@ghostlytools/cli 1.3.1 → 1.3.3

package/dist/assets/{server-Ss0gJ-nw.js → server-Bx3RGkBC.js}

@@ -1,19 +1,19 @@
 import { n as traceJoin } from "./joinTrace-CjRDFy85.js";
-import { $c as budgetRetryMs, $i as PeerProofs, $o as HTTP_SERVICE_PROTO, $r as deviceWakeRequest, $s as enrollCancelFrame, $t as didDhtFromPublicKey, A as CommunitySession, Aa as COMMUNITY_REACTION_FRAME, Ao as DirectPathWatch, Ar as rankHubs, As as handoffStreamKey, B as knockRecords, Ba as wireReaction, Bc as signTurnPacket, Bn as isFederationId, Bo as LIMITS, Bs as readHandoffVerified, C as sha256Paced, Ca as EDIT_BUFFER_MS, Cc as deviceEchoNonce, Co as GROUP_MEMBER_CAP, Cr as freshHubs, Cs as handoffEphemeral, D as openGroupTyping, Da as parseLinkPreview, Dc as newDeviceSetSecret, Do as rosterHas, Dr as mergeLobby, Ds as handoffPakeFrame, E as groupTypingEpoch, Ea as dhtEditId, Ec as devicePingFrame, Eo as commitHash, Er as mergeBeacon, Es as handoffOfferFrame, Et as normalizeAtprotoHandle, Fa as queueReaction, Fc as TURN_LAST_SEQUENCE, Fn as decodeBolt11, Fo as presenceSeenAt, Fr as ChatFiles, Fs as readHandoffDone, G as groupWakeFrame, Gc as turnStatedVerifier, Gn as LIVENESS_PING_MS, Gr as PIN_LIMITS, Gs as setAckFrame, H as readKnocks, Ha as readReply, Hc as turnInstance, Hi as IDENTITY_REVOCATION_LABEL, Hn as parseFedimintRequestPayload, Ho as encodeControl, I as decodeGroupEntryLink, Ia as reactionEmoji, Ic as TURN_MAX, Ii as CapsExchange, In as ENDPOINT, Io as GhostlyHttpError, Ir as FILE_LIMITS, Is as readHandoffHave, J as GROUP_LIMITS, Jc as RelayTransport, Ji as identityStatement, Jn as pairedMessageFrame, Jr as pinIsNewer, Js as verifySetUpdate, K as groupWakes, Kc as turnVerifierMark, Ki as emptyIdentityLedger, Kn as PAIRED_FRAME_TOO_LARGE, Kr as mayPin, Ks as setUpdateFrame, L as encodeGroupEntryLink, La as reactionIsNewer, Lc as firstDeviceSetSecret, Li as DHT_TEXT_CAPABILITY, Ln as cashuRequestPayload, Lo as formatLocalTarget, Lr as transferEnded, Ls as readHandoffHello, M as communityHasFrame, Ma as REACTION_LIMITS, Mc as TURN_SETTLE_MS, Mo as DHT_POLL_INTERVALS, Mr as readBeaconHead, Ms as newHandoffId, N as decodeCommunityLink, Na as ReactionWindow, Nc as classifyTurnRead, Nr as readLobby, Ns as readHandoffAck, O as sealGroupTyping, Oa as forwardedAgain, Oc as seedSigner, Oo as verifyCommitSignature, Or as newerHead, Os as handoffReleaseFrame, P as encodeCommunityLink, Pa as nextReactionNumber, Pc as turnPutSummary, Po as RELAY_POLL_INTERVALS, Pr as shouldBeHub, Ps as readHandoffCancel, Q as frameBytes, Qc as traceLink, Qi as lastSharedWithMe, Qo as emptyLinkRecords, Qr as WakeLimiter, Qt as didDhtDocument, R as entryParams, Ra as readReaction, Rc as nextTurnPosition, Ri as capsDescriptors, Rn as fedimintRequestPayload, Ro as parseLocalTarget, Rr as transferStalled, Rs as readHandoffPake, S as readAppBundleAsync, Sa as parseVideoMeta, Sc as deviceEchoFrame, Sn as isBitcoinAddress, So as readCanonicalJson, Sr as doorHubs, Ss as handoffDigest, T as GroupTypingBoard, Ta as RateWindow, Tc as deviceLinkPairing, To as MEMBER_KEY, Tr as lobbyRecords, Ts as handoffManifestFrames, Tt as isAtprotoDid, Ua as replySnippet, Uc as turnKeys, Un as GhostLink, Ur as typingActivity, V as mergeKnocks, Va as pairedReplyAuthor, Vc as signTurnRelease, Vn as parseCashuRequestPayload, Vo as decodeControl, Vr as TypingSender, Vs as sealHandoffPiece, W as GroupWakeLimiter, Wa as BUTTON_ID, Wc as turnName, Wi as IdentityExchange, Wn as INVITE_TAKEN, Wo as RTC_CONFIG, Ws as readSetUpdate, X as GROUP_READ_NOTE, Xc as normalizeRelayUrl, Xi as receivedIdentityStatus, Xn as engineText, Xo as parseCallSignal, Xr as readPin, Ya as STATUS_CARD_LIMITS, Yc as currentRelays, Yi as newIdentityBinding, Yn as engineError, Yr as pinNumberHolds, Z as GroupSession, Zi as revokesIdentity, Zn as GROUP_FILE_LIMITS, Zr as WAKE_CALL_INTERVAL_MS, _c as inviteOwnership, _i as HoldKeys, _l as randomBytes, _n as walletNetworkOf, _r as meshHubs, _s as handoffBusyFrame, a as planAppUpdate, ac as enrollProofFrame, ai as vapidKeysMatch, an as EVM_TEST_CHAINS, ao as heardTime, as as HANDOFF_HAVE, at as groupName, b as pacer, ba as parseVoiceMeta, bc as ENROLL_CAPABILITY, bi as newMailbox, bl as utf8Decode, bn as sparkAddressKind, bo as canonicalJson, br as beaconKeys, bs as handoffContextProof, ca as peekDhtMailbox, cc as verifyEnrollProof, ci as isAppVersion, cl as createIdentity, cn as SEPOLIA_TEST_USDT, cr as CarriedTransport, cs as HANDOFF_PAKE, d as APP_BUNDLE_LIMITS, da as parseImageMeta, dc as readDeviceInvite, di as EDIT_CAPABILITY, dl as publicKeyFromZ32, dn as USDT_PUBLIC_RPC, do as appRef, ds as HANDOFF_TIMINGS, ea as emptyProofLedger, ec as enrollCancelReason, ei as newWakeToken, el as isDiscoveryBudgetError, en as encodeDidDhtDeactivated, eo as checkStatusCard, es as LEGACY_SERVICES, f as APP_BUNDLE_MAGIC, fc as OwnInviteError, fi as STATUS_CARD_CAPABILITY, fl as verify, fn as WALLET_NETWORKS, fs as HANDOFF_VERIFIED, g as appViewOf, gi as HOLD_LIMITS, gl as fromBase64Url, gn as validatePaymentTarget, go as readAppRevocation, gr as mayBeHub, gs as handoffAttemptSucceeded, h as appDigest, ha as sanitizeMime, hc as encodeInviteCode, hi as HOLD_DATED_BACK_MS, hl as bytesEqual, hn as formatPaymentAmount, ho as isAppRef, hr as MESH_HUBS, hs as handoffAttemptFailed, i as checkAppBeforeRun, ic as enrollHelloFrame, ii as checkPushEndpoint, il as createRelayPayload, in as ETHEREUM_USDT, io as claimedTime, ir as readGroupFileMeta, is as HANDOFF_DONE, it as mentionsMember, j as GROUP_READ_NOTE_COMMUNITY, ja as GROUP_REACTION_FRAME, jc as TURN_RAISE_READ_TIMEOUT_MS, jr as readBeacon, js as handoffVersions, k as COMMUNITY_LIMITS, ka as readForwarded, kc as webCryptoSigner, ko as edgeParams, kr as pickHubs, ks as handoffRetryAfter, l as readAppStoreSteps, la as DHT_FILE_CAPABILITY, lc as createDeviceInvite, li as APPS_CAPABILITY, ll as identityFromSeed, lo as APP_STATEMENT_LIMITS, ls as HANDOFF_PIECE_BYTES, ma as sanitizeFileName, mc as decodeInviteCode, mi as HOLD_CAPABILITY, ml as sanitizeAvatar, mn as assertWholeSats, mo as isAppKey, mr as readGroupSignal, ms as handoffAttemptAllowed, n as appStoreDecision, na as TRANSPORTS, nc as enrollDoneFrame, ni as relayRequest, nl as PacketTooLargeError, no as statusCardText, nr as groupFileFallback, ns as HANDOFF_ACK, nt as carryMentions, o as APP_STORE_LIMITS, oc as readEnrollGrant, on as ONCHAIN_PROVIDER, oo as receivedTimestamp, os as HANDOFF_HELLO, p as APP_ICON_PATH, pa as formatFileSize, pc as createChatInvite, pi as UPGRADE_CAPABILITY, pn as assertTokenUnits, po as isAppHash, pr as groupSignalFrame, ps as filePartName, q as parseGroupWakeFrame, qc as DEFAULT_RELAYS, qi as identityRevocationValue, qn as pairedMessageFits, qr as nextPinNumber, qs as signTombstone, r as appUpdateDecision, ra as automaticTransport, rc as enrollGrantFrame, ri as wakeRequest, rn as signDidDhtPacket, ro as arrivalKey, rs as HANDOFF_CANCEL, rt as parseCommunityEdit, sa as DHT_MESSAGE_TTL, sc as readEnrollHello, si as chatAppId, sn as PaymentPreflightError, so as shownTime, ss as HANDOFF_OFFER, t as appRevocationFor, ta as validExternalKey, tc as enrollDigits, ti as parseWakeFrame, tl as withRequestOptions, tn as encodeDidDhtPacket, to as sameButtonText, ts as serviceIdFromName, tt as GROUP_EDIT_TEXT_BYTES, ua as dhtFileId, uc as deviceInviteJoinerParams, ui as BUTTONS_CAPABILITY, ul as identityFromSeedB64, un as TEST_USDT_FAUCET_AMOUNT, uo as appFingerprint, us as HANDOFF_REQUEST, vi as HoldRefusedError, vl as toBase64Url, vn as SPARK_NETWORKS, vr as pickMeshHubs, vs as handoffCancelFrame, wa as EDIT_RATE_WINDOW_MS, wc as deviceKeyZ32, wn as isPubkyKey, wr as lobbyKeys, ws as handoffHelloFrame, xc as HANDOFF_CAPABILITY, xi as readManifest, xl as utf8Encode, xn as sparkInvoiceDetails, xr as beaconRecords, xs as handoffDataFrame, y as isAppUrl, ya as fileMessageText, yc as DEVICES_CAPABILITY, yi as isHoldUrl, yl as toZ32, yn as SPARK_PROVIDER, yr as COMMUNITY_TOPOLOGY, ys as handoffContext, z as knockIdentity, za as validReactionNumber, zc as readTurnPacket, zi as dialDescriptors, zn as findEndpoint, zo as webLocalFetch, zs as readHandoffTurnFrame } from "./src-DDzSERyc.js";
