@ghostlytools/cli 1.0.1 → 1.0.2

package/dist/assets/{server-C-8wbsAX.js → server-Cajp8VLY.js}

@@ -1,4 +1,4 @@
-import { $ as boundedIdentityFetch, $n as LIVENESS_PING_MS, $r as IDENTITY_REVOCATION_LABEL, $t as GroupWakeLimiter, A as TEST_MINT, Ai as ReactionWindow, An as assertTokenUnits, Ar as nextPinNumber, At as transact, B as registeredLightningProviders, Ba as toZ32, Bi as replySnippet, Bn as isPubkyKey, Br as vapidKeysMatch, Bt as communityHasFrame, C as networkLabel, Ca as normalizeRelayUrl, Ci as dhtEditId, Cn as ONCHAIN_PROVIDER, Cr as transferEnded, Ct as STORES, D as WALLET_TYPES, Da as PacketTooLargeError, Di as COMMUNITY_REACTION_FRAME, Dn as TEST_USDT_FAUCET_AMOUNT, Dt as fileStore, Ea as withRequestOptions, Ei as readForwarded, En as SEPOLIA_TEST_USDT_FAUCET, Er as typingActivity, Et as deleteDatabase, F as paysItsOwnInvoices, Fa as sanitizeAvatar, Fi as readReaction, Fn as SPARK_NETWORKS, Fr as WakeLimiter, Ft as openGroupTyping, G as SourceConfigError, Gi as statusCardText, Gn as cashuRequestPayload, Gr as HoldKeys, Gt as decodeGroupEntryLink, H as reserveAdapterIds, Ha as utf8Encode, Hi as STATUS_CARD_LIMITS, Hn as engineText, Hr as EDIT_CAPABILITY, Ht as decodeCommunityLink, I as BACKUP_MEDIA_TYPE, Ia as bytesEqual, Ii as validReactionNumber, In as SPARK_PROVIDER, Ir as newWakeToken, It as sealGroupTyping, J as networkMode, Jn as isFederationId, Jr as readManifest, Jt as knockIdentity, K as SourceUnreachableError, Ki as receivedTimestamp, Kn as fedimintRequestPayload, Kr as HoldRefusedError, Kt as encodeGroupEntryLink, L as MAX_BACKUP_BYTES, La as fromBase64Url, Li as wireReaction, Ln as sparkAddressKind, Lr as relayRequest, Lt as COMMUNITY_LIMITS, M as isTestMint, Ma as identityFromSeed, Mi as queueReaction, Mn as formatPaymentAmount, Mr as pinNumberHolds, N as isWorthlessMint, Na as identityFromSeedB64, Ni as reactionEmoji, Nn as validatePaymentTarget, Nr as readPin, Nt as GroupTypingBoard, O as BITCOIN_INVOICE_ON_TESTNET, Oi as GROUP_REACTION_FRAME, On as USDT_PUBLIC_RPC, Or as PIN_LIMITS, Ot as openDb, P as mintNetwork, Pa as publicKeyFromZ32, Pi as reactionIsNewer, Pn as walletNetworkOf, Pr as WAKE_CALL_INTERVAL_MS, Pt as groupTypingEpoch, Q as setOwnDidSource, Qi as edgeParams, Qn as INVITE_TAKEN, Qr as dialDescriptors, R as identityProviders, Ra as randomBytes, Ri as pairedReplyAuthor, Rn as sparkInvoiceDetails, Rr as wakeRequest, Rt as CommunitySession, S as WrongNetworkError, Sa as currentRelays, Si as RateWindow, Sn as EVM_TEST_CHAINS, Sr as FILE_LIMITS, T as cashuMint, Ta as isDiscoveryBudgetError, Ti as forwardedAgain, Tn as SEPOLIA_TEST_USDT, Tr as TypingSender, Tt as databaseName, U as NothingSpentError, Ua as __exportAll, Ui as checkStatusCard, Un as decodeBolt11, Ur as HOLD_CAPABILITY, Ut as encodeCommunityLink, V as registeredOnchainProviders, Va as utf8Decode, Vi as BUTTON_ID, Vn as engineError, Vt as communityMessageId, W as PROVIDER_PLATFORMS, Wi as sameButtonText, Wn as ENDPOINT, Wr as HOLD_LIMITS, X as assertPublicServer, Xi as rosterHas, Xn as parseFedimintRequestPayload, Xr as DHT_TEXT_CAPABILITY, Xt as mergeKnocks, Y as redact, Yi as MEMBER_KEY, Yn as parseCashuRequestPayload, Yr as CapsExchange, Yt as knockRecords, Z as resolveAtprotoDid, Zi as verifyCommitSignature, Zn as GhostLink, Zr as capsDescriptors, Zt as readKnocks, _ as newDeviceKey, _a as decodeInviteCode, _i as parseVideoMeta, _n as didDhtFromPublicKey, _r as readBeacon, _t as fileBytes, a as createFailure, aa as webLocalFetch, ai as receivedIdentityStatus, an as GroupSession, ar as COMMUNITY_TOPOLOGY, at as replyRef, b as ModeChanged, ba as DEFAULT_RELAYS, bi as EDIT_BUFFER_MS, bn as signDidDhtPacket, br as shouldBeHub, bt as removeFileBytes, c as paymentNetwork, ca as encodeControl, ci as PeerProofs, cr as doorHubs, ct as paymentWireId, d as networkReason, da as emptyLinkRecords, di as TRANSPORTS, dn as parseCommunityEdit, dr as lobbyRecords, dt as removeStored, ea as RELAY_POLL_INTERVALS, ei as IdentityExchange, en as groupWakeFrame, er as pairedMessageFrame, et as verifyIdentity, f as rpcHost, fa as HTTP_SERVICE_PROTO, fi as automaticTransport, fn as mentionsMember, fr as mergeBeacon, ft as storedSize, g as intentRepository, ga as createChatInvite, gi as parseVoiceMeta, gn as didDhtDocument, gr as rankHubs, h as ProviderSources, ha as OwnInviteError, hi as fileMessageText, hn as normalizeAtprotoHandle, hr as pickHubs, ht as blobDigest, i as assertConfirmedReal, ia as parseLocalTarget, ii as newIdentityBinding, in as GROUP_READ_NOTE, ir as pickMeshHubs, it as receivedPairedReply, j as fakesLightning, ja as createIdentity, ji as nextReactionNumber, jn as assertWholeSats, jr as pinIsNewer, jt as wrap, k as DEFAULT_MINTS, ki as REACTION_LIMITS, kn as WALLET_NETWORKS, kr as mayPin, kt as store, l as paymentNetworksOf, la as RTC_CONFIG, li as emptyProofLedger, ln as GROUP_EDIT_TEXT_BYTES, lr as freshHubs, lt as FileAppender, m as LightningCards, ma as serviceIdFromName, mi as safeBlobType, mn as isAtprotoDid, mr as newerHead, n as loadFedimintSdk, na as GhostlyHttpError, ni as identityRevocationValue, nn as parseGroupWakeFrame, nr as mayBeHub, nt as groupReply, o as createTiming, oa as LIMITS, oi as revokesIdentity, on as groupMessageId, or as beaconKeys, ot as replyTo, p as CASHU_CARD, pa as LEGACY_SERVICES, pi as parseImageMeta, pn as groupName, pr as mergeLobby, pt as streamStored, q as isNothingSpentError, qi as GROUP_MEMBER_CAP, qn as findEndpoint, qr as newMailbox, qt as entryParams, r as WALLET_NAMES, ra as formatLocalTarget, ri as identityStatement, rr as meshHubs, rt as pairedWireReply, s as crossNetwork, sa as decodeControl, si as lastSharedWithMe, sr as beaconRecords, st as paymentAlias, t as fedimintDatabase, ta as traceLink, ti as emptyIdentityLedger, tn as groupWakes, tr as MESH_HUBS, tt as chosenResolver, u as walletInstances, ua as parseCallSignal, ui as validExternalKey, un as carryMentions, ur as lobbyKeys, ut as readStored, v as sealSeed, va as encodeInviteCode, vi as DHT_MESSAGE_TTL, vn as encodeDidDhtDeactivated, vr as readBeaconHead, vt as fileBytesOf, w as CASHU_MINT_SOURCE, wa as budgetRetryMs, wi as parseLinkPreview, wn as PaymentPreflightError, wr as transferStalled, wt as clearProfileStores, x as ModeGate, xa as RelayTransport, xi as EDIT_RATE_WINDOW_MS, xn as ETHEREUM_USDT, xr as ChatFiles, y as unsealSeed, ya as inviteOwnership, yi as peekDhtMailbox, yn as encodeDidDhtPacket, yr as readLobby, z as onAdaptersChanged, za as toBase64Url, zi as readReply, zn as isBitcoinAddress, zr as checkPushEndpoint, zt as GROUP_READ_NOTE_COMMUNITY } from "../ghostly.mjs";
+import { $ as boundedIdentityFetch, $i as GROUP_MEMBER_CAP, $n as LIVENESS_PING_MS, $r as IDENTITY_REVOCATION_LABEL, $t as GroupWakeLimiter, A as TEST_MINT, Aa as normalizeRelayUrl, Ai as GROUP_REACTION_FRAME, An as assertTokenUnits, Ar as nextPinNumber, At as transact, B as registeredLightningProviders, Ba as identityFromSeedB64, Bi as pairedReplyAuthor, Bn as isPubkyKey, Br as vapidKeysMatch, Bt as communityHasFrame, C as networkLabel, Ca as createChatInvite, Ci as EDIT_RATE_WINDOW_MS, Cn as ONCHAIN_PROVIDER, Cr as transferEnded, Ct as STORES, D as WALLET_TYPES, Da as DEFAULT_RELAYS, Di as forwardedAgain, Dn as TEST_USDT_FAUCET_AMOUNT, Dt as fileStore, Ea as inviteOwnership, Ei as parseLinkPreview, En as SEPOLIA_TEST_USDT_FAUCET, Er as typingActivity, Et as deleteDatabase, F as paysItsOwnInvoices, Fi as reactionEmoji, Fn as SPARK_NETWORKS, Fr as WakeLimiter, Ft as openGroupTyping, G as SourceConfigError, Ga as randomBytes, Gi as checkStatusCard, Gn as cashuRequestPayload, Gr as HoldKeys, Gt as decodeGroupEntryLink, H as reserveAdapterIds, Ha as sanitizeAvatar, Hi as replySnippet, Hn as engineText, Hr as EDIT_CAPABILITY, Ht as decodeCommunityLink, I as BACKUP_MEDIA_TYPE, Ii as reactionIsNewer, In as SPARK_PROVIDER, Ir as newWakeToken, It as sealGroupTyping, J as networkMode, Ja as utf8Decode, Ji as arrivalKey, Jn as isFederationId, Jr as readManifest, Jt as knockIdentity, K as SourceUnreachableError, Ka as toBase64Url, Ki as sameButtonText, Kn as fedimintRequestPayload, Kr as HoldRefusedError, Kt as encodeGroupEntryLink, L as MAX_BACKUP_BYTES, Li as readReaction, Ln as sparkAddressKind, Lr as relayRequest, Lt as COMMUNITY_LIMITS, M as isTestMint, Ma as isDiscoveryBudgetError, Mi as ReactionWindow, Mn as formatPaymentAmount, Mr as pinNumberHolds, N as isWorthlessMint, Na as withRequestOptions, Ni as nextReactionNumber, Nn as validatePaymentTarget, Nr as readPin, Nt as GroupTypingBoard, O as BITCOIN_INVOICE_ON_TESTNET, Oa as RelayTransport, Oi as readForwarded, On as USDT_PUBLIC_RPC, Or as PIN_LIMITS, Ot as openDb, P as mintNetwork, Pa as PacketTooLargeError, Pi as queueReaction, Pn as walletNetworkOf, Pr as WAKE_CALL_INTERVAL_MS, Pt as groupTypingEpoch, Q as setOwnDidSource, Qi as shownTime, Qn as INVITE_TAKEN, Qr as dialDescriptors, R as identityProviders, Ra as createIdentity, Ri as validReactionNumber, Rn as sparkInvoiceDetails, Rr as wakeRequest, Rt as CommunitySession, S as WrongNetworkError, Sa as OwnInviteError, Si as EDIT_BUFFER_MS, Sn as EVM_TEST_CHAINS, Sr as FILE_LIMITS, T as cashuMint, Ta as encodeInviteCode, Ti as dhtEditId, Tn as SEPOLIA_TEST_USDT, Tr as TypingSender, Tt as databaseName, U as NothingSpentError, Ua as bytesEqual, Ui as BUTTON_ID, Un as decodeBolt11, Ur as HOLD_CAPABILITY, Ut as encodeCommunityLink, V as registeredOnchainProviders, Va as publicKeyFromZ32, Vi as readReply, Vn as engineError, Vt as communityMessageId, W as PROVIDER_PLATFORMS, Wa as fromBase64Url, Wi as STATUS_CARD_LIMITS, Wn as ENDPOINT, Wr as HOLD_LIMITS, X as assertPublicServer, Xa as __exportAll, Xi as heardTime, Xn as parseFedimintRequestPayload, Xr as DHT_TEXT_CAPABILITY, Xt as mergeKnocks, Y as redact, Ya as utf8Encode, Yi as claimedTime, Yn as parseCashuRequestPayload, Yr as CapsExchange, Yt as knockRecords, Z as resolveAtprotoDid, Zi as receivedTimestamp, Zn as GhostLink, Zr as capsDescriptors, Zt as readKnocks, _ as newDeviceKey, _a as parseCallSignal, _i as fileMessageText, _n as didDhtFromPublicKey, _r as readBeacon, _t as fileBytes, a as createFailure, aa as DirectPathWatch, ai as receivedIdentityStatus, an as GroupSession, ar as COMMUNITY_TOPOLOGY, at as replyRef, b as ModeChanged, ba as LEGACY_SERVICES, bi as DHT_MESSAGE_TTL, bn as signDidDhtPacket, br as shouldBeHub, bt as removeFileBytes, c as paymentNetwork, ca as traceLink, ci as PeerProofs, cr as doorHubs, ct as paymentWireId, d as networkReason, da as parseLocalTarget, di as TRANSPORTS, dn as parseCommunityEdit, dr as lobbyRecords, dt as removeStored, ei as IdentityExchange, en as groupWakeFrame, er as pairedMessageFrame, et as verifyIdentity, f as rpcHost, fa as webLocalFetch, fi as automaticTransport, fn as mentionsMember, fr as mergeBeacon, ft as storedSize, g as