@toon-protocol/rig 2.1.0 → 2.2.0

package/README.md

@@ -6,7 +6,11 @@ Git-to-TOON write path core — build git objects and NIP-34 events for the Rig
 | --- | --- | --- |
 | `rig init` | rig (free) | one-shot repo setup: identity + `toon.*` git config |
 | `rig remote add/remove/list` | rig (free) | relays as REAL git remotes (`origin` = default publish target) |
+| `rig clone <relay-url> <owner>/<repo-id> [dir]` | rig (free) | bootstrap a repo from TOON: relay state + SHA-verified Arweave objects → a real, push-capable git repository. Shadows `git clone` |
+| `rig fetch [remote]` | rig (free) | download the missing object delta + update `refs/remotes/<remote>/*` (no merge — `rig merge origin/main`). Shadows `git fetch` |
 | `rig push [remote] [refspecs...]` | rig (paid) | the TOON push: Arweave upload + NIP-34 refs publish. Shadows `git push` — plain-git pushes stay available by running `git push` directly |
+| `rig issue list` / `rig issue show <id>` | rig (free) | the repo's issues + comments from the terminal (state derived from kind:1630-1633, latest wins) |
+| `rig pr list` / `rig pr show <id>` | rig (free) | the repo's patches/PRs; `show` prints the full patch text (pipe it to `git am`) |
 | `rig issue create` | rig (paid) | file an issue (kind:1621) |
 | `rig comment <root-event-id>` | rig (paid) | comment (kind:1622) on an issue/patch |
 | `rig pr create` | rig (paid) | publish a patch (kind:1617) from real `git format-patch` |
@@ -57,6 +61,42 @@ rig pr status <event-id> applied                             # kind:1631
                                                              # (bare `rig status` is git's)
 ```
 
+### The second contributor (reads are FREE)
+
+Someone published a repo on TOON? You can pick it up with **nothing
+configured** — no identity, no wallet, no channel. Reads are free:
+
+```sh
+npm install -g @toon-protocol/rig
+
+# 1. clone — relay state + SHA-verified Arweave objects → a real git repo
+#    (owner as npub1… or 64-char hex; dir defaults to the repo id)
+rig clone wss://relay.example npub1…/their-repo
+cd their-repo                # toon.* config + origin remote already set
+
+# 2. read the tracker from the terminal
+rig issue list               # issues + derived state (latest status wins)
+rig issue show <event-id>    # one issue + its comments
+rig pr list --state open     # patches/PRs
+rig pr show <event-id> --json | jq -r .pr.content | git am   # apply a patch
+
+# 3. stay current — fetch downloads only the missing delta
+rig fetch                    # updates refs/remotes/origin/*, like git fetch
+rig merge origin/main        # integrating is plain git (passthrough)
+
+# 4. ready to contribute back? writes are paid — add an identity + funds:
+export RIG_MNEMONIC="abandon abandon … about"
+export TOON_CLIENT_NETWORK=devnet   # shared devnet: enables `rig fund` (no faucet URL needed)
+rig fund                     # devnet faucet drip
+rig issue create --title "found a bug" --body "details"      # kind:1621
+rig push                     # or publish commits (your own repos)
+```
+
+Note: freshly pushed objects can take **10-20 minutes** to become fetchable
+from Arweave gateways — `rig clone`/`rig fetch` right after a push reports
+the missing SHAs honestly; retry after propagation. A failed clone never
+leaves a partial repository behind.
+
 ### Strict `--json` stdout (machine consumers)
 
 With `--json`, stdout carries **exactly one JSON document** — everything human-facing (identity reports, deprecation nudges, migration hints, chain-selection rationales, discovery warnings, progress lines, even stray `console.log` output from dependencies) is routed to stderr, so `rig <command> --json | jq` always parses. Errors emit one machine envelope (`{"error": "<code>", "detail": …}`) on stdout with the human detail on stderr and a non-zero exit; runs that fail before producing output (usage errors, pre-payment refusals) still emit a backstop error envelope. `--json` is a per-subcommand flag on the commands rig owns, **not** a global rig flag — see the passthrough note below.
@@ -69,10 +109,10 @@ The passthrough is exempt from the `--json` contract: `rig status --json` runs `
 
 ### Identity
 
-The CLI is **standalone-only**: it embeds its own payment client built from
-your seed phrase (`@toon-protocol/client` is a regular dependency, installed
-automatically with the package). The mnemonic is resolved along one
-precedence chain — highest first:
+The CLI is **standalone by default**: it embeds its own payment client built
+from your seed phrase (`@toon-protocol/client` is a regular dependency,
+installed automatically with the package) — no daemon is ever required. The
+mnemonic is resolved along one precedence chain — highest first:
 
 1. `RIG_MNEMONIC` environment variable
 2. `TOON_CLIENT_MNEMONIC` environment variable — deprecated alias, warns on
@@ -90,11 +130,42 @@ Every paid command reports which source is active and the derived pubkey
 output) — the phrase itself is never printed and never written to git config
 or any repo file.
 
-A running `toon-clientd` daemon on the **same identity** is still refused
-(the nonce guard): two writers would race the payment channel's
-cumulative-claim watermark. Stop the daemon or publish through its
-`toon_git_*` MCP tools instead — the daemon's `/git/*` routes are the MCP
-host path and are unaffected by the CLI.
+### Daemon as accelerator (#279)
+
+Every standalone paid command pays a fixed bootstrap cost (relay discovery,
+peer negotiation, channel resume). Two things remove most of it:
+
+- **Automatic daemon delegation** — when a running `toon-clientd` on the
+  loopback control port (`TOON_CLIENT_HTTP_PORT`, default 8787) holds the
+  **same identity**, paid write commands (`push`, `issue`, `comment`,
+  `pr create`, `pr status`) delegate to its `/git/*` routes instead of
+  bootstrapping an embedded client. The daemon already owns the payment
+  channel's cumulative-claim watermark, so one process signs all claims —
+  the exact safety property the pre-#279 nonce-guard *refusal* protected,
+  achieved by delegation instead. The identity match is confirmed against
+  `GET /status` **before** anything is sent. A daemon on a different
+  identity, or no daemon at all, runs standalone as always. The chosen path
+  prints on stderr (`rig: paid path: …`) and lands in `--json` envelopes as
+  `"path": "daemon" | "standalone"`. Note: the single-event daemon routes
+  publish via the daemon's configured relay route; a resolved relay that
+  differs from it draws a warning. Commands the daemon has **no route
+  for** — `rig fund`, `rig balance`, `rig channel open|close|settle` — always
+  run standalone; the on-chain channel mutations among them still refuse
+  while a same-identity daemon runs (they must not race its live claims):
+  stop the daemon for those.
+- **Standalone topology cache** — the resolved network topology (announce
+  discovery, payment-peer pick, settlement-chain selection incl. the
+  funded-chain probes) is cached under `TOON_CLIENT_HOME`
+  (`rig-topology-cache.json`), keyed by relay + identity + explicit config,
+  for 15 minutes (`RIG_TOPOLOGY_TTL_MS` overrides; `0` disables). A cached
+  topology that fails to bootstrap is invalidated and re-resolved live
+  automatically. Money state (claim watermarks, channel map) is never
+  cached.
+
+The `rig` bin also exits as soon as a command finishes and stdio is flushed:
+the embedded client can leave a keep-alive socket that would otherwise hold
+the process open for ~30 more seconds — which was, in fact, the bulk of the
+uniform "~32s per paid command" the #279 study measured.
 
 ### Pushing
 
@@ -117,11 +188,17 @@ The single-event subcommands follow the same paid-write discipline as push — t
 
 - `rig issue create --title <t> [--body <b> | --body-file <f> | stdin] [--label <l>]…` — kind:1621.
 - `rig comment <root-event-id> --body <b> [--parent-author <pubkey>] [--marker root|reply]` — kind:1622.
-- `rig pr create --title <t> (--range <A..B> | --patch-file <f>) [--branch <name>]` — kind:1617; `--range` runs real `git format-patch --stdout` locally and derives the `commit`/`parent-commit` tags. A multi-commit range publishes ONE event carrying the whole series (cover-letter threading is out of scope in v1).
+- `rig pr create --title <t> (--range <A..B> | --patch-file <f>) [--body <b> | --body-file <f>] [--branch <name>]` — kind:1617; `--range` runs real `git format-patch --stdout` locally and derives the `commit`/`parent-commit` tags. A multi-commit range publishes ONE event carrying the whole series (cover-letter threading is out of scope in v1). `--body`/`--body-file` attach the PR description in a dedicated `description` tag — the event content stays pure format-patch output, so `rig pr show`'s patch text still pipes straight into `git am`.
 - `rig pr status <target-event-id> <open|applied|closed|draft>` — kind:1630–1633, with the repo `a` tag attached. (This was top-level `rig status` before v2; bare `rig status` now passes through to `git status`.)
 
 `--repo-id`/`--owner` override the git config address (use `--owner` for repos you don't own).
 
+### Cloning & fetching (free reads, #278)
+
+`rig clone <relay-url> <owner>/<repo-id> [dir]` reconstructs the repository from public data alone: the kind:30618 `arweave` sha→txId map drives parallel downloads across the gateway fallback chain (SHAs the map misses resolve via the Arweave GraphQL `Git-SHA` tag index), **every body is verified against its SHA-1 before it is written** (verification doubles as object-type discovery; corrupt/tampered content is rejected), and the repository is materialized through git's own plumbing — `git hash-object -w --stdin -t <type>` (written SHA re-checked), `git update-ref`, HEAD from the 30618 symref, checked-out worktree. Everything happens in a temp dir moved into place on success, so a failed clone never leaves a partial repo. `rig fetch [remote]` is the same pipeline as a delta: only locally-missing objects are downloaded, and `refs/remotes/<remote>/*` (tags → `refs/tags/*`) move with a `git fetch`-style report.
+
+`rig issue list|show` and `rig pr list|show` are pure relay reads (kind:1621/1617 by the repo `#a` tag; state from kind:1630-1633, latest wins; kind:1622 comments under `show`), tolerant of the devnet relay's non-canonical EVENT payload encodings.
+
 ## Library
 
 No signing or payment code lives in the core — that stays behind the `Publisher` seam:
@@ -129,10 +206,12 @@ No signing or payment code lives in the core — that stays behind the `Publishe
 - `objects.ts` — git object construction with SHA-1 envelope hashing: `createGitBlob`, `createGitTree`, `createGitCommit`, `createGitTag` (annotated tags), the `GitObject`/`GitObjectType` types, `hashGitObject`, and the `MAX_OBJECT_SIZE` (95KB) upload guard constant.
