diff --git a/.github/workflows/dev.yaml b/.github/workflows/dev.yaml
index 50fa6eb..b6baa6f 100644
--- a/.github/workflows/dev.yaml
+++ b/.github/workflows/dev.yaml
@@ -36,6 +36,8 @@ jobs:
           CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
           COMMIT_MSG: ${{ github.event.head_commit.message }}
+        # wrangler looks for ./functions in the cwd (repo root), sibling to
+        # public/. That middleware injects Smart App Banner app-argument.
         run: |
           wrangler pages deploy public \
             --project-name=realunit-web-dev \
diff --git a/.github/workflows/prd.yaml b/.github/workflows/prd.yaml
index bf9cdae..f2706bb 100644
--- a/.github/workflows/prd.yaml
+++ b/.github/workflows/prd.yaml
@@ -36,6 +36,8 @@ jobs:
           CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
           COMMIT_MSG: ${{ github.event.head_commit.message }}
+        # wrangler looks for ./functions in the cwd (repo root), sibling to
+        # public/. That middleware injects Smart App Banner app-argument.
         run: |
           wrangler pages deploy public \
             --project-name=realunit-web \
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index a94f6ac..ef09961 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -10,6 +10,30 @@ This repo is the **realunit.app** website — public, static. See the
   served. The dev dependencies exist **only** for the quality gates below
   (formatting, HTML validation, unit tests, screenshots); nothing compiles or
   bundles the site.
+- **Invite/promo HTML rewrite is banner, canonical, and store handoff.** Safari,
+  Play, and share crawlers snapshot `apple-itunes-app`, `og:url`,
+  `rel=canonical`, `twitter:url`, `og:title`, `twitter:title`,
+  `og:description`, `twitter:description`, `og:image:alt`, `twitter:image:alt`,
+  `og:locale`, `og:site_name`, html `lang`, the Play
+  referrer, android-app / ios-app alternate links, Facebook App Links
+  (`al:ios:url` / `al:android:url` are `realunit-wallet://…`; `al:android:class`
+  is `swiss.realunit.app.MainActivity`; `al:web:url`
+  is the HTTPS landing), and Twitter App Card `twitter:app:url:iphone` /
+  `twitter:app:url:ipad` / `twitter:app:url:googleplay` (same custom scheme)
+  from the HTML bytes before
+  `/js/invite-banner.js` / `invite.js` run, so `functions/_middleware.js`
+  (repo-root `functions/`, picked up by `wrangler pages deploy public`) and
+  `scripts/dev-server.mjs` inject those from the request URL (www folded onto
+  the apex). The campaign code is in `og:title` / `twitter:title` /
+  `og:description` / `og:image:alt` / `twitter:image:alt`; `?lang=en` sets English title/description/alt and `og:locale`;
+  invitee names wait for lookup JS. The committed
+  `public/invite` and `public/promo` HTML stay generic (`app-id` only, og:url /
+  twitter:url `/invite/` or `/promo/`, `og:site_name` RealUnit, generic titles and descriptions, Play
+  href without referrer, no `al:*`, no `twitter:app:*`, `format-detection`
+  `telephone=no, date=no` so iOS does not turn the code or Aktionstext date
+  into a link, `x-apple-data-detectors="false"` on `#ok-code` / `#ok-body`
+  because Safari re-scans JS-inserted text, no inline
+  `<script>`). Do not add other Pages Functions or server-side rendering.
 - **Keep the page self-contained.** `public/_headers` sets a strict CSP:
   - No inline `<script>` and no external resources of any kind (scripts, styles,
     images, fonts, fetch). Load JS from **same-origin** files instead.
diff --git a/README.md b/README.md
index 5db6097..21be441 100644
--- a/README.md
+++ b/README.md
@@ -4,12 +4,59 @@ The website served at **realunit.app**. Public, static.
 
 ## v1 (current)
 
-A minimal landing page — one hero image from the RealUnit app plus the three download buttons.
+A minimal landing page — one hero image from the RealUnit app plus the store buttons —
+plus invite/promo landings and the Aktionariat confirm / account-merge flows.
 Deliberately **without a build toolchain**: plain HTML + assets in `public/`,
 uploaded to Cloudflare Pages.
 
 - `public/index.html` — landing, shows `assets/hero.jpg` centered on a light background
   with the store/download buttons below it
+- `public/invite/` and `public/promo/` — referral and campaign landings; look up
+  `GET /v1/realunit/referral/code/:code` (contract:
+  [JonnyLuca/dfx-referral-api](https://github.com/JonnyLuca/dfx-referral-api)),
+  open `realunit-wallet://invite|promo/{code}`,
+  and pass the code as a Play install referrer. Path and query codes
+  (including ads/Play `utm_content` / `referrer` and Facebook/Google/Outlook
+  `u=` / `q=` / `url=` / email `link=` wrapping `invite=` or a landing URL, with or without
+  `https://`; a campaign name in `utm_content` does not hide a later wrapper key;
+  an empty or foreign `code=` does not hide a later `invite=` / `promo=`;
+  short `ios-app://` alternate links; Proofpoint URL Defense and Outlook Safe Links wrapping a
+  RealUnit landing; a foreign `https://` URL is not a code) are
+  uppercased, stripped of messenger zero-width/fullwidth characters and
+  trailing sentence punct (`!`, `?`, `/`, …), and capped at 32 like the
+  API lookup — including in the crawler HTML bytes Safari snapshots.
+  The re-tap hint is iOS-only;
+  Android keeps the code via the Play referrer. An App Store / Play / CTA tap
+  also copies the code (user gesture) so an iOS badge install can still be
+  pasted at registration. iOS `format-detection` is `telephone=no, date=no`
+  so Safari does not turn the campaign code or Aktionstext date into a link.
+  `#ok-code` and `#ok-body` also set `x-apple-data-detectors="false"` because
+  those strings are written after load.
+  `www.realunit.app/invite|promo` is HTTP 200 (not a
+  301 to the apex) so Universal Links and the Smart App Banner keep the host.
+  The Smart App Banner `app-argument`, `og:url`, `rel=canonical`,
+  `twitter:url`, `og:title`, `twitter:title`, `og:description`,
+  `twitter:description`, `og:image:alt`, `twitter:image:alt`, `og:locale`,
+  `og:site_name`, Play install referrer,
+  android-app / ios-app alternate links, Facebook App Links
+  (`al:ios:url` / `al:android:url` are `realunit-wallet://…`; `al:android:class`
+  is `swiss.realunit.app.MainActivity`; `al:web:url`
+  is the HTTPS landing), and Twitter App Card `twitter:app:url:*` (same
+  custom scheme; `twitter:app:country` is CH) are injected
+  into the HTML bytes from the request URL (`functions/_middleware.js` on
+  Cloudflare Pages, and the local dev-server) so Safari, Play, WhatsApp, X,
+  and share crawlers can snapshot them before JS. `og:title`, `og:description`,
+  and image alt name the campaign code; `?lang=en` sets English copy and `og:locale=en_GB`;
+  invitee names wait for lookup JS. `/js/invite-banner.js` in `<head>`
+  is the CSP-safe JS fallback — Cloudflare Pages CSP blocks inline `<script>`.
+- `public/.well-known/apple-app-site-association` and `assetlinks.json` — Universal
+  Links / App Links for `/invite/*` and `/promo/*` on apex and www (HTTP 200,
+  no 301). `sha256_cert_fingerprints`
+  lists (1) the v2 signing cert of GitHub release APK `realunit-1.2.17.apk`
+  (`O=DFX AG`, `CN=Konstantin Ullrich`) and (2) the Android debug keystore
+  used by the `pixel_jonny` AVD (`C=US, O=Android, CN=Android Debug`) so
+  debug App Links against `dev.realunit.app` verify. If Play App Signing uses
+  a different app-signing key, add that SHA-256 from Play Console beside them.
 - `public/platform.js` — enlarges the store button matching the visitor's platform
   (iOS → App Store, Android → Play Store); without JS all buttons stay equal-size
 - `public/assets/hero.jpg` — hero (source: the app's splash background)
@@ -40,10 +87,7 @@ projects in the DNS/deployment configuration. The `handbook.` subdomain is unaff
 
 ## Roadmap (v2+)
 
-- `/confirm-aktionariat` — guided Aktionariat address confirmation (calls `api.dfx.swiss`)
-- `/account-merge` — confirms adding a wallet address to the existing account (calls the public DFX API)
 - Legal pages — rendered from the app's `assets/legal/*.md` (build-time fetch, single source)
-- Universal Links / App Links (`/.well-known/*`)
 
 From v2 a build toolchain (Astro) is introduced; the plain-image landing stays the home page.
 
diff --git a/functions/_middleware.js b/functions/_middleware.js
new file mode 100644
index 0000000..b1d59d2
--- /dev/null
+++ b/functions/_middleware.js
@@ -0,0 +1,32 @@
+/**
+ * Rewrite invite/promo HTML so apple-itunes-app already carries
+ * app-argument, og:url / canonical / twitter:url already name the
+ * landing URL, og:title / twitter:title / og:description already name
+ * the campaign code, ?lang=en already sets html lang / og:locale, and
+ * Facebook App Links are present. Safari and share
+ * crawlers snapshot those from the HTML bytes before
+ * /js/invite-banner.js and invite.js run.
+ * public/ stays generic; this is not a site-wide renderer.
+ */
+import { injectLandingFromRequestUrl, shouldRewriteItunesBanner } from './lib/itunes-banner.js';
+
+export async function onRequest(context) {
+  const url = new URL(context.request.url);
+  if (!shouldRewriteItunesBanner(url.pathname)) {
+    return context.next();
+  }
+  const response = await context.next();
+  const type = response.headers.get('content-type') || '';
+  if (context.request.method !== 'GET' || !type.includes('text/html')) {
+    return response;
+  }
+  const html = await response.text();
+  const injected = injectLandingFromRequestUrl(html, context.request.url);
+  const headers = new Headers(response.headers);
+  headers.delete('content-length');
+  return new Response(injected, {
+    status: response.status,
+    statusText: response.statusText,
+    headers,
+  });
+}
diff --git a/functions/lib/itunes-banner.js b/functions/lib/itunes-banner.js
new file mode 100644
index 0000000..fbe4e1e
--- /dev/null
+++ b/functions/lib/itunes-banner.js
@@ -0,0 +1,618 @@
+/**
+ * Inject Smart App Banner app-argument into invite/promo HTML bytes.
+ * Safari snapshots apple-itunes-app from the first HTML, before
+ * /js/invite-banner.js runs (Offerte Punkt 3). Keep in sync with
+ * public/js/lib/invite-core.js itunesBanner + parseCodeFromLocation
+ * for canonical /invite|promo/{code} URLs, including ads/Play
+ * utm_content / referrer and Facebook/Google/Outlook u= / q= / url=
+ * wrapping invite= or a landing URL, plus email `link=` and short
+ * `ios-app://{id}/invite|{promo}/{code}` alternate links. An empty or
+ * foreign `code=` does not hide a later `invite=` / `promo=`. A foreign https URL is not a
+ * code (u=https://example.com); Proofpoint URL Defense and Outlook
+ * Safe Links wrapping a RealUnit landing are unwrapped. og:title / twitter:title,
+ * og:description, and og:image:alt / twitter:image:alt take the campaign
+ * code from the request URL; names wait for lookup JS. Facebook
+ * al:ios:url / al:android:url are the custom scheme; al:web:url is HTTPS.
+ * al:android:class is the Flutter activity (swiss.realunit.app.MainActivity).
+ * Twitter App Card twitter:app:url:* is the same custom scheme.
+ */
+export const APP_STORE_ID = '6759720010';
+export const APP_NAME = 'RealUnit';
+export const ANDROID_PACKAGE = 'swiss.realunit.app';
+export const ANDROID_ACTIVITY = 'swiss.realunit.app.MainActivity';
+export const PLAY_STORE_BASE = 'https://play.google.com/store/apps/details?id=swiss.realunit.app';
+
+const INVISIBLE_CODE_CHARS = /[\u00AD\u200B-\u200F\u202A-\u202E\u2060\u2066-\u2069\uFEFF]/g;
+
+function unescapeFullwidthUrlChars(value) {
+  return String(value)
+    .replace(/[\u3000\uFF01-\uFF5E]/g, (ch) => {
+      if (ch === '\u3000') return ' ';
+      return String.fromCharCode(ch.charCodeAt(0) - 0xfee0);
+    })
+    .replace(/\u2044/g, '/')
+    .replace(/\u2215/g, '/')
+    .replace(/\u2236/g, ':')
+    .replace(/\u3002/g, '.')
+    .replace(/\uFF61/g, '.')
+    .replace(/\u2024/g, '.')
+    .replace(/[\u00A0\u1680\u2000-\u200A\u202F\u205F]/g, ' ')
+    .replace(/[\u2010-\u2014\u2212\uFE58\uFE63]/g, '-');
+}
+
+function unwrapNestedCode(code) {
+  const nested = /(?:invite|promo)\/([^/?#]+)/i.exec(code);
+  return nested ? nested[1] : code;
+}
+
+function capCode(raw) {
+  if (raw == null) return null;
+  let code = unescapeFullwidthUrlChars(String(raw));
+  code = code.replace(INVISIBLE_CODE_CHARS, '').replace(/\s+/gu, '');
+  if (!code) return null;
+  // Same order as the API sanitizeReferralCode: unwrap before decode so
+  // invite/AB%2F12 stays AB/12, then again after so %2Finvite%2FAB12CD works.
+  code = unwrapNestedCode(code);
+  try {
+    code = decodeURIComponent(code);
+  } catch {
+    // keep the raw value when it is not valid percent-encoding
+  }
+  code = unescapeFullwidthUrlChars(code);
+  code = code.replace(INVISIBLE_CODE_CHARS, '').replace(/\s+/gu, '');
+  code = unwrapNestedCode(code);
+  if (!code) return null;
+  // Same fold as the API sanitizeReferralCode (uppercase, drop trailing punct, max 32).
+  code = code.toUpperCase().replace(/[.?#&,;!/]+$/g, '');
+  if (!code) return null;
+  if (code.length > 32) code = code.slice(0, 32);
+  // capCode of a leftover URL is never a programme token.
+  if (code.indexOf('://') !== -1) return null;
+  return code;
+}
+
+export function shouldRewriteItunesBanner(pathname) {
+  const path = String(pathname || '');
+  if (/\.(js|css|map|png|svg|json|jpg|jpeg|webp|ico|txt|xml)$/i.test(path)) {
+    return false;
+  }
+  return (
+    path === '/invite' ||
+    path.startsWith('/invite/') ||
+    path === '/promo' ||
+    path.startsWith('/promo/')
+  );
+}
+
+// Proofpoint URL Defense v2 encodes : as -3A and / as _ (same as invite-core).
+function urlDefenseDecode(value) {
+  const lower = String(value).toLowerCase();
+  if (lower.indexOf('realunit.app/') !== -1 || lower.indexOf('realunit.app?') !== -1) {
+    return null;
+  }
+  if (lower.indexOf('realunit') === -1) return null;
+  if (value.indexOf('-') === -1 && value.indexOf('_') === -1) return null;
+  const decoded = String(value)
+    .replace(/-([0-9A-Fa-f]{2})/g, (_, hex) => {
+      const code = parseInt(hex, 16);
+      if (code < 32 || code > 126) return _;
+      return String.fromCharCode(code);
+    })
+    .replace(/_/g, '/');
+  if (decoded === value) return null;
+  if (decoded.toLowerCase().indexOf('realunit.app') === -1) return null;
+  return decoded;
+}
+
+function embeddedRealunitLanding(text) {
+  const value = String(text);
+  const https = value.match(
+    /https?:\/\/(?:www\.|dev\.)?realunit\.app(?=[/?#]|$)(?:\/(?:invite|promo)(?:\/[^\s<>#?&]*)?)?(?:[?#][^\s<>]*)?/i,
+  );
+  if (https) return https[0];
+  const host = value.match(/(?:www\.|dev\.)?realunit\.app\/(?:invite|promo)\/[^\s<>?#&]*/i);
+  if (host) return host[0];
+  const wallet = value.match(
+    /realunit-wallet:(?:\/\/)?(?:invite|promo)(?:\/[^\s<>#?]*)?(?:[?#][^\s<>]*)?/i,
+  );
+  if (wallet) return wallet[0];
+  const android = value.match(
+    /android-app:\/\/swiss\.realunit\.app\/https\/(?:www\.|dev\.)?realunit\.app\/(?:invite|promo)(?:\/[^\s<>#?]*)?/i,
+  );
+  if (android) return android[0];
+  const intent = value.match(
+    /intent:\/\/(?:(?:www\.|dev\.)?realunit\.app\/)?(?:invite|promo)(?:\/[^\s<>#?]*)?/i,
+  );
+  if (intent) return intent[0];
+  const iosApp = value.match(
+    /ios-app:\/\/\d+\/(?:realunit-wallet\/)?(?:invite|promo)(?:\/[^\s<>#?]*)?/i,
+  );
+  if (iosApp) return iosApp[0];
+  return null;
+}
+
+function looksLikeUrlValue(text) {
+  return /^(https?:\/\/|[a-z][a-z0-9+.-]*:)/i.test(String(text).trim());
+}
+
+function isRealUnitHostName(host) {
+  const h = String(host || '').toLowerCase();
+  return h === 'realunit.app' || h === 'www.realunit.app' || h === 'dev.realunit.app';
+}
+
+const WRAPPER_QUERY_KEYS = ['utm_content', 'referrer', 'u', 'q', 'url', 'link'];
+const CODE_QUERY_KEYS = ['code', 'invite', 'promo', 'app-argument'];
+
+// Same contract as invite-core codeFromWrappedQueryValue: a RealUnit landing
+// or invite=/promo=/code=, never a foreign https URL or a campaign name.
+function codeFromYahooRu(value, depth) {
+  const match = /RU=(https?(?::|%3A)(?:\/|%2F){2}[^&\s]+)/i.exec(value);
+  if (!match) return null;
+  let inner = match[1].replace(/\/RK=.*$/i, '');
+  try {
+    inner = decodeURIComponent(inner);
+  } catch {
+    // keep the captured value
+  }
+  inner = inner.replace(/(https?:)\/(?!\/)/i, '$1//');
+  if (!/realunit\.app/i.test(inner)) return null;
+  return codeFromWrappedLanding(inner, depth + 1);
+}
+
+function codeFromWrappedLanding(raw, depth) {
+  if (raw == null || raw === '' || depth > 3) return null;
+  const text = String(raw);
+
+  const fromYahoo = codeFromYahooRu(text, depth);
+  if (fromYahoo) return fromYahoo;
+
+  // Wrapper query params first so Proofpoint `&d=` is not glued onto the code.
+  try {
+    const uri = new URL(text);
+    const keys = WRAPPER_QUERY_KEYS;
+    for (let i = 0; i < keys.length; i++) {
+      const val = uri.searchParams.get(keys[i]);
+      if (!val) continue;
+      const from = codeFromWrappedLanding(val, depth + 1);
+      if (from) return from;
+    }
+    if (isRealUnitHostName(uri.hostname)) {
+      const segs = uri.pathname.split('/').filter(Boolean);
+      if (
+        segs.length >= 2 &&
+        /^(invite|promo)$/i.test(segs[0]) &&
+        segs[1].toLowerCase() !== 'index.html'
+      ) {
+        const fromSeg = capCode(segs[1]);
+        if (fromSeg) return fromSeg;
+      }
+      // Try each code key — a foreign `code=` must not hide a later `invite=`.
+      const fromNested = codeFromCodeQueryParams(uri.searchParams, depth + 1);
+      if (fromNested) return fromNested;
+      if (uri.hash && uri.hash.length > 1 && segs.length <= 1) {
+        const fromHash = codeFromQueryCode(uri.hash.replace(/^#/, ''), depth + 1);
+        if (fromHash) return fromHash;
+      }
+    }
+    if (
+      uri.pathname &&
+      uri.pathname.length > 1 &&
+      /realunit\.app|realunit-wallet/i.test(uri.pathname)
+    ) {
+      const fromPath = codeFromWrappedLanding(uri.pathname, depth + 1);
+      if (fromPath) return fromPath;
+    }
+  } catch {
+    // not an absolute URL
+  }
+
+  const defense = urlDefenseDecode(text);
+  if (defense) {
+    const fromDefense = codeFromWrappedLanding(defense, depth + 1);
+    if (fromDefense) return fromDefense;
+  }
+
+  const embedded = embeddedRealunitLanding(text);
+  if (embedded) {
+    const code = capCode(embedded);
+    if (code) return code;
+  }
+
+  if (!looksLikeUrlValue(text) && /(?:^|\/)(invite|promo)\//i.test(text)) {
+    const code = capCode(text);
+    if (code) return code;
+  }
+
+  let qs = text.charAt(0) === '?' ? text.slice(1) : text;
+  if (
+    /^(invite|promo|code)=/i.test(qs) ||
+    (qs.indexOf('&') !== -1 && /(^|&)(invite|promo|code)=/i.test(qs))
+  ) {
+    const params = new URLSearchParams(qs);
+    const innerKeys = ['invite', 'promo', 'code'];
+    for (let i = 0; i < innerKeys.length; i++) {
+      const inner = params.get(innerKeys[i]);
+      if (!inner) continue;
+      const fromInner = codeFromWrappedLanding(inner, depth + 1);
+      if (fromInner) return fromInner;
+      if (!looksLikeUrlValue(inner)) {
+        const code = capCode(inner);
+        if (code) return code;
+      }
+    }
+  }
+
+  return null;
+}
+
+function codeFromUtmOrReferrer(raw) {
+  return codeFromWrappedLanding(raw, 0);
+}
+
+function codeFromWrapperQueryParams(params) {
+  for (let i = 0; i < WRAPPER_QUERY_KEYS.length; i++) {
+    const val = params.get(WRAPPER_QUERY_KEYS[i]);
+    if (!val) continue;
+    const code = codeFromUtmOrReferrer(val);
+    if (code) return code;
+  }
+  return null;
+}
+
+function codeFromCodeQueryParams(params, depth) {
+  for (let i = 0; i < CODE_QUERY_KEYS.length; i++) {
+    const val = params.get(CODE_QUERY_KEYS[i]);
+    if (!val) continue;
+    const code = codeFromQueryCode(val, depth);
+    if (code) return code;
+  }
+  return null;
+}
+
+function codeFromQueryCode(raw, depth) {
+  if (raw == null || raw === '') return null;
+  const wrapped = codeFromWrappedLanding(raw, depth == null ? 0 : depth);
+  if (wrapped) return wrapped;
+  if (looksLikeUrlValue(raw)) return null;
+  return capCode(raw);
+}
+
+export function parseLandingFromUrl(urlLike) {
+  let url;
+  try {
+    url = new URL(urlLike, 'https://realunit.app');
+  } catch {
+    return null;
+  }
+  const parts = url.pathname.split('/').filter(Boolean);
+  const kind = (parts[0] || '').toLowerCase();
+  if (kind !== 'invite' && kind !== 'promo') return null;
+  const segment = parts[1];
+  if (segment && /\.(js|css|map|png|svg|json|html)$/i.test(segment)) {
+    return { kind, code: null };
+  }
+  let code = segment && segment.toLowerCase() !== 'index.html' ? capCode(segment) : null;
+  if (!code) {
+    code = codeFromCodeQueryParams(url.searchParams);
+  }
+  if (!code) {
+    code = codeFromWrapperQueryParams(url.searchParams);
+  }
+  if (!code && url.hash) {
+    code = codeFromQueryCode(url.hash.replace(/^#/, ''));
+  }
+  return { kind, code };
+}
+
+export function itunesBanner(kind, code) {
+  let banner = 'app-id=' + APP_STORE_ID;
+  if (kind && code) {
+    banner += ', app-argument=realunit-wallet://' + kind + '/' + encodeURIComponent(code);
+  }
+  return banner;
+}
+
+export function injectItunesBannerHtml(html, bannerContent) {
+  if (typeof html !== 'string' || html.indexOf('apple-itunes-app') === -1) {
+    return html;
+  }
+  const content = String(bannerContent);
+  const named = html.replace(
+    /(<meta\b[^>]*\bname=["']apple-itunes-app["'][^>]*\bcontent=["'])([^"']*)(["'][^>]*>)/i,
+    '$1' + content + '$3',
+  );
+  if (named !== html) return named;
+  return html.replace(
+    /(<meta\b[^>]*\bcontent=["'])([^"']*)(["'][^>]*\bname=["']apple-itunes-app["'][^>]*>)/i,
+    '$1' + content + '$3',
+  );
+}
+
+export function injectItunesBannerFromRequestUrl(html, urlLike) {
+  return injectLandingFromRequestUrl(html, urlLike);
+}
+
+export function canonicalOrigin(host) {
+  if (host === 'dev.realunit.app') return 'https://dev.realunit.app';
+  if (host === 'realunit.app' || host === 'www.realunit.app') return 'https://realunit.app';
+  return null;
+}
+
+export function requestOrigin(urlLike) {
+  try {
+    const url = new URL(urlLike, 'https://realunit.app');
+    return canonicalOrigin(url.hostname) || url.origin;
+  } catch {
+    return 'https://realunit.app';
+  }
+}
+
+export function canonicalLandingHref(urlLike) {
+  const parsed = parseLandingFromUrl(urlLike);
+  if (!parsed) return null;
+  let path = '/' + parsed.kind;
+  if (parsed.code) path += '/' + encodeURIComponent(parsed.code);
+  return requestOrigin(urlLike) + path;
+}
+
+function replaceTaggedAttr(html, namedRe, flippedRe, value) {
+  const named = html.replace(namedRe, '$1' + value + '$3');
+  if (named !== html) return named;
+  return html.replace(flippedRe, '$1' + value + '$3');
+}
+
+export function injectLandingCanonicalHtml(html, href) {
+  if (typeof html !== 'string' || !href) return html;
+  let out = replaceTaggedAttr(
+    html,
+    /(<meta\b[^>]*\bproperty=["']og:url["'][^>]*\bcontent=["'])([^"']*)(["'][^>]*>)/i,
+    /(<meta\b[^>]*\bcontent=["'])([^"']*)(["'][^>]*\bproperty=["']og:url["'][^>]*>)/i,
+    href,
+  );
+  out = replaceTaggedAttr(
+    out,
+    /(<link\b[^>]*\brel=["']canonical["'][^>]*\bhref=["'])([^"']*)(["'][^>]*>)/i,
+    /(<link\b[^>]*\bhref=["'])([^"']*)(["'][^>]*\brel=["']canonical["'][^>]*>)/i,
+    href,
+  );
+  return replaceTaggedAttr(
+    out,
+    /(<meta\b[^>]*\bname=["']twitter:url["'][^>]*\bcontent=["'])([^"']*)(["'][^>]*>)/i,
+    /(<meta\b[^>]*\bcontent=["'])([^"']*)(["'][^>]*\bname=["']twitter:url["'][^>]*>)/i,
+    href,
+  );
+}
+
+export function parseLangFromUrl(urlLike) {
+  try {
+    const raw = String(new URL(urlLike, 'https://realunit.app').searchParams.get('lang') || '')
+      .slice(0, 2)
+      .toLowerCase();
+    if (raw === 'en' || raw === 'de') return raw;
+    return null;
+  } catch {
+    return null;
+  }
+}
+
+/** Crawlers snapshot og:title / twitter:title from the HTML bytes. Names wait for lookup JS. */
+export function shareTitle(kind, code, lang) {
+  if (!kind || !code) return null;
+  if (lang === 'en') {
+    return kind === 'promo' ? 'RealUnit — Promo code ' + code : 'RealUnit — Invitation ' + code;
+  }
+  return kind === 'promo' ? 'RealUnit — Promo-Code ' + code : 'RealUnit — Einladung ' + code;
+}
+
+export function injectShareTitleHtml(html, kind, code, lang) {
+  if (typeof html !== 'string') return html;
+  const title = shareTitle(kind, code, lang);
+  if (!title) return html;
+  let out = replaceTaggedAttr(
+    html,
+    /(<meta\b[^>]*\bproperty=["']og:title["'][^>]*\bcontent=["'])([^"']*)(["'][^>]*>)/i,
+    /(<meta\b[^>]*\bcontent=["'])([^"']*)(["'][^>]*\bproperty=["']og:title["'][^>]*>)/i,
+    title,
+  );
+  out = replaceTaggedAttr(
+    out,
+    /(<meta\b[^>]*\bname=["']twitter:title["'][^>]*\bcontent=["'])([^"']*)(["'][^>]*>)/i,
+    /(<meta\b[^>]*\bcontent=["'])([^"']*)(["'][^>]*\bname=["']twitter:title["'][^>]*>)/i,
+    title,
+  );
+  return out.replace(/<title>[^<]*<\/title>/i, '<title>' + title + '</title>');
+}
+
+/** Crawlers snapshot og:image:alt / twitter:image:alt from the HTML bytes. */
+export function injectShareImageAltHtml(html, kind, code, lang) {
+  if (typeof html !== 'string') return html;
+  const alt = shareTitle(kind, code, lang);
+  if (!alt) return html;
+  let out = replaceTaggedAttr(
+    html,
+    /(<meta\b[^>]*\bproperty=["']og:image:alt["'][^>]*\bcontent=["'])([^"']*)(["'][^>]*>)/i,
+    /(<meta\b[^>]*\bcontent=["'])([^"']*)(["'][^>]*\bproperty=["']og:image:alt["'][^>]*>)/i,
+    alt,
+  );
+  return replaceTaggedAttr(
+    out,
+    /(<meta\b[^>]*\bname=["']twitter:image:alt["'][^>]*\bcontent=["'])([^"']*)(["'][^>]*>)/i,
+    /(<meta\b[^>]*\bcontent=["'])([^"']*)(["'][^>]*\bname=["']twitter:image:alt["'][^>]*>)/i,
+    alt,
+  );
+}
+
+/** Crawlers snapshot og:description from the HTML bytes. Names wait for lookup JS. */
+export function shareDescription(code, lang) {
+  if (!code) return null;
+  if (lang === 'en') return 'Open the RealUnit app with code ' + code + '.';
+  return 'Öffne die RealUnit-App mit dem Code ' + code + '.';
+}
+
+export function injectShareDescriptionHtml(html, code, lang) {
+  if (typeof html !== 'string') return html;
+  const description = shareDescription(code, lang);
+  if (!description) return html;
+  let out = replaceTaggedAttr(
+    html,
+    /(<meta\b[^>]*\bproperty=["']og:description["'][^>]*\bcontent=["'])([^"']*)(["'][^>]*>)/i,
+    /(<meta\b[^>]*\bcontent=["'])([^"']*)(["'][^>]*\bproperty=["']og:description["'][^>]*>)/i,
+    description,
+  );
+  out = replaceTaggedAttr(
+    out,
+    /(<meta\b[^>]*\bname=["']twitter:description["'][^>]*\bcontent=["'])([^"']*)(["'][^>]*>)/i,
+    /(<meta\b[^>]*\bcontent=["'])([^"']*)(["'][^>]*\bname=["']twitter:description["'][^>]*>)/i,
+    description,
+  );
+  return replaceTaggedAttr(
+    out,
+    /(<meta\b[^>]*\bname=["']description["'][^>]*\bcontent=["'])([^"']*)(["'][^>]*>)/i,
+    /(<meta\b[^>]*\bcontent=["'])([^"']*)(["'][^>]*\bname=["']description["'][^>]*>)/i,
+    description,
+  );
+}
+
+// Crawlers (iMessage, WhatsApp) snapshot og:url / canonical from the HTML
+// bytes. Keep mock query params off the canonical path.
+export function playStoreUrl(code, kind) {
+  if (code) {
+    const key = kind === 'promo' ? 'promo' : 'invite';
+    return PLAY_STORE_BASE + '&referrer=' + encodeURIComponent(key + '=' + code);
+  }
+  return PLAY_STORE_BASE;
+}
+
+export function androidAppUrl(kind, code) {
+  return (
+    'android-app://swiss.realunit.app/https/realunit.app/' + kind + '/' + encodeURIComponent(code)
+  );
+}
+
+export function iosAppUrl(kind, code) {
+  return 'ios-app://' + APP_STORE_ID + '/realunit-wallet/' + kind + '/' + encodeURIComponent(code);
+}
+
+function upsertAlternate(html, dataAttr, href) {
+  const named = new RegExp(
+    `(<link\\b[^>]*\\b${dataAttr}\\b[^>]*\\bhref=["'])([^"']*)(["'][^>]*>)`,
+    'i',
+  );
+  if (named.test(html)) return html.replace(named, '$1' + href + '$3');
+  const flipped = new RegExp(
+    `(<link\\b[^>]*\\bhref=["'])([^"']*)(["'][^>]*\\b${dataAttr}\\b[^>]*>)`,
+    'i',
+  );
+  if (flipped.test(html)) return html.replace(flipped, '$1' + href + '$3');
+  const tag = `<link rel="alternate" ${dataAttr} href="${href}" />`;
+  if (/<\/head>/i.test(html)) return html.replace(/<\/head>/i, tag + '\n</head>');
+  return html + tag;
+}
+
+function upsertMeta(html, keyAttr, key, content) {
+  const named = new RegExp(
+    `(<meta\\b[^>]*\\b${keyAttr}=["']${key}["'][^>]*\\bcontent=["'])([^"']*)(["'][^>]*>)`,
+    'i',
+  );
+  if (named.test(html)) return html.replace(named, '$1' + content + '$3');
+  const flipped = new RegExp(
+    `(<meta\\b[^>]*\\bcontent=["'])([^"']*)(["'][^>]*\\b${keyAttr}=["']${key}["'][^>]*>)`,
+    'i',
+  );
+  if (flipped.test(html)) return html.replace(flipped, '$1' + content + '$3');
+  const tag = `<meta ${keyAttr}="${key}" content="${content}" />`;
+  if (/<\/head>/i.test(html)) return html.replace(/<\/head>/i, tag + '\n</head>');
+  return html + tag;
+}
+
+export function appLink(kind, code) {
+  return 'realunit-wallet://' + kind + '/' + encodeURIComponent(code);
+}
+
+// X / Twitter snapshots twitter:app:* from the HTML bytes (Offerte Punkt 3).
+// twitter:app:url:* is the custom scheme so a tweet opens the app.
+export function injectTwitterAppHtml(html, kind, code) {
+  if (typeof html !== 'string' || !kind || !code) return html;
+  const scheme = appLink(kind, code);
+  let out = upsertMeta(html, 'name', 'twitter:app:name:iphone', APP_NAME);
+  out = upsertMeta(out, 'name', 'twitter:app:id:iphone', APP_STORE_ID);
+  out = upsertMeta(out, 'name', 'twitter:app:url:iphone', scheme);
+  out = upsertMeta(out, 'name', 'twitter:app:name:ipad', APP_NAME);
+  out = upsertMeta(out, 'name', 'twitter:app:id:ipad', APP_STORE_ID);
+  out = upsertMeta(out, 'name', 'twitter:app:url:ipad', scheme);
+  out = upsertMeta(out, 'name', 'twitter:app:name:googleplay', APP_NAME);
+  out = upsertMeta(out, 'name', 'twitter:app:id:googleplay', ANDROID_PACKAGE);
+  out = upsertMeta(out, 'name', 'twitter:app:url:googleplay', scheme);
+  return upsertMeta(out, 'name', 'twitter:app:country', 'CH');
+}
+
+// WhatsApp / Facebook snapshot al:* App Links from the HTML bytes.
+// al:ios:url and al:android:url are the custom scheme so a share opens
+// the app; al:web:url is the HTTPS landing (Offerte Punkt 3).
+export function injectShareAppLinksHtml(html, kind, code, href) {
+  if (typeof html !== 'string' || !kind || !code || !href) return html;
+  const scheme = appLink(kind, code);
+  let out = upsertMeta(html, 'property', 'al:ios:url', scheme);
+  out = upsertMeta(out, 'property', 'al:ios:app_store_id', APP_STORE_ID);
+  out = upsertMeta(out, 'property', 'al:ios:app_name', APP_NAME);
+  out = upsertMeta(out, 'property', 'al:android:url', scheme);
+  out = upsertMeta(out, 'property', 'al:android:package', ANDROID_PACKAGE);
+  out = upsertMeta(out, 'property', 'al:android:class', ANDROID_ACTIVITY);
+  out = upsertMeta(out, 'property', 'al:android:app_name', APP_NAME);
+  out = upsertMeta(out, 'property', 'al:web:url', href);
+  return injectTwitterAppHtml(out, kind, code);
+}
+
+export function injectInstallHandoffHtml(html, kind, code) {
+  if (typeof html !== 'string' || !kind || !code) return html;
+  let out = replaceTaggedAttr(
+    html,
+    /(<a\b[^>]*\bdata-store=["']play["'][^>]*\bhref=["'])([^"']*)(["'][^>]*>)/i,
+    /(<a\b[^>]*\bhref=["'])([^"']*)(["'][^>]*\bdata-store=["']play["'][^>]*>)/i,
+    playStoreUrl(code, kind),
+  );
+  out = upsertAlternate(out, 'data-android-app', androidAppUrl(kind, code));
+  return upsertAlternate(out, 'data-ios-app', iosAppUrl(kind, code));
+}
+
+/** Crawlers snapshot html lang / og:locale from the HTML bytes. */
+export function injectShareLocaleHtml(html, lang) {
+  if (typeof html !== 'string' || lang !== 'en') return html;
+  let out = html.replace(/<html\b([^>]*)\blang=["'][^"']*["']/i, '<html$1lang="en"');
+  out = replaceTaggedAttr(
+    out,
+    /(<meta\b[^>]*\bproperty=["']og:locale["'][^>]*\bcontent=["'])([^"']*)(["'][^>]*>)/i,
+    /(<meta\b[^>]*\bcontent=["'])([^"']*)(["'][^>]*\bproperty=["']og:locale["'][^>]*>)/i,
+    'en_GB',
+  );
+  return replaceTaggedAttr(
+    out,
+    /(<meta\b[^>]*\bproperty=["']og:locale:alternate["'][^>]*\bcontent=["'])([^"']*)(["'][^>]*>)/i,
+    /(<meta\b[^>]*\bcontent=["'])([^"']*)(["'][^>]*\bproperty=["']og:locale:alternate["'][^>]*>)/i,
+    'de_CH',
+  );
+}
+
+/** Crawlers snapshot og:site_name from the HTML bytes. Brand stays RealUnit. */
+export function injectSiteNameHtml(html) {
+  if (typeof html !== 'string') return html;
+  return upsertMeta(html, 'property', 'og:site_name', APP_NAME);
+}
+
+export function injectLandingFromRequestUrl(html, urlLike) {
+  const parsed = parseLandingFromUrl(urlLike);
+  const lang = parseLangFromUrl(urlLike);
+  let out = injectItunesBannerHtml(
+    html,
+    itunesBanner(parsed && parsed.kind, parsed && parsed.code),
+  );
+  const href = canonicalLandingHref(urlLike);
+  out = injectLandingCanonicalHtml(out, href);
+  out = injectShareTitleHtml(out, parsed && parsed.kind, parsed && parsed.code, lang);
+  out = injectShareImageAltHtml(out, parsed && parsed.kind, parsed && parsed.code, lang);
+  out = injectShareDescriptionHtml(out, parsed && parsed.code, lang);
+  out = injectShareLocaleHtml(out, lang);
+  out = injectSiteNameHtml(out);
+  out = injectInstallHandoffHtml(out, parsed && parsed.kind, parsed && parsed.code);
+  return injectShareAppLinksHtml(out, parsed && parsed.kind, parsed && parsed.code, href);
+}
diff --git a/playwright.config.mjs b/playwright.config.mjs
index 56968da..80962be 100644
--- a/playwright.config.mjs
+++ b/playwright.config.mjs
@@ -28,6 +28,9 @@ export default defineConfig({
   },
   use: {
     baseURL: BASE_URL,
+    // Swiss product default. Without this, Desktop Chrome's en-US navigator
+    // selects English copy and DE assertions wait out the 10s expect timeout.
+    locale: 'de-CH',
     trace: 'retain-on-failure',
     screenshot: 'only-on-failure',
   },
diff --git a/public/.well-known/apple-app-site-association b/public/.well-known/apple-app-site-association
new file mode 100644
index 0000000..78b5f6f
--- /dev/null
+++ b/public/.well-known/apple-app-site-association
@@ -0,0 +1,18 @@
+{
+  "applinks": {
+    "apps": [],
+    "details": [
+      {
+        "appID": "N2BP27J7N6.swiss.realunit.app",
+        "appIDs": ["N2BP27J7N6.swiss.realunit.app"],
+        "paths": ["/invite", "/invite/*", "/promo", "/promo/*"],
+        "components": [
+          { "/": "/invite" },
+          { "/": "/invite/*" },
+          { "/": "/promo" },
+          { "/": "/promo/*" }
+        ]
+      }
+    ]
+  }
+}
diff --git a/public/.well-known/assetlinks.json b/public/.well-known/assetlinks.json
new file mode 100644
index 0000000..7a4a13f
--- /dev/null
+++ b/public/.well-known/assetlinks.json
@@ -0,0 +1,13 @@
+[
+  {
+    "relation": ["delegate_permission/common.handle_all_urls"],
+    "target": {
+      "namespace": "android_app",
+      "package_name": "swiss.realunit.app",
+      "sha256_cert_fingerprints": [
+        "7F:8B:14:54:E2:91:E9:DB:56:21:69:0A:64:23:7C:34:80:78:C6:5B:B4:86:31:CA:02:9D:14:20:E6:3C:7B:40",
+        "F4:39:0F:81:C9:C6:AA:22:DD:A6:60:34:50:49:5F:4D:A8:2C:1B:FC:43:60:46:9F:6C:1F:87:F9:B0:E3:3F:04"
+      ]
+    }
+  }
+]
diff --git a/public/_headers b/public/_headers
index ae86b75..b3afc0b 100644
--- a/public/_headers
+++ b/public/_headers
@@ -20,3 +20,49 @@
 
