@ghostlytools/cli 1.1.4 → 1.1.6

package/dist/assets/{src-K3NijMq-.js → src-DtxVo2Rm.js}

@@ -897,6 +897,8 @@ function normalizeRelayUrl(input) {
 		return null;
 	}
 }
+/** A relay the breaker leaves alone for failing (`RelayBreaker`): nothing was asked of it now. */
+var RelayLeftAloneError = class extends Error {};
 var RelayTransport = class {
 	relays;
 	timeoutMs;
@@ -1185,8 +1187,11 @@ var RelayTransport = class {
 					return;
 				}
 				const held = results.map((r) => r.status === "rejected" && isDiscoveryBudgetError(r.reason) ? r.reason : null);
+				const leftAlone = (r) => r.status === "rejected" && r.reason instanceof RelayLeftAloneError;
+				const waits = held.filter((e) => e !== null);
 				const reasons = results.map((r) => r.status === "rejected" ? String(r.reason) : "").join("; ");
-				if (held.every((e) => e !== null)) reject(new DiscoveryBudgetError(Math.min(...held.map((e) => e.retryInMs)), `Publish held back on every relay: ${reasons}`));
+				if (waits.length === results.length) reject(new DiscoveryBudgetError(Math.min(...waits.map((e) => e.retryInMs)), `Publish held back on every relay: ${reasons}`));
+				else if (waits.length && results.every((r, i) => held[i] !== null || leftAlone(r))) reject(new DiscoveryBudgetError(Math.min(...waits.map((e) => e.retryInMs)), `Publish held back on every relay not left alone: ${reasons}`));
 				else reject(/* @__PURE__ */ new Error(`Publish failed on every relay: ${reasons}`));
 			});
 		});
@@ -1484,7 +1489,7 @@ var RelayTransport = class {
 		const blocked = probe ? 0 : this.breaker.blockedFor(relay);
 		if (blocked > 0) {
 			if (this.breaker.blockedKind(relay) === "throttled") throw new DiscoveryBudgetError(blocked, "Discovery relay is throttling this address; retry shortly");
-			throw new Error(`${relay} is left alone after failing; asked again in ${Math.max(1, Math.ceil(this.breaker.askedAgainIn(relay, this.relays) / 1e3))} s`);
+			throw new RelayLeftAloneError(`${relay} is left alone after failing; asked again in ${Math.max(1, Math.ceil(this.breaker.askedAgainIn(relay, this.relays) / 1e3))} s`);
 		}
 		if (!this.take(relay, who, pubKeyZ32)) throw new DiscoveryBudgetError(this.heldFor(relay, who));
 		if (probe) this.breaker.beginAllDown(relay);
@@ -1961,13 +1966,13 @@ function turnName(name) {
 	}
 	return out;
 }
-function u32$2(value) {
+function u32$3(value) {
 	return Uint8Array.of(value >>> 24 & 255, value >>> 16 & 255, value >>> 8 & 255, value & 255);
 }
 /** What a release signs: `"ghostly-turn-release" || turnAddress(32) || turn(4) || toKey(32) || H(32)`. */
 function turnReleaseMessage(address, turn, toKey, h) {
 	if (address.length !== 32 || toKey.length !== 32 || h.length !== 32) throw new Error("A release names 32-byte values");
-	return concatBytes$1(RELEASE_DOMAIN, address, u32$2(turn), toKey, h);
+	return concatBytes$1(RELEASE_DOMAIN, address, u32$3(turn), toKey, h);
 }
 /** What the author signs: `"ghostly-turn" || turnAddress(32) || body[0..310]`. */
 function turnSignedMessage(address, unsigned) {
@@ -1985,8 +1990,8 @@ function encodeTurnFields(fields) {
 	if (tombstone ? fields.active !== 255 : !held(fields.active)) throw new Error(tombstone ? "A tombstone names no active device" : "The active device has no slot");
 	const body = /* @__PURE__ */ new Uint8Array(310);
 	body[OFFSET.version] = 1;
-	body.set(u32$2(fields.turn), OFFSET.turn);
-	body.set(u32$2(fields.rev).subarray(1), OFFSET.rev);
+	body.set(u32$3(fields.turn), OFFSET.turn);
+	body.set(u32$3(fields.rev).subarray(1), OFFSET.rev);
 	body[OFFSET.author] = fields.author;
 	body[OFFSET.active] = fields.active;
 	body[OFFSET.count] = fields.slots.filter(Boolean).length;
@@ -2238,7 +2243,7 @@ var TURN_PUT_WINDOW_MS = 1e4;
 var TURN_RAISE_READ_TIMEOUT_MS = 5e3;
 /** `T`: how long a device that raised the turn waits, from the end of its put, before the read that may make it active. `T >= P + 2V`. */
 var TURN_SETTLE_MS = 3e4;
-function compareBytes$2(a, b) {
+function compareBytes$3(a, b) {
 	for (let i = 0; i < Math.min(a.length, b.length); i++) if (a[i] !== b[i]) return a[i] - b[i];
 	return a.length - b.length;
 }
@@ -2249,7 +2254,7 @@ function compareBytes$2(a, b) {
 * reader still agrees.
 */
 function keptAtEqualSequence(a, b) {
-	return compareBytes$2(a.record.instance, b.record.instance) || compareBytes$2(a.record.body, b.record.body) || compareBytes$2(a.payload, b.payload);
+	return compareBytes$3(a.record.instance, b.record.instance) || compareBytes$3(a.record.body, b.record.body) || compareBytes$3(a.payload, b.payload);
 }
 var kept = (f) => ({
 	record: f.read.record,
@@ -3358,7 +3363,7 @@ var HANDOFF_CANCEL_REASONS = [
 	"stalled"
 ];
 var KEY$3 = /^[A-Za-z0-9_-]{43}$/;
-var DIGEST$1 = KEY$3;
+var DIGEST$2 = KEY$3;
 var SIGNATURE = /^[A-Za-z0-9_-]{86}$/;
 var ID$5 = /^[A-Za-z0-9_-]{22}$/;
 var B64$4 = /^[A-Za-z0-9_-]*$/;
@@ -3368,15 +3373,15 @@ var VERSION_TEXT = /^[0-9A-Za-z.+_-]{1,40}$/;
 var PART = /^(db\/[A-Za-z0-9_-]{1,64}|local|devices|file\/[A-Za-z0-9_-]{43}|wallet\/[a-z0-9-]{1,32}\/[A-Za-z0-9_.-]{1,100})$/;
 /** The largest part the reader accepts: a file of WISP 501 has no limit beneath this. */
 var MAX_PART = 2 ** 50;
-var isCount = (value, max = Number.MAX_SAFE_INTEGER) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0 && value <= max;
-var isText = (value, pattern) => typeof value === "string" && pattern.test(value);
+var isCount$1 = (value, max = Number.MAX_SAFE_INTEGER) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0 && value <= max;
+var isText$2 = (value, pattern) => typeof value === "string" && pattern.test(value);
 var isHandoffPartName = (name) => typeof name === "string" && PART.test(name);
 /** The part a file is: `file/<its SHA-256, base64url>`. */
 var filePartName = (sha256B64) => `file/${sha256B64}`;
 /** The digest a file part names, or null for any other part. */
-var filePartDigest = (name) => name.startsWith("file/") && DIGEST$1.test(name.slice(5)) ? name.slice(5) : null;
+var filePartDigest = (name) => name.startsWith("file/") && DIGEST$2.test(name.slice(5)) ? name.slice(5) : null;
 function isPart(value) {
-	return Array.isArray(value) && value.length === 3 && isHandoffPartName(value[0]) && isCount(value[1], MAX_PART) && isText(value[2], DIGEST$1) && (filePartDigest(value[0]) === null || filePartDigest(value[0]) === value[2]);
+	return Array.isArray(value) && value.length === 3 && isHandoffPartName(value[0]) && isCount$1(value[1], MAX_PART) && isText$2(value[2], DIGEST$2) && (filePartDigest(value[0]) === null || filePartDigest(value[0]) === value[2]);
 }
 /** Names compared as UTF-8 byte strings, as `H` sorts them. */
 function compareNames(a, b) {
@@ -3404,7 +3409,7 @@ function sortParts(parts) {
 * and every part the taker already held and keeps, as `[name, size, sha256]` sorted by name. Keys are base64url.
 */
 function handoffDigest(turn, fromKey, toKey, parts) {
-	if (!isCount(turn, TURN_MAX)) throw new Error("A turn is at most 2^32 - 2");
+	if (!isCount$1(turn, TURN_MAX)) throw new Error("A turn is at most 2^32 - 2");
 	if (fromKey.length !== 32 || toKey.length !== 32) throw new Error("A device signing key is 32 bytes");
 	for (const part of parts) if (!isPart(part)) throw new Error("A part is [name, size, sha256]");
 	return sha256(utf8Encode(JSON.stringify([
@@ -3418,7 +3423,7 @@ function handoffDigest(turn, fromKey, toKey, parts) {
 /** What `handoff-verified` signs: `["ghostly-handoff-verified", turnAddress, N + 1, H]`, the bytes in base64url. */
 function handoffVerifiedMessage(turnAddress, turn, h) {
 	if (turnAddress.length !== 32 || h.length !== 32) throw new Error("A turn address and H are 32 bytes");
-	if (!isCount(turn, TURN_MAX)) throw new Error("A turn is at most 2^32 - 2");
+	if (!isCount$1(turn, TURN_MAX)) throw new Error("A turn is at most 2^32 - 2");
 	return utf8Encode(JSON.stringify([
 		"ghostly-handoff-verified",
 		toBase64Url(turnAddress),
@@ -3470,7 +3475,7 @@ function handoffStreamKey(ownSecret, peerPublic, k, transcriptHash) {
 * does not open there. (XSalsa20-Poly1305 takes no associated data; the header inside the box does that job.)
 */
 function pieceHeader(part, offset) {
-	if (!isCount(offset, MAX_PART)) throw new Error("A piece's offset is a whole number of bytes");
+	if (!isCount$1(offset, MAX_PART)) throw new Error("A piece's offset is a whole number of bytes");
 	const header = /* @__PURE__ */ new Uint8Array(16);
 	header.set(sha256(utf8Encode(`ghostly-handoff-piece/1${part}`)).subarray(0, 8), 0);
 	new DataView(header.buffer).setBigUint64(8, BigInt(offset));
@@ -3484,7 +3489,7 @@ function sealHandoffPiece(key, part, offset, piece, nonce = randomBytes(24)) {
 	if (key.length !== 32 || nonce.length !== 24) throw new Error("A stream key is 32 bytes and a nonce 24");
 	return concatBytes$1(nonce, xsalsa20poly1305(key, nonce).encrypt(concatBytes$1(pieceHeader(part, offset), piece)));
 }
-var isPins = (value) => !!value && typeof value === "object" && !Array.isArray(value) && Object.keys(value).length <= 16 && Object.entries(value).every(([type, version]) => /^[a-z0-9-]{1,32}$/.test(type) && isText(version, VERSION_TEXT));
+var isPins = (value) => !!value && typeof value === "object" && !Array.isArray(value) && Object.keys(value).length <= 16 && Object.entries(value).every(([type, version]) => /^[a-z0-9-]{1,32}$/.test(type) && isText$2(version, VERSION_TEXT));
 function handoffHelloFrame(hello) {
 	return {
 		t: HANDOFF_HELLO,
@@ -3493,12 +3498,12 @@ function handoffHelloFrame(hello) {
 }
 function readHandoffHello(frame) {
 	if (frame.t !== "handoff-hello" || frame.v !== 1) return null;
-	if (!isText(frame.e, KEY$3) || fromBase64Url(frame.e).length !== 32) return null;
-	if (!isText(frame.app, VERSION_TEXT) || !isCount(frame.db, 1e6) || !isPins(frame.pins)) return null;
+	if (!isText$2(frame.e, KEY$3) || fromBase64Url(frame.e).length !== 32) return null;
+	if (!isText$2(frame.app, VERSION_TEXT) || !isCount$1(frame.db, 1e6) || !isPins(frame.pins)) return null;
 	if (typeof frame.room !== "number" || !Number.isSafeInteger(frame.room) || frame.room < -1) return null;
 	if (typeof frame.metered !== "boolean") return null;
-	if (frame.later !== void 0 && !isCount(frame.later)) return null;
-	if (frame.id !== void 0 && !isText(frame.id, ID$5)) return null;
+	if (frame.later !== void 0 && !isCount$1(frame.later)) return null;
+	if (frame.id !== void 0 && !isText$2(frame.id, ID$5)) return null;
 	const kind = DEVICE_KINDS.includes(frame.kind) ? frame.kind : "web";
 	return {
 		v: 1,
@@ -3524,8 +3529,8 @@ var handoffOfferFrame = (turn, id, bytes) => ({
 });
 function readHandoffTurnFrame(frame) {
 	if (frame.t !== "handoff-request" && frame.t !== "handoff-offer") return null;
-	if (!isCount(frame.turn, TURN_MAX) || !isText(frame.id, ID$5)) return null;
-	if (frame.t === "handoff-offer") return isCount(frame.bytes) ? {
+	if (!isCount$1(frame.turn, TURN_MAX) || !isText$2(frame.id, ID$5)) return null;
+	if (frame.t === "handoff-offer") return isCount$1(frame.bytes) ? {
 		turn: frame.turn,
 		id: frame.id,
 		bytes: frame.bytes
@@ -3558,8 +3563,8 @@ function readHandoffPake(frame) {
 		n: 3,
 		wrong: true
 	} : null;
-	if (!isText(frame.m, B64$4) || !frame.m.length || frame.m.length > 4096) return null;
-	if (frame.n === 3 && !isText(frame.c, KEY$3)) return null;
+	if (!isText$2(frame.m, B64$4) || !frame.m.length || frame.m.length > 4096) return null;
+	if (frame.n === 3 && !isText$2(frame.c, KEY$3)) return null;
 	return {
 		n: frame.n,
 		m: frame.m,
@@ -3567,12 +3572,12 @@ function readHandoffPake(frame) {
 	};
 }
 function readHandoffHave(frame) {
-	if (frame.t !== "handoff-have" || !Array.isArray(frame.d) || frame.d.length > 300 || !frame.d.every((d) => isText(d, DIGEST$1))) return null;
+	if (frame.t !== "handoff-have" || !Array.isArray(frame.d) || frame.d.length > 300 || !frame.d.every((d) => isText$2(d, DIGEST$2))) return null;
 	const p = {};
 	if (frame.p !== void 0) {
 		if (!frame.p || typeof frame.p !== "object" || Array.isArray(frame.p) || Object.keys(frame.p).length > 300) return null;
 		for (const [name, offset] of Object.entries(frame.p)) {
-			if (!isHandoffPartName(name) || !isCount(offset, MAX_PART)) return null;
+			if (!isHandoffPartName(name) || !isCount$1(offset, MAX_PART)) return null;
 			p[name] = offset;
 		}
 	}
@@ -3615,7 +3620,7 @@ var handoffDataFrame = (part, offset, sealed) => ({
 	d: toBase64Url(sealed)
 });
 function readHandoffAck(frame) {
-	if (frame.t !== "handoff-ack" || !isHandoffPartName(frame.p) || !isCount(frame.o, MAX_PART)) return null;
+	if (frame.t !== "handoff-ack" || !isHandoffPartName(frame.p) || !isCount$1(frame.o, MAX_PART)) return null;
 	return {
 		part: frame.p,
 		offset: frame.o
@@ -3623,7 +3628,7 @@ function readHandoffAck(frame) {
 }
 /** `H` of a `handoff-verified` that B's key signed for this turn address and turn, or null. */
 function readHandoffVerified(frame, turnAddress, turn, takerKey) {
-	if (frame.t !== "handoff-verified" || !isText(frame.h, DIGEST$1) || !isText(frame.s, SIGNATURE)) return null;
+	if (frame.t !== "handoff-verified" || !isText$2(frame.h, DIGEST$2) || !isText$2(frame.s, SIGNATURE)) return null;
 	const h = fromBase64Url(frame.h);
 	try {
 		return verify(fromBase64Url(frame.s), handoffVerifiedMessage(turnAddress, turn, h), takerKey) ? h : null;
@@ -3636,7 +3641,7 @@ var handoffReleaseFrame = (release) => ({
 	...release
 });
 function readHandoffDone(frame) {
-	return frame.t === "handoff-done" && isCount(frame.seq) ? frame.seq : null;
+	return frame.t === "handoff-done" && isCount$1(frame.seq) ? frame.seq : null;
 }
 /**
 * Whether two devices can hand over (WISP 06 § Versions), seen from the taker: a taker whose database is older than
@@ -6141,6 +6146,8 @@ var DataLink = class {
 	disconnectTimer = null;
 	/** The offer this side answered in the current attempt, when it took it (this clock), and how many times it answered it again. */
 	answered = null;
+	/** Answers refused since a connection last opened, each followed by a new offer at once (`ANSWER_REFUSED_REDIALS`). */
+	refusedAnswers = 0;
 	constructor(options) {
 		this.options = options;
 	}
@@ -6246,8 +6253,8 @@ var DataLink = class {
 					sdp: this.remoteSdp
 				});
 				if (this.pc === pc && this.state === "offering") this.setState("connecting");
-			} catch {
-				if (this.pc === pc) this.reset();
+			} catch (error) {
+				if (this.pc === pc) this.answerRefused(error);
 			}
 		}
 	}
@@ -6293,6 +6300,10 @@ var DataLink = class {
 	* else goes back to idle.
 	*/
 	failed() {
+		if (this.state === "offering" && this.remoteSdp) {
+			this.answerRefused("failed");
+			return;
+		}
 		const answered = this.state === "connecting" ? this.answered : null;
 		const left = answered ? CONNECT_TIMEOUT_MS - (Date.now() - answered.at) : 0;
 		const evidence = this.directEvidence();
@@ -6310,6 +6321,18 @@ var DataLink = class {
 		this.reset();
 		if (evidence) this.options.onDirect?.(evidence);
 	}
+	/** The answer to this side's offer did not go in (`ANSWER_REFUSED_REDIALS`): the attempt ends, and the caller may offer again now. */
+	answerRefused(error) {
+		const again = this.refusedAnswers < 4;
+		traceLink(this.options.myPubKeyZ32, "answer-refused", {
+			error: error instanceof Error ? error.message : String(error),
+			again
+		});
+		this.reset();
+		if (!again) return;
+		this.refusedAnswers++;
+		this.options.onAnswerReplaced?.();
+	}
 	async answer(offer) {
 		this.setState("answering");
 		this.options.setFastPoll(true);
@@ -6388,6 +6411,7 @@ var DataLink = class {
 			if (this.pc !== pc) return;
 			this.clearTimers();
 			this.answered = null;
+			this.refusedAnswers = 0;
 			this.fullGather = false;
 			this.setState("open");
 			this.options.setFastPoll(false);
@@ -6761,6 +6785,311 @@ function rememberAlone(alone, key, present) {
 }
 var GROUP_ADMIN_OFF_ERROR = "Managing this group is off on this device. Turn on Manage groups from this device first.";
 //#endregion
+//#region ../core/src/canonicalJson.ts
+/** True when `s` holds a lone UTF-16 surrogate, which I-JSON (and so JCS) does not allow. */
+function hasLoneSurrogate(s) {
+	for (let i = 0; i < s.length; i++) {
+		const c = s.charCodeAt(i);
+		if (c >= 55296 && c <= 56319) {
+			const next = s.charCodeAt(i + 1);
+			if (next >= 56320 && next <= 57343) {
+				i++;
+				continue;
+			}
+			return true;
+		}
+		if (c >= 56320 && c <= 57343) return true;
+	}
+	return false;
+}
+function write(value, depth) {
+	if (depth > 64) throw new Error("JSON nested deeper than 64 levels");
+	if (value === null) return "null";
+	if (typeof value === "boolean") return value ? "true" : "false";
+	if (typeof value === "number") {
+		if (!Number.isFinite(value)) throw new Error("JSON numbers must be finite");
+		return JSON.stringify(value);
+	}
+	if (typeof value === "string") {
+		if (hasLoneSurrogate(value)) throw new Error("A JSON string holds a lone surrogate");
+		return JSON.stringify(value);
+	}
+	if (Array.isArray(value)) return `[${value.map((v) => write(v, depth + 1)).join(",")}]`;
+	if (typeof value === "object") {
+		const record = value;
+		return `{${Object.keys(value).filter((k) => record[k] !== void 0).sort((a, b) => a < b ? -1 : a > b ? 1 : 0).map((k) => {
+			if (hasLoneSurrogate(k)) throw new Error("A JSON key holds a lone surrogate");
+			return `${JSON.stringify(k)}:${write(record[k], depth + 1)}`;
+		}).join(",")}}`;
+	}
+	throw new Error(`Not a JSON value: ${typeof value}`);
+}
+/** The canonical text of a JSON value. Throws on a value JSON cannot hold (a non-finite number, a lone surrogate). */
+function canonicalJson(value) {
+	return write(value, 0);
+}
+/** The canonical UTF-8 bytes of a JSON value. */
+function canonicalJsonBytes(value) {
+	return utf8Encode(canonicalJson(value));
+}
+/**
+* Reads bytes that must be the canonical form of a JSON value: `not-json` when they are not UTF-8 JSON, `not-canonical`
+* when writing the value again gives other bytes.
+*/
+function readCanonicalJson(bytes) {
+	let value;
+	try {
+		value = JSON.parse(utf8Decode(bytes));
+	} catch (error) {
+		return {
+			ok: false,
+			reason: "not-json",
+			detail: error instanceof Error ? error.message : String(error)
+		};
+	}
+	let again;
+	try {
+		again = canonicalJsonBytes(value);
+	} catch (error) {
+		return {
+			ok: false,
+			reason: "not-canonical",
+			detail: error instanceof Error ? error.message : String(error)
+		};
+	}
+	if (!bytesEqual(again, bytes)) return {
+		ok: false,
+		reason: "not-canonical"
+	};
+	return {
+		ok: true,
+		value
+	};
+}
+//#endregion
+//#region ../core/src/appStatements.ts
+/** The prefixes of phase 1. The others of the WISP (reports, reviews, licences, rotation, publisher proofs) come later. */
+var APP_PREFIXES = {
+	app: "ghostly-app/1",
+	store: "ghostly-store/1",
+	revoke: "ghostly-revoke/1"
+};
+var APP_STATEMENT_LIMITS = {
+	/** A signature statement's canonical bytes: 52 + 86 characters of values and the keys around them. */
+	signatureBytes: 1024,
+	/** Digests named by one revocation. */
+	revokeDigests: 64,
+	/** A revocation's reason, in characters. */
+	reason: 200,
+	/** Revocations in one `ghostly-revoke.json`. */
+	revocations: 4096
+};
+/** A z-base32 Ed25519 public key: 52 characters that decode to 32 bytes and encode back to the same text. */
+function isAppKey(value) {
+	if (typeof value !== "string" || !/^[ybndrfg8ejkmcpqxot1uwisza345h769]{52}$/.test(value)) return false;
+	const bytes = fromZ32(value);
+	return bytes.length === 32 && toZ32(bytes) === value;
+}
+/** A SHA-256 in base64url without padding: 43 characters that decode to 32 bytes and encode back to the same text. */
+function isAppHash(value) {
+	if (typeof value !== "string" || !/^[A-Za-z0-9_-]{43}$/.test(value)) return false;
+	return toBase64Url(fromBase64Url(value)) === value;
+}
+/** An app reference, `<publisher key>/<name>`. */
+var APP_NAME = /^[a-z][a-z0-9-]{0,31}$/;
+function isAppRef(value) {
+	if (typeof value !== "string") return false;
+	return value.indexOf("/") === 52 && isAppKey(value.slice(0, 52)) && APP_NAME.test(value.slice(53));
+}
+function appRef(publisher, name) {
+	return `${publisher}/${name}`;
+}
+/** The publisher key of a reference. */
+function appRefPublisher(ref) {
+	return ref.slice(0, 52);
+}
+/**
+* The publisher fingerprint people see: the first 16 z-base32 characters of the key (80 bits), in four groups.
+*/
+function appFingerprint(key) {
+	return (key.slice(0, 16).match(/.{1,4}/g) ?? []).join(" ");
+}
+/** The bytes a signature covers: the prefix, a zero byte, then the SHA-256 of the object's canonical bytes. */
+function appSignedBytes(prefix, canonical) {
+	const p = utf8Encode(prefix);
+	const out = new Uint8Array(p.length + 1 + 32);
+	out.set(p, 0);
+	out.set(sha256(canonical), p.length + 1);
+	return out;
+}
+/** Signs an object under a prefix: its canonical bytes and the signature statement. */
+async function signAppObject(prefix, value, signer) {
+	const bytes = canonicalJsonBytes(value);
+	const sig = await signer.sign(appSignedBytes(prefix, bytes));
+	return {
+		bytes,
+		signature: {
+			alg: "ed25519",
+			key: toZ32(signer.publicKey),
+			sig: toBase64Url(sig)
+		}
+	};
+}
+/**
+* Ed25519 verification as RFC 8032 writes it (`zip215: false`): canonical encodings of the point and the scalar only,
+* so every parser (this one, a Rust one with `verify_strict`) accepts exactly the same signatures.
+*/
+function strictVerify(signature, message, publicKey) {
+	try {
+		return ed25519.verify(signature, message, publicKey, { zip215: false });
+	} catch {
+		return false;
+	}
+}
+var exactKeys$1 = (value, keys, optional = []) => {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+	const have = Object.keys(value);
+	return keys.every((k) => have.includes(k)) && have.every((k) => keys.includes(k) || optional.includes(k));
+};
+/** Checks the shape of a signature statement: exactly `alg`, `key` and `sig`, a 64-byte signature. */
+function isAppSignature(value) {
+	if (!exactKeys$1(value, [
+		"alg",
+		"key",
+		"sig"
+	])) return false;
+	if (value.alg !== "ed25519" || !isAppKey(value.key)) return false;
+	return typeof value.sig === "string" && /^[A-Za-z0-9_-]{86}$/.test(value.sig) && toBase64Url(fromBase64Url(value.sig)) === value.sig;
+}
+/** Reads a signature statement from its bytes, which must be canonical. */
+function readAppSignature(bytes) {
+	if (bytes.length > APP_STATEMENT_LIMITS.signatureBytes) return {
+		ok: false,
+		reason: "bad-signature-statement",
+		detail: "Too large"
+	};
+	const read = readCanonicalJson(bytes);
+	if (!read.ok) return {
+		ok: false,
+		reason: "bad-signature-statement",
+		detail: read.reason
+	};
+	if (!isAppSignature(read.value)) return {
+		ok: false,
+		reason: "bad-signature-statement",
+		detail: "Not {alg, key, sig}"
+	};
+	return {
+		ok: true,
+		signature: read.value
+	};
+}
+/**
+* Verifies a signature over an object's canonical bytes under a prefix, made by `key`: `signature-key` when the
+* statement names another key, `bad-signature` when it does not verify.
