@ghostlytools/cli 1.1.3 → 1.1.4

package/dist/assets/{server-9AM0ta6q.js → server-CXFTDnFI.js}

@@ -1,5 +1,5 @@
 import { a as fileBytesOf, c as removeFileBytes, d as __exportAll, i as fileBytes, n as blobDigest } from "./fileBytes-DxiJHmTk.js";
-import { $a as filePartName, $i as BUTTON_ID, $n as freshHubs, $o as createChatInvite, $r as IdentityExchange, $s as randomBytes, $t as isPubkyKey, A as GROUP_EDIT_TEXT_BYTES, Aa as RTC_CONFIG, An as findEndpoint, Ao as readSetUpdate, Ar as newWakeToken, As as RelayTransport, At as encodeDidDhtPacket, Ba as LEGACY_SERVICES, Bi as GROUP_REACTION_FRAME, Bo as enrollCancelReason, Br as HOLD_LIMITS, Bs as createRelayPayload, Bt as USDT_PUBLIC_RPC, C as groupWakes, Ca as formatLocalTarget, Co as readHandoffHello, Cr as nextPinNumber, Cs as nextTurnPosition, D as GroupSession, Da as decodeControl, Dn as ENDPOINT, Do as sealHandoffPiece, Dr as WAKE_CALL_INTERVAL_MS, Ds as turnKeys, Dt as didDhtDocument, E as GROUP_READ_NOTE, Ea as LIMITS, En as decodeBolt11, Eo as readHandoffVerified, Er as readPin, Es as signTurnRelease, Fi as dhtEditId, Fn as INVITE_TAKEN, Fr as vapidKeysMatch, Fs as budgetRetryMs, Ft as ONCHAIN_PROVIDER, Ga as HANDOFF_HAVE, Gi as reactionEmoji, Gn as MESH_HUBS, Go as enrollProofFrame, Gr as CapsExchange, Gs as identityFromSeed, Gt as validatePaymentTarget, Ha as HANDOFF_ACK, Hi as ReactionWindow, Ho as enrollDoneFrame, Hr as HoldRefusedError, Ht as assertTokenUnits, Ia as parseCallSignal, Ii as parseLinkPreview, In as LIVENESS_PING_MS, Is as isDiscoveryBudgetError, It as PaymentPreflightError, Ja as HANDOFF_PAKE, Ji as validReactionNumber, Jn as pickMeshHubs, Jo as verifyEnrollProof, Jr as dialDescriptors, Js as verify, Jt as SPARK_PROVIDER, Ka as HANDOFF_HELLO, Ki as reactionIsNewer, Kn as mayBeHub, Ko as readEnrollGrant, Kr as DHT_TEXT_CAPABILITY, Ks as identityFromSeedB64, Kt as walletNetworkOf, Li as forwardedAgain, Ln as pairedMessageFrame, Lr as EDIT_CAPABILITY, Ls as withRequestOptions, Lt as SEPOLIA_TEST_USDT, M as parseCommunityEdit, Mi as EDIT_BUFFER_MS, Mn as parseCashuRequestPayload, Mo as setUpdateFrame, Mr as relayRequest, Ms as normalizeRelayUrl, Mt as signDidDhtPacket, N as mentionsMember, Ni as EDIT_RATE_WINDOW_MS, Nn as parseFedimintRequestPayload, No as signTombstone, Nr as wakeRequest, Nt as ETHEREUM_USDT, Oa as encodeControl, Oi as fileMessageText, On as cashuRequestPayload, Or as WakeLimiter, Os as turnName, Ot as didDhtFromPublicKey, P as groupName, Pi as RateWindow, Pn as GhostLink, Po as verifySetUpdate, Pr as checkPushEndpoint, Ps as traceLink, Pt as EVM_TEST_CHAINS, Qa as HANDOFF_VERIFIED, Qi as replySnippet, Qn as doorHubs, Qo as OwnInviteError, Qs as fromBase64Url, Ra as emptyLinkRecords, Ri as readForwarded, Rn as CarriedTransport, Rr as HOLD_CAPABILITY, Rs as PacketTooLargeError, Rt as SEPOLIA_TEST_USDT_FAUCET, S as groupWakeFrame, Sa as GhostlyHttpError, Si as safeBlobType, So as readHandoffHave, Sr as mayPin, Ss as firstDeviceSetSecret, Ta as webLocalFetch, Tn as engineText, To as readHandoffTurnFrame, Tr as pinNumberHolds, Ts as signTurnPacket, Ua as HANDOFF_CANCEL, Ui as nextReactionNumber, Un as groupSignalFrame, Uo as enrollGrantFrame, Ur as newMailbox, Ut as assertWholeSats, Va as serviceIdFromName, Vi as REACTION_LIMITS, Vo as enrollDigits, Vr as HoldKeys, Vt as WALLET_NETWORKS, Wa as HANDOFF_DONE, Wi as queueReaction, Wn as readGroupSignal, Wo as enrollHelloFrame, Wr as readManifest, Ws as createIdentity, Wt as formatPaymentAmount, Xa as HANDOFF_REQUEST, Xi as pairedReplyAuthor, Xn as beaconKeys, Xo as deviceInviteJoinerParams, Xs as sanitizeAvatar, Xt as sparkInvoiceDetails, Ya as HANDOFF_PIECE_BYTES, Yi as wireReaction, Yn as COMMUNITY_TOPOLOGY, Yo as createDeviceInvite, Yt as sparkAddressKind, Za as HANDOFF_TIMINGS, Zi as readReply, Zn as beaconRecords, Zo as readDeviceInvite, Zr as IDENTITY_REVOCATION_LABEL, Zs as bytesEqual, Zt as isBitcoinAddress, _ as knockRecords, _a as edgeParams, _i as peekDhtMailbox, _o as handoffVersions, _r as TypingSender, _s as TURN_SETTLE_MS, a as sealGroupTyping, aa as sameButtonText, ai as receivedIdentityStatus, ao as handoffContext, ar as pickHubs, as as ENROLL_CAPABILITY, ba as RELAY_POLL_INTERVALS, bi as parseImageMeta, bo as readHandoffCancel, bs as TURN_LAST_SEQUENCE, c as GROUP_READ_NOTE_COMMUNITY, ca as claimedTime, ci as PeerProofs, co as handoffDigest, cr as readBeaconHead, cs as deviceEchoNonce, d as encodeCommunityLink, da as shownTime, di as TRANSPORTS, do as handoffManifestFrames, dr as ChatFiles, ds as devicePingFrame, ec as toBase64Url, eo as handoffAttemptAllowed, er as lobbyKeys, es as decodeInviteCode, et as isAtprotoDid, fa as GROUP_MEMBER_CAP, fi as automaticTransport, fo as handoffOfferFrame, fr as FILE_LIMITS, fs as newDeviceSetSecret, g as knockIdentity, ga as verifyCommitSignature, gi as DHT_MESSAGE_TTL, go as handoffStreamKey, gs as TURN_RAISE_READ_TIMEOUT_MS, h as entryParams, ha as rosterHas, ho as handoffRetryAfter, i as