return checked;
+	const index = read.value;
+	const statement = readAppSignature(sigBytes);
+	if (!statement.ok) return statement;
+	if (heldKey !== void 0 && index.key !== heldKey) return {
+		ok: false,
+		reason: "store-key",
+		detail: "Another key than the store's"
+	};
+	const signed = verifyAppSignature(APP_PREFIXES.store, indexBytes, statement.signature, index.key);
+	if (!signed.ok) return signed;
+	if (index.expires > now + APP_STORE_LIMITS.expiresAheadS) return {
+		ok: false,
+		reason: "expires-too-far"
+	};
+	return {
+		ok: true,
+		store: {
+			index,
+			digest: toBase64Url(sha256(indexBytes)),
+			expired: index.expires < now
+		}
+	};
+}
+/** Signs an index with the store key: its canonical bytes and the `ghostly-store.sig` bytes. Throws on a bad index. */
+async function signAppStore(index, signer) {
+	if (index.key !== toZ32(signer.publicKey)) throw new Error("A store index is signed by its own key");
+	const checked = checkAppStoreIndex(JSON.parse(JSON.stringify(index)));
+	if (!checked.ok) throw new Error(`Not a valid store index (${checked.reason}${checked.detail ? `: ${checked.detail}` : ""})`);
+	const { bytes, signature } = await signAppObject(APP_PREFIXES.store, index, signer);
+	return {
+		indexBytes: bytes,
+		sigBytes: canonicalJsonBytes(signature),
+		signature
+	};
+}
+//#endregion
+//#region ../core/src/appUpdates.ts
+function appUpdateDecision(installed, candidate) {
+	if (installed.ref !== candidate.ref) return "other-app";
+	if (candidate.sequence > installed.sequence) return "update";
+	if (candidate.sequence < installed.sequence) return "rollback";
+	return candidate.digest === installed.digest ? "same" : "equivocation";
+}
+/** The permissions an update adds: when there is any, the update waits for the person, who sees only these. */
+function addedAppPermissions(granted, requested) {
+	return requested.filter((p) => !granted.includes(p));
+}
+function planAppUpdate(installed, candidate) {
+	const decision = appUpdateDecision(installed, candidate);
+	if (decision !== "update") return {
+		action: "refuse",
+		decision
+	};
+	const added = addedAppPermissions(installed.permissions, candidate.permissions);
+	return added.length ? {
+		action: "ask",
+		added
+	} : { action: "install" };
+}
+/**
+* The revocation that stops a version, or null: one signed by the app's own publisher (a reader verified it) that names
+* its digest, or reaches its `sequence` with `upTo`.
+*/
+function appRevocationFor(version, revocations) {
+	const publisher = appRefPublisher(version.ref);
+	for (const r of revocations) {
+		const s = r.statement;
+		if (s.app !== version.ref || r.signature.key !== publisher) continue;
+		if ("digests" in s ? s.digests.includes(version.digest) : version.sequence <= s.upTo) return r;
+	}
+	return null;
+}
+function checkAppBeforeRun(version, stores, revocations = []) {
+	const revocation = appRevocationFor(version, [...revocations, ...stores.flatMap((s) => s.revoked)]);
+	if (revocation) return {
+		status: "revoked",
+		revocation
+	};
+	const by = stores.flatMap((s) => s.removed.filter((r) => r.ref === version.ref && r.digest === version.digest).map((r) => ({
+		store: s.key,
+		name: s.name,
+		reason: r.reason,
+		at: r.at
+	})));
+	return by.length ? {
+		status: "removed",
+		by
+	} : { status: "ok" };
+}
+function appStoreDecision(held, read) {
+	if (!held) return "new";
+	if (held.key !== read.key) return "other-key";
+	if (read.sequence > held.sequence) return "update";
+	if (read.sequence < held.sequence) return "rollback";
+	return read.digest === held.digest ? "same" : "equivocation";