 /js/*
   Cache-Control: public, max-age=3600
+
+/invite/invite.js
+  Cache-Control: public, max-age=3600
+
+# Invite/promo HTML (SPA shells), including /invite/{code}. Short max-age
+# so copy-code / CTA markup rolls out without waiting on the zone Browser
+# Cache TTL. /invite/invite.js is restated after the wildcard so the 1h
+# script cache wins whether first- or last-match applies.
+/invite
+  Cache-Control: public, max-age=60
+
+/invite/
+  Cache-Control: public, max-age=60
+
+/invite/index.html
+  Cache-Control: public, max-age=60
+
+/invite/*
+  Cache-Control: public, max-age=60
+
+/promo
+  Cache-Control: public, max-age=60
+
+/promo/
+  Cache-Control: public, max-age=60
+
+/promo/index.html
+  Cache-Control: public, max-age=60
+
+/promo/*
+  Cache-Control: public, max-age=60
+
+/invite/invite.js
+  Cache-Control: public, max-age=3600
+
+/.well-known/apple-app-site-association
+  Content-Type: application/json
+  Cache-Control: public, max-age=3600
+
+/apple-app-site-association
+  Content-Type: application/json
+  Cache-Control: public, max-age=3600
+
+/.well-known/assetlinks.json
+  Content-Type: application/json
+  Cache-Control: public, max-age=3600
diff --git a/public/_redirects b/public/_redirects
new file mode 100644
index 0000000..ffe4488
--- /dev/null
+++ b/public/_redirects
@@ -0,0 +1,18 @@
+# Invite/promo only — do not 301 /.well-known/* (AASA and assetlinks
+# must be HTTP 200 on www, not a redirect). Apple fetches
+# https://www.realunit.app/.well-known/apple-app-site-association when
+# applinks:www.realunit.app is in the entitlements.
+# www /invite and /promo are also 200: Universal Links and the Smart App
+# Banner do not follow a 301 to the apex (Offerte Punkt 3).
+https://www.realunit.app/.well-known/apple-app-site-association  /.well-known/apple-app-site-association  200
+https://www.realunit.app/.well-known/assetlinks.json  /.well-known/assetlinks.json  200
+https://www.realunit.app/apple-app-site-association  /.well-known/apple-app-site-association  200
+https://www.realunit.app/invite   /invite/index.html  200
+https://www.realunit.app/invite/* /invite/index.html  200
+https://www.realunit.app/promo    /promo/index.html  200
+https://www.realunit.app/promo/*  /promo/index.html  200
+/invite    /invite/index.html  200
+/invite/*  /invite/index.html  200
+/promo     /promo/index.html   200
+/promo/*   /promo/index.html   200
+/apple-app-site-association  /.well-known/apple-app-site-association  200
diff --git a/public/_routes.json b/public/_routes.json
new file mode 100644
index 0000000..599f81a
--- /dev/null
+++ b/public/_routes.json
@@ -0,0 +1,5 @@
+{
+  "version": 1,
+  "include": ["/invite", "/invite/*", "/promo", "/promo/*"],
+  "exclude": ["/invite/invite.js"]
+}
diff --git a/public/apple-app-site-association b/public/apple-app-site-association
new file mode 100644
index 0000000..78b5f6f
--- /dev/null
+++ b/public/apple-app-site-association
@@ -0,0 +1,18 @@
+{
+  "applinks": {
+    "apps": [],
+    "details": [
+      {
+        "appID": "N2BP27J7N6.swiss.realunit.app",
+        "appIDs": ["N2BP27J7N6.swiss.realunit.app"],
+        "paths": ["/invite", "/invite/*", "/promo", "/promo/*"],
+        "components": [
+          { "/": "/invite" },
+          { "/": "/invite/*" },
+          { "/": "/promo" },
+          { "/": "/promo/*" }
+        ]
+      }
+    ]
+  }
+}
diff --git a/public/invite/index.html b/public/invite/index.html
new file mode 100644
index 0000000..d4c8943
--- /dev/null
+++ b/public/invite/index.html
@@ -0,0 +1,202 @@
+<!doctype html>
+<html lang="de">
+<head>
+  <meta charset="utf-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1" />
+  <title>RealUnit — Einladung</title>
+  <meta name="description" content="Öffne die RealUnit-App mit diesem Code." />
+  <meta name="theme-color" content="#1988C6" />
+  <meta name="format-detection" content="telephone=no, date=no" />
+  <meta name="robots" content="noindex" />
+  <link rel="icon" type="image/svg+xml" href="/assets/favicon.svg" />
+  <meta property="og:type" content="website" />
+  <meta property="og:site_name" content="RealUnit" />
+  <meta property="og:title" content="RealUnit — Einladung" />
+  <meta property="og:description" content="Öffne die RealUnit-App mit diesem Code." />
+  <meta property="og:image" content="https://realunit.app/assets/og.png" />
+  <meta property="og:image:width" content="1024" />
+  <meta property="og:image:height" content="500" />
+  <meta property="og:image:alt" content="RealUnit" />
+  <meta property="og:url" content="https://realunit.app/invite/" />
+  <link rel="canonical" href="https://realunit.app/invite/" />
+  <meta property="og:locale" content="de_CH" />
+  <meta property="og:locale:alternate" content="en_GB" />
+  <meta name="twitter:card" content="summary_large_image" />
+  <meta name="twitter:title" content="RealUnit — Einladung" />
+  <meta name="twitter:description" content="Öffne die RealUnit-App mit diesem Code." />
+  <meta name="twitter:image" content="https://realunit.app/assets/og.png" />
+  <meta name="twitter:image:alt" content="RealUnit" />
+  <meta name="twitter:url" content="https://realunit.app/invite/" />
+  <meta name="apple-itunes-app" content="app-id=6759720010" />
+  <script src="/js/lib/platform-core.js"></script>
+  <script src="/platform.js"></script>
+  <script src="/js/lib/invite-core.js"></script>
+  <script src="/js/invite-banner.js"></script>
+  <style>
+    :root { --bg: #f2f6fa; --blue: #1988C6; --ink: #343233; --muted: #647488; --red: #E02523; }
+    * { box-sizing: border-box; }
+    html, body { height: 100%; }
+    body {
+      margin: 0;
+      font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
+      color: var(--ink);
+      background: var(--bg);
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      min-height: 100%;
+      padding: clamp(16px, 4vw, 48px);
+    }
+    .card {
+      width: 100%;
+      max-width: 460px;
+      background: #fff;
+      border: 1px solid #e2e8f0;
+      border-radius: 18px;
+      padding: clamp(28px, 6vw, 44px) clamp(22px, 5vw, 40px);
+      text-align: center;
+    }
+    h1 { font-size: 1.4rem; margin: 0 0 10px; }
+    #state-invalid h1,
+    #state-invalid p { color: var(--red); }
+    p { color: var(--muted); line-height: 1.55; }
+    .hint {
+      margin-top: 16px;
+      padding: 12px 14px;
+      background: #e8f3fa;
+      color: var(--blue);
+      border-radius: 12px;
+      font-size: 0.9rem;
+      line-height: 1.45;
+    }
+    .code-box {
+      margin-top: 16px;
+      padding: 14px 14px 16px;
+      background: #f2f6fa;
+      border-radius: 12px;
+    }
+    .code-label {
+      margin: 0;
+      font-size: 0.8rem;
+      letter-spacing: 0.04em;
+      text-transform: uppercase;
+      color: var(--muted);
+    }
+    .code {
+      margin: 8px 0;
+      font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
+      font-size: 1.2rem;
+      font-weight: 600;
+      letter-spacing: 0.08em;
+      color: var(--ink);
+      word-break: break-all;
+      cursor: pointer;
+      user-select: all;
+      -webkit-user-select: all;
+    }
+    .code-hint { margin: 0 0 12px; font-size: 0.85rem; }
+    .code.code-copy-failed { color: var(--red); }
+    .btn {
+      display: inline-flex; align-items: center; justify-content: center;
+      width: 100%; padding: 14px 20px; border: 0; border-radius: 12px;
+      background: var(--blue); color: #fff; font-size: 1rem; font-weight: 600;
+      text-decoration: none; cursor: pointer;
+    }
+    .btn-secondary {
+      margin-top: 8px;
+      background: #fff;
+      color: var(--blue);
+      border: 1px solid var(--blue);
+    }
+    .btn-secondary.btn-copy-failed {
+      background: var(--red);
+      color: #fff;
+      border-color: var(--red);
+    }
+    .btn:focus-visible,
+    .code:focus-visible,
+    .store-link:focus-visible,
+    h1[tabindex="-1"]:focus,
+    .code-hint[tabindex="-1"]:focus,
+    #unavailable-cta:focus,
+    #invalid-home:focus {
+      outline: 2px solid var(--blue);
+      outline-offset: 3px;
+    }
+    #invalid-home { margin-top: 16px; }
+    .stores {
+      display: flex; flex-wrap: wrap; align-items: center; justify-content: center;
+      gap: 12px 16px; margin-top: 20px;
+    }
+    .store-link { display: inline-flex; border-radius: 10px; }
+    .store-badge { display: block; width: auto; }
+    .store-badge--apple { height: 40px; }
+    .store-badge--play { height: calc(40px * 68 / 52); }
+    html[data-platform="ios"] .store-link[data-store="apple"],
+    html[data-platform="android"] .store-link[data-store="play"] {
+      order: -1;
+      flex-basis: 100%;
+      justify-content: center;
+    }
+    html[data-platform="ios"] .store-badge--apple { height: 52px; }
+    html[data-platform="android"] .store-badge--play { height: calc(52px * 68 / 52); }
+    .only-mobile { display: none; }
+    html[data-platform] .only-mobile { display: block; }
+    html[data-platform] .only-desktop { display: none; }
+    .only-ios { display: none; }
+    html[data-platform="ios"] .only-ios { display: block; }
+    [hidden] { display: none !important; }
+  </style>
+</head>
+<body>
+  <main class="card">
+    <section id="state-loading" role="status" aria-live="polite" aria-busy="true">
+      <h1 id="loading-title">Einladung wird geladen…</h1>
+      <p id="loading-body">Einen Moment bitte.</p>
+    </section>
+    <div class="code-box" id="ok-code-box" hidden>
+      <p class="code-label" id="ok-code-label">Dein Code</p>
+      <p class="code notranslate" id="ok-code" translate="no" lang="zxx" x-apple-data-detectors="false" aria-describedby="ok-code-hint"></p>
+      <p class="code-hint" id="ok-code-hint" role="status" aria-live="polite" tabindex="-1"></p>
+      <button type="button" class="btn btn-secondary" id="ok-copy">Code kopieren</button>
+      <p class="only-desktop" id="ok-desktop"></p>
+      <p class="only-desktop">
+        <button type="button" class="btn btn-secondary" id="ok-copy-link">Link kopieren</button>
+      </p>
+      <p id="ok-pitch"></p>
+      <p class="hint only-ios" id="ok-retap" role="note"></p>
+    </div>
+    <div id="ok-open" hidden>
+      <p class="only-mobile"><a class="btn" id="ok-cta" href="realunit-wallet://open" rel="noopener">In der App öffnen</a></p>
+    </div>
+    <section id="state-ok" hidden role="status" aria-live="polite">
+      <h1 id="ok-title" tabindex="-1">Du bist eingeladen</h1>
+      <p id="ok-body" x-apple-data-detectors="false">Die App übernimmt den Code automatisch.</p>
+    </section>
+    <section id="state-invalid" hidden>
+      <div id="invalid-status" role="status" aria-live="assertive">
+        <h1 id="invalid-title" tabindex="-1">Link ungültig oder abgelaufen</h1>
+        <p id="invalid-body">Dieser Einladungs- oder Promo-Link ist ungültig oder bereits abgelaufen.</p>
+      </div>
+      <a class="btn" id="invalid-home" href="/">Zur Startseite</a>
+    </section>
+    <section id="state-unavailable" hidden>
+      <div id="unavailable-status" role="status" aria-live="polite">
+        <h1 id="unavailable-title" tabindex="-1">Dienst vorübergehend nicht erreichbar</h1>
+        <p id="unavailable-body">Wir konnten den Code gerade nicht prüfen. Bitte versuche es später erneut.</p>
+      </div>
+      <button class="btn" type="button" id="unavailable-cta" aria-describedby="unavailable-body">Erneut versuchen</button>
+      <a class="btn btn-secondary" id="unavailable-home" href="/">Zur Startseite</a>
+    </section>
+    <nav class="stores" aria-label="App herunterladen">
+      <a class="store-link" data-store="apple" href="https://apps.apple.com/ch/app/realunit/id6759720010" target="_blank" rel="noopener" aria-label="RealUnit im App Store laden">
+        <img class="store-badge store-badge--apple" src="/assets/badge-app-store.svg" width="120" height="40" alt="" decoding="async" />
+      </a>
+      <a class="store-link" data-store="play" href="https://play.google.com/store/apps/details?id=swiss.realunit.app" target="_blank" rel="noopener" aria-label="RealUnit jetzt bei Google Play">
+        <img class="store-badge store-badge--play" src="/assets/badge-google-play.png" width="646" height="250" alt="" decoding="async" />
+      </a>
+    </nav>
+  </main>
+  <script src="/invite/invite.js"></script>
+</body>
+</html>
diff --git a/public/invite/invite.js b/public/invite/invite.js
new file mode 100644
index 0000000..9992288
--- /dev/null
+++ b/public/invite/invite.js
@@ -0,0 +1,775 @@
+(function () {
+  'use strict';
+  var core = window.RealUnitInvite;
+  var params = new URLSearchParams(window.location.search);
+  var lang = core.resolveLang({
+    urlLang: params.get('lang'),
+    navigatorLang: navigator.language,
+    supported: core.SUPPORTED_LANGS,
+    defaultLang: 'de',
+  });
+  var copy = core.I18N[lang];
+  var parsed = core.parseCodeFromLocation(
+    window.location.pathname,
+    window.location.search,
+    window.location.hash,
+  );
+
+  function setText(id, text) {
+    var el = document.getElementById(id);
+    if (el) el.textContent = text;
+  }
+
+  function setCodeHint(text, busy) {
+    setText('ok-code-hint', text);
+    var hint = document.getElementById('ok-code-hint');
+    if (hint) hint.setAttribute('aria-busy', busy ? 'true' : 'false');
+  }
+
+  function hideLoading() {
+    var loading = document.getElementById('state-loading');
+    if (!loading) return;
+    loading.hidden = true;
+    loading.setAttribute('aria-busy', 'false');
+  }
+
+  function setMeta(selector, content) {
+    var el = document.querySelector(selector);
+    if (el && content) el.setAttribute('content', content);
+  }
+
+  var THEME_BLUE = '#1988C6';
+  var THEME_RED = '#E02523';
+  function setThemeColor(color) {
+    setMeta('meta[name="theme-color"]', color);
+  }
+
+  function setCanonical(kind, code) {
+    var path = '/' + (kind || 'invite');
+    if (code) path += '/' + encodeURIComponent(code);
+    var href = (core.canonicalOrigin(window.location.hostname) || window.location.origin) + path;
+    setMeta('meta[property="og:url"]', href);
+    setMeta('meta[name="twitter:url"]', href);
+    var link = document.querySelector('link[rel="canonical"]');
+    if (!link) {
+      link = document.createElement('link');
+      link.setAttribute('rel', 'canonical');
+      document.head.appendChild(link);
+    }
+    link.setAttribute('href', href);
+  }
+
+  function ensureMeta(selector, keyAttr, key) {
+    var el = document.querySelector(selector);
+    if (el) return el;
+    el = document.createElement('meta');
+    el.setAttribute(keyAttr, key);
+    document.head.appendChild(el);
+    return el;
+  }
+
+  function setShareMeta(title, description) {
+    if (title) {
+      setMeta('meta[property="og:title"]', title);
+      setMeta('meta[name="twitter:title"]', title);
+      setMeta('meta[property="og:image:alt"]', title);
+      setMeta('meta[name="twitter:image:alt"]', title);
+    }
+    if (description) {
+      setMeta('meta[property="og:description"]', description);
+      setMeta('meta[name="twitter:description"]', description);
+      setMeta('meta[name="description"]', description);
+    }
+  }
+
+  function show(id) {
+    ['state-loading', 'state-ok', 'state-invalid', 'state-unavailable'].forEach(function (name) {
+      var node = document.getElementById(name);
+      if (!node) return;
+      node.hidden = name !== id;
+      if (name === id) {
+        node.setAttribute('aria-busy', name === 'state-loading' ? 'true' : 'false');
+        if (name === 'state-loading') return;
+        var active = document.activeElement;
+        var keepFocus = core.keepLandingFocus(active);
+        if (!keepFocus) {
+          var action =
+            name === 'state-unavailable'
+              ? document.getElementById('unavailable-cta')
+              : name === 'state-invalid'
+                ? document.getElementById('invalid-home')
+                : null;
+          if (action) {
+            action.focus({ preventScroll: true });
+            return;
+          }
+          var heading = node.querySelector('h1');
+          if (heading) heading.focus({ preventScroll: true });
+        }
+      }
+    });
+  }
+
+  function setCodeBoxVisible(visible) {
+    var box = document.getElementById('ok-code-box');
+    if (box) box.hidden = !visible;
+  }
+
+  function setOpenVisible(visible) {
+    var open = document.getElementById('ok-open');
+    if (!open) return;
+    var platform = document.documentElement.getAttribute('data-platform');
+    open.hidden = !visible || (platform !== 'ios' && platform !== 'android');
+  }
+
+  document.documentElement.lang = lang;
+  var pathIsPromo = /^\/+promo(\/|$)/i.test(window.location.pathname);
+  var isPromoPath = parsed ? parsed.kind === 'promo' : pathIsPromo;
+  document.title = isPromoPath ? copy['doc.title.promo'] : copy['doc.title.invite'];
+  setText('loading-title', isPromoPath ? copy['loading.title.promo'] : copy['loading.title']);
+  setText('loading-body', copy['loading.body']);
+  setText('invalid-title', copy['invalid.title']);
+  setText('invalid-body', copy['invalid.body']);
+  setText('invalid-home', copy['invalid.home']);
+  setText('unavailable-title', copy['unavailable.title']);
+  setText('unavailable-body', copy['unavailable.body']);
+  setText('unavailable-cta', copy['unavailable.cta']);
+  setText('unavailable-home', copy['unavailable.home']);
+  var homeHref = core.homeUrl(window.location.hostname);
+  ['invalid-home', 'unavailable-home'].forEach(function (id) {
+    var link = document.getElementById(id);
+    if (link) link.setAttribute('href', homeHref);
+  });
+  setText('ok-cta', copy['cta']);
+  setText('ok-desktop', copy['cta.desktop']);
+  function setPitch(kind) {
+    setText('ok-pitch', kind === 'promo' ? copy['promo.body.fallback'] : copy['invite.pitch']);
+  }
+  setPitch(parsed ? parsed.kind : isPromoPath ? 'promo' : 'invite');
+  setText('ok-retap', copy['retap']);
+  setText('ok-code-label', copy['code.label']);
+  setText('ok-code-hint', copy['code.hint']);
+  setText('ok-copy', copy['code.copy']);
+  setText('ok-copy-link', copy['link.copy']);
+  var descEl = document.querySelector('meta[name="description"]');
+  if (descEl && copy['doc.desc']) descEl.setAttribute('content', copy['doc.desc']);
+  setShareMeta(document.title, copy['doc.desc']);
+  setCanonical(parsed ? parsed.kind : isPromoPath ? 'promo' : 'invite', parsed && parsed.code);
+  setMeta('meta[property="og:locale"]', lang === 'en' ? 'en_GB' : 'de_CH');
+  setMeta('meta[property="og:locale:alternate"]', lang === 'en' ? 'de_CH' : 'en_GB');
+  var storesNav = document.querySelector('.stores');
+  if (storesNav && copy['stores.nav']) {
+    storesNav.setAttribute('aria-label', copy['stores.nav']);
+  }
+  var platform = document.documentElement.getAttribute('data-platform');
+  document.querySelectorAll('a[data-store="apple"]').forEach(function (el) {
+    if (copy['stores.apple.aria']) el.setAttribute('aria-label', copy['stores.apple.aria']);
+    var img = el.querySelector('img');
+    if (img) img.setAttribute('alt', '');
+    if (platform === 'ios') el.setAttribute('aria-current', 'true');
+    else el.removeAttribute('aria-current');
+  });
+  document.querySelectorAll('a[data-store="play"]').forEach(function (el) {
+    if (copy['stores.play.aria']) el.setAttribute('aria-label', copy['stores.play.aria']);
+    var img = el.querySelector('img');
+    if (img) img.setAttribute('alt', '');
+    if (platform === 'android') el.setAttribute('aria-current', 'true');
+    else el.removeAttribute('aria-current');
+  });
+
+  if (!parsed) {
+    setCodeBoxVisible(false);
+    setOpenVisible(false);
+    document.title = copy['invalid.title'];
+    setShareMeta(copy['invalid.title'], copy['invalid.body']);
+    setThemeColor(THEME_RED);
+    show('state-invalid');
+    return;
+  }
+
+  setText('ok-code', parsed.code);
+  setCodeHint(copy['code.checking'], true);
+  setCodeBoxVisible(true);
+  setOpenVisible(false);
+  hideLoading();
+  var copyBtn = document.getElementById('ok-copy');
+  var copyLinkBtn = document.getElementById('ok-copy-link');
+  var codeEl = document.getElementById('ok-code');
+  if (codeEl) {
+    codeEl.setAttribute('title', copy['code.copy']);
+    codeEl.setAttribute('role', 'button');
+    codeEl.setAttribute('tabindex', '0');
+    codeEl.setAttribute('aria-label', copy['code.label'] + ' ' + parsed.code);
+  }
+  var copyInFlight = { code: false, link: false };
+  function copyControl(slot) {
+    return slot === 'link' ? copyLinkBtn : copyBtn;
+  }
+  function setCopyBusy(slot, busy) {
+    var btn = copyControl(slot);
+    if (btn) {
+      btn.disabled = !!busy;
+      btn.setAttribute('aria-busy', busy ? 'true' : 'false');
+    }
+    if (slot !== 'code' || !codeEl) return;
+    codeEl.setAttribute('aria-busy', busy ? 'true' : 'false');
+    if (busy) codeEl.setAttribute('aria-disabled', 'true');
+    else codeEl.removeAttribute('aria-disabled');
+  }
+  function copyValue(value, onCopied, onFailed, slot) {
+    slot = slot || 'code';
+    if (copyInFlight[slot]) return;
+    copyInFlight[slot] = true;
+    setCopyBusy(slot, true);
+    var fallback = function () {
+      var area = document.createElement('textarea');
+      area.value = value;
+      area.setAttribute('readonly', '');
+      area.setAttribute('aria-hidden', 'true');
+      area.setAttribute('tabindex', '-1');
+      area.style.position = 'fixed';
+      area.style.left = '-9999px';
+      document.body.appendChild(area);
+      area.select();
+      var ok = false;
+      try {
+        ok = !!document.execCommand('copy');
+      } catch (e) {
+        ok = false;
+      } finally {
+        document.body.removeChild(area);
+      }
+      return ok;
+    };
+    var settled = false;
+    var copyWait;
+    var finish = function (ok) {
+      if (settled) return;
+      settled = true;
+      if (copyWait) clearTimeout(copyWait);
+      copyInFlight[slot] = false;
+      setCopyBusy(slot, false);
+      if (ok) onCopied();
+      else if (onFailed) onFailed();
+    };
+    copyWait = setTimeout(function () {
+      finish(fallback());
+    }, core.COPY_TIMEOUT_MS);
+    if (navigator.clipboard && navigator.clipboard.writeText) {
+      navigator.clipboard
+        .writeText(value)
+        .then(function () {
+          finish(true);
+        })
+        .catch(function () {
+          finish(fallback());
+        });
+    } else {
+      finish(fallback());
+    }
+  }
+  var lookupInFlight = false;
+  var retry = document.getElementById('unavailable-cta');
+  function setRetryBusy(busy) {
+    if (!retry) return;
+    retry.disabled = !!busy;
+    retry.setAttribute('aria-busy', busy ? 'true' : 'false');
+  }
+  var copyAnnounced = false;
+  function announceCopy(copied) {
+    if (copied) {
+      copyAnnounced = true;
+      setCodeHint(copy['code.copied'], false);
+      return;
+    }
+    if (!copyAnnounced) return;
+    copyAnnounced = false;
+    if (lookupInFlight) setCodeHint(copy['code.checking'], true);
+    else setCodeHint(copy['code.hint'], false);
+  }
+  function setCopyState(copied) {
+    var label = copied ? copy['code.copied'] : copy['code.copy'];
+    if (copyBtn) {
+      copyBtn.textContent = label;
+      copyBtn.setAttribute('aria-label', label + ' ' + parsed.code);
+      copyBtn.removeAttribute('aria-live');
+    }
+    if (codeEl) {
+      codeEl.setAttribute(
+        'aria-label',
+        (copied ? copy['code.copied'] : copy['code.label']) + ' ' + parsed.code,
+      );
+    }
+    announceCopy(copied);
+  }
+  setCopyState(false);
+  var copyResetId;
+  function copyCode() {
+    if (copyInFlight.code) return;
+    copyValue(
+      parsed.code,
+      function () {
+        if (copyBtn) copyBtn.classList.remove('btn-copy-failed');
+        if (codeEl) codeEl.classList.remove('code-copy-failed');
+        setCopyState(true);
+        window.clearTimeout(copyResetId);
+        copyResetId = window.setTimeout(function () {
+          setCopyState(false);
+        }, 2000);
+      },
+      function () {
+        if (copyBtn) copyBtn.classList.add('btn-copy-failed');
+        if (codeEl) codeEl.classList.add('code-copy-failed');
+        setCopyState(false);
+        window.clearTimeout(copyResetId);
+        copyResetId = window.setTimeout(function () {
+          if (copyBtn) copyBtn.classList.remove('btn-copy-failed');
+          if (codeEl) codeEl.classList.remove('code-copy-failed');
+        }, 2000);
+      },
+      'code',
+    );
+  }
+  if (copyBtn) copyBtn.addEventListener('click', copyCode);
+  function copyLinkHref() {
+    var canonical = document.querySelector('link[rel="canonical"]');
+    return (
+      (canonical && canonical.getAttribute('href')) ||
+      window.location.origin + '/' + parsed.kind + '/' + encodeURIComponent(parsed.code)
+    );
+  }
+  function setCopyLinkState(copied) {
+    if (!copyLinkBtn) return;
+    var label = copied ? copy['code.copied'] : copy['link.copy'];
+    copyLinkBtn.textContent = label;
+    copyLinkBtn.setAttribute('aria-label', label + ' ' + copyLinkHref());
+    copyLinkBtn.removeAttribute('aria-live');
+    announceCopy(copied);
+  }
+  setCopyLinkState(false);
+  var copyLinkResetId;
+  function copyLink() {
+    copyValue(
+      copyLinkHref(),
+      function () {
+        if (copyLinkBtn) copyLinkBtn.classList.remove('btn-copy-failed');
+        setCopyLinkState(true);
+        window.clearTimeout(copyLinkResetId);
+        copyLinkResetId = window.setTimeout(function () {
+          setCopyLinkState(false);
+        }, 2000);
+      },
+      function () {
+        if (copyLinkBtn) copyLinkBtn.classList.add('btn-copy-failed');
+        setCopyLinkState(false);
+        window.clearTimeout(copyLinkResetId);
+        copyLinkResetId = window.setTimeout(function () {
+          if (copyLinkBtn) copyLinkBtn.classList.remove('btn-copy-failed');
+        }, 2000);
+      },
+      'link',
+    );
+  }
+  if (copyLinkBtn) copyLinkBtn.addEventListener('click', copyLink);
+  if (codeEl) {
+    codeEl.addEventListener('click', copyCode);
+    codeEl.addEventListener('keydown', function (event) {
+      if (event.key === 'Enter' || event.key === ' ') {
+        event.preventDefault();
+        copyCode();
+      }
+    });
+  }
+
+  var base = core.apiBase({ host: window.location.hostname, paramApi: params.get('api') });
+  var url = core.buildLookupUrl(base, parsed.code);
+  var appHref = core.openInAppUrl(
+    parsed.kind,
+    parsed.code,
+    document.documentElement.getAttribute('data-platform'),
+  );
+  var cta = document.getElementById('ok-cta');
+  if (cta) {
+    cta.setAttribute('href', appHref);
+    if (document.documentElement.getAttribute('data-platform') === 'ios') {
+      cta.setAttribute('aria-describedby', 'ok-retap');
+    }
+  }
+  var androidAlt = document.querySelector('link[rel="alternate"][data-android-app]');
+  var iosAlt = document.querySelector('link[rel="alternate"][data-ios-app]');
+  function ensureAltLink(existing, attr) {
+    if (existing) return existing;
+    var link = document.createElement('link');
+    link.setAttribute('rel', 'alternate');
+    link.setAttribute(attr, '');
+    document.head.appendChild(link);
+    return link;
+  }
+  var handoffActive = false;
+  function setShareAppLinks() {
+    var href = core.landingCanonicalHref(window.location.hostname, parsed.kind, parsed.code);
+    var scheme = core.appLink(parsed.kind, parsed.code);
+    ensureMeta('meta[property="al:ios:url"]', 'property', 'al:ios:url').setAttribute(
+      'content',
+      scheme,
+    );
+    ensureMeta(
+      'meta[property="al:ios:app_store_id"]',
+      'property',
+      'al:ios:app_store_id',
+    ).setAttribute('content', '6759720010');
+    ensureMeta('meta[property="al:ios:app_name"]', 'property', 'al:ios:app_name').setAttribute(
+      'content',
+      'RealUnit',
+    );
+    ensureMeta('meta[property="al:android:url"]', 'property', 'al:android:url').setAttribute(
+      'content',
+      scheme,
+    );
+    ensureMeta(
+      'meta[property="al:android:package"]',
+      'property',
+      'al:android:package',
+    ).setAttribute('content', 'swiss.realunit.app');
+    ensureMeta('meta[property="al:android:class"]', 'property', 'al:android:class').setAttribute(
+      'content',
+      'swiss.realunit.app.MainActivity',
+    );
+    ensureMeta(
+      'meta[property="al:android:app_name"]',
+      'property',
+      'al:android:app_name',
+    ).setAttribute('content', 'RealUnit');
+    ensureMeta('meta[property="al:web:url"]', 'property', 'al:web:url').setAttribute(
+      'content',
+      href,
+    );
+    ensureMeta(
+      'meta[name="twitter:app:name:iphone"]',
+      'name',
+      'twitter:app:name:iphone',
+    ).setAttribute('content', 'RealUnit');
+    ensureMeta('meta[name="twitter:app:id:iphone"]', 'name', 'twitter:app:id:iphone').setAttribute(
+      'content',
+      '6759720010',
+    );
+    ensureMeta(
+      'meta[name="twitter:app:url:iphone"]',
+      'name',
+      'twitter:app:url:iphone',
+    ).setAttribute('content', scheme);
+    ensureMeta('meta[name="twitter:app:name:ipad"]', 'name', 'twitter:app:name:ipad').setAttribute(
+      'content',
+      'RealUnit',
+    );
+    ensureMeta('meta[name="twitter:app:id:ipad"]', 'name', 'twitter:app:id:ipad').setAttribute(
+      'content',
+      '6759720010',
+    );
+    ensureMeta('meta[name="twitter:app:url:ipad"]', 'name', 'twitter:app:url:ipad').setAttribute(
+      'content',
+      scheme,
+    );
+    ensureMeta(
+      'meta[name="twitter:app:name:googleplay"]',
+      'name',
+      'twitter:app:name:googleplay',
+    ).setAttribute('content', 'RealUnit');
+    ensureMeta(
+      'meta[name="twitter:app:id:googleplay"]',
+      'name',
+      'twitter:app:id:googleplay',
+    ).setAttribute('content', 'swiss.realunit.app');
+    ensureMeta(
+      'meta[name="twitter:app:url:googleplay"]',
+      'name',
+      'twitter:app:url:googleplay',
+    ).setAttribute('content', scheme);
+    ensureMeta('meta[name="twitter:app:country"]', 'name', 'twitter:app:country').setAttribute(
+      'content',
+      'CH',
+    );
+  }
+  function clearShareAppLinks() {
+    [
+      'al:ios:url',
+      'al:ios:app_store_id',
+      'al:ios:app_name',
+      'al:android:url',
+      'al:android:package',
+      'al:android:class',
+      'al:android:app_name',
+      'al:web:url',
+    ].forEach(function (prop) {
+      var el = document.querySelector('meta[property="' + prop + '"]');
+      if (el) el.removeAttribute('content');
+    });
+    [
+      'twitter:app:name:iphone',
+      'twitter:app:id:iphone',
+      'twitter:app:url:iphone',
+      'twitter:app:name:ipad',
+      'twitter:app:id:ipad',
+      'twitter:app:url:ipad',
+      'twitter:app:name:googleplay',
+      'twitter:app:id:googleplay',
+      'twitter:app:url:googleplay',
+      'twitter:app:country',
+    ].forEach(function (name) {
+      var el = document.querySelector('meta[name="' + name + '"]');
+      if (el) el.removeAttribute('content');
+    });
+  }
+  function setInstallHandoff() {
+    handoffActive = true;
+    setMeta('meta[name="apple-itunes-app"]', core.itunesBanner(parsed.kind, parsed.code));
+    androidAlt = ensureAltLink(androidAlt, 'data-android-app');
+    androidAlt.setAttribute('href', core.androidAppUrl(parsed.kind, parsed.code));
+    iosAlt = ensureAltLink(iosAlt, 'data-ios-app');
+    iosAlt.setAttribute('href', core.iosAppUrl(parsed.kind, parsed.code));
+    document.querySelectorAll('a[data-store="play"]').forEach(function (el) {
+      el.setAttribute('href', core.playStoreUrl(parsed.code, parsed.kind));
+    });
+    setShareAppLinks();
+  }
+  function clearInstallHandoff() {
+    handoffActive = false;
+    setMeta('meta[name="apple-itunes-app"]', core.itunesBanner());
+    document.querySelectorAll('a[data-store="play"]').forEach(function (el) {
+      el.setAttribute('href', core.playStoreUrl());
+    });
+    if (androidAlt) androidAlt.removeAttribute('href');
+    if (iosAlt) iosAlt.removeAttribute('href');
+    clearShareAppLinks();
+  }
+  document.querySelectorAll('a[data-store="apple"]').forEach(function (el) {
+    el.setAttribute('href', core.appStoreUrl());
+  });
+  // Store badges stay visible during lookup — attach the code now so a
+  // Play/iTunes tap still carries it. Invalid lookup clears this.
+  setInstallHandoff();
+  // App Store has no Play referrer. Copy on the tap (user gesture) so a
+  // badge/CTA install can still be pasted at registration (Offerte Punkt 3).
+  function bindInstallHandoffCopy(el) {
+    if (!el) return;
+    el.addEventListener('click', function () {
+      if (!handoffActive) return;
+      copyCode();
+    });
+  }
+  bindInstallHandoffCopy(cta);
+  document
+    .querySelectorAll('a[data-store="apple"], a[data-store="play"]')
+    .forEach(bindInstallHandoffCopy);
+
+  function render(result) {
+    lookupInFlight = false;
+    setRetryBusy(false);
+    if (result.state === 'invalid') {
+      var invalidCopy = core.invalidLandingCopy(result, copy);
+      document.title = invalidCopy.title;
+      setText('invalid-title', invalidCopy.title);
+      setText('invalid-body', invalidCopy.body);
+      setShareMeta(invalidCopy.title, invalidCopy.body);
+      setThemeColor(THEME_RED);
+      setCodeBoxVisible(false);
+      setOpenVisible(false);
+      clearInstallHandoff();
+      setCodeHint(copy['code.hint'], false);
+      show('state-invalid');
+      return;
+    }
+    if (result.state === 'unavailable') {
+      document.title = copy['unavailable.title'];
+      setShareMeta(copy['unavailable.title'], copy['unavailable.body']);
+      setThemeColor(THEME_BLUE);
+      setPitch(parsed.kind);
+      setCodeHint(copy['code.hint'], false);
+      setCodeBoxVisible(true);
+      setOpenVisible(true);
+      setInstallHandoff();
+      show('state-unavailable');
+      return;
+    }
+    setThemeColor(THEME_BLUE);
+    setCodeHint(copy['code.hint'], false);
+    setInstallHandoff();
+    setCodeBoxVisible(true);
+    setOpenVisible(true);
+    var payload = result.payload || {};
+    var okTitleEl = document.getElementById('ok-title');
+    var okBodyEl = document.getElementById('ok-body');
+    function setNoTranslate(el, off) {
+      if (!el) return;
+      if (off) {
+        el.setAttribute('translate', 'no');
+        el.classList.add('notranslate');
+      } else {
+        el.removeAttribute('translate');
+        el.classList.remove('notranslate');
+      }
+    }
+    function setOkBody(text, sourceLang, lockTranslate) {
+      setText('ok-body', text);
+      if (!okBodyEl) return;
+      if (sourceLang && sourceLang !== lang) okBodyEl.setAttribute('lang', sourceLang);
+      else okBodyEl.removeAttribute('lang');
+      setNoTranslate(okBodyEl, !!lockTranslate);
+    }
+    if (result.state === 'promo') {
+      setPitch('promo');
+      document.title = copy['doc.title.promo'];
+      setText('ok-title', copy['promo.title']);
+      setNoTranslate(okTitleEl, false);
+      var promoText = String(core.promoBody(payload, lang) || '').trim();
+      setOkBody(
+        promoText || copy['promo.body.fallback'],
+        promoText ? core.promoBodyLang(payload, lang) : lang,
+        !!promoText,
+      );
+    } else {
+      setPitch('invite');
+      document.title = copy['doc.title.invite'];
+      var invitee = core.personDisplayName(payload.inviteeName);
+      setText(
+        'ok-title',
+        invitee
+          ? core.interpolate(copy['invite.title'], { invitee: invitee })
+          : copy['invite.title.fallback'],
+      );
+      setNoTranslate(okTitleEl, !!invitee);
+      var inviter = core.personDisplayName(payload.inviterName);
+      setOkBody(core.inviteLandingBody(payload, copy), lang, !!inviter);
+    }
+    show('state-ok');
+    var okTitle = document.getElementById('ok-title');
+    var okBody = document.getElementById('ok-body');
+    setShareMeta(
+      (okTitle && okTitle.textContent) || document.title,
+      (okBody && okBody.textContent) || copy['doc.desc'],
+    );
+  }
+
+  // Local preview only (?mock=1|invalid|spent|unavailable|loading|fallback).
+  // Never honored on realunit.app / dev.realunit.app, so a shared prod link
+  // cannot spoof state.
+  var mock = params.get('mock');
+  if (mock && !core.isRealUnitHost(window.location.hostname)) {
+    if (mock === 'invalid') {
+      render({ state: 'invalid' });
+    } else if (mock === 'spent') {
+      render({ state: 'invalid', code: 'SPENT' });
+    } else if (mock === 'unavailable') {
+      render({ state: 'unavailable' });
+    } else if (mock === 'loading') {
+      show('state-loading');
+    } else if (mock === 'fallback') {
+      render(core.mapResult(200, parsed.kind === 'promo' ? { kind: 'promo' } : { kind: 'invite' }));
+    } else {
+      render(
+        core.mapResult(
+          200,
+          parsed.kind === 'promo'
+            ? {
+                kind: 'promo',
+                actionText:
+                  'Mit dem Code EVT1 schenken wir dir bei deinem ersten erfolgreich abgewickelten Kauf von mindestens 200 RealUnit-Aktientoken 20 Token dazu. Die 20 Token werden als Zugabe zum Kauf gewährt und mindern damit den effektiven Kaufpreis. Gültig bis 7.9.2026, einmal je Person, begrenzt auf 100 Einlösungen, nicht kumulierbar mit einer Empfehlungsprämie. Die RealUnit Schweiz AG kann die Aktion jederzeit beenden.',
+                campaignTextEn:
+                  'With code EVT1 we give you 20 tokens on your first successful purchase of at least 200 RealUnit share tokens. The 20 tokens are granted as a bonus and reduce the effective purchase price. Valid until 7 Sep 2026, once per person, limited to 100 redemptions, not combinable with a referral prize. RealUnit Schweiz AG may end the campaign at any time.',
+              }
+            : {
+                kind: 'invite',
+                inviterName: 'Björn',
+                inviteeName: 'Alice',
+                actionText: '',
+              },
+        ),
+      );
+    }
+  } else {
+    lookupCode();
+  }
+
+  var lookupAbort;
+  var lookupTimeoutId;
+  function lookupCode() {
+    if (lookupAbort) lookupAbort.abort();
+    clearTimeout(lookupTimeoutId);
+    var unavailable = document.getElementById('state-unavailable');
+    var retrying = !!(unavailable && !unavailable.hidden);
+    lookupInFlight = true;
+    setRetryBusy(true);
+    if (!retrying) {
+      document.title =
+        parsed.kind === 'promo' ? copy['loading.title.promo'] : copy['loading.title'];
+      setShareMeta(document.title, copy['loading.body']);
+      setThemeColor(THEME_BLUE);
+      setCodeHint(copy['code.checking'], true);
+      setCodeBoxVisible(true);
+      setOpenVisible(false);
+      hideLoading();
+      var active = document.activeElement;
+      ['state-ok', 'state-invalid', 'state-unavailable'].forEach(function (name) {
+        var node = document.getElementById(name);
+        if (!node) return;
+        node.hidden = true;
+        node.setAttribute('aria-busy', 'false');
+      });
+      if (
+        active &&
+        active !== document.body &&
+        active !== document.documentElement &&
+        (!active.isConnected || active.closest('[hidden]'))
+      ) {
+        var hint = document.getElementById('ok-code-hint');
+        if (hint) hint.focus({ preventScroll: true });
+      }
+    } else {
+      hideLoading();
+    }
+
+    var timedOut = false;
+    lookupAbort =
+      typeof AbortController === 'function'
+        ? new AbortController()
+        : { abort: function () {}, signal: undefined };
+    var abort = lookupAbort;
+    lookupTimeoutId = setTimeout(function () {
+      timedOut = true;
+      abort.abort();
+      if (abort !== lookupAbort) return;
+      // Budget elapsed — show Retry even if fetch abort is a no-op.
+      render({ state: 'unavailable' });
+    }, core.LOOKUP_TIMEOUT_MS);
+
+    fetch(url, core.lookupFetchInit(abort.signal))
+      .then(function (res) {
+        return res.json().then(
+          function (body) {
+            return { status: res.status, body: body };
+          },
+          function () {
+            return { status: res.status, body: null };
+          },
+        );
+      })
+      .then(function (r) {
+        if (abort !== lookupAbort || timedOut) return;
+        clearTimeout(lookupTimeoutId);
+        render(core.finalizeLookup(timedOut, r.status, r.body, parsed.kind));
+      })
+      .catch(function (err) {
+        if (abort !== lookupAbort || timedOut) return;
+        clearTimeout(lookupTimeoutId);
+        if (err && err.name === 'AbortError') return;
+        render({ state: 'unavailable' });
+      });
+  }
+
+  if (retry) {
+    retry.addEventListener('click', function () {
+      if (lookupInFlight) return;
+      lookupCode();
+    });
+  }
+})();
diff --git a/public/js/invite-banner.js b/public/js/invite-banner.js
new file mode 100644
index 0000000..5d0db91
--- /dev/null
+++ b/public/js/invite-banner.js
@@ -0,0 +1,15 @@
+/**
+ * Smart App Banner app-argument from the invite/promo URL.
+ * Must load from <head> as a same-origin file: Cloudflare Pages CSP
+ * (`default-src 'self'`) blocks inline <script>, so a banner install
+ * would drop the code if this ran only in invite.js at </body>.
+ * Production HTML already has app-argument from functions/_middleware.js
+ * (Safari snapshots the meta from the bytes); this is the JS fallback
+ * for local files and previews that do not run Pages Functions.
+ */
+(function () {
+  'use strict';
+  if (window.RealUnitInvite) {
+    window.RealUnitInvite.applyItunesBannerFromLocation(document, location);
+  }
+})();
diff --git a/public/js/lib/invite-core.js b/public/js/lib/invite-core.js
new file mode 100644
index 0000000..3a99c9a
--- /dev/null
+++ b/public/js/lib/invite-core.js
@@ -0,0 +1,1426 @@
+/**
+ * Pure helpers for /invite/:code and /promo/:code landing pages.
+ * No DOM or network. 100% unit-tested.
+ */
+(function (global) {
+  'use strict';
+
+  var SUPPORTED_LANGS = ['de', 'en'];
+  var REALUNIT_HOSTS = ['realunit.app', 'www.realunit.app', 'dev.realunit.app'];
+  var APP_STORE_ID = '6759720010';
+  var APP_STORE_URL = 'https://apps.apple.com/ch/app/realunit/id' + APP_STORE_ID;
+  var PLAY_STORE_BASE = 'https://play.google.com/store/apps/details?id=swiss.realunit.app';
+
+  var I18N = {
+    de: {
+      'doc.title.invite': 'RealUnit — Einladung',
+      'doc.title.promo': 'RealUnit — Promo-Code',
+      'doc.desc': 'Öffne die RealUnit-App mit diesem Code.',
+      'loading.title': 'Einladung wird geladen…',
+      'loading.body': 'Einen Moment bitte.',
+      'loading.title.promo': 'Promo-Code wird geladen…',
+      'invite.title': 'Hey {invitee}',
+      'invite.title.fallback': 'Du bist eingeladen',
+      'invite.body': '{inviter} lädt dich ein zu RealUnit.',
+      'invite.body.fallback': 'Du bist zu RealUnit eingeladen.',
+      'invite.pitch': 'Werde Aktionärin der RealUnit Schweiz AG, direkt in deinem eigenen Wallet.',
+      'promo.title': 'Promo-Code',
+      'promo.body.fallback': 'Öffne die App, um den Promo-Code zu übernehmen.',
