@ghostlytools/cli 1.1.2 → 1.1.4

package/dist/assets/{server-vGoe9MET.js → server-CXFTDnFI.js}

@@ -1,5 +1,5 @@
 import { a as fileBytesOf, c as removeFileBytes, d as __exportAll, i as fileBytes, n as blobDigest } from "./fileBytes-DxiJHmTk.js";
-import { $a as filePartName, $i as BUTTON_ID, $n as freshHubs, $o as createChatInvite, $r as IdentityExchange, $s as randomBytes, $t as isPubkyKey, A as GROUP_EDIT_TEXT_BYTES, Aa as RTC_CONFIG, An as findEndpoint, Ao as readSetUpdate, Ar as newWakeToken, As as RelayTransport, At as encodeDidDhtPacket, Ba as LEGACY_SERVICES, Bi as GROUP_REACTION_FRAME, Bo as enrollCancelReason, Br as HOLD_LIMITS, Bs as createRelayPayload, Bt as USDT_PUBLIC_RPC, C as groupWakes, Ca as formatLocalTarget, Co as readHandoffHello, Cr as nextPinNumber, Cs as nextTurnPosition, D as GroupSession, Da as decodeControl, Dn as ENDPOINT, Do as sealHandoffPiece, Dr as WAKE_CALL_INTERVAL_MS, Ds as turnKeys, Dt as didDhtDocument, E as GROUP_READ_NOTE, Ea as LIMITS, En as decodeBolt11, Eo as readHandoffVerified, Er as readPin, Es as signTurnRelease, Fi as dhtEditId, Fn as INVITE_TAKEN, Fr as vapidKeysMatch, Fs as budgetRetryMs, Ft as ONCHAIN_PROVIDER, Ga as HANDOFF_HAVE, Gi as reactionEmoji, Gn as MESH_HUBS, Go as enrollProofFrame, Gr as CapsExchange, Gs as identityFromSeed, Gt as validatePaymentTarget, Ha as HANDOFF_ACK, Hi as ReactionWindow, Ho as enrollDoneFrame, Hr as HoldRefusedError, Ht as assertTokenUnits, Ia as parseCallSignal, Ii as parseLinkPreview, In as LIVENESS_PING_MS, Is as isDiscoveryBudgetError, It as PaymentPreflightError, Ja as HANDOFF_PAKE, Ji as validReactionNumber, Jn as pickMeshHubs, Jo as verifyEnrollProof, Jr as dialDescriptors, Js as verify, Jt as SPARK_PROVIDER, Ka as HANDOFF_HELLO, Ki as reactionIsNewer, Kn as mayBeHub, Ko as readEnrollGrant, Kr as DHT_TEXT_CAPABILITY, Ks as identityFromSeedB64, Kt as walletNetworkOf, Li as forwardedAgain, Ln as pairedMessageFrame, Lr as EDIT_CAPABILITY, Ls as withRequestOptions, Lt as SEPOLIA_TEST_USDT, M as parseCommunityEdit, Mi as EDIT_BUFFER_MS, Mn as parseCashuRequestPayload, Mo as setUpdateFrame, Mr as relayRequest, Ms as normalizeRelayUrl, Mt as signDidDhtPacket, N as mentionsMember, Ni as EDIT_RATE_WINDOW_MS, Nn as parseFedimintRequestPayload, No as signTombstone, Nr as wakeRequest, Nt as ETHEREUM_USDT, Oa as encodeControl, Oi as fileMessageText, On as cashuRequestPayload, Or as WakeLimiter, Os as turnName, Ot as didDhtFromPublicKey, P as groupName, Pi as RateWindow, Pn as GhostLink, Po as verifySetUpdate, Pr as checkPushEndpoint, Ps as traceLink, Pt as EVM_TEST_CHAINS, Qa as HANDOFF_VERIFIED, Qi as replySnippet, Qn as doorHubs, Qo as OwnInviteError, Qs as fromBase64Url, Ra as emptyLinkRecords, Ri as readForwarded, Rn as CarriedTransport, Rr as HOLD_CAPABILITY, Rs as PacketTooLargeError, Rt as SEPOLIA_TEST_USDT_FAUCET, S as groupWakeFrame, Sa as GhostlyHttpError, Si as safeBlobType, So as readHandoffHave, Sr as mayPin, Ss as firstDeviceSetSecret, Ta as webLocalFetch, Tn as engineText, To as readHandoffTurnFrame, Tr as pinNumberHolds, Ts as signTurnPacket, Ua as HANDOFF_CANCEL, Ui as nextReactionNumber, Un as groupSignalFrame, Uo as enrollGrantFrame, Ur as newMailbox, Ut as assertWholeSats, Va as serviceIdFromName, Vi as REACTION_LIMITS, Vo as enrollDigits, Vr as HoldKeys, Vt as WALLET_NETWORKS, Wa as HANDOFF_DONE, Wi as queueReaction, Wn as readGroupSignal, Wo as enrollHelloFrame, Wr as readManifest, Ws as createIdentity, Wt as formatPaymentAmount, Xa as HANDOFF_REQUEST, Xi as pairedReplyAuthor, Xn as beaconKeys, Xo as deviceInviteJoinerParams, Xs as sanitizeAvatar, Xt as sparkInvoiceDetails, Ya as HANDOFF_PIECE_BYTES, Yi as wireReaction, Yn as COMMUNITY_TOPOLOGY, Yo as createDeviceInvite, Yt as sparkAddressKind, Za as HANDOFF_TIMINGS, Zi as readReply, Zn as beaconRecords, Zo as readDeviceInvite, Zr as IDENTITY_REVOCATION_LABEL, Zs as bytesEqual, Zt as isBitcoinAddress, _ as knockRecords, _a as edgeParams, _i as peekDhtMailbox, _o as handoffVersions, _r as TypingSender, _s as TURN_SETTLE_MS, a as sealGroupTyping, aa as sameButtonText, ai as receivedIdentityStatus, ao as handoffContext, ar as pickHubs, as as ENROLL_CAPABILITY, ba as RELAY_POLL_INTERVALS, bi as parseImageMeta, bo as readHandoffCancel, bs as TURN_LAST_SEQUENCE, c as GROUP_READ_NOTE_COMMUNITY, ca as claimedTime, ci as PeerProofs, co as handoffDigest, cr as readBeaconHead, cs as deviceEchoNonce, d as encodeCommunityLink, da as shownTime, di as TRANSPORTS, do as handoffManifestFrames, dr as ChatFiles, ds as devicePingFrame, ec as toBase64Url, eo as handoffAttemptAllowed, er as lobbyKeys, es as decodeInviteCode, et as isAtprotoDid, fa as GROUP_MEMBER_CAP, fi as automaticTransport, fo as handoffOfferFrame, fr as FILE_LIMITS, fs as newDeviceSetSecret, g as knockIdentity, ga as verifyCommitSignature, gi as DHT_MESSAGE_TTL, go as handoffStreamKey, gs as TURN_RAISE_READ_TIMEOUT_MS, h as entryParams, ha as rosterHas, ho as handoffRetryAfter, i as openGroupTyping, ia as checkStatusCard, ii as newIdentityBinding, io as handoffCancelFrame, ir as newerHead, is as DEVICES_CAPABILITY, j as carryMentions, ji as parseVideoMeta, jn as isFederationId, jo as setAckFrame, jr as parseWakeFrame, js as currentRelays, ki as parseVoiceMeta, kn as fedimintRequestPayload, kr as deviceWakeRequest, ks as DEFAULT_RELAYS, kt as encodeDidDhtDeactivated, l as communityHasFrame, la as heardTime, li as emptyProofLedger, lo as handoffEphemeral, lr as readLobby, ls as deviceKeyZ32, m as encodeGroupEntryLink, ma as MEMBER_KEY, mi as irohRelayUrl, mo as handoffReleaseFrame, mr as transferStalled, ms as webCryptoSigner, n as GroupTypingBoard, na as STATUS_CARD_LIMITS, nc as utf8Decode, ni as identityRevocationValue, no as handoffAttemptSucceeded, nr as mergeBeacon, o as COMMUNITY_LIMITS, oa as statusCardText, oi as revokesIdentity, oo as handoffContextProof, or as rankHubs, os as HANDOFF_CAPABILITY, p as decodeGroupEntryLink, pi as irohDescriptor, po as handoffPakeFrame, pr as transferEnded, ps as seedSigner, qa as HANDOFF_OFFER, qi as readReaction, qn as meshHubs, qo as readEnrollHello, qr as capsDescriptors, qs as publicKeyFromZ32, qt as SPARK_NETWORKS, r as groupTypingEpoch, rc as utf8Encode, ri as identityStatement, ro as handoffBusyFrame, rr as mergeLobby, rs as inviteOwnership, s as CommunitySession, sa as arrivalKey, si as lastSharedWithMe, so as handoffDataFrame, sr as readBeacon, ss as deviceEchoFrame, tc as toZ32, ti as emptyIdentityLedger, to as handoffAttemptFailed, tr as lobbyRecords, ts as encodeInviteCode, tt as normalizeAtprotoHandle, u as decodeCommunityLink, ua as receivedTimestamp, ui as validExternalKey, uo as handoffHelloFrame, ur as shouldBeHub, us as deviceLinkPairing, v as mergeKnocks, va as DirectPathWatch, vi as DHT_FILE_CAPABILITY, vo as newHandoffId, vs as classifyTurnRead, w as parseGroupWakeFrame, wa as parseLocalTarget, wn as engineError, wo as readHandoffPake, wr as pinIsNewer, ws as readTurnPacket, x as GroupWakeLimiter, xa as presenceSeenAt, xo as readHandoffDone, xr as PIN_LIMITS, xs as TURN_MAX, y as readKnocks, yi as dhtFileId, yo as readHandoffAck, yr as typingActivity, ys as turnPutSummary, za as HTTP_SERVICE_PROTO, zi as COMMUNITY_REACTION_FRAME, zo as enrollCancelFrame, zr as HOLD_DATED_BACK_MS, zt as TEST_USDT_FAUCET_AMOUNT } from "./src-CJdPTl7Q.js";
+import { $a as HANDOFF_VERIFIED, $i as replySnippet, $n as freshHubs, $o as OwnInviteError, $s as fromBase64Url, $t as isPubkyKey, A as GROUP_EDIT_TEXT_BYTES, Ai as parseVoiceMeta, An as findEndpoint, Ar as newWakeToken, As as DEFAULT_RELAYS, At as encodeDidDhtPacket, Ba as HTTP_SERVICE_PROTO, Bi as COMMUNITY_REACTION_FRAME, Bo as enrollCancelFrame, Br as HOLD_DATED_BACK_MS, Bt as USDT_PUBLIC_RPC, C as groupWakes, Ca as GhostlyHttpError, Ci as safeBlobType, Co as readHandoffHave, Cr as nextPinNumber, Cs as firstDeviceSetSecret, D as GroupSession, Da as LIMITS, Dn as ENDPOINT, Do as readHandoffVerified, Dr as WAKE_CALL_INTERVAL_MS, Ds as signTurnRelease, Dt as didDhtDocument, E as GROUP_READ_NOTE, Ea as webLocalFetch, En as decodeBolt11, Eo as readHandoffTurnFrame, Er as readPin, Es as signTurnPacket, Fi as RateWindow, Fn as INVITE_TAKEN, Fo as verifySetUpdate, Fr as vapidKeysMatch, Fs as traceLink, Ft as ONCHAIN_PROVIDER, Ga as HANDOFF_DONE, Gi as queueReaction, Gn as MESH_HUBS, Go as enrollHelloFrame, Gr as readManifest, Gs as createIdentity, Gt as validatePaymentTarget, Ha as serviceIdFromName, Hi as REACTION_LIMITS, Ho as enrollDigits, Hr as HoldKeys, Ht as assertTokenUnits, Ii as dhtEditId, In as LIVENESS_PING_MS, Is as budgetRetryMs, It as PaymentPreflightError, Ja as HANDOFF_OFFER, Ji as readReaction, Jn as pickMeshHubs, Jo as readEnrollHello, Jr as capsDescriptors, Js as publicKeyFromZ32, Jt as SPARK_PROVIDER, Ka as HANDOFF_HAVE, Ki as reactionEmoji, Kn as mayBeHub, Ko as enrollProofFrame, Kr as CapsExchange, Ks as identityFromSeed, Kt as walletNetworkOf, La as parseCallSignal, Li as parseLinkPreview, Ln as pairedMessageFrame, Lr as EDIT_CAPABILITY, Ls as isDiscoveryBudgetError, Lt as SEPOLIA_TEST_USDT, M as