@ghostlytools/cli 1.2.0 → 1.2.1

package/dist/assets/{server-BGXmSYx_.js → server-D5FBZYW8.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { $a as readAppRevocations, $i as parseImageMeta, $n as engineError, $o as handoffContextProof, $r as pinNumberHolds, $s as HANDOFF_CAPABILITY, $t as PaymentPreflightError, A as decodeGroupEntryLink, Aa as pairedReplyAuthor, Ac as withRequestOptions, Ai as IDENTITY_REVOCATION_LABEL, Ar as mergeBeacon, B as groupWakes, Ba as statusCardText, Bc as publicKeyFromZ32, Bi as lastSharedWithMe, Bo as HANDOFF_OFFER, Br as FILE_LIMITS, Bs as readEnrollHello, C as COMMUNITY_LIMITS, Ca as nextReactionNumber, Cc as RelayTransport, Ci as readManifest, Co as RTC_CONFIG, Cr as COMMUNITY_TOPOLOGY, Cs as readSetUpdate, D as decodeCommunityLink, Da as readReaction, Dc as traceLink, Di as dialDescriptors, Dr as freshHubs, Ds as verifySetUpdate, E as communityHasFrame, Ea as reactionIsNewer, Ei as capsDescriptors, Er as doorHubs, Es as signTombstone, F as mergeKnocks, Fi as identityRevocationValue, Fo as HANDOFF_ACK, Fr as readBeacon, Fs as enrollDoneFrame, Ga as shownTime, Gc as fromBase64Url, Gi as automaticTransport, Gn as findEndpoint, Go as HANDOFF_VERIFIED, Gr as TypingSender, Gs as OwnInviteError, Gt as didDhtFromPublicKey, Ha as claimedTime, Hi as emptyProofLedger, Hn as ENDPOINT, Ho as HANDOFF_PIECE_BYTES, Hr as transferStalled, Hs as createDeviceInvite, I as readKnocks, Ia as STATUS_CARD_LIMITS, Ii as identityStatement, Io as HANDOFF_CANCEL, Ir as readBeaconHead, Is as enrollGrantFrame, J as carryMentions, Ja as appFingerprint, Jc as toZ32, Jn as parseFedimintRequestPayload, Jo as handoffAttemptFailed, Js as encodeInviteCode, Kc as randomBytes, Kn as isFederationId, Ko as filePartName, Ks as createChatInvite, Kt as encodeDidDhtDeactivated, Lc as createIdentity, Li as newIdentityBinding, Lo as HANDOFF_DONE, Lr as readLobby, Ls as enrollHelloFrame, M as entryParams, Ma as replySnippet, Mi as IdentityExchange, Mo as HTTP_SERVICE_PROTO, Mr as newerHead, Ms as enrollCancelFrame, N as knockIdentity, Na as BUTTON_ID, Nc as createRelayPayload, No as LEGACY_SERVICES, Nr as pickHubs, Ns as enrollCancelReason, O as encodeCommunityLink, Oa as validReactionNumber, Oc as budgetRetryMs, Or as lobbyKeys, P as knockRecords, Pi as emptyIdentityLedger, Po as serviceIdFromName, Pr as rankHubs, Ps as enrollDigits, Qa as isAppRef, Qi as dhtFileId, Qn as pairedMessageFrame, Qo as handoffContext, Qr as pinIsNewer, Qs as ENROLL_CAPABILITY, Qt as ONCHAIN_PROVIDER, R as GroupWakeLimiter, Ra as checkStatusCard, Rc as identityFromSeed, Ri as receivedIdentityStatus, Ro as HANDOFF_HAVE, Rr as shouldBeHub, Rs as enrollProofFrame, S as sealGroupTyping, Sa as ReactionWindow, Sc as DEFAULT_RELAYS, Si as newMailbox, Sr as pickMeshHubs, T as GROUP_READ_NOTE_COMMUNITY, Ta as reactionEmoji, Tc as normalizeRelayUrl, Ti as DHT_TEXT_CAPABILITY, Tr as beaconRecords, Ts as setUpdateFrame, U as GROUP_READ_NOTE, Ua as heardTime, Uc as sanitizeAvatar, Ui as validExternalKey, Un as cashuRequestPayload, Uo as HANDOFF_REQUEST, Us as deviceInviteJoinerParams, V as parseGroupWakeFrame, Va as arrivalKey, Vc as verify, Vi as PeerProofs, Vn as decodeBolt11, Vo as HANDOFF_PAKE, Vr as transferEnded, Vs as verifyEnrollProof, W as GroupSession, Wa as receivedTimestamp, Wc as bytesEqual, Wi as TRANSPORTS, Wn as fedimintRequestPayload, Wo as HANDOFF_TIMINGS, Ws as readDeviceInvite, Wt as didDhtDocument, X as mentionsMember, Xc as utf8Encode, Xi as peekDhtMailbox, Xn as INVITE_TAKEN, Xo as handoffBusyFrame, Xr as mayPin, Xs as inviteOwnership, Xt as ETHEREUM_USDT, Y as parseCommunityEdit, Ya as appRef, Yc as utf8Decode, Yi as DHT_MESSAGE_TTL, Yn as GhostLink, Yo as handoffAttemptSucceeded, Yr as PIN_LIMITS, Yt as signDidDhtPacket, Z as groupName, Za as isAppKey, Zi as DHT_FILE_CAPABILITY, Zn as LIVENESS_PING_MS, Zo as handoffCancelFrame, Zr as nextPinNumber, Zs as DEVICES_CAPABILITY, Zt as EVM_TEST_CHAINS, _ as readAppBundle, _a as forwardedAgain, _c as readTurnPacket, _i as HOLD_CAPABILITY, _o as parseLocalTarget, _r as groupSignalFrame, _s as readHandoffPake, _t as isAtprotoDid, a as planAppUpdate, ac as newDeviceSetSecret, ai as parseWakeFrame, an as assertTokenUnits, as as handoffOfferFrame, b as groupTypingEpoch, ba as GROUP_REACTION_FRAME, bc as turnKeys, bi as HoldKeys, bo as decodeControl, br as mayBeHub, bs as sealHandoffPiece, ca as fileMessageText, ci as checkPushEndpoint, cn as validatePaymentTarget, co as verifyCommitSignature, cr as readGroupFileMeta, cs as handoffRetryAfter, da as parseVideoMeta, dc as classifyTurnRead, di as isAppVersion, dn as SPARK_PROVIDER, do as DHT_POLL_INTERVALS, ds as newHandoffId, ec as deviceEchoFrame, ei as readPin, en as SEPOLIA_TEST_USDT, er as engineText, es as handoffDataFrame, f as appDigest, fa as EDIT_BUFFER_MS, fc as turnPutSummary, fi as APPS_CAPABILITY, fn as sparkAddressKind, fr as CarriedTransport, fs as readHandoffAck, g as isAppUrl, ga as parseLinkPreview, gc as nextTurnPosition, gi as UPGRADE_CAPABILITY, gn as isPubkyKey, go as formatLocalTarget, gs as readHandoffHello, ha as dhtEditId, hc as firstDeviceSetSecret, hi as STATUS_CARD_CAPABILITY, ho as GhostlyHttpError, hs as readHandoffHave, i as checkAppBeforeRun, ia as sanitizeMime, ic as devicePingFrame, ii as newWakeToken, in as WALLET_NETWORKS, io as GROUP_MEMBER_CAP, is as handoffManifestFrames, j as encodeGroupEntryLink, ja as readReply, jc as PacketTooLargeError, jo as emptyLinkRecords, jr as mergeLobby, ka as wireReaction, kc as isDiscoveryBudgetError, ko as parseCallSignal, kr as lobbyRecords, l as APP_BUNDLE_LIMITS, la as parseVoiceMeta, lc as TURN_RAISE_READ_TIMEOUT_MS, li as vapidKeysMatch, ln as walletNetworkOf, lo as edgeParams, ls as handoffStreamKey, ma as RateWindow, mc as TURN_MAX, mi as EDIT_CAPABILITY, mn as isBitcoinAddress, mo as presenceSeenAt, ms as readHandoffDone, n as appStoreDecision, na as safeBlobType, nc as deviceKeyZ32, ni as WakeLimiter, nn as TEST_USDT_FAUCET_AMOUNT, no as canonicalJson, ns as handoffEphemeral, oc as seedSigner, oi as relayRequest, on as assertWholeSats, oo as MEMBER_KEY, or as groupFileFallback, os as handoffPakeFrame, p as appViewOf, pa as EDIT_RATE_WINDOW_MS, pc as TURN_LAST_SEQUENCE, pi as BUTTONS_CAPABILITY, pn as sparkInvoiceDetails, po as RELAY_POLL_INTERVALS, ps as readHandoffCancel, q as GROUP_EDIT_TEXT_BYTES, qc as toBase64Url, qn as parseCashuRequestPayload, qo as handoffAttemptAllowed, qr as typingActivity, qs as decodeInviteCode, qt as encodeDidDhtPacket, r as appUpdateDecision, ra as sanitizeFileName, rc as deviceLinkPairing, ri as deviceWakeRequest, rn as USDT_PUBLIC_RPC, rs as handoffHelloFrame, s as readAppStore, sc as webCryptoSigner, si as wakeRequest, sn as formatPaymentAmount, so as rosterHas, ss as handoffReleaseFrame, t as appRevocationFor, ta as formatFileSize, tc as deviceEchoNonce, ti as WAKE_CALL_INTERVAL_MS, tr as GROUP_FILE_LIMITS, ts as handoffDigest, u as APP_BUNDLE_MAGIC, uc as TURN_SETTLE_MS, ui as chatAppId, un as SPARK_NETWORKS, uo as DirectPathWatch, us as handoffVersions, va as readForwarded, vc as signTurnPacket, vi as HOLD_DATED_BACK_MS, vo as webLocalFetch, vr as readGroupSignal, vs as readHandoffTurnFrame, vt as normalizeAtprotoHandle, w as CommunitySession, wa as queueReaction, wc as currentRelays, wi as CapsExchange, wr as beaconKeys, ws as setAckFrame, x as openGroupTyping, xa as REACTION_LIMITS, xc as turnName, xi as HoldRefusedError, xo as encodeControl, xr as meshHubs, y as GroupTypingBoard, ya as COMMUNITY_REACTION_FRAME, yc as signTurnRelease, yi as HOLD_LIMITS, yo as LIMITS, yr as MESH_HUBS, ys as readHandoffVerified, z as groupWakeFrame, za as sameButtonText, zc as identityFromSeedB64, zi as revokesIdentity, zo as HANDOFF_HELLO, zr as ChatFiles, zs as readEnrollGrant } from "./src-BMUcYQ7b.js";