intentRepository, ga as RTC_CONFIG, gi as safeBlobType, gn as didDhtDocument, gr as rankHubs, h as ProviderSources, ha as encodeControl, hi as parseImageMeta, hn as normalizeAtprotoHandle, hr as pickHubs, ht as blobDigest, i as assertConfirmedReal, ia as edgeParams, ii as newIdentityBinding, in as GROUP_READ_NOTE, ir as pickMeshHubs, it as receivedPairedReply, j as fakesLightning, ja as budgetRetryMs, ji as REACTION_LIMITS, jn as assertWholeSats, jr as pinIsNewer, jt as wrap, k as DEFAULT_MINTS, ka as currentRelays, ki as COMMUNITY_REACTION_FRAME, kn as WALLET_NETWORKS, kr as mayPin, kt as store, l as paymentNetworksOf, la as GhostlyHttpError, li as emptyProofLedger, ln as GROUP_EDIT_TEXT_BYTES, lr as freshHubs, lt as FileAppender, m as LightningCards, ma as decodeControl, mi as irohRelayUrl, mn as isAtprotoDid, mr as newerHead, n as loadFedimintSdk, na as rosterHas, ni as identityRevocationValue, nn as parseGroupWakeFrame, nr as mayBeHub, nt as groupReply, o as createTiming, oi as revokesIdentity, on as groupMessageId, or as beaconKeys, ot as replyTo, p as CASHU_CARD, pa as LIMITS, pi as irohDescriptor, pn as groupName, pr as mergeLobby, pt as streamStored, q as isNothingSpentError, qa as toZ32, qi as statusCardText, qn as findEndpoint, qr as newMailbox, qt as entryParams, r as WALLET_NAMES, ra as verifyCommitSignature, ri as identityStatement, rr as meshHubs, rt as pairedWireReply, s as crossNetwork, sa as RELAY_POLL_INTERVALS, si as lastSharedWithMe, sr as beaconRecords, st as paymentAlias, t as fedimintDatabase, ta as MEMBER_KEY, ti as emptyIdentityLedger, tn as groupWakes, tr as MESH_HUBS, tt as chosenResolver, u as walletInstances, ua as formatLocalTarget, ui as validExternalKey, un as carryMentions, ur as lobbyKeys, ut as readStored, v as sealSeed, va as emptyLinkRecords, vi as parseVoiceMeta, vn as encodeDidDhtDeactivated, vr as readBeaconHead, vt as fileBytesOf, w as CASHU_MINT_SOURCE, wa as decodeInviteCode, wi as RateWindow, wn as PaymentPreflightError, wr as transferStalled, wt as clearProfileStores, x as ModeGate, xa as serviceIdFromName, xi as peekDhtMailbox, xn as ETHEREUM_USDT, xr as ChatFiles, y as unsealSeed, ya as HTTP_SERVICE_PROTO, yi as parseVideoMeta, yn as encodeDidDhtPacket, yr as readLobby, z as onAdaptersChanged, za as identityFromSeed, zi as wireReaction, zn as isBitcoinAddress, zr as checkPushEndpoint, zt as GROUP_READ_NOTE_COMMUNITY } from "../ghostly.mjs";
 import { base64, base64url, base64urlnopad, bech32, hex } from "@scure/base";
 import { hkdf } from "@noble/hashes/hkdf.js";
 import { sha256 } from "@noble/hashes/sha2.js";
@@ -11407,6 +11407,7 @@ function composeDetails(message, around) {
 			linkId: message.linkId,
 			sender: message.sender,
 			timestamp: message.timestamp,
+			...message.sentAt !== void 0 && { sentAt: message.sentAt },
 			via: message.via,
 			delivery: message.delivery,
 			deliveryError: message.deliveryError,
@@ -11579,6 +11580,11 @@ var FileDesk = class {
 			peerRoom: files?.peerRoom ?? null
 		};
 	}
+	/** A files/3 transfer of this chat's under way on its session: offered, moving, or being checked. */
+	moving(linkId) {
+		const files = this.chats.get(linkId)?.files;
+		return !!files?.live && files.records().some((r) => r.state === "offered" || r.state === "active" || r.state === "verifying");
+	}
 	/**
 	* Offers a file whose record and bytes are stored under its local id (`outgoingFileId`). Offered before (Retry, a
 	* restart): an unfinished transfer is taken over and offered again, a failed one sent again; never a second one.
@@ -12234,7 +12240,7 @@ function takesPeerEdit(message, text) {
 function withEdit(message, edit) {
 	const before = message.edit?.history ?? [];
 	const history = edit.text === message.text || edit.card && edit.card.kind !== "buttons" ? before : trimHistory([...before, {
-		at: message.edit?.at ?? message.timestamp,
+		at: message.edit?.at ?? shownTime(message),
 		text: message.text
 	}]);
 	const next = {
@@ -13381,6 +13387,32 @@ var db = {
 	}
 };
 //#endregion
+//#region ../browser/src/engine/arrival.ts
+/**
+* A history stored before a received row was placed where it arrived (WISP 400, requirement 10; until 2026-10): a
+* contact's row sits under the time the contact's clock said, up to five minutes ahead of this device's. Almost all of
+* it stays as it is: its stored time is its place, so nothing moves when the app updates. Only the rows whose stored
+* time has not come yet are settled, once, at the start: they are the last rows of their chat, and left there a
+* message written in the next minutes would sort above them. Each takes a place just before now, in the order they
+* were in and after everything before them, and keeps the time its sender said beside it (`sentAt`).
+*
+* Returns the rows to write, as they are now; none when nothing is ahead. Rows of mine are never touched: their time
+* is the one both sides know them by.
+*/
+function settleAhead(history, now) {
+	const ahead = history.filter((m) => m.sender === "peer" && m.sentAt === void 0 && m.timestamp > now);
+	if (!ahead.length) return [];
+	let last = history.reduce((max, m) => m.timestamp > now ? max : Math.max(max, m.timestamp), 0);
+	return ahead.map((m, i) => {
+		last = Math.max(last + 1, now - (ahead.length - i));
+		return {
+			...m,
+			timestamp: last,
+			sentAt: m.timestamp
+		};
+	});
+}
+//#endregion
 //#region ../browser/src/engine/reactions.ts
 var isGroup$1 = (chat) => chat.startsWith("group:");
 /** The row a reaction names in a chat: the id both sides know it by (`replyRef`). */
@@ -13721,6 +13753,26 @@ var HUB_GRACE_MS = 18e4;
 var REFUSED_FOR_MS$1 = 6e5;
 var ENTRY_LINGER_MS$1 = 2e4;
 var RELAYED_KEPT = 4096;
+/**
+* Someone the chain took out while its app was closed comes back believing it is a member: it asks in a hub's lobby,
+* or lists itself as a hub. A hub then keeps an edge to it for a moment, only to hand it the commit that took it out
+* (`farewell`): at most `FAREWELL_EDGES` at a time, each awaited `FAREWELL_WAIT_MS` and closed `FAREWELL_LINGER_MS`
+* after the commit went; the same key is not waited for again for a while (longer once it was told).
+*/
+var FAREWELL_EDGES = 4;
+var FAREWELL_WAIT_MS = 12e4;
+var FAREWELL_LINGER_MS = 1e4;
+var FAREWELL_RETRY_MS = 6e4;
+var FAREWELL_TOLD_MS = 6e5;
+var FAREWELL_SAY_MS = 1e4;
+/**
+* A key asking from before the commit that took it out was there and was sent that commit: not waited for. The two
+* times are two devices' clocks (the asker's, the commit's signer's), so "before" allows this much between them:
+* a returning member whose clock runs behind the admin's is told all the same.
+*/
+var FAREWELL_SKEW_MS = 3e5;
+/** A member that opens the group's link again knocks to check it is still in, this long at most (`joinByLink`). */
+var CHECK_MS = 18e4;
 var MESSAGE_LINK$1 = (groupId) => `group:${groupId}`;
 /**
 * A member key for a joiner whose entry session the member's side dials. Of a paired session's two
@@ -13752,6 +13804,8 @@ var Communities = class {
 	/** Joiners: groups whose knock is out (published), and the knock record it is in. */
 	knocked = /* @__PURE__ */ new Set();
 	knockAt = /* @__PURE__ */ new Map();
+	/** Joiners: how many others had a knock still being refreshed in the record I last read (they wait with me). */
+	knockingWith = /* @__PURE__ */ new Map();
 	/** My frames an edge took, and which of them carry an edit (`frame id → editKey`). */
 	frames = new FramesTaken();
 	carriers = /* @__PURE__ */ new Map();
@@ -13796,9 +13850,11 @@ var Communities = class {
 			const history = await this.store.getMessages(MESSAGE_LINK$1(group.id)), said = history.filter((m) => !m.event && !m.groupPay);
 			const last = said[said.length - 1], lastPeer = [...said].reverse().find((m) => m.sender !== "me");
 			if (last) this.lastMessageAt.set(group.id, last.timestamp);
-			if (lastPeer) this.lastPeerMessageAt.set(group.id, lastPeer.timestamp);
+			const peerAt = cameOrWritten(lastPeer?.timestamp, lastPeer ? group.came?.peer : void 0);
+			if (peerAt) this.lastPeerMessageAt.set(group.id, peerAt);
 			const mention = [...history].reverse().find((m) => m.mentioned);
-			if (mention) this.lastMentionAt.set(group.id, mention.timestamp);
+			const mentionAt = cameOrWritten(mention?.timestamp, mention ? group.came?.mention : void 0);
+			if (mentionAt) this.lastMentionAt.set(group.id, mentionAt);
 			for (const [, linkId] of this.host.entries(group.id)) if (group.joining?.linkId !== linkId) await this.host.closeEdge(linkId);
 			const live = this.live.get(group.id);
 			if (live) for (const key of this.host.edges(group.id).keys()) live.restored.set(key, 0);
@@ -13821,7 +13877,7 @@ var Communities = class {
 				invited: [],
 				memberLinks: {}
 			};
-			if (group.joining && (!live || live.session.status === "lost")) return [{
+			if (this.knocking(group, live)) return [{
 				...base,
 				name: groupName(group.joining.name) ?? live?.session.name ?? "",
 				isAdmin: false,
@@ -13834,7 +13890,8 @@ var Communities = class {
 					members: 0,
 					accepted: true,
 					viaLink: true,
-					stage: this.joinStage(group)
+					stage: this.joinStage(group),
+					...this.knockingWith.get(group.id) ? { waiting: this.knockingWith.get(group.id) } : {}
 				}
 			}];
 			if (!live) return [];
@@ -13843,7 +13900,7 @@ var Communities = class {
 				const id = edges.get(key);
 				return !!id && this.host.linkReady(id, 2);
 			};
-			const hubs = freshHubs(live.beacon, this.now()).map((h) => h.key);
+			const hubs = freshHubs(this.hubs(live), this.now()).map((h) => h.key);
 			return [{
 				...base,
 				name: s.name,
@@ -13904,17 +13961,36 @@ var Communities = class {
 		if (!link) throw new Error("This is not a link to a group");
 		const existing = this.stored.get(link.g);
 		const live = this.live.get(link.g);
-		if (live && live.session.status === "active") return link.g;
 		if (existing?.joining && existing.joining.host === link.host) return link.g;
+		if (live) {
+			const s = live.session;
+			if (s.status === "active" && s.roster.length === 1) return link.g;
+			if (s.status === "active") {
+				await this.startJoining(link, s.state.seedB64, this.now(), true);
+				return link.g;
+			}
+			if (s.status === "removed" || s.status === "lost") {
+				await this.startJoining(link, s.state.seedB64, this.now());
+				return link.g;
+			}
+		}
 		if (existing) await this.forget(link.g);
 		await this.startJoining(link, dialedKey(link), this.now());
 		return link.g;
 	}
-	async startJoining(link, seedB64, since) {
+	/** Knocking to get in: a joiner, or someone who was in (removed, or its admission lost) asking again. Not a member checking it still is. */
+	knocking(group, live) {
+		return !!group.joining && (!live || live.session.status !== "active");
+	}