parseCommunityEdit, Mi as parseVideoMeta, Mn as parseCashuRequestPayload, Mo as setAckFrame, Mr as relayRequest, Ms as currentRelays, Mt as signDidDhtPacket, N as mentionsMember, Ni as EDIT_BUFFER_MS, Nn as parseFedimintRequestPayload, No as setUpdateFrame, Nr as wakeRequest, Ns as normalizeRelayUrl, Nt as ETHEREUM_USDT, Oa as decodeControl, On as cashuRequestPayload, Oo as sealHandoffPiece, Or as WakeLimiter, Os as turnKeys, Ot as didDhtFromPublicKey, P as groupName, Pi as EDIT_RATE_WINDOW_MS, Pn as GhostLink, Po as signTombstone, Pr as checkPushEndpoint, Pt as EVM_TEST_CHAINS, Qa as HANDOFF_TIMINGS, Qi as readReply, Qn as doorHubs, Qo as readDeviceInvite, Qr as IDENTITY_REVOCATION_LABEL, Qs as bytesEqual, Ri as forwardedAgain, Rn as CarriedTransport, Rr as UPGRADE_CAPABILITY, Rs as withRequestOptions, Rt as SEPOLIA_TEST_USDT_FAUCET, S as groupWakeFrame, Sa as presenceSeenAt, So as readHandoffDone, Sr as mayPin, Ss as TURN_MAX, Ta as parseLocalTarget, Tn as engineText, To as readHandoffPake, Tr as pinNumberHolds, Ts as readTurnPacket, Ua as HANDOFF_ACK, Ui as ReactionWindow, Un as groupSignalFrame, Uo as enrollDoneFrame, Ur as HoldRefusedError, Ut as assertWholeSats, Va as LEGACY_SERVICES, Vi as GROUP_REACTION_FRAME, Vo as enrollCancelReason, Vr as HOLD_LIMITS, Vs as createRelayPayload, Vt as WALLET_NETWORKS, Wa as HANDOFF_CANCEL, Wi as nextReactionNumber, Wn as readGroupSignal, Wo as enrollGrantFrame, Wr as newMailbox, Wt as formatPaymentAmount, Xa as HANDOFF_PIECE_BYTES, Xi as wireReaction, Xn as beaconKeys, Xo as createDeviceInvite, Xt as sparkInvoiceDetails, Ya as HANDOFF_PAKE, Yi as validReactionNumber, Yn as COMMUNITY_TOPOLOGY, Yo as verifyEnrollProof, Yr as dialDescriptors, Ys as verify, Yt as sparkAddressKind, Za as HANDOFF_REQUEST, Zi as pairedReplyAuthor, Zn as beaconRecords, Zo as deviceInviteJoinerParams, Zs as sanitizeAvatar, Zt as isBitcoinAddress, _ as knockRecords, _a as verifyCommitSignature, _i as DHT_MESSAGE_TTL, _o as handoffStreamKey, _r as TypingSender, _s as TURN_RAISE_READ_TIMEOUT_MS, a as sealGroupTyping, aa as checkStatusCard, ai as newIdentityBinding, ao as handoffCancelFrame, ar as pickHubs, as as DEVICES_CAPABILITY, bi as dhtFileId, bo as readHandoffAck, bs as turnPutSummary, c as GROUP_READ_NOTE_COMMUNITY, ca as arrivalKey, ci as lastSharedWithMe, co as handoffDataFrame, cr as readBeaconHead, cs as deviceEchoFrame, d as encodeCommunityLink, da as receivedTimestamp, di as validExternalKey, do as handoffHelloFrame, dr as ChatFiles, ds as deviceLinkPairing, ea as BUTTON_ID, ec as randomBytes, ei as IdentityExchange, eo as filePartName, er as lobbyKeys, es as createChatInvite, et as isAtprotoDid, fa as shownTime, fi as TRANSPORTS, fo as handoffManifestFrames, fr as FILE_LIMITS, fs as devicePingFrame, g as knockIdentity, ga as rosterHas, go as handoffRetryAfter, h as entryParams, ha as MEMBER_KEY, hi as irohRelayUrl, ho as handoffReleaseFrame, hs as webCryptoSigner, i as openGroupTyping, ic as utf8Encode, ii as identityStatement, io as handoffBusyFrame, ir as newerHead, is as inviteOwnership, j as carryMentions, ja as RTC_CONFIG, jn as isFederationId, jo as readSetUpdate, jr as parseWakeFrame, js as RelayTransport, ka as encodeControl, ki as fileMessageText, kn as fedimintRequestPayload, kr as deviceWakeRequest, ks as turnName, kt as encodeDidDhtDeactivated, l as communityHasFrame, la as claimedTime, li as PeerProofs, lo as handoffDigest, lr as readLobby, ls as deviceEchoNonce, m as encodeGroupEntryLink, mi as irohDescriptor, mo as handoffPakeFrame, mr as transferStalled, ms as seedSigner, n as GroupTypingBoard, nc as toZ32, ni as emptyIdentityLedger, no as handoffAttemptFailed, nr as mergeBeacon, ns as encodeInviteCode, o as COMMUNITY_LIMITS, oa as sameButtonText, oi as receivedIdentityStatus, oo as handoffContext, or as rankHubs, os as ENROLL_CAPABILITY, p as decodeGroupEntryLink, pa as GROUP_MEMBER_CAP, pi as automaticTransport, po as handoffOfferFrame, pr as transferEnded, ps as newDeviceSetSecret, qa as HANDOFF_HELLO, qi as reactionIsNewer, qn as meshHubs, qo as readEnrollGrant, qr as DHT_TEXT_CAPABILITY, qs as identityFromSeedB64, qt as SPARK_NETWORKS, r as groupTypingEpoch, ra as STATUS_CARD_LIMITS, rc as utf8Decode, ri as identityRevocationValue, ro as handoffAttemptSucceeded, rr as mergeLobby, s as CommunitySession, sa as statusCardText, si as revokesIdentity, so as handoffContextProof, sr as readBeacon, ss as HANDOFF_CAPABILITY, tc as toBase64Url, to as handoffAttemptAllowed, tr as lobbyRecords, ts as decodeInviteCode, tt as normalizeAtprotoHandle, u as decodeCommunityLink, ua as heardTime, ui as emptyProofLedger, uo as handoffEphemeral, ur as shouldBeHub, us as deviceKeyZ32, v as mergeKnocks, va as edgeParams, vi as peekDhtMailbox, vo as handoffVersions, vs as TURN_SETTLE_MS, w as parseGroupWakeFrame, wa as formatLocalTarget, wn as engineError, wo as readHandoffHello, wr as pinIsNewer, ws as nextTurnPosition, x as GroupWakeLimiter, xa as RELAY_POLL_INTERVALS, xi as parseImageMeta, xo as readHandoffCancel, xr as PIN_LIMITS, xs as TURN_LAST_SEQUENCE, y as readKnocks, ya as DirectPathWatch, yi as DHT_FILE_CAPABILITY, yo as newHandoffId, yr as typingActivity, ys as classifyTurnRead, za as emptyLinkRecords, zi as readForwarded, zr as HOLD_CAPABILITY, zs as PacketTooLargeError, zt as TEST_USDT_FAUCET_AMOUNT } from "./src-K3NijMq-.js";
 import { a as deleteDatabase, c as profileOpenFailure, d as wrap, i as databaseName, l as store, n as STORES$1, o as fileStore, r as clearProfileStores, s as openDb, t as CARD_INDEX, u as transact } from "./idb-Co2lObpU.js";
 import { $ as onAdaptersChanged, A as intentRepository, C as ProviderSources, Ct as FileAppender, D as requireTurn, Dt as streamStored, E as refuseAway, Et as storedSize, F as ModeGate, G as fakesLightning, H as BITCOIN_INVOICE_ON_TESTNET, I as WrongNetworkError, J as mintNetwork, K as isTestMint, L as networkLabel, M as sealSeed, N as unsealSeed, O as setAwayWallets, P as ModeChanged, Q as identityProviders, R as CASHU_MINT_SOURCE, S as lightningPaying, St as paymentWireId, T as awayFrom, Tt as removeStored, U as DEFAULT_MINTS, V as WALLET_TYPES, W as TEST_MINT, X as BACKUP_MEDIA_TYPE, Y as paysItsOwnInvoices, Z as MAX_BACKUP_BYTES, _ as normalizePhrase, _t as pairedWireReply, a as createFailure, at as SourceConfigError, b as breezDatabasesFor, bt as replyTo, c as paymentNetwork, ct as networkMode, d as networkReason, dt as resolveAtprotoDid, et as registeredLightningProviders, f as rpcHost, ft as setOwnDidSource, g as isRecoveryPhrase, gt as groupReply, h as cardsKey, ht as chosenResolver, i as assertConfirmedReal, it as PROVIDER_PLATFORMS, j as newDeviceKey, k as setSingleWriterGate, l as paymentNetworksOf, lt as redact, m as LightningCards, mt as verifyIdentity, n as loadFedimintSdk, nt as reserveAdapterIds, o as createTiming, ot as SourceUnreachableError, p as CASHU_CARD, pt as boundedIdentityFetch, q as isWorthlessMint, r as WALLET_NAMES, rt as NothingSpentError, s as crossNetwork, st as isNothingSpentError, t as fedimintDatabase, tt as registeredOnchainProviders, u as walletInstances, ut as assertPublicServer, v as breezDatabase, vt as receivedPairedReply, w as sourceKey, wt as readStored$1, x as dropBreezDatabase, xt as paymentAlias, y as breezDatabaseInUse, yt as replyRef, z as cashuMint } from "../ghostly.mjs";
 import { hkdf } from "@noble/hashes/hkdf.js";
@@ -190,6 +190,27 @@ var erc20 = new Interface([
 ]);
 var same$1 = (a, b) => a.toLowerCase() === b.toLowerCase();
 var CONFIRMATIONS = 2;
+/** The JSON-RPC methods that only read: asked again once when they fail (see `UsdtAdapter.rpc`). */
+var RETRIED_READS = /* @__PURE__ */ new Set([
+	"eth_chainId",
+	"eth_getCode",
+	"eth_call",
+	"eth_getBalance",
+	"eth_blockNumber",
+	"eth_getLogs",
+	"eth_getTransactionCount",
+	"eth_estimateGas",
+	"eth_getBlockByNumber",
+	"eth_maxPriorityFeePerGas",
+	"eth_gasPrice",
+	"eth_feeHistory",
+	"eth_getTransactionByHash",
+	"eth_getTransactionReceipt"
+]);
+var RETRY_AFTER_MS = 1e3;
+/** Failures that would fail the same way again at once: not retried. */
+var FINAL = /* @__PURE__ */ new WeakSet();
+var timedOut = (error) => error instanceof Error && (error.name === "AbortError" || error.name === "TimeoutError");
 /**
 * The `provider` a request carries to the contact. Which RPC pays is the payer's own choice, so it names none of
 * this wallet's: a typed RPC URL may hold an API key (`/v3/<key>`), and every contact would read it. Older apps
@@ -259,7 +280,22 @@ var UsdtAdapter = class UsdtAdapter {
 		adapter.account = await adapter.manager.getAccount(0);
 		return adapter;
 	}
+	/**
+	* A read that fails is asked again, once, a moment later: a public RPC drops a request now and then, and a chain that
+	* just made a block can refuse a read of "latest" it no longer holds. Without it a network switch, a restore or New
+	* gave up on the first such answer. Never a broadcast or anything else that writes, nor a request that did not answer
+	* in time (the person would wait twice as long), nor one the server refused as such (4xx).
