@ours.network/messenger-server 1.0.31-nightly.20 → 1.0.31-nightly.21

package/dist/chunks/{server-NUFQF4R5.js → server-BHTSTSPS.js}

@@ -10,7 +10,7 @@ import {
   publicEngineError,
   publicInternalError,
   reportFailure
-} from "./chunk-UNTKMIUK.js";
+} from "./chunk-BB74SVTG.js";
 
 // node_modules/bn.js/lib/bn.js
 var require_bn = __commonJS({
@@ -141,13 +141,13 @@ var require_bn = __commonJS({
         for (var i = 0; i < this.length; i++) {
           this.words[i] = 0;
         }
-        var j, w3;
+        var j, w2;
         var off = 0;
         if (endian === "be") {
           for (i = number.length - 1, j = 0; i >= 0; i -= 3) {
-            w3 = number[i] | number[i - 1] << 8 | number[i - 2] << 16;
-            this.words[j] |= w3 << off & 67108863;
-            this.words[j + 1] = w3 >>> 26 - off & 67108863;
+            w2 = number[i] | number[i - 1] << 8 | number[i - 2] << 16;
+            this.words[j] |= w2 << off & 67108863;
+            this.words[j + 1] = w2 >>> 26 - off & 67108863;
             off += 24;
             if (off >= 26) {
               off -= 26;
@@ -156,9 +156,9 @@ var require_bn = __commonJS({
           }
         } else if (endian === "le") {
           for (i = 0, j = 0; i < number.length; i += 3) {
-            w3 = number[i] | number[i + 1] << 8 | number[i + 2] << 16;
-            this.words[j] |= w3 << off & 67108863;
-            this.words[j + 1] = w3 >>> 26 - off & 67108863;
+            w2 = number[i] | number[i + 1] << 8 | number[i + 2] << 16;
+            this.words[j] |= w2 << off & 67108863;
+            this.words[j + 1] = w2 >>> 26 - off & 67108863;
             off += 24;
             if (off >= 26) {
               off -= 26;
@@ -193,15 +193,15 @@ var require_bn = __commonJS({
         }
         var off = 0;
         var j = 0;
-        var w3;
+        var w2;
         if (endian === "be") {
           for (i = number.length - 1; i >= start2; i -= 2) {
-            w3 = parseHexByte(number, start2, i) << off;
-            this.words[j] |= w3 & 67108863;
+            w2 = parseHexByte(number, start2, i) << off;
+            this.words[j] |= w2 & 67108863;
             if (off >= 18) {
               off -= 18;
               j += 1;
-              this.words[j] |= w3 >>> 26;
+              this.words[j] |= w2 >>> 26;
             } else {
               off += 8;
             }
@@ -209,12 +209,12 @@ var require_bn = __commonJS({
         } else {
           var parseLength = number.length - start2;
           for (i = parseLength % 2 === 0 ? start2 + 1 : start2; i < number.length; i += 2) {
-            w3 = parseHexByte(number, start2, i) << off;
-            this.words[j] |= w3 & 67108863;
+            w2 = parseHexByte(number, start2, i) << off;
+            this.words[j] |= w2 & 67108863;
             if (off >= 18) {
               off -= 18;
               j += 1;
-              this.words[j] |= w3 >>> 26;
+              this.words[j] |= w2 >>> 26;
             } else {
               off += 8;
             }
@@ -424,9 +424,9 @@ var require_bn = __commonJS({
           var off = 0;
           var carry = 0;
           for (var i = 0; i < this.length; i++) {
-            var w3 = this.words[i];
-            var word = ((w3 << off | carry) & 16777215).toString(16);
-            carry = w3 >>> 24 - off & 16777215;
+            var w2 = this.words[i];
+            var word = ((w2 << off | carry) & 16777215).toString(16);
+            carry = w2 >>> 24 - off & 16777215;
             off += 2;
             if (off >= 26) {
               off -= 26;
@@ -507,20 +507,20 @@ var require_bn = __commonJS({
         var littleEndian = endian === "le";
         var res = new ArrayType(reqLength);
         var b2, i;
-        var q2 = this.clone();
+        var q = this.clone();
         if (!littleEndian) {
           for (i = 0; i < reqLength - byteLength; i++) {
             res[i] = 0;
           }
-          for (i = 0; !q2.isZero(); i++) {
-            b2 = q2.andln(255);
-            q2.iushrn(8);
+          for (i = 0; !q.isZero(); i++) {
+            b2 = q.andln(255);
+            q.iushrn(8);
             res[reqLength - i - 1] = b2;
           }
         } else {
-          for (i = 0; !q2.isZero(); i++) {
-            b2 = q2.andln(255);
-            q2.iushrn(8);
+          for (i = 0; !q.isZero(); i++) {
+            b2 = q.andln(255);
+            q.iushrn(8);
             res[i] = b2;
           }
           for (; i < reqLength; i++) {
@@ -530,12 +530,12 @@ var require_bn = __commonJS({
         return res;
       };
       if (Math.clz32) {
-        BN.prototype._countBits = function _countBits(w3) {
-          return 32 - Math.clz32(w3);
+        BN.prototype._countBits = function _countBits(w2) {
+          return 32 - Math.clz32(w2);
         };
       } else {
-        BN.prototype._countBits = function _countBits(w3) {
-          var t = w3;
+        BN.prototype._countBits = function _countBits(w2) {
+          var t = w2;
           var r = 0;
           if (t >= 4096) {
             r += 13;
@@ -556,9 +556,9 @@ var require_bn = __commonJS({
           return r + t;
         };
       }
-      BN.prototype._zeroBits = function _zeroBits(w3) {
-        if (w3 === 0) return 26;
-        var t = w3;
+      BN.prototype._zeroBits = function _zeroBits(w2) {
+        if (w2 === 0) return 26;
+        var t = w2;
         var r = 0;
         if ((t & 8191) === 0) {
           r += 13;
@@ -582,18 +582,18 @@ var require_bn = __commonJS({
         return r;
       };
       BN.prototype.bitLength = function bitLength() {
-        var w3 = this.words[this.length - 1];
-        var hi = this._countBits(w3);
+        var w2 = this.words[this.length - 1];
+        var hi = this._countBits(w2);
         return (this.length - 1) * 26 + hi;
       };
       function toBitArray(num) {
-        var w3 = new Array(num.bitLength());
-        for (var bit = 0; bit < w3.length; bit++) {
+        var w2 = new Array(num.bitLength());
+        for (var bit = 0; bit < w2.length; bit++) {
           var off = bit / 26 | 0;
           var wbit = bit % 26;
-          w3[bit] = (num.words[off] & 1 << wbit) >>> wbit;
+          w2[bit] = (num.words[off] & 1 << wbit) >>> wbit;
         }
-        return w3;
+        return w2;
       }
       BN.prototype.zeroBits = function zeroBits() {
         if (this.isZero()) return 0;
@@ -868,23 +868,23 @@ var require_bn = __commonJS({
         var lo = r & 67108863;
         var carry = r / 67108864 | 0;
         out.words[0] = lo;
-        for (var k2 = 1; k2 < len; k2++) {
+        for (var k = 1; k < len; k++) {
           var ncarry = carry >>> 26;
           var rword = carry & 67108863;
-          var maxJ = Math.min(k2, num.length - 1);
-          for (var j = Math.max(0, k2 - self.length + 1); j <= maxJ; j++) {
-            var i = k2 - j | 0;
+          var maxJ = Math.min(k, num.length - 1);
+          for (var j = Math.max(0, k - self.length + 1); j <= maxJ; j++) {
+            var i = k - j | 0;
             a = self.words[i] | 0;
             b2 = num.words[j] | 0;
             r = a * b2 + rword;
             ncarry += r / 67108864 | 0;
             rword = r & 67108863;
           }
-          out.words[k2] = rword | 0;
+          out.words[k] = rword | 0;
           carry = ncarry | 0;
         }
         if (carry !== 0) {
-          out.words[k2] = carry | 0;
+          out.words[k] = carry | 0;
         } else {
           out.length--;
         }
@@ -990,9 +990,9 @@ var require_bn = __commonJS({
         mid = mid + Math.imul(al0, bh2) | 0;
         mid = mid + Math.imul(ah0, bl2) | 0;
         hi = hi + Math.imul(ah0, bh2) | 0;
-        var w22 = (c + lo | 0) + ((mid & 8191) << 13) | 0;
-        c = (hi + (mid >>> 13) | 0) + (w22 >>> 26) | 0;
-        w22 &= 67108863;
+        var w2 = (c + lo | 0) + ((mid & 8191) << 13) | 0;
+        c = (hi + (mid >>> 13) | 0) + (w2 >>> 26) | 0;
+        w2 &= 67108863;
         lo = Math.imul(al3, bl0);
         mid = Math.imul(al3, bh0);
         mid = mid + Math.imul(ah3, bl0) | 0;
@@ -1419,7 +1419,7 @@ var require_bn = __commonJS({
         w18 &= 67108863;
         o[0] = w0;
         o[1] = w1;
-        o[2] = w22;
+        o[2] = w2;
         o[3] = w3;
         o[4] = w4;
         o[5] = w5;
@@ -1450,13 +1450,13 @@ var require_bn = __commonJS({
         out.length = self.length + num.length;
         var carry = 0;
         var hncarry = 0;
-        for (var k2 = 0; k2 < out.length - 1; k2++) {
+        for (var k = 0; k < out.length - 1; k++) {
           var ncarry = hncarry;
           hncarry = 0;
           var rword = carry & 67108863;
-          var maxJ = Math.min(k2, num.length - 1);
-          for (var j = Math.max(0, k2 - self.length + 1); j <= maxJ; j++) {
-            var i = k2 - j;
+          var maxJ = Math.min(k, num.length - 1);
+          for (var j = Math.max(0, k - self.length + 1); j <= maxJ; j++) {
+            var i = k - j;
             var a = self.words[i] | 0;
             var b2 = num.words[j] | 0;
             var r = a * b2;
@@ -1468,12 +1468,12 @@ var require_bn = __commonJS({
             hncarry += ncarry >>> 26;
             ncarry &= 67108863;
           }
-          out.words[k2] = rword;
+          out.words[k] = rword;
           carry = ncarry;
           ncarry = hncarry;
         }
         if (carry !== 0) {
-          out.words[k2] = carry;
+          out.words[k] = carry;
         } else {
           out.length--;
         }
@@ -1497,54 +1497,54 @@ var require_bn = __commonJS({
         }
         return res;
       };
-      function FFTM(x2, y3) {
-        this.x = x2;
-        this.y = y3;
+      function FFTM(x, y2) {
+        this.x = x;
+        this.y = y2;
       }
-      FFTM.prototype.makeRBT = function makeRBT(N2) {
-        var t = new Array(N2);
-        var l = BN.prototype._countBits(N2) - 1;
-        for (var i = 0; i < N2; i++) {
-          t[i] = this.revBin(i, l, N2);
+      FFTM.prototype.makeRBT = function makeRBT(N) {
+        var t = new Array(N);
+        var l = BN.prototype._countBits(N) - 1;
+        for (var i = 0; i < N; i++) {
+          t[i] = this.revBin(i, l, N);
         }
         return t;
       };
-      FFTM.prototype.revBin = function revBin(x2, l, N2) {
-        if (x2 === 0 || x2 === N2 - 1) return x2;
+      FFTM.prototype.revBin = function revBin(x, l, N) {
+        if (x === 0 || x === N - 1) return x;
         var rb = 0;
         for (var i = 0; i < l; i++) {
-          rb |= (x2 & 1) << l - i - 1;
-          x2 >>= 1;
+          rb |= (x & 1) << l - i - 1;
+          x >>= 1;
         }
         return rb;
       };
-      FFTM.prototype.permute = function permute(rbt, rws, iws, rtws, itws, N2) {
-        for (var i = 0; i < N2; i++) {
+      FFTM.prototype.permute = function permute(rbt, rws, iws, rtws, itws, N) {
+        for (var i = 0; i < N; i++) {
           rtws[i] = rws[rbt[i]];
           itws[i] = iws[rbt[i]];
         }
       };
-      FFTM.prototype.transform = function transform(rws, iws, rtws, itws, N2, rbt) {
-        this.permute(rbt, rws, iws, rtws, itws, N2);
-        for (var s = 1; s < N2; s <<= 1) {
+      FFTM.prototype.transform = function transform(rws, iws, rtws, itws, N, rbt) {
+        this.permute(rbt, rws, iws, rtws, itws, N);
+        for (var s = 1; s < N; s <<= 1) {
           var l = s << 1;
           var rtwdf = Math.cos(2 * Math.PI / l);
           var itwdf = Math.sin(2 * Math.PI / l);
-          for (var p2 = 0; p2 < N2; p2 += l) {
+          for (var p2 = 0; p2 < N; p2 += l) {
             var rtwdf_ = rtwdf;
             var itwdf_ = itwdf;
             for (var j = 0; j < s; j++) {
-              var re2 = rtws[p2 + j];
-              var ie2 = itws[p2 + j];
+              var re = rtws[p2 + j];
+              var ie = itws[p2 + j];
               var ro = rtws[p2 + j + s];
               var io = itws[p2 + j + s];
               var rx = rtwdf_ * ro - itwdf_ * io;
               io = rtwdf_ * io + itwdf_ * ro;
               ro = rx;
-              rtws[p2 + j] = re2 + ro;
-              itws[p2 + j] = ie2 + io;
-              rtws[p2 + j + s] = re2 - ro;
-              itws[p2 + j + s] = ie2 - io;
+              rtws[p2 + j] = re + ro;
+              itws[p2 + j] = ie + io;
+              rtws[p2 + j + s] = re - ro;
+              itws[p2 + j + s] = ie - io;
               if (j !== l) {
                 rx = rtwdf * rtwdf_ - itwdf * itwdf_;
                 itwdf_ = rtwdf * itwdf_ + itwdf * rtwdf_;
@@ -1554,40 +1554,40 @@ var require_bn = __commonJS({
           }
         }
       };
-      FFTM.prototype.guessLen13b = function guessLen13b(n, m2) {
-        var N2 = Math.max(m2, n) | 1;
-        var odd = N2 & 1;
+      FFTM.prototype.guessLen13b = function guessLen13b(n, m3) {
+        var N = Math.max(m3, n) | 1;
+        var odd = N & 1;
         var i = 0;
-        for (N2 = N2 / 2 | 0; N2; N2 = N2 >>> 1) {
+        for (N = N / 2 | 0; N; N = N >>> 1) {
           i++;
         }
         return 1 << i + 1 + odd;
       };
-      FFTM.prototype.conjugate = function conjugate(rws, iws, N2) {
-        if (N2 <= 1) return;
-        for (var i = 0; i < N2 / 2; i++) {
+      FFTM.prototype.conjugate = function conjugate(rws, iws, N) {
+        if (N <= 1) return;
+        for (var i = 0; i < N / 2; i++) {
           var t = rws[i];
-          rws[i] = rws[N2 - i - 1];
-          rws[N2 - i - 1] = t;
+          rws[i] = rws[N - i - 1];
+          rws[N - i - 1] = t;
           t = iws[i];
-          iws[i] = -iws[N2 - i - 1];
-          iws[N2 - i - 1] = -t;
+          iws[i] = -iws[N - i - 1];
+          iws[N - i - 1] = -t;
         }
       };
-      FFTM.prototype.normalize13b = function normalize13b(ws, N2) {
+      FFTM.prototype.normalize13b = function normalize13b(ws, N) {
         var carry = 0;
-        for (var i = 0; i < N2 / 2; i++) {
-          var w3 = Math.round(ws[2 * i + 1] / N2) * 8192 + Math.round(ws[2 * i] / N2) + carry;
-          ws[i] = w3 & 67108863;
-          if (w3 < 67108864) {
+        for (var i = 0; i < N / 2; i++) {
+          var w2 = Math.round(ws[2 * i + 1] / N) * 8192 + Math.round(ws[2 * i] / N) + carry;
+          ws[i] = w2 & 67108863;
+          if (w2 < 67108864) {
             carry = 0;
           } else {
-            carry = w3 / 67108864 | 0;
+            carry = w2 / 67108864 | 0;
           }
         }
         return ws;
       };
-      FFTM.prototype.convert13b = function convert13b(ws, len, rws, N2) {
+      FFTM.prototype.convert13b = function convert13b(ws, len, rws, N) {
         var carry = 0;
         for (var i = 0; i < len; i++) {
           carry = carry + (ws[i] | 0);
@@ -1596,46 +1596,46 @@ var require_bn = __commonJS({
           rws[2 * i + 1] = carry & 8191;
           carry = carry >>> 13;
         }
-        for (i = 2 * len; i < N2; ++i) {
+        for (i = 2 * len; i < N; ++i) {
           rws[i] = 0;
         }
         assert(carry === 0);
         assert((carry & ~8191) === 0);
       };
-      FFTM.prototype.stub = function stub(N2) {
-        var ph = new Array(N2);
-        for (var i = 0; i < N2; i++) {
+      FFTM.prototype.stub = function stub(N) {
+        var ph = new Array(N);
+        for (var i = 0; i < N; i++) {
           ph[i] = 0;
         }
         return ph;
       };
-      FFTM.prototype.mulp = function mulp(x2, y3, out) {
-        var N2 = 2 * this.guessLen13b(x2.length, y3.length);
-        var rbt = this.makeRBT(N2);
-        var _ = this.stub(N2);
-        var rws = new Array(N2);
-        var rwst = new Array(N2);
-        var iwst = new Array(N2);
-        var nrws = new Array(N2);
-        var nrwst = new Array(N2);
-        var niwst = new Array(N2);
+      FFTM.prototype.mulp = function mulp(x, y2, out) {
+        var N = 2 * this.guessLen13b(x.length, y2.length);
+        var rbt = this.makeRBT(N);
+        var _ = this.stub(N);
+        var rws = new Array(N);
+        var rwst = new Array(N);
+        var iwst = new Array(N);
+        var nrws = new Array(N);
+        var nrwst = new Array(N);
+        var niwst = new Array(N);
         var rmws = out.words;
-        rmws.length = N2;
-        this.convert13b(x2.words, x2.length, rws, N2);
-        this.convert13b(y3.words, y3.length, nrws, N2);
-        this.transform(rws, _, rwst, iwst, N2, rbt);
-        this.transform(nrws, _, nrwst, niwst, N2, rbt);
-        for (var i = 0; i < N2; i++) {
+        rmws.length = N;
+        this.convert13b(x.words, x.length, rws, N);
+        this.convert13b(y2.words, y2.length, nrws, N);
+        this.transform(rws, _, rwst, iwst, N, rbt);
+        this.transform(nrws, _, nrwst, niwst, N, rbt);
+        for (var i = 0; i < N; i++) {
           var rx = rwst[i] * nrwst[i] - iwst[i] * niwst[i];
           iwst[i] = rwst[i] * niwst[i] + iwst[i] * nrwst[i];
           rwst[i] = rx;
         }
-        this.conjugate(rwst, iwst, N2);
-        this.transform(rwst, iwst, rmws, _, N2, rbt);
-        this.conjugate(rmws, _, N2);
-        this.normalize13b(rmws, N2);
-        out.negative = x2.negative ^ y3.negative;
-        out.length = x2.length + y3.length;
+        this.conjugate(rwst, iwst, N);
+        this.transform(rwst, iwst, rmws, _, N, rbt);
+        this.conjugate(rmws, _, N);
+        this.normalize13b(rmws, N);
+        out.negative = x.negative ^ y2.negative;
+        out.length = x.length + y2.length;
         return out.strip();
       };
       BN.prototype.mul = function mul(num) {
@@ -1656,10 +1656,10 @@ var require_bn = __commonJS({
         assert(num < 67108864);
         var carry = 0;
         for (var i = 0; i < this.length; i++) {
-          var w3 = (this.words[i] | 0) * num;
-          var lo = (w3 & 67108863) + (carry & 67108863);
+          var w2 = (this.words[i] | 0) * num;
+          var lo = (w2 & 67108863) + (carry & 67108863);
           carry >>= 26;
-          carry += w3 / 67108864 | 0;
+          carry += w2 / 67108864 | 0;
           carry += lo >>> 26;
           this.words[i] = lo & 67108863;
         }
@@ -1683,16 +1683,16 @@ var require_bn = __commonJS({
         return this.imul(this.clone());
       };
       BN.prototype.pow = function pow(num) {
-        var w3 = toBitArray(num);
-        if (w3.length === 0) return new BN(1);
+        var w2 = toBitArray(num);
+        if (w2.length === 0) return new BN(1);
         var res = this;
-        for (var i = 0; i < w3.length; i++, res = res.sqr()) {
-          if (w3[i] !== 0) break;
+        for (var i = 0; i < w2.length; i++, res = res.sqr()) {
+          if (w2[i] !== 0) break;
         }
-        if (++i < w3.length) {
-          for (var q2 = res.sqr(); i < w3.length; i++, q2 = q2.sqr()) {
-            if (w3[i] === 0) continue;
-            res = res.mul(q2);
+        if (++i < w2.length) {
+          for (var q = res.sqr(); i < w2.length; i++, q = q.sqr()) {
+            if (w2[i] === 0) continue;
+            res = res.mul(q);
           }
         }
         return res;
@@ -1733,18 +1733,18 @@ var require_bn = __commonJS({
       };
       BN.prototype.iushrn = function iushrn(bits, hint, extended) {
         assert(typeof bits === "number" && bits >= 0);
-        var h2;
+        var h3;
         if (hint) {
-          h2 = (hint - hint % 26) / 26;
+          h3 = (hint - hint % 26) / 26;
         } else {
-          h2 = 0;
+          h3 = 0;
         }
         var r = bits % 26;
         var s = Math.min((bits - r) / 26, this.length);
         var mask = 67108863 ^ 67108863 >>> r << r;
         var maskedWords = extended;
-        h2 -= s;
-        h2 = Math.max(0, h2);
+        h3 -= s;
+        h3 = Math.max(0, h3);
         if (maskedWords) {
           for (var i = 0; i < s; i++) {
             maskedWords.words[i] = this.words[i];
@@ -1762,7 +1762,7 @@ var require_bn = __commonJS({
           this.length = 1;
         }
         var carry = 0;
-        for (i = this.length - 1; i >= 0 && (carry !== 0 || i >= h2); i--) {
+        for (i = this.length - 1; i >= 0 && (carry !== 0 || i >= h3); i--) {
           var word = this.words[i] | 0;
           this.words[i] = carry << 26 - r | word >>> r;
           carry = word & mask;
@@ -1796,10 +1796,10 @@ var require_bn = __commonJS({
         assert(typeof bit === "number" && bit >= 0);
         var r = bit % 26;
         var s = (bit - r) / 26;
-        var q2 = 1 << r;
+        var q = 1 << r;
         if (this.length <= s) return false;
-        var w3 = this.words[s];
-        return !!(w3 & q2);
+        var w2 = this.words[s];
+        return !!(w2 & q);
       };
       BN.prototype.imaskn = function imaskn(bits) {
         assert(typeof bits === "number" && bits >= 0);
@@ -1895,27 +1895,27 @@ var require_bn = __commonJS({
         var len = num.length + shift;
         var i;
         this._expand(len);
-        var w3;
+        var w2;
         var carry = 0;
         for (i = 0; i < num.length; i++) {
-          w3 = (this.words[i + shift] | 0) + carry;
+          w2 = (this.words[i + shift] | 0) + carry;
           var right = (num.words[i] | 0) * mul;
-          w3 -= right & 67108863;
-          carry = (w3 >> 26) - (right / 67108864 | 0);
-          this.words[i + shift] = w3 & 67108863;
+          w2 -= right & 67108863;
+          carry = (w2 >> 26) - (right / 67108864 | 0);
+          this.words[i + shift] = w2 & 67108863;
         }
         for (; i < this.length - shift; i++) {
-          w3 = (this.words[i + shift] | 0) + carry;
-          carry = w3 >> 26;
-          this.words[i + shift] = w3 & 67108863;
+          w2 = (this.words[i + shift] | 0) + carry;
+          carry = w2 >> 26;
+          this.words[i + shift] = w2 & 67108863;
         }
         if (carry === 0) return this.strip();
         assert(carry === -1);
         carry = 0;
         for (i = 0; i < this.length; i++) {
-          w3 = -(this.words[i] | 0) + carry;
-          carry = w3 >> 26;
-          this.words[i] = w3 & 67108863;
+          w2 = -(this.words[i] | 0) + carry;
+          carry = w2 >> 26;
+          this.words[i] = w2 & 67108863;
         }
         this.negative = 1;
         return this.strip();
@@ -1932,24 +1932,24 @@ var require_bn = __commonJS({
           a.iushln(shift);
           bhi = b2.words[b2.length - 1] | 0;
         }
-        var m2 = a.length - b2.length;
-        var q2;
+        var m3 = a.length - b2.length;
+        var q;
         if (mode !== "mod") {
-          q2 = new BN(null);
-          q2.length = m2 + 1;
-          q2.words = new Array(q2.length);
-          for (var i = 0; i < q2.length; i++) {
-            q2.words[i] = 0;
+          q = new BN(null);
+          q.length = m3 + 1;
+          q.words = new Array(q.length);
+          for (var i = 0; i < q.length; i++) {
+            q.words[i] = 0;
           }
         }
-        var diff = a.clone()._ishlnsubmul(b2, 1, m2);
+        var diff = a.clone()._ishlnsubmul(b2, 1, m3);
         if (diff.negative === 0) {
           a = diff;
-          if (q2) {
-            q2.words[m2] = 1;
+          if (q) {
+            q.words[m3] = 1;
           }
         }
-        for (var j = m2 - 1; j >= 0; j--) {
+        for (var j = m3 - 1; j >= 0; j--) {
           var qj = (a.words[b2.length + j] | 0) * 67108864 + (a.words[b2.length + j - 1] | 0);
           qj = Math.min(qj / bhi | 0, 67108863);
           a._ishlnsubmul(b2, qj, j);
@@ -1961,19 +1961,19 @@ var require_bn = __commonJS({
               a.negative ^= 1;
             }
           }
-          if (q2) {
-            q2.words[j] = qj;
+          if (q) {
+            q.words[j] = qj;
           }
         }
-        if (q2) {
-          q2.strip();
+        if (q) {
+          q.strip();
         }
         a.strip();
         if (mode !== "div" && shift !== 0) {
           a.iushrn(shift);
         }
         return {
-          div: q2 || null,
+          div: q || null,
           mod: a
         };
       };
@@ -2085,9 +2085,9 @@ var require_bn = __commonJS({
         assert(num <= 67108863);
         var carry = 0;
         for (var i = this.length - 1; i >= 0; i--) {
-          var w3 = (this.words[i] | 0) + carry * 67108864;
-          this.words[i] = w3 / num | 0;
-          carry = w3 % num;
+          var w2 = (this.words[i] | 0) + carry * 67108864;
+          this.words[i] = w2 / num | 0;
+          carry = w2 % num;
         }
         return this.strip();
       };
@@ -2097,29 +2097,29 @@ var require_bn = __commonJS({
       BN.prototype.egcd = function egcd(p2) {
         assert(p2.negative === 0);
         assert(!p2.isZero());
-        var x2 = this;
-        var y3 = p2.clone();
-        if (x2.negative !== 0) {
-          x2 = x2.umod(p2);
+        var x = this;
+        var y2 = p2.clone();
+        if (x.negative !== 0) {
+          x = x.umod(p2);
         } else {
-          x2 = x2.clone();
+          x = x.clone();
         }
         var A2 = new BN(1);
         var B2 = new BN(0);
-        var C = new BN(0);
+        var C2 = new BN(0);
         var D2 = new BN(1);
         var g2 = 0;
-        while (x2.isEven() && y3.isEven()) {
-          x2.iushrn(1);
-          y3.iushrn(1);
+        while (x.isEven() && y2.isEven()) {
+          x.iushrn(1);
+          y2.iushrn(1);
           ++g2;
         }
-        var yp = y3.clone();
-        var xp = x2.clone();
-        while (!x2.isZero()) {
-          for (var i = 0, im = 1; (x2.words[0] & im) === 0 && i < 26; ++i, im <<= 1) ;
+        var yp = y2.clone();
+        var xp = x.clone();
+        while (!x.isZero()) {
+          for (var i = 0, im = 1; (x.words[0] & im) === 0 && i < 26; ++i, im <<= 1) ;