openGroupTyping, ia as checkStatusCard, ii as newIdentityBinding, io as handoffCancelFrame, ir as newerHead, is as DEVICES_CAPABILITY, j as carryMentions, ji as parseVideoMeta, jn as isFederationId, jo as setAckFrame, jr as parseWakeFrame, js as currentRelays, ki as parseVoiceMeta, kn as fedimintRequestPayload, kr as deviceWakeRequest, ks as DEFAULT_RELAYS, kt as encodeDidDhtDeactivated, l as communityHasFrame, la as heardTime, li as emptyProofLedger, lo as handoffEphemeral, lr as readLobby, ls as deviceKeyZ32, m as encodeGroupEntryLink, ma as MEMBER_KEY, mi as irohRelayUrl, mo as handoffReleaseFrame, mr as transferStalled, ms as webCryptoSigner, n as GroupTypingBoard, na as STATUS_CARD_LIMITS, nc as utf8Decode, ni as identityRevocationValue, no as handoffAttemptSucceeded, nr as mergeBeacon, o as COMMUNITY_LIMITS, oa as statusCardText, oi as revokesIdentity, oo as handoffContextProof, or as rankHubs, os as HANDOFF_CAPABILITY, p as decodeGroupEntryLink, pi as irohDescriptor, po as handoffPakeFrame, pr as transferEnded, ps as seedSigner, qa as HANDOFF_OFFER, qi as readReaction, qn as meshHubs, qo as readEnrollHello, qr as capsDescriptors, qs as publicKeyFromZ32, qt as SPARK_NETWORKS, r as groupTypingEpoch, rc as utf8Encode, ri as identityStatement, ro as handoffBusyFrame, rr as mergeLobby, rs as inviteOwnership, s as CommunitySession, sa as arrivalKey, si as lastSharedWithMe, so as handoffDataFrame, sr as readBeacon, ss as deviceEchoFrame, tc as toZ32, ti as emptyIdentityLedger, to as handoffAttemptFailed, tr as lobbyRecords, ts as encodeInviteCode, tt as normalizeAtprotoHandle, u as decodeCommunityLink, ua as receivedTimestamp, ui as validExternalKey, uo as handoffHelloFrame, ur as shouldBeHub, us as deviceLinkPairing, v as mergeKnocks, va as DirectPathWatch, vi as DHT_FILE_CAPABILITY, vo as newHandoffId, vs as classifyTurnRead, w as parseGroupWakeFrame, wa as parseLocalTarget, wn as engineError, wo as readHandoffPake, wr as pinIsNewer, ws as readTurnPacket, x as GroupWakeLimiter, xa as presenceSeenAt, xo as readHandoffDone, xr as PIN_LIMITS, xs as TURN_MAX, y as readKnocks, yi as dhtFileId, yo as readHandoffAck, yr as typingActivity, ys as turnPutSummary, za as HTTP_SERVICE_PROTO, zi as COMMUNITY_REACTION_FRAME, zo as enrollCancelFrame, zr as HOLD_DATED_BACK_MS, zt as TEST_USDT_FAUCET_AMOUNT } from "./src-C_E99PGx.js";
+import { $a as HANDOFF_VERIFIED, $i as replySnippet, $n as freshHubs, $o as OwnInviteError, $s as fromBase64Url, $t as isPubkyKey, A as GROUP_EDIT_TEXT_BYTES, Ai as parseVoiceMeta, An as findEndpoint, Ar as newWakeToken, As as DEFAULT_RELAYS, At as encodeDidDhtPacket, Ba as HTTP_SERVICE_PROTO, Bi as COMMUNITY_REACTION_FRAME, Bo as enrollCancelFrame, Br as HOLD_DATED_BACK_MS, Bt as USDT_PUBLIC_RPC, C as groupWakes, Ca as GhostlyHttpError, Ci as safeBlobType, Co as readHandoffHave, Cr as nextPinNumber, Cs as firstDeviceSetSecret, D as GroupSession, Da as LIMITS, Dn as ENDPOINT, Do as readHandoffVerified, Dr as WAKE_CALL_INTERVAL_MS, Ds as signTurnRelease, Dt as didDhtDocument, E as GROUP_READ_NOTE, Ea as webLocalFetch, En as decodeBolt11, Eo as readHandoffTurnFrame, Er as readPin, Es as signTurnPacket, Fi as RateWindow, Fn as INVITE_TAKEN, Fo as verifySetUpdate, Fr as vapidKeysMatch, Fs as traceLink, Ft as ONCHAIN_PROVIDER, Ga as HANDOFF_DONE, Gi as queueReaction, Gn as MESH_HUBS, Go as enrollHelloFrame, Gr as readManifest, Gs as createIdentity, Gt as validatePaymentTarget, Ha as serviceIdFromName, Hi as REACTION_LIMITS, Ho as enrollDigits, Hr as HoldKeys, Ht as assertTokenUnits, Ii as dhtEditId, In as LIVENESS_PING_MS, Is as budgetRetryMs, It as PaymentPreflightError, Ja as HANDOFF_OFFER, Ji as readReaction, Jn as pickMeshHubs, Jo as readEnrollHello, Jr as capsDescriptors, Js as publicKeyFromZ32, Jt as SPARK_PROVIDER, Ka as HANDOFF_HAVE, Ki as reactionEmoji, Kn as mayBeHub, Ko as enrollProofFrame, Kr as CapsExchange, Ks as identityFromSeed, Kt as walletNetworkOf, La as parseCallSignal, Li as parseLinkPreview, Ln as pairedMessageFrame, Lr as EDIT_CAPABILITY, Ls as isDiscoveryBudgetError, Lt as SEPOLIA_TEST_USDT, M as parseCommunityEdit, Mi as parseVideoMeta, Mn as parseCashuRequestPayload, Mo as setAckFrame, Mr as relayRequest, Ms as currentRelays, Mt as signDidDhtPacket, N as mentionsMember, Ni as EDIT_BUFFER_MS, Nn as parseFedimintRequestPayload, No as setUpdateFrame, Nr as wakeRequest, Ns as normalizeRelayUrl, Nt as ETHEREUM_USDT, Oa as decodeControl, On as cashuRequestPayload, Oo as sealHandoffPiece, Or as WakeLimiter, Os as turnKeys, Ot as didDhtFromPublicKey, P as groupName, Pi as EDIT_RATE_WINDOW_MS, Pn as GhostLink, Po as signTombstone, Pr as checkPushEndpoint, Pt as EVM_TEST_CHAINS, Qa as HANDOFF_TIMINGS, Qi as readReply, Qn as doorHubs, Qo as readDeviceInvite, Qr as IDENTITY_REVOCATION_LABEL, Qs as bytesEqual, Ri as forwardedAgain, Rn as CarriedTransport, Rr as UPGRADE_CAPABILITY, Rs as withRequestOptions, Rt as SEPOLIA_TEST_USDT_FAUCET, S as groupWakeFrame, Sa as