+import { $c as currentRelays, $i as revokesIdentity, $n as GROUP_FILE_LIMITS, $r as WAKE_CALL_INTERVAL_MS, $t as didDhtFromPublicKey, A as CommunitySession, Aa as forwardedAgain, Ac as devicePingFrame, Ao as rosterAdmin, Ar as newerHead, As as handoffOfferFrame, B as knockRecords, Ba as readReaction, Bc as TURN_MAX, Bi as capsDescriptors, Bn as findEndpoint, Bo as GhostlyHttpError, Br as transferStalled, Bs as readHandoffHave, C as sha256Paced, Ca as parseImageMeta, Cc as DEVICES_CAPABILITY, Ci as readManifest, Cl as randomBytes, Cn as isBitcoinAddress, Cr as beaconRecords, Cs as handoffContext, D as openGroupTyping, Da as RateWindow, Dc as deviceEchoNonce, Dl as utf8Encode, Do as MEMBER_KEY, Dr as lobbyRecords, Ds as handoffEphemeral, E as groupTypingEpoch, Ea as EDIT_RATE_WINDOW_MS, Ec as deviceEchoFrame, El as utf8Decode, Er as lobbyKeys, Es as handoffDigest, Et as normalizeAtprotoHandle, Fa as ReactionWindow, Fc as TURN_RAISE_READ_TIMEOUT_MS, Fr as readLobby, Fs as handoffVersions, G as groupWakeFrame, Ga as replySnippet, Gc as signTurnRelease, Gn as INVITE_TAKEN, Go as decodeControl, Gr as typingActivity, Gs as sealHandoffPiece, H as readKnocks, Ha as wireReaction, Hc as nextTurnPosition, Hn as parseCashuRequestPayload, Ho as parseLocalTarget, Hs as readHandoffPake, I as decodeGroupEntryLink, Ia as nextReactionNumber, Ic as TURN_SETTLE_MS, In as decodeBolt11, Io as DHT_POLL_INTERVALS, Ir as shouldBeHub, Is as newHandoffId, J as GROUP_LIMITS, Jc as turnName, Ji as emptyIdentityLedger, Jn as pairedMessageFits, Jo as RTC_CONFIG, Jr as mayPin, Js as readSetUpdate, K as groupWakes, Ka as BUTTON_ID, Kc as turnInstance, Ki as IdentityExchange, Kn as LIVENESS_PING_MS, Ko as encodeControl, L as encodeGroupEntryLink, La as queueReaction, Lc as classifyTurnRead, Ln as ENDPOINT, Lr as ChatFiles, Ls as readHandoffAck, M as communityHasFrame, Ma as COMMUNITY_REACTION_FRAME, Mc as seedSigner, Mo as verifyCommitSignature, Mr as rankHubs, Ms as handoffReleaseFrame, N as decodeCommunityLink, Na as GROUP_REACTION_FRAME, Nc as webCryptoSigner, No as edgeParams, Nr as readBeacon, Ns as handoffRetryAfter, O as sealGroupTyping, Oa as dhtEditId, Oc as deviceKeyZ32, Oo as commitHash, Or as mergeBeacon, Os as handoffHelloFrame, P as encodeCommunityLink, Pa as REACTION_LIMITS, Po as DirectPathWatch, Pr as readBeaconHead, Ps as handoffStreamKey, Q as frameBytes, Qc as RelayTransport, Qi as receivedIdentityStatus, Qn as parseEngineError, Qr as readPin, Qs as verifySetUpdate, Qt as didDhtDocument, R as entryParams, Ra as reactionEmoji, Rc as turnPutSummary, Ri as CapsExchange, Rn as cashuRequestPayload, Ro as RELAY_POLL_INTERVALS, Rr as FILE_LIMITS, Rs as readHandoffCancel, S as readAppBundleAsync, Sa as parseVideoMeta, Si as newMailbox, Sn as sparkInvoiceDetails, So as canonicalJson, Sr as beaconKeys, Ss as handoffCancelFrame, T as GroupTypingBoard, Ta as EDIT_BUFFER_MS, Tc as HANDOFF_CAPABILITY, Tl as toZ32, Tn as isPubkyKey, To as GROUP_MEMBER_CAP, Tr as freshHubs, Ts as handoffDataFrame, Tt as isAtprotoDid, Ua as pairedReplyAuthor, Uc as readTurnPacket, Un as parseFedimintRequestPayload, Uo as webLocalFetch, Ur as TypingSender, Us as readHandoffTurnFrame, V as mergeKnocks, Va as validReactionNumber, Vc as firstDeviceSetSecret, Vi as dialDescriptors, Vn as isFederationId, Vo as formatLocalTarget, Vs as readHandoffHello, W as GroupWakeLimiter, Wa as readReply, Wc as signTurnPacket, Wi as IDENTITY_REVOCATION_LABEL, Wn as GhostLink, Wo as LIMITS, Ws as readHandoffVerified, X as GROUP_READ_NOTE, Xc as turnVerifierMark, Xi as identityStatement, Xn as engineError, Xr as pinIsNewer, Xs as setUpdateFrame, Yc as turnStatedVerifier, Yi as identityRevocationValue, Yn as pairedMessageFrame, Yr as nextPinNumber, Ys as setAckFrame, Z as GroupSession, Za as STATUS_CARD_LIMITS, Zc as DEFAULT_RELAYS, Zi as newIdentityBinding, Zn as engineText, Zr as pinNumberHolds, Zs as signTombstone, _c as createChatInvite, _i as HOLD_DATED_BACK_MS, _n as validatePaymentTarget, _o as isAppRef, _r as MESH_HUBS, _s as filePartName, a as planAppUpdate, aa as automaticTransport, ac as enrollDigits, ai as wakeRequest, al as withRequestOptions, an as EVM_TEST_CHAINS, ao as arrivalKey, as as serviceIdFromName, at as groupName, b as pacer, ba as parseVoiceMeta, bi as HoldRefusedError, bl as bytesEqual, bn as SPARK_PROVIDER, br as pickMeshHubs, bs as handoffAttemptSucceeded, cc as enrollHelloFrame, cl as createRelayPayload, cn as SEPOLIA_TEST_USDT, co as receivedTimestamp, cs as HANDOFF_DONE, d as APP_BUNDLE_LIMITS, da as DHT_FILE_CAPABILITY, dc as readEnrollHello, di as APPS_CAPABILITY, dn as USDT_PUBLIC_RPC, do as APP_STATEMENT_LIMITS, ds as HANDOFF_OFFER, ea as lastSharedWithMe, ei as WakeLimiter, el as normalizeRelayUrl, en as encodeDidDhtDeactivated, es as parseCallSignal, f as APP_BUNDLE_MAGIC, fa as dhtFileId, fc as verifyEnrollProof, fi as BUTTONS_CAPABILITY, fl as createIdentity, fn as WALLET_NETWORKS, fo as appFingerprint, fs as HANDOFF_PAKE, g as appViewOf, gc as OwnInviteError, gi as HOLD_CAPABILITY, gl as verify, gn as formatPaymentAmount, go as isAppKey, gr as readGroupSignal, gs as HANDOFF_VERIFIED, h as appDigest, ha as sanitizeMime, hc as readDeviceInvite, hi as UPGRADE_CAPABILITY, hl as publicKeyFromZ32, hn as assertWholeSats, ho as isAppHash, hr as groupSignalFrame, hs as HANDOFF_TIMINGS, i as checkAppBeforeRun, ia as TRANSPORTS, ic as enrollCancelReason, ii as relayRequest, il as isDiscoveryBudgetError, in as ETHEREUM_USDT, io as statusCardText, ir as groupFileFallback, is as LEGACY_SERVICES, it as mentionsMember, j as GROUP_READ_NOTE_COMMUNITY, ja as readForwarded, jc as newDeviceSetSecret, jo as rosterHas, jr as pickHubs, js as handoffPakeFrame, k as COMMUNITY_LIMITS, ka as parseLinkPreview, kc as deviceLinkPairing, ko as parseGroupCommit, kr as mergeLobby, ks as handoffManifestFrames, l as readAppStoreSteps, la as DHT_MESSAGE_TTL, lc as enrollProofFrame, li as chatAppId, lo as shownTime, ls as HANDOFF_HAVE, ma as sanitizeFileName, mc as deviceInviteJoinerParams, mi as STATUS_CARD_CAPABILITY, ml as identityFromSeedB64, mn as assertTokenUnits, ms as HANDOFF_REQUEST, n as appStoreDecision, na as emptyProofLedger, ni as newWakeToken, nl as traceLink, no as checkStatusCard, ns as emptyLinkRecords, nt as carryMentions, o as APP_STORE_LIMITS, oc as enrollDoneFrame, oi as checkPushEndpoint, ol as PacketTooLargeError, on as ONCHAIN_PROVIDER, oo as claimedTime, or as readGroupFileMeta, os as HANDOFF_ACK, p as APP_ICON_PATH, pa as formatFileSize, pc as createDeviceInvite, pi as EDIT_CAPABILITY, pl as identityFromSeed, pn as arkAddressPrefix, po as appRef, ps as HANDOFF_PIECE_BYTES, q as parseGroupWakeFrame, qc as turnKeys, qn as PAIRED_FRAME_TOO_LARGE, qr as PIN_LIMITS, r as appUpdateDecision, ra as validExternalKey, rc as enrollCancelFrame, ri as parseWakeFrame, rl as budgetRetryMs, rn as signDidDhtPacket, ro as sameButtonText, rs as HTTP_SERVICE_PROTO, rt as parseCommunityEdit, sc as enrollGrantFrame, si as vapidKeysMatch, sn as PaymentPreflightError, so as heardTime, ss as HANDOFF_CANCEL, t as appRevocationFor, ta as PeerProofs, ti as deviceWakeRequest, tn as encodeDidDhtPacket, tt as GROUP_EDIT_TEXT_BYTES, ua as peekDhtMailbox, uc as readEnrollGrant, ui as isAppVersion, un as TEST_USDT_FAUCET_AMOUNT, ur as CarriedTransport, us as HANDOFF_HELLO, vc as decodeInviteCode, vi as HOLD_LIMITS, vl as sanitizeAvatar, vn as walletNetworkOf, vo as readAppRevocation, vr as mayBeHub, vs as handoffAttemptAllowed, wc as ENROLL_CAPABILITY, wl as toBase64Url, wo as readCanonicalJson, wr as doorHubs, ws as handoffContextProof, xc as inviteOwnership, xi as isHoldUrl, xl as fromBase64Url, xn as sparkAddressKind, xr as COMMUNITY_TOPOLOGY, xs as handoffBusyFrame, y as isAppUrl, ya as fileMessageText, yc as encodeInviteCode, yi as HoldKeys, yl as sanitizeDisplayText, yn as SPARK_NETWORKS, yr as meshHubs, ys as handoffAttemptFailed, z as knockIdentity, za as reactionIsNewer, zc as TURN_LAST_SEQUENCE, zi as DHT_TEXT_CAPABILITY, zn as fedimintRequestPayload, zo as presenceSeenAt, zr as transferEnded, zs as readHandoffDone } from "./src-D7gcJElT.js";
 import { i as SourceUnreachableError, n as PROVIDER_PLATFORMS, o as isNothingSpentError, r as SourceConfigError, t as NothingSpentError, u as redact } from "./types-C4_KafL_.js";