           if (i > 0) {
-            x2.iushrn(i);
+            x.iushrn(i);
             while (i-- > 0) {
               if (A2.isOdd() || B2.isOdd()) {
                 A2.iadd(yp);
@@ -2129,32 +2129,32 @@ var require_bn = __commonJS({
               B2.iushrn(1);
             }
           }
-          for (var j = 0, jm = 1; (y3.words[0] & jm) === 0 && j < 26; ++j, jm <<= 1) ;
+          for (var j = 0, jm = 1; (y2.words[0] & jm) === 0 && j < 26; ++j, jm <<= 1) ;
           if (j > 0) {
-            y3.iushrn(j);
+            y2.iushrn(j);
             while (j-- > 0) {
-              if (C.isOdd() || D2.isOdd()) {
-                C.iadd(yp);
+              if (C2.isOdd() || D2.isOdd()) {
+                C2.iadd(yp);
                 D2.isub(xp);
               }
-              C.iushrn(1);
+              C2.iushrn(1);
               D2.iushrn(1);
             }
           }
-          if (x2.cmp(y3) >= 0) {
-            x2.isub(y3);
-            A2.isub(C);
+          if (x.cmp(y2) >= 0) {
+            x.isub(y2);
+            A2.isub(C2);
             B2.isub(D2);
           } else {
-            y3.isub(x2);
-            C.isub(A2);
+            y2.isub(x);
+            C2.isub(A2);
             D2.isub(B2);
           }
         }
         return {
-          a: C,
+          a: C2,
           b: D2,
-          gcd: y3.iushln(g2)
+          gcd: y2.iushln(g2)
         };
       };
       BN.prototype._invmp = function _invmp(p2) {
@@ -2256,19 +2256,19 @@ var require_bn = __commonJS({
         assert(typeof bit === "number");
         var r = bit % 26;
         var s = (bit - r) / 26;
-        var q2 = 1 << r;
+        var q = 1 << r;
         if (this.length <= s) {
           this._expand(s + 1);
-          this.words[s] |= q2;
+          this.words[s] |= q;
           return this;
         }
-        var carry = q2;
+        var carry = q;
         for (var i = s; carry !== 0 && i < this.length; i++) {
-          var w3 = this.words[i] | 0;
-          w3 += carry;
-          carry = w3 >>> 26;
-          w3 &= 67108863;
-          this.words[i] = w3;
+          var w2 = this.words[i] | 0;
+          w2 += carry;
+          carry = w2 >>> 26;
+          w2 &= 67108863;
+          this.words[i] = w2;
         }
         if (carry !== 0) {
           this.words[i] = carry;
@@ -2292,8 +2292,8 @@ var require_bn = __commonJS({
             num = -num;
           }
           assert(num <= 67108863, "Number is too big");
-          var w3 = this.words[0] | 0;
-          res = w3 === num ? 0 : w3 < num ? -1 : 1;
+          var w2 = this.words[0] | 0;
+          res = w2 === num ? 0 : w2 < num ? -1 : 1;
         }
         if (this.negative !== 0) return -res | 0;
         return res;
@@ -2521,10 +2521,10 @@ var require_bn = __commonJS({
         num.length += 2;
         var lo = 0;
         for (var i = 0; i < num.length; i++) {
-          var w3 = num.words[i] | 0;
-          lo += w3 * 977;
+          var w2 = num.words[i] | 0;
+          lo += w2 * 977;
           num.words[i] = lo & 67108863;
-          lo = w3 * 64 + (lo / 67108864 | 0);
+          lo = w2 * 64 + (lo / 67108864 | 0);
         }
         if (num.words[num.length - 1] === 0) {
           num.length--;
@@ -2589,14 +2589,14 @@ var require_bn = __commonJS({
         primes[name] = prime2;
         return prime2;
       };
-      function Red(m2) {
-        if (typeof m2 === "string") {
-          var prime = BN._prime(m2);
+      function Red(m3) {
+        if (typeof m3 === "string") {
+          var prime = BN._prime(m3);
           this.m = prime.p;
           this.prime = prime;
         } else {
-          assert(m2.gtn(1), "modulus must be greater than 1");
-          this.m = m2;
+          assert(m3.gtn(1), "modulus must be greater than 1");
+          this.m = m3;
           this.prime = null;
         }
       }
@@ -2679,36 +2679,36 @@ var require_bn = __commonJS({
           var pow = this.m.add(new BN(1)).iushrn(2);
           return this.pow(a, pow);
         }
-        var q2 = this.m.subn(1);
+        var q = this.m.subn(1);
         var s = 0;
-        while (!q2.isZero() && q2.andln(1) === 0) {
+        while (!q.isZero() && q.andln(1) === 0) {
           s++;
-          q2.iushrn(1);
+          q.iushrn(1);
         }
-        assert(!q2.isZero());
+        assert(!q.isZero());
         var one = new BN(1).toRed(this);
         var nOne = one.redNeg();
         var lpow = this.m.subn(1).iushrn(1);
-        var z = this.m.bitLength();
-        z = new BN(2 * z * z).toRed(this);
-        while (this.pow(z, lpow).cmp(nOne) !== 0) {
-          z.redIAdd(nOne);
-        }
-        var c = this.pow(z, q2);
-        var r = this.pow(a, q2.addn(1).iushrn(1));
-        var t = this.pow(a, q2);
-        var m2 = s;
+        var z2 = this.m.bitLength();
+        z2 = new BN(2 * z2 * z2).toRed(this);
+        while (this.pow(z2, lpow).cmp(nOne) !== 0) {
+          z2.redIAdd(nOne);
+        }
+        var c = this.pow(z2, q);
+        var r = this.pow(a, q.addn(1).iushrn(1));
+        var t = this.pow(a, q);
+        var m3 = s;
         while (t.cmp(one) !== 0) {
           var tmp = t;
           for (var i = 0; tmp.cmp(one) !== 0; i++) {
             tmp = tmp.redSqr();
           }
-          assert(i < m2);
-          var b2 = this.pow(c, new BN(1).iushln(m2 - i - 1));
+          assert(i < m3);
+          var b2 = this.pow(c, new BN(1).iushln(m3 - i - 1));
           r = r.redMul(b2);
           c = b2.redSqr();
           t = t.redMul(c);
-          m2 = i;
+          m3 = i;
         }
         return r;
       };
@@ -2773,8 +2773,8 @@ var require_bn = __commonJS({
       BN.mont = function mont(num) {
         return new Mont(num);
       };
-      function Mont(m2) {
-        Red.call(this, m2);
+      function Mont(m3) {
+        Red.call(this, m3);
         this.shift = this.m.bitLength();
         if (this.shift % 26 !== 0) {
           this.shift += 26 - this.shift % 26;
@@ -2803,12 +2803,12 @@ var require_bn = __commonJS({
         }
         var t = a.imul(b2);
         var c = t.maskn(this.shift).mul(this.minv).imaskn(this.shift).mul(this.m);
-        var u3 = t.isub(c).iushrn(this.shift);
-        var res = u3;
-        if (u3.cmp(this.m) >= 0) {
-          res = u3.isub(this.m);
-        } else if (u3.cmpn(0) < 0) {
-          res = u3.iadd(this.m);
+        var u2 = t.isub(c).iushrn(this.shift);
+        var res = u2;
+        if (u2.cmp(this.m) >= 0) {
+          res = u2.isub(this.m);
+        } else if (u2.cmpn(0) < 0) {
+          res = u2.iadd(this.m);
         }
         return res._forceRed(this);
       };
@@ -2816,12 +2816,12 @@ var require_bn = __commonJS({
         if (a.isZero() || b2.isZero()) return new BN(0)._forceRed(this);
         var t = a.mul(b2);
         var c = t.maskn(this.shift).mul(this.minv).imaskn(this.shift).mul(this.m);
-        var u3 = t.isub(c).iushrn(this.shift);
-        var res = u3;
-        if (u3.cmp(this.m) >= 0) {
-          res = u3.isub(this.m);
-        } else if (u3.cmpn(0) < 0) {
-          res = u3.iadd(this.m);
+        var u2 = t.isub(c).iushrn(this.shift);
+        var res = u2;
+        if (u2.cmp(this.m) >= 0) {
+          res = u2.isub(this.m);
+        } else if (u2.cmpn(0) < 0) {
+          res = u2.iadd(this.m);
         }
         return res._forceRed(this);
       };
@@ -4337,11 +4337,11 @@ var require_pem2 = __commonJS({
     PEMDecoder.prototype.decode = function decode(data, options) {
       const lines = data.toString().split(/[\r\n]+/g);
       const label = options.label.toUpperCase();
-      const re2 = /^-----(BEGIN|END) ([^-]+)-----$/;
+      const re = /^-----(BEGIN|END) ([^-]+)-----$/;
       let start2 = -1;
       let end = -1;
       for (let i = 0; i < lines.length; i++) {
-        const match2 = lines[i].match(re2);
+        const match2 = lines[i].match(re);
         if (match2 === null)
           continue;
         if (match2[2] !== label)
@@ -5479,13 +5479,13 @@ var require_ece = __commonJS({
     var MODE_DECRYPT = "decrypt";
     var keylog;
     if (process.env.ECE_KEYLOG === "1") {
-      keylog = function(m2, k2) {
-        console.warn(m2 + " [" + k2.length + "]: " + k2.toString("base64url"));
-        return k2;
+      keylog = function(m3, k) {
+        console.warn(m3 + " [" + k.length + "]: " + k.toString("base64url"));
+        return k;
       };
     } else {
-      keylog = function(m2, k2) {
-        return k2;
+      keylog = function(m3, k) {
+        return k;
       };
     }
     function decode(b2) {
@@ -5714,9 +5714,9 @@ var require_ece = __commonJS({
     }
     function generateNonce(base, counter) {
       var nonce = Buffer.from(base);
-      var m2 = nonce.readUIntBE(nonce.length - 6, 6);
-      var x2 = ((m2 ^ counter) & 16777215) + ((m2 / 16777216 ^ counter / 16777216) & 16777215) * 16777216;
-      nonce.writeUIntBE(x2, nonce.length - 6, 6);
+      var m3 = nonce.readUIntBE(nonce.length - 6, 6);
+      var x = ((m3 ^ counter) & 16777215) + ((m3 / 16777216 ^ counter / 16777216) & 16777215) * 16777216;
+      nonce.writeUIntBE(x, nonce.length - 6, 6);
       keylog("nonce" + counter, nonce);
       return nonce;
     }
@@ -5993,11 +5993,11 @@ var require_ms = __commonJS({
   "node_modules/ms/index.js"(exports, module) {
     init_define_MESSENGER_BUILD_INFO();
     var s = 1e3;
-    var m2 = s * 60;
-    var h2 = m2 * 60;
-    var d2 = h2 * 24;
-    var w3 = d2 * 7;
-    var y3 = d2 * 365.25;
+    var m3 = s * 60;
+    var h3 = m3 * 60;
+    var d2 = h3 * 24;
+    var w2 = d2 * 7;
+    var y2 = d2 * 365.25;
     module.exports = function(val, options) {
       options = options || {};
       var type = typeof val;
@@ -6029,11 +6029,11 @@ var require_ms = __commonJS({
         case "yrs":
         case "yr":
         case "y":
-          return n * y3;
+          return n * y2;
         case "weeks":
         case "week":
         case "w":
-          return n * w3;
+          return n * w2;
         case "days":
         case "day":
         case "d":
@@ -6043,13 +6043,13 @@ var require_ms = __commonJS({
         case "hrs":
         case "hr":
         case "h":
-          return n * h2;
+          return n * h3;
         case "minutes":
         case "minute":
         case "mins":
         case "min":
         case "m":
-          return n * m2;
+          return n * m3;
         case "seconds":
         case "second":
         case "secs":
@@ -6071,11 +6071,11 @@ var require_ms = __commonJS({
       if (msAbs >= d2) {
         return Math.round(ms / d2) + "d";
       }
-      if (msAbs >= h2) {
-        return Math.round(ms / h2) + "h";
+      if (msAbs >= h3) {
+        return Math.round(ms / h3) + "h";
       }
-      if (msAbs >= m2) {
-        return Math.round(ms / m2) + "m";
+      if (msAbs >= m3) {
+        return Math.round(ms / m3) + "m";
       }
       if (msAbs >= s) {
         return Math.round(ms / s) + "s";
@@ -6087,11 +6087,11 @@ var require_ms = __commonJS({
       if (msAbs >= d2) {
         return plural(ms, msAbs, d2, "day");
       }
-      if (msAbs >= h2) {
-        return plural(ms, msAbs, h2, "hour");
+      if (msAbs >= h3) {
+        return plural(ms, msAbs, h3, "hour");
       }
-      if (msAbs >= m2) {
-        return plural(ms, msAbs, m2, "minute");
+      if (msAbs >= m3) {
+        return plural(ms, msAbs, m3, "minute");
       }
       if (msAbs >= s) {
         return plural(ms, msAbs, s, "second");
@@ -6190,8 +6190,8 @@ var require_common = __commonJS({
             }
             return enabledCache;
           },
-          set: (v2) => {
-            enableOverride = v2;
+          set: (v3) => {
+            enableOverride = v3;
           }
         });
         if (typeof createDebug.init === "function") {
@@ -6386,11 +6386,11 @@ var require_browser = __commonJS({
       if (typeof navigator !== "undefined" && navigator.userAgent && navigator.userAgent.toLowerCase().match(/(edge|trident)\/(\d+)/)) {
         return false;
       }
-      let m2;
+      let m3;
       return typeof document !== "undefined" && document.documentElement && document.documentElement.style && document.documentElement.style.WebkitAppearance || // Is firebug? http://stackoverflow.com/a/398120/376773
       typeof window !== "undefined" && window.console && (window.console.firebug || window.console.exception && window.console.table) || // Is firefox >= v31?
       // https://developer.mozilla.org/en-US/docs/Tools/Web_Console#Styling_messages
-      typeof navigator !== "undefined" && navigator.userAgent && (m2 = navigator.userAgent.toLowerCase().match(/firefox\/(\d+)/)) && parseInt(m2[1], 10) >= 31 || // Double check webkit in userAgent just in case we are in a worker
+      typeof navigator !== "undefined" && navigator.userAgent && (m3 = navigator.userAgent.toLowerCase().match(/firefox\/(\d+)/)) && parseInt(m3[1], 10) >= 31 || // Double check webkit in userAgent just in case we are in a worker
       typeof navigator !== "undefined" && navigator.userAgent && navigator.userAgent.toLowerCase().match(/applewebkit\/(\d+)/);
     }
     function formatArgs(args) {
@@ -6444,9 +6444,9 @@ var require_browser = __commonJS({
     }
     module.exports = require_common()(exports);
     var { formatters } = module.exports;
-    formatters.j = function(v2) {
+    formatters.j = function(v3) {
       try {
-        return JSON.stringify(v2);
+        return JSON.stringify(v3);
       } catch (error) {
         return "[UnexpectedJSONParseError]: " + error.message;
       }
@@ -6559,8 +6559,8 @@ var require_node2 = __commonJS({
     exports.inspectOpts = Object.keys(process.env).filter((key) => {
       return /^debug_/i.test(key);
     }).reduce((obj, key) => {
-      const prop = key.substring(6).toLowerCase().replace(/_([a-z])/g, (_, k2) => {
-        return k2.toUpperCase();
+      const prop = key.substring(6).toLowerCase().replace(/_([a-z])/g, (_, k) => {
+        return k.toUpperCase();
       });
       let val = process.env[key];
       if (/^(yes|on|true|enabled)$/i.test(val)) {
@@ -6618,13 +6618,13 @@ var require_node2 = __commonJS({
     }
     module.exports = require_common()(exports);
     var { formatters } = module.exports;
-    formatters.o = function(v2) {
+    formatters.o = function(v3) {
       this.inspectOpts.colors = this.useColors;
-      return util.inspect(v2, this.inspectOpts).split("\n").map((str2) => str2.trim()).join(" ");
+      return util.inspect(v3, this.inspectOpts).split("\n").map((str2) => str2.trim()).join(" ");
     };
-    formatters.O = function(v2) {
+    formatters.O = function(v3) {
       this.inspectOpts.colors = this.useColors;
-      return util.inspect(v2, this.inspectOpts);
+      return util.inspect(v3, this.inspectOpts);
     };
   }
 });
@@ -6646,29 +6646,29 @@ var require_helpers = __commonJS({
   "node_modules/agent-base/dist/helpers.js"(exports) {
     "use strict";
     init_define_MESSENGER_BUILD_INFO();
-    var __createBinding = exports && exports.__createBinding || (Object.create ? (function(o, m2, k2, k22) {
-      if (k22 === void 0) k22 = k2;
-      var desc = Object.getOwnPropertyDescriptor(m2, k2);
-      if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
+    var __createBinding = exports && exports.__createBinding || (Object.create ? (function(o, m3, k, k2) {
+      if (k2 === void 0) k2 = k;
+      var desc = Object.getOwnPropertyDescriptor(m3, k);
+      if (!desc || ("get" in desc ? !m3.__esModule : desc.writable || desc.configurable)) {
         desc = { enumerable: true, get: function() {
-          return m2[k2];
+          return m3[k];
         } };
       }
-      Object.defineProperty(o, k22, desc);
-    }) : (function(o, m2, k2, k22) {
-      if (k22 === void 0) k22 = k2;
-      o[k22] = m2[k2];
+      Object.defineProperty(o, k2, desc);
+    }) : (function(o, m3, k, k2) {
+      if (k2 === void 0) k2 = k;
+      o[k2] = m3[k];
     }));
-    var __setModuleDefault = exports && exports.__setModuleDefault || (Object.create ? (function(o, v2) {
-      Object.defineProperty(o, "default", { enumerable: true, value: v2 });
-    }) : function(o, v2) {
-      o["default"] = v2;
+    var __setModuleDefault = exports && exports.__setModuleDefault || (Object.create ? (function(o, v3) {
+      Object.defineProperty(o, "default", { enumerable: true, value: v3 });
+    }) : function(o, v3) {
+      o["default"] = v3;
     });
     var __importStar = exports && exports.__importStar || function(mod) {
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k2 in mod) if (k2 !== "default" && Object.prototype.hasOwnProperty.call(mod, k2)) __createBinding(result, mod, k2);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -6702,8 +6702,8 @@ var require_helpers = __commonJS({
     function req(url, opts = {}) {
       const href = typeof url === "string" ? url : url.href;
       const req2 = (href.startsWith("https:") ? https : http).request(url, opts);
-      const promise = new Promise((resolve3, reject) => {
-        req2.once("response", resolve3).once("error", reject).end();
+      const promise = new Promise((resolve4, reject) => {
+        req2.once("response", resolve4).once("error", reject).end();
       });
       req2.then = promise.then.bind(promise);
       return req2;
@@ -6717,35 +6717,35 @@ var require_dist = __commonJS({
   "node_modules/agent-base/dist/index.js"(exports) {
     "use strict";
     init_define_MESSENGER_BUILD_INFO();
-    var __createBinding = exports && exports.__createBinding || (Object.create ? (function(o, m2, k2, k22) {
-      if (k22 === void 0) k22 = k2;
-      var desc = Object.getOwnPropertyDescriptor(m2, k2);
-      if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
+    var __createBinding = exports && exports.__createBinding || (Object.create ? (function(o, m3, k, k2) {
+      if (k2 === void 0) k2 = k;
+      var desc = Object.getOwnPropertyDescriptor(m3, k);
+      if (!desc || ("get" in desc ? !m3.__esModule : desc.writable || desc.configurable)) {
         desc = { enumerable: true, get: function() {
-          return m2[k2];
+          return m3[k];
         } };
       }
-      Object.defineProperty(o, k22, desc);
-    }) : (function(o, m2, k2, k22) {
-      if (k22 === void 0) k22 = k2;
-      o[k22] = m2[k2];
+      Object.defineProperty(o, k2, desc);
+    }) : (function(o, m3, k, k2) {
+      if (k2 === void 0) k2 = k;
+      o[k2] = m3[k];
     }));
-    var __setModuleDefault = exports && exports.__setModuleDefault || (Object.create ? (function(o, v2) {
-      Object.defineProperty(o, "default", { enumerable: true, value: v2 });
-    }) : function(o, v2) {
-      o["default"] = v2;
+    var __setModuleDefault = exports && exports.__setModuleDefault || (Object.create ? (function(o, v3) {
+      Object.defineProperty(o, "default", { enumerable: true, value: v3 });
+    }) : function(o, v3) {
+      o["default"] = v3;
     });
     var __importStar = exports && exports.__importStar || function(mod) {
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k2 in mod) if (k2 !== "default" && Object.prototype.hasOwnProperty.call(mod, k2)) __createBinding(result, mod, k2);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
     };
-    var __exportStar = exports && exports.__exportStar || function(m2, exports2) {
-      for (var p2 in m2) if (p2 !== "default" && !Object.prototype.hasOwnProperty.call(exports2, p2)) __createBinding(exports2, m2, p2);
+    var __exportStar = exports && exports.__exportStar || function(m3, exports2) {
+      for (var p2 in m3) if (p2 !== "default" && !Object.prototype.hasOwnProperty.call(exports2, p2)) __createBinding(exports2, m3, p2);
     };
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.Agent = void 0;
@@ -6851,17 +6851,17 @@ var require_dist = __commonJS({
       get defaultPort() {
         return this[INTERNAL].defaultPort ?? (this.protocol === "https:" ? 443 : 80);
       }
-      set defaultPort(v2) {
+      set defaultPort(v3) {
         if (this[INTERNAL]) {
-          this[INTERNAL].defaultPort = v2;
+          this[INTERNAL].defaultPort = v3;
         }
       }
       get protocol() {
         return this[INTERNAL].protocol ?? (this.isSecureEndpoint() ? "https:" : "http:");
       }
-      set protocol(v2) {
+      set protocol(v3) {
         if (this[INTERNAL]) {
-          this[INTERNAL].protocol = v2;
+          this[INTERNAL].protocol = v3;
         }
       }
     };
@@ -6882,7 +6882,7 @@ var require_parse_proxy_response = __commonJS({
     var debug_1 = __importDefault(require_src());
     var debug = (0, debug_1.default)("https-proxy-agent:parse-proxy-response");
     function parseProxyResponse(socket) {
-      return new Promise((resolve3, reject) => {
+      return new Promise((resolve4, reject) => {
         let buffersLength = 0;
         const buffers = [];
         function read() {
@@ -6948,7 +6948,7 @@ var require_parse_proxy_response = __commonJS({
           }
           debug("got proxy server response: %o %o", firstLine, headers);
           cleanup();
-          resolve3({
+          resolve4({
             connect: {
               statusCode,
               statusText,
@@ -6971,29 +6971,29 @@ var require_dist2 = __commonJS({
   "node_modules/https-proxy-agent/dist/index.js"(exports) {
     "use strict";
     init_define_MESSENGER_BUILD_INFO();
-    var __createBinding = exports && exports.__createBinding || (Object.create ? (function(o, m2, k2, k22) {
-      if (k22 === void 0) k22 = k2;
-      var desc = Object.getOwnPropertyDescriptor(m2, k2);
-      if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
+    var __createBinding = exports && exports.__createBinding || (Object.create ? (function(o, m3, k, k2) {
+      if (k2 === void 0) k2 = k;
+      var desc = Object.getOwnPropertyDescriptor(m3, k);
+      if (!desc || ("get" in desc ? !m3.__esModule : desc.writable || desc.configurable)) {
         desc = { enumerable: true, get: function() {
-          return m2[k2];
+          return m3[k];
         } };
       }
-      Object.defineProperty(o, k22, desc);
-    }) : (function(o, m2, k2, k22) {
-      if (k22 === void 0) k22 = k2;
-      o[k22] = m2[k2];
+      Object.defineProperty(o, k2, desc);
+    }) : (function(o, m3, k, k2) {
+      if (k2 === void 0) k2 = k;
+      o[k2] = m3[k];
     }));
-    var __setModuleDefault = exports && exports.__setModuleDefault || (Object.create ? (function(o, v2) {
-      Object.defineProperty(o, "default", { enumerable: true, value: v2 });
-    }) : function(o, v2) {
-      o["default"] = v2;
+    var __setModuleDefault = exports && exports.__setModuleDefault || (Object.create ? (function(o, v3) {
+      Object.defineProperty(o, "default", { enumerable: true, value: v3 });
+    }) : function(o, v3) {
+      o["default"] = v3;
     });
     var __importStar = exports && exports.__importStar || function(mod) {
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k2 in mod) if (k2 !== "default" && Object.prototype.hasOwnProperty.call(mod, k2)) __createBinding(result, mod, k2);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -7346,7 +7346,7 @@ var require_web_push_lib = __commonJS({
       } catch (err) {
         return Promise.reject(err);
       }
-      return new Promise(function(resolve3, reject) {
+      return new Promise(function(resolve4, reject) {
         const httpsOptions = {};
         const urlParts = url.parse(requestDetails.endpoint);
         httpsOptions.hostname = urlParts.hostname;
@@ -7379,7 +7379,7 @@ var require_web_push_lib = __commonJS({
                 requestDetails.endpoint
               ));
             } else {
-              resolve3({
+              resolve4({
                 statusCode: pushResponse.statusCode,
                 body: responseText,
                 headers: pushResponse.headers
@@ -9656,10 +9656,10 @@ var require_extension = __commonJS({
         if (!Array.isArray(configurations)) configurations = [configurations];
         return configurations.map((params) => {
           return [extension2].concat(
-            Object.keys(params).map((k2) => {
-              let values = params[k2];
+            Object.keys(params).map((k) => {
+              let values = params[k];
               if (!Array.isArray(values)) values = [values];
-              return values.map((v2) => v2 === true ? k2 : `${k2}=${v2}`).join("; ");
+              return values.map((v3) => v3 === true ? k : `${k}=${v3}`).join("; ");
             })
           ).join("; ");
         }).join(", ");
@@ -11111,7 +11111,7 @@ var require_websocket_server = __commonJS({
       socket.once("finish", socket.destroy);
       socket.end(
         `HTTP/1.1 ${code} ${http.STATUS_CODES[code]}\r
-` + Object.keys(headers).map((h2) => `${h2}: ${headers[h2]}`).join("\r\n") + "\r\n\r\n" + message
+` + Object.keys(headers).map((h3) => `${h3}: ${headers[h3]}`).join("\r\n") + "\r\n\r\n" + message
       );
     }
     function abortHandshakeOrEmitwsClientError(server, req, socket, code, message, headers) {
@@ -11751,18 +11751,48 @@ var MessengerNotificationProducer = class {
 import { existsSync as existsSync3 } from "node:fs";
 import { readFile, realpath, stat } from "node:fs/promises";
 import { createServer } from "node:http";
-import { dirname as dirname5, extname, isAbsolute as isAbsolute2, relative, resolve as resolve2, sep } from "node:path";
+import { dirname as dirname5, extname, isAbsolute as isAbsolute2, relative, resolve as resolve3, sep } from "node:path";
 import { fileURLToPath } from "node:url";
 import { Worker } from "node:worker_threads";
 
