@ghostlytools/cli 1.2.0 → 1.2.1

package/dist/assets/{src-BMUcYQ7b.js → src-aKGjb_yz.js}

@@ -764,12 +764,15 @@ var asker = (options, write) => ({
 	write,
 	signal: !!options.signal,
 	watch: !!options.watch && !write,
-	watchWrite: !!options.watch && write
+	watchWrite: !!options.watch && write,
+	departed: !!options.departed && !write
 });
 /** A 1:1 chat's request: neither a group's nor a background one. */
 var isChat = (who) => !who.background && !who.group;
 /** A 1:1 chat's offer or answer, or its read for the answer to its offer: it may use the allowance (`SIGNALING_ALLOWANCE_SHARE`). */
 var isChatSignal = (who) => who.signal && isChat(who);
+/** A 1:1 chat's read of a contact that just went away: a few may use the chat's allowance (`DEPARTED_READS`). */
+var isDepartedRead = (who) => who.departed && isChat(who);
 /** A group's edge looking fast for a signal (`GROUP_BURST_MS`). */
 var isGroupUrgentRead = (who) => who.group && who.urgent && !who.write && !who.background;
 /**
@@ -887,7 +890,8 @@ var CATCH_UP_ASKER = {
 	write: true,
 	signal: false,
 	watch: false,
-	watchWrite: false
+	watchWrite: false,
+	departed: false
 };
 /** Keys whose last relay is remembered for their next read (`resolve`): a profile's links and lookups, with room. */
 var READ_TURNS_KEPT = 512;
@@ -968,6 +972,8 @@ var RelayTransport = class {
 	spentWatch = /* @__PURE__ */ new Map();
 	/** Groups' reads past the limit on each relay in the last `GROUP_OVER_PACE_MS` (`GROUP_SIGNALING_ALLOWANCE_SHARE`). */
 	spentGroupOver = /* @__PURE__ */ new Map();
+	/** Per contact, its departed reads past the limit in the last minute, every relay together (`DEPARTED_READS`). */
+	departedOver = /* @__PURE__ */ new Map();
 	/**
 	* Per key a group reads (not in the background), when a read of it last went out and when it last asked: whose turn
 	* it is under the watch share (`WATCH_SHARE`) and while the groups' reads are rationed (`GROUP_RATION_WINDOW_MS`).
@@ -1575,6 +1581,7 @@ var RelayTransport = class {
 		}
 		if (writer) this.writeWaiting.delete(`${writer} ${relay}`);
 		if (isGroupSignal(who) && !who.write && this.spent.get(relay).length >= this.limitOf(relay)) this.spentGroupOver.get(relay).push(now);
+		if (isDepartedRead(who) && this.spent.get(relay).length >= this.limitOf(relay)) this.departedOverAdd(key, now);
 		this.spent.get(relay).push(now);
 		if (who.background) this.spentBackground.get(relay).push(now);
 		if (isGroupUrgentRead(who)) this.spentGroupUrgent.get(relay).push(now);
@@ -1597,7 +1604,8 @@ var RelayTransport = class {
 	*
 	* Who goes first: a chat's refused write holds back everything but chat writes; a group's refused write holds back
 	* group reads and background requests, never a chat's. Background requests yield to a link that signals. A chat's
-	* signaling goes over the limit by its allowance (`SIGNALING_ALLOWANCE_SHARE`).
+	* signaling goes over the limit by its allowance (`SIGNALING_ALLOWANCE_SHARE`), and so do a few of its reads of a
+	* contact that just went away (`DEPARTED_READS`).
 	*/
 	heldFor(relay, who, now = Date.now(), key) {
 		const recent = (this.spent.get(relay) ?? []).filter((at) => now - at < 6e4);
@@ -1606,7 +1614,8 @@ var RelayTransport = class {
 		this.spentBackground.set(relay, recentBackground);
 		const over = (list, limit) => list.length >= limit ? list[list.length - limit] + 6e4 - now : 0;
 		const limit = this.limitOf(relay);
-		const share = isChatSignal(who) ? SIGNALING_ALLOWANCE_SHARE : isGroupSignal(who) ? GROUP_SIGNALING_ALLOWANCE_SHARE : 0;
+		const departed = isDepartedRead(who) && key !== void 0 && recent.length >= limit && this.departedReads(key, now) < 6;
+		const share = isChatSignal(who) || departed ? SIGNALING_ALLOWANCE_SHARE : isGroupSignal(who) ? GROUP_SIGNALING_ALLOWANCE_SHARE : 0;
 		let wait = over(recent, limit + (share ? Math.max(0, Math.floor(limit * share) - (who.write ? 0 : 1)) : 0));
 		const groupOver = (this.spentGroupOver.get(relay) ?? []).filter((at) => now - at < GROUP_OVER_PACE_MS);
 		this.spentGroupOver.set(relay, groupOver);
@@ -1646,7 +1655,7 @@ var RelayTransport = class {
 			const at = this.writeWaiting.get(`${lane} ${relay}`);
 			return at !== void 0 && now - at < 5e3 ? at + WRITE_FIRST_MS - now : 0;
 		};
-		if (writer !== "chat") wait = Math.max(wait, waiting("chat"));
+		if (writer !== "chat" && !departed) wait = Math.max(wait, waiting("chat"));
 		if (writer === null && who.group && !pastLimit || who.background) wait = Math.max(wait, waiting("group"));
 		return Math.max(wait, 0);
 	}
@@ -1677,6 +1686,18 @@ var RelayTransport = class {
 		}
 		return ahead;
 	}
+	/** This contact's departed reads past the limit in the last minute (`DEPARTED_READS`). */
+	departedReads(key, now) {
+		const reads = (this.departedOver.get(key) ?? []).filter((at) => now - at < 6e4);
+		if (reads.length) this.departedOver.set(key, reads);
+		else this.departedOver.delete(key);
+		return reads.length;
+	}
+	/** One more, the contacts with none in the last minute dropped. */
+	departedOverAdd(key, now) {
+		for (const [other, reads] of this.departedOver) if (now - reads[reads.length - 1] >= 6e4) this.departedOver.delete(other);
+		this.departedOver.set(key, [...this.departedOver.get(key) ?? [], now]);
+	}
 	chatNeed(key) {
 		let need = this.chatNeeds.get(key);
 		if (!need) this.chatNeeds.set(key, need = {
@@ -5532,6 +5553,13 @@ var WATCH_PEER_MS = 12e4;
 * past the 12 s such a connection is given (`DISCONNECT_GRACE_MS`), by when it is back or the session is gone.
