A profile (kind 0) is never written over one we failed to find. 2026-10-30, a long-time nostr user signed in with his key for the first time; our relays had never seen his kind 0 (it lived on ditto, snort and oxtr), the 3 s lookup came back empty, and the payment-address publish went out as {lud16, nip05} alone: name, picture and banner gone from every relay (nicstazzema, shown as npub1yk2lkr7). An empty quick lookup now widens to the same search the follow list got after its own overwrite (indexes, archives, the key's own write relays, Primal's signed copy) before anything is written, once per key per session so a brand-new key's first publish waits once. For anyone already hit, the profile editor offers "Look for older copies": a kind 0 from a history-keeping relay fills only the fields still empty in the editor, and Save publishes it. tools/kind0-overwrite-test.js plays the incident against a fake relay network where only an archive holds the profile

Co-Authored-By: Claude Fable 5.1 <[email protected]>

1 files changed, 94 insertions, 1 deletions

diff --git a/src/features/messages.js b/src/features/messages.js
index cdb9aea..478e054 100644
--- a/src/features/messages.js
+++ b/src/features/messages.js
@@ -5185,7 +5185,8 @@ export function messagesFeature(ctx) {
     ]);
     const all = [...(relayEvs || []), ...primalEvs].filter((e) => e.pubkey === pk);
     const list = all.filter((e) => e.kind === 3).sort((a, b) => b.created_at - a.created_at)[0] || null;
-    return { list, existing: all.length > 0 };
+    const profile = all.filter((e) => e.kind === 0).sort((a, b) => b.created_at - a.created_at)[0] || null;
+    return { list, profile, existing: all.length > 0 };
   }
 
