@ghostlytools/cli 1.2.3 → 1.3.0

package/dist/assets/{src-_FzJkeAJ.js → src-DhfGgAUu.js}

@@ -1,3 +1,4 @@
+import { At as fromBase64, B as readStatusCard, C as downsamplePeaks, Ct as hasVisible, D as parseVideoMeta, Dt as trimEndOf, Et as stripHidden, Ft as toBase64Url, H as statusCardBytes, I as cardEditNumber, It as toZ32, Lt as utf8Decode, Mt as fromZ32, N as STATUS_CARD_LIMITS, Nt as randomBytes, O as BUTTON_ID, Ot as bytesEqual, Pt as toBase64, Rt as utf8Encode, St as wrapDataChannel, T as parseVoiceMeta, Tt as sanitizeNick, X as APP_PREFIXES, Y as APP_NAME, _t as LIMITS, bt as encodeControl, c as readGroupFileMeta, ct as readAppSignature, dt as verifyAppRevocation, et as appRefPublisher, f as imageSize, ft as verifyAppSignature, g as formatFileSize, gt as CHUNK_KIND, h as FileTransfers, ht as readCanonicalJson, it as isAppRef, jt as fromBase64Url, kt as concatBytes$1, lt as signAppObject, mt as canonicalJsonBytes, nt as isAppHash, ot as readAppRevocationShape, p as parseImageMeta, rt as isAppKey, t as GROUP_FILE_LIMITS, v as sanitizeFileName, vt as decodeChunk, wt as sanitizeDisplayText, xt as sendBody, y as sanitizeMime, yt as decodeControl } from "./groupFiles-DBbjOLuD.js";
 import { xsalsa20poly1305 } from "@noble/ciphers/salsa.js";
 import { ed25519, x25519 } from "@noble/curves/ed25519.js";
 import { hkdf } from "@noble/hashes/hkdf.js";
@@ -12,165 +13,6 @@ import { p256, p384, p521 } from "@noble/curves/nist.js";
 import { gcm } from "@noble/ciphers/aes.js";
 import { ripemd160 } from "@noble/hashes/legacy.js";
 import { bytesToNumberBE } from "@noble/curves/utils.js";
-//#region ../core/src/bytes.ts
-var textEncoder$1 = new TextEncoder();
-var textDecoder$1 = new TextDecoder("utf-8", { fatal: true });
-function utf8Encode(str) {
-	return textEncoder$1.encode(str);
-}
-function utf8Decode(bytes) {
-	return textDecoder$1.decode(bytes);
-}
-function concatBytes$1(...parts) {
-	let length = 0;
-	for (const p of parts) length += p.length;
-	const out = new Uint8Array(length);
-	let offset = 0;
-	for (const p of parts) {
-		out.set(p, offset);
-		offset += p.length;
-	}
-	return out;
-}
-function bytesEqual(a, b) {
-	if (a.length !== b.length) return false;
-	let diff = 0;
-	for (let i = 0; i < a.length; i++) diff |= a[i] ^ b[i];
-	return diff === 0;
-}
-/** `Uint8Array.prototype.toBase64` (Node 25+, Chrome 140+, Firefox 133+, Safari 18.2+): ~200x the JS below. */
-var nativeToBase64 = Uint8Array.prototype.toBase64;
-var tableOf = (chars) => Uint8Array.from(chars, (c) => c.charCodeAt(0));
-var BASE64_TABLE = tableOf("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/");
-var BASE64URL_TABLE = tableOf("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_");
-/**
-* Base64 where the runtime has no native encoder (Node 22 and 24, older WebViews): the characters go into bytes and
-* become one string at the end. Every file chunk is encoded (files/3 `pf-data`), so this is on a transfer's path.
-*/
-function encodeBase64(bytes, table, pad) {
-	const out = new Uint8Array(Math.ceil(bytes.length / 3) * 4);
-	let o = 0, i = 0;
-	for (; i + 2 < bytes.length; i += 3) {
-		const n = bytes[i] << 16 | bytes[i + 1] << 8 | bytes[i + 2];
-		out[o++] = table[n >>> 18];
-		out[o++] = table[n >>> 12 & 63];
-		out[o++] = table[n >>> 6 & 63];
-		out[o++] = table[n & 63];
-	}
-	const rest = bytes.length - i;
-	if (rest) {
-		const n = bytes[i] << 16 | (rest === 2 ? bytes[i + 1] << 8 : 0);
-		out[o++] = table[n >>> 18];
-		out[o++] = table[n >>> 12 & 63];
-		if (rest === 2) out[o++] = table[n >>> 6 & 63];
-		else if (pad) out[o++] = 61;
-		if (pad) out[o++] = 61;
-	}
-	return textDecoder$1.decode(out.subarray(0, o));
-}
-function toBase64(bytes) {
-	return nativeToBase64 ? nativeToBase64.call(bytes) : encodeBase64(bytes, BASE64_TABLE, true);
-}
-function fromBase64(str) {
-	const binary = atob(str);
-	const bytes = new Uint8Array(binary.length);
-	for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
-	return bytes;
-}
-function toBase64Url(bytes) {
-	return nativeToBase64 ? nativeToBase64.call(bytes, {
-		alphabet: "base64url",
-		omitPadding: true
-	}) : encodeBase64(bytes, BASE64URL_TABLE, false);
-}
-function fromBase64Url(str) {
-	let b = str.replace(/-/g, "+").replace(/_/g, "/");
-	while (b.length % 4) b += "=";
-	return fromBase64(b);
-}
-var Z32_ALPHABET = "ybndrfg8ejkmcpqxot1uwisza345h769";
-function toZ32(bytes) {
-	let out = "";
-	let bits = 0;
-	let value = 0;
-	for (const byte of bytes) {
-		value = value << 8 | byte;
-		bits += 8;
-		while (bits >= 5) {
-			out += Z32_ALPHABET[value >>> bits - 5 & 31];
-			bits -= 5;
-		}
-		value &= (1 << bits) - 1;
-	}
-	if (bits > 0) out += Z32_ALPHABET[value << 5 - bits & 31];
-	return out;
-}
-function fromZ32(str) {
-	const out = new Uint8Array(Math.floor(str.length * 5 / 8));
-	let bits = 0;
-	let value = 0;
-	let index = 0;
-	for (const char of str) {
-		const v = Z32_ALPHABET.indexOf(char);
-		if (v < 0) throw new Error(`Invalid z-base-32 character: ${char}`);
-		value = value << 5 | v;
-		bits += 5;
-		if (bits >= 8) {
-			out[index++] = value >>> bits - 8 & 255;
-			bits -= 8;
-		}
-		value &= (1 << bits) - 1;
-	}
-	return out;
-}
-function randomBytes(length) {
-	const bytes = new Uint8Array(length);
-	crypto.getRandomValues(bytes);
-	return bytes;
-}
-/**
-* Invisible and direction-changing characters. Unlike a file name, display
-* text may legitimately hold emoji and Indic or Arabic joiners, so the two
-* joiners stay and the rest of Cf goes: bidi overrides and isolates reorder
-* what follows them, and the others hide text or let two different names
-* render identically.
-*/
-var HIDDEN = /[\p{Cc}\p{Cf}\p{Zl}\p{Zp}]/gu;
-/** Zero-width non-joiner and zero-width joiner. */
-var KEEP = /[\u200c\u200d]/;
-/** `text` without its invisible and direction-changing characters, at any length: for display text with a cut of its own. */
-function stripHidden(text) {
-	return text.replace(HIDDEN, (char) => KEEP.test(char) ? char : "");
-}
-/**
-* What draws nothing when it stands alone and `HIDDEN` leaves in, since text needs it beside something else: the
-* joiners, the fillers, the variation selectors and the other default-ignorable code points, combining marks, white
-* space and the blank Braille pattern.
-*/
-var UNSEEN = /^[\p{Default_Ignorable_Code_Point}\p{M}\p{White_Space}\u2800]*$/u;
-/** Whether `text` holds a character that shows by itself: a name of joiners, fillers or marks alone has none. */
-function hasVisible(text) {
-	return !UNSEEN.test(text);
-}
-/** Undefined when nothing visible is left, so callers can fall back. */
-function sanitizeDisplayText(text, max) {
-	const clean = [...stripHidden(text)].slice(0, max).join("").trim();
-	return hasVisible(clean) ? clean : void 0;
-}
-/** A nickname as it arrived from a peer, ready to show. */
-function sanitizeNick(nick) {
-	return typeof nick === "string" ? sanitizeDisplayText(nick, 64) : void 0;
-}
-/**
-* `text` without the characters of `chars` it ends with, in one pass from the end. A `/[…]+$/` replace would retry
-* from every character of a run that does not reach the end.
-*/
-function trimEndOf(text, chars) {
-	let end = text.length;
-	while (end > 0 && chars.includes(text[end - 1])) end--;
-	return end === text.length ? text : text.slice(0, end);
-}
-//#endregion
 //#region ../core/src/avatar.ts
 /**
 * A profile picture as it travels between paired peers: a small square JPEG in a data URL. The picture
@@ -181,7 +23,7 @@ function trimEndOf(text, chars) {
 var MAX_AVATAR_LENGTH = 48e3;
 var PREFIX$1 = "data:image/jpeg;base64,";
 /** Width and height from a JPEG's frame header, or undefined when there is none before the image data. */
-function jpegSize$1(bytes) {
+function jpegSize(bytes) {
 	if (bytes.length < 4 || bytes[0] !== 255 || bytes[1] !== 216) return;
 	let i = 2;
 	while (i + 4 <= bytes.length) {
@@ -216,7 +58,7 @@ function sanitizeAvatar(value) {
 	}
 	const bytes = new Uint8Array(binary.length);
 	for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
-	const size = jpegSize$1(bytes);
+	const size = jpegSize(bytes);
 	if (!size || size.width < 1 || size.height < 1 || size.width > 512 || size.height > 512) return;
 	return value;
 }
@@ -234,7 +76,8 @@ function generateEncryptionKey() {
 function encrypt(plaintext, key) {
 	if (key.length !== KEY_LENGTH) throw new Error("Invalid key length: expected 32 bytes");
 	const nonce = randomBytes(NONCE_LENGTH$3);
-	return toBase64(concatBytes$1(nonce, xsalsa20poly1305(key, nonce).encrypt(utf8Encode(plaintext))));
+	const box = xsalsa20poly1305(key, nonce).encrypt(utf8Encode(plaintext));
+	return toBase64(concatBytes$1(nonce, box));
 }
 /** The length of what `encrypt` returns for a plaintext of this many UTF-8 bytes: base64 of nonce, box and 16-byte tag. */
 function sealedLength(plaintextBytes) {
@@ -515,27 +358,31 @@ function signRelayPayload(identity, dnsPacket, seq) {
 	new DataView(timestamp.buffer).setBigUint64(0, seq);
 	return concatBytes$1(signature, timestamp, dnsPacket);
 }
-/** Checks a relay payload's size and signature. Returns its sequence number and DNS packet, not decoded. */
-function openRelayPayload(pubKeyZ32, payload) {
+/** A relay payload's parts, its size checked: the signature, the sequence number and the DNS packet (not decoded). */
+function splitRelayPayload(payload) {
 	if (payload.length < 84) throw new Error("Relay payload too short");
 	if (payload.length > 1072) throw new PacketTooLargeError(payload.length);
+	return {
+		signature: payload.subarray(0, SIGNATURE_LENGTH),
+		seq: new DataView(payload.buffer, payload.byteOffset + SIGNATURE_LENGTH, TIMESTAMP_LENGTH).getBigUint64(0),
+		dnsPacket: payload.subarray(72)
+	};
+}
+/** Checks a relay payload's size and signature. Returns its sequence number and DNS packet, not decoded. */
+function openRelayPayload(pubKeyZ32, payload) {
+	const { signature, seq, dnsPacket } = splitRelayPayload(payload);
 	const publicKey = publicKeyFromZ32(pubKeyZ32);
-	const signature = payload.subarray(0, SIGNATURE_LENGTH);
-	const seq = new DataView(payload.buffer, payload.byteOffset + SIGNATURE_LENGTH, TIMESTAMP_LENGTH).getBigUint64(0);
-	const dnsPacket = payload.subarray(72);
 	if (!verify(signature, signable(seq, dnsPacket), publicKey)) throw new Error("Invalid signature");
 	return {
 		seq,
 		dnsPacket
 	};
 }
-/** Verifies and decodes a relay payload. Throws if the signature does not match. */
-function parseRelayPayload(pubKeyZ32, payload) {
-	const { seq: timestampMicros, dnsPacket } = openRelayPayload(pubKeyZ32, payload);
+function decodeRelayPayload(pubKeyZ32, seq, dnsPacket) {
 	const suffix = `.${pubKeyZ32}`;
 	return {
 		pubKeyZ32,
-		timestampMicros,
+		timestampMicros: seq,
 		records: decodeTxtPacket(dnsPacket).map((r) => ({
 			label: r.name.endsWith(suffix) ? r.name.slice(0, -suffix.length) : r.name,
 			value: r.value,
@@ -543,6 +390,20 @@ function parseRelayPayload(pubKeyZ32, payload) {
 		}))
 	};
 }
+/** Verifies and decodes a relay payload. Throws if the signature does not match. */
+function parseRelayPayload(pubKeyZ32, payload) {
+	const { seq, dnsPacket } = openRelayPayload(pubKeyZ32, payload);
+	return decodeRelayPayload(pubKeyZ32, seq, dnsPacket);
+}
+/**
+* Decodes a payload whose signature this process made or already checked (one it is putting), without checking it
+* again: an Ed25519 verify costs about 1 ms, and a CLI daemon at its relay budget checked its own packets ~500 times a
+* minute. Never for bytes read from elsewhere: `parseRelayPayload` is.
+*/
+function readOwnRelayPayload(pubKeyZ32, payload) {
+	const { seq, dnsPacket } = splitRelayPayload(payload);
+	return decodeRelayPayload(pubKeyZ32, seq, dnsPacket);
+}
 /** How far ahead of this clock a packet's time may be and still count as now: clocks drift, not by this much. */
 var PKARR_FUTURE_SKEW_MS = 6e5;
 /**
@@ -584,6 +445,7 @@ function withRequestOptions(transport, extra) {
 	if (transport.subscribe) wrapped.subscribe = (listener) => transport.subscribe(listener);
 	if (transport.networkChanged) wrapped.networkChanged = () => transport.networkChanged();
 	if (transport.readAnsweredAt) wrapped.readAnsweredAt = (pubKeyZ32) => transport.readAnsweredAt(pubKeyZ32);
+	if (transport.readHeldBackFor) wrapped.readHeldBackFor = (pubKeyZ32) => transport.readHeldBackFor(pubKeyZ32);
 	if (transport.onServerTime) wrapped.onServerTime = (listener) => transport.onServerTime(listener);
 	if (transport.configure) wrapped.configure = (options) => transport.configure(options);
 	if (transport.turnRead) wrapped.turnRead = (pubKeyZ32, options) => transport.turnRead(pubKeyZ32, options);
@@ -798,6 +660,11 @@ var isGroupSignal = (who) => who.group && !who.background && (who.signal || isWa
 var watchLane = (who) => `${+who.urgent}${+who.background}`;
 /** A group's read that is not a background one: an edge's, a private group's knock poll (`GROUP_RATION_WINDOW_MS`). */
 var isGroupRead = (who) => who.group && !who.write && !who.background;
+/**
+* A read that takes its turn per key with the others (`READ_TURN_MS`): a background one, and a 1:1 chat's at any pace.
+* Not a community door's bell.
+*/
+var isTurnRead = (who) => !who.write && !who.door && (who.background || !who.group);
 /** A write that goes first once the budget frees a request (see `WRITE_FIRST_MS`): a chat's or a group's, never a background one. */
 var firstWriter = (who) => !who.write || who.background ? null : who.group ? "group" : "chat";
 /**
@@ -826,6 +693,8 @@ function currentRelays(relays) {
 * only thing that peer is waiting for) would go out only once the polling slowed down, half a minute later.
 */
 var WRITE_FIRST_MS = 5e3;
+/** The most of a relay's minute the chats' reserve takes, however many chats need it: the rest stays for everything else. */
+var CHAT_RESERVE_MOST_SHARE = 5 / 6;
 /**
 * A 1:1 chat's signaling (a new offer or answer, and its reads for the answer to its offer, `signal`) may go over a
 * relay's minute by this fraction of it: 6 on a relay of 30, 12 on one of 60, 1 on relay.pkarr.org's 5 (it allows 10),
@@ -871,6 +740,29 @@ var WATCH_SHARE = 1 / 3;
 * waits, the others wait too (`WATCH_SHARE`, `GROUP_RATION_WINDOW_MS`). One that stops asking loses it.
 */
 var WATCH_TURN_MS = 5e3;
+/**
+* Background reads, and a 1:1 chat's at any pace, take turns per key the same way: while a key read longer ago asked
+* within this long and was not read since, a read of another key waits (a chat's, at a pace that is not the background
+* one, only for another chat's key). A saved chat that is not live reads its contact every 30 s in the
+* background, and one the budget refused read again only at its next poll. A request frees 60 s after the one that took
+* it, which is the poll after next of the chat that took it: the same chats took every request that freed. A daemon with
+* 30 chats and 5 groups, back after a restart while its groups signaled, read some contacts once in 10 min, and those
+* chats stayed down although both sides were online and offering (CLI bug hunt, 2026-10-12). A link's background read
+* the budget refused reads again when it frees a request (`LinkSession`), so the key whose turn it is is there to take it.
+* A chat not live after a restart looks fast while its offer is out, and those reads took no turn: the budget answered
+* them from the packet read before, every 2 to 8 s for 10 minutes, while the chats that were live already, the groups'
+* edges and the writes took every request that freed. A quarter of a daemon's 30 chats read their contact once in 10
+* minutes, their contacts online and offering, and showed them offline at 6 minutes (CLI bug hunt, 2026-10-13).
+*/
+var READ_TURN_MS = 5e3;
+/**
+* A 1:1 chat's read the budget held back this long without a break is starved: it goes before the writes that wait
+* (`WRITE_FIRST_MS`) and past the background share, within the minute, the key held back longest first. A daemon back
+* after a restart spends its whole minute on writes (each chat's and edge's offer, its packets after the attempt), which
+* go first, and requests free in bursts as the minute's first requests age out: every burst went to the writes that
+* waited, and the reads of the chats that were not in an attempt never had their turn (CLI restart lab, 2026-10-13).
+*/
+var READ_STARVED_MS = 6e4;
 /** How long a read that let an older one go first waits before it asks again. */
 var TURN_WAIT_MS = 1e3;
 /**
@@ -990,6 +882,8 @@ var RelayTransport = class {
 	* it is under the watch share (`WATCH_SHARE`) and while the groups' reads are rationed (`GROUP_RATION_WINDOW_MS`).
 	*/
 	readTurns = /* @__PURE__ */ new Map();
+	/** Per key read in turn (`isTurnRead`), when a read of it last went out and when it last asked (`READ_TURN_MS`). */
+	keyTurns = /* @__PURE__ */ new Map();
 	/** Groups' reads (not background ones) on each relay in the last `GROUP_RATION_WINDOW_MS`. */
 	spentGroupReads = /* @__PURE__ */ new Map();
 	/** When a group's read last found each relay's minute full: its reads there are rationed for `GROUP_RATION_MS`. */
@@ -1009,6 +903,11 @@ var RelayTransport = class {
 	/** Per relay and key, the newest packet that relay held back for its budget while another relay took it (`catchUpLater`). */
 	catchUp = /* @__PURE__ */ new Map();
 	catchUpTimer = null;
+	/**
+	* Per key whose reads the budget held back since its last read went out: when a request frees for it
+	* (`readHeldBackFor`), how many times in a row, and since when (`READ_STARVED_MS`).
+	*/
+	heldBack = /* @__PURE__ */ new Map();
 	/** When the relays last answered a read of each key, for `FRESH_READ_MS`. */
 	readAt = /* @__PURE__ */ new Map();
 	freshReadMs;
@@ -1131,14 +1030,22 @@ var RelayTransport = class {
 	}
 	/**
 	* Signs the records, dated by `nextTimestamp`, and hands the payload to `put` (the relays; the CLI adds the DHT).
+	* When every relay's budget (or rate limit) holds this asker back, it throws that wait before signing anything
+	* (`publishWait`): a daemon at its budget signed about 500 packets a minute that never went out. `elsewhere`: `put`
+	* also takes the packet where no budget holds it back (the CLI's DHT), so it is signed whatever the relays say.
 	* `put` calls `conflict` for a relay that answered 409: it holds a packet under this key dated at or after this one,
 	* which this client has not read (an inviter's warm packet under the key it gave its contact, from a clock ahead of
 	* this one). That packet is read from that relay, and the records go again dated just past it, once. Without this
 	* the packet was refused until this device's clock passed the other one's, however long that took, and on a relay
 	* that did take it, readers still preferred the later-dated empty packet of another relay.
 	*/
-	async publishDated(identity, records, put, options = {}, again = false) {
-		const key = identity.pubKeyZ32, timestamp = this.nextTimestamp(key);
+	async publishDated(identity, records, put, options = {}, again = false, elsewhere = false) {
+		const key = identity.pubKeyZ32;
+		if (!again && !elsewhere) {
+			const held = this.publishWait(key, asker(options, true));
+			if (held) throw new DiscoveryBudgetError(held.wait, `Publish held back on every relay: ${held.reasons.join("; ")}`);
+		}
+		const timestamp = this.nextTimestamp(key);
 		let redated;
 		const conflict = (relay) => {
 			if (again || redated) return;
@@ -1150,7 +1057,7 @@ var RelayTransport = class {
 					relay
 				});
 				if (this.lastTimestamp.get(key) !== timestamp) return true;
-				await this.publishDated(identity, records, put, options, true);
+				await this.publishDated(identity, records, put, options, true, elsewhere);
 				return true;
 			})();
 			redated.catch(() => {});
@@ -1162,6 +1069,46 @@ var RelayTransport = class {
 			if (!pending || !await pending) throw error;
 		}
 	}
+	/**
+	* How long until some relay takes a publish of this asker, and why each holds it back; null when one would now. Walks the relays as `put` does,
+	* without asking any: a relay the budget holds back gets its refused `take` (the asker's write then waits first in
+	* line, as when `put` is refused), one rate limiting or throttling this address is a wait, one left alone for failing
+	* is none. Null too when a relay fails another way (its network cooling down): the publish then goes, and fails, as
+	* before, and when no relay is held back at all.
+	*/
+	publishWait(pubKeyZ32, who) {
+		const probe = this.breaker.allDownProbe(this.relays);
+		let wait = Infinity;
+		const held = [], reasons = [];
+		for (const relay of this.relays) {
+			if (relay !== probe && this.networkCoolingDown(relay, "PUT")) return null;
+			const limited = this.rateLimitedFor(relay);
+			if (limited > 0) {
+				wait = Math.min(wait, limited);
+				reasons.push(`${relay}: Discovery relay is cooling down after a 429; retry shortly`);
+				continue;
+			}
+			const blocked = relay === probe ? 0 : this.breaker.blockedFor(relay);
+			if (blocked > 0) {
+				if (this.breaker.blockedKind(relay) === "throttled") {
+					wait = Math.min(wait, blocked);
+					reasons.push(`${relay}: Discovery relay is throttling this address; retry shortly`);
+				} else reasons.push(`${relay} is left alone after failing`);
+				continue;
+			}
+			if (this.heldFor(relay, who, Date.now(), pubKeyZ32) <= 0) return null;
+			held.push(relay);
+			const left = this.heldFor(relay, who);
+			wait = Math.min(wait, left);
+			reasons.push(`${relay}: discovery budget reached; retry in ${Math.ceil(left / 1e3)} s`);
+		}
+		if (wait === Infinity) return null;
+		for (const relay of held) this.take(relay, who, pubKeyZ32);
+		return {
+			wait,
+			reasons
+		};
+	}
 	/** One relay's packet for a key, read now: its time, kept for `nextTimestamp`. Null when it has none or does not answer. */
 	async heldAt(relay, pubKeyZ32, who) {
 		if (!this.take(relay, who, pubKeyZ32)) return null;
@@ -1181,10 +1128,22 @@ var RelayTransport = class {
 	sawTimestamp(pubKeyZ32, timestamp) {
 		if (timestamp > (this.seenTimestamp.get(pubKeyZ32) ?? 0n)) this.seenTimestamp.set(pubKeyZ32, timestamp);
 	}
-	/** Puts a payload signed elsewhere (a did:dht document), byte for byte, on every relay. `conflict`: as `publishDated` gives it. */
+	/**
+	* Puts a payload `publishDated` just signed, dated `timestamp`, on every relay. Its signature is not checked: it was
+	* made here (`publishPayload` checks one signed elsewhere, to read its sequence number). `conflict`: as `publishDated`
+	* gives it.
+	*/
+	async putSigned(pubKeyZ32, payload, timestamp, options = {}, conflict) {
+		if (this.relays.length === 0) throw new Error("No Pkarr relays configured");
+		await this.putEverywhere(pubKeyZ32, payload, timestamp, options, conflict);
+	}
+	/**
+	* Puts a payload signed elsewhere (a did:dht document), byte for byte, on every relay; one signed here says its date
+	* (`signedAt`) and is not checked again. `conflict`: as `publishDated` gives it.
+	*/
 	async publishPayload(pubKeyZ32, payload, options = {}, conflict) {
 		if (this.relays.length === 0) throw new Error("No Pkarr relays configured");
-		const { seq } = openRelayPayload(pubKeyZ32, payload);
+		const seq = options.signedAt ?? openRelayPayload(pubKeyZ32, payload).seq;
 		await this.putEverywhere(pubKeyZ32, payload, seq, options, conflict);
 	}
 	/**
@@ -1225,7 +1184,7 @@ var RelayTransport = class {
 				accepted = true;
 				noWriteWaits();
 				try {
-					this.written.set(pubKeyZ32, parseRelayPayload(pubKeyZ32, payload));
+					this.written.set(pubKeyZ32, readOwnRelayPayload(pubKeyZ32, payload));
 				} catch {}
 				resolve();
 			}, () => {});
@@ -1398,8 +1357,14 @@ var RelayTransport = class {
 		}
 		const resting = this.relays.every((r) => this.isCoolingDown(r, "GET") || this.breaker.blockedFor(r) > 0 || this.heldFor(r, who, Date.now(), pubKeyZ32) > 0);
 		const known = down ? this.newest.get(pubKeyZ32) : newerPacket(this.newest.get(pubKeyZ32), this.written.get(pubKeyZ32));
-		if (resting && known) return known;
-		if (!down && budgetWait < Infinity) throw new DiscoveryBudgetError(budgetWait);
+		if (resting && known) {
+			if (!down && budgetWait < Infinity) this.heldBackUntil(pubKeyZ32, Date.now() + budgetWait);
+			return known;
+		}
+		if (!down && budgetWait < Infinity) {
+			this.heldBackUntil(pubKeyZ32, Date.now() + budgetWait);
+			throw new DiscoveryBudgetError(budgetWait);
+		}
 		throw new Error("No Pkarr relay reachable");
 	}
 	/** The order a key's read asks the relays in: in turn per key (see `resolve`), relays found slow lately last. */
@@ -1466,9 +1431,25 @@ var RelayTransport = class {
 	readAnsweredAt(pubKeyZ32) {
 		return this.readAt.get(pubKeyZ32);
 	}
+	readHeldBackFor(pubKeyZ32) {
+		const held = this.heldBack.get(pubKeyZ32);
+		const left = held === void 0 ? 0 : held.until - Date.now();
+		return left > 0 ? left : void 0;
+	}
+	heldBackUntil(pubKeyZ32, until) {
+		const held = this.heldBack.get(pubKeyZ32), times = (held?.times ?? 0) + 1;
+		this.heldBack.delete(pubKeyZ32);
+		this.heldBack.set(pubKeyZ32, {
+			until,
+			times,
+			since: held?.since ?? Date.now()
+		});
+		if (this.heldBack.size > READ_TURNS_KEPT) this.heldBack.delete(this.heldBack.keys().next().value);
+	}
 	/** The relays answered a read of this key now; answers older than `FRESH_READ_MS` are dropped as the list grows. */
 	answeredRead(pubKeyZ32) {
 		const now = Date.now();
+		this.heldBack.delete(pubKeyZ32);
 		this.readAt.delete(pubKeyZ32);
 		this.readAt.set(pubKeyZ32, now);
 		if (this.readAt.size > 64) for (const [key, at] of this.readAt) {
@@ -1584,6 +1565,7 @@ var RelayTransport = class {
 			if (isChat(who)) this.chatNeed(key).urgentAt = now;
 		}
 		if (isGroupRead(who)) this.readAsked(key, who, now);
+		if (isTurnRead(who)) this.turnAsked(key, who, now);
 		if (this.heldFor(relay, who, now, key) > 0) {
 			if (isGroupRead(who) && (this.spent.get(relay)?.length ?? 0) >= this.limitOf(relay)) this.groupsFullAt.set(relay, now);
 			if (isChat(who)) this.chatNeed(key).refused.set(relay, now);
@@ -1607,6 +1589,12 @@ var RelayTransport = class {
 				lane: watchLane(who)
 			});
 		}
+		if (isTurnRead(who)) this.keyTurns.set(key, {
+			servedAt: now,
+			askedAt: now,
+			waiting: false,
+			who
+		});
 		return true;
 	}
 	/**
@@ -1618,7 +1606,7 @@ var RelayTransport = class {
 	* signaling goes over the limit by its allowance (`SIGNALING_ALLOWANCE_SHARE`), and so do a few of its reads of a
 	* contact that just went away (`DEPARTED_READS`).
 	*/
-	heldFor(relay, who, now = Date.now(), key) {
+	heldFor(relay, who, now = Date.now(), key, turns = true) {
 		const recent = (this.spent.get(relay) ?? []).filter((at) => now - at < 6e4);
 		const recentBackground = (this.spentBackground.get(relay) ?? []).filter((at) => now - at < 6e4);
 		this.spent.set(relay, recent);
@@ -1628,10 +1616,11 @@ var RelayTransport = class {
 		const departed = isDepartedRead(who) && key !== void 0 && recent.length >= limit && this.departedReads(key, now) < 6;
 		const share = isChatSignal(who) || departed ? SIGNALING_ALLOWANCE_SHARE : isGroupSignal(who) ? GROUP_SIGNALING_ALLOWANCE_SHARE : 0;
 		let wait = over(recent, limit + (share ? Math.max(0, Math.floor(limit * share) - (who.write ? 0 : 1)) : 0));
+		const starved = key !== void 0 && this.starved(key, who, now);
 		const groupOver = (this.spentGroupOver.get(relay) ?? []).filter((at) => now - at < GROUP_OVER_PACE_MS);
 		this.spentGroupOver.set(relay, groupOver);
 		if (isGroupSignal(who) && !who.write && recent.length >= limit && groupOver.length > 0) wait = Math.max(wait, groupOver[groupOver.length - 1] + GROUP_OVER_PACE_MS - now);
-		if (who.background) {
+		if (who.background && !starved) {
 			wait = Math.max(wait, over(recentBackground, this.backgroundPerMinute));
 			const signaling = this.urgentAt + SIGNALING_WINDOW_MS - now;
 			if (signaling > 0 && !who.door) wait = Math.max(wait, Math.min(signaling, over(recentBackground, this.backgroundWhileSignaling)));
@@ -1657,17 +1646,18 @@ var RelayTransport = class {
 			if (rationed.length >= most) wait = Math.max(wait, rationed[rationed.length - most] + GROUP_RATION_WINDOW_MS - now);
 			if (this.readsAhead(key, now) > 0) wait = Math.max(wait, TURN_WAIT_MS);
 		}
-		if (who.group) {
+		if (who.group || who.background) {
 			const reserved = this.chatReservedFor(relay, now);
-			if (reserved > 0) wait = Math.max(wait, Math.min(reserved, over(recent, limit - this.reserveOf(relay))));
+			if (reserved > 0) wait = Math.max(wait, Math.min(reserved, over(recent, limit - this.chatReserveOf(relay, now))));
 		}
 		const writer = firstWriter(who);
 		const waiting = (lane) => {
 			const at = this.writeWaiting.get(`${lane} ${relay}`);
 			return at !== void 0 && now - at < 5e3 ? at + WRITE_FIRST_MS - now : 0;
 		};
-		if (writer !== "chat" && !departed) wait = Math.max(wait, waiting("chat"));
-		if (writer === null && who.group && !pastLimit || who.background) wait = Math.max(wait, waiting("group"));
+		if (writer !== "chat" && !departed && !starved) wait = Math.max(wait, waiting("chat"));
+		if ((writer === null && who.group && !pastLimit || who.background) && !starved) wait = Math.max(wait, waiting("group"));
+		if (turns && wait <= 0 && isTurnRead(who) && this.turnAhead(relay, key, who, now)) wait = TURN_WAIT_MS;
 		return Math.max(wait, 0);
 	}
 	/** A group's read of `key` asks: it waits for its turn from now on, unless it is taken (`readsAhead`). */
@@ -1697,6 +1687,39 @@ var RelayTransport = class {
 		}
 		return ahead;
 	}
+	/** A read of `key` that takes turns asks: it waits for its turn from now on, unless it is taken (`turnAhead`). */
+	turnAsked(key, who, now) {
+		for (const [other, turn] of this.keyTurns) if (now - Math.max(turn.askedAt, turn.servedAt) >= 6e4) this.keyTurns.delete(other);
+		this.keyTurns.set(key, {
+			servedAt: this.keyTurns.get(key)?.servedAt ?? -Infinity,
+			askedAt: now,
+			waiting: true,
+			who
+		});
+	}
+	/**
+	* Whether a key read in turn longer ago than `key`, still asking, would take this relay's next request: one read in the
+	* background for a background read, and a chat's that is starved (`READ_STARVED_MS`) for any. One asks again after
+	* the budget held it back (a link's poll does, a one-off look does not), and keeps asking within `READ_TURN_MS` of its
+	* last ask, or of when it was told the budget frees a request for it (`readHeldBackFor`).