 // src/api.ts
 init_define_MESSENGER_BUILD_INFO();
 
+// src/resource-connections.ts
+init_define_MESSENGER_BUILD_INFO();
+import { randomUUID as randomUUID2 } from "node:crypto";
+
 // src/workspace-profile.ts
 init_define_MESSENGER_BUILD_INFO();
 import { existsSync as existsSync2, lstatSync, mkdirSync as mkdirSync2, readFileSync as readFileSync2, renameSync as renameSync2, writeFileSync as writeFileSync2 } from "node:fs";
-import { join as join2 } from "node:path";
+import { join as join2, resolve } from "node:path";
 import { randomUUID } from "node:crypto";
+var profileObservers = /* @__PURE__ */ new Map();
+function profileKey(dir, cid) {
+  return resolve(path(dir, cid));
+}
+function subscribeHumanProfile(dir, cid, onCommitted, signal) {
+  if (signal.aborted) return () => {
+  };
+  const key = profileKey(dir, cid), observers = profileObservers.get(key) ?? /* @__PURE__ */ new Set();
+  profileObservers.set(key, observers);
+  observers.add(onCommitted);
+  const dispose = () => {
+    observers.delete(onCommitted);
+    if (!observers.size) profileObservers.delete(key);
+    signal.removeEventListener("abort", dispose);
+  };
+  signal.addEventListener("abort", dispose, { once: true });
+  return dispose;
+}
+function publishHumanProfile(dir, cid) {
+  for (const observer of [...profileObservers.get(profileKey(dir, cid)) ?? []]) {
+    try {
+      observer();
+    } catch {
+    }
+  }
+}
 function workspaceProfile(value) {
   const optional = (field) => field == null || field === "" ? null : profileName(field);
   return { fullName: optional(value.fullName), name: optional(value.name), surname: optional(value.surname) };
@@ -11797,15 +11827,311 @@ function writeHumanProfile(dir, cid, value) {
   const temporary = file + "." + randomUUID();
   writeFileSync2(temporary, JSON.stringify(row) + "\n", { mode: 384, flag: "wx" });
   renameSync2(temporary, file);
+  publishHumanProfile(dir, cid);
   return row;
 }
 
+// src/watch.ts
+init_define_MESSENGER_BUILD_INFO();
+import { createHash } from "node:crypto";
+
+// src/events.ts
+init_define_MESSENGER_BUILD_INFO();
+var nonEmpty2 = (value) => typeof value === "string" && value.length > 0;
+function normalizeNotification(record) {
+  if (record.event === "message_received") {
+    if (!nonEmpty2(record.sender_id) || !nonEmpty2(record.wire_id) || !nonEmpty2(record.date)) {
+      return { type: "sync_required", reason: "legacy_event" };
+    }
+    return {
+      type: "message_received",
+      contact_id: record.sender_id,
+      wire_id: record.wire_id,
+      date: record.date
+    };
+  }
+  if (record.event === "receipt_received") {
+    const kind = record.kind;
+    const wireIds = record.wire_ids;
+    if (!nonEmpty2(record.sender_id) || kind !== "delivered" && kind !== "read" || !Array.isArray(wireIds) || !wireIds.every(nonEmpty2)) {
+      return { type: "sync_required", reason: "legacy_event" };
+    }
+    return {
+      type: "receipt_received",
+      contact_id: record.sender_id,
+      kind,
+      wire_ids: [...wireIds],
+      // Receipt time is not present in the currently published actor contract.
+      // A fixed actor should supply it; observation time is the explicit fallback.
+      date: nonEmpty2(record.date) ? record.date : (/* @__PURE__ */ new Date()).toISOString()
+    };
+  }
+  if (record.event === "file_received") {
+    if (!nonEmpty2(record.sender_id) || !nonEmpty2(record.wire_id) || !nonEmpty2(record.date)) {
+      return { type: "sync_required", reason: "legacy_event" };
+    }
+    return {
+      type: "file_received",
+      contact_id: record.sender_id,
+      wire_id: record.wire_id,
+      date: record.date
+    };
+  }
+  return { type: "sync_required", reason: "unknown_event" };
+}
+var MessengerEventBus = class {
+  #subscribers = /* @__PURE__ */ new Set();
+  get size() {
+    return this.#subscribers.size;
+  }
+  subscribe(limit = 64) {
+    if (!Number.isInteger(limit) || limit < 1) throw new Error("subscriber queue limit must be a positive integer");
+    const sub = { limit, queue: [], waiting: null, closed: false, overflowed: false };
+    this.#subscribers.add(sub);
+    return {
+      next: () => {
+        if (sub.queue.length > 0) {
+          const event = sub.queue.shift();
+          if (event.type === "sync_required" && event.reason === "overflow") sub.overflowed = false;
+          return Promise.resolve(event);
+        }
+        if (sub.closed) return Promise.resolve(null);
+        if (sub.waiting) throw new Error("only one pending next() is allowed per event subscriber");
+        return new Promise((resolve4) => {
+          sub.waiting = resolve4;
+        });
+      },
+      close: () => this.#close(sub)
+    };
+  }
+  publish(event) {
+    for (const sub of this.#subscribers) {
+      if (sub.closed) continue;
+      if (sub.waiting) {
+        const resolve4 = sub.waiting;
+        sub.waiting = null;
+        resolve4(event);
+        continue;
+      }
+      if (sub.overflowed) continue;
+      if (sub.queue.length >= sub.limit) {
+        sub.queue.splice(0, sub.queue.length, { type: "sync_required", reason: "overflow" });
+        sub.overflowed = true;
+        continue;
+      }
+      sub.queue.push(event);
+    }
+  }
+  close() {
+    for (const sub of [...this.#subscribers]) this.#close(sub);
+  }
+  #close(sub) {
+    if (sub.closed) return;
+    sub.closed = true;
+    sub.queue.length = 0;
+    this.#subscribers.delete(sub);
+    const resolve4 = sub.waiting;
+    sub.waiting = null;
+    resolve4?.(null);
+  }
+};
+function toSse(event, identity) {
+  if (event.type === "sync_required") {
+    return {
+      event: event.type,
+      data: { v: 1, reason: event.reason, ...identity ? { identity } : {} }
+    };
+  }
+  const { type, ...metadata } = event;
+  return { event: type, data: { v: 1, ...metadata } };
+}
+
+// src/watch.ts
+function pageDigest(events) {
+  return createHash("sha256").update(JSON.stringify(events)).digest("base64url");
+}
+function applyNotificationPage(page, push, delivery, events, stats, log2) {
+  if (!Number.isSafeInteger(page.cursor) || page.cursor < 0 || !Array.isArray(page.events)) {
+    throw new Error("daemon notification page is malformed");
+  }
+  const fromCursor = push.notificationCursor;
+  if (fromCursor === null) {
+    if (page.events.length > 0) throw new Error("daemon notification tip page unexpectedly contained events");
+    push.commitNotificationCursor(page.cursor);
+    stats.cursorCommits++;
+    return true;
+  }
+  let progress = push.notificationPageProgress;
+  if (progress) {
+    const prefix = page.events.slice(0, progress.eventCount);
+    if (progress.fromCursor !== fromCursor || page.cursor < progress.cursor || page.events.length < progress.eventCount || pageDigest(prefix) !== progress.digest) {
+      throw new Error("daemon notification page changed while a checkpoint was in progress");
+    }
+  } else {
+    progress = push.beginNotificationPage({
+      fromCursor,
+      cursor: page.cursor,
+      eventCount: page.events.length,
+      digest: pageDigest(page.events)
+    });
+  }
+  for (let index = progress.nextIndex; index < progress.eventCount; index++) {
+    const record = page.events[index];
+    const admission = delivery.admit(record, index + 1);
+    if (admission.status === "saturated") {
+      push.checkpointNotificationPage();
+      stats.saturationEvents++;
+      log2.warn(`event=push_cursor_blocked status=saturated source_cursor=${page.cursor}`);
+      return false;
+    }
+    stats.events++;
+    events.publish(normalizeNotification(record));
+    if (!admission.checkpointed) push.advanceNotificationPage(index + 1);
+  }
+  push.commitNotificationPage();
+  stats.cursorCommits++;
+  return true;
+}
+function abortableWait(ms, signal) {
+  if (signal.aborted) return Promise.resolve();
+  return new Promise((resolve4) => {
+    const timer = setTimeout(done, ms);
+    function done() {
+      clearTimeout(timer);
+      signal.removeEventListener("abort", done);
+      resolve4();
+    }
+    signal.addEventListener("abort", done, { once: true });
+  });
+}
+function startWatcher(client, identity, push, log2, events, options) {
+  const controller = new AbortController();
+  const stats = { pushes: 0, events: 0, reconnects: 0, cursorCommits: 0, saturationEvents: 0 };
+  let backoffMs = 500;
+  let reconnecting = false;
+  const wait = options.wait ?? abortableWait;
+  const probe = options.probe ?? (() => client.version());
+  const loop = (async () => {
+    while (!controller.signal.aborted) {
+      try {
+        if (reconnecting) {
+          await probe();
+          if (controller.signal.aborted) break;
+          events.publish({ type: "sync_required", reason: "daemon_reconnected" });
+          reconnecting = false;
+        }
+        const since = push.notificationCursor ?? "tip";
+        const page = await options.readPage(identity, since, controller.signal);
+        if (controller.signal.aborted) break;
+        const committed = applyNotificationPage(page, push, options.delivery, events, stats, log2);
+        if (!committed) {
+          await wait(backoffMs, controller.signal);
+          backoffMs = Math.min(backoffMs * 2, 3e4);
+          continue;
+        }
+        backoffMs = 500;
+      } catch (e2) {
+        if (controller.signal.aborted) break;
+        stats.reconnects++;
+        reconnecting = true;
+        events.publish({ type: "sync_required", reason: "daemon_unavailable" });
+        reportFailure(log2.warn, `watch stream; reconnecting in ${backoffMs}ms`, e2);
+        await wait(backoffMs, controller.signal);
+        backoffMs = Math.min(backoffMs * 2, 3e4);
+      }
+    }
+  })();
+  return {
+    stats,
+    async stop() {
+      controller.abort();
+      await loop;
+    }
+  };
+}
+function startResourceObserver(client, identity, callbacks) {
+  const controller = new AbortController();
+  let healthy = false;
+  let failed = false;
+  let lastCoverage = 0;
+  let generation;
+  let readyResolve;
+  let readyReject;
+  let readySettled = false;
+  const ready = new Promise((resolve4, reject) => {
+    readyResolve = resolve4;
+    readyReject = reject;
+  });
+  void ready.catch(() => {
+  });
+  const fail = (error) => {
+    if (failed) return;
+    failed = true;
+    healthy = false;
+    if (!readySettled) {
+      readySettled = true;
+      readyReject(error);
+    }
+    if (!controller.signal.aborted) callbacks.failed(error);
+  };
+  const loop = (async () => {
+    try {
+      for await (const frame of client.resourceEvents(identity, { signal: controller.signal })) {
+        if (controller.signal.aborted) break;
+        if (frame.kind === "resync" || generation !== void 0 && generation !== frame.producerGeneration) {
+          throw new Error("resource source continuity lost");
+        }
+        lastCoverage = Date.now();
+        if (frame.kind === "ready") {
+          generation = frame.producerGeneration;
+          healthy = true;
+          if (!readySettled) {
+            readySettled = true;
+            readyResolve();
+          }
+        }
+        callbacks.committed(frame);
+      }
+      if (!controller.signal.aborted) fail(new Error("resource source ended"));
+    } catch (error) {
+      fail(error instanceof Error ? error : new Error("resource source failed"));
+    } finally {
+      healthy = false;
+    }
+  })();
+  return {
+    ready,
+    get healthy() {
+      if (healthy && Date.now() - lastCoverage >= 6e3) {
+        fail(new Error("resource source coverage expired"));
+        controller.abort();
+      }
+      return healthy;
+    },
+    get generation() {
+      return generation;
+    },
+    async stop() {
+      healthy = false;
+      controller.abort();
+      if (!readySettled) {
+        readySettled = true;
+        readyReject(new Error("resource source aborted"));
+      }
+      await loop;
+    }
+  };
+}
+
+// src/resource-views.ts
+init_define_MESSENGER_BUILD_INFO();
+
 // src/conversation.ts
 init_define_MESSENGER_BUILD_INFO();
 