+}
+//#endregion
+export { parseSshSignature as $, parseLocalTarget as $a, parseLinkPreview as $i, GROUP_SIGNAL_FRAME as $n, readHandoffPake as $o, EDIT_CAPABILITY as $r, readTurnPacket as $s, TEST_USDT_FAUCET_AMOUNT as $t, knockIdentity as A, APP_STATEMENT_LIMITS as Aa, toZ32 as Ac, irohDescriptor as Ai, normalizeDomain as An, handoffAttemptFailed as Ao, TYPING_REFRESH_MS as Ar, encodeInviteCode as As, didWebFile as At, GROUP_READ_NOTE as B, canonicalJsonBytes as Ba, sanitizeFileName as Bi, decodeBolt11 as Bn, handoffManifestFrames as Bo, readPin as Br, devicePingFrame as Bs, strictBase64Url as Bt, communityHasFrame as C, statusCardText as Ca, verify as Cc, revokesIdentity as Ci, decodeDnsResponse as Cn, HANDOFF_PAKE as Co, readLobby as Cr, verifyEnrollProof as Cs, DidError as Ct, decodeGroupEntryLink as D, receivedTimestamp as Da, fromBase64Url as Dc, validExternalKey as Di, encodeDnsQuery as Dn, HANDOFF_VERIFIED as Do, transferEnded as Dr, OwnInviteError as Ds, didJwsAlg as Dt, KNOCK_TTL_MS as E, heardTime as Ea, bytesEqual as Ec, emptyProofLedger as Ei, domainWellKnownFile as En, HANDOFF_TIMINGS as Eo, FILE_LIMITS as Er, readDeviceInvite as Es, didGhostlyServiceEntry as Et, GroupWakeLimiter as F, isAppRef as Fa, DHT_FILE_CAPABILITY as Fi, wellKnownUrl as Fn, handoffContextProof as Fo, PIN_LIMITS as Fr, HANDOFF_CAPABILITY as Fs, parseDid as Ft, carryMentions as G, verifyCommitSignature as Ga, fileMessageText as Gi, isFederationId as Gn, handoffStreamKey as Go, parseWakeFrame as Gr, TURN_RAISE_READ_TIMEOUT_MS as Gs, resolveDidDht as Gt, COMMUNITY_EDIT_FRAME as H, MAX_GROUP_CHAIN as Ha, PLAYABLE_AUDIO as Hi, cashuRequestPayload as Hn, handoffPakeFrame as Ho, WakeLimiter as Hr, seedSigner as Hs, didDhtFromPublicKey as Ht, groupWakeFrame as I, readAppRevocations as Ia, dhtFileId as Ii, requestLnurlInvoice as In, handoffDataFrame as Io, mayPin as Ir, deviceEchoFrame as Is, parseDidDocument as It, groupName as J, EXPECT_PEER_MS as Ja, parseVideoMeta as Ji, GhostLink as Jn, readHandoffAck as Jo, checkPushEndpoint as Jr, turnPutSummary as Js, EVM_TEST_CHAINS as Jt, parseCommunityEdit as K, edgeParams as Ka, parseVoiceMeta as Ki, parseCashuRequestPayload as Kn, handoffVersions as Ko, relayRequest as Kr, TURN_SETTLE_MS as Ks, signDidDhtPacket as Kt, groupWakes as L, signAppObject as La, parseImageMeta as Li, resolveLightningDestination as Ln, handoffDigest as Lo, nextPinNumber as Lr, deviceEchoNonce as Ls, parseDidSignaturePaste as Lt, mergeKnocks as M, appRef as Ma, utf8Encode as Mc, DHT_FILE_TOO_LARGE as Mi, recordsFromWellKnown as Mn, handoffBusyFrame as Mo, sanitizeTypingStatus as Mr, inviteOwnership as Ms, didWebFileUrl as Mt, readKnocks as N, checkAppRevokeStatement as Na, DHT_MESSAGE_TTL as Ni, recordsName as Nn, handoffCancelFrame as No, typingActivity as Nr, DEVICES_CAPABILITY as Ns, didWebHost as Nt, encodeGroupEntryLink as O, shownTime as Oa, randomBytes as Oc, TRANSPORTS as Oi, isPublicAddress as On, filePartName as Oo, transferStalled as Or, createChatInvite as Os, didSignedMessages as Ot, GROUP_WAKE_FRAME as P, isAppKey as Pa, peekDhtMailbox as Pi, txtValue as Pn, handoffContext as Po, GROUP_PIN_FRAME as Pr, ENROLL_CAPABILITY as Ps, normalizeDid as Pt, parseSshPublicKey as Q, formatLocalTarget as Qa, dhtEditId as Qi, CarriedTransport as Qn, readHandoffHello as Qo, BUTTONS_CAPABILITY as Qr, nextTurnPosition as Qs, SEPOLIA_TEST_USDT_FAUCET as Qt, parseGroupWakeFrame as R, signAppRevocation as Ra, readImageMeta as Ri, engineError as Rn, handoffEphemeral as Ro, pinIsNewer as Rr, deviceKeyZ32 