@ghostlytools/cli 1.3.1 → 1.3.3

package/dist/assets/{src-DDzSERyc.js → src-D7gcJElT.js}

@@ -1,7 +1,7 @@
 import { xsalsa20poly1305 } from "@noble/ciphers/salsa.js";
 import { ed25519, x25519 } from "@noble/curves/ed25519.js";
-import { hkdf } from "@noble/hashes/hkdf.js";
 import { sha256, sha512 } from "@noble/hashes/sha2.js";
+import { hkdf } from "@noble/hashes/hkdf.js";
 import { base58, base64, base64urlnopad, bech32, bech32m, createBase58check } from "@scure/base";
 import { hmac } from "@noble/hashes/hmac.js";
 import { hexToBytes } from "@noble/hashes/utils.js";
@@ -123,6 +123,19 @@ function fromZ32(str) {
 	}
 	return out;
 }
+/**
+* A 32-byte key written as the one z-base-32 spelling `toZ32` produces: 52 characters that decode to 32 bytes and
+* encode back to the same string. The last character carries four zero padding bits, so each key has exactly one
+* spelling and keys may be compared as strings (WISP 02). Any other spelling is not a key here.
+*/
+function isZ32Key(value) {
+	if (typeof value !== "string" || value.length !== 52) return false;
+	try {
+		return toZ32(fromZ32(value)) === value;
+	} catch {
+		return false;
+	}
+}
 function randomBytes(length) {
 	const bytes = new Uint8Array(length);
 	crypto.getRandomValues(bytes);
@@ -255,11 +268,26 @@ function tryDecrypt(encoded, key) {
 		return null;
 	}
 }
-//#endregion
-//#region ../core/src/identity.ts
+/**
+* Public keys already derived, by the SHA-256 of their seed, the most recently used last. A chat's start derives the
+* same few seeds' keys again and again (its link, its delivery, its capability record): ~0.25 ms each in V8, ~3.4x
+* that in JSC. The seed itself is never kept, so a seed its owner zeroes leaves nothing behind here.
+*/
+var publicKeys = /* @__PURE__ */ new Map();
+function publicKeyOf(seed) {
+	const id = toBase64Url(sha256(seed));
+	let key = publicKeys.get(id);
+	if (key) publicKeys.delete(id);
+	else {
+		key = ed25519.getPublicKey(seed);
+		if (publicKeys.size >= 1024) publicKeys.delete(publicKeys.keys().next().value);
+	}
+	publicKeys.set(id, key);
+	return key.slice();
+}
 function identityFromSeed(seed) {
 	if (seed.length !== 32) throw new Error("Seed must be exactly 32 bytes");
-	const publicKey = ed25519.getPublicKey(seed);
+	const publicKey = publicKeyOf(seed);
 	return {
 		seed,
 		seedB64: toBase64Url(seed),
@@ -276,7 +304,7 @@ function createIdentity() {
 function publicKeyFromZ32(z32) {
 	if (z32.length !== 52) throw new Error("Invalid public key: expected 52 z-base-32 characters");
 	const bytes = fromZ32(z32);
-	if (bytes.length !== 32) throw new Error("Invalid public key length");
+	if (toZ32(bytes) !== z32) throw new Error("Invalid public key: not canonical z-base-32");
 	return bytes;
 }
 function sign(message, seed) {
@@ -3016,7 +3044,6 @@ function readGhostly(code) {
 	};
 }
 var B64_KEY = /^[A-Za-z0-9_-]{43}$/;
-var Z32_KEY$1 = /^[ybndrfg8ejkmcpqxot1uwisza345h769]{52}$/;
 function readSlashForm(code) {
 	const dht = code.startsWith("pair2d/");
 	const profile = dht || code.startsWith("pair1/") ? "paired-chat/1" : void 0;
@@ -3030,7 +3057,7 @@ function readSlashForm(code) {
 		reason: "not-ghostly"
 	};
 	const [seedB64, peerPubKeyZ32, encKeyB64] = parts;
-	const bad = !B64_KEY.test(seedB64) ? "The seed" : !Z32_KEY$1.test(peerPubKeyZ32) ? "The contact's key" : !B64_KEY.test(encKeyB64) ? "The shared key" : null;
+	const bad = !B64_KEY.test(seedB64) ? "The seed" : !isZ32Key(peerPubKeyZ32) ? "The contact's key" : !B64_KEY.test(encKeyB64) ? "The shared key" : null;
 	if (bad) return {
 		ok: false,
 		reason: "damaged",
@@ -3313,7 +3340,7 @@ var ENROLL_CANCEL_REASONS = [
 	"full",
 	"failed"
 ];
-var KEY$5 = /^[A-Za-z0-9_-]{43}$/;
+var KEY$3 = /^[A-Za-z0-9_-]{43}$/;
 var SIGNATURE$2 = /^[A-Za-z0-9_-]{86}$/;
 var HASH$3 = /^[0-9a-f]{64}$/;
 function checkKey(key, who) {
@@ -3363,7 +3390,7 @@ async function enrollHelloFrame(transcriptHash, inviterKey, joiner, about) {
 * key's over this session's tuple. Null for anything else.
 */
 function readEnrollHello(frame, transcriptHash, inviterKey, sessionKey) {
-	if (frame.t !== "enroll-hello" || typeof frame.k !== "string" || !KEY$5.test(frame.k) || typeof frame.s !== "string" || !SIGNATURE$2.test(frame.s)) return null;
+	if (frame.t !== "enroll-hello" || typeof frame.k !== "string" || !KEY$3.test(frame.k) || typeof frame.s !== "string" || !SIGNATURE$2.test(frame.s)) return null;
 	if (typeof frame.name !== "string" || frame.name.length > 64 || typeof frame.app !== "string" || frame.app.length > 32) return null;
 	const key = fromBase64Url(frame.k);
 	if (key.length !== 32 || toBase64Url(key) !== toBase64Url(sessionKey)) return null;
@@ -3445,7 +3472,7 @@ function enrollGrantFrame(grant) {
 * once and the inviter once, and a turn and `rev` an ordinary record can have. Null for anything else.
 */
 function readEnrollGrant(frame, inviterKey, joinerKey) {
-	if (frame.t !== "enroll-grant" || typeof frame.d !== "string" || !KEY$5.test(frame.d) || !Array.isArray(frame.set) || frame.set.length > 4) return null;
+	if (frame.t !== "enroll-grant" || typeof frame.d !== "string" || !KEY$3.test(frame.d) || !Array.isArray(frame.set) || frame.set.length > 4) return null;
 	if (!Number.isInteger(frame.turn) || frame.turn < 0 || frame.turn > TURN_MAX) return null;
 	if (!Number.isInteger(frame.rev) || frame.rev < 0 || frame.rev >= TURN_REV_LIMIT) return null;
 	const set = [];
@@ -3454,7 +3481,7 @@ function readEnrollGrant(frame, inviterKey, joinerKey) {
 			set.push(null);
 			continue;
 		}
-		if (!Array.isArray(slot) || slot.length !== 2 || typeof slot[0] !== "string" || !KEY$5.test(slot[0]) || typeof slot[1] !== "string" || slot[1].length > 64) return null;
+		if (!Array.isArray(slot) || slot.length !== 2 || typeof slot[0] !== "string" || !KEY$3.test(slot[0]) || typeof slot[1] !== "string" || slot[1].length > 64) return null;
 		set.push({
 			key: fromBase64Url(slot[0]),
 			name: turnName(slot[1])
@@ -3491,7 +3518,7 @@ function enrollCancelReason(frame) {
 //#region ../core/src/setUpdate.ts
 var SET_UPDATE = "set-update";
 var SET_ACK = "set-ack";
-var KEY$4 = /^[A-Za-z0-9_-]{43}$/;
+var KEY$2 = /^[A-Za-z0-9_-]{43}$/;
 var SIGNATURE$1 = /^[A-Za-z0-9_-]{86}$/;
 /** A tombstone packet is a relay payload of 706 bytes (WISP 06 § Record); a little room above it, nothing more. */
 var TOMB = /^[A-Za-z0-9_-]{100,1400}$/;
@@ -3543,7 +3570,7 @@ async function setUpdateFrame(oldAddress, update, signer) {
 * here: that needs the old turn address (`verifySetUpdate`).
 */
 function readSetUpdate(frame) {
-	if (frame.t !== "set-update" || typeof frame.d !== "string" || !KEY$4.test(frame.d) || typeof frame.by !== "string" || !KEY$4.test(frame.by)) return null;
+	if (frame.t !== "set-update" || typeof frame.d !== "string" || !KEY$2.test(frame.d) || typeof frame.by !== "string" || !KEY$2.test(frame.by)) return null;
 	if (typeof frame.s !== "string" || !SIGNATURE$1.test(frame.s) || typeof frame.tomb !== "string" || !TOMB.test(frame.tomb)) return null;
 	if (!Array.isArray(frame.set) || frame.set.length > 4) return null;
 	if (frame.rec !== void 0 && (typeof frame.rec !== "string" || !TOMB.test(frame.rec))) return null;
@@ -3557,7 +3584,7 @@ function readSetUpdate(frame) {
 			signed.push(null);
 			continue;
 		}
-		if (!Array.isArray(slot) || slot.length !== 2 || typeof slot[0] !== "string" || !KEY$4.test(slot[0]) || typeof slot[1] !== "string" || slot[1].length > 64) return null;
+		if (!Array.isArray(slot) || slot.length !== 2 || typeof slot[0] !== "string" || !KEY$2.test(slot[0]) || typeof slot[1] !== "string" || slot[1].length > 64) return null;
 		if (utf8Encode(slot[1]).length > 16 || slot[1].includes("\0")) return null;
 		signed.push([slot[0], slot[1]]);
 		set.push({
@@ -3662,8 +3689,8 @@ var HANDOFF_CANCEL_REASONS = [
 	"password",
 	"stalled"
 ];
-var KEY$3 = /^[A-Za-z0-9_-]{43}$/;
-var DIGEST$2 = KEY$3;
+var KEY$1 = /^[A-Za-z0-9_-]{43}$/;
+var DIGEST$2 = KEY$1;
 var SIGNATURE = /^[A-Za-z0-9_-]{86}$/;
 var ID$5 = /^[A-Za-z0-9_-]{22}$/;
 var B64$4 = /^[A-Za-z0-9_-]*$/;
@@ -3798,7 +3825,7 @@ function handoffHelloFrame(hello) {
 }
 function readHandoffHello(frame) {
 	if (frame.t !== "handoff-hello" || frame.v !== 1) return null;
-	if (!isText$2(frame.e, KEY$3) || fromBase64Url(frame.e).length !== 32) return null;
+	if (!isText$2(frame.e, KEY$1) || fromBase64Url(frame.e).length !== 32) return null;
 	if (!isText$2(frame.app, VERSION_TEXT) || !isCount$1(frame.db, 1e6) || !isPins(frame.pins)) return null;
 	if (typeof frame.room !== "number" || !Number.isSafeInteger(frame.room) || frame.room < -1) return null;
 	if (typeof frame.metered !== "boolean") return null;
@@ -3864,7 +3891,7 @@ function readHandoffPake(frame) {
 		wrong: true
 	} : null;
 	if (!isText$2(frame.m, B64$4) || !frame.m.length || frame.m.length > 4096) return null;
-	if (frame.n === 3 && !isText$2(frame.c, KEY$3)) return null;
+	if (frame.n === 3 && !isText$2(frame.c, KEY$1)) return null;
 	return {
 		n: frame.n,
 		m: frame.m,
@@ -4656,8 +4683,12 @@ function buildSdpFromSignal(signal) {
 function sdpHasCandidates(sdp) {
 	return /^a=candidate:/m.test(sdp ?? "");
 }
-/** How long to keep collecting after the candidate we were waiting for showed up (a call's; a chat's data link sets its own). */
-var ICE_SETTLE_MS = 400;
+/**
+* How long to keep collecting after the candidate we were waiting for showed up (a call's; a chat's data link sets its
+* own, the same). The host candidates are in before it, and a call's signal keeps the first reflexive one only
+* (`pickCallCandidates`): 400 ms held every call's offer, and its answer, back that long for nothing it carried.
+*/
+var ICE_SETTLE_MS = 150;
 /** IPv4 ranges that are not reachable from the internet: this network, private, shared (CGNAT), loopback, link-local, the documentation ones, benchmarking, multicast and up. */
 var NOT_GLOBAL_IPV4 = [
 	[0, 8],
@@ -7160,7 +7191,11 @@ function edgeParams(groupId, mySeed, myZ32, peerZ32) {
 var GROUP_MEMBER_CAP = { max: 32 };
 var MAX_GROUP_CHAIN = 1024;
 var GROUP_ID = /^[A-Za-z0-9_-]{22}$/;
-var MEMBER_KEY = /^[ybndrfg8ejkmcpqxot1uwisza345h769]{52}$/;
+/**
+* A member's key, in its one canonical spelling (`isZ32Key`): a roster names members by string, so a key respelled in
+* its last character would be a second member for one key, and `publicKeyFromZ32` would throw on it past this check.
