@ghostlytools/cli 1.2.4 → 1.3.1

package/dist/assets/{server-0zfNpABQ.js → server-Ss0gJ-nw.js}

@@ -1,23 +1,28 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { $ as parseCommunityEdit, $a as receivedTimestamp, $c as identityFromSeed, $o as HANDOFF_PAKE, $r as vapidKeysMatch, $s as verifyEnrollProof, $t as signDidDhtPacket, A as encodeCommunityLink, Aa as reactionEmoji, Ac as signTurnPacket, Ai as DHT_TEXT_CAPABILITY, Ao as webLocalFetch, Ar as FILE_LIMITS, As as readHandoffTurnFrame, B as GroupWakeLimiter, Bc as normalizeRelayUrl, Bi as identityRevocationValue, Bn as INVITE_TAKEN, Br as mayPin, C as openGroupTyping, Ca as readForwarded, Cc as classifyTurnRead, Co as DHT_POLL_INTERVALS, Cr as pickHubs, Cs as newHandoffId, D as GROUP_READ_NOTE_COMMUNITY, Da as ReactionWindow, Dc as firstDeviceSetSecret, Do as GhostlyHttpError, Dr as readLobby, Ds as readHandoffHave, E as CommunitySession, Ea as REACTION_LIMITS, Ec as TURN_MAX, Eo as presenceSeenAt, Er as readBeaconHead, Es as readHandoffDone, F as knockIdentity, Fa as pairedReplyAuthor, Fc as turnStatedVerifier, Fi as IDENTITY_REVOCATION_LABEL, Fn as findEndpoint, Fo as RTC_CONFIG, Fr as TypingSender, Fs as readSetUpdate, Gc as withRequestOptions, Gi as lastSharedWithMe, Gn as GROUP_FILE_LIMITS, Go as LEGACY_SERVICES, Gr as WAKE_CALL_INTERVAL_MS, Gs as enrollCancelReason, H as groupWakes, Hc as traceLink, Hi as newIdentityBinding, Hn as pairedMessageFrame, Hr as pinIsNewer, I as knockRecords, Ia as readReply, Ic as turnVerifierMark, In as isFederationId, Is as setAckFrame, J as frameBytes, Ja as sameButtonText, Jc as createRelayPayload, Ji as validExternalKey, Jo as HANDOFF_CANCEL, Jr as newWakeToken, Js as enrollGrantFrame, Jt as didDhtDocument, K as GROUP_READ_NOTE, Kc as PacketTooLargeError, Ki as PeerProofs, Ko as serviceIdFromName, Kr as WakeLimiter, Ks as enrollDigits, L as mergeKnocks, La as replySnippet, Lc as DEFAULT_RELAYS, Li as IdentityExchange, Ln as parseCashuRequestPayload, Lr as typingActivity, Ls as setUpdateFrame, M as decodeGroupEntryLink, Ma as readReaction, Mc as turnInstance, Mi as dialDescriptors, Mn as ENDPOINT, Mo as decodeControl, Mr as transferStalled, Ms as sealHandoffPiece, N as encodeGroupEntryLink, Na as validReactionNumber, Nc as turnKeys, Nn as cashuRequestPayload, No as encodeControl, O as communityHasFrame, Oa as nextReactionNumber, Oc as nextTurnPosition, Oo as formatLocalTarget, Or as shouldBeHub, Os as readHandoffHello, P as entryParams, Pa as wireReaction, Pc as turnName, Pn as fedimintRequestPayload, Q as carryMentions, Qa as heardTime, Qc as createIdentity, Qn as readGroupFileMeta, Qo as HANDOFF_OFFER, Qr as checkPushEndpoint, Qs as readEnrollHello, R as readKnocks, Ra as BUTTON_ID, Rc as RelayTransport, Rn as parseFedimintRequestPayload, Rs as signTombstone, S as groupTypingEpoch, Sa as forwardedAgain, Sc as TURN_SETTLE_MS, So as DirectPathWatch, Sr as newerHead, Ss as handoffVersions, St as normalizeAtprotoHandle, T as COMMUNITY_LIMITS, Ta as GROUP_REACTION_FRAME, Tc as TURN_LAST_SEQUENCE, To as RELAY_POLL_INTERVALS, Tr as readBeacon, Ts as readHandoffCancel, U as parseGroupWakeFrame, Ua as STATUS_CARD_LIMITS, Uc as budgetRetryMs, Ui as receivedIdentityStatus, Un as engineError, Uo as emptyLinkRecords, Ur as pinNumberHolds, V as groupWakeFrame, Vi as identityStatement, Vn as LIVENESS_PING_MS, Vo as parseCallSignal, Vr as nextPinNumber, W as GROUP_LIMITS, Wc as isDiscoveryBudgetError, Wi as revokesIdentity, Wn as engineText, Wo as HTTP_SERVICE_PROTO, Wr as readPin, Ws as enrollCancelFrame, Xa as arrivalKey, Xi as automaticTransport, Xn as groupFileFallback, Xo as HANDOFF_HAVE, Xr as relayRequest, Xs as enrollProofFrame, Xt as encodeDidDhtDeactivated, Ya as statusCardText, Yi as TRANSPORTS, Yo as HANDOFF_DONE, Yr as parseWakeFrame, Ys as enrollHelloFrame, Yt as didDhtFromPublicKey, Z as GROUP_EDIT_TEXT_BYTES, Za as claimedTime, Zo as HANDOFF_HELLO, Zr as wakeRequest, Zs as readEnrollGrant, Zt as encodeDidDhtPacket, _a as EDIT_BUFFER_MS, _c as newDeviceSetSecret, _n as sparkInvoiceDetails, _o as MEMBER_KEY, _r as freshHubs, _s as handoffOfferFrame, a as planAppUpdate, ac as decodeInviteCode, ai as STATUS_CARD_CAPABILITY, al as bytesEqual, as as handoffAttemptAllowed, ba as dhtEditId, bn as isPubkyKey, bo as verifyCommitSignature, br as mergeBeacon, bs as handoffRetryAfter, ca as sanitizeFileName, cc as inviteOwnership, ci as HOLD_DATED_BACK_MS, cl as toBase64Url, cn as WALLET_NETWORKS, co as readAppRevocation, cr as readGroupSignal, cs as handoffBusyFrame, d as APP_BUNDLE_LIMITS, dc as HANDOFF_CAPABILITY, di as HoldRefusedError, dl as utf8Encode, dn as formatPaymentAmount, dr as meshHubs, ds as handoffContextProof, ea as DHT_MESSAGE_TTL, ec as createDeviceInvite, ei as chatAppId, el as identityFromSeedB64, en as ETHEREUM_USDT, eo as shownTime, es as HANDOFF_PIECE_BYTES, et as mentionsMember, f as APP_BUNDLE_MAGIC, fc as deviceEchoFrame, fi as isHoldUrl, fn as validatePaymentTarget, fo as canonicalJson, fr as pickMeshHubs, fs as handoffDataFrame, ga as parseVideoMeta, gc as devicePingFrame, gn as sparkAddressKind, gr as doorHubs, gs as handoffManifestFrames, h as appViewOf, hc as deviceLinkPairing, hn as SPARK_PROVIDER, ho as GROUP_MEMBER_CAP, hr as beaconRecords, hs as handoffHelloFrame, i as checkAppBeforeRun, ia as parseImageMeta, ic as createChatInvite, ii as EDIT_CAPABILITY, il as sanitizeAvatar, in as SEPOLIA_TEST_USDT, io as appRef, is as filePartName, ja as reactionIsNewer, jc as signTurnRelease, ji as capsDescriptors, jn as decodeBolt11, jo as LIMITS, jr as transferEnded, js as readHandoffVerified, k as decodeCommunityLink, ka as queueReaction, kc as readTurnPacket, ki as CapsExchange, ko as parseLocalTarget, kr as ChatFiles, ks as readHandoffPake, l as readAppStoreSteps, la as sanitizeMime, lc as DEVICES_CAPABILITY, li as HOLD_LIMITS, ll as toZ32, ln as assertTokenUnits, lr as MESH_HUBS, ls as handoffCancelFrame, m as appDigest, ma as parseVoiceMeta, mc as deviceKeyZ32, mi as readManifest, mn as SPARK_NETWORKS, mo as readCanonicalJson, mr as beaconKeys, ms as handoffEphemeral, n as appStoreDecision, na as DHT_FILE_CAPABILITY, nc as readDeviceInvite, ni as APPS_CAPABILITY, nl as verify, nn as ONCHAIN_PROVIDER, no as APP_STATEMENT_LIMITS, nr as CarriedTransport, ns as HANDOFF_TIMINGS, o as APP_STORE_LIMITS, oa as formatFileSize, oc as encodeInviteCode, oi as UPGRADE_CAPABILITY, ol as fromBase64Url, on as TEST_USDT_FAUCET_AMOUNT, oo as isAppKey, os as handoffAttemptFailed, pa as fileMessageText, pc as deviceEchoNonce, pi as newMailbox, pn as walletNetworkOf, pr as COMMUNITY_TOPOLOGY, ps as handoffDigest, q as GroupSession, qa as checkStatusCard, qi as emptyProofLedger, qo as HANDOFF_ACK, qr as deviceWakeRequest, qs as enrollDoneFrame, r as appUpdateDecision, ra as dhtFileId, rc as OwnInviteError, ri as BUTTONS_CAPABILITY, rn as PaymentPreflightError, ro as appFingerprint, rs as HANDOFF_VERIFIED, sa as safeBlobType, si as HOLD_CAPABILITY, sl as randomBytes, sn as USDT_PUBLIC_RPC, so as isAppRef, sr as groupSignalFrame, ss as handoffAttemptSucceeded, t as appRevocationFor, ta as peekDhtMailbox, tc as deviceInviteJoinerParams, ti as isAppVersion, tl as publicKeyFromZ32, tn as EVM_TEST_CHAINS, ts as HANDOFF_REQUEST, tt as groupName, uc as ENROLL_CAPABILITY, ui as HoldKeys, ul as utf8Decode, un as assertWholeSats, ur as mayBeHub, us as handoffContext, v as isAppUrl, va as EDIT_RATE_WINDOW_MS, vc as seedSigner, vn as isBitcoinAddress, vo as commitHash, vr as lobbyKeys, vs as handoffPakeFrame, w as sealGroupTyping, wa as COMMUNITY_REACTION_FRAME, wc as turnPutSummary, wr as rankHubs, ws as readHandoffAck, x as GroupTypingBoard, xa as parseLinkPreview, xc as TURN_RAISE_READ_TIMEOUT_MS, xo as edgeParams, xr as mergeLobby, xs as handoffStreamKey, xt as isAtprotoDid, y as readAppBundle, ya as RateWindow, yc as webCryptoSigner, yo as rosterHas, yr as lobbyRecords, ys as handoffReleaseFrame, zc as currentRelays, zi as emptyIdentityLedger, zn as GhostLink, zr as PIN_LIMITS, zs as verifySetUpdate } from "./src-CbLkHfz8.js";
-import { a as clearProfileStores, c as fileStore, d as profileOpenFailure, f as store, i as STORES$1, l as newestWalletTx, m as wrap, n as APP_STORAGE_SCOPE_INDEX, o as databaseName, p as transact, r as CARD_INDEX, s as deleteDatabase, t as APP_STORAGE_CHAT_INDEX, u as openDb } from "./idb-CTF6LF5B.js";
-import { a as fileBytesOf, c as removeFileBytes, i as fileBytes, l as FILE_BYTES_STEP, n as blobDigest } from "./fileBytes-BcYZhNgF.js";
-import { $ as BACKUP_MEDIA_TYPE, A as requireTurn, At as paymentWireId, B as networkLabel, C as breezDatabasesFor, Ct as storedGroupFiles, D as sourceKey, Dt as replyRef, E as ProviderSources, Et as receivedPairedReply, F as sealSeed, Ft as streamStored, G as BITCOIN_INVOICE_ON_TESTNET, H as cashuMint, I as unsealSeed, J as fakesLightning, K as DEFAULT_MINTS, L as ModeChanged, M as setSingleWriterGate, Mt as readStored$1, N as intentRepository, Nt as removeStored, O as awayFrom, Ot as replyTo, P as newDeviceKey, Pt as storedSize, Q as paysItsOwnInvoices, R as ModeGate, S as breezDatabaseInUse, St as groupOfFile, T as lightningPaying, Tt as pairedWireReply, V as CASHU_MINT_SOURCE, W as WALLET_TYPES, X as isWorthlessMint, Y as isTestMint, Z as mintNetwork, _ as LightningCards, _t as verifyIdentity, a as irohRelayProblem, at as reserveAdapterIds, b as normalizePhrase, bt as groupFileId, c as createFailure, ct as SourceConfigError, d as paymentNetwork, dt as networkMode, et as MAX_BACKUP_BYTES, f as paymentNetworksOf, ft as redact, g as CASHU_CARD, gt as boundedIdentityFetch, ht as setOwnDidSource, i as createIrohWebEndpoint, it as registeredOnchainProviders, j as setAwayWallets, jt as FileAppender, k as refuseAway, kt as paymentAlias, l as createTiming, lt as SourceUnreachableError, mt as resolveAtprotoDid, n as loadFedimintSdk, nt as onAdaptersChanged, o as WALLET_NAMES, ot as NothingSpentError, p as walletInstances, pt as assertPublicServer, q as TEST_MINT, r as DEFAULT_IROH_RELAYS, rt as registeredLightningProviders, s as assertConfirmedReal, st as PROVIDER_PLATFORMS, t as fedimintDatabase, tt as identityProviders, u as crossNetwork, ut as isNothingSpentError, v as cardsKey, vt as chosenResolver, w as dropBreezDatabase, wt as groupReply, x as breezDatabase, xt as groupFileText, y as isRecoveryPhrase, yt as GroupFileDesk, z as WrongNetworkError } from "../ghostly.mjs";
-import { n as traceJoin } from "./joinTrace-CO8mlhNO.js";
+import { n as traceJoin } from "./joinTrace-CjRDFy85.js";
+import { $c as budgetRetryMs, $i as PeerProofs, $o as HTTP_SERVICE_PROTO, $r as deviceWakeRequest, $s as enrollCancelFrame, $t as didDhtFromPublicKey, A as CommunitySession, Aa as COMMUNITY_REACTION_FRAME, Ao as DirectPathWatch, Ar as rankHubs, As as handoffStreamKey, B as knockRecords, Ba as wireReaction, Bc as signTurnPacket, Bn as isFederationId, Bo as LIMITS, Bs as readHandoffVerified, C as sha256Paced, Ca as EDIT_BUFFER_MS, Cc as deviceEchoNonce, Co as GROUP_MEMBER_CAP, Cr as freshHubs, Cs as handoffEphemeral, D as openGroupTyping, Da as parseLinkPreview, Dc as newDeviceSetSecret, Do as rosterHas, Dr as mergeLobby, Ds as handoffPakeFrame, E as groupTypingEpoch, Ea as dhtEditId, Ec as devicePingFrame, Eo as commitHash, Er as mergeBeacon, Es as handoffOfferFrame, Et as normalizeAtprotoHandle, Fa as queueReaction, Fc as TURN_LAST_SEQUENCE, Fn as decodeBolt11, Fo as presenceSeenAt, Fr as ChatFiles, Fs as readHandoffDone, G as groupWakeFrame, Gc as turnStatedVerifier, Gn as LIVENESS_PING_MS, Gr as PIN_LIMITS, Gs as setAckFrame, H as readKnocks, Ha as readReply, Hc as turnInstance, Hi as IDENTITY_REVOCATION_LABEL, Hn as parseFedimintRequestPayload, Ho as encodeControl, I as decodeGroupEntryLink, Ia as reactionEmoji, Ic as TURN_MAX, Ii as CapsExchange, In as ENDPOINT, Io as GhostlyHttpError, Ir as FILE_LIMITS, Is as readHandoffHave, J as GROUP_LIMITS, Jc as RelayTransport, Ji as identityStatement, Jn as pairedMessageFrame, Jr as pinIsNewer, Js as verifySetUpdate, K as groupWakes, Kc as turnVerifierMark, Ki as emptyIdentityLedger, Kn as PAIRED_FRAME_TOO_LARGE, Kr as mayPin, Ks as setUpdateFrame, L as encodeGroupEntryLink, La as reactionIsNewer, Lc as firstDeviceSetSecret, Li as DHT_TEXT_CAPABILITY, Ln as cashuRequestPayload, Lo as formatLocalTarget, Lr as transferEnded, Ls as readHandoffHello, M as communityHasFrame, Ma as REACTION_LIMITS, Mc as TURN_SETTLE_MS, Mo as DHT_POLL_INTERVALS, Mr as readBeaconHead, Ms as newHandoffId, N as decodeCommunityLink, Na as ReactionWindow, Nc as classifyTurnRead, Nr as readLobby, Ns as readHandoffAck, O as sealGroupTyping, Oa as forwardedAgain, Oc as seedSigner, Oo as verifyCommitSignature, Or as newerHead, Os as handoffReleaseFrame, P as encodeCommunityLink, Pa as nextReactionNumber, Pc as turnPutSummary, Po as RELAY_POLL_INTERVALS, Pr as shouldBeHub, Ps as readHandoffCancel, Q as frameBytes, Qc as traceLink, Qi as lastSharedWithMe, Qo as emptyLinkRecords, Qr as WakeLimiter, Qt as didDhtDocument, R as entryParams, Ra as readReaction, Rc as nextTurnPosition, Ri as capsDescriptors, Rn as fedimintRequestPayload, Ro as parseLocalTarget, Rr as transferStalled, Rs as readHandoffPake, S as readAppBundleAsync, Sa as parseVideoMeta, Sc as deviceEchoFrame, Sn as isBitcoinAddress, So as readCanonicalJson, Sr as doorHubs, Ss as handoffDigest, T as GroupTypingBoard, Ta as RateWindow, Tc as deviceLinkPairing, To as MEMBER_KEY, Tr as lobbyRecords, Ts as handoffManifestFrames, Tt as isAtprotoDid, Ua as replySnippet, Uc as turnKeys, Un as GhostLink, Ur as typingActivity, V as mergeKnocks, Va as pairedReplyAuthor, Vc as signTurnRelease, Vn as parseCashuRequestPayload, Vo as decodeControl, Vr as TypingSender, Vs as sealHandoffPiece, W as GroupWakeLimiter, Wa as BUTTON_ID, Wc as turnName, Wi as IdentityExchange, Wn as INVITE_TAKEN, Wo as RTC_CONFIG, Ws as readSetUpdate, X as GROUP_READ_NOTE, Xc as normalizeRelayUrl, Xi as receivedIdentityStatus, Xn as engineText, Xo as parseCallSignal, Xr as readPin, Ya as STATUS_CARD_LIMITS, Yc as currentRelays, Yi as newIdentityBinding, Yn as engineError, Yr as pinNumberHolds, Z as GroupSession, Zi as revokesIdentity, Zn as GROUP_FILE_LIMITS, Zr as WAKE_CALL_INTERVAL_MS, _c as inviteOwnership, _i as HoldKeys, _l as randomBytes, _n as walletNetworkOf, _r as meshHubs, _s as handoffBusyFrame, a as planAppUpdate, ac as enrollProofFrame, ai as vapidKeysMatch, an as EVM_TEST_CHAINS, ao as heardTime, as as HANDOFF_HAVE, at as groupName, b as pacer, ba as parseVoiceMeta, bc as ENROLL_CAPABILITY, bi as newMailbox, bl as utf8Decode, bn as sparkAddressKind, bo as canonicalJson, br as beaconKeys, bs as handoffContextProof, ca as peekDhtMailbox, cc as verifyEnrollProof, ci as isAppVersion, cl as createIdentity, cn as SEPOLIA_TEST_USDT, cr as CarriedTransport, cs as HANDOFF_PAKE, d as APP_BUNDLE_LIMITS, da as parseImageMeta, dc as readDeviceInvite, di as EDIT_CAPABILITY, dl as publicKeyFromZ32, dn as USDT_PUBLIC_RPC, do as appRef, ds as HANDOFF_TIMINGS, ea as emptyProofLedger, ec as enrollCancelReason, ei as newWakeToken, el as isDiscoveryBudgetError, en as encodeDidDhtDeactivated, eo as checkStatusCard, es as LEGACY_SERVICES, f as APP_BUNDLE_MAGIC, fc as OwnInviteError, fi as STATUS_CARD_CAPABILITY, fl as verify, fn as WALLET_NETWORKS, fs as HANDOFF_VERIFIED, g as appViewOf, gi as HOLD_LIMITS, gl as fromBase64Url, gn as validatePaymentTarget, go as readAppRevocation, gr as mayBeHub, gs as handoffAttemptSucceeded, h as appDigest, ha as sanitizeMime, hc as encodeInviteCode, hi as HOLD_DATED_BACK_MS, hl as bytesEqual, hn as formatPaymentAmount, ho as isAppRef, hr as MESH_HUBS, hs as handoffAttemptFailed, i as checkAppBeforeRun, ic as enrollHelloFrame, ii as checkPushEndpoint, il as createRelayPayload, in as ETHEREUM_USDT, io as claimedTime, ir as readGroupFileMeta, is as HANDOFF_DONE, it as mentionsMember, j as GROUP_READ_NOTE_COMMUNITY, ja as GROUP_REACTION_FRAME, jc as TURN_RAISE_READ_TIMEOUT_MS, jr as readBeacon, js as handoffVersions, k as COMMUNITY_LIMITS, ka as readForwarded, kc as webCryptoSigner, ko as edgeParams, kr as pickHubs, ks as handoffRetryAfter, l as readAppStoreSteps, la as DHT_FILE_CAPABILITY, lc as createDeviceInvite, li as APPS_CAPABILITY, ll as identityFromSeed, lo as APP_STATEMENT_LIMITS, ls as HANDOFF_PIECE_BYTES, ma as sanitizeFileName, mc as decodeInviteCode, mi as HOLD_CAPABILITY, ml as sanitizeAvatar, mn as assertWholeSats, mo as isAppKey, mr as readGroupSignal, ms as handoffAttemptAllowed, n as appStoreDecision, na as TRANSPORTS, nc as enrollDoneFrame, ni as relayRequest, nl as PacketTooLargeError, no as statusCardText, nr as groupFileFallback, ns as HANDOFF_ACK, nt as carryMentions, o as APP_STORE_LIMITS, oc as readEnrollGrant, on as ONCHAIN_PROVIDER, oo as receivedTimestamp, os as HANDOFF_HELLO, p as APP_ICON_PATH, pa as formatFileSize, pc as createChatInvite, pi as UPGRADE_CAPABILITY, pn as assertTokenUnits, po as isAppHash, pr as groupSignalFrame, ps as filePartName, q as parseGroupWakeFrame, qc as DEFAULT_RELAYS, qi as identityRevocationValue, qn as pairedMessageFits, qr as nextPinNumber, qs as signTombstone, r as appUpdateDecision, ra as automaticTransport, rc as enrollGrantFrame, ri as wakeRequest, rn as signDidDhtPacket, ro as arrivalKey, rs as HANDOFF_CANCEL, rt as parseCommunityEdit, sa as DHT_MESSAGE_TTL, sc as readEnrollHello, si as chatAppId, sn as PaymentPreflightError, so as shownTime, ss as HANDOFF_OFFER, t as appRevocationFor, ta as validExternalKey, tc as enrollDigits, ti as parseWakeFrame, tl as withRequestOptions, tn as encodeDidDhtPacket, to as sameButtonText, ts as serviceIdFromName, tt as GROUP_EDIT_TEXT_BYTES, ua as dhtFileId, uc as deviceInviteJoinerParams, ui as BUTTONS_CAPABILITY, ul as identityFromSeedB64, un as TEST_USDT_FAUCET_AMOUNT, uo as appFingerprint, us as HANDOFF_REQUEST, vi as HoldRefusedError, vl as toBase64Url, vn as SPARK_NETWORKS, vr as pickMeshHubs, vs as handoffCancelFrame, wa as EDIT_RATE_WINDOW_MS, wc as deviceKeyZ32, wn as isPubkyKey, wr as lobbyKeys, ws as handoffHelloFrame, xc as HANDOFF_CAPABILITY, xi as readManifest, xl as utf8Encode, xn as sparkInvoiceDetails, xr as beaconRecords, xs as handoffDataFrame, y as isAppUrl, ya as fileMessageText, yc as DEVICES_CAPABILITY, yi as isHoldUrl, yl as toZ32, yn as SPARK_PROVIDER, yr as COMMUNITY_TOPOLOGY, ys as handoffContext, z as knockIdentity, za as validReactionNumber, zc as readTurnPacket, zi as dialDescriptors, zn as findEndpoint, zo as webLocalFetch, zs as readHandoffTurnFrame } from "./src-DDzSERyc.js";
+import { i as SourceUnreachableError, n as PROVIDER_PLATFORMS, o as isNothingSpentError, r as SourceConfigError, t as NothingSpentError, u as redact } from "./types-C4_KafL_.js";
+import { t as bitcoindRpc } from "./bitcoindProvider-DGw3xBSa.js";
+import { t as nwc } from "./nwcProvider-4eVz_8HP.js";
+import { a as clearProfileStores, c as fileStore, d as profileOpenFailure, f as store, i as STORES$1, l as newestWalletTx, m as wrap, n as APP_STORAGE_SCOPE_INDEX, o as databaseName, p as transact, r as CARD_INDEX, s as deleteDatabase, t as APP_STORAGE_CHAT_INDEX, u as openDb } from "./idb-B5L8wuOm.js";
+import { a as sealSeed, i as newDeviceKey, o as unsealSeed, r as intentRepository } from "./networkReason-CetKkTPo.js";
+import { $ as setSingleWriterGate, A as LightningCards, B as breezDatabaseInUse, C as FileAppender, D as streamStored, E as storedSize, F as ProviderSources, G as ModeChanged, H as dropBreezDatabase, I as sourceKey, J as networkLabel, K as ModeGate, L as CASHU_MINT_SOURCE, M as isRecoveryPhrase, N as normalizePhrase, P as lightningPaying, Q as setAwayWallets, R as cashuMint, S as WALLET_TYPES, T as removeStored, U as iceServerProblem, V as breezDatabasesFor, W as iceServerSetting, X as refuseAway, Y as awayFrom, Z as requireTurn, _ as crossNetwork, a as storedGroupFiles, b as walletInstances, c as receivedPairedReply, d as paymentAlias, f as paymentWireId, g as createTiming, h as createFailure, i as groupOfFile, j as cardsKey, k as CASHU_CARD, l as replyRef, m as assertConfirmedReal, n as groupFileId, o as groupReply, p as WALLET_NAMES, q as WrongNetworkError, r as groupFileText, s as pairedWireReply, t as GroupFileDesk, u as replyTo, v as paymentNetwork, w as readStored$1, y as paymentNetworksOf, z as breezDatabase } from "./groupFiles-IEUW3DQz.js";
+import { i as fedimintDatabase, n as createIrohWebEndpoint, o as loadFedimintSdk, r as irohRelayProblem, t as DEFAULT_IROH_RELAYS } from "./irohWeb-4oChIOIp.js";
+import { c as isTestMint, d as paysItsOwnInvoices, l as isWorthlessMint, n as DEFAULT_MINTS, o as fakesLightning, r as TEST_MINT, t as BITCOIN_INVOICE_ON_TESTNET, u as mintNetwork } from "./mints-BrlY773j.js";
+import { _ as reserveAdapterIds, f as setOwnDidSource, g as registeredOnchainProviders, h as registeredLightningProviders, l as chosenResolver, n as resolveAtprotoDid, p as onAdaptersChanged, t as assertPublicServer, v as boundedIdentityFetch, y as verifyIdentity } from "./resolve-CouHhCpJ.js";
+import { c as fileSpace, f as FILE_BYTES_STEP, o as fileBytes, r as blobDigest, s as fileBytesOf, u as removeFileBytes } from "./fileBytes-Di7VZtmU.js";
+import { n as MAX_BACKUP_BYTES, t as BACKUP_MEDIA_TYPE } from "./envelope-WjingYSc.js";
+import { t as hyperdhtRelayProblem } from "./hyperdhtRelay-BT_wRxab.js";
 import { hkdf } from "@noble/hashes/hkdf.js";
 import { sha256 } from "@noble/hashes/sha2.js";
 import { base64, base64url, base64urlnopad, bech32, hex } from "@scure/base";
 import { bytesToHex, concatBytes, hexToBytes, utf8ToBytes } from "@noble/hashes/utils.js";
 import { chacha20poly1305 } from "@noble/ciphers/chacha.js";
 import { secp256k1 } from "@noble/curves/secp256k1.js";
-import { wordlist } from "@scure/bip39/wordlists/english.js";
-import { decode, noteEncode, npubEncode } from "nostr-tools/nip19";
-import { finalizeEvent, getPublicKey, verifyEvent } from "nostr-tools/pure";
+import { verifyEvent } from "nostr-tools/pure";
 import { generateMnemonic, mnemonicToSeedSync, validateMnemonic } from "@scure/bip39";
+import { wordlist } from "@scure/bip39/wordlists/english.js";
 import { Amount, MeltChangeError, OutputData, Wallet, decodePaymentRequest, deserializeSwapPreview, getEncodedToken, getTokenMetadata, isMintOperationError, serializeSwapPreview } from "@cashu/cashu-ts";
-import { Address, OutScript, Transaction } from "@scure/btc-signer";
-import * as nip04 from "nostr-tools/nip04";
-import * as nip44 from "nostr-tools/nip44";
+import { decode, noteEncode, npubEncode } from "nostr-tools/nip19";
 /** Evidence older than this says nothing about the clock now. */
 var CLOCK_EVIDENCE_MS = 18e5;
 /** Sources kept of each kind: a profile has a few relays, and may have hundreds of contacts. */
@@ -178,9 +183,23 @@ async function migrateWalletNetworks(now = Date.now()) {
 	return report;
 }
 //#endregion
+//#region ../browser/src/engine/paymentAdapters/viewNews.ts
+/**
+* Whether a wallet's view reads otherwise after a poll: only then is the poll news to the engine, which makes the whole
+* wallet view again for it. Compared as written, not by reference: a poll builds its history and expiry anew each time.