+      retap:
+        'App schon installiert? Dann öffnet dieser Link sie direkt. Nach einer Neu-Installation: Link nochmals antippen oder den Code unten kopieren und bei der Registrierung einfügen.',
+      'code.label': 'Dein Code',
+      'code.checking': 'Code wird geprüft…',
+      'code.hint': 'Falls die App den Code nicht übernimmt, gib ihn bei der Registrierung ein.',
+      'code.copy': 'Code kopieren',
+      'code.copied': 'Kopiert',
+      'link.copy': 'Link kopieren',
+      cta: 'In der App öffnen',
+      'cta.desktop': 'Öffne diesen Link auf deinem Smartphone, um die App zu starten.',
+      'stores.nav': 'App herunterladen',
+      'stores.apple.aria': 'RealUnit im App Store laden',
+      'stores.apple.alt': 'Laden im App Store',
+      'stores.play.aria': 'RealUnit jetzt bei Google Play',
+      'stores.play.alt': 'Jetzt bei Google Play',
+      'invalid.title': 'Link ungültig oder abgelaufen',
+      'invalid.body': 'Dieser Einladungs- oder Promo-Link ist ungültig oder bereits abgelaufen.',
+      'invalid.home': 'Zur Startseite',
+      'spent.title': 'Code bereits eingelöst',
+      'spent.body': 'Dieser Einladungs- oder Promo-Code wurde bereits verwendet.',
+      'unavailable.title': 'Dienst vorübergehend nicht erreichbar',
+      'unavailable.body':
+        'Wir konnten den Code gerade nicht prüfen. Bitte versuche es später erneut.',
+      'unavailable.cta': 'Erneut versuchen',
+      'unavailable.home': 'Zur Startseite',
+    },
+    en: {
+      'doc.title.invite': 'RealUnit — Invitation',
+      'doc.title.promo': 'RealUnit — Promo code',
+      'doc.desc': 'Open the RealUnit app with this code.',
+      'loading.title': 'Loading invitation…',
+      'loading.body': 'One moment.',
+      'loading.title.promo': 'Loading promo code…',
+      'invite.title': 'Hey {invitee}',
+      'invite.title.fallback': 'You are invited',
+      'invite.body': '{inviter} is inviting you to RealUnit.',
+      'invite.body.fallback': 'You are invited to RealUnit.',
+      'invite.pitch': 'Become a shareholder of RealUnit Schweiz AG, in your own wallet.',
+      'promo.title': 'Promo code',
+      'promo.body.fallback': 'Open the app to apply this promo code.',
+      retap:
+        'App already installed? This link opens it directly. After a fresh install, tap the link again or copy the code below and enter it during registration.',
+      'code.label': 'Your code',
+      'code.checking': 'Checking code…',
+      'code.hint': 'If the app does not take over the code, enter it during registration.',
+      'code.copy': 'Copy code',
+      'code.copied': 'Copied',
+      'link.copy': 'Copy link',
+      cta: 'Open in the app',
+      'cta.desktop': 'Open this link on your phone to launch the app.',
+      'stores.nav': 'Download the app',
+      'stores.apple.aria': 'Get RealUnit on the App Store',
+      'stores.apple.alt': 'Download on the App Store',
+      'stores.play.aria': 'Get RealUnit on Google Play',
+      'stores.play.alt': 'Get it on Google Play',
+      'invalid.title': 'Link invalid or expired',
+      'invalid.body': 'This invitation or promo link is invalid or has expired.',
+      'invalid.home': 'Back to homepage',
+      'spent.title': 'Code already used',
+      'spent.body': 'This invite or promo code has already been used.',
+      'unavailable.title': 'Service temporarily unavailable',
+      'unavailable.body': 'We could not look up this code right now. Please try again later.',
+      'unavailable.cta': 'Try again',
+      'unavailable.home': 'Back to homepage',
+    },
+  };
+
+  function normalizeLang(value) {
+    if (typeof value !== 'string') return '';
+    return value.slice(0, 2).toLowerCase();
+  }
+
+  function resolveLang(options) {
+    var supported = options.supported;
+    var fromUrl = normalizeLang(options.urlLang);
+    if (fromUrl) {
+      return supported.indexOf(fromUrl) !== -1 ? fromUrl : options.defaultLang;
+    }
+    var fromNavigator = normalizeLang(options.navigatorLang);
+    if (supported.indexOf(fromNavigator) !== -1) return fromNavigator;
+    return options.defaultLang;
+  }
+
+  function isRealUnitHost(host) {
+    return REALUNIT_HOSTS.indexOf(host) !== -1;
+  }
+
+  // Share / og:url / copy-link host. www is folded onto the apex so a copied
+  // desktop link matches the Universal Link host in AASA.
+  function canonicalOrigin(host) {
+    if (host === 'dev.realunit.app') return 'https://dev.realunit.app';
+    if (isRealUnitHost(host)) return 'https://realunit.app';
+    return null;
+  }
+
+  // Invalid/unavailable «Zur Startseite». www is folded onto the apex;
+  // local preview keeps a same-origin `/`.
+  function homeUrl(host) {
+    var origin = canonicalOrigin(host);
+    return origin ? origin + '/' : '/';
+  }
+
+  function apiBase(options) {
+    var host = options.host;
+    if (host === 'realunit.app' || host === 'www.realunit.app') return 'https://api.dfx.swiss';
+    if (host === 'dev.realunit.app') return 'https://dev.api.dfx.swiss';
+    if (options.paramApi) return options.paramApi;
+    return 'https://dev.api.dfx.swiss';
+  }
+
+  var INVISIBLE_CODE_CHARS = /[\u00AD\u200B-\u200F\u202A-\u202E\u2060\u2066-\u2069\uFEFF]/g;
+
+  function stripInvisibleCodeChars(value) {
+    return String(value).replace(INVISIBLE_CODE_CHARS, '');
+  }
+
+  function unescapeHtmlNumericEntity(code, raw) {
+    if (code === 9) return '\t';
+    if (code === 10) return '\n';
+    if (code === 13) return '\r';
+    if (code === 160) return ' ';
+    if (code < 32 || code > 126) return raw;
+    return String.fromCharCode(code);
+  }
+
+  function unescapeJsonUrlEscapes(value) {
+    var text = String(value);
+    if (text.indexOf('\\') === -1) return text;
+    text = text.replace(/\\u([0-9A-Fa-f]{4})/g, function (m, hex) {
+      var code = parseInt(hex, 16);
+      if (!isFinite(code)) return m;
+      if (code === 9) return '\t';
+      if (code === 10) return '\n';
+      if (code === 13) return '\r';
+      if (code === 160) return ' ';
+      if (code < 32 || code > 126) return m;
+      return String.fromCharCode(code);
+    });
+    return text.replace(/\\\//g, '/');
+  }
+
+  function unescapeFullwidthUrlChars(value) {
+    return String(value)
+      .replace(/[\u3000\uFF01-\uFF5E]/g, function (ch) {
+        if (ch === '\u3000') return ' ';
+        return String.fromCharCode(ch.charCodeAt(0) - 0xfee0);
+      })
+      .replace(/\u2044/g, '/')
+      .replace(/\u2215/g, '/')
+      .replace(/\u2236/g, ':')
+      .replace(/\u3002/g, '.')
+      .replace(/\uFF61/g, '.')
+      .replace(/\u2024/g, '.')
+      .replace(/[\u00A0\u1680\u2000-\u200A\u202F\u205F]/g, ' ')
+      .replace(/[\u2010-\u2014\u2212\uFE58\uFE63]/g, '-');
+  }
+
+  function unescapeHtmlEntities(value) {
+    return String(value)
+      .replace(/&quot;/gi, '"')
+      .replace(/&apos;/gi, "'")
+      .replace(/&#34;/g, '"')
+      .replace(/&#x22;/gi, '"')
+      .replace(/&#39;/g, "'")
+      .replace(/&#x27;/gi, "'")
+      .replace(/&nbsp;/gi, ' ')
+      .replace(/&lt;/gi, '<')
+      .replace(/&gt;/gi, '>')
+      .replace(/&amp;/gi, '&')
+      .replace(/&colon;/gi, ':')
+      .replace(/&sol;/gi, '/')
+      .replace(/&equals;/gi, '=')
+      .replace(/&quest;/gi, '?')
+      .replace(/&num;/gi, '#')
+      .replace(/&period;/gi, '.')
+      .replace(/&dot;/gi, '.')
+      .replace(/&commat;/gi, '@')
+      .replace(/&#x([0-9A-Fa-f]+);/gi, function (m, hex) {
+        var code = parseInt(hex, 16);
+        if (!isFinite(code)) return m;
+        return unescapeHtmlNumericEntity(code, m);
+      })
+      .replace(/&#([0-9]{1,7});/g, function (m, dec) {
+        var code = parseInt(dec, 10);
+        if (!isFinite(code)) return m;
+        return unescapeHtmlNumericEntity(code, m);
+      });
+  }
+
+  // Quoted-printable encodes :// as =3A=2F=2F and / as =2F.
+  // Only URL bytes are decoded so ?code=AB12CD is not eaten as hex.
+  var QP_URL_BYTES = {
+    20: ' ',
+    22: '"',
+    23: '#',
+    25: '%',
+    26: '&',
+    27: "'",
+    '2B': '+',
+    '2C': ',',
+    '2E': '.',
+    '2F': '/',
+    '3A': ':',
+    '3B': ';',
+    '3D': '=',
+    '3F': '?',
+    40: '@',
+  };
+
+  function unescapeQuotedPrintableUrl(value) {
+    return String(value).replace(/=([0-9A-Fa-f]{2})/g, function (m, hex) {
+      var mapped = QP_URL_BYTES[hex.toUpperCase()];
+      return mapped != null ? mapped : m;
+    });
+  }
+
+  function bytesToUtf8(bytes) {
+    try {
+      return new TextDecoder('utf-8', { fatal: false }).decode(new Uint8Array(bytes));
+    } catch (e) {
+      var s = '';
+      for (var i = 0; i < bytes.length; i++) s += String.fromCharCode(bytes[i]);
+      return s;
+    }
+  }
+
+  // Email encoded-words (=?UTF-8?Q?…?= / =?UTF-8?B?…?=) from a forwarded
+  // subject. Adjacent words with only whitespace between them are
+  // concatenated (RFC 2047).
+  function unescapeRfc2047(value) {
+    var text = String(value);
+    if (text.indexOf('=?') === -1) return text;
+    text = text.replace(/(\?=)[ \t\r\n\u0085\u2028\u2029]+(=\?)/g, '$1$2');
+    return text.replace(/=\?[^?]+\?([QqBb])\?([^?]*)\?=/g, function (m, enc, data) {
+      try {
+        if (String(enc).toUpperCase() === 'B') {
+          var padded = String(data).replace(/\s+/g, '');
+          while (padded.length % 4) padded += '=';
+          var bin = atob(padded);
+          var bytes = [];
+          for (var i = 0; i < bin.length; i++) bytes.push(bin.charCodeAt(i) & 0xff);
+          return bytesToUtf8(bytes);
+        }
+        var qBytes = [];
+        for (var q = 0; q < data.length; q++) {
+          var ch = data.charAt(q);
+          if (ch === '_') {
+            qBytes.push(0x20);
+            continue;
+          }
+          if (
+            ch === '=' &&
+            q + 2 < data.length &&
+            /^[0-9A-Fa-f]{2}$/.test(data.slice(q + 1, q + 3))
+          ) {
+            qBytes.push(parseInt(data.slice(q + 1, q + 3), 16));
+            q += 2;
+            continue;
+          }
+          qBytes.push(data.charCodeAt(q));
+        }
+        return bytesToUtf8(qBytes);
+      } catch (e) {
+        return m;
+      }
+    });
+  }
+
+  function unwrapNestedCode(code) {
+    var nested = /(?:invite|promo)\/([^/?#]+)/i.exec(code);
+    return nested ? nested[1] : code;
+  }
+
+  function capCode(raw) {
+    if (raw == null) return null;
+    var code = unescapeFullwidthUrlChars(String(raw));
+    code = stripInvisibleCodeChars(code).replace(/\s+/gu, '');
+    if (!code) return null;
+    // Same order as the API sanitizeReferralCode: unwrap before decode so
+    // invite/AB%2F12 stays AB/12, then again after so %2Finvite%2FAB12CD works.
+    code = unwrapNestedCode(code);
+    try {
+      code = decodeURIComponent(code);
+    } catch (e) {
+      // keep the raw value when it is not valid percent-encoding
+    }
+    code = unescapeFullwidthUrlChars(code);
+    code = stripInvisibleCodeChars(code).replace(/\s+/gu, '');
+    code = unwrapNestedCode(code);
+    if (!code) return null;
+    // Same fold as the API sanitizeReferralCode (uppercase, drop trailing punct, max 32).
+    code = code.toUpperCase().replace(/[.?#&,;!/]+$/g, '');
+    if (!code) return null;
+    if (code.length > 32) code = code.slice(0, 32);
+    // capCode of a leftover URL is never a programme token.
+    if (code.indexOf('://') !== -1) return null;
+    return code;
+  }
+
+  function isReferralPathKind(value) {
+    var kind = String(value || '').toLowerCase();
+    return kind === 'invite' || kind === 'promo';
+  }
+
+  function looksLikePastedUrl(value) {
+    var lower = String(value || '').toLowerCase();
+    if (
+      lower.indexOf('http://') === 0 ||
+      lower.indexOf('https://') === 0 ||
+      lower.indexOf('realunit-wallet:') === 0 ||
+      lower.indexOf('intent:') === 0 ||
+      lower.indexOf('android-app:') === 0 ||
+      lower.indexOf('ios-app:') === 0 ||
+      lower.indexOf('whatsapp:') === 0 ||
+      lower.indexOf('tg:') === 0 ||
+      lower.indexOf('sms:') === 0 ||
+      lower.indexOf('smsto:') === 0 ||
+      lower.indexOf('mailto:') === 0 ||
+      lower.indexOf('fb-messenger:') === 0 ||
+      lower.indexOf('threema:') === 0 ||
+      lower.indexOf('sgnl:') === 0 ||
+      lower.indexOf('signal:') === 0 ||
+      lower.indexOf('viber:') === 0 ||
+      lower.indexOf('line://') === 0
+    ) {
+      return true;
+    }
+    if (lower.indexOf('/invite') === 0 || lower.indexOf('/promo') === 0) return true;
+    if (lower.indexOf('invite/') === 0 || lower.indexOf('promo/') === 0) return true;
+    if (lower.indexOf('invite?') === 0 || lower.indexOf('promo?') === 0) return true;
+    if (lower.indexOf('invite#') === 0 || lower.indexOf('promo#') === 0) return true;
+    for (var i = 0; i < REALUNIT_HOSTS.length; i++) {
+      var host = REALUNIT_HOSTS[i];
+      if (
+        lower === host ||
+        lower.indexOf(host + '/') === 0 ||
+        lower.indexOf(host + '?') === 0 ||
+        lower.indexOf(host + '#') === 0
+      ) {
+        return true;
+      }
+    }
+    return false;
+  }
+
+  function isReferralSchemeToken(value) {
+    var lower = String(value || '').toLowerCase();
+    return (
+      lower === 'http:' ||
+      lower === 'https:' ||
+      lower === 'intent:' ||
+      lower === 'realunit-wallet:' ||
+      lower === 'android-app:' ||
+      lower === 'ios-app:'
+    );
+  }
+
+  function codeFromPathSegments(segments, query) {
+    if (segments.length && isReferralPathKind(segments[0])) {
+      if (segments.length >= 2) {
+        var rest = segments.slice(1).join('/');
+        if (isReferralSchemeToken(segments[1])) {
+          rest = segments[1] + '//' + segments.slice(2).join('/');
+        }
+        var nested = codeFromPastedReferralUrl(rest);
+        if (nested) return nested;
+        var fromPath = capCode(segments[1]);
+        if (fromPath && !isReferralSchemeToken(fromPath)) return fromPath;
+      }
+    } else if (segments.length) {
+      return null;
+    }
+    if (!query) return null;
+    var qs = String(query);
+    if (qs.charAt(0) === '?') qs = qs.slice(1);
+    var params = new URLSearchParams(qs);
+    var code = codeFromCodeQueryParams(params);
+    if (!code) {
+      code = codeFromWrapperQueryParams(params);
+    }
+    return code;
+  }
+
+  function stripTrailingPunct(url) {
+    return url
+      .replace(/__+;.*$/, '')
+      .replace(/[.!?,;:)\]}*"'_~`|\u201C\u201D\u2018\u2019\u00AB\u00BB]+$/, '');
+  }
+
+  function embeddedReferralUrl(value) {
+    var text = String(value);
+    var https = text.match(
+      /https?:\/\/(?:www\.|dev\.)?realunit\.app(?=[/?#]|$)(?:\/(?:invite|promo)(?:\/[^\s<>#?]*)?)?(?:[?#][^\s<>]*)?/i,
+    );
+    if (https) return stripTrailingPunct(https[0]);
+    var wallet = text.match(
+      /realunit-wallet:(?:\/\/)?(?:invite|promo)(?:\/[^\s<>#?]*)?(?:[?#][^\s<>]*)?/i,
+    );
+    if (wallet) return stripTrailingPunct(wallet[0]);
+    var intent = text.match(
+      /intent:\/\/(?:(?:www\.|dev\.)?realunit\.app\/)?(?:invite|promo)(?:\/[^\s<>#?]*)?(?:[?#][^\s<>]*)?/i,
+    );
+    if (intent) return stripTrailingPunct(intent[0]);
+    var androidApp = text.match(
+      /android-app:\/\/swiss\.realunit\.app\/https\/(?:www\.|dev\.)?realunit\.app\/(?:invite|promo)(?:\/[^\s<>#?]*)?(?:[?#][^\s<>]*)?/i,
+    );
+    if (androidApp) return stripTrailingPunct(androidApp[0]);
+    var iosApp = text.match(
+      /ios-app:\/\/\d+\/(?:realunit-wallet\/)?(?:invite|promo)(?:\/[^\s<>#?]*)?(?:[?#][^\s<>]*)?/i,
+    );
+    if (iosApp) return stripTrailingPunct(iosApp[0]);
+    return null;
+  }
+
+  // Pull the code out of a pasted RealUnit invite/promo URL so lookup never
+  // uses the whole URI as the token. A share message that contains such a URL
+  // is reduced to the code.
+  function codeFromPastedReferralUrl(raw) {
+    if (raw == null) return null;
+    var value = unescapeFullwidthUrlChars(unescapeJsonUrlEscapes(unescapeHtmlEntities(String(raw))))
+      .replace(/^[ \t]*>+[ \t]?/gm, '')
+      .replace(/\\[ \t]*[\r\n\u0085\u2028\u2029]+/g, '')
+      .replace(/-[\r\n\u0085\u2028\u2029]+/g, '')
+      .replace(/=[ \t]*[\r\n\u0085\u2028\u2029]+/g, '')
+      .replace(/[\r\n\u0085\u2028\u2029]+/g, '')
+      .replace(/(https?:\/\/|(?:www\.|dev\.)?realunit\.app|\/|[=?&])[ \t\u00A0]+/gi, '$1')
+      .replace(/[ \t\u00A0]+(\/)/g, '$1');
+    value = unescapeQuotedPrintableUrl(unescapeRfc2047(value)).trim();
+    if (looksLikePastedUrl(value) && /[ \t\u00A0]/.test(value)) {
+      value = value.split(/[ \t\u00A0]/)[0];
+    }
+    for (var w = 0; w < 8 && value.length >= 2; w++) {
+      var start = value.charAt(0);
+      var end = value.charAt(value.length - 1);
+      if (
+        '"\'(<*_~`|\u201C\u2018\u00AB\u201E'.indexOf(start) === -1 ||
+        '"\'>)*_~`|\u201D\u2019\u00BB\u201C'.indexOf(end) === -1
+      ) {
+        break;
+      }
+      value = value.slice(1, -1).trim();
+    }
+    if (!value) return null;
+    value = stripInvisibleCodeChars(value);
+    if (!value) return null;
+    if (!looksLikePastedUrl(value)) {
+      var embedded = embeddedReferralUrl(value);
+      if (!embedded) return null;
+      value = embedded;
+    }
+    var lower = value.toLowerCase();
+
+    if (lower.indexOf('realunit-wallet:') === 0) {
+      var remainder = value.slice('realunit-wallet:'.length);
+      if (remainder.indexOf('//') === 0) remainder = remainder.slice(2);
+      var fragment = '';
+      var hash = remainder.indexOf('#');
+      if (hash >= 0) {
+        fragment = remainder.slice(hash + 1);
+        remainder = remainder.slice(0, hash);
+      }
+      var q = remainder.indexOf('?');
+      var query = q >= 0 ? remainder.slice(q + 1) : '';
+      var path = q >= 0 ? remainder.slice(0, q) : remainder;
+      var fromPath = codeFromPathSegments(path.split('/').filter(Boolean), query);
+      if (fromPath) return fromPath;
+      if (fragment) return codeFromPastedReferralUrl(fragment) || capCode(fragment);
+      return null;
+    }
+
+    var toParse = value;
+    if (value.indexOf('://') === -1) {
+      for (var h = 0; h < REALUNIT_HOSTS.length; h++) {
+        var hostName = REALUNIT_HOSTS[h];
+        if (
+          lower === hostName ||
+          lower.indexOf(hostName + '/') === 0 ||
+          lower.indexOf(hostName + '?') === 0 ||
+          lower.indexOf(hostName + '#') === 0
+        ) {
+          toParse = 'https://' + value;
+          break;
+        }
+      }
+    }
+
+    var uri;
+    try {
+      uri =
+        toParse.indexOf('://') === -1 ? new URL(toParse, 'https://realunit.app') : new URL(toParse);
+    } catch (e) {
+      return null;
+    }
+
+    var segs = uri.pathname.split('/').filter(Boolean);
+    var search = uri.search ? uri.search.slice(1) : '';
+
+    if (uri.protocol === 'intent:') {
+      if (isRealUnitHost(uri.hostname)) return codeFromPathSegments(segs, search);
+      if (isReferralPathKind(uri.hostname)) {
+        if (segs.length) return capCode(segs[0]);
+        return codeFromPathSegments([uri.hostname], search);
+      }
+      return codeFromWrapperUrl(uri);
+    }
+
+    if (uri.protocol === 'android-app:') {
+      if (
+        segs.length >= 3 &&
+        (segs[0] === 'https' || segs[0] === 'http') &&
+        isRealUnitHost(segs[1]) &&
+        isReferralPathKind(segs[2])
+      ) {
+        if (segs.length >= 4) return capCode(segs[3]);
+        return codeFromPathSegments([segs[2]], search);
+      }
+      return codeFromWrapperUrl(uri);
+    }
+
+    if (uri.protocol === 'ios-app:') {
+      if (segs.length >= 2 && segs[0] === 'realunit-wallet' && isReferralPathKind(segs[1])) {
+        if (segs.length >= 3) return capCode(segs[2]);
+        return codeFromPathSegments([segs[1]], search);
+      }
+      if (segs.length && isReferralPathKind(segs[0])) {
+        if (segs.length >= 2) return capCode(segs[1]);
+        return codeFromPathSegments([segs[0]], search);
+      }
+      return codeFromWrapperUrl(uri);
+    }
+
+    if (uri.protocol === 'http:' || uri.protocol === 'https:') {
+      if (isRealUnitHost(uri.hostname)) {
+        var fromHttps = codeFromPathSegments(segs, search);
+        if (fromHttps) return fromHttps;
+        if (
+          uri.hash &&
+          uri.hash.length > 1 &&
+          (segs.length === 0 || (segs.length === 1 && isReferralPathKind(segs[0])))
+        ) {
+          var h = uri.hash.slice(1);
+          return codeFromPastedReferralUrl(h) || capCode(h);
+        }
+        return null;
+      }
+      return codeFromWrapperUrl(uri);
+    }
+
+    if (!uri.protocol || uri.protocol === ':') {
+      return codeFromPathSegments(segs, search);
+    }
+    return codeFromWrapperUrl(uri);
+  }
+
+  // Proofpoint URL Defense v2 encodes : as -3A and / as _.
+  function urlDefenseDecode(value) {
+    var lower = String(value).toLowerCase();
+    if (lower.indexOf('realunit.app/') !== -1 || lower.indexOf('realunit.app?') !== -1) {
+      return null;
+    }
+    // Host may still be Proofpoint-encoded (`realunit-2Eapp`) so this is
+    // only a cheap skip; the decoded string is checked below.
+    if (lower.indexOf('realunit') === -1) return null;
+    if (value.indexOf('-') === -1 && value.indexOf('_') === -1) return null;
+    var decoded = String(value)
+      .replace(/-([0-9A-Fa-f]{2})/g, function (_, hex) {
+        var code = parseInt(hex, 16);
+        if (code < 32 || code > 126) return _;
+        return String.fromCharCode(code);
+      })
+      .replace(/_/g, '/');
+    if (decoded === value) return null;
+    if (decoded.toLowerCase().indexOf('realunit.app') === -1) return null;
+    return decoded;
+  }
+
+  // Chrome Android intent://send?text=…#Intent;scheme=whatsapp;end (and
+  // Telegram/SMS) put the landing URL in a query param or an #Intent;
+  // string extra (S.text, S.browser_fallback_url). Split extras so ;end
+  // is not glued onto the code.
+  function intentFragmentValues(fragment) {
+    var trimmed = String(fragment || '').trim();
+    var lower = trimmed.toLowerCase();
+    var values = [];
+    if (lower === 'intent' || lower.indexOf('intent;') === 0) {
+      var extras = trimmed.split(';');
+      for (var i = 0; i < extras.length; i++) {
+        var extra = extras[i];
+        if (!extra) continue;
+        var extraLower = extra.toLowerCase();
+        if (extraLower === 'intent' || extraLower === 'end') continue;
+        var eq = extra.indexOf('=');
+        if (eq <= 0) {
+          values.push(extra);
+          continue;
+        }
+        values.push(extra.slice(eq + 1));
+        values.push(extra.slice(0, eq));
+      }
+      return values;
+    }
+    values.push(fragment);
+    return values;
+  }
+
+  // Query wrappers (Facebook l.php?u=, Google url?q=, href.li), path-nested
+  // landing URLs (Yahoo RU=https://…, /r/https://realunit.app/invite/…),
+  // AMP/CDN paths (/amp/s/realunit.app/invite/…), Outlook Safe Links url=,
+  // Proofpoint URL Defense v2, and Chrome intent:// share-sheet extras.
+  function codeFromWrapperUrl(uri) {
+    var values = [];
+    uri.searchParams.forEach(function (val, key) {
+      values.push(val);
+      if (key) values.push(key);
+    });
+    if (uri.search && uri.search.length > 1) values.push(uri.search.slice(1));
+    function pushDecoded(value) {
+      if (!value) return;
+      values.push(value);
+      try {
+        var decoded = decodeURIComponent(value);
+        if (decoded && decoded !== value) values.push(decoded);
+      } catch (e) {}
+    }
+    if (uri.hash && uri.hash.length > 1) {
+      var extras = intentFragmentValues(uri.hash.slice(1));
+      for (var e = 0; e < extras.length; e++) pushDecoded(extras[e]);
+    }
+    if (uri.pathname && uri.pathname.length > 1) pushDecoded(uri.pathname);
+    uri.pathname.split('/').forEach(pushDecoded);
+    for (var i = 0; i < values.length; i++) {
+      var val = unescapeQuotedPrintableUrl(
+        unescapeRfc2047(
+          unescapeFullwidthUrlChars(unescapeJsonUrlEscapes(unescapeHtmlEntities(values[i]))),
+        ),
+      );
+      if (!val) continue;
+      var defense = urlDefenseDecode(val);
+      if (defense) {
+        var fromDefense = codeFromPastedReferralUrl(defense);
+        if (fromDefense) return fromDefense;
+      }
+      var embedded = embeddedReferralUrl(val);
+      if (embedded) {
+        var fromEmbedded = codeFromPastedReferralUrl(embedded);
+        if (fromEmbedded) return fromEmbedded;
+      }
+      if (!looksLikePastedUrl(val)) continue;
+      try {
+        var inner = new URL(val);
+        if (!isRealUnitHost(inner.hostname)) continue;
+        var fromInner = codeFromPastedReferralUrl(val);
+        if (fromInner) return fromInner;
+      } catch (e) {}
+    }
+    return codeFromReferralHostInPath(uri.pathname.split('/'));
+  }
+
+  function codeFromReferralHostInPath(segments) {
+    var segs = [];
+    for (var i = 0; i < segments.length; i++) {
+      var seg = segments[i];
+      if (!seg) continue;
+      try {
+        segs.push(decodeURIComponent(seg));
+      } catch (e) {
+        segs.push(seg);
+      }
+    }
+    for (var h = 0; h < segs.length; h++) {
+      if (!isRealUnitHost(segs[h])) continue;
+      var rest = segs.slice(h).join('/');
+      return codeFromPastedReferralUrl('https://' + rest) || codeFromPastedReferralUrl(rest);
+    }
+    return null;
+  }
+
+  function parseCodeFromPath(pathname) {
+    if (typeof pathname !== 'string') return null;
+    var match = pathname.match(/^\/+(invite|promo)\/(.*)$/i);
+    if (!match) return null;
+    var kind = match[1].toLowerCase();
+    var rest = match[2];
+    var decodedRest = rest;
+    try {
+      decodedRest = decodeURIComponent(rest);
+    } catch (e) {
+      // keep the raw remainder
+    }
+    var nested = codeFromPastedReferralUrl(decodedRest) || codeFromPastedReferralUrl(rest);
+    if (nested) return { kind: kind, code: nested };
+    var first = rest.split('/').filter(Boolean)[0];
+    if (first == null) return null;
+    var code = capCode(first);
+    if (!code) return null;
+    return { kind: kind, code: code };
+  }
+
+  // Nested invite=/promo=/code= or a landing URL inside utm_content / referrer.
+  // A bare campaign name is not a code. A foreign https URL is not a code.
+  // An empty or foreign invite=/promo=/code= does not hide a later valid key.
+  function codeFromQueryToken(raw) {
+    var fromUrl = codeFromPastedReferralUrl(raw);
+    if (fromUrl) return fromUrl;
+    if (raw == null || raw === '') return capCode(raw);
+    if (looksLikePastedUrl(raw)) return null;
+    return capCode(raw);
+  }
+
+  function codeFromWrapperQueryParams(params) {
+    var keys = ['utm_content', 'referrer', 'u', 'q', 'url', 'link'];
+    for (var i = 0; i < keys.length; i++) {
+      var val = params.get(keys[i]);
+      if (!val) continue;
+      var code = codeFromWrappedQueryValue(val);
+      if (code) return code;
+    }
+    return null;
+  }
+
+  function codeFromCodeQueryParams(params) {
+    var keys = ['code', 'invite', 'promo', 'app-argument'];
+    for (var i = 0; i < keys.length; i++) {
+      var val = params.get(keys[i]);
+      if (!val) continue;
+      var code = codeFromQueryToken(val);
+      if (code) return code;
+    }
+    return codeFromQueryToken(null);
+  }
+
+  function codeFromWrappedQueryValue(raw) {
+    if (raw == null || raw === '') return null;
+    var fromUrl = codeFromPastedReferralUrl(raw);
+    if (fromUrl) return fromUrl;
+    var qs = String(raw);
+    if (qs.charAt(0) === '?') qs = qs.slice(1);
+    if (!/^(invite|promo|code)=/i.test(qs) && qs.indexOf('&') === -1) return null;
+    var nested = new URLSearchParams(qs);
+    var innerKeys = ['invite', 'promo', 'code'];
+    for (var i = 0; i < innerKeys.length; i++) {
+      var inner = nested.get(innerKeys[i]);
+      if (!inner) continue;
+      var fromInner = codeFromQueryToken(inner);
+      if (fromInner) return fromInner;
+    }
+    return null;
+  }
+
+  // Path `/invite/{code}` wins. Bare `/invite?code=` / `?invite=` / `?promo=`
+  // / `?app-argument=` is the query fallback when a shared link omitted the
+  // path segment (including an iOS Smart App Banner argument). Ads/Play
+  // `utm_content` / `referrer` / Facebook `u=` / Google `q=` / Outlook `url=`
+  // wrapping invite= or a landing URL is last, as is email `link=`. A foreign
+  // https URL is not a code; Proofpoint URL Defense and Outlook Safe Links
+  // wrapping a RealUnit landing are unwrapped.
+  function parseCodeFromLocation(pathname, search, hash) {
+    var fromPath = parseCodeFromPath(pathname);
+    if (fromPath) return fromPath;
+    if (typeof pathname !== 'string') return null;
+    var parts = pathname.split('/').filter(Boolean);
+    var kind = parts.length ? String(parts[0]).toLowerCase() : '';
+    if (kind !== 'invite' && kind !== 'promo') return null;
+    var code = null;
+    if (typeof search === 'string' && search) {
+      var qs = search.charAt(0) === '?' ? search.slice(1) : search;
+      var params = new URLSearchParams(qs);
+      code = codeFromCodeQueryParams(params);
+      if (!code) {
+        code = codeFromWrapperQueryParams(params);
+      }
+    }
+    if (!code && typeof hash === 'string' && hash) {
+      var h = hash.charAt(0) === '#' ? hash.slice(1) : hash;
+      code = codeFromQueryToken(h);
+    }
+    if (!code) return null;
+    return { kind: kind, code: code };
+  }
+
+  var LOOKUP_TIMEOUT_MS = 15000;
+  var COPY_TIMEOUT_MS = 2000;
+
+  function lookupFetchInit(signal) {
+    var init = {
+      method: 'GET',
+      headers: { Accept: 'application/json' },
+      cache: 'no-store',
+      credentials: 'omit',
+    };
+    if (signal) init.signal = signal;
+    return init;
+  }
+
+  // Drop a payload that arrived after the 15s budget, including a slow
+  // res.json() that outlived the fetch abort.
+  function finalizeLookup(timedOut, status, body, fallbackKind) {
+    if (timedOut) return { state: 'unavailable' };
+    return mapResult(status, body, fallbackKind);
+  }
+
+  // Copy, CTA, code, store badges, Retry, and Zur Startseite keep focus when
+  // the landing re-shows a state (lookup finishing, invalid/unavailable).
+  function keepLandingFocus(active) {
+    if (!active) return false;
+    var id = active.id;
+    if (
+      id === 'ok-copy' ||
+      id === 'ok-copy-link' ||
+      id === 'ok-cta' ||
+      id === 'ok-code' ||
+      id === 'invalid-home' ||
+      id === 'unavailable-cta' ||
+      id === 'unavailable-home'
+    ) {
+      return true;
+    }
+    return !!(active.closest && active.closest('.stores'));
+  }
+
+  function buildLookupUrl(base, code) {
+    return (
+      String(base).replace(/\/$/, '') + '/v1/realunit/referral/code/' + encodeURIComponent(code)
+    );
+  }
+
+  function appLink(kind, code) {
+    return 'realunit-wallet://' + kind + '/' + encodeURIComponent(code);
+  }
+
+  function appStoreUrl() {
+    return APP_STORE_URL;
+  }
+
+  // iOS Smart App Banner. app-argument carries the custom-scheme invite/promo
+  // link so a banner install can still take over the code (Play referrer
+  // covers Android).
+  function itunesBanner(kind, code) {
+    var banner = 'app-id=' + APP_STORE_ID;
+    if (kind && code) banner += ', app-argument=' + appLink(kind, code);
+    return banner;
+  }
+
+  // Safari snapshots apple-itunes-app from the HTML bytes. Cloudflare
+  // Pages `functions/_middleware.js` and the local dev-server rewrite
+  // that meta from the request URL. This DOM helper is the CSP-safe JS
+  // fallback (/js/invite-banner.js in <head>; invite.js is at </body>).
+  function applyItunesBannerFromLocation(doc, loc) {
+    if (!doc || typeof doc.querySelector !== 'function') return false;
+    var el = doc.querySelector('meta[name="apple-itunes-app"]');
+    if (!el || typeof el.setAttribute !== 'function') return false;
+    var parsed = loc && parseCodeFromLocation(loc.pathname, loc.search, loc.hash);
+    el.setAttribute('content', itunesBanner(parsed && parsed.kind, parsed && parsed.code));
+    return true;
+  }
+
+  // Same rewrite as functions/lib/itunes-banner.js, for the committed
+  // public/ HTML (generic app-id / generic og:url, no code) plus path.
+  function injectItunesBannerHtml(html, pathname, search, hash) {
+    if (typeof html !== 'string' || html.indexOf('apple-itunes-app') === -1) {
+      return html;
+    }
+    var parsed = parseCodeFromLocation(pathname, search, hash);
+    var content = itunesBanner(parsed && parsed.kind, parsed && parsed.code);
+    var named = html.replace(
+      /(<meta\b[^>]*\bname=["']apple-itunes-app["'][^>]*\bcontent=["'])([^"']*)(["'][^>]*>)/i,
+      '$1' + content + '$3',
+    );
+    if (named !== html) return named;
+    return html.replace(
+      /(<meta\b[^>]*\bcontent=["'])([^"']*)(["'][^>]*\bname=["']apple-itunes-app["'][^>]*>)/i,
+      '$1' + content + '$3',
+    );
+  }
+
+  function landingCanonicalHref(host, kind, code) {
+    var origin = canonicalOrigin(host) || 'https://realunit.app';
+    var path = '/' + (kind || 'invite');
+    if (code) path += '/' + encodeURIComponent(code);
+    return origin + path;
+  }
+
+  function replaceTaggedAttr(html, namedRe, flippedRe, value) {
+    var named = html.replace(namedRe, '$1' + value + '$3');
+    if (named !== html) return named;
+    return html.replace(flippedRe, '$1' + value + '$3');
+  }
+
+  // Crawlers snapshot og:url / canonical from the HTML bytes. Same
+  // path as functions/lib/itunes-banner.js (www folded onto the apex).
+  function injectLandingCanonicalHtml(html, pathname, search, hash, host) {
+    if (typeof html !== 'string') return html;
+    var parsed = parseCodeFromLocation(pathname, search, hash);
+    if (!parsed) return html;
+    var href = landingCanonicalHref(host, parsed.kind, parsed.code);
+    var withOg = replaceTaggedAttr(
+      html,
+      /(<meta\b[^>]*\bproperty=["']og:url["'][^>]*\bcontent=["'])([^"']*)(["'][^>]*>)/i,
+      /(<meta\b[^>]*\bcontent=["'])([^"']*)(["'][^>]*\bproperty=["']og:url["'][^>]*>)/i,
+      href,
+    );
+    var withCanon = replaceTaggedAttr(
+      withOg,
+      /(<link\b[^>]*\brel=["']canonical["'][^>]*\bhref=["'])([^"']*)(["'][^>]*>)/i,
+      /(<link\b[^>]*\bhref=["'])([^"']*)(["'][^>]*\brel=["']canonical["'][^>]*>)/i,
+      href,
+    );
+    return replaceTaggedAttr(
+      withCanon,
+      /(<meta\b[^>]*\bname=["']twitter:url["'][^>]*\bcontent=["'])([^"']*)(["'][^>]*>)/i,
+      /(<meta\b[^>]*\bcontent=["'])([^"']*)(["'][^>]*\bname=["']twitter:url["'][^>]*>)/i,
+      href,
+    );
+  }
+
+  function langFromSearch(search) {
+    var match = String(search || '').match(/(?:^|[?&])lang=([^&]*)/i);
+    if (!match) return null;
+    var encoded = String(match[1]);
+    var raw = encoded;
+    try {
+      raw = decodeURIComponent(encoded);
+    } catch (err) {
+      raw = encoded;
+    }
+    raw = raw.slice(0, 2).toLowerCase();
+    if (raw === 'en' || raw === 'de') return raw;
+    return null;
+  }
+
+  // Crawlers snapshot og:title / twitter:title from the HTML bytes.
+  // Names wait for lookup JS; the request URL can already name the code.
+  function shareTitle(kind, code, lang) {
+    if (!kind || !code) return null;
+    if (lang === 'en') {
+      return kind === 'promo' ? 'RealUnit — Promo code ' + code : 'RealUnit — Invitation ' + code;
+    }
+    return kind === 'promo' ? 'RealUnit — Promo-Code ' + code : 'RealUnit — Einladung ' + code;
+  }
+
+  function injectShareTitleHtml(html, pathname, search, hash) {
+    if (typeof html !== 'string') return html;
+    var parsed = parseCodeFromLocation(pathname, search, hash);
+    if (!parsed || !parsed.code) return html;
+    var title = shareTitle(parsed.kind, parsed.code, langFromSearch(search));
+    var withOg = replaceTaggedAttr(
+      html,
+      /(<meta\b[^>]*\bproperty=["']og:title["'][^>]*\bcontent=["'])([^"']*)(["'][^>]*>)/i,
+      /(<meta\b[^>]*\bcontent=["'])([^"']*)(["'][^>]*\bproperty=["']og:title["'][^>]*>)/i,
+      title,
+    );
+    var withTw = replaceTaggedAttr(
+      withOg,
+      /(<meta\b[^>]*\bname=["']twitter:title["'][^>]*\bcontent=["'])([^"']*)(["'][^>]*>)/i,
+      /(<meta\b[^>]*\bcontent=["'])([^"']*)(["'][^>]*\bname=["']twitter:title["'][^>]*>)/i,
+      title,
+    );
+    return withTw.replace(/<title>[^<]*<\/title>/i, '<title>' + title + '</title>');
+  }
+
+  function injectShareImageAltHtml(html, pathname, search, hash) {
+    if (typeof html !== 'string') return html;
+    var parsed = parseCodeFromLocation(pathname, search, hash);
+    if (!parsed || !parsed.code) return html;
+    var alt = shareTitle(parsed.kind, parsed.code, langFromSearch(search));
+    var withOg = replaceTaggedAttr(
+      html,
+      /(<meta\b[^>]*\bproperty=["']og:image:alt["'][^>]*\bcontent=["'])([^"']*)(["'][^>]*>)/i,
+      /(<meta\b[^>]*\bcontent=["'])([^"']*)(["'][^>]*\bproperty=["']og:image:alt["'][^>]*>)/i,
+      alt,
+    );
+    return replaceTaggedAttr(
+      withOg,
+      /(<meta\b[^>]*\bname=["']twitter:image:alt["'][^>]*\bcontent=["'])([^"']*)(["'][^>]*>)/i,
+      /(<meta\b[^>]*\bcontent=["'])([^"']*)(["'][^>]*\bname=["']twitter:image:alt["'][^>]*>)/i,
+      alt,
+    );
+  }
+
+  function shareDescription(code, lang) {
+    if (!code) return null;
+    if (lang === 'en') return 'Open the RealUnit app with code ' + code + '.';
+    return 'Öffne die RealUnit-App mit dem Code ' + code + '.';
+  }
+
+  function injectShareDescriptionHtml(html, pathname, search, hash) {
+    if (typeof html !== 'string') return html;
+    var parsed = parseCodeFromLocation(pathname, search, hash);
+    if (!parsed || !parsed.code) return html;
+    var description = shareDescription(parsed.code, langFromSearch(search));
+    var withOg = replaceTaggedAttr(
+      html,
+      /(<meta\b[^>]*\bproperty=["']og:description["'][^>]*\bcontent=["'])([^"']*)(["'][^>]*>)/i,
+      /(<meta\b[^>]*\bcontent=["'])([^"']*)(["'][^>]*\bproperty=["']og:description["'][^>]*>)/i,
+      description,
+    );
+    var withTw = replaceTaggedAttr(
+      withOg,
+      /(<meta\b[^>]*\bname=["']twitter:description["'][^>]*\bcontent=["'])([^"']*)(["'][^>]*>)/i,
+      /(<meta\b[^>]*\bcontent=["'])([^"']*)(["'][^>]*\bname=["']twitter:description["'][^>]*>)/i,
+      description,
+    );
+    return replaceTaggedAttr(
+      withTw,
+      /(<meta\b[^>]*\bname=["']description["'][^>]*\bcontent=["'])([^"']*)(["'][^>]*>)/i,
+      /(<meta\b[^>]*\bcontent=["'])([^"']*)(["'][^>]*\bname=["']description["'][^>]*>)/i,
+      description,
+    );
+  }
+
+  // Crawlers snapshot html lang / og:locale from the HTML bytes.
+  function injectShareLocaleHtml(html, pathname, search) {
+    if (typeof html !== 'string' || langFromSearch(search) !== 'en') return html;
+    var out = html.replace(/<html\b([^>]*)\blang=["'][^"']*["']/i, '<html$1lang="en"');
+    out = replaceTaggedAttr(
+      out,
+      /(<meta\b[^>]*\bproperty=["']og:locale["'][^>]*\bcontent=["'])([^"']*)(["'][^>]*>)/i,
+      /(<meta\b[^>]*\bcontent=["'])([^"']*)(["'][^>]*\bproperty=["']og:locale["'][^>]*>)/i,
+      'en_GB',
+    );
+    return replaceTaggedAttr(
+      out,
+      /(<meta\b[^>]*\bproperty=["']og:locale:alternate["'][^>]*\bcontent=["'])([^"']*)(["'][^>]*>)/i,
+      /(<meta\b[^>]*\bcontent=["'])([^"']*)(["'][^>]*\bproperty=["']og:locale:alternate["'][^>]*>)/i,
+      'de_CH',
+    );
+  }
+
+  function upsertAlternate(html, dataAttr, href) {
+    var named = new RegExp(
+      '(<link\\b[^>]*\\b' + dataAttr + '\\b[^>]*\\bhref=["\'])([^"\']*)(["\'][^>]*>)',
+      'i',
+    );
+    if (named.test(html)) return html.replace(named, '$1' + href + '$3');
+    var flipped = new RegExp(
+      '(<link\\b[^>]*\\bhref=["\'])([^"\']*)(["\'][^>]*\\b' + dataAttr + '\\b[^>]*>)',
+      'i',
+    );
+    if (flipped.test(html)) return html.replace(flipped, '$1' + href + '$3');
+    var tag = '<link rel="alternate" ' + dataAttr + ' href="' + href + '" />';
+    if (/<\/head>/i.test(html)) return html.replace(/<\/head>/i, tag + '\n</head>');
+    return html + tag;
+  }
+
+  function upsertMeta(html, keyAttr, key, content) {
+    var named = new RegExp(
+      '(<meta\\b[^>]*\\b' +
+        keyAttr +
+        '=["\']' +
+        key +
+        '["\'][^>]*\\bcontent=["\'])([^"\']*)(["\'][^>]*>)',
+      'i',
+    );
+    if (named.test(html)) return html.replace(named, '$1' + content + '$3');
+    var flipped = new RegExp(
+      '(<meta\\b[^>]*\\bcontent=["\'])([^"\']*)(["\'][^>]*\\b' +
+        keyAttr +
+        '=["\']' +
+        key +
+        '["\'][^>]*>)',
+      'i',
+    );
+    if (flipped.test(html)) return html.replace(flipped, '$1' + content + '$3');
+    var tag = '<meta ' + keyAttr + '="' + key + '" content="' + content + '" />';
+    if (/<\/head>/i.test(html)) return html.replace(/<\/head>/i, tag + '\n</head>');
+    return html + tag;
+  }
+
+  // Crawlers snapshot og:site_name from the HTML bytes. Brand stays RealUnit.
+  function injectSiteNameHtml(html) {
+    if (typeof html !== 'string') return html;
+    return upsertMeta(html, 'property', 'og:site_name', 'RealUnit');
+  }
+
+  // X / Twitter snapshots twitter:app:* from the HTML bytes.
+  // twitter:app:url:* is the custom scheme so a tweet opens the app.
+  function injectTwitterAppHtml(html, kind, code) {
+    if (typeof html !== 'string' || !kind || !code) return html;
+    var scheme = appLink(kind, code);
+    var out = upsertMeta(html, 'name', 'twitter:app:name:iphone', 'RealUnit');
+    out = upsertMeta(out, 'name', 'twitter:app:id:iphone', APP_STORE_ID);
+    out = upsertMeta(out, 'name', 'twitter:app:url:iphone', scheme);
+    out = upsertMeta(out, 'name', 'twitter:app:name:ipad', 'RealUnit');
+    out = upsertMeta(out, 'name', 'twitter:app:id:ipad', APP_STORE_ID);
+    out = upsertMeta(out, 'name', 'twitter:app:url:ipad', scheme);
+    out = upsertMeta(out, 'name', 'twitter:app:name:googleplay', 'RealUnit');
+    out = upsertMeta(out, 'name', 'twitter:app:id:googleplay', 'swiss.realunit.app');
+    out = upsertMeta(out, 'name', 'twitter:app:url:googleplay', scheme);
+    return upsertMeta(out, 'name', 'twitter:app:country', 'CH');
+  }
+
+  // WhatsApp / Facebook snapshot al:* App Links from the HTML bytes.
+  // al:ios:url and al:android:url are the custom scheme; al:web:url is HTTPS.
+  function injectShareAppLinksHtml(html, pathname, search, hash, host) {
+    if (typeof html !== 'string') return html;
+    var parsed = parseCodeFromLocation(pathname, search, hash);
+    if (!parsed || !parsed.code) return html;
+    var href = landingCanonicalHref(host, parsed.kind, parsed.code);
+    var scheme = appLink(parsed.kind, parsed.code);
+    var out = upsertMeta(html, 'property', 'al:ios:url', scheme);
+    out = upsertMeta(out, 'property', 'al:ios:app_store_id', APP_STORE_ID);
+    out = upsertMeta(out, 'property', 'al:ios:app_name', 'RealUnit');
+    out = upsertMeta(out, 'property', 'al:android:url', scheme);
+    out = upsertMeta(out, 'property', 'al:android:package', 'swiss.realunit.app');
+    out = upsertMeta(out, 'property', 'al:android:class', 'swiss.realunit.app.MainActivity');
+    out = upsertMeta(out, 'property', 'al:android:app_name', 'RealUnit');