 import { t as bitcoindRpc } from "./bitcoindProvider-DGw3xBSa.js";
-import { t as nwc } from "./nwcProvider-4eVz_8HP.js";
+import { t as nwc } from "./nwcProvider-BbjJOfLD.js";
 import { a as clearProfileStores, c as fileStore, d as profileOpenFailure, f as store, i as STORES$1, l as newestWalletTx, m as wrap, n as APP_STORAGE_SCOPE_INDEX, o as databaseName, p as transact, r as CARD_INDEX, s as deleteDatabase, t as APP_STORAGE_CHAT_INDEX, u as openDb } from "./idb-B5L8wuOm.js";
-import { a as sealSeed, i as newDeviceKey, o as unsealSeed, r as intentRepository } from "./networkReason-CetKkTPo.js";
-import { $ as setSingleWriterGate, A as LightningCards, B as breezDatabaseInUse, C as FileAppender, D as streamStored, E as storedSize, F as ProviderSources, G as ModeChanged, H as dropBreezDatabase, I as sourceKey, J as networkLabel, K as ModeGate, L as CASHU_MINT_SOURCE, M as isRecoveryPhrase, N as normalizePhrase, P as lightningPaying, Q as setAwayWallets, R as cashuMint, S as WALLET_TYPES, T as removeStored, U as iceServerProblem, V as breezDatabasesFor, W as iceServerSetting, X as refuseAway, Y as awayFrom, Z as requireTurn, _ as crossNetwork, a as storedGroupFiles, b as walletInstances, c as receivedPairedReply, d as paymentAlias, f as paymentWireId, g as createTiming, h as createFailure, i as groupOfFile, j as cardsKey, k as CASHU_CARD, l as replyRef, m as assertConfirmedReal, n as groupFileId, o as groupReply, p as WALLET_NAMES, q as WrongNetworkError, r as groupFileText, s as pairedWireReply, t as GroupFileDesk, u as replyTo, v as paymentNetwork, w as readStored$1, y as paymentNetworksOf, z as breezDatabase } from "./groupFiles-IEUW3DQz.js";
-import { i as fedimintDatabase, n as createIrohWebEndpoint, o as loadFedimintSdk, r as irohRelayProblem, t as DEFAULT_IROH_RELAYS } from "./irohWeb-4oChIOIp.js";
+import { a as sealSeed, i as newDeviceKey, o as unsealSeed, r as intentRepository } from "./networkReason-DwcadZz5.js";
+import { $ as setSingleWriterGate, A as LightningCards, B as breezDatabaseInUse, C as FileAppender, D as streamStored, E as storedSize, F as ProviderSources, G as ModeChanged, H as dropBreezDatabase, I as sourceKey, J as networkLabel, K as ModeGate, L as CASHU_MINT_SOURCE, M as isRecoveryPhrase, N as normalizePhrase, P as lightningPaying, Q as setAwayWallets, R as cashuMint, S as WALLET_TYPES, T as removeStored, U as iceServerProblem, V as breezDatabasesFor, W as iceServerSetting, X as refuseAway, Y as awayFrom, Z as requireTurn, _ as crossNetwork, a as storedGroupFiles, b as walletInstances, c as receivedPairedReply, d as paymentAlias, f as paymentWireId, g as createTiming, h as createFailure, i as groupOfFile, j as cardsKey, k as CASHU_CARD, l as replyRef, m as assertConfirmedReal, n as groupFileId, o as groupReply, p as WALLET_NAMES, q as WrongNetworkError, r as groupFileText, s as pairedWireReply, t as GroupFileDesk, u as replyTo, v as paymentNetwork, w as readStored$1, y as paymentNetworksOf, z as breezDatabase } from "./groupFiles-6qnLCnOm.js";
+import { i as fedimintDatabase, n as createIrohWebEndpoint, o as loadFedimintSdk, r as irohRelayProblem, t as DEFAULT_IROH_RELAYS } from "./irohWeb-DSyLp5Re.js";
 import { c as isTestMint, d as paysItsOwnInvoices, l as isWorthlessMint, n as DEFAULT_MINTS, o as fakesLightning, r as TEST_MINT, t as BITCOIN_INVOICE_ON_TESTNET, u as mintNetwork } from "./mints-BrlY773j.js";
-import { _ as reserveAdapterIds, f as setOwnDidSource, g as registeredOnchainProviders, h as registeredLightningProviders, l as chosenResolver, n as resolveAtprotoDid, p as onAdaptersChanged, t as assertPublicServer, v as boundedIdentityFetch, y as verifyIdentity } from "./resolve-CouHhCpJ.js";
+import { _ as reserveAdapterIds, b as testBuild, f as setOwnDidSource, g as registeredOnchainProviders, h as registeredLightningProviders, l as chosenResolver, n as resolveAtprotoDid, p as onAdaptersChanged, t as assertPublicServer, v as boundedIdentityFetch, y as verifyIdentity } from "./resolve-BIDJ-UUl.js";
 import { c as fileSpace, f as FILE_BYTES_STEP, o as fileBytes, r as blobDigest, s as fileBytesOf, u as removeFileBytes } from "./fileBytes-Di7VZtmU.js";
-import { n as MAX_BACKUP_BYTES, t as BACKUP_MEDIA_TYPE } from "./envelope-WjingYSc.js";
+import { n as MAX_BACKUP_BYTES, t as BACKUP_MEDIA_TYPE } from "./envelope-fNC941z4.js";
 import { t as hyperdhtRelayProblem } from "./hyperdhtRelay-BT_wRxab.js";
-import { hkdf } from "@noble/hashes/hkdf.js";
 import { sha256 } from "@noble/hashes/sha2.js";
+import { hkdf } from "@noble/hashes/hkdf.js";
 import { base64, base64url, base64urlnopad, bech32, hex } from "@scure/base";
 import { bytesToHex, concatBytes, hexToBytes, utf8ToBytes } from "@noble/hashes/utils.js";
 import { chacha20poly1305 } from "@noble/ciphers/chacha.js";
@@ -199,7 +199,7 @@ function viewNews(before, after) {
 //#endregion
 //#region ../browser/src/engine/paymentAdapters/usdtWallet.ts
 /** The Ethereum libraries, a large part of the app: loaded once a USDT wallet is made, opened or restored, not with the engine. */
-var loadUsdt = () => import("./usdt-Fj8CQO2z.js");
+var loadUsdt = () => import("./usdt-B2TLRlYa.js");
 /** Every new profile starts with this wallet: an address to receive on, nothing to set up. */
 var DEFAULT_USDT = {
 	network: "ethereum",
@@ -648,7 +648,7 @@ async function restoreArkDatabase(walletId, snapshot) {
 //#endregion
 //#region ../browser/src/engine/paymentAdapters/arkWallet.ts
 /** The Ark SDK, a large part of the app: loaded once an Ark wallet is made, opened or restored, not with the engine. */
-var loadArkade = () => import("./arkade-C_qDmHnm.js");
+var loadArkade = () => import("./arkade-CNnMaoEQ.js");
 /** How long a Testnet wallet about to make way for another waits for its server to say what it holds. */
 var RETIRE_READ_MS = 1e4;
 /** Every new profile starts with this wallet: nothing to set up before receiving. */
@@ -664,7 +664,7 @@ var checkProviders = (network, ...urls) => {
 		provider,
 		asset: "BTC",
 		unit: "sat",
-		address: "configuration",
+		address: `${arkAddressPrefix(network)}configuration`,
 		expiresAt: Date.now() + 6e4
 	});
 };
@@ -1253,7 +1253,7 @@ var BarkAdapter = class BarkAdapter {
 			provider,
 			asset: "BTC",
 			unit: "sat",
-			address: "configuration",
+			address: `${barkAddressPrefix(config.network)}configuration`,
 			expiresAt: Date.now() + 6e4
 		});
 	}
@@ -6362,9 +6362,6 @@ var webln = {
 		return WeblnLightning.connect(await findWebln(), host.mode, host.signal);
 	}
 };
-//#endregion
-//#region ../browser/src/engine/paymentAdapters/providers/testing.ts
-var TEST_PROVIDERS_FLAG = "ghostly-test-providers";
 var hex$4 = (bytes) => Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
 var random$1 = (n) => crypto.getRandomValues(new Uint8Array(n));
 var uint = (value, length = 1) => {
@@ -6611,11 +6608,7 @@ var fakeLightning = {
 	kind: "lightning",
 	description: "In-memory regtest node for tests. Holds nothing.",
 	networks: ["regtest"],
-	platforms: [
-		"web",
-		"extension",
-		"desktop"
-	],
+	platforms: ["web", "desktop"],
 	fields: FIELDS,
 	experimental: true,
 	validate,
@@ -6629,11 +6622,7 @@ var fakeOnchain = {
 	kind: "onchain",
 	description: "In-memory regtest wallet for tests. Holds nothing.",
 	networks: ["regtest"],
-	platforms: [
-		"web",
-		"extension",
-		"desktop"
-	],
+	platforms: ["web", "desktop"],
 	fields: FIELDS,
 	experimental: true,
 	validate,
@@ -6644,7 +6633,7 @@ var fakeOnchain = {
 /** Whether this browser asked for the fake providers (an e2e run sets it before the app starts). */
 function testProvidersEnabled() {
 	try {
-		return globalThis.localStorage?.getItem(TEST_PROVIDERS_FLAG) === "1";
+		return testBuild() && globalThis.localStorage?.getItem("ghostly-test-providers") === "1";
 	} catch {
 		return false;
 	}
@@ -6714,7 +6703,7 @@ var registry;
 var loading$1;
 var listeners = /* @__PURE__ */ new Set();
 function loadIdentityProviders() {
-	return loading$1 ??= import("./registry-OBJBnHVQ.js").then((m) => {
+	return loading$1 ??= import("./registry-DoTb6uEr.js").then((m) => {
 		registry = m;
 		for (const listener of listeners) listener();
 		return m;
@@ -9895,7 +9884,8 @@ async function copyForForward(sourceId, target) {