+import { $a as appRef, $c as randomBytes, $i as parseImageMeta, $n as engineError, $o as filePartName, $r as pinNumberHolds, $s as createChatInvite, $t as PaymentPreflightError, A as decodeGroupEntryLink, Aa as pairedReplyAuthor, Ac as RelayTransport, Ai as IDENTITY_REVOCATION_LABEL, Ao as RTC_CONFIG, Ar as mergeBeacon, As as readSetUpdate, B as groupWakes, Bc as createRelayPayload, Bi as lastSharedWithMe, Bo as LEGACY_SERVICES, Br as FILE_LIMITS, Bs as enrollCancelReason, C as COMMUNITY_LIMITS, Ca as nextReactionNumber, Cc as nextTurnPosition, Ci as readManifest, Co as formatLocalTarget, Cr as COMMUNITY_TOPOLOGY, Cs as readHandoffHello, D as decodeCommunityLink, Da as readReaction, Dc as turnKeys, Di as dialDescriptors, Do as decodeControl, Dr as freshHubs, Ds as sealHandoffPiece, E as communityHasFrame, Ea as reactionIsNewer, Ec as signTurnRelease, Ei as capsDescriptors, Eo as LIMITS, Er as doorHubs, Es as readHandoffVerified, F as mergeKnocks, Fc as budgetRetryMs, Fi as identityRevocationValue, Fr as readBeacon, Ga as arrivalKey, Gc as identityFromSeed, Gi as automaticTransport, Gn as findEndpoint, Go as HANDOFF_HAVE, Gr as TypingSender, Gs as enrollProofFrame, Gt as didDhtFromPublicKey, Ha as checkStatusCard, Hi as emptyProofLedger, Hn as ENDPOINT, Ho as HANDOFF_ACK, Hr as transferStalled, Hs as enrollDoneFrame, I as readKnocks, Ic as isDiscoveryBudgetError, Ii as identityStatement, Io as parseCallSignal, Ir as readBeaconHead, J as carryMentions, Ja as receivedTimestamp, Jc as verify, Jn as parseFedimintRequestPayload, Jo as HANDOFF_PAKE, Js as verifyEnrollProof, Ka as claimedTime, Kc as identityFromSeedB64, Kn as isFederationId, Ko as HANDOFF_HELLO, Ks as readEnrollGrant, Kt as encodeDidDhtDeactivated, Lc as withRequestOptions, Li as newIdentityBinding, Lr as readLobby, M as entryParams, Ma as replySnippet, Mc as normalizeRelayUrl, Mi as IdentityExchange, Mr as newerHead, Ms as setUpdateFrame, N as knockIdentity, Na as BUTTON_ID, Nr as pickHubs, Ns as signTombstone, O as encodeCommunityLink, Oa as validReactionNumber, Oc as turnName, Oo as encodeControl, Or as lobbyKeys, P as knockRecords, Pc as traceLink, Pi as emptyIdentityLedger, Pr as rankHubs, Ps as verifySetUpdate, Qa as appFingerprint, Qc as fromBase64Url, Qi as dhtFileId, Qn as pairedMessageFrame, Qo as HANDOFF_VERIFIED, Qr as pinIsNewer, Qs as OwnInviteError, Qt as ONCHAIN_PROVIDER, R as GroupWakeLimiter, Ra as STATUS_CARD_LIMITS, Rc as PacketTooLargeError, Ri as receivedIdentityStatus, Ro as emptyLinkRecords, Rr as shouldBeHub, S as sealGroupTyping, Sa as ReactionWindow, Sc as firstDeviceSetSecret, Si as newMailbox, So as GhostlyHttpError, Sr as pickMeshHubs, Ss as readHandoffHave, T as GROUP_READ_NOTE_COMMUNITY, Ta as reactionEmoji, Tc as signTurnPacket, Ti as DHT_TEXT_CAPABILITY, To as webLocalFetch, Tr as beaconRecords, Ts as readHandoffTurnFrame, U as GROUP_READ_NOTE, Ua as sameButtonText, Ui as validExternalKey, Un as cashuRequestPayload, Uo as HANDOFF_CANCEL, Us as enrollGrantFrame, V as parseGroupWakeFrame, Vi as PeerProofs, Vn as decodeBolt11, Vo as serviceIdFromName, Vr as transferEnded, Vs as enrollDigits, W as GroupSession, Wa as statusCardText, Wc as createIdentity, Wi as TRANSPORTS, Wn as fedimintRequestPayload, Wo as HANDOFF_DONE, Ws as enrollHelloFrame, Wt as didDhtDocument, X as mentionsMember, Xc as sanitizeAvatar, Xi as peekDhtMailbox, Xn as INVITE_TAKEN, Xo as HANDOFF_REQUEST, Xr as mayPin, Xs as deviceInviteJoinerParams, Xt as ETHEREUM_USDT, Y as parseCommunityEdit, Ya as shownTime, Yi as DHT_MESSAGE_TTL, Yn as GhostLink, Yo as HANDOFF_PIECE_BYTES, Yr as PIN_LIMITS, Ys as createDeviceInvite, Yt as signDidDhtPacket, Z as groupName, Za as APP_STATEMENT_LIMITS, Zc as bytesEqual, Zi as DHT_FILE_CAPABILITY, Zn as LIVENESS_PING_MS, Zo as HANDOFF_TIMINGS, Zr as nextPinNumber, Zs as readDeviceInvite, Zt as EVM_TEST_CHAINS, _ as readAppBundle, _a as forwardedAgain, _c as TURN_SETTLE_MS, _i as HOLD_CAPABILITY, _o as DirectPathWatch, _r as groupSignalFrame, _s as handoffVersions, _t as isAtprotoDid, a as planAppUpdate, ac as ENROLL_CAPABILITY, ai as parseWakeFrame, an as assertTokenUnits, as as handoffContext, b as groupTypingEpoch, ba as GROUP_REACTION_FRAME, bc as TURN_LAST_SEQUENCE, bi as HoldKeys, bo as RELAY_POLL_INTERVALS, br as mayBeHub, bs as readHandoffCancel, ca as fileMessageText, cc as deviceEchoNonce, ci as checkPushEndpoint, cn as validatePaymentTarget, cr as readGroupFileMeta, cs as handoffDigest, da as parseVideoMeta, dc as devicePingFrame, di as isAppVersion, dn as SPARK_PROVIDER, ds as handoffManifestFrames, ec as decodeInviteCode, ei as readPin, el as toBase64Url, en as SEPOLIA_TEST_USDT, er as engineText, es as handoffAttemptAllowed, f as appDigest, fa as EDIT_BUFFER_MS, fc as newDeviceSetSecret, fi as APPS_CAPABILITY, fn as sparkAddressKind, fo as MEMBER_KEY, fr as CarriedTransport, fs as handoffOfferFrame, g as isAppUrl, ga as parseLinkPreview, gc as TURN_RAISE_READ_TIMEOUT_MS, gi as UPGRADE_CAPABILITY, gn as isPubkyKey, go as edgeParams, gs as handoffStreamKey, ha as dhtEditId, hi as STATUS_CARD_CAPABILITY, ho as verifyCommitSignature, hs as handoffRetryAfter, i as checkAppBeforeRun, ia as sanitizeMime, ic as DEVICES_CAPABILITY, ii as newWakeToken, in as WALLET_NETWORKS, is as handoffCancelFrame, j as encodeGroupEntryLink, ja as readReply, jc as currentRelays, jr as mergeLobby, js as setAckFrame, ka as wireReaction, kc as DEFAULT_RELAYS, kr as lobbyRecords, l as APP_BUNDLE_LIMITS, la as parseVoiceMeta, lc as deviceKeyZ32, li as vapidKeysMatch, ln as walletNetworkOf, lo as readCanonicalJson, ls as handoffEphemeral, ma as RateWindow, mc as webCryptoSigner, mi as EDIT_CAPABILITY, mn as isBitcoinAddress, mo as rosterHas, ms as handoffReleaseFrame, n as appStoreDecision, na as safeBlobType, ni as WakeLimiter, nl as utf8Decode, nn as TEST_USDT_FAUCET_AMOUNT, no as isAppRef, ns as handoffAttemptSucceeded, oc as HANDOFF_CAPABILITY, oi as relayRequest, on as assertWholeSats, or as groupFileFallback, os as handoffContextProof, p as appViewOf, pa as EDIT_RATE_WINDOW_MS, pc as seedSigner, pi as BUTTONS_CAPABILITY, pn as sparkInvoiceDetails, po as commitHash, ps as handoffPakeFrame, q as GROUP_EDIT_TEXT_BYTES, qa