+*/
+var MEMBER_KEY = { test: isZ32Key };
 var TAG$1 = /^[A-Za-z0-9_-]{43}$/;
 var SIG$6 = /^[A-Za-z0-9_-]{86}$/;
 var HASH$2 = /^[a-f0-9]{64}$/;
@@ -7226,6 +7261,8 @@ function parseCommit$1(raw) {
 		sig: c.sig
 	};
 }
+/** Only shape, no signature or parent: a commit as kept, its fields alone (anything else it carried dropped); null when malformed. */
+var parseGroupCommit = parseCommit$1;
 /** The roster a commit must carry, given the previous one; null when the change is not allowed. */
 function expectedRoster(previous, kind, by, subject) {
 	if (kind === "create") return previous === null && !subject ? [[by, "admin"]] : null;
@@ -8854,6 +8891,147 @@ var RateWindow = class {
 	}
 };
 //#endregion
+//#region ../core/src/image.ts
+var IMAGE_LIMITS = {
+	/** Pixels on either side: the most a JPEG can say, well past what anyone sends as a picture. */
+	maxEdge: 65535,
+	/** How much of a file is read for its size: past a JPEG's EXIF, thumbnails and colour profile. */
+	headBytes: 262144,
+	/**
+	* The most pixels a picture drawn in a chat may have: a 50-megapixel phone photo (8160 × 6120), about 200 MB once
+	* decoded. A few kilobytes can say far more (a PNG of 23000 × 23000 is 64 KB and 2 GB decoded): past this a picture
+	* is kept and saved, not drawn.
+	*/
+	previewPixels: 5e7,
+	/** The longest side a picture drawn in a chat may have: a wide panorama. */
+	previewEdge: 16384
+};
+/** Whether a file is a picture, by its type. */
+function isImageMime(mime) {
+	return mime.split(";")[0].trim().toLowerCase().startsWith("image/");
+}
+var edge = (n) => typeof n === "number" && Number.isSafeInteger(n) && n > 0 && n <= IMAGE_LIMITS.maxEdge;
+/** A peer's `image` description, or undefined when it is not one. It never refuses the file. */
+function parseImageMeta(value, mime) {
+	if (mime !== void 0 && !isImageMime(mime)) return void 0;
+	if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+	const { width, height } = value;
+	return edge(width) && edge(height) ? {
+		width,
+		height
+	} : void 0;
+}
+var u16be = (b, at) => b[at] << 8 | b[at + 1];
+var u16le = (b, at) => b[at] | b[at + 1] << 8;
+var u24le = (b, at) => b[at] | b[at + 1] << 8 | b[at + 2] << 16;
+var u32be = (b, at) => (b[at] << 24 >>> 0) + (b[at + 1] << 16) + (b[at + 2] << 8) + b[at + 3];
+var ascii = (b, at, text) => [...text].every((c, i) => b[at + i] === c.charCodeAt(0));
+var sized = (width, height) => edge(width) && edge(height) ? {
+	width,
+	height
+} : void 0;
+/** SOFn markers: every frame type but DHT (C4), JPG (C8) and DAC (CC). */
+var JPEG_FRAME = /* @__PURE__ */ new Set([
+	192,
+	193,
+	194,
+	195,
+	197,
+	198,
+	199,
+	201,
+	202,
+	203,
+	205,
+	206,
+	207
+]);
+/** The EXIF orientation in an APP1 segment's TIFF block (1 when it says none). */
+function exifOrientation(b, tiff, end) {
+	if (tiff + 8 > end) return 1;
+	const little = ascii(b, tiff, "II");
+	if (!little && !ascii(b, tiff, "MM")) return 1;
+	const u16 = (at) => little ? u16le(b, at) : u16be(b, at);
+	const u32 = (at) => little ? u16le(b, at) + u16le(b, at + 2) * 65536 : u32be(b, at);
+	if (u16(tiff + 2) !== 42) return 1;
+	const ifd = tiff + u32(tiff + 4);
+	if (ifd + 2 > end) return 1;
+	const count = u16(ifd);
+	for (let i = 0; i < count; i++) {
+		const entry = ifd + 2 + i * 12;
+		if (entry + 12 > end) return 1;
+		if (u16(entry) === 274) {
+			const value = u16(entry + 8);
+			return value >= 1 && value <= 8 ? value : 1;
+		}
+	}
+	return 1;
+}
+function jpegSize(b) {
+	let at = 2, orientation = 1;
+	while (at + 4 <= b.length) {
+		if (b[at] !== 255) return void 0;
+		const marker = b[at + 1];
+		if (marker === 255) {
+			at++;
+			continue;
+		}
+		if (marker === 1 || marker >= 208 && marker <= 215) {
+			at += 2;
+			continue;
+		}
+		if (marker === 217 || marker === 218) return void 0;
+		const length = u16be(b, at + 2);
+		if (length < 2) return void 0;
+		const end = Math.min(b.length, at + 2 + length);
+		if (marker === 225 && ascii(b, at + 4, "Exif\0\0")) orientation = exifOrientation(b, at + 10, end);
+		if (JPEG_FRAME.has(marker)) {
+			if (at + 9 > b.length) return void 0;
+			const height = u16be(b, at + 5), width = u16be(b, at + 7);
+			return orientation >= 5 ? sized(height, width) : sized(width, height);
+		}
+		at += 2 + length;
+	}
+}
+function webpSize(b) {
+	if (b.length < 30) return void 0;
+	if (ascii(b, 12, "VP8 ")) {
+		if (b[23] !== 157 || b[24] !== 1 || b[25] !== 42) return void 0;
+		return sized(u16le(b, 26) & 16383, u16le(b, 28) & 16383);
+	}
+	if (ascii(b, 12, "VP8L")) {
+		if (b[20] !== 47) return void 0;
+		const bits = b[21] | b[22] << 8 | b[23] << 16 | b[24] << 24;
+		return sized((bits & 16383) + 1, (bits >>> 14 & 16383) + 1);
+	}
+	if (ascii(b, 12, "VP8X")) return sized(u24le(b, 24) + 1, u24le(b, 27) + 1);
+}
+/**
+* A picture's size as it is shown, read from its first bytes (PNG, JPEG, GIF, WebP), or undefined when they do not
+* say. Only the header is read: a JPEG whose frame header sits past `IMAGE_LIMITS.headBytes` goes without.
+*/
+function imageSize(head) {
+	const b = head;
+	try {
+		if (b.length >= 24 && b[0] === 137 && ascii(b, 1, "PNG\r\n\n") && ascii(b, 12, "IHDR")) return sized(u32be(b, 16), u32be(b, 20));
+		if (b.length >= 10 && (ascii(b, 0, "GIF87a") || ascii(b, 0, "GIF89a"))) return sized(u16le(b, 6), u16le(b, 8));
+		if (b.length >= 4 && b[0] === 255 && b[1] === 216 && b[2] === 255) return jpegSize(b);
+		if (b.length >= 16 && ascii(b, 0, "RIFF") && ascii(b, 8, "WEBP")) return webpSize(b);
+	} catch {}
+}
+/**
+* The description a picture is sent with, read from the start of the file, or undefined when it is not a picture
+* or its first bytes do not say (it then goes without one).
+*/
+async function readImageMeta(source, mime) {
+	if (!isImageMime(mime)) return void 0;
+	try {
+		return imageSize(new Uint8Array(await source.slice(0, IMAGE_LIMITS.headBytes).arrayBuffer()));
+	} catch {
+		return;
+	}
+}
+//#endregion
 //#region ../core/src/video.ts
 var VIDEO_LIMITS = {
 	/** The poster's bytes: with the rest of an offer, a frame stays far below the 60 KiB a session carries. */
@@ -8877,7 +9055,8 @@ var JPEG_START = [
 ];
 /**
 * A peer's `video` description, or undefined when it is not one. It never refuses the file. A poster that is
-* too large or not a JPEG is dropped on its own; the length and size are kept.
+* too large, not a JPEG, or says it is more pixels than a sender draws (`posterEdge`) is dropped on its own; the
+* length and size are kept. It is shown before the file is accepted, so a few bytes must not ask for a huge bitmap.
 */
 function parseVideoMeta(value, mime) {
 	if (mime !== void 0 && !isVideoMime(mime)) return void 0;
@@ -8893,7 +9072,8 @@ function parseVideoMeta(value, mime) {
 	};
 	if (typeof poster === "string" && poster.length <= Math.ceil(VIDEO_LIMITS.maxPosterBytes * 4 / 3) && BASE64URL.test(poster)) try {
 		const bytes = fromBase64Url(poster);
-		if (bytes.length <= VIDEO_LIMITS.maxPosterBytes && JPEG_START.every((b, i) => bytes[i] === b)) meta.poster = poster;
+		const size = bytes.length <= VIDEO_LIMITS.maxPosterBytes && JPEG_START.every((b, i) => bytes[i] === b) ? imageSize(bytes) : void 0;
+		if (size && Math.max(size.width, size.height) <= VIDEO_LIMITS.posterEdge) meta.poster = poster;
 	} catch {}
 	return meta;
 }
@@ -9198,139 +9378,6 @@ var FileTransfers = class {
 	}
 };
 //#endregion
-//#region ../core/src/image.ts
-var IMAGE_LIMITS = {
-	/** Pixels on either side: the most a JPEG can say, well past what anyone sends as a picture. */
-	maxEdge: 65535,
-	/** How much of a file is read for its size: past a JPEG's EXIF, thumbnails and colour profile. */
-	headBytes: 262144
-};
-/** Whether a file is a picture, by its type. */
-function isImageMime(mime) {
-	return mime.split(";")[0].trim().toLowerCase().startsWith("image/");
-}
-var edge = (n) => typeof n === "number" && Number.isSafeInteger(n) && n > 0 && n <= IMAGE_LIMITS.maxEdge;
-/** A peer's `image` description, or undefined when it is not one. It never refuses the file. */
-function parseImageMeta(value, mime) {
-	if (mime !== void 0 && !isImageMime(mime)) return void 0;
-	if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
-	const { width, height } = value;
-	return edge(width) && edge(height) ? {
-		width,
-		height
-	} : void 0;
-}
-var u16be = (b, at) => b[at] << 8 | b[at + 1];
-var u16le = (b, at) => b[at] | b[at + 1] << 8;
-var u24le = (b, at) => b[at] | b[at + 1] << 8 | b[at + 2] << 16;
-var u32be = (b, at) => (b[at] << 24 >>> 0) + (b[at + 1] << 16) + (b[at + 2] << 8) + b[at + 3];
-var ascii = (b, at, text) => [...text].every((c, i) => b[at + i] === c.charCodeAt(0));
-var sized = (width, height) => edge(width) && edge(height) ? {
-	width,
-	height
-} : void 0;
-/** SOFn markers: every frame type but DHT (C4), JPG (C8) and DAC (CC). */
-var JPEG_FRAME = /* @__PURE__ */ new Set([
-	192,
-	193,
-	194,
-	195,
-	197,
-	198,
-	199,
-	201,
-	202,
-	203,
-	205,
-	206,
-	207
-]);
-/** The EXIF orientation in an APP1 segment's TIFF block (1 when it says none). */
-function exifOrientation(b, tiff, end) {
-	if (tiff + 8 > end) return 1;
-	const little = ascii(b, tiff, "II");
-	if (!little && !ascii(b, tiff, "MM")) return 1;
-	const u16 = (at) => little ? u16le(b, at) : u16be(b, at);
-	const u32 = (at) => little ? u16le(b, at) + u16le(b, at + 2) * 65536 : u32be(b, at);
-	if (u16(tiff + 2) !== 42) return 1;
-	const ifd = tiff + u32(tiff + 4);
-	if (ifd + 2 > end) return 1;
-	const count = u16(ifd);
-	for (let i = 0; i < count; i++) {
-		const entry = ifd + 2 + i * 12;
-		if (entry + 12 > end) return 1;
-		if (u16(entry) === 274) {
-			const value = u16(entry + 8);
-			return value >= 1 && value <= 8 ? value : 1;
-		}
-	}
-	return 1;
-}
-function jpegSize(b) {
-	let at = 2, orientation = 1;
-	while (at + 4 <= b.length) {
-		if (b[at] !== 255) return void 0;
-		const marker = b[at + 1];
-		if (marker === 255) {
-			at++;
-			continue;
-		}
-		if (marker === 1 || marker >= 208 && marker <= 215) {
-			at += 2;
-			continue;
-		}
-		if (marker === 217 || marker === 218) return void 0;
-		const length = u16be(b, at + 2);
-		if (length < 2) return void 0;
-		const end = Math.min(b.length, at + 2 + length);
-		if (marker === 225 && ascii(b, at + 4, "Exif\0\0")) orientation = exifOrientation(b, at + 10, end);
-		if (JPEG_FRAME.has(marker)) {
-			if (at + 9 > b.length) return void 0;
-			const height = u16be(b, at + 5), width = u16be(b, at + 7);
-			return orientation >= 5 ? sized(height, width) : sized(width, height);
-		}
-		at += 2 + length;
-	}
-}
-function webpSize(b) {
-	if (b.length < 30) return void 0;
-	if (ascii(b, 12, "VP8 ")) {
-		if (b[23] !== 157 || b[24] !== 1 || b[25] !== 42) return void 0;
-		return sized(u16le(b, 26) & 16383, u16le(b, 28) & 16383);
-	}
-	if (ascii(b, 12, "VP8L")) {
-		if (b[20] !== 47) return void 0;
-		const bits = b[21] | b[22] << 8 | b[23] << 16 | b[24] << 24;
-		return sized((bits & 16383) + 1, (bits >>> 14 & 16383) + 1);
-	}
-	if (ascii(b, 12, "VP8X")) return sized(u24le(b, 24) + 1, u24le(b, 27) + 1);
-}
-/**
-* A picture's size as it is shown, read from its first bytes (PNG, JPEG, GIF, WebP), or undefined when they do not
-* say. Only the header is read: a JPEG whose frame header sits past `IMAGE_LIMITS.headBytes` goes without.
