@decentnetwork/beagle 0.1.117 → 0.1.119

package/dist/desktop/app.js

@@ -1,4 +1,4 @@
-window.__DK_UI_VERSION="0.1.117";
+window.__DK_UI_VERSION="0.1.119";
 "use strict";
 (() => {
   // packages/beagle-ui/dist/beagle-ui.js
@@ -123,6 +123,8 @@ window.__DK_UI_VERSION="0.1.117";
   var hostPrefersRtcFile = false;
   var hostHasKeyBackup = false;
   var hostEnsWrite = true;
+  var hostWalletBind = true;
+  var hostAssistant = true;
   var hostBrandHref = "";
   var hostTabs = null;
   var hostHideApps = null;
@@ -142,6 +144,8 @@ window.__DK_UI_VERSION="0.1.117";
     hostPrefersRtcFile = !!H.hostPrefersRtcFile;
     hostHasKeyBackup = !!H.hostHasKeyBackup;
     hostEnsWrite = H.hostEnsWrite !== void 0 ? !!H.hostEnsWrite : !H.hostNeedsWelcome;
+    hostWalletBind = H.hostWalletBind !== void 0 ? !!H.hostWalletBind : hostEnsWrite;
+    hostAssistant = H.hostAssistant !== void 0 ? !!H.hostAssistant : true;
     hostBrandHref = typeof H.hostBrandHref === "string" ? H.hostBrandHref : "";
   }
   function fileUrl(name) {
@@ -1340,7 +1344,9 @@ window.__DK_UI_VERSION="0.1.117";
     userId: ASSISTANT_ID,
     alias: "Beagle Assistant",
     address: "",
-    online: true,
+    // Not a peer, so not "online": there is no session, nothing to be present
+    // on, and no dot is drawn for an `app` row anywhere in the UI.
+    online: false,
     app: true,
     agent: false,
     pending: false,
@@ -1782,7 +1788,7 @@ ${lines}`, { assistant: { kind: "adopt", rows: fresh } }));
       textOverflow: "ellipsis",
       flex: 1,
       minWidth: 0
-    } }, dkRowPreview(row.preview)))), /* @__PURE__ */ React.createElement("div", { style: { display: "flex", flexDirection: "column", alignItems: "flex-end", gap: 4, flexShrink: 0 } }, /* @__PURE__ */ React.createElement("span", { style: { fontFamily: "var(--mono)", fontSize: 10.5, color: "var(--faint)" } }, row.lastTime), row.unread ? /* @__PURE__ */ React.createElement(Unread, { n: row.unread }) : peer.pending ? /* @__PURE__ */ React.createElement(Icon, { name: "clock", size: 11, stroke: 2.2, color: "var(--warn, #d29922)", title: "friend request pending" }) : /* @__PURE__ */ React.createElement(StatusDot, { online: peer.online })));
+    } }, dkRowPreview(row.preview)))), /* @__PURE__ */ React.createElement("div", { style: { display: "flex", flexDirection: "column", alignItems: "flex-end", gap: 4, flexShrink: 0 } }, /* @__PURE__ */ React.createElement("span", { style: { fontFamily: "var(--mono)", fontSize: 10.5, color: "var(--faint)" } }, row.lastTime), peer.app ? null : row.unread ? /* @__PURE__ */ React.createElement(Unread, { n: row.unread }) : peer.pending ? /* @__PURE__ */ React.createElement(Icon, { name: "clock", size: 11, stroke: 2.2, color: "var(--warn, #d29922)", title: "friend request pending" }) : /* @__PURE__ */ React.createElement(StatusDot, { online: peer.online })));
   }
   function dkActivityTs(p, isProtocol, fix) {
     const row = rosterRow(p, isProtocol || (() => false), fix);
@@ -3482,6 +3488,65 @@ ${peer.address}`
     return /* @__PURE__ */ React.createElement("div", { style: { flex: 1, display: "flex", minWidth: 0, minHeight: 0 } }, /* @__PURE__ */ React.createElement(PeerSidebar, { T, peers, requests, activeId, onSelect, onAct, onAdd, prefillAddr, onPrefillConsumed, muted, isProtocol, protocolFix }), peer ? /* @__PURE__ */ React.createElement(Conversation, { T, peer, lang, peers, onOpenChat: onSelect, thread, isProtocol, onSend, onSendFile, onSendRtcFile, onAlias, onRemove, onOpenNet, onCall, onReloadThread, hasEarlier, onLoadEarlier, onAssistantRemove, onAssistantAdopt, muted: !!muted && muted.includes(peer.id), onToggleMute }) : /* @__PURE__ */ React.createElement(ChatEmpty, { T }));
   }
   Object.assign(window, { ChatTab });
+  var PROOF_KEY = { eth: "proof.eth", sol: "proof.sol" };
+  var HEAD = "Beagle wallet binding";
+  var LINE = "I bind this wallet to my Beagle identity.";
+  var ADDRESS_RE = { eth: /^0x[0-9a-fA-F]{40}$/, sol: /^[1-9A-HJ-NP-Za-km-z]{32,44}$/ };
+  var USERID_RE = /^[1-9A-HJ-NP-Za-km-z]{32,48}$/;
+  var ISSUED_RE = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}Z$/;
+  function isWalletAddress(chain, address) {
+    const re = ADDRESS_RE[chain];
+    return !!re && typeof address === "string" && re.test(address);
+  }
+  function proofTime(date = /* @__PURE__ */ new Date()) {
+    return new Date(Math.floor(date.getTime() / 1e3) * 1e3).toISOString().replace(".000Z", "Z");
+  }
+  function walletProofMessage({ userid, chain, address, issued }) {
+    if (!USERID_RE.test(String(userid || "")))