 - `nip34-events.ts` — NIP-34 event builders returning `UnsignedEvent` (caller signs and publishes): `buildRepoAnnouncement` (30617), `buildRepoRefs` (30618, incl. `arweave` sha→txId tags), `buildIssue` (1621), `buildComment` (1622), `buildPatch` (1617, optional real `git format-patch` content), `buildStatus` (1630–1633).
 - `repo-reader.ts` — `GitRepoReader`, read-only local-repo access via injection-safe `execFile` git plumbing: `listRefs`, `objectsBetween`(+`WithPaths`), `readObjects`, `statObjects`, `isAncestor`, `formatPatch`, `resolveRef`.
-- `remote-state.ts` — `fetchRemoteState`, the "what does the remote have?" reader: kind:30617/30618 relay fetch (NIP-33 latest-wins across a plural relay list) + `resolveMissing` Arweave GraphQL Git-SHA fallback.
+- `remote-state.ts` — `fetchRemoteState`, the "what does the remote have?" reader: kind:30617/30618 relay fetch (NIP-33 latest-wins across a plural relay list) + `resolveMissing` Arweave GraphQL Git-SHA fallback; `queryRelay` (tolerant NIP-01 REQ→EOSE) is exported for other readers.
+- `object-fetch.ts` / `read-pipeline.ts` / `materialize.ts` (#278) — the read path: `fetchTxBytes`/`downloadGitObjects` (gateway fallback + concurrency cap + SHA-1 verification-as-type-discovery, `ObjectIntegrityError` on mismatch), `referencedShas`/`walkClosure` (object-graph closure, gitlink-aware), `collectRepoObjects` (the clone/fetch collection engine separating fatal gaps from unreachable ones), and `writeGitObject(s)`/`updateRef`/`setHeadSymref` (git plumbing writers with hostile-refname gating).
+- `npub.ts` — dependency-free bech32 `npubToHex`/`hexToNpub`/`ownerToHex` (NIP-19 pubkey addressing for `rig clone`).
 - `publisher.ts` — the `Publisher` interface (paid transport seam): `getFeeRates`, `uploadGitObject`, `publishEvent`. Implemented by the daemon (#227) and the standalone embedded client (#228).
 - `push.ts` — `planPush` (ref classification, object delta minus known sha→txId hints, oversize hard error, fee estimate) and `executePush` (uploads ref tips last, then ONE cumulative kind:30618 merging the full arweave map, kind:30617 first on first push; crash-resume safe via content-addressed skip).
-- `routes.ts` — the JSON wire shapes of the daemon's `/git/*` control routes (bigints as decimal strings, Maps as records) + the matching `serializePushPlan`/`serializePushResult` helpers, shared with `@toon-protocol/client-mcp` (the daemon keeps these routes; only the CLI stopped using them).
-- `cli/` — the `rig` bin: `init` (#248), `remote` (#249, relays as real git remotes + the shared relay resolution), `push` (#229), the single-event `issue`/`comment`/`pr create`/`pr status` subcommands (#231, nested under `pr` since #250), and the git passthrough (#250, `dispatch.ts` + `git-passthrough.ts`), all standalone-only with the `identity.ts` resolution chain.
+- `routes.ts` — the JSON wire shapes of the daemon's `/git/*` control routes (bigints as decimal strings, Maps as records) + the matching `serializePushPlan`/`serializePushResult` helpers, shared with `@toon-protocol/client-mcp` and consumed by the CLI's #279 delegated fast path (`cli/daemon-session.ts`).
+- `cli/` — the `rig` bin: `init` (#248), `remote` (#249, relays as real git remotes + the shared relay resolution), `push` (#229), the single-event `issue`/`comment`/`pr create`/`pr status` subcommands (#231, nested under `pr` since #250), the git passthrough (#250, `dispatch.ts` + `git-passthrough.ts`), and the #279 daemon-as-accelerator delegation (`daemon-session.ts`), standalone by default with the `identity.ts` resolution chain.
 
 Pure builders promoted from the proven Rig E2E seed pipeline (`packages/rig-web/tests/e2e/seed/lib`). Part of [epic #222](https://github.com/toon-protocol/toon-client/issues/222) and [epic #246](https://github.com/toon-protocol/toon-client/issues/246).

package/dist/{chunk-PLKZAUTG.js → chunk-JBB7HBQC.js}

@@ -1,11 +1,113 @@
+// src/nip34-events.ts
 import {
-  REPOSITORY_STATE_KIND
-} from "./chunk-HPSOQP7Q.js";
+  ISSUE_KIND,
+  PATCH_KIND,
+  REPOSITORY_ANNOUNCEMENT_KIND
+} from "@toon-protocol/core/nip34";
+var REPOSITORY_STATE_KIND = 30618;
+var COMMENT_KIND = 1622;
+function buildRepoAnnouncement(repoId, name, description) {
+  return {
+    kind: REPOSITORY_ANNOUNCEMENT_KIND,
+    content: "",
+    tags: [
+      ["d", repoId],
+      ["name", name],
+      ["description", description]
+    ],
+    created_at: Math.floor(Date.now() / 1e3)
+  };
+}
+function buildRepoRefs(repoId, refs, arweaveMap = {}) {
+  const tags = [["d", repoId]];
+  for (const [refPath, commitSha] of Object.entries(refs)) {
+    tags.push(["r", refPath, commitSha]);
+  }
+  const firstRef = Object.keys(refs)[0];
+  if (firstRef) {
+    tags.push(["HEAD", `ref: ${firstRef}`]);
+  }
+  for (const [sha, txId] of Object.entries(arweaveMap)) {
+    tags.push(["arweave", sha, txId]);
+  }
+  return {
+    kind: REPOSITORY_STATE_KIND,
+    content: "",
+    tags,
+    created_at: Math.floor(Date.now() / 1e3)
+  };
+}
+function buildIssue(repoOwnerPubkey, repoId, title, body, labels = []) {
+  const tags = [
+    ["a", `${REPOSITORY_ANNOUNCEMENT_KIND}:${repoOwnerPubkey}:${repoId}`],
+    ["p", repoOwnerPubkey],
+    ["subject", title],
+    ...labels.map((label) => ["t", label])
+  ];
+  return {
+    kind: ISSUE_KIND,
+    content: body,
+    tags,
+    created_at: Math.floor(Date.now() / 1e3)
+  };
+}
+function buildComment(repoOwnerPubkey, repoId, issueOrPrEventId, authorPubkey, body, marker = "reply") {
+  return {
+    kind: COMMENT_KIND,
+    content: body,
+    tags: [
+      ["a", `${REPOSITORY_ANNOUNCEMENT_KIND}:${repoOwnerPubkey}:${repoId}`],
+      ["e", issueOrPrEventId, "", marker],
+      ["p", authorPubkey]
+    ],
+    created_at: Math.floor(Date.now() / 1e3)
+  };
+}
+function buildPatch(repoOwnerPubkey, repoId, title, commits, branchTag, content = "", description) {
+  const tags = [
+    ["a", `${REPOSITORY_ANNOUNCEMENT_KIND}:${repoOwnerPubkey}:${repoId}`],
+    ["p", repoOwnerPubkey],
+    ["subject", title]
+  ];
+  if (description !== void 0 && description !== "") {
+    tags.push(["description", description]);
+  }
+  for (const commit of commits) {
+    tags.push(["commit", commit.sha]);
+    tags.push(["parent-commit", commit.parentSha]);
+  }
+  if (branchTag) {
+    tags.push(["t", branchTag]);
+  }
+  return {
+    kind: PATCH_KIND,
+    content,
+    tags,
+    created_at: Math.floor(Date.now() / 1e3)
+  };
+}
+function buildStatus(targetEventId, statusKind, targetPubkey) {
+  const tags = [["e", targetEventId]];
+  if (targetPubkey) {
+    tags.push(["p", targetPubkey]);
+  }
+  return {
+    kind: statusKind,
+    content: "",
+    tags,
+    created_at: Math.floor(Date.now() / 1e3)
+  };
+}
 
 // src/remote-state.ts
 import { decode as decodeToon } from "@toon-format/toon";
 
 // ../arweave/dist/gateways.js
+var ARWEAVE_GATEWAYS = [
+  "https://ar-io.dev",
+  "https://arweave.net",
+  "https://permagate.io"
+];
 var ARWEAVE_FETCH_TIMEOUT_MS = 15e3;
 
 // ../arweave/dist/git-sha.js
@@ -89,7 +191,7 @@ async function resolveGitSha(sha, repo) {
 }
 
 // src/remote-state.ts
-import { REPOSITORY_ANNOUNCEMENT_KIND } from "@toon-protocol/core/nip34";
+import { REPOSITORY_ANNOUNCEMENT_KIND as REPOSITORY_ANNOUNCEMENT_KIND2 } from "@toon-protocol/core/nip34";
 function isValidRelayUrl(url) {
   return /^wss?:\/\//i.test(url);
 }
@@ -248,7 +350,7 @@ async function fetchRemoteState(options) {
     throw new Error("fetchRemoteState: repoId is required");
   }
   const filter = {
-    kinds: [REPOSITORY_ANNOUNCEMENT_KIND, REPOSITORY_STATE_KIND],
+    kinds: [REPOSITORY_ANNOUNCEMENT_KIND2, REPOSITORY_STATE_KIND],
     authors: [ownerPubkey],
     "#d": [repoId]
   };
@@ -280,7 +382,7 @@ async function fetchRemoteState(options) {
     events.filter((e) => e.kind === REPOSITORY_STATE_KIND)
   );
   const announceEvent = latestReplaceable(
-    events.filter((e) => e.kind === REPOSITORY_ANNOUNCEMENT_KIND)
+    events.filter((e) => e.kind === REPOSITORY_ANNOUNCEMENT_KIND2)
   );
   const { refs, headSymref, shaToTxId } = refsEvent ? parseRefsEvent(refsEvent) : {
     refs: /* @__PURE__ */ new Map(),
@@ -340,7 +442,18 @@ async function fetchRemoteState(options) {
 }
 
 export {
+  REPOSITORY_STATE_KIND,
+  COMMENT_KIND,
+  buildRepoAnnouncement,
+  buildRepoRefs,
+  buildIssue,
+  buildComment,
+  buildPatch,