 */
 var STALLED_LOOK_MS = 15e3;
+/**
+* For this long after its contact went away from a live session, a chat's reads of it say so (`PkarrRequestOptions.departed`):
+* a few may go over the relays' budget (`DEPARTED_READS` in relay.ts). The fast window that follows a goodbye
+* (`EXPECT_PEER_MS`): an app that restarts has its offer out well within it (2.5 to 10 s after its goodbye in the lab of
+* #1441, on a loaded host), and past it the race's DHT dial has brought the chat back anyway.
+*/
+var DEPARTED_READ_MS = EXPECT_PEER_MS;
 var PUBLISH_RETRY_MS = 4e3;
 /**
 * A packet the relays' request budget held back goes again when the budget frees a request, and at least this often
@@ -5592,6 +5620,8 @@ var LinkSession = class {
 	watchUntil = 0;
 	/** The time of the peer's packet read last when it went away (`watchPeer`): a newer one that advertises says it is back. */
 	watchFrom = 0;
+	/** Until when the reads of a contact that went away are its first ones (`DEPARTED_READ_MS`). */
+	departedUntil = 0;
 	publishRetryTimer = null;
 	active = false;
 	connected = false;
@@ -5749,6 +5779,7 @@ var LinkSession = class {
 	watchPeer() {
 		this.watchUntil = Math.max(this.watchUntil, Date.now() + WATCH_PEER_MS);
 		this.watchFrom = this.presence.lastPacketAt;
+		this.departedUntil = Date.now() + DEPARTED_READ_MS;
 		this.expectPeer();
 	}
 	/** The data link carries chat and services while it is up. */
@@ -6017,11 +6048,13 @@ var LinkSession = class {
 			const pace = this.pace();
 			const signal = pace === "fast" && this.fastStepsAfter > 0 && this.rtcSignalOut !== null;
 			const watch = !signal && this.watching();
+			const departed = !signal && Date.now() < this.departedUntil;
 			const packet = await this.transport.resolve(this.peerPubKeyZ32, {
 				background: pace === "background" || pace === "connected",
 				urgent: pace === "fast",
 				...signal && { signal },
-				...watch && { watch }
+				...watch && { watch },
+				...departed && { departed }
 			});
 			if (!this.running) return;
 			this.discoveryResult("read");
@@ -16830,6 +16863,8 @@ var GhostLink = class {
 	}
 	/** The attempt (`connectionEpoch`) in which the data link began answering the contact's offer. */
 	answeringEpoch = -1;
+	/** Set while a dial waits for its WebRTC offer to be made: ends that wait, the contact's offer being answered instead. */
+	offerReplaced;
 	lastAutoConnectAt = 0;
 	autoConnectFailures = 0;
 	/** The look due when a failed dial's backoff ends (`lookAtRetry`). */
@@ -17175,6 +17210,7 @@ var GhostLink = class {
 				}
 				if (state === "answering") {
 					this.answeringEpoch = this.connectionEpoch;
+					this.offerReplaced?.();
 					if (this.resumingOverRtc) {
 						const epoch = this.connectionEpoch;
 						setTimeout(() => this.maybeKnockAnswering(epoch), 0);
@@ -18352,7 +18388,12 @@ var GhostLink = class {
 					} : void 0;
 					const gate = this.dialGate;
 					this.dialGate = void 0;
-					if (await this.dataLink.connect(gate) === "held") {
+					const replaced = new Promise((resolve) => {
+						this.offerReplaced = resolve;
+					});
+					const made = await Promise.race([this.dataLink.connect(gate), replaced]);
+					this.offerReplaced = void 0;
+					if (made === "held") {
 						traceLink(this.myPubKeyZ32, "dial-held", {});
 						this.afterRtc = void 0;
 						this.offered = void 0;
@@ -20939,12 +20980,37 @@ function decodeBolt11(text) {
 var LNURL_LIMITS = {
 	timeoutMs: 15e3,
 	maxBytes: 65536,
+	maxRedirects: 5,
 	maxUrlLength: 2048,
 	maxMetadataLength: 8192,
 	maxComment: 2e3
 };
 var ADDRESS = /^([a-z0-9._+-]{1,64})@([a-z0-9-]+(?:\.[a-z0-9-]+)*(?::\d{1,5})?)$/i;
 var LNURL_BECH32 = /^lnurl1[02-9ac-hj-np-z]{6,}$/i;
+var REDIRECTS = [
+	301,
+	302,
+	303,
+	307,
+	308
+];
+/**
+* A host that is not on the public internet, as far as its name tells: this machine, a single label, `.local` and its
+* kin, private and reserved IP addresses. (What a public name resolves to is checked where the client resolves names
+* itself, as Ghostly Desktop does.)