+	/** `check`: a member, as far as this device knows, asking the door whether it still is (`joinByLink`). */
+	async startJoining(link, seedB64, since, check = false) {
 		this.lastKnock.delete(link.g);
 		this.knocked.delete(link.g);
 		this.knockAt.delete(link.g);
+		this.knockingWith.delete(link.g);
+		const before = this.stored.get(link.g)?.joining;
 		const linkId = await this.host.openEntry(link, "guest", seedB64, link.host);
+		if (before && before.linkId !== linkId) await this.host.closeEdge(before.linkId);
 		const group = this.stored.get(link.g) ?? {
 			id: link.g,
 			createdAt: since
@@ -13927,7 +14003,8 @@ var Communities = class {
 			name: group.community?.name ?? "",
 			inviter: "",
 			pieces: [],
-			since
+			since,
+			...check && { check: true }
 		};
 		this.stored.set(link.g, group);
 		await this.store.putGroup(group);
@@ -13935,9 +14012,29 @@ var Communities = class {
 		traceJoin(link.g, "join.start");
 		this.knock(group, since).catch(() => {});
 	}
+	/** The check is over (answered, or nobody was at the door): the group stays as it is here. */
+	async endCheck(group) {
+		const joining = group.joining;
+		if (!joining) return;
+		delete group.joining;
+		this.lastKnock.delete(group.id);
+		this.knocked.delete(group.id);
+		this.knockAt.delete(group.id);
+		this.knockingWith.delete(group.id);
+		await this.host.closeEdge(joining.linkId);
+		await this.store.putGroup(group);
+		this.host.emit();
+	}
 	async send(groupId, text, mentions = [], reply, forwarded, card) {
 		const live = this.live.get(groupId);
-		if (!live) return { error: "You are not in this group yet" };
+		if (!live) return {
+			error: "You are not in this group yet",
+			refused: true
+		};
+		if (!live.session.isMember) return {
+			error: live.session.state.statusReason ?? "You are not in this group",
+			refused: true
+		};
 		const result = card ? await live.session.sendText(text, this.host.myNick?.(), Date.now(), mentions, reply, forwarded, card) : await live.session.sendText(text, this.host.myNick?.(), Date.now(), mentions, reply, forwarded);
 		return "error" in result ? { error: result.error } : {
 			error: null,
@@ -14050,7 +14147,7 @@ var Communities = class {
 	*/
 	async decline(groupId) {
 		const group = this.stored.get(groupId), live = this.live.get(groupId);
-		if (!group?.joining || live && live.session.status !== "lost") throw new Error("No invitation to decline");
+		if (!group || !this.knocking(group, live)) throw new Error("No invitation to decline");
 		if (live) throw new Error("You were in this group: leave it to stop trying to get back in");
 		await this.forget(groupId);
 	}
@@ -14062,6 +14159,7 @@ var Communities = class {
 		this.lastMessageAt.delete(groupId);
 		this.lastPeerMessageAt.delete(groupId);
 		this.lastMentionAt.delete(groupId);
+		this.knockingWith.delete(groupId);
 		for (const linkId of [...this.host.edges(groupId).values(), ...this.host.entries(groupId).values()]) await this.host.closeEdge(linkId);
 		await this.store.deleteGroup(groupId);
 		this.host.historyGone?.(groupId);
@@ -14077,9 +14175,10 @@ var Communities = class {
 		this.time = now;
 		for (const group of [...this.stored.values()]) {
 			const live = this.live.get(group.id);
-			if (group.joining && (!live || live.session.status === "lost")) {
-				const every = now - group.joining.since > this.timings.patienceMs ? this.timings.slowKnockMs : this.timings.knockMs;
-				if (!this.host.linkReady(group.joining.linkId, 2) && !this.host.linkSeen?.(group.joining.linkId) && now - (this.lastKnock.get(group.id) ?? 0) >= every) await this.knock(group, now).catch(() => {});
+			if (group.joining && (this.knocking(group, live) || group.joining.check)) {
+				const waited = now - group.joining.since, every = waited > this.timings.patienceMs ? this.timings.slowKnockMs : this.timings.knockMs;
+				if (!this.knocking(group, live) && waited > CHECK_MS) await this.endCheck(group);
+				else if (!this.host.linkReady(group.joining.linkId, 2) && !this.host.linkSeen?.(group.joining.linkId) && now - (this.lastKnock.get(group.id) ?? 0) >= every) await this.knock(group, now).catch(() => {});
 				if (!live) continue;
 			}
 			if (!live) continue;
@@ -14096,6 +14195,12 @@ var Communities = class {
 				continue;
 			}
 			if (live.session.status !== "active") {
+				if (live.hub) {
+					live.hub = false;
+					await this.closeEntries(group.id);
+					await this.publishBeacon(group.id, live, now, false).catch(() => {});
+				}
+				live.farewells.clear();
 				await this.reconcile(group.id, live, now);
 				continue;
 			}
@@ -14111,14 +14216,19 @@ var Communities = class {
 			live.lingering.delete(linkId);
 			if ([...this.host.entries(groupId).values()].includes(linkId)) await this.host.closeEdge(linkId);
 		}
-		const alone = live.hub && !freshHubs(live.beacon, now).some((h) => h.key !== me);
-		if (now - live.lastBeaconRead >= (alone ? COMMUNITY_TOPOLOGY.beaconEveryMs : this.timings.beaconReadMs) || live.lastBeaconRead === 0) await this.readBeacon(groupId, live, now);
-		const others = freshHubs(live.beacon, now).filter((h) => h.key !== me);
+		const alone = live.hub && !freshHubs(this.hubs(live), now).some((h) => h.key !== me);
+		if ((live.beaconFailedAt ? now - live.beaconFailedAt >= BEACON_RETRY_MS : now - live.lastBeaconRead >= (alone ? COMMUNITY_TOPOLOGY.beaconEveryMs : this.timings.beaconReadMs)) || live.lastBeaconRead === 0) await this.readBeacon(groupId, live, now);
+		if (!live.beaconKnown) {
+			await this.keepLooking(groupId, live, now);
+			await this.reconcile(groupId, live, now);
+			return;
+		}
+		const others = freshHubs(this.hubs(live), now).filter((h) => h.key !== me);
 		if (!live.hub) {
-			const settled = () => now - live.joinedAt >= this.timings.newcomerMs || !freshHubs(live.beacon, now).some((h) => h.key !== me);
-			const want = () => settled() && (shouldBeHub(me, live.beacon, now) || !!live.forceHub && freshHubs(live.beacon, now).length < COMMUNITY_TOPOLOGY.maxHubs) && this.capacity(groupId, live, now) > 0;
+			const settled = () => now - live.joinedAt >= this.timings.newcomerMs || !freshHubs(this.hubs(live), now).some((h) => h.key !== me);
+			const want = () => settled() && (shouldBeHub(me, this.hubs(live), now) || !!live.forceHub && freshHubs(this.hubs(live), now).length < COMMUNITY_TOPOLOGY.maxHubs) && this.capacity(groupId, live, now) > 0;
 			if (want()) {
-				if (!live.hubCandidateAt) live.hubCandidateAt = now + (freshHubs(live.beacon, now).length ? Math.floor(this.random() * this.timings.hubJitterMs) : 0);
+				if (!live.hubCandidateAt) live.hubCandidateAt = now + (freshHubs(this.hubs(live), now).length ? Math.floor(this.random() * this.timings.hubJitterMs) : 0);
 				if (now >= live.hubCandidateAt) {
 					live.hubCandidateAt = 0;
 					if (live.lastBeaconRead !== now) await this.readBeacon(groupId, live, now);
@@ -14144,6 +14254,10 @@ var Communities = class {
 				await this.publishBeacon(groupId, live, now, false);
 			} else if (now - live.lastBeaconTry < BEACON_RETRY_MS) {} else if (now - live.lastBeaconWrite >= COMMUNITY_TOPOLOGY.beaconEveryMs || !live.beacon.some((h) => h.key === me) || now - live.lastBeaconWrite >= 5e3 && Math.abs(this.beaconLoad(groupId, live, now) - (live.beacon.find((h) => h.key === me)?.load ?? load)) >= 8) await this.publishBeacon(groupId, live, now, true).catch(() => {});
 		}
+		if (live.hub) {
+			for (const h of freshHubs(live.beacon, now)) if (h.ts + FAREWELL_SKEW_MS > (s.outAt(h.key) ?? Infinity)) this.wantFarewell(groupId, live, h.key, now);
+		}
+		this.endFarewells(live, now);
 		if (live.hub) {
 			const busy = this.admitting(groupId, live, now);
 			const lobbyEvery = now < live.lobbyBusyUntil && !busy ? this.timings.lobbyPollMs : this.timings.lobbyIdlePollMs;
@@ -14200,7 +14314,7 @@ var Communities = class {
 		}
 		if (s.needsCatchUp && now - (live.lastCatchUp ?? 0) >= 5e3 || now - (live.lastCatchUp ?? 0) >= 3e4) {
 			live.lastCatchUp = now;
-			const ready = [...this.host.edges(groupId)].filter(([, id]) => this.host.linkReady(id, 2)).map(([key]) => key);
+			const ready = [...this.host.edges(groupId)].filter(([key, id]) => this.host.linkReady(id, 2) && !s.wasRemoved(key)).map(([key]) => key);
 			for (const key of ready.slice(0, 3)) s.catchUp(key);
 		}
 		await this.reconcile(groupId, live, now);
@@ -14258,7 +14372,7 @@ var Communities = class {
 	capacity(groupId, live, now, entries = true) {
 		const room = this.host.peerRoom?.(groupId);
 		if (room === void 0) return COMMUNITY_TOPOLOGY.hubCapacity;
-		const hubs = new Set(freshHubs(live.beacon, now).map((h) => h.key));
+		const hubs = new Set(freshHubs(this.hubs(live), now).map((h) => h.key));
 		for (const key of this.host.edges(groupId).keys()) if (!live.members.has(key)) hubs.add(key);
 		hubs.delete(live.session.myKey);
 		const held = hubs.size + (entries ? this.host.entries(groupId).size : 0);
@@ -14272,7 +14386,15 @@ var Communities = class {
 	async readBeacon(groupId, live, now) {
 		live.lastBeaconRead = now;
 		const keys = beaconKeys(live.session.state.rv, groupId);
-		const records = await this.host.resolve(keys.identity.pubKeyZ32, true).catch(() => null);
+		const records = await this.host.resolve(keys.identity.pubKeyZ32, true).catch(() => void 0);
+		if (records === void 0) {
+			live.beaconFailedAt = now;
+			live.beaconAskedAt ||= now;
+			if (live.session.roster.length === 1 || now - live.beaconAskedAt >= COMMUNITY_TOPOLOGY.beaconFreshMs) live.beaconKnown = true;
+			return;
+		}
+		live.beaconFailedAt = 0;
+		live.beaconKnown = true;
 		live.beacon = readBeacon(keys, records ?? []);
 		live.head = readBeaconHead(keys, records ?? []);
 		this.noteHubs(live, now);
@@ -14296,8 +14418,10 @@ var Communities = class {
 		live.lastBeaconTry = now;
 		const keys = beaconKeys(live.session.state.rv, groupId);
 		let existing = live.beacon, head = live.head;
-		if (live.lastBeaconRead !== now) {
-			const records = await this.host.resolve(keys.identity.pubKeyZ32, true).catch(() => null) ?? [];
+		if (live.lastBeaconRead !== now || live.beaconFailedAt === now) {
+			const read = await this.host.resolve(keys.identity.pubKeyZ32, true).catch(() => void 0);
+			if (read === void 0 && live.session.roster.length > 1) throw new Error("The beacon could not be read; not published");
+			const records = read ?? [];
 			existing = readBeacon(keys, records);
 			head = readBeaconHead(keys, records);
 		}
@@ -14314,9 +14438,74 @@ var Communities = class {
 		this.noteHubs(live, now);
 		live.lastBeaconWrite = now;
 		live.lastBeaconRead = now;
+		live.beaconFailedAt = 0;
+		live.beaconKnown = true;
+	}
+	/**
+	* The beacon's hubs, less those the chain took out: hubs are members. Someone removed while its app was closed lists
+	* itself there when it comes back, believing it is a member, until it is told (`wantFarewell`).