+      throw new Error("wallet proof: bad userid");
+    if (!isWalletAddress(chain, address))
+      throw new Error("wallet proof: bad chain or address");
+    if (!ISSUED_RE.test(String(issued || "")))
+      throw new Error("wallet proof: bad issued time");
+    return [HEAD, "", LINE, "", `userid: ${userid}`, `chain: ${chain}`, `address: ${address}`, `issued: ${issued}`].join("\n");
+  }
+  var B58 = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
+  function base58Encode(bytes) {
+    const digits = [];
+    for (const b of bytes) {
+      let carry = b;
+      for (let j = 0; j < digits.length; j++) {
+        carry += digits[j] << 8;
+        digits[j] = carry % 58;
+        carry = carry / 58 | 0;
+      }
+      while (carry > 0) {
+        digits.push(carry % 58);
+        carry = carry / 58 | 0;
+      }
+    }
+    let out = "";
+    for (const b of bytes) {
+      if (b !== 0)
+        break;
+      out += "1";
+    }
+    for (let i = digits.length - 1; i >= 0; i--)
+      out += B58[digits[i]];
+    return out;
+  }
+  var utf8Hex = (s) => "0x" + Array.from(new TextEncoder().encode(s), (b) => b.toString(16).padStart(2, "0")).join("");
+  async function signEthProof(provider, { userid, address, issued = proofTime() }) {
+    const message = walletProofMessage({ userid, chain: "eth", address, issued });
+    const signature = await provider.request({ method: "personal_sign", params: [utf8Hex(message), address] });
+    return { message, signature: String(signature) };
+  }
+  async function signSolProof(wallet, { userid, address, issued = proofTime() }) {
+    const message = walletProofMessage({ userid, chain: "sol", address, issued });
+    const r = await wallet.signMessage(new TextEncoder().encode(message), "utf8");
+    const sig = r && r.signature ? r.signature : r;
+    return { message, signature: base58Encode(Uint8Array.from(sig)) };
+  }
   function CopyBtn({ value, copiedText = "Copied", copyFailedText = "Copy failed", copyTitle = "Copy" }) {
     const [status, setStatus] = React.useState(null);
     const timer = React.useRef(null);
@@ -3895,7 +3960,7 @@ ${peer.address}`
     const [msg, setMsg] = React.useState(null);
     const reload = () => {
       fetch("/api/ens-name").then((r) => r.json()).then((d) => {
-        setSt({ loading: false, registered: !!d.registered, record: d.record || null, mineOwned: !!d.mineOwned });
+        setSt({ loading: false, registered: !!d.registered, record: d.record || null, mineOwned: !!d.mineOwned, writeBlocked: d.writeBlocked || "" });
         if (d.registered && d.record && d.record.name)
           setLabel(d.record.name.replace(/\.beagles\.eth$/i, ""));
         if (onRecord)
@@ -3922,7 +3987,15 @@ ${peer.address}`
       if (l)
         post("/api/ens-register", { name: l, displayName: me.name, description: me.description || "" });
     };
-    const bind = (chain, address) => post("/api/ens-bind-wallet", { chain, address });
+    const bind = (chain, address, proof) => post("/api/ens-bind-wallet", proof ? { chain, address, proof } : { chain, address });
+    const signing = () => {
+      setBusy(true);
+      setMsg({ tone: "ok", text: T.ensSigning || "approve the signature in your wallet\u2026" });
+    };
+    const walletErr = (e) => {
+      setBusy(false);
+      setMsg({ tone: "err", text: String(e && e.message || e) });
+    };
     const bindEth = async () => {
       const eth = window.ethereum;
       if (!eth) {
@@ -3931,10 +4004,13 @@ ${peer.address}`
       }
       try {
         const a = await eth.request({ method: "eth_requestAccounts" });
-        if (a && a[0])
-          bind("eth", a[0]);
+        if (!a || !a[0])
+          return;
+        signing();
+        const proof = await signEthProof(eth, { userid: me.userId, address: a[0] });
+        bind("eth", a[0], proof);
       } catch (e) {
-        setMsg({ tone: "err", text: String(e && e.message || e) });
+        walletErr(e);
       }
     };
     const bindSol = async () => {
@@ -3946,10 +4022,13 @@ ${peer.address}`
       try {
         const r = await sol.connect();
         const a = r && r.publicKey && r.publicKey.toString();
-        if (a)
-          bind("sol", a);
+        if (!a)
+          return;
+        signing();
+        const proof = await signSolProof(sol, { userid: me.userId, address: a });
+        bind("sol", a, proof);
       } catch (e) {
-        setMsg({ tone: "err", text: String(e && e.message || e) });
+        walletErr(e);
       }
     };