+	*/
 	async rpc(method, params = []) {
+		try {
+			return await this.ask(method, params);
+		} catch (error) {
+			if (!RETRIED_READS.has(method) || FINAL.has(error)) throw error;
+			await new Promise((resolve) => setTimeout(resolve, RETRY_AFTER_MS));
+			return this.ask(method, params);
+		}
+	}
+	async ask(method, params) {
 		let response;
 		try {
 			response = await fetch(this.config.provider, {
@@ -275,9 +311,15 @@ var UsdtAdapter = class UsdtAdapter {
 			});
 		} catch (error) {
 			const reason = networkReason(error, rpcHost(this.config.provider));
-			throw reason ? Object.assign(new Error(reason), { cause: error }) : error;
+			const thrown = reason ? Object.assign(new Error(reason), { cause: error }) : error;
+			if (timedOut(error) && thrown && typeof thrown === "object") FINAL.add(thrown);
+			throw thrown;
+		}
+		if (!response.ok) {
+			const error = engineError("usdtRpcUnavailable");
+			if (response.status !== 429 && response.status < 500) FINAL.add(error);
+			throw error;
 		}
-		if (!response.ok) throw engineError("usdtRpcUnavailable");
 		const result = await response.json();
 		if (result.error || !Object.prototype.hasOwnProperty.call(result, "result")) throw new Error("USDT RPC rejected the operation");
 		return result.result;
@@ -1259,6 +1301,12 @@ var ArkadeAdapter = class ArkadeAdapter {
 };
 //#endregion
 //#region ../browser/src/engine/paymentAdapters/backup.ts
+/**
+* Wallet database versions a backup may carry. 3 is what SDK 0.4.74-0.4.76 made (Ghostly 1.1.3 and earlier);
+* 4 is SDK 0.4.78's, which adds the vtxos `scriptUnspent` index. An older one is restored at its own version
+* and the SDK upgrades it the first time the wallet opens. arkBackupSchema.test.ts fails when the SDK moves on.
+*/
+var ARK_DB_VERSIONS = [3, 4];
 var allowed = /* @__PURE__ */ new Set([
 	"vtxos",
 	"utxos",
@@ -1315,7 +1363,7 @@ async function snapshotArkDatabase(walletId) {
 }
 /** Only imports into a freshly allocated database; never replaces an existing wallet. */
 async function restoreArkDatabase(walletId, snapshot) {
-	if (snapshot.version !== 3 || !Array.isArray(snapshot.stores) || snapshot.stores.length > allowed.size || new Set(snapshot.stores.map((s) => s.name)).size !== snapshot.stores.length || snapshot.stores.some((s) => !allowed.has(s.name) || !Array.isArray(s.values) || !Array.isArray(s.keys) || s.values.length !== s.keys.length)) throw new Error("Unsupported Ark backup schema");
+	if (!ARK_DB_VERSIONS.includes(snapshot.version) || !Array.isArray(snapshot.stores) || snapshot.stores.length > allowed.size || new Set(snapshot.stores.map((s) => s.name)).size !== snapshot.stores.length || snapshot.stores.some((s) => !allowed.has(s.name) || !Array.isArray(s.values) || !Array.isArray(s.keys) || s.values.length !== s.keys.length)) throw new Error("Unsupported Ark backup schema");
 	for (const name of [
 		"vtxos",
 		"utxos",
@@ -3330,7 +3378,7 @@ var loading$2;
 /** Loads the WebAssembly once, on first use: profiles that never pick Breez never fetch its 12.8 MB. */
 function loadBreezSdk() {
 	return loading$2 ??= (async () => {
-		const breez = await import("./web-OUQl4Q7L.js");
+		const breez = await import("./web-DwgdhfcY.js");
 		await breez.default();
 		return { async connect({ network, mnemonic, apiKey, storage }) {
 			const config = breez.defaultConfig(network);
@@ -8432,6 +8480,16 @@ var REVOCATIONS = "identityRevocations";
 var REPUBLISH_MS$1 = 36e5;
 /** How often the contacts' proofs are looked up for a revocation (and once shortly after start). */
 var REVOCATION_CHECK_MS = 432e5;
+/**
+* After a contact withdraws a proof, how long to wait before each lookup for its revocation (WISP 300: removing a proof withdraws it from
+* every chat and revokes it). The notice goes out before the revocation is published, so not at once; each try backs
+* off, and the first that finds it stops the rest. The 12 h check covers it after that.
+*/
+var WITHDRAWN_REVOCATION_TRIES_MS = [
+	2e4,
+	6e4,
+	18e4
+];
 var DRAFT_TTL = 18e5;
 var MAX_DRAFTS$1 = 4;
 var MAX_PROOFS = 32;
@@ -8644,10 +8702,31 @@ var IdentityProofs = class {
 		}
 		for (const r of live) await this.publishRevocation(r).catch(() => {});
 	}
-	/** Looks up every contact's current proofs for a revocation (the Pkarr record only, not the provider). */
+	/**
+	* Looks up the contacts' proofs for a revocation (the Pkarr record only, not the provider): the ones standing, and the
+	* ones withdrawn, which a removal also revokes. Not a proof already revoked, nor one past its expiry: its owner
+	* publishes the revocation only until then.
+	*/
 	async checkRevocations() {
 		if (!this.host.online()) return;
-		for (const linkId of this.host.linkIds()) for (const r of this.host.ledger(linkId)?.received ?? []) if (r.status === "verified" || r.status === "unconfirmed") await this.exchange(linkId)?.recheck(r.id, { revocationOnly: true }).catch(() => {});
+		for (const linkId of this.host.linkIds()) for (const r of this.host.ledger(linkId)?.received ?? []) if (this.revocable(r)) await this.exchange(linkId)?.recheck(r.id, { revocationOnly: true }).catch(() => {});
+	}
+	revocable(r) {
+		return r.status !== "revoked" && Math.min(r.binding.expiresAt, r.verified.expiresAt ?? Infinity) > now();
+	}
+	/** A proof the contact just withdrew: looked up for its revocation a few times (`WITHDRAWN_REVOCATION_TRIES_MS`). */
+	afterWithdrawal(linkId, id, tries = WITHDRAWN_REVOCATION_TRIES_MS) {
+		const [wait, ...rest] = tries;
+		if (wait === void 0) return;
+		const timer = setTimeout(() => {
+			this.timers = this.timers.filter((t) => t !== timer);
+			const r = this.host.ledger(linkId)?.received.find((x) => x.id === id);
+			if (!r || r.status !== "withdrawn" || !this.revocable(r)) return;
+			(async () => {
+				if ((this.host.online() ? await this.exchange(linkId)?.recheck(id, { revocationOnly: true }).catch(() => void 0) : void 0)?.status !== "revoked") this.afterWithdrawal(linkId, id, rest);
+			})();
+		}, wait);
+		this.timers.push(timer);
 	}
 	views() {
 		return this.proofs.map((p) => this.viewOf(p));
@@ -8751,8 +8830,12 @@ var IdentityProofs = class {
 		}));
 		this.host.emit();
 	}
-	frame(linkId, frame) {
-		return this.exchange(linkId)?.receive(frame) ?? Promise.resolve();
+	async frame(linkId, frame) {
+		const x = this.exchange(linkId);
+		if (!x) return;
+		const withdrawn = frame.t === "idp-withdraw" && typeof frame.id === "string" && this.host.ledger(linkId)?.received.some((r) => r.id === frame.id && r.status !== "withdrawn" && r.status !== "revoked");
+		await x.receive(frame);
+		if (withdrawn && this.host.ledger(linkId)?.received.some((r) => r.id === frame.id && r.status === "withdrawn")) this.afterWithdrawal(linkId, frame.id);
 	}
 	ready(linkId) {
 		if (this.greeted.has(linkId) || !this.host.channel(linkId)) return;
@@ -10799,7 +10882,7 @@ function nostrPost(note) {
 }
 /**
 * Nostr: kind-1 notes and the kind-3 follow list of exactly the proven key, from the relays in the person's settings
-* (never relays named in events, hints or NIP-65 lists: docs/wisps/3xx-nostr-social.md). Replies are left out; a page
+* (never relays named in events, hints or NIP-65 lists: docs/wisps/309-nostr-social.md). Replies are left out; a page
 * reads twice as many notes to find ten that are not. Followers cannot be listed without trusting a counting service.
 */
 var nostrActivity = {
@@ -13948,6 +14031,10 @@ var EnrollInviter = class extends Enrollment {
 			onPeerSeen: () => {
 				if (this.seen || this.over) return;
 				this.seen = true;
+				if (this.view.role === "inviter" && this.view.step === "waiting") this.show({
+					...this.view,
+					seen: true
+				});
 				this.timer(this.options.timing?.proofMs ?? 12e4, () => {
 					if (this.view.step === "waiting") this.fail("unreached");
 				});
@@ -16374,6 +16461,9 @@ var DeviceLinks = class {
 		const keeper = await this.turnKeeper();
 		if (!keeper) return null;
 		const outcome = await keeper.check(atStart);
+		try {
+			if (outcome) this.handoff?.turnRead?.(outcome);
+		} catch {}
 		await this.refresh();
 		return outcome;
 	}
@@ -16570,6 +16660,11 @@ var SHOWN_AFTER_RELOAD = /* @__PURE__ */ new Set([
 	"cancelled"
 ]);
 var reportOf = (busy) => busy === null ? null : typeof busy === "string" ? { why: busy } : busy;
+/**
+* What `handoff-busy` tells the taker of a local reason (WISP 06: the requesting device "Shows why"). A call is said as
+* itself, so the person waits for it to end; the rest stay "handoff": which wallet keeps the profile is said on this device.
