@ghostlytools/cli 1.0.0 → 1.0.1

package/dist/assets/{server-5T5l8hfy.js → server-C-8wbsAX.js}

@@ -1,5 +1,4 @@
-import { $n as readBeaconHead, $r as safeBlobType, $t as CapsExchange, Aa as fromBase64Url, Ai as readReply, An as findEndpoint, Ar as HoldRefusedError, At as didDhtFromPublicKey, Bi as GhostlyHttpError, Bn as COMMUNITY_TOPOLOGY, Br as identityRevocationValue, Bt as TEST_USDT_FAUCET_AMOUNT, C as groupWakeFrame, Ca as createIdentity, Ci as queueReaction, Cr as wakeRequest, D as GROUP_READ_NOTE, Di as validReactionNumber, Dn as ENDPOINT, Dr as HOLD_CAPABILITY, Ea as publicKeyFromZ32, Ei as readReaction, Er as EDIT_CAPABILITY, F as mentionsMember, Fa as utf8Encode, Fi as rosterHas, Fn as pairedMessageFrame, Fr as IDENTITY_REVOCATION_LABEL, Ft as EVM_TEST_CHAINS, Gi as decodeControl, Gn as lobbyKeys, Gr as lastSharedWithMe, Gt as formatPaymentAmount, Hi as parseLocalTarget, Hn as beaconRecords, Hr as newIdentityBinding, Ht as WALLET_NETWORKS, I as groupName, Ii as verifyCommitSignature, In as MESH_HUBS, It as ONCHAIN_PROVIDER, Ji as RTC_CONFIG, Jn as mergeLobby, Jr as validExternalKey, Jt as SPARK_NETWORKS, Ki as encodeControl, Kn as lobbyRecords, Kr as PeerProofs, Kt as validatePaymentTarget, Li as edgeParams, Ln as mayBeHub, Lr as IdentityExchange, Lt as PaymentPreflightError, M as GROUP_EDIT_TEXT_BYTES, Ma as toBase64Url, Mi as GROUP_MEMBER_CAP, Mn as parseCashuRequestPayload, Mr as readManifest, N as carryMentions, Na as toZ32, Nn as parseFedimintRequestPayload, Nt as signDidDhtPacket, O as GroupSession, Oa as sanitizeAvatar, Oi as wireReaction, On as cashuRequestPayload, Or as HOLD_LIMITS, P as parseCommunityEdit, Pa as utf8Decode, Pi as MEMBER_KEY, Pn as GhostLink, Pt as ETHEREUM_USDT, Qn as readBeacon, Qt as isBitcoinAddress, Ri as RELAY_POLL_INTERVALS, Rn as meshHubs, Rt as SEPOLIA_TEST_USDT, S as GroupWakeLimiter, Si as nextReactionNumber, Sr as relayRequest, T as parseGroupWakeFrame, Ta as identityFromSeedB64, Ti as reactionIsNewer, Tr as vapidKeysMatch, Ui as webLocalFetch, Un as doorHubs, Ur as receivedIdentityStatus, Ut as assertTokenUnits, Vi as formatLocalTarget, Vn as beaconKeys, Vr as identityStatement, Vt as USDT_PUBLIC_RPC, Wi as LIMITS, Wn as freshHubs, Wr as revokesIdentity, Wt as assertWholeSats, Xn as pickHubs, Xr as automaticTransport, Xt as sparkAddressKind, Yn as newerHead, Yr as TRANSPORTS, Yt as SPARK_PROVIDER, Zn as rankHubs, Zr as parseImageMeta, Zt as sparkInvoiceDetails, _ as knockIdentity, _a as PacketTooLargeError, _i as readForwarded, _r as readPin, a as sealGroupTyping, aa as createChatInvite, ai as fileMessageText, ar as transferStalled, b as readKnocks, bi as REACTION_LIMITS, br as WakeLimiter, c as GROUP_READ_NOTE_COMMUNITY, ci as parseVideoMeta, cr as TypingSender, d as decodeCommunityLink, da as RelayTransport, di as EDIT_BUFFER_MS, ea as emptyLinkRecords, en as DHT_TEXT_CAPABILITY, er as readLobby, f as encodeCommunityLink, fa as currentRelays, fi as EDIT_RATE_WINDOW_MS, fr as PIN_LIMITS, g as entryParams, ga as withRequestOptions, gi as forwardedAgain, gr as pinNumberHolds, h as encodeGroupEntryLink, ha as isDiscoveryBudgetError, hi as parseLinkPreview, hr as pinIsNewer, i as openGroupTyping, ia as OwnInviteError, in as isPubkyKey, ir as transferEnded, ja as randomBytes, ji as replySnippet, jn as isFederationId, jr as newMailbox, jt as encodeDidDhtPacket, k as groupMessageId, ka as bytesEqual, ki as pairedReplyAuthor, kn as fedimintRequestPayload, kr as HoldKeys, kt as didDhtDocument, l as communityHasFrame, la as inviteOwnership, li as DHT_MESSAGE_TTL, m as decodeGroupEntryLink, ma as budgetRetryMs, mi as dhtEditId, mr as nextPinNumber, n as GroupTypingBoard, na as LEGACY_SERVICES, nn as dialDescriptors, nr as ChatFiles, nt as isAtprotoDid, o as COMMUNITY_LIMITS, oa as decodeInviteCode, oi as parseVoiceMeta, pa as normalizeRelayUrl, pi as RateWindow, pr as mayPin, qn as mergeBeacon, qr as emptyProofLedger, qt as walletNetworkOf, r as groupTypingEpoch, ra as serviceIdFromName, rr as FILE_LIMITS, rt as normalizeAtprotoHandle, s as CommunitySession, sa as encodeInviteCode, ta as HTTP_SERVICE_PROTO, tn as capsDescriptors, tr as shouldBeHub, u as communityMessageId, ua as DEFAULT_RELAYS, ui as peekDhtMailbox, ur as typingActivity, v as knockRecords, vi as COMMUNITY_REACTION_FRAME, vr as receivedTimestamp, w as groupWakes, wa as identityFromSeed, wi as reactionEmoji, wr as checkPushEndpoint, xi as ReactionWindow, xr as newWakeToken, y as mergeKnocks, yi as GROUP_REACTION_FRAME, yr as WAKE_CALL_INTERVAL_MS, zn as pickMeshHubs, zr as emptyIdentityLedger, zt as SEPOLIA_TEST_USDT_FAUCET } from "./src-DptDr2et.js";
-import { $ as chosenResolver, A as isTestMint, At as __exportAll, B as reserveAdapterIds, C as cashuMint, Ct as deleteDatabase, D as DEFAULT_MINTS, Dt as transact, E as BITCOIN_INVOICE_ON_TESTNET, Et as store, F as MAX_BACKUP_BYTES, G as isNothingSpentError, H as PROVIDER_PLATFORMS, I as identityProviders, J as assertPublicServer, K as networkMode, L as onAdaptersChanged, M as mintNetwork, N as paysItsOwnInvoices, O as TEST_MINT, Ot as wrap, P as BACKUP_MEDIA_TYPE, Q as verifyIdentity, R as registeredLightningProviders, S as CASHU_MINT_SOURCE, St as databaseName, T as WALLET_TYPES, Tt as openDb, U as SourceConfigError, V as NothingSpentError, W as SourceUnreachableError, X as setOwnDidSource, Y as resolveAtprotoDid, Z as boundedIdentityFetch, _ as unsealSeed, a as createFailure, at as paymentAlias, b as WrongNetworkError, c as paymentNetwork, ct as readStored, d as CASHU_CARD, dt as streamStored, et as groupReply, f as LightningCards, g as sealSeed, gt as fileBytesOf, h as newDeviceKey, ht as fileBytes, i as assertConfirmedReal, it as replyTo, j as isWorthlessMint, k as fakesLightning, kt as decodeBolt11, l as paymentNetworksOf, lt as removeStored, m as intentRepository, n as loadFedimintSdk, nt as receivedPairedReply, o as createTiming, ot as paymentWireId, p as ProviderSources, pt as blobDigest, q as redact, r as WALLET_NAMES, rt as replyRef, s as crossNetwork, st as FileAppender, t as fedimintDatabase, tt as pairedWireReply, u as walletInstances, ut as storedSize, v as ModeChanged, vt as removeFileBytes, wt as fileStore, x as networkLabel, xt as STORES, y as ModeGate, z as registeredOnchainProviders } from "../ghostly.mjs";
+import { $ as boundedIdentityFetch, $n as LIVENESS_PING_MS, $r as IDENTITY_REVOCATION_LABEL, $t as GroupWakeLimiter, A as TEST_MINT, Ai as ReactionWindow, An as assertTokenUnits, Ar as nextPinNumber, At as transact, B as registeredLightningProviders, Ba as toZ32, Bi as replySnippet, Bn as isPubkyKey, Br as vapidKeysMatch, Bt as communityHasFrame, C as networkLabel, Ca as normalizeRelayUrl, Ci as dhtEditId, Cn as ONCHAIN_PROVIDER, Cr as transferEnded, Ct as STORES, D as WALLET_TYPES, Da as PacketTooLargeError, Di as COMMUNITY_REACTION_FRAME, Dn as TEST_USDT_FAUCET_AMOUNT, Dt as fileStore, Ea as withRequestOptions, Ei as readForwarded, En as SEPOLIA_TEST_USDT_FAUCET, Er as typingActivity, Et as deleteDatabase, F as paysItsOwnInvoices, Fa as sanitizeAvatar, Fi as readReaction, Fn as SPARK_NETWORKS, Fr as WakeLimiter, Ft as openGroupTyping, G as SourceConfigError, Gi as statusCardText, Gn as cashuRequestPayload, Gr as HoldKeys, Gt as decodeGroupEntryLink, H as reserveAdapterIds, Ha as utf8Encode, Hi as STATUS_CARD_LIMITS, Hn as engineText, Hr as EDIT_CAPABILITY, Ht as decodeCommunityLink, I as BACKUP_MEDIA_TYPE, Ia as bytesEqual, Ii as validReactionNumber, In as SPARK_PROVIDER, Ir as newWakeToken, It as sealGroupTyping, J as networkMode, Jn as isFederationId, Jr as readManifest, Jt as knockIdentity, K as SourceUnreachableError, Ki as receivedTimestamp, Kn as fedimintRequestPayload, Kr as HoldRefusedError, Kt as encodeGroupEntryLink, L as MAX_BACKUP_BYTES, La as fromBase64Url, Li as wireReaction, Ln as sparkAddressKind, Lr as relayRequest, Lt as COMMUNITY_LIMITS, M as isTestMint, Ma as identityFromSeed, Mi as queueReaction, Mn as formatPaymentAmount, Mr as pinNumberHolds, N as isWorthlessMint, Na as identityFromSeedB64, Ni as reactionEmoji, Nn as validatePaymentTarget, Nr as readPin, Nt as GroupTypingBoard, O as BITCOIN_INVOICE_ON_TESTNET, Oi as GROUP_REACTION_FRAME, On as USDT_PUBLIC_RPC, Or as PIN_LIMITS, Ot as openDb, P as mintNetwork, Pa as publicKeyFromZ32, Pi as reactionIsNewer, Pn as walletNetworkOf, Pr as WAKE_CALL_INTERVAL_MS, Pt as groupTypingEpoch, Q as setOwnDidSource, Qi as edgeParams, Qn as INVITE_TAKEN, Qr as dialDescriptors, R as identityProviders, Ra as randomBytes, Ri as pairedReplyAuthor, Rn as sparkInvoiceDetails, Rr as wakeRequest, Rt as CommunitySession, S as WrongNetworkError, Sa as currentRelays, Si as RateWindow, Sn as EVM_TEST_CHAINS, Sr as FILE_LIMITS, T as cashuMint, Ta as isDiscoveryBudgetError, Ti as forwardedAgain, Tn as SEPOLIA_TEST_USDT, Tr as TypingSender, Tt as databaseName, U as NothingSpentError, Ua as __exportAll, Ui as checkStatusCard, Un as decodeBolt11, Ur as HOLD_CAPABILITY, Ut as encodeCommunityLink, V as registeredOnchainProviders, Va as utf8Decode, Vi as BUTTON_ID, Vn as engineError, Vt as communityMessageId, W as PROVIDER_PLATFORMS, Wi as sameButtonText, Wn as ENDPOINT, Wr as HOLD_LIMITS, X as assertPublicServer, Xi as rosterHas, Xn as parseFedimintRequestPayload, Xr as DHT_TEXT_CAPABILITY, Xt as mergeKnocks, Y as redact, Yi as MEMBER_KEY, Yn as parseCashuRequestPayload, Yr as CapsExchange, Yt as knockRecords, Z as resolveAtprotoDid, Zi as verifyCommitSignature, Zn as GhostLink, Zr as capsDescriptors, Zt as readKnocks, _ as newDeviceKey, _a as decodeInviteCode, _i as parseVideoMeta, _n as didDhtFromPublicKey, _r as readBeacon, _t as fileBytes, a as createFailure, aa as webLocalFetch, ai as receivedIdentityStatus, an as GroupSession, ar as COMMUNITY_TOPOLOGY, at as replyRef, b as ModeChanged, ba as DEFAULT_RELAYS, bi as EDIT_BUFFER_MS, bn as signDidDhtPacket, br as shouldBeHub, bt as removeFileBytes, c as paymentNetwork, ca as encodeControl, ci as PeerProofs, cr as doorHubs, ct as paymentWireId, d as networkReason, da as emptyLinkRecords, di as TRANSPORTS, dn as parseCommunityEdit, dr as lobbyRecords, dt as removeStored, ea as RELAY_POLL_INTERVALS, ei as IdentityExchange, en as groupWakeFrame, er as pairedMessageFrame, et as verifyIdentity, f as rpcHost, fa as HTTP_SERVICE_PROTO, fi as automaticTransport, fn as mentionsMember, fr as mergeBeacon, ft as storedSize, g as intentRepository, ga as createChatInvite, gi as parseVoiceMeta, gn as didDhtDocument, gr as rankHubs, h as ProviderSources, ha as OwnInviteError, hi as fileMessageText, hn as normalizeAtprotoHandle, hr as pickHubs, ht as blobDigest, i as assertConfirmedReal, ia as parseLocalTarget, ii as newIdentityBinding, in as GROUP_READ_NOTE, ir as pickMeshHubs, it as receivedPairedReply, j as fakesLightning, ja as createIdentity, ji as nextReactionNumber, jn as assertWholeSats, jr as pinIsNewer, jt as wrap, k as DEFAULT_MINTS, ki as REACTION_LIMITS, kn as WALLET_NETWORKS, kr as mayPin, kt as store, l as paymentNetworksOf, la as RTC_CONFIG, li as emptyProofLedger, ln as GROUP_EDIT_TEXT_BYTES, lr as freshHubs, lt as FileAppender, m as LightningCards, ma as serviceIdFromName, mi as safeBlobType, mn as isAtprotoDid, mr as newerHead, n as loadFedimintSdk, na as GhostlyHttpError, ni as identityRevocationValue, nn as parseGroupWakeFrame, nr as mayBeHub, nt as groupReply, o as createTiming, oa as LIMITS, oi as revokesIdentity, on as groupMessageId, or as beaconKeys, ot as replyTo, p as CASHU_CARD, pa as LEGACY_SERVICES, pi as parseImageMeta, pn as groupName, pr as mergeLobby, pt as streamStored, q as isNothingSpentError, qi as GROUP_MEMBER_CAP, qn as findEndpoint, qr as newMailbox, qt as entryParams, r as WALLET_NAMES, ra as formatLocalTarget, ri as identityStatement, rr as meshHubs, rt as pairedWireReply, s as crossNetwork, sa as decodeControl, si as lastSharedWithMe, sr as beaconRecords, st as paymentAlias, t as fedimintDatabase, ta as traceLink, ti as emptyIdentityLedger, tn as groupWakes, tr as MESH_HUBS, tt as chosenResolver, u as walletInstances, ua as parseCallSignal, ui as validExternalKey, un as carryMentions, ur as lobbyKeys, ut as readStored, v as sealSeed, va as encodeInviteCode, vi as DHT_MESSAGE_TTL, vn as encodeDidDhtDeactivated, vr as readBeaconHead, vt as fileBytesOf, w as CASHU_MINT_SOURCE, wa as budgetRetryMs, wi as parseLinkPreview, wn as PaymentPreflightError, wr as transferStalled, wt as clearProfileStores, x as ModeGate, xa as RelayTransport, xi as EDIT_RATE_WINDOW_MS, xn as ETHEREUM_USDT, xr as ChatFiles, y as unsealSeed, ya as inviteOwnership, yi as peekDhtMailbox, yn as encodeDidDhtPacket, yr as readLobby, z as onAdaptersChanged, za as toBase64Url, zi as readReply, zn as isBitcoinAddress, zr as checkPushEndpoint, zt as GROUP_READ_NOTE_COMMUNITY } from "../ghostly.mjs";
 import { base64, base64url, base64urlnopad, bech32, hex } from "@scure/base";
 import { hkdf } from "@noble/hashes/hkdf.js";
 import { sha256 } from "@noble/hashes/sha2.js";
@@ -11,7 +10,7 @@ import { finalizeEvent, getPublicKey, verifyEvent } from "nostr-tools/pure";
 import { generateMnemonic, mnemonicToSeedSync, validateMnemonic } from "@scure/bip39";
 import WalletManagerEvm from "@tetherto/wdk-wallet-evm";
 import { Interface, Transaction, getAddress, keccak256 } from "ethers";
-import { ArkAddress, EsploraProvider, IndexedDBContractRepository, IndexedDBWalletRepository, MnemonicIdentity, RestArkProvider, RestIndexerProvider, Transaction as Transaction$1, Wallet, assertAllowedSighashTypes, assertSubmittedArkTxid, matchServerCheckpoints, verifyTapscriptSignatures } from "@arkade-os/sdk";
+import { ArkAddress, EsploraProvider, IndexedDBContractRepository, IndexedDBWalletRepository, MnemonicIdentity, RestArkProvider, RestIndexerProvider, Transaction as Transaction$1, Wallet, assertAllowedSighashTypes, assertSubmittedArkTxid, canRecoverOnchain, isRecoverable, matchServerCheckpoints, verifyTapscriptSignatures } from "@arkade-os/sdk";
 import { tapLeafHash } from "@scure/btc-signer/payment.js";
 import { Transaction as Transaction$2 } from "@scure/btc-signer";
 import { bytesToHex, concatBytes, hexToBytes, utf8ToBytes } from "@noble/hashes/utils.js";
@@ -157,18 +156,24 @@ var UsdtAdapter = class UsdtAdapter {
 		return adapter;
 	}
 	async rpc(method, params = []) {
-		const response = await fetch(this.config.provider, {
-			method: "POST",
-			headers: { "Content-Type": "application/json" },
-			body: JSON.stringify({
-				jsonrpc: "2.0",
-				id: ++this.nextId,
-				method,
-				params
-			}),
-			signal: AbortSignal.timeout(15e3)
-		});
-		if (!response.ok) throw new Error("USDT RPC unavailable");
+		let response;
+		try {
+			response = await fetch(this.config.provider, {
+				method: "POST",
+				headers: { "Content-Type": "application/json" },
+				body: JSON.stringify({
+					jsonrpc: "2.0",
+					id: ++this.nextId,
+					method,
+					params
+				}),
+				signal: AbortSignal.timeout(15e3)
+			});
+		} catch (error) {
+			const reason = networkReason(error, rpcHost(this.config.provider));
+			throw reason ? Object.assign(new Error(reason), { cause: error }) : error;
+		}
+		if (!response.ok) throw engineError("usdtRpcUnavailable");
 		const result = await response.json();
 		if (result.error || !Object.prototype.hasOwnProperty.call(result, "result")) throw new Error("USDT RPC rejected the operation");
 		return result.result;
@@ -206,7 +211,7 @@ var UsdtAdapter = class UsdtAdapter {
 			if (!block.baseFeePerGas) throw new Error("This wallet requires an EIP-1559 chain");
 			const priority = BigInt(await this.rpc("eth_maxPriorityFeePerGas"));
 			const maxFeePerGas = BigInt(block.baseFeePerGas) * 2n + priority, gasLimit = (estimate * 120n + 99n) / 100n;
-			if (BigInt((await this.balances()).gasBalance) < gasLimit * maxFeePerGas) throw new Error("This needs a little Sepolia ETH for gas first");
+			if (BigInt((await this.balances()).gasBalance) < gasLimit * maxFeePerGas) throw engineError("usdtNeedsSepoliaGas");
 			const raw = await account.signTransaction({
 				type: 2,
 				to: SEPOLIA_TEST_USDT_FAUCET,
@@ -269,7 +274,7 @@ var UsdtAdapter = class UsdtAdapter {
 			const from = await this.address(), to = this.config.token;
 			if (same(target.address, from) || same(target.address, to)) throw new Error("Choose a different recipient address");
 			const { balance, gasBalance } = await this.balances();
-			if (BigInt(balance) < BigInt(amount)) throw new Error("Insufficient token balance");
+			if (BigInt(balance) < BigInt(amount)) throw engineError("usdtNotEnoughTokens");
 			const data = erc20.encodeFunctionData("transfer", [getAddress(target.address), BigInt(amount)]);
 			const nonce = Number(BigInt(await this.rpc("eth_getTransactionCount", [from, "pending"])));
 			if (!Number.isSafeInteger(nonce)) throw new Error("Invalid account nonce");
@@ -285,8 +290,8 @@ var UsdtAdapter = class UsdtAdapter {
 			const maxFee = BigInt(block.baseFeePerGas) * 2n + priority;
 			const gasLimit = (estimate * 120n + 99n) / 100n;
 			const maximum = gasLimit * maxFee;
-			if (maximum > BigInt(feeCap) || maximum > BigInt(Number.MAX_SAFE_INTEGER)) throw new Error("Estimated maximum gas exceeds your limit");
-			if (BigInt(gasBalance) < maximum) throw new Error("Insufficient ETH for gas");
+			if (maximum > BigInt(feeCap) || maximum > BigInt(Number.MAX_SAFE_INTEGER)) throw engineError("usdtGasAboveLimit");
+			if (BigInt(gasBalance) < maximum) throw engineError("usdtNotEnoughGas");
 			const prepared = {
 				from,
 				to,
@@ -575,20 +580,21 @@ var UsdtWallet = class {
 			throw error;
 		}
 		this.saved = saved;
+		this.view = {
+			configured: true,
+			locked: true,
+			automatic: !!deviceKey,
+			...config,
+			balance: "0",
+			gasBalance: "0"
+		};
 		if (epoch !== this.epoch) {
 			await adapter.dispose();
-			this.view = {
-				configured: true,
-				locked: true,
-				automatic: !!deviceKey,
-				...config,
-				balance: "0",
-				gasBalance: "0"
-			};
 			this.changed();
 			return;
 		}
 		this.adapter = adapter;
+		this.changed();
 		await this.refresh();
 	}
 	async unlock(password) {
@@ -904,13 +910,50 @@ var ArkadeAdapter = class ArkadeAdapter {
 	async balance() {
 		return (await this.wallet.getBalance()).available;
 	}
-	/** Sats whose batch expired before they were renewed: still this wallet's, but only after a recovery. */
-	async recoverable() {
-		return Number((await this.wallet.getBalance()).recoverable ?? 0);
+	/**
+	* Sats whose batch expired before they were renewed, in three kinds, as a person can act on them:
+	* - `sweeping`: past their expiry, but the server has not swept their batch yet (with any swept ones: none can be
+	*   recovered meanwhile). The SDK (0.4.76) counts them as
+	*   recoverable already, but it settles an unswept coin without the forfeit the server still asks for (arkd wants
+	*   one until the sweep): the batch fails ("missing forfeit transactions") and the server bans the coin for a while.
+	*   The sweep waits for the chain's time to pass the expiry: an hour or more on a real network, the expiry's blocks
+	*   on regtest.
+	* - `recoverable`: swept, and a recovery takes them now.
+	* - `small`: swept, but together under the server's dust limit: a recovery makes one new coin and the server makes
+	*   none that small, so `recoverVtxos` answers "No recoverable VTXOs found". They wait for more coins to expire.
+	*/
+	async expired() {
+		const now = { timestamp: /* @__PURE__ */ new Date() };
+		let swept = 0, sweeping = 0;
+		for (const vtxo of await this.wallet.getVtxos({
+			withRecoverable: true,
+			withUnrolled: false
+		})) if (isRecoverable(vtxo)) swept += vtxo.value;
+		else if (!vtxo.isSwept && canRecoverOnchain(vtxo, now)) sweeping += vtxo.value;
+		const takes = !sweeping && swept > 0 && (await (await this.wallet.getVtxoManager()).getRecoverableBalance()).recoverable >= this.wallet.dustAmount;
+		return sweeping ? {
+			recoverable: 0,
+			sweeping: sweeping + swept,
+			small: 0
+		} : {
+			recoverable: takes ? swept : 0,
+			sweeping: 0,
+			small: takes ? 0 : swept
+		};
 	}
-	/** Moves expired (swept) outputs back into the balance, through the server's next batch. */
+	/**
+	* Moves swept outputs back into the balance, through the server's next batch. Refused while any expired coin is
+	* not swept yet (`recoverVtxos` would name it too, and that batch fails for all of them), and when what is swept
+	* is too little for a batch.