+*/
+function verifyAppSignature(prefix, canonical, signature, key) {
+	if (!isAppSignature(signature)) return {
+		ok: false,
+		reason: "bad-signature-statement"
+	};
+	if (signature.key !== key) return {
+		ok: false,
+		reason: "signature-key"
+	};
+	return strictVerify(fromBase64Url(signature.sig), appSignedBytes(prefix, canonical), fromZ32(key)) ? { ok: true } : {
+		ok: false,
+		reason: "bad-signature"
+	};
+}
+var isSequence = (v) => typeof v === "number" && Number.isSafeInteger(v) && v >= 1;
+var isPlainLine = (v, max) => typeof v === "string" && [...v].length <= max && !/\p{Cc}/u.test(v);
+/** Checks a revocation statement's shape; the reason it is refused, or null. */
+function checkAppRevokeStatement(value) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return "Not an object";
+	const v = value;
+	const byDigests = "digests" in v;
+	if (!exactKeys$1(v, [
+		"ghostlyRevoke",
+		"app",
+		byDigests ? "digests" : "upTo"
+	], ["reason"])) return "Keys are not ghostlyRevoke, app, and exactly one of digests and upTo (reason optional)";
+	if (v.ghostlyRevoke !== 1) return "ghostlyRevoke is not 1";
+	if (!isAppRef(v.app)) return "app is not a reference";
+	if (byDigests) {
+		const d = v.digests;
+		if (!Array.isArray(d) || d.length < 1 || d.length > APP_STATEMENT_LIMITS.revokeDigests) return "digests is not 1 to 64 digests";
+		if (!d.every(isAppHash) || new Set(d).size !== d.length) return "digests holds a bad or repeated digest";
+	} else if (!isSequence(v.upTo)) return "upTo is not a sequence";
+	if (v.reason !== void 0 && !isPlainLine(v.reason, APP_STATEMENT_LIMITS.reason)) return "reason is not one line of 200 characters";
+	return null;
+}
+/** Signs a revocation with the publisher's key. */
+async function signAppRevocation(statement, signer) {
+	const problem = checkAppRevokeStatement(statement);
+	if (problem) throw new Error(`Not a revocation: ${problem}`);
+	if (toZ32(signer.publicKey) !== appRefPublisher(statement.app)) throw new Error("A revocation is signed by its app's publisher");
+	const { signature } = await signAppObject(APP_PREFIXES.revoke, statement, signer);
+	return {
+		statement,
+		signature
+	};
+}
+/**
+* Reads one signed revocation (a parsed value, from `ghostly-revoke.json` or a store index's `revoked`): its shape, then
+* the signature under `ghostly-revoke/1` by the publisher its `app` names.
+*/
+function readAppRevocation(value) {
+	if (!exactKeys$1(value, ["statement", "signature"])) return {
+		ok: false,
+		reason: "bad-revocation",
+		detail: "Keys are not statement and signature"
+	};
+	const problem = checkAppRevokeStatement(value.statement);
+	if (problem) return {
+		ok: false,
+		reason: "bad-revocation",
+		detail: problem
+	};
+	if (!isAppSignature(value.signature)) return {
+		ok: false,
+		reason: "bad-signature-statement"
+	};
+	const statement = value.statement;
+	const checked = verifyAppSignature(APP_PREFIXES.revoke, canonicalJsonBytes(statement), value.signature, appRefPublisher(statement.app));
+	if (!checked.ok) return checked;
+	return {
+		ok: true,
+		revocation: {
+			statement,
+			signature: value.signature
+		}
+	};
+}
+/**
+* Reads `ghostly-revoke.json`: canonical bytes holding a list of signed revocations. One that does not verify refuses the
+* file, as a store index's `revoked` does.
+*/
+function readAppRevocations(bytes) {
+	const read = readCanonicalJson(bytes);
+	if (!read.ok) return read;
+	if (!Array.isArray(read.value) || read.value.length > APP_STATEMENT_LIMITS.revocations) return {
+		ok: false,
+		reason: "bad-revocation",
+		detail: "Not a list of at most 4096 revocations"
+	};
+	const revocations = [];
+	for (const entry of read.value) {
+		const one = readAppRevocation(entry);
+		if (!one.ok) return one;
+		revocations.push(one.revocation);
+	}
+	return {
+		ok: true,
+		revocations
+	};
+}
+//#endregion
 //#region ../core/src/messageTime.ts
 /**
 * How far ahead of this device's clock a number a peer made from its clock may be (a pin's number, a status card's
@@ -6832,7 +7161,16 @@ var STATUS_CARD_LIMITS = {
 	/** A button's id: what a press names. */
 	buttonId: 32,
 	/** A button's label, in characters. */
-	buttonLabel: 40
+	buttonLabel: 40,
+	/** An app card's title and version, in characters (WISP 405 § An app): the manifest's bounds. */
+	appTitle: 40,
+	appVersion: 32,
+	/** A usage card's label ("Claude") and account, in characters (WISP 405 § Usage). */
+	usageLabel: 24,
+	/** A usage window's name ("5 h", "week"), in characters. */
+	usageWindow: 16,
+	/** Windows beside a usage card's own, shown in its details. */
+	usageWindows: 3
 };
 /** How a button looks: `primary` is the one highlighted, `danger` warns; `neutral` when none is said. */
 var BUTTON_STYLES = [
@@ -6898,8 +7236,8 @@ var sameButtonText = (a, b) => a.trim().toLowerCase() === b.trim().toLowerCase()
 * them (one line, cleaned). `at` is the button that clashes, `with` the one it clashes with.
 */
 function buttonLabelClash(buttons) {
-	const labels = buttons.map((button) => isObject$2(button) ? cardLine(button.label, Infinity) : void 0);
-	const ids = buttons.map((button) => isObject$2(button) && typeof button.id === "string" ? button.id : void 0);
+	const labels = buttons.map((button) => isObject$4(button) ? cardLine(button.label, Infinity) : void 0);
+	const ids = buttons.map((button) => isObject$4(button) && typeof button.id === "string" ? button.id : void 0);
 	for (const [at, label] of labels.entries()) {
 		if (!label) continue;
 		const twin = labels.findIndex((other, i) => i < at && !!other && sameButtonText(other, label));
@@ -6916,7 +7254,13 @@ function buttonLabelClash(buttons) {
 		};
 	}
 }
-var isObject$2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+/** An app card's id, made from its reference: the app's name, a dot, the first 16 characters of the publisher key. */
+function appCardId(ref) {
+	return `${ref.slice(53)}.${ref.slice(0, 16)}`;
+}
+/** An app card's `sequence`: a whole number from 0 to 2^53 - 1. */
+var appSequence = (value) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
+var isObject$4 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 /** One line of display text: runs of space (line breaks included) become one space, then the display rules for names. */
 function cardLine(value, max) {
 	if (typeof value !== "string") return void 0;
@@ -6945,7 +7289,7 @@ function readLinks(raw) {
 	if (!Array.isArray(raw)) return [];
 	const links = [];
 	for (const entry of raw.slice(0, STATUS_CARD_LIMITS.links)) {
-		if (!isObject$2(entry)) continue;
+		if (!isObject$4(entry)) continue;
 		const url = cardUrl(entry.url);
 		if (!url) continue;
 		const label = cardLine(entry.label, STATUS_CARD_LIMITS.linkLabel);
@@ -6968,7 +7312,7 @@ function readTags(raw) {
 	return tags;
 }
 function readRun(raw, now) {
-	if (!isObject$2(raw)) return void 0;
+	if (!isObject$4(raw)) return void 0;
 	const at = time(raw.at, now + MESSAGE_CLOCK_SKEW_MS), result = oneOf(RUN_RESULTS, raw.result);
 	if (!at || !result) return void 0;
 	const summary = cardLine(raw.summary, STATUS_CARD_LIMITS.line);
@@ -6978,6 +7322,52 @@ function readRun(raw, now) {
 		...summary && { summary }
 	};
 }
+/** A percent as a reader keeps it: a finite number, rounded and clamped into 0 to 100. */
+var percent = (value) => typeof value === "number" && Number.isFinite(value) ? Math.round(Math.min(100, Math.max(0, value))) : void 0;
+/** A time ahead of the reader (a reset, a next run) as it keeps it: whole, positive, at most a year ahead. */
+var ahead = (value, now) => typeof value === "number" && Number.isSafeInteger(value) && value > 0 && value <= now + STATUS_CARD_LIMITS.nextRunMs ? value : void 0;
+/** A usage card as a reader keeps it (WISP 405 § Usage): dropped without a percent left or a used of limit. */
+function readUsage(raw, id, now) {
+	const left = percent(raw.left);
+	let used = count(raw.used), limit = count(raw.limit, 1);
+	if (used === void 0 || limit === void 0 || used > limit) used = limit = void 0;
+	if (left === void 0 && limit === void 0) return void 0;
+	const label = cardLine(raw.label, STATUS_CARD_LIMITS.usageLabel), account = cardLine(raw.account, STATUS_CARD_LIMITS.usageLabel);
+	const window = cardLine(raw.window, STATUS_CARD_LIMITS.usageWindow);
+	const resetsAt = ahead(raw.resetsAt, now), updatedAt = time(raw.updatedAt, now + MESSAGE_CLOCK_SKEW_MS);
+	const windows = [];
+	if (Array.isArray(raw.windows)) for (const entry of raw.windows.slice(0, STATUS_CARD_LIMITS.usageWindows)) {
+		if (!isObject$4(entry)) continue;
+		const name = cardLine(entry.window, STATUS_CARD_LIMITS.usageWindow), share = percent(entry.left);
+		if (!name || share === void 0) continue;
+		const at = ahead(entry.resetsAt, now);
+		windows.push({
+			window: name,
+			left: share,
+			...at && { resetsAt: at }
+		});
+	}
+	return {
+		kind: "usage",
+		id,
+		...left !== void 0 && { left },
+		...used !== void 0 && limit !== void 0 && {
+			used,
+			limit
+		},
+		...label && { label },
+		...account && { account },
+		...window && { window },
+		...resetsAt && { resetsAt },
+		...updatedAt && { updatedAt },
+		...windows.length && { windows }
+	};
+}
+/** How much of a usage card's quota is left, 0 to 100: its own percent, else worked out from used of limit. */
+function usageLeft(card) {
+	if (card.left !== void 0) return card.left;
+	return card.used !== void 0 && card.limit ? Math.round((card.limit - card.used) / card.limit * 100) : 0;
+}
 /** The bytes a card takes on the wire: what `STATUS_CARD_LIMITS.bytes` bounds. */
 function statusCardBytes(card) {
 	try {
@@ -6993,10 +7383,28 @@ function statusCardBytes(card) {
 * routine's next run up to a year ahead). The message is always kept: without a card it shows its text.
 */
 function readStatusCard(raw, now = Date.now()) {
-	if (!isObject$2(raw) || statusCardBytes(raw) > STATUS_CARD_LIMITS.bytes) return void 0;
+	if (!isObject$4(raw) || statusCardBytes(raw) > STATUS_CARD_LIMITS.bytes) return void 0;
 	const id = typeof raw.id === "string" && ID$4.test(raw.id) ? raw.id : void 0;
 	if (!id) return void 0;
+	if (raw.kind === "app") {
+		if (!isAppRef(raw.ref) || id !== appCardId(raw.ref) || !isAppHash(raw.digest) || !appSequence(raw.sequence)) return void 0;
+		const title = cardLine(raw.title, STATUS_CARD_LIMITS.appTitle);
+		if (!title) return void 0;
+		const version = cardLine(raw.version, STATUS_CARD_LIMITS.appVersion), url = cardUrl(raw.url);
+		return {
+			kind: "app",
+			id,
+			ref: raw.ref,
+			digest: raw.digest,
+			sequence: raw.sequence,
+			title,
+			...version && { version },
+			...url && { url },
+			...raw.opened === true && { opened: true }
+		};
+	}
 	const latest = now + MESSAGE_CLOCK_SKEW_MS;
+	if (raw.kind === "usage") return readUsage(raw, id, now);
 	const links = readLinks(raw.links);
 	if (raw.kind === "task") {
 		const title = cardLine(raw.title, STATUS_CARD_LIMITS.title), status = oneOf(TASK_STATUSES, raw.status);
@@ -7006,7 +7414,7 @@ function readStatusCard(raw, now = Date.now()) {
 		if (done === void 0 || total === void 0 || done > total) done = total = void 0;
 		const step = cardLine(raw.step, STATUS_CARD_LIMITS.line), branch = cardLine(raw.branch, STATUS_CARD_LIMITS.branch);
 		let pr;
-		if (isObject$2(raw.pr)) {
+		if (isObject$4(raw.pr)) {
 			const url = cardUrl(raw.pr.url);
 			if (url) {
 				const number = count(raw.pr.number, 1), additions = count(raw.pr.additions), deletions = count(raw.pr.deletions), files = count(raw.pr.files);
@@ -7024,7 +7432,7 @@ function readStatusCard(raw, now = Date.now()) {
 		}
 		const items = [];
 		if (Array.isArray(raw.items)) for (const entry of raw.items.slice(0, STATUS_CARD_LIMITS.items)) {
-			if (!isObject$2(entry)) continue;
+			if (!isObject$4(entry)) continue;
 			const text = cardLine(entry.text, STATUS_CARD_LIMITS.line);
 			if (text) items.push({
 				text,
@@ -7083,7 +7491,7 @@ function readStatusCard(raw, now = Date.now()) {
 		if (!Array.isArray(raw.buttons)) return void 0;
 		const buttons = [], seen = /* @__PURE__ */ new Set();
 		for (const entry of raw.buttons.slice(0, STATUS_CARD_LIMITS.buttons)) {
-			if (!isObject$2(entry) || typeof entry.id !== "string" || !BUTTON_ID.test(entry.id) || seen.has(entry.id)) continue;
+			if (!isObject$4(entry) || typeof entry.id !== "string" || !BUTTON_ID.test(entry.id) || seen.has(entry.id)) continue;
 			const label = cardLine(entry.label, STATUS_CARD_LIMITS.buttonLabel);
 			if (!label) continue;
 			seen.add(entry.id);
@@ -7112,10 +7520,10 @@ function readStatusCard(raw, now = Date.now()) {
 * at once and nothing it said is lost on the way. Line breaks and invisible characters are cleaned, as a reader would.
 */
 function checkStatusCard(raw, now = Date.now()) {
-	if (!isObject$2(raw)) return { error: "A card is an object" };
+	if (!isObject$4(raw)) return { error: "A card is an object" };
 	const bytes = statusCardBytes(raw);
 	if (bytes > STATUS_CARD_LIMITS.bytes) return { error: `The card takes ${bytes} bytes; at most ${STATUS_CARD_LIMITS.bytes}` };
-	if (raw.kind !== "task" && raw.kind !== "routine" && raw.kind !== "buttons") return { error: "kind is task, routine or buttons" };
+	if (raw.kind !== "task" && raw.kind !== "routine" && raw.kind !== "buttons" && raw.kind !== "app" && raw.kind !== "usage") return { error: "kind is task, routine, buttons, app or usage" };
 	if (typeof raw.id !== "string" || !ID$4.test(raw.id)) return { error: `id is 1 to ${STATUS_CARD_LIMITS.id} of A-Z a-z 0-9 _ . : - and does not start with -` };
 	const line = (field, value, max, required = false) => {
 		if (value === void 0 && !required) return null;
@@ -7129,20 +7537,53 @@ function checkStatusCard(raw, now = Date.now()) {
 	if (raw.links !== void 0) {
 		if (!Array.isArray(raw.links) || raw.links.length > STATUS_CARD_LIMITS.links) errors.push(`links is a list of at most ${STATUS_CARD_LIMITS.links}`);
 		else for (const [i, link] of raw.links.entries()) {
-			if (!isObject$2(link)) {
+			if (!isObject$4(link)) {
 				errors.push(`links[${i}] is an object`);
 				continue;
 			}
 			errors.push(url(`links[${i}].url`, link.url), line(`links[${i}].label`, link.label, STATUS_CARD_LIMITS.linkLabel));
 		}
 	}
-	if (raw.kind === "buttons") {
+	const share = (field, value) => value === void 0 || typeof value === "number" && Number.isFinite(value) && value >= 0 && value <= 100 ? null : `${field} is a number from 0 to 100`;
+	const reset = (field, value) => value === void 0 || ahead(value, now) !== void 0 ? null : `${field} is a time in milliseconds, within a year`;
+	if (raw.kind === "usage") {
+		if (raw.links !== void 0) errors.push("a usage card takes no links");
+		if (raw.left === void 0 && raw.used === void 0) errors.push("left (a percent) or used and limit");
+		errors.push(share("left", raw.left));
+		if (raw.used === void 0 !== (raw.limit === void 0)) errors.push("used and limit go together");
+		else if (raw.used !== void 0) {
+			errors.push(whole("used", raw.used), whole("limit", raw.limit, 1));
+			if (typeof raw.used === "number" && typeof raw.limit === "number" && raw.used > raw.limit) errors.push("used is at most limit");
+		}
+		errors.push(line("label", raw.label, STATUS_CARD_LIMITS.usageLabel), line("account", raw.account, STATUS_CARD_LIMITS.usageLabel), line("window", raw.window, STATUS_CARD_LIMITS.usageWindow), reset("resetsAt", raw.resetsAt));
+		if (raw.updatedAt !== void 0 && !(typeof raw.updatedAt === "number" && Number.isSafeInteger(raw.updatedAt) && raw.updatedAt > 0 && raw.updatedAt <= now + 3e5)) errors.push("updatedAt is a time in milliseconds, not in the future");
+		if (raw.windows !== void 0) {
+			if (!Array.isArray(raw.windows) || raw.windows.length > STATUS_CARD_LIMITS.usageWindows) errors.push(`windows is a list of at most ${STATUS_CARD_LIMITS.usageWindows}`);
+			else for (const [i, entry] of raw.windows.entries()) {
+				if (!isObject$4(entry)) {
+					errors.push(`windows[${i}] is an object`);
+					continue;
+				}
+				errors.push(line(`windows[${i}].window`, entry.window, STATUS_CARD_LIMITS.usageWindow, true));
+				errors.push(entry.left === void 0 ? `windows[${i}].left is a number from 0 to 100` : share(`windows[${i}].left`, entry.left), reset(`windows[${i}].resetsAt`, entry.resetsAt));
+			}
+		}
+	} else if (raw.kind === "app") {
+		if (raw.links !== void 0) errors.push("an app card takes no links");
+		if (!isAppRef(raw.ref)) errors.push("ref is <publisher key in z-base32>/<name>");
+		else if (raw.id !== appCardId(raw.ref)) errors.push(`id is ${appCardId(raw.ref)}, made from ref`);
+		if (!isAppHash(raw.digest)) errors.push("digest is a SHA-256 in base64url without padding");
+		if (!appSequence(raw.sequence)) errors.push("sequence is a whole number from 0 to 2^53 - 1");
+		errors.push(line("title", raw.title, STATUS_CARD_LIMITS.appTitle, true), line("version", raw.version, STATUS_CARD_LIMITS.appVersion));
+		if (raw.url !== void 0) errors.push(url("url", raw.url));
+		if (raw.opened !== void 0 && raw.opened !== true) errors.push("opened is true or left out");
+	} else if (raw.kind === "buttons") {
 		if (raw.links !== void 0) errors.push("buttons take no links");
 		if (!Array.isArray(raw.buttons) || !raw.buttons.length || raw.buttons.length > STATUS_CARD_LIMITS.buttons) errors.push(`buttons is a list of 1 to ${STATUS_CARD_LIMITS.buttons}`);
 		else {
 			const ids = /* @__PURE__ */ new Set();
 			for (const [i, button] of raw.buttons.entries()) {
-				if (!isObject$2(button)) {
+				if (!isObject$4(button)) {
 					errors.push(`buttons[${i}] is an object`);
 					continue;
 				}
@@ -7169,7 +7610,7 @@ function checkStatusCard(raw, now = Date.now()) {
 		}
 		errors.push(line("step", raw.step, STATUS_CARD_LIMITS.line), line("branch", raw.branch, STATUS_CARD_LIMITS.branch));
 		if (raw.pr !== void 0) {
-			if (!isObject$2(raw.pr)) errors.push("pr is an object");
+			if (!isObject$4(raw.pr)) errors.push("pr is an object");
 			else {
 				errors.push(url("pr.url", raw.pr.url), whole("pr.number", raw.pr.number, 1), whole("pr.additions", raw.pr.additions), whole("pr.deletions", raw.pr.deletions), whole("pr.files", raw.pr.files));
 				if (raw.pr.state !== void 0 && !oneOf(PR_STATES, raw.pr.state)) errors.push(`pr.state is one of ${PR_STATES.join(", ")}`);
@@ -7201,7 +7642,7 @@ function checkStatusCard(raw, now = Date.now()) {
 		if (raw.items !== void 0) {
 			if (!Array.isArray(raw.items) || raw.items.length > STATUS_CARD_LIMITS.items) errors.push(`items is a list of at most ${STATUS_CARD_LIMITS.items}`);
 			else for (const [i, item] of raw.items.entries()) {
-				if (!isObject$2(item)) {
+				if (!isObject$4(item)) {
 					errors.push(`items[${i}] is an object`);
 					continue;
 				}
@@ -7215,7 +7656,7 @@ function checkStatusCard(raw, now = Date.now()) {
 		if (raw.cron !== void 0 && !(typeof raw.cron === "string" && CRON.test(raw.cron.trim()))) errors.push(`cron is a cron line of at most ${STATUS_CARD_LIMITS.cron} characters`);
 		if (raw.nextRunAt !== void 0 && !(typeof raw.nextRunAt === "number" && Number.isSafeInteger(raw.nextRunAt) && raw.nextRunAt > 0 && raw.nextRunAt <= now + STATUS_CARD_LIMITS.nextRunMs)) errors.push("nextRunAt is a time in milliseconds, within a year");
 		const run = (field, value) => {
-			if (!isObject$2(value)) return errors.push(`${field} is an object`);
+			if (!isObject$4(value)) return errors.push(`${field} is an object`);
 			if (!(typeof value.at === "number" && Number.isSafeInteger(value.at) && value.at > 0 && value.at <= now + 3e5)) errors.push(`${field}.at is a time in milliseconds, not in the future`);
 			if (!oneOf(RUN_RESULTS, value.result)) errors.push(`${field}.result is one of ${RUN_RESULTS.join(", ")}`);
 			errors.push(line(`${field}.summary`, value.summary, STATUS_CARD_LIMITS.line));
@@ -7266,6 +7707,21 @@ function cardTimeUtc(ms) {
 * and search finds. Plain lines, the first naming the card, no bars or layout that would read badly elsewhere.
 */
 function statusCardText(card) {
+	if (card.kind === "app") {
+		const named = `${card.title}${card.version ? ` ${card.version}` : ""}`;
+		return [card.opened ? `🧩 Opened ${named} in this chat (Ghostly app)` : `🧩 ${named} (Ghostly app)`, ...card.url ? [card.url] : []].join("\n");
+	}
+	if (card.kind === "usage") {
+		const left = `${usageLeft(card)}% left${card.window ? ` (${card.window})` : ""}`;
+		return [
+			`📊 ${card.label ?? "Usage"}`,
+			...card.account ? [card.account] : [],
+			left,
+			...card.used !== void 0 && card.limit !== void 0 ? [`${card.used} of ${card.limit} used`] : [],
+			...card.resetsAt ? [`resets ${cardTimeUtc(card.resetsAt)}`] : [],
+			...(card.windows ?? []).map((w) => `${w.window} ${w.left}%`)
+		].join(" · ");
+	}
 	if (card.kind === "buttons") return `Reply: ${card.buttons.map((b) => b.label).join(" / ")}`;
 	if (card.kind === "task") {
 		const progress = taskProgress(card);
@@ -9806,6 +10262,14 @@ var TransportSwitch = class {
 	settled = "";
 	failed = "";
 	preparing = false;
+	/** The coordinator's dial for the pending plan has started (`dialing`): from then on a newer choice waits for it. */
+	dialStarted = false;
+	/**
+	* The contact's `paired-policy` says `replaces`: its app reads a `paired-switch-keep` for a plan a newer choice
+	* replaced as that (`supersede`). An app before 1.1.5 reads it as its target missed and says the chat was kept on its
+	* transport; 1.1.5 reads it right but does not say so.
+	*/
+	remoteReplaces = false;
 	/** This side chose while no session was open: the next one begins with it as a choice. */
 	apart = false;
 	constructor(options) {
@@ -9861,10 +10325,12 @@ var TransportSwitch = class {
 			context: this.context
 		});
 	}
+	/** Older apps read the policy's own fields only, and drop `replaces`. */
 	announce() {
 		this.send({
 			t: "paired-policy",
-			policy: this.local()
+			policy: this.local(),
+			replaces: true
 		});
 	}
 	/**
@@ -9881,6 +10347,7 @@ var TransportSwitch = class {
 		if (!migrated) {
 			this.failed = "";
 			this.remote = null;
+			this.remoteReplaces = false;
 		}
 		if (this.apart) {
 			this.intent = Math.max(this.intent, this.lastRemote?.intent ?? 0) + 1;
@@ -9903,6 +10370,7 @@ var TransportSwitch = class {
 		} else if (userIntent) this.intent = Math.max(this.intent, this.remote?.intent ?? 0) + 1;
 		this.failed = "";
 		this.announce();
+		this.supersede();
 		this.reconcile();
 	}
 	/**
@@ -9964,12 +10432,38 @@ var TransportSwitch = class {
 		this.clearPlan();
 		this.context = "";
 		this.remote = null;
+		this.remoteReplaces = false;
 	}
 	clearPlan() {
 		if (this.timer) clearTimeout(this.timer);
 		this.timer = null;
 		this.plan = null;
 		this.preparing = false;
+		this.dialStarted = false;
+	}
+	/** The coordinator starts dialling the pending plan (a move back to WebRTC first waits for the old session to retire). */
+	dialing(plan) {
+		if (this.plan === plan) this.dialStarted = true;
+	}
+	/**
+	* A newer choice (this side's, or the contact's policy) while a plan both sides agreed has not started its dial: a
+	* move back to WebRTC waits for the WebRTC session it left to retire (`SWITCH_RETIRE_MS`), and nothing has been tried
+	* yet. The coordinator drops that plan, so the chat does not move there only to move again; the other side is told
+	* with `paired-switch-keep`, and whatever the newer policies call for is planned next. A plan already dialling goes
+	* on: a choice made then is planned once it ended (`replanIfMoved`). So does a plan the contact's app would take
+	* that keep for a target missed (its policy did not say `replaces`): the newer choice is planned once it landed.
+	*/
+	supersede() {
+		const plan = this.plan;
+		if (!plan || !this.preparing || this.dialStarted || !this.context || !this.remote || this.options.key > this.options.peerKey || !this.remoteReplaces) return;
+		if (this.choices(this.local(), this.remote)[0] === plan.choices[0]) return;
+		this.send({
+			t: "paired-switch-keep",
+			id: plan.id
+		});
+		this.clearPlan();
+		this.options.cancel();
+		this.options.state();
 	}
 	fail(error) {
 		const target = this.plan?.choices[0], upgrade = !!this.plan?.upgrade;
@@ -10091,8 +10585,10 @@ var TransportSwitch = class {
 			if (!policy || this.remote && (policy.revision < this.remote.revision || policy.revision === this.remote.revision && JSON.stringify(policy) !== JSON.stringify(this.remote))) return true;
 			const changed = !this.remote || policy.revision !== this.remote.revision;
 			this.remote = this.lastRemote = policy;
+			this.remoteReplaces = frame.replaces === true;
 			this.options.peer(policy);
 			if (changed && this.plan && !this.preparing) this.clearPlan();
+			else if (changed) this.supersede();
 			this.reconcile();
 			return true;
 		}
@@ -10129,6 +10625,12 @@ var TransportSwitch = class {
 			return true;
 		}
 		if (frame.t === "paired-switch-keep") {
+			if (this.preparing && this.remote && this.choices(this.local(), this.remote)[0] !== this.plan.choices[0]) {
+				this.clearPlan();
+				this.options.state();
+				this.reconcile();
+				return true;
+			}
 			if (this.actual && this.plan.choices.includes(this.actual)) {
 				if (this.plan.choices[0] !== this.actual && !this.plan.upgrade) this.options.kept?.(this.plan.choices[0]);
 				this.settled = this.signature(this.plan.local, this.plan.remote);
@@ -11282,11 +11784,17 @@ var CAPS_READ_SPACING_MS = 15e3;
 * already knows and looks the key up behind it, and a lookup that started before the publication landed finds the old
 * one; a relay may serve an old copy for a while too. The envelope names each revision once, so one read was the last
 * until the next envelope, minutes away, and the chat stayed on the DHT with no descriptors to dial.
+*
+* The first ones come soon: a contact's record that lists a native transport with no descriptor is the "Peer native
+* address unavailable" a dial ends with, and its revision with the descriptors is usually out a second or two after the
+* first (its endpoints were starting). Read 5 s, then 20 s after, two Desktops DHT direct with Iroh's relay out of reach
+* went live 11 to 28 s after their chats opened (2026-10-07). One read more than before, three in the first 7 s.