     const field = { flex: 1, minWidth: 0, height: 34, borderRadius: 8, border: "1px solid var(--line)", background: "var(--panel-2)", color: "var(--text)", fontFamily: "var(--mono)", fontSize: 13, padding: "0 10px", outline: "none" };
@@ -3998,6 +4077,7 @@ ${peer.address}`
     const [picking, setPicking] = React.useState(false);
     const fileRef = React.useRef(null);
     const canWrite = hostEnsWrite && !!st.mineOwned;
+    const canBind = hostWalletBind && !!st.mineOwned && !st.writeBlocked;
     const rec = st.record;
     const boundEth = rec && rec.addresses && rec.addresses["60"];
     const boundSol = rec && rec.addresses && rec.addresses["501"];
@@ -4020,7 +4100,16 @@ ${peer.address}`
         setMsg({ tone: "err", text: m === "too-big" ? T.ensTooBig || "image too large even after scaling" : m === "bad-image" ? T.ensBadImage || "cannot read that image" : String(m || err) });
       });
     };
-    const walletRow = (lbl, chain, bound, onBind, last) => /* @__PURE__ */ React.createElement("div", { className: "dk-row", style: { ...row, borderBottom: last ? "none" : row.borderBottom } }, /* @__PURE__ */ React.createElement("span", { className: "dk-lbl", style: { width: 130, flexShrink: 0, fontFamily: "var(--mono)", fontSize: 11.5, fontWeight: 600, color: "var(--faint)", textTransform: "uppercase", letterSpacing: 0.5 } }, lbl), bound ? /* @__PURE__ */ React.createElement(React.Fragment, null, /* @__PURE__ */ React.createElement("span", { style: { flex: 1, minWidth: 0, fontFamily: "var(--mono)", fontSize: 12.5, color: "var(--text)", overflow: "hidden", textOverflow: "ellipsis", whiteSpace: "nowrap" } }, bound), /* @__PURE__ */ React.createElement(CopyBtn, { value: bound, copiedText: T.copied, copyFailedText: T.copyFailed, copyTitle: T.copy }), /* @__PURE__ */ React.createElement(Btn, { size: "sm", tone: "danger", disabled: busy || !canWrite, onClick: () => bind(chain, "") }, T.ensUnbind || "unbind")) : /* @__PURE__ */ React.createElement(React.Fragment, null, /* @__PURE__ */ React.createElement("span", { style: { flex: 1, fontFamily: "var(--ui)", fontSize: 12, color: "var(--faint)" } }, T.ensNotBound || "not bound"), /* @__PURE__ */ React.createElement(Btn, { size: "sm", disabled: busy || !canWrite, onClick: onBind }, T.ensBind || "bind")));
+    const proven = (chain, bound) => {
+      if (rec && rec.owner && String(rec.owner).toLowerCase() === String(bound).toLowerCase())
+        return true;
+      try {
+        return JSON.parse((rec && rec.texts || {})[PROOF_KEY[chain]]).msg.indexOf("address: " + bound + "\n") >= 0;
+      } catch {
+        return false;
+      }
+    };
+    const walletRow = (lbl, chain, bound, onBind, last) => /* @__PURE__ */ React.createElement("div", { className: "dk-row", style: { ...row, borderBottom: last ? "none" : row.borderBottom } }, /* @__PURE__ */ React.createElement("span", { className: "dk-lbl", style: { width: 130, flexShrink: 0, fontFamily: "var(--mono)", fontSize: 11.5, fontWeight: 600, color: "var(--faint)", textTransform: "uppercase", letterSpacing: 0.5 } }, lbl), bound ? /* @__PURE__ */ React.createElement(React.Fragment, null, /* @__PURE__ */ React.createElement("span", { style: { flex: 1, minWidth: 0, display: "flex", flexDirection: "column", gap: 2 } }, /* @__PURE__ */ React.createElement("span", { style: { fontFamily: "var(--mono)", fontSize: 12.5, color: "var(--text)", overflow: "hidden", textOverflow: "ellipsis", whiteSpace: "nowrap" } }, bound), /* @__PURE__ */ React.createElement("span", { style: { fontFamily: "var(--ui)", fontSize: 11, color: proven(chain, bound) ? "var(--online)" : "var(--faint)" } }, proven(chain, bound) ? T.ensProven || "signed by this wallet" : T.ensUnproven || "no wallet signature yet")), /* @__PURE__ */ React.createElement(CopyBtn, { value: bound, copiedText: T.copied, copyFailedText: T.copyFailed, copyTitle: T.copy }), !proven(chain, bound) && /* @__PURE__ */ React.createElement(Btn, { size: "sm", disabled: busy || !canBind, onClick: onBind }, T.ensProve || "sign"), /* @__PURE__ */ React.createElement(Btn, { size: "sm", tone: "danger", disabled: busy || !canBind, onClick: () => bind(chain, "") }, T.ensUnbind || "unbind")) : /* @__PURE__ */ React.createElement(React.Fragment, null, /* @__PURE__ */ React.createElement("span", { style: { flex: 1, fontFamily: "var(--ui)", fontSize: 12, color: "var(--faint)" } }, T.ensNotBound || "not bound"), /* @__PURE__ */ React.createElement(Btn, { size: "sm", disabled: busy || !canBind, onClick: onBind }, T.ensBind || "bind")));
