@wacando/agent 2.3.0 → 2.4.1

package/packages/wacando/chunks/{chunk-PHGOH4AU.mjs → chunk-L6IDYNL5.mjs}

@@ -1,7 +1,7 @@
-// Embedded from lbframe/wacando@618922ecaf2213da18949a8b27d343c8767b64c5 by scripts/embed-wacando.mjs. Do not edit; see provenance.json.
+// Embedded from lbframe/wacando@87b51a96aff0a13ca5ad6650c9c841bee72e1612 by scripts/embed-wacando.mjs. Do not edit; see provenance.json.
 import {
   DomainError
-} from "./chunk-PZDQXGA6.mjs";
+} from "./chunk-4Z6TL6JY.mjs";
 
 // packages/omemo/src/ns.ts
 var NS_OMEMO = "eu.siacs.conversations.axolotl";

package/packages/wacando/omemo-wire.mjs

@@ -1,4 +1,4 @@
-// Embedded from lbframe/wacando@618922ecaf2213da18949a8b27d343c8767b64c5 by scripts/embed-wacando.mjs. Do not edit; see provenance.json.
+// Embedded from lbframe/wacando@87b51a96aff0a13ca5ad6650c9c841bee72e1612 by scripts/embed-wacando.mjs. Do not edit; see provenance.json.
 import {
   BODY_MARKER,
   GCM_IV_BYTES,
@@ -29,8 +29,8 @@ import {
   signerJid,
   signerRole,
   targetJid
-} from "./chunks/chunk-PHGOH4AU.mjs";
-import "./chunks/chunk-PZDQXGA6.mjs";
+} from "./chunks/chunk-L6IDYNL5.mjs";
+import "./chunks/chunk-4Z6TL6JY.mjs";
 
 // packages/omemo/src/policy-wire.ts
 import xml from "@xmpp/xml";

package/packages/wacando/omemo.mjs

@@ -1,9 +1,9 @@
-// Embedded from lbframe/wacando@618922ecaf2213da18949a8b27d343c8767b64c5 by scripts/embed-wacando.mjs. Do not edit; see provenance.json.
+// Embedded from lbframe/wacando@87b51a96aff0a13ca5ad6650c9c841bee72e1612 by scripts/embed-wacando.mjs. Do not edit; see provenance.json.
 import {
   authenticatedMessageOrigin,
   pepFetchItems,
   pepPublish
-} from "./chunks/chunk-53E7SSTF.mjs";
+} from "./chunks/chunk-5Q4655F4.mjs";
 import {
   BODY_MARKER,
   GCM_IV_BYTES,
@@ -37,13 +37,13 @@ import {
   signerJid,
   signerRole,
   utf8Encode
-} from "./chunks/chunk-PHGOH4AU.mjs";
+} from "./chunks/chunk-L6IDYNL5.mjs";
 import {
   ALLOWED_MEDIA_TYPES,
   MAX_FILE_BYTES,
   MIN_FILE_BYTES,
   looksLikePlaintext
-} from "./chunks/chunk-PZDQXGA6.mjs";
+} from "./chunks/chunk-4Z6TL6JY.mjs";
 