-*/
-function imageSize(head) {
-	const b = head;
-	try {
-		if (b.length >= 24 && b[0] === 137 && ascii(b, 1, "PNG\r\n\n") && ascii(b, 12, "IHDR")) return sized(u32be(b, 16), u32be(b, 20));
-		if (b.length >= 10 && (ascii(b, 0, "GIF87a") || ascii(b, 0, "GIF89a"))) return sized(u16le(b, 6), u16le(b, 8));
-		if (b.length >= 4 && b[0] === 255 && b[1] === 216 && b[2] === 255) return jpegSize(b);
-		if (b.length >= 16 && ascii(b, 0, "RIFF") && ascii(b, 8, "WEBP")) return webpSize(b);
-	} catch {}
-}
-/**
-* The description a picture is sent with, read from the start of the file, or undefined when it is not a picture
-* or its first bytes do not say (it then goes without one).
-*/
-async function readImageMeta(source, mime) {
-	if (!isImageMime(mime)) return void 0;
-	try {
-		return imageSize(new Uint8Array(await source.slice(0, IMAGE_LIMITS.headBytes).arrayBuffer()));
-	} catch {
-		return;
-	}
-}
-//#endregion
 //#region ../core/src/dhtFiles.ts
 /**
 * A file's bubble on the DHT floor (WISP 403 § Files): while the contact is away, a file's offer (its name, size, type,
@@ -11807,10 +11854,10 @@ var IDENTITY_MAX_VALIDITY = 3456e4;
 var IDENTITY_MAX_EVIDENCE = 16384;
 /** Unanswered challenges a verifier keeps per conversation. */
 var MAX_CHALLENGES = 8;
+var IDENTITY_FRAME_WINDOW_MS = 6e4;
 var IDENTITY_PROVIDER_ID = /^[a-z][a-z0-9-]{0,31}$/;
 /** Printable ASCII without spaces, so the statement can be built but never needs parsing. */
 var IDENTITY_SUBJECT = /^[\x21-\x7e]{1,512}$/;
-var KEY$2 = /^[ybndrfg8ejkmcpqxot1uwisza345h769]{52}$/;
 var BINDING_NONCE = /^[A-Za-z0-9_-]{22}$/;
 var CHALLENGE_NONCE = /^[A-Za-z0-9_-]{43}$/;
 var HEX64$2 = /^[a-f0-9]{64}$/;
@@ -11832,7 +11879,7 @@ var iso = (seconds) => (/* @__PURE__ */ new Date(seconds * 1e3)).toISOString().r
 var isInt$2 = (v) => Number.isSafeInteger(v) && v > 0;
 function isIdentityBinding(value) {
 	const b = value;
-	return !!b && typeof b === "object" && !Array.isArray(b) && Object.keys(b).sort().join(",") === "expiresAt,issuedAt,key,nonce,provider,subject,v" && b.v === 1 && typeof b.provider === "string" && IDENTITY_PROVIDER_ID.test(b.provider) && typeof b.subject === "string" && IDENTITY_SUBJECT.test(b.subject) && typeof b.key === "string" && KEY$2.test(b.key) && typeof b.nonce === "string" && BINDING_NONCE.test(b.nonce) && isInt$2(b.issuedAt) && isInt$2(b.expiresAt) && b.expiresAt > b.issuedAt && b.expiresAt - b.issuedAt <= 3456e4 && b.expiresAt < 253402300800;
+	return !!b && typeof b === "object" && !Array.isArray(b) && Object.keys(b).sort().join(",") === "expiresAt,issuedAt,key,nonce,provider,subject,v" && b.v === 1 && typeof b.provider === "string" && IDENTITY_PROVIDER_ID.test(b.provider) && typeof b.subject === "string" && IDENTITY_SUBJECT.test(b.subject) && isZ32Key(b.key) && typeof b.nonce === "string" && BINDING_NONCE.test(b.nonce) && isInt$2(b.issuedAt) && isInt$2(b.expiresAt) && b.expiresAt > b.issuedAt && b.expiresAt - b.issuedAt <= 3456e4 && b.expiresAt < 253402300800;
 }
 /**
 * The canonical statement, one line, so it survives every tool and clipboard (no line-ending
@@ -11892,7 +11939,7 @@ function signIdentityPresentation(seed, proofId, scope, nonce, issuedAt) {
 	return toBase64Url(sign(identityPresentationBytes(proofId, scope, nonce, issuedAt), seed));
 }
 function verifyIdentityPresentation(key, sig, proofId, scope, nonce, issuedAt) {
-	if (typeof sig !== "string" || !SIG$5.test(sig) || !KEY$2.test(key)) return false;
+	if (typeof sig !== "string" || !SIG$5.test(sig) || !isZ32Key(key)) return false;
 	return verify(fromBase64Url(sig), identityPresentationBytes(proofId, scope, nonce, issuedAt), publicKeyFromZ32(key));
 }
 var clean$1 = (value, max) => {
@@ -11945,6 +11992,18 @@ function receivedIdentityStatus(r, presenter, audience, now = nowSeconds()) {
 	if (Math.min(r.binding.expiresAt, r.verified.expiresAt ?? Infinity) <= now) return "expired";
 	return r.status === "unconfirmed" ? "unconfirmed" : "verified";
 }
+var standing = (r, now) => r.status !== "withdrawn" && r.status !== "revoked" && Math.min(r.binding.expiresAt, r.verified.expiresAt ?? Infinity) > now;
+/**
+* `received` with room for one more proof: `replaced` (the older proof of the same identity) dropped, then the oldest ones
+* no longer standing; undefined when every place is still taken.
+*/
+function receivedWithRoom(received, id, replaced, now) {
+	const kept = received.filter((r) => r.id !== id && !replaced(r));
+	const gone = kept.filter((r) => !standing(r, now)).sort((a, b) => a.verifiedAt - b.verifiedAt);
+	const drop = new Set(gone.slice(0, Math.max(0, kept.length - 16 + 1)));
+	const out = kept.filter((r) => !drop.has(r));
+	return out.length < 16 ? out : void 0;
+}
 var shortError = (e) => clean$1(e instanceof Error ? e.message : String(e), 160) ?? "Invalid proof";
 /**
 * A check this side could not finish because of what its own network did: a host it refused to contact, a server
@@ -11960,6 +12019,7 @@ var IdentityCheckUnavailable = class extends Error {
 };
 /** What the contact is told when the check failed with an IdentityCheckUnavailable. */
 var IDENTITY_CHECK_UNAVAILABLE = "Your contact's app could not check it. Try again later.";
+var TOO_MANY_RECEIVED = "Your contact keeps too many identities from you already";
 var peerError = (e) => e instanceof IdentityCheckUnavailable ? IDENTITY_CHECK_UNAVAILABLE : shortError(e);
 /**
 * The `idp-*` exchange of one conversation. Frames (all JSON, additive, over the paired channel,
@@ -12184,31 +12244,29 @@ var IdentityExchange = class {
 					});
 					return;
 				}
-				case "idp-withdraw":
+				case "idp-withdraw": {
 					if (!id) return;
-					await this.options.storage.update((l) => {
-						const r = l.received.find((x) => x.id === id);
-						const next = {
-							...l,
-							received: l.received.map((x) => x.id === id ? {
-								...x,
-								status: "withdrawn"
-							} : x)
-						};
-						return r && r.status !== "withdrawn" ? this.log(next, {
-							type: "stopped",
-							side: "theirs",
-							proof: id,
-							provider: r.binding.provider,
-							subject: r.verified.subject,
-							reason: "withdrawn"
-						}) : next;
-					});
+					const r = this.options.storage.read().received.find((x) => x.id === id);
+					if (r && r.status !== "withdrawn") await this.options.storage.update((l) => this.log({
+						...l,
+						received: l.received.map((x) => x.id === id ? {
+							...x,
+							status: "withdrawn"
+						} : x)
+					}, {
+						type: "stopped",
+						side: "theirs",
+						proof: id,
+						provider: r.binding.provider,
+						subject: r.verified.subject,
+						reason: "withdrawn"
+					}));
 					this.send({
 						t: "idp-withdrawn",
 						id
 					});
 					return;
+				}
 				case "idp-withdrawn": {
 					const s = id ? this.shared(id) : void 0;
 					if (s?.status === "withdrawal-pending") await this.setShared({
@@ -12226,25 +12284,11 @@ var IdentityExchange = class {
 	async onRequest(id, provider) {
 		if (!id) return;
 		if (typeof provider !== "string" || !this.options.providers().includes(provider)) {
-			const error = "Your contact's app cannot verify this kind of identity yet";
-			if (typeof provider === "string" && IDENTITY_PROVIDER_ID.test(provider)) await this.options.storage.update((l) => this.log(this.log(l, {
-				type: "shared",
-				side: "theirs",
-				proof: id,
-				provider
-			}), {
-				type: "result",
-				side: "theirs",
-				proof: id,
-				provider,
-				ok: false,
-				error: "This app cannot verify this kind of identity yet"
-			}));
 			this.send({
 				t: "idp-result",
 				id,
 				ok: false,
-				error
+				error: "Your contact's app cannot verify this kind of identity yet"
 			});
 			return;
 		}
@@ -12330,6 +12374,8 @@ var IdentityExchange = class {
 		/** The same, as this side's own timeline says it. */
 		let reason;
 		try {
+			const mayReplace = (r) => r.binding.provider === binding.provider && (r.binding.subject === binding.subject || r.verified.subject === binding.subject);
+			if (!receivedWithRoom(this.options.storage.read().received, id, mayReplace, now)) throw new Error(TOO_MANY_RECEIVED);
 			if (JSON.stringify(evidence ?? null).length > 16384) throw new Error("Evidence too large");
 			if (!verifyIdentityPresentation(binding.key, sig, id, scope, nonce, issuedAt)) throw new Error("The proof key did not sign this conversation's challenge");
 			if (binding.issuedAt > now + 300) throw new Error("The proof is dated in the future");
@@ -12345,6 +12391,12 @@ var IdentityExchange = class {
 			const challenge = challengeOf(l);
 			if (!challenge) throw new Error("Unknown or reused identity challenge");
 			const challenges = l.challenges.filter((c) => c.nonce !== nonce);
+			const subject = verified?.subject;
+			const received = verified && receivedWithRoom(l.received, id, (r) => r.binding.provider === binding.provider && r.verified.subject === subject, now);
+			if (verified && !received) {
+				verified = void 0;
+				error = reason = TOO_MANY_RECEIVED;
+			}
 			const logged = this.log(l, {
 				type: "result",
 				side: "theirs",
@@ -12355,7 +12407,7 @@ var IdentityExchange = class {
 				ok: !!verified,
 				...reason ? { error: reason } : {}
 			});
-			if (!verified) return {
+			if (!verified || !received) return {
 				...logged,
 				challenges
 			};
@@ -12371,7 +12423,6 @@ var IdentityExchange = class {
 				checkedAt: now,
 				status: "verified"
 			};
-			const received = l.received.filter((r) => r.id !== id && !(r.binding.provider === binding.provider && r.verified.subject === verified.subject));
 			return {
 				...logged,
 				challenges,
@@ -12461,8 +12512,7 @@ var CapsRefusedError = class extends Error {
 var IDENT = /^[a-z0-9][a-z0-9._-]*\/[0-9]+$/;
 var HEX64$1 = /^[0-9a-f]{64}$/;
 var SIG$4 = /^[A-Za-z0-9_-]{86}$/;
-var Z32$2 = /^[ybndrfg8ejkmcpqxot1uwisza345h769]{52}$/;
-var KEY$1 = /^[A-Za-z0-9_-]{43}$/;
+var KEY = /^[A-Za-z0-9_-]{43}$/;
 var hexToKey = (hex) => toBase64Url(Uint8Array.from(hex.match(/../g), (b) => parseInt(b, 16)));
 var keyToHex = (key) => Array.from(fromBase64Url(key), (b) => b.toString(16).padStart(2, "0")).join("");
 /**
@@ -12514,14 +12564,14 @@ function parseDescriptors(value) {
 	const out = {};
 	const iroh = raw["iroh/1"], hyper = raw["hyperdht/1"];
 	if (iroh !== void 0) {
-		if (!iroh || typeof iroh.id !== "string" || !KEY$1.test(iroh.id) || iroh.relay !== void 0 && (typeof iroh.relay !== "string" || !RELAY_URL.test(iroh.relay))) return null;
+		if (!iroh || typeof iroh.id !== "string" || !KEY.test(iroh.id) || iroh.relay !== void 0 && (typeof iroh.relay !== "string" || !RELAY_URL.test(iroh.relay))) return null;
 		out["iroh/1"] = {
 			id: iroh.id,
 			...iroh.relay !== void 0 ? { relay: iroh.relay } : {}
 		};
 	}
 	if (hyper !== void 0) {