+    out = upsertMeta(out, 'property', 'al:web:url', href);
+    return injectTwitterAppHtml(out, parsed.kind, parsed.code);
+  }
+
+  // Play referrer + android-app / ios-app alternate links in the HTML
+  // bytes so a badge tap or crawler does not wait for invite.js.
+  function injectInstallHandoffHtml(html, pathname, search, hash) {
+    if (typeof html !== 'string') return html;
+    var parsed = parseCodeFromLocation(pathname, search, hash);
+    if (!parsed || !parsed.code) return html;
+    var out = replaceTaggedAttr(
+      html,
+      /(<a\b[^>]*\bdata-store=["']play["'][^>]*\bhref=["'])([^"']*)(["'][^>]*>)/i,
+      /(<a\b[^>]*\bhref=["'])([^"']*)(["'][^>]*\bdata-store=["']play["'][^>]*>)/i,
+      playStoreUrl(parsed.code, parsed.kind),
+    );
+    out = upsertAlternate(out, 'data-android-app', androidAppUrl(parsed.kind, parsed.code));
+    return upsertAlternate(out, 'data-ios-app', iosAppUrl(parsed.kind, parsed.code));
+  }
+
+  // Play Store URL. A code is attached as install referrer so Android can
+  // keep it across a fresh install (`invite=<code>` or `promo=<code>`).
+  function playStoreUrl(code, kind) {
+    if (code) {
+      var key = kind === 'promo' ? 'promo' : 'invite';
+      return PLAY_STORE_BASE + '&referrer=' + encodeURIComponent(key + '=' + code);
+    }
+    return PLAY_STORE_BASE;
+  }
+
+  // Chrome intent: open the https App Link if the app is installed, otherwise
+  // the Play Store URL with the install referrer.
+  function androidIntentUrl(kind, code) {
+    var path = String(kind) + '/' + encodeURIComponent(code);
+    return (
+      'intent://realunit.app/' +
+      path +
+      '#Intent;scheme=https;package=swiss.realunit.app;S.browser_fallback_url=' +
+      encodeURIComponent(playStoreUrl(code, kind)) +
+      ';end'
+    );
+  }
+
+  function openInAppUrl(kind, code, platform) {
+    if (platform === 'android') return androidIntentUrl(kind, code);
+    return appLink(kind, code);
+  }
+
+  // Indexed / share-sheet App Link. The app parses this as
+  // android-app://swiss.realunit.app/https/realunit.app/invite|promo/{code}.
+  function androidAppUrl(kind, code) {
+    return (
+      'android-app://swiss.realunit.app/https/realunit.app/' + kind + '/' + encodeURIComponent(code)
+    );
+  }
+
+  function iosAppUrl(kind, code) {
+    return (
+      'ios-app://' + APP_STORE_ID + '/realunit-wallet/' + kind + '/' + encodeURIComponent(code)
+    );
+  }
+
+  function interpolate(template, values) {
+    return String(template).replace(/\{(\w+)\}/g, function (_, key) {
+      return values[key] == null ? '' : String(values[key]);
+    });
+  }
+
+  function routeMissingMessage(body) {
+    if (!body || typeof body !== 'object') return '';
+    var msg = body.message;
+    if (Array.isArray(msg)) msg = msg.join(' ');
+    if (typeof msg !== 'string') return '';
+    return msg.trim();
+  }
+
+  // NestJS 404 `Cannot GET /v1/realunit/referral/code/…` (Express) or
+  // `Route GET:/v1/realunit/referral/code/… not found` (Fastify) means the
+  // route is not mounted yet — not that this invite/promo code is spent.
+  function isUnrouted(body) {
+    var msg = routeMissingMessage(body);
+    return (
+      /^Cannot (GET|HEAD|POST|PUT|PATCH|DELETE) /i.test(msg) ||
+      /^Route (GET|HEAD|POST|PUT|PATCH|DELETE):/i.test(msg)
+    );
+  }
+
+  function hasLookupMarker(body) {
+    var markers = [
+      'kind',
+      'inviterName',
+      'inviteeName',
+      'campaignText',
+      'actionText',
+      'actionTextEn',
+      'campaignTextEn',
+    ];
+    for (var i = 0; i < markers.length; i++) {
+      var value = body[markers[i]];
+      if (typeof value === 'string' && value.trim()) return true;
+    }
+    return false;
+  }
+
+  function unwrapLookup(body) {
+    if (!body || typeof body !== 'object' || Array.isArray(body)) return body;
+    if (hasLookupMarker(body)) return body;
+    var keys = ['data', 'item', 'result', 'payload'];
+    for (var i = 0; i < keys.length; i++) {
+      var inner = body[keys[i]];
+      if (inner && typeof inner === 'object' && !Array.isArray(inner)) return inner;
+    }
+    return body;
+  }
+
+  function mapResult(status, body, fallbackKind) {
+    // Keep in sync with isReferralLookupInvalid in the RealUnit app.
+    if (isUnrouted(body)) return { state: 'unavailable' };
+    if (status === 404 || status === 400 || status === 409 || status === 422) {
+      return { state: 'invalid' };
+    }
+    if (status === 410) {
+      var code =
+        body && typeof body === 'object' && !Array.isArray(body)
+          ? String(body.code || '').toUpperCase()
+          : '';
+      if (code === 'SPENT' || code === 'EXPIRED') {
+        return { state: 'invalid', code: code };
+      }
+      return { state: 'invalid' };
+    }
+    if (status < 200 || status >= 300) return { state: 'unavailable' };
+    body = unwrapLookup(body);
+    if (!body || typeof body !== 'object' || Array.isArray(body)) return { state: 'unavailable' };
+    var fromBody = typeof body.kind === 'string' ? body.kind.trim() : '';
+    var raw = fromBody.toLowerCase();
+    if (!raw) {
+      var inviter = typeof body.inviterName === 'string' ? body.inviterName.trim() : '';
+      var hasCampaign = !!firstNonEmpty([
+        body.campaignText,
+        body.campaignTextEn,
+        body.actionText,
+        body.actionTextEn,
+      ]);
+      if (!inviter && hasCampaign) raw = 'promo';
+      else raw = (fallbackKind || 'invite').toLowerCase();
+    }
+    var kind = raw === 'promo' ? 'promo' : 'invite';
+    return { state: kind, payload: body };
+  }
+
+  function personDisplayName(name) {
+    var inviter = typeof name === 'string' ? name.trim() : '';
+    if (!inviter) return '';
+    if (/^0x[0-9a-fA-F]{40}$/.test(inviter)) return '';
+    if (/^\d+$/.test(inviter)) return '';
+    return inviter;
+  }
+
+  function firstNonEmpty(values) {
+    for (var i = 0; i < values.length; i++) {
+      var value = values[i];
+      if (typeof value === 'string' && value.trim()) return value;
+    }
+    return '';
+  }
+
+  // Locale-aware campaign wording. EN falls back to DE; DE falls back to EN.
+  // Empty / whitespace-only API fields must not block the fallback chain.
+  function promoBody(payload, lang) {
+    if (!payload || typeof payload !== 'object') return '';
+    if (lang === 'en') {
+      return firstNonEmpty([
+        payload.campaignTextEn,
+        payload.actionTextEn,
+        payload.actionText,
+        payload.campaignText,
+      ]);
+    }
+    return firstNonEmpty([
+      payload.actionText,
+      payload.campaignText,
+      payload.campaignTextEn,
+      payload.actionTextEn,
+    ]);
+  }
+
+  // BCP 47 tag of the campaign string [promoBody] actually returned, so the
+  // landing can set lang=de on an English page when only German copy exists.
+  function promoBodyLang(payload, lang) {
+    if (!payload || typeof payload !== 'object' || !promoBody(payload, lang)) {
+      return lang === 'en' ? 'en' : 'de';
+    }
+    if (lang === 'en') {
+      return firstNonEmpty([payload.campaignTextEn, payload.actionTextEn]) ? 'en' : 'de';
+    }
+    return firstNonEmpty([payload.actionText, payload.campaignText]) ? 'de' : 'en';
+  }
+
+  // Locale-aware invite greeting body. API actionText is usually DE;
+  // actionTextEn is preferred on English landings.
+  function inviteBody(payload, lang) {
+    if (!payload || typeof payload !== 'object') return '';
+    if (lang === 'en') {
+      return firstNonEmpty([payload.actionTextEn, payload.actionText]);
+    }
+    return firstNonEmpty([payload.actionText, payload.actionTextEn]);
+  }
+
+  // Entwurf 3: landing body is the inviter greeting, not the SMS share
+  // text (which includes https://realunit.app/invite/…).
+  function invalidLandingCopy(result, copy) {
+    if (result && result.code === 'SPENT') {
+      return {
+        title: copy['spent.title'] || copy['invalid.title'],
+        body: copy['spent.body'] || copy['invalid.body'],
+      };
+    }
+    return { title: copy['invalid.title'], body: copy['invalid.body'] };
+  }
+
+  function inviteLandingBody(payload, copy) {
+    var inviter = personDisplayName(payload && payload.inviterName);
+    if (inviter) return interpolate(copy['invite.body'], { inviter: inviter });
+    return copy['invite.body.fallback'] || '';
+  }
+
+  function inviteBodyLang(payload, lang) {
+    if (!payload || typeof payload !== 'object' || !inviteBody(payload, lang)) {
+      return lang === 'en' ? 'en' : 'de';
+    }
+    if (lang === 'en') {
+      return firstNonEmpty([payload.actionTextEn]) ? 'en' : 'de';
+    }
+    return firstNonEmpty([payload.actionText]) ? 'de' : 'en';
+  }
+
+  global.RealUnitInvite = {
+    SUPPORTED_LANGS: SUPPORTED_LANGS,
+    I18N: I18N,
+    LOOKUP_TIMEOUT_MS: LOOKUP_TIMEOUT_MS,
+    COPY_TIMEOUT_MS: COPY_TIMEOUT_MS,
+    resolveLang: resolveLang,
+    isRealUnitHost: isRealUnitHost,
+    canonicalOrigin: canonicalOrigin,
+    homeUrl: homeUrl,
+    apiBase: apiBase,
+    parseCodeFromPath: parseCodeFromPath,
+    parseCodeFromLocation: parseCodeFromLocation,
+    codeFromPastedReferralUrl: codeFromPastedReferralUrl,
+    isReferralPathKind: isReferralPathKind,
+    isReferralSchemeToken: isReferralSchemeToken,
+    codeFromWrappedQueryValue: codeFromWrappedQueryValue,
+    intentFragmentValues: intentFragmentValues,
+    buildLookupUrl: buildLookupUrl,
+    appLink: appLink,
+    appStoreUrl: appStoreUrl,
+    itunesBanner: itunesBanner,
+    applyItunesBannerFromLocation: applyItunesBannerFromLocation,
+    injectItunesBannerHtml: injectItunesBannerHtml,
+    injectLandingCanonicalHtml: injectLandingCanonicalHtml,
+    injectShareTitleHtml: injectShareTitleHtml,
+    injectShareImageAltHtml: injectShareImageAltHtml,
+    shareTitle: shareTitle,
+    injectShareDescriptionHtml: injectShareDescriptionHtml,
+    shareDescription: shareDescription,
+    langFromSearch: langFromSearch,
+    injectShareLocaleHtml: injectShareLocaleHtml,
+    injectSiteNameHtml: injectSiteNameHtml,
+    injectTwitterAppHtml: injectTwitterAppHtml,
+    injectInstallHandoffHtml: injectInstallHandoffHtml,
+    injectShareAppLinksHtml: injectShareAppLinksHtml,
+    landingCanonicalHref: landingCanonicalHref,
+    playStoreUrl: playStoreUrl,
+    androidIntentUrl: androidIntentUrl,
+    openInAppUrl: openInAppUrl,
+    androidAppUrl: androidAppUrl,
+    iosAppUrl: iosAppUrl,
+    interpolate: interpolate,
+    personDisplayName: personDisplayName,
+    invalidLandingCopy: invalidLandingCopy,
+    mapResult: mapResult,
+    promoBody: promoBody,
+    promoBodyLang: promoBodyLang,
+    inviteBody: inviteBody,
+    inviteLandingBody: inviteLandingBody,
+    inviteBodyLang: inviteBodyLang,
+    lookupFetchInit: lookupFetchInit,
+    finalizeLookup: finalizeLookup,
+    keepLandingFocus: keepLandingFocus,
+  };
+})(window);
diff --git a/public/promo/index.html b/public/promo/index.html
new file mode 100644
index 0000000..1c0a5db
--- /dev/null
+++ b/public/promo/index.html
@@ -0,0 +1,202 @@
+<!doctype html>
+<html lang="de">
+<head>
+  <meta charset="utf-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1" />
+  <title>RealUnit — Promo-Code</title>
+  <meta name="description" content="Öffne die RealUnit-App mit diesem Code." />
+  <meta name="theme-color" content="#1988C6" />
+  <meta name="format-detection" content="telephone=no, date=no" />
+  <meta name="robots" content="noindex" />
+  <link rel="icon" type="image/svg+xml" href="/assets/favicon.svg" />
+  <meta property="og:type" content="website" />
+  <meta property="og:site_name" content="RealUnit" />
+  <meta property="og:title" content="RealUnit — Promo-Code" />
+  <meta property="og:description" content="Öffne die RealUnit-App mit diesem Code." />
+  <meta property="og:image" content="https://realunit.app/assets/og.png" />
+  <meta property="og:image:width" content="1024" />
+  <meta property="og:image:height" content="500" />
+  <meta property="og:image:alt" content="RealUnit" />
+  <meta property="og:url" content="https://realunit.app/promo/" />
+  <link rel="canonical" href="https://realunit.app/promo/" />
+  <meta property="og:locale" content="de_CH" />
+  <meta property="og:locale:alternate" content="en_GB" />
+  <meta name="twitter:card" content="summary_large_image" />
+  <meta name="twitter:title" content="RealUnit — Promo-Code" />
+  <meta name="twitter:description" content="Öffne die RealUnit-App mit diesem Code." />
+  <meta name="twitter:image" content="https://realunit.app/assets/og.png" />
+  <meta name="twitter:image:alt" content="RealUnit" />
+  <meta name="twitter:url" content="https://realunit.app/promo/" />
+  <meta name="apple-itunes-app" content="app-id=6759720010" />
+  <script src="/js/lib/platform-core.js"></script>
+  <script src="/platform.js"></script>
+  <script src="/js/lib/invite-core.js"></script>
+  <script src="/js/invite-banner.js"></script>
+  <style>
+    :root { --bg: #f2f6fa; --blue: #1988C6; --ink: #343233; --muted: #647488; --red: #E02523; }
+    * { box-sizing: border-box; }
+    html, body { height: 100%; }
+    body {
+      margin: 0;
+      font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
+      color: var(--ink);
+      background: var(--bg);
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      min-height: 100%;
+      padding: clamp(16px, 4vw, 48px);
+    }
+    .card {
+      width: 100%;
+      max-width: 460px;
+      background: #fff;
+      border: 1px solid #e2e8f0;
+      border-radius: 18px;
+      padding: clamp(28px, 6vw, 44px) clamp(22px, 5vw, 40px);
+      text-align: center;
+    }
+    h1 { font-size: 1.4rem; margin: 0 0 10px; }
+    #state-invalid h1,
+    #state-invalid p { color: var(--red); }
+    p { color: var(--muted); line-height: 1.55; }
+    .hint {
+      margin-top: 16px;
+      padding: 12px 14px;
+      background: #e8f3fa;
+      color: var(--blue);
+      border-radius: 12px;
+      font-size: 0.9rem;
+      line-height: 1.45;
+    }
+    .code-box {
+      margin-top: 16px;
+      padding: 14px 14px 16px;
+      background: #f2f6fa;
+      border-radius: 12px;
+    }
+    .code-label {
+      margin: 0;
+      font-size: 0.8rem;
+      letter-spacing: 0.04em;
+      text-transform: uppercase;
+      color: var(--muted);
+    }
+    .code {
+      margin: 8px 0;
+      font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
+      font-size: 1.2rem;
+      font-weight: 600;
+      letter-spacing: 0.08em;
+      color: var(--ink);
+      word-break: break-all;
+      cursor: pointer;
+      user-select: all;
+      -webkit-user-select: all;
+    }
+    .code-hint { margin: 0 0 12px; font-size: 0.85rem; }
+    .code.code-copy-failed { color: var(--red); }
+    .btn {
+      display: inline-flex; align-items: center; justify-content: center;
+      width: 100%; padding: 14px 20px; border: 0; border-radius: 12px;
+      background: var(--blue); color: #fff; font-size: 1rem; font-weight: 600;
+      text-decoration: none; cursor: pointer;
+    }
+    .btn-secondary {
+      margin-top: 8px;
+      background: #fff;
+      color: var(--blue);
+      border: 1px solid var(--blue);
+    }
+    .btn-secondary.btn-copy-failed {
+      background: var(--red);
+      color: #fff;
+      border-color: var(--red);
+    }
+    .btn:focus-visible,
+    .code:focus-visible,
+    .store-link:focus-visible,
+    h1[tabindex="-1"]:focus,
+    .code-hint[tabindex="-1"]:focus,
+    #unavailable-cta:focus,
+    #invalid-home:focus {
+      outline: 2px solid var(--blue);
+      outline-offset: 3px;
+    }
+    #invalid-home { margin-top: 16px; }
+    .stores {
+      display: flex; flex-wrap: wrap; align-items: center; justify-content: center;
+      gap: 12px 16px; margin-top: 20px;
+    }
+    .store-link { display: inline-flex; border-radius: 10px; }
+    .store-badge { display: block; width: auto; }
+    .store-badge--apple { height: 40px; }
+    .store-badge--play { height: calc(40px * 68 / 52); }
+    html[data-platform="ios"] .store-link[data-store="apple"],
+    html[data-platform="android"] .store-link[data-store="play"] {
+      order: -1;
+      flex-basis: 100%;
+      justify-content: center;
+    }
+    html[data-platform="ios"] .store-badge--apple { height: 52px; }
+    html[data-platform="android"] .store-badge--play { height: calc(52px * 68 / 52); }
+    .only-mobile { display: none; }
+    html[data-platform] .only-mobile { display: block; }
+    html[data-platform] .only-desktop { display: none; }
+    .only-ios { display: none; }
+    html[data-platform="ios"] .only-ios { display: block; }
+    [hidden] { display: none !important; }
+  </style>
+</head>
+<body>
+  <main class="card">
+    <section id="state-loading" role="status" aria-live="polite" aria-busy="true">
+      <h1 id="loading-title">Promo-Code wird geladen…</h1>
+      <p id="loading-body">Einen Moment bitte.</p>
+    </section>
+    <div class="code-box" id="ok-code-box" hidden>
+      <p class="code-label" id="ok-code-label">Dein Code</p>
+      <p class="code notranslate" id="ok-code" translate="no" lang="zxx" x-apple-data-detectors="false" aria-describedby="ok-code-hint"></p>
+      <p class="code-hint" id="ok-code-hint" role="status" aria-live="polite" tabindex="-1"></p>
+      <button type="button" class="btn btn-secondary" id="ok-copy">Code kopieren</button>
+      <p class="only-desktop" id="ok-desktop"></p>
+      <p class="only-desktop">
+        <button type="button" class="btn btn-secondary" id="ok-copy-link">Link kopieren</button>
+      </p>
+      <p id="ok-pitch"></p>
+      <p class="hint only-ios" id="ok-retap" role="note"></p>
+    </div>
+    <div id="ok-open" hidden>
+      <p class="only-mobile"><a class="btn" id="ok-cta" href="realunit-wallet://open" rel="noopener">In der App öffnen</a></p>
+    </div>
+    <section id="state-ok" hidden role="status" aria-live="polite">
+      <h1 id="ok-title" tabindex="-1">Promo-Code</h1>
+      <p id="ok-body" x-apple-data-detectors="false">Die App übernimmt den Code automatisch.</p>
+    </section>
+    <section id="state-invalid" hidden>
+      <div id="invalid-status" role="status" aria-live="assertive">
+        <h1 id="invalid-title" tabindex="-1">Link ungültig oder abgelaufen</h1>
+        <p id="invalid-body">Dieser Einladungs- oder Promo-Link ist ungültig oder bereits abgelaufen.</p>
+      </div>
+      <a class="btn" id="invalid-home" href="/">Zur Startseite</a>
+    </section>
+    <section id="state-unavailable" hidden>
+      <div id="unavailable-status" role="status" aria-live="polite">
+        <h1 id="unavailable-title" tabindex="-1">Dienst vorübergehend nicht erreichbar</h1>
+        <p id="unavailable-body">Wir konnten den Code gerade nicht prüfen. Bitte versuche es später erneut.</p>
+      </div>
+      <button class="btn" type="button" id="unavailable-cta" aria-describedby="unavailable-body">Erneut versuchen</button>
+      <a class="btn btn-secondary" id="unavailable-home" href="/">Zur Startseite</a>
+    </section>
+    <nav class="stores" aria-label="App herunterladen">
+      <a class="store-link" data-store="apple" href="https://apps.apple.com/ch/app/realunit/id6759720010" target="_blank" rel="noopener" aria-label="RealUnit im App Store laden">
+        <img class="store-badge store-badge--apple" src="/assets/badge-app-store.svg" width="120" height="40" alt="" decoding="async" />
+      </a>
+      <a class="store-link" data-store="play" href="https://play.google.com/store/apps/details?id=swiss.realunit.app" target="_blank" rel="noopener" aria-label="RealUnit jetzt bei Google Play">
+        <img class="store-badge store-badge--play" src="/assets/badge-google-play.png" width="646" height="250" alt="" decoding="async" />
+      </a>
+    </nav>
+  </main>
+  <script src="/invite/invite.js"></script>
+</body>
+</html>
diff --git a/scripts/check-site.mjs b/scripts/check-site.mjs
index ad8692e..b927ecf 100644
--- a/scripts/check-site.mjs
+++ b/scripts/check-site.mjs
@@ -135,6 +135,570 @@ for (const file of htmlFiles) {
   checkScriptOrder(label, html, '/platform.js', '/js/lib/platform-core.js');
   checkScriptOrder(label, html, '/confirm-aktionariat/confirm.js', '/js/lib/confirm-core.js');
   checkScriptOrder(label, html, '/account-merge/merge.js', '/js/lib/merge-core.js');
+  checkScriptOrder(label, html, '/js/invite-banner.js', '/js/lib/invite-core.js');
+  checkScriptOrder(label, html, '/invite/invite.js', '/js/lib/invite-core.js');
+  checkScriptOrder(label, html, '/invite/invite.js', '/js/invite-banner.js');
+  if (/<script(?![^>]*\bsrc=)[^>]*>/i.test(html)) {
+    fail(`${label}: inline <script> is blocked by CSP; load a same-origin file`);
+  }
+}
+
+const promoHtml = read(join(PUBLIC, 'promo', 'index.html'));
+if (!promoHtml.includes('Promo-Code wird geladen')) {
+  fail('public/promo/index.html: loading title must be promo copy, not invite');
+}
+for (const [label, html] of [
+  ['public/invite/index.html', read(join(PUBLIC, 'invite', 'index.html'))],
+  ['public/promo/index.html', promoHtml],
+]) {
+  if (
+    !html.includes('id="ok-code"') ||
+    !html.includes('translate="no"') ||
+    !html.includes('notranslate')
+  ) {
+    fail(`${label}: invite/promo code must be marked notranslate`);
+  }
+  if (!html.includes('id="ok-copy"')) {
+    fail(`${label}: invite/promo must offer copy-code`);
+  }
+  if (
+    !/format-detection[^>]*telephone=no/.test(html) ||
+    !/format-detection[^>]*date=no/.test(html)
+  ) {
+    fail(
+      `${label}: iOS must not auto-link the campaign code as a phone number or the Aktionstext date`,
+    );
+  }
+  if (
+    !/id="ok-code"[^>]*x-apple-data-detectors="false"/.test(html) ||
+    !/id="ok-body"[^>]*x-apple-data-detectors="false"/.test(html)
+  ) {
+    fail(
+      `${label}: JS-inserted campaign code and Aktionstext must keep x-apple-data-detectors=false`,
+    );
+  }
+  if (!html.includes('src="/js/invite-banner.js"')) {
+    fail(
+      `${label}: Smart App Banner must load /js/invite-banner.js from <head> (CSP blocks inline script)`,
+    );
+  }
+  if (/apple-itunes-app[^>]*app-argument=/i.test(html)) {
+    fail(
+      `${label}: committed HTML must stay generic; app-argument is injected from the request URL`,
+    );
+  }
+  if (/og:url[^>]*(?:invite|promo)\/[A-Za-z0-9]/i.test(html)) {
+    fail(`${label}: committed og:url must stay generic; the request URL is injected`);
+  }
+  if (/rel="canonical"[^>]*(?:invite|promo)\/[A-Za-z0-9]/i.test(html)) {
+    fail(`${label}: committed canonical must stay generic; the request URL is injected`);
+  }
+  if (/twitter:url[^>]*(?:invite|promo)\/[A-Za-z0-9]/i.test(html)) {
+    fail(`${label}: committed twitter:url must stay generic; the request URL is injected`);
+  }
+  if (/og:title[^>]*(?:Einladung|Promo-Code) [A-Za-z0-9]/i.test(html)) {
+    fail(`${label}: committed og:title must stay generic; the request URL is injected`);
+  }
+  if (/twitter:title[^>]*(?:Einladung|Promo-Code) [A-Za-z0-9]/i.test(html)) {
+    fail(`${label}: committed twitter:title must stay generic; the request URL is injected`);
+  }
+  if (/og:image:alt[^>]*(?:Einladung|Promo-Code) [A-Za-z0-9]/i.test(html)) {
+    fail(`${label}: committed og:image:alt must stay generic; the request URL is injected`);
+  }
+  if (/twitter:image:alt[^>]*(?:Einladung|Promo-Code) [A-Za-z0-9]/i.test(html)) {
+    fail(`${label}: committed twitter:image:alt must stay generic; the request URL is injected`);
+  }
+  if (/og:description[^>]*dem Code [A-Za-z0-9]/i.test(html)) {
+    fail(`${label}: committed og:description must stay generic; the request URL is injected`);
+  }
+  if (/twitter:description[^>]*dem Code [A-Za-z0-9]/i.test(html)) {
+    fail(`${label}: committed twitter:description must stay generic; the request URL is injected`);
+  }
+  if (/al:ios:url|al:android:url|al:android:class|al:web:url/.test(html)) {
+    fail(`${label}: committed HTML must not bake Facebook App Links`);
+  }
+  if (/twitter:app:/.test(html)) {
+    fail(`${label}: committed HTML must not bake Twitter App Card urls`);
+  }
+  if (
+    /data-store="play"[^>]*referrer=/i.test(html) ||
+    /referrer=[^"]*data-store="play"/i.test(html)
+  ) {
+    fail(`${label}: committed Play href must stay generic; the referrer is injected`);
+  }
+  if (/android-app:\/\//.test(html) || /ios-app:\/\//.test(html)) {
+    fail(`${label}: committed HTML must not bake android-app/ios-app alternate hrefs`);
+  }
+  if (!html.includes('btn-copy-failed') || !html.includes('code-copy-failed')) {
+    fail(`${label}: failed copy must have an error style on the button and code`);
+  }
+  if (!html.includes(':focus-visible')) {
+    fail(`${label}: invite/promo must show a keyboard focus ring`);
+  }
+  if (!html.includes('#unavailable-cta:focus') || !html.includes('#invalid-home:focus')) {
+    fail(`${label}: programmatic retry/home focus must show a focus ring`);
+  }
+  if (
+    !html.includes('id="state-ok"') ||
+    !html.includes('role="status"') ||
+    !html.includes('aria-live="assertive"')
+  ) {
+    fail(`${label}: lookup states must be live regions`);
+  }
+  if (
+    !html.includes('#state-invalid h1') ||
+    !html.includes('#state-invalid p') ||
+    !html.includes('--red:')
+  ) {
+    fail(`${label}: invalid heading and body must use the status red`);
+  }
+  if (!html.includes('aria-describedby="ok-code-hint"')) {
+    fail(`${label}: code must be described by the hint`);
+  }
+  if (!html.includes('id="ok-code-hint" role="status" aria-live="polite" tabindex="-1"')) {
+    fail(`${label}: checking hint must be a live region and focusable after retry`);
+  }
+  if (!html.includes('id="ok-retap"') || !html.includes('role="note"')) {
+    fail(`${label}: iOS re-tap hint must be a note`);
+  }
+  if (
+    !html.includes('id="unavailable-cta"') ||
+    !html.includes('aria-describedby="unavailable-body"')
+  ) {
+    fail(`${label}: retry must be described by the unavailable body`);
+  }
+  if (!html.includes('id="invalid-status"') || !html.includes('id="unavailable-status"')) {
+    fail(`${label}: invalid/unavailable copy must be a live region that does not wrap the CTAs`);
+  }
+  if (!html.includes('id="invalid-home"') || !html.includes('href="/"')) {
+    fail(`${label}: invalid landing must offer a homepage link`);
+  }
+  if (!html.includes('id="unavailable-home"')) {
+    fail(`${label}: unavailable landing must offer a homepage link beside retry`);
+  }
+  if (!html.includes('id="ok-pitch"')) {
+    fail(`${label}: invite/promo must include the pitch in the code box`);
+  }
+  if (
+    !html.includes('twitter:title') ||
+    !html.includes('twitter:description') ||
+    !html.includes('twitter:image:alt') ||
+    !html.includes('twitter:url') ||
+    !html.includes('og:locale') ||
+    !html.includes('og:locale:alternate') ||
+    !html.includes('og:site_name') ||
+    !html.includes('theme-color')
+  ) {
+    fail(`${label}: invite/promo share preview must set Twitter tags, site name and locale`);
+  }
+  if (!html.includes('rel="canonical"')) {
+    fail(`${label}: invite/promo must declare a canonical URL`);
+  }
+  if (!html.includes('id="ok-title"') || !html.includes('tabindex="-1"')) {
+    fail(`${label}: lookup result heading must be focusable after load`);
+  }
+  if (!html.includes('id="ok-copy-link"') || !html.includes('only-desktop')) {
+    fail(`${label}: desktop landing must offer copy-link`);
+  }
+  if (!html.includes('id="ok-desktop"')) {
+    fail(`${label}: desktop landing must explain to open the link on a phone`);
+  }
+  if (
+    html.includes('data-store="apple"') &&
+    (html.includes('alt="Laden im App Store"') || html.includes('alt="Jetzt bei Google Play"'))
+  ) {
+    fail(`${label}: store badge inside an aria-labelled link must have empty alt`);
+  }
+  if (
+    !html.includes('html[data-platform="ios"] .store-link[data-store="apple"]') ||
+    !html.includes('html[data-platform="android"] .store-link[data-store="play"]')
+  ) {
+    fail(`${label}: matching store badge must lead on iOS/Android`);
+  }
+}
+
+const inviteJs = read(join(PUBLIC, 'invite', 'invite.js'));
+if (!inviteJs.includes('copyInFlight')) {
+  fail('public/invite/invite.js: copy must ignore a second tap while writeText is in flight');
+}
+if (!inviteJs.includes('setCopyBusy')) {
+  fail('public/invite/invite.js: copy must be disabled (aria-busy) while writeText is in flight');
+}
+if (!inviteJs.includes("codeEl.setAttribute('aria-disabled'")) {
+  fail(
+    'public/invite/invite.js: the code control must be aria-disabled while writeText is in flight',
+  );
+}
+if (!inviteJs.includes('COPY_TIMEOUT_MS')) {
+  fail('public/invite/invite.js: hung writeText must fall back after COPY_TIMEOUT_MS');
+}
+if (!inviteJs.includes('bindInstallHandoffCopy')) {
+  fail(
+    'public/invite/invite.js: App Store / Play / CTA tap must copy the code (iOS install handoff)',
+  );
+}
+const bannerJsPath = join(PUBLIC, 'js', 'invite-banner.js');
+if (!existsSync(bannerJsPath)) {
+  fail('public/js/invite-banner.js is missing (CSP-safe Smart App Banner)');
+} else if (!read(bannerJsPath).includes('applyItunesBannerFromLocation')) {
+  fail('public/js/invite-banner.js: must set apple-itunes-app from the URL');
+}
+const bannerFnPath = join(root, 'functions', '_middleware.js');
+const bannerLibPath = join(root, 'functions', 'lib', 'itunes-banner.js');
+if (!existsSync(bannerFnPath)) {
+  fail('functions/_middleware.js is missing (Safari snapshots apple-itunes-app from HTML bytes)');
+} else {
+  const fn = read(bannerFnPath);
+  if (!fn.includes('injectLandingFromRequestUrl')) {
+    fail(
+      'functions/_middleware.js: must inject apple-itunes-app, og:url, canonical, and og:title from the request URL',
+    );
+  }
+  if (!fn.includes('shouldRewriteItunesBanner')) {
+    fail('functions/_middleware.js: must skip invite.js and other non-HTML assets');
+  }
+}
+if (!existsSync(bannerLibPath)) {
+  fail('functions/lib/itunes-banner.js is missing');
+} else {
+  const lib = read(bannerLibPath);
+  if (!lib.includes('app-argument=realunit-wallet://')) {
+    fail(
+      'functions/lib/itunes-banner.js: must set app-argument to the custom-scheme invite/promo link',
+    );
+  }
+  if (!lib.includes('og:url') || !lib.includes('canonical')) {
+    fail('functions/lib/itunes-banner.js: must rewrite og:url and rel=canonical');
+  }
+  if (!lib.includes('referrer=') || !lib.includes('android-app://')) {
+    fail('functions/lib/itunes-banner.js: must inject Play referrer and android-app alternate');
+  }
+  if (!lib.includes('twitter:url') || !lib.includes('al:ios:url')) {
+    fail('functions/lib/itunes-banner.js: must inject twitter:url and Facebook App Links');
+  }
+  if (!lib.includes('al:android:class') || !lib.includes('swiss.realunit.app.MainActivity')) {
+    fail('functions/lib/itunes-banner.js: must inject al:android:class MainActivity');
+  }
+  if (!lib.includes('twitter:app:url:iphone') || !lib.includes('twitter:app:url:googleplay')) {
+    fail('functions/lib/itunes-banner.js: must inject Twitter App Card deep links');
+  }
+  if (!lib.includes('og:title') || !lib.includes('twitter:title')) {
+    fail(
+      'functions/lib/itunes-banner.js: must inject og:title and twitter:title from the request URL',
+    );
+  }
+  if (!lib.includes('og:image:alt') || !lib.includes('twitter:image:alt')) {
+    fail(
+      'functions/lib/itunes-banner.js: must inject og:image:alt and twitter:image:alt from the request URL',
+    );
+  }
+  if (!lib.includes('og:site_name')) {
+    fail('functions/lib/itunes-banner.js: must inject og:site_name');
+  }
+  if (!lib.includes('og:description') || !lib.includes('shareDescription')) {
+    fail('functions/lib/itunes-banner.js: must inject og:description from the request URL');
+  }
+  if (!lib.includes('og:locale') || !lib.includes("lang === 'en'")) {
+    fail('functions/lib/itunes-banner.js: must inject og:locale from ?lang=en');
+  }
+}
+const routesPath = join(PUBLIC, '_routes.json');
+if (!existsSync(routesPath)) {
+  fail('public/_routes.json is missing (Pages Function include for /invite|/promo)');
+} else {
+  try {
+    const routes = JSON.parse(read(routesPath));
+    const include = routes.include || [];
+    const exclude = routes.exclude || [];
+    if (!include.includes('/invite') || !include.includes('/invite/*')) {
+      fail('public/_routes.json: must include /invite and /invite/*');
+    }
+    if (!include.includes('/promo') || !include.includes('/promo/*')) {
+      fail('public/_routes.json: must include /promo and /promo/*');
+    }
+    if (!exclude.includes('/invite/invite.js')) {
+      fail('public/_routes.json: must exclude /invite/invite.js');
+    }
+  } catch (e) {
+    fail(`public/_routes.json: ${e instanceof Error ? e.message : e}`);
+  }
+}
+if (!inviteJs.includes('keepLandingFocus')) {
+  fail('public/invite/invite.js: show() must keep focus on copy, Retry, and home');
+}
+if (!inviteJs.includes('if (lookupInFlight) return')) {
+  fail('public/invite/invite.js: Retry must ignore a second tap while lookup is in flight');
+}
+if (!inviteJs.includes('setRetryBusy') || !inviteJs.includes('retry.disabled')) {
+  fail('public/invite/invite.js: Retry must be disabled (aria-busy) while lookup is in flight');
+}
+if (!inviteJs.includes('var retrying')) {
+  fail('public/invite/invite.js: Retry must keep the unavailable copy while lookup reloads');
+}
+if (!inviteJs.includes('Budget elapsed')) {
+  fail('public/invite/invite.js: hung lookup must show unavailable when the 15s budget elapses');
+}
+if (!inviteJs.includes('window.location.hash')) {
+  fail('public/invite/invite.js: /invite#CODE must be parsed from the hash');
+}
+
+// Universal Link / App Link verification files for /invite and /promo.
+const aasaPath = join(PUBLIC, '.well-known', 'apple-app-site-association');
+if (!existsSync(aasaPath)) {
+  fail('public/.well-known/apple-app-site-association is missing');
+} else {
+  try {
+    const aasa = JSON.parse(read(aasaPath));
+    const details = aasa?.applinks?.details;
+    const first = Array.isArray(details) ? details[0] : null;
+    const appId = 'N2BP27J7N6.swiss.realunit.app';
+    const appIDs = first?.appIDs ?? [];
+    if (first?.appID !== appId && !appIDs.includes(appId)) {
+      fail('apple-app-site-association: missing appID N2BP27J7N6.swiss.realunit.app');
+    }
+    const paths = [...(first?.paths ?? []), ...(first?.components ?? []).map((c) => c['/'])];
+    if (!paths.some((p) => p === '/invite')) {
+      fail('apple-app-site-association: missing exact /invite');
+    }
+    if (!paths.some((p) => p === '/invite/*')) {
+      fail('apple-app-site-association: missing /invite/*');
+    }
+    if (!paths.some((p) => p === '/promo')) {
+      fail('apple-app-site-association: missing exact /promo');
+    }
+    if (!paths.some((p) => p === '/promo/*')) {
+      fail('apple-app-site-association: missing /promo/*');
+    }
+  } catch (e) {
+    fail(`apple-app-site-association: ${e instanceof Error ? e.message : e}`);
+  }
+}
+const aasaAliasPath = join(PUBLIC, 'apple-app-site-association');
+if (!existsSync(aasaAliasPath)) {
+  fail(
+    'public/apple-app-site-association is missing (Apple also fetches this path as HTTP 200, not a rewrite-only alias)',
+  );
+} else if (existsSync(aasaPath) && read(aasaAliasPath) !== read(aasaPath)) {
+  fail('public/apple-app-site-association must match .well-known/apple-app-site-association');
+}
+// Invite/promo glue and js/lib cores must stay off the immutable cache so a
+// landing-page update still rolls out. Cloudflare Pages `_headers` is the
+// only place those Cache-Control values exist.
+function parseCfHeaders(text) {
+  const blocks = new Map();
+  let current = null;
+  for (const rawLine of text.split(/\r?\n/)) {
+    const line = rawLine.trimEnd();
+    if (!line || line.trimStart().startsWith('#')) continue;
+    if (!line.startsWith(' ') && !line.startsWith('\t')) {
+      current = line.trim();
+      if (!blocks.has(current)) blocks.set(current, {});
+      continue;
+    }
+    if (!current) continue;
+    const idx = line.indexOf(':');
+    if (idx === -1) continue;
+    const name = line.slice(0, idx).trim().toLowerCase();
+    const value = line.slice(idx + 1).trim();
+    blocks.get(current)[name] = value;
+  }
+  return blocks;
+}
+
+function requireHeader(blocks, path, name, pred, label) {
+  const block = blocks.get(path);
+  if (!block) {
+    fail(`_headers: missing block for ${path}`);
+    return;
+  }
+  const value = block[name];
+  if (!value) {
+    fail(`_headers: ${path} missing ${name}`);
+    return;
+  }
+  if (pred && !pred(value)) fail(`_headers: ${path} ${name} ${label}`);
+}
+
+const headersPath = join(PUBLIC, '_headers');
+if (!existsSync(headersPath)) {
+  fail('public/_headers is missing');
+} else {
+  const blocks = parseCfHeaders(read(headersPath));
+  const csp = blocks.get('/*')?.['content-security-policy'] || '';
+  if (!csp) {
+    fail('_headers: missing Content-Security-Policy on /*');
+  } else if (
+    /script-src[^;]*'unsafe-inline'/.test(csp) ||
+    /default-src[^;]*'unsafe-inline'/.test(csp)
+  ) {
+    fail(
+      '_headers: script must not allow unsafe-inline (Smart App Banner uses /js/invite-banner.js)',
+    );
+  }
+  const notImmutable = (value) => /max-age=/i.test(value) && !/immutable/i.test(value);
+  const jsonType = (value) => /application\/json/i.test(value);
+  requireHeader(
+    blocks,
+    '/invite/invite.js',
+    'cache-control',
+    notImmutable,
+    'must be a non-immutable max-age',
+  );
+  requireHeader(blocks, '/js/*', 'cache-control', notImmutable, 'must be a non-immutable max-age');
+  requireHeader(
+    blocks,
+    '/invite/index.html',
+    'cache-control',
+    notImmutable,
+    'must be a non-immutable max-age',
+  );
+  requireHeader(
+    blocks,
+    '/promo/index.html',
+    'cache-control',
+    notImmutable,
+    'must be a non-immutable max-age',
+  );
+  requireHeader(
+    blocks,
+    '/invite/*',
+    'cache-control',
+    notImmutable,
+    'must be a non-immutable max-age',
+  );
+  requireHeader(
+    blocks,
+    '/promo/*',
+    'cache-control',
+    notImmutable,
+    'must be a non-immutable max-age',
+  );
+  requireHeader(
+    blocks,
+    '/.well-known/apple-app-site-association',
+    'content-type',
+    jsonType,
+    'must be application/json',
+  );
+  requireHeader(
+    blocks,
+    '/.well-known/assetlinks.json',
+    'content-type',
+    jsonType,
+    'must be application/json',
+  );
+}
+
+const redirectsPath = join(PUBLIC, '_redirects');
+if (!existsSync(redirectsPath)) {
+  fail('public/_redirects is missing');
+} else {
+  const rules = read(redirectsPath)
+    .split(/\r?\n/)
+    .map((line) => line.trim())
+    .filter((line) => line && !line.startsWith('#'))
+    .map((line) => line.split(/\s+/));
+  const hasRewrite = (from, to) =>
+    rules.some((parts) => parts[0] === from && parts[1] === to && parts[2] === '200');
+  const hasHost301 = (from, to) =>
+    rules.some((parts) => parts[0] === from && parts[1] === to && parts[2] === '301');
+  if (hasHost301('https://www.realunit.app/invite', 'https://realunit.app/invite')) {
+    fail('_redirects: www /invite must be 200, not apex 301 (Universal Links)');
+  }
+  if (hasHost301('https://www.realunit.app/invite/*', 'https://realunit.app/invite/:splat')) {
+    fail('_redirects: www /invite/* must be 200, not apex 301 (Universal Links)');
+  }
+  if (hasHost301('https://www.realunit.app/promo', 'https://realunit.app/promo')) {
+    fail('_redirects: www /promo must be 200, not apex 301 (Universal Links)');
+  }
+  if (hasHost301('https://www.realunit.app/promo/*', 'https://realunit.app/promo/:splat')) {
+    fail('_redirects: www /promo/* must be 200, not apex 301 (Universal Links)');
+  }
+  if (!hasRewrite('https://www.realunit.app/invite', '/invite/index.html')) {
+    fail('_redirects: missing www /invite 200 (no 301)');
+  }
+  if (!hasRewrite('https://www.realunit.app/invite/*', '/invite/index.html')) {
+    fail('_redirects: missing www /invite/* 200 (no 301)');
+  }
+  if (!hasRewrite('https://www.realunit.app/promo', '/promo/index.html')) {
+    fail('_redirects: missing www /promo 200 (no 301)');
+  }
+  if (!hasRewrite('https://www.realunit.app/promo/*', '/promo/index.html')) {
+    fail('_redirects: missing www /promo/* 200 (no 301)');
+  }
+  if (rules.some((parts) => parts[0] === 'https://www.realunit.app/*')) {
+    fail('_redirects: catch-all www 301 would redirect AASA');
+  }
+  if (
+    !hasRewrite(
+      'https://www.realunit.app/.well-known/apple-app-site-association',
+      '/.well-known/apple-app-site-association',
+    )
+  ) {
+    fail('_redirects: missing www AASA 200 (no 301)');
+  }
+  if (
+    !hasRewrite(
+      'https://www.realunit.app/.well-known/assetlinks.json',
+      '/.well-known/assetlinks.json',
+    )
+  ) {
+    fail('_redirects: missing www assetlinks 200 (no 301)');
+  }
+  if (
+    !hasRewrite(
+      'https://www.realunit.app/apple-app-site-association',
+      '/.well-known/apple-app-site-association',
+    )
+  ) {
+    fail('_redirects: missing www /apple-app-site-association 200 (no 301)');
+  }
+  if (rules.some((parts) => String(parts[0]).includes('.well-known/') && parts[2] === '301')) {
+    fail('_redirects: .well-known must not 301');
+  }
+  if (!hasRewrite('/invite', '/invite/index.html')) {
+    fail('_redirects: missing /invite → /invite/index.html 200');
+  }
+  if (!hasRewrite('/invite/*', '/invite/index.html')) {
+    fail('_redirects: missing /invite/* → /invite/index.html 200');
+  }
+  if (!hasRewrite('/promo', '/promo/index.html')) {
+    fail('_redirects: missing /promo → /promo/index.html 200');
+  }
+  if (!hasRewrite('/promo/*', '/promo/index.html')) {
+    fail('_redirects: missing /promo/* → /promo/index.html 200');
+  }
+}
+
+const assetlinksPath = join(PUBLIC, '.well-known', 'assetlinks.json');
+if (!existsSync(assetlinksPath)) {
+  fail('public/.well-known/assetlinks.json is missing');
+} else {
+  try {
+    const links = JSON.parse(read(assetlinksPath));
+    if (!Array.isArray(links) || links.length === 0) {
+      fail('assetlinks.json: expected a non-empty array');
+    } else if (links[0]?.target?.package_name !== 'swiss.realunit.app') {
+      fail('assetlinks.json: package_name must be swiss.realunit.app');
+    } else if (!Array.isArray(links[0]?.target?.sha256_cert_fingerprints)) {
+      fail('assetlinks.json: sha256_cert_fingerprints must be an array');
+    } else {
+      const fps = links[0].target.sha256_cert_fingerprints.map(String);
+      const upload =
+        '7F:8B:14:54:E2:91:E9:DB:56:21:69:0A:64:23:7C:34:80:78:C6:5B:B4:86:31:CA:02:9D:14:20:E6:3C:7B:40';
+      if (!fps.includes(upload)) {
+        fail('assetlinks.json: missing GitHub APK v1.2.17 upload SHA-256 (O=DFX AG)');
+      }
+      const sha = /^([0-9A-F]{2}:){31}[0-9A-F]{2}$/;
+      for (const fp of fps) {
+        if (!sha.test(fp)) {
+          fail(`assetlinks.json: fingerprint is not SHA-256 hex pairs: ${fp}`);
+        }
+      }
+    }
+  } catch (e) {
+    fail(`assetlinks.json: ${e instanceof Error ? e.message : e}`);
+  }
 }
 