as Rs, signingKeys as Rt, GROUP_READ_NOTE_COMMUNITY as S, sameButtonText as Sa, publicKeyFromZ32 as Sc, receivedIdentityStatus as Si, DOMAIN_FILE_MAX_BYTES as Sn, HANDOFF_OFFER as So, readBeaconHead as Sr, readEnrollHello as Ss, DID_JWS_MAX_LENGTH as St, encodeCommunityLink as T, claimedTime as Ta, sanitizeAvatar as Tc, PeerProofs as Ti, domainTxtRecord as Tn, HANDOFF_REQUEST as To, ChatFiles as Tr, deviceInviteJoinerParams as Ts, checkDidSignature as Tt, GROUP_EDIT_FRAME as U, MEMBER_KEY as Ua, VOICE_LIMITS as Ui, fedimintRequestPayload as Un, handoffReleaseFrame as Uo, deviceWakeRequest as Ur, webCryptoSigner as Us, encodeDidDhtDeactivated as Ut, GroupSession as V, GROUP_MEMBER_CAP as Va, sanitizeMime as Vi, ENDPOINT as Vn, handoffOfferFrame as Vo, WAKE_CALL_INTERVAL_MS as Vr, newDeviceSetSecret as Vs, didDhtDocument as Vt, GROUP_EDIT_TEXT_BYTES as W, rosterHas as Wa, baseMime as Wi, findEndpoint as Wn, handoffRetryAfter as Wo, newWakeToken as Wr, TURN_PUT_WINDOW_MS as Ws, encodeDidDhtPacket as Wt, SSHSIG_NAMESPACE as X, presenceSeenAt as Xa, EDIT_RATE_WINDOW_MS as Xi, LIVENESS_PING_MS as Xn, readHandoffDone as Xo, chatAppId as Xr, TURN_MAX as Xs, PaymentPreflightError as Xt, SSHSIG_MAX_ARMOR as Y, RELAY_POLL_INTERVALS as Ya, EDIT_BUFFER_MS as Yi, INVITE_TAKEN as Yn, readHandoffCancel as Yo, vapidKeysMatch as Yr, TURN_LAST_SEQUENCE as Ys, ONCHAIN_PROVIDER as Yt, SshSigError as Z, GhostlyHttpError as Za, RateWindow as Zi, pairedMessageFrame as Zn, readHandoffHave as Zo, isAppVersion as Zr, firstDeviceSetSecret as Zs, SEPOLIA_TEST_USDT as Zt, groupTypingEpoch as _, ITEM_STATES as _a, openRelayPayload as _c, boundVerifiedIdentity as _i, pubkyProofCapability as _n, HANDOFF_ACK as _o, mergeLobby as _r, enrollDoneFrame as _s, shortAtprotoDid as _t, checkAppStoreIndex as a, ReactionWindow as aa, RelayTransport as ac, HoldRefusedError as ai, validatePaymentTarget as an, RTC_CONFIG as ao, MESH_HUBS as ar, readSetUpdate as as, decodeAnyBitcoinAddress as at, COMMUNITY_LIMITS as b, buttonLabelClash as ba, identityFromSeed as bc, identityStatement as bi, homeserverWebEndpoint as bn, HANDOFF_HAVE as bo, rankHubs as br, enrollProofFrame as bs, DID_DOCUMENT_MAX_BYTES as bt, APP_BUNDLE_LIMITS as c, reactionEmoji as ca, setLinkTraceSink as cc, CapsExchange as ci, SPARK_PROVIDER as cn, callRtcConfig as co, pickMeshHubs as cr, signTombstone as cs, ATPROTO_PROOF_COLLECTION as ct, assembleAppBundle as d, validReactionNumber as da, isDiscoveryBudgetError as dc, dialDescriptors as di, isBitcoinAddress as dn, parseCallSignal as do, beaconRecords as dr, ENROLL_GRANT as ds, atprotoProofRecord as dt, forwardedAgain as ea, signTurnPacket as ec, UPGRADE_CAPABILITY as ei, USDT_PUBLIC_RPC as en, webLocalFetch as eo, SIGNAL_FRESH_MS as er, readHandoffTurnFrame as es, sameSshKey as et, checkAppManifest as f, wireReaction as fa, withRequestOptions as fc, IDENTITY_MAX_EVIDENCE as fi, PUBKY_PROOF_MAX_BYTES as fn, signalHasVideo as fo, doorHubs as fr, ENROLL_HELLO as fs, atprotoProofRkey as ft, GroupTypingBoard as g, BUTTON_ID as ga, newerPacket as gc, IdentityExchange as gi, normalizePubkyKey as gn, serviceIdFromName as go, mergeBeacon as gr, enrollDigits as gs, parseAtprotoDidDocument as gt, GROUP_TYPING_FRAME as h, replySnippet as ha, createRelayPayload as hc, IdentityCheckUnavailable as hi, newPubkyProofFolder as hn, LEGACY_SERVICES as ho, lobbyRecords as hr, enrollCancelReason as hs, normalizeAtprotoHandle as ht, planAppUpdate as i, REACTION_LIMITS as ia, DEFAULT_RELAYS as ic, HoldKeys as ii, formatPaymentAmount as in, CALL_SIGNAL_MAX_AGE_MS as