@ghostlytools/cli 1.3.2 → 1.3.4

package/dist/assets/{src-yMUQvdyL.js → src-RQ6OJOUO.js}

@@ -1,7 +1,7 @@
 import { xsalsa20poly1305 } from "@noble/ciphers/salsa.js";
 import { ed25519, x25519 } from "@noble/curves/ed25519.js";
-import { hkdf } from "@noble/hashes/hkdf.js";
 import { sha256, sha512 } from "@noble/hashes/sha2.js";
+import { hkdf } from "@noble/hashes/hkdf.js";
 import { base58, base64, base64urlnopad, bech32, bech32m, createBase58check } from "@scure/base";
 import { hmac } from "@noble/hashes/hmac.js";
 import { hexToBytes } from "@noble/hashes/utils.js";
@@ -123,6 +123,19 @@ function fromZ32(str) {
 	}
 	return out;
 }
+/**
+* A 32-byte key written as the one z-base-32 spelling `toZ32` produces: 52 characters that decode to 32 bytes and
+* encode back to the same string. The last character carries four zero padding bits, so each key has exactly one
+* spelling and keys may be compared as strings (WISP 02). Any other spelling is not a key here.
+*/
+function isZ32Key(value) {
+	if (typeof value !== "string" || value.length !== 52) return false;
+	try {
+		return toZ32(fromZ32(value)) === value;
+	} catch {
+		return false;
+	}
+}
 function randomBytes(length) {
 	const bytes = new Uint8Array(length);
 	crypto.getRandomValues(bytes);
@@ -255,11 +268,26 @@ function tryDecrypt(encoded, key) {
 		return null;
 	}
 }
-//#endregion
-//#region ../core/src/identity.ts
+/**
+* Public keys already derived, by the SHA-256 of their seed, the most recently used last. A chat's start derives the
+* same few seeds' keys again and again (its link, its delivery, its capability record): ~0.25 ms each in V8, ~3.4x
+* that in JSC. The seed itself is never kept, so a seed its owner zeroes leaves nothing behind here.
+*/
+var publicKeys = /* @__PURE__ */ new Map();
+function publicKeyOf(seed) {
+	const id = toBase64Url(sha256(seed));
+	let key = publicKeys.get(id);
+	if (key) publicKeys.delete(id);
+	else {
+		key = ed25519.getPublicKey(seed);
+		if (publicKeys.size >= 1024) publicKeys.delete(publicKeys.keys().next().value);
+	}
+	publicKeys.set(id, key);
+	return key.slice();
+}
 function identityFromSeed(seed) {
 	if (seed.length !== 32) throw new Error("Seed must be exactly 32 bytes");
-	const publicKey = ed25519.getPublicKey(seed);
+	const publicKey = publicKeyOf(seed);
 	return {
 		seed,
 		seedB64: toBase64Url(seed),
@@ -276,7 +304,7 @@ function createIdentity() {
 function publicKeyFromZ32(z32) {
 	if (z32.length !== 52) throw new Error("Invalid public key: expected 52 z-base-32 characters");
 	const bytes = fromZ32(z32);
-	if (bytes.length !== 32) throw new Error("Invalid public key length");
+	if (toZ32(bytes) !== z32) throw new Error("Invalid public key: not canonical z-base-32");
 	return bytes;
 }
 function sign(message, seed) {
@@ -3016,7 +3044,6 @@ function readGhostly(code) {
 	};
 }
 var B64_KEY = /^[A-Za-z0-9_-]{43}$/;
-var Z32_KEY$1 = /^[ybndrfg8ejkmcpqxot1uwisza345h769]{52}$/;
 function readSlashForm(code) {
 	const dht = code.startsWith("pair2d/");
 	const profile = dht || code.startsWith("pair1/") ? "paired-chat/1" : void 0;
@@ -3030,7 +3057,7 @@ function readSlashForm(code) {
 		reason: "not-ghostly"
 	};
 	const [seedB64, peerPubKeyZ32, encKeyB64] = parts;
-	const bad = !B64_KEY.test(seedB64) ? "The seed" : !Z32_KEY$1.test(peerPubKeyZ32) ? "The contact's key" : !B64_KEY.test(encKeyB64) ? "The shared key" : null;
+	const bad = !B64_KEY.test(seedB64) ? "The seed" : !isZ32Key(peerPubKeyZ32) ? "The contact's key" : !B64_KEY.test(encKeyB64) ? "The shared key" : null;
 	if (bad) return {
 		ok: false,
 		reason: "damaged",
@@ -3313,7 +3340,7 @@ var ENROLL_CANCEL_REASONS = [
 	"full",
 	"failed"
 ];
-var KEY$5 = /^[A-Za-z0-9_-]{43}$/;
+var KEY$3 = /^[A-Za-z0-9_-]{43}$/;
 var SIGNATURE$2 = /^[A-Za-z0-9_-]{86}$/;
 var HASH$3 = /^[0-9a-f]{64}$/;
 function checkKey(key, who) {
@@ -3363,7 +3390,7 @@ async function enrollHelloFrame(transcriptHash, inviterKey, joiner, about) {
 * key's over this session's tuple. Null for anything else.
 */
 function readEnrollHello(frame, transcriptHash, inviterKey, sessionKey) {
-	if (frame.t !== "enroll-hello" || typeof frame.k !== "string" || !KEY$5.test(frame.k) || typeof frame.s !== "string" || !SIGNATURE$2.test(frame.s)) return null;
+	if (frame.t !== "enroll-hello" || typeof frame.k !== "string" || !KEY$3.test(frame.k) || typeof frame.s !== "string" || !SIGNATURE$2.test(frame.s)) return null;
 	if (typeof frame.name !== "string" || frame.name.length > 64 || typeof frame.app !== "string" || frame.app.length > 32) return null;
 	const key = fromBase64Url(frame.k);
 	if (key.length !== 32 || toBase64Url(key) !== toBase64Url(sessionKey)) return null;
@@ -3445,7 +3472,7 @@ function enrollGrantFrame(grant) {
 * once and the inviter once, and a turn and `rev` an ordinary record can have. Null for anything else.
 */
 function readEnrollGrant(frame, inviterKey, joinerKey) {
-	if (frame.t !== "enroll-grant" || typeof frame.d !== "string" || !KEY$5.test(frame.d) || !Array.isArray(frame.set) || frame.set.length > 4) return null;
+	if (frame.t !== "enroll-grant" || typeof frame.d !== "string" || !KEY$3.test(frame.d) || !Array.isArray(frame.set) || frame.set.length > 4) return null;
 	if (!Number.isInteger(frame.turn) || frame.turn < 0 || frame.turn > TURN_MAX) return null;
 	if (!Number.isInteger(frame.rev) || frame.rev < 0 || frame.rev >= TURN_REV_LIMIT) return null;
 	const set = [];
@@ -3454,7 +3481,7 @@ function readEnrollGrant(frame, inviterKey, joinerKey) {
 			set.push(null);
 			continue;
 		}
-		if (!Array.isArray(slot) || slot.length !== 2 || typeof slot[0] !== "string" || !KEY$5.test(slot[0]) || typeof slot[1] !== "string" || slot[1].length > 64) return null;
+		if (!Array.isArray(slot) || slot.length !== 2 || typeof slot[0] !== "string" || !KEY$3.test(slot[0]) || typeof slot[1] !== "string" || slot[1].length > 64) return null;
 		set.push({
 			key: fromBase64Url(slot[0]),
 			name: turnName(slot[1])
@@ -3491,7 +3518,7 @@ function enrollCancelReason(frame) {
 //#region ../core/src/setUpdate.ts
 var SET_UPDATE = "set-update";
 var SET_ACK = "set-ack";
-var KEY$4 = /^[A-Za-z0-9_-]{43}$/;
+var KEY$2 = /^[A-Za-z0-9_-]{43}$/;
 var SIGNATURE$1 = /^[A-Za-z0-9_-]{86}$/;
 /** A tombstone packet is a relay payload of 706 bytes (WISP 06 § Record); a little room above it, nothing more. */
 var TOMB = /^[A-Za-z0-9_-]{100,1400}$/;
@@ -3543,7 +3570,7 @@ async function setUpdateFrame(oldAddress, update, signer) {
 * here: that needs the old turn address (`verifySetUpdate`).
 */
 function readSetUpdate(frame) {
-	if (frame.t !== "set-update" || typeof frame.d !== "string" || !KEY$4.test(frame.d) || typeof frame.by !== "string" || !KEY$4.test(frame.by)) return null;
+	if (frame.t !== "set-update" || typeof frame.d !== "string" || !KEY$2.test(frame.d) || typeof frame.by !== "string" || !KEY$2.test(frame.by)) return null;
 	if (typeof frame.s !== "string" || !SIGNATURE$1.test(frame.s) || typeof frame.tomb !== "string" || !TOMB.test(frame.tomb)) return null;
 	if (!Array.isArray(frame.set) || frame.set.length > 4) return null;
 	if (frame.rec !== void 0 && (typeof frame.rec !== "string" || !TOMB.test(frame.rec))) return null;
@@ -3557,7 +3584,7 @@ function readSetUpdate(frame) {
 			signed.push(null);
 			continue;
 		}
-		if (!Array.isArray(slot) || slot.length !== 2 || typeof slot[0] !== "string" || !KEY$4.test(slot[0]) || typeof slot[1] !== "string" || slot[1].length > 64) return null;
+		if (!Array.isArray(slot) || slot.length !== 2 || typeof slot[0] !== "string" || !KEY$2.test(slot[0]) || typeof slot[1] !== "string" || slot[1].length > 64) return null;
 		if (utf8Encode(slot[1]).length > 16 || slot[1].includes("\0")) return null;
 		signed.push([slot[0], slot[1]]);
 		set.push({
@@ -3662,8 +3689,8 @@ var HANDOFF_CANCEL_REASONS = [
 	"password",
 	"stalled"
 ];
-var KEY$3 = /^[A-Za-z0-9_-]{43}$/;
-var DIGEST$2 = KEY$3;
+var KEY$1 = /^[A-Za-z0-9_-]{43}$/;
+var DIGEST$2 = KEY$1;
 var SIGNATURE = /^[A-Za-z0-9_-]{86}$/;
 var ID$5 = /^[A-Za-z0-9_-]{22}$/;
 var B64$4 = /^[A-Za-z0-9_-]*$/;
@@ -3798,7 +3825,7 @@ function handoffHelloFrame(hello) {
 }
 function readHandoffHello(frame) {
 	if (frame.t !== "handoff-hello" || frame.v !== 1) return null;
-	if (!isText$2(frame.e, KEY$3) || fromBase64Url(frame.e).length !== 32) return null;
+	if (!isText$2(frame.e, KEY$1) || fromBase64Url(frame.e).length !== 32) return null;
 	if (!isText$2(frame.app, VERSION_TEXT) || !isCount$1(frame.db, 1e6) || !isPins(frame.pins)) return null;
 	if (typeof frame.room !== "number" || !Number.isSafeInteger(frame.room) || frame.room < -1) return null;
 	if (typeof frame.metered !== "boolean") return null;
@@ -3864,7 +3891,7 @@ function readHandoffPake(frame) {
 		wrong: true
 	} : null;
 	if (!isText$2(frame.m, B64$4) || !frame.m.length || frame.m.length > 4096) return null;
-	if (frame.n === 3 && !isText$2(frame.c, KEY$3)) return null;
+	if (frame.n === 3 && !isText$2(frame.c, KEY$1)) return null;
 	return {
 		n: frame.n,
 		m: frame.m,
@@ -4656,8 +4683,12 @@ function buildSdpFromSignal(signal) {
 function sdpHasCandidates(sdp) {
 	return /^a=candidate:/m.test(sdp ?? "");
 }
-/** How long to keep collecting after the candidate we were waiting for showed up (a call's; a chat's data link sets its own). */
-var ICE_SETTLE_MS = 400;
+/**
+* How long to keep collecting after the candidate we were waiting for showed up (a call's; a chat's data link sets its
+* own, the same). The host candidates are in before it, and a call's signal keeps the first reflexive one only
+* (`pickCallCandidates`): 400 ms held every call's offer, and its answer, back that long for nothing it carried.