+*/
+function isLocalHost(hostname) {
+	const host = hostname.toLowerCase().replace(/\.$/, "").replace(/^\[|\]$/g, "");
+	if (!host.includes(".") && !host.includes(":")) return true;
+	if (/(^|\.)(localhost|local|internal|lan|home\.arpa)$/.test(host)) return true;
+	const v4 = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(host);
+	if (v4) {
+		const [a, b] = [Number(v4[1]), Number(v4[2])];
+		return a === 0 || a === 10 || a === 127 || a >= 224 || a === 169 && b === 254 || a === 172 && b >= 16 && b < 32 || a === 192 && b === 168 || a === 100 && b >= 64 && b < 128 || a === 198 && (b === 18 || b === 19) || a === 192 && b === 0;
+	}
+	if (host.includes(":")) return !/^[23][0-9a-f]{0,3}:/.test(host) || host.includes(".") || /^2001:0?db8:/.test(host);
+	return false;
+}
 var isLoopback = (hostname) => [
 	"localhost",
 	"127.0.0.1",
@@ -21038,7 +21104,7 @@ async function readBounded(response, maxBytes) {
 	}
 	return new TextDecoder().decode(all);
 }
-/** One GET to an LNURL service: bounded in time and size, no credentials, no referrer, and the answer must be JSON. */
+/** One GET to an LNURL service (and to each checked redirect of it): bounded in time and size, no credentials, no referrer, and the answer must be JSON. */
 async function fetchLnurlJson(url, options = {}) {
 	const target = acceptUrl(url);
 	const doFetch = options.fetch ?? globalThis.fetch;
@@ -21049,19 +21115,38 @@ async function fetchLnurlJson(url, options = {}) {
 	options.signal?.addEventListener("abort", onAbort, { once: true });
 	try {
 		let response;
-		try {
-			response = await doFetch(target.href, {
-				signal: controller.signal,
-				headers: { accept: "application/json" },
-				credentials: "omit",
-				referrerPolicy: "no-referrer",
-				redirect: "follow"
-			});
-		} catch {
-			if (controller.signal.aborted) throw controller.signal.reason instanceof Error ? controller.signal.reason : /* @__PURE__ */ new Error("The request was cancelled");
-			throw engineError("lnurlUnreachable", { host: target.host });
+		for (let at = target, hops = 0;; hops++) {
+			try {
+				response = await doFetch(at.href, {
+					signal: controller.signal,
+					headers: { accept: "application/json" },
+					credentials: "omit",
+					referrerPolicy: "no-referrer",
+					redirect: "manual"
+				});
+			} catch {
+				if (controller.signal.aborted) throw controller.signal.reason instanceof Error ? controller.signal.reason : /* @__PURE__ */ new Error("The request was cancelled");
+				throw engineError("lnurlUnreachable", { host: target.host });
+			}
+			if (response.url) acceptUrl(response.url);
+			if (response.type === "opaqueredirect") throw new Error(`${target.host} redirects to another address, which cannot be checked here`);
+			const location = REDIRECTS.includes(response.status) ? response.headers.get("location") : null;
+			if (!location) break;
+			await response.body?.cancel().catch(() => {});
+			if (hops >= LNURL_LIMITS.maxRedirects) throw new Error(`${target.host} redirects too many times`);
+			let next;
+			try {
+				next = new URL(location, at);
+			} catch {
+				throw new Error(`${target.host} redirects to an invalid address`);
+			}
+			next = acceptUrl(next.href);
+			if (next.host !== at.host) {
+				if (next.protocol !== "https:") throw new Error("Lightning addresses and LNURLs must use HTTPS");
+				if (isLocalHost(next.hostname)) throw new Error(`${target.host} redirects to a local address`);
+			}
+			at = next;
 		}
-		if (response.url) acceptUrl(response.url);
 		const text = await readBounded(response, options.maxBytes ?? LNURL_LIMITS.maxBytes);
 		let body;
 		try {
@@ -29600,6 +29685,6 @@ function appStoreDecision(held, read) {
 	return read.digest === held.digest ? "same" : "equivocation";
 }
 //#endregion