 // src/typed-commands.ts
 init_define_MESSENGER_BUILD_INFO();
-import { createHash } from "node:crypto";
+import { createHash as createHash2 } from "node:crypto";
 var MAX_COMMANDS = 64;
 var MAX_COMMAND_NAME_LENGTH = 128;
 var MAX_COMMAND_DESCRIPTION_LENGTH = 2048;
@@ -11865,7 +12191,7 @@ function projectCatalog(recipientCid, commands) {
       input_schema: command.input_schema
     };
   });
-  const fingerprint2 = createHash("sha256").update(canonical({
+  const fingerprint2 = createHash2("sha256").update(canonical({
     recipient_cid: recipientCid,
     commands: projected
   })).digest("base64url");
@@ -11948,128 +12274,494 @@ function projectHistoryPage(contact, history, summary, opts = {}) {
   };
 }
 
-// src/media-response.ts
-init_define_MESSENGER_BUILD_INFO();
-var INLINE_MEDIA = /^(?:image\/(?:avif|gif|jpeg|png|webp)|audio\/[a-z0-9.+-]+|video\/[a-z0-9.+-]+)$/;
-function mediaResponsePolicy(mime2) {
-  const declared = mime2.toLowerCase().split(";", 1)[0].trim();
-  return INLINE_MEDIA.test(declared) ? { mime: declared, disposition: "inline" } : { mime: "application/octet-stream", disposition: "attachment" };
-}
+// src/resource-views.ts
+async function abortableProjection(read, signal) {
+  signal.throwIfAborted();
+  let onAbort;
+  const aborted = new Promise((_, reject) => {
+    onAbort = () => reject(signal.reason ?? new Error("resource projection aborted"));
+    signal.addEventListener("abort", onAbort, { once: true });
+  });
+  try {
+    return await Promise.race([read, aborted]);
+  } finally {
+    signal.removeEventListener("abort", onAbort);
+  }
+}
+async function captureResourceProjection(client, identity, project, signal, localRevision = () => 0) {
+  for (let attempt = 0; attempt < 3; attempt++) {
+    signal.throwIfAborted();
+    const local = localRevision();
+    const before = await abortableProjection(client.resourcePosition(identity, { signal }), signal);
+    signal.throwIfAborted();
+    const payload = await abortableProjection(project(), signal);
+    signal.throwIfAborted();
+    const after = await abortableProjection(client.resourcePosition(identity, { signal }), signal);
+    signal.throwIfAborted();
+    if (before.producerGeneration === after.producerGeneration && before.position === after.position && local === localRevision()) return { source: after, payload };
+  }
+  throw new Error("resource projection unstable");
+}
+var RESOURCE_FRAME_BYTES = 512 * 1024;
+var RESOURCE_PENDING_BYTES = 8 * 1024 * 1024;
+var RESOURCE_ASSEMBLY_BYTES = 16 * 1024 * 1024;
+var CHUNK_BYTES = 256 * 1024;
+function* resourceFrames(envelope) {
+  const bytes = Buffer.from(JSON.stringify(envelope));
+  if (bytes.length > RESOURCE_ASSEMBLY_BYTES) throw new Error("resource assembly limit exceeded");
+  const ordinary = { event: "resource", data: envelope };
+  if (Buffer.byteLength(`event: resource
+data: ${bytes.toString("utf8")}
 
-// src/events.ts
-init_define_MESSENGER_BUILD_INFO();
-var nonEmpty2 = (value) => typeof value === "string" && value.length > 0;
-function normalizeNotification(record) {
-  if (record.event === "message_received") {
-    if (!nonEmpty2(record.sender_id) || !nonEmpty2(record.wire_id) || !nonEmpty2(record.date)) {
-      return { type: "sync_required", reason: "legacy_event" };
-    }
-    return {
-      type: "message_received",
-      contact_id: record.sender_id,
-      wire_id: record.wire_id,
-      date: record.date
-    };
+`) <= RESOURCE_FRAME_BYTES) {
+    yield ordinary;
+    return;
   }
-  if (record.event === "receipt_received") {
-    const kind = record.kind;
-    const wireIds = record.wire_ids;
-    if (!nonEmpty2(record.sender_id) || kind !== "delivered" && kind !== "read" || !Array.isArray(wireIds) || !wireIds.every(nonEmpty2)) {
-      return { type: "sync_required", reason: "legacy_event" };
-    }
-    return {
-      type: "receipt_received",
-      contact_id: record.sender_id,
-      kind,
-      wire_ids: [...wireIds],
-      // Receipt time is not present in the currently published actor contract.
-      // A fixed actor should supply it; observation time is the explicit fallback.
-      date: nonEmpty2(record.date) ? record.date : (/* @__PURE__ */ new Date()).toISOString()
+  const id = `${envelope.viewId}:${envelope.subscriptionEpoch}:${envelope.sequence}`;
+  const binding = {
+    protocolVersion: 1,
+    id,
+    producerGeneration: envelope.producerGeneration,
+    viewId: envelope.viewId,
+    subscriptionEpoch: envelope.subscriptionEpoch,
+    revision: envelope.revision,
+    sequence: envelope.sequence
+  };
+  yield { event: "resource-chunk", data: { ...binding, type: "start", totalBytes: bytes.length, parts: Math.ceil(bytes.length / CHUNK_BYTES) } };
+  for (let offset = 0, index = 0; offset < bytes.length; offset += CHUNK_BYTES, index++) {
+    yield { event: "resource-chunk", data: { ...binding, type: "chunk", index, data: bytes.subarray(offset, offset + CHUNK_BYTES).toString("base64") } };
+  }
+  yield { event: "resource-chunk", data: { ...binding, type: "commit", totalBytes: bytes.length } };
+}
+function canonicalResourceDescriptor(value) {
+  const invalid = () => {
+    throw new Error("invalid resource descriptor");
+  };
+  if (!value || typeof value !== "object" || Array.isArray(value)) return invalid();
+  const row = value;
+  if (Object.keys(row).some((key) => !["viewId", "resource", "entityId", "window"].includes(key)) || typeof row.viewId !== "string" || !/^[A-Za-z0-9_-]{1,128}$/.test(row.viewId) || !["contacts", "identity", "messages", "files", "commands"].includes(String(row.resource))) return invalid();
+  const resource = row.resource;
+  const scoped = ["messages", "files", "commands"].includes(resource);
+  if (scoped ? typeof row.entityId !== "string" || !row.entityId : row.entityId !== void 0) return invalid();
+  if (resource !== "messages" && row.window !== void 0) return invalid();
+  let window2;
+  if (resource === "messages") {
+    const raw = row.window ?? { limit: 50, retainedPages: 1 };
+    if (!raw || typeof raw !== "object" || Array.isArray(raw)) return invalid();
+    const w2 = raw;
+    if (Object.keys(w2).some((key) => !["limit", "retainedPages", "oldestSequence"].includes(key)) || !Number.isInteger(w2.limit) || w2.limit < 1 || w2.limit > 200 || !Number.isSafeInteger(w2.retainedPages) || w2.retainedPages < 1 || w2.oldestSequence !== void 0 && (!Number.isSafeInteger(w2.oldestSequence) || w2.oldestSequence < 1)) return invalid();
+    window2 = {
+      limit: w2.limit,
+      retainedPages: w2.retainedPages,
+      ...w2.oldestSequence === void 0 ? {} : { oldestSequence: w2.oldestSequence }
     };
   }
-  if (record.event === "file_received") {
-    if (!nonEmpty2(record.sender_id) || !nonEmpty2(record.wire_id) || !nonEmpty2(record.date)) {
-      return { type: "sync_required", reason: "legacy_event" };
+  return { viewId: row.viewId, resource, ...scoped ? { entityId: row.entityId } : {}, ...window2 ? { window: window2 } : {} };
+}
+async function projectMessageWindow(client, contact, announcedContact, window2, signal) {
+  let before;
+  const rows = [];
+  let next = null;
+  let totalBytes = 0;
+  for (let pageIndex = 0; ; pageIndex++) {
+    signal.throwIfAborted();
+    const page = await client.listHistory({ peer_cid: contact, before_seq: before, limit: window2.limit });
+    signal.throwIfAborted();
+    if (page.next_cursor !== null && (!Number.isSafeInteger(page.next_cursor) || before !== void 0 && page.next_cursor >= before)) throw new Error("invalid history continuation");
+    const selected = window2.oldestSequence === void 0 ? page.items : page.items.filter((row) => row.seq >= window2.oldestSequence);
+    totalBytes += Buffer.byteLength(JSON.stringify(projectHistoryPage(
+      contact,
+      { items: selected, next_cursor: null },
+      { total: 0, unread: 0 },
+      { announcedContact }
+    ).messages));
+    if (totalBytes > RESOURCE_ASSEMBLY_BYTES) throw new Error("resource assembly limit exceeded");
+    rows.push(...selected);
+    next = page.next_cursor;
+    const crossedLowerBound = window2.oldestSequence !== void 0 && page.items.some((row) => row.seq <= window2.oldestSequence);
+    if (next === null || crossedLowerBound || window2.oldestSequence === void 0 && pageIndex + 1 >= window2.retainedPages) {
+      if (selected.length !== page.items.length) next = selected.at(-1)?.seq ?? window2.oldestSequence;
+      break;
     }
-    return {
-      type: "file_received",
-      contact_id: record.sender_id,
-      wire_id: record.wire_id,
-      date: record.date
-    };
+    before = next;
   }
-  return { type: "sync_required", reason: "unknown_event" };
+  const ids = new Set(rows.map((row) => row.wire_id));
+  if (ids.has("") || ids.size !== rows.length) throw new Error("message view lacks stable IDs");
+  const summary = await client.getHistorySummary({ peer_cid: contact });
+  signal.throwIfAborted();
+  return {
+    ...projectHistoryPage(contact, { items: rows, next_cursor: next }, summary, { announcedContact }),
+    oldestSequence: rows.at(-1)?.seq ?? window2.oldestSequence ?? null
+  };
 }
-var MessengerEventBus = class {
-  #subscribers = /* @__PURE__ */ new Set();
-  get size() {
-    return this.#subscribers.size;
+async function messageProjectionDelta(client, previous, current, signal) {
+  const old = new Map(previous.messages.map((item) => [item.wire_id, item]));
+  const ids = new Set(current.messages.map((item) => item.wire_id));
+  if (ids.has("") || ids.size !== current.messages.length) throw new Error("message view lacks stable IDs");
+  const deletes = [];
+  for (const id of old.keys()) {
+    signal.throwIfAborted();
+    if (!ids.has(id) && await client.getHistoryItem({ wire_id: id }) === null) deletes.push(id);
+  }
+  signal.throwIfAborted();
+  const { messages, ...metadata } = current;
+  return {
+    type: "message-delta",
+    upserts: messages.filter((item) => JSON.stringify(old.get(item.wire_id)) !== JSON.stringify(item)).map((item) => ({ id: item.wire_id, item })),
+    deletes,
+    window: { ...metadata, orderedIds: messages.map((item) => item.wire_id) }
+  };
+}
+
+// src/resource-connections.ts
+var ResourceOutput = class {
+  constructor(response, signal, failed) {
+    this.response = response;
+    this.signal = signal;
+    this.failed = failed;
+    if (signal.aborted) this.close();
+    else {
+      signal.addEventListener("abort", this.#abort, { once: true });
+      response.once("close", this.#abort);
+    }
+  }
+  #pending = [];
+  #pendingBytes = 0;
+  #active;
+  #closed = false;
+  #releaseDrain;
+  #abort = () => this.close();
+  send(envelope) {
+    if (this.#closed) return Promise.reject(new Error("resource output closed"));
+    const bytes = Buffer.byteLength(JSON.stringify(envelope));
+    if (bytes > RESOURCE_ASSEMBLY_BYTES) return this.#fail(new Error("resource assembly limit exceeded"));
+    if (this.#active && this.#pendingBytes + bytes > RESOURCE_PENDING_BYTES) {
+      return this.#fail(new Error("resource pending limit exceeded"));
+    }
+    return new Promise((resolve4, reject) => {
+      const item = { envelope, bytes, resolve: resolve4, reject };
+      if (!this.#active) {
+        this.#active = item;
+        void this.#pump();
+      } else {
+        this.#pending.push(item);
+        this.#pendingBytes += bytes;
+      }
+    });
   }
-  subscribe(limit = 64) {
-    if (!Number.isInteger(limit) || limit < 1) throw new Error("subscriber queue limit must be a positive integer");
-    const sub = { limit, queue: [], waiting: null, closed: false, overflowed: false };
-    this.#subscribers.add(sub);
-    return {
-      next: () => {
-        if (sub.queue.length > 0) {
-          const event = sub.queue.shift();
-          if (event.type === "sync_required" && event.reason === "overflow") sub.overflowed = false;
-          return Promise.resolve(event);
+  #fail(error) {
+    this.close(error);
+    this.failed(error);
+    return Promise.reject(error);
+  }
+  close(error = new Error("resource output closed")) {
+    if (this.#closed) return;
+    this.#closed = true;
+    this.signal.removeEventListener("abort", this.#abort);
+    this.response.removeListener("close", this.#abort);
+    this.#releaseDrain?.();
+    this.#active?.reject(error);
+    for (const item of this.#pending.splice(0)) item.reject(error);
+    this.#pendingBytes = 0;
+    if (!this.response.destroyed && !this.response.writableEnded) this.response.end();
+  }
+  async #pump() {
+    try {
+      while (this.#active && !this.#closed) {
+        const item = this.#active;
+        for (const frame of resourceFrames(item.envelope)) {
+          if (this.#closed) break;
+          const writable = this.response.write(`event: ${frame.event}
+data: ${JSON.stringify(frame.data)}
+
+`);
+          if (!writable) await this.#drain();
         }
-        if (sub.closed) return Promise.resolve(null);
-        if (sub.waiting) throw new Error("only one pending next() is allowed per event subscriber");
-        return new Promise((resolve3) => {
-          sub.waiting = resolve3;
+        if (this.#closed) break;
+        item.resolve();
+        this.#active = this.#pending.shift();
+        if (this.#active) this.#pendingBytes -= this.#active.bytes;
+      }
+    } catch (error) {
+      const failure = error instanceof Error ? error : new Error("resource output failed");
+      this.close(failure);
+      this.failed(failure);
+    }
+  }
+  #drain() {
+    if (this.#closed) return Promise.resolve();
+    return new Promise((resolve4) => {
+      const release = () => {
+        this.response.removeListener("drain", release);
+        this.#releaseDrain = void 0;
+        resolve4();
+      };
+      this.#releaseDrain = release;
+      this.response.once("drain", release);
+    });
+  }
+};
+var ResourceBindingError = class extends Error {
+  constructor(status, message) {
+    super(message);
+    this.status = status;
+  }
+};
+var ResourceConnections = class {
+  constructor(deps) {
+    this.deps = deps;
+  }
+  #connections = /* @__PURE__ */ new Map();
+  producerGeneration = randomUUID2();
+  open(response) {
+    const id = randomUUID2(), controller = new AbortController();
+    let resolveClosed;
+    const closed = new Promise((resolve4) => {
+      resolveClosed = resolve4;
+    });
+    let connection;
+    const close = () => {
+      if (controller.signal.aborted) return;
+      controller.abort();
+      this.#connections.delete(id);
+      if (connection) {
+        for (const view of connection.views.values()) this.#retire(view);
+        connection.views.clear();
+        connection.output.close();
+        void connection.observer.stop().catch(() => {
         });
+      }
+      response.removeListener("close", close);
+      resolveClosed();
+    };
+    const output = new ResourceOutput(response, controller.signal, close);
+    const observer = startResourceObserver(this.deps.client, this.deps.identity, {
+      committed: (frame) => {
+        if (!connection || controller.signal.aborted) return;
+        for (const view of connection.views.values()) {
+          if (frame.kind === "coverage") {
+            if (view.covered && !view.failed) void this.#emit(connection, view, "coverage", { source: view.covered }).catch(close);
+          } else if (!view.covered || frame.position > view.covered.position) this.#schedule(connection, view);
+        }
       },
-      close: () => this.#close(sub)
+      failed: (error) => {
+        if (!connection || controller.signal.aborted) return;
+        const reason = "status" in error && (error.status === 401 || error.status === 403) ? "auth_required" : "status" in error && error.status === 404 ? "unsupported" : "upstream_unavailable";
+        const writes = [...connection.views.values()].map((view) => {
+          view.failed = true;
+          view.rejectInitial(error);
+          view.controller.abort();
+          return this.#emit(connection, view, "health", { healthy: false, reason });
+        });
+        if (!writes.length) {
+          response.write(`event: resource-service-health
+data: ${JSON.stringify({
+            protocolVersion: 1,
+            connectionId: id,
+            producerGeneration: this.producerGeneration,
+            healthy: false,
+            reason
+          })}
+
+`);
+          close();
+        } else void Promise.allSettled(writes).then(close);
+      }
+    });
+    connection = { id, controller, output, views: /* @__PURE__ */ new Map(), epochs: /* @__PURE__ */ new Map(), observer, localRevision: 0, projectionTail: Promise.resolve(), close };
+    this.#connections.set(id, connection);
+    response.once("close", close);
+    subscribeHumanProfile(this.deps.stateDir, this.deps.identityCid, () => {
+      if (!connection || controller.signal.aborted) return;
+      connection.localRevision++;
+      for (const view of connection.views.values()) if (view.descriptor.resource === "identity") this.#schedule(connection, view);
+    }, controller.signal);
+    response.write(`event: resource-connection
+data: ${JSON.stringify({
+      protocolVersion: 1,
+      connectionId: id,
+      producerGeneration: this.producerGeneration,
+      identityCid: this.deps.identityCid,
+      baselineRequired: true,
+      continuity: "reset"
+    })}
+
+`);
+    return { connectionId: id, close, closed };
+  }
+  async register(connectionId, viewId, epoch, input, signal) {
+    const connection = this.#get(connectionId);
+    let descriptor;
+    try {
+      descriptor = canonicalResourceDescriptor(input);
+    } catch {
+      throw new ResourceBindingError(400, "invalid resource descriptor");
+    }
+    if (descriptor.viewId !== viewId || !Number.isSafeInteger(epoch) || epoch < 1) throw new ResourceBindingError(400, "invalid subscription epoch");
+    const priorEpoch = connection.epochs.get(viewId);
+    if (priorEpoch !== void 0 && epoch <= priorEpoch) throw new ResourceBindingError(409, "obsolete subscription epoch");
+    if (!connection.epochs.has(viewId) && connection.epochs.size >= 256) throw new ResourceBindingError(503, "resource epoch capacity exceeded");
+    const lifetime = signal ? AbortSignal.any([signal, connection.controller.signal]) : connection.controller.signal;
+    await abortableProjection(connection.observer.ready, lifetime);
+    lifetime.throwIfAborted();
+    if (connection.controller.signal.aborted || !connection.observer.healthy) throw new ResourceBindingError(503, "resource source unavailable");
+    const current = connection.views.get(viewId);
+    if ((connection.epochs.get(viewId) ?? 0) >= epoch) throw new ResourceBindingError(409, "obsolete subscription epoch");
+    if (!connection.epochs.has(viewId) && connection.epochs.size >= 256) throw new ResourceBindingError(503, "resource epoch capacity exceeded");
+    if (current) this.#retire(current);
+    let resolveInitial, rejectInitial;
+    const initial = new Promise((resolve4, reject) => {
+      resolveInitial = resolve4;
+      rejectInitial = reject;
+    });
+    void initial.catch(() => {
+    });
+    const view = {
+      descriptor,
+      epoch,
+      baselineId: randomUUID2(),
+      controller: new AbortController(),
+      revision: 0,
+      sequence: 0,
+      dirty: false,
+      running: false,
+      failed: false,
+      initial,
+      resolveInitial,
+      rejectInitial,
+      localRevision: -1
     };
+    connection.views.set(viewId, view);
+    connection.epochs.set(viewId, epoch);
+    this.#schedule(connection, view);
+    return { subscriptionEpoch: epoch, baselineId: view.baselineId };
+  }
+  remove(connectionId, viewId, epoch) {
+    if (typeof viewId !== "string" || !/^[A-Za-z0-9_-]{1,128}$/.test(viewId) || !Number.isSafeInteger(epoch) || epoch < 1) throw new ResourceBindingError(400, "invalid subscription epoch");
+    const connection = this.#connections.get(connectionId);
+    if (!connection) return;
+    if (!connection.epochs.has(viewId) && connection.epochs.size >= 256) throw new ResourceBindingError(503, "resource epoch capacity exceeded");
+    connection.epochs.set(viewId, Math.max(connection.epochs.get(viewId) ?? 0, epoch));
+    const view = connection.views.get(viewId);
+    if (view && epoch >= view.epoch) {
+      this.#retire(view);
+      connection.views.delete(viewId);
+    }
+  }
+  async bound(connectionId, viewId, epoch, baselineId) {
+    const connection = this.#get(connectionId), view = connection.views.get(viewId);
+    if (!view || view.epoch !== epoch || view.baselineId !== baselineId) throw new ResourceBindingError(409, "resource binding mismatch");
+    const baseline = await view.initial;
+    if (!this.#current(connection, view) || view.failed || !connection.observer.healthy) throw new ResourceBindingError(409, "resource binding retired");
+    return baseline;
+  }
+  #get(id) {
+    const connection = this.#connections.get(id);
+    if (!connection) throw new ResourceBindingError(409, "unknown resource connection");
+    return connection;
+  }
+  #current(connection, view) {
+    return !connection.controller.signal.aborted && !view.controller.signal.aborted && connection.views.get(view.descriptor.viewId) === view;
+  }
+  #retire(view) {
+    view.controller.abort();
+    view.rejectInitial(new ResourceBindingError(409, "resource binding retired"));
+  }
+  #emit(connection, view, kind, payload) {
+    return connection.output.send({
+      protocolVersion: 1,
+      producerGeneration: this.producerGeneration,
+      viewId: view.descriptor.viewId,
+      subscriptionEpoch: view.epoch,
+      sequence: ++view.sequence,
+      revision: view.revision,
+      baselineId: view.baselineId,
+      kind,
+      payload
+    });
   }
-  publish(event) {
-    for (const sub of this.#subscribers) {
-      if (sub.closed) continue;
-      if (sub.waiting) {
-        const resolve3 = sub.waiting;
-        sub.waiting = null;
-        resolve3(event);
-        continue;
-      }
-      if (sub.overflowed) continue;
-      if (sub.queue.length >= sub.limit) {
-        sub.queue.splice(0, sub.queue.length, { type: "sync_required", reason: "overflow" });
-        sub.overflowed = true;
-        continue;
+  #schedule(connection, view) {
+    if (!this.#current(connection, view) || view.failed) return;
+    view.dirty = true;
+    if (view.running) return;
+    view.running = true;
+    const task = connection.projectionTail.then(() => this.#refresh(connection, view));
+    connection.projectionTail = task.catch(() => {
+    });
+    void task.finally(() => {
+      view.running = false;
+      if (view.dirty) this.#schedule(connection, view);
+    }).catch(connection.close);
+  }
+  async #refresh(connection, view) {
+    try {
+      if (view.dirty && this.#current(connection, view)) {
+        view.dirty = false;
+        const localRevision = connection.localRevision;
+        const captured = await captureResourceProjection(this.deps.client, this.deps.identity, async () => {
+          const payload = await this.deps.project(view.descriptor, view.controller.signal);
+          const delta = view.descriptor.resource === "messages" && view.payload !== void 0 ? await messageProjectionDelta(
+            this.deps.client,
+            view.payload,
+            payload,
+            view.controller.signal
+          ) : void 0;
+          return { payload, delta };
+        }, view.controller.signal, () => connection.localRevision);
+        if (!this.#current(connection, view)) return;
+        if (!connection.observer.healthy || captured.source.producerGeneration !== connection.observer.generation) {
+          throw new Error("resource source continuity lost");
+        }
+        const first = view.payload === void 0;
+        const changed = first || JSON.stringify(captured.payload.payload) !== JSON.stringify(view.payload);
+        view.covered = captured.source;
+        view.localRevision = localRevision;
+        if (changed) {
+          view.revision++;
+          if (first || view.descriptor.resource !== "messages") {
+            await this.#emit(connection, view, "snapshot", captured.payload.payload);
+          } else {
+            await this.#emit(connection, view, "upsert", captured.payload.delta);
+          }
+          if (!this.#current(connection, view)) return;
+          view.payload = captured.payload.payload;
+        }
+        if (first) {
+          await this.#emit(connection, view, "ready", { baselineId: view.baselineId, source: captured.source });
+          if (!this.#current(connection, view)) return;
+          view.resolveInitial({
+            payload: view.payload,
+            source: captured.source,
+            producerGeneration: this.producerGeneration,
+            revision: view.revision,
+            baselineId: view.baselineId,
+            descriptor: view.descriptor
+          });
+        } else {
+          await this.#emit(connection, view, "coverage", { source: captured.source });
+        }
       }
-      sub.queue.push(event);
+    } catch (error) {
+      if (!this.#current(connection, view)) return;
+      view.failed = true;
+      const failure = error instanceof Error ? error : new Error("resource projection failed");
+      view.rejectInitial(failure);
+      await this.#emit(connection, view, "resync", { reason: /limit/.test(failure.message) ? "capacity" : "projection_unavailable" }).catch(connection.close);
     }
   }
-  close() {
-    for (const sub of [...this.#subscribers]) this.#close(sub);
-  }
-  #close(sub) {
-    if (sub.closed) return;
-    sub.closed = true;
-    sub.queue.length = 0;
-    this.#subscribers.delete(sub);
-    const resolve3 = sub.waiting;
-    sub.waiting = null;
-    resolve3?.(null);
-  }
 };
-function toSse(event, identity) {
-  if (event.type === "sync_required") {
-    return {
-      event: event.type,
-      data: { v: 1, reason: event.reason, ...identity ? { identity } : {} }
-    };
-  }
-  const { type, ...metadata } = event;
-  return { event: type, data: { v: 1, ...metadata } };
+
+// src/media-response.ts
+init_define_MESSENGER_BUILD_INFO();
+var INLINE_MEDIA = /^(?:image\/(?:avif|gif|jpeg|png|webp)|audio\/[a-z0-9.+-]+|video\/[a-z0-9.+-]+)$/;
+function mediaResponsePolicy(mime2) {
+  const declared = mime2.toLowerCase().split(";", 1)[0].trim();
+  return INLINE_MEDIA.test(declared) ? { mime: declared, disposition: "inline" } : { mime: "application/octet-stream", disposition: "attachment" };
 }
 