 	const source = await fileStore.get(sourceId);
 	if (!source?.metadata) throw new Error("The file is not on this device any more");
 	const size = storedSize(source);
-	if (source.direction === "in" && source.wire3 && source.wire3.state !== "done" || await bytesHere(source) !== size) throw new Error("The file has not arrived yet");
+	const checked = source.wire3 ? source.wire3.state === "done" : !source.group || source.transfer?.state === "done";
+	if (source.direction === "in" && !checked || await bytesHere(source) !== size) throw new Error("The file has not arrived yet");
 	const { file, linkId, wireId, timestamp } = target;
 	const metadata = {
 		name: file.name,
@@ -9972,7 +9962,12 @@ var APP_FETCH_LIMITS = {
 	sigBytes: 1024,
 	/** `ghostly-revoke.json`: at most 4096 signed revocations. */
 	revocationsBytes: 16777216,
-	timeoutMs: 3e4
+	/** How long the host has to answer (the response's headers). */
+	timeoutMs: 3e4,
+	/** How long the body may go without a byte: a read still arriving is never cut by the clock alone. */
+	idleMs: 3e4,
+	/** A whole read at most: the 16 MiB cap at about 224 kbit/s. */
+	totalMs: 6e5
 };
 /** A URL this client may read an app, a store or a revocation list from. */
 function isAppFetchUrl(value) {
@@ -9995,10 +9990,22 @@ function boundedAppFetch(options = {}) {
 		if (!isAppFetchUrl(url)) throw new AppFetchError("host", "Apps are read only from raw.githubusercontent.com, or from cdn.jsdelivr.net at a commit, over HTTPS");
 		if (options.online && !options.online()) throw new AppFetchError("offline", "Offline");
 		const fetcher = options.fetcher ?? globalThis.fetch.bind(globalThis);
+		const controller = new AbortController();
+		const cut = () => {
+			controller.abort(new DOMException("The read took too long", "TimeoutError"));
+		};
+		const total = setTimeout(cut, options.totalMs ?? APP_FETCH_LIMITS.totalMs);
+		let idle = setTimeout(cut, options.timeoutMs ?? APP_FETCH_LIMITS.timeoutMs);
+		const heard = () => {
+			clearTimeout(idle);
+			idle = setTimeout(cut, options.idleMs ?? APP_FETCH_LIMITS.idleMs);
+		};
+		const failure = (error) => controller.signal.aborted ? new AppFetchError("slow", "That took too long on this connection") : new AppFetchError("network", error instanceof Error ? error.message : String(error));
+		const { signal } = controller;
 		let response;
 		try {
 			response = await fetcher(url, {
-				signal: AbortSignal.timeout(options.timeoutMs ?? APP_FETCH_LIMITS.timeoutMs),
+				signal,
 				credentials: "omit",
 				referrerPolicy: "no-referrer",
 				cache: "no-store",
@@ -10006,38 +10013,55 @@ function boundedAppFetch(options = {}) {
 				...peek && { headers: { range: `bytes=0-${maxBytes - 1}` } }
 			});
 		} catch (error) {
-			throw new AppFetchError("network", error instanceof Error ? error.message : String(error));
-		}
-		if (response.url && response.url !== url && !isAppFetchUrl(response.url)) throw new AppFetchError("host", "The host sent the request elsewhere");
-		if (!response.ok) {
-			await response.body?.cancel().catch(() => {});
-			throw new AppFetchError("status", `The host answered ${response.status}`, response.status);
-		}
-		if (!peek && Number(response.headers.get("content-length")) > maxBytes) {
-			await response.body?.cancel().catch(() => {});
-			throw new AppFetchError("too-large", "Too large");
+			clearTimeout(total);
+			clearTimeout(idle);
+			throw failure(error);
 		}
+		heard();
 		const parts = [];
 		let length = 0;
-		const reader = response.body?.getReader();
-		if (reader) try {
-			for (;;) {
-				const { done, value } = await reader.read();
-				if (done) break;
-				if (length + value.length > maxBytes) {
-					if (!peek) throw new AppFetchError("too-large", "Too large");
-					parts.push(value.subarray(0, maxBytes - length));
-					length = maxBytes;
-					break;
+		try {
+			if (response.url && response.url !== url && !isAppFetchUrl(response.url)) throw new AppFetchError("host", "The host sent the request elsewhere");
+			if (!response.ok) {
+				await response.body?.cancel().catch(() => {});
+				throw new AppFetchError("status", `The host answered ${response.status}`, response.status);
+			}
+			if (!peek && Number(response.headers.get("content-length")) > maxBytes) {
+				await response.body?.cancel().catch(() => {});
+				throw new AppFetchError("too-large", "Too large");
+			}
+			const reader = response.body?.getReader();
+			if (reader) {
+				const stop = () => {
+					reader.cancel().catch(() => {});
+				};
+				signal.addEventListener("abort", stop);
+				try {
+					for (;;) {
+						const { done, value } = await reader.read();
+						if (signal.aborted) throw failure(signal.reason);
+						if (done) break;
+						heard();
+						if (length + value.length > maxBytes) {
+							if (!peek) throw new AppFetchError("too-large", "Too large");
+							parts.push(value.subarray(0, maxBytes - length));
+							length = maxBytes;
+							break;
+						}
+						parts.push(value);
+						length += value.length;
+					}
+				} catch (error) {
+					if (error instanceof AppFetchError) throw error;
+					throw failure(error);
+				} finally {
+					signal.removeEventListener("abort", stop);
+					await reader.cancel().catch(() => {});
 				}
-				parts.push(value);
-				length += value.length;
 			}
-		} catch (error) {
-			if (error instanceof AppFetchError) throw error;
-			throw new AppFetchError("network", error instanceof Error ? error.message : String(error));
 		} finally {
-			await reader.cancel().catch(() => {});
+			clearTimeout(total);
+			clearTimeout(idle);
 		}
 		const bytes = new Uint8Array(length);
 		let at = 0;
@@ -10372,6 +10396,10 @@ var Apps = class {
 	/** What each `ref\0scope` holds, read once from its counter row and kept in step by the writes here. */
 	usage = /* @__PURE__ */ new Map();
 	queues = /* @__PURE__ */ new Map();
+	/** The keys read of each `ref\0scope` running, and the one every call made while it runs shares after it. */
+	keyReads = /* @__PURE__ */ new Map();
+	/** Uninstalls begun per reference, for this engine's life: a storage write that waited its turn across one is refused. */
+	uninstalls = /* @__PURE__ */ new Map();
 	timer = null;
 	/** Drops what `staged` holds past `STAGED.ms`, set while it holds anything: a closed install screen sends no call. */
 	sweep = null;
@@ -11659,6 +11687,8 @@ var Apps = class {
 			STORES$1.appStorage,
 			...builtIn ? [STORES$1.settings] : []
 		], "readwrite");
+		this.uninstalls.set(ref, (this.uninstalls.get(ref) ?? 0) + 1);
+		this.held.delete(ref);
 		tx.objectStore(STORES$1.apps).delete(ref);
 		tx.objectStore(STORES$1.appStorage).delete(rowsOf(ref));
 		if (builtIn) markBuiltIns(tx.objectStore(STORES$1.settings), (marks) => {
@@ -11737,6 +11767,7 @@ var Apps = class {
 	* it, so the app can make room.
 	*/
 	async storageSet({ ref, scope, key, value, digest }) {
+		const uninstalls = this.uninstalls.get(ref);
 		const app = await this.runningOrFail(ref, digest);
 		const where = this.scopeOf(scope), name = this.keyOf(key);
 		let text;
@@ -11767,6 +11798,10 @@ var Apps = class {
 				this.usage.delete(`${app.ref}\0${where}`);
 				fail("bad-scope", "Not a chat of this profile");
 			}
+			if (this.uninstalls.get(app.ref) !== uninstalls) {
+				this.usage.delete(`${app.ref}\0${where}`);
+				fail("not-installed", "This app is not installed");
+			}
 			writing.put({
 				ref: app.ref,
 				scope: where,
@@ -11806,7 +11841,28 @@ var Apps = class {
 	}
 	async storageKeys({ ref, scope, digest }) {
 		const app = await this.runningOrFail(ref, digest);
-		return (await wrap((await store(STORES$1.appStorage, "readonly")).getAllKeys(keysOf(app.ref, this.scopeOf(scope))))).map((k) => k[2]);
+		const where = this.scopeOf(scope);
+		return this.keysOnce(`${app.ref}\0${where}`, async () => {
+			return (await wrap((await store(STORES$1.appStorage, "readonly")).getAllKeys(keysOf(app.ref, where)))).map((k) => k[2]);
+		});
+	}
+	/**
+	* One read of a scope's keys at a time. Every call made while one runs shares the single read that starts after it, so
+	* it still sees each write done before it was made: 50 calls a second on a full scope held the profile's database,
+	* a chat message's write waited 17 s behind them.
