@ghostlytools/cli 1.1.4 → 1.1.5

package/dist/assets/{src-K3NijMq-.js → src-C6qQYrAH.js}

@@ -1961,13 +1961,13 @@ function turnName(name) {
 	}
 	return out;
 }
-function u32$2(value) {
+function u32$3(value) {
 	return Uint8Array.of(value >>> 24 & 255, value >>> 16 & 255, value >>> 8 & 255, value & 255);
 }
 /** What a release signs: `"ghostly-turn-release" || turnAddress(32) || turn(4) || toKey(32) || H(32)`. */
 function turnReleaseMessage(address, turn, toKey, h) {
 	if (address.length !== 32 || toKey.length !== 32 || h.length !== 32) throw new Error("A release names 32-byte values");
-	return concatBytes$1(RELEASE_DOMAIN, address, u32$2(turn), toKey, h);
+	return concatBytes$1(RELEASE_DOMAIN, address, u32$3(turn), toKey, h);
 }
 /** What the author signs: `"ghostly-turn" || turnAddress(32) || body[0..310]`. */
 function turnSignedMessage(address, unsigned) {
@@ -1985,8 +1985,8 @@ function encodeTurnFields(fields) {
 	if (tombstone ? fields.active !== 255 : !held(fields.active)) throw new Error(tombstone ? "A tombstone names no active device" : "The active device has no slot");
 	const body = /* @__PURE__ */ new Uint8Array(310);
 	body[OFFSET.version] = 1;
-	body.set(u32$2(fields.turn), OFFSET.turn);
-	body.set(u32$2(fields.rev).subarray(1), OFFSET.rev);
+	body.set(u32$3(fields.turn), OFFSET.turn);
+	body.set(u32$3(fields.rev).subarray(1), OFFSET.rev);
 	body[OFFSET.author] = fields.author;
 	body[OFFSET.active] = fields.active;
 	body[OFFSET.count] = fields.slots.filter(Boolean).length;
@@ -2238,7 +2238,7 @@ var TURN_PUT_WINDOW_MS = 1e4;
 var TURN_RAISE_READ_TIMEOUT_MS = 5e3;
 /** `T`: how long a device that raised the turn waits, from the end of its put, before the read that may make it active. `T >= P + 2V`. */
 var TURN_SETTLE_MS = 3e4;
-function compareBytes$2(a, b) {
+function compareBytes$3(a, b) {
 	for (let i = 0; i < Math.min(a.length, b.length); i++) if (a[i] !== b[i]) return a[i] - b[i];
 	return a.length - b.length;
 }
@@ -2249,7 +2249,7 @@ function compareBytes$2(a, b) {
 * reader still agrees.
 */
 function keptAtEqualSequence(a, b) {
-	return compareBytes$2(a.record.instance, b.record.instance) || compareBytes$2(a.record.body, b.record.body) || compareBytes$2(a.payload, b.payload);
+	return compareBytes$3(a.record.instance, b.record.instance) || compareBytes$3(a.record.body, b.record.body) || compareBytes$3(a.payload, b.payload);
 }
 var kept = (f) => ({
 	record: f.read.record,
@@ -3368,15 +3368,15 @@ var VERSION_TEXT = /^[0-9A-Za-z.+_-]{1,40}$/;
 var PART = /^(db\/[A-Za-z0-9_-]{1,64}|local|devices|file\/[A-Za-z0-9_-]{43}|wallet\/[a-z0-9-]{1,32}\/[A-Za-z0-9_.-]{1,100})$/;
 /** The largest part the reader accepts: a file of WISP 501 has no limit beneath this. */
 var MAX_PART = 2 ** 50;
-var isCount = (value, max = Number.MAX_SAFE_INTEGER) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0 && value <= max;
-var isText = (value, pattern) => typeof value === "string" && pattern.test(value);
+var isCount$1 = (value, max = Number.MAX_SAFE_INTEGER) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0 && value <= max;
+var isText$2 = (value, pattern) => typeof value === "string" && pattern.test(value);
 var isHandoffPartName = (name) => typeof name === "string" && PART.test(name);
 /** The part a file is: `file/<its SHA-256, base64url>`. */
 var filePartName = (sha256B64) => `file/${sha256B64}`;
 /** The digest a file part names, or null for any other part. */
 var filePartDigest = (name) => name.startsWith("file/") && DIGEST$1.test(name.slice(5)) ? name.slice(5) : null;
 function isPart(value) {
-	return Array.isArray(value) && value.length === 3 && isHandoffPartName(value[0]) && isCount(value[1], MAX_PART) && isText(value[2], DIGEST$1) && (filePartDigest(value[0]) === null || filePartDigest(value[0]) === value[2]);
+	return Array.isArray(value) && value.length === 3 && isHandoffPartName(value[0]) && isCount$1(value[1], MAX_PART) && isText$2(value[2], DIGEST$1) && (filePartDigest(value[0]) === null || filePartDigest(value[0]) === value[2]);
 }
 /** Names compared as UTF-8 byte strings, as `H` sorts them. */
 function compareNames(a, b) {
@@ -3404,7 +3404,7 @@ function sortParts(parts) {
 * and every part the taker already held and keeps, as `[name, size, sha256]` sorted by name. Keys are base64url.
 */
 function handoffDigest(turn, fromKey, toKey, parts) {
-	if (!isCount(turn, TURN_MAX)) throw new Error("A turn is at most 2^32 - 2");
+	if (!isCount$1(turn, TURN_MAX)) throw new Error("A turn is at most 2^32 - 2");
 	if (fromKey.length !== 32 || toKey.length !== 32) throw new Error("A device signing key is 32 bytes");
 	for (const part of parts) if (!isPart(part)) throw new Error("A part is [name, size, sha256]");
 	return sha256(utf8Encode(JSON.stringify([
@@ -3418,7 +3418,7 @@ function handoffDigest(turn, fromKey, toKey, parts) {
 /** What `handoff-verified` signs: `["ghostly-handoff-verified", turnAddress, N + 1, H]`, the bytes in base64url. */
 function handoffVerifiedMessage(turnAddress, turn, h) {
 	if (turnAddress.length !== 32 || h.length !== 32) throw new Error("A turn address and H are 32 bytes");
-	if (!isCount(turn, TURN_MAX)) throw new Error("A turn is at most 2^32 - 2");
+	if (!isCount$1(turn, TURN_MAX)) throw new Error("A turn is at most 2^32 - 2");
 	return utf8Encode(JSON.stringify([
 		"ghostly-handoff-verified",
 		toBase64Url(turnAddress),
@@ -3470,7 +3470,7 @@ function handoffStreamKey(ownSecret, peerPublic, k, transcriptHash) {
 * does not open there. (XSalsa20-Poly1305 takes no associated data; the header inside the box does that job.)
 */
 function pieceHeader(part, offset) {
-	if (!isCount(offset, MAX_PART)) throw new Error("A piece's offset is a whole number of bytes");
+	if (!isCount$1(offset, MAX_PART)) throw new Error("A piece's offset is a whole number of bytes");
 	const header = /* @__PURE__ */ new Uint8Array(16);
 	header.set(sha256(utf8Encode(`ghostly-handoff-piece/1${part}`)).subarray(0, 8), 0);
 	new DataView(header.buffer).setBigUint64(8, BigInt(offset));
@@ -3484,7 +3484,7 @@ function sealHandoffPiece(key, part, offset, piece, nonce = randomBytes(24)) {
 	if (key.length !== 32 || nonce.length !== 24) throw new Error("A stream key is 32 bytes and a nonce 24");
 	return concatBytes$1(nonce, xsalsa20poly1305(key, nonce).encrypt(concatBytes$1(pieceHeader(part, offset), piece)));
 }
-var isPins = (value) => !!value && typeof value === "object" && !Array.isArray(value) && Object.keys(value).length <= 16 && Object.entries(value).every(([type, version]) => /^[a-z0-9-]{1,32}$/.test(type) && isText(version, VERSION_TEXT));
+var isPins = (value) => !!value && typeof value === "object" && !Array.isArray(value) && Object.keys(value).length <= 16 && Object.entries(value).every(([type, version]) => /^[a-z0-9-]{1,32}$/.test(type) && isText$2(version, VERSION_TEXT));
 function handoffHelloFrame(hello) {
 	return {
 		t: HANDOFF_HELLO,
@@ -3493,12 +3493,12 @@ function handoffHelloFrame(hello) {
 }
 function readHandoffHello(frame) {
 	if (frame.t !== "handoff-hello" || frame.v !== 1) return null;
-	if (!isText(frame.e, KEY$3) || fromBase64Url(frame.e).length !== 32) return null;
-	if (!isText(frame.app, VERSION_TEXT) || !isCount(frame.db, 1e6) || !isPins(frame.pins)) return null;
+	if (!isText$2(frame.e, KEY$3) || fromBase64Url(frame.e).length !== 32) return null;
+	if (!isText$2(frame.app, VERSION_TEXT) || !isCount$1(frame.db, 1e6) || !isPins(frame.pins)) return null;
 	if (typeof frame.room !== "number" || !Number.isSafeInteger(frame.room) || frame.room < -1) return null;
 	if (typeof frame.metered !== "boolean") return null;
-	if (frame.later !== void 0 && !isCount(frame.later)) return null;
-	if (frame.id !== void 0 && !isText(frame.id, ID$5)) return null;
+	if (frame.later !== void 0 && !isCount$1(frame.later)) return null;
+	if (frame.id !== void 0 && !isText$2(frame.id, ID$5)) return null;
 	const kind = DEVICE_KINDS.includes(frame.kind) ? frame.kind : "web";
 	return {
 		v: 1,
@@ -3524,8 +3524,8 @@ var handoffOfferFrame = (turn, id, bytes) => ({
 });
 function readHandoffTurnFrame(frame) {
 	if (frame.t !== "handoff-request" && frame.t !== "handoff-offer") return null;
-	if (!isCount(frame.turn, TURN_MAX) || !isText(frame.id, ID$5)) return null;
-	if (frame.t === "handoff-offer") return isCount(frame.bytes) ? {
+	if (!isCount$1(frame.turn, TURN_MAX) || !isText$2(frame.id, ID$5)) return null;
+	if (frame.t === "handoff-offer") return isCount$1(frame.bytes) ? {
 		turn: frame.turn,
 		id: frame.id,
 		bytes: frame.bytes
@@ -3558,8 +3558,8 @@ function readHandoffPake(frame) {
 		n: 3,
 		wrong: true
 	} : null;
-	if (!isText(frame.m, B64$4) || !frame.m.length || frame.m.length > 4096) return null;
-	if (frame.n === 3 && !isText(frame.c, KEY$3)) return null;
+	if (!isText$2(frame.m, B64$4) || !frame.m.length || frame.m.length > 4096) return null;
+	if (frame.n === 3 && !isText$2(frame.c, KEY$3)) return null;
 	return {
 		n: frame.n,
 		m: frame.m,
@@ -3567,12 +3567,12 @@ function readHandoffPake(frame) {
 	};
 }
 function readHandoffHave(frame) {
-	if (frame.t !== "handoff-have" || !Array.isArray(frame.d) || frame.d.length > 300 || !frame.d.every((d) => isText(d, DIGEST$1))) return null;
+	if (frame.t !== "handoff-have" || !Array.isArray(frame.d) || frame.d.length > 300 || !frame.d.every((d) => isText$2(d, DIGEST$1))) return null;
 	const p = {};
 	if (frame.p !== void 0) {
 		if (!frame.p || typeof frame.p !== "object" || Array.isArray(frame.p) || Object.keys(frame.p).length > 300) return null;
 		for (const [name, offset] of Object.entries(frame.p)) {
-			if (!isHandoffPartName(name) || !isCount(offset, MAX_PART)) return null;
+			if (!isHandoffPartName(name) || !isCount$1(offset, MAX_PART)) return null;
 			p[name] = offset;
 		}
 	}
@@ -3615,7 +3615,7 @@ var handoffDataFrame = (part, offset, sealed) => ({
 	d: toBase64Url(sealed)
 });
 function readHandoffAck(frame) {
-	if (frame.t !== "handoff-ack" || !isHandoffPartName(frame.p) || !isCount(frame.o, MAX_PART)) return null;
+	if (frame.t !== "handoff-ack" || !isHandoffPartName(frame.p) || !isCount$1(frame.o, MAX_PART)) return null;
 	return {
 		part: frame.p,
 		offset: frame.o
@@ -3623,7 +3623,7 @@ function readHandoffAck(frame) {
 }
 /** `H` of a `handoff-verified` that B's key signed for this turn address and turn, or null. */
 function readHandoffVerified(frame, turnAddress, turn, takerKey) {
-	if (frame.t !== "handoff-verified" || !isText(frame.h, DIGEST$1) || !isText(frame.s, SIGNATURE)) return null;
+	if (frame.t !== "handoff-verified" || !isText$2(frame.h, DIGEST$1) || !isText$2(frame.s, SIGNATURE)) return null;
 	const h = fromBase64Url(frame.h);
 	try {
 		return verify(fromBase64Url(frame.s), handoffVerifiedMessage(turnAddress, turn, h), takerKey) ? h : null;
@@ -3636,7 +3636,7 @@ var handoffReleaseFrame = (release) => ({
 	...release
 });
 function readHandoffDone(frame) {
-	return frame.t === "handoff-done" && isCount(frame.seq) ? frame.seq : null;
+	return frame.t === "handoff-done" && isCount$1(frame.seq) ? frame.seq : null;
 }
 /**
 * Whether two devices can hand over (WISP 06 § Versions), seen from the taker: a taker whose database is older than
@@ -6141,6 +6141,8 @@ var DataLink = class {
 	disconnectTimer = null;
 	/** The offer this side answered in the current attempt, when it took it (this clock), and how many times it answered it again. */
 	answered = null;
+	/** Answers refused since a connection last opened, each followed by a new offer at once (`ANSWER_REFUSED_REDIALS`). */
+	refusedAnswers = 0;
 	constructor(options) {
 		this.options = options;
 	}
@@ -6246,8 +6248,8 @@ var DataLink = class {
 					sdp: this.remoteSdp
 				});
 				if (this.pc === pc && this.state === "offering") this.setState("connecting");
-			} catch {
-				if (this.pc === pc) this.reset();
+			} catch (error) {
+				if (this.pc === pc) this.answerRefused(error);
 			}
 		}
 	}
@@ -6293,6 +6295,10 @@ var DataLink = class {
 	* else goes back to idle.
 	*/
 	failed() {
+		if (this.state === "offering" && this.remoteSdp) {
+			this.answerRefused("failed");
+			return;
+		}
 		const answered = this.state === "connecting" ? this.answered : null;
 		const left = answered ? CONNECT_TIMEOUT_MS - (Date.now() - answered.at) : 0;
 		const evidence = this.directEvidence();
@@ -6310,6 +6316,18 @@ var DataLink = class {
 		this.reset();
 		if (evidence) this.options.onDirect?.(evidence);
 	}
+	/** The answer to this side's offer did not go in (`ANSWER_REFUSED_REDIALS`): the attempt ends, and the caller may offer again now. */
+	answerRefused(error) {
+		const again = this.refusedAnswers < 4;
+		traceLink(this.options.myPubKeyZ32, "answer-refused", {
+			error: error instanceof Error ? error.message : String(error),
+			again
+		});
+		this.reset();
+		if (!again) return;
+		this.refusedAnswers++;
+		this.options.onAnswerReplaced?.();
+	}
 	async answer(offer) {
 		this.setState("answering");
 		this.options.setFastPoll(true);
@@ -6388,6 +6406,7 @@ var DataLink = class {
 			if (this.pc !== pc) return;
 			this.clearTimers();
 			this.answered = null;
+			this.refusedAnswers = 0;
 			this.fullGather = false;
 			this.setState("open");
 			this.options.setFastPoll(false);
@@ -6761,6 +6780,311 @@ function rememberAlone(alone, key, present) {
 }
 var GROUP_ADMIN_OFF_ERROR = "Managing this group is off on this device. Turn on Manage groups from this device first.";
 //#endregion
+//#region ../core/src/canonicalJson.ts
+/** True when `s` holds a lone UTF-16 surrogate, which I-JSON (and so JCS) does not allow. */
+function hasLoneSurrogate(s) {
+	for (let i = 0; i < s.length; i++) {
+		const c = s.charCodeAt(i);
+		if (c >= 55296 && c <= 56319) {
+			const next = s.charCodeAt(i + 1);
+			if (next >= 56320 && next <= 57343) {
+				i++;
+				continue;
+			}
+			return true;
+		}
+		if (c >= 56320 && c <= 57343) return true;
+	}
+	return false;
+}
+function write(value, depth) {
+	if (depth > 64) throw new Error("JSON nested deeper than 64 levels");
+	if (value === null) return "null";
+	if (typeof value === "boolean") return value ? "true" : "false";
+	if (typeof value === "number") {
+		if (!Number.isFinite(value)) throw new Error("JSON numbers must be finite");
+		return JSON.stringify(value);
+	}
+	if (typeof value === "string") {
+		if (hasLoneSurrogate(value)) throw new Error("A JSON string holds a lone surrogate");
+		return JSON.stringify(value);
+	}
+	if (Array.isArray(value)) return `[${value.map((v) => write(v, depth + 1)).join(",")}]`;
+	if (typeof value === "object") {
+		const record = value;
+		return `{${Object.keys(value).filter((k) => record[k] !== void 0).sort((a, b) => a < b ? -1 : a > b ? 1 : 0).map((k) => {
+			if (hasLoneSurrogate(k)) throw new Error("A JSON key holds a lone surrogate");
+			return `${JSON.stringify(k)}:${write(record[k], depth + 1)}`;
+		}).join(",")}}`;
+	}
+	throw new Error(`Not a JSON value: ${typeof value}`);
+}
+/** The canonical text of a JSON value. Throws on a value JSON cannot hold (a non-finite number, a lone surrogate). */
+function canonicalJson(value) {
+	return write(value, 0);
+}
+/** The canonical UTF-8 bytes of a JSON value. */
+function canonicalJsonBytes(value) {
+	return utf8Encode(canonicalJson(value));
+}
+/**
+* Reads bytes that must be the canonical form of a JSON value: `not-json` when they are not UTF-8 JSON, `not-canonical`
+* when writing the value again gives other bytes.
+*/
+function readCanonicalJson(bytes) {
+	let value;
+	try {
+		value = JSON.parse(utf8Decode(bytes));
+	} catch (error) {
+		return {
+			ok: false,
+			reason: "not-json",
+			detail: error instanceof Error ? error.message : String(error)
+		};
+	}
+	let again;
+	try {
+		again = canonicalJsonBytes(value);
+	} catch (error) {
+		return {
+			ok: false,
+			reason: "not-canonical",
+			detail: error instanceof Error ? error.message : String(error)
+		};
+	}
+	if (!bytesEqual(again, bytes)) return {
+		ok: false,
+		reason: "not-canonical"
+	};
+	return {
+		ok: true,
+		value
+	};
+}
+//#endregion
+//#region ../core/src/appStatements.ts
+/** The prefixes of phase 1. The others of the WISP (reports, reviews, licences, rotation, publisher proofs) come later. */
+var APP_PREFIXES = {
+	app: "ghostly-app/1",
+	store: "ghostly-store/1",
+	revoke: "ghostly-revoke/1"
+};
+var APP_STATEMENT_LIMITS = {
+	/** A signature statement's canonical bytes: 52 + 86 characters of values and the keys around them. */
+	signatureBytes: 1024,
+	/** Digests named by one revocation. */
+	revokeDigests: 64,
+	/** A revocation's reason, in characters. */
+	reason: 200,
+	/** Revocations in one `ghostly-revoke.json`. */
+	revocations: 4096
+};
+/** A z-base32 Ed25519 public key: 52 characters that decode to 32 bytes and encode back to the same text. */
+function isAppKey(value) {
+	if (typeof value !== "string" || !/^[ybndrfg8ejkmcpqxot1uwisza345h769]{52}$/.test(value)) return false;
+	const bytes = fromZ32(value);
+	return bytes.length === 32 && toZ32(bytes) === value;
+}
+/** A SHA-256 in base64url without padding: 43 characters that decode to 32 bytes and encode back to the same text. */
+function isAppHash(value) {
+	if (typeof value !== "string" || !/^[A-Za-z0-9_-]{43}$/.test(value)) return false;
+	return toBase64Url(fromBase64Url(value)) === value;
+}
+/** An app reference, `<publisher key>/<name>`. */
+var APP_NAME = /^[a-z][a-z0-9-]{0,31}$/;
+function isAppRef(value) {
+	if (typeof value !== "string") return false;
+	return value.indexOf("/") === 52 && isAppKey(value.slice(0, 52)) && APP_NAME.test(value.slice(53));
+}
+function appRef(publisher, name) {
+	return `${publisher}/${name}`;
+}
+/** The publisher key of a reference. */
+function appRefPublisher(ref) {
+	return ref.slice(0, 52);
+}
+/**
+* The publisher fingerprint people see: the first 16 z-base32 characters of the key (80 bits), in four groups.