 if (errors.length > 0) {
diff --git a/scripts/dev-server.mjs b/scripts/dev-server.mjs
index 0808bf6..29744ae 100644
--- a/scripts/dev-server.mjs
+++ b/scripts/dev-server.mjs
@@ -1,7 +1,11 @@
-import { createReadStream, existsSync, statSync } from 'node:fs';
+import { createReadStream, existsSync, readFileSync, statSync } from 'node:fs';
 import { createServer } from 'node:http';
 import { extname, join, normalize, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
+import {
+  injectLandingFromRequestUrl,
+  shouldRewriteItunesBanner,
+} from '../functions/lib/itunes-banner.js';
 import { PORT } from '../tests/pages.mjs';
 
 // Cloudflare Pages serves the contents of public/ at the site root. Mirror that
@@ -31,6 +35,28 @@ function send(response, status, body = '') {
   response.end(body);
 }
 
+// Mirror functions/_middleware.js: Safari snapshots apple-itunes-app,
+// og:url, and og:title from the HTML bytes. Rewrite those from the
+// request URL so local preview and Playwright match Cloudflare Pages.
+function sendHtml(response, filePath, requestUrl, method) {
+  const html = readFileSync(filePath, 'utf8');
+  let pathname = '/';
+  try {
+    pathname = new URL(requestUrl, `http://127.0.0.1:${port}`).pathname;
+  } catch {
+    pathname = String(requestUrl || '/').split('?')[0];
+  }
+  const body = shouldRewriteItunesBanner(pathname)
+    ? injectLandingFromRequestUrl(html, requestUrl)
+    : html;
+  response.writeHead(200, { 'content-type': 'text/html; charset=utf-8' });
+  if (method === 'HEAD') {
+    response.end();
+    return;
+  }
+  response.end(body);
+}
+
 // Serve the custom 404 page with a real 404 status, exactly as Cloudflare Pages
 // does for an unmatched path.
 function sendNotFound(response) {
@@ -65,13 +91,32 @@ createServer((request, response) => {
     return;
   }
 