presenceSeenAt, So as readHandoffDone, Sr as mayPin, Ss as TURN_MAX, Ta as parseLocalTarget, Tn as engineText, To as readHandoffPake, Tr as pinNumberHolds, Ts as readTurnPacket, Ua as HANDOFF_ACK, Ui as ReactionWindow, Un as groupSignalFrame, Uo as enrollDoneFrame, Ur as HoldRefusedError, Ut as assertWholeSats, Va as LEGACY_SERVICES, Vi as GROUP_REACTION_FRAME, Vo as enrollCancelReason, Vr as HOLD_LIMITS, Vs as createRelayPayload, Vt as WALLET_NETWORKS, Wa as HANDOFF_CANCEL, Wi as nextReactionNumber, Wn as readGroupSignal, Wo as enrollGrantFrame, Wr as newMailbox, Wt as formatPaymentAmount, Xa as HANDOFF_PIECE_BYTES, Xi as wireReaction, Xn as beaconKeys, Xo as createDeviceInvite, Xt as sparkInvoiceDetails, Ya as HANDOFF_PAKE, Yi as validReactionNumber, Yn as COMMUNITY_TOPOLOGY, Yo as verifyEnrollProof, Yr as dialDescriptors, Ys as verify, Yt as sparkAddressKind, Za as HANDOFF_REQUEST, Zi as pairedReplyAuthor, Zn as beaconRecords, Zo as deviceInviteJoinerParams, Zs as sanitizeAvatar, Zt as isBitcoinAddress, _ as knockRecords, _a as verifyCommitSignature, _i as DHT_MESSAGE_TTL, _o as handoffStreamKey, _r as TypingSender, _s as TURN_RAISE_READ_TIMEOUT_MS, a as sealGroupTyping, aa as checkStatusCard, ai as newIdentityBinding, ao as handoffCancelFrame, ar as pickHubs, as as DEVICES_CAPABILITY, bi as dhtFileId, bo as readHandoffAck, bs as turnPutSummary, c as GROUP_READ_NOTE_COMMUNITY, ca as arrivalKey, ci as lastSharedWithMe, co as handoffDataFrame, cr as readBeaconHead, cs as deviceEchoFrame, d as encodeCommunityLink, da as receivedTimestamp, di as validExternalKey, do as handoffHelloFrame, dr as ChatFiles, ds as deviceLinkPairing, ea as BUTTON_ID, ec as randomBytes, ei as IdentityExchange, eo as filePartName, er as lobbyKeys, es as createChatInvite, et as isAtprotoDid, fa as shownTime, fi as TRANSPORTS, fo as handoffManifestFrames, fr as FILE_LIMITS, fs as devicePingFrame, g as knockIdentity, ga as rosterHas, go as handoffRetryAfter, h as entryParams, ha as MEMBER_KEY, hi as irohRelayUrl, ho as handoffReleaseFrame, hs as webCryptoSigner, i as openGroupTyping, ic as utf8Encode, ii as identityStatement, io as handoffBusyFrame, ir as newerHead, is as inviteOwnership, j as carryMentions, ja as RTC_CONFIG, jn as isFederationId, jo as readSetUpdate, jr as parseWakeFrame, js as RelayTransport, ka as encodeControl, ki as fileMessageText, kn as fedimintRequestPayload, kr as deviceWakeRequest, ks as turnName, kt as encodeDidDhtDeactivated, l as communityHasFrame, la as claimedTime, li as PeerProofs, lo as handoffDigest, lr as readLobby, ls as deviceEchoNonce, m as encodeGroupEntryLink, mi as irohDescriptor, mo as handoffPakeFrame, mr as transferStalled, ms as seedSigner, n as GroupTypingBoard, nc as toZ32, ni as emptyIdentityLedger, no as handoffAttemptFailed, nr as mergeBeacon, ns as encodeInviteCode, o as COMMUNITY_LIMITS, oa as sameButtonText, oi as receivedIdentityStatus, oo as handoffContext, or as rankHubs, os as ENROLL_CAPABILITY, p as decodeGroupEntryLink, pa as GROUP_MEMBER_CAP, pi as automaticTransport, po as handoffOfferFrame, pr as transferEnded, ps as newDeviceSetSecret, qa as HANDOFF_HELLO, qi as reactionIsNewer, qn as meshHubs, qo as readEnrollGrant, qr as DHT_TEXT_CAPABILITY, qs as identityFromSeedB64, qt as SPARK_NETWORKS, r as groupTypingEpoch, ra as STATUS_CARD_LIMITS, rc as utf8Decode, ri as identityRevocationValue, ro as handoffAttemptSucceeded, rr as mergeLobby, s as CommunitySession, sa as statusCardText, si as revokesIdentity, so as handoffContextProof, sr as readBeacon, ss as HANDOFF_CAPABILITY, tc as toBase64Url, to as handoffAttemptAllowed, tr as lobbyRecords, ts as decodeInviteCode, tt as normalizeAtprotoHandle, u as decodeCommunityLink, ua as heardTime, ui as emptyProofLedger, uo as handoffEphemeral, ur as shouldBeHub, us as deviceKeyZ32, v as mergeKnocks, va as edgeParams, vi as peekDhtMailbox, vo as handoffVersions, vs as TURN_SETTLE_MS, w as parseGroupWakeFrame, wa as formatLocalTarget, wn as engineError, wo as readHandoffHello, wr as pinIsNewer, ws as nextTurnPosition, x as GroupWakeLimiter, xa as RELAY_POLL_INTERVALS, xi as parseImageMeta, xo as readHandoffCancel, xr as PIN_LIMITS, xs as TURN_LAST_SEQUENCE, y as readKnocks, ya as DirectPathWatch, yi as DHT_FILE_CAPABILITY, yo as newHandoffId, yr as typingActivity, ys as classifyTurnRead, za as emptyLinkRecords, zi as readForwarded, zr as HOLD_CAPABILITY, zs as PacketTooLargeError, zt as TEST_USDT_FAUCET_AMOUNT } from "./src-K3NijMq-.js";
 import { a as deleteDatabase, c as profileOpenFailure, d as wrap, i as databaseName, l as store, n as STORES$1, o as fileStore, r as clearProfileStores, s as openDb, t as CARD_INDEX, u as transact } from "./idb-Co2lObpU.js";