+*/
+var ICE_SETTLE_MS = 150;
 /** IPv4 ranges that are not reachable from the internet: this network, private, shared (CGNAT), loopback, link-local, the documentation ones, benchmarking, multicast and up. */
 var NOT_GLOBAL_IPV4 = [
 	[0, 8],
@@ -7160,7 +7191,11 @@ function edgeParams(groupId, mySeed, myZ32, peerZ32) {
 var GROUP_MEMBER_CAP = { max: 32 };
 var MAX_GROUP_CHAIN = 1024;
 var GROUP_ID = /^[A-Za-z0-9_-]{22}$/;
-var MEMBER_KEY = /^[ybndrfg8ejkmcpqxot1uwisza345h769]{52}$/;
+/**
+* A member's key, in its one canonical spelling (`isZ32Key`): a roster names members by string, so a key respelled in
+* its last character would be a second member for one key, and `publicKeyFromZ32` would throw on it past this check.
+*/
+var MEMBER_KEY = { test: isZ32Key };
 var TAG$1 = /^[A-Za-z0-9_-]{43}$/;
 var SIG$6 = /^[A-Za-z0-9_-]{86}$/;
 var HASH$2 = /^[a-f0-9]{64}$/;
@@ -8861,7 +8896,15 @@ var IMAGE_LIMITS = {
 	/** Pixels on either side: the most a JPEG can say, well past what anyone sends as a picture. */
 	maxEdge: 65535,
 	/** How much of a file is read for its size: past a JPEG's EXIF, thumbnails and colour profile. */
-	headBytes: 262144
+	headBytes: 262144,
+	/**
+	* The most pixels a picture drawn in a chat may have: a 50-megapixel phone photo (8160 × 6120), about 200 MB once
+	* decoded. A few kilobytes can say far more (a PNG of 23000 × 23000 is 64 KB and 2 GB decoded): past this a picture
+	* is kept and saved, not drawn.
+	*/
+	previewPixels: 5e7,
+	/** The longest side a picture drawn in a chat may have: a wide panorama. */
+	previewEdge: 16384
 };
 /** Whether a file is a picture, by its type. */
 function isImageMime(mime) {
@@ -10654,6 +10697,7 @@ var PairedFiles = class {
 					return;
 				}
 				if (active) throw new Error("Duplicate active file");
+				if (this.events.replaced?.()) throw new Error("files/3 replaces files/2 on this session");
 				if (typeof frame.name !== "string" || frame.name.length > 1e3 || typeof frame.mime !== "string" || frame.mime.length > 130 || typeof frame.size !== "number" || !Number.isSafeInteger(frame.size) || frame.size < 0 || frame.size > LIMITS.maxFileBytes || typeof frame.timestamp !== "number" || !Number.isSafeInteger(frame.timestamp) || frame.timestamp <= 0 || this.incoming.size >= LIMITS.maxIncomingFilesPerPeer) throw new Error("Invalid file announcement");
 				const file = {
 					id,
@@ -10674,6 +10718,9 @@ var PairedFiles = class {
 				if (forwarded) file.forwarded = forwarded;
 				const stored = await this.events.onStored?.(file);
 				if (this.closed) return;
+				const room = stored ? null : await this.events.room?.().catch(() => null) ?? null;
+				if (this.closed) return;
+				if (room !== null && file.size > room) throw new Error("No room for this file");
 				const sink = stored ? null : this.events.onIncoming(file);
 				if (!stored && (!sink || typeof sink === "string")) throw new Error(typeof sink === "string" ? sink : "File refused");
 				const entry = {
@@ -11811,10 +11858,10 @@ var IDENTITY_MAX_VALIDITY = 3456e4;
 var IDENTITY_MAX_EVIDENCE = 16384;
 /** Unanswered challenges a verifier keeps per conversation. */
 var MAX_CHALLENGES = 8;
+var IDENTITY_FRAME_WINDOW_MS = 6e4;
 var IDENTITY_PROVIDER_ID = /^[a-z][a-z0-9-]{0,31}$/;
 /** Printable ASCII without spaces, so the statement can be built but never needs parsing. */
 var IDENTITY_SUBJECT = /^[\x21-\x7e]{1,512}$/;
-var KEY$2 = /^[ybndrfg8ejkmcpqxot1uwisza345h769]{52}$/;
 var BINDING_NONCE = /^[A-Za-z0-9_-]{22}$/;
 var CHALLENGE_NONCE = /^[A-Za-z0-9_-]{43}$/;
 var HEX64$2 = /^[a-f0-9]{64}$/;
@@ -11836,7 +11883,7 @@ var iso = (seconds) => (/* @__PURE__ */ new Date(seconds * 1e3)).toISOString().r
 var isInt$2 = (v) => Number.isSafeInteger(v) && v > 0;
 function isIdentityBinding(value) {
 	const b = value;
-	return !!b && typeof b === "object" && !Array.isArray(b) && Object.keys(b).sort().join(",") === "expiresAt,issuedAt,key,nonce,provider,subject,v" && b.v === 1 && typeof b.provider === "string" && IDENTITY_PROVIDER_ID.test(b.provider) && typeof b.subject === "string" && IDENTITY_SUBJECT.test(b.subject) && typeof b.key === "string" && KEY$2.test(b.key) && typeof b.nonce === "string" && BINDING_NONCE.test(b.nonce) && isInt$2(b.issuedAt) && isInt$2(b.expiresAt) && b.expiresAt > b.issuedAt && b.expiresAt - b.issuedAt <= 3456e4 && b.expiresAt < 253402300800;
+	return !!b && typeof b === "object" && !Array.isArray(b) && Object.keys(b).sort().join(",") === "expiresAt,issuedAt,key,nonce,provider,subject,v" && b.v === 1 && typeof b.provider === "string" && IDENTITY_PROVIDER_ID.test(b.provider) && typeof b.subject === "string" && IDENTITY_SUBJECT.test(b.subject) && isZ32Key(b.key) && typeof b.nonce === "string" && BINDING_NONCE.test(b.nonce) && isInt$2(b.issuedAt) && isInt$2(b.expiresAt) && b.expiresAt > b.issuedAt && b.expiresAt - b.issuedAt <= 3456e4 && b.expiresAt < 253402300800;
 }
 /**
 * The canonical statement, one line, so it survives every tool and clipboard (no line-ending
@@ -11896,7 +11943,7 @@ function signIdentityPresentation(seed, proofId, scope, nonce, issuedAt) {
 	return toBase64Url(sign(identityPresentationBytes(proofId, scope, nonce, issuedAt), seed));
 }
 function verifyIdentityPresentation(key, sig, proofId, scope, nonce, issuedAt) {
-	if (typeof sig !== "string" || !SIG$5.test(sig) || !KEY$2.test(key)) return false;
+	if (typeof sig !== "string" || !SIG$5.test(sig) || !isZ32Key(key)) return false;
 	return verify(fromBase64Url(sig), identityPresentationBytes(proofId, scope, nonce, issuedAt), publicKeyFromZ32(key));
 }
 var clean$1 = (value, max) => {
@@ -11949,6 +11996,18 @@ function receivedIdentityStatus(r, presenter, audience, now = nowSeconds()) {
 	if (Math.min(r.binding.expiresAt, r.verified.expiresAt ?? Infinity) <= now) return "expired";
 	return r.status === "unconfirmed" ? "unconfirmed" : "verified";
 }
+var standing = (r, now) => r.status !== "withdrawn" && r.status !== "revoked" && Math.min(r.binding.expiresAt, r.verified.expiresAt ?? Infinity) > now;
+/**
+* `received` with room for one more proof: `replaced` (the older proof of the same identity) dropped, then the oldest ones
+* no longer standing; undefined when every place is still taken.