 */
 var CAPS_READ_RETRY_MS = [
-	5e3,
+	1e3,
+	2e3,
+	4e3,
 	15e3,
-	3e4,
 	6e4
 ];
 var NATIVE = ["iroh/1", "hyperdht/1"];
@@ -11878,7 +12386,7 @@ var KINDS$1 = [
 var WIRE_ID = /^[A-Za-z0-9_-]{8,64}$/;
 var MAILBOX = /^[A-Za-z0-9_-]{22}$/;
 var SIG$3 = /^[A-Za-z0-9_-]{86}$/;
-var MAGIC$1 = utf8Encode("GHLD");
+var MAGIC$2 = utf8Encode("GHLD");
 var VERSION = 1;
 var NONCE$2 = 24;
 /** Why a bundle, manifest or pointer was refused. Never a reason to trust it a little. */
@@ -11944,7 +12452,7 @@ var HoldKeys = class {
 		new DataView(length.buffer).setUint32(0, header.length);
 		const nonce = randomBytes(NONCE$2);
 		const box = xsalsa20poly1305(this.sealKey, nonce).encrypt(concatBytes$1(length, header, body));
-		return concatBytes$1(MAGIC$1, new Uint8Array([VERSION]), nonce, box);
+		return concatBytes$1(MAGIC$2, new Uint8Array([VERSION]), nonce, box);
 	}
 	/**
 	* Opens a bundle the contact sealed for me. Everything is checked before anything is returned: the
@@ -11954,11 +12462,11 @@ var HoldKeys = class {
 	open(bytes, expect = {}) {
 		const now = expect.now ?? Date.now();
 		if (bytes.length > (expect.maxBytes ?? HOLD_LIMITS.maxBundleBytes)) throw new HoldRefusedError("size", "The held item is larger than allowed");
-		if (bytes.length < MAGIC$1.length + 1 + NONCE$2 + 16 + 4 || !MAGIC$1.every((b, i) => bytes[i] === b)) throw new HoldRefusedError("format", "Not a held item");
-		if (bytes[MAGIC$1.length] !== VERSION) throw new HoldRefusedError("format", "Held item from a newer Ghostly");
+		if (bytes.length < MAGIC$2.length + 1 + NONCE$2 + 16 + 4 || !MAGIC$2.every((b, i) => bytes[i] === b)) throw new HoldRefusedError("format", "Not a held item");
+		if (bytes[MAGIC$2.length] !== VERSION) throw new HoldRefusedError("format", "Held item from a newer Ghostly");
 		let plain;
 		try {
-			plain = xsalsa20poly1305(this.sealKey, bytes.subarray(MAGIC$1.length + 1, MAGIC$1.length + 1 + NONCE$2)).decrypt(bytes.subarray(MAGIC$1.length + 1 + NONCE$2));
+			plain = xsalsa20poly1305(this.sealKey, bytes.subarray(MAGIC$2.length + 1, MAGIC$2.length + 1 + NONCE$2)).decrypt(bytes.subarray(MAGIC$2.length + 1 + NONCE$2));
 		} catch {
 			throw new HoldRefusedError("tampered", "The held item was changed or is not for this chat");
 		}
@@ -12164,6 +12672,18 @@ function readManifest(meta) {
 */
 var OFFER_EXTENSIONS = ["ping/1"];
 var MAX_HANDSHAKE_BYTES = 4096;
+/**
+* Frames received and not handled yet, at most: their count and their size together. Frames are handled one at a time,
+* each awaited (a group frame is decrypted, checked and stored before the next), and the peer sends at the network's
+* pace. A member back in a group answers a sync with a burst: a commit per epoch, its kept messages, the ones it hands
+* on, edits, reactions. With a bound of 64 frames a phone handling them a few milliseconds each failed its session
+* mid catch-up ("Session receive limit exceeded" then, "Session receive queue full" now, 2026-10-07). The size bound keeps the old worst case in memory
+* (64 frames of 60 KiB); the count only bounds a flood of tiny frames.
+*/
+var SESSION_RECEIVE_PENDING = {
+	frames: 1024,
+	bytes: 3932160
+};
 var KEY = /^[ybndrfg8ejkmcpqxot1uwisza345h769]{52}$/;
 var NONCE$1 = /^[A-Za-z0-9_-]{43}$/;
 var SIG$2 = /^[A-Za-z0-9_-]{86}$/;
@@ -12195,6 +12715,11 @@ var PairedSession = class {
 	state = { status: "negotiating" };
 	/** The peer said nothing more within `authTimeoutMs`: the connection carried nothing, which proves nothing about the peer. */
 	authTimedOut = false;
+	/**
+	* The peer sent faster than this side handles, past `SESSION_RECEIVE_PENDING`: the session ends, which is no proof
+	* of anything wrong with the peer (a burst of catch-up on a slow device), so the chat dials again.
+	*/
+	overloaded = false;
 	/** The seed's identity; null when a signer signs. */
 	identity;
 	signer;
@@ -12211,6 +12736,7 @@ var PairedSession = class {
 	confirming = false;
 	admission = null;
 	pending = 0;
+	pendingBytes = 0;
 	queue = Promise.resolve();
 	timer = null;
 	constructor(channel, options) {
@@ -12298,7 +12824,12 @@ var PairedSession = class {
 		if (!(binding ? (binding.transport === "hyperdht/1" ? /^[a-f0-9]{128}$/.test(binding.context) : FINGERPRINT.test(binding.context)) && binding.identities.length === 2 && binding.identities.every((k) => FINGERPRINT.test(k)) && binding.identities[0] !== binding.identities[1] : this.options.fingerprints?.length === 2 && this.options.fingerprints.every((f) => FINGERPRINT.test(f))) || !this.offer.transports.includes(this.transport) || this.options.rendezvousKeys.some((k) => !KEY.test(k))) return this.fail("Invalid connection binding or unavailable transport");
 		this.channel.onMessage = (data) => {
 			if (this.stopped) return;
-			if ((typeof data === "string" ? data.length : data.length) > 61440 || ++this.pending > 64) return this.fail("Session receive limit exceeded");
+			const size = data.length;
+			if (size > 61440) return this.fail("Session frame too large");
+			if (++this.pending > SESSION_RECEIVE_PENDING.frames || (this.pendingBytes += size) > SESSION_RECEIVE_PENDING.bytes) {
+				this.overloaded = true;
+				return this.fail("Session receive queue full");
+			}
 			this.queue = this.queue.then(async () => {
 				if (this.stopped) return;
 				if (typeof data === "string" && data.startsWith("{\"t\":\"pair-")) {
@@ -12307,6 +12838,7 @@ var PairedSession = class {
 				} else if (this.state.status === "ready") await this.options.onApplication(data);
 			}).catch(() => this.fail("Invalid session negotiation")).finally(() => {
 				this.pending--;
+				this.pendingBytes -= size;
 			});
 		};
 		this.timer = setTimeout(() => {
@@ -12574,6 +13106,11 @@ var BUTTONS_CAPABILITY = "buttons/1";
 * (WISP 03), so an app back after an absence knows before any session whether a relay can carry it there at once.
 */
 var UPGRADE_CAPABILITY = "upgrade/1";
+/**
+* Mini-apps in a 1:1 chat: `paired-app` frames on this session, live only (WISP 1200 § In a chat: `apps/1`,
+* `pairedApps.ts`). Offered only while the apps feature is on.
+*/
+var APPS_CAPABILITY = "apps/1";
 /** Every capability this app knows on a session: what `receive` reports changes of. */
 var KNOWN_SESSION_CAPABILITIES = [
 	CALLS_CAPABILITY,
@@ -12586,7 +13123,8 @@ var KNOWN_SESSION_CAPABILITIES = [
 	PIN_CAPABILITY,
 	STATUS_CARD_CAPABILITY,
 	BUTTONS_CAPABILITY,
-	UPGRADE_CAPABILITY
+	UPGRADE_CAPABILITY,
+	APPS_CAPABILITY
 ];
 var SESSION_CAPABILITIES_FRAME = "paired-capabilities";
 var MAX_ENTRIES$1 = 32;
@@ -12653,6 +13191,269 @@ var SessionCapabilities = class {
 	}
 };
 //#endregion
+//#region ../core/src/pairedApps.ts
+/**
+* Mini-apps talking in a 1:1 chat (WISP 1200 § In a chat: `apps/1`): the same app on both sides sends JSON to the
+* other over the live session, in one frame with three forms.
+*
+*     {"t":"paired-app","a":"<chat app id>","o":"open","v":"1.2.0"}
+*     {"t":"paired-app","a":"<chat app id>","o":"close"}
+*     {"t":"paired-app","a":"<chat app id>","d":<JSON value>}
+*
+* It needs `apps/1` in `paired-capabilities` on both sides. Live only: never on the DHT, never held, never queued for
+* later; while the session is not live a send fails with `offline`. An `open` goes when the person opens the app in
+* the chat, again on an update, and again on every session that comes back while the app is open. The receiver
+* enforces the limits (the sender's client may be the attacker): at most `APP_DATA_MAX_BYTES` of data, at most
+* `APP_RATE_LIMIT` frames a second per app, data only for an app open on both sides, at most `APP_PEER_OPEN_MAX`
+* apps the peer has open, and nothing unless both sides offer `apps/1`.
+*
+* The chat app id names one app in one chat: the first 16 bytes of HMAC-SHA-256 keyed by the two pinned participation
+* keys over the app reference `<publisher key in z-base32>/<name>`. One app's id differs in each chat, so ids cannot
+* be matched across a person's chats; it travels only inside the encrypted session.
+*/
+var APP_FRAME = "paired-app";
+var DOMAIN = "ghostly-apps/1";
+var APP_ID = /^[A-Za-z0-9_-]{22}$/;
+/** Semantic versioning 2.0.0, as a manifest's `version` is. */
+var SEMVER$1 = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/;
+/** A chat app id as it is on the wire: 22 base64url characters (16 bytes, no padding). */
+function isChatAppId(value) {
+	return typeof value === "string" && APP_ID.test(value);
+}
+/** A version an `open` may carry: semantic versioning, at most `APP_VERSION_MAX` characters. */
+function isAppVersion(value) {
+	return typeof value === "string" && value.length <= 64 && SEMVER$1.test(value);
+}
+function compareBytes$2(a, b) {
+	for (let i = 0; i < Math.min(a.length, b.length); i++) if (a[i] !== b[i]) return a[i] - b[i];
+	return a.length - b.length;
+}
+/**
+* The chat app id of `ref` in the chat between these two participation keys (raw, 32 bytes each, in either order):
+* HMAC-SHA-256 keyed by SHA-256(`ghostly-apps/1`, 0x00, the lower key, the higher key), over the UTF-8 reference;
+* its first 16 bytes, base64url without padding.
+*/
+function chatAppId(keyA, keyB, ref) {
+	if (keyA.length !== 32 || keyB.length !== 32) throw new Error("A participation key is 32 bytes");
+	if (!isAppRef(ref)) throw new Error("Not an app reference");
+	const [low, high] = compareBytes$2(keyA, keyB) <= 0 ? [keyA, keyB] : [keyB, keyA];
+	const key = sha256(concatBytes$1(utf8Encode(DOMAIN), new Uint8Array([0]), low, high));
+	return toBase64Url(hmac(sha256, key, utf8Encode(ref)).slice(0, 16));
+}
+/** The size of a value as compact UTF-8 JSON; Infinity when it is not JSON (undefined, a function, a cycle, a BigInt). */
+function appDataBytes(value) {
+	let json;
+	try {
+		json = JSON.stringify(value);
+	} catch {
+		return Infinity;
+	}
+	return json === void 0 ? Infinity : utf8Encode(json).length;
+}
+function appOpenFrame(app, version) {
+	if (!isChatAppId(app) || !isAppVersion(version)) throw new Error("Not an app open");
+	return {
+		t: APP_FRAME,
+		a: app,
+		o: "open",
+		v: version
+	};
+}
+function appCloseFrame(app) {
+	if (!isChatAppId(app)) throw new Error("Not an app close");
+	return {
+		t: APP_FRAME,
+		a: app,
+		o: "close"
+	};
+}
+function appDataFrame(app, data) {
+	if (!isChatAppId(app) || appDataBytes(data) > 32768) throw new Error("Not app data");
+	return {
+		t: APP_FRAME,
+		a: app,
+		d: data
+	};
+}
+/**
+* A `paired-app` frame as the peer sent it, or why a reader must refuse it: no valid `a` (22 base64url characters),
+* both or neither of `o` and `d`, an unknown `o`, an `open` without a valid `v`, or a `d` over `APP_DATA_MAX_BYTES`.
+* Other keys are ignored, so a later version can add some.
+*/
+function readAppFrame(frame) {
+	const refuse = (refusal) => ({
+		ok: false,
+		refusal
+	});
+	if (frame?.t !== "paired-app") return refuse("not-app");
+	if (!isChatAppId(frame.a)) return refuse("bad-a");
+	const own = (key) => Object.prototype.hasOwnProperty.call(frame, key);
+	const hasO = own("o"), hasD = own("d");
+	if (hasO && hasD) return refuse("o-and-d");
+	if (!hasO && !hasD) return refuse("no-o-or-d");
+	if (hasD) return appDataBytes(frame.d) <= 32768 ? {
+		ok: true,
+		frame: {
+			t: APP_FRAME,
+			a: frame.a,
+			d: frame.d
+		}
+	} : refuse("too-large");
+	if (frame.o === "close") return {
+		ok: true,
+		frame: {
+			t: APP_FRAME,
+			a: frame.a,
+			o: "close"
+		}
+	};
+	if (frame.o !== "open") return refuse("unknown-o");
+	return isAppVersion(frame.v) ? {
+		ok: true,
+		frame: {
+			t: APP_FRAME,
+			a: frame.a,
+			o: "open",
+			v: frame.v
+		}
+	} : refuse("bad-v");
+}
+/** A `paired-app` frame as the peer sent it, or null when a reader must refuse it (`readAppFrame` says why). */
+function parseAppFrame(frame) {
+	const read = readAppFrame(frame);
+	return read.ok ? read.frame : null;
+}
+/** Frames per app in a sliding window, for at most `max` apps at once. */
+var RateWindows = class {
+	limit;
+	max;
+	windows = /* @__PURE__ */ new Map();
+	constructor(limit, max) {
+		this.limit = limit;
+		this.max = max;
+	}
+	/** Counts one frame for `app` at `now`; false when it is over the limit (not counted then). */
+	take(app, now) {
+		let window = this.windows.get(app);
+		if (!window) {
+			if (this.windows.size >= this.max) this.prune(now);
+			if (this.windows.size >= this.max) return false;
+			window = [];
+			this.windows.set(app, window);
+		}
+		while (window.length && now - window[0] >= 1e3) window.shift();
+		if (window.length >= this.limit) return false;
+		window.push(now);
+		return true;
+	}
+	prune(now) {
+		for (const [app, window] of this.windows) if (!window.length || now - window[window.length - 1] >= 1e3) this.windows.delete(app);
+	}
+	clear() {
+		this.windows.clear();
+	}
+};
+/**
+* The apps of one chat on its live sessions. `open` (this side's apps, by chat app id, with their versions) lasts
+* across sessions, so each new one says `open` again; what the peer has open lasts one session.
+*/
+var AppSessions = class {
+	open;
+	now;
+	peer = /* @__PURE__ */ new Map();
+	/** What the peer had open on a session that ended, held for `APP_RESUME_GRACE_MS` until it says so again. */
+	held = /* @__PURE__ */ new Map();
+	received = new RateWindows(50, 64);
+	sent = new RateWindows(48, 64);
+	constructor(open = /* @__PURE__ */ new Map(), now = Date.now) {
+		this.open = open;
+		this.now = now;
+	}
+	/** The peer has this app open on this session, at this version. */
+	peerVersion(app) {
+		return this.peer.get(app);
+	}
+	/** The apps the peer has open on this session. */
+	get peerOpen() {
+		return this.peer;
+	}
+	/**
+	* A `paired-app` frame from the peer, on a session where both sides offer `apps/1`. Counted before it is read; the
+	* event to pass on, or null when it was dropped (malformed, over the rate, a data frame for an app not open on both
+	* sides, an `open` past `APP_PEER_OPEN_MAX`, a `close` of an app the peer did not have open).
+	*/
+	receive(frame) {
+		if (!isChatAppId(frame?.a) || !this.received.take(frame.a, this.now())) return null;
+		const parsed = parseAppFrame(frame);
+		if (!parsed) return null;
+		const app = parsed.a;
+		if ("d" in parsed) return this.open.has(app) && this.peer.has(app) ? {
+			app,
+			d: parsed.d
+		} : null;
+		if (parsed.o === "close") return this.peer.delete(app) || this.held.delete(app) ? {
+			app,
+			o: "close"
+		} : null;
+		if (!this.peer.has(app) && this.peer.size >= 16) return null;
+		this.held.delete(app);
+		this.peer.set(app, parsed.v);
+		return {
+			app,
+			o: "open",
+			v: parsed.v
+		};
+	}
+	/** Whether a data frame for `app` may go now, the session being live with `apps/1` agreed; counted when it may. */
+	canSend(app, data) {
+		if (!this.open.has(app)) return "not-open";
+		if (appDataBytes(data) > 32768) return "too-large";
+		if (!this.peer.has(app)) return "peer-closed";
+		return this.sent.take(app, this.now()) ? null : "too-fast";
+	}
+	/**
+	* The session ended, or `apps/1` is no longer agreed: what the peer had open is gone, and each such app hears a
+	* `close` with `offline`. This side's open apps stay, and say `open` again on the next session.
+	*/
+	sessionEnded() {
+		const closed = [.../* @__PURE__ */ new Set([...this.held.keys(), ...this.peer.keys()])].map((app) => ({
+			app,
+			o: "close",
+			offline: true
+		}));
+		this.peer.clear();
+		this.held.clear();
+		this.received.clear();
+		this.sent.clear();
+		return closed;
+	}
+	/**
+	* The session ended or was replaced, and another may follow at once: what the peer had open is held, not closed (no
+	* event now). Nothing is sent to a held app; an `open` on the next session takes it back, a `close` closes it, and
+	* `heldExpired` closes the rest once `APP_RESUME_GRACE_MS` has passed.
+	*/
+	sessionSuspended() {
+		for (const [app, version] of this.peer) this.held.set(app, version);
+		this.peer.clear();
+		this.received.clear();
+		this.sent.clear();
+	}
+	/** Whether any of the peer's apps is held, waiting for its next session. */
+	get holding() {
+		return this.held.size > 0;
+	}
+	/** The grace is over: each app still held is closed, with `offline`. */
+	heldExpired() {
+		const closed = [...this.held.keys()].map((app) => ({
+			app,
+			o: "close",
+			offline: true
+		}));
+		this.held.clear();
+		return closed;
+	}
+};
+//#endregion
 //#region ../core/src/webPush.ts
 var WebPushError = class extends Error {};
 var RECORD_SIZE = 4096;
@@ -13013,6 +13814,8 @@ function parsePinnedFrame(frame) {
 * DHT, never stored, never counted as unread, no message id (older apps drop it). While the person keeps typing,
 * `start` is said again at most every `TYPING_REFRESH_MS`; the receiver shows it until `stop`, a message from that
 * contact, the end of the session, or `TYPING_TIMEOUT_MS` without a new `start` (so a dropped link never leaves it on).
+* A start standing when a session ends (a transport switch, a reconnect) is said again once the next one agreed
+* `typing/1`, if the person's last word is still that recent.
 *
 * A `start` may say what the contact is doing (`kind`: typing, recording a voice note, thinking) and, for bots, a
 * short `status` line. Both are optional: an app that knows neither shows "typing…", and so does a kind it does not
@@ -13076,12 +13879,21 @@ function parseTypingActivity(frame) {
 	return typingActivity(frame?.kind, frame?.status);
 }
 var sameActivity = (a, b) => a?.kind === b?.kind && a?.status === b?.status;
-/** This side's word: when to say `start` again, and whether a `stop` is owed. One per session. */
+/**
+* This side's word: when to say `start` again, and whether a `stop` is owed. One per chat; what was said is per session
+* (`reset`), what the person is doing is not: a new session (a transport switch, a reconnect) says a standing start
+* again (`resume`), since the contact's reader cleared it when the old session ended.
+*
+* The rate window is not per session: the reader's is per chat too (it is not cleared when a session ends), so a
+* window that started afresh on each session could put a start past the reader's limit just after a switch.
+*/
 var TypingSender = class {
 	now;
 	startedAt = 0;
 	standing = null;
 	recent = [];
+	/** What the person is doing, and when it last said so: kept across sessions, until it stops. */
+	wanted = null;
 	constructor(now = Date.now) {
 		this.now = now;
 	}
@@ -13092,6 +13904,33 @@ var TypingSender = class {
 	typing(activity = { kind: "typing" }) {
 		const now = this.now();
 		const word = typingActivity(activity.kind, activity.status);
+		this.wanted = {
+			activity: word,
+			at: now
+		};
+		return this.say(word, now);
+	}
+	/**
+	* The person typed while nothing can be said (no session, or `typing/1` not agreed on it yet): kept, so the start
+	* goes once a session can carry it (`resume`).
+	*/
+	want(activity = { kind: "typing" }) {
+		this.wanted = {
+			activity: typingActivity(activity.kind, activity.status),
+			at: this.now()
+		};
+	}
+	/**
+	* A new session agreed `typing/1`: the `start` to say on it when the person was still at it, its last word less than
+	* `TYPING_TIMEOUT_MS` ago (as long as the contact would still have shown it). Null otherwise, when a start already
+	* went on this session, or when the window is full (the person's next keystroke says it).
+	*/
+	resume() {
+		const wanted = this.wanted, now = this.now();
+		if (!wanted || this.startedAt || now - wanted.at >= 6e3) return null;
+		return this.say(wanted.activity, now);
+	}
+	say(word, now) {
 		if (this.startedAt && now - this.startedAt < 3e3 && sameActivity(this.standing, word)) return null;
 		this.recent = this.recent.filter((at) => now - at < TYPING_RATE_WINDOW_MS);
 		if (this.recent.length >= 6) return null;
@@ -13100,8 +13939,12 @@ var TypingSender = class {
 		this.standing = word;
 		return typingFrame("start", word);
 	}
-	/** The person stopped (cleared the text, sent it, left the chat): a `stop`, only when a `start` is standing. */
-	stopped() {
+	/**
+	* The person stopped (cleared the text, sent it, left the chat): a `stop`, only when a `start` is standing on this
+	* session. Nothing is said again on the next one either way.
+	*/
+	stopped() {
+		this.wanted = null;
 		if (!this.startedAt) return null;
 		this.recent.push(this.now());
 		this.startedAt = 0;
@@ -13112,7 +13955,7 @@ var TypingSender = class {
 	get active() {
 		return this.startedAt !== 0;
 	}
-	/** The session ended: nothing is standing on the next one. */
+	/** The session ended: nothing is standing on the next one until `resume` (or the next keystroke) says it. */
 	reset() {
 		this.startedAt = 0;
 		this.standing = null;
@@ -13236,7 +14079,7 @@ var FILE_LIMITS = {
 	sendRetryMs: 250
 };
 var ID = /^[A-Za-z0-9_-]{8,64}$/;
-var DIGEST = /^[A-Za-z0-9_-]{43}$/;
+var DIGEST$1 = /^[A-Za-z0-9_-]{43}$/;
 var DATA = /^[A-Za-z0-9_-]+$/;
 var FILE_FRAMES = /* @__PURE__ */ new Set([
 	"pf-offer",
@@ -13980,7 +14823,7 @@ var ChatFiles = class {
 			return;
 		}
 		if (record.state !== "active" || incoming.verifying || !incoming.target) return;
-		if (frame.size !== record.file.size || typeof frame.digest !== "string" || !DIGEST.test(frame.digest)) return;
+		if (frame.size !== record.file.size || typeof frame.digest !== "string" || !DIGEST$1.test(frame.digest)) return;
 		const digest = frame.digest;
 		await incoming.writing;
 		if (transferEnded(record) || record.state !== "active") return;
@@ -14993,6 +15836,142 @@ var CarriedTransport = class {
 	}
 };
 //#endregion
+//#region ../core/src/groupFiles.ts
+/**
+* Files and voice messages in groups (WISP 503 · Group Files). A file is announced as a group message carrying its
+* description; its bytes go over `files/3` between two members, from a member that holds it to one that asks for it.
+* The limits below are the profile's first numbers, kept in one place so they are easy to change.
+*/
+var GROUP_FILE_LIMITS = {
+	/** The largest file a group takes. */
+	maxBytes: 104857600,
+	/** A file this size or smaller is fetched without asking (voice messages always are, up to `VOICE_LIMITS`). */
+	autoBytes: 8388608,
+	/** What a device keeps of a group's files it fetched without asking; past it, every file is asked about. */
+	autoBytesPerGroup: 268435456,
+	/** Bytes of group files a device serves to others in a day, when serving is on. */
+	serveBytesPerDay: 1073741824,
+	/** Transfers a holder serves at once, all groups together. */
+	serveAtOnce: 3,
+	/** File announcements a member sends to one group in a minute. */
+	announcePerMinute: 8,
+	/** File announcements taken from one member of a group in `announceWindowMs`; past it, shown as text, unfetched. */
+	announceTaken: 30,
+	announceWindowMs: 6e5,
+	/** Holders remembered per file. */
+	holders: 8,
+	/**
+	* Message ids a `group-have` named before their message came (a member back from away hears who holds what as its
+	* catch-up begins), remembered with their holders for when it does.
+	*/
+	heardAhead: 256,
+	/** Message ids in one `group-have`. */
+	haveIds: 32,
+	/** A private group's `group-have` goes on an edge at most this often; a community's, from a member, every `communityHaveEveryMs`. */
+	haveEveryMs: 1e4,
+	communityHaveEveryMs: 6e4,
+	/**
+	* How long a want waits for an offer before the next holder is asked; a transfer that does not move for as long is
+	* left for the next holder too.
+	*/
+	wantWaitMs: 3e4,
+	/** A file session closes this long after its last transfer ends. */
+	sessionIdleMs: 6e4,
+	/** File sessions opening at once, and open at once, all groups together. */
+	sessionsOpening: 2,
+	sessionsOpen: 4,
+	/** The longest file name and type kept from a description. */
+	nameChars: 255,
+	mimeChars: 255
+};
+/**
+* The frames of WISP 503 § Getting the bytes, on an edge between two apps that announced `GROUP_VERSION_FILES`:
+* `group-want {g, id}` asks a holder for the file of message `id`; `group-want-no {g, id, why}` is a holder's no;
+* `group-have {g, ids}` says which files a member keeps (in a community, an application frame `{t, ids}` instead).
+*/
+var GROUP_WANT_FRAME = "group-want";
+var GROUP_WANT_NO_FRAME = "group-want-no";
+var GROUP_HAVE_FRAME = "group-have";
+var REFUSALS = [
+	"gone",
+	"busy",
+	"refused"
+];
+/** A group message's id, as a private group (`<s>:<e>:<n>`) or a community (`<s>:<e>:<h>:<n>`) names it. */
+var MESSAGE_ID = /^[a-z0-9]{52}:\d{1,15}(:[A-Za-z0-9_-]{1,64})?:\d{1,15}$/;
+var isGroupMessageId = (value) => typeof value === "string" && MESSAGE_ID.test(value);
+function frameOf(value, t, groupId) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return null;
+	const f = value;
+	return f.t === t && (groupId === void 0 || f.g === groupId) ? f : null;
+}
+/** A `group-want` of group `groupId`: the message whose file is asked for, or null. */
+function readGroupWant(value, groupId) {
+	const f = frameOf(value, GROUP_WANT_FRAME, groupId);
+	return f && isGroupMessageId(f.id) ? { id: f.id } : null;
+}
+/** A holder's `group-want-no` of group `groupId`, or null. A reason this app does not know reads as `busy`. */
+function readGroupWantNo(value, groupId) {
+	const f = frameOf(value, GROUP_WANT_NO_FRAME, groupId);
+	if (!f || !isGroupMessageId(f.id)) return null;
+	return {
+		id: f.id,
+		why: typeof f.why === "string" && REFUSALS.includes(f.why) ? f.why : "busy"
+	};
+}
+/**
+* The message ids of a `group-have`: of group `groupId` on an edge, or (no `groupId`) a community's application frame.