 // src/command-invocations.ts
 init_define_MESSENGER_BUILD_INFO();
-import { createHash as createHash2 } from "node:crypto";
+import { createHash as createHash3 } from "node:crypto";
 import { chmodSync, mkdirSync as mkdirSync3, readFileSync as readFileSync3, renameSync as renameSync3, writeFileSync as writeFileSync3 } from "node:fs";
 import { dirname as dirname2, join as join3 } from "node:path";
 var MAX_INVOCATIONS = 4096;
@@ -12083,7 +12775,7 @@ function canonical2(value) {
   return `{${Object.keys(value).sort().map((key) => `${JSON.stringify(key)}:${canonical2(value[key])}`).join(",")}}`;
 }
 function invocationFingerprint(input) {
-  return createHash2("sha256").update(canonical2(input)).digest("base64url");
+  return createHash3("sha256").update(canonical2(input)).digest("base64url");
 }
 function validRecord(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return false;
@@ -12098,7 +12790,7 @@ var CommandInvocationStore = class _CommandInvocationStore {
   }
   static open(stateDir, identityCid, capacity = MAX_INVOCATIONS) {
     if (!Number.isInteger(capacity) || capacity < 1) throw new Error("invocation capacity must be a positive integer");
-    const file = join3(stateDir, `typed-commands-${createHash2("sha256").update(identityCid).digest("hex").slice(0, 24)}.json`);
+    const file = join3(stateDir, `typed-commands-${createHash3("sha256").update(identityCid).digest("hex").slice(0, 24)}.json`);
     let state = { version: 1, records: {} };
     try {
       const parsed = JSON.parse(readFileSync3(file, "utf8"));
@@ -20277,20 +20969,20 @@ init_define_MESSENGER_BUILD_INFO();
 function getEscape(char) {
   return char === 34 ? "&quot;" : char === 38 ? "&amp;" : char === 39 ? "&apos;" : char === 60 ? "&lt;" : char === 62 ? "&gt;" : "&nbsp;";
 }
-function escapeWithRegex(re2, data) {
-  re2.lastIndex = 0;
-  if (!re2.test(data))
+function escapeWithRegex(re, data) {
+  re.lastIndex = 0;
+  if (!re.test(data))
     return data;
   let out = "";
   let last = 0;
   do {
-    const index = re2.lastIndex - 1;
+    const index = re.lastIndex - 1;
     if (last !== index)
       out += data.substring(last, index);
     const char = data.charCodeAt(index);
     out += getEscape(char);
     last = index + 1;
-  } while (re2.test(data));
+  } while (re.test(data));
   return out + data.substring(last);
 }
 var attributeEscapeRegex = /["&\u{A0}]/gu;
@@ -20546,6 +21238,21 @@ var HTML_PREVIEW_RESPONSE_CSP = `${HTML_PREVIEW_CSP}; sandbox; frame-ancestors '
 var MAX_HTTP_BODY_BYTES = 32 * 1024 * 1024;
 var MAX_INLINE_FILE_BYTES = 20 * 1024 * 1024;
 var MAX_PUSH_BODY_BYTES = 16 * 1024;
+var resourceConnections = /* @__PURE__ */ new WeakMap();
+function resourceService(deps) {
+  let service = resourceConnections.get(deps);
+  if (!service) {
+    service = new ResourceConnections({
+      client: deps.runtime.client,
+      identity: deps.config.identity,
+      identityCid: deps.identityCid,
+      stateDir: deps.config.stateDir,
+      project: (descriptor, signal) => projectResourceView(deps, descriptor, signal)
+    });
+    resourceConnections.set(deps, service);
+  }
+  return service;
+}
 var invocationStores = /* @__PURE__ */ new WeakMap();
 function invocationStore(deps) {
   if (deps.commandInvocations) return deps.commandInvocations;
@@ -20562,23 +21269,23 @@ var HttpError = class extends Error {
     this.status = status;
   }
 };
-var bad = (m2) => new HttpError(400, m2);
+var bad = (m3) => new HttpError(400, m3);
 function str(body, key) {
-  const v2 = body[key];
-  if (typeof v2 !== "string" || v2 === "") throw bad(`${key} must be a non-empty string`);
-  return v2;
+  const v3 = body[key];
+  if (typeof v3 !== "string" || v3 === "") throw bad(`${key} must be a non-empty string`);
+  return v3;
 }
 function optStr(body, key) {
-  const v2 = body[key];
-  if (v2 === void 0 || v2 === null) return void 0;
-  if (typeof v2 !== "string" || v2 === "") throw bad(`${key}, when present, must be a non-empty string`);
-  return v2;
+  const v3 = body[key];
+  if (v3 === void 0 || v3 === null) return void 0;
+  if (typeof v3 !== "string" || v3 === "") throw bad(`${key}, when present, must be a non-empty string`);
+  return v3;
 }
 function optBool(body, key) {
-  const v2 = body[key];
-  if (v2 === void 0 || v2 === null) return void 0;
-  if (typeof v2 !== "boolean") throw bad(`${key}, when present, must be a boolean`);
-  return v2;
+  const v3 = body[key];
+  if (v3 === void 0 || v3 === null) return void 0;
+  if (typeof v3 !== "boolean") throw bad(`${key}, when present, must be a boolean`);
+  return v3;
 }
 function filename(body) {
   const value = str(body, "filename").normalize("NFC");
@@ -20772,11 +21479,19 @@ function beforeSequence(raw) {
   }
   return value;
 }
-async function listAllFiles(client, peerCid) {
+async function listAllFiles(client, peerCid, signal, identity) {
   const files = [];
+  let bytes = 0;
   let before;
   for (; ; ) {
+    signal?.throwIfAborted();
     const page = await client.listFiles({ peer_cid: peerCid, before_seq: before, limit: 200 });
+    signal?.throwIfAborted();
+    if (signal) {
+      bytes += Buffer.byteLength(JSON.stringify(page.items.map((row) => publicMediaRecord(row, identity, 1))));
+      if (bytes > RESOURCE_ASSEMBLY_BYTES) throw new Error("resource assembly limit exceeded");
+      if (page.next_cursor !== null && (!page.items.length || !Number.isSafeInteger(page.next_cursor) || before !== void 0 && page.next_cursor >= before)) throw new Error("invalid file continuation");
+    }
     files.push(...page.items);
     if (page.next_cursor === null) return files;
     before = page.next_cursor;
@@ -20844,8 +21559,8 @@ async function serveEvents(req, res, deps) {
   };
   const waitForDrain = () => {
     if (drainWait) return drainWait;
-    drainWait = new Promise((resolve3) => {
-      releaseDrain = resolve3;
+    drainWait = new Promise((resolve4) => {
+      releaseDrain = resolve4;
     });
     res.once("drain", onDrain);
     return drainWait;
@@ -20887,12 +21602,118 @@ async function serveEvents(req, res, deps) {
     if (!res.destroyed && !res.writableEnded) res.end();
   }
 }
+async function projectIdentityResource(client, deps) {
+  return { ...publicIdentity(await client.currentIdentity()), humanProfile: readHumanProfile(deps.config.stateDir, deps.identityCid) };
+}
+async function projectCommandResource(client, deps, params) {
+  if (deps.config.typedCommands === false) throw new HttpError(404, "Typed commands are disabled");
+  const peer = await resolveContact(client, params.contact);
+  return projectCatalog(peer.cid, await client.listContactCommands({ contact: peer.cid }));
+}
+async function projectFilesResource(client, deps, params, signal) {
+  const peer = await resolveContact(client, params.contact);
+  const files = (await listAllFiles(client, peer.cid, signal, { cid: deps.identityCid, name: deps.config.identity })).reverse();
+  const versions = /* @__PURE__ */ new Map();
+  return {
+    contact: params.contact,
+    files: files.map((row) => {
+      const logicalName = row.filename.normalize("NFC").toLocaleLowerCase("en-US");
+      const version = (versions.get(logicalName) ?? 0) + 1;
+      versions.set(logicalName, version);
+      return publicMediaRecord(row, {
+        cid: deps.identityCid,
+        name: deps.config.identity
+      }, version);
+    })
+  };
+}
+async function projectResourceView(deps, input, signal) {
+  const descriptor = canonicalResourceDescriptor(input), client = deps.runtime.client;
+  signal.throwIfAborted();
+  switch (descriptor.resource) {
+    case "contacts":
+      return presentContacts(await client.listContacts());
+    case "identity":
+      return projectIdentityResource(client, deps);
+    case "files":
+      return projectFilesResource(client, deps, { contact: descriptor.entityId }, signal);
+    case "commands":
+      return projectCommandResource(client, deps, { contact: descriptor.entityId });
+    case "messages": {
+      const peer = await resolveContact(client, descriptor.entityId);
+      const page = await projectMessageWindow(client, peer.cid, peer.announcedName, descriptor.window, signal);
+      return { ...page, contact: descriptor.entityId };
+    }
+  }
+}
 var ROUTES = {
   // ---- live metadata invalidations (canonical state remains REST/MUFL) ------
-  "GET /api/events": async ({ req, res, deps }) => {
+  "GET /api/events": async ({ req, res, deps, query }) => {
+    if (query.get("resources") === "1") {
+      res.writeHead(200, {
+        "content-type": "text/event-stream",
+        "cache-control": "no-cache, no-transform",
+        connection: "keep-alive",
+        "x-accel-buffering": "no"
+      });
+      res.flushHeaders?.();
+      const connection = resourceService(deps).open(res);
+      const close = () => connection.close();
+      req.once("close", close);
+      try {
+        await connection.closed;
+      } finally {
+        req.removeListener("close", close);
+        connection.close();
+      }
+      return void 0;
+    }
     await serveEvents(req, res, deps);
     return void 0;
   },
+  "POST /api/resource-subscriptions": async ({ req, res, deps, body }) => {
+    const connectionId = str(body, "connectionId"), viewId = str(body, "viewId");
+    const epoch = body.subscriptionEpoch;
+    if (deps.config.typedCommands === false && body.descriptor?.resource === "commands") {
+      throw new HttpError(404, "Typed commands are disabled");
+    }
+    const controller = new AbortController();
+    let installed = false;
+    const cleanup = () => {
+      req.removeListener("aborted", abort);
+      res.removeListener("close", responseClosed);
+      res.removeListener("finish", cleanup);
+    };
+    const abort = () => {
+      controller.abort();
+      if (installed) resourceService(deps).remove(connectionId, viewId, epoch);
+      cleanup();
+    };
+    req.once("aborted", abort);
+    const responseClosed = () => {
+      if (!res.writableFinished) abort();
+    };
+    res.once("close", responseClosed);
+    res.once("finish", cleanup);
+    try {
+      const registered = await resourceService(deps).register(connectionId, viewId, epoch, body.descriptor, controller.signal);
+      installed = true;
+      if (req.aborted || res.destroyed) {
+        abort();
+        return void 0;
+      }
+      return registered;
+    } catch (error) {
+      if (controller.signal.aborted) return void 0;
+      throw error;
+    } finally {
+      if (controller.signal.aborted || res.writableFinished || res.destroyed) cleanup();
+    }
+  },
+  "DELETE /api/resource-subscriptions": async ({ deps, body }) => {
+    resourceService(deps).remove(str(body, "connectionId"), str(body, "viewId"), body.subscriptionEpoch);
+    return { removed: true };
+  },
   // ---- messaging -----------------------------------------------------------
   "POST /api/messages/send": async ({ client, body }) => {
     const reply = replyReference(body);
@@ -20909,11 +21730,7 @@ var ROUTES = {
     }
     return { wire_id: wireId, delivery: "tracked" };
   },
-  "GET /api/contacts/:contact/commands": async ({ client, deps, params }) => {
-    if (deps.config.typedCommands === false) throw new HttpError(404, "Typed commands are disabled");
-    const peer = await resolveContact(client, params.contact);
-    return projectCatalog(peer.cid, await client.listContactCommands({ contact: peer.cid }));
-  },
+  "GET /api/contacts/:contact/commands": async ({ client, deps, params }) => projectCommandResource(client, deps, params),
   "POST /api/commands/send": async ({ client, deps, body }) => {
     if (deps.config.typedCommands === false) throw new HttpError(404, "Typed commands are disabled");
     const peer = await resolveContact(client, str(body, "contact"));
@@ -21106,7 +21923,7 @@ var ROUTES = {
   // ---- identity / profile --------------------------------------------------
   // The old browser surface called the read half `getProfileName`; the name is a
   // field on this result.
-  "GET /api/identity": async ({ client, deps }) => ({ ...publicIdentity(await client.currentIdentity()), humanProfile: readHumanProfile(deps.config.stateDir, deps.identityCid) }),
+  "GET /api/identity": async ({ client, deps }) => projectIdentityResource(client, deps),
   "POST /api/identity/profile": async ({ client, deps, body }) => {
     if (!humanIdentity(await client.currentIdentity())) throw bad("Human profile requires the Human root or a permanent identity under it");
     let profile;
@@ -21157,7 +21974,7 @@ var ROUTES = {
     const serverCid = str(body, "serverCid").toUpperCase();
     if (!/^[A-F0-9]{64}$/.test(serverCid) || !/^[A-Za-z0-9_-]{43}$/.test(str(body, "hostWorkspaceId"))) throw bad("Invalid workspace proof");
     const challenge = body.challenge;
-    if (!challenge || !["nonce", "workspaceId", "accountId"].every((k2) => typeof challenge[k2] === "string" && /^[A-Za-z0-9_-]{43}$/.test(String(challenge[k2]))) || !Number.isFinite(challenge.expiresAt) || Number(challenge.expiresAt) <= Date.now() || Number(challenge.expiresAt) > Date.now() + 16 * 6e4) throw bad("Workspace challenge expired or invalid");
+    if (!challenge || !["nonce", "workspaceId", "accountId"].every((k) => typeof challenge[k] === "string" && /^[A-Za-z0-9_-]{43}$/.test(String(challenge[k]))) || !Number.isFinite(challenge.expiresAt) || Number(challenge.expiresAt) <= Date.now() || Number(challenge.expiresAt) > Date.now() + 16 * 6e4) throw bad("Workspace challenge expired or invalid");
     const preserveProfile = optBool(body, "preserveProfile") === true;
     let humanProfile;
     if (!preserveProfile) try {
@@ -21176,7 +21993,7 @@ var ROUTES = {
     const contactDeadline = Date.now() + 1e4;
     while (!(await client.listContacts()).contacts.some((contact) => contact.container_id.toUpperCase() === serverCid)) {
       if (Date.now() >= contactDeadline) throw bad("Enrollment contact is not ready; obtain a fresh setup payload before retrying");
-      await new Promise((resolve3) => setTimeout(resolve3, 100));
+      await new Promise((resolve4) => setTimeout(resolve4, 100));
     }
     const argumentsValue = { type: "ours.app.bind-workspace.v1", accountId: String(challenge.accountId), workspaceId: String(challenge.workspaceId), nonce: String(challenge.nonce), hostWorkspaceId: String(body.hostWorkspaceId) };
     const outcome = await client.sendCommand({ contact: serverCid, command: "bind-workspace", arguments: argumentsValue });
@@ -21197,27 +22014,11 @@ var ROUTES = {
   },
   // ---- files ---------------------------------------------------------------
   "GET /api/files/incoming": async ({ client }) => client.listIncomingFiles(),
-  "GET /api/conversations/:contact/files": async ({ client, deps, params }) => {
-    const peer = await resolveContact(client, params.contact);
-    const files = (await listAllFiles(client, peer.cid)).reverse();
-    const versions = /* @__PURE__ */ new Map();
-    return {
-      contact: params.contact,
-      files: files.map((row) => {
-        const logicalName = row.filename.normalize("NFC").toLocaleLowerCase("en-US");
-        const version = (versions.get(logicalName) ?? 0) + 1;
-        versions.set(logicalName, version);
-        return publicMediaRecord(row, {
-          cid: deps.identityCid,
-          name: deps.config.identity
-        }, version);
-      })
-    };
-  },
+  "GET /api/conversations/:contact/files": async ({ client, deps, params }) => projectFilesResource(client, deps, params),
   "POST /api/files/fetch": async ({ client, body }) => {
     const ids = body.wire_ids;
     if (ids === void 0 || ids === null) throw bad("wire_ids is required for browser file retrieval");
-    if (!Array.isArray(ids) || !ids.every((v2) => typeof v2 === "string" && v2 !== "")) {
+    if (!Array.isArray(ids) || !ids.every((v3) => typeof v3 === "string" && v3 !== "")) {
       throw bad("wire_ids, when present, must be an array of non-empty strings");
     }
     const requested = ids;
@@ -21316,15 +22117,15 @@ var ROUTES = {
     if (keys === null || typeof keys !== "object" || Array.isArray(keys)) {
       throw bad("keys must be an object with p256dh and auth");
     }
-    const k2 = keys;
-    if (typeof k2.p256dh !== "string" || typeof k2.auth !== "string") {
+    const k = keys;
+    if (typeof k.p256dh !== "string" || typeof k.auth !== "string") {
       throw bad("keys.p256dh and keys.auth must be strings");
     }
     let saved;
     try {
       saved = deps.push.ensure({
         endpoint: str(body, "endpoint"),
-        keys: { p256dh: k2.p256dh, auth: k2.auth },
+        keys: { p256dh: k.p256dh, auth: k.auth },
         label: optStr(body, "label"),
         preview: body.preview === void 0 ? void 0 : str(body, "preview"),
         bindingId: optStr(body, "binding_id")
@@ -21396,8 +22197,8 @@ var ROUTES = {
 function match(method, pathname) {
   const parts = pathname.split("/").filter(Boolean);
   for (const key of Object.keys(ROUTES)) {
-    const [m2, pattern] = key.split(" ");
-    if (m2 !== method) continue;
+    const [m3, pattern] = key.split(" ");
+    if (m3 !== method) continue;
     const pp = pattern.split("/").filter(Boolean);
     if (pp.length !== parts.length) continue;
     const params = {};
@@ -21428,6 +22229,27 @@ async function serveApi(req, res, deps) {
       req,
       url.pathname.startsWith("/api/push/") ? MAX_PUSH_BODY_BYTES : MAX_HTTP_BODY_BYTES
     );
+    const resourceHeaderNames = ["x-resource-connection", "x-resource-view", "x-resource-epoch", "x-resource-baseline"];
+    const resourceHeaders = resourceHeaderNames.map((name) => rawHeaderValues(req, name));
+    if (resourceHeaders.some((values) => values.length > 0)) {
+      if (method !== "GET" || resourceHeaders.some((values) => values.length !== 1)) throw new ResourceBindingError(409, "incomplete resource binding");
+      const [connectionId, viewId, epoch, baselineId] = resourceHeaders.map((values) => values[0]);
+      const baseline = await resourceService(deps).bound(connectionId, viewId, Number(epoch), baselineId);
+      const descriptor = baseline.descriptor;
+      const route = descriptor.resource === "contacts" ? "GET /api/contacts" : descriptor.resource === "identity" ? "GET /api/identity" : descriptor.resource === "commands" ? "GET /api/contacts/:contact/commands" : descriptor.resource === "files" ? "GET /api/conversations/:contact/files" : "GET /api/conversations/:contact/page";
+      const allowedQuery = descriptor.resource === "messages" && [...url.searchParams.keys()].every((key) => key === "limit") && (!url.searchParams.has("limit") || url.searchParams.getAll("limit").length === 1 && Number(url.searchParams.get("limit")) === descriptor.window.limit);
+      if (hit.key !== route || descriptor.entityId !== void 0 && descriptor.entityId !== hit.params.contact || url.searchParams.size > 0 && !allowedQuery) throw new ResourceBindingError(409, "resource read descriptor mismatch");
+      res.setHeader("X-Resource-Connection", connectionId);
+      res.setHeader("X-Resource-View", viewId);
+      res.setHeader("X-Resource-Epoch", epoch);
+      res.setHeader("X-Resource-Baseline", baselineId);
+      res.setHeader("X-Resource-Producer", baseline.producerGeneration);
+      res.setHeader("X-Resource-Revision", String(baseline.revision));
+      res.setHeader("X-Resource-Source-Generation", baseline.source.producerGeneration);
+      res.setHeader("X-Resource-Source-Position", String(baseline.source.position));
+      sendJson(res, 200, baseline.payload);
+      return;
+    }
     const out = await ROUTES[hit.key]({
       deps,
       client: deps.runtime.client,
@@ -21442,6 +22264,8 @@ async function serveApi(req, res, deps) {
   } catch (e2) {
     if (isOursError(e2)) {
       sendJson(res, 400, { error: publicEngineError(e2.code) });
+    } else if (e2 instanceof ResourceBindingError) {
+      sendJson(res, e2.status, { error: { code: "RESOURCE_BINDING", message: e2.message } });
     } else if (e2 instanceof HttpError) {
       const code = e2.status === 403 ? "FORBIDDEN" : e2.status === 415 ? "UNSUPPORTED_MEDIA_TYPE" : e2.status === 413 ? "PAYLOAD_TOO_LARGE" : e2.status === 429 ? "RATE_LIMITED" : "BAD_REQUEST";
       sendJson(res, e2.status, { error: { code, message: e2.message } });
@@ -21463,7 +22287,7 @@ import { randomBytes as randomBytes2 } from "node:crypto";
 // node_modules/@ours.network/sdk/dist/index.js
 init_define_MESSENGER_BUILD_INFO();
 