 // packages/omemo/src/libsignal.ts
 import { jid as parseJid2 } from "@xmpp/jid";
@@ -585,8 +585,8 @@ var OmemoProvider = class {
   /**
    * Resolve OMEMO device targets for a member set via PEP — fail closed:
    * missing devicelist or missing bundle throws OmemoError before any
-   * plaintext is touched. Bundle elements are kept raw: each session
-   * backend parses the flavor it accepts (kyber → PQXDH, else classic).
+   * plaintext is touched. Bundle elements are kept raw: the session
+   * backend parses them and refuses any non-PQXDH (classic) bundle.
    */
   async resolveDeviceTargets(entity, memberBareJids, timeoutMs = 1e4) {
     const recipients = [.../* @__PURE__ */ new Set([...memberBareJids, this.bareJid])];
@@ -1175,6 +1175,7 @@ var NAME_INVISIBLE = new RegExp(
   "g"
 );
 var NAME_RESERVED = /[<>:"|?*]/g;
+var NAME_DOT_LOOKALIKE = /[\uff0e\ufe52\u2024]/g;
 var WINDOWS_DEVICE = /^(con|prn|aux|nul|conin\$|conout\$|clock\$|com[0-9\u00b9\u00b2\u00b3]|lpt[0-9\u00b9\u00b2\u00b3])\s*(\..*)?$/i;
 function utf8Length(s) {
   return new TextEncoder().encode(s).length;
@@ -1188,7 +1189,7 @@ function cutUtf8(s, max) {
   return out;
 }
 function sanitizeFileName(raw) {
-  let name = raw.normalize("NFC").replace(NAME_INVISIBLE, "");
+  let name = raw.normalize("NFC").replace(NAME_INVISIBLE, "").replace(NAME_DOT_LOOKALIKE, ".");
   name = name.split(/[/\\]/).pop() ?? "";
   name = name.replace(NAME_RESERVED, "_").trim();
   name = name.replace(/^[.\s]+/, "").replace(/[.\s]+$/, "");
@@ -1540,7 +1541,10 @@ function fileIdOfShare(share) {
 }
 async function downloadFile(share, opts) {
   const { fetchUrl } = parseAesgcmUrl(share.url, opts.pin);
-  const limit = share.ciphertextSize;
+  const expected = share.ciphertextSize;
+  if (!Number.isSafeInteger(expected) || expected < FILE_TAG_BYTES)
+    throw new FileCryptoError("invalid_descriptor", "file share: ciphertext size");
+  const limit = Math.min(expected, MAX_FILE_CIPHERTEXT_BYTES);
   const doFetch = opts.fetch ?? globalThis.fetch;
   const signal = AbortSignal.timeout(opts.timeoutMs ?? FILE_DOWNLOAD_TIMEOUT_MS);
   const failed = (what) => new FileCryptoError("download_failed", `download ${what}`);
@@ -1593,6 +1597,7 @@ async function downloadFile(share, opts) {
     if (e instanceof FileCryptoError) throw e;
     throw failed(signal.aborted ? "timed out" : "interrupted");
   }
+  if (total !== expected) throw failed("truncated");
   const out = new Uint8Array(total);
   let at = 0;
   for (const c of chunks) {

package/packages/wacando/xmpp.mjs

@@ -1,17 +1,20 @@
-// Embedded from lbframe/wacando@618922ecaf2213da18949a8b27d343c8767b64c5 by scripts/embed-wacando.mjs. Do not edit; see provenance.json.
+// Embedded from lbframe/wacando@87b51a96aff0a13ca5ad6650c9c841bee72e1612 by scripts/embed-wacando.mjs. Do not edit; see provenance.json.
 import {
   MucJoinError,
   MucOriginTracker,
+  ScramAuthError,
   authenticatedMessageOrigin,
   defaultTimeoutMs,
   forwardedStanza,
   joinRoom,
   queryMam,
   refuseSubscriptionRequests,
+  scramClient,
+  startScramClient,
   unwrapPolicyDelivery,
   waitForStanza
-} from "./chunks/chunk-53E7SSTF.mjs";
-import "./chunks/chunk-PZDQXGA6.mjs";
+} from "./chunks/chunk-5Q4655F4.mjs";
+import "./chunks/chunk-4Z6TL6JY.mjs";
 