-export { SSHSIG_NAMESPACE as $, readAppRevocations as $a, parseImageMeta as $i, engineError as $n, handoffContextProof as $o, pinNumberHolds as $r, HANDOFF_CAPABILITY as $s, PaymentPreflightError as $t, decodeGroupEntryLink as A, pairedReplyAuthor as Aa, withRequestOptions as Ac, IDENTITY_REVOCATION_LABEL as Ai, encodeDnsQuery as An, signalHasVideo as Ao, mergeBeacon as Ar, ENROLL_HELLO as As, didJwsAlg as At, groupWakes as B, statusCardText as Ba, publicKeyFromZ32 as Bc, lastSharedWithMe as Bi, resolveLightningDestination as Bn, HANDOFF_OFFER as Bo, FILE_LIMITS as Br, readEnrollHello as Bs, parseDidSignaturePaste as Bt, COMMUNITY_LIMITS as C, nextReactionNumber as Ca, RelayTransport as Cc, readManifest as Ci, homeserverWebEndpoint as Cn, RTC_CONFIG as Co, COMMUNITY_TOPOLOGY as Cr, readSetUpdate as Cs, DID_DOCUMENT_MAX_BYTES as Ct, decodeCommunityLink as D, readReaction as Da, traceLink as Dc, dialDescriptors as Di, dnsProofName as Dn, callSignalHeardAt as Do, freshHubs as Dr, verifySetUpdate as Ds, checkDidJws as Dt, communityHasFrame as E, reactionIsNewer as Ea, setLinkTraceSink as Ec, capsDescriptors as Ei, decodeDnsResponse as En, callRtcConfig as Eo, doorHubs as Er, signTombstone as Es, DidError as Et, mergeKnocks as F, RUN_RESULTS as Fa, openRelayPayload as Fc, identityRevocationValue as Fi, recordsFromWellKnown as Fn, HANDOFF_ACK as Fo, readBeacon as Fr, enrollDoneFrame as Fs, didWebFileUrl as Ft, COMMUNITY_EDIT_FRAME as G, shownTime as Ga, fromBase64Url as Gc, automaticTransport as Gi, findEndpoint as Gn, HANDOFF_VERIFIED as Go, TypingSender as Gr, OwnInviteError as Gs, didDhtFromPublicKey as Gt, GROUP_REACTED_FRAME as H, claimedTime as Ha, MAX_AVATAR_LENGTH as Hc, emptyProofLedger as Hi, ENDPOINT as Hn, HANDOFF_PIECE_BYTES as Ho, transferStalled as Hr, createDeviceInvite as Hs, staticDidDocument as Ht, readKnocks as I, STATUS_CARD_LIMITS as Ia, parseRelayPayload as Ic, identityStatement as Ii, recordsName as In, HANDOFF_CANCEL as Io, readBeaconHead as Ir, enrollGrantFrame as Is, didWebHost as It, carryMentions as J, appFingerprint as Ja, toZ32 as Jc, DHT_FILE_TOO_LARGE as Ji, parseFedimintRequestPayload as Jn, handoffAttemptFailed as Jo, GROUP_PIN_FRAME as Jr, encodeInviteCode as Js, resolveDidDht as Jt, GROUP_EDIT_FRAME as K, APP_PREFIXES as Ka, randomBytes as Kc, irohDescriptor as Ki, isFederationId as Kn, filePartName as Ko, sanitizeTypingStatus as Kr, createChatInvite as Ks, encodeDidDhtDeactivated as Kt, GROUP_WAKE_FRAME as L, buttonLabelClash as La, createIdentity as Lc, newIdentityBinding as Li, txtValue as Ln, HANDOFF_DONE as Lo, readLobby as Lr, enrollHelloFrame as Ls, normalizeDid as Lt, entryParams as M, replySnippet as Ma, RELAY_PAYLOAD_MAX_BYTES as Mc, IdentityExchange as Mi, nip05RootKey as Mn, HTTP_SERVICE_PROTO as Mo, newerHead as Mr, enrollCancelFrame as Ms, didWebDocumentUrl as Mt, knockIdentity as N, BUTTON_ID as Na, createRelayPayload as Nc, boundVerifiedIdentity as Ni, normalizeDomain as Nn, LEGACY_SERVICES as No, pickHubs as Nr, enrollCancelReason as Ns, didWebFile as Nt, encodeCommunityLink as O, validReactionNumber as Oa, budgetRetryMs as Oc, IDENTITY_MAX_EVIDENCE as Oi, domainTxtRecord as On, extractParamsFromSdp as Oo, lobbyKeys as Or, ENROLL_DONE as Os, checkDidSignature as Ot, knockRecords as P, ITEM_STATES as Pa, newerPacket as Pc, emptyIdentityLedger as Pi, recordsFromTxt as Pn, serviceIdFromName as Po, rankHubs as Pr, enrollDigits as Ps, didWebFileNames as Pt, SSHSIG_MAX_ARMOR as Q, isAppRef as Qa, dhtFileId as Qi, pairedMessageFrame as Qn, handoffContext as Qo, pinIsNewer as Qr, ENROLL_CAPABILITY as Qs, ONCHAIN_PROVIDER as Qt, GroupWakeLimiter as R, checkStatusCard as Ra, identityFromSeed as Rc, receivedIdentityStatus as Ri, wellKnownUrl as Rn, HANDOFF_HAVE as Ro, shouldBeHub as Rr, enrollProofFrame as Rs, parseDid as Rt, sealGroupTyping as S, ReactionWindow as Sa, DEFAULT_RELAYS as Sc, newMailbox as Si, pubkyProofPath as Sn, CALL_SIGNAL_MAX_AGE_MS as So, pickMeshHubs as Sr, SET_UPDATE as Ss, verifyAtprotoRecordProof as St, GROUP_READ_NOTE_COMMUNITY as T, reactionEmoji as Ta, normalizeRelayUrl as Tc, DHT_TEXT_CAPABILITY as Ti, DOMAIN_FILE_MAX_BYTES as Tn, buildSdpFromSignal as To, beaconRecords as Tr, setUpdateFrame as Ts, DID_JWS_MAX_LENGTH as Tt, GROUP_READ_NOTE as U, heardTime as Ua, sanitizeAvatar as Uc, validExternalKey as Ui, cashuRequestPayload as Un, HANDOFF_REQUEST as Uo, TYPING_KINDS as Ur, deviceInviteJoinerParams as Us, strictBase64Url as Ut, parseGroupWakeFrame as V, arrivalKey as Va, verify as Vc, PeerProofs as Vi, decodeBolt11 as Vn, HANDOFF_PAKE as Vo, transferEnded as Vr, verifyEnrollProof as Vs, signingKeys as Vt, GroupSession as W, receivedTimestamp as Wa, bytesEqual as Wc, TRANSPORTS as Wi, fedimintRequestPayload as Wn, HANDOFF_TIMINGS as Wo, TYPING_REFRESH_MS as Wr, readDeviceInvite as Ws, didDhtDocument as Wt, mentionsMember as X, checkAppRevokeStatement as Xa, utf8Encode