+	*/
+	hubs(live) {
+		const top = live.session.top, memo = live.hubsMemo;
+		if (memo && memo.beacon === live.beacon && memo.top === top) return memo.hubs;
+		const hubs = live.beacon.filter((h) => !live.session.wasRemoved(h.key));
+		live.hubsMemo = {
+			beacon: live.beacon,
+			top,
+			hubs
+		};
+		return hubs;
+	}
+	/** A frame goes on an edge to a member; to someone the chain took out, only the commit that took it out. */
+	mayHear(live, key, frame) {
+		if (!live?.session.wasRemoved(key)) return true;
+		const f = frame;
+		return f.t === "group-commit" && (f.commit?.k === "remove" || f.commit?.k === "leave") && f.commit.s === key;
+	}
+	/** The edges of the group that may hear `frame`. */
+	hearers(groupId, frame) {
+		const live = this.live.get(groupId);
+		return [...this.host.edges(groupId)].filter(([key]) => this.mayHear(live, key, frame));
+	}
+	/** As a hub: someone the chain took out is asking (in my lobby, or listing itself as a hub). An edge to tell it, within bounds. */
+	wantFarewell(groupId, live, key, now) {
+		if (key === live.session.myKey || live.farewells.has(key) || now < (live.farewellQuiet.get(key) ?? 0)) return;
+		if (live.farewells.size >= FAREWELL_EDGES || this.capacity(groupId, live, now) <= 0) return;
+		live.farewells.set(key, { since: now });
+		if (!this.host.edges(groupId).has(key)) live.expect.add(key);
+	}
+	/** Farewell edges end: told a moment ago, never came, or back in the group; and a hub no more keeps none. */
+	endFarewells(live, now) {
+		for (const [key, f] of live.farewells) {
+			const back = !live.session.wasRemoved(key);
+			if (!back && live.hub && (f.told ? now - f.told < FAREWELL_LINGER_MS : now - f.since < FAREWELL_WAIT_MS)) continue;
+			live.farewells.delete(key);
+			if (!back) live.farewellQuiet.set(key, now + (f.told ? FAREWELL_TOLD_MS : FAREWELL_RETRY_MS));
+		}
+		for (const [key, until] of live.farewellQuiet) if (until <= now) live.farewellQuiet.delete(key);
+		for (const [key, at] of live.farewellSaid) if (now - at >= FAREWELL_SAY_MS) live.farewellSaid.delete(key);
+	}
+	/**
+	* Someone the chain took out says where it is (`group-sync`): it is handed the commits up to the one that took it
+	* out, and nothing else (`CommunitySession.farewell`). Nothing else it says is heard.
+	*/
+	sayFarewell(groupId, live, key, sync) {
+		const now = this.now(), linkId = this.host.edges(groupId).get(key);
+		if (!linkId || now - (live.farewellSaid.get(key) ?? -Infinity) < FAREWELL_SAY_MS) return;
+		const frames = live.session.farewell(key, sync);
+		if (!frames.length) return;
+		live.farewellSaid.set(key, now);
+		try {
+			for (const frame of frames) this.host.sendOnLink(linkId, frame);
+		} catch {
+			return;
+		}
+		const waited = live.farewells.get(key);
+		if (waited) waited.told = now;
+		traceJoin(groupId, "farewell.sent");
 	}
 	noteHubs(live, now) {
-		for (const h of freshHubs(live.beacon, now)) live.seenHubs.set(h.key, now);
+		for (const h of freshHubs(this.hubs(live), now)) live.seenHubs.set(h.key, now);
 		for (const [key, at] of live.seenHubs) if (now - at > HUB_GRACE_MS) live.seenHubs.delete(key);
 	}
 	recentHub(live, key) {
@@ -14336,7 +14525,11 @@ var Communities = class {
 		const keys = lobbyKeys(live.session.state.rv, groupId, live.session.myKey);
 		const entries = readLobby(keys, await this.host.resolve(keys.identity.pubKeyZ32, true).catch(() => null) ?? []);
 		for (const { key, ts } of entries) {
-			if (now - ts > COMMUNITY_TOPOLOGY.lobbyFreshMs || key === live.session.myKey || live.session.wasRemoved(key)) continue;
+			if (now - ts > COMMUNITY_TOPOLOGY.lobbyFreshMs || key === live.session.myKey) continue;
+			if (live.session.wasRemoved(key)) {
+				if (ts + FAREWELL_SKEW_MS > (live.session.outAt(key) ?? Infinity)) this.wantFarewell(groupId, live, key, now);
+				continue;
+			}
 			live.emptySince = now;
 			if (!live.members.has(key) && live.members.size >= this.capacity(groupId, live, now)) continue;
 			if (!live.members.has(key)) {
@@ -14353,10 +14546,11 @@ var Communities = class {
 		if (s.status === "active") {
 			if (live.hub) {
 				this.shed(groupId, live, now);
-				for (const h of freshHubs(live.beacon, now)) if (h.key !== s.myKey) wanted.add(h.key);
+				for (const h of freshHubs(this.hubs(live), now)) if (h.key !== s.myKey) wanted.add(h.key);
 				for (const key of live.members.keys()) wanted.add(key);
+				for (const key of live.farewells.keys()) wanted.add(key);
 			} else for (const key of live.myHubs) wanted.add(key);
-			for (const [key, id] of existing) if (this.host.linkReady(id, 2) && (live.members.has(key) || this.recentHub(live, key))) wanted.add(key);
+			for (const [key, id] of existing) if (this.host.linkReady(id, 2) && (live.members.has(key) || this.recentHub(live, key)) && !s.wasRemoved(key)) wanted.add(key);
 		}
 		for (const [key, since] of live.restored) {
 			if (!since) live.restored.set(key, now);
@@ -14411,7 +14605,7 @@ var Communities = class {
 			g: groupId,
 			host: s.entryKey
 		};
-		const hubs = doorHubs(live.beacon, now, s.myKey);
+		const hubs = doorHubs(this.hubs(live), now, s.myKey);
 		if (!hubs.includes(s.myKey)) return;
 		const door = [...hubs].sort()[0], doorSig = [...hubs].sort().join(",");
 		if (live.doors !== doorSig) {
@@ -14433,7 +14627,7 @@ var Communities = class {
 			ts
 		}));
 		for (const { key, ts } of knocks) {
-			if (now - ts > 18e4 || this.refused.has(key) || live.pendingEntries.has(key) || key === link.host) continue;
+			if (now - ts > 18e4 || this.refused.has(key) || live.pendingEntries.has(key) || key === link.host || key === s.myKey) continue;
 			const stillKnocking = now - ts < 2 * this.timings.slowKnockMs;
 			if (rosterHas(s.roster, key)) {
 				const added = [...s.state.chain].reverse().find((c) => c.k === "add" && c.s === key)?.ts ?? 0;
@@ -14510,7 +14704,10 @@ var Communities = class {
 			ms: Date.now() - started,
 			record: n
 		});
-		if (!this.knocked.has(group.id)) {
+		const others = knocks.filter((k) => k.key !== me && now - k.ts < 2 * this.timings.slowKnockMs).length;
+		const moved = (this.knockingWith.get(group.id) ?? 0) !== others;
+		this.knockingWith.set(group.id, others);
+		if (!this.knocked.has(group.id) || moved) {
 			this.knocked.add(group.id);
 			this.host.emit();
 		}
@@ -14602,7 +14799,16 @@ var Communities = class {
 					return;
 				}
 				traceJoin(g, "welcome.received");
-				const again = !!this.live.get(g);
+				const before = this.live.get(g)?.session, again = !!before;
+				if (before?.status === "active" && before.isMember) {
+					const mine = (chain) => [...chain].reverse().find((c) => c.k === "add" && c.s === before.myKey)?.sig;
+					if (mine(joined.state.chain) === mine(before.state.chain)) {
+						await this.endCheck(group);
+						return;
+					}
+					await this.event(g, "removed", "You were removed from this group", this.now(), joined.state.chain.length - 1);
+				}
+				const back = !!before && before.status !== "lost";
 				for (const [, id] of this.host.entries(g)) if (id !== linkId) await this.host.closeEdge(id);
 				const member = {
 					id: g,
@@ -14620,9 +14826,11 @@ var Communities = class {
 				live.joinedAt = now;
 				await this.store.putGroup(member);
 				if (!again) await this.event(g, "joined", `You joined. ${GROUP_READ_NOTE_COMMUNITY}`, now, joined.state.chain.length - 1);
+				else if (back) await this.event(g, "joined", "You joined again", now, joined.state.chain.length - 1);
 				this.lastKnock.delete(g);
 				this.knocked.delete(g);
 				this.knockAt.delete(g);
+				this.knockingWith.delete(g);
 				await this.host.closeEdge(linkId);
 				await this.reconcile(g, live, now);
 				this.host.emit();
@@ -14642,12 +14850,17 @@ var Communities = class {
 	/** A frame on an edge, from the member it is pinned to: handled, then relayed on by a hub. */
 	async handleEdgeFrame(groupId, peerKey, frame) {
 		const live = this.live.get(groupId);
-		if (!live || !frame || typeof frame !== "object" || live.session.wasRemoved(peerKey)) return;
+		if (!live || !frame || typeof frame !== "object") return;
 		const f = frame;
+		if (live.session.wasRemoved(peerKey)) {
+			if (f.t === "group-sync" && live.session.isMember) this.sayFarewell(groupId, live, peerKey, f);
+			return;
+		}
 		if ((f.t === "group-secret" || f.t === "group-entry") && typeof f.to === "string" && f.to !== live.session.myKey) {
 			if (!live.hub) return;
 			const id = `${String(f.t)}:${f.to}:${String(f.h ?? f.x)}`;
 			if (!this.remember(live, id)) return;
+			if (live.session.wasRemoved(f.to)) return;
 			const edges = this.host.edges(groupId), direct = edges.get(f.to);
 			if (direct && this.host.linkReady(direct, 2)) {
 				this.sendTo(direct, f);
@@ -14657,10 +14870,10 @@ var Communities = class {
 			return;
 		}
 		if (!await live.session.handle(peerKey, frame) || !live.hub) return;
-		for (const [key, id] of this.host.edges(groupId)) if (key !== peerKey) this.sendTo(id, f);
+		for (const [key, id] of this.hearers(groupId, f)) if (key !== peerKey) this.sendTo(id, f);
 	}
 	peerIsHub(live, key) {
-		return this.recentHub(live, key) && !live.members.has(key);
+		return this.recentHub(live, key) && !live.members.has(key) && !live.session.wasRemoved(key);
 	}
 	remember(live, id) {
 		if (live.relayed.has(id)) return false;
@@ -14711,21 +14924,24 @@ var Communities = class {
 				await this.store.putGroup(group);
 			},
 			broadcast: (frame) => {
-				for (const linkId of this.host.edges(id).values()) this.sendTo(linkId, frame);
+				for (const [, linkId] of this.hearers(id, frame)) this.sendTo(linkId, frame);
+			},
+			direct: (to, frame) => {
+				if (this.mayHear(this.live.get(id), to, frame)) this.sendTo(this.host.edges(id).get(to), frame);
 			},
-			direct: (to, frame) => this.sendTo(this.host.edges(id).get(to), frame),
 			addressed: (to, frame) => {
 				const edges = this.host.edges(id), live = this.live.get(id);
 				const direct = edges.get(to);
+				if (live?.session.wasRemoved(to)) return;
 				if (direct && this.host.linkReady(direct, 2)) {
 					this.sendTo(direct, frame);
 					return;
 				}
 				const hubs = new Set(live ? [...live.seenHubs.keys()].filter((key) => this.recentHub(live, key)) : []);
-				for (const [key, linkId] of edges) if (hubs.has(key) || live?.myHubs.includes(key)) this.sendTo(linkId, frame);
+				for (const [key, linkId] of edges) if ((hubs.has(key) || live?.myHubs.includes(key)) && !live?.session.wasRemoved(key)) this.sendTo(linkId, frame);
 			},
 			message: async (m) => {
-				const timestamp = receivedTimestamp(m.timestamp);
+				const timestamp = m.timestamp;
 				const mentioned = m.sender !== session.myKey && mentionsMember(m.mentions, session.myKey);
 				const stored = await this.host.storeMessage({
 					linkId: MESSAGE_LINK$1(id),
@@ -14740,26 +14956,28 @@ var Communities = class {
 					...m.forwarded && { forwarded: m.forwarded },
 					...m.card && { card: m.card }
 				});
-				this.lastMessageAt.set(id, Math.max(this.lastMessageAt.get(id) ?? 0, timestamp));
-				const came = cameAt(timestamp, stored, this.now());
+				const came = m.sender === session.myKey ? timestamp : cameAt(timestamp, stored, this.now());
+				this.lastMessageAt.set(id, Math.max(this.lastMessageAt.get(id) ?? 0, came));
 				if (mentioned) this.lastMentionAt.set(id, Math.max(this.lastMentionAt.get(id) ?? 0, came));
 				if (m.sender !== session.myKey) this.lastPeerMessageAt.set(id, Math.max(this.lastPeerMessageAt.get(id) ?? 0, came));
+				noteCame(this.stored.get(id), came, m.sender !== session.myKey, mentioned);
 			},
 			app: (m) => this.deliver(id, () => this.host.communityApp?.(id, m.sender, m.frame)),
 			pair: (m) => this.deliver(id, () => this.host.communityPair?.(id, m.sender, m.payload)),
 			changed: () => {
 				this.membershipChanged(id);
 			},
-			metaChanged: (by, change) => {
+			metaChanged: (by, change, at) => {
 				const name = by === session.myKey ? "You" : session.state.nicks[by] ?? `Member ${by.slice(0, 8)}`;
+				const when = receivedTimestamp(at, this.now());
 				(async () => {
-					for (const line of metaLines(name, change, session.name)) await this.event(id, line.event, line.text, this.now(), session.epoch, by);
+					for (const line of metaLines(name, change, session.name)) await this.event(id, line.event, line.text, when, session.epoch, by);
 					this.host.emit();
 				})();
 			},
 			clock: () => this.now(),
 			relay: (frame) => {
-				if (this.live.get(id)?.hub) for (const linkId of this.host.edges(id).values()) this.sendTo(linkId, frame);
+				if (this.live.get(id)?.hub) for (const [, linkId] of this.hearers(id, frame)) this.sendTo(linkId, frame);
 			}
 		});
 		this.live.set(id, {
@@ -14769,6 +14987,8 @@ var Communities = class {
 			beacon: [],
 			head: null,
 			lastBeaconRead: 0,
+			beaconKnown: false,
+			beaconFailedAt: 0,
 			lastBeaconWrite: 0,
 			lastBeaconTry: 0,
 			hubCandidateAt: 0,
@@ -14786,6 +15006,9 @@ var Communities = class {
 			lingering: /* @__PURE__ */ new Map(),
 			seenHubs: /* @__PURE__ */ new Map(),
 			restored: /* @__PURE__ */ new Map(),
+			farewells: /* @__PURE__ */ new Map(),
+			farewellQuiet: /* @__PURE__ */ new Map(),
+			farewellSaid: /* @__PURE__ */ new Map(),
 			knocksScanned: false,
 			knockCursor: 0,
 			lastShardPoll: 0,
@@ -14814,22 +15037,17 @@ var Communities = class {
 		if (statusChanged && s.status === "removed") await this.event(groupId, "removed", s.state.statusReason ?? "You were removed from this group", when, s.epoch);
 		else if (statusChanged && s.status === "forked") await this.event(groupId, "forked", s.state.statusReason ?? "The membership history forked", when, s.epoch);
 		else if (s.status === "active" && before !== after) {
-			for (const [key] of after) if (!rosterHas(before, key) && key !== s.myKey) await this.event(groupId, "joined", `${name(key)} joined`, when, top.e, key);
-			for (const [key] of before) if (!rosterHas(after, key)) await this.event(groupId, "gone", `${name(key)} is no longer a member`, when, top.e, key);
-			if (top.k === "role" && before.find(([k]) => k === top.s)?.[1] !== "admin") await this.event(groupId, "admin", `${name(top.s)} ${top.s === s.myKey ? "are" : "is"} now the admin`, when, top.e, top.s);
-			if (top.k === "rotate") await this.event(groupId, "rotated", "Keys rotated: a fresh epoch", when, top.e);
+			const at = receivedTimestamp(top.ts, when);
+			for (const [key] of after) if (!rosterHas(before, key) && key !== s.myKey) await this.event(groupId, "joined", `${name(key)} joined`, at, top.e, key);
+			for (const [key] of before) if (!rosterHas(after, key)) await this.event(groupId, "gone", `${name(key)} is no longer a member`, at, top.e, key);
+			if (top.k === "role" && before.find(([k]) => k === top.s)?.[1] !== "admin") await this.event(groupId, "admin", `${name(top.s)} ${top.s === s.myKey ? "are" : "is"} now the admin`, at, top.e, top.s);
+			if (top.k === "rotate") await this.event(groupId, "rotated", "Keys rotated: a fresh epoch", at, top.e);
 		}
 		this.host.emit();
 	}
-	/**
-	* A line in the group's history. Its id carries its time, and the engine's clock moves once a tick: two
-	* lines of one kind within a tick (a picture changed, then removed) get distinct times, a millisecond
-	* apart, or the store would keep the first and drop the second as already there.