 // packages/xmpp/src/index.ts
 import { default as default2 } from "@xmpp/xml";
@@ -73,6 +76,7 @@ async function requestUploadSlot(entity, service, req, timeoutMs = defaultTimeou
 export {
   MucJoinError,
   MucOriginTracker,
+  ScramAuthError,
   announceAvailable,
   authenticatedMessageOrigin,
   forwardedStanza,
@@ -80,6 +84,8 @@ export {
   queryMam,
   refuseSubscriptionRequests,
   requestUploadSlot,
+  scramClient,
+  startScramClient,
   unwrapPolicyDelivery,
   uploadServiceJid,
   default2 as xml

package/plugins/wacando/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "wacando",
-  "version": "2.3.0",
+  "version": "2.4.1",
   "description": "Connect agents with Wacando onboarding and view conversations in the built-in Codex browser.",
   "author": { "name": "Wacando" },
   "skills": "./skills/",

package/plugins/wacando-claude/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "wacando-claude",
   "displayName": "Wacando",
-  "version": "2.3.0",
+  "version": "2.4.1",
   "description": "Connect agents with Wacando onboarding and view live Claude Code conversations locally.",
   "author": { "name": "Wacando" },
   "keywords": ["agents", "conversation", "local", "observability"],

package/plugins/wacando-cursor/.cursor-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "wacando-cursor",
   "displayName": "Wacando",
-  "version": "2.3.0",
+  "version": "2.4.1",
   "description": "Connect agents with Wacando onboarding and view conversations in the built-in Cursor browser.",
   "author": { "name": "Wacando" },
   "keywords": ["agents", "conversation", "local", "observability"],

package/provenance.json

@@ -240,11 +240,11 @@
     "source": {
       "repository": "lbframe/wacando",
       "branch": "main",
-      "commit": "618922ecaf2213da18949a8b27d343c8767b64c5",
+      "commit": "87b51a96aff0a13ca5ad6650c9c841bee72e1612",
       "trees": {
-        "packages/contracts/src": "1dbaf861fdfc561b90b8ca6d4d7249d2faf2008b",
-        "packages/xmpp/src": "d1747bc876f1cdc3594d3b8f40c35d2e72baed72",
-        "packages/omemo/src": "f1339fc6872b0a5a057b0537d30b475106a69698"
+        "packages/contracts/src": "bf79bedbbb5bd0dc5cbf7d3a027a30f76a3f6904",
+        "packages/xmpp/src": "06bc1e27b585ce669cf12c10b01b7771d44b91f4",
+        "packages/omemo/src": "850b707c9705211a6136486c78c38882699e8b39"
       },
       "packages": [
         {
@@ -273,6 +273,8 @@
     },
     "externals": {
       "@signalapp/libsignal-client": "0.102.2",
