@ghostlytools/cli 1.3.0 → 1.3.2

package/dist/assets/{server-CBCEYKMN.js → server-CJNEKxzE.js}

@@ -1,13 +1,16 @@
 import { n as traceJoin } from "./joinTrace-CjRDFy85.js";
-import { $ as appRef, D as parseVideoMeta, Ft as toBase64Url, G as claimedTime, It as toZ32, J as shownTime, K as heardTime, Lt as utf8Decode, N as STATUS_CARD_LIMITS, Nt as randomBytes, O as BUTTON_ID, Ot as bytesEqual, Q as appFingerprint, Rt as utf8Encode, T as parseVoiceMeta, U as statusCardText, V as sameButtonText, W as arrivalKey, Z as APP_STATEMENT_LIMITS, _ as safeBlobType, _t as LIMITS, at as readAppRevocation, bt as encodeControl, c as readGroupFileMeta, g as formatFileSize, ht as readCanonicalJson, it as isAppRef, jt as fromBase64Url, nt as isAppHash, o as groupFileFallback, p as parseImageMeta, pt as canonicalJson, q as receivedTimestamp, rt as isAppKey, t as GROUP_FILE_LIMITS, v as sanitizeFileName, w as fileMessageText, y as sanitizeMime, yt as decodeControl, z as checkStatusCard } from "./groupFiles-DBbjOLuD.js";
-import { $a as HANDOFF_HELLO, $i as EDIT_RATE_WINDOW_MS, $o as readEnrollGrant, $r as STATUS_CARD_CAPABILITY, $t as didDhtFromPublicKey, A as CommunitySession, Aa as RELAY_POLL_INTERVALS, Ao as readHandoffHello, Ar as typingActivity, As as nextTurnPosition, B as knockRecords, Bi as PeerProofs, Bn as isFederationId, Bo as signTombstone, Br as deviceWakeRequest, Bs as RelayTransport, C as sha256Paced, Ca as rosterHas, Ci as CapsExchange, Co as handoffStreamKey, Cr as FILE_LIMITS, Cs as TURN_RAISE_READ_TIMEOUT_MS, D as openGroupTyping, Do as readHandoffCancel, Ds as TURN_LAST_SEQUENCE, E as groupTypingEpoch, Ea as DirectPathWatch, Ei as dialDescriptors, Eo as readHandoffAck, Es as turnPutSummary, Et as normalizeAtprotoHandle, Fa as webLocalFetch, Fi as identityStatement, Fn as decodeBolt11, Fr as pinIsNewer, Fs as turnKeys, G as groupWakeFrame, Ga as emptyLinkRecords, Gn as LIVENESS_PING_MS, Gr as checkPushEndpoint, Gs as budgetRetryMs, H as readKnocks, Hi as validExternalKey, Hn as parseFedimintRequestPayload, Hr as parseWakeFrame, Hs as normalizeRelayUrl, I as decodeGroupEntryLink, Ii as newIdentityBinding, In as ENDPOINT, Ir as pinNumberHolds, Is as turnName, J as GROUP_LIMITS, Ja as serviceIdFromName, Ji as DHT_MESSAGE_TTL, Jn as engineText, Jo as enrollDigits, Jr as chatAppId, Js as PacketTooLargeError, K as groupWakes, Ka as HTTP_SERVICE_PROTO, Kn as pairedMessageFrame, Ko as enrollCancelFrame, Kr as vapidKeysMatch, Ks as isDiscoveryBudgetError, L as encodeGroupEntryLink, La as RTC_CONFIG, Li as receivedIdentityStatus, Ln as cashuRequestPayload, Lo as readSetUpdate, Lr as readPin, Ls as turnStatedVerifier, M as communityHasFrame, Ma as GhostlyHttpError, Mo as readHandoffTurnFrame, Mr as PIN_LIMITS, Ms as signTurnPacket, N as decodeCommunityLink, Na as formatLocalTarget, Ni as emptyIdentityLedger, No as readHandoffVerified, Nr as mayPin, Ns as signTurnRelease, O as sealGroupTyping, Oa as DHT_POLL_INTERVALS, Oo as readHandoffDone, Or as TypingSender, Os as TURN_MAX, P as encodeCommunityLink, Pa as parseLocalTarget, Pi as identityRevocationValue, Po as sealHandoffPiece, Pr as nextPinNumber, Ps as turnInstance, Q as frameBytes, Qa as HANDOFF_HAVE, Qi as EDIT_BUFFER_MS, Qo as enrollProofFrame, Qr as EDIT_CAPABILITY, Qt as didDhtDocument, R as entryParams, Ri as revokesIdentity, Rn as fedimintRequestPayload, Ro as setAckFrame, Rr as WAKE_CALL_INTERVAL_MS, Rs as turnVerifierMark, S as readAppBundleAsync, Sa as commitHash, Sn as isBitcoinAddress, So as handoffRetryAfter, Sr as ChatFiles, T as GroupTypingBoard, Ta as edgeParams, Ti as capsDescriptors, To as newHandoffId, Tr as transferStalled, Ts as classifyTurnRead, Tt as isAtprotoDid, Ua as parseCallSignal, Ui as TRANSPORTS, Un as GhostLink, Ur as relayRequest, V as mergeKnocks, Vi as emptyProofLedger, Vn as parseCashuRequestPayload, Vo as verifySetUpdate, Vr as newWakeToken, Vs as currentRelays, W as GroupWakeLimiter, Wi as automaticTransport, Wn as INVITE_TAKEN, Wr as wakeRequest, Ws as traceLink, X as GROUP_READ_NOTE, Xa as HANDOFF_CANCEL, Xi as DHT_FILE_CAPABILITY, Xo as enrollGrantFrame, Xr as APPS_CAPABILITY, Xs as createRelayPayload, Ya as HANDOFF_ACK, Yi as peekDhtMailbox, Yn as CarriedTransport, Yo as enrollDoneFrame, Yr as isAppVersion, Z as GroupSession, Za as HANDOFF_DONE, Zi as dhtFileId, Zo as enrollHelloFrame, Zr as BUTTONS_CAPABILITY, _a as readReply, _n as walletNetworkOf, _o as handoffHelloFrame, _r as rankHubs, _s as deviceLinkPairing, a as planAppUpdate, aa as COMMUNITY_REACTION_FRAME, ai as HoldRefusedError, an as EVM_TEST_CHAINS, ao as HANDOFF_VERIFIED, ar as pickMeshHubs, as as OwnInviteError, at as groupName, b as pacer, bn as sparkAddressKind, bo as handoffPakeFrame, br as readLobby, bs as seedSigner, ca as ReactionWindow, ci as readManifest, cn as SEPOLIA_TEST_USDT, co as handoffAttemptFailed, cr as beaconRecords, cs as encodeInviteCode, d as APP_BUNDLE_LIMITS, da as reactionEmoji, dn as USDT_PUBLIC_RPC, do as handoffCancelFrame, dr as lobbyKeys, ds as DEVICES_CAPABILITY, ea as RateWindow, ec as createIdentity, ei as UPGRADE_CAPABILITY, en as encodeDidDhtDeactivated, eo as HANDOFF_OFFER, er as groupSignalFrame, es as readEnrollHello, f as APP_BUNDLE_MAGIC, fa as reactionIsNewer, fn as WALLET_NETWORKS, fo as handoffContext, fr as lobbyRecords, fs as ENROLL_CAPABILITY, g as appViewOf, ga as pairedReplyAuthor, gn as validatePaymentTarget, go as handoffEphemeral, gr as pickHubs, gs as deviceKeyZ32, h as appDigest, ha as wireReaction, hn as formatPaymentAmount, ho as handoffDigest, hr as newerHead, hs as deviceEchoNonce, i as checkAppBeforeRun, ia as readForwarded, ic as verify, ii as HoldKeys, in as ETHEREUM_USDT, io as HANDOFF_TIMINGS, ir as meshHubs, is as readDeviceInvite, it as mentionsMember, j as GROUP_READ_NOTE_COMMUNITY, ja as presenceSeenAt, ji as IdentityExchange, jo as readHandoffPake, js as readTurnPacket, k as COMMUNITY_LIMITS, ki as IDENTITY_REVOCATION_LABEL, ko as readHandoffHave, ks as firstDeviceSetSecret, l as readAppStoreSteps, la as nextReactionNumber, lo as handoffAttemptSucceeded, lr as doorHubs, ma as validReactionNumber, mn as assertWholeSats, mo as handoffDataFrame, mr as mergeLobby, ms as deviceEchoFrame, n as appStoreDecision, na as parseLinkPreview, nc as identityFromSeedB64, ni as HOLD_DATED_BACK_MS, no as HANDOFF_PIECE_BYTES, nr as MESH_HUBS, ns as createDeviceInvite, nt as carryMentions, o as APP_STORE_LIMITS, oa as GROUP_REACTION_FRAME, oc as sanitizeAvatar, oi as isHoldUrl, on as ONCHAIN_PROVIDER, oo as filePartName, or as COMMUNITY_TOPOLOGY, os as createChatInvite, p as APP_ICON_PATH, pa as readReaction, pn as assertTokenUnits, po as handoffContextProof, pr as mergeBeacon, ps as HANDOFF_CAPABILITY, q as parseGroupWakeFrame, qa as LEGACY_SERVICES, qn as engineError, qo as enrollCancelReason, qs as withRequestOptions, r as appUpdateDecision, ra as forwardedAgain, rc as publicKeyFromZ32, ri as HOLD_LIMITS, rn as signDidDhtPacket, ro as HANDOFF_REQUEST, rr as mayBeHub, rs as deviceInviteJoinerParams, rt as parseCommunityEdit, sa as REACTION_LIMITS, si as newMailbox, sn as PaymentPreflightError, so as handoffAttemptAllowed, sr as beaconKeys, ss as decodeInviteCode, t as appRevocationFor, ta as dhtEditId, tc as identityFromSeed, ti as HOLD_CAPABILITY, tn as encodeDidDhtPacket, to as HANDOFF_PAKE, tr as readGroupSignal, ts as verifyEnrollProof, tt as GROUP_EDIT_TEXT_BYTES, ua as queueReaction, un as TEST_USDT_FAUCET_AMOUNT, uo as handoffBusyFrame, ur as freshHubs, us as inviteOwnership, va as replySnippet, vn as SPARK_NETWORKS, vo as handoffManifestFrames, vr as readBeacon, vs as devicePingFrame, wa as verifyCommitSignature, wi as DHT_TEXT_CAPABILITY, wn as isPubkyKey, wo as handoffVersions, wr as transferEnded, ws as TURN_SETTLE_MS, xa as MEMBER_KEY, xn as sparkInvoiceDetails, xo as handoffReleaseFrame, xr as shouldBeHub, xs as webCryptoSigner, y as isAppUrl, ya as GROUP_MEMBER_CAP, yn as SPARK_PROVIDER, yo as handoffOfferFrame, yr as readBeaconHead, ys as newDeviceSetSecret, z as knockIdentity, zi as lastSharedWithMe, zn as findEndpoint, zo as setUpdateFrame, zr as WakeLimiter, zs as DEFAULT_RELAYS } from "./src-DhfGgAUu.js";
+import { $c as normalizeRelayUrl, $i as lastSharedWithMe, $o as parseCallSignal, $r as WakeLimiter, $t as didDhtFromPublicKey, A as CommunitySession, Aa as readForwarded, Ac as newDeviceSetSecret, Ao as rosterHas, Ar as pickHubs, As as handoffPakeFrame, B as knockRecords, Ba as validReactionNumber, Bc as firstDeviceSetSecret, Bi as dialDescriptors, Bn as findEndpoint, Bo as formatLocalTarget, Bs as readHandoffHello, C as sha256Paced, Cc as ENROLL_CAPABILITY, Cl as utf8Decode, Cn as isBitcoinAddress, Co as readCanonicalJson, Cr as doorHubs, Cs as handoffContextProof, D as openGroupTyping, Da as dhtEditId, Dc as deviceKeyZ32, Do as commitHash, Dr as mergeBeacon, Ds as handoffHelloFrame, E as groupTypingEpoch, Ea as RateWindow, Ec as deviceEchoNonce, Eo as MEMBER_KEY, Er as lobbyRecords, Es as handoffEphemeral, Et as normalizeAtprotoHandle, Fa as nextReactionNumber, Fc as TURN_SETTLE_MS, Fo as DHT_POLL_INTERVALS, Fr as shouldBeHub, Fs as newHandoffId, G as groupWakeFrame, Ga as BUTTON_ID, Gc as turnInstance, Gi as IdentityExchange, Gn as INVITE_TAKEN, Go as encodeControl, H as readKnocks, Ha as pairedReplyAuthor, Hc as readTurnPacket, Hn as parseCashuRequestPayload, Ho as webLocalFetch, Hr as TypingSender, Hs as readHandoffTurnFrame, I as decodeGroupEntryLink, Ia as queueReaction, Ic as classifyTurnRead, In as decodeBolt11, Ir as ChatFiles, Is as readHandoffAck, J as GROUP_LIMITS, Jc as turnStatedVerifier, Ji as identityRevocationValue, Jn as pairedMessageFits, Jr as nextPinNumber, Js as setAckFrame, K as groupWakes, Kc as turnKeys, Kn as LIVENESS_PING_MS, Kr as PIN_LIMITS, L as encodeGroupEntryLink, La as reactionEmoji, Lc as turnPutSummary, Li as CapsExchange, Ln as ENDPOINT, Lo as RELAY_POLL_INTERVALS, Lr as FILE_LIMITS, Ls as readHandoffCancel, M as communityHasFrame, Ma as GROUP_REACTION_FRAME, Mc as webCryptoSigner, Mo as edgeParams, Mr as readBeacon, Ms as handoffRetryAfter, N as decodeCommunityLink, Na as REACTION_LIMITS, No as DirectPathWatch, Nr as readBeaconHead, Ns as handoffStreamKey, O as sealGroupTyping, Oa as parseLinkPreview, Oc as deviceLinkPairing, Oo as parseGroupCommit, Or as mergeLobby, Os as handoffManifestFrames, P as encodeCommunityLink, Pa as ReactionWindow, Pc as TURN_RAISE_READ_TIMEOUT_MS, Pr as readLobby, Ps as handoffVersions, Q as frameBytes, Qc as currentRelays, Qi as revokesIdentity, Qn as GROUP_FILE_LIMITS, Qr as WAKE_CALL_INTERVAL_MS, Qt as didDhtDocument, R as entryParams, Ra as reactionIsNewer, Rc as TURN_LAST_SEQUENCE, Ri as DHT_TEXT_CAPABILITY, Rn as cashuRequestPayload, Ro as presenceSeenAt, Rr as transferEnded, Rs as readHandoffDone, S as readAppBundleAsync, Sa as parseImageMeta, Sc as DEVICES_CAPABILITY, Si as readManifest, Sl as toZ32, Sn as sparkInvoiceDetails, Sr as beaconRecords, Ss as handoffContext, T as GroupTypingBoard, Ta as EDIT_RATE_WINDOW_MS, Tc as deviceEchoFrame, Tn as isPubkyKey, Tr as lobbyKeys, Ts as handoffDigest, Tt as isAtprotoDid, Ua as readReply, Uc as signTurnPacket, Ui as IDENTITY_REVOCATION_LABEL, Un as parseFedimintRequestPayload, Uo as LIMITS, Us as readHandoffVerified, V as mergeKnocks, Va as wireReaction, Vc as