 import { $ as onAdaptersChanged, A as intentRepository, C as ProviderSources, Ct as FileAppender, D as requireTurn, Dt as streamStored, E as refuseAway, Et as storedSize, F as ModeGate, G as fakesLightning, H as BITCOIN_INVOICE_ON_TESTNET, I as WrongNetworkError, J as mintNetwork, K as isTestMint, L as networkLabel, M as sealSeed, N as unsealSeed, O as setAwayWallets, P as ModeChanged, Q as identityProviders, R as CASHU_MINT_SOURCE, S as lightningPaying, St as paymentWireId, T as awayFrom, Tt as removeStored, U as DEFAULT_MINTS, V as WALLET_TYPES, W as TEST_MINT, X as BACKUP_MEDIA_TYPE, Y as paysItsOwnInvoices, Z as MAX_BACKUP_BYTES, _ as normalizePhrase, _t as pairedWireReply, a as createFailure, at as SourceConfigError, b as breezDatabasesFor, bt as replyTo, c as paymentNetwork, ct as networkMode, d as networkReason, dt as resolveAtprotoDid, et as registeredLightningProviders, f as rpcHost, ft as setOwnDidSource, g as isRecoveryPhrase, gt as groupReply, h as cardsKey, ht as chosenResolver, i as assertConfirmedReal, it as PROVIDER_PLATFORMS, j as newDeviceKey, k as setSingleWriterGate, l as paymentNetworksOf, lt as redact, m as LightningCards, mt as verifyIdentity, n as loadFedimintSdk, nt as reserveAdapterIds, o as createTiming, ot as SourceUnreachableError, p as CASHU_CARD, pt as boundedIdentityFetch, q as isWorthlessMint, r as WALLET_NAMES, rt as NothingSpentError, s as crossNetwork, st as isNothingSpentError, t as fedimintDatabase, tt as registeredOnchainProviders, u as walletInstances, ut as assertPublicServer, v as breezDatabase, vt as receivedPairedReply, w as sourceKey, wt as readStored$1, x as dropBreezDatabase, xt as paymentAlias, y as breezDatabaseInUse, yt as replyRef, z as cashuMint } from "../ghostly.mjs";
 import { hkdf } from "@noble/hashes/hkdf.js";
@@ -190,6 +190,27 @@ var erc20 = new Interface([
 ]);
 var same$1 = (a, b) => a.toLowerCase() === b.toLowerCase();
 var CONFIRMATIONS = 2;
+/** The JSON-RPC methods that only read: asked again once when they fail (see `UsdtAdapter.rpc`). */
+var RETRIED_READS = /* @__PURE__ */ new Set([
+	"eth_chainId",
+	"eth_getCode",
+	"eth_call",
+	"eth_getBalance",
+	"eth_blockNumber",
+	"eth_getLogs",
+	"eth_getTransactionCount",
+	"eth_estimateGas",
+	"eth_getBlockByNumber",
+	"eth_maxPriorityFeePerGas",
+	"eth_gasPrice",
+	"eth_feeHistory",
+	"eth_getTransactionByHash",
+	"eth_getTransactionReceipt"
+]);
+var RETRY_AFTER_MS = 1e3;
+/** Failures that would fail the same way again at once: not retried. */
+var FINAL = /* @__PURE__ */ new WeakSet();
+var timedOut = (error) => error instanceof Error && (error.name === "AbortError" || error.name === "TimeoutError");
 /**
 * The `provider` a request carries to the contact. Which RPC pays is the payer's own choice, so it names none of
 * this wallet's: a typed RPC URL may hold an API key (`/v3/<key>`), and every contact would read it. Older apps
@@ -259,7 +280,22 @@ var UsdtAdapter = class UsdtAdapter {
 		adapter.account = await adapter.manager.getAccount(0);
 		return adapter;
 	}
+	/**
+	* A read that fails is asked again, once, a moment later: a public RPC drops a request now and then, and a chain that
+	* just made a block can refuse a read of "latest" it no longer holds. Without it a network switch, a restore or New
+	* gave up on the first such answer. Never a broadcast or anything else that writes, nor a request that did not answer
+	* in time (the person would wait twice as long), nor one the server refused as such (4xx).
+	*/
 	async rpc(method, params = []) {
+		try {
+			return await this.ask(method, params);
+		} catch (error) {
+			if (!RETRIED_READS.has(method) || FINAL.has(error)) throw error;
+			await new Promise((resolve) => setTimeout(resolve, RETRY_AFTER_MS));
+			return this.ask(method, params);
+		}
+	}
+	async ask(method, params) {
 		let response;
 		try {
 			response = await fetch(this.config.provider, {
@@ -275,9 +311,15 @@ var UsdtAdapter = class UsdtAdapter {
 			});
 		} catch (error) {
 			const reason = networkReason(error, rpcHost(this.config.provider));
-			throw reason ? Object.assign(new Error(reason), { cause: error }) : error;
+			const thrown = reason ? Object.assign(new Error(reason), { cause: error }) : error;
+			if (timedOut(error) && thrown && typeof thrown === "object") FINAL.add(thrown);
+			throw thrown;
+		}
+		if (!response.ok) {
+			const error = engineError("usdtRpcUnavailable");
+			if (response.status !== 429 && response.status < 500) FINAL.add(error);
+			throw error;
 		}
-		if (!response.ok) throw engineError("usdtRpcUnavailable");
 		const result = await response.json();
 		if (result.error || !Object.prototype.hasOwnProperty.call(result, "result")) throw new Error("USDT RPC rejected the operation");
 		return result.result;
@@ -1259,6 +1301,12 @@ var ArkadeAdapter = class ArkadeAdapter {
 };
 //#endregion
 //#region ../browser/src/engine/paymentAdapters/backup.ts
+/**
+* Wallet database versions a backup may carry. 3 is what SDK 0.4.74-0.4.76 made (Ghostly 1.1.3 and earlier);
+* 4 is SDK 0.4.78's, which adds the vtxos `scriptUnspent` index. An older one is restored at its own version
+* and the SDK upgrades it the first time the wallet opens. arkBackupSchema.test.ts fails when the SDK moves on.