+      "@xmpp/client": "0.14.0",
+      "@xmpp/events": "0.14.0",
       "@xmpp/jid": "0.14.0",
       "@xmpp/xml": "0.14.0",
       "base64-js": "1.5.1",
@@ -325,41 +327,43 @@
       "packages/xmpp/src/presence.ts",
       "packages/xmpp/src/pubsub.ts",
       "packages/xmpp/src/roster.ts",
+      "packages/xmpp/src/scram.ts",
       "packages/xmpp/src/single-session.ts",
       "packages/xmpp/src/stanza.ts",
+      "packages/xmpp/src/start.ts",
       "packages/xmpp/src/timeouts.ts",
       "packages/xmpp/src/upload.ts"
     ],
     "files": [
       {
-        "path": "packages/wacando/chunks/chunk-53E7SSTF.mjs",
-        "bytes": 14356,
-        "sha256": "c9571af753d39674c6c17ee01542605bf9ca5b59e17e98e1672deee8fa30b096"
+        "path": "packages/wacando/chunks/chunk-4Z6TL6JY.mjs",
+        "bytes": 2164,
+        "sha256": "510beba0db3b2bf41032a4bd2abd003662504f03721f69cdca8ca62da7e2491c"
       },
       {
-        "path": "packages/wacando/chunks/chunk-PHGOH4AU.mjs",
-        "bytes": 13681,
-        "sha256": "79249a0223eeb7ac621ff0f6476ded8926264ea5c4a87edd0c886ec9ee80cc75"
+        "path": "packages/wacando/chunks/chunk-5Q4655F4.mjs",
+        "bytes": 27209,
+        "sha256": "05463ed7058575f8d167c157ac88c8ce44d77f1296235afd6bc96ef72e82501b"
       },
       {
-        "path": "packages/wacando/chunks/chunk-PZDQXGA6.mjs",
-        "bytes": 2164,
-        "sha256": "a5ab4ba0eac4ac3a24530aa8268df803cd2e0d856bc3752fa49f4489ed02b73b"
+        "path": "packages/wacando/chunks/chunk-L6IDYNL5.mjs",
+        "bytes": 13681,
+        "sha256": "cda8c73a2d729ba969abea7bd5a460f142c4df3b30dc84cfc4ee4092d2c448a4"
       },
       {
         "path": "packages/wacando/omemo-wire.mjs",
         "bytes": 5683,
-        "sha256": "c2d98f80d487ed1ea7ba3c989bdf3893ff50d1328a6101bf6633173f29892409"
+        "sha256": "3cfcbc94e80e57856db5a9f9ded5f441a333cf1849481273f6f23d62ed4a4414"
       },
       {
         "path": "packages/wacando/omemo.mjs",
-        "bytes": 109430,
-        "sha256": "61f802bf70445d4dc12d7301a94f7608f2077293503566721bf43f8fc29371b3"
+        "bytes": 109777,
+        "sha256": "b06b6771e7f1796150611ee2da60887f682ccba26262107e1a869732e57fc5f6"
       },
       {
         "path": "packages/wacando/xmpp.mjs",
-        "bytes": 2728,
-        "sha256": "58a7e1a996412a9be7440c74d4a4d6202a60b9ca7ce49de46c2461d1dc119496"
+        "bytes": 2834,
+        "sha256": "e95455a1bc5d8d5c8773129c45fdd2ab19f2282b16acf446f981ccd2051c220c"
       }
     ]
   }

