Messages: Amber users can read their DMs. Signed in with Amber by intent (NIP-55), nothing sealed to the login npub was ever decrypted — each decrypt would be a trip through the app — so isolabellart's thread with Adam showed only what that phone had sent. Worse, decryptorsComplete() counted the Amber signer as complete, so those wraps were tried on the wallet key alone and logged as opened, hidden for good. Now an interactive signer counts as incomplete (wraps wait, uncounted); Messages and the DM thread say "messages sent to you can't be opened here" with Connect Amber, which opens a nostrconnect:// link for the SAME account over NIP-46 (Amber's bunker mode; a different npub is refused, a callbackUrl reload resumes the handshake). Once a signer that can decrypt takes over, a wallet that ran with Amber re-runs the heal pass over every wrap the relays hold, so messages the old code wrote off come back. tools/amber-dm-upgrade-test.js (plays the remote signer over a shimmed relay).

Co-Authored-By: Claude Opus 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01Vps2H27rhbG9ZqseGfMrc3

1 files changed, 4 insertions, 0 deletions

diff --git a/src/i18n.js b/src/i18n.js
index 32c55b0..e80e2f8 100644
--- a/src/i18n.js
+++ b/src/i18n.js
@@ -515,6 +515,8 @@ const STR = {
     addrRead: '{min} min read',
     addrList: 'A list by {name}',
     msgSignerOff: "Your nostr signer isn't connected, so you can't post as yourself yet.",
+    msgAmberDms: 'Signed in with Amber, messages sent to you can’t be opened here, only ones you sent from this device.',
+    msgAmberConnect: 'Connect Amber',
     msgReconnect: 'Reconnect',
     msgDmsTitle: 'Messages',
     msgCommunitiesTitle: 'Communities',
@@ -1226,6 +1228,8 @@ const STR = {
     nlDisconnected: 'not connected',
     nlReconnectDesc: "Your signer isn't connected, so this app can't sign as you. Reconnect it to post and update your profile. Your wallet and balance aren't affected.",
     nlReconnectTitle: 'Reconnect your signer',
+    nlAmberUpgradeTitle: 'Read your messages',
+    nlAmberUpgradeBody: 'Amber can only open messages here when it’s connected as a remote signer. Tap below, approve in Amber (allow decrypting), and your messages will load. Signing works as before.',
     nlReconnectBody: 'Your Nostr signer isn’t connected on this device. Reconnect to keep acting as {npub}…',
     nlWrongAccount: 'That signer is a different Nostr account. Reconnect with {npub}.',
     nlLinked: 'Wallet linked to your Nostr account',