+	* One the budget holds back on its own account (a group's read, for the chats' reserve) keeps no turn: a group key
+	* waiting for the chats held every chat's read back (CLI lab, 2026-10-13).
+	*/
+	turnAhead(relay, key, who, now) {
+		const mine = key === void 0 ? -Infinity : this.keyTurns.get(key)?.servedAt ?? -Infinity;
+		for (const [other, turn] of this.keyTurns) {
+			const held = this.heldBack.get(other);
+			if (other === key || !turn.waiting || turn.servedAt >= mine || !held || held.times < 2) continue;
+			if (!(who.background && turn.who.background) && !this.starved(other, turn.who, now)) continue;
+			if (now - Math.max(turn.askedAt, held.until) < READ_TURN_MS && this.heldFor(relay, turn.who, now, other, false) === 0) return true;
+		}
+		return false;
+	}
+	/** A 1:1 chat's read of `key` the budget has held back for `READ_STARVED_MS` without a break. */
+	starved(key, who, now) {
+		const since = this.heldBack.get(key)?.since;
+		return !who.group && !who.write && !who.door && since !== void 0 && now - since >= READ_STARVED_MS;
+	}
 	/** This contact's departed reads past the limit in the last minute (`DEPARTED_READS`). */
 	departedReads(key, now) {
 		const reads = (this.departedOver.get(key) ?? []).filter((at) => now - at < 6e4);
@@ -1735,6 +1758,12 @@ var RelayTransport = class {
 		if (share === void 0) return this.perMinute;
 		return this.perMinuteGiven ? Math.min(this.perMinute, share) : share;
 	}
+	/** What the chats that need the relays keep on this relay (`CHAT_RESERVE_PER_CHAT`), never less than `reserveOf`. */
+	chatReserveOf(relay, now) {
+		let needing = 0;
+		for (const need of this.chatNeeds.values()) if (now - Math.max(need.urgentAt, need.refused.get(relay) ?? -Infinity) < 6e4) needing++;
+		return Math.max(this.reserveOf(relay), Math.min(needing * 3, Math.floor(this.limitOf(relay) * CHAT_RESERVE_MOST_SHARE)));
+	}
 	/** What groups leave a chat on this relay: `CHAT_RESERVE`, or a third of a smaller budget. */
 	reserveOf(relay) {
 		return Math.min(10, Math.floor(this.limitOf(relay) / 3));
@@ -3467,9 +3496,9 @@ var HANDOFF_CANCEL_REASONS = [
 	"stalled"
 ];
 var KEY$3 = /^[A-Za-z0-9_-]{43}$/;
-var DIGEST$2 = KEY$3;
+var DIGEST$1 = KEY$3;
 var SIGNATURE = /^[A-Za-z0-9_-]{86}$/;
-var ID$5 = /^[A-Za-z0-9_-]{22}$/;
+var ID$4 = /^[A-Za-z0-9_-]{22}$/;
 var B64$4 = /^[A-Za-z0-9_-]*$/;
 var HEX = /^[0-9a-f]{64}$/;
 var VERSION_TEXT = /^[0-9A-Za-z.+_-]{1,40}$/;
@@ -3483,9 +3512,9 @@ var isHandoffPartName = (name) => typeof name === "string" && PART.test(name);
 /** The part a file is: `file/<its SHA-256, base64url>`. */
 var filePartName = (sha256B64) => `file/${sha256B64}`;
 /** The digest a file part names, or null for any other part. */
-var filePartDigest = (name) => name.startsWith("file/") && DIGEST$2.test(name.slice(5)) ? name.slice(5) : null;
+var filePartDigest = (name) => name.startsWith("file/") && DIGEST$1.test(name.slice(5)) ? name.slice(5) : null;
 function isPart(value) {
-	return Array.isArray(value) && value.length === 3 && isHandoffPartName(value[0]) && isCount$1(value[1], MAX_PART) && isText$2(value[2], DIGEST$2) && (filePartDigest(value[0]) === null || filePartDigest(value[0]) === value[2]);
+	return Array.isArray(value) && value.length === 3 && isHandoffPartName(value[0]) && isCount$1(value[1], MAX_PART) && isText$2(value[2], DIGEST$1) && (filePartDigest(value[0]) === null || filePartDigest(value[0]) === value[2]);
 }
 /** Names compared as UTF-8 byte strings, as `H` sorts them. */
 function compareNames(a, b) {
@@ -3607,7 +3636,7 @@ function readHandoffHello(frame) {
 	if (typeof frame.room !== "number" || !Number.isSafeInteger(frame.room) || frame.room < -1) return null;
 	if (typeof frame.metered !== "boolean") return null;
 	if (frame.later !== void 0 && !isCount$1(frame.later)) return null;
-	if (frame.id !== void 0 && !isText$2(frame.id, ID$5)) return null;
+	if (frame.id !== void 0 && !isText$2(frame.id, ID$4)) return null;
 	const kind = DEVICE_KINDS.includes(frame.kind) ? frame.kind : "web";
 	return {
 		v: 1,
@@ -3633,7 +3662,7 @@ var handoffOfferFrame = (turn, id, bytes) => ({
 });
 function readHandoffTurnFrame(frame) {
 	if (frame.t !== "handoff-request" && frame.t !== "handoff-offer") return null;
-	if (!isCount$1(frame.turn, TURN_MAX) || !isText$2(frame.id, ID$5)) return null;
+	if (!isCount$1(frame.turn, TURN_MAX) || !isText$2(frame.id, ID$4)) return null;
 	if (frame.t === "handoff-offer") return isCount$1(frame.bytes) ? {
 		turn: frame.turn,
 		id: frame.id,
@@ -3676,7 +3705,7 @@ function readHandoffPake(frame) {
 	};
 }
 function readHandoffHave(frame) {
-	if (frame.t !== "handoff-have" || !Array.isArray(frame.d) || frame.d.length > 300 || !frame.d.every((d) => isText$2(d, DIGEST$2))) return null;
+	if (frame.t !== "handoff-have" || !Array.isArray(frame.d) || frame.d.length > 300 || !frame.d.every((d) => isText$2(d, DIGEST$1))) return null;
 	const p = {};
 	if (frame.p !== void 0) {
 		if (!frame.p || typeof frame.p !== "object" || Array.isArray(frame.p) || Object.keys(frame.p).length > 300) return null;
@@ -3732,7 +3761,7 @@ function readHandoffAck(frame) {
 }
 /** `H` of a `handoff-verified` that B's key signed for this turn address and turn, or null. */
 function readHandoffVerified(frame, turnAddress, turn, takerKey) {
-	if (frame.t !== "handoff-verified" || !isText$2(frame.h, DIGEST$2) || !isText$2(frame.s, SIGNATURE)) return null;
+	if (frame.t !== "handoff-verified" || !isText$2(frame.h, DIGEST$1) || !isText$2(frame.s, SIGNATURE)) return null;
 	const h = fromBase64Url(frame.h);
 	try {
 		return verify(fromBase64Url(frame.s), handoffVerifiedMessage(turnAddress, turn, h), takerKey) ? h : null;
@@ -3800,7 +3829,7 @@ var handoffAttemptSucceeded = () => ({
 /** Seconds until a locked-out device may try again (for `handoff-busy`). */
 var handoffRetryAfter = (attempts, now) => attempts?.until !== void 0 && attempts.until > now ? Math.ceil((attempts.until - now) / 1e3) : 0;
 var HTTP_SERVICE_PROTO = "ghostly-http/1";
-var MAX_NAME_LENGTH$1 = 48;
+var MAX_NAME_LENGTH = 48;
 var MAX_META_ENTRIES = 8;
 var MAX_META_LENGTH = 64;
 var SERVICE_ID_PATTERN = /^[a-z0-9][a-z0-9-]{0,31}$/;
@@ -3881,7 +3910,7 @@ function servicesFromWire(wire) {
 					id: e.i,
 					type: e.t
 				};
-				const name = cleanString(e.n, MAX_NAME_LENGTH$1);
+				const name = cleanString(e.n, MAX_NAME_LENGTH);
 				const proto = cleanString(e.p, MAX_META_LENGTH);
 				if (name) ad.name = name;
 				if (proto) ad.proto = proto;
@@ -4727,304 +4756,6 @@ function buildDataSdp(signal) {
 	return lines.join("\r\n") + "\r\n";
 }
 //#endregion
-//#region ../core/src/frames.ts
-/**
-* Framing on the `ghostly/1` DataChannel (ordered, reliable).
-*
-* - Text messages are control frames: compact JSON with a `t` discriminator,
-*   the same shape Ghostly already uses for `_msgs` and `_call`.
-* - Binary messages are body chunks that belong to a stream opened by a
-*   control frame: `<kind u8><stream id u32 BE><flags u8><payload>`.
-*
-* Everything here handles data from the remote peer and must never trust it.
-*/
-var LIMITS = {
-	/** Largest control frame accepted, headers included. */
-	maxControlFrameBytes: 61440,
-	/** Longest payment endpoint value (a Cashu token, an invoice) a payment frame may carry; a longer one is dropped. */
-	maxPaymentEndpointChars: 32768,
-	/** Largest DataChannel message sent. 16 KiB is safe across WebRTC stacks. */
-	maxChunkMessageBytes: 16384,
-	maxRequestBodyBytes: 8388608,
-	maxResponseBodyBytes: 67108864,
-	maxHeaderCount: 128,
-	maxHeaderValueBytes: 16384,
-	maxPathBytes: 8192,
-	/** Requests a host serves at once for one peer. */
-	maxConcurrentRequestsPerPeer: 32,
-	/** Requests a client keeps in flight; the rest wait in a queue. */
-	maxClientInFlight: 16,
-	maxChatMessageBytes: 16384,
-	maxFileBytes: 104857600,
-	/** Files a peer may be sending us at once. */
-	maxIncomingFilesPerPeer: 3,
-	/** Received bytes kept for one peer, in flight included. Past it new files are refused. */
-	maxStoredIncomingBytesPerPeer: 524288e3,
-	requestTimeoutMs: 6e4,
-	bodyIdleTimeoutMs: 3e4,
-	/** Stop writing to the channel above this many buffered bytes. */
-	sendHighWaterMark: 1048576,
-	sendLowWaterMark: 262144
-};
-var CHUNK_KIND = {
-	requestBody: 1,
-	responseBody: 2,
-	fileBody: 3
-};
-var CHUNK_HEADER_BYTES = 6;
-var MAX_CHUNK_PAYLOAD_BYTES = LIMITS.maxChunkMessageBytes - CHUNK_HEADER_BYTES;
-function encodeControl(frame) {
-	const json = JSON.stringify(frame);
-	if (utf8Encode(json).length > LIMITS.maxControlFrameBytes) throw new Error("Control frame too large");
-	return json;
-}
-function isHeaderList(value) {
-	if (!Array.isArray(value) || value.length > LIMITS.maxHeaderCount) return false;
-	return value.every((h) => Array.isArray(h) && h.length === 2 && typeof h[0] === "string" && typeof h[1] === "string" && h[0].length <= 256 && h[1].length <= LIMITS.maxHeaderValueBytes);
-}
-function isStreamId(value) {
-	return typeof value === "number" && Number.isInteger(value) && value >= 0 && value <= 4294967295;
-}
-function isPayId(value) {
-	return typeof value === "string" && /^[A-Za-z0-9_-]{8,64}$/.test(value);
-}
-/** Decimal text, as in Paykit's Payment Amount: no floats on the wire. */
-function isAmount(value) {
-	return typeof value === "string" && /^(0|[1-9]\d{0,15})(\.\d{1,8})?$/.test(value);
-}
-function isUnit(value) {
-	return typeof value === "string" && /^[a-z0-9]{1,12}$/.test(value);
-}
-function isEndpoint(value) {
-	return Array.isArray(value) && value.length === 2 && typeof value[0] === "string" && value[0].length <= 64 && /^[a-z0-9][a-z0-9-]*(?:\/[1-9][0-9]*)?$/.test(value[0]) && typeof value[1] === "string" && value[1].length <= LIMITS.maxPaymentEndpointChars;
-}
-/** Returns null for anything malformed; callers drop the frame. */
-function decodeControl(text) {
-	if (text.length > LIMITS.maxControlFrameBytes || utf8Encode(text).length > LIMITS.maxControlFrameBytes) return null;
-	let raw;
-	try {
-		raw = JSON.parse(text);
-	} catch {
-		return null;
-	}
-	if (!raw || typeof raw !== "object") return null;
-	const f = raw;
-	switch (f.t) {
-		case "hello":
-			if (typeof f.v !== "number") return null;
-			return {
-				t: "hello",
-				v: f.v,
-				svc: f.svc,
-				nick: sanitizeNick(f.nick)
-			};
-		case "m":
-			if (typeof f.ts !== "number" || typeof f.m !== "string") return null;
-			if (utf8Encode(f.m).length > LIMITS.maxChatMessageBytes) return null;
-			return {
-				t: "m",
-				ts: f.ts,
-				m: f.m
-			};
-		case "call":
-			if (typeof f.s !== "string" || utf8Encode(f.s).length > LIMITS.maxChatMessageBytes) return null;
-			return {
-				t: "call",
-				s: f.s
-			};
-		case "svc": return {
-			t: "svc",
-			svc: f.svc
-		};
-		case "req":
-			if (!isStreamId(f.id) || typeof f.s !== "string" || typeof f.m !== "string") return null;
-			if (typeof f.p !== "string" || f.p.length > LIMITS.maxPathBytes || !isHeaderList(f.h)) return null;
-			return {
-				t: "req",
-				id: f.id,
-				s: f.s,
-				m: f.m,
-				p: f.p,
-				h: f.h,
-				b: f.b === true
-			};
-		case "res":
-			if (!isStreamId(f.id) || typeof f.st !== "number" || !Number.isInteger(f.st)) return null;
-			if (f.st < 100 || f.st > 599 || !isHeaderList(f.h)) return null;
-			return {
-				t: "res",
-				id: f.id,
-				st: f.st,
-				h: f.h,
-				b: f.b === true
-			};
-		case "file":
-			if (!isStreamId(f.id) || typeof f.f !== "string" || typeof f.ts !== "number") return null;
-			if (typeof f.n !== "string" || typeof f.m !== "string") return null;
-			if (typeof f.s !== "number" || !Number.isSafeInteger(f.s) || f.s < 0) return null;
-			return {
-				t: "file",
-				id: f.id,
-				f: f.f,
-				ts: f.ts,
-				n: f.n,
-				s: f.s,
-				m: f.m
-			};
-		case "pay-req":
-		case "pay": {
-			if (!isPayId(f.id) || typeof f.ts !== "number" || !isAmount(f.v) || !isUnit(f.u)) return null;
-			const memo = typeof f.memo === "string" ? f.memo.slice(0, 140) : void 0;
-			if (f.t === "pay-req") {
-				if (!Array.isArray(f.e) || f.e.length === 0 || f.e.length > 8 || !f.e.every(isEndpoint)) return null;
-				return {
-					t: "pay-req",
-					id: f.id,
-					ts: f.ts,
-					v: f.v,
-					u: f.u,
-					memo,
-					e: f.e,
-					a: isPayId(f.a) ? f.a : void 0,
-					n: f.n === "mainnet" || f.n === "testnet" ? f.n : void 0
-				};
-			}
-			if (!isEndpoint(f.e) || f.rid !== void 0 && !isPayId(f.rid)) return null;
-			return {
-				t: "pay",
-				id: f.id,
-				ts: f.ts,
-				rid: f.rid,
-				v: f.v,
-				u: f.u,
-				memo,
-				e: f.e
-			};
-		}
-		case "pay-ask":
-			if (!isPayId(f.id) || typeof f.ts !== "number" || !isAmount(f.v) || !isUnit(f.u)) return null;
-			if (f.m !== "arkade" && f.m !== "usdt" && f.m !== "bark" && f.m !== "bitcoin" && f.m !== "fedimint" && f.m !== "spark") return null;
-			return {
-				t: "pay-ask",
-				id: f.id,
-				ts: f.ts,
-				v: f.v,
-				u: f.u,
-				m: f.m,
-				memo: typeof f.memo === "string" ? f.memo.slice(0, 140) : void 0,
-				n: f.n === "mainnet" || f.n === "testnet" ? f.n : void 0
-			};
-		case "pay-res":
-			if (!isPayId(f.id) || typeof f.ok !== "boolean") return null;
-			if (f.v !== void 0 && !isAmount(f.v)) return null;
-			return {
-				t: "pay-res",
-				id: f.id,
-				ok: f.ok,
-				v: f.v,
-				err: typeof f.err === "string" ? f.err.slice(0, 200) : void 0,
-				...f.c === true && !f.ok ? { c: true } : {}
-			};
-		case "rst":
-			if (!isStreamId(f.id) || f.d !== "q" && f.d !== "s" && f.d !== "f") return null;
-			return {
-				t: "rst",
-				id: f.id,
-				d: f.d,
-				e: typeof f.e === "string" ? f.e.slice(0, 256) : ""
-			};
-		case "ping":
-		case "pong":
-			if (typeof f.ts !== "number") return null;
-			return {
-				t: f.t,
-				ts: f.ts
-			};
-		default: return null;
-	}
-}
-function encodeChunk(chunk) {
-	if (chunk.payload.length > MAX_CHUNK_PAYLOAD_BYTES) throw new Error("Chunk payload too large");
-	const out = new Uint8Array(CHUNK_HEADER_BYTES + chunk.payload.length);
-	const view = new DataView(out.buffer);
-	view.setUint8(0, chunk.kind);
-	view.setUint32(1, chunk.id);
-	view.setUint8(5, chunk.end ? 1 : 0);
-	out.set(chunk.payload, CHUNK_HEADER_BYTES);
-	return out;
-}
-function decodeChunk(data) {
-	if (data.length < CHUNK_HEADER_BYTES || data.length > LIMITS.maxChunkMessageBytes) return null;
-	const view = new DataView(data.buffer, data.byteOffset, data.byteLength);
-	const kind = view.getUint8(0);
-	if (kind !== CHUNK_KIND.requestBody && kind !== CHUNK_KIND.responseBody && kind !== CHUNK_KIND.fileBody) return null;
-	return {
-		kind,
-		id: view.getUint32(1),
-		end: (view.getUint8(5) & 1) !== 0,
-		payload: data.subarray(CHUNK_HEADER_BYTES)
-	};
-}
-function wrapDataChannel(dc) {
-	dc.binaryType = "arraybuffer";
-	dc.bufferedAmountLowThreshold = LIMITS.sendLowWaterMark;
-	const channel = {
-		send(data) {
-			if (dc.readyState !== "open") throw new Error("Data link is not open");
-			if (typeof data === "string") dc.send(data);
-			else dc.send(data);
-		},
-		get bufferedAmount() {
-			return dc.bufferedAmount;
-		},
-		drained() {
-			if (dc.bufferedAmount <= LIMITS.sendLowWaterMark || dc.readyState !== "open") return Promise.resolve();
-			return new Promise((resolve) => {
-				const done = () => {
-					dc.removeEventListener("bufferedamountlow", done);
-					dc.removeEventListener("close", done);
-					resolve();
-				};
-				dc.addEventListener("bufferedamountlow", done);
-				dc.addEventListener("close", done);
-			});
-		},
-		close() {
-			dc.close();
-		},
-		onMessage: null,
-		onClose: null
-	};
-	dc.addEventListener("message", (event) => {
-		const data = event.data;
-		if (typeof data === "string") channel.onMessage?.(data);
-		else if (data instanceof ArrayBuffer) channel.onMessage?.(new Uint8Array(data));
-	});
-	dc.addEventListener("close", () => channel.onClose?.());
-	return channel;
-}
-/** Writes a body as chunks, honouring backpressure. Always ends with an END chunk. */
-async function sendBody(channel, kind, id, body, isCancelled = () => false) {
-	for await (const part of body) for (let offset = 0; offset < part.length; offset += MAX_CHUNK_PAYLOAD_BYTES) {
-		if (isCancelled()) return;
-		if (channel.bufferedAmount > LIMITS.sendHighWaterMark) await channel.drained();
-		const payload = part.subarray(offset, offset + MAX_CHUNK_PAYLOAD_BYTES);
-		channel.send(encodeChunk({
-			kind,
-			id,
-			end: false,
-			payload
-		}));
-	}
-	if (isCancelled()) return;
-	channel.send(encodeChunk({
-		kind,
-		id,
-		end: true,
-		payload: /* @__PURE__ */ new Uint8Array(0)
-	}));
-}
-//#endregion
 //#region ../core/src/http.ts
 var LOOPBACK_HOSTS = /* @__PURE__ */ new Set([
 	"localhost",
@@ -5601,6 +5332,19 @@ var STALLED_LOOK_MS = 15e3;
 * #1441, on a loaded host), and past it the race's DHT dial has brought the chat back anyway.
 */
 var DEPARTED_READ_MS = EXPECT_PEER_MS;
+/** A chat whose contact was never seen (an invite just sent) keeps looking at the active pace this long. */
+var AWAITING_PEER_MS = 6e5;
+/**
+* An invite this side made that nobody used, once no longer awaited (`AWAITING_PEER_MS`), is read less often the older
+* it is: a fifth of its age between reads, up to this. Read at the background pace instead, 15 unused invites (their
+* keys and their mailboxes) asked the relays for 60 reads a minute for as long as the app ran: the relays' minute went
+* to invites nobody may ever open, and a join on one was noticed 90 s later (bug hunt 1013-1642, 2026-10-13).
+*/
+var UNUSED_INVITE_WAIT_MAX_MS = 18e4;
+/** The wait between reads of an unused invite of age `age` (`UNUSED_INVITE_WAIT_MAX_MS`), never shorter than the pace's `interval`. */
+function unusedInviteWait(age, interval) {
+	return Math.max(interval, Math.min(UNUSED_INVITE_WAIT_MAX_MS, Math.round(age / 5)));
+}
 var PUBLISH_RETRY_MS = 4e3;
 /**
 * A packet the relays' request budget held back goes again when the budget frees a request, and at least this often
@@ -5656,6 +5400,8 @@ var LinkSession = class {
 	startedAt = Date.now();
 	/** From when a peer never seen is awaited (`AWAITING_PEER_MS`): never later than this start, whatever the clock said when the chat was made. */
 	awaitingSince;
+	/** This side's invite, nobody used yet (`LinkSessionOptions.invite`). */
+	invite;
 	intervals;
 	fastPollUntil = 0;
 	/** An offer to a saved contact is out: from then on its fast window looks less often (`OFFER_FAST_MS`); 0 for none. */
@@ -5711,6 +5457,7 @@ var LinkSession = class {
 		this.events = options.events ?? {};
 		this.firstPublish = options.firstPublish ?? "at-start";
 		this.awaitingSince = Math.min(options.awaitingSince ?? this.startedAt, this.startedAt);
+		this.invite = options.invite ?? (() => false);
 	}
 	get peerPresence() {
 		return this.presence;
@@ -5884,8 +5631,8 @@ var LinkSession = class {
 	async setRtcSignal(signal, reportFailure = false) {
 		if (this.rtcSignal === signal) return;
 		this.rtcSignal = signal;
-		if (reportFailure) await this.publish();
-		else await this.publish().catch(() => {});
+		if (reportFailure) await this.publish(signal === null);
+		else await this.publish(signal === null).catch(() => {});
 		if (signal) this.pollNow();
 	}
 	/**
@@ -5958,6 +5705,7 @@ var LinkSession = class {
 		const stepping = this.fastStepsAfter ? Date.now() - this.fastStepsAfter : -1;
 		if (pace === "fast" && stepping >= 0) return Math.min(4 * interval, Math.max(2 * interval, stepping));
 		if (pace === "fast" || pace === "connected" || since < 0) return interval;
+		if (pace === "background" && this.presence.lastPacketAt === 0 && this.invite()) return unusedInviteWait(Date.now() - this.awaitingSince, interval);
 		return Math.min(interval, Math.max(2 * this.intervals.fast, since));
 	}
 	/**
@@ -5969,13 +5717,17 @@ var LinkSession = class {
 	watching() {
 		return Date.now() < this.watchUntil && this.rtcSignal === null && !(this.presence.online && this.presence.lastPacketAt > this.watchFrom);
 	}
+	/** A contact never seen, whose invite was sent lately (`AWAITING_PEER_MS`): its join is due. */
+	awaitingPeer() {
+		return this.presence.lastPacketAt === 0 && Date.now() - this.awaitingSince < 6e5;
+	}
 	/** How urgently this link looks right now. */
 	pace() {
 		if (Date.now() < this.stalledUntil) return "fast";
 		if (this.connected) return "connected";
 		if (Date.now() < this.fastPollUntil) return "fast";
 		if (Date.now() < this.watchUntil) return "active";
-		if (!this.active && this.presence.lastPacketAt === 0 && Date.now() - this.awaitingSince < 6e5) return "active";
+		if (!this.active && this.awaitingPeer()) return "active";
 		if (!this.active) return "background";
 		return Date.now() - this.lastActivity > 6e4 ? "idle" : "active";
 	}
@@ -6032,7 +5784,9 @@ var LinkSession = class {
 		}, this.encKey);
 		const started = Date.now();
 		try {
-			const options = rtcSignal && rtcSignal !== this.rtcSignalOut ? { signal: true } : this.watching() ? { watch: true } : upkeep && this.connected ? { background: true } : void 0;
+			const awaited = this.connected || this.presence.online || this.sentBuffer.length > 0 || this.callSignal !== null || this.awaitingPeer();
+			const takesBack = !rtcSignal && this.rtcSignalOut !== null;
+			const options = rtcSignal && rtcSignal !== this.rtcSignalOut ? { signal: true } : this.watching() ? { watch: true } : upkeep && (this.connected || takesBack) || !rtcSignal && !awaited ? { background: true } : void 0;
 			await this.transport.publish(this.identity, built.records, options);
 		} catch (error) {
 			const ms = Date.now() - started, waiting = isDiscoveryBudgetError(error);
@@ -6096,13 +5850,15 @@ var LinkSession = class {
 			nextInMs: 0
 		});
 		const started = Date.now();
+		let heldBackMs;
 		try {
 			const pace = this.pace();
 			const signal = pace === "fast" && this.fastStepsAfter > 0 && this.rtcSignalOut !== null;
 			const watch = !signal && this.watching();
 			const departed = !signal && Date.now() < this.departedUntil;
+			const background = pace === "background" || pace === "connected";
 			const packet = await this.transport.resolve(this.peerPubKeyZ32, {
-				background: pace === "background" || pace === "connected",
+				background,
 				urgent: pace === "fast",
 				...signal && { signal },
 				...watch && { watch },
@@ -6117,6 +5873,7 @@ var LinkSession = class {
 			const read = answered !== void 0 && answered >= started;
 			if (read) this.lastReadAt = started;
 			this.readMissed = !!this.transport.readAnsweredAt && !read;
+			if (this.readMissed) heldBackMs = this.transport.readHeldBackFor?.(this.peerPubKeyZ32);
 			let receivedNew = false;
 			const batch = packet ? parseLinkRecords(packet, this.encKey) : null;
 			if (batch && isEmptyLinkPacket(batch)) {
@@ -6205,7 +5962,8 @@ var LinkSession = class {
 					ms: Date.now() - started,
 					error: String(error)
 				});
-				if (!isDiscoveryBudgetError(error)) {
+				if (isDiscoveryBudgetError(error)) heldBackMs = error.retryInMs;
+				else {
 					this.discoveryResult("read", error);
 					this.events.onStatus?.("error");
 				}
@@ -6223,7 +5981,7 @@ var LinkSession = class {
 				this.poll();
 			} else if (this.running && !this.pollTimer) {
 				const interval = this.nextInterval();
-				const wait = Math.max(MIN_POLL_GAP_MS, interval - (Date.now() - started));
+				const wait = heldBackMs !== void 0 ? Math.min(interval, Math.max(BUDGET_RETRY_MIN_MS, heldBackMs)) : Math.max(MIN_POLL_GAP_MS, interval - (Date.now() - started));
 				this.events.onPoll?.({
 					polling: false,
 					nextInMs: wait
@@ -6333,7 +6091,9 @@ var ICE_GATHERING_TIMEOUT_MS = 5e3;
 * settle); where they do not, every offer of a first pairing waited the full 5 s, twice when the inviter offered too
 * (One's e2e runs: 13 offers of 89 at 5 s, 9 more at 1.3-3 s, 2026-10-05). An offer without one still connects to most
 * contacts (their checks learn this side's address from its own); behind a restricted NAT on the contact's side it may
-* not, and the next offer of the chat then waits as long as it takes (`fullGather`).
+* not, and the next offer of the chat then waits as long as it takes (`fullGather`). An answer is bounded the same way:
+* it waited the full 5 s, and two CLI daemons whose STUN server swallowed every request went live 10 s after the offer
+* rather than 2 s (calls bug hunt, 2026-10-12).
 */
 var OFFER_HOST_GATHER_MS = 2e3;
 /**
@@ -6343,6 +6103,14 @@ var OFFER_HOST_GATHER_MS = 2e3;
 var GATHER_STALL_MS = 3e3;
 /** How long a connection may stay `disconnected` before it is given up. */
 var DISCONNECT_GRACE_MS = 12e3;
+/**
+* The same race a moment later: setRemoteDescription resolves, and the connection closes right after it (8 ms on a
+* loaded core). A connection that ends within this long of its answer going in was refused too: no network fails one
+* that soon (ICE gives up after tens of seconds), so it says nothing about direct connections (`DirectEvidence`).
+* Taken for a network that lets none through, an edge between two CLIs left WebRTC for the run, and a member whose
+* app has WebRTC alone (one from before native group links) was never reached again (groupCompat, 2026-10-12).
+*/
+var ANSWER_REFUSED_AFTER_MS = 1e3;
 /** An offer this close to the end of the offerer's attempt is not answered again: the new answer would come too late. */
 var REANSWER_MARGIN_MS = 15e3;
 /**
@@ -6374,12 +6142,13 @@ var DataLink = class {
 	pc = null;
 	myOfferTs = 0;
 	/**
-	* An offer of this side's that went without a public candidate came to nothing (it was answered, and no path
-	* connected): the next one waits for its STUN servers as long as it takes (`ICE_GATHERING_TIMEOUT_MS`).
+	* An offer or answer of this side's that went without a public candidate came to nothing (both descriptions were
+	* exchanged, and no path connected): the next one waits for its STUN servers as long as it takes
+	* (`ICE_GATHERING_TIMEOUT_MS`).
 	*/
 	fullGather = false;
-	/** The offer out has no public candidate (as it went: the connection's description gains any that come later). */
-	offerLacksPublic = false;
+	/** The offer or answer out has no public candidate (as it went: the connection's description gains any that come later). */
+	sentLacksPublic = false;
 	lastSignalTs = 0;
 	/** The peer's description as this connection was given it: Chrome shows it as `remoteDescription` only once applied. */
 	remoteSdp = null;
@@ -6425,7 +6194,7 @@ var DataLink = class {
 				this.options.setFastPoll(true, true);
 			}
 			this.myOfferTs = Date.now();
-			this.offerLacksPublic = !PUBLIC_CANDIDATE.test(pc.localDescription?.sdp ?? "");
+			this.sentLacksPublic = !PUBLIC_CANDIDATE.test(pc.localDescription?.sdp ?? "");
 			const signal = {
 				t: "o",
 				ts: this.myOfferTs,
@@ -6531,9 +6300,12 @@ var DataLink = class {
 		this.reset();
 		if (evidence) this.options.onDirect?.(evidence);
 	}
-	/** This side's offer went with no public candidate, was answered, and came to nothing: the next offer gathers for as long as it takes. */
+	/**
+	* This side's offer went with no public candidate and was answered, or its answer went with none, and it came to
+	* nothing: the next offer or answer gathers for as long as it takes.
+	*/
 	noteNoPublic(ended) {
-		if (ended && this.myOfferTs && this.offerLacksPublic && this.state === "connecting") this.fullGather = true;
+		if (ended && (this.myOfferTs || this.answered) && this.sentLacksPublic && this.state === "connecting") this.fullGather = true;
 	}
 	/**
 	* What this attempt says about direct connections if it ends now without opening: nothing unless both descriptions
@@ -6548,17 +6320,22 @@ var DataLink = class {
 	/**
 	* The attempt on this connection failed (it timed out, ICE failed or closed, its channel closed). An answer the
 	* offerer may not have read yet is made again for the same offer while it still stands (`REANSWERS`); anything
-	* else goes back to idle.
+	* else goes back to idle. `byConnection`: the connection said so itself, rather than a timer of this link's.