package/packages/wacando/chunks/chunk-53E7SSTF.mjs

@@ -1,423 +0,0 @@
-// Embedded from lbframe/wacando@618922ecaf2213da18949a8b27d343c8767b64c5 by scripts/embed-wacando.mjs. Do not edit; see provenance.json.
-import {
-  XMPP_DOMAIN
-} from "./chunk-PZDQXGA6.mjs";
-
-// packages/xmpp/src/muc.ts
-import xml from "@xmpp/xml";
-
-// packages/xmpp/src/jid.ts
-var COMPONENT_JID = `policy.${XMPP_DOMAIN}`;
-function occupantJid(room, nick) {
-  if (nick.length === 0) {
-    throw new Error("occupant nick must not be empty");
-  }
-  return `${room}/${nick}`;
-}
-
-// packages/xmpp/src/timeouts.ts
-var BASE_TIMEOUT_MS = 1e4;
-var scale = 1;
-function scaledTimeoutMs(ms) {
-  return Math.round(ms * scale);
-}
-function defaultTimeoutMs() {
-  return scaledTimeoutMs(BASE_TIMEOUT_MS);
-}
-
-// packages/xmpp/src/stanza.ts
-var StanzaWaitError = class extends Error {
-  constructor(reason, message, stanza) {
-    super(message);
-    this.reason = reason;
-    this.stanza = stanza;
-    this.name = "StanzaWaitError";
-  }
-  reason;
-  stanza;
-};
-function waitForElement(entity, event, predicate, timeoutMs = defaultTimeoutMs()) {
-  return new Promise((resolve, reject) => {
-    const seen = [];
-    const timer = setTimeout(() => {
-      cleanup();
-      const trail = seen.length ? `; last seen: ${seen.join(", ")}` : "; nothing arrived";
-      const status = entity.status;
-      const state = typeof status === "string" ? `; entity status: ${status}` : "";
-      reject(
-        new StanzaWaitError(
-          "timeout",
-          `no matching ${event} within ${timeoutMs}ms${trail}${state}`
-        )
-      );
-    }, timeoutMs);
-    const onElement = (el) => {
-      seen.push(describeElement(el));
-      if (seen.length > 8) seen.shift();
-      try {
-        if (predicate(el)) {
-          cleanup();
-          resolve(el);
-        }
-      } catch (err) {
-        cleanup();
-        reject(err);
-      }
-    };
-    const cleanup = () => {
-      clearTimeout(timer);
-      entity.off(event, onElement);
-    };
-    entity.on(event, onElement);
-  });
-}
-function waitForStanza(entity, predicate, timeoutMs = defaultTimeoutMs()) {
-  return waitForElement(entity, "stanza", predicate, timeoutMs);
-}
-function describeElement(el) {
-  const type = el.getAttr("type");
-  const from = el.getAttr("from");
-  const error = type === "error" ? ` error=${stanzaErrorCondition(el)}` : "";
-  return `<${el.name}${type ? ` type=${type}` : ""}${from ? ` from=${from}` : ""}${error}>`;
-}
-function stanzaErrorCondition(stanza) {
-  const error = stanza.getChild("error");
-  const condition = error?.children.find((c) => typeof c !== "string");
-  return condition?.getName() ?? "unknown";
-}
-
-// packages/xmpp/src/muc.ts
-var NS_MUC = "http://jabber.org/protocol/muc";
-var NS_MUC_USER = `${NS_MUC}#user`;
-var NS_MUC_ADMIN = `${NS_MUC}#admin`;
-var NS_MUC_OWNER = `${NS_MUC}#owner`;
-var NS_DATA_FORMS = "jabber:x:data";
-var MucError = class extends Error {
-  constructor(message, condition = "unknown", stanza) {
-    super(message);
-    this.condition = condition;
-    this.stanza = stanza;
-    this.name = "MucError";
-  }
-  condition;
-  stanza;
-};
-var MucJoinError = class extends MucError {
-  constructor(condition, stanza, room, nick) {
-    super(`join denied for ${occupantJid(room, nick)}: ${condition}`, condition, stanza);
-    this.room = room;
-    this.nick = nick;
-    this.name = "MucJoinError";
-  }
-  room;
-  nick;
-};
-function joinPresenceEl(room, nick) {
-  return xml("presence", { to: occupantJid(room, nick) }, xml("x", { xmlns: NS_MUC }));
-}
-async function joinRoom(entity, room, nick, timeoutMs = defaultTimeoutMs()) {