+* At most `haveIds` message ids; a frame with more, or anything else, is null.
+*/
+function readGroupHave(value, groupId) {
+	const f = frameOf(value, GROUP_HAVE_FRAME, groupId);
+	if (!f || !Array.isArray(f.ids) || !f.ids.length || f.ids.length > GROUP_FILE_LIMITS.haveIds || !f.ids.every(isGroupMessageId)) return null;
+	return [...new Set(f.ids)];
+}
+var DIGEST = /^[A-Za-z0-9_-]{43}$/;
+/**
+* A description read from the wire, cleaned: the name made a display name (never a path), the type untrusted, the
+* size within the group limit, the digest the right shape. A malformed voice, video or picture description is dropped
+* on its own and the file is still a file; anything else malformed is no file at all (null), and the text shows.
+*/
+function readGroupFileMeta(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return null;
+	const v = value;
+	if (typeof v.name !== "string" || !v.name.trim() || [...v.name].length > GROUP_FILE_LIMITS.nameChars) return null;
+	if (typeof v.mime !== "string" || v.mime.length > GROUP_FILE_LIMITS.mimeChars) return null;
+	if (!Number.isSafeInteger(v.size) || v.size < 1 || v.size > GROUP_FILE_LIMITS.maxBytes) return null;
+	if (typeof v.d !== "string" || !DIGEST.test(v.d)) return null;
+	const mime = sanitizeMime(v.mime);
+	const voice = v.voice === void 0 ? void 0 : parseVoiceMeta(v.voice, mime);
+	const video = v.video === void 0 ? void 0 : parseVideoMeta(v.video, mime);
+	const image = v.image === void 0 ? void 0 : parseImageMeta(v.image, mime);
+	return {
+		name: sanitizeFileName(v.name),
+		mime,
+		size: v.size,
+		d: v.d,
+		...voice ? { voice } : {},
+		...video ? { video } : {},
+		...image ? { image } : {}
+	};
+}
+/**
+* The text an announcement carries when its author wrote no caption: what an app without group files shows instead
+* of the file. English, as wire text is; an app that knows the file shows the file, not this line.
+*/
+function groupFileFallback(file) {
+	if (file.voice) return `🎤 Voice message (${formatVoiceDuration(file.voice.duration)}): update Ghostly to hear it`;
+	return `${fileMessageText(file)} (${formatFileSize(file.size)}): update Ghostly to get files in groups`;
+}
+/**
+* Whether a device fetches a file by itself (WISP 503 § Automatic and asked downloads): a voice message always, any
+* other file up to `autoBytes` while what it took that way from the group stays within `autoBytesPerGroup`.
+*/
+function fetchesByItself(file, keptAutomatically, limits = GROUP_FILE_LIMITS) {
+	if (file.voice) return true;
+	return file.size <= limits.autoBytes && keptAutomatically + file.size <= limits.autoBytesPerGroup;
+}
+//#endregion
 //#region ../core/src/pairingProgress.ts
 var FIRST_STAGE = {
 	inviter: "publishing",
@@ -15279,6 +16258,13 @@ var QUIET_FRAMES = /* @__PURE__ */ new Set([
 * `disconnected`) otherwise went on until its consent checks gave up, 27 s after the crash (CI run 36741701666).
 */
 var PONG_WAIT_MS = 4e3;
+/** How long `handled` waits for the contact to answer its ping before it says it cannot tell. */
+var HANDLED_WAIT_MS = 1e4;
+/**
+* Back in front after an absence (`wake`), a live session that ends this soon after it was lost while the app was
+* away (a phone that put it to sleep): the chat resumes as after a restart, not as a session the contact closed.
+*/
+var WAKE_LOST_MS = 1e4;
 /**
 * A `paired-message` frame. The preview (`pv`) is left out when the frame would pass `MAX_PAIRED_MESSAGE_FRAME`
 * with it: the text matters, the card does not. A reply (`r`, WISP 401 § Replies) is a few hundred bytes at most
@@ -15446,6 +16432,8 @@ var GhostLink = class {
 	/** Typing on this session (`typing/1`): when to say `start` again, and the contact's word with its timeout. */
 	typingSender = new TypingSender();
 	typingReceiver = new TypingReceiver((typing, activity) => this.options.events?.onPeerTyping?.(typing, activity));
+	/** Mini-apps on this session (`apps/1`): this side's open apps (kept across sessions), the peer's, the limits. */
+	apps;
 	/** Reaction frames the contact may send per window; the rest go unconfirmed and come again. */
 	reactionsReceived = new ReactionWindow(REACTION_LIMITS.receive);
 	/** Pin frames the contact may send per window; the rest go unconfirmed and come again. */
@@ -15461,6 +16449,16 @@ var GhostLink = class {
 	/** The contact's transport policy as last seen on this session, to tell its explicit choices apart. */
 	peerPolicySeen = null;
 	unansweredPings = 0;
+	/**
+	* Pings sent on this session and pongs heard on it, counted from its start: the contact answers each ping in the order
+	* frames come, so the pong to ping n says it handled everything sent before it (`handled`).
+	*/
+	pingsSent = 0;
+	pongsHeard = 0;
+	/** The liveness ping whose pong measures the round trip: its number in `pingsSent`. */
+	rttPing = 0;
+	/** `handled` callers, each waiting for the pong to its ping. */
+	handledWaiters = [];
 	/** The last ping's `PONG_WAIT_MS`: running until something comes back from the contact. */
 	pongWait = null;
 	/** The last ping's wait ran out with nothing back, and nothing came since (`restartedRedial`). */
@@ -15474,7 +16472,8 @@ var GhostLink = class {
 	racing = false;
 	/**
 	* The WebRTC offer this side's dial made last, with fallback allowed: what a transport that comes up meanwhile joins.
-	* `resume`: the dial that made it is this side back after an absence, over WebRTC (`resuming`).
+	* `resume`: the dial that made it is this side back after an absence, over WebRTC (`resuming`); `woke`: the absence
+	* was the app's in the background, not a restart (`resumeAfterAbsence`).
 	*/
 	offered;
 	/** The attempt (its epoch) whose direct transports were knocked on as its offer went out (`knockEarly`), and whether that is under way. */
@@ -15490,6 +16489,12 @@ var GhostLink = class {
 	answeringEpoch = -1;
 	lastAutoConnectAt = 0;
 	autoConnectFailures = 0;
+	/** The look due when a failed dial's backoff ends (`lookAtRetry`). */
+	retryLook = null;
+	/** This side's offer is out to the data link and has not reached the relays yet. */
+	offerUnsent = false;
+	/** The last dial ended with its offer never out (`offerUnsent`): the contact saw nothing of it. */
+	dialUnseen = false;
 	/** Native transports a record just read listed with no way to dial them (`record-undescribed`), until one describes them again. */
 	undescribed = /* @__PURE__ */ new Set();
 	/**
@@ -15546,8 +16551,15 @@ var GhostLink = class {
 	resuming;
 	/** Until then, a dial waits for the native endpoint `resuming` names to start (it is knocked on as it does). */
 	resumeWaitUntil = 0;
+	/** What the last live session ran on, kept after it ended: a wake resumes on it (`resumeAfterAbsence`). */
+	lastLiveOn;
+	/** `resuming` is a wake's, not a restart's. */
+	resumingWoke = false;
+	/** Until then, a session that ends was lost while the app was away (`WAKE_LOST_MS`). */
+	wokeUntil = 0;
 	constructor(options) {
 		this.options = options;
+		this.apps = new AppSessions(options.appsOpen);
 		if (options.pairing?.credentials.signer && (options.dht || options.params.deliveryMode === "dht")) throw new Error("A link that signs through a signer has no DHT delivery");
 		this.deliveryMode = options.params.deliveryMode ?? "stream";
 		this.tracker = options.pairingProgress && options.pairing && !options.pairing.credentials.peerKey && this.deliveryMode !== "dht" ? new PairingTracker(options.pairingProgress.role, options.pairingProgress.startedAt, (progress) => {
@@ -15683,9 +16695,13 @@ var GhostLink = class {
 						this.tracker?.failed("publish", true, result.error);
 						return;
 					}
-					if (result.signalOut) this.dataLink.signalWentOut();
+					if (result.signalOut) {
+						this.offerUnsent = false;
+						this.dataLink.signalWentOut();
+					}
 					this.tracker?.published();
 					this.publishRecovered();
+					this.dialSeenNow();
 				},
 				onPeerAck: (ack) => events.onPeerAck?.(ack),
 				onCallSignal: (signal) => {
@@ -15780,6 +16796,10 @@ var GhostLink = class {
 				if (this.activeBinding) return;
 				events.onDataLinkState?.(state);
 				if (state === "open") this.afterRtc = void 0;
+				if (state === "offering") {
+					this.offerUnsent = true;
+					this.dialUnseen = false;
+				}
 				if (state === "answering") {
 					this.answeringEpoch = this.connectionEpoch;
 					if (this.resumingOverRtc) {
@@ -15793,6 +16813,8 @@ var GhostLink = class {
 					this.scheduleRace(this.offered.epoch, this.offered.at);
 				}
 				if (state !== "idle") return;
+				this.dialUnseen = was === "offering" && this.offerUnsent;
+				this.offerUnsent = false;
 				const unanswerable = was === "answering" && this.answeringEpoch === this.connectionEpoch && !this.channel && !this.stopped && !this.leaving;
 				if (unanswerable) this.rtcUnstarted();
 				this.clearRace();
@@ -15805,7 +16827,10 @@ var GhostLink = class {
 					return;
 				}
 				this.afterRtc = void 0;
-				if (!this.dialing) this.attemptEnded();
+				if (!this.dialing) {
+					this.attemptEnded();
+					this.lookAtRetry();
+				}
 				this.rejectWaiters(new GhostlyHttpError("unreachable", "Could not connect to the peer"));
 				if (unanswerable && this.dialsPastRtc()) this.redial();
 			},
@@ -16160,15 +17185,18 @@ var GhostLink = class {
 		this.dial().catch((error) => {
 			this.tracker?.failed("transport", true);
 			this.dialFailed(error instanceof Error ? error.message : String(error));
+			this.lookAtRetry();
 		});
 	}
 	async stop(announce = true) {
 		this.stopped = true;
 		this.clearRace();
+		if (this.retryLook) clearTimeout(this.retryLook);
 		if (this.dhtPinGrace) clearTimeout(this.dhtPinGrace);
 		if (this.waiting?.timer) clearTimeout(this.waiting.timer);
 		await this.dht?.stop();
 		this.disconnect();
+		this.appsEnded();
 		await Promise.allSettled([...this.endpoints.values()].map((endpoint) => endpoint.close()));
 		this.endpoints.clear();
 		await this.session.stop(announce);
@@ -16560,6 +17588,7 @@ var GhostLink = class {
 			return;
 		}
 		this.endpoints.set(endpoint.transport, endpoint);
+		traceLink(this.myPubKeyZ32, "endpoint-up", { transport: endpoint.transport });
 		endpoint.onConnection = ({ channel, binding }) => {
 			traceLink(this.myPubKeyZ32, "dialed-in", {
 				transport: binding.transport,
@@ -16570,6 +17599,7 @@ var GhostLink = class {
 		};
 		endpoint.onUnavailable = () => {
 			if (this.endpoints.get(endpoint.transport) !== endpoint) return;
+			traceLink(this.myPubKeyZ32, "endpoint-gone", { transport: endpoint.transport });
 			this.endpoints.delete(endpoint.transport);
 			this.advertiseTransports();
 			this.options.events?.onTransportsChanged?.();
@@ -16705,7 +17735,10 @@ var GhostLink = class {
 	* simply be away. Two dials crossing are settled by key order (see `registerEndpoint`).
 	*/
 	async knock(transport) {
-		if (this.resuming === transport) this.resuming = void 0;
+		if (this.resuming === transport) {
+			this.resuming = void 0;
+			this.resumingWoke = false;
+		}
 		const endpoint = this.endpoints.get(transport), descriptor = this.peerDescriptors[transport];
 		if (!endpoint || !descriptor || this.channel || this.dialing || this.stopped || this.streamBlocked || this.keyStopped) return;
 		if (!this.transportOffer().includes(transport)) return;
@@ -16858,8 +17891,11 @@ var GhostLink = class {
 			const remembered = this.peerTransports && rankTransports(local, this.peerFallback ? this.peerTransports : this.peerTransports.slice(0, 1), relayed);
 			const ranked = remembered?.length ? remembered : this.peerTransports ? rankTransports(local, this.peerTransports, relayed) : local.filter((t) => t === "webrtc/1");
 			const chosen = this.switcher.chosenTarget ?? this.choiceApart?.transport ?? this.resuming;
-			const resume = this.resuming === "webrtc/1";
-			if (chosen && chosen === this.resuming && ranked.includes(chosen)) this.resuming = void 0;
+			const resume = this.resuming === "webrtc/1", woke = resume && this.resumingWoke;
+			if (chosen && chosen === this.resuming && ranked.includes(chosen)) {
+				this.resuming = void 0;
+				this.resumingWoke = false;
+			}
 			const choices = chosen && ranked.includes(chosen) ? [chosen, ...ranked.filter((t) => t !== chosen)] : ranked;
 			if (!choices.length) {
 				if (this.options.packetTransports && this.autoConnectFailures <= PACKET_TRANSPORTS_FAST_ATTEMPTS) this.session.expectPeer();
@@ -16883,7 +17919,8 @@ var GhostLink = class {
 					this.offered = fallback ? standing ?? {
 						epoch,
 						at: offeredAt,
-						...resume && { resume }
+						...resume && { resume },
+						...woke && { woke }
 					} : void 0;
 					const gate = this.dialGate;
 					this.dialGate = void 0;
@@ -17070,7 +18107,10 @@ var GhostLink = class {
 		if (this.channel || this.dialing || this.stopped || this.streamBlocked || this.keyStopped || !this.contactQuiet(1e4)) return;
 		if (!this.fallback || !this.peerFallback) return;
 		this.knockedEarly = epoch;
-		if (this.resuming === "webrtc/1") this.resuming = void 0;
+		if (this.resuming === "webrtc/1") {
+			this.resuming = void 0;
+			this.resumingWoke = false;
+		}
 		const relayed = this.upgradesFromRelay() ? [] : this.relayedTransports;
 		const offer = this.transportOffer();
 		const direct = TRANSPORTS.filter((t) => t !== "webrtc/1" && offer.includes(t) && !!this.peerTransports?.includes(t) && !relayed.includes(t) && this.canDial(t));
@@ -17093,7 +18133,7 @@ var GhostLink = class {
 	maybeKnockEarly(epoch) {
 		const next = this.afterRtc;
 		if (!this.offered?.resume || this.offered.epoch !== epoch || this.knockedEarly === epoch || next?.epoch !== epoch || epoch !== this.connectionEpoch) return;
-		if (this.dialing || this.channel || this.stopped || !this.offerOut || !this.contactQuiet()) return;
+		if (this.dialing || this.channel || this.stopped || !this.offerOut || !(this.offered.woke || this.contactQuiet())) return;
 		const relayed = this.upgradesFromRelay() ? [] : this.relayedTransports;
 		const direct = next.rest.filter((t) => !relayed.includes(t) && this.canDial(t));
 		if (!direct.length) return;
@@ -17141,6 +18181,16 @@ var GhostLink = class {
 	dialsPastRtc() {
 		return (this.demotedUntil.get("webrtc/1") ?? 0) > Date.now() && this.fallback && this.peerFallback && TRANSPORTS.some((t) => this.canDial(t) && !!this.peerTransports?.includes(t) && this.transportOffer().includes(t));
 	}
+	/**
+	* A first pairing's inviter has no offer of the joiner's to wait for: WebRTC is missing here, or the joiner's record
+	* says its app has none (a Linux Desktop's WebKitGTK), so its first packet carries none. A native transport the record
+	* describes is dialled now. Waiting out `INVITER_DIAL_GRACE_MS` left two Linux Desktops 2.5 s more apart, and the
+	* joiner, still reading, often went on without dialling for seconds (dht-direct on CI, 2026-10-07). Should the joiner
+	* dial too, the two dials cross and the lower key's carries the chat (`parkCrossed`, `attachReplacement`).
+	*/
+	nothingToAwait() {
+		return !(this.availableTransports.includes("webrtc/1") && (!this.peerTransports || this.peerTransports.includes("webrtc/1"))) && TRANSPORTS.some((t) => this.canDial(t) && !!this.peerTransports?.includes(t) && this.transportOffer().includes(t));
+	}
 	/** Whether a native dial of `transport` can go now: this side's endpoint is up and the contact's descriptor known. */
 	canDial(transport) {
 		return transport !== "webrtc/1" && this.endpoints.has(transport) && !!this.peerDescriptors[transport];
@@ -17424,8 +18474,8 @@ var GhostLink = class {
 	* Only the lower key offers, so two peers coming online together do not collide. A first pairing is
 	* the exception: the joiner offers, whatever its key, in the very packet that says it is here (one hop
 	* less than presence, then the inviter's offer), and the inviter waits for that offer. An inviter that
-	* sees the joiner but no offer for `INVITER_DIAL_GRACE_MS` (an app from before this rule) offers itself;
-	* the lower-key rule settles any collision, on both sides.
+	* sees the joiner but no offer for `INVITER_DIAL_GRACE_MS` (an app from before this rule) offers itself,
+	* and dials at once when no offer can come (`nothingToAwait`); the lower-key rule settles any collision, on both sides.
 	*/
 	maybeAutoConnect(presence) {
 		if (this.stopped || this.leaving || this.yielding || this.streamBlocked || this.keyStopped || !this.options.autoConnect || !presence.online || this.channel || this.dialing || this.dataLink.state !== "idle") return;
@@ -17437,7 +18487,7 @@ var GhostLink = class {
 		const role = !!this.tracker && !this.tracker.done && this.tracker.progress.stage !== "on-dht" ? this.options.pairingProgress?.role : void 0;
 		if (role === "inviter") {
 			this.peerSeenAt ||= Date.now();
-			if (Date.now() - this.peerSeenAt < 2500) {
+			if (Date.now() - this.peerSeenAt < 2500 && !this.nothingToAwait()) {
 				this.session.expectPeer();
 				return;
 			}
@@ -17454,6 +18504,7 @@ var GhostLink = class {
 				failures: this.autoConnectFailures,
 				left: wait - (Date.now() - this.lastAutoConnectAt)
 			});
+			this.lookAtRetry();
 			return;
 		}
 		traceLink(this.myPubKeyZ32, "dial", { failures: this.autoConnectFailures });
@@ -17462,6 +18513,7 @@ var GhostLink = class {
 		this.dial().catch((error) => {
 			this.tracker?.failed("transport", true);
 			this.dialFailed(error instanceof Error ? error.message : String(error));
+			this.lookAtRetry();
 		});
 	}
 	/**
@@ -17481,8 +18533,42 @@ var GhostLink = class {
 		this.dial().catch((error) => {
 			this.tracker?.failed("transport", true);
 			this.dialFailed(error instanceof Error ? error.message : String(error));
+			this.lookAtRetry();
 		});
 	}
+	/**
+	* A failed dial waits `dialWait` before the next, and only a look at the contact's record dials: the next one came at
+	* the link's own pace (30 s in the background), which knows nothing of the backoff. A member let in to a group
+	* reached one of its members 72 s after its welcome, 40 s of backoff and 32 s more for its next look (meshSignals on
+	* CI, 2026-10-06). One look goes when the backoff ends (`liveAttempt.retryAt`), and its read decides, as any look's
+	* does. A dial or a reset of the backoff since makes it moot: what comes next arms its own.
+	*/
+	lookAtRetry() {
+		if (this.retryLook) clearTimeout(this.retryLook);
+		this.retryLook = null;
+		const from = this.lastAutoConnectAt;
+		if (!from || this.stopped || this.leaving || this.streamBlocked || this.keyStopped || !this.options.autoConnect) return;
+		this.retryLook = setTimeout(() => {
+			this.retryLook = null;
+			if (this.lastAutoConnectAt !== from || this.stopped || this.leaving || this.yielding || this.streamBlocked || this.keyStopped || this.channel || this.dialing || this.dataLink.state !== "idle") return;
+			traceLink(this.myPubKeyZ32, "retry-look", { failures: this.autoConnectFailures });
+			this.session.lookNow();
+		}, Math.max(0, from + this.dialWait() - Date.now()));
+	}
+	/**
+	* A packet of this link reached the relays after a dial whose offer never did (the relays failed, or their budget held
+	* it, for the whole attempt): the contact saw nothing of that dial, so it is no reason to wait, and the next goes now.
+	* Without this a dial made during an outage set the wait, three minutes once it had grown, from when the relays
+	* answered again.
+	*/
+	dialSeenNow() {
+		if (!this.dialUnseen) return;
+		this.dialUnseen = false;
+		if (this.channel || this.dialing || this.dataLink.state !== "idle") return;
+		traceLink(this.myPubKeyZ32, "dial-unseen", { failures: this.autoConnectFailures });
+		this.lastAutoConnectAt = 0;
+		this.maybeAutoConnect(this.presence);
+	}
 	/** How long after the last automatic dial the next one may go. A first pairing tries again sooner: the contact just read the invite and is waiting. */
 	dialWait() {
 		return !!this.tracker && !this.tracker.done && this.tracker.progress.stage !== "on-dht" ? Math.min(PAIRING_RETRY_MS * 2 ** this.autoConnectFailures, PAIRING_MAX_RETRY_MS) : Math.min(AUTO_CONNECT_RETRY_MS * 2 ** this.autoConnectFailures, AUTO_CONNECT_MAX_RETRY_MS);
@@ -17729,6 +18815,7 @@ var GhostLink = class {
 		if (this.options.statusCardSupport) offered.push(STATUS_CARD_CAPABILITY);
 		if (this.options.buttonsSupport) offered.push(BUTTONS_CAPABILITY);
 		if (this.options.upgradeSupport) offered.push(UPGRADE_CAPABILITY);
+		if (this.options.appsSupport) offered.push(APPS_CAPABILITY);
 		if (this.options.deviceCapabilities) offered.push(...this.options.deviceCapabilities);
 		return offered;
 	}
@@ -17873,12 +18960,90 @@ var GhostLink = class {
 	*/
 	setTyping(typing, activity) {
 		if (!this.options.params.profile) return;
-		const frame = typing ? this.supportsTyping ? this.typingSender.typing(activity) : null : this.typingSender.stopped();
+		if (typing && !this.supportsTyping) {
+			this.typingSender.want(activity);
+			return;
+		}
+		const frame = typing ? this.typingSender.typing(activity) : this.typingSender.stopped();
 		if (!frame || !this.channel || !this.supportsTyping) return;
 		try {
 			this.channel.send(JSON.stringify(frame));
 		} catch {}
 	}
+	resumeTyping() {
+		const frame = this.typingSender.resume();
+		if (!frame || !this.channel) return;
+		try {
+			this.channel.send(JSON.stringify(frame));
+		} catch {}
+	}
+	/** Both sides offer `apps/1` on the open session: mini-apps can talk (WISP 1200 § In a chat). */
+	get supportsApps() {
+		return !!this.options.params.profile && this.isDataLinkOpen && this.sessionCapabilities.agreed("apps/1");
+	}
+	/** The apps the contact has open on this session (chat app id to version). */
+	get peerApps() {
+		return this.apps.peerOpen;
+	}
+	/**
+	* This side opened an app in this chat (or updated it): `open` goes now when both sides offer `apps/1` on the live
+	* session, and again on every session that comes back while the app stays open. Never on the DHT.
+	*/
+	openApp(app, version) {
+		const frame = JSON.stringify(appOpenFrame(app, version));
+		this.apps.open.set(app, version);
+		if (this.supportsApps && this.channel) try {
+			this.channel.send(frame);
+		} catch {}
+	}
+	/** This side closed an app in this chat: `close` goes now when it can; nothing is said later. */
+	closeApp(app) {
+		const frame = JSON.stringify(appCloseFrame(app));
+		if (!this.apps.open.delete(app)) return;
+		if (this.supportsApps && this.channel) try {
+			this.channel.send(frame);
+		} catch {}
+	}
+	/**
+	* One data frame of an app open on both sides, on the live session only. An error when it did not go: nothing is
+	* kept to send later.
+	*/
+	sendAppData(app, data) {
+		if (!this.apps.open.has(app)) return "not-open";
+		if (appDataBytes(data) > 32768) return "too-large";
+		if (!this.channel || !this.isDataLinkOpen) return "offline";
+		if (!this.supportsApps) return "peer-closed";
+		const refused = this.apps.canSend(app, data);
+		if (refused) return refused;
+		try {
+			this.channel.send(JSON.stringify(appDataFrame(app, data)));
+			return null;
+		} catch {
+			return "offline";
+		}
+	}
+	/** What the contact had open is gone (`apps/1` is no longer agreed, or this link stopped): each app hears it now. */
+	appsEnded() {
+		if (this.appsGrace) {
+			clearTimeout(this.appsGrace);
+			this.appsGrace = null;
+		}
+		for (const event of this.apps.sessionEnded()) this.options.events?.onAppFrame?.(event);
+	}
+	appsGrace = null;
+	/**
+	* The session ended or a new one took its place (a transport switch, a resume, a re-dial): what the contact had open
+	* is held for `APP_RESUME_GRACE_MS` (WISP 1200 § In a chat). The next session's `open` takes each back, and the app
+	* hears only that open, not a close first; one not said again by then is closed with `offline`.