+  buildStatus,
+  ARWEAVE_GATEWAYS,
+  ARWEAVE_FETCH_TIMEOUT_MS,
+  isValidArweaveTxId,
   queryRelay,
   fetchRemoteState
 };
-//# sourceMappingURL=chunk-PLKZAUTG.js.map
+//# sourceMappingURL=chunk-JBB7HBQC.js.map

package/dist/chunk-JBB7HBQC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/nip34-events.ts","../src/remote-state.ts","../../arweave/src/gateways.ts","../../arweave/src/git-sha.ts"],"sourcesContent":["/**\n * Pure NIP-34 event builders for the Git-to-TOON write path.\n *\n * Promoted from `packages/rig-web/tests/e2e/seed/lib/event-builders.ts` (#223).\n * All builders return UnsignedEvent — the caller signs with their keypair\n * via finalizeEvent() and publishes through a Publisher (#226). Tag\n * structures follow the NIP-34 spec and `@toon-protocol/core/nip34`.\n */\n\nimport {\n  ISSUE_KIND,\n  PATCH_KIND,\n  REPOSITORY_ANNOUNCEMENT_KIND,\n} from '@toon-protocol/core/nip34';\nimport type {\n  STATUS_APPLIED_KIND,\n  STATUS_CLOSED_KIND,\n  STATUS_DRAFT_KIND,\n  STATUS_OPEN_KIND,\n} from '@toon-protocol/core/nip34';\n\n// Kinds not (yet) exported by @toon-protocol/core/nip34:\n/** Repository State (refs) — replaceable, pairs with kind:30617 via `d` tag. */\nexport const REPOSITORY_STATE_KIND = 30618;\n/** Comment on an issue or patch (NIP-22 style threading within NIP-34). */\nexport const COMMENT_KIND = 1622;\n\n// ---------------------------------------------------------------------------\n// UnsignedEvent type (subset of nostr-tools — no id, sig, or pubkey)\n// ---------------------------------------------------------------------------\n\nexport interface UnsignedEvent {\n  kind: number;\n  content: string;\n  tags: string[][];\n  created_at: number;\n}\n\n// ---------------------------------------------------------------------------\n// kind:30617 — Repository Announcement\n// ---------------------------------------------------------------------------\n\n/**\n * Build a kind:30617 repository announcement event.\n *\n * @param repoId - Repository identifier (d tag)\n * @param name - Human-readable repository name\n * @param description - Repository description\n */\nexport function buildRepoAnnouncement(\n  repoId: string,\n  name: string,\n  description: string\n): UnsignedEvent {\n  return {\n    kind: REPOSITORY_ANNOUNCEMENT_KIND,\n    content: '',\n    tags: [\n      ['d', repoId],\n      ['name', name],\n      ['description', description],\n    ],\n    created_at: Math.floor(Date.now() / 1000),\n  };\n}\n\n// ---------------------------------------------------------------------------\n// kind:30618 — Repository Refs/State\n// ---------------------------------------------------------------------------\n\n/**\n * Build a kind:30618 repository refs/state event.\n *\n * @param repoId - Repository identifier (d tag, matches kind:30617)\n * @param refs - Map of ref paths to commit SHAs (e.g., { 'refs/heads/main': 'abc123' })\n * @param arweaveMap - Map of git SHAs to Arweave transaction IDs\n */\nexport function buildRepoRefs(\n  repoId: string,\n  refs: Record<string, string>,\n  arweaveMap: Record<string, string> = {}\n): UnsignedEvent {\n  const tags: string[][] = [['d', repoId]];\n\n  // Add ref tags\n  for (const [refPath, commitSha] of Object.entries(refs)) {\n    tags.push(['r', refPath, commitSha]);\n  }\n\n  // Default HEAD to first ref (typically refs/heads/main)\n  const firstRef = Object.keys(refs)[0];\n  if (firstRef) {\n    tags.push(['HEAD', `ref: ${firstRef}`]);\n  }\n\n  // Add arweave SHA-to-txId mapping tags\n  for (const [sha, txId] of Object.entries(arweaveMap)) {\n    tags.push(['arweave', sha, txId]);\n  }\n\n  return {\n    kind: REPOSITORY_STATE_KIND,\n    content: '',\n    tags,\n    created_at: Math.floor(Date.now() / 1000),\n  };\n}\n\n// ---------------------------------------------------------------------------\n// kind:1621 — Issue\n// ---------------------------------------------------------------------------\n\n/**\n * Build a kind:1621 issue event.\n *\n * @param repoOwnerPubkey - Pubkey of the repository owner\n * @param repoId - Repository identifier\n * @param title - Issue title (subject tag)\n * @param body - Issue body (Markdown content)\n * @param labels - Optional labels (t tags)\n */\nexport function buildIssue(\n  repoOwnerPubkey: string,\n  repoId: string,\n  title: string,\n  body: string,\n  labels: string[] = []\n): UnsignedEvent {\n  const tags: string[][] = [\n    ['a', `${REPOSITORY_ANNOUNCEMENT_KIND}:${repoOwnerPubkey}:${repoId}`],\n    ['p', repoOwnerPubkey],\n    ['subject', title],\n    ...labels.map((label) => ['t', label]),\n  ];\n\n  return {\n    kind: ISSUE_KIND,\n    content: body,\n    tags,\n    created_at: Math.floor(Date.now() / 1000),\n  };\n}\n\n// ---------------------------------------------------------------------------\n// kind:1622 — Comment (on issue or PR)\n// ---------------------------------------------------------------------------\n\n/**\n * Build a kind:1622 comment event.\n *\n * @param repoOwnerPubkey - Pubkey of the repository owner\n * @param repoId - Repository identifier\n * @param issueOrPrEventId - Event ID of the issue or PR being commented on\n * @param authorPubkey - Pubkey of the issue/PR author (NIP-34 `p` tag for threading), NOT the comment author\n * @param body - Comment body (Markdown content)\n * @param marker - Event reference marker: 'root' or 'reply' (default: 'reply')\n */\nexport function buildComment(\n  repoOwnerPubkey: string,\n  repoId: string,\n  issueOrPrEventId: string,\n  authorPubkey: string,\n  body: string,\n  marker: 'root' | 'reply' = 'reply'\n): UnsignedEvent {\n  return {\n    kind: COMMENT_KIND,\n    content: body,\n    tags: [\n      ['a', `${REPOSITORY_ANNOUNCEMENT_KIND}:${repoOwnerPubkey}:${repoId}`],\n      ['e', issueOrPrEventId, '', marker],\n      ['p', authorPubkey],\n    ],\n    created_at: Math.floor(Date.now() / 1000),\n  };\n}\n\n// ---------------------------------------------------------------------------\n// kind:1617 — Patch / PR\n// ---------------------------------------------------------------------------\n\n/**\n * Build a kind:1617 patch event.\n *\n * The PR body/description travels in a dedicated `description` tag, NEVER in\n * `content` (#280): `content` is real `git format-patch` output that readers\n * pipe straight into `git am`, and git's patch-format detection hard-fails on\n * any leading prose (verified: \"Patch format detection failed.\"). The tag\n * route keeps `git am` consumption intact while `rig pr show` and the\n * rig-web/views `parsePR` renderers surface the description.\n *\n * @param repoOwnerPubkey - Pubkey of the repository owner\n * @param repoId - Repository identifier\n * @param title - Patch/PR title (subject tag)\n * @param commits - Array of { sha, parentSha } for commit and parent-commit tags\n * @param branchTag - Branch name for the t tag\n * @param content - Real `git format-patch` text (NIP-34 patch body); defaults\n *                  to '' for callers that only reference commits by tag\n * @param description - PR body/cover text (`description` tag) — kept out of\n *                      `content` so `git am` still applies it\n */\nexport function buildPatch(\n  repoOwnerPubkey: string,\n  repoId: string,\n  title: string,\n  commits: { sha: string; parentSha: string }[],\n  branchTag?: string,\n  content = '',\n  description?: string\n): UnsignedEvent {\n  const tags: string[][] = [\n    ['a', `${REPOSITORY_ANNOUNCEMENT_KIND}:${repoOwnerPubkey}:${repoId}`],\n    ['p', repoOwnerPubkey],\n    ['subject', title],\n  ];\n\n  if (description !== undefined && description !== '') {\n    tags.push(['description', description]);\n  }\n\n  for (const commit of commits) {\n    tags.push(['commit', commit.sha]);\n    tags.push(['parent-commit', commit.parentSha]);\n  }\n\n  if (branchTag) {\n    tags.push(['t', branchTag]);\n  }\n\n  return {\n    kind: PATCH_KIND,\n    content,\n    tags,\n    created_at: Math.floor(Date.now() / 1000),\n  };\n}\n\n// ---------------------------------------------------------------------------\n// kind:1630-1633 — Status\n// ---------------------------------------------------------------------------\n\n/** Status kinds: 1630 open, 1631 applied/merged, 1632 closed, 1633 draft. */\nexport type StatusKind =\n  | typeof STATUS_OPEN_KIND\n  | typeof STATUS_APPLIED_KIND\n  | typeof STATUS_CLOSED_KIND\n  | typeof STATUS_DRAFT_KIND;\n\n/**\n * Build a status event (kind 1630-1633).