     return /* @__PURE__ */ React.createElement(React.Fragment, null, /* @__PURE__ */ React.createElement(Card, { label: T.ensCard || "Name \xB7 beagles.eth" }, st.loading ? /* @__PURE__ */ React.createElement("div", { style: { padding: "14px 16px", fontFamily: "var(--ui)", fontSize: 12.5, color: "var(--faint)" } }, T.dirLoading || "loading\u2026") : /* @__PURE__ */ React.createElement(React.Fragment, null, !hostEnsWrite ? /* @__PURE__ */ React.createElement("div", { className: "dk-row dk-wrap", style: row }, /* @__PURE__ */ React.createElement("span", { className: "dk-lbl", style: { width: 130, flexShrink: 0, fontFamily: "var(--mono)", fontSize: 11.5, fontWeight: 600, color: "var(--faint)", textTransform: "uppercase", letterSpacing: 0.5 } }, T.ensName || "name"), st.registered && rec && rec.name ? /* @__PURE__ */ React.createElement("span", { style: { flex: 1, minWidth: 0, fontFamily: "var(--mono)", fontSize: 13, color: "var(--text)", overflow: "hidden", textOverflow: "ellipsis", whiteSpace: "nowrap" } }, rec.name) : /* @__PURE__ */ React.createElement("span", { style: { flex: 1, minWidth: 0, fontFamily: "var(--ui)", fontSize: 12, lineHeight: 1.5, color: "var(--faint)" } }, T.ensWebOnly || "Registering a beagles.eth name needs the Beagle phone or desktop app. Your avatar can be set above without one.")) : /* @__PURE__ */ React.createElement("div", { className: "dk-row dk-wrap", style: row }, /* @__PURE__ */ React.createElement("span", { className: "dk-lbl", style: { width: 130, flexShrink: 0, fontFamily: "var(--mono)", fontSize: 11.5, fontWeight: 600, color: "var(--faint)", textTransform: "uppercase", letterSpacing: 0.5 } }, T.ensName || "name"), /* @__PURE__ */ React.createElement(
       "input",
       {
@@ -4034,7 +4123,7 @@ ${peer.address}`
         },
         style: { ...field, minWidth: 110 }
       }
-    ), /* @__PURE__ */ React.createElement("span", { style: { fontFamily: "var(--mono)", fontSize: 12.5, color: "var(--dim)", flexShrink: 0 } }, ".beagles.eth"), /* @__PURE__ */ React.createElement(Btn, { tone: "accent", size: "sm", disabled: busy || !label.trim(), onClick: register }, busy ? "\u2026" : st.registered && st.mineOwned ? T.ensUpdate || "update" : T.ensRegister || "register")), st.registered && !st.mineOwned && /* @__PURE__ */ React.createElement("div", { style: { padding: "10px 16px", borderBottom: "1px solid var(--line)", fontFamily: "var(--ui)", fontSize: 11.5, color: "var(--faint)" } }, (T.ensWalletOwned || "registered via your mobile wallet as") + " ", /* @__PURE__ */ React.createElement("span", { style: { fontFamily: "var(--mono)" } }, rec && rec.name)), st.registered && /* @__PURE__ */ React.createElement("div", { className: "dk-row dk-wrap", style: row }, /* @__PURE__ */ React.createElement("span", { className: "dk-lbl", style: { width: 130, flexShrink: 0, fontFamily: "var(--mono)", fontSize: 11.5, fontWeight: 600, color: "var(--faint)", textTransform: "uppercase", letterSpacing: 0.5 } }, T.ensAvatar || "avatar"), upAvatar ? /* @__PURE__ */ React.createElement(React.Fragment, null, /* @__PURE__ */ React.createElement("img", { src: upAvatar, alt: "", width: 34, height: 34, style: { width: 34, height: 34, borderRadius: 9, objectFit: "cover", flexShrink: 0, background: "var(--panel-2)" } }), /* @__PURE__ */ React.createElement("span", { style: { flex: 1, minWidth: 0, fontFamily: "var(--ui)", fontSize: 12.5, color: "var(--text)" } }, T.ensCustom || "custom image"), /* @__PURE__ */ React.createElement(Btn, { size: "sm", tone: "danger", disabled: busy || !canWrite, onClick: () => post("/api/ens-avatar", { nftid: null }) }, T.ensClear || "clear")) : punkId != null ? /* @__PURE__ */ React.createElement(React.Fragment, null, /* @__PURE__ */ React.createElement(DkPunkAvatar, { id: punkId, size: 34, radius: 9, fallbackSeed: me.userId }), /* @__PURE__ */ React.createElement("span", { style: { flex: 1, minWidth: 0, fontFamily: "var(--mono)", fontSize: 12.5, color: "var(--text)" } }, `CryptoPunk #${punkId}`), /* @__PURE__ */ React.createElement(Btn, { size: "sm", tone: "danger", disabled: busy || !canWrite, onClick: () => post("/api/ens-avatar", { nftid: null }) }, T.ensClear || "clear")) : /* @__PURE__ */ React.createElement("span", { style: { flex: 1, fontFamily: "var(--ui)", fontSize: 12, color: "var(--faint)" } }, T.ensNotSet || "not set"), /* @__PURE__ */ React.createElement(Btn, { size: "sm", disabled: busy || !canWrite, onClick: () => fileRef.current && fileRef.current.click() }, T.ensUpload || "upload"), /* @__PURE__ */ React.createElement(Btn, { size: "sm", disabled: busy || !canWrite, onClick: () => setPicking(true) }, T.ensChoose || "choose"), /* @__PURE__ */ React.createElement("input", { ref: fileRef, type: "file", accept: "image/*", onChange: onUploadFile, style: { display: "none" } })), walletRow(T.ensEth || "ethereum", "eth", boundEth, bindEth, false), walletRow(T.ensSol || "solana", "sol", boundSol, bindSol, !msg), msg && /* @__PURE__ */ React.createElement("div", { style: { padding: "10px 16px", fontFamily: "var(--ui)", fontSize: 12, color: msg.tone === "ok" ? "var(--online)" : "var(--danger)" } }, msg.text)), picking && /* @__PURE__ */ React.createElement(DkPunkPicker, { T, onPick: pickPunk, onClose: () => setPicking(false) })), !st.loading && st.registered && /* @__PURE__ */ React.createElement(Card, { label: T.linksCard || "Links" }, SOCIALS.map((s, i) => socialRow(s, i === SOCIALS.length - 1))));
+    ), /* @__PURE__ */ React.createElement("span", { style: { fontFamily: "var(--mono)", fontSize: 12.5, color: "var(--dim)", flexShrink: 0 } }, ".beagles.eth"), /* @__PURE__ */ React.createElement(Btn, { tone: "accent", size: "sm", disabled: busy || !label.trim(), onClick: register }, busy ? "\u2026" : st.registered && st.mineOwned ? T.ensUpdate || "update" : T.ensRegister || "register")), st.registered && !st.mineOwned && /* @__PURE__ */ React.createElement("div", { style: { padding: "10px 16px", borderBottom: "1px solid var(--line)", fontFamily: "var(--ui)", fontSize: 11.5, color: "var(--faint)" } }, (T.ensWalletOwned || "registered via your mobile wallet as") + " ", /* @__PURE__ */ React.createElement("span", { style: { fontFamily: "var(--mono)" } }, rec && rec.name)), st.registered && /* @__PURE__ */ React.createElement("div", { className: "dk-row dk-wrap", style: row }, /* @__PURE__ */ React.createElement("span", { className: "dk-lbl", style: { width: 130, flexShrink: 0, fontFamily: "var(--mono)", fontSize: 11.5, fontWeight: 600, color: "var(--faint)", textTransform: "uppercase", letterSpacing: 0.5 } }, T.ensAvatar || "avatar"), upAvatar ? /* @__PURE__ */ React.createElement(React.Fragment, null, /* @__PURE__ */ React.createElement("img", { src: upAvatar, alt: "", width: 34, height: 34, style: { width: 34, height: 34, borderRadius: 9, objectFit: "cover", flexShrink: 0, background: "var(--panel-2)" } }), /* @__PURE__ */ React.createElement("span", { style: { flex: 1, minWidth: 0, fontFamily: "var(--ui)", fontSize: 12.5, color: "var(--text)" } }, T.ensCustom || "custom image"), /* @__PURE__ */ React.createElement(Btn, { size: "sm", tone: "danger", disabled: busy || !canWrite, onClick: () => post("/api/ens-avatar", { nftid: null }) }, T.ensClear || "clear")) : punkId != null ? /* @__PURE__ */ React.createElement(React.Fragment, null, /* @__PURE__ */ React.createElement(DkPunkAvatar, { id: punkId, size: 34, radius: 9, fallbackSeed: me.userId }), /* @__PURE__ */ React.createElement("span", { style: { flex: 1, minWidth: 0, fontFamily: "var(--mono)", fontSize: 12.5, color: "var(--text)" } }, `CryptoPunk #${punkId}`), /* @__PURE__ */ React.createElement(Btn, { size: "sm", tone: "danger", disabled: busy || !canWrite, onClick: () => post("/api/ens-avatar", { nftid: null }) }, T.ensClear || "clear")) : /* @__PURE__ */ React.createElement("span", { style: { flex: 1, fontFamily: "var(--ui)", fontSize: 12, color: "var(--faint)" } }, T.ensNotSet || "not set"), /* @__PURE__ */ React.createElement(Btn, { size: "sm", disabled: busy || !canWrite, onClick: () => fileRef.current && fileRef.current.click() }, T.ensUpload || "upload"), /* @__PURE__ */ React.createElement(Btn, { size: "sm", disabled: busy || !canWrite, onClick: () => setPicking(true) }, T.ensChoose || "choose"), /* @__PURE__ */ React.createElement("input", { ref: fileRef, type: "file", accept: "image/*", onChange: onUploadFile, style: { display: "none" } })), walletRow(T.ensEth || "ethereum", "eth", boundEth, bindEth, false), walletRow(T.ensSol || "solana", "sol", boundSol, bindSol, !msg && !st.writeBlocked), st.writeBlocked && hostWalletBind && /* @__PURE__ */ React.createElement("div", { style: { padding: "10px 16px", borderBottom: msg ? "1px solid var(--line)" : "none", fontFamily: "var(--ui)", fontSize: 12, lineHeight: 1.5, color: "var(--faint)" } }, st.writeBlocked), msg && /* @__PURE__ */ React.createElement("div", { style: { padding: "10px 16px", fontFamily: "var(--ui)", fontSize: 12, color: msg.tone === "ok" ? "var(--online)" : "var(--danger)" } }, msg.text)), picking && /* @__PURE__ */ React.createElement(DkPunkPicker, { T, onPick: pickPunk, onClose: () => setPicking(false) })), !st.loading && st.registered && /* @__PURE__ */ React.createElement(Card, { label: T.linksCard || "Links" }, SOCIALS.map((s, i) => socialRow(s, i === SOCIALS.length - 1))));