nextTurnPosition, Vn as isFederationId, Vo as parseLocalTarget, Vs as readHandoffPake, W as GroupWakeLimiter, Wa as replySnippet, Wc as signTurnRelease, Wn as GhostLink, Wo as decodeControl, Wr as typingActivity, Ws as sealHandoffPiece, X as GROUP_READ_NOTE, Xa as STATUS_CARD_LIMITS, Xc as DEFAULT_RELAYS, Xi as newIdentityBinding, Xn as engineError, Xr as pinNumberHolds, Xs as signTombstone, Yc as turnVerifierMark, Yi as identityStatement, Yn as pairedMessageFrame, Yr as pinIsNewer, Ys as setUpdateFrame, Z as GroupSession, Zc as RelayTransport, Zi as receivedIdentityStatus, Zn as engineText, Zr as readPin, Zs as verifySetUpdate, _c as decodeInviteCode, _i as HOLD_LIMITS, _l as sanitizeAvatar, _n as validatePaymentTarget, _o as readAppRevocation, _r as mayBeHub, _s as handoffAttemptAllowed, a as planAppUpdate, ac as enrollDoneFrame, ai as checkPushEndpoint, al as PacketTooLargeError, an as EVM_TEST_CHAINS, ao as claimedTime, ar as readGroupFileMeta, as as HANDOFF_ACK, at as groupName, b as pacer, bc as inviteOwnership, bi as isHoldUrl, bl as randomBytes, bn as SPARK_PROVIDER, br as COMMUNITY_TOPOLOGY, bs as handoffBusyFrame, ca as DHT_MESSAGE_TTL, cc as enrollProofFrame, ci as chatAppId, cn as SEPOLIA_TEST_USDT, co as shownTime, cs as HANDOFF_HAVE, d as APP_BUNDLE_LIMITS, da as dhtFileId, dc as verifyEnrollProof, di as BUTTONS_CAPABILITY, dl as createIdentity, dn as USDT_PUBLIC_RPC, do as appFingerprint, ds as HANDOFF_PAKE, ea as PeerProofs, ei as deviceWakeRequest, en as encodeDidDhtDeactivated, f as APP_BUNDLE_MAGIC, fa as formatFileSize, fc as createDeviceInvite, fi as EDIT_CAPABILITY, fl as identityFromSeed, fn as WALLET_NETWORKS, fo as appRef, fs as HANDOFF_PIECE_BYTES, g as appViewOf, gc as createChatInvite, gi as HOLD_DATED_BACK_MS, gn as formatPaymentAmount, go as isAppRef, gr as MESH_HUBS, gs as filePartName, h as appDigest, hc as OwnInviteError, hi as HOLD_CAPABILITY, hl as verify, hn as assertWholeSats, ho as isAppKey, hr as readGroupSignal, hs as HANDOFF_VERIFIED, i as checkAppBeforeRun, ia as automaticTransport, ic as enrollDigits, ii as wakeRequest, il as withRequestOptions, in as ETHEREUM_USDT, io as arrivalKey, is as serviceIdFromName, it as mentionsMember, j as GROUP_READ_NOTE_COMMUNITY, ja as COMMUNITY_REACTION_FRAME, jc as seedSigner, jo as verifyCommitSignature, jr as rankHubs, js as handoffReleaseFrame, k as COMMUNITY_LIMITS, ka as forwardedAgain, kc as devicePingFrame, ko as rosterAdmin, kr as newerHead, ks as handoffOfferFrame, l as readAppStoreSteps, la as peekDhtMailbox, lc as readEnrollGrant, li as isAppVersion, lr as CarriedTransport, ls as HANDOFF_HELLO, ma as sanitizeMime, mc as readDeviceInvite, mi as UPGRADE_CAPABILITY, ml as publicKeyFromZ32, mn as assertTokenUnits, mo as isAppHash, mr as groupSignalFrame, ms as HANDOFF_TIMINGS, n as appStoreDecision, na as validExternalKey, nc as enrollCancelFrame, ni as parseWakeFrame, nl as budgetRetryMs, no as sameButtonText, ns as HTTP_SERVICE_PROTO, nt as carryMentions, o as APP_STORE_LIMITS, oc as enrollGrantFrame, oi as vapidKeysMatch, on as ONCHAIN_PROVIDER, oo as heardTime, os as HANDOFF_CANCEL, p as APP_ICON_PATH, pa as sanitizeFileName, pc as deviceInviteJoinerParams, pi as STATUS_CARD_CAPABILITY, pl as identityFromSeedB64, pn as arkAddressPrefix, ps as HANDOFF_REQUEST, q as parseGroupWakeFrame, qc as turnName, qi as emptyIdentityLedger, qn as PAIRED_FRAME_TOO_LARGE, qo as RTC_CONFIG, qr as mayPin, qs as readSetUpdate, r as appUpdateDecision, ra as TRANSPORTS, rc as enrollCancelReason, ri as relayRequest, rl as isDiscoveryBudgetError, rn as signDidDhtPacket, ro as statusCardText, rr as groupFileFallback, rs as LEGACY_SERVICES, rt as parseCommunityEdit, sc as enrollHelloFrame, sl as createRelayPayload, sn as PaymentPreflightError, so as receivedTimestamp, ss as HANDOFF_DONE, t as appRevocationFor, ta as emptyProofLedger, ti as newWakeToken, tl as traceLink, tn as encodeDidDhtPacket, to as checkStatusCard, ts as emptyLinkRecords, tt as GROUP_EDIT_TEXT_BYTES, ua as DHT_FILE_CAPABILITY, uc as readEnrollHello, ui as APPS_CAPABILITY, un as TEST_USDT_FAUCET_AMOUNT, uo as APP_STATEMENT_LIMITS, us as HANDOFF_OFFER, va as fileMessageText, vc as encodeInviteCode, vi as HoldKeys, vl as bytesEqual, vn as walletNetworkOf, vr as meshHubs, vs as handoffAttemptFailed, wa as EDIT_BUFFER_MS, wc as HANDOFF_CAPABILITY, wl as utf8Encode, wo as GROUP_MEMBER_CAP, wr as freshHubs, ws as handoffDataFrame, xa as parseVideoMeta, xi as newMailbox, xl as toBase64Url, xn as sparkAddressKind, xo as canonicalJson, xr as beaconKeys, xs as handoffCancelFrame, y as isAppUrl, ya as parseVoiceMeta, yi as HoldRefusedError, yl as fromBase64Url, yn as SPARK_NETWORKS, yr as pickMeshHubs, ys as handoffAttemptSucceeded, z as knockIdentity, za as readReaction, zc as TURN_MAX, zi as capsDescriptors, zn as fedimintRequestPayload, zo as GhostlyHttpError, zr as transferStalled, zs as readHandoffHave } from "./src-yMUQvdyL.js";
+import { i as SourceUnreachableError, n as PROVIDER_PLATFORMS, o as isNothingSpentError, r as SourceConfigError, t as NothingSpentError, u as redact } from "./types-C4_KafL_.js";
+import { t as bitcoindRpc } from "./bitcoindProvider-DGw3xBSa.js";
+import { t as nwc } from "./nwcProvider-0D7vdPDd.js";
 import { a as clearProfileStores, c as fileStore, d as profileOpenFailure, f as store, i as STORES$1, l as newestWalletTx, m as wrap, n as APP_STORAGE_SCOPE_INDEX, o as databaseName, p as transact, r as CARD_INDEX, s as deleteDatabase, t as APP_STORAGE_CHAT_INDEX, u as openDb } from "./idb-B5L8wuOm.js";
-import { a as sealSeed, i as newDeviceKey, o as unsealSeed, r as intentRepository } from "./networkReason-DxZWHw6v.js";
-import { $ as SourceConfigError, A as identityProviders, B as verifyIdentity, C as FileAppender, D as streamStored, E as storedSize, F as onAdaptersChanged, G as normalizePhrase, H as LightningCards, I as registeredLightningProviders, J as sourceKey, K as lightningPaying, L as registeredOnchainProviders, M as resolveAtprotoDid, N as setOwnDidSource, P as chosenResolver, Q as PROVIDER_PLATFORMS, R as reserveAdapterIds, S as WALLET_TYPES, T as removeStored, U as cardsKey, V as CASHU_CARD, W as isRecoveryPhrase, X as cashuMint, Y as CASHU_MINT_SOURCE, Z as NothingSpentError, _ as crossNetwork, _t as setAwayWallets, a as storedGroupFiles, at as breezDatabaseInUse, b as walletInstances, c as receivedPairedReply, ct as iceServerProblem, d as paymentAlias, dt as ModeGate, et as SourceUnreachableError, f as paymentWireId, ft as WrongNetworkError, g as createTiming, gt as requireTurn, h as createFailure, ht as refuseAway, i as groupOfFile, it as breezDatabase, j as assertPublicServer, l as replyRef, lt as iceServerSetting, m as assertConfirmedReal, mt as awayFrom, n as groupFileId, nt as networkMode, o as groupReply, ot as breezDatabasesFor, p as WALLET_NAMES, pt as networkLabel, q as ProviderSources, r as groupFileText, rt as redact, s as pairedWireReply, st as dropBreezDatabase, t as GroupFileDesk, tt as isNothingSpentError, u as replyTo, ut as ModeChanged, v as paymentNetwork, vt as setSingleWriterGate, w as readStored$1, y as paymentNetworksOf, z as boundedIdentityFetch } from "./groupFiles-BNTSDaoq.js";
-import { i as fedimintDatabase, n as createIrohWebEndpoint, o as loadFedimintSdk, r as irohRelayProblem, t as DEFAULT_IROH_RELAYS } from "./irohWeb--YyEA-hX.js";
+import { a as sealSeed, i as newDeviceKey, o as unsealSeed, r as intentRepository } from "./networkReason-D42iNuUB.js";
+import { $ as setSingleWriterGate, A as LightningCards, B as breezDatabaseInUse, C as FileAppender, D as streamStored, E as storedSize, F as ProviderSources, G as ModeChanged, H as dropBreezDatabase, I as sourceKey, J as networkLabel, K as ModeGate, L as CASHU_MINT_SOURCE, M as isRecoveryPhrase, N as normalizePhrase, P as lightningPaying, Q as setAwayWallets, R as cashuMint, S as WALLET_TYPES, T as removeStored, U as iceServerProblem, V as breezDatabasesFor, W as iceServerSetting, X as refuseAway, Y as awayFrom, Z as requireTurn, _ as crossNetwork, a as storedGroupFiles, b as walletInstances, c as receivedPairedReply, d as paymentAlias, f as paymentWireId, g as createTiming, h as createFailure, i as groupOfFile, j as cardsKey, k as CASHU_CARD, l as replyRef, m as assertConfirmedReal, n as groupFileId, o as groupReply, p as WALLET_NAMES, q as WrongNetworkError, r as groupFileText, s as pairedWireReply, t as GroupFileDesk, u as replyTo, v as paymentNetwork, w as readStored$1, y as paymentNetworksOf, z as breezDatabase } from "./groupFiles-DHTrTA4I.js";
+import { i as fedimintDatabase, n as createIrohWebEndpoint, o as loadFedimintSdk, r as irohRelayProblem, t as DEFAULT_IROH_RELAYS } from "./irohWeb-BJPk9bMn.js";
 import { c as isTestMint, d as paysItsOwnInvoices, l as isWorthlessMint, n as DEFAULT_MINTS, o as fakesLightning, r as TEST_MINT, t as BITCOIN_INVOICE_ON_TESTNET, u as mintNetwork } from "./mints-BrlY773j.js";
+import { _ as reserveAdapterIds, f as setOwnDidSource, g as registeredOnchainProviders, h as registeredLightningProviders, l as chosenResolver, n as resolveAtprotoDid, p as onAdaptersChanged, t as assertPublicServer, v as boundedIdentityFetch, y as verifyIdentity } from "./resolve-BnlEajYz.js";
 import { c as fileSpace, f as FILE_BYTES_STEP, o as fileBytes, r as blobDigest, s as fileBytesOf, u as removeFileBytes } from "./fileBytes-Di7VZtmU.js";
-import { n as MAX_BACKUP_BYTES, t as BACKUP_MEDIA_TYPE } from "./envelope-BvU0fLEt.js";
+import { n as MAX_BACKUP_BYTES, t as BACKUP_MEDIA_TYPE } from "./envelope-K27mzoyu.js";
 import { t as hyperdhtRelayProblem } from "./hyperdhtRelay-BT_wRxab.js";
 import { hkdf } from "@noble/hashes/hkdf.js";
 import { sha256 } from "@noble/hashes/sha2.js";
@@ -15,13 +18,10 @@ import { base64, base64url, base64urlnopad, bech32, hex } from "@scure/base";
 import { bytesToHex, concatBytes, hexToBytes, utf8ToBytes } from "@noble/hashes/utils.js";
 import { chacha20poly1305 } from "@noble/ciphers/chacha.js";
 import { secp256k1 } from "@noble/curves/secp256k1.js";
+import { verifyEvent } from "nostr-tools/pure";
 import { generateMnemonic, mnemonicToSeedSync, validateMnemonic } from "@scure/bip39";
 import { wordlist } from "@scure/bip39/wordlists/english.js";
 import { Amount, MeltChangeError, OutputData, Wallet, decodePaymentRequest, deserializeSwapPreview, getEncodedToken, getTokenMetadata, isMintOperationError, serializeSwapPreview } from "@cashu/cashu-ts";
-import { Address, OutScript, Transaction } from "@scure/btc-signer";
-import * as nip04 from "nostr-tools/nip04";
-import * as nip44 from "nostr-tools/nip44";
-import { finalizeEvent, getPublicKey, verifyEvent } from "nostr-tools/pure";
 import { decode, noteEncode, npubEncode } from "nostr-tools/nip19";
 /** Evidence older than this says nothing about the clock now. */
 var CLOCK_EVIDENCE_MS = 18e5;
@@ -183,9 +183,23 @@ async function migrateWalletNetworks(now = Date.now()) {
 	return report;
 }
 //#endregion
+//#region ../browser/src/engine/paymentAdapters/viewNews.ts
+/**
+* Whether a wallet's view reads otherwise after a poll: only then is the poll news to the engine, which makes the whole
+* wallet view again for it. Compared as written, not by reference: a poll builds its history and expiry anew each time.
+* A view that cannot be written out is news.