as heardTime, qc as publicKeyFromZ32, qn as parseCashuRequestPayload, qo as HANDOFF_OFFER, qr as typingActivity, qs as readEnrollHello, qt as encodeDidDhtPacket, r as appUpdateDecision, ra as sanitizeFileName, rc as inviteOwnership, ri as deviceWakeRequest, rl as utf8Encode, rn as USDT_PUBLIC_RPC, ro as readAppRevocation, rs as handoffBusyFrame, s as readAppStore, sc as deviceEchoFrame, si as wakeRequest, sn as formatPaymentAmount, so as canonicalJson, ss as handoffDataFrame, t as appRevocationFor, ta as formatFileSize, tc as encodeInviteCode, ti as WAKE_CALL_INTERVAL_MS, tl as toZ32, to as isAppKey, tr as GROUP_FILE_LIMITS, ts as handoffAttemptFailed, u as APP_BUNDLE_MAGIC, uc as deviceLinkPairing, ui as chatAppId, un as SPARK_NETWORKS, uo as GROUP_MEMBER_CAP, us as handoffHelloFrame, va as readForwarded, vc as classifyTurnRead, vi as HOLD_DATED_BACK_MS, vo as DHT_POLL_INTERVALS, vr as readGroupSignal, vs as newHandoffId, vt as normalizeAtprotoHandle, w as CommunitySession, wa as queueReaction, wc as readTurnPacket, wi as CapsExchange, wo as parseLocalTarget, wr as beaconKeys, ws as readHandoffPake, x as openGroupTyping, xa as REACTION_LIMITS, xc as TURN_MAX, xi as HoldRefusedError, xo as presenceSeenAt, xr as meshHubs, xs as readHandoffDone, y as GroupTypingBoard, ya as COMMUNITY_REACTION_FRAME, yc as turnPutSummary, yi as HOLD_LIMITS, yr as MESH_HUBS, ys as readHandoffAck, z as groupWakeFrame, zi as revokesIdentity, zo as HTTP_SERVICE_PROTO, zr as ChatFiles, zs as enrollCancelFrame } from "./src-aKGjb_yz.js";
 import { a as clearProfileStores, c as fileStore, d as profileOpenFailure, f as store, i as STORES$1, l as newestWalletTx, m as wrap, n as APP_STORAGE_SCOPE_INDEX, o as databaseName, p as transact, r as CARD_INDEX, s as deleteDatabase, t as APP_STORAGE_CHAT_INDEX, u as openDb } from "./idb-CTF6LF5B.js";
 import { a as fileBytesOf, c as removeFileBytes, i as fileBytes, l as FILE_BYTES_STEP, n as blobDigest } from "./fileBytes-BcYZhNgF.js";
 import { $ as BACKUP_MEDIA_TYPE, A as requireTurn, At as paymentWireId, B as networkLabel, C as breezDatabasesFor, Ct as storedGroupFiles, D as sourceKey, Dt as replyRef, E as ProviderSources, Et as receivedPairedReply, F as sealSeed, Ft as streamStored, G as BITCOIN_INVOICE_ON_TESTNET, H as cashuMint, I as unsealSeed, J as fakesLightning, K as DEFAULT_MINTS, L as ModeChanged, M as setSingleWriterGate, Mt as readStored$1, N as intentRepository, Nt as removeStored, O as awayFrom, Ot as replyTo, P as newDeviceKey, Pt as storedSize, Q as paysItsOwnInvoices, R as ModeGate, S as breezDatabaseInUse, St as groupOfFile, T as lightningPaying, Tt as pairedWireReply, V as CASHU_MINT_SOURCE, W as WALLET_TYPES, X as isWorthlessMint, Y as isTestMint, Z as mintNetwork, _ as LightningCards, _t as verifyIdentity, a as irohRelayProblem, at as reserveAdapterIds, b as normalizePhrase, bt as groupFileId, c as createFailure, ct as SourceConfigError, d as paymentNetwork, dt as networkMode, et as MAX_BACKUP_BYTES, f as paymentNetworksOf, ft as redact, g as CASHU_CARD, gt as boundedIdentityFetch, ht as setOwnDidSource, i as createIrohWebEndpoint, it as registeredOnchainProviders, j as setAwayWallets, jt as FileAppender, k as refuseAway, kt as paymentAlias, l as createTiming, lt as SourceUnreachableError, mt as resolveAtprotoDid, n as loadFedimintSdk, nt as onAdaptersChanged, o as WALLET_NAMES, ot as NothingSpentError, p as walletInstances, pt as assertPublicServer, q as TEST_MINT, r as DEFAULT_IROH_RELAYS, rt as registeredLightningProviders, s as assertConfirmedReal, st as PROVIDER_PLATFORMS, t as fedimintDatabase, tt as identityProviders, u as crossNetwork, ut as isNothingSpentError, v as cardsKey, vt as chosenResolver, w as dropBreezDatabase, wt as groupReply, x as breezDatabase, xt as groupFileText, y as isRecoveryPhrase, yt as GroupFileDesk, z as WrongNetworkError } from "../ghostly.mjs";
@@ -180,7 +180,7 @@ async function migrateWalletNetworks(now = Date.now()) {
 //#endregion
 //#region ../browser/src/engine/paymentAdapters/usdtWallet.ts
 /** The Ethereum libraries, a large part of the app: loaded once a USDT wallet is made, opened or restored, not with the engine. */
-var loadUsdt = () => import("./usdt-DklGBSeq.js");
+var loadUsdt = () => import("./usdt-CUfucwZf.js");
 /** Every new profile starts with this wallet: an address to receive on, nothing to set up. */
 var DEFAULT_USDT = {
 	network: "ethereum",
@@ -642,7 +642,7 @@ async function restoreArkDatabase(walletId, snapshot) {
 //#endregion
 //#region ../browser/src/engine/paymentAdapters/arkWallet.ts
 /** The Ark SDK, a large part of the app: loaded once an Ark wallet is made, opened or restored, not with the engine. */
-var loadArkade = () => import("./arkade-3szZ1IpP.js");
+var loadArkade = () => import("./arkade-CtCpFaF7.js");
 /** Every new profile starts with this wallet: nothing to set up before receiving. */
 var DEFAULT_ARK = {
 	network: "bitcoin",
@@ -11143,6 +11143,10 @@ var APP_CHECK_TIMINGS = {
 	/** A check at start is skipped when every app was checked this recently (a page reloaded several times). */
 	freshMs: 36e5
 };
+/** Revocations are checked this long at a time before the page's thread is let go. */
+var REVOCATIONS_SLICE_MS = 10;
+/** `ghostly-revoke.json` files whose result is kept, so an unchanged one is not checked again (the oldest dropped first). */
+var REVOCATION_FILES_KEPT = 64;
 /** A fetched bundle kept for its install screen: at most this many, for this long. */
 var STAGED = {
 	max: 4,
@@ -11241,11 +11245,15 @@ var Apps = class {
 	/** Runs the person started with Run anyway (`<ref> <digest>`), for this engine's life: a removal does not cut them off. */
 	anyway = /* @__PURE__ */ new Set();
 	views = null;
+	held = /* @__PURE__ */ new Map();
+	heldStores = null;
 	/**
 	* Listing URLs whose peek showed nothing to take (`<store> <ref> <url>` → `<index digest> <listed digest>`): the same
 	* index listing the same is not peeked again at every check.
 	*/
 	listingMisses = /* @__PURE__ */ new Map();
+	/** `ghostly-revoke.json` files checked, by the SHA-256 of their bytes: their revocations, or null when refused. */
+	revocationFiles = /* @__PURE__ */ new Map();
 	stopped = false;
 	constructor(host) {
 		this.host = host;
@@ -11269,6 +11277,9 @@ var Apps = class {
 		if (this.sweep) clearTimeout(this.sweep);
 		this.sweep = null;
 		this.staged.clear();
+		this.held.clear();
+		this.heldStores = null;
+		this.views = null;
 	}
 	schedule(ms, atStart = false) {
 		if (this.timer) clearTimeout(this.timer);
@@ -11300,8 +11311,22 @@ var Apps = class {
 	async installed() {
 		return wrap((await store(STORES$1.apps, "readonly")).getAll());
 	}
-	async app(ref) {
-		return wrap((await store(STORES$1.apps, "readonly")).get(ref));
+	/**
+	* An installed app's record, read once and again after it is written here (the only writer, as for `heldViews`). An
+	* app's every storage call, file read and chat frame asks for it. A reference not installed is not kept.