\n *\n * @param targetEventId - Event ID of the patch, PR, or issue being updated\n * @param statusKind - One of 1630 (open), 1631 (applied), 1632 (closed), 1633 (draft)\n * @param targetPubkey - Optional pubkey of the target event author (p tag per NIP-34 StatusEvent)\n */\nexport function buildStatus(\n  targetEventId: string,\n  statusKind: StatusKind,\n  targetPubkey?: string\n): UnsignedEvent {\n  const tags: string[][] = [['e', targetEventId]];\n  if (targetPubkey) {\n    tags.push(['p', targetPubkey]);\n  }\n  return {\n    kind: statusKind,\n    content: '',\n    tags,\n    created_at: Math.floor(Date.now() / 1000),\n  };\n}\n","/**\n * Remote repository state reader — the \"what does the remote have?\" half of\n * `rig push` (epic #222, ticket #225).\n *\n * Queries relay(s) over NIP-01 WebSocket for the repository's NIP-34 state:\n *   - kind:30618 (repository state): `r` tags → ref map, `HEAD` symref,\n *     `arweave` tags → git SHA → Arweave txId hints.\n *   - kind:30617 (repository announcement): presence = the repo exists on\n *     TOON (first-push detection) + name/description/relays metadata.\n *\n * Both kinds are NIP-33 parameterized-replaceable: per relay only the latest\n * event per (kind, author, d) survives, but we still pick the newest across\n * relays (highest created_at, ties broken by lowest id per NIP-01).\n *\n * SHAs missing from the `arweave` tag map can be resolved via the shared\n * Arweave GraphQL Git-SHA resolver (@toon-protocol/arweave — the same module\n * the rig SPA uses) through {@link RemoteState.resolveMissing}.\n *\n * Relay payload encodings (mirrors rig's `web/relay-client.ts` decode logic):\n * EVENT payloads arrive as an inline JSON object (standard NIP-01), as a\n * double-JSON-encoded string (devnet relay quirk: a JSON string containing\n * the event JSON), or as a TOON-encoded string. All three are tolerated.\n */\n\nimport { decode as decodeToon } from '@toon-format/toon';\nimport {\n  resolveGitSha,\n  seedShaCache,\n  shaCacheKey,\n} from '@toon-protocol/arweave';\nimport { REPOSITORY_ANNOUNCEMENT_KIND } from '@toon-protocol/core/nip34';\n\nimport { REPOSITORY_STATE_KIND } from './nip34-events.js';\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\n/** A signed Nostr event as seen on a relay (read side). */\nexport interface NostrEvent {\n  id: string;\n  pubkey: string;\n  created_at: number;\n  kind: number;\n  tags: string[][];\n  content: string;\n  sig: string;\n}\n\n/** NIP-01 subscription filter (only the fields rig's readers send). */\nexport interface NostrFilter {\n  ids?: string[];\n  kinds?: number[];\n  authors?: string[];\n  '#d'?: string[];\n  /** Repo address tag filter, e.g. `30617:<owner>:<repoId>` (#278 tracker). */\n  '#a'?: string[];\n  /** Event-reference tag filter (#278 tracker: statuses + comments). */\n  '#e'?: string[];\n  limit?: number;\n}\n\n/**\n * Minimal structural WebSocket type — satisfied by the WHATWG WebSocket\n * global (Node >= 22 / undici, browsers) and by the `ws` package.\n */\nexport interface WebSocketLike {\n  readyState: number;\n  send(data: string): void;\n  close(): void;\n  addEventListener(type: string, listener: (event: never) => void): void;\n}\n\n/** Factory for WebSocket connections (injectable for tests / `ws` fallback). */\nexport type WebSocketFactory = (url: string) => WebSocketLike;\n\nexport interface FetchRemoteStateOptions {\n  /**\n   * Relay WebSocket URLs to query. Plural from day one (forward-compat with\n   * multi-relay routing); size 1 is typical today. Results are merged and the\n   * newest replaceable event across all relays wins.\n   */\n  relayUrls: string[];\n  /** Repository owner's pubkey (hex) — the author of 30617/30618. */\n  ownerPubkey: string;\n  /** Repository identifier (NIP-34 `d` tag). */\n  repoId: string;\n  /** Per-relay timeout in milliseconds (default 10000). On timeout the relay contributes whatever it sent so far. */\n  timeoutMs?: number;\n  /**\n   * Git-SHA → Arweave txId resolver used by {@link RemoteState.resolveMissing}.\n   * Defaults to the shared GraphQL resolver from @toon-protocol/arweave;\n   * injectable for tests.\n   */\n  resolveSha?: (sha: string, repo: string) => Promise<string | null>;\n  /** WebSocket constructor override (defaults to the global WebSocket). */\n  webSocketFactory?: WebSocketFactory;\n}\n\n/** Remote repository state assembled from relay events. */\nexport interface RemoteState {\n  /** True when a kind:30617 announcement exists (false ⇒ first push). */\n  announced: boolean;\n  /** Ref map from the latest kind:30618: refname → commit SHA. */\n  refs: Map<string, string>;\n  /** HEAD symref target (e.g. `refs/heads/main`), or null if unset. */\n  headSymref: string | null;\n  /** Git SHA → Arweave txId hints from the latest kind:30618 `arweave` tags. */\n  shaToTxId: Map<string, string>;\n  /** The latest kind:30618 event, or null if the repo has no state yet. */\n  refsEvent: NostrEvent | null;\n  /** The latest kind:30617 event, or null if the repo is unannounced. */\n  announceEvent: NostrEvent | null;\n  /** Repository name from the announcement `name` tag. */\n  name: string | null;\n  /** Announcement `description` tag (falls back to event content). */\n  description: string | null;\n  /** Relay URLs advertised in the announcement `relays` tag(s). */\n  relays: string[];\n  /**\n   * Resolve SHAs to Arweave txIds: served from the `arweave` tag map when\n   * present, otherwise via the GraphQL Git-SHA resolver. SHAs that resolve\n   * nowhere are omitted from the returned map.\n   */\n  resolveMissing(shas: string[]): Promise<Map<string, string>>;\n}\n\n// ---------------------------------------------------------------------------\n// Relay query (NIP-01 REQ → EVENT* → EOSE)\n// ---------------------------------------------------------------------------\n\n/** Validate that a relay URL uses a WebSocket scheme (mirrors rig's url-utils). */\nfunction isValidRelayUrl(url: string): boolean {\n  return /^wss?:\\/\\//i.test(url);\n}\n\n/** WHATWG WebSocket OPEN ready state. */\nconst WS_OPEN = 1;\n\nfunction defaultWebSocketFactory(url: string): WebSocketLike {\n  const ctor = (\n    globalThis as { WebSocket?: new (url: string) => WebSocketLike }\n  ).WebSocket;\n  if (!ctor) {\n    throw new Error(\n      'No global WebSocket constructor (Node >= 22 required) — pass webSocketFactory'\n    );\n  }\n  return new ctor(url);\n}\n\n/**\n * Decode a relay EVENT payload, tolerating every encoding seen in the wild:\n * inline object (standard NIP-01), double-JSON-encoded string (devnet relay\n * serves the event as a JSON string containing the event JSON), or a\n * TOON-encoded string (rig's `decodeToonMessage` path).\n */\nfunction decodeEventPayload(payload: unknown): NostrEvent | null {\n  if (payload !== null && typeof payload === 'object') {\n    return payload as NostrEvent;\n  }\n  if (typeof payload !== 'string') {\n    return null;\n  }\n  try {\n    const parsed: unknown = JSON.parse(payload);\n    if (parsed !== null && typeof parsed === 'object') {\n      return parsed as NostrEvent;\n    }\n  } catch {\n    // Not JSON — fall through to TOON\n  }\n  try {\n    return decodeToon(payload) as unknown as NostrEvent;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Query one relay: send a REQ, collect EVENTs until EOSE, then CLOSE.\n * Mirrors rig's `queryRelay` (partial results on timeout / early close).\n * Exported for reuse by the network-bootstrap discovery (kind:10032).