+*/
+function viewNews(before, after) {
+	try {
+		return JSON.stringify(before) !== JSON.stringify(after);
+	} catch {
+		return true;
+	}
+}
+//#endregion
 //#region ../browser/src/engine/paymentAdapters/usdtWallet.ts
 /** The Ethereum libraries, a large part of the app: loaded once a USDT wallet is made, opened or restored, not with the engine. */
-var loadUsdt = () => import("./usdt-C1Xao2xH.js");
+var loadUsdt = () => import("./usdt-DesFeDiG.js");
 /** Every new profile starts with this wallet: an address to receive on, nothing to set up. */
 var DEFAULT_USDT = {
 	network: "ethereum",
@@ -222,6 +236,7 @@ var UsdtWallet = class {
 		balance: "0",
 		gasBalance: "0"
 	};
+	/** `changed(false)`: a balance read that found nothing new; the receipts are checked, the wallet view stays. */
 	constructor(network, changed) {
 		this.network = network;
 		this.changed = changed;
@@ -408,6 +423,7 @@ var UsdtWallet = class {
 		clearTimeout(this.timer);
 		const adapter = this.adapter;
 		if (!adapter) return;
+		const before = this.view;
 		try {
 			const address = await this.gate.within(adapter.address()), balances = await this.gate.within(adapter.balances());
 			if (adapter !== this.adapter) return;
@@ -427,7 +443,7 @@ var UsdtWallet = class {
 				error: "RPC unavailable. Balance may be stale."
 			};
 		}
-		this.changed();
+		this.changed(viewNews(before, this.view));
 		if (this.adapter) this.timer = setTimeout(() => void this.refresh(), 8e3);
 	}
 	/** Testnet on Sepolia: 1,000 TEST-USDT from Aave's faucet, paid with this wallet's own test ETH. */
@@ -632,7 +648,7 @@ async function restoreArkDatabase(walletId, snapshot) {
 //#endregion
 //#region ../browser/src/engine/paymentAdapters/arkWallet.ts
 /** The Ark SDK, a large part of the app: loaded once an Ark wallet is made, opened or restored, not with the engine. */
-var loadArkade = () => import("./arkade-D4BVJFEQ.js");
+var loadArkade = () => import("./arkade-CuWlNnCz.js");
 /** How long a Testnet wallet about to make way for another waits for its server to say what it holds. */
 var RETIRE_READ_MS = 1e4;
 /** Every new profile starts with this wallet: nothing to set up before receiving. */
@@ -648,7 +664,7 @@ var checkProviders = (network, ...urls) => {
 		provider,
 		asset: "BTC",
 		unit: "sat",
-		address: "configuration",
+		address: `${arkAddressPrefix(network)}configuration`,
 		expiresAt: Date.now() + 6e4
 	});
 };
@@ -683,6 +699,7 @@ var ArkWallet = class {
 		locked: true,
 		balance: 0
 	};
+	/** `changed(false)`: a balance read that found nothing new; the receipts are checked, the wallet view stays. */
 	constructor(network, changed) {
 		this.network = network;
 		this.changed = changed;
@@ -991,6 +1008,7 @@ var ArkWallet = class {
 		});
 		if (this.adapter !== adapter) return;
 		const balancesRead = this.view.read || !failed.some((what) => what === "balance" || what === "incoming" || what === "recoverable");
+		const before = this.view;
 		this.view = {
 			configured: true,
 			locked: false,
@@ -1008,7 +1026,7 @@ var ArkWallet = class {
 			...expiresAt !== void 0 ? { expiresAt } : {},
 			error: failed.length ? `Could not read the ${failed.join(", ")} from the Ark provider. Last values may be stale.` : void 0
 		};
-		this.changed();
+		this.changed(viewNews(before, this.view));
 		if (this.adapter) this.timer = setTimeout(() => void this.refresh(), 1e4);
 	}
 	/** Swept outputs back into the balance (refused while expired ones wait for the sweep); the next refresh shows them. */
@@ -1076,10 +1094,10 @@ var NETWORK = {
 	signet: "Signet",
 	regtest: "Regtest"
 };
-var loading$3;
+var loading$4;
 /** Loads the WebAssembly once, on first use: profiles that never open a Bark wallet never fetch its 7.7 MB. */
 function loadBarkSdk() {
-	return loading$3 ??= (async () => {
+	return loading$4 ??= (async () => {
 		const [bark, wasm] = await Promise.all([import("@secondts/bark/web"), import("./bark_ffi_wasm_bg-EY2uc0Bx.js")]);
 		await bark.default({ module_or_path: wasm.default });
 		return {
@@ -1118,7 +1136,7 @@ function loadBarkSdk() {
 			}
 		};
 	})().catch((error) => {
-		loading$3 = void 0;
+		loading$4 = void 0;
 		throw error;
 	});
 }
@@ -1235,7 +1253,7 @@ var BarkAdapter = class BarkAdapter {
 			provider,
 			asset: "BTC",
 			unit: "sat",
-			address: "configuration",
+			address: `${barkAddressPrefix(config.network)}configuration`,
 			expiresAt: Date.now() + 6e4
 		});
 	}
@@ -1483,6 +1501,7 @@ var BarkWallet = class {
 		locked: true,
 		balance: 0
 	};
+	/** `changed(false)`: a balance read that found nothing new; the receipts are checked, the wallet view stays. */
 	constructor(network, changed, sdk = loadBarkSdk) {
 		this.network = network;
 		this.changed = changed;
@@ -1768,6 +1787,7 @@ var BarkWallet = class {
 		}
 		if (this.adapter !== adapter) return;
 		const balancesRead = this.view.read || balance !== void 0 && onchain !== void 0;
+		const before = this.view;
 		this.view = {
 			...this.idle(adapter.config),
 			locked: false,
@@ -1782,7 +1802,7 @@ var BarkWallet = class {
 			expiry,
 			error: failed.length ? `Could not read the ${failed.join(", ")} from the Bark server. Last values may be stale.` : void 0
 		};
-		this.changed();
+		this.changed(viewNews(before, this.view));
 		if (this.adapter) this.timer = setTimeout(() => void this.refresh(), 1e4);
 	}
 	/** On-chain coins into Ark: the board confirms on-chain, then they are spendable. */
@@ -2639,10 +2659,10 @@ var FedimintAdapter = class {
 };
 //#endregion
 //#region ../browser/src/engine/paymentAdapters/providers/breezSdk.ts
-var loading$2;
+var loading$3;
 /** Loads the WebAssembly once, on first use: profiles that never pick Breez never fetch its 12.8 MB. */
 function loadBreezSdk() {
-	return loading$2 ??= (async () => {
+	return loading$3 ??= (async () => {
 		const breez = await import("./web-DwgdhfcY.js");
 		await breez.default();
 		return { async connect({ network, mnemonic, apiKey, storage }) {
@@ -2658,11 +2678,11 @@ function loadBreezSdk() {
 			});
 		} };
 	})().catch((error) => {
-		loading$2 = void 0;
+		loading$3 = void 0;
 		throw error;
 	});
 }
-var hex$9 = (bytes) => Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+var hex$8 = (bytes) => Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
 var breezNetwork = (network) => network === "bitcoin" ? "mainnet" : "regtest";
 var DISCONNECT_MS = 1e4;
 /** One SDK instance per wallet storage: two over one database would each think the leaves are theirs. */
@@ -2674,7 +2694,7 @@ var open = /* @__PURE__ */ new Map();
 */
 async function openBreez(params, sdk = loadBreezSdk, storage = breezDatabase) {
 	const name = await storage(params.network, params.mnemonic);
-	const key = `${name}|${params.apiKey ? hex$9(sha256(new TextEncoder().encode(params.apiKey))).slice(0, 8) : ""}`;
+	const key = `${name}|${params.apiKey ? hex$8(sha256(new TextEncoder().encode(params.apiKey))).slice(0, 8) : ""}`;
 	let entry = open.get(key);
 	if (!entry) {
 		const wallet = sdk().then((module) => module.connect({
@@ -3008,6 +3028,7 @@ var SparkWallet = class {
 		locked: true,
 		balance: 0
 	};
+	/** `changed(false)`: a balance read that found nothing new; the receipts are checked, the wallet view stays. */
 	constructor(network, changed, sdk = loadBreezSdk) {
 		this.network = network;
 		this.changed = changed;
@@ -3223,6 +3244,7 @@ var SparkWallet = class {
 		const history = await read("history", () => adapter.history(), this.view.history);
 		if (this.adapter !== adapter) return;
 		const balancesRead = this.view.read || !failed.includes("balance");
+		const before = this.view;
 		this.view = {
 			...this.idle(this.saved),
 			locked: false,
@@ -3232,7 +3254,7 @@ var SparkWallet = class {
 			history,
 			error: failed.length ? `Could not read the ${failed.join(", ")} from Spark. Last values may be stale.` : void 0
 		};
-		this.changed();
+		this.changed(viewNews(before, this.view));
 		if (this.adapter) this.timer = setTimeout(() => void this.refresh(), sparkTiming.pollMs);
 	}
 	/** Where a contact pays one request: a Spark invoice made for it (its amount, its memo, a quarter of an hour). */
@@ -3344,6 +3366,17 @@ var PaymentCoordinator = class {
 	adapters;
 	changed;
 	active = /* @__PURE__ */ new Map();
+	/**
+	* The reviews still pending (an Approve may send them), by id: what `dropStale` looks at, so that its minute's sweep
+	* does not read every review ever made. `null` until the store was read once. An id leaves when the sweep finds its
+	* review no longer pending, or gone.
+	*/
+	pending = null;
+	/** Reviews read from the store past the coordinator (`refreshWallet`'s list): the pending ones are swept too. */
+	notePending(reviews) {
+		const pending = this.pending ??= /* @__PURE__ */ new Set();
+		for (const review of reviews) if (review.state === "pending") pending.add(review.id);
+	}
 	constructor(repository, adapters, changed = () => {}) {
 		this.repository = repository;
 		this.adapters = adapters;
@@ -3374,6 +3407,7 @@ var PaymentCoordinator = class {
 			review,
 			prepared
 		});
+		this.pending?.add(review.id);
 		this.changed(review);
 		return review;
 	}
@@ -3444,12 +3478,20 @@ var PaymentCoordinator = class {
 	*/
 	async dropStale(now = Date.now(), unpayable = () => false) {
 		const dropped = [];
-		for (const { review } of await this.repository.list()) {
-			if (review.state !== "pending" || review.expiresAt > now && !unpayable(review)) continue;
+		if (!this.pending) this.notePending((await this.repository.list()).map(({ review }) => review));
+		const pending = this.pending;
+		for (const id of [...pending]) {
+			const review = (await this.repository.get(id))?.review;
+			if (!review || review.state !== "pending") {
+				pending.delete(id);
+				continue;
+			}
+			if (review.expiresAt > now && !unpayable(review)) continue;
 			try {
 				const cancelled = await this.cancel(review.id);
 				if (cancelled.state === "cancelled") dropped.push(cancelled);
 			} catch {}
+			pending.delete(id);
 		}
 		return dropped;
 	}
@@ -3781,7 +3823,7 @@ var PAGE = 100;
 var PAGES = 10;
 /** Without any record of a payment, it is called failed only this long after its invoice expired. */
 var LOST_AFTER_MS = 36e5;
-var hex$8 = (bytes) => Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+var hex$7 = (bytes) => Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
 var sats$4 = (value) => {
 	const n = Number(value);
 	if (!Number.isSafeInteger(n) || n < 0) throw new Error("Breez returned an invalid amount");
@@ -3796,7 +3838,7 @@ function idempotencyKey(paymentHash, attempt) {
 	const b = sha256(new TextEncoder().encode(`ghostly-breez-pay:${paymentHash}:${attempt}`)).slice(0, 16);
 	b[6] = b[6] & 15 | 64;
 	b[8] = b[8] & 63 | 128;
-	const h = hex$8(b);
+	const h = hex$7(b);
 	return `${h.slice(0, 8)}-${h.slice(8, 12)}-${h.slice(12, 16)}-${h.slice(16, 20)}-${h.slice(20)}`;
 }
 /** The payment hash a Breez payment is about, when it is one (Lightning, or a Spark HTLC). */
@@ -4039,7 +4081,7 @@ var appLoader = async () => {
 		wasm: await fetch(url.default)
 	};
 };
-var loading$1;
+var loading$2;
 /**
 * Loads the WebAssembly once, on first use: profiles that never set up a BDK wallet never fetch its 2 MB.
 * The package is wasm-pack's `bundler` build, whose entry imports the `.wasm` as an ES module (which
@@ -4047,7 +4089,7 @@ var loading$1;
 * that entry would.