+	*/
+	app(ref) {
+		const kept = this.held.get(ref);
+		if (kept) return kept;
+		const read = store(STORES$1.apps, "readonly").then((s) => wrap(s.get(ref)));
+		this.held.set(ref, read);
+		const drop = () => {
+			if (this.held.get(ref) === read) this.held.delete(ref);
+		};
+		read.then((app) => {
+			if (!app) drop();
+		}, drop);
+		return read;
 	}
 	async installedOrFail(ref) {
 		if (!isAppRef(ref)) fail("bad-ref", "Not an app reference");
@@ -11330,7 +11355,11 @@ var Apps = class {
 		if (app) await this.stillRunnable(app);
 	}
 	async putApp(app) {
-		await wrap((await store(STORES$1.apps, "readwrite")).put(app));
+		try {
+			await wrap((await store(STORES$1.apps, "readwrite")).put(app));
+		} finally {
+			this.held.delete(app.ref);
+		}
 	}
 	/**
 	* Writes an app's record back only while that install is still there (the same `installedAt`), read and written in
@@ -11345,33 +11374,58 @@ var Apps = class {
 			tx.objectStore(STORES$1.apps).put(app);
 			put = true;
 		};
-		await done(tx);
+		try {
+			await done(tx);
+		} finally {
+			this.held.delete(app.ref);
+		}
 		return put;
 	}
+	/**
+	* The stores' records by key, read once and kept in step by the writes here (the only writer: pages in other tabs
+	* share this engine). A record holds its store's whole index, up to 4 MiB, and IndexedDB reads and writes it whole:
+	* the Apps page, the update check and an app's every storage call and chat frame ask for them.
+	*/
+	records() {
+		return this.heldStores ??= store(STORES$1.appStores, "readonly").then((s) => wrap(s.getAll())).then((all) => new Map(all.map((r) => [r.key, r])), (error) => {
+			this.heldStores = null;
+			throw error;
+		});
+	}
 	async storeRecord(key) {
-		return wrap((await store(STORES$1.appStores, "readonly")).get(key));
+		return (await this.records()).get(key);
+	}
+	/** A write of the stores' records: what is asked while it runs waits for it, as a read of IndexedDB would; one that fails leaves what was held. */
+	async writeStores(write, apply) {
+		const before = this.records();
+		const written = before.then(async (held) => {
+			await wrap(write(await store(STORES$1.appStores, "readwrite")));
+			apply(held);
+			this.views = null;
+		});
+		const after = written.then(() => before, () => before);
+		this.heldStores = after;
+		after.catch(() => {
+			if (this.heldStores === after) this.heldStores = null;
+		});
+		await written;
 	}
-	async putStore(record) {
-		await wrap((await store(STORES$1.appStores, "readwrite")).put(record));
-		this.views = null;
+	putStore(record) {
+		return this.writeStores((records) => records.put(record), (held) => held.set(record.key, record));
 	}
-	async deleteStore(key) {
-		await wrap((await store(STORES$1.appStores, "readwrite")).delete(key));
-		this.views = null;
+	deleteStore(key) {
+		return this.writeStores((records) => records.delete(key), (held) => held.delete(key));
 	}
-	/**
-	* The stores' views, read once and again after a store is written here (the only writer: pages in other tabs share
-	* this engine). An app's every storage call and chat frame checks them, and an index may be 4 MiB.
-	*/
+	/** The stores' views, made once and again after a store is written here: an app's every storage call and chat frame checks them. */
 	heldViews() {
 		return this.views ??= this.stores().then((s) => this.storeViews(s), (error) => {
 			this.views = null;
 			throw error;
 		});
 	}
-	/** The stores the person has (a removed default is not one). */
+	/** The stores the person has (a removed default is not one), in the order of their keys, as IndexedDB lists them. */
 	async stores() {
-		return (await wrap((await store(STORES$1.appStores, "readonly")).getAll())).filter((s) => !s.removed);
+		return [...(await this.records()).values()].filter((s) => !s.removed).sort((a, b) => a.key < b.key ? -1 : 1);
 	}
 	storeViews(stores) {
 		return stores.filter((s) => s.index).map((s) => ({
@@ -11513,12 +11567,43 @@ var Apps = class {
 			if (read.has(url)) continue;
 			read.add(url);
 			try {
-				const read = readAppRevocations(await this.host.fetch(url, { maxBytes: APP_FETCH_LIMITS.revocationsBytes }));
-				if (read.ok) (out ??= []).push(...read.revocations.filter((r) => r.statement.app === ref));
+				const file = await this.readRevocationsFile(await this.host.fetch(url, { maxBytes: APP_FETCH_LIMITS.revocationsBytes }));
+				if (file) (out ??= []).push(...file.filter((r) => r.statement.app === ref));
 			} catch {}
 		}
 		return out;
 	}
+	/**
+	* `readAppRevocations` (one entry that does not verify refuses the file, null here), with a pause every few ms: the
+	* engine shares the page's thread, and each entry is a signature check. The same bytes are not checked again.
+	*/
+	async readRevocationsFile(bytes) {
+		const id = toBase64Url(sha256(bytes));
+		const known = this.revocationFiles.get(id);
+		if (known !== void 0) return known;
+		const read = readCanonicalJson(bytes);
+		let out = null;
+		if (read.ok && Array.isArray(read.value) && read.value.length <= APP_STATEMENT_LIMITS.revocations) {
+			out = [];
+			let since = performance.now();
+			for (const entry of read.value) {
+				if (performance.now() - since >= REVOCATIONS_SLICE_MS) {
+					await new Promise((resolve) => setTimeout(resolve, 0));
+					since = performance.now();
+				}
+				const one = readAppRevocation(entry);
+				if (!one.ok) {
+					out = null;
+					break;
+				}
+				out.push(one.revocation);
+			}
+		}
+		this.revocationFiles.delete(id);
+		this.revocationFiles.set(id, out);
+		for (const old of this.revocationFiles.keys()) if (this.revocationFiles.size > REVOCATION_FILES_KEPT) this.revocationFiles.delete(old);
+		return out;
+	}
 	summary(s) {
 		const index = s.index;
 		return {
@@ -11675,8 +11760,10 @@ var Apps = class {
 					problem: error instanceof AppFetchError ? error.code : "network"
 				};
 			}
-			if (!await this.storeRecord(s.key) || (await this.storeRecord(s.key))?.removed) continue;
-			await this.putStore(next);
+			const now = await this.storeRecord(s.key);
+			if (!now || now.removed) continue;
+			if (now === s && next.index === s.index && next.digest === s.digest && next.problem === s.problem && next.equivocation === s.equivocation) (await this.records()).set(s.key, next);
+			else await this.putStore(next);
 			out.push(this.summary(next));
 		}
 		return out;
@@ -12214,7 +12301,11 @@ var Apps = class {
 		const tx = (await openDb()).transaction([STORES$1.apps, STORES$1.appStorage], "readwrite");
 		tx.objectStore(STORES$1.apps).delete(app.ref);
 		tx.objectStore(STORES$1.appStorage).delete(rowsOf(app.ref));
-		await done(tx);
+		try {
+			await done(tx);
+		} finally {
+			this.held.delete(app.ref);
+		}
 		for (const key of [...this.usage.keys()]) if (key.startsWith(`${app.ref}\0`)) this.usage.delete(key);
 		await this.removeBundle(app.bytes, app.digest);
 		if (app.pending) await this.removeBundle(app.pending.bytes, app.pending.digest);
@@ -14629,6 +14720,8 @@ var EnrollInviter = class extends Enrollment {
 	stopDoneWait = null;
 	/** A joiner was seen on the link: from then it has as long as a joiner waits for the proof to open a session. */
 	seen = false;
+	/** The person answered the digits: one answer is taken, before the record is read or written for it. */
+	answered = false;
 	constructor(options) {
 		super(options, {
 			role: "inviter",
@@ -14743,7 +14836,8 @@ var EnrollInviter = class extends Enrollment {
 	* and nothing was written.
 	*/
 	async confirm(match) {
-		if (this.over || this.view.step !== "confirm" || !this.joiner) throw new Error("There are no digits to confirm");
+		if (this.over || this.answered || this.view.step !== "confirm" || !this.joiner) throw new Error("There are no digits to confirm");
+		this.answered = true;
 		if (!match) {
 			await this.fail("digits", "digits", this.joiner.name);
 			return this.view;
@@ -20422,6 +20516,11 @@ var EditQueue = class {
 	sent = /* @__PURE__ */ new Map();
 	/** When a card that goes again last went (`CARD_RESTORE_GAP_MS`). */
 	restoredAt = -Infinity;
+	/** The rows known to have an edit on its way, each with when it was last told (`edited`), by `tick`. */
+	known = /* @__PURE__ */ new Map();
+	tick = 0;
+	/** The chat's history was read for the rows with an edit on its way: `known` has them all, until the next session. */
+	learnt = false;
 	timer;
 	flushing = null;
 	again = false;
@@ -20464,17 +20563,48 @@ var EditQueue = class {
 	*/
 	reopened() {
 		this.sent.clear();
+		this.learnt = false;
+	}
+	/** This row has an edit to send (it was just written so): the next look reads it. */
+	edited(id) {
+		this.known.set(id, ++this.tick);
+	}
+	/**
+	* My rows with an edit on its way, by time. `all`: the chat's whole history, when it was read for them (no `row` to
+	* read one by, or nothing learnt yet in this session). Otherwise the known rows are read alone, and one that waits
+	* no more is forgotten, unless it was told again while it was read.