+	*/
 	recover() {
-		return this.serial(async () => (await this.wallet.getVtxoManager()).recoverVtxos());
+		return this.serial(async () => {
+			const { recoverable, sweeping, small } = await this.expired();
+			if (sweeping) throw new Error("Expired coins can be recovered once the Ark server has swept their batch. Try again later.");
+			if (small) throw new Error("Too few expired sats to recover on their own. They are recovered with the next coins that expire.");
+			if (!recoverable) throw new Error("Nothing to recover");
+			return (await this.wallet.getVtxoManager()).recoverVtxos();
+		});
 	}
 	/** On-chain deposits land here; the SDK's settlement moves them into Ark once confirmed. */
 	boardingAddress() {
@@ -1510,7 +1553,11 @@ var ArkWallet = class {
 		}
 		const balance = await read("balance", () => adapter.balance(), this.view.balance);
 		const incoming = await read("incoming", () => adapter.incoming(), this.view.incoming);
-		const recoverable = await read("recoverable", () => adapter.recoverable(), this.view.recoverable);
+		const { recoverable, sweeping, small } = await read("recoverable", () => adapter.expired(), {
+			recoverable: this.view.recoverable,
+			sweeping: this.view.sweeping,
+			small: this.view.small
+		});
 		if (this.adapter !== adapter) return;
 		this.view = {
 			configured: true,
@@ -1523,12 +1570,14 @@ var ArkWallet = class {
 			incoming,
 			balance,
 			recoverable,
+			sweeping,
+			small,
 			error: failed.length ? `Could not read the ${failed.join(", ")} from the Ark provider. Last values may be stale.` : void 0
 		};
 		this.changed();
 		if (this.adapter) this.timer = setTimeout(() => void this.refresh(), 1e4);
 	}
-	/** Expired outputs back into the balance; the next refresh shows them once the batch is done. */
+	/** Swept outputs back into the balance (refused while expired ones wait for the sweep); the next refresh shows them. */
 	async recover() {
 		const txid = await this.require().recover();
 		await this.refresh();
@@ -2355,7 +2404,7 @@ var NOTES_REFUND_SECS = 604800;
 var MAX_SATS = 1e7;
 var fedimintMode = (network) => network === "bitcoin" ? "mainnet" : "testnet";
 var key = (mode) => `fedimintWallet-${mode}`;
-var sats$7 = (msats) => Math.floor(msats / 1e3);
+var sats$6 = (msats) => Math.floor(msats / 1e3);
 function assertFedimintAmount(amount) {
 	if (!Number.isSafeInteger(amount) || amount <= 0) throw new Error("Enter an amount in sats");
 	if (amount > MAX_SATS) throw new Error(`Amounts above ${MAX_SATS.toLocaleString()} sats are not supported`);
@@ -2363,7 +2412,7 @@ function assertFedimintAmount(amount) {
 /** An invite code as the client takes it: bech32m with the prefix `fed1` (so `fed11…`), one line, bounded. */
 function normalizeInvite(text) {
 	const invite = text.trim();
-	if (!/^fed11[02-9ac-hj-np-z]{20,2000}$/i.test(invite)) throw new Error("That is not a Fedimint invite code: it starts with fed1");
+	if (!/^fed11[02-9ac-hj-np-z]{20,2000}$/i.test(invite)) throw engineError("fedimintNotInvite");
 	return invite.toLowerCase();
 }
 /** A client operation as a line of history. */
@@ -2378,21 +2427,21 @@ function historyEntry(federation, op) {
 	};
 	const invoiceSats = () => {
 		const decoded = op.invoice ? decodeBolt11(op.invoice) : null;
-		return decoded?.amountMsat ? sats$7(Number(decoded.amountMsat)) : void 0;
+		return decoded?.amountMsat ? sats$6(Number(decoded.amountMsat)) : void 0;
 	};
 	if (op.kind === "mint" && op.variant === "spend_o_o_b") {
 		const state = text === "UserCanceledSuccess" || text === "Refunded" ? "taken-back" : text === "UserCanceledFailure" || text === "Success" ? "done" : "pending";
 		return {
 			...base,
 			kind: "notes-out",
-			amount: op.amountMsats !== void 0 ? sats$7(op.amountMsats) : void 0,
+			amount: op.amountMsats !== void 0 ? sats$6(op.amountMsats) : void 0,
 			state
 		};
 	}
 	if (op.kind === "mint" && op.variant === "reissuance") return {
 		...base,
 		kind: "notes-in",
-		amount: op.amountMsats !== void 0 ? sats$7(op.amountMsats) : void 0,
+		amount: op.amountMsats !== void 0 ? sats$6(op.amountMsats) : void 0,
 		state: text === "Done" ? "done" : text === "Failed" ? "failed" : "pending"
 	};
 	if (op.kind === "ln" && op.variant === "receive") return {
@@ -2414,7 +2463,7 @@ function historyEntry(federation, op) {
 	if (op.kind === "wallet") return {
 		...base,
 		kind: "onchain",
-		amount: op.amountMsats !== void 0 ? sats$7(op.amountMsats) : void 0,
+		amount: op.amountMsats !== void 0 ? sats$6(op.amountMsats) : void 0,
 		state: "pending"
 	};
 }
@@ -2547,7 +2596,7 @@ var FedimintWallet = class {
 	render() {
 		const federations = (this.saved?.federations ?? []).map(({ database: _database, ...f }) => ({
 			...f,
-			balance: sats$7(this.balances.get(f.id) ?? 0),
+			balance: sats$6(this.balances.get(f.id) ?? 0),
 			status: this.clients.has(f.id) ? "ready" : this.problems.has(f.id) ? "error" : "connecting",
 			error: this.problems.get(f.id),
 			lightning: f.modules.includes("ln")
@@ -2586,7 +2635,7 @@ var FedimintWallet = class {
 		if (!isFederationId(info.federationId)) throw new Error("The federation answered with an invalid id");
 		if (!info.modules.includes("mint")) throw new Error("This federation has no ecash module this app can use (the v1 mint module)");
 		if (!info.network) throw new Error("Could not tell which Bitcoin network this federation is on");
-		if (fedimintMode(info.network) !== this.network) throw new WrongNetworkError(fedimintMode(info.network), fedimintMode(info.network) === "mainnet" ? "This federation holds real bitcoin: it belongs in a Mainnet Fedimint wallet" : `This federation is on ${info.network}, a test network: it belongs in a Testnet Fedimint wallet`);
+		if (fedimintMode(info.network) !== this.network) throw new WrongNetworkError(fedimintMode(info.network), fedimintMode(info.network) === "mainnet" ? engineText("fedimintRealOnTestnet") : engineText("fedimintTestOnMainnet", { chain: info.network }));
 	}
 	/**
 	* Joins a federation. `recover`: the mnemonic was used with this federation before (a restore): the client rebuilds
@@ -2599,7 +2648,7 @@ var FedimintWallet = class {
 			const info = await this.gate.within(sdk.preview(code));
 			this.checkFederation(info);
 			const saved = this.saved ?? await this.newSeed();
-			if (saved.federations.some((f) => f.id === info.federationId)) throw new Error("You already joined this federation");
+			if (saved.federations.some((f) => f.id === info.federationId)) throw engineError("fedimintAlreadyJoined");
 			if (saved.federations.length >= 8) throw new Error(`At most 8 federations per wallet`);
 			const database = fedimintDatabase(crypto.randomUUID());
 			const mnemonic = await unsealSeed(saved.seed, saved.deviceKey);
@@ -2669,7 +2718,7 @@ var FedimintWallet = class {
 			if (!saved || !federation) throw new Error("Unknown federation");
 			const client = this.clients.get(federationId);
 			if (!client) throw new Error("Wait for this federation to connect: its balance must be read before leaving it");
-			if (sats$7(await client.balance()) > 0) throw new Error("This federation still holds your sats: spend or move them first");
+			if (sats$6(await client.balance()) > 0) throw new Error("This federation still holds your sats: spend or move them first");
 			if ((await intentRepository.list()).some((i) => i.review.method === "fedimint" && i.review.provider === federationId && [
 				"pending",
 				"submitted",
@@ -2677,7 +2726,7 @@ var FedimintWallet = class {
 			].includes(i.review.state))) throw new Error("A payment through this federation is not finished yet");
 			const out = (await client.operations(100)).filter((op) => historyEntry(federationId, op)?.kind === "notes-out" && historyEntry(federationId, op)?.state === "pending");
 			for (const op of out) if (await this.takeBack(federationId, op.id, 15e3) === "pending") throw new Error("Notes you sent from this federation are still being settled: try again in a moment");
-			if (sats$7(await client.balance()) > 0) throw new Error("Notes nobody redeemed came back to this federation: spend or move them first");
+			if (sats$6(await client.balance()) > 0) throw new Error("Notes nobody redeemed came back to this federation: spend or move them first");
 			this.unsubscribe.get(federationId)?.();
 			this.unsubscribe.delete(federationId);
 			this.clients.delete(federationId);
@@ -2731,7 +2780,7 @@ var FedimintWallet = class {
 		const client = this.clients.get(federationId);
 		if (client) return client;
 		if (!this.saved?.federations.some((f) => f.id === federationId)) throw new Error(`You have not joined this federation in your ${this.network === "mainnet" ? "Mainnet" : "Testnet"} Fedimint wallet`);
-		throw new Error(this.problems.get(federationId) ?? "Wait for the federation to connect");
+		throw new Error(this.problems.get(federationId) ?? engineText("fedimintConnecting"));
 	}
 	federation(federationId) {
 		return this.saved?.federations.find((f) => f.id === federationId);
@@ -2748,7 +2797,7 @@ var FedimintWallet = class {
 	async spendNotes(federationId, amount, ghostly = `wallet-${crypto.randomUUID()}`) {
 		assertFedimintAmount(amount);
 		const client = this.client(federationId);
-		if (sats$7(await client.balance()) < amount) throw new Error("Not enough in this federation");
+		if (sats$6(await client.balance()) < amount) throw engineError("fedimintNotEnough");
 		const spent = await client.spend(amount * 1e3, {
 			cancelAfterSecs: NOTES_REFUND_SECS,
 			ghostly
@@ -2793,7 +2842,7 @@ var FedimintWallet = class {
 		if (state !== "done") throw new Error("The federation is still redeeming these notes: they will show in the balance");
 		return {
 			federation: found.federation,
-			amount: sats$7(found.amountMsats)
+			amount: sats$6(found.amountMsats)
 		};
 	}
 	/** Takes notes back. `canceled`: they are ours again; `taken`: the recipient redeemed them first; `pending`: not settled yet. */
@@ -3156,12 +3205,12 @@ async function openBreez(params, sdk = loadBreezSdk, storage = breezStorage) {
 /** Payments read to find one: newest first, bounded. */
 var PAGE$1 = 100;
 var PAGES$1 = 5;
-var sats$6 = (value) => {
+var sats$5 = (value) => {
 	const n = Number(value);
 	if (!Number.isSafeInteger(n) || n < 0) throw new Error("Spark returned an invalid amount");
 	return n;
 };
-var message$4 = (error) => error instanceof Error ? error.message : typeof error === "string" ? error : "Spark refused the payment";
+var message$5 = (error) => error instanceof Error ? error.message : typeof error === "string" ? error : "Spark refused the payment";
 var invoiceOf = (p) => p.details?.type === "spark" ? p.details.invoiceDetails?.invoice : void 0;
 /** A fresh RFC 4122 v4 UUID: the SDK wants its idempotency keys in that form. */
 var newSparkKey = () => crypto.randomUUID();
@@ -3218,7 +3267,7 @@ var SparkAdapter = class SparkAdapter {
 		return paymentRequest;
 	}
 	async balance() {
-		return sats$6((await this.wallet.getInfo({ ensureSynced: false })).balanceSats);
+		return sats$5((await this.wallet.getInfo({ ensureSynced: false })).balanceSats);
 	}
 	/** Asks Spark's operators for what changed (transfers to claim, payments that completed). */
 	async sync() {
@@ -3232,8 +3281,8 @@ var SparkAdapter = class SparkAdapter {
 		return payments.map((p) => ({
 			id: p.id,
 			direction: p.paymentType === "send" ? "out" : "in",
-			amount: sats$6(p.amount),
-			fee: sats$6(p.fees),
+			amount: sats$5(p.amount),
+			fee: sats$5(p.fees),
 			at: p.timestamp * 1e3,
 			status: p.status,
 			via: p.method === "spark" ? "spark" : p.method === "lightning" ? "lightning" : p.method === "deposit" || p.method === "withdraw" ? "onchain" : "other",
@@ -3275,7 +3324,7 @@ var SparkAdapter = class SparkAdapter {
 				if (await this.balance() < review.amount + review.fee) throw new Error("Spark balance changed. Create a new review");
 				if (!persist) throw new Error("Durable payment journal required");
 			} catch (error) {
-				throw new PaymentPreflightError(message$4(error));
+				throw new PaymentPreflightError(message$5(error));
 			}
 			await persist();
 			try {
@@ -3287,7 +3336,7 @@ var SparkAdapter = class SparkAdapter {
 			} catch (error) {
 				const found = await this.sent(review, prepared).catch(() => void 0);
 				if (found) return this.outcome(found);
-				throw new Error(/insufficient/i.test(message$4(error)) ? "Insufficient Spark balance" : "Spark payment outcome unknown");
+				throw new Error(/insufficient/i.test(message$5(error)) ? "Insufficient Spark balance" : "Spark payment outcome unknown");
 			}
 		});
 	}
@@ -3316,7 +3365,7 @@ var SparkAdapter = class SparkAdapter {
 				limit: PAGE$1,
 				sortAscending: false
 			});
-			const found = payments.find((p) => p.status === "completed" && invoiceOf(p) === invoice && sats$6(p.amount) >= amount && !claimed.has(p.id));
+			const found = payments.find((p) => p.status === "completed" && invoiceOf(p) === invoice && sats$5(p.amount) >= amount && !claimed.has(p.id));
 			if (found) return found.id;
 			if (payments.length < PAGE$1) break;
 		}
@@ -3346,12 +3395,12 @@ var SparkAdapter = class SparkAdapter {
 		} else if (method.type === "sparkInvoice") {
 			const details = method.sparkInvoiceDetails;
 			if (details.invoice !== address || details.tokenIdentifier) throw new Error("Spark prepared a payment to another invoice");
-			if (details.amount !== void 0 && sats$6(details.amount) !== amount) throw new Error("The Spark invoice is for another amount");
+			if (details.amount !== void 0 && sats$5(details.amount) !== amount) throw new Error("The Spark invoice is for another amount");
 			if (details.expiryTime !== void 0 && details.expiryTime * 1e3 < Date.now()) throw new Error("The Spark invoice has expired");
 		} else throw new Error("Spark would not pay this as a Spark transfer");
-		if (sats$6(quote.amount) !== amount) throw new Error("Spark prepared another amount");
+		if (sats$5(quote.amount) !== amount) throw new Error("Spark prepared another amount");
 		return {
-			fee: sats$6(method.fee),
+			fee: sats$5(method.fee),
 			kind: method.type === "sparkAddress" ? "address" : "invoice"
 		};
 	}
@@ -3755,12 +3804,12 @@ var PaymentCoordinator = class {
 		const validated = validatePaymentTarget(target);
 		if (validated.method === "usdt") assertTokenUnits(amount);
 		else assertWholeSats(amount);
-		if (!Number.isSafeInteger(feeCap) || feeCap < 0) throw new Error("Invalid maximum fee");
+		if (!Number.isSafeInteger(feeCap) || feeCap < 0) throw engineError("invalidMaxFee");
 		if (context.requestId) {
-			if ((await this.repository.list()).find(({ review: r }) => r.requestId === context.requestId && r.linkId === context.linkId && !["failed", "cancelled"].includes(r.state))) throw new Error("This request already has a payment. Reconcile it before trying again.");
+			if ((await this.repository.list()).find(({ review: r }) => r.requestId === context.requestId && r.linkId === context.linkId && !["failed", "cancelled"].includes(r.state))) throw engineError("requestHasPayment");
 		}
 		const { fee, prepared, evm } = await this.adapter(validated.method).prepare(validated, amount, feeCap);
-		if (!Number.isSafeInteger(fee) || fee < 0 || fee > feeCap) throw new Error("The fee exceeds your limit");
+		if (!Number.isSafeInteger(fee) || fee < 0 || fee > feeCap) throw engineError("feeAboveLimit");
 		const review = {
 			...validated,
 			...context,
@@ -3782,7 +3831,7 @@ var PaymentCoordinator = class {
 	approve(id) {
 		return this.once(id, async () => {
 			const saved = await this.require(id);
-			if (saved.review.state !== "pending") throw new Error("This payment cannot be submitted again. Reconcile its existing transaction.");
+			if (saved.review.state !== "pending") throw engineError("cannotSubmitAgain");
 			validatePaymentTarget(saved.review);
 			saved.review = (await this.repository.claim(id)).review;
 			this.changed(saved.review);
@@ -3797,7 +3846,7 @@ var PaymentCoordinator = class {
 				saved.review = {
 					...saved.review,
 					state: error instanceof PaymentPreflightError ? "failed" : "unknown",
-					error: error instanceof PaymentPreflightError ? error.message : "Outcome unknown. Check the existing payment; do not send another."
+					error: error instanceof PaymentPreflightError ? error.message : engineText("outcomeUnknown")
 				};
 			}
 			await this.repository.put(saved);
@@ -3815,13 +3864,13 @@ var PaymentCoordinator = class {
 					...saved.review,
 					...result,
 					state: result.failed ? "failed" : result.settled ? "settled" : result.pending ? "submitted" : "unknown",
-					error: result.failed ? result.error : result.settled ? void 0 : "Not yet confirmed. No second payment was sent."
+					error: result.failed ? result.error : result.settled ? void 0 : engineText("notYetConfirmed")
 				};
 			} catch {
 				saved.review = {
 					...saved.review,
 					state: "unknown",
-					error: "Could not verify this payment yet. No second payment was sent."
+					error: engineText("couldNotVerify")
 				};
 			}
 			await this.repository.put(saved);
@@ -3837,14 +3886,31 @@ var PaymentCoordinator = class {
 			return saved.review;
 		});
 	}
+	/**
+	* Cancels the reviews no Approve can send any more, as Cancel does (what prepare reserved goes back, and each stays
+	* in the store as cancelled): one past its expiry (approve refuses it), and one whose request was paid some other
+	* way or closed (`unpayable`). Only pending reviews: a submitted or unknown one may hold or move money, and is only
+	* ever reconciled. Returns what it cancelled.
+	*/
+	async dropStale(now = Date.now(), unpayable = () => false) {
+		const dropped = [];
+		for (const { review } of await this.repository.list()) {
+			if (review.state !== "pending" || review.expiresAt > now && !unpayable(review)) continue;
+			try {
+				const cancelled = await this.cancel(review.id);
+				if (cancelled.state === "cancelled") dropped.push(cancelled);
+			} catch {}
+		}
+		return dropped;
+	}
 	adapter(method) {
 		const adapter = this.adapters.find((a) => a.method === method);
-		if (!adapter) throw new Error("This payment method is unavailable");
+		if (!adapter) throw engineError("methodUnavailable");
 		return adapter;
 	}
 	async require(id) {
 		const saved = await this.repository.get(id);
-		if (!saved) throw new Error("Unknown payment intent");
+		if (!saved) throw engineError("unknownPaymentIntent");
 		return saved;
 	}
 	once(id, work) {
@@ -3857,6 +3923,22 @@ var PaymentCoordinator = class {
 };
 //#endregion
 //#region ../browser/src/engine/paymentAdapters/cashu.ts
+/**
+* How long one request to a mint may last: cashu-ts's default `requestTimeout` (5 min), which this wallet does not
+* change. Retries of a swap (NUT-19) run inside the same approval, and reconcile waits for it (the coordinator runs one
+* operation per payment at a time).
+*/
+var CASHU_REQUEST_TIMEOUT_MS = 3e5;
+/** The margin past that for a mint slow to act on a swap it did receive. */
+var SWAP_SETTLED_MS = 12e4;
+/**
+* When a swap whose outcome is unknown can no longer reach the mint: a request's longest life after the approval
+* (`submittedAt`, saved when it was claimed), and the margin after the attempt ended (`attemptEndedAt`), both saved.
+*/
+function swapSettledAt(review, prepared) {
+	return Math.max((review.submittedAt ?? review.createdAt) + CASHU_REQUEST_TIMEOUT_MS + SWAP_SETTLED_MS, (prepared.attemptEndedAt ?? 0) + SWAP_SETTLED_MS);
+}
+var NEVER_REACHED_MINT = "The payment never reached the mint: nothing was sent, and the sats are back in your wallet. You can pay again.";
 var CashuAdapter = class {
 	wallet;
 	publish;
@@ -3868,21 +3950,45 @@ var CashuAdapter = class {
 	async prepare(target, amount, feeCap) {
 		if (target.method !== "cashu" || target.network !== (mintNetwork(target.provider) === "testnet" ? "cashu-test" : "bitcoin")) throw new Error("Cashu mint/network mismatch");
 		const result = await this.wallet.prepareReviewedCashu(target.provider, amount);
-		if (result.fee > feeCap) throw new Error("Cashu fee exceeds your limit");
+		if (result.fee > feeCap) throw engineError("cashuFeeAboveLimit");
 		return result;
 	}
 	async execute(review, prepared, persist) {
 		if (!review.linkId) throw new Error("Cashu requires an authenticated chat recipient");
-		const token = await this.wallet.executeReviewedCashu(review, prepared);
+		let token;
+		try {
+			token = await this.wallet.executeReviewedCashu(review, prepared);
+		} catch (error) {
+			prepared.attemptEndedAt = Date.now();
+			throw error;
+		}
 		await persist?.();
 		await this.publish(review, token);
 		return { settled: await this.wallet.reviewedCashuSpent(prepared) };
 	}
-	async reconcile(review, prepared) {
+	/** `persist` saves the intent as it is: required, since the abandon path must be durable before it releases anything. */
+	async reconcile(review, prepared, persist) {
+		if (prepared.abandoned) return this.abandon(prepared, persist);
 		if (await this.wallet.reviewedCashuSpent(prepared)) return { settled: true };
 		const token = prepared.token ?? await this.wallet.recoverReviewedCashu(review, prepared);
 		if (token) await this.publish(review, token);
-		return { settled: await this.wallet.reviewedCashuSpent(prepared) };
+		if (await this.wallet.reviewedCashuSpent(prepared)) return { settled: true };
+		if (!token && Date.now() >= swapSettledAt(review, prepared) && await this.wallet.reviewedCashuNeverSwapped(prepared)) return this.abandon(prepared, persist);
+		return { settled: false };
+	}
+	/**
+	* The mint proved this swap never happened. Marked for good first (a reload repeats only this), then its reserved
+	* inputs are released. Nothing sends the saved swap again: approve claims pending reviews only, and reconcile asks.
+	*/
+	async abandon(prepared, persist) {
+		prepared.abandoned = true;
+		await persist();
+		await this.wallet.releaseReviewedCashu(prepared);
+		return {
+			settled: false,
+			failed: true,
+			error: NEVER_REACHED_MINT
+		};
 	}
 };
 //#endregion
@@ -4085,12 +4191,12 @@ var PAGES = 10;
 /** Without any record of a payment, it is called failed only this long after its invoice expired. */
 var LOST_AFTER_MS = 36e5;
 var hex$8 = (bytes) => Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
-var sats$5 = (value) => {
+var sats$4 = (value) => {
 	const n = Number(value);
 	if (!Number.isSafeInteger(n) || n < 0) throw new Error("Breez returned an invalid amount");
 	return n;
 };
-var message$3 = (error) => error instanceof Error ? error.message : typeof error === "string" ? error : "Breez refused the payment";
+var message$4 = (error) => error instanceof Error ? error.message : typeof error === "string" ? error : "Breez refused the payment";
 /**
 * The idempotency key of one attempt at paying one invoice: asking the SDK twice with it pays once.
 * A new attempt (after one that failed) gets a new key, or the SDK would only hand back the failure.
@@ -4146,7 +4252,7 @@ var BreezLightning = class BreezLightning {
 		const { balanceSats } = await this.wallet.getInfo({ ensureSynced: false });
 		return {
 			network: this.network,
-			balance: sats$5(balanceSats)
+			balance: sats$4(balanceSats)
 		};
 	}
 	async createInvoice(amount, memo) {
@@ -4169,7 +4275,7 @@ var BreezLightning = class BreezLightning {
 		const payment = await this.find("receive", invoice.paymentHash, invoice.invoice);
 		if (payment?.status === "completed") return {
 			state: "paid",
-			amount: sats$5(payment.amount)
+			amount: sats$4(payment.amount)
 		};
 		if (payment?.status === "pending") return { state: "open" };
 		return { state: invoice.expiresAt < Date.now() ? "expired" : "open" };
@@ -4200,9 +4306,9 @@ var BreezLightning = class BreezLightning {
 			const fee = this.feeOf(prepared);
 			if (fee > maxFee) throw new Error(`The Lightning fee (${fee} sats) is above your limit (${maxFee})`);
 			const { balanceSats } = await this.wallet.getInfo({ ensureSynced: false });
-			if (sats$5(balanceSats) < amount + fee) throw new Error(`Not enough sats in the Breez wallet (${sats$5(balanceSats)}; ${amount + fee} needed)`);
+			if (sats$4(balanceSats) < amount + fee) throw new Error(`Not enough sats in the Breez wallet (${sats$4(balanceSats)}; ${amount + fee} needed)`);
 		} catch (error) {
-			throw isNothingSpentError(error) ? error : new NothingSpentError(message$3(error));
+			throw isNothingSpentError(error) ? error : new NothingSpentError(message$4(error));
 		}
 		const { payment } = await this.wallet.sendPayment({
 			prepareResponse: prepared,
@@ -4230,7 +4336,7 @@ var BreezLightning = class BreezLightning {
 		const state = payment.status === "completed" ? "paid" : payment.status === "failed" ? "failed" : "pending";
 		return {
 			state,
-			fee: state === "paid" ? sats$5(payment.fees) : void 0,
+			fee: state === "paid" ? sats$4(payment.fees) : void 0,
 			preimage: preimageOf(payment)
 		};
 	}
@@ -4247,18 +4353,18 @@ var BreezLightning = class BreezLightning {
 		} });
 		const method = prepared.paymentMethod;
 		if (method.type !== "bolt11Invoice") throw new Error("Breez would not pay this as a Lightning invoice");
-		if (method.invoiceDetails.paymentHash !== decodeBolt11(invoice)?.paymentHash || sats$5(prepared.amount) !== amount) throw new Error("Breez prepared a payment that does not match the invoice");
+		if (method.invoiceDetails.paymentHash !== decodeBolt11(invoice)?.paymentHash || sats$4(prepared.amount) !== amount) throw new Error("Breez prepared a payment that does not match the invoice");
 		return prepared;
 	}
 	feeOf(prepared) {
 		if (prepared.paymentMethod.type !== "bolt11Invoice") throw new Error("Breez would not pay this as a Lightning invoice");
-		return sats$5(prepared.paymentMethod.lightningFeeSats);
+		return sats$4(prepared.paymentMethod.lightningFeeSats);
 	}
 	/** `failed` is never an answer here: a payment the SDK gave up on is pending until `paymentStatus` says so. */
 	result(payment) {
 		if (payment.status === "completed") return {
 			state: "paid",
-			fee: sats$5(payment.fees),
+			fee: sats$4(payment.fees),
 			preimage: preimageOf(payment),
 			ref: payment.id
 		};
@@ -4427,8 +4533,8 @@ var unhex = (text) => {
 	if (!/^([0-9a-f]{2})+$/.test(text)) throw new Error("Not hex");
 	return Uint8Array.from(text.match(/../g), (h) => parseInt(h, 16));
 };
-var sats$4 = (amount) => Number(amount.to_sat());
-var message$2 = (error) => error instanceof Error ? error.message : typeof error === "string" ? error : error?.message ? String(error.message) : String(error);
+var sats$3 = (amount) => Number(amount.to_sat());
+var message$3 = (error) => error instanceof Error ? error.message : typeof error === "string" ? error : error?.message ? String(error.message) : String(error);
 /** Checks the settings before anything is contacted. */
 function parseBdkSettings({ config, secrets }) {
 	const network = config.network;
@@ -4502,7 +4608,7 @@ var Esplora = class Esplora {
 				if (this.signal.aborted) throw error;
 				if (timedOut) throw new SourceUnreachableError(`the Esplora server at ${this.host} did not answer in ${HTTP_TIMEOUT / 1e3} s`, error);
 				if (this.local) throw new SourceUnreachableError(`nothing answers at ${this.host}: the local Esplora server is not running`, error);
-				throw new SourceUnreachableError(`the Esplora server at ${this.host} did not answer (${message$2(error)})`, error);
+				throw new SourceUnreachableError(`the Esplora server at ${this.host} did not answer (${message$3(error)})`, error);
 			}
 			const reader = response.body?.getReader();
 			let body = "";
@@ -4557,7 +4663,7 @@ var Esplora = class Esplora {
 					if (errors.length < servers.length) return;
 					if (signal.aborted) return reject(errors[0]);
 					if (errors.every((e) => e instanceof SourceConfigError)) return reject(errors[0]);
-					reject(new SourceUnreachableError(`no public ${network} Esplora server answered (${servers.map((s) => new URL(s).host).join(", ")}): ${message$2(errors[0])}`, errors[0]));
+					reject(new SourceUnreachableError(`no public ${network} Esplora server answered (${servers.map((s) => new URL(s).host).join(", ")}): ${message$3(errors[0])}`, errors[0]));
 				});
 			}
 		});
@@ -4616,7 +4722,7 @@ var BdkOnchain = class BdkOnchain {
 		try {
 			parsed = parseBdkSettings(settings);
 		} catch (error) {
-			throw new SourceConfigError(message$2(error), error);
+			throw new SourceConfigError(message$3(error), error);
 		}
 		const { mnemonic, ...found } = parsed;
 		const fetcher = deps.fetch ?? globalThis.fetch.bind(globalThis);
@@ -4633,7 +4739,7 @@ var BdkOnchain = class BdkOnchain {
 			wallet = bdk.Wallet.create(chain, pair.external, pair.internal);
 			publicDescriptor = wallet.public_descriptor("external");
 		} catch (error) {
-			throw new SourceConfigError(`bad descriptor: the recovery phrase does not make a ${SCRIPT[config.script].label} wallet (${message$2(error)})`, error);
+			throw new SourceConfigError(`bad descriptor: the recovery phrase does not make a ${SCRIPT[config.script].label} wallet (${message$3(error)})`, error);
 		}
 		const fingerprint = /\[([0-9a-f]{8})\//.exec(publicDescriptor)?.[1] ?? "";
 		const key = `bdkWallet-${config.network}-${hex$7(sha256(new TextEncoder().encode(publicDescriptor))).slice(0, 32)}`;
@@ -4673,7 +4779,7 @@ var BdkOnchain = class BdkOnchain {
 			this.syncedAt = Date.now();
 			this.persist();
 		})().catch((error) => {
-			throw Object.assign(/* @__PURE__ */ new Error(`Could not sync from Esplora: ${message$2(error)}`), { cause: error });
+			throw Object.assign(/* @__PURE__ */ new Error(`Could not sync from Esplora: ${message$3(error)}`), { cause: error });
 		}).finally(() => {
 			this.syncing = void 0;
 		});
@@ -4687,8 +4793,8 @@ var BdkOnchain = class BdkOnchain {
 		await this.sync();
 		const balance = this.wallet.balance;
 		return {
-			confirmed: sats$4(balance.confirmed),
-			unconfirmed: sats$4(balance.trusted_pending) + sats$4(balance.untrusted_pending)
+			confirmed: sats$3(balance.confirmed),
+			unconfirmed: sats$3(balance.trusted_pending) + sats$3(balance.untrusted_pending)
 		};
 	}
 	async prepareSend(request) {
@@ -4714,9 +4820,9 @@ var BdkOnchain = class BdkOnchain {
 		} catch (error) {
 			const data = error.data;
 			if (error.code === bdk.BdkErrorCode.InsufficientFunds && data) throw Object.assign(/* @__PURE__ */ new Error(`Not enough confirmed sats: ${data.available ?? 0} available, ${data.needed ?? "more"} needed with the fee`), { cause: error });
-			throw Object.assign(/* @__PURE__ */ new Error(`Could not build the transaction: ${message$2(error)}`), { cause: error });
+			throw Object.assign(/* @__PURE__ */ new Error(`Could not build the transaction: ${message$3(error)}`), { cause: error });
 		}
-		const fee = sats$4(psbt.fee());
+		const fee = sats$3(psbt.fee());
 		if (fee > feeCap) throw new Error(`The fee (${fee} sats) is above your limit of ${feeCap}`);
 		if (!this.wallet.sign(psbt, new bdk.SignOptions())) throw new Error("Could not sign the transaction");
 		const tx = psbt.extract_tx();
@@ -4741,14 +4847,14 @@ var BdkOnchain = class BdkOnchain {
 	check(tx, recipient, amount, fee) {
 		let paid = 0, outgoing = 0;
 		for (const output of tx.output) {
-			const value = sats$4(output.value);
+			const value = sats$3(output.value);
 			if (output.script_pubkey.to_hex_string() === recipient && value === amount && !paid) {
 				paid++;
 				continue;
 			}
 			if (!this.wallet.is_mine(output.script_pubkey)) outgoing++;
 		}
-		if (paid !== 1 || outgoing !== 0 || sats$4(this.wallet.calculate_fee(tx)) !== fee) throw new Error("The signed transaction does not match the payment");
+		if (paid !== 1 || outgoing !== 0 || sats$3(this.wallet.calculate_fee(tx)) !== fee) throw new Error("The signed transaction does not match the payment");
 	}
 	async estimateFeeRate() {
 		try {
@@ -4774,7 +4880,7 @@ var BdkOnchain = class BdkOnchain {
 				headers: { "content-type": "text/plain" }
 			});
 		} catch (error) {
-			throw Object.assign(/* @__PURE__ */ new Error(`No answer from the Esplora server: ${message$2(error)}`), { cause: error });
+			throw Object.assign(/* @__PURE__ */ new Error(`No answer from the Esplora server: ${message$3(error)}`), { cause: error });
 		}
 		if (answer.status === 200 && answer.body.trim() === prepared.txid) return this.sent(tx, prepared.txid);
 		if (answer.status === 200) throw new Error("The Esplora server answered with another transaction id");
@@ -4784,7 +4890,7 @@ var BdkOnchain = class BdkOnchain {
 			try {
 				known = await this.esplora.txStatus(prepared.txid);
 			} catch (error) {
-				throw Object.assign(/* @__PURE__ */ new Error(`The node refused the transaction, and it could not be checked: ${message$2(error)}`), { cause: error });
+				throw Object.assign(/* @__PURE__ */ new Error(`The node refused the transaction, and it could not be checked: ${message$3(error)}`), { cause: error });
 			}
 			if (known) return this.sent(tx, prepared.txid);
 			this.unreserve(prepared.txid);
@@ -4838,10 +4944,10 @@ var BdkOnchain = class BdkOnchain {
 		await this.sync();
 		const tip = this.wallet.latest_checkpoint.height;
 		return this.wallet.transactions().map((wtx) => {
-			const [sent, received] = [sats$4(this.wallet.sent_and_received(wtx.tx)[0]), sats$4(this.wallet.sent_and_received(wtx.tx)[1])];
+			const [sent, received] = [sats$3(this.wallet.sent_and_received(wtx.tx)[0]), sats$3(this.wallet.sent_and_received(wtx.tx)[1])];
 			let fee;
 			if (sent > 0) try {
-				fee = sats$4(this.wallet.calculate_fee(wtx.tx));
+				fee = sats$3(this.wallet.calculate_fee(wtx.tx));
 			} catch {
 				fee = void 0;
 			}
@@ -4864,7 +4970,7 @@ var BdkOnchain = class BdkOnchain {
 		const tip = this.wallet.latest_checkpoint.height;
 		const paid = [];
 		for (const wtx of this.wallet.transactions()) {
-			const amount = wtx.tx.output.reduce((sum, output) => sum + (output.script_pubkey.to_hex_string() === script ? sats$4(output.value) : 0), 0);
+			const amount = wtx.tx.output.reduce((sum, output) => sum + (output.script_pubkey.to_hex_string() === script ? sats$3(output.value) : 0), 0);
 			if (!amount) continue;
 			const height = wtx.chain_position.anchor?.block_id.height;
 			paid.push({
@@ -5406,7 +5512,7 @@ var refOf = (ref) => {
 	if (!parsed?.op) throw new Error("Unknown Fedimint operation");
 	return parsed;
 };
-var message$1 = (error) => error instanceof Error ? error.message : String(error);
+var message$2 = (error) => error instanceof Error ? error.message : String(error);
 /** What the client says before any contract is funded: nothing left the wallet. */
 var BEFORE_FUNDING = /insufficient|not enough|no gateway|no available gateway|expired|invalid|amount|already paid|parse|decode/i;
 /**
@@ -5435,7 +5541,7 @@ var FedimintLightning = class {
 		try {
 			return this.wallet.client(this.federationId);
 		} catch (error) {
-			throw new SourceUnreachableError(message$1(error), error);
+			throw new SourceUnreachableError(message$2(error), error);
 		}
 	}
 	async info() {
@@ -5487,12 +5593,12 @@ var FedimintLightning = class {
 			const balance = Math.floor(await this.client().balance() / 1e3);
 			if (balance < amount + fee) throw new Error(`Not enough in this federation (${balance.toLocaleString()} sats; ${(amount + fee).toLocaleString()} needed)`);
 		} catch (error) {
-			throw isNothingSpentError(error) ? error : new NothingSpentError(message$1(error));
+			throw isNothingSpentError(error) ? error : new NothingSpentError(message$2(error));
 		}
 		try {
 			paid = await this.client().payInvoice(invoice, note?.slice(0, 64) ?? "lightning");
 		} catch (error) {
-			if (BEFORE_FUNDING.test(message$1(error))) throw new NothingSpentError(message$1(error));
+			if (BEFORE_FUNDING.test(message$2(error))) throw new NothingSpentError(message$2(error));
 			throw error;
 		}
 		const ref = JSON.stringify({
@@ -7175,7 +7281,7 @@ function fetchTransport(url, macaroon, signal) {
 		}
 	};
 }
-/** Desktop: Rust makes the request (src-tauri/src/lnd.rs), pinning the certificate when there is one. */
+/** Desktop: Rust makes the request (apps/desktop/src/lnd.rs), pinning the certificate when there is one. */
 function tauriTransport(invoke, url, macaroon, certificate) {
 	let closed = false;
 	return {
@@ -7215,11 +7321,11 @@ var describe = (error) => (error.message ?? "unknown error").slice(0, 200);
 * found" in front of the node says nothing about the payment, and must not become "nothing was spent".