+* A view that cannot be written out is news.
+*/
+function viewNews(before, after) {
+	try {
+		return JSON.stringify(before) !== JSON.stringify(after);
+	} catch {
+		return true;
+	}
+}
+//#endregion
 //#region ../browser/src/engine/paymentAdapters/usdtWallet.ts
 /** The Ethereum libraries, a large part of the app: loaded once a USDT wallet is made, opened or restored, not with the engine. */
-var loadUsdt = () => import("./usdt-Qf4UuygS.js");
+var loadUsdt = () => import("./usdt-Fj8CQO2z.js");
 /** Every new profile starts with this wallet: an address to receive on, nothing to set up. */
 var DEFAULT_USDT = {
 	network: "ethereum",
@@ -217,6 +236,7 @@ var UsdtWallet = class {
 		balance: "0",
 		gasBalance: "0"
 	};
+	/** `changed(false)`: a balance read that found nothing new; the receipts are checked, the wallet view stays. */
 	constructor(network, changed) {
 		this.network = network;
 		this.changed = changed;
@@ -403,6 +423,7 @@ var UsdtWallet = class {
 		clearTimeout(this.timer);
 		const adapter = this.adapter;
 		if (!adapter) return;
+		const before = this.view;
 		try {
 			const address = await this.gate.within(adapter.address()), balances = await this.gate.within(adapter.balances());
 			if (adapter !== this.adapter) return;
@@ -422,7 +443,7 @@ var UsdtWallet = class {
 				error: "RPC unavailable. Balance may be stale."
 			};
 		}
-		this.changed();
+		this.changed(viewNews(before, this.view));
 		if (this.adapter) this.timer = setTimeout(() => void this.refresh(), 8e3);
 	}
 	/** Testnet on Sepolia: 1,000 TEST-USDT from Aave's faucet, paid with this wallet's own test ETH. */
@@ -529,21 +550,6 @@ var UsdtWallet = class {
 	}
 };
 //#endregion
-//#region ../browser/src/shared/ice.ts
-/**
-* What is wrong with a TURN/STUN server, or null. Browsers refuse to create any WebRTC connection when
-* one server in the list is malformed, so a bad entry here would silently cut off calls and files.
-*/
-function iceServerProblem(server) {
-	const urls = server.urls.split(/[\s,]+/).filter(Boolean);
-	if (!urls.length) return "Enter the TURN server address";
-	for (const url of urls) {
-		if (!/^(stun|turns?):[^\s/?#]+(\?transport=(udp|tcp))?$/i.test(url)) return `“${url}” is not a TURN or STUN address (turn:host:port)`;
-		if (/^turns?:/i.test(url) && (!server.username?.trim() || !server.credential?.trim())) return "A TURN server needs its username and credential";
-	}
-	return null;
-}
-//#endregion
 //#region ../browser/src/engine/paymentAdapters/backup.ts
 /**
 * Wallet database versions a backup may carry. 3 is what SDK 0.4.74-0.4.76 made (Ghostly 1.1.3 and earlier);
@@ -642,7 +648,7 @@ async function restoreArkDatabase(walletId, snapshot) {
 //#endregion
 //#region ../browser/src/engine/paymentAdapters/arkWallet.ts
 /** The Ark SDK, a large part of the app: loaded once an Ark wallet is made, opened or restored, not with the engine. */
-var loadArkade = () => import("./arkade-CdnKGDbg.js");
+var loadArkade = () => import("./arkade-C_qDmHnm.js");
 /** How long a Testnet wallet about to make way for another waits for its server to say what it holds. */
 var RETIRE_READ_MS = 1e4;
 /** Every new profile starts with this wallet: nothing to set up before receiving. */
@@ -693,6 +699,7 @@ var ArkWallet = class {
 		locked: true,
 		balance: 0
 	};
+	/** `changed(false)`: a balance read that found nothing new; the receipts are checked, the wallet view stays. */
 	constructor(network, changed) {
 		this.network = network;
 		this.changed = changed;
@@ -1001,6 +1008,7 @@ var ArkWallet = class {
 		});
 		if (this.adapter !== adapter) return;
 		const balancesRead = this.view.read || !failed.some((what) => what === "balance" || what === "incoming" || what === "recoverable");
+		const before = this.view;
 		this.view = {
 			configured: true,
 			locked: false,
@@ -1018,7 +1026,7 @@ var ArkWallet = class {
 			...expiresAt !== void 0 ? { expiresAt } : {},
 			error: failed.length ? `Could not read the ${failed.join(", ")} from the Ark provider. Last values may be stale.` : void 0
 		};
-		this.changed();
+		this.changed(viewNews(before, this.view));
 		if (this.adapter) this.timer = setTimeout(() => void this.refresh(), 1e4);
 	}
 	/** Swept outputs back into the balance (refused while expired ones wait for the sweep); the next refresh shows them. */
@@ -1086,10 +1094,10 @@ var NETWORK = {
 	signet: "Signet",
 	regtest: "Regtest"
 };
-var loading$3;
+var loading$4;
 /** Loads the WebAssembly once, on first use: profiles that never open a Bark wallet never fetch its 7.7 MB. */
 function loadBarkSdk() {
-	return loading$3 ??= (async () => {
+	return loading$4 ??= (async () => {
 		const [bark, wasm] = await Promise.all([import("@secondts/bark/web"), import("./bark_ffi_wasm_bg-EY2uc0Bx.js")]);
 		await bark.default({ module_or_path: wasm.default });
 		return {
@@ -1128,7 +1136,7 @@ function loadBarkSdk() {
 			}
 		};
 	})().catch((error) => {
-		loading$3 = void 0;
+		loading$4 = void 0;
 		throw error;
 	});
 }
@@ -1493,6 +1501,7 @@ var BarkWallet = class {
 		locked: true,
 		balance: 0
 	};
+	/** `changed(false)`: a balance read that found nothing new; the receipts are checked, the wallet view stays. */
 	constructor(network, changed, sdk = loadBarkSdk) {
 		this.network = network;
 		this.changed = changed;
@@ -1778,6 +1787,7 @@ var BarkWallet = class {
 		}
 		if (this.adapter !== adapter) return;
 		const balancesRead = this.view.read || balance !== void 0 && onchain !== void 0;
+		const before = this.view;
 		this.view = {
 			...this.idle(adapter.config),
 			locked: false,
@@ -1792,7 +1802,7 @@ var BarkWallet = class {
 			expiry,
 			error: failed.length ? `Could not read the ${failed.join(", ")} from the Bark server. Last values may be stale.` : void 0
 		};
-		this.changed();
+		this.changed(viewNews(before, this.view));
 		if (this.adapter) this.timer = setTimeout(() => void this.refresh(), 1e4);
 	}
 	/** On-chain coins into Ark: the board confirms on-chain, then they are spendable. */
@@ -2649,10 +2659,10 @@ var FedimintAdapter = class {
 };
 //#endregion
 //#region ../browser/src/engine/paymentAdapters/providers/breezSdk.ts
-var loading$2;
+var loading$3;
 /** Loads the WebAssembly once, on first use: profiles that never pick Breez never fetch its 12.8 MB. */
 function loadBreezSdk() {
-	return loading$2 ??= (async () => {
+	return loading$3 ??= (async () => {
 		const breez = await import("./web-DwgdhfcY.js");
 		await breez.default();
 		return { async connect({ network, mnemonic, apiKey, storage }) {
@@ -2668,11 +2678,11 @@ function loadBreezSdk() {
 			});
 		} };
 	})().catch((error) => {
-		loading$2 = void 0;
+		loading$3 = void 0;
 		throw error;
 	});
 }
-var hex$9 = (bytes) => Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+var hex$8 = (bytes) => Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
 var breezNetwork = (network) => network === "bitcoin" ? "mainnet" : "regtest";
 var DISCONNECT_MS = 1e4;
 /** One SDK instance per wallet storage: two over one database would each think the leaves are theirs. */
@@ -2684,7 +2694,7 @@ var open = /* @__PURE__ */ new Map();
 */
 async function openBreez(params, sdk = loadBreezSdk, storage = breezDatabase) {
 	const name = await storage(params.network, params.mnemonic);
-	const key = `${name}|${params.apiKey ? hex$9(sha256(new TextEncoder().encode(params.apiKey))).slice(0, 8) : ""}`;
+	const key = `${name}|${params.apiKey ? hex$8(sha256(new TextEncoder().encode(params.apiKey))).slice(0, 8) : ""}`;
 	let entry = open.get(key);
 	if (!entry) {
 		const wallet = sdk().then((module) => module.connect({
@@ -3018,6 +3028,7 @@ var SparkWallet = class {
 		locked: true,
 		balance: 0
 	};
+	/** `changed(false)`: a balance read that found nothing new; the receipts are checked, the wallet view stays. */
 	constructor(network, changed, sdk = loadBreezSdk) {
 		this.network = network;
 		this.changed = changed;
@@ -3233,6 +3244,7 @@ var SparkWallet = class {
 		const history = await read("history", () => adapter.history(), this.view.history);
 		if (this.adapter !== adapter) return;
 		const balancesRead = this.view.read || !failed.includes("balance");
+		const before = this.view;
 		this.view = {
 			...this.idle(this.saved),
 			locked: false,
@@ -3242,7 +3254,7 @@ var SparkWallet = class {
 			history,
 			error: failed.length ? `Could not read the ${failed.join(", ")} from Spark. Last values may be stale.` : void 0
 		};
-		this.changed();
+		this.changed(viewNews(before, this.view));
 		if (this.adapter) this.timer = setTimeout(() => void this.refresh(), sparkTiming.pollMs);
 	}
 	/** Where a contact pays one request: a Spark invoice made for it (its amount, its memo, a quarter of an hour). */
@@ -3354,6 +3366,17 @@ var PaymentCoordinator = class {
 	adapters;
 	changed;
 	active = /* @__PURE__ */ new Map();
+	/**
+	* The reviews still pending (an Approve may send them), by id: what `dropStale` looks at, so that its minute's sweep
+	* does not read every review ever made. `null` until the store was read once. An id leaves when the sweep finds its
+	* review no longer pending, or gone.
+	*/
+	pending = null;
+	/** Reviews read from the store past the coordinator (`refreshWallet`'s list): the pending ones are swept too. */
+	notePending(reviews) {
+		const pending = this.pending ??= /* @__PURE__ */ new Set();
+		for (const review of reviews) if (review.state === "pending") pending.add(review.id);
+	}
 	constructor(repository, adapters, changed = () => {}) {
 		this.repository = repository;
 		this.adapters = adapters;
@@ -3384,6 +3407,7 @@ var PaymentCoordinator = class {
 			review,
 			prepared
 		});
+		this.pending?.add(review.id);
 		this.changed(review);
 		return review;
 	}
@@ -3454,12 +3478,20 @@ var PaymentCoordinator = class {
 	*/
 	async dropStale(now = Date.now(), unpayable = () => false) {
 		const dropped = [];
-		for (const { review } of await this.repository.list()) {
-			if (review.state !== "pending" || review.expiresAt > now && !unpayable(review)) continue;
+		if (!this.pending) this.notePending((await this.repository.list()).map(({ review }) => review));
+		const pending = this.pending;
+		for (const id of [...pending]) {
+			const review = (await this.repository.get(id))?.review;
+			if (!review || review.state !== "pending") {
+				pending.delete(id);
+				continue;
+			}
+			if (review.expiresAt > now && !unpayable(review)) continue;
 			try {
 				const cancelled = await this.cancel(review.id);
 				if (cancelled.state === "cancelled") dropped.push(cancelled);
 			} catch {}
+			pending.delete(id);
 		}
 		return dropped;
 	}
@@ -3791,7 +3823,7 @@ var PAGE = 100;
 var PAGES = 10;
 /** Without any record of a payment, it is called failed only this long after its invoice expired. */
 var LOST_AFTER_MS = 36e5;
-var hex$8 = (bytes) => Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+var hex$7 = (bytes) => Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
 var sats$4 = (value) => {
 	const n = Number(value);
 	if (!Number.isSafeInteger(n) || n < 0) throw new Error("Breez returned an invalid amount");
@@ -3806,7 +3838,7 @@ function idempotencyKey(paymentHash, attempt) {
 	const b = sha256(new TextEncoder().encode(`ghostly-breez-pay:${paymentHash}:${attempt}`)).slice(0, 16);
 	b[6] = b[6] & 15 | 64;
 	b[8] = b[8] & 63 | 128;
-	const h = hex$8(b);
+	const h = hex$7(b);
 	return `${h.slice(0, 8)}-${h.slice(8, 12)}-${h.slice(12, 16)}-${h.slice(16, 20)}-${h.slice(20)}`;
 }
 /** The payment hash a Breez payment is about, when it is one (Lightning, or a Spark HTLC). */
@@ -4049,7 +4081,7 @@ var appLoader = async () => {
 		wasm: await fetch(url.default)
 	};
 };
-var loading$1;
+var loading$2;
 /**
 * Loads the WebAssembly once, on first use: profiles that never set up a BDK wallet never fetch its 2 MB.
 * The package is wasm-pack's `bundler` build, whose entry imports the `.wasm` as an ES module (which
@@ -4057,7 +4089,7 @@ var loading$1;
 * that entry would.
 */
 function loadBdk(loader = appLoader) {
-	return loading$1 ??= (async () => {
+	return loading$2 ??= (async () => {
 		const { glue, wasm } = await loader();
 		const imports = { [WASM_IMPORTS]: glue };
 		let instance;
@@ -4071,7 +4103,7 @@ function loadBdk(loader = appLoader) {
 		instance.exports.__wbindgen_start?.();
 		return glue;
 	})().catch((error) => {
-		loading$1 = void 0;
+		loading$2 = void 0;
 		throw error;
 	});
 }
@@ -4137,7 +4169,7 @@ var idbBdkStore = {
 		});
 	}
 };
-var hex$7 = (bytes) => Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+var hex$6 = (bytes) => Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
 var unhex = (text) => {
 	if (!/^([0-9a-f]{2})+$/.test(text)) throw new Error("Not hex");
 	return Uint8Array.from(text.match(/../g), (h) => parseInt(h, 16));
@@ -4351,7 +4383,7 @@ var BdkOnchain = class BdkOnchain {
 			throw new SourceConfigError(`bad descriptor: the recovery phrase does not make a ${SCRIPT[config.script].label} wallet (${message$3(error)})`, error);
 		}
 		const fingerprint = /\[([0-9a-f]{8})\//.exec(publicDescriptor)?.[1] ?? "";
-		const key = `bdkWallet-${config.network}-${hex$7(sha256(new TextEncoder().encode(publicDescriptor))).slice(0, 32)}`;
+		const key = `bdkWallet-${config.network}-${hex$6(sha256(new TextEncoder().encode(publicDescriptor))).slice(0, 32)}`;
 		const walletStore = deps.store ?? idbBdkStore;
 		let stored = await walletStore.load(key);
 		if (stored) try {
@@ -4449,7 +4481,7 @@ var BdkOnchain = class BdkOnchain {
 			amount,
 			fee,
 			feeRate,
-			signed: hex$7(tx.to_bytes())
+			signed: hex$6(tx.to_bytes())
 		};
 	}
 	/** What was signed is what was reviewed: one output of exactly the amount to the address, the rest ours. */
@@ -4702,435 +4734,6 @@ var bdk = {
 	}
 };
 //#endregion
-//#region ../browser/src/engine/paymentAdapters/providers/bitcoind.ts
-var BitcoindRpcError = class extends Error {
-	kind;
-	code;
-	constructor(kind, message, code) {
-		super(message);
-		this.kind = kind;
-		this.code = code;
-		this.name = "BitcoindRpcError";
-	}
-	/** The node never ran the call: it was not sent, could not connect, or the credentials were refused. */
-	get neverRan() {
-		return this.kind === "refused" || this.kind === "connect" || this.kind === "auth";
-	}
-};
-/** The Tauri command, through the Desktop host. */
-function tauriTransport$1(invoke) {
-	if (!invoke) throw new Error("Bitcoin Core needs the Ghostly desktop app: a browser cannot reach its RPC");
-	return (call) => invoke("bitcoind_rpc", { ...call });
-}
-/** Bitcoin Core's JSON-RPC error codes this module acts on (src/rpc/protocol.h). */
-var RPC = {
-	INVALID_ADDRESS_OR_KEY: -5,
-	VERIFY_ERROR: -25,
-	VERIFY_REJECTED: -26,
-	VERIFY_ALREADY_IN_CHAIN: -27,
-	DESERIALIZATION_ERROR: -22
-};
-var CHAINS = {
-	main: "bitcoin",
-	test: "testnet",
-	testnet4: "testnet",
-	signet: "signet",
-	regtest: "regtest"
-};
-/** A fee rate for the test networks when the node has too few blocks to estimate one (regtest always). */
-var TEST_FALLBACK_FEE_RATE = 2;
-var TXID = /^[0-9a-f]{64}$/;
-var WALLET_NAME = /^[A-Za-z0-9._-]{0,64}$/;
-/** Address encodings, for btc-signer to read the outputs back as addresses. */
-var TESTNET_ENCODING = {
-	bech32: "tb",
-	pubKeyHash: 111,
-	scriptHash: 196,
-	wif: 239
-};
-var BTC_NETWORKS = {
-	bitcoin: {
-		bech32: "bc",
-		pubKeyHash: 0,
-		scriptHash: 5,
-		wif: 128
-	},
-	testnet: TESTNET_ENCODING,
-	signet: TESTNET_ENCODING,
-	mutinynet: TESTNET_ENCODING,
-	regtest: {
-		...TESTNET_ENCODING,
-		bech32: "bcrt"
-	}
-};
-var TX_OPTS = {
-	allowUnknownOutputs: true,
-	allowUnknownInputs: true,
-	disableScriptCheck: true,
-	allowLegacyWitnessUtxo: true
-};
-/** Whole sats as the exact decimal string bitcoind reads as BTC (never a float). */
-var satsToBtc = (sats) => {
-	if (!Number.isSafeInteger(sats) || sats < 0) throw new Error("Amounts are whole sats");
-	const digits = sats.toString().padStart(9, "0");
-	return `${digits.slice(0, -8)}.${digits.slice(-8)}`;
-};
-/** A BTC amount from bitcoind (a JSON number with at most 8 decimals) as whole sats. */
-var btcToSats = (btc) => {
-	if (typeof btc !== "number" || !Number.isFinite(btc)) throw new Error("The node returned an amount that is not a number");
-	return Math.round(btc * 1e8);
-};
-var object = (value, what) => {
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`The node returned no ${what}`);
-	return value;
-};
-var text$2 = (value, what) => {
-	if (typeof value !== "string" || !value) throw new Error(`The node returned no ${what}`);
-	return value;
-};
-var BitcoindOnchain = class BitcoindOnchain {
-	config;
-	transport;
-	closed = false;
-	network;
-	constructor(config, transport) {
-		this.config = config;
-		this.transport = transport;
-	}
-	/** Connects and checks the wallet is there and the node is on a network of `mode`. */
-	static async connect(config, mode, transport, signal) {
-		const provider = new BitcoindOnchain(config, transport);
-		signal?.addEventListener("abort", () => void provider.close(), { once: true });
-		const { network } = await provider.info();
-		if (networkMode(network) !== mode) throw new Error(mode === "mainnet" ? `This node is on ${network}, not Bitcoin mainnet` : "This node is on Bitcoin mainnet: set it up as a Mainnet wallet instead");
-		if (object(await provider.call("getwalletinfo"), "wallet information").private_keys_enabled === false) throw new Error("This wallet has no private keys: it cannot sign a payment");
-		return provider;
-	}
-	async call(method, ...params) {
-		if (this.closed) throw new BitcoindRpcError("refused", "This Bitcoin Core source is closed");
-		try {
-			return await this.transport({
-				...this.config,
-				method,
-				params
-			});
-		} catch (error) {
-			if (error instanceof BitcoindRpcError) throw error;
-			const failure = error;
-			if (failure && typeof failure === "object" && typeof failure.kind === "string" && typeof failure.message === "string") throw new BitcoindRpcError(failure.kind, failure.message, failure.code);
-			throw new BitcoindRpcError("transport", error instanceof Error ? error.message : String(error));
-		}
-	}
-	async info() {
-		const chain = object(await this.call("getblockchaininfo"), "chain information").chain;
-		const network = typeof chain === "string" ? CHAINS[chain] : void 0;
-		if (!network) throw new Error(`Ghostly does not know the chain "${String(chain).slice(0, 20)}"`);
-		this.network = network;
-		return {
-			network,
-			alias: this.config.wallet || "Bitcoin Core"
-		};
-	}
-	async receiveAddress() {
-		return text$2(await this.call("getnewaddress", "Ghostly"), "address");
-	}
-	async balance() {
-		const mine = object(object(await this.call("getbalances"), "balances").mine, "balances");
-		return {
-			confirmed: btcToSats(mine.trusted),
-			unconfirmed: btcToSats(mine.untrusted_pending)
-		};
-	}
-	async feeRate(request) {
-		if (request.feeRate !== void 0) {
-			if (!Number.isFinite(request.feeRate) || request.feeRate < 1 || request.feeRate > 1e4) throw new Error("The fee rate must be between 1 and 10,000 sat/vB");
-			return request.feeRate;
-		}
-		const estimate = object(await this.call("estimatesmartfee", 6), "fee estimate");
-		if (typeof estimate.feerate === "number" && estimate.feerate > 0) return Math.max(1, Math.ceil(estimate.feerate * 1e5 * 1e3) / 1e3);
-		if ((this.network ?? (await this.info()).network) === "bitcoin") throw new Error("Your node cannot estimate a fee yet. Nothing was sent.");
-		return TEST_FALLBACK_FEE_RATE;
-	}
-	async prepareSend(request) {
-		if (!Number.isSafeInteger(request.amount) || request.amount <= 0) throw new Error("Amounts are whole sats");
-		const network = this.network ?? (await this.info()).network;
-		const feeRate = await this.feeRate(request);
-		const funded = object(await this.call("walletcreatefundedpsbt", [], [{ [request.address]: satsToBtc(request.amount) }], 0, {
-			fee_rate: feeRate,
-			lockUnspents: true,
-			replaceable: true
-		}), "funded transaction");
-		const inputs = this.outpoints(Transaction.fromPSBT(base64.decode(text$2(funded.psbt, "funded transaction")), TX_OPTS));
-		try {
-			const fee = btcToSats(funded.fee);
-			if (fee > request.feeCap) throw new Error(`The fee (${fee} sats) is above your limit of ${request.feeCap}`);
-			const signed = object(await this.call("walletprocesspsbt", funded.psbt, true, "ALL"), "signed transaction");
-			if (signed.complete !== true) throw new Error("The wallet could not sign this payment (is it locked, or watch-only?)");
-			const final = object(await this.call("finalizepsbt", signed.psbt, false), "finalized transaction");
-			if (final.complete !== true) throw new Error("The wallet could not finalize this payment");
-			return this.check(Transaction.fromPSBT(base64.decode(text$2(final.psbt, "finalized transaction")), TX_OPTS), request, inputs, feeRate, network);
-		} catch (error) {
-			await this.unlock(inputs).catch(() => {});
-			throw error;
-		}
-	}
-	/** The transaction the node signed is exactly the one asked for, before anyone reviews it. */
-	check(tx, request, funded, feeRate, network) {
-		const same = (a, b) => a.length === b.length && a.every((o, i) => o.txid === b[i].txid && o.vout === b[i].vout);
-		if (!same(this.outpoints(tx), funded)) throw new Error("The node signed other coins than it funded the payment with");
-		const script = (() => {
-			try {
-				return hex.encode(OutScript.encode(Address(BTC_NETWORKS[network]).decode(request.address)));
-			} catch {
-				return;
-			}
-		})();
-		let paid = 0;
-		for (let i = 0; i < tx.outputsLength; i++) {
-			const output = tx.getOutput(i);
-			if (script !== void 0 && output.script && hex.encode(output.script) === script) paid += Number(output.amount ?? 0n);
-		}
-		if (paid !== request.amount) throw new Error("The node built a transaction that does not pay the address and amount asked for");
-		const fee = Number(tx.fee);
-		if (!Number.isSafeInteger(fee) || fee < 0 || fee > request.feeCap) throw new Error(`The fee (${fee} sats) is above your limit of ${request.feeCap}`);
-		const txid = tx.id;
-		if (!TXID.test(txid)) throw new Error("The node returned a transaction without a valid id");
-		return {
-			txid,
-			address: request.address,
-			amount: request.amount,
-			fee,
-			feeRate,
-			signed: hex.encode(tx.extract())
-		};
-	}
-	outpoints(tx) {
-		const out = [];
-		for (let i = 0; i < tx.inputsLength; i++) {
-			const input = tx.getInput(i);
-			if (!input.txid || input.index === void 0) throw new Error("The node returned a transaction with an unreadable input");
-			out.push({
-				txid: hex.encode(input.txid),
-				vout: input.index
-			});
-		}
-		return out;
-	}
-	async unlock(outpoints) {
-		if (outpoints.length) await this.call("lockunspent", true, outpoints);
-	}
-	signedTx(prepared) {
-		if (!/^[0-9a-f]+$/.test(prepared.signed)) throw new Error("This prepared payment has no signed transaction");
-		const tx = Transaction.fromRaw(hex.decode(prepared.signed), TX_OPTS);
-		if (tx.id !== prepared.txid) throw new Error("This prepared payment's transaction is not the one reviewed");
-		return tx;
-	}
-	async broadcast(prepared) {
-		const tx = this.signedTx(prepared);
-		let txid;
-		try {
-			txid = await this.call("sendrawtransaction", prepared.signed);
-		} catch (error) {
-			if (!(error instanceof BitcoindRpcError)) throw error;
-			if (error.kind === "rpc" && error.code === RPC.VERIFY_ALREADY_IN_CHAIN) return prepared.txid;
-			const rejected = error.kind === "rpc" && [
-				RPC.VERIFY_ERROR,
-				RPC.VERIFY_REJECTED,
-				RPC.DESERIALIZATION_ERROR
-			].includes(error.code ?? 0);
-			if (!error.neverRan && !rejected) throw error;
-			const seen = rejected ? await this.known(prepared.txid) : await this.known(prepared.txid).catch(() => void 0);
-			if (seen) {
-				if (["mempool", "confirmed"].includes((await this.status(prepared)).state)) return prepared.txid;
-				throw error;
-			}
-			if (seen === false) await this.unlock(this.outpoints(tx)).catch(() => {});
-			throw new NothingSpentError(`Your node did not send it: ${error.message}`);
-		}
-		if (txid !== prepared.txid) throw new Error("The node broadcast a different transaction than the one reviewed");
-		return prepared.txid;
-	}
-	/** Whether the wallet knows this transaction (it does once its node accepted it, even if it was dropped since). */
-	async known(txid) {
-		try {
-			await this.call("gettransaction", txid);
-			return true;
-		} catch (error) {
-			if (error instanceof BitcoindRpcError && error.kind === "rpc" && error.code === RPC.INVALID_ADDRESS_OR_KEY) return false;
-			throw error;
-		}
-	}
-	async status(prepared) {
-		if (!TXID.test(prepared.txid)) throw new Error("Not a transaction id");
-		let tx;
-		try {
-			tx = object(await this.call("gettransaction", prepared.txid), "transaction");
-		} catch (error) {
-			if (error instanceof BitcoindRpcError && error.kind === "rpc" && error.code === RPC.INVALID_ADDRESS_OR_KEY) return {
-				state: "missing",
-				confirmations: 0
-			};
-			throw error;
-		}
-		const confirmations = typeof tx.confirmations === "number" ? tx.confirmations : 0;
-		if (confirmations > 0) return {
-			state: "confirmed",
-			confirmations
-		};
-		if (confirmations < 0) return {
-			state: "conflicted",
-			confirmations: 0
-		};
-		if (Array.isArray(tx.mempoolconflicts) && tx.mempoolconflicts.length > 0) return {
-			state: "conflicted",
-			confirmations: 0
-		};
-		try {
-			await this.call("getmempoolentry", prepared.txid);
-			return {
-				state: "mempool",
-				confirmations: 0
-			};
-		} catch (error) {
-			if (error instanceof BitcoindRpcError && error.kind === "rpc" && error.code === RPC.INVALID_ADDRESS_OR_KEY) return {
-				state: "missing",
-				confirmations: 0
-			};
-			throw error;
-		}
-	}
-	async release(prepared) {
-		await this.unlock(this.outpoints(this.signedTx(prepared)));
-	}
-	async history(limit) {
-		const count = Math.max(1, Math.min(200, Math.floor(limit) * 3));
-		const entries = await this.call("listtransactions", "*", count, 0, true);
-		if (!Array.isArray(entries)) throw new Error("The node returned no transaction list");
-		const byTxid = /* @__PURE__ */ new Map();
-		for (const raw of entries) {
-			if (!raw || typeof raw.txid !== "string" || !TXID.test(raw.txid) || raw.category === "orphan") continue;
-			const tx = byTxid.get(raw.txid) ?? {
-				txid: raw.txid,
-				amount: 0,
-				confirmations: typeof raw.confirmations === "number" ? Math.max(0, raw.confirmations) : 0
-			};
-			tx.amount += btcToSats(raw.amount);
-			if (raw.category === "send" && typeof raw.fee === "number" && tx.fee === void 0) tx.fee = Math.abs(btcToSats(raw.fee));
-			if (typeof raw.time === "number") tx.timestamp = raw.time * 1e3;
-			byTxid.delete(raw.txid);
-			byTxid.set(raw.txid, tx);
-		}
-		return [...byTxid.values()].reverse().slice(0, Math.max(0, limit));
-	}
-	/** The wallet's receives on this address, newest first: only `receive` entries paying exactly it count. */
-	async received(address) {
-		const entries = await this.call("listtransactions", "*", 200, 0, true);
-		if (!Array.isArray(entries)) throw new Error("The node returned no transaction list");
-		const byTxid = /* @__PURE__ */ new Map();
-		for (const raw of entries) {
-			if (!raw || raw.category !== "receive" || raw.address !== address || typeof raw.txid !== "string" || !TXID.test(raw.txid)) continue;
-			const tx = byTxid.get(raw.txid) ?? {
-				txid: raw.txid,
-				amount: 0,
-				confirmations: typeof raw.confirmations === "number" ? Math.max(0, raw.confirmations) : 0
-			};
-			tx.amount += btcToSats(raw.amount);
-			byTxid.delete(raw.txid);
-			byTxid.set(raw.txid, tx);
-		}
-		return [...byTxid.values()].reverse();
-	}
-	async close() {
-		this.closed = true;
-	}
-};
-/** `user:password` in the password field (the .cookie file's contents) when no user is given. */
-function credentials({ config, secrets }) {
-	const password = secrets.password ?? "";
-	const user = config.user?.trim() ?? "";
-	if (!user && password.includes(":")) {
-		const at = password.indexOf(":");
-		return {
-			user: password.slice(0, at),
-			password: password.slice(at + 1)
-		};
-	}
-	return {
-		user,
-		password
-	};
-}
-var bitcoindRpc = {
-	id: "bitcoind",
-	label: "Bitcoin Core",
-	kind: "onchain",
-	description: "A wallet on your own Bitcoin Core node, over its RPC. Your node holds the keys and signs. Needs the desktop app.",
-	networks: [
-		"bitcoin",
-		"testnet",
-		"signet",
-		"regtest"
-	],
-	platforms: ["desktop"],
-	experimental: true,
-	fields: [
-		{
-			name: "url",
-			label: "RPC address",
-			kind: "url",
-			placeholder: "http://127.0.0.1:8332",
-			defaults: {
-				mainnet: "http://127.0.0.1:8332",
-				testnet: "http://127.0.0.1:38332"
-			},
-			help: "Your node's rpcbind and rpcport: 8332 mainnet, 38332 signet, 48332 testnet4, 18443 regtest."