 	*/
-	failed() {
+	failed(byConnection = false) {
 		if (this.state === "offering" && this.remoteSdp) {
 			this.answerRefused("failed");
 			return;
 		}
+		if (byConnection && this.state === "connecting" && this.myOfferTs && Date.now() - this.connectingSince < ANSWER_REFUSED_AFTER_MS) {
+			this.answerRefused("failed");
+			return;
+		}
 		const answered = this.state === "connecting" ? this.answered : null;
 		const left = answered ? CONNECT_TIMEOUT_MS - (Date.now() - answered.at) : 0;
-		const evidence = this.directEvidence();
-		this.noteNoPublic(true);
+		const givenUp = !!answered && this.options.offerStanding?.(answered.offer.ts) === false;
+		const evidence = givenUp ? null : this.directEvidence();
+		this.noteNoPublic(!givenUp);
 		if (answered && answered.again < 2 && left > REANSWER_MARGIN_MS && this.options.offerStanding?.(answered.offer.ts)) {
 			answered.again++;
 			traceLink(this.options.myPubKeyZ32, "reanswer", {
@@ -6599,6 +6376,7 @@ var DataLink = class {
 				await pc.setLocalDescription(await pc.createAnswer());
 			});
 			if (!pc) return;
+			this.sentLacksPublic = !PUBLIC_CANDIDATE.test(pc.localDescription?.sdp ?? "");
 			const signal = {
 				t: "a",
 				ts: Date.now(),
@@ -6628,7 +6406,7 @@ var DataLink = class {
 			await waitForIceGathering(pc, ICE_GATHERING_TIMEOUT_MS, {
 				stallMs: GATHER_STALL_MS,
 				settleMs: 150,
-				...offer && !this.fullGather ? { hostBoundMs: OFFER_HOST_GATHER_MS } : {}
+				...!this.fullGather ? { hostBoundMs: OFFER_HOST_GATHER_MS } : {}
 			});
 			if (this.pc !== pc) return null;
 			const ms = Date.now() - gathering;
@@ -6675,7 +6453,7 @@ var DataLink = class {
 			tracePair(this.options.myPubKeyZ32, pc);
 		});
 		dc.addEventListener("close", () => {
-			if (this.pc === pc) this.failed();
+			if (this.pc === pc) this.failed(true);
 		});
 		pc.addEventListener("connectionstatechange", () => {
 			if (this.pc !== pc) return;
@@ -6684,7 +6462,7 @@ var DataLink = class {
 				if (pc.connectionState === "connected") this.options.onDisconnected?.(false);
 			}
 			this.disconnectTimer = null;
-			if (pc.connectionState === "failed" || pc.connectionState === "closed") this.failed();
+			if (pc.connectionState === "failed" || pc.connectionState === "closed") this.failed(true);
 			else if (pc.connectionState === "disconnected") {
 				if (this.state === "open") this.options.onDisconnected?.(true);
 				this.disconnectTimer = setTimeout(() => {
@@ -7040,1038 +6818,48 @@ function rememberAlone(alone, key, present) {
 }
 var GROUP_ADMIN_OFF_ERROR = "Managing this group is off on this device. Turn on Manage groups from this device first.";
 //#endregion
-//#region ../core/src/canonicalJson.ts
-/** True when `s` holds a lone UTF-16 surrogate, which I-JSON (and so JCS) does not allow. */
-function hasLoneSurrogate(s) {
-	for (let i = 0; i < s.length; i++) {
-		const c = s.charCodeAt(i);
-		if (c >= 55296 && c <= 56319) {
-			const next = s.charCodeAt(i + 1);
-			if (next >= 56320 && next <= 57343) {
-				i++;
-				continue;
-			}
-			return true;
-		}
-		if (c >= 56320 && c <= 57343) return true;
-	}
-	return false;
-}
-function write(value, depth) {
-	if (depth > 64) throw new Error("JSON nested deeper than 64 levels");
-	if (value === null) return "null";
-	if (typeof value === "boolean") return value ? "true" : "false";
-	if (typeof value === "number") {
-		if (!Number.isFinite(value)) throw new Error("JSON numbers must be finite");
-		return JSON.stringify(value);
-	}
-	if (typeof value === "string") {
-		if (hasLoneSurrogate(value)) throw new Error("A JSON string holds a lone surrogate");
-		return JSON.stringify(value);
-	}
-	if (Array.isArray(value)) return `[${value.map((v) => write(v, depth + 1)).join(",")}]`;
-	if (typeof value === "object") {
-		const record = value;
-		return `{${Object.keys(value).filter((k) => record[k] !== void 0).sort((a, b) => a < b ? -1 : a > b ? 1 : 0).map((k) => {
-			if (hasLoneSurrogate(k)) throw new Error("A JSON key holds a lone surrogate");
-			return `${JSON.stringify(k)}:${write(record[k], depth + 1)}`;
-		}).join(",")}}`;
-	}
-	throw new Error(`Not a JSON value: ${typeof value}`);
-}
-/** The canonical text of a JSON value. Throws on a value JSON cannot hold (a non-finite number, a lone surrogate). */
-function canonicalJson(value) {
-	return write(value, 0);
-}
-/** The canonical UTF-8 bytes of a JSON value. */
-function canonicalJsonBytes(value) {
-	return utf8Encode(canonicalJson(value));
+//#region ../core/src/replies.ts
+var REPLY_LIMITS = {
+	/** Code points of the line of the original, an ellipsis included when it was cut. */
+	snippet: 120,
+	/** Characters of the original's id. */
+	id: 128,
+	/** Characters of a line as it arrives, before it is cleaned: anything longer is not a line of a message. */
+	raw: 2048
+};
+/** A paired chat's message id, a payment id or a file's wire id; a group message's `sender:epoch:seq`. */
+var REPLY_ID = /^[A-Za-z0-9_:.-]{1,128}$/;
+/** The two authors a paired chat has, from the reply author's side. */
+var PAIRED_REPLY_AUTHORS = ["sender", "recipient"];
+/** A picture sent inline has no line worth quoting. */
+var INLINE_PICTURE = /^data:image\//i;
+/**
+* A line of a message to quote: plain text on one line (line breaks and runs of spaces become one space), without
+* control, invisible or direction characters (WISP 400, as for names), at most `REPLY_LIMITS.snippet` code points,
+* the last of them an ellipsis when it was cut.
+*/
+function replySnippet(text) {
+	if (INLINE_PICTURE.test(text.trimStart())) return "🖼️ Picture";
+	const flat = text.slice(0, REPLY_LIMITS.raw * 2).replace(/\s+/gu, " ");
+	const clean = sanitizeDisplayText(flat, REPLY_LIMITS.snippet + 1) ?? "";
+	const points = [...clean];
+	return points.length > REPLY_LIMITS.snippet ? `${points.slice(0, REPLY_LIMITS.snippet - 1).join("").trimEnd()}…` : clean;
 }
 /**
-* Reads bytes that must be the canonical form of a JSON value: `not-json` when they are not UTF-8 JSON, `not-canonical`
-* when writing the value again gives other bytes.
+* A reply as a receiver takes it: an object with an id of this chat's shape, a line (cleaned and cut again here,
+* whatever the sender did) and an author `author` accepts. Anything else is no reply: the message stays, without it.
 */
-function readCanonicalJson(bytes) {
-	let value;
-	try {
-		value = JSON.parse(utf8Decode(bytes));
-	} catch (error) {
-		return {
-			ok: false,
-			reason: "not-json",
-			detail: error instanceof Error ? error.message : String(error)
-		};
-	}
-	let again;
-	try {
-		again = canonicalJsonBytes(value);
-	} catch (error) {
-		return {
-			ok: false,
-			reason: "not-canonical",
-			detail: error instanceof Error ? error.message : String(error)
-		};
-	}
-	if (!bytesEqual(again, bytes)) return {
-		ok: false,
-		reason: "not-canonical"
-	};
+function readReply(raw, author) {
+	if (!raw || typeof raw !== "object" || Array.isArray(raw)) return void 0;
+	const { i, s, f, b } = raw;
+	if (typeof i !== "string" || !REPLY_ID.test(i)) return void 0;
+	if (typeof s !== "string" || s.length > REPLY_LIMITS.raw) return void 0;
+	if (typeof f !== "string" || !author(f)) return void 0;
 	return {
-		ok: true,
-		value
-	};
-}
-//#endregion
-//#region ../core/src/appStatements.ts
-/** The prefixes of phase 1. The others of the WISP (reports, reviews, licences, rotation, publisher proofs) come later. */
-var APP_PREFIXES = {
-	app: "ghostly-app/1",
-	store: "ghostly-store/1",
-	revoke: "ghostly-revoke/1"
-};
-var APP_STATEMENT_LIMITS = {
-	/** A signature statement's canonical bytes: 52 + 86 characters of values and the keys around them. */
-	signatureBytes: 1024,
-	/** Digests named by one revocation. */
-	revokeDigests: 64,
-	/** A revocation's reason, in characters. */
-	reason: 200,
-	/** Revocations in one `ghostly-revoke.json`. */
-	revocations: 4096
-};
-/** A z-base32 Ed25519 public key: 52 characters that decode to 32 bytes and encode back to the same text. */
-function isAppKey(value) {
-	if (typeof value !== "string" || !/^[ybndrfg8ejkmcpqxot1uwisza345h769]{52}$/.test(value)) return false;
-	const bytes = fromZ32(value);
-	return bytes.length === 32 && toZ32(bytes) === value;
-}
-/** A SHA-256 in base64url without padding: 43 characters that decode to 32 bytes and encode back to the same text. */
-function isAppHash(value) {
-	if (typeof value !== "string" || !/^[A-Za-z0-9_-]{43}$/.test(value)) return false;
-	return toBase64Url(fromBase64Url(value)) === value;
-}
-/** An app reference, `<publisher key>/<name>`. */
-var APP_NAME = /^[a-z][a-z0-9-]{0,31}$/;
-function isAppRef(value) {
-	if (typeof value !== "string") return false;
-	return value.indexOf("/") === 52 && isAppKey(value.slice(0, 52)) && APP_NAME.test(value.slice(53));
-}
-function appRef(publisher, name) {
-	return `${publisher}/${name}`;
-}
-/** The publisher key of a reference. */
-function appRefPublisher(ref) {
-	return ref.slice(0, 52);
-}
-/**
-* The publisher fingerprint people see: the first 16 z-base32 characters of the key (80 bits), in four groups.
-*/
-function appFingerprint(key) {
-	return (key.slice(0, 16).match(/.{1,4}/g) ?? []).join(" ");
-}
-/** The bytes a signature covers: the prefix, a zero byte, then the SHA-256 of the object's canonical bytes. */
-function appSignedBytes(prefix, canonical) {
-	const p = utf8Encode(prefix);
-	const out = new Uint8Array(p.length + 1 + 32);
-	out.set(p, 0);
-	out.set(sha256(canonical), p.length + 1);
-	return out;
-}
-/** Signs an object under a prefix: its canonical bytes and the signature statement. */
-async function signAppObject(prefix, value, signer) {
-	const bytes = canonicalJsonBytes(value);
-	const sig = await signer.sign(appSignedBytes(prefix, bytes));
-	return {
-		bytes,
-		signature: {
-			alg: "ed25519",
-			key: toZ32(signer.publicKey),
-			sig: toBase64Url(sig)
-		}
-	};
-}
-/**
-* Ed25519 verification as RFC 8032 writes it (`zip215: false`): canonical encodings of the point and the scalar only,
-* so every parser (this one, a Rust one with `verify_strict`) accepts exactly the same signatures.
-*/
-function strictVerify(signature, message, publicKey) {
-	try {
-		return ed25519.verify(signature, message, publicKey, { zip215: false });
-	} catch {
-		return false;
-	}
-}
-var exactKeys$1 = (value, keys, optional = []) => {
-	if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
-	const have = Object.keys(value);
-	return keys.every((k) => have.includes(k)) && have.every((k) => keys.includes(k) || optional.includes(k));
-};
-/** Checks the shape of a signature statement: exactly `alg`, `key` and `sig`, a 64-byte signature. */
-function isAppSignature(value) {
-	if (!exactKeys$1(value, [
-		"alg",
-		"key",
-		"sig"
-	])) return false;
-	if (value.alg !== "ed25519" || !isAppKey(value.key)) return false;
-	return typeof value.sig === "string" && /^[A-Za-z0-9_-]{86}$/.test(value.sig) && toBase64Url(fromBase64Url(value.sig)) === value.sig;
-}
-/** Reads a signature statement from its bytes, which must be canonical. */
-function readAppSignature(bytes) {
-	if (bytes.length > APP_STATEMENT_LIMITS.signatureBytes) return {
-		ok: false,
-		reason: "bad-signature-statement",
-		detail: "Too large"
-	};
-	const read = readCanonicalJson(bytes);
-	if (!read.ok) return {
-		ok: false,
-		reason: "bad-signature-statement",
-		detail: read.reason
-	};
-	if (!isAppSignature(read.value)) return {
-		ok: false,
-		reason: "bad-signature-statement",
-		detail: "Not {alg, key, sig}"
-	};
-	return {
-		ok: true,
-		signature: read.value
-	};
-}
-/**
-* Verifies a signature over an object's canonical bytes under a prefix, made by `key`: `signature-key` when the
-* statement names another key, `bad-signature` when it does not verify.
-*/
-function verifyAppSignature(prefix, canonical, signature, key) {
-	if (!isAppSignature(signature)) return {
-		ok: false,
-		reason: "bad-signature-statement"
-	};
-	if (signature.key !== key) return {
-		ok: false,
-		reason: "signature-key"
-	};
-	return strictVerify(fromBase64Url(signature.sig), appSignedBytes(prefix, canonical), fromZ32(key)) ? { ok: true } : {
-		ok: false,
-		reason: "bad-signature"
-	};
-}
-var isSequence = (v) => typeof v === "number" && Number.isSafeInteger(v) && v >= 1;
-var isPlainLine = (v, max) => typeof v === "string" && [...v].length <= max && !/\p{Cc}/u.test(v);
-/** Checks a revocation statement's shape; the reason it is refused, or null. */
-function checkAppRevokeStatement(value) {
-	if (typeof value !== "object" || value === null || Array.isArray(value)) return "Not an object";
-	const v = value;
-	const byDigests = "digests" in v;
-	if (!exactKeys$1(v, [
-		"ghostlyRevoke",
-		"app",
-		byDigests ? "digests" : "upTo"
-	], ["reason"])) return "Keys are not ghostlyRevoke, app, and exactly one of digests and upTo (reason optional)";
-	if (v.ghostlyRevoke !== 1) return "ghostlyRevoke is not 1";
-	if (!isAppRef(v.app)) return "app is not a reference";
-	if (byDigests) {
-		const d = v.digests;
-		if (!Array.isArray(d) || d.length < 1 || d.length > APP_STATEMENT_LIMITS.revokeDigests) return "digests is not 1 to 64 digests";
-		if (!d.every(isAppHash) || new Set(d).size !== d.length) return "digests holds a bad or repeated digest";
-	} else if (!isSequence(v.upTo)) return "upTo is not a sequence";
-	if (v.reason !== void 0 && !isPlainLine(v.reason, APP_STATEMENT_LIMITS.reason)) return "reason is not one line of 200 characters";
-	return null;
-}
-/** Signs a revocation with the publisher's key. */
-async function signAppRevocation(statement, signer) {
-	const problem = checkAppRevokeStatement(statement);
-	if (problem) throw new Error(`Not a revocation: ${problem}`);
-	if (toZ32(signer.publicKey) !== appRefPublisher(statement.app)) throw new Error("A revocation is signed by its app's publisher");
-	const { signature } = await signAppObject(APP_PREFIXES.revoke, statement, signer);
-	return {
-		statement,
-		signature
-	};
-}
-/** What a checked revocation is kept by: the SHA-256 of its canonical bytes (statement and signature), base64url. */
-function appRevocationId(revocation) {
-	return toBase64Url(sha256(canonicalJsonBytes(revocation)));
-}
-/**
-* Reads one signed revocation (a parsed value, from `ghostly-revoke.json` or a store index's `revoked`): its shape, then
-* the signature under `ghostly-revoke/1` by the publisher its `app` names. One that `checked` holds verified before, so
-* its signature is not checked again; one that verifies now is added to it.
-*/
-function readAppRevocation(value, checked) {
-	const read = readAppRevocationShape(value);
-	if (!read.ok) return read;
-	const verified = verifyAppRevocation(read.revocation, checked);
-	return verified.ok ? read : verified;
-}
-/** The first half of `readAppRevocation`: the shape of a signed revocation, with no signature checked. */
-function readAppRevocationShape(value) {
-	if (!exactKeys$1(value, ["statement", "signature"])) return {
-		ok: false,
-		reason: "bad-revocation",
-		detail: "Keys are not statement and signature"
-	};
-	const problem = checkAppRevokeStatement(value.statement);
-	if (problem) return {
-		ok: false,
-		reason: "bad-revocation",
-		detail: problem
-	};
-	if (!isAppSignature(value.signature)) return {
-		ok: false,
-		reason: "bad-signature-statement"
-	};
-	return {
-		ok: true,
-		revocation: {
-			statement: value.statement,
-			signature: value.signature
-		}
-	};
-}
-/** The second half: the signature of a revocation of the right shape, unless `checked` holds it. */
-function verifyAppRevocation(revocation, checked) {
-	const id = checked && appRevocationId(revocation);
-	if (id !== void 0 && checked.has(id)) return { ok: true };
-	const verified = verifyAppSignature(APP_PREFIXES.revoke, canonicalJsonBytes(revocation.statement), revocation.signature, appRefPublisher(revocation.statement.app));
-	if (verified.ok && id !== void 0) checked.add(id);
-	return verified;
-}
-/**
-* Reads `ghostly-revoke.json`: canonical bytes holding a list of signed revocations. One that does not verify refuses the
-* file, as a store index's `revoked` does.
-*/
-function readAppRevocations(bytes) {
-	const read = readCanonicalJson(bytes);
-	if (!read.ok) return read;
-	if (!Array.isArray(read.value) || read.value.length > APP_STATEMENT_LIMITS.revocations) return {
-		ok: false,
-		reason: "bad-revocation",
-		detail: "Not a list of at most 4096 revocations"
-	};
-	const revocations = [];
-	for (const entry of read.value) {
-		const one = readAppRevocation(entry);
-		if (!one.ok) return one;
-		revocations.push(one.revocation);
-	}
-	return {
-		ok: true,
-		revocations
-	};
-}
-//#endregion
-//#region ../core/src/messageTime.ts
-/**
-* How far ahead of this device's clock a number a peer made from its clock may be (a pin's number, a status card's
-* times): clocks drift, but a time past this is the peer's choice, not its clock.
-*/
-var MESSAGE_CLOCK_SKEW_MS = 3e5;
-/**
-* The time a line of a group's history is kept under (a membership change, a rename): what its commit says, but at
-* most `MESSAGE_CLOCK_SKEW_MS` past this clock, and now when it is not a positive number. Messages do not use it:
-* they are placed where they arrive (below).
-*/
-function receivedTimestamp(ts, now = Date.now()) {
-	if (!Number.isFinite(ts) || ts <= 0) return now;
-	return Math.min(ts, now + MESSAGE_CLOCK_SKEW_MS);
-}
-/** The latest moment a date can hold. */
-var MAX_DATE_MS = 864e13;
-/** The time a sender says, as it is kept: a positive time a date can hold, or nothing. */
-function claimedTime(ts) {
-	return typeof ts === "number" && Number.isFinite(ts) && ts > 0 && ts <= MAX_DATE_MS ? ts : void 0;
-}
-/**
-* The place of a row stored now: this clock, and past the last place given in its chat, so rows that come in the
-* same millisecond (a hold pickup, a group's catch-up) keep the order they came in.
-*/
-function arrivalKey(now, last = 0) {
-	return Math.max(now, last + 1);
-}
-/** The time a message shows: what its sender said, never later than when it came. A row of mine shows its own time. */
-function shownTime(message) {
-	return message.sentAt === void 0 ? message.timestamp : Math.min(message.sentAt, message.timestamp);
-}
-/**
-* When something a peer dated happened (an edit), for this device: what the peer says, now at the latest, and now
-* when it says nothing a date can hold.
-*/
-function heardTime(ts, now = Date.now()) {
-	return Math.min(claimedTime(ts) ?? now, now);
-}
-//#endregion
-//#region ../core/src/statusCards.ts
-var STATUS_CARD_LIMITS = {
-	/** A card's JSON, as sent (UTF-8 bytes): with the fallback text it stays well inside every message bound. */
-	bytes: 8192,
-	/** The sender's id for the card: stable across its updates. */
-	id: 64,
-	title: 120,
-	/** The current step, a list item, a run's summary. */
-	line: 200,
-	branch: 120,
-	schedule: 80,
-	cron: 64,
-	linkLabel: 40,
-	url: 512,
-	items: 20,
-	links: 4,
-	runs: 10,
-	/** Any count on a card (a PR's number, lines, files; steps). */
-	count: 1e9,
-	/** How far ahead a routine's next run may be. */
-	nextRunMs: 316224e5,
-	/** Edits a message with a card takes (a text takes `MAX_EDITS_PER_MESSAGE`): a bot updates a long task often. */
-	edits: 5e3,
-	/** Labels on a task, and a label's length in characters. */
-	tags: 3,
-	tag: 24,
-	/** Buttons on a message (WISP 406 · Message Buttons). */
-	buttons: 6,
-	/** A button's id: what a press names. */
-	buttonId: 32,
-	/** A button's label, in characters. */
-	buttonLabel: 40,
-	/** An app card's title and version, in characters (WISP 405 § An app): the manifest's bounds. */
-	appTitle: 40,
-	appVersion: 32,
-	/** A usage card's label ("Claude") and account, in characters (WISP 405 § Usage). */
-	usageLabel: 24,
-	/** A usage window's name ("5 h", "week"), in characters. */
-	usageWindow: 16,
-	/** Windows beside a usage card's own, shown in its details. */
-	usageWindows: 3
-};
-/** How a button looks: `primary` is the one highlighted, `danger` warns; `neutral` when none is said. */
-var BUTTON_STYLES = [
-	"primary",
-	"neutral",
-	"danger"
-];
-var TASK_STATUSES = [
-	"queued",
-	"running",
-	"blocked",
-	"done",
-	"failed",
-	"cancelled"
-];
-/** A task that is still going: shown first, and counted on the chat's Tasks button. */
-var ACTIVE_TASK_STATUSES = [
-	"queued",
-	"running",
-	"blocked"
-];
-var ITEM_STATES = [
-	"pending",
-	"running",
-	"done",
-	"failed",
-	"skipped"
-];
-var ROUTINE_STATES = ["active", "paused"];
-var RUN_RESULTS = [
-	"ok",
-	"failed",
-	"skipped"
-];
-/**
-* Where a task's pull request stands: `draft` (not ready for review), `open` (ready for review), `merged`, `closed`
-* (closed without a merge). A reader that does not know the field shows the pull request as before.
-*/
-var PR_STATES = [
-	"draft",
-	"open",
-	"merged",
-	"closed"
-];
-/** How a pull request's checks stand. */
-var PR_CHECKS = [
-	"passing",
-	"failing",
-	"pending"
-];
-var ID$4 = /^[A-Za-z0-9_.:][A-Za-z0-9_.:-]{0,63}$/;
-/** A button's id: 1 to 32 of `A-Z a-z 0-9 _ . : -`, not starting with `-`. */
-var BUTTON_ID = /^[A-Za-z0-9_.:][A-Za-z0-9_.:-]{0,31}$/;
-var CRON = /^[0-9A-Za-z*,/?#\- ]{1,64}$/;
-/**
-* Whether a typed answer is a button's label or id (WISP 406 · Message Buttons): ignoring case and spaces at the ends.
-* Not the device's locale's case: the presser's and the author's apps must agree ("I" is not "ı" anywhere).
-*/
-var sameButtonText = (a, b) => a.trim().toLowerCase() === b.trim().toLowerCase();
-/**
-* Two buttons a typed answer could not tell apart, or none: a label that reads as an earlier label (`label`), or a
-* label that reads as another button's id (`id`), both as `sameButtonText` compares them. The labels as a reader keeps
-* them (one line, cleaned). `at` is the button that clashes, `with` the one it clashes with.
-*/
-function buttonLabelClash(buttons) {
-	const labels = buttons.map((button) => isObject$4(button) ? cardLine(button.label, Infinity) : void 0);
-	const ids = buttons.map((button) => isObject$4(button) && typeof button.id === "string" ? button.id : void 0);
-	for (const [at, label] of labels.entries()) {
-		if (!label) continue;
-		const twin = labels.findIndex((other, i) => i < at && !!other && sameButtonText(other, label));
-		if (twin !== -1) return {
-			at,
-			with: twin,
-			kind: "label"
-		};
-		const named = ids.findIndex((id, i) => i !== at && id !== void 0 && sameButtonText(id, label));
-		if (named !== -1) return {
-			at,
-			with: named,
-			kind: "id"
-		};
-	}
-}
-/** An app card's id, made from its reference: the app's name, a dot, the first 16 characters of the publisher key. */
-function appCardId(ref) {
-	return `${ref.slice(53)}.${ref.slice(0, 16)}`;
-}
-/** An app card's `sequence`: a whole number from 0 to 2^53 - 1. */
-var appSequence = (value) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
-var isObject$4 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
-/** One line of display text: runs of space (line breaks included) become one space, then the display rules for names. */
-function cardLine(value, max) {
-	if (typeof value !== "string") return void 0;
-	return sanitizeDisplayText(value.replace(/\s+/gu, " "), max);
-}
-/**
-* An https link a card may show: no credentials, a host, no spaces or control characters, at most
-* `STATUS_CARD_LIMITS.url` characters. Returned as the parser writes it (a non-ASCII host in punycode).
-*/
-function cardUrl(value) {
-	if (typeof value !== "string" || !value || value.length > STATUS_CARD_LIMITS.url || /[\s\p{Cc}\p{Cf}]/u.test(value)) return void 0;
-	let url;
-	try {
-		url = new URL(value);
-	} catch {
-		return;
-	}
-	if (url.protocol !== "https:" || !url.hostname || url.username || url.password) return void 0;
-	return url.href.length <= STATUS_CARD_LIMITS.url ? url.href : void 0;
-}
-var count = (value, min = 0) => typeof value === "number" && Number.isSafeInteger(value) && value >= min && value <= STATUS_CARD_LIMITS.count ? value : void 0;
-/** A time on a card as a reader keeps it: a positive whole number, never later than `latest`. */
-var time = (value, latest) => typeof value === "number" && Number.isSafeInteger(value) && value > 0 ? Math.min(value, latest) : void 0;
-var oneOf = (values, value) => typeof value === "string" && values.includes(value) ? value : void 0;
-function readLinks(raw) {
-	if (!Array.isArray(raw)) return [];
-	const links = [];
-	for (const entry of raw.slice(0, STATUS_CARD_LIMITS.links)) {
-		if (!isObject$4(entry)) continue;
-		const url = cardUrl(entry.url);
-		if (!url) continue;
-		const label = cardLine(entry.label, STATUS_CARD_LIMITS.linkLabel);
-		links.push({
-			url,
-			...label && { label }
-		});
-	}
-	return links;
-}
-/** A task's labels as a reader keeps them: the first `STATUS_CARD_LIMITS.tags` that hold, each one clean line, none twice. */
-function readTags(raw) {
-	if (!Array.isArray(raw)) return [];
-	const tags = [];
-	for (const entry of raw) {
-		const tag = cardLine(entry, STATUS_CARD_LIMITS.tag);
-		if (tag && !tags.includes(tag)) tags.push(tag);
-		if (tags.length === STATUS_CARD_LIMITS.tags) break;
-	}
-	return tags;
-}
-function readRun(raw, now) {
-	if (!isObject$4(raw)) return void 0;
-	const at = time(raw.at, now + MESSAGE_CLOCK_SKEW_MS), result = oneOf(RUN_RESULTS, raw.result);
-	if (!at || !result) return void 0;
-	const summary = cardLine(raw.summary, STATUS_CARD_LIMITS.line);
-	return {
-		at,
-		result,
-		...summary && { summary }
-	};
-}
-/** A percent as a reader keeps it: a finite number, rounded and clamped into 0 to 100. */
-var percent = (value) => typeof value === "number" && Number.isFinite(value) ? Math.round(Math.min(100, Math.max(0, value))) : void 0;
-/** A time ahead of the reader (a reset, a next run) as it keeps it: whole, positive, at most a year ahead. */
-var ahead = (value, now) => typeof value === "number" && Number.isSafeInteger(value) && value > 0 && value <= now + STATUS_CARD_LIMITS.nextRunMs ? value : void 0;
-/** A usage card as a reader keeps it (WISP 405 § Usage): dropped without a percent left or a used of limit. */
-function readUsage(raw, id, now) {
-	const left = percent(raw.left);
-	let used = count(raw.used), limit = count(raw.limit, 1);
-	if (used === void 0 || limit === void 0 || used > limit) used = limit = void 0;
-	if (left === void 0 && limit === void 0) return void 0;
-	const label = cardLine(raw.label, STATUS_CARD_LIMITS.usageLabel), account = cardLine(raw.account, STATUS_CARD_LIMITS.usageLabel);
-	const window = cardLine(raw.window, STATUS_CARD_LIMITS.usageWindow);
-	const resetsAt = ahead(raw.resetsAt, now), updatedAt = time(raw.updatedAt, now + MESSAGE_CLOCK_SKEW_MS);
-	const windows = [];
-	if (Array.isArray(raw.windows)) for (const entry of raw.windows.slice(0, STATUS_CARD_LIMITS.usageWindows)) {
-		if (!isObject$4(entry)) continue;
-		const name = cardLine(entry.window, STATUS_CARD_LIMITS.usageWindow), share = percent(entry.left);
-		if (!name || share === void 0) continue;
-		const at = ahead(entry.resetsAt, now);
-		windows.push({
-			window: name,
-			left: share,
-			...at && { resetsAt: at }
-		});
-	}
-	return {
-		kind: "usage",
-		id,
-		...left !== void 0 && { left },
-		...used !== void 0 && limit !== void 0 && {
-			used,
-			limit
-		},
-		...label && { label },
-		...account && { account },
-		...window && { window },
-		...resetsAt && { resetsAt },
-		...updatedAt && { updatedAt },
-		...windows.length && { windows }
-	};
-}
-/** How much of a usage card's quota is left, 0 to 100: its own percent, else worked out from used of limit. */
-function usageLeft(card) {
-	if (card.left !== void 0) return card.left;
-	return card.used !== void 0 && card.limit ? Math.round((card.limit - card.used) / card.limit * 100) : 0;
-}
-/** The bytes a card takes on the wire: what `STATUS_CARD_LIMITS.bytes` bounds. */
-function statusCardBytes(card) {
-	try {
-		return utf8Encode(JSON.stringify(card) ?? "").length;
-	} catch {
-		return Infinity;
-	}
-}
-/**
-* A card as a reader takes it from the wire (`sc`), or undefined when it cannot stand: not an object, past
-* `STATUS_CARD_LIMITS.bytes`, a kind this app does not know, no valid id, title or name, status or state. Fields that do
-* not hold are left out and lists are cut to their bound; times are kept no later than the reader's clock allows (a
-* routine's next run up to a year ahead). The message is always kept: without a card it shows its text.
-*/
-function readStatusCard(raw, now = Date.now()) {
-	if (!isObject$4(raw) || statusCardBytes(raw) > STATUS_CARD_LIMITS.bytes) return void 0;
-	const id = typeof raw.id === "string" && ID$4.test(raw.id) ? raw.id : void 0;
-	if (!id) return void 0;
-	if (raw.kind === "app") {
-		if (!isAppRef(raw.ref) || id !== appCardId(raw.ref) || !isAppHash(raw.digest) || !appSequence(raw.sequence)) return void 0;
-		const title = cardLine(raw.title, STATUS_CARD_LIMITS.appTitle);
-		if (!title) return void 0;
-		const version = cardLine(raw.version, STATUS_CARD_LIMITS.appVersion), url = cardUrl(raw.url);
-		return {
-			kind: "app",
-			id,
-			ref: raw.ref,
-			digest: raw.digest,
-			sequence: raw.sequence,
-			title,
-			...version && { version },
-			...url && { url },
-			...raw.opened === true && { opened: true }
-		};
-	}
-	const latest = now + MESSAGE_CLOCK_SKEW_MS;
-	if (raw.kind === "usage") return readUsage(raw, id, now);
-	const links = readLinks(raw.links);
-	if (raw.kind === "task") {
-		const title = cardLine(raw.title, STATUS_CARD_LIMITS.title), status = oneOf(TASK_STATUSES, raw.status);
-		if (!title || !status) return void 0;
-		const progress = typeof raw.progress === "number" && Number.isFinite(raw.progress) ? Math.round(Math.min(100, Math.max(0, raw.progress))) : void 0;
-		let done = count(raw.done), total = count(raw.total, 1);
-		if (done === void 0 || total === void 0 || done > total) done = total = void 0;
-		const step = cardLine(raw.step, STATUS_CARD_LIMITS.line), branch = cardLine(raw.branch, STATUS_CARD_LIMITS.branch);
-		let pr;
-		if (isObject$4(raw.pr)) {
-			const url = cardUrl(raw.pr.url);
-			if (url) {
-				const number = count(raw.pr.number, 1), additions = count(raw.pr.additions), deletions = count(raw.pr.deletions), files = count(raw.pr.files);
-				const state = oneOf(PR_STATES, raw.pr.state), checks = oneOf(PR_CHECKS, raw.pr.checks);
-				pr = {
-					url,
-					...number !== void 0 && { number },
-					...additions !== void 0 && { additions },
-					...deletions !== void 0 && { deletions },
-					...files !== void 0 && { files },
-					...state && { state },
-					...checks && { checks }
-				};
-			}
-		}
-		const items = [];
-		if (Array.isArray(raw.items)) for (const entry of raw.items.slice(0, STATUS_CARD_LIMITS.items)) {
-			if (!isObject$4(entry)) continue;
-			const text = cardLine(entry.text, STATUS_CARD_LIMITS.line);
-			if (text) items.push({
-				text,
-				state: oneOf(ITEM_STATES, entry.state) ?? "pending"
-			});
-		}
-		const startedAt = time(raw.startedAt, latest), updatedAt = time(raw.updatedAt, latest);
-		const tags = readTags(raw.tags);
-		const parent = typeof raw.parent === "string" && ID$4.test(raw.parent) && raw.parent !== id ? raw.parent : void 0;
-		return {
-			kind: "task",
-			id,
-			title,
-			status,
-			...progress !== void 0 && { progress },
-			...done !== void 0 && total !== void 0 && {
-				done,
-				total
-			},
-			...step && { step },
-			...pr && { pr },
-			...branch && { branch },
-			...startedAt && { startedAt },
-			...updatedAt && { updatedAt },
-			...items.length && { items },
-			...links.length && { links },
-			...tags.length && { tags },
-			...parent && { parent }
-		};
-	}
-	if (raw.kind === "routine") {
-		const name = cardLine(raw.name, STATUS_CARD_LIMITS.title), schedule = cardLine(raw.schedule, STATUS_CARD_LIMITS.schedule), state = oneOf(ROUTINE_STATES, raw.state);
-		if (!name || !schedule || !state) return void 0;
-		const cron = typeof raw.cron === "string" && CRON.test(raw.cron.trim()) ? raw.cron.trim() : void 0;
-		const lastRun = readRun(raw.lastRun, now);
-		const nextRunAt = typeof raw.nextRunAt === "number" && Number.isSafeInteger(raw.nextRunAt) && raw.nextRunAt > 0 && raw.nextRunAt <= now + STATUS_CARD_LIMITS.nextRunMs ? raw.nextRunAt : void 0;
-		const runs = [];
-		if (Array.isArray(raw.runs)) for (const entry of raw.runs.slice(0, STATUS_CARD_LIMITS.runs)) {
-			const run = readRun(entry, now);
-			if (run) runs.push(run);
-		}
-		return {
-			kind: "routine",
-			id,
-			name,
-			schedule,
-			state,
-			...cron && { cron },
-			...lastRun && { lastRun },
-			...nextRunAt && { nextRunAt },
-			...runs.length && { runs },
-			...links.length && { links }
-		};
-	}
-	if (raw.kind === "buttons") {
-		if (!Array.isArray(raw.buttons)) return void 0;
-		const buttons = [], seen = /* @__PURE__ */ new Set();
-		for (const entry of raw.buttons.slice(0, STATUS_CARD_LIMITS.buttons)) {
-			if (!isObject$4(entry) || typeof entry.id !== "string" || !BUTTON_ID.test(entry.id) || seen.has(entry.id)) continue;
-			const label = cardLine(entry.label, STATUS_CARD_LIMITS.buttonLabel);
-			if (!label) continue;
-			seen.add(entry.id);
-			const style = oneOf(BUTTON_STYLES, entry.style);
-			buttons.push({
-				id: entry.id,
-				label,
-				...style && style !== "neutral" && { style },
-				...entry.once === true && { once: true }
-			});
-		}
-		if (!buttons.length) return void 0;
-		const chosen = typeof raw.chosen === "string" && seen.has(raw.chosen) ? raw.chosen : void 0;
-		return {
-			kind: "buttons",
-			id,
-			buttons,
-			...chosen && { chosen },
-			...raw.closed === true && { closed: true }
-		};
-	}
-}
-/**
-* A card as a sender may send it, or why not: the reader's rule, but anything it would leave out or cut is refused
-* here instead (an unknown status, a link that is not https, a list past its bound, a line too long), so a bot learns
-* at once and nothing it said is lost on the way. Line breaks and invisible characters are cleaned, as a reader would.