+*/
+function appFingerprint(key) {
+	return (key.slice(0, 16).match(/.{1,4}/g) ?? []).join(" ");
+}
+/** The bytes a signature covers: the prefix, a zero byte, then the SHA-256 of the object's canonical bytes. */
+function appSignedBytes(prefix, canonical) {
+	const p = utf8Encode(prefix);
+	const out = new Uint8Array(p.length + 1 + 32);
+	out.set(p, 0);
+	out.set(sha256(canonical), p.length + 1);
+	return out;
+}
+/** Signs an object under a prefix: its canonical bytes and the signature statement. */
+async function signAppObject(prefix, value, signer) {
+	const bytes = canonicalJsonBytes(value);
+	const sig = await signer.sign(appSignedBytes(prefix, bytes));
+	return {
+		bytes,
+		signature: {
+			alg: "ed25519",
+			key: toZ32(signer.publicKey),
+			sig: toBase64Url(sig)
+		}
+	};
+}
+/**
+* Ed25519 verification as RFC 8032 writes it (`zip215: false`): canonical encodings of the point and the scalar only,
+* so every parser (this one, a Rust one with `verify_strict`) accepts exactly the same signatures.
+*/
+function strictVerify(signature, message, publicKey) {
+	try {
+		return ed25519.verify(signature, message, publicKey, { zip215: false });
+	} catch {
+		return false;
+	}
+}
+var exactKeys$1 = (value, keys, optional = []) => {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+	const have = Object.keys(value);
+	return keys.every((k) => have.includes(k)) && have.every((k) => keys.includes(k) || optional.includes(k));
+};
+/** Checks the shape of a signature statement: exactly `alg`, `key` and `sig`, a 64-byte signature. */
+function isAppSignature(value) {
+	if (!exactKeys$1(value, [
+		"alg",
+		"key",
+		"sig"
+	])) return false;
+	if (value.alg !== "ed25519" || !isAppKey(value.key)) return false;
+	return typeof value.sig === "string" && /^[A-Za-z0-9_-]{86}$/.test(value.sig) && toBase64Url(fromBase64Url(value.sig)) === value.sig;
+}
+/** Reads a signature statement from its bytes, which must be canonical. */
+function readAppSignature(bytes) {
+	if (bytes.length > APP_STATEMENT_LIMITS.signatureBytes) return {
+		ok: false,
+		reason: "bad-signature-statement",
+		detail: "Too large"
+	};
+	const read = readCanonicalJson(bytes);
+	if (!read.ok) return {
+		ok: false,
+		reason: "bad-signature-statement",
+		detail: read.reason
+	};
+	if (!isAppSignature(read.value)) return {
+		ok: false,
+		reason: "bad-signature-statement",
+		detail: "Not {alg, key, sig}"
+	};
+	return {
+		ok: true,
+		signature: read.value
+	};
+}
+/**
+* Verifies a signature over an object's canonical bytes under a prefix, made by `key`: `signature-key` when the
+* statement names another key, `bad-signature` when it does not verify.
+*/
+function verifyAppSignature(prefix, canonical, signature, key) {
+	if (!isAppSignature(signature)) return {
+		ok: false,
+		reason: "bad-signature-statement"
+	};
+	if (signature.key !== key) return {
+		ok: false,
+		reason: "signature-key"
+	};
+	return strictVerify(fromBase64Url(signature.sig), appSignedBytes(prefix, canonical), fromZ32(key)) ? { ok: true } : {
+		ok: false,
+		reason: "bad-signature"
+	};
+}
+var isSequence = (v) => typeof v === "number" && Number.isSafeInteger(v) && v >= 1;
+var isPlainLine = (v, max) => typeof v === "string" && [...v].length <= max && !/\p{Cc}/u.test(v);
+/** Checks a revocation statement's shape; the reason it is refused, or null. */
+function checkAppRevokeStatement(value) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return "Not an object";
+	const v = value;
+	const byDigests = "digests" in v;
+	if (!exactKeys$1(v, [
+		"ghostlyRevoke",
+		"app",
+		byDigests ? "digests" : "upTo"
+	], ["reason"])) return "Keys are not ghostlyRevoke, app, and exactly one of digests and upTo (reason optional)";
+	if (v.ghostlyRevoke !== 1) return "ghostlyRevoke is not 1";
+	if (!isAppRef(v.app)) return "app is not a reference";
+	if (byDigests) {
+		const d = v.digests;
+		if (!Array.isArray(d) || d.length < 1 || d.length > APP_STATEMENT_LIMITS.revokeDigests) return "digests is not 1 to 64 digests";
+		if (!d.every(isAppHash) || new Set(d).size !== d.length) return "digests holds a bad or repeated digest";
+	} else if (!isSequence(v.upTo)) return "upTo is not a sequence";
+	if (v.reason !== void 0 && !isPlainLine(v.reason, APP_STATEMENT_LIMITS.reason)) return "reason is not one line of 200 characters";
+	return null;
+}
+/** Signs a revocation with the publisher's key. */
+async function signAppRevocation(statement, signer) {
+	const problem = checkAppRevokeStatement(statement);
+	if (problem) throw new Error(`Not a revocation: ${problem}`);
+	if (toZ32(signer.publicKey) !== appRefPublisher(statement.app)) throw new Error("A revocation is signed by its app's publisher");
+	const { signature } = await signAppObject(APP_PREFIXES.revoke, statement, signer);
+	return {
+		statement,
+		signature
+	};
+}
+/**
+* Reads one signed revocation (a parsed value, from `ghostly-revoke.json` or a store index's `revoked`): its shape, then
+* the signature under `ghostly-revoke/1` by the publisher its `app` names.
+*/
+function readAppRevocation(value) {
+	if (!exactKeys$1(value, ["statement", "signature"])) return {
+		ok: false,
+		reason: "bad-revocation",
+		detail: "Keys are not statement and signature"
+	};
+	const problem = checkAppRevokeStatement(value.statement);
+	if (problem) return {
+		ok: false,
+		reason: "bad-revocation",
+		detail: problem
+	};
+	if (!isAppSignature(value.signature)) return {
+		ok: false,
+		reason: "bad-signature-statement"
+	};
+	const statement = value.statement;
+	const checked = verifyAppSignature(APP_PREFIXES.revoke, canonicalJsonBytes(statement), value.signature, appRefPublisher(statement.app));
+	if (!checked.ok) return checked;
+	return {
+		ok: true,
+		revocation: {
+			statement,
+			signature: value.signature
+		}
+	};
+}
+/**
+* Reads `ghostly-revoke.json`: canonical bytes holding a list of signed revocations. One that does not verify refuses the
+* file, as a store index's `revoked` does.
+*/
+function readAppRevocations(bytes) {
+	const read = readCanonicalJson(bytes);
+	if (!read.ok) return read;
+	if (!Array.isArray(read.value) || read.value.length > APP_STATEMENT_LIMITS.revocations) return {
+		ok: false,
+		reason: "bad-revocation",
+		detail: "Not a list of at most 4096 revocations"
+	};
+	const revocations = [];
+	for (const entry of read.value) {
+		const one = readAppRevocation(entry);
+		if (!one.ok) return one;
+		revocations.push(one.revocation);
+	}
+	return {
+		ok: true,
+		revocations
+	};
+}
+//#endregion
 //#region ../core/src/messageTime.ts
 /**
 * How far ahead of this device's clock a number a peer made from its clock may be (a pin's number, a status card's
@@ -6832,7 +7156,10 @@ var STATUS_CARD_LIMITS = {
 	/** A button's id: what a press names. */
 	buttonId: 32,
 	/** A button's label, in characters. */
-	buttonLabel: 40
+	buttonLabel: 40,
+	/** An app card's title and version, in characters (WISP 405 § An app): the manifest's bounds. */
+	appTitle: 40,
+	appVersion: 32
 };
 /** How a button looks: `primary` is the one highlighted, `danger` warns; `neutral` when none is said. */
 var BUTTON_STYLES = [
@@ -6898,8 +7225,8 @@ var sameButtonText = (a, b) => a.trim().toLowerCase() === b.trim().toLowerCase()
 * them (one line, cleaned). `at` is the button that clashes, `with` the one it clashes with.
 */
 function buttonLabelClash(buttons) {
-	const labels = buttons.map((button) => isObject$2(button) ? cardLine(button.label, Infinity) : void 0);
-	const ids = buttons.map((button) => isObject$2(button) && typeof button.id === "string" ? button.id : void 0);
+	const labels = buttons.map((button) => isObject$4(button) ? cardLine(button.label, Infinity) : void 0);
+	const ids = buttons.map((button) => isObject$4(button) && typeof button.id === "string" ? button.id : void 0);
 	for (const [at, label] of labels.entries()) {
 		if (!label) continue;
 		const twin = labels.findIndex((other, i) => i < at && !!other && sameButtonText(other, label));
@@ -6916,7 +7243,13 @@ function buttonLabelClash(buttons) {
 		};
 	}
 }
-var isObject$2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+/** An app card's id, made from its reference: the app's name, a dot, the first 16 characters of the publisher key. */
+function appCardId(ref) {
+	return `${ref.slice(53)}.${ref.slice(0, 16)}`;
+}
+/** An app card's `sequence`: a whole number from 0 to 2^53 - 1. */
+var appSequence = (value) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
+var isObject$4 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 /** One line of display text: runs of space (line breaks included) become one space, then the display rules for names. */
 function cardLine(value, max) {
 	if (typeof value !== "string") return void 0;
@@ -6945,7 +7278,7 @@ function readLinks(raw) {
 	if (!Array.isArray(raw)) return [];
 	const links = [];
 	for (const entry of raw.slice(0, STATUS_CARD_LIMITS.links)) {
-		if (!isObject$2(entry)) continue;
+		if (!isObject$4(entry)) continue;
 		const url = cardUrl(entry.url);
 		if (!url) continue;
 		const label = cardLine(entry.label, STATUS_CARD_LIMITS.linkLabel);
@@ -6968,7 +7301,7 @@ function readTags(raw) {
 	return tags;
 }
 function readRun(raw, now) {
-	if (!isObject$2(raw)) return void 0;
+	if (!isObject$4(raw)) return void 0;
 	const at = time(raw.at, now + MESSAGE_CLOCK_SKEW_MS), result = oneOf(RUN_RESULTS, raw.result);
 	if (!at || !result) return void 0;
 	const summary = cardLine(raw.summary, STATUS_CARD_LIMITS.line);
@@ -6993,9 +7326,26 @@ function statusCardBytes(card) {
 * routine's next run up to a year ahead). The message is always kept: without a card it shows its text.
 */
 function readStatusCard(raw, now = Date.now()) {
-	if (!isObject$2(raw) || statusCardBytes(raw) > STATUS_CARD_LIMITS.bytes) return void 0;
+	if (!isObject$4(raw) || statusCardBytes(raw) > STATUS_CARD_LIMITS.bytes) return void 0;
 	const id = typeof raw.id === "string" && ID$4.test(raw.id) ? raw.id : void 0;
 	if (!id) return void 0;
+	if (raw.kind === "app") {
+		if (!isAppRef(raw.ref) || id !== appCardId(raw.ref) || !isAppHash(raw.digest) || !appSequence(raw.sequence)) return void 0;
+		const title = cardLine(raw.title, STATUS_CARD_LIMITS.appTitle);
+		if (!title) return void 0;
+		const version = cardLine(raw.version, STATUS_CARD_LIMITS.appVersion), url = cardUrl(raw.url);
+		return {
+			kind: "app",
+			id,
+			ref: raw.ref,
+			digest: raw.digest,
+			sequence: raw.sequence,
+			title,
+			...version && { version },
+			...url && { url },
+			...raw.opened === true && { opened: true }
+		};
+	}
 	const latest = now + MESSAGE_CLOCK_SKEW_MS;
 	const links = readLinks(raw.links);
 	if (raw.kind === "task") {
@@ -7006,7 +7356,7 @@ function readStatusCard(raw, now = Date.now()) {
 		if (done === void 0 || total === void 0 || done > total) done = total = void 0;
 		const step = cardLine(raw.step, STATUS_CARD_LIMITS.line), branch = cardLine(raw.branch, STATUS_CARD_LIMITS.branch);
 		let pr;
-		if (isObject$2(raw.pr)) {
+		if (isObject$4(raw.pr)) {
 			const url = cardUrl(raw.pr.url);
 			if (url) {
 				const number = count(raw.pr.number, 1), additions = count(raw.pr.additions), deletions = count(raw.pr.deletions), files = count(raw.pr.files);
@@ -7024,7 +7374,7 @@ function readStatusCard(raw, now = Date.now()) {
 		}
 		const items = [];
 		if (Array.isArray(raw.items)) for (const entry of raw.items.slice(0, STATUS_CARD_LIMITS.items)) {
-			if (!isObject$2(entry)) continue;
+			if (!isObject$4(entry)) continue;
 			const text = cardLine(entry.text, STATUS_CARD_LIMITS.line);
 			if (text) items.push({
 				text,
@@ -7083,7 +7433,7 @@ function readStatusCard(raw, now = Date.now()) {
 		if (!Array.isArray(raw.buttons)) return void 0;
 		const buttons = [], seen = /* @__PURE__ */ new Set();
 		for (const entry of raw.buttons.slice(0, STATUS_CARD_LIMITS.buttons)) {
-			if (!isObject$2(entry) || typeof entry.id !== "string" || !BUTTON_ID.test(entry.id) || seen.has(entry.id)) continue;
+			if (!isObject$4(entry) || typeof entry.id !== "string" || !BUTTON_ID.test(entry.id) || seen.has(entry.id)) continue;
 			const label = cardLine(entry.label, STATUS_CARD_LIMITS.buttonLabel);
 			if (!label) continue;
 			seen.add(entry.id);
@@ -7112,10 +7462,10 @@ function readStatusCard(raw, now = Date.now()) {
 * at once and nothing it said is lost on the way. Line breaks and invisible characters are cleaned, as a reader would.
 */
 function checkStatusCard(raw, now = Date.now()) {
-	if (!isObject$2(raw)) return { error: "A card is an object" };
+	if (!isObject$4(raw)) return { error: "A card is an object" };
 	const bytes = statusCardBytes(raw);
 	if (bytes > STATUS_CARD_LIMITS.bytes) return { error: `The card takes ${bytes} bytes; at most ${STATUS_CARD_LIMITS.bytes}` };
-	if (raw.kind !== "task" && raw.kind !== "routine" && raw.kind !== "buttons") return { error: "kind is task, routine or buttons" };
+	if (raw.kind !== "task" && raw.kind !== "routine" && raw.kind !== "buttons" && raw.kind !== "app") return { error: "kind is task, routine, buttons or app" };
 	if (typeof raw.id !== "string" || !ID$4.test(raw.id)) return { error: `id is 1 to ${STATUS_CARD_LIMITS.id} of A-Z a-z 0-9 _ . : - and does not start with -` };
 	const line = (field, value, max, required = false) => {
 		if (value === void 0 && !required) return null;
@@ -7129,20 +7479,29 @@ function checkStatusCard(raw, now = Date.now()) {
 	if (raw.links !== void 0) {
 		if (!Array.isArray(raw.links) || raw.links.length > STATUS_CARD_LIMITS.links) errors.push(`links is a list of at most ${STATUS_CARD_LIMITS.links}`);
 		else for (const [i, link] of raw.links.entries()) {
-			if (!isObject$2(link)) {
+			if (!isObject$4(link)) {
 				errors.push(`links[${i}] is an object`);
 				continue;
 			}
 			errors.push(url(`links[${i}].url`, link.url), line(`links[${i}].label`, link.label, STATUS_CARD_LIMITS.linkLabel));
 		}
 	}
-	if (raw.kind === "buttons") {
+	if (raw.kind === "app") {
+		if (raw.links !== void 0) errors.push("an app card takes no links");
+		if (!isAppRef(raw.ref)) errors.push("ref is <publisher key in z-base32>/<name>");
+		else if (raw.id !== appCardId(raw.ref)) errors.push(`id is ${appCardId(raw.ref)}, made from ref`);
+		if (!isAppHash(raw.digest)) errors.push("digest is a SHA-256 in base64url without padding");
+		if (!appSequence(raw.sequence)) errors.push("sequence is a whole number from 0 to 2^53 - 1");
+		errors.push(line("title", raw.title, STATUS_CARD_LIMITS.appTitle, true), line("version", raw.version, STATUS_CARD_LIMITS.appVersion));
+		if (raw.url !== void 0) errors.push(url("url", raw.url));
+		if (raw.opened !== void 0 && raw.opened !== true) errors.push("opened is true or left out");
+	} else if (raw.kind === "buttons") {
 		if (raw.links !== void 0) errors.push("buttons take no links");
 		if (!Array.isArray(raw.buttons) || !raw.buttons.length || raw.buttons.length > STATUS_CARD_LIMITS.buttons) errors.push(`buttons is a list of 1 to ${STATUS_CARD_LIMITS.buttons}`);
 		else {
 			const ids = /* @__PURE__ */ new Set();
 			for (const [i, button] of raw.buttons.entries()) {
-				if (!isObject$2(button)) {
+				if (!isObject$4(button)) {
 					errors.push(`buttons[${i}] is an object`);
 					continue;
 				}
@@ -7169,7 +7528,7 @@ function checkStatusCard(raw, now = Date.now()) {
 		}
 		errors.push(line("step", raw.step, STATUS_CARD_LIMITS.line), line("branch", raw.branch, STATUS_CARD_LIMITS.branch));
 		if (raw.pr !== void 0) {
-			if (!isObject$2(raw.pr)) errors.push("pr is an object");
+			if (!isObject$4(raw.pr)) errors.push("pr is an object");
 			else {
 				errors.push(url("pr.url", raw.pr.url), whole("pr.number", raw.pr.number, 1), whole("pr.additions", raw.pr.additions), whole("pr.deletions", raw.pr.deletions), whole("pr.files", raw.pr.files));
 				if (raw.pr.state !== void 0 && !oneOf(PR_STATES, raw.pr.state)) errors.push(`pr.state is one of ${PR_STATES.join(", ")}`);
@@ -7201,7 +7560,7 @@ function checkStatusCard(raw, now = Date.now()) {
 		if (raw.items !== void 0) {
 			if (!Array.isArray(raw.items) || raw.items.length > STATUS_CARD_LIMITS.items) errors.push(`items is a list of at most ${STATUS_CARD_LIMITS.items}`);
 			else for (const [i, item] of raw.items.entries()) {
-				if (!isObject$2(item)) {
+				if (!isObject$4(item)) {
 					errors.push(`items[${i}] is an object`);
 					continue;
 				}
@@ -7215,7 +7574,7 @@ function checkStatusCard(raw, now = Date.now()) {
 		if (raw.cron !== void 0 && !(typeof raw.cron === "string" && CRON.test(raw.cron.trim()))) errors.push(`cron is a cron line of at most ${STATUS_CARD_LIMITS.cron} characters`);
 		if (raw.nextRunAt !== void 0 && !(typeof raw.nextRunAt === "number" && Number.isSafeInteger(raw.nextRunAt) && raw.nextRunAt > 0 && raw.nextRunAt <= now + STATUS_CARD_LIMITS.nextRunMs)) errors.push("nextRunAt is a time in milliseconds, within a year");
 		const run = (field, value) => {
-			if (!isObject$2(value)) return errors.push(`${field} is an object`);
+			if (!isObject$4(value)) return errors.push(`${field} is an object`);
 			if (!(typeof value.at === "number" && Number.isSafeInteger(value.at) && value.at > 0 && value.at <= now + 3e5)) errors.push(`${field}.at is a time in milliseconds, not in the future`);
 			if (!oneOf(RUN_RESULTS, value.result)) errors.push(`${field}.result is one of ${RUN_RESULTS.join(", ")}`);
 			errors.push(line(`${field}.summary`, value.summary, STATUS_CARD_LIMITS.line));
@@ -7266,6 +7625,10 @@ function cardTimeUtc(ms) {
 * and search finds. Plain lines, the first naming the card, no bars or layout that would read badly elsewhere.