+*/
+var wireWhy = (report) => report.why === "call" ? "call" : "handoff";
 var name = (record, key) => record.deviceSet.find((slot) => slot?.key === key)?.name ?? "";
 var slotOf = (record, key) => record.deviceSet.findIndex((slot) => slot?.key === key);
 /** One session of a handoff with the other device: its own X25519 key, the other's hello, and the stream key. */
@@ -16929,6 +17024,25 @@ var HandoffGiver = class {
 	receive(from, frame) {
 		return this.exclusive(() => this.handle(from, frame)).catch(() => {});
 	}
+	/**
+	* A turn read on this standby found the record of `key` at `turn`: the device it released to took the turn, which is
+	* what the `handoff-done` would have said. That frame goes once, as the taker reloads, and can be lost; without this
+	* the screen said "Moving to …" for good, with no Use here, until that device offered the profile back.
+	*/
+	turnTaken(key, turn) {
+		return this.exclusive(async () => {
+			if (this.stopped || this.phase !== "released" || key !== this.peer || turn <= this.turn) return;
+			await this.taken();
+		}).catch(() => {});
+	}
+	/** The release was taken: the handoff note goes, and this device is a plain standby. */
+	async taken() {
+		await this.dropBreez();
+		await this.ports.records.amend({ handoff: void 0 });
+		this.phase = "idle";
+		this.peer = null;
+		this.changed();
+	}
 	async handle(from, frame) {
 		if (this.stopped) return;
 		if (from === this.peer && frame.t.startsWith("handoff-")) this.heardAt = this.now();
@@ -16950,11 +17064,7 @@ var HandoffGiver = class {
 			case HANDOFF_DONE:
 				if (from !== this.peer || this.phase !== "released") return;
 				if (frame.t === "handoff-done" ? readHandoffDone(frame) === null : readHandoffTurnFrame(frame) === null) return;
-				await this.dropBreez();
-				await this.ports.records.amend({ handoff: void 0 });
-				this.phase = "idle";
-				this.peer = null;
-				this.changed();
+				await this.taken();
 				return;
 			case HANDOFF_CANCEL: {
 				const why = readHandoffCancel(frame);
@@ -17015,7 +17125,7 @@ var HandoffGiver = class {
 				this.failure = this.failWith(local);
 				this.changed();
 			}
-			return busy("handoff");
+			return busy(wireWhy(local));
 		}
 		const self = await this.ownSelf();
 		const versions = handoffVersions(self, session.peer);
@@ -17216,12 +17326,12 @@ var HandoffGiver = class {
 			while (this.now() < deadline && reportOf(await this.ports.busy(taker))?.why === "payment") await new Promise((resolve) => setTimeout(resolve, 1e3));
 			const still = reportOf(await this.ports.busy(taker));
 			if (still) {
-				this.out(handoffBusyFrame("handoff", 30));
+				this.out(handoffBusyFrame(wireWhy(still), 30));
 				this.reset(still.why === "payment" ? "payment" : this.failWith(still));
 				return;
 			}
 		} else if (why) {
-			this.out(handoffBusyFrame("handoff", 30));
+			this.out(handoffBusyFrame(wireWhy(why), 30));
 			this.reset(this.failWith(why));
 			return;
 		}
@@ -19095,7 +19205,7 @@ function canEdit(message) {
 }
 /** A group message's id: `<sender>:<epoch>:<seq>` in a private group, `<sender>:<epoch>:<commit>:<seq>` in a community. */
 var GROUP_MESSAGE_ID = /^[a-z0-9]{52}:\d+:(?:[0-9a-f]{16}:)?\d+$/;
-/** A text of mine in a group (WISP 9xx § Edits): one the group carried under its id, not a payment, a note or an event line. */
+/** A text of mine in a group (WISP 902 § Edits): one the group carried under its id, not a payment, a note or an event line. */
 function canEditInGroup(message) {
 	return message.sender === "me" && message.linkId.startsWith("group:") && GROUP_MESSAGE_ID.test(message.id) && !message.file && !message.paymentId && !message.event && !message.groupPay;
 }
@@ -19109,9 +19219,9 @@ function takesPeerEdit(message, text) {
 /**
 * The message after edit `seq`, made at `at`: the new text (and the preview and the status card that came with it, or
 * none: each belongs to its version), the version it replaces kept in the history. A text that did not change adds no
-* version. A status card's update adds none either (WISP 4xx · Status Cards): it replaces the card in place, and its
+* version. A status card's update adds none either (WISP 405 · Status Cards): it replaces the card in place, and its
 * text is only the card's fallback, so a bot's thousands of updates keep one card and no trail of versions. Buttons
-* (WISP 4xx · Message Buttons) are the exception: their text is the question people answer, so a new one keeps the
+* (WISP 406 · Message Buttons) are the exception: their text is the question people answer, so a new one keeps the
 * version it replaces, and only a change of the buttons alone (the answer marked, closed) adds none.
 */
 function withEdit(message, edit) {
@@ -19745,7 +19855,7 @@ var EditQueue = class {
 /** A card's updates from someone else are applied (stored, shown) at most once per this long, per message. */
 var CARD_APPLY_GAP_MS = 1e3;
 /**
-* Received status card updates, paced per message (WISP 4xx · Status Cards): the first applies at once, the rest within
+* Received status card updates, paced per message (WISP 405 · Status Cards): the first applies at once, the rest within
 * `CARD_APPLY_GAP_MS` wait, and only the highest edit number of them applies when the time is up. A sender that
 * ignores its own pace costs this side one write and one render a second per card, whatever it sends.
 */
@@ -20771,8 +20881,8 @@ var HUB_CLOCK_SLACK_MS = COMMUNITY_TOPOLOGY.beaconEveryMs * 1.5;
 /** A hub's clock is remembered this long after its entry was last in the beacon. */
 var HUB_CLOCK_KEPT_MS = 6e5;
 /**
-* Each hub's clock as its beacon entry showed it (WISP 9xx · Group Community § Topology, Clocks that differ; the mesh's
-* hubs read their beacon the same way, WISP 9xx · Group Mesh § Hubs). Held against mine as it is, a hub whose clock is
+* Each hub's clock as its beacon entry showed it (WISP 903 · Group Community § Topology, Clocks that differ; the mesh's
+* hubs read their beacon the same way, WISP 902 · Group Mesh § Hubs). Held against mine as it is, a hub whose clock is
 * a minute and a half from mine never looks fresh (its entry is "stale", or "not come yet"): a member saw no hub and a
 * hub with such a clock was no hub to anyone. So a hub's clock is learned from its entry: when the entry moved between
 * two readings of mine at most `readGapMs` apart, it was written between them, and what it says the time was then,
@@ -21082,9 +21192,11 @@ var Communities = class {
 				return !!id && this.host.linkReady(id, 2);
 			};
 			const hubs = freshHubs(this.hubs(live), this.now()).map((h) => h.key);
+			const former = Object.entries(s.state.nicks).filter(([key]) => !rosterHas(s.roster, key));
 			return [{
 				...base,
 				name: s.name,
+				...former.length ? { formerNames: Object.fromEntries(former) } : {},
 				status: s.status,
 				statusReason: s.state.statusReason,
 				epoch: s.epoch,
@@ -21223,14 +21335,14 @@ var Communities = class {
 			messageId: result.id
 		};
 	}
-	/** An application frame to everyone in the group (WISP 9xx · Group Community § Payments). */
+	/** An application frame to everyone in the group (WISP 903 · Group Community § Payments). */
 	async sendApp(groupId, frame) {
 		const live = this.live.get(groupId);
 		if (!live) throw new Error("You are not in this group yet");
 		const result = await live.session.sendApp(frame, this.host.myNick?.(), this.now());
 		if ("error" in result) throw new Error(result.error);
 	}
-	/** An edit of my message, through the group like any frame (WISP 9xx · Group Community § Edits). An error when it cannot go now. */
+	/** An edit of my message, through the group like any frame (WISP 903 · Group Community § Edits). An error when it cannot go now. */
 	async sendEdit(groupId, edit) {
 		const live = this.live.get(groupId);
 		if (!live) return "You are not in this group yet";
@@ -21635,7 +21747,7 @@ var Communities = class {
 	}
 	/**
 	* The members this hub may keep edges with: `hubCapacity`, or on an app with a budget of connections (a Mac, WISP
-	* 9xx · Group Mesh § Hubs, Budget) what its other groups and 1:1 chats leave (`peerRoom`), less its edges to the
+	* 902 · Group Mesh § Hubs, Budget) what its other groups and 1:1 chats leave (`peerRoom`), less its edges to the
 	* other hubs and, for taking someone new (`entries`), its entry sessions.
 	*/
 	capacity(groupId, live, now, entries = true) {
@@ -21672,7 +21784,7 @@ var Communities = class {
 		return true;
 	}
 	/**
-	* The newest message frame I hold, for the beacon's head (WISP 9xx § Head): what a member's other profile on the
+	* The newest message frame I hold, for the beacon's head (WISP 903 § Head): what a member's other profile on the
 	* same device compares with what it took, to show that something new was said while it was not running.
 	*/
 	newestFrame(live) {
@@ -22428,7 +22540,7 @@ var GONE_LINGER_MS = 15e3;
 */
 var HUB_CLOCK_READ_GAP_MS = 75e3;
 /**
-* The hubs of the private groups this device is in (WISP 9xx · Group Mesh § Hubs): whether a group runs on hubs, who
+* The hubs of the private groups this device is in (WISP 902 · Group Mesh § Hubs): whether a group runs on hubs, who
 * they are (the community's sealed beacon and lobbies, under the epoch's rendezvous secret), whether I am one, which
 * edges that asks for, and passing frames on as a hub. `Groups` owns the sessions and the edges; this decides.
 */
@@ -22501,7 +22613,7 @@ var MeshHubs = class {
 		this.live.delete(groupId);
 	}
 	/**
-	* The edges this app may keep in a group, within its budget of connections (WISP 9xx · Group Mesh § Hubs, Budget):
+	* The edges this app may keep in a group, within its budget of connections (WISP 902 · Group Mesh § Hubs, Budget):
 	* what the other groups' links do not hold, less what the groups I am a hub of still have to open. Undefined for an
 	* app without a budget. What this group holds itself does not count: a hub that stepped down would fit again at once.
 	*/
@@ -22912,7 +23024,7 @@ var MeshHubs = class {
 	}
 	/**
 	* As a hub, what the session took for the first time goes on to every other edge that is up: not back where it came
-	* from, nor to its author. Everyone else takes it as a frame handed on (WISP 9xx § Catch-up).
+	* from, nor to its author. Everyone else takes it as a frame handed on (WISP 902 § Catch-up).
 	*/
 	passOn(groupId, session, from, frames) {
 		if (!this.live.get(groupId)?.hub || !frames.length) return 0;
@@ -22955,7 +23067,7 @@ function authorOf(frame) {
 //#endregion
 //#region ../browser/src/engine/groupTyping.ts
 /**
-* Typing in private groups (WISP 9xx · Group Mesh § Typing): this side's word goes sealed on every open edge to a
+* Typing in private groups (WISP 902 · Group Mesh § Typing): this side's word goes sealed on every open edge to a
 * member, and each member's word is shown until its `stop`, its message, or 6 s without a new `start`. Never stored.