+	*/
+	async pending() {
+		const waits = (m) => m.sender === "me" && !!m.edit?.pending;
+		const row = this.deps.row;
+		if (!row || !this.learnt) {
+			const all = await this.deps.read(), rows = all.filter(waits);
+			for (const m of rows) if (!this.known.has(m.id)) this.known.set(m.id, this.tick);
+			this.learnt = true;
+			return {
+				rows,
+				all
+			};
+		}
+		const asOf = this.tick, ids = [...this.known.keys()];
+		const read = await Promise.all(ids.map((id) => row(id)));
+		const rows = [];
+		read.forEach((m, i) => {
+			if (m && waits(m)) rows.push(m);
+			else if ((this.known.get(ids[i]) ?? 0) <= asOf) this.known.delete(ids[i]);
+		});
+		return { rows: rows.sort((a, b) => a.timestamp - b.timestamp) };
 	}
 	/** The contact confirmed edit `seq` of my message with this wire id. */
 	async received(wireId, seq) {
-		const row = (await this.deps.read()).find((m) => m.sender === "me" && m.wireId === wireId);
+		const row = (await this.pending()).rows.find((m) => m.wireId === wireId);
 		if (!row?.edit?.pending || row.edit.seq > seq) return;
 		this.sent.delete(row.id);
 		await this.deps.settle(row.id, row.edit.seq);
 	}
 	/** The contact confirmed, on the DHT floor, the edit that went there under this id (`dhtEditId`). */
 	async receivedOnDht(id) {
-		const row = (await this.deps.read()).find((m) => m.sender === "me" && m.edit?.pending && m.wireId && dhtEditId(m.wireId, m.edit.seq) === id);
+		const row = (await this.pending()).rows.find((m) => m.wireId && dhtEditId(m.wireId, m.edit.seq) === id);
 		if (!row) return;
 		this.sent.delete(row.id);
 		await this.deps.settle(row.id, row.edit.seq);
@@ -20488,13 +20618,13 @@ var EditQueue = class {
 		if (this.stopped) return;
 		const now = this.now();
 		const said = (m) => this.sent.get(m.id)?.seq === m.edit.seq ? 1 : 0;
-		const rows = await this.deps.read();
+		const { rows, all } = await this.pending();
+		const due = rows.filter((m) => m.wireId).sort((a, b) => said(a) - said(b) || a.edit.at - b.edit.at);
 		const newest = /* @__PURE__ */ new Map();
-		for (const m of rows) {
+		if (due.some((m) => m.edit.restore)) for (const m of all ?? await this.deps.read()) {
 			const key = m.sender === "me" && cardKey(m);
 			if (key && m.timestamp > (newest.get(key) ?? -Infinity)) newest.set(key, m.timestamp);
 		}
-		const due = rows.filter((m) => m.sender === "me" && m.edit?.pending && m.wireId).sort((a, b) => said(a) - said(b) || a.edit.at - b.edit.at);
 		const gap = this.deps.restoreGapMs ?? CARD_RESTORE_GAP_MS;
 		let next = Infinity;
 		for (const message of due) {
@@ -21297,9 +21427,8 @@ var db = {
 	/** The group and its history. */
 	async deleteGroup(groupId) {
 		await wrap((await store(STORES$1.groups, "readwrite")).delete(groupId));
-		const messages = await store(STORES$1.messages, "readwrite");
-		const keys = await wrap(messages.index("byLink").getAllKeys(`group:${groupId}`));
-		await Promise.all(keys.map((key) => wrap(messages.delete(key))));
+		const link = `group:${groupId}`;
+		await wrap((await store(STORES$1.messages, "readwrite")).delete(IDBKeyRange.bound([link], [link, []])));
 	},
 	async getServices() {
 		return wrap((await store(STORES$1.services, "readonly")).getAll());
@@ -21374,6 +21503,11 @@ function noteAfterChange(current, message) {
 		snippet
 	};
 }
+/** The note as its message's row has it now, when that reaction still stands there (not replaced, not taken back). */
+function noteIfStanding(current, message) {
+	const r = message.reactions?.[current.by];
+	return r?.e && r.e === current.emoji && r.at === current.at ? note(message, current.by, r.e, r.at) : void 0;
+}
 /**
 * My reactions in a private group to say again to an edge that opened, in case it missed them: the newest `limit`,
 * newest first (what the member is likeliest to have missed lands before its pace runs out), of this membership only.
@@ -21392,11 +21526,10 @@ function groupReactionsToResend(messages, limit) {
 		}] : [];
 	}).sort((a, b) => b.n - a.n).slice(0, limit);
 }
-/** This side's highest number in a chat: the next one goes past it (and past what still waits to be confirmed). */
-function lastMine(messages, pending = []) {
+/** This side's highest number in a chat's history: the next one goes past it. */
+function lastMine(messages) {
 	let last = 0;
 	for (const m of messages) last = Math.max(last, m.reactions?.me?.n ?? 0);
-	for (const p of pending) last = Math.max(last, p.n);
 	return last;
 }
 var Reactions = class {
@@ -21407,6 +21540,11 @@ var Reactions = class {
 	queue = Promise.resolve();
 	/** A group member's reactions taken per window (chat and member key), as a paired chat's session limits them. */
 	memberPace = /* @__PURE__ */ new Map();
+	/**
+	* This side's highest number per chat: read from its history the first time I react in it, then each number given
+	* out. It only has to grow, so a row deleted since leaves it too high and nothing is wrong.
+	*/
+	last = /* @__PURE__ */ new Map();
 	constructor(host) {
 		this.host = host;
 	}
@@ -21428,17 +21566,19 @@ var Reactions = class {
 			if (typeof messageId !== "string" || !messageId) return { error: "No message to react to" };
 			const e = emoji === "" ? "" : reactionEmoji(emoji);
 			if (e === null) return { error: "A reaction is one emoji" };
-			const messages = await this.host.messages(chat), group = isGroup$1(chat);
-			const target = messages.find((m) => m.id === messageId) ?? reactionTarget(messages, messageId, group);
-			const id = target && replyRef(target, group);
+			const target = await this.named(chat, messageId);
+			const id = target && replyRef(target, isGroup$1(chat));
 			if (!target || !id) return { error: "That message is not in this chat, or takes no reaction" };
 			const current = target.reactions?.me;
 			if (!e && !current?.e) return { error: "No reaction of yours to take back" };
+			let last = this.last.get(chat) ?? lastMine(await this.host.messages(chat));
+			for (const p of pending) last = Math.max(last, p.n);
 			const reaction = {
 				id,
 				e,
-				n: nextReactionNumber(lastMine(messages, pending), this.now())
+				n: nextReactionNumber(last, this.now())
 			};
+			this.last.set(chat, reaction.n);
 			return {
 				reaction,
 				message: await this.write(chat, target, "me", reaction) ?? target
@@ -21477,6 +21617,12 @@ var Reactions = class {
 			for (const { by, reaction } of mine) await this.write(message.linkId, message, by, reaction);
 		});
 	}
+	/** The row I react to: by its id here, as the pages name it, read alone; else by the id both sides know it by. */
+	async named(chat, id) {
+		if (this.host.message) return await this.host.message(chat, id) ?? this.find(chat, id);
+		const messages = await this.host.messages(chat);
+		return messages.find((m) => m.id === id) ?? reactionTarget(messages, id, isGroup$1(chat));
+	}
 	/**
 	* The row a received reaction names. Most often the row of that id (a group's), or of `peer_` or `me_` and that id (a
 	* chat's): those are read alone. Any other (a file's, a payment's, one not here yet) is looked for in the whole chat;
@@ -21493,9 +21639,10 @@ var Reactions = class {
 		}
 		return reactionTarget(await this.host.messages(chat), id, group);
 	}
-	/** A chat is gone: nothing waits for it any more. */
+	/** A chat is gone: nothing waits for it any more, and my highest number in it is read again if it comes back. */
 	forget(chat) {
 		this.waiting.delete(chat);
+		this.last.delete(chat);
 	}
 	wait(chat, by, reaction) {
 		const now = this.now();
@@ -25569,6 +25716,8 @@ var Groups = class {
 					return;
 				}
 				if (existing?.invitation?.seedB64 && (existing.invitation.linkId !== linkId || existing.invitation.admin !== frame.admin)) return;
+				if (existing?.left && (existing.left.admin !== frame.admin || existing.contacts?.[existing.left.admin] !== linkId)) return;
+				if (existing?.invitation && !existing.state && existing.invitation.linkId !== linkId && !existing.invitation.genesis) return;
 				if ([...this.stored.values()].filter((x) => x.invitation).length >= 32) return;
 				if (!existing?.invitation && [...this.stored.values()].filter((x) => x.invitation?.linkId === linkId).length >= MAX_INVITATIONS_PER_CHAT) {
 					try {
@@ -25584,6 +25733,7 @@ var Groups = class {
 					...existing?.state?.nicks
 				};
 				const previous = existing?.state ? existing : existing?.previous;
+				const genesis = existing?.state ? commitHash(existing.state.chain[0]) : existing?.invitation?.genesis;
 				const invitation = {
 					id: g,
 					createdAt: Date.now(),
@@ -25592,7 +25742,8 @@ var Groups = class {
 						admin: frame.admin,
 						linkId,
 						...invitationClaims(frame),
-						pieces: []
+						pieces: [],
+						...genesis ? { genesis } : {}
 					},
 					...Object.keys(known).length ? { formerNames: known } : {},
 					...previous ? { previous } : {}
@@ -25676,6 +25827,20 @@ var Groups = class {
 					group.invitation.pieces = [];
 					return;
 				}
+				if (group.invitation.genesis && commitHash(joined.state.chain[0]) !== group.invitation.genesis) {
+					try {
+						this.host.sendOnLink(linkId, {
+							t: "group-decline",
+							g
+						});
+					} catch {}
+					delete group.invitation.seedB64;
+					group.invitation.pieces = [];
+					this.acceptSaid.delete(g);
+					await this.store.putGroup(group);
+					this.host.emit();
+					return;
+				}
 				const viaLink = !!group.invitation.entry;
 				this.meet(g, group.invitation.admin);
 				const member = {
@@ -26708,6 +26873,14 @@ var GroupEdits = class {
 	receivePace = /* @__PURE__ */ new Map();
 	timers = /* @__PURE__ */ new Map();
 	flushing = /* @__PURE__ */ new Map();
+	/** Per group: my rows known to have an edit to say, each with when it was last told (`edit`), by `tick`. */
+	known = /* @__PURE__ */ new Map();
+	tick = 0;
+	/**
+	* The groups whose history was read for the rows with an edit to say: `known` has them all, and from then on those
+	* rows alone are read (`host.message`). An edit costs what it does in a short group, however long this one is.