\n */\nexport function queryRelay(\n  relayUrl: string,\n  filter: NostrFilter,\n  timeoutMs: number,\n  webSocketFactory: WebSocketFactory\n): Promise<NostrEvent[]> {\n  return new Promise((resolve, reject) => {\n    const events: NostrEvent[] = [];\n    const subId = `git-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;\n    let ws: WebSocketLike;\n    // eslint-disable-next-line prefer-const -- assigned after `settle` is defined\n    let timeoutHandle: ReturnType<typeof setTimeout>;\n    let settled = false;\n\n    const settle = (outcome: 'resolve' | 'reject', error?: Error) => {\n      if (settled) return;\n      settled = true;\n      clearTimeout(timeoutHandle);\n      try {\n        if (ws.readyState === WS_OPEN) {\n          ws.send(JSON.stringify(['CLOSE', subId]));\n        }\n        ws.close();\n      } catch {\n        // Ignore close errors\n      }\n      if (outcome === 'reject') {\n        reject(error);\n      } else {\n        resolve(events);\n      }\n    };\n\n    if (!isValidRelayUrl(relayUrl)) {\n      reject(\n        new Error(\n          `Invalid relay URL protocol (must be ws:// or wss://): ${relayUrl}`\n        )\n      );\n      return;\n    }\n\n    try {\n      ws = webSocketFactory(relayUrl);\n    } catch (err) {\n      reject(new Error(`Failed to connect to relay ${relayUrl}: ${String(err)}`));\n      return;\n    }\n\n    timeoutHandle = setTimeout(() => {\n      // Resolve with whatever we collected so far (partial results)\n      settle('resolve');\n    }, timeoutMs);\n\n    ws.addEventListener('open', () => {\n      ws.send(JSON.stringify(['REQ', subId, filter]));\n    });\n\n    ws.addEventListener('message', (msgEvent: { data?: unknown }) => {\n      try {\n        const msg = JSON.parse(String(msgEvent.data)) as unknown[];\n        if (!Array.isArray(msg) || msg.length < 2) return;\n\n        const msgType = msg[0];\n        if (msgType === 'EVENT' && msg[1] === subId && msg[2] !== undefined) {\n          const event = decodeEventPayload(msg[2]);\n          if (event) events.push(event);\n        } else if (msgType === 'EOSE' && msg[1] === subId) {\n          settle('resolve');\n        }\n      } catch {\n        // Ignore parse errors for individual messages\n      }\n    });\n\n    ws.addEventListener('error', (event: { message?: unknown }) => {\n      const detail =\n        typeof event === 'object' && event !== null && 'message' in event\n          ? String(event.message)\n          : 'unknown';\n      settle(\n        'reject',\n        new Error(`WebSocket error connecting to ${relayUrl}: ${detail}`)\n      );\n    });\n\n    ws.addEventListener('close', () => {\n      // If we haven't settled yet, resolve with what we have\n      settle('resolve');\n    });\n  });\n}\n\n// ---------------------------------------------------------------------------\n// NIP-33 replaceable selection + tag parsing\n// ---------------------------------------------------------------------------\n\n/**\n * Pick the winning replaceable event: highest created_at, ties broken by\n * lowest id (NIP-01 replaceable-event convention).\n */\nfunction latestReplaceable(events: NostrEvent[]): NostrEvent | null {\n  let winner: NostrEvent | null = null;\n  for (const event of events) {\n    if (\n      winner === null ||\n      event.created_at > winner.created_at ||\n      (event.created_at === winner.created_at && event.id < winner.id)\n    ) {\n      winner = event;\n    }\n  }\n  return winner;\n}\n\n/** Get the first value for a tag name. */\nfunction getTagValue(tags: string[][], name: string): string | undefined {\n  const tag = tags.find((t) => t[0] === name);\n  return tag?.[1];\n}\n\n/** Maximum number of refs parsed from a single kind:30618 event (mirrors views). */\nconst MAX_REFS_PER_EVENT = 1000;\n\n/** Symref prefix used in `HEAD` tags: `[\"HEAD\", \"ref: refs/heads/main\"]`. */\nconst SYMREF_PREFIX = 'ref: ';\n\ninterface ParsedRefs {\n  refs: Map<string, string>;\n  headSymref: string | null;\n  shaToTxId: Map<string, string>;\n}\n\n/** Parse a kind:30618 event's `r` / `HEAD` / `arweave` tags. */\nfunction parseRefsEvent(event: NostrEvent): ParsedRefs {\n  const refs = new Map<string, string>();\n  const shaToTxId = new Map<string, string>();\n  let headSymref: string | null = null;\n\n  for (const tag of event.tags) {\n    const [tagName, v1, v2] = tag;\n    if (tagName === 'r' && v1 && v2) {\n      if (v1 === 'HEAD' && v2.startsWith(SYMREF_PREFIX)) {\n        // Alternate symref spelling: [\"r\", \"HEAD\", \"ref: refs/heads/main\"]\n        headSymref = v2.slice(SYMREF_PREFIX.length);\n        continue;\n      }\n      if (refs.size >= MAX_REFS_PER_EVENT) continue;\n      refs.set(v1, v2);\n    } else if (tagName === 'HEAD' && v1?.startsWith(SYMREF_PREFIX)) {\n      // NIP-34 symref tag: [\"HEAD\", \"ref: refs/heads/main\"]\n      headSymref = v1.slice(SYMREF_PREFIX.length);\n    } else if (tagName === 'arweave' && v1 && v2) {\n      shaToTxId.set(v1, v2);\n    }\n  }\n\n  return { refs, headSymref, shaToTxId };\n}\n\n// ---------------------------------------------------------------------------\n// fetchRemoteState\n// ---------------------------------------------------------------------------\n\n/**\n * Fetch the remote repository state from the relay(s).\n *\n * Sends one REQ per relay for kind:30617 + kind:30618 with\n * `authors=[ownerPubkey]`, `#d=[repoId]`, collects until EOSE (or timeout),\n * and reduces to the latest replaceable event per kind.\n *\n * Resolves as long as at least one relay answers; throws only when every\n * relay fails. Events from other authors / repos are ignored (defense\n * against misbehaving relays that over-return).\n */\nexport async function fetchRemoteState(\n  options: FetchRemoteStateOptions\n): Promise<RemoteState> {\n  const {\n    relayUrls,\n    ownerPubkey,\n    repoId,\n    timeoutMs = 10000,\n    resolveSha = resolveGitSha,\n    webSocketFactory = defaultWebSocketFactory,\n  } = options;\n\n  if (relayUrls.length === 0) {\n    throw new Error('fetchRemoteState: relayUrls must not be empty');\n  }\n  if (!ownerPubkey) {\n    throw new Error('fetchRemoteState: ownerPubkey is required');\n  }\n  if (!repoId) {\n    throw new Error('fetchRemoteState: repoId is required');\n  }\n\n  const filter: NostrFilter = {\n    kinds: [REPOSITORY_ANNOUNCEMENT_KIND, REPOSITORY_STATE_KIND],\n    authors: [ownerPubkey],\n    '#d': [repoId],\n  };\n\n  const results = await Promise.allSettled(\n    relayUrls.map((url) => queryRelay(url, filter, timeoutMs, webSocketFactory))\n  );\n\n  const failures: string[] = [];\n  const byId = new Map<string, NostrEvent>();\n  for (const result of results) {\n    if (result.status === 'rejected') {\n      failures.push(String((result.reason as Error)?.message ?? result.reason));\n      continue;\n    }\n    for (const event of result.value) {\n      // Only trust events from the repo owner for this repo — relays are\n      // untrusted and may over-return.\n      if (event.pubkey !== ownerPubkey) continue;\n      if (getTagValue(event.tags, 'd') !== repoId) continue;\n      if (typeof event.id === 'string' && !byId.has(event.id)) {\n        byId.set(event.id, event);\n      }\n    }\n  }\n\n  if (failures.length === relayUrls.length) {\n    throw new Error(\n      `fetchRemoteState: all ${relayUrls.length} relay(s) failed: ${failures.join('; ')}`\n    );\n  }\n\n  const events = [...byId.values()];\n  const refsEvent = latestReplaceable(\n    events.filter((e) => e.kind === REPOSITORY_STATE_KIND)\n  );\n  const announceEvent = latestReplaceable(\n    events.filter((e) => e.kind === REPOSITORY_ANNOUNCEMENT_KIND)\n  );\n\n  const { refs, headSymref, shaToTxId } = refsEvent\n    ? parseRefsEvent(refsEvent)\n    : {\n        refs: new Map<string, string>(),\n        headSymref: null,\n        shaToTxId: new Map<string, string>(),\n      };\n\n  // Seed the shared resolver cache so later resolveGitSha calls (here or in\n  // any other consumer of @toon-protocol/arweave) skip GraphQL for known SHAs.\n  if (shaToTxId.size > 0) {\n    seedShaCache(\n      [...shaToTxId].map(\n        ([sha, txId]) => [shaCacheKey(sha, repoId), txId] as [string, string]\n      )\n    );\n  }\n\n  // Announcement metadata (mirrors views' parseRepoAnnouncement defaults).\n  const name = announceEvent\n    ? (getTagValue(announceEvent.tags, 'name') ?? null)\n    : null;\n  const description = announceEvent\n    ? (getTagValue(announceEvent.tags, 'description') ?? announceEvent.content)\n    : null;\n  // NIP-34 announcement relays tag is multi-valued: [\"relays\", url1, url2, …]\n  const relays: string[] = [];\n  if (announceEvent) {\n    for (const tag of announceEvent.tags) {\n      if (tag[0] === 'relays') {\n        relays.push(...tag.slice(1).filter((url) => url.length > 0));\n      }\n    }\n  }\n\n  const resolveMissing = async (\n    shas: string[]\n  ): Promise<Map<string, string>> => {\n    const resolved = new Map<string, string>();\n    const missing: string[] = [];\n    for (const sha of new Set(shas)) {\n      const known = shaToTxId.get(sha);\n      if (known !