+	*/
+	appsSuspended() {
+		this.apps.sessionSuspended();
+		if (!this.apps.holding || this.appsGrace) return;
+		this.appsGrace = setTimeout(() => {
+			this.appsGrace = null;
+			for (const event of this.apps.heldExpired()) this.options.events?.onAppFrame?.(event);
+		}, this.options.appResumeGraceMs ?? 1e4);
+	}
 	/** Whether files/3 was agreed on the session open now; kept to say when that changes. */
 	filesOpen = false;
 	emitFilesSession(again = false) {
@@ -17951,15 +19116,24 @@ var GhostLink = class {
 				this.channel.send(JSON.stringify(pending));
 			} catch {}
 		}
-		if (changed.includes("typing/1") && !this.supportsTyping) {
-			this.typingSender.reset();
-			this.typingReceiver.clear();
+		if (changed.includes("typing/1")) {
+			if (!this.supportsTyping) {
+				this.typingSender.reset();
+				this.typingReceiver.clear();
+			} else this.resumeTyping();
 		}
 		if (changed.includes("react/1")) this.options.events?.onReactionsSupport?.(this.supportsReactions);
 		if (changed.includes("edit/1")) this.options.events?.onEditSupport?.(this.supportsEdits);
 		if (changed.includes("pin/1")) this.options.events?.onPinSupport?.(this.supportsPins);
 		if (changed.includes("wake/1")) this.options.events?.onWakeSupport?.(this.supportsWake);
 		if (changed.includes("upgrade/1")) this.switcher.reconsider();
+		if (changed.includes("apps/1")) {
+			if (this.supportsApps && this.channel) for (const [app, version] of this.apps.open) try {
+				this.channel.send(JSON.stringify(appOpenFrame(app, version)));
+			} catch {}
+			if (!this.supportsApps) this.appsEnded();
+			this.options.events?.onAppsSupport?.(this.supportsApps);
+		}
 		const devices = this.options.deviceCapabilities;
 		if (devices && changed.some((capability) => devices.includes(capability))) this.options.events?.onDeviceCapabilities?.(devices.filter((capability) => this.supportsDevice(capability)));
 		this.emitPairingState();
@@ -17990,7 +19164,8 @@ var GhostLink = class {
 					2,
 					3,
 					4,
-					5
+					5,
+					6
 				]
 			}));
 		} catch {}
@@ -18059,7 +19234,9 @@ var GhostLink = class {
 					if (transport === "webrtc/1") {
 						this.rtcCandidateWaiter = done;
 						this.rtcRetired().then(() => {
-							if (active) return this.dataLink.connect();
+							if (!active || epoch !== this.candidateEpoch || this.switcher.pending !== plan) return;
+							this.switcher.dialing(plan);
+							return this.dataLink.connect();
 						}).catch(done.reject);
 					} else {
 						const endpoint = this.endpoints.get(transport), descriptor = plan.remote.descriptors[transport];
@@ -18067,6 +19244,7 @@ var GhostLink = class {
 							done.reject(/* @__PURE__ */ new Error("Peer native address unavailable"));
 							return;
 						}
+						this.switcher.dialing(plan);
 						endpoint.connect(descriptor).then(({ channel, binding }) => {
 							if (!active || epoch !== this.candidateEpoch || this.switcher.pending !== plan) {
 								channel.close();
@@ -18267,9 +19445,10 @@ var GhostLink = class {
 				},
 				onFailure: () => {
 					if (paired.state.keyMismatch) this.options.events?.onPeerKeyRefused?.();
-					if (this.unproven(channel) || paired.authTimedOut) {
+					if (this.unproven(channel) || paired.authTimedOut || paired.overloaded) {
 						if (paired.state.keyMismatch) this.dht?.foreignKeySeen("stream");
 						if (this.unproven(channel)) traceLink(this.myPubKeyZ32, "dialed-in-refused", { keyMismatch: !!paired.state.keyMismatch });
+						else if (paired.overloaded) traceLink(this.myPubKeyZ32, "receive-overload", { transport: binding?.transport ?? "webrtc/1" });
 						else traceLink(this.myPubKeyZ32, "auth-timeout", { transport: binding?.transport ?? "webrtc/1" });
 						migration?.reject(new Error(paired.state.error ?? "Candidate authentication failed"));
 						channel.close();
@@ -18349,6 +19528,7 @@ var GhostLink = class {
 					this.sessionCapabilities.reset();
 					this.typingSender.reset();
 					this.typingReceiver.clear();
+					this.appsSuspended();
 					this.pairedHttp?.close();
 					this.pairedHttp = new PairedHttp(channel, this.options.getHostedHttpService, this.options.localFetch);
 					this.emitPairingState();
@@ -18405,11 +19585,13 @@ var GhostLink = class {
 					}
 					if (frame?.t === "paired-pong") {
 						this.peerAnswersPings = true;
-						if (this.pingSentAt) {
+						const answered = ++this.pongsHeard;
+						if (this.pingSentAt && answered >= this.rttPing) {
 							this.rtt = Date.now() - this.pingSentAt;
 							this.pingSentAt = 0;
 							this.options.events?.onRtt?.(this.rtt);
 						}
+						for (const waiter of this.handledWaiters.filter((w) => w.ping <= answered)) waiter.done(true);
 						return;
 					}
 					if (frame?.t === "paired-bye") {
@@ -18529,6 +19711,12 @@ var GhostLink = class {
 						if (this.supportsTyping) this.typingReceiver.receive(frame);
 						return;
 					}
+					if (frame?.t === "paired-app") {
+						if (!this.supportsApps) return;
+						const event = this.apps.receive(frame);
+						if (event) this.options.events?.onAppFrame?.(event);
+						return;
+					}
 					if (frame?.t === "paired-reaction") {
 						if (!this.supportsReactions || !this.reactionsReceived.take()) return;
 						const reaction = parseReactionFrame(frame);
@@ -18726,8 +19914,7 @@ var GhostLink = class {
 		this.stopLiveness();
 		this.peerAnswersPings = peerAnswersPings;
 		const ping = () => {
-			this.pingSentAt = Date.now();
-			channel.send(JSON.stringify({ t: "paired-ping" }));
+			this.sendPing(channel, true);
 			if (!this.peerAnswersPings || this.pongWait) return;
 			this.pongWait = setTimeout(() => {
 				this.pongWait = null;
@@ -18765,6 +19952,43 @@ var GhostLink = class {
 		this.peerAnswersPings = false;
 		this.pingSentAt = 0;
 		this.rtt = void 0;
+		this.pingsSent = this.pongsHeard = this.rttPing = 0;
+		for (const waiter of [...this.handledWaiters]) waiter.done(false);
+	}
+	/** `live`: a liveness ping, whose pong measures the round trip. */
+	sendPing(channel, live) {
+		if (live) this.pingSentAt = Date.now();
+		channel.send(JSON.stringify({ t: "paired-ping" }));
+		this.pingsSent++;
+		if (live) this.rttPing = this.pingsSent;
+	}
+	/**
+	* Resolves once the contact's app handled every frame sent on this session so far: it answers a ping in the order
+	* frames come (every app since 1.0), so the pong to one sent now says so, however slowly it handles them. A group
+	* member's catch-up answer goes a slice at a time on it (`GroupSessionHooks.handled`). `false` when it cannot tell:
+	* no session, a contact that answers no ping, or no answer within `HANDLED_WAIT_MS`.
+	*/
+	handled() {
+		const channel = this.channel;
+		if (!channel || !this.peerAnswersPings || this.paired?.state.status !== "ready") return Promise.resolve(false);
+		try {
+			this.sendPing(channel, false);
+		} catch {
+			return Promise.resolve(false);
+		}
+		return new Promise((resolve) => {
+			const waiter = {
+				ping: this.pingsSent,
+				done: (exact) => {
+					clearTimeout(timer);
+					const at = this.handledWaiters.indexOf(waiter);
+					if (at >= 0) this.handledWaiters.splice(at, 1);
+					resolve(exact);
+				}
+			};
+			const timer = setTimeout(() => waiter.done(false), HANDLED_WAIT_MS);
+			this.handledWaiters.push(waiter);
+		});
 	}
 	/** Something came back on the session: the ping's wait is over. */
 	heardFromPeer() {
@@ -18802,6 +20026,10 @@ var GhostLink = class {
 	peerLost(why) {
 		if (this.stopped || this.leaving || this.yielding) return;
 		traceLink(this.myPubKeyZ32, "peer-lost", { why });
+		if (Date.now() < this.wokeUntil) {
+			this.wokeUntil = 0;
+			this.resumeAfterAbsence();
+		}
 		this.lostUntil = Date.now() + WATCH_PEER_MS;
 		this.autoConnectFailures = 0;
 		this.lastAutoConnectAt = 0;
@@ -18877,12 +20105,67 @@ var GhostLink = class {
 		this.autoConnectFailures = 0;
 		this.lastAutoConnectAt = 0;
 		this.session.pollNow();
-		if (!this.channel) {
+		if (this.channel) {
+			this.wokeUntil = Date.now() + WAKE_LOST_MS;
+			this.probeAfterWake(this.channel);
+		} else {
+			this.resumeAfterAbsence();
 			if (!this.session.publishedRecently(RECENTLY_PUBLISHED_MS)) this.session.refreshAdvertisement();
 			this.maybeAutoConnect(this.presence);
 		}
 	}
+	/**
+	* Back in front with no session, after one was live: the contact likely did not notice this app go (a phone puts a
+	* backgrounded app to sleep without a word), and reads this chat at its slow pace (30 s on the relays in the
+	* background), so an offer or a fresh packet of this side's waited about that long for it. The chat resumes as after a
+	* restart (WISP 100, "Back after a restart"): this side dials whatever its key, on the transport it was live on, and
+	* knocks on the contact's other transports as its offer goes out, which reaches the contact at once.
+	*/
+	resumeAfterAbsence() {
+		const transport = this.lastLiveOn;
+		if (!transport || this.resuming || this.departed || !this.options.pairing?.credentials.peerKey || !this.options.params.profile || this.deliveryMode === "dht") return;
+		this.lastLiveOn = void 0;
+		this.resuming = transport;
+		this.resumingWoke = true;
+		this.knockedEarly = -1;
+		traceLink(this.myPubKeyZ32, "wake-resume", { transport });
+		if (transport !== "webrtc/1") {
+			this.resumeWaitUntil = Date.now() + RESUME_WAIT_MS;
+			return;
+		}
+		if (this.dataLink.state === "answering" && this.answeringEpoch === this.connectionEpoch) {
+			const epoch = this.connectionEpoch;
+			setTimeout(() => this.maybeKnockAnswering(epoch), 0);
+			return;
+		}
+		const offered = this.offered;
+		if (!offered || offered.resume || offered.epoch !== this.connectionEpoch || !this.offerOut && !this.dialing) return;
+		this.resuming = void 0;
+		this.resumingWoke = false;
+		offered.resume = true;
+		offered.woke = true;
+		if (!this.dialing) setTimeout(() => this.maybeKnockEarly(offered.epoch), 0);
+	}
+	/** A ping on the session right after a wake, with `PONG_WAIT_MS` for its answer: none, and the session is dead. */
+	probeAfterWake(channel) {
+		if (!this.peerAnswersPings || this.paired?.state.status !== "ready") return;
+		this.unansweredPings++;
+		try {
+			this.sendPing(channel, true);
+		} catch {
+			this.dropDeadSession(channel);
+			return;
+		}
+		if (this.pongWait) clearTimeout(this.pongWait);
+		this.pongWait = setTimeout(() => {
+			this.pongWait = null;
+			if (this.channel !== channel || this.stopped) return;
+			traceLink(this.myPubKeyZ32, "wake-unanswered", {});
+			this.dropDeadSession(channel);
+		}, PONG_WAIT_MS);
+	}
 	detach() {
+		if (this.channel && this.paired?.state.status === "ready") this.lastLiveOn = this.activeBinding?.transport ?? "webrtc/1";
 		this.stopLiveness();
 		const wasNative = !!this.activeBinding;
 		this.applicationOpen = false;
@@ -18908,6 +20191,7 @@ var GhostLink = class {
 		this.sessionCapabilities.reset();
 		this.typingSender.reset();
 		this.typingReceiver.clear();
+		this.appsSuspended();
 		this.emitFilesSession();
 		if (this.peerGroupVersions) {
 			this.peerGroupVersions = null;
@@ -20771,7 +22055,7 @@ var DID_GHOSTLY_SERVICE = "GhostlyIdentityProof";
 var METHOD_NAME = /^[a-z0-9]+$/;
 var Z32_KEY = /^[ybndrfg8ejkmcpqxot1uwisza345h769]{52}$/;
 var B64URL = /^[A-Za-z0-9_-]*$/;
-var SEGMENT = /^[A-Za-z0-9._~-]{1,64}$/;
+var SEGMENT$1 = /^[A-Za-z0-9._~-]{1,64}$/;
 var HEX64 = /^[a-f0-9]{64}$/;
 var METHOD_LIST = "did:key, did:jwk, did:dht and did:web";
 /** base64url without padding, strictly: decoding and encoding again gives the same text. */
@@ -20782,7 +22066,7 @@ function strictBase64Url(value) {
 	if (toBase64Url(bytes) !== value) throw new DidError("Not canonical base64url");
 	return bytes;
 }
-var isObject$1 = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+var isObject$3 = (v) => !!v && typeof v === "object" && !Array.isArray(v);
 /**
 * The DID a person typed, checked and in canonical form, or a message they can act on. Methods other than
 * the four Ghostly checks are refused with "not supported yet"; a DID URL (a `#fragment`, `?query` or
@@ -20856,7 +22140,7 @@ function parseWeb(id) {
 		if (!(port >= 1 && port <= 65535) || String(port) !== portMatch[2]) throw new DidError("did:web: that port is not valid");
 	}
 	if (path.length > 8) throw new DidError("did:web: at most 8 path segments");
-	for (const segment of path) if (!SEGMENT.test(segment) || segment === "." || segment === "..") throw new DidError("did:web: each path segment is letters, digits, dots, dashes, underscores or tildes");
+	for (const segment of path) if (!SEGMENT$1.test(segment) || segment === "." || segment === "..") throw new DidError("did:web: each path segment is letters, digits, dots, dashes, underscores or tildes");
 	return {
 		id: [`${host}${port ? `%3A${port}` : ""}`, ...path].join(":"),
 		host,
@@ -20900,7 +22184,7 @@ function didWebFileNames(text, did, statement) {
 	} catch {
 		return false;
 	}
-	return isObject$1(body) && body.ghostly === 1 && body.did === did && body.statement === statement;
+	return isObject$3(body) && body.ghostly === 1 && body.did === did && body.statement === statement;
 }
 /** The service entry a did.json can carry instead of the file. */
 function didGhostlyServiceEntry(did, key, proofId) {
@@ -20982,7 +22266,7 @@ var JWK_CURVES = {
 };
 /** A public JWK. Other curves are `undefined`; a malformed one throws. */
 function jwkKey(jwk) {
-	if (!isObject$1(jwk)) throw new DidError("That JWK is not an object");
+	if (!isObject$3(jwk)) throw new DidError("That JWK is not an object");
 	const spec = typeof jwk.crv === "string" ? JWK_CURVES[jwk.crv] : void 0;
 	if (!spec || jwk.kty !== spec.kty) return void 0;
 	const coordinate = (v) => {
@@ -21027,7 +22311,7 @@ function staticKey(did) {
 	} catch {
 		throw new DidError("That did:jwk does not hold a JSON Web Key");
 	}
-	if (!isObject$1(jwk)) throw new DidError("That did:jwk does not hold a JSON Web Key");
+	if (!isObject$3(jwk)) throw new DidError("That did:jwk does not hold a JSON Web Key");
 	if ("d" in jwk || "p" in jwk || "k" in jwk) throw new DidError("That did:jwk contains a private key. Never share it: make a new key");
 	const key = jwkKey(jwk);
 	if (!key) throw new DidError("That did:jwk is not an Ed25519, secp256k1 or P-256 key");
@@ -21090,13 +22374,13 @@ var list = (value, name) => {
 * `GhostlyIdentityProof` services are kept. Keys Ghostly cannot use are counted in `skipped`.
 */
 function parseDidDocument(did, raw) {
-	if (!isObject$1(raw)) throw new DidError("The DID document is not a JSON object");
+	if (!isObject$3(raw)) throw new DidError("The DID document is not a JSON object");
 	if (raw.id !== did) throw new DidError(typeof raw.id === "string" ? `The DID document is for another DID (${raw.id.slice(0, 80)})` : "The DID document has no id");
 	const keys = /* @__PURE__ */ new Map();
 	const unusable = /* @__PURE__ */ new Set();
 	let skipped = 0;
 	const add = (vm) => {
-		if (!isObject$1(vm)) {
+		if (!isObject$3(vm)) {
 			skipped++;
 			return;
 		}
@@ -21127,10 +22411,10 @@ function parseDidDocument(did, raw) {
 	}
 	const services = [];
 	for (const s of list(raw.service, "service")) {
-		if (!isObject$1(s)) continue;
+		if (!isObject$3(s)) continue;
 		const types = Array.isArray(s.type) ? s.type : [s.type];
 		const endpoint = s.serviceEndpoint;
-		if (!types.includes("GhostlyIdentityProof") || !isObject$1(endpoint)) continue;
+		if (!types.includes("GhostlyIdentityProof") || !isObject$3(endpoint)) continue;
 		if (typeof endpoint.key === "string" && Z32_KEY.test(endpoint.key) && typeof endpoint.proof === "string" && HEX64.test(endpoint.proof)) services.push({
 			id: typeof s.id === "string" ? s.id.slice(0, 200) : "",
 			key: endpoint.key,
@@ -21173,7 +22457,7 @@ function parseDidJws(input) {
 	} catch {
 		throw new DidError("The JWS header is not base64url JSON");
 	}
-	if (!isObject$1(header)) throw new DidError("The JWS header is not a JSON object");
+	if (!isObject$3(header)) throw new DidError("The JWS header is not a JSON object");
 	const alg = header.alg;
 	if (typeof alg !== "string" || !DID_JWS_ALGS[alg]) throw new DidError(`The JWS uses ${typeof alg === "string" ? alg.slice(0, 16) : "no algorithm"}: Ghostly checks EdDSA, ES256K and ES256`);
 	if (header.kid !== void 0 && (typeof header.kid !== "string" || header.kid.length > 640)) throw new DidError("The JWS kid is not a key id");
@@ -21985,7 +23269,7 @@ function compactSize(n) {
 	throw new Error("Too large");
 }
 var varBytes = (b) => concatBytes$1(compactSize(b.length), b);
-var u32$1 = (n) => {
+var u32$2 = (n) => {
 	const b = /* @__PURE__ */ new Uint8Array(4);
 	new DataView(b.buffer).setUint32(0, n >>> 0, true);
 	return b;
@@ -21996,14 +23280,14 @@ var u64 = (n) => {
 	return b;
 };
 function encodeTx(tx, withWitness = tx.inputs.some((i) => i.witness.length > 0)) {
-	const parts = [u32$1(tx.version)];
+	const parts = [u32$2(tx.version)];
 	if (withWitness) parts.push(Uint8Array.of(0, 1));
 	parts.push(compactSize(tx.inputs.length));
-	for (const i of tx.inputs) parts.push(i.txid, u32$1(i.vout), varBytes(i.scriptSig), u32$1(i.sequence));
+	for (const i of tx.inputs) parts.push(i.txid, u32$2(i.vout), varBytes(i.scriptSig), u32$2(i.sequence));
 	parts.push(compactSize(tx.outputs.length));
 	for (const o of tx.outputs) parts.push(u64(o.value), varBytes(o.script));
 	if (withWitness) for (const i of tx.inputs) parts.push(encodeWitness(i.witness));
-	parts.push(u32$1(tx.lockTime));
+	parts.push(u32$2(tx.lockTime));
 	return concatBytes$1(...parts);
 }
 var encodeWitness = (stack) => concatBytes$1(compactSize(stack.length), ...stack.map(varBytes));
@@ -22169,12 +23453,12 @@ function decodeBase64(text) {
 /** BIP 143, for witness v0. `scriptCode` is the P2PKH script of the key. */
 function sighashV0(tx, scriptCode, hashType) {
 	const input = tx.inputs[0];
-	return sha256d(u32$1(tx.version), sha256d(...tx.inputs.map((i) => concatBytes$1(i.txid, u32$1(i.vout)))), sha256d(...tx.inputs.map((i) => u32$1(i.sequence))), input.txid, u32$1(input.vout), varBytes(scriptCode), u64(0n), u32$1(input.sequence), sha256d(...tx.outputs.map((o) => concatBytes$1(u64(o.value), varBytes(o.script)))), u32$1(tx.lockTime), u32$1(hashType));
+	return sha256d(u32$2(tx.version), sha256d(...tx.inputs.map((i) => concatBytes$1(i.txid, u32$2(i.vout)))), sha256d(...tx.inputs.map((i) => u32$2(i.sequence))), input.txid, u32$2(input.vout), varBytes(scriptCode), u64(0n), u32$2(input.sequence), sha256d(...tx.outputs.map((o) => concatBytes$1(u64(o.value), varBytes(o.script)))), u32$2(tx.lockTime), u32$2(hashType));
 }
 /** BIP 341 key path, SIGHASH_DEFAULT or SIGHASH_ALL, no annex. */
 function sighashV1(tx, scriptPubKey, hashType) {
 	const input = tx.inputs[0];
-	return schnorr.utils.taggedHash("TapSighash", concatBytes$1(Uint8Array.of(0, hashType), u32$1(tx.version), u32$1(tx.lockTime), sha256(concatBytes$1(input.txid, u32$1(input.vout))), sha256(u64(0n)), sha256(varBytes(scriptPubKey)), sha256(u32$1(input.sequence)), sha256(concatBytes$1(...tx.outputs.map((o) => concatBytes$1(u64(o.value), varBytes(o.script))))), Uint8Array.of(0), u32$1(0)));
+	return schnorr.utils.taggedHash("TapSighash", concatBytes$1(Uint8Array.of(0, hashType), u32$2(tx.version), u32$2(tx.lockTime), sha256(concatBytes$1(input.txid, u32$2(input.vout))), sha256(u64(0n)), sha256(varBytes(scriptPubKey)), sha256(u32$2(input.sequence)), sha256(concatBytes$1(...tx.outputs.map((o) => concatBytes$1(u64(o.value), varBytes(o.script))))), Uint8Array.of(0), u32$2(0)));
 }
 /** The original sighash, for P2PKH: the input's script replaced by the spent output's, the rest as is. */
 function sighashLegacy(tx, scriptPubKey, hashType) {
@@ -22185,7 +23469,7 @@ function sighashLegacy(tx, scriptPubKey, hashType) {
 			witness: [],
 			scriptSig: n === 0 ? scriptPubKey : /* @__PURE__ */ new Uint8Array(0)
 		}))
-	}, false), u32$1(hashType));
+	}, false), u32$2(hashType));
 }
 /** A check that throws on malformed input (a point off the curve…) simply does not hold. */
 function holds(check) {
@@ -22370,11 +23654,11 @@ function verifyBip322(address, message, signature) {
 */
 var MAX_MESSAGE = 16384;
 var MAX_SIGNATURE = 16384;
-var MAGIC = utf8Encode("Bitcoin Signed Message:\n");
+var MAGIC$1 = utf8Encode("Bitcoin Signed Message:\n");
 /** The digest `signmessage` signs: double SHA-256 of the length-prefixed magic and message. */
 function legacyMessageHash(message) {
 	const bytes = utf8Encode(message);
-	return sha256d(compactSize(MAGIC.length), MAGIC, compactSize(bytes.length), bytes);
+	return sha256d(compactSize(MAGIC$1.length), MAGIC$1, compactSize(bytes.length), bytes);
 }
 /** Header bytes 27-34 are P2PKH (uncompressed 27-30, compressed 31-34); 35-42 are BIP 137 SegWit headers. */
 var isLegacySignature = (bytes) => bytes.length === 65 && bytes[0] >= 27 && bytes[0] <= 42;
@@ -22501,8 +23785,8 @@ var Reader = class {
 		if (!this.done) fail("Trailing bytes in SSH data");
 	}
 };
-var u32 = (n) => Uint8Array.of(n >>> 24, n >>> 16 & 255, n >>> 8 & 255, n & 255);
-var sshString = (b) => concatBytes$1(u32(b.length), b);
+var u32$1 = (n) => Uint8Array.of(n >>> 24, n >>> 16 & 255, n >>> 8 & 255, n & 255);
+var sshString = (b) => concatBytes$1(u32$1(b.length), b);
 function strictBase64(text, max) {
 	if (text.length > max || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(text)) fail("Invalid base64");
 	const bytes = fromBase64(text);
@@ -22668,7 +23952,7 @@ async function verifySshSignature(armored, message, options = {}) {
 			userVerified: !!(flags & SK_USER_VERIFIED),
 			counter
 		};
-		data = concatBytes$1(sha256(utf8Encode(key.application)), Uint8Array.of(flags), u32(counter), sha256(signed));
+		data = concatBytes$1(sha256(utf8Encode(key.application)), Uint8Array.of(flags), u32$1(counter), sha256(signed));
 	}
 	r.end();
 	const verifyWith = async () => {
@@ -23078,6 +24362,64 @@ function indexOf(points, words, from) {
 	}
 	return -1;
 }
+/**
+* Catch-up answers, a slice at a time (`CATCH_UP_SLICE`), with two slices at most not handled yet by the member's app
+* (`hooks.handled`): the next once it handled the one before the last, so the slices follow each other without a round
+* trip between them. All at once, a member back in a busy group was handed over a hundred frames on one session, and an
+* app that holds 64 waiting ended that session mid catch-up ("Session receive limit exceeded", 2026-10-07). The frames
+* and their order are what they were: only when they go changes.
+*/
+var CatchUpAnswers = class {
+	hooks;
+	/** Answers still going out, per member: what is left of each. */
+	going = /* @__PURE__ */ new Map();
+	constructor(hooks) {
+		this.hooks = hooks;
+	}
+	/**
+	* The first two slices go now, the rest without holding the group's other frames back. A newer answer to the same
+	* member takes the place of what is left of the last; a frame the edge did not take ends it (the member asks again
+	* when its edge opens).
+	*/
+	handOut(to, frames) {
+		const handled = this.hooks.handled;
+		if (!handled) {
+			for (const frame of frames) this.hooks.send(to, frame);
+			return;
+		}
+		const going = this.going.get(to);
+		if (going) {
+			going.splice(0, going.length, ...frames);
+			return;
+		}
+		const rest = [...frames], told = [];
+		const next = () => {
+			if (!this.sendSlice(to, rest)) return false;
+			if (rest.length) told.push(handled(to).catch(() => false));
+			return true;
+		};
+		if (!next() || !next() || !rest.length) return;
+		this.going.set(to, rest);
+		(async () => {
+			try {
+				while (rest.length) {
+					if (!await told.shift()) await new Promise((resolve) => setTimeout(resolve, 500));
+					if (!this.hooks.active() || !next()) break;
+				}
+			} finally {
+				this.going.delete(to);
+			}
+		})();
+	}
+	/** The next slice of `rest` to `to`: false, and nothing left, when the edge did not take one. */
+	sendSlice(to, rest) {
+		for (const frame of rest.splice(0, 16)) if (this.hooks.send(to, frame) === false) {
+			rest.length = 0;
+			return false;
+		}
+		return true;
+	}
+};
 //#endregion
 //#region ../core/src/groupSession.ts
 /**
@@ -23129,7 +24471,15 @@ var GROUP_LIMITS = {
 	syncAnswers: 8,
 	syncWindowMs: 6e4,
 	/** Messages delivered from a copy that was not whole, remembered until a whole copy completes them. */
-	provisional: 256
+	provisional: 256,
+	/**
+	* Frames of one catch-up answer in a slice (`GroupSessionHooks.handled`), two slices at most not handled yet by the
+	* member's app: the next goes once it handled the one before the last. An app holds 64 frames waiting at most before
+	* 2026-10-07 (more ends the session), and a member back in a busy group was handed over a hundred at once.
+	*/
+	catchUpSlice: 16,
+	/** Between two slices, when the member's app cannot say it handled one (`handled` resolves `false`). */
+	catchUpPauseMs: 500
 };
 /** What every member should know about who can read what, in the words the apps show. */
 var GROUP_READ_NOTE = `Everyone in the group can read everything sent while they are a member. Someone removed keeps what they already received and cannot read what comes after; someone who joins later cannot read what came before. Messages go directly to each member; whoever was away gets what they missed from any member who has it (the group's last ${GROUP_LIMITS.relay} messages) when they meet again.`;
@@ -23168,6 +24518,17 @@ var cardAad = (f) => JSON.stringify([
 	f.ts
 ]);
 var isCardBox = isSealedBox(MAX_CARD_BOX);
+/** A file's description as JSON: a name and a type of 255 characters each, 128 voice bars or a 12 KiB poster, sealed. */
+var MAX_FILE_BOX = Math.ceil((GROUP_FILE_LIMITS.nameChars * 4 + GROUP_FILE_LIMITS.mimeChars + 17e3) * 4 / 3) + 4;
+var fileAad = (f) => JSON.stringify([
+	"ghostly-group/1 file",
+	f.g,
+	f.e,
+	f.s,
+	f.n,
+	f.ts
+]);
+var isFileBox = isSealedBox(MAX_FILE_BOX);
 var B64$1 = /^[A-Za-z0-9_-]*$/;
 var secretAad$1 = (g, e, member) => JSON.stringify([
 	"ghostly-group/1 secret",
@@ -23216,6 +24577,11 @@ var messageSignedWhole = (f) => utf8Encode(JSON.stringify([
 		f.sc.n,
 		f.sc.c
 	] : [],
+	...f.fl ? [
+		"fl",
+		f.fl.n,
+		f.fl.c
+	] : [],
 	...f.o ? [
 		"o",
 		f.o.e,
@@ -23294,7 +24660,7 @@ function readFirstPlace(o, epoch) {
 /** One of my own frames, among mine: `e:n`. */
 var ownKey = (f) => `${f.e}:${f.n}`;
 /** What a frame weighs in a log, roughly: its boxes plus the fixed fields around them. */
-var frameBytes = (f) => f.c.length + (f.m?.c.length ?? 0) + (f.r?.c.length ?? 0) + (f.sc?.c.length ?? 0) + 400;
+var frameBytes = (f) => f.c.length + (f.m?.c.length ?? 0) + (f.r?.c.length ?? 0) + (f.sc?.c.length ?? 0) + (f.fl?.c.length ?? 0) + 400;
 /** Only the fields an edit frame has, as `clean` does for a message. */
 var cleanEdit = (f) => ({
 	t: GROUP_EDIT_FRAME,
@@ -23333,6 +24699,10 @@ function clean(f) {
 			n: f.sc.n,
 			c: f.sc.c
 		} } : {},
+		...isFileBox(f.fl) ? { fl: {
+			n: f.fl.n,
+			c: f.fl.c
+		} } : {},
 		...readFirstPlace(f.o, f.e) ? { o: readFirstPlace(f.o, f.e) } : {},
 		...typeof f.xs === "string" && f.xs.length === 86 && B64$1.test(f.xs) ? { xs: f.xs } : {}
 	};
@@ -23409,6 +24779,8 @@ var GroupSession = class {
 	passOn = null;
 	/** Syncs answered per member, a few a minute (`GROUP_LIMITS.syncAnswers`). In memory only. */
 	syncsAnswered = /* @__PURE__ */ new Map();
+	/** Catch-up answers still going out, a slice at a time (`handOut`). */
+	answers;
 	/**
 	* Messages delivered from a copy that was not whole (handed on without its author's whole signature): not seen, so
 	* a sync still asks for them and a whole copy completes them. Oldest first, saved as `GroupState.provisional`, so a
@@ -23421,6 +24793,11 @@ var GroupSession = class {
 		this.hooks = hooks;
 		this.state = state;
 		this.identity = identityFromSeedB64(state.seedB64);
+		this.answers = new CatchUpAnswers({
+			send: (to, frame) => hooks.send(to, frame),
+			...hooks.handled && { handled: (to) => hooks.handled(to) },
+			active: () => this.state.status === "active"
+		});
 		this.provisional = new Set((state.provisional ?? []).slice(-GROUP_LIMITS.provisional));
 		this.chainMovedAt = this.clock();
 	}
@@ -23545,6 +24922,15 @@ var GroupSession = class {
 	get others() {
 		return this.roster.map(([k]) => k).filter((k) => k !== this.myKey);
 	}
+	/**
+	* Whether `key` could read message `messageId` (`<s>:<e>:<n>`) and still can: in the roster of its epoch, and in the
+	* roster now. A holder serves a group file only to such a member (WISP 503 § Asking).