+*/
+function receivedWithRoom(received, id, replaced, now) {
+	const kept = received.filter((r) => r.id !== id && !replaced(r));
+	const gone = kept.filter((r) => !standing(r, now)).sort((a, b) => a.verifiedAt - b.verifiedAt);
+	const drop = new Set(gone.slice(0, Math.max(0, kept.length - 16 + 1)));
+	const out = kept.filter((r) => !drop.has(r));
+	return out.length < 16 ? out : void 0;
+}
 var shortError = (e) => clean$1(e instanceof Error ? e.message : String(e), 160) ?? "Invalid proof";
 /**
 * A check this side could not finish because of what its own network did: a host it refused to contact, a server
@@ -11964,6 +12023,7 @@ var IdentityCheckUnavailable = class extends Error {
 };
 /** What the contact is told when the check failed with an IdentityCheckUnavailable. */
 var IDENTITY_CHECK_UNAVAILABLE = "Your contact's app could not check it. Try again later.";
+var TOO_MANY_RECEIVED = "Your contact keeps too many identities from you already";
 var peerError = (e) => e instanceof IdentityCheckUnavailable ? IDENTITY_CHECK_UNAVAILABLE : shortError(e);
 /**
 * The `idp-*` exchange of one conversation. Frames (all JSON, additive, over the paired channel,
@@ -12188,31 +12248,29 @@ var IdentityExchange = class {
 					});
 					return;
 				}
-				case "idp-withdraw":
+				case "idp-withdraw": {
 					if (!id) return;
-					await this.options.storage.update((l) => {
-						const r = l.received.find((x) => x.id === id);
-						const next = {
-							...l,
-							received: l.received.map((x) => x.id === id ? {
-								...x,
-								status: "withdrawn"
-							} : x)
-						};
-						return r && r.status !== "withdrawn" ? this.log(next, {
-							type: "stopped",
-							side: "theirs",
-							proof: id,
-							provider: r.binding.provider,
-							subject: r.verified.subject,
-							reason: "withdrawn"
-						}) : next;
-					});
+					const r = this.options.storage.read().received.find((x) => x.id === id);
+					if (r && r.status !== "withdrawn") await this.options.storage.update((l) => this.log({
+						...l,
+						received: l.received.map((x) => x.id === id ? {
+							...x,
+							status: "withdrawn"
+						} : x)
+					}, {
+						type: "stopped",
+						side: "theirs",
+						proof: id,
+						provider: r.binding.provider,
+						subject: r.verified.subject,
+						reason: "withdrawn"
+					}));
 					this.send({
 						t: "idp-withdrawn",
 						id
 					});
 					return;
+				}
 				case "idp-withdrawn": {
 					const s = id ? this.shared(id) : void 0;
 					if (s?.status === "withdrawal-pending") await this.setShared({
@@ -12230,25 +12288,11 @@ var IdentityExchange = class {
 	async onRequest(id, provider) {
 		if (!id) return;
 		if (typeof provider !== "string" || !this.options.providers().includes(provider)) {
-			const error = "Your contact's app cannot verify this kind of identity yet";
-			if (typeof provider === "string" && IDENTITY_PROVIDER_ID.test(provider)) await this.options.storage.update((l) => this.log(this.log(l, {
-				type: "shared",
-				side: "theirs",
-				proof: id,
-				provider
-			}), {
-				type: "result",
-				side: "theirs",
-				proof: id,
-				provider,
-				ok: false,
-				error: "This app cannot verify this kind of identity yet"
-			}));
 			this.send({
 				t: "idp-result",
 				id,
 				ok: false,
-				error
+				error: "Your contact's app cannot verify this kind of identity yet"
 			});
 			return;
 		}
@@ -12334,6 +12378,8 @@ var IdentityExchange = class {
 		/** The same, as this side's own timeline says it. */
 		let reason;
 		try {
+			const mayReplace = (r) => r.binding.provider === binding.provider && (r.binding.subject === binding.subject || r.verified.subject === binding.subject);
+			if (!receivedWithRoom(this.options.storage.read().received, id, mayReplace, now)) throw new Error(TOO_MANY_RECEIVED);
 			if (JSON.stringify(evidence ?? null).length > 16384) throw new Error("Evidence too large");
 			if (!verifyIdentityPresentation(binding.key, sig, id, scope, nonce, issuedAt)) throw new Error("The proof key did not sign this conversation's challenge");
 			if (binding.issuedAt > now + 300) throw new Error("The proof is dated in the future");
@@ -12349,6 +12395,12 @@ var IdentityExchange = class {
 			const challenge = challengeOf(l);
 			if (!challenge) throw new Error("Unknown or reused identity challenge");
 			const challenges = l.challenges.filter((c) => c.nonce !== nonce);
+			const subject = verified?.subject;
+			const received = verified && receivedWithRoom(l.received, id, (r) => r.binding.provider === binding.provider && r.verified.subject === subject, now);
+			if (verified && !received) {
+				verified = void 0;
+				error = reason = TOO_MANY_RECEIVED;
+			}
 			const logged = this.log(l, {
 				type: "result",
 				side: "theirs",
@@ -12359,7 +12411,7 @@ var IdentityExchange = class {
 				ok: !!verified,
 				...reason ? { error: reason } : {}
 			});
-			if (!verified) return {
+			if (!verified || !received) return {
 				...logged,
 				challenges
 			};
@@ -12375,7 +12427,6 @@ var IdentityExchange = class {
 				checkedAt: now,
 				status: "verified"
 			};
-			const received = l.received.filter((r) => r.id !== id && !(r.binding.provider === binding.provider && r.verified.subject === verified.subject));
 			return {
 				...logged,
 				challenges,
@@ -12465,8 +12516,7 @@ var CapsRefusedError = class extends Error {
 var IDENT = /^[a-z0-9][a-z0-9._-]*\/[0-9]+$/;
 var HEX64$1 = /^[0-9a-f]{64}$/;
 var SIG$4 = /^[A-Za-z0-9_-]{86}$/;
-var Z32$2 = /^[ybndrfg8ejkmcpqxot1uwisza345h769]{52}$/;
-var KEY$1 = /^[A-Za-z0-9_-]{43}$/;
+var KEY = /^[A-Za-z0-9_-]{43}$/;
 var hexToKey = (hex) => toBase64Url(Uint8Array.from(hex.match(/../g), (b) => parseInt(b, 16)));
 var keyToHex = (key) => Array.from(fromBase64Url(key), (b) => b.toString(16).padStart(2, "0")).join("");
 /**
@@ -12518,14 +12568,14 @@ function parseDescriptors(value) {
 	const out = {};
 	const iroh = raw["iroh/1"], hyper = raw["hyperdht/1"];
 	if (iroh !== void 0) {
-		if (!iroh || typeof iroh.id !== "string" || !KEY$1.test(iroh.id) || iroh.relay !== void 0 && (typeof iroh.relay !== "string" || !RELAY_URL.test(iroh.relay))) return null;
+		if (!iroh || typeof iroh.id !== "string" || !KEY.test(iroh.id) || iroh.relay !== void 0 && (typeof iroh.relay !== "string" || !RELAY_URL.test(iroh.relay))) return null;
 		out["iroh/1"] = {
 			id: iroh.id,
 			...iroh.relay !== void 0 ? { relay: iroh.relay } : {}
 		};
 	}
 	if (hyper !== void 0) {
-		if (!hyper || typeof hyper.publicKey !== "string" || !KEY$1.test(hyper.publicKey) || hyper.relay !== void 0 && (typeof hyper.relay !== "string" || !RELAY_URL.test(hyper.relay))) return null;
+		if (!hyper || typeof hyper.publicKey !== "string" || !KEY.test(hyper.publicKey) || hyper.relay !== void 0 && (typeof hyper.relay !== "string" || !RELAY_URL.test(hyper.relay))) return null;
 		out["hyperdht/1"] = {
 			publicKey: hyper.publicKey,
 			...hyper.relay !== void 0 ? { relay: hyper.relay } : {}
@@ -12669,7 +12719,7 @@ var CapsKeys = class {
 		if (body.length < 10 || body.length > 16) throw new CapsRefusedError("format", "Malformed capability record.");
 		const [version, rev, issued, author, versions, transports, capabilities, extensions, rawDescriptors, name, choice] = body;
 		const descriptors = parseDescriptors(rawDescriptors);
-		if (version !== 1 || !Number.isSafeInteger(rev) || rev < 0 || !Number.isSafeInteger(issued) || issued <= 0 || typeof author !== "string" || !Z32$2.test(author) || !list$2(versions, CAPS_LIMITS.versions, (v) => Number.isSafeInteger(v) && v > 0) || !list$2(transports, CAPS_LIMITS.transports, ident) || transports.includes("dht/1") || !list$2(capabilities, CAPS_LIMITS.capabilities, ident) || !list$2(extensions, CAPS_LIMITS.extensions, ident) || !descriptors || typeof name !== "string" || utf8Encode(name).length > CAPS_LIMITS.nameBytes || choice !== void 0 && (!ident(choice) || choice === "dht/1")) throw new CapsRefusedError("format", "Malformed capability record.");
+		if (version !== 1 || !Number.isSafeInteger(rev) || rev < 0 || !Number.isSafeInteger(issued) || issued <= 0 || !isZ32Key(author) || !list$2(versions, CAPS_LIMITS.versions, (v) => Number.isSafeInteger(v) && v > 0) || !list$2(transports, CAPS_LIMITS.transports, ident) || transports.includes("dht/1") || !list$2(capabilities, CAPS_LIMITS.capabilities, ident) || !list$2(extensions, CAPS_LIMITS.extensions, ident) || !descriptors || typeof name !== "string" || utf8Encode(name).length > CAPS_LIMITS.nameBytes || choice !== void 0 && (!ident(choice) || choice === "dht/1")) throw new CapsRefusedError("format", "Malformed capability record.");
 		const signer = options.pinned ?? options.expected;
 		if (signer && author !== signer) throw new CapsRefusedError("author", "The capability record is signed by another participation key than this contact's.");
 		try {
@@ -13615,13 +13665,12 @@ var SESSION_RECEIVE_PENDING = {
 	frames: 1024,
 	bytes: 64 * SESSION_FRAME_MAX
 };
-var KEY = /^[ybndrfg8ejkmcpqxot1uwisza345h769]{52}$/;
 var NONCE$1 = /^[A-Za-z0-9_-]{43}$/;
 var SIG$2 = /^[A-Za-z0-9_-]{86}$/;
 var FINGERPRINT = /^[a-f0-9]{64}$/;
 var isList = (v, maximum = 8) => Array.isArray(v) && v.length > 0 && v.length <= maximum && v.every((x) => typeof x === "string" && /^[a-z0-9/-]{1,40}$/.test(x)) && new Set(v).size === v.length;
 function parseOffer(v) {
-	if (!Array.isArray(v.versions) || v.versions.length === 0 || v.versions.length > 8 || !v.versions.every((n) => Number.isSafeInteger(n) && n > 0) || new Set(v.versions).size !== v.versions.length || !isList(v.transports) || !isList(v.capabilities, 32) || typeof v.key !== "string" || !KEY.test(v.key) || typeof v.nonce !== "string" || !NONCE$1.test(v.nonce)) return null;
+	if (!Array.isArray(v.versions) || v.versions.length === 0 || v.versions.length > 8 || !v.versions.every((n) => Number.isSafeInteger(n) && n > 0) || new Set(v.versions).size !== v.versions.length || !isList(v.transports) || !isList(v.capabilities, 32) || !isZ32Key(v.key) || typeof v.nonce !== "string" || !NONCE$1.test(v.nonce)) return null;
 	const extensions = isList(v.extensions, 32) ? v.extensions : void 0;
 	return {
 		t: "pair-offer",
@@ -13752,7 +13801,7 @@ var PairedSession = class {
 	}
 	start() {
 		const binding = this.options.binding;
-		if (!(binding ? (binding.transport === "hyperdht/1" ? /^[a-f0-9]{128}$/.test(binding.context) : FINGERPRINT.test(binding.context)) && binding.identities.length === 2 && binding.identities.every((k) => FINGERPRINT.test(k)) && binding.identities[0] !== binding.identities[1] : this.options.fingerprints?.length === 2 && this.options.fingerprints.every((f) => FINGERPRINT.test(f))) || !this.offer.transports.includes(this.transport) || this.options.rendezvousKeys.some((k) => !KEY.test(k))) return this.fail("Invalid connection binding or unavailable transport");
+		if (!(binding ? (binding.transport === "hyperdht/1" ? /^[a-f0-9]{128}$/.test(binding.context) : FINGERPRINT.test(binding.context)) && binding.identities.length === 2 && binding.identities.every((k) => FINGERPRINT.test(k)) && binding.identities[0] !== binding.identities[1] : this.options.fingerprints?.length === 2 && this.options.fingerprints.every((f) => FINGERPRINT.test(f))) || !this.offer.transports.includes(this.transport) || this.options.rendezvousKeys.some((k) => !isZ32Key(k))) return this.fail("Invalid connection binding or unavailable transport");
 		this.channel.onMessage = (data) => {
 			if (this.stopped) return;
 			const size = data.length;
@@ -16942,6 +16991,10 @@ var GROUP_FILE_LIMITS = {
 	serveBytesPerDay: 1073741824,
 	/** Transfers a holder serves at once, all groups together. */
 	serveAtOnce: 3,
+	/** Bytes a served transfer gets confirmed (or the rest of its file) for it to count as moving in `wantWaitMs`. */
+	serveMoveBytes: 16384,
+	/** How long a served transfer keeps its place while all are taken and another member asks: past it, the place is theirs. */
+	servePlaceMs: 3e5,
 	/** File announcements a member sends to one group in a minute. */
 	announcePerMinute: 8,
 	/** File announcements of one member of a group fetched by themselves in `announceWindowMs`; past it, kept for a Download. */
@@ -16978,6 +17031,11 @@ var GROUP_FILE_LIMITS = {
 	/** File sessions opening at once, and open at once, all groups together. */
 	sessionsOpening: 2,
 	sessionsOpen: 4,
+	/**
+	* What a transfer must bring in `wantWaitMs` (or the rest of its file, when less) to count as moving: a holder that
+	* sends a few bytes at a time is left as one that stalls.