 */
 function statusCardText(card) {
+	if (card.kind === "app") {
+		const named = `${card.title}${card.version ? ` ${card.version}` : ""}`;
+		return [card.opened ? `🧩 Opened ${named} in this chat (Ghostly app)` : `🧩 ${named} (Ghostly app)`, ...card.url ? [card.url] : []].join("\n");
+	}
 	if (card.kind === "buttons") return `Reply: ${card.buttons.map((b) => b.label).join(" / ")}`;
 	if (card.kind === "task") {
 		const progress = taskProgress(card);
@@ -9806,6 +10169,8 @@ var TransportSwitch = class {
 	settled = "";
 	failed = "";
 	preparing = false;
+	/** The coordinator's dial for the pending plan has started (`dialing`): from then on a newer choice waits for it. */
+	dialStarted = false;
 	/** This side chose while no session was open: the next one begins with it as a choice. */
 	apart = false;
 	constructor(options) {
@@ -9903,6 +10268,7 @@ var TransportSwitch = class {
 		} else if (userIntent) this.intent = Math.max(this.intent, this.remote?.intent ?? 0) + 1;
 		this.failed = "";
 		this.announce();
+		this.supersede();
 		this.reconcile();
 	}
 	/**
@@ -9970,6 +10336,30 @@ var TransportSwitch = class {
 		this.timer = null;
 		this.plan = null;
 		this.preparing = false;
+		this.dialStarted = false;
+	}
+	/** The coordinator starts dialling the pending plan (a move back to WebRTC first waits for the old session to retire). */
+	dialing(plan) {
+		if (this.plan === plan) this.dialStarted = true;
+	}
+	/**
+	* A newer choice (this side's, or the contact's policy) while a plan both sides agreed has not started its dial: a
+	* move back to WebRTC waits for the WebRTC session it left to retire (`SWITCH_RETIRE_MS`), and nothing has been tried
+	* yet. The coordinator drops that plan, so the chat does not move there only to move again; the other side is told
+	* with `paired-switch-keep`, and whatever the newer policies call for is planned next. A plan already dialling goes
+	* on: a choice made then is planned once it ended (`replanIfMoved`).
+	*/
+	supersede() {
+		const plan = this.plan;
+		if (!plan || !this.preparing || this.dialStarted || !this.context || !this.remote || this.options.key > this.options.peerKey) return;
+		if (this.choices(this.local(), this.remote)[0] === plan.choices[0]) return;
+		this.send({
+			t: "paired-switch-keep",
+			id: plan.id
+		});
+		this.clearPlan();
+		this.options.cancel();
+		this.options.state();
 	}
 	fail(error) {
 		const target = this.plan?.choices[0], upgrade = !!this.plan?.upgrade;
@@ -10093,6 +10483,7 @@ var TransportSwitch = class {
 			this.remote = this.lastRemote = policy;
 			this.options.peer(policy);
 			if (changed && this.plan && !this.preparing) this.clearPlan();
+			else if (changed) this.supersede();
 			this.reconcile();
 			return true;
 		}
@@ -10129,6 +10520,12 @@ var TransportSwitch = class {
 			return true;
 		}
 		if (frame.t === "paired-switch-keep") {
+			if (this.preparing && this.remote && this.choices(this.local(), this.remote)[0] !== this.plan.choices[0]) {
+				this.clearPlan();
+				this.options.state();
+				this.reconcile();
+				return true;
+			}
 			if (this.actual && this.plan.choices.includes(this.actual)) {
 				if (this.plan.choices[0] !== this.actual && !this.plan.upgrade) this.options.kept?.(this.plan.choices[0]);
 				this.settled = this.signature(this.plan.local, this.plan.remote);
@@ -11282,11 +11679,17 @@ var CAPS_READ_SPACING_MS = 15e3;
 * already knows and looks the key up behind it, and a lookup that started before the publication landed finds the old
 * one; a relay may serve an old copy for a while too. The envelope names each revision once, so one read was the last
 * until the next envelope, minutes away, and the chat stayed on the DHT with no descriptors to dial.
+*
+* The first ones come soon: a contact's record that lists a native transport with no descriptor is the "Peer native
+* address unavailable" a dial ends with, and its revision with the descriptors is usually out a second or two after the
+* first (its endpoints were starting). Read 5 s, then 20 s after, two Desktops DHT direct with Iroh's relay out of reach
+* went live 11 to 28 s after their chats opened (2026-10-07). One read more than before, three in the first 7 s.
 */
 var CAPS_READ_RETRY_MS = [
-	5e3,
+	1e3,
+	2e3,
+	4e3,
 	15e3,
-	3e4,
 	6e4
 ];
 var NATIVE = ["iroh/1", "hyperdht/1"];
@@ -11878,7 +12281,7 @@ var KINDS$1 = [
 var WIRE_ID = /^[A-Za-z0-9_-]{8,64}$/;
 var MAILBOX = /^[A-Za-z0-9_-]{22}$/;
 var SIG$3 = /^[A-Za-z0-9_-]{86}$/;
-var MAGIC$1 = utf8Encode("GHLD");
+var MAGIC$2 = utf8Encode("GHLD");
 var VERSION = 1;
 var NONCE$2 = 24;
 /** Why a bundle, manifest or pointer was refused. Never a reason to trust it a little. */
@@ -11944,7 +12347,7 @@ var HoldKeys = class {
 		new DataView(length.buffer).setUint32(0, header.length);
 		const nonce = randomBytes(NONCE$2);
 		const box = xsalsa20poly1305(this.sealKey, nonce).encrypt(concatBytes$1(length, header, body));
-		return concatBytes$1(MAGIC$1, new Uint8Array([VERSION]), nonce, box);
+		return concatBytes$1(MAGIC$2, new Uint8Array([VERSION]), nonce, box);
 	}
 	/**
 	* Opens a bundle the contact sealed for me. Everything is checked before anything is returned: the
@@ -11954,11 +12357,11 @@ var HoldKeys = class {
 	open(bytes, expect = {}) {
 		const now = expect.now ?? Date.now();
 		if (bytes.length > (expect.maxBytes ?? HOLD_LIMITS.maxBundleBytes)) throw new HoldRefusedError("size", "The held item is larger than allowed");
-		if (bytes.length < MAGIC$1.length + 1 + NONCE$2 + 16 + 4 || !MAGIC$1.every((b, i) => bytes[i] === b)) throw new HoldRefusedError("format", "Not a held item");
-		if (bytes[MAGIC$1.length] !== VERSION) throw new HoldRefusedError("format", "Held item from a newer Ghostly");
+		if (bytes.length < MAGIC$2.length + 1 + NONCE$2 + 16 + 4 || !MAGIC$2.every((b, i) => bytes[i] === b)) throw new HoldRefusedError("format", "Not a held item");
+		if (bytes[MAGIC$2.length] !== VERSION) throw new HoldRefusedError("format", "Held item from a newer Ghostly");
 		let plain;
 		try {
-			plain = xsalsa20poly1305(this.sealKey, bytes.subarray(MAGIC$1.length + 1, MAGIC$1.length + 1 + NONCE$2)).decrypt(bytes.subarray(MAGIC$1.length + 1 + NONCE$2));
+			plain = xsalsa20poly1305(this.sealKey, bytes.subarray(MAGIC$2.length + 1, MAGIC$2.length + 1 + NONCE$2)).decrypt(bytes.subarray(MAGIC$2.length + 1 + NONCE$2));
 		} catch {
 			throw new HoldRefusedError("tampered", "The held item was changed or is not for this chat");
 		}
@@ -12574,6 +12977,11 @@ var BUTTONS_CAPABILITY = "buttons/1";
 * (WISP 03), so an app back after an absence knows before any session whether a relay can carry it there at once.
 */
 var UPGRADE_CAPABILITY = "upgrade/1";
+/**
+* Mini-apps in a 1:1 chat: `paired-app` frames on this session, live only (WISP 1200 § In a chat: `apps/1`,
+* `pairedApps.ts`). Offered only while the apps feature is on.
+*/
+var APPS_CAPABILITY = "apps/1";
 /** Every capability this app knows on a session: what `receive` reports changes of. */
 var KNOWN_SESSION_CAPABILITIES = [
 	CALLS_CAPABILITY,
@@ -12586,7 +12994,8 @@ var KNOWN_SESSION_CAPABILITIES = [
 	PIN_CAPABILITY,
 	STATUS_CARD_CAPABILITY,
 	BUTTONS_CAPABILITY,
-	UPGRADE_CAPABILITY
+	UPGRADE_CAPABILITY,
+	APPS_CAPABILITY
 ];
 var SESSION_CAPABILITIES_FRAME = "paired-capabilities";
 var MAX_ENTRIES$1 = 32;
@@ -12653,6 +13062,269 @@ var SessionCapabilities = class {
 	}
 };
 //#endregion
+//#region ../core/src/pairedApps.ts
+/**
+* Mini-apps talking in a 1:1 chat (WISP 1200 § In a chat: `apps/1`): the same app on both sides sends JSON to the
+* other over the live session, in one frame with three forms.
+*
+*     {"t":"paired-app","a":"<chat app id>","o":"open","v":"1.2.0"}
+*     {"t":"paired-app","a":"<chat app id>","o":"close"}
+*     {"t":"paired-app","a":"<chat app id>","d":<JSON value>}
+*
+* It needs `apps/1` in `paired-capabilities` on both sides. Live only: never on the DHT, never held, never queued for
+* later; while the session is not live a send fails with `offline`. An `open` goes when the person opens the app in
+* the chat, again on an update, and again on every session that comes back while the app is open. The receiver
+* enforces the limits (the sender's client may be the attacker): at most `APP_DATA_MAX_BYTES` of data, at most
+* `APP_RATE_LIMIT` frames a second per app, data only for an app open on both sides, at most `APP_PEER_OPEN_MAX`
+* apps the peer has open, and nothing unless both sides offer `apps/1`.
+*
+* The chat app id names one app in one chat: the first 16 bytes of HMAC-SHA-256 keyed by the two pinned participation
+* keys over the app reference `<publisher key in z-base32>/<name>`. One app's id differs in each chat, so ids cannot
+* be matched across a person's chats; it travels only inside the encrypted session.
+*/
+var APP_FRAME = "paired-app";
+var DOMAIN = "ghostly-apps/1";
+var APP_ID = /^[A-Za-z0-9_-]{22}$/;
+/** Semantic versioning 2.0.0, as a manifest's `version` is. */
+var SEMVER$1 = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/;
+/** A chat app id as it is on the wire: 22 base64url characters (16 bytes, no padding). */
+function isChatAppId(value) {
+	return typeof value === "string" && APP_ID.test(value);
+}
+/** A version an `open` may carry: semantic versioning, at most `APP_VERSION_MAX` characters. */
+function isAppVersion(value) {
+	return typeof value === "string" && value.length <= 64 && SEMVER$1.test(value);
+}
+function compareBytes$2(a, b) {
+	for (let i = 0; i < Math.min(a.length, b.length); i++) if (a[i] !== b[i]) return a[i] - b[i];
+	return a.length - b.length;
+}
+/**
+* The chat app id of `ref` in the chat between these two participation keys (raw, 32 bytes each, in either order):
+* HMAC-SHA-256 keyed by SHA-256(`ghostly-apps/1`, 0x00, the lower key, the higher key), over the UTF-8 reference;
+* its first 16 bytes, base64url without padding.
+*/
+function chatAppId(keyA, keyB, ref) {
+	if (keyA.length !== 32 || keyB.length !== 32) throw new Error("A participation key is 32 bytes");
+	if (!isAppRef(ref)) throw new Error("Not an app reference");
+	const [low, high] = compareBytes$2(keyA, keyB) <= 0 ? [keyA, keyB] : [keyB, keyA];
+	const key = sha256(concatBytes$1(utf8Encode(DOMAIN), new Uint8Array([0]), low, high));
+	return toBase64Url(hmac(sha256, key, utf8Encode(ref)).slice(0, 16));
+}
+/** The size of a value as compact UTF-8 JSON; Infinity when it is not JSON (undefined, a function, a cycle, a BigInt). */
+function appDataBytes(value) {
+	let json;
+	try {
+		json = JSON.stringify(value);
+	} catch {
+		return Infinity;
+	}
+	return json === void 0 ? Infinity : utf8Encode(json).length;
+}
+function appOpenFrame(app, version) {
+	if (!isChatAppId(app) || !isAppVersion(version)) throw new Error("Not an app open");
+	return {
+		t: APP_FRAME,
+		a: app,
+		o: "open",
+		v: version
+	};
+}
+function appCloseFrame(app) {
+	if (!isChatAppId(app)) throw new Error("Not an app close");
+	return {
+		t: APP_FRAME,
+		a: app,
+		o: "close"
+	};
+}
+function appDataFrame(app, data) {
+	if (!isChatAppId(app) || appDataBytes(data) > 32768) throw new Error("Not app data");
+	return {
+		t: APP_FRAME,
+		a: app,
+		d: data
+	};
+}
+/**
+* A `paired-app` frame as the peer sent it, or why a reader must refuse it: no valid `a` (22 base64url characters),
+* both or neither of `o` and `d`, an unknown `o`, an `open` without a valid `v`, or a `d` over `APP_DATA_MAX_BYTES`.
+* Other keys are ignored, so a later version can add some.
+*/
+function readAppFrame(frame) {
+	const refuse = (refusal) => ({
+		ok: false,
+		refusal
+	});
+	if (frame?.t !== "paired-app") return refuse("not-app");
+	if (!isChatAppId(frame.a)) return refuse("bad-a");
+	const own = (key) => Object.prototype.hasOwnProperty.call(frame, key);
+	const hasO = own("o"), hasD = own("d");
+	if (hasO && hasD) return refuse("o-and-d");
+	if (!hasO && !hasD) return refuse("no-o-or-d");
+	if (hasD) return appDataBytes(frame.d) <= 32768 ? {
+		ok: true,
+		frame: {
+			t: APP_FRAME,
+			a: frame.a,
+			d: frame.d
+		}
+	} : refuse("too-large");
+	if (frame.o === "close") return {
+		ok: true,
+		frame: {
+			t: APP_FRAME,
+			a: frame.a,
+			o: "close"
+		}
+	};
+	if (frame.o !== "open") return refuse("unknown-o");
+	return isAppVersion(frame.v) ? {
+		ok: true,
+		frame: {
+			t: APP_FRAME,
+			a: frame.a,
+			o: "open",
+			v: frame.v
+		}
+	} : refuse("bad-v");
+}
+/** A `paired-app` frame as the peer sent it, or null when a reader must refuse it (`readAppFrame` says why). */
+function parseAppFrame(frame) {
+	const read = readAppFrame(frame);
+	return read.ok ? read.frame : null;
+}
+/** Frames per app in a sliding window, for at most `max` apps at once. */
+var RateWindows = class {
+	limit;
+	max;
+	windows = /* @__PURE__ */ new Map();
+	constructor(limit, max) {
+		this.limit = limit;
+		this.max = max;
+	}
+	/** Counts one frame for `app` at `now`; false when it is over the limit (not counted then). */
+	take(app, now) {
+		let window = this.windows.get(app);
+		if (!window) {
+			if (this.windows.size >= this.max) this.prune(now);
+			if (this.windows.size >= this.max) return false;
+			window = [];
+			this.windows.set(app, window);
+		}
+		while (window.length && now - window[0] >= 1e3) window.shift();
+		if (window.length >= this.limit) return false;
+		window.push(now);
+		return true;
+	}
+	prune(now) {
+		for (const [app, window] of this.windows) if (!window.length || now - window[window.length - 1] >= 1e3) this.windows.delete(app);
+	}
+	clear() {
+		this.windows.clear();
+	}
+};
+/**
+* The apps of one chat on its live sessions. `open` (this side's apps, by chat app id, with their versions) lasts
+* across sessions, so each new one says `open` again; what the peer has open lasts one session.
+*/
+var AppSessions = class {
+	open;
+	now;
+	peer = /* @__PURE__ */ new Map();
+	/** What the peer had open on a session that ended, held for `APP_RESUME_GRACE_MS` until it says so again. */
+	held = /* @__PURE__ */ new Map();
+	received = new RateWindows(50, 64);
+	sent = new RateWindows(48, 64);
+	constructor(open = /* @__PURE__ */ new Map(), now = Date.now) {
+		this.open = open;
+		this.now = now;
+	}
+	/** The peer has this app open on this session, at this version. */
+	peerVersion(app) {
+		return this.peer.get(app);
+	}
+	/** The apps the peer has open on this session. */
+	get peerOpen() {
+		return this.peer;
+	}
+	/**
+	* A `paired-app` frame from the peer, on a session where both sides offer `apps/1`. Counted before it is read; the
+	* event to pass on, or null when it was dropped (malformed, over the rate, a data frame for an app not open on both
+	* sides, an `open` past `APP_PEER_OPEN_MAX`, a `close` of an app the peer did not have open).
+	*/
+	receive(frame) {
+		if (!isChatAppId(frame?.a) || !this.received.take(frame.a, this.now())) return null;
+		const parsed = parseAppFrame(frame);
+		if (!parsed) return null;
+		const app = parsed.a;
+		if ("d" in parsed) return this.open.has(app) && this.peer.has(app) ? {
+			app,
+			d: parsed.d
+		} : null;
+		if (parsed.o === "close") return this.peer.delete(app) || this.held.delete(app) ? {
+			app,
+			o: "close"
+		} : null;
+		if (!this.peer.has(app) && this.peer.size >= 16) return null;
+		this.held.delete(app);
+		this.peer.set(app, parsed.v);
+		return {
+			app,
+			o: "open",
+			v: parsed.v
+		};
+	}
+	/** Whether a data frame for `app` may go now, the session being live with `apps/1` agreed; counted when it may. */
+	canSend(app, data) {
+		if (!this.open.has(app)) return "not-open";
+		if (appDataBytes(data) > 32768) return "too-large";
+		if (!this.peer.has(app)) return "peer-closed";
+		return this.sent.take(app, this.now()) ? null : "too-fast";
+	}
+	/**
+	* The session ended, or `apps/1` is no longer agreed: what the peer had open is gone, and each such app hears a
+	* `close` with `offline`. This side's open apps stay, and say `open` again on the next session.
+	*/
+	sessionEnded() {
+		const closed = [.../* @__PURE__ */ new Set([...this.held.keys(), ...this.peer.keys()])].map((app) => ({
+			app,
+			o: "close",
+			offline: true
+		}));
+		this.peer.clear();
+		this.held.clear();
+		this.received.clear();
+		this.sent.clear();
+		return closed;
+	}
+	/**
+	* The session ended or was replaced, and another may follow at once: what the peer had open is held, not closed (no
+	* event now). Nothing is sent to a held app; an `open` on the next session takes it back, a `close` closes it, and
+	* `heldExpired` closes the rest once `APP_RESUME_GRACE_MS` has passed.
+	*/
+	sessionSuspended() {
+		for (const [app, version] of this.peer) this.held.set(app, version);
+		this.peer.clear();
+		this.received.clear();
+		this.sent.clear();
+	}
+	/** Whether any of the peer's apps is held, waiting for its next session. */
+	get holding() {
+		return this.held.size > 0;
+	}
+	/** The grace is over: each app still held is closed, with `offline`. */
+	heldExpired() {
+		const closed = [...this.held.keys()].map((app) => ({
+			app,
+			o: "close",
+			offline: true
+		}));
+		this.held.clear();
+		return closed;
+	}
+};
+//#endregion
 //#region ../core/src/webPush.ts
 var WebPushError = class extends Error {};
 var RECORD_SIZE = 4096;
@@ -13013,6 +13685,8 @@ function parsePinnedFrame(frame) {
 * DHT, never stored, never counted as unread, no message id (older apps drop it). While the person keeps typing,
 * `start` is said again at most every `TYPING_REFRESH_MS`; the receiver shows it until `stop`, a message from that
 * contact, the end of the session, or `TYPING_TIMEOUT_MS` without a new `start` (so a dropped link never leaves it on).
+* A start standing when a session ends (a transport switch, a reconnect) is said again once the next one agreed
+* `typing/1`, if the person's last word is still that recent.