== undefined) {\n        resolved.set(sha, known);\n      } else {\n        missing.push(sha);\n      }\n    }\n    const lookups = await Promise.all(\n      missing.map(\n        async (sha) => [sha, await resolveSha(sha, repoId)] as const\n      )\n    );\n    for (const [sha, txId] of lookups) {\n      if (txId) resolved.set(sha, txId);\n    }\n    return resolved;\n  };\n\n  return {\n    announced: announceEvent !== null,\n    refs,\n    headSymref,\n    shaToTxId,\n    refsEvent,\n    announceEvent,\n    name,\n    description,\n    relays,\n    resolveMissing,\n  };\n}\n","/**\n * Arweave gateway redundancy — single source of truth.\n *\n * Media bytes are content-addressed by Arweave tx id, so every gateway serves\n * the same bytes. This module owns the ordered gateway preference list and the\n * URL helpers used on BOTH sides of the wire:\n *   - upload (client-mcp daemon): stamp a primary `url` + `fallback` mirrors.\n *   - render (views/rig browser): re-point imeta URLs + fail over on error.\n *\n * Previously hand-duplicated in `views`, `rig`, and `client-mcp`; those now all\n * import from here. The default list can be overridden per call (e.g. from a\n * daemon env var) — pass `gateways` to the helpers.\n */\n\n/** Ordered Arweave gateways to try (primary first, then fallbacks). */\nexport const ARWEAVE_GATEWAYS = [\n  'https://ar-io.dev',\n  'https://arweave.net',\n  'https://permagate.io',\n] as const;\n\n/** Timeout for individual Arweave fetch requests in milliseconds. */\nexport const ARWEAVE_FETCH_TIMEOUT_MS = 15000;\n\n/** Arweave transaction IDs are 43-character base64url strings. */\nconst TX_ID_RE = /^[a-zA-Z0-9_-]{43}$/;\n\n/** Hosts recognized as Arweave gateways (path-addressed). */\nconst ARWEAVE_HOST_RE =\n  /(^|\\.)(arweave\\.net|ar-io\\.dev|permagate\\.io|g8way\\.io|ar\\.io)$/i;\n\n/**\n * Extract an Arweave tx id from a media URL, or null if it is not\n * Arweave-addressable. Handles `ar://<txid>` and path-style\n * `https://<gateway>/<txid>`.\n *\n * Sandbox-subdomain URLs (`https://<txid>.<gateway>`) are deliberately NOT\n * decoded: tx ids are case-sensitive base64url, but `URL` (and DNS) lower-case\n * the hostname, which would corrupt the id. Real gateway sandboxing uses a\n * base32 label, not the raw id — the canonical id always travels in the path.\n */\nexport function arweaveTxId(rawUrl: string): string | null {\n  const ar = /^ar:\\/\\/([a-zA-Z0-9_-]{43})(?:[/?#]|$)/.exec(rawUrl);\n  if (ar?.[1]) return ar[1];\n\n  let u: URL;\n  try {\n    u = new URL(rawUrl);\n  } catch {\n    return null;\n  }\n  // Only re-point hosts we actually recognize as Arweave gateways, so a stray\n  // 43-char path segment on some other CDN is never misread as a tx id.\n  if (!ARWEAVE_HOST_RE.test(u.hostname)) return null;\n\n  // Path style: https://arweave.net/<txid>\n  const seg = u.pathname.split('/').find(Boolean);\n  if (seg && TX_ID_RE.test(seg)) return seg;\n\n  return null;\n}\n\n/**\n * Primary URL + fallback mirror URLs for an Arweave tx id, one per gateway in\n * preference order. Used by the upload path to stamp `imeta` `url` + `fallback`.\n */\nexport function arweaveUrls(\n  txId: string,\n  gateways: readonly string[] = ARWEAVE_GATEWAYS\n): { url: string; fallbacks: string[] } {\n  const all = (gateways.length ? gateways : ARWEAVE_GATEWAYS).map(\n    (g) => `${g}/${txId}`\n  );\n  const [url, ...fallbacks] = all;\n  return { url: url ?? `${ARWEAVE_GATEWAYS[0]}/${txId}`, fallbacks };\n}\n\n/**\n * Ordered candidate URLs for a media URL. Arweave-addressable URLs expand to the\n * full gateway-preference list (primary first); anything else is returned\n * unchanged. `extraFallbacks` (e.g. publisher-supplied `imeta` mirrors) are\n * appended last, de-duplicated. Used by the render path to fail over on error.\n */\nexport function arweaveGatewayCandidates(\n  rawUrl: string,\n  extraFallbacks: string[] = [],\n  gateways: readonly string[] = ARWEAVE_GATEWAYS\n): string[] {\n  const txId = arweaveTxId(rawUrl);\n  const candidates = txId\n    ? (gateways.length ? gateways : ARWEAVE_GATEWAYS).map((g) => `${g}/${txId}`)\n    : [rawUrl];\n  const seen = new Set(candidates);\n  for (const f of extraFallbacks) {\n    if (f && !seen.has(f)) {\n      seen.add(f);\n      candidates.push(f);\n    }\n  }\n  return candidates;\n}\n","/**\n * Git-SHA → Arweave transaction ID resolution.\n *\n * Git objects uploaded to Arweave are tagged with `Git-SHA` (the object's\n * SHA-1) and `Repo` (the repository identifier, matching the NIP-34 `d` tag).\n * This module resolves a git SHA to its Arweave tx id via the Arweave GraphQL\n * gateway, with a bounded in-memory cache that can be pre-seeded from relay\n * state (kind:30618 `arweave` tags) to skip the GraphQL indexing delay.\n *\n * Extracted verbatim from rig's `web/arweave-client.ts` (#225) so the browser\n * SPA (rig-web) and the Node write path (@toon-protocol/rig) share ONE resolver.\n * Uses only WHATWG fetch + AbortSignal.timeout — browser and Node compatible.\n */\n\nimport { ARWEAVE_FETCH_TIMEOUT_MS } from './gateways.js';\n\n/** Arweave GraphQL endpoint used for Git-SHA tag lookups. */\nconst ARWEAVE_GRAPHQL_URL = 'https://arweave.net/graphql';\n\n/** Maximum number of entries in the SHA-to-txId cache to prevent unbounded memory growth. */\nconst SHA_CACHE_MAX_SIZE = 10000;\n\n/** In-memory cache for SHA-to-txId resolution. Bounded to prevent memory leaks. */\nconst shaToTxIdCache = new Map<string, string>();\n\n/**\n * Validate a git SHA-1 hash format (40-character hex string).\n */\nfunction isValidGitSha(sha: string): boolean {\n  return /^[0-9a-f]{40}$/i.test(sha);\n}\n\n/**\n * Sanitize a string for safe inclusion in a GraphQL query.\n * Removes characters that could break out of a GraphQL string literal,\n * including backticks which some GraphQL parsers may interpret.\n */\nfunction sanitizeGraphQLValue(value: string): string {\n  // eslint-disable-next-line no-control-regex -- intentional: strip control chars for GraphQL safety\n  return value.replace(/[\"\\\\\\n\\r\\u0000-\\u001f`]/g, '');\n}\n\n/**\n * Build the cache key used by {@link resolveGitSha} / {@link seedShaCache}.\n *\n * The cache is keyed on `\"sha:repo\"` so the same SHA in different repos\n * resolves independently (uploads are tagged per-repo).\n */\nexport function shaCacheKey(sha: string, repo: string): string {\n  return `${sha}:${repo}`;\n}\n\n/**\n * Clear the SHA-to-txId cache. Used for test isolation.\n */\nexport function clearShaCache(): void {\n  shaToTxIdCache.clear();\n}\n\n/**\n * Pre-seed the SHA-to-txId cache with known mappings.\n *\n * Used when txId mappings are available from relay events (e.g., kind:30618\n * `arweave` tags) to avoid the GraphQL indexing delay after Turbo/Irys uploads.\n *\n * @param mappings - Map of \"sha:repo\" cache keys to Arweave transaction IDs\n */\nexport function seedShaCache(\n  mappings: Map<string, string> | [string, string][]\n): void {\n  const entries = mappings instanceof Map ? mappings.entries() : mappings;\n  for (const [key, txId] of entries) {\n    if (shaToTxIdCache.size >= SHA_CACHE_MAX_SIZE) {\n      const firstKey = shaToTxIdCache.keys().next().value;\n      if (firstKey !== undefined) {\n        shaToTxIdCache.delete(firstKey);\n      }\n    }\n    shaToTxIdCache.set(key, txId);\n  }\n}\n\n/** Arweave transaction IDs are 43-character base64url strings. */\nconst ARWEAVE_TX_ID_RE = /^[a-zA-Z0-9_-]{43}$/;\n\n/**\n * Validate an Arweave transaction ID format.\n * Arweave tx IDs are 43-character base64url-encoded strings.\n */\nexport function isValidArweaveTxId(txId: string): boolean {\n  return ARWEAVE_TX_ID_RE.test(txId);\n}\n\n/**\n * Resolve a git SHA to an Arweave transaction ID via GraphQL.\n *\n * Queries the Arweave GraphQL endpoint for transactions tagged with\n * the given Git-SHA and Repo values. Results are cached in-memory.\n *\n * @param sha - Git object SHA-1 hash (hex)\n * @param repo - Repository identifier (matches d tag)\n * @returns Arweave transaction ID, or null if not found\n */\nexport async function resolveGitSha(\n  sha: string,\n  repo: string\n): Promise<string | null> {\n  // Validate SHA format to prevent injection of arbitrary strings into GraphQL\n  if (!isValidGitSha(sha)) {\n    return null;\n  }\n\n  const cacheKey = shaCacheKey(sha, repo);\n  const cached = shaToTxIdCache.get(cacheKey);\n  if (cached !