+	*/
+	wantMoveBytes: 16384,
 	/** The longest file name and type kept from a description. */
 	nameChars: 255,
 	mimeChars: 255
@@ -17338,7 +17396,7 @@ var VALUE = {
 	max: "(\\d[\\d.,\\u00a0\\u202f' ]*?)"
 };
 var escape = (text) => text.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-Object.keys(ENGINE_ERRORS).map((code) => {
+var PATTERNS = Object.keys(ENGINE_ERRORS).map((code) => {
 	const names = [];
 	const source = ENGINE_ERRORS[code].split(/(\{\w+\})/).map((part) => {
 		const value = /^\{(\w+)\}$/.exec(part);
@@ -17352,6 +17410,18 @@ Object.keys(ENGINE_ERRORS).map((code) => {
 		pattern: new RegExp(`^${source}$`)
 	};
 });
+/** The code and values of a text the engine wrote, or null for any other text (it is then shown as it is). */
+function parseEngineError(text) {
+	const trimmed = text.trim();
+	for (const { code, names, pattern } of PATTERNS) {
+		const match = pattern.exec(trimmed);
+		if (match) return {
+			code,
+			values: Object.fromEntries(names.map((name, i) => [name, match[i + 1]]))
+		};
+	}
+	return null;
+}
 //#endregion
 //#region ../core/src/ghostlink.ts
 /**
@@ -17708,6 +17778,24 @@ var GhostLink = class {
 	/** Edit frames the contact may send per window; the rest go unconfirmed and come again. */
 	editsReceived = new RateWindow(30, EDIT_RATE_WINDOW_MS);
 	wakeReceived = new RateWindow(6, 6e4);
+	/**
+	* The contact's name and picture, each saved when it changes: said once a session and when changed, so a handful a
+	* minute each. Past that only the newest waits, read once the window has room again.
+	*/
+	peerSaid = {
+		"paired-nick": {
+			window: new RateWindow(6, 6e4),
+			read: null,
+			timer: null
+		},
+		"paired-avatar": {
+			window: new RateWindow(6, 6e4),
+			read: null,
+			timer: null
+		}
+	};
+	/** Identity-proof frames the contact may send per window; the rest are dropped before they are read. */
+	identityReceived = new RateWindow(40, IDENTITY_FRAME_WINDOW_MS);
 	livenessTimer = null;
 	peerAnswersPings = false;
 	/** When the ping awaiting its pong went, and the round trip last measured on this session. */
@@ -19176,8 +19264,9 @@ var GhostLink = class {
 	}
 	/**
 	* Ends the idle live session on this transport and lets its listener go, for a chat in use that found every one
-	* taken. The contact hears a goodbye, as when an app quits, rather than finding out when its pings go unanswered; the
-	* record then lists the transport undescribed, so it stops dialling here. The chat goes on over the DHT (or WebRTC),
+	* taken. The contact hears a goodbye that says so (`yield`, `peerYielded`), rather than finding out when its pings go
+	* unanswered, and does not watch for this app as for one that quit; the record then lists the transport undescribed,
+	* so it stops dialling here. The chat goes on over the DHT (or WebRTC),
 	* and takes a listener again the same way once it is in use. False when the session may not end (see above).
 	*/
 	async yieldEndpoint(transport, idleMs) {
@@ -19189,7 +19278,10 @@ var GhostLink = class {
 		this.yielding = true;
 		try {
 			try {
-				this.channel?.send(JSON.stringify({ t: "paired-bye" }));
+				this.channel?.send(JSON.stringify({
+					t: "paired-bye",
+					yield: true
+				}));
 			} catch {}
 			await new Promise((resolve) => setTimeout(resolve, YIELD_BYE_MS));
 			this.disconnect();
@@ -21148,6 +21240,8 @@ var GhostLink = class {
 					else if (paired.supports("files/2")) this.pairedFiles = new PairedFiles(channel, {
 						onIncoming: (file) => events.onFileIncoming?.(file) ?? null,
 						onStored: events.onFileStored,
+						replaced: () => this.supportsLargeFiles,
+						room: events.onFileRoom,
 						onProgress: events.onFileProgress,
 						onComplete: events.onFileComplete,
 						onFailed: events.onFileFailed
@@ -21239,7 +21333,10 @@ var GhostLink = class {
 						return;
 					}
 					if (frame?.t === "paired-bye") {
-						if (paired.state.status === "ready") this.peerDeparted(channel);
+						if (paired.state.status === "ready") {
+							if (frame.yield === true) this.peerYielded(channel);
+							else this.peerDeparted(channel);
+						}
 						return;
 					}
 					if (!frame || typeof frame !== "object") return;
@@ -21318,25 +21415,15 @@ var GhostLink = class {
 						return;
 					}
 					if (typeof frame?.t === "string" && frame.t.startsWith("idp-") && this.identitySupport) {
-						await this.options.events?.onIdentityProof?.(frame);
+						if (this.identityReceived.take()) await this.options.events?.onIdentityProof?.(frame);
 						return;
 					}
 					if (typeof frame?.t === "string" && frame.t.startsWith("proof-") && this.peerProofSupport) {
 						await this.options.events?.onPeerProof?.(frame);
 						return;
 					}
-					if (frame?.t === "paired-avatar") {
-						const avatar = sanitizeAvatar(frame.a);
-						if (avatar !== void 0) this.options.events?.onPeerAvatar?.(avatar);
-						return;
-					}
-					if (frame?.t === "paired-nick") {
-						const nick = sanitizeNick(frame.n);
-						if (typeof frame.n === "string") this.options.events?.onPeerNick?.(nick ?? null);
-						if (nick !== this.peerNickOverride) {
-							this.peerNickOverride = nick ?? null;
-							this.options.events?.onPresence?.(this.presence);
-						}
+					if (frame?.t === "paired-avatar" || frame?.t === "paired-nick") {
+						this.peerSays(channel, frame.t, frame);
 						return;
 					}
 					if (frame?.t === "paired-capabilities") {
@@ -21693,6 +21780,18 @@ var GhostLink = class {
 		this.peerLost("bye");
 	}
 	/**
+	* The contact gave this session's listener up to another chat (`yieldEndpoint`): its app is still there, and its
+	* record now lists the transport undescribed, so there is nothing to dial and no return to watch for. The session
+	* ends now, and the chat reads the contact at its own pace; the contact dials once it takes a listener back. Taken
+	* as a goodbye, it was watched as an app that quit: 89 reads of its key in the 2 minutes after a yield on the
+	* Desktop, against 6 at the background pace (bug hunt, 2026-10-15).
+	*/
+	peerYielded(channel) {
+		if (this.channel !== channel || this.stopped) return;
+		traceLink(this.myPubKeyZ32, "peer-yielded", {});
+		this.disconnect();
+	}
+	/**
 	* A packet of the contact's not seen before, fresh, while nothing is live, soon after a live session ended: it is back
 	* (its app restarted), so the wait that the attempts since built up is over, and the next dial goes now. Once per
 	* loss: a contact that is there but unreachable publishes often, and the wait between attempts is what spares the
@@ -21787,6 +21886,57 @@ var GhostLink = class {
 		offered.woke = true;
 		if (!this.dialing) setTimeout(() => this.maybeKnockEarly(offered.epoch), 0);
 	}
+	/**
+	* A name or picture the contact said, once it is one (reading it costs little; saving it is what counts): past the
+	* window the newest waits for room on this session, so the last word still counts.
+	*/
+	peerSays(channel, kind, frame) {
+		let read;
+		if (kind === "paired-avatar") {
+			const avatar = sanitizeAvatar(frame.a);
+			if (avatar === void 0) return;
+			read = () => this.options.events?.onPeerAvatar?.(avatar);
+		} else {
+			const nick = sanitizeNick(frame.n) ?? null, said = typeof frame.n === "string";
+			read = () => {
+				if (said) this.options.events?.onPeerNick?.(nick);
+				if (nick !== this.peerNickOverride) {
+					this.peerNickOverride = nick;
+					this.options.events?.onPresence?.(this.presence);
+				}
+			};
+		}
+		const held = this.peerSaid[kind];
+		if (!held.timer && held.window.take()) {
+			read();
+			return;
+		}
+		held.read = read;
+		if (held.timer) return;
+		const due = () => {
+			held.timer = null;
+			if (this.channel !== channel || !held.read) {
+				held.read = null;
+				return;
+			}
+			if (!held.window.take()) {
+				held.timer = setTimeout(due, held.window.wait());
+				return;
+			}
+			const next = held.read;
+			held.read = null;
+			next();
+		};
+		held.timer = setTimeout(due, held.window.wait());
+	}
+	/** What the contact said of itself and was still waiting goes with the session: the next one says it again. */
+	dropPeerSaid() {
+		for (const said of Object.values(this.peerSaid)) {
+			if (said.timer) clearTimeout(said.timer);
+			said.timer = null;
+			said.read = null;
+		}
+	}
 	/** A ping on the session right after a wake, with `PONG_WAIT_MS` for its answer: none, and the session is dead. */
 	probeAfterWake(channel) {
 		if (!this.peerAnswersPings || this.paired?.state.status !== "ready") return;
@@ -21829,6 +21979,7 @@ var GhostLink = class {
 		this.channel = this.httpHost = this.httpClient = this.files = null;
 		this.peerServicesOverride = null;
 		this.peerNickOverride = null;
+		this.dropPeerSaid();
 		this.sessionCapabilities.reset();
 		this.typingSender.reset();
 		this.typingReceiver.clear();
@@ -22455,10 +22606,14 @@ function decodeSvcbRecords(dnsPacket) {
 	}
 	return records;
 }
-/** The homeserver a Pubky key's packet names: the z-base-32 key its `_pubky` record points at, or undefined. */
+/**
+* The homeserver a Pubky key's packet names: the z-base-32 key its `_pubky` record points at, or undefined. The target
+* is read next as a key (`pubkyRecords` checks the homeserver's packet against it), so only a canonical one names a
+* homeserver; a respelled one is none, not a lookup that fails as "no records".