-	*/
+	/** A line in the group's history. Its id carries its time: two lines at the same moment get distinct ones (`eventTime`). */
 	async event(groupId, event, text, timestamp, epoch, member) {
-		const last = this.lastEventAt.get(groupId) ?? 0;
-		if (timestamp <= last) timestamp = last + 1;
-		this.lastEventAt.set(groupId, Math.max(last, timestamp));
+		timestamp = eventTime(this.eventTimes, groupId, timestamp);
 		await this.host.storeMessage({
 			linkId: MESSAGE_LINK$1(groupId),
 			id: `event:${epoch}:${event}:${member ?? ""}:${timestamp}`,
@@ -14841,7 +15059,7 @@ var Communities = class {
 			via: "datalink"
 		});
 	}
-	lastEventAt = /* @__PURE__ */ new Map();
+	eventTimes = /* @__PURE__ */ new Map();
 };
 //#endregion
 //#region ../browser/src/engine/meshHubs.ts
@@ -15481,12 +15699,46 @@ var mentionAt = (map, groupId) => {
 	return at ? { lastMentionAt: at } : {};
 };
 /**
-* When a member's message counts as having come, for unread and the "@": when it reached me, if that is later than
-* when it was written (a catch-up from another member, a member back after a while). Written before I last looked at
-* the group but handed to me since, it is news here; by its own time it sorted among what I had read, and the group
-* never showed unread. A copy I had already (`stored` false) or one completed in place keeps its own time.
+* When a message counts as having come, for the list of groups, unread and the "@": when it reached me, never when
+* its sender says it was written (a member's clock ahead would keep the group unread and on top; written before I
+* last looked but handed to me since, a catch-up is news here). A copy I had already (`stored` false) or one
+* completed in place moves nothing forward: its own time, now at the latest.
 */
-var cameAt = (timestamp, stored, now) => stored === false ? timestamp : Math.max(timestamp, now);
+var cameAt = (timestamp, stored, now) => stored === false ? Math.min(timestamp, now) : now;
+/**
+* The time a line of a group's history is kept under: its own, or the next millisecond no other line of this run took.
+* A line's id carries its time, and two lines can share a moment (two members gone in one change, a picture changed
+* then removed within a tick): the store would keep the first and drop the second as already there. Only a time
+* already taken moves: a line older than the last one written (a rename read after a later commit, in a catch-up)
+* keeps its place.
+*/
+function eventTime(taken, groupId, timestamp) {
+	let times = taken.get(groupId);
+	if (!times) taken.set(groupId, times = /* @__PURE__ */ new Set());
+	while (times.has(timestamp)) timestamp++;
+	times.add(timestamp);
+	if (times.size > 1024) times.delete(times.values().next().value);
+	return timestamp;
+}
+/**
+* Keeps on the group's record when a member's message came, where that is later than what it holds: the record is
+* saved with the session right after (a message taken moves its state), so a message handed to me late still makes
+* the group unread after the app starts again. Read from the history alone, by its own time, it sorted among what I
+* had read and the mark was gone on the next start.
+*/
+function noteCame(group, came, peer, mentioned) {
+	if (!group) return;
+	if (peer && came > (group.came?.peer ?? 0)) group.came = {
+		...group.came,
+		peer: came
+	};
+	if (mentioned && came > (group.came?.mention ?? 0)) group.came = {
+		...group.came,
+		mention: came
+	};
+}
+/** What `load` starts the unread marks from: the history's own times, or when its latest came if that was later. */
+var cameOrWritten = (written, came) => written === void 0 && came === void 0 ? void 0 : Math.max(written ?? 0, came ?? 0);
 /** The view's `lastPeerMessageAt`, when there is one. */
 var peerMessageAt = (map, groupId) => {
 	const at = map.get(groupId);
@@ -15500,6 +15752,7 @@ var ENTRY_TIMINGS = {
 	slowKnockMs: 2e4,
 	patienceMs: 12e4
 };
+var KNOCK_VERIFY_SPREAD_MS = 700;
 /** Entry sessions the admin runs at once; a joiner who does not finish in time is not answered again for a while. */
 var MAX_PENDING_ENTRIES = 4;
 var ENTRY_TIMEOUT_MS = 18e4;
@@ -15594,6 +15847,10 @@ var Groups = class {
 	/** Admin side: until when a group's link is looked at the warm pace. */
 	warmUntil = /* @__PURE__ */ new Map();
 	lastKnock = /* @__PURE__ */ new Map();
+	/** Joiner side: when a knock just written is read back (`KNOCK_VERIFY_MS`); none once it was found there. */
+	knockCheckAt = /* @__PURE__ */ new Map();
+	/** Joiner side: knocks written in a row without one found in the record since (`KNOCK_VERIFIES`). */
+	knockRewrites = /* @__PURE__ */ new Map();
 	/** Per group, members met over their admission a moment ago: their edge is opened expecting them. */
 	justMet = /* @__PURE__ */ new Map();
 	/** Joiner side: groups whose knock is published, for the stage the joiner is shown. */
@@ -15651,9 +15908,11 @@ var Groups = class {
 			const history = await this.store.getMessages(MESSAGE_LINK(group.id)), said = history.filter((m) => !m.event && !m.groupPay);
 			const last = said[said.length - 1], lastPeer = [...said].reverse().find((m) => m.sender !== "me");
 			if (last) this.lastMessageAt.set(group.id, last.timestamp);
-			if (lastPeer) this.lastPeerMessageAt.set(group.id, lastPeer.timestamp);
+			const peerAt = cameOrWritten(lastPeer?.timestamp, lastPeer ? group.came?.peer : void 0);
+			if (peerAt) this.lastPeerMessageAt.set(group.id, peerAt);
 			const mention = [...history].reverse().find((m) => m.mentioned);
-			if (mention) this.lastMentionAt.set(group.id, mention.timestamp);
+			const mentionAt = cameOrWritten(mention?.timestamp, mention ? group.came?.mention : void 0);
+			if (mentionAt) this.lastMentionAt.set(group.id, mentionAt);
 		}
 		for (const id of this.sessions.keys()) this.reconcileEdges(id);
 		for (const group of this.stored.values()) for (const [, linkId] of this.host.entries(group.id)) if (!group.invitation?.entry || group.invitation.linkId !== linkId) await this.host.closeEdge(linkId);
@@ -16035,6 +16294,8 @@ var Groups = class {
 		this.lastTold.delete(groupId);
 		this.pendingEntries.delete(groupId);
 		this.knocked.delete(groupId);
+		this.knockCheckAt.delete(groupId);
+		this.knockRewrites.delete(groupId);
 		this.justMet.delete(groupId);
 		this.relayAsked.delete(groupId);
 		this.hubs.forget(groupId);
@@ -16103,7 +16364,7 @@ var Groups = class {
 		if (existing?.state?.status === "active" || existing?.invitation?.entry === link.host) return link.g;
 		if (existing?.invitation?.seedB64 && !existing.invitation.entry) throw new Error("You are already joining this group");
 		if (existing) await this.forget(link.g);
-		const seedB64 = createIdentity().seedB64;
+		const seedB64 = dialedKey(link);
 		const linkId = await this.host.openEntry(link, "guest", seedB64, link.host);
 		const group = {
 			id: link.g,
@@ -16138,7 +16399,7 @@ var Groups = class {
 				}
 				if (group.invitation?.entry && !group.state) {
 					const every = now - group.createdAt > this.timings.patienceMs ? this.timings.slowKnockMs : this.timings.knockMs;
-					if (!(this.host.linkReady(group.invitation.linkId) || !!this.host.linkSeen?.(group.invitation.linkId)) && now - (this.lastKnock.get(group.id) ?? 0) >= every) await this.knock(group, now).catch(() => {});
+					if (!(this.host.linkReady(group.invitation.linkId) || !!this.host.linkSeen?.(group.invitation.linkId)) && (now - (this.lastKnock.get(group.id) ?? 0) >= every || now >= (this.knockCheckAt.get(group.id) ?? Infinity))) await this.knock(group, now).catch(() => {});
 					continue;
 				}
 				const session = this.sessions.get(group.id);
@@ -16251,15 +16512,29 @@ var Groups = class {
 			host: invitation.entry
 		}, identity = knockIdentity(link);
 		const started = Date.now();
+		this.knockCheckAt.delete(group.id);
 		const existing = readKnocks(link, await this.host.resolve(identity.pubKeyZ32) ?? []);
+		const key = identityFromSeedB64(invitation.seedB64).pubKeyZ32, mine = existing.find((k) => k.key === key);
 		traceJoin(group.id, "knock.read", {
 			ms: Date.now() - started,
-			others: existing.length
+			others: existing.length,
+			...mine ? { mine: now - mine.ts } : {}
 		});
+		if (mine && now - mine.ts >= 0 && now - mine.ts < 3e4) {
+			this.knockRewrites.delete(group.id);
+			if (!this.knocked.has(group.id)) {
+				this.knocked.add(group.id);
+				this.host.emit();
+			}
+			return;
+		}
 		await this.host.publish(identity, knockRecords(link, mergeKnocks(existing, {
-			key: identityFromSeedB64(invitation.seedB64).pubKeyZ32,
+			key,
 			ts: now
 		}, now)));
+		const rewrites = (this.knockRewrites.get(group.id) ?? 0) + 1;
+		this.knockRewrites.set(group.id, rewrites);
+		if (rewrites <= 2) this.knockCheckAt.set(group.id, now + 800 + gossipStart(key) % KNOCK_VERIFY_SPREAD_MS);
 		traceJoin(group.id, "knock.published", { ms: Date.now() - started });
 		if (!this.knocked.has(group.id)) {
 			this.knocked.add(group.id);
@@ -16745,7 +17020,7 @@ var Groups = class {
 				}
 			},
 			message: async (m) => {
-				const timestamp = receivedTimestamp(m.timestamp);
+				const timestamp = m.timestamp;
 				const mentioned = m.sender !== session.myKey && mentionsMember(m.mentions, session.myKey);
 				const message = {
 					linkId: MESSAGE_LINK(state.id),
@@ -16761,10 +17036,11 @@ var Groups = class {
 					...m.card && { card: m.card }
 				};
 				const stored = m.completes && this.host.completeMessage ? (await this.host.completeMessage(message), false) : await this.host.storeMessage(message);
-				this.lastMessageAt.set(state.id, Math.max(this.lastMessageAt.get(state.id) ?? 0, timestamp));
-				const came = cameAt(timestamp, stored, this.now());
+				const came = m.sender === session.myKey ? timestamp : cameAt(timestamp, stored, this.now());
+				this.lastMessageAt.set(state.id, Math.max(this.lastMessageAt.get(state.id) ?? 0, came));
 				if (mentioned) this.lastMentionAt.set(state.id, Math.max(this.lastMentionAt.get(state.id) ?? 0, came));
 				if (m.sender !== session.myKey) this.lastPeerMessageAt.set(state.id, Math.max(this.lastPeerMessageAt.get(state.id) ?? 0, came));