+	*/
+	keysOnce(id, read) {
+		const waiting = this.keyReads.get(id);
+		if (waiting) return waiting.next ??= waiting.running.then(() => this.keysStart(id, read), () => this.keysStart(id, read));
+		return this.keysStart(id, read);
+	}
+	keysStart(id, read) {
+		const slot = { running: read() };
+		this.keyReads.set(id, slot);
+		slot.running.catch(() => {}).then(() => {
+			if (this.keyReads.get(id) === slot && !slot.next) this.keyReads.delete(id);
+		});
+		return slot.running;
 	}
 	/** An app's storage in every scope, as export files (WISP 1200 § Where installed apps live), offered before an uninstall. */
 	async exportData({ ref }) {
@@ -18654,6 +18710,7 @@ var FileDesk = class {
 			announced: /* @__PURE__ */ new Map(),
 			saving: Promise.resolve(),
 			lastSaved: /* @__PURE__ */ new Map(),
+			unsaved: /* @__PURE__ */ new Map(),
 			files: void 0
 		};
 		made.files = new ChatFiles({
@@ -18693,6 +18750,7 @@ var FileDesk = class {
 		const chat = this.chat(linkId);
 		if (open) chat.files.attach();
 		else chat.files.detach();
+		if (!open) for (const [id, { record }] of [...chat.unsaved]) this.save(chat, id, record);
 		for (const record of chat.files.records()) this.show(linkId, chat, record, chat.files.transferred(record.direction, record.id));
 		this.deps.changed();
 	}
@@ -18878,6 +18936,8 @@ var FileDesk = class {
 		const wireId = out ? fileId.slice(`${linkId}-out-`.length) : [...chat.local].find(([, local]) => local === fileId)?.[0];
 		if (!wireId) return;
 		chat.files.forget(out ? "out" : "in", wireId);
+		clearTimeout(chat.unsaved.get(fileId)?.timer);
+		chat.unsaved.delete(fileId);
 		if (!out) {
 			chat.local.delete(wireId);
 			chat.announced.delete(wireId);
@@ -18895,7 +18955,9 @@ var FileDesk = class {
 	}
 	/** The chat went away: its transfers stop here. */
 	drop(linkId) {
-		this.chats.get(linkId)?.files.detach();
+		const chat = this.chats.get(linkId);
+		chat?.files.detach();
+		for (const { timer } of chat?.unsaved.values() ?? []) clearTimeout(timer);
 		this.chats.delete(linkId);
 		for (const id of [
 			...this.moved.keys(),
@@ -19081,23 +19143,45 @@ var FileDesk = class {
 		this.show(linkId, chat, record, transferred, progress);
 		if (offered) this.deps.flush?.();
 		const id = record.direction === "out" ? outgoingFileId(linkId, record.id) : chat.local.get(record.id);
-		const now = Date.now();
-		if (!progress || now - (chat.lastSaved.get(id) ?? 0) >= SAVE_EVERY_MS) {
-			chat.lastSaved.set(id, now);
-			const transfer = this.deps.transfers.get(id);
-			chat.saving = chat.saving.then(() => fileStore.patch(id, {
-				wire3: record,
-				...transfer && { transfer: {
-					state: transfer.state,
-					transferred: transfer.transferred,
-					size: transfer.size,
-					error: transfer.error
-				} }
-			})).catch(() => {});
+		const now = Date.now(), last = chat.lastSaved.get(id) ?? 0;
+		if (!progress || now - last >= SAVE_EVERY_MS) this.save(chat, id, record);
+		else {
+			const held = chat.unsaved.get(id);
+			if (held) held.record = record;
+			else {
+				const timer = setTimeout(() => {
+					const newest = chat.unsaved.get(id);
+					if (newest) this.save(chat, id, newest.record);
+				}, last + SAVE_EVERY_MS - now);
+				timer.unref?.();
+				chat.unsaved.set(id, {
+					record,
+					timer
+				});
+			}
 		}
 		if (record.state === "done" && record.direction === "in") this.deps.wireIds(linkId)?.add(record.id);
 		this.deps.changed(progress ? 250 : 50);
 	}
+	/** Writes a transfer's record and the view of it, after the chat's writes before it; what was held back goes with it. */
+	save(chat, id, record) {
+		const held = chat.unsaved.get(id);
+		if (held) {
+			clearTimeout(held.timer);
+			chat.unsaved.delete(id);
+		}
+		chat.lastSaved.set(id, Date.now());
+		const transfer = this.deps.transfers.get(id);
+		chat.saving = chat.saving.then(() => fileStore.patch(id, {
+			wire3: record,
+			...transfer && { transfer: {
+				state: transfer.state,
+				transferred: transfer.transferred,
+				size: transfer.size,
+				error: transfer.error
+			} }
+		})).catch(() => {});
+	}
 	show(linkId, chat, record, transferred, progress = false) {
 		const id = record.direction === "out" ? outgoingFileId(linkId, record.id) : chat.local.get(record.id);
 		if (!id) return;
@@ -23693,8 +23777,12 @@ var MeshHubs = class {
 			else if (!live.myHubs.length) for (const key of [...this.host.edges(groupId).keys(), ...hubs]) out.add(key);
 			else {
 				for (const key of live.myHubs) out.add(key);
-				const admin = session.admin;
-				if (admin && legacy.includes(admin)) out.add(admin);
+				const admin = session.admin, mine = this.host.edges(groupId);
+				const hubUp = live.myHubs.some((key) => {
+					const id = mine.get(key);
+					return !!id && this.host.linkReady(id);
+				});
+				if (admin && (legacy.includes(admin) || !hubUp)) out.add(admin);
 			}
 			if (session.isAdmin) for (const key of legacy) out.add(key);
 		}
@@ -24483,6 +24571,11 @@ var ACCEPT_AGAINS = 5;
 var REWELCOME_MS = ACCEPT_AGAIN_MS / 2;
 /** Invitee side: the invitations one contact chat may have waiting here at a time. More are answered as declined. */
 var MAX_INVITATIONS_PER_CHAT = 4;
+/** Invitee side, removed and invited again: the chat that let me into the group I kept, if it is its admin's. */
+var keptAdminChat = (kept) => {
+	const admin = kept?.state && rosterAdmin(kept.state.chain[kept.state.chain.length - 1].m);
+	return admin ? kept.contacts?.[admin] : void 0;
+};
 /** What an invitation says of its group, kept as a claim within what a group can be: an epoch from 0, a roster of 1 to the most a group holds. */
 function invitationClaims(frame) {
 	const e = Number.isSafeInteger(frame.e) ? frame.e : 0, n = Number.isSafeInteger(frame.n) ? frame.n : 1;
@@ -25026,7 +25119,7 @@ var Groups = class {
 		const previous = group.previous;
 		if (!previous) return this.forget(group.id, false);
 		if (owed) previous.declined = owed;
-		else delete previous.declined;
+		else if (previous.declined?.linkId === group.invitation?.linkId) delete previous.declined;
 		this.acceptSaid.delete(group.id);
 		this.stored.set(group.id, previous);
 		if (previous.state) this.attach(previous.state);
@@ -25902,7 +25995,7 @@ var Groups = class {
 					return;
 				}
 				if (existing?.state && existing.state.status === "active") {
-					if (this.sessions.get(g)?.admin === frame.admin) this.host.sendOnLink(linkId, {
+					if (this.sessions.get(g)?.admin === frame.admin && existing.contacts?.[frame.admin] === linkId) this.host.sendOnLink(linkId, {
 						t: "group-decline",
 						g
 					});
@@ -25910,7 +26003,7 @@ var Groups = class {
 				}
 				if (existing?.invitation?.seedB64 && (existing.invitation.linkId !== linkId || existing.invitation.admin !== frame.admin)) return;
 				if (existing?.left && (existing.left.admin !== frame.admin || existing.contacts?.[existing.left.admin] !== linkId)) return;
-				if (existing?.invitation && !existing.state && existing.invitation.linkId !== linkId && !existing.invitation.genesis && !existing.invitation.takenBack) return;
+				if (existing?.invitation && !existing.state && existing.invitation.linkId !== linkId && !(existing.invitation.genesis && linkId === keptAdminChat(existing.previous)) && !existing.invitation.takenBack) return;
 				if ([...this.stored.values()].filter((x) => x.invitation && !x.invitation.takenBack).length >= 32) return;
 				if (!(existing?.invitation && !existing.invitation.takenBack && existing.invitation.linkId === linkId) && [...this.stored.values()].filter((x) => x.invitation?.linkId === linkId && !x.invitation.takenBack).length >= MAX_INVITATIONS_PER_CHAT) {
 					try {
@@ -26044,10 +26137,12 @@ var Groups = class {
 				const group = this.stored.get(g);
 				if (!group?.invitation?.seedB64 || group.invitation.linkId !== linkId || !Array.isArray(frame.commits)) return;
 				if (group.invitation.pieces.reduce((n, p) => n + p.commits.length, 0) + frame.commits.length > 1024) return;
+				const commits = frame.commits.map(parseGroupCommit);
+				if (commits.some((c) => !c || c.g !== g)) return;
 				group.invitation.pieces.push({
 					t: "group-chain",
 					g,
-					commits: frame.commits
+					commits
 				});
 				return;
 			}
@@ -26767,6 +26862,7 @@ var Groups = class {
 	attach(state, frames = []) {
 		const session = new GroupSession(state, {
 			clock: () => this.now(),
+			nick: () => this.host.myNick?.(),
 			seqFloor: () => this.host.seqFloor?.() ?? 0,
 			adminWork: () => this.host.adminWork?.(state.id) ?? true,
 			adminTurn: () => this.host.adminTurn?.(state.id) ?? Promise.resolve(true),
@@ -27139,10 +27235,7 @@ function mergeGroupPay(current, frame, author, members) {
 		...next,
 		by: frame.by
 	};
-	if (next.state === "paid" && !next.by && next.from === "*" && next.claims?.length === 1) next = {
-		...next,
-		by: next.claims[0]
-	};
+	if (next.from === "*" && next.rail === "lightning" && next.by) next = (({ by: _, ...rest }) => rest)(next);
 	if (next.state === "paid" && next.from !== "*" && !next.by) next = {
 		...next,
 		by: next.from
@@ -27173,7 +27266,7 @@ function authoredNote(p, at, all, current, memberOf = () => void 0) {
 		const from = p.group ? "*" : at.peer;
 		if (!from) return null;
 		const payment = all.find((x) => x.kind === "payment" && x.direction === "in" && x.requestId === p.id && x.state === "settled");
-		const by = !p.group ? from : payment ? memberOf(payment.linkId) : current?.claims?.length === 1 ? current.claims[0] : void 0;
+		const by = !p.group ? from : payment ? memberOf(payment.linkId) : void 0;
 		const st = p.state === "settled" ? "paid" : p.state === "failed" || p.state === "reclaimed" ? "closed" : "open";
 		return {
 			...base,
@@ -27229,7 +27322,6 @@ var GroupPayments = class {
 			if (!frame || !membership) return;
 			const next = mergeGroupPay((await this.load(groupId)).get(frame.id), frame, author, membership.members);
 			if (next) await this.write(groupId, membership.me, next);
-			await this.author();
 		});
 	}
 	/** Says what changed about this device's own payments in groups. The engine calls it whenever payments change. */
@@ -28168,6 +28260,8 @@ var TICK_MS = 3e4;
 /** The contact's pointer is read this often while something is outstanding either way, else rarely. */
 var POLL_BUSY_MS = 3e4;
 var POLL_IDLE_MS = 3e5;
+/** No two reads of the contact's pointer come closer than this, whatever asked for them. */
+var POLL_GAP_MS = 5e3;
 /** The manifest and its addresses are signed again before they get this old (they live seven days). */
 var RENEW_AFTER_MS = 3456e5;
 /** My pointer is published again this often while something is held, in case a relay forgot it. */
@@ -28202,6 +28296,9 @@ var HoldEngine = class {
 	/** Chats whose pointer the relays' request budget held back: it goes out as soon as the budget frees a request. */
 	pointerDue = /* @__PURE__ */ new Set();
 	retryTimer = null;
+	/** A read the contact's word asked for, one waiting per chat, and when the last such read went out. */
+	peerPolls = /* @__PURE__ */ new Map();
+	lastPeerPoll = /* @__PURE__ */ new Map();
 	constructor(host) {
 		this.host = host;
 	}
@@ -28222,6 +28319,8 @@ var HoldEngine = class {
 		if (this.timer) clearTimeout(this.timer);
 		if (this.retryTimer) clearTimeout(this.retryTimer);
 		this.timer = this.retryTimer = null;
+		for (const timer of this.peerPolls.values()) clearTimeout(timer);
+		this.peerPolls.clear();
 		await Promise.allSettled([...this.chains.values()]);
 	}
 	serialize(linkId, run) {
@@ -28303,7 +28402,24 @@ var HoldEngine = class {
 			if (said.peerTop !== void 0 && said.peerTop > hold.inSeq) this.expecting.set(linkId, said.peerTop);
 		});
 		this.host.changed();
-		if (this.expecting.has(linkId)) this.wake(linkId);
+		if (this.expecting.has(linkId)) this.peerPoll(linkId);
+	}
+	/**
+	* The contact says it holds items for this side: its pointer is read soon, but at the pace the chat's own reads keep.