+*/
 function pubkyHomeserverOf(dnsPacket, userZ32) {
 	const record = decodeSvcbRecords(dnsPacket).find((r) => r.name === `_pubky.${userZ32}` || r.name === "_pubky");
-	return record && Z32$1.test(record.target) ? record.target : void 0;
+	return record && isZ32Key(record.target) ? record.target : void 0;
 }
 /**
 * The homeserver's web endpoint from its own packet: of the HTTPS/SVCB records at its root, the lowest priority one
@@ -24418,7 +24573,7 @@ function shortAtprotoDid(did) {
 }
 /** The record key of a proof: its proof key (z-base-32, already a valid record key), so removal finds it. */
 function atprotoProofRkey(proofKey) {
-	if (!/^[ybndrfg8ejkmcpqxot1uwisza345h769]{52}$/.test(proofKey)) throw new Error("Invalid proof key");
+	if (!isZ32Key(proofKey)) throw new Error("Invalid proof key");
 	return proofKey;
 }
 var fragment = (id, did, name) => id === `#${name}` || id === `${did}#${name}`;
@@ -25840,6 +25995,28 @@ var fileAad = (f) => JSON.stringify([
 	f.ts
 ]);
 var isFileBox = isSealedBox(MAX_FILE_BOX);
+/** The author's name (`MAX_NICK_LENGTH` characters of up to four bytes each), sealed; signed apart from `xs` (`ns`). */
+var MAX_NICK_BOX = Math.ceil(1088 / 3) + 4;
+var nickAad = (f) => JSON.stringify([
+	"ghostly-group/1 nick",
+	f.g,
+	f.e,
+	f.s,
+	f.n,
+	f.ts
+]);
+var nickSigned = (f, nk) => utf8Encode(JSON.stringify([
+	"ghostly-group/1 nick",
+	f.g,
+	f.e,
+	f.s,
+	f.n,
+	f.ts,
+	nk.n,
+	nk.c
+]));
+var isNickBox = isSealedBox(MAX_NICK_BOX);
+var isSignature = (v) => typeof v === "string" && v.length === 86 && B64$1.test(v);
 var B64$1 = /^[A-Za-z0-9_-]*$/;
 var secretAad$1 = (g, e, member) => JSON.stringify([
 	"ghostly-group/1 secret",
@@ -25979,7 +26156,7 @@ var ownKey = (f) => `${f.e}:${f.n}`;
 /** What a frame weighs in a log, roughly: its boxes plus the fixed fields around them. */
 var frameKey$1 = (f) => `${f.s}:${f.e}:${f.n}`;
 /** What a kept frame counts for against `GROUP_LIMITS.relayBytes`. */
-var frameBytes = (f) => f.c.length + (f.m?.c.length ?? 0) + (f.r?.c.length ?? 0) + (f.sc?.c.length ?? 0) + (f.fl?.c.length ?? 0) + 400;
+var frameBytes = (f) => f.c.length + (f.m?.c.length ?? 0) + (f.r?.c.length ?? 0) + (f.sc?.c.length ?? 0) + (f.fl?.c.length ?? 0) + (f.nk?.c.length ?? 0) + 400;
 /** Only the fields an edit frame has, as `clean` does for a message. */
 var cleanEdit = (f) => ({
 	t: GROUP_EDIT_FRAME,
@@ -26023,7 +26200,14 @@ function clean(f) {
 			c: f.fl.c
 		} } : {},
 		...readFirstPlace(f.o, f.e) ? { o: readFirstPlace(f.o, f.e) } : {},
-		...typeof f.xs === "string" && f.xs.length === 86 && B64$1.test(f.xs) ? { xs: f.xs } : {}
+		...typeof f.xs === "string" && f.xs.length === 86 && B64$1.test(f.xs) ? { xs: f.xs } : {},
+		...isNickBox(f.nk) && isSignature(f.ns) ? {
+			nk: {
+				n: f.nk.n,
+				c: f.nk.c
+			},
+			ns: f.ns
+		} : {}
 	};
 }
 /** Whether the member whose sync this is lacks a frame: above what it has from that sender, or one it names as missing. */
@@ -26093,6 +26277,8 @@ var GroupSession = class {
 	asked = /* @__PURE__ */ new Map();
 	/** The signed leave of each member I last passed on, kept for an admin that was away (`byesHeld`). In memory only. */
 	byesPassed = /* @__PURE__ */ new Map();
+	/** Member → when the name I hold for it was said: its message's time, or the moment an edge said it (`heardName`). In memory only. */
+	nickAt = /* @__PURE__ */ new Map();
 	queue = Promise.resolve();
 	/** One metadata frame that names a commit or an epoch I do not have yet: tried again when the chain moves. */
 	pendingMeta;
@@ -26451,7 +26637,7 @@ var GroupSession = class {
 	rewelcome(memberKey) {
 		return this.serialize(async () => {
 			this.requireAdmin();
-			if (!rosterHas(this.roster, memberKey) || memberKey === this.myKey) throw new Error("Not a member");
+			if (!rosterHas(this.roster, memberKey) || memberKey === this.myKey || !isZ32Key(memberKey)) throw new Error("Not a member");
 			const chain = this.state.chain;
 			let admitted = chain.length - 1;
 			while (admitted >= 0 && !(chain[admitted].k === "add" && chain[admitted].s === memberKey)) admitted--;
@@ -26533,7 +26719,7 @@ var GroupSession = class {
 		await this.persist();
 		for (const [key] of previous.m) {
 			if (key === this.myKey) continue;
-			const member = rosterHas(roster, key);
+			const member = rosterHas(roster, key) && isZ32Key(key);
 			this.hooks.send(key, {
 				t: "group-commit",
 				g: this.id,
@@ -26711,6 +26897,8 @@ var GroupSession = class {
 			...extra.file ? { fl: encryptText(key, fileAad(header), JSON.stringify(extra.file)) } : {},
 			...o ? { o } : {}
 		};
+		const nick = sanitizeNick(this.hooks.nick?.());
+		const nk = nick === void 0 ? void 0 : encryptText(key, nickAad(header), nick);
 		return {
 			t: "group-msg",
 			...unsigned,
@@ -26719,7 +26907,11 @@ var GroupSession = class {
 			xs: toBase64Url(sign(messageSignedWhole({
 				...unsigned,
 				...boxes
-			}), this.identity.seed))
+			}), this.identity.seed)),
+			...nk ? {
+				nk,
+				ns: toBase64Url(sign(nickSigned(header, nk), this.identity.seed))
+			} : {}
 		};
 	}
 	/** Into my bounded log, for members who missed it. */
@@ -26913,10 +27105,12 @@ var GroupSession = class {
 	setNick(key, nick) {
 		return this.serialize(async () => {
 			const clean = sanitizeNick(nick);
+			this.nickAt.set(key, this.clock());
 			if ((this.state.nicks[key] ?? void 0) === clean) return;
 			if (clean) this.state.nicks[key] = clean;
 			else delete this.state.nicks[key];
-			await this.persist();
+			if (key === this.myKey) await this.persist();
+			else this.persistSoon();
 			this.hooks.changed();
 		});
 	}
@@ -27148,6 +27342,7 @@ var GroupSession = class {
 		const key = epochKeys(secret, this.id, raw.e).message;
 		const text = decryptText(key, messageAad$1(raw), raw.nn, raw.c);
 		if (text === null) return;
+		if (this.heardName(key, raw)) this.hooks.changed();
 		const firstFrame = first && {
 			...raw,
 			e: first.e,
@@ -27261,6 +27456,26 @@ var GroupSession = class {
 			return false;
 		}
 	}
+	/**
+	* The author's name in a message (`nk`), when the author's signature over it (`ns`) holds: any copy, handed on or
+	* not, whole or not, since a member handing it on can only drop it. Taken only from a message newer than the one it
+	* last came in, or than the moment an edge last said it (`setNick`), so a catch-up's older pages never bring back a
+	* name the member changed since. Whether the name I hold changed.
+	*/
+	heardName(key, raw) {
+		if (!isNickBox(raw.nk) || !isSignature(raw.ns) || raw.ts <= (this.nickAt.get(raw.s) ?? 0)) return false;
+		try {
+			if (!verify(fromBase64Url(raw.ns), nickSigned(raw, raw.nk), publicKeyFromZ32(raw.s))) return false;
+		} catch {
+			return false;
+		}
+		const nick = sanitizeNick(decryptText(key, nickAad(raw), raw.nk.n, raw.nk.c));
+		if (nick === void 0) return false;
+		this.nickAt.set(raw.s, raw.ts);
+		if (this.state.nicks[raw.s] === nick) return false;
+		this.state.nicks[raw.s] = nick;
+		return true;
+	}
 	openMentions(key, raw, text, everyone) {
 		if (!isMentionsBox(raw.m)) return [];
 		const plain = decryptText(key, mentionsAad(raw), raw.m.n, raw.m.c);
@@ -27452,7 +27667,7 @@ var GroupSession = class {
 		await this.replayWaiting();
 	}
 	async receiveSync(from, frame) {
-		if (!rosterHas(this.roster, from) || !Number.isSafeInteger(frame.e) || frame.e < 0 || typeof frame.h !== "string") return;
+		if (!rosterHas(this.roster, from) || !isZ32Key(from) || !Number.isSafeInteger(frame.e) || frame.e < 0 || typeof frame.h !== "string") return;
 		let answered = this.syncsAnswered.get(from);
 		if (!answered) this.syncsAnswered.set(from, answered = new RateWindow(GROUP_LIMITS.syncAnswers, GROUP_LIMITS.syncWindowMs, () => this.hooks.clock?.() ?? Date.now()));
 		if (!answered.take()) return;
@@ -28988,7 +29203,7 @@ var CommunitySession = class {
 			commit
 		});
 		if (FRESH.has(kind)) {
-			for (const [key] of roster) if (key !== this.myKey) this.hooks.addressed(key, {
+			for (const [key] of roster) if (key !== this.myKey && isZ32Key(key)) this.hooks.addressed(key, {
 				t: "group-secret",
 				v: 2,
 				g: this.id,
@@ -29035,7 +29250,7 @@ var CommunitySession = class {
 	rewelcome(memberKey) {
 		return this.serialize(async () => {
 			this.requireMember();
-			if (!rosterHas(this.roster, memberKey) || memberKey === this.myKey) throw new Error("Not a member");
+			if (!rosterHas(this.roster, memberKey) || memberKey === this.myKey || !isZ32Key(memberKey)) throw new Error("Not a member");