-  const self = occupantJid(room, nick);
-  const wait = waitForStanza(
-    entity,
-    (s) => s.is("presence") && s.getAttr("from") === self,
-    timeoutMs
-  );
-  try {
-    await entity.send(joinPresenceEl(room, nick));
-  } catch (err) {
-    void wait.catch(() => {
-    });
-    throw err;
-  }
-  const presence = await wait;
-  if (presence.getAttr("type") === "error") {
-    throw new MucJoinError(stanzaErrorCondition(presence), presence, room, nick);
-  }
-  return presence;
-}
-
-// packages/xmpp/src/origin.ts
-import { jid } from "@xmpp/jid";
-var NS_MUC_USER2 = "http://jabber.org/protocol/muc#user";
-var NS_FORWARD = "urn:xmpp:forward:0";
-var NS_WACANDO_POLICY = "urn:wacando:policy:0";
-var origins = /* @__PURE__ */ new WeakMap();
-function authenticatedMessageOrigin(stanza) {
-  return origins.get(stanza);
-}
-function itemJid(stanza) {
-  const xs = stanza.getChildren("x", NS_MUC_USER2);
-  if (xs.length !== 1) return;
-  const items = xs[0]?.getChildren("item");
-  if (items?.length !== 1) return;
-  const value = items[0]?.getAttr("jid");
-  return typeof value === "string" ? value : void 0;
-}
-function userBareJid(value) {
-  if (value === void 0) return;
-  try {
-    const parsed = jid(value);
-    return parsed.getLocal() ? parsed.bare().toString() : void 0;
-  } catch {
-    return;
-  }
-}
-function isTrustedRelay(value, trustedRelayJid) {
-  if (value === void 0 || trustedRelayJid === void 0) return false;
-  try {
-    const parsed = jid(value);
-    return !parsed.getLocal() && parsed.getDomain() === trustedRelayJid;
-  } catch {
-    return false;
-  }
-}
-function relaySender(stanza) {
-  const relays = stanza.getChildren("relay", NS_WACANDO_POLICY);
-  if (relays.length !== 1) return;
-  return userBareJid(relays[0]?.getAttr("jid"));
-}
-function recordMamOrigin(stanza, room, trustedRelayJid) {
-  if (!stanza.is("message") || stanza.getAttr("type") !== "groupchat" || !stanza.getAttr("from")?.startsWith(`${room}/`))
-    return;
-  const item = itemJid(stanza);
-  const senderBareJid = isTrustedRelay(item, trustedRelayJid) ? relaySender(stanza) : userBareJid(item);
-  if (senderBareJid) origins.set(stanza, { roomJid: room, senderBareJid });
-}
-function unwrapPolicyDelivery(stanza, policyJid) {
-  if (!stanza.is("message") || stanza.getAttr("type") === "error") return;
-  const from = stanza.getAttr("from");
-  if (typeof from !== "string" || !isTrustedRelay(from, policyJid)) return;
-  const deliveries = stanza.getChildren("delivery", NS_WACANDO_POLICY);
-  if (deliveries.length !== 1) return;
-  const delivery = deliveries[0];
-  const room = delivery?.getAttr("room");
-  const senderBareJid = userBareJid(delivery?.getAttr("sender"));
-  const inner = delivery?.getChild("forwarded", NS_FORWARD)?.getChild("message");
-  if (typeof room !== "string" || !senderBareJid || !inner) return;
-  if (inner.getAttr("type") !== "groupchat" || !inner.getAttr("from")?.startsWith(`${room}/`))
-    return;
-  origins.set(inner, { roomJid: room, senderBareJid });
-  return inner;
-}
-var MucOriginTracker = class {
-  /**
-   * `trustedRelayJid`: the policy component domain. When set, groupchat from
-   * an occupant whose real JID is exactly that domain is attributed to its
-   * `<relay jid>` (#39). Without it, relays carry no origin (fail closed).
-   */
-  constructor(entity, options = {}) {
-    this.entity = entity;
-    this.options = options;
-    entity.on("stanza", this.onStanza);
-    entity.on("offline", this.reset);
-    entity.on("disconnect", this.reset);
-  }
-  entity;
-  options;
-  rooms = /* @__PURE__ */ new Set();
-  occupants = /* @__PURE__ */ new Map();
-  /** Occupant full JIDs whose authenticated real JID is the policy component. */