+				noteCame(this.stored.get(state.id), came, m.sender !== session.myKey, mentioned);
 				this.typings.messageFrom(state.id, m.sender);
 			},
 			edit: (e) => this.host.groupEdit?.(state.id, e),
@@ -16772,8 +17048,8 @@ var Groups = class {
 				if (session.status === "removed" && this.hubs.isHub(state.id) && !this.removedAt.has(state.id)) this.removedAt.set(state.id, this.now());
 				this.membershipChanged(state.id);
 			},
-			metaChanged: (by, change) => {
-				this.metaChanged(state.id, session, by, change);
+			metaChanged: (by, change, at) => {
+				this.metaChanged(state.id, session, by, change, at);
 			}
 		});
 		this.sessions.set(state.id, session);
@@ -16795,7 +17071,7 @@ var Groups = class {
 			top
 		});
 		const name = (key) => key === session.myKey ? "You" : session.state.nicks[key] ?? `Member ${key.slice(0, 8)}`;
-		const when = Date.now();
+		const when = moved ? receivedTimestamp(top.ts) : Date.now();
 		if (session.status === "removed") {
 			if (statusChanged) await this.event(groupId, "removed", session.state.statusReason ?? "You were removed from this group", when, session.epoch);
 		} else if (session.status === "forked") {
@@ -16817,9 +17093,11 @@ var Groups = class {
 		this.host.membersChanged?.(groupId);
 		this.host.emit();
 	}
-	async metaChanged(groupId, session, by, change) {
+	/** `at`: when the admin signed the statement (the line's time, as a commit's is its line's). */
+	async metaChanged(groupId, session, by, change, at) {
 		const name = by === session.myKey ? "You" : session.state.nicks[by] ?? `Member ${by.slice(0, 8)}`;
-		for (const line of metaLines(name, change, session.name)) await this.event(groupId, line.event, line.text, Date.now(), session.epoch, by);
+		const when = at === void 0 ? Date.now() : receivedTimestamp(at);
+		for (const line of metaLines(name, change, session.name)) await this.event(groupId, line.event, line.text, when, session.epoch, by);
 		this.host.emit();
 	}
 	/**
@@ -16854,11 +17132,9 @@ var Groups = class {
 		this.hubs.met(groupId, key, this.now());
 	}
 	/** `member`: whom it is about, so the apps can name them as they are known now, not as they were then. */
-	/** A line in the group's history; lines at the same time (two members gone in one change) get distinct ones, see `Communities.event`. */
+	/** A line in the group's history; lines at the same time (two members gone in one change) get distinct ones, see `eventTime`. */
 	async event(groupId, event, text, timestamp, epoch, member) {
-		const last = this.lastEventAt.get(groupId) ?? 0;
-		if (timestamp <= last) timestamp = last + 1;
-		this.lastEventAt.set(groupId, Math.max(last, timestamp));
+		timestamp = eventTime(this.eventTimes, groupId, timestamp);
 		await this.host.storeMessage({
 			linkId: MESSAGE_LINK(groupId),
 			id: `event:${epoch}:${event}:${timestamp}`,
@@ -16870,7 +17146,7 @@ var Groups = class {
 			via: "datalink"
 		});
 	}
-	lastEventAt = /* @__PURE__ */ new Map();
+	eventTimes = /* @__PURE__ */ new Map();
 };
 //#endregion
 //#region ../browser/src/engine/groupEdges.ts
@@ -17379,7 +17655,7 @@ var GroupEdits = class {
 			if (!takes(current) || (current.edit?.seq ?? 0) >= edit.e) return null;
 			const next = withEdit(current, {
 				seq: edit.e,
-				at: receivedTimestamp(edit.ts),
+				at: heardTime(edit.ts),
 				text: edit.m,
 				card: edit.sc
 			});
@@ -17876,6 +18152,14 @@ var POLL_IDLE_MS = 3e5;
 var RENEW_AFTER_MS = 3456e5;
 /** My pointer is published again this often while something is held, in case a relay forgot it. */
 var REPUBLISH_MS = 36e5;
+/**
+* A held item's address has this long to answer and be read whole, plus the time its declared size takes at the
+* slowest pace worth waiting for (64 KiB a second): about 21 s for a manifest, two and a half minutes for the largest
+* item. Past it the read is given up as any failed one is, and the next poll starts there again.
+*/
+var HOLD_FETCH_MS = 2e4;
+var HOLD_FETCH_BYTES_PER_S = 65536;
+var holdFetchTimeoutMs = (max) => HOLD_FETCH_MS + Math.ceil(max / HOLD_FETCH_BYTES_PER_S) * 1e3;
 var hex$2 = (bytes) => Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
 /**
 * Store-and-forward for away contacts (WISP 4xx, `hold/1`), on both ends of every chat that turned it
@@ -18409,7 +18693,7 @@ var HoldEngine = class {
 			});
 			if (manifest.header.kind !== "manifest") throw new HoldRefusedError("format", "Not a manifest");
 			mailbox = manifest.header.mailbox;
-			entries = readManifest(manifest.header.meta).filter(([seq]) => seq > this.state(linkId).inSeq);
+			entries = readManifest(manifest.header.meta).filter(([seq]) => seq > this.state(linkId).inSeq).sort((a, b) => a[0] - b[0]);
 		} catch (error) {
 			if (error instanceof HoldRefusedError) {
 				await this.save(linkId, {
@@ -18527,11 +18811,33 @@ var HoldEngine = class {
 		}
 		this.host.changed();
 	}
-	/** A presigned address read whole, but never past `max` bytes: what the manifest declared, not what a server sends. */
+	/**
+	* A presigned address read whole, but never past `max` bytes: what the manifest declared, not what a server sends.
+	* And never past `holdFetchTimeoutMs(max)`: a request that hangs (no answer, or a body that stops) is aborted and
+	* fails as a network problem does. Before, one hung request held the pickup, and every chat's after it, for good.
+	*/
 	async fetchBytes(url, max) {
+		const abort = new AbortController();
+		let timer;
+		const late = new Promise((_, reject) => {
+			timer = setTimeout(() => {
+				reject(/* @__PURE__ */ new Error("The storage did not answer in time"));
+				abort.abort();
+			}, holdFetchTimeoutMs(max));
+		});
+		const read = this.readBytes(url, max, abort.signal);
+		read.catch(() => {});
+		try {
+			return await Promise.race([read, late]);
+		} finally {
+			clearTimeout(timer);
+		}
+	}
+	async readBytes(url, max, signal) {
 		const response = await (this.host.fetch ?? ((...args) => fetch(...args)))(url, {
 			cache: "no-store",
-			credentials: "omit"
+			credentials: "omit",
+			signal
 		});
 		if (!response.ok) throw new Error(`The storage answered ${response.status}`);
 		if (Number(response.headers.get("content-length")) > max) throw new HoldRefusedError("size", "The held item is larger than the manifest said");
@@ -18541,6 +18847,9 @@ var HoldEngine = class {
 			return bytes;
 		}
 		const reader = response.body.getReader();
+		signal.addEventListener("abort", () => {
+			reader.cancel().catch(() => {});
+		}, { once: true });
 		const chunks = [];
 		let size = 0;
 		for (let next = await reader.read(); !next.done; next = await reader.read()) {
@@ -23205,7 +23514,11 @@ var WalletSetup = class {
 * The wasm (about 1 MB gzip) loads on the first chat that starts an endpoint,
 * never on the app's first load.
 */
-/** n0's public relays, the same ones the Desktop's Iroh homes on by default. */
+/**
+* n0's public relays, the same ones the Desktop's Iroh homes on by default. Iroh itself names them with the trailing
+* dot of a full domain name (`use1-1.relay.n0.iroh.link.`), and compares relay URLs as text; here they have none,
+* because WebKit opens no host name that ends in a dot. `BROWSER_SPELLING` is what keeps the two one relay.
+*/
 var DEFAULT_IROH_RELAYS = [
 	"https://use1-1.relay.n0.iroh.link/",
 	"https://euc1-1.relay.n0.iroh.link/",
@@ -23213,6 +23526,12 @@ var DEFAULT_IROH_RELAYS = [
 	"https://usw1-1.relay.n0.iroh.link/"
 ];
 /**
+* The spelling of every relay URL handed to the wasm Iroh (`irohRelayUrl`): the relays it homes on and a contact's
+* relay before a dial. One spelling, so a contact on this endpoint's relay is reached over the connection already
+* open to it; without the dot, so Safari can open it (a Desktop's record names its relay with the dot).
+*/
+var BROWSER_SPELLING = "plain";
+/**
 * Why a relay URL cannot be used, or null. TLS, except on this machine (a local `iroh-relay --dev`): a page
 * may not open plain WebSockets elsewhere, and the relay's operator would see traffic metadata in the clear.
 */
@@ -23310,7 +23629,7 @@ var IrohWebChannel = class {
 async function createIrohWebEndpoint(seedB64, options = {}) {
 	const seed = fromBase64Url(seedB64);
 	if (seed.length !== 32) throw new Error("Invalid transport seed");
-	const relays = [...options.relays?.length ? options.relays : DEFAULT_IROH_RELAYS];
+	const relays = [...new Set((options.relays?.length ? options.relays : DEFAULT_IROH_RELAYS).map((relay) => irohRelayUrl(relay, BROWSER_SPELLING)))];
 	const node = await (await (options.load ?? loadIrohWasm)()).IrohNode.start(seed, relays, options.onlineMs ?? 1e4);
 	const channels = /* @__PURE__ */ new Set();
 	let stopped = false;
@@ -23340,7 +23659,7 @@ async function createIrohWebEndpoint(seedB64, options = {}) {
 		},
 		async connect(descriptor) {
 			if (stopped) throw new Error("Iroh endpoint is stopped");
-			const conn = await node.connect(descriptor, options.connectMs ?? 2e4);
+			const conn = await node.connect(irohDescriptor(descriptor, BROWSER_SPELLING), options.connectMs ?? 2e4);
 			if (stopped) {
 				conn.close();
 				throw new Error("Iroh endpoint is stopped");
@@ -23520,12 +23839,29 @@ var GhostlyNode = class GhostlyNode {
 	relays;
 	/** Other profiles of this device, looked at for new messages (WISP 04 § Checking other profiles). */
 	profilePeek;
+	/** Whether this device's WebRTC attempts say direct connections are blocked on its network (`directPath.ts`). */
+	directPath = new DirectPathWatch(() => {
+		if (!this.shuttingDown) this.emitState();
+	});
+	/**
+	* Edges of groups whose WebRTC did not connect in this run of the app (`edgeWithoutRtc`): they go on as an app with
+	* no WebRTC does, over a native transport. Not kept: the next start tries WebRTC first again.
+	*/
+	edgeRtcOff = /* @__PURE__ */ new Set();
 	pollIntervals;
 	localFetch;
 	links = /* @__PURE__ */ new Map();
 	services = [];
 	activeLinkId = null;
-	nativeQueue = Promise.resolve();
+	/**
+	* Native listeners start one at a time per transport (`ensureNativeEndpoints`): their slots are counted per transport.
+	* Not one queue for all: a transport slow to start held every other chat's listeners of every kind behind it.