 *
 * A `start` may say what the contact is doing (`kind`: typing, recording a voice note, thinking) and, for bots, a
 * short `status` line. Both are optional: an app that knows neither shows "typing…", and so does a kind it does not
@@ -13076,12 +13750,21 @@ function parseTypingActivity(frame) {
 	return typingActivity(frame?.kind, frame?.status);
 }
 var sameActivity = (a, b) => a?.kind === b?.kind && a?.status === b?.status;
-/** This side's word: when to say `start` again, and whether a `stop` is owed. One per session. */
+/**
+* This side's word: when to say `start` again, and whether a `stop` is owed. One per chat; what was said is per session
+* (`reset`), what the person is doing is not: a new session (a transport switch, a reconnect) says a standing start
+* again (`resume`), since the contact's reader cleared it when the old session ended.
+*
+* The rate window is not per session: the reader's is per chat too (it is not cleared when a session ends), so a
+* window that started afresh on each session could put a start past the reader's limit just after a switch.
+*/
 var TypingSender = class {
 	now;
 	startedAt = 0;
 	standing = null;
 	recent = [];
+	/** What the person is doing, and when it last said so: kept across sessions, until it stops. */
+	wanted = null;
 	constructor(now = Date.now) {
 		this.now = now;
 	}
@@ -13092,6 +13775,33 @@ var TypingSender = class {
 	typing(activity = { kind: "typing" }) {
 		const now = this.now();
 		const word = typingActivity(activity.kind, activity.status);
+		this.wanted = {
+			activity: word,
+			at: now
+		};
+		return this.say(word, now);
+	}
+	/**
+	* The person typed while nothing can be said (no session, or `typing/1` not agreed on it yet): kept, so the start
+	* goes once a session can carry it (`resume`).
+	*/
+	want(activity = { kind: "typing" }) {
+		this.wanted = {
+			activity: typingActivity(activity.kind, activity.status),
+			at: this.now()
+		};
+	}
+	/**
+	* A new session agreed `typing/1`: the `start` to say on it when the person was still at it, its last word less than
+	* `TYPING_TIMEOUT_MS` ago (as long as the contact would still have shown it). Null otherwise, when a start already
+	* went on this session, or when the window is full (the person's next keystroke says it).
+	*/
+	resume() {
+		const wanted = this.wanted, now = this.now();
+		if (!wanted || this.startedAt || now - wanted.at >= 6e3) return null;
+		return this.say(wanted.activity, now);
+	}
+	say(word, now) {
 		if (this.startedAt && now - this.startedAt < 3e3 && sameActivity(this.standing, word)) return null;
 		this.recent = this.recent.filter((at) => now - at < TYPING_RATE_WINDOW_MS);
 		if (this.recent.length >= 6) return null;
@@ -13100,8 +13810,12 @@ var TypingSender = class {
 		this.standing = word;
 		return typingFrame("start", word);
 	}
-	/** The person stopped (cleared the text, sent it, left the chat): a `stop`, only when a `start` is standing. */
+	/**
+	* The person stopped (cleared the text, sent it, left the chat): a `stop`, only when a `start` is standing on this
+	* session. Nothing is said again on the next one either way.
+	*/
 	stopped() {
+		this.wanted = null;
 		if (!this.startedAt) return null;
 		this.recent.push(this.now());
 		this.startedAt = 0;
@@ -13112,7 +13826,7 @@ var TypingSender = class {
 	get active() {
 		return this.startedAt !== 0;
 	}
-	/** The session ended: nothing is standing on the next one. */
+	/** The session ended: nothing is standing on the next one until `resume` (or the next keystroke) says it. */
 	reset() {
 		this.startedAt = 0;
 		this.standing = null;
@@ -15280,6 +15994,11 @@ var QUIET_FRAMES = /* @__PURE__ */ new Set([
 */
 var PONG_WAIT_MS = 4e3;
 /**
+* Back in front after an absence (`wake`), a live session that ends this soon after it was lost while the app was
+* away (a phone that put it to sleep): the chat resumes as after a restart, not as a session the contact closed.
+*/
+var WAKE_LOST_MS = 1e4;
+/**
 * A `paired-message` frame. The preview (`pv`) is left out when the frame would pass `MAX_PAIRED_MESSAGE_FRAME`
 * with it: the text matters, the card does not. A reply (`r`, WISP 401 § Replies) is a few hundred bytes at most
 * and always goes, and so does a forwarded message's hop count (`fw`, WISP 401 § Forwards) and a status card (`sc`,
@@ -15446,6 +16165,8 @@ var GhostLink = class {
 	/** Typing on this session (`typing/1`): when to say `start` again, and the contact's word with its timeout. */
 	typingSender = new TypingSender();
 	typingReceiver = new TypingReceiver((typing, activity) => this.options.events?.onPeerTyping?.(typing, activity));
+	/** Mini-apps on this session (`apps/1`): this side's open apps (kept across sessions), the peer's, the limits. */
+	apps;
 	/** Reaction frames the contact may send per window; the rest go unconfirmed and come again. */
 	reactionsReceived = new ReactionWindow(REACTION_LIMITS.receive);
 	/** Pin frames the contact may send per window; the rest go unconfirmed and come again. */
@@ -15474,7 +16195,8 @@ var GhostLink = class {
 	racing = false;
 	/**
 	* The WebRTC offer this side's dial made last, with fallback allowed: what a transport that comes up meanwhile joins.
-	* `resume`: the dial that made it is this side back after an absence, over WebRTC (`resuming`).
+	* `resume`: the dial that made it is this side back after an absence, over WebRTC (`resuming`); `woke`: the absence
+	* was the app's in the background, not a restart (`resumeAfterAbsence`).
 	*/
 	offered;
 	/** The attempt (its epoch) whose direct transports were knocked on as its offer went out (`knockEarly`), and whether that is under way. */
@@ -15490,6 +16212,12 @@ var GhostLink = class {
 	answeringEpoch = -1;
 	lastAutoConnectAt = 0;
 	autoConnectFailures = 0;
+	/** The look due when a failed dial's backoff ends (`lookAtRetry`). */
+	retryLook = null;
+	/** This side's offer is out to the data link and has not reached the relays yet. */
+	offerUnsent = false;
+	/** The last dial ended with its offer never out (`offerUnsent`): the contact saw nothing of it. */
+	dialUnseen = false;
 	/** Native transports a record just read listed with no way to dial them (`record-undescribed`), until one describes them again. */
 	undescribed = /* @__PURE__ */ new Set();
 	/**
@@ -15546,8 +16274,15 @@ var GhostLink = class {
 	resuming;
 	/** Until then, a dial waits for the native endpoint `resuming` names to start (it is knocked on as it does). */
 	resumeWaitUntil = 0;
+	/** What the last live session ran on, kept after it ended: a wake resumes on it (`resumeAfterAbsence`). */
+	lastLiveOn;
+	/** `resuming` is a wake's, not a restart's. */
+	resumingWoke = false;
+	/** Until then, a session that ends was lost while the app was away (`WAKE_LOST_MS`). */
+	wokeUntil = 0;
 	constructor(options) {
 		this.options = options;
+		this.apps = new AppSessions(options.appsOpen);
 		if (options.pairing?.credentials.signer && (options.dht || options.params.deliveryMode === "dht")) throw new Error("A link that signs through a signer has no DHT delivery");
 		this.deliveryMode = options.params.deliveryMode ?? "stream";
 		this.tracker = options.pairingProgress && options.pairing && !options.pairing.credentials.peerKey && this.deliveryMode !== "dht" ? new PairingTracker(options.pairingProgress.role, options.pairingProgress.startedAt, (progress) => {
@@ -15683,9 +16418,13 @@ var GhostLink = class {
 						this.tracker?.failed("publish", true, result.error);
 						return;
 					}
-					if (result.signalOut) this.dataLink.signalWentOut();
+					if (result.signalOut) {
+						this.offerUnsent = false;
+						this.dataLink.signalWentOut();
+					}
 					this.tracker?.published();
 					this.publishRecovered();
+					this.dialSeenNow();
 				},
 				onPeerAck: (ack) => events.onPeerAck?.(ack),
 				onCallSignal: (signal) => {
@@ -15780,6 +16519,10 @@ var GhostLink = class {
 				if (this.activeBinding) return;
 				events.onDataLinkState?.(state);
 				if (state === "open") this.afterRtc = void 0;
+				if (state === "offering") {
+					this.offerUnsent = true;
+					this.dialUnseen = false;
+				}
 				if (state === "answering") {
 					this.answeringEpoch = this.connectionEpoch;
 					if (this.resumingOverRtc) {
@@ -15793,6 +16536,8 @@ var GhostLink = class {
 					this.scheduleRace(this.offered.epoch, this.offered.at);
 				}
 				if (state !== "idle") return;
+				this.dialUnseen = was === "offering" && this.offerUnsent;
+				this.offerUnsent = false;
 				const unanswerable = was === "answering" && this.answeringEpoch === this.connectionEpoch && !this.channel && !this.stopped && !this.leaving;
 				if (unanswerable) this.rtcUnstarted();
 				this.clearRace();
@@ -15805,7 +16550,10 @@ var GhostLink = class {
 					return;
 				}
 				this.afterRtc = void 0;
-				if (!this.dialing) this.attemptEnded();
+				if (!this.dialing) {
+					this.attemptEnded();
+					this.lookAtRetry();
+				}
 				this.rejectWaiters(new GhostlyHttpError("unreachable", "Could not connect to the peer"));
 				if (unanswerable && this.dialsPastRtc()) this.redial();
 			},
@@ -16160,15 +16908,18 @@ var GhostLink = class {
 		this.dial().catch((error) => {
 			this.tracker?.failed("transport", true);
 			this.dialFailed(error instanceof Error ? error.message : String(error));
+			this.lookAtRetry();
 		});
 	}
 	async stop(announce = true) {
 		this.stopped = true;
 		this.clearRace();
+		if (this.retryLook) clearTimeout(this.retryLook);
 		if (this.dhtPinGrace) clearTimeout(this.dhtPinGrace);
 		if (this.waiting?.timer) clearTimeout(this.waiting.timer);
 		await this.dht?.stop();
 		this.disconnect();
+		this.appsEnded();
 		await Promise.allSettled([...this.endpoints.values()].map((endpoint) => endpoint.close()));
 		this.endpoints.clear();
 		await this.session.stop(announce);
@@ -16560,6 +17311,7 @@ var GhostLink = class {
 			return;
 		}
 		this.endpoints.set(endpoint.transport, endpoint);
+		traceLink(this.myPubKeyZ32, "endpoint-up", { transport: endpoint.transport });
 		endpoint.onConnection = ({ channel, binding }) => {
 			traceLink(this.myPubKeyZ32, "dialed-in", {
 				transport: binding.transport,
@@ -16570,6 +17322,7 @@ var GhostLink = class {
 		};
 		endpoint.onUnavailable = () => {
 			if (this.endpoints.get(endpoint.transport) !== endpoint) return;
+			traceLink(this.myPubKeyZ32, "endpoint-gone", { transport: endpoint.transport });
 			this.endpoints.delete(endpoint.transport);
 			this.advertiseTransports();
 			this.options.events?.onTransportsChanged?.();
@@ -16705,7 +17458,10 @@ var GhostLink = class {
 	* simply be away. Two dials crossing are settled by key order (see `registerEndpoint`).
 	*/
 	async knock(transport) {
-		if (this.resuming === transport) this.resuming = void 0;
+		if (this.resuming === transport) {
+			this.resuming = void 0;
+			this.resumingWoke = false;
+		}
 		const endpoint = this.endpoints.get(transport), descriptor = this.peerDescriptors[transport];
 		if (!endpoint || !descriptor || this.channel || this.dialing || this.stopped || this.streamBlocked || this.keyStopped) return;
 		if (!this.transportOffer().includes(transport)) return;
@@ -16858,8 +17614,11 @@ var GhostLink = class {
 			const remembered = this.peerTransports && rankTransports(local, this.peerFallback ? this.peerTransports : this.peerTransports.slice(0, 1), relayed);
 			const ranked = remembered?.length ? remembered : this.peerTransports ? rankTransports(local, this.peerTransports, relayed) : local.filter((t) => t === "webrtc/1");
 			const chosen = this.switcher.chosenTarget ?? this.choiceApart?.transport ?? this.resuming;
-			const resume = this.resuming === "webrtc/1";
-			if (chosen && chosen === this.resuming && ranked.includes(chosen)) this.resuming = void 0;
+			const resume = this.resuming === "webrtc/1", woke = resume && this.resumingWoke;
+			if (chosen && chosen === this.resuming && ranked.includes(chosen)) {
+				this.resuming = void 0;
+				this.resumingWoke = false;
+			}
 			const choices = chosen && ranked.includes(chosen) ? [chosen, ...ranked.filter((t) => t !== chosen)] : ranked;
 			if (!choices.length) {
 				if (this.options.packetTransports && this.autoConnectFailures <= PACKET_TRANSPORTS_FAST_ATTEMPTS) this.session.expectPeer();
@@ -16883,7 +17642,8 @@ var GhostLink = class {
 					this.offered = fallback ? standing ?? {
 						epoch,
 						at: offeredAt,
-						...resume && { resume }
+						...resume && { resume },
+						...woke && { woke }
 					} : void 0;
 					const gate = this.dialGate;
 					this.dialGate = void 0;
@@ -17070,7 +17830,10 @@ var GhostLink = class {
 		if (this.channel || this.dialing || this.stopped || this.streamBlocked || this.keyStopped || !this.contactQuiet(1e4)) return;
 		if (!this.fallback || !this.peerFallback) return;
 		this.knockedEarly = epoch;
-		if (this.resuming === "webrtc/1") this.resuming = void 0;
+		if (this.resuming === "webrtc/1") {
+			this.resuming = void 0;
+			this.resumingWoke = false;
+		}
 		const relayed = this.upgradesFromRelay() ? [] : this.relayedTransports;
 		const offer = this.transportOffer();
 		const direct = TRANSPORTS.filter((t) => t !== "webrtc/1" && offer.includes(t) && !!this.peerTransports?.includes(t) && !relayed.includes(t) && this.canDial(t));
@@ -17093,7 +17856,7 @@ var GhostLink = class {
 	maybeKnockEarly(epoch) {
 		const next = this.afterRtc;
 		if (!this.offered?.resume || this.offered.epoch !== epoch || this.knockedEarly === epoch || next?.epoch !== epoch || epoch !== this.connectionEpoch) return;
-		if (this.dialing || this.channel || this.stopped || !this.offerOut || !this.contactQuiet()) return;
+		if (this.dialing || this.channel || this.stopped || !this.offerOut || !(this.offered.woke || this.contactQuiet())) return;
 		const relayed = this.upgradesFromRelay() ? [] : this.relayedTransports;
 		const direct = next.rest.filter((t) => !relayed.includes(t) && this.canDial(t));
 		if (!direct.length) return;
@@ -17454,6 +18217,7 @@ var GhostLink = class {
 				failures: this.autoConnectFailures,
 				left: wait - (Date.now() - this.lastAutoConnectAt)
 			});
+			this.lookAtRetry();
 			return;
 		}
 		traceLink(this.myPubKeyZ32, "dial", { failures: this.autoConnectFailures });
@@ -17462,6 +18226,7 @@ var GhostLink = class {
 		this.dial().catch((error) => {
 			this.tracker?.failed("transport", true);
 			this.dialFailed(error instanceof Error ? error.message : String(error));
+			this.lookAtRetry();
 		});
 	}
 	/**
@@ -17481,8 +18246,42 @@ var GhostLink = class {
 		this.dial().catch((error) => {
 			this.tracker?.failed("transport", true);
 			this.dialFailed(error instanceof Error ? error.message : String(error));
+			this.lookAtRetry();
 		});
 	}
+	/**
+	* A failed dial waits `dialWait` before the next, and only a look at the contact's record dials: the next one came at
+	* the link's own pace (30 s in the background), which knows nothing of the backoff. A member let in to a group
+	* reached one of its members 72 s after its welcome, 40 s of backoff and 32 s more for its next look (meshSignals on
+	* CI, 2026-10-06). One look goes when the backoff ends (`liveAttempt.retryAt`), and its read decides, as any look's
+	* does. A dial or a reset of the backoff since makes it moot: what comes next arms its own.
+	*/
+	lookAtRetry() {
+		if (this.retryLook) clearTimeout(this.retryLook);
+		this.retryLook = null;
+		const from = this.lastAutoConnectAt;
+		if (!from || this.stopped || this.leaving || this.streamBlocked || this.keyStopped || !this.options.autoConnect) return;
+		this.retryLook = setTimeout(() => {
+			this.retryLook = null;
+			if (this.lastAutoConnectAt !== from || this.stopped || this.leaving || this.yielding || this.streamBlocked || this.keyStopped || this.channel || this.dialing || this.dataLink.state !== "idle") return;
+			traceLink(this.myPubKeyZ32, "retry-look", { failures: this.autoConnectFailures });
+			this.session.lookNow();
+		}, Math.max(0, from + this.dialWait() - Date.now()));
+	}
+	/**
+	* A packet of this link reached the relays after a dial whose offer never did (the relays failed, or their budget held
+	* it, for the whole attempt): the contact saw nothing of that dial, so it is no reason to wait, and the next goes now.
+	* Without this a dial made during an outage set the wait, three minutes once it had grown, from when the relays
+	* answered again.
+	*/
+	dialSeenNow() {
+		if (!this.dialUnseen) return;
+		this.dialUnseen = false;
+		if (this.channel || this.dialing || this.dataLink.state !== "idle") return;
+		traceLink(this.myPubKeyZ32, "dial-unseen", { failures: this.autoConnectFailures });
+		this.lastAutoConnectAt = 0;
+		this.maybeAutoConnect(this.presence);
+	}
 	/** How long after the last automatic dial the next one may go. A first pairing tries again sooner: the contact just read the invite and is waiting. */
 	dialWait() {
 		return !!this.tracker && !this.tracker.done && this.tracker.progress.stage !== "on-dht" ? Math.min(PAIRING_RETRY_MS * 2 ** this.autoConnectFailures, PAIRING_MAX_RETRY_MS) : Math.min(AUTO_CONNECT_RETRY_MS * 2 ** this.autoConnectFailures, AUTO_CONNECT_MAX_RETRY_MS);
@@ -17729,6 +18528,7 @@ var GhostLink = class {
 		if (this.options.statusCardSupport) offered.push(STATUS_CARD_CAPABILITY);
 		if (this.options.buttonsSupport) offered.push(BUTTONS_CAPABILITY);
 		if (this.options.upgradeSupport) offered.push(UPGRADE_CAPABILITY);
+		if (this.options.appsSupport) offered.push(APPS_CAPABILITY);
 		if (this.options.deviceCapabilities) offered.push(...this.options.deviceCapabilities);
 		return offered;
 	}
@@ -17873,12 +18673,90 @@ var GhostLink = class {
 	*/
 	setTyping(typing, activity) {
 		if (!this.options.params.profile) return;
-		const frame = typing ? this.supportsTyping ? this.typingSender.typing(activity) : null : this.typingSender.stopped();
+		if (typing && !this.supportsTyping) {
+			this.typingSender.want(activity);
+			return;
+		}
+		const frame = typing ? this.typingSender.typing(activity) : this.typingSender.stopped();
 		if (!frame || !this.channel || !this.supportsTyping) return;
 		try {
 			this.channel.send(JSON.stringify(frame));
 		} catch {}
 	}
+	resumeTyping() {
+		const frame = this.typingSender.resume();
+		if (!frame || !this.channel) return;
+		try {
+			this.channel.send(JSON.stringify(frame));
+		} catch {}
+	}
+	/** Both sides offer `apps/1` on the open session: mini-apps can talk (WISP 1200 § In a chat). */
+	get supportsApps() {
+		return !!this.options.params.profile && this.isDataLinkOpen && this.sessionCapabilities.agreed("apps/1");
+	}
+	/** The apps the contact has open on this session (chat app id to version). */
+	get peerApps() {
+		return this.apps.peerOpen;
+	}
+	/**
+	* This side opened an app in this chat (or updated it): `open` goes now when both sides offer `apps/1` on the live
+	* session, and again on every session that comes back while the app stays open. Never on the DHT.
+	*/
+	openApp(app, version) {
+		const frame = JSON.stringify(appOpenFrame(app, version));
+		this.apps.open.set(app, version);
+		if (this.supportsApps && this.channel) try {
+			this.channel.send(frame);
+		} catch {}
+	}
+	/** This side closed an app in this chat: `close` goes now when it can; nothing is said later. */
+	closeApp(app) {
+		const frame = JSON.stringify(appCloseFrame(app));
+		if (!this.apps.open.delete(app)) return;
+		if (this.supportsApps && this.channel) try {
+			this.channel.send(frame);
+		} catch {}
+	}
+	/**
+	* One data frame of an app open on both sides, on the live session only. An error when it did not go: nothing is
+	* kept to send later.