== undefined) {\n    return cached;\n  }\n\n  const safeSha = sanitizeGraphQLValue(sha);\n  const safeRepo = sanitizeGraphQLValue(repo);\n  const query = `query {\n  transactions(tags: [\n    { name: \"Git-SHA\", values: [\"${safeSha}\"] },\n    { name: \"Repo\", values: [\"${safeRepo}\"] }\n  ]) {\n    edges { node { id } }\n  }\n}`;\n\n  try {\n    const response = await fetch(ARWEAVE_GRAPHQL_URL, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify({ query }),\n      signal: AbortSignal.timeout(ARWEAVE_FETCH_TIMEOUT_MS),\n    });\n\n    if (!response.ok) {\n      return null;\n    }\n\n    const json = (await response.json()) as {\n      data?: {\n        transactions?: {\n          edges?: { node?: { id?: string } }[];\n        };\n      };\n    };\n\n    const edges = json.data?.transactions?.edges;\n    if (!edges || edges.length === 0) {\n      return null;\n    }\n\n    const txId = edges[0]?.node?.id;\n    if (!txId || !isValidArweaveTxId(txId)) {\n      return null;\n    }\n\n    // Evict oldest entries if cache exceeds max size\n    if (shaToTxIdCache.size >= SHA_CACHE_MAX_SIZE) {\n      const firstKey = shaToTxIdCache.keys().next().value;\n      if (firstKey !== undefined) {\n        shaToTxIdCache.delete(firstKey);\n      }\n    }\n    shaToTxIdCache.set(cacheKey, txId);\n    return txId;\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";AASA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAUA,IAAM,wBAAwB;AAE9B,IAAM,eAAe;AAwBrB,SAAS,sBACd,QACA,MACA,aACe;AACf,SAAO;AAAA,IACL,MAAM;AAAA,IACN,SAAS;AAAA,IACT,MAAM;AAAA,MACJ,CAAC,KAAK,MAAM;AAAA,MACZ,CAAC,QAAQ,IAAI;AAAA,MACb,CAAC,eAAe,WAAW;AAAA,IAC7B;AAAA,IACA,YAAY,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAAA,EAC1C;AACF;AAaO,SAAS,cACd,QACA,MACA,aAAqC,CAAC,GACvB;AACf,QAAM,OAAmB,CAAC,CAAC,KAAK,MAAM,CAAC;AAGvC,aAAW,CAAC,SAAS,SAAS,KAAK,OAAO,QAAQ,IAAI,GAAG;AACvD,SAAK,KAAK,CAAC,KAAK,SAAS,SAAS,CAAC;AAAA,EACrC;AAGA,QAAM,WAAW,OAAO,KAAK,IAAI,EAAE,CAAC;AACpC,MAAI,UAAU;AACZ,SAAK,KAAK,CAAC,QAAQ,QAAQ,QAAQ,EAAE,CAAC;AAAA,EACxC;AAGA,aAAW,CAAC,KAAK,IAAI,KAAK,OAAO,QAAQ,UAAU,GAAG;AACpD,SAAK,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC;AAAA,EAClC;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,SAAS;AAAA,IACT;AAAA,IACA,YAAY,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAAA,EAC1C;AACF;AAeO,SAAS,WACd,iBACA,QACA,OACA,MACA,SAAmB,CAAC,GACL;AACf,QAAM,OAAmB;AAAA,IACvB,CAAC,KAAK,GAAG,4BAA4B,IAAI,eAAe,IAAI,MAAM,EAAE;AAAA,IACpE,CAAC,KAAK,eAAe;AAAA,IACrB,CAAC,WAAW,KAAK;AAAA,IACjB,GAAG,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC;AAAA,EACvC;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,SAAS;AAAA,IACT;AAAA,IACA,YAAY,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAAA,EAC1C;AACF;AAgBO,SAAS,aACd,iBACA,QACA,kBACA,cACA,MACA,SAA2B,SACZ;AACf,SAAO;AAAA,IACL,MAAM;AAAA,IACN,SAAS;AAAA,IACT,MAAM;AAAA,MACJ,CAAC,KAAK,GAAG,4BAA4B,IAAI,eAAe,IAAI,MAAM,EAAE;AAAA,MACpE,CAAC,KAAK,kBAAkB,IAAI,MAAM;AAAA,MAClC,CAAC,KAAK,YAAY;AAAA,IACpB;AAAA,IACA,YAAY,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAAA,EAC1C;AACF;AA0BO,SAAS,WACd,iBACA,QACA,OACA,SACA,WACA,UAAU,IACV,aACe;AACf,QAAM,OAAmB;AAAA,IACvB,CAAC,KAAK,GAAG,4BAA4B,IAAI,eAAe,IAAI,MAAM,EAAE;AAAA,IACpE,CAAC,KAAK,eAAe;AAAA,IACrB,CAAC,WAAW,KAAK;AAAA,EACnB;AAEA,MAAI,gBAAgB,UAAa,gBAAgB,IAAI;AACnD,SAAK,KAAK,CAAC,eAAe,WAAW,CAAC;AAAA,EACxC;AAEA,aAAW,UAAU,SAAS;AAC5B,SAAK,KAAK,CAAC,UAAU,OAAO,GAAG,CAAC;AAChC,SAAK,KAAK,CAAC,iBAAiB,OAAO,SAAS,CAAC;AAAA,EAC/C;AAEA,MAAI,WAAW;AACb,SAAK,KAAK,CAAC,KAAK,SAAS,CAAC;AAAA,EAC5B;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA,YAAY,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAAA,EAC1C;AACF;AAoBO,SAAS,YACd,eACA,YACA,cACe;AACf,QAAM,OAAmB,CAAC,CAAC,KAAK,aAAa,CAAC;AAC9C,MAAI,cAAc;AAChB,SAAK,KAAK,CAAC,KAAK,YAAY,CAAC;AAAA,EAC/B;AACA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,SAAS;AAAA,IACT;AAAA,IACA,YAAY,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAAA,EAC1C;AACF;;;ACtPA,SAAS,UAAU,kBAAkB;;;ACT9B,IAAM,mBAAmB;EAC9B;EACA;EACA;;AAIK,IAAM,2BAA2B;;;ACLxC,IAAM,sBAAsB;AAG5B,IAAM,qBAAqB;AAG3B,IAAM,iBAAiB,oBAAI,IAAG;AAK9B,SAAS,cAAc,KAAW;AAChC,SAAO,kBAAkB,KAAK,GAAG;AACnC;AAOA,SAAS,qBAAqB,OAAa;AAEzC,SAAO,MAAM,QAAQ,4BAA4B,EAAE;AACrD;AAQM,SAAU,YAAY,KAAa,MAAY;AACnD,SAAO,GAAG,GAAG,IAAI,IAAI;AACvB;AAiBM,SAAU,aACd,UAAkD;AAElD,QAAM,UAAU,oBAAoB,MAAM,SAAS,QAAO,IAAK;AAC/D,aAAW,CAAC,KAAK,IAAI,KAAK,SAAS;AACjC,QAAI,eAAe,QAAQ,oBAAoB;AAC7C,YAAM,WAAW,eAAe,KAAI,EAAG,KAAI,EAAG;AAC9C,UAAI,aAAa,QAAW;AAC1B,uBAAe,OAAO,QAAQ;MAChC;IACF;AACA,mBAAe,IAAI,KAAK,IAAI;EAC9B;AACF;AAGA,IAAM,mBAAmB;AAMnB,SAAU,mBAAmB,MAAY;AAC7C,SAAO,iBAAiB,KAAK,IAAI;AACnC;AAYA,eAAsB,cACpB,KACA,MAAY;AAGZ,MAAI,CAAC,cAAc,GAAG,GAAG;AACvB,WAAO;EACT;AAEA,QAAM,WAAW,YAAY,KAAK,IAAI;AACtC,QAAM,SAAS,eAAe,IAAI,QAAQ;AAC1C,MAAI,WAAW,QAAW;AACxB,WAAO;EACT;AAEA,QAAM,UAAU,qBAAqB,GAAG;AACxC,QAAM,WAAW,qBAAqB,IAAI;AAC1C,QAAM,QAAQ;;mCAEmB,OAAO;gCACV,QAAQ;;;;;AAMtC,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,qBAAqB;MAChD,QAAQ;MACR,SAAS,EAAE,gBAAgB,mBAAkB;MAC7C,MAAM,KAAK,UAAU,EAAE,MAAK,CAAE;MAC9B,QAAQ,YAAY,QAAQ,wBAAwB;KACrD;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,aAAO;IACT;AAEA,UAAM,OAAQ,MAAM,SAAS,KAAI;AAQjC,UAAM,QAAQ,KAAK,MAAM,cAAc;AACvC,QAAI,CAAC,SAAS,MAAM,WAAW,GAAG;AAChC,aAAO;IACT;AAEA,UAAM,OAAO,MAAM,CAAC,GAAG,MAAM;AAC7B,QAAI,CAAC,QAAQ,CAAC,mBAAmB,IAAI,GAAG;AACtC,aAAO;IACT;AAGA,QAAI,eAAe,QAAQ,oBAAoB;AAC7C,YAAM,WAAW,eAAe,KAAI,EAAG,KAAI,EAAG;AAC9C,UAAI,aAAa,QAAW;AAC1B,uBAAe,OAAO,QAAQ;MAChC;IACF;AACA,mBAAe,IAAI,UAAU,IAAI;AACjC,WAAO;EACT,QAAQ;AACN,WAAO;EACT;AACF;;;AF7IA,SAAS,gCAAAA,qCAAoC;AAsG7C,SAAS,gBAAgB,KAAsB;AAC7C,SAAO,cAAc,KAAK,GAAG;AAC/B;AAGA,IAAM,UAAU;AAEhB,SAAS,wBAAwB,KAA4B;AAC3D,QAAM,OACJ,WACA;AACF,MAAI,CAAC,MAAM;AACT,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,SAAO,IAAI,KAAK,GAAG;AACrB;AAQA,SAAS,mBAAmB,SAAqC;AAC/D,MAAI,YAAY,QAAQ,OAAO,YAAY,UAAU;AACnD,WAAO;AAAA,EACT;AACA,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO;AAAA,EACT;AACA,MAAI;AACF,UAAM,SAAkB,KAAK,MAAM,OAAO;AAC1C,QAAI,WAAW,QAAQ,OAAO,WAAW,UAAU;AACjD,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AAAA,EAER;AACA,MAAI;AACF,WAAO,WAAW,OAAO;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOO,SAAS,WACd,UACA,QACA,WACA,kBACuB;AACvB,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,SAAuB,CAAC;AAC9B,UAAM,QAAQ,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;AACzE,QAAI;AAEJ,QAAI;AACJ,QAAI,UAAU;AAEd,UAAM,SAAS,CAAC,SAA+B,UAAkB;AAC/D,UAAI,QAAS;AACb,gBAAU;AACV,mBAAa,aAAa;AAC1B,UAAI;AACF,YAAI,GAAG,eAAe,SAAS;AAC7B,aAAG,KAAK,KAAK,UAAU,CAAC,SAAS,KAAK,CAAC,CAAC;AAAA,QAC1C;AACA,WAAG,MAAM;AAAA,MACX,QAAQ;AAAA,MAER;AACA,UAAI,YAAY,UAAU;AACxB,eAAO,KAAK;AAAA,MACd,OAAO;AACL,gBAAQ,MAAM;AAAA,MAChB;AAAA,IACF;AAEA,QAAI,CAAC,gBAAgB,QAAQ,GAAG;AAC9B;AAAA,QACE,IAAI;AAAA,UACF,yDAAyD,QAAQ;AAAA,QACnE;AAAA,MACF;AACA;AAAA,IACF;AAEA,QAAI;AACF,WAAK,iBAAiB,QAAQ;AAAA,IAChC,SAAS,KAAK;AACZ,aAAO,IAAI,MAAM,8BAA8B,QAAQ,KAAK,OAAO,GAAG,CAAC,EAAE,CAAC;AAC1E;AAAA,IACF;AAEA,oBAAgB,WAAW,MAAM;AAE/B,aAAO,SAAS;AAAA,IAClB,GAAG,SAAS;AAEZ,OAAG,iBAAiB,QAAQ,MAAM;AAChC,SAAG,KAAK,KAAK,UAAU,CAAC,OAAO,OAAO,MAAM,CAAC,CAAC;AAAA,IAChD,CAAC;AAED,OAAG,iBAAiB,WAAW,CAAC,aAAiC;AAC/D,UAAI;AACF,cAAM,MAAM,KAAK,MAAM,OAAO,SAAS,IAAI,CAAC;AAC5C,YAAI,CAAC,MAAM,QAAQ,GAAG,KAAK,IAAI,SAAS,EAAG;AAE3C,cAAM,UAAU,IAAI,CAAC;AACrB,YAAI,YAAY,WAAW,IAAI,CAAC,MAAM,SAAS,IAAI,CAAC,MAAM,QAAW;AACnE,gBAAM,QAAQ,mBAAmB,IAAI,CAAC,CAAC;AACvC,cAAI,MAAO,QAAO,KAAK,KAAK;AAAA,QAC9B,WAAW,YAAY,UAAU,IAAI,CAAC,MAAM,OAAO;AACjD,iBAAO,SAAS;AAAA,QAClB;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF,CAAC;AAED,OAAG,iBAAiB,SAAS,CAAC,UAAiC;AAC7D,YAAM,SACJ,OAAO,UAAU,YAAY,UAAU,QAAQ,aAAa,QACxD,OAAO,MAAM,OAAO,IACpB;AACN;AAAA,QACE;AAAA,QACA,IAAI,MAAM,iCAAiC,QAAQ,KAAK,MAAM,EAAE;AAAA,MAClE;AAAA,IACF,CAAC;AAED,OAAG,iBAAiB,SAAS,MAAM;AAEjC,aAAO,SAAS;AAAA,IAClB,CAAC;AAAA,EACH,CAAC;AACH;AAUA,SAAS,kBAAkB,QAAyC;AAClE,MAAI,SAA4B;AAChC,aAAW,SAAS,QAAQ;AAC1B,QACE,WAAW,QACX,MAAM,aAAa,OAAO,cACzB,MAAM,eAAe,OAAO,cAAc,MAAM,KAAK,OAAO,IAC7D;AACA,eAAS;AAAA,IACX;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,YAAY,MAAkB,MAAkC;AACvE,QAAM,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,IAAI;AAC1C,SAAO,MAAM,CAAC;AAChB;AAGA,IAAM,qBAAqB;AAG3B,IAAM,gBAAgB;AAStB,SAAS,eAAe,OAA+B;AACrD,QAAM,OAAO,oBAAI,IAAoB;AACrC,QAAM,YAAY,oBAAI,IAAoB;AAC1C,MAAI,aAA4B;AAEhC,aAAW,OAAO,MAAM,MAAM;AAC5B,UAAM,CAAC,SAAS,IAAI,EAAE,IAAI;AAC1B,QAAI,YAAY,OAAO,MAAM,IAAI;AAC/B,UAAI,OAAO,UAAU,GAAG,WAAW,aAAa,GAAG;AAEjD,qBAAa,GAAG,MAAM,cAAc,MAAM;AAC1C;AAAA,MACF;AACA,UAAI,KAAK,QAAQ,mBAAoB;AACrC,WAAK,IAAI,IAAI,EAAE;AAAA,IACjB,WAAW,YAAY,UAAU,IAAI,WAAW,aAAa,GAAG;AAE9D,mBAAa,GAAG,MAAM,cAAc,MAAM;AAAA,IAC5C,WAAW,YAAY,aAAa,MAAM,IAAI;AAC5C,gBAAU,IAAI,IAAI,EAAE;AAAA,IACtB;AAAA,EACF;AAEA,SAAO,EAAE,MAAM,YAAY,UAAU;AACvC;AAiBA,eAAsB,iBACpB,SACsB;AACtB,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,mBAAmB;AAAA,EACrB,IAAI;AAEJ,MAAI,UAAU,WAAW,GAAG;AAC1B,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AACA,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI,MAAM,2CAA2C;AAAA,EAC7D;AACA,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AAEA,QAAM,SAAsB;AAAA,IAC1B,OAAO,CAACC,+BAA8B,qBAAqB;AAAA,IAC3D,SAAS,CAAC,WAAW;AAAA,IACrB,MAAM,CAAC,MAAM;AAAA,EACf;AAEA,QAAM,UAAU,MAAM,QAAQ;AAAA,IAC5B,UAAU,IAAI,CAAC,QAAQ,WAAW,KAAK,QAAQ,WAAW,gBAAgB,CAAC;AAAA,EAC7E;AAEA,QAAM,WAAqB,CAAC;AAC5B,QAAM,OAAO,oBAAI,IAAwB;AACzC,aAAW,UAAU,SAAS;AAC5B,QAAI,OAAO,WAAW,YAAY;AAChC,eAAS,KAAK,OAAQ,OAAO,QAAkB,WAAW,OAAO,MAAM,CAAC;AACxE;AAAA,IACF;AACA,eAAW,SAAS,OAAO,OAAO;AAGhC,UAAI,MAAM,WAAW,YAAa;AAClC,UAAI,YAAY,MAAM,MAAM,GAAG,MAAM,OAAQ;AAC7C,UAAI,OAAO,MAAM,OAAO,YAAY,CAAC,KAAK,IAAI,MAAM,EAAE,GAAG;AACvD,aAAK,IAAI,MAAM,IAAI,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI,SAAS,WAAW,UAAU,QAAQ;AACxC,UAAM,IAAI;AAAA,MACR,yBAAyB,UAAU,MAAM,qBAAqB,SAAS,KAAK,IAAI,CAAC;AAAA,IACnF;AAAA,EACF;AAEA,QAAM,SAAS,CAAC,GAAG,KAAK,OAAO,CAAC;AAChC,QAAM,YAAY;AAAA,IAChB,OAAO,OAAO,CAAC,MAAM,EAAE,SAAS,qBAAqB;AAAA,EACvD;AACA,QAAM,gBAAgB;AAAA,IACpB,OAAO,OAAO,CAAC,MAAM,EAAE,SAASA,6BAA4B;AAAA,EAC9D;AAEA,QAAM,EAAE,MAAM,YAAY,UAAU,IAAI,YACpC,eAAe,SAAS,IACxB;AAAA,IACE,MAAM,oBAAI,IAAoB;AAAA,IAC9B,YAAY;AAAA,IACZ,WAAW,oBAAI,IAAoB;AAAA,EACrC;AAIJ,MAAI,UAAU,OAAO,GAAG;AACtB;AAAA,MACE,CAAC,GAAG,SAAS,EAAE;AAAA,QACb,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM,GAAG,IAAI;AAAA,MAClD;AAAA,IACF;AAAA,EACF;AAGA,QAAM,OAAO,gBACR,YAAY,cAAc,MAAM,MAAM,KAAK,OAC5C;AACJ,QAAM,cAAc,gBACf,YAAY,cAAc,MAAM,aAAa,KAAK,cAAc,UACjE;AAEJ,QAAM,SAAmB,CAAC;AAC1B,MAAI,eAAe;AACjB,eAAW,OAAO,cAAc,MAAM;AACpC,UAAI,IAAI,CAAC,MAAM,UAAU;AACvB,eAAO,KAAK,GAAG,IAAI,MAAM,CAAC,EAAE,OAAO,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC;AAAA,MAC7D;AAAA,IACF;AAAA,EACF;AAEA,QAAM,iBAAiB,OACrB,SACiC;AACjC,UAAM,WAAW,oBAAI,IAAoB;AACzC,UAAM,UAAoB,CAAC;AAC3B,eAAW,OAAO,IAAI,IAAI,IAAI,GAAG;AAC/B,YAAM,QAAQ,UAAU,IAAI,GAAG;AAC/B,UAAI,UAAU,QAAW;AACvB,iBAAS,IAAI,KAAK,KAAK;AAAA,MACzB,OAAO;AACL,gBAAQ,KAAK,GAAG;AAAA,MAClB;AAAA,IACF;AACA,UAAM,UAAU,MAAM,QAAQ;AAAA,MAC5B,QAAQ;AAAA,QACN,OAAO,QAAQ,CAAC,KAAK,MAAM,WAAW,KAAK,MAAM,CAAC;AAAA,MACpD;AAAA,IACF;AACA,eAAW,CAAC,KAAK,IAAI,KAAK,SAAS;AACjC,UAAI,KAAM,UAAS,IAAI,KAAK,IAAI;AAAA,IAClC;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,WAAW,kBAAkB;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":["REPOSITORY_ANNOUNCEMENT_KIND","REPOSITORY_ANNOUNCEMENT_KIND"]}

package/dist/{chunk-3EKP7PMM.js → chunk-OIJNRACA.js}

@@ -1,144 +1,12 @@
 import {
+  NonceLock,
+  checkDaemonIdentity,
   recordKey
-} from "./chunk-O6TXHKWG.js";
+} from "./chunk-SW7ZHMGS.js";
 import {
   MAX_OBJECT_SIZE
 } from "./chunk-X2CZPPDM.js";
 
-// src/standalone/nonce-guard.ts
-import { mkdirSync, readFileSync, unlinkSync, writeFileSync } from "fs";
-import { homedir } from "os";
-import { join } from "path";
-var DEFAULT_DAEMON_PORT = 8787;
-function defaultDaemonPort() {
-  const env = process.env["TOON_CLIENT_HTTP_PORT"];
-  const parsed = env ? Number(env) : NaN;
-  return Number.isFinite(parsed) && parsed > 0 ? parsed : DEFAULT_DAEMON_PORT;
-}
-function defaultLockDir() {
-  return process.env["TOON_CLIENT_HOME"] ?? join(homedir(), ".toon-client");
-}
-var DaemonIdentityConflictError = class extends Error {
-  constructor(pubkey, daemonUrl) {
-    super(
-      `toon-clientd is running with this identity (${pubkey.slice(0, 8)}\u2026) at ${daemonUrl} \u2014 use daemon mode or stop the daemon. Two writers on one identity would race the payment channel's cumulative-claim watermark (double-charge hazard).`
-    );
-    this.pubkey = pubkey;
-    this.daemonUrl = daemonUrl;
-    this.name = "DaemonIdentityConflictError";
-  }
-  pubkey;
-  daemonUrl;
-};
-var StandaloneLockError = class extends Error {
-  constructor(pubkey, lockPath, holderPid) {
-    super(
-      `another standalone process (pid ${holderPid}) already holds the payment-channel lock for identity ${pubkey.slice(0, 8)}\u2026 (${lockPath}) \u2014 wait for it to finish or stop it. Two writers on one identity would race the cumulative-claim watermark.`
-    );
-    this.pubkey = pubkey;
-    this.lockPath = lockPath;
-    this.holderPid = holderPid;
-    this.name = "StandaloneLockError";
-  }
-  pubkey;
-  lockPath;
-  holderPid;
-};
-async function checkDaemonIdentity(pubkey, options = {}) {
-  const port = options.port ?? defaultDaemonPort();
-  const fetchImpl = options.fetchImpl ?? fetch;
-  const url = `http://127.0.0.1:${port}/status`;
-  let daemonPubkey;
-  try {
-    const res = await fetchImpl(url, {
-      signal: AbortSignal.timeout(options.timeoutMs ?? 1500)
-    });
-    if (!res.ok) return;
-    const body = await res.json();
-    const candidate = body?.identity?.nostrPubkey;
-    if (typeof candidate === "string") daemonPubkey = candidate;
-  } catch {
-    return;
-  }
-  if (daemonPubkey !== void 0 && daemonPubkey === pubkey) {
-    throw new DaemonIdentityConflictError(pubkey, url);
-  }
-}
-function pidAlive(pid) {
-  try {
-    process.kill(pid, 0);
-    return true;
-  } catch (err) {
-    return err.code === "EPERM";
-  }
-}
-var NonceLock = class _NonceLock {
-  constructor(pubkey, lockPath) {
-    this.pubkey = pubkey;
-    this.lockPath = lockPath;
-    this.exitHandler = () => {
-      try {
-        unlinkSync(this.lockPath);
-      } catch {
-      }
-    };
-    process.once("exit", this.exitHandler);
-  }
-  pubkey;
-  lockPath;
-  released = false;
-  exitHandler;
-  static async acquire(pubkey, options = {}) {
-    const dir = options.dir ?? defaultLockDir();
-    const pid = options.pid ?? process.pid;
-    const lockPath = join(dir, `standalone-${pubkey}.lock`);
-    mkdirSync(dir, { recursive: true });
-    const payload = JSON.stringify(
-      {
-        pid,
-        pubkey,
-        createdAt: (/* @__PURE__ */ new Date()).toISOString()
-      },
-      null,
-      2
-    );
-    for (let attempt = 0; attempt < 2; attempt++) {
-      try {
-        writeFileSync(lockPath, payload, { flag: "wx" });
-        return new _NonceLock(pubkey, lockPath);
-      } catch (err) {
-        if (err.code !== "EEXIST") throw err;
-        let holderPid;
-        try {
-          const parsed = JSON.parse(
-            readFileSync(lockPath, "utf8")
-          );
-          if (typeof parsed.pid === "number") holderPid = parsed.pid;
-        } catch {
-        }
-        if (holderPid !== void 0 && holderPid !== pid && pidAlive(holderPid)) {
-          throw new StandaloneLockError(pubkey, lockPath, holderPid);
-        }
-        try {
-          unlinkSync(lockPath);
-        } catch {
-        }
-      }
-    }
-    throw new StandaloneLockError(pubkey, lockPath, -1);
-  }
-  /** Remove the lockfile and detach the exit hook. Idempotent. */
-  release() {
-    if (this.released) return;
-    this.released = true;
-    process.removeListener("exit", this.exitHandler);
-    try {
-      unlinkSync(this.lockPath);
-    } catch {
-    }
-  }
-};
-
 // src/standalone/standalone-publisher.ts
 import { ToonClient, parseFulfillHttp } from "@toon-protocol/client";
 var StandalonePublishError = class extends Error {
@@ -417,7 +285,7 @@ var StandalonePublisher = class {
       }
       cm.trackChannel(record.channelId, record.context);
       cm.peerChannels.set(record.peerId, record.channelId);
-      if (record.context.chainType === "evm" && this.client.rehydrateChannelDeposit) {
+      if (record.context.chainType === "evm" && record.depositTotal === void 0 && this.client.rehydrateChannelDeposit) {
         try {
           const deposit = await this.client.rehydrateChannelDeposit(
             record.channelId,
@@ -712,16 +580,9 @@ function nowSeconds() {
 }
 
 export {
-  DEFAULT_DAEMON_PORT,
-  defaultDaemonPort,
-  defaultLockDir,
-  DaemonIdentityConflictError,
-  StandaloneLockError,
-  checkDaemonIdentity,
-  NonceLock,
   StandalonePublishError,
   deriveRouteDestinations,
   extractArweaveTxId,
   StandalonePublisher
 };
-//# sourceMappingURL=chunk-3EKP7PMM.js.map
+//# sourceMappingURL=chunk-OIJNRACA.js.map