+	*/
+	learnt = /* @__PURE__ */ new Set();
 	stopped = false;
 	constructor(host) {
 		this.host = host;
@@ -26758,6 +26931,7 @@ var GroupEdits = class {
 				mentions: mentions.length ? mentions : void 0
 			};
 		});
+		if (this.host.message) this.told(groupId).set(messageId, ++this.tick);
 		await this.host.changed(chat, messageId);
 		await this.flush(groupId).catch(() => {});
 		return {
@@ -26778,7 +26952,7 @@ var GroupEdits = class {
 		this.timers.delete(groupId);
 		if (this.stopped || !this.host.membership(groupId)) return;
 		const chat = chatOf(groupId), now = this.now();
-		const due = (await this.host.messages(chat)).filter((m) => m.sender === "me" && m.edit?.pending).sort((a, b) => a.edit.at - b.edit.at);
+		const due = (await this.pending(groupId)).sort((a, b) => a.edit.at - b.edit.at);
 		let pace = this.sendPace.get(groupId);
 		if (!pace) this.sendPace.set(groupId, pace = new RateWindow(10, EDIT_RATE_WINDOW_MS, this.now));
 		let retry = Infinity;
@@ -26809,6 +26983,33 @@ var GroupEdits = class {
 			this.flush(groupId).catch(() => {});
 		}, Math.max(50, retry)));
 	}
+	/**
+	* My rows of a group with an edit to say. The group's whole history is read for them once (always, with no
+	* `host.message` to read one by); after that the known rows alone, and one that waits no more is forgotten, unless
+	* it was told again while it was read.
+	*/
+	async pending(groupId) {
+		const waits = (m) => m.sender === "me" && !!m.edit?.pending;
+		const chat = chatOf(groupId), read = this.host.message;
+		if (!read || !this.learnt.has(groupId)) {
+			const rows = (await this.host.messages(chat)).filter(waits);
+			if (!read) return rows;
+			for (const m of rows) if (!this.told(groupId).has(m.id)) this.told(groupId).set(m.id, this.tick);
+			this.learnt.add(groupId);
+			return rows;
+		}
+		const known = this.told(groupId), asOf = this.tick, ids = [...known.keys()];
+		return (await Promise.all(ids.map((id) => read(chat, id)))).filter((m, i) => {
+			if (m && waits(m)) return true;
+			if ((known.get(ids[i]) ?? 0) <= asOf) known.delete(ids[i]);
+			return false;
+		});
+	}
+	told(groupId) {
+		let known = this.known.get(groupId);
+		if (!known) this.known.set(groupId, known = /* @__PURE__ */ new Map());
+		return known;
+	}
 	async find(chat, id) {
 		return this.host.message ? this.host.message(chat, id) : (await this.host.messages(chat)).find((m) => m.id === id);
 	}
@@ -26894,6 +27095,8 @@ var GroupEdits = class {
 	forget(groupId) {
 		clearTimeout(this.timers.get(groupId));
 		this.timers.delete(groupId);
+		this.known.delete(groupId);
+		this.learnt.delete(groupId);
 		this.buffer.forget(chatOf(groupId));
 	}
 	stop() {
@@ -30682,6 +30885,9 @@ var CashuWallet = class CashuWallet {
 * taken back.
 */
 var UNIT = "sat";
+/** A contact's requests in one chat: the new ones taken per minute, and how many may wait to be paid. */
+var REQUESTS_PER_MINUTE = 20;
+var OPEN_REQUESTS = 50;
 var satsWord = (n) => `${n} sat${n === 1 ? "" : "s"}`;
 /**
 * A refused send's review, once its ecash came back: why, and exactly what came back. Taking ecash back is a swap at
@@ -30748,10 +30954,32 @@ var allows = (link, method) => method === "arkade" ? link.supportsArkPayments :
 var fedimintSats = (msats) => Math.floor(msats / 1e3);
 /** The distinct wallets of a per-network set (one object may stand for both). */
 var distinct = (each) => [...new Set(WALLET_NETWORKS.map((n) => each[n]))];
+/**
+* Every payment this device keeps, with the copy of them the pages get. The copy is made again only after a payment
+* changed: a state about anything else (typing, a file's progress) carries the one already made.
+*/
+var PaymentBook = class extends Map {
+	shown = null;
+	set(id, payment) {
+		this.shown = null;
+		return super.set(id, payment);
+	}
+	delete(id) {
+		this.shown = null;
+		return super.delete(id);
+	}
+	clear() {
+		this.shown = null;
+		super.clear();
+	}
+	views() {
+		return this.shown ??= Object.fromEntries([...this].map(([id, { token: _token, ...view }]) => [id, view]));
+	}
+};
 var PaymentDesk = class {
 	wallet;
 	host;
-	payments = /* @__PURE__ */ new Map();
+	payments = new PaymentBook();
 	paying = /* @__PURE__ */ new Map();
 	receiving = /* @__PURE__ */ new Map();
 	reclaims = /* @__PURE__ */ new Map();
@@ -30813,8 +31041,9 @@ var PaymentDesk = class {
 	records() {
 		return [...this.payments.values()];
 	}
+	/** What the pages see of every payment. The same record until a payment changes: read it, never write to it. */
 	views() {
-		return Object.fromEntries([...this.payments].map(([id, { token: _token, ...view }]) => [id, view]));
+		return this.payments.views();
 	}
 	async forgetLink(linkId) {
 		const paymentStore = await store(STORES$1.payments, "readwrite");
@@ -30823,6 +31052,7 @@ var PaymentDesk = class {
 			this.payments.delete(payment.id);
 			wrap(paymentStore.delete(payment.id));
 		}
+		this.requestsFrom.delete(linkId);
 	}
 	/** `confirmedReal`: the person confirmed a Mainnet send as real money; without it one is refused. */
 	async send(params) {
@@ -31477,9 +31707,24 @@ var PaymentDesk = class {
 			endpoints: [...payment.invoice ? [[ENDPOINT.bolt11, payment.invoice]] : [], ...payment.mints?.length ? [[ENDPOINT.cashu, cashuRequestPayload(payment.mints)]] : []]
 		};
 	}
+	/** New requests taken from each chat's contact lately. */
+	requestsFrom = /* @__PURE__ */ new Map();
+	/**
+	* Whether this chat has room for one more request of its contact: twenty new ones a minute, and fifty waiting to be
+	* paid at most. One left out is not lost: the contact's app sends its open requests again on every session.
+	*/
+	roomForRequest(linkId) {
+		let recent = this.requestsFrom.get(linkId);
+		if (!recent) this.requestsFrom.set(linkId, recent = new RateWindow(REQUESTS_PER_MINUTE, 6e4));
+		if (!recent.take()) return false;
+		let open = 0;
+		for (const p of this.payments.values()) if (p.linkId === linkId && p.kind === "request" && p.direction === "in" && p.state === "pending" && ++open >= OPEN_REQUESTS) return false;
+		return true;
+	}
 	/** `held`: picked up from the contact's storage while it was away (WISP 404): only what this device allows counts, and only Cashu or Lightning. */
 	async onPaymentRequest(linkId, request, held = false) {
 		if (this.find(linkId, request.id)?.linkId === linkId) return;
+		if (!this.roomForRequest(linkId)) return;
 		if (held && (findEndpoint(request.endpoints, ENDPOINT.usdt) || findEndpoint(request.endpoints, ENDPOINT.arkade) || findEndpoint(request.endpoints, ENDPOINT.bark) || findEndpoint(request.endpoints, ENDPOINT.bitcoin) || findEndpoint(request.endpoints, ENDPOINT.fedimint) || findEndpoint(request.endpoints, ENDPOINT.spark))) return;
 		if (findEndpoint(request.endpoints, ENDPOINT.usdt)) return this.receiveUsdtRequest(linkId, request);
 		const amount = parseSats(request.amount.value, request.amount.asset);
@@ -32043,6 +32288,22 @@ var PaymentDesk = class {
 			endpoint: [ENDPOINT.usdt, JSON.stringify({ txid: review.txid })]
 		});
 	}
+	/**
+	* One payment pays one request: a receipt for a request that already has one, under another payment id,
+	* is not another payment. Nothing is stored or shown for it; a paid request is answered again.