+*/
+var ARK_DB_VERSIONS = [3, 4];
 var allowed = /* @__PURE__ */ new Set([
 	"vtxos",
 	"utxos",
@@ -1315,7 +1363,7 @@ async function snapshotArkDatabase(walletId) {
 }
 /** Only imports into a freshly allocated database; never replaces an existing wallet. */
 async function restoreArkDatabase(walletId, snapshot) {
-	if (snapshot.version !== 3 || !Array.isArray(snapshot.stores) || snapshot.stores.length > allowed.size || new Set(snapshot.stores.map((s) => s.name)).size !== snapshot.stores.length || snapshot.stores.some((s) => !allowed.has(s.name) || !Array.isArray(s.values) || !Array.isArray(s.keys) || s.values.length !== s.keys.length)) throw new Error("Unsupported Ark backup schema");
+	if (!ARK_DB_VERSIONS.includes(snapshot.version) || !Array.isArray(snapshot.stores) || snapshot.stores.length > allowed.size || new Set(snapshot.stores.map((s) => s.name)).size !== snapshot.stores.length || snapshot.stores.some((s) => !allowed.has(s.name) || !Array.isArray(s.values) || !Array.isArray(s.keys) || s.values.length !== s.keys.length)) throw new Error("Unsupported Ark backup schema");
 	for (const name of [
 		"vtxos",
 		"utxos",
@@ -3330,7 +3378,7 @@ var loading$2;
 /** Loads the WebAssembly once, on first use: profiles that never pick Breez never fetch its 12.8 MB. */
 function loadBreezSdk() {
 	return loading$2 ??= (async () => {
-		const breez = await import("./web-OUQl4Q7L.js");
+		const breez = await import("./web-DwgdhfcY.js");
 		await breez.default();
 		return { async connect({ network, mnemonic, apiKey, storage }) {
 			const config = breez.defaultConfig(network);
@@ -8432,6 +8480,16 @@ var REVOCATIONS = "identityRevocations";
 var REPUBLISH_MS$1 = 36e5;
 /** How often the contacts' proofs are looked up for a revocation (and once shortly after start). */
 var REVOCATION_CHECK_MS = 432e5;
+/**
+* After a contact withdraws a proof, how long to wait before each lookup for its revocation (WISP 300: removing a proof withdraws it from
+* every chat and revokes it). The notice goes out before the revocation is published, so not at once; each try backs
+* off, and the first that finds it stops the rest. The 12 h check covers it after that.
+*/
+var WITHDRAWN_REVOCATION_TRIES_MS = [
+	2e4,
+	6e4,
+	18e4
+];
 var DRAFT_TTL = 18e5;
 var MAX_DRAFTS$1 = 4;
 var MAX_PROOFS = 32;
@@ -8644,10 +8702,31 @@ var IdentityProofs = class {
 		}
 		for (const r of live) await this.publishRevocation(r).catch(() => {});
 	}
-	/** Looks up every contact's current proofs for a revocation (the Pkarr record only, not the provider). */
+	/**
+	* Looks up the contacts' proofs for a revocation (the Pkarr record only, not the provider): the ones standing, and the
+	* ones withdrawn, which a removal also revokes. Not a proof already revoked, nor one past its expiry: its owner
+	* publishes the revocation only until then.
+	*/
 	async checkRevocations() {
 		if (!this.host.online()) return;
-		for (const linkId of this.host.linkIds()) for (const r of this.host.ledger(linkId)?.received ?? []) if (r.status === "verified" || r.status === "unconfirmed") await this.exchange(linkId)?.recheck(r.id, { revocationOnly: true }).catch(() => {});
+		for (const linkId of this.host.linkIds()) for (const r of this.host.ledger(linkId)?.received ?? []) if (this.revocable(r)) await this.exchange(linkId)?.recheck(r.id, { revocationOnly: true }).catch(() => {});
+	}
+	revocable(r) {
+		return r.status !== "revoked" && Math.min(r.binding.expiresAt, r.verified.expiresAt ?? Infinity) > now();
+	}
+	/** A proof the contact just withdrew: looked up for its revocation a few times (`WITHDRAWN_REVOCATION_TRIES_MS`). */
+	afterWithdrawal(linkId, id, tries = WITHDRAWN_REVOCATION_TRIES_MS) {
+		const [wait, ...rest] = tries;
+		if (wait === void 0) return;
+		const timer = setTimeout(() => {
+			this.timers = this.timers.filter((t) => t !== timer);
+			const r = this.host.ledger(linkId)?.received.find((x) => x.id === id);
+			if (!r || r.status !== "withdrawn" || !this.revocable(r)) return;
+			(async () => {
+				if ((this.host.online() ? await this.exchange(linkId)?.recheck(id, { revocationOnly: true }).catch(() => void 0) : void 0)?.status !== "revoked") this.afterWithdrawal(linkId, id, rest);
+			})();
+		}, wait);
+		this.timers.push(timer);
 	}
 	views() {
 		return this.proofs.map((p) => this.viewOf(p));
@@ -8751,8 +8830,12 @@ var IdentityProofs = class {
 		}));
 		this.host.emit();
 	}
-	frame(linkId, frame) {
-		return this.exchange(linkId)?.receive(frame) ?? Promise.resolve();
+	async frame(linkId, frame) {
+		const x = this.exchange(linkId);
+		if (!x) return;
+		const withdrawn = frame.t === "idp-withdraw" && typeof frame.id === "string" && this.host.ledger(linkId)?.received.some((r) => r.id === frame.id && r.status !== "withdrawn" && r.status !== "revoked");
+		await x.receive(frame);
+		if (withdrawn && this.host.ledger(linkId)?.received.some((r) => r.id === frame.id && r.status === "withdrawn")) this.afterWithdrawal(linkId, frame.id);
 	}
 	ready(linkId) {
 		if (this.greeted.has(linkId) || !this.host.channel(linkId)) return;
@@ -13948,6 +14031,10 @@ var EnrollInviter = class extends Enrollment {
 			onPeerSeen: () => {
 				if (this.seen || this.over) return;
 				this.seen = true;
+				if (this.view.role === "inviter" && this.view.step === "waiting") this.show({
+					...this.view,
+					seen: true
+				});
 				this.timer(this.options.timing?.proofMs ?? 12e4, () => {
 					if (this.view.step === "waiting") this.fail("unreached");
 				});
@@ -16374,6 +16461,9 @@ var DeviceLinks = class {
 		const keeper = await this.turnKeeper();
 		if (!keeper) return null;
 		const outcome = await keeper.check(atStart);
+		try {
+			if (outcome) this.handoff?.turnRead?.(outcome);
+		} catch {}
 		await this.refresh();
 		return outcome;
 	}
@@ -16570,6 +16660,11 @@ var SHOWN_AFTER_RELOAD = /* @__PURE__ */ new Set([
 	"cancelled"
 ]);
 var reportOf = (busy) => busy === null ? null : typeof busy === "string" ? { why: busy } : busy;
+/**
+* What `handoff-busy` tells the taker of a local reason (WISP 06: the requesting device "Shows why"). A call is said as
+* itself, so the person waits for it to end; the rest stay "handoff": which wallet keeps the profile is said on this device.