 */
 function loadBdk(loader = appLoader) {
-	return loading$1 ??= (async () => {
+	return loading$2 ??= (async () => {
 		const { glue, wasm } = await loader();
 		const imports = { [WASM_IMPORTS]: glue };
 		let instance;
@@ -4061,7 +4103,7 @@ function loadBdk(loader = appLoader) {
 		instance.exports.__wbindgen_start?.();
 		return glue;
 	})().catch((error) => {
-		loading$1 = void 0;
+		loading$2 = void 0;
 		throw error;
 	});
 }
@@ -4127,7 +4169,7 @@ var idbBdkStore = {
 		});
 	}
 };
-var hex$7 = (bytes) => Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+var hex$6 = (bytes) => Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
 var unhex = (text) => {
 	if (!/^([0-9a-f]{2})+$/.test(text)) throw new Error("Not hex");
 	return Uint8Array.from(text.match(/../g), (h) => parseInt(h, 16));
@@ -4341,7 +4383,7 @@ var BdkOnchain = class BdkOnchain {
 			throw new SourceConfigError(`bad descriptor: the recovery phrase does not make a ${SCRIPT[config.script].label} wallet (${message$3(error)})`, error);
 		}
 		const fingerprint = /\[([0-9a-f]{8})\//.exec(publicDescriptor)?.[1] ?? "";
-		const key = `bdkWallet-${config.network}-${hex$7(sha256(new TextEncoder().encode(publicDescriptor))).slice(0, 32)}`;
+		const key = `bdkWallet-${config.network}-${hex$6(sha256(new TextEncoder().encode(publicDescriptor))).slice(0, 32)}`;
 		const walletStore = deps.store ?? idbBdkStore;
 		let stored = await walletStore.load(key);
 		if (stored) try {
@@ -4439,7 +4481,7 @@ var BdkOnchain = class BdkOnchain {
 			amount,
 			fee,
 			feeRate,
-			signed: hex$7(tx.to_bytes())
+			signed: hex$6(tx.to_bytes())
 		};
 	}
 	/** What was signed is what was reviewed: one output of exactly the amount to the address, the rest ours. */
@@ -4692,435 +4734,6 @@ var bdk = {
 	}
 };
 //#endregion
-//#region ../browser/src/engine/paymentAdapters/providers/bitcoind.ts
-var BitcoindRpcError = class extends Error {
-	kind;
-	code;
-	constructor(kind, message, code) {
-		super(message);
-		this.kind = kind;
-		this.code = code;
-		this.name = "BitcoindRpcError";
-	}
-	/** The node never ran the call: it was not sent, could not connect, or the credentials were refused. */
-	get neverRan() {
-		return this.kind === "refused" || this.kind === "connect" || this.kind === "auth";
-	}
-};
-/** The Tauri command, through the Desktop host. */
-function tauriTransport$1(invoke) {
-	if (!invoke) throw new Error("Bitcoin Core needs the Ghostly desktop app: a browser cannot reach its RPC");
-	return (call) => invoke("bitcoind_rpc", { ...call });
-}
-/** Bitcoin Core's JSON-RPC error codes this module acts on (src/rpc/protocol.h). */
-var RPC = {
-	INVALID_ADDRESS_OR_KEY: -5,
-	VERIFY_ERROR: -25,
-	VERIFY_REJECTED: -26,
-	VERIFY_ALREADY_IN_CHAIN: -27,
-	DESERIALIZATION_ERROR: -22
-};
-var CHAINS = {
-	main: "bitcoin",
-	test: "testnet",
-	testnet4: "testnet",
-	signet: "signet",
-	regtest: "regtest"
-};
-/** A fee rate for the test networks when the node has too few blocks to estimate one (regtest always). */
-var TEST_FALLBACK_FEE_RATE = 2;
-var TXID = /^[0-9a-f]{64}$/;
-var WALLET_NAME = /^[A-Za-z0-9._-]{0,64}$/;
-/** Address encodings, for btc-signer to read the outputs back as addresses. */
-var TESTNET_ENCODING = {
-	bech32: "tb",
-	pubKeyHash: 111,
-	scriptHash: 196,
-	wif: 239
-};
-var BTC_NETWORKS = {
-	bitcoin: {
-		bech32: "bc",
-		pubKeyHash: 0,
-		scriptHash: 5,
-		wif: 128
-	},
-	testnet: TESTNET_ENCODING,
-	signet: TESTNET_ENCODING,
-	mutinynet: TESTNET_ENCODING,
-	regtest: {
-		...TESTNET_ENCODING,
-		bech32: "bcrt"
-	}
-};
-var TX_OPTS = {
-	allowUnknownOutputs: true,
-	allowUnknownInputs: true,
-	disableScriptCheck: true,
-	allowLegacyWitnessUtxo: true
-};
-/** Whole sats as the exact decimal string bitcoind reads as BTC (never a float). */
-var satsToBtc = (sats) => {
-	if (!Number.isSafeInteger(sats) || sats < 0) throw new Error("Amounts are whole sats");
-	const digits = sats.toString().padStart(9, "0");
-	return `${digits.slice(0, -8)}.${digits.slice(-8)}`;
-};
-/** A BTC amount from bitcoind (a JSON number with at most 8 decimals) as whole sats. */
-var btcToSats = (btc) => {
-	if (typeof btc !== "number" || !Number.isFinite(btc)) throw new Error("The node returned an amount that is not a number");
-	return Math.round(btc * 1e8);
-};
-var object = (value, what) => {
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`The node returned no ${what}`);
-	return value;
-};
-var text$2 = (value, what) => {
-	if (typeof value !== "string" || !value) throw new Error(`The node returned no ${what}`);
-	return value;
-};
-var BitcoindOnchain = class BitcoindOnchain {
-	config;
-	transport;
-	closed = false;
-	network;
-	constructor(config, transport) {
-		this.config = config;
-		this.transport = transport;
-	}
-	/** Connects and checks the wallet is there and the node is on a network of `mode`. */
-	static async connect(config, mode, transport, signal) {
-		const provider = new BitcoindOnchain(config, transport);
-		signal?.addEventListener("abort", () => void provider.close(), { once: true });
-		const { network } = await provider.info();
-		if (networkMode(network) !== mode) throw new Error(mode === "mainnet" ? `This node is on ${network}, not Bitcoin mainnet` : "This node is on Bitcoin mainnet: set it up as a Mainnet wallet instead");
-		if (object(await provider.call("getwalletinfo"), "wallet information").private_keys_enabled === false) throw new Error("This wallet has no private keys: it cannot sign a payment");
-		return provider;
-	}
-	async call(method, ...params) {
-		if (this.closed) throw new BitcoindRpcError("refused", "This Bitcoin Core source is closed");
-		try {
-			return await this.transport({
-				...this.config,
-				method,
-				params
-			});
-		} catch (error) {
-			if (error instanceof BitcoindRpcError) throw error;
-			const failure = error;
-			if (failure && typeof failure === "object" && typeof failure.kind === "string" && typeof failure.message === "string") throw new BitcoindRpcError(failure.kind, failure.message, failure.code);
-			throw new BitcoindRpcError("transport", error instanceof Error ? error.message : String(error));
-		}
-	}
-	async info() {
-		const chain = object(await this.call("getblockchaininfo"), "chain information").chain;
-		const network = typeof chain === "string" ? CHAINS[chain] : void 0;
-		if (!network) throw new Error(`Ghostly does not know the chain "${String(chain).slice(0, 20)}"`);
-		this.network = network;
-		return {
-			network,
-			alias: this.config.wallet || "Bitcoin Core"
-		};
-	}
-	async receiveAddress() {
-		return text$2(await this.call("getnewaddress", "Ghostly"), "address");
-	}
-	async balance() {
-		const mine = object(object(await this.call("getbalances"), "balances").mine, "balances");
-		return {
-			confirmed: btcToSats(mine.trusted),
-			unconfirmed: btcToSats(mine.untrusted_pending)
-		};
-	}
-	async feeRate(request) {
-		if (request.feeRate !== void 0) {
-			if (!Number.isFinite(request.feeRate) || request.feeRate < 1 || request.feeRate > 1e4) throw new Error("The fee rate must be between 1 and 10,000 sat/vB");
-			return request.feeRate;
-		}
-		const estimate = object(await this.call("estimatesmartfee", 6), "fee estimate");
-		if (typeof estimate.feerate === "number" && estimate.feerate > 0) return Math.max(1, Math.ceil(estimate.feerate * 1e5 * 1e3) / 1e3);
-		if ((this.network ?? (await this.info()).network) === "bitcoin") throw new Error("Your node cannot estimate a fee yet. Nothing was sent.");
-		return TEST_FALLBACK_FEE_RATE;
-	}
-	async prepareSend(request) {
-		if (!Number.isSafeInteger(request.amount) || request.amount <= 0) throw new Error("Amounts are whole sats");
-		const network = this.network ?? (await this.info()).network;
-		const feeRate = await this.feeRate(request);
-		const funded = object(await this.call("walletcreatefundedpsbt", [], [{ [request.address]: satsToBtc(request.amount) }], 0, {
-			fee_rate: feeRate,
-			lockUnspents: true,
-			replaceable: true
-		}), "funded transaction");
-		const inputs = this.outpoints(Transaction.fromPSBT(base64.decode(text$2(funded.psbt, "funded transaction")), TX_OPTS));
-		try {
-			const fee = btcToSats(funded.fee);
-			if (fee > request.feeCap) throw new Error(`The fee (${fee} sats) is above your limit of ${request.feeCap}`);
-			const signed = object(await this.call("walletprocesspsbt", funded.psbt, true, "ALL"), "signed transaction");
-			if (signed.complete !== true) throw new Error("The wallet could not sign this payment (is it locked, or watch-only?)");
-			const final = object(await this.call("finalizepsbt", signed.psbt, false), "finalized transaction");
-			if (final.complete !== true) throw new Error("The wallet could not finalize this payment");
-			return this.check(Transaction.fromPSBT(base64.decode(text$2(final.psbt, "finalized transaction")), TX_OPTS), request, inputs, feeRate, network);
-		} catch (error) {
-			await this.unlock(inputs).catch(() => {});
-			throw error;
-		}
-	}
-	/** The transaction the node signed is exactly the one asked for, before anyone reviews it. */
-	check(tx, request, funded, feeRate, network) {
-		const same = (a, b) => a.length === b.length && a.every((o, i) => o.txid === b[i].txid && o.vout === b[i].vout);
-		if (!same(this.outpoints(tx), funded)) throw new Error("The node signed other coins than it funded the payment with");
-		const script = (() => {
-			try {
-				return hex.encode(OutScript.encode(Address(BTC_NETWORKS[network]).decode(request.address)));
-			} catch {
-				return;
-			}
-		})();
-		let paid = 0;
-		for (let i = 0; i < tx.outputsLength; i++) {
-			const output = tx.getOutput(i);
-			if (script !== void 0 && output.script && hex.encode(output.script) === script) paid += Number(output.amount ?? 0n);
-		}
-		if (paid !== request.amount) throw new Error("The node built a transaction that does not pay the address and amount asked for");
-		const fee = Number(tx.fee);
-		if (!Number.isSafeInteger(fee) || fee < 0 || fee > request.feeCap) throw new Error(`The fee (${fee} sats) is above your limit of ${request.feeCap}`);
-		const txid = tx.id;
-		if (!TXID.test(txid)) throw new Error("The node returned a transaction without a valid id");
-		return {
-			txid,
-			address: request.address,
-			amount: request.amount,
-			fee,
-			feeRate,
-			signed: hex.encode(tx.extract())
-		};
-	}
-	outpoints(tx) {
-		const out = [];
-		for (let i = 0; i < tx.inputsLength; i++) {
-			const input = tx.getInput(i);
-			if (!input.txid || input.index === void 0) throw new Error("The node returned a transaction with an unreadable input");
-			out.push({
-				txid: hex.encode(input.txid),
-				vout: input.index
-			});
-		}
-		return out;
-	}
-	async unlock(outpoints) {
-		if (outpoints.length) await this.call("lockunspent", true, outpoints);
-	}
-	signedTx(prepared) {
-		if (!/^[0-9a-f]+$/.test(prepared.signed)) throw new Error("This prepared payment has no signed transaction");
-		const tx = Transaction.fromRaw(hex.decode(prepared.signed), TX_OPTS);
-		if (tx.id !== prepared.txid) throw new Error("This prepared payment's transaction is not the one reviewed");
-		return tx;
-	}
-	async broadcast(prepared) {
-		const tx = this.signedTx(prepared);
-		let txid;
-		try {
-			txid = await this.call("sendrawtransaction", prepared.signed);
-		} catch (error) {
-			if (!(error instanceof BitcoindRpcError)) throw error;
-			if (error.kind === "rpc" && error.code === RPC.VERIFY_ALREADY_IN_CHAIN) return prepared.txid;
-			const rejected = error.kind === "rpc" && [
-				RPC.VERIFY_ERROR,
-				RPC.VERIFY_REJECTED,
-				RPC.DESERIALIZATION_ERROR
-			].includes(error.code ?? 0);
-			if (!error.neverRan && !rejected) throw error;
-			const seen = rejected ? await this.known(prepared.txid) : await this.known(prepared.txid).catch(() => void 0);
-			if (seen) {
-				if (["mempool", "confirmed"].includes((await this.status(prepared)).state)) return prepared.txid;
-				throw error;
-			}
-			if (seen === false) await this.unlock(this.outpoints(tx)).catch(() => {});
-			throw new NothingSpentError(`Your node did not send it: ${error.message}`);
-		}
-		if (txid !== prepared.txid) throw new Error("The node broadcast a different transaction than the one reviewed");
-		return prepared.txid;
-	}
-	/** Whether the wallet knows this transaction (it does once its node accepted it, even if it was dropped since). */
-	async known(txid) {
-		try {
-			await this.call("gettransaction", txid);
-			return true;
-		} catch (error) {
-			if (error instanceof BitcoindRpcError && error.kind === "rpc" && error.code === RPC.INVALID_ADDRESS_OR_KEY) return false;
-			throw error;
-		}
-	}
-	async status(prepared) {
-		if (!TXID.test(prepared.txid)) throw new Error("Not a transaction id");
-		let tx;
-		try {
-			tx = object(await this.call("gettransaction", prepared.txid), "transaction");
-		} catch (error) {
-			if (error instanceof BitcoindRpcError && error.kind === "rpc" && error.code === RPC.INVALID_ADDRESS_OR_KEY) return {
-				state: "missing",
-				confirmations: 0
-			};
-			throw error;
-		}
-		const confirmations = typeof tx.confirmations === "number" ? tx.confirmations : 0;
-		if (confirmations > 0) return {
-			state: "confirmed",
-			confirmations
-		};
-		if (confirmations < 0) return {
-			state: "conflicted",
-			confirmations: 0
-		};
-		if (Array.isArray(tx.mempoolconflicts) && tx.mempoolconflicts.length > 0) return {
-			state: "conflicted",
-			confirmations: 0
-		};
-		try {
-			await this.call("getmempoolentry", prepared.txid);
-			return {
-				state: "mempool",
-				confirmations: 0
-			};
-		} catch (error) {
-			if (error instanceof BitcoindRpcError && error.kind === "rpc" && error.code === RPC.INVALID_ADDRESS_OR_KEY) return {
-				state: "missing",
-				confirmations: 0
-			};
-			throw error;
-		}
-	}
-	async release(prepared) {
-		await this.unlock(this.outpoints(this.signedTx(prepared)));
-	}
-	async history(limit) {
-		const count = Math.max(1, Math.min(200, Math.floor(limit) * 3));
-		const entries = await this.call("listtransactions", "*", count, 0, true);
-		if (!Array.isArray(entries)) throw new Error("The node returned no transaction list");
-		const byTxid = /* @__PURE__ */ new Map();
-		for (const raw of entries) {
-			if (!raw || typeof raw.txid !== "string" || !TXID.test(raw.txid) || raw.category === "orphan") continue;
-			const tx = byTxid.get(raw.txid) ?? {
-				txid: raw.txid,
-				amount: 0,
-				confirmations: typeof raw.confirmations === "number" ? Math.max(0, raw.confirmations) : 0
-			};
-			tx.amount += btcToSats(raw.amount);
-			if (raw.category === "send" && typeof raw.fee === "number" && tx.fee === void 0) tx.fee = Math.abs(btcToSats(raw.fee));
-			if (typeof raw.time === "number") tx.timestamp = raw.time * 1e3;
-			byTxid.delete(raw.txid);
-			byTxid.set(raw.txid, tx);
-		}
-		return [...byTxid.values()].reverse().slice(0, Math.max(0, limit));
-	}
-	/** The wallet's receives on this address, newest first: only `receive` entries paying exactly it count. */
-	async received(address) {
-		const entries = await this.call("listtransactions", "*", 200, 0, true);
-		if (!Array.isArray(entries)) throw new Error("The node returned no transaction list");
-		const byTxid = /* @__PURE__ */ new Map();
-		for (const raw of entries) {
-			if (!raw || raw.category !== "receive" || raw.address !== address || typeof raw.txid !== "string" || !TXID.test(raw.txid)) continue;
-			const tx = byTxid.get(raw.txid) ?? {
-				txid: raw.txid,
-				amount: 0,
-				confirmations: typeof raw.confirmations === "number" ? Math.max(0, raw.confirmations) : 0
-			};
-			tx.amount += btcToSats(raw.amount);
-			byTxid.delete(raw.txid);
-			byTxid.set(raw.txid, tx);
-		}
-		return [...byTxid.values()].reverse();
-	}
-	async close() {
-		this.closed = true;
-	}
-};
-/** `user:password` in the password field (the .cookie file's contents) when no user is given. */
-function credentials({ config, secrets }) {
-	const password = secrets.password ?? "";
-	const user = config.user?.trim() ?? "";
-	if (!user && password.includes(":")) {
-		const at = password.indexOf(":");
-		return {
-			user: password.slice(0, at),
-			password: password.slice(at + 1)
-		};
-	}
-	return {
-		user,
-		password
-	};
-}
-var bitcoindRpc = {
-	id: "bitcoind",
-	label: "Bitcoin Core",
-	kind: "onchain",
-	description: "A wallet on your own Bitcoin Core node, over its RPC. Your node holds the keys and signs. Needs the desktop app.",
-	networks: [
-		"bitcoin",
-		"testnet",
-		"signet",
-		"regtest"
-	],
-	platforms: ["desktop"],
-	experimental: true,
-	fields: [
-		{
-			name: "url",
-			label: "RPC address",
-			kind: "url",
-			placeholder: "http://127.0.0.1:8332",
-			defaults: {
-				mainnet: "http://127.0.0.1:8332",
-				testnet: "http://127.0.0.1:38332"
-			},
-			help: "Your node's rpcbind and rpcport: 8332 mainnet, 38332 signet, 48332 testnet4, 18443 regtest."