+	*/
+	repeatedReceipt(link, request, id) {
+		let repeated = false;
+		for (const p of this.payments.values()) if (p.id !== id && p.kind === "payment" && p.direction === "in" && p.requestId === request.id && p.linkId === request.linkId && p.state !== "failed") {
+			repeated = true;
+			break;
+		}
+		if (repeated && request.state === "settled") link?.sendPaymentResult({
+			id: request.id,
+			ok: true
+		});
+		return repeated;
+	}
 	async receiveUsdt(linkId, payment) {
 		const request = payment.requestId ? this.payments.get(payment.requestId) : void 0;
 		if (!this.host.getLink(linkId)?.supportsUsdtPayments || request?.target?.method !== "usdt" || request.linkId !== linkId || request.direction !== "out" || request.kind !== "request" || payment.amount.asset !== request.unit || payment.amount.value !== String(request.amount)) return;
@@ -32055,6 +32316,7 @@ var PaymentDesk = class {
 			return;
 		}
 		if (typeof txid !== "string" || !/^0x[a-fA-F0-9]{64}$/.test(txid) || existing?.state === "settled") return;
+		if (this.repeatedReceipt(this.host.getLink(linkId), request, payment.id)) return;
 		txid = txid.toLowerCase();
 		if ([...this.payments.values()].some((p) => p.txid?.toLowerCase() === txid && (p.linkId !== linkId || (p.kind === "request" ? p.id !== request.id : p.requestId !== request.id)))) return;
 		await this.save({
@@ -32222,7 +32484,7 @@ var PaymentDesk = class {
 		}
 		if ([...this.payments.values()].some((p) => p.txid === txid && (p.linkId !== linkId || (p.kind === "request" ? p.id !== request.id : p.requestId !== request.id)))) return;
 		if (typeof txid !== "string" || !/^[a-f0-9]{64}$/.test(txid) || existing?.state === "settled") return;
-		if (!existing && [...this.payments.values()].some((p) => p.kind === "payment" && p.direction === "in" && p.requestId === request.id && p.state === "pending")) return;
+		if (this.repeatedReceipt(link, request, payment.id)) return;
 		await this.save({
 			id: payment.id,
 			linkId,
@@ -32340,6 +32602,7 @@ var PaymentDesk = class {
 		const existing = this.payments.get(payment.id);
 		if (existing && (existing.linkId !== linkId || existing.direction !== "in" || existing.requestId !== request.id)) return;
 		if (existing || parseSats(payment.amount.value, payment.amount.asset) !== request.amount) return;
+		if (this.repeatedReceipt(link, request, payment.id)) return;
 		await this.save({
 			id: payment.id,
 			linkId,
@@ -32476,6 +32739,7 @@ var PaymentDesk = class {
 			return;
 		}
 		if (typeof hint !== "string" || !/^[0-9a-f]{64}$/.test(hint)) return;
+		if (this.repeatedReceipt(link, request, payment.id)) return;
 		const settled = request.state === "settled";
 		await this.save({
 			id: payment.id,
@@ -32824,6 +33088,7 @@ var PaymentDesk = class {
 		const existing = this.payments.get(payment.id);
 		if (existing && (existing.linkId !== linkId || existing.direction !== "in" || existing.requestId !== request.id)) return;
 		if (existing || parseSats(payment.amount.value, payment.amount.asset) !== request.amount) return;
+		if (this.repeatedReceipt(link, request, payment.id)) return;
 		const settled = request.state === "settled";
 		await this.save({
 			id: payment.id,
@@ -32947,6 +33212,20 @@ var PaymentDesk = class {
 		});
 	}
 	/**
+	* A contact's receipt that still waits for its money, dropped by hand (its chat line was deleted here): the
+	* request it answers can take another receipt. Money that does arrive still pays the request.
+	*/
+	async dropReceipt(id) {
+		const payment = this.payments.get(id), request = payment?.requestId ? this.payments.get(payment.requestId) : void 0;
+		if (payment?.kind !== "payment" || payment.direction !== "in" || payment.state !== "pending" || !payment.target) return;
+		if (request?.kind !== "request" || request.direction !== "out" || request.linkId !== payment.linkId || request.target?.method !== payment.target.method) return;
+		await this.save({
+			...payment,
+			state: "failed",
+			error: "Removed here"
+		});
+	}
+	/**
 	* A request of ours closed for good: the wallet it was paid through was removed. Nothing sends it again (replay,
 	* a group edge opening), and the contact is told now when the chat is open (a request to a group: every member
 	* reachable), so their app stops offering to pay it. `reason`: shown here; `told`: what the contact reads. Returns
@@ -33847,7 +34126,7 @@ var GhostlyNode = class GhostlyNode {
 				cue: "downloaded",
 				key: fileId
 			}, this.chatOf(linkId));
-			this.noteFileEnd(linkId, fileId, record.state === "done" ? void 0 : record.error ?? record.state);
+			this.noteFileEnd(linkId, fileId, record.state === "done" ? void 0 : record.error ?? record.state, !seen);
 		}
 	});
 	stateTimer = null;
@@ -34029,6 +34308,7 @@ var GhostlyNode = class GhostlyNode {
 		descriptors: () => this.providers().lightning,
 		host: () => this.providerHost(network),
 		hasMints: () => this.networkMints(network).length > 0,
+		fetch: (...request) => (this.options.lnurlFetch ?? globalThis.fetch)(...request),
 		events: {
 			changed: () => void this.refreshWallet(),
 			received: (op) => void this.desk.onLightningPaid(op),
@@ -34459,6 +34739,8 @@ var GhostlyNode = class GhostlyNode {
 	* again those not confirmed after a while.
 	*/
 	reactionNotes = /* @__PURE__ */ new Map();
+	/** Each chat's notes shown before the one shown now, oldest first, the latest `REACTION_NOTES_KEPT` of this run. */
+	reactionNotesBefore = /* @__PURE__ */ new Map();
 	reactionsSent = /* @__PURE__ */ new Map();
 	reactionPace = /* @__PURE__ */ new Map();
 	reactionTimers = /* @__PURE__ */ new Map();
@@ -34480,9 +34762,12 @@ var GhostlyNode = class GhostlyNode {
 		message: (chat, id) => db.getMessage(chat, id),
 		patch: (chat, id, change) => db.patchMessage(chat, id, change),
 		changed: async (chat, id, note) => {
-			if (note) this.reactionNotes.set(chat, note);
-			else if (this.reactionNotes.get(chat)?.message === id) {
-				const before = latestReaction(await db.getMessages(chat));
+			const shown = this.reactionNotes.get(chat);
+			if (note) {
+				if (shown && (shown.message !== note.message || shown.by !== note.by)) this.reactionNotesBefore.set(chat, [...this.reactionNotesBefore.get(chat) ?? [], shown].slice(-8));
+				this.reactionNotes.set(chat, note);
+			} else if (shown?.message === id) {
+				const before = await this.reactionNoteNow(chat, shown);
 				if (before) this.reactionNotes.set(chat, before);
 				else this.reactionNotes.delete(chat);
 			}
@@ -34491,6 +34776,19 @@ var GhostlyNode = class GhostlyNode {
 		},
 		notify: (chat, key) => this.feedback("reaction", `${chat}:${key}`, chat)
 	});
+	/**
+	* The chat list's reaction once one to its message was taken back: the same one if it still stands, else the latest
+	* shown before it that does, each read from its own row. Only past those is the whole history read for an older one.