 */
 var notInitiated = (error) => /payment isn't initiated/i.test(error.message ?? "");
-var sats$3 = (value) => {
+var sats$2 = (value) => {
 	const n = Number(value ?? 0);
 	return Number.isFinite(n) && n >= 0 ? Math.floor(n) : 0;
 };
-var feeOf = (p) => p.fee_msat !== void 0 ? Math.ceil(Number(p.fee_msat) / 1e3) : sats$3(p.fee_sat);
+var feeOf = (p) => p.fee_msat !== void 0 ? Math.ceil(Number(p.fee_msat) / 1e3) : sats$2(p.fee_sat);
 var FAILURES = {
 	FAILURE_REASON_NO_ROUTE: "No route to the recipient within the fee limit",
 	FAILURE_REASON_INSUFFICIENT_BALANCE: "Not enough outbound liquidity in the node's channels",
@@ -7266,7 +7372,7 @@ var LndLightning = class {
 		const network = NETWORKS[chain.network ?? ""];
 		if (!network) throw new Error(`The node runs on ${chain.network ?? "an unknown network"}, which Ghostly does not support`);
 		let balance;
-		if (this.capabilities.balance) balance = sats$3((await this.call("GET", "/v1/balance/channels")).local_balance?.sat);
+		if (this.capabilities.balance) balance = sats$2((await this.call("GET", "/v1/balance/channels")).local_balance?.sat);
 		return {
 			network,
 			alias: info.alias?.slice(0, 64) || void 0,
@@ -7297,7 +7403,7 @@ var LndLightning = class {
 		const found = await this.call("GET", `/v1/invoice/${invoice.paymentHash}`);
 		if (found.state === "SETTLED") return {
 			state: "paid",
-			amount: sats$3(found.amt_paid_sat)
+			amount: sats$2(found.amt_paid_sat)
 		};
 		if (found.state === "CANCELED") return { state: "expired" };
 		return { state: (found.creation_date && found.expiry ? (Number(found.creation_date) + Number(found.expiry)) * 1e3 : invoice.expiresAt) < Date.now() ? "expired" : "open" };
@@ -7460,7 +7566,7 @@ var REFUSED = /\b(user (rejected|denied|declined|cancell?ed)|(rejected|denied|de
 var NOT_SENT = /\b(no[ _-]?route|insufficient[ _-](local[ _-])?balance|not enough (balance|funds)|insufficient funds)\b/i;
 var hex$5 = (bytes) => Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
 var bytes = (value) => new Uint8Array((value.match(/../g) ?? []).map((pair) => parseInt(pair, 16)));
-var message = (error) => (error instanceof Error ? error.message : typeof error === "string" ? error : "no answer").slice(0, 200);
+var message$1 = (error) => (error instanceof Error ? error.message : typeof error === "string" ? error : "no answer").slice(0, 200);
 /** A preimage that is the one of this payment hash: proof the invoice was paid. */
 var provesPayment = (preimage, paymentHash) => typeof preimage === "string" && /^[0-9a-f]{64}$/i.test(preimage) && hex$5(sha256(bytes(preimage.toLowerCase()))) === paymentHash.toLowerCase();
 /** A network named by a wallet, in Ghostly's words. Anything else is no answer. */
@@ -7535,13 +7641,13 @@ var WeblnLightning = class WeblnLightning {
 			if (answer && typeof answer === "object" && answer.enabled === false) throw new Error("not enabled");
 		} catch (error) {
 			if (signal?.aborted) throw error;
-			throw Object.assign(/* @__PURE__ */ new Error(`The browser wallet refused the connection (${message(error)})`), { cause: error });
+			throw Object.assign(/* @__PURE__ */ new Error(`The browser wallet refused the connection (${message$1(error)})`), { cause: error });
 		}
 		const info = typeof webln.getInfo === "function" ? await within$1(() => webln.getInfo(), CALL_MS, "info", signal).catch(() => void 0) : void 0;
 		const methods = Array.isArray(info?.methods) ? info.methods : void 0;
 		const has = (method) => typeof webln[method] === "function" && (!methods || methods.includes(method));
 		let balance = false;
-		if (has("getBalance")) balance = await within$1(() => webln.getBalance(), CALL_MS, "balance", signal).then((b) => sats$2(b) !== void 0, () => false);
+		if (has("getBalance")) balance = await within$1(() => webln.getBalance(), CALL_MS, "balance", signal).then((b) => sats$1(b) !== void 0, () => false);
 		const capabilities = {
 			receive: has("makeInvoice"),
 			send: has("sendPayment"),
@@ -7573,7 +7679,7 @@ var WeblnLightning = class WeblnLightning {
 		return {
 			network: this.network,
 			alias: this.alias,
-			...this.capabilities.balance ? { balance: sats$2(await within$1(() => this.webln.getBalance(), CALL_MS, "balance", this.signal)) ?? 0 } : {}
+			...this.capabilities.balance ? { balance: sats$1(await within$1(() => this.webln.getBalance(), CALL_MS, "balance", this.signal)) ?? 0 } : {}
 		};
 	}
 	async createInvoice(amount, memo) {
@@ -7616,18 +7722,18 @@ var WeblnLightning = class WeblnLightning {
 			if (!decoded?.paymentHash || decoded.amountSat === null) throw new Error("That is not an invoice this wallet can pay");
 			if (!sameChain(this.network, decoded.network)) throw new Error(`That invoice is for ${decoded.network}, and this browser wallet is on ${this.network}`);
 			if (this.capabilities.balance) {
-				const balance = sats$2(await within$1(() => this.webln.getBalance(), CALL_MS, "balance", this.signal));
+				const balance = sats$1(await within$1(() => this.webln.getBalance(), CALL_MS, "balance", this.signal));
 				if (balance !== void 0 && balance < decoded.amountSat) throw new Error(`Not enough in the browser wallet (${balance} sats)`);
 			}
 		} catch (error) {
-			throw new NothingSpentError(message(error));
+			throw new NothingSpentError(message$1(error));
 		}
 		let answer;
 		try {
 			answer = await within$1(() => this.webln.sendPayment(decoded.invoice), PROMPT_MS, "payment", this.signal);
 		} catch (error) {
-			if (!this.signal?.aborted && error instanceof Error && (REFUSED_NAMES.has(error.name) || REFUSED.test(error.message) || NOT_SENT.test(error.message))) throw new NothingSpentError(`The browser wallet did not pay: ${message(error)}`);
-			throw Object.assign(/* @__PURE__ */ new Error(`The browser wallet did not say whether it paid (${message(error)})`), { cause: error });
+			if (!this.signal?.aborted && error instanceof Error && (REFUSED_NAMES.has(error.name) || REFUSED.test(error.message) || NOT_SENT.test(error.message))) throw new NothingSpentError(`The browser wallet did not pay: ${message$1(error)}`);
+			throw Object.assign(/* @__PURE__ */ new Error(`The browser wallet did not say whether it paid (${message$1(error)})`), { cause: error });
 		}
 		if (!provesPayment(answer?.preimage, decoded.paymentHash)) throw new Error("The browser wallet answered without proof of payment");
 		const fee = answer?.route?.total_fees;
@@ -7665,7 +7771,7 @@ var WeblnLightning = class WeblnLightning {
 	}
 };
 /** A WebLN balance in whole sats, when it is one. Wallets that answer in a fiat currency have none here. */
-function sats$2(balance) {
+function sats$1(balance) {
 	const value = Number(balance?.balance);
 	if (!Number.isFinite(value) || value < 0) return void 0;
 	const currency = typeof balance?.currency === "string" ? balance.currency.trim().toLowerCase() : "sats";
@@ -8215,6 +8321,25 @@ var IdentityProofs = class {
 			this.seeds.delete(id);
 		}
 	}
+	/**
+	* "Clear all data": every proof that was ever shared, and every removed one still being revoked, gets its revocation
+	* record published once more, all at once. Nothing will republish them after the clear, so this is a last word for
+	* contacts who check; proofs posted elsewhere (a Bluesky record, a Pubky file, a DNS record) are the person's to delete.
+	*/
+	async revokeAll() {
+		this.stop();
+		const shared = new Set(this.host.linkIds().flatMap((l) => this.host.ledger(l)?.shared.map((s) => s.id) ?? []));
+		const at = now();
+		const last = [...this.revocations.filter((r) => r.expiresAt > at), ...this.proofs.filter((p) => shared.has(identityStatement(p.binding).id)).map((p) => ({
+			id: identityStatement(p.binding).id,
+			key: p.binding.key,
+			seed: p.seed,
+			revokedAt: at,
+			expiresAt: Math.min(p.binding.expiresAt, p.verified.expiresAt ?? Infinity)
+		}))];
+		await Promise.allSettled(last.map((r) => this.publishRevocation(r)));
+		this.stop();
+	}
 	async publishRevocation(r) {
 		if (!this.host.online()) return;
 		await this.host.publish(await this.seedOf(r.id, r.seed), [{
@@ -8559,6 +8684,18 @@ var ProfileDid = class {
 		}
 		this.host.emit();
 	}
+	/**
+	* "Clear all data": the DID ends. When a document was ever published, a newer packet reading `deactivated` replaces
+	* it, so resolvers say the DID is gone instead of showing the old document until it expires. Stops publishing first.
+	*/
+	async deactivate() {
+		this.stop();
+		const previous = this.stored?.published;
+		if (!this.stored || !previous) return;
+		const seq = Math.max(Math.floor(Date.now() / 1e3), previous.seq + 1);
+		const identity = identityFromSeed(fromBase64Url(await unsealSeed(this.stored.seed.sealed, this.stored.seed.deviceKey)));
+		await this.host.publish(toZ32(this.publicKey()), signDidDhtPacket(identity, encodeDidDhtDeactivated(this.publicKey()), seq));
+	}
 	listed() {
 		return this.stored?.listed ?? [];
 	}
@@ -11605,9 +11742,10 @@ var FileDesk = class {
 		await chat.saving;
 		const stored = await fileStore.get(id);
 		const bytes = stored?.bytes && await fileBytesOf(stored.bytes) || await fileBytes();
-		const have = await bytes.size(id) ?? 0;
+		const size = await bytes.size(id), have = size ?? 0;
 		const offset = Math.min(have, record.confirmed);
 		if (have > offset) await bytes.truncate(id, offset);
+		if (size === null && record.file.size === 0) await bytes.append(id, 0, /* @__PURE__ */ new Uint8Array());
 		if (stored && stored.bytes !== bytes.kind) await fileStore.patch(id, { bytes: bytes.kind });
 		const appender = new FileAppender(bytes, id, offset);
 		return {
@@ -11687,7 +11825,9 @@ var FileDesk = class {
 				});
 			}).catch(() => {});
 		}
+		const offered = record.direction === "in" && !this.deps.transfers.has(chat.local.get(record.id));
 		this.show(linkId, chat, record, transferred, progress);
+		if (offered) this.deps.flush?.();
 		const id = record.direction === "out" ? outgoingFileId(linkId, record.id) : chat.local.get(record.id);
 		const now = Date.now();
 		if (!progress || now - (chat.lastSaved.get(id) ?? 0) >= SAVE_EVERY_MS) {
@@ -11845,6 +11985,221 @@ var FileDesk = class {
 		};
 	}
 };
+//#endregion
+//#region ../browser/src/shared/backupReminder.ts
+/**
+* The wallets that hold their money on this device, and their copy. Lightning is left out (through the Cashu mints it
+* is Cashu's balance; through a node of one's own, the node keeps it), and so is on-chain Bitcoin (an external source).
+*/
+var BACKUP_KIND = {
+	cashu: "profile",
+	usdt: "phrase",
+	arkade: "phrase",
+	bark: "phrase",
+	spark: "phrase",
+	fedimint: "phrase"
+};
+var asks = (w) => w.network === "mainnet" && BACKUP_KIND[w.type] !== void 0;
+var big = (text) => {
+	try {
+		return text === void 0 ? void 0 : BigInt(text);
+	} catch {
+		return;
+	}
+};
+/**
+* The Mainnet balances the reminder watches, read from the wallets' views: only wallets that exist and say what they
+* hold (a locked or connecting one says nothing yet).
+*/
+function mainnetBalances(wallets, view) {
+	if (!view) return [];
+	const out = [];
+	for (const w of wallets) {
+		if (!asks(w)) continue;
+		let balance;
+		switch (w.type) {
+			case "cashu":
+				balance = BigInt(Math.max(0, Math.floor(view.balance)));
+				break;
+			case "usdt":
+				balance = view.usdt?.configured && !view.usdt.locked ? big(view.usdt.balance) : void 0;
+				break;
+			case "arkade":
+				balance = view.ark?.configured && !view.ark.locked ? BigInt(Math.floor(view.ark.balance ?? 0)) : void 0;
+				break;
+			case "bark":
+				balance = view.bark?.configured && !view.bark.locked ? BigInt(Math.floor(view.bark.balance ?? 0)) : void 0;
+				break;
+			case "spark":
+				balance = view.spark?.configured && !view.spark.locked ? BigInt(Math.floor(view.spark.balance ?? 0)) : void 0;
+				break;
+			case "fedimint": balance = view.fedimint?.federations.length ? BigInt(Math.floor(view.fedimint.balance ?? 0)) : void 0;
+		}
+		if (balance !== void 0) out.push({
+			id: w.id,
+			type: w.type,
+			network: w.network,
+			balance
+		});
+	}
+	return out;
+}
+/**
+* What the balances now change in the records: a wallet holding money for the first time is funded; one put off with
+* "Later" comes back when more money came in than it held then (and after a spend, the mark follows the balance down).
+* `changed` is false when nothing needs saving.
+*/
+function observeBalances(records, balances, now) {
+	let next = records, changed = false;
+	const put = (id, record) => {
+		next = {
+			...next,
+			[id]: record
+		};
+		changed = true;
+	};
+	for (const { id, balance, ...w } of balances) {
+		if (!asks(w)) continue;
+		const record = next[id] ?? {};
+		if (balance > 0n && record.funded === void 0) {
+			put(id, {
+				...record,
+				funded: now
+			});
+			continue;
+		}
+		const mark = big(record.laterBalance);
+		if (record.later === void 0 || mark === void 0) continue;
+		if (balance > mark) {
+			const { later: _l, laterBalance: _b, ...rest } = record;
+			put(id, rest);
+		} else if (balance < mark) put(id, {
+			...record,
+			laterBalance: balance.toString()
+		});
+	}
+	return {
+		records: next,
+		changed
+	};
+}
+/**
+* A copy was made. `phrase`: one wallet's phrase shown or its backup file made (`id`), at any time: the phrase does
+* not change with the money. `profile`: a profile backup, which holds every wallet as it is now: it counts for the
+* wallets that already hold money, not for money that comes later to a wallet that had none.
+*/
+function markBackedUp(records, made, now) {
+	if (made.kind === "phrase") return {
+		...records,
+		[made.id]: {
+			...records[made.id],
+			backedUp: now
+		}
+	};
+	const next = { ...records };
+	for (const [id, record] of Object.entries(records)) if (record.funded !== void 0 && record.backedUp === void 0) next[id] = {
+		...record,
+		backedUp: now
+	};
+	return next;
+}
+/** "Later" on a wallet's reminder: put off until the next receive or `LATER_MS`, once; the second ends it. */
+function putOff(records, id, balance, now) {
+	const record = records[id] ?? {};
+	const laters = (record.laters ?? 0) + 1;
+	return {
+		...records,
+		[id]: {
+			...record,
+			laters,
+			later: now,
+			laterBalance: balance.toString()
+		}
+	};
+}
+/** A wallet removed: its reminder goes with it (a new wallet of the kind has a new phrase, and asks again). */
+function forgetWallet(records, id) {
+	if (!(id in records)) return records;
+	const { [id]: _gone, ...rest } = records;
+	return rest;
+}
+//#endregion
+//#region ../browser/src/shared/buttons.ts
+/** The buttons of a message, when it has any. */
+function messageButtons(message) {
+	return message.card?.kind === "buttons" ? message.card : void 0;
+}
+/**
+* Whether a reply's text is a button's label (or id): ignoring case and spaces at the ends, as the sender's rule
+* compares labels when it refuses two a typed answer could not tell apart (`buttonLabelClash`).
+*/
+var sameLabel = sameButtonText;
+/**
+* What a reply presses on the author's side, or nothing: the original is this side's own message with buttons still
+* open, the button is one of them (named by `b`, or, for a reply that lost it on the way (the DHT floor carries a
+* reply's id alone) or came from an app without buttons, a text that is a button's label or id), and the presser has
+* not already answered with a `once` button. A reply naming a button says its label: one whose text is something else
+* ("No" naming `yes`) is only a reply, so what the chat shows and what the author takes never differ. `history`: the chat's rows, the reply itself excluded or not.
+*/
+function buttonPress(reply, original, history) {
+	if (reply.sender !== "peer" || original.sender !== "me" || !reply.replyTo) return void 0;
+	const card = messageButtons(original);
+	if (!card || card.closed) return void 0;
+	const { button, inferred } = repliedButton(card, reply.text, reply.replyTo.button);
+	if (!button) return void 0;
+	if (answered(card, original.id, history.filter((row) => row.id !== reply.id && row.sender === "peer" && row.member === reply.member))) return void 0;
+	return {
+		messageId: original.id,
+		button: button.id,
+		label: button.label,
+		...inferred && { inferred: true }
+	};
+}
+/**
+* The button a reply to a question presses: the one `b` names when the text is its label, or, without `b`, the one
+* whose label or id the text is (`inferred`). The author's rule and the presser's own view both read replies so.
+*/
+function repliedButton(card, text, named) {
+	if (named) return { button: card.buttons.find((b) => b.id === named && sameLabel(b.label, text)) };
+	const button = card.buttons.find((b) => sameLabel(b.label, text) || sameLabel(b.id, text));
+	return button ? {
+		button,
+		inferred: true
+	} : {};
+}
+/** Whether these rows (one person's) already answered the question with a `once` button. */
+function answered(card, messageId, rows) {
+	return rows.some((row) => row.press?.messageId === messageId && !!card.buttons.find((b) => b.id === row.press.button)?.once);
+}
+/**
+* The buttons of a message as the reader's app shows them: which one this side pressed last (from its own replies),
+* and whether it may press again. Closed, or answered with a `once` button: no more presses. `chosen`: the bot's
+* answer when it said one, else this side's own last press. A reply typed in words that is a button's label or id
+* counts as its press, as the author's app takes it (`buttonPress`): "yes" answering a once question answers it here.
+*/
+function buttonsState(message, ref, history) {
+	const card = messageButtons(message);
+	if (!card) return void 0;
+	let mine, last = -Infinity, locked = false;
+	for (const row of history) {
+		if (row.sender !== "me" || !row.replyTo) continue;
+		if (row.replyTo.messageId !== message.id && (!ref || row.replyTo.id !== ref)) continue;
+		const { button } = repliedButton(card, row.text, row.replyTo.button);
+		if (!button) continue;
+		if (button.once) locked = true;
+		if (row.timestamp >= last) {
+			last = row.timestamp;
+			mine = button.id;
+		}
+	}
+	const open = message.sender !== "me" && !card.closed && !locked;
+	return {
+		card,
+		...mine && { mine },
+		...(card.chosen ?? mine) && { chosen: card.chosen ?? mine },
+		open
+	};
+}
 /** The notice an app sends when a chat first goes live (useChat): shown as a line, never edited. */
 var JOIN_NOTICE$1 = /^👋 (?:.+ )?joined$/;
 /** Whether a text reads as a join notice: the chat shows it as a line and takes the contact's name from it. */
@@ -11869,12 +12224,16 @@ function takesPeerEdit(message, text) {
 	return message.sender === "peer" && !message.file && !message.paymentId && !message.event && !message.groupPay && !JOIN_NOTICE$1.test(message.text) && (text === void 0 || !JOIN_NOTICE$1.test(text));
 }
 /**
-* The message after edit `seq`, made at `at`: the new text (and the preview that came with it, or none), the version it
-* replaces kept in the history. A text that did not change adds no version.
+* The message after edit `seq`, made at `at`: the new text (and the preview and the status card that came with it, or
+* none: each belongs to its version), the version it replaces kept in the history. A text that did not change adds no
+* version. A status card's update adds none either (WISP 4xx · Status Cards): it replaces the card in place, and its
+* text is only the card's fallback, so a bot's thousands of updates keep one card and no trail of versions. Buttons
+* (WISP 4xx · Message Buttons) are the exception: their text is the question people answer, so a new one keeps the
+* version it replaces, and only a change of the buttons alone (the answer marked, closed) adds none.
 */
 function withEdit(message, edit) {
 	const before = message.edit?.history ?? [];
-	const history = edit.text === message.text ? before : trimHistory([...before, {
+	const history = edit.text === message.text || edit.card && edit.card.kind !== "buttons" ? before : trimHistory([...before, {
 		at: message.edit?.at ?? message.timestamp,
 		text: message.text
 	}]);
@@ -11884,12 +12243,13 @@ function withEdit(message, edit) {
 		history,
 		...edit.pending && { pending: true }
 	};
-	const { preview: _old, ...rest } = message;
+	const { preview: _old, card: _card, ...rest } = message;
 	return {
 		...rest,
 		text: edit.text,
 		edit: next,
-		...edit.preview && { preview: edit.preview }
+		...edit.preview && { preview: edit.preview },
+		...edit.card && { card: edit.card }
 	};
 }
 function trimHistory(history) {
@@ -11935,6 +12295,8 @@ var Outbox = class {
 	waiting = /* @__PURE__ */ new Map();
 	attempts = /* @__PURE__ */ new Map();
 	busy = /* @__PURE__ */ new Set();
+	/** In flight when the chat reopened (`flush({ reopened })`): sent again on the new link once that send returns. */
+	reopenedWhileBusy = /* @__PURE__ */ new Set();
 	stopped = false;
 	resender;
 	policy;
@@ -11975,6 +12337,7 @@ var Outbox = class {
 	async transmit(id, { manual = false } = {}) {
 		if (this.stopped || this.busy.has(id) || this.receipts.has(id)) return;
 		this.busy.add(id);
+		let again;
 		try {
 			let message = (await this.store.read()).find((m) => m.id === id);
 			if (!message?.wireId || !message.delivery || message.delivery === "delivered") return;
@@ -12013,6 +12376,11 @@ var Outbox = class {
 			await this.requeue(id, error instanceof Error ? error.message : "Sending failed");
 		} finally {
 			this.busy.delete(id);
+			again = this.reopenedWhileBusy.delete(id);
+		}
+		if (again) {
+			const message = (await this.store.read()).find((m) => m.id === id);
+			if (message) await this.again(message);
 		}
 	}
 	/**
@@ -12040,16 +12408,21 @@ var Outbox = class {
 	*/
 	async flush({ reopened = false } = {}) {
 		if (this.stopped || !reopened && !this.waiting.size) return;
-		const due = (await this.store.read()).filter((m) => m.sender === "me" && m.via !== "hold" && (m.delivery === "queued" || m.delivery === "waiting" || reopened && m.delivery === "sent" && this.receipts.has(m.id))).sort((a, b) => a.timestamp - b.timestamp);
-		for (const message of due) {
-			if (message.delivery !== "sent") {
-				await this.attempt(message.id);
-				continue;
-			}
-			this.clear(message.id);
-			if (this.resender.ready(message)) await this.transmit(message.id);
-			else await this.requeue(message.id, "Connection closed before receipt. Delivery is unconfirmed.");
+		if (reopened) for (const id of this.busy) this.reopenedWhileBusy.add(id);
+		const due = (await this.store.read()).filter((m) => m.sender === "me" && m.via !== "hold" && !this.busy.has(m.id) && (m.delivery === "queued" || m.delivery === "waiting" || reopened && m.delivery === "sent" && this.receipts.has(m.id))).sort((a, b) => a.timestamp - b.timestamp);
+		for (const message of due) await this.again(message);
+	}
+	/** A queued or waiting message is looked at; one sent and awaiting its receipt goes again now, if the chat can carry it. */
+	async again(message) {
+		if (message.sender !== "me" || message.via === "hold") return;
+		if (message.delivery === "queued" || message.delivery === "waiting") {
+			await this.attempt(message.id);
+			return;
 		}
+		if (message.delivery !== "sent" || !this.receipts.has(message.id)) return;
+		this.clear(message.id);
+		if (this.resender.ready(message)) await this.transmit(message.id);
+		else await this.requeue(message.id, "Connection closed before receipt. Delivery is unconfirmed.");
 	}
 	async disconnected() {
 		const messages = await this.store.read();
@@ -12064,6 +12437,7 @@ var Outbox = class {
 	}
 	async stop() {
 		this.stopped = true;
+		this.reopenedWhileBusy.clear();
 		for (const wait of this.waiting.values()) if (wait.timer) clearTimeout(wait.timer);
 		this.waiting.clear();
 		await this.disconnected();
@@ -12185,7 +12559,7 @@ var EditQueue = class {
 	* goes again at once, with a fresh count of attempts.
 	*/
 	flush({ reopened = false } = {}) {
-		if (reopened) this.sent.clear();
+		if (reopened) this.reopened();
 		if (this.flushing) {
 			this.again = true;
 			return this.flushing;
@@ -12202,6 +12576,14 @@ var EditQueue = class {
 		})();
 		return this.flushing;
 	}
+	/**
+	* A new session: what the last one sent without a confirmation may go again at once, with a fresh count of attempts.
+	* Said once, as the session opens and before anything goes on it: said again later, it would send a second time what
+	* this session already sent (two flushes of one opening, each starting over, sent a restored question's edit twice).
+	*/
+	reopened() {
+		this.sent.clear();
+	}
 	/** The contact confirmed edit `seq` of my message with this wire id. */
 	async received(wireId, seq) {
 		const row = (await this.deps.read()).find((m) => m.sender === "me" && m.wireId === wireId);
@@ -12258,7 +12640,8 @@ var EditQueue = class {
 				e: edit.seq,
 				ts: edit.at,
 				m: message.text,
-				...message.preview && { pv: message.preview }
+				...message.preview && { pv: message.preview },
+				...message.card && { sc: message.card }
 			}, message)) continue;
 			this.sent.set(message.id, {
 				seq: edit.seq,
@@ -12280,6 +12663,54 @@ var EditQueue = class {
 		}, Math.max(0, at - this.now()));
 	}
 };
+/** A card's updates from someone else are applied (stored, shown) at most once per this long, per message. */
+var CARD_APPLY_GAP_MS = 1e3;
+/**
+* Received status card updates, paced per message (WISP 4xx · Status Cards): the first applies at once, the rest within
+* `CARD_APPLY_GAP_MS` wait, and only the highest edit number of them applies when the time is up. A sender that
+* ignores its own pace costs this side one write and one render a second per card, whatever it sends.
+*/
+var CardEditPacer = class {
+	now;
+	gapMs;
+	slots = /* @__PURE__ */ new Map();
+	constructor(now = Date.now, gapMs = CARD_APPLY_GAP_MS) {
+		this.now = now;
+		this.gapMs = gapMs;
+	}
+	/** Applies edit `e` of the message under `key` now, or later with whatever higher edit comes meanwhile. */
+	async take(key, e, apply) {
+		const slot = this.slots.get(key) ?? { last: 0 };
+		this.slots.set(key, slot);
+		const due = slot.last + this.gapMs - this.now();
+		if (due <= 0 && !slot.timer) {
+			slot.last = this.now();
+			await apply();
+			return;
+		}
+		if (slot.e !== void 0 && slot.e >= e) return;
+		slot.e = e;
+		slot.apply = apply;
+		slot.timer ??= setTimeout(() => {
+			const run = slot.apply;
+			slot.timer = void 0;
+			slot.apply = void 0;
+			slot.e = void 0;
+			slot.last = this.now();
+			run?.().catch(() => {});
+		}, Math.max(0, due));
+		if (this.slots.size > 512) {
+			for (const [k, s] of this.slots) if (!s.timer) {
+				this.slots.delete(k);
+				break;
+			}
+		}
+	}
+	stop() {
+		for (const slot of this.slots.values()) clearTimeout(slot.timer);
+		this.slots.clear();
+	}
+};
 /**
 * The contact's edits of messages not here yet (an edit that overtook its message on another path), per chat: kept
 * `EDIT_BUFFER_MS` at most, the highest number per message, `EDIT_BUFFER_MAX` messages at most.
@@ -12322,13 +12753,6 @@ var UNFINISHED = /* @__PURE__ */ new Set([
 	"submitted",
 	"unknown"
 ]);
-var sats$1 = (n, network) => `${n.toLocaleString("en-US")} ${network === "testnet" ? "test sats" : "sats"}`;
-var known = (amount, network) => ({
-	empty: amount <= 0,
-	text: sats$1(Math.max(0, amount), network)
-});
-/** A self-custodial source keeps its recovery phrase sealed with it (Breez, a BDK wallet): the money is on this device. */
-var phraseHeld = (secrets) => !!secrets?.includes("mnemonic");
 var ITEM = {
 	request: (a) => `A request for ${a} in a chat, still open`,
 	invoice: (a) => `An invoice for ${a}, not paid yet`,
@@ -12336,12 +12760,25 @@ var ITEM = {
 	unclaimed: (a) => `${a} the mint says it issued for an invoice, never received here`,
 	sent: (a) => `${a} in ecash you sent, not taken yet`
 };
-function items(type, network, view, card) {
-	const amount = (n) => type === "usdt" ? `${formatPaymentAmount(String(n), view?.usdt?.decimals ?? 6)} ${network === "testnet" ? "TEST-USDT" : "USDT"}` : sats$1(n, network);
+var ENGLISH_REMOVAL = {
+	sats: (n, network) => `${n.toLocaleString("en-US")} ${network === "testnet" ? "test sats" : "sats"}`,
+	token: (units, decimals, network) => `${formatPaymentAmount(units, decimals)} ${network === "testnet" ? "TEST-USDT" : "USDT"}`,
+	gas: (wei, network) => `${formatPaymentAmount(wei, 18)} ${network === "testnet" ? "test ETH" : "ETH"}`,
+	item: (kind, amount) => ITEM[kind](amount),
+	and: (first, second) => `${first} and ${second}`
+};
+var knownIn = (amount, network, words) => ({
+	empty: amount <= 0,
+	text: words.sats(Math.max(0, amount), network)
+});
+/** A self-custodial source keeps its recovery phrase sealed with it (Breez, a BDK wallet): the money is on this device. */
+var phraseHeld = (secrets) => !!secrets?.includes("mnemonic");
+function items(type, network, view, words, card) {
+	const amount = (n) => type === "usdt" ? words.token(String(n), view?.usdt?.decimals ?? 6, network) : words.sats(n, network);
 	const mine = (view?.awaiting ?? []).filter((a) => a.type === type && (card === void 0 || a.card === void 0 || a.card === card));
 	const item = (a) => ({
 		kind: a.kind,
-		text: ITEM[a.kind](amount(a.amount)),
+		text: words.item(a.kind, amount(a.amount)),
 		amount: amount(a.amount),
 		...a.paymentId ? { paymentId: a.paymentId } : {}
 	});
@@ -12355,12 +12792,13 @@ function items(type, network, view, card) {
 * What removing the `type` wallet of `network` takes away. `intents`: the profile's payments (the wallet view's
 * `intents`). `card`: the Lightning card (absent: the network's default for receiving).