as Xc, peekDhtMailbox as Xi, INVITE_TAKEN as Xn, handoffBusyFrame as Xo, mayPin as Xr, inviteOwnership as Xs, ETHEREUM_USDT as Xt, parseCommunityEdit as Y, appRef as Ya, utf8Decode as Yc, DHT_MESSAGE_TTL as Yi, GhostLink as Yn, handoffAttemptSucceeded as Yo, PIN_LIMITS as Yr, inviteLink as Ys, signDidDhtPacket as Yt, groupName as Z, isAppKey as Za, DHT_FILE_CAPABILITY as Zi, LIVENESS_PING_MS as Zn, handoffCancelFrame as Zo, nextPinNumber as Zr, DEVICES_CAPABILITY as Zs, EVM_TEST_CHAINS as Zt, readAppBundle as _, forwardedAgain as _a, readTurnPacket as _c, HOLD_CAPABILITY as _i, isPubkyProofFolder as _n, parseLocalTarget as _o, groupSignalFrame as _r, readHandoffPake as _s, isAtprotoDid as _t, planAppUpdate as a, PLAYABLE_AUDIO as aa, newDeviceSetSecret as ac, parseWakeFrame as ai, assertTokenUnits as an, MAX_GROUP_CHAIN as ao, fetchesByItself as ar, handoffOfferFrame as as, verifySshSignature as at, groupTypingEpoch as b, GROUP_REACTION_FRAME as ba, turnKeys as bc, HoldKeys as bi, pubkyProofCapability as bn, decodeControl as bo, mayBeHub as br, sealHandoffPiece as bs, shortAtprotoDid as bt, signAppStore as c, fileMessageText as ca, TURN_PUT_WINDOW_MS as cc, checkPushEndpoint as ci, validatePaymentTarget as cn, verifyCommitSignature as co, readGroupFileMeta as cr, handoffRetryAfter as cs, decodeAnyBitcoinAddress as ct, APP_ICON_PATH as d, parseVideoMeta as da, classifyTurnRead as dc, isAppVersion as di, SPARK_PROVIDER as dn, DHT_POLL_INTERVALS as do, readGroupWantNo as dr, newHandoffId as ds, ATPROTO_PROOF_COLLECTION as dt, readImageMeta as ea, deviceEchoFrame as ec, readPin as ei, SEPOLIA_TEST_USDT as en, signAppObject as eo, engineText as er, handoffDataFrame as es, SshSigError as et, appDigest as f, EDIT_BUFFER_MS as fa, turnPutSummary as fc, APPS_CAPABILITY as fi, sparkAddressKind as fn, EXPECT_PEER_MS as fo, CarriedTransport as fr, readHandoffAck as fs, ATPROTO_PROOF_SCOPE as ft, isAppUrl as g, parseLinkPreview as ga, nextTurnPosition as gc, UPGRADE_CAPABILITY as gi, isPubkyKey as gn, formatLocalTarget as go, SIGNAL_REPLY_MS as gr, readHandoffHello as gs, checkAtprotoProofRecord as gt, checkAppManifest as h, dhtEditId as ha, firstDeviceSetSecret as hc, STATUS_CARD_CAPABILITY as hi, PUBKY_PROOF_MAX_BYTES as hn, GhostlyHttpError as ho, SIGNAL_HOLD_MS as hr, readHandoffHave as hs, atprotoProofRkey as ht, checkAppBeforeRun as i, sanitizeMime as ia, devicePingFrame as ic, newWakeToken as ii, WALLET_NETWORKS as in, GROUP_MEMBER_CAP as io, GROUP_WANT_NO_FRAME as ir, handoffManifestFrames as is, sshSignCommand as it, encodeGroupEntryLink as j, readReply as ja, PacketTooLargeError as jc, IdentityCheckUnavailable as ji, isPublicAddress as jn, emptyLinkRecords as jo, mergeLobby as jr, ENROLL_PROOF as js, didSignedMessages as jt, KNOCK_TTL_MS as k, wireReaction as ka, isDiscoveryBudgetError as kc, IDENTITY_MAX_VALIDITY as ki, domainWellKnownFile as kn, parseCallSignal as ko, lobbyRecords as kr, ENROLL_GRANT as ks, didGhostlyServiceEntry as kt, APP_BUNDLE_LIMITS as l, parseVoiceMeta as la, TURN_RAISE_READ_TIMEOUT_MS as lc, vapidKeysMatch as li, walletNetworkOf as ln, edgeParams as lo, readGroupHave as lr, handoffStreamKey as ls, ATPROTO_DECLARED_SCOPE as lt, assembleAppBundle as m, RateWindow as ma, TURN_MAX as mc, EDIT_CAPABILITY as mi, isBitcoinAddress as mn, presenceSeenAt as mo, SIGNAL_FRESH_MS as mr, readHandoffDone as ms, atprotoProofRecord as mt, appStoreDecision as n, safeBlobType as na, deviceKeyZ32 as nc, WakeLimiter as ni, TEST_USDT_FAUCET_AMOUNT as nn, canonicalJson as no, GROUP_HAVE_FRAME as nr, handoffEphemeral as ns, parseSshSignature as nt, checkAppStoreIndex as o, VOICE_LIMITS as oa, seedSigner as oc, relayRequest as oi, assertWholeSats as on, MEMBER_KEY as oo, groupFileFallback as or, handoffPakeFrame as os, verifyBitcoinMessage as ot, appViewOf as p, EDIT_RATE_WINDOW_MS as pa, TURN_LAST_SEQUENCE as pc, BUTTONS_CAPABILITY as pi, sparkInvoiceDetails as pn, RELAY_POLL_INTERVALS as po, GROUP_SIGNAL_FRAME as pr, readHandoffCancel as ps, atprotoDidMethod as pt, GROUP_EDIT_TEXT_BYTES as q, APP_STATEMENT_LIMITS as qa, toBase64Url as qc, irohRelayUrl as qi, parseCashuRequestPayload as qn, handoffAttemptAllowed as qo, typingActivity as qr, decodeInviteCode as qs, encodeDidDhtPacket as qt, appUpdateDecision as r, sanitizeFileName as ra, deviceLinkPairing as