+*/
+var wireWhy = (report) => report.why === "call" ? "call" : "handoff";
 var name = (record, key) => record.deviceSet.find((slot) => slot?.key === key)?.name ?? "";
 var slotOf = (record, key) => record.deviceSet.findIndex((slot) => slot?.key === key);
 /** One session of a handoff with the other device: its own X25519 key, the other's hello, and the stream key. */
@@ -16929,6 +17024,25 @@ var HandoffGiver = class {
 	receive(from, frame) {
 		return this.exclusive(() => this.handle(from, frame)).catch(() => {});
 	}
+	/**
+	* A turn read on this standby found the record of `key` at `turn`: the device it released to took the turn, which is
+	* what the `handoff-done` would have said. That frame goes once, as the taker reloads, and can be lost; without this
+	* the screen said "Moving to …" for good, with no Use here, until that device offered the profile back.
+	*/
+	turnTaken(key, turn) {
+		return this.exclusive(async () => {
+			if (this.stopped || this.phase !== "released" || key !== this.peer || turn <= this.turn) return;
+			await this.taken();
+		}).catch(() => {});
+	}
+	/** The release was taken: the handoff note goes, and this device is a plain standby. */
+	async taken() {
+		await this.dropBreez();
+		await this.ports.records.amend({ handoff: void 0 });
+		this.phase = "idle";
+		this.peer = null;
+		this.changed();
+	}
 	async handle(from, frame) {
 		if (this.stopped) return;
 		if (from === this.peer && frame.t.startsWith("handoff-")) this.heardAt = this.now();
@@ -16950,11 +17064,7 @@ var HandoffGiver = class {
 			case HANDOFF_DONE:
 				if (from !== this.peer || this.phase !== "released") return;
 				if (frame.t === "handoff-done" ? readHandoffDone(frame) === null : readHandoffTurnFrame(frame) === null) return;
-				await this.dropBreez();
-				await this.ports.records.amend({ handoff: void 0 });
-				this.phase = "idle";
-				this.peer = null;
-				this.changed();
+				await this.taken();
 				return;
 			case HANDOFF_CANCEL: {
 				const why = readHandoffCancel(frame);
@@ -17015,7 +17125,7 @@ var HandoffGiver = class {
 				this.failure = this.failWith(local);
 				this.changed();
 			}
-			return busy("handoff");
+			return busy(wireWhy(local));
 		}
 		const self = await this.ownSelf();
 		const versions = handoffVersions(self, session.peer);
@@ -17216,12 +17326,12 @@ var HandoffGiver = class {
 			while (this.now() < deadline && reportOf(await this.ports.busy(taker))?.why === "payment") await new Promise((resolve) => setTimeout(resolve, 1e3));
 			const still = reportOf(await this.ports.busy(taker));
 			if (still) {
-				this.out(handoffBusyFrame("handoff", 30));
+				this.out(handoffBusyFrame(wireWhy(still), 30));
 				this.reset(still.why === "payment" ? "payment" : this.failWith(still));
 				return;
 			}
 		} else if (why) {
-			this.out(handoffBusyFrame("handoff", 30));
+			this.out(handoffBusyFrame(wireWhy(why), 30));
 			this.reset(this.failWith(why));
 			return;
 		}
@@ -21082,9 +21192,11 @@ var Communities = class {
 				return !!id && this.host.linkReady(id, 2);
 			};
 			const hubs = freshHubs(this.hubs(live), this.now()).map((h) => h.key);
+			const former = Object.entries(s.state.nicks).filter(([key]) => !rosterHas(s.roster, key));
 			return [{
 				...base,
 				name: s.name,
+				...former.length ? { formerNames: Object.fromEntries(former) } : {},
 				status: s.status,
 				statusReason: s.state.statusReason,
 				epoch: s.epoch,
@@ -23583,6 +23695,7 @@ var Groups = class {
 					isAdmin: false,
 					members: [],
 					canSend: false,
+					...group.formerNames ? { formerNames: group.formerNames } : {},
 					invitation: {
 						linkId: invitation.linkId,
 						contact: this.host.contactName(invitation.linkId) ?? "",
@@ -24380,6 +24493,10 @@ var Groups = class {
 				if (existing?.state && existing.state.status === "active") return;
 				if (existing?.invitation?.seedB64) return;
 				if ([...this.stored.values()].filter((x) => x.invitation).length >= 32) return;
+				const known = {
+					...existing?.formerNames,
+					...existing?.state?.nicks
+				};
 				const invitation = {
 					id: g,
 					createdAt: Date.now(),
@@ -24390,7 +24507,8 @@ var Groups = class {
 						e: Number.isSafeInteger(frame.e) ? frame.e : 0,
 						n: Number.isSafeInteger(frame.n) ? frame.n : 1,
 						pieces: []
-					}
+					},
+					...Object.keys(known).length ? { formerNames: known } : {}
 				};
 				if (existing) {
 					this.sessions.delete(g);
@@ -24483,6 +24601,8 @@ var Groups = class {
 				});
 				await this.store.putGroup(member);
 				if (!viaLink) await this.sessions.get(g).setNick(group.invitation.admin, this.host.contactName(linkId));
+				const session = this.sessions.get(g);
+				for (const [key, nick] of Object.entries(group.formerNames ?? {})) if (!session.state.nicks[key]) await session.setNick(key, nick);
 				await this.event(g, "joined", `You joined. ${GROUP_READ_NOTE}`, Date.now(), joined.state.chain.length - 1);
 				if (viaLink) traceJoin(g, "welcome.received");
 				if (viaLink) {
@@ -28613,7 +28733,8 @@ var CashuWallet = class CashuWallet {
 			let swap = (await this.swapsAt(mint)).find((s) => s.kind === "receive" && s.token === token);
 			if (swap?.finished) return {
 				amount: swap.tx?.amount ?? 0,
-				mint
+				mint,
+				fee: swap.tx?.fee ?? 0
 			};
 			if (!swap) {
 				const preview = await (await this.wallet(mint)).prepareSwapToReceive(token);
@@ -28643,7 +28764,8 @@ var CashuWallet = class CashuWallet {
 			this.events.onChange();
 			return {
 				amount: credited,
-				mint
+				mint,
+				fee: Math.max(0, faceValue - credited)
 			};
 		});
 	}
@@ -29279,6 +29401,17 @@ var CashuWallet = class CashuWallet {
 * taken back.