   }
   function DkUpdateCheck({ T }) {
     const [st, setSt] = React.useState("idle");
@@ -4387,6 +4476,8 @@ ${peer.address}`
   }
   function DkAvatar({ peer, size = 30, radius = 7, dot = true }) {
     const d = Math.max(8, size * 0.3);
+    if (peer && peer.app)
+      dot = false;
     return /* @__PURE__ */ React.createElement("div", { style: { position: "relative", width: size, height: size, flexShrink: 0 } }, peer.agent ? /* @__PURE__ */ React.createElement(DkBot, { seed: peer.id, size, radius }) : peer.avatarUrl ? /* @__PURE__ */ React.createElement(DkImgAvatar, { url: peer.avatarUrl, seed: peer.userId || peer.id, size, radius }) : peer.punkId != null ? /* @__PURE__ */ React.createElement(DkPunkAvatar, { id: peer.punkId, size, radius, fallbackSeed: peer.userId || peer.id }) : /* @__PURE__ */ React.createElement(DkIdenticon, { seed: peer.userId || peer.id, size, radius }), dot && /* @__PURE__ */ React.createElement("span", { style: {
       position: "absolute",
       right: -2,
@@ -6132,6 +6223,8 @@ ${peer.address}`
         return;
       const byId = /* @__PURE__ */ new Map();
       for (const p of peers || []) {
+        if (p && p.app)
+          continue;
         const dir = p.lastDir || (String(p.lastMsg || "").startsWith("you: ") ? "out" : "in");
         const quiet = typeof isProtocol === "function" && lastIsProtocol(p, isProtocol);
         byId.set(p.id, { ts: p.lastTs || 0, dir, quiet });
@@ -6408,6 +6501,10 @@ ${peer.address}`
       ensUnbind: "unbind",
       ensNotBound: "not bound",
       ensWebOnly: "Registering a beagles.eth name needs the Beagle phone or desktop app. Your avatar can be set above without one.",
+      ensProven: "signed by this wallet",
+      ensUnproven: "no wallet signature yet",
+      ensProve: "sign",
+      ensSigning: "approve the signature in your wallet\u2026",
       ensAvatar: "avatar",
       ensChoose: "choose",
       ensClear: "clear",
@@ -6603,6 +6700,10 @@ ${peer.address}`
       ensUnbind: "\u89E3\u7ED1",
       ensNotBound: "\u672A\u7ED1\u5B9A",
       ensWebOnly: "\u6CE8\u518C beagles.eth \u540D\u5B57\u9700\u8981 Beagle \u624B\u673A\u6216\u684C\u9762\u5E94\u7528\u3002\u5934\u50CF\u4E0D\u9700\u8981\u540D\u5B57\uFF0C\u53EF\u5728\u4E0A\u65B9\u76F4\u63A5\u8BBE\u7F6E\u3002",
+      ensProven: "\u5DF2\u7531\u8BE5\u94B1\u5305\u7B7E\u540D",
+      ensUnproven: "\u5C1A\u65E0\u94B1\u5305\u7B7E\u540D",
+      ensProve: "\u7B7E\u540D",
+      ensSigning: "\u8BF7\u5728\u94B1\u5305\u4E2D\u786E\u8BA4\u7B7E\u540D\u2026",
       ensAvatar: "\u5934\u50CF",
       ensChoose: "\u9009\u62E9",
       ensClear: "\u6E05\u9664",
@@ -6937,10 +7038,10 @@ ${peer.address}`
       window.location.reload();
     }, [me && me.beagleVer]);
     const [assistantTs, setAssistantTs] = React.useState(loadAssistantTs);
-    const peers = React.useMemo(() => (data.peers || []).concat([Object.assign({}, ASSISTANT_PEER, {
+    const peers = React.useMemo(() => (data.peers || []).concat(hostAssistant ? [Object.assign({}, ASSISTANT_PEER, {
       lastTs: assistantTs,
       lastTime: assistantTs ? dkClock(assistantTs) : ""
-    })]), [data.peers, assistantTs]);
+    })] : []), [data.peers, assistantTs]);
     const [pendingAddr, setPendingAddr] = React.useState(() => dkParseDeepLinkAddress());
     React.useEffect(() => {
       const onHash = () => {

package/dist/discover-cache.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Cached fetches for the discovery directories (the leaderboard and the
+ * beagles.eth /names listing).
+ *
+ * This used to cache successes only. When the gateway was down every UI poll —
+ * one every 2.5 s, per open tab, per machine — started a fresh request, so the
+ * upstream got hammered exactly when it was least able to answer. On
+ * 2026-09-28 the beagle servers on one home network were about 82% of the
+ * gateway's traffic and the day's total reached 139k requests against a 100k
+ * free limit. A failing upstream must cost LESS traffic than a working one,
+ * not more.
+ *
+ * Three rules, and they are the whole module:
+ *   • a success is cached for `ttlMs` (5 minutes),
+ *   • a failure is remembered for `failTtlMs` (60 s) and nothing is refetched
+ *     inside that window — a stale body is served if we have one, because a
+ *     five-minute-old directory listing is worth more than an error,
+ *   • one in-flight request per URL, shared by every caller, so the poll that
+ *     arrives while a fetch is running joins it instead of starting another.