+	*/
+	couldRead(key, messageId) {
+		const e = Number(messageId.split(":")[1]);
+		const then = this.state.chain.find((c) => c.e === e);
+		return !!then && rosterHas(then.m, key) && rosterHas(this.roster, key);
+	}
 	role(key) {
 		return this.roster.find(([k]) => k === key)?.[1];
 	}
@@ -23793,14 +25179,18 @@ var GroupSession = class {
 	* text that name members (everyone: the admin only); what does not hold is left out. `reply`: the message it
 	* answers, sealed apart from the text (`r`) like the mentions, so an older app still reads the text. `forwarded`: the
 	* hop count of a forwarded text (`f`, WISP 902 § Forwards). `card`: a status card, checked by the caller, sealed in a
-	* box of its own (`sc`, WISP 405 · Status Cards); the text is its fallback.
+	* box of its own (`sc`, WISP 405 · Status Cards); the text is its fallback. `file`: a file or voice message the text
+	* announces (`fl`, WISP 503 · Group Files), its description checked by the caller; the text is its caption, or the
+	* line an older app shows.
 	*/
-	sendText(text, now = Date.now(), mentions = [], reply, forwarded, card) {
+	sendText(text, now = Date.now(), mentions = [], reply, forwarded, card, file) {
 		return this.serialize(async () => {
 			if (this.state.status !== "active") return { error: this.state.statusReason ?? "You are no longer in this group" };
 			const trimmed = text.trim();
 			if (!trimmed) return { error: "Nothing to send" };
 			if (utf8Encode(trimmed).length > GROUP_LIMITS.textBytes) return { error: "Message exceeds 16 KiB" };
+			const described = file === void 0 ? void 0 : readGroupFileMeta(file);
+			if (file !== void 0 && !described) return { error: "That file cannot go to a group" };
 			const epoch = this.epoch;
 			if (!this.secret(epoch)) return { error: "This epoch's key has not arrived yet. Wait for a member to catch you up." };
 			const n = this.nextSeq(epoch);
@@ -23811,7 +25201,8 @@ var GroupSession = class {
 				mentions: named,
 				reply: answers || void 0,
 				forwarded: fw,
-				card
+				card,
+				file: described ?? void 0
 			});
 			this.logOwn(frame);
 			const id = groupMessageId(this.myKey, epoch, n);
@@ -23825,7 +25216,8 @@ var GroupSession = class {
 				...named.length ? { mentions: named } : {},
 				...answers ? { reply: answers } : {},
 				...fw ? { forwarded: fw } : {},
-				...card ? { card } : {}
+				...card ? { card } : {},
+				...described ? { file: described } : {}
 			});
 			await this.say(frame);
 			return { id };
@@ -23866,6 +25258,7 @@ var GroupSession = class {
 			...extra.reply ? { r: encryptText(key, replyAad(header), JSON.stringify(extra.reply)) } : {},
 			...extra.forwarded ? { f: extra.forwarded } : {},
 			...extra.card ? { sc: encryptText(key, cardAad(header), JSON.stringify(extra.card)) } : {},
+			...extra.file ? { fl: encryptText(key, fileAad(header), JSON.stringify(extra.file)) } : {},
 			...o ? { o } : {}
 		};
 		return {
@@ -23935,7 +25328,8 @@ var GroupSession = class {
 				mentions,
 				reply: this.openReply(key, f),
 				forwarded: readForwarded(f.f) ? f.f : void 0,
-				card: this.openCard(key, f)
+				card: this.openCard(key, f),
+				file: this.openFile(key, f)
 			}, readFirstPlace(f.o, f.e) ?? {
 				e: f.e,
 				n: f.n
@@ -24270,6 +25664,7 @@ var GroupSession = class {
 			delete raw.r;
 			delete raw.f;
 			delete raw.sc;
+			delete raw.fl;
 			delete raw.o;
 			delete raw.xs;
 		}
@@ -24300,6 +25695,7 @@ var GroupSession = class {
 		const reply = this.openReply(key, raw);
 		const forwarded = readForwarded(raw.f);
 		const card = this.openCard(key, raw);
+		const file = this.openFile(key, raw);
 		const completes = whole && this.provisional.delete(id);
 		await this.hooks.message({
 			id,
@@ -24312,6 +25708,7 @@ var GroupSession = class {
 			...reply ? { reply } : {},
 			...forwarded ? { forwarded } : {},
 			...card ? { card } : {},
+			...file ? { file } : {},
 			...completes ? { completes: true } : {}
 		});
 		if (!whole) {
@@ -24413,6 +25810,17 @@ var GroupSession = class {
 			return;
 		}
 	}
+	/** The file a message announces (WISP 503); a box that does not open, or a description that does not hold, is no file. */
+	openFile(key, raw) {
+		if (!isFileBox(raw.fl)) return void 0;
+		const plain = decryptText(key, fileAad(raw), raw.fl.n, raw.fl.c);
+		if (plain === null) return void 0;
+		try {
+			return readGroupFileMeta(JSON.parse(plain)) ?? void 0;
+		} catch {
+			return;
+		}
+	}
 	/** The message a text answers; a box that does not open, or does not hold one, is no reply, not no message. */
 	openReply(key, raw) {
 		if (!isReplyBox(raw.r)) return void 0;
@@ -24566,9 +25974,10 @@ var GroupSession = class {
 			});
 			return;
 		}
+		const answer = [];
 		for (let e = frame.e + 1; e <= this.epoch; e++) {
 			const commit = this.state.chain[e], secret = this.secret(e);
-			this.hooks.send(from, {
+			answer.push({
 				t: "group-commit",
 				g: this.id,
 				commit,
@@ -24580,7 +25989,7 @@ var GroupSession = class {
 			e,
 			s: sealSecret(from, this.secret(e), secretAad$1(this.id, e, from))
 		}));
-		for (let i = 0; i < secrets.length; i += GROUP_LIMITS.secretsPerFrame) this.hooks.send(from, {
+		for (let i = 0; i < secrets.length; i += GROUP_LIMITS.secretsPerFrame) answer.push({
 			t: "group-secrets",
 			g: this.id,
 			secrets: secrets.slice(i, i + GROUP_LIMITS.secretsPerFrame)
@@ -24588,12 +25997,24 @@ var GroupSession = class {
 		const lacks = missingIn(frame, from);
 		const asked = new Set(Array.isArray(frame.ask) ? frame.ask.filter((k) => typeof k === "string" && k !== from && k !== this.myKey && rosterHas(this.roster, k)) : []);
 		const kept = asked.size ? (this.state.relay ?? []).filter((f) => asked.has(f.s) && this.state.chain[f.e] && rosterHas(this.state.chain[f.e].m, from) && lacks(f)) : [];
-		for (const next of asWritten(this.ownLacked(from, frame), kept)) this.hooks.send(from, next);
+		answer.push(...asWritten(this.ownLacked(from, frame), kept));
 		for (const author of asked) {
 			const edits = (this.state.relayEdits ?? []).filter((f) => f.s === author && this.state.chain[f.e] && rosterHas(this.state.chain[f.e].m, from));
-			for (const edit of edits.slice(-GROUP_LIMITS.handOnEdits)) this.hooks.send(from, edit);
+			answer.push(...edits.slice(-GROUP_LIMITS.handOnEdits));
 		}
-		this.offerMeta(from, frame.mt);
+		const meta = this.metaFor(from, frame.mt);
+		if (meta) answer.push(meta);
+		this.handOut(from, answer);
+	}
+	/**
+	* A catch-up answer, a slice at a time (`GROUP_LIMITS.catchUpSlice`), with two slices at most not handled yet by the
+	* member's app (`hooks.handled`), as a community's goes (`CatchUpAnswers`). All at once, a member back in a busy group
+	* was handed over a hundred frames on one session, and an app that holds 64 waiting ended that session mid catch-up
+	* ("Session receive limit exceeded", 2026-10-07). A newer answer to the same member takes the place of what is left of
+	* the last; a frame the edge did not take ends it (the member asks again when its edge opens).
+	*/
+	handOut(to, frames) {
+		this.answers.handOut(to, frames);
 	}
 	/** My own messages a member's sync says it lacks, from my bounded log, for the epochs it was a member of. */
 	handOwn(to, frame) {
@@ -24672,10 +26093,14 @@ var GroupSession = class {
 	}
 	/** My statement, to a member whose sync says it holds an older one (or none); nothing to an app that says nothing. */
 	offerMeta(to, theirTag) {
+		const frame = this.metaFor(to, theirTag);
+		if (frame) this.hooks.send(to, frame);
+	}
+	metaFor(to, theirTag) {
 		const meta = this.state.meta, theirs = parseGroupMetaTag(theirTag);
-		if (!meta || theirs === null || !groupMetaNewer(meta, theirs) || !rosterHas(this.roster, to)) return;
+		if (!meta || theirs === null || !groupMetaNewer(meta, theirs) || !rosterHas(this.roster, to)) return null;
 		const secret = this.secret(this.epoch);
-		if (secret) this.hooks.send(to, wrapGroupMeta(meta, this.epoch, epochKeys(secret, this.id, this.epoch).message));
+		return secret ? wrapGroupMeta(meta, this.epoch, epochKeys(secret, this.id, this.epoch).message) : null;
 	}
 	/**
 	* A metadata statement: kept when it is newer than mine, its commit is on my chain, its signer was
@@ -24959,7 +26384,15 @@ var COMMUNITY_LIMITS = {
 	* waits for the window.
 	*/
 	syncAnswers: 16,
-	syncWindowMs: 6e4
+	syncWindowMs: 6e4,
+	/**
+	* Frames of one catch-up answer in a slice (`CommunitySessionHooks.handled`), two slices at most not handled yet by
+	* the member's app: a member back after the store filled was handed 258 at once, and an app holds 64 waiting at most
+	* before 2026-10-07 (more ends the session). As a private group's (`GROUP_LIMITS.catchUpSlice`).
+	*/
+	catchUpSlice: 16,
+	/** Between two slices, when the member's app cannot say it handled one (`handled` resolves `false`). */
+	catchUpPauseMs: 500
 };
 /** What every member should know about who can read what, and what the link does, in the words the apps show. */
 var GROUP_READ_NOTE_COMMUNITY = `Anyone with the group's link can join, and any member can let people in. Everyone in the group can read everything sent while they are a member; someone removed cannot read what comes after, someone who joins later cannot read what came before. Members who were away get the last ${COMMUNITY_LIMITS.store} messages from whoever is there when they return.`;
@@ -25184,7 +26617,7 @@ var pairAad = (f, to) => JSON.stringify([
 	f.ts,
 	to
 ]);
-var isObject = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+var isObject$2 = (v) => !!v && typeof v === "object" && !Array.isArray(v);
 var messageSigned = (f) => utf8Encode(JSON.stringify([
 	"ghostly-group/2 msg",
 	f.g,
@@ -25269,6 +26702,8 @@ var CommunitySession = class {
 	asked = /* @__PURE__ */ new Map();
 	/** Syncs answered per member, a few a minute (`COMMUNITY_LIMITS.syncAnswers`). In memory only. */
 	syncsAnswered = /* @__PURE__ */ new Map();
+	/** Catch-up answers still going out, a slice at a time (`receiveSync`). */
+	answers;
 	queue = Promise.resolve();
 	/** When the commit I follow last changed (`adopt`), by `hooks.clock`. */
 	chainMovedAt = 0;
@@ -25281,6 +26716,11 @@ var CommunitySession = class {
 		this.hooks = hooks;
 		this.state = state;
 		this.identity = identityFromSeedB64(state.seedB64);
+		this.answers = new CatchUpAnswers({
+			send: (to, frame) => hooks.direct(to, frame),
+			...hooks.handled && { handled: (to) => hooks.handled(to) },
+			active: () => this.state.status === "active"
+		});
 		this.rebuild();
 		if ((state.status === "active" || state.status === "lost") && this.bestBranch().tip !== this.topHash) this.serialize(() => this.chooseBranch());
 	}
@@ -25454,6 +26894,15 @@ var CommunitySession = class {
 		for (const roster of this.rosters.values()) if (rosterHas(roster, key)) return true;
 		return false;
 	}
+	/**
+	* Whether `key` could read message `messageId` (`<s>:<e>:<h>:<n>`) and still can: a member of the roster it was sealed
+	* for, and of the roster now. A holder serves a group file only to such a member (WISP 503 § Asking).
+	*/
+	couldRead(key, messageId) {
+		const [, e, h] = messageId.split(":");
+		const found = h === void 0 ? void 0 : this.commitByShort(Number(e), h);
+		return !!found && rosterHas(this.rosterAt(found.hash) ?? [], key) && rosterHas(this.roster, key);
+	}
 	/** Someone the chain took out (removed or left) and who is not back in. */
 	wasRemoved(key) {
 		return this.outIndex(key) >= 0;
@@ -26071,23 +27520,29 @@ var CommunitySession = class {
 	* count against the text's 16 KiB, so the box stays within what older apps accept. `reply`: the message it
 	* answers (`r`), counted the same way. `forwarded`: a forwarded text's hop count (`fw`, WISP 903 § Forwards). `card`:
 	* a status card, checked by the caller (`sc`, WISP 405 · Status Cards), counted the same way; the text is its fallback.
+	* `file`: a file or voice message the text announces (`fl`, WISP 503 · Group Files), counted the same way; the text is
+	* its caption, or the line an older app shows.
 	*/
-	sendText(text, nick, now = Date.now(), mentions = [], reply, forwarded, card) {
+	sendText(text, nick, now = Date.now(), mentions = [], reply, forwarded, card, file) {
 		return this.serialize(async () => {
 			if (!this.isMember) return { error: this.state.statusReason ?? "You are not in this group" };
 			const trimmed = text.trim();
 			if (!trimmed) return { error: "Nothing to send" };
+			const described = file === void 0 ? void 0 : readGroupFileMeta(file);
+			if (file !== void 0 && !described) return { error: "That file cannot go to a group" };
 			const named = validMentions(wireMentions(mentions), trimmed, false);
 			const answers = reply && readReply(wireReply(reply), groupReplyAuthor);
 			const replyBytes = answers ? utf8Encode(JSON.stringify(answers)).length : 0;
+			const fileBytes = described ? utf8Encode(JSON.stringify(described)).length + 8 : 0;
 			const hops = readForwarded(forwarded);
-			if (utf8Encode(trimmed).length + mentionsBytes(named) + replyBytes + (hops ? 16 : 0) + (card ? statusCardBytes(card) + 8 : 0) > COMMUNITY_LIMITS.textBytes) return { error: "Message exceeds 16 KiB" };
+			if (utf8Encode(trimmed).length + mentionsBytes(named) + replyBytes + fileBytes + (hops ? 16 : 0) + (card ? statusCardBytes(card) + 8 : 0) > COMMUNITY_LIMITS.textBytes) return { error: "Message exceeds 16 KiB" };
 			const sent = await this.sendPayload(() => ({
 				text: trimmed,
 				...named.length ? { m: named } : {},
 				...answers ? { r: answers } : {},
 				...hops ? { fw: hops } : {},
-				...card ? { sc: card } : {}
+				...card ? { sc: card } : {},
+				...described ? { fl: described } : {}
 			}), nick, now);
 			if ("error" in sent) return sent;
 			await this.hooks.message({
@@ -26100,7 +27555,8 @@ var CommunitySession = class {
 				...named.length ? { mentions: named } : {},
 				...answers ? { reply: answers } : {},
 				...hops ? { forwarded: hops } : {},
-				...card ? { card } : {}
+				...card ? { card } : {},
+				...described ? { file: described } : {}
 			});
 			await this.say(sent.frame);
 			return { id: sent.id };
@@ -26114,7 +27570,7 @@ var CommunitySession = class {
 	sendApp(frame, nick, now = Date.now()) {
 		return this.serialize(async () => {
 			if (!this.isMember) return { error: this.state.statusReason ?? "You are not in this group" };
-			if (!isObject(frame) || utf8Encode(JSON.stringify(frame)).length > COMMUNITY_LIMITS.appBytes) return { error: "Too large for the group" };
+			if (!isObject$2(frame) || utf8Encode(JSON.stringify(frame)).length > COMMUNITY_LIMITS.appBytes) return { error: "Too large for the group" };
 			const sent = await this.sendPayload(() => ({ x: frame }), nick, now);
 			if ("error" in sent) return sent;
 			await this.say(sent.frame);
@@ -26163,7 +27619,7 @@ var CommunitySession = class {
 		return this.serialize(async () => {
 			if (!this.isMember) return { error: this.state.statusReason ?? "You are not in this group" };
 			if (to === this.myKey || !rosterHas(this.roster, to)) return { error: "Not a member of this group" };
-			if (!isObject(payload)) return { error: "Nothing to send" };
+			if (!isObject$2(payload)) return { error: "Nothing to send" };
 			const plain = utf8Encode(JSON.stringify(payload));
 			if (plain.length > COMMUNITY_LIMITS.appBytes) return { error: "Too large for the group" };
 			const sent = await this.sendPayload((header) => ({ p: {
@@ -26276,7 +27732,7 @@ var CommunitySession = class {
 			try {
 				parsed = plain === null ? null : JSON.parse(plain);
 			} catch {}
-			if (!isObject(parsed) || isObject(parsed.p)) continue;
+			if (!isObject$2(parsed) || isObject$2(parsed.p)) continue;
 			const o = readOriginal(parsed.o, f) ?? {
 				e: f.e,
 				h: f.h,
@@ -26424,7 +27880,7 @@ var CommunitySession = class {
 		} catch {
 			return false;
 		}
-		if (!isObject(parsed)) return false;
+		if (!isObject$2(parsed)) return false;
 		const original = parsed.o === void 0 ? null : readOriginal(parsed.o, raw);
 		if (parsed.o !== void 0 && !original) return false;
 		const first = original ? {
@@ -26442,8 +27898,8 @@ var CommunitySession = class {
 		const text = typeof parsed.text === "string" ? parsed.text.slice(0, COMMUNITY_LIMITS.textBytes) : void 0;
 		if ([
 			text !== void 0,
-			isObject(parsed.x),
-			isObject(parsed.p)
+			isObject$2(parsed.x),
+			isObject$2(parsed.p)
 		].filter(Boolean).length !== 1) return false;
 		const nick = typeof parsed.nick === "string" ? sanitizeNick(parsed.nick) : void 0;
 		if (nick && this.state.nicks[raw.s] !== nick) {
@@ -26456,6 +27912,7 @@ var CommunitySession = class {
 			const reply = parsed.r === void 0 ? void 0 : readReply(parsed.r, groupReplyAuthor);
 			const forwarded = readForwarded(parsed.fw);
 			const card = parsed.sc === void 0 ? void 0 : readStatusCard(parsed.sc);
+			const file = parsed.fl === void 0 ? void 0 : readGroupFileMeta(parsed.fl) ?? void 0;
 			await this.hooks.message({
 				id,
 				sender: raw.s,
@@ -26466,9 +27923,10 @@ var CommunitySession = class {
 				...mentions.length ? { mentions } : {},
 				...reply ? { reply } : {},
 				...forwarded ? { forwarded } : {},
-				...card ? { card } : {}
+				...card ? { card } : {},
+				...file ? { file } : {}
 			});
-		} else if (isObject(parsed.x)) await this.hooks.app?.({
+		} else if (isObject$2(parsed.x)) await this.hooks.app?.({
 			id,
 			sender: raw.s,
 			epoch: raw.e,
@@ -26484,7 +27942,7 @@ var CommunitySession = class {
 				try {
 					opened = plain && plain.length <= COMMUNITY_LIMITS.appBytes ? JSON.parse(utf8Decode(plain)) : null;
 				} catch {}
-				if (isObject(opened)) await this.hooks.pair?.({
+				if (isObject$2(opened)) await this.hooks.pair?.({
 					id,
 					sender: raw.s,
 					epoch: raw.e,
@@ -26558,10 +28016,15 @@ var CommunitySession = class {
 		this.ask(to);
 	}
 	ask(from) {
+		const sync = this.question(from);
+		if (sync) this.hooks.direct(from, sync);
+	}
+	/** My sync for a member, unless I asked it a moment ago. */
+	question(from) {
 		const now = this.hooks.clock?.() ?? Date.now();
-		if (now - (this.asked.get(from) ?? 0) < 5e3) return;
+		if (now - (this.asked.get(from) ?? 0) < 5e3) return null;
 		this.asked.set(from, now);
-		this.hooks.direct(from, this.syncFrame());
+		return this.syncFrame();
 	}
 	async replayWaiting() {
 		await this.metaFollowsChain();
@@ -26579,6 +28042,11 @@ var CommunitySession = class {
 		let answered = this.syncsAnswered.get(from);
 		if (!answered) this.syncsAnswered.set(from, answered = new RateWindow(COMMUNITY_LIMITS.syncAnswers, COMMUNITY_LIMITS.syncWindowMs, () => this.hooks.clock?.() ?? Date.now()));
 		if (!answered.take()) return;
+		const answer = [];
+		const ask = () => {
+			const sync = this.question(from);
+			if (sync) answer.push(sync);
+		};
 		const theirs = this.known.get(frame.h);
 		let start;
 		if (theirs && this.mainIndex.has(frame.h)) start = this.mainIndex.get(frame.h) + 1;
@@ -26588,18 +28056,18 @@ var CommunitySession = class {
 		} else {
 			const common = (Array.isArray(frame.loc) ? frame.loc : []).find((x) => typeof x === "string" && this.mainIndex.has(x));
 			start = common !== void 0 ? this.mainIndex.get(common) + 1 : Math.max(0, this.state.chain.length - COMMUNITY_LIMITS.side);
-			this.ask(from);
+			ask();
 		}
 		for (let i = start; i < this.state.chain.length; i++) {
 			const commit = this.state.chain[i], h = communityCommitHash(commit);
-			this.hooks.direct(from, {
+			answer.push({
 				t: "group-commit",
 				v: 2,
 				g: this.id,
 				commit
 			});
 			const secret = this.state.secrets[h];
-			if (secret && rosterHas(this.rosterAt(h) ?? [], from) && FRESH.has(commit.k)) this.hooks.direct(from, {
+			if (secret && rosterHas(this.rosterAt(h) ?? [], from) && FRESH.has(commit.k)) answer.push({
 				t: "group-secret",
 				v: 2,
 				g: this.id,
@@ -26613,7 +28081,7 @@ var CommunitySession = class {
 			h,
 			s: sealSecret(from, fromBase64Url(this.state.secrets[h]), secretAad(this.id, h, from))
 		}));
-		if (secrets.length) this.hooks.direct(from, {
+		if (secrets.length) answer.push({
 			t: "group-secrets",
 			v: 2,
 			g: this.id,
@@ -26630,8 +28098,8 @@ var CommunitySession = class {
 			if (!reads && !(mine && rosterHas(this.roster, from))) continue;
 			const high = have[stored.s]?.[seenKey(stored.e, stored.h)];
 			if (Number.isSafeInteger(high) && high >= stored.n) continue;
-			if (!this.mainIndex.has(found.hash)) this.handSide(from, found.hash, handed);
-			this.hooks.direct(from, stored);
+			if (!this.mainIndex.has(found.hash)) this.handSide(from, found.hash, handed, answer);
+			answer.push(stored);
 			if (mine && reads) unheard.delete(frameKey(stored));
 		}
 		if (unheard.size !== (this.state.unheard?.length ?? 0)) {
@@ -26640,30 +28108,32 @@ var CommunitySession = class {
 		}
 		if (rosterHas(this.roster, from)) {
 			const entry = this.entryFrame(from);
-			if (entry) this.hooks.direct(from, entry);
+			if (entry) answer.push(entry);
 		}
-		for (const request of this.state.pendingLeaves) this.hooks.direct(from, {
+		for (const request of this.state.pendingLeaves) answer.push({
 			t: "group-leave",
 			v: 2,
 			g: this.id,
 			...request
 		});
-		this.offerMeta(from, frame.mt);
-		this.ask(from);
+		const meta = this.metaFor(from, frame.mt);
+		if (meta) answer.push(meta);
+		ask();
+		this.answers.handOut(from, answer);
 	}
-	/** The commits of a branch I do not follow, from where it leaves mine, and the secrets I hold of those `to` was in. */
-	handSide(to, tip, handed) {
+	/** The commits of a branch I do not follow, from where it leaves mine, and the secrets I hold of those `to` was in, onto `answer`. */
+	handSide(to, tip, handed, answer) {
 		for (const h of this.pathToMain(tip) ?? []) {
 			if (handed.has(h)) continue;
 			handed.add(h);
-			this.hooks.direct(to, {
+			answer.push({
 				t: "group-commit",
 				v: 2,
 				g: this.id,
 				commit: this.known.get(h)
 			});
 			const secret = this.state.secrets[h];
-			if (secret && rosterHas(this.rosterAt(h) ?? [], to)) this.hooks.direct(to, {
+			if (secret && rosterHas(this.rosterAt(h) ?? [], to)) answer.push({
 				t: "group-secret",
 				v: 2,
 				g: this.id,
@@ -26762,12 +28232,11 @@ var CommunitySession = class {
 		const meta = this.state.meta, secret = this.state.secrets[this.topHash];
 		return meta && secret ? wrapGroupMeta(meta, this.topHash, epochKeys(fromBase64Url(secret), this.id, this.epoch).message, true) : null;
 	}
-	/** My statement, to a member whose sync says it holds an older one (or none); nothing to an app that says nothing. */
-	offerMeta(to, theirTag) {
+	/** My statement, for a member whose sync says it holds an older one (or none); none for an app that says nothing. */
+	metaFor(to, theirTag) {
 		const meta = this.state.meta, theirs = parseGroupMetaTag(theirTag);
-		if (!meta || theirs === null || !groupMetaNewer(meta, theirs) || !this.isMember || !rosterHas(this.roster, to)) return;
-		const frame = this.metaFrame();
-		if (frame) this.hooks.direct(to, frame);
+		if (!meta || theirs === null || !groupMetaNewer(meta, theirs) || !this.isMember || !rosterHas(this.roster, to)) return null;
+		return this.metaFrame();
 	}
 	/**
 	* A metadata statement (from its author's edge or a hub's): kept when it is newer than mine, its
@@ -26939,6 +28408,672 @@ var GroupTypingBoard = class {
 	}
 };
 //#endregion