 */
-function walletRemoval(type, network, view, intents = [], card) {
+function walletRemoval(type, network, view, intents = [], card, words = ENGLISH_REMOVAL) {
+	const known = (amount) => knownIn(amount, network, words);
 	const lnCard = type === "lightning" ? view?.lightnings?.find((c) => card === void 0 ? c.receive : c.card === card) : void 0;
 	const base = {
 		type,
 		network,
-		...items(type, network, view, lnCard?.card ?? card),
+		...items(type, network, view, words, lnCard?.card ?? card),
 		...lnCard ? { card: lnCard.card } : card !== void 0 ? { card } : {}
 	};
 	const pending = intents.filter((i) => i.method === type && UNFINISHED.has(i.state) && walletNetworkOf(i.network) === network).length;
@@ -12368,7 +12806,7 @@ function walletRemoval(type, network, view, intents = [], card) {
 		case "cashu": return {
 			...base,
 			custody: "device",
-			held: known(view?.balance ?? 0, network),
+			held: known(view?.balance ?? 0),
 			backup: "tokens",
 			pending
 		};
@@ -12378,7 +12816,7 @@ function walletRemoval(type, network, view, intents = [], card) {
 			if (!ln?.providerId || ln.providerId === "cashu-mint") return {
 				...base,
 				custody: "elsewhere",
-				held: known(0, network),
+				held: known(0),
 				backup: "none",
 				pending: 0,
 				...others ? {} : { comesWith: "cashu" },
@@ -12389,7 +12827,7 @@ function walletRemoval(type, network, view, intents = [], card) {
 			return {
 				...base,
 				custody: device ? "device" : "elsewhere",
-				held: ln.status === "ready" && ln.balance !== void 0 ? known(ln.balance, network) : device ? "unknown" : known(0, network),
+				held: ln.status === "ready" && ln.balance !== void 0 ? known(ln.balance) : device ? "unknown" : known(0),
 				backup: "none",
 				pending
 			};
@@ -12400,7 +12838,7 @@ function walletRemoval(type, network, view, intents = [], card) {
 			return {
 				...base,
 				custody: device ? "device" : "elsewhere",
-				held: bt?.status === "ready" ? known(total, network) : device ? "unknown" : known(0, network),
+				held: bt?.status === "ready" ? known(total) : device ? "unknown" : known(0),
 				backup: "none",
 				pending
 			};
@@ -12410,7 +12848,7 @@ function walletRemoval(type, network, view, intents = [], card) {
 			return {
 				...base,
 				custody: "device",
-				held: open ? known(ark.balance + (ark.recoverable ?? 0) + (ark.incoming ?? 0), network) : "unknown",
+				held: open ? known(ark.balance + (ark.recoverable ?? 0) + (ark.sweeping ?? 0) + (ark.small ?? 0) + (ark.incoming ?? 0)) : "unknown",
 				backup: "phrase",
 				pending
 			};
@@ -12420,7 +12858,7 @@ function walletRemoval(type, network, view, intents = [], card) {
 			return {
 				...base,
 				custody: "device",
-				held: open ? known(bark.balance, network) : "unknown",
+				held: open ? known(bark.balance) : "unknown",
 				backup: "phrase",
 				pending
 			};
@@ -12430,7 +12868,7 @@ function walletRemoval(type, network, view, intents = [], card) {
 			return {
 				...base,
 				custody: "device",
-				held: open ? known(spark.balance, network) : "unknown",
+				held: open ? known(spark.balance) : "unknown",
 				backup: "phrase",
 				pending
 			};
@@ -12441,7 +12879,7 @@ function walletRemoval(type, network, view, intents = [], card) {
 			return {
 				...base,
 				custody: "device",
-				held: open ? known(fm?.balance ?? 0, network) : "unknown",
+				held: open ? known(fm?.balance ?? 0) : "unknown",
 				backup: "phrase",
 				pending
 			};
@@ -12456,14 +12894,14 @@ function walletRemoval(type, network, view, intents = [], card) {
 				pending
 			};
 			const token = BigInt(usdt.balance || "0"), gas = BigInt(usdt.gasBalance || "0");
-			const test = network === "testnet";
-			const parts = [...token > 0n || gas === 0n ? [`${formatPaymentAmount(usdt.balance || "0", usdt.decimals ?? 6)} ${test ? "TEST-USDT" : "USDT"}`] : [], ...gas > 0n ? [`${formatPaymentAmount(usdt.gasBalance, 18)} ${test ? "test ETH" : "ETH"}`] : []];
+			const held = token > 0n || gas === 0n ? words.token(usdt.balance || "0", usdt.decimals ?? 6, network) : void 0;
+			const fuel = gas > 0n ? words.gas(usdt.gasBalance, network) : void 0;
 			return {
 				...base,
 				custody: "device",
 				held: {
 					empty: token === 0n && gas === 0n,
-					text: parts.join(" and ")
+					text: held && fuel ? words.and(held, fuel) : held ?? fuel
 				},
 				backup: "phrase",
 				pending
@@ -12565,9 +13003,13 @@ function walletAwaiting({ network, mints, quotes, lightningOps, lightningSource,
 			...type === "lightning" ? onCard(cardOf.get(p.id)) : {}
 		});
 	}
+	const paid = payments.filter((p) => p.kind === "request" && p.direction === "out" && p.state === "settled");
+	const paidIds = new Set(paid.map((p) => p.id));
+	const paidInvoices = new Set(paid.filter((p) => p.invoice).map((p) => invoiceKey(p.invoice)));
+	const answered = (x, owner) => owner !== void 0 && paidIds.has(owner) || paidInvoices.has(invoiceKey(x.invoice));
 	for (const q of openQuotes) {
 		const owner = ownerOf(q);
-		if (!owner || !requests.has(owner)) out.push({
+		if ((!owner || !requests.has(owner)) && !answered(q, owner)) out.push({
 			type: "cashu",
 			kind: "invoice",
 			amount: q.amount,
@@ -12576,7 +13018,7 @@ function walletAwaiting({ network, mints, quotes, lightningOps, lightningSource,
 	}
 	for (const op of openOps) {
 		const owner = ownerOf(op);
-		if (!owner || !requests.has(owner)) out.push({
+		if ((!owner || !requests.has(owner)) && !answered(op, owner)) out.push({
 			type: "lightning",
 			kind: "invoice",
 			amount: op.amount,
@@ -12605,6 +13047,23 @@ function walletAwaiting({ network, mints, quotes, lightningOps, lightningSource,
 	}
 	return out;
 }
+/**
+* What one Cashu mint still waits for: its invoices not paid yet, paid ones whose ecash is not claimed, and requests
+* of ours whose invoice is one of them. A request other mints or rails can still be paid through is not counted, nor
+* ecash sent from it (adding the mint again takes that back).
+*/
+function mintAwaiting(mint, sources) {
+	const key = (invoice) => invoice.trim().toLowerCase();
+	const invoices = new Set(sources.quotes.filter((q) => q.mint === mint).map((q) => key(q.invoice)));
+	const invoiceOf = new Map(sources.payments.map((p) => [p.id, p.invoice]));
+	const ours = (a) => a.kind !== "request" || !!a.paymentId && invoices.has(key(invoiceOf.get(a.paymentId) ?? ""));
+	return walletAwaiting({
+		...sources,
+		mints: [mint],
+		lightningOps: [],
+		lightningSource: "none"
+	}).filter((a) => a.type === "cashu" && a.kind !== "sent" && ours(a));
+}
 //#endregion
 //#region ../browser/src/engine/paymentAdapters/testCoins.ts
 /**
@@ -12940,7 +13399,16 @@ function note(message, by, emoji, at) {
 		by,
 		emoji,
 		snippet: replySnippet(message.text),
-		mine: message.sender === "me"
+		mine: message.sender === "me",
+		message: message.id
+	};
+}
+/** The note again after its message changed (an edit): its line is the message's text now. Undefined when nothing changed. */
+function noteAfterChange(current, message) {
+	const snippet = replySnippet(message.text);
+	return snippet === current.snippet ? void 0 : {
+		...current,
+		snippet
 	};
 }
 /**
@@ -13230,6 +13698,12 @@ var BEACON_RETRY_MS = 5e3;
 /** An admission's links keep looking fast (see `keepLooking`), renewed this often, an edge for this long. */
 var REARM_MS = 2e4;
 var AWAIT_EDGE_MS = 12e4;
+/**
+* After a restart, the edges of the last run stay open this long, whatever the topology picks at first: the members
+* and hubs at their other ends watch for this app to come back (a member keeps a hub that went away `hubWaitMs`, a
+* hub its members a minute, another hub three), and the app dials those that were live once at start (`resume`).
+*/
+var RESTORED_EDGE_MS = 6e4;
 /** After letting someone in, the door keeps its reads at the admitting pace this long. */
 var ADMITTED_QUIET_MS = 3e4;
 var MAX_PENDING_ENTRIES$1 = 8;
@@ -13270,6 +13744,8 @@ var Communities = class {
 	stored = /* @__PURE__ */ new Map();
 	live = /* @__PURE__ */ new Map();
 	lastMessageAt = /* @__PURE__ */ new Map();
+	/** The latest message from another member, per group: what makes it unread in the list. */
+	lastPeerMessageAt = /* @__PURE__ */ new Map();
 	lastMentionAt = /* @__PURE__ */ new Map();
 	refused = /* @__PURE__ */ new Map();
 	lastKnock = /* @__PURE__ */ new Map();
@@ -13317,11 +13793,15 @@ var Communities = class {
 		for (const group of groups) {
 			this.stored.set(group.id, group);
 			if (group.community) this.attach(group.community);
-			const history = await this.store.getMessages(MESSAGE_LINK$1(group.id)), last = history[history.length - 1];
+			const history = await this.store.getMessages(MESSAGE_LINK$1(group.id)), said = history.filter((m) => !m.event && !m.groupPay);
+			const last = said[said.length - 1], lastPeer = [...said].reverse().find((m) => m.sender !== "me");
 			if (last) this.lastMessageAt.set(group.id, last.timestamp);
+			if (lastPeer) this.lastPeerMessageAt.set(group.id, lastPeer.timestamp);
 			const mention = [...history].reverse().find((m) => m.mentioned);
 			if (mention) this.lastMentionAt.set(group.id, mention.timestamp);
 			for (const [, linkId] of this.host.entries(group.id)) if (group.joining?.linkId !== linkId) await this.host.closeEdge(linkId);
+			const live = this.live.get(group.id);
+			if (live) for (const key of this.host.edges(group.id).keys()) live.restored.set(key, 0);
 		}
 	}
 	/** A community as kept here, to change in place and save (`Groups.setPin`). */
@@ -13336,6 +13816,7 @@ var Communities = class {
 				profile: "community",
 				createdAt: group.createdAt,
 				lastMessageAt: this.lastMessageAt.get(group.id) ?? 0,
+				...peerMessageAt(this.lastPeerMessageAt, group.id),
 				...mentionAt(this.lastMentionAt, group.id),
 				invited: [],
 				memberLinks: {}
@@ -13454,10 +13935,10 @@ var Communities = class {
 		traceJoin(link.g, "join.start");
 		this.knock(group, since).catch(() => {});
 	}
-	async send(groupId, text, mentions = [], reply, forwarded) {
+	async send(groupId, text, mentions = [], reply, forwarded, card) {
 		const live = this.live.get(groupId);
 		if (!live) return { error: "You are not in this group yet" };
-		const result = await live.session.sendText(text, this.host.myNick?.(), Date.now(), mentions, reply, forwarded);
+		const result = card ? await live.session.sendText(text, this.host.myNick?.(), Date.now(), mentions, reply, forwarded, card) : await live.session.sendText(text, this.host.myNick?.(), Date.now(), mentions, reply, forwarded);
 		return "error" in result ? { error: result.error } : {
 			error: null,
 			messageId: result.id
@@ -13479,7 +13960,8 @@ var Communities = class {
 			v: edit.e,
 			ts: edit.ts,
 			text: edit.m,
-			mentions: edit.k
+			mentions: edit.k,
+			...edit.sc && { card: edit.sc }
 		}, this.host.myNick?.());
 		if ("error" in result) return result.error;
 		const key = editKey(edit.id, edit.e);
@@ -13578,9 +14060,11 @@ var Communities = class {
 		this.live.delete(groupId);
 		this.stored.delete(groupId);
 		this.lastMessageAt.delete(groupId);
+		this.lastPeerMessageAt.delete(groupId);
 		this.lastMentionAt.delete(groupId);
 		for (const linkId of [...this.host.edges(groupId).values(), ...this.host.entries(groupId).values()]) await this.host.closeEdge(linkId);
 		await this.store.deleteGroup(groupId);
+		this.host.historyGone?.(groupId);
 		this.host.emit();
 	}
 	require(groupId) {
@@ -13644,7 +14128,7 @@ var Communities = class {
 						live.hubSince = now;
 						live.emptySince = now;
 						live.knocksScanned = false;
-						await this.publishBeacon(groupId, live, now, true);
+						await this.publishBeacon(groupId, live, now, true).catch(() => {});
 						traceJoin(groupId, "hub.elected");
 					}
 				}
@@ -13658,7 +14142,7 @@ var Communities = class {
 				live.hub = false;
 				await this.closeEntries(groupId);
 				await this.publishBeacon(groupId, live, now, false);
-			} else if (now - live.lastBeaconTry < BEACON_RETRY_MS) {} else if (now - live.lastBeaconWrite >= COMMUNITY_TOPOLOGY.beaconEveryMs || !live.beacon.some((h) => h.key === me) || now - live.lastBeaconWrite >= 5e3 && Math.abs(this.beaconLoad(groupId, live, now) - (live.beacon.find((h) => h.key === me)?.load ?? load)) >= 8) await this.publishBeacon(groupId, live, now, true);
+			} else if (now - live.lastBeaconTry < BEACON_RETRY_MS) {} else if (now - live.lastBeaconWrite >= COMMUNITY_TOPOLOGY.beaconEveryMs || !live.beacon.some((h) => h.key === me) || now - live.lastBeaconWrite >= 5e3 && Math.abs(this.beaconLoad(groupId, live, now) - (live.beacon.find((h) => h.key === me)?.load ?? load)) >= 8) await this.publishBeacon(groupId, live, now, true).catch(() => {});
 		}
 		if (live.hub) {
 			const busy = this.admitting(groupId, live, now);
@@ -13680,16 +14164,13 @@ var Communities = class {
 					live.hubsUp.add(key);
 					continue;
 				}
-				if (live.hubsUp.delete(key)) {
-					live.hubsAvoided.set(key, now + 2 * this.timings.hubWaitMs);
-					live.hubWaits.delete(key);
-					continue;
-				}
 				const since = live.hubWaits.get(key) ?? now;
 				live.hubWaits.set(key, since);
-				if (now - since > this.timings.hubWaitMs) {
+				const back = live.hubsUp.has(key) && !!id && !!this.host.linkBack?.(id);
+				if (now - since > (back ? 3 : 1) * this.timings.hubWaitMs) {
 					live.hubsAvoided.set(key, now + 2 * this.timings.hubWaitMs);
 					live.hubWaits.delete(key);
+					live.hubsUp.delete(key);
 				}
 			}
 			let kept = live.myHubs.filter((key) => (fresh.has(key) || this.recentHub(live, key)) && !live.hubsAvoided.has(key));
@@ -13877,6 +14358,11 @@ var Communities = class {
 			} else for (const key of live.myHubs) wanted.add(key);
 			for (const [key, id] of existing) if (this.host.linkReady(id, 2) && (live.members.has(key) || this.recentHub(live, key))) wanted.add(key);
 		}
+		for (const [key, since] of live.restored) {
+			if (!since) live.restored.set(key, now);
+			if (!existing.has(key) || now - (since || now) >= RESTORED_EDGE_MS || s.wasRemoved(key)) live.restored.delete(key);
+			else wanted.add(key);
+		}
 		for (const [key, id] of existing) if (!wanted.has(key)) await this.host.closeEdge(id);
 		for (const key of wanted) if (!existing.has(key) && key !== s.myKey) {
 			const expect = live.expect.delete(key);
@@ -13925,7 +14411,7 @@ var Communities = class {
 			g: groupId,
 			host: s.entryKey
 		};
-		const hubs = doorHubs(live.beacon, now);
+		const hubs = doorHubs(live.beacon, now, s.myKey);
 		if (!hubs.includes(s.myKey)) return;
 		const door = [...hubs].sort()[0], doorSig = [...hubs].sort().join(",");
 		if (live.doors !== doorSig) {
@@ -13963,7 +14449,7 @@ var Communities = class {
 			});
 			if (live.knocksSeen.get(key).changed && now - ts > 15e3) continue;
 			const waited = now - first, order = [door, ...rankHubs(key, hubs.filter((k) => k !== door))];
-			const turn = Math.floor(waited / KNOCK_SLOT_MS) % order.length, early = waited % KNOCK_SLOT_MS < KNOCK_SLOT_OPEN_MS;
+			const turn = Math.floor(waited / KNOCK_SLOT_MS) % order.length, early = order.length === 1 || waited % KNOCK_SLOT_MS < KNOCK_SLOT_OPEN_MS;
 			if (order[turn] !== s.myKey || !early || waited >= KNOCK_SLOT_MS && !stillKnocking) continue;
 			if (live.pendingEntries.size >= MAX_PENDING_ENTRIES$1) break;
 			if (live.members.size >= this.capacity(groupId, live, now)) break;
@@ -14000,7 +14486,7 @@ var Communities = class {
 		const joining = group.joining;
 		const first = !this.lastKnock.has(group.id);
 		this.lastKnock.set(group.id, now);
-		if (!first && now - joining.since < this.timings.patienceMs) this.host.expectPeer?.(joining.linkId);
+		if (first || now - joining.since < this.timings.patienceMs) this.host.expectPeer?.(joining.linkId);
 		const me = identityFromSeedB64(joining.seedB64).pubKeyZ32, link = {
 			g: group.id,
 			host: joining.host
@@ -14241,8 +14727,7 @@ var Communities = class {
 			message: async (m) => {
 				const timestamp = receivedTimestamp(m.timestamp);
 				const mentioned = m.sender !== session.myKey && mentionsMember(m.mentions, session.myKey);
-				if (mentioned) this.lastMentionAt.set(id, Math.max(this.lastMentionAt.get(id) ?? 0, timestamp));
-				await this.host.storeMessage({
+				const stored = await this.host.storeMessage({
 					linkId: MESSAGE_LINK$1(id),
 					id: m.id,
 					text: m.text,
@@ -14252,9 +14737,13 @@ var Communities = class {
 					via: "datalink",
 					...mentionFields(m.mentions, mentioned),
 					...m.reply && { replyTo: groupReply(m.reply, session.myKey) },
-					...m.forwarded && { forwarded: m.forwarded }
+					...m.forwarded && { forwarded: m.forwarded },
+					...m.card && { card: m.card }
 				});
 				this.lastMessageAt.set(id, Math.max(this.lastMessageAt.get(id) ?? 0, timestamp));
+				const came = cameAt(timestamp, stored, this.now());
+				if (mentioned) this.lastMentionAt.set(id, Math.max(this.lastMentionAt.get(id) ?? 0, came));
+				if (m.sender !== session.myKey) this.lastPeerMessageAt.set(id, Math.max(this.lastPeerMessageAt.get(id) ?? 0, came));
 			},
 			app: (m) => this.deliver(id, () => this.host.communityApp?.(id, m.sender, m.frame)),
 			pair: (m) => this.deliver(id, () => this.host.communityPair?.(id, m.sender, m.payload)),
@@ -14296,6 +14785,7 @@ var Communities = class {
 			hubsUp: /* @__PURE__ */ new Set(),
 			lingering: /* @__PURE__ */ new Map(),
 			seenHubs: /* @__PURE__ */ new Map(),
+			restored: /* @__PURE__ */ new Map(),
 			knocksScanned: false,
 			knockCursor: 0,
 			lastShardPoll: 0,
@@ -14952,6 +15442,16 @@ var GroupTypings = class {
 };
 //#endregion
 //#region ../browser/src/engine/groups.ts
+/** What the engine gives the groups: its links, its storage and its state emitter. */
+/**
+* `GroupsHost.linkSeen`: a connection with the other end is under way, or its packet is at most `EXPECT_PEER_MS` old
+* (its offer follows it). Its presence alone lasts `PRESENCE_WINDOW`, 10 minutes: a hub closes an entry session it gave
+* up on without a last packet, and a joiner back after a restart took that packet for a member answering, stopped
+* knocking, and stayed "invited" for 10 minutes (2026-09-30).
+*/
+function otherEndSeen(presence, dataLink, now = Date.now()) {
+	return !!dataLink && dataLink !== "idle" || !!presence?.online && now - presence.lastPacketAt < 3e4;
+}
 /** The key an edit of message `id` goes by in `FramesTaken`. */
 var editKey = (id, e) => `${id}#e${e}`;
 /**
@@ -14980,6 +15480,18 @@ var mentionAt = (map, groupId) => {
 	const at = map.get(groupId);
 	return at ? { lastMentionAt: at } : {};
 };
+/**
+* When a member's message counts as having come, for unread and the "@": when it reached me, if that is later than
+* when it was written (a catch-up from another member, a member back after a while). Written before I last looked at
+* the group but handed to me since, it is news here; by its own time it sorted among what I had read, and the group
+* never showed unread. A copy I had already (`stored` false) or one completed in place keeps its own time.
+*/
+var cameAt = (timestamp, stored, now) => stored === false ? timestamp : Math.max(timestamp, now);
+/** The view's `lastPeerMessageAt`, when there is one. */
+var peerMessageAt = (map, groupId) => {
+	const at = map.get(groupId);
+	return at ? { lastPeerMessageAt: at } : {};
+};
 var ENTRY_TIMINGS = {
 	pollMs: 5e3,
 	warmPollMs: 2e3,
@@ -15067,6 +15579,8 @@ var Groups = class {
 	/** Each group's status and newest commit as its history last said them: a line per change of either, never one again. */
 	lastTold = /* @__PURE__ */ new Map();
 	lastMessageAt = /* @__PURE__ */ new Map();
+	/** The latest message from another member, per group: what makes it unread in the list. */
+	lastPeerMessageAt = /* @__PURE__ */ new Map();
 	/** The latest message that names me, per group (the chat list's "@" while it is unread). */
 	lastMentionAt = /* @__PURE__ */ new Map();
 	reconciling = Promise.resolve();
@@ -15134,8 +15648,10 @@ var Groups = class {
 		for (const group of all.filter((g) => !g.community && !g.joining)) {
 			this.stored.set(group.id, group);
 			if (group.state) this.attach(group.state);
-			const history = await this.store.getMessages(MESSAGE_LINK(group.id)), last = history[history.length - 1];
+			const history = await this.store.getMessages(MESSAGE_LINK(group.id)), said = history.filter((m) => !m.event && !m.groupPay);
+			const last = said[said.length - 1], lastPeer = [...said].reverse().find((m) => m.sender !== "me");
 			if (last) this.lastMessageAt.set(group.id, last.timestamp);
+			if (lastPeer) this.lastPeerMessageAt.set(group.id, lastPeer.timestamp);
 			const mention = [...history].reverse().find((m) => m.mentioned);
 			if (mention) this.lastMentionAt.set(group.id, mention.timestamp);
 		}
@@ -15177,6 +15693,7 @@ var Groups = class {
 				profile: "mesh",
 				createdAt: group.createdAt,
 				lastMessageAt: this.lastMessageAt.get(group.id) ?? 0,
+				...peerMessageAt(this.lastPeerMessageAt, group.id),
 				...mentionAt(this.lastMentionAt, group.id),
 				invited: [...this.invited.get(group.id) ?? []],
 				memberLinks: Object.fromEntries(contacts.map(([key, linkId]) => [linkId, key]))
@@ -15208,9 +15725,11 @@ var Groups = class {
 			const hubKeys = new Set(onHubs ? this.hubs.hubs(group.id, session, now) : []), policy = session.hubPolicy;
 			if (onHubs && this.hubs.isHub(group.id)) hubKeys.add(session.myKey);
 			const typing = this.typings.view(session);
+			const former = Object.entries(nicks).filter(([key]) => !rosterHas(session.roster, key));
 			return {
 				...base,
 				name: session.name,
+				...former.length ? { formerNames: Object.fromEntries(former) } : {},
 				status: session.status,
 				statusReason: session.state.statusReason,
 				epoch: session.epoch,
@@ -15292,7 +15811,8 @@ var Groups = class {
 			v: edit.e,
 			ts: edit.ts,
 			text: edit.m,
-			mentions: edit.k
+			mentions: edit.k,
+			...edit.sc && { card: edit.sc }
 		}, to);
 		return "error" in result ? result.error : null;
 	}
@@ -15365,13 +15885,13 @@ var Groups = class {
 	}
 	/**
 	* Sends a text; `messageId` is the id it is kept under here (what history, replies and reactions name). `forwarded`:
-	* the hop count of a forwarded text (WISP 9xx § Forwards).
+	* the hop count of a forwarded text (WISP 9xx § Forwards). `card`: a checked status card, the text its fallback.
 	*/
-	async send(groupId, text, mentions = [], reply, forwarded) {
-		if (this.isCommunity(groupId)) return this.communities.send(groupId, text, mentions, reply, forwarded);
+	async send(groupId, text, mentions = [], reply, forwarded, card) {
+		if (this.isCommunity(groupId)) return card ? this.communities.send(groupId, text, mentions, reply, forwarded, card) : this.communities.send(groupId, text, mentions, reply, forwarded);
 		const session = this.sessions.get(groupId);
 		if (!session) return { error: "You are not in this group yet" };
-		const result = await session.sendText(text, Date.now(), mentions, reply, forwarded);
+		const result = card ? await session.sendText(text, Date.now(), mentions, reply, forwarded, card) : await session.sendText(text, Date.now(), mentions, reply, forwarded);
 		this.typings.say(session, false);
 		return "error" in result ? { error: result.error } : {
 			error: null,
@@ -15438,9 +15958,11 @@ var Groups = class {
 		this.invited.delete(groupId);
 		this.pendingEntries.delete(groupId);
 		this.lastMessageAt.delete(groupId);
+		this.lastPeerMessageAt.delete(groupId);
 		this.lastMentionAt.delete(groupId);
 		await this.store.deleteGroup(groupId);
 		await this.store.putGroup(group);
+		this.host.historyGone?.(groupId);
 		for (const linkId of this.host.entries(groupId).values()) await this.host.closeEdge(linkId);
 		this.host.emit();
 		await session.leave();
@@ -15524,6 +16046,7 @@ var Groups = class {
 		this.hereActed.delete(groupId);
 		for (const linkId of [...this.host.edges(groupId).values(), ...this.host.entries(groupId).values()]) await this.host.closeEdge(linkId);
 		await this.store.deleteGroup(groupId);
+		this.host.historyGone?.(groupId);
 		this.host.membersChanged?.(groupId);
 		this.host.emit();
 	}
@@ -16224,7 +16747,6 @@ var Groups = class {
 			message: async (m) => {
 				const timestamp = receivedTimestamp(m.timestamp);
 				const mentioned = m.sender !== session.myKey && mentionsMember(m.mentions, session.myKey);
-				if (mentioned) this.lastMentionAt.set(state.id, Math.max(this.lastMentionAt.get(state.id) ?? 0, timestamp));
 				const message = {
 					linkId: MESSAGE_LINK(state.id),
 					id: m.id,
@@ -16235,10 +16757,14 @@ var Groups = class {
 					via: "datalink",
 					...mentionFields(m.mentions, mentioned),
 					...m.reply && { replyTo: groupReply(m.reply, session.myKey) },
-					...m.forwarded && { forwarded: m.forwarded }
+					...m.forwarded && { forwarded: m.forwarded },
+					...m.card && { card: m.card }
 				};
-				await (m.completes && this.host.completeMessage ? this.host.completeMessage(message) : this.host.storeMessage(message));
+				const stored = m.completes && this.host.completeMessage ? (await this.host.completeMessage(message), false) : await this.host.storeMessage(message);
 				this.lastMessageAt.set(state.id, Math.max(this.lastMessageAt.get(state.id) ?? 0, timestamp));
+				const came = cameAt(timestamp, stored, this.now());
+				if (mentioned) this.lastMentionAt.set(state.id, Math.max(this.lastMentionAt.get(state.id) ?? 0, came));
+				if (m.sender !== session.myKey) this.lastPeerMessageAt.set(state.id, Math.max(this.lastPeerMessageAt.get(state.id) ?? 0, came));
 				this.typings.messageFrom(state.id, m.sender);
 			},
 			edit: (e) => this.host.groupEdit?.(state.id, e),
@@ -16352,8 +16878,14 @@ var Groups = class {
 * An edge of a group as the group page shows it (WISP 9xx § Mesh): open means group frames flow, which
 * is what "reachable" means everywhere else in groups; what carries it; when the member was last heard.
 */
-function edgeView(live, now = Date.now()) {
+function edgeView(live, now = Date.now(), noSlot = false) {
 	const open = !!live.link?.groupsSupport;
+	if (!open && noSlot) return {
+		linkId: live.stored.id,
+		state: "waiting",
+		noSlot: true,
+		lastSeenAt: Math.max(live.presence.lastPacketAt, live.lastSyncAt)
+	};
 	const error = open ? void 0 : live.pairing?.status === "error" ? live.pairing.error : live.discoveryError;
 	const state = open ? "open" : error ? "error" : live.dataLink !== "idle" ? "connecting" : "waiting";
 	return {
@@ -16686,6 +17218,8 @@ var GroupEdits = class {
 	host;
 	now;
 	buffer;
+	/** Members' status card updates, applied at most once a second per message (WISP 4xx · Status Cards). */
+	cards;
 	sendPace = /* @__PURE__ */ new Map();
 	receivePace = /* @__PURE__ */ new Map();
 	timers = /* @__PURE__ */ new Map();
@@ -16695,12 +17229,14 @@ var GroupEdits = class {
 		this.host = host;
 		this.now = host.now ?? Date.now;
 		this.buffer = new EditBuffer(this.now);
+		this.cards = new CardEditPacer(this.now);
 	}
 	/**
 	* Edits a text of mine in a group: the new text here at once, and to the group as soon as the pace allows. Mentions
-	* the message had stay where their words still are; `added` are those picked while editing.
+	* the message had stay where their words still are; `added` are those picked while editing. `card`: the status card
+	* of the new version, already checked (WISP 4xx · Status Cards); a card message then takes `STATUS_CARD_LIMITS.edits`.