+ */
+export interface DiscoverFetchOptions {
+    /** How long a good answer stays good. */
+    ttlMs?: number;
+    /** How long a failure suppresses refetching. */
+    failTtlMs?: number;
+    /** Abort a request that takes longer than this. */
+    timeoutMs?: number;
+    /** Injected for tests. */
+    fetchImpl?: typeof fetch;
+    now?: () => number;
+}
+export declare const DISCOVER_TTL_MS: number;
+export declare const DISCOVER_FAIL_TTL_MS = 60000;
+export interface DiscoverFetch {
+    (url: string): Promise<unknown>;
+    /** Forget everything about this URL: the next call refetches. Used when we
+     *  KNOW the upstream changed (we just wrote a record), so the Names tab
+     *  reflects it now instead of in five minutes. A request already in flight
+     *  when this is called carries pre-change data, so its result is discarded
+     *  rather than cached. */
+    invalidate(url: string): void;
+}
+export declare function createDiscoverFetch(opts?: DiscoverFetchOptions): DiscoverFetch;

package/dist/discover-cache.js

@@ -0,0 +1,90 @@
+/**
+ * Cached fetches for the discovery directories (the leaderboard and the
+ * beagles.eth /names listing).
+ *
+ * This used to cache successes only. When the gateway was down every UI poll —
+ * one every 2.5 s, per open tab, per machine — started a fresh request, so the
+ * upstream got hammered exactly when it was least able to answer. On
+ * 2026-09-28 the beagle servers on one home network were about 82% of the
+ * gateway's traffic and the day's total reached 139k requests against a 100k
+ * free limit. A failing upstream must cost LESS traffic than a working one,
+ * not more.
+ *
+ * Three rules, and they are the whole module:
+ *   • a success is cached for `ttlMs` (5 minutes),
+ *   • a failure is remembered for `failTtlMs` (60 s) and nothing is refetched
+ *     inside that window — a stale body is served if we have one, because a
+ *     five-minute-old directory listing is worth more than an error,
+ *   • one in-flight request per URL, shared by every caller, so the poll that
+ *     arrives while a fetch is running joins it instead of starting another.
+ */
+export const DISCOVER_TTL_MS = 5 * 60_000;
+export const DISCOVER_FAIL_TTL_MS = 60_000;
+export function createDiscoverFetch(opts = {}) {
+    const ttlMs = opts.ttlMs ?? DISCOVER_TTL_MS;
+    const failTtlMs = opts.failTtlMs ?? DISCOVER_FAIL_TTL_MS;
+    const timeoutMs = opts.timeoutMs ?? 10_000;
+    const doFetch = opts.fetchImpl ?? fetch;
+    const now = opts.now ?? Date.now;
+    const cache = new Map();
+    const inFlight = new Map();
+    const generation = new Map();
+    const fetchDiscoverJson = async function fetchDiscoverJson(url) {
+        const hit = cache.get(url);
+        if (hit && hit.at !== undefined && now() - hit.at < ttlMs)
+            return hit.body;
+        // Someone is already asking. Join them rather than making it worse — under
+        // a slow upstream this is the difference between one request and one per
+        // poll per tab.
+        const running = inFlight.get(url);
+        if (running)
+            return running;
+        if (hit && hit.failedAt !== undefined && now() - hit.failedAt < failTtlMs) {
+            // Inside the failure window nothing is fetched. Stale beats nothing;
+            // with nothing to serve, the caller gets the error it would have got.
+            if (hit.at !== undefined)
+                return hit.body;
+            throw hit.error ?? new Error("upstream unavailable");
+        }
+        const gen = generation.get(url) ?? 0;
+        const attempt = (async () => {
+            const ctl = new AbortController();
+            const timer = setTimeout(() => ctl.abort(), timeoutMs);
+            try {
+                const r = await doFetch(url, { signal: ctl.signal });
+                if (!r.ok)
+                    throw new Error(`upstream ${r.status}`);
+                const body = await r.json();
+                if ((generation.get(url) ?? 0) === gen)
+                    cache.set(url, { body, at: now() });
+                return body;
+            }
+            catch (e) {
+                const err = e instanceof Error ? e : new Error(String(e));
+                const prev = cache.get(url);
+                // Keep whatever good body we had: it is what the next 60 s will serve.
+                if ((generation.get(url) ?? 0) === gen) {
+                    cache.set(url, { body: prev?.body, at: prev?.at, failedAt: now(), error: err });
+                }
+                if (prev && prev.at !== undefined)
+                    return prev.body;
+                throw err;
+            }
+            finally {
+                clearTimeout(timer);
+                // After an invalidate the entry is already gone and a newer request
+                // may own the slot; the generation says which of us this is.
+                if ((generation.get(url) ?? 0) === gen)
+                    inFlight.delete(url);
+            }
+        })();
+        inFlight.set(url, attempt);
+        return attempt;
+    };
+    fetchDiscoverJson.invalidate = (url) => {
+        cache.delete(url);
+        inFlight.delete(url);
+        generation.set(url, (generation.get(url) ?? 0) + 1);
+    };
+    return fetchDiscoverJson;
+}

package/dist/server.js

@@ -25,6 +25,8 @@ import * as peerAddr from "@decentnetwork/peer";
 import { bridgeRoster } from "./bridge-roster.js";
 import { isSupervised } from "./relaunch.js";
 import { historyStats } from "./assistant-stats.js";
+import { createDiscoverFetch } from "./discover-cache.js";
+import { applyWalletBind } from "@decentnetwork/beagle-ui/wallet-proof";
 // Directory holding the built desktop UI bundle (index.html, app.js, vendor/).