-// node_modules/@ours.network/sdk/dist/chunk-W33OG3IH.js
+// node_modules/@ours.network/sdk/dist/chunk-AKRQMPU6.js
 init_define_MESSENGER_BUILD_INFO();
 
 // node_modules/@ours.network/sdk/dist/chunk-4VLQOZT7.js
@@ -21512,11 +22336,11 @@ function m(t, o = 65536, s = false) {
     if (s) {
       e.fsyncSync(r);
       for (let c = y(t); ; c = y(c)) {
-        let O2 = e.openSync(c, e.constants.O_RDONLY | e.constants.O_DIRECTORY | e.constants.O_NOFOLLOW);
+        let O = e.openSync(c, e.constants.O_RDONLY | e.constants.O_DIRECTORY | e.constants.O_NOFOLLOW);
         try {
-          e.fsyncSync(O2);
+          e.fsyncSync(O);
         } finally {
-          e.closeSync(O2);
+          e.closeSync(O);
         }
         if (c === y(c)) break;
       }
@@ -21571,13 +22395,13 @@ var I = 100 * 1024 * 1024;
 var K = { brokerUrl: "wss://broker1.ours.network", port: 3050, stateDir: E(T(), ".ours"), gcIntervalMs: 36e5, historyMaxBytes: I, apiVisibility: "owner", apiAuthMode: "legacy" };
 var $2 = "daemon-token";
 