 	*/
-	async edit(groupId, messageId, raw, added = []) {
+	async edit(groupId, messageId, raw, added = [], card) {
 		const refuse = (error) => ({
 			error,
 			refused: true
@@ -16716,23 +17252,25 @@ var GroupEdits = class {
 		if (isJoinNotice(text)) return refuse("An edit cannot read as a join notice.");
 		if (utf8Encode(text).length > 16384) return refuse(`Message exceeds ${GROUP_EDIT_TEXT_BYTES} UTF-8 bytes.`);
 		const mentions = carryMentions(message, text, Array.isArray(added) ? added : [], !membership.community && !!membership.admin);
-		if (text === message.text && JSON.stringify(mentions) === JSON.stringify(message.mentions ?? [])) return {
+		if (text === message.text && JSON.stringify(mentions) === JSON.stringify(message.mentions ?? []) && JSON.stringify(card ?? null) === JSON.stringify(message.card ?? null)) return {
 			error: null,
 			messageId
 		};
-		const seq = (message.edit?.seq ?? 0) + 1;
-		if (seq > 100) return refuse(`This message was edited 100 times, the most one takes.`);
+		const seq = (message.edit?.seq ?? 0) + 1, most = card ? STATUS_CARD_LIMITS.edits : 100;
+		if (seq > most) return refuse(`This message was edited ${most} times, the most one takes.`);
 		const at = this.now();
 		await this.host.patch(chat, messageId, (current) => {
 			const next = withEdit(current, {
 				seq,
 				at,
 				text,
+				card,
 				pending: true
 			});
 			return {
 				text: next.text,
 				edit: next.edit,
+				card: next.card,
 				mentions: mentions.length ? mentions : void 0
 			};
 		});
@@ -16775,7 +17313,8 @@ var GroupEdits = class {
 				e: edit.seq,
 				ts: edit.at,
 				m: message.text,
-				...message.mentions?.length && { k: message.mentions }
+				...message.mentions?.length && { k: message.mentions },
+				...message.card && { sc: message.card }
 			})) {
 				retry = Math.min(retry, RETRY_MS);
 				continue;
@@ -16817,6 +17356,12 @@ var GroupEdits = class {
 			});
 			return "waiting";
 		}
+		if (edit.sc && message.member === sender && (message.edit?.seq ?? 0) < edit.e) {
+			await this.cards.take(`${chat}\n${message.id}`, edit.e, async () => {
+				await this.apply(chat, membership.me, sender, message, edit);
+			});
+			return "applied";
+		}
 		return this.apply(chat, membership.me, sender, message, edit);
 	}
 	/** A member's message was stored: an edit that came before it is shown now. */
@@ -16835,11 +17380,13 @@ var GroupEdits = class {
 			const next = withEdit(current, {
 				seq: edit.e,
 				at: receivedTimestamp(edit.ts),
-				text: edit.m
+				text: edit.m,
+				card: edit.sc
 			});
 			return {
 				text: next.text,
 				edit: next.edit,
+				card: next.card,
 				mentions: edit.k?.length ? edit.k : void 0,
 				mentioned: mentionsMember(edit.k, me) ? true : void 0
 			};
@@ -16855,7 +17402,8 @@ var GroupEdits = class {
 			e: m.edit.seq,
 			ts: m.edit.at,
 			m: m.text,
-			...m.mentions?.length && { k: m.mentions }
+			...m.mentions?.length && { k: m.mentions },
+			...m.card && { sc: m.card }
 		}, to);
 	}
 	forget(groupId) {
@@ -16865,6 +17413,7 @@ var GroupEdits = class {
 	}
 	stop() {
 		this.stopped = true;
+		this.cards.stop();
 		for (const timer of this.timers.values()) clearTimeout(timer);
 		this.timers.clear();
 	}
@@ -17645,6 +18194,20 @@ var HoldEngine = class {
 			if (entry.state === "held") await this.publishPointer(linkId, true).catch(() => {});
 		});
 	}
+	/**
+	* "Clear all data": stops, then deletes every item held in storage for every contact, and each chat's manifest. A
+	* contact that still has the pointer finds nothing behind it. Nothing is written back to the chats: they go next.
+	*/
+	async withdrawAll() {
+		await this.stop();
+		const storage = this.host.storage();
+		if (!storage) return;
+		const names = this.host.linkIds().flatMap((linkId) => {
+			const hold = this.state(linkId);
+			return [...hold.outbox.map((entry) => entry.name), ...hold.mailbox ? [manifestName(storage.space, hold.mailbox)] : []];
+		});
+		await Promise.allSettled(names.map((name) => storage.store.remove(name)));
+	}
 	forgetLink(linkId) {
 		this.keyCache.delete(linkId);
 		this.lastPoll.delete(linkId);
@@ -18182,6 +18745,47 @@ var TransportLog = class {
 		}
 	}
 	/**
+	* When the chat was last live, as far as the history tells: the latest time a live stretch began, moved or ended.
+	* 0 when it never was.
+	*/
+	get lastLiveAt() {
+		for (let i = this.history.length - 1; i >= 0; i--) {
+			const e = this.history[i];
+			if (e.kind === "down" && e.restart) continue;
+			if (e.kind === "live" || e.kind === "switched" || e.kind === "down") return e.at;
+		}
+		return 0;
+	}
+	/**
+	* When the live stretch `liveAtLastRun` names began: a contact's offer from before it set that session up (or an
+	* older one) and is not answered after a restart (`GhostLinkOptions.resumeFloor`). None when the history ends off live.
+	*/
+	get liveSinceAtLastRun() {
+		for (let i = this.history.length - 1; i >= 0; i--) {
+			const e = this.history[i];
+			if (e.kind === "live") return e.at;
+			if (e.kind === "down" || e.kind === "dht-only") return void 0;
+		}
+	}
+	/**
+	* This run has lasted past the contact's liveness bound, and the chat was never live in it: the session it was live
+	* in when the app last ran is gone on the contact's side too. The history says so, and the next start no longer
+	* takes the chat for "live at last run" and knocks: before, a contact that never came back was knocked on at every
+	* start, run after run (all ten chats of the #966 repro). Written during the run, not as it ends: a page reload or a
+	* crash records nothing then. This run's own knock already went; only the next start reads it. True when written.
+	*/
+	notBackAfterRestart(now) {
+		const from = this.seenLive ? void 0 : this.liveAtLastRun;
+		if (!from) return false;
+		this.event({
+			at: now,
+			kind: "down",
+			from,
+			restart: true
+		});
+		return true;
+	}
+	/**
 	* The choice `by` last made, as the rows tell it: the transport of its latest choice (a `chose` row, or the switch
 	* that choice became), `automatic` when that was going back to the app's rule or there is none.
 	*/
@@ -19066,10 +19670,10 @@ function normalizeMintUrl(input) {
 	try {
 		url = new URL(input.trim());
 	} catch {
-		throw new Error("That is not a valid mint URL");
+		throw engineError("invalidMintUrl");
 	}
 	const local = url.hostname === "localhost" || url.hostname === "127.0.0.1";
-	if (url.protocol !== "https:" && !(local && url.protocol === "http:")) throw new Error("Mints must use https");
+	if (url.protocol !== "https:" && !(local && url.protocol === "http:")) throw engineError("mintNotHttps");
 	return `${url.origin}${url.pathname.replace(/\/+$/, "")}`;
 }
 function assertAmount(amount) {
@@ -19100,6 +19704,8 @@ var walletTx = (mint, kind, amount, fee, note) => ({
 	fee: Math.max(0, fee),
 	note: note?.slice(0, 140)
 });
+/** What a failed payment left in the wallet, said to the person: all of it, or all but the fee the mint kept. */
+var backInWallet = (lost) => lost > 0 ? `The sats are back in your wallet, less ${lost} sat${lost === 1 ? "" : "s"} the mint kept as its fee.` : "The sats are back in your wallet.";
 /**
 * How long a mint gets to answer when it is only being asked something (its keys, an invoice). A mint
 * that is down can hold a request for minutes; the next mint should get its turn well before that.
@@ -19122,6 +19728,8 @@ var CashuWallet = class {
 	locks = /* @__PURE__ */ new Map();
 	quoteTimer = null;
 	meltTimer = null;
+	/** Per melt quote that ended unpaid: the sats the mint kept all the same (the fee of the split before the melt). */
+	failedFees = /* @__PURE__ */ new Map();
 	/**
 	* `getMints`: the mints of one network (the engine's default when none is named), primary first: balances,
 	* invoices, payments of that network's Cashu wallet. `getKnownMints`: every mint the user added, whatever its
@@ -19162,7 +19770,7 @@ var CashuWallet = class {
 		try {
 			wallet = await this.wallet(normalized);
 		} catch (error) {
-			throw Object.assign(/* @__PURE__ */ new Error(`Could not reach ${new URL(normalized).host}. Check the address: it should be a Cashu mint.`), { cause: error });
+			throw Object.assign(engineError("mintUnreachable", { host: new URL(normalized).host }), { cause: error });
 		}
 		const info = wallet.getMintInfo();
 		const name = info.name || new URL(normalized).hostname;
@@ -19396,7 +20004,7 @@ var CashuWallet = class {
 				};
 			});
 		}
-		throw new Error(candidates.length === 0 && preferred ? "You share no mint with this contact" : "Not enough sats in your wallet");
+		throw engineError(candidates.length === 0 && preferred ? "noSharedMint" : "notEnoughSats");
 	}
 	async prepareReviewedCashu(mint, amount) {
 		assertAmount(amount);
@@ -19416,7 +20024,7 @@ var CashuWallet = class {
 	async executeReviewedCashu(review, prepared) {
 		return this.locked(prepared.mint, async () => {
 			const preview = deserializeSwapPreview(prepared.swap);
-			if (prepared.mint !== review.provider || preview.amount.toNumber() !== review.amount || reviewedCashuFee(preview) !== review.fee) throw new Error("Cashu preview does not match review");
+			if (prepared.mint !== review.provider || preview.amount.toNumber() !== review.amount || reviewedCashuFee(preview) !== review.fee) throw new PaymentPreflightError("Cashu preview does not match review");
 			const tx = (await openDb()).transaction(STORES.proofs, "readwrite");
 			await new Promise((resolve, reject) => {
 				const proofs = tx.objectStore(STORES.proofs);
@@ -19435,7 +20043,7 @@ var CashuWallet = class {
 					};
 				}
 				tx.oncomplete = () => resolve();
-				tx.onabort = tx.onerror = () => reject(/* @__PURE__ */ new Error("Prepared Cashu inputs are no longer available"));
+				tx.onabort = tx.onerror = () => reject(new PaymentPreflightError(engineText("reviewedSatsGone")));
 			});
 			const { keep, send } = await (await this.wallet(prepared.mint)).completeSwap(preview);
 			return this.finishReviewedCashu(review, prepared, keep, send);
@@ -19500,6 +20108,42 @@ var CashuWallet = class {
 		this.events.onChange();
 		return token;
 	}
+	/**
+	* Proof from the mint that a reviewed swap never happened: every input it would spend reads UNSPENT (not PENDING,
+	* not SPENT), and the mint signed none of its outputs. Read-only: it asks, and never sends the swap.
+	*/
+	async reviewedCashuNeverSwapped(prepared) {
+		const preview = deserializeSwapPreview(prepared.swap);
+		if (!preview.inputs.length) return false;
+		const wallet = await this.wallet(prepared.mint);
+		const states = await wallet.checkProofsStates(preview.inputs.map((p) => ({
+			secret: p.secret,
+			id: p.id
+		})));
+		if (states.length !== preview.inputs.length || !states.every((s) => s.state === "UNSPENT")) return false;
+		const outputs = [...prepared.swap.keepOutputs ?? [], ...prepared.swap.sendOutputs ?? []].map(OutputData.deserialize);
+		const restored = await wallet.mint.restore({ outputs: outputs.map((o) => o.blindedMessage) });
+		return restored.signatures.length === 0 && restored.outputs.length === 0;
+	}
+	/** Gives back the inputs a reviewed swap reserved, once the mint proved it never happened. Idempotent. */
+	async releaseReviewedCashu(prepared) {
+		const preview = deserializeSwapPreview(prepared.swap);
+		await this.locked(prepared.mint, async () => {
+			await transact([STORES.proofs], (stores) => {
+				const proofs = stores[STORES.proofs];
+				for (const input of preview.inputs) {
+					const request = proofs.get(input.secret);
+					request.onsuccess = () => {
+						const proof = request.result;
+						if (!proof || !proof.reserved || proof.mint !== prepared.mint || proof.C !== input.C) return;
+						const { reserved: _released, ...free } = proof;
+						proofs.put(free);
+					};
+				}
+			});
+		});
+		this.events.onChange();
+	}
 	async reviewedCashuSpent(prepared) {
 		const outputs = (prepared.swap.sendOutputs ?? []).map(OutputData.deserialize);
 		const states = await (await this.wallet(prepared.mint)).checkProofsStates(outputs.map((o) => ({
@@ -19587,7 +20231,7 @@ var CashuWallet = class {
 			const amount = quote.amount.toNumber();
 			const feeReserve = quote.fee_reserve.toNumber();
 			if (await this.balanceAt(mint) < amount + feeReserve) {
-				lastError = /* @__PURE__ */ new Error("Not enough sats in your wallet");
+				lastError = engineError("notEnoughSats");
 				continue;
 			}
 			return {
@@ -19609,7 +20253,7 @@ var CashuWallet = class {
 	async payQuote(quoteId, mint, note, paymentId) {
 		try {
 			const outcome = await this.locked(mint, () => this.melt(quoteId, mint, note, paymentId));
-			if (outcome === "unpaid") throw new Error("The Lightning payment did not go through. The sats are back in your wallet.");
+			if (outcome === "unpaid") throw new Error(`The Lightning payment did not go through. ${backInWallet(this.takeFailedFee(quoteId))}`);
 			if (outcome === "pending") this.pollMelts();
 			return outcome === "paid";
 		} finally {
@@ -19653,7 +20297,11 @@ var CashuWallet = class {
 		} catch (error) {
 			if (!isMintOperationError(error) && !(error instanceof MeltChangeError)) return "pending";
 			const outcome = await this.settleMelt(melt).catch(() => "pending");
-			if (outcome === "unpaid") throw error;
+			if (outcome === "unpaid") {
+				const lost = this.takeFailedFee(melt.quote);
+				if (lost > 0) throw Object.assign(/* @__PURE__ */ new Error(`${error instanceof Error ? error.message : String(error)} ${backInWallet(lost)}`), { cause: error });
+				throw error;
+			}
 			return outcome;
 		}
 		if (result.quote.state === "PAID") {
@@ -19673,6 +20321,7 @@ var CashuWallet = class {
 				return current ? this.settleMelt(current) : null;
 			});
 			if (outcome === "paid" || outcome === "unpaid") {
+				this.takeFailedFee(melt.quote);
 				this.events.onMeltResolved(melt, outcome === "paid");
 				this.events.onChange();
 			}
@@ -19707,16 +20356,29 @@ var CashuWallet = class {
 		if (states.some((s) => s.state === "PENDING")) return "pending";
 		const spent = new Set(inputs.filter((_, i) => states[i]?.state === "SPENT").map((p) => p.secret));
 		if (spent.size > 0) console.warn(`[wallet] melt ${melt.quote} is unpaid, yet ${spent.size} of its proofs are spent`);
-		await transact([STORES.proofs, STORES.melts], (stores) => {
+		const lost = melt.outlay - inputs.filter((p) => !spent.has(p.secret)).reduce((sum, p) => sum + p.amount, 0);
+		await transact([
+			STORES.proofs,
+			STORES.melts,
+			...lost > 0 ? [STORES.walletTx] : []
+		], (stores) => {
 			for (const p of inputs) if (spent.has(p.secret)) stores[STORES.proofs].delete(p.secret);
 			else stores[STORES.proofs].put({
 				...p,
 				reserved: false
 			});
 			stores[STORES.melts].delete(melt.quote);
+			if (lost > 0) stores[STORES.walletTx].put(walletTx(melt.mint, "fee", 0, lost, melt.note ? `Payment failed: ${melt.note}` : "A Lightning payment failed"));
 		});
+		if (lost > 0) this.failedFees.set(melt.quote, lost);
 		return "unpaid";
 	}
+	/** The fee a failed melt cost, once: for the words that say it failed. */
+	takeFailedFee(quote) {
+		const lost = this.failedFees.get(quote) ?? 0;
+		this.failedFees.delete(quote);
+		return lost;
+	}
 	/** The invoice is paid: the reserved proofs are spent, the change is ours, and the payment goes in the history. */
 	async finishMelt(melt, change) {
 		const tx = walletTx(melt.mint, "lightning-out", melt.amount, melt.outlay - sats(change) - melt.amount, melt.note);
@@ -19833,6 +20495,8 @@ function parseSats(value, asset) {
 /** Paying in ecash failed before any token existed, so nothing reached the contact and Lightning is safe to try. */
 var NoEcashError = class extends Error {};
 var arkSats = (network) => network === "bitcoin" ? "sats" : "test sats";
+/** The English line kept with a payment message (the CLI and older apps show it): test sats say so. */
+var satsOn = (network) => network === "testnet" ? "test sats" : "sats";
 var ENDPOINT_OF = {
 	arkade: ENDPOINT.arkade,
 	bark: ENDPOINT.bark,
@@ -19911,8 +20575,12 @@ var PaymentDesk = class {
 	accepts(linkId, method, network) {
 		return this.host.acceptsNetwork?.(linkId, method, network) ?? true;
 	}
-	/** The contact has a wallet of that network for the method, as it said; an older contact says nothing, and may. */
+	/**
+	* The contact has a wallet of that network for the method, as it said on the open session; an older contact says
+	* nothing, and may. With no session open its last word is old (it may have made a wallet since): it may too.
+	*/
 	meets(link, method, network) {
+		if (!link.isDataLinkOpen) return true;
 		const theirs = link.peerPaymentNetworks?.(method);
 		return !theirs || theirs.includes(network);
 	}
@@ -20237,7 +20905,8 @@ var PaymentDesk = class {
 		};
 		const ecash = params.rail !== "lightning" && !offHere.cashu && (known ? known.includes("cashu") && link.paymentEnabled("cashu") : link.allowsPayment("cashu"));
 		const lightning = params.rail !== "cashu" && !offHere.lightning && (known ? known.includes("lightning") && link.paymentEnabled("lightning") : link.allowsPayment("lightning"));
-		if (!ecash && !lightning) throw new Error(params.rail && offHere[params.rail] ? offHere[params.rail] : params.rail ? `${params.rail === "cashu" ? "Cashu" : "Lightning"} is not allowed by both of you here` : held ? "Your contact allowed neither Cashu nor Lightning in this chat" : offHere.cashu && offHere.lightning ? offHere.cashu : "Cashu and Lightning are off in this chat");
+		const theirsOff = !!waiting && !waiting.includes("cashu") && !waiting.includes("lightning") && (link.paymentEnabled("cashu") || link.paymentEnabled("lightning"));
+		if (!ecash && !lightning) throw new Error(params.rail && offHere[params.rail] ? offHere[params.rail] : params.rail ? `${params.rail === "cashu" ? "Cashu" : "Lightning"} is not allowed by both of you here` : held ? "Your contact allowed neither Cashu nor Lightning in this chat" : offHere.cashu && offHere.lightning ? offHere.cashu : theirsOff ? "Your contact took no Cashu or Lightning last time. Try again once the chat is live" : "Cashu and Lightning are off in this chat");
 		const quote = lightning ? await this.lightning[network].createInvoice(params.amount, id, params.card) : void 0;
 		const own = (await this.wallet.view(network)).mints.map((m) => m.url);
 		const mints = ecash ? own.filter((url) => isWorthlessMint(url) === (network === "testnet")) : [];
@@ -20319,7 +20988,7 @@ var PaymentDesk = class {
 		await this.host.storeMessage({
 			linkId,
 			id: `me_${params.timestamp}`,
-			text: `⚡ Requested ${params.amount.toLocaleString()} sats from the group`,
+			text: `⚡ Requested ${params.amount.toLocaleString()} ${satsOn(network)} from the group`,
 			sender: "me",
 			timestamp: params.timestamp,
 			via: "datalink",
@@ -20402,7 +21071,7 @@ var PaymentDesk = class {
 		const quote = await this.lightning[network].quote(request.invoice, params.card);
 		if (quote.amount !== request.amount) throw new Error("The invoice does not match the requested amount");
 		const feeLimit = Math.min(Math.max(10, Math.ceil(request.amount * .03)), params.maxFee ?? Infinity);
-		if (quote.feeReserve > feeLimit) throw new Error(`The Lightning fee (${quote.feeReserve} sats) is too high`);
+		if (quote.feeReserve > feeLimit) throw engineError("lightningFeeTooHigh", { fee: quote.feeReserve });
 		await this.save({
 			...this.current(request),
 			lightningPending: true,
@@ -20676,7 +21345,7 @@ var PaymentDesk = class {
 		await this.host.storeMessage({
 			linkId,
 			id: `peer_${request.timestamp}`,
-			text: `⚡ Requested ${amount.toLocaleString()} sats`,
+			text: `⚡ Requested ${amount.toLocaleString()} ${satsOn(network)}`,
 			sender: "peer",
 			timestamp: request.timestamp,
 			via: held ? "hold" : "datalink",
@@ -21233,7 +21902,7 @@ var PaymentDesk = class {
 		await this.host.storeMessage({
 			linkId: review.linkId,
 			id: `me_${review.createdAt}`,
-			text: `${review.amount} sats via Cashu`,
+			text: `${review.amount} ${arkSats(review.network)} via Cashu`,
 			sender: "me",
 			timestamp: review.createdAt,
 			via: "datalink",
@@ -21961,9 +22630,11 @@ var PaymentDesk = class {
 			network: mintNetwork(mint)
 		});
 		let token;
+		let paidFrom;
 		try {
 			const created = await this.wallet.createToken(params.amount, params.mints, memo, record, params.network);
 			token = created.token;
+			paidFrom = created.mint;
 			this.payments.set(id, record(created.token, created.mint));
 		} catch (error) {
 			throw new NoEcashError(error instanceof Error ? error.message : String(error));
@@ -21972,7 +22643,7 @@ var PaymentDesk = class {
 		await this.host.storeMessage({
 			linkId: params.linkId,
 			id: `me_${params.timestamp}`,
-			text: `⚡ ${params.amount.toLocaleString()} sats`,
+			text: `⚡ ${params.amount.toLocaleString()} ${satsOn(mintNetwork(paidFrom))}`,
 			sender: "me",
 			timestamp: params.timestamp,
 			via: "datalink",
@@ -22335,7 +23006,7 @@ function transportCue(before, entries, history) {
 }
 /**
 * The contact came with my invite: the first time the inviter's pairing shows them (their packet seen, or past the
-* wait), after it did not. The same test as the invite card's (src/lib/pairingProgress.ts `contactArrived`).
+* wait), after it did not. The same test as the invite card's (apps/ui/src/lib/pairingProgress.ts `contactArrived`).
 */
 function knockCue(before, after) {
 	const arrived = (p) => !!p && (!!p.peerSeen || [
@@ -22413,12 +23084,123 @@ function pushRelayProblem(url) {
 	return "Use an https:// relay address";
 }
 //#endregion
-//#region ../browser/src/platform/irohWeb.ts
+//#region ../browser/src/engine/walletSetup.ts
 /**
-* Iroh (WISP 102) in a browser: the same QUIC/TLS session and binding as the
-* Desktop's native Iroh, but relay only. A page cannot send UDP, so every
-* packet goes through an Iroh relay over a WebSocket; the relay sees who talks
-* to whom and when, never the frames.
+* What a new profile gets by itself on Mainnet, in this order: payments over Lightning (Cashu), a dollar token (USDT),
+* and Bitcoin on-chain. A kind with no Mainnet wallet here yet (on-chain, until a Mainnet source that needs no form
+* exists) is skipped quietly and stays in the list, never shown as a failure.
+*/
+var DEFAULT_WALLETS = [
+	"cashu",
+	"usdt",
+	"bitcoin"
+];
+/** The network the first-run setup makes wallets on: real money, to receive right away. */
+var SETUP_NETWORK = "mainnet";
+var message = (error) => error instanceof Error ? error.message : String(error);
+/**
+* The first-run wallet setup: a new profile gets its default Mainnet wallets in the background, once. What is made is
+* never made again, so a wallet the person removes stays removed. A kind that could not be made (a server down, no
+* network) keeps its reason for the Wallet page and is tried again quietly at the next start, or when the person asks.
+* Creating a wallet moves no money.
+*/
+var WalletSetup = class {
+	host;
+	running = null;
+	constructor(host) {
+		this.host = host;
+	}
+	/** What the Wallet page shows: absent when there is nothing to say (done, or waiting only on a kind not offered). */
+	view() {
+		const record = this.host.record();
+		const failed = (record?.left ?? []).flatMap((type) => {
+			const reason = record?.failed?.[type];
+			return reason ? [{
+				type,
+				network: SETUP_NETWORK,
+				reason
+			}] : [];
+		});
+		if (!this.running && !failed.length) return void 0;
+		return {
+			running: !!this.running,
+			failed
+		};
+	}
+	/**
+	* At start. `fresh`: a new profile (nothing stored yet, no wallet, no chat). Only then is a setup begun; a profile
+	* with a record goes on with what is left; any other profile (one from before this, or whose wallets were removed)
+	* is left alone.
+	*/
+	async begin(fresh) {
+		if (!this.host.record()) {
+			if (!fresh) return;
+			await this.host.save({ left: [...DEFAULT_WALLETS] });
+		}
+		await this.run();
+	}
+	/** Tries what is left (or only `only`), one after the other. A run under way is joined, not doubled. */
+	run(only) {
+		if (this.running) return this.running;
+		this.running = this.work(only).finally(() => {
+			this.running = null;
+			this.host.changed();
+		});
+		this.host.changed();
+		return this.running;
+	}
+	/** A wallet of this kind was made on this network (by the setup or by the person): nothing left to make of it. */
+	async made(type, network) {
+		if (network === "mainnet") await this.drop(type);
+	}
+	/** The person does not want this kind made for them: it is not tried again. */
+	async dismiss(type) {
+		await this.drop(type);
+		this.host.changed();
+	}
+	async work(only) {
+		for (const type of [...this.host.record()?.left ?? []]) {
+			if (only && type !== only) continue;
+			const offer = await this.host.offer(type);
+			if (offer?.exists) {
+				await this.drop(type);
+				continue;
+			}
+			if (!offer?.available || offer.needs) continue;
+			try {
+				await this.host.create(type);
+				await this.drop(type);
+			} catch (error) {
+				const record = this.host.record();
+				if (record?.left.includes(type)) await this.host.save({
+					...record,
+					failed: {
+						...record.failed,
+						[type]: message(error)
+					}
+				});
+			}
+			this.host.changed();
+		}
+	}
+	async drop(type) {
+		const record = this.host.record();
+		if (!record?.left.includes(type)) return;
+		const failed = { ...record.failed };
+		delete failed[type];
+		await this.host.save({
+			left: record.left.filter((t) => t !== type),
+			...Object.keys(failed).length ? { failed } : {}
+		});
+	}
+};
+//#endregion
+//#region ../browser/src/platform/irohWeb.ts
+/**
+* Iroh (WISP 102) in a browser: the same QUIC/TLS session and binding as the
+* Desktop's native Iroh, but relay only. A page cannot send UDP, so every
+* packet goes through an Iroh relay over a WebSocket; the relay sees who talks
+* to whom and when, never the frames.
 *
 * The wasm (about 1 MB gzip) loads on the first chat that starts an endpoint,
 * never on the app's first load.
@@ -22603,6 +23385,24 @@ async function createIrohWebEndpoint(seedB64, options = {}) {
 //#region ../browser/src/engine/node.ts
 /** How long a chat waits before listening again after its HyperDHT relay went away. */
 var RELAY_RETRY_MS = 3e4;
+/** Native listeners an app may hold per transport (the Desktop's Rust Iroh allows eight, `paired_transport.rs`). */
+var NATIVE_SLOTS = 8;
+/** How often a group link that found no free native slot tries again. */
+var GROUP_NATIVE_RETRY_MS = 15e3;
+/** "Clear all data": how long taking things back from the network may hold up the clear, in all. */
+var CLEAR_WITHDRAW_MS = 6e3;
+/**
+* How soon the chat on screen tries again for a native slot when every one was busy (each dialling, or carrying a
+* session): a dial to a contact that is not there ends within its 20 s timeout, and leaves its slot free until the next.
+*/
+var ACTIVE_SLOT_RETRY_MS = 3e3;
+/**
+* How long a chat live when the app last ran may take to be live again before that stretch counts as over
+* (`TransportLog.notBackAfterRestart`): past the contact's liveness bound (three pings missed), the session it held is
+* gone too. Shorter, an app started twice in quick succession would not knock the second time on a contact still
+* holding the session.
+*/
+var RESUME_SPENT_MS = LIVENESS_PING_MS * 4;
 var DEFAULT_SETTINGS = {
 	online: true,
 	nick: "",
@@ -22640,15 +23440,23 @@ var SPARE_INVITE_WARM_EVERY_MS = 24e4;
 * it anyway. Three pairings in a minute are the whole of a page's relay budget (2026-09-27).
 */
 var SPARE_INVITE_WARM_AFTER_TAKE_MS = 3e4;
+/**
+* At start (and back online), writes that can wait go this long after the chats' and groups' first packets: the spare
+* invite's warm-up, a chat's first control envelope, its capability record (once the chat's native endpoints are up).
+* A daemon back with two chats and two groups spent 25 of pkarr.pubky.org's 30 requests a minute on writes in its
+* first 11 s, and read nothing more for the rest of the minute, the others' answers included (bug hunt r7a, 2026-09-29).
+*/
+var STARTUP_QUIET_MS = 15e3;
 var SPARE_INVITE_MAX_AGE_MS = 9e5;
 /** How long a removal waits for a wallet's rail to claim what was already paid to it (tests shorten it). */
 var removalTiming = { claimMs: 3e4 };
 /** Why a removal needs the person's confirmation: what it holds, what it still waits for, and what confirming means. */
+/** `label`: what goes, as a noun ("Testnet Cashu wallet", "Testnet Lightning card “Home”"). */
 function lossRefusal(label, removal) {
 	const { held, awaiting } = removal;
-	const holds = held === "unknown" ? `Ghostly could not read what the ${label} wallet holds.` : held.empty ? "" : `The ${label} wallet holds ${held.text}.`;
+	const holds = held === "unknown" ? `Ghostly could not read what the ${label} holds.` : held.empty ? "" : `The ${label} holds ${held.text}.`;
 	const listed = awaiting.slice(0, 3).map((i) => i.text.charAt(0).toLowerCase() + i.text.slice(1)).join("; ") + (awaiting.length > 3 ? `; and ${awaiting.length - 3} more` : "");
-	return `${holds}${awaiting.length ? `${holds ? " It" : `The ${label} wallet`} still waits for money: ${listed}.` : ""} Confirm that ${holds && awaiting.length ? `${held === "unknown" ? "anything in it becomes" : "they become"} unreachable without its backup, and that what is paid to it afterwards is lost,` : holds ? `${held === "unknown" ? "anything in it becomes" : "they become"} unreachable without its backup` : "what is paid to it after it is removed is lost"} to remove it.`;
+	return `${holds}${awaiting.length ? `${holds ? " It" : `The ${label}`} still waits for money: ${listed}.` : ""} Confirm that ${holds && awaiting.length ? `${held === "unknown" ? "anything in it becomes" : "they become"} unreachable without its backup, and that what is paid to it afterwards is lost,` : holds ? `${held === "unknown" ? "anything in it becomes" : "they become"} unreachable without its backup` : "what is paid to it after it is removed is lost"} to remove it.`;
 }
 function newLiveLink(stored, lastMessageAt, files = emptyLinkFiles()) {
 	return {
@@ -22719,11 +23527,13 @@ var GhostlyNode = class GhostlyNode {
 	activeLinkId = null;
 	nativeQueue = Promise.resolve();
 	shuttingDown = false;
+	/** `start` has put the kept transfers back (EngineState.transfersRestored). */
+	transfersRestored = false;
 	feedbackStartedAt = Date.now();
 	feedbackIds = /* @__PURE__ */ new Set();
 	walletFeedbackReady = false;
 	walletFeedbackIds = /* @__PURE__ */ new Set();
-	/** `cue`: a finer sound the page plays instead of the event's own when its category is on (src/lib/cues.ts). */
+	/** `cue`: a finer sound the page plays instead of the event's own when its category is on (apps/ui/src/lib/cues.ts). */
 	feedback(type, id, linkId, mention = false, cue) {
 		const key = type + ":" + id;
 		if (this.feedbackIds.has(key)) return;
@@ -22773,6 +23583,10 @@ var GhostlyNode = class GhostlyNode {
 	editQueues = /* @__PURE__ */ new Map();
 	/** The contacts' edits of messages not here yet. */
 	editBuffer = new EditBuffer();
+	/** Received status card updates, applied at most once a second per message (WISP 4xx · Status Cards). */
+	cardEdits = new CardEditPacer();
+	/** When each message's buttons were last pressed here (`pressButton`). */
+	pressedAt = /* @__PURE__ */ new Map();
 	/** At most one wake-up per contact per `WAKE_INTERVAL_MS` (WISP 401 § Wake-up push). */
 	wakeLimiter = new WakeLimiter();
 	/** Call wake-ups have their own, shorter limit: a call is rarer than a message and cannot wait five minutes. */
@@ -22794,6 +23608,7 @@ var GhostlyNode = class GhostlyNode {
 		storeMessage: (message) => this.storeMessage(message),
 		transfers: this.transfers,
 		changed: (delayMs) => this.emitState(delayMs),
+		flush: () => this.flushState(),
 		settled: (linkId, fileId, record, seen) => {
 			if (seen && record.direction === "in" && record.state === "done") this.cueFeedback({
 				cue: "downloaded",
@@ -22804,6 +23619,8 @@ var GhostlyNode = class GhostlyNode {
 	});
 	stateTimer = null;
 	paymentTimer = null;
+	/** Every minute, the reviews no Approve can send any more are cancelled (dropStaleReviews). */
+	staleReviewTimer;
 	/** Group links: admins read knocks, joiners knock (WISP 9xx § Entry link). */
 	groupEntryTimer = null;
 	walletView = {
@@ -22812,6 +23629,34 @@ var GhostlyNode = class GhostlyNode {
 		history: [],
 		feesPaid: 0
 	};
+	/** A new profile's default Mainnet wallets, made once in the background (`NodeOptions.defaultWallets`). */
+	walletSetup = new WalletSetup({
+		record: () => this.settings.walletSetup,
+		save: async (record) => {
+			this.settings = {
+				...this.settings,
+				walletSetup: record
+			};
+			await db.putSettings(this.settings);
+		},
+		offer: async (type) => {
+			await this.refreshWallet();
+			return this.walletView.offers?.find((o) => o.type === type && o.network === "mainnet");
+		},
+		create: async (type) => {
+			await this.walletCreate({
+				type,
+				network: SETUP_NETWORK
+			});
+		},
+		changed: () => {
+			this.walletView = {
+				...this.walletView,
+				setup: this.walletSetup.view()
+			};
+			this.emitState();
+		}
+	});
 	/**
 	* Every wallet twice, one per network (real money, test coins), both open at once. Nothing is parked: a payment
 	* goes through the wallet of its own network, and a wallet of one network never pays for the other.