+	*/
+	nativeQueues = /* @__PURE__ */ new Map();
+	/** Every listener start asked for so far has ended. */
+	get nativeQueue() {
+		return Promise.all(this.nativeQueues.values()).then(() => {});
+	}
 	shuttingDown = false;
 	/** `start` has put the kept transfers back (EngineState.transfersRestored). */
 	transfersRestored = false;
@@ -23551,11 +23887,16 @@ var GhostlyNode = class GhostlyNode {
 	cueFeedback({ cue, key }, linkId) {
 		this.feedback("cue", cue + ":" + key, linkId, false, cue);
 	}
-	/** The newest time stored in each chat while this engine runs: a message landing well behind it is a catch-up. */
+	/** The newest time written in each chat while this engine runs: a message written well before it is a catch-up. */
 	newestAt = /* @__PURE__ */ new Map();
-	/** Only a new message at the end of its chat, or mine going out, says anything (engine/attention.ts). */
+	/** The last place given in each chat while this engine runs (`arrivalKey`). */
+	placedAt = /* @__PURE__ */ new Map();
+	/** Only a new message, or mine going out, says anything (engine/attention.ts): judged by when it was written. */
 	messageFeedback(type, message, newest = this.newestAt.get(message.linkId)) {
-		const attention = messageAttention(type, message, {
+		const attention = messageAttention(type, {
+			...message,
+			timestamp: shownTime(message)
+		}, {
 			startedAt: this.feedbackStartedAt,
 			newest,
 			now: Date.now()
@@ -24409,7 +24750,12 @@ var GhostlyNode = class GhostlyNode {
 		},
 		messages: (groupId) => db.getMessages(`group:${groupId}`),
 		putMessage: async (message) => {
-			await db.putMessage(message);
+			const kept = await db.getMessage(message.linkId, message.id);
+			await db.putMessage(kept ? {
+				...message,
+				timestamp: kept.timestamp,
+				...kept.sentAt !== void 0 && { sentAt: kept.sentAt }
+			} : this.placed(message));
 			await this.messagesChanged(message.linkId, [message.id]);
 			this.emitState();
 		}
@@ -24659,6 +25005,7 @@ var GhostlyNode = class GhostlyNode {
 		});
 		const history = /* @__PURE__ */ new Map();
 		for (const stored of await db.getLinks()) {
+			if (!stored.group) await this.settleHistory(stored.id);
 			const messages = stored.group ? [] : await db.getMessages(stored.id);
 			const storedFiles = stored.group ? [] : await fileStore.listForLink(stored.id);
 			const waiting = new Set(messages.flatMap((m) => m.sender === "me" && m.delivery === "waiting" && m.file ? [m.file.id] : []));
@@ -24676,6 +25023,7 @@ var GhostlyNode = class GhostlyNode {
 			if (stored.profile && !stored.group) await this.outboxFor(stored.id).recover();
 		}
 		this.transfersRestored = true;
+		for (const group of await db.getGroups()) await this.settleHistory(`group:${group.id}`);
 		await this.groups.load();
 		for (const group of this.groups.views()) {
 			const note = latestReaction(await db.getMessages(`group:${group.id}`));
@@ -24738,6 +25086,7 @@ var GhostlyNode = class GhostlyNode {
 	async shutdown() {
 		this.shuttingDown = true;
 		this.depart();
+		this.directPath.close();
 		if (this.relayRetry) clearTimeout(this.relayRetry);
 		if (this.activeSlotRetry) clearTimeout(this.activeSlotRetry);
 		for (const timer of this.resumeTimers.values()) clearTimeout(timer);
@@ -24806,6 +25155,7 @@ var GhostlyNode = class GhostlyNode {
 				...this.transport.configure && { direct: true },
 				...this.transport.discovery && { discovery: this.transport.discovery() },
 				...typeof RTCPeerConnection === "undefined" && { webrtc: false },
+				...this.directPath.blocked && { directBlocked: true },
 				...typeof RTCPeerConnection === "undefined" && !Object.keys(this.nativeFactories).length && { groupLinks: false }
 			},
 			links: [...this.links.values()].filter((live) => !live.stored.group).map((live) => this.viewOf(live)).sort((a, b) => b.createdAt - a.createdAt),
@@ -25255,6 +25605,7 @@ var GhostlyNode = class GhostlyNode {
 	groupHistoryGone(groupId) {
 		const linkId = `group:${groupId}`;
 		this.newestAt.delete(linkId);
+		this.placedAt.delete(linkId);
 		this.reactionNotes.delete(linkId);
 		this.events.onMessages(linkId, []);
 	}
@@ -25474,7 +25825,10 @@ var GhostlyNode = class GhostlyNode {
 	* (`network`): relays left alone for failing on the old network are asked again at once.
 	*/
 	wake(params = {}) {
-		if (params.network) this.transport.networkChanged?.();
+		if (params.network) {
+			this.transport.networkChanged?.();
+			this.directPath.reset();
+		}
 		for (const live of this.links.values()) live.link?.wake();
 		this.hold.wake();
 		for (const network of WALLET_NETWORKS) {
@@ -25519,7 +25873,7 @@ var GhostlyNode = class GhostlyNode {
 		};
 		if (!live?.link) return { error: "You are offline" };
 		if (!trimmed) return { error: null };
-		const timestamp = params.timestamp ?? Date.now();
+		const timestamp = params.timestamp ?? arrivalKey(Date.now(), this.placedAt.get(linkId));
 		if (live.stored.profile) live.link.setTyping(false);
 		if (live.stored.profile) {
 			const found = params.replyTo === void 0 ? void 0 : await this.replyFor(linkId, params.replyTo);
@@ -25590,6 +25944,7 @@ var GhostlyNode = class GhostlyNode {
 	async sendChatText(live, trimmed, timestamp, preview, reply, forwarded, card) {
 		const { link } = live, linkId = live.stored.id;
 		if (!link) return { error: "You are offline" };
+		this.chatInUse(live);
 		const bytes = new TextEncoder().encode(trimmed).length;
 		if (bytes > LIMITS.maxChatMessageBytes) return {
 			error: `Message exceeds ${LIMITS.maxChatMessageBytes} UTF-8 bytes.`,
@@ -25841,7 +26196,7 @@ var GhostlyNode = class GhostlyNode {
 			if (!takesPeerEdit(current, edit.m) || (current.edit?.seq ?? 0) >= edit.e) return null;
 			const next = withEdit(current, {
 				seq: edit.e,
-				at: receivedTimestamp(edit.ts),
+				at: heardTime(edit.ts),
 				text: edit.m,
 				preview: edit.pv,
 				card: edit.sc
@@ -26833,7 +27188,9 @@ var GhostlyNode = class GhostlyNode {
 	}
 	async createGroup({ name, profile }) {
 		if (typeof name !== "string" || !name.trim()) throw new Error("Give the group a name");
-		return { groupId: await this.groups.create(name.trim().slice(0, 48), profile === "mesh" ? "mesh" : "community") };
+		const clean = groupName(name);
+		if (!clean) throw new Error(`A group's name is 1 to 64 characters on one line`);
+		return { groupId: await this.groups.create(clean, profile === "mesh" ? "mesh" : "community") };
 	}
 	inviteToGroup({ groupId, linkId }) {
 		if (!this.links.get(linkId)?.stored.profile || this.links.get(linkId)?.stored.group) throw new Error("Invite a paired contact");
@@ -27044,7 +27401,10 @@ var GhostlyNode = class GhostlyNode {
 		if (typeof linkId !== "string" || !linkId) return { error: "No chat to react in" };
 		if (linkId.startsWith("group:")) {
 			const groupId = linkId.slice(6);
-			if (!this.membership(groupId)) return { error: "You are not in this group" };
+			if (!this.membership(groupId)) return {
+				error: this.groups.views().find((g) => g.id === groupId)?.statusReason ?? "You are not in this group",
+				refused: true
+			};
 			const result = await this.reactions.mine(linkId, messageId, emoji);
 			return "error" in result ? result : this.sendGroupReaction(groupId, result.reaction);
 		}
@@ -28460,6 +28820,7 @@ var GhostlyNode = class GhostlyNode {
 		const live = this.links.get(linkId);
 		if (!live?.stored.group) return;
 		this.links.delete(linkId);
+		this.edgeRtcOff.delete(linkId);
 		this.groupWakeReceived.delete(linkId);
 		this.groupNativeWaiting.delete(linkId);
 		this.groupNativeRetryAt = 0;
@@ -28601,7 +28962,7 @@ var GhostlyNode = class GhostlyNode {
 			usdtPaymentsSupport: !entry,
 			barkPaymentsSupport: !entry,
 			params: stored,
-			rtcAvailable: typeof RTCPeerConnection !== "undefined",
+			rtcAvailable: typeof RTCPeerConnection !== "undefined" && !this.edgeRtcOff.has(linkId),
 			resume: !entry && stored.edgeLive ? resumeOn : void 0,
 			native: {
 				peerDescriptors: stored.peerDescriptors,
@@ -28693,6 +29054,10 @@ var GhostlyNode = class GhostlyNode {
 					live.pairing = state;
 					this.emitState();
 				},
+				onDirectEvidence: (evidence) => {
+					this.directPath.note(peer, evidence);
+					if (!entry && evidence !== "open" && evidence !== "closed") this.edgeWithoutRtc(linkId);
+				},
 				onDataLinkState: (state) => {
 					traceJoin(group, `link.${state}`, { role });
 					if (state === "open" || live.dataLink === "open") live.lastSyncAt = Date.now();
@@ -28723,7 +29088,27 @@ var GhostlyNode = class GhostlyNode {
 	*/
 	keepsGroupNative(stored) {
 		if (this.options.webrtcGroupLinks) return false;
-		return typeof RTCPeerConnection === "undefined" || !!stored.peerTransports && !stored.peerTransports.includes("webrtc/1");
+		return typeof RTCPeerConnection === "undefined" || this.edgeRtcOff.has(stored.id) || !!stored.peerTransports && !stored.peerTransports.includes("webrtc/1");
+	}
+	/**
+	* An edge's WebRTC attempt exchanged both descriptions and connected nothing, or found no candidate at all
+	* (`DirectEvidence`): a network that lets no direct connection through (a VPN, a firewall, on either side). WebRTC is
+	* all an edge between two apps that have it runs, and there is no TURN server unless someone set one, so the edge
+	* never went live, and the member stayed unreachable for as long as that network lasted. The edge starts again as on an
+	* app with no WebRTC (WISP 9xx § Transports): it runs its native endpoints and says so in its packet (`_tr`, with no
+	* `webrtc/1`), the member's app starts its own for it as it does for a Linux Desktop, and the two meet over Iroh
+	* through its relay. For this run of the app only.
+	*/
+	async edgeWithoutRtc(linkId) {
+		const live = this.links.get(linkId), link = live?.link;
+		if (!live || !link || !live.stored.group || live.stored.groupEntry || this.shuttingDown || this.options.webrtcGroupLinks) return;
+		if (this.edgeRtcOff.has(linkId) || this.keepsGroupNative(live.stored) || !Object.keys(this.nativeFactories).length) return;
+		this.edgeRtcOff.add(linkId);
+		traceLink(live.myPubKeyZ32, "edge-rtc-off", {});
+		live.link = null;
+		await link.stop(false).catch(() => {});
+		if (this.links.get(linkId) !== live || live.link || this.shuttingDown || this.settings.online === false) return;
+		this.startEdge(linkId);
 	}
 	startLink(linkId, messages) {
 		const live = this.links.get(linkId);
@@ -28731,7 +29116,7 @@ var GhostlyNode = class GhostlyNode {
 		const { stored } = live;
 		if (stored.group) return this.startEdge(linkId);
 		if (stored.profile) live.pairing = { status: "connecting" };
-		const lastSeenTimestamp = messages.reduce((max, m) => m.sender === "peer" && m.via === "pkarr" ? Math.max(max, m.timestamp) : max, 0);
+		const lastSeenTimestamp = messages.reduce((max, m) => m.sender === "peer" && m.via === "pkarr" ? Math.max(max, m.sentAt ?? m.timestamp) : max, 0);
 		const credentials = stored.profile && stored.participationSeed ? {
 			seedB64: stored.participationSeed,
 			peerKey: stored.pairedPeerKey,
@@ -28964,6 +29349,7 @@ var GhostlyNode = class GhostlyNode {
 					live.peerAck = ack;
 					this.emitState();
 				},
+				onDirectEvidence: (evidence) => this.directPath.note(stored.peerPubKeyZ32, evidence),
 				onDataLinkState: (state) => {
 					const was = live.dataLink;
 					live.dataLink = state;
@@ -29023,6 +29409,7 @@ var GhostlyNode = class GhostlyNode {
 						};
 						db.patchLink(linkId, { inviteCode: void 0 });
 					}
+					if (message.via !== "datalink") this.chatInUse(live);
 					return this.storeMessage({
 						linkId,
 						id: `peer_${message.id ?? message.timestamp}`,
@@ -29191,7 +29578,7 @@ var GhostlyNode = class GhostlyNode {
 	get nativeFactories() {
 		const relay = this.relaysHyperdht ? this.hyperdhtRelay : "";
 		return {
-			...relay ? { "hyperdht/1": async (seedB64) => (await import("./hyperdhtRelay-_rJsllcP.js")).createRelayedHyperEndpoint(seedB64, relay) } : {},
+			...relay ? { "hyperdht/1": async (seedB64) => (await import("./hyperdhtRelay-cMlRWrmD.js")).createRelayedHyperEndpoint(seedB64, relay) } : {},
 			...this.options.nativeTransports,
 			...this.options.irohWeb ? { "iroh/1": (seedB64) => createIrohWebEndpoint(seedB64, { relays: this.irohRelays }) } : {}
 		};
@@ -29254,70 +29641,110 @@ var GhostlyNode = class GhostlyNode {
 		}
 		this.emitState();
 	}
-	ensureNativeEndpoints(linkId) {
+	/**
+	* A text going or coming in a 1:1 chat with no live session: the chat is in use, and takes the native listeners it
+	* lacks as the chat on screen would (a bot answering its ninth contact has no chat on screen).