-// node_modules/@ours.network/sdk/dist/chunk-W33OG3IH.js
-import { homedir as me } from "node:os";
-import { isAbsolute as ye, join as ge, resolve as ne } from "node:path";
-import { randomBytes as V } from "node:crypto";
-import { readFileSync as Ee } from "node:fs";
-import { homedir as ve } from "node:os";
-import { join as M2, resolve as P } from "node:path";
+// node_modules/@ours.network/sdk/dist/chunk-AKRQMPU6.js
+import { homedir as Ie } from "node:os";
+import { isAbsolute as be, join as _e, resolve as ce } from "node:path";
+import { randomBytes as z } from "node:crypto";
+import { readFileSync as Se } from "node:fs";
+import { homedir as Ae } from "node:os";
+import { join as G, resolve as M2 } from "node:path";
 var d = class extends Error {
   constructor(n, r, i) {
     super(r);
@@ -21586,8 +22410,8 @@ var d = class extends Error {
     this.name = "OursError";
   }
 };
-var U = () => new d("INVALID_OBSERVATION", "Terminal observation must match this external owner instance and contain valid process evidence.");
-function y2(e2) {
+var B = () => new d("INVALID_OBSERVATION", "Terminal observation must match this external owner instance and contain valid process evidence.");
+function h2(e2) {
   if (typeof e2 != "string" || /[\s\\#]/.test(e2) || !/^https?:\/\//i.test(e2)) throw new Error("Daemon endpoint must be an HTTP or HTTPS URL without credentials or fragment");
   let t;
   try {
@@ -21598,7 +22422,7 @@ function y2(e2) {
   if (t.username || t.password || t.hash) throw new Error("Daemon endpoint cannot contain credentials or fragment");
   return t.origin + t.pathname.replace(/\/+$/, "") + t.search;
 }
-function u2(e2, t) {
+function m2(e2, t) {
   if (!t.startsWith("/") || t.startsWith("//") || t.includes("#")) throw new Error("Invalid daemon route");
   let n = new URL(e2), r = new URL(t, "http://daemon.invalid");
   if (n.pathname = n.pathname.replace(/\/+$/, "") + r.pathname, r.search) {
@@ -21607,7 +22431,7 @@ function u2(e2, t) {
   }
   return n.href;
 }
-function R2(e2) {
+function D(e2) {
   try {
     let t = new URL(e2);
     return t.origin + t.pathname;
@@ -21615,7 +22439,7 @@ function R2(e2) {
     return "<invalid daemon endpoint>";
   }
 }
-async function F(e2) {
+async function P(e2) {
   let t = e2.body?.getReader();
   if (!t) throw new Error("Missing daemon response");
   let n = [], r = 0;
@@ -21632,38 +22456,38 @@ async function F(e2) {
     });
   }
 }
-function N(e2, t) {
+function C(e2, t) {
   let n = (o) => o !== null && typeof o == "object" && !Array.isArray(o), r = (o, s) => Object.keys(o).length === s.length && Object.keys(o).every((a) => s.includes(a)), i = (o) => typeof o == "string" && o.trim().length > 0 && o.length <= 1024;
-  if (!n(e2) || !r(e2, ["ownerInstanceId", "reason", "observedAt", "process"]) || !t || e2.ownerInstanceId !== t || e2.reason !== "process-exit" && e2.reason !== "session-end" || !Number.isSafeInteger(e2.observedAt) || Number(e2.observedAt) < 0 || !n(e2.process) || !r(e2.process, ["pid", "bootId", "startId", "domain"]) || !Number.isSafeInteger(e2.process.pid) || Number(e2.process.pid) < 1 || !i(e2.process.bootId) || !i(e2.process.startId) || !i(e2.process.domain)) throw U();
+  if (!n(e2) || !r(e2, ["ownerInstanceId", "reason", "observedAt", "process"]) || !t || e2.ownerInstanceId !== t || e2.reason !== "process-exit" && e2.reason !== "session-end" || !Number.isSafeInteger(e2.observedAt) || Number(e2.observedAt) < 0 || !n(e2.process) || !r(e2.process, ["pid", "bootId", "startId", "domain"]) || !Number.isSafeInteger(e2.process.pid) || Number(e2.process.pid) < 1 || !i(e2.process.bootId) || !i(e2.process.startId) || !i(e2.process.domain)) throw B();
 }
-var w2 = (e2) => typeof e2 == "string" && e2.length > 0;
-var $3 = (e2) => ({ event: "sync_required", reason: "legacy_or_malformed_event", source_event: e2 });
-function te(e2) {
-  if (!w2(e2.event)) return $3("unknown");
+var v2 = (e2) => typeof e2 == "string" && e2.length > 0;
+var V = (e2) => ({ event: "sync_required", reason: "legacy_or_malformed_event", source_event: e2 });
+function ae(e2) {
+  if (!v2(e2.event)) return V("unknown");
   if (e2.event === "contact_removed") {
     let t = /^[0-9A-F]{64}$/;
-    return typeof e2.cid != "string" || !t.test(e2.cid) || typeof e2.identity_cid != "string" || !t.test(e2.identity_cid) || e2.by !== "local" && e2.by !== "peer" ? $3("contact_removed") : { event: "contact_removed", identity_cid: e2.identity_cid, cid: e2.cid, by: e2.by };
+    return typeof e2.cid != "string" || !t.test(e2.cid) || typeof e2.identity_cid != "string" || !t.test(e2.identity_cid) || e2.by !== "local" && e2.by !== "peer" ? V("contact_removed") : { event: "contact_removed", identity_cid: e2.identity_cid, cid: e2.cid, by: e2.by };
   }
-  if (e2.event === "message_received") return !w2(e2.sender_id) || !w2(e2.sender_name) || !w2(e2.msg_id) || !w2(e2.wire_id) || !w2(e2.date) ? $3("message_received") : { event: "message_received", sender_id: e2.sender_id, sender_name: e2.sender_name, from: w2(e2.from) ? e2.from : e2.sender_name, msg_id: e2.msg_id, wire_id: e2.wire_id, date: e2.date };
+  if (e2.event === "message_received") return !v2(e2.sender_id) || !v2(e2.sender_name) || !v2(e2.msg_id) || !v2(e2.wire_id) || !v2(e2.date) ? V("message_received") : { event: "message_received", sender_id: e2.sender_id, sender_name: e2.sender_name, from: v2(e2.from) ? e2.from : e2.sender_name, msg_id: e2.msg_id, wire_id: e2.wire_id, date: e2.date };
   if (e2.event === "receipt_received") {
     let t = e2.kind, n = e2.wire_ids;
-    return !w2(e2.sender_id) || t !== "delivered" && t !== "read" || !Array.isArray(n) || n.length === 0 || !n.every(w2) ? $3("receipt_received") : { event: "receipt_received", sender_id: e2.sender_id, kind: t, wire_ids: [...n], date: w2(e2.date) ? e2.date : (/* @__PURE__ */ new Date()).toISOString() };
+    return !v2(e2.sender_id) || t !== "delivered" && t !== "read" || !Array.isArray(n) || n.length === 0 || !n.every(v2) ? V("receipt_received") : { event: "receipt_received", sender_id: e2.sender_id, kind: t, wire_ids: [...n], date: v2(e2.date) ? e2.date : (/* @__PURE__ */ new Date()).toISOString() };
   }
   return e2;
 }
-var fe = { event: () => {
+var ve = { event: () => {
 }, notification: () => {
 } };
-var xt = { ...fe };
-function q(e2, t = /* @__PURE__ */ new Set()) {
+var Ft = { ...ve };
+function K2(e2, t = /* @__PURE__ */ new Set()) {
   if (e2 === null || typeof e2 == "string" || typeof e2 == "boolean") return true;
   if (typeof e2 == "number") return Number.isFinite(e2);
   if (typeof e2 != "object" || t.has(e2)) return false;
   t.add(e2);
-  let n = Array.isArray(e2) ? e2.every((r) => q(r, t)) : Object.getPrototypeOf(e2) === Object.prototype && Object.values(e2).every((r) => q(r, t));
+  let n = Array.isArray(e2) ? e2.every((r) => K2(r, t)) : Object.getPrototypeOf(e2) === Object.prototype && Object.values(e2).every((r) => K2(r, t));
   return t.delete(e2), n;
 }
-var x = class {
+var U = class {
   base;
   leaseToken;
   sessionMode;
@@ -21679,12 +22503,12 @@ var x = class {
     if (t.credentialPath !== void 0 && t.apiToken !== void 0) throw new Error("Credential path cannot be combined with an explicit API token");
     if ("serverCertificate" in t && t.serverCertificate !== void 0) throw new Error("Custom serverCertificate is not supported; HTTPS uses Node certificate trust, including NODE_EXTRA_CA_CERTS");
     if (new URL(t.url).protocol !== "http:" && new URL(t.url).protocol !== "https:") throw new Error("Client requires an HTTP or HTTPS daemon endpoint");
-    if (this.base = y2(t.url), this.sessionMode = t.sessionMode ?? "local", this.sessionMode !== "local" && this.sessionMode !== "external") throw new Error("Invalid sessionMode");
+    if (this.base = h2(t.url), this.sessionMode = t.sessionMode ?? "local", this.sessionMode !== "local" && this.sessionMode !== "external") throw new Error("Invalid sessionMode");
     if (this.sessionMode === "external" && !t.leaseToken) throw new Error("External ownership requires a stable caller-supplied leaseToken");
     this.leaseToken = t.leaseToken, this.clientPid = t.clientPid ?? process.pid, this.explicitApiToken = t.apiToken, this.credentialPath = t.credentialPath;
     let n = t.fetch ?? globalThis.fetch;
     this.fetchImpl = (r, i) => {
-      let o = String(r) === u2(this.base, "/api/v1/releaseLease"), s = [i?.signal, o ? t.requestSignal ? AbortSignal.timeout(5e3) : void 0 : t.requestSignal].filter((a) => a != null);
+      let o = String(r) === m2(this.base, "/api/v1/releaseLease"), s = [i?.signal, o ? t.requestSignal ? AbortSignal.timeout(5e3) : void 0 : t.requestSignal].filter((a) => a != null);
       return n(r, { ...i, ...s.length ? { signal: AbortSignal.any(s) } : {} });
     };
   }
@@ -21695,17 +22519,17 @@ var x = class {
     return { "x-ours-session-mode": this.sessionMode, "x-ours-lease-token": this.leaseToken, "x-ours-client-pid": String(this.clientPid), ...n ? { "x-ours-api-token": n } : {}, ...t };
   }
   async post(t, n, r = false) {
-    let i = await this.fetchImpl(u2(this.base, `/api/v1/${t}`), { redirect: "error", method: "POST", headers: this.headers({ "content-type": "application/json" }), body: JSON.stringify(n ?? {}), ...r ? { signal: AbortSignal.timeout(5e3) } : {} }), o;
+    let i = await this.fetchImpl(m2(this.base, `/api/v1/${t}`), { redirect: "error", method: "POST", headers: this.headers({ "content-type": "application/json" }), body: JSON.stringify(n ?? {}), ...r ? { signal: AbortSignal.timeout(5e3) } : {} }), o;
     try {
-      r ? o = await F(i) : o = await i.json();
+      r ? o = await P(i) : o = await i.json();
     } catch {
       throw new Error(`${t}: the daemon returned a non-JSON response (HTTP ${i.status})`);
     }
     if (o && typeof o == "object" && !Array.isArray(o) && "error" in o) {
       let s = o.error, a = s !== null && typeof s == "object" && "code" in s && "message" in s;
       if (i.status === 400 && a) {
-        let { code: l, message: m2, details: f } = s;
-        throw new d(l, m2, f);
+        let { code: l, message: f, details: u2 } = s;
+        throw new d(l, f, u2);
       }
       let c = a ? s.message : String(s);
       throw new Error(`${t}: ${c} (HTTP ${i.status})`);
@@ -21714,7 +22538,7 @@ var x = class {
     return o;
   }
   async get(t, n) {
-    let r = await this.fetchImpl(u2(this.base, t), { redirect: "error", headers: n ? this.headers() : {} }), i;
+    let r = await this.fetchImpl(m2(this.base, t), { redirect: "error", headers: n ? this.headers() : {} }), i;
     try {
       i = await r.json();
     } catch {
@@ -21724,6 +22548,61 @@ var x = class {
     if (!r.ok) throw new Error(`GET ${t}: the daemon returned HTTP ${r.status} with no error field`);
     return i;
   }
+  async resourcePosition(t, n) {
+    let r = await this.fetchImpl(m2(this.base, `/identities/${encodeURIComponent(t)}/resource-events?position=1`), { redirect: "error", headers: this.headers(), signal: n.signal });
+    if (!r.ok) throw new L(r.status);
+    let i = await P(r);
+    return de(i), i;
+  }
+  async *resourceEvents(t, n) {
+    if (n.expectedGeneration === void 0 != (n.after === void 0) || n.after !== void 0 && (!Number.isSafeInteger(n.after) || n.after < 0)) throw new Error("expectedGeneration and a nonnegative safe after position are required together");
+    let r = new AbortController(), i = AbortSignal.any([n.signal, r.signal]), o, s = 0, a = (f) => {
+      s = Date.now() + f, clearTimeout(o), o = setTimeout(() => r.abort(new Error("Resource source coverage deadline expired")), f), o.unref?.();
+    }, c = () => {
+      if (i.aborted) throw i.reason;
+      if (Date.now() >= s) throw new Error("Resource source coverage deadline expired");
+    }, l;
+    try {
+      a(1e4);
+      let f = new URLSearchParams();
+      n.after !== void 0 && (f.set("after", String(n.after)), f.set("expectedGeneration", n.expectedGeneration));
+      let u2 = await this.fetchImpl(m2(this.base, `/identities/${encodeURIComponent(t)}/resource-events?${f}`), { redirect: "error", headers: this.headers({ accept: "text/event-stream" }), signal: i });
+      if (i.aborted) throw u2.body?.cancel(), i.reason;
+      if (!u2.ok) throw new L(u2.status);
+      if (!u2.body || !u2.headers.get("content-type")?.startsWith("text/event-stream")) throw new Error("Invalid resource stream response");
+      l = u2.body.getReader();
+      let g2 = new TextDecoder("utf-8", { fatal: true }), y2 = "", I2 = 0, b2 = false, S2, T2 = -1;
+      for (; ; ) {
+        let { value: _, done: x } = await l.read();
+        if (c(), x) throw new Error("Resource stream ended before disposal");
+        if (I2 += _.byteLength, I2 > 8 * 1024 * 1024) throw new Error("Resource live input exceeds limit");
+        for (y2 += g2.decode(_, { stream: true }); ; ) {
+          c();
+          let w2 = /\r?\n\r?\n/.exec(y2);
+          if (!w2) break;
+          let H = y2.slice(0, w2.index);
+          if (y2 = y2.slice(w2.index + w2[0].length), I2 -= Buffer.byteLength(H) + Buffer.byteLength(w2[0]), Buffer.byteLength(H) > 512 * 1024) throw new Error("Resource frame exceeds limit");
+          let re = H.split(/\r?\n/).filter((N) => N.startsWith("data:")).map((N) => N.slice(5).trimStart()).join(`
+`);
+          if (!re) continue;
+          let A2 = JSON.parse(re);
+          if (c(), H.split(/\r?\n/).some((N) => N === "event: auth_required")) throw new L(401);
+          de(A2);
+          let J = A2.kind;
+          if (!["ready", "committed", "coverage", "resync"].includes(J)) throw new Error("Invalid resource frame kind");
+          if (S2 !== void 0 && (A2.producerGeneration !== S2 || A2.position < T2)) throw new Error("Resource stream continuity changed");
+          if (S2 = A2.producerGeneration, T2 = A2.position, J === "ready") b2 = true, a(6e3);
+          else if (b2) a(6e3);
+          else if (J !== "resync") throw new Error("Resource mutation before ready");
+          yield A2, c();
+        }
+        if (Buffer.byteLength(y2) > 512 * 1024) throw new Error("Resource frame exceeds limit");
+      }
+    } finally {
+      clearTimeout(o), r.abort(), await l?.cancel().catch(() => {
+      }), l?.releaseLock();
+    }
+  }
   createIdentity(t) {
     return this.post("createIdentity", t);
   }
@@ -21754,8 +22633,8 @@ var x = class {
   async releaseLease(t = {}) {
     let n = t?.observation;
     if (n !== void 0) {
-      if (this.sessionMode !== "external") throw U();
-      N(n, this.leaseToken);
+      if (this.sessionMode !== "external") throw B();
+      C(n, this.leaseToken);
     }
     let r = await this.post("releaseLease", t, n !== void 0);
     if (n !== void 0) {
@@ -21850,11 +22729,11 @@ var x = class {
       try {
         let c = JSON.parse(s.body);
         if (!c || typeof c != "object" || Array.isArray(c) || Object.keys(c).length !== 2 || typeof c.command != "string" || !("arguments" in c)) throw new Error("invalid command payload");
-        let l = c, m2 = l.command, f = this.commandHandlers.get(m2);
-        if (!f) throw new Error("handler not registered");
-        let g2 = Object.freeze({ sender_cid: s.from.id, sender_name: s.from.name, request_wire_id: s.wire_id }), E2 = await f(l.arguments, g2);
-        if (!q(E2)) throw new Error("handler returned a non-JSON value");
-        a = { ok: true, result: E2 };
+        let l = c, f = l.command, u2 = this.commandHandlers.get(f);
+        if (!u2) throw new Error("handler not registered");
+        let g2 = Object.freeze({ sender_cid: s.from.id, sender_name: s.from.name, request_wire_id: s.wire_id }), y2 = await u2(l.arguments, g2);
+        if (!K2(y2)) throw new Error("handler returned a non-JSON value");
+        a = { ok: true, result: y2 };
       } catch {
       }
       await this.post("sendCommandResult", { contact: s.from.id, reply_to_wire_id: s.wire_id, outcome: a });
@@ -21901,7 +22780,7 @@ var x = class {
     return this.get("/history-storage", true);
   }
   async readNotificationPage(t, n = {}) {
-    let r = "/identities/" + encodeURIComponent(t) + "/notifications", i = n.kinds?.length ? "&kinds=" + encodeURIComponent(n.kinds.join(",")) : "", o = n.requestTimeoutMs === void 0 ? n.signal : AbortSignal.any([...n.signal ? [n.signal] : [], AbortSignal.timeout(n.requestTimeoutMs)]), s = await this.fetchImpl(u2(this.base, r + "?since=" + encodeURIComponent(String(n.since ?? "tip")) + i), { redirect: "error", headers: this.headers(), signal: o }), a;
+    let r = "/identities/" + encodeURIComponent(t) + "/notifications", i = n.kinds?.length ? "&kinds=" + encodeURIComponent(n.kinds.join(",")) : "", o = n.requestTimeoutMs === void 0 ? n.signal : AbortSignal.any([...n.signal ? [n.signal] : [], AbortSignal.timeout(n.requestTimeoutMs)]), s = await this.fetchImpl(m2(this.base, r + "?since=" + encodeURIComponent(String(n.since ?? "tip")) + i), { redirect: "error", headers: this.headers(), signal: o }), a;
     try {
       a = await s.json();
     } catch {
@@ -21918,7 +22797,7 @@ var x = class {
     for (; !n.signal?.aborted; ) {
       let s;
       try {
-        let a = await this.fetchImpl(u2(this.base, `${i}?since=${r}${o}`), { redirect: "error", headers: this.headers(), signal: n.requestTimeoutMs === void 0 ? n.signal : AbortSignal.any([...n.signal ? [n.signal] : [], AbortSignal.timeout(n.requestTimeoutMs)]) });
+        let a = await this.fetchImpl(m2(this.base, `${i}?since=${r}${o}`), { redirect: "error", headers: this.headers(), signal: n.requestTimeoutMs === void 0 ? n.signal : AbortSignal.any([...n.signal ? [n.signal] : [], AbortSignal.timeout(n.requestTimeoutMs)]) });
         try {
           s = await a.json();
         } catch {
@@ -21930,11 +22809,11 @@ var x = class {
       }
       if ("error" in s) throw new Error(`watchNotifications(${t}): ${s.error}`);
       r = s.cursor;
-      for (let a of s.events) yield te(a && typeof a == "object" ? a : {});
+      for (let a of s.events) yield ae(a && typeof a == "object" ? a : {});
     }
   }
   async fetchFile(t) {
-    let n = await this.fetchImpl(u2(this.base, `/files/${encodeURIComponent(t)}`), { redirect: "error", headers: this.headers() });
+    let n = await this.fetchImpl(m2(this.base, `/files/${encodeURIComponent(t)}`), { redirect: "error", headers: this.headers() });
     if (!n.ok) {
       let r = `HTTP ${n.status}`;
       try {
@@ -21947,7 +22826,7 @@ var x = class {
     return new Uint8Array(await n.arrayBuffer());
   }
   async openFile(t) {
-    let n = await this.fetchImpl(u2(this.base, `/files/${encodeURIComponent(t)}`), { redirect: "error", headers: this.headers() });
+    let n = await this.fetchImpl(m2(this.base, `/files/${encodeURIComponent(t)}`), { redirect: "error", headers: this.headers() });
     if (!n.ok) {
       let r = `HTTP ${n.status}`;
       try {
@@ -21963,7 +22842,7 @@ var x = class {
   async uploadFile(t, n) {
     let r = t instanceof Uint8Array ? t.byteLength : n.size;
     if (r === void 0) throw new Error("uploadFile: `size` is required when the body is a stream (the route needs Content-Length)");
-    let i = await this.fetchImpl(u2(this.base, "/files/upload"), { redirect: "error", method: "POST", headers: { ...this.headers(), "x-ours-filename": encodeURIComponent(n.filename), "Content-Type": n.mime || "application/octet-stream", "Content-Length": String(r) }, body: t, ...t instanceof Uint8Array ? {} : { duplex: "half" } });
+    let i = await this.fetchImpl(m2(this.base, "/files/upload"), { redirect: "error", method: "POST", headers: { ...this.headers(), "x-ours-filename": encodeURIComponent(n.filename), "Content-Type": n.mime || "application/octet-stream", "Content-Length": String(r) }, body: t, ...t instanceof Uint8Array ? {} : { duplex: "half" } });
     if (!i.ok) {
       let o = `HTTP ${i.status}`;
       try {
@@ -21976,21 +22855,33 @@ var x = class {
     return await i.json();
   }
 };
-var O = class extends Error {
+var L = class extends Error {
+  constructor(n) {
+    super(`Resource stream HTTP ${n}${n === 401 ? ": unauthorized" : ""}`);
+    this.status = n;
+    this.name = "ResourceStreamError";
+  }
+};
+function de(e2) {
+  if (!e2 || typeof e2 != "object") throw new Error("Invalid resource source position");
+  let t = e2;
+  if (t.protocolVersion !== 1 || typeof t.producerGeneration != "string" || !t.producerGeneration || !Number.isSafeInteger(t.position) || t.position < 0) throw new Error("Invalid resource source position");
+}
+var R2 = class extends Error {
   constructor(t) {
     super(`Invalid gateway client profile: ${t}. Configure ~/.ours-client/profile.json with ours-install client; no local service fallback is permitted.`), this.name = "ClientProfileError";
   }
 };
-function he(e2 = process.env) {
+function Te(e2 = process.env) {
   if (e2.OURS_CONFIG !== void 0) {
-    if (!e2.OURS_CONFIG.trim()) throw new O("OURS_CONFIG must name a client profile");
-    return ne(e2.OURS_CONFIG);
+    if (!e2.OURS_CONFIG.trim()) throw new R2("OURS_CONFIG must name a client profile");
+    return ce(e2.OURS_CONFIG);
   }
-  return ge(e2.HOME || me(), ".ours-client", "profile.json");
+  return _e(e2.HOME || Ie(), ".ours-client", "profile.json");
 }
-function we(e2) {
+function Oe(e2) {
   let t = (o) => {
-    throw new O(o);
+    throw new R2(o);
   };
   if (!e2 || typeof e2 != "object" || Array.isArray(e2)) return t("expected a JSON object");
   let n = e2;
@@ -21998,27 +22889,27 @@ function we(e2) {
   if (typeof n.serverUrl != "string" || !n.serverUrl || /[\s\\?#]/.test(n.serverUrl)) return t("serverUrl must be an HTTP or HTTPS gateway base URL without credentials, query or fragment");
   let r;
   try {
-    r = y2(n.serverUrl);
+    r = h2(n.serverUrl);
   } catch {
     return t("serverUrl must be a safe HTTP or HTTPS gateway base URL");
   }
   let i = r + "/daemon";
   if (n.endpoint !== void 0) try {
-    if (typeof n.endpoint != "string" || y2(n.endpoint) !== i) return t("endpoint must equal serverUrl/daemon; remove stale endpoint overrides");
+    if (typeof n.endpoint != "string" || h2(n.endpoint) !== i) return t("endpoint must equal serverUrl/daemon; remove stale endpoint overrides");
   } catch {
     return t("endpoint must equal serverUrl/daemon");
   }
-  return typeof n.expectedInstanceId != "string" || !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(n.expectedInstanceId) ? t("expectedInstanceId must be a lowercase UUID") : typeof n.credentialPath != "string" || !ye(n.credentialPath) || ne(n.credentialPath) !== n.credentialPath ? t("credentialPath must be an absolute normalized path") : Object.freeze({ serverUrl: r, endpoint: i, expectedInstanceId: n.expectedInstanceId, credentialPath: n.credentialPath });
+  return typeof n.expectedInstanceId != "string" || !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(n.expectedInstanceId) ? t("expectedInstanceId must be a lowercase UUID") : typeof n.credentialPath != "string" || !be(n.credentialPath) || ce(n.credentialPath) !== n.credentialPath ? t("credentialPath must be an absolute normalized path") : Object.freeze({ serverUrl: r, endpoint: i, expectedInstanceId: n.expectedInstanceId, credentialPath: n.credentialPath });
 }
-function re(e2 = process.env) {
-  let t = he(e2), n;
+function le(e2 = process.env) {
+  let t = Te(e2), n;
   try {
     n = JSON.parse(m(t).toString("utf8"));
   } catch {
-    throw new O("selected profile is missing, invalid JSON or unsafe; require a 0700 directory and a 0600 regular file");
+    throw new R2("selected profile is missing, invalid JSON or unsafe; require a 0700 directory and a 0600 regular file");
   }
-  let r = we(n);
-  if (["OURS_PORT", "OURS_STATE_DIR", "OURS_API_TOKEN", "OURS_DAEMON_ID", "OURS_DAEMON_URL", "OURS_DAEMON_CREDENTIAL_PATH"].some((o) => e2[o]?.trim())) throw new O("remove legacy OURS_PORT/STATE_DIR/API_TOKEN/DAEMON_ID/DAEMON_URL/DAEMON_CREDENTIAL_PATH environment selectors");
+  let r = Oe(n);
+  if (["OURS_PORT", "OURS_STATE_DIR", "OURS_API_TOKEN", "OURS_DAEMON_ID", "OURS_DAEMON_URL", "OURS_DAEMON_CREDENTIAL_PATH"].some((o) => e2[o]?.trim())) throw new R2("remove legacy OURS_PORT/STATE_DIR/API_TOKEN/DAEMON_ID/DAEMON_URL/DAEMON_CREDENTIAL_PATH environment selectors");
   return Object.freeze({ ...r, configPath: t });
 }
 var p = class extends Error {
@@ -22028,61 +22919,61 @@ var p = class extends Error {
     this.name = "DaemonSelectionError";
   }
 };
-var B = class extends p {
+var W = class extends p {
   constructor(n, r, i = {}) {
-    super("DAEMON_UNAVAILABLE", `no ours daemon is running at ${R2(n)} for state directory ${JSON.stringify(r)}. Install the daemon with \`npm install --global @ours.network/daemon\`, then start the shared daemon with \`ours-daemon start\` or install/start its per-user service through \`ours-daemon install-service\`. SDK applications attach to the shared daemon and do not start an embedded daemon.`);
+    super("DAEMON_UNAVAILABLE", `no ours daemon is running at ${D(n)} for state directory ${JSON.stringify(r)}. Install the daemon with \`npm install --global @ours.network/daemon\`, then start the shared daemon with \`ours-daemon start\` or install/start its per-user service through \`ours-daemon install-service\`. SDK applications attach to the shared daemon and do not start an embedded daemon.`);
     this.endpoint = n;
     this.stateDir = r;
     this.name = "DaemonUnavailableError", i.cause !== void 0 && (this.cause = i.cause);
   }
 };
-var oe = K.port;
-var J = $2;
-var _e = ".ours";
-var Ie = ["explicit", "environment", "config-file"];
-function Oe(e2 = {}) {
+var pe = K.port;
+var Y = $2;
+var Re = ".ours";
+var xe = ["explicit", "environment", "config-file"];
+function Ne(e2 = {}) {
   let t = e2.env ?? process.env;
   if (t.OURS_TLS_CERT !== void 0 || t.OURS_TLS_KEY !== void 0) throw new p("INCOHERENT_SELECTION", "Daemon TLS is not supported in V1; remove OURS_TLS_CERT/OURS_TLS_KEY and explicitly configure HTTP");
   if (e2.endpoint !== void 0 && new URL(e2.endpoint).protocol !== "http:" && new URL(e2.endpoint).protocol !== "https:") throw new p("INCOHERENT_SELECTION", "Client requires an HTTP or HTTPS daemon endpoint");
-  let n = e2.readTextFile ?? ((E2) => Ee(E2, "utf8")), r = e2.homeDir ?? ve(), i = k(t, "OURS_INSTANCE");
+  let n = e2.readTextFile ?? ((y2) => Se(y2, "utf8")), r = e2.homeDir ?? Ae(), i = $3(t, "OURS_INSTANCE");
   if (i !== void 0) throw new p("INCOHERENT_SELECTION", `OURS_INSTANCE=${JSON.stringify(i)} is set, but named daemon instances are not implemented. Select the daemon with an explicit endpoint/port option or with OURS_PORT, and unset OURS_INSTANCE.`);
   if (e2.stateDir !== void 0 && e2.expectStateDir !== void 0) {
-    let E2 = P(e2.stateDir), T2 = P(e2.expectStateDir);
-    if (E2 !== T2) throw new p("INCOHERENT_SELECTION", `stateDir ${JSON.stringify(E2)} and expectStateDir ${JSON.stringify(T2)} name different directories. The state directory decides which token is read; the expected one decides which daemon that token may be sent to. Reconcile them, or pass only one.`);
+    let y2 = M2(e2.stateDir), I2 = M2(e2.expectStateDir);
+    if (y2 !== I2) throw new p("INCOHERENT_SELECTION", `stateDir ${JSON.stringify(y2)} and expectStateDir ${JSON.stringify(I2)} name different directories. The state directory decides which token is read; the expected one decides which daemon that token may be sent to. Reconcile them, or pass only one.`);
   }
-  let o = Re(e2.configPath, k(t, "OURS_CONFIG")), s = o ? Se(o.value, n) : {}, a = ie(e2.port, Ae(k(t, "OURS_PORT")), s.port, oe), c = ie(e2.stateDir ?? e2.expectStateDir, k(t, "OURS_STATE_DIR"), s.stateDir, M2(r, _e)), l = { value: P(c.value), source: c.source }, m2 = e2.endpoint !== void 0 ? { value: y2(e2.endpoint), source: "explicit" } : { value: `http://127.0.0.1:${a.value}`, source: a.source }, f = k(t, "OURS_API_TOKEN");
-  Te({ endpointSelected: e2.endpoint !== void 0 || a.source !== "default", endpointSource: m2.source, stateDirIntentional: Ie.includes(l.source), stateDirSource: l.source, hasExplicitToken: e2.token !== void 0 && e2.token !== "", hasEnvToken: f !== void 0, requireExplicitSelection: e2.requireExplicitSelection === true, portSource: a.source });
-  let g2 = be(e2.token, f, s, l, e2.readTextFile);
-  return { baseUrl: m2, port: a, stateDir: l, expectStateDir: e2.expectStateDir !== void 0 ? P(e2.expectStateDir) : l.value, ...g2 ? { token: g2 } : {}, ...o ? { configPath: o } : {} };
+  let o = Le(e2.configPath, $3(t, "OURS_CONFIG")), s = o ? Pe(o.value, n) : {}, a = ue(e2.port, Ce($3(t, "OURS_PORT")), s.port, pe), c = ue(e2.stateDir ?? e2.expectStateDir, $3(t, "OURS_STATE_DIR"), s.stateDir, G(r, Re)), l = { value: M2(c.value), source: c.source }, f = e2.endpoint !== void 0 ? { value: h2(e2.endpoint), source: "explicit" } : { value: `http://127.0.0.1:${a.value}`, source: a.source }, u2 = $3(t, "OURS_API_TOKEN");
+  ke({ endpointSelected: e2.endpoint !== void 0 || a.source !== "default", endpointSource: f.source, stateDirIntentional: xe.includes(l.source), stateDirSource: l.source, hasExplicitToken: e2.token !== void 0 && e2.token !== "", hasEnvToken: u2 !== void 0, requireExplicitSelection: e2.requireExplicitSelection === true, portSource: a.source });
+  let g2 = De(e2.token, u2, s, l, e2.readTextFile);
+  return { baseUrl: f, port: a, stateDir: l, expectStateDir: e2.expectStateDir !== void 0 ? M2(e2.expectStateDir) : l.value, ...g2 ? { token: g2 } : {}, ...o ? { configPath: o } : {} };
 }
-function Te(e2) {
+function ke(e2) {
   if (e2.requireExplicitSelection) {
-    if (e2.endpointSource === "default" && e2.portSource === "default") throw D(`requireExplicitSelection is set, but no daemon was selected. Pass endpoint/port, set OURS_PORT, or point OURS_CONFIG at a config file. Refusing the built-in default 127.0.0.1:${oe}.`);
-    if (!e2.stateDirIntentional) throw D("requireExplicitSelection is set, but the state directory is the built-in default. Every auth-affecting field must be chosen deliberately: pass stateDir or expectStateDir, set OURS_STATE_DIR, or name a config file. Refusing before reading any token or opening any socket.");
+    if (e2.endpointSource === "default" && e2.portSource === "default") throw F(`requireExplicitSelection is set, but no daemon was selected. Pass endpoint/port, set OURS_PORT, or point OURS_CONFIG at a config file. Refusing the built-in default 127.0.0.1:${pe}.`);
+    if (!e2.stateDirIntentional) throw F("requireExplicitSelection is set, but the state directory is the built-in default. Every auth-affecting field must be chosen deliberately: pass stateDir or expectStateDir, set OURS_STATE_DIR, or name a config file. Refusing before reading any token or opening any socket.");
   }
-  if (e2.endpointSelected && !e2.stateDirIntentional) throw D(`the endpoint was selected (source: ${e2.endpointSource}) but the state directory is the built-in default. A daemon's API token belongs to one state directory, so reading the default token and sending it to a separately chosen endpoint would disclose a credential to it. Select the state directory too: stateDir, expectStateDir, OURS_STATE_DIR, or one config file. An explicit token alone is not enough \u2014 without an expected state directory there is nothing to assert the endpoint against before the token is sent.`);
-  if (e2.hasEnvToken && !e2.stateDirIntentional) throw D("OURS_API_TOKEN is set, but the state directory is the built-in default. An environment token is process-wide and authenticates to every daemon it is offered to, so it requires an explicitly expected state directory: pass stateDir or expectStateDir, or set OURS_STATE_DIR.");
-  if (e2.hasExplicitToken && !e2.stateDirIntentional) throw D("an explicit token was given, but the state directory is the built-in default, so there would be nothing to assert the daemon against before the token is sent. Pass expectStateDir (or stateDir) naming the state directory that token belongs to.");
+  if (e2.endpointSelected && !e2.stateDirIntentional) throw F(`the endpoint was selected (source: ${e2.endpointSource}) but the state directory is the built-in default. A daemon's API token belongs to one state directory, so reading the default token and sending it to a separately chosen endpoint would disclose a credential to it. Select the state directory too: stateDir, expectStateDir, OURS_STATE_DIR, or one config file. An explicit token alone is not enough \u2014 without an expected state directory there is nothing to assert the endpoint against before the token is sent.`);
+  if (e2.hasEnvToken && !e2.stateDirIntentional) throw F("OURS_API_TOKEN is set, but the state directory is the built-in default. An environment token is process-wide and authenticates to every daemon it is offered to, so it requires an explicitly expected state directory: pass stateDir or expectStateDir, or set OURS_STATE_DIR.");
+  if (e2.hasExplicitToken && !e2.stateDirIntentional) throw F("an explicit token was given, but the state directory is the built-in default, so there would be nothing to assert the daemon against before the token is sent. Pass expectStateDir (or stateDir) naming the state directory that token belongs to.");
 }
-function D(e2) {
+function F(e2) {
   return new p("INCOHERENT_SELECTION", e2);
 }
-function be(e2, t, n, r, i) {
+function De(e2, t, n, r, i) {
   if (e2 !== void 0 && e2 !== "") return { value: e2, source: "explicit" };
   if (t !== void 0) return { value: t, source: "environment" };
   let o = n.apiToken?.trim();
   if (o) return { value: o, source: "config-file" };
   if (i === void 0) {
-    let s = w(M2(r.value, J), false);
+    let s = w(G(r.value, Y), false);
     return s ? { value: s.token, source: "token-file" } : void 0;
   }
   try {
-    let s = i(M2(r.value, J)).trim();
+    let s = i(G(r.value, Y)).trim();
     if (s) return { value: s, source: "token-file" };
   } catch {
   }
 }
-function Se(e2, t) {
+function Pe(e2, t) {
   let n;
   try {
     n = t(e2);
@@ -22118,86 +23009,86 @@ function Se(e2, t) {
   }
   return o;
 }
-function k(e2, t) {
+function $3(e2, t) {
   let n = e2[t];
   if (n === void 0) return;
   let r = n.trim();
   return r === "" ? void 0 : r;
 }
-function Ae(e2) {
+function Ce(e2) {
   if (e2 === void 0) return;
   let t = Number.parseInt(e2, 10);
   if (!Number.isInteger(t) || t < 1 || t > 65535) throw new p("INCOHERENT_SELECTION", `OURS_PORT=${JSON.stringify(e2)} is not a TCP port between 1 and 65535.`);
   return t;
 }
-function ie(e2, t, n, r) {
+function ue(e2, t, n, r) {
   return e2 !== void 0 ? { value: e2, source: "explicit" } : t !== void 0 ? { value: t, source: "environment" } : n !== void 0 ? { value: n, source: "config-file" } : { value: r, source: "default" };
 }
-function Re(e2, t) {
+function Le(e2, t) {
   if (e2 !== void 0) return { value: e2, source: "explicit" };
   if (t !== void 0) return { value: t, source: "environment" };
 }
-async function Ne(e2, t = {}) {
+async function Ue(e2, t = {}) {
   let n = t.fetch ?? globalThis.fetch, r = new AbortController(), i = setTimeout(() => r.abort(), t.timeoutMs ?? 5e3), o;
   try {
-    let a = await n(u2(e2.baseUrl.value, "/state-dir"), { signal: r.signal, redirect: "error" });
-    if (!a.ok) throw new p("INCOHERENT_SELECTION", `${R2(u2(e2.baseUrl.value, "/state-dir"))} answered HTTP ${a.status}, so the daemon at that address could not be identified. Refusing to send a credential to it.`);
+    let a = await n(m2(e2.baseUrl.value, "/state-dir"), { signal: r.signal, redirect: "error" });
+    if (!a.ok) throw new p("INCOHERENT_SELECTION", `${D(m2(e2.baseUrl.value, "/state-dir"))} answered HTTP ${a.status}, so the daemon at that address could not be identified. Refusing to send a credential to it.`);
     o = await a.json();
   } catch (a) {
-    throw a instanceof p ? a : new B(e2.baseUrl.value, e2.expectStateDir, { cause: a });
+    throw a instanceof p ? a : new W(e2.baseUrl.value, e2.expectStateDir, { cause: a });
   } finally {
     clearTimeout(i);
   }
-  let s = typeof o.stateDir == "string" ? P(o.stateDir) : null;
-  if (s === null) throw new p("INCOHERENT_SELECTION", `${R2(u2(e2.baseUrl.value, "/state-dir"))} did not report a state directory, so this is not an ours daemon or not one this client understands. Refusing to send a credential to it.`);
-  if (s !== e2.expectStateDir) throw new p("INCOHERENT_SELECTION", `the daemon at ${R2(e2.baseUrl.value)} owns state directory ${JSON.stringify(s)}, but this selection expects ${JSON.stringify(e2.expectStateDir)}. The token belongs to the expected directory, so it is NOT being sent. Point the endpoint and the state directory at the same daemon.`);
+  let s = typeof o.stateDir == "string" ? M2(o.stateDir) : null;
+  if (s === null) throw new p("INCOHERENT_SELECTION", `${D(m2(e2.baseUrl.value, "/state-dir"))} did not report a state directory, so this is not an ours daemon or not one this client understands. Refusing to send a credential to it.`);
+  if (s !== e2.expectStateDir) throw new p("INCOHERENT_SELECTION", `the daemon at ${D(e2.baseUrl.value)} owns state directory ${JSON.stringify(s)}, but this selection expects ${JSON.stringify(e2.expectStateDir)}. The token belongs to the expected directory, so it is NOT being sent. Point the endpoint and the state directory at the same daemon.`);
 }
-async function G(e2 = {}) {
+async function X(e2 = {}) {
   if (e2.endpoint === void 0 && e2.port === void 0 && e2.stateDir === void 0 && e2.expectStateDir === void 0) {
-    let g2 = re({ ...e2.env ?? process.env, ...e2.configPath === void 0 ? {} : { OURS_CONFIG: e2.configPath } });
-    return G({ ...e2, endpoint: g2.endpoint, expectedInstanceId: g2.expectedInstanceId, credentialPath: g2.credentialPath, sessionMode: "external", leaseToken: e2.leaseToken ?? V(32).toString("hex"), env: {} });
+    let g2 = le({ ...e2.env ?? process.env, ...e2.configPath === void 0 ? {} : { OURS_CONFIG: e2.configPath } });
+    return X({ ...e2, endpoint: g2.endpoint, expectedInstanceId: g2.expectedInstanceId, credentialPath: g2.credentialPath, sessionMode: "external", leaseToken: e2.leaseToken ?? z(32).toString("hex"), env: {} });
   }
   if ("serverCertificate" in e2 && e2.serverCertificate !== void 0) throw new Error("Custom serverCertificate is not supported; HTTPS uses Node certificate trust, including NODE_EXTRA_CA_CERTS");
   let t = e2.env ?? process.env;
   if (t.OURS_TLS_CERT !== void 0 || t.OURS_TLS_KEY !== void 0) throw new Error("Daemon TLS is not supported in V1; remove OURS_TLS_CERT/OURS_TLS_KEY and explicitly configure HTTP");
-  let { leaseToken: n, clientPid: r, sessionMode: i = "local", fetch: o, requestSignal: s, expectedInstanceId: a, requiredCapabilities: c, credentialPath: l, ...m2 } = e2;
+  let { leaseToken: n, clientPid: r, sessionMode: i = "local", fetch: o, requestSignal: s, expectedInstanceId: a, requiredCapabilities: c, credentialPath: l, ...f } = e2;
   if (i !== "local" && i !== "external") throw new Error("Invalid sessionMode");
   if (i === "external") {
     if (a === void 0) throw new Error("External ownership requires explicit daemon identity");
     if (typeof n != "string" || !n.trim()) throw new Error("External ownership requires a stable caller-supplied leaseToken");
   }
-  if (l !== void 0 && (a === void 0 || m2.token !== void 0)) throw new Error("Credential path requires explicit daemon identity and cannot be combined with a token");
+  if (l !== void 0 && (a === void 0 || f.token !== void 0)) throw new Error("Credential path requires explicit daemon identity and cannot be combined with a token");
   if (a !== void 0) {
-    let { endpoint: g2, token: E2 } = m2;
+    let { endpoint: g2, token: y2 } = f;
     if (!g2) throw new Error("Instance selection requires an explicit endpoint");
     if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(a)) throw new Error("Expected daemon instance must be a lowercase UUID");
     if (o !== void 0) throw new Error("Instance selection cannot use an injected fetch");
-    let T2 = y2(g2);
+    let I2 = h2(g2);
     if (c !== void 0 && !Array.isArray(c)) throw new Error("Instance selection requires a nonempty capability list");
-    let _ = [...c ?? ["external-sessions-v1"]];
-    if (!_.length || _.some((b2) => typeof b2 != "string" || !b2.trim())) throw new Error("Instance selection requires a nonempty capability list");
-    if (i === "external") _.includes("external-sessions-v1") || _.push("external-sessions-v1");
-    else if (_.includes("external-sessions-v1")) throw new Error("External capabilities require explicit sessionMode: external; refusing local-mode fallback");
+    let b2 = [...c ?? ["external-sessions-v1"]];
+    if (!b2.length || b2.some((T2) => typeof T2 != "string" || !T2.trim())) throw new Error("Instance selection requires a nonempty capability list");
+    if (i === "external") b2.includes("external-sessions-v1") || b2.push("external-sessions-v1");
+    else if (b2.includes("external-sessions-v1")) throw new Error("External capabilities require explicit sessionMode: external; refusing local-mode fallback");
     {
-      let b2 = await globalThis.fetch(u2(T2, "/selection"), { signal: s ? AbortSignal.any([s, AbortSignal.timeout(5e3)]) : AbortSignal.timeout(5e3), redirect: "error" }), I2 = await F(b2);
-      if (!b2.ok || !I2 || Object.keys(I2).length !== 3 || Object.keys(I2).some((S2) => !["schema", "instanceId", "capabilities"].includes(S2)) || I2.schema !== 1 || I2.instanceId !== a) throw new Error("Daemon instance selection metadata is absent, incompatible or mismatched");
-      let j = I2.capabilities;
-      if (!Array.isArray(j) || j.some((S2) => typeof S2 != "string") || _.some((S2) => !j.includes(S2))) throw new Error("Daemon does not support the required capabilities; refusing local-mode fallback");
+      let T2 = await globalThis.fetch(m2(I2, "/selection"), { signal: s ? AbortSignal.any([s, AbortSignal.timeout(5e3)]) : AbortSignal.timeout(5e3), redirect: "error" }), _ = await P(T2);
+      if (!T2.ok || !_ || Object.keys(_).length !== 3 || Object.keys(_).some((w2) => !["schema", "instanceId", "capabilities"].includes(w2)) || _.schema !== 1 || _.instanceId !== a) throw new Error("Daemon instance selection metadata is absent, incompatible or mismatched");
+      let x = _.capabilities;
+      if (!Array.isArray(x) || x.some((w2) => typeof w2 != "string") || b2.some((w2) => !x.includes(w2))) throw new Error("Daemon does not support the required capabilities; refusing local-mode fallback");
     }
-    let H = l === void 0 ? E2 : S(l);
-    if (typeof H != "string" || !H.trim()) throw new Error("Instance selection requires an explicit API token after daemon verification");
-    return new x({ url: T2, sessionMode: i, requestSignal: s, ...l === void 0 ? { apiToken: H } : { credentialPath: l }, leaseToken: n ?? V(32).toString("hex"), clientPid: r });
+    let S2 = l === void 0 ? y2 : S(l);
+    if (typeof S2 != "string" || !S2.trim()) throw new Error("Instance selection requires an explicit API token after daemon verification");
+    return new U({ url: I2, sessionMode: i, requestSignal: s, ...l === void 0 ? { apiToken: S2 } : { credentialPath: l }, leaseToken: n ?? z(32).toString("hex"), clientPid: r });
   }
   if (c !== void 0) throw new Error("Capability selection requires an expected daemon instance");
-  let f = Oe(m2);
-  return await Ne(f, { fetch: o }), new x({ url: f.baseUrl.value, leaseToken: n ?? V(32).toString("hex"), clientPid: r, ...f.token?.source === "token-file" && m2.readTextFile === void 0 ? { credentialPath: M2(f.expectStateDir, J) } : { apiToken: f.token?.value }, fetch: o, requestSignal: s });
+  let u2 = Ne(f);
+  return await Ue(u2, { fetch: o }), new U({ url: u2.baseUrl.value, leaseToken: n ?? z(32).toString("hex"), clientPid: r, ...u2.token?.source === "token-file" && f.readTextFile === void 0 ? { credentialPath: G(u2.expectStateDir, Y) } : { apiToken: u2.token?.value }, fetch: o, requestSignal: s });
 }
 