-		},
-		{
-			name: "wallet",
-			label: "Wallet name",
-			kind: "text",
-			optional: true,
-			placeholder: "ghostly",
-			help: "A wallet loaded in the node (bitcoin-cli listwallets). Empty: its default wallet."
-		},
-		{
-			name: "user",
-			label: "RPC user",
-			kind: "text",
-			optional: true,
-			help: "Leave empty to paste the .cookie file below."
-		},
-		{
-			name: "password",
-			label: "RPC password or cookie",
-			kind: "secret",
-			help: "rpcpassword, or the contents of the node's .cookie file (it changes when bitcoind restarts)."
-		}
-	],
-	validate(settings) {
-		const url = (() => {
-			try {
-				return new URL(settings.config.url?.trim() ?? "");
-			} catch {
-				return;
-			}
-		})();
-		if (!url || !["http:", "https:"].includes(url.protocol)) throw new Error("Enter the node's RPC address, like http://127.0.0.1:8332");
-		if (url.username || url.password) throw new Error("Put the RPC user and password in their own fields, not in the address");
-		if (url.search || url.hash) throw new Error("The RPC address cannot have a query or fragment");
-		if (!WALLET_NAME.test(settings.config.wallet?.trim() ?? "") || [".", ".."].includes(settings.config.wallet?.trim() ?? "")) throw new Error("A wallet name has only letters, digits, '-', '_' and '.'");
-		const { user, password } = credentials(settings);
-		if (!user || !password) throw new Error("Enter the RPC user and password, or paste the .cookie file");
-	},
-	async create(settings, host) {
-		return BitcoindOnchain.connect({
-			url: settings.config.url.trim(),
-			wallet: settings.config.wallet?.trim() ?? "",
-			...credentials(settings)
-		}, host.mode, tauriTransport$1(host.invoke), host.signal);
-	}
-};
-//#endregion
 //#region ../browser/src/engine/paymentAdapters/providers/fedimint.ts
 var FEDIMINT_SOURCE = "fedimint";
 /** How long an invoice made here stays payable. */
@@ -5702,15 +5305,15 @@ var CLN_RUNE_COMMAND = `lightning-cli createrune restrictions='[[${CLN_METHODS.m
 var PAY_TIMEOUT_S$1 = 60;
 var CALL_TIMEOUT_MS = 3e4;
 var PAY_CALL_TIMEOUT_MS = 9e4;
-var INVOICE_EXPIRY_S$2 = 3600;
-var NETWORKS$2 = {
+var INVOICE_EXPIRY_S$1 = 3600;
+var NETWORKS$1 = {
 	bitcoin: "bitcoin",
 	testnet: "testnet",
 	testnet4: "testnet",
 	signet: "signet",
 	regtest: "regtest"
 };
-var HEX64$4 = /^[0-9a-f]{64}$/;
+var HEX64$3 = /^[0-9a-f]{64}$/;
 var NODE_ID = /^0[23][0-9a-f]{64}$/;
 var msatToSat = (msat) => {
 	const value = typeof msat === "number" ? msat : typeof msat === "string" ? Number(msat.replace(/msat$/, "")) : NaN;
@@ -5788,7 +5391,7 @@ var CoreLightning = class CoreLightning {
 	}
 	async info() {
 		const info = await this.rpc.call("getinfo", {}, { timeoutMs: CALL_TIMEOUT_MS });
-		const network = NETWORKS$2[info?.network];
+		const network = NETWORKS$1[info?.network];
 		if (!network) throw new Error(`The node is on a network Ghostly does not know (${String(info?.network).slice(0, 20)})`);
 		if (this.nodeId && info.id !== this.nodeId) throw new Error("The node answered with another id");
 		return {
@@ -5814,7 +5417,7 @@ var CoreLightning = class CoreLightning {
 			amount_msat: amount * 1e3,
 			label,
 			description: (memo || "Ghostly").slice(0, 200),
-			expiry: INVOICE_EXPIRY_S$2
+			expiry: INVOICE_EXPIRY_S$1
 		}, { timeoutMs: CALL_TIMEOUT_MS });
 		const decoded = typeof created?.bolt11 === "string" && created.bolt11.length < 8e3 ? decodeBolt11(created.bolt11) : null;
 		if (!decoded || decoded.paymentHash !== created.payment_hash || decoded.amountSat !== amount) throw new Error("The node returned an invoice that does not match the request");
@@ -5914,7 +5517,7 @@ var CoreLightning = class CoreLightning {
 	}
 	/** What the node's own record of this payment hash says: `none` when it never tried. */
 	async lookup(paymentHash) {
-		if (!HEX64$4.test(paymentHash)) throw new Error("Invalid payment hash");
+		if (!HEX64$3.test(paymentHash)) throw new Error("Invalid payment hash");
 		const { pays } = await this.rpc.call("listpays", { payment_hash: paymentHash }, { timeoutMs: CALL_TIMEOUT_MS });
 		const mine = (pays ?? []).filter((p) => p.payment_hash === paymentHash);
 		const complete = mine.find((p) => p.status === "complete");
@@ -5987,672 +5590,6 @@ var coreLightning = {
 		return CoreLightning.connect(settingsOf(settings), host.signal);
 	}
 };
-//#endregion
-//#region ../browser/src/engine/paymentAdapters/providers/nwc.ts
-/**
-* Lightning through a wallet reached over Nostr Wallet Connect (NIP-47): Alby Hub, a node's NWC service, a
-* hosted wallet. The person pastes the wallet's `nostr+walletconnect://` URI; requests are signed with the
-* key it carries, encrypted to the wallet (NIP-44, or NIP-04 when its info event offers nothing else) and
-* sent through its relay; the answers come back the same way. That wallet holds the sats, applies its own
-* fee limit, and is custodial or not depending on what it is.
-*
-* Money safety (PROVIDERS.md): a request that never reached the relay, or an error code the wallet answers
-* before it tries to pay, is `NothingSpentError`. A `pay_invoice` whose answer does not come back in time,
-* or any other error, is an unknown outcome, and `paymentStatus` asks `lookup_invoice` until it ends.
-*/
-var KIND = {
-	info: 13194,
-	request: 23194,
-	response: 23195
-};
-/** A relay message, an encrypted answer, an info event, an invoice: nothing bigger is read. */
-var MAX_MESSAGE = 262144;
-var MAX_CONTENT = 65536;
-var MAX_INFO = 4096;
-var MAX_INVOICE = 7089;
-var MAX_URI = 2048;
-var MAX_RELAYS = 5;
-var CONNECT_MS = 1e4;
-var ACK_MS = 1e4;
-var REQUEST_MS$1 = 2e4;
-/** A payment may take a while to route; an answer after this is an unknown outcome, looked up later. */
-var PAY_MS = 9e4;
-/** The wallet must not start a payment it receives after this (NIP-47 `expiration`). */
-var PAY_EXPIRY_S = 60;
-/** A payment the wallet never heard of is failed once its invoice can no longer be paid, with room for clocks. */
-var EXPIRED_MARGIN_MS = 6e5;
-var INVOICE_EXPIRY_S$1 = 3600;
-/** Error codes a wallet answers before it tries to pay: nothing can have left it. (`BAD_REQUEST`: Alby Hub, an invoice it cannot read.) */
-var REFUSED_BEFORE_PAYING = /* @__PURE__ */ new Set([
-	"RATE_LIMITED",
-	"NOT_IMPLEMENTED",
-	"INSUFFICIENT_BALANCE",
-	"QUOTA_EXCEEDED",
-	"RESTRICTED",
-	"UNAUTHORIZED",
-	"UNSUPPORTED_ENCRYPTION",
-	"BAD_REQUEST"
-]);
-var NETWORKS$1 = {
-	mainnet: "bitcoin",
-	bitcoin: "bitcoin",
-	testnet: "testnet",
-	testnet3: "testnet",
-	testnet4: "testnet",
-	signet: "signet",
-	mutinynet: "mutinynet",
-	regtest: "regtest"
-};
-var HEX64$3 = /^[0-9a-f]{64}$/;
-var hex$6 = (bytes) => Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
-var bytes$2 = (text) => Uint8Array.from(text.match(/../g), (b) => parseInt(b, 16));
-var now$1 = () => Math.floor(Date.now() / 1e3);
-var isMsat = (value) => Number.isSafeInteger(value) && value >= 0;
-/** Only secure relays, except on this machine (a local test relay). */
-function checkRelay(address) {
-	let relay;
-	try {
-		relay = new URL(address);
-	} catch {
-		throw new Error("The connection URI has a relay that is not a URL");
-	}
-	if (relay.username || relay.password || relay.hash) throw new Error("The connection URI has a relay with credentials in it");
-	const loopback = [
-		"127.0.0.1",
-		"localhost",
-		"[::1]"
-	].includes(relay.hostname);
-	if (!(relay.protocol === "wss:" || relay.protocol === "ws:" && loopback)) throw new Error("Use a wallet whose relay is secure (wss://)");
-	return relay.href;
-}
-/** Reads a `nostr+walletconnect://` URI. Its errors never repeat it: it holds a secret. */
-function parseNwcUri(input) {
-	const text = (input ?? "").trim();
-	if (text.length > MAX_URI) throw new Error("That connection URI is too long");
-	const match = /^(?:nostr\+walletconnect|nostrwalletconnect):(?:\/\/)?([0-9a-fA-F]{64})\/?\?([^#]*)$/.exec(text);
-	if (!match) throw new Error("That is not a Nostr Wallet Connect URI (nostr+walletconnect://…)");
-	const params = new URLSearchParams(match[2]);
-	const secret = (params.get("secret") ?? "").toLowerCase();
-	if (!HEX64$3.test(secret) || /^0+$/.test(secret)) throw new Error("The connection URI has no valid secret");
-	const relays = [...new Set(params.getAll("relay").map(checkRelay))];
-	if (!relays.length) throw new Error("The connection URI names no relay");
-	if (relays.length > MAX_RELAYS) throw new Error("The connection URI names too many relays");
-	return {
-		walletPubkey: match[1].toLowerCase(),
-		relays,
-		secret: bytes$2(secret)
-	};
-}
-/** The request never reached the relay (not connected, refused by it): the wallet cannot have seen it. */
-var NotDelivered = class extends Error {
-	constructor(message) {
-		super(message);
-		this.name = "NotDelivered";
-	}
-};
-/** An error the wallet answered, with its NIP-47 code. */
-var NwcError = class extends Error {
-	code;
-	constructor(code, message) {
-		super(message);
-		this.code = code;
-		this.name = "NwcError";
-	}
-};
-/** No answer in time. The request may or may not have been acted on. */
-var NoAnswer = class extends Error {
-	constructor(method) {
-		super(`The wallet did not answer ${method} in time`);
-		this.name = "NoAnswer";
-	}
-};
-/**
-* A minimal NIP-01 client for one relay: it knows exactly whether an event was written to an open socket
-* and whether the relay acknowledged it, which is what tells "nothing sent" from "unknown" apart.
-* It reconnects when asked to send again, and subscriptions follow it.
-*/
-var RelayConnection = class {
-	url;
-	WebSocketImpl;
-	socket;
-	opening;
-	subs = /* @__PURE__ */ new Map();
-	acks = /* @__PURE__ */ new Map();
-	closed = false;
-	constructor(url, WebSocketImpl = globalThis.WebSocket) {
-		this.url = url;
-		this.WebSocketImpl = WebSocketImpl;
-	}
-	open() {
-		if (this.closed) return Promise.reject(/* @__PURE__ */ new Error("The wallet connection is closed"));
-		if (this.socket?.readyState === 1) return Promise.resolve(this.socket);
-		if (!this.opening) {
-			const opening = this.connectSocket();
-			this.opening = opening;
-			opening.catch(() => {}).finally(() => {
-				if (this.opening === opening) this.opening = void 0;
-			});
-		}
-		return this.opening;
-	}
-	connectSocket() {
-		return new Promise((resolve, reject) => {
-			let settled = false;
-			const socket = new this.WebSocketImpl(this.url);
-			const done = (error) => {
-				if (settled) return;
-				settled = true;
-				clearTimeout(timer);
-				if (error) {
-					try {
-						socket.close();
-					} catch {}
-					reject(error);
-					return;
-				}
-				if (this.closed) {
-					socket.close();
-					reject(/* @__PURE__ */ new Error("The wallet connection is closed"));
-					return;
-				}
-				this.socket = socket;
-				for (const [id, sub] of this.subs) this.write([
-					"REQ",
-					id,
-					sub.filter
-				]);
-				resolve(socket);
-			};
-			const timer = setTimeout(() => done(/* @__PURE__ */ new Error("The wallet's relay did not answer")), CONNECT_MS);
-			socket.onopen = () => done();
-			socket.onerror = () => done(/* @__PURE__ */ new Error("Could not reach the wallet's relay"));
-			socket.onclose = () => {
-				done(/* @__PURE__ */ new Error("The wallet's relay closed the connection"));
-				if (this.socket !== socket) return;
-				this.socket = void 0;
-				for (const [id, ack] of this.acks) {
-					this.acks.delete(id);
-					ack.fail(/* @__PURE__ */ new Error("The relay connection dropped before it confirmed the request"));
-				}
-			};
-			socket.onmessage = (message) => {
-				if (this.socket === socket) this.receive(message.data);
-			};
-		});
-	}
-	subscribe(id, filter, sub) {
-		this.subs.set(id, {
-			...sub,
-			filter
-		});
-		this.write([
-			"REQ",
-			id,
-			filter
-		]);
-	}
-	unsubscribe(id) {
-		if (this.subs.delete(id)) this.write(["CLOSE", id]);
-	}
-	/**
-	* Events matching `filter` the relay has stored, until it says that is all (or `ms` pass). With
-	* `waitForOne`, a relay that has none yet is listened to until one arrives live, within `ms`.
-	*/
-	async fetch(filter, { ms = CONNECT_MS, waitForOne = false } = {}) {
-		await this.open();
-		const id = `q${hex$6(crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(6)))}`, events = [];
-		try {
-			await new Promise((resolve) => {
-				const timer = setTimeout(resolve, ms);
-				let stored = false;
-				const finish = () => {
-					clearTimeout(timer);
-					resolve();
-				};
-				this.subscribe(id, filter, {
-					event: (e) => {
-						if (events.length < 20) events.push(e);
-						if (stored) finish();
-					},
-					eose: () => {
-						stored = true;
-						if (events.length || !waitForOne) finish();
-					}
-				});
-			});
-		} finally {
-			this.unsubscribe(id);
-		}
-		return events;
-	}
-	/**
-	* Resolves once the relay accepted the event. `NotDelivered` when it certainly did not reach it (no open
-	* socket, refused); any other rejection means it may have.
-	*/
-	async publish(event) {
-		let socket;
-		try {
-			socket = await this.open();
-		} catch (error) {
-			throw new NotDelivered(error instanceof Error ? error.message : "Could not reach the wallet's relay");
-		}
-		return new Promise((resolve, reject) => {
-			const timer = setTimeout(() => {
-				this.acks.delete(event.id);
-				reject(/* @__PURE__ */ new Error("The relay did not confirm the request"));
-			}, ACK_MS);
-			this.acks.set(event.id, {
-				ok: () => {
-					clearTimeout(timer);
-					resolve();
-				},
-				fail: (error) => {
-					clearTimeout(timer);
-					reject(error);
-				}
-			});
-			if (socket.readyState !== 1 || socket !== this.socket) {
-				this.acks.delete(event.id);
-				clearTimeout(timer);
-				reject(new NotDelivered("The relay connection closed"));
-				return;
-			}
-			socket.send(JSON.stringify(["EVENT", event]));
-		});
-	}
-	close() {
-		this.closed = true;
-		for (const [id, ack] of this.acks) {
-			this.acks.delete(id);
-			ack.fail(/* @__PURE__ */ new Error("The wallet connection is closed"));
-		}
-		this.subs.clear();
-		try {
-			this.socket?.close();
-		} catch {}
-		this.socket = void 0;
-	}
-	write(message) {
-		if (this.socket?.readyState === 1) this.socket.send(JSON.stringify(message));
-	}
-	receive(data) {
-		if (typeof data !== "string" || data.length > MAX_MESSAGE) return;
-		let message;
-		try {
-			message = JSON.parse(data);
-		} catch {
-			return;
-		}
-		if (!Array.isArray(message) || typeof message[1] !== "string") return;
-		const [type, id] = message;
-		if (type === "EVENT") this.subs.get(id)?.event(message[2]);
-		else if (type === "EOSE") this.subs.get(id)?.eose?.();
-		else if (type === "OK") {
-			const ack = this.acks.get(id);
-			if (!ack) return;
-			this.acks.delete(id);
-			const reason = typeof message[3] === "string" ? message[3].slice(0, 120) : "";
-			if (message[2] === true || reason.startsWith("duplicate:")) ack.ok();
-			else ack.fail(new NotDelivered(`The relay refused the request${reason ? ` (${reason})` : ""}`));
-		}
-	}
-};
-var NwcLightning = class NwcLightning {
-	connection;
-	relay;
-	encryption;
-	options;
-	/** From the info event, then narrowed to what this connection may do (`get_info`). */
-	capabilities;
-	clientPubkey;
-	subscription = `nwc${hex$6(crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(6)))}`;
-	pending = /* @__PURE__ */ new Map();
-	conversationKey;
-	network = "bitcoin";
-	alias;
-	closed = false;
-	constructor(connection, relay, encryption, methods, options) {
-		this.connection = connection;
-		this.relay = relay;
-		this.encryption = encryption;
-		this.options = options;
-		this.clientPubkey = getPublicKey(connection.secret);
-		if (encryption === "nip44_v2") this.conversationKey = nip44.v2.utils.getConversationKey(connection.secret, connection.walletPubkey);
-		this.capabilities = this.capabilitiesOf(methods);
-	}
-	/**
-	* Reaches the wallet through the first relay that answers, reads its info event (the methods and the
-	* encryption it offers), listens for its answers, and asks `get_info` for its network.
-	*/
-	static async connect(uri, options = {}) {
-		const connection = parseNwcUri(uri);
-		options.signal?.throwIfAborted();
-		let relay, lastError;
-		for (const url of connection.relays) {
-			const candidate = new RelayConnection(url, options.WebSocket);
-			try {
-				await candidate.open();
-				relay = candidate;
-				break;
-			} catch (error) {
-				candidate.close();
-				lastError = error;
-			}
-		}
-		if (!relay) throw lastError instanceof Error ? lastError : /* @__PURE__ */ new Error("Could not reach the wallet's relay");
-		let wallet;
-		try {
-			const info = NwcLightning.newestInfo(await relay.fetch({
-				kinds: [KIND.info],
-				authors: [connection.walletPubkey],
-				limit: 5
-			}, {
-				waitForOne: true,
-				ms: options.infoMs
-			}), connection.walletPubkey);
-			if (!info) throw new Error(`The wallet has not published its NWC info on ${new URL(relay.url).host}: check the URI, or that the wallet is running`);
-			const offered = (info.tags.find((t) => t[0] === "encryption")?.slice(1).join(" ") ?? "").split(/\s+/).filter(Boolean);
-			const encryption = offered.includes("nip44_v2") ? "nip44_v2" : !offered.length || offered.includes("nip04") ? "nip04" : void 0;
-			if (!encryption) throw new Error("The wallet offers no encryption Ghostly speaks (NIP-44 or NIP-04)");
-			const methods = new Set(info.content.split(/\s+/).filter(Boolean));
-			wallet = new NwcLightning(connection, relay, encryption, methods, options);
-			wallet.listen();
-			if (options.signal) {
-				const opened = wallet;
-				if (options.signal.aborted) throw options.signal.reason;
-				options.signal.addEventListener("abort", () => void opened.close(), { once: true });
-			}
-			await wallet.readInfo(methods);
-			return wallet;
-		} catch (error) {
-			if (wallet) await wallet.close();
-			else relay.close();
-			throw error;
-		}
-	}
-	static newestInfo(events, walletPubkey) {
-		return events.filter((e) => e && e.kind === KIND.info && e.pubkey === walletPubkey && typeof e.content === "string" && e.content.length <= MAX_INFO && Array.isArray(e.tags) && verifyEvent(e)).sort((a, b) => b.created_at - a.created_at)[0];
-	}
-	capabilitiesOf(methods) {
-		const lookup = methods.has("lookup_invoice");
-		return {
-			receive: methods.has("make_invoice"),
-			send: methods.has("pay_invoice") && lookup,
-			balance: methods.has("get_balance"),
-			lookup
-		};
-	}
-	/**
-	* `get_info` says the network and the methods this connection may use (the info event lists the
-	* service's). Without it the wallet is taken to be on Bitcoin: a test wallet is then refused in the
-	* Testnet mode and its invoices in the Mainnet one, while a real-money wallet never passes for a test one.
-	*/
-	async readInfo(offered) {
-		if (!offered.has("get_info")) return;
-		let info;
-		try {
-			info = await this.request("get_info", {});
-		} catch (error) {
-			if (error instanceof NwcError && [
-				"RESTRICTED",
-				"UNAUTHORIZED",
-				"NOT_IMPLEMENTED"
-			].includes(error.code)) return;
-			throw error;
-		}
-		if (info.network !== void 0) {
-			const network = typeof info.network === "string" ? NETWORKS$1[info.network.toLowerCase()] : void 0;
-			if (!network) throw new Error("The wallet is on a network Ghostly does not know");
-			this.network = network;
-		}
-		if (typeof info.alias === "string" && info.alias.trim()) this.alias = info.alias.trim().slice(0, 40);
-		if (Array.isArray(info.methods) && info.methods.every((m) => typeof m === "string")) this.capabilities = this.capabilitiesOf(new Set(info.methods));
-	}
-	listen() {
-		this.relay.subscribe(this.subscription, {
-			kinds: [KIND.response],
-			authors: [this.connection.walletPubkey],
-			"#p": [this.clientPubkey],
-			since: now$1() - 60
-		}, { event: (e) => this.answer(e) });
-	}
-	encrypt(text) {
-		return this.conversationKey ? nip44.v2.encrypt(text, this.conversationKey) : nip04.encrypt(this.connection.secret, this.connection.walletPubkey, text);
-	}
-	decrypt(content) {
-		if (this.conversationKey && !content.includes("?iv=")) return nip44.v2.decrypt(content, this.conversationKey);
-		return nip04.decrypt(this.connection.secret, this.connection.walletPubkey, content);
-	}
-	/**
-	* Sends one request and waits for its answer. `NotDelivered` when it never reached the relay; `NwcError`
-	* for an error the wallet answered; `NoAnswer` (or a relay error) when the outcome is unknown.