-		if (!hyper || typeof hyper.publicKey !== "string" || !KEY$1.test(hyper.publicKey) || hyper.relay !== void 0 && (typeof hyper.relay !== "string" || !RELAY_URL.test(hyper.relay))) return null;
+		if (!hyper || typeof hyper.publicKey !== "string" || !KEY.test(hyper.publicKey) || hyper.relay !== void 0 && (typeof hyper.relay !== "string" || !RELAY_URL.test(hyper.relay))) return null;
 		out["hyperdht/1"] = {
 			publicKey: hyper.publicKey,
 			...hyper.relay !== void 0 ? { relay: hyper.relay } : {}
@@ -12665,7 +12715,7 @@ var CapsKeys = class {
 		if (body.length < 10 || body.length > 16) throw new CapsRefusedError("format", "Malformed capability record.");
 		const [version, rev, issued, author, versions, transports, capabilities, extensions, rawDescriptors, name, choice] = body;
 		const descriptors = parseDescriptors(rawDescriptors);
-		if (version !== 1 || !Number.isSafeInteger(rev) || rev < 0 || !Number.isSafeInteger(issued) || issued <= 0 || typeof author !== "string" || !Z32$2.test(author) || !list$2(versions, CAPS_LIMITS.versions, (v) => Number.isSafeInteger(v) && v > 0) || !list$2(transports, CAPS_LIMITS.transports, ident) || transports.includes("dht/1") || !list$2(capabilities, CAPS_LIMITS.capabilities, ident) || !list$2(extensions, CAPS_LIMITS.extensions, ident) || !descriptors || typeof name !== "string" || utf8Encode(name).length > CAPS_LIMITS.nameBytes || choice !== void 0 && (!ident(choice) || choice === "dht/1")) throw new CapsRefusedError("format", "Malformed capability record.");
+		if (version !== 1 || !Number.isSafeInteger(rev) || rev < 0 || !Number.isSafeInteger(issued) || issued <= 0 || !isZ32Key(author) || !list$2(versions, CAPS_LIMITS.versions, (v) => Number.isSafeInteger(v) && v > 0) || !list$2(transports, CAPS_LIMITS.transports, ident) || transports.includes("dht/1") || !list$2(capabilities, CAPS_LIMITS.capabilities, ident) || !list$2(extensions, CAPS_LIMITS.extensions, ident) || !descriptors || typeof name !== "string" || utf8Encode(name).length > CAPS_LIMITS.nameBytes || choice !== void 0 && (!ident(choice) || choice === "dht/1")) throw new CapsRefusedError("format", "Malformed capability record.");
 		const signer = options.pinned ?? options.expected;
 		if (signer && author !== signer) throw new CapsRefusedError("author", "The capability record is signed by another participation key than this contact's.");
 		try {
@@ -13611,13 +13661,12 @@ var SESSION_RECEIVE_PENDING = {
 	frames: 1024,
 	bytes: 64 * SESSION_FRAME_MAX
 };
-var KEY = /^[ybndrfg8ejkmcpqxot1uwisza345h769]{52}$/;
 var NONCE$1 = /^[A-Za-z0-9_-]{43}$/;
 var SIG$2 = /^[A-Za-z0-9_-]{86}$/;
 var FINGERPRINT = /^[a-f0-9]{64}$/;
 var isList = (v, maximum = 8) => Array.isArray(v) && v.length > 0 && v.length <= maximum && v.every((x) => typeof x === "string" && /^[a-z0-9/-]{1,40}$/.test(x)) && new Set(v).size === v.length;
 function parseOffer(v) {
-	if (!Array.isArray(v.versions) || v.versions.length === 0 || v.versions.length > 8 || !v.versions.every((n) => Number.isSafeInteger(n) && n > 0) || new Set(v.versions).size !== v.versions.length || !isList(v.transports) || !isList(v.capabilities, 32) || typeof v.key !== "string" || !KEY.test(v.key) || typeof v.nonce !== "string" || !NONCE$1.test(v.nonce)) return null;
+	if (!Array.isArray(v.versions) || v.versions.length === 0 || v.versions.length > 8 || !v.versions.every((n) => Number.isSafeInteger(n) && n > 0) || new Set(v.versions).size !== v.versions.length || !isList(v.transports) || !isList(v.capabilities, 32) || !isZ32Key(v.key) || typeof v.nonce !== "string" || !NONCE$1.test(v.nonce)) return null;
 	const extensions = isList(v.extensions, 32) ? v.extensions : void 0;
 	return {
 		t: "pair-offer",
@@ -13748,7 +13797,7 @@ var PairedSession = class {
 	}
 	start() {
 		const binding = this.options.binding;
-		if (!(binding ? (binding.transport === "hyperdht/1" ? /^[a-f0-9]{128}$/.test(binding.context) : FINGERPRINT.test(binding.context)) && binding.identities.length === 2 && binding.identities.every((k) => FINGERPRINT.test(k)) && binding.identities[0] !== binding.identities[1] : this.options.fingerprints?.length === 2 && this.options.fingerprints.every((f) => FINGERPRINT.test(f))) || !this.offer.transports.includes(this.transport) || this.options.rendezvousKeys.some((k) => !KEY.test(k))) return this.fail("Invalid connection binding or unavailable transport");
+		if (!(binding ? (binding.transport === "hyperdht/1" ? /^[a-f0-9]{128}$/.test(binding.context) : FINGERPRINT.test(binding.context)) && binding.identities.length === 2 && binding.identities.every((k) => FINGERPRINT.test(k)) && binding.identities[0] !== binding.identities[1] : this.options.fingerprints?.length === 2 && this.options.fingerprints.every((f) => FINGERPRINT.test(f))) || !this.offer.transports.includes(this.transport) || this.options.rendezvousKeys.some((k) => !isZ32Key(k))) return this.fail("Invalid connection binding or unavailable transport");
 		this.channel.onMessage = (data) => {
 			if (this.stopped) return;
 			const size = data.length;
@@ -16930,7 +16979,7 @@ var CarriedTransport = class {
 var GROUP_FILE_LIMITS = {
 	/** The largest file a group takes. */
 	maxBytes: 104857600,
-	/** A file this size or smaller is fetched without asking (voice messages always are, up to `VOICE_LIMITS`). */
+	/** A file this size or smaller is fetched without asking, a voice message too (one recorded is well inside it). */
 	autoBytes: 8388608,
 	/** What a device keeps of a group's files it fetched without asking; past it, every file is asked about. */
 	autoBytesPerGroup: 268435456,
@@ -16938,6 +16987,10 @@ var GROUP_FILE_LIMITS = {
 	serveBytesPerDay: 1073741824,
 	/** Transfers a holder serves at once, all groups together. */
 	serveAtOnce: 3,
+	/** Bytes a served transfer gets confirmed (or the rest of its file) for it to count as moving in `wantWaitMs`. */
+	serveMoveBytes: 16384,
+	/** How long a served transfer keeps its place while all are taken and another member asks: past it, the place is theirs. */
+	servePlaceMs: 3e5,
 	/** File announcements a member sends to one group in a minute. */
 	announcePerMinute: 8,
 	/** File announcements of one member of a group fetched by themselves in `announceWindowMs`; past it, kept for a Download. */
@@ -16964,11 +17017,21 @@ var GROUP_FILE_LIMITS = {
 	* left for the next holder too.
 	*/
 	wantWaitMs: 3e4,
+	/**
+	* How long a served transfer with all its bytes confirmed waits for the member's word that its check passed once the
+	* member's next want has overtaken it.
+	*/
+	doneWaitMs: 5e3,
 	/** A file session closes this long after its last transfer ends. */
 	sessionIdleMs: 6e4,
 	/** File sessions opening at once, and open at once, all groups together. */
 	sessionsOpening: 2,
 	sessionsOpen: 4,
+	/**
+	* What a transfer must bring in `wantWaitMs` (or the rest of its file, when less) to count as moving: a holder that
+	* sends a few bytes at a time is left as one that stalls.
+	*/
+	wantMoveBytes: 16384,
 	/** The longest file name and type kept from a description. */
 	nameChars: 255,
 	mimeChars: 255
@@ -17053,11 +17116,11 @@ function groupFileFallback(file) {
 	return `${fileMessageText(file)} (${formatFileSize(file.size)}): update Ghostly to get files in groups`;
 }
 /**
-* Whether a device fetches a file by itself (WISP 503 § Automatic and asked downloads): a voice message always, any
-* other file up to `autoBytes` while what it took that way from the group stays within `autoBytesPerGroup`.
+* Whether a device fetches a file by itself (WISP 503 § Automatic and asked downloads): up to `autoBytes` while what
+* it took that way from the group stays within `autoBytesPerGroup`. A voice message too: one recorded (15 minutes at
+* most, about 3.6 MB) always fits, and a bigger file the author called a voice message is asked about like any other.
 */
 function fetchesByItself(file, keptAutomatically, limits = GROUP_FILE_LIMITS) {
-	if (file.voice) return true;
 	return file.size <= limits.autoBytes && keptAutomatically + file.size <= limits.autoBytesPerGroup;
 }
 //#endregion
@@ -17329,7 +17392,7 @@ var VALUE = {
 	max: "(\\d[\\d.,\\u00a0\\u202f' ]*?)"
 };
 var escape = (text) => text.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-Object.keys(ENGINE_ERRORS).map((code) => {
+var PATTERNS = Object.keys(ENGINE_ERRORS).map((code) => {
 	const names = [];
 	const source = ENGINE_ERRORS[code].split(/(\{\w+\})/).map((part) => {
 		const value = /^\{(\w+)\}$/.exec(part);
@@ -17343,6 +17406,18 @@ Object.keys(ENGINE_ERRORS).map((code) => {
 		pattern: new RegExp(`^${source}$`)
 	};
 });
+/** The code and values of a text the engine wrote, or null for any other text (it is then shown as it is). */
+function parseEngineError(text) {
+	const trimmed = text.trim();
+	for (const { code, names, pattern } of PATTERNS) {
+		const match = pattern.exec(trimmed);
+		if (match) return {
+			code,
+			values: Object.fromEntries(names.map((name, i) => [name, match[i + 1]]))
+		};
+	}
+	return null;
+}
 //#endregion
 //#region ../core/src/ghostlink.ts
 /**
@@ -17699,6 +17774,24 @@ var GhostLink = class {
 	/** Edit frames the contact may send per window; the rest go unconfirmed and come again. */
 	editsReceived = new RateWindow(30, EDIT_RATE_WINDOW_MS);
 	wakeReceived = new RateWindow(6, 6e4);
+	/**
+	* The contact's name and picture, each saved when it changes: said once a session and when changed, so a handful a
+	* minute each. Past that only the newest waits, read once the window has room again.
+	*/
+	peerSaid = {
+		"paired-nick": {
+			window: new RateWindow(6, 6e4),
+			read: null,
+			timer: null
+		},
+		"paired-avatar": {
+			window: new RateWindow(6, 6e4),
+			read: null,
+			timer: null
+		}
+	};
+	/** Identity-proof frames the contact may send per window; the rest are dropped before they are read. */
+	identityReceived = new RateWindow(40, IDENTITY_FRAME_WINDOW_MS);
 	livenessTimer = null;
 	peerAnswersPings = false;
 	/** When the ping awaiting its pong went, and the round trip last measured on this session. */
@@ -19167,8 +19260,9 @@ var GhostLink = class {
 	}
 	/**
 	* Ends the idle live session on this transport and lets its listener go, for a chat in use that found every one
-	* taken. The contact hears a goodbye, as when an app quits, rather than finding out when its pings go unanswered; the
-	* record then lists the transport undescribed, so it stops dialling here. The chat goes on over the DHT (or WebRTC),
+	* taken. The contact hears a goodbye that says so (`yield`, `peerYielded`), rather than finding out when its pings go
+	* unanswered, and does not watch for this app as for one that quit; the record then lists the transport undescribed,
+	* so it stops dialling here. The chat goes on over the DHT (or WebRTC),
 	* and takes a listener again the same way once it is in use. False when the session may not end (see above).