 * Community groups do not carry it yet (their frames are all stored messages).
 */
@@ -23022,7 +23134,7 @@ var GroupTypings = class {
 //#endregion
 //#region ../browser/src/engine/meshSignals.ts
 /**
-* Edge signaling through members (WISP 9xx · Group Mesh § Signaling through members; `CarriedTransport` in core): which
+* Edge signaling through members (WISP 902 · Group Mesh § Signaling through members; `CarriedTransport` in core): which
 * links an edge's packet is handed to, what a member does with one that is for someone else, and what happens to one
 * that is for me. A packet is the edge's own Pkarr packet, signed under a key only its two ends derive: whoever
 * carries it sees a signed blob, as a relay does, and the edge checks it as it checks a relay's answer.
@@ -23395,7 +23507,7 @@ var HERE_PER_MINUTE = 4;
 * re-offer) slows in proportion, and an edge to someone away (read to notice them come back) by the square root:
 * at 32 members, every four minutes and every minute, so 31 edges cost about 8 reads a minute when everyone is here
 * and 32 when nobody is. Whoever reaches a member coming back first tells the others (`group-here`), who then look
-* fast for it (WISP 9xx § Cost per member).
+* fast for it (WISP 902 § Cost per member).
 */
 function meshEdgeScale(members, connected = true) {
 	const ratio = Math.max(1, (members - 1) / 8);
@@ -23489,15 +23601,15 @@ var Groups = class {
 	communities;
 	/** My messages and edits an edge of a private group took. */
 	frames = new FramesTaken();
-	/** Hubs of the private groups past 16 members (WISP 9xx · Group Mesh § Hubs). */
+	/** Hubs of the private groups past 16 members (WISP 902 · Group Mesh § Hubs). */
 	hubs;
 	/** Groups whose edges are being reconciled because their hubs changed: one at a time. */
 	hubReconcile = /* @__PURE__ */ new Set();
 	/** Groups a commit took me out of, and when: their edges close `REMOVED_LINGER_MS` later. */
 	removedAt = /* @__PURE__ */ new Map();
-	/** Who is typing in each private group, and this side's word there (WISP 9xx · Group Mesh § Typing). */
+	/** Who is typing in each private group, and this side's word there (WISP 902 · Group Mesh § Typing). */
 	typings;
-	/** Edge signaling through members (WISP 9xx · Group Mesh § Signaling through members). */
+	/** Edge signaling through members (WISP 902 · Group Mesh § Signaling through members). */
 	signals;
 	constructor(host, store = db, timings = ENTRY_TIMINGS, communityTimings = COMMUNITY_TIMINGS, random, hubTimings = MESH_HUB_TIMINGS) {
 		this.host = host;
@@ -23583,6 +23695,7 @@ var Groups = class {
 					isAdmin: false,
 					members: [],
 					canSend: false,
+					...group.formerNames ? { formerNames: group.formerNames } : {},
 					invitation: {
 						linkId: invitation.linkId,
 						contact: this.host.contactName(invitation.linkId) ?? "",
@@ -23677,7 +23790,7 @@ var Groups = class {
 		return this.isCommunity(groupId) ? this.communities.taken(groupId, key) : this.frames.count(groupId, key);
 	}
 	/**
-	* Says an edit of my message to the group (WISP 9xx § Edits): over the edges of a private group (to member `to`
+	* Says an edit of my message to the group (WISP 902 § Edits): over the edges of a private group (to member `to`
 	* alone, when given), through a community like any frame. An error when it cannot go now.
 	*/
 	async sendEdit(groupId, edit, to) {
@@ -23762,7 +23875,7 @@ var Groups = class {
 	}
 	/**
 	* Sends a text; `messageId` is the id it is kept under here (what history, replies and reactions name). `forwarded`:
-	* the hop count of a forwarded text (WISP 9xx § Forwards). `card`: a checked status card, the text its fallback.
+	* the hop count of a forwarded text (WISP 902 § Forwards). `card`: a checked status card, the text its fallback.
 	*/
 	async send(groupId, text, mentions = [], reply, forwarded, card) {
 		if (this.isCommunity(groupId)) return card ? this.communities.send(groupId, text, mentions, reply, forwarded, card) : this.communities.send(groupId, text, mentions, reply, forwarded);
@@ -23776,7 +23889,7 @@ var Groups = class {
 		};
 	}
 	/**
-	* This side is typing in a private group (with what it is doing), or stopped (WISP 9xx · Group Mesh § Typing).
+	* This side is typing in a private group (with what it is doing), or stopped (WISP 902 · Group Mesh § Typing).
 	* Nothing for a community: it does not carry typing yet.
 	*/
 	setTyping(groupId, typing, activity) {
@@ -23995,7 +24108,7 @@ var Groups = class {
 	}
 	/**
 	* The admin pins a member of a private group as a hub, excludes one from being a hub, or leaves it to the member's
-	* app (`null`): said in the group's metadata, which every member keeps (WISP 9xx · Group Mesh § Hubs).
+	* app (`null`): said in the group's metadata, which every member keeps (WISP 902 · Group Mesh § Hubs).
 	*/
 	async setHub(groupId, key, role) {
 		if (this.isCommunity(groupId)) throw new Error("A community group chooses its hubs by itself");
@@ -24005,12 +24118,12 @@ var Groups = class {
 	rotate(groupId) {
 		return this.isCommunity(groupId) ? this.communities.rotate(groupId) : this.session(groupId).rotate();
 	}
-	/** The admin sets or removes the group's picture; every member gets it over the edges (WISP 9xx § Metadata). */
+	/** The admin sets or removes the group's picture; every member gets it over the edges (WISP 902 § Metadata). */
 	async setPicture(groupId, picture) {
 		if (this.isCommunity(groupId)) return this.communities.setPicture(groupId, picture);
 		await this.session(groupId).setPicture(picture);
 	}
-	/** The admin renames the group; every member gets the name over the edges, beside the picture (WISP 9xx § Metadata). */
+	/** The admin renames the group; every member gets the name over the edges, beside the picture (WISP 902 § Metadata). */
 	async rename(groupId, name) {
 		if (this.isCommunity(groupId)) return this.communities.rename(groupId, name);
 		await this.session(groupId).rename(name);
@@ -24173,7 +24286,7 @@ var Groups = class {
 		}
 	}
 	/**
-	* Private groups past 16 members: their hubs (WISP 9xx · Group Mesh § Hubs), then their edges, when what the hubs
+	* Private groups past 16 members: their hubs (WISP 902 · Group Mesh § Hubs), then their edges, when what the hubs
 	* ask for is not what exists (a hub came or went, I became one, a member asked me).
 	*/
 	async hubsTick(now) {
@@ -24224,7 +24337,7 @@ var Groups = class {
 		return Object.entries(this.stored.get(groupId)?.contacts ?? {}).find(([, id]) => id === linkId)?.[0];
 	}
 	/**
-	* My packet for the edge to `to`, handed to links that reach that member or may pass it on (WISP 9xx · Group Mesh
+	* My packet for the edge to `to`, handed to links that reach that member or may pass it on (WISP 902 · Group Mesh
 	* § Signaling through members): how many took it, and whether one of them surely reaches that member. None in a
 	* community, whose members keep no edges with each other.
 	*/
@@ -24380,6 +24493,10 @@ var Groups = class {
 				if (existing?.state && existing.state.status === "active") return;
 				if (existing?.invitation?.seedB64) return;
 				if ([...this.stored.values()].filter((x) => x.invitation).length >= 32) return;
+				const known = {
+					...existing?.formerNames,
+					...existing?.state?.nicks
+				};
 				const invitation = {
 					id: g,
 					createdAt: Date.now(),
@@ -24390,7 +24507,8 @@ var Groups = class {
 						e: Number.isSafeInteger(frame.e) ? frame.e : 0,
 						n: Number.isSafeInteger(frame.n) ? frame.n : 1,
 						pieces: []
-					}
+					},
+					...Object.keys(known).length ? { formerNames: known } : {}
 				};
 				if (existing) {
 					this.sessions.delete(g);
@@ -24483,6 +24601,8 @@ var Groups = class {
 				});
 				await this.store.putGroup(member);
 				if (!viaLink) await this.sessions.get(g).setNick(group.invitation.admin, this.host.contactName(linkId));
+				const session = this.sessions.get(g);
+				for (const [key, nick] of Object.entries(group.formerNames ?? {})) if (!session.state.nicks[key]) await session.setNick(key, nick);
 				await this.event(g, "joined", `You joined. ${GROUP_READ_NOTE}`, Date.now(), joined.state.chain.length - 1);
 				if (viaLink) traceJoin(g, "welcome.received");
 				if (viaLink) {
@@ -24581,7 +24701,7 @@ var Groups = class {
 	}
 	/**
 	* A reaction: from the member whose edge it came on (`group-react`), or signed by a member and passed on by a hub
-	* (`group-reacted`). As a hub, a signed one goes on to the other edges (WISP 9xx · Group Mesh § Hubs).
+	* (`group-reacted`). As a hub, a signed one goes on to the other edges (WISP 902 · Group Mesh § Hubs).
 	*/
 	async reaction(groupId, session, from, raw) {
 		if (session.status !== "active" || raw.g !== groupId) return;
@@ -24992,7 +25112,7 @@ var Groups = class {
 //#endregion
 //#region ../browser/src/engine/groupEdges.ts
 /**
-* An edge of a group as the group page shows it (WISP 9xx § Mesh): open means group frames flow, which
+* An edge of a group as the group page shows it (WISP 902 § Mesh): open means group frames flow, which
 * is what "reachable" means everywhere else in groups; what carries it; when the member was last heard.
 */
 function edgeView(live, now = Date.now(), noSlot = false) {
@@ -25016,7 +25136,7 @@ function edgeView(live, now = Date.now(), noSlot = false) {
 //#endregion
 //#region ../browser/src/engine/groupPayments.ts
 /**
-* Payments in a group (WISP 9xx § Payments). The money, the invoice and the receipts travel only on the edge
+* Payments in a group (WISP 902 § Payments). The money, the invoice and the receipts travel only on the edge
 * between the two members, as they would on a 1:1 chat (the PaymentDesk does that part, with the edge's link as
 * the chat). What the rest of the group learns is a `group-pay` note, sent by each side about its own part over
 * every edge: who pays whom, how much, over what, and how it stands. A note is believed only from the member it
@@ -25335,7 +25455,7 @@ var GroupEdits = class {
 	host;
 	now;
 	buffer;
-	/** Members' status card updates, applied at most once a second per message (WISP 4xx · Status Cards). */
+	/** Members' status card updates, applied at most once a second per message (WISP 405 · Status Cards). */
 	cards;
 	sendPace = /* @__PURE__ */ new Map();
 	receivePace = /* @__PURE__ */ new Map();
@@ -25351,7 +25471,7 @@ var GroupEdits = class {
 	/**
 	* Edits a text of mine in a group: the new text here at once, and to the group as soon as the pace allows. Mentions
 	* the message had stay where their words still are; `added` are those picked while editing. `card`: the status card
-	* of the new version, already checked (WISP 4xx · Status Cards); a card message then takes `STATUS_CARD_LIMITS.edits`.