-	*/
-	async request(method, params, { ms = this.options.requestMs ?? REQUEST_MS$1, expiresIn } = {}) {
-		if (this.closed) throw new NotDelivered("The wallet connection is closed");
-		const tags = [["p", this.connection.walletPubkey]];
-		if (this.conversationKey) tags.push(["encryption", "nip44_v2"]);
-		if (expiresIn) tags.push(["expiration", String(now$1() + expiresIn)]);
-		const event = finalizeEvent({
-			kind: KIND.request,
-			created_at: now$1(),
-			tags,
-			content: this.encrypt(JSON.stringify({
-				method,
-				params
-			}))
-		}, this.connection.secret);
-		const answer = new Promise((resolve, reject) => {
-			const timer = setTimeout(() => {
-				this.pending.delete(event.id);
-				reject(new NoAnswer(method));
-			}, ms);
-			this.pending.set(event.id, {
-				method,
-				resolve,
-				reject,
-				timer
-			});
-		});
-		const delivered = this.relay.publish(event).then(() => void 0, (error) => {
-			const waiting = this.pending.get(event.id);
-			if (!(error instanceof NotDelivered) || !waiting) return void 0;
-			clearTimeout(waiting.timer);
-			this.pending.delete(event.id);
-			return error;
-		});
-		return Promise.race([answer, delivered.then((error) => error ? Promise.reject(error) : answer)]);
-	}
-	/** Reads an answer: from the wallet, signed, about a request of ours, of the method asked. Anything else is dropped. */
-	answer(raw) {
-		const event = raw;
-		if (!event || typeof event !== "object" || event.kind !== KIND.response || event.pubkey !== this.connection.walletPubkey) return;
-		if (typeof event.content !== "string" || event.content.length > MAX_CONTENT || !Array.isArray(event.tags)) return;
-		const ref = event.tags.find((t) => Array.isArray(t) && t[0] === "e")?.[1];
-		const pending = typeof ref === "string" ? this.pending.get(ref) : void 0;
-		if (!pending || !event.tags.some((t) => Array.isArray(t) && t[0] === "p" && t[1] === this.clientPubkey)) return;
-		if (!verifyEvent(event)) return;
-		let body;
-		try {
-			body = JSON.parse(this.decrypt(event.content));
-		} catch {
-			return;
-		}
-		if (!body || typeof body !== "object" || body.result_type !== pending.method) return;
-		clearTimeout(pending.timer);
-		this.pending.delete(ref);
-		if (body.error) {
-			const code = typeof body.error.code === "string" ? body.error.code.slice(0, 40) : "OTHER";
-			const message = typeof body.error.message === "string" && body.error.message.trim() ? body.error.message.trim().slice(0, 200) : code;
-			pending.reject(new NwcError(code, message));
-		} else if (body.result && typeof body.result === "object" && !Array.isArray(body.result)) pending.resolve(body.result);
-		else pending.reject(new NwcError("OTHER", "The wallet sent an empty answer"));
-	}
-	async lookup(paymentHash) {
-		const tx = await this.request("lookup_invoice", { payment_hash: paymentHash });
-		if (tx.payment_hash !== void 0 && String(tx.payment_hash).toLowerCase() !== paymentHash) throw new Error("The wallet answered about another invoice");
-		return tx;
-	}
-	async info() {
-		let balance;
-		if (this.capabilities.balance) {
-			const result = await this.request("get_balance", {});
-			if (!isMsat(result.balance)) throw new Error("The wallet returned an invalid balance");
-			balance = Math.floor(result.balance / 1e3);
-		}
-		return {
-			network: this.network,
-			alias: `${this.alias ?? "NWC wallet"} via ${new URL(this.relay.url).host}`,
-			balance
-		};
-	}
-	async createInvoice(amount, memo) {
-		if (!Number.isSafeInteger(amount) || amount <= 0 || !Number.isSafeInteger(amount * 1e3)) throw new Error("Invalid amount");
-		const result = await this.request("make_invoice", {
-			amount: amount * 1e3,
-			...memo ? { description: memo.slice(0, 200) } : {},
-			expiry: INVOICE_EXPIRY_S$1
-		});
-		const text = typeof result.invoice === "string" && result.invoice.length <= MAX_INVOICE ? result.invoice : "";
-		const decoded = decodeBolt11(text);
-		if (!decoded?.paymentHash || decoded.amountMsat !== BigInt(amount) * 1000n) throw new Error("The wallet returned an invoice that does not match the request");
-		if (result.payment_hash !== void 0 && String(result.payment_hash).toLowerCase() !== decoded.paymentHash) throw new Error("The wallet returned an invoice that does not match its payment hash");
-		return {
-			invoice: decoded.invoice,
-			paymentHash: decoded.paymentHash,
-			amount,
-			expiresAt: decoded.expiresAt * 1e3
-		};
-	}
-	async invoiceStatus(invoice) {
-		let tx;
-		try {
-			tx = await this.lookup(invoice.paymentHash);
-		} catch (error) {
-			if (error instanceof NwcError && error.code === "NOT_FOUND" && invoice.expiresAt < Date.now()) return { state: "expired" };
-			throw error;
-		}
-		const expired = invoice.expiresAt < Date.now();
-		if (tx.type === "outgoing") return { state: expired ? "expired" : "open" };
-		const state = tx.state ?? (tx.settled_at ? "settled" : "pending");
-		if (state === "settled") return {
-			state: "paid",
-			amount: isMsat(tx.amount) ? Math.floor(tx.amount / 1e3) : invoice.amount
-		};
-		if (state === "expired" || state === "failed") return { state: "expired" };
-		return { state: expired ? "expired" : "open" };
-	}
-	/**
-	* Pays through the wallet. NIP-47 carries no fee limit: the wallet applies its own, and the fee it
-	* reports is passed on as it is.
-	*/
-	async payInvoice(invoice, _maxFee) {
-		const decoded = decodeBolt11(invoice);
-		if (!decoded?.paymentHash || decoded.amountSat === null) throw new NothingSpentError("That invoice cannot be paid through NWC");
-		if (!this.capabilities.send) throw new NothingSpentError("This wallet connection may not pay and look up invoices");
-		let result;
-		try {
-			result = await this.request("pay_invoice", { invoice: decoded.invoice }, {
-				ms: this.options.payMs ?? PAY_MS,
-				expiresIn: PAY_EXPIRY_S
-			});
-		} catch (error) {
-			if (error instanceof NotDelivered) throw new NothingSpentError(`The payment did not reach the wallet: ${error.message}`);
-			if (error instanceof NwcError && REFUSED_BEFORE_PAYING.has(error.code)) throw new NothingSpentError(`The wallet refused the payment: ${error.message}`);
-			if (error instanceof NwcError) return this.confirmFailure(decoded.invoice, decoded.paymentHash, error);
-			throw error;
-		}
-		const preimage = typeof result.preimage === "string" ? result.preimage.toLowerCase() : "";
-		if (!HEX64$3.test(preimage) || hex$6(sha256(bytes$2(preimage))) !== decoded.paymentHash) throw new Error("The wallet said it paid, without a proof that matches the invoice");
-		return {
-			state: "paid",
-			preimage,
-			fee: isMsat(result.fees_paid) ? Math.ceil(result.fees_paid / 1e3) : void 0
-		};
-	}
-	/**
-	* An error after the wallet may have tried (`PAYMENT_FAILED` "may be due to a timeout", `INTERNAL`,
-	* `OTHER`…): its own record decides. Only a payment it records as failed is `NothingSpentError`; one it
-	* records as paid is paid; anything else is pending, or unknown when it cannot be asked.
-	*/
-	async confirmFailure(invoice, paymentHash, failure) {
-		let status;
-		try {
-			status = await this.paymentStatus({
-				invoice,
-				paymentHash
-			});
-		} catch {
-			throw new Error(`The wallet said the payment failed (${failure.message}), and cannot confirm it yet`);
-		}
-		if (status.state === "failed") throw new NothingSpentError(`The payment failed: ${failure.message}`);
-		return status.state === "paid" ? {
-			state: "paid",
-			fee: status.fee,
-			preimage: status.preimage
-		} : { state: "pending" };
-	}
-	async paymentStatus(payment) {
-		let tx;
-		try {
-			tx = await this.lookup(payment.paymentHash);
-		} catch (error) {
-			if (!(error instanceof NwcError && error.code === "NOT_FOUND")) throw error;
-			return { state: (decodeBolt11(payment.invoice)?.expiresAt ?? Infinity) * 1e3 + EXPIRED_MARGIN_MS < Date.now() ? "failed" : "pending" };
-		}
-		if (tx.type === "incoming") return { state: "pending" };
-		const preimage = typeof tx.preimage === "string" && HEX64$3.test(tx.preimage.toLowerCase()) ? tx.preimage.toLowerCase() : void 0;
-		const proven = !!preimage && hex$6(sha256(bytes$2(preimage))) === payment.paymentHash;
-		const state = tx.state ?? (tx.settled_at || proven ? "settled" : "pending");
-		const fee = isMsat(tx.fees_paid) ? Math.ceil(tx.fees_paid / 1e3) : void 0;
-		if (state === "settled") {
-			if (preimage && !proven) throw new Error("The wallet's proof of payment does not match the invoice");
-			return {
-				state: "paid",
-				fee,
-				preimage
-			};
-		}
-		if (state === "failed" || state === "expired") return { state: "failed" };
-		return { state: "pending" };
-	}
-	async close() {
-		if (this.closed) return;
-		this.closed = true;
-		for (const [id, pending] of this.pending) {
-			clearTimeout(pending.timer);
-			this.pending.delete(id);
-			pending.reject(/* @__PURE__ */ new Error("The wallet connection is closed"));
-		}
-		this.relay.close();
-	}
-};
-var nwc = {
-	id: "nwc",
-	label: "Nostr Wallet Connect",
-	kind: "lightning",
-	description: "A wallet you connect with its NWC URI (Alby Hub, a node's NWC service, a hosted wallet). That wallet holds the sats and sets its own fee limit: custodial or not depends on the wallet.",
-	networks: [
-		"bitcoin",
-		"testnet",
-		"signet",
-		"mutinynet",
-		"regtest"
-	],
-	platforms: PROVIDER_PLATFORMS,
-	fields: [{
-		name: "uri",
-		label: "Connection URI",
-		kind: "secret",
-		placeholder: "nostr+walletconnect://…",
-		help: "From your wallet's app connections. Allow making, paying and looking up invoices, and reading the balance."
-	}],
-	validate({ secrets }) {
-		parseNwcUri(secrets.uri ?? "");
-	},
-	async create({ secrets }, host) {
-		return NwcLightning.connect(secrets.uri, { signal: host.signal });
-	}
-};
 /** What the recommended macaroon grants: `lncli bakemacaroon info:read invoices:read invoices:write offchain:read offchain:write`. */
 var LND_SCOPE = [
 	"info:read",
@@ -7767,6 +6704,28 @@ function defaultRegistry() {
 	};
 }
 //#endregion
+//#region ../browser/src/proofs/load.ts
+/**
+* The identity proof providers, loaded on first need and not with the app: they and their libraries (OpenPGP, the
+* Bitcoin signer, the DID, AT Protocol and OpenID Connect checks) are a large part of the code, and the first screen
+* draws none of it. The engine loads them with the profile's proofs; the UI once it draws something about identities.
+*/
+var registry;
+var loading$1;
+var listeners = /* @__PURE__ */ new Set();
+function loadIdentityProviders() {
+	return loading$1 ??= import("./registry-OBJBnHVQ.js").then((m) => {
+		registry = m;
+		for (const listener of listeners) listener();
+		return m;
+	}, (error) => {
+		loading$1 = void 0;
+		throw error;
+	});
+}
+/** The providers (built in, from plugins, the test ones when asked for), once loaded; none before. */
+var loadedIdentityProviders = () => registry?.identityProviders() ?? [];
+//#endregion
 //#region ../browser/src/engine/identities.ts
 var KEY$2 = "identityProofs";
 var REVOCATIONS = "identityRevocations";
@@ -7807,14 +6766,17 @@ var IdentityProofs = class {
 	/** Chats whose current connection already got the hello: "ready" is reported more than once per connection. */
 	greeted = /* @__PURE__ */ new Set();
 	fetch;
-	constructor(host, providers = identityProviders) {
+	constructor(host, providers = loadedIdentityProviders) {
 		this.host = host;
 		this.providers = providers;
 		this.fetch = boundedIdentityFetch({ online: host.online });
 	}
+	/** The profile's proofs, and the providers that check and show them: loaded here, not with the app. */
 	async load() {
+		const providers = loadIdentityProviders();
 		const settings = await store(STORES$1.settings, "readonly");
 		[this.proofs, this.revocations] = await Promise.all([wrap(settings.get(KEY$2)).then((v) => v ?? []), wrap(settings.get(REVOCATIONS)).then((v) => v ?? [])]);
+		await providers;
 	}
 	/** Background work: republish revocations, look up the contacts' proofs for revocations. */
 	start() {
@@ -11154,18 +10116,39 @@ var DEFAULT_APP_STORES = [{
 	url: "https://raw.githubusercontent.com/MiguelMedeiros/ghostly-store/HEAD/ghostly-store.json",
 	key: "y379ia3t1urwudj8o4w1qwmuwp1mcxyf956b5r7pqup7stce6diy"
 }];
+/**
+* The apps that come with Ghostly. A short list kept here on purpose, never "everything in the official store": an
+* entry is added with the pin of its bundle in apps/ui/src/assets/apps/built-in.json, which the build reads from the
+* app's own repository (apps/ui/scripts/built-in-apps.mjs); no bundle is kept in this repository.
+*
+* Chess: Ghostly's own publisher key for it (fingerprint odcg w6wj w8dy nqop), version 2.3.0 (`sequence` 4), at the
+* commit of its repository that the official store lists.
+*/
+var BUILT_IN_APPS = [{
+	publisher: "odcgw6wjw8dynqop84r47jbjcdqossbgrfiejd367e14hgxmjcho",
+	name: "chess",
+	digest: "EEnFmP0grTkTe_9qgapQsEEZzWB9FcpoimWkHnfecVs",
+	url: "https://cdn.jsdelivr.net/gh/MiguelMedeiros/ghostly-chess@c665ab194478145fd9b9a4777e6c0d1893969649/app.ghostlyapp",
+	title: "Chess",
+	tagline: "Play chess with a contact, live in your chat"
+}];
 var APP_STORAGE_LIMITS = {
 	/** A key, in UTF-8 bytes. */
 	keyBytes: 256,
 	/** A value, as compact JSON in UTF-8 bytes. */
 	valueBytes: 65536,
 	/**
-	* Counted for each key beside its own bytes and its value's: what the row costs on the device (the app's reference,
-	* the scope and the key again, in the row's own key and in its two indexes). Without it a scope of one-byte values
-	* held 20 times its 5 MiB.
+	* Counted for each key beside its own bytes and its value's: what the row costs on the device (the app's reference and
+	* the scope, in the row's own key and in its two indexes). Without it a scope of one-byte values held 20 times its 5 MiB.
 	*/
 	rowBytes: 128,
-	/** Every key and value of one app in one scope, with `rowBytes` for each key. */
+	/**
+	* How many times a key's bytes count. The device keeps a key four times (the row's own key, its value and both
+	* indexes), three of them as UTF-16, about 10 bytes for each byte of the key: counted once, a scope of 256-byte keys
+	* took 40 to 55 MB for its 5 MiB.
+	*/
+	keyTimes: 8,
+	/** Every key and value of one app in one scope, with `rowBytes` for each key and its bytes `keyTimes` over. */
 	scopeBytes: 5242880
 };
 var APP_CHECK_TIMINGS = {
@@ -11178,22 +10161,74 @@ var APP_CHECK_TIMINGS = {
 /** Revocations are checked this long at a time before the page's thread is let go. */
 var REVOCATIONS_SLICE_MS = 10;
 /**
+* `ghostly-revoke.json` files whose result is kept, so an unchanged one is not checked again (the oldest dropped first):
+* at most this many, and of the ones whose list is held at most one file's limit of bytes in all. A publisher's file is
+* small; nine large ones beside one app's URLs, or one that changes at every check, would stay for the engine's life.
+*/
+var REVOCATION_FILES_KEPT = {
+	max: 64,
+	bytes: APP_FETCH_LIMITS.revocationsBytes
+};
+/**
 * Revocations of store indexes whose signature was checked, kept by `appRevocationId` so an index that changes around
 * them does not have each checked again (the one read longest ago dropped first): four indexes' worth, about 1 MiB.
 */
 var STORE_REVOCATIONS_KEPT = 4 * APP_STORE_LIMITS.revoked;
-/** `ghostly-revoke.json` files whose result is kept, so an unchanged one is not checked again (the oldest dropped first). */
-var REVOCATION_FILES_KEPT = 64;
 /** A fetched bundle kept for its install screen: at most this many, for this long. */
 var STAGED = {
 	max: 4,
 	ms: 6e5
 };
+/**
+* Checked bundles kept in memory: the most recently used `min`, and beyond them each one a running app used (`entry`,
+* `file`, `fileAt`) within `ms`. The engine is not told when an app closes; one not used for that long goes, and is read
+* and checked again if it still runs.
+*/
+var BUNDLES_KEPT = {
+	min: 2,
+	ms: 6e4
+};
 /** The first bytes of a bundle: magic, the manifest's length and the largest manifest. */
 var PEEK_BYTES = APP_BUNDLE_MAGIC.length + 4 + APP_BUNDLE_LIMITS.manifestBytes;
 var bundleId = (digest) => `app-${digest}`;
-/** What a row takes of its scope's 5 MiB: its key and value, and `rowBytes`. Not kept in the row, so rows from before count alike. */
-var costOf = (row) => APP_STORAGE_LIMITS.rowBytes + row.size;
+/**
+* The key of a scope's counter row (`AppScopeCount` as JSON in `value`, `size` 0): an app's key is never empty
+* (`keyOf`), and the app's own rows of a scope are `keysOf`, which leaves it out.
+*/
+var COUNT_KEY = "";
+var NO_ROWS = {
+	rows: 0,
+	keyBytes: 0,
+	size: 0
+};
+/**
+* What rows take of their scope's 5 MiB: `rowBytes` each, their keys `keyTimes` over and their values. Not kept, so a
+* count from before counts alike.
+*/
+var costOf = ({ rows, keyBytes, size }) => rows * APP_STORAGE_LIMITS.rowBytes + size + (APP_STORAGE_LIMITS.keyTimes - 1) * keyBytes;
+/** One row as a count, `sign` -1 to take it away. */
+var countOf = ({ key, size }, sign = 1) => ({
+	rows: sign,
+	keyBytes: sign * byteLength(key),
+	size: sign * size
+});
+var plus = (a, b) => ({
+	rows: a.rows + b.rows,
+	keyBytes: a.keyBytes + b.keyBytes,
+	size: a.size + b.size
+});
+function readCount(value) {
+	try {
+		const c = JSON.parse(value);
+		return [
+			c.rows,
+			c.keyBytes,
+			c.size
+		].every((n) => Number.isSafeInteger(n) && n >= 0) ? c : null;
+	} catch {
+		return null;
+	}
+}
 /**
 * A listing's URLs this client reads, in order, a jsDelivr copy first: one this client reads names a full commit, so it
 * holds exactly the version the store reviewed, where a raw `HEAD` may have moved on to one it has not (WISP 1200 §
@@ -11209,6 +10244,46 @@ function fail(code, words) {
 	throw new Error(`${code}: ${words}`);
 }
 /**
+* The key, in `STORES.settings`, of what the person did about the apps that come with Ghostly (one of
+* `PROFILE_SETTINGS_KEYS`: "Clear all data" drops it, and the profile is offered them as a new one is).
+*/
+var BUILT_IN_APPS_KEY = "appBuiltIns";
+/** The marks as kept, read with nothing taken on trust: a record that is not one is no mark. */
+function builtInMarks(kept) {
+	const removed = {};
+	const held = kept?.removed;
+	if (held && typeof held === "object") {
+		for (const [ref, at] of Object.entries(held)) if (isAppRef(ref) && typeof at === "number") removed[ref] = at;
+	}
+	return { removed };
+}
+/** Queues, on the settings store of an open transaction, a change of the built-in apps' marks. */
+function markBuiltIns(settings, change) {
+	const read = settings.get(BUILT_IN_APPS_KEY);
+	read.onsuccess = () => {
+		const marks = builtInMarks(read.result);
+		change(marks);
+		settings.put(marks, BUILT_IN_APPS_KEY);
+	};
+}
+var builtInRef = (app) => appRef(app.publisher, app.name);
+/**
+* The entries of the built-in list this profile is offered (WISP 1200 § Built-in apps): each reference once, not
+* installed (`installed`, by reference) and not removed by the person. An entry that is not a whole one (its key, its
+* name, its digest, a URL off the list of `appFetch.ts`, no title or tagline) is skipped, as a build with no bundle
+* for it would be.
+*/
+function builtInsDue(list, installed, marks) {
+	const due = /* @__PURE__ */ new Map();
+	for (const app of list) {
+		if (!isAppKey(app.publisher) || !isAppHash(app.digest) || !isAppFetchUrl(app.url) || !app.title || !app.tagline) continue;
+		const ref = builtInRef(app);
+		if (!isAppRef(ref) || due.has(ref) || installed.has(ref) || marks.removed[ref] !== void 0) continue;
+		due.set(ref, app);
+	}
+	return [...due.values()];
+}
+/**
 * Why a pasted link is not read: a github.com page that is neither a repository nor a file of one (`github-link`), so
 * the person is not told GitHub is off the list; any other host (`host`).
 */
@@ -11231,8 +10306,26 @@ function withRevocations(app, read) {
 		revocations: [...merged.values()]
 	} : app;
 }
-/** Rows of one app (`[ref]`), or of one app in one scope (`[ref, scope]`), in `STORES.appStorage`. */
+/** Rows of one app (`[ref]`), or of one app in one scope (`[ref, scope]`), in `STORES.appStorage`, counter rows included. */
 var rowsOf = (...prefix) => IDBKeyRange.bound(prefix, [...prefix, []]);
+/** The app's own rows of one scope: its counter row left out. */
+var keysOf = (ref, scope) => IDBKeyRange.bound([
+	ref,
+	scope,
+	COUNT_KEY
+], [
+	ref,
+	scope,
+	[]
+], true);
+/** A scope's counter row (`COUNT_KEY`). */
+var counterRow = (ref, scope, count) => ({
+	ref,
+	scope,
+	key: COUNT_KEY,
+	value: JSON.stringify(count),
+	size: 0
+});
 function done(tx) {
 	return new Promise((resolve, reject) => {
 		tx.oncomplete = () => resolve();
@@ -11265,8 +10358,10 @@ function peekAppManifest(bytes) {
 var Apps = class {
 	host;
 	staged = /* @__PURE__ */ new Map();
-	/** Bundles read back and checked, by digest, least recently used first: the ones running are read once, not on every `file`. */
+	/** Bundles read back and checked, by digest, least recently used first (`BUNDLES_KEPT`): the ones running are read once, not on every `file`. */
 	verified = /* @__PURE__ */ new Map();
+	/** When a running app last used its bundle, by digest (`BUNDLES_KEPT`): an icon drawn is not a use. */
+	runUsed = /* @__PURE__ */ new Map();
 	/** Reads of a bundle under way, by digest: icons drawn at once share one read. */
 	verifying = /* @__PURE__ */ new Map();
 	/**
@@ -11274,7 +10369,7 @@ var Apps = class {
 	* page, in a chat's cards and in the composer's Apps is read without the whole bundle again.
 	*/
 	icons = /* @__PURE__ */ new Map();
-	/** Bytes used per `ref\0scope`, counted once from the rows and kept in step by the writes here. */
+	/** What each `ref\0scope` holds, read once from its counter row and kept in step by the writes here. */
 	usage = /* @__PURE__ */ new Map();
 	queues = /* @__PURE__ */ new Map();
 	timer = null;
@@ -11298,7 +10393,7 @@ var Apps = class {
 	* index listing the same is not peeked again at every check.
 	*/
 	listingMisses = /* @__PURE__ */ new Map();
-	/** `ghostly-revoke.json` files checked, by the SHA-256 of their bytes: their revocations, or null when refused. */
+	/** `ghostly-revoke.json` files checked, by the SHA-256 of their bytes: their revocations, or null when refused, and the bytes the held list counts for. */
 	revocationFiles = /* @__PURE__ */ new Map();
 	/** Revocations read in a store's index and verified, by `appRevocationId`: at most `STORE_REVOCATIONS_KEPT`. */
 	storeRevocations = /* @__PURE__ */ new Set();
@@ -11391,6 +10486,59 @@ var Apps = class {
 		if (!isAppRef(ref)) fail("bad-ref", "Not an app reference");
 		return await this.app(ref) ?? fail("not-installed", "This app is not installed");
 	}
+	/** The built-in list's entry of this reference, if it has one. */
+	builtIn(ref) {
+		return (this.host.builtIns ?? BUILT_IN_APPS).find((app) => builtInRef(app) === ref);
+	}
+	async builtInMarks() {
+		return builtInMarks(await wrap((await store(STORES$1.settings, "readonly")).get(BUILT_IN_APPS_KEY)));
+	}
+	/**
+	* The built-in apps this profile is offered (WISP 1200 § Built-in apps): shown with the installed ones, with nothing
+	* stored and nothing granted. Opening one is an install like any other, from the bundle the build carries.
+	*/
+	async builtIns() {
+		const list = this.host.builtIns ?? BUILT_IN_APPS;
+		if (!list.length || !this.host.readBuiltIn) return [];
+		const [installed, marks] = await Promise.all([this.installed(), this.builtInMarks()]);
+		return builtInsDue(list, new Set(installed.map((a) => a.ref)), marks).map((app) => ({
+			ref: builtInRef(app),
+			publisher: app.publisher,
+			name: app.name,
+			fingerprint: appFingerprint(app.publisher),
+			digest: app.digest,
+			url: app.url,
+			title: app.title,
+			tagline: app.tagline
+		}));
+	}
+	/**
+	* The bundle the build carries for a built-in app, checked as a fetched one is, and against its entry: the digest the
+	* list pins and the entry's reference. Anything else in that file is not this app, and nothing of it is kept.
+	*/
+	async bundled(app) {
+		if (!this.host.readBuiltIn) fail("not-carried", "This build does not carry this app");
+		let bytes;
+		try {
+			bytes = await this.host.readBuiltIn(app);
+		} catch {
+			fail("not-carried", "This build does not carry this app");
+		}
+		if (!(bytes instanceof Uint8Array) || bytes.length > APP_BUNDLE_LIMITS.bundleBytes) fail("not-carried", "This build does not carry this app");
+		const read = await readAppBundleAsync(bytes);
+		if (!read.ok) fail(read.reason, `This is not an app Ghostly can install${read.detail ? ` (${read.detail})` : ""}`);
+		if (read.bundle.digest !== app.digest || versionOf(read.bundle.manifest, read.bundle.digest).ref !== builtInRef(app)) fail("unlisted", "The app this build carries is not the one it names");
+		return {
+			bundle: read.bundle,
+			bytes
+		};
+	}
+	/** The built-in entry of this reference while the profile is offered it (`builtIns`), else undefined. */
+	async offered(ref) {
+		const app = this.builtIn(ref);
+		if (!app || !this.host.readBuiltIn) return void 0;
+		return builtInsDue([app], await this.app(ref) ? /* @__PURE__ */ new Set([ref]) : /* @__PURE__ */ new Set(), await this.builtInMarks())[0];
+	}
 	/**
 	* An installed app that may still run (WISP 1200 § Takedowns): a running app whose version its publisher revoked, or
 	* a store of the person's removed (unless this run was started with Run anyway), is cut off with `stopped`, whether
@@ -11543,7 +10691,7 @@ var Apps = class {
 	*/
 	async writeBundle(digest, bytes) {
 		const id = bundleId(digest);
-		const expected = toBase64Url(sha256(bytes));
+		const expected = toBase64Url(await sha256Paced(bytes));
 		let files;
 		let stored;
 		try {
@@ -11588,6 +10736,7 @@ var Apps = class {
 	}
 	async removeBundle(kind, digest) {
 		this.verified.delete(digest);
+		this.runUsed.delete(digest);
 		this.icons.delete(digest);
 		await (await fileBytesOf(kind))?.remove(bundleId(digest)).catch(() => {});
 	}
@@ -11597,11 +10746,13 @@ var Apps = class {
 		if (app?.digest !== digest && app?.pending?.digest !== digest) await this.removeBundle(kind, digest);
 	}
 	/** The installed bundle read back and checked again before it runs (WISP 1200 § Signatures: "again before it runs one"). */
-	verifiedBundle(app) {
+	verifiedBundle(app, running) {
+		if (running) this.runUsed.set(app.digest, this.now());
 		const kept = this.verified.get(app.digest);
 		if (kept) {
 			this.verified.delete(app.digest);
 			this.verified.set(app.digest, kept);
+			this.dropUnusedBundles();
 			return Promise.resolve(kept);
 		}
 		const under = this.verifying.get(app.digest);
@@ -11609,11 +10760,10 @@ var Apps = class {
 		const reading = (async () => {
 			const bytes = await this.readBundleBytes(app.bytes, app.digest);
 			if (!bytes) fail("needs-files", "This app's files are not on this device yet");
-			const read = readAppBundle(bytes);
+			const read = await readAppBundleAsync(bytes);
 			if (!read.ok || read.bundle.digest !== app.digest) fail("damaged", "This app's stored files do not match what was installed");
 			this.verified.set(app.digest, read.bundle);
-			const room = Math.max(2, this.started.size + (this.started.has(app.ref) ? 0 : 1));
-			while (this.verified.size > room) this.verified.delete(this.verified.keys().next().value);
+			this.dropUnusedBundles();
 			this.icons.set(app.digest, read.bundle.files.get("icon.png")?.slice() ?? null);
 			return read.bundle;
 		})().finally(() => {
@@ -11622,9 +10772,21 @@ var Apps = class {
 		this.verifying.set(app.digest, reading);
 		return reading;
 	}
+	/**
+	* Apps running at once do not push each other's bundle out, which every `file` read would then read and check again
+	* whole; one closed (or only drawn as an icon) goes once two newer ones are kept, at the next bundle read or hit.
+	*/
+	dropUnusedBundles() {
+		for (const digest of this.verified.keys()) {
+			if (this.verified.size <= BUNDLES_KEPT.min) break;
+			if (this.now() - (this.runUsed.get(digest) ?? -Infinity) < BUNDLES_KEPT.ms) continue;
+			this.verified.delete(digest);
+			this.runUsed.delete(digest);
+		}
+	}
 	async fetchBundle(url) {
 		const bytes = await this.host.fetch(url, { maxBytes: APP_BUNDLE_LIMITS.bundleBytes });
-		const read = readAppBundle(bytes);
+		const read = await readAppBundleAsync(bytes);
 		if (!read.ok) fail(read.reason, `This is not an app Ghostly can install${read.detail ? ` (${read.detail})` : ""}`);
 		return {
 			bundle: read.bundle,
@@ -11640,7 +10802,7 @@ var Apps = class {
 	*/
 	async readStoreAt(url, heldKey, held) {
 		const [indexBytes, sigBytes] = await Promise.all([this.host.fetch(url, { maxBytes: APP_FETCH_LIMITS.storeIndexBytes }), this.host.fetch(besideUrl(url, "ghostly-store.sig"), { maxBytes: APP_FETCH_LIMITS.sigBytes })]);
-		if (held?.index && held.digest !== void 0 && toBase64Url(sha256(indexBytes)) === held.digest) return {
+		if (held?.index && held.digest !== void 0 && toBase64Url(await sha256Paced(indexBytes)) === held.digest) return {
 			ok: true,
 			store: {
 				index: held.index,
@@ -11649,14 +10811,11 @@ var Apps = class {
 			}
 		};
 		const steps = readAppStoreSteps(indexBytes, sigBytes, this.nowS(), heldKey, this.checkedRevocations);
-		let since = performance.now();
+		const pause = pacer(REVOCATIONS_SLICE_MS);
 		for (;;) {
 			const step = steps.next();
 			if (step.done) return step.value;
-			if (performance.now() - since >= REVOCATIONS_SLICE_MS) {
-				await new Promise((resolve) => setTimeout(resolve, 0));
-				since = performance.now();
-			}
+			await pause();
 		}
 	}
 	/**
@@ -11680,19 +10839,16 @@ var Apps = class {
 	* engine shares the page's thread, and each entry is a signature check. The same bytes are not checked again.