 	*/
 	async yieldEndpoint(transport, idleMs) {
@@ -19180,7 +19274,10 @@ var GhostLink = class {
 		this.yielding = true;
 		try {
 			try {
-				this.channel?.send(JSON.stringify({ t: "paired-bye" }));
+				this.channel?.send(JSON.stringify({
+					t: "paired-bye",
+					yield: true
+				}));
 			} catch {}
 			await new Promise((resolve) => setTimeout(resolve, YIELD_BYE_MS));
 			this.disconnect();
@@ -21230,7 +21327,10 @@ var GhostLink = class {
 						return;
 					}
 					if (frame?.t === "paired-bye") {
-						if (paired.state.status === "ready") this.peerDeparted(channel);
+						if (paired.state.status === "ready") {
+							if (frame.yield === true) this.peerYielded(channel);
+							else this.peerDeparted(channel);
+						}
 						return;
 					}
 					if (!frame || typeof frame !== "object") return;
@@ -21309,25 +21409,15 @@ var GhostLink = class {
 						return;
 					}
 					if (typeof frame?.t === "string" && frame.t.startsWith("idp-") && this.identitySupport) {
-						await this.options.events?.onIdentityProof?.(frame);
+						if (this.identityReceived.take()) await this.options.events?.onIdentityProof?.(frame);
 						return;
 					}
 					if (typeof frame?.t === "string" && frame.t.startsWith("proof-") && this.peerProofSupport) {
 						await this.options.events?.onPeerProof?.(frame);
 						return;
 					}
-					if (frame?.t === "paired-avatar") {
-						const avatar = sanitizeAvatar(frame.a);
-						if (avatar !== void 0) this.options.events?.onPeerAvatar?.(avatar);
-						return;
-					}
-					if (frame?.t === "paired-nick") {
-						const nick = sanitizeNick(frame.n);
-						if (typeof frame.n === "string") this.options.events?.onPeerNick?.(nick ?? null);
-						if (nick !== this.peerNickOverride) {
-							this.peerNickOverride = nick ?? null;
-							this.options.events?.onPresence?.(this.presence);
-						}
+					if (frame?.t === "paired-avatar" || frame?.t === "paired-nick") {
+						this.peerSays(channel, frame.t, frame);
 						return;
 					}
 					if (frame?.t === "paired-capabilities") {
@@ -21684,6 +21774,18 @@ var GhostLink = class {
 		this.peerLost("bye");
 	}
 	/**
+	* The contact gave this session's listener up to another chat (`yieldEndpoint`): its app is still there, and its
+	* record now lists the transport undescribed, so there is nothing to dial and no return to watch for. The session
+	* ends now, and the chat reads the contact at its own pace; the contact dials once it takes a listener back. Taken
+	* as a goodbye, it was watched as an app that quit: 89 reads of its key in the 2 minutes after a yield on the
+	* Desktop, against 6 at the background pace (bug hunt, 2026-10-15).
+	*/
+	peerYielded(channel) {
+		if (this.channel !== channel || this.stopped) return;
+		traceLink(this.myPubKeyZ32, "peer-yielded", {});
+		this.disconnect();
+	}
+	/**
 	* A packet of the contact's not seen before, fresh, while nothing is live, soon after a live session ended: it is back
 	* (its app restarted), so the wait that the attempts since built up is over, and the next dial goes now. Once per
 	* loss: a contact that is there but unreachable publishes often, and the wait between attempts is what spares the
@@ -21778,6 +21880,57 @@ var GhostLink = class {
 		offered.woke = true;
 		if (!this.dialing) setTimeout(() => this.maybeKnockEarly(offered.epoch), 0);
 	}
+	/**
+	* A name or picture the contact said, once it is one (reading it costs little; saving it is what counts): past the
+	* window the newest waits for room on this session, so the last word still counts.
+	*/
+	peerSays(channel, kind, frame) {
+		let read;
+		if (kind === "paired-avatar") {
+			const avatar = sanitizeAvatar(frame.a);
+			if (avatar === void 0) return;
+			read = () => this.options.events?.onPeerAvatar?.(avatar);
+		} else {
+			const nick = sanitizeNick(frame.n) ?? null, said = typeof frame.n === "string";
+			read = () => {
+				if (said) this.options.events?.onPeerNick?.(nick);
+				if (nick !== this.peerNickOverride) {
+					this.peerNickOverride = nick;
+					this.options.events?.onPresence?.(this.presence);
+				}
+			};
+		}
+		const held = this.peerSaid[kind];
+		if (!held.timer && held.window.take()) {
+			read();
+			return;
+		}
+		held.read = read;
+		if (held.timer) return;
+		const due = () => {
+			held.timer = null;
+			if (this.channel !== channel || !held.read) {
+				held.read = null;
+				return;
+			}
+			if (!held.window.take()) {
+				held.timer = setTimeout(due, held.window.wait());
+				return;
+			}
+			const next = held.read;
+			held.read = null;
+			next();
+		};
+		held.timer = setTimeout(due, held.window.wait());
+	}
+	/** What the contact said of itself and was still waiting goes with the session: the next one says it again. */
+	dropPeerSaid() {
+		for (const said of Object.values(this.peerSaid)) {
+			if (said.timer) clearTimeout(said.timer);
+			said.timer = null;
+			said.read = null;
+		}
+	}
 	/** A ping on the session right after a wake, with `PONG_WAIT_MS` for its answer: none, and the session is dead. */
 	probeAfterWake(channel) {
 		if (!this.peerAnswersPings || this.paired?.state.status !== "ready") return;
@@ -21820,6 +21973,7 @@ var GhostLink = class {
 		this.channel = this.httpHost = this.httpClient = this.files = null;
 		this.peerServicesOverride = null;
 		this.peerNickOverride = null;
+		this.dropPeerSaid();
 		this.sessionCapabilities.reset();
 		this.typingSender.reset();
 		this.typingReceiver.clear();
@@ -22304,6 +22458,10 @@ function parsePayParams(body, destination) {
 	if (body.tag !== "payRequest") throw new Error(`${destination.domain} answered with something other than a pay request${typeof body.tag === "string" ? ` (${reason(body.tag)})` : ""}`);
 	if (typeof body.callback !== "string") throw new Error("The pay request has no callback");
 	const callback = acceptUrl(body.callback);
+	if (callback.host !== new URL(destination.url).host) {
+		if (callback.protocol !== "https:") throw new Error("Lightning addresses and LNURLs must use HTTPS");
+		if (isLocalHost(callback.hostname)) throw new Error(`${destination.domain} asks for the invoice at a local address`);
+	}
 	const { minSendable, maxSendable, metadata, commentAllowed } = body;
 	if (!Number.isSafeInteger(minSendable) || !Number.isSafeInteger(maxSendable) || minSendable <= 0 || maxSendable < minSendable) throw new Error("The pay request has invalid amount limits");
 	const minSat = Math.ceil(minSendable / 1e3), maxSat = Math.floor(maxSendable / 1e3);
@@ -22442,10 +22600,14 @@ function decodeSvcbRecords(dnsPacket) {
 	}
 	return records;
 }
-/** The homeserver a Pubky key's packet names: the z-base-32 key its `_pubky` record points at, or undefined. */
+/**
+* The homeserver a Pubky key's packet names: the z-base-32 key its `_pubky` record points at, or undefined. The target
+* is read next as a key (`pubkyRecords` checks the homeserver's packet against it), so only a canonical one names a
+* homeserver; a respelled one is none, not a lookup that fails as "no records".
+*/
 function pubkyHomeserverOf(dnsPacket, userZ32) {
 	const record = decodeSvcbRecords(dnsPacket).find((r) => r.name === `_pubky.${userZ32}` || r.name === "_pubky");
-	return record && Z32$1.test(record.target) ? record.target : void 0;
+	return record && isZ32Key(record.target) ? record.target : void 0;
 }
 /**
 * The homeserver's web endpoint from its own packet: of the HTTPS/SVCB records at its root, the lowest priority one
@@ -22722,6 +22884,8 @@ function assertTokenUnits(amount) {
 function assertWholeSats(amount) {
 	if (!Number.isSafeInteger(amount) || amount <= 0 || amount > 0x775f05a074000) throw new Error("Enter a positive whole amount in sats");
 }
+/** Arkade and Bark addresses are bech32m with `ark` on Bitcoin and `tark` on the test networks (one case only). */
+var arkAddressPrefix = (network) => network === "bitcoin" ? "ark1" : "tark1";
 function validatePaymentTarget(value, now = Date.now()) {
 	if (!value || typeof value !== "object") throw new Error("Invalid payment target");
 	const t = value;
@@ -22760,6 +22924,7 @@ function validatePaymentTarget(value, now = Date.now()) {
 		"regtest"
 	].includes(t.network)) throw new Error("Unsupported Bark network");
 	if (typeof t.address !== "string" || !t.address || t.address.length > 4096 || typeof t.provider !== "string" || t.provider.length > 512) throw new Error("Invalid payment destination");
+	if ((t.method === "arkade" || t.method === "bark") && (t.address !== t.address.toLowerCase() && t.address !== t.address.toUpperCase() || !t.address.toLowerCase().startsWith(arkAddressPrefix(t.network)))) throw new Error(`That is not an Ark address on ${t.network === "bitcoin" ? "Bitcoin" : t.network}`);
 	if (t.method !== "bitcoin" && t.method !== "fedimint" && t.method !== "spark") {
 		const url = new URL(t.provider);
 		if (url.username || url.password || url.search || url.hash || url.protocol !== "https:" && !(url.protocol === "http:" && [
@@ -24402,7 +24567,7 @@ function shortAtprotoDid(did) {
 }
 /** The record key of a proof: its proof key (z-base-32, already a valid record key), so removal finds it. */
 function atprotoProofRkey(proofKey) {
-	if (!/^[ybndrfg8ejkmcpqxot1uwisza345h769]{52}$/.test(proofKey)) throw new Error("Invalid proof key");
+	if (!isZ32Key(proofKey)) throw new Error("Invalid proof key");
 	return proofKey;
 }
 var fragment = (id, did, name) => id === `#${name}` || id === `${did}#${name}`;
@@ -25824,6 +25989,28 @@ var fileAad = (f) => JSON.stringify([
 	f.ts
 ]);
 var isFileBox = isSealedBox(MAX_FILE_BOX);
+/** The author's name (`MAX_NICK_LENGTH` characters of up to four bytes each), sealed; signed apart from `xs` (`ns`). */
+var MAX_NICK_BOX = Math.ceil(1088 / 3) + 4;
+var nickAad = (f) => JSON.stringify([
+	"ghostly-group/1 nick",
+	f.g,
+	f.e,
+	f.s,
+	f.n,
+	f.ts
+]);
+var nickSigned = (f, nk) => utf8Encode(JSON.stringify([
+	"ghostly-group/1 nick",
+	f.g,
+	f.e,
+	f.s,
+	f.n,
+	f.ts,
+	nk.n,
+	nk.c
+]));
+var isNickBox = isSealedBox(MAX_NICK_BOX);
+var isSignature = (v) => typeof v === "string" && v.length === 86 && B64$1.test(v);
 var B64$1 = /^[A-Za-z0-9_-]*$/;
 var secretAad$1 = (g, e, member) => JSON.stringify([
 	"ghostly-group/1 secret",
@@ -25963,7 +26150,7 @@ var ownKey = (f) => `${f.e}:${f.n}`;
 /** What a frame weighs in a log, roughly: its boxes plus the fixed fields around them. */
 var frameKey$1 = (f) => `${f.s}:${f.e}:${f.n}`;
 /** What a kept frame counts for against `GROUP_LIMITS.relayBytes`. */
-var frameBytes = (f) => f.c.length + (f.m?.c.length ?? 0) + (f.r?.c.length ?? 0) + (f.sc?.c.length ?? 0) + (f.fl?.c.length ?? 0) + 400;
+var frameBytes = (f) => f.c.length + (f.m?.c.length ?? 0) + (f.r?.c.length ?? 0) + (f.sc?.c.length ?? 0) + (f.fl?.c.length ?? 0) + (f.nk?.c.length ?? 0) + 400;
 /** Only the fields an edit frame has, as `clean` does for a message. */
 var cleanEdit = (f) => ({
 	t: GROUP_EDIT_FRAME,
@@ -26007,7 +26194,14 @@ function clean(f) {
 			c: f.fl.c
 		} } : {},
 		...readFirstPlace(f.o, f.e) ? { o: readFirstPlace(f.o, f.e) } : {},
-		...typeof f.xs === "string" && f.xs.length === 86 && B64$1.test(f.xs) ? { xs: f.xs } : {}
+		...typeof f.xs === "string" && f.xs.length === 86 && B64$1.test(f.xs) ? { xs: f.xs } : {},
+		...isNickBox(f.nk) && isSignature(f.ns) ? {
+			nk: {
+				n: f.nk.n,
+				c: f.nk.c
+			},
+			ns: f.ns
+		} : {}
 	};
 }
 /** Whether the member whose sync this is lacks a frame: above what it has from that sender, or one it names as missing. */
@@ -26077,6 +26271,8 @@ var GroupSession = class {
 	asked = /* @__PURE__ */ new Map();
 	/** The signed leave of each member I last passed on, kept for an admin that was away (`byesHeld`). In memory only. */
 	byesPassed = /* @__PURE__ */ new Map();
+	/** Member → when the name I hold for it was said: its message's time, or the moment an edge said it (`heardName`). In memory only. */
+	nickAt = /* @__PURE__ */ new Map();
 	queue = Promise.resolve();
 	/** One metadata frame that names a commit or an epoch I do not have yet: tried again when the chain moves. */
 	pendingMeta;
@@ -26435,7 +26631,7 @@ var GroupSession = class {
 	rewelcome(memberKey) {
 		return this.serialize(async () => {
 			this.requireAdmin();
-			if (!rosterHas(this.roster, memberKey) || memberKey === this.myKey) throw new Error("Not a member");
+			if (!rosterHas(this.roster, memberKey) || memberKey === this.myKey || !isZ32Key(memberKey)) throw new Error("Not a member");
 			const chain = this.state.chain;
 			let admitted = chain.length - 1;
 			while (admitted >= 0 && !(chain[admitted].k === "add" && chain[admitted].s === memberKey)) admitted--;
@@ -26517,7 +26713,7 @@ var GroupSession = class {
 		await this.persist();
 		for (const [key] of previous.m) {
 			if (key === this.myKey) continue;
-			const member = rosterHas(roster, key);
+			const member = rosterHas(roster, key) && isZ32Key(key);
 			this.hooks.send(key, {
 				t: "group-commit",
 				g: this.id,
@@ -26695,6 +26891,8 @@ var GroupSession = class {
 			...extra.file ? { fl: encryptText(key, fileAad(header), JSON.stringify(extra.file)) } : {},
 			...o ? { o } : {}
 		};
+		const nick = sanitizeNick(this.hooks.nick?.());
+		const nk = nick === void 0 ? void 0 : encryptText(key, nickAad(header), nick);
 		return {
 			t: "group-msg",
 			...unsigned,
@@ -26703,7 +26901,11 @@ var GroupSession = class {
 			xs: toBase64Url(sign(messageSignedWhole({
 				...unsigned,
 				...boxes
-			}), this.identity.seed))
+			}), this.identity.seed)),
+			...nk ? {
+				nk,
+				ns: toBase64Url(sign(nickSigned(header, nk), this.identity.seed))
+			} : {}
 		};
 	}
 	/** Into my bounded log, for members who missed it. */
@@ -26897,10 +27099,12 @@ var GroupSession = class {
 	setNick(key, nick) {
 		return this.serialize(async () => {
 			const clean = sanitizeNick(nick);
+			this.nickAt.set(key, this.clock());
 			if ((this.state.nicks[key] ?? void 0) === clean) return;
 			if (clean) this.state.nicks[key] = clean;
 			else delete this.state.nicks[key];
-			await this.persist();
+			if (key === this.myKey) await this.persist();
+			else this.persistSoon();
 			this.hooks.changed();
 		});
 	}
@@ -27132,6 +27336,7 @@ var GroupSession = class {
 		const key = epochKeys(secret, this.id, raw.e).message;
 		const text = decryptText(key, messageAad$1(raw), raw.nn, raw.c);
 		if (text === null) return;
+		if (this.heardName(key, raw)) this.hooks.changed();
 		const firstFrame = first && {
 			...raw,
 			e: first.e,
@@ -27245,6 +27450,26 @@ var GroupSession = class {
 			return false;
 		}
 	}
+	/**
+	* The author's name in a message (`nk`), when the author's signature over it (`ns`) holds: any copy, handed on or
+	* not, whole or not, since a member handing it on can only drop it. Taken only from a message newer than the one it
+	* last came in, or than the moment an edge last said it (`setNick`), so a catch-up's older pages never bring back a
+	* name the member changed since. Whether the name I hold changed.