-*/
-function checkStatusCard(raw, now = Date.now()) {
-	if (!isObject$4(raw)) return { error: "A card is an object" };
-	const bytes = statusCardBytes(raw);
-	if (bytes > STATUS_CARD_LIMITS.bytes) return { error: `The card takes ${bytes} bytes; at most ${STATUS_CARD_LIMITS.bytes}` };
-	if (raw.kind !== "task" && raw.kind !== "routine" && raw.kind !== "buttons" && raw.kind !== "app" && raw.kind !== "usage") return { error: "kind is task, routine, buttons, app or usage" };
-	if (typeof raw.id !== "string" || !ID$4.test(raw.id)) return { error: `id is 1 to ${STATUS_CARD_LIMITS.id} of A-Z a-z 0-9 _ . : - and does not start with -` };
-	const line = (field, value, max, required = false) => {
-		if (value === void 0 && !required) return null;
-		if (typeof value !== "string" || !cardLine(value, Infinity)) return `${field} is text`;
-		if ([...cardLine(value, Infinity)].length > max) return `${field} is at most ${max} characters`;
-		return null;
-	};
-	const url = (field, value) => cardUrl(value) ? null : `${field} must be an https link of at most ${STATUS_CARD_LIMITS.url} characters`;
-	const whole = (field, value, min = 0) => value === void 0 || count(value, min) !== void 0 ? null : `${field} is a whole number from ${min}`;
-	const errors = [];
-	if (raw.links !== void 0) {
-		if (!Array.isArray(raw.links) || raw.links.length > STATUS_CARD_LIMITS.links) errors.push(`links is a list of at most ${STATUS_CARD_LIMITS.links}`);
-		else for (const [i, link] of raw.links.entries()) {
-			if (!isObject$4(link)) {
-				errors.push(`links[${i}] is an object`);
-				continue;
-			}
-			errors.push(url(`links[${i}].url`, link.url), line(`links[${i}].label`, link.label, STATUS_CARD_LIMITS.linkLabel));
-		}
-	}
-	const share = (field, value) => value === void 0 || typeof value === "number" && Number.isFinite(value) && value >= 0 && value <= 100 ? null : `${field} is a number from 0 to 100`;
-	const reset = (field, value) => value === void 0 || ahead(value, now) !== void 0 ? null : `${field} is a time in milliseconds, within a year`;
-	if (raw.kind === "usage") {
-		if (raw.links !== void 0) errors.push("a usage card takes no links");
-		if (raw.left === void 0 && raw.used === void 0) errors.push("left (a percent) or used and limit");
-		errors.push(share("left", raw.left));
-		if (raw.used === void 0 !== (raw.limit === void 0)) errors.push("used and limit go together");
-		else if (raw.used !== void 0) {
-			errors.push(whole("used", raw.used), whole("limit", raw.limit, 1));
-			if (typeof raw.used === "number" && typeof raw.limit === "number" && raw.used > raw.limit) errors.push("used is at most limit");
-		}
-		errors.push(line("label", raw.label, STATUS_CARD_LIMITS.usageLabel), line("account", raw.account, STATUS_CARD_LIMITS.usageLabel), line("window", raw.window, STATUS_CARD_LIMITS.usageWindow), reset("resetsAt", raw.resetsAt));
-		if (raw.updatedAt !== void 0 && !(typeof raw.updatedAt === "number" && Number.isSafeInteger(raw.updatedAt) && raw.updatedAt > 0 && raw.updatedAt <= now + 3e5)) errors.push("updatedAt is a time in milliseconds, not in the future");
-		if (raw.windows !== void 0) {
-			if (!Array.isArray(raw.windows) || raw.windows.length > STATUS_CARD_LIMITS.usageWindows) errors.push(`windows is a list of at most ${STATUS_CARD_LIMITS.usageWindows}`);
-			else for (const [i, entry] of raw.windows.entries()) {
-				if (!isObject$4(entry)) {
-					errors.push(`windows[${i}] is an object`);
-					continue;
-				}
-				errors.push(line(`windows[${i}].window`, entry.window, STATUS_CARD_LIMITS.usageWindow, true));
-				errors.push(entry.left === void 0 ? `windows[${i}].left is a number from 0 to 100` : share(`windows[${i}].left`, entry.left), reset(`windows[${i}].resetsAt`, entry.resetsAt));
-			}
-		}
-	} else if (raw.kind === "app") {
-		if (raw.links !== void 0) errors.push("an app card takes no links");
-		if (!isAppRef(raw.ref)) errors.push("ref is <publisher key in z-base32>/<name>");
-		else if (raw.id !== appCardId(raw.ref)) errors.push(`id is ${appCardId(raw.ref)}, made from ref`);
-		if (!isAppHash(raw.digest)) errors.push("digest is a SHA-256 in base64url without padding");
-		if (!appSequence(raw.sequence)) errors.push("sequence is a whole number from 0 to 2^53 - 1");
-		errors.push(line("title", raw.title, STATUS_CARD_LIMITS.appTitle, true), line("version", raw.version, STATUS_CARD_LIMITS.appVersion));
-		if (raw.url !== void 0) errors.push(url("url", raw.url));
-		if (raw.opened !== void 0 && raw.opened !== true) errors.push("opened is true or left out");
-	} else if (raw.kind === "buttons") {
-		if (raw.links !== void 0) errors.push("buttons take no links");
-		if (!Array.isArray(raw.buttons) || !raw.buttons.length || raw.buttons.length > STATUS_CARD_LIMITS.buttons) errors.push(`buttons is a list of 1 to ${STATUS_CARD_LIMITS.buttons}`);
-		else {
-			const ids = /* @__PURE__ */ new Set();
-			for (const [i, button] of raw.buttons.entries()) {
-				if (!isObject$4(button)) {
-					errors.push(`buttons[${i}] is an object`);
-					continue;
-				}
-				if (typeof button.id !== "string" || !BUTTON_ID.test(button.id)) errors.push(`buttons[${i}].id is 1 to ${STATUS_CARD_LIMITS.buttonId} of A-Z a-z 0-9 _ . : - and does not start with -`);
-				else if (ids.has(button.id)) errors.push(`buttons[${i}].id "${button.id}" is used twice`);
-				else ids.add(button.id);
-				errors.push(line(`buttons[${i}].label`, button.label, STATUS_CARD_LIMITS.buttonLabel, true));
-				if (button.style !== void 0 && !oneOf(BUTTON_STYLES, button.style)) errors.push(`buttons[${i}].style is one of ${BUTTON_STYLES.join(", ")}`);
-				if (button.once !== void 0 && button.once !== true) errors.push(`buttons[${i}].once is true or left out`);
-			}
-			const clash = buttonLabelClash(raw.buttons);
-			if (clash) errors.push(`buttons[${clash.at}].label ${JSON.stringify(cardLine(raw.buttons[clash.at].label, Infinity))} ${clash.kind === "label" ? `repeats buttons[${clash.with}].label` : `is buttons[${clash.with}].id`} (ignoring case and spaces at the ends)`);
-			if (raw.chosen !== void 0 && !(typeof raw.chosen === "string" && ids.has(raw.chosen))) errors.push("chosen names one of the buttons");
-		}
-		if (raw.closed !== void 0 && raw.closed !== true) errors.push("closed is true or left out");
-	} else if (raw.kind === "task") {
-		errors.push(line("title", raw.title, STATUS_CARD_LIMITS.title, true));
-		if (!oneOf(TASK_STATUSES, raw.status)) errors.push(`status is one of ${TASK_STATUSES.join(", ")}`);
-		if (raw.progress !== void 0 && !(typeof raw.progress === "number" && Number.isFinite(raw.progress) && raw.progress >= 0 && raw.progress <= 100)) errors.push("progress is a number from 0 to 100");
-		if (raw.done === void 0 !== (raw.total === void 0)) errors.push("done and total go together");
-		else if (raw.done !== void 0) {
-			errors.push(whole("done", raw.done), whole("total", raw.total, 1));
-			if (typeof raw.done === "number" && typeof raw.total === "number" && raw.done > raw.total) errors.push("done is at most total");
-		}
-		errors.push(line("step", raw.step, STATUS_CARD_LIMITS.line), line("branch", raw.branch, STATUS_CARD_LIMITS.branch));
-		if (raw.pr !== void 0) {
-			if (!isObject$4(raw.pr)) errors.push("pr is an object");
-			else {
-				errors.push(url("pr.url", raw.pr.url), whole("pr.number", raw.pr.number, 1), whole("pr.additions", raw.pr.additions), whole("pr.deletions", raw.pr.deletions), whole("pr.files", raw.pr.files));
-				if (raw.pr.state !== void 0 && !oneOf(PR_STATES, raw.pr.state)) errors.push(`pr.state is one of ${PR_STATES.join(", ")}`);
-				if (raw.pr.checks !== void 0 && !oneOf(PR_CHECKS, raw.pr.checks)) errors.push(`pr.checks is one of ${PR_CHECKS.join(", ")}`);
-			}
-		}
-		if (raw.tags !== void 0) {
-			if (!Array.isArray(raw.tags) || raw.tags.length > STATUS_CARD_LIMITS.tags) errors.push(`tags is a list of at most ${STATUS_CARD_LIMITS.tags}`);
-			else {
-				const seen = /* @__PURE__ */ new Set();
-				for (const [i, tag] of raw.tags.entries()) {
-					const problem = line(`tags[${i}]`, tag, STATUS_CARD_LIMITS.tag, true);
-					errors.push(problem);
-					if (problem) continue;
-					const clean = cardLine(tag, Infinity);
-					if (seen.has(clean)) errors.push(`tags[${i}] ${JSON.stringify(clean)} is there twice`);
-					seen.add(clean);
-				}
-			}
-		}
-		if (raw.parent !== void 0) {
-			if (typeof raw.parent !== "string" || !ID$4.test(raw.parent)) errors.push(`parent is another task's id: 1 to ${STATUS_CARD_LIMITS.id} of A-Z a-z 0-9 _ . : - and does not start with -`);
-			else if (raw.parent === raw.id) errors.push("parent is another task's id, not its own");
-		}
-		for (const field of ["startedAt", "updatedAt"]) {
-			const value = raw[field];
-			if (value !== void 0 && !(typeof value === "number" && Number.isSafeInteger(value) && value > 0 && value <= now + 3e5)) errors.push(`${field} is a time in milliseconds, not in the future`);
-		}
-		if (raw.items !== void 0) {
-			if (!Array.isArray(raw.items) || raw.items.length > STATUS_CARD_LIMITS.items) errors.push(`items is a list of at most ${STATUS_CARD_LIMITS.items}`);
-			else for (const [i, item] of raw.items.entries()) {
-				if (!isObject$4(item)) {
-					errors.push(`items[${i}] is an object`);
-					continue;
-				}
-				errors.push(line(`items[${i}].text`, item.text, STATUS_CARD_LIMITS.line, true));
-				if (item.state !== void 0 && !oneOf(ITEM_STATES, item.state)) errors.push(`items[${i}].state is one of ${ITEM_STATES.join(", ")}`);
-			}
-		}
-	} else {
-		errors.push(line("name", raw.name, STATUS_CARD_LIMITS.title, true), line("schedule", raw.schedule, STATUS_CARD_LIMITS.schedule, true));
-		if (!oneOf(ROUTINE_STATES, raw.state)) errors.push(`state is one of ${ROUTINE_STATES.join(", ")}`);
-		if (raw.cron !== void 0 && !(typeof raw.cron === "string" && CRON.test(raw.cron.trim()))) errors.push(`cron is a cron line of at most ${STATUS_CARD_LIMITS.cron} characters`);
-		if (raw.nextRunAt !== void 0 && !(typeof raw.nextRunAt === "number" && Number.isSafeInteger(raw.nextRunAt) && raw.nextRunAt > 0 && raw.nextRunAt <= now + STATUS_CARD_LIMITS.nextRunMs)) errors.push("nextRunAt is a time in milliseconds, within a year");
-		const run = (field, value) => {
-			if (!isObject$4(value)) return errors.push(`${field} is an object`);
-			if (!(typeof value.at === "number" && Number.isSafeInteger(value.at) && value.at > 0 && value.at <= now + 3e5)) errors.push(`${field}.at is a time in milliseconds, not in the future`);
-			if (!oneOf(RUN_RESULTS, value.result)) errors.push(`${field}.result is one of ${RUN_RESULTS.join(", ")}`);
-			errors.push(line(`${field}.summary`, value.summary, STATUS_CARD_LIMITS.line));
-		};
-		if (raw.lastRun !== void 0) run("lastRun", raw.lastRun);
-		if (raw.runs !== void 0) {
-			if (!Array.isArray(raw.runs) || raw.runs.length > STATUS_CARD_LIMITS.runs) errors.push(`runs is a list of at most ${STATUS_CARD_LIMITS.runs}`);
-			else raw.runs.forEach((entry, i) => run(`runs[${i}]`, entry));
-		}
-	}
-	const error = errors.find((e) => typeof e === "string");
-	if (error) return { error };
-	const card = readStatusCard(raw, now);
-	return card ? { card } : { error: "The card does not hold" };
-}
-/** The progress a task shows, 0 to 100: its own, else its steps done of total; undefined when it says neither. */
-function taskProgress(card) {
-	if (card.progress !== void 0) return card.progress;
-	return card.done !== void 0 && card.total ? Math.round(card.done / card.total * 100) : void 0;
-}
-var TASK_MARK = {
-	queued: "⏳",
-	running: "🔄",
-	blocked: "⛔",
-	done: "✅",
-	failed: "❌",
-	cancelled: "🚫"
-};
-var STATUS_WORD = {
-	queued: "Queued",
-	running: "Running",
-	blocked: "Blocked",
-	done: "Done",
-	failed: "Failed",
-	cancelled: "Cancelled"
-};
-var RESULT_WORD = {
-	ok: "ok",
-	failed: "failed",
-	skipped: "skipped"
-};
-/** A time as the fallback text says it: in UTC, to the minute ("2026-09-30 01:00 UTC"). */
-function cardTimeUtc(ms) {
-	return `${new Date(ms).toISOString().slice(0, 16).replace("T", " ")} UTC`;
-}
-/**
-* The text a card's message carries: what an app without cards shows, the DHT floor carries, the chat list previews
-* and search finds. Plain lines, the first naming the card, no bars or layout that would read badly elsewhere.
-*/
-function statusCardText(card) {
-	if (card.kind === "app") {
-		const named = `${card.title}${card.version ? ` ${card.version}` : ""}`;
-		return [card.opened ? `🧩 Opened ${named} in this chat (Ghostly app)` : `🧩 ${named} (Ghostly app)`, ...card.url ? [card.url] : []].join("\n");
-	}
-	if (card.kind === "usage") {
-		const left = `${usageLeft(card)}% left${card.window ? ` (${card.window})` : ""}`;
-		return [
-			`📊 ${card.label ?? "Usage"}`,
-			...card.account ? [card.account] : [],
-			left,
-			...card.used !== void 0 && card.limit !== void 0 ? [`${card.used} of ${card.limit} used`] : [],
-			...card.resetsAt ? [`resets ${cardTimeUtc(card.resetsAt)}`] : [],
-			...(card.windows ?? []).map((w) => `${w.window} ${w.left}%`)
-		].join(" · ");
-	}
-	if (card.kind === "buttons") return `Reply: ${card.buttons.map((b) => b.label).join(" / ")}`;
-	if (card.kind === "task") {
-		const progress = taskProgress(card);
-		const state = [
-			STATUS_WORD[card.status],
-			...progress !== void 0 ? [`${progress}%`] : [],
-			...card.done !== void 0 && card.total ? [`${card.done} of ${card.total} steps`] : []
-		].join(" · ");
-		const standing = card.pr && [...card.pr.state ? [card.pr.state] : [], ...card.pr.checks ? [`checks ${card.pr.checks}`] : []].join(", ");
-		const pr = card.pr && [
-			`PR${card.pr.number !== void 0 ? ` #${card.pr.number}` : ""}`,
-			...card.pr.additions !== void 0 || card.pr.deletions !== void 0 ? [`+${card.pr.additions ?? 0} -${card.pr.deletions ?? 0}`] : [],
-			...standing ? [`(${standing})`] : []
-		].join(" ") + `: ${card.pr.url}`;
-		const now = card.step && ACTIVE_TASK_STATUSES.includes(card.status) ? [`Now: ${card.step}`] : [];
-		return [
-			`${TASK_MARK[card.status]} ${card.title}`,
-			state,
-			...now,
-			...pr ? [pr] : [],
-			...card.tags?.length ? [`Tags: ${card.tags.join(", ")}`] : [],
-			...card.parent ? [`Part of: ${card.parent}`] : []
-		].join("\n");
-	}
-	const last = card.lastRun && `Last run: ${RESULT_WORD[card.lastRun.result]}, ${cardTimeUtc(card.lastRun.at)}${card.lastRun.summary ? ` · ${card.lastRun.summary}` : ""}`;
-	return [
-		`🔁 ${card.name}`,
-		`${card.schedule} · ${card.state === "active" ? "active" : "paused"}`,
-		...last ? [last] : [],
-		...card.nextRunAt && card.state === "active" ? [`Next run: ${cardTimeUtc(card.nextRunAt)}`] : []
-	].join("\n");
-}
-/** Whether a message's edit number holds: a text's bound, or a card message's when the edit carries a card. */
-function cardEditNumber(e) {
-	return Number.isSafeInteger(e) && e >= 1 && e <= STATUS_CARD_LIMITS.edits;
-}
-//#endregion
-//#region ../core/src/replies.ts
-var REPLY_LIMITS = {
-	/** Code points of the line of the original, an ellipsis included when it was cut. */
-	snippet: 120,
-	/** Characters of the original's id. */
-	id: 128,
-	/** Characters of a line as it arrives, before it is cleaned: anything longer is not a line of a message. */
-	raw: 2048
-};
-/** A paired chat's message id, a payment id or a file's wire id; a group message's `sender:epoch:seq`. */
-var REPLY_ID = /^[A-Za-z0-9_:.-]{1,128}$/;
-/** The two authors a paired chat has, from the reply author's side. */
-var PAIRED_REPLY_AUTHORS = ["sender", "recipient"];
-/** A picture sent inline has no line worth quoting. */
-var INLINE_PICTURE = /^data:image\//i;
-/**
-* A line of a message to quote: plain text on one line (line breaks and runs of spaces become one space), without
-* control, invisible or direction characters (WISP 400, as for names), at most `REPLY_LIMITS.snippet` code points,
-* the last of them an ellipsis when it was cut.
-*/
-function replySnippet(text) {
-	if (INLINE_PICTURE.test(text.trimStart())) return "🖼️ Picture";
-	const clean = sanitizeDisplayText(text.slice(0, REPLY_LIMITS.raw * 2).replace(/\s+/gu, " "), REPLY_LIMITS.snippet + 1) ?? "";
-	const points = [...clean];
-	return points.length > REPLY_LIMITS.snippet ? `${points.slice(0, REPLY_LIMITS.snippet - 1).join("").trimEnd()}…` : clean;
-}
-/**
-* A reply as a receiver takes it: an object with an id of this chat's shape, a line (cleaned and cut again here,
-* whatever the sender did) and an author `author` accepts. Anything else is no reply: the message stays, without it.
-*/
-function readReply(raw, author) {
-	if (!raw || typeof raw !== "object" || Array.isArray(raw)) return void 0;
-	const { i, s, f, b } = raw;
-	if (typeof i !== "string" || !REPLY_ID.test(i)) return void 0;
-	if (typeof s !== "string" || s.length > REPLY_LIMITS.raw) return void 0;
-	if (typeof f !== "string" || !author(f)) return void 0;
-	return {
-		i,
-		s: replySnippet(s),
-		f,
-		...typeof b === "string" && BUTTON_ID.test(b) && { b }
+		i,
+		s: replySnippet(s),
+		f,
+		...typeof b === "string" && BUTTON_ID.test(b) && { b }
 	};
 }
 /** Who may have written the original in a paired chat. */
@@ -8429,7 +7217,7 @@ function previewImageSize(value) {
 	if (binary.length > LINK_PREVIEW_LIMITS.imageBytes) return;
 	const bytes = new Uint8Array(binary.length);
 	for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
-	return jpegSize$1(bytes);
+	return jpegSize(bytes);
 }
 /** The thumbnail if it is one Ghostly shows: a JPEG data URL within the limits whose header declares a sane size. */
 function sanitizePreviewImage(value) {
@@ -8590,500 +7378,6 @@ var RateWindow = class {
 	}
 };
 //#endregion
-//#region ../core/src/video.ts
-var VIDEO_LIMITS = {
-	/** The poster's bytes: with the rest of an offer, a frame stays far below the 60 KiB a session carries. */
-	maxPosterBytes: 12288,
-	/** The poster's longest side, in pixels, as the sender draws it. */
-	posterEdge: 320,
-	/** Ten hours: longer is a mistake, not a video. */
-	maxDurationMs: 36e6,
-	/** Pixels on either side (8K and a bit). */
-	maxEdge: 16384
-};
-/**
-* Video a player may be handed as it is. None of these runs anything in the page's origin, so received bytes
-* of these types are served with their type (see `safeBlobType`): WebKit will not play what is typed as bytes.
-*/
-var PLAYABLE_VIDEO = /^video\/(mp4|webm|quicktime|ogg|x-m4v)$/;
-/** Whether a file is a video, by its type: shown in a video bubble whether or not it came with a description. */
-function isVideoMime(mime) {
-	return mime.split(";")[0].trim().toLowerCase().startsWith("video/");
-}
-var BASE64URL = /^[A-Za-z0-9_-]+$/;
-var JPEG_START = [
-	255,
-	216,
-	255
-];
-/**
-* A peer's `video` description, or undefined when it is not one. It never refuses the file. A poster that is
-* too large or not a JPEG is dropped on its own; the length and size are kept.
-*/
-function parseVideoMeta(value, mime) {
-	if (mime !== void 0 && !isVideoMime(mime)) return void 0;
-	if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
-	const { duration, width, height, poster } = value;
-	if (typeof duration !== "number" || !Number.isSafeInteger(duration) || duration <= 0 || duration > VIDEO_LIMITS.maxDurationMs) return void 0;
-	const edge = (n) => typeof n === "number" && Number.isSafeInteger(n) && n > 0 && n <= VIDEO_LIMITS.maxEdge;
-	if (!edge(width) || !edge(height)) return void 0;
-	const meta = {
-		duration,
-		width,
-		height
-	};
-	if (typeof poster === "string" && poster.length <= Math.ceil(VIDEO_LIMITS.maxPosterBytes * 4 / 3) && BASE64URL.test(poster)) try {
-		const bytes = fromBase64Url(poster);
-		if (bytes.length <= VIDEO_LIMITS.maxPosterBytes && JPEG_START.every((b, i) => bytes[i] === b)) meta.poster = poster;
-	} catch {}
-	return meta;
-}
-/** `0:07`, `12:45`, `1:02:03`: as a player shows a video's length. */
-function formatVideoDuration(ms) {
-	const total = Math.max(0, Math.floor((Number.isFinite(ms) ? ms : 0) / 1e3));
-	const hours = Math.floor(total / 3600), minutes = Math.floor(total % 3600 / 60), seconds = String(total % 60).padStart(2, "0");
-	return hours ? `${hours}:${String(minutes).padStart(2, "0")}:${seconds}` : `${minutes}:${seconds}`;
-}
-//#endregion
-//#region ../core/src/voice.ts
-var VOICE_LIMITS = {
-	/** Fifteen minutes: at the bitrate recorded (32 kbit/s) about 3.6 MB, well inside a held item's 8 MiB. */
-	maxDurationMs: 9e5,
-	/** Bars drawn for a recording. */
-	bars: 64,
-	/** Bars accepted from a peer. */
-	maxBars: 128,
-	/** Asked of the recorder; opus speech is clear well below it. */
-	audioBitsPerSecond: 32e3
-};
-/**
-* Audio a player may be handed as it is. None of these runs anything in the page's origin,
-* so received bytes of these types are served with their type (see `safeBlobType`).
-*/
-var PLAYABLE_AUDIO = /^audio\/(webm|ogg|opus|mp4|mpeg|mp3|aac|x-m4a|wav|x-wav|wave|flac|x-flac)$/;
-/** The part of a type before its parameters, in lower case: `audio/webm;codecs=opus` → `audio/webm`. */
-function baseMime(mime) {
-	return mime.split(";")[0].trim().toLowerCase();
-}
-/**
-* A peer's `voice` description, or undefined when it is not one. It never refuses the file:
-* a bad description only means the file is shown as a file.
-*/
-function parseVoiceMeta(value, mime) {
-	if (mime !== void 0 && !PLAYABLE_AUDIO.test(baseMime(mime))) return void 0;
-	if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
-	const { duration, peaks } = value;
-	if (typeof duration !== "number" || !Number.isSafeInteger(duration) || duration <= 0 || duration > VOICE_LIMITS.maxDurationMs + 5e3) return void 0;
-	if (!Array.isArray(peaks) || peaks.length === 0 || peaks.length > VOICE_LIMITS.maxBars) return void 0;
-	if (!peaks.every((peak) => typeof peak === "number" && Number.isInteger(peak) && peak >= 0 && peak <= 255)) return void 0;
-	return {
-		duration,
-		peaks: [...peaks]
-	};
-}
-/**
-* How the level is metered while recording (apps/ui/src/lib/voiceRecorder.ts): every `intervalMs`, the RMS of the last
-* `window` samples an AnalyserNode holds (at a 48 kHz context, about 21 ms of sound).
-*/
-var VOICE_METER = {
-	intervalMs: 50,
-	window: 1024,
-	windowRate: 48e3
-};
-/** One reading of the meter, 0-1: the RMS of the samples, lifted because speech sits low on a linear scale. */
-function voiceLevel(samples) {
-	if (samples.length === 0) return 0;
-	let sum = 0;
-	for (let i = 0; i < samples.length; i++) sum += samples[i] * samples[i];
-	return Math.min(1, Math.sqrt(sum / samples.length) * 4);
-}
-/**
-* The readings the recorder would have taken of this sound (mono, -1 to 1), for a recording made elsewhere: one
-* every `intervalMs` of it, each over the window that ends there, as long in time as the analyser's.
-*/
-function voiceLevelsOf(mono, sampleRate) {
-	if (!(sampleRate > 0) || mono.length === 0) return [];
-	const window = Math.max(1, Math.round(VOICE_METER.window * sampleRate / VOICE_METER.windowRate));
-	const levels = [];
-	for (let step = 1;; step++) {
-		const end = Math.round(step * VOICE_METER.intervalMs * sampleRate / 1e3);
-		if (end > mono.length) break;
-		levels.push(voiceLevel(mono.subarray(Math.max(0, end - window), end)));
-	}
-	return levels;
-}
-/** The waveform sent with a recording made elsewhere, drawn as the recorder draws its own. */
-function voicePeaksOf(mono, sampleRate, bars = VOICE_LIMITS.bars) {
-	return downsamplePeaks(voiceLevelsOf(mono, sampleRate), bars);
-}
-/** Below this a recording is silence, and is drawn flat rather than stretched to fill the bars. */
-var QUIET = .02;
-/**
-* Bars from the loudness measured while recording (RMS, 0-1, oldest first): the loudest
-* sample of each stretch, scaled so the loudest bar is full height.
-*/
-function downsamplePeaks(levels, bars = VOICE_LIMITS.bars) {
-	const count = Math.max(1, Math.min(VOICE_LIMITS.maxBars, Math.floor(bars)));
-	const clean = Array.from(levels, (level) => Number.isFinite(level) ? Math.min(1, Math.max(0, level)) : 0);
-	if (clean.length === 0) return new Array(count).fill(0);
-	const loudest = Math.max(QUIET, ...clean);
-	const out = [];
-	for (let bar = 0; bar < count; bar++) {
-		const from = Math.floor(bar * clean.length / count);
-		const to = Math.max(from + 1, Math.floor((bar + 1) * clean.length / count));
-		let peak = 0;
-		for (let i = from; i < to && i < clean.length; i++) peak = Math.max(peak, clean[i]);
-		out.push(Math.round(peak / loudest * 255));
-	}
-	return out;
-}
-/** `0:07`, `12:45`: minutes and seconds, as a player shows them. */
-function formatVoiceDuration(ms) {
-	const total = Math.max(0, Math.floor((Number.isFinite(ms) ? ms : 0) / 1e3));
-	return `${Math.floor(total / 60)}:${String(total % 60).padStart(2, "0")}`;
-}
-/** The line a file message shows in the chat list and in notifications. */
-function fileMessageText(file) {
-	if (file.voice) return `🎤 Voice message (${formatVoiceDuration(file.voice.duration)})`;
-	if (file.video) return `🎬 Video (${formatVideoDuration(file.video.duration)})`;
-	return `📎 ${file.name}`;
-}
-//#endregion
-//#region ../core/src/files.ts
-var FILE_ID = /^[A-Za-z0-9_-]{8,64}$/;
-var MIME = /^[a-z0-9][a-z0-9!#$&^_.+-]{0,63}\/[a-z0-9][a-z0-9!#$&^_.+-]{0,63}$/i;
-var MAX_NAME_LENGTH = 200;
-/**
-* Invisible and direction-changing characters: bidi overrides turn
-* "invoice\u202Efdp.exe" into what reads as "invoiceexe.pdf", zero-width ones hide
-* text. Cf covers both; line and paragraph separators break the layout.
-*/
-var INVISIBLE = /[\p{Cc}\p{Cf}\p{Zl}\p{Zp}]/gu;
-/**
-* Names Windows keeps for devices, whatever the case, with any extension, and with spaces before the dot:
-* "CON", "nul.txt", "COM1 .log" open a device there, not a file.
-*/
-var WINDOWS_DEVICE = /^(CON|PRN|AUX|NUL|CONIN\$|CONOUT\$|COM[0-9¹²³]|LPT[0-9¹²³])\s*(\.|$)/i;
-/**
-* At most `MAX_NAME_LENGTH` characters. A longer name loses the end of its stem, not its extension (up to 15
-* characters after the last dot): "…report.pdf" stays a PDF to the system it is saved on.
-*/
-function shorten(name) {
-	const chars = [...name];
-	if (chars.length <= MAX_NAME_LENGTH) return name;
-	const extension = [.../\.[^.\s]{1,15}$/u.exec(name)?.[0] ?? ""];
-	return chars.slice(0, MAX_NAME_LENGTH - extension.length).join("").trimEnd() + extension.join("");
-}
-/** A file name is display text and a download suggestion, never a path. */
-function sanitizeFileName(name) {
-	const clean = shorten(name.replace(INVISIBLE, "").replace(/[/\\:]/g, "").replace(/^[\s.]+/, "").trim());
-	if (WINDOWS_DEVICE.test(clean)) return shorten("_" + clean);
-	return clean || "file";
-}
-function sanitizeMime(mime) {
-	return MIME.test(mime) ? mime.toLowerCase() : "application/octet-stream";
-}
-/** A size for people: B, KB, MB, GB, TB (powers of 1024), one decimal from KB up. */
-function formatFileSize(bytes) {
-	if (bytes < 1024) return `${bytes} B`;
-	const units = [
-		"KB",
-		"MB",
-		"GB",
-		"TB"
-	];
-	let value = bytes / 1024, unit = 0;
-	while (value >= 1024 && unit < units.length - 1) {
-		value /= 1024;
-		unit++;
-	}
-	return `${value.toFixed(1)} ${units[unit]}`;
-}
-/** Raster images a UI may show inline. SVG is left out on purpose: it can carry scripts. */
-var PREVIEWABLE_IMAGE = /^image\/(png|jpe?g|gif|webp)$/;
-/**
-* The type received bytes are served with. The peer picks the announced type,
-* and a blob: URL typed text/html or image/svg+xml would run in the app's
-* origin, so anything but a previewable image or playable audio or video is opaque bytes.