 	*/
 	async readRevocationsFile(bytes) {
-		const id = toBase64Url(sha256(bytes));
+		const id = toBase64Url(await sha256Paced(bytes));
 		const known = this.revocationFiles.get(id);
-		if (known !== void 0) return known;
+		if (known !== void 0) return known.revocations;
 		const read = readCanonicalJson(bytes);
 		let out = null;
 		if (read.ok && Array.isArray(read.value) && read.value.length <= APP_STATEMENT_LIMITS.revocations) {
 			out = [];
-			let since = performance.now();
+			const pause = pacer(REVOCATIONS_SLICE_MS);
 			for (const entry of read.value) {
-				if (performance.now() - since >= REVOCATIONS_SLICE_MS) {
-					await new Promise((resolve) => setTimeout(resolve, 0));
-					since = performance.now();
-				}
+				await pause();
 				const one = readAppRevocation(entry);
 				if (!one.ok) {
 					out = null;
@@ -11702,8 +10858,17 @@ var Apps = class {
 			}
 		}
 		this.revocationFiles.delete(id);
-		this.revocationFiles.set(id, out);
-		for (const old of this.revocationFiles.keys()) if (this.revocationFiles.size > REVOCATION_FILES_KEPT) this.revocationFiles.delete(old);
+		this.revocationFiles.set(id, {
+			revocations: out,
+			bytes: out ? bytes.length : 0
+		});
+		let held = 0;
+		for (const file of this.revocationFiles.values()) held += file.bytes;
+		for (const [old, file] of this.revocationFiles) {
+			if (this.revocationFiles.size <= REVOCATION_FILES_KEPT.max && held <= REVOCATION_FILES_KEPT.bytes) break;
+			this.revocationFiles.delete(old);
+			held -= file.bytes;
+		}
 		return out;
 	}
 	summary(s) {
@@ -11881,6 +11046,12 @@ var Apps = class {
 		let urls;
 		let expect = null;
 		let fromStore;
+		if ("builtIn" in source) {
+			if (!isAppRef(source.builtIn)) fail("bad-ref", "Not an app reference");
+			const app = await this.offered(source.builtIn) ?? fail("not-offered", "This app does not come with Ghostly here");
+			const { bundle, bytes } = await this.bundled(app);
+			return this.stage(bundle, bytes, app.url, void 0, true);
+		}
 		if ("url" in source) urls = [typeof source.url === "string" && appPasteUrl(source.url, "app.ghostlyapp") || notReadable(source.url, "Apps are read only from raw.githubusercontent.com, or from cdn.jsdelivr.net at a commit, over HTTPS")];
 		else if ("store" in source) {
 			const s = await this.storeRecord(source.store);
@@ -11898,6 +11069,11 @@ var Apps = class {
 			const { ref, url, sequence, digest } = source.card;
 			if (!isAppRef(ref)) fail("bad-ref", "Not an app reference");
 			if (!isAppFetchUrl(url)) fail("host", "A card's app is read only from raw.githubusercontent.com, or from cdn.jsdelivr.net at a commit");
+			const carried = typeof digest === "string" ? await this.offered(ref) : void 0;
+			if (carried && carried.digest === digest) {
+				const held = await this.bundled(carried).catch(() => null);
+				if (held) return this.stage(held.bundle, held.bytes, carried.url, void 0, true);
+			}
 			urls = [url];
 			expect = {
 				ref,
@@ -11929,7 +11105,7 @@ var Apps = class {
 		const oldest = this.staged.values().next().value;
 		if (oldest) this.sweep = setTimeout(() => this.sweepStaged(), STAGED.ms - (this.now() - oldest.at));
 	}
-	async stage(bundle, bytes, from, fromStore) {
+	async stage(bundle, bytes, from, fromStore, carried = false) {
 		for (const [digest, s] of this.staged) if (this.now() - s.at > STAGED.ms) this.staged.delete(digest);
 		this.staged.delete(bundle.digest);
 		while (this.staged.size >= STAGED.max) this.staged.delete(this.staged.keys().next().value);
@@ -11960,7 +11136,8 @@ var Apps = class {
 			asks,
 			run: this.runStatus(version, this.storeViews(stores), installed?.revocations),
 			listedBy,
-			unknownPublisher: !listedBy.some((s) => s.kind === "curated")
+			unknownPublisher: !listedBy.some((s) => s.kind === "curated"),
+			...carried && { carried: true }
 		};
 	}
 	/**
@@ -12014,6 +11191,7 @@ var Apps = class {
 		const kind = await this.writeBundle(digest, bytes);
 		const next = this.versionRecord(installed, bundle, kind, from, fromStore);
 		await this.putApp(next);
+		if (!installed && this.builtIn(version.ref)) await this.keepBuiltIn(version.ref);
 		if (installed && installed.digest !== digest) await this.removeBundle(installed.bytes, installed.digest);
 		if (installed?.pending && next.pending?.digest !== installed.pending.digest && installed.pending.digest !== digest) await this.removeBundle(installed.pending.bytes, installed.pending.digest);
 		this.staged.delete(digest);
@@ -12052,7 +11230,7 @@ var Apps = class {
 		const installed = await this.installedOrFail(ref);
 		const pending = installed.pending ?? fail("no-update", "No update waits for this app");
 		const bytes = await this.readBundleBytes(pending.bytes, pending.digest);
-		const read = bytes ? readAppBundle(bytes) : null;
+		const read = bytes ? await readAppBundleAsync(bytes) : null;
 		if (!read?.ok || read.bundle.digest !== pending.digest) {
 			const { pending: _p, ...rest } = installed;
 			await this.putApp(rest);
@@ -12287,6 +11465,26 @@ var Apps = class {
 		const app = await this.installedOrFail(ref);
 		const stores = await this.stores();
 		if (await this.hasBundle(app.bytes, app.digest)) return this.runCheckOf(app, stores);
+		const carried = this.builtIn(app.ref);
+		if (carried && carried.digest === app.digest) {
+			const held = await this.bundled(carried).catch(() => null);
+			if (held) {
+				const kind = await this.writeBundle(app.digest, held.bytes);
+				const now = await this.app(app.ref);
+				if (!now || now.digest !== app.digest) {
+					await this.removeBundle(kind, app.digest);
+					fail("not-installed", "This app is not installed");
+				}
+				if (now.bytes !== kind) await this.putApp({
+					...now,
+					bytes: kind
+				});
+				return this.runCheckOf({
+					...now,
+					bytes: kind
+				}, stores);
+			}
+		}
 		const urls = [app.from];
 		for (const s of stores) {
 			if (app.store !== void 0 && s.key !== app.store) continue;
@@ -12294,6 +11492,14 @@ var Apps = class {
 		}
 		if (app.store === void 0) urls.push(...app.manifest.sources ?? []);
 		for (const url of new Set(urls.filter(isAppFetchUrl))) {
+			try {
+				if (peekAppManifest(await this.host.fetch(url, {
+					maxBytes: PEEK_BYTES,
+					peek: true
+				}))?.digest !== app.digest) continue;
+			} catch {
+				continue;
+			}
 			let fetched;
 			try {
 				fetched = await this.fetchBundle(url);
@@ -12341,7 +11547,7 @@ var Apps = class {
 		if (run.status === "removed" && runAnyway !== true) fail("removed", `Removed by ${run.by[0].name}: ${run.by[0].reason}`);
 		if (run.status === "needs-files") fail("needs-files", "This app's files are not on this device yet");
 		if (run.status === "removed") this.anyway.add(`${app.ref} ${app.digest}`);
-		const bundle = await this.verifiedBundle(app);
+		const bundle = await this.verifiedBundle(app, true);
 		const entry = bundle.files.get(bundle.manifest.entry) ?? fail("damaged", "The entry is missing");
 		this.ran.add(app.ref);
 		const versions = this.started.get(app.ref) ?? /* @__PURE__ */ new Map();
@@ -12357,6 +11563,29 @@ var Apps = class {
 		};
 	}
 	/**
+	* Where a file of the installed bundle lies in this device's file storage, for a client that hands the bytes to the
+	* app itself (Desktop: Rust reads them, checks their SHA-256 and gives them to the app's window, so they never cross
+	* the Ghostly window). The same checks as `file`; null where the bundle is not in such storage, and for the icon,
+	* which `file` answers from memory.
+	*/
+	async fileAt({ ref, path, digest }) {
+		if (path === "icon.png") return null;
+		const app = await this.runningOrFail(ref, digest);
+		if (digest !== void 0 && digest !== app.digest) fail("no-file", "No such file in this app");
+		if (app.bytes !== "native") return null;
+		const bundle = await this.verifiedBundle(app, true);
+		const file = typeof path === "string" ? bundle.files.get(path) : void 0;
+		const listed = bundle.manifest.files.find((f) => f.path === path);
+		if (!file || !listed) fail("no-file", "No such file in this app");
+		return {
+			space: fileSpace(),
+			id: bundleId(app.digest),
+			offset: file.byteOffset,
+			length: file.length,
+			sha256: listed.sha256
+		};
+	}
+	/**
 	* A file of the installed bundle, for the broker's `file` (`ghostly.file(path)`): a copy, which the broker transfers to
 	* the app as it is. `digest`: the version the frame runs.
 	*/
@@ -12366,7 +11595,7 @@ var Apps = class {
 		const icon = path === "icon.png" ? this.icons.get(app.digest) : void 0;
 		if (icon) return icon.slice();
 		if (icon === null) fail("no-file", "No such file in this app");
-		const bundle = await this.verifiedBundle(app);
+		const bundle = await this.verifiedBundle(app, path !== APP_ICON_PATH);
 		if (typeof path !== "string" || !bundle.files.has(path)) fail("no-file", "No such file in this app");
 		return bundle.files.get(path).slice();
 	}
@@ -12397,6 +11626,7 @@ var Apps = class {
 			run: await this.runCheckOf(app, stores),
 			listedBy,
 			unknownPublisher: !listedBy.some((s) => s.kind === "curated"),
+			...this.builtIn(app.ref)?.digest === app.digest && { builtIn: true },
 			...app.pending && { pending: {
 				sequence: app.pending.sequence,
 				version: app.pending.manifest.version,
@@ -12416,23 +11646,44 @@ var Apps = class {
 	}
 	/**
 	* Uninstalls an app: its bundle (and a waiting update's), its record and its storage in every scope. The person chose
-	* it, after the offer of an export (`exportData`).
+	* it, after the offer of an export (`exportData`). A built-in app is marked removed in the same transaction, and one
+	* the person never opened is only marked: no start and no update offers it again (WISP 1200 § Built-in apps).
 	*/
 	async uninstall({ ref }) {
-		const app = await this.installedOrFail(ref);
-		const tx = (await openDb()).transaction([STORES$1.apps, STORES$1.appStorage], "readwrite");
-		tx.objectStore(STORES$1.apps).delete(app.ref);
-		tx.objectStore(STORES$1.appStorage).delete(rowsOf(app.ref));
+		if (!isAppRef(ref)) fail("bad-ref", "Not an app reference");
+		const app = await this.app(ref);
+		const builtIn = this.builtIn(ref) !== void 0;
+		if (!app && !builtIn) fail("not-installed", "This app is not installed");
+		const tx = (await openDb()).transaction([
+			STORES$1.apps,
+			STORES$1.appStorage,
+			...builtIn ? [STORES$1.settings] : []
+		], "readwrite");
+		tx.objectStore(STORES$1.apps).delete(ref);
+		tx.objectStore(STORES$1.appStorage).delete(rowsOf(ref));
+		if (builtIn) markBuiltIns(tx.objectStore(STORES$1.settings), (marks) => {
+			marks.removed[ref] ??= this.now();
+		});
 		try {
 			await done(tx);
 		} finally {
-			this.held.delete(app.ref);
+			this.held.delete(ref);
 		}
-		for (const key of [...this.usage.keys()]) if (key.startsWith(`${app.ref}\0`)) this.usage.delete(key);
-		this.started.delete(app.ref);
+		for (const key of [...this.usage.keys()]) if (key.startsWith(`${ref}\0`)) this.usage.delete(key);
+		this.started.delete(ref);
+		if (!app) return;
 		await this.removeBundle(app.bytes, app.digest);
 		if (app.pending) await this.removeBundle(app.pending.bytes, app.pending.digest);
 	}
+	/** Takes the "removed by the person" mark off a built-in app, if it has one. */
+	async keepBuiltIn(ref) {
+		if ((await this.builtInMarks()).removed[ref] === void 0) return;
+		const tx = (await openDb()).transaction(STORES$1.settings, "readwrite");
+		markBuiltIns(tx.objectStore(STORES$1.settings), (marks) => {
+			delete marks.removed[ref];
+		});
+		await done(tx);
+	}
 	scopeOf(scope) {
 		if (scope === "alone" || typeof scope === "string" && this.host.isChat(scope)) return scope;
 		fail("bad-scope", "Not a chat of this profile");
@@ -12451,13 +11702,24 @@ var Apps = class {
 		});
 		return run;
 	}
+	/**
+	* What a scope holds: its counter row, when the number of rows agrees with it (one key count, no value read). A
+	* scope without one (written before it was kept) or where it disagrees (rows written by an older client) is
+	* counted from its rows once.
+	*/
 	async usageOf(ref, scope) {
 		const id = `${ref}\0${scope}`;
-		let used = this.usage.get(id);
-		if (used === void 0) {
-			used = (await wrap((await store(STORES$1.appStorage, "readonly")).index(APP_STORAGE_SCOPE_INDEX).getAll([ref, scope]))).reduce((sum, r) => sum + costOf(r), 0);
-			this.usage.set(id, used);
-		}
+		const cached = this.usage.get(id);
+		if (cached) return cached;
+		const rows = await store(STORES$1.appStorage, "readonly");
+		const [counter, n] = await Promise.all([wrap(rows.get([
+			ref,
+			scope,
+			COUNT_KEY
+		])), wrap(rows.count(keysOf(ref, scope)))]);
+		let used = counter ? readCount(counter.value) : n ? null : NO_ROWS;
+		if (!used || used.rows !== n) used = (await wrap((await store(STORES$1.appStorage, "readonly")).getAll(keysOf(ref, scope)))).reduce((sum, r) => plus(sum, countOf(r)), NO_ROWS);
+		this.usage.set(id, used);
 		return used;
 	}
 	async storageGet({ ref, scope, key, digest }) {
@@ -12471,8 +11733,8 @@ var Apps = class {
 	}
 	/**
 	* Keeps a JSON value under a key: at most 64 KiB, and 5 MiB for every key of this app in this scope, each counted
-	* with `rowBytes`. A scope already past that (filled before a key counted `rowBytes`) still takes a write that does
-	* not grow it, so the app can make room.
+	* as `costOf` says. A scope already past that (filled under an older count) still takes a write that does not grow
+	* it, so the app can make room.
 	*/
 	async storageSet({ ref, scope, key, value, digest }) {
 		const app = await this.runningOrFail(ref, digest);
@@ -12495,20 +11757,24 @@ var Apps = class {
 				where,
 				name
 			]));
-			const next = used - (old ? costOf(old) : 0) + APP_STORAGE_LIMITS.rowBytes + size;
-			if (next > APP_STORAGE_LIMITS.scopeBytes && next > used) fail("full", "This app's storage in this chat is full (5 MiB)");
+			const next = plus(old ? plus(used, countOf(old, -1)) : used, countOf({
+				key: name,
+				size
+			}));
+			if (costOf(next) > APP_STORAGE_LIMITS.scopeBytes && costOf(next) > costOf(used)) fail("full", "This app's storage in this chat is full (5 MiB)");
 			const writing = await store(STORES$1.appStorage, "readwrite");
 			if (where !== "alone" && !this.host.isChat(where)) {
 				this.usage.delete(`${app.ref}\0${where}`);
 				fail("bad-scope", "Not a chat of this profile");
 			}
-			await wrap(writing.put({
+			writing.put({
 				ref: app.ref,
 				scope: where,
 				key: name,
 				value: text,
 				size
-			}));
+			});
+			await wrap(writing.put(counterRow(app.ref, where, next)));
 			this.usage.set(`${app.ref}\0${where}`, next);
 		});
 	}
@@ -12523,39 +11789,73 @@ var Apps = class {
 				name
 			]));
 			if (!old) return;
-			await wrap((await store(STORES$1.appStorage, "readwrite")).delete([
+			const next = plus(used, countOf(old, -1));
+			const writing = await store(STORES$1.appStorage, "readwrite");
+			writing.delete([
 				app.ref,
 				where,
 				name
-			]));
-			this.usage.set(`${app.ref}\0${where}`, used - costOf(old));
+			]);
+			await (next.rows ? wrap(writing.put(counterRow(app.ref, where, next))) : wrap(writing.delete([
+				app.ref,
+				where,
+				COUNT_KEY
+			])));
+			this.usage.set(`${app.ref}\0${where}`, next);
 		});
 	}
 	async storageKeys({ ref, scope, digest }) {
 		const app = await this.runningOrFail(ref, digest);
-		return (await wrap((await store(STORES$1.appStorage, "readonly")).getAllKeys(rowsOf(app.ref, this.scopeOf(scope))))).map((k) => k[2]);
+		return (await wrap((await store(STORES$1.appStorage, "readonly")).getAllKeys(keysOf(app.ref, this.scopeOf(scope))))).map((k) => k[2]);
 	}
 	/** An app's storage in every scope, as export files (WISP 1200 § Where installed apps live), offered before an uninstall. */
 	async exportData({ ref }) {
-		const app = await this.installedOrFail(ref);
-		const rows = await wrap((await store(STORES$1.appStorage, "readonly")).getAll(rowsOf(app.ref)));
-		const scopes = /* @__PURE__ */ new Map();
-		for (const row of rows) {
-			const out = scopes.get(row.scope) ?? {
+		return (await this.exportDataText({ ref })).map(({ app, scope, entries }) => {
+			const out = {
 				ghostlyAppData: 1,
-				app: app.ref,
-				scope: row.scope,
+				app,
+				scope,
 				entries: {}
 			};
-			Object.defineProperty(out.entries, row.key, {
-				value: JSON.parse(row.value),
+			for (const [key, json] of entries) Object.defineProperty(out.entries, key, {
+				value: JSON.parse(json),
 				enumerable: true,
 				writable: true,
 				configurable: true
 			});
-			scopes.set(row.scope, out);
+			return out;
+		});
+	}
+	/**
+	* `exportData` with each value as the JSON text it is kept as, for a file written without parsing and writing every
+	* value again. Read a scope at a time, the thread let go between them: ten chats of 5 MiB read at once held it for
+	* the whole read.
+	*/
+	async exportDataText({ ref }) {
+		const app = await this.installedOrFail(ref);
+		const scopes = [];
+		const index = (await store(STORES$1.appStorage, "readonly")).index(APP_STORAGE_SCOPE_INDEX);
+		await new Promise((resolve, reject) => {
+			const request = index.openKeyCursor(rowsOf(app.ref), "nextunique");
+			request.onerror = () => reject(request.error);
+			request.onsuccess = () => {
+				const cursor = request.result;
+				if (!cursor) return resolve();
+				scopes.push(cursor.key[1]);
+				cursor.continue();
+			};
+		});
+		const out = [];
+		for (const [i, scope] of scopes.entries()) {
+			if (i) await new Promise((resolve) => setTimeout(resolve, 0));
+			const rows = await wrap((await store(STORES$1.appStorage, "readonly")).getAll(keysOf(app.ref, scope)));
+			if (rows.length) out.push({
+				app: app.ref,
+				scope,
+				entries: rows.map((row) => [row.key, row.value])
+			});
 		}
-		return [...scopes.values()];
+		return out;
 	}
 };
 //#endregion
@@ -16680,7 +15980,7 @@ function handoffNotices(was, handoff, session) {
 * device link must offer every transport both devices run: a Linux Desktop has no WebRTC, and an Iroh relay that
 * one side cannot reach leaves HyperDHT as the only way through.
 */
-var NATIVE_RETRY_MS = 1e4;
+var NATIVE_RETRY_MS$1 = 1e4;
 var NATIVE_RETRY_MAX_MS = 12e4;
 /** How often a standby reads the turn while its screen shows (WISP 06 § When a device checks), and the jitter on it. */
 var STANDBY_TURN_EVERY_MS = 6e5;
@@ -16989,7 +16289,7 @@ var DeviceLinks = class {
 	}
 	retryNative(running) {
 		if (running.nativeRetry || this.stopped || this.running.get(running.id) !== running) return;
-		const wait = Math.min(NATIVE_RETRY_MS * 2 ** running.nativeMisses, NATIVE_RETRY_MAX_MS);
+		const wait = Math.min(NATIVE_RETRY_MS$1 * 2 ** running.nativeMisses, NATIVE_RETRY_MAX_MS);
 		running.nativeMisses++;
 		running.nativeRetry = setTimeout(() => {
 			running.nativeRetry = void 0;
@@ -19363,6 +18663,7 @@ var FileDesk = class {
 			openSource: (record) => this.openSource(linkId, record),
 			changed: (record, transferred, progress) => this.changed(linkId, record, transferred, progress),
 			room: async () => (await fileBytes()).room(),
+			...this.deps.sendData && { sendData: (id, offset, data) => this.deps.sendData(linkId, id, offset, data) },
 			writable: () => this.deps.writable?.(linkId)
 		});
 		this.chats.set(linkId, made);
@@ -19382,6 +18683,7 @@ var FileDesk = class {
 			records.push(file.wire3);
 			if (file.wire3.direction === "in") chat.local.set(file.wire3.id, file.id);
 			if (!transferEnded(file.wire3)) this.restored.add(file.id);
+			if (file.wire3.state === "done") continue;
 			this.deps.transfers.set(file.id, this.view(chat, file.wire3, file.wire3.confirmed, transferStalled(file.wire3, Date.now(), this.restored.has(file.id), Date.now())));
 		}
 		chat.files.restore(records);
@@ -19822,7 +19124,7 @@ var FileDesk = class {
 			view.room = this.deps.transfers.get(id)?.room;
 			this.room(id);
 		}
-		this.deps.transfers.set(id, view);
+		if (record.state !== "done" || this.underway.has(id) || this.deps.transfers.has(id)) this.deps.transfers.set(id, view);
 		if (!transferEnded(record)) {
 			this.underway.add(id);
 			this.ended.delete(id);
@@ -20350,6 +19652,10 @@ var Outbox = class {
 	get sameLink() {
 		return !this.stopped && this.closed === this.began;
 	}
+	/** One message as stored now: by its id when the store can, else picked out of the chat's history. */
+	async one(id) {
+		return this.store.get ? this.store.get(id) : (await this.store.read()).find((m) => m.id === id);
+	}
 	/** A new message a turn could not send (the link closed under it, or the ones before it still wait): it waits too. */
 	async waitsItsTurn(message) {
 		await this.store.update(message.id, "waiting", "Waits for the messages before it to go.", {
@@ -20454,7 +19760,7 @@ var Outbox = class {
 		this.busy.add(id);
 		let again;
 		try {
-			let message = read ?? (await this.store.read()).find((m) => m.id === id);
+			let message = read ?? await this.one(id);
 			if (!message?.wireId || !message.delivery || message.delivery === "delivered") return;
 			const wait = this.waiting.get(id);
 			if (wait?.timer) {
@@ -20495,7 +19801,7 @@ var Outbox = class {
 			again = this.reopenedWhileBusy.delete(id);
 		}
 		if (again) {
-			const message = (await this.store.read()).find((m) => m.id === id);
+			const message = await this.one(id);
 			if (message) await this.again(message);
 		}
 	}
@@ -20505,7 +19811,7 @@ var Outbox = class {
 	* nothing about it is unconfirmed; it counts no attempt until it goes.
 	*/
 	async wait(id, reason) {
-		const message = (await this.store.read()).find((m) => m.id === id);
+		const message = await this.one(id);
 		if (!message || this.stopped) return;
 		await this.store.update(id, "waiting", reason, { resendUntil: message.resendUntil ?? this.now() + this.policy.windowMs });
 		this.schedule(id);
@@ -20595,7 +19901,7 @@ var Outbox = class {
 	*/
 	async attempt(id, passed) {
 		if (this.stopped || this.busy.has(id)) return true;
-		const message = (await this.store.read()).find((m) => m.id === id);
+		const message = await this.one(id);
 		if (!message || message.delivery !== "queued" && message.delivery !== "waiting" || message.via === "hold") {
 			this.forget(id);
 			return true;
@@ -20622,7 +19928,7 @@ var Outbox = class {
 	}
 	/** After a failed attempt: queued again, unless its window or its attempts are spent. */
 	async requeue(id, reason) {
-		const message = (await this.store.read()).find((m) => m.id === id);
+		const message = await this.one(id);
 		if (message && message.delivery !== "delivered") await this.queue(message, reason);
 	}
 	async queue(message, reason) {
@@ -20670,7 +19976,7 @@ var Outbox = class {
 			this.turn(async () => {
 				if (this.receipts.get(id) !== timer) return;
 				this.receipts.delete(id);
-				const message = (await this.store.read()).find((m) => m.id === id);
+				const message = await this.one(id);
 				if (message?.via === "pkarr") await this.expired(message);
 				else await this.requeue(id, "No receipt received yet.");
 			}).catch(() => {});
@@ -21357,8 +20663,9 @@ var db = {
 			tx.onerror = tx.onabort = () => reject(tx.error ?? /* @__PURE__ */ new Error("Link storage failed"));
 		});
 	},
-	async patchLink(linkId, patch) {
-		const tx = (await openDb()).transaction(STORES$1.links, "readwrite");
+	/** `relaxed`: for what a power cut may cost (a round trip, a note made again later), no disk sync of its own. */
+	async patchLink(linkId, patch, relaxed = false) {
+		const tx = (await openDb()).transaction(STORES$1.links, "readwrite", relaxed ? RELAXED : void 0);
 		const links = tx.objectStore(STORES$1.links);
 		const request = links.get(linkId);
 		request.onsuccess = () => {
@@ -21619,6 +20926,32 @@ var db = {
 		});
 		return result;
 	},
+	/**
+	* `patchMessage` on these rows of one history, all in one transaction: one disk sync for all of them. Resolves to
+	* the rows changed, in the order of `ids`.
+	*/
+	async patchMessages(linkId, ids, change) {
+		const tx = (await openDb()).transaction(STORES$1.messages, "readwrite");
+		const messages = tx.objectStore(STORES$1.messages);
+		const results = [];
+		ids.forEach((id, i) => {
+			const request = messages.get([linkId, id]);
+			request.onsuccess = () => {
+				const message = request.result;
+				const patch = message && change(message);
+				if (!patch) return;
+				messages.put(results[i] = {
+					...message,
+					...patch
+				});
+			};
+		});
+		await new Promise((resolve, reject) => {
+			tx.oncomplete = () => resolve();
+			tx.onerror = tx.onabort = () => reject(tx.error ?? /* @__PURE__ */ new Error("Message storage failed"));
+		});
+		return results.filter((row) => !!row);
+	},
 	async deleteMessage(linkId, messageId) {
 		await wrap((await store(STORES$1.messages, "readwrite")).delete([linkId, messageId]));
 	},
@@ -22021,6 +21354,202 @@ async function myPin(host, chat, messageId, remove, current, now = Date.now()) {
 	};
 }
 //#endregion
+//#region ../browser/src/engine/groupAuthorOrder.ts
+/**
+* How long a member's message may still be placed again below that member's older ones (WISP 400, requirement 10):
+* about a catch-up, whose answers end within the three minutes the app waits for the first.
+*/
+var AUTHOR_ORDER_WINDOW_MS = 18e4;
+AUTHOR_ORDER_WINDOW_MS / 2;
+/** Whether `a` was written after `b` by the same member: a later epoch, or a higher number in the same one. */
+function after(a, b) {
+	return a.epoch > b.epoch || a.epoch === b.epoch && a.seq > b.seq;
+}
+/**
+* A member's messages in a private group in the order that member wrote them (WISP 400, requirement 10, and WISP 902
+* § Catch-up). A message is placed where it arrives. When one comes of a member whose later messages were placed here
+* moments ago (two catch-up answers raced: the author's own newest 32 and another member's hand-on of the older ones),
+* those later ones are placed again below it, in the order they were written, and the lines that came after them before
+* the older one (another member's, mine) go along below them, in their order: a reply to the newest stays below it. A
+* row only ever moves down, so nobody else's lines change order. While messages of that member are still missing
+* (`missing`), the rows wait for them, so each row moves about once in a whole catch-up.