 			for (let i = this.state.chain.length - 1; i >= 0; i--) {
 				const c = this.state.chain[i];
 				if (c.k === "add" && c.s === memberKey) return this.welcomeFor(memberKey, communityCommitHash(c));
@@ -29101,7 +29316,10 @@ var CommunitySession = class {
 				seedB64: entry?.seedB64 ?? ""
 			};
 			await this.persist();
-			if (entry) for (const key of this.others) this.hooks.addressed(key, this.entryFrame(key));
+			if (entry) for (const key of this.others) {
+				const frame = this.entryFrame(key);
+				if (frame) this.hooks.addressed(key, frame);
+			}
 			this.hooks.changed();
 			return this.state.entry.key;
 		});
@@ -29717,7 +29935,7 @@ var CommunitySession = class {
 		for (const { from, frame } of ready) await this.receiveMessage(from, frame);
 	}
 	async receiveSync(from, frame) {
-		if (!this.isRecentMember(from) || !Number.isSafeInteger(frame.e) || typeof frame.h !== "string") return;
+		if (!this.isRecentMember(from) || !isZ32Key(from) || !Number.isSafeInteger(frame.e) || typeof frame.h !== "string") return;
 		let answered = this.syncsAnswered.get(from);
 		if (!answered) this.syncsAnswered.set(from, answered = new RateWindow(COMMUNITY_LIMITS.syncAnswers, COMMUNITY_LIMITS.syncWindowMs, () => this.hooks.clock?.() ?? Date.now()));
 		if (!answered.take()) return;
@@ -29832,7 +30050,7 @@ var CommunitySession = class {
 	/** The current entry seed sealed to a member, when I hold it: sealed once per seed, not on every sync answer. */
 	entryFrame(to) {
 		const { key, seedB64 } = this.state.entry;
-		if (!key || !seedB64) return null;
+		if (!key || !seedB64 || !isZ32Key(to)) return null;
 		const sealed = this.sealedEntries.get(to);
 		if (sealed?.seedB64 === seedB64 && sealed.frame.x === key) return { ...sealed.frame };
 		const frame = {
@@ -31002,6 +31220,6 @@ function appStoreDecision(held, read) {
 	return read.digest === held.digest ? "same" : "equivocation";
 }
 //#endregion
-export { COMMUNITY_EDIT_FRAME as $, cardLine as $a, normalizeRelayUrl as $c, lastSharedWithMe as $i, GROUP_HAVE_FRAME as $n, parseCallSignal as $o, WakeLimiter as $r, ENROLL_GRANT as $s, didDhtFromPublicKey as $t, CommunitySession as A, readForwarded as Aa, newDeviceSetSecret as Ac, nip05RootKey as Ai, pubkyProofFile as An, rosterHas as Ao, pickHubs as Ar, handoffPakeFrame as As, verifyAtprotoRecordProof as At, knockRecords as B, validReactionNumber as Ba, firstDeviceSetSecret as Bc, dialDescriptors as Bi, findEndpoint as Bn, formatLocalTarget as Bo, TYPING_KINDS as Br, readHandoffHello as Bs, didWebDocumentUrl as Bt, sha256Paced as C, readImageMeta as Ca, ENROLL_CAPABILITY as Cc, DOMAIN_FILE_MAX_BYTES as Ci, utf8Decode as Cl, isBitcoinAddress as Cn, readCanonicalJson as Co, doorHubs as Cr, handoffContextProof as Cs, atprotoProofRkey as Ct, openGroupTyping as D, dhtEditId as Da, deviceKeyZ32 as Dc, domainWellKnownFile as Di, newPubkyProofFolder as Dn, commitHash as Do, mergeBeacon as Dr, handoffHelloFrame as Ds, parseAtprotoDidDocument as Dt, groupTypingEpoch as E, RateWindow as Ea, deviceEchoNonce as Ec, domainTxtRecord as Ei, isPubkyProofFolder as En, MEMBER_KEY as Eo, lobbyRecords as Er, handoffEphemeral as Es, normalizeAtprotoHandle as Et, KNOCK_TTL_MS as F, nextReactionNumber as Fa, TURN_SETTLE_MS as Fc, txtValue as Fi, resolveLightningDestination as Fn, DHT_POLL_INTERVALS as Fo, shouldBeHub as Fr, newHandoffId as Fs, checkDidJws as Ft, groupWakeFrame as G, BUTTON_ID as Ga, turnInstance as Gc, IdentityExchange as Gi, INVITE_TAKEN as Gn, encodeControl as Go, GROUP_PIN_FRAME as Gr, SET_ACK as Gs, normalizeDid as Gt, readKnocks as H, pairedReplyAuthor as Ha, readTurnPacket as Hc, IDENTITY_MAX_VALIDITY as Hi, parseCashuRequestPayload as Hn, webLocalFetch as Ho, TypingSender as Hr, readHandoffTurnFrame as Hs, didWebFileNames as Ht, decodeGroupEntryLink as I, queueReaction as Ia, classifyTurnRead as Ic, wellKnownUrl as Ii, decodeBolt11 as In, EXPECT_PEER_MS as Io, ChatFiles as Ir, readHandoffAck as Is, checkDidSignature as It, GROUP_LIMITS as J, PR_STATES as Ja, turnStatedVerifier as Jc, identityRevocationValue as Ji, pairedMessageFits as Jn, answersOffer as Jo, nextPinNumber as Jr, setAckFrame as Js, parseDidSignaturePaste as Jt, groupWakes as K, ITEM_STATES as Ka, turnKeys as Kc, boundVerifiedIdentity as Ki, LIVENESS_PING_MS as Kn, CALL_SIGNAL_MAX_AGE_MS as Ko, PIN_LIMITS as Kr, SET_UPDATE as Ks, parseDid as Kt, encodeGroupEntryLink as L, reactionEmoji as La, turnPutSummary as Lc, CapsExchange as Li, ENDPOINT as Ln, RELAY_POLL_INTERVALS as Lo, FILE_LIMITS as Lr, readHandoffCancel as Ls, didGhostlyServiceEntry as Lt, communityHasFrame as M, GROUP_REACTION_FRAME as Ma, webCryptoSigner as Mc, recordsFromTxt as Mi, homeserverWebEndpoint as Mn, edgeParams as Mo, readBeacon as Mr, handoffRetryAfter as Ms, DID_FILE_MAX_BYTES as Mt, decodeCommunityLink as N, REACTION_LIMITS as Na, TURN_PUT_WINDOW_MS as Nc, recordsFromWellKnown as Ni, pubkyHomeserverOf as Nn, DirectPathWatch as No, readBeaconHead as Nr, handoffStreamKey as Ns, DID_JWS_MAX_LENGTH as Nt, sealGroupTyping as O, parseLinkPreview as Oa, deviceLinkPairing as Oc, encodeDnsQuery as Oi, normalizePubkyKey as On, parseGroupCommit as Oo, mergeLobby as Or, handoffManifestFrames as Os, shortAtprotoDid as Ot, encodeCommunityLink as P, ReactionWindow as Pa, TURN_RAISE_READ_TIMEOUT_MS as Pc, recordsName as Pi, requestLnurlInvoice as Pn, AWAITING_PEER_MS as Po, readLobby as Pr, handoffVersions as Ps, DidError as Pt, frameBytes as Q, buttonLabelClash as Qa, currentRelays as Qc, revokesIdentity as Qi, GROUP_FILE_LIMITS as Qn, extractParamsFromSdp as Qo, WAKE_CALL_INTERVAL_MS as Qr, ENROLL_DONE as Qs, didDhtDocument as Qt, entryParams as R, reactionIsNewer as Ra, TURN_LAST_SEQUENCE as Rc, DHT_TEXT_CAPABILITY as Ri, cashuRequestPayload as Rn, presenceSeenAt as Ro, transferEnded as Rr, readHandoffDone as Rs, didJwsAlg as Rt, readAppBundleAsync as S, parseImageMeta as Sa, DEVICES_CAPABILITY as Sc, readManifest as Si, toZ32 as Sl, sparkInvoiceDetails as Sn, canonicalJsonBytes as So, beaconRecords as Sr, handoffContext as Ss, atprotoProofRecord as St, GroupTypingBoard as T, EDIT_RATE_WINDOW_MS as Ta, deviceEchoFrame as Tc, dnsProofName as Ti, isPubkyKey as Tn, MAX_GROUP_CHAIN as To, lobbyKeys as Tr, handoffDigest as Ts, isAtprotoDid as Tt, GROUP_WAKE_FRAME as U, readReply as Ua, signTurnPacket as Uc, IDENTITY_REVOCATION_LABEL as Ui, parseFedimintRequestPayload as Un, LIMITS as Uo, sanitizeTypingStatus as Ur, readHandoffVerified as Us, didWebFileUrl as Ut, mergeKnocks as V, wireReaction as Va, nextTurnPosition as Vc, IDENTITY_MAX_EVIDENCE as Vi, isFederationId as Vn, parseLocalTarget as Vo, TYPING_REFRESH_MS as Vr, readHandoffPake as Vs, didWebFile as Vt, GroupWakeLimiter as W, replySnippet as Wa, signTurnRelease as Wc, IdentityCheckUnavailable as Wi, GhostLink as Wn, decodeControl as Wo, typingActivity as Wr, sealHandoffPiece as Ws, didWebHost as Wt, GROUP_READ_NOTE as X, STATUS_CARD_LIMITS as Xa, DEFAULT_RELAYS as Xc, newIdentityBinding as Xi, engineError as Xn, callRtcConfig as Xo, pinNumberHolds as Xr, signTombstone as Xs, staticDidDocument as Xt, GROUP_REACTED_FRAME as Y, RUN_RESULTS as Ya, turnVerifierMark as Yc, identityStatement as Yi, pairedMessageFrame as Yn, buildSdpFromSignal as Yo, pinIsNewer as Yr, setUpdateFrame as Ys, signingKeys as Yt, GroupSession as Z, appCardId as Za, RelayTransport as Zc, receivedIdentityStatus as Zi, engineText as Zn, callSignalHeardAt as Zo, readPin as Zr, verifySetUpdate as Zs, strictBase64Url as Zt, assembleAppBundle as _, baseMime as _a, decodeInviteCode as _c, HOLD_LIMITS as _i, sanitizeAvatar as _l, validatePaymentTarget as _n, readAppRevocation as _o, mayBeHub as _r, handoffAttemptAllowed as _s, ATPROTO_DECLARED_SCOPE as _t, planAppUpdate as a, irohDescriptor as aa, enrollDoneFrame as ac, checkPushEndpoint as ai, PacketTooLargeError as al, EVM_TEST_CHAINS as an, claimedTime as ao, readGroupFileMeta as ar, HANDOFF_ACK as as, groupName as at, pacer as b, voicePeaksOf as ba, inviteOwnership as bc, isHoldUrl as bi, randomBytes as bl, SPARK_PROVIDER as bn, signAppRevocation as bo, COMMUNITY_TOPOLOGY as br, handoffBusyFrame as bs, ATPROTO_PROOF_SCOPE as bt, readAppStore as c, DHT_MESSAGE_TTL as ca, enrollProofFrame as cc, chatAppId as ci, newerPacket as cl, SEPOLIA_TEST_USDT as cn, shownTime as co, readGroupWantNo as cr, HANDOFF_HAVE as cs, SshSigError as ct, APP_BUNDLE_LIMITS as d, dhtFileId as