+	* Only this person's action (`wake`) skips the gap; the contact's word, however often it comes, makes one read wait
+	* per chat, never within `POLL_GAP_MS` of the last read nor within `POLL_BUSY_MS` of the last read it asked for.
+	*/
+	peerPoll(linkId) {
+		if (!this.running || this.peerPolls.has(linkId)) return;
+		const at = Math.max((this.lastPoll.get(linkId) ?? 0) + POLL_GAP_MS, (this.lastPeerPoll.get(linkId) ?? -Infinity) + POLL_BUSY_MS);
+		this.peerPolls.set(linkId, setTimeout(() => {
+			this.peerPolls.delete(linkId);
+			const hold = this.state(linkId);
+			if (!this.running || !this.expecting.has(linkId) || !hold.enabled || !hold.peerAllows || !this.keysFor(linkId)) return;
+			if ((this.lastPoll.get(linkId) ?? 0) + POLL_GAP_MS > this.now()) return this.peerPoll(linkId);
+			this.lastPeerPoll.set(linkId, this.now());
+			this.serialize(linkId, () => this.poll(linkId)).catch(() => {});
+		}, Math.max(0, at - this.now())));
 	}
 	/** Ways of paying the contact allowed at the last session, whatever the hold settings; undefined before any. */
 	lastPeerMethods(linkId) {
@@ -28520,6 +28636,9 @@ var HoldEngine = class {
 		this.errors.delete(linkId);
 		this.chains.delete(linkId);
 		this.pointerDue.delete(linkId);
+		clearTimeout(this.peerPolls.get(linkId));
+		this.peerPolls.delete(linkId);
+		this.lastPeerPoll.delete(linkId);
 	}
 	/**
 	* Publishes my pointer. One the relays' request budget held back is no failure: the item is stored, the pointer is
@@ -28621,7 +28740,7 @@ var HoldEngine = class {
 			await this.serialize(linkId, () => this.maintain(linkId)).catch(() => {});
 			const busy = hold.outbox.some((e) => e.state !== "failed") || this.expecting.has(linkId);
 			const due = (this.lastPoll.get(linkId) ?? 0) + (busy ? POLL_BUSY_MS : POLL_IDLE_MS) <= this.now();
-			if (hold.peerAllows && (all || due) && (this.lastPoll.get(linkId) ?? 0) + 5e3 <= this.now()) await this.serialize(linkId, () => this.poll(linkId)).catch(() => {});
+			if (hold.peerAllows && (all || due) && (this.lastPoll.get(linkId) ?? 0) + POLL_GAP_MS <= this.now()) await this.serialize(linkId, () => this.poll(linkId)).catch(() => {});
 		}
 		if (this.running) this.timer = setTimeout(() => void this.tick(), TICK_MS);
 	}
@@ -30801,6 +30920,9 @@ var CashuWallet = class CashuWallet {
 			});
 			const written = (await this.swapsAt(mint)).filter((s) => s.kind === "receive");
 			let swap = written.find((s) => s.token === token);
+			const own = payment?.(0, mint);
+			const sameRecord = (a, b) => a?.id === b?.id && a?.linkId === b?.linkId && a?.direction === b?.direction;
+			if (swap && !sameRecord(swap.payment, own)) throw engineError("ecashBeingReceived");
 			if (swap?.finished) return {
 				amount: swap.tx?.amount ?? 0,
 				mint,
@@ -31581,6 +31703,18 @@ var METHOD_NAME = {
 var allows = (link, method) => method === "arkade" ? link.supportsArkPayments : method === "bark" ? link.supportsBarkPayments : method === "bitcoin" ? link.supportsBitcoinPayments : method === "fedimint" ? link.supportsFedimintPayments : method === "spark" ? link.supportsSparkPayments : link.supportsUsdtPayments;
 /** Federation ecash is counted in msats; a chat counts whole sats. */
 var fedimintSats = (msats) => Math.floor(msats / 1e3);
+/**
+* Which notes these are, whatever the spelling: the Fedimint client drops whitespace anywhere and reads URL-safe or
+* standard base64, so the digest is of the bytes. Text that is no base64 is digested without its whitespace.
+*/
+function fedimintNotesDigest(notes) {
+	const text = notes.replace(/\s+/g, "");
+	try {
+		return digestHex(toBase64Url(fromBase64Url(text.replace(/=+$/, ""))));
+	} catch {
+		return digestHex(text);
+	}
+}
 /** The distinct wallets of a per-network set (one object may stand for both). */
 var distinct = (each) => [...new Set(WALLET_NETWORKS.map((n) => each[n]))];
 /**
@@ -32410,6 +32544,11 @@ var PaymentDesk = class {
 				return;
 			}
 		}
+		if (target && request.network && request.network !== walletNetworkOf(target.network)) {
+			if (!federations) return;
+			federations = void 0;
+			target = void 0;
+		}
 		const network = request.network ?? paymentNetwork({
 			target,
 			mints: parseCashuRequestPayload(findEndpoint(request.endpoints, ENDPOINT.cashu) ?? ""),
@@ -32422,8 +32561,10 @@ var PaymentDesk = class {
 		}
 		const allowed = (method) => (held ? !!link?.paymentEnabled(method) : !!link?.allowsPayment(method)) && this.accepts(linkId, method, network);
 		const bolt11 = allowed("lightning") ? findEndpoint(request.endpoints, ENDPOINT.bolt11) : void 0;
-		const chain = bolt11 ? decodeBolt11(bolt11)?.network : void 0;
-		const invoice = bolt11 && !(network === "mainnet" && chain && chain !== "bitcoin") ? bolt11 : void 0;
+		const decoded = bolt11 ? decodeBolt11(bolt11) : null;
+		const chain = decoded?.network;
+		const sameTarget = !(target?.method === "bitcoin" || target?.method === "arkade" || target?.method === "bark") || chain === "bitcoin" === (walletNetworkOf(target.network) === "mainnet");
+		const invoice = bolt11 && decoded?.amountSat === amount && sameTarget && !(network === "mainnet" && chain && chain !== "bitcoin") ? bolt11 : void 0;
 		const mints = allowed("cashu") ? parseCashuRequestPayload(findEndpoint(request.endpoints, ENDPOINT.cashu) ?? "").filter((mint) => mintNetwork(mint) === network) : [];
 		if (!target && !invoice && !mints.length && !federations) return;
 		await this.save({
@@ -32518,6 +32659,14 @@ var PaymentDesk = class {
 			return;
 		}
 		const inspected = this.wallet.inspect?.(payment.endpoint[1]);
+		if (payment.endpoint[0] === ENDPOINT.cashu && inspected !== void 0 && inspected?.kind !== "token") {
+			link.sendPaymentResult({
+				id: payment.id,
+				ok: false,
+				error: "That is not a valid ecash token"
+			});
+			return;
+		}
 		if (inspected?.kind === "token" && !this.accepts(linkId, "cashu", mintNetwork(inspected.mint))) {
 			link.sendPaymentResult({
 				id: payment.id,
@@ -33506,7 +33655,7 @@ var PaymentDesk = class {
 	/**
 	* Notes from the contact. Redeemed only when they are of a federation we joined and this chat allows Fedimint;
 	* otherwise refused unredeemed, and the contact takes them back. Written down (with the notes) before redeeming:
-	* an interrupted redeem is finished from the journal, never lost.
+	* an interrupted redeem is finished from the journal, never lost. The chat says it once the federation answered.