rc, deviceWakeRequest as ri, USDT_PUBLIC_RPC as rn, canonicalJsonBytes as ro, GROUP_WANT_FRAME as rr, handoffHelloFrame as rs, sameSshKey as rt, readAppStore as s, baseMime as sa, webCryptoSigner as sc, wakeRequest as si, formatPaymentAmount as sn, rosterHas as so, isGroupMessageId as sr, handoffReleaseFrame as ss, BitcoinAddressError as st, appRevocationFor as t, formatFileSize as ta, deviceEchoNonce as tc, WAKE_CALL_INTERVAL_MS as ti, SEPOLIA_TEST_USDT_FAUCET as tn, signAppRevocation as to, GROUP_FILE_LIMITS as tr, handoffDigest as ts, parseSshPublicKey as tt, APP_BUNDLE_MAGIC as u, voicePeaksOf as ua, TURN_SETTLE_MS as uc, chatAppId as ui, SPARK_NETWORKS as un, DirectPathWatch as uo, readGroupWant as ur, handoffVersions as us, ATPROTO_FULL_SCOPE as ut, GROUP_TYPING_FRAME as v, readForwarded as va, signTurnPacket as vc, HOLD_DATED_BACK_MS as vi, newPubkyProofFolder as vn, webLocalFetch as vo, readGroupSignal as vr, readHandoffTurnFrame as vs, normalizeAtprotoHandle as vt, CommunitySession as w, queueReaction as wa, currentRelays as wc, CapsExchange as wi, pubkyHomeserverOf as wn, answersOffer as wo, beaconKeys as wr, setAckFrame as ws, DID_FILE_MAX_BYTES as wt, openGroupTyping as x, REACTION_LIMITS as xa, turnName as xc, HoldRefusedError as xi, pubkyProofFile as xn, encodeControl as xo, meshHubs as xr, SET_ACK as xs, AtprotoProofError as xt, GroupTypingBoard as y, COMMUNITY_REACTION_FRAME as ya, signTurnRelease as yc, HOLD_LIMITS as yi, normalizePubkyKey as yn, LIMITS as yo, MESH_HUBS as yr, readHandoffVerified as ys, parseAtprotoDidDocument as yt, groupWakeFrame as z, sameButtonText as za, identityFromSeedB64 as zc, revokesIdentity as zi, requestLnurlInvoice as zn, HANDOFF_HELLO as zo, ChatFiles as zr, readEnrollGrant as zs, parseDidDocument as zt };
+export { SSHSIG_NAMESPACE as $, appRef as $a, randomBytes as $c, parseImageMeta as $i, engineError as $n, filePartName as $o, pinNumberHolds as $r, createChatInvite as $s, PaymentPreflightError as $t, decodeGroupEntryLink as A, pairedReplyAuthor as Aa, RelayTransport as Ac, IDENTITY_REVOCATION_LABEL as Ai, encodeDnsQuery as An, RTC_CONFIG as Ao, mergeBeacon as Ar, readSetUpdate as As, didJwsAlg as At, groupWakes as B, cardLine as Ba, createRelayPayload as Bc, lastSharedWithMe as Bi, resolveLightningDestination as Bn, LEGACY_SERVICES as Bo, FILE_LIMITS as Br, enrollCancelReason as Bs, parseDidSignaturePaste as Bt, COMMUNITY_LIMITS as C, nextReactionNumber as Ca, nextTurnPosition as Cc, readManifest as Ci, homeserverWebEndpoint as Cn, formatLocalTarget as Co, COMMUNITY_TOPOLOGY as Cr, readHandoffHello as Cs, DID_DOCUMENT_MAX_BYTES as Ct, decodeCommunityLink as D, readReaction as Da, turnKeys as Dc, dialDescriptors as Di, dnsProofName as Dn, decodeControl as Do, freshHubs as Dr, sealHandoffPiece as Ds, checkDidJws as Dt, communityHasFrame as E, reactionIsNewer as Ea, signTurnRelease as Ec, capsDescriptors as Ei, decodeDnsResponse as En, LIMITS as Eo, doorHubs as Er, readHandoffVerified as Es, DidError as Et, mergeKnocks as F, PR_CHECKS as Fa, budgetRetryMs as Fc, identityRevocationValue as Fi, recordsFromWellKnown as Fn, extractParamsFromSdp as Fo, readBeacon as Fr, ENROLL_DONE as Fs, didWebFileUrl as Ft, COMMUNITY_EDIT_FRAME as G, arrivalKey as Ga, identityFromSeed as Gc, automaticTransport as Gi, findEndpoint as Gn, HANDOFF_HAVE as Go, TypingSender as Gr, enrollProofFrame as Gs, didDhtFromPublicKey as Gt, GROUP_REACTED_FRAME as H, checkStatusCard as Ha, openRelayPayload as Hc, emptyProofLedger as Hi, ENDPOINT as Hn, HANDOFF_ACK as Ho, transferStalled as Hr, enrollDoneFrame as Hs, staticDidDocument as Ht, readKnocks as I, PR_STATES as Ia, isDiscoveryBudgetError as Ic, identityStatement as Ii, recordsName as In, parseCallSignal as Io, readBeaconHead as Ir, ENROLL_GRANT as Is, didWebHost as It, carryMentions as J, receivedTimestamp as Ja, verify as Jc, DHT_FILE_TOO_LARGE as Ji, parseFedimintRequestPayload as Jn, HANDOFF_PAKE as Jo, GROUP_PIN_FRAME as Jr, verifyEnrollProof as Js, resolveDidDht as Jt, GROUP_EDIT_FRAME as K, claimedTime as Ka, identityFromSeedB64 as Kc, irohDescriptor as Ki, isFederationId as Kn, HANDOFF_HELLO as Ko, sanitizeTypingStatus as Kr, readEnrollGrant as Ks, encodeDidDhtDeactivated as Kt, GROUP_WAKE_FRAME as L, RUN_RESULTS as La, withRequestOptions as Lc, newIdentityBinding as Li, txtValue as Ln, signalHasVideo