+	* of the new version, already checked (WISP 405 · Status Cards); a card message then takes `STATUS_CARD_LIMITS.edits`.
 	*/
 	async edit(groupId, messageId, raw, added = [], card) {
 		const refuse = (error) => ({
@@ -25538,7 +25658,7 @@ var GroupEdits = class {
 //#endregion
 //#region ../browser/src/shared/payLinks.ts
 /**
-* The desk's links to members of a community group (WISP 9xx · Group Community § Payments): payments with a member
+* The desk's links to members of a community group (WISP 903 · Group Community § Payments): payments with a member
 * go through the group, sealed to them, over `cpay:<group>:<member>`; a request to everyone over `cpay:<group>`.
 */
 var pairLinkId = (groupId, member) => `cpay:${groupId}:${member}`;
@@ -25554,7 +25674,7 @@ function parsePayLink(linkId) {
 //#endregion
 //#region ../browser/src/engine/communityPay.ts
 /**
-* Payments in community groups (WISP 9xx · Group Community § Payments). Members have no edge to each other: what
+* Payments in community groups (WISP 903 · Group Community § Payments). Members have no edge to each other: what
 * two members say about a payment (`pay-req`, `pay-ask`, `pay`, `pay-res`) is sealed to the other one inside a frame
 * the whole group carries (`CommunitySession.sendPair`), so hubs relay it and keep it for a member who was away
 * without being able to read it. A request to the whole group, and its "paid", go to everyone as an application
@@ -26003,7 +26123,7 @@ var HOLD_FETCH_BYTES_PER_S = 65536;
 var holdFetchTimeoutMs = (max) => HOLD_FETCH_MS + Math.ceil(max / HOLD_FETCH_BYTES_PER_S) * 1e3;
 var hex$2 = (bytes) => Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
 /**
-* Store-and-forward for away contacts (WISP 4xx, `hold/1`), on both ends of every chat that turned it
+* Store-and-forward for away contacts (WISP 404, `hold/1`), on both ends of every chat that turned it
 * on: what this device sends while the contact is away is sealed and put in this device's own storage,
 * named in a manifest, and pointed at from a small record on the DHT; what the contact held for this
 * device is picked up from its pointer, checked and stored in order, and acknowledged on this device's
@@ -27513,7 +27633,7 @@ var ProfilePeek = class {
 		};
 	}
 	/**
-	* A community group: its beacon, which hubs republish every 30 s with the newest frame they hold (WISP 9xx § Head).
+	* A community group: its beacon, which hubs republish every 30 s with the newest frame they hold (WISP 903 § Head).
 	* New when this profile has not taken that frame. Nothing is opened but the head.
 	*/
 	async community(group, transport) {
@@ -27750,7 +27870,7 @@ var S3Store = class {
 	}
 	/**
 	* A URL that reads one object with no credential until `seconds` from now: what an away contact is
-	* handed to pick up what was held for it (WISP 4xx). The secret key never leaves this device; the
+	* handed to pick up what was held for it (WISP 404). The secret key never leaves this device; the
 	* signature covers the exact object, method and lifetime, so the URL reads that object and nothing else.
 	*/
 	async presign(name, seconds) {
@@ -28613,7 +28733,8 @@ var CashuWallet = class CashuWallet {
 			let swap = (await this.swapsAt(mint)).find((s) => s.kind === "receive" && s.token === token);
 			if (swap?.finished) return {
 				amount: swap.tx?.amount ?? 0,
-				mint
+				mint,
+				fee: swap.tx?.fee ?? 0
 			};
 			if (!swap) {
 				const preview = await (await this.wallet(mint)).prepareSwapToReceive(token);
@@ -28643,7 +28764,8 @@ var CashuWallet = class CashuWallet {
 			this.events.onChange();
 			return {
 				amount: credited,
-				mint
+				mint,
+				fee: Math.max(0, faceValue - credited)
 			};
 		});
 	}
@@ -29279,6 +29401,17 @@ var CashuWallet = class CashuWallet {
 * taken back.
 */
 var UNIT = "sat";
+var satsWord = (n) => `${n} sat${n === 1 ? "" : "s"}`;
+/**
+* A refused send's review, once its ecash came back: why, and exactly what came back. Taking ecash back is a swap at
+* the mint, which can keep a fee: "The sats came back" said nothing of it. Without `back` (Fedimint, or not known),
+* the plain sentence.
+*/
+var refusedLine = (reason, back) => {
+	const why = `Refused: ${reason.replace(/\.+$/, "")}.`;
+	if (!back) return `${why} The sats came back.`;
+	return back.fee > 0 ? `${why} ${satsWord(back.amount)} came back; the mint kept ${back.fee} as its fee.` : `${why} All ${satsWord(back.amount)} came back.`;
+};
 var mintLightning = (wallet, network) => ({
 	createInvoice: (amount, paymentId) => wallet.receiveLightning(amount, paymentId, network),
 	quote: (invoice) => wallet.quoteInvoice(invoice, network),
@@ -29752,7 +29885,7 @@ var PaymentDesk = class {
 		return { paymentId: id };
 	}
 	/**
-	* A request to a whole group (WISP 9xx § Payments): one request, on one rail, sent to every member over their
+	* A request to a whole group (WISP 902 § Payments): one request, on one rail, sent to every member over their
 	* edge; the first payment that settles it wins. One rail only, because each enforces "once" by itself: a
 	* Lightning invoice can be paid once, and ecash is checked here before it is redeemed (a later token is refused
 	* unredeemed, so its payer takes it back). Two rails at once would let an invoice and a token both pay it.
@@ -29914,7 +30047,10 @@ var PaymentDesk = class {
 			endpoint: [ENDPOINT.bolt11, request.invoice]
 		}).catch(() => {});
 	}
-	/** Takes back ecash the peer never redeemed. If they did redeem it, the mint says so and the payment is settled. */
+	/**
+	* Takes back ecash the peer never redeemed. If they did redeem it, the mint says so and the payment is settled.
+	* Resolves to what came back of Cashu ecash (and the mint's fee for it); undefined when nothing did, or not Cashu.
+	*/
 	reclaim(paymentId) {
 		let running = this.reclaims.get(paymentId);
 		if (!running) {
@@ -29945,7 +30081,7 @@ var PaymentDesk = class {
 		}
 		if (!payment?.token || payment.direction !== "out") throw new Error("Nothing to reclaim");
 		try {
-			await this.wallet.receiveToken(payment.token, "reclaimed", payment.memo, { payment: () => ({
+			const { amount, fee } = await this.wallet.receiveToken(payment.token, "reclaimed", payment.memo, { payment: () => ({
 				...this.current(payment),
 				state: "reclaimed",
 				token: void 0
@@ -29955,6 +30091,10 @@ var PaymentDesk = class {
 				state: "reclaimed",
 				token: void 0
 			});
+			return {
+				amount,
+				fee
+			};
 		} catch (error) {
 			const message = error instanceof Error ? error.message : String(error);
 			if (!/spent/i.test(message)) throw error;
@@ -29964,6 +30104,7 @@ var PaymentDesk = class {
 				state: "settled",
 				token: void 0
 			});
+			return;
 		}
 	}
 	/** Asks this side made to pay, until the contact answers with a request (or two minutes pass). */
@@ -30052,7 +30193,7 @@ var PaymentDesk = class {
 			endpoints: [...payment.invoice ? [[ENDPOINT.bolt11, payment.invoice]] : [], ...payment.mints?.length ? [[ENDPOINT.cashu, cashuRequestPayload(payment.mints)]] : []]
 		};
 	}
-	/** `held`: picked up from the contact's storage while it was away (WISP 4xx): only what this device allows counts, and only Cashu or Lightning. */
+	/** `held`: picked up from the contact's storage while it was away (WISP 404): only what this device allows counts, and only Cashu or Lightning. */
 	async onPaymentRequest(linkId, request, held = false) {
 		if (this.find(linkId, request.id)?.linkId === linkId) return;
 		if (held && (findEndpoint(request.endpoints, ENDPOINT.usdt) || findEndpoint(request.endpoints, ENDPOINT.arkade) || findEndpoint(request.endpoints, ENDPOINT.bark) || findEndpoint(request.endpoints, ENDPOINT.bitcoin) || findEndpoint(request.endpoints, ENDPOINT.fedimint) || findEndpoint(request.endpoints, ENDPOINT.spark))) return;
@@ -30379,8 +30520,8 @@ var PaymentDesk = class {
 					...payment,
 					error: result.error ?? "The payment was refused"
 				});
-				await this.reclaim(payment.id).catch(() => {});
-				if (this.current(payment).state === "reclaimed") await this.host.onReviewedPaymentRefused?.(payment.id, result.error ?? "The payment was refused");
+				const back = await this.reclaim(payment.id).catch(() => void 0);
+				if (this.current(payment).state === "reclaimed") await this.host.onReviewedPaymentRefused?.(payment.id, result.error ?? "The payment was refused", back);
 				return;
 			}
 			Promise.resolve(this.host.onReviewedPaymentResult?.(payment.id)).catch(() => {});
@@ -32557,7 +32698,7 @@ var GhostlyNode = class GhostlyNode {
 	editQueues = /* @__PURE__ */ new Map();
 	/** The contacts' edits of messages not here yet. */
 	editBuffer = new EditBuffer();
-	/** Received status card updates, applied at most once a second per message (WISP 4xx · Status Cards). */
+	/** Received status card updates, applied at most once a second per message (WISP 405 · Status Cards). */
 	cardEdits = new CardEditPacer();
 	/** When each message's buttons were last pressed here (`pressButton`). */
 	pressedAt = /* @__PURE__ */ new Map();
@@ -32565,7 +32706,7 @@ var GhostlyNode = class GhostlyNode {
 	wakeLimiter = new WakeLimiter();
 	/** Call wake-ups have their own, shorter limit: a call is rarer than a message and cannot wait five minutes. */
 	callWakeLimiter = new WakeLimiter(WAKE_CALL_INTERVAL_MS);
-	/** Mentions in private groups: one per member per 5 minutes, four per group per minute (WISP 9xx · Group Mesh § Wake-up push). */
+	/** Mentions in private groups: one per member per 5 minutes, four per group per minute (WISP 902 · Group Mesh § Wake-up push). */
 	groupWakeLimiter = new GroupWakeLimiter();
 	/** `group-wake` frames read per edge, a handful a minute. */
 	groupWakeReceived = /* @__PURE__ */ new Map();
@@ -32603,7 +32744,7 @@ var GhostlyNode = class GhostlyNode {
 	paymentTimer = null;
 	/** Every minute, the reviews no Approve can send any more are cancelled (dropStaleReviews). */
 	staleReviewTimer;
-	/** Group links: admins read knocks, joiners knock (WISP 9xx § Entry link). */
+	/** Group links: admins read knocks, joiners knock (WISP 902 § Entry link). */
 	groupEntryTimer = null;
 	walletView = {
 		mints: [],
@@ -32793,14 +32934,15 @@ var GhostlyNode = class GhostlyNode {
 		onReviewedPaymentResult: async (id) => {
 			await this.reconcilePayment({ id });
 		},
-		onReviewedPaymentRefused: async (id, reason) => {
+		onReviewedPaymentRefused: async (id, reason, back) => {
 			const intent = await intentRepository.get(id);
 			if (intent && ["submitted", "unknown"].includes(intent.review.state)) await intentRepository.put({
 				...intent,
 				review: {
 					...intent.review,
 					state: "failed",
-					error: `Refused: ${reason}. The sats came back.`
+					error: refusedLine(reason, back),
+					...back ? { returned: back } : {}
 				}
 			});
 			this.emitState();
@@ -32872,7 +33014,7 @@ var GhostlyNode = class GhostlyNode {
 			await this.sparkWallets[network].adapter?.sync();
 		}
 	})));
-	/** Store-and-forward for away contacts (WISP 4xx): items sealed into this device's own storage, picked up from the contact's. */
+	/** Store-and-forward for away contacts (WISP 404): items sealed into this device's own storage, picked up from the contact's. */
 	holdStore = null;
 	hold = new HoldEngine({
 		transport: void 0,
@@ -33094,7 +33236,7 @@ var GhostlyNode = class GhostlyNode {
 		publish: (seed, records) => this.transport.publish(identityFromSeed(seed), records),
 		resolve: async (key) => (await this.transport.resolve(key))?.records ?? null
 	});
-	/** The profile's did:dht: a key of its own, public, never tied to a chat (WISP 3xx-did-dht). */
+	/** The profile's did:dht: a key of its own, public, never tied to a chat (WISP 310-did-dht). */
 	did = new ProfileDid({
 		online: () => this.networkOn,
 		emit: () => this.emitState(),
@@ -33322,7 +33464,7 @@ var GhostlyNode = class GhostlyNode {
 		communityPair: (groupId, sender, payload) => this.communityPay.receivePair(groupId, sender, payload)
 	});
 	/**
-	* Payments in community groups (WISP 9xx · Group Community § Payments): the desk pays and requests over a link
+	* Payments in community groups (WISP 903 · Group Community § Payments): the desk pays and requests over a link
 	* per member that sends through the group, sealed to that member; the group request goes to everyone at once.