io, readGroupSignal as ir, SET_UPDATE as is, BitcoinAddressError as it, knockRecords as j, appFingerprint as ja, utf8Decode as jc, irohRelayUrl as ji, recordsFromTxt as jn, handoffAttemptSucceeded as jo, TypingSender as jr, inviteLink as js, didWebFileNames as jt, entryParams as k, APP_PREFIXES as ka, toBase64Url as kc, automaticTransport as ki, nip05RootKey as kn, handoffAttemptAllowed as ko, TYPING_KINDS as kr, decodeInviteCode as ks, didWebDocumentUrl as kt, APP_BUNDLE_MAGIC as l, reactionIsNewer as la, traceLink as lc, DHT_TEXT_CAPABILITY as li, sparkAddressKind as ln, callSignalHeardAt as lo, COMMUNITY_TOPOLOGY as lr, verifySetUpdate as ls, ATPROTO_PROOF_SCOPE as lt, readAppBundle as m, readReply as ma, RELAY_PAYLOAD_MAX_BYTES as mc, IDENTITY_REVOCATION_LABEL as mi, isPubkyProofFolder as mn, HTTP_SERVICE_PROTO as mo, lobbyKeys as mr, enrollCancelFrame as ms, isAtprotoDid as mt, appUpdateDecision as n, COMMUNITY_REACTION_FRAME as na, turnKeys as nc, HOLD_DATED_BACK_MS as ni, assertTokenUnits as nn, decodeControl as no, SIGNAL_REPLY_MS as nr, sealHandoffPiece as ns, verifySshSignature as nt, readAppStore as o, nextReactionNumber as oa, currentRelays as oc, newMailbox as oi, walletNetworkOf as on, answersOffer as oo, mayBeHub as or, setAckFrame as os, ATPROTO_DECLARED_SCOPE as ot, isAppUrl as p, pairedReplyAuthor as pa, PacketTooLargeError as pc, IDENTITY_MAX_VALIDITY as pi, isPubkyKey as pn, emptyLinkRecords as po, freshHubs as pr, ENROLL_PROOF as ps, checkAtprotoProofRecord as pt, mentionsMember as q, DirectPathWatch as qa, voicePeaksOf as qi, parseFedimintRequestPayload as qn, newHandoffId as qo, wakeRequest as qr, classifyTurnRead as qs, ETHEREUM_USDT as qt, checkAppBeforeRun as r, GROUP_REACTION_FRAME as ra, turnName as rc, HOLD_LIMITS as ri, assertWholeSats as rn, encodeControl as ro, groupSignalFrame as rr, SET_ACK as rs, verifyBitcoinMessage as rt, signAppStore as s, queueReaction as sa, normalizeRelayUrl as sc, readManifest as si, SPARK_NETWORKS as sn, buildSdpFromSignal as so, meshHubs as sr, setUpdateFrame as ss, ATPROTO_FULL_SCOPE as st, appStoreDecision as t, readForwarded as ta, signTurnRelease as tc, HOLD_CAPABILITY as ti, WALLET_NETWORKS as tn, LIMITS as to, SIGNAL_HOLD_MS as tr, readHandoffVerified as ts, sshSignCommand as tt, appDigest as u, readReaction as ua, budgetRetryMs as uc, capsDescriptors as ui, sparkInvoiceDetails as un, extractParamsFromSdp as uo, beaconKeys as ur, ENROLL_DONE as us, atprotoDidMethod as ut, openGroupTyping as v, RUN_RESULTS as va, parseRelayPayload as vc, emptyIdentityLedger as vi, pubkyProofFile as vn, HANDOFF_CANCEL as vo, newerHead as vr, enrollGrantFrame as vs, AtprotoProofError as vt, decodeCommunityLink as w, arrivalKey as wa, MAX_AVATAR_LENGTH as wc, lastSharedWithMe as wi, dnsProofName as wn, HANDOFF_PIECE_BYTES as wo, shouldBeHub as wr, createDeviceInvite as ws, checkDidJws as wt, CommunitySession as x, checkStatusCard as xa, identityFromSeedB64 as xc, newIdentityBinding as xi, pubkyHomeserverOf as xn, HANDOFF_HELLO as xo, readBeacon as xr, readEnrollGrant as xs, DID_FILE_MAX_BYTES as xt, sealGroupTyping as y, STATUS_CARD_LIMITS as ya, createIdentity as yc, identityRevocationValue as yi, pubkyProofPath as yn, HANDOFF_DONE as yo, pickHubs as yr, enrollHelloFrame as ys, verifyAtprotoRecordProof as yt, GROUP_REACTED_FRAME as z, canonicalJson as za, safeBlobType as zi, engineText as zn, handoffHelloFrame as zo, pinNumberHolds as zr, deviceLinkPairing as zs, staticDidDocument as zt };
 
-//# sourceMappingURL=src-C_E99PGx.js.map
+//# sourceMappingURL=src-C6qQYrAH.js.map