+*/
+var GroupAuthorOrder = class {
+	host;
+	linkOf;
+	missing;
+	/** Per group: the members' rows followed, in the order they are placed in the history. */
+	rows = /* @__PURE__ */ new Map();
+	/** Per group: the members with a row placed above an older one of theirs, since when, and when their last row came. */
+	due = /* @__PURE__ */ new Map();
+	running = /* @__PURE__ */ new Set();
+	constructor(host, linkOf, missing = () => false) {
+		this.host = host;
+		this.linkOf = linkOf;
+		this.missing = missing;
+	}
+	/** A member's message was stored in the group's history, new: `at` is when, on the engine's clock. */
+	placed(groupId, row) {
+		if (!this.host.placeAgain) return;
+		const rows = (this.rows.get(groupId) ?? []).filter((r) => r.at > row.at - AUTHOR_ORDER_WINDOW_MS).slice(-575);
+		rows.push(row);
+		this.rows.set(groupId, rows);
+		let due = this.due.get(groupId);
+		if (!due?.has(row.sender) && !rows.some((r) => r.sender === row.sender && after(r, row))) return;
+		if (!due) this.due.set(groupId, due = /* @__PURE__ */ new Map());
+		due.set(row.sender, {
+			since: due.get(row.sender)?.since ?? row.at,
+			last: row.at
+		});
+		if (!this.missing(groupId, row.sender)) this.run(groupId, row.at);
+	}
+	/** Time passed: rows nothing more is on its way for, or that waited long enough, are placed again. */
+	tick(now) {
+		for (const groupId of this.due.keys()) this.run(groupId, now);
+	}
+	/** The group's history is gone (left or forgotten). */
+	forget(groupId) {
+		this.rows.delete(groupId);
+		this.due.delete(groupId);
+	}
+	/**
+	* One group's rows put in order, a member at a time; what comes meanwhile is put in order by the next turn, so a
+	* catch-up's frames that come together move each row once, not once per frame.
+	*/
+	async run(groupId, now) {
+		if (this.running.has(groupId)) return;
+		this.running.add(groupId);
+		try {
+			for (;;) {
+				const due = this.due.get(groupId);
+				const ready = [...due ?? []].filter(([sender, { since, last }]) => now - last >= 15e3 || now - since >= 9e4 || !this.missing(groupId, sender)).map(([sender]) => sender);
+				if (!ready.length) break;
+				for (const sender of ready) due.delete(sender);
+				if (!due.size) this.due.delete(groupId);
+				for (const sender of ready) {
+					const rows = this.rows.get(groupId) ?? [];
+					const mine = rows.filter((r) => r.sender === sender);
+					let from, below;
+					for (const r of [...mine].reverse()) {
+						if (below && after(r, below) && (!from || after(from, r))) from = r;
+						if (!below || after(below, r)) below = r;
+					}
+					if (!from) continue;
+					const newer = mine.filter((r) => !after(from, r)).sort((a, b) => after(a, b) ? 1 : after(b, a) ? -1 : 0);
+					const ids = new Set(newer.map((r) => r.id));
+					const first = rows.findIndex((r) => ids.has(r.id));
+					let end = rows.length;
+					for (let i = first + 1, top = rows[first]; i < rows.length; i++) {
+						if (rows[i].sender !== sender) continue;
+						if (after(top, rows[i])) {
+							end = i;
+							break;
+						}
+						top = rows[i];
+					}
+					const followers = rows.slice(first, end).filter((r) => r.sender !== sender);
+					for (const r of followers) ids.add(r.id);
+					const moved = [...newer, ...followers];
+					this.rows.set(groupId, [...rows.filter((r) => !ids.has(r.id)), ...moved.map((r) => ({
+						...r,
+						at: Math.max(r.at, now)
+					}))]);
+					await this.host.placeAgain(this.linkOf(groupId), moved.map((r) => r.id)).catch(() => {});
+				}
+			}
+		} finally {
+			this.running.delete(groupId);
+		}
+	}
+};
+//#endregion
+//#region ../browser/src/engine/groupLineOrder.ts
+/**
+* The lines of a group's history ("… joined", "… is no longer a member") among the messages of their moment, for a
+* member back from away (WISP 902 § Catch-up). A message sealed under an epoch was written before its author knew of
+* the next commit, so the line of that commit goes below it; a message under the commit's epoch or a later one was
+* written knowing it, and stays below the line. A catch-up brings the commits first (a commit opens the messages of
+* its epoch) and, in a private group, the answers of several members race, so the messages of the epoch before can come
+* after the line. Then the line, and the rows after it written knowing it, are placed again below them, in their order;
+* no clock is read. A row only ever moves down, and only rows placed here in the last few minutes, so a live
+* conversation read long ago never moves. Moves made meanwhile go in one turn: a row moves about once a catch-up page.
+*/
+var GroupLineOrder = class {
+	host;
+	/** Per history: the rows followed, in the order they are placed in it. */
+	rows = /* @__PURE__ */ new Map();
+	due = /* @__PURE__ */ new Set();
+	running = /* @__PURE__ */ new Set();
+	constructor(host) {
+		this.host = host;
+	}
+	/**
+	* A row is being stored, a line of the history or a message sealed under this epoch, and takes its place now: `at` is
+	* when, on the engine's clock. Call what this returns with whether it was new: a message below a line of a later
+	* epoch takes the line (and the rows after it written knowing it) below it.
+	*/
+	placing(linkId, row, at) {
+		if (!this.host.placeAgain) return () => {};
+		const followed = {
+			...row,
+			at
+		};
+		const rows = (this.rows.get(linkId) ?? []).filter((r) => r.at > at - AUTHOR_ORDER_WINDOW_MS).slice(-575);
+		rows.push(followed);
+		this.rows.set(linkId, rows);
+		return (stored) => {
+			const now = this.rows.get(linkId);
+			if (!stored) {
+				if (now) this.rows.set(linkId, now.filter((r) => r !== followed));
+				return;
+			}
+			if (!followed.line && now?.some((r) => r.line && r.epoch > followed.epoch && now.indexOf(r) < now.indexOf(followed))) this.run(linkId);
+		};
+	}
+	/** These rows were placed again below everything (`GroupAuthorOrder`), in this order. */
+	moved(linkId, ids) {
+		const rows = this.rows.get(linkId);
+		if (!rows) return;
+		const moved = ids.map((id) => rows.find((r) => r.id === id)).filter((r) => !!r);
+		if (!moved.length) return;
+		this.rows.set(linkId, [...rows.filter((r) => !moved.includes(r)), ...moved]);
+		if (moved.some((r) => !r.line)) this.run(linkId);
+	}
+	/** The group's history is gone (left or forgotten). */
+	forget(linkId) {
+		this.rows.delete(linkId);
+		this.due.delete(linkId);
+	}
+	/** The history's rows put in order; what comes while a move is written goes in the next turn. */
+	run(linkId) {
+		this.due.add(linkId);
+		if (this.running.has(linkId)) return;
+		this.running.add(linkId);
+		(async () => {
+			try {
+				while (this.due.delete(linkId)) {
+					const rows = this.rows.get(linkId) ?? [];
+					const order = [];
+					for (const row of rows) {
+						const above = row.line ? -1 : order.findIndex((r) => r.line && r.epoch > row.epoch);
+						if (above < 0) order.push(row);
+						else order.splice(above, 0, row);
+					}
+					let from = 0;
+					while (from < rows.length && rows[from] === order[from]) from++;
+					if (from === rows.length) continue;
+					const last = rows[rows.length - 1].at;
+					for (const r of order.slice(from)) r.at = Math.max(r.at, last);
+					this.rows.set(linkId, order);
+					await this.host.placeAgain(linkId, order.slice(from).map((r) => r.id)).catch(() => {});
+				}
+			} finally {
+				this.running.delete(linkId);
+			}
+		})();
+	}
+};
+//#endregion
 //#region ../browser/src/engine/hubClocks.ts
 /**
 * A hub dates its beacon entry by its own clock, and a reader judges it by its own. A hub's time closer than this to
@@ -22274,11 +21803,14 @@ var Communities = class {
 	/** My frames an edge took, and which of them carry an edit (`frame id → editKey`). */
 	frames = new FramesTaken();
 	carriers = /* @__PURE__ */ new Map();
+	/** The lines of each history among the messages of their moment (`GroupLineOrder`). */
+	lineOrder;
 	constructor(host, store, timings = COMMUNITY_TIMINGS, random = Math.random) {
 		this.host = host;
 		this.store = store;
 		this.timings = timings;
 		this.random = random;
+		this.lineOrder = new GroupLineOrder(host);
 	}
 	/** Application frames and pair payloads handed to the engine, one after the other per group. */
 	deliveries = /* @__PURE__ */ new Map();
@@ -22377,6 +21909,7 @@ var Communities = class {
 				accepted: true,
 				viaLink: true,
 				stage: this.joinStage(group),
+				since: group.joining.since,
 				...this.knockingWith.get(group.id) ? { waiting: this.knockingWith.get(group.id) } : {}
 			} : void 0;
 			if (invitation && !this.keptWhileKnocking(live)) return [{
@@ -22590,22 +22123,45 @@ var Communities = class {
 	/**
 	* Leaves: the request goes to the hubs, which keep it and commit it (any member can), and the
 	* group goes from this device at once. An admin hands the role to a member first. Something must
-	* be connected to carry the request.
+	* be connected to carry the request. Answers the member the role went to, when it went to one.
 	*/
 	async leave(groupId) {
 		const live = this.live.get(groupId);
-		if (!live) return this.forget(groupId);
+		if (!live) {
+			await this.forget(groupId);
+			return;
+		}
 		const s = live.session;
-		if (s.status !== "active" || s.others.length === 0) return this.forget(groupId);
+		if (s.status !== "active" || s.others.length === 0) {
+			await this.forget(groupId);
+			return;
+		}
 		const edges = [...this.host.edges(groupId).entries()].filter(([, id]) => this.host.linkReady(id, 2));
 		if (!edges.length) throw new Error("Nobody in the group is connected right now to take your leave. Try again in a moment.");
+		let next;
 		if (s.isAdmin) {
 			const connected = new Set(edges.map(([key]) => key));
-			const next = s.others.find((key) => connected.has(key)) ?? s.others[0];
+			next = s.others.find((key) => connected.has(key)) ?? s.others[0];
 			await s.transferAdmin(next);
 		}
 		await s.leave();
 		await this.forget(groupId);
+		return next;
+	}
+	/**
+	* Delete from this device: left first, as Leave does. With nothing connected to carry the request, a member's leave
+	* goes unsaid and the group goes anyway, as a private group's failed goodbye does: the others still list the device,
+	* but members who never open the app again kept it here for good. An admin with members is still refused: gone with
+	* the role, the group would have no admin.
+	*/
+	async deleteHere(groupId) {
+		try {
+			await this.leave(groupId);
+		} catch (error) {
+			const s = this.live.get(groupId)?.session;
+			if (!s || s.isAdmin && s.others.length) throw error;
+			await this.forget(groupId);
+		}
 	}
 	successor(groupId) {
 		const s = this.live.get(groupId)?.session;
@@ -22677,6 +22233,7 @@ var Communities = class {
 		this.lastMentionAt.delete(groupId);
 		this.knockingWith.delete(groupId);
 		this.knockRead.delete(groupId);
+		this.lineOrder.forget(MESSAGE_LINK$1(groupId));
 		for (const linkId of [...this.host.edges(groupId).values(), ...this.host.entries(groupId).values()]) await this.host.closeEdge(linkId);
 		await this.store.deleteGroup(groupId);
 		await this.files?.drop(groupId);
@@ -23727,7 +23284,7 @@ var Communities = class {
 		const live = this.live.get(groupId);
 		if (!live || live.session.wasRemoved(peerKey)) return;
 		if (live.hub && !this.peerIsHub(live, peerKey) && rosterHas(live.session.roster, peerKey)) live.members.set(peerKey, this.now());
-		this.sendTo(linkId, live.session.syncFrame());
+		this.sendTo(linkId, live.session.syncFrame(peerKey));
 		this.host.emit();
 	}
 	edgeNick(groupId, peerKey, nick) {
@@ -23763,6 +23320,11 @@ var Communities = class {
 					sender: m.sender,
 					file: m.file
 				}, session.myKey) : void 0;
+				const placing = this.lineOrder.placing(MESSAGE_LINK$1(id), {
+					id: m.id,
+					epoch: m.epoch,
+					line: false
+				}, this.now());
 				const stored = await this.host.storeMessage({
 					linkId: MESSAGE_LINK$1(id),
 					id: m.id,
@@ -23777,6 +23339,7 @@ var Communities = class {
 					...m.card && { card: m.card },
 					...file && { file }
 				});
+				placing(stored !== false);
 				const came = m.sender === session.myKey ? timestamp : cameAt(timestamp, stored, arrivalNow(this.now()));
 				this.lastMessageAt.set(id, Math.max(this.lastMessageAt.get(id) ?? 0, came));
 				if (mentioned) this.lastMentionAt.set(id, Math.max(this.lastMentionAt.get(id) ?? 0, came));
@@ -23873,7 +23436,16 @@ var Communities = class {
 		else if (s.status === "active" && before !== after) {
 			const at = receivedTimestamp(top.ts, when);
 			for (const [key] of after) if (!rosterHas(before, key) && key !== s.myKey) await this.event(groupId, "joined", `${name(key)} joined`, at, top.e, key);
-			for (const [key] of before) if (!rosterHas(after, key)) await this.event(groupId, "gone", `${name(key)} is no longer a member`, at, top.e, key);
+			const left = (key) => {
+				const chain = s.state.chain;
+				for (let i = chain.length - 1; i >= 0; i--) if ((chain[i].k === "remove" || chain[i].k === "leave") && chain[i].s === key) return chain[i].k === "leave";
+				return false;
+			};
+			for (const [key] of before) {
+				if (rosterHas(after, key)) continue;
+				if (left(key)) await this.event(groupId, "left", `${name(key)} left`, at, top.e, key);
+				else await this.event(groupId, "gone", `${name(key)} is no longer a member`, at, top.e, key);
+			}
 			if (top.k === "role" && before.find(([k]) => k === top.s)?.[1] !== "admin") await this.event(groupId, "admin", `${name(top.s)} ${top.s === s.myKey ? "are" : "is"} now the admin`, at, top.e, top.s);
 			if (top.k === "rotate") await this.event(groupId, "rotated", "Keys rotated: a fresh epoch", at, top.e);
 		}
@@ -23882,16 +23454,21 @@ var Communities = class {
 	/** A line in the group's history. Its id carries its time: two lines at the same moment get distinct ones (`eventTime`). */
 	async event(groupId, event, text, timestamp, epoch, member) {
 		timestamp = eventTime(this.eventTimes, groupId, timestamp);
-		await this.host.storeMessage({
+		const id = `event:${epoch}:${event}:${member ?? ""}:${timestamp}`;
+		this.lineOrder.placing(MESSAGE_LINK$1(groupId), {
+			id,
+			epoch,
+			line: true
+		}, this.now())(await this.host.storeMessage({
 			linkId: MESSAGE_LINK$1(groupId),
-			id: `event:${epoch}:${event}:${member ?? ""}:${timestamp}`,
+			id,
 			text,
 			sender: "peer",
 			event,
 			member,
 			timestamp,
 			via: "datalink"
-		});
+		}) !== false);
 	}
 	eventTimes = /* @__PURE__ */ new Map();
 };
@@ -24899,6 +24476,11 @@ var INVITED_KEPT_MS = LEFT_KEPT_MS;
 */
 var ACCEPT_AGAIN_MS = 6e4;
 var ACCEPT_AGAINS = 5;
+/**
+* Admin side: a member let in over its chat, its edge not up, is sent its welcome again at most this often. The welcome
+* is the whole chain and the sealed secrets (megabytes, tens of ms to build); its app says its accept once a minute.
+*/
+var REWELCOME_MS = ACCEPT_AGAIN_MS / 2;
 /** Invitee side: the invitations one contact chat may have waiting here at a time. More are answered as declined. */
 var MAX_INVITATIONS_PER_CHAT = 4;
 /** What an invitation says of its group, kept as a claim within what a group can be: an epoch from 0, a roster of 1 to the most a group holds. */
@@ -24915,9 +24497,13 @@ var FAREWELL_ANSWERS = 3;
 var FAREWELL_COMMITS = 64;
 /**
 * A member whose messages were just asked of another (`Groups.askOf`) is told where I am only once that one's answer
-* has come: no message from it for this long, or `MESH_SYNC_HOLD_MAX_MS` after it was asked. Told at once, its own
+* has come: no message of it for this long, or `MESH_SYNC_HOLD_MAX_MS` after it was asked. Told at once, its own
 * answer raced the other's, which holds the same messages among everyone's in the order they were written, and a
 * member back in a group of five read each member's lines apart, the newest above older ones (WISP 902 § Catch-up).
+* A message of the answer is one written before the asking: what the member writes meanwhile is no reason to wait, so
+* the longest wait only has to cover a whole answer (the 256 messages a member keeps for the others and its own last
+* 32) at the pace of a phone with a long history, 600 ms a frame. At ten seconds, an answer of 200 messages at four a
+* second was cut at the 40th, and the others' newest lines landed above what was still coming.
 */
 var MESH_SYNC_HOLD_MS = 1500;
 /** Where a member's gossip turns start among the members it is connected to: a number of its own, from its key. */
@@ -25031,6 +24617,8 @@ var Groups = class {
 	syncHeld = /* @__PURE__ */ new Map();
 	/** Per mesh group and member, when a message last came over its edge (its own, or one it handed on). */
 	lastHanded = /* @__PURE__ */ new Map();
+	/** Admin side, per group and member let in: when its welcome was last sent again, over its chat or the link (`REWELCOME_MS`). */
+	rewelcomed = /* @__PURE__ */ new Map();
 	lastGossip = /* @__PURE__ */ new Map();
 	/**
 	* Per mesh group, each reachable member some of whose messages never reached me (`GroupSession.lacking`): what was
@@ -25062,6 +24650,10 @@ var Groups = class {
 	communities;
 	/** My messages and edits an edge of a private group took. */
 	frames = new FramesTaken();
+	/** Each member's messages in the order that member wrote them, though catch-up answers race (WISP 400, requirement 10). */
+	authorOrder;
+	/** The lines of each history among the messages of their moment (`GroupLineOrder`). */
+	lineOrder;
 	/** Hubs of the private groups past 16 members (WISP 902 · Group Mesh § Hubs). */
 	hubs;
 	/** Groups whose edges are being reconciled because their hubs changed: one at a time. */
@@ -25088,6 +24680,16 @@ var Groups = class {
 			}
 		}, hubTimings);
 		this.typings = new GroupTypings(host);
+		this.lineOrder = new GroupLineOrder(host);
+		const placeAgain = host.placeAgain && (async (linkId, ids) => {
+			const done = host.placeAgain(linkId, ids);
+			this.lineOrder.moved(linkId, ids);
+			await done;
+		});
+		this.authorOrder = new GroupAuthorOrder({ placeAgain }, MESSAGE_LINK, (groupId, sender) => {
+			const session = this.sessions.get(groupId);
+			return !!session && session.missing(sender, this.gapsGone.get(groupId)?.get(sender)?.[session.epoch]) > 0;
+		});
 		this.signals = new MeshSignals(host, {
 			session: (id) => this.sessions.get(id),
 			stored: (id) => this.stored.get(id),
@@ -25125,13 +24727,14 @@ var Groups = class {
 		await this.communities.load(all.filter((g) => g.community || g.joining));
 		for (const group of all.filter((g) => !g.community && !g.joining)) {
 			this.stored.set(group.id, group);
-			if (group.state) this.attach(group.state);
-			if (group.invited) this.invited.set(group.id, new Set(Object.keys(group.invited)));
 			const history = await this.store.getMessages(MESSAGE_LINK(group.id)), said = history.filter((m) => !m.event && !m.groupPay);
-			this.framesKept.set(group.id, history.filter((m) => m.frame).map((m) => ({
+			const framed = history.filter((m) => m.frame);
+			this.framesKept.set(group.id, framed.map((m) => ({
 				id: m.id,
 				bytes: frameBytes(m.frame)
 			})));
+			if (group.state) this.attach(group.state, framed.map((m) => m.frame));
+			if (group.invited) this.invited.set(group.id, new Set(Object.keys(group.invited)));
 			const last = said[said.length - 1], lastPeer = [...said].reverse().find((m) => m.sender !== "me");
 			if (last) this.lastMessageAt.set(group.id, last.timestamp);
 			const peerAt = cameOrWritten(lastPeer?.timestamp, lastPeer ? group.came?.peer : void 0);
@@ -25208,6 +24811,7 @@ var Groups = class {
 						members: Math.min(Math.max(invitation.n, 0), GROUP_MEMBER_CAP.max),
 						accepted: !!invitation.seedB64,
 						...this.acceptSaid.get(group.id)?.unanswered ? { unanswered: true } : {},
+						...invitation.takenBack ? { takenBack: true } : {},
 						...invitation.entry ? {
 							viaLink: true,
 							stage: this.joinStage(group)
@@ -25389,6 +24993,7 @@ var Groups = class {
 	async accept(groupId) {
 		const group = this.stored.get(groupId);
 		if (!group?.invitation) throw new Error("No invitation to accept");
+		if (group.invitation.takenBack) throw new Error("This invitation was taken back");
 		if (!this.host.linkReady(group.invitation.linkId)) throw new Error("The contact who invited you is not connected. Try again when they are.");
 		const seedB64 = group.invitation.seedB64 ?? createIdentity().seedB64;
 		group.invitation = {
@@ -25412,6 +25017,7 @@ var Groups = class {
 		if (this.isCommunity(groupId)) return this.communities.decline(groupId);
 		const group = this.stored.get(groupId);
 		if (!group?.invitation) throw new Error("No invitation to decline");
+		if (group.invitation.takenBack) return this.forget(groupId, false);
 		if (!group.previous) return this.forget(groupId);
 		await this.dropInvitation(group, this.sayDecline(groupId, group.invitation.linkId));
 	}
@@ -25427,6 +25033,25 @@ var Groups = class {
 		await this.store.putGroup(previous);
 		this.host.emit();
 	}
+	/**
+	* Invitee side: who sent the invitation took it back. A group I kept under its id comes back as it was; otherwise the
+	* invitation stays a week, marked, so the list says it was taken back where it was (an accept said for it stops).
+	*/
+	async takeBackFrom(group) {
+		if (group.previous) return this.dropInvitation(group);
+		if (group.invitation.takenBack) return;
+		const { seedB64: _unused, ...invitation } = group.invitation;
+		group.invitation = {
+			...invitation,
+			pieces: [],
+			takenBack: this.now()
+		};
+		this.acceptSaid.delete(group.id);
+		await this.store.putGroup(group);
+		const kept = [...this.stored.values()].filter((x) => x.invitation?.takenBack && !x.state && x.invitation.linkId === invitation.linkId).reverse().sort((a, b) => b.invitation.takenBack - a.invitation.takenBack);
+		for (const old of kept.slice(MAX_INVITATIONS_PER_CHAT)) await this.forget(old.id, false);
+		this.host.emit();
+	}
 	/** Invitee side: says no to an invitation. With the inviter's chat down (its app is closed, say), returns the answer owed, said when that chat is next up. */
 	sayDecline(groupId, linkId) {
 		try {
@@ -25585,19 +25210,24 @@ var Groups = class {
 	* Leaves, and the group is gone from this device at once: its row, its history, its files and every
 	* edge but the one to the admin, which stays until the admin's commit removing me comes back (or a
 	* week passes), so a leave said while the admin was away still reaches it. An admin with other
-	* members hands the role to one who is online first; alone, the group simply goes.
+	* members hands the role to one who is online first; alone, the group simply goes. Answers the member the role went
+	* to, when it went to one.