 	*/
 	async receiveFedimint(linkId, payment) {
 		const link = this.host.getLink(linkId);
@@ -33579,6 +33728,17 @@ var PaymentDesk = class {
 			await refuse(`${networkLabel(walletNetworkOf(network))} Fedimint is off in this chat`);
 			return;
 		}
+		const digest = fedimintNotesDigest(notes);
+		const spelled = digestHex(notes.trim());
+		const before = [...this.payments.values()].find((p) => (p.notesDigest === digest || p.notesDigest === spelled) && p.direction === "in" && p.kind === "payment");
+		if (before) {
+			link.sendPaymentResult({
+				id: payment.id,
+				ok: false,
+				error: before.state === "failed" ? before.error ?? "These notes were already redeemed" : "These notes were already received"
+			});
+			return;
+		}
 		await this.save({
 			id: payment.id,
 			linkId,
@@ -33591,16 +33751,8 @@ var PaymentDesk = class {
 			createdAt: payment.timestamp,
 			requestId: payment.requestId,
 			federation: found.federation,
-			token: notes
-		});
-		await this.host.storeMessage({
-			linkId,
-			id: `peer_${payment.timestamp}`,
-			text: `⚡ ${amount.toLocaleString()} ${network === "bitcoin" ? "sats" : "test sats"} on Fedimint`,
-			sender: "peer",
-			timestamp: payment.timestamp,
-			via: "datalink",
-			paymentId: payment.id
+			token: notes,
+			notesDigest: digest
 		});
 		await this.finishRedeem(this.payments.get(payment.id));
 	}
@@ -33648,8 +33800,30 @@ var PaymentDesk = class {
 				ok: false,
 				error: "These notes were already redeemed"
 			});
+			try {
+				await this.host.storeMessage({
+					linkId: payment.linkId,
+					id: `peer_${payment.createdAt}_refused`,
+					text: "Could not receive Fedimint ecash: These notes were already redeemed",
+					sender: "peer",
+					timestamp: payment.createdAt,
+					via: "datalink"
+				});
+			} catch {}
 			return;
 		}
+		if (state) {
+			const test = fedimint.federation(payment.federation)?.network !== "bitcoin";
+			await this.host.storeMessage({
+				linkId: payment.linkId,
+				id: `peer_${payment.createdAt}`,
+				text: `⚡ ${payment.amount.toLocaleString()} ${test ? "test sats" : "sats"} on Fedimint`,
+				sender: "peer",
+				timestamp: payment.createdAt,
+				via: "datalink",
+				paymentId: id
+			});
+		}
 		if (state !== "done") return;
 		await this.save({
 			...this.current(payment),
@@ -34432,6 +34606,11 @@ var DEFAULT_SETTINGS = {
 var CARD_RESTORE_MOST = 50;
 var CARD_RESTORE_MS = 6048e5;
 /**
+* A look for those cards reads the chat's whole history, so a chat starts one at a time, at most once this often: a
+* contact that says `edit/1` again and again on a session gets one look now and one more after the gap, whatever the count.
+*/
+var CARD_RESTORE_EVERY_MS = 3e4;
+/**
 * A round trip that moved is shown at once, and written to disk by itself (relaxed, no disk sync of its own) at most
 * this often: a 15 s sample on an internet path moves by 10 ms most of the time. A power cut loses at most this much
 * of the round trip's drift, never a row; any other change to the story writes the latest round trip with it.
@@ -34488,6 +34667,8 @@ var SPARE_INVITE_WARM_AFTER_TAKE_MS = 3e4;
 * first 11 s, and read nothing more for the rest of the minute, the others' answers included (bug hunt r7a, 2026-09-29).
 */
 var STARTUP_QUIET_MS = 15e3;
+/** At start, how long links start in one task before the page gets the thread back (`startNow`). */
+var START_SLICE_MS = 10;
 var SPARE_INVITE_MAX_AGE_MS = 9e5;
 /** How far before this clock a warm packet is dated (`warmKey`): further than a contact's clock is ever behind. */
 var WARM_DATED_BACK_MS = 864e5;
@@ -34630,8 +34811,12 @@ var GhostlyNode = class GhostlyNode {
 	/** Other profiles of this device, looked at for new messages (WISP 04 § Checking other profiles). */
 	profilePeek;
 	/** Whether this device's WebRTC attempts say direct connections are blocked on its network (`directPath.ts`). */
-	directPath = new DirectPathWatch(() => {
-		if (!this.shuttingDown) this.emitState();
+	directPath = new DirectPathWatch((blocked) => {
+		if (this.shuttingDown) return;
+		this.emitState();
+		if (blocked) {
+			for (const [linkId, live] of this.links) if (live.stored.group && !live.link?.isDataLinkOpen) this.edgeWithoutRtc(linkId);
+		}
 	});
 	/** Whether this device's clock seems to be off, from what the relays' answers and several contacts' packets say (`clockWatch.ts`). */
 	clock = new ClockWatch(() => {
@@ -34641,9 +34826,11 @@ var GhostlyNode = class GhostlyNode {
 	/**
 	* Edges of groups whose WebRTC did not connect (`edgeWithoutRtc`): they go on as an app with no WebRTC does, over a
 	* native transport, until the member is seen online again after a packet said it was gone (`away`, `edgeRtcPresence`).
-	* Not kept: the next start tries WebRTC first again.
+	* Not kept: the next start tries WebRTC first again. `held`: it stays native on a return too, until the network changes.
 	*/
 	edgeRtcOff = /* @__PURE__ */ new Map();
+	/** Edges put back on WebRTC by a return (`edgeRtcPresence`) since the network last changed: failing again holds them native. */
+	edgeRtcRetried = /* @__PURE__ */ new Set();
 	pollIntervals;
 	localFetch;
 	links = /* @__PURE__ */ new Map();
@@ -34735,6 +34922,8 @@ var GhostlyNode = class GhostlyNode {
 	outboxes = /* @__PURE__ */ new Map();
 	/** My edits on their way, per 1:1 chat (WISP 400 § Edits). */
 	editQueues = /* @__PURE__ */ new Map();
+	/** Per 1:1 chat, its look for cards to send again (`restoreCardsSoon`): when the last began, and what waits. */
+	cardRestores = /* @__PURE__ */ new Map();
 	/** The contacts' edits of messages not here yet. */
 	editBuffer = new EditBuffer();
 	/** Received status card updates, applied at most once a second per message (WISP 405 · Status Cards). */
@@ -35301,7 +35490,7 @@ var GhostlyNode = class GhostlyNode {
 			subject
 		}),
 		publish: (seed, records) => this.transport.publish(identityFromSeed(seed), records),
-		resolve: async (key) => (await this.transport.resolve(key))?.records ?? null
+		resolve: async (key) => (await this.transport.resolve(key, { background: true }))?.records ?? null
 	});
 	/** The profile's did:dht: a key of its own, public, never tied to a chat (WISP 310-did-dht). */
 	did = new ProfileDid({
@@ -35856,7 +36045,7 @@ var GhostlyNode = class GhostlyNode {
 			const fresh = !this.walletFeedbackIds.has(tx.id);
 			this.walletFeedbackIds.add(tx.id);
 			if (this.walletFeedbackReady && fresh && tx.amount > 0 && tx.timestamp >= this.feedbackStartedAt) {
-				if (tx.kind === "lightning-in" || tx.kind === "ecash-in") this.feedback("coin", tx.id, void 0, false, tx.note === "Test coins from the test mint" ? "testcoins" : void 0);
+				if (tx.kind === "lightning-in" || tx.kind === "ecash-in") this.feedback("coin", tx.id, void 0, false, tx.kind === "lightning-in" && tx.note === "Test coins from the test mint" ? "testcoins" : void 0);
 				if (tx.kind === "lightning-out") this.feedback("confirmed", tx.id);
 			}
 		}
@@ -35995,12 +36184,16 @@ var GhostlyNode = class GhostlyNode {
 			if (note) this.reactionNotes.set(`group:${group.id}`, note);
 		}
 		this.publicProfiles.start();
+		const pause = pacer(START_SLICE_MS);
 		if (this.networkOn) for (const linkId of this.nativeStartOrder([...history.keys()])) {
+			if (!this.networkOn || this.shuttingDown) break;
 			const messages = history.get(linkId);
 			if (!this.links.has(linkId)) continue;
 			this.startLink(linkId, messages);
 			if (!this.links.get(linkId)?.stored.group) this.refreshPublicProfiles({ linkId }).catch(() => {});
+			await pause();
 		}
+		if (this.shuttingDown) return;
 		this.emitState();
 		if (this.networkOn) {
 			this.hold.start();
@@ -36433,6 +36626,8 @@ var GhostlyNode = class GhostlyNode {
 		this.publicProfiles.stop();
 		this.publicActivity.clear();
 		for (const queue of this.editQueues.values()) queue.stop();
+		for (const restore of this.cardRestores.values()) clearTimeout(restore.timer);
+		this.cardRestores.clear();
 		this.groupEdits.stop();
 		this.reactions.stop();
 		this.cardEdits.stop();
@@ -37389,11 +37584,13 @@ var GhostlyNode = class GhostlyNode {
 		this.outboxes.delete(linkId);
 		this.editQueues.get(linkId)?.stop();
 		this.editQueues.delete(linkId);
+		clearTimeout(this.cardRestores.get(linkId)?.timer);
+		this.cardRestores.delete(linkId);
 		this.editBuffer.forget(linkId);
 		live.carried?.stop();
+		this.links.delete(linkId);
 		live.link?.stop(true);
 		live.caps?.stop();
-		this.links.delete(linkId);
 		this.identities.forget(linkId);
 		this.nostrSocial.forgetLink(linkId);
 		this.hold.forgetLink(linkId);
@@ -37408,9 +37605,10 @@ var GhostlyNode = class GhostlyNode {
 	renameLink({ linkId, label }) {
 		const live = this.links.get(linkId);
 		if (!live) return;
+		const clean = sanitizeDisplayText(label.trim().replace(/\s+/gu, " "), 48)?.replace(/ {2,}/g, " ");
 		live.stored = {
 			...live.stored,
-			label: label.trim().slice(0, 48) || void 0
+			label: clean
 		};
 		db.patchLink(linkId, { label: live.stored.label });
 		this.emitState();
@@ -37440,6 +37638,10 @@ var GhostlyNode = class GhostlyNode {
 			this.transport.networkChanged?.();
 			this.directPath.reset();
 		}
+		if (params.network) {
+			for (const off of this.edgeRtcOff.values()) off.held = false;
+			this.edgeRtcRetried.clear();
+		}
 		if (params.network) for (const failed of this.nativeFailed.values()) {
 			failed.at = 0;
 			failed.wait = 0;
@@ -37930,6 +38132,42 @@ var GhostlyNode = class GhostlyNode {
 		}
 		if (changed.length) await this.messagesChanged(linkId, changed);
 	}
+	/**
+	* `restoreCards`, then what waits goes. One look at a time per chat, at most once per `CARD_RESTORE_EVERY_MS`: asked
+	* again while one runs or within the gap, one more look goes once it is over, and what waits still goes at once (the
+	* edit queue reads the history once a session).