+	*/
+	heardName(key, raw) {
+		if (!isNickBox(raw.nk) || !isSignature(raw.ns) || raw.ts <= (this.nickAt.get(raw.s) ?? 0)) return false;
+		try {
+			if (!verify(fromBase64Url(raw.ns), nickSigned(raw, raw.nk), publicKeyFromZ32(raw.s))) return false;
+		} catch {
+			return false;
+		}
+		const nick = sanitizeNick(decryptText(key, nickAad(raw), raw.nk.n, raw.nk.c));
+		if (nick === void 0) return false;
+		this.nickAt.set(raw.s, raw.ts);
+		if (this.state.nicks[raw.s] === nick) return false;
+		this.state.nicks[raw.s] = nick;
+		return true;
+	}
 	openMentions(key, raw, text, everyone) {
 		if (!isMentionsBox(raw.m)) return [];
 		const plain = decryptText(key, mentionsAad(raw), raw.m.n, raw.m.c);
@@ -27436,7 +27661,7 @@ var GroupSession = class {
 		await this.replayWaiting();
 	}
 	async receiveSync(from, frame) {
-		if (!rosterHas(this.roster, from) || !Number.isSafeInteger(frame.e) || frame.e < 0 || typeof frame.h !== "string") return;
+		if (!rosterHas(this.roster, from) || !isZ32Key(from) || !Number.isSafeInteger(frame.e) || frame.e < 0 || typeof frame.h !== "string") return;
 		let answered = this.syncsAnswered.get(from);
 		if (!answered) this.syncsAnswered.set(from, answered = new RateWindow(GROUP_LIMITS.syncAnswers, GROUP_LIMITS.syncWindowMs, () => this.hooks.clock?.() ?? Date.now()));
 		if (!answered.take()) return;
@@ -28972,7 +29197,7 @@ var CommunitySession = class {
 			commit
 		});
 		if (FRESH.has(kind)) {
-			for (const [key] of roster) if (key !== this.myKey) this.hooks.addressed(key, {
+			for (const [key] of roster) if (key !== this.myKey && isZ32Key(key)) this.hooks.addressed(key, {
 				t: "group-secret",
 				v: 2,
 				g: this.id,
@@ -29019,7 +29244,7 @@ var CommunitySession = class {
 	rewelcome(memberKey) {
 		return this.serialize(async () => {
 			this.requireMember();
-			if (!rosterHas(this.roster, memberKey) || memberKey === this.myKey) throw new Error("Not a member");
+			if (!rosterHas(this.roster, memberKey) || memberKey === this.myKey || !isZ32Key(memberKey)) throw new Error("Not a member");
 			for (let i = this.state.chain.length - 1; i >= 0; i--) {
 				const c = this.state.chain[i];
 				if (c.k === "add" && c.s === memberKey) return this.welcomeFor(memberKey, communityCommitHash(c));
@@ -29085,7 +29310,10 @@ var CommunitySession = class {
 				seedB64: entry?.seedB64 ?? ""
 			};
 			await this.persist();
-			if (entry) for (const key of this.others) this.hooks.addressed(key, this.entryFrame(key));
+			if (entry) for (const key of this.others) {
+				const frame = this.entryFrame(key);
+				if (frame) this.hooks.addressed(key, frame);
+			}
 			this.hooks.changed();
 			return this.state.entry.key;
 		});
@@ -29701,7 +29929,7 @@ var CommunitySession = class {
 		for (const { from, frame } of ready) await this.receiveMessage(from, frame);
 	}
 	async receiveSync(from, frame) {
-		if (!this.isRecentMember(from) || !Number.isSafeInteger(frame.e) || typeof frame.h !== "string") return;
+		if (!this.isRecentMember(from) || !isZ32Key(from) || !Number.isSafeInteger(frame.e) || typeof frame.h !== "string") return;
 		let answered = this.syncsAnswered.get(from);
 		if (!answered) this.syncsAnswered.set(from, answered = new RateWindow(COMMUNITY_LIMITS.syncAnswers, COMMUNITY_LIMITS.syncWindowMs, () => this.hooks.clock?.() ?? Date.now()));
 		if (!answered.take()) return;
@@ -29816,7 +30044,7 @@ var CommunitySession = class {
 	/** The current entry seed sealed to a member, when I hold it: sealed once per seed, not on every sync answer. */
 	entryFrame(to) {
 		const { key, seedB64 } = this.state.entry;
-		if (!key || !seedB64) return null;
+		if (!key || !seedB64 || !isZ32Key(to)) return null;
 		const sealed = this.sealedEntries.get(to);
 		if (sealed?.seedB64 === seedB64 && sealed.frame.x === key) return { ...sealed.frame };
 		const frame = {
@@ -30986,6 +31214,6 @@ function appStoreDecision(held, read) {
 	return read.digest === held.digest ? "same" : "equivocation";
 }
 //#endregion
-export { COMMUNITY_EDIT_FRAME as $, cardUrl as $a, budgetRetryMs as $c, PeerProofs as $i, GROUP_WANT_FRAME as $n, HTTP_SERVICE_PROTO as $o, deviceWakeRequest as $r, enrollCancelFrame as $s, didDhtFromPublicKey as $t, CommunitySession as A, COMMUNITY_REACTION_FRAME as Aa, TURN_PUT_WINDOW_MS as Ac, normalizeDomain as Ai, pubkyProofPath as An, DirectPathWatch as Ao, rankHubs as Ar, handoffStreamKey as As, verifyAtprotoRecordProof as At, knockRecords as B, wireReaction as Ba, signTurnPacket as Bc, IDENTITY_MAX_EVIDENCE as Bi, isFederationId as Bn, LIMITS as Bo, TYPING_REFRESH_MS as Br, readHandoffVerified as Bs, didWebDocumentUrl as Bt, sha256Paced as C, EDIT_BUFFER_MS as Ca, deviceEchoNonce as Cc, decodeDnsResponse as Ci, PUBKY_PROOF_MAX_BYTES as Cn, GROUP_MEMBER_CAP as Co, freshHubs as Cr, handoffEphemeral as Cs, atprotoProofRkey as Ct, openGroupTyping as D, parseLinkPreview as Da, newDeviceSetSecret as Dc, encodeDnsQuery as Di, normalizePubkyKey as Dn, rosterHas as Do, mergeLobby as Dr, handoffPakeFrame as Ds, parseAtprotoDidDocument as Dt, groupTypingEpoch as E, dhtEditId as Ea, devicePingFrame as Ec, domainWellKnownFile as Ei, newPubkyProofFolder as En, commitHash as Eo, mergeBeacon as Er, handoffOfferFrame as Es, normalizeAtprotoHandle as Et, KNOCK_TTL_MS as F, queueReaction as Fa, TURN_LAST_SEQUENCE as Fc, wellKnownUrl as Fi, decodeBolt11 as Fn, presenceSeenAt as Fo, ChatFiles as Fr, readHandoffDone as Fs, checkDidJws as Ft, groupWakeFrame as G, ITEM_STATES as Ga, turnStatedVerifier as Gc, boundVerifiedIdentity as Gi, LIVENESS_PING_MS as Gn, answersOffer as Go, PIN_LIMITS as Gr, setAckFrame as Gs, normalizeDid as Gt, readKnocks as H, readReply as Ha, turnInstance as Hc, IDENTITY_REVOCATION_LABEL as Hi, parseFedimintRequestPayload as Hn, encodeControl as Ho, sanitizeTypingStatus as Hr, SET_ACK as Hs, didWebFileNames as Ht, decodeGroupEntryLink as I, reactionEmoji as Ia, TURN_MAX as Ic, CapsExchange as Ii, ENDPOINT as In, GhostlyHttpError as Io, FILE_LIMITS as Ir, readHandoffHave as Is, checkDidSignature as It, GROUP_LIMITS as J, RUN_RESULTS as Ja, RelayTransport as Jc, identityStatement as Ji, pairedMessageFrame as Jn, callSignalHeardAt as Jo, pinIsNewer as Jr, verifySetUpdate as Js, parseDidSignaturePaste as Jt, groupWakes as K, PR_CHECKS as Ka, turnVerifierMark as Kc, emptyIdentityLedger as Ki, PAIRED_FRAME_TOO_LARGE as Kn, buildSdpFromSignal as Ko, mayPin as Kr, setUpdateFrame as Ks, parseDid as Kt, encodeGroupEntryLink as L, reactionIsNewer as La, firstDeviceSetSecret as Lc, DHT_TEXT_CAPABILITY as Li, cashuRequestPayload as Ln, formatLocalTarget as Lo, transferEnded as Lr, readHandoffHello as Ls, didGhostlyServiceEntry as Lt, communityHasFrame as M, REACTION_LIMITS as Ma, TURN_SETTLE_MS as Mc, recordsFromWellKnown as Mi, pubkyHomeserverOf as Mn, DHT_POLL_INTERVALS as Mo, readBeaconHead as Mr, newHandoffId as Ms, DID_FILE_MAX_BYTES as Mt, decodeCommunityLink as N, ReactionWindow as Na, classifyTurnRead as Nc, recordsName as Ni, requestLnurlInvoice as Nn, EXPECT_PEER_MS as No, readLobby as Nr, readHandoffAck as Ns, DID_JWS_MAX_LENGTH as Nt, sealGroupTyping as O, forwardedAgain as Oa, seedSigner as Oc, isPublicAddress as Oi, pubkyProofCapability as On, verifyCommitSignature as Oo, newerHead as Or, handoffReleaseFrame as Os, shortAtprotoDid as Ot, encodeCommunityLink as P, nextReactionNumber as Pa, turnPutSummary as Pc, txtValue as Pi, resolveLightningDestination as Pn, RELAY_POLL_INTERVALS as Po, shouldBeHub as Pr, readHandoffCancel as Ps, DidError as Pt, frameBytes as Q, cardLine as Qa, traceLink as Qc, lastSharedWithMe as Qi, GROUP_HAVE_FRAME as Qn, emptyLinkRecords as Qo, WakeLimiter as Qr, ENROLL_PROOF as Qs, didDhtDocument as Qt, entryParams as R, readReaction as Ra, nextTurnPosition as Rc, capsDescriptors as Ri, fedimintRequestPayload as Rn, parseLocalTarget as Ro, transferStalled as Rr, readHandoffPake as Rs, didJwsAlg as Rt, readAppBundleAsync as S, parseVideoMeta as Sa, deviceEchoFrame as Sc, DOMAIN_FILE_MAX_BYTES as Si, isBitcoinAddress as Sn, readCanonicalJson as So, doorHubs as Sr, handoffDigest as Ss, atprotoProofRecord as St, GroupTypingBoard as T, RateWindow as Ta, deviceLinkPairing as Tc, domainTxtRecord as Ti, isPubkyProofFolder as Tn, MEMBER_KEY as To, lobbyRecords as Tr, handoffManifestFrames as Ts, isAtprotoDid as Tt, GROUP_WAKE_FRAME as U, replySnippet as Ua, turnKeys as Uc, IdentityCheckUnavailable as Ui, GhostLink as Un, CALL_SIGNAL_MAX_AGE_MS as Uo, typingActivity as Ur, SET_UPDATE as Us, didWebFileUrl as Ut, mergeKnocks as V, pairedReplyAuthor as Va, signTurnRelease as Vc, IDENTITY_MAX_VALIDITY as Vi, parseCashuRequestPayload as Vn, decodeControl as Vo, TypingSender as Vr, sealHandoffPiece as Vs, didWebFile as Vt, GroupWakeLimiter as W, BUTTON_ID as Wa, turnName as Wc, IdentityExchange as Wi, INVITE_TAKEN as Wn, RTC_CONFIG as Wo, GROUP_PIN_FRAME as Wr, readSetUpdate as Ws, didWebHost as Wt, GROUP_READ_NOTE as X, appCardId as Xa, normalizeRelayUrl as Xc, receivedIdentityStatus as Xi, engineText as Xn, parseCallSignal as Xo, readPin as Xr, ENROLL_GRANT as Xs, staticDidDocument as Xt, GROUP_REACTED_FRAME as