@@ -22890,7 +23735,10 @@ var GhostlyNode = class GhostlyNode {
 			method: "cashu",
 			prepare: (target, amount, feeCap) => new CashuAdapter(this.wallet, (r, t) => this.desk.recordCashu(r, t)).prepare(target, amount, feeCap),
 			execute: (review, prepared, persist) => new CashuAdapter(this.wallet, (r, t) => this.desk.recordCashu(r, t)).execute(review, prepared, persist),
-			reconcile: (review, prepared) => new CashuAdapter(this.wallet, (r, t) => this.desk.recordCashu(r, t)).reconcile(review, prepared)
+			reconcile: (review, prepared, persist) => {
+				if (!persist) throw new Error("A Cashu payment is reconciled with its intent saved");
+				return new CashuAdapter(this.wallet, (r, t) => this.desk.recordCashu(r, t)).reconcile(review, prepared, persist);
+			}
 		}
 	], (review) => {
 		if (review.state === "settled") this.feedback("confirmed", review.id);
@@ -23411,8 +24259,13 @@ var GhostlyNode = class GhostlyNode {
 		},
 		linkReady: (linkId, version = 1) => !!this.links.get(linkId)?.link?.supportsGroupVersion(version),
 		myNick: () => this.sharedNick,
-		staysOnline: () => this.options.staysOnline ?? this.options.platform === "desktop",
+		staysOnline: () => this.options.staysOnline ?? (this.options.platform === "desktop" && typeof RTCPeerConnection !== "undefined"),
 		peerRoom: (groupId) => {
+			if (typeof RTCPeerConnection === "undefined" && Object.keys(this.nativeFactories).length) {
+				let held = 0;
+				for (const live of this.links.values()) if (live.stored.group && live.stored.group !== groupId && live.link) held++;
+				return Math.max(0, 4 - held);
+			}
 			const budget = this.options.peerBudget;
 			if (budget === void 0) return void 0;
 			let held = this.openChatPeers();
@@ -23432,7 +24285,11 @@ var GhostlyNode = class GhostlyNode {
 		openEntry: (link, role, seedB64, peer) => this.openEntry(link, role, seedB64, peer),
 		linkSeen: (linkId) => {
 			const live = this.links.get(linkId);
-			return !!live?.presence?.online || !!live?.dataLink && live.dataLink !== "idle";
+			return otherEndSeen(live?.presence, live?.dataLink);
+		},
+		linkBack: (linkId) => {
+			const live = this.links.get(linkId);
+			return !!live?.lastSyncAt && !!live.presence?.online && live.presence.lastPacketAt > live.lastSyncAt;
 		},
 		publish: (identity, records, background) => this.groupTransport.publish(identity, records, { background }),
 		resolve: async (pubKeyZ32, background, door) => (await this.groupTransport.resolve(pubKeyZ32, {
@@ -23449,9 +24306,10 @@ var GhostlyNode = class GhostlyNode {
 			else this.closeGroupLink(linkId).catch(() => {});
 		},
 		edgeNick: (linkId) => this.links.get(linkId)?.presence.nick || void 0,
-		storeMessage: (message) => this.storeMessage(message),
+		storeMessage: (message) => this.storeNewMessage(message),
 		completeMessage: (message) => this.completeGroupMessage(message),
 		membersChanged: (groupId) => this.groupMembersChanged(groupId),
+		historyGone: (groupId) => this.groupHistoryGone(groupId),
 		emit: () => this.emitState(),
 		communityApp: (groupId, sender, frame) => frame.t === "reaction" ? this.receiveGroupReaction(groupId, sender, frame) : frame.t === "edit" ? this.receiveCommunityEdit(groupId, sender, frame) : frame.t === "pin" ? this.receiveGroupPin(groupId, sender, readPin(frame)) : this.communityPay.receiveApp(groupId, sender, frame),
 		groupEdit: async (groupId, { sender, ...edit }) => {
@@ -23590,9 +24448,11 @@ var GhostlyNode = class GhostlyNode {
 	* What each network's wallets still wait for (see `walletAwaiting`): open requests and invoices, paid invoices not
 	* claimed yet, ecash sent and not taken. Read from the Cashu quotes, the Lightning journals and the payments.
 	*/
+	/** What each network's wallets still wait for, and each mint on its own (`mints`, only the mints that wait for something). */
 	async readAwaiting() {
 		const quotes = await this.wallet.quotes(), payments = this.desk.records(), now = Date.now();
 		const out = {};
+		const mints = /* @__PURE__ */ new Map();
 		for (const network of WALLET_NETWORKS) {
 			const lightning = this.lightnings[network];
 			out[network] = walletAwaiting({
@@ -23606,8 +24466,27 @@ var GhostlyNode = class GhostlyNode {
 				payments,
 				now
 			});
+			for (const url of this.networkMints(network)) {
+				const waits = mintAwaiting(url, {
+					network,
+					quotes,
+					payments,
+					now
+				});
+				if (waits.length) mints.set(url, waits);
+			}
 		}
-		return out;
+		return {
+			networks: out,
+			mints
+		};
+	}
+	/** A mint as the wallet page shows it, with what it still waits for when it does (asked about before it is removed). */
+	withWaits(mints, waits) {
+		return mints.map(({ awaiting: _, ...mint }) => waits.has(mint.url) ? {
+			...mint,
+			awaiting: waits.get(mint.url)
+		} : mint);
 	}
 	awaitingTimer;
 	/** A payment changed (a request made, paid or closed): what the wallets wait for is read again, soon. */
@@ -23619,7 +24498,8 @@ var GhostlyNode = class GhostlyNode {
 			if (this.shuttingDown || !networks) return;
 			for (const network of WALLET_NETWORKS) networks[network] = {
 				...networks[network],
-				awaiting: awaiting[network]
+				mints: this.withWaits(networks[network].mints, awaiting.mints),
+				awaiting: awaiting.networks[network]
 			};
 			this.walletView = {
 				...this.walletView,
@@ -23637,7 +24517,7 @@ var GhostlyNode = class GhostlyNode {
 			everything = view.history;
 			const history = view.history.filter((tx) => !tx.mint || mintNetwork(tx.mint) === network);
 			networks[network] = {
-				mints: view.mints,
+				mints: this.withWaits(view.mints, awaiting.mints),
 				balance: view.balance,
 				history,
 				feesPaid: history.reduce((sum, tx) => sum + tx.fee, 0),
@@ -23649,7 +24529,7 @@ var GhostlyNode = class GhostlyNode {
 				lightning: this.lightnings[network].view,
 				lightnings: this.lightnings[network].views(),
 				bitcoin: this.bitcoins[network].view,
-				awaiting: awaiting[network]
+				awaiting: awaiting.networks[network]
 			};
 		}
 		const wallets = walletInstances(networks);
@@ -23658,7 +24538,8 @@ var GhostlyNode = class GhostlyNode {
 			networks,
 			wallets,
 			offers: this.walletOffers(networks, wallets),
-			intents: (await intentRepository.list()).map((saved) => saved.review)
+			intents: (await intentRepository.list()).map((saved) => saved.review),
+			setup: this.walletSetup.view()
 		};
 		this.announcePaymentNetworks(wallets);
 		for (const tx of everything) {
@@ -23670,6 +24551,57 @@ var GhostlyNode = class GhostlyNode {
 			}
 		}
 		this.walletFeedbackReady = true;
+		await this.observeBackups();
+		this.emitState();
+	}
+	/** Whether this profile's settings are read: before that, a reminder saved would write the defaults over them. */
+	backupsLoaded = false;
+	/** The backup reminders (shared/backupReminder): what the Mainnet balances change in them, saved when they do. */
+	async observeBackups() {
+		if (this.backupsLoaded) {
+			const view = this.walletView;
+			const { records, changed } = observeBalances(this.settings.backupReminders ?? {}, mainnetBalances(view.wallets ?? [], view.networks?.mainnet), Date.now());
+			if (changed) await this.saveBackups(records);
+		}
+		this.walletView = {
+			...this.walletView,
+			backupReminders: this.settings.backupReminders ?? {}
+		};
+	}
+	async saveBackups(records) {
+		this.settings = {
+			...this.settings,
+			backupReminders: records
+		};
+		this.walletView = {
+			...this.walletView,
+			backupReminders: records
+		};
+		await db.putSettings(this.settings);
+	}
+	/** A wallet's phrase shown or its backup file made (once it answered): a copy of it exists, its reminder is over. */
+	async copied(type, network, work) {
+		const result = await work();
+		const net = this.net(network);
+		if (net === "mainnet" && this.backupsLoaded) {
+			await this.saveBackups(markBackedUp(this.settings.backupReminders ?? {}, {
+				kind: "phrase",
+				id: `${type}:${net}`
+			}, Date.now()));
+			this.emitState();
+		}
+		return result;
+	}
+	/** The backup reminder's "Later" on one Mainnet wallet, or a profile backup just made (see `EngineApi`). */
+	async walletBackupReminder(params) {
+		const records = this.settings.backupReminders ?? {}, now = Date.now();
+		if (params?.event === "profile") await this.saveBackups(markBackedUp(records, { kind: "profile" }, now));
+		else if (params?.event === "later" && typeof params.wallet === "string") {
+			const view = this.walletView;
+			const held = mainnetBalances(view.wallets ?? [], view.networks?.mainnet).find((b) => b.id === params.wallet);
+			if (!held) throw new Error("There is no such Mainnet wallet");
+			await this.saveBackups(putOff(records, held.id, held.balance, now));
+		} else throw new Error("Unknown backup reminder event");
 		this.emitState();
 	}
 	async pollPaymentStatus() {
@@ -23685,14 +24617,17 @@ var GhostlyNode = class GhostlyNode {
 		}
 	}
 	async start() {
+		const stored = await db.getSettings();
+		const fresh = Object.keys(stored).length === 0;
 		this.settings = {
 			...DEFAULT_SETTINGS,
-			...await db.getSettings()
+			...stored
 		};
 		this.settings.relays = currentRelays(this.settings.relays);
 		this.relays?.setRelays(this.settings.relays);
 		this.configureDirect();
 		this.services = await db.getServices();
+		this.backupsLoaded = true;
 		await this.identities.load();
 		this.identities.start();
 		await this.did.load();
@@ -23714,6 +24649,8 @@ var GhostlyNode = class GhostlyNode {
 		await this.desk.start();
 		await this.refreshWallet();
 		this.wallet.start();
+		this.dropStaleReviews();
+		this.staleReviewTimer ??= setInterval(() => void this.dropStaleReviews(), 6e4);
 		this.stopWatchingAdapters ??= onAdaptersChanged(() => {
 			if (!this.shuttingDown) for (const network of WALLET_NETWORKS) {
 				this.lightnings[network].refreshOffered();
@@ -23724,7 +24661,8 @@ var GhostlyNode = class GhostlyNode {
 		for (const stored of await db.getLinks()) {
 			const messages = stored.group ? [] : await db.getMessages(stored.id);
 			const storedFiles = stored.group ? [] : await fileStore.listForLink(stored.id);
-			for (const file of storedFiles) if (file.transfer && !file.wire3) this.transfers.set(file.id, file.transfer.state === "transferring" ? {
+			const waiting = new Set(messages.flatMap((m) => m.sender === "me" && m.delivery === "waiting" && m.file ? [m.file.id] : []));
+			for (const file of storedFiles) if (file.transfer && !file.wire3 && !waiting.has(file.id)) this.transfers.set(file.id, file.transfer.state === "transferring" ? {
 				...file.transfer,
 				state: "failed",
 				error: "Transfer interrupted. Retry when connected."
@@ -23737,13 +24675,15 @@ var GhostlyNode = class GhostlyNode {
 			if (note) this.reactionNotes.set(stored.id, note);
 			if (stored.profile && !stored.group) await this.outboxFor(stored.id).recover();
 		}
+		this.transfersRestored = true;
 		await this.groups.load();
 		for (const group of this.groups.views()) {
 			const note = latestReaction(await db.getMessages(`group:${group.id}`));
 			if (note) this.reactionNotes.set(`group:${group.id}`, note);
 		}
 		this.publicProfiles.start();
-		if (this.settings.online) for (const [linkId, messages] of history) {
+		if (this.settings.online) for (const linkId of this.nativeStartOrder([...history.keys()])) {
+			const messages = history.get(linkId);
 			if (!this.links.has(linkId)) continue;
 			this.startLink(linkId, messages);
 			if (!this.links.get(linkId)?.stored.group) this.refreshPublicProfiles({ linkId }).catch(() => {});
@@ -23752,7 +24692,7 @@ var GhostlyNode = class GhostlyNode {
 		if (this.settings.online) {
 			this.hold.start();
 			this.startGroupEntries();
-			this.prepareSpare();
+			this.prepareSpare(STARTUP_QUIET_MS);
 		}
 		this.pollPaymentStatus().catch(() => {});
 		Promise.all(WALLET_NETWORKS.map((n) => this.fedimintWallets[n].ensureReady())).then(() => this.desk.resumeFedimint());
@@ -23761,6 +24701,23 @@ var GhostlyNode = class GhostlyNode {
 			this.bitcoins[network].ensureReady();
 			this.openWallets(network);
 		}
+		this.startWalletSetup(fresh && !this.walletView.wallets?.length && this.links.size === 0).catch(() => {});
+	}
+	/** The first-run wallet setup, where the app runs it (`NodeOptions.defaultWallets`): begun once, then what is left. */
+	async startWalletSetup(fresh) {
+		const option = this.options.defaultWallets;
+		if (!(typeof option === "function" ? await option() : option === true) || this.shuttingDown) return;
+		await this.walletSetup.begin(fresh);
+	}
+	/** Wallet page: try again to make a default wallet the first-run setup could not make. */
+	async walletSetupRetry({ type }) {
+		if (!WALLET_TYPES.includes(type)) throw new Error("Unknown kind of wallet");
+		await this.walletSetup.run(type);
+	}
+	/** Wallet page: the person does not want this default wallet made for them; it is not tried again. */
+	async walletSetupDismiss({ type }) {
+		if (!WALLET_TYPES.includes(type)) throw new Error("Unknown kind of wallet");
+		await this.walletSetup.dismiss(type);
 	}
 	/** Opens the wallets of a network that exist. None is made here: wallets are made one at a time, with New. */
 	openWallets(network) {
@@ -23782,8 +24739,12 @@ var GhostlyNode = class GhostlyNode {
 		this.shuttingDown = true;
 		this.depart();
 		if (this.relayRetry) clearTimeout(this.relayRetry);
+		if (this.activeSlotRetry) clearTimeout(this.activeSlotRetry);
+		for (const timer of this.resumeTimers.values()) clearTimeout(timer);
+		this.resumeTimers.clear();
 		if (this.paymentTimer) clearTimeout(this.paymentTimer);
 		clearTimeout(this.awaitingTimer);
+		clearInterval(this.staleReviewTimer);
 		if (this.spareTimer) clearTimeout(this.spareTimer);
 		for (const timer of this.reactionTimers.values()) clearTimeout(timer);
 		this.reactionTimers.clear();
@@ -23810,11 +24771,28 @@ var GhostlyNode = class GhostlyNode {
 		await Promise.allSettled([...this.outboxes.values()].map((outbox) => outbox.stop()));
 		for (const queue of this.editQueues.values()) queue.stop();
 		this.groupEdits.stop();
+		this.cardEdits.stop();
 		await Promise.allSettled([...this.links.values()].map(async (live) => {
 			await live.link?.stop(true);
 			await live.caps?.stop();
 		}));
 	}
+	/**
+	* "Clear all data" (WISP 04), the peer's part. First what can be taken back from the network, best effort and within
+	* `CLEAR_WITHDRAW_MS` in all: items held in storage for contacts, the DID (a `deactivated` record), the identity
+	* proofs (their revocation records, once more). Then the peer stops, so nothing it holds in memory is written back,
+	* and its database keeps only the wallets. The host starts a new peer afterwards (the page reloads).
+	*/
+	async clearProfileData() {
+		const withdraw = Promise.allSettled([
+			this.hold.withdrawAll(),
+			this.did.deactivate(),
+			this.identities.revokeAll()
+		]);
+		await Promise.race([withdraw, new Promise((resolve) => setTimeout(resolve, CLEAR_WITHDRAW_MS))]);
+		await this.shutdown();
+		await clearProfileStores();
+	}
 	getState() {
 		const groups = this.groups.views();
 		return {
@@ -23826,7 +24804,9 @@ var GhostlyNode = class GhostlyNode {
 					defaults: [...DEFAULT_IROH_RELAYS]
 				} } : {},
 				...this.transport.configure && { direct: true },
-				...this.transport.discovery && { discovery: this.transport.discovery() }
+				...this.transport.discovery && { discovery: this.transport.discovery() },
+				...typeof RTCPeerConnection === "undefined" && { webrtc: false },
+				...typeof RTCPeerConnection === "undefined" && !Object.keys(this.nativeFactories).length && { groupLinks: false }
 			},
 			links: [...this.links.values()].filter((live) => !live.stored.group).map((live) => this.viewOf(live)).sort((a, b) => b.createdAt - a.createdAt),
 			services: this.services.map((s) => ({
@@ -23834,6 +24814,7 @@ var GhostlyNode = class GhostlyNode {
 				requests: this.requestCounts.get(s.id) ?? 0
 			})).sort((a, b) => a.createdAt - b.createdAt),
 			transfers: Object.fromEntries(this.transfers),
+			transfersRestored: this.transfersRestored,
 			wallet: this.walletView,
 			payments: this.desk.views(),
 			identityProofs: this.identities.views(),
@@ -23883,7 +24864,7 @@ var GhostlyNode = class GhostlyNode {
 	}
 	/** The edge of a group toward one member, as the group page shows it: what carries it and when the member was last heard. */
 	edgeView(groupId, member) {
-		for (const live of this.links.values()) if (live.stored.group === groupId && live.stored.groupPeer === member && !live.stored.groupEntry) return edgeView(live);
+		for (const live of this.links.values()) if (live.stored.group === groupId && live.stored.groupPeer === member && !live.stored.groupEntry) return edgeView(live, Date.now(), this.groupNativeWaiting.has(live.stored.id));
 	}
 	getMessages(linkId) {
 		return db.getMessages(linkId);
@@ -24266,6 +25247,17 @@ var GhostlyNode = class GhostlyNode {
 		if (members && holders.every((key) => members.has(key))) return;
 		this.rotateWake().then(() => this.emitState());
 	}
+	/**
+	* A group I left or forgot: its history is gone here, and the pages' copy goes too (an empty history, sent in order
+	* with what came before). A page hears only what changes in a history it holds: a community left and joined again
+	* by its link showed its old history under the new messages until a reload (bug hunt r5b, 2026-09-29).
+	*/
+	groupHistoryGone(groupId) {
+		const linkId = `group:${groupId}`;
+		this.newestAt.delete(linkId);
+		this.reactionNotes.delete(linkId);
+		this.events.onMessages(linkId, []);
+	}
 	async setGroupWakeMuted(groupId, muted) {
 		const list = this.settings.wakeMutedGroups ?? [];
 		if (list.includes(groupId) === muted) return;
@@ -24502,8 +25494,22 @@ var GhostlyNode = class GhostlyNode {
 			label: stored.label
 		}));
 	}
+	/**
+	* `card`: a bot's status card (WISP 4xx · Status Cards), checked here by the sender's rule; the text is its fallback,
+	* written from the card when none is given. Only the headless runtime and SDKs send one: the app never offers it.
+	*/
 	async sendMessage(params) {
-		const { linkId, text } = params;
+		const { linkId } = params;
+		const card = params.card === void 0 ? void 0 : GhostlyNode.cardToSend(params.card);
+		if (typeof card === "string") return {
+			error: card,
+			refused: true
+		};
+		const text = card && !(typeof params.text === "string" && params.text.trim()) ? statusCardText(card) : params.text;
+		if (typeof text !== "string") return {
+			error: "Nothing to send",
+			refused: true
+		};
 		const live = this.links.get(linkId);
 		const trimmed = text.trim();
 		const bytes = new TextEncoder().encode(trimmed).length;
@@ -24516,13 +25522,26 @@ var GhostlyNode = class GhostlyNode {
 		const timestamp = params.timestamp ?? Date.now();
 		if (live.stored.profile) live.link.setTyping(false);
 		if (live.stored.profile) {
-			const reply = params.replyTo === void 0 ? void 0 : await this.replyFor(linkId, params.replyTo);
-			if (typeof reply === "string") return {
-				error: reply,
+			const found = params.replyTo === void 0 ? void 0 : await this.replyFor(linkId, params.replyTo);
+			if (typeof found === "string") return {
+				error: found,
 				refused: true
 			};
+			if (params.button !== void 0 && !(typeof params.button === "string" && BUTTON_ID.test(params.button) && found)) return {
+				error: "No such button",
+				refused: true
+			};
+			const reply = found && params.button !== void 0 ? {
+				...found,
+				button: params.button
+			} : found;
+			if (card) return this.sendChatText(live, trimmed, timestamp, void 0, reply, void 0, card);
 			return this.sendChatText(live, trimmed, timestamp, params.preview === void 0 ? void 0 : parseLinkPreview(params.preview, trimmed), reply);
 		}
+		if (card) return {
+			error: "Status cards need a current chat; this compatibility chat sends text only.",
+			refused: true
+		};
 		if (params.replyTo !== void 0) return {
 			error: "Replies need a current chat; this compatibility chat sends text only.",
 			refused: true
@@ -24568,19 +25587,27 @@ var GhostlyNode = class GhostlyNode {
 	* both sides allow it; otherwise kept as `waiting` ("Sends when live") and sent by itself, in order, once
 	* the chat can carry it. Only what must never wait, or a security stop, is refused.
 	*/
-	async sendChatText(live, trimmed, timestamp, preview, reply, forwarded) {
+	async sendChatText(live, trimmed, timestamp, preview, reply, forwarded, card) {
 		const { link } = live, linkId = live.stored.id;
 		if (!link) return { error: "You are offline" };
 		const bytes = new TextEncoder().encode(trimmed).length;
-		if (bytes > LIMITS.maxChatMessageBytes) return { error: `Message exceeds ${LIMITS.maxChatMessageBytes} UTF-8 bytes.` };
+		if (bytes > LIMITS.maxChatMessageBytes) return {
+			error: `Message exceeds ${LIMITS.maxChatMessageBytes} UTF-8 bytes.`,
+			refused: true
+		};
 		const stop = this.chatStopped(live);
 		if (stop) return { error: stop };
+		if (!link.isDataLinkOpen && link.dhtDelivery?.inviteTaken) return {
+			error: INVITE_TAKEN,
+			refused: true
+		};
 		const wireId = toBase64Url(randomBytes(16)), id = `me_${wireId}`;
 		const delivery = link.isDataLinkOpen ? "stream" : link.textDelivery === "dht" ? "dht" : "unavailable";
 		if (delivery !== "stream") this.wakePeer(live);
 		const answers = {
 			...reply && { replyTo: reply },
-			...forwarded && { forwarded }
+			...forwarded && { forwarded },
+			...card && { card }
 		};
 		if (delivery === "stream" || delivery === "dht" && bytes <= 256) {
 			const validationError = link.validateText(trimmed, timestamp, wireId, reply && pairedWireReply(reply));
@@ -24619,7 +25646,8 @@ var GhostlyNode = class GhostlyNode {
 				via: "hold",
 				delivery: "sending",
 				...preview && { preview },
-				...answers
+				...answers,
+				...card?.kind === "buttons" && { buttonsRestore: "due" }
 			});
 			this.hold.hold(linkId, {
 				kind: "text",
@@ -24673,15 +25701,22 @@ var GhostlyNode = class GhostlyNode {
 	async resolveReply(message) {
 		const reply = message.replyTo;
 		if (!reply || reply.messageId) return message;
-		const original = (await db.getMessages(message.linkId)).find((m) => m.id !== message.id && replyRef(m) === reply.id);
+		const history = await db.getMessages(message.linkId);
+		const original = history.find((m) => m.id !== message.id && replyRef(m) === reply.id);
 		if (!original) return message;
-		return {
+		const resolved = {
 			...message,
 			replyTo: {
 				...replyTo(original, reply.id),
-				...reply.member && !original.member && { member: reply.member }
+				...reply.member && !original.member && { member: reply.member },
+				...reply.button && { button: reply.button }
 			}
 		};
+		const press = buttonPress(resolved, original, history);
+		return press ? {
+			...resolved,
+			press
+		} : resolved;
 	}
 	/** A paired row's reply as it goes on the wire again (a resend, a hold). */
 	/** `localStorage["ghostly-test-no-edit"]`: this app offers no edit/1, as an older one (the e2e's old contact). Nothing else reads it. */
@@ -24695,6 +25730,15 @@ var GhostlyNode = class GhostlyNode {
 	static wireReply(message) {
 		return message.replyTo && pairedWireReply(message.replyTo);
 	}
+	/** The chat is on the DHT by choice: this side's DHT only, or the contact's (its records say so). It goes live for neither. */
+	static dhtByChoice(live) {
+		return live?.stored.deliveryMode === "dht" || live?.link?.dhtDelivery?.peerMode === "dht";
+	}
+	/** A status card a caller asks to send, by the sender's rule (WISP 4xx · Status Cards), or why it cannot go. */
+	static cardToSend(raw) {
+		const checked = checkStatusCard(raw);
+		return "error" in checked ? `Status card: ${checked.error}` : checked.card;
+	}
 	/**
 	* A chat stopped by a security rejection (a stream authenticated a participation key other than the pinned one):
 	* nothing goes until the person acts. Another key on the DHT or the link's signals is ignored instead (WISP 400).
@@ -24714,7 +25758,16 @@ var GhostlyNode = class GhostlyNode {
 			error,
 			refused: true
 		});
-		if (typeof linkId === "string" && linkId.startsWith("group:")) return this.groupEdits.edit(linkId.slice(6), params.messageId, params.text, Array.isArray(params.mentions) ? params.mentions : []);
+		const card = params.card === void 0 ? void 0 : GhostlyNode.cardToSend(params.card);
+		if (typeof card === "string") return refuse(card);
+		if (card && !(typeof params.text === "string" && params.text.trim())) params = {
+			...params,
+			text: statusCardText(card)
+		};
+		if (typeof linkId === "string" && linkId.startsWith("group:")) {
+			const mentions = Array.isArray(params.mentions) ? params.mentions : [];
+			return card ? this.groupEdits.edit(linkId.slice(6), params.messageId, params.text, mentions, card) : this.groupEdits.edit(linkId.slice(6), params.messageId, params.text, mentions);
+		}
 		const live = this.links.get(linkId);
 		if (!live) return refuse("No such chat");
 		if (!live.stored.profile) return refuse("Editing needs a current chat; this compatibility chat cannot edit.");
@@ -24728,24 +25781,26 @@ var GhostlyNode = class GhostlyNode {
 		if (new TextEncoder().encode(text).length > LIMITS.maxChatMessageBytes) return refuse(`Message exceeds ${LIMITS.maxChatMessageBytes} UTF-8 bytes.`);
 		const stop = this.chatStopped(live);
 		if (stop) return { error: stop };
-		const preview = params.preview === void 0 ? void 0 : parseLinkPreview(params.preview, text);
-		if (text === message.text && (preview?.u ?? "") === (message.preview?.u ?? "")) return {
+		const preview = card || params.preview === void 0 ? void 0 : parseLinkPreview(params.preview, text);
+		if (text === message.text && (preview?.u ?? "") === (message.preview?.u ?? "") && JSON.stringify(card ?? null) === JSON.stringify(message.card ?? null)) return {
 			error: null,
 			messageId: message.id
 		};
-		const seq = (message.edit?.seq ?? 0) + 1;
-		if (seq > 100) return refuse(`This message was edited 100 times, the most one takes.`);
+		const seq = (message.edit?.seq ?? 0) + 1, most = card ? STATUS_CARD_LIMITS.edits : 100;
+		if (seq > most) return refuse(`This message was edited ${most} times, the most one takes.`);
 		const edited = withEdit(message, {
 			seq,
 			at: Date.now(),
 			text,
 			preview,
+			card,
 			pending: true
 		});
 		await db.patchMessage(linkId, message.id, () => ({
 			text: edited.text,
 			edit: edited.edit,
-			preview: edited.preview
+			preview: edited.preview,
+			card: edited.card
 		}));
 		await this.messagesChanged(linkId, [message.id]);
 		this.editsFor(linkId).flush().catch(() => {});
@@ -24772,21 +25827,30 @@ var GhostlyNode = class GhostlyNode {
 		await this.applyPeerEdit(linkId, message, edit);
 		return true;
 	}
-	/** The contact's edit on its message here, when it is newer than what shows. Not a new message: no sound, no unread, no move. */
+	/**
+	* The contact's edit on its message here, when it is newer than what shows. Not a new message: no sound, no unread, no
+	* move. A card's update is paced: at most one applied per message a second, the highest number winning.