da, verifyEnrollProof as dc, BUTTONS_CAPABILITY as di, createIdentity as dl, USDT_PUBLIC_RPC as dn, appFingerprint as do, SIGNAL_FRESH_MS as dr, HANDOFF_PAKE as ds, sameSshKey as dt, PeerProofs as ea, ENROLL_HELLO as ec, deviceWakeRequest as ei, setLinkTraceSink as el, encodeDidDhtDeactivated as en, cardUrl as eo, GROUP_WANT_FRAME as er, signalHasVideo as es, GROUP_EDIT_FRAME as et, APP_BUNDLE_MAGIC as f, formatFileSize as fa, createDeviceInvite as fc, EDIT_CAPABILITY as fi, identityFromSeed as fl, WALLET_NETWORKS as fn, appRef as fo, SIGNAL_HOLD_MS as fr, HANDOFF_PIECE_BYTES as fs, sshSignCommand as ft, appViewOf as g, VOICE_LIMITS as ga, createChatInvite as gc, HOLD_DATED_BACK_MS as gi, MAX_AVATAR_LENGTH as gl, formatPaymentAmount as gn, isAppRef as go, MESH_HUBS as gr, filePartName as gs, decodeAnyBitcoinAddress as gt, appDigest as h, PLAYABLE_AUDIO as ha, OwnInviteError as hc, HOLD_CAPABILITY as hi, verify as hl, assertWholeSats as hn, isAppKey as ho, readGroupSignal as hr, HANDOFF_VERIFIED as hs, BitcoinAddressError as ht, checkAppBeforeRun as i, automaticTransport as ia, enrollDigits as ic, wakeRequest as ii, withRequestOptions as il, ETHEREUM_USDT as in, arrivalKey as io, isGroupMessageId as ir, serviceIdFromName as is, mentionsMember as it, GROUP_READ_NOTE_COMMUNITY as j, COMMUNITY_REACTION_FRAME as ja, seedSigner as jc, normalizeDomain as ji, pubkyProofPath as jn, verifyCommitSignature as jo, rankHubs as jr, handoffReleaseFrame as js, DID_DOCUMENT_MAX_BYTES as jt, COMMUNITY_LIMITS as k, forwardedAgain as ka, devicePingFrame as kc, isPublicAddress as ki, pubkyProofCapability as kn, rosterAdmin as ko, newerHead as kr, handoffOfferFrame as ks, AtprotoProofError as kt, readAppStoreSteps as l, peekDhtMailbox as la, readEnrollGrant as lc, isAppVersion as li, openRelayPayload as ll, SEPOLIA_TEST_USDT_FAUCET as ln, APP_PREFIXES as lo, CarriedTransport as lr, HANDOFF_HELLO as ls, parseSshPublicKey as lt, APP_PERMISSIONS as m, sanitizeMime as ma, readDeviceInvite as mc, UPGRADE_CAPABILITY as mi, publicKeyFromZ32 as ml, assertTokenUnits as mn, isAppHash as mo, groupSignalFrame as mr, HANDOFF_TIMINGS as ms, verifyBitcoinMessage as mt, appStoreDecision as n, validExternalKey as na, enrollCancelFrame as nc, parseWakeFrame as ni, budgetRetryMs as nl, resolveDidDht as nn, sameButtonText as no, fetchesByItself as nr, HTTP_SERVICE_PROTO as ns, carryMentions as nt, APP_STORE_LIMITS as o, irohRelayUrl as oa, enrollGrantFrame as oc, vapidKeysMatch as oi, RELAY_PAYLOAD_MAX_BYTES as ol, ONCHAIN_PROVIDER as on, heardTime as oo, readGroupHave as or, HANDOFF_CANCEL as os, SSHSIG_MAX_ARMOR as ot, APP_ICON_PATH as p, sanitizeFileName as pa, deviceInviteJoinerParams as pc, STATUS_CARD_CAPABILITY as pi, identityFromSeedB64 as pl, arkAddressPrefix as pn, checkAppRevokeStatement as po, SIGNAL_REPLY_MS as pr, HANDOFF_REQUEST as ps, verifySshSignature as pt, parseGroupWakeFrame as q, PR_CHECKS as qa, turnName as qc, emptyIdentityLedger as qi, PAIRED_FRAME_TOO_LARGE as qn, RTC_CONFIG as qo, mayPin as qr, readSetUpdate as qs, parseDidDocument as qt, appUpdateDecision as r, TRANSPORTS as ra, enrollCancelReason as rc, relayRequest as ri, isDiscoveryBudgetError as rl, signDidDhtPacket as rn, statusCardText as ro, groupFileFallback as rr, LEGACY_SERVICES as rs, parseCommunityEdit as rt, checkAppStoreIndex as s, DHT_FILE_TOO_LARGE as sa, enrollHelloFrame as sc, APP_DATA_MAX_BYTES as si, createRelayPayload as sl, PaymentPreflightError as sn, receivedTimestamp as so, readGroupWant as sr, HANDOFF_DONE as ss, SSHSIG_NAMESPACE as st, appRevocationFor as t, emptyProofLedger as ta, ENROLL_PROOF as tc, newWakeToken as ti, traceLink as tl, encodeDidDhtPacket as tn, checkStatusCard as to, GROUP_WANT_NO_FRAME as tr, emptyLinkRecords as ts, GROUP_EDIT_TEXT_BYTES as tt, signAppStore as u, DHT_FILE_CAPABILITY as ua, readEnrollHello as uc, APPS_CAPABILITY as ui, parseRelayPayload as ul, TEST_USDT_FAUCET_AMOUNT as un, APP_STATEMENT_LIMITS as uo, GROUP_SIGNAL_FRAME as ur, HANDOFF_OFFER as us, parseSshSignature as ut, checkAppManifest as v, fileMessageText as va, encodeInviteCode as vc, HoldKeys as vi, bytesEqual as vl, walletNetworkOf as vn, readAppRevocations as vo, meshHubs as vr, handoffAttemptFailed as vs, ATPROTO_FULL_SCOPE as vt, GROUP_TYPING_FRAME as w, EDIT_BUFFER_MS as wa, HANDOFF_CAPABILITY as wc, decodeDnsResponse as wi, utf8Encode as wl, PUBKY_PROOF_MAX_BYTES as wn, GROUP_MEMBER_CAP as wo, freshHubs as wr, handoffDataFrame as ws, checkAtprotoProofRecord as wt, readAppBundle as x, parseVideoMeta as xa, ownInviteRefusal as xc, newMailbox as xi, toBase64Url as xl, sparkAddressKind as xn, canonicalJson as xo, beaconKeys as xr, handoffCancelFrame as xs, atprotoDidMethod as xt, isAppUrl as y, parseVoiceMeta as ya, inviteLink as yc, HoldRefusedError as yi, fromBase64Url as yl, SPARK_NETWORKS as yn, signAppObject as yo, pickMeshHubs as yr, handoffAttemptSucceeded as ys, ATPROTO_PROOF_COLLECTION as yt, knockIdentity as z, readReaction as za, TURN_MAX as zc, capsDescriptors as zi, fedimintRequestPayload as zn, GhostlyHttpError as zo, transferStalled as zr, readHandoffHave as zs, didSignedMessages as zt };
+export { COMMUNITY_EDIT_FRAME as $, buttonLabelClash as $a, currentRelays as $c, revokesIdentity as $i, GROUP_FILE_LIMITS as $n, extractParamsFromSdp as $o, WAKE_CALL_INTERVAL_MS as $r, ENROLL_DONE as $s, didDhtFromPublicKey as $t, CommunitySession as A, forwardedAgain as Aa, devicePingFrame as Ac, isPublicAddress as Ai, pubkyProofFile as An, rosterAdmin as Ao, newerHead as Ar, handoffOfferFrame as As, verifyAtprotoRecordProof as At, knockRecords as B, readReaction as Ba, TURN_MAX as Bc, capsDescriptors as Bi, findEndpoint as Bn, GhostlyHttpError as Bo, transferStalled as Br, readHandoffHave as Bs, didWebDocumentUrl as Bt, sha256Paced as C, parseImageMeta as Ca, DEVICES_CAPABILITY as Cc, readManifest as Ci, randomBytes as Cl, isBitcoinAddress as Cn, canonicalJsonBytes as Co, beaconRecords as Cr, handoffContext as Cs, atprotoProofRkey as Ct, openGroupTyping as D, RateWindow as Da, deviceEchoNonce as Dc, domainTxtRecord as Di, utf8Encode as Dl, newPubkyProofFolder as Dn, MEMBER_KEY as Do, lobbyRecords as Dr, handoffEphemeral as Ds, parseAtprotoDidDocument as Dt, groupTypingEpoch as E, EDIT_RATE_WINDOW_MS as Ea, deviceEchoFrame as Ec, dnsProofName as Ei, utf8Decode as El, isPubkyProofFolder as En, MAX_GROUP_CHAIN as Eo, lobbyKeys as Er, handoffDigest as Es, normalizeAtprotoHandle as Et, KNOCK_TTL_MS as F, ReactionWindow as Fa, TURN_RAISE_READ_TIMEOUT_MS as Fc, recordsName as Fi, resolveLightningDestination as Fn, AWAITING_PEER_MS as Fo, readLobby as Fr, handoffVersions as Fs, checkDidJws as Ft, groupWakeFrame as G, replySnippet as Ga, signTurnRelease as Gc, IdentityCheckUnavailable as Gi, INVITE_TAKEN as Gn, decodeControl as Go, typingActivity as Gr, sealHandoffPiece as Gs, normalizeDid as Gt, readKnocks as H, wireReaction as Ha, nextTurnPosition as Hc, IDENTITY_MAX_EVIDENCE as Hi, parseCashuRequestPayload as Hn, parseLocalTarget as Ho, TYPING_REFRESH_MS as Hr, readHandoffPake as Hs, didWebFileNames as Ht, decodeGroupEntryLink as I, nextReactionNumber as Ia, TURN_SETTLE_MS as Ic, txtValue as Ii, decodeBolt11 as In, DHT_POLL_INTERVALS as Io, shouldBeHub as Ir, newHandoffId as Is, checkDidSignature as It, GROUP_LIMITS as J, PR_CHECKS as Ja, turnName as Jc, emptyIdentityLedger as Ji, pairedMessageFits as Jn, RTC_CONFIG as Jo, mayPin as Jr, readSetUpdate as Js, parseDidSignaturePaste as Jt, groupWakes as K, BUTTON_ID as Ka, turnInstance as Kc, IdentityExchange as Ki, LIVENESS_PING_MS as Kn, encodeControl as Ko, GROUP_PIN_FRAME as Kr, SET_ACK as Ks, parseDid as Kt, encodeGroupEntryLink as L, queueReaction as La, classifyTurnRead as Lc, wellKnownUrl as Li, ENDPOINT as Ln, EXPECT_PEER_MS as Lo, ChatFiles as Lr, readHandoffAck as Ls, didGhostlyServiceEntry as Lt, communityHasFrame as M, COMMUNITY_REACTION_FRAME as Ma, seedSigner as Mc, normalizeDomain as Mi, homeserverWebEndpoint as Mn, verifyCommitSignature as Mo, rankHubs as Mr, handoffReleaseFrame as Ms, DID_FILE_MAX_BYTES as Mt, decodeCommunityLink as N, GROUP_REACTION_FRAME as Na, webCryptoSigner as Nc, recordsFromTxt as Ni, pubkyHomeserverOf as Nn, edgeParams as No, readBeacon as Nr, handoffRetryAfter as Ns, DID_JWS_MAX_LENGTH as Nt, sealGroupTyping as O, dhtEditId as Oa, deviceKeyZ32 as Oc, domainWellKnownFile as Oi, normalizePubkyKey as On, commitHash as Oo, mergeBeacon as Or, handoffHelloFrame as Os, shortAtprotoDid