-  const filePath = resolveRequestPath(request.url || '/');
+  const originalUrl = request.url || '/';
+  const filePath = resolveRequestPath(originalUrl);
 
   if (!filePath || !existsSync(filePath) || !statSync(filePath).isFile()) {
+    const pathname = decodeURIComponent(new URL(originalUrl, `http://127.0.0.1:${port}`).pathname);
+    if (pathname === '/invite' || pathname.startsWith('/invite/')) {
+      request.url = '/invite/index.html';
+    } else if (pathname === '/promo' || pathname.startsWith('/promo/')) {
+      request.url = '/promo/index.html';
+    }
+    if (request.url === '/invite/index.html' || request.url === '/promo/index.html') {
+      const rewritten = resolveRequestPath(request.url);
+      if (rewritten && existsSync(rewritten) && statSync(rewritten).isFile()) {
+        sendHtml(response, rewritten, originalUrl, request.method);
+        return;
+      }
+    }
     sendNotFound(response);
     return;
   }
 
+  if (extname(filePath) === '.html') {
+    sendHtml(response, filePath, originalUrl, request.method);
+    return;
+  }
+
   response.writeHead(200, {
     'content-type': mimeTypes.get(extname(filePath)) || 'application/octet-stream',
   });
diff --git a/scripts/e2e-docker.sh b/scripts/e2e-docker.sh
index 491902e..03f3159 100644
--- a/scripts/e2e-docker.sh
+++ b/scripts/e2e-docker.sh
@@ -12,7 +12,7 @@
 set -euo pipefail
 cd "$(dirname "$0")/.."
 
-VERSION="$(node -p "require('@playwright/test/package.json').version")"
+VERSION="$(node -p "try { require('@playwright/test/package.json').version } catch (e) { require('./package.json').devDependencies['@playwright/test'] }")"
 IMAGE="mcr.microsoft.com/playwright:v${VERSION}-noble"
 