+	*/
+	sendAppData(app, data) {
+		if (!this.apps.open.has(app)) return "not-open";
+		if (appDataBytes(data) > 32768) return "too-large";
+		if (!this.channel || !this.isDataLinkOpen) return "offline";
+		if (!this.supportsApps) return "peer-closed";
+		const refused = this.apps.canSend(app, data);
+		if (refused) return refused;
+		try {
+			this.channel.send(JSON.stringify(appDataFrame(app, data)));
+			return null;
+		} catch {
+			return "offline";
+		}
+	}
+	/** What the contact had open is gone (`apps/1` is no longer agreed, or this link stopped): each app hears it now. */
+	appsEnded() {
+		if (this.appsGrace) {
+			clearTimeout(this.appsGrace);
+			this.appsGrace = null;
+		}
+		for (const event of this.apps.sessionEnded()) this.options.events?.onAppFrame?.(event);
+	}
+	appsGrace = null;
+	/**
+	* The session ended or a new one took its place (a transport switch, a resume, a re-dial): what the contact had open
+	* is held for `APP_RESUME_GRACE_MS` (WISP 1200 § In a chat). The next session's `open` takes each back, and the app
+	* hears only that open, not a close first; one not said again by then is closed with `offline`.
+	*/
+	appsSuspended() {
+		this.apps.sessionSuspended();
+		if (!this.apps.holding || this.appsGrace) return;
+		this.appsGrace = setTimeout(() => {
+			this.appsGrace = null;
+			for (const event of this.apps.heldExpired()) this.options.events?.onAppFrame?.(event);
+		}, this.options.appResumeGraceMs ?? 1e4);
+	}
 	/** Whether files/3 was agreed on the session open now; kept to say when that changes. */
 	filesOpen = false;
 	emitFilesSession(again = false) {
@@ -17951,15 +18829,24 @@ var GhostLink = class {
 				this.channel.send(JSON.stringify(pending));
 			} catch {}
 		}
-		if (changed.includes("typing/1") && !this.supportsTyping) {
-			this.typingSender.reset();
-			this.typingReceiver.clear();
+		if (changed.includes("typing/1")) {
+			if (!this.supportsTyping) {
+				this.typingSender.reset();
+				this.typingReceiver.clear();
+			} else this.resumeTyping();
 		}
 		if (changed.includes("react/1")) this.options.events?.onReactionsSupport?.(this.supportsReactions);
 		if (changed.includes("edit/1")) this.options.events?.onEditSupport?.(this.supportsEdits);
 		if (changed.includes("pin/1")) this.options.events?.onPinSupport?.(this.supportsPins);
 		if (changed.includes("wake/1")) this.options.events?.onWakeSupport?.(this.supportsWake);
 		if (changed.includes("upgrade/1")) this.switcher.reconsider();
+		if (changed.includes("apps/1")) {
+			if (this.supportsApps && this.channel) for (const [app, version] of this.apps.open) try {
+				this.channel.send(JSON.stringify(appOpenFrame(app, version)));
+			} catch {}
+			if (!this.supportsApps) this.appsEnded();
+			this.options.events?.onAppsSupport?.(this.supportsApps);
+		}
 		const devices = this.options.deviceCapabilities;
 		if (devices && changed.some((capability) => devices.includes(capability))) this.options.events?.onDeviceCapabilities?.(devices.filter((capability) => this.supportsDevice(capability)));
 		this.emitPairingState();
@@ -18059,7 +18946,9 @@ var GhostLink = class {
 					if (transport === "webrtc/1") {
 						this.rtcCandidateWaiter = done;
 						this.rtcRetired().then(() => {
-							if (active) return this.dataLink.connect();
+							if (!active || epoch !== this.candidateEpoch || this.switcher.pending !== plan) return;
+							this.switcher.dialing(plan);
+							return this.dataLink.connect();
 						}).catch(done.reject);
 					} else {
 						const endpoint = this.endpoints.get(transport), descriptor = plan.remote.descriptors[transport];
@@ -18067,6 +18956,7 @@ var GhostLink = class {
 							done.reject(/* @__PURE__ */ new Error("Peer native address unavailable"));
 							return;
 						}
+						this.switcher.dialing(plan);
 						endpoint.connect(descriptor).then(({ channel, binding }) => {
 							if (!active || epoch !== this.candidateEpoch || this.switcher.pending !== plan) {
 								channel.close();
@@ -18349,6 +19239,7 @@ var GhostLink = class {
 					this.sessionCapabilities.reset();
 					this.typingSender.reset();
 					this.typingReceiver.clear();
+					this.appsSuspended();
 					this.pairedHttp?.close();
 					this.pairedHttp = new PairedHttp(channel, this.options.getHostedHttpService, this.options.localFetch);
 					this.emitPairingState();
@@ -18529,6 +19420,12 @@ var GhostLink = class {
 						if (this.supportsTyping) this.typingReceiver.receive(frame);
 						return;
 					}
+					if (frame?.t === "paired-app") {
+						if (!this.supportsApps) return;
+						const event = this.apps.receive(frame);
+						if (event) this.options.events?.onAppFrame?.(event);
+						return;
+					}
 					if (frame?.t === "paired-reaction") {
 						if (!this.supportsReactions || !this.reactionsReceived.take()) return;
 						const reaction = parseReactionFrame(frame);
@@ -18802,6 +19699,10 @@ var GhostLink = class {
 	peerLost(why) {
 		if (this.stopped || this.leaving || this.yielding) return;
 		traceLink(this.myPubKeyZ32, "peer-lost", { why });
+		if (Date.now() < this.wokeUntil) {
+			this.wokeUntil = 0;
+			this.resumeAfterAbsence();
+		}
 		this.lostUntil = Date.now() + WATCH_PEER_MS;
 		this.autoConnectFailures = 0;
 		this.lastAutoConnectAt = 0;
@@ -18877,12 +19778,68 @@ var GhostLink = class {
 		this.autoConnectFailures = 0;
 		this.lastAutoConnectAt = 0;
 		this.session.pollNow();
-		if (!this.channel) {
+		if (this.channel) {
+			this.wokeUntil = Date.now() + WAKE_LOST_MS;
+			this.probeAfterWake(this.channel);
+		} else {
+			this.resumeAfterAbsence();
 			if (!this.session.publishedRecently(RECENTLY_PUBLISHED_MS)) this.session.refreshAdvertisement();
 			this.maybeAutoConnect(this.presence);
 		}
 	}
+	/**
+	* Back in front with no session, after one was live: the contact likely did not notice this app go (a phone puts a
+	* backgrounded app to sleep without a word), and reads this chat at its slow pace (30 s on the relays in the
+	* background), so an offer or a fresh packet of this side's waited about that long for it. The chat resumes as after a
+	* restart (WISP 100, "Back after a restart"): this side dials whatever its key, on the transport it was live on, and
+	* knocks on the contact's other transports as its offer goes out, which reaches the contact at once.
+	*/
+	resumeAfterAbsence() {
+		const transport = this.lastLiveOn;
+		if (!transport || this.resuming || this.departed || !this.options.pairing?.credentials.peerKey || !this.options.params.profile || this.deliveryMode === "dht") return;
+		this.lastLiveOn = void 0;
+		this.resuming = transport;
+		this.resumingWoke = true;
+		this.knockedEarly = -1;
+		traceLink(this.myPubKeyZ32, "wake-resume", { transport });
+		if (transport !== "webrtc/1") {
+			this.resumeWaitUntil = Date.now() + RESUME_WAIT_MS;
+			return;
+		}
+		if (this.dataLink.state === "answering" && this.answeringEpoch === this.connectionEpoch) {
+			const epoch = this.connectionEpoch;
+			setTimeout(() => this.maybeKnockAnswering(epoch), 0);
+			return;
+		}
+		const offered = this.offered;
+		if (!offered || offered.resume || offered.epoch !== this.connectionEpoch || !this.offerOut && !this.dialing) return;
+		this.resuming = void 0;
+		this.resumingWoke = false;
+		offered.resume = true;
+		offered.woke = true;
+		if (!this.dialing) setTimeout(() => this.maybeKnockEarly(offered.epoch), 0);
+	}
+	/** A ping on the session right after a wake, with `PONG_WAIT_MS` for its answer: none, and the session is dead. */
+	probeAfterWake(channel) {
+		if (!this.peerAnswersPings || this.paired?.state.status !== "ready") return;
+		this.unansweredPings++;
+		try {
+			this.pingSentAt = Date.now();
+			channel.send(JSON.stringify({ t: "paired-ping" }));
+		} catch {
+			this.dropDeadSession(channel);
+			return;
+		}
+		if (this.pongWait) clearTimeout(this.pongWait);
+		this.pongWait = setTimeout(() => {
+			this.pongWait = null;
+			if (this.channel !== channel || this.stopped) return;
+			traceLink(this.myPubKeyZ32, "wake-unanswered", {});
+			this.dropDeadSession(channel);
+		}, PONG_WAIT_MS);
+	}
 	detach() {
+		if (this.channel && this.paired?.state.status === "ready") this.lastLiveOn = this.activeBinding?.transport ?? "webrtc/1";
 		this.stopLiveness();
 		const wasNative = !!this.activeBinding;
 		this.applicationOpen = false;
@@ -18908,6 +19865,7 @@ var GhostLink = class {
 		this.sessionCapabilities.reset();
 		this.typingSender.reset();
 		this.typingReceiver.clear();
+		this.appsSuspended();
 		this.emitFilesSession();
 		if (this.peerGroupVersions) {
 			this.peerGroupVersions = null;
@@ -20771,7 +21729,7 @@ var DID_GHOSTLY_SERVICE = "GhostlyIdentityProof";
 var METHOD_NAME = /^[a-z0-9]+$/;
 var Z32_KEY = /^[ybndrfg8ejkmcpqxot1uwisza345h769]{52}$/;
 var B64URL = /^[A-Za-z0-9_-]*$/;
-var SEGMENT = /^[A-Za-z0-9._~-]{1,64}$/;
+var SEGMENT$1 = /^[A-Za-z0-9._~-]{1,64}$/;
 var HEX64 = /^[a-f0-9]{64}$/;
 var METHOD_LIST = "did:key, did:jwk, did:dht and did:web";
 /** base64url without padding, strictly: decoding and encoding again gives the same text. */
@@ -20782,7 +21740,7 @@ function strictBase64Url(value) {
 	if (toBase64Url(bytes) !== value) throw new DidError("Not canonical base64url");
 	return bytes;
 }
-var isObject$1 = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+var isObject$3 = (v) => !!v && typeof v === "object" && !Array.isArray(v);
 /**
 * The DID a person typed, checked and in canonical form, or a message they can act on. Methods other than
 * the four Ghostly checks are refused with "not supported yet"; a DID URL (a `#fragment`, `?query` or
@@ -20856,7 +21814,7 @@ function parseWeb(id) {
 		if (!(port >= 1 && port <= 65535) || String(port) !== portMatch[2]) throw new DidError("did:web: that port is not valid");
 	}
 	if (path.length > 8) throw new DidError("did:web: at most 8 path segments");
-	for (const segment of path) if (!SEGMENT.test(segment) || segment === "." || segment === "..") throw new DidError("did:web: each path segment is letters, digits, dots, dashes, underscores or tildes");
+	for (const segment of path) if (!SEGMENT$1.test(segment) || segment === "." || segment === "..") throw new DidError("did:web: each path segment is letters, digits, dots, dashes, underscores or tildes");
 	return {
 		id: [`${host}${port ? `%3A${port}` : ""}`, ...path].join(":"),
 		host,
@@ -20900,7 +21858,7 @@ function didWebFileNames(text, did, statement) {
 	} catch {
 		return false;
 	}
-	return isObject$1(body) && body.ghostly === 1 && body.did === did && body.statement === statement;
+	return isObject$3(body) && body.ghostly === 1 && body.did === did && body.statement === statement;
 }
 /** The service entry a did.json can carry instead of the file. */
 function didGhostlyServiceEntry(did, key, proofId) {
@@ -20982,7 +21940,7 @@ var JWK_CURVES = {
 };
 /** A public JWK. Other curves are `undefined`; a malformed one throws. */
 function jwkKey(jwk) {
-	if (!isObject$1(jwk)) throw new DidError("That JWK is not an object");
+	if (!isObject$3(jwk)) throw new DidError("That JWK is not an object");
 	const spec = typeof jwk.crv === "string" ? JWK_CURVES[jwk.crv] : void 0;
 	if (!spec || jwk.kty !== spec.kty) return void 0;
 	const coordinate = (v) => {
@@ -21027,7 +21985,7 @@ function staticKey(did) {
 	} catch {
 		throw new DidError("That did:jwk does not hold a JSON Web Key");
 	}
-	if (!isObject$1(jwk)) throw new DidError("That did:jwk does not hold a JSON Web Key");
+	if (!isObject$3(jwk)) throw new DidError("That did:jwk does not hold a JSON Web Key");
 	if ("d" in jwk || "p" in jwk || "k" in jwk) throw new DidError("That did:jwk contains a private key. Never share it: make a new key");
 	const key = jwkKey(jwk);
 	if (!key) throw new DidError("That did:jwk is not an Ed25519, secp256k1 or P-256 key");
@@ -21090,13 +22048,13 @@ var list = (value, name) => {
 * `GhostlyIdentityProof` services are kept. Keys Ghostly cannot use are counted in `skipped`.
 */
 function parseDidDocument(did, raw) {
-	if (!isObject$1(raw)) throw new DidError("The DID document is not a JSON object");
+	if (!isObject$3(raw)) throw new DidError("The DID document is not a JSON object");
 	if (raw.id !== did) throw new DidError(typeof raw.id === "string" ? `The DID document is for another DID (${raw.id.slice(0, 80)})` : "The DID document has no id");
 	const keys = /* @__PURE__ */ new Map();
 	const unusable = /* @__PURE__ */ new Set();
 	let skipped = 0;
 	const add = (vm) => {
-		if (!isObject$1(vm)) {
+		if (!isObject$3(vm)) {
 			skipped++;
 			return;
 		}
@@ -21127,10 +22085,10 @@ function parseDidDocument(did, raw) {
 	}
 	const services = [];
 	for (const s of list(raw.service, "service")) {
-		if (!isObject$1(s)) continue;
+		if (!isObject$3(s)) continue;
 		const types = Array.isArray(s.type) ? s.type : [s.type];
 		const endpoint = s.serviceEndpoint;
-		if (!types.includes("GhostlyIdentityProof") || !isObject$1(endpoint)) continue;
+		if (!types.includes("GhostlyIdentityProof") || !isObject$3(endpoint)) continue;
 		if (typeof endpoint.key === "string" && Z32_KEY.test(endpoint.key) && typeof endpoint.proof === "string" && HEX64.test(endpoint.proof)) services.push({
 			id: typeof s.id === "string" ? s.id.slice(0, 200) : "",
 			key: endpoint.key,
@@ -21173,7 +22131,7 @@ function parseDidJws(input) {
 	} catch {
 		throw new DidError("The JWS header is not base64url JSON");
 	}
-	if (!isObject$1(header)) throw new DidError("The JWS header is not a JSON object");
+	if (!isObject$3(header)) throw new DidError("The JWS header is not a JSON object");
 	const alg = header.alg;
 	if (typeof alg !== "string" || !DID_JWS_ALGS[alg]) throw new DidError(`The JWS uses ${typeof alg === "string" ? alg.slice(0, 16) : "no algorithm"}: Ghostly checks EdDSA, ES256K and ES256`);
 	if (header.kid !== void 0 && (typeof header.kid !== "string" || header.kid.length > 640)) throw new DidError("The JWS kid is not a key id");
@@ -21985,7 +22943,7 @@ function compactSize(n) {
 	throw new Error("Too large");
 }
 var varBytes = (b) => concatBytes$1(compactSize(b.length), b);
-var u32$1 = (n) => {
+var u32$2 = (n) => {
 	const b = /* @__PURE__ */ new Uint8Array(4);
 	new DataView(b.buffer).setUint32(0, n >>> 0, true);
 	return b;
@@ -21996,14 +22954,14 @@ var u64 = (n) => {
 	return b;
 };
 function encodeTx(tx, withWitness = tx.inputs.some((i) => i.witness.length > 0)) {
-	const parts = [u32$1(tx.version)];
+	const parts = [u32$2(tx.version)];
 	if (withWitness) parts.push(Uint8Array.of(0, 1));
 	parts.push(compactSize(tx.inputs.length));
-	for (const i of tx.inputs) parts.push(i.txid, u32$1(i.vout), varBytes(i.scriptSig), u32$1(i.sequence));
+	for (const i of tx.inputs) parts.push(i.txid, u32$2(i.vout), varBytes(i.scriptSig), u32$2(i.sequence));
 	parts.push(compactSize(tx.outputs.length));
 	for (const o of tx.outputs) parts.push(u64(o.value), varBytes(o.script));
 	if (withWitness) for (const i of tx.inputs) parts.push(encodeWitness(i.witness));
-	parts.push(u32$1(tx.lockTime));
+	parts.push(u32$2(tx.lockTime));
 	return concatBytes$1(...parts);
 }
 var encodeWitness = (stack) => concatBytes$1(compactSize(stack.length), ...stack.map(varBytes));
@@ -22169,12 +23127,12 @@ function decodeBase64(text) {
 /** BIP 143, for witness v0. `scriptCode` is the P2PKH script of the key. */
 function sighashV0(tx, scriptCode, hashType) {
 	const input = tx.inputs[0];
-	return sha256d(u32$1(tx.version), sha256d(...tx.inputs.map((i) => concatBytes$1(i.txid, u32$1(i.vout)))), sha256d(...tx.inputs.map((i) => u32$1(i.sequence))), input.txid, u32$1(input.vout), varBytes(scriptCode), u64(0n), u32$1(input.sequence), sha256d(...tx.outputs.map((o) => concatBytes$1(u64(o.value), varBytes(o.script)))), u32$1(tx.lockTime), u32$1(hashType));
+	return sha256d(u32$2(tx.version), sha256d(...tx.inputs.map((i) => concatBytes$1(i.txid, u32$2(i.vout)))), sha256d(...tx.inputs.map((i) => u32$2(i.sequence))), input.txid, u32$2(input.vout), varBytes(scriptCode), u64(0n), u32$2(input.sequence), sha256d(...tx.outputs.map((o) => concatBytes$1(u64(o.value), varBytes(o.script)))), u32$2(tx.lockTime), u32$2(hashType));
 }
 /** BIP 341 key path, SIGHASH_DEFAULT or SIGHASH_ALL, no annex. */
 function sighashV1(tx, scriptPubKey, hashType) {
 	const input = tx.inputs[0];
-	return schnorr.utils.taggedHash("TapSighash", concatBytes$1(Uint8Array.of(0, hashType), u32$1(tx.version), u32$1(tx.lockTime), sha256(concatBytes$1(input.txid, u32$1(input.vout))), sha256(u64(0n)), sha256(varBytes(scriptPubKey)), sha256(u32$1(input.sequence)), sha256(concatBytes$1(...tx.outputs.map((o) => concatBytes$1(u64(o.value), varBytes(o.script))))), Uint8Array.of(0), u32$1(0)));
+	return schnorr.utils.taggedHash("TapSighash", concatBytes$1(Uint8Array.of(0, hashType), u32$2(tx.version), u32$2(tx.lockTime), sha256(concatBytes$1(input.txid, u32$2(input.vout))), sha256(u64(0n)), sha256(varBytes(scriptPubKey)), sha256(u32$2(input.sequence)), sha256(concatBytes$1(...tx.outputs.map((o) => concatBytes$1(u64(o.value), varBytes(o.script))))), Uint8Array.of(0), u32$2(0)));