+	*/
+	chatInUse(live) {
+		const link = live.link;
+		if (live.stored.group || !link || link.isDataLinkOpen || !this.keepsNativeEndpoints(live.stored.id, live.stored)) return;
+		if (Object.keys(this.nativeFactories).every((t) => link.availableTransports.includes(t))) return;
+		this.ensureNativeEndpoints(live.stored.id, true);
+	}
+	/**
+	* Whether the chat goes live only over a native transport: this app has no WebRTC, or its contact has none (its record
+	* lists no `webrtc/1`). Not known yet (no record read) counts as only natively, as a chat before its first record must.
+	*/
+	reachedOnlyNatively(live) {
+		const theirs = live.stored.capsState?.peer?.transports ?? live.stored.peerTransports;
+		return typeof RTCPeerConnection === "undefined" || !theirs || !theirs.includes("webrtc/1");
+	}
+	/** `inUse`: a text is going or coming in the chat now, which counts as the chat on screen does for taking a listener. */
+	ensureNativeEndpoints(linkId, inUse = false) {
 		const expected = this.links.get(linkId)?.link;
-		const operation = this.nativeQueue.then(async () => {
+		const starts = Object.entries(this.nativeFactories).map(([transport, factory]) => {
+			const key = transport;
+			const operation = (this.nativeQueues.get(key) ?? Promise.resolve()).then(() => factory ? this.startNativeEndpoint(linkId, expected, key, factory, inUse) : false);
+			this.nativeQueues.set(key, operation.then(() => {}, () => {}));
+			return operation;
+		});
+		return Promise.all(starts).then((full) => {
 			const live = this.links.get(linkId), link = live?.link;
-			if (this.shuttingDown || !live?.stored.profile || live.stored.deliveryMode === "dht" || !link || link !== expected) return;
-			const group = !!live.stored.group;
-			if (group && !this.keepsGroupNative(live.stored)) return;
-			let full = false;
-			for (const [transport, factory] of Object.entries(this.nativeFactories)) {
-				const key = transport;
-				if (!factory || link.availableTransports.includes(key)) continue;
-				live.transportErrors ??= {};
-				try {
-					const owners = [...this.links.values()].filter((other) => other.link?.availableTransports.includes(key));
-					if (group && (owners.length >= NATIVE_SLOTS || owners.filter((other) => other.stored.group).length >= 4)) {
-						full = true;
-						continue;
-					}
-					if (owners.length >= NATIVE_SLOTS) {
-						const victim = owners.filter((other) => other.stored.group && other.link?.canReleaseEndpoint(key)).sort((a, b) => (a.link?.isDataLinkOpen ? 1 : 0) - (b.link?.isDataLinkOpen ? 1 : 0))[0] ?? (this.activeLinkId === linkId ? owners.filter((other) => other !== live && other.stored.id !== this.activeLinkId && other.link?.canReleaseEndpoint(key)).sort((a, b) => a.lastMessageAt - b.lastMessageAt)[0] : void 0);
-						if (!victim) {
-							traceLink(live.myPubKeyZ32, "native-no-slot", {
-								transport: key,
-								active: this.activeLinkId === linkId
-							});
-							if (this.activeLinkId === linkId && !group) this.retryActiveSlot(linkId);
-							throw new Error("All eight native connection slots are in use. Disconnect a native connection in another chat, then reopen this chat or press Reconnect.");
-						}
-						await victim.link.releaseEndpoint(key);
-						victim.transportErrors ??= {};
-						victim.transportErrors[key] = "Listener released for another chat. Open this chat to restore it; your messages and transport identity are saved.";
-						if (victim.stored.group) this.groupNativeWaiting.add(victim.stored.id);
-					}
-					if (this.shuttingDown || live.link !== link) return;
-					const seed = live.stored.transportSeeds?.[key] ?? createIdentity().seedB64;
-					const transportSeeds = {
-						...live.stored.transportSeeds,
-						[key]: seed
-					};
-					await db.patchLink(linkId, { transportSeeds });
-					live.stored = {
-						...live.stored,
-						transportSeeds
+			if (this.shuttingDown || !live || !link || link !== expected) return;
+			if (live.stored.group && this.keepsGroupNative(live.stored)) {
+				if (full.some(Boolean) && !link.availableTransports.some((t) => t !== "webrtc/1")) this.groupNativeWaiting.add(linkId);
+				else this.groupNativeWaiting.delete(linkId);
+			}
+			this.emitState();
+		});
+	}
+	/** One transport's listener for one chat, in that transport's queue. True when a group's link found no slot free. */
+	async startNativeEndpoint(linkId, expected, key, factory, inUse) {
+		const live = this.links.get(linkId), link = live?.link;
+		if (this.shuttingDown || !live?.stored.profile || live.stored.deliveryMode === "dht" || !link || link !== expected) return false;
+		const group = !!live.stored.group;
+		if (group && !this.keepsGroupNative(live.stored)) return false;
+		if (link.availableTransports.includes(key)) return false;
+		live.transportErrors ??= {};
+		try {
+			const owners = [...this.links.values()].filter((other) => other.link?.availableTransports.includes(key));
+			if (group && (owners.length >= NATIVE_SLOTS || owners.filter((other) => other.stored.group).length >= 4)) return true;
+			if (owners.length >= NATIVE_SLOTS) {
+				const now = Date.now();
+				const taking = !group && (this.activeLinkId === linkId || inUse);
+				const victim = owners.filter((other) => other.stored.group && other.link?.canReleaseEndpoint(key)).sort((a, b) => (a.link?.isDataLinkOpen ? 1 : 0) - (b.link?.isDataLinkOpen ? 1 : 0))[0] ?? (taking ? owners.filter((other) => other !== live && other.stored.id !== this.activeLinkId && other.link?.canReleaseEndpoint(key) && now - (other.nativeTakenAt?.[key] ?? 0) >= 12e4).sort((a, b) => a.lastMessageAt - b.lastMessageAt)[0] : void 0);
+				const idle = victim || !taking || !this.reachedOnlyNatively(live) ? void 0 : owners.filter((other) => other !== live && !other.stored.group && other.stored.id !== this.activeLinkId && !this.fileDesk.moving(other.stored.id) && other.link?.canYieldEndpoint(key, 12e4)).sort((a, b) => a.link.lastActivityAt - b.link.lastActivityAt)[0];
+				const idleFor = idle ? now - idle.link.lastActivityAt : 0;
+				if (idle && await idle.link.yieldEndpoint(key, 12e4)) {
+					traceLink(live.myPubKeyZ32, "native-take", {
+						transport: key,
+						idle: idleFor,
+						active: this.activeLinkId === linkId
+					});
+					live.nativeTakenAt = {
+						...live.nativeTakenAt,
+						[key]: Date.now()
 					};
-					const endpoint = await factory(seed);
-					if (this.shuttingDown || live.stored.deliveryMode === "dht" || live.link !== link || !this.links.has(linkId)) {
-						await endpoint.close();
-						return;
-					}
-					link.registerEndpoint(endpoint);
-					delete live.transportErrors[key];
-					this.capsChanged(linkId);
-				} catch (error) {
-					live.transportErrors[key] = error instanceof Error ? error.message : "Native adapter could not start. Reopen this chat to retry.";
+					idle.transportErrors ??= {};
+					idle.transportErrors[key] = "Listener given to a chat in use: this one was quiet. Open this chat to take one back; your messages and transport identity are saved.";
+				} else if (!victim) {
+					traceLink(live.myPubKeyZ32, "native-no-slot", {
+						transport: key,
+						active: this.activeLinkId === linkId
+					});
+					if (this.activeLinkId === linkId && !group) this.retryActiveSlot(linkId);
+					throw new Error("All eight native connection slots are in use. This chat takes one once a chat live over one has been quiet for 2 minutes. Disconnect a native connection in another chat to free one now.");
+				} else {
+					await victim.link.releaseEndpoint(key);
+					victim.transportErrors ??= {};
+					victim.transportErrors[key] = "Listener released for another chat. Open this chat to restore it; your messages and transport identity are saved.";
+					if (victim.stored.group) this.groupNativeWaiting.add(victim.stored.id);
 				}
 			}
-			if (group) {
-				if (full && !link.availableTransports.some((t) => t !== "webrtc/1")) this.groupNativeWaiting.add(linkId);
-				else this.groupNativeWaiting.delete(linkId);
+			if (this.shuttingDown || live.link !== link) return false;
+			const seed = live.stored.transportSeeds?.[key] ?? createIdentity().seedB64;
+			const transportSeeds = {
+				...live.stored.transportSeeds,
+				[key]: seed
+			};
+			live.stored = {
+				...live.stored,
+				transportSeeds
+			};
+			await db.patchLink(linkId, { transportSeeds });
+			const endpoint = await factory(seed);
+			if (this.shuttingDown || live.stored.deliveryMode === "dht" || live.link !== link || !this.links.has(linkId)) {
+				await endpoint.close();
+				return false;
 			}
+			link.registerEndpoint(endpoint);
+			delete live.transportErrors[key];
+			this.capsChanged(linkId);
 			this.emitState();
-		});
-		this.nativeQueue = operation.catch(() => {});
-		return operation;
+		} catch (error) {
+			live.transportErrors[key] = error instanceof Error ? error.message : "Native adapter could not start. Reopen this chat to retry.";
+		}
+		return false;
 	}
 	/**
 	* The order saved chats start in, which is the order they take native listeners in (`NATIVE_SLOTS` per transport):
@@ -29446,15 +29873,46 @@ var GhostlyNode = class GhostlyNode {
 			deleted: unique.filter((_, i) => !rows[i])
 		});
 	}
+	/**
+	* At the start, before anything reads a history: received rows an earlier version stored under a time that has not
+	* come yet take a place before now (`settleAhead`). One row is read when nothing is ahead, which is every start but
+	* the first after the update.
+	*/
+	async settleHistory(linkId) {
+		const now = Date.now();
+		const newest = (await db.getMessagePage(linkId, { limit: 1 })).messages[0];
+		if (!newest || newest.timestamp <= now) return;
+		for (const row of settleAhead(await db.getMessages(linkId), now)) await db.putMessage(row);
+	}
+	/**
+	* A new row with its place in its history. A received row takes it here and now, past the last place given in its
+	* chat: the time its sender says is kept beside it (`sentAt`) and shown, and orders nothing (WISP 400, requirement
+	* 10). A sender's clock ahead or behind then moves no message past another, and what I send next goes below what I
+	* just received. A row of mine keeps its own time; one placed already (it has `sentAt`) is left as it is. A line
+	* of a group's history (a membership change, a rename) is not a message: it stays at its commit's time, as before.
+	*/
+	placed(message) {
+		const now = Date.now(), last = this.placedAt.get(message.linkId) ?? 0;
+		if (message.event) return message.sender === "peer" ? {
+			...message,
+			timestamp: receivedTimestamp(message.timestamp)
+		} : message;
+		if (message.sender === "peer" && message.sentAt === void 0) {
+			const sentAt = claimedTime(message.timestamp);
+			message = {
+				...message,
+				timestamp: arrivalKey(now, last),
+				...sentAt !== void 0 && { sentAt }
+			};
+			this.placedAt.set(message.linkId, message.timestamp);
+		} else this.placedAt.set(message.linkId, Math.max(last, Math.min(message.timestamp, now)));
+		return message;
+	}
 	async storeMessage(message) {
 		await this.storeNewMessage(message);
 	}
 	/** Stores a message; false when it was there already (or deleted here): nothing new came. */
 	async storeNewMessage(message) {
-		if (message.sender === "peer") message = {
-			...message,
-			timestamp: receivedTimestamp(message.timestamp)
-		};
 		const edge = this.links.get(message.linkId)?.stored;
 		if (edge?.group && edge.groupPeer && !edge.groupEntry) message = {
 			...message,
@@ -29469,6 +29927,7 @@ var GhostlyNode = class GhostlyNode {
 			id: `${message.linkId}:${message.id}`,
 			...message.sender === "peer" ? { member: pay.member } : {}
 		};
+		message = this.placed(message);
 		const live = this.links.get(message.linkId);
 		if (live?.stored.deletedIds?.includes(message.id)) return false;
 		message = await this.resolveReply(message);
@@ -29498,7 +29957,7 @@ var GhostlyNode = class GhostlyNode {
 		}
 		if (!await db.addMessage(message)) return false;
 		const newest = this.newestAt.get(message.linkId);
-		if (!message.event) this.newestAt.set(message.linkId, Math.max(newest ?? 0, message.timestamp));
+		if (!message.event) this.newestAt.set(message.linkId, Math.max(newest ?? 0, shownTime(message)));
 		if (message.sender === "peer") this.messageFeedback("message", message, newest);
 		if (live) live.lastMessageAt = Math.max(live.lastMessageAt, message.timestamp);
 		const early = message.sender === "peer" && message.id.startsWith("peer_") ? this.editBuffer.take(message.linkId, message.id.slice(5)) : void 0;
@@ -29804,4 +30263,4 @@ function signalKind(signal) {
 //#endregion
 export { EngineServer, hyperdhtRelayProblem as n, server_exports as t };
 
-//# sourceMappingURL=server-C-8wbsAX.js.map
+//# sourceMappingURL=server-Cajp8VLY.js.map