-  relays = /* @__PURE__ */ new Set();
-  trackRoom(room) {
-    this.rooms.add(room);
-  }
-  reset = () => {
-    this.occupants.clear();
-    this.relays.clear();
-  };
-  onStanza = (stanza) => {
-    const from = stanza.getAttr("from");
-    if (typeof from !== "string") return;
-    const slash = from.indexOf("/");
-    if (slash < 1 || !this.rooms.has(from.slice(0, slash))) return;
-    if (stanza.is("presence")) {
-      const type = stanza.getAttr("type");
-      if (type === "unavailable" || type === "error") {
-        this.occupants.delete(from);
-        this.relays.delete(from);
-        if (stanza.getChild("x", NS_MUC_USER2)?.getChildren("status").some((s) => s.getAttr("code") === "110")) {
-          const prefix = `${from.slice(0, slash)}/`;
-          for (const occupant of this.occupants.keys()) {
-            if (occupant.startsWith(prefix)) this.occupants.delete(occupant);
-          }
-          for (const relay of [...this.relays]) {
-            if (relay.startsWith(prefix)) this.relays.delete(relay);
-          }
-        }
-      } else if (!type) {
-        const item = itemJid(stanza);
-        const sender = userBareJid(item);
-        if (sender) this.occupants.set(from, sender);
-        else this.occupants.delete(from);
-        if (isTrustedRelay(item, this.options.trustedRelayJid)) this.relays.add(from);
-        else this.relays.delete(from);
-      }
-    } else if (stanza.is("message") && stanza.getAttr("type") === "groupchat" && !stanza.getChild("delay", "urn:xmpp:delay")) {
-      const senderBareJid = this.relays.has(from) ? relaySender(stanza) : this.occupants.get(from);
-      if (senderBareJid) origins.set(stanza, { roomJid: from.slice(0, slash), senderBareJid });
-    }
-  };
-  close() {
-    this.entity.off("stanza", this.onStanza);
-    this.entity.off("offline", this.reset);
-    this.entity.off("disconnect", this.reset);
-    this.reset();
-  }
-};
-
-// packages/xmpp/src/mam.ts
-import xml2 from "@xmpp/xml";
-var NS_MAM = "urn:xmpp:mam:2";
-var NS_FORWARD2 = "urn:xmpp:forward:0";
-var NS_RSM = "http://jabber.org/protocol/rsm";
-var queryCounter = 0;
-function filterField(varName, value) {
-  return xml2("field", { var: varName }, xml2("value", {}, value));
-}
-function mamQueryEl(options) {
-  const fields = [xml2("field", { var: "FORM_TYPE", type: "hidden" }, xml2("value", {}, NS_MAM))];
-  if (options.withJid !== void 0) fields.push(filterField("with", options.withJid));
-  if (options.start !== void 0) fields.push(filterField("start", options.start));
-  if (options.end !== void 0) fields.push(filterField("end", options.end));
-  const children = [xml2("x", { xmlns: NS_DATA_FORMS, type: "submit" }, ...fields)];
-  if (options.max !== void 0) {
-    children.push(xml2("set", { xmlns: NS_RSM }, xml2("max", {}, String(options.max))));
-  }
-  return xml2("query", { xmlns: NS_MAM, queryid: options.queryId }, ...children);
-}
-async function queryMam(entity, options, timeoutMs = defaultTimeoutMs()) {
-  const queryId = options.queryId ?? `mam${++queryCounter}`;
-  const forwarded = [];
-  const onStanza = (stanza) => {
-    if (!stanza.is("message") || stanza.getAttr("from") !== options.to) return;
-    const result = stanza.getChild("result", NS_MAM);
-    if (!result || result.getAttr("queryid") !== queryId) return;
-    const fwd = result.getChild("forwarded", NS_FORWARD2);
-    if (fwd) {
-      const inner = forwardedStanza(fwd);
-      if (inner) recordMamOrigin(inner, options.to, options.trustedRelayJid);
-      forwarded.push(fwd);
-    }
-  };
-  entity.on("stanza", onStanza);
-  try {
-    const response = await entity.iqCaller.set(
-      mamQueryEl({ ...options, queryId }),