+	*/
+	restoreCardsSoon(linkId) {
+		const flush = () => this.editsFor(linkId).flush().catch(() => {});
+		let state = this.cardRestores.get(linkId);
+		if (!state) this.cardRestores.set(linkId, state = {
+			at: -Infinity,
+			busy: false,
+			again: false
+		});
+		if (state.busy) {
+			state.again = true;
+			return;
+		}
+		const wait = state.at + CARD_RESTORE_EVERY_MS - Date.now();
+		if (wait > 0) {
+			state.timer ??= setTimeout(() => {
+				state.timer = void 0;
+				if (this.cardRestores.get(linkId) === state) this.restoreCardsSoon(linkId);
+			}, wait);
+			flush();
+			return;
+		}
+		state.busy = true;
+		state.at = Date.now();
+		this.restoreCards(linkId).catch(() => {}).then(flush).finally(() => {
+			state.busy = false;
+			if (state.again && this.cardRestores.get(linkId) === state) {
+				state.again = false;
+				this.restoreCardsSoon(linkId);
+			}
+		});
+	}
 	/** My edits in one 1:1 chat on their way to the contact. */
 	editsFor(linkId) {
 		let queue = this.editQueues.get(linkId);
@@ -39883,8 +40121,15 @@ var GhostlyNode = class GhostlyNode {
 		if (typing === true && this.settings.sendTyping !== false) this.groups.setTyping(groupId, true, typingActivity(kind, status));
 		else this.groups.setTyping(groupId, false);
 	}
+	/**
+	* A call's signaling: read the contact's record fast, for its `_call`. A compatibility chat's only: a paired chat's
+	* signals go only over its live session (WISP 601), so a read finds nothing for the call, and its data link keeps
+	* its own fast reads (an offer's look would be cut short by a call's `fast: false`).
+	*/
 	setFastPoll({ linkId, fast }) {
-		this.links.get(linkId)?.link?.session.setFastPoll(fast);
+		const live = this.links.get(linkId);
+		if (live?.stored.profile) return;
+		live?.link?.session.setFastPoll(fast);
 	}
 	/** Used by the viewer: a request to a service some peer shares with us. */
 	async request(peerPubKeyZ32, serviceId, request) {
@@ -40145,7 +40390,8 @@ var GhostlyNode = class GhostlyNode {
 		for (const url of defaults) try {
 			answered.push((await this.wallet.checkMint(url)).url);
 		} catch (error) {
-			last = error;
+			const unreachable = error instanceof Error ? parseEngineError(error.message) : null;
+			last = unreachable?.code === "mintUnreachable" ? Object.assign(engineError("hostUnreachable", unreachable.values), { cause: error }) : error;
 		}
 		if (!answered.length) throw last instanceof Error ? last : /* @__PURE__ */ new Error("No mint answered");
 		await this.updateSettings({ settings: {
@@ -41823,6 +42069,7 @@ var GhostlyNode = class GhostlyNode {
 		if (!live?.stored.group) return;
 		this.links.delete(linkId);
 		this.edgeRtcOff.delete(linkId);
+		this.edgeRtcRetried.delete(linkId);
 		this.groupWakeReceived.delete(linkId);
 		this.quietEdges.delete(linkId);
 		this.groupNativeWaiting.delete(linkId);
@@ -42103,15 +42350,19 @@ var GhostlyNode = class GhostlyNode {
 				},
 				onDirectEvidence: (evidence) => {
 					this.directPath.note(peer, evidence);
-					if (!entry && evidence !== "open" && evidence !== "closed") this.edgeWithoutRtc(linkId);
+					if (evidence !== "open" && evidence !== "closed") this.edgeWithoutRtc(linkId);
 				},
 				onAnswersRefused: () => {
-					if (!entry) this.edgeWithoutRtc(linkId);
+					this.edgeWithoutRtc(linkId);
 				},
 				onDataLinkState: (state) => {
 					traceJoin(group, `link.${state}`, { role });
 					if (state === "open" || live.dataLink === "open") live.lastSyncAt = Date.now();
 					if (state === "open" && !entry) this.groups.edgeOpen(group, peer);
+					if (state === "open") {
+						const off = this.edgeRtcOff.get(linkId);
+						if (off) off.held = true;
+					}
 					if (state === "open" && !entry && member()) this.desk.replay(linkId).catch(() => {});
 					live.dataLink = state;
 					if (entry && state !== "open" && live.entryDone) this.closeGroupLink(linkId).catch(() => {});
@@ -42153,13 +42404,19 @@ var GhostlyNode = class GhostlyNode {
 	* app with no WebRTC (WISP 902 § Transports): it runs its native endpoints and says so in its packet (`_tr`, with no
 	* `webrtc/1`), the member's app starts its own for it as it does for a Linux Desktop, and the two meet over Iroh
 	* through its relay. Until the member comes back (`edgeRtcPresence`), or for this run of the app.
+	* An entry session of a group's link too: there, the admin's packet was seen and the session never went live, and the
+	* join stayed at "Let in: getting the group's keys" for as long as the joiner waited (2026-10-16).
 	*/
 	async edgeWithoutRtc(linkId) {
 		const live = this.links.get(linkId);
-		if (!live?.link || !live.stored.group || live.stored.groupEntry || this.shuttingDown || this.options.webrtcGroupLinks) return;
+		if (!live?.link || !live.stored.group || this.shuttingDown || this.options.webrtcGroupLinks) return;
 		if (this.edgeRtcOff.has(linkId) || this.keepsGroupNative(live.stored) || !Object.keys(this.nativeFactories).length) return;
-		this.edgeRtcOff.set(linkId, { away: false });
+		this.edgeRtcOff.set(linkId, {
+			away: false,
+			held: this.edgeRtcRetried.has(linkId)
+		});
 		traceLink(live.myPubKeyZ32, "edge-rtc-off", {});
+		if (live.stored.groupEntry) traceJoin(live.stored.group, "link.native", { role: live.stored.groupEntry });
 		await this.restartEdge(linkId);
 	}
 	/**
@@ -42168,7 +42425,10 @@ var GhostlyNode = class GhostlyNode {
 	* not a network that blocks direct connections. Held native for this whole run, the edge said so in its packet, the
 	* member's app followed on its next starts, and past the group links' native slots members stayed unreachable for as
 	* long as this app ran (2026-10-09). The edge tries WebRTC again, its `_tr` with `webrtc/1` again (WISP 902 §
-	* Transports); a network that really blocks it costs one more failed attempt per return.
+	* Transports). Not an edge held native (`held`: it failed again after a return, or went live natively), nor while
+	* this device's attempts say its network blocks direct connections: a member's packet that carries a WebRTC signal
+	* and its `_tr` can leave its `_svc` out for size and read as gone, and on a VPN each such return put the edge back on
+	* a WebRTC that died again (2026-10-16). A network that really blocks it costs one more failed attempt per network.
 	*/
 	edgeRtcPresence(linkId, presence) {
 		const off = this.edgeRtcOff.get(linkId);
@@ -42177,9 +42437,10 @@ var GhostlyNode = class GhostlyNode {
 			off.away = true;
 			return;
 		}
-		if (!off.away) return;
+		if (!off.away || off.held || this.directPath.blocked) return;
 		const live = this.links.get(linkId);
 		this.edgeRtcOff.delete(linkId);
+		this.edgeRtcRetried.add(linkId);
 		if (live) traceLink(live.myPubKeyZ32, "edge-rtc-back", {});
 		this.groupNativeWaiting.delete(linkId);
 		this.nativeFailed.delete(linkId);
@@ -42194,6 +42455,7 @@ var GhostlyNode = class GhostlyNode {
 		await link.stop(false).catch(() => {});
 		if (this.links.get(linkId) !== live || live.link || this.shuttingDown || !this.networkOn) return;
 		this.startEdge(linkId);
+		if (live.stored.groupEntry) this.links.get(linkId)?.link?.expectPeer();
 	}
 	startLink(linkId, messages) {
 		const live = this.links.get(linkId);
@@ -42431,7 +42693,7 @@ var GhostlyNode = class GhostlyNode {
 				onMessageEdit: stored.profile && !stored.group ? (edit) => this.receiveEdit(linkId, edit) : void 0,
 				onEditReceipt: stored.profile && !stored.group ? (id, e) => this.editsFor(linkId).received(id, e) : void 0,
 				onEditSupport: (supported) => {
-					if (supported && stored.profile && !stored.group) this.restoreCards(linkId).catch(() => {}).then(() => this.editsFor(linkId).flush()).catch(() => {});
+					if (supported && stored.profile && !stored.group) this.restoreCardsSoon(linkId);
 				},
 				onWakeSupport: (supported) => {
 					if (supported && stored.profile && !stored.group) this.shareWake(linkId);
@@ -42457,6 +42719,7 @@ var GhostlyNode = class GhostlyNode {
 					if (peer && !live.stored.group) this.clock.peer(peer, packetAt, readBefore, readAt);
 				},
 				onDataLinkState: (state) => {
+					if (this.links.get(linkId) !== live) return;
 					const was = live.dataLink;
 					live.dataLink = state;
 					if (state === "open") {
@@ -42570,6 +42833,7 @@ var GhostlyNode = class GhostlyNode {
 				onFileComplete: (id, direction) => this.fileSettled(this.localFileId(linkId, id, direction, { failed: false }), void 0, linkId),
 				onFilesFrame: (frame) => this.fileDesk.handle(linkId, frame),
 				onFilesSession: (open) => {
+					if (this.links.get(linkId) !== live) return;
 					this.fileDesk.session(linkId, open);
 					if (open) this.sayWithdrawnFiles(linkId);
 				},
@@ -42703,7 +42967,7 @@ var GhostlyNode = class GhostlyNode {
 	get nativeFactories() {
 		const relay = this.relaysHyperdht ? this.hyperdhtRelay : "";
 		return {
-			...relay ? { "hyperdht/1": async (seedB64) => (await import("./hyperdhtRelay-CPYwSLLS.js")).createRelayedHyperEndpoint(seedB64, relay) } : {},
+			...relay ? { "hyperdht/1": async (seedB64) => (await import("./hyperdhtRelay-CrgYQN-g.js")).createRelayedHyperEndpoint(seedB64, relay) } : {},
 			...this.options.nativeTransports,
 			...this.ownIrohRelays ? { "iroh/1": (seedB64) => this.options.nativeTransports["iroh/1"](seedB64, this.settings.irohRelays?.length ? { relays: [...this.settings.irohRelays] } : {}) } : {},
 			...this.options.irohWeb ? { "iroh/1": (seedB64) => createIrohWebEndpoint(seedB64, { relays: this.irohRelays }) } : {}
@@ -43552,4 +43816,4 @@ function signalKind(signal) {
 //#endregion
 export { EngineServer };
 
-//# sourceMappingURL=server-Ss0gJ-nw.js.map
+//# sourceMappingURL=server-Bx3RGkBC.js.map