-* Audio and video keep their type because WebKit will not play what is typed as bytes.
-*/
-function safeBlobType(mime) {
-	const clean = sanitizeMime(mime);
-	return PREVIEWABLE_IMAGE.test(clean) || PLAYABLE_AUDIO.test(clean) || PLAYABLE_VIDEO.test(clean) ? clean : "application/octet-stream";
-}
-var FileTransfers = class {
-	channel;
-	events;
-	nextStreamId = 1;
-	incoming = /* @__PURE__ */ new Map();
-	outgoing = /* @__PURE__ */ new Map();
-	constructor(channel, events) {
-		this.channel = channel;
-		this.events = events;
-	}
-	/** Streams a file to the peer. Resolves once every byte is handed to the channel. */
-	async send(file, source) {
-		if (file.size > LIMITS.maxFileBytes) throw new Error("File is too large");
-		const id = this.nextStreamId++;
-		const state = {
-			fileId: file.id,
-			cancelled: false
-		};
-		this.outgoing.set(id, state);
-		try {
-			this.channel.send(encodeControl({
-				t: "file",
-				id,
-				f: file.id,
-				ts: file.timestamp,
-				n: sanitizeFileName(file.name),
-				s: file.size,
-				m: sanitizeMime(file.mime)
-			}));
-			let sent = 0;
-			const counted = async function* () {
-				for await (const part of source) {
-					sent += part.length;
-					yield part;
-					this.events.onProgress?.(file.id, sent, "out");
-				}
-			}.call(this);
-			await sendBody(this.channel, CHUNK_KIND.fileBody, id, counted, () => state.cancelled);
-			if (state.cancelled) throw new Error("The peer refused the file");
-			if (sent !== file.size) throw new Error("File changed while it was being sent");
-			this.events.onComplete?.(file.id, "out");
-		} catch (error) {
-			if (!state.cancelled) try {
-				this.channel.send(encodeControl({
-					t: "rst",
-					id,
-					d: "f",
-					e: "aborted"
-				}));
-			} catch {}
-			this.events.onFailed?.(file.id, error instanceof Error ? error.message : String(error), "out");
-			throw error;
-		} finally {
-			this.outgoing.delete(id);
-		}
-	}
-	handleFile(frame) {
-		if (this.incoming.has(frame.id)) return;
-		const refuse = (reason) => {
-			try {
-				this.channel.send(encodeControl({
-					t: "rst",
-					id: frame.id,
-					d: "f",
-					e: reason
-				}));
-			} catch {}
-		};
-		if (!FILE_ID.test(frame.f)) return refuse("invalid file id");
-		if (frame.s > LIMITS.maxFileBytes) return refuse("file too large");
-		if (this.incoming.size >= LIMITS.maxIncomingFilesPerPeer) return refuse("too many transfers");
-		const file = {
-			id: frame.f,
-			name: sanitizeFileName(frame.n),
-			size: frame.s,
-			mime: sanitizeMime(frame.m),
-			timestamp: frame.ts
-		};
-		const sink = this.events.onIncoming(file);
-		if (!sink || typeof sink === "string") return refuse(sink || "refused");
-		const entry = {
-			file,
-			sink,
-			received: 0,
-			queue: Promise.resolve()
-		};
-		this.incoming.set(frame.id, entry);
-		this.armIdleTimer(frame.id, entry);
-	}
-	handleChunk(chunk) {
-		const entry = this.incoming.get(chunk.id);
-		if (!entry) return;
-		entry.received += chunk.payload.length;
-		if (entry.received > entry.file.size) return this.failIncoming(chunk.id, "more data than announced", true);
-		if (chunk.payload.length > 0) {
-			const payload = chunk.payload.slice();
-			entry.queue = entry.queue.then(() => entry.sink.write(payload));
-			this.events.onProgress?.(entry.file.id, entry.received, "in");
-		}
-		if (!chunk.end) return this.armIdleTimer(chunk.id, entry);
-		if (entry.received !== entry.file.size) return this.failIncoming(chunk.id, "incomplete file", false);
-		clearTimeout(entry.idleTimer);
-		this.incoming.delete(chunk.id);
-		entry.queue.then(() => entry.sink.close()).then(() => this.events.onComplete?.(entry.file.id, "in"), () => {
-			entry.sink.abort();
-			this.events.onFailed?.(entry.file.id, "could not store the file", "in");
-		});
-	}
-	handleReset(frame) {
-		if (this.incoming.has(frame.id)) this.failIncoming(frame.id, frame.e || "cancelled by the sender", false);
-		const sending = this.outgoing.get(frame.id);
-		if (sending) sending.cancelled = true;
-	}
-	/** The link went away: nothing in flight can finish. */
-	closeAll() {
-		for (const id of [...this.incoming.keys()]) this.failIncoming(id, "connection lost", false);
-		for (const sending of this.outgoing.values()) sending.cancelled = true;
-	}
-	armIdleTimer(id, entry) {
-		clearTimeout(entry.idleTimer);
-		entry.idleTimer = setTimeout(() => this.failIncoming(id, "transfer stalled", true), LIMITS.bodyIdleTimeoutMs);
-	}
-	failIncoming(id, reason, notifyPeer) {
-		const entry = this.incoming.get(id);
-		if (!entry) return;
-		clearTimeout(entry.idleTimer);
-		this.incoming.delete(id);
-		entry.sink.abort();
-		if (notifyPeer) try {
-			this.channel.send(encodeControl({
-				t: "rst",
-				id,
-				d: "f",
-				e: reason
-			}));
-		} catch {}
-		this.events.onFailed?.(entry.file.id, reason, "in");
-	}
-};
-//#endregion
-//#region ../core/src/image.ts
-var IMAGE_LIMITS = {
-	/** Pixels on either side: the most a JPEG can say, well past what anyone sends as a picture. */
-	maxEdge: 65535,
-	/** How much of a file is read for its size: past a JPEG's EXIF, thumbnails and colour profile. */
-	headBytes: 262144
-};
-/** Whether a file is a picture, by its type. */
-function isImageMime(mime) {
-	return mime.split(";")[0].trim().toLowerCase().startsWith("image/");
-}
-var edge = (n) => typeof n === "number" && Number.isSafeInteger(n) && n > 0 && n <= IMAGE_LIMITS.maxEdge;
-/** A peer's `image` description, or undefined when it is not one. It never refuses the file. */
-function parseImageMeta(value, mime) {
-	if (mime !== void 0 && !isImageMime(mime)) return void 0;
-	if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
-	const { width, height } = value;
-	return edge(width) && edge(height) ? {
-		width,
-		height
-	} : void 0;
-}
-var u16be = (b, at) => b[at] << 8 | b[at + 1];
-var u16le = (b, at) => b[at] | b[at + 1] << 8;
-var u24le = (b, at) => b[at] | b[at + 1] << 8 | b[at + 2] << 16;
-var u32be = (b, at) => (b[at] << 24 >>> 0) + (b[at + 1] << 16) + (b[at + 2] << 8) + b[at + 3];
-var ascii = (b, at, text) => [...text].every((c, i) => b[at + i] === c.charCodeAt(0));
-var sized = (width, height) => edge(width) && edge(height) ? {
-	width,
-	height
-} : void 0;
-/** SOFn markers: every frame type but DHT (C4), JPG (C8) and DAC (CC). */
-var JPEG_FRAME = /* @__PURE__ */ new Set([
-	192,
-	193,
-	194,
-	195,
-	197,
-	198,
-	199,
-	201,
-	202,
-	203,
-	205,
-	206,
-	207
-]);
-/** The EXIF orientation in an APP1 segment's TIFF block (1 when it says none). */
-function exifOrientation(b, tiff, end) {
-	if (tiff + 8 > end) return 1;
-	const little = ascii(b, tiff, "II");
-	if (!little && !ascii(b, tiff, "MM")) return 1;
-	const u16 = (at) => little ? u16le(b, at) : u16be(b, at);
-	const u32 = (at) => little ? u16le(b, at) + u16le(b, at + 2) * 65536 : u32be(b, at);
-	if (u16(tiff + 2) !== 42) return 1;
-	const ifd = tiff + u32(tiff + 4);
-	if (ifd + 2 > end) return 1;
-	const count = u16(ifd);
-	for (let i = 0; i < count; i++) {
-		const entry = ifd + 2 + i * 12;
-		if (entry + 12 > end) return 1;
-		if (u16(entry) === 274) {
-			const value = u16(entry + 8);
-			return value >= 1 && value <= 8 ? value : 1;
-		}
-	}
-	return 1;
-}
-function jpegSize(b) {
-	let at = 2, orientation = 1;
-	while (at + 4 <= b.length) {
-		if (b[at] !== 255) return void 0;
-		const marker = b[at + 1];
-		if (marker === 255) {
-			at++;
-			continue;
-		}
-		if (marker === 1 || marker >= 208 && marker <= 215) {
-			at += 2;
-			continue;
-		}
-		if (marker === 217 || marker === 218) return void 0;
-		const length = u16be(b, at + 2);
-		if (length < 2) return void 0;
-		const end = Math.min(b.length, at + 2 + length);
-		if (marker === 225 && ascii(b, at + 4, "Exif\0\0")) orientation = exifOrientation(b, at + 10, end);
-		if (JPEG_FRAME.has(marker)) {
-			if (at + 9 > b.length) return void 0;
-			const height = u16be(b, at + 5), width = u16be(b, at + 7);
-			return orientation >= 5 ? sized(height, width) : sized(width, height);
-		}
-		at += 2 + length;
-	}
-}
-function webpSize(b) {
-	if (b.length < 30) return void 0;
-	if (ascii(b, 12, "VP8 ")) {
-		if (b[23] !== 157 || b[24] !== 1 || b[25] !== 42) return void 0;
-		return sized(u16le(b, 26) & 16383, u16le(b, 28) & 16383);
-	}
-	if (ascii(b, 12, "VP8L")) {
-		if (b[20] !== 47) return void 0;
-		const bits = b[21] | b[22] << 8 | b[23] << 16 | b[24] << 24;
-		return sized((bits & 16383) + 1, (bits >>> 14 & 16383) + 1);
-	}
-	if (ascii(b, 12, "VP8X")) return sized(u24le(b, 24) + 1, u24le(b, 27) + 1);
-}
-/**
-* A picture's size as it is shown, read from its first bytes (PNG, JPEG, GIF, WebP), or undefined when they do not
-* say. Only the header is read: a JPEG whose frame header sits past `IMAGE_LIMITS.headBytes` goes without.
-*/
-function imageSize(head) {
-	const b = head;
-	try {
-		if (b.length >= 24 && b[0] === 137 && ascii(b, 1, "PNG\r\n\n") && ascii(b, 12, "IHDR")) return sized(u32be(b, 16), u32be(b, 20));
-		if (b.length >= 10 && (ascii(b, 0, "GIF87a") || ascii(b, 0, "GIF89a"))) return sized(u16le(b, 6), u16le(b, 8));
-		if (b.length >= 4 && b[0] === 255 && b[1] === 216 && b[2] === 255) return jpegSize(b);
-		if (b.length >= 16 && ascii(b, 0, "RIFF") && ascii(b, 8, "WEBP")) return webpSize(b);
-	} catch {}
-}
-/**
-* The description a picture is sent with, read from the start of the file, or undefined when it is not a picture
-* or its first bytes do not say (it then goes without one).
-*/
-async function readImageMeta(source, mime) {
-	if (!isImageMime(mime)) return void 0;
-	try {
-		return imageSize(new Uint8Array(await source.slice(0, IMAGE_LIMITS.headBytes).arrayBuffer()));
-	} catch {
-		return;
-	}
-}
-//#endregion
 //#region ../core/src/dhtFiles.ts
 /**
 * A file's bubble on the DHT floor (WISP 403 § Files): while the contact is away, a file's offer (its name, size, type,
@@ -9177,6 +7471,13 @@ var DHT_EXPIRY_SKEW_MS = PKARR_FUTURE_SKEW_MS;
 */
 var DHT_ISSUED_BACK_MS = 12e4;
 var MAX_ATTEMPTS = 8;
+/**
+* Envelope sequences are set aside this many at a time (`DhtDeliveryState.sequence` is the highest set aside): a
+* keep-alive, every four minutes per chat, and one the relays' budget turns away, every 30 s on a profile idling at
+* it, then cost no disk write of their own. A reader only needs the sequence to grow, so those a restart skips cost
+* nothing; one the budget turned away is not used again, as it may have gone out on the DHT (the CLI puts there too).
+*/
+var SEQUENCE_BLOCK = 64;
 /** The wait before publication attempt `attempts + 1` of a text, or of a receipt the contact still asks for. */
 var backoff = (attempts) => Math.min(6e4, 4e3 * 2 ** attempts);
 /** The contact's mailbox is read this often while either side is DHT-only, and otherwise… */
@@ -9230,6 +7531,10 @@ var emptyDhtDeliveryState = () => ({
 var DhtDelivery = class DhtDelivery {
 	options;
 	state;
+	/** The state as last saved: a save that would write the same row again is skipped. */
+	saved;
+	/** The sequence of the last envelope signed here; the state's is the highest set aside (`SEQUENCE_BLOCK`). */
+	sequence;
 	mode;
 	running = false;
 	ticking = false;
@@ -9240,6 +7545,7 @@ var DhtDelivery = class DhtDelivery {
 	fastUntil = 0;
 	live = false;
 	active = false;
+	startedAt = Date.now();
 	/** The next read was asked for (a refresh, a fresh packet of the contact): it is not a background one. */
 	urgent = false;
 	/** Reads left that are signaling: the contact is leaving DHT only, and the live link waits on them (`expect`). */
@@ -9284,6 +7590,8 @@ var DhtDelivery = class DhtDelivery {
 		const { peerRejected: _peerRejected, ...state } = structuredClone(options.state ?? emptyDhtDeliveryState());
 		this.state = state;
 		this.mode = options.mode;
+		this.sequence = state.sequence;
+		if (options.state) this.saved = JSON.stringify(state);
 		this.unsealedOut = state.sequence > 0 && !options.credentials.peerKey;
 		this.from = identityFromSeedB64(options.params.seedB64).pubKeyZ32;
 		this.to = options.params.peerPubKeyZ32;
@@ -9372,7 +7680,11 @@ var DhtDelivery = class DhtDelivery {
 		return operation;
 	}
 	async persist(next) {
-		await this.options.save(structuredClone(next));
+		const json = JSON.stringify(next);
+		if (json !== this.saved) {
+			await this.options.save(structuredClone(next));
+			this.saved = json;
+		}
 		this.state = next;
 	}
 	sealedKey(peer) {
@@ -9547,7 +7859,7 @@ var DhtDelivery = class DhtDelivery {
 	}
 	packetError(message, expires, reply, edit) {
 		try {
-			this.records(this.body(this.state.sequence + 1, Date.now(), expires, message, this.state.receipt?.id ?? "abcdefghijklmnopqrstuv", reply, [], edit), this.options.credentials.peerKey ?? this.participation.pubKeyZ32);
+			this.records(this.body(this.sequence + 1, Date.now(), expires, message, this.state.receipt?.id ?? "abcdefghijklmnopqrstuv", reply, [], edit), this.options.credentials.peerKey ?? this.participation.pubKeyZ32);
 			return null;
 		} catch (error) {
 			return error instanceof Error ? error.message : String(error);
@@ -9555,7 +7867,7 @@ var DhtDelivery = class DhtDelivery {
 	}
 	/** Whether a text with its hop count fits the packet and what a reader reads (`MAX_ENVELOPE_PLAINTEXT`). */
 	roomForHops(message, expires, reply, forwarded) {
-		const body = this.body(this.state.sequence + 1, Date.now(), expires, message, this.state.receipt?.id ?? "abcdefghijklmnopqrstuv", reply, [], void 0, forwarded);
+		const body = this.body(this.sequence + 1, Date.now(), expires, message, this.state.receipt?.id ?? "abcdefghijklmnopqrstuv", reply, [], void 0, forwarded);
 		try {
 			this.records(body, this.options.credentials.peerKey ?? this.participation.pubKeyZ32);
 		} catch {
@@ -9634,7 +7946,7 @@ var DhtDelivery = class DhtDelivery {
 		], expires = now + DHT_MESSAGE_TTL;
 		const hops = readForwarded(forwarded);
 		const fits = (element, withReply, withHops) => {
-			const body = this.body(this.state.sequence + 1, now, expires, message, this.state.receipt?.id ?? "abcdefghijklmnopqrstuv", withReply ? reply : void 0, [], void 0, withHops ? hops : void 0, element);
+			const body = this.body(this.sequence + 1, now, expires, message, this.state.receipt?.id ?? "abcdefghijklmnopqrstuv", withReply ? reply : void 0, [], void 0, withHops ? hops : void 0, element);
 			try {
 				this.records(body, this.options.credentials.peerKey ?? this.participation.pubKeyZ32);
 			} catch {
@@ -9823,13 +8135,14 @@ var DhtDelivery = class DhtDelivery {
 		if (keepAlive && this.controlDue > now) return;
 		const expires = pending?.expires ?? now - 12e4 + CONTROL_TTL;
 		const issued = Math.min(now, Math.max(now - DHT_ISSUED_BACK_MS, expires - (pending ? DHT_MESSAGE_TTL : CONTROL_TTL), (pending?.message[1] ?? 0) - 3e4));
-		const { body, records, reactions } = this.fitted(this.state.sequence + 1, issued, expires, pending?.message ?? null, receipt?.id ?? null, pending?.reply, pending?.edit, pending?.forwarded, pending?.file);
+		const { body, records, reactions } = this.fitted(this.sequence + 1, issued, expires, pending?.message ?? null, receipt?.id ?? null, pending?.reply, pending?.edit, pending?.forwarded, pending?.file);
 		const reactionsWereDue = this.reactionsDue;
 		this.reactionsDue = !reactions && !!this.options.reactions?.().length;
 		const identity = !reseal && this.state.peerPinned && this.state.peerPinned !== "can" && this.pinned()?.identity || this.identity;
+		const sequence = body[1];
 		await this.persist({
 			...this.state,
-			sequence: body[1],
+			sequence: sequence > this.state.sequence ? sequence + SEQUENCE_BLOCK - 1 : this.state.sequence,
 			pending: pending ? {
 				...pending,
 				attempts: pending.attempts + 1,
@@ -9841,6 +8154,7 @@ var DhtDelivery = class DhtDelivery {
 				next: now + backoff(receipt.attempts)
 			} : this.state.receipt
 		});
+		this.sequence = sequence;
 		const before = {
 			lastPublish: this.lastPublish,
 			controlDue: this.controlDue
@@ -10175,11 +8489,20 @@ var DhtDelivery = class DhtDelivery {
 	get pollMs() {
 		if (this.options.pollMs) return this.options.pollMs;
 		const now = Date.now();
+		const unused = this.unusedInviteAge(now);
+		if (unused !== void 0 && !this.active && now >= this.fastUntil) return unusedInviteWait(unused, this.mode === "dht" ? DHT_POLL_MS : STREAM_POLL_MS);
 		if (this.mode === "dht" || this.state.peerMode === "dht" && now < this.leavingUntil || now < this.fastUntil) return DHT_POLL_MS;
 		if (this.live) return LIVE_POLL_MS;
 		if (this.state.pending && this.state.pending.expires > now) return DHT_POLL_MS;
 		return this.active ? ACTIVE_DHT_POLL_MS : STREAM_POLL_MS;
 	}
+	/** How long ago this side's invite was made, while nobody used it and it is no longer awaited (`AWAITING_PEER_MS`). */
+	unusedInviteAge(now) {
+		const madeAt = this.options.inviteMadeAt;
+		if (madeAt === void 0 || this.options.credentials.peerKey || this.state.peerSequence) return void 0;
+		const age = now - Math.min(madeAt, this.startedAt);
+		return age >= 6e5 ? age : void 0;
+	}
 	schedule() {
 		if (!this.running || this.ticking) return;
 		if (this.timer) clearTimeout(this.timer);
@@ -13713,6 +12036,11 @@ var SERVICES_CAPABILITY = "services/1";
 * confirmed byte, checked by digest (`pf-offer` … frames, `chatFiles.ts`). Without it, files/2 and 100 MiB.
 */
 var FILES_CAPABILITY = "files/3";
+/**
+* A file's bytes as binary messages (WISP 501 § files/4): beside `files/3`, on a session whose channel carries binary
+* messages, a chunk travels as it is (`encodeFileData`, `chatFiles.ts`) and not as base64url text in a `pf-data` frame.
+*/
+var FILES_BINARY_CAPABILITY = "files/4";
 /** The typing indicator: `paired-typing` frames on this session, 1:1 chats only (WISP 401 § Typing, `pairedTyping.ts`). */
 var TYPING_CAPABILITY = "typing/1";
 /** Reactions to messages: `paired-reaction` frames on this session, 1:1 chats only (WISP 401 § Reactions, `reactions.ts`). */
@@ -13752,6 +12080,7 @@ var KNOWN_SESSION_CAPABILITIES = [
 	CALLS_CAPABILITY,
 	SERVICES_CAPABILITY,
 	FILES_CAPABILITY,
+	FILES_BINARY_CAPABILITY,
 	TYPING_CAPABILITY,
 	REACTIONS_CAPABILITY,
 	EDIT_CAPABILITY,
@@ -13848,6 +12177,8 @@ var SessionCapabilities = class {
 * be matched across a person's chats; it travels only inside the encrypted session.
 */
 var APP_FRAME = "paired-app";
+/** The largest `d`, as compact UTF-8 JSON. The session's 60 KiB cap on any frame still holds above it. */
+var APP_DATA_MAX_BYTES = 32768;
 var DOMAIN = "ghostly-apps/1";
 var APP_ID = /^[A-Za-z0-9_-]{22}$/;
 /** Semantic versioning 2.0.0, as a manifest's `version` is. */
@@ -14160,7 +12491,8 @@ function vapidAuthorization(endpoint, keys, subject, now = Date.now()) {
 		exp: Math.floor(now / 1e3) + TOKEN_SECONDS,
 		sub: subject
 	})}`;
-	return `vapid t=${unsigned}.${toBase64Url(p256.sign(utf8Encode(unsigned), fromBase64Url(keys.privateKey)))}, k=${keys.publicKey}`;
+	const signature = p256.sign(utf8Encode(unsigned), fromBase64Url(keys.privateKey));
+	return `vapid t=${unsigned}.${toBase64Url(signature)}, k=${keys.publicKey}`;
 }
 /**
 * `plaintext` encrypted for a subscription (RFC 8291 with RFC 8188 `aes128gcm`, one record). `sender` fixes
@@ -14478,7 +12810,8 @@ var LINK_OR_MARKUP = /[a-z][a-z0-9+.-]*:\/\/|\bwww\.|\b(?:mailto|javascript|data
 */
 function sanitizeTypingStatus(value) {
 	if (typeof value !== "string") return void 0;
-	const clean = sanitizeDisplayText(value.slice(0, 160).replace(/\s+/g, " "), 40);
+	const oneLine = value.slice(0, 160).replace(/\s+/g, " ");
+	const clean = sanitizeDisplayText(oneLine, 40);
 	if (!clean || LINK_OR_MARKUP.test(clean)) return void 0;
 	return clean;
 }
@@ -14687,6 +13020,11 @@ var FILE_LIMITS = {
 	chunkBytes: 16384,
 	/** Bytes a sender has sent and not seen confirmed: throughput is this per round trip. */
 	windowBytes: 1048576,
+	/**
+	* Bytes all of a chat's files have sent and not seen confirmed, together. Three files' windows at once were 3 MiB, and
+	* as base64 text past what a session's receive queue holds (`SESSION_RECEIVE_PENDING`, 3.75 MiB).
+	*/
+	chatWindowBytes: 2097152,
 	/** A receiver asks its person before taking a file larger than this. */
 	askAboveBytes: 26214400,
 	/** Files taken without asking, per contact, while stored. Past it, every file is asked about. */
@@ -14722,7 +13060,7 @@ var FILE_LIMITS = {
 	resendBytes: 268435456
 };
 var ID = /^[A-Za-z0-9_-]{8,64}$/;
-var DIGEST$1 = /^[A-Za-z0-9_-]{43}$/;
+var DIGEST = /^[A-Za-z0-9_-]{43}$/;
 var DATA = /^[A-Za-z0-9_-]+$/;
 var FILE_FRAMES = /* @__PURE__ */ new Set([
 	"pf-offer",
@@ -14755,6 +13093,37 @@ function transferStalled(record, movedAt, restored, now) {
 }
 var key = (direction, id) => `${direction}:${id}`;
 var isInt$1 = (value, max = Number.MAX_SAFE_INTEGER) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0 && value <= max;
+var FILE_DATA_OFFSET_BYTES = 8;
+/** The binary message for the bytes of file `id` at `offset`. Throws on what no receiver would take. */
+function encodeFileData(id, offset, data) {
+	if (!ID.test(id) || !isInt$1(offset) || !data.length || data.length > FILE_LIMITS.chunkBytes) throw new Error("Invalid file data");
+	const head = 2 + id.length;
+	const out = new Uint8Array(head + FILE_DATA_OFFSET_BYTES + data.length);
+	out[0] = 4;
+	out[1] = id.length;
+	for (let i = 0; i < id.length; i++) out[2 + i] = id.charCodeAt(i);
+	const view = new DataView(out.buffer);
+	view.setUint32(head, Math.floor(offset / 2 ** 32));
+	view.setUint32(head + 4, offset % 2 ** 32);
+	out.set(data, head + FILE_DATA_OFFSET_BYTES);
+	return out;
+}
+/** What a binary message from the contact says, or null when it is not a well-formed file data message. `data` is a view of `message`. */
+function decodeFileData(message) {
+	if (message.length < 2 || message[0] !== 4) return null;
+	const head = 2 + message[1], body = head + FILE_DATA_OFFSET_BYTES;
+	if (message.length <= body || message.length - body > FILE_LIMITS.chunkBytes) return null;
+	const id = String.fromCharCode(...message.subarray(2, head));
+	if (!ID.test(id)) return null;
+	const view = new DataView(message.buffer, message.byteOffset, message.byteLength);
+	const high = view.getUint32(head);
+	if (high > 2097151) return null;
+	return {
+		id,
+		offset: high * 2 ** 32 + view.getUint32(head + 4),
+		data: message.subarray(body)
+	};
+}
 /** What a refusal means to the sender's person. */
 function refusalText(why, room) {
 	switch (why) {
@@ -14791,6 +13160,10 @@ function refusalText(why, room) {
 var ChatFiles = class {
 	host;
 	entries = /* @__PURE__ */ new Map();
+	/** Files sending that may have bytes not confirmed yet: what `inFlight` adds up (the rest are left out as it goes). */
+	moving = /* @__PURE__ */ new Set();
+	/** Files that stopped sending for the chat's window alone: they go on once another's bytes are confirmed. */
+	held = /* @__PURE__ */ new Set();
 	attached = false;
 	peerRoomValue = null;
 	constructor(host) {
@@ -14850,6 +13223,15 @@ var ChatFiles = class {
 	send(frame) {
 		return this.attached && this.host.send(frame);
 	}
+	sendData(id, offset, data) {
+		if (!this.host.sendData) return this.send({
+			t: "pf-data",
+			id,
+			offset,
+			data: toBase64Url(data)
+		});
+		return this.attached && this.host.sendData(id, offset, data);
+	}
 	/** A session that agreed files/3 is open: say what fits here, then offer again what is not finished. */
 	attach() {
 		this.attached = true;
@@ -14868,6 +13250,8 @@ var ChatFiles = class {
 		if (!this.attached) return;
 		this.attached = false;
 		this.peerRoomValue = null;
+		this.moving.clear();
+		this.held.clear();
 		for (const entry of this.entries.values()) {
 			if (entry.out) {
 				entry.out.generation++;
@@ -14991,10 +13375,34 @@ var ChatFiles = class {
 		const at = offset - out.block.start;
 		return out.block.bytes.subarray(at, at + length);
 	}
-	shouldPump(entry) {
+	/** Whether this file's own window lets it send more. */
+	fileMayPump(entry) {
 		const { record } = entry, out = entry.out;
 		return this.attached && record.state === "active" && out.next < record.file.size && out.next - record.confirmed < FILE_LIMITS.windowBytes;
 	}
+	shouldPump(entry) {
+		return this.fileMayPump(entry) && this.inFlight() < FILE_LIMITS.chatWindowBytes;
+	}
+	/** Bytes this chat's files sent and have not seen confirmed. */
+	inFlight() {
+		let bytes = 0;
+		for (const entry of this.moving) {
+			const out = entry.out, { record } = entry;
+			if (!out || record.state !== "active" || out.next <= record.confirmed) {
+				this.moving.delete(entry);
+				continue;
+			}
+			bytes += out.next - record.confirmed;
+		}
+		return bytes;
+	}
+	/** Bytes were confirmed, or a file stopped sending: the files the chat's window held go on, before the one that freed it. */
+	wakeHeld() {
+		for (const entry of [...this.held]) {
+			this.held.delete(entry);
+			this.pump(entry);
+		}
+	}
 	/**
 	* Whether the next `length` bytes go. Within the file's size they always do; past it the receiver is having parts
 	* sent again, which nothing it says bounds, so this side does.
@@ -15025,17 +13433,13 @@ var ChatFiles = class {
 					this.end(entry, "failed", "Your contact asked for the same part of this file too many times");
 					break;
 				}
-				if (!this.send({
-					t: "pf-data",
-					id: entry.record.id,
-					offset,
-					data: toBase64Url(chunk)
-				})) {
+				if (!this.sendData(entry.record.id, offset, chunk)) {
 					refused = true;
 					break;
 				}
 				out.next = offset + chunk.length;
 				out.sent += chunk.length;
+				this.moving.add(entry);
 			}
 		} catch (error) {
 			if (generation === out.generation) {
@@ -15050,7 +13454,7 @@ var ChatFiles = class {
 			if (generation === out.generation && this.shouldPump(entry)) {
 				if (refused) out.wake = setTimeout(() => void this.pump(entry), FILE_LIMITS.sendRetryMs);
 				else this.pump(entry);
-			}
+			} else if (generation === out.generation && this.fileMayPump(entry)) this.held.add(entry);
 		}
 	}
 	async sendSum(entry) {
@@ -15082,7 +13486,7 @@ var ChatFiles = class {
 		return [...this.entries.values()].filter((e) => e.record.direction === "in" && e.record.state === "asking").length;
 	}
 	activeIncoming(except) {
-		return [...this.entries.values()].filter((e) => e !== except && e.record.direction === "in" && (e.record.state === "active" || e.record.state === "verifying")).length;
+		return [...this.entries.values()].filter((e) => e !== except && e.record.direction === "in" && (e.record.state === "active" || e.record.state === "verifying" || e.in?.starting)).length;
 	}
 	/**
 	* Removes what this side stored of an incoming file that ends here. Through its target, opened now if need be: after
@@ -15109,9 +13513,15 @@ var ChatFiles = class {
 		}
 		return incoming.target;
 	}
-	/** An accepted file goes when a session is open and fewer than three others arrive at once. */
+	/**
+	* An accepted file goes when a session is open and fewer than three others arrive at once. One whose target is still
+	* being opened counts among the three: counted only once active, every file offered or queued meanwhile went too, and
+	* the windows of ten files and more at once overflowed the session's receive queue.