+	*/
 	async applyPeerEdit(linkId, message, edit) {
 		if (!takesPeerEdit(message, edit.m) || (message.edit?.seq ?? 0) >= edit.e) return;
+		if (edit.sc) return this.cardEdits.take(`${linkId}\n${message.id}`, edit.e, () => this.applyPeerEditNow(linkId, message, edit));
+		return this.applyPeerEditNow(linkId, message, edit);
+	}
+	async applyPeerEditNow(linkId, message, edit) {
 		if (await db.patchMessage(linkId, message.id, (current) => {
 			if (!takesPeerEdit(current, edit.m) || (current.edit?.seq ?? 0) >= edit.e) return null;
 			const next = withEdit(current, {
 				seq: edit.e,
 				at: receivedTimestamp(edit.ts),
 				text: edit.m,
-				preview: edit.pv
+				preview: edit.pv,
+				card: edit.sc
 			});
 			return {
 				text: next.text,
 				edit: next.edit,
-				preview: next.preview
+				preview: next.preview,
+				card: next.card
 			};
 		})) await this.messagesChanged(linkId, [message.id]);
 	}
@@ -24794,6 +25858,53 @@ var GhostlyNode = class GhostlyNode {
 	takesDhtEdits(live) {
 		return !!live?.caps?.peer?.capabilities.includes(EDIT_CAPABILITY);
 	}
+	/**
+	* A question of mine with buttons went on the DHT floor or into a hold, which carry its text alone (WISP 4xx · Message
+	* Buttons): its buttons are due to go again live. Once: a row that had them restored already stays so.
+	*/
+	async buttonsWentBare(linkId, message) {
+		if (message.card?.kind !== "buttons" || message.buttonsRestore) return;
+		await db.patchMessage(linkId, message.id, (current) => current.sender === "me" && current.card?.kind === "buttons" && !current.buttonsRestore ? { buttonsRestore: "due" } : null);
+	}
+	/**
+	* Buttons the contact may not have (WISP 4xx · Message Buttons): a question whose text went on the DHT floor or into a
+	* hold reached the contact as text alone, and a copy under the same id that comes live later is taken as the one
+	* already there. Once the chat is live with an app that shows buttons (`buttons/1`) and takes edits, each such
+	* question goes again as an edit of its buttons alone: the same text, so no version and no edit mark. Once per
+	* message (the row says so, across restarts); the edit queue carries it (a card's edit goes only live, and a later
+	* edit of the bot's replaces it, the highest number winning). An app without `buttons/1` (1.0.0 would mark it edited)
+	* gets none: the row waits for one that shows buttons. The edit is marked `restore`: the bot's own event stream says
+	* nothing of it, while its number counts, so a later edit of the bot's takes the next one.
+	*/
+	async restoreButtons(linkId) {
+		const live = this.links.get(linkId), link = live?.link;
+		if (!live?.stored.profile || live.stored.group || !link?.supportsEdits || !link.sessionOffers.peer?.includes("buttons/1")) return;
+		const due = (await db.getMessages(linkId)).filter((m) => m.sender === "me" && m.buttonsRestore === "due");
+		const changed = [];
+		for (const message of due) {
+			const at = Date.now();
+			if ((await db.patchMessage(linkId, message.id, (current) => {
+				if (current.sender !== "me" || current.buttonsRestore !== "due") return null;
+				const seq = (current.edit?.seq ?? 0) + 1;
+				if (current.card?.kind !== "buttons" || !current.wireId || seq > STATUS_CARD_LIMITS.edits) return { buttonsRestore: "sent" };
+				return {
+					edit: {
+						...withEdit(current, {
+							seq,
+							at,
+							text: current.text,
+							preview: current.preview,
+							card: current.card,
+							pending: true
+						}).edit,
+						restore: true
+					},
+					buttonsRestore: "sent"
+				};
+			}))?.edit?.pending) changed.push(message.id);
+		}
+		if (changed.length) await this.messagesChanged(linkId, changed);
+	}
 	/** My edits in one 1:1 chat on their way to the contact. */
 	editsFor(linkId) {
 		let queue = this.editQueues.get(linkId);
@@ -24891,8 +26002,9 @@ var GhostlyNode = class GhostlyNode {
 				if (!link) return "You are offline. It is sent again once you are back.";
 				const at = Date.now(), snapshot = pathSnapshot(live, message.via);
 				const reply = GhostlyNode.wireReply(message);
-				const error = message.forwarded ? await link.sendMessage(message.text, message.timestamp, message.wireId, message.preview, reply, message.forwarded) : reply ? await link.sendMessage(message.text, message.timestamp, message.wireId, message.preview, reply) : await link.sendMessage(message.text, message.timestamp, message.wireId, ...message.preview ? [message.preview] : []);
+				const error = message.card ? await link.sendMessage(message.text, message.timestamp, message.wireId, message.preview, reply, message.forwarded, message.card) : message.forwarded ? await link.sendMessage(message.text, message.timestamp, message.wireId, message.preview, reply, message.forwarded) : reply ? await link.sendMessage(message.text, message.timestamp, message.wireId, message.preview, reply) : await link.sendMessage(message.text, message.timestamp, message.wireId, ...message.preview ? [message.preview] : []);
 				await this.noteTextSend(linkId, message, snapshot, at, error, link);
+				if (!error && message.via === "pkarr") await this.buttonsWentBare(linkId, message);
 				return error;
 			}, (message) => message.via === "pkarr" ? DHT_MESSAGE_TTL : 2e4, (message) => {
 				const pending = this.links.get(linkId)?.stored.dhtDeliveryState?.pending;
@@ -24900,10 +26012,10 @@ var GhostlyNode = class GhostlyNode {
 			}, { resender: {
 				ready: (message) => {
 					const live = this.links.get(linkId), link = live?.link;
-					if (message.via === "pkarr" && live?.stored.deliveryMode !== "dht" && link?.textDelivery !== "stream") return false;
+					if (message.via === "pkarr" && !GhostlyNode.dhtByChoice(live) && link?.textDelivery !== "stream") return false;
 					return !!link?.canSendText && !!message.wireId && !link.validateText(message.text, message.timestamp, message.wireId, GhostlyNode.wireReply(message));
 				},
-				requeueExpired: () => this.links.get(linkId)?.stored.deliveryMode !== "dht",
+				requeueExpired: () => !GhostlyNode.dhtByChoice(this.links.get(linkId)),
 				via: (message) => {
 					const delivery = this.links.get(linkId)?.link?.textDelivery;
 					return delivery === "dht" ? "pkarr" : delivery === "stream" ? "datalink" : message.via;
@@ -24915,6 +26027,7 @@ var GhostlyNode = class GhostlyNode {
 						via: "hold",
 						resendUntil: void 0
 					});
+					await this.buttonsWentBare(linkId, message);
 					await this.messagesChanged(linkId, [message.id]);
 					this.hold.hold(linkId, {
 						kind: "text",
@@ -24996,7 +26109,7 @@ var GhostlyNode = class GhostlyNode {
 			frame: "paired-message",
 			protocol: "chat/1",
 			plaintextBytes,
-			wireBytes: utf8Encode(pairedMessageFrame(message.wireId ?? "", message.timestamp, message.text, message.preview, GhostlyNode.wireReply(message))).length
+			wireBytes: utf8Encode(pairedMessageFrame(message.wireId ?? "", message.timestamp, message.text, message.preview, GhostlyNode.wireReply(message), message.forwarded, message.card)).length
 		};
 		return this.noteDetails(linkId, message.id, (details) => ({
 			...withSend(details, send),
@@ -25059,7 +26172,7 @@ var GhostlyNode = class GhostlyNode {
 			frame: "paired-message",
 			protocol: "chat/1",
 			plaintextBytes,
-			wireBytes: utf8Encode(pairedMessageFrame(message.id ?? "", message.timestamp, message.text, message.preview)).length
+			wireBytes: utf8Encode(pairedMessageFrame(message.id ?? "", message.timestamp, message.text, message.preview, void 0, message.forwarded, message.card)).length
 		} };
 	}
 	/** A held item's fate, on its message: stored for the contact (with the item's place in the mailbox), failed, or picked up. */
@@ -25115,6 +26228,31 @@ var GhostlyNode = class GhostlyNode {
 			completedAt: now,
 			...message.sender === "me" && { receiptAt: now }
 		});
+		if (!error && message.sender === "me" && message.delivery !== "delivered") {
+			if (await db.patchMessage(linkId, message.id, (m) => m.delivery === "delivered" ? null : {
+				delivery: "delivered",
+				deliveryError: void 0
+			})) {
+				await this.messagesChanged(linkId, [message.id]);
+				this.emitState();
+			}
+		}
+	}
+	/**
+	* The contact's app answered for a payment of mine (`pay-res`): its message gets two ticks, as a text gets from its
+	* receipt. A payment goes with no delivery state of its own, so its mark read one tick for good. 1:1 chats only: a
+	* group's payments live in the group's history, under other ids.
+	*/
+	async notePaymentReceipt(linkId, paymentId) {
+		const message = (await db.getMessages(linkId)).find((m) => m.sender === "me" && m.paymentId === paymentId);
+		if (!message || message.delivery === "delivered") return;
+		if (await db.patchMessage(linkId, message.id, (m) => m.delivery === "delivered" ? null : {
+			delivery: "delivered",
+			deliveryError: void 0
+		})) {
+			await this.messagesChanged(linkId, [message.id]);
+			this.emitState();
+		}
 	}
 	deleteMessage({ linkId, messageId }) {
 		const live = this.links.get(linkId);
@@ -25395,6 +26533,7 @@ var GhostlyNode = class GhostlyNode {
 			transferred: 0,
 			size: file.size
 		});
+		this.flushState();
 		const first = `peer_${wire.timestamp}`, own = `${first}_${wire.id}`;
 		const messageIds = files.messageIds ??= /* @__PURE__ */ new Map();
 		const holder = messageIds.get(first);
@@ -25717,16 +26856,22 @@ var GhostlyNode = class GhostlyNode {
 		if (!this.settings.online) throw new Error("Go online to join a group");
 		return { groupId: await this.groups.joinByLink(link) };
 	}
-	async sendGroupMessage({ groupId, text, mentions, replyTo }) {
+	async sendGroupMessage({ groupId, text: given, mentions, replyTo, card: raw, button }) {
+		const card = raw === void 0 ? void 0 : GhostlyNode.cardToSend(raw);
+		if (typeof card === "string") return { error: card };
+		const text = card && !(typeof given === "string" && given.trim()) ? statusCardText(card) : given;
 		if (typeof text !== "string") return { error: "Nothing to send" };
 		const reply = replyTo === void 0 ? void 0 : await this.replyFor(`group:${groupId}`, replyTo);
 		if (typeof reply === "string") return { error: reply };
 		const named = Array.isArray(mentions) ? mentions : [];
-		const sent = await this.groups.send(groupId, text, named, reply && {
+		if (button !== void 0 && !(typeof button === "string" && BUTTON_ID.test(button) && reply)) return { error: "No such button" };
+		const wireReply = reply && {
 			i: reply.id,
 			s: reply.snippet,
-			f: reply.member
-		});
+			f: reply.member,
+			...button !== void 0 && { b: button }
+		};
+		const sent = card ? await this.groups.send(groupId, text, named, wireReply, void 0, card) : await this.groups.send(groupId, text, named, wireReply);
 		if (!sent.error) this.wakeMentioned(groupId, text, named);
 		return sent;
 	}
@@ -25734,6 +26879,59 @@ var GhostlyNode = class GhostlyNode {
 		return this.groups.messages(groupId);
 	}
 	/**
+	* Presses a button of a message someone else sent to a chat or a group (`group:<id>`), WISP 4xx · Message Buttons:
+	* a reply to it whose text is the button's label and whose `r` names the button, so the author learns who pressed
+	* what, and an app without buttons reads an ordinary reply. Refused: my own message, a button it does not have,
+	* buttons the author closed, a question I already answered with a `once` button, a second press within a second.
+	*/
+	async pressButton(params) {
+		const { linkId, messageId, buttonId } = params ?? {};
+		if (typeof linkId !== "string" || typeof messageId !== "string" || typeof buttonId !== "string") return {
+			error: "No button to press",
+			refused: true
+		};
+		const history = await db.getMessages(linkId);
+		const message = history.find((m) => m.id === messageId);
+		if (!message) return {
+			error: "That message is not in this chat",
+			refused: true
+		};
+		if (message.sender === "me") return {
+			error: "Buttons on your own message do nothing",
+			refused: true
+		};
+		const state = buttonsState(message, replyRef(message), history);
+		const button = state?.card.buttons.find((b) => b.id === buttonId);
+		if (!state || !button) return {
+			error: "That message has no such button",
+			refused: true
+		};
+		if (!state.open) return {
+			error: state.card.closed ? "These buttons are closed" : "You already answered",
+			refused: true
+		};
+		const key = `${linkId}\n${messageId}`, now = Date.now();
+		if (now - (this.pressedAt.get(key) ?? -Infinity) < 1e3) return {
+			error: "One press a second",
+			refused: true,
+			paced: true
+		};
+		if (this.pressedAt.size > 500) this.pressedAt.clear();
+		this.pressedAt.set(key, now);
+		if (linkId.startsWith("group:")) return this.sendGroupMessage({
+			groupId: linkId.slice(6),
+			text: button.label,
+			replyTo: messageId,
+			button: button.id
+		});
+		return this.sendMessage({
+			linkId,
+			text: button.label,
+			replyTo: messageId,
+			button: button.id
+		});
+	}
+	/**
 	* Forwards messages of a chat or a group (`group:<id>`) to up to `FORWARD_TARGETS` others (WISP 400 § Forwards): each
 	* as a new message of mine, in the order they were written, carrying one more hop than it had and nothing of who wrote
 	* it or where. A text goes as written; a file from the bytes on this device (a copy per chat, nothing fetched again),
@@ -26158,8 +27356,19 @@ var GhostlyNode = class GhostlyNode {
 		if (!live.link) throw new GhostlyHttpError("offline", "Ghostly is offline");
 		return live.link.request(serviceId, request);
 	}
-	async walletAddMint({ url, primary }) {
+	/**
+	* `network`: the Cashu wallet it is added from. A mint's network is its own (a test mint is Testnet's, any other
+	* Mainnet's): one of the other network is refused, never filed into that network's wallet (which it would make,
+	* unseen from the wallet it was added from). A test mint or one on this machine is known by its address, and is
+	* refused from Mainnet before it is contacted. Any other address is Mainnet's only by default: from Testnet it is
+	* contacted first, so a typo or a server that is not a mint is named as such, and it is called a mint of real sats
+	* only once it answered as a mint.
+	*/
+	async walletAddMint({ url, primary, network }) {
+		const other = !!network && mintNetwork(normalizeMintUrl(url)) !== network;
+		if (other && network === "mainnet") throw engineError("testMintOnMainnet");
 		const mint = await this.wallet.checkMint(url);
+		if (other) throw engineError("realMintOnTestnet");
 		const others = this.settings.mints.filter((m) => m !== mint.url);
 		const known = others.length !== this.settings.mints.length;
 		if (primary) await this.updateSettings({ settings: { mints: [mint.url, ...others] } });
@@ -26215,6 +27424,11 @@ var GhostlyNode = class GhostlyNode {
 		await this.refreshWallet();
 		const made = this.walletView.wallets?.find((w) => w.type === type && w.network === network && (card === void 0 || w.card === card));
 		if (!made) throw new Error(`The ${label} wallet did not come up. Nothing was lost: try again.`);
+		await this.walletSetup.made(type, network);
+		this.walletView = {
+			...this.walletView,
+			setup: this.walletSetup.view()
+		};
 		return made;
 	}
 	/**
@@ -26286,8 +27500,8 @@ var GhostlyNode = class GhostlyNode {
 		await this.refreshWallet();
 		const card = type === "lightning" ? asked ?? this.lightnings[network].receivingId : void 0;
 		const lightningName = card !== void 0 ? this.walletView.networks?.[network].lightnings?.find((c) => c.card === card)?.name : void 0;
-		const label = lightningName ? `${networkLabel(network)} Lightning card “${lightningName}”` : `${networkLabel(network)} ${WALLET_NAMES[type]}`;
-		if (!this.walletView.wallets?.some((w) => w.type === type && w.network === network && (card === void 0 || w.card === card))) throw new Error(`There is no ${label} wallet to remove`);
+		const label = lightningName ? `${networkLabel(network)} Lightning card “${lightningName}”` : `${networkLabel(network)} ${WALLET_NAMES[type]} wallet`;
+		if (!this.walletView.wallets?.some((w) => w.type === type && w.network === network && (card === void 0 || w.card === card))) throw new Error(`There is no ${label} to remove`);
 		const first = walletRemoval(type, network, this.walletView.networks?.[network], this.walletView.intents, card);
 		if (first.comesWith) throw new Error(`Lightning through the Cashu mints comes with your ${networkLabel(network)} Cashu wallet: remove that wallet to remove it`);
 		if (first.awaiting.length) {
@@ -26297,7 +27511,7 @@ var GhostlyNode = class GhostlyNode {
 		const removal = first.awaiting.length ? walletRemoval(type, network, this.walletView.networks?.[network], this.walletView.intents, card) : first;
 		if (removal.pending) throw new Error(`A payment through this wallet is not finished yet (${removal.pending}). Cancel it or wait for it to settle, then remove the wallet.`);
 		if (removalRisksFunds(removal) && acceptLoss !== true) throw new Error(lossRefusal(label, removal));
-		for (const item of removal.awaiting) if (item.kind === "request" && item.paymentId) await this.closeRequest(item.paymentId, `you removed the ${label} wallet it was paid to`).catch(() => {});
+		for (const item of removal.awaiting) if (item.kind === "request" && item.paymentId) await this.closeRequest(item.paymentId, `you removed the ${label} it was paid to`).catch(() => {});
 		try {
 			if (type === "cashu") {
 				const mints = this.networkMints(network);
@@ -26314,6 +27528,11 @@ var GhostlyNode = class GhostlyNode {
 			await this.refreshWallet();
 		}
 		if (!this.walletView.wallets?.some((w) => w.type === type && w.network === network)) await this.forgetChatNetwork(type, network);
+		const reminders = this.settings.backupReminders;
+		if (reminders && type !== "lightning" && `${type}:${network}` in reminders) {
+			await this.saveBackups(forgetWallet(reminders, `${type}:${network}`));
+			this.emitState();
+		}
 	}
 	/**
 	* Before a wallet goes: its own rail is asked about what was paid to it (the mints about its quotes, the source about
@@ -26467,8 +27686,41 @@ var GhostlyNode = class GhostlyNode {
 		await this.updateSettings({ settings: { mints: [url, ...this.settings.mints.filter((m) => m !== url)] } });
 		await this.refreshWallet();
 	}
-	async walletRemoveMint({ url }) {
-		if (await this.wallet.balanceAt(url) > 0) throw new Error("Move your sats out of this mint before removing it");
+	/**
+	* Removes one mint of a Cashu wallet. Never one that holds sats, nor a network's last mint (that removes the Cashu
+	* wallet: `walletRemove`). One that still waits for money (an invoice not paid yet, paid ecash not claimed) goes
+	* only with `acceptLoss`: what is paid to it afterwards is claimed, but shows only once the mint is added again.
+	*/
+	async walletRemoveMint({ url, acceptLoss }) {
+		const network = mintNetwork(url);
+		const mints = this.networkMints(network);
+		if (mints.length === 1 && mints[0] === url) throw engineError("lastMint", { network: networkLabel(network) });
+		if (await this.wallet.balanceAt(url) > 0) throw engineError("mintHoldsSats");
+		const waits = async () => mintAwaiting(url, {
+			network,
+			quotes: await this.wallet.quotes(),
+			payments: this.desk.records(),
+			now: Date.now()
+		});
+		if ((await waits()).length) {
+			let timer;
+			await Promise.race([this.wallet.checkQuotes([url]).catch(() => {}), new Promise((resolve) => {
+				timer = setTimeout(resolve, removalTiming.claimMs);
+			})]);
+			clearTimeout(timer);
+			if (await this.wallet.balanceAt(url) > 0) {
+				await this.refreshWallet();
+				throw engineError("mintHoldsSats");
+			}
+			const awaiting = await waits();
+			if (awaiting.length && acceptLoss !== true) {
+				const listed = awaiting.map((a) => {
+					const text = ENGLISH_REMOVAL.item(a.kind, ENGLISH_REMOVAL.sats(a.amount, network));
+					return text.charAt(0).toLowerCase() + text.slice(1);
+				}).join("; ");
+				throw new Error(`This mint still waits for money: ${listed}. Confirm that what is paid to it afterwards shows only once you add the mint again to remove it.`);
+			}
+		}
 		await this.updateSettings({ settings: { mints: this.settings.mints.filter((m) => m !== url) } });
 		await this.refreshWallet();
 	}
@@ -26480,6 +27732,7 @@ var GhostlyNode = class GhostlyNode {
 		const n = this.net(network);
 		if (via === "cashu") {
 			const quote = await this.wallet.receiveLightning(amount, void 0, n);
+			this.awaitingSoon();
 			return {
 				quote: quote.quote,
 				invoice: quote.invoice,
@@ -26488,6 +27741,7 @@ var GhostlyNode = class GhostlyNode {
 			};
 		}
 		const created = await (await this.lightningCard(n, card)).createInvoice(amount);
+		this.awaitingSoon();
 		return {
 			quote: created.paymentHash,
 			invoice: created.invoice,
@@ -26642,7 +27896,7 @@ var GhostlyNode = class GhostlyNode {
 		return this.usdtWallets[this.net(params.network)].unlock(params.password);
 	}
 	usdtReveal(params) {
-		return this.usdtWallets[this.net(params?.network)].reveal(params?.password);
+		return this.copied("usdt", params?.network, () => this.usdtWallets[this.net(params?.network)].reveal(params?.password));
 	}
 	usdtLock(params) {
 		return this.usdtWallets[this.net(params?.network)].lock();
@@ -26651,7 +27905,7 @@ var GhostlyNode = class GhostlyNode {
 		return this.usdtWallets[this.net(params?.network)].refresh();
 	}
 	usdtExportBackup(params) {
-		return this.usdtWallets[this.net(params.network)].exportBackup(params.password);
+		return this.copied("usdt", params.network, () => this.usdtWallets[this.net(params.network)].exportBackup(params.password));
 	}
 	async usdtRestoreBackup(params) {
 		const { wallet } = await this.restoreInto(this.usdtWallets, params.network, (w) => w.restoreBackup(params.text, params.password));
@@ -26667,10 +27921,10 @@ var GhostlyNode = class GhostlyNode {
 		return this.arkWallets[this.net(params?.network)].lock();
 	}
 	arkBackup(params) {
-		return this.arkWallets[this.net(params?.network)].backup(params?.password);
+		return this.copied("arkade", params?.network, () => this.arkWallets[this.net(params?.network)].backup(params?.password));
 	}
 	arkExportBackup(params) {
-		return this.arkWallets[this.net(params.network)].exportBackup(params.password);
+		return this.copied("arkade", params.network, () => this.arkWallets[this.net(params.network)].exportBackup(params.password));
 	}
 	async arkRestoreBackup(params) {
 		const { wallet } = await this.restoreInto(this.arkWallets, params.network, (w) => w.restoreBackup(params.text, params.password));
@@ -26686,10 +27940,10 @@ var GhostlyNode = class GhostlyNode {
 		return this.barkWallets[barkMode(params.network)].create(params);
 	}
 	barkBackup(params) {
-		return this.barkWallets[this.net(params?.network)].backup();
+		return this.copied("bark", params?.network, () => this.barkWallets[this.net(params?.network)].backup());
 	}
 	barkExportBackup(params) {
-		return this.barkWallets[this.net(params.network)].exportBackup(params.password);
+		return this.copied("bark", params.network, () => this.barkWallets[this.net(params.network)].exportBackup(params.password));
 	}
 	async barkRestoreBackup(params) {
 		const { wallet } = await this.restoreInto(this.barkWallets, params.network, (w) => w.restoreBackup(params.text, params.password));
@@ -26742,10 +27996,10 @@ var GhostlyNode = class GhostlyNode {
 		return (this.fedimintOf(params.federation) ?? this.fedimintWallets.mainnet).takeBack(params.federation, params.operation);
 	}
 	fedimintBackup(params) {
-		return this.fedimintWallets[this.net(params?.network)].backup();
+		return this.copied("fedimint", params?.network, () => this.fedimintWallets[this.net(params?.network)].backup());
 	}
 	fedimintExportBackup(params) {
-		return this.fedimintWallets[this.net(params.network)].exportBackup(params.password);
+		return this.copied("fedimint", params.network, () => this.fedimintWallets[this.net(params.network)].exportBackup(params.password));
 	}
 	async fedimintRestoreBackup(params) {
 		return (await this.restoreInto(this.fedimintWallets, params.network, (w) => w.restoreBackup(params.text, params.password))).result;
@@ -26758,14 +28012,14 @@ var GhostlyNode = class GhostlyNode {
 		await this.sparkWallets[sparkMode(params.network)].create(params);
 	}
 	async sparkBackup(params) {
-		const { mnemonic, network } = await this.sparkWallets[this.net(params?.network)].backup();
+		const { mnemonic, network } = await this.copied("spark", params?.network, () => this.sparkWallets[this.net(params?.network)].backup());
 		return {
 			mnemonic,
 			network
 		};
 	}
 	sparkExportBackup(params) {
-		return this.sparkWallets[this.net(params.network)].exportBackup(params.password);
+		return this.copied("spark", params.network, () => this.sparkWallets[this.net(params.network)].exportBackup(params.password));
 	}
 	async sparkRestoreBackup(params) {
 		const { wallet } = await this.restoreInto(this.sparkWallets, params.network, (w) => w.restoreBackup(params.text, params.password, params.apiKey));
@@ -26810,7 +28064,7 @@ var GhostlyNode = class GhostlyNode {
 			if (params.requestId) {
 				if (!request || request.linkId !== params.linkId || request.direction !== "in" || request.state !== "pending" || request.amount !== params.amount) throw new Error("Payment review does not match the authenticated request");
 				if (params.target.method !== "cashu" ? JSON.stringify(request.target) !== JSON.stringify(params.target) : !!request.target || params.target.address !== request.id || !request.mints?.includes(params.target.provider)) throw new Error("Selected method or mint does not match the authenticated request");
-				if (request.lightningPending || Object.values(this.desk.views()).some((p) => p.kind === "payment" && p.requestId === request.id && p.linkId === params.linkId && !["failed", "reclaimed"].includes(p.state))) throw new Error("This request already has a payment; reconcile it instead");
+				if (request.lightningPending || Object.values(this.desk.views()).some((p) => p.kind === "payment" && p.requestId === request.id && p.linkId === params.linkId && !["failed", "reclaimed"].includes(p.state))) throw engineError("requestPaymentInFlight");
 				const asked = paymentNetwork(request);
 				if (asked !== paying) throw new Error(crossNetwork(paying, asked));
 			} else if (params.target.method !== "cashu" || !payee || params.target.address !== payee) throw new Error("Destination does not match the authenticated peer");
@@ -26843,18 +28097,18 @@ var GhostlyNode = class GhostlyNode {
 		if (intent) assertConfirmedReal(intent.review.method === "cashu" ? mintNetwork(intent.review.provider) : walletNetworkOf(intent.review.network), params.confirmedReal);
 		if (intent?.review.linkId) {
 			const link = this.paymentLink(intent.review.linkId);
-			if (!link || intent.review.method === "arkade" && !link.supportsArkPayments) throw new Error("Reconnect the data link before approving. Your review was saved.");
+			if (!link || intent.review.method === "arkade" && !link.supportsArkPayments) throw engineError("reconnectBeforeApprove");
+			if (intent.review.requestId) {
+				const request = this.desk.payment(intent.review.requestId);
+				if (!request || request.state !== "pending" || request.lightningPending) throw engineError("requestNotAwaiting");
+			}
+			await link.requirePaymentSupport();
 			if (intent.review.method === "usdt" && !link.supportsUsdtPayments) throw new Error("Reconnect a peer supporting USDT before approving");
 			if (intent.review.method === "bark" && !link.supportsBarkPayments) throw new Error("Reconnect a peer supporting Bark before approving");
 			if (intent.review.method === "bitcoin" && !link.supportsBitcoinPayments) throw new Error("Reconnect a peer taking on-chain Bitcoin before approving");
 			if (intent.review.method === "fedimint" && !link.supportsFedimintPayments) throw new Error("Reconnect a peer taking Fedimint before approving");
 			if (intent.review.method === "spark" && !link.supportsSparkPayments) throw new Error("Reconnect a peer taking Spark before approving");
 			if (intent.review.method === "cashu" && !link.allowsPayment("cashu")) throw new Error("Cashu is off in this chat");
-			await link.requirePaymentSupport();
-			if (intent.review.requestId) {
-				const request = this.desk.payment(intent.review.requestId);
-				if (!request || request.state !== "pending" || request.lightningPending) throw new Error("This request is no longer awaiting payment. Check its status before spending.");
-			}
 		}
 		const review = await this.paymentCoordinator.approve(params.id);
 		await this.desk.confirmReviewedCashu(review);
@@ -26880,6 +28134,19 @@ var GhostlyNode = class GhostlyNode {
 	cancelPayment(params) {
 		return this.paymentCoordinator.cancel(params.id);
 	}
+	/**
+	* Reviews left pending that no Approve can send: past their expiry (a direct send reviewed and never approved, say),
+	* or for a request paid some other way or closed meanwhile. Cancelled as Cancel does, so nothing they reserved stays
+	* held and they leave the wallet's list of payments to finish; each stays in the store as cancelled. A review
+	* approved, submitted or of unknown outcome is never touched.
+	*/
+	async dropStaleReviews(now = Date.now()) {
+		if (this.shuttingDown) return [];
+		return this.paymentCoordinator.dropStale(now, (review) => {
+			const request = review.requestId ? this.desk.payment(review.requestId) : void 0;
+			return !!request && request.linkId === review.linkId && (request.state === "settled" || !!request.closed);
+		}).catch(() => []);
+	}
 	/** `network`: the Cashu card of that network sends (its mints). `confirmedReal`: required on Mainnet. */
 	sendPayment(params) {
 		const live = this.links.get(params.linkId);
@@ -26980,6 +28247,7 @@ var GhostlyNode = class GhostlyNode {
 	async updateSettings({ settings: patch }) {
 		const { nostr, ...rest } = patch;
 		const settings = rest;
+		delete settings.backupReminders;
 		const wasOnline = this.settings.online;
 		for (const server of settings.iceServers ?? []) {
 			const problem = iceServerProblem(server);
@@ -27012,6 +28280,7 @@ var GhostlyNode = class GhostlyNode {
 		delete settings.wakeRotate;
 		delete settings.wakeMutedGroups;
 		delete settings.wakeHeldBy;
+		delete settings.walletSetup;
 		const relayBefore = this.hyperdhtRelay;
 		if (nostr) {
 			const current = effectiveNostrSettings(this.settings.nostr);
@@ -27094,7 +28363,7 @@ var GhostlyNode = class GhostlyNode {
 			for (const live of this.links.values()) this.startLink(live.stored.id, await db.getMessages(live.stored.id));
 			this.hold.start();
 			this.startGroupEntries();
-			this.prepareSpare();
+			this.prepareSpare(STARTUP_QUIET_MS);
 			this.did.publishNow().catch(() => {});
 		}
 		if (wasOnline && !this.settings.online) this.stopGroupEntries();
@@ -27192,6 +28461,8 @@ var GhostlyNode = class GhostlyNode {
 		if (!live?.stored.group) return;
 		this.links.delete(linkId);
 		this.groupWakeReceived.delete(linkId);
+		this.groupNativeWaiting.delete(linkId);
+		this.groupNativeRetryAt = 0;
 		if (live.stored.wakeToken && this.meshEdge(live.stored)) {
 			const group = live.stored.group, peer = live.stored.groupPeer;
 			if (!this.membership(group)?.members.has(peer)) this.rotateWake().then(() => this.emitState());
@@ -27210,6 +28481,24 @@ var GhostlyNode = class GhostlyNode {
 		await live.caps?.stop();
 		await db.deleteLink(linkId);
 	}
+	/**
+	* An edge's session opened or ended: kept, so that an app starting again knows which edges were live when it quit
+	* (`edgeLive`, `resume`). Nothing is written while the app shuts down: an edge live then was live when it quit.