-export { checkAtprotoProofRecord as $, HANDOFF_VERIFIED as $a, replySnippet as $i, freshHubs as $n, OwnInviteError as $o, IdentityCheckUnavailable as $r, fromBase64Url as $s, isPubkyKey as $t, GROUP_EDIT_TEXT_BYTES as A, CALL_SIGNAL_MAX_AGE_MS as Aa, parseVoiceMeta as Ai, findEndpoint as An, SET_UPDATE as Ao, newWakeToken as Ar, DEFAULT_RELAYS as As, encodeDidDhtPacket as At, sameSshKey as B, HTTP_SERVICE_PROTO as Ba, COMMUNITY_REACTION_FRAME as Bi, SIGNAL_FRESH_MS as Bn, enrollCancelFrame as Bo, HOLD_DATED_BACK_MS as Br, RELAY_PAYLOAD_MAX_BYTES as Bs, USDT_PUBLIC_RPC as Bt, groupWakes as C, GhostlyHttpError as Ca, safeBlobType as Ci, resolveLightningDestination as Cn, readHandoffHave as Co, nextPinNumber as Cr, firstDeviceSetSecret as Cs, parseDidSignaturePaste as Ct, GroupSession as D, LIMITS as Da, VOICE_LIMITS as Di, ENDPOINT as Dn, readHandoffVerified as Do, WAKE_CALL_INTERVAL_MS as Dr, signTurnRelease as Ds, didDhtDocument as Dt, GROUP_READ_NOTE as E, webLocalFetch as Ea, PLAYABLE_AUDIO as Ei, decodeBolt11 as En, readHandoffTurnFrame as Eo, readPin as Er, signTurnPacket as Es, strictBase64Url as Et, SSHSIG_MAX_ARMOR as F, callSignalHeardAt as Fa, RateWindow as Fi, INVITE_TAKEN as Fn, verifySetUpdate as Fo, vapidKeysMatch as Fr, traceLink as Fs, ONCHAIN_PROVIDER as Ft, decodeAnyBitcoinAddress as G, HANDOFF_DONE as Ga, queueReaction as Gi, MESH_HUBS as Gn, enrollHelloFrame as Go, readManifest as Gr, createIdentity as Gs, validatePaymentTarget as Gt, verifySshSignature as H, serviceIdFromName as Ha, REACTION_LIMITS as Hi, SIGNAL_REPLY_MS as Hn, enrollDigits as Ho, HoldKeys as Hr, newerPacket as Hs, assertTokenUnits as Ht, SSHSIG_NAMESPACE as I, extractParamsFromSdp as Ia, dhtEditId as Ii, LIVENESS_PING_MS as In, ENROLL_DONE as Io, BUTTONS_CAPABILITY as Ir, budgetRetryMs as Is, PaymentPreflightError as It, ATPROTO_PROOF_COLLECTION as J, HANDOFF_OFFER as Ja, readReaction as Ji, pickMeshHubs as Jn, readEnrollHello as Jo, capsDescriptors as Jr, publicKeyFromZ32 as Js, SPARK_PROVIDER as Jt, ATPROTO_DECLARED_SCOPE as K, HANDOFF_HAVE as Ka, reactionEmoji as Ki, mayBeHub as Kn, enrollProofFrame as Ko, CapsExchange as Kr, identityFromSeed as Ks, walletNetworkOf as Kt, SshSigError as L, parseCallSignal as La, parseLinkPreview as Li, pairedMessageFrame as Ln, ENROLL_GRANT as Lo, EDIT_CAPABILITY as Lr, isDiscoveryBudgetError as Ls, SEPOLIA_TEST_USDT as Lt, parseCommunityEdit as M, answersOffer as Ma, parseVideoMeta as Mi, parseCashuRequestPayload as Mn, setAckFrame as Mo, relayRequest as Mr, currentRelays as Ms, signDidDhtPacket as Mt, mentionsMember as N, buildSdpFromSignal as Na, EDIT_BUFFER_MS as Ni, parseFedimintRequestPayload as Nn, setUpdateFrame as No, wakeRequest as Nr, normalizeRelayUrl as Ns, ETHEREUM_USDT as Nt, COMMUNITY_EDIT_FRAME as O, decodeControl as Oa, baseMime as Oi, cashuRequestPayload as On, sealHandoffPiece as Oo, WakeLimiter as Or, turnKeys as Os, didDhtFromPublicKey as Ot, groupName as P, callRtcConfig as Pa, EDIT_RATE_WINDOW_MS as Pi, GhostLink as Pn, signTombstone as Po, checkPushEndpoint as Pr, setLinkTraceSink as Ps, EVM_TEST_CHAINS as Pt, atprotoProofRkey as Q, HANDOFF_TIMINGS as Qa, readReply as Qi, doorHubs as Qn, readDeviceInvite as Qo, IDENTITY_REVOCATION_LABEL as Qr, bytesEqual as Qs, PUBKY_PROOF_MAX_BYTES as Qt, parseSshPublicKey as R, signalHasVideo as Ra, forwardedAgain as Ri, CarriedTransport as Rn, ENROLL_HELLO as Ro, UPGRADE_CAPABILITY as Rr, withRequestOptions as Rs, SEPOLIA_TEST_USDT_FAUCET as Rt, groupWakeFrame as S, presenceSeenAt as Sa, readImageMeta as Si, requestLnurlInvoice as Sn, readHandoffDone as So, mayPin as Sr, TURN_MAX as Ss, parseDidDocument as St, GROUP_REACTED_FRAME as T, parseLocalTarget as Ta, sanitizeMime as Ti, engineText as Tn, readHandoffPake as To, pinNumberHolds as Tr, readTurnPacket as Ts, staticDidDocument as Tt, verifyBitcoinMessage as U, HANDOFF_ACK as Ua, ReactionWindow as Ui, groupSignalFrame as Un, enrollDoneFrame as Uo, HoldRefusedError as Ur, openRelayPayload as Us, assertWholeSats as Ut, sshSignCommand as V, LEGACY_SERVICES as Va, GROUP_REACTION_FRAME as Vi, SIGNAL_HOLD_MS as Vn, enrollCancelReason as Vo, HOLD_LIMITS as Vr, createRelayPayload as Vs, WALLET_NETWORKS as Vt, BitcoinAddressError as W, HANDOFF_CANCEL as Wa, nextReactionNumber as Wi, readGroupSignal as Wn, enrollGrantFrame as Wo, newMailbox as Wr, parseRelayPayload as Ws, formatPaymentAmount as Wt, atprotoDidMethod as X, HANDOFF_PIECE_BYTES as Xa, wireReaction as Xi, beaconKeys as Xn, createDeviceInvite as Xo, IDENTITY_MAX_EVIDENCE as Xr, MAX_AVATAR_LENGTH as Xs, sparkInvoiceDetails as Xt, ATPROTO_PROOF_SCOPE as Y, HANDOFF_PAKE as Ya, validReactionNumber as Yi, COMMUNITY_TOPOLOGY as Yn, verifyEnrollProof as Yo, dialDescriptors as Yr, verify as Ys, sparkAddressKind as Yt, atprotoProofRecord as Z, HANDOFF_REQUEST as Za, pairedReplyAuthor as Zi, beaconRecords as Zn, deviceInviteJoinerParams as Zo, IDENTITY_MAX_VALIDITY as Zr, sanitizeAvatar as Zs, isBitcoinAddress as Zt, knockRecords as _, verifyCommitSignature as _a, DHT_MESSAGE_TTL as _i, recordsFromTxt as _n, handoffStreamKey as _o, TypingSender as _r, TURN_RAISE_READ_TIMEOUT_MS as _s, didWebFileNames as _t, sealGroupTyping as a, checkStatusCard as aa, newIdentityBinding as ai, pubkyProofPath as an, handoffCancelFrame as ao, pickHubs as ar, DEVICES_CAPABILITY as as, verifyAtprotoRecordProof as at, GROUP_WAKE_FRAME as b, EXPECT_PEER_MS as ba, dhtFileId as bi, txtValue as bn, readHandoffAck as bo, GROUP_PIN_FRAME as br, turnPutSummary as bs, normalizeDid as bt, GROUP_READ_NOTE_COMMUNITY as c, arrivalKey as ca, lastSharedWithMe as ci, DOMAIN_FILE_MAX_BYTES as cn, handoffDataFrame as co, readBeaconHead as cr, deviceEchoFrame as cs, DID_JWS_MAX_LENGTH as ct, encodeCommunityLink as d, receivedTimestamp as da, validExternalKey as di, domainTxtRecord as dn, handoffHelloFrame as do, ChatFiles as dr, deviceLinkPairing as ds, checkDidSignature as dt, BUTTON_ID as ea, randomBytes as ec, IdentityExchange as ei, isPubkyProofFolder as en, filePartName as eo, lobbyKeys as er, createChatInvite as es, isAtprotoDid as et, KNOCK_TTL_MS as f, shownTime as fa, TRANSPORTS as fi, domainWellKnownFile as fn, handoffManifestFrames as fo, FILE_LIMITS as fr, devicePingFrame as fs, didGhostlyServiceEntry as ft, knockIdentity as g, rosterHas as ga, DHT_FILE_TOO_LARGE as gi, normalizeDomain as gn, handoffRetryAfter as go, TYPING_REFRESH_MS as gr, TURN_PUT_WINDOW_MS as gs, didWebFile as gt, entryParams as h, MEMBER_KEY as ha, irohRelayUrl as hi, nip05RootKey as hn, handoffReleaseFrame as ho, TYPING_KINDS as hr, webCryptoSigner as hs, didWebDocumentUrl as ht, openGroupTyping as i, buttonLabelClash as ia, utf8Encode as ic, identityStatement as ii, pubkyProofFile as in, handoffBusyFrame as io, newerHead as ir, inviteOwnership as is, AtprotoProofError as it, carryMentions as j, RTC_CONFIG as ja, voicePeaksOf as ji, isFederationId as jn, readSetUpdate as jo, parseWakeFrame as jr, RelayTransport as js, resolveDidDht as jt, GROUP_EDIT_FRAME as k, encodeControl as ka, fileMessageText as ki, fedimintRequestPayload as kn, SET_ACK as ko, deviceWakeRequest as kr, turnName as ks, encodeDidDhtDeactivated as kt, communityHasFrame as l, claimedTime as la, PeerProofs as li, decodeDnsResponse as ln, handoffDigest as lo, readLobby as lr, deviceEchoNonce as ls, DidError as lt, encodeGroupEntryLink as m, MAX_GROUP_CHAIN as ma, irohDescriptor as mi, isPublicAddress as mn, handoffPakeFrame as mo, transferStalled as mr, seedSigner as ms, didSignedMessages as mt, GroupTypingBoard as n, RUN_RESULTS as na, toZ32 as nc, emptyIdentityLedger as ni, normalizePubkyKey as nn, handoffAttemptFailed as no, mergeBeacon as nr, encodeInviteCode as ns, parseAtprotoDidDocument as nt, COMMUNITY_LIMITS as o, sameButtonText as oa, receivedIdentityStatus as oi, homeserverWebEndpoint as on, handoffContext as oo, rankHubs as or, ENROLL_CAPABILITY as os, DID_DOCUMENT_MAX_BYTES as ot, decodeGroupEntryLink as p, GROUP_MEMBER_CAP as pa, automaticTransport as pi, encodeDnsQuery as pn, handoffOfferFrame as po, transferEnded as pr, newDeviceSetSecret as ps, didJwsAlg as pt, ATPROTO_FULL_SCOPE as q, HANDOFF_HELLO as qa, reactionIsNewer as qi, meshHubs as qn, readEnrollGrant as qo, DHT_TEXT_CAPABILITY as qr, identityFromSeedB64 as qs, SPARK_NETWORKS as qt, groupTypingEpoch as r, STATUS_CARD_LIMITS as ra, utf8Decode as rc, identityRevocationValue as ri, pubkyProofCapability as rn, handoffAttemptSucceeded as ro, mergeLobby as rr, inviteLink as rs, shortAtprotoDid as rt, CommunitySession as s, statusCardText as sa, revokesIdentity as si, pubkyHomeserverOf as sn, handoffContextProof as so, readBeacon as sr, HANDOFF_CAPABILITY as ss, DID_FILE_MAX_BYTES as st, GROUP_TYPING_FRAME as t, ITEM_STATES as ta, toBase64Url as tc, boundVerifiedIdentity as ti, newPubkyProofFolder as tn, handoffAttemptAllowed as to, lobbyRecords as tr, decodeInviteCode as ts, normalizeAtprotoHandle as tt, decodeCommunityLink as u, heardTime as ua, emptyProofLedger as ui, dnsProofName as un, handoffEphemeral as uo, shouldBeHub as ur, deviceKeyZ32 as us, checkDidJws as ut, mergeKnocks as v, edgeParams as va, peekDhtMailbox as vi, recordsFromWellKnown as vn, handoffVersions as vo, sanitizeTypingStatus as vr, TURN_SETTLE_MS as vs, didWebFileUrl as vt, parseGroupWakeFrame as w, formatLocalTarget as wa, sanitizeFileName as wi, engineError as wn, readHandoffHello as wo, pinIsNewer as wr, nextTurnPosition as ws, signingKeys as wt, GroupWakeLimiter as x, RELAY_POLL_INTERVALS as xa, parseImageMeta as xi, wellKnownUrl as xn, readHandoffCancel as xo, PIN_LIMITS as xr, TURN_LAST_SEQUENCE as xs, parseDid as xt, readKnocks as y, DirectPathWatch as ya, DHT_FILE_CAPABILITY as yi, recordsName as yn, newHandoffId as yo, typingActivity as yr, classifyTurnRead as ys, didWebHost as yt, parseSshSignature as z, emptyLinkRecords as za, readForwarded as zi, GROUP_SIGNAL_FRAME as zn, ENROLL_PROOF as zo, HOLD_CAPABILITY as zr, PacketTooLargeError as zs, TEST_USDT_FAUCET_AMOUNT as zt };
+//#region ../core/src/appBundle.ts
+var APP_BUNDLE_MAGIC = "GHOSTLYAPP1";
+var MAGIC = utf8Encode(APP_BUNDLE_MAGIC);
+var APP_BUNDLE_LIMITS = {
+	/** The whole bundle, phase 1. */
+	bundleBytes: 16777216,
+	files: 64,
+	manifestBytes: 65536,
+	/** A path, in bytes (paths are ASCII). */
+	pathBytes: 128,
+	iconBytes: 262144,
+	screenshots: 8,
+	/** Lengths in Unicode code points. */
+	title: 40,
+	tagline: 80,
+	description: 2e3,
+	releaseNotes: 500,
+	version: 64,
+	license: 128,
+	/** An https URL, in characters. */
+	url: 512,
+	sources: 8
+};
+var APP_ICON_PATH = "icon.png";
+var SCREENSHOT_TYPES = /\.(png|jpg|webp)$/;
+/**
+* The permissions of phase 1 (WISP 1200 · Permissions). `internet`: the app reaches HTTPS and WSS servers of its
+* choosing (the client runs it in its network runner); without it, an app has no network.
+*/
+var APP_PERMISSIONS = [
+	"chat",
+	"internet",
+	"name"
+];
+var APP_CLIENTS = [
+	"web",
+	"desktop",
+	"extension"
+];
+/**
+* Where an app shows (WISP 1200 · Manifest, `view`). `chat`, the default when the manifest has none: inside a 1:1 chat
+* only, beside it on a wide screen. `full`: full screen, alone or from a chat, never beside one.
+*/
+var APP_VIEWS = ["chat", "full"];
+/** The view of a manifest: `chat` when it names none. */
+var appViewOf = (manifest) => manifest.view ?? "chat";
+var REQUIRED = [
+	"ghostlyApp",
+	"publisher",
+	"name",
+	"version",
+	"sequence",
+	"kind",
+	"title",
+	"tagline",
+	"entry",
+	"permissions",
+	"runtime",
+	"license",
+	"files"
+];
+var OPTIONAL = [
+	"description",
+	"view",
+	"sources",
+	"proofs",
+	"homepage",
+	"support",
+	"releaseNotes"
+];
+/** Reserved for phase 2 and refused in phase 1. */
+var RESERVED = ["price", "recovery"];
+var SEMVER = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/;
+var HOST = /^>=(0|[1-9]\d*)\.(0|[1-9]\d*)(\.(0|[1-9]\d*))?$/;
+var SEGMENT = /^[A-Za-z0-9._-]+$/;
+var codePoints = (s) => [...s].length;
+/** One line: no control character. */
+var isLine$1 = (v, max, min = 0) => typeof v === "string" && codePoints(v) >= min && codePoints(v) <= max && !/\p{Cc}/u.test(v);
+/** Text of several lines: no control character but the line feed. */
+var isText$1 = (v, max) => typeof v === "string" && codePoints(v) <= max && !/[^\P{Cc}\n]/u.test(v);
+var isSafeCount = (v, min) => typeof v === "number" && Number.isSafeInteger(v) && v >= min;
+var isObject$1 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+/**
+* An https URL as WISP 1200 takes one anywhere: at most 512 characters, no user or password, and on jsDelivr only
+* `https://cdn.jsdelivr.net/gh/<owner>/<repo>@<40-hex commit>/...`, since a branch, a tag, a range or `latest` is
+* served from a copy that moves.
+*/
+function isAppUrl(value) {
+	if (typeof value !== "string" || value.length > APP_BUNDLE_LIMITS.url || !value.startsWith("https://")) return false;
+	let url;
+	try {
+		url = new URL(value);
+	} catch {
+		return false;
+	}
+	if (url.protocol !== "https:" || url.username || url.password || !url.hostname) return false;
+	const host = url.hostname.toLowerCase();
+	if (host === "jsdelivr.net" || host.endsWith(".jsdelivr.net")) return host === "cdn.jsdelivr.net" && /^\/gh\/[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+@[0-9a-f]{40}\/./.test(url.pathname);
+	return true;
+}
+/**
+* An SPDX license expression, read lightly: identifiers (`MIT`, `GPL-3.0-or-later`, `LicenseRef-x`, `Apache-2.0+`)
+* joined by `AND` and `OR`, `WITH` an exception, and parentheses; or `proprietary`.
+*/
+function isAppLicense(value) {
+	if (typeof value !== "string" || value.length < 1 || value.length > APP_BUNDLE_LIMITS.license) return false;
+	const tokens = value.match(/\(|\)|[^\s()]+/g);
+	if (!tokens || tokens.join("").length !== value.replace(/\s/g, "").length) return false;
+	let i = 0;
+	const id = () => {
+		const t = tokens[i];
+		if (t && /^[A-Za-z0-9][A-Za-z0-9.-]*\+?$/.test(t) && ![
+			"AND",
+			"OR",
+			"WITH"
+		].includes(t)) {
+			i++;
+			return true;
+		}
+		return false;
+	};
+	const term = (depth) => {
+		if (tokens[i] === "(") {
+			i++;
+			if (depth > 8 || !expr(depth + 1) || tokens[i] !== ")") return false;
+			i++;
+			return true;
+		}
+		if (!id()) return false;
+		if (tokens[i] === "WITH") {
+			i++;
+			return id();
+		}
+		return true;
+	};
+	const expr = (depth) => {
+		if (!term(depth)) return false;
+		while (tokens[i] === "AND" || tokens[i] === "OR") {
+			i++;
+			if (!term(depth)) return false;
+		}
+		return true;
+	};
+	return expr(0) && i === tokens.length;
+}
+/** A path of a bundle: relative, `/`-separated, `[A-Za-z0-9._-]` per segment, no `.` or `..`, at most 128 bytes. */
+function isAppPath(value) {
+	if (typeof value !== "string" || value.length < 1 || value.length > APP_BUNDLE_LIMITS.pathBytes) return false;
+	return value.split("/").every((s) => SEGMENT.test(s) && s !== "." && s !== "..");
+}
+var bad = (field, detail = `${field} is not valid`) => ({
+	ok: false,
+	reason: "bad-field",
+	detail
+});
+/** Checks a parsed manifest against every rule and bound of WISP 1200 that the manifest alone decides. */
+function checkAppManifest(value) {
+	if (!isObject$1(value)) return bad("manifest", "The manifest is not an object");
+	if (value.ghostlyApp !== void 0 && value.ghostlyApp !== 1) return {
+		ok: false,
+		reason: "unsupported-format",
+		detail: "ghostlyApp is not 1"
+	};
+	for (const key of Object.keys(value)) {
+		if (RESERVED.includes(key)) return {
+			ok: false,
+			reason: "reserved-key",
+			detail: key
+		};
+		if (!REQUIRED.includes(key) && !OPTIONAL.includes(key)) return {
+			ok: false,
+			reason: "unknown-key",
+			detail: key
+		};
+	}
+	for (const key of REQUIRED) if (!(key in value)) return {
+		ok: false,
+		reason: "missing-key",
+		detail: key
+	};
+	const m = value;
+	if (!isAppKey(m.publisher)) return bad("publisher");
+	if (typeof m.name !== "string" || !APP_NAME.test(m.name)) return bad("name");
+	if (typeof m.version !== "string" || m.version.length > APP_BUNDLE_LIMITS.version || !SEMVER.test(m.version)) return bad("version");
+	if (!isSafeCount(m.sequence, 1)) return bad("sequence");
+	if (m.kind !== "mini-app") return bad("kind");
+	if (!isLine$1(m.title, APP_BUNDLE_LIMITS.title, 1)) return bad("title");
+	if (!isLine$1(m.tagline, APP_BUNDLE_LIMITS.tagline, 1)) return bad("tagline");
+	if (m.description !== void 0 && !isText$1(m.description, APP_BUNDLE_LIMITS.description)) return bad("description");
+	if (m.releaseNotes !== void 0 && !isLine$1(m.releaseNotes, APP_BUNDLE_LIMITS.releaseNotes)) return bad("releaseNotes");
+	const permissions = m.permissions;
+	if (!Array.isArray(permissions) || new Set(permissions).size !== permissions.length || !permissions.every((p) => APP_PERMISSIONS.includes(p))) return bad("permissions");
+	if (m.view !== void 0 && !APP_VIEWS.includes(m.view)) return bad("view", `view is "chat" or "full"`);
+	const runtime = m.runtime;
+	if (!isObject$1(runtime) || Object.keys(runtime).length !== 2 || typeof runtime.host !== "string" || !HOST.test(runtime.host)) return bad("runtime");
+	const clients = runtime.clients;
+	if (!Array.isArray(clients) || clients.length < 1 || new Set(clients).size !== clients.length || !clients.every((c) => APP_CLIENTS.includes(c))) return bad("runtime");
+	if (!isAppLicense(m.license)) return bad("license");
+	if (m.sources !== void 0 && (!Array.isArray(m.sources) || m.sources.length > APP_BUNDLE_LIMITS.sources || !m.sources.every(isAppUrl))) return bad("sources");
+	if (m.homepage !== void 0 && !isAppUrl(m.homepage)) return bad("homepage");
+	if (m.support !== void 0 && !isAppUrl(m.support)) return bad("support");
+	if (m.proofs !== void 0) {
+		if (!Array.isArray(m.proofs)) return bad("proofs");
+		if (m.proofs.length > 0) return {
+			ok: false,
+			reason: "proofs-unsupported",
+			detail: "Publisher proofs come after phase 1"
+		};
+	}
+	const files = m.files;
+	if (!Array.isArray(files)) return bad("files");
+	if (files.length > APP_BUNDLE_LIMITS.files) return {
+		ok: false,
+		reason: "too-many-files",
+		detail: `${files.length} files`
+	};
+	const lower = /* @__PURE__ */ new Set();
+	let previous = "";
+	let screenshots = 0;
+	for (const f of files) {
+		if (!isObject$1(f) || Object.keys(f).length !== 3 || !isAppPath(f.path) || !isSafeCount(f.size, 0) || !isAppHash(f.sha256)) return isObject$1(f) && typeof f.path === "string" && !isAppPath(f.path) ? {
+			ok: false,
+			reason: "bad-path",
+			detail: f.path
+		} : bad("files", "A file is not {path, size, sha256}");
+		if (lower.has(f.path.toLowerCase())) return {
+			ok: false,
+			reason: "path-collision",
+			detail: f.path
+		};
+		lower.add(f.path.toLowerCase());
+		if (f.path <= previous) return {
+			ok: false,
+			reason: "files-unsorted",
+			detail: f.path
+		};
+		previous = f.path;
+		if (f.size > APP_BUNDLE_LIMITS.bundleBytes) return bad("files", `${f.path} is larger than a bundle`);
+		if (f.path.startsWith("screenshots/")) {
+			if (!SCREENSHOT_TYPES.test(f.path)) return {
+				ok: false,
+				reason: "bad-path",
+				detail: `${f.path}: a screenshot is .png, .jpg or .webp`
+			};
+			if (++screenshots > APP_BUNDLE_LIMITS.screenshots) return {
+				ok: false,
+				reason: "too-many-screenshots"
+			};
+		}
+		if (f.path === "icon.png" && f.size > APP_BUNDLE_LIMITS.iconBytes) return {
+			ok: false,
+			reason: "bad-icon",
+			detail: "icon.png is larger than 256 KiB"
+		};
+	}
+	const entry = m.entry;
+	if (typeof entry !== "string" || !entry.endsWith(".html") || !files.some((f) => isObject$1(f) && f.path === entry)) return {
+		ok: false,
+		reason: "bad-entry",
+		detail: "The entry is not an .html file of the bundle"
+	};
+	return {
+		ok: true,
+		manifest: m
+	};
+}
+/** The digest of a version: SHA-256 of its canonical manifest bytes, base64url. */
+function appDigest(manifestBytes) {
+	return toBase64Url(sha256(manifestBytes));
+}
+var u32 = (b, at) => (b[at] << 24 >>> 0) + (b[at + 1] << 16) + (b[at + 2] << 8) + b[at + 3];
+/** Reads and checks a bundle (the order of the checks is part of the format: see above). */
+function readAppBundle(bytes) {
+	if (bytes.length > APP_BUNDLE_LIMITS.bundleBytes) return {
+		ok: false,
+		reason: "too-large"
+	};
+	const head = bytes.subarray(0, MAGIC.length);
+	if (!head.every((b, i) => b === MAGIC[i])) return {
+		ok: false,
+		reason: "magic"
+	};
+	if (head.length < MAGIC.length) return {
+		ok: false,
+		reason: "truncated"
+	};
+	let at = MAGIC.length;
+	if (bytes.length < at + 4) return {
+		ok: false,
+		reason: "truncated"
+	};
+	const manifestLength = u32(bytes, at);
+	at += 4;
+	if (manifestLength > APP_BUNDLE_LIMITS.manifestBytes) return {
+		ok: false,
+		reason: "manifest-too-large"
+	};
+	if (bytes.length < at + manifestLength + 4) return {
+		ok: false,
+		reason: "truncated"
+	};
+	const manifestBytes = bytes.subarray(at, at + manifestLength);
+	at += manifestLength;
+	const statementLength = u32(bytes, at);
+	at += 4;
+	if (bytes.length < at + statementLength) return {
+		ok: false,
+		reason: "truncated"
+	};
+	const statementBytes = bytes.subarray(at, at + statementLength);
+	at += statementLength;
+	const read = readCanonicalJson(manifestBytes);
+	if (!read.ok) return read;
+	const checked = checkAppManifest(read.value);
+	if (!checked.ok) return checked;
+	const manifest = checked.manifest;
+	const statement = readAppSignature(statementBytes);
+	if (!statement.ok) return statement;
+	const total = manifest.files.reduce((sum, f) => sum + f.size, 0);
+	const rest = bytes.length - at;
+	if (total > rest) return {
+		ok: false,
+		reason: "truncated"
+	};
+	if (total < rest) return {
+		ok: false,
+		reason: "trailing-bytes",
+		detail: `${rest - total} bytes past the last file`
+	};
+	const signed = verifyAppSignature(APP_PREFIXES.app, manifestBytes, statement.signature, manifest.publisher);
+	if (!signed.ok) return signed;
+	const files = /* @__PURE__ */ new Map();
+	for (const f of manifest.files) {
+		const content = bytes.subarray(at, at + f.size);
+		at += f.size;
+		if (toBase64Url(sha256(content)) !== f.sha256) return {
+			ok: false,
+			reason: "file-hash",
+			detail: f.path
+		};
+		files.set(f.path, content);
+	}
+	const icon = files.get(APP_ICON_PATH);
+	if (icon) {
+		const size = imageSize(icon);
+		if (!size || icon[0] !== 137 || size.width !== size.height) return {
+			ok: false,
+			reason: "bad-icon",
+			detail: "icon.png is not a square PNG"
+		};
+	}
+	return {
+		ok: true,
+		bundle: {
+			manifest,
+			manifestBytes,
+			digest: appDigest(manifestBytes),
+			signature: statement.signature,
+			files
+		}
+	};
+}
+/** Puts a bundle's parts together, checking nothing: for builders, and for tests that need a broken bundle. */
+function assembleAppBundle(manifestBytes, statementBytes, files) {
+	const total = MAGIC.length + 8 + manifestBytes.length + statementBytes.length + files.reduce((s, f) => s + f.length, 0);
+	const out = new Uint8Array(total);
+	const view = new DataView(out.buffer);
+	let at = 0;
+	out.set(MAGIC, at);
+	at += MAGIC.length;
+	view.setUint32(at, manifestBytes.length);
+	at += 4;
+	out.set(manifestBytes, at);
+	at += manifestBytes.length;
+	view.setUint32(at, statementBytes.length);
+	at += 4;
+	out.set(statementBytes, at);
+	at += statementBytes.length;
+	for (const f of files) {
+		out.set(f, at);
+		at += f.length;
+	}
+	return out;
+}
+//#endregion
+//#region ../core/src/appStore.ts
+var APP_STORE_LIMITS = {
+	/** The index's bytes, uncompressed. */
+	indexBytes: 16777216,
+	/** How far ahead `expires` may be. */
+	expiresAheadS: 7776e3,
+	name: 40,
+	description: 2e3,
+	title: 40,
+	tagline: 80,
+	/** `category`, `developer`, `submitter`. */
+	label: 40,
+	reason: 200,
+	urls: 4,
+	apps: 4096,
+	removed: 4096,
+	revoked: 4096
+};
+var APP_STORE_KINDS = ["curated", "indexed"];
+var isObject = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var isLine = (v, max, min = 0) => typeof v === "string" && [...v].length >= min && [...v].length <= max && !/\p{Cc}/u.test(v);
+var isText = (v, max) => typeof v === "string" && [...v].length <= max && !/[^\P{Cc}\n]/u.test(v);
+var isCount = (v, min) => typeof v === "number" && Number.isSafeInteger(v) && v >= min;
+var fine = { ok: true };
+function keysOf(value, required, optional) {
+	for (const k of Object.keys(value)) if (!required.includes(k) && !optional.includes(k)) return {
+		ok: false,
+		reason: "unknown-key",
+		detail: k
+	};
+	for (const k of required) if (!(k in value)) return {
+		ok: false,
+		reason: "missing-key",
+		detail: k
+	};
+	return fine;
+}
+var LISTING_REQUIRED = [
+	"ref",
+	"sequence",
+	"digest",
+	"urls",
+	"title",
+	"tagline"
+];
+var LISTING_OPTIONAL = [
+	"category",
+	"developer",
+	"submitter",
+	"repo",
+	"support"
+];
+/** Checks one entry of `apps`, which is also the whole of a `listing.json`. */
+function checkAppListing(value) {
+	if (!isObject(value)) return {
+		ok: false,
+		reason: "bad-field",
+		detail: "A listing is not an object"
+	};
+	const keys = keysOf(value, LISTING_REQUIRED, LISTING_OPTIONAL);
+	if (!keys.ok) return keys;
+	const bad = (field) => ({
+		ok: false,
+		reason: "bad-field",
+		detail: `apps: ${field}`
+	});
+	if (!isAppRef(value.ref)) return bad("ref");
+	if (!isCount(value.sequence, 1)) return bad("sequence");
+	if (!isAppHash(value.digest)) return bad("digest");
+	const urls = value.urls;
+	if (!Array.isArray(urls) || urls.length < 1 || urls.length > APP_STORE_LIMITS.urls || !urls.every(isAppUrl)) return bad("urls");
+	if (!isLine(value.title, APP_STORE_LIMITS.title, 1)) return bad("title");
+	if (!isLine(value.tagline, APP_STORE_LIMITS.tagline, 1)) return bad("tagline");
+	for (const k of [
+		"category",
+		"developer",
+		"submitter"
+	]) if (value[k] !== void 0 && !isLine(value[k], APP_STORE_LIMITS.label, 1)) return bad(k);
+	for (const k of ["repo", "support"]) if (value[k] !== void 0 && !isAppUrl(value[k])) return bad(k);
+	return fine;
+}
+function checkRemoval(value) {
+	if (!isObject(value)) return {
+		ok: false,
+		reason: "bad-field",
+		detail: "A removal is not an object"
+	};
+	const keys = keysOf(value, [
+		"ref",
+		"digest",
+		"reason",
+		"at"
+	], []);
+	if (!keys.ok) return keys;
+	if (!isAppRef(value.ref) || !isAppHash(value.digest) || !isLine(value.reason, APP_STORE_LIMITS.reason, 1) || !isCount(value.at, 0)) return {
+		ok: false,
+		reason: "bad-field",
+		detail: "removed: not {ref, digest, reason, at}"
+	};
+	return fine;
+}
+var STORE_REQUIRED = [
+	"ghostlyStore",
+	"key",
+	"name",
+	"kind",
+	"sequence",
+	"expires",
+	"apps",
+	"removed",
+	"revoked"
+];
+/**
+* Checks an index's fields and bounds, and every revocation it carries (one that does not verify refuses the index:
+* the store copied it, so a broken one is the store's fault). The signature and `expires` are `readAppStore`'s.