-      options.to,
-      timeoutMs
-    );
-    const fin = response?.getChild("fin", NS_MAM);
-    const rsmLast = fin?.getChild("set", NS_RSM)?.getChildText("last");
-    return {
-      queryId,
-      complete: fin?.getAttr("complete") === "true",
-      lastId: typeof rsmLast === "string" ? rsmLast : void 0,
-      messages: forwarded
-    };
-  } finally {
-    entity.off("stanza", onStanza);
-  }
-}
-function forwardedStanza(forwarded) {
-  return forwarded.children.find(
-    (c) => typeof c !== "string" && c.getName() !== "delay"
-  );
-}
-
-// packages/xmpp/src/roster.ts
-import { jid as parseJid } from "@xmpp/jid";
-import xml3 from "@xmpp/xml";
-function subscriptionRefusal(stanza) {
-  if (!stanza.is("presence") || stanza.getAttr("type") !== "subscribe") return null;
-  const from = stanza.getAttr("from");
-  if (typeof from !== "string" || from === "") return null;
-  let bare;
-  try {
-    bare = parseJid(from).bare().toString();
-  } catch {
-    return null;
-  }
-  return xml3("presence", { to: bare, type: "unsubscribed" });
-}
-function refuseSubscriptionRequests(entity) {
-  const onStanza = (stanza) => {
-    const refusal = subscriptionRefusal(stanza);
-    if (refusal) void entity.send(refusal).catch(() => {
-    });
-  };
-  entity.on("stanza", onStanza);
-  return () => entity.off("stanza", onStanza);
-}
-
-// packages/xmpp/src/presence.ts
-var UNKNOWN_PRESENCE = Object.freeze({
-  connection: "unknown",
-  availability: null
-});
-
-// packages/xmpp/src/pubsub.ts
-import xml4 from "@xmpp/xml";
-var NS_PUBSUB = "http://jabber.org/protocol/pubsub";
-var NS_PUBSUB_PUBLISH_OPTIONS = "http://jabber.org/protocol/pubsub#publish-options";
-function pepPublishEl(node, itemId, payload, accessModel = "open") {
-  return xml4(
-    "pubsub",
-    { xmlns: NS_PUBSUB },
-    xml4("publish", { node }, xml4("item", { id: itemId }, payload)),
-    xml4(
-      "publish-options",
-      {},
-      xml4(
-        "x",
-        { xmlns: NS_DATA_FORMS, type: "submit" },
-        xml4(
-          "field",
-          { var: "FORM_TYPE", type: "hidden" },
-          xml4("value", {}, NS_PUBSUB_PUBLISH_OPTIONS)
-        ),
-        xml4("field", { var: "pubsub#access_model" }, xml4("value", {}, accessModel))
-      )
-    )
-  );
-}
-function pubsubItemsEl(node, maxItems) {
-  const attrs = { node };
-  if (maxItems !== void 0) attrs.max_items = String(maxItems);
-  return xml4("pubsub", { xmlns: NS_PUBSUB }, xml4("items", attrs));
-}
-async function pepPublish(entity, to, node, itemId, payload, timeoutMs = defaultTimeoutMs()) {
-  await entity.iqCaller.set(pepPublishEl(node, itemId, payload), to, timeoutMs);
-}
-async function pepFetchItems(entity, to, node, timeoutMs = defaultTimeoutMs()) {
-  try {
-    const result = await entity.iqCaller.get(pubsubItemsEl(node), to, timeoutMs);
-    const pubsub = result?.getName() === "pubsub" ? result : result?.getChild("pubsub", NS_PUBSUB);
-    const items = pubsub?.getChild("items");
-    if (!items) return [];
-    return items.getChildren("item").map((item) => item.children.find((c) => typeof c !== "string")).filter((el) => el !== void 0);
-  } catch (err) {
-    if (isItemNotFound(err)) return [];
-    throw err;
-  }
-}
-function isItemNotFound(err) {
-  const cond = err?.condition;
-  if (cond === "item-not-found") return true;
-  const stanza = err?.stanza;
-  return stanza?.getChild("error")?.getChild("item-not-found") !== void 0;
-}
-
-export {
-  defaultTimeoutMs,
-  waitForStanza,
-  MucJoinError,
-  joinRoom,
-  authenticatedMessageOrigin,
-  unwrapPolicyDelivery,
-  MucOriginTracker,
-  queryMam,
-  forwardedStanza,
-  pepPublish,
-  pepFetchItems,
-  refuseSubscriptionRequests
-};