+	*/
+	noteEdgeLive(linkId, up) {
+		const live = this.links.get(linkId);
+		if (!live || this.shuttingDown || !!live.stored.edgeLive === up) return;
+		const since = up ? Date.now() : void 0;
+		live.stored = {
+			...live.stored,
+			edgeLive: up || void 0,
+			edgeLiveSince: since
+		};
+		db.patchLink(linkId, {
+			edgeLive: up || void 0,
+			edgeLiveSince: since
+		}).catch(() => {});
+	}
 	/** The edge of a group toward one member: a paired link pinned to that member's key, carrying group frames and nothing else. */
 	async openEdge(state, peer, expectPeer = false) {
 		const me = identityFromSeedB64(state.seedB64);
@@ -27278,7 +28567,10 @@ var GhostlyNode = class GhostlyNode {
 	}
 	startGroupEntries() {
 		if (this.groupEntryTimer || this.shuttingDown || this.options.deferGroups) return;
-		this.groupEntryTimer = setInterval(() => void this.groups.tick().catch(() => {}), 1e3);
+		this.groupEntryTimer = setInterval(() => {
+			this.groups.tick().catch(() => {});
+			this.retryGroupNative();
+		}, 1e3);
 	}
 	stopGroupEntries() {
 		if (this.groupEntryTimer) clearInterval(this.groupEntryTimer);
@@ -27291,6 +28583,8 @@ var GhostlyNode = class GhostlyNode {
 		const group = stored.group, peer = stored.groupPeer, entry = !!stored.groupEntry;
 		const role = stored.groupEntry ?? "edge";
 		let seen = false;
+		const native = this.keepsGroupNative(stored);
+		const resumeOn = native ? TRANSPORTS.find((t) => t !== "webrtc/1" && t in this.nativeFactories && !!stored.peerTransports?.includes(t)) : "webrtc/1";
 		live.pairing = { status: "connecting" };
 		live.link = new GhostLink({
 			paymentMethods: entry ? {
@@ -27308,6 +28602,15 @@ var GhostlyNode = class GhostlyNode {
 			barkPaymentsSupport: !entry,
 			params: stored,
 			rtcAvailable: typeof RTCPeerConnection !== "undefined",
+			resume: !entry && stored.edgeLive ? resumeOn : void 0,
+			native: {
+				peerDescriptors: stored.peerDescriptors,
+				peerTransports: stored.peerTransports,
+				peerFallback: stored.peerFallback,
+				automatic: true
+			},
+			packetTransports: !this.options.webrtcGroupLinks,
+			resumeFloor: !entry && stored.edgeLive ? stored.edgeLiveSince : void 0,
 			pairing: {
 				credentials: {
 					seedB64: stored.participationSeed,
@@ -27340,6 +28643,7 @@ var GhostlyNode = class GhostlyNode {
 				onGroupFrame: (frame) => entry ? this.groups.handleContactFrame(linkId, frame) : frame.t === "group-pay" ? this.groupPayments.receive(group, peer, frame) : frame.t === "group-wake" ? this.receiveGroupWake(linkId, frame) : this.groups.handleEdgeFrame(group, peer, frame),
 				onGroupsSupport: (supported) => {
 					if (supported) traceJoin(group, "link.ready", { role });
+					if (!entry) this.noteEdgeLive(linkId, supported);
 					if (supported) {
 						if (entry) this.groups.entryReady(group, linkId, peer);
 						else {
@@ -27352,6 +28656,19 @@ var GhostlyNode = class GhostlyNode {
 					}
 					this.emitState();
 				},
+				onPacketTransports: (peerTransports, peerDescriptors) => {
+					const patch = {
+						peerTransports,
+						peerDescriptors,
+						peerFallback: true
+					};
+					live.stored = {
+						...live.stored,
+						...patch
+					};
+					db.patchLink(linkId, patch).catch(() => {});
+					if (this.keepsGroupNative(live.stored)) this.ensureNativeEndpoints(linkId);
+				},
 				...entry ? {} : {
 					onPaymentRequest: (request) => this.desk.onPaymentRequest(linkId, request),
 					onPaymentAsk: (ask) => this.desk.onPaymentAsk(linkId, ask),
@@ -27397,6 +28714,16 @@ var GhostlyNode = class GhostlyNode {
 		});
 		traceJoin(group, "link.start", { role });
 		live.link.start();
+		if (native) this.ensureNativeEndpoints(linkId);
+	}
+	/**
+	* Whether a group's link (an edge, an entry session) runs native endpoints (WISP 9xx § Transports): where this app has
+	* no WebRTC (the Linux Desktop), and where the member's has none, as its packet said. Between two apps that have
+	* WebRTC it runs none, as before: a group of eight would otherwise hold seven listeners per transport for nothing.
+	*/
+	keepsGroupNative(stored) {
+		if (this.options.webrtcGroupLinks) return false;
+		return typeof RTCPeerConnection === "undefined" || !!stored.peerTransports && !stored.peerTransports.includes("webrtc/1");
 	}
 	startLink(linkId, messages) {
 		const live = this.links.get(linkId);
@@ -27428,6 +28755,8 @@ var GhostlyNode = class GhostlyNode {
 			reactionsSupport: this.options.reactions !== false,
 			editSupport: !GhostlyNode.testNoEdit(),
 			pinSupport: true,
+			statusCardSupport: true,
+			buttonsSupport: true,
 			wakeSupport: true,
 			servicesSupport: this.options.servicesSupport ?? (this.options.platform ?? "web") !== "web",
 			dht: stored.profile ? {
@@ -27439,6 +28768,7 @@ var GhostlyNode = class GhostlyNode {
 						dhtDeliveryState: state
 					};
 				},
+				firstControlAfterMs: STARTUP_QUIET_MS,
 				capsRev: () => live.caps?.rev,
 				peerCapsRev: (rev) => live.caps?.peerRev(rev),
 				peerAcceptsText: () => {
@@ -27456,6 +28786,7 @@ var GhostlyNode = class GhostlyNode {
 				automatic: stored.preferredTransport === void 0
 			},
 			resume: stored.pairedPeerKey && stored.deliveryMode !== "dht" ? this.transportLogOf(live)?.liveAtLastRun : void 0,
+			resumeFloor: stored.pairedPeerKey && stored.deliveryMode !== "dht" ? this.transportLogOf(live)?.liveSinceAtLastRun : void 0,
 			pairing: credentials ? {
 				credentials,
 				verifyPeer: async (key) => {
@@ -27545,7 +28876,10 @@ var GhostlyNode = class GhostlyNode {
 					if (log.chose("contact", transport, Date.now())) this.saveTransportLog(live, log);
 				},
 				onTransportSwitched: () => {
-					if (stored.profile && !stored.group) this.outboxFor(linkId).flush({ reopened: true }).catch(() => {}).then(() => this.editsFor(linkId).flush({ reopened: true })).catch(() => {});
+					if (stored.profile && !stored.group) {
+						this.editsFor(linkId).reopened();
+						this.outboxFor(linkId).flush({ reopened: true }).catch(() => {}).then(() => this.editsFor(linkId).flush()).catch(() => {});
+					}
 					this.desk.replay(linkId).catch(() => {});
 					this.observeTransport(linkId);
 				},
@@ -27584,7 +28918,7 @@ var GhostlyNode = class GhostlyNode {
 					live.pairing = state;
 					if (state.status === "ready") this.identities.ready(linkId);
 					else this.identities.closed(linkId);
-					if (state.status === "ready" && live.link) this.hold.rememberPeerMethods(linkId, PAYMENT_METHODS.filter((m) => live.link.peerAllowsPayment(m))).catch(() => {});
+					if (state.status === "ready" && live.link) this.hold.rememberPeerMethods(linkId, PAYMENT_METHODS.filter((m) => live.link.peerChoosesPayment(m))).catch(() => {});
 					live.proofs?.stop();
 					this.observeTransport(linkId);
 					this.emitState();
@@ -27610,7 +28944,7 @@ var GhostlyNode = class GhostlyNode {
 				onMessageEdit: stored.profile && !stored.group ? (edit) => this.receiveEdit(linkId, edit) : void 0,
 				onEditReceipt: stored.profile && !stored.group ? (id, e) => this.editsFor(linkId).received(id, e) : void 0,
 				onEditSupport: (supported) => {
-					if (supported && stored.profile && !stored.group) this.editsFor(linkId).flush({ reopened: true }).catch(() => {});
+					if (supported && stored.profile && !stored.group) this.restoreButtons(linkId).catch(() => {}).then(() => this.editsFor(linkId).flush()).catch(() => {});
 				},
 				onWakeSupport: (supported) => {
 					if (supported && stored.profile && !stored.group) this.shareWake(linkId);
@@ -27644,7 +28978,10 @@ var GhostlyNode = class GhostlyNode {
 					}
 					if (stored.profile && live.stored.deliveryMode !== "dht" && state !== "open") this.outboxFor(linkId).disconnected().catch(() => {});
 					if (state !== "open" && was === "open") live.caps?.refresh();
-					if (stored.profile && !stored.group && state === "open") this.outboxFor(linkId).flush({ reopened: true }).catch(() => {}).then(() => this.editsFor(linkId).flush({ reopened: true })).catch(() => {});
+					if (stored.profile && !stored.group && state === "open") {
+						this.editsFor(linkId).reopened();
+						this.outboxFor(linkId).flush({ reopened: true }).catch(() => {}).then(() => this.editsFor(linkId).flush()).catch(() => {});
+					}
 					if (stored.profile && state !== "open" && live.pairing?.status !== "error") live.pairing = { status: "connecting" };
 					this.observeTransport(linkId);
 					this.emitState();
@@ -27697,7 +29034,8 @@ var GhostlyNode = class GhostlyNode {
 						details: GhostlyNode.receivedTextDetails(!!stored.profile, message),
 						...message.preview && { preview: message.preview },
 						...stored.profile && message.reply && { replyTo: receivedPairedReply(message.reply) },
-						...stored.profile && message.forwarded && { forwarded: message.forwarded }
+						...stored.profile && message.forwarded && { forwarded: message.forwarded },
+						...stored.profile && message.card && { card: message.card }
 					});
 				},
 				onCallSignal: (signal) => this.events.onCallSignal(linkId, signal),
@@ -27720,7 +29058,10 @@ var GhostlyNode = class GhostlyNode {
 				onPaymentRequest: (request) => this.desk.onPaymentRequest(linkId, request),
 				onPaymentAsk: (ask) => this.desk.onPaymentAsk(linkId, ask),
 				onPayment: (payment) => this.desk.onPayment(linkId, payment),
-				onPaymentResult: (result) => this.desk.onPaymentResult(linkId, result),
+				onPaymentResult: async (result) => {
+					await this.desk.onPaymentResult(linkId, result);
+					this.notePaymentReceipt(linkId, result.id).catch(() => {});
+				},
 				onFileStored: async (wire) => {
 					const stored = (await fileStore.listForLink(linkId)).find((file) => file.direction === "in" && file.wireId === wire.id);
 					if (!stored?.digest || !stored.metadata) return void 0;
@@ -27738,8 +29079,14 @@ var GhostlyNode = class GhostlyNode {
 		const link = live.link;
 		link.start();
 		this.emitState();
+		const resumed = stored.pairedPeerKey && stored.deliveryMode !== "dht" ? this.transportLogOf(live)?.liveAtLastRun : void 0;
+		if (resumed) {
+			traceLink(live.myPubKeyZ32, "resume", { transport: resumed });
+			this.watchResume(linkId, link);
+		}
+		const nativeUp = stored.deliveryMode !== "dht" && this.keepsNativeEndpoints(linkId, stored) ? this.ensureNativeEndpoints(linkId) : void 0;
 		if (credentials && !stored.group) {
-			live.caps = new CapsExchange({
+			const caps = live.caps = new CapsExchange({
 				params: stored,
 				credentials,
 				transport: this.transport,
@@ -27755,14 +29102,21 @@ var GhostlyNode = class GhostlyNode {
 				changed: (record) => this.peerCapsChanged(linkId, record),
 				published: () => live.link?.announceCapsRevision()
 			});
-			live.caps.start();
-			const peer = live.caps.peer;
+			if (stored.pairedPeerKey && nativeUp) {
+				const late = setTimeout(() => caps.start(), STARTUP_QUIET_MS);
+				const go = () => {
+					clearTimeout(late);
+					caps.start();
+				};
+				nativeUp.then(go, go);
+			} else caps.start();
+			const peer = caps.peer;
 			if (peer) {
 				link.learnPeerTransports(peer.transports.filter((t) => TRANSPORTS.includes(t)), dialDescriptors(peer.descriptors));
 				link.learnPeerChoice(peer.choice);
 			}
 		}
-		if (stored.deliveryMode !== "dht" && (stored.pairedPeerKey || this.activeLinkId === linkId)) this.ensureNativeEndpoints(linkId).then(() => {
+		nativeUp?.then(() => {
 			if (live.link === link && stored.peerTransports && stored.preferredTransport !== "webrtc/1" && live.myPubKeyZ32 < stored.peerPubKeyZ32) link.connect().catch(() => {});
 		});
 	}
@@ -27837,7 +29191,7 @@ var GhostlyNode = class GhostlyNode {
 	get nativeFactories() {
 		const relay = this.relaysHyperdht ? this.hyperdhtRelay : "";
 		return {
-			...relay ? { "hyperdht/1": async (seedB64) => (await import("./hyperdhtRelay-BKsFpPjr.js")).createRelayedHyperEndpoint(seedB64, relay) } : {},
+			...relay ? { "hyperdht/1": async (seedB64) => (await import("./hyperdhtRelay-_rJsllcP.js")).createRelayedHyperEndpoint(seedB64, relay) } : {},
 			...this.options.nativeTransports,
 			...this.options.irohWeb ? { "iroh/1": (seedB64) => createIrohWebEndpoint(seedB64, { relays: this.irohRelays }) } : {}
 		};
@@ -27864,6 +29218,15 @@ var GhostlyNode = class GhostlyNode {
 		return !this.options.nativeTransports?.["hyperdht/1"];
 	}
 	/**
+	* Whether a chat keeps native listeners: a contact's, the chat on screen, and one this side joined from a `ghostly1`
+	* invite that is still pairing. The joiner dials, and without an endpoint of its own an app with no WebRTC (the Linux
+	* Desktop) offered nothing the inviter could take: someone who went back to the chat list right after joining waited
+	* out the connect (90 s) before the chat went live. An invite of this side's that nobody used yet keeps none.
+	*/
+	keepsNativeEndpoints(linkId, stored) {
+		return !!stored.pairedPeerKey || !!stored.peerParticipationKeyZ32 || this.activeLinkId === linkId;
+	}
+	/**
 	* A relayed endpoint went away (the relay restarted, the network dropped): try again in a while, for every
 	* chat that keeps native listeners, as opening a chat would.
 	*/
@@ -27872,7 +29235,7 @@ var GhostlyNode = class GhostlyNode {
 		if (!this.relaysHyperdht || !this.hyperdhtRelay || this.relayRetry || this.shuttingDown) return;
 		this.relayRetry = setTimeout(() => {
 			this.relayRetry = null;
-			for (const [linkId, live] of this.links) if (live.link && live.stored.profile && !live.stored.group && live.stored.deliveryMode !== "dht" && !live.link.availableTransports.includes("hyperdht/1") && (live.stored.pairedPeerKey || this.activeLinkId === linkId)) this.ensureNativeEndpoints(linkId);
+			for (const [linkId, live] of this.links) if (live.link && live.stored.profile && (!live.stored.group || this.keepsGroupNative(live.stored)) && live.stored.deliveryMode !== "dht" && !live.link.availableTransports.includes("hyperdht/1") && this.keepsNativeEndpoints(linkId, live.stored)) this.ensureNativeEndpoints(linkId);
 		}, RELAY_RETRY_MS);
 	}
 	/** A new relay (or none): chats give up their endpoints on the old one, as soon as none of them carries a session. */
@@ -27881,7 +29244,7 @@ var GhostlyNode = class GhostlyNode {
 		for (const [linkId, live] of this.links) {
 			const link = live.link;
 			if (!link?.availableTransports.includes("hyperdht/1")) {
-				if (this.hyperdhtRelay && link && (live.stored.pairedPeerKey || this.activeLinkId === linkId)) this.ensureNativeEndpoints(linkId);
+				if (this.hyperdhtRelay && link && this.keepsNativeEndpoints(linkId, live.stored)) this.ensureNativeEndpoints(linkId);
 				continue;
 			}
 			if (!link.canReleaseEndpoint("hyperdht/1")) continue;
@@ -27895,19 +29258,34 @@ var GhostlyNode = class GhostlyNode {
 		const expected = this.links.get(linkId)?.link;
 		const operation = this.nativeQueue.then(async () => {
 			const live = this.links.get(linkId), link = live?.link;
-			if (this.shuttingDown || !live?.stored.profile || live.stored.group || live.stored.deliveryMode === "dht" || !link || link !== expected) return;
+			if (this.shuttingDown || !live?.stored.profile || live.stored.deliveryMode === "dht" || !link || link !== expected) return;
+			const group = !!live.stored.group;
+			if (group && !this.keepsGroupNative(live.stored)) return;
+			let full = false;
 			for (const [transport, factory] of Object.entries(this.nativeFactories)) {
 				const key = transport;
 				if (!factory || link.availableTransports.includes(key)) continue;
 				live.transportErrors ??= {};
 				try {
 					const owners = [...this.links.values()].filter((other) => other.link?.availableTransports.includes(key));
-					if (owners.length >= 8) {
-						const victim = this.activeLinkId === linkId ? owners.filter((other) => other !== live && other.stored.id !== this.activeLinkId && other.link?.canReleaseEndpoint(key)).sort((a, b) => a.lastMessageAt - b.lastMessageAt)[0] : void 0;
-						if (!victim) throw new Error("All eight native connection slots are in use. Disconnect a native connection in another chat, then reopen this chat or press Reconnect.");
+					if (group && (owners.length >= NATIVE_SLOTS || owners.filter((other) => other.stored.group).length >= 4)) {
+						full = true;
+						continue;
+					}
+					if (owners.length >= NATIVE_SLOTS) {
+						const victim = owners.filter((other) => other.stored.group && other.link?.canReleaseEndpoint(key)).sort((a, b) => (a.link?.isDataLinkOpen ? 1 : 0) - (b.link?.isDataLinkOpen ? 1 : 0))[0] ?? (this.activeLinkId === linkId ? owners.filter((other) => other !== live && other.stored.id !== this.activeLinkId && other.link?.canReleaseEndpoint(key)).sort((a, b) => a.lastMessageAt - b.lastMessageAt)[0] : void 0);
+						if (!victim) {
+							traceLink(live.myPubKeyZ32, "native-no-slot", {
+								transport: key,
+								active: this.activeLinkId === linkId
+							});
+							if (this.activeLinkId === linkId && !group) this.retryActiveSlot(linkId);
+							throw new Error("All eight native connection slots are in use. Disconnect a native connection in another chat, then reopen this chat or press Reconnect.");
+						}
 						await victim.link.releaseEndpoint(key);
 						victim.transportErrors ??= {};
 						victim.transportErrors[key] = "Listener released for another chat. Open this chat to restore it; your messages and transport identity are saved.";
+						if (victim.stored.group) this.groupNativeWaiting.add(victim.stored.id);
 					}
 					if (this.shuttingDown || live.link !== link) return;
 					const seed = live.stored.transportSeeds?.[key] ?? createIdentity().seedB64;
@@ -27932,12 +29310,95 @@ var GhostlyNode = class GhostlyNode {
 					live.transportErrors[key] = error instanceof Error ? error.message : "Native adapter could not start. Reopen this chat to retry.";
 				}
 			}
+			if (group) {
+				if (full && !link.availableTransports.some((t) => t !== "webrtc/1")) this.groupNativeWaiting.add(linkId);
+				else this.groupNativeWaiting.delete(linkId);
+			}
 			this.emitState();
 		});
 		this.nativeQueue = operation.catch(() => {});
 		return operation;
 	}
 	/**
+	* The order saved chats start in, which is the order they take native listeners in (`NATIVE_SLOTS` per transport):
+	* the 1:1 chats written in, or live, most recently first; group links keep their places. In the order they were
+	* stored, an app with more paired chats than slots left a chat that was live a moment before with no listener, and a
+	* contact with no WebRTC (the Linux Desktop) never reached it again (Omarchy, 2026-09-30: "On DHT · retrying live" for
+	* minutes after both apps restarted). Not "live when this app last ran" first: a chat that heard its contact leave as
+	* both quit is not.
+	*
+	* On an app with WebRTC, the chats whose contact has none (its capability record lists no `webrtc/1`: a Linux Desktop,
+	* a CLI with WebRTC off) come first, each class in that order: they reach this app over a native transport or not
+	* live at all, while a contact with WebRTC still has it when no listener is left here.
+	*/
+	nativeStartOrder(linkIds) {
+		const isChat = (id) => {
+			const stored = this.links.get(id)?.stored;
+			return !!stored && !stored.group;
+		};
+		const rtc = typeof RTCPeerConnection !== "undefined";
+		const rank = new Map(linkIds.filter(isChat).map((id) => {
+			const live = this.links.get(id);
+			const theirs = live.stored.capsState?.peer?.transports ?? live.stored.peerTransports;
+			return [id, {
+				recent: Math.max(live.lastMessageAt, this.transportLogOf(live)?.lastLiveAt ?? 0),
+				nativeOnly: rtc && !!theirs && !theirs.includes("webrtc/1")
+			}];
+		}));
+		const chats = [...rank.keys()].sort((a, b) => {
+			const x = rank.get(a), y = rank.get(b);
+			return Number(y.nativeOnly) - Number(x.nativeOnly) || y.recent - x.recent;
+		});
+		chats.forEach((id, place) => traceLink(this.links.get(id).myPubKeyZ32, "native-order", {
+			place,
+			...rank.get(id)
+		}));
+		let next = 0;
+		return linkIds.map((id) => rank.has(id) ? chats[next++] : id);
+	}
+	/**
+	* A chat started as "live when this app last ran" (it resumes, and knocks): if this run is not live in it within
+	* `RESUME_SPENT_MS`, its history says that stretch is over, so the next start does not resume it again.
+	*/
+	resumeTimers = /* @__PURE__ */ new Map();
+	watchResume(linkId, link) {
+		const before = this.resumeTimers.get(linkId);
+		if (before) clearTimeout(before);
+		this.resumeTimers.set(linkId, setTimeout(() => {
+			this.resumeTimers.delete(linkId);
+			const live = this.links.get(linkId), log = live && this.transportLogOf(live);
+			if (this.shuttingDown || !live || !log || live.link !== link) return;
+			if (!log.notBackAfterRestart(Date.now())) return;
+			traceLink(live.myPubKeyZ32, "resume-spent", {});
+			this.saveTransportLog(live, log);
+		}, RESUME_SPENT_MS));
+	}
+	/** The chat on screen found every native slot busy: it tries again in a moment, while it stays on screen. */
+	activeSlotRetry = null;
+	retryActiveSlot(linkId) {
+		if (this.activeSlotRetry) clearTimeout(this.activeSlotRetry);
+		if (this.shuttingDown) return;
+		this.activeSlotRetry = setTimeout(() => {
+			this.activeSlotRetry = null;
+			if (this.activeLinkId === linkId && !this.shuttingDown) this.ensureNativeEndpoints(linkId);
+		}, ACTIVE_SLOT_RETRY_MS);
+	}
+	/** Group links waiting for a free native slot (`ensureNativeEndpoints`), by link id. */
+	groupNativeWaiting = /* @__PURE__ */ new Set();
+	groupNativeRetryAt = 0;
+	/** Now and then, the group links that found no free native slot try again: a chat or another group may have let one go. */
+	retryGroupNative() {
+		if (!this.groupNativeWaiting.size || Date.now() < this.groupNativeRetryAt) return;
+		this.groupNativeRetryAt = Date.now() + GROUP_NATIVE_RETRY_MS;
+		for (const linkId of [...this.groupNativeWaiting]) {
+			if (!this.links.get(linkId)?.link) {
+				this.groupNativeWaiting.delete(linkId);
+				continue;
+			}
+			this.ensureNativeEndpoints(linkId);
+		}
+	}
+	/**
 	* A group message first stored from a copy a member handed on without its author's whole signature: what the whole
 	* copy adds (mentions, a reply, a hop count) joins the stored row; the text and time stay as they were.
 	*/
@@ -27948,10 +29409,16 @@ var GhostlyNode = class GhostlyNode {
 			...whole.mentions && { mentions: whole.mentions },
 			...whole.mentioned && { mentioned: true },
 			...whole.replyTo && { replyTo: whole.replyTo },
-			...whole.forwarded && { forwarded: whole.forwarded }
+			...whole.forwarded && { forwarded: whole.forwarded },
+			...whole.card && { card: whole.card },
+			...whole.press && { press: whole.press }
 		};
 		if (!Object.keys(added).length) return;
-		if (!await db.patchMessage(message.linkId, message.id, (stored) => stored.member === message.member && stored.sender === message.sender ? added : null)) return;
+		if (!await db.patchMessage(message.linkId, message.id, (stored) => {
+			if (stored.member !== message.member || stored.sender !== message.sender) return null;
+			const { card: _card, ...rest } = added;
+			return stored.edit ? rest : added;
+		})) return;
 		await this.messagesChanged(message.linkId, [message.id]);
 		this.emitState();
 	}
@@ -27960,6 +29427,15 @@ var GhostlyNode = class GhostlyNode {
 	* the whole history. A host that takes whole histories only (no `onMessageChanges`) gets the whole history, as before.
 	*/
 	async messagesChanged(linkId, ids) {
+		const reacted = this.reactionNotes.get(linkId);
+		if (reacted?.message && ids.includes(reacted.message)) {
+			const row = await db.getMessage(linkId, reacted.message);
+			const fresh = row && noteAfterChange(reacted, row);
+			if (fresh) {
+				this.reactionNotes.set(linkId, fresh);
+				this.emitState();
+			}
+		}
 		const onChanges = this.events.onMessageChanges;
 		if (!onChanges) return this.events.onMessages(linkId, await db.getMessages(linkId));
 		const unique = [...new Set(ids)];
@@ -27971,6 +29447,10 @@ var GhostlyNode = class GhostlyNode {
 		});
 	}
 	async storeMessage(message) {
+		await this.storeNewMessage(message);
+	}
+	/** Stores a message; false when it was there already (or deleted here): nothing new came. */
+	async storeNewMessage(message) {
 		if (message.sender === "peer") message = {
 			...message,
 			timestamp: receivedTimestamp(message.timestamp)
@@ -27990,7 +29470,7 @@ var GhostlyNode = class GhostlyNode {
 			...message.sender === "peer" ? { member: pay.member } : {}
 		};
 		const live = this.links.get(message.linkId);
-		if (live?.stored.deletedIds?.includes(message.id)) return;
+		if (live?.stored.deletedIds?.includes(message.id)) return false;
 		message = await this.resolveReply(message);
 		if (message.sender === "peer" && live && !message.details?.received) message = {
 			...message,
@@ -28016,7 +29496,7 @@ var GhostlyNode = class GhostlyNode {
 				}
 			};
 		}
-		if (!await db.addMessage(message)) return;
+		if (!await db.addMessage(message)) return false;
 		const newest = this.newestAt.get(message.linkId);
 		if (!message.event) this.newestAt.set(message.linkId, Math.max(newest ?? 0, message.timestamp));
 		if (message.sender === "peer") this.messageFeedback("message", message, newest);
@@ -28030,6 +29510,7 @@ var GhostlyNode = class GhostlyNode {
 		this.emitState();
 		await this.reactions.stored(message);
 		await this.groupEdits.stored(message);
+		return true;
 	}
 	servicesChanged() {
 		for (const live of this.links.values()) live.link?.refreshServices();
@@ -28071,6 +29552,7 @@ var GhostlyNode = class GhostlyNode {
 			peerProofs: void 0,
 			proofError: void 0,
 			availableTransports: live.link?.availableTransports,
+			runnableTransports: live.link ? this.runnableTransports(live) : void 0,
 			relayedTransports: live.link?.relayedTransports,
 			deliveryMode: live.stored.deliveryMode ?? "stream",
 			dhtDelivery: live.link?.dhtDelivery,
@@ -28139,6 +29621,14 @@ var GhostlyNode = class GhostlyNode {
 			this.events.onState(this.getState());
 		}, delayMs);
 	}
+	/** The state now, not after `emitState`'s wait: for what the app must have before what follows it. */
+	flushState() {
+		if (this.stateTimer) {
+			clearTimeout(this.stateTimer);
+			this.stateTimer = null;
+		}
+		this.events.onState(this.getState());
+	}
 };
 //#endregion
 //#region ../browser/src/engine/server.ts
@@ -28154,6 +29644,11 @@ var EngineServer = class {
 	histories = /* @__PURE__ */ new WeakMap();
 	/** Per chat or group, what is still being sent (a whole history being read): what comes next waits for it. */
 	sending = /* @__PURE__ */ new Map();
+	/**
+	* Per chat, the contact's call offer that nothing here has answered yet. A client that attaches while it rings hears
+	* it too: the extension's peer runs with no tab open, and a tab opened during the ring used to show no call.
+	*/
+	offers = /* @__PURE__ */ new Map();
 	constructor(options = {}) {
 		this.node = new GhostlyNode({
 			onAttention: (event) => this.broadcast({
@@ -28166,11 +29661,15 @@ var EngineServer = class {
 			}),
 			onMessages: (linkId, messages) => void this.inOrder(linkId, () => this.sendHistory(linkId, messages)).catch(() => {}),
 			onMessageChanges: (linkId, changes) => void this.inOrder(linkId, () => this.sendChanges(linkId, changes)).catch(() => {}),
-			onCallSignal: (linkId, signal) => this.broadcast({
-				kind: "call-signal",
-				linkId,
-				signal
-			})
+			onCallSignal: (linkId, signal) => {
+				if (signalKind(signal) === "o") this.offers.set(linkId, signal);
+				else this.offers.delete(linkId);
+				this.broadcast({
+					kind: "call-signal",
+					linkId,
+					signal
+				});
+			}
 		}, options);
 		this.ready = this.node.start();
 	}
@@ -28183,6 +29682,12 @@ var EngineServer = class {
 				kind: "state",
 				state: this.node.getState()
 			});
+			for (const [linkId, signal] of this.offers) if (parseCallSignal(signal)?.t === "o") client.post({
+				kind: "call-signal",
+				linkId,
+				signal
+			});
+			else this.offers.delete(linkId);
 			for (const link of this.node.getState().links) await this.inOrder(link.id, async () => {
 				if (!this.clients.has(client)) return;
 				client.post({
@@ -28207,6 +29712,7 @@ var EngineServer = class {
 			kind: "response",
 			id: request.id
 		};
+		if (request.method === "setCallSignal") this.offers.delete(request.params?.linkId ?? "");
 		try {
 			await this.ready;
 			const method = this.node[request.method];
@@ -28287,7 +29793,15 @@ var EngineServer = class {
 		for (const client of [...this.clients]) this.post(client, event);
 	}
 };
+/** A call signal's kind (`o` for an offer), read as the client reads it; checked in full before it is replayed. */
+function signalKind(signal) {
+	try {
+		return JSON.parse(signal)?.t;
+	} catch {
+		return;
+	}
+}
 //#endregion
 export { EngineServer, hyperdhtRelayProblem as n, server_exports as t };
 
-//# sourceMappingURL=server-5T5l8hfy.js.map
+//# sourceMappingURL=server-C-8wbsAX.js.map