as Ot, encodeCommunityLink as P, REACTION_LIMITS as Pa, TURN_PUT_WINDOW_MS as Pc, recordsFromWellKnown as Pi, requestLnurlInvoice as Pn, DirectPathWatch as Po, readBeaconHead as Pr, handoffStreamKey as Ps, DidError as Pt, frameBytes as Q, appCardId as Qa, RelayTransport as Qc, receivedIdentityStatus as Qi, parseEngineError as Qn, callSignalHeardAt as Qo, readPin as Qr, verifySetUpdate as Qs, didDhtDocument as Qt, entryParams as R, reactionEmoji as Ra, turnPutSummary as Rc, CapsExchange as Ri, cashuRequestPayload as Rn, RELAY_POLL_INTERVALS as Ro, FILE_LIMITS as Rr, readHandoffCancel as Rs, didJwsAlg as Rt, readAppBundleAsync as S, parseVideoMeta as Sa, ownInviteRefusal as Sc, newMailbox as Si, isZ32Key as Sl, sparkInvoiceDetails as Sn, canonicalJson as So, beaconKeys as Sr, handoffCancelFrame as Ss, atprotoProofRecord as St, GroupTypingBoard as T, EDIT_BUFFER_MS as Ta, HANDOFF_CAPABILITY as Tc, decodeDnsResponse as Ti, toZ32 as Tl, isPubkyKey as Tn, GROUP_MEMBER_CAP as To, freshHubs as Tr, handoffDataFrame as Ts, isAtprotoDid as Tt, GROUP_WAKE_FRAME as U, pairedReplyAuthor as Ua, readTurnPacket as Uc, IDENTITY_MAX_VALIDITY as Ui, parseFedimintRequestPayload as Un, webLocalFetch as Uo, TypingSender as Ur, readHandoffTurnFrame as Us, didWebFileUrl as Ut, mergeKnocks as V, validReactionNumber as Va, firstDeviceSetSecret as Vc, dialDescriptors as Vi, isFederationId as Vn, formatLocalTarget as Vo, TYPING_KINDS as Vr, readHandoffHello as Vs, didWebFile as Vt, GroupWakeLimiter as W, readReply as Wa, signTurnPacket as Wc, IDENTITY_REVOCATION_LABEL as Wi, GhostLink as Wn, LIMITS as Wo, sanitizeTypingStatus as Wr, readHandoffVerified as Ws, didWebHost as Wt, GROUP_READ_NOTE as X, RUN_RESULTS as Xa, turnVerifierMark as Xc, identityStatement as Xi, engineError as Xn, buildSdpFromSignal as Xo, pinIsNewer as Xr, setUpdateFrame as Xs, staticDidDocument as Xt, GROUP_REACTED_FRAME as Y, PR_STATES as Ya, turnStatedVerifier as Yc, identityRevocationValue as Yi, pairedMessageFrame as Yn, answersOffer as Yo, nextPinNumber as Yr, setAckFrame as Ys, signingKeys as Yt, GroupSession as Z, STATUS_CARD_LIMITS as Za, DEFAULT_RELAYS as Zc, newIdentityBinding as Zi, engineText as Zn, callRtcConfig as Zo, pinNumberHolds as Zr, signTombstone as Zs, strictBase64Url as Zt, assembleAppBundle as _, VOICE_LIMITS as _a, createChatInvite as _c, HOLD_DATED_BACK_MS as _i, MAX_AVATAR_LENGTH as _l, validatePaymentTarget as _n, isAppRef as _o, MESH_HUBS as _r, filePartName as _s, ATPROTO_DECLARED_SCOPE as _t, planAppUpdate as a, automaticTransport as aa, enrollDigits as ac, wakeRequest as ai, withRequestOptions as al, EVM_TEST_CHAINS as an, arrivalKey as ao, isGroupMessageId as ar, serviceIdFromName as as, groupName as at, pacer as b, parseVoiceMeta as ba, inviteLink as bc, HoldRefusedError as bi, bytesEqual as bl, SPARK_PROVIDER as bn, signAppObject as bo, pickMeshHubs as br, handoffAttemptSucceeded as bs, ATPROTO_PROOF_SCOPE as bt, readAppStore as c, DHT_FILE_TOO_LARGE as ca, enrollHelloFrame as cc, APP_DATA_MAX_BYTES as ci, createRelayPayload as cl, SEPOLIA_TEST_USDT as cn, receivedTimestamp as co, readGroupWant as cr, HANDOFF_DONE as cs, SshSigError as ct, APP_BUNDLE_LIMITS as d, DHT_FILE_CAPABILITY as da, readEnrollHello as dc, APPS_CAPABILITY as di, parseRelayPayload as dl, USDT_PUBLIC_RPC as dn, APP_STATEMENT_LIMITS as do, GROUP_SIGNAL_FRAME as dr, HANDOFF_OFFER as ds, sameSshKey as dt, lastSharedWithMe as ea, ENROLL_GRANT as ec, WakeLimiter as ei, normalizeRelayUrl as el, encodeDidDhtDeactivated as en, cardLine as eo, GROUP_HAVE_FRAME as er, parseCallSignal as es, GROUP_EDIT_FRAME as et, APP_BUNDLE_MAGIC as f, dhtFileId as fa, verifyEnrollProof as fc, BUTTONS_CAPABILITY as fi, createIdentity as fl, WALLET_NETWORKS as fn, appFingerprint as fo, SIGNAL_FRESH_MS as fr, HANDOFF_PAKE as fs, sshSignCommand as ft, appViewOf as g, PLAYABLE_AUDIO as ga, OwnInviteError as gc, HOLD_CAPABILITY as gi, verify as gl, formatPaymentAmount as gn, isAppKey as go, readGroupSignal as gr, HANDOFF_VERIFIED as gs, decodeAnyBitcoinAddress as gt, appDigest as h, sanitizeMime as ha, readDeviceInvite as hc, UPGRADE_CAPABILITY as hi, publicKeyFromZ32 as hl, assertWholeSats as hn, isAppHash as ho, groupSignalFrame as hr, HANDOFF_TIMINGS as hs, BitcoinAddressError as ht, checkAppBeforeRun as i, TRANSPORTS as ia, enrollCancelReason as ic, relayRequest as ii, isDiscoveryBudgetError as il, ETHEREUM_USDT as in, statusCardText as io, groupFileFallback as ir, LEGACY_SERVICES as is, mentionsMember as it, GROUP_READ_NOTE_COMMUNITY as j, readForwarded as ja, newDeviceSetSecret as jc, nip05RootKey as ji, pubkyProofPath as jn, rosterHas as jo, pickHubs as jr, handoffPakeFrame as js, DID_DOCUMENT_MAX_BYTES as jt, COMMUNITY_LIMITS as k, parseLinkPreview as ka, deviceLinkPairing as kc, encodeDnsQuery as ki, pubkyProofCapability as kn, parseGroupCommit as ko, mergeLobby as kr, handoffManifestFrames as ks, AtprotoProofError as kt, readAppStoreSteps as l, DHT_MESSAGE_TTL as la, enrollProofFrame as lc, chatAppId as li, newerPacket as ll, SEPOLIA_TEST_USDT_FAUCET as ln, shownTime as lo, readGroupWantNo as lr, HANDOFF_HAVE as ls, parseSshPublicKey as lt, APP_PERMISSIONS as m, sanitizeFileName as ma, deviceInviteJoinerParams as mc, STATUS_CARD_CAPABILITY as mi, identityFromSeedB64 as ml, assertTokenUnits as mn, checkAppRevokeStatement as mo, SIGNAL_REPLY_MS as mr, HANDOFF_REQUEST as ms, verifyBitcoinMessage as mt, appStoreDecision as n, emptyProofLedger as na, ENROLL_PROOF as nc, newWakeToken as ni, traceLink as nl, resolveDidDht as nn, checkStatusCard as no, GROUP_WANT_NO_FRAME as nr, emptyLinkRecords as ns, carryMentions as nt, APP_STORE_LIMITS as o, irohDescriptor as oa, enrollDoneFrame as oc, checkPushEndpoint as oi, PacketTooLargeError as ol, ONCHAIN_PROVIDER as on, claimedTime as oo, readGroupFileMeta as or, HANDOFF_ACK as os, SSHSIG_MAX_ARMOR as ot, APP_ICON_PATH as p, formatFileSize as pa, createDeviceInvite as pc, EDIT_CAPABILITY as pi, identityFromSeed as pl, arkAddressPrefix as pn, appRef as po, SIGNAL_HOLD_MS as pr, HANDOFF_PIECE_BYTES as ps, verifySshSignature as pt, parseGroupWakeFrame as q, ITEM_STATES as qa, turnKeys as qc, boundVerifiedIdentity as qi, PAIRED_FRAME_TOO_LARGE as qn, CALL_SIGNAL_MAX_AGE_MS as qo, PIN_LIMITS as qr, SET_UPDATE as qs, parseDidDocument as qt, appUpdateDecision as r, validExternalKey as ra, enrollCancelFrame as rc, parseWakeFrame as ri, budgetRetryMs as rl, signDidDhtPacket as rn, sameButtonText as ro, fetchesByItself as rr, HTTP_SERVICE_PROTO as rs, parseCommunityEdit as rt, checkAppStoreIndex as s, irohRelayUrl as sa, enrollGrantFrame as sc, vapidKeysMatch as si, RELAY_PAYLOAD_MAX_BYTES as sl, PaymentPreflightError as sn, heardTime as so, readGroupHave as sr, HANDOFF_CANCEL as ss, SSHSIG_NAMESPACE as st, appRevocationFor as t, PeerProofs as ta, ENROLL_HELLO as tc, deviceWakeRequest as ti, setLinkTraceSink as tl, encodeDidDhtPacket as tn, cardUrl as to, GROUP_WANT_FRAME as tr, signalHasVideo as ts, GROUP_EDIT_TEXT_BYTES as tt, signAppStore as u, peekDhtMailbox as ua, readEnrollGrant as uc, isAppVersion as ui, openRelayPayload as ul, TEST_USDT_FAUCET_AMOUNT as un, APP_PREFIXES as uo, CarriedTransport as ur, HANDOFF_HELLO as us, parseSshSignature as ut, checkAppManifest as v, baseMime as va, decodeInviteCode as vc, HOLD_LIMITS as vi, sanitizeAvatar as vl, walletNetworkOf as vn, readAppRevocation as vo, mayBeHub as vr, handoffAttemptAllowed as vs, ATPROTO_FULL_SCOPE as vt, GROUP_TYPING_FRAME as w, readImageMeta as wa, ENROLL_CAPABILITY as wc, DOMAIN_FILE_MAX_BYTES as wi, toBase64Url as wl, PUBKY_PROOF_MAX_BYTES as wn, readCanonicalJson as wo, doorHubs as wr, handoffContextProof as ws, checkAtprotoProofRecord as wt, readAppBundle as x, voicePeaksOf as xa, inviteOwnership as xc, isHoldUrl as xi, fromBase64Url as xl, sparkAddressKind as xn, signAppRevocation as xo, COMMUNITY_TOPOLOGY as xr, handoffBusyFrame as xs, atprotoDidMethod as xt, isAppUrl as y, fileMessageText as ya, encodeInviteCode as yc, HoldKeys as yi, sanitizeDisplayText as yl, SPARK_NETWORKS as yn, readAppRevocations as yo, meshHubs as yr, handoffAttemptFailed as ys, ATPROTO_PROOF_COLLECTION as yt, knockIdentity as z, reactionIsNewer as za, TURN_LAST_SEQUENCE as zc, DHT_TEXT_CAPABILITY as zi, fedimintRequestPayload as zn, presenceSeenAt as zo, transferEnded as zr, readHandoffDone as zs, didSignedMessages as zt };
 
-//# sourceMappingURL=src-yMUQvdyL.js.map
+//# sourceMappingURL=src-RQ6OJOUO.js.map