 */
 var UNIT = "sat";
+var satsWord = (n) => `${n} sat${n === 1 ? "" : "s"}`;
+/**
+* A refused send's review, once its ecash came back: why, and exactly what came back. Taking ecash back is a swap at
+* the mint, which can keep a fee: "The sats came back" said nothing of it. Without `back` (Fedimint, or not known),
+* the plain sentence.
+*/
+var refusedLine = (reason, back) => {
+	const why = `Refused: ${reason.replace(/\.+$/, "")}.`;
+	if (!back) return `${why} The sats came back.`;
+	return back.fee > 0 ? `${why} ${satsWord(back.amount)} came back; the mint kept ${back.fee} as its fee.` : `${why} All ${satsWord(back.amount)} came back.`;
+};
 var mintLightning = (wallet, network) => ({
 	createInvoice: (amount, paymentId) => wallet.receiveLightning(amount, paymentId, network),
 	quote: (invoice) => wallet.quoteInvoice(invoice, network),
@@ -29914,7 +30047,10 @@ var PaymentDesk = class {
 			endpoint: [ENDPOINT.bolt11, request.invoice]
 		}).catch(() => {});
 	}
-	/** Takes back ecash the peer never redeemed. If they did redeem it, the mint says so and the payment is settled. */
+	/**
+	* Takes back ecash the peer never redeemed. If they did redeem it, the mint says so and the payment is settled.
+	* Resolves to what came back of Cashu ecash (and the mint's fee for it); undefined when nothing did, or not Cashu.
+	*/
 	reclaim(paymentId) {
 		let running = this.reclaims.get(paymentId);
 		if (!running) {
@@ -29945,7 +30081,7 @@ var PaymentDesk = class {
 		}
 		if (!payment?.token || payment.direction !== "out") throw new Error("Nothing to reclaim");
 		try {
-			await this.wallet.receiveToken(payment.token, "reclaimed", payment.memo, { payment: () => ({
+			const { amount, fee } = await this.wallet.receiveToken(payment.token, "reclaimed", payment.memo, { payment: () => ({
 				...this.current(payment),
 				state: "reclaimed",
 				token: void 0
@@ -29955,6 +30091,10 @@ var PaymentDesk = class {
 				state: "reclaimed",
 				token: void 0
 			});
+			return {
+				amount,
+				fee
+			};
 		} catch (error) {
 			const message = error instanceof Error ? error.message : String(error);
 			if (!/spent/i.test(message)) throw error;
@@ -29964,6 +30104,7 @@ var PaymentDesk = class {
 				state: "settled",
 				token: void 0
 			});
+			return;
 		}
 	}
 	/** Asks this side made to pay, until the contact answers with a request (or two minutes pass). */
@@ -30379,8 +30520,8 @@ var PaymentDesk = class {
 					...payment,
 					error: result.error ?? "The payment was refused"
 				});
-				await this.reclaim(payment.id).catch(() => {});
-				if (this.current(payment).state === "reclaimed") await this.host.onReviewedPaymentRefused?.(payment.id, result.error ?? "The payment was refused");
+				const back = await this.reclaim(payment.id).catch(() => void 0);
+				if (this.current(payment).state === "reclaimed") await this.host.onReviewedPaymentRefused?.(payment.id, result.error ?? "The payment was refused", back);
 				return;
 			}
 			Promise.resolve(this.host.onReviewedPaymentResult?.(payment.id)).catch(() => {});
@@ -32793,14 +32934,15 @@ var GhostlyNode = class GhostlyNode {
 		onReviewedPaymentResult: async (id) => {
 			await this.reconcilePayment({ id });
 		},
-		onReviewedPaymentRefused: async (id, reason) => {
+		onReviewedPaymentRefused: async (id, reason, back) => {
 			const intent = await intentRepository.get(id);
 			if (intent && ["submitted", "unknown"].includes(intent.review.state)) await intentRepository.put({
 				...intent,
 				review: {
 					...intent.review,
 					state: "failed",
-					error: `Refused: ${reason}. The sats came back.`
+					error: refusedLine(reason, back),
+					...back ? { returned: back } : {}
 				}
 			});
 			this.emitState();
@@ -35033,7 +35175,7 @@ var GhostlyNode = class GhostlyNode {
 			this.transport.networkChanged?.();
 			this.directPath.reset();
 		}
-		for (const live of this.links.values()) live.link?.wake();
+		for (const live of this.links.values()) live.link?.wake({ network: params.network });
 		this.hold.wake();
 		for (const network of WALLET_NETWORKS) {
 			this.lightnings[network].wake();
@@ -38624,6 +38766,17 @@ var GhostlyNode = class GhostlyNode {
 		}
 	}
 	/**
+	* Whether a device code may be used in this profile now, asked before the person presses Add (WISP 06 § User
+	* experience): `ready`, or why not: `set` (this profile is already on several devices), `in-use` (it holds something,
+	* `inUse`), `loading` (what it holds is not known yet). The page says up front that a new profile is made for the
+	* code; `deviceEnrollJoin` still decides, and refuses as before.