+	*/
+	async reactionNoteNow(chat, shown) {
+		const before = this.reactionNotesBefore.get(chat) ?? [];
+		for (let note = shown; note; note = before.pop()) {
+			const row = note.message ? await db.getMessage(chat, note.message) : void 0;
+			const standing = row && noteIfStanding(note, row);
+			if (standing) return standing;
+		}
+		return latestReaction(await db.getMessages(chat));
+	}
 	/** Private groups (WISP 900): sessions, admission on contact chats, and the pairwise edges that carry them. */
 	groups = new Groups({
 		sendOnLink: (linkId, frame) => {
@@ -35594,17 +35892,27 @@ var GhostlyNode = class GhostlyNode {
 			...this.settings.wakeMutedGroups?.includes(group.id) && { wakeMuted: true }
 		};
 	}
+	/** Per community, the members a payment here names, as read from one copy of the payments (`PaymentDesk.views`). */
+	communityPaid;
 	/** Community members payments go to (or came from), as links the payment bubbles and the composer look up by key. */
 	communityPayViews(groups) {
-		const withPayments = /* @__PURE__ */ new Map();
-		for (const p of Object.values(this.desk.views())) {
-			const at = parsePayLink(p.linkId);
-			if (at?.member) {
-				const set = withPayments.get(at.groupId) ?? /* @__PURE__ */ new Set();
-				set.add(at.member);
-				withPayments.set(at.groupId, set);
+		const payments = this.desk.views();
+		if (this.communityPaid?.of !== payments) {
+			const members = /* @__PURE__ */ new Map();
+			for (const p of Object.values(payments)) {
+				const at = parsePayLink(p.linkId);
+				if (at?.member) {
+					const set = members.get(at.groupId) ?? /* @__PURE__ */ new Set();
+					set.add(at.member);
+					members.set(at.groupId, set);
+				}
 			}
+			this.communityPaid = {
+				of: payments,
+				members
+			};
 		}
+		const withPayments = this.communityPaid.members;
 		return groups.filter((g) => g.profile === "community" && g.status === "active" && g.myKey).flatMap((g) => this.communityPay.views(g.id, g.myKey, g.members.map((m) => m.key), withPayments.get(g.id) ?? /* @__PURE__ */ new Set()));
 	}
 	/** The payment composer opened on a member of a community: ask what they take, if they did not say lately. */
@@ -36187,6 +36495,7 @@ var GhostlyNode = class GhostlyNode {
 		this.newestAt.delete(linkId);
 		this.placedAt.delete(linkId);
 		this.reactionNotes.delete(linkId);
+		this.reactionNotesBefore.delete(linkId);
 		this.events.onMessages(linkId, []);
 	}
 	async setGroupWakeMuted(groupId, muted) {
@@ -36734,7 +37043,9 @@ var GhostlyNode = class GhostlyNode {
 			card: edited.card
 		}));
 		await this.messagesChanged(linkId, [message.id]);
-		this.editsFor(linkId).flush().catch(() => {});
+		const edits = this.editsFor(linkId);
+		edits.edited(message.id);
+		edits.flush().catch(() => {});
 		return {
 			error: null,
 			messageId: message.id
@@ -36855,7 +37166,10 @@ var GhostlyNode = class GhostlyNode {
 					},
 					...done
 				};
-			}))?.edit?.pending) changed.push(message.id);
+			}))?.edit?.pending) {
+				changed.push(message.id);
+				this.editsFor(linkId).edited(message.id);
+			}
 		}
 		if (changed.length) await this.messagesChanged(linkId, changed);
 	}
@@ -36865,6 +37179,7 @@ var GhostlyNode = class GhostlyNode {
 		if (!queue) {
 			queue = new EditQueue({
 				read: () => db.getMessages(linkId),
+				row: (id) => db.getMessage(linkId, id),
 				ready: () => {
 					const live = this.links.get(linkId), link = live?.link;
 					return !!link && (link.supportsEdits || link.textDelivery === "dht" && this.takesDhtEdits(live));
@@ -37168,12 +37483,34 @@ var GhostlyNode = class GhostlyNode {
 		}));
 		return Promise.resolve();
 	}
-	/** A file transfer ended: when, on the message that carries the file. */
-	async noteFileEnd(linkId, fileId, error) {
-		const message = (await db.getMessages(linkId)).find((m) => m.file?.id === fileId);
+	/**
+	* The message that carries a file, read by its id: a file of mine is `me_<its time>`, a received one is named by its
+	* wire id (files/3, a held file) or by its sender's time (files/2). The chat's history is read only when none of
+	* those rows carries it, so a file costs the same in a long chat as in a short one.
+	*/
+	async fileMessage(linkId, fileId) {
+		const stored = await fileStore.get(fileId).catch(() => void 0);
+		const at = stored?.metadata?.timestamp, wireId = stored?.wireId;
+		const ids = !stored ? [] : fileId.startsWith(`${linkId}-out-`) ? [`me_${at}`] : [
+			`peer_${wireId}`,
+			`peer_${at}`,
+			`peer_${at}_${wireId}`
+		];
+		for (const id of ids) {
+			const message = await db.getMessage(linkId, id);
+			if (message?.file?.id === fileId) return message;
+		}
+		return (await db.getMessages(linkId)).find((m) => m.file?.id === fileId);
+	}
+	/**
+	* A file transfer ended: when, on the message that carries the file. `again`: it ended in an earlier run and is shown
+	* again as the chat connects, so what its message says of its end stays (only a receipt it never got is given).
+	*/
+	async noteFileEnd(linkId, fileId, error, again = false) {
+		const message = await this.fileMessage(linkId, fileId);
 		if (!message) return;
 		const now = Date.now();
-		await this.noteDetails(linkId, message.id, (details) => error ? message.sender === "me" && details.sends?.length ? {
+		if (!again) await this.noteDetails(linkId, message.id, (details) => error ? message.sender === "me" && details.sends?.length ? {
 			...details,
 			sends: details.sends.map((s, i) => i === details.sends.length - 1 ? {
 				...s,
@@ -37223,6 +37560,7 @@ var GhostlyNode = class GhostlyNode {
 		(async () => {
 			const message = await db.getMessage(linkId, messageId);
 			if (message?.paymentId && message.delivery === "waiting") await this.desk.withdraw(message.paymentId).catch(() => {});
+			if (message?.paymentId && message.sender === "peer") await this.desk.dropReceipt(message.paymentId).catch(() => {});
 			if (message?.sender === "me" && message.file && message.delivery === "waiting" && (message.fileOnFloor === "sent" || message.fileOnFloor === "seen")) {
 				const wireId = message.file.id.slice(`${linkId}-out-`.length);
 				live.link?.settleDht(dhtFileId(wireId)).catch(() => {});
@@ -37371,7 +37709,7 @@ var GhostlyNode = class GhostlyNode {
 		});
 		(async () => {
 			if (!reply || !forwarded) {
-				const message = (await db.getMessages(live.stored.id)).find((m) => m.id === `me_${timestamp}`);
+				const message = await db.getMessage(live.stored.id, `me_${timestamp}`);
 				reply ??= message && GhostlyNode.wireReply(message);
 				forwarded ??= message?.forwarded;
 			}
@@ -38121,8 +38459,7 @@ var GhostlyNode = class GhostlyNode {
 			error: "No button to press",
 			refused: true
 		};
-		const history = await db.getMessages(linkId);
-		const message = history.find((m) => m.id === messageId);
+		const message = await db.getMessage(linkId, messageId);
 		if (!message) return {
 			error: "That message is not in this chat",
 			refused: true
@@ -38131,6 +38468,8 @@ var GhostlyNode = class GhostlyNode {
 			error: "Buttons on your own message do nothing",
 			refused: true
 		};
+		const card = messageButtons(message);
+		const history = card && !card.closed && card.buttons.some((b) => b.once) ? await db.getMessages(linkId) : [];
 		const state = buttonsState(message, replyRef(message), history);
 		const button = state?.card.buttons.find((b) => b.id === buttonId);
 		if (!state || !button) return {
@@ -38179,8 +38518,7 @@ var GhostlyNode = class GhostlyNode {
 		if (!targets.length) throw new Error("No chat to forward to");
 		if (targets.length > 5) throw new Error(`Forward to at most 5 chats at once`);
 		if (linkId.startsWith("group:") ? !this.membership(linkId.slice(6)) : this.links.get(linkId)?.stored.group !== void 0 || !this.links.has(linkId)) throw new Error("Chat not found");
-		const history = await db.getMessages(linkId);
-		const chosen = ids.map((id) => history.find((m) => m.id === id));
+		const chosen = await Promise.all(ids.map((id) => db.getMessage(linkId, id)));
 		if (chosen.some((m) => !m)) throw new Error("That message is not in this chat");
 		const messages = chosen.sort((a, b) => a.timestamp - b.timestamp);
 		for (const message of messages) {
@@ -38512,11 +38850,11 @@ var GhostlyNode = class GhostlyNode {
 		const live = typeof linkId === "string" ? this.links.get(linkId) : void 0;
 		if (!live || live.stored.group || !live.stored.profile) throw new Error("No such chat");
 		if (!isAppRef(ref)) throw new Error("Not an app reference");
-		const { participationSeed, pairedPeerKey } = live.stored;
-		if (!participationSeed || !pairedPeerKey) throw new Error("This chat is not paired yet");
+		const mine = participationKeyOf(live), { pairedPeerKey } = live.stored;
+		if (!mine || !pairedPeerKey) throw new Error("This chat is not paired yet");
 		return {
 			live,
-			app: chatAppId(identityFromSeedB64(participationSeed).publicKey, publicKeyFromZ32(pairedPeerKey), ref)
+			app: chatAppId(publicKeyFromZ32(mine), publicKeyFromZ32(pairedPeerKey), ref)
 		};
 	}
 	/** The chat app id of an app in a paired chat: how the contact's frames name it. */
@@ -41431,7 +41769,7 @@ var GhostlyNode = class GhostlyNode {
 	get nativeFactories() {
 		const relay = this.relaysHyperdht ? this.hyperdhtRelay : "";
 		return {
-			...relay ? { "hyperdht/1": async (seedB64) => (await import("./hyperdhtRelay-DmTrpmba.js")).createRelayedHyperEndpoint(seedB64, relay) } : {},
+			...relay ? { "hyperdht/1": async (seedB64) => (await import("./hyperdhtRelay-C0XRWySP.js")).createRelayedHyperEndpoint(seedB64, relay) } : {},
 			...this.options.nativeTransports,
 			...this.ownIrohRelays ? { "iroh/1": (seedB64) => this.options.nativeTransports["iroh/1"](seedB64, this.settings.irohRelays?.length ? { relays: [...this.settings.irohRelays] } : {}) } : {},
 			...this.options.irohWeb ? { "iroh/1": (seedB64) => createIrohWebEndpoint(seedB64, { relays: this.irohRelays }) } : {}
@@ -42236,4 +42574,4 @@ function signalKind(signal) {
 //#endregion
 export { EngineServer, hyperdhtRelayProblem as n, server_exports as t };
 
-//# sourceMappingURL=server-BGXmSYx_.js.map
+//# sourceMappingURL=server-D5FBZYW8.js.map