+	*/
 	startIncoming(entry) {
 		if (!this.attached || transferEnded(entry.record) || entry.record.state === "asking" || entry.record.state === "paused" && entry.record.pausedBy === "me") return;
+		const incoming = entry.in;
+		if (incoming.starting) return;
 		if (this.activeIncoming(entry) >= FILE_LIMITS.maxActiveIncoming) {
 			if (entry.record.state !== "queued") {
 				entry.record.state = "queued";
@@ -15124,9 +13534,13 @@ var ChatFiles = class {
 			});
 			return;
 		}
+		incoming.starting = true;
 		this.target(entry).then(() => {
-			if (transferEnded(entry.record) || !this.attached) return;
-			if (entry.record.state === "paused" && entry.record.pausedBy === "me") return;
+			incoming.starting = false;
+			if (transferEnded(entry.record) || !this.attached || entry.record.state === "paused" && entry.record.pausedBy === "me") {
+				this.startNext();
+				return;
+			}
 			entry.record.state = "active";
 			entry.record.pausedBy = void 0;
 			entry.in.gapAt = void 0;
@@ -15139,12 +13553,14 @@ var ChatFiles = class {
 			entry.in.heardAt = this.now();
 			this.armNudge(entry);
 		}, (error) => {
+			incoming.starting = false;
 			this.end(entry, "failed", `Could not store the file: ${error instanceof Error ? error.message : String(error)}`);
 			this.send({
 				t: "pf-refuse",
 				id: entry.record.id,
 				why: "no-room"
 			});
+			this.startNext();
 		});
 	}
 	/** The next file waiting its turn, once one ends. */
@@ -15383,7 +13799,9 @@ var ChatFiles = class {
 		if (record.state !== "active" || !incoming.target) return;
 		incoming.heardAt = this.now();
 		const { offset, data } = frame;
-		if (!isInt$1(offset) || typeof data !== "string" || !data.length || data.length > Math.ceil(FILE_LIMITS.chunkBytes * 4 / 3) || !DATA.test(data)) return;
+		const binary = data instanceof Uint8Array;
+		if (!isInt$1(offset) || !(binary || typeof data === "string") || !data.length) return;
+		if (!binary && (data.length > Math.ceil(FILE_LIMITS.chunkBytes * 4 / 3) || !DATA.test(data))) return;
 		if (offset < incoming.written) {
 			if (incoming.stored === incoming.written) this.send({
 				t: "pf-got",
@@ -15403,7 +13821,7 @@ var ChatFiles = class {
 			}
 			return;
 		}
-		const bytes = fromBase64Url(data);
+		const bytes = binary ? data : fromBase64Url(data);
 		if (!bytes.length || bytes.length > FILE_LIMITS.chunkBytes || offset + bytes.length > record.file.size) return;
 		incoming.written += bytes.length;
 		const target = incoming.target;
@@ -15495,7 +13913,7 @@ var ChatFiles = class {
 			return;
 		}
 		if (record.state !== "active" || incoming.verifying || !incoming.target) return;
-		if (frame.size !== record.file.size || typeof frame.digest !== "string" || !DIGEST$1.test(frame.digest)) return;
+		if (frame.size !== record.file.size || typeof frame.digest !== "string" || !DIGEST.test(frame.digest)) return;
 		const digest = frame.digest;
 		await incoming.writing;
 		if (transferEnded(record) || record.state !== "active") return;
@@ -15588,6 +14006,7 @@ var ChatFiles = class {
 				record.state = "active";
 				record.pausedBy = record.waitingFor = void 0;
 				this.changed(outgoing);
+				this.wakeHeld();
 				if (record.confirmed === record.file.size) this.sendSum(outgoing);
 				else {
 					this.armStall(outgoing);
@@ -15607,11 +14026,13 @@ var ChatFiles = class {
 					record.waitingFor = frame.why === "busy" ? "busy" : "consent";
 				}
 				this.changed(outgoing);
+				this.wakeHeld();
 				return;
 			case "pf-got":
 				if (!isInt$1(frame.offset) || frame.offset <= record.confirmed || frame.offset > out.next) return;
 				record.confirmed = frame.offset;
 				this.changed(outgoing, true);
+				this.wakeHeld();
 				if (record.confirmed === record.file.size) this.sendSum(outgoing);
 				else {
 					this.armStall(outgoing);
@@ -15619,7 +14040,7 @@ var ChatFiles = class {
 				}
 				return;
 			case "pf-done":
-				if (record.state !== "verifying") return;
+				if (record.state !== "verifying" && record.confirmed !== record.file.size) return;
 				record.confirmed = record.file.size;
 				this.end(outgoing, "done");
 				return;
@@ -15641,6 +14062,8 @@ var ChatFiles = class {
 			clearTimeout(entry.out.wake);
 			entry.out.block = void 0;
 			entry.out.source = void 0;
+			this.moving.delete(entry);
+			this.held.delete(entry);
 		}
 		if (entry.in) {
 			const incoming = entry.in;
@@ -15650,6 +14073,7 @@ var ChatFiles = class {
 			});
 		}
 		this.changed(entry);
+		if (entry.out) this.wakeHeld();
 	}
 	entry(direction, id) {
 		const entry = this.entries.get(key(direction, id));
@@ -15698,6 +14122,7 @@ var ChatFiles = class {
 			this.startNext();
 		}
 		this.changed(entry);
+		if (entry.out) this.wakeHeld();
 	}
 	resume(direction, id) {
 		const entry = this.entry(direction, id), { record } = entry;
@@ -16316,6 +14741,8 @@ var CarriedTransport = class {
 	/** My last packet while the edge is down: what a member that just became reachable is handed. */
 	mine = null;
 	lastTimestamp = 0n;
+	/** The date each packet `stamp` signed carries: the relays' transport takes it rather than check the signature again. */
+	dated = /* @__PURE__ */ new WeakMap();
 	/** My newest packet, wherever it went: what the edge hands the member over itself once it is ready (`linkReady`). */
 	newest = null;
 	/** The newest packet of the member's that came through a carrier, and the timestamp of the one a read last returned. */
@@ -16395,7 +14822,9 @@ var CarriedTransport = class {
 	stamp(identity, records) {
 		const now = BigInt(Date.now()) * 1000n;
 		this.lastTimestamp = now > this.lastTimestamp ? now : this.lastTimestamp + 1n;
-		return createRelayPayload(identity, records, this.lastTimestamp);
+		const payload = createRelayPayload(identity, records, this.lastTimestamp);
+		this.dated.set(payload, this.lastTimestamp);
+		return payload;
 	}
 	/**
 	* The relays get the very packet members carried or the edge itself handed over, byte for byte, where the transport
@@ -16405,7 +14834,11 @@ var CarriedTransport = class {
 	* its restart and then wait 40 s for (7 of 16 goodbyes on the admin in the member-back runs, 1 of 16 on dev, 2026-10-03).
 	*/
 	toRelays(identity, records, payload, options) {
-		return this.inner.publishPayload ? this.inner.publishPayload(identity.pubKeyZ32, payload, options) : this.inner.publish(identity, records, options);
+		const signedAt = this.dated.get(payload);
+		return this.inner.publishPayload ? this.inner.publishPayload(identity.pubKeyZ32, payload, signedAt === void 0 ? options : {
+			...options,
+			signedAt
+		}) : this.inner.publish(identity, records, options);
 	}
 	/**
 	* The packet the relays just took, handed to the member over the edge itself while it is up. An edge up reads nothing
@@ -16519,142 +14952,6 @@ var CarriedTransport = class {
 	}
 };
 //#endregion
-//#region ../core/src/groupFiles.ts
-/**
-* Files and voice messages in groups (WISP 503 · Group Files). A file is announced as a group message carrying its
-* description; its bytes go over `files/3` between two members, from a member that holds it to one that asks for it.
-* The limits below are the profile's first numbers, kept in one place so they are easy to change.
-*/
-var GROUP_FILE_LIMITS = {
-	/** The largest file a group takes. */
-	maxBytes: 104857600,
-	/** A file this size or smaller is fetched without asking (voice messages always are, up to `VOICE_LIMITS`). */
-	autoBytes: 8388608,
-	/** What a device keeps of a group's files it fetched without asking; past it, every file is asked about. */
-	autoBytesPerGroup: 268435456,
-	/** Bytes of group files a device serves to others in a day, when serving is on. */
-	serveBytesPerDay: 1073741824,
-	/** Transfers a holder serves at once, all groups together. */
-	serveAtOnce: 3,
-	/** File announcements a member sends to one group in a minute. */
-	announcePerMinute: 8,
-	/** File announcements of one member of a group fetched by themselves in `announceWindowMs`; past it, kept for a Download. */
-	announceTaken: 30,
-	announceWindowMs: 6e5,
-	/** Holders remembered per file. */
-	holders: 8,
-	/**
-	* Message ids a `group-have` named before their message came (a member back from away hears who holds what as its
-	* catch-up begins), remembered with their holders for when it does.
-	*/
-	heardAhead: 256,
-	/** Message ids in one `group-have`. */
-	haveIds: 32,
-	/** A private group's `group-have` goes on an edge at most this often; a community's, from a member, every `communityHaveEveryMs`. */
-	haveEveryMs: 1e4,
-	communityHaveEveryMs: 6e4,
-	/**
-	* How long a want waits for an offer before the next holder is asked; a transfer that does not move for as long is
-	* left for the next holder too.
-	*/
-	wantWaitMs: 3e4,
-	/** A file session closes this long after its last transfer ends. */
-	sessionIdleMs: 6e4,
-	/** File sessions opening at once, and open at once, all groups together. */
-	sessionsOpening: 2,
-	sessionsOpen: 4,
-	/** The longest file name and type kept from a description. */
-	nameChars: 255,
-	mimeChars: 255
-};
-/**
-* The frames of WISP 503 § Getting the bytes, on an edge between two apps that announced `GROUP_VERSION_FILES`:
-* `group-want {g, id}` asks a holder for the file of message `id`; `group-want-no {g, id, why}` is a holder's no;
-* `group-have {g, ids}` says which files a member keeps (in a community, an application frame `{t, ids}` instead).
-*/
-var GROUP_WANT_FRAME = "group-want";
-var GROUP_WANT_NO_FRAME = "group-want-no";
-var GROUP_HAVE_FRAME = "group-have";
-var REFUSALS = [
-	"gone",
-	"busy",
-	"refused"
-];
-/** A group message's id, as a private group (`<s>:<e>:<n>`) or a community (`<s>:<e>:<h>:<n>`) names it. */
-var MESSAGE_ID = /^[a-z0-9]{52}:\d{1,15}(:[A-Za-z0-9_-]{1,64})?:\d{1,15}$/;
-var isGroupMessageId = (value) => typeof value === "string" && MESSAGE_ID.test(value);
-function frameOf(value, t, groupId) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) return null;
-	const f = value;
-	return f.t === t && (groupId === void 0 || f.g === groupId) ? f : null;
-}
-/** A `group-want` of group `groupId`: the message whose file is asked for, or null. */
-function readGroupWant(value, groupId) {
-	const f = frameOf(value, GROUP_WANT_FRAME, groupId);
-	return f && isGroupMessageId(f.id) ? { id: f.id } : null;
-}
-/** A holder's `group-want-no` of group `groupId`, or null. A reason this app does not know reads as `busy`. */
-function readGroupWantNo(value, groupId) {
-	const f = frameOf(value, GROUP_WANT_NO_FRAME, groupId);
-	if (!f || !isGroupMessageId(f.id)) return null;
-	return {
-		id: f.id,
-		why: typeof f.why === "string" && REFUSALS.includes(f.why) ? f.why : "busy"
-	};
-}
-/**
-* The message ids of a `group-have`: of group `groupId` on an edge, or (no `groupId`) a community's application frame.
-* At most `haveIds` message ids; a frame with more, or anything else, is null.
-*/
-function readGroupHave(value, groupId) {
-	const f = frameOf(value, GROUP_HAVE_FRAME, groupId);
-	if (!f || !Array.isArray(f.ids) || !f.ids.length || f.ids.length > GROUP_FILE_LIMITS.haveIds || !f.ids.every(isGroupMessageId)) return null;
-	return [...new Set(f.ids)];
-}
-var DIGEST = /^[A-Za-z0-9_-]{43}$/;
-/**
-* A description read from the wire, cleaned: the name made a display name (never a path), the type untrusted, the
-* size within the group limit, the digest the right shape. A malformed voice, video or picture description is dropped
-* on its own and the file is still a file; anything else malformed is no file at all (null), and the text shows.
-*/
-function readGroupFileMeta(value) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) return null;
-	const v = value;
-	if (typeof v.name !== "string" || !v.name.trim() || [...v.name].length > GROUP_FILE_LIMITS.nameChars) return null;
-	if (typeof v.mime !== "string" || v.mime.length > GROUP_FILE_LIMITS.mimeChars) return null;
-	if (!Number.isSafeInteger(v.size) || v.size < 1 || v.size > GROUP_FILE_LIMITS.maxBytes) return null;
-	if (typeof v.d !== "string" || !DIGEST.test(v.d)) return null;
-	const mime = sanitizeMime(v.mime);
-	const voice = v.voice === void 0 ? void 0 : parseVoiceMeta(v.voice, mime);
-	const video = v.video === void 0 ? void 0 : parseVideoMeta(v.video, mime);
-	const image = v.image === void 0 ? void 0 : parseImageMeta(v.image, mime);
-	return {
-		name: sanitizeFileName(v.name),
-		mime,
-		size: v.size,
-		d: v.d,
-		...voice ? { voice } : {},
-		...video ? { video } : {},
-		...image ? { image } : {}
-	};
-}
-/**
-* The text an announcement carries when its author wrote no caption: what an app without group files shows instead
-* of the file. English, as wire text is; an app that knows the file shows the file, not this line.
-*/
-function groupFileFallback(file) {
-	if (file.voice) return `🎤 Voice message (${formatVoiceDuration(file.voice.duration)}): update Ghostly to hear it`;
-	return `${fileMessageText(file)} (${formatFileSize(file.size)}): update Ghostly to get files in groups`;
-}
-/**
-* Whether a device fetches a file by itself (WISP 503 § Automatic and asked downloads): a voice message always, any
-* other file up to `autoBytes` while what it took that way from the group stays within `autoBytesPerGroup`.
-*/
-function fetchesByItself(file, keptAutomatically, limits = GROUP_FILE_LIMITS) {
-	if (file.voice) return true;
-	return file.size <= limits.autoBytes && keptAutomatically + file.size <= limits.autoBytesPerGroup;
-}
-//#endregion
 //#region ../core/src/pairingProgress.ts
 var FIRST_STAGE = {
 	inviter: "publishing",
@@ -16846,6 +15143,7 @@ var ENGINE_ERRORS = {
 	notEnoughSats: "Not enough sats in your wallet",
 	noSharedMint: "You share no mint with this contact",
 	ecashAlreadySpent: "This ecash was already spent somewhere else",
+	ecashBeingReceived: "This ecash is already being received",
 	ecashOtherUnit: "This ecash is in {unit}: only sat ecash can be redeemed here",
 	reviewedEcashSpent: "The ecash for this payment was already spent somewhere else. Nothing was sent, and your balance now shows what the mint still holds.",
 	reviewedSatsGone: "The sats this payment was reviewed with went to another payment. Nothing was sent: review it again.",
@@ -16954,8 +15252,14 @@ var PACKET_TRANSPORTS_FAST_ATTEMPTS = 3;
 var DHT_PIN_GRACE_MS = 1e4;
 /** Back after a restart (`resume`), dials wait this long at most for the native endpoint that carried the chat to start. */
 var RESUME_WAIT_MS = 1e4;
-/** Two dials crossing: how long the lower key's side waits for its own to connect before it takes the contact's. */
-var CROSSED_WAIT_MS = 3e3;
+/**
+* A dial of the contact's that meets such a session waits this long for that session to answer a ping. It answers when
+* the dials crossed (the contact holds this side's dial too); it does not when the contact's app ended since and is
+* back: its dial then takes over. Refused outright, that dial left the contact waiting for the dead session's end, 16.6
+* to 18.9 s (CLI daemons over HyperDHT, the contact killed 1 to 3 s after this side's knock, 5 of 5). A round trip is
+* 7 ms on loopback and under 0.5 s over a relayed Iroh.
+*/
+var CROSSED_PROBE_MS = 1500;
 /** A WebRTC attempt under way, not yet open: what a member's packet saying it has no WebRTC ends (`peerPacketTransports`). */
 var WEBRTC_ATTEMPT = /* @__PURE__ */ new Set([
 	"offering",
@@ -17077,6 +15381,18 @@ var HANDLED_WAIT_MS = 1e4;
 */
 var WAKE_LOST_MS = 1e4;
 /**
+* What files/3 may hold on a session's channel (WISP 501, Backpressure): a quarter of its send budget (native and iroh
+* channels throw past 120 KiB), or the high water mark of a WebRTC channel, which has none.
+*/
+function filesCap(channel) {
+	return channel.sendBudget ? channel.sendBudget / 4 : LIMITS.sendHighWaterMark;
+}
+/**
+* How long after files last wrote on a channel, or last waited for room on it, an app's data keeps its own quarter above
+* their line (WISP 1200 § In a chat): a file waiting for `pf-got` holds its share meanwhile.
+*/
+var FILES_IN_USE_MS = 2e3;
+/**
 * A `paired-message` frame. The preview (`pv`) is left out when the frame would pass `MAX_PAIRED_MESSAGE_FRAME`
 * with it: the text matters, the card does not. A reply (`r`, WISP 401 § Replies) is a few hundred bytes at most
 * and always goes, and so does a forwarded message's hop count (`fw`, WISP 401 § Forwards) and a status card (`sc`,
@@ -17296,10 +15612,15 @@ var GhostLink = class {
 	* was the app's in the background, not a restart (`resumeAfterAbsence`).
 	*/
 	offered;
+	/**
+	* The WebRTC offer this side's dial made last, fallback allowed or not: one made before the contact's record was read
+	* races once it is (`raceStandingOffer`).
+	*/
+	offerMade;
 	/** The attempt (its epoch) whose direct transports were knocked on as its offer went out (`knockEarly`), and whether that is under way. */
 	knockedEarly = -1;
 	knockingEarly = false;
-	/** When that offer's answer was applied (`RACE_ANSWERED_MS`); 0 while the data link is not connecting on it. */
+	/** When this side's offer's answer was applied (`RACE_ANSWERED_MS`); 0 while the data link is not connecting on it. */
 	answeredAt = 0;
 	/** This side's offer is out unanswered, or answered and not connected yet: what is ranked after WebRTC may race it. */
 	get offerOut() {
@@ -17419,6 +15740,7 @@ var GhostLink = class {
 			});
 			options.events?.onPairingProgress?.(progress);
 		}) : null;
+		const invite = options.pairingProgress?.role === "inviter" && !!options.pairing && !options.pairing.credentials.peerKey;
 		this.dht = options.params.profile && options.pairing && options.dht ? new DhtDelivery({
 			params: options.params,
 			mode: this.deliveryMode,
@@ -17428,6 +15750,7 @@ var GhostLink = class {
 			save: options.dht.save,
 			pollMs: options.dht.pollMs,
 			firstControlAfterMs: options.dht.firstControlAfterMs,
+			...invite && { inviteMadeAt: options.madeAt ?? Date.now() },
 			capsRev: options.dht.capsRev,
 			peerCapsRev: options.dht.peerCapsRev,
 			peerAcceptsText: options.dht.peerAcceptsText,
@@ -17443,6 +15766,7 @@ var GhostLink = class {
 			},
 			pin: async (key) => {
 				await options.pairing.pinPeer(key, true);
+				if (invite) this.session.lookNow();
 				if (this.isDataLinkOpen || !this.tracker || this.tracker.done) return;
 				if (this.deliveryMode === "dht") {
 					this.tracker.onDht("chosen");
@@ -17513,6 +15837,7 @@ var GhostLink = class {
 			lastSeenTimestamp: options.lastSeenTimestamp,
 			pollIntervals: options.pollIntervals,
 			awaitingSince: options.madeAt,
+			...invite && { invite: () => !options.pairing.credentials.peerKey },
 			getServices: options.getServices,
 			firstPublish: options.firstPublish ?? (this.tracker && options.pairingProgress?.role === "joiner" && options.rtcAvailable !== false || this.resuming ? "after-first-poll" : "at-start"),
 			events: {
@@ -17632,6 +15957,7 @@ var GhostLink = class {
 					channel.close();
 					return;
 				}
+				if (this.rtcStartedUnpinned) this.openedUnpinned.add(channel);
 				const plan = this.switcher.pending;
 				if (plan?.choices.includes("webrtc/1") && this.paired?.state.status === "ready") this.attachCandidate(channel, void 0, plan).catch(() => {});
 				else if (this.activeBinding) channel.close();
@@ -17647,6 +15973,7 @@ var GhostLink = class {
 				const was = this.lastDataLinkState;
 				traceLink(this.myPubKeyZ32, "datalink", { state });
 				this.trackDataLink(state);
+				if (state === "offering" || state === "answering") this.rtcStartedUnpinned = !options.pairing?.credentials.peerKey && !options.pairing?.credentials.expectedPeerKey;
 				if (this.activeBinding) return;
 				events.onDataLinkState?.(state);
 				if (state === "open") {
@@ -17666,9 +15993,9 @@ var GhostLink = class {
 					}
 				}
 				this.answeredAt = 0;
-				if (state === "connecting" && was === "offering" && this.offered?.epoch === this.connectionEpoch) {
+				if (state === "connecting" && was === "offering" && this.offerMade?.epoch === this.connectionEpoch) {
 					this.answeredAt = Date.now();
-					this.scheduleRace(this.offered.epoch, this.offered.at);
+					if (this.offered?.epoch === this.connectionEpoch) this.scheduleRace(this.offered.epoch, this.offered.at);
 				}
 				if (state !== "idle") return;
 				this.dialUnseen = was === "offering" && this.offerUnsent;
@@ -18023,11 +16350,11 @@ var GhostLink = class {
 	}
 	start() {
 		if (this.saidTransports) this.publishPacketTransports();
-		if (this.deliveryMode !== "dht") this.session.start();
 		if (this.resuming && this.deliveryMode !== "dht") {
 			this.session.expectPeer();
 			this.resumeWaitUntil = Date.now() + RESUME_WAIT_MS;
 		}
+		if (this.deliveryMode !== "dht") this.session.start();
 		if (this.tracker && !this.tracker.done && this.options.pairingProgress?.role === "joiner") {
 			this.dht?.expect();
 			this.dialEarly();
@@ -18149,6 +16476,7 @@ var GhostLink = class {
 	disconnect() {
 		this.closeRetired();
 		this.dropCrossed();
+		this.dropCrossedProbe();
 		this.dropBlockedDial();
 		this.switcher.stop();
 		this.cancelCandidate();
@@ -18259,6 +16587,7 @@ var GhostLink = class {
 		}
 		if (held && heldOn && reidentified.has(heldOn) && this.restartedRedial(held, heldOn)) return;
 		if (this.redescribedDial()) return;
+		if (!this.dialing) this.raceStandingOffer();
 		if (this.channel || this.dialing) return;
 		if (news || !again) {
 			this.autoConnectFailures = 0;
@@ -18836,6 +17165,10 @@ var GhostLink = class {
 						...resume && { resume },
 						...woke && { woke }
 					} : void 0;
+					this.offerMade = {
+						epoch,
+						at: offeredAt
+					};
 					const gate = this.dialGate;
 					this.dialGate = void 0;
 					const replaced = new Promise((resolve) => {
@@ -18847,10 +17180,12 @@ var GhostLink = class {
 						traceLink(this.myPubKeyZ32, "dial-held", {});
 						this.afterRtc = void 0;
 						this.offered = void 0;
+						this.offerMade = void 0;
 						return;
 					}
 					if (this.dataLink.state !== "idle" || epoch !== this.connectionEpoch) {
 						this.scheduleRace(epoch, offeredAt);
+						this.raceStandingOffer();
 						return;
 					}
 					this.rtcUnstarted();
@@ -19016,6 +17351,31 @@ var GhostLink = class {
 		}, Math.max(0, Math.min(...at) - now));
 	}
 	/**
+	* This side's offer went out before the contact's record was read (a joiner's early one, `dialEarly`): nothing was
+	* known of what the contact runs, so it was made with no fallback and nothing raced it. Once the record says, and both
+	* sides allow it, the offer races what both run as one made then would: answered and not connected `RACE_ANSWERED_MS`
+	* later, the relayed ones too. Behind a VPN that drops UDP, a first pairing went live over the relayed Iroh only once
+	* the attempt timed out and the next one raced, 32 to 66 s in (zero's VPN lab, 2026-10-13).
+	*/
+	raceStandingOffer() {
+		const made = this.offerMade, epoch = this.connectionEpoch;
+		if (!made || made.epoch !== epoch || this.offered?.epoch === epoch || !this.offerOut || this.channel || this.stopped) return;
+		if (!this.fallback || !this.peerFallback || !this.peerTransports) return;
+		const relayed = relayedTransports(this.localDescriptors(), this.peerDescriptors);
+		const rest = rankTransports(this.transportOffer(), this.peerTransports, relayed).filter((t) => t !== "webrtc/1");
+		if (!rest.length) return;
+		this.offered = {
+			epoch,
+			at: made.at
+		};
+		this.afterRtc = {
+			epoch,
+			rest
+		};
+		traceLink(this.myPubKeyZ32, "race-standing", { transports: rest });
+		this.scheduleRace(epoch, made.at);
+	}
+	/**
 	* Back after an absence, this side answers an offer the contact made while it was away (it dials whatever its key):
 	* the contact looks for that answer at the pace of an offer out a while (every 8 s on the relays), and its attempt may
 	* end before it does. The direct transports both run are knocked on meanwhile, and the relayed ones where both apps
@@ -19123,6 +17483,18 @@ var GhostLink = class {
 		if (!this.options.params.profile || this.options.packetTransports) return true;
 		return this.transportOffer().some((t) => t === "webrtc/1" ? !this.peerTransports || this.peerTransports.includes(t) : this.canDial(t) && !!this.peerTransports?.includes(t));
 	}
+	/**
+	* Neither side can dial the other until something changes, past a first pairing: what the contact runs is known, and
+	* no transport both run has WebRTC on both sides or an endpoint up on both (this side's, and the one its record
+	* describes). A chat that gave its listener up to another (`yieldEndpoint`), or whose contact did, is so. It dials
+	* again when that changes (a listener taken back, `registerEndpoint`; the record describing one, `learnPeerTransports`),
+	* and reads at its own pace meanwhile: looks every 20 s for a dial with nothing to try, and the contact's fast looks
+	* for an offer that could not come, read its key 2.5x to 4x as often as the background pace, for good (bug hunt,
+	* 2026-10-12). A first pairing keeps both: the records are what it is reading for.
+	*/
+	nothingToDialEitherWay() {
+		return !(!!this.tracker && !this.tracker.done && this.tracker.progress.stage !== "on-dht") && !!this.peerTransports && !this.anythingToDial();
+	}
 	clearRace() {
 		if (this.raceTimer) clearTimeout(this.raceTimer);
 		this.raceTimer = null;
@@ -19148,6 +17520,7 @@ var GhostLink = class {
 		const left = next.rest.filter((t) => t !== "webrtc/1" && !due.includes(t));
 		if (!due.length) {
 			this.scheduleRace(epoch, offeredAt);
+			this.raceStandingOffer();
 			return;
 		}
 		this.afterRtc = left.length ? {
@@ -19172,6 +17545,7 @@ var GhostLink = class {
 		if (live || epoch !== this.connectionEpoch || this.channel || this.stopped) return;
 		if (this.dataLink.state !== "idle") {
 			this.scheduleRace(epoch, offeredAt);
+			this.raceStandingOffer();
 			return;
 		}
 		const rest = this.afterRtc;
@@ -19420,7 +17794,7 @@ var GhostLink = class {
 				return;
 			}
 		} else if (role !== "joiner" && this.myPubKeyZ32 > this.options.params.peerPubKeyZ32 && !this.resuming && !this.dialsPastRtc()) {
-			if (Date.now() - presenceSeenAt(presence) < 3e4 && presence.lastPacketAt !== this.offerAwaitedFor) {
+			if (Date.now() - presenceSeenAt(presence) < 3e4 && presence.lastPacketAt !== this.offerAwaitedFor && !this.nothingToDialEitherWay()) {
 				this.offerAwaitedFor = presence.lastPacketAt;
 				this.session.expectPeer();
 			}
@@ -19498,6 +17872,7 @@ var GhostLink = class {
 		this.retryLook = null;
 		const from = this.lastAutoConnectAt;
 		if (!from || this.stopped || this.leaving || this.streamBlocked || this.keyStopped || !this.options.autoConnect) return;
+		if (this.nothingToDialEitherWay()) return;
 		this.retryLook = setTimeout(() => {
 			this.retryLook = null;
 			if (this.lastAutoConnectAt !== from || this.stopped || this.leaving || this.yielding || this.streamBlocked || this.keyStopped || this.channel || this.dialing || this.dataLink.state !== "idle") return;
@@ -19757,6 +18132,7 @@ var GhostLink = class {
 		if (this.options.callsSupport) offered.push(CALLS_CAPABILITY);
 		if (this.options.servicesSupport) offered.push(SERVICES_CAPABILITY);
 		if (this.options.largeFilesSupport) offered.push(FILES_CAPABILITY);
+		if (this.options.largeFilesSupport && this.options.binaryFilesSupport && this.channel?.binary) offered.push(FILES_BINARY_CAPABILITY);
 		if (this.options.typingSupport) offered.push(TYPING_CAPABILITY);
 		if (this.options.reactionsSupport) offered.push(REACTIONS_CAPABILITY);
 		if (this.options.editSupport) offered.push(EDIT_CAPABILITY);
@@ -19793,6 +18169,10 @@ var GhostLink = class {
 	get supportsLargeFiles() {
 		return this.isDataLinkOpen && this.sessionCapabilities.agreed("files/3");
 	}
+	/** Both sides offer `files/4` beside `files/3` on the open session: a file's bytes go as binary messages. */
+	get supportsBinaryFiles() {
+		return this.supportsLargeFiles && this.sessionCapabilities.agreed("files/4");
+	}
 	/** Both sides offer `typing/1` on the open session: typing can be said and shown. */
 	get supportsTyping() {
 		return this.isDataLinkOpen && this.sessionCapabilities.agreed("typing/1");
@@ -19956,13 +18336,18 @@ var GhostLink = class {
 	}
 	/**
 	* One data frame of an app open on both sides, on the live session only. An error when it did not go: nothing is
-	* kept to send later.
+	* kept to send later. While the channel already holds a quarter of what it may queue (its send budget, or the high
+	* water mark of a WebRTC channel), the frame is refused with `too-fast`, so the chat's messages and pings never wait
+	* behind an app's data on a link slower than it sends (WISP 1200 § In a chat). While a file goes, that quarter sits
+	* above what files may hold (`filesWritable`): files keep the channel at their own line for the whole transfer.
 	*/
 	sendAppData(app, data) {
 		if (!this.apps.open.has(app)) return "not-open";
 		if (appDataBytes(data) > 32768) return "too-large";
 		if (!this.channel || !this.isDataLinkOpen) return "offline";
 		if (!this.supportsApps) return "peer-closed";
+		const files = this.filesUse?.channel === this.channel && (this.filesUse.waiting > 0 || Date.now() - this.filesUse.at < FILES_IN_USE_MS) ? filesCap(this.channel) : 0;
+		if (this.channel.bufferedAmount >= files + (this.channel.sendBudget ?? LIMITS.sendHighWaterMark) / 4) return "too-fast";
 		const refused = this.apps.canSend(app, data);
 		if (refused) return refused;
 		try {
@@ -20013,19 +18398,57 @@ var GhostLink = class {
 		}
 	}
 	/**
+	* A file's bytes to the contact, on the open session: one binary message while both sides agreed `files/4` on it,
+	* the `pf-data` frame with them as base64url text otherwise (WISP 501 § files/4). The form is chosen for each chunk,
+	* so a transfer follows the session it is on. False when files/3 cannot flow now, or the channel has no room.
+	*/
+	sendFileData(id, offset, data) {
+		if (!this.supportsLargeFiles || !this.channel) return false;
+		try {
+			this.channel.send(this.supportsBinaryFiles ? encodeFileData(id, offset, data) : JSON.stringify({
+				t: "pf-data",
+				id,
+				offset,
+				data: toBase64Url(data)
+			}));
+			this.filesUsing(this.channel).at = Date.now();
+			return true;
+		} catch {
+			return false;
+		}
+	}
+	/** Files on a channel: when they last wrote on it, and how many wait for room. An app's data gets room above theirs. */
+	filesUse = null;
+	filesUsing(channel) {
+		if (this.filesUse?.channel !== channel) this.filesUse = {
+			channel,
+			at: 0,
+			waiting: 0
+		};
+		return this.filesUse;
+	}
+	/**
 	* Resolves once the open session can take another files/3 data frame; undefined when it can now. A channel with a send budget (native and
 	* iroh ones throw past 120 KiB) gives files a quarter of it, so a ping, a message or any other frame still fits
-	* while a file goes; others keep under the high water mark, as files/2 does.
+	* while a file goes; others keep under the high water mark, as files/2 does. An app's data gets a quarter above that
+	* line meanwhile (`sendAppData`).
 	*/
 	filesWritable() {
 		const channel = this.channel;
 		if (!channel) return;
-		const cap = channel.sendBudget ? channel.sendBudget / 4 : LIMITS.sendHighWaterMark;
+		const cap = filesCap(channel);
 		if (channel.bufferedAmount < cap) return;
+		const use = this.filesUsing(channel);
+		use.waiting++;
 		return (async () => {
-			while (this.channel === channel && channel.bufferedAmount >= cap) {
-				await channel.drained().catch(() => {});
-				if (this.channel === channel && channel.bufferedAmount >= cap) await new Promise((resolve) => setTimeout(resolve, 20));
+			try {
+				while (this.channel === channel && channel.bufferedAmount >= cap) {
+					await channel.drained().catch(() => {});
+					if (this.channel === channel && channel.bufferedAmount >= cap) await new Promise((resolve) => setTimeout(resolve, 20));
+				}
+			} finally {
+				use.waiting--;
+				use.at = Date.now();
 			}
 		})();
 	}
@@ -20247,8 +18670,8 @@ var GhostLink = class {
 	* Both sides dialled at once (two apps back after a restart, each knocking): the lower key's dial carries the chat, on
 	* both sides; the higher key's side takes it over as a replacement (`attachReplacement`). Here, on the lower key's
 	* side, the contact's connection waits: dropped once this side's own dial connects, taken if that dial fails, or has
-	* not connected within `CROSSED_WAIT_MS` (the contact may be dialling an app that is not up yet, for as long as its
-	* dial takes to give up).
+	* not connected within `CROSSED_WAIT_MS` (it stalled, or goes to an endpoint the contact no longer runs, for as long
+	* as it takes to give up).
 	*/
 	crossed = null;
 	parkCrossed(channel, binding) {
@@ -20265,7 +18688,7 @@ var GhostLink = class {
 			this.dialing = false;
 			this.attempt = null;
 			this.attach(channel, binding);
-		}, CROSSED_WAIT_MS);
+		}, 500);
 		channel.onClose = () => {
 			if (this.crossed?.channel === channel) {
 				clearTimeout(timer);
@@ -20323,13 +18746,20 @@ var GhostLink = class {
 		}
 		const held = this.channel;
 		if (held && this.activeBinding && !this.dialedIn.has(held) && Date.now() - this.channelSince < 1e4 && this.myPubKeyZ32 < this.options.params.peerPubKeyZ32) {
-			traceLink(this.myPubKeyZ32, "dial-crossed", {
-				transport: binding.transport,
-				held: true
-			});
-			channel.close();
+			if (this.paired?.state.status !== "ready") {
+				traceLink(this.myPubKeyZ32, "dial-crossed", {
+					transport: binding.transport,
+					held: true
+				});
+				channel.close();
+				return;
+			}
+			this.probeCrossed(held, channel, binding);
 			return;
 		}
+		this.replaceWith(channel, binding);
+	}
+	replaceWith(channel, binding) {
 		traceLink(this.myPubKeyZ32, "replacing", {
 			transport: binding.transport,
 			held: this.paired?.state.transport
@@ -20340,6 +18770,62 @@ var GhostLink = class {
 		});
 	}
 	/**
+	* The contact dialled in while this side's own fresh dial holds the chat (`CROSSED_FRESH_MS`): the dials crossed, or
+	* the contact's app ended since that dial and is back. The held session is pinged; heard from within
+	* `CROSSED_PROBE_MS`, the contact holds this side's dial too and its own closes. Not heard from, the contact's dial
+	* takes over.