as Lo, readLobby as Lr, ENROLL_HELLO as Ls, normalizeDid as Lt, entryParams as M, replySnippet as Ma, normalizeRelayUrl as Mc, IdentityExchange as Mi, nip05RootKey as Mn, buildSdpFromSignal as Mo, newerHead as Mr, setUpdateFrame as Ms, didWebDocumentUrl as Mt, knockIdentity as N, BUTTON_ID as Na, setLinkTraceSink as Nc, boundVerifiedIdentity as Ni, normalizeDomain as Nn, callRtcConfig as No, pickHubs as Nr, signTombstone as Ns, didWebFile as Nt, encodeCommunityLink as O, validReactionNumber as Oa, turnName as Oc, IDENTITY_MAX_EVIDENCE as Oi, domainTxtRecord as On, encodeControl as Oo, lobbyKeys as Or, SET_ACK as Os, checkDidSignature as Ot, knockRecords as P, ITEM_STATES as Pa, traceLink as Pc, emptyIdentityLedger as Pi, recordsFromTxt as Pn, callSignalHeardAt as Po, rankHubs as Pr, verifySetUpdate as Ps, didWebFileNames as Pt, SSHSIG_MAX_ARMOR as Q, appFingerprint as Qa, fromBase64Url as Qc, dhtFileId as Qi, pairedMessageFrame as Qn, HANDOFF_VERIFIED as Qo, pinIsNewer as Qr, OwnInviteError as Qs, ONCHAIN_PROVIDER as Qt, GroupWakeLimiter as R, STATUS_CARD_LIMITS as Ra, PacketTooLargeError as Rc, receivedIdentityStatus as Ri, wellKnownUrl as Rn, emptyLinkRecords as Ro, shouldBeHub as Rr, ENROLL_PROOF as Rs, parseDid as Rt, sealGroupTyping as S, ReactionWindow as Sa, firstDeviceSetSecret as Sc, newMailbox as Si, pubkyProofPath as Sn, GhostlyHttpError as So, pickMeshHubs as Sr, readHandoffHave as Ss, verifyAtprotoRecordProof as St, GROUP_READ_NOTE_COMMUNITY as T, reactionEmoji as Ta, signTurnPacket as Tc, DHT_TEXT_CAPABILITY as Ti, DOMAIN_FILE_MAX_BYTES as Tn, webLocalFetch as To, beaconRecords as Tr, readHandoffTurnFrame as Ts, DID_JWS_MAX_LENGTH as Tt, GROUP_READ_NOTE as U, sameButtonText as Ua, parseRelayPayload as Uc, validExternalKey as Ui, cashuRequestPayload as Un, HANDOFF_CANCEL as Uo, TYPING_KINDS as Ur, enrollGrantFrame as Us, strictBase64Url as Ut, parseGroupWakeFrame as V, cardUrl as Va, newerPacket as Vc, PeerProofs as Vi, decodeBolt11 as Vn, serviceIdFromName as Vo, transferEnded as Vr, enrollDigits as Vs, signingKeys as Vt, GroupSession as W, statusCardText as Wa, createIdentity as Wc, TRANSPORTS as Wi, fedimintRequestPayload as Wn, HANDOFF_DONE as Wo, TYPING_REFRESH_MS as Wr, enrollHelloFrame as Ws, didDhtDocument as Wt, mentionsMember as X, APP_PREFIXES as Xa, sanitizeAvatar as Xc, peekDhtMailbox as Xi, INVITE_TAKEN as Xn, HANDOFF_REQUEST as Xo, mayPin as Xr, deviceInviteJoinerParams as Xs, ETHEREUM_USDT as Xt, parseCommunityEdit as Y, shownTime as Ya, MAX_AVATAR_LENGTH as Yc, DHT_MESSAGE_TTL as Yi, GhostLink as Yn, HANDOFF_PIECE_BYTES as Yo, PIN_LIMITS as Yr, createDeviceInvite as Ys, signDidDhtPacket as Yt, groupName as Z, APP_STATEMENT_LIMITS as Za, bytesEqual as Zc, DHT_FILE_CAPABILITY as Zi, LIVENESS_PING_MS as Zn, HANDOFF_TIMINGS as Zo, nextPinNumber as Zr, readDeviceInvite as Zs, EVM_TEST_CHAINS as Zt, readAppBundle as _, forwardedAgain as _a, TURN_SETTLE_MS as _c, HOLD_CAPABILITY as _i, isPubkyProofFolder as _n, DirectPathWatch as _o, groupSignalFrame as _r, handoffVersions as _s, isAtprotoDid as _t, planAppUpdate as a, PLAYABLE_AUDIO as aa, ENROLL_CAPABILITY as ac, parseWakeFrame as ai, assertTokenUnits as an, signAppObject as ao, fetchesByItself as ar, handoffContext as as, verifySshSignature as at, groupTypingEpoch as b, GROUP_REACTION_FRAME as ba, TURN_LAST_SEQUENCE as bc, HoldKeys as bi, pubkyProofCapability as bn, RELAY_POLL_INTERVALS as bo, mayBeHub as br, readHandoffCancel as bs, shortAtprotoDid as bt, signAppStore as c, fileMessageText as ca, deviceEchoNonce as cc, checkPushEndpoint as ci, validatePaymentTarget as cn, canonicalJsonBytes as co, readGroupFileMeta as cr, handoffDigest as cs, decodeAnyBitcoinAddress as ct, APP_ICON_PATH as d, parseVideoMeta as da, devicePingFrame as dc, isAppVersion as di, SPARK_PROVIDER as dn, MAX_GROUP_CHAIN as do, readGroupWantNo as dr, handoffManifestFrames as ds, ATPROTO_PROOF_COLLECTION as dt, readImageMeta as ea, decodeInviteCode as ec, readPin as ei, toBase64Url as el, SEPOLIA_TEST_USDT as en, checkAppRevokeStatement as eo, engineText as er, handoffAttemptAllowed as es, SshSigError as et, appDigest as f, EDIT_BUFFER_MS as fa, newDeviceSetSecret as fc, APPS_CAPABILITY as fi, sparkAddressKind as fn, MEMBER_KEY as fo, CarriedTransport as fr, handoffOfferFrame as fs, ATPROTO_PROOF_SCOPE as ft, isAppUrl