 	*/
 	communityPay = new CommunityPay({
@@ -33338,7 +33480,7 @@ var GhostlyNode = class GhostlyNode {
 		emit: () => this.emitState()
 	});
 	/**
-	* Edits in groups (WISP 9xx § Edits): mine said to the group at the pace allowed, the members' on their messages.
+	* Edits in groups (WISP 902 § Edits): mine said to the group at the pace allowed, the members' on their messages.
 	* Never a new message: no sound, no unread.
 	*/
 	groupEdits = new GroupEdits({
@@ -33374,7 +33516,7 @@ var GhostlyNode = class GhostlyNode {
 		return this.outsideEdge(linkId) ? null : this.links.get(linkId)?.link ?? this.communityPay.link(linkId);
 	}
 	/**
-	* Payments in groups (WISP 9xx § Payments): the money goes over the edge to one member through the desk, like a
+	* Payments in groups (WISP 902 § Payments): the money goes over the edge to one member through the desk, like a
 	* chat's; what the group sees of it goes to every member as a `group-pay` note.
 	*/
 	groupPayments = new GroupPayments({
@@ -35033,7 +35175,7 @@ var GhostlyNode = class GhostlyNode {
 			this.transport.networkChanged?.();
 			this.directPath.reset();
 		}
-		for (const live of this.links.values()) live.link?.wake();
+		for (const live of this.links.values()) live.link?.wake({ network: params.network });
 		this.hold.wake();
 		for (const network of WALLET_NETWORKS) {
 			this.lightnings[network].wake();
@@ -35053,7 +35195,7 @@ var GhostlyNode = class GhostlyNode {
 		}));
 	}
 	/**
-	* `card`: a bot's status card (WISP 4xx · Status Cards), checked here by the sender's rule; the text is its fallback,
+	* `card`: a bot's status card (WISP 405 · Status Cards), checked here by the sender's rule; the text is its fallback,
 	* written from the card when none is given. Only the headless runtime and SDKs send one: the app never offers it.
 	*/
 	async sendMessage(params) {
@@ -35068,7 +35210,7 @@ var GhostlyNode = class GhostlyNode {
 			error: "Nothing to send",
 			refused: true
 		};
-		const live = this.links.get(linkId);
+		const live = await this.linkWhenAdded(linkId);
 		const trimmed = text.trim();
 		const bytes = new TextEncoder().encode(trimmed).length;
 		if (live && !live.stored.profile && !(live.link?.isDataLinkOpen && trimmed.length <= LIMITS.maxChatMessageBytes / 4) && bytes > 500) return {
@@ -35293,7 +35435,7 @@ var GhostlyNode = class GhostlyNode {
 	static dhtByChoice(live) {
 		return live?.stored.deliveryMode === "dht" || live?.link?.dhtDelivery?.peerMode === "dht";
 	}
-	/** A status card a caller asks to send, by the sender's rule (WISP 4xx · Status Cards), or why it cannot go. */
+	/** A status card a caller asks to send, by the sender's rule (WISP 405 · Status Cards), or why it cannot go. */
 	static cardToSend(raw) {
 		const checked = checkStatusCard(raw);
 		return "error" in checked ? `Status card: ${checked.error}` : checked.card;
@@ -35418,7 +35560,7 @@ var GhostlyNode = class GhostlyNode {
 		return !!live?.caps?.peer?.capabilities.includes(EDIT_CAPABILITY);
 	}
 	/**
-	* A question of mine with buttons went on the DHT floor or into a hold, which carry its text alone (WISP 4xx · Message
+	* A question of mine with buttons went on the DHT floor or into a hold, which carry its text alone (WISP 406 · Message
 	* Buttons): its buttons are due to go again live. Once: a row that had them restored already stays so.
 	*/
 	async buttonsWentBare(linkId, message) {
@@ -35426,7 +35568,7 @@ var GhostlyNode = class GhostlyNode {
 		await db.patchMessage(linkId, message.id, (current) => current.sender === "me" && current.card?.kind === "buttons" && !current.buttonsRestore ? { buttonsRestore: "due" } : null);
 	}
 	/**
-	* Buttons the contact may not have (WISP 4xx · Message Buttons): a question whose text went on the DHT floor or into a
+	* Buttons the contact may not have (WISP 406 · Message Buttons): a question whose text went on the DHT floor or into a
 	* hold reached the contact as text alone, and a copy under the same id that comes live later is taken as the one
 	* already there. Once the chat is live with an app that shows buttons (`buttons/1`) and takes edits, each such
 	* question goes again as an edit of its buttons alone: the same text, so no version and no edit mark. Once per
@@ -35526,7 +35668,7 @@ var GhostlyNode = class GhostlyNode {
 		}
 		await this.outboxFor(linkId).transmit(messageId, { manual: true });
 	}
-	/** The contact is away, and both sides chose to hold what is sent meanwhile (WISP 4xx). */
+	/** The contact is away, and both sides chose to hold what is sent meanwhile (WISP 404). */
 	holdingFor(live) {
 		return !!live.stored.profile && !!live.link && !live.link.isDataLinkOpen && this.hold.canHold(live.stored.id);
 	}
@@ -35875,7 +36017,7 @@ var GhostlyNode = class GhostlyNode {
 			...forwarded && { forwarded }
 		};
 		const wire = reply && pairedWireReply(reply);
-		const live = this.links.get(linkId);
+		const live = this.linksAdding.has(linkId) ? await this.linkWhenAdded(linkId) : this.links.get(linkId);
 		const fail = (error) => {
 			const transfer = {
 				state: "failed",
@@ -36634,7 +36776,7 @@ var GhostlyNode = class GhostlyNode {
 		return this.groups.messages(groupId);
 	}
 	/**
-	* Presses a button of a message someone else sent to a chat or a group (`group:<id>`), WISP 4xx · Message Buttons:
+	* Presses a button of a message someone else sent to a chat or a group (`group:<id>`), WISP 406 · Message Buttons:
 	* a reply to it whose text is the button's label and whose `r` names the button, so the author learns who pressed
 	* what, and an app without buttons reads an ordinary reply. Refused: my own message, a button it does not have,
 	* buttons the author closed, a question I already answered with a `once` button, a second press within a second.
@@ -36725,7 +36867,7 @@ var GhostlyNode = class GhostlyNode {
 				result.error ??= error;
 			};
 			const groupId = to.startsWith("group:") ? to.slice(6) : void 0;
-			const live = groupId ? void 0 : this.links.get(to);
+			const live = groupId ? void 0 : await this.linkWhenAdded(to);
 			if (groupId ? !this.membership(groupId) : !live || live.stored.group !== void 0) {
 				note(groupId ? "You are not in this group" : "Chat not found");
 				continue;
@@ -37099,7 +37241,7 @@ var GhostlyNode = class GhostlyNode {
 		if (typing === true && this.settings.sendTyping !== false) live.link?.setTyping(true, typingActivity(kind, status));
 		else live.link?.setTyping(false);
 	}
-	/** WISP 9xx · Group Mesh § Typing: the same word in a private group, on its edges; a community says nothing yet. */
+	/** WISP 902 · Group Mesh § Typing: the same word in a private group, on its edges; a community says nothing yet. */
 	setGroupTyping({ groupId, typing, kind, status }) {
 		if (typeof groupId !== "string") return;
 		if (typing === true && this.settings.sendTyping !== false) this.groups.setTyping(groupId, true, typingActivity(kind, status));
@@ -37851,6 +37993,7 @@ var GhostlyNode = class GhostlyNode {
 		const paying = params.target.method === "cashu" ? mintNetwork(params.target.provider) : walletNetworkOf(params.target.network);
 		if (params.network && params.network !== paying) throw new Error(crossNetwork(params.network, paying));
 		if (params.linkId) {
+			await this.linkWhenAdded(params.linkId);
 			const link = this.paymentLink(params.linkId);
 			if (!link) throw new Error("The peer is offline");
 			const payee = this.links.get(params.linkId)?.stored.peerPubKeyZ32 ?? parsePayLink(params.linkId)?.member ?? "";
@@ -37951,8 +38094,8 @@ var GhostlyNode = class GhostlyNode {
 		}).catch(() => []);
 	}
 	/** `network`: the Cashu card of that network sends (its mints). `confirmedReal`: required on Mainnet. */
-	sendPayment(params) {
-		const live = this.links.get(params.linkId);
+	async sendPayment(params) {
+		const live = await this.linkWhenAdded(params.linkId);
 		if (live && this.holdingFor(live)) throw new Error("Ecash is not held for an away contact. Send a request instead, or wait until they are back.");
 		return this.desk.send({
 			...params,
@@ -37961,7 +38104,8 @@ var GhostlyNode = class GhostlyNode {
 	}
 	/** `network`: the card's network; the request is paid only by a wallet of that network. */
 	/** `card`: the Lightning card the request's invoice comes from; absent, the network's default for receiving. */
-	requestPayment(params) {
+	async requestPayment(params) {
+		await this.linkWhenAdded(params.linkId);
 		return this.desk.request({
 			linkId: params.linkId,
 			amount: params.amount,
@@ -37973,7 +38117,7 @@ var GhostlyNode = class GhostlyNode {
 			...params.rail === "cashu" || params.rail === "lightning" ? { rail: params.rail } : {}
 		});
 	}
-	/** A request any member of a group may pay, once (WISP 9xx § Payments). */
+	/** A request any member of a group may pay, once (WISP 902 § Payments). */
 	requestGroupPayment(params) {
 		const group = this.groups.views().find((g) => g.id === params.groupId);
 		if (group?.status !== "active") throw new Error("You are not in this group");
@@ -37984,8 +38128,9 @@ var GhostlyNode = class GhostlyNode {
 		});
 	}
 	/** Paying on a card without a request (Ark, Bark, Spark, USDT, on-chain): the contact's app answers with one, on this card's network. */
-	askToPay(params) {
+	async askToPay(params) {
 		if (params.method !== "arkade" && params.method !== "usdt" && params.method !== "bark" && params.method !== "bitcoin" && params.method !== "fedimint" && params.method !== "spark") throw new Error("Only Ark, Bark, Spark, USDT, on-chain Bitcoin and Fedimint are paid this way");
+		await this.linkWhenAdded(params.linkId);
 		return this.desk.ask({
 			...params,
 			network: this.net(params.network)
@@ -38621,10 +38766,21 @@ var GhostlyNode = class GhostlyNode {
 		}
 	}
 	/**
+	* Whether a device code may be used in this profile now, asked before the person presses Add (WISP 06 § User
+	* experience): `ready`, or why not: `set` (this profile is already on several devices), `in-use` (it holds something,
+	* `inUse`), `loading` (what it holds is not known yet). The page says up front that a new profile is made for the
+	* code; `deviceEnrollJoin` still decides, and refuses as before.