 	*/
 	async leave(groupId) {
 		if (this.isCommunity(groupId)) return this.communities.leave(groupId);
 		const session = this.session(groupId);
 		const group = this.stored.get(groupId);
-		if (session.status !== "active") return this.forget(groupId);
+		if (session.status !== "active") {
+			await this.forget(groupId);
+			return;
+		}
 		if (session.others.length === 0) {
 			await session.leave();
-			return this.forget(groupId);
+			await this.forget(groupId);
+			return;
 		}
+		const next = session.isAdmin ? this.successor(groupId) : void 0;
 		if (session.isAdmin) {
-			const next = this.successor(groupId);
 			if (!next) throw new Error("You are the admin and nobody else in the group is online to take over. Try again when a member is, or make someone the admin first.");
 			await session.transferAdmin(next);
 		}
@@ -25619,6 +25249,8 @@ var Groups = class {
 		this.lastMessageAt.delete(groupId);
 		this.lastPeerMessageAt.delete(groupId);
 		this.lastMentionAt.delete(groupId);
+		this.authorOrder.forget(groupId);
+		this.lineOrder.forget(MESSAGE_LINK(groupId));
 		await this.store.deleteGroup(groupId);
 		await this.store.putGroup(group);
 		await this.files?.drop(groupId);
@@ -25649,6 +25281,7 @@ var Groups = class {
 		} catch {}
 		this.reconcileEdges(groupId);
 		this.host.emit();
+		return next;
 	}
 	/** The admin heard me: the tombstone of a group I left can go. */
 	async leaveConfirmed(groupId) {
@@ -25812,19 +25445,20 @@ var Groups = class {
 	}
 	/** `answer`: false when an invitation goes because its inviter took it back, so no decline is said for it. */
 	async forget(groupId, answer = true) {
-		if (this.isCommunity(groupId)) return this.communities.leave(groupId);
+		if (this.isCommunity(groupId)) return this.communities.deleteHere(groupId);
 		const session = this.sessions.get(groupId);
 		if (session?.status === "active") try {
 			await this.leave(groupId);
 		} catch (e) {
 			if (session.isAdmin && session.others.length) throw e;
 		}
-		const gone = this.stored.get(groupId), invitation = answer && gone?.invitation && !gone.invitation.entry ? gone.invitation : void 0;
+		const gone = this.stored.get(groupId), invitation = answer && gone?.invitation && !gone.invitation.entry && !gone.invitation.takenBack ? gone.invitation : void 0;
 		const owed = invitation && this.sayDecline(groupId, invitation.linkId);
 		this.sessions.delete(groupId);
 		this.stored.delete(groupId);
 		this.takeBack(groupId);
 		this.acceptSaid.delete(groupId);
+		this.entryHosts.delete(groupId);
 		this.lastRoster.delete(groupId);
 		this.lastTold.delete(groupId);
 		this.pendingEntries.delete(groupId);
@@ -25838,6 +25472,7 @@ var Groups = class {
 		this.relayAsked.delete(groupId);
 		this.syncHeld.delete(groupId);
 		this.lastHanded.delete(groupId);
+		this.rewelcomed.delete(groupId);
 		this.hubs.forget(groupId);
 		this.removedAt.delete(groupId);
 		this.lastGossip.delete(groupId);
@@ -25850,6 +25485,8 @@ var Groups = class {
 		this.hereHeard.delete(groupId);
 		this.hereActed.delete(groupId);
 		this.signals.forget(groupId);
+		this.authorOrder.forget(groupId);
+		this.lineOrder.forget(MESSAGE_LINK(groupId));
 		for (const linkId of [...this.host.edges(groupId).values(), ...this.host.entries(groupId).values()]) await this.host.closeEdge(linkId);
 		await this.store.deleteGroup(groupId);
 		if (owed && !this.stored.has(groupId)) {
@@ -25948,6 +25585,7 @@ var Groups = class {
 		if (this.ticking) return;
 		this.ticking = true;
 		try {
+			this.authorOrder.tick(now);
 			for (const group of [...this.stored.values()]) {
 				if (group.left) {
 					if (now - group.left.at > LEFT_KEPT_MS) await this.forget(group.id);
@@ -25957,6 +25595,10 @@ var Groups = class {
 					await this.declineOwed(group, now);
 					if (!group.state) continue;
 				}
+				if (group.invitation?.takenBack && !group.state) {
+					if (now - group.invitation.takenBack > LEFT_KEPT_MS) await this.forget(group.id, false);
+					continue;
+				}
 				if (group.invitation?.entry && !group.state) {
 					const every = now - group.createdAt > this.timings.patienceMs ? this.timings.slowKnockMs : this.timings.knockMs;
 					if (!(this.host.linkReady(group.invitation.linkId) || !!this.host.linkSeen?.(group.invitation.linkId)) && (now - (this.lastKnock.get(group.id) ?? 0) >= every || now >= (this.knockCheckAt.get(group.id) ?? Infinity))) await this.knock(group, now).catch(() => {});
@@ -26075,7 +25717,7 @@ var Groups = class {
 		}
 		const session = this.sessions.get(groupId), group = this.stored.get(groupId);
 		if (!session?.isAdmin || !group || !this.pendingEntries.get(groupId)?.has(peer)) return;
-		if (this.growthBlocked(group, session, session.roster.length + 1, linkId)) {
+		if (!rosterHas(session.roster, peer) && this.growthBlocked(group, session, session.roster.length + 1, linkId)) {
 			this.pendingEntries.get(groupId)?.delete(peer);
 			this.refused.set(peer, Date.now() + REFUSED_FOR_MS);
 			this.host.closeEdge(linkId);
@@ -26122,14 +25764,22 @@ var Groups = class {
 		return this.knocked.has(group.id) ? "knocked" : "knocking";
 	}
 	entryOf(group) {
-		return group.entry ? {
+		if (!group.entry) return void 0;
+		const { seedB64 } = group.entry;
+		let host = this.entryHosts.get(group.id);
+		if (host?.seedB64 !== seedB64) this.entryHosts.set(group.id, host = {
+			seedB64,
+			key: identityFromSeedB64(seedB64).pubKeyZ32
+		});
+		return {
 			link: {
 				g: group.id,
-				host: identityFromSeedB64(group.entry.seedB64).pubKeyZ32
+				host: host.key
 			},
-			seedB64: group.entry.seedB64
-		} : void 0;
+			seedB64
+		};
 	}
+	entryHosts = /* @__PURE__ */ new Map();
 	/** Joiner side: the entry session kept after the welcome goes (the edge to the admin is up, or it was kept long enough). */
 	async endLinger(groupId) {
 		const kept = this.lingering.get(groupId);
@@ -26194,11 +25844,13 @@ var Groups = class {
 		});
 		let pending = this.pendingEntries.get(group.id);
 		for (const { key, ts } of knocks) {
-			if (now - ts > 18e4 || rosterHas(session.roster, key) || this.refused.has(key) || pending?.has(key) || key === entry.link.host) continue;
+			const again = this.unwelcomed(group, session, key);
+			if (now - ts > 18e4 || rosterHas(session.roster, key) && !again || this.refused.has(key) || pending?.has(key) || key === entry.link.host) continue;
+			if (again && this.rewelcomedLately(group.id, key)) continue;
 			const entryIds = new Set(this.host.entries(group.id).values());
 			const contactsInvited = [...this.invited.get(group.id) ?? []].filter((id) => !entryIds.has(id)).length;
 			const size = session.roster.length + contactsInvited + (pending?.size ?? 0);
-			if ((pending?.size ?? 0) >= MAX_PENDING_ENTRIES || size >= GROUP_MEMBER_CAP.max || this.growthBlocked(group, session, size + 1)) break;
+			if ((pending?.size ?? 0) >= MAX_PENDING_ENTRIES || !again && (size >= GROUP_MEMBER_CAP.max || this.growthBlocked(group, session, size + 1))) break;
 			if (!pending) this.pendingEntries.set(group.id, pending = /* @__PURE__ */ new Map());
 			pending.set(key, now);
 			this.warmUntil.set(group.id, now + this.timings.warmMs);
@@ -26258,9 +25910,9 @@ var Groups = class {
 				}
 				if (existing?.invitation?.seedB64 && (existing.invitation.linkId !== linkId || existing.invitation.admin !== frame.admin)) return;
 				if (existing?.left && (existing.left.admin !== frame.admin || existing.contacts?.[existing.left.admin] !== linkId)) return;
-				if (existing?.invitation && !existing.state && existing.invitation.linkId !== linkId && !existing.invitation.genesis) return;
-				if ([...this.stored.values()].filter((x) => x.invitation).length >= 32) return;
-				if (!existing?.invitation && [...this.stored.values()].filter((x) => x.invitation?.linkId === linkId).length >= MAX_INVITATIONS_PER_CHAT) {
+				if (existing?.invitation && !existing.state && existing.invitation.linkId !== linkId && !existing.invitation.genesis && !existing.invitation.takenBack) return;
+				if ([...this.stored.values()].filter((x) => x.invitation && !x.invitation.takenBack).length >= 32) return;
+				if (!(existing?.invitation && !existing.invitation.takenBack && existing.invitation.linkId === linkId) && [...this.stored.values()].filter((x) => x.invitation?.linkId === linkId && !x.invitation.takenBack).length >= MAX_INVITATIONS_PER_CHAT) {
 					try {
 						this.host.sendOnLink(linkId, {
 							t: "group-decline",
@@ -26312,6 +25964,8 @@ var Groups = class {
 					} catch {}
 					const edge = this.host.edges(g).get(frame.key);
 					if (letIn && session.isAdmin && !(edge && this.host.linkReady(edge))) {
+						if (this.rewelcomedLately(g, frame.key)) return;
+						this.noteRewelcome(g, frame.key);
 						const welcome = await session.rewelcome(frame.key).catch(() => []);
 						try {
 							for (const piece of welcome) this.host.sendOnLink(linkId, piece);
@@ -26320,18 +25974,35 @@ var Groups = class {
 					return;
 				}
 				const group = this.stored.get(g);
-				if (frame.key === session.myKey || rosterHas(session.roster, frame.key)) return;
+				if (frame.key === session.myKey) return;
 				const entryPeer = this.hostEntry(g, linkId);
 				if ([...this.host.entries(g).values()].includes(linkId) && entryPeer !== frame.key) return;
-				if (session.roster.length >= GROUP_MEMBER_CAP.max || this.growthBlocked(group, session, session.roster.length + 1, linkId)) return;
+				const again = !!entryPeer && this.unwelcomed(group, session, frame.key);
+				if (rosterHas(session.roster, frame.key) && !again) return;
+				if (again && this.rewelcomedLately(g, frame.key)) {
+					this.pendingEntries.get(g)?.delete(frame.key);
+					await this.host.closeEdge(linkId);
+					return;
+				}
+				if (again) this.noteRewelcome(g, frame.key);
+				if (!again && (session.roster.length >= GROUP_MEMBER_CAP.max || this.growthBlocked(group, session, session.roster.length + 1, linkId))) return;
 				if (!entryPeer) await session.setNick(frame.key, this.host.contactName(linkId));
-				this.meet(g, frame.key);
+				if (!again) this.meet(g, frame.key);
 				if (this.host.linkReady(linkId, 3)) this.markLarge(group, frame.key);
-				const welcome = await session.admit(frame.key);
+				let welcome;
+				try {
+					welcome = again ? await session.rewelcome(frame.key) : await session.admit(frame.key);
+				} catch (error) {
+					if (!again) throw error;
+					this.pendingEntries.get(g)?.delete(frame.key);
+					await this.host.closeEdge(linkId);
+					return;
+				}
 				if (!entryPeer) group.contacts = {
 					...group.contacts,
 					[frame.key]: linkId
 				};
+				if (!again) group.unseen = [...(group.unseen ?? []).filter((key) => rosterHas(session.roster, key)), frame.key];
 				this.answered(group, linkId);
 				await this.store.putGroup(group);
 				for (const piece of welcome) this.host.sendOnLink(linkId, piece);
@@ -26354,7 +26025,7 @@ var Groups = class {
 			case "group-decline": {
 				const mine = this.stored.get(g);
 				if (mine?.invitation && !mine.invitation.entry && !mine.state && mine.invitation.linkId === linkId) {
-					await this.dropInvitation(mine);
+					await this.takeBackFrom(mine);
 					return;
 				}
 				const entryPeer = this.hostEntry(g, linkId);
@@ -26363,6 +26034,7 @@ var Groups = class {
 					await this.host.closeEdge(linkId);
 				}
 				const group = this.stored.get(g);
+				if (group && await this.declinedUnseen(g, group, linkId)) return;
 				if (!group || !this.answered(group, linkId)) return;
 				await this.store.putGroup(group);
 				this.host.emit();
@@ -26526,7 +26198,8 @@ var Groups = class {
 			return;
 		}
 		const taken = await session.handle(peerKey, frame);
-		if (taken.some((f) => f.t === "group-msg")) {
+		const askedAt = this.askedAt(groupId, peerKey);
+		if (taken.some((f) => f.t === "group-msg" && f.ts < askedAt)) {
 			let handed = this.lastHanded.get(groupId);
 			if (!handed) this.lastHanded.set(groupId, handed = /* @__PURE__ */ new Map());
 			handed.set(peerKey, this.now());
@@ -26599,9 +26272,14 @@ var Groups = class {
 			return;
 		}
 		if (!session || !group || session.status !== "active" || !rosterHas(session.roster, peerKey)) return;
+		const seen = !!group.unseen?.includes(peerKey);
+		if (seen) {
+			const unseen = group.unseen.filter((key) => key !== peerKey);
+			group.unseen = unseen.length ? unseen : void 0;
+		}
 		const large = this.host.linkReady(linkId, 3) && this.markLarge(group, peerKey);
 		const legacy = this.hubs.enabled && this.hubs.edgeReady(groupId, session, group, peerKey, this.host.linkReady(linkId, 4), this.now());
-		if (large || legacy) this.store.putGroup(group).catch(() => {});
+		if (large || legacy || seen) this.store.putGroup(group).catch(() => {});
 		if (!this.holdSync(groupId, peerKey)) try {
 			this.host.sendOnLink(linkId, session.syncFrame(this.askOf(groupId, session, peerKey)));
 		} catch {
@@ -26624,6 +26302,41 @@ var Groups = class {
 		this.host.edgeUp?.(groupId, peerKey);
 		this.host.emit();
 	}
+	/**
+	* Admin side: a `group-decline` over the contact chat that let in a member never seen on an edge since. Its welcome
+	* was lost and its app declined the invitation it still showed: it never had the group's keys, so it goes from the
+	* roster (and may be invited again). True when one went.
+	*/
+	async declinedUnseen(groupId, group, linkId) {
+		const session = this.sessions.get(groupId);
+		if (!session?.isAdmin || session.status !== "active" || !group.unseen) return false;
+		const key = group.unseen.find((k) => group.contacts?.[k] === linkId && rosterHas(session.roster, k));
+		if (!key) return false;
+		const edge = this.host.edges(groupId).get(key);
+		if (edge && this.host.linkReady(edge)) return false;
+		const unseen = group.unseen.filter((k) => k !== key);
+		group.unseen = unseen.length ? unseen : void 0;
+		await this.remove(groupId, key).catch(() => {});
+		await this.store.putGroup(group);
+		this.host.emit();
+		return true;
+	}
+	/** Admin side: a member in the roster never seen on an edge since it was let in, whose edge is not up now. */
+	/** This member was sent its welcome again less than `REWELCOME_MS` ago, over its chat or through the link. */
+	rewelcomedLately(groupId, key) {
+		const last = this.rewelcomed.get(groupId)?.get(key);
+		return last !== void 0 && this.now() - last < REWELCOME_MS;
+	}
+	noteRewelcome(groupId, key) {
+		let sent = this.rewelcomed.get(groupId);
+		if (!sent) this.rewelcomed.set(groupId, sent = /* @__PURE__ */ new Map());
+		sent.set(key, this.now());
+	}
+	unwelcomed(group, session, key) {
+		if (!session.isAdmin || !group.unseen?.includes(key) || !rosterHas(session.roster, key)) return false;
+		const edge = this.host.edges(group.id).get(key);
+		return !(edge && this.host.linkReady(edge));
+	}
 	/** Records that a member's app takes rosters past eight; true when that is news (the caller saves). */
 	markLarge(group, key) {
 		if (group.large?.includes(key)) return false;
@@ -26731,13 +26444,19 @@ var Groups = class {
 		if (out.length) this.lastGossip.set(groupId, now);
 		return out;
 	}
+	/** When `via` was last asked for another member's messages (`askOf`), or 0: what it sends written before that is its answer. */
+	askedAt(groupId, via) {
+		let at = 0;
+		for (const asked of this.relayAsked.get(groupId)?.values() ?? []) if (asked.via === via && asked.at > at) at = asked.at;
+		return at;
+	}
 	/**
 	* Whether the answer of the member asked for someone's messages may still be coming: its edge up, asked under
-	* `MESH_SYNC_HOLD_MAX_MS` ago, and a message from it (or the asking) under `MESH_SYNC_HOLD_MS` ago.
+	* `MESH_SYNC_HOLD_MAX_MS` ago, and a message of its answer (or the asking) under `MESH_SYNC_HOLD_MS` ago.
 	*/
 	answering(groupId, { via, at }, now) {
 		const edge = this.host.edges(groupId).get(via);
-		if (!edge || !this.host.linkReady(edge) || now - at >= 1e4) return false;
+		if (!edge || !this.host.linkReady(edge) || now - at >= 18e4) return false;
 		return now - Math.max(at, this.lastHanded.get(groupId)?.get(via) ?? 0) < MESH_SYNC_HOLD_MS;
 	}
 	/**
@@ -26757,21 +26476,41 @@ var Groups = class {
 		held.set(peerKey, { ...asked });
 		return true;
 	}
-	/** The syncs that waited for another member's answer (`holdSync`), once it has come: for what it did not hand on. */
+	/**
+	* The syncs that waited for another member's answer (`holdSync`), once it has come: for what it did not hand on.
+	* One member at a time: the first is told and asked for the others too, which wait for its answer in turn. Told
+	* together, each answered with its own messages alone, and when the member asked first had been away too (it held
+	* little of what was missed) a conversation came as one member's lines, then the next's.
+	*/
 	heldSyncs(groupId, session, now) {
 		const held = this.syncHeld.get(groupId);
 		if (!held?.size) return;
-		const edges = this.host.edges(groupId);
-		for (const [key, asked] of held) {
-			if (this.answering(groupId, asked, now)) continue;
+		const edges = this.host.edges(groupId), asked = this.relayAsked.get(groupId);
+		const due = [];
+		for (const [key, of] of held) {
+			if (this.answering(groupId, of, now)) continue;
 			held.delete(key);
-			if (this.relayAsked.get(groupId)?.get(key)?.via === asked.via) this.relayAsked.get(groupId).delete(key);
+			if (asked?.get(key)?.via === of.via) asked.delete(key);
 			const edge = edges.get(key);
-			if (!edge || !this.host.linkReady(edge) || !rosterHas(session.roster, key)) continue;
-			try {
-				this.host.sendOnLink(edge, session.syncFrame(this.askOf(groupId, session, key)));
-			} catch {}
+			if (edge && this.host.linkReady(edge) && rosterHas(session.roster, key)) due.push(key);
+		}
+		const [next, ...rest] = due;
+		if (!next) return;
+		const ask = new Set(this.askOf(groupId, session, next));
+		for (const key of rest) {
+			ask.add(key);
+			asked?.set(key, {
+				via: next,
+				at: now
+			});
+			held.set(key, {
+				via: next,
+				at: now
+			});
 		}
+		try {
+			this.host.sendOnLink(edges.get(next), session.syncFrame([...ask]));
+		} catch {}
 	}
 	/**
 	* Reachable members whose messages below the highest seen never reached me, for `via` to hand on: their own answer
@@ -27024,7 +26763,8 @@ var Groups = class {
 		if (!session) throw new Error("Group not found");
 		return session;
 	}
-	attach(state) {
+	/** `frames`: what the group's rows hold to hand on, oldest first (none yet for a group just made, joined or given back). */
+	attach(state, frames = []) {
 		const session = new GroupSession(state, {
 			clock: () => this.now(),
 			seqFloor: () => this.host.seqFloor?.() ?? 0,
@@ -27078,8 +26818,21 @@ var Groups = class {
 					...m.frame && { frame: m.frame }
 				};
 				const completed = !!m.completes && !!this.host.completeMessage;
+				const placing = completed ? void 0 : this.lineOrder.placing(MESSAGE_LINK(state.id), {
+					id: m.id,
+					epoch: m.epoch,
+					line: false
+				}, this.now());
 				const stored = completed ? (await this.host.completeMessage(message), false) : await this.host.storeMessage(message);
+				placing?.(stored !== false);
 				if (m.frame && (completed || stored !== false)) await this.frameKept(state.id, m.id, m.frame);
+				if (!completed && stored !== false) this.authorOrder.placed(state.id, {
+					sender: m.sender,
+					epoch: m.epoch,
+					seq: m.seq,
+					id: m.id,
+					at: this.now()
+				});
 				const came = m.sender === session.myKey ? timestamp : cameAt(timestamp, stored, arrivalNow(this.now()));
 				this.lastMessageAt.set(state.id, Math.max(this.lastMessageAt.get(state.id) ?? 0, came));
 				if (mentioned) this.lastMentionAt.set(state.id, Math.max(this.lastMentionAt.get(state.id) ?? 0, came));
@@ -27087,6 +26840,10 @@ var Groups = class {
 				noteCame(this.stored.get(state.id), came, m.sender !== session.myKey, mentioned);
 				this.typings.messageFrom(state.id, m.sender);
 			},
+			kept: async (id, frame) => {
+				await this.host.keepFrame?.(MESSAGE_LINK(state.id), id, frame).catch(() => {});
+				await this.frameKept(state.id, id, frame);
+			},
 			edit: (e) => this.host.groupEdit?.(state.id, e),
 			changed: () => {
 				if (session.status === "removed" && this.hubs.isHub(state.id) && !this.removedAt.has(state.id)) this.removedAt.set(state.id, this.now());
@@ -27099,7 +26856,7 @@ var Groups = class {
 				const edge = this.host.edges(state.id).get(to);
 				return edge && this.host.linkHandled ? this.host.linkHandled(edge) : Promise.resolve(false);
 			} }
-		});
+		}, frames);
 		this.sessions.set(state.id, session);
 		this.lastRoster.set(state.id, session.roster);
 		this.lastTold.set(state.id, {
@@ -27128,7 +26885,13 @@ var Groups = class {
 			for (const [key] of after) if (!rosterHas(before, key) && key !== session.myKey) await this.event(groupId, "joined", `${name(key)} joined`, when, top.e, key);
 			const gone = before.filter(([key]) => !rosterHas(after, key)).map(([key]) => key);
 			this.hubs.removed(groupId, gone, this.now());
-			for (const key of gone) await this.event(groupId, "gone", `${name(key)} is no longer a member`, when, top.e, key);
+			const left = (key) => {
+				const chain = session.state.chain;
+				for (let e = chain.length - 1; e > 0; e--) if (chain[e].k === "remove" && chain[e].s === key) return !!session.state.leftMarks?.[e];
+				return false;
+			};
+			for (const key of gone) if (left(key)) await this.event(groupId, "left", `${name(key)} left`, when, top.e, key);
+			else await this.event(groupId, "gone", `${name(key)} is no longer a member`, when, top.e, key);
 			if (top.k === "role") await this.event(groupId, "admin", `${name(top.s)} ${top.s === session.myKey ? "are" : "is"} now the admin`, when, top.e, top.s);
 			if (top.k === "rotate") await this.event(groupId, "rotated", "Keys rotated: a fresh epoch", when, top.e);
 		}
@@ -27183,16 +26946,21 @@ var Groups = class {
 	/** A line in the group's history; lines at the same time (two members gone in one change) get distinct ones, see `eventTime`. */
 	async event(groupId, event, text, timestamp, epoch, member) {
 		timestamp = eventTime(this.eventTimes, groupId, timestamp);
-		await this.host.storeMessage({
+		const id = `event:${epoch}:${event}:${timestamp}`;
+		this.lineOrder.placing(MESSAGE_LINK(groupId), {
+			id,
+			epoch,
+			line: true
+		}, this.now())(await this.host.storeMessage({
 			linkId: MESSAGE_LINK(groupId),
-			id: `event:${epoch}:${event}:${timestamp}`,
+			id,
 			text,
 			sender: "peer",
 			event,
 			member,
 			timestamp,
 			via: "datalink"
-		});
+		}) !== false);
 	}
 	eventTimes = /* @__PURE__ */ new Map();
 };
@@ -29146,8 +28914,6 @@ function resumeHere(log, runs, peer) {
 	const shared = runs.find((transport) => peer?.includes(transport));
 	return shared ? { resume: shared } : {};
 }
-/** A round trip that moved less than this is not news in the history. */
-var RTT_STEP_MS = 10;
 var sequence = 0;
 var lineId = (at) => `${at.toString(36)}-${(++sequence).toString(36)}`;
 /** A row that says the chat is live on its transport from then on. */
@@ -29551,7 +29317,7 @@ var TransportLog = class {
 			changed = true;
 		}
 		const stretch = [...this.history].reverse().find((e) => e.kind === "live" || e.kind === "switched" || e.kind === "down");
-		if (stretch && stretch.kind !== "down" && stretch.transport === on && (stretch.rttMs === void 0 || Math.abs(stretch.rttMs - ms) >= RTT_STEP_MS)) {
+		if (stretch && stretch.kind !== "down" && stretch.transport === on && (stretch.rttMs === void 0 || Math.abs(stretch.rttMs - ms) >= 10)) {
 			stretch.rttMs = ms;
 			changed = true;
 		}
@@ -34483,24 +34249,6 @@ function messageAttention(type, message, { startedAt, newest, now }) {
 	};
 }
 //#endregion
-//#region ../browser/src/shared/hyperdhtRelay.ts
-/** Only `wss://`, or `ws://` to this machine (a relay for tests or development). */
-function hyperdhtRelayProblem(url) {
-	let parsed;
-	try {
-		parsed = new URL(url);
-	} catch {
-		return "Enter a relay address (wss://…)";
-	}
-	if (parsed.protocol === "wss:") return null;
-	if (parsed.protocol === "ws:" && [
-		"127.0.0.1",
-		"localhost",
-		"[::1]"
-	].includes(parsed.hostname)) return null;
-	return "Use a wss:// relay address";
-}
-//#endregion
 //#region ../browser/src/shared/pushRelay.ts
 /**
 * The push relay a browser hands wake-ups to when it may not post to a push service itself (WISP 401 § Wake-up
@@ -34651,10 +34399,10 @@ var NATIVE_SLOTS = 8;
 var IROH_WEB_SLOTS = 16;
 /** Of a transport's listeners, the ones a group's links never hold: 1:1 chats keep that room. */
 var CHAT_NATIVE_SLOTS = 4;
-/** How often a group link that found no free native slot tries again. */
-var GROUP_NATIVE_RETRY_MS = 15e3;
-/** The longest a group link whose native listener failed to start waits before trying again (its wait doubles up to it). */
-var GROUP_NATIVE_FAILED_MAX_MS = 3e5;
+/** How often a group link that found no free native slot tries again, and the first wait of a listener that failed to start. */
+var NATIVE_RETRY_MS = 15e3;
+/** The longest a chat or a group link whose native listener failed to start waits before trying again (its wait doubles up to it). */
+var NATIVE_FAILED_MAX_MS = 3e5;
 /** "Clear all data": how long taking things back from the network may hold up the clear, in all. */
 var CLEAR_WITHDRAW_MS = 6e3;
 /**
@@ -34683,11 +34431,19 @@ var DEFAULT_SETTINGS = {
 */
 var CARD_RESTORE_MOST = 50;
 var CARD_RESTORE_MS = 6048e5;
+/**
+* A round trip that moved is shown at once, and written to disk by itself (relaxed, no disk sync of its own) at most
+* this often: a 15 s sample on an internet path moves by 10 ms most of the time. A power cut loses at most this much
+* of the round trip's drift, never a row; any other change to the story writes the latest round trip with it.
+*/
+var RTT_SAVE_MS = 3e5;
 /** A reaction said on the live session and not confirmed is said again after this long. */
 var REACTION_RESEND_MS = 3e4;
 /** A file or a payment request of mine that waits for the chat to be live (a text that waits is its outbox's). */
 var waitsForLive = (m) => m.sender === "me" && m.delivery === "waiting" && (!!m.file || !!m.paymentId);
 /** This side's participation key in a chat: derived from its seed once, not at every state built. */
+/** A read of the contact's packet that found it as the last one did: online the same, the same packet, name and services. */
+var samePresence = (a, b) => a.online === b.online && a.lastPacketAt === b.lastPacketAt && a.seenAt === b.seenAt && a.nick === b.nick && JSON.stringify(a.services) === JSON.stringify(b.services);
 function participationKeyOf(live) {
 	const seed = live.stored.participationSeed;
 	if (!seed) return void 0;
@@ -34865,7 +34621,7 @@ var GhostlyNode = class GhostlyNode {
 	* Everything that publishes, dials, polls or settles asks this, not the stored setting.
 	*/
 	get networkOn() {
-		return !!this.settings.online && !this.limitedMode;
+		return !!this.settings.online && !this.limitedMode && !this.options.offline;
 	}
 	transport;
 	/** The same, for groups' requests: a relay budget keeps a chat's share from them (`CHAT_RESERVE`). */
@@ -34910,6 +34666,8 @@ var GhostlyNode = class GhostlyNode {
 	});
 	/** `start` has put the kept transfers back (EngineState.transfersRestored). */
 	transfersRestored = false;
+	/** `start` has loaded the groups (EngineState.groupsLoaded). */
+	groupsLoaded = false;
 	feedbackStartedAt = Date.now();
 	feedbackIds = /* @__PURE__ */ new Set();
 	walletFeedbackReady = false;
@@ -34993,9 +34751,15 @@ var GhostlyNode = class GhostlyNode {
 	groupWakeReceived = /* @__PURE__ */ new Map();
 	requestCounts = /* @__PURE__ */ new Map();
 	transfers = /* @__PURE__ */ new Map();
+	/**
+	* Views that go in the next state sent, and then away (`GroupFilesHost.brief`): dropped once a state carried them,
+	* unless another view took their place meanwhile.
+	*/
+	briefViews = /* @__PURE__ */ new Map();
 	/** files/3 in every chat: offers, resumable transfers, checked by digest (WISP 501 rev 0.3). */
 	fileDesk = new FileDesk({
 		send: (linkId, frame) => this.links.get(linkId)?.link?.sendFilesFrame(frame) ?? false,
+		sendData: (linkId, id, offset, data) => this.links.get(linkId)?.link?.sendFileData(id, offset, data) ?? false,
 		writable: (linkId) => this.links.get(linkId)?.link?.filesWritable(),
 		receivedBytes: (linkId) => this.links.get(linkId)?.files.receivedBytes ?? 0,
 		wireIds: (linkId) => this.links.get(linkId)?.files.wireIds,
@@ -35075,24 +34839,24 @@ var GhostlyNode = class GhostlyNode {
 	* Every wallet twice, one per network (real money, test coins), both open at once. Nothing is parked: a payment
 	* goes through the wallet of its own network, and a wallet of one network never pays for the other.