   // Fetch the newest list from the relays. Older than what we hold is
@@ -12801,9 +12802,24 @@ export function messagesFeature(ctx) {
   let kind0Chain = Promise.resolve();
   let kind0Last = null; // { at, content } — the newest kind 0 we published
   const withKind0Lock = (fn) => { const p = kind0Chain.then(fn, fn); kind0Chain = p.catch(() => {}); return p; };
+  // A kind 0 is replaceable too: one built on a profile we failed to find
+  // wipes the real one wherever it lands. 2026-10-30, a long-time nostr
+  // user signed in with his key for the first time; our relays had never
+  // seen his kind 0 (it lived on ditto, snort and oxtr), the lookup below
+  // came back empty, and the payment-address publish went out as
+  // {lud16, nip05} alone — name, picture and banner gone everywhere. So an
+  // empty quick lookup widens to the same search the follow list gets
+  // (indexes, archives, his own write relays, Primal's signed copy) before
+  // anything is written. Once per key per session: a key with no profile
+  // anywhere is new, and its first publish shouldn't wait twice.
+  const kind0DeepMiss = new Set();
   async function newestKind0(pk) {
     const evs = await queryOn([...new Set([...PROFILE_RELAYS, ...DM_RELAYS])], { kinds: [0], authors: [pk] }, 3000);
     let newest = evs.sort((a, b) => b.created_at - a.created_at)[0] || null;
+    if (!newest && !(kind0Last && kind0Last.pk === pk) && !kind0DeepMiss.has(pk)) {
+      try { newest = (await deepContactList(pk)).profile || null; } catch {}
+      if (!newest) kind0DeepMiss.add(pk);
+    }
     if (kind0Last && kind0Last.pk === pk && (!newest || newest.created_at <= kind0Last.at)) newest = kind0Last;
     let base = {};
     try { base = newest ? JSON.parse(newest.content) : {}; } catch {}
@@ -12902,6 +12918,78 @@ export function messagesFeature(ctx) {
       fullProfiles.set(id.pubkey, merged);
       profiles.set(id.pubkey, { name: merged.name || null, picture: merged.picture || null });
   }
+  // ---- profile history: undo a kind 0 that replaced the real one ---------
+  // Relays holding the newest copy dropped the older ones; the archives
+  // often haven't. An older copy fills the editor's EMPTY fields (name,
+  // bio, picture, banner) — nothing typed or already set is touched, and
+  // nothing is published until Save.
+  const PROFILE_HISTORY_FIELDS = ['name', 'about', 'picture', 'banner'];
+  async function findProfileHistory() {
+    const me = mePk();
+    if (!me) return [];
+    const relays = [...new Set([...zapRelays(), ...PROFILE_INDEX_RELAYS, ...PROFILE_ARCHIVE_RELAYS, ...FOLLOW_HISTORY_RELAYS,
+      ...(await relaysOf(me).catch(() => []))])];
+    const evs = await queryOn(relays, { kinds: [0], authors: [me], limit: 50 }, 8000).catch(() => []);
+    const byId = new Map();
+    for (const e of evs || []) if (e.pubkey === me) byId.set(e.id, e);
+    return [...byId.values()].sort((a, b) => b.created_at - a.created_at);
+  }
+  const profileFieldsOf = (e) => {
+    let c = {};
+    try { c = JSON.parse(e.content) || {}; } catch {}
+    const out = {};
+    for (const k of PROFILE_HISTORY_FIELDS) {
+      const v = k === 'name' ? (c.display_name || c.name) : c[k];
+      if (typeof v === 'string' && v.trim()) out[k] = v.trim();
+    }
+    return out;
+  };
+  // what an older copy has that the draft is missing
+  const profileHistoryExtra = (e, draft) => Object.keys(profileFieldsOf(e)).filter((k) => !(draft && String(draft[k] || '').trim()));
+  function fillProfileFrom(e) {
+    const draft = ui.profEdit;
+    if (!draft) return 0;
+    const old = profileFieldsOf(e);
+    let n = 0;
+    for (const k of profileHistoryExtra(e, draft)) { draft[k] = old[k]; (draft.touched ||= {})[k] = true; n++; }
+    if (n) {
+      if (old.picture && draft.picture === old.picture) preloadPicture({ picture: old.picture });
+      toast(t('profHistFilled', { n }));
+    } else toast(t('profHistNothing'));
+    if (ui.profHist) ui.profHist.done = true;
+    render();
+    return n;
+  }
+  function profileHistoryCard() {
+    const draft = ui.profEdit;
+    if (!draft || !mePk()) return null;
+    const ph = ui.profHist;
+    const look = () => {
+      ui.profHist = { loading: true };
+      render();
+      findProfileHistory().then((vs) => { ui.profHist = { versions: vs }; render(); })
+        .catch(() => { ui.profHist = { versions: [] }; render(); });
+    };
+    const versions = (ph && ph.versions) || [];
+    const offers = versions.map((e) => ({ e, extra: profileHistoryExtra(e, draft) })).filter((v) => v.extra.length);
+    return h('div', { class: 'col prof-hist-card', style: 'gap:8px' },
+      h('p', { class: 'small muted', style: 'margin:0' }, t('profHistDesc')),
+      !ph || ph.done
+        ? h('button', { class: 'btn-sm', type: 'button', style: 'align-self:flex-start', onClick: look }, t('profHistLook'))
+        : ph.loading
+          ? h('div', { class: 'row', style: 'justify-content:center;padding:6px' }, h('span', { class: 'spinner sm' }))
+          : offers.length
+            ? h('div', { class: 'col', style: 'gap:8px' }, ...offers.slice(0, 6).map(({ e, extra }) => {
+              const f = profileFieldsOf(e);
+              return h('div', { class: 'row between gap6', style: 'align-items:center' },
+                h('div', { class: 'col', style: 'gap:1px;min-width:0' },
+                  h('div', { class: 'break' }, f.name || t('profHistNoName')),
+                  h('div', { class: 'small faint' }, new Date(e.created_at * 1000).toLocaleDateString()
+                    + ' · ' + extra.map((k) => t('profHist_' + k)).join(', '))),
+                h('button', { class: 'btn-sm', type: 'button', onClick: () => fillProfileFrom(e) }, t('profHistUse')));
+            }))
+            : h('div', { class: 'small faint' }, t('profHistNone')));
+  }
   // A payment-address rename released the old name: repoint the kind 0's
   // lud16 and nip05 — but only where they pointed at the released address
   // (or were empty). Deliberately different values are not ours to touch.
@@ -13231,6 +13319,7 @@ export function messagesFeature(ctx) {
                     ui.profUploading = false; render();
                   },
                 })),
+              profileHistoryCard(),
               h('button', { class: 'btn-primary btn-block', disabled: ui.profSaving, onClick: saveProfile },
                 ui.profSaving ? h('span', { class: 'spinner sm' }) : t('save')),
               h('button', { class: 'btn-ghost btn-block', onClick: () => { ui.profEdit = null; ui.profEditFilled = false; render(); } }, t('cancel')))
@@ -18567,6 +18656,10 @@ export function messagesFeature(ctx) {
     // lud16 and nip05 — but only where they pointed at the released address
     // (or were empty). Deliberately different values are not ours to touch.
     addressRenamed(oldAddr, newAddr) { return repointAddress(oldAddr, newAddr).catch(() => {}); },
+    // older copies of our kind 0 on history-keeping relays, and filling the
+    // open editor's empty fields from one (tests)
+    profileHistory() { return findProfileHistory(); },
+    fillProfileFrom(e) { return fillProfileFrom(e); },
     // the profile editor's Save, without the editor (tests)
     async saveProfileDraft(e) { const id = await identity(); return withKind0Lock(() => saveProfileNow(id, { name: '', about: '', picture: '', banner: '', ...e })); },
     // opens the profile, unless the caller has a step to take first (the