Y, STATUS_CARD_LIMITS as Ya, currentRelays as Yc, newIdentityBinding as Yi, engineError as Yn, extractParamsFromSdp as Yo, pinNumberHolds as Yr, ENROLL_DONE as Ys, signingKeys as Yt, GroupSession as Z, buttonLabelClash as Za, setLinkTraceSink as Zc, revokesIdentity as Zi, GROUP_FILE_LIMITS as Zn, signalHasVideo as Zo, WAKE_CALL_INTERVAL_MS as Zr, ENROLL_HELLO as Zs, strictBase64Url as Zt, assembleAppBundle as _, VOICE_LIMITS as _a, inviteOwnership as _c, HoldKeys as _i, randomBytes as _l, walletNetworkOf as _n, readAppRevocations as _o, meshHubs as _r, handoffBusyFrame as _s, ATPROTO_DECLARED_SCOPE as _t, planAppUpdate as a, irohRelayUrl as aa, enrollProofFrame as ac, vapidKeysMatch as ai, newerPacket as al, EVM_TEST_CHAINS as an, heardTime as ao, readGroupHave as ar, HANDOFF_HAVE as as, groupName as at, pacer as b, parseVoiceMeta as ba, ENROLL_CAPABILITY as bc, newMailbox as bi, utf8Decode as bl, sparkAddressKind as bn, canonicalJson as bo, beaconKeys as br, handoffContextProof as bs, ATPROTO_PROOF_SCOPE as bt, readAppStore as c, peekDhtMailbox as ca, verifyEnrollProof as cc, isAppVersion as ci, createIdentity as cl, SEPOLIA_TEST_USDT as cn, APP_PREFIXES as co, CarriedTransport as cr, HANDOFF_PAKE as cs, SshSigError as ct, APP_BUNDLE_LIMITS as d, parseImageMeta as da, readDeviceInvite as dc, EDIT_CAPABILITY as di, publicKeyFromZ32 as dl, USDT_PUBLIC_RPC as dn, appRef as do, SIGNAL_HOLD_MS as dr, HANDOFF_TIMINGS as ds, sameSshKey as dt, emptyProofLedger as ea, enrollCancelReason as ec, newWakeToken as ei, isDiscoveryBudgetError as el, encodeDidDhtDeactivated as en, checkStatusCard as eo, GROUP_WANT_NO_FRAME as er, LEGACY_SERVICES as es, GROUP_EDIT_FRAME as et, APP_BUNDLE_MAGIC as f, readImageMeta as fa, OwnInviteError as fc, STATUS_CARD_CAPABILITY as fi, verify as fl, WALLET_NETWORKS as fn, checkAppRevokeStatement as fo, SIGNAL_REPLY_MS as fr, HANDOFF_VERIFIED as fs, sshSignCommand as ft, appViewOf as g, PLAYABLE_AUDIO as ga, inviteLink as gc, HOLD_LIMITS as gi, fromBase64Url as gl, validatePaymentTarget as gn, readAppRevocation as go, mayBeHub as gr, handoffAttemptSucceeded as gs, decodeAnyBitcoinAddress as gt, appDigest as h, sanitizeMime as ha, encodeInviteCode as hc, HOLD_DATED_BACK_MS as hi, bytesEqual as hl, formatPaymentAmount as hn, isAppRef as ho, MESH_HUBS as hr, handoffAttemptFailed as hs, BitcoinAddressError as ht, checkAppBeforeRun as i, irohDescriptor as ia, enrollHelloFrame as ic, checkPushEndpoint as ii, createRelayPayload as il, ETHEREUM_USDT as in, claimedTime as io, readGroupFileMeta as ir, HANDOFF_DONE as is, mentionsMember as it, GROUP_READ_NOTE_COMMUNITY as j, GROUP_REACTION_FRAME as ja, TURN_RAISE_READ_TIMEOUT_MS as jc, recordsFromTxt as ji, homeserverWebEndpoint as jn, AWAITING_PEER_MS as jo, readBeacon as jr, handoffVersions as js, DID_DOCUMENT_MAX_BYTES as jt, COMMUNITY_LIMITS as k, readForwarded as ka, webCryptoSigner as kc, nip05RootKey as ki, pubkyProofFile as kn, edgeParams as ko, pickHubs as kr, handoffRetryAfter as ks, AtprotoProofError as kt, readAppStoreSteps as l, DHT_FILE_CAPABILITY as la, createDeviceInvite as lc, APPS_CAPABILITY as li, identityFromSeed as ll, SEPOLIA_TEST_USDT_FAUCET as ln, APP_STATEMENT_LIMITS as lo, GROUP_SIGNAL_FRAME as lr, HANDOFF_PIECE_BYTES as ls, parseSshPublicKey as lt, APP_PERMISSIONS as m, sanitizeFileName as ma, decodeInviteCode as mc, HOLD_CAPABILITY as mi, sanitizeAvatar as ml, assertWholeSats as mn, isAppKey as mo, readGroupSignal as mr, handoffAttemptAllowed as ms, verifyBitcoinMessage as mt, appStoreDecision as n, TRANSPORTS as na, enrollDoneFrame as nc, relayRequest as ni, PacketTooLargeError as nl, resolveDidDht as nn, statusCardText as no, groupFileFallback as nr, HANDOFF_ACK as ns, carryMentions as nt, APP_STORE_LIMITS as o, DHT_FILE_TOO_LARGE as oa, readEnrollGrant as oc, APP_DATA_MAX_BYTES as oi, openRelayPayload as ol, ONCHAIN_PROVIDER as on, receivedTimestamp as oo, readGroupWant as or, HANDOFF_HELLO as os, SSHSIG_MAX_ARMOR as ot, APP_ICON_PATH as p, formatFileSize as pa, createChatInvite as pc, UPGRADE_CAPABILITY as pi, MAX_AVATAR_LENGTH as pl, assertTokenUnits as pn, isAppHash as po, groupSignalFrame as pr, filePartName as ps, verifySshSignature as pt, parseGroupWakeFrame as q, PR_STATES as qa, DEFAULT_RELAYS as qc, identityRevocationValue as qi, pairedMessageFits as qn, callRtcConfig as qo, nextPinNumber as qr, signTombstone as qs, parseDidDocument as qt, appUpdateDecision as r, automaticTransport as ra, enrollGrantFrame as rc, wakeRequest as ri, RELAY_PAYLOAD_MAX_BYTES as rl, signDidDhtPacket as rn, arrivalKey as ro, isGroupMessageId as rr, HANDOFF_CANCEL as rs, parseCommunityEdit as rt, checkAppStoreIndex as s, DHT_MESSAGE_TTL as sa, readEnrollHello as sc, chatAppId as si, parseRelayPayload as sl, PaymentPreflightError as sn, shownTime as so, readGroupWantNo as sr, HANDOFF_OFFER as ss, SSHSIG_NAMESPACE as st, appRevocationFor as t, validExternalKey as ta, enrollDigits as tc, parseWakeFrame as ti, withRequestOptions as tl, encodeDidDhtPacket as tn, sameButtonText as to, fetchesByItself as tr, serviceIdFromName as ts, GROUP_EDIT_TEXT_BYTES as tt, signAppStore as u, dhtFileId as ua, deviceInviteJoinerParams as uc, BUTTONS_CAPABILITY as ui, identityFromSeedB64 as ul, TEST_USDT_FAUCET_AMOUNT as un, appFingerprint as uo, SIGNAL_FRESH_MS as ur, HANDOFF_REQUEST as us, parseSshSignature as ut, checkAppManifest as v, baseMime as va, ownInviteRefusal as vc, HoldRefusedError as vi, toBase64Url as vl, SPARK_NETWORKS as vn, signAppObject as vo, pickMeshHubs as vr, handoffCancelFrame as vs, ATPROTO_FULL_SCOPE as vt, GROUP_TYPING_FRAME as w, EDIT_RATE_WINDOW_MS as wa, deviceKeyZ32 as wc, dnsProofName as wi, isPubkyKey as wn, MAX_GROUP_CHAIN as wo, lobbyKeys as wr, handoffHelloFrame as ws, checkAtprotoProofRecord as wt, readAppBundle as x, voicePeaksOf as xa, HANDOFF_CAPABILITY as xc, readManifest as xi, utf8Encode as xl, sparkInvoiceDetails as xn, canonicalJsonBytes as xo, beaconRecords as xr, handoffDataFrame as xs, atprotoDidMethod as xt, isAppUrl as y, fileMessageText as ya, DEVICES_CAPABILITY as yc, isHoldUrl as yi, toZ32 as yl, SPARK_PROVIDER as yn, signAppRevocation as yo, COMMUNITY_TOPOLOGY as yr, handoffContext as ys, ATPROTO_PROOF_COLLECTION as yt, knockIdentity as z, validReactionNumber as za, readTurnPacket as zc, dialDescriptors as zi, findEndpoint as zn, webLocalFetch as zo, TYPING_KINDS as zr, readHandoffTurnFrame as zs, didSignedMessages as zt };
+export { COMMUNITY_EDIT_FRAME as $, buttonLabelClash as $a, currentRelays as $c, revokesIdentity as $i, GROUP_FILE_LIMITS as $n, extractParamsFromSdp as $o, WAKE_CALL_INTERVAL_MS as $r, ENROLL_DONE as $s, didDhtFromPublicKey as $t, CommunitySession as A, forwardedAgain as Aa, devicePingFrame as Ac, isPublicAddress as Ai, pubkyProofFile as An, rosterAdmin as Ao, newerHead as Ar, handoffOfferFrame as As, verifyAtprotoRecordProof as At, knockRecords as B, readReaction as Ba, TURN_MAX as Bc, capsDescriptors as Bi, findEndpoint as Bn, GhostlyHttpError as Bo, transferStalled as Br, readHandoffHave as Bs, didWebDocumentUrl as Bt, sha256Paced as C, parseImageMeta as Ca, DEVICES_CAPABILITY as Cc, readManifest as Ci, randomBytes as Cl, isBitcoinAddress as Cn, canonicalJsonBytes as Co, beaconRecords as Cr, handoffContext as Cs, atprotoProofRkey as Ct, openGroupTyping as D, RateWindow as Da, deviceEchoNonce as Dc, domainTxtRecord as Di, utf8Encode as Dl, newPubkyProofFolder as Dn, MEMBER_KEY as Do, lobbyRecords as Dr, handoffEphemeral as Ds, parseAtprotoDidDocument as Dt, groupTypingEpoch as E, EDIT_RATE_WINDOW_MS as Ea, deviceEchoFrame as Ec, dnsProofName as Ei, utf8Decode as El, isPubkyProofFolder as En, MAX_GROUP_CHAIN as Eo, lobbyKeys as Er, handoffDigest as Es, normalizeAtprotoHandle as Et, KNOCK_TTL_MS as F, ReactionWindow as Fa, TURN_RAISE_READ_TIMEOUT_MS as Fc, recordsName as Fi, resolveLightningDestination as Fn, AWAITING_PEER_MS as Fo, readLobby as Fr, handoffVersions as Fs, checkDidJws as Ft, groupWakeFrame as G, replySnippet as Ga, signTurnRelease as Gc, IdentityCheckUnavailable as Gi, INVITE_TAKEN as Gn, decodeControl as Go, typingActivity as Gr, sealHandoffPiece as Gs, normalizeDid as Gt, readKnocks as H, wireReaction as Ha, nextTurnPosition as Hc, IDENTITY_MAX_EVIDENCE as Hi, parseCashuRequestPayload as Hn, parseLocalTarget as Ho, TYPING_REFRESH_MS as Hr, readHandoffPake as Hs, didWebFileNames as Ht, decodeGroupEntryLink as I, nextReactionNumber as Ia, TURN_SETTLE_MS as Ic, txtValue as Ii, decodeBolt11 as In, DHT_POLL_INTERVALS as Io, shouldBeHub as Ir, newHandoffId as Is, checkDidSignature as It, GROUP_LIMITS as J, PR_CHECKS as Ja, turnName as Jc, emptyIdentityLedger as Ji, pairedMessageFits as Jn, RTC_CONFIG as Jo, mayPin as Jr, readSetUpdate as Js, parseDidSignaturePaste as Jt, groupWakes as K, BUTTON_ID as Ka, turnInstance as Kc, IdentityExchange as Ki, LIVENESS_PING_MS as Kn, encodeControl as Ko, GROUP_PIN_FRAME as Kr, SET_ACK as Ks, parseDid as Kt, encodeGroupEntryLink as L, queueReaction as La, classifyTurnRead as Lc, wellKnownUrl as Li, ENDPOINT as Ln, EXPECT_PEER_MS as Lo, ChatFiles as Lr, readHandoffAck as