+	*/
+	async deviceEnrollReady() {
+		if (this.starting) await this.starting;
+		if (await readDeviceRecord(databaseName()).catch(() => null)) return "set";
+		return this.inUse() ?? "ready";
+	}
+	/**
 	* Whether this profile holds anything a person would lose if it became a standby here: a chat, a group, an identity,
-	* money or a payment, or a wallet with keys of its own. The wallets a new profile gets by itself (Mainnet Cashu and
-	* USDT, `walletSetup.ts`) count only once they hold, wait for or have moved money: otherwise no new install could
-	* join. `loading`: what they hold is not known yet (the engine is starting, or the USDT balance was not read).
+	* money or a payment, or a wallet with keys of its own. The wallets a new profile gets by itself (Mainnet Cashu, with
+	* the Cashu mints' Lightning card, and USDT, `walletSetup.ts`) count only once they hold, wait for or have moved
+	* money: otherwise no new install could join. `loading`: what they hold is not known yet (the engine is starting, or the USDT balance was not read).
 	*/
 	inUse() {
 		if (this.links.size > 0 || this.groups.views().length > 0 || this.identities.views().length > 0) return "in-use";
@@ -38633,7 +38789,7 @@ var GhostlyNode = class GhostlyNode {
 		const networks = [this.walletView, ...Object.values(this.walletView.networks ?? {})];
 		const holds = (network) => !!network && (money(network.balance) || (network.history?.length ?? 0) > 0 || (network.awaiting?.length ?? 0) > 0 || money(network.setAside) || money(network.openSwaps) || money(network.swapsAmount) || money(network.unconfirmed) || !!network.usdt?.configured && (money(network.usdt.balance) || money(network.usdt.gasBalance)));
 		if (networks.some(holds)) return "in-use";
-		const firstRun = (wallet) => wallet.network === "mainnet" && (wallet.type === "cashu" || wallet.type === "usdt");
+		const firstRun = (wallet) => wallet.network === "mainnet" && (wallet.type === "cashu" || wallet.type === "usdt" || wallet.type === "lightning" && wallet.card === "cashu");
 		if ((this.walletView.wallets ?? []).some((wallet) => !firstRun(wallet))) return "in-use";
 		return networks.some((network) => !!network?.usdt?.configured && (network.usdt.locked || !network.usdt.read)) ? "loading" : null;
 	}
@@ -38647,6 +38803,11 @@ var GhostlyNode = class GhostlyNode {
 	}
 	/** The giver of this active device: answers a pull, makes a push, runs pass 1 while this engine goes on. */
 	handoffGiver = null;
+	/** A call is on in one of the pages (`setCallOn`, told by the host for all of them): a handoff waits for it to end. */
+	callOn = false;
+	setCallOn({ on }) {
+		this.callOn = on === true;
+	}
 	async startHandoff() {
 		const host = handoffProfileHost(), links = this.deviceLinks;
 		if (!host || !links || this.handoffGiver || this.options.singleDevice) return;
@@ -38733,6 +38894,7 @@ var GhostlyNode = class GhostlyNode {
 	* or anything this build cannot judge. Null: the wallets move or stay home by their plan.
 	*/
 	async handoffBusy(taker) {
+		if (this.callOn) return { why: "call" };
 		if (this.limitedMode || !this.walletsStarted) return { why: "loading" };
 		await this.refreshWallet().catch(() => {});
 		const { refusal } = await this.handoffPlan(taker);
@@ -38890,6 +39052,15 @@ var GhostlyNode = class GhostlyNode {
 	async existingLink(id) {
 		return await this.linksAdding.get(id) ?? id;
 	}
+	/**
+	* The chat by its id, once it has started if it is still being added: the app may send to it by that id (a message,
+	* a file, a forward, a payment) right after a reload, and that send waits for the chat rather than say "You are
+	* offline" for that moment. A chat not being added is returned at once, offline or not; one whose adding failed is gone.
+	*/
+	async linkWhenAdded(linkId) {
+		await this.linksAdding.get(linkId)?.catch(() => {});
+		return this.links.get(linkId);
+	}
 	addLink(params, inviteCode) {
 		const id = identityFromSeedB64(params.seedB64).pubKeyZ32.slice(0, 16);
 		const adding = this.addLinkNow(params, inviteCode).finally(() => {
@@ -39256,7 +39427,7 @@ var GhostlyNode = class GhostlyNode {
 		if (native) this.ensureNativeEndpoints(linkId);
 	}
 	/**
-	* Whether a group's link (an edge, an entry session) runs native endpoints (WISP 9xx § Transports): where this app has
+	* Whether a group's link (an edge, an entry session) runs native endpoints (WISP 902 § Transports): where this app has
 	* no WebRTC (the Linux Desktop), and where the member's has none, as its packet said. Between two apps that have
 	* WebRTC it runs none, as before: a group of eight would otherwise hold seven listeners per transport for nothing.
 	*/
@@ -39269,7 +39440,7 @@ var GhostlyNode = class GhostlyNode {
 	* (`DirectEvidence`): a network that lets no direct connection through (a VPN, a firewall, on either side). WebRTC is
 	* all an edge between two apps that have it runs, and there is no TURN server unless someone set one, so the edge
 	* never went live, and the member stayed unreachable for as long as that network lasted. The edge starts again as on an
-	* app with no WebRTC (WISP 9xx § Transports): it runs its native endpoints and says so in its packet (`_tr`, with no
+	* app with no WebRTC (WISP 902 § Transports): it runs its native endpoints and says so in its packet (`_tr`, with no
 	* `webrtc/1`), the member's app starts its own for it as it does for a Linux Desktop, and the two meet over Iroh
 	* through its relay. For this run of the app only.
 	*/
@@ -39318,6 +39489,8 @@ var GhostlyNode = class GhostlyNode {
 			statusCardSupport: true,
 			buttonsSupport: true,
 			wakeSupport: true,
+			upgradeSupport: true,
+			peerUpgrades: () => !!live.caps?.peer?.capabilities.includes(UPGRADE_CAPABILITY),
 			servicesSupport: this.options.servicesSupport ?? (this.options.platform ?? "web") !== "web",
 			dht: stored.profile ? {
 				state: stored.dhtDeliveryState,
@@ -39716,6 +39889,7 @@ var GhostlyNode = class GhostlyNode {
 				DHT_FILE_CAPABILITY,
 				...live?.stored.hold?.enabled ? [HOLD_CAPABILITY] : [],
 				"files/2",
+				UPGRADE_CAPABILITY,
 				...GhostlyNode.testNoEdit() ? [] : [EDIT_CAPABILITY],
 				...cashu || lightning ? ["payments/1"] : [],
 				...cashu ? ["payments-cashu/1"] : [],
@@ -39772,7 +39946,7 @@ var GhostlyNode = class GhostlyNode {
 	get nativeFactories() {
 		const relay = this.relaysHyperdht ? this.hyperdhtRelay : "";
 		return {
-			...relay ? { "hyperdht/1": async (seedB64) => (await import("./hyperdhtRelay-CVLCuqVr.js")).createRelayedHyperEndpoint(seedB64, relay) } : {},
+			...relay ? { "hyperdht/1": async (seedB64) => (await import("./hyperdhtRelay-BoxPHp7v.js")).createRelayedHyperEndpoint(seedB64, relay) } : {},
 			...this.options.nativeTransports,
 			...this.ownIrohRelays ? { "iroh/1": (seedB64) => this.options.nativeTransports["iroh/1"](seedB64, this.settings.irohRelays?.length ? { relays: [...this.settings.irohRelays] } : {}) } : {},
 			...this.options.irohWeb ? { "iroh/1": (seedB64) => createIrohWebEndpoint(seedB64, { relays: this.irohRelays }) } : {}
@@ -40324,6 +40498,11 @@ var EngineServer = class {
 	* it too: the extension's peer runs with no tab open, and a tab opened during the ring used to show no call.
 	*/
 	offers = /* @__PURE__ */ new Map();
+	/**
+	* The clients a call is on in (`setCallOn`): the engine hears whether any is, so a handoff waits for every page's
+	* call (WISP 06 § States and events). A client that goes away (a tab closed mid-call) is taken out with it.
+	*/
+	onCall = /* @__PURE__ */ new Set();
 	constructor(options = {}) {
 		this.node = new GhostlyNode({
 			onAttention: (event) => this.broadcast({
@@ -40393,6 +40572,7 @@ var EngineServer = class {
 		this.clients.delete(client);
 		this.histories.delete(client);
 		if (this.clients.size === 0) this.node.setActiveLink({ linkId: null });
+		if (this.onCall.delete(client)) this.node.setCallOn({ on: this.onCall.size > 0 });
 	}
 	async handle(client, request) {
 		if (request?.kind !== "request") return;
@@ -40401,12 +40581,18 @@ var EngineServer = class {
 			id: request.id
 		};
 		if (request.method === "setCallSignal") this.offers.delete(request.params?.linkId ?? "");
+		let params = request.params;
+		if (request.method === "setCallOn") {
+			if (request.params?.on === true) this.onCall.add(client);
+			else this.onCall.delete(client);
+			params = { on: this.onCall.size > 0 };
+		}
 		try {
 			await this.ready;
 			const method = this.node[request.method];
 			if (typeof method !== "function") throw new Error(`Unknown method: ${request.method}`);
 			if (this.node.limited && !LIMITED_MODE_METHODS.has(String(request.method))) throw new Error(LIMITED_MODE_ERROR);
-			response.result = await method.call(this.node, request.params);
+			response.result = await method.call(this.node, params);
 		} catch (error) {
 			response.error = error instanceof Error ? error.message : String(error);
 		}
@@ -40493,4 +40679,4 @@ function signalKind(signal) {
 //#endregion
 export { EngineServer, hyperdhtRelayProblem as n, server_exports as t };
 
-//# sourceMappingURL=server-vGoe9MET.js.map
+//# sourceMappingURL=server-CXFTDnFI.js.map