+	*/
+	async deviceEnrollReady() {
+		if (this.starting) await this.starting;
+		if (await readDeviceRecord(databaseName()).catch(() => null)) return "set";
+		return this.inUse() ?? "ready";
+	}
+	/**
 	* Whether this profile holds anything a person would lose if it became a standby here: a chat, a group, an identity,
 	* money or a payment, or a wallet with keys of its own. The wallets a new profile gets by itself (Mainnet Cashu, with
 	* the Cashu mints' Lightning card, and USDT, `walletSetup.ts`) count only once they hold, wait for or have moved
@@ -38650,6 +38803,11 @@ var GhostlyNode = class GhostlyNode {
 	}
 	/** The giver of this active device: answers a pull, makes a push, runs pass 1 while this engine goes on. */
 	handoffGiver = null;
+	/** A call is on in one of the pages (`setCallOn`, told by the host for all of them): a handoff waits for it to end. */
+	callOn = false;
+	setCallOn({ on }) {
+		this.callOn = on === true;
+	}
 	async startHandoff() {
 		const host = handoffProfileHost(), links = this.deviceLinks;
 		if (!host || !links || this.handoffGiver || this.options.singleDevice) return;
@@ -38736,6 +38894,7 @@ var GhostlyNode = class GhostlyNode {
 	* or anything this build cannot judge. Null: the wallets move or stay home by their plan.
 	*/
 	async handoffBusy(taker) {
+		if (this.callOn) return { why: "call" };
 		if (this.limitedMode || !this.walletsStarted) return { why: "loading" };
 		await this.refreshWallet().catch(() => {});
 		const { refusal } = await this.handoffPlan(taker);
@@ -39330,6 +39489,8 @@ var GhostlyNode = class GhostlyNode {
 			statusCardSupport: true,
 			buttonsSupport: true,
 			wakeSupport: true,
+			upgradeSupport: true,
+			peerUpgrades: () => !!live.caps?.peer?.capabilities.includes(UPGRADE_CAPABILITY),
 			servicesSupport: this.options.servicesSupport ?? (this.options.platform ?? "web") !== "web",
 			dht: stored.profile ? {
 				state: stored.dhtDeliveryState,
@@ -39728,6 +39889,7 @@ var GhostlyNode = class GhostlyNode {
 				DHT_FILE_CAPABILITY,
 				...live?.stored.hold?.enabled ? [HOLD_CAPABILITY] : [],
 				"files/2",
+				UPGRADE_CAPABILITY,
 				...GhostlyNode.testNoEdit() ? [] : [EDIT_CAPABILITY],
 				...cashu || lightning ? ["payments/1"] : [],
 				...cashu ? ["payments-cashu/1"] : [],
@@ -39784,7 +39946,7 @@ var GhostlyNode = class GhostlyNode {
 	get nativeFactories() {
 		const relay = this.relaysHyperdht ? this.hyperdhtRelay : "";
 		return {
-			...relay ? { "hyperdht/1": async (seedB64) => (await import("./hyperdhtRelay-CHMS7_KO.js")).createRelayedHyperEndpoint(seedB64, relay) } : {},
+			...relay ? { "hyperdht/1": async (seedB64) => (await import("./hyperdhtRelay-BoxPHp7v.js")).createRelayedHyperEndpoint(seedB64, relay) } : {},
 			...this.options.nativeTransports,
 			...this.ownIrohRelays ? { "iroh/1": (seedB64) => this.options.nativeTransports["iroh/1"](seedB64, this.settings.irohRelays?.length ? { relays: [...this.settings.irohRelays] } : {}) } : {},
 			...this.options.irohWeb ? { "iroh/1": (seedB64) => createIrohWebEndpoint(seedB64, { relays: this.irohRelays }) } : {}
@@ -40336,6 +40498,11 @@ var EngineServer = class {
 	* it too: the extension's peer runs with no tab open, and a tab opened during the ring used to show no call.
 	*/
 	offers = /* @__PURE__ */ new Map();
+	/**
+	* The clients a call is on in (`setCallOn`): the engine hears whether any is, so a handoff waits for every page's
+	* call (WISP 06 § States and events). A client that goes away (a tab closed mid-call) is taken out with it.
+	*/
+	onCall = /* @__PURE__ */ new Set();
 	constructor(options = {}) {
 		this.node = new GhostlyNode({
 			onAttention: (event) => this.broadcast({
@@ -40405,6 +40572,7 @@ var EngineServer = class {
 		this.clients.delete(client);
 		this.histories.delete(client);
 		if (this.clients.size === 0) this.node.setActiveLink({ linkId: null });
+		if (this.onCall.delete(client)) this.node.setCallOn({ on: this.onCall.size > 0 });
 	}
 	async handle(client, request) {
 		if (request?.kind !== "request") return;
@@ -40413,12 +40581,18 @@ var EngineServer = class {
 			id: request.id
 		};
 		if (request.method === "setCallSignal") this.offers.delete(request.params?.linkId ?? "");
+		let params = request.params;
+		if (request.method === "setCallOn") {
+			if (request.params?.on === true) this.onCall.add(client);
+			else this.onCall.delete(client);
+			params = { on: this.onCall.size > 0 };
+		}
 		try {
 			await this.ready;
 			const method = this.node[request.method];
 			if (typeof method !== "function") throw new Error(`Unknown method: ${request.method}`);
 			if (this.node.limited && !LIMITED_MODE_METHODS.has(String(request.method))) throw new Error(LIMITED_MODE_ERROR);
-			response.result = await method.call(this.node, request.params);
+			response.result = await method.call(this.node, params);
 		} catch (error) {
 			response.error = error instanceof Error ? error.message : String(error);
 		}
@@ -40505,4 +40679,4 @@ function signalKind(signal) {
 //#endregion
 export { EngineServer, hyperdhtRelayProblem as n, server_exports as t };
 
-//# sourceMappingURL=server-9AM0ta6q.js.map
+//# sourceMappingURL=server-CXFTDnFI.js.map