 }
 /** The original sighash, for P2PKH: the input's script replaced by the spent output's, the rest as is. */
 function sighashLegacy(tx, scriptPubKey, hashType) {
@@ -22185,7 +23143,7 @@ function sighashLegacy(tx, scriptPubKey, hashType) {
 			witness: [],
 			scriptSig: n === 0 ? scriptPubKey : /* @__PURE__ */ new Uint8Array(0)
 		}))
-	}, false), u32$1(hashType));
+	}, false), u32$2(hashType));
 }
 /** A check that throws on malformed input (a point off the curve…) simply does not hold. */
 function holds(check) {
@@ -22370,11 +23328,11 @@ function verifyBip322(address, message, signature) {
 */
 var MAX_MESSAGE = 16384;
 var MAX_SIGNATURE = 16384;
-var MAGIC = utf8Encode("Bitcoin Signed Message:\n");
+var MAGIC$1 = utf8Encode("Bitcoin Signed Message:\n");
 /** The digest `signmessage` signs: double SHA-256 of the length-prefixed magic and message. */
 function legacyMessageHash(message) {
 	const bytes = utf8Encode(message);
-	return sha256d(compactSize(MAGIC.length), MAGIC, compactSize(bytes.length), bytes);
+	return sha256d(compactSize(MAGIC$1.length), MAGIC$1, compactSize(bytes.length), bytes);
 }
 /** Header bytes 27-34 are P2PKH (uncompressed 27-30, compressed 31-34); 35-42 are BIP 137 SegWit headers. */
 var isLegacySignature = (bytes) => bytes.length === 65 && bytes[0] >= 27 && bytes[0] <= 42;
@@ -22501,8 +23459,8 @@ var Reader = class {
 		if (!this.done) fail("Trailing bytes in SSH data");
 	}
 };
-var u32 = (n) => Uint8Array.of(n >>> 24, n >>> 16 & 255, n >>> 8 & 255, n & 255);
-var sshString = (b) => concatBytes$1(u32(b.length), b);
+var u32$1 = (n) => Uint8Array.of(n >>> 24, n >>> 16 & 255, n >>> 8 & 255, n & 255);
+var sshString = (b) => concatBytes$1(u32$1(b.length), b);
 function strictBase64(text, max) {
 	if (text.length > max || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(text)) fail("Invalid base64");
 	const bytes = fromBase64(text);
@@ -22668,7 +23626,7 @@ async function verifySshSignature(armored, message, options = {}) {
 			userVerified: !!(flags & SK_USER_VERIFIED),
 			counter
 		};
-		data = concatBytes$1(sha256(utf8Encode(key.application)), Uint8Array.of(flags), u32(counter), sha256(signed));
+		data = concatBytes$1(sha256(utf8Encode(key.application)), Uint8Array.of(flags), u32$1(counter), sha256(signed));
 	}
 	r.end();
 	const verifyWith = async () => {
@@ -25184,7 +26142,7 @@ var pairAad = (f, to) => JSON.stringify([
 	f.ts,
 	to
 ]);
-var isObject = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+var isObject$2 = (v) => !!v && typeof v === "object" && !Array.isArray(v);
 var messageSigned = (f) => utf8Encode(JSON.stringify([
 	"ghostly-group/2 msg",
 	f.g,
@@ -26114,7 +27072,7 @@ var CommunitySession = class {
 	sendApp(frame, nick, now = Date.now()) {
 		return this.serialize(async () => {
 			if (!this.isMember) return { error: this.state.statusReason ?? "You are not in this group" };
-			if (!isObject(frame) || utf8Encode(JSON.stringify(frame)).length > COMMUNITY_LIMITS.appBytes) return { error: "Too large for the group" };
+			if (!isObject$2(frame) || utf8Encode(JSON.stringify(frame)).length > COMMUNITY_LIMITS.appBytes) return { error: "Too large for the group" };
 			const sent = await this.sendPayload(() => ({ x: frame }), nick, now);
 			if ("error" in sent) return sent;
 			await this.say(sent.frame);
@@ -26163,7 +27121,7 @@ var CommunitySession = class {
 		return this.serialize(async () => {
 			if (!this.isMember) return { error: this.state.statusReason ?? "You are not in this group" };
 			if (to === this.myKey || !rosterHas(this.roster, to)) return { error: "Not a member of this group" };
-			if (!isObject(payload)) return { error: "Nothing to send" };
+			if (!isObject$2(payload)) return { error: "Nothing to send" };
 			const plain = utf8Encode(JSON.stringify(payload));
 			if (plain.length > COMMUNITY_LIMITS.appBytes) return { error: "Too large for the group" };
 			const sent = await this.sendPayload((header) => ({ p: {
@@ -26276,7 +27234,7 @@ var CommunitySession = class {
 			try {
 				parsed = plain === null ? null : JSON.parse(plain);
 			} catch {}
-			if (!isObject(parsed) || isObject(parsed.p)) continue;
+			if (!isObject$2(parsed) || isObject$2(parsed.p)) continue;
 			const o = readOriginal(parsed.o, f) ?? {
 				e: f.e,
 				h: f.h,
@@ -26424,7 +27382,7 @@ var CommunitySession = class {
 		} catch {
 			return false;
 		}
-		if (!isObject(parsed)) return false;
+		if (!isObject$2(parsed)) return false;
 		const original = parsed.o === void 0 ? null : readOriginal(parsed.o, raw);
 		if (parsed.o !== void 0 && !original) return false;
 		const first = original ? {
@@ -26442,8 +27400,8 @@ var CommunitySession = class {
 		const text = typeof parsed.text === "string" ? parsed.text.slice(0, COMMUNITY_LIMITS.textBytes) : void 0;
 		if ([
 			text !== void 0,
-			isObject(parsed.x),
-			isObject(parsed.p)
+			isObject$2(parsed.x),
+			isObject$2(parsed.p)
 		].filter(Boolean).length !== 1) return false;
 		const nick = typeof parsed.nick === "string" ? sanitizeNick(parsed.nick) : void 0;
 		if (nick && this.state.nicks[raw.s] !== nick) {
@@ -26468,7 +27426,7 @@ var CommunitySession = class {
 				...forwarded ? { forwarded } : {},
 				...card ? { card } : {}
 			});
-		} else if (isObject(parsed.x)) await this.hooks.app?.({
+		} else if (isObject$2(parsed.x)) await this.hooks.app?.({
 			id,
 			sender: raw.s,
 			epoch: raw.e,
@@ -26484,7 +27442,7 @@ var CommunitySession = class {
 				try {
 					opened = plain && plain.length <= COMMUNITY_LIMITS.appBytes ? JSON.parse(utf8Decode(plain)) : null;
 				} catch {}
-				if (isObject(opened)) await this.hooks.pair?.({
+				if (isObject$2(opened)) await this.hooks.pair?.({
 					id,
 					sender: raw.s,
 					epoch: raw.e,
@@ -26939,6 +27897,663 @@ var GroupTypingBoard = class {
 	}
 };
 //#endregion
-export { checkAtprotoProofRecord as $, HANDOFF_VERIFIED as $a, replySnippet as $i, freshHubs as $n, OwnInviteError as $o, IdentityCheckUnavailable as $r, fromBase64Url as $s, isPubkyKey as $t, GROUP_EDIT_TEXT_BYTES as A, CALL_SIGNAL_MAX_AGE_MS as Aa, parseVoiceMeta as Ai, findEndpoint as An, SET_UPDATE as Ao, newWakeToken as Ar, DEFAULT_RELAYS as As, encodeDidDhtPacket as At, sameSshKey as B, HTTP_SERVICE_PROTO as Ba, COMMUNITY_REACTION_FRAME as Bi, SIGNAL_FRESH_MS as Bn, enrollCancelFrame as Bo, HOLD_DATED_BACK_MS as Br, RELAY_PAYLOAD_MAX_BYTES as Bs, USDT_PUBLIC_RPC as Bt, groupWakes as C, GhostlyHttpError as Ca, safeBlobType as Ci, resolveLightningDestination as Cn, readHandoffHave as Co, nextPinNumber as Cr, firstDeviceSetSecret as Cs, parseDidSignaturePaste as Ct, GroupSession as D, LIMITS as Da, VOICE_LIMITS as Di, ENDPOINT as Dn, readHandoffVerified as Do, WAKE_CALL_INTERVAL_MS as Dr, signTurnRelease as Ds, didDhtDocument as Dt, GROUP_READ_NOTE as E, webLocalFetch as Ea, PLAYABLE_AUDIO as Ei, decodeBolt11 as En, readHandoffTurnFrame as Eo, readPin as Er, signTurnPacket as Es, strictBase64Url as Et, SSHSIG_MAX_ARMOR as F, callSignalHeardAt as Fa, RateWindow as Fi, INVITE_TAKEN as Fn, verifySetUpdate as Fo, vapidKeysMatch as Fr, traceLink as Fs, ONCHAIN_PROVIDER as Ft, decodeAnyBitcoinAddress as G, HANDOFF_DONE as Ga, queueReaction as Gi, MESH_HUBS as Gn, enrollHelloFrame as Go, readManifest as Gr, createIdentity as Gs, validatePaymentTarget as Gt, verifySshSignature as H, serviceIdFromName as Ha, REACTION_LIMITS as Hi, SIGNAL_REPLY_MS as Hn, enrollDigits as Ho, HoldKeys as Hr, newerPacket as Hs, assertTokenUnits as Ht, SSHSIG_NAMESPACE as I, extractParamsFromSdp as Ia, dhtEditId as Ii, LIVENESS_PING_MS as In, ENROLL_DONE as Io, BUTTONS_CAPABILITY as Ir, budgetRetryMs as Is, PaymentPreflightError as It, ATPROTO_PROOF_COLLECTION as J, HANDOFF_OFFER as Ja, readReaction as Ji, pickMeshHubs as Jn, readEnrollHello as Jo, capsDescriptors as Jr, publicKeyFromZ32 as Js, SPARK_PROVIDER as Jt, ATPROTO_DECLARED_SCOPE as K, HANDOFF_HAVE as Ka, reactionEmoji as Ki, mayBeHub as Kn, enrollProofFrame as Ko, CapsExchange as Kr, identityFromSeed as Ks, walletNetworkOf as Kt, SshSigError as L, parseCallSignal as La, parseLinkPreview as Li, pairedMessageFrame as Ln, ENROLL_GRANT as Lo, EDIT_CAPABILITY as Lr, isDiscoveryBudgetError as Ls, SEPOLIA_TEST_USDT as Lt, parseCommunityEdit as M, answersOffer as Ma, parseVideoMeta as Mi, parseCashuRequestPayload as Mn, setAckFrame as Mo, relayRequest as Mr, currentRelays as Ms, signDidDhtPacket as Mt, mentionsMember as N, buildSdpFromSignal as Na, EDIT_BUFFER_MS as Ni, parseFedimintRequestPayload as Nn, setUpdateFrame as No, wakeRequest as Nr, normalizeRelayUrl as Ns, ETHEREUM_USDT as Nt, COMMUNITY_EDIT_FRAME as O, decodeControl as Oa, baseMime as Oi, cashuRequestPayload as On, sealHandoffPiece as Oo, WakeLimiter as Or, turnKeys as Os, didDhtFromPublicKey as Ot, groupName as P, callRtcConfig as Pa, EDIT_RATE_WINDOW_MS as Pi, GhostLink as Pn, signTombstone as Po, checkPushEndpoint as Pr, setLinkTraceSink as Ps, EVM_TEST_CHAINS as Pt, atprotoProofRkey as Q, HANDOFF_TIMINGS as Qa, readReply as Qi, doorHubs as Qn, readDeviceInvite as Qo, IDENTITY_REVOCATION_LABEL as Qr, bytesEqual as Qs, PUBKY_PROOF_MAX_BYTES as Qt, parseSshPublicKey as R, signalHasVideo as Ra, forwardedAgain as Ri, CarriedTransport as Rn, ENROLL_HELLO as Ro, UPGRADE_CAPABILITY as Rr, withRequestOptions as Rs, SEPOLIA_TEST_USDT_FAUCET as Rt, groupWakeFrame as S, presenceSeenAt as Sa, readImageMeta as Si, requestLnurlInvoice as Sn, readHandoffDone as So, mayPin as Sr, TURN_MAX as Ss, parseDidDocument as St, GROUP_REACTED_FRAME as T, parseLocalTarget as Ta, sanitizeMime as Ti, engineText as Tn, readHandoffPake as To, pinNumberHolds as Tr, readTurnPacket as Ts, staticDidDocument as Tt, verifyBitcoinMessage as U, HANDOFF_ACK as Ua, ReactionWindow as Ui, groupSignalFrame as Un, enrollDoneFrame as Uo, HoldRefusedError as Ur, openRelayPayload as Us, assertWholeSats as Ut, sshSignCommand as V, LEGACY_SERVICES as Va, GROUP_REACTION_FRAME as Vi, SIGNAL_HOLD_MS as Vn, enrollCancelReason as Vo, HOLD_LIMITS as Vr, createRelayPayload as Vs, WALLET_NETWORKS as Vt, BitcoinAddressError as W, HANDOFF_CANCEL as Wa, nextReactionNumber as Wi, readGroupSignal as Wn, enrollGrantFrame as Wo, newMailbox as Wr, parseRelayPayload as Ws, formatPaymentAmount as Wt, atprotoDidMethod as X, HANDOFF_PIECE_BYTES as Xa, wireReaction as Xi, beaconKeys as Xn, createDeviceInvite as Xo, IDENTITY_MAX_EVIDENCE as Xr, MAX_AVATAR_LENGTH as Xs, sparkInvoiceDetails as Xt, ATPROTO_PROOF_SCOPE as Y, HANDOFF_PAKE as Ya, validReactionNumber as Yi, COMMUNITY_TOPOLOGY as Yn, verifyEnrollProof as Yo, dialDescriptors as Yr, verify as Ys, sparkAddressKind as Yt, atprotoProofRecord as Z, HANDOFF_REQUEST as Za, pairedReplyAuthor as Zi, beaconRecords as Zn, deviceInviteJoinerParams as Zo, IDENTITY_MAX_VALIDITY as Zr, sanitizeAvatar as Zs, isBitcoinAddress as Zt, knockRecords as _, verifyCommitSignature as _a, DHT_MESSAGE_TTL as _i, recordsFromTxt as _n, handoffStreamKey as _o, TypingSender as _r, TURN_RAISE_READ_TIMEOUT_MS as _s, didWebFileNames as _t, sealGroupTyping as a, checkStatusCard as aa, newIdentityBinding as ai, pubkyProofPath as an, handoffCancelFrame as ao, pickHubs as ar, DEVICES_CAPABILITY as as, verifyAtprotoRecordProof as at, GROUP_WAKE_FRAME as b, EXPECT_PEER_MS as ba, dhtFileId as bi, txtValue as bn, readHandoffAck as bo, GROUP_PIN_FRAME as br, turnPutSummary as bs, normalizeDid as bt, GROUP_READ_NOTE_COMMUNITY as c, arrivalKey as ca, lastSharedWithMe as ci, DOMAIN_FILE_MAX_BYTES as cn, handoffDataFrame as co, readBeaconHead as cr, deviceEchoFrame as cs, DID_JWS_MAX_LENGTH as ct, encodeCommunityLink as d, receivedTimestamp as da, validExternalKey as di, domainTxtRecord as dn, handoffHelloFrame as do, ChatFiles as dr, deviceLinkPairing as ds, checkDidSignature as dt, BUTTON_ID as ea, randomBytes as ec, IdentityExchange as ei, isPubkyProofFolder as en, filePartName as eo, lobbyKeys as er, createChatInvite as es, isAtprotoDid as et, KNOCK_TTL_MS as f, shownTime as fa, TRANSPORTS as fi, domainWellKnownFile as fn, handoffManifestFrames as fo, FILE_LIMITS as fr, devicePingFrame as fs, didGhostlyServiceEntry as ft, knockIdentity as g, rosterHas as ga, DHT_FILE_TOO_LARGE as gi, normalizeDomain as gn, handoffRetryAfter as go, TYPING_REFRESH_MS as gr, TURN_PUT_WINDOW_MS as gs, didWebFile as gt, entryParams as h, MEMBER_KEY as ha, irohRelayUrl as hi, nip05RootKey as hn, handoffReleaseFrame as ho, TYPING_KINDS as hr, webCryptoSigner as hs, didWebDocumentUrl as ht, openGroupTyping as i, buttonLabelClash as ia, utf8Encode as ic, identityStatement as ii, pubkyProofFile as in, handoffBusyFrame as io, newerHead as ir, inviteOwnership as is, AtprotoProofError as it, carryMentions as j, RTC_CONFIG as ja, voicePeaksOf as ji, isFederationId as jn, readSetUpdate as jo, parseWakeFrame as jr, RelayTransport as js, resolveDidDht as jt, GROUP_EDIT_FRAME as k, encodeControl as ka, fileMessageText as ki, fedimintRequestPayload as kn, SET_ACK as ko, deviceWakeRequest as kr, turnName as ks, encodeDidDhtDeactivated as kt, communityHasFrame as l, claimedTime as la, PeerProofs as li, decodeDnsResponse as ln, handoffDigest as lo, readLobby as lr, deviceEchoNonce as ls, DidError as lt, encodeGroupEntryLink as m, MAX_GROUP_CHAIN as ma, irohDescriptor as mi, isPublicAddress as mn, handoffPakeFrame as mo, transferStalled as mr, seedSigner as ms, didSignedMessages as mt, GroupTypingBoard as n, RUN_RESULTS as na, toZ32 as nc, emptyIdentityLedger as ni, normalizePubkyKey as nn, handoffAttemptFailed as no, mergeBeacon as nr, encodeInviteCode as ns, parseAtprotoDidDocument as nt, COMMUNITY_LIMITS as o, sameButtonText as oa, receivedIdentityStatus as oi, homeserverWebEndpoint as on, handoffContext as oo, rankHubs as or, ENROLL_CAPABILITY as os, DID_DOCUMENT_MAX_BYTES as ot, decodeGroupEntryLink as p, GROUP_MEMBER_CAP as pa, automaticTransport as pi, encodeDnsQuery as pn, handoffOfferFrame as po, transferEnded as pr, newDeviceSetSecret as ps, didJwsAlg as pt, ATPROTO_FULL_SCOPE as q, HANDOFF_HELLO as qa, reactionIsNewer as qi, meshHubs as qn, readEnrollGrant as qo, DHT_TEXT_CAPABILITY as qr, identityFromSeedB64 as qs, SPARK_NETWORKS as qt, groupTypingEpoch as r, STATUS_CARD_LIMITS as ra, utf8Decode as rc, identityRevocationValue as ri, pubkyProofCapability as rn, handoffAttemptSucceeded as ro, mergeLobby as rr, inviteLink as rs, shortAtprotoDid as rt, CommunitySession as s, statusCardText as sa, revokesIdentity as si, pubkyHomeserverOf as sn, handoffContextProof as so, readBeacon as sr, HANDOFF_CAPABILITY as ss, DID_FILE_MAX_BYTES as st, GROUP_TYPING_FRAME as t, ITEM_STATES as ta, toBase64Url as tc, boundVerifiedIdentity as ti, newPubkyProofFolder as tn, handoffAttemptAllowed as to, lobbyRecords as tr, decodeInviteCode as ts, normalizeAtprotoHandle as tt, decodeCommunityLink as u, heardTime as ua, emptyProofLedger as ui, dnsProofName as un, handoffEphemeral as uo, shouldBeHub as ur, deviceKeyZ32 as us, checkDidJws as ut, mergeKnocks as v, edgeParams as va, peekDhtMailbox as vi, recordsFromWellKnown as vn, handoffVersions as vo, sanitizeTypingStatus as vr, TURN_SETTLE_MS as vs, didWebFileUrl as vt, parseGroupWakeFrame as w, formatLocalTarget as wa, sanitizeFileName as wi, engineError as wn, readHandoffHello as wo, pinIsNewer as wr, nextTurnPosition as ws, signingKeys as wt, GroupWakeLimiter as x, RELAY_POLL_INTERVALS as xa, parseImageMeta as xi, wellKnownUrl as xn, readHandoffCancel as xo, PIN_LIMITS as xr, TURN_LAST_SEQUENCE as xs, parseDid as xt, readKnocks as y, DirectPathWatch as ya, DHT_FILE_CAPABILITY as yi, recordsName as yn, newHandoffId as yo, typingActivity as yr, classifyTurnRead as ys, didWebHost as yt, parseSshSignature as z, emptyLinkRecords as za, readForwarded as zi, GROUP_SIGNAL_FRAME as zn, ENROLL_PROOF as zo, HOLD_CAPABILITY as zr, PacketTooLargeError as zs, TEST_USDT_FAUCET_AMOUNT as zt };
+//#region ../core/src/appBundle.ts
+var APP_BUNDLE_MAGIC = "GHOSTLYAPP1";
+var MAGIC = utf8Encode(APP_BUNDLE_MAGIC);
+var APP_BUNDLE_LIMITS = {
+	/** The whole bundle, phase 1. */
+	bundleBytes: 16777216,
+	files: 64,
+	manifestBytes: 65536,
+	/** A path, in bytes (paths are ASCII). */
+	pathBytes: 128,
+	iconBytes: 262144,
+	screenshots: 8,
+	/** Lengths in Unicode code points. */
+	title: 40,
+	tagline: 80,
+	description: 2e3,
+	releaseNotes: 500,
+	version: 64,
+	license: 128,
+	/** An https URL, in characters. */
+	url: 512,
+	sources: 8
+};
+var APP_ICON_PATH = "icon.png";
+var SCREENSHOT_TYPES = /\.(png|jpg|webp)$/;
+/**
+* The permissions of phase 1 (WISP 1200 · Permissions). `internet`: the app reaches HTTPS and WSS servers of its
+* choosing (the client runs it in its network runner); without it, an app has no network.