 	*/
-	usdtWallets = perNetwork((network) => new UsdtWallet(network, () => {
-		this.refreshWallet();
+	usdtWallets = perNetwork((network) => new UsdtWallet(network, (viewChanged = true) => {
+		if (viewChanged) this.refreshWallet();
 		this.desk.reconcileUsdtReceipts().catch(() => {});
 	}));
-	arkWallets = perNetwork((network) => new ArkWallet(network, () => {
-		this.refreshWallet();
+	arkWallets = perNetwork((network) => new ArkWallet(network, (viewChanged = true) => {
+		if (viewChanged) this.refreshWallet();
 		this.desk.reconcileArkReceipts().catch(() => {});
 	}));
-	barkWallets = perNetwork((network) => new BarkWallet(network, () => {
-		this.refreshWallet();
+	barkWallets = perNetwork((network) => new BarkWallet(network, (viewChanged = true) => {
+		if (viewChanged) this.refreshWallet();
 		this.desk.reconcileBarkReceipts().catch(() => {});
 	}));
 	fedimintWallets = perNetwork((network) => new FedimintWallet(network, {
 		changed: () => void this.refreshWallet(),
 		received: (paymentId) => void this.desk.onLightningPaid({ paymentId })
 	}, () => (this.options.fedimintSdk ?? loadFedimintSdk)()));
-	sparkWallets = perNetwork((network) => new SparkWallet(network, () => {
-		this.refreshWallet();
+	sparkWallets = perNetwork((network) => new SparkWallet(network, (viewChanged = true) => {
+		if (viewChanged) this.refreshWallet();
 		this.desk.reconcileSparkReceipts().catch(() => {});
 	}));
 	/** What a call naming no network acts on (a caller from before wallets had their own): Mainnet. */
@@ -35419,29 +35183,38 @@ var GhostlyNode = class GhostlyNode {
 			if (live.stored.deletedIds?.includes(`peer_${wire.wireId}`)) return null;
 			live.files.wireIds.add(wire.wireId);
 			live.files.receivedBytes += wire.size;
-			await fileStore.put({
-				id: file.id,
-				linkId,
-				blob: new Blob([bytes], { type: safeBlobType(file.mime) }),
-				createdAt: Date.now(),
-				direction: "in",
-				wireId: wire.wireId,
-				digest,
-				metadata: {
-					name: wire.name,
-					size: wire.size,
-					mime: wire.mime,
-					timestamp: wire.timestamp,
-					voice: wire.voice,
-					video: wire.video,
-					image: wire.image
-				},
-				transfer: {
-					state: "done",
-					transferred: wire.size,
-					size: wire.size
-				}
-			});
+			const storage = await fileBytes();
+			try {
+				await storage.stage(file.id, new Blob([bytes]));
+				await fileStore.put({
+					id: file.id,
+					linkId,
+					bytes: storage.kind,
+					createdAt: Date.now(),
+					direction: "in",
+					wireId: wire.wireId,
+					digest,
+					metadata: {
+						name: wire.name,
+						size: wire.size,
+						mime: wire.mime,
+						timestamp: wire.timestamp,
+						voice: wire.voice,
+						video: wire.video,
+						image: wire.image
+					},
+					transfer: {
+						state: "done",
+						transferred: wire.size,
+						size: wire.size
+					}
+				});
+			} catch (error) {
+				await storage.remove(file.id).catch(() => {});
+				live.files.wireIds.delete(wire.wireId);
+				live.files.receivedBytes -= wire.size;
+				throw error;
+			}
 			this.transfers.set(file.id, {
 				state: "done",
 				transferred: wire.size,
@@ -35771,6 +35544,10 @@ var GhostlyNode = class GhostlyNode {
 		forgetFrame: async (linkId, id) => {
 			await db.patchMessage(linkId, id, (stored) => stored.frame ? { frame: void 0 } : null, true);
 		},
+		keepFrame: async (linkId, id, frame) => {
+			await db.patchMessage(linkId, id, () => ({ frame }), true);
+		},
+		placeAgain: (linkId, ids) => this.placeAgain(linkId, ids),
 		membersChanged: (groupId) => this.groupMembersChanged(groupId),
 		historyGone: (groupId) => this.groupHistoryGone(groupId),
 		emit: () => this.emitState(),
@@ -35791,11 +35568,16 @@ var GhostlyNode = class GhostlyNode {
 		groupFiles: {
 			store: storedGroupFiles,
 			transfers: this.transfers,
+			brief: (id) => {
+				const view = this.transfers.get(id);
+				if (view) this.briefViews.set(id, view);
+			},
 			settings: () => ({
 				autoDownloads: this.settings.autoDownloads !== false,
 				serveFiles: this.settings.serveFiles !== false
 			}),
 			sendFiles: (linkId, frame) => this.links.get(linkId)?.link?.sendFilesFrame(frame) ?? false,
+			sendData: (linkId, id, offset, data) => this.links.get(linkId)?.link?.sendFileData(id, offset, data) ?? false,
 			writable: (linkId) => this.links.get(linkId)?.link?.filesWritable()
 		}
 	});
@@ -36060,6 +35842,7 @@ var GhostlyNode = class GhostlyNode {
 		const wallets = this.withHomes(walletInstances(networks));
 		const intents = (await intentRepository.list()).map((saved) => saved.review);
 		this.noteOpenReviews(intents);
+		this.paymentCoordinator.notePending(intents);
 		this.walletView = {
 			...networks.mainnet,
 			networks,
@@ -36188,7 +35971,7 @@ var GhostlyNode = class GhostlyNode {
 			const messages = stored.group ? [] : await db.getMessages(stored.id);
 			const storedFiles = stored.group ? [] : await fileStore.listForLink(stored.id);
 			const waiting = new Set(messages.flatMap((m) => m.sender === "me" && m.delivery === "waiting" && m.file ? [m.file.id] : []));
-			for (const file of storedFiles) if (file.transfer && !file.wire3 && !waiting.has(file.id)) this.transfers.set(file.id, file.transfer.state === "transferring" ? {
+			for (const file of storedFiles) if (file.transfer && file.transfer.state !== "done" && !file.wire3 && !waiting.has(file.id)) this.transfers.set(file.id, file.transfer.state === "transferring" ? {
 				...file.transfer,
 				state: "failed",
 				error: "Transfer interrupted. Retry when connected."
@@ -36206,6 +35989,7 @@ var GhostlyNode = class GhostlyNode {
 		this.transfersRestored = true;
 		for (const group of await db.getGroups()) await this.settleHistory(`group:${group.id}`);
 		await this.groups.load(this.limitedMode);
+		this.groupsLoaded = true;
 		for (const group of this.groups.views()) {
 			const note = latestReaction(await db.getMessages(`group:${group.id}`));
 			if (note) this.reactionNotes.set(`group:${group.id}`, note);
@@ -36224,7 +36008,7 @@ var GhostlyNode = class GhostlyNode {
 			this.prepareSpare(STARTUP_QUIET_MS);
 		}
 		if (!this.limitedMode) this.openStartedWallets(fresh);
-		if (this.appsOn) this.appStore.start().catch(() => {});
+		if (this.appsOn && !this.appsWireOnly) this.appStore.start().catch(() => {});
 		if (!this.options.singleDevice && this.networkOn && knownDeviceGate()?.state === "active") this.startDeviceSet().catch(() => {});
 		if (!this.options.singleDevice && this.limitedMode && knownDeviceGate()?.state === "active") this.readTurnWhileLimited();
 		if (this.restoreCheck === "checking" && this.limitedMode) this.checkRestoredTurn(0);
@@ -36689,7 +36473,7 @@ var GhostlyNode = class GhostlyNode {
 	appShelf;
 	/** The installed apps and stores, refused while the apps feature is off. */
 	get appStore() {
-		if (!this.appsOn) throw this.appsOff();
+		if (!this.appsOn || this.appsWireOnly) throw this.appsOff();
 		return this.appShelf ??= new Apps({
 			fetch: boundedAppFetch({
 				fetcher: this.options.appFetch,
@@ -36700,12 +36484,16 @@ var GhostlyNode = class GhostlyNode {
 				return !!stored && !stored.group && !!stored.profile && !!stored.pairedPeerKey;
 			},
 			online: () => this.networkOn && !this.shuttingDown,
-			checked: () => this.events.onAppsChecked?.()
+			checked: () => this.events.onAppsChecked?.(),
+			...this.options.builtInApp && { readBuiltIn: this.options.builtInApp }
 		});
 	}
 	appList() {
 		return this.appStore.list();
 	}
+	appBuiltIns() {
+		return this.appStore.builtIns();
+	}
 	appStoreList() {
 		return this.appStore.listStores();
 	}
@@ -36751,6 +36539,9 @@ var GhostlyNode = class GhostlyNode {
 	appFile(params) {
 		return this.appStore.file(params);
 	}
+	appFileAt(params) {
+		return this.appStore.fileAt(params);
+	}
 	appStorageGet(params) {
 		return this.appStore.storageGet(params);
 	}
@@ -36766,6 +36557,9 @@ var GhostlyNode = class GhostlyNode {
 	appDataExport(params) {
 		return this.appStore.exportData(params);
 	}
+	appDataExportText(params) {
+		return this.appStore.exportDataText(params);
+	}
 	getState() {
 		const groups = this.groups.views();
 		return {
@@ -36793,6 +36587,7 @@ var GhostlyNode = class GhostlyNode {
 			})).sort((a, b) => a.createdAt - b.createdAt),
 			transfers: Object.fromEntries(this.transfers),
 			transfersRestored: this.transfersRestored,
+			...this.groupsLoaded && { groupsLoaded: true },
 			wallet: this.walletView,
 			payments: this.desk.views(),
 			identityProofs: this.identities.views(),
@@ -37645,7 +37440,7 @@ var GhostlyNode = class GhostlyNode {
 			this.transport.networkChanged?.();
 			this.directPath.reset();
 		}
-		if (params.network) for (const failed of this.groupNativeFailed.values()) {
+		if (params.network) for (const failed of this.nativeFailed.values()) {
 			failed.at = 0;
 			failed.wait = 0;
 		}
@@ -37770,6 +37565,10 @@ var GhostlyNode = class GhostlyNode {
 			error: `Message exceeds ${LIMITS.maxChatMessageBytes} UTF-8 bytes.`,
 			refused: true
 		};
+		if (!pairedMessageFits(timestamp, trimmed, reply && pairedWireReply(reply), forwarded, card)) return {
+			error: PAIRED_FRAME_TOO_LARGE,
+			refused: true
+		};
 		const stop = this.chatStopped(live);
 		if (stop) return { error: stop };
 		if (!link.isDataLinkOpen && link.dhtDelivery?.inviteTaken) return {
@@ -37859,14 +37658,23 @@ var GhostlyNode = class GhostlyNode {
 	/**
 	* The message of a chat a reply answers, by its id here or the id both sides know it by (`replyRef`): what the
 	* reply keeps of it, or why there is nothing to reply to. A group's reply needs the author's member key too.
+	* Read alone by its id, or a chat's `peer_`/`me_` row for a wire id, as `resolveReply` does: a group's message goes
+	* by its row's id, so a miss there is not here; a chat's other rows (a file's, a payment's) are looked for in the
+	* whole chat.
 	*/
 	async replyFor(linkId, messageId) {
 		if (typeof messageId !== "string" || !messageId) return "No message to reply to";
-		const messages = await db.getMessages(linkId);
-		const original = messages.find((m) => m.id === messageId) ?? messages.find((m) => replyRef(m) === messageId);
+		const group = linkId.startsWith("group:");
+		let original = await db.getMessage(linkId, messageId);
+		for (const rowId of group ? [] : [`peer_${messageId}`, `me_${messageId}`]) {
+			if (original) break;
+			const row = await db.getMessage(linkId, rowId);
+			if (row && replyRef(row) === messageId) original = row;
+		}
+		if (!original && !group) original = (await db.getMessages(linkId)).find((m) => replyRef(m) === messageId);
 		const ref = original && replyRef(original);
 		if (!original || !ref) return "That message is not in this chat, or cannot be replied to";
-		if (linkId.startsWith("group:") && !original.member) return "That message cannot be replied to";
+		if (group && !original.member) return "That message cannot be replied to";
 		return replyTo(original, ref);
 	}
 	/**
@@ -38204,6 +38012,7 @@ var GhostlyNode = class GhostlyNode {
 			const chat = this.links.get(linkId)?.stored;
 			outbox = new Outbox({
 				read: () => db.getMessages(linkId),
+				get: (id) => db.getMessage(linkId, id),
 				update: async (id, delivery, error, extra) => {
 					if (delivery === "delivered") await db.patchMessage(linkId, id, (message) => message.delivery === "delivered" ? null : {
 						...message.delivery && {
@@ -39285,19 +39094,40 @@ var GhostlyNode = class GhostlyNode {
 		const cue = transportCue(mark, log.entries, log.history);
 		if (cue) this.cueFeedback(cue, linkId);
 	}
-	saveTransportLog(live, log) {
+	/** `toDisk: false` shows the story and leaves the disk as it is; `relaxed`: written with no disk sync of its own. */
+	saveTransportLog(live, log, { toDisk = true, relaxed = false } = {}) {
 		const transportLog = log.entries.map((e) => ({ ...e })), transportHistory = log.history.map((e) => ({ ...e }));
 		live.stored = {
 			...live.stored,
 			transportLog,
 			transportHistory
 		};
-		db.patchLink(live.stored.id, {
-			transportLog,
-			transportHistory
-		}).catch(() => {});
+		if (toDisk) {
+			live.rttUnsaved = false;
+			db.patchLink(live.stored.id, {
+				transportLog,
+				transportHistory
+			}, relaxed).catch(() => {});
+		}
 		this.emitState();
 	}
+	/** A round trip measured on the chat's transport: in the view at once, on disk at most every `RTT_SAVE_MS`. */
+	noteRtt(live, ms) {
+		const moved = live.rttPosted === void 0 || Math.abs(live.rttPosted - ms) >= 10;
+		const log = this.transportLogOf(live);
+		if (!log) {
+			if (moved) this.emitState();
+			return;
+		}
+		const changed = log.rtt(ms);
+		if (changed) live.rttUnsaved = true;
+		const now = Date.now();
+		if (live.rttUnsaved && (live.rttSavedAt === void 0 || now - live.rttSavedAt >= RTT_SAVE_MS)) {
+			live.rttSavedAt = now;
+			this.saveTransportLog(live, log, { relaxed: true });
+		} else if (changed) this.saveTransportLog(live, log, { toDisk: false });
+		else if (moved) this.emitState();
+	}
 	/** Which ways of paying one chat allows. */
 	/** `networks`: for a way of paying, the networks this chat takes it on (the Accept side's cards); the others are kept. */
 	async setChatPaymentMethods({ linkId, methods, networks }) {
@@ -39329,7 +39159,9 @@ var GhostlyNode = class GhostlyNode {
 	async connect({ linkId }) {
 		const link = this.links.get(linkId)?.link;
 		if (!link) throw new Error("You are offline. Go online before reconnecting.");
-		await this.ensureNativeEndpoints(linkId);
+		const live = this.links.get(linkId), native = this.ensureNativeEndpoints(linkId);
+		const { preferredTransport: preferred, transportFallback: fallback } = live.stored;
+		if (this.reachedOnlyNatively(live) || fallback === false && preferred && preferred !== "webrtc/1") await native;
 		await link.connect();
 	}
 	disconnect({ linkId }) {
@@ -39839,11 +39671,22 @@ var GhostlyNode = class GhostlyNode {
 	}
 	/** Mini-apps are on in this build (`APPS_ENABLED`) or for this engine (`apps`). */
 	get appsOn() {
-		return this.options.apps ?? true;
+		return !!(this.options.apps ?? true);
+	}
+	/** `apps/1` only (`apps: "wire"`): this host runs no mini-app and keeps no store, so nothing is installed here to check. */
+	get appsWireOnly() {
+		return this.options.apps === "wire";
 	}
-	/** Why an app call is refused: this client runs no mini-app (`apps: false`), or the build has them off. */
+	/** Why an app call is refused: this client runs no mini-app (`apps: false`, or `"wire"` for the store's), or the build has them off. */
 	appsOff() {
-		return /* @__PURE__ */ new Error(this.options.apps === false ? "Apps do not run on this client" : "Apps are unavailable in this release");
+		return /* @__PURE__ */ new Error(this.options.apps === false || this.appsWireOnly ? "Apps do not run on this client" : "Apps are unavailable in this release");
+	}
+	/** Before an app's frames go to a contact: a version removed or revoked here says nothing more (WISP 1200 § Takedowns). */
+	async appChatRunnable(ref, digest) {
+		if (!this.appsWireOnly) await this.appStore.chatRunnable({
+			ref,
+			digest
+		});
 	}
 	/** A paired 1:1 chat and the chat app id of `ref` in it, from the two pinned participation keys (WISP 1200 § In a chat). */
 	appChat(linkId, ref) {
@@ -39869,10 +39712,7 @@ var GhostlyNode = class GhostlyNode {
 	async appOpen({ linkId, ref, version, digest }) {
 		const { live, app } = this.appChat(linkId, ref);
 		if (!isAppVersion(version)) throw new Error("Not an app version");
-		await this.appStore.chatRunnable({
-			ref,
-			digest
-		});
+		await this.appChatRunnable(ref, digest);
 		const open = live.appsOpen ??= /* @__PURE__ */ new Map();
 		if (live.link) live.link.openApp(app, version);
 		else open.set(app, version);
@@ -39888,10 +39728,7 @@ var GhostlyNode = class GhostlyNode {
 	async appSend({ linkId, ref, data, digest }) {
 		const { live, app } = this.appChat(linkId, ref);
 		if (!live.appsOpen?.has(app)) return { error: "not-open" };
-		await this.appStore.chatRunnable({
-			ref,
-			digest
-		});
+		await this.appChatRunnable(ref, digest);
 		return { error: live.link ? live.link.sendAppData(app, data) : "offline" };
 	}
 	/** Every page went away: no app runs here any more, so each open one is closed (`close` goes where it can). */
@@ -39998,8 +39835,10 @@ var GhostlyNode = class GhostlyNode {
 			this.links.get(edge)?.link?.sendGroupFrame(frame);
 		} catch {}
 	}
-	leaveGroup({ groupId }) {
-		return this.groups.leave(groupId);
+	/** `admin`: the member a leaving admin handed the role to. */
+	async leaveGroup({ groupId }) {
+		const admin = await this.groups.leave(groupId);
+		return admin ? { admin } : {};
 	}
 	removeGroupMember({ groupId, key }) {
 		return this.groups.remove(groupId, key);
@@ -41018,6 +40857,7 @@ var GhostlyNode = class GhostlyNode {
 		const settings = rest;
 		delete settings.backupReminders;
 		const wasOnline = this.networkOn;
+		if (Array.isArray(settings.iceServers)) settings.iceServers = settings.iceServers.map(iceServerSetting);
 		for (const server of settings.iceServers ?? []) {
 			const problem = iceServerProblem(server);
 			if (problem) throw new Error(problem);
@@ -41986,7 +41826,7 @@ var GhostlyNode = class GhostlyNode {
 		this.groupWakeReceived.delete(linkId);
 		this.quietEdges.delete(linkId);
 		this.groupNativeWaiting.delete(linkId);
-		this.groupNativeFailed.delete(linkId);
+		this.nativeFailed.delete(linkId);
 		this.groupNativeRetryAt = 0;
 		if (live.stored.wakeToken && this.meshEdge(live.stored)) {
 			const group = live.stored.group, peer = live.stored.groupPeer;
@@ -42102,7 +41942,7 @@ var GhostlyNode = class GhostlyNode {
 		if (this.groupEntryTimer || this.shuttingDown || this.options.deferGroups) return;
 		this.groupEntryTimer = setInterval(() => {
 			this.groups.tick().catch(() => {});
-			this.retryGroupNative();
+			this.retryNative();
 		}, 1e3);
 	}
 	stopGroupEntries() {
@@ -42145,6 +41985,7 @@ var GhostlyNode = class GhostlyNode {
 			usdtPaymentsSupport: !entry,
 			barkPaymentsSupport: !entry,
 			largeFilesSupport: !entry,
+			binaryFilesSupport: !entry,
 			params: stored,
 			rtcAvailable: typeof RTCPeerConnection !== "undefined" && !this.edgeRtcOff.has(linkId),
 			resume: !entry && stored.edgeLive ? resumeOn : void 0,
@@ -42250,10 +42091,11 @@ var GhostlyNode = class GhostlyNode {
 						role,
 						packetAt: presence.lastPacketAt
 					});
+					const same = samePresence(live.presence, presence);
 					live.presence = presence;
 					if (!entry && presence.nick && !live.link?.isDataLinkOpen) this.groups.edgeNick(group, peer, presence.nick);
 					if (!entry) this.edgeRtcPresence(linkId, presence);
-					this.emitState();
+					if (!same) this.emitState();
 				},
 				onPairingState: (state) => {
 					live.pairing = state;
@@ -42340,7 +42182,7 @@ var GhostlyNode = class GhostlyNode {
 		this.edgeRtcOff.delete(linkId);
 		if (live) traceLink(live.myPubKeyZ32, "edge-rtc-back", {});
 		this.groupNativeWaiting.delete(linkId);
-		this.groupNativeFailed.delete(linkId);
+		this.nativeFailed.delete(linkId);
 		this.groupNativeRetryAt = 0;
 		this.restartEdge(linkId);
 	}
@@ -42381,6 +42223,7 @@ var GhostlyNode = class GhostlyNode {
 			callsSupport: this.options.callsSupport ?? typeof RTCPeerConnection !== "undefined",
 			callsMissing: this.options.callsUnavailable,
 			largeFilesSupport: true,
+			binaryFilesSupport: true,
 			typingSupport: true,
 			reactionsSupport: this.options.reactions !== false,
 			editSupport: !GhostlyNode.testNoEdit(),
@@ -42532,11 +42375,7 @@ var GhostlyNode = class GhostlyNode {
 					this.emitState();
 				},
 				onLiveAttempt: () => this.emitState(),
-				onRtt: (ms) => {
-					const log = this.transportLogOf(live);
-					if (log?.rtt(ms)) this.saveTransportLog(live, log);
-					else this.emitState();
-				},
+				onRtt: (ms) => this.noteRtt(live, ms),
 				onDiscoveryError: (error) => {
 					if ((error ?? void 0) !== live.discoveryError) {
 						live.discoveryError = error ?? void 0;
@@ -42658,6 +42497,7 @@ var GhostlyNode = class GhostlyNode {
 					this.emitState();
 				},
 				onPresence: (presence) => {
+					let same = samePresence(live.presence, presence);
 					live.presence = presence;
 					if (!stored.profile && presence.nick && presence.nick !== live.stored.peerNick) {
 						live.stored = {
@@ -42665,8 +42505,9 @@ var GhostlyNode = class GhostlyNode {
 							peerNick: presence.nick
 						};
 						db.patchLink(linkId, { peerNick: presence.nick });
+						same = false;
 					}
-					this.emitState();
+					if (!same) this.emitState();
 				},
 				onMessage: (message) => {
 					if (live.stored.inviteCode) {
@@ -42737,6 +42578,7 @@ var GhostlyNode = class GhostlyNode {
 			}
 		});
 		const link = live.link;
+		if (linkId === this.activeLinkId) link.setChatActive(true);
 		link.start();
 		this.emitState();
 		if (resumed.resume) {
@@ -42861,7 +42703,7 @@ var GhostlyNode = class GhostlyNode {
 	get nativeFactories() {
 		const relay = this.relaysHyperdht ? this.hyperdhtRelay : "";
 		return {
-			...relay ? { "hyperdht/1": async (seedB64) => (await import("./hyperdhtRelay-C1p0nkle.js")).createRelayedHyperEndpoint(seedB64, relay) } : {},
+			...relay ? { "hyperdht/1": async (seedB64) => (await import("./hyperdhtRelay-CPYwSLLS.js")).createRelayedHyperEndpoint(seedB64, relay) } : {},
 			...this.options.nativeTransports,
 			...this.ownIrohRelays ? { "iroh/1": (seedB64) => this.options.nativeTransports["iroh/1"](seedB64, this.settings.irohRelays?.length ? { relays: [...this.settings.irohRelays] } : {}) } : {},
 			...this.options.irohWeb ? { "iroh/1": (seedB64) => createIrohWebEndpoint(seedB64, { relays: this.irohRelays }) } : {}
@@ -42962,17 +42804,18 @@ var GhostlyNode = class GhostlyNode {
 		return Promise.all(starts).then((full) => {
 			const live = this.links.get(linkId), link = live?.link;
 			if (this.shuttingDown || !live || !link || link !== expected) return;
-			if (live.stored.group && this.keepsGroupNative(live.stored)) {
+			const group = !!live.stored.group;
+			if (group && this.keepsGroupNative(live.stored)) {
 				if (full.includes("no-slot") && !link.availableTransports.some((t) => t !== "webrtc/1")) this.groupNativeWaiting.add(linkId);
 				else this.groupNativeWaiting.delete(linkId);
-				if (full.includes("failed")) {
-					const wait = Math.min(Math.max(GROUP_NATIVE_RETRY_MS, (this.groupNativeFailed.get(linkId)?.wait ?? 0) * 2), GROUP_NATIVE_FAILED_MAX_MS);
-					this.groupNativeFailed.set(linkId, {
-						at: Date.now() + wait,
-						wait
-					});
-				} else this.groupNativeFailed.delete(linkId);
-			} else this.groupNativeFailed.delete(linkId);
+			}
+			if ((group ? this.keepsGroupNative(live.stored) : this.keepsNativeEndpoints(linkId, live.stored)) && full.includes("failed")) {
+				const wait = Math.min(Math.max(NATIVE_RETRY_MS, (this.nativeFailed.get(linkId)?.wait ?? 0) * 2), NATIVE_FAILED_MAX_MS);
+				this.nativeFailed.set(linkId, {
+					at: Date.now() + wait,
+					wait
+				});
+			} else this.nativeFailed.delete(linkId);
 			this.emitState();
 		});
 	}
@@ -43130,25 +42973,25 @@ var GhostlyNode = class GhostlyNode {
 	/** Group links waiting for a free native slot (`ensureNativeEndpoints`), by link id. */
 	groupNativeWaiting = /* @__PURE__ */ new Set();
 	groupNativeRetryAt = 0;
-	/** Group links whose native listener failed to start, by link id: when each tries again, and how long it waited last. */
-	groupNativeFailed = /* @__PURE__ */ new Map();
+	/** Chats and group links whose native listener failed to start, by link id: when each tries again, and how long it waited last. */
+	nativeFailed = /* @__PURE__ */ new Map();
 	/**
 	* Now and then, the group links that found no free native slot try again: a chat or another group may have let one go.
-	* Those whose listener failed to start try again once their wait is over.
+	* Chats and group links whose listener failed to start try again once their wait is over.
 	*/
-	retryGroupNative() {
+	retryNative() {
 		const now = Date.now();
-		for (const [linkId, failed] of this.groupNativeFailed) {
+		for (const [linkId, failed] of this.nativeFailed) {
 			if (now < failed.at) continue;
 			if (!this.links.get(linkId)?.link) {
-				this.groupNativeFailed.delete(linkId);
+				this.nativeFailed.delete(linkId);
 				continue;
 			}
 			failed.at = now + failed.wait;
 			this.ensureNativeEndpoints(linkId);
 		}
 		if (!this.groupNativeWaiting.size || Date.now() < this.groupNativeRetryAt) return;
-		this.groupNativeRetryAt = Date.now() + GROUP_NATIVE_RETRY_MS;
+		this.groupNativeRetryAt = Date.now() + NATIVE_RETRY_MS;
 		for (const linkId of [...this.groupNativeWaiting]) {
 			if (!this.links.get(linkId)?.link) {
 				this.groupNativeWaiting.delete(linkId);
@@ -43253,6 +43096,24 @@ var GhostlyNode = class GhostlyNode {
 		} else this.placedAt.set(message.linkId, Math.max(last, Math.min(message.timestamp, now)));
 		return message;
 	}
+	/**
+	* These rows, in this order, placed again below everything in their history, as if they came now: a group member's
+	* messages that came above an older one of theirs (WISP 400, requirement 10), and the lines that came after them. The
+	* places are taken before anything is awaited, so a row that comes meanwhile goes below them. Each still shows the
+	* time it showed. All of them in one write: one disk sync, not one a row.
+	*/
+	async placeAgain(linkId, ids) {
+		const places = new Map(ids.map((id) => {
+			const timestamp = arrivalKey(Date.now(), this.placedAt.get(linkId));
+			this.placedAt.set(linkId, timestamp);
+			return [id, timestamp];
+		}));
+		const moved = await db.patchMessages(linkId, [...places.keys()], (m) => ({
+			timestamp: places.get(m.id),
+			sentAt: shownTime(m)
+		}));
+		if (moved.length) await this.messagesChanged(linkId, moved.map((m) => m.id));
+	}
 	async storeMessage(message) {
 		await this.storeNewMessage(message);
 	}
@@ -43372,7 +43233,7 @@ var GhostlyNode = class GhostlyNode {
 			transportWait: live.link?.transportWait,
 			liveAttempt: live.link?.liveAttempt,
 			liveDialer: live.stored.profile && !live.stored.group ? live.link?.dialer : void 0,
-			transportRttMs: live.link?.rttMs,
+			transportRttMs: live.rttPosted = live.link?.rttMs,
 			transportRelayed: live.link?.relayedPath,
 			transportLive: live.transportLog?.liveNow(),
 			transportLog: stored.id === this.activeLinkId && stored.profile && !stored.group ? stored.transportLog ?? [] : void 0,
@@ -43430,6 +43291,7 @@ var GhostlyNode = class GhostlyNode {
 			this.stateTimer = null;
 			if (this.gatedOut) return;
 			this.events.onState(this.getState());
+			this.dropBriefViews();
 			if (this.deviceLinks) this.syncDeviceTokens();
 		}, delayMs);
 	}
@@ -43441,11 +43303,16 @@ var GhostlyNode = class GhostlyNode {
 		}
 		if (this.gatedOut) return;
 		this.events.onState(this.getState());
+		this.dropBriefViews();
+	}
+	/** A state went with the brief views: they go, so the next states do not carry them (`briefViews`). */
+	dropBriefViews() {
+		for (const [id, view] of this.briefViews) if (this.transfers.get(id) === view) this.transfers.delete(id);
+		this.briefViews.clear();
 	}
 };
 //#endregion
 //#region ../browser/src/engine/server.ts
-var server_exports = /* @__PURE__ */ __exportAll({ EngineServer: () => EngineServer });
 var EngineServer = class {
 	/** The whole engine: never made on a device that is not the active one (`devices/peer.ts` decides, WISP 06 § The gate). */
 	gated = false;
@@ -43517,6 +43384,10 @@ var EngineServer = class {
 	get historyMark() {
 		return this.changes;
 	}
+	/** Whether a chat's or group's history changed after `mark` (`historyMark`); with none, since this engine was made. */
+	historyChanged(id, mark = 0) {
+		return (this.changedAt.get(id) ?? 0) > mark;
+	}
 	/**
 	* `read`: the chats and groups whose whole history the client read itself, after `mark` (`historyMark`). One that has
 	* not changed since is not read and sent again: the client hears only what changes in it from now on.
@@ -43679,6 +43550,6 @@ function signalKind(signal) {
 	}
 }
 //#endregion
-export { EngineServer, hyperdhtRelayProblem as n, server_exports as t };
+export { EngineServer };
 
-//# sourceMappingURL=server-0zfNpABQ.js.map
+//# sourceMappingURL=server-Ss0gJ-nw.js.map