 // scripts/build-ui.mjs emits it next to this compiled module at dist/ui/desktop/.
 const DESKTOP_DIR = join(dirname(fileURLToPath(import.meta.url)), "desktop");
@@ -33,28 +35,10 @@ const DESKTOP_DIR = join(dirname(fileURLToPath(import.meta.url)), "desktop");
 // (which probes all exits on each poll) stays responsive over a lossy mesh.
 const EXIT_PROBE_PORT = 8888;
 const EXIT_PROBE_TIMEOUT_MS = 2000;
-/** Server-side fetch for the discovery directories (leaderboard / ENS names),
- *  with a small TTL cache so tab switches don't hammer the upstreams. */
-const DISCOVER_CACHE_TTL_MS = 5 * 60_000;
-const discoverCache = new Map();
-async function fetchDiscoverJson(url) {
-    const hit = discoverCache.get(url);
-    if (hit && Date.now() - hit.at < DISCOVER_CACHE_TTL_MS)
-        return hit.body;
-    const ctl = new AbortController();
-    const timer = setTimeout(() => ctl.abort(), 10_000);
-    try {
-        const r = await fetch(url, { signal: ctl.signal });
-        if (!r.ok)
-            throw new Error(`upstream ${r.status}`);
-        const body = await r.json();
-        discoverCache.set(url, { at: Date.now(), body });
-        return body;
-    }
-    finally {
-        clearTimeout(timer);
-    }
-}
+/** Server-side fetch for the discovery directories (leaderboard / ENS names).
+ *  Successes are cached, FAILURES ARE TOO, and concurrent callers share one
+ *  request — see discover-cache.ts for the outage this comes from. */
+const fetchDiscoverJson = createDiscoverFetch();
 // ── beagles.eth names (ens-gateway worker) ──────────────────────────────────
 // The same registry the mobile apps register into. Web-side registration
 // signs the record with THIS node's Carrier identity (XEdDSA via the backend
@@ -190,7 +174,7 @@ async function ensSignAndSet(call, record) {
         }
         // The record changed — drop the cached /names listing so the Names tab
         // reflects it immediately instead of after the 5-min TTL.
-        discoverCache.delete(`${ENS_GATEWAY}/names`);
+        fetchDiscoverJson.invalidate(`${ENS_GATEWAY}/names`);
         return { ok: true };
     }
     catch (e) {
@@ -1371,13 +1355,11 @@ export function startBeagleServer(opts) {
             }
             if (req.method === "POST" && url === "/api/ens-bind-wallet") {
                 const body = await readBody(req);
-                const coinType = body.chain === "eth" ? "60" : body.chain === "sol" ? "501" : null;
-                const addr = typeof body.address === "string" ? body.address.trim() : "";
-                const remove = addr === "";
-                const okAddr = remove
-                    || (coinType === "60" ? /^0x[0-9a-fA-F]{40}$/.test(addr) : /^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(addr));
-                if (!coinType || !okAddr) {
-                    sendJson(res, 400, { ok: false, error: "invalid chain or address" });
+                // Format check up front, before any identity or gateway round trip;
+                // applyWalletBind repeats it with the record in hand.
+                const pre = applyWalletBind(null, { chain: String(body.chain ?? ""), address: body.address, userid: "" });
+                if (!pre.ok) {
+                    sendJson(res, pre.status, { ok: false, error: pre.error });
                     return;
                 }
                 const diag = await opts.call({ op: "diag" });
@@ -1395,16 +1377,22 @@ export function startBeagleServer(opts) {
                     sendJson(res, 403, { ok: false, error: "this name was registered by your mobile wallet — bind addresses there" });
                     return;
                 }
-                const addresses = { ...(mine.addresses ?? {}) };
-                if (remove)
-                    delete addresses[coinType];
-                else
-                    addresses[coinType] = addr;
+                // The wallet's signed proof (wallet-proof.js) is checked here and
+                // stored as texts["proof.eth"|"proof.sol"] beside the address.
+                const bound = applyWalletBind(mine, {
+                    chain: String(body.chain), address: body.address, userid: identity.userid,
+                    proof: (body.proof ?? null),
+                });
+                if (!bound.ok) {
+                    sendJson(res, bound.status, { ok: false, error: bound.error });
+                    return;
+                }
+                const { addresses, texts } = bound;
                 const r = await ensSignAndSet(opts.call, {
                     name: mine.name,
                     owner: identity.userid,
                     addresses,
-                    texts: mine.texts ?? {},
+                    texts,
                     referee: mine.referee ?? "",
                     nft: mine.nft ?? "",
                     nftid: mine.nftid ?? 0,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decentnetwork/beagle",
-  "version": "0.1.117",
+  "version": "0.1.119",
   "description": "Beagle — P2P chat, file transfer and calls for regular users, on the Decent Network. No admin privilege required.",
   "type": "module",
   "main": "./dist/index.js",
@@ -26,6 +26,7 @@
     "start": "node dist/cli.js"
   },
   "dependencies": {
+    "@decentnetwork/beagle-ui": "^0.2.33",
     "@decentnetwork/chat-components": "^0.1.3",
     "@decentnetwork/lan": "^0.1.283",
     "@decentnetwork/peer": "^0.1.168",
@@ -35,7 +36,6 @@
     "yargs": "^17.7.2"
   },
   "devDependencies": {
-    "@decentnetwork/beagle-ui": "^0.2.31",
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^20.11.0",
     "@types/yargs": "^17.0.32",