Ls, didGhostlyServiceEntry as Lt, communityHasFrame as M, COMMUNITY_REACTION_FRAME as Ma, seedSigner as Mc, normalizeDomain as Mi, homeserverWebEndpoint as Mn, verifyCommitSignature as Mo, rankHubs as Mr, handoffReleaseFrame as Ms, DID_FILE_MAX_BYTES as Mt, decodeCommunityLink as N, GROUP_REACTION_FRAME as Na, webCryptoSigner as Nc, recordsFromTxt as Ni, pubkyHomeserverOf as Nn, edgeParams as No, readBeacon as Nr, handoffRetryAfter as Ns, DID_JWS_MAX_LENGTH as Nt, sealGroupTyping as O, dhtEditId as Oa, deviceKeyZ32 as Oc, domainWellKnownFile as Oi, normalizePubkyKey as On, commitHash as Oo, mergeBeacon as Or, handoffHelloFrame as Os, shortAtprotoDid as Ot, encodeCommunityLink as P, REACTION_LIMITS as Pa, TURN_PUT_WINDOW_MS as Pc, recordsFromWellKnown as Pi, requestLnurlInvoice as Pn, DirectPathWatch as Po, readBeaconHead as Pr, handoffStreamKey as Ps, DidError as Pt, frameBytes as Q, appCardId as Qa, RelayTransport as Qc, receivedIdentityStatus as Qi, parseEngineError as Qn, callSignalHeardAt as Qo, readPin as Qr, verifySetUpdate as Qs, didDhtDocument as Qt, entryParams as R, reactionEmoji as Ra, turnPutSummary as Rc, CapsExchange as Ri, cashuRequestPayload as Rn, RELAY_POLL_INTERVALS as Ro, FILE_LIMITS as Rr, readHandoffCancel as Rs, didJwsAlg as Rt, readAppBundleAsync as S, parseVideoMeta as Sa, ownInviteRefusal as Sc, newMailbox as Si, isZ32Key as Sl, sparkInvoiceDetails as Sn, canonicalJson as So, beaconKeys as Sr, handoffCancelFrame as Ss, atprotoProofRecord as St, GroupTypingBoard as T, EDIT_BUFFER_MS as Ta, HANDOFF_CAPABILITY as Tc, decodeDnsResponse as Ti, toZ32 as Tl, isPubkyKey as Tn, GROUP_MEMBER_CAP as To, freshHubs as Tr, handoffDataFrame as Ts, isAtprotoDid as Tt, GROUP_WAKE_FRAME as U, pairedReplyAuthor as Ua, readTurnPacket as Uc, IDENTITY_MAX_VALIDITY as Ui, parseFedimintRequestPayload as Un, webLocalFetch as Uo, TypingSender as Ur, readHandoffTurnFrame as Us, didWebFileUrl as Ut, mergeKnocks as V, validReactionNumber as Va, firstDeviceSetSecret as Vc, dialDescriptors as Vi, isFederationId as Vn, formatLocalTarget as Vo, TYPING_KINDS as Vr, readHandoffHello as Vs, didWebFile as Vt, GroupWakeLimiter as W, readReply as Wa, signTurnPacket as Wc, IDENTITY_REVOCATION_LABEL as Wi, GhostLink as Wn, LIMITS as Wo, sanitizeTypingStatus as Wr, readHandoffVerified as Ws, didWebHost as Wt, GROUP_READ_NOTE as X, RUN_RESULTS as Xa, turnVerifierMark as Xc, identityStatement as Xi, engineError as Xn, buildSdpFromSignal as Xo, pinIsNewer as Xr, setUpdateFrame as Xs, staticDidDocument as Xt, GROUP_REACTED_FRAME as Y, PR_STATES as Ya, turnStatedVerifier as Yc, identityRevocationValue as Yi, pairedMessageFrame as Yn, answersOffer as Yo, nextPinNumber as Yr, setAckFrame as Ys, signingKeys as Yt, GroupSession as Z, STATUS_CARD_LIMITS as Za, DEFAULT_RELAYS as Zc, newIdentityBinding as Zi, engineText as Zn, callRtcConfig as Zo, pinNumberHolds as Zr, signTombstone as Zs, strictBase64Url as Zt, assembleAppBundle as _, VOICE_LIMITS as _a, createChatInvite as _c, HOLD_DATED_BACK_MS as _i, MAX_AVATAR_LENGTH as _l, validatePaymentTarget as _n, isAppRef as _o, MESH_HUBS as _r, filePartName as _s, ATPROTO_DECLARED_SCOPE as _t, planAppUpdate as a, automaticTransport as aa, enrollDigits as ac, wakeRequest as ai, withRequestOptions as al, EVM_TEST_CHAINS as an, arrivalKey as ao, isGroupMessageId as ar, serviceIdFromName as as, groupName as at, pacer as b, parseVoiceMeta as ba, inviteLink as bc, HoldRefusedError as bi, bytesEqual as bl, SPARK_PROVIDER as bn, signAppObject as bo, pickMeshHubs as br, handoffAttemptSucceeded as bs, ATPROTO_PROOF_SCOPE as bt, readAppStore as c, DHT_FILE_TOO_LARGE as ca, enrollHelloFrame as cc, APP_DATA_MAX_BYTES as ci, createRelayPayload as cl, SEPOLIA_TEST_USDT as cn, receivedTimestamp as co, readGroupWant as cr, HANDOFF_DONE as cs, SshSigError as ct, APP_BUNDLE_LIMITS as d, DHT_FILE_CAPABILITY as da, readEnrollHello as dc, APPS_CAPABILITY as di, parseRelayPayload as dl, USDT_PUBLIC_RPC as dn, APP_STATEMENT_LIMITS as do, GROUP_SIGNAL_FRAME as dr, HANDOFF_OFFER as ds, sameSshKey as dt, lastSharedWithMe as ea, ENROLL_GRANT as ec, WakeLimiter as ei, normalizeRelayUrl as el, encodeDidDhtDeactivated as en, cardLine as eo, GROUP_HAVE_FRAME as er, parseCallSignal as es, GROUP_EDIT_FRAME as et, APP_BUNDLE_MAGIC as f, dhtFileId as fa, verifyEnrollProof as fc, BUTTONS_CAPABILITY as fi, createIdentity as fl, WALLET_NETWORKS as fn, appFingerprint as fo, SIGNAL_FRESH_MS as fr, HANDOFF_PAKE as fs, sshSignCommand as ft, appViewOf as g, PLAYABLE_AUDIO as ga, OwnInviteError as gc, HOLD_CAPABILITY as gi, verify as gl, formatPaymentAmount as gn, isAppKey as go, readGroupSignal as gr, HANDOFF_VERIFIED as gs, decodeAnyBitcoinAddress as gt, appDigest as h, sanitizeMime as ha, readDeviceInvite as hc, UPGRADE_CAPABILITY as hi, publicKeyFromZ32 as hl, assertWholeSats as hn, isAppHash as ho, groupSignalFrame as hr, HANDOFF_TIMINGS as hs, BitcoinAddressError as ht, checkAppBeforeRun as i, TRANSPORTS as ia, enrollCancelReason as ic, relayRequest as ii, isDiscoveryBudgetError as il, ETHEREUM_USDT as in, statusCardText as io, groupFileFallback as ir, LEGACY_SERVICES as is, mentionsMember as it, GROUP_READ_NOTE_COMMUNITY as j, readForwarded as ja, newDeviceSetSecret as jc, nip05RootKey as ji, pubkyProofPath as jn, rosterHas as jo, pickHubs as jr, handoffPakeFrame as js, DID_DOCUMENT_MAX_BYTES as jt, COMMUNITY_LIMITS as k, parseLinkPreview as ka, deviceLinkPairing as kc, encodeDnsQuery as ki, pubkyProofCapability as kn, parseGroupCommit as ko, mergeLobby as kr, handoffManifestFrames as ks, AtprotoProofError as kt, readAppStoreSteps as l, DHT_MESSAGE_TTL as la, enrollProofFrame as lc, chatAppId as li, newerPacket as ll, SEPOLIA_TEST_USDT_FAUCET as ln, shownTime as lo, readGroupWantNo as lr, HANDOFF_HAVE as ls, parseSshPublicKey as lt, APP_PERMISSIONS as m, sanitizeFileName as ma, deviceInviteJoinerParams as mc, STATUS_CARD_CAPABILITY as mi, identityFromSeedB64 as ml, assertTokenUnits as mn, checkAppRevokeStatement as mo, SIGNAL_REPLY_MS as mr, HANDOFF_REQUEST as ms, verifyBitcoinMessage as mt, appStoreDecision as n, emptyProofLedger as na, ENROLL_PROOF as nc, newWakeToken as ni, traceLink as nl, resolveDidDht as nn, checkStatusCard as no, GROUP_WANT_NO_FRAME as nr, emptyLinkRecords as ns, carryMentions as nt, APP_STORE_LIMITS as o, irohDescriptor as oa, enrollDoneFrame as oc, checkPushEndpoint as oi, PacketTooLargeError as ol, ONCHAIN_PROVIDER as on, claimedTime as oo, readGroupFileMeta as or, HANDOFF_ACK as os, SSHSIG_MAX_ARMOR as ot, APP_ICON_PATH as p, formatFileSize as pa, createDeviceInvite as pc, EDIT_CAPABILITY as pi, identityFromSeed as pl, arkAddressPrefix as pn, appRef as po, SIGNAL_HOLD_MS as pr, HANDOFF_PIECE_BYTES as ps, verifySshSignature as pt, parseGroupWakeFrame as q, ITEM_STATES as qa, turnKeys as qc, boundVerifiedIdentity as qi, PAIRED_FRAME_TOO_LARGE as qn, CALL_SIGNAL_MAX_AGE_MS as qo, PIN_LIMITS as qr, SET_UPDATE as qs, parseDidDocument as qt, appUpdateDecision as r, validExternalKey as ra, enrollCancelFrame as rc, parseWakeFrame as ri, budgetRetryMs as rl, signDidDhtPacket as rn, sameButtonText as ro, fetchesByItself as rr, HTTP_SERVICE_PROTO as rs, parseCommunityEdit as rt, checkAppStoreIndex as s, irohRelayUrl as sa, enrollGrantFrame as sc, vapidKeysMatch as si, RELAY_PAYLOAD_MAX_BYTES as sl, PaymentPreflightError as sn, heardTime as so, readGroupHave as sr, HANDOFF_CANCEL as ss, SSHSIG_NAMESPACE as st, appRevocationFor as t, PeerProofs as ta, ENROLL_HELLO as tc, deviceWakeRequest as ti, setLinkTraceSink as tl, encodeDidDhtPacket as tn, cardUrl as to, GROUP_WANT_FRAME as tr, signalHasVideo as ts, GROUP_EDIT_TEXT_BYTES as tt, signAppStore as u, peekDhtMailbox as ua, readEnrollGrant as uc, isAppVersion as ui, openRelayPayload as ul, TEST_USDT_FAUCET_AMOUNT as un, APP_PREFIXES as uo, CarriedTransport as ur, HANDOFF_HELLO as us, parseSshSignature as ut, checkAppManifest as v, baseMime as va, decodeInviteCode as vc, HOLD_LIMITS as vi, sanitizeAvatar as vl, walletNetworkOf as vn, readAppRevocation as vo, mayBeHub as vr, handoffAttemptAllowed as vs, ATPROTO_FULL_SCOPE as vt, GROUP_TYPING_FRAME as w, readImageMeta as wa, ENROLL_CAPABILITY as wc, DOMAIN_FILE_MAX_BYTES as wi, toBase64Url as wl, PUBKY_PROOF_MAX_BYTES as wn, readCanonicalJson as wo, doorHubs as wr, handoffContextProof as ws, checkAtprotoProofRecord as wt, readAppBundle as x, voicePeaksOf as xa, inviteOwnership as xc, isHoldUrl as xi, fromBase64Url as xl, sparkAddressKind as xn, signAppRevocation as xo, COMMUNITY_TOPOLOGY as xr, handoffBusyFrame as xs, atprotoDidMethod as xt, isAppUrl as y, fileMessageText as ya, encodeInviteCode as yc, HoldKeys as yi, sanitizeDisplayText as yl, SPARK_NETWORKS as yn, readAppRevocations as yo, meshHubs as yr, handoffAttemptFailed as ys, ATPROTO_PROOF_COLLECTION as yt, knockIdentity as z, reactionIsNewer as za, TURN_LAST_SEQUENCE as zc, DHT_TEXT_CAPABILITY as zi, fedimintRequestPayload as zn, presenceSeenAt as zo, transferEnded as zr, readHandoffDone as zs, didSignedMessages as zt };
 
-//# sourceMappingURL=src-DDzSERyc.js.map
+//# sourceMappingURL=src-D7gcJElT.js.map