 UPDATE=""
diff --git a/test/invite-core.test.mjs b/test/invite-core.test.mjs
new file mode 100644
index 0000000..b131491
--- /dev/null
+++ b/test/invite-core.test.mjs
@@ -0,0 +1,1724 @@
+import '../public/js/lib/invite-core.js';
+import { describe, expect, test } from 'vitest';
+
+const core = window.RealUnitInvite;
+const {
+  SUPPORTED_LANGS,
+  I18N,
+  resolveLang,
+  isRealUnitHost,
+  canonicalOrigin,
+  homeUrl,
+  apiBase,
+  parseCodeFromPath,
+  parseCodeFromLocation,
+  codeFromPastedReferralUrl,
+  buildLookupUrl,
+  appLink,
+  appStoreUrl,
+  itunesBanner,
+  applyItunesBannerFromLocation,
+  injectItunesBannerHtml,
+  injectLandingCanonicalHtml,
+  injectShareTitleHtml,
+  injectShareImageAltHtml,
+  shareTitle,
+  injectShareDescriptionHtml,
+  shareDescription,
+  langFromSearch,
+  injectShareLocaleHtml,
+  injectSiteNameHtml,
+  injectTwitterAppHtml,
+  injectInstallHandoffHtml,
+  injectShareAppLinksHtml,
+  landingCanonicalHref,
+  playStoreUrl,
+  androidIntentUrl,
+  openInAppUrl,
+  androidAppUrl,
+  iosAppUrl,
+  interpolate,
+  mapResult,
+  promoBody,
+  promoBodyLang,
+  inviteBody,
+  inviteBodyLang,
+  LOOKUP_TIMEOUT_MS,
+  COPY_TIMEOUT_MS,
+  lookupFetchInit,
+  finalizeLookup,
+  keepLandingFocus,
+} = core;
+
+describe('resolveLang', () => {
+  test('prefers supported ?lang=', () => {
+    expect(
+      resolveLang({
+        urlLang: 'en',
+        navigatorLang: 'de-DE',
+        supported: SUPPORTED_LANGS,
+        defaultLang: 'de',
+      }),
+    ).toBe('en');
+  });
+
+  test('falls back to default for unsupported ?lang= without consulting the browser', () => {
+    expect(
+      resolveLang({
+        urlLang: 'pt',
+        navigatorLang: 'en-US',
+        supported: SUPPORTED_LANGS,
+        defaultLang: 'de',
+      }),
+    ).toBe('de');
+  });
+
+  test('uses the browser when there is no ?lang=', () => {
+    expect(
+      resolveLang({
+        urlLang: null,
+        navigatorLang: 'en-GB',
+        supported: SUPPORTED_LANGS,
+        defaultLang: 'de',
+      }),
+    ).toBe('en');
+  });
+
+  test('treats a non-string as absent', () => {
+    expect(
+      resolveLang({
+        urlLang: 12,
+        navigatorLang: undefined,
+        supported: SUPPORTED_LANGS,
+        defaultLang: 'de',
+      }),
+    ).toBe('de');
+  });
+});
+
+describe('hosts and API base', () => {
+  test('recognises production and dev hosts only', () => {
+    expect(isRealUnitHost('realunit.app')).toBe(true);
+    expect(isRealUnitHost('localhost')).toBe(false);
+  });
+
+  test('canonicalOrigin folds www onto the apex', () => {
+    expect(canonicalOrigin('realunit.app')).toBe('https://realunit.app');
+    expect(canonicalOrigin('www.realunit.app')).toBe('https://realunit.app');
+    expect(canonicalOrigin('dev.realunit.app')).toBe('https://dev.realunit.app');
+    expect(canonicalOrigin('localhost')).toBeNull();
+  });
+
+  test('homeUrl folds www onto the apex and keeps / on local preview', () => {
+    expect(homeUrl('realunit.app')).toBe('https://realunit.app/');
+    expect(homeUrl('www.realunit.app')).toBe('https://realunit.app/');
+    expect(homeUrl('dev.realunit.app')).toBe('https://dev.realunit.app/');
+    expect(homeUrl('localhost')).toBe('/');
+  });
+
+  test('maps hosts to the DFX API', () => {
+    expect(apiBase({ host: 'realunit.app' })).toBe('https://api.dfx.swiss');
+    expect(apiBase({ host: 'www.realunit.app' })).toBe('https://api.dfx.swiss');
+    expect(apiBase({ host: 'dev.realunit.app' })).toBe('https://dev.api.dfx.swiss');
+    expect(apiBase({ host: 'localhost', paramApi: 'https://api.example.test' })).toBe(
+      'https://api.example.test',
+    );
+    expect(apiBase({ host: 'localhost' })).toBe('https://dev.api.dfx.swiss');
+  });
+});
+
+describe('parseCodeFromPath', () => {
+  test('reads invite and promo codes', () => {
+    expect(parseCodeFromPath('/invite/AB12CD')).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(parseCodeFromPath('/invite/ab12cd')).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(parseCodeFromPath('/invite/AB12CD/')).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(parseCodeFromPath('/promo/EVT1')).toEqual({ kind: 'promo', code: 'EVT1' });
+    expect(parseCodeFromPath('/INVITE/AB12CD')).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(parseCodeFromPath('/invite/AB12CD/extra')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseCodeFromPath('/PROMO/EVT1/extra')).toEqual({
+      kind: 'promo',
+      code: 'EVT1',
+    });
+  });
+
+  test('rejects incomplete or unknown paths', () => {
+    expect(parseCodeFromPath('/invite/')).toBeNull();
+    expect(parseCodeFromPath('/other/AB12CD')).toBeNull();
+    expect(parseCodeFromPath(null)).toBeNull();
+  });
+
+  test('decodes a percent-encoded path segment', () => {
+    expect(parseCodeFromPath('/invite/AB%2F12')).toEqual({
+      kind: 'invite',
+      code: 'AB/12',
+    });
+  });
+
+  test('keeps a malformed percent-encoded segment', () => {
+    expect(parseCodeFromPath('/invite/AB%')).toEqual({
+      kind: 'invite',
+      code: 'AB%',
+    });
+  });
+
+  test('caps the code at 32 characters', () => {
+    const long = 'A'.repeat(300);
+    expect(parseCodeFromPath(`/invite/${long}`).code).toHaveLength(32);
+  });
+
+  test('drops trailing sentence punct like the API sanitizeReferralCode', () => {
+    expect(parseCodeFromPath('/invite/AB12CD!')).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(parseCodeFromPath('/invite/AB12CD!?')).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(parseCodeFromPath('/promo/EVT1.')).toEqual({ kind: 'promo', code: 'EVT1' });
+    expect(parseCodeFromLocation('/invite', '?code=AB%2F12/')).toEqual({
+      kind: 'invite',
+      code: 'AB/12',
+    });
+    expect(parseCodeFromPath('/invite/!')).toBeNull();
+    expect(parseCodeFromPath('/invite/!!!')).toBeNull();
+  });
+
+  test('trims whitespace and rejects a blank decoded segment', () => {
+    expect(parseCodeFromPath('/invite/%20')).toBeNull();
+    expect(parseCodeFromPath('/invite/  AB12CD  ')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseCodeFromPath('/invite/AB 12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseCodeFromPath('/invite/AB\u00A012CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseCodeFromPath('/invite/ＡＢ１２ＣＤ')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseCodeFromPath('/promo/ＥＶＴ１')).toEqual({
+      kind: 'promo',
+      code: 'EVT1',
+    });
+    expect(parseCodeFromPath('/invite/AB\u200912CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+  });
+
+  test('strips zero-width characters from the path segment', () => {
+    expect(parseCodeFromPath('/invite/AB\u200B12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseCodeFromPath('/invite/AB%E2%80%8B12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(
+      parseCodeFromPath('/invite/%EF%BC%A1%EF%BC%A2%EF%BC%91%EF%BC%92%EF%BC%A3%EF%BC%A4'),
+    ).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseCodeFromPath('/promo/\uFEFFEVT1\u200B')).toEqual({
+      kind: 'promo',
+      code: 'EVT1',
+    });
+    expect(parseCodeFromPath('/invite/\u200B')).toBeNull();
+    expect(parseCodeFromPath('/invite/AB\u200E12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+  });
+
+  test('extracts the code from a nested invite URL in the path', () => {
+    expect(parseCodeFromPath('/invite/https://realunit.app/invite/AB12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(
+      parseCodeFromPath('/invite/' + encodeURIComponent('https://realunit.app/invite/AB12CD')),
+    ).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseCodeFromPath('/promo/realunit-wallet://promo/EVT1')).toEqual({
+      kind: 'promo',
+      code: 'EVT1',
+    });
+    expect(
+      parseCodeFromPath('/invite/intent://realunit.app/invite/AB12CD#Intent;scheme=https;end'),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(
+      parseCodeFromPath(
+        '/invite/' + encodeURIComponent('Hey Alice: https://realunit.app/invite/AB12CD'),
+      ),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(
+      parseCodeFromPath('/promo/Hey Alice, RealUnit: https://realunit.app/promo/EVT1'),
+    ).toEqual({ kind: 'promo', code: 'EVT1' });
+  });
+});
+
+describe('parseCodeFromLocation', () => {
+  test('path segment wins over a query code', () => {
+    expect(parseCodeFromLocation('/invite/AB12CD', '?code=OTHER')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+  });
+
+  test('reads code, invite, or promo query on a bare /invite or /promo path', () => {
+    expect(parseCodeFromLocation('/invite', '?code=AB12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseCodeFromLocation('/invite/', 'invite=AB12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseCodeFromLocation('/promo', '?promo=EVT1')).toEqual({
+      kind: 'promo',
+      code: 'EVT1',
+    });
+    expect(parseCodeFromLocation('/PROMO/', '?code=EVT1')).toEqual({
+      kind: 'promo',
+      code: 'EVT1',
+    });
+    expect(
+      parseCodeFromLocation('/invite', '?app-argument=realunit-wallet://invite/AB12CD'),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(
+      parseCodeFromLocation(
+        '/promo',
+        '?app-argument=' + encodeURIComponent('Hey Alice: https://realunit.app/promo/EVT1'),
+      ),
+    ).toEqual({ kind: 'promo', code: 'EVT1' });
+  });
+
+  test('extracts the code from an invite URL in the query', () => {
+    expect(parseCodeFromLocation('/invite', '?code=https://realunit.app/invite/AB12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(
+      parseCodeFromLocation(
+        '/invite',
+        '?code=' + encodeURIComponent('Hey Alice: https://realunit.app/invite/AB12CD'),
+      ),
+    ).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseCodeFromLocation('/promo', '?promo=https://realunit.app/promo/EVT1')).toEqual({
+      kind: 'promo',
+      code: 'EVT1',
+    });
+  });
+
+  test('rejects unknown paths, missing search, and blank query codes', () => {
+    expect(parseCodeFromLocation(null, '?code=AB12CD')).toBeNull();
+    expect(parseCodeFromLocation('/other', '?code=AB12CD')).toBeNull();
+    expect(parseCodeFromLocation('/invite', null)).toBeNull();
+    expect(parseCodeFromLocation('/invite', '')).toBeNull();
+    expect(parseCodeFromLocation('/invite', '', '#AB12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseCodeFromLocation('/promo', '', '#EVT1')).toEqual({
+      kind: 'promo',
+      code: 'EVT1',
+    });
+    expect(parseCodeFromLocation('/promo', null, '#EVT1')).toEqual({
+      kind: 'promo',
+      code: 'EVT1',
+    });
+    expect(parseCodeFromLocation('/invite/AB12CD', '', '#OTHER')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseCodeFromLocation('/invite', '?code=%20')).toBeNull();
+    expect(parseCodeFromLocation('/invite', '', '#')).toBeNull();
+    expect(parseCodeFromLocation('/invite', '?lang=en')).toBeNull();
+    expect(parseCodeFromLocation('/invite', '?utm_content=summer-sale')).toBeNull();
+    expect(
+      parseCodeFromLocation(
+        '/invite',
+        '?utm_content=summer-sale&u=https://realunit.app/invite/AB12CD',
+      ),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(
+      parseCodeFromLocation(
+        '/invite',
+        '?utm_content=summer-sale&link=https://realunit.app/invite/AB12CD',
+      ),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(parseCodeFromLocation('/', '?code=AB12CD')).toBeNull();
+  });
+
+  test('unwraps utm_content / referrer wrapping invite= or a landing URL', () => {
+    expect(parseCodeFromLocation('/invite', '?utm_content=invite%3DAB12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(
+      parseCodeFromLocation(
+        '/invite',
+        '?utm_source=google-play&utm_content=https://realunit.app/invite/AB12CD',
+      ),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(parseCodeFromLocation('/invite', '?utm_content=realunit.app/invite/AB12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseCodeFromLocation('/invite', '?utm_content=/invite/AB12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseCodeFromLocation('/invite', '?code=prefixinvite/AB12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseCodeFromLocation('/invite', '?code=invite%2FAB%252F12')).toEqual({
+      kind: 'invite',
+      code: 'AB/12',
+    });
+    expect(parseCodeFromLocation('/invite', '?code=%2Finvite%2FAB12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseCodeFromLocation('/promo', '?referrer=promo%3DEVT1')).toEqual({
+      kind: 'promo',
+      code: 'EVT1',
+    });
+    expect(parseCodeFromLocation('/invite/AB12CD', '?utm_content=OTHER')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseCodeFromLocation('/invite', '?u=https://realunit.app/invite/AB12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseCodeFromLocation('/invite', '?q=https://realunit.app/invite/AB12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseCodeFromLocation('/invite', '?url=https://realunit.app/invite/AB12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseCodeFromLocation('/invite', '?u=hello')).toBeNull();
+    expect(parseCodeFromLocation('/invite', '?link=https://realunit.app/invite/AB12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseCodeFromLocation('/invite', '?link=hello')).toBeNull();
+    expect(
+      parseCodeFromLocation('/invite', '?utm_content=ios-app://6759720010/invite/AB12CD'),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(
+      parseCodeFromLocation('/invite', '?utm_content=https://example.com/campaign'),
+    ).toBeNull();
+    expect(parseCodeFromLocation('/invite', '?u=https://example.com/invite/AB12CD')).toBeNull();
+    expect(parseCodeFromLocation('/invite', '?code=https://example.com/foo')).toBeNull();
+    expect(parseCodeFromLocation('/invite', '?code=foohttps://example.com')).toBeNull();
+    expect(parseCodeFromLocation('/invite', '?code=https://example.com/foo&invite=AB12CD')).toEqual(
+      { kind: 'invite', code: 'AB12CD' },
+    );
+    expect(
+      parseCodeFromLocation(
+        '/invite',
+        '?utm_content=' +
+          encodeURIComponent(
+            'https://realunit.app/invite?code=https://example.com/foo&invite=AB12CD',
+          ),
+      ),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(
+      parseCodeFromLocation(
+        '/invite',
+        '?utm_content=' + encodeURIComponent('code=https://example.com&invite=AB12CD'),
+      ),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(
+      parseCodeFromLocation(
+        '/invite',
+        '?referrer=' + encodeURIComponent('invite=https://example.com&promo=EVT1'),
+      ),
+    ).toEqual({ kind: 'invite', code: 'EVT1' });
+    expect(parseCodeFromLocation('/promo', '?code=&promo=EVT1')).toEqual({
+      kind: 'promo',
+      code: 'EVT1',
+    });
+    expect(
+      parseCodeFromLocation(
+        '/invite',
+        '?utm_content=' +
+          encodeURIComponent(
+            'https://urldefense.proofpoint.com/v2/url?u=https-3A__realunit.app_invite_AB12CD&d=Dw',
+          ),
+      ),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(
+      parseCodeFromLocation(
+        '/invite',
+        '?url=' +
+          encodeURIComponent(
+            'https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Frealunit.app%2Finvite%2FAB12CD&data=05',
+          ),
+      ),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(
+      parseCodeFromLocation(
+        '/invite',
+        '?utm_content=https://www.google.com/amp/s/realunit.app/invite/AB12CD',
+      ),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+  });
+
+  test('keeps a malformed percent-encoded query code and caps at 32', () => {
+    expect(parseCodeFromLocation('/invite', '?code=AB%')).toEqual({
+      kind: 'invite',
+      code: 'AB%',
+    });
+    const long = 'A'.repeat(300);
+    expect(parseCodeFromLocation('/invite', `?code=${long}`).code).toHaveLength(32);
+  });
+});
+
+describe('URLs', () => {
+  test('builds the public lookup URL', () => {
+    expect(buildLookupUrl('https://api.dfx.swiss/', 'A B')).toBe(
+      'https://api.dfx.swiss/v1/realunit/referral/code/A%20B',
+    );
+  });
+
+  test('builds the custom-scheme app link', () => {
+    expect(appLink('invite', 'AB12')).toBe('realunit-wallet://invite/AB12');
+  });
+
+  test('playStoreUrl appends an install referrer when a code is present', () => {
+    expect(playStoreUrl('AB12CD')).toBe(
+      'https://play.google.com/store/apps/details?id=swiss.realunit.app&referrer=invite%3DAB12CD',
+    );
+    expect(playStoreUrl('EVT1', 'promo')).toBe(
+      'https://play.google.com/store/apps/details?id=swiss.realunit.app&referrer=promo%3DEVT1',
+    );
+    expect(playStoreUrl('')).toBe(
+      'https://play.google.com/store/apps/details?id=swiss.realunit.app',
+    );
+  });
+
+  test('appStoreUrl is the App Store listing', () => {
+    expect(appStoreUrl()).toBe('https://apps.apple.com/ch/app/realunit/id6759720010');
+  });
+
+  test('androidIntentUrl opens the App Link or falls back to Play with referrer', () => {
+    expect(androidIntentUrl('invite', 'AB12CD')).toBe(
+      'intent://realunit.app/invite/AB12CD#Intent;scheme=https;package=swiss.realunit.app;S.browser_fallback_url=' +
+        encodeURIComponent(
+          'https://play.google.com/store/apps/details?id=swiss.realunit.app&referrer=invite%3DAB12CD',
+        ) +
+        ';end',
+    );
+    expect(openInAppUrl('promo', 'EVT1', 'android')).toContain('intent://realunit.app/promo/EVT1');
+    expect(openInAppUrl('invite', 'AB12', 'ios')).toBe('realunit-wallet://invite/AB12');
+    expect(openInAppUrl('invite', 'AB12', null)).toBe('realunit-wallet://invite/AB12');
+    expect(androidAppUrl('invite', 'AB12CD')).toBe(
+      'android-app://swiss.realunit.app/https/realunit.app/invite/AB12CD',
+    );
+    expect(androidAppUrl('promo', 'EVT1')).toBe(
+      'android-app://swiss.realunit.app/https/realunit.app/promo/EVT1',
+    );
+    expect(iosAppUrl('invite', 'AB12CD')).toBe(
+      'ios-app://6759720010/realunit-wallet/invite/AB12CD',
+    );
+    expect(iosAppUrl('promo', 'EVT1')).toBe('ios-app://6759720010/realunit-wallet/promo/EVT1');
+  });
+
+  test('itunesBanner carries the custom-scheme app-argument when a code is present', () => {
+    expect(itunesBanner()).toBe('app-id=6759720010');
+    expect(itunesBanner('invite', 'AB12CD')).toBe(
+      'app-id=6759720010, app-argument=realunit-wallet://invite/AB12CD',
+    );
+    expect(itunesBanner('promo', 'EVT1')).toBe(
+      'app-id=6759720010, app-argument=realunit-wallet://promo/EVT1',
+    );
+  });
+
+  test('applyItunesBannerFromLocation sets app-argument from the invite path', () => {
+    const el = {
+      setAttribute(name, value) {
+        this[name] = value;
+      },
+    };
+    const doc = {
+      querySelector(sel) {
+        return sel === 'meta[name="apple-itunes-app"]' ? el : null;
+      },
+    };
+    expect(
+      applyItunesBannerFromLocation(doc, {
+        pathname: '/invite/AB12CD',
+        search: '',
+        hash: '',
+      }),
+    ).toBe(true);
+    expect(el.content).toBe('app-id=6759720010, app-argument=realunit-wallet://invite/AB12CD');
+    applyItunesBannerFromLocation(doc, {
+      pathname: '/promo/EVT1',
+      search: '',
+      hash: '',
+    });
+    expect(el.content).toBe('app-id=6759720010, app-argument=realunit-wallet://promo/EVT1');
+    applyItunesBannerFromLocation(doc, { pathname: '/invite', search: '', hash: '' });
+    expect(el.content).toBe('app-id=6759720010');
+    expect(applyItunesBannerFromLocation(null, { pathname: '/invite/AB12CD' })).toBe(false);
+  });
+
+  test('injectItunesBannerHtml writes app-argument into the HTML bytes', () => {
+    const meta = '<meta name="apple-itunes-app" content="app-id=6759720010" />';
+    expect(injectItunesBannerHtml(meta, '/invite/AB12CD', '', '')).toBe(
+      '<meta name="apple-itunes-app" content="app-id=6759720010, app-argument=realunit-wallet://invite/AB12CD" />',
+    );
+    expect(
+      injectItunesBannerHtml(
+        '<meta content="app-id=6759720010" name="apple-itunes-app">',
+        '/promo/EVT1',
+        '',
+        '',
+      ),
+    ).toBe(
+      '<meta content="app-id=6759720010, app-argument=realunit-wallet://promo/EVT1" name="apple-itunes-app">',
+    );
+    expect(injectItunesBannerHtml(meta, '/invite', '', '')).toBe(meta);
+    expect(injectItunesBannerHtml('<p>nope</p>', '/invite/AB12CD', '', '')).toBe('<p>nope</p>');
+    expect(injectItunesBannerHtml(null, '/invite/AB12CD', '', '')).toBeNull();
+    expect(injectItunesBannerHtml('apple-itunes-app', '/invite/AB12CD', '', '')).toBe(
+      'apple-itunes-app',
+    );
+  });
+
+  test('injectShareDescriptionHtml writes og:description from the path', () => {
+    const shell =
+      '<meta property="og:description" content="Öffne die RealUnit-App mit diesem Code." />' +
+      '<meta name="twitter:description" content="Öffne die RealUnit-App mit diesem Code." />' +
+      '<meta name="description" content="Öffne die RealUnit-App mit diesem Code." />';
+    expect(injectShareDescriptionHtml(shell, '/invite/AB12CD', '', '')).toBe(
+      '<meta property="og:description" content="Öffne die RealUnit-App mit dem Code AB12CD." />' +
+        '<meta name="twitter:description" content="Öffne die RealUnit-App mit dem Code AB12CD." />' +
+        '<meta name="description" content="Öffne die RealUnit-App mit dem Code AB12CD." />',
+    );
+    expect(
+      injectShareDescriptionHtml(
+        '<meta content="Öffne die RealUnit-App mit diesem Code." property="og:description">' +
+          '<meta content="Öffne die RealUnit-App mit diesem Code." name="twitter:description">' +
+          '<meta content="Öffne die RealUnit-App mit diesem Code." name="description">',
+        '/promo/EVT1',
+        '',
+        '',
+      ),
+    ).toBe(
+      '<meta content="Öffne die RealUnit-App mit dem Code EVT1." property="og:description">' +
+        '<meta content="Öffne die RealUnit-App mit dem Code EVT1." name="twitter:description">' +
+        '<meta content="Öffne die RealUnit-App mit dem Code EVT1." name="description">',
+    );
+    expect(injectShareDescriptionHtml(shell, '/invite', '', '')).toBe(shell);
+    expect(injectShareDescriptionHtml(null, '/invite/AB12CD', '', '')).toBeNull();
+    expect(injectShareDescriptionHtml('<p>no tags</p>', '/invite/AB12CD', '', '')).toBe(
+      '<p>no tags</p>',
+    );
+    expect(shareDescription('AB12CD')).toBe('Öffne die RealUnit-App mit dem Code AB12CD.');
+    expect(shareDescription('AB12CD', 'en')).toBe('Open the RealUnit app with code AB12CD.');
+    expect(shareDescription(null)).toBeNull();
+    expect(injectShareDescriptionHtml(shell, '/invite/AB12CD', '?lang=en', '')).toContain(
+      'Open the RealUnit app with code AB12CD.',
+    );
+  });
+
+  test('injectShareLocaleHtml sets html lang and og:locale from ?lang=en', () => {
+    expect(langFromSearch('?lang=en')).toBe('en');
+    expect(langFromSearch('?lang=de')).toBe('de');
+    expect(langFromSearch('?mock=1&lang=EN')).toBe('en');
+    expect(langFromSearch('?lang=pt')).toBeNull();
+    expect(langFromSearch('?lang=%')).toBeNull();
+    expect(langFromSearch('')).toBeNull();
+    const shell =
+      '<html lang="de">' +
+      '<meta property="og:locale" content="de_CH" />' +
+      '<meta property="og:locale:alternate" content="en_GB" />';
+    const out = injectShareLocaleHtml(shell, '/invite/AB12CD', '?lang=en');
+    expect(out).toContain('<html lang="en">');
+    expect(out).toContain('property="og:locale" content="en_GB"');
+    expect(out).toContain('property="og:locale:alternate" content="de_CH"');
+    expect(injectShareLocaleHtml(shell, '/invite/AB12CD', '')).toBe(shell);
+  });
+
+  test('injectShareTitleHtml writes og:title and twitter:title from the path', () => {
+    const shell =
+      '<meta property="og:title" content="RealUnit — Einladung" />' +
+      '<meta name="twitter:title" content="RealUnit — Einladung" />';
+    expect(injectShareTitleHtml(shell, '/invite/AB12CD', '', '')).toBe(
+      '<meta property="og:title" content="RealUnit — Einladung AB12CD" />' +
+        '<meta name="twitter:title" content="RealUnit — Einladung AB12CD" />',
+    );
+    expect(
+      injectShareTitleHtml(
+        '<meta content="RealUnit — Promo-Code" property="og:title">' +
+          '<meta content="RealUnit — Promo-Code" name="twitter:title">',
+        '/promo/EVT1',
+        '',
+        '',
+      ),
+    ).toBe(
+      '<meta content="RealUnit — Promo-Code EVT1" property="og:title">' +
+        '<meta content="RealUnit — Promo-Code EVT1" name="twitter:title">',
+    );
+    expect(injectShareTitleHtml(shell, '/invite', '', '')).toBe(shell);
+    expect(injectShareTitleHtml(null, '/invite/AB12CD', '', '')).toBeNull();
+    expect(injectShareTitleHtml('<p>no tags</p>', '/invite/AB12CD', '', '')).toBe('<p>no tags</p>');
+    expect(shareTitle('invite', 'AB12CD')).toBe('RealUnit — Einladung AB12CD');
+    expect(shareTitle('promo', 'EVT1')).toBe('RealUnit — Promo-Code EVT1');
+    expect(shareTitle('invite', 'AB12CD', 'en')).toBe('RealUnit — Invitation AB12CD');
+    expect(shareTitle('promo', 'EVT1', 'en')).toBe('RealUnit — Promo code EVT1');
+    expect(shareTitle('invite', null)).toBeNull();
+    expect(shareTitle(null, 'AB12CD')).toBeNull();
+    const enTitle = injectShareTitleHtml(
+      '<html lang="de"><title>RealUnit — Einladung</title>' + shell,
+      '/invite/AB12CD',
+      '?lang=en',
+      '',
+    );
+    expect(enTitle).toContain('RealUnit — Invitation AB12CD');
+    expect(enTitle).toContain('<title>RealUnit — Invitation AB12CD</title>');
+  });
+
+  test('injectShareImageAltHtml writes og:image:alt from the path', () => {
+    const shell =
+      '<meta property="og:image:alt" content="RealUnit" />' +
+      '<meta name="twitter:image:alt" content="RealUnit" />';
+    expect(injectShareImageAltHtml(shell, '/invite/AB12CD', '', '')).toBe(
+      '<meta property="og:image:alt" content="RealUnit — Einladung AB12CD" />' +
+        '<meta name="twitter:image:alt" content="RealUnit — Einladung AB12CD" />',
+    );
+    expect(
+      injectShareImageAltHtml(
+        '<meta content="RealUnit" property="og:image:alt">' +
+          '<meta content="RealUnit" name="twitter:image:alt">',
+        '/promo/EVT1',
+        '',
+        '',
+      ),
+    ).toBe(
+      '<meta content="RealUnit — Promo-Code EVT1" property="og:image:alt">' +
+        '<meta content="RealUnit — Promo-Code EVT1" name="twitter:image:alt">',
+    );
+    expect(injectShareImageAltHtml(shell, '/invite', '', '')).toBe(shell);
+    expect(injectShareImageAltHtml(null, '/invite/AB12CD', '', '')).toBeNull();
+    expect(injectShareImageAltHtml('<p>no tags</p>', '/invite/AB12CD', '', '')).toBe(
+      '<p>no tags</p>',
+    );
+    const enAlt = injectShareImageAltHtml(shell, '/invite/AB12CD', '?lang=en', '');
+    expect(enAlt).toContain('RealUnit — Invitation AB12CD');
+  });
+
+  test('injectLandingCanonicalHtml writes og:url and canonical from the path', () => {
+    const shell =
+      '<meta property="og:url" content="https://realunit.app/invite/" />' +
+      '<link rel="canonical" href="https://realunit.app/invite/" />' +
+      '<meta name="twitter:url" content="https://realunit.app/invite/" />';
+    expect(injectLandingCanonicalHtml(shell, '/invite/AB12CD', '', '', 'www.realunit.app')).toBe(
+      '<meta property="og:url" content="https://realunit.app/invite/AB12CD" />' +
+        '<link rel="canonical" href="https://realunit.app/invite/AB12CD" />' +
+        '<meta name="twitter:url" content="https://realunit.app/invite/AB12CD" />',
+    );
+    expect(
+      injectLandingCanonicalHtml(
+        '<meta content="https://realunit.app/promo/" property="og:url">' +
+          '<link href="https://realunit.app/promo/" rel="canonical">' +
+          '<meta content="https://realunit.app/promo/" name="twitter:url">',
+        '/promo/EVT1',
+        '',
+        '',
+        'dev.realunit.app',
+      ),
+    ).toBe(
+      '<meta content="https://dev.realunit.app/promo/EVT1" property="og:url">' +
+        '<link href="https://dev.realunit.app/promo/EVT1" rel="canonical">' +
+        '<meta content="https://dev.realunit.app/promo/EVT1" name="twitter:url">',
+    );
+    expect(injectLandingCanonicalHtml(shell, '/', '', '', 'realunit.app')).toBe(shell);
+    expect(injectLandingCanonicalHtml(null, '/invite/AB12CD', '', '', 'realunit.app')).toBeNull();
+    expect(
+      injectLandingCanonicalHtml('<p>no tags</p>', '/invite/AB12CD', '', '', 'realunit.app'),
+    ).toBe('<p>no tags</p>');
+    expect(landingCanonicalHref('localhost', '', 'AB12CD')).toBe(
+      'https://realunit.app/invite/AB12CD',
+    );
+    expect(landingCanonicalHref('realunit.app', 'promo', null)).toBe('https://realunit.app/promo');
+  });
+
+  test('injectInstallHandoffHtml sets Play referrer and alternate links', () => {
+    const shell =
+      '<head></head><a data-store="play" href="https://play.google.com/store/apps/details?id=swiss.realunit.app">Play</a>';
+    const out = injectInstallHandoffHtml(shell, '/invite/AB12CD', '', '');
+    expect(out).toContain('referrer=invite%3DAB12CD');
+    expect(out).toContain('android-app://swiss.realunit.app/https/realunit.app/invite/AB12CD');
+    expect(out).toContain('ios-app://6759720010/realunit-wallet/invite/AB12CD');
+    const promo = injectInstallHandoffHtml(
+      '<a href="https://play.google.com/store/apps/details?id=swiss.realunit.app" data-store="play">P</a>',
+      '/promo/EVT1',
+      '',
+      '',
+    );
+    expect(promo).toContain('referrer=promo%3DEVT1');
+    expect(injectInstallHandoffHtml(shell, '/invite', '', '')).toBe(shell);
+    expect(injectInstallHandoffHtml(null, '/invite/AB12CD', '', '')).toBeNull();
+    const existing =
+      '<link rel="alternate" data-android-app href="old" />' +
+      '<link href="old" data-ios-app rel="alternate" />';
+    const replaced = injectInstallHandoffHtml(existing, '/invite/AB12CD', '', '');
+    expect(replaced).toContain(
+      'href="android-app://swiss.realunit.app/https/realunit.app/invite/AB12CD"',
+    );
+    expect(replaced).toContain('href="ios-app://6759720010/realunit-wallet/invite/AB12CD"');
+    expect(injectInstallHandoffHtml('<p>no head</p>', '/invite/AB12CD', '', '')).toContain(
+      'data-android-app',
+    );
+  });
+
+  test('injectShareAppLinksHtml writes Facebook App Links from the path', () => {
+    const out = injectShareAppLinksHtml(
+      '<head></head>',
+      '/invite/AB12CD',
+      '',
+      '',
+      'www.realunit.app',
+    );
+    expect(out).toContain('property="al:ios:url" content="realunit-wallet://invite/AB12CD"');
+    expect(out).toContain('property="al:ios:app_store_id" content="6759720010"');
+    expect(out).toContain('property="al:ios:app_name" content="RealUnit"');
+    expect(out).toContain('property="al:android:url" content="realunit-wallet://invite/AB12CD"');
+    expect(out).toContain('property="al:android:package" content="swiss.realunit.app"');
+    expect(out).toContain('property="al:android:class" content="swiss.realunit.app.MainActivity"');
+    expect(out).toContain('property="al:android:app_name" content="RealUnit"');
+    expect(out).toContain('property="al:web:url" content="https://realunit.app/invite/AB12CD"');
+    expect(out).toContain(
+      'name="twitter:app:url:iphone" content="realunit-wallet://invite/AB12CD"',
+    );
+    expect(out).toContain(
+      'name="twitter:app:url:googleplay" content="realunit-wallet://invite/AB12CD"',
+    );
+    expect(out).toContain('name="twitter:app:id:iphone" content="6759720010"');
+    expect(out).toContain('name="twitter:app:id:googleplay" content="swiss.realunit.app"');
+    expect(out).toContain('name="twitter:app:country" content="CH"');
+    const promo = injectShareAppLinksHtml(
+      '<meta property="al:ios:url" content="old" />' +
+        '<meta content="old" property="al:android:url">',
+      '/promo/EVT1',
+      '',
+      '',
+      'dev.realunit.app',
+    );
+    expect(promo).toContain('content="realunit-wallet://promo/EVT1"');
+    expect(promo).toContain('content="https://dev.realunit.app/promo/EVT1"');
+    expect(injectShareAppLinksHtml('<head></head>', '/invite', '', '', 'realunit.app')).toBe(
+      '<head></head>',
+    );
+    expect(injectShareAppLinksHtml(null, '/invite/AB12CD', '', '', 'realunit.app')).toBeNull();
+    expect(
+      injectShareAppLinksHtml('<p>no head</p>', '/invite/AB12CD', '', '', 'realunit.app'),
+    ).toContain('al:ios:url');
+  });
+
+  test('injectSiteNameHtml writes og:site_name RealUnit', () => {
+    expect(injectSiteNameHtml('<head></head>')).toContain(
+      'property="og:site_name" content="RealUnit"',
+    );
+    expect(injectSiteNameHtml('<meta property="og:site_name" content="old" />')).toContain(
+      'content="RealUnit"',
+    );
+    expect(injectSiteNameHtml(null)).toBeNull();
+  });
+
+  test('injectTwitterAppHtml writes Twitter App Card urls from the campaign code', () => {
+    const out = injectTwitterAppHtml('<head></head>', 'invite', 'AB12CD');
+    expect(out).toContain('name="twitter:app:name:iphone" content="RealUnit"');
+    expect(out).toContain('name="twitter:app:id:iphone" content="6759720010"');
+    expect(out).toContain(
+      'name="twitter:app:url:iphone" content="realunit-wallet://invite/AB12CD"',
+    );
+    expect(out).toContain('name="twitter:app:url:ipad" content="realunit-wallet://invite/AB12CD"');
+    expect(out).toContain(
+      'name="twitter:app:url:googleplay" content="realunit-wallet://invite/AB12CD"',
+    );
+    expect(out).toContain('name="twitter:app:id:googleplay" content="swiss.realunit.app"');
+    expect(out).toContain('name="twitter:app:country" content="CH"');
+    expect(
+      injectTwitterAppHtml('<meta name="twitter:app:url:iphone" content="old" />', 'promo', 'EVT1'),
+    ).toContain('content="realunit-wallet://promo/EVT1"');
+    expect(injectTwitterAppHtml('<head></head>', 'invite', null)).toBe('<head></head>');
+    expect(injectTwitterAppHtml(null, 'invite', 'AB12CD')).toBeNull();
+  });
+});
+
+describe('mapResult', () => {
+  test('uses backend inviterName and inviteeName for invite copy', () => {
+    const result = mapResult(200, {
+      kind: 'invite',
+      inviterName: 'Ada',
+      inviteeName: 'Grace',
+      hostDisplayName: 'Legacy host',
+      guestName: 'Legacy guest',
+    });
+
+    expect(result.payload.inviterName).toBe('Ada');
+    expect(result.payload.inviteeName).toBe('Grace');
+    expect(core.inviteLandingBody(result.payload, { 'invite.body': 'Hey {inviter}' })).toBe(
+      'Hey Ada',
+    );
+  });
+
+  test('404/400/409/410/422 are invalid, other errors unavailable, promo vs invite from the body', () => {
+    expect(mapResult(404, {})).toEqual({ state: 'invalid' });
+    expect(mapResult(400, {})).toEqual({ state: 'invalid' });
+    expect(mapResult(409, {})).toEqual({ state: 'invalid' });
+    expect(mapResult(410, {})).toEqual({ state: 'invalid' });
+    expect(mapResult(410, { code: 'SPENT' })).toEqual({
+      state: 'invalid',
+      code: 'SPENT',
+    });
+    expect(mapResult(410, { code: 'EXPIRED' })).toEqual({
+      state: 'invalid',
+      code: 'EXPIRED',
+    });
+    expect(mapResult(422, {})).toEqual({ state: 'invalid' });
+    expect(mapResult(500, {})).toEqual({ state: 'unavailable' });
+    expect(mapResult(503, { code: 'UNAVAILABLE', message: 'persist failed' })).toEqual({
+      state: 'unavailable',
+    });
+    expect(mapResult(503, { code: 'UNAVAILABLE', message: 'holding lookup failed' })).toEqual({
+      state: 'unavailable',
+    });
+    expect(mapResult(200, null)).toEqual({ state: 'unavailable' });
+    expect(mapResult(200, { kind: 'promo' }).state).toBe('promo');
+    expect(mapResult(200, { kind: 'Promo' }).state).toBe('promo');
+    expect(mapResult(200, { kind: '  Promo  ' }).state).toBe('promo');
+    expect(mapResult(200, { kind: 'invite' }).state).toBe('invite');
+    expect(mapResult(200, { kind: 'Invite' }).state).toBe('invite');
+    expect(mapResult(200, { actionText: 'x' }, 'promo').state).toBe('promo');
+    expect(mapResult(200, { kind: 'invite' }, 'promo').state).toBe('invite');
+    expect(mapResult(200, {}).state).toBe('invite');
+    expect(mapResult(200, { actionText: 'x' }, 'invite').state).toBe('promo');
+    expect(mapResult(200, { campaignTextEn: 'EN' }).state).toBe('promo');
+    expect(mapResult(200, { actionTextEn: 'EN' }).state).toBe('promo');
+    expect(mapResult(200, { inviterName: 'Björn', actionText: 'x' }).state).toBe('invite');
+    expect(mapResult(200, { inviterName: '   ', actionText: 'x' }).state).toBe('promo');
+  });
+
+  test('personDisplayName keeps people and drops wallets and numeric ids', () => {
+    expect(core.personDisplayName('Björn')).toBe('Björn');
+    expect(core.personDisplayName('  Alice  ')).toBe('Alice');
+    expect(core.personDisplayName('   ')).toBe('');
+    expect(core.personDisplayName('0x553C7f9C780316FC1D34b8e14ac2465Ab22a090B')).toBe('');
+    expect(core.personDisplayName('12345')).toBe('');
+    expect(core.personDisplayName(null)).toBe('');
+  });
+
+  test('410 SPENT uses spent landing copy, EXPIRED stays invalid', () => {
+    const spent = core.invalidLandingCopy({ state: 'invalid', code: 'SPENT' }, I18N.de);
+    expect(spent.title).toBe('Code bereits eingelöst');
+    expect(spent.body).toMatch(/bereits verwendet/);
+    const expired = core.invalidLandingCopy({ state: 'invalid', code: 'EXPIRED' }, I18N.de);
+    expect(expired.title).toBe(I18N.de['invalid.title']);
+    expect(core.invalidLandingCopy({ state: 'invalid' }, I18N.en).title).toBe(
+      I18N.en['invalid.title'],
+    );
+  });
+
+  test('unwraps data/item/result/payload maps on a 200 lookup', () => {
+    expect(mapResult(200, { data: { kind: 'promo', actionText: '20 extra' } })).toEqual({
+      state: 'promo',
+      payload: { kind: 'promo', actionText: '20 extra' },
+    });
+    expect(
+      mapResult(200, { item: { kind: 'invite', inviterName: 'Björn' } }).payload.inviterName,
+    ).toBe('Björn');
+    expect(mapResult(200, { result: { kind: 'Promo' } }).state).toBe('promo');
+    expect(mapResult(200, { payload: { kind: 'invite' } }).state).toBe('invite');
+    expect(mapResult(200, { data: ['not-a-map'], kind: 'invite' }).state).toBe('invite');
+    expect(mapResult(200, { data: 12, kind: 'invite' }).state).toBe('invite');
+    expect(
+      mapResult(200, {
+        kind: 'invite',
+        inviterName: 'Björn',
+        data: { kind: 'promo' },
+      }).payload.inviterName,
+    ).toBe('Björn');
+    expect(mapResult(200, [])).toEqual({ state: 'unavailable' });
+    expect(mapResult(200, 'missing')).toEqual({ state: 'unavailable' });
+  });
+
+  test('NestJS unmounted-route 404 is unavailable, not expired', () => {
+    expect(
+      mapResult(404, { statusCode: 404, message: 'Cannot GET /v1/realunit/referral/code/TEST' }),
+    ).toEqual({ state: 'unavailable' });
+    expect(mapResult(404, { message: ['Cannot POST /v1/realunit/referral/bind'] })).toEqual({
+      state: 'unavailable',
+    });
+    expect(
+      mapResult(404, {
+        message: 'Route GET:/v1/realunit/referral/code/TEST not found',
+      }),
+    ).toEqual({ state: 'unavailable' });
+    expect(mapResult(404, { message: 'Not found' })).toEqual({ state: 'invalid' });
+    expect(mapResult(404, { message: 12 })).toEqual({ state: 'invalid' });
+    expect(mapResult(404, null)).toEqual({ state: 'invalid' });
+    expect(mapResult(404, 'missing')).toEqual({ state: 'invalid' });
+  });
+});
+
+describe('promoBody', () => {
+  const payload = {
+    actionText: 'DE action',
+    campaignTextEn: 'EN campaign',
+  };
+
+  test('EN prefers campaignTextEn and falls back to DE', () => {
+    expect(promoBody(payload, 'en')).toBe('EN campaign');
+    expect(promoBody({ actionText: 'DE only' }, 'en')).toBe('DE only');
+  });
+
+  test('DE prefers actionText/campaignText', () => {
+    expect(promoBody(payload, 'de')).toBe('DE action');
+    expect(promoBody(null, 'de')).toBe('');
+  });
+
+  test('EN ignores empty campaignTextEn', () => {
+    expect(promoBody({ campaignTextEn: '', actionText: 'DE action' }, 'en')).toBe('DE action');
+  });
+
+  test('whitespace-only EN copy falls through to DE', () => {
+    expect(promoBody({ campaignTextEn: '   ', actionText: 'DE action' }, 'en')).toBe('DE action');
+    expect(promoBody({ campaignTextEn: 12, actionText: 'DE action' }, 'en')).toBe('DE action');
+    expect(promoBody({ actionText: '  ', campaignText: 'DE campaign' }, 'de')).toBe('DE campaign');
+  });
+
+  test('empty payload yields an empty string for the landing fallback', () => {
+    expect(promoBody({}, 'de')).toBe('');
+  });
+
+  test('promoBodyLang is de when EN falls back to German campaign copy', () => {
+    expect(promoBodyLang({ campaignTextEn: 'EN campaign' }, 'en')).toBe('en');
+    expect(promoBodyLang({ actionText: 'DE only' }, 'en')).toBe('de');
+    expect(promoBodyLang({ actionTextEn: 'EN action' }, 'en')).toBe('en');
+    expect(promoBodyLang({ campaignTextEn: '   ', actionText: 'DE action' }, 'en')).toBe('de');
+    expect(promoBodyLang({ campaignTextEn: 'EN only' }, 'de')).toBe('en');
+    expect(promoBodyLang({ actionText: 'DE action' }, 'de')).toBe('de');
+    expect(promoBodyLang({}, 'en')).toBe('en');
+    expect(promoBodyLang(null, 'de')).toBe('de');
+  });
+});
+
+describe('inviteBody', () => {
+  test('EN prefers actionTextEn and falls back to DE actionText', () => {
+    expect(inviteBody({ actionText: 'DE action', actionTextEn: 'EN action' }, 'en')).toBe(
+      'EN action',
+    );