-		},
-		{
-			name: "wallet",
-			label: "Wallet name",
-			kind: "text",
-			optional: true,
-			placeholder: "ghostly",
-			help: "A wallet loaded in the node (bitcoin-cli listwallets). Empty: its default wallet."
-		},
-		{
-			name: "user",
-			label: "RPC user",
-			kind: "text",
-			optional: true,
-			help: "Leave empty to paste the .cookie file below."
-		},
-		{
-			name: "password",
-			label: "RPC password or cookie",
-			kind: "secret",
-			help: "rpcpassword, or the contents of the node's .cookie file (it changes when bitcoind restarts)."
-		}
-	],
-	validate(settings) {
-		const url = (() => {
-			try {
-				return new URL(settings.config.url?.trim() ?? "");
-			} catch {
-				return;
-			}
-		})();
-		if (!url || !["http:", "https:"].includes(url.protocol)) throw new Error("Enter the node's RPC address, like http://127.0.0.1:8332");
-		if (url.username || url.password) throw new Error("Put the RPC user and password in their own fields, not in the address");
-		if (url.search || url.hash) throw new Error("The RPC address cannot have a query or fragment");
-		if (!WALLET_NAME.test(settings.config.wallet?.trim() ?? "") || [".", ".."].includes(settings.config.wallet?.trim() ?? "")) throw new Error("A wallet name has only letters, digits, '-', '_' and '.'");
-		const { user, password } = credentials(settings);
-		if (!user || !password) throw new Error("Enter the RPC user and password, or paste the .cookie file");
-	},
-	async create(settings, host) {
-		return BitcoindOnchain.connect({
-			url: settings.config.url.trim(),
-			wallet: settings.config.wallet?.trim() ?? "",
-			...credentials(settings)
-		}, host.mode, tauriTransport$1(host.invoke), host.signal);
-	}
-};
-//#endregion
 //#region ../browser/src/engine/paymentAdapters/providers/fedimint.ts
 var FEDIMINT_SOURCE = "fedimint";
 /** How long an invoice made here stays payable. */
@@ -5692,15 +5305,15 @@ var CLN_RUNE_COMMAND = `lightning-cli createrune restrictions='[[${CLN_METHODS.m
 var PAY_TIMEOUT_S$1 = 60;
 var CALL_TIMEOUT_MS = 3e4;
 var PAY_CALL_TIMEOUT_MS = 9e4;
-var INVOICE_EXPIRY_S$2 = 3600;
-var NETWORKS$2 = {
+var INVOICE_EXPIRY_S$1 = 3600;
+var NETWORKS$1 = {
 	bitcoin: "bitcoin",
 	testnet: "testnet",
 	testnet4: "testnet",
 	signet: "signet",
 	regtest: "regtest"
 };
-var HEX64$4 = /^[0-9a-f]{64}$/;
+var HEX64$3 = /^[0-9a-f]{64}$/;
 var NODE_ID = /^0[23][0-9a-f]{64}$/;
 var msatToSat = (msat) => {
 	const value = typeof msat === "number" ? msat : typeof msat === "string" ? Number(msat.replace(/msat$/, "")) : NaN;
@@ -5778,7 +5391,7 @@ var CoreLightning = class CoreLightning {
 	}
 	async info() {
 		const info = await this.rpc.call("getinfo", {}, { timeoutMs: CALL_TIMEOUT_MS });
-		const network = NETWORKS$2[info?.network];
+		const network = NETWORKS$1[info?.network];
 		if (!network) throw new Error(`The node is on a network Ghostly does not know (${String(info?.network).slice(0, 20)})`);
 		if (this.nodeId && info.id !== this.nodeId) throw new Error("The node answered with another id");
 		return {
@@ -5804,7 +5417,7 @@ var CoreLightning = class CoreLightning {
 			amount_msat: amount * 1e3,
 			label,
 			description: (memo || "Ghostly").slice(0, 200),
-			expiry: INVOICE_EXPIRY_S$2
+			expiry: INVOICE_EXPIRY_S$1
 		}, { timeoutMs: CALL_TIMEOUT_MS });
 		const decoded = typeof created?.bolt11 === "string" && created.bolt11.length < 8e3 ? decodeBolt11(created.bolt11) : null;
 		if (!decoded || decoded.paymentHash !== created.payment_hash || decoded.amountSat !== amount) throw new Error("The node returned an invoice that does not match the request");
@@ -5904,7 +5517,7 @@ var CoreLightning = class CoreLightning {
 	}
 	/** What the node's own record of this payment hash says: `none` when it never tried. */
 	async lookup(paymentHash) {
-		if (!HEX64$4.test(paymentHash)) throw new Error("Invalid payment hash");
+		if (!HEX64$3.test(paymentHash)) throw new Error("Invalid payment hash");
 		const { pays } = await this.rpc.call("listpays", { payment_hash: paymentHash }, { timeoutMs: CALL_TIMEOUT_MS });
 		const mine = (pays ?? []).filter((p) => p.payment_hash === paymentHash);
 		const complete = mine.find((p) => p.status === "complete");
@@ -5977,672 +5590,6 @@ var coreLightning = {
 		return CoreLightning.connect(settingsOf(settings), host.signal);
 	}
 };
-//#endregion
-//#region ../browser/src/engine/paymentAdapters/providers/nwc.ts
-/**
-* Lightning through a wallet reached over Nostr Wallet Connect (NIP-47): Alby Hub, a node's NWC service, a
-* hosted wallet. The person pastes the wallet's `nostr+walletconnect://` URI; requests are signed with the
-* key it carries, encrypted to the wallet (NIP-44, or NIP-04 when its info event offers nothing else) and
-* sent through its relay; the answers come back the same way. That wallet holds the sats, applies its own
-* fee limit, and is custodial or not depending on what it is.
-*
-* Money safety (PROVIDERS.md): a request that never reached the relay, or an error code the wallet answers
-* before it tries to pay, is `NothingSpentError`. A `pay_invoice` whose answer does not come back in time,
-* or any other error, is an unknown outcome, and `paymentStatus` asks `lookup_invoice` until it ends.
-*/
-var KIND = {
-	info: 13194,
-	request: 23194,
-	response: 23195
-};
-/** A relay message, an encrypted answer, an info event, an invoice: nothing bigger is read. */
-var MAX_MESSAGE = 262144;
-var MAX_CONTENT = 65536;
-var MAX_INFO = 4096;
-var MAX_INVOICE = 7089;
-var MAX_URI = 2048;
-var MAX_RELAYS = 5;
-var CONNECT_MS = 1e4;
-var ACK_MS = 1e4;
-var REQUEST_MS$1 = 2e4;
-/** A payment may take a while to route; an answer after this is an unknown outcome, looked up later. */
-var PAY_MS = 9e4;
-/** The wallet must not start a payment it receives after this (NIP-47 `expiration`). */
-var PAY_EXPIRY_S = 60;
-/** A payment the wallet never heard of is failed once its invoice can no longer be paid, with room for clocks. */
-var EXPIRED_MARGIN_MS = 6e5;
-var INVOICE_EXPIRY_S$1 = 3600;
-/** Error codes a wallet answers before it tries to pay: nothing can have left it. (`BAD_REQUEST`: Alby Hub, an invoice it cannot read.) */
-var REFUSED_BEFORE_PAYING = /* @__PURE__ */ new Set([
-	"RATE_LIMITED",
-	"NOT_IMPLEMENTED",
-	"INSUFFICIENT_BALANCE",
-	"QUOTA_EXCEEDED",
-	"RESTRICTED",
-	"UNAUTHORIZED",
-	"UNSUPPORTED_ENCRYPTION",
-	"BAD_REQUEST"
-]);
-var NETWORKS$1 = {
-	mainnet: "bitcoin",
-	bitcoin: "bitcoin",
-	testnet: "testnet",
-	testnet3: "testnet",
-	testnet4: "testnet",
-	signet: "signet",
-	mutinynet: "mutinynet",
-	regtest: "regtest"
-};
-var HEX64$3 = /^[0-9a-f]{64}$/;
-var hex$6 = (bytes) => Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
-var bytes$2 = (text) => Uint8Array.from(text.match(/../g), (b) => parseInt(b, 16));
-var now$1 = () => Math.floor(Date.now() / 1e3);
-var isMsat = (value) => Number.isSafeInteger(value) && value >= 0;
-/** Only secure relays, except on this machine (a local test relay). */
-function checkRelay(address) {
-	let relay;
-	try {
-		relay = new URL(address);
-	} catch {
-		throw new Error("The connection URI has a relay that is not a URL");
-	}
-	if (relay.username || relay.password || relay.hash) throw new Error("The connection URI has a relay with credentials in it");
-	const loopback = [
-		"127.0.0.1",
-		"localhost",
-		"[::1]"
-	].includes(relay.hostname);
-	if (!(relay.protocol === "wss:" || relay.protocol === "ws:" && loopback)) throw new Error("Use a wallet whose relay is secure (wss://)");
-	return relay.href;
-}
-/** Reads a `nostr+walletconnect://` URI. Its errors never repeat it: it holds a secret. */
-function parseNwcUri(input) {
-	const text = (input ?? "").trim();
-	if (text.length > MAX_URI) throw new Error("That connection URI is too long");
-	const match = /^(?:nostr\+walletconnect|nostrwalletconnect):(?:\/\/)?([0-9a-fA-F]{64})\/?\?([^#]*)$/.exec(text);
-	if (!match) throw new Error("That is not a Nostr Wallet Connect URI (nostr+walletconnect://…)");
-	const params = new URLSearchParams(match[2]);
-	const secret = (params.get("secret") ?? "").toLowerCase();
-	if (!HEX64$3.test(secret) || /^0+$/.test(secret)) throw new Error("The connection URI has no valid secret");
-	const relays = [...new Set(params.getAll("relay").map(checkRelay))];
-	if (!relays.length) throw new Error("The connection URI names no relay");
-	if (relays.length > MAX_RELAYS) throw new Error("The connection URI names too many relays");
-	return {
-		walletPubkey: match[1].toLowerCase(),
-		relays,
-		secret: bytes$2(secret)
-	};
-}
-/** The request never reached the relay (not connected, refused by it): the wallet cannot have seen it. */
-var NotDelivered = class extends Error {
-	constructor(message) {
-		super(message);
-		this.name = "NotDelivered";
-	}
-};
-/** An error the wallet answered, with its NIP-47 code. */
-var NwcError = class extends Error {
-	code;
-	constructor(code, message) {
-		super(message);
-		this.code = code;
-		this.name = "NwcError";
-	}
-};
-/** No answer in time. The request may or may not have been acted on. */
-var NoAnswer = class extends Error {
-	constructor(method) {
-		super(`The wallet did not answer ${method} in time`);
-		this.name = "NoAnswer";
-	}
-};
-/**
-* A minimal NIP-01 client for one relay: it knows exactly whether an event was written to an open socket
-* and whether the relay acknowledged it, which is what tells "nothing sent" from "unknown" apart.
-* It reconnects when asked to send again, and subscriptions follow it.
-*/
-var RelayConnection = class {
-	url;
-	WebSocketImpl;
-	socket;
-	opening;
-	subs = /* @__PURE__ */ new Map();
-	acks = /* @__PURE__ */ new Map();
-	closed = false;
-	constructor(url, WebSocketImpl = globalThis.WebSocket) {
-		this.url = url;
-		this.WebSocketImpl = WebSocketImpl;
-	}
-	open() {
-		if (this.closed) return Promise.reject(/* @__PURE__ */ new Error("The wallet connection is closed"));
-		if (this.socket?.readyState === 1) return Promise.resolve(this.socket);
-		if (!this.opening) {
-			const opening = this.connectSocket();
-			this.opening = opening;
-			opening.catch(() => {}).finally(() => {
-				if (this.opening === opening) this.opening = void 0;
-			});
-		}
-		return this.opening;
-	}
-	connectSocket() {
-		return new Promise((resolve, reject) => {
-			let settled = false;
-			const socket = new this.WebSocketImpl(this.url);
-			const done = (error) => {
-				if (settled) return;
-				settled = true;
-				clearTimeout(timer);
-				if (error) {
-					try {
-						socket.close();
-					} catch {}
-					reject(error);
-					return;
-				}
-				if (this.closed) {
-					socket.close();
-					reject(/* @__PURE__ */ new Error("The wallet connection is closed"));
-					return;
-				}
-				this.socket = socket;
-				for (const [id, sub] of this.subs) this.write([
-					"REQ",
-					id,
-					sub.filter
-				]);
-				resolve(socket);
-			};
-			const timer = setTimeout(() => done(/* @__PURE__ */ new Error("The wallet's relay did not answer")), CONNECT_MS);
-			socket.onopen = () => done();
-			socket.onerror = () => done(/* @__PURE__ */ new Error("Could not reach the wallet's relay"));
-			socket.onclose = () => {
-				done(/* @__PURE__ */ new Error("The wallet's relay closed the connection"));
-				if (this.socket !== socket) return;
-				this.socket = void 0;
-				for (const [id, ack] of this.acks) {
-					this.acks.delete(id);
-					ack.fail(/* @__PURE__ */ new Error("The relay connection dropped before it confirmed the request"));
-				}
-			};
-			socket.onmessage = (message) => {
-				if (this.socket === socket) this.receive(message.data);
-			};
-		});
-	}
-	subscribe(id, filter, sub) {
-		this.subs.set(id, {
-			...sub,
-			filter
-		});
-		this.write([
-			"REQ",
-			id,
-			filter
-		]);
-	}
-	unsubscribe(id) {
-		if (this.subs.delete(id)) this.write(["CLOSE", id]);
-	}
-	/**
-	* Events matching `filter` the relay has stored, until it says that is all (or `ms` pass). With
-	* `waitForOne`, a relay that has none yet is listened to until one arrives live, within `ms`.
-	*/
-	async fetch(filter, { ms = CONNECT_MS, waitForOne = false } = {}) {
-		await this.open();
-		const id = `q${hex$6(crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(6)))}`, events = [];
-		try {
-			await new Promise((resolve) => {
-				const timer = setTimeout(resolve, ms);
-				let stored = false;
-				const finish = () => {
-					clearTimeout(timer);
-					resolve();
-				};
-				this.subscribe(id, filter, {
-					event: (e) => {
-						if (events.length < 20) events.push(e);
-						if (stored) finish();
-					},
-					eose: () => {
-						stored = true;
-						if (events.length || !waitForOne) finish();
-					}
-				});
-			});
-		} finally {
-			this.unsubscribe(id);
-		}
-		return events;
-	}
-	/**
-	* Resolves once the relay accepted the event. `NotDelivered` when it certainly did not reach it (no open
-	* socket, refused); any other rejection means it may have.