as g, parseLinkPreview as ga, TURN_RAISE_READ_TIMEOUT_MS as gc, UPGRADE_CAPABILITY as gi, isPubkyKey as gn, edgeParams as go, SIGNAL_REPLY_MS as gr, handoffStreamKey as gs, checkAtprotoProofRecord as gt, checkAppManifest as h, dhtEditId as ha, TURN_PUT_WINDOW_MS as hc, STATUS_CARD_CAPABILITY as hi, PUBKY_PROOF_MAX_BYTES as hn, verifyCommitSignature as ho, SIGNAL_HOLD_MS as hr, handoffRetryAfter as hs, atprotoProofRkey as ht, checkAppBeforeRun as i, sanitizeMime as ia, DEVICES_CAPABILITY as ic, newWakeToken as ii, WALLET_NETWORKS as in, readAppRevocations as io, GROUP_WANT_NO_FRAME as ir, handoffCancelFrame as is, sshSignCommand as it, encodeGroupEntryLink as j, readReply as ja, currentRelays as jc, IdentityCheckUnavailable as ji, isPublicAddress as jn, answersOffer as jo, mergeLobby as jr, setAckFrame as js, didSignedMessages as jt, KNOCK_TTL_MS as k, wireReaction as ka, DEFAULT_RELAYS as kc, IDENTITY_MAX_VALIDITY as ki, domainWellKnownFile as kn, CALL_SIGNAL_MAX_AGE_MS as ko, lobbyRecords as kr, SET_UPDATE as ks, didGhostlyServiceEntry as kt, APP_BUNDLE_LIMITS as l, parseVoiceMeta as la, deviceKeyZ32 as lc, vapidKeysMatch as li, walletNetworkOf as ln, readCanonicalJson as lo, readGroupHave as lr, handoffEphemeral as ls, ATPROTO_DECLARED_SCOPE as lt, assembleAppBundle as m, RateWindow as ma, webCryptoSigner as mc, EDIT_CAPABILITY as mi, isBitcoinAddress as mn, rosterHas as mo, SIGNAL_FRESH_MS as mr, handoffReleaseFrame as ms, atprotoProofRecord as mt, appStoreDecision as n, safeBlobType as na, inviteLink as nc, WakeLimiter as ni, utf8Decode as nl, TEST_USDT_FAUCET_AMOUNT as nn, isAppRef as no, GROUP_HAVE_FRAME as nr, handoffAttemptSucceeded as ns, parseSshSignature as nt, checkAppStoreIndex as o, VOICE_LIMITS as oa, HANDOFF_CAPABILITY as oc, relayRequest as oi, assertWholeSats as on, signAppRevocation as oo, groupFileFallback as or, handoffContextProof as os, verifyBitcoinMessage as ot, appViewOf as p, EDIT_RATE_WINDOW_MS as pa, seedSigner as pc, BUTTONS_CAPABILITY as pi, sparkInvoiceDetails as pn, commitHash as po, GROUP_SIGNAL_FRAME as pr, handoffPakeFrame as ps, atprotoDidMethod as pt, GROUP_EDIT_TEXT_BYTES as q, heardTime as qa, publicKeyFromZ32 as qc, irohRelayUrl as qi, parseCashuRequestPayload as qn, HANDOFF_OFFER as qo, typingActivity as qr, readEnrollHello as qs, encodeDidDhtPacket as qt, appUpdateDecision as r, sanitizeFileName as ra, inviteOwnership as rc, deviceWakeRequest as ri, utf8Encode as rl, USDT_PUBLIC_RPC as rn, readAppRevocation as ro, GROUP_WANT_FRAME as rr, handoffBusyFrame as rs, sameSshKey as rt, readAppStore as s, baseMime as sa, deviceEchoFrame as sc, wakeRequest as si, formatPaymentAmount as sn, canonicalJson as so, isGroupMessageId as sr, handoffDataFrame as ss, BitcoinAddressError as st, appRevocationFor as t, formatFileSize as ta, encodeInviteCode as tc, WAKE_CALL_INTERVAL_MS as ti, toZ32 as tl, SEPOLIA_TEST_USDT_FAUCET as tn, isAppKey as to, GROUP_FILE_LIMITS as tr, handoffAttemptFailed as ts, parseSshPublicKey as tt, APP_BUNDLE_MAGIC as u, voicePeaksOf as ua, deviceLinkPairing as uc, chatAppId as ui, SPARK_NETWORKS as un, GROUP_MEMBER_CAP as uo, readGroupWant as ur, handoffHelloFrame as us, ATPROTO_FULL_SCOPE as ut, GROUP_TYPING_FRAME as v, readForwarded as va, classifyTurnRead as vc, HOLD_DATED_BACK_MS as vi, newPubkyProofFolder as vn, DHT_POLL_INTERVALS as vo, readGroupSignal as vr, newHandoffId as vs, normalizeAtprotoHandle as vt, CommunitySession as w, queueReaction as wa, readTurnPacket as wc, CapsExchange as wi, pubkyHomeserverOf as wn, parseLocalTarget as wo, beaconKeys as wr, readHandoffPake as ws, DID_FILE_MAX_BYTES as wt, openGroupTyping as x, REACTION_LIMITS as xa, TURN_MAX as xc, HoldRefusedError as xi, pubkyProofFile as xn, presenceSeenAt as xo, meshHubs as xr, readHandoffDone as xs, AtprotoProofError as xt, GroupTypingBoard as y, COMMUNITY_REACTION_FRAME as ya, turnPutSummary as yc, HOLD_LIMITS as yi, normalizePubkyKey as yn, EXPECT_PEER_MS as yo, MESH_HUBS as yr, readHandoffAck as ys, parseAtprotoDidDocument as yt, groupWakeFrame as z, buttonLabelClash as za, RELAY_PAYLOAD_MAX_BYTES as zc, revokesIdentity as zi, requestLnurlInvoice as zn, HTTP_SERVICE_PROTO as zo, ChatFiles as zr, enrollCancelFrame as zs, parseDidDocument as zt };
 
-//# sourceMappingURL=src-BMUcYQ7b.js.map
+//# sourceMappingURL=src-aKGjb_yz.js.map