+*/
+var APP_PERMISSIONS = [
+	"chat",
+	"internet",
+	"name"
+];
+var APP_CLIENTS = [
+	"web",
+	"desktop",
+	"extension"
+];
+var REQUIRED = [
+	"ghostlyApp",
+	"publisher",
+	"name",
+	"version",
+	"sequence",
+	"kind",
+	"title",
+	"tagline",
+	"entry",
+	"permissions",
+	"runtime",
+	"license",
+	"files"
+];
+var OPTIONAL = [
+	"description",
+	"sources",
+	"proofs",
+	"homepage",
+	"support",
+	"releaseNotes"
+];
+/** Reserved for phase 2 and refused in phase 1. */
+var RESERVED = ["price", "recovery"];
+var SEMVER = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/;
+var HOST = /^>=(0|[1-9]\d*)\.(0|[1-9]\d*)(\.(0|[1-9]\d*))?$/;
+var SEGMENT = /^[A-Za-z0-9._-]+$/;
+var codePoints = (s) => [...s].length;
+/** One line: no control character. */
+var isLine$1 = (v, max, min = 0) => typeof v === "string" && codePoints(v) >= min && codePoints(v) <= max && !/\p{Cc}/u.test(v);
+/** Text of several lines: no control character but the line feed. */
+var isText$1 = (v, max) => typeof v === "string" && codePoints(v) <= max && !/[^\P{Cc}\n]/u.test(v);
+var isSafeCount = (v, min) => typeof v === "number" && Number.isSafeInteger(v) && v >= min;
+var isObject$1 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+/**
+* An https URL as WISP 1200 takes one anywhere: at most 512 characters, no user or password, and on jsDelivr only
+* `https://cdn.jsdelivr.net/gh/<owner>/<repo>@<40-hex commit>/...`, since a branch, a tag, a range or `latest` is
+* served from a copy that moves.
+*/
+function isAppUrl(value) {
+	if (typeof value !== "string" || value.length > APP_BUNDLE_LIMITS.url || !value.startsWith("https://")) return false;
+	let url;
+	try {
+		url = new URL(value);
+	} catch {
+		return false;
+	}
+	if (url.protocol !== "https:" || url.username || url.password || !url.hostname) return false;
+	const host = url.hostname.toLowerCase();
+	if (host === "jsdelivr.net" || host.endsWith(".jsdelivr.net")) return host === "cdn.jsdelivr.net" && /^\/gh\/[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+@[0-9a-f]{40}\/./.test(url.pathname);
+	return true;
+}
+/**
+* An SPDX license expression, read lightly: identifiers (`MIT`, `GPL-3.0-or-later`, `LicenseRef-x`, `Apache-2.0+`)
+* joined by `AND` and `OR`, `WITH` an exception, and parentheses; or `proprietary`.
+*/
+function isAppLicense(value) {
+	if (typeof value !== "string" || value.length < 1 || value.length > APP_BUNDLE_LIMITS.license) return false;
+	const tokens = value.match(/\(|\)|[^\s()]+/g);
+	if (!tokens || tokens.join("").length !== value.replace(/\s/g, "").length) return false;
+	let i = 0;
+	const id = () => {
+		const t = tokens[i];
+		if (t && /^[A-Za-z0-9][A-Za-z0-9.-]*\+?$/.test(t) && ![
+			"AND",
+			"OR",
+			"WITH"
+		].includes(t)) {
+			i++;
+			return true;
+		}
+		return false;
+	};
+	const term = (depth) => {
+		if (tokens[i] === "(") {
+			i++;
+			if (depth > 8 || !expr(depth + 1) || tokens[i] !== ")") return false;
+			i++;
+			return true;
+		}
+		if (!id()) return false;
+		if (tokens[i] === "WITH") {
+			i++;
+			return id();
+		}
+		return true;
+	};
+	const expr = (depth) => {
+		if (!term(depth)) return false;
+		while (tokens[i] === "AND" || tokens[i] === "OR") {
+			i++;
+			if (!term(depth)) return false;
+		}
+		return true;
+	};
+	return expr(0) && i === tokens.length;
+}
+/** A path of a bundle: relative, `/`-separated, `[A-Za-z0-9._-]` per segment, no `.` or `..`, at most 128 bytes. */
+function isAppPath(value) {
+	if (typeof value !== "string" || value.length < 1 || value.length > APP_BUNDLE_LIMITS.pathBytes) return false;
+	return value.split("/").every((s) => SEGMENT.test(s) && s !== "." && s !== "..");
+}
+var bad = (field, detail = `${field} is not valid`) => ({
+	ok: false,
+	reason: "bad-field",
+	detail
+});
+/** Checks a parsed manifest against every rule and bound of WISP 1200 that the manifest alone decides. */
+function checkAppManifest(value) {
+	if (!isObject$1(value)) return bad("manifest", "The manifest is not an object");
+	if (value.ghostlyApp !== void 0 && value.ghostlyApp !== 1) return {
+		ok: false,
+		reason: "unsupported-format",
+		detail: "ghostlyApp is not 1"
+	};
+	for (const key of Object.keys(value)) {
+		if (RESERVED.includes(key)) return {
+			ok: false,
+			reason: "reserved-key",
+			detail: key
+		};
+		if (!REQUIRED.includes(key) && !OPTIONAL.includes(key)) return {
+			ok: false,
+			reason: "unknown-key",
+			detail: key
+		};
+	}
+	for (const key of REQUIRED) if (!(key in value)) return {
+		ok: false,
+		reason: "missing-key",
+		detail: key
+	};
+	const m = value;
+	if (!isAppKey(m.publisher)) return bad("publisher");
+	if (typeof m.name !== "string" || !APP_NAME.test(m.name)) return bad("name");
+	if (typeof m.version !== "string" || m.version.length > APP_BUNDLE_LIMITS.version || !SEMVER.test(m.version)) return bad("version");
+	if (!isSafeCount(m.sequence, 1)) return bad("sequence");
+	if (m.kind !== "mini-app") return bad("kind");
+	if (!isLine$1(m.title, APP_BUNDLE_LIMITS.title, 1)) return bad("title");
+	if (!isLine$1(m.tagline, APP_BUNDLE_LIMITS.tagline, 1)) return bad("tagline");
+	if (m.description !== void 0 && !isText$1(m.description, APP_BUNDLE_LIMITS.description)) return bad("description");
+	if (m.releaseNotes !== void 0 && !isLine$1(m.releaseNotes, APP_BUNDLE_LIMITS.releaseNotes)) return bad("releaseNotes");
+	const permissions = m.permissions;
+	if (!Array.isArray(permissions) || new Set(permissions).size !== permissions.length || !permissions.every((p) => APP_PERMISSIONS.includes(p))) return bad("permissions");
+	const runtime = m.runtime;
+	if (!isObject$1(runtime) || Object.keys(runtime).length !== 2 || typeof runtime.host !== "string" || !HOST.test(runtime.host)) return bad("runtime");
+	const clients = runtime.clients;
+	if (!Array.isArray(clients) || clients.length < 1 || new Set(clients).size !== clients.length || !clients.every((c) => APP_CLIENTS.includes(c))) return bad("runtime");
+	if (!isAppLicense(m.license)) return bad("license");
+	if (m.sources !== void 0 && (!Array.isArray(m.sources) || m.sources.length > APP_BUNDLE_LIMITS.sources || !m.sources.every(isAppUrl))) return bad("sources");
+	if (m.homepage !== void 0 && !isAppUrl(m.homepage)) return bad("homepage");
+	if (m.support !== void 0 && !isAppUrl(m.support)) return bad("support");
+	if (m.proofs !== void 0) {
+		if (!Array.isArray(m.proofs)) return bad("proofs");
+		if (m.proofs.length > 0) return {
+			ok: false,
+			reason: "proofs-unsupported",
+			detail: "Publisher proofs come after phase 1"
+		};
+	}
+	const files = m.files;
+	if (!Array.isArray(files)) return bad("files");
+	if (files.length > APP_BUNDLE_LIMITS.files) return {
+		ok: false,
+		reason: "too-many-files",
+		detail: `${files.length} files`
+	};
+	const lower = /* @__PURE__ */ new Set();
+	let previous = "";
+	let screenshots = 0;
+	for (const f of files) {
+		if (!isObject$1(f) || Object.keys(f).length !== 3 || !isAppPath(f.path) || !isSafeCount(f.size, 0) || !isAppHash(f.sha256)) return isObject$1(f) && typeof f.path === "string" && !isAppPath(f.path) ? {
+			ok: false,
+			reason: "bad-path",
+			detail: f.path
+		} : bad("files", "A file is not {path, size, sha256}");
+		if (lower.has(f.path.toLowerCase())) return {
+			ok: false,
+			reason: "path-collision",
+			detail: f.path
+		};
+		lower.add(f.path.toLowerCase());
+		if (f.path <= previous) return {
+			ok: false,
+			reason: "files-unsorted",
+			detail: f.path
+		};
+		previous = f.path;
+		if (f.size > APP_BUNDLE_LIMITS.bundleBytes) return bad("files", `${f.path} is larger than a bundle`);
+		if (f.path.startsWith("screenshots/")) {
+			if (!SCREENSHOT_TYPES.test(f.path)) return {
+				ok: false,
+				reason: "bad-path",
+				detail: `${f.path}: a screenshot is .png, .jpg or .webp`
+			};
+			if (++screenshots > APP_BUNDLE_LIMITS.screenshots) return {
+				ok: false,
+				reason: "too-many-screenshots"
+			};
+		}
+		if (f.path === "icon.png" && f.size > APP_BUNDLE_LIMITS.iconBytes) return {
+			ok: false,
+			reason: "bad-icon",
+			detail: "icon.png is larger than 256 KiB"
+		};
+	}
+	const entry = m.entry;
+	if (typeof entry !== "string" || !entry.endsWith(".html") || !files.some((f) => isObject$1(f) && f.path === entry)) return {
+		ok: false,
+		reason: "bad-entry",
+		detail: "The entry is not an .html file of the bundle"
+	};
+	return {
+		ok: true,
+		manifest: m
+	};
+}
+/** The digest of a version: SHA-256 of its canonical manifest bytes, base64url. */
+function appDigest(manifestBytes) {
+	return toBase64Url(sha256(manifestBytes));
+}
+var u32 = (b, at) => (b[at] << 24 >>> 0) + (b[at + 1] << 16) + (b[at + 2] << 8) + b[at + 3];
+/** Reads and checks a bundle (the order of the checks is part of the format: see above). */
+function readAppBundle(bytes) {
+	if (bytes.length > APP_BUNDLE_LIMITS.bundleBytes) return {
+		ok: false,
+		reason: "too-large"
+	};
+	const head = bytes.subarray(0, MAGIC.length);
+	if (!head.every((b, i) => b === MAGIC[i])) return {
+		ok: false,
+		reason: "magic"
+	};
+	if (head.length < MAGIC.length) return {
+		ok: false,
+		reason: "truncated"
+	};
+	let at = MAGIC.length;
+	if (bytes.length < at + 4) return {
+		ok: false,
+		reason: "truncated"
+	};
+	const manifestLength = u32(bytes, at);
+	at += 4;
+	if (manifestLength > APP_BUNDLE_LIMITS.manifestBytes) return {
+		ok: false,
+		reason: "manifest-too-large"
+	};
+	if (bytes.length < at + manifestLength + 4) return {
+		ok: false,
+		reason: "truncated"
+	};
+	const manifestBytes = bytes.subarray(at, at + manifestLength);
+	at += manifestLength;
+	const statementLength = u32(bytes, at);
+	at += 4;
+	if (bytes.length < at + statementLength) return {
+		ok: false,
+		reason: "truncated"
+	};
+	const statementBytes = bytes.subarray(at, at + statementLength);
+	at += statementLength;
+	const read = readCanonicalJson(manifestBytes);
+	if (!read.ok) return read;
+	const checked = checkAppManifest(read.value);
+	if (!checked.ok) return checked;
+	const manifest = checked.manifest;
+	const statement = readAppSignature(statementBytes);
+	if (!statement.ok) return statement;
+	const total = manifest.files.reduce((sum, f) => sum + f.size, 0);
+	const rest = bytes.length - at;
+	if (total > rest) return {
+		ok: false,
+		reason: "truncated"
+	};
+	if (total < rest) return {
+		ok: false,
+		reason: "trailing-bytes",
+		detail: `${rest - total} bytes past the last file`
+	};
+	const signed = verifyAppSignature(APP_PREFIXES.app, manifestBytes, statement.signature, manifest.publisher);
+	if (!signed.ok) return signed;
+	const files = /* @__PURE__ */ new Map();
+	for (const f of manifest.files) {
+		const content = bytes.subarray(at, at + f.size);
+		at += f.size;
+		if (toBase64Url(sha256(content)) !== f.sha256) return {
+			ok: false,
+			reason: "file-hash",
+			detail: f.path
+		};
+		files.set(f.path, content);
+	}
+	const icon = files.get(APP_ICON_PATH);
+	if (icon) {
+		const size = imageSize(icon);
+		if (!size || icon[0] !== 137 || size.width !== size.height) return {
+			ok: false,
+			reason: "bad-icon",
+			detail: "icon.png is not a square PNG"
+		};
+	}
+	return {
+		ok: true,
+		bundle: {
+			manifest,
+			manifestBytes,
+			digest: appDigest(manifestBytes),
+			signature: statement.signature,
+			files
+		}
+	};
+}
+/** Puts a bundle's parts together, checking nothing: for builders, and for tests that need a broken bundle. */
+function assembleAppBundle(manifestBytes, statementBytes, files) {
+	const total = MAGIC.length + 8 + manifestBytes.length + statementBytes.length + files.reduce((s, f) => s + f.length, 0);
+	const out = new Uint8Array(total);
+	const view = new DataView(out.buffer);
+	let at = 0;
+	out.set(MAGIC, at);
+	at += MAGIC.length;
+	view.setUint32(at, manifestBytes.length);
+	at += 4;
+	out.set(manifestBytes, at);
+	at += manifestBytes.length;
+	view.setUint32(at, statementBytes.length);
+	at += 4;
+	out.set(statementBytes, at);
+	at += statementBytes.length;
+	for (const f of files) {
+		out.set(f, at);
+		at += f.length;
+	}
+	return out;
+}
+//#endregion
+//#region ../core/src/appStore.ts
+var APP_STORE_LIMITS = {
+	/** The index's bytes, uncompressed. */
+	indexBytes: 16777216,
+	/** How far ahead `expires` may be. */
+	expiresAheadS: 7776e3,
+	name: 40,
+	description: 2e3,
+	title: 40,
+	tagline: 80,
+	/** `category`, `developer`, `submitter`. */
+	label: 40,
+	reason: 200,
+	urls: 4,
+	apps: 4096,
+	removed: 4096,
+	revoked: 4096
+};
+var APP_STORE_KINDS = ["curated", "indexed"];
+var isObject = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var isLine = (v, max, min = 0) => typeof v === "string" && [...v].length >= min && [...v].length <= max && !/\p{Cc}/u.test(v);
+var isText = (v, max) => typeof v === "string" && [...v].length <= max && !/[^\P{Cc}\n]/u.test(v);
+var isCount = (v, min) => typeof v === "number" && Number.isSafeInteger(v) && v >= min;
+var fine = { ok: true };
+function keysOf(value, required, optional) {
+	for (const k of Object.keys(value)) if (!required.includes(k) && !optional.includes(k)) return {
+		ok: false,
+		reason: "unknown-key",
+		detail: k
+	};
+	for (const k of required) if (!(k in value)) return {
+		ok: false,
+		reason: "missing-key",
+		detail: k
+	};
+	return fine;
+}
+var LISTING_REQUIRED = [
+	"ref",
+	"sequence",
+	"digest",
+	"urls",
+	"title",
+	"tagline"
+];
+var LISTING_OPTIONAL = [
+	"category",
+	"developer",
+	"submitter",
+	"repo",
+	"support"
+];
+/** Checks one entry of `apps`, which is also the whole of a `listing.json`. */
+function checkAppListing(value) {
+	if (!isObject(value)) return {
+		ok: false,
+		reason: "bad-field",
+		detail: "A listing is not an object"
+	};
+	const keys = keysOf(value, LISTING_REQUIRED, LISTING_OPTIONAL);
+	if (!keys.ok) return keys;
+	const bad = (field) => ({
+		ok: false,
+		reason: "bad-field",
+		detail: `apps: ${field}`
+	});
+	if (!isAppRef(value.ref)) return bad("ref");
+	if (!isCount(value.sequence, 1)) return bad("sequence");
+	if (!isAppHash(value.digest)) return bad("digest");
+	const urls = value.urls;
+	if (!Array.isArray(urls) || urls.length < 1 || urls.length > APP_STORE_LIMITS.urls || !urls.every(isAppUrl)) return bad("urls");
+	if (!isLine(value.title, APP_STORE_LIMITS.title, 1)) return bad("title");
+	if (!isLine(value.tagline, APP_STORE_LIMITS.tagline, 1)) return bad("tagline");
+	for (const k of [
+		"category",
+		"developer",
+		"submitter"
+	]) if (value[k] !== void 0 && !isLine(value[k], APP_STORE_LIMITS.label, 1)) return bad(k);
+	for (const k of ["repo", "support"]) if (value[k] !== void 0 && !isAppUrl(value[k])) return bad(k);
+	return fine;
+}
+function checkRemoval(value) {
+	if (!isObject(value)) return {
+		ok: false,
+		reason: "bad-field",
+		detail: "A removal is not an object"
+	};
+	const keys = keysOf(value, [
+		"ref",
+		"digest",
+		"reason",
+		"at"
+	], []);
+	if (!keys.ok) return keys;
+	if (!isAppRef(value.ref) || !isAppHash(value.digest) || !isLine(value.reason, APP_STORE_LIMITS.reason, 1) || !isCount(value.at, 0)) return {
+		ok: false,
+		reason: "bad-field",
+		detail: "removed: not {ref, digest, reason, at}"
+	};
+	return fine;
+}
+var STORE_REQUIRED = [
+	"ghostlyStore",
+	"key",
+	"name",
+	"kind",
+	"sequence",
+	"expires",
+	"apps",
+	"removed",
+	"revoked"
+];
+/**
+* Checks an index's fields and bounds, and every revocation it carries (one that does not verify refuses the index:
+* the store copied it, so a broken one is the store's fault). The signature and `expires` are `readAppStore`'s.