 // src/owner-session.ts
 init_define_MESSENGER_BUILD_INFO();
 import { randomBytes } from "node:crypto";
 import * as fs from "node:fs";
-import { isAbsolute, join as join4, resolve, dirname as dirname3 } from "node:path";
+import { isAbsolute, join as join4, resolve as resolve2, dirname as dirname3 } from "node:path";
 import { spawnSync } from "node:child_process";
 function stateExists(path2) {
   try {
@@ -22224,7 +23115,7 @@ var OwnerSession = class _OwnerSession {
       if (saved) throw new ConfigurationError("Saved messenger ownership requires its qualified V1 activation and original selection");
       return void 0;
     }
-    if (!stateDir || !isAbsolute(stateDir) || resolve(stateDir) !== stateDir) {
+    if (!stateDir || !isAbsolute(stateDir) || resolve2(stateDir) !== stateDir) {
       throw new ConfigurationError("Messenger ownership requires an absolute private state directory");
     }
     const capability = spawnSync("flock", ["--version"], { stdio: "ignore", timeout: 5e3 });
@@ -22414,7 +23305,7 @@ function daemonNotificationReader(client) {
 function hasCode(error, code) {
   return error instanceof Error && "code" in error && error.code === code;
 }
-async function startRuntime(cfg, buildInfo, attach = G) {
+async function startRuntime(cfg, buildInfo, attach = X) {
   const endpoint = process.env.OURS_DAEMON_URL?.trim();
   const expectedInstanceId = process.env.OURS_DAEMON_ID?.trim();
   const credentialPath = process.env.OURS_DAEMON_CREDENTIAL_PATH?.trim();
@@ -22491,7 +23382,7 @@ async function bindIdentity(runtime, cfg) {
 // src/push.ts
 init_define_MESSENGER_BUILD_INFO();
 var import_web_push = __toESM(require_src2(), 1);
-import { createHash as createHash3, randomUUID as randomUUID2, timingSafeEqual } from "node:crypto";
+import { createHash as createHash4, randomUUID as randomUUID3, timingSafeEqual } from "node:crypto";
 import { chmodSync as chmodSync2, lstatSync as lstatSync4, mkdirSync as mkdirSync6, readFileSync as readFileSync5, renameSync as renameSync5, writeFileSync as writeFileSync6 } from "node:fs";
 import { dirname as dirname4, join as join5 } from "node:path";
 var MAX_BINDINGS = 32;
@@ -22518,7 +23409,7 @@ function nonEmpty3(value, max = Number.MAX_SAFE_INTEGER) {
   return typeof value === "string" && value.length > 0 && value.length <= max;
 }
 function fingerprint(publicKey) {
-  return createHash3("sha256").update(publicKey).digest("base64url");
+  return createHash4("sha256").update(publicKey).digest("base64url");
 }
 function base64urlBytes(value, length, field) {
   if (!nonEmpty3(value, 256) || !/^[A-Za-z0-9_-]+$/.test(value)) {
@@ -22775,7 +23666,7 @@ var PushStore = class _PushStore {
           [identityCid]: {
             ...newIdentityState(),
             bindings: (parsed?.subscriptions ?? []).map((row) => ({
-              bindingId: randomUUID2(),
+              bindingId: randomUUID3(),
               endpoint: row.endpoint,
               keys: row.keys,
               createdAt: row.createdAt,
@@ -22847,7 +23738,7 @@ var PushStore = class _PushStore {
     const preview = input.preview === void 0 ? previous?.preview ?? "full" : previewMode(input.preview);
     if (!previous && owner.bindings.length >= MAX_BINDINGS) throw new Error(`push subscription limit is ${MAX_BINDINGS}`);
     const createdAt = previous?.createdAt ?? (/* @__PURE__ */ new Date()).toISOString();
-    const bindingId = previous?.bindingId ?? randomUUID2();
+    const bindingId = previous?.bindingId ?? randomUUID3();
     const record = {
       bindingId,
       endpoint,
@@ -23157,7 +24048,7 @@ var PushStore = class _PushStore {
   }
   /** Compatibility for tests/old callers; durable production delivery uses jobs. */
   async send(event) {
-    const wire = `compat-${randomUUID2()}`;
+    const wire = `compat-${randomUUID3()}`;
     this.enqueueJob({ wireId: wire, kind: event.kind, contactId: event.contact_id });
     const id = `${this.identityCid}:${wire}:${event.kind}`;
     this.claimJob(id);
@@ -23166,112 +24057,6 @@ var PushStore = class _PushStore {
   }
 };
 
-// src/watch.ts
-init_define_MESSENGER_BUILD_INFO();
-import { createHash as createHash4 } from "node:crypto";
-function pageDigest(events) {
-  return createHash4("sha256").update(JSON.stringify(events)).digest("base64url");
-}
-function applyNotificationPage(page, push, delivery, events, stats, log2) {
-  if (!Number.isSafeInteger(page.cursor) || page.cursor < 0 || !Array.isArray(page.events)) {
-    throw new Error("daemon notification page is malformed");
-  }
-  const fromCursor = push.notificationCursor;
-  if (fromCursor === null) {
-    if (page.events.length > 0) throw new Error("daemon notification tip page unexpectedly contained events");
-    push.commitNotificationCursor(page.cursor);
-    stats.cursorCommits++;
-    return true;
-  }
-  let progress = push.notificationPageProgress;
-  if (progress) {
-    const prefix = page.events.slice(0, progress.eventCount);
-    if (progress.fromCursor !== fromCursor || page.cursor < progress.cursor || page.events.length < progress.eventCount || pageDigest(prefix) !== progress.digest) {
-      throw new Error("daemon notification page changed while a checkpoint was in progress");
-    }
-  } else {
-    progress = push.beginNotificationPage({
-      fromCursor,
-      cursor: page.cursor,
-      eventCount: page.events.length,
-      digest: pageDigest(page.events)
-    });
-  }
-  for (let index = progress.nextIndex; index < progress.eventCount; index++) {
-    const record = page.events[index];
-    const admission = delivery.admit(record, index + 1);
-    if (admission.status === "saturated") {
-      push.checkpointNotificationPage();
-      stats.saturationEvents++;
-      log2.warn(`event=push_cursor_blocked status=saturated source_cursor=${page.cursor}`);
-      return false;
-    }
-    stats.events++;
-    events.publish(normalizeNotification(record));
-    if (!admission.checkpointed) push.advanceNotificationPage(index + 1);
-  }
-  push.commitNotificationPage();
-  stats.cursorCommits++;
-  return true;
-}
-function abortableWait(ms, signal) {
-  if (signal.aborted) return Promise.resolve();
-  return new Promise((resolve3) => {
-    const timer = setTimeout(done, ms);
-    function done() {
-      clearTimeout(timer);
-      signal.removeEventListener("abort", done);
-      resolve3();
-    }
-    signal.addEventListener("abort", done, { once: true });
-  });
-}
-function startWatcher(client, identity, push, log2, events, options) {
-  const controller = new AbortController();
-  const stats = { pushes: 0, events: 0, reconnects: 0, cursorCommits: 0, saturationEvents: 0 };
-  let backoffMs = 500;
-  let reconnecting = false;
-  const wait = options.wait ?? abortableWait;
-  const probe = options.probe ?? (() => client.version());
-  const loop = (async () => {
-    while (!controller.signal.aborted) {
-      try {
-        if (reconnecting) {
-          await probe();
-          if (controller.signal.aborted) break;
-          events.publish({ type: "sync_required", reason: "daemon_reconnected" });
-          reconnecting = false;
-        }
-        const since = push.notificationCursor ?? "tip";
-        const page = await options.readPage(identity, since, controller.signal);
-        if (controller.signal.aborted) break;
-        const committed = applyNotificationPage(page, push, options.delivery, events, stats, log2);
-        if (!committed) {
-          await wait(backoffMs, controller.signal);
-          backoffMs = Math.min(backoffMs * 2, 3e4);
-          continue;
-        }
-        backoffMs = 500;
-      } catch (e2) {
-        if (controller.signal.aborted) break;
-        stats.reconnects++;
-        reconnecting = true;
-        events.publish({ type: "sync_required", reason: "daemon_unavailable" });
-        reportFailure(log2.warn, `watch stream; reconnecting in ${backoffMs}ms`, e2);
-        await wait(backoffMs, controller.signal);
-        backoffMs = Math.min(backoffMs * 2, 3e4);
-      }
-    }
-  })();
-  return {
-    stats,
-    async stop() {
-      controller.abort();
-      await loop;
-    }
-  };
-}
-
 // src/presence.ts
 init_define_MESSENGER_BUILD_INFO();
 
@@ -23433,7 +24218,7 @@ function attachPresenceServer(server, registry, options) {
       clearInterval(pinger);
       server.removeListener("upgrade", upgrade);
       for (const socket of wss.clients) socket.terminate();
-      await new Promise((resolve3) => wss.close(() => resolve3()));
+      await new Promise((resolve4) => wss.close(() => resolve4()));
     }
   };
 }
@@ -23480,7 +24265,7 @@ async function redirectStaleEntryAsset(req, res, appDir, pathname, basePath = "/
   const staleEntry = /^\/assets\/index-[A-Za-z0-9_-]+\.(js|css)$/.exec(pathname);
   if (!staleEntry) return false;
   try {
-    const index = (await readContainedFile(appDir, resolve2(appDir, "index.html"))).toString("utf8");
+    const index = (await readContainedFile(appDir, resolve3(appDir, "index.html"))).toString("utf8");
     const extension2 = staleEntry[1];
     const currentEntry = new RegExp(
       `(?:src|href)=["'](\\.?\\/assets\\/index-[A-Za-z0-9_-]+\\.${extension2})["']`
@@ -23523,8 +24308,8 @@ async function serveApp(req, res, appDir, basePath = "/") {
   let assetRoot = appDir;
   let cacheControl = "no-cache";
   if (pathname.startsWith("/assets/")) {
-    assetRoot = resolve2(appDir, "assets");
-    const candidate = resolve2(appDir, `.${decodedPathname}`);
+    assetRoot = resolve3(appDir, "assets");
+    const candidate = resolve3(appDir, `.${decodedPathname}`);
     if (candidate !== assetRoot && !candidate.startsWith(`${assetRoot}${sep}`)) {
       appNotFound(res);
       return;
@@ -23532,25 +24317,25 @@ async function serveApp(req, res, appDir, basePath = "/") {
     asset = candidate;
     cacheControl = "public, max-age=31536000, immutable";
   } else if (pathname.startsWith("/icons/")) {
-    assetRoot = resolve2(appDir, "icons");
-    const candidate = resolve2(appDir, `.${decodedPathname}`);
+    assetRoot = resolve3(appDir, "icons");
+    const candidate = resolve3(appDir, `.${decodedPathname}`);
     if (candidate === assetRoot || !candidate.startsWith(`${assetRoot}${sep}`)) {
       appNotFound(res);
       return;
     }
     asset = candidate;
   } else if (pathname === "/manifest.webmanifest" || pathname === "/version.json" || pathname === "/sw.js" || pathname === "/icon.svg" || pathname === "/maskable-icon.svg") {
-    asset = resolve2(appDir, pathname.slice(1));
+    asset = resolve3(appDir, pathname.slice(1));
   } else if (/\.[a-z0-9]+$/i.test(pathname)) {
     appNotFound(res);
     return;
   } else {
-    asset = resolve2(appDir, "index.html");
+    asset = resolve3(appDir, "index.html");
   }
   try {
     let body = await readContainedFile(assetRoot, asset);
     const base = normalizeBasePath(basePath);
-    if (asset === resolve2(appDir, "index.html")) body = Buffer.from(prefixDocument(body.toString("utf8"), base));
+    if (asset === resolve3(appDir, "index.html")) body = Buffer.from(prefixDocument(body.toString("utf8"), base));
     if (pathname === "/manifest.webmanifest" && base !== "/") {
       const manifest = JSON.parse(body.toString("utf8"));
       for (const key of ["id", "start_url", "scope"]) if (typeof manifest[key] === "string") manifest[key] = base + manifest[key].replace(/^\//, "");
@@ -23561,7 +24346,7 @@ async function serveApp(req, res, appDir, basePath = "/") {
     res.writeHead(200, appHeaders(type, cacheControl, body.length));
     res.end(req.method === "HEAD" ? void 0 : body);
   } catch (error) {
-    if (asset !== resolve2(appDir, "index.html")) {
+    if (asset !== resolve3(appDir, "index.html")) {
       if (await redirectStaleEntryAsset(req, res, appDir, decodedPathname, basePath)) return;
       appNotFound(res);
       return;
@@ -23788,11 +24573,11 @@ async function start(cfg, buildInfo, dependencies = DEFAULT_START_DEPENDENCIES)
     };
     const moduleDir = dirname5(fileURLToPath(import.meta.url));
     const appCandidates = [
-      resolve2(moduleDir, "../web"),
-      resolve2(moduleDir, "../dist/web"),
-      resolve2(moduleDir, "web")
+      resolve3(moduleDir, "../web"),
+      resolve3(moduleDir, "../dist/web"),
+      resolve3(moduleDir, "web")
     ];
-    const appDir = process.env.OURS_MESSENGER_WEB_DIR ?? appCandidates.find((candidate) => existsSync3(resolve2(candidate, "index.html")) && existsSync3(resolve2(candidate, "assets"))) ?? resolve2(moduleDir, "__messenger_web_not_built__");
+    const appDir = process.env.OURS_MESSENGER_WEB_DIR ?? appCandidates.find((candidate) => existsSync3(resolve3(candidate, "index.html")) && existsSync3(resolve3(candidate, "assets"))) ?? resolve3(moduleDir, "__messenger_web_not_built__");
     http = createServer((req, res) => {
       const pathname = new URL(req.url ?? "/", "http://localhost").pathname;
       let serving;