+	*/
+	crossedProbe = null;
+	/** Frames heard on the open session, counted from its start: whether the contact answered `probeCrossed`. */
+	framesHeard = 0;
+	probeCrossed(held, channel, binding) {
+		this.dropCrossedProbe();
+		traceLink(this.myPubKeyZ32, "dial-crossed", {
+			transport: binding.transport,
+			held: true,
+			probe: true
+		});
+		const heard = this.framesHeard;
+		try {
+			this.sendPing(held, false);
+		} catch {}
+		const timer = setTimeout(() => {
+			if (this.crossedProbe?.channel !== channel) return;
+			this.crossedProbe = null;
+			if (this.stopped || this.leaving || this.candidate) {
+				channel.close();
+				return;
+			}
+			if (!this.channel) {
+				this.attach(channel, binding);
+				return;
+			}
+			if (this.channel === held && this.framesHeard !== heard) {
+				channel.close();
+				return;
+			}
+			traceLink(this.myPubKeyZ32, "crossed-held-silent", { transport: binding.transport });
+			this.replaceWith(channel, binding);
+		}, CROSSED_PROBE_MS);
+		channel.onClose = () => {
+			if (this.crossedProbe?.channel === channel) {
+				clearTimeout(timer);
+				this.crossedProbe = null;
+			}
+		};
+		this.crossedProbe = {
+			channel,
+			timer
+		};
+	}
+	dropCrossedProbe() {
+		const probe = this.crossedProbe;
+		if (!probe) return;
+		this.crossedProbe = null;
+		clearTimeout(probe.timer);
+		probe.channel.close();
+	}
+	/**
 	* Connections that came in on this side's native endpoints. Their address was in the capability record, which before
 	* the pin anyone holding a copy of the invite could read: a key other than the pinned one on such a connection proves
 	* no more than on the DHT, so it closes that connection and nothing else.
@@ -20347,6 +18833,8 @@ var GhostLink = class {
 	dialedIn = /* @__PURE__ */ new WeakSet();
 	/** Connections whose session started with no key pinned nor named by the invite. */
 	openedUnpinned = /* @__PURE__ */ new WeakSet();
+	/** The WebRTC offer under way was made or answered with no key pinned nor named by the invite (its channel opens later). */
+	rtcStartedUnpinned = false;
 	/**
 	* `migration`: the channel is a candidate that takes over from the session open now once it authenticated. With a
 	* `plan`, a live switch both sides agreed; without one, a replacement (`attachReplacement`): the contact dialled
@@ -20532,7 +19020,18 @@ var GhostLink = class {
 					if (this.channel !== channel) return;
 					this.unansweredPings = 0;
 					this.heardFromPeer();
-					if (typeof data !== "string" || data.length > 61440) return;
+					this.framesHeard++;
+					if (typeof data !== "string") {
+						const chunk = this.supportsBinaryFiles ? decodeFileData(data) : null;
+						if (!chunk) return;
+						this.activityAt = Date.now();
+						await this.options.events?.onFilesFrame?.({
+							t: "pf-data",
+							...chunk
+						});
+						return;
+					}
+					if (data.length > 61440) return;
 					let frame;
 					try {
 						frame = JSON.parse(data);
@@ -25251,6 +23750,12 @@ var byeSigned = (f) => utf8Encode(JSON.stringify([
 	f.e,
 	f.ts
 ]));
+var leftSigned = (commit) => utf8Encode(JSON.stringify([
+	"ghostly-group/1 left",
+	commit.g,
+	commit.e,
+	commitHash(commit)
+]));
 var editSigned = (f) => utf8Encode(JSON.stringify([
 	"ghostly-group/1 edit",
 	f.g,
@@ -25283,6 +23788,7 @@ function readFirstPlace(o, epoch) {
 /** One of my own frames, among mine: `e:n`. */
 var ownKey = (f) => `${f.e}:${f.n}`;
 /** What a frame weighs in a log, roughly: its boxes plus the fixed fields around them. */
+var frameKey$1 = (f) => `${f.s}:${f.e}:${f.n}`;
 /** What a kept frame counts for against `GROUP_LIMITS.relayBytes`. */
 var frameBytes = (f) => f.c.length + (f.m?.c.length ?? 0) + (f.r?.c.length ?? 0) + (f.sc?.c.length ?? 0) + (f.fl?.c.length ?? 0) + 400;
 /** Only the fields an edit frame has, as `clean` does for a message. */
@@ -25403,8 +23909,15 @@ var GroupSession = class {
 	pendingMeta;
 	/** While `handle` runs: the frames it took that a hub passes on (`handle`'s result). */
 	passOn = null;
+	/** The frames kept to hand on that the app holds with its messages, oldest first; undefined when the state holds them all. */
+	onRows;
 	/** Set while a save of what received messages changed is due (`persistSoon`). */
 	saveTimer;
+	/**
+	* The frames of members who left that each member was handed (`frameKey`), so an app that does not take them (from
+	* before revision 2026-10-13, and never marks them seen) is not handed them again at every sync. In memory only.
+	*/
+	leaversHanded = /* @__PURE__ */ new Map();
 	/** Syncs answered per member, a few a minute (`GROUP_LIMITS.syncAnswers`). In memory only. */
 	syncsAnswered = /* @__PURE__ */ new Map();
 	/** Catch-up answers still going out, a slice at a time (`handOut`). */
@@ -25417,10 +23930,21 @@ var GroupSession = class {
 	provisional;
 	/** When my chain last moved (a commit made or applied), by `hooks.clock`: frames are said again once it has settled. */
 	chainMovedAt;
-	constructor(state, hooks) {
+	/**
+	* `onRows`: the frames the app holds with the messages it stored (`GroupIncomingMessage.frame`), oldest first. Given
+	* (empty at first), the app is where frames are kept: the saved state carries none of them, and a message received
+	* no longer writes them all again. Absent: they are kept in the state, as before.
+	*/
+	constructor(state, hooks, onRows) {
 		this.hooks = hooks;
 		this.state = state;
 		this.identity = identityFromSeedB64(state.seedB64);
+		if (onRows) {
+			const held = new Set(onRows.map(frameKey$1));
+			if (state.relay?.length) state.relay = state.relay.filter((f) => !held.has(frameKey$1(f)));
+			this.onRows = state.status === "active" ? onRows.filter((f) => this.handsOn(f.s, f.e)) : [];
+			this.trimRelay();
+		}
 		this.answers = new CatchUpAnswers({
 			send: (to, frame) => hooks.send(to, frame),
 			...hooks.handled && { handled: (to) => hooks.handled(to) },
@@ -25731,11 +24255,43 @@ var GroupSession = class {
 			}];
 		});
 	}
-	remove(memberKey, now = Date.now()) {
+	/**
+	* A welcome for a member already in the roster that never got the first one (its chat closed while it was let in):
+	* nothing is committed. It carries the secrets of the epochs it was in, from its admission on, sealed to its key.
+	*/
+	rewelcome(memberKey) {
+		return this.serialize(async () => {
+			this.requireAdmin();
+			if (!rosterHas(this.roster, memberKey) || memberKey === this.myKey) throw new Error("Not a member");
+			const chain = this.state.chain;
+			let admitted = chain.length - 1;
+			while (admitted >= 0 && !(chain[admitted].k === "add" && chain[admitted].s === memberKey)) admitted--;
+			if (admitted < 0) throw new Error("Not a member");
+			const secrets = chain.slice(admitted).filter((c) => this.state.secrets[c.e] && rosterHas(c.m, memberKey)).map((c) => ({
+				e: c.e,
+				s: sealSecret(memberKey, this.secret(c.e), secretAad$1(this.id, c.e, memberKey))
+			}));
+			const pieces = chainPieces(chain);
+			const tail = pieces.pop();
+			return [...pieces.map((commits) => ({
+				t: "group-chain",
+				g: this.id,
+				commits
+			})), {
+				t: "group-welcome",
+				g: this.id,
+				name: this.name,
+				commits: tail,
+				secrets
+			}];
+		});
+	}
+	/** `left`: the member asked to leave (on the admin's chat), and the commit says so (`GroupCommitFrame.left`). */
+	remove(memberKey, now = Date.now(), { left = false } = {}) {
 		return this.serialize(async () => {
 			this.requireAdmin();
 			if (!rosterHas(this.roster, memberKey) || memberKey === this.myKey) throw new Error("Not a member");
-			await this.commit("remove", memberKey, now);
+			await this.commit("remove", memberKey, now, left);
 		});
 	}
 	transferAdmin(memberKey, now = Date.now()) {
@@ -25752,7 +24308,7 @@ var GroupSession = class {
 			await this.commit("rotate", void 0, now);
 		});
 	}
-	async commit(kind, subject, now) {
+	async commit(kind, subject, now, left = false) {
 		if (this.hooks.adminWork?.() === false) throw new Error(GROUP_ADMIN_OFF_ERROR);
 		if (this.hooks.adminTurn && !await this.hooks.adminTurn()) throw engineError("groupTurnUnconfirmed");
 		if (this.state.chain.length >= 1024) throw new Error("This group has reached its membership history limit. Create a new group.");
@@ -25776,6 +24332,8 @@ var GroupSession = class {
 			...draft,
 			c: confirmationTag(epochKeys(secret, this.id, epoch).confirm, commitUntaggedHash(draft))
 		}, this.identity.seed);
+		const mark = left && kind === "remove" ? toBase64Url(sign(leftSigned(commit), this.identity.seed)) : void 0;
+		if (mark) (this.state.leftMarks ??= {})[epoch] = mark;
 		this.state.chain.push(commit);
 		this.chainMovedAt = this.clock();
 		this.state.secrets[epoch] = toBase64Url(secret);
@@ -25791,15 +24349,20 @@ var GroupSession = class {
 				t: "group-commit",
 				g: this.id,
 				commit,
-				...member ? { secret: sealSecret(key, secret, secretAad$1(this.id, epoch, key)) } : {}
+				...member ? { secret: sealSecret(key, secret, secretAad$1(this.id, epoch, key)) } : {},
+				...mark ? { left: mark } : {}
 			});
 		}
 		this.hooks.changed();
 		return { secret };
 	}
-	/** Someone out of the roster is not handed on any more, whatever they sent while in it (WISP 902 § Catch-up). */
+	/**
+	* Someone removed is not handed on any more, whatever they sent while in the roster; one who left still is, for the
+	* epochs before its leave (WISP 902 § Catch-up).
+	*/
 	pruneRelay() {
-		if (this.state.relay?.length) this.state.relay = this.state.relay.filter((f) => rosterHas(this.roster, f.s));
+		if (this.state.relay?.length) this.state.relay = this.state.relay.filter((f) => this.handsOn(f.s, f.e));
+		if (this.onRows?.length) this.onRows = this.onRows.filter((f) => this.handsOn(f.s, f.e));
 		if (this.state.relayEdits?.length) this.state.relayEdits = this.state.relayEdits.filter((f) => rosterHas(this.roster, f.s));
 	}
 	/** Another member's edit, kept to hand on: the latest per message; the oldest go once the log is full. False: one as new was kept. */
@@ -25815,10 +24378,21 @@ var GroupSession = class {
 	}
 	/** A frame of another member, kept to hand on; the oldest go once the log is full. */
 	keep(frame) {
-		const log = this.state.relay ??= [];
-		log.push(frame);
-		let bytes = log.reduce((sum, f) => sum + frameBytes(f), 0);
-		while (log.length > GROUP_LIMITS.relay || bytes > GROUP_LIMITS.relayBytes) bytes -= frameBytes(log.shift());
+		if (this.onRows) {
+			const key = frameKey$1(frame);
+			if (this.onRows.some((f) => frameKey$1(f) === key)) return;
+			this.onRows.push(frame);
+		} else (this.state.relay ??= []).push(frame);
+		this.trimRelay();
+	}
+	/** The frames kept to hand on, oldest first: the state's, then the ones the app holds with its messages. */
+	kept() {
+		return this.onRows ? [...this.state.relay ?? [], ...this.onRows] : this.state.relay ?? [];
+	}
+	trimRelay() {
+		const old = this.state.relay ?? [], rows = this.onRows ?? [];
+		let bytes = old.reduce((sum, f) => sum + frameBytes(f), 0) + rows.reduce((sum, f) => sum + frameBytes(f), 0);
+		while (old.length + rows.length > GROUP_LIMITS.relay || bytes > GROUP_LIMITS.relayBytes) bytes -= frameBytes((old.length ? old : rows).shift());
 	}
 	pruneSecrets() {
 		const epochs = Object.keys(this.state.secrets).map(Number).sort((a, b) => a - b);
@@ -25854,6 +24428,7 @@ var GroupSession = class {
 		this.state.secrets = {};
 		this.state.sent = [];
 		this.state.relay = [];
+		if (this.onRows) this.onRows = [];
 		this.state.relayEdits = [];
 		this.state.alone = [];
 		this.waiting = [];
@@ -26191,7 +24766,7 @@ var GroupSession = class {
 					case "group-bye":
 						await this.receiveBye(from, raw);
 						break;
-					case "group-leave": if (this.isAdmin && this.hooks.adminWork?.() !== false && rosterHas(this.roster, from) && from !== this.myKey) await this.commitUnlessTurnUnconfirmed("remove", from);
+					case "group-leave": if (this.isAdmin && this.hooks.adminWork?.() !== false && rosterHas(this.roster, from) && from !== this.myKey) await this.commitUnlessTurnUnconfirmed("remove", from, true);
 				}
 				return this.state.status === "active" ? this.passOn : this.state.status === "removed" ? this.passOn.filter((f) => f.t === "group-commit") : [];
 			} finally {
@@ -26306,7 +24881,7 @@ var GroupSession = class {
 			return;
 		}
 		if (bye.e < this.admittedAt(bye.k)) return;
-		if (this.isAdmin && this.hooks.adminWork?.() !== false && await this.commitUnlessTurnUnconfirmed("remove", bye.k)) return;
+		if (this.isAdmin && this.hooks.adminWork?.() !== false && await this.commitUnlessTurnUnconfirmed("remove", bye.k, true)) return;
 		if (from !== bye.k && this.byesPassed.get(bye.k)?.sig === bye.sig) return;
 		this.byesPassed.set(bye.k, bye);
 		this.took(bye);
@@ -26331,9 +24906,9 @@ var GroupSession = class {
 	* An automatic commit (a member's leave): made, or not made when no fresh turn read says this device is the active
 	* one (`adminTurn`). Then false, and the caller goes on as a member would. Any other refusal is thrown as before.
 	*/
-	async commitUnlessTurnUnconfirmed(kind, subject) {
+	async commitUnlessTurnUnconfirmed(kind, subject, left = false) {
 		try {
-			await this.commit(kind, subject, Date.now());
+			await this.commit(kind, subject, Date.now(), left);
 			return true;
 		} catch (error) {
 			if (error instanceof EngineError && error.engineCode === "groupTurnUnconfirmed") return false;
@@ -26342,7 +24917,8 @@ var GroupSession = class {
 	}
 	/**
 	* A message, from its author's edge or handed on by another member. Handed on, it is taken only while both are in
-	* the roster (someone removed is neither heard from nor handed on, #300), and its boxes only with the author's `xs`.
+	* the roster (someone removed is neither heard from nor handed on, #300), or from a member in it when its author left
+	* after it (`handsOn`), and its boxes only with the author's `xs`.
 	*/
 	async receiveMessage(from, raw) {
 		if (!isMessageFrame$1(raw)) return;
@@ -26351,7 +24927,7 @@ var GroupSession = class {
 			return;
 		}
 		const relayed = raw.s !== from;
-		if (relayed && (!rosterHas(this.roster, from) || !rosterHas(this.roster, raw.s))) return;
+		if (relayed && (!rosterHas(this.roster, from) || !this.handsOn(raw.s, raw.e))) return;
 		if (!verify(fromBase64Url(raw.sig), messageSigned$1(raw), publicKeyFromZ32(raw.s))) return;
 		if (raw.e > this.epoch) {
 			this.park(from, raw);
@@ -26389,10 +24965,11 @@ var GroupSession = class {
 			n: first.n
 		};
 		if (firstFrame && rosterHas(this.state.chain[first.e]?.m ?? [], this.myKey) && this.isDuplicate(firstFrame)) {
+			await this.hooks.kept?.(groupMessageId(raw.s, first.e, first.n), clean(raw));
 			this.markSeen(raw);
 			this.keep(clean(raw));
 			this.persistSoon();
-			if (rosterHas(this.roster, raw.s)) this.took(clean(raw));
+			if (this.handsOn(raw.s, raw.e)) this.took(clean(raw));
 			return;
 		}
 		const id = first && !this.provisional.has(own) ? groupMessageId(raw.s, first.e, first.n) : own;
@@ -26429,7 +25006,7 @@ var GroupSession = class {
 		if (firstFrame && rosterHas(this.state.chain[firstFrame.e]?.m ?? [], this.myKey)) this.markSeen(firstFrame);
 		this.keep(clean(raw));
 		this.persistSoon();
-		if (rosterHas(this.roster, raw.s)) this.took(clean(raw));
+		if (this.handsOn(raw.s, raw.e)) this.took(clean(raw));
 	}
 	/**
 	* An edit of a member's own message, from its author's edge or handed on by another member: believed only while its
@@ -26463,7 +25040,7 @@ var GroupSession = class {
 		const k = validMentions(body.m, body.text, rosterAdmin(commit.m) === raw.s && this.admin === raw.s);
 		const sc = body.sc === void 0 ? void 0 : readStatusCard(body.sc);
 		if (!validEditNumber(raw.v) && !sc) return;
-		const copy = (this.state.relay ?? []).find((f) => f.s === raw.s && f.e === raw.e && f.n === raw.n);
+		const copy = this.kept().find((f) => f.s === raw.s && f.e === raw.e && f.n === raw.n);
 		const first = copy && readFirstPlace(copy.o, copy.e);
 		await this.hooks.edit?.({
 			id: first ? groupMessageId(raw.s, first.e, first.n) : groupMessageId(raw.s, raw.e, raw.n),
@@ -26595,6 +25172,7 @@ var GroupSession = class {
 			const result = verifyCommit(raw, this.state.chain[e - 1] ?? null, this.id);
 			if ("error" in result || result.commit.by !== known.by) return;
 			if (commitHash(result.commit) !== commitHash(known)) await this.fork(`Member ${from.slice(0, 8)} holds a different membership history for epoch ${e}`);
+			else if (this.takeLeftMark(known, frame.left)) await this.persist();
 			return;
 		}
 		if (e > this.epoch + 1) {
@@ -26608,11 +25186,13 @@ var GroupSession = class {
 			if (result.error.startsWith("Commit does not follow") && verifyCommitSignature(raw)?.by === this.admin) await this.fork(`Member ${from.slice(0, 8)} holds a different membership history for epoch ${e}`);
 			return;
 		}
+		const mark = this.takeLeftMark(result.commit, frame.left) ? frame.left : void 0;
 		await this.apply(result.commit, frame.secret);
 		this.took({
 			t: "group-commit",
 			g: this.id,
-			commit: result.commit
+			commit: result.commit,
+			...mark ? { left: mark } : {}
 		});
 		if (this.state.status === "active" && !this.state.secrets[this.epoch]) this.ask(from);
 		const next = this.pendingCommits.get(this.epoch + 1);
@@ -26621,6 +25201,27 @@ var GroupSession = class {
 			await this.receiveCommit(from, next);
 		}
 	}
+	/**
+	* Whether a frame of `author` under `epoch` is taken from another member, kept and handed on: while its author is in
+	* the roster, or when it left (its removal marked `left`, and it is not back in) and the frame is from before that.
+	*/
+	handsOn(author, epoch) {
+		if (rosterHas(this.roster, author)) return true;
+		const chain = this.state.chain;
+		for (let e = chain.length - 1; e > 0; e--) if (chain[e].k === "remove" && chain[e].s === author) return !!this.state.leftMarks?.[e] && epoch < e;
+		return false;
+	}
+	/** Keeps the admin's mark on a commit that took out a member who left (`GroupCommitFrame.left`) when it holds; true when new. */
+	takeLeftMark(commit, mark) {
+		if (commit.k !== "remove" || typeof mark !== "string" || mark.length !== 86 || !B64$1.test(mark) || this.state.leftMarks?.[commit.e]) return false;
+		try {
+			if (!verify(fromBase64Url(mark), leftSigned(commit), publicKeyFromZ32(commit.by))) return false;
+		} catch {
+			return false;
+		}
+		(this.state.leftMarks ??= {})[commit.e] = mark;
+		return true;
+	}
 	async apply(commit, sealed) {
 		this.state.chain.push(commit);
 		this.chainMovedAt = this.clock();
@@ -26683,11 +25284,13 @@ var GroupSession = class {
 		const answer = [];
 		for (let e = frame.e + 1; e <= this.epoch; e++) {
 			const commit = this.state.chain[e], secret = this.secret(e);
+			const left = this.state.leftMarks?.[e];
 			answer.push({
 				t: "group-commit",
 				g: this.id,
 				commit,
-				...secret && rosterHas(commit.m, from) ? { secret: sealSecret(from, secret, secretAad$1(this.id, e, from)) } : {}
+				...secret && rosterHas(commit.m, from) ? { secret: sealSecret(from, secret, secretAad$1(this.id, e, from)) } : {},
+				...left ? { left } : {}
 			});
 		}
 		const theirs = new Set(Array.isArray(frame.secrets) ? frame.secrets.filter((n) => Number.isSafeInteger(n)) : []);
@@ -26702,7 +25305,15 @@ var GroupSession = class {
 		});
 		const lacks = missingIn(frame, from);
 		const asked = new Set(Array.isArray(frame.ask) ? frame.ask.filter((k) => typeof k === "string" && k !== from && k !== this.myKey && rosterHas(this.roster, k)) : []);
-		const kept = asked.size ? (this.state.relay ?? []).filter((f) => asked.has(f.s) && this.state.chain[f.e] && rosterHas(this.state.chain[f.e].m, from) && lacks(f)) : [];
+		const handed = this.leaversHanded.get(from) ?? /* @__PURE__ */ new Set();
+		const kept = !asked.size && !this.state.leftMarks ? [] : this.kept().filter((f) => {
+			if (!this.state.chain[f.e] || !rosterHas(this.state.chain[f.e].m, from) || !lacks(f)) return false;
+			if (asked.has(f.s)) return true;
+			if (rosterHas(this.roster, f.s) || handed.has(frameKey$1(f)) || !this.handsOn(f.s, f.e)) return false;
+			handed.add(frameKey$1(f));
+			return true;
+		});
+		if (handed.size) this.leaversHanded.set(from, handed);
 		answer.push(...asWritten(this.ownLacked(from, frame), kept));
 		for (const author of asked) {
 			const edits = (this.state.relayEdits ?? []).filter((f) => f.s === author && this.state.chain[f.e] && rosterHas(this.state.chain[f.e].m, from));
@@ -27009,9 +25620,10 @@ function knockIdentity(link) {
 function knockRecords(link, knocks) {
 	const nonce = randomBytes(NONCE_LENGTH);
 	const body = utf8Encode(JSON.stringify(knocks.slice(-6).map((k) => [k.key, k.ts])));
+	const box = xchacha20poly1305(knockMaterial(link, "knock key"), nonce, utf8Encode(link.g)).encrypt(body);
 	return [{
 		label: KNOCK_LABEL,
-		value: toBase64Url(concatBytes$1(nonce, xchacha20poly1305(knockMaterial(link, "knock key"), nonce, utf8Encode(link.g)).encrypt(body)))
+		value: toBase64Url(concatBytes$1(nonce, box))
 	}];
 }
 /** Knocks that open with the link's key and are well formed; anything else is nobody. */
@@ -27098,6 +25710,8 @@ var COMMUNITY_LIMITS = {
 	/** Commits in one welcome or chain piece. */
 	chainPiece: 100,
 	pendingLeaves: 64,
+	/** Leaves whose mark (`group-left`) is kept, and the epochs one names. */
+	leftMarks: 64,
 	/**
 	* Syncs of one member answered in `syncWindowMs`: each answer may carry the chain's tail, secrets and the whole
 	* store. A member catching up asks every five seconds at most, and every member syncs every thirty; one asking more
@@ -27214,6 +25828,14 @@ var leaveStatement = (g, s) => utf8Encode(JSON.stringify([
 	g,
 	s
 ]));
+/** What the member who committed a leave (`h`) had heard of the leaver then: `e:h16` → its highest number there. */
+var leftStatement = (g, h, hi) => utf8Encode(JSON.stringify([
+	"ghostly-group/2 left",
+	g,
+	h,
+	Object.entries(hi).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0)
+]));
+var LEFT_EPOCH = /^\d{1,15}:[a-f0-9]{16}$/;
 /** The secret of an epoch that adds, re-roles or re-links: from the previous one and the commit. */
 function derivedSecret(previous, untaggedHash) {
 	return hkdf(sha256, previous, utf8Encode(untaggedHash), utf8Encode("ghostly-group/2 derived"), 32);
@@ -27677,6 +26299,60 @@ var CommunitySession = class {
 		return -1;
 	}
 	/**
+	* Whether a frame of someone the chain took out is still heard. A member removed is heard no more, even for an epoch
+	* it was in. What one who left wrote while in the group is taken and handed on, its goodbye included, up to what the
+	* member who committed the leave had heard of it then (its `group-left` mark), never past it: the leaver still holds
+	* those epochs' secrets, and anything it signs later is not heard (WISP 903 § Leaving and removal). No mark here
+	* (one not come yet, or a committer's app before it) and nothing of it is heard.
+	*/
+	heardAfterOut(f) {
+		const i = this.outIndex(f.s);
+		if (i < 0) return true;
+		const commit = this.state.chain[i];
+		if (commit.k !== "leave") return false;
+		const high = this.state.left?.[communityCommitHash(commit)]?.hi[seenKey(f.e, f.h)];
+		return high !== void 0 && f.n <= high;
+	}
+	/** The mark of a leave on my branch, as a frame to hand on (see `heardAfterOut`). */
+	leftFrame(key) {
+		const i = this.outIndex(key);
+		if (i < 0 || this.state.chain[i].k !== "leave") return void 0;
+		const h = communityCommitHash(this.state.chain[i]), mark = this.state.left?.[h];
+		return mark && {
+			t: "group-left",
+			v: 2,
+			g: this.id,
+			h,
+			hi: mark.hi,
+			sig: mark.sig
+		};
+	}
+	keepLeft(h, mark) {
+		const left = { ...this.state.left ?? {} };
+		delete left[h];
+		left[h] = mark;
+		const keys = Object.keys(left);
+		for (const old of keys.slice(0, Math.max(0, keys.length - COMMUNITY_LIMITS.leftMarks))) delete left[old];
+		this.state.left = left;
+	}
+	/** A leave's mark, from the member who committed it: kept when it is that member's, for a leave I hold. */
+	receiveLeft(frame) {
+		const { h, hi, sig } = frame;
+		if (typeof h !== "string" || !HASH.test(h) || typeof sig !== "string" || !SIG.test(sig) || !isObject$2(hi)) return false;
+		const entries = Object.entries(hi);
+		if (entries.length > COMMUNITY_LIMITS.leftMarks || entries.some(([k, n]) => !LEFT_EPOCH.test(k) || !Number.isSafeInteger(n) || n < 0)) return false;
+		const commit = this.known.get(h);
+		if (!commit || commit.k !== "leave" || this.state.left?.[h]?.sig === sig) return false;
+		const marks = hi;
+		if (!verify(fromBase64Url(sig), leftStatement(this.id, h, marks), publicKeyFromZ32(commit.by))) return false;
+		this.keepLeft(h, {
+			hi: marks,
+			sig
+		});
+		this.persistSoon();
+		return true;
+	}
+	/**
 	* What someone the chain took out is told when it comes back (WISP 903 § Leaving and removal): the commits from where
 	* it says it is (`sync`: its tip, or its locator) up to the one that took it out, and nothing after. Later commits
 	* are not its business (a `link` commit names the new entry key); no secret, no stored frame, no seed goes with them.
@@ -28276,10 +26952,11 @@ var CommunitySession = class {
 					continue;
 				}
 				try {
-					await this.commit("leave", {
+					const { hash } = await this.commit("leave", {
 						s: request.s,
 						ls: request.ls
 					}, now);
+					this.markLeft(hash, request.s);
 					done++;
 				} catch {}
 				this.state.pendingLeaves = this.state.pendingLeaves.filter((r) => r !== request);
@@ -28288,6 +26965,25 @@ var CommunitySession = class {
 			return done;
 		});
 	}
+	/** Signs and says how far I had heard a member whose leave I just committed (`group-left`). */
+	markLeft(h, leaver) {
+		const hi = {};
+		const heard = Object.entries(this.state.seen[leaver] ?? {}).filter(([k]) => LEFT_EPOCH.test(k)).slice(-COMMUNITY_LIMITS.leftMarks);
+		for (const [k, entry] of heard) hi[k] = entry.high;
+		const sig = toBase64Url(sign(leftStatement(this.id, h, hi), this.identity.seed));
+		this.keepLeft(h, {
+			hi,
+			sig
+		});
+		this.hooks.broadcast({
+			t: "group-left",
+			v: 2,
+			g: this.id,
+			h,
+			hi,
+			sig
+		});
+	}
 	out(status, reason) {
 		this.state.status = status;
 		this.state.statusReason = reason;
@@ -28611,6 +27307,7 @@ var CommunitySession = class {
 					return false;
 				case "group-meta": return this.receiveMeta(from, raw);
 				case "group-leave": return this.receiveLeave(frame);
+				case "group-left": return this.receiveLeft(frame);
 				case "group-entry": {
 					if (frame.to !== this.myKey || !isSealed(frame.s) || frame.x !== this.currentEntryKey()) return false;
 					const seed = openSecret(this.identity.seed, this.myKey, frame.s, entryAad(this.id, this.myKey));
@@ -28639,7 +27336,7 @@ var CommunitySession = class {
 			return false;
 		}
 		if (!verify(fromBase64Url(raw.sig), messageSigned(raw), publicKeyFromZ32(raw.s))) return false;
-		if (this.wasRemoved(raw.s)) return false;
+		if (!this.heardAfterOut(raw)) return false;
 		const found = this.commitByShort(raw.e, raw.h);
 		if (!found) {
 			this.park(from, raw);
@@ -28879,16 +27576,22 @@ var CommunitySession = class {
 		const have = frame.have && typeof frame.have === "object" ? frame.have : {};
 		const handed = /* @__PURE__ */ new Set();
 		const unheard = new Set(this.state.unheard ?? []);
+		const marked = /* @__PURE__ */ new Set();
 		for (const stored of this.state.store) {
 			if (stored.s === from) continue;
 			const high = have[stored.s]?.[seenKey(stored.e, stored.h)];
 			if (Number.isSafeInteger(high) && high >= stored.n) continue;
-			if (this.wasRemoved(stored.s)) continue;
+			if (!this.heardAfterOut(stored)) continue;
 			const found = this.commitByShort(stored.e, stored.h);
 			if (!found) continue;
 			const reads = rosterHas(this.rosterAt(found.hash) ?? [], from), mine = stored.s === this.myKey && unheard.has(frameKey(stored));
 			if (!reads && !(mine && rosterHas(this.roster, from))) continue;
 			if (!this.mainIndex.has(found.hash)) this.handSide(from, found.hash, handed, answer);
+			if (!rosterHas(this.roster, stored.s) && !marked.has(stored.s)) {
+				marked.add(stored.s);
+				const left = this.leftFrame(stored.s);
+				if (left) answer.push(left);
+			}
 			answer.push(stored);
 			if (mine && reads) unheard.delete(frameKey(stored));
 		}
@@ -29550,8 +28253,63 @@ function appDigest(manifestBytes) {
 	return toBase64Url(sha256(manifestBytes));
 }
 var u32 = (b, at) => (b[at] << 24 >>> 0) + (b[at + 1] << 16) + (b[at + 2] << 8) + b[at + 3];
-/** Reads and checks a bundle (the order of the checks is part of the format: see above). */
-function readAppBundle(bytes) {
+/**
+* Lets the thread go for one turn: what waits (input, drawing, timers, port messages, IndexedDB answers) runs, then the
+* caller goes on. A message to itself, queued behind the page's other tasks. Never `scheduler.yield()`: in Chromium its
+* continuation outranks every normal task, so a paced read of 4096 revocations held the page's timers, its apps' broker
+* ports and IndexedDB for the whole 1.8 s. Never `setTimeout(0)` but as the last resort: from the fifth nested timer on
+* the browser waits at least 4 ms (HTML's clamp), which made that read take 60% longer than the work, and a hidden tab
+* runs timers once a second.
+*/
+function yieldThread() {
+	if (typeof MessageChannel === "function") return new Promise((resolve) => {
+		const channel = new MessageChannel();
+		channel.port1.onmessage = () => {
+			channel.port1.close();
+			resolve();
+		};
+		channel.port2.postMessage(null);
+	});
+	return new Promise((resolve) => setTimeout(resolve, 0));
+}
+/**
+* A pause for a loop of short steps: `await pause()` after each step lets the thread go once `sliceMs` of work has
+* run since the last time, and answers at once otherwise.
+*/
+function pacer(sliceMs) {
+	let since = performance.now();
+	return () => {
+		if (performance.now() - since < sliceMs) return void 0;
+		return yieldThread().then(() => {
+			since = performance.now();
+		});
+	};
+}
+/** `sha256Paced` hashes up to this much at once: under a millisecond of the thread. */
+var HASH_AT_ONCE = 65536;
+/** Without `crypto.subtle`, `sha256Paced` hashes this much (a few ms), then lets the thread go. */
+var HASH_SLICE = 262144;
+/** `readAppBundleAsync` hashes files for this long at most before it lets the thread go, however small each file. */
+var HASH_SLICE_MS = 5;
+/**
+* SHA-256 of bytes that may be a whole bundle, for a client whose engine shares its page's thread: `sha256` in
+* JavaScript takes about 12 ms per MiB on a desktop CPU, so 16 MiB in one run is a page that draws nothing and takes no
+* input for 200 ms. With `crypto.subtle` the bytes are hashed off the thread; without it (a page not served over
+* HTTPS), a slice at a time with a pause between slices. The bytes must not change until it answers.