-	*/
-	async publish(event) {
-		let socket;
-		try {
-			socket = await this.open();
-		} catch (error) {
-			throw new NotDelivered(error instanceof Error ? error.message : "Could not reach the wallet's relay");
-		}
-		return new Promise((resolve, reject) => {
-			const timer = setTimeout(() => {
-				this.acks.delete(event.id);
-				reject(/* @__PURE__ */ new Error("The relay did not confirm the request"));
-			}, ACK_MS);
-			this.acks.set(event.id, {
-				ok: () => {
-					clearTimeout(timer);
-					resolve();
-				},
-				fail: (error) => {
-					clearTimeout(timer);
-					reject(error);
-				}
-			});
-			if (socket.readyState !== 1 || socket !== this.socket) {
-				this.acks.delete(event.id);
-				clearTimeout(timer);
-				reject(new NotDelivered("The relay connection closed"));
-				return;
-			}
-			socket.send(JSON.stringify(["EVENT", event]));
-		});
-	}
-	close() {
-		this.closed = true;
-		for (const [id, ack] of this.acks) {
-			this.acks.delete(id);
-			ack.fail(/* @__PURE__ */ new Error("The wallet connection is closed"));
-		}
-		this.subs.clear();
-		try {
-			this.socket?.close();
-		} catch {}
-		this.socket = void 0;
-	}
-	write(message) {
-		if (this.socket?.readyState === 1) this.socket.send(JSON.stringify(message));
-	}
-	receive(data) {
-		if (typeof data !== "string" || data.length > MAX_MESSAGE) return;
-		let message;
-		try {
-			message = JSON.parse(data);
-		} catch {
-			return;
-		}
-		if (!Array.isArray(message) || typeof message[1] !== "string") return;
-		const [type, id] = message;
-		if (type === "EVENT") this.subs.get(id)?.event(message[2]);
-		else if (type === "EOSE") this.subs.get(id)?.eose?.();
-		else if (type === "OK") {
-			const ack = this.acks.get(id);
-			if (!ack) return;
-			this.acks.delete(id);
-			const reason = typeof message[3] === "string" ? message[3].slice(0, 120) : "";
-			if (message[2] === true || reason.startsWith("duplicate:")) ack.ok();
-			else ack.fail(new NotDelivered(`The relay refused the request${reason ? ` (${reason})` : ""}`));
-		}
-	}
-};
-var NwcLightning = class NwcLightning {
-	connection;
-	relay;
-	encryption;
-	options;
-	/** From the info event, then narrowed to what this connection may do (`get_info`). */
-	capabilities;
-	clientPubkey;
-	subscription = `nwc${hex$6(crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(6)))}`;
-	pending = /* @__PURE__ */ new Map();
-	conversationKey;
-	network = "bitcoin";
-	alias;
-	closed = false;
-	constructor(connection, relay, encryption, methods, options) {
-		this.connection = connection;
-		this.relay = relay;
-		this.encryption = encryption;
-		this.options = options;
-		this.clientPubkey = getPublicKey(connection.secret);
-		if (encryption === "nip44_v2") this.conversationKey = nip44.v2.utils.getConversationKey(connection.secret, connection.walletPubkey);
-		this.capabilities = this.capabilitiesOf(methods);
-	}
-	/**
-	* Reaches the wallet through the first relay that answers, reads its info event (the methods and the
-	* encryption it offers), listens for its answers, and asks `get_info` for its network.
-	*/
-	static async connect(uri, options = {}) {
-		const connection = parseNwcUri(uri);
-		options.signal?.throwIfAborted();
-		let relay, lastError;
-		for (const url of connection.relays) {
-			const candidate = new RelayConnection(url, options.WebSocket);
-			try {
-				await candidate.open();
-				relay = candidate;
-				break;
-			} catch (error) {
-				candidate.close();
-				lastError = error;
-			}
-		}
-		if (!relay) throw lastError instanceof Error ? lastError : /* @__PURE__ */ new Error("Could not reach the wallet's relay");
-		let wallet;
-		try {
-			const info = NwcLightning.newestInfo(await relay.fetch({
-				kinds: [KIND.info],
-				authors: [connection.walletPubkey],
-				limit: 5
-			}, {
-				waitForOne: true,
-				ms: options.infoMs
-			}), connection.walletPubkey);
-			if (!info) throw new Error(`The wallet has not published its NWC info on ${new URL(relay.url).host}: check the URI, or that the wallet is running`);
-			const offered = (info.tags.find((t) => t[0] === "encryption")?.slice(1).join(" ") ?? "").split(/\s+/).filter(Boolean);
-			const encryption = offered.includes("nip44_v2") ? "nip44_v2" : !offered.length || offered.includes("nip04") ? "nip04" : void 0;
-			if (!encryption) throw new Error("The wallet offers no encryption Ghostly speaks (NIP-44 or NIP-04)");
-			const methods = new Set(info.content.split(/\s+/).filter(Boolean));
-			wallet = new NwcLightning(connection, relay, encryption, methods, options);
-			wallet.listen();
-			if (options.signal) {
-				const opened = wallet;
-				if (options.signal.aborted) throw options.signal.reason;
-				options.signal.addEventListener("abort", () => void opened.close(), { once: true });
-			}
-			await wallet.readInfo(methods);
-			return wallet;
-		} catch (error) {
-			if (wallet) await wallet.close();
-			else relay.close();
-			throw error;
-		}
-	}
-	static newestInfo(events, walletPubkey) {
-		return events.filter((e) => e && e.kind === KIND.info && e.pubkey === walletPubkey && typeof e.content === "string" && e.content.length <= MAX_INFO && Array.isArray(e.tags) && verifyEvent(e)).sort((a, b) => b.created_at - a.created_at)[0];
-	}
-	capabilitiesOf(methods) {
-		const lookup = methods.has("lookup_invoice");
-		return {
-			receive: methods.has("make_invoice"),
-			send: methods.has("pay_invoice") && lookup,
-			balance: methods.has("get_balance"),
-			lookup
-		};
-	}
-	/**
-	* `get_info` says the network and the methods this connection may use (the info event lists the
-	* service's). Without it the wallet is taken to be on Bitcoin: a test wallet is then refused in the
-	* Testnet mode and its invoices in the Mainnet one, while a real-money wallet never passes for a test one.
-	*/
-	async readInfo(offered) {
-		if (!offered.has("get_info")) return;
-		let info;
-		try {
-			info = await this.request("get_info", {});
-		} catch (error) {
-			if (error instanceof NwcError && [
-				"RESTRICTED",
-				"UNAUTHORIZED",
-				"NOT_IMPLEMENTED"
-			].includes(error.code)) return;
-			throw error;
-		}
-		if (info.network !== void 0) {
-			const network = typeof info.network === "string" ? NETWORKS$1[info.network.toLowerCase()] : void 0;
-			if (!network) throw new Error("The wallet is on a network Ghostly does not know");
-			this.network = network;
-		}
-		if (typeof info.alias === "string" && info.alias.trim()) this.alias = info.alias.trim().slice(0, 40);
-		if (Array.isArray(info.methods) && info.methods.every((m) => typeof m === "string")) this.capabilities = this.capabilitiesOf(new Set(info.methods));
-	}
-	listen() {
-		this.relay.subscribe(this.subscription, {
-			kinds: [KIND.response],
-			authors: [this.connection.walletPubkey],
-			"#p": [this.clientPubkey],
-			since: now$1() - 60
-		}, { event: (e) => this.answer(e) });
-	}
-	encrypt(text) {
-		return this.conversationKey ? nip44.v2.encrypt(text, this.conversationKey) : nip04.encrypt(this.connection.secret, this.connection.walletPubkey, text);
-	}
-	decrypt(content) {
-		if (this.conversationKey && !content.includes("?iv=")) return nip44.v2.decrypt(content, this.conversationKey);
-		return nip04.decrypt(this.connection.secret, this.connection.walletPubkey, content);
-	}
-	/**
-	* Sends one request and waits for its answer. `NotDelivered` when it never reached the relay; `NwcError`
-	* for an error the wallet answered; `NoAnswer` (or a relay error) when the outcome is unknown.
-	*/
-	async request(method, params, { ms = this.options.requestMs ?? REQUEST_MS$1, expiresIn } = {}) {
-		if (this.closed) throw new NotDelivered("The wallet connection is closed");
-		const tags = [["p", this.connection.walletPubkey]];
-		if (this.conversationKey) tags.push(["encryption", "nip44_v2"]);
-		if (expiresIn) tags.push(["expiration", String(now$1() + expiresIn)]);
-		const event = finalizeEvent({
-			kind: KIND.request,
-			created_at: now$1(),
-			tags,
-			content: this.encrypt(JSON.stringify({
-				method,
-				params
-			}))
-		}, this.connection.secret);
-		const answer = new Promise((resolve, reject) => {
-			const timer = setTimeout(() => {
-				this.pending.delete(event.id);
-				reject(new NoAnswer(method));
-			}, ms);
-			this.pending.set(event.id, {
-				method,
-				resolve,
-				reject,
-				timer
-			});
-		});
-		const delivered = this.relay.publish(event).then(() => void 0, (error) => {
-			const waiting = this.pending.get(event.id);
-			if (!(error instanceof NotDelivered) || !waiting) return void 0;
-			clearTimeout(waiting.timer);
-			this.pending.delete(event.id);
-			return error;
-		});
-		return Promise.race([answer, delivered.then((error) => error ? Promise.reject(error) : answer)]);
-	}
-	/** Reads an answer: from the wallet, signed, about a request of ours, of the method asked. Anything else is dropped. */
-	answer(raw) {
-		const event = raw;
-		if (!event || typeof event !== "object" || event.kind !== KIND.response || event.pubkey !== this.connection.walletPubkey) return;
-		if (typeof event.content !== "string" || event.content.length > MAX_CONTENT || !Array.isArray(event.tags)) return;
-		const ref = event.tags.find((t) => Array.isArray(t) && t[0] === "e")?.[1];
-		const pending = typeof ref === "string" ? this.pending.get(ref) : void 0;
-		if (!pending || !event.tags.some((t) => Array.isArray(t) && t[0] === "p" && t[1] === this.clientPubkey)) return;
-		if (!verifyEvent(event)) return;
-		let body;
-		try {
-			body = JSON.parse(this.decrypt(event.content));
-		} catch {
-			return;
-		}
-		if (!body || typeof body !== "object" || body.result_type !== pending.method) return;
-		clearTimeout(pending.timer);
-		this.pending.delete(ref);
-		if (body.error) {
-			const code = typeof body.error.code === "string" ? body.error.code.slice(0, 40) : "OTHER";
-			const message = typeof body.error.message === "string" && body.error.message.trim() ? body.error.message.trim().slice(0, 200) : code;
-			pending.reject(new NwcError(code, message));
-		} else if (body.result && typeof body.result === "object" && !Array.isArray(body.result)) pending.resolve(body.result);
-		else pending.reject(new NwcError("OTHER", "The wallet sent an empty answer"));
-	}
-	async lookup(paymentHash) {
-		const tx = await this.request("lookup_invoice", { payment_hash: paymentHash });
-		if (tx.payment_hash !== void 0 && String(tx.payment_hash).toLowerCase() !== paymentHash) throw new Error("The wallet answered about another invoice");
-		return tx;
-	}
-	async info() {
-		let balance;
-		if (this.capabilities.balance) {
-			const result = await this.request("get_balance", {});
-			if (!isMsat(result.balance)) throw new Error("The wallet returned an invalid balance");
-			balance = Math.floor(result.balance / 1e3);
-		}
-		return {
-			network: this.network,
-			alias: `${this.alias ?? "NWC wallet"} via ${new URL(this.relay.url).host}`,
-			balance
-		};
-	}
-	async createInvoice(amount, memo) {
-		if (!Number.isSafeInteger(amount) || amount <= 0 || !Number.isSafeInteger(amount * 1e3)) throw new Error("Invalid amount");
-		const result = await this.request("make_invoice", {
-			amount: amount * 1e3,
-			...memo ? { description: memo.slice(0, 200) } : {},
-			expiry: INVOICE_EXPIRY_S$1
-		});
-		const text = typeof result.invoice === "string" && result.invoice.length <= MAX_INVOICE ? result.invoice : "";
-		const decoded = decodeBolt11(text);
-		if (!decoded?.paymentHash || decoded.amountMsat !== BigInt(amount) * 1000n) throw new Error("The wallet returned an invoice that does not match the request");
-		if (result.payment_hash !== void 0 && String(result.payment_hash).toLowerCase() !== decoded.paymentHash) throw new Error("The wallet returned an invoice that does not match its payment hash");
-		return {
-			invoice: decoded.invoice,
-			paymentHash: decoded.paymentHash,
-			amount,
-			expiresAt: decoded.expiresAt * 1e3
-		};
-	}
-	async invoiceStatus(invoice) {
-		let tx;
-		try {
-			tx = await this.lookup(invoice.paymentHash);
-		} catch (error) {
-			if (error instanceof NwcError && error.code === "NOT_FOUND" && invoice.expiresAt < Date.now()) return { state: "expired" };
-			throw error;
-		}
-		const expired = invoice.expiresAt < Date.now();
-		if (tx.type === "outgoing") return { state: expired ? "expired" : "open" };
-		const state = tx.state ?? (tx.settled_at ? "settled" : "pending");
-		if (state === "settled") return {
-			state: "paid",
-			amount: isMsat(tx.amount) ? Math.floor(tx.amount / 1e3) : invoice.amount
-		};
-		if (state === "expired" || state === "failed") return { state: "expired" };
-		return { state: expired ? "expired" : "open" };
-	}
-	/**
-	* Pays through the wallet. NIP-47 carries no fee limit: the wallet applies its own, and the fee it
-	* reports is passed on as it is.
-	*/
-	async payInvoice(invoice, _maxFee) {
-		const decoded = decodeBolt11(invoice);
-		if (!decoded?.paymentHash || decoded.amountSat === null) throw new NothingSpentError("That invoice cannot be paid through NWC");
-		if (!this.capabilities.send) throw new NothingSpentError("This wallet connection may not pay and look up invoices");
-		let result;
-		try {
-			result = await this.request("pay_invoice", { invoice: decoded.invoice }, {
-				ms: this.options.payMs ?? PAY_MS,
-				expiresIn: PAY_EXPIRY_S
-			});
-		} catch (error) {
-			if (error instanceof NotDelivered) throw new NothingSpentError(`The payment did not reach the wallet: ${error.message}`);
-			if (error instanceof NwcError && REFUSED_BEFORE_PAYING.has(error.code)) throw new NothingSpentError(`The wallet refused the payment: ${error.message}`);
-			if (error instanceof NwcError) return this.confirmFailure(decoded.invoice, decoded.paymentHash, error);
-			throw error;
-		}
-		const preimage = typeof result.preimage === "string" ? result.preimage.toLowerCase() : "";
-		if (!HEX64$3.test(preimage) || hex$6(sha256(bytes$2(preimage))) !== decoded.paymentHash) throw new Error("The wallet said it paid, without a proof that matches the invoice");
-		return {
-			state: "paid",
-			preimage,
-			fee: isMsat(result.fees_paid) ? Math.ceil(result.fees_paid / 1e3) : void 0
-		};
-	}
-	/**
-	* An error after the wallet may have tried (`PAYMENT_FAILED` "may be due to a timeout", `INTERNAL`,
-	* `OTHER`…): its own record decides. Only a payment it records as failed is `NothingSpentError`; one it
-	* records as paid is paid; anything else is pending, or unknown when it cannot be asked.