+*/
+function checkAppStoreIndex(value) {
+	if (!isObject(value)) return {
+		ok: false,
+		reason: "bad-field",
+		detail: "The index is not an object"
+	};
+	if (value.ghostlyStore !== void 0 && value.ghostlyStore !== 1) return {
+		ok: false,
+		reason: "unsupported-format",
+		detail: "ghostlyStore is not 1"
+	};
+	const keys = keysOf(value, STORE_REQUIRED, ["description"]);
+	if (!keys.ok) return keys;
+	const bad = (field) => ({
+		ok: false,
+		reason: "bad-field",
+		detail: field
+	});
+	if (!isAppKey(value.key)) return bad("key");
+	if (!isLine(value.name, APP_STORE_LIMITS.name, 1)) return bad("name");
+	if (value.description !== void 0 && !isText(value.description, APP_STORE_LIMITS.description)) return bad("description");
+	if (!APP_STORE_KINDS.includes(value.kind)) return bad("kind");
+	if (!isCount(value.sequence, 1)) return bad("sequence");
+	if (!isCount(value.expires, 0)) return bad("expires");
+	const { apps, removed, revoked } = value;
+	if (!Array.isArray(apps) || apps.length > APP_STORE_LIMITS.apps) return bad("apps");
+	const refs = /* @__PURE__ */ new Set();
+	for (const listing of apps) {
+		const checked = checkAppListing(listing);
+		if (!checked.ok) return checked;
+		const ref = listing.ref;
+		if (refs.has(ref)) return {
+			ok: false,
+			reason: "duplicate-app",
+			detail: ref
+		};
+		refs.add(ref);
+	}
+	if (!Array.isArray(removed) || removed.length > APP_STORE_LIMITS.removed) return bad("removed");
+	for (const entry of removed) {
+		const checked = checkRemoval(entry);
+		if (!checked.ok) return checked;
+	}
+	if (!Array.isArray(revoked) || revoked.length > APP_STORE_LIMITS.revoked) return bad("revoked");
+	for (const entry of revoked) {
+		const read = readAppRevocation(entry);
+		if (!read.ok) return {
+			ok: false,
+			reason: "bad-revocation",
+			detail: read.detail ?? read.reason
+		};
+	}
+	return fine;
+}
+/**
+* Reads `ghostly-store.json` with its `ghostly-store.sig`, in this order: size, JSON, canonical bytes, fields and
+* revocations, the signature statement, the key the reader holds for this store (when it holds one), the signature,
+* then `expires` against `now` (seconds): more than 90 days ahead is refused, past is `expired`.
+*/
+function readAppStore(indexBytes, sigBytes, now, heldKey) {
+	if (indexBytes.length > APP_STORE_LIMITS.indexBytes) return {
+		ok: false,
+		reason: "too-large"
+	};
+	const read = readCanonicalJson(indexBytes);
+	if (!read.ok) return read;
+	const checked = checkAppStoreIndex(read.value);
+	if (!checked.ok) return checked;
+	const index = read.value;
+	const statement = readAppSignature(sigBytes);
+	if (!statement.ok) return statement;
+	if (heldKey !== void 0 && index.key !== heldKey) return {
+		ok: false,
+		reason: "store-key",
+		detail: "Another key than the store's"
+	};
+	const signed = verifyAppSignature(APP_PREFIXES.store, indexBytes, statement.signature, index.key);
+	if (!signed.ok) return signed;
+	if (index.expires > now + APP_STORE_LIMITS.expiresAheadS) return {
+		ok: false,
+		reason: "expires-too-far"
+	};
+	return {
+		ok: true,
+		store: {
+			index,
+			digest: toBase64Url(sha256(indexBytes)),
+			expired: index.expires < now
+		}
+	};
+}
+/** Signs an index with the store key: its canonical bytes and the `ghostly-store.sig` bytes. Throws on a bad index. */
+async function signAppStore(index, signer) {
+	if (index.key !== toZ32(signer.publicKey)) throw new Error("A store index is signed by its own key");
+	const checked = checkAppStoreIndex(JSON.parse(JSON.stringify(index)));
+	if (!checked.ok) throw new Error(`Not a valid store index (${checked.reason}${checked.detail ? `: ${checked.detail}` : ""})`);
+	const { bytes, signature } = await signAppObject(APP_PREFIXES.store, index, signer);
+	return {
+		indexBytes: bytes,
+		sigBytes: canonicalJsonBytes(signature),
+		signature
+	};
+}
+//#endregion
+//#region ../core/src/appUpdates.ts
+function appUpdateDecision(installed, candidate) {
+	if (installed.ref !== candidate.ref) return "other-app";
+	if (candidate.sequence > installed.sequence) return "update";
+	if (candidate.sequence < installed.sequence) return "rollback";
+	return candidate.digest === installed.digest ? "same" : "equivocation";
+}
+/** The permissions an update adds: when there is any, the update waits for the person, who sees only these. */
+function addedAppPermissions(granted, requested) {
+	return requested.filter((p) => !granted.includes(p));
+}
+function planAppUpdate(installed, candidate) {
+	const decision = appUpdateDecision(installed, candidate);
+	if (decision !== "update") return {
+		action: "refuse",
+		decision
+	};
+	const added = addedAppPermissions(installed.permissions, candidate.permissions);
+	return added.length ? {
+		action: "ask",
+		added
+	} : { action: "install" };
+}
+/**
+* The revocation that stops a version, or null: one signed by the app's own publisher (a reader verified it) that names
+* its digest, or reaches its `sequence` with `upTo`.
+*/
+function appRevocationFor(version, revocations) {
+	const publisher = appRefPublisher(version.ref);
+	for (const r of revocations) {
+		const s = r.statement;
+		if (s.app !== version.ref || r.signature.key !== publisher) continue;
+		if ("digests" in s ? s.digests.includes(version.digest) : version.sequence <= s.upTo) return r;
+	}
+	return null;
+}
+function checkAppBeforeRun(version, stores, revocations = []) {
+	const revocation = appRevocationFor(version, [...revocations, ...stores.flatMap((s) => s.revoked)]);
+	if (revocation) return {
+		status: "revoked",
+		revocation
+	};
+	const by = stores.flatMap((s) => s.removed.filter((r) => r.ref === version.ref && r.digest === version.digest).map((r) => ({
+		store: s.key,
+		name: s.name,
+		reason: r.reason,
+		at: r.at
+	})));
+	return by.length ? {
+		status: "removed",
+		by
+	} : { status: "ok" };
+}
+function appStoreDecision(held, read) {
+	if (!held) return "new";
+	if (held.key !== read.key) return "other-key";
+	if (read.sequence > held.sequence) return "update";
+	if (read.sequence < held.sequence) return "rollback";
+	return read.digest === held.digest ? "same" : "equivocation";
+}
+//#endregion
+export { parseSshPublicKey as $, signAppRevocation as $a, formatFileSize as $i, GROUP_FILE_LIMITS as $n, handoffEphemeral as $o, WAKE_CALL_INTERVAL_MS as $r, deviceKeyZ32 as $s, SEPOLIA_TEST_USDT_FAUCET as $t, entryParams as A, replySnippet as Aa, createRelayPayload as Ac, IdentityExchange as Ai, nip05RootKey as An, LEGACY_SERVICES as Ao, newerHead as Ar, enrollCancelReason as As, didWebDocumentUrl as At, GROUP_REACTED_FRAME as B, claimedTime as Ba, sanitizeAvatar as Bc, emptyProofLedger as Bi, engineText as Bn, HANDOFF_REQUEST as Bo, transferStalled as Br, deviceInviteJoinerParams as Bs, staticDidDocument as Bt, GROUP_READ_NOTE_COMMUNITY as C, reactionEmoji as Ca, setLinkTraceSink as Cc, DHT_TEXT_CAPABILITY as Ci, DOMAIN_FILE_MAX_BYTES as Cn, callRtcConfig as Co, beaconRecords as Cr, signTombstone as Cs, DID_JWS_MAX_LENGTH as Ct, KNOCK_TTL_MS as D, wireReaction as Da, withRequestOptions as Dc, IDENTITY_MAX_VALIDITY as Di, domainWellKnownFile as Dn, signalHasVideo as Do, lobbyRecords as Dr, ENROLL_HELLO as Ds, didGhostlyServiceEntry as Dt, encodeCommunityLink as E, validReactionNumber as Ea, isDiscoveryBudgetError as Ec, IDENTITY_MAX_EVIDENCE as Ei, domainTxtRecord as En, parseCallSignal as Eo, lobbyKeys as Er, ENROLL_GRANT as Es, checkDidSignature as Et, GROUP_WAKE_FRAME as F, buttonLabelClash as Fa, identityFromSeed as Fc, newIdentityBinding as Fi, txtValue as Fn, HANDOFF_HAVE as Fo, readLobby as Fr, enrollProofFrame as Fs, normalizeDid as Ft, GROUP_EDIT_TEXT_BYTES as G, APP_STATEMENT_LIMITS as Ga, toZ32 as Gc, irohRelayUrl as Gi, findEndpoint as Gn, handoffAttemptFailed as Go, typingActivity as Gr, encodeInviteCode as Gs, encodeDidDhtPacket as Gt, GroupSession as H, receivedTimestamp as Ha, fromBase64Url as Hc, TRANSPORTS as Hi, ENDPOINT as Hn, HANDOFF_VERIFIED as Ho, TYPING_REFRESH_MS as Hr, OwnInviteError as Hs, didDhtDocument as Ht, GroupWakeLimiter as I, checkStatusCard as Ia, identityFromSeedB64 as Ic, receivedIdentityStatus as Ii, wellKnownUrl as In, HANDOFF_HELLO as Io, shouldBeHub as Ir, readEnrollGrant as Is, parseDid as It, mentionsMember as J, checkAppRevokeStatement as Ja, peekDhtMailbox as Ji, parseFedimintRequestPayload as Jn, handoffCancelFrame as Jo, mayPin as Jr, DEVICES_CAPABILITY as Js, ETHEREUM_USDT as Jt, carryMentions as K, appFingerprint as Ka, utf8Decode as Kc, DHT_FILE_TOO_LARGE as Ki, isFederationId as Kn, handoffAttemptSucceeded as Ko, GROUP_PIN_FRAME as Kr, inviteLink as Ks, resolveDidDht as Kt, groupWakeFrame as L, sameButtonText as La, publicKeyFromZ32 as Lc, revokesIdentity as Li, requestLnurlInvoice as Ln, HANDOFF_OFFER as Lo, ChatFiles as Lr, readEnrollHello as Ls, parseDidDocument as Lt, knockRecords as M, ITEM_STATES as Ma, openRelayPayload as Mc, emptyIdentityLedger as Mi, recordsFromTxt as Mn, HANDOFF_ACK as Mo, rankHubs as Mr, enrollDoneFrame as Ms, didWebFileNames as Mt, mergeKnocks as N, RUN_RESULTS as Na, parseRelayPayload as Nc, identityRevocationValue as Ni, recordsFromWellKnown as Nn, HANDOFF_CANCEL as No, readBeacon as Nr, enrollGrantFrame as Ns, didWebFileUrl as Nt, decodeGroupEntryLink as O, pairedReplyAuthor as Oa, PacketTooLargeError as Oc, IDENTITY_REVOCATION_LABEL as Oi, encodeDnsQuery as On, emptyLinkRecords as Oo, mergeBeacon as Or, ENROLL_PROOF as Os, didJwsAlg as Ot, readKnocks as P, STATUS_CARD_LIMITS as Pa, createIdentity as Pc, identityStatement as Pi, recordsName as Pn, HANDOFF_DONE as Po, readBeaconHead as Pr, enrollHelloFrame as Ps, didWebHost as Pt, SshSigError as Q, signAppObject as Qa, readImageMeta as Qi, pairedMessageFrame as Qn, handoffDigest as Qo, readPin as Qr, deviceEchoNonce as Qs, SEPOLIA_TEST_USDT as Qt, groupWakes as R, statusCardText as Ra, verify as Rc, lastSharedWithMe as Ri, resolveLightningDestination as Rn, HANDOFF_PAKE as Ro, FILE_LIMITS as Rr, verifyEnrollProof as Rs, parseDidSignaturePaste as Rt, CommunitySession as S, queueReaction as Sa, normalizeRelayUrl as Sc, CapsExchange as Si, pubkyHomeserverOf as Sn, buildSdpFromSignal as So, beaconKeys as Sr, setUpdateFrame as Ss, DID_FILE_MAX_BYTES as St, decodeCommunityLink as T, readReaction as Ta, budgetRetryMs as Tc, dialDescriptors as Ti, dnsProofName as Tn, extractParamsFromSdp as To, freshHubs as Tr, ENROLL_DONE as Ts, checkDidJws as Tt, COMMUNITY_EDIT_FRAME as U, shownTime as Ua, randomBytes as Uc, automaticTransport as Ui, cashuRequestPayload as Un, filePartName as Uo, TypingSender as Ur, createChatInvite as Us, didDhtFromPublicKey as Ut, GROUP_READ_NOTE as V, heardTime as Va, bytesEqual as Vc, validExternalKey as Vi, decodeBolt11 as Vn, HANDOFF_TIMINGS as Vo, TYPING_KINDS as Vr, readDeviceInvite as Vs, strictBase64Url as Vt, GROUP_EDIT_FRAME as W, APP_PREFIXES as Wa, toBase64Url as Wc, irohDescriptor as Wi, fedimintRequestPayload as Wn, handoffAttemptAllowed as Wo, sanitizeTypingStatus as Wr, decodeInviteCode as Ws, encodeDidDhtDeactivated as Wt, SSHSIG_MAX_ARMOR as X, isAppRef as Xa, dhtFileId as Xi, INVITE_TAKEN as Xn, handoffContextProof as Xo, pinIsNewer as Xr, HANDOFF_CAPABILITY as Xs, ONCHAIN_PROVIDER as Xt, groupName as Y, isAppKey as Ya, DHT_FILE_CAPABILITY as Yi, GhostLink as Yn, handoffContext as Yo, nextPinNumber as Yr, ENROLL_CAPABILITY as Ys, EVM_TEST_CHAINS as Yt, SSHSIG_NAMESPACE as Z, readAppRevocations as Za, parseImageMeta as Zi, LIVENESS_PING_MS as Zn, handoffDataFrame as Zo, pinNumberHolds as Zr, deviceEchoFrame as Zs, PaymentPreflightError as Zt, GroupTypingBoard as _, COMMUNITY_REACTION_FRAME as _a, turnKeys as _c, HOLD_LIMITS as _i, normalizePubkyKey as _n, decodeControl as _o, MESH_HUBS as _r, sealHandoffPiece as _s, parseAtprotoDidDocument as _t, checkAppStoreIndex as a, baseMime as aa, TURN_PUT_WINDOW_MS as ac, wakeRequest as ai, formatPaymentAmount as an, rosterHas as ao, isGroupMessageId as ar, handoffRetryAfter as as, BitcoinAddressError as at, sealGroupTyping as b, ReactionWindow as ba, RelayTransport as bc, newMailbox as bi, pubkyProofPath as bn, RTC_CONFIG as bo, pickMeshHubs as br, readSetUpdate as bs, verifyAtprotoRecordProof as bt, APP_BUNDLE_LIMITS as c, voicePeaksOf as ca, classifyTurnRead as cc, chatAppId as ci, SPARK_NETWORKS as cn, DirectPathWatch as co, readGroupWant as cr, newHandoffId as cs, ATPROTO_FULL_SCOPE as ct, appViewOf as d, EDIT_RATE_WINDOW_MS as da, TURN_MAX as dc, BUTTONS_CAPABILITY as di, sparkInvoiceDetails as dn, presenceSeenAt as do, GROUP_SIGNAL_FRAME as dr, readHandoffDone as ds, atprotoDidMethod as dt, safeBlobType as ea, deviceLinkPairing as ec, WakeLimiter as ei, TEST_USDT_FAUCET_AMOUNT as en, canonicalJson as eo, GROUP_HAVE_FRAME as er, handoffHelloFrame as es, parseSshSignature as et, assembleAppBundle as f, RateWindow as fa, firstDeviceSetSecret as fc, EDIT_CAPABILITY as fi, isBitcoinAddress as fn, GhostlyHttpError as fo, SIGNAL_FRESH_MS as fr, readHandoffHave as fs, atprotoProofRecord as ft, GROUP_TYPING_FRAME as g, readForwarded as ga, signTurnRelease as gc, HOLD_DATED_BACK_MS as gi, newPubkyProofFolder as gn, LIMITS as go, readGroupSignal as gr, readHandoffVerified as gs, normalizeAtprotoHandle as gt, readAppBundle as h, forwardedAgain as ha, signTurnPacket as hc, HOLD_CAPABILITY as hi, isPubkyProofFolder as hn, webLocalFetch as ho, groupSignalFrame as hr, readHandoffTurnFrame as hs, isAtprotoDid as ht, planAppUpdate as i, VOICE_LIMITS as ia, webCryptoSigner as ic, relayRequest as ii, assertWholeSats as in, MEMBER_KEY as io, groupFileFallback as ir, handoffReleaseFrame as is, verifyBitcoinMessage as it, knockIdentity as j, BUTTON_ID as ja, newerPacket as jc, boundVerifiedIdentity as ji, normalizeDomain as jn, serviceIdFromName as jo, pickHubs as jr, enrollDigits as js, didWebFile as jt, encodeGroupEntryLink as k, readReply as ka, RELAY_PAYLOAD_MAX_BYTES as kc, IdentityCheckUnavailable as ki, isPublicAddress as kn, HTTP_SERVICE_PROTO as ko, mergeLobby as kr, enrollCancelFrame as ks, didSignedMessages as kt, APP_BUNDLE_MAGIC as l, parseVideoMeta as la, turnPutSummary as lc, isAppVersion as li, SPARK_PROVIDER as ln, EXPECT_PEER_MS as lo, readGroupWantNo as lr, readHandoffAck as ls, ATPROTO_PROOF_COLLECTION as lt, isAppUrl as m, parseLinkPreview as ma, readTurnPacket as mc, UPGRADE_CAPABILITY as mi, isPubkyKey as mn, parseLocalTarget as mo, SIGNAL_REPLY_MS as mr, readHandoffPake as ms, checkAtprotoProofRecord as mt, appUpdateDecision as n, sanitizeMime as na, newDeviceSetSecret as nc, newWakeToken as ni, WALLET_NETWORKS as nn, GROUP_MEMBER_CAP as no, GROUP_WANT_NO_FRAME as nr, handoffOfferFrame as ns, sshSignCommand as nt, readAppStore as o, fileMessageText as oa, TURN_RAISE_READ_TIMEOUT_MS as oc, checkPushEndpoint as oi, validatePaymentTarget as on, verifyCommitSignature as oo, readGroupFileMeta as or, handoffStreamKey as os, decodeAnyBitcoinAddress as ot, checkAppManifest as p, dhtEditId as pa, nextTurnPosition as pc, STATUS_CARD_CAPABILITY as pi, PUBKY_PROOF_MAX_BYTES as pn, formatLocalTarget as po, SIGNAL_HOLD_MS as pr, readHandoffHello as ps, atprotoProofRkey as pt, parseCommunityEdit as q, appRef as qa, utf8Encode as qc, DHT_MESSAGE_TTL as qi, parseCashuRequestPayload as qn, handoffBusyFrame as qo, PIN_LIMITS as qr, inviteOwnership as qs, signDidDhtPacket as qt, checkAppBeforeRun as r, PLAYABLE_AUDIO as ra, seedSigner as rc, parseWakeFrame as ri, assertTokenUnits as rn, MAX_GROUP_CHAIN as ro, fetchesByItself as rr, handoffPakeFrame as rs, verifySshSignature as rt, signAppStore as s, parseVoiceMeta as sa, TURN_SETTLE_MS as sc, vapidKeysMatch as si, walletNetworkOf as sn, edgeParams as so, readGroupHave as sr, handoffVersions as ss, ATPROTO_DECLARED_SCOPE as st, appStoreDecision as t, sanitizeFileName as ta, devicePingFrame as tc, deviceWakeRequest as ti, USDT_PUBLIC_RPC as tn, canonicalJsonBytes as to, GROUP_WANT_FRAME as tr, handoffManifestFrames as ts, sameSshKey as tt, appDigest as u, EDIT_BUFFER_MS as ua, TURN_LAST_SEQUENCE as uc, APPS_CAPABILITY as ui, sparkAddressKind as un, RELAY_POLL_INTERVALS as uo, CarriedTransport as ur, readHandoffCancel as us, ATPROTO_PROOF_SCOPE as ut, groupTypingEpoch as v, GROUP_REACTION_FRAME as va, turnName as vc, HoldKeys as vi, pubkyProofCapability as vn, encodeControl as vo, mayBeHub as vr, SET_ACK as vs, shortAtprotoDid as vt, communityHasFrame as w, reactionIsNewer as wa, traceLink as wc, capsDescriptors as wi, decodeDnsResponse as wn, callSignalHeardAt as wo, doorHubs as wr, verifySetUpdate as ws, DidError as wt, COMMUNITY_LIMITS as x, nextReactionNumber as xa, currentRelays as xc, readManifest as xi, homeserverWebEndpoint as xn, answersOffer as xo, COMMUNITY_TOPOLOGY as xr, setAckFrame as xs, DID_DOCUMENT_MAX_BYTES as xt, openGroupTyping as y, REACTION_LIMITS as ya, DEFAULT_RELAYS as yc, HoldRefusedError as yi, pubkyProofFile as yn, CALL_SIGNAL_MAX_AGE_MS as yo, meshHubs as yr, SET_UPDATE as ys, AtprotoProofError as yt, parseGroupWakeFrame as z, arrivalKey as za, MAX_AVATAR_LENGTH as zc, PeerProofs as zi, engineError as zn, HANDOFF_PIECE_BYTES as zo, transferEnded as zr, createDeviceInvite as zs, signingKeys as zt };
 
-//# sourceMappingURL=src-K3NijMq-.js.map
+//# sourceMappingURL=src-DtxVo2Rm.js.map