+*/
+async function sha256Paced(bytes) {
+	if (bytes.length <= HASH_AT_ONCE) return sha256(bytes);
+	const subtle = globalThis.crypto?.subtle;
+	const away = subtle ? await subtle.digest("SHA-256", bytes).catch(() => null) : null;
+	if (away) return new Uint8Array(away);
+	const hash = sha256.create();
+	for (let at = 0; at < bytes.length; at += HASH_SLICE) {
+		if (at) await yieldThread();
+		hash.update(bytes.subarray(at, at + HASH_SLICE));
+	}
+	return hash.digest();
+}
+function readAppBundleHead(bytes) {
 	if (bytes.length > APP_BUNDLE_LIMITS.bundleBytes) return {
 		ok: false,
 		reason: "too-large"
@@ -29610,17 +28368,18 @@ function readAppBundle(bytes) {
 	};
 	const signed = verifyAppSignature(APP_PREFIXES.app, manifestBytes, statement.signature, manifest.publisher);
 	if (!signed.ok) return signed;
-	const files = /* @__PURE__ */ new Map();
-	for (const f of manifest.files) {
-		const content = bytes.subarray(at, at + f.size);
-		at += f.size;
-		if (toBase64Url(sha256(content)) !== f.sha256) return {
-			ok: false,
-			reason: "file-hash",
-			detail: f.path
-		};
-		files.set(f.path, content);
-	}
+	return {
+		ok: true,
+		head: {
+			manifest,
+			manifestBytes,
+			signature: statement.signature,
+			filesAt: at
+		}
+	};
+}
+/** The last check, once every file's hash held: the icon. */
+function closeAppBundle({ manifest, manifestBytes, signature }, files) {
 	const icon = files.get(APP_ICON_PATH);
 	if (icon) {
 		const size = imageSize(icon);
@@ -29641,11 +28400,54 @@ function readAppBundle(bytes) {
 			manifest,
 			manifestBytes,
 			digest: appDigest(manifestBytes),
-			signature: statement.signature,
+			signature,
 			files
 		}
 	};
 }
+/** Reads and checks a bundle (the order of the checks is part of the format: see above). */
+function readAppBundle(bytes) {
+	const read = readAppBundleHead(bytes);
+	if (!read.ok) return read;
+	const files = /* @__PURE__ */ new Map();
+	let at = read.head.filesAt;
+	for (const f of read.head.manifest.files) {
+		const content = bytes.subarray(at, at + f.size);
+		at += f.size;
+		if (toBase64Url(sha256(content)) !== f.sha256) return {
+			ok: false,
+			reason: "file-hash",
+			detail: f.path
+		};
+		files.set(f.path, content);
+	}
+	return closeAppBundle(read.head, files);
+}
+/**
+* `readAppBundle` for a client whose engine shares its page's thread: the same checks in the same order, with the same
+* refusals, and each file hashed by `sha256Paced`, one after the other, with the thread let go between files every
+* `HASH_SLICE_MS` (64 files of 64 KiB, each hashed at once, held it for 50 ms). The bytes must not change until it
+* answers.
+*/
+async function readAppBundleAsync(bytes) {
+	const read = readAppBundleHead(bytes);
+	if (!read.ok) return read;
+	const files = /* @__PURE__ */ new Map();
+	const pause = pacer(HASH_SLICE_MS);
+	let at = read.head.filesAt;
+	for (const f of read.head.manifest.files) {
+		const content = bytes.subarray(at, at + f.size);
+		at += f.size;
+		if (toBase64Url(await sha256Paced(content)) !== f.sha256) return {
+			ok: false,
+			reason: "file-hash",
+			detail: f.path
+		};
+		files.set(f.path, content);
+		await pause();
+	}
+	return closeAppBundle(read.head, files);
+}
 /** Puts a bundle's parts together, checking nothing: for builders, and for tests that need a broken bundle. */
 function assembleAppBundle(manifestBytes, statementBytes, files) {
 	const total = MAGIC.length + 8 + manifestBytes.length + statementBytes.length + files.reduce((s, f) => s + f.length, 0);
@@ -30007,6 +28809,6 @@ function appStoreDecision(held, read) {
 	return read.digest === held.digest ? "same" : "equivocation";
 }
 //#endregion
-export { parseCommunityEdit as $, receivedTimestamp as $a, identityFromSeed as $c, DHT_FILE_TOO_LARGE as $i, readGroupHave as $n, HANDOFF_PAKE as $o, vapidKeysMatch as $r, verifyEnrollProof as $s, signDidDhtPacket as $t, encodeCommunityLink as A, reactionEmoji as Aa, signTurnPacket as Ac, DHT_TEXT_CAPABILITY as Ai, resolveLightningDestination as An, webLocalFetch as Ao, FILE_LIMITS as Ar, readHandoffTurnFrame as As, DidError as At, GroupWakeLimiter as B, PR_CHECKS as Ba, normalizeRelayUrl as Bc, identityRevocationValue as Bi, INVITE_TAKEN as Bn, extractParamsFromSdp as Bo, mayPin as Br, ENROLL_DONE as Bs, didWebHost as Bt, openGroupTyping as C, readForwarded as Ca, classifyTurnRead as Cc, normalizeDomain as Ci, normalizePubkyKey as Cn, DHT_POLL_INTERVALS as Co, pickHubs as Cr, newHandoffId as Cs, parseAtprotoDidDocument as Ct, GROUP_READ_NOTE_COMMUNITY as D, ReactionWindow as Da, firstDeviceSetSecret as Dc, txtValue as Di, homeserverWebEndpoint as Dn, GhostlyHttpError as Do, readLobby as Dr, readHandoffHave as Ds, DID_DOCUMENT_MAX_BYTES as Dt, CommunitySession as E, REACTION_LIMITS as Ea, TURN_MAX as Ec, recordsName as Ei, pubkyProofPath as En, presenceSeenAt as Eo, readBeaconHead as Er, readHandoffDone as Es, verifyAtprotoRecordProof as Et, knockIdentity as F, pairedReplyAuthor as Fa, turnStatedVerifier as Fc, IDENTITY_REVOCATION_LABEL as Fi, findEndpoint as Fn, RTC_CONFIG as Fo, TypingSender as Fr, readSetUpdate as Fs, didSignedMessages as Ft, GROUP_REACTED_FRAME as G, cardLine as Ga, withRequestOptions as Gc, lastSharedWithMe as Gi, GROUP_FILE_LIMITS as Gn, LEGACY_SERVICES as Go, WAKE_CALL_INTERVAL_MS as Gr, enrollCancelReason as Gs, signingKeys as Gt, groupWakes as H, RUN_RESULTS as Ha, traceLink as Hc, newIdentityBinding as Hi, pairedMessageFrame as Hn, signalHasVideo as Ho, pinIsNewer as Hr, ENROLL_HELLO as Hs, parseDid as Ht, knockRecords as I, readReply as Ia, turnVerifierMark as Ic, IdentityCheckUnavailable as Ii, isFederationId as In, answersOffer as Io, sanitizeTypingStatus as Ir, setAckFrame as Is, didWebDocumentUrl as It, frameBytes as J, sameButtonText as Ja, createRelayPayload as Jc, validExternalKey as Ji, GROUP_WANT_NO_FRAME as Jn, HANDOFF_CANCEL as Jo, newWakeToken as Jr, enrollGrantFrame as Js, didDhtDocument as Jt, GROUP_READ_NOTE as K, cardUrl as Ka, PacketTooLargeError as Kc, PeerProofs as Ki, GROUP_HAVE_FRAME as Kn, serviceIdFromName as Ko, WakeLimiter as Kr, enrollDigits as Ks, staticDidDocument as Kt, mergeKnocks as L, replySnippet as La, DEFAULT_RELAYS as Lc, IdentityExchange as Li, parseCashuRequestPayload as Ln, buildSdpFromSignal as Lo, typingActivity as Lr, setUpdateFrame as Ls, didWebFile as Lt, decodeGroupEntryLink as M, readReaction as Ma, turnInstance as Mc, dialDescriptors as Mi, ENDPOINT as Mn, decodeControl as Mo, transferStalled as Mr, sealHandoffPiece as Ms, checkDidSignature as Mt, encodeGroupEntryLink as N, validReactionNumber as Na, turnKeys as Nc, IDENTITY_MAX_EVIDENCE as Ni, cashuRequestPayload as Nn, encodeControl as No, TYPING_KINDS as Nr, SET_ACK as Ns, didGhostlyServiceEntry as Nt, communityHasFrame as O, nextReactionNumber as Oa, nextTurnPosition as Oc, wellKnownUrl as Oi, pubkyHomeserverOf as On, formatLocalTarget as Oo, shouldBeHub as Or, readHandoffHello as Os, DID_FILE_MAX_BYTES as Ot, entryParams as P, wireReaction as Pa, turnName as Pc, IDENTITY_MAX_VALIDITY as Pi, fedimintRequestPayload as Pn, CALL_SIGNAL_MAX_AGE_MS as Po, TYPING_REFRESH_MS as Pr, SET_UPDATE as Ps, didJwsAlg as Pt, carryMentions as Q, heardTime as Qa, createIdentity as Qc, irohRelayUrl as Qi, readGroupFileMeta as Qn, HANDOFF_OFFER as Qo, checkPushEndpoint as Qr, readEnrollHello as Qs, resolveDidDht as Qt, readKnocks as R, BUTTON_ID as Ra, RelayTransport as Rc, boundVerifiedIdentity as Ri, parseFedimintRequestPayload as Rn, callRtcConfig as Ro, GROUP_PIN_FRAME as Rr, signTombstone as Rs, didWebFileNames as Rt, groupTypingEpoch as S, forwardedAgain as Sa, TURN_SETTLE_MS as Sc, nip05RootKey as Si, newPubkyProofFolder as Sn, DirectPathWatch as So, newerHead as Sr, handoffVersions as Ss, normalizeAtprotoHandle as St, COMMUNITY_LIMITS as T, GROUP_REACTION_FRAME as Ta, TURN_LAST_SEQUENCE as Tc, recordsFromWellKnown as Ti, pubkyProofFile as Tn, RELAY_POLL_INTERVALS as To, readBeacon as Tr, readHandoffCancel as Ts, AtprotoProofError as Tt, parseGroupWakeFrame as U, STATUS_CARD_LIMITS as Ua, budgetRetryMs as Uc, receivedIdentityStatus as Ui, engineError as Un, emptyLinkRecords as Uo, pinNumberHolds as Ur, ENROLL_PROOF as Us, parseDidDocument as Ut, groupWakeFrame as V, PR_STATES as Va, setLinkTraceSink as Vc, identityStatement as Vi, LIVENESS_PING_MS as Vn, parseCallSignal as Vo, nextPinNumber as Vr, ENROLL_GRANT as Vs, normalizeDid as Vt, GROUP_LIMITS as W, buttonLabelClash as Wa, isDiscoveryBudgetError as Wc, revokesIdentity as Wi, engineText as Wn, HTTP_SERVICE_PROTO as Wo, readPin as Wr, enrollCancelFrame as Ws, parseDidSignaturePaste as Wt, GROUP_EDIT_FRAME as X, arrivalKey as Xa, openRelayPayload as Xc, automaticTransport as Xi, groupFileFallback as Xn, HANDOFF_HAVE as Xo, relayRequest as Xr, enrollProofFrame as Xs, encodeDidDhtDeactivated as Xt, COMMUNITY_EDIT_FRAME as Y, statusCardText as Ya, newerPacket as Yc, TRANSPORTS as Yi, fetchesByItself as Yn, HANDOFF_DONE as Yo, parseWakeFrame as Yr, enrollHelloFrame as Ys, didDhtFromPublicKey as Yt, GROUP_EDIT_TEXT_BYTES as Z, claimedTime as Za, parseRelayPayload as Zc, irohDescriptor as Zi, isGroupMessageId as Zn, HANDOFF_HELLO as Zo, wakeRequest as Zr, readEnrollGrant as Zs, encodeDidDhtPacket as Zt, checkAppManifest as _, EDIT_BUFFER_MS as _a, newDeviceSetSecret as _c, dnsProofName as _i, sparkInvoiceDetails as _n, MEMBER_KEY as _o, freshHubs as _r, handoffOfferFrame as _s, atprotoDidMethod as _t, planAppUpdate as a, readImageMeta as aa, decodeInviteCode as ac, STATUS_CARD_CAPABILITY as ai, bytesEqual as al, SEPOLIA_TEST_USDT_FAUCET as an, checkAppRevokeStatement as ao, SIGNAL_HOLD_MS as ar, handoffAttemptAllowed as as, parseSshPublicKey as at, GROUP_TYPING_FRAME as b, dhtEditId as ba, TURN_PUT_WINDOW_MS as bc, encodeDnsQuery as bi, isPubkyKey as bn, verifyCommitSignature as bo, mergeBeacon as br, handoffRetryAfter as bs, checkAtprotoProofRecord as bt, readAppStore as c, sanitizeFileName as ca, inviteOwnership as cc, HOLD_DATED_BACK_MS as ci, toBase64Url as cl, WALLET_NETWORKS as cn, readAppRevocation as co, readGroupSignal as cr, handoffBusyFrame as cs, sshSignCommand as ct, APP_BUNDLE_LIMITS as d, VOICE_LIMITS as da, HANDOFF_CAPABILITY as dc, HoldRefusedError as di, utf8Encode as dl, formatPaymentAmount as dn, signAppRevocation as do, meshHubs as dr, handoffContextProof as ds, BitcoinAddressError as dt, DHT_MESSAGE_TTL as ea, createDeviceInvite as ec, chatAppId as ei, identityFromSeedB64 as el, ETHEREUM_USDT as en, shownTime as eo, readGroupWant as er, HANDOFF_PIECE_BYTES as es, mentionsMember as et, APP_BUNDLE_MAGIC as f, baseMime as fa, deviceEchoFrame as fc, isHoldUrl as fi, validatePaymentTarget as fn, canonicalJson as fo, pickMeshHubs as fr, handoffDataFrame as fs, decodeAnyBitcoinAddress as ft, assembleAppBundle as g, parseVideoMeta as ga, devicePingFrame as gc, decodeDnsResponse as gi, sparkAddressKind as gn, MAX_GROUP_CHAIN as go, doorHubs as gr, handoffManifestFrames as gs, ATPROTO_PROOF_SCOPE as gt, appViewOf as h, voicePeaksOf as ha, deviceLinkPairing as hc, DOMAIN_FILE_MAX_BYTES as hi, SPARK_PROVIDER as hn, GROUP_MEMBER_CAP as ho, beaconRecords as hr, handoffHelloFrame as hs, ATPROTO_PROOF_COLLECTION as ht, checkAppBeforeRun as i, parseImageMeta as ia, createChatInvite as ic, EDIT_CAPABILITY as ii, sanitizeAvatar as il, SEPOLIA_TEST_USDT as in, appRef as io, SIGNAL_FRESH_MS as ir, filePartName as is, SshSigError as it, KNOCK_TTL_MS as j, reactionIsNewer as ja, signTurnRelease as jc, capsDescriptors as ji, decodeBolt11 as jn, LIMITS as jo, transferEnded as jr, readHandoffVerified as js, checkDidJws as jt, decodeCommunityLink as k, queueReaction as ka, readTurnPacket as kc, CapsExchange as ki, requestLnurlInvoice as kn, parseLocalTarget as ko, ChatFiles as kr, readHandoffPake as ks, DID_JWS_MAX_LENGTH as kt, readAppStoreSteps as l, sanitizeMime as la, DEVICES_CAPABILITY as lc, HOLD_LIMITS as li, toZ32 as ll, assertTokenUnits as ln, readAppRevocations as lo, MESH_HUBS as lr, handoffCancelFrame as ls, verifySshSignature as lt, appDigest as m, parseVoiceMeta as ma, deviceKeyZ32 as mc, readManifest as mi, SPARK_NETWORKS as mn, readCanonicalJson as mo, beaconKeys as mr, handoffEphemeral as ms, ATPROTO_FULL_SCOPE as mt, appStoreDecision as n, DHT_FILE_CAPABILITY as na, readDeviceInvite as nc, APPS_CAPABILITY as ni, verify as nl, ONCHAIN_PROVIDER as nn, APP_STATEMENT_LIMITS as no, CarriedTransport as nr, HANDOFF_TIMINGS as ns, SSHSIG_MAX_ARMOR as nt, APP_STORE_LIMITS as o, formatFileSize as oa, encodeInviteCode as oc, UPGRADE_CAPABILITY as oi, fromBase64Url as ol, TEST_USDT_FAUCET_AMOUNT as on, isAppKey as oo, SIGNAL_REPLY_MS as or, handoffAttemptFailed as os, parseSshSignature as ot, APP_ICON_PATH as p, fileMessageText as pa, deviceEchoNonce as pc, newMailbox as pi, walletNetworkOf as pn, canonicalJsonBytes as po, COMMUNITY_TOPOLOGY as pr, handoffDigest as ps, ATPROTO_DECLARED_SCOPE as pt, GroupSession as q, checkStatusCard as qa, RELAY_PAYLOAD_MAX_BYTES as qc, emptyProofLedger as qi, GROUP_WANT_FRAME as qn, HANDOFF_ACK as qo, deviceWakeRequest as qr, enrollDoneFrame as qs, strictBase64Url as qt, appUpdateDecision as r, dhtFileId as ra, OwnInviteError as rc, BUTTONS_CAPABILITY as ri, MAX_AVATAR_LENGTH as rl, PaymentPreflightError as rn, appFingerprint as ro, GROUP_SIGNAL_FRAME as rr, HANDOFF_VERIFIED as rs, SSHSIG_NAMESPACE as rt, checkAppStoreIndex as s, safeBlobType as sa, inviteLink as sc, HOLD_CAPABILITY as si, randomBytes as sl, USDT_PUBLIC_RPC as sn, isAppRef as so, groupSignalFrame as sr, handoffAttemptSucceeded as ss, sameSshKey as st, appRevocationFor as t, peekDhtMailbox as ta, deviceInviteJoinerParams as tc, isAppVersion as ti, publicKeyFromZ32 as tl, EVM_TEST_CHAINS as tn, APP_PREFIXES as to, readGroupWantNo as tr, HANDOFF_REQUEST as ts, groupName as tt, signAppStore as u, PLAYABLE_AUDIO as ua, ENROLL_CAPABILITY as uc, HoldKeys as ui, utf8Decode as ul, assertWholeSats as un, signAppObject as uo, mayBeHub as ur, handoffContext as us, verifyBitcoinMessage as ut, isAppUrl as v, EDIT_RATE_WINDOW_MS as va, seedSigner as vc, domainTxtRecord as vi, isBitcoinAddress as vn, commitHash as vo, lobbyKeys as vr, handoffPakeFrame as vs, atprotoProofRecord as vt, sealGroupTyping as w, COMMUNITY_REACTION_FRAME as wa, turnPutSummary as wc, recordsFromTxt as wi, pubkyProofCapability as wn, EXPECT_PEER_MS as wo, rankHubs as wr, readHandoffAck as ws, shortAtprotoDid as wt, GroupTypingBoard as x, parseLinkPreview as xa, TURN_RAISE_READ_TIMEOUT_MS as xc, isPublicAddress as xi, isPubkyProofFolder as xn, edgeParams as xo, mergeLobby as xr, handoffStreamKey as xs, isAtprotoDid as xt, readAppBundle as y, RateWindow as ya, webCryptoSigner as yc, domainWellKnownFile as yi, PUBKY_PROOF_MAX_BYTES as yn, rosterHas as yo, lobbyRecords as yr, handoffReleaseFrame as ys, atprotoProofRkey as yt, GROUP_WAKE_FRAME as z, ITEM_STATES as za, currentRelays as zc, emptyIdentityLedger as zi, GhostLink as zn, callSignalHeardAt as zo, PIN_LIMITS as zr, verifySetUpdate as zs, didWebFileUrl as zt };
+export { COMMUNITY_EDIT_FRAME as $, HANDOFF_HELLO as $a, EDIT_RATE_WINDOW_MS as $i, SIGNAL_REPLY_MS as $n, readEnrollGrant as $o, STATUS_CARD_CAPABILITY as $r, parseRelayPayload as $s, didDhtFromPublicKey as $t, CommunitySession as A, RELAY_POLL_INTERVALS as Aa, IdentityCheckUnavailable as Ai, pubkyProofPath as An, readHandoffHello as Ao, typingActivity as Ar, nextTurnPosition as As, verifyAtprotoRecordProof as At, knockRecords as B, callRtcConfig as Ba, PeerProofs as Bi, isFederationId as Bn, signTombstone as Bo, deviceWakeRequest as Br, RelayTransport as Bs, didWebDocumentUrl as Bt, sha256Paced as C, rosterHas as Ca, CapsExchange as Ci, PUBKY_PROOF_MAX_BYTES as Cn, handoffStreamKey as Co, FILE_LIMITS as Cr, TURN_RAISE_READ_TIMEOUT_MS as Cs, atprotoProofRkey as Ct, openGroupTyping as D, AWAITING_PEER_MS as Da, IDENTITY_MAX_EVIDENCE as Di, normalizePubkyKey as Dn, readHandoffCancel as Do, TYPING_REFRESH_MS as Dr, TURN_LAST_SEQUENCE as Ds, parseAtprotoDidDocument as Dt, groupTypingEpoch as E, DirectPathWatch as Ea, dialDescriptors as Ei, newPubkyProofFolder as En, readHandoffAck as Eo, TYPING_KINDS as Er, turnPutSummary as Es, normalizeAtprotoHandle as Et, KNOCK_TTL_MS as F, webLocalFetch as Fa, identityStatement as Fi, decodeBolt11 as Fn, SET_ACK as Fo, pinIsNewer as Fr, turnKeys as Fs, checkDidJws as Ft, groupWakeFrame as G, emptyLinkRecords as Ga, irohDescriptor as Gi, LIVENESS_PING_MS as Gn, ENROLL_PROOF as Go, checkPushEndpoint as Gr, budgetRetryMs as Gs, normalizeDid as Gt, readKnocks as H, extractParamsFromSdp as Ha, validExternalKey as Hi, parseFedimintRequestPayload as Hn, ENROLL_DONE as Ho, parseWakeFrame as Hr, normalizeRelayUrl as Hs, didWebFileNames as Ht, decodeGroupEntryLink as I, CALL_SIGNAL_MAX_AGE_MS as Ia, newIdentityBinding as Ii, ENDPOINT as In, SET_UPDATE as Io, pinNumberHolds as Ir, turnName as Is, checkDidSignature as It, GROUP_LIMITS as J, serviceIdFromName as Ja, DHT_MESSAGE_TTL as Ji, engineText as Jn, enrollDigits as Jo, chatAppId as Jr, PacketTooLargeError as Js, parseDidSignaturePaste as Jt, groupWakes as K, HTTP_SERVICE_PROTO as Ka, irohRelayUrl as Ki, pairedMessageFrame as Kn, enrollCancelFrame as Ko, vapidKeysMatch as Kr, isDiscoveryBudgetError as Ks, parseDid as Kt, encodeGroupEntryLink as L, RTC_CONFIG as La, receivedIdentityStatus as Li, cashuRequestPayload as Ln, readSetUpdate as Lo, readPin as Lr, turnStatedVerifier as Ls, didGhostlyServiceEntry as Lt, communityHasFrame as M, GhostlyHttpError as Ma, boundVerifiedIdentity as Mi, pubkyHomeserverOf as Mn, readHandoffTurnFrame as Mo, PIN_LIMITS as Mr, signTurnPacket as Ms, DID_FILE_MAX_BYTES as Mt, decodeCommunityLink as N, formatLocalTarget as Na, emptyIdentityLedger as Ni, requestLnurlInvoice as Nn, readHandoffVerified as No, mayPin as Nr, signTurnRelease as Ns, DID_JWS_MAX_LENGTH as Nt, sealGroupTyping as O, DHT_POLL_INTERVALS as Oa, IDENTITY_MAX_VALIDITY as Oi, pubkyProofCapability as On, readHandoffDone as Oo, TypingSender as Or, TURN_MAX as Os, shortAtprotoDid as Ot, encodeCommunityLink as P, parseLocalTarget as Pa, identityRevocationValue as Pi, resolveLightningDestination as Pn, sealHandoffPiece as Po, nextPinNumber as Pr, turnInstance as Ps, DidError as Pt, frameBytes as Q, HANDOFF_HAVE as Qa, EDIT_BUFFER_MS as Qi, SIGNAL_HOLD_MS as Qn, enrollProofFrame as Qo, EDIT_CAPABILITY as Qr, openRelayPayload as Qs, didDhtDocument as Qt, entryParams as R, answersOffer as Ra, revokesIdentity as Ri, fedimintRequestPayload as Rn, setAckFrame as Ro, WAKE_CALL_INTERVAL_MS as Rr, turnVerifierMark as Rs, didJwsAlg as Rt, readAppBundleAsync as S, commitHash as Sa, wellKnownUrl as Si, isBitcoinAddress as Sn, handoffRetryAfter as So, ChatFiles as Sr, TURN_PUT_WINDOW_MS as Ss, atprotoProofRecord as St, GroupTypingBoard as T, edgeParams as Ta, capsDescriptors as Ti, isPubkyProofFolder as Tn, newHandoffId as To, transferStalled as Tr, classifyTurnRead as Ts, isAtprotoDid as Tt, GROUP_WAKE_FRAME as U, parseCallSignal as Ua, TRANSPORTS as Ui, GhostLink as Un, ENROLL_GRANT as Uo, relayRequest as Ur, setLinkTraceSink as Us, didWebFileUrl as Ut, mergeKnocks as V, callSignalHeardAt as Va, emptyProofLedger as Vi, parseCashuRequestPayload as Vn, verifySetUpdate as Vo, newWakeToken as Vr, currentRelays as Vs, didWebFile as Vt, GroupWakeLimiter as W, signalHasVideo as Wa, automaticTransport as Wi, INVITE_TAKEN as Wn, ENROLL_HELLO as Wo, wakeRequest as Wr, traceLink as Ws, didWebHost as Wt, GROUP_READ_NOTE as X, HANDOFF_CANCEL as Xa, DHT_FILE_CAPABILITY as Xi, GROUP_SIGNAL_FRAME as Xn, enrollGrantFrame as Xo, APPS_CAPABILITY as Xr, createRelayPayload as Xs, staticDidDocument as Xt, GROUP_REACTED_FRAME as Y, HANDOFF_ACK as Ya, peekDhtMailbox as Yi, CarriedTransport as Yn, enrollDoneFrame as Yo, isAppVersion as Yr, RELAY_PAYLOAD_MAX_BYTES as Ys, signingKeys as Yt, GroupSession as Z, HANDOFF_DONE as Za, dhtFileId as Zi, SIGNAL_FRESH_MS as Zn, enrollHelloFrame as Zo, BUTTONS_CAPABILITY as Zr, newerPacket as Zs, strictBase64Url as Zt, assembleAppBundle as _, readReply as _a, normalizeDomain as _i, walletNetworkOf as _n, handoffHelloFrame as _o, rankHubs as _r, deviceLinkPairing as _s, ATPROTO_DECLARED_SCOPE as _t, planAppUpdate as a, COMMUNITY_REACTION_FRAME as aa, MAX_AVATAR_LENGTH as ac, HoldRefusedError as ai, EVM_TEST_CHAINS as an, HANDOFF_VERIFIED as ao, pickMeshHubs as ar, OwnInviteError as as, groupName as at, pacer as b, MAX_GROUP_CHAIN as ba, recordsName as bi, sparkAddressKind as bn, handoffPakeFrame as bo, readLobby as br, seedSigner as bs, ATPROTO_PROOF_SCOPE as bt, readAppStore as c, ReactionWindow as ca, readManifest as ci, SEPOLIA_TEST_USDT as cn, handoffAttemptFailed as co, beaconRecords as cr, encodeInviteCode as cs, SshSigError as ct, APP_BUNDLE_LIMITS as d, reactionEmoji as da, dnsProofName as di, USDT_PUBLIC_RPC as dn, handoffCancelFrame as do, lobbyKeys as dr, DEVICES_CAPABILITY as ds, sameSshKey as dt, RateWindow as ea, createIdentity as ec, UPGRADE_CAPABILITY as ei, encodeDidDhtDeactivated as en, HANDOFF_OFFER as eo, groupSignalFrame as er, readEnrollHello as es, GROUP_EDIT_FRAME as et, APP_BUNDLE_MAGIC as f, reactionIsNewer as fa, domainTxtRecord as fi, WALLET_NETWORKS as fn, handoffContext as fo, lobbyRecords as fr, ENROLL_CAPABILITY as fs, sshSignCommand as ft, appViewOf as g, pairedReplyAuthor as ga, nip05RootKey as gi, validatePaymentTarget as gn, handoffEphemeral as go, pickHubs as gr, deviceKeyZ32 as gs, decodeAnyBitcoinAddress as gt, appDigest as h, wireReaction as ha, isPublicAddress as hi, formatPaymentAmount as hn, handoffDigest as ho, newerHead as hr, deviceEchoNonce as hs, BitcoinAddressError as ht, checkAppBeforeRun as i, readForwarded as ia, verify as ic, HoldKeys as ii, ETHEREUM_USDT as in, HANDOFF_TIMINGS as io, meshHubs as ir, readDeviceInvite as is, mentionsMember as it, GROUP_READ_NOTE_COMMUNITY as j, presenceSeenAt as ja, IdentityExchange as ji, homeserverWebEndpoint as jn, readHandoffPake as jo, GROUP_PIN_FRAME as jr, readTurnPacket as js, DID_DOCUMENT_MAX_BYTES as jt, COMMUNITY_LIMITS as k, EXPECT_PEER_MS as ka, IDENTITY_REVOCATION_LABEL as ki, pubkyProofFile as kn, readHandoffHave as ko, sanitizeTypingStatus as kr, firstDeviceSetSecret as ks, AtprotoProofError as kt, readAppStoreSteps as l, nextReactionNumber as la, DOMAIN_FILE_MAX_BYTES as li, SEPOLIA_TEST_USDT_FAUCET as ln, handoffAttemptSucceeded as lo, doorHubs as lr, inviteLink as ls, parseSshPublicKey as lt, APP_PERMISSIONS as m, validReactionNumber as ma, encodeDnsQuery as mi, assertWholeSats as mn, handoffDataFrame as mo, mergeLobby as mr, deviceEchoFrame as ms, verifyBitcoinMessage as mt, appStoreDecision as n, parseLinkPreview as na, identityFromSeedB64 as nc, HOLD_DATED_BACK_MS as ni, resolveDidDht as nn, HANDOFF_PIECE_BYTES as no, MESH_HUBS as nr, createDeviceInvite as ns, carryMentions as nt, APP_STORE_LIMITS as o, GROUP_REACTION_FRAME as oa, sanitizeAvatar as oc, isHoldUrl as oi, ONCHAIN_PROVIDER as on, filePartName as oo, COMMUNITY_TOPOLOGY as or, createChatInvite as os, SSHSIG_MAX_ARMOR as ot, APP_ICON_PATH as p, readReaction as pa, domainWellKnownFile as pi, assertTokenUnits as pn, handoffContextProof as po, mergeBeacon as pr, HANDOFF_CAPABILITY as ps, verifySshSignature as pt, parseGroupWakeFrame as q, LEGACY_SERVICES as qa, DHT_FILE_TOO_LARGE as qi, engineError as qn, enrollCancelReason as qo, APP_DATA_MAX_BYTES as qr, withRequestOptions as qs, parseDidDocument as qt, appUpdateDecision as r, forwardedAgain as ra, publicKeyFromZ32 as rc, HOLD_LIMITS as ri, signDidDhtPacket as rn, HANDOFF_REQUEST as ro, mayBeHub as rr, deviceInviteJoinerParams as rs, parseCommunityEdit as rt, checkAppStoreIndex as s, REACTION_LIMITS as sa, newMailbox as si, PaymentPreflightError as sn, handoffAttemptAllowed as so, beaconKeys as sr, decodeInviteCode as ss, SSHSIG_NAMESPACE as st, appRevocationFor as t, dhtEditId as ta, identityFromSeed as tc, HOLD_CAPABILITY as ti, encodeDidDhtPacket as tn, HANDOFF_PAKE as to, readGroupSignal as tr, verifyEnrollProof as ts, GROUP_EDIT_TEXT_BYTES as tt, signAppStore as u, queueReaction as ua, decodeDnsResponse as ui, TEST_USDT_FAUCET_AMOUNT as un, handoffBusyFrame as uo, freshHubs as ur, inviteOwnership as us, parseSshSignature as ut, checkAppManifest as v, replySnippet as va, recordsFromTxt as vi, SPARK_NETWORKS as vn, handoffManifestFrames as vo, readBeacon as vr, devicePingFrame as vs, ATPROTO_FULL_SCOPE as vt, GROUP_TYPING_FRAME as w, verifyCommitSignature as wa, DHT_TEXT_CAPABILITY as wi, isPubkyKey as wn, handoffVersions as wo, transferEnded as wr, TURN_SETTLE_MS as ws, checkAtprotoProofRecord as wt, readAppBundle as x, MEMBER_KEY as xa, txtValue as xi, sparkInvoiceDetails as xn, handoffReleaseFrame as xo, shouldBeHub as xr, webCryptoSigner as xs, atprotoDidMethod as xt, isAppUrl as y, GROUP_MEMBER_CAP as ya, recordsFromWellKnown as yi, SPARK_PROVIDER as yn, handoffOfferFrame as yo, readBeaconHead as yr, newDeviceSetSecret as ys, ATPROTO_PROOF_COLLECTION as yt, knockIdentity as z, buildSdpFromSignal as za, lastSharedWithMe as zi, findEndpoint as zn, setUpdateFrame as zo, WakeLimiter as zr, DEFAULT_RELAYS as zs, didSignedMessages as zt };
 
-//# sourceMappingURL=src-_FzJkeAJ.js.map
+//# sourceMappingURL=src-DhfGgAUu.js.map