-	*/
-	async confirmFailure(invoice, paymentHash, failure) {
-		let status;
-		try {
-			status = await this.paymentStatus({
-				invoice,
-				paymentHash
-			});
-		} catch {
-			throw new Error(`The wallet said the payment failed (${failure.message}), and cannot confirm it yet`);
-		}
-		if (status.state === "failed") throw new NothingSpentError(`The payment failed: ${failure.message}`);
-		return status.state === "paid" ? {
-			state: "paid",
-			fee: status.fee,
-			preimage: status.preimage
-		} : { state: "pending" };
-	}
-	async paymentStatus(payment) {
-		let tx;
-		try {
-			tx = await this.lookup(payment.paymentHash);
-		} catch (error) {
-			if (!(error instanceof NwcError && error.code === "NOT_FOUND")) throw error;
-			return { state: (decodeBolt11(payment.invoice)?.expiresAt ?? Infinity) * 1e3 + EXPIRED_MARGIN_MS < Date.now() ? "failed" : "pending" };
-		}
-		if (tx.type === "incoming") return { state: "pending" };
-		const preimage = typeof tx.preimage === "string" && HEX64$3.test(tx.preimage.toLowerCase()) ? tx.preimage.toLowerCase() : void 0;
-		const proven = !!preimage && hex$6(sha256(bytes$2(preimage))) === payment.paymentHash;
-		const state = tx.state ?? (tx.settled_at || proven ? "settled" : "pending");
-		const fee = isMsat(tx.fees_paid) ? Math.ceil(tx.fees_paid / 1e3) : void 0;
-		if (state === "settled") {
-			if (preimage && !proven) throw new Error("The wallet's proof of payment does not match the invoice");
-			return {
-				state: "paid",
-				fee,
-				preimage
-			};
-		}
-		if (state === "failed" || state === "expired") return { state: "failed" };
-		return { state: "pending" };
-	}
-	async close() {
-		if (this.closed) return;
-		this.closed = true;
-		for (const [id, pending] of this.pending) {
-			clearTimeout(pending.timer);
-			this.pending.delete(id);
-			pending.reject(/* @__PURE__ */ new Error("The wallet connection is closed"));
-		}
-		this.relay.close();
-	}
-};
-var nwc = {
-	id: "nwc",
-	label: "Nostr Wallet Connect",
-	kind: "lightning",
-	description: "A wallet you connect with its NWC URI (Alby Hub, a node's NWC service, a hosted wallet). That wallet holds the sats and sets its own fee limit: custodial or not depends on the wallet.",
-	networks: [
-		"bitcoin",
-		"testnet",
-		"signet",
-		"mutinynet",
-		"regtest"
-	],
-	platforms: PROVIDER_PLATFORMS,
-	fields: [{
-		name: "uri",
-		label: "Connection URI",
-		kind: "secret",
-		placeholder: "nostr+walletconnect://…",
-		help: "From your wallet's app connections. Allow making, paying and looking up invoices, and reading the balance."
-	}],
-	validate({ secrets }) {
-		parseNwcUri(secrets.uri ?? "");
-	},
-	async create({ secrets }, host) {
-		return NwcLightning.connect(secrets.uri, { signal: host.signal });
-	}
-};
 /** What the recommended macaroon grants: `lncli bakemacaroon info:read invoices:read invoices:write offchain:read offchain:write`. */
 var LND_SCOPE = [
 	"info:read",
@@ -7757,6 +6704,28 @@ function defaultRegistry() {
 	};
 }
 //#endregion
+//#region ../browser/src/proofs/load.ts
+/**
+* The identity proof providers, loaded on first need and not with the app: they and their libraries (OpenPGP, the
+* Bitcoin signer, the DID, AT Protocol and OpenID Connect checks) are a large part of the code, and the first screen
+* draws none of it. The engine loads them with the profile's proofs; the UI once it draws something about identities.
+*/
+var registry;
+var loading$1;
+var listeners = /* @__PURE__ */ new Set();
+function loadIdentityProviders() {
+	return loading$1 ??= import("./registry-CLolR0kM.js").then((m) => {
+		registry = m;
+		for (const listener of listeners) listener();
+		return m;
+	}, (error) => {
+		loading$1 = void 0;
+		throw error;
+	});
+}
+/** The providers (built in, from plugins, the test ones when asked for), once loaded; none before. */
+var loadedIdentityProviders = () => registry?.identityProviders() ?? [];
+//#endregion
 //#region ../browser/src/engine/identities.ts
 var KEY$2 = "identityProofs";
 var REVOCATIONS = "identityRevocations";
@@ -7797,14 +6766,17 @@ var IdentityProofs = class {
 	/** Chats whose current connection already got the hello: "ready" is reported more than once per connection. */
 	greeted = /* @__PURE__ */ new Set();
 	fetch;
-	constructor(host, providers = identityProviders) {
+	constructor(host, providers = loadedIdentityProviders) {
 		this.host = host;
 		this.providers = providers;
 		this.fetch = boundedIdentityFetch({ online: host.online });
 	}
+	/** The profile's proofs, and the providers that check and show them: loaded here, not with the app. */
 	async load() {
+		const providers = loadIdentityProviders();
 		const settings = await store(STORES$1.settings, "readonly");
 		[this.proofs, this.revocations] = await Promise.all([wrap(settings.get(KEY$2)).then((v) => v ?? []), wrap(settings.get(REVOCATIONS)).then((v) => v ?? [])]);
+		await providers;
 	}
 	/** Background work: republish revocations, look up the contacts' proofs for revocations. */
 	start() {
@@ -10923,7 +9895,8 @@ async function copyForForward(sourceId, target) {
 	const source = await fileStore.get(sourceId);
 	if (!source?.metadata) throw new Error("The file is not on this device any more");
 	const size = storedSize(source);
-	if (source.direction === "in" && source.wire3 && source.wire3.state !== "done" || await bytesHere(source) !== size) throw new Error("The file has not arrived yet");
+	const checked = source.wire3 ? source.wire3.state === "done" : !source.group || source.transfer?.state === "done";
+	if (source.direction === "in" && !checked || await bytesHere(source) !== size) throw new Error("The file has not arrived yet");
 	const { file, linkId, wireId, timestamp } = target;
 	const metadata = {
 		name: file.name,
@@ -11400,6 +10373,10 @@ var Apps = class {
 	/** What each `ref\0scope` holds, read once from its counter row and kept in step by the writes here. */
 	usage = /* @__PURE__ */ new Map();
 	queues = /* @__PURE__ */ new Map();
+	/** The keys read of each `ref\0scope` running, and the one every call made while it runs shares after it. */
+	keyReads = /* @__PURE__ */ new Map();
+	/** Uninstalls begun per reference, for this engine's life: a storage write that waited its turn across one is refused. */
+	uninstalls = /* @__PURE__ */ new Map();
 	timer = null;
 	/** Drops what `staged` holds past `STAGED.ms`, set while it holds anything: a closed install screen sends no call. */
 	sweep = null;
@@ -12687,6 +11664,8 @@ var Apps = class {
 			STORES$1.appStorage,
 			...builtIn ? [STORES$1.settings] : []
 		], "readwrite");
+		this.uninstalls.set(ref, (this.uninstalls.get(ref) ?? 0) + 1);
+		this.held.delete(ref);
 		tx.objectStore(STORES$1.apps).delete(ref);
 		tx.objectStore(STORES$1.appStorage).delete(rowsOf(ref));
 		if (builtIn) markBuiltIns(tx.objectStore(STORES$1.settings), (marks) => {
@@ -12765,6 +11744,7 @@ var Apps = class {
 	* it, so the app can make room.
 	*/
 	async storageSet({ ref, scope, key, value, digest }) {
+		const uninstalls = this.uninstalls.get(ref);
 		const app = await this.runningOrFail(ref, digest);
 		const where = this.scopeOf(scope), name = this.keyOf(key);
 		let text;
@@ -12795,6 +11775,10 @@ var Apps = class {
 				this.usage.delete(`${app.ref}\0${where}`);
 				fail("bad-scope", "Not a chat of this profile");
 			}
+			if (this.uninstalls.get(app.ref) !== uninstalls) {
+				this.usage.delete(`${app.ref}\0${where}`);
+				fail("not-installed", "This app is not installed");
+			}
 			writing.put({
 				ref: app.ref,
 				scope: where,
@@ -12834,7 +11818,28 @@ var Apps = class {
 	}
 	async storageKeys({ ref, scope, digest }) {
 		const app = await this.runningOrFail(ref, digest);
-		return (await wrap((await store(STORES$1.appStorage, "readonly")).getAllKeys(keysOf(app.ref, this.scopeOf(scope))))).map((k) => k[2]);
+		const where = this.scopeOf(scope);
+		return this.keysOnce(`${app.ref}\0${where}`, async () => {
+			return (await wrap((await store(STORES$1.appStorage, "readonly")).getAllKeys(keysOf(app.ref, where)))).map((k) => k[2]);
+		});
+	}
+	/**
+	* One read of a scope's keys at a time. Every call made while one runs shares the single read that starts after it, so
+	* it still sees each write done before it was made: 50 calls a second on a full scope held the profile's database,
+	* a chat message's write waited 17 s behind them.
+	*/
+	keysOnce(id, read) {
+		const waiting = this.keyReads.get(id);
+		if (waiting) return waiting.next ??= waiting.running.then(() => this.keysStart(id, read), () => this.keysStart(id, read));
+		return this.keysStart(id, read);
+	}
+	keysStart(id, read) {
+		const slot = { running: read() };
+		this.keyReads.set(id, slot);
+		slot.running.catch(() => {}).then(() => {
+			if (this.keyReads.get(id) === slot && !slot.next) this.keyReads.delete(id);
+		});
+		return slot.running;
 	}
 	/** An app's storage in every scope, as export files (WISP 1200 § Where installed apps live), offered before an uninstall. */
 	async exportData({ ref }) {
@@ -23151,22 +22156,30 @@ var Communities = class {
 	/**
 	* Leaves: the request goes to the hubs, which keep it and commit it (any member can), and the
 	* group goes from this device at once. An admin hands the role to a member first. Something must
-	* be connected to carry the request.
+	* be connected to carry the request. Answers the member the role went to, when it went to one.
 	*/
 	async leave(groupId) {
 		const live = this.live.get(groupId);
-		if (!live) return this.forget(groupId);
+		if (!live) {
+			await this.forget(groupId);
+			return;
+		}
 		const s = live.session;
-		if (s.status !== "active" || s.others.length === 0) return this.forget(groupId);
+		if (s.status !== "active" || s.others.length === 0) {
+			await this.forget(groupId);
+			return;
+		}
 		const edges = [...this.host.edges(groupId).entries()].filter(([, id]) => this.host.linkReady(id, 2));
 		if (!edges.length) throw new Error("Nobody in the group is connected right now to take your leave. Try again in a moment.");
+		let next;
 		if (s.isAdmin) {
 			const connected = new Set(edges.map(([key]) => key));
-			const next = s.others.find((key) => connected.has(key)) ?? s.others[0];
+			next = s.others.find((key) => connected.has(key)) ?? s.others[0];
 			await s.transferAdmin(next);
 		}
 		await s.leave();
 		await this.forget(groupId);
+		return next;
 	}
 	/**
 	* Delete from this device: left first, as Leave does. With nothing connected to carry the request, a member's leave
@@ -24304,7 +23317,7 @@ var Communities = class {
 		const live = this.live.get(groupId);
 		if (!live || live.session.wasRemoved(peerKey)) return;
 		if (live.hub && !this.peerIsHub(live, peerKey) && rosterHas(live.session.roster, peerKey)) live.members.set(peerKey, this.now());
-		this.sendTo(linkId, live.session.syncFrame());
+		this.sendTo(linkId, live.session.syncFrame(peerKey));
 		this.host.emit();
 	}
 	edgeNick(groupId, peerKey, nick) {
@@ -25503,6 +24516,11 @@ var ACCEPT_AGAINS = 5;
 var REWELCOME_MS = ACCEPT_AGAIN_MS / 2;
 /** Invitee side: the invitations one contact chat may have waiting here at a time. More are answered as declined. */
 var MAX_INVITATIONS_PER_CHAT = 4;
+/** Invitee side, removed and invited again: the chat that let me into the group I kept, if it is its admin's. */
+var keptAdminChat = (kept) => {
+	const admin = kept?.state && rosterAdmin(kept.state.chain[kept.state.chain.length - 1].m);
+	return admin ? kept.contacts?.[admin] : void 0;
+};
 /** What an invitation says of its group, kept as a claim within what a group can be: an epoch from 0, a roster of 1 to the most a group holds. */
 function invitationClaims(frame) {
 	const e = Number.isSafeInteger(frame.e) ? frame.e : 0, n = Number.isSafeInteger(frame.n) ? frame.n : 1;
@@ -26046,7 +25064,7 @@ var Groups = class {
 		const previous = group.previous;
 		if (!previous) return this.forget(group.id, false);
 		if (owed) previous.declined = owed;
-		else delete previous.declined;
+		else if (previous.declined?.linkId === group.invitation?.linkId) delete previous.declined;
 		this.acceptSaid.delete(group.id);
 		this.stored.set(group.id, previous);
 		if (previous.state) this.attach(previous.state);
@@ -26230,19 +25248,24 @@ var Groups = class {
 	* Leaves, and the group is gone from this device at once: its row, its history, its files and every
 	* edge but the one to the admin, which stays until the admin's commit removing me comes back (or a
 	* week passes), so a leave said while the admin was away still reaches it. An admin with other
-	* members hands the role to one who is online first; alone, the group simply goes.
+	* members hands the role to one who is online first; alone, the group simply goes. Answers the member the role went
+	* to, when it went to one.
