feat: profile avatar upload + share_conv_keys rpc + favicon + smtp tweaks

apps/desktop/src/lib/conversationKeySync.ts

@@ -24,19 +24,24 @@ function rawFrom(table: string) {
   return (supabase as unknown as { from: (t: string) => any }).from(table);
 }
 
+// Module-level flag — gap-fill runs once per (user, device) combo per
+// process lifetime. Page reloads / route changes don't re-trigger it.
+const backfilledKey = new Set<string>();
+
 export function startConversationKeySync(
   ownUserId: string,
   ownDeviceId: string,
 ): () => void {
   let cancelled = false;
   let priv: Uint8Array | null = null;
+  const dedupeKey = ownUserId + ':' + ownDeviceId;
 
   void loadDevicePrivateKey(devLocalSecretStore, ownUserId, ownDeviceId).then(async (pk) => {
     if (cancelled) return;
     priv = pk;
     if (!priv) return;
-    // Run a full backfill once we have the private key — covers devices that
-    // registered while we were offline.
+    if (backfilledKey.has(dedupeKey)) return;
+    backfilledKey.add(dedupeKey);
     await syncAllExistingGaps({ myUserId: ownUserId, myDeviceId: ownDeviceId, priv });
   });