+*/
+function checkAppStoreIndex(value) {
+	if (!isObject(value)) return {
+		ok: false,
+		reason: "bad-field",
+		detail: "The index is not an object"
+	};
+	if (value.ghostlyStore !== void 0 && value.ghostlyStore !== 1) return {
+		ok: false,
+		reason: "unsupported-format",
+		detail: "ghostlyStore is not 1"
+	};
+	const keys = keysOf(value, STORE_REQUIRED, ["description"]);
+	if (!keys.ok) return keys;
+	const bad = (field) => ({
+		ok: false,
+		reason: "bad-field",
+		detail: field
+	});
+	if (!isAppKey(value.key)) return bad("key");
+	if (!isLine(value.name, APP_STORE_LIMITS.name, 1)) return bad("name");
+	if (value.description !== void 0 && !isText(value.description, APP_STORE_LIMITS.description)) return bad("description");
+	if (!APP_STORE_KINDS.includes(value.kind)) return bad("kind");
+	if (!isCount(value.sequence, 1)) return bad("sequence");
+	if (!isCount(value.expires, 0)) return bad("expires");
+	const { apps, removed, revoked } = value;
+	if (!Array.isArray(apps) || apps.length > APP_STORE_LIMITS.apps) return bad("apps");
+	const refs = /* @__PURE__ */ new Set();
+	for (const listing of apps) {
+		const checked = checkAppListing(listing);
+		if (!checked.ok) return checked;
+		const ref = listing.ref;
+		if (refs.has(ref)) return {
+			ok: false,
+			reason: "duplicate-app",
+			detail: ref
+		};
+		refs.add(ref);
+	}
+	if (!Array.isArray(removed) || removed.length > APP_STORE_LIMITS.removed) return bad("removed");
+	for (const entry of removed) {
+		const checked = checkRemoval(entry);
+		if (!checked.ok) return checked;
+	}
+	if (!Array.isArray(revoked) || revoked.length > APP_STORE_LIMITS.revoked) return bad("revoked");
+	for (const entry of revoked) {
+		const read = readAppRevocation(entry);
+		if (!read.ok) return {
+			ok: false,
+			reason: "bad-revocation",
+			detail: read.detail ?? read.reason
+		};
+	}
+	return fine;
+}
+/**
+* Reads `ghostly-store.json` with its `ghostly-store.sig`, in this order: size, JSON, canonical bytes, fields and
+* revocations, the signature statement, the key the reader holds for this store (when it holds one), the signature,
+* then `expires` against `now` (seconds): more than 90 days ahead is refused, past is `expired`.
+*/
+function readAppStore(indexBytes, sigBytes, now, heldKey) {
+	if (indexBytes.length > APP_STORE_LIMITS.indexBytes) return {
+		ok: false,
+		reason: "too-large"
+	};
+	const read = readCanonicalJson(indexBytes);
+	if (!read.ok) return read;
+	const checked = checkAppStoreIndex(read.value);
+	if (!checked.ok) return checked;
+	const index = read.value;
+	const statement = readAppSignature(sigBytes);
+	if (!statement.ok) return statement;
+	if (heldKey !== void 0 && index.key !== heldKey) return {
+		ok: false,
+		reason: "store-key",
+		detail: "Another key than the store's"
+	};
+	const signed = verifyAppSignature(APP_PREFIXES.store, indexBytes, statement.signature, index.key);
+	if (!signed.ok) return signed;
+	if (index.expires > now + APP_STORE_LIMITS.expiresAheadS) return {
+		ok: false,
+		reason: "expires-too-far"
+	};
+	return {
+		ok: true,
+		store: {
+			index,
+			digest: toBase64Url(sha256(indexBytes)),
+			expired: index.expires < now
+		}
+	};
+}
+/** Signs an index with the store key: its canonical bytes and the `ghostly-store.sig` bytes. Throws on a bad index. */
+async function signAppStore(index, signer) {
+	if (index.key !== toZ32(signer.publicKey)) throw new Error("A store index is signed by its own key");
+	const checked = checkAppStoreIndex(JSON.parse(JSON.stringify(index)));
+	if (!checked.ok) throw new Error(`Not a valid store index (${checked.reason}${checked.detail ? `: ${checked.detail}` : ""})`);
+	const { bytes, signature } = await signAppObject(APP_PREFIXES.store, index, signer);
+	return {
+		indexBytes: bytes,
+		sigBytes: canonicalJsonBytes(signature),
+		signature
+	};
+}
+//#endregion
+//#region ../core/src/appUpdates.ts
+function appUpdateDecision(installed, candidate) {
+	if (installed.ref !== candidate.ref) return "other-app";
+	if (candidate.sequence > installed.sequence) return "update";
+	if (candidate.sequence < installed.sequence) return "rollback";
+	return candidate.digest === installed.digest ? "same" : "equivocation";
+}
+/** The permissions an update adds: when there is any, the update waits for the person, who sees only these. */
+function addedAppPermissions(granted, requested) {
+	return requested.filter((p) => !granted.includes(p));
+}
+function planAppUpdate(installed, candidate) {
+	const decision = appUpdateDecision(installed, candidate);
+	if (decision !== "update") return {
+		action: "refuse",
+		decision
+	};
+	const added = addedAppPermissions(installed.permissions, candidate.permissions);
+	return added.length ? {
+		action: "ask",
+		added
+	} : { action: "install" };
+}
+/**
+* The revocation that stops a version, or null: one signed by the app's own publisher (a reader verified it) that names
+* its digest, or reaches its `sequence` with `upTo`.
+*/
+function appRevocationFor(version, revocations) {
+	const publisher = appRefPublisher(version.ref);
+	for (const r of revocations) {
+		const s = r.statement;
+		if (s.app !== version.ref || r.signature.key !== publisher) continue;
+		if ("digests" in s ? s.digests.includes(version.digest) : version.sequence <= s.upTo) return r;
+	}
+	return null;
+}
+function checkAppBeforeRun(version, stores, revocations = []) {
+	const revocation = appRevocationFor(version, [...revocations, ...stores.flatMap((s) => s.revoked)]);
+	if (revocation) return {
+		status: "revoked",
+		revocation
+	};
+	const by = stores.flatMap((s) => s.removed.filter((r) => r.ref === version.ref && r.digest === version.digest).map((r) => ({
+		store: s.key,
+		name: s.name,
+		reason: r.reason,
+		at: r.at
+	})));
+	return by.length ? {
+		status: "removed",
+		by
+	} : { status: "ok" };
+}
+function appStoreDecision(held, read) {
+	if (!held) return "new";
+	if (held.key !== read.key) return "other-key";
+	if (read.sequence > held.sequence) return "update";
+	if (read.sequence < held.sequence) return "rollback";
+	return read.digest === held.digest ? "same" : "equivocation";
+}
+//#endregion
+export { parseSshSignature as $, parseLocalTarget as $a, parseLinkPreview as $i, GROUP_SIGNAL_FRAME as $n, readHandoffPake as $o, EDIT_CAPABILITY as $r, readTurnPacket as $s, TEST_USDT_FAUCET_AMOUNT as $t, knockIdentity as A, APP_STATEMENT_LIMITS as Aa, toZ32 as Ac, irohDescriptor as Ai, normalizeDomain as An, handoffAttemptFailed as Ao, TYPING_REFRESH_MS as Ar, encodeInviteCode as As, didWebFile as At, GROUP_READ_NOTE as B, canonicalJsonBytes as Ba, sanitizeFileName as Bi, decodeBolt11 as Bn, handoffManifestFrames as Bo, readPin as Br, devicePingFrame as Bs, strictBase64Url as Bt, communityHasFrame as C, statusCardText as Ca, verify as Cc, revokesIdentity as Ci, decodeDnsResponse as Cn, HANDOFF_PAKE as Co, readLobby as Cr, verifyEnrollProof as Cs, DidError as Ct, decodeGroupEntryLink as D, receivedTimestamp as Da, fromBase64Url as Dc, validExternalKey as Di, encodeDnsQuery as Dn, HANDOFF_VERIFIED as Do, transferEnded as Dr, OwnInviteError as Ds, didJwsAlg as Dt, KNOCK_TTL_MS as E, heardTime as Ea, bytesEqual as Ec, emptyProofLedger as Ei, domainWellKnownFile as En, HANDOFF_TIMINGS as Eo, FILE_LIMITS as Er, readDeviceInvite as Es, didGhostlyServiceEntry as Et, GroupWakeLimiter as F, isAppRef as Fa, DHT_FILE_CAPABILITY as Fi, wellKnownUrl as Fn, handoffContextProof as Fo, PIN_LIMITS as Fr, HANDOFF_CAPABILITY as Fs, parseDid as Ft, carryMentions as G, verifyCommitSignature as Ga, fileMessageText as Gi, isFederationId as Gn, handoffStreamKey as Go, parseWakeFrame as Gr, TURN_RAISE_READ_TIMEOUT_MS as Gs, resolveDidDht as Gt, COMMUNITY_EDIT_FRAME as H, MAX_GROUP_CHAIN as Ha, PLAYABLE_AUDIO as Hi, cashuRequestPayload as Hn, handoffPakeFrame as Ho, WakeLimiter as Hr, seedSigner as Hs, didDhtFromPublicKey as Ht, groupWakeFrame as I, readAppRevocations as Ia, dhtFileId as Ii, requestLnurlInvoice as In, handoffDataFrame as Io, mayPin as Ir, deviceEchoFrame as Is, parseDidDocument as It, groupName as J, EXPECT_PEER_MS as Ja, parseVideoMeta as Ji, GhostLink as Jn, readHandoffAck as Jo, checkPushEndpoint as Jr, turnPutSummary as Js, EVM_TEST_CHAINS as Jt, parseCommunityEdit as K, edgeParams as Ka, parseVoiceMeta as Ki, parseCashuRequestPayload as Kn, handoffVersions as Ko, relayRequest as Kr, TURN_SETTLE_MS as Ks, signDidDhtPacket as Kt, groupWakes as L, signAppObject as La, parseImageMeta as Li, resolveLightningDestination as Ln, handoffDigest as Lo, nextPinNumber as Lr, deviceEchoNonce as Ls, parseDidSignaturePaste as Lt, mergeKnocks as M, appRef as Ma, utf8Encode as Mc, DHT_FILE_TOO_LARGE as Mi, recordsFromWellKnown as Mn, handoffBusyFrame as Mo, sanitizeTypingStatus as Mr, inviteOwnership as Ms, didWebFileUrl as Mt, readKnocks as N, checkAppRevokeStatement as Na, DHT_MESSAGE_TTL as Ni, recordsName as Nn, handoffCancelFrame as No, typingActivity as Nr, DEVICES_CAPABILITY as Ns, didWebHost as Nt, encodeGroupEntryLink as O, shownTime as Oa, randomBytes as Oc, TRANSPORTS as Oi, isPublicAddress as On, filePartName as Oo, transferStalled as Or, createChatInvite as Os, didSignedMessages as Ot, GROUP_WAKE_FRAME as P, isAppKey as Pa, peekDhtMailbox as Pi, txtValue as Pn, handoffContext as Po, GROUP_PIN_FRAME as Pr, ENROLL_CAPABILITY as Ps, normalizeDid as Pt, parseSshPublicKey as Q, formatLocalTarget as Qa, dhtEditId as Qi, CarriedTransport as Qn, readHandoffHello as Qo, BUTTONS_CAPABILITY as Qr, nextTurnPosition as Qs, SEPOLIA_TEST_USDT_FAUCET as Qt, parseGroupWakeFrame as R, signAppRevocation as Ra, readImageMeta as Ri, engineError as Rn, handoffEphemeral as Ro, pinIsNewer as Rr, deviceKeyZ32 as Rs, signingKeys as Rt, GROUP_READ_NOTE_COMMUNITY as S, sameButtonText as Sa, publicKeyFromZ32 as Sc, receivedIdentityStatus as Si, DOMAIN_FILE_MAX_BYTES as Sn, HANDOFF_OFFER as So, readBeaconHead as Sr, readEnrollHello as Ss, DID_JWS_MAX_LENGTH as St, encodeCommunityLink as T, claimedTime as Ta, sanitizeAvatar as Tc, PeerProofs as Ti, domainTxtRecord as Tn, HANDOFF_REQUEST as To, ChatFiles as Tr, deviceInviteJoinerParams as Ts, checkDidSignature as Tt, GROUP_EDIT_FRAME as U, MEMBER_KEY as Ua, VOICE_LIMITS as Ui, fedimintRequestPayload as Un, handoffReleaseFrame as Uo, deviceWakeRequest as Ur, webCryptoSigner as Us, encodeDidDhtDeactivated as Ut, GroupSession as V, GROUP_MEMBER_CAP as Va, sanitizeMime as Vi, ENDPOINT as Vn, handoffOfferFrame as Vo, WAKE_CALL_INTERVAL_MS as Vr, newDeviceSetSecret as Vs, didDhtDocument as Vt, GROUP_EDIT_TEXT_BYTES as W, rosterHas as Wa, baseMime as Wi, findEndpoint as Wn, handoffRetryAfter as Wo, newWakeToken as Wr, TURN_PUT_WINDOW_MS as Ws, encodeDidDhtPacket as Wt, SSHSIG_NAMESPACE as X, presenceSeenAt as Xa, EDIT_RATE_WINDOW_MS as Xi, LIVENESS_PING_MS as Xn, readHandoffDone as Xo, chatAppId as Xr, TURN_MAX as Xs, PaymentPreflightError as Xt, SSHSIG_MAX_ARMOR as Y, RELAY_POLL_INTERVALS as Ya, EDIT_BUFFER_MS as Yi, INVITE_TAKEN as Yn, readHandoffCancel as Yo, vapidKeysMatch as Yr, TURN_LAST_SEQUENCE as Ys, ONCHAIN_PROVIDER as Yt, SshSigError as Z, GhostlyHttpError as Za, RateWindow as Zi, pairedMessageFrame as Zn, readHandoffHave as Zo, isAppVersion as Zr, firstDeviceSetSecret as Zs, SEPOLIA_TEST_USDT as Zt, groupTypingEpoch as _, ITEM_STATES as _a, openRelayPayload as _c, boundVerifiedIdentity as _i, pubkyProofCapability as _n, HANDOFF_ACK as _o, mergeLobby as _r, enrollDoneFrame as _s, shortAtprotoDid as _t, checkAppStoreIndex as a, ReactionWindow as aa, RelayTransport as ac, HoldRefusedError as ai, validatePaymentTarget as an, RTC_CONFIG as ao, MESH_HUBS as ar, readSetUpdate as as, decodeAnyBitcoinAddress as at, COMMUNITY_LIMITS as b, buttonLabelClash as ba, identityFromSeed as bc, identityStatement as bi, homeserverWebEndpoint as bn, HANDOFF_HAVE as bo, rankHubs as br, enrollProofFrame as bs, DID_DOCUMENT_MAX_BYTES as bt, APP_BUNDLE_LIMITS as c, reactionEmoji as ca, setLinkTraceSink as cc, CapsExchange as ci, SPARK_PROVIDER as cn, callRtcConfig as co, pickMeshHubs as cr, signTombstone as cs, ATPROTO_PROOF_COLLECTION as ct, assembleAppBundle as d, validReactionNumber as da, isDiscoveryBudgetError as dc, dialDescriptors as di, isBitcoinAddress as dn, parseCallSignal as do, beaconRecords as dr, ENROLL_GRANT as ds, atprotoProofRecord as dt, forwardedAgain as ea, signTurnPacket as ec, UPGRADE_CAPABILITY as ei, USDT_PUBLIC_RPC as en, webLocalFetch as eo, SIGNAL_FRESH_MS as er, readHandoffTurnFrame as es, sameSshKey as et, checkAppManifest as f, wireReaction as fa, withRequestOptions as fc, IDENTITY_MAX_EVIDENCE as fi, PUBKY_PROOF_MAX_BYTES as fn, signalHasVideo as fo, doorHubs as fr, ENROLL_HELLO as fs, atprotoProofRkey as ft, GroupTypingBoard as g, BUTTON_ID as ga, newerPacket as gc, IdentityExchange as gi, normalizePubkyKey as gn, serviceIdFromName as go, mergeBeacon as gr, enrollDigits as gs, parseAtprotoDidDocument as gt, GROUP_TYPING_FRAME as h, replySnippet as ha, createRelayPayload as hc, IdentityCheckUnavailable as hi, newPubkyProofFolder as hn, LEGACY_SERVICES as ho, lobbyRecords as hr, enrollCancelReason as hs, normalizeAtprotoHandle as ht, planAppUpdate as i, REACTION_LIMITS as ia, DEFAULT_RELAYS as ic, HoldKeys as ii, formatPaymentAmount as in, CALL_SIGNAL_MAX_AGE_MS as io, readGroupSignal as ir, SET_UPDATE as is, BitcoinAddressError as it, knockRecords as j, appFingerprint as ja, utf8Decode as jc, irohRelayUrl as ji, recordsFromTxt as jn, handoffAttemptSucceeded as jo, TypingSender as jr, inviteLink as js, didWebFileNames as jt, entryParams as k, APP_PREFIXES as ka, toBase64Url as kc, automaticTransport as ki, nip05RootKey as kn, handoffAttemptAllowed as ko, TYPING_KINDS as kr, decodeInviteCode as ks, didWebDocumentUrl as kt, APP_BUNDLE_MAGIC as l, reactionIsNewer as la, traceLink as lc, DHT_TEXT_CAPABILITY as li, sparkAddressKind as ln, callSignalHeardAt as lo, COMMUNITY_TOPOLOGY as lr, verifySetUpdate as ls, ATPROTO_PROOF_SCOPE as lt, readAppBundle as m, readReply as ma, RELAY_PAYLOAD_MAX_BYTES as mc, IDENTITY_REVOCATION_LABEL as mi, isPubkyProofFolder as mn, HTTP_SERVICE_PROTO as mo, lobbyKeys as mr, enrollCancelFrame as ms, isAtprotoDid as mt, appUpdateDecision as n, COMMUNITY_REACTION_FRAME as na, turnKeys as nc, HOLD_DATED_BACK_MS as ni, assertTokenUnits as nn, decodeControl as no, SIGNAL_REPLY_MS as nr, sealHandoffPiece as ns, verifySshSignature as nt, readAppStore as o, nextReactionNumber as oa, currentRelays as oc, newMailbox as oi, walletNetworkOf as on, answersOffer as oo, mayBeHub as or, setAckFrame as os, ATPROTO_DECLARED_SCOPE as ot, isAppUrl as p, pairedReplyAuthor as pa, PacketTooLargeError as pc, IDENTITY_MAX_VALIDITY as pi, isPubkyKey as pn, emptyLinkRecords as po, freshHubs as pr, ENROLL_PROOF as ps, checkAtprotoProofRecord as pt, mentionsMember as q, DirectPathWatch as qa, voicePeaksOf as qi, parseFedimintRequestPayload as qn, newHandoffId as qo, wakeRequest as qr, classifyTurnRead as qs, ETHEREUM_USDT as qt, checkAppBeforeRun as r, GROUP_REACTION_FRAME as ra, turnName as rc, HOLD_LIMITS as ri, assertWholeSats as rn, encodeControl as ro, groupSignalFrame as rr, SET_ACK as rs, verifyBitcoinMessage as rt, signAppStore as s, queueReaction as sa, normalizeRelayUrl as sc, readManifest as si, SPARK_NETWORKS as sn, buildSdpFromSignal as so, meshHubs as sr, setUpdateFrame as ss, ATPROTO_FULL_SCOPE as st, appStoreDecision as t, readForwarded as ta, signTurnRelease as tc, HOLD_CAPABILITY as ti, WALLET_NETWORKS as tn, LIMITS as to, SIGNAL_HOLD_MS as tr, readHandoffVerified as ts, sshSignCommand as tt, appDigest as u, readReaction as ua, budgetRetryMs as uc, capsDescriptors as ui, sparkInvoiceDetails as un, extractParamsFromSdp as uo, beaconKeys as ur, ENROLL_DONE as us, atprotoDidMethod as ut, openGroupTyping as v, RUN_RESULTS as va, parseRelayPayload as vc, emptyIdentityLedger as vi, pubkyProofFile as vn, HANDOFF_CANCEL as vo, newerHead as vr, enrollGrantFrame as vs, AtprotoProofError as vt, decodeCommunityLink as w, arrivalKey as wa, MAX_AVATAR_LENGTH as wc, lastSharedWithMe as wi, dnsProofName as wn, HANDOFF_PIECE_BYTES as wo, shouldBeHub as wr, createDeviceInvite as ws, checkDidJws as wt, CommunitySession as x, checkStatusCard as xa, identityFromSeedB64 as xc, newIdentityBinding as xi, pubkyHomeserverOf as xn, HANDOFF_HELLO as xo, readBeacon as xr, readEnrollGrant as xs, DID_FILE_MAX_BYTES as xt, sealGroupTyping as y, STATUS_CARD_LIMITS as ya, createIdentity as yc, identityRevocationValue as yi, pubkyProofPath as yn, HANDOFF_DONE as yo, pickHubs as yr, enrollHelloFrame as ys, verifyAtprotoRecordProof as yt, GROUP_REACTED_FRAME as z, canonicalJson as za, safeBlobType as zi, engineText as zn, handoffHelloFrame as zo, pinNumberHolds as zr, deviceLinkPairing as zs, staticDidDocument as zt };
 
-//# sourceMappingURL=src-K3NijMq-.js.map
+//# sourceMappingURL=src-C6qQYrAH.js.map