 	*/
 	async leave(groupId) {
 		if (this.isCommunity(groupId)) return this.communities.leave(groupId);
 		const session = this.session(groupId);
 		const group = this.stored.get(groupId);
-		if (session.status !== "active") return this.forget(groupId);
+		if (session.status !== "active") {
+			await this.forget(groupId);
+			return;
+		}
 		if (session.others.length === 0) {
 			await session.leave();
-			return this.forget(groupId);
+			await this.forget(groupId);
+			return;
 		}
+		const next = session.isAdmin ? this.successor(groupId) : void 0;
 		if (session.isAdmin) {
-			const next = this.successor(groupId);
 			if (!next) throw new Error("You are the admin and nobody else in the group is online to take over. Try again when a member is, or make someone the admin first.");
 			await session.transferAdmin(next);
 		}
@@ -26296,6 +25319,7 @@ var Groups = class {
 		} catch {}
 		this.reconcileEdges(groupId);
 		this.host.emit();
+		return next;
 	}
 	/** The admin heard me: the tombstone of a group I left can go. */
 	async leaveConfirmed(groupId) {
@@ -26916,7 +25940,7 @@ var Groups = class {
 					return;
 				}
 				if (existing?.state && existing.state.status === "active") {
-					if (this.sessions.get(g)?.admin === frame.admin) this.host.sendOnLink(linkId, {
+					if (this.sessions.get(g)?.admin === frame.admin && existing.contacts?.[frame.admin] === linkId) this.host.sendOnLink(linkId, {
 						t: "group-decline",
 						g
 					});
@@ -26924,9 +25948,9 @@ var Groups = class {
 				}
 				if (existing?.invitation?.seedB64 && (existing.invitation.linkId !== linkId || existing.invitation.admin !== frame.admin)) return;
 				if (existing?.left && (existing.left.admin !== frame.admin || existing.contacts?.[existing.left.admin] !== linkId)) return;
-				if (existing?.invitation && !existing.state && existing.invitation.linkId !== linkId && !existing.invitation.genesis && !existing.invitation.takenBack) return;
+				if (existing?.invitation && !existing.state && existing.invitation.linkId !== linkId && !(existing.invitation.genesis && linkId === keptAdminChat(existing.previous)) && !existing.invitation.takenBack) return;
 				if ([...this.stored.values()].filter((x) => x.invitation && !x.invitation.takenBack).length >= 32) return;
-				if (!existing?.invitation && [...this.stored.values()].filter((x) => x.invitation?.linkId === linkId && !x.invitation.takenBack).length >= MAX_INVITATIONS_PER_CHAT) {
+				if (!(existing?.invitation && !existing.invitation.takenBack && existing.invitation.linkId === linkId) && [...this.stored.values()].filter((x) => x.invitation?.linkId === linkId && !x.invitation.takenBack).length >= MAX_INVITATIONS_PER_CHAT) {
 					try {
 						this.host.sendOnLink(linkId, {
 							t: "group-decline",
@@ -27058,10 +26082,12 @@ var Groups = class {
 				const group = this.stored.get(g);
 				if (!group?.invitation?.seedB64 || group.invitation.linkId !== linkId || !Array.isArray(frame.commits)) return;
 				if (group.invitation.pieces.reduce((n, p) => n + p.commits.length, 0) + frame.commits.length > 1024) return;
+				const commits = frame.commits.map(parseGroupCommit);
+				if (commits.some((c) => !c || c.g !== g)) return;
 				group.invitation.pieces.push({
 					t: "group-chain",
 					g,
-					commits: frame.commits
+					commits
 				});
 				return;
 			}
@@ -33424,6 +32450,11 @@ var PaymentDesk = class {
 				return;
 			}
 		}
+		if (target && request.network && request.network !== walletNetworkOf(target.network)) {
+			if (!federations) return;
+			federations = void 0;
+			target = void 0;
+		}
 		const network = request.network ?? paymentNetwork({
 			target,
 			mints: parseCashuRequestPayload(findEndpoint(request.endpoints, ENDPOINT.cashu) ?? ""),
@@ -33436,8 +32467,10 @@ var PaymentDesk = class {
 		}
 		const allowed = (method) => (held ? !!link?.paymentEnabled(method) : !!link?.allowsPayment(method)) && this.accepts(linkId, method, network);
 		const bolt11 = allowed("lightning") ? findEndpoint(request.endpoints, ENDPOINT.bolt11) : void 0;
-		const chain = bolt11 ? decodeBolt11(bolt11)?.network : void 0;
-		const invoice = bolt11 && !(network === "mainnet" && chain && chain !== "bitcoin") ? bolt11 : void 0;
+		const decoded = bolt11 ? decodeBolt11(bolt11) : null;
+		const chain = decoded?.network;
+		const sameTarget = !(target?.method === "bitcoin" || target?.method === "arkade" || target?.method === "bark") || chain === "bitcoin" === (walletNetworkOf(target.network) === "mainnet");
+		const invoice = bolt11 && decoded?.amountSat === amount && sameTarget && !(network === "mainnet" && chain && chain !== "bitcoin") ? bolt11 : void 0;
 		const mints = allowed("cashu") ? parseCashuRequestPayload(findEndpoint(request.endpoints, ENDPOINT.cashu) ?? "").filter((mint) => mintNetwork(mint) === network) : [];
 		if (!target && !invoice && !mints.length && !federations) return;
 		await this.save({
@@ -33532,6 +32565,14 @@ var PaymentDesk = class {
 			return;
 		}
 		const inspected = this.wallet.inspect?.(payment.endpoint[1]);
+		if (payment.endpoint[0] === ENDPOINT.cashu && inspected !== void 0 && inspected?.kind !== "token") {
+			link.sendPaymentResult({
+				id: payment.id,
+				ok: false,
+				error: "That is not a valid ecash token"
+			});
+			return;
+		}
 		if (inspected?.kind === "token" && !this.accepts(linkId, "cashu", mintNetwork(inspected.mint))) {
 			link.sendPaymentResult({
 				id: payment.id,
@@ -34520,7 +33561,7 @@ var PaymentDesk = class {
 	/**
 	* Notes from the contact. Redeemed only when they are of a federation we joined and this chat allows Fedimint;
 	* otherwise refused unredeemed, and the contact takes them back. Written down (with the notes) before redeeming:
-	* an interrupted redeem is finished from the journal, never lost.
+	* an interrupted redeem is finished from the journal, never lost. The chat says it once the federation answered.
 	*/
 	async receiveFedimint(linkId, payment) {
 		const link = this.host.getLink(linkId);
@@ -34593,6 +33634,16 @@ var PaymentDesk = class {
 			await refuse(`${networkLabel(walletNetworkOf(network))} Fedimint is off in this chat`);
 			return;
 		}
+		const digest = digestHex(notes.trim());
+		const before = [...this.payments.values()].find((p) => p.notesDigest === digest && p.direction === "in" && p.kind === "payment");
+		if (before) {
+			link.sendPaymentResult({
+				id: payment.id,
+				ok: false,
+				error: before.state === "failed" ? before.error ?? "These notes were already redeemed" : "These notes were already received"
+			});
+			return;
+		}
 		await this.save({
 			id: payment.id,
 			linkId,
@@ -34605,16 +33656,8 @@ var PaymentDesk = class {
 			createdAt: payment.timestamp,
 			requestId: payment.requestId,
 			federation: found.federation,
-			token: notes
-		});
-		await this.host.storeMessage({
-			linkId,
-			id: `peer_${payment.timestamp}`,
-			text: `⚡ ${amount.toLocaleString()} ${network === "bitcoin" ? "sats" : "test sats"} on Fedimint`,
-			sender: "peer",
-			timestamp: payment.timestamp,
-			via: "datalink",
-			paymentId: payment.id
+			token: notes,
+			notesDigest: digest
 		});
 		await this.finishRedeem(this.payments.get(payment.id));
 	}
@@ -34662,8 +33705,30 @@ var PaymentDesk = class {
 				ok: false,
 				error: "These notes were already redeemed"
 			});
+			try {
+				await this.host.storeMessage({
+					linkId: payment.linkId,
+					id: `peer_${payment.createdAt}_refused`,
+					text: "Could not receive Fedimint ecash: These notes were already redeemed",
+					sender: "peer",
+					timestamp: payment.createdAt,
+					via: "datalink"
+				});
+			} catch {}
 			return;
 		}
+		if (state) {
+			const test = fedimint.federation(payment.federation)?.network !== "bitcoin";
+			await this.host.storeMessage({
+				linkId: payment.linkId,
+				id: `peer_${payment.createdAt}`,
+				text: `⚡ ${payment.amount.toLocaleString()} ${test ? "test sats" : "sats"} on Fedimint`,
+				sender: "peer",
+				timestamp: payment.createdAt,
+				via: "datalink",
+				paymentId: id
+			});
+		}
 		if (state !== "done") return;
 		await this.save({
 			...this.current(payment),
@@ -35853,24 +34918,24 @@ var GhostlyNode = class GhostlyNode {
 	* Every wallet twice, one per network (real money, test coins), both open at once. Nothing is parked: a payment
 	* goes through the wallet of its own network, and a wallet of one network never pays for the other.
 	*/
-	usdtWallets = perNetwork((network) => new UsdtWallet(network, () => {
-		this.refreshWallet();
+	usdtWallets = perNetwork((network) => new UsdtWallet(network, (viewChanged = true) => {
+		if (viewChanged) this.refreshWallet();
 		this.desk.reconcileUsdtReceipts().catch(() => {});
 	}));
-	arkWallets = perNetwork((network) => new ArkWallet(network, () => {
-		this.refreshWallet();
+	arkWallets = perNetwork((network) => new ArkWallet(network, (viewChanged = true) => {
+		if (viewChanged) this.refreshWallet();
 		this.desk.reconcileArkReceipts().catch(() => {});
 	}));
-	barkWallets = perNetwork((network) => new BarkWallet(network, () => {
-		this.refreshWallet();
+	barkWallets = perNetwork((network) => new BarkWallet(network, (viewChanged = true) => {
+		if (viewChanged) this.refreshWallet();
 		this.desk.reconcileBarkReceipts().catch(() => {});
 	}));
 	fedimintWallets = perNetwork((network) => new FedimintWallet(network, {
 		changed: () => void this.refreshWallet(),
 		received: (paymentId) => void this.desk.onLightningPaid({ paymentId })
 	}, () => (this.options.fedimintSdk ?? loadFedimintSdk)()));
-	sparkWallets = perNetwork((network) => new SparkWallet(network, () => {
-		this.refreshWallet();
+	sparkWallets = perNetwork((network) => new SparkWallet(network, (viewChanged = true) => {
+		if (viewChanged) this.refreshWallet();
 		this.desk.reconcileSparkReceipts().catch(() => {});
 	}));
 	/** What a call naming no network acts on (a caller from before wallets had their own): Mainnet. */
@@ -36197,29 +35262,38 @@ var GhostlyNode = class GhostlyNode {
 			if (live.stored.deletedIds?.includes(`peer_${wire.wireId}`)) return null;
 			live.files.wireIds.add(wire.wireId);
 			live.files.receivedBytes += wire.size;
-			await fileStore.put({
-				id: file.id,
-				linkId,
-				blob: new Blob([bytes], { type: safeBlobType(file.mime) }),
-				createdAt: Date.now(),
-				direction: "in",
-				wireId: wire.wireId,
-				digest,
-				metadata: {
-					name: wire.name,
-					size: wire.size,
-					mime: wire.mime,
-					timestamp: wire.timestamp,
-					voice: wire.voice,
-					video: wire.video,
-					image: wire.image
-				},
-				transfer: {
-					state: "done",
-					transferred: wire.size,
-					size: wire.size
-				}
-			});
+			const storage = await fileBytes();
+			try {
+				await storage.stage(file.id, new Blob([bytes]));
+				await fileStore.put({
+					id: file.id,
+					linkId,
+					bytes: storage.kind,
+					createdAt: Date.now(),
+					direction: "in",
+					wireId: wire.wireId,
+					digest,
+					metadata: {
+						name: wire.name,
+						size: wire.size,
+						mime: wire.mime,
+						timestamp: wire.timestamp,
+						voice: wire.voice,
+						video: wire.video,
+						image: wire.image
+					},
+					transfer: {
+						state: "done",
+						transferred: wire.size,
+						size: wire.size
+					}
+				});
+			} catch (error) {
+				await storage.remove(file.id).catch(() => {});
+				live.files.wireIds.delete(wire.wireId);
+				live.files.receivedBytes -= wire.size;
+				throw error;
+			}
 			this.transfers.set(file.id, {
 				state: "done",
 				transferred: wire.size,
@@ -36847,6 +35921,7 @@ var GhostlyNode = class GhostlyNode {
 		const wallets = this.withHomes(walletInstances(networks));
 		const intents = (await intentRepository.list()).map((saved) => saved.review);
 		this.noteOpenReviews(intents);
+		this.paymentCoordinator.notePending(intents);
 		this.walletView = {
 			...networks.mainnet,
 			networks,
@@ -38569,6 +37644,10 @@ var GhostlyNode = class GhostlyNode {
 			error: `Message exceeds ${LIMITS.maxChatMessageBytes} UTF-8 bytes.`,
 			refused: true
 		};
+		if (!pairedMessageFits(timestamp, trimmed, reply && pairedWireReply(reply), forwarded, card)) return {
+			error: PAIRED_FRAME_TOO_LARGE,
+			refused: true
+		};
 		const stop = this.chatStopped(live);
 		if (stop) return { error: stop };
 		if (!link.isDataLinkOpen && link.dhtDelivery?.inviteTaken) return {
@@ -40835,8 +39914,10 @@ var GhostlyNode = class GhostlyNode {
 			this.links.get(edge)?.link?.sendGroupFrame(frame);
 		} catch {}
 	}
-	leaveGroup({ groupId }) {
-		return this.groups.leave(groupId);
+	/** `admin`: the member a leaving admin handed the role to. */
+	async leaveGroup({ groupId }) {
+		const admin = await this.groups.leave(groupId);
+		return admin ? { admin } : {};
 	}
 	removeGroupMember({ groupId, key }) {
 		return this.groups.remove(groupId, key);
@@ -43576,6 +42657,7 @@ var GhostlyNode = class GhostlyNode {
 			}
 		});
 		const link = live.link;
+		if (linkId === this.activeLinkId) link.setChatActive(true);
 		link.start();
 		this.emitState();
 		if (resumed.resume) {
@@ -43700,7 +42782,7 @@ var GhostlyNode = class GhostlyNode {
 	get nativeFactories() {
 		const relay = this.relaysHyperdht ? this.hyperdhtRelay : "";
 		return {
-			...relay ? { "hyperdht/1": async (seedB64) => (await import("./hyperdhtRelay-CEmBpT0Q.js")).createRelayedHyperEndpoint(seedB64, relay) } : {},
+			...relay ? { "hyperdht/1": async (seedB64) => (await import("./hyperdhtRelay-BVoWY2ua.js")).createRelayedHyperEndpoint(seedB64, relay) } : {},
 			...this.options.nativeTransports,
 			...this.ownIrohRelays ? { "iroh/1": (seedB64) => this.options.nativeTransports["iroh/1"](seedB64, this.settings.irohRelays?.length ? { relays: [...this.settings.irohRelays] } : {}) } : {},
 			...this.options.irohWeb ? { "iroh/1": (seedB64) => createIrohWebEndpoint(seedB64, { relays: this.irohRelays }) } : {}
@@ -44549,4 +43631,4 @@ function signalKind(signal) {
 //#endregion
 export { EngineServer };
 
-//# sourceMappingURL=server-CBCEYKMN.js.map
+//# sourceMappingURL=server-CJNEKxzE.js.map