+    expect(inviteBody({ actionText: 'DE action' }, 'en')).toBe('DE action');
+    expect(inviteBody({ actionTextEn: 'EN only' }, 'de')).toBe('EN only');
+    expect(inviteBody({ actionText: 'DE action' }, 'de')).toBe('DE action');
+    expect(inviteBody({ actionTextEn: '   ', actionText: 'DE action' }, 'en')).toBe('DE action');
+    expect(inviteBody({}, 'en')).toBe('');
+    expect(inviteBody(null, 'de')).toBe('');
+  });
+
+  test('inviteBodyLang is de when EN falls back to German action text', () => {
+    expect(inviteBodyLang({ actionTextEn: 'EN action' }, 'en')).toBe('en');
+    expect(inviteBodyLang({ actionText: 'DE action' }, 'en')).toBe('de');
+    expect(inviteBodyLang({ actionText: 'DE action' }, 'de')).toBe('de');
+    expect(inviteBodyLang({ actionTextEn: 'EN only' }, 'de')).toBe('en');
+    expect(inviteBodyLang({}, 'en')).toBe('en');
+  });
+});
+
+describe('lookup fetch', () => {
+  test('aborts after 15s and uses cache:no-store credentials:omit', () => {
+    expect(LOOKUP_TIMEOUT_MS).toBe(15000);
+    expect(COPY_TIMEOUT_MS).toBe(2000);
+    const init = lookupFetchInit('sig');
+    expect(init.method).toBe('GET');
+    expect(init.cache).toBe('no-store');
+    expect(init.credentials).toBe('omit');
+    expect(init.headers.Accept).toBe('application/json');
+    expect(init.signal).toBe('sig');
+  });
+
+  test('finalizeLookup drops a payload that arrived after the budget', () => {
+    expect(finalizeLookup(true, 200, { kind: 'invite' })).toEqual({ state: 'unavailable' });
+    expect(finalizeLookup(false, 200, { kind: 'promo' }).state).toBe('promo');
+    expect(finalizeLookup(false, 410, {})).toEqual({ state: 'invalid' });
+  });
+});
+
+describe('codeFromPastedReferralUrl', () => {
+  test('extracts https, wallet, android-app and ios-app invite URLs', () => {
+    expect(codeFromPastedReferralUrl(null)).toBeNull();
+    expect(codeFromPastedReferralUrl('https://realunit.app/invite/AB12CD')).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl('https://realunit.app/invite?u=https://realunit.app/invite/AB12CD'),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl('https://realunit.app/invite?q=https://realunit.app/invite/AB12CD'),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl(
+        'https://realunit.app/invite?url=https://realunit.app/invite/AB12CD',
+      ),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl(
+        'https://realunit.app/invite?link=https://realunit.app/invite/AB12CD',
+      ),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl(
+        'https://realunit.app/invite?utm_content=summer-sale&u=https://realunit.app/invite/AB12CD',
+      ),
+    ).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/invite?referrer=invite%3DAB12CD')).toBe(
+      'AB12CD',
+    );
+    expect(codeFromPastedReferralUrl('https://realunit.app#AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/#AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('realunit.app#AB12CD')).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl(
+        'https://l.facebook.com/l.php?u=https%3A%2F%2Frealunit.app%2Finvite%2FAB12CD',
+      ),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl('https://www.google.com/url?q=https://realunit.app/promo/EVT1'),
+    ).toBe('EVT1');
+    expect(
+      codeFromPastedReferralUrl('https://l.facebook.com/l.php?u=https://example.com/'),
+    ).toBeNull();
+    expect(codeFromPastedReferralUrl('https://example.com/?utm_content=summer-sale')).toBeNull();
+    expect(codeFromPastedReferralUrl('https://href.li/?https://realunit.app/invite/AB12CD')).toBe(
+      'AB12CD',
+    );
+    expect(
+      codeFromPastedReferralUrl(
+        'whatsapp://send?text=https%3A%2F%2Frealunit.app%2Finvite%2FAB12CD',
+      ),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl('tg://msg?text=https%3A%2F%2Frealunit.app%2Fpromo%2FEVT1'),
+    ).toBe('EVT1');
+    expect(
+      codeFromPastedReferralUrl('sms:?body=https%3A%2F%2Frealunit.app%2Finvite%2FAB12CD'),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl(
+        'whatsapp://send?text=Tritt%20RealUnit%20bei%3A%20https%3A%2F%2Frealunit.app%2Finvite%2FAB12CD',
+      ),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl('tg://msg_url?url=https%3A%2F%2Frealunit.app%2Finvite%2FAB12CD'),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl(
+        'smsto:+41791234567?body=https%3A%2F%2Frealunit.app%2Fpromo%2FEVT1',
+      ),
+    ).toBe('EVT1');
+    expect(
+      codeFromPastedReferralUrl('mailto:?body=https%3A%2F%2Frealunit.app%2Finvite%2FAB12CD'),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl(
+        'fb-messenger://share/?link=https%3A%2F%2Frealunit.app%2Finvite%2FAB12CD',
+      ),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl('https://wa.me/?text=https%3A%2F%2Frealunit.app%2Finvite%2FAB12CD'),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl(
+        'https://t.me/share/url?url=https%3A%2F%2Frealunit.app%2Fpromo%2FEVT1',
+      ),
+    ).toBe('EVT1');
+    expect(
+      codeFromPastedReferralUrl(
+        'threema://compose?text=https%3A%2F%2Frealunit.app%2Finvite%2FAB12CD',
+      ),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl('sgnl://send?text=https%3A%2F%2Frealunit.app%2Fpromo%2FEVT1'),
+    ).toBe('EVT1');
+    expect(
+      codeFromPastedReferralUrl(
+        'viber://forward?text=https%3A%2F%2Frealunit.app%2Finvite%2FAB12CD',
+      ),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl('line://msg/text/?https%3A%2F%2Frealunit.app%2Finvite%2FAB12CD'),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl('line://msg/text/https%3A%2F%2Frealunit.app%2Finvite%2FAB12CD'),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl(
+        'intent://send?text=https%3A%2F%2Frealunit.app%2Finvite%2FAB12CD#Intent;scheme=whatsapp;end',
+      ),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl(
+        'intent://msg?text=https%3A%2F%2Frealunit.app%2Fpromo%2FEVT1#Intent;scheme=tg;end',
+      ),
+    ).toBe('EVT1');
+    expect(
+      codeFromPastedReferralUrl(
+        'intent://send/#Intent;scheme=whatsapp;S.text=https%3A%2F%2Frealunit.app%2Finvite%2FAB12CD;end',
+      ),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl(
+        'intent://send/#Intent;scheme=whatsapp;S.browser_fallback_url=https%3A%2F%2Frealunit.app%2Finvite%2FAB12CD;end',
+      ),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl(
+        'intent://send?text=Tritt%20RealUnit%20bei%3A%20https%3A%2F%2Frealunit.app%2Finvite%2FAB12CD#Intent;scheme=whatsapp;end',
+      ),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl(
+        'intent://send?text=https://example.com/#Intent;scheme=whatsapp;end',
+      ),
+    ).toBeNull();
+    expect(
+      codeFromPastedReferralUrl(
+        'https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Frealunit.app%2Finvite%2FAB12CD&data=05',
+      ),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl(
+        'https://urldefense.proofpoint.com/v2/url?u=https-3A__realunit.app_invite_AB12CD&d=Dw',
+      ),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl(
+        'https://urldefense.com/v3/__https://realunit.app/promo/EVT1__;!!abc$',
+      ),
+    ).toBe('EVT1');
+    expect(
+      codeFromPastedReferralUrl('https://example.com/r/https://realunit.app/invite/AB12CD'),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl(
+        'https://r.search.yahoo.com/_ylt=x/RU=https%3A%2F%2Frealunit.app%2Fpromo%2FEVT1/RK=2',
+      ),
+    ).toBe('EVT1');
+    expect(codeFromPastedReferralUrl('https://example.com/invite/AB12CD')).toBeNull();
+    expect(
+      codeFromPastedReferralUrl('https://www.google.com/amp/s/realunit.app/invite/AB12CD'),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl('https://example.com/?u=https://realunit.app:443/invite/AB12CD'),
+    ).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://example.com/%zz/realunit.app/invite/AB12CD')).toBe(
+      'AB12CD',
+    );
+    expect(
+      codeFromPastedReferralUrl('https://cdn.ampproject.org/c/s/www.realunit.app/promo/EVT1'),
+    ).toBe('EVT1');
+    expect(
+      codeFromPastedReferralUrl('https://www.google.com/amp/s/example.com/invite/AB12CD'),
+    ).toBeNull();
+    expect(
+      codeFromPastedReferralUrl('https://realunit.app/invite/https://realunit.app/invite/AB12CD'),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl(
+        'https://realunit.app/invite/intent://realunit.app/invite/AB12CD#Intent;scheme=https;end',
+      ),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl('https://realunit.app/invite/realunit-wallet://invite/AB12CD'),
+    ).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('realunit-wallet://promo/EVT1')).toBe('EVT1');
+    expect(codeFromPastedReferralUrl('realunit-wallet://invite#AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/invite#AB12CD')).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl(
+        'android-app://swiss.realunit.app/https/realunit.app/invite/AB12CD',
+      ),
+    ).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('ios-app://6759720010/realunit-wallet/invite/AB12CD')).toBe(
+      'AB12CD',
+    );
+    expect(
+      codeFromPastedReferralUrl(
+        'android-app://swiss.realunit.app/https/realunit.app/invite?code=AB12CD',
+      ),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl('ios-app://6759720010/realunit-wallet/invite?code=AB12CD'),
+    ).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('AB12CD')).toBeNull();
+    expect(codeFromPastedReferralUrl('invite')).toBeNull();
+    expect(codeFromPastedReferralUrl('\u200Bhttps://realunit.app/invite/AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('promo')).toBeNull();
+    expect(codeFromPastedReferralUrl('invite?code=AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('promo?promo=EVT1')).toBe('EVT1');
+    expect(codeFromPastedReferralUrl('invite#AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('promo#EVT1')).toBe('EVT1');
+    expect(codeFromPastedReferralUrl('https://realunit.app?invite=AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/?promo=EVT1')).toBe('EVT1');
+    expect(codeFromPastedReferralUrl('https://www.realunit.app?utm_content=invite%3DAB12CD')).toBe(
+      'AB12CD',
+    );
+    expect(codeFromPastedReferralUrl('https://realunit.app/other?invite=AB12CD')).toBeNull();
+    expect(codeFromPastedReferralUrl('realunit-wallet:#AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('realunit-wallet://#AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('realunit-wallet://')).toBeNull();
+    expect(codeFromPastedReferralUrl('realunit-wallet:')).toBeNull();
+    expect(codeFromPastedReferralUrl('https://[')).toBeNull();
+    expect(codeFromPastedReferralUrl('intent://invite/AB12CD#Intent;scheme=https;end')).toBe(
+      'AB12CD',
+    );
+    expect(codeFromPastedReferralUrl('intent://invite?code=AB12CD#Intent;scheme=https;end')).toBe(
+      'AB12CD',
+    );
+    expect(
+      codeFromPastedReferralUrl('android-app://swiss.realunit.app/https/example.com/foo'),
+    ).toBeNull();
+    expect(codeFromPastedReferralUrl('ios-app://6759720010/invite/AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('ios-app://6759720010/invite?code=AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('ios-app://6759720010/other')).toBeNull();
+    expect(
+      codeFromPastedReferralUrl(
+        'intent://send/#Intent;scheme=whatsapp;S.text=https://realunit.app/invite/AB12CD;bare;end',
+      ),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl('https://example.com/?x=1#https://realunit.app/invite/AB12CD'),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl('=?UTF-8?Q?Hey_https=3A=2F=2Frealunit.app=2Finvite=2FAB12CD?='),
+    ).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('=?UTF-8?B?@@@?=')).toBeNull();
+  });
+
+  test('empty URL protocol still reads invite path segments', () => {
+    const Orig = globalThis.URL;
+    globalThis.URL = function (input, base) {
+      const u = base !== undefined ? new Orig(input, base) : new Orig(input);
+      if (String(input).includes('empty-proto')) {
+        return {
+          protocol: ':',
+          pathname: '/invite/AB12CD',
+          search: '',
+          hostname: '',
+          hash: '',
+        };
+      }
+      return u;
+    };
+    try {
+      expect(codeFromPastedReferralUrl('https://empty-proto.example/invite/AB12CD')).toBe('AB12CD');
+    } finally {
+      globalThis.URL = Orig;
+    }
+  });
+
+  test('RFC 2047 still decodes when TextDecoder throws', () => {
+    const Orig = globalThis.TextDecoder;
+    globalThis.TextDecoder = class {
+      decode() {
+        throw new Error('no decoder');
+      }
+    };
+    try {
+      expect(
+        codeFromPastedReferralUrl('=?UTF-8?B?aHR0cHM6Ly9yZWFsdW5pdC5hcHAvaW52aXRlL0FCMTJDRA==?='),
+      ).toBe('AB12CD');
+    } finally {
+      globalThis.TextDecoder = Orig;
+    }
+  });
+
+  test('extracts the code from a share message that contains an invite URL', () => {
+    expect(
+      codeFromPastedReferralUrl(
+        'Hey Alice, Björn lädt dich ein: https://realunit.app/invite/AB12CD',
+      ),
+    ).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('“https://realunit.app/invite/AB12CD”')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('«https://realunit.app/promo/EVT1»')).toBe('EVT1');
+    expect(codeFromPastedReferralUrl('Hey Alice: “https://realunit.app/invite/AB12CD”')).toBe(
+      'AB12CD',
+    );
+    expect(codeFromPastedReferralUrl('[Hey Alice](https://realunit.app/invite/AB12CD)')).toBe(
+      'AB12CD',
+    );
+    expect(codeFromPastedReferralUrl('(https://realunit.app/promo/EVT1)')).toBe('EVT1');
+    expect(codeFromPastedReferralUrl('<a href="https://realunit.app/invite/AB12CD">Hey</a>')).toBe(
+      'AB12CD',
+    );
+    expect(codeFromPastedReferralUrl('href="https://realunit.app/promo/EVT1"')).toBe('EVT1');
+    expect(codeFromPastedReferralUrl('&quot;https://realunit.app/invite/AB12CD&quot;')).toBe(
+      'AB12CD',
+    );
+    expect(codeFromPastedReferralUrl('href=&quot;https://realunit.app/promo/EVT1&quot;')).toBe(
+      'EVT1',
+    );
+    expect(codeFromPastedReferralUrl('https&#58;//realunit.app/invite/AB12CD')).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl('https&#x3a;&#x2f;&#x2f;realunit.app&#x2f;invite&#x2f;AB12CD'),
+    ).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app&#47;promo&#47;EVT1')).toBe('EVT1');
+    expect(codeFromPastedReferralUrl('https&colon;//realunit.app&sol;invite&sol;AB12CD')).toBe(
+      'AB12CD',
+    );
+    expect(codeFromPastedReferralUrl('https&colon;&sol;&sol;realunit.app&sol;promo&sol;EVT1')).toBe(
+      'EVT1',
+    );
+    expect(codeFromPastedReferralUrl('https：／／realunit.app／invite／AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https：//realunit.app/promo/EVT1')).toBe('EVT1');
+    expect(codeFromPastedReferralUrl('https://realunit.app/invite/ＡＢ１２ＣＤ')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https:⁄⁄realunit.app⁄invite⁄AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https:∕∕realunit.app∕promo∕EVT1')).toBe('EVT1');
+    expect(codeFromPastedReferralUrl('https∶//realunit.app/invite/AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit。app/invite/AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://www。realunit。app/promo/EVT1')).toBe('EVT1');
+    expect(codeFromPastedReferralUrl('https:\\/\\/realunit.app\\/invite\\/AB12CD')).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl('https\\u003a\\u002f\\u002frealunit.app\\u002finvite\\u002fAB12CD'),
+    ).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('{"url":"https:\\/\\/realunit.app\\/promo\\/EVT1"}')).toBe(
+      'EVT1',
+    );
+    expect(codeFromPastedReferralUrl('https://realunit.app/invite/\nAB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/promo/\r\nEVT1')).toBe('EVT1');
+    expect(codeFromPastedReferralUrl('https://realunit.app/ invite/AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/\u2009invite/AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/\u00A0promo/EVT1')).toBe('EVT1');
+    expect(codeFromPastedReferralUrl('https:// realunit.app/invite/AB12CD please')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('> https://realunit.app/invite/AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('> https://realunit.app/invite/\n> AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/invite/\\\nAB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/promo/\\ \r\nEVT1')).toBe('EVT1');
+    expect(codeFromPastedReferralUrl('https://realunit.app/invite/AB12-\nCD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/in-\nvite/AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/in\u2010\nvite/AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/in\u2011\nvite/AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/in\u2013\nvite/AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/invite/AB12=\nCD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/inv=\nite/AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/promo/EVT=\r\n1')).toBe('EVT1');
+    expect(codeFromPastedReferralUrl('https://realunit.app/invite/AB12= \nCD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https=3A=2F=2Frealunit.app=2Finvite=2FAB12CD')).toBe(
+      'AB12CD',
+    );
+    expect(codeFromPastedReferralUrl('https=3a=2f=2frealunit.app=2fpromo=2fEVT1')).toBe('EVT1');
+    expect(codeFromPastedReferralUrl('https://realunit.app=2Finvite=2FAB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/invite?code=3DAB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/invite?code=AB12CD')).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl('=?UTF-8?Q?https=3A=2F=2Frealunit.app=2Finvite=2FAB12CD?='),
+    ).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('=?utf-8?q?https=3A=2F=2Frealunit.app=2Fpromo=2FEVT1?=')).toBe(
+      'EVT1',
+    );
+    expect(
+      codeFromPastedReferralUrl('=?UTF-8?B?aHR0cHM6Ly9yZWFsdW5pdC5hcHAvaW52aXRlL0FCMTJDRA==?='),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl(
+        '=?UTF-8?Q?https=3A=2F=2Frealunit.app=2Finv?= =?UTF-8?Q?ite=2FAB12CD?=',
+      ),
+    ).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('*https://realunit.app/invite/AB12CD*')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('_https://realunit.app/promo/EVT1_')).toBe('EVT1');
+    expect(codeFromPastedReferralUrl('Hey: https://realunit.app/invite/AB12CD*')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('`https://realunit.app/invite/AB12CD`')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('See `https://realunit.app/promo/EVT1`')).toBe('EVT1');
+    expect(codeFromPastedReferralUrl('```https://realunit.app/invite/AB12CD```')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('```\nhttps://realunit.app/promo/EVT1\n```')).toBe('EVT1');
+    expect(codeFromPastedReferralUrl('| https://realunit.app/invite/AB12CD |')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('|https://realunit.app/promo/EVT1|')).toBe('EVT1');
+    expect(codeFromPastedReferralUrl('https://realunit.app/invite/AB12CD/')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('Hey Alice: https://realunit.app?invite=AB12CD please.')).toBe(
+      'AB12CD',
+    );
+    expect(codeFromPastedReferralUrl('Open realunit-wallet://invite/AB12CD after install.')).toBe(
+      'AB12CD',
+    );
+    expect(
+      codeFromPastedReferralUrl(
+        'Open intent://realunit.app/invite/AB12CD#Intent;scheme=https;package=swiss.realunit.app;end after install.',
+      ),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl(
+        'Open intent://realunit.app/invite?code=AB12CD#Intent;scheme=https;end after install.',
+      ),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl(
+        'See android-app://swiss.realunit.app/https/realunit.app/invite/AB12CD here.',
+      ),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl('Tap ios-app://6759720010/realunit-wallet/promo/EVT1 please.'),
+    ).toBe('EVT1');
+    expect(
+      codeFromPastedReferralUrl(
+        'See android-app://swiss.realunit.app/https/realunit.app/invite?code=AB12CD here.',
+      ),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl(
+        'Tap ios-app://6759720010/realunit-wallet/invite?code=AB12CD please.',
+      ),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl('Hey Alice: https://realunit.app/invite?code=AB12CD please.'),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl('Tap https://realunit.app/invite?utm_content=invite%3DAB12CD'),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl('Open realunit-wallet://invite?code=AB12CD after install.'),
+    ).toBe('AB12CD');
+  });
+});
+
+describe('interpolate and i18n parity', () => {
+  test('fills named placeholders', () => {
+    expect(interpolate('Hey {invitee}', { invitee: 'Alice' })).toBe('Hey Alice');
+    expect(interpolate('{inviter} lädt dich ein', { inviter: 'Björn' })).toBe(
+      'Björn lädt dich ein',
+    );
+    expect(interpolate('Hey {invitee}', {})).toBe('Hey ');
+  });
+
+  test('invite landing body is the Entwurf 3 greeting, not share SMS', () => {
+    const copy = I18N.de;
+    expect(
+      core.inviteLandingBody(
+        {
+          kind: 'invite',
+          inviterName: 'Björn',
+          actionText:
+            'Hey Alice, Björn lädt dich ein zu RealUnit: https://realunit.app/invite/AB12CD',
+        },
+        copy,
+      ),
+    ).toBe('Björn lädt dich ein zu RealUnit.');
+    expect(core.inviteLandingBody({ kind: 'invite' }, copy)).toBe(
+      'Du bist zu RealUnit eingeladen.',
+    );
+    expect(
+      core.inviteLandingBody({ inviterName: '0x553C7f9C780316FC1D34b8e14ac2465Ab22a090B' }, copy),
+    ).toBe('Du bist zu RealUnit eingeladen.');
+  });
+
+  test('de invite copy uses Hey {invitee} and a separate inviter line', () => {
+    expect(I18N.de['invite.title']).toBe('Hey {invitee}');
+    expect(I18N.de['invite.body']).toBe('{inviter} lädt dich ein zu RealUnit.');
+    expect(I18N.de['invite.body.fallback']).toBe('Du bist zu RealUnit eingeladen.');
+    expect(I18N.de['promo.body.fallback']).toMatch(/Promo-Code/);
+    expect(I18N.de.retap).toMatch(/nochmals antippen/);
+    expect(I18N.de.retap).toMatch(/Code unten kopieren/);
+    expect(I18N.en.retap).toMatch(/copy the code below/);
+    expect(I18N.de['code.label']).toBe('Dein Code');
+    expect(I18N.de['code.copy']).toBe('Code kopieren');
+    expect(I18N.de['code.checking']).toBe('Code wird geprüft…');
+    expect(I18N.en['code.checking']).toBe('Checking code…');
+    expect(I18N.de['link.copy']).toBe('Link kopieren');
+    expect(I18N.en['link.copy']).toBe('Copy link');
+    expect(I18N.de['code.hint']).toMatch(/Registrierung/);
+    expect(I18N.en['code.label']).toBe('Your code');
+    expect(I18N.en['code.copy']).toBe('Copy code');
+    expect(I18N.de['invalid.home']).toBe('Zur Startseite');
+    expect(I18N.en['invalid.home']).toBe('Back to homepage');
+    expect(I18N.de['unavailable.home']).toBe('Zur Startseite');
+    expect(I18N.en['unavailable.home']).toBe('Back to homepage');
+  });
+
+  test('de and en expose the same keys', () => {
+    expect(Object.keys(I18N.de).sort()).toEqual(Object.keys(I18N.en).sort());
+  });
+});
+
+describe('keepLandingFocus', () => {
+  function el(id, inStores) {
+    return {
+      id: id,
+      closest: function (sel) {
+        return inStores && sel === '.stores' ? {} : null;
+      },
+    };
+  }
+
+  test('keeps copy, CTA, code, Retry, and home controls', () => {
+    expect(keepLandingFocus(el('ok-copy'))).toBe(true);
+    expect(keepLandingFocus(el('ok-copy-link'))).toBe(true);
+    expect(keepLandingFocus(el('ok-cta'))).toBe(true);
+    expect(keepLandingFocus(el('ok-code'))).toBe(true);
+    expect(keepLandingFocus(el('invalid-home'))).toBe(true);
+    expect(keepLandingFocus(el('unavailable-cta'))).toBe(true);
+    expect(keepLandingFocus(el('unavailable-home'))).toBe(true);
+  });
+
+  test('keeps store-badge links and ignores headings', () => {
+    expect(keepLandingFocus(el('store-apple', true))).toBe(true);
+    expect(keepLandingFocus(el('ok-code-hint'))).toBe(false);
+    expect(keepLandingFocus(el('invalid-title'))).toBe(false);
+    expect(keepLandingFocus(null)).toBe(false);
+  });
+});
+
+describe('remaining branch coverage', () => {
+  test('html and json whitespace entities fold onto a code', () => {
+    expect(codeFromPastedReferralUrl('https://realunit.app/invite/&#9;AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/invite/&#10;AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/invite/&#13;AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/invite/&#160;AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/invite/AB12CD&#1;')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/invite/\\u0009AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/invite/\\u000AAB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/invite/\\u000DAB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/invite/\\u00A0AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/invite/AB12CD\\u0001')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://realunit.app/invite/\u3000AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('invite/AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('promo/EVT1')).toBe('EVT1');
+    expect(codeFromPastedReferralUrl('realunit-wallet://invite??code=AB12CD')).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('realunit-wallet://invite?referrer=invite%3DAB12CD')).toBe(
+      'AB12CD',
+    );
+    expect(
+      codeFromPastedReferralUrl(
+        'intent://send/#Intent;;scheme=whatsapp;S.text=https://realunit.app/invite/AB12CD;end',
+      ),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl(
+        'https://urldefense.proofpoint.com/v2/url?u=https-01A__example.com&d=Dw',
+      ),
+    ).toBeNull();
+    expect(
+      codeFromPastedReferralUrl('https://urldefense.proofpoint.com/v2/url?u=plain_text_only&d=Dw'),
+    ).toBeNull();
+    expect(parseCodeFromLocation('/invite', '', '#AB12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+  });
+
+  test('android-app http host, wrapped query, and AMP host-in-path', () => {
+    expect(
+      codeFromPastedReferralUrl('android-app://swiss.realunit.app/http/realunit.app/invite/AB12CD'),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl('https://realunit.app/invite?utm_content=?invite=AB12CD'),
+    ).toBe('AB12CD');
+    expect(codeFromPastedReferralUrl('https://example.com/x/realunit.app')).toBeNull();
+    expect(parseCodeFromLocation('/invite', '?utm_content=invite%3DAB12CD', '')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseCodeFromLocation('/invite', '?utm_content=summer', '')).toBeNull();
+  });
+
+  test('Smart App Banner DOM helper guards and spent copy fallback', () => {
+    expect(applyItunesBannerFromLocation({ querySelector: null }, { pathname: '/invite' })).toBe(
+      false,
+    );
+    expect(
+      applyItunesBannerFromLocation(
+        {
+          querySelector() {
+            return {};
+          },
+        },
+        { pathname: '/invite/AB12CD' },
+      ),
+    ).toBe(false);
+    const el = { setAttribute() {} };
+    expect(
+      applyItunesBannerFromLocation(
+        {
+          querySelector() {
+            return el;
+          },
+        },
+        null,
+      ),
+    ).toBe(true);
+    expect(core.invalidLandingCopy({ code: 'SPENT' }, {}).title).toBeUndefined();
+    expect(core.inviteLandingBody({ inviterName: '' }, I18N.de)).toBe(
+      I18N.de['invite.body.fallback'],
+    );
+    expect(core.inviteLandingBody({ inviterName: '' }, { 'invite.body': 'x' })).toBe('');
+    expect(core.inviteLandingBody({ inviterName: 'Ada' }, { 'invite.body': 'Hey {inviter}' })).toBe(
+      'Hey Ada',
+    );
+    expect(core.isReferralPathKind(null)).toBe(false);
+    expect(core.isReferralSchemeToken(undefined)).toBe(false);
+    expect(core.intentFragmentValues(null)).toEqual([null]);
+    expect(core.codeFromWrappedQueryValue(null)).toBeNull();
+    expect(core.codeFromWrappedQueryValue('')).toBeNull();
+    expect(core.codeFromWrappedQueryValue('promo=EVT1')).toBe('EVT1');
+    expect(core.codeFromWrappedQueryValue('code=AB12CD')).toBe('AB12CD');
+    expect(core.codeFromWrappedQueryValue('foo=1&bar=2')).toBeNull();
+    expect(core.codeFromWrappedQueryValue('?invite=AB12CD')).toBe('AB12CD');
+    expect(core.codeFromWrappedQueryValue('code=https://example.com&invite=AB12CD')).toBe('AB12CD');
+    expect(core.codeFromWrappedQueryValue('invite=https://example.com&promo=EVT1')).toBe('EVT1');
+    expect(core.codeFromWrappedQueryValue('invite=&promo=EVT1')).toBe('EVT1');
+    expect(parseCodeFromLocation('/invite', '?referrer=invite%3DAB12CD', '')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseCodeFromLocation('/invite', '', 'AB12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(codeFromPastedReferralUrl('https://example.com/?u=hello-realunit.app')).toBeNull();
+    expect(codeFromPastedReferralUrl('https://example.com/?u=hello-3A_world')).toBeNull();
+    expect(codeFromPastedReferralUrl('https://example.com/?u=realunit-3A_world')).toBeNull();
+    expect(
+      codeFromPastedReferralUrl(
+        'https://urldefense.proofpoint.com/v2/url?u=https-3A__realunit-2Eapp_invite_AB12CD&d=Dw',
+      ),
+    ).toBe('AB12CD');
+    expect(
+      codeFromPastedReferralUrl('https://example.com/?u=https-00A__realunit.app_invite_AB12CD'),
+    ).toBeNull();
+    expect(inviteBodyLang(null, 'en')).toBe('en');
+    expect(inviteBodyLang({}, 'de')).toBe('de');
+    const origParseInt = globalThis.parseInt;
+    let nanTimes = 0;
+    globalThis.parseInt = function (value, radix) {
+      nanTimes += 1;
+      if (nanTimes <= 3) return Number.NaN;
+      return origParseInt(value, radix);
+    };
+    try {
+      expect(codeFromPastedReferralUrl('https://realunit.app/invite/AB12CD\\u0041')).toBeTruthy();
+      expect(codeFromPastedReferralUrl('https://realunit.app/invite/AB12CD&#x41;')).toBeTruthy();
+      expect(codeFromPastedReferralUrl('https://realunit.app/invite/AB12CD&#65;')).toBeTruthy();
+    } finally {
+      globalThis.parseInt = origParseInt;
+    }
+    expect(mapResult(410, { code: 'spent' })).toEqual({ state: 'invalid', code: 'SPENT' });
+    expect(mapResult(410, 'nope')).toEqual({ state: 'invalid' });
+  });
+});
diff --git a/test/itunes-banner-function.test.mjs b/test/itunes-banner-function.test.mjs
new file mode 100644
index 0000000..8df0dc4
--- /dev/null
+++ b/test/itunes-banner-function.test.mjs
@@ -0,0 +1,497 @@
+import '../public/js/lib/invite-core.js';
+import { describe, expect, test } from 'vitest';
+import {
+  APP_STORE_ID,
+  canonicalLandingHref,
+  injectLandingCanonicalHtml,
+  requestOrigin,
+  injectItunesBannerFromRequestUrl,
+  injectItunesBannerHtml,
+  injectLandingFromRequestUrl,
+  injectInstallHandoffHtml,
+  injectShareAppLinksHtml,
+  injectTwitterAppHtml,
+  injectShareTitleHtml,
+  injectShareImageAltHtml,
+  shareTitle,
+  injectShareDescriptionHtml,
+  shareDescription,
+  parseLangFromUrl,
+  injectShareLocaleHtml,
+  injectSiteNameHtml,
+  playStoreUrl,
+  itunesBanner,
+  parseLandingFromUrl,
+  shouldRewriteItunesBanner,
+} from '../functions/lib/itunes-banner.js';
+
+const META = '<meta name="apple-itunes-app" content="app-id=6759720010" />';
+const META_FLIPPED = '<meta content="app-id=6759720010" name="apple-itunes-app" />';
+
+describe('shouldRewriteItunesBanner', () => {
+  test('invite and promo HTML paths only', () => {
+    expect(shouldRewriteItunesBanner('/invite')).toBe(true);
+    expect(shouldRewriteItunesBanner('/invite/AB12CD')).toBe(true);
+    expect(shouldRewriteItunesBanner('/promo/EVT1')).toBe(true);
+    expect(shouldRewriteItunesBanner('/invite/invite.js')).toBe(false);
+    expect(shouldRewriteItunesBanner('/js/invite-banner.js')).toBe(false);
+    expect(shouldRewriteItunesBanner('/')).toBe(false);
+    expect(shouldRewriteItunesBanner('/.well-known/apple-app-site-association')).toBe(false);
+  });
+});
+
+describe('parseLandingFromUrl', () => {
+  test('path, query, hash, and nested URL', () => {
+    expect(parseLandingFromUrl('https://realunit.app/invite/AB12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseLandingFromUrl('https://realunit.app/invite/ab12cd')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseLandingFromUrl('https://www.realunit.app/promo/EVT1')).toEqual({
+      kind: 'promo',
+      code: 'EVT1',
+    });
+    expect(parseLandingFromUrl('https://realunit.app/invite?code=AB12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(
+      parseLandingFromUrl('https://realunit.app/invite?code=https://example.com&invite=AB12CD'),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(
+      parseLandingFromUrl(
+        'https://realunit.app/invite?utm_content=' +
+          encodeURIComponent('https://realunit.app/invite?code=https://example.com&invite=AB12CD'),
+      ),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(
+      parseLandingFromUrl(
+        'https://realunit.app/invite?utm_content=' +
+          encodeURIComponent('code=https://example.com&invite=AB12CD'),
+      ),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(
+      parseLandingFromUrl(
+        'https://realunit.app/invite?referrer=' +
+          encodeURIComponent('invite=https://example.com&promo=EVT1'),
+      ),
+    ).toEqual({ kind: 'invite', code: 'EVT1' });
+    expect(parseLandingFromUrl('https://realunit.app/promo?code=&promo=EVT1')).toEqual({
+      kind: 'promo',
+      code: 'EVT1',
+    });
+    expect(parseLandingFromUrl('https://realunit.app/invite?utm_content=invite%3DAB12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(
+      parseLandingFromUrl(
+        'https://realunit.app/invite?utm_source=google-play&utm_content=https://realunit.app/invite/AB12CD',
+      ),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(
+      parseLandingFromUrl(
+        'https://realunit.app/invite?utm_content=' +
+          encodeURIComponent('https://realunit.app/invite?code=AB12CD'),
+      ),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(
+      parseLandingFromUrl('https://realunit.app/invite?utm_content=realunit.app/invite/AB12CD'),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(parseLandingFromUrl('https://realunit.app/invite?utm_content=/invite/AB12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseLandingFromUrl('https://realunit.app/invite?code=invite%2FAB%252F12')).toEqual({
+      kind: 'invite',
+      code: 'AB/12',
+    });
+    expect(parseLandingFromUrl('https://realunit.app/invite?code=%2Finvite%2FAB12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(
+      parseLandingFromUrl(
+        'https://realunit.app/invite?utm_content=android-app://swiss.realunit.app/https/realunit.app/invite/AB12CD',
+      ),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(parseLandingFromUrl('https://realunit.app/promo?referrer=promo%3DEVT1')).toEqual({
+      kind: 'promo',
+      code: 'EVT1',
+    });
+    expect(parseLandingFromUrl('https://realunit.app/invite?utm_content=summer-sale')).toEqual({
+      kind: 'invite',
+      code: null,
+    });
+    expect(
+      parseLandingFromUrl(
+        'https://realunit.app/invite?utm_content=summer-sale&u=https://realunit.app/invite/AB12CD',
+      ),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(
+      parseLandingFromUrl(
+        'https://realunit.app/invite?utm_content=summer-sale&link=https://realunit.app/invite/AB12CD',
+      ),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(
+      parseLandingFromUrl('https://realunit.app/invite?u=https://realunit.app/invite/AB12CD'),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(
+      parseLandingFromUrl('https://realunit.app/invite?q=https://realunit.app/invite/AB12CD'),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(
+      parseLandingFromUrl('https://realunit.app/invite?url=https://realunit.app/invite/AB12CD'),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(parseLandingFromUrl('https://realunit.app/invite?u=hello')).toEqual({
+      kind: 'invite',
+      code: null,
+    });
+    expect(
+      parseLandingFromUrl('https://realunit.app/invite?link=https://realunit.app/invite/AB12CD'),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(parseLandingFromUrl('https://realunit.app/invite?link=hello')).toEqual({
+      kind: 'invite',
+      code: null,
+    });
+    expect(
+      parseLandingFromUrl(
+        'https://realunit.app/invite?utm_content=ios-app://6759720010/invite/AB12CD',
+      ),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(
+      parseLandingFromUrl(
+        'https://realunit.app/invite?utm_content=ios-app://6759720010/realunit-wallet/promo/EVT1',
+      ),
+    ).toEqual({ kind: 'invite', code: 'EVT1' });
+    expect(
+      parseLandingFromUrl('https://realunit.app/invite?utm_content=https://example.com/campaign'),
+    ).toEqual({ kind: 'invite', code: null });
+    expect(
+      parseLandingFromUrl('https://realunit.app/invite?u=https://example.com/invite/AB12CD'),
+    ).toEqual({ kind: 'invite', code: null });
+    expect(parseLandingFromUrl('https://realunit.app/invite?code=https://example.com/foo')).toEqual(
+      { kind: 'invite', code: null },
+    );
+    expect(
+      parseLandingFromUrl(
+        'https://realunit.app/invite?utm_content=' +
+          encodeURIComponent(
+            'https://urldefense.proofpoint.com/v2/url?u=https-3A__realunit.app_invite_AB12CD&d=Dw',
+          ),
+      ),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(
+      parseLandingFromUrl(
+        'https://realunit.app/invite?url=' +
+          encodeURIComponent(
+            'https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Frealunit.app%2Finvite%2FAB12CD&data=05',
+          ),
+      ),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(
+      parseLandingFromUrl(
+        'https://realunit.app/invite?utm_content=https://www.google.com/amp/s/realunit.app/invite/AB12CD',
+      ),
+    ).toEqual({ kind: 'invite', code: 'AB12CD' });
+    expect(
+      parseLandingFromUrl(
+        'https://realunit.app/promo?q=' +
+          encodeURIComponent(
+            'https://r.search.yahoo.com/_ylt=x/RU=https%3A%2F%2Frealunit.app%2Fpromo%2FEVT1/RK=2',
+          ),
+      ),
+    ).toEqual({ kind: 'promo', code: 'EVT1' });
+    expect(parseLandingFromUrl('https://realunit.app/invite/AB12CD?utm_content=OTHER')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseLandingFromUrl('https://realunit.app/invite#AB12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(
+      parseLandingFromUrl(
+        'https://realunit.app/invite/' + encodeURIComponent('https://realunit.app/promo/EVT1'),
+      ),
+    ).toEqual({ kind: 'invite', code: 'EVT1' });
+    expect(parseLandingFromUrl('https://realunit.app/invite')).toEqual({
+      kind: 'invite',
+      code: null,
+    });
+    expect(parseLandingFromUrl('https://realunit.app/invite/index.html')).toEqual({
+      kind: 'invite',
+      code: null,
+    });
+    expect(parseLandingFromUrl('/invite/AB12CD?mock=1')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseLandingFromUrl('https://realunit.app/invite/%')).toEqual({
+      kind: 'invite',
+      code: '%',
+    });
+    const long = 'A'.repeat(300);
+    expect(parseLandingFromUrl('https://realunit.app/invite/' + long).code).toHaveLength(32);
+    expect(parseLandingFromUrl('https://realunit.app/invite/AB12CD!')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseLandingFromUrl('https://realunit.app/invite/AB12CD!?')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseLandingFromUrl('https://realunit.app/promo/EVT1.')).toEqual({
+      kind: 'promo',
+      code: 'EVT1',
+    });
+    expect(parseLandingFromUrl('https://realunit.app/invite/AB\u200B12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseLandingFromUrl('https://realunit.app/invite/AB%E2%80%8B12CD')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseLandingFromUrl('https://realunit.app/invite/ＡＢ１２ＣＤ')).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(
+      parseLandingFromUrl(
+        'https://realunit.app/invite/%EF%BC%A1%EF%BC%A2%EF%BC%91%EF%BC%92%EF%BC%A3%EF%BC%A4',
+      ),
+    ).toEqual({
+      kind: 'invite',
+      code: 'AB12CD',
+    });
+    expect(parseLandingFromUrl('https://realunit.app/promo/\uFEFFEVT1')).toEqual({
+      kind: 'promo',
+      code: 'EVT1',
+    });
+    expect(parseLandingFromUrl('https://realunit.app/invite/!')).toEqual({
+      kind: 'invite',
+      code: null,
+    });
+    expect(parseLandingFromUrl('https://realunit.app/')).toBeNull();
+    expect(parseLandingFromUrl('http://[')).toBeNull();
+  });
+});
+
+describe('injectItunesBannerHtml', () => {
+  test('replaces both attribute orders and leaves other HTML alone', () => {
+    expect(injectItunesBannerHtml(META, itunesBanner('invite', 'AB12CD'))).toBe(
+      '<meta name="apple-itunes-app" content="app-id=6759720010, app-argument=realunit-wallet://invite/AB12CD" />',
+    );
+    expect(injectItunesBannerHtml(META_FLIPPED, itunesBanner('promo', 'EVT1'))).toBe(
+      '<meta content="app-id=6759720010, app-argument=realunit-wallet://promo/EVT1" name="apple-itunes-app" />',
+    );
+    expect(injectItunesBannerHtml('<p>no meta</p>', itunesBanner('invite', 'AB12CD'))).toBe(
+      '<p>no meta</p>',
+    );
+    expect(injectItunesBannerHtml(null, itunesBanner('invite', 'AB12CD'))).toBeNull();
+  });
+});
+
+describe('injectItunesBannerFromRequestUrl', () => {
+  test('matches invite-core for canonical invite and promo URLs', () => {
+    const core = window.RealUnitInvite;
+    const invite = injectItunesBannerFromRequestUrl(META, 'https://realunit.app/invite/AB12CD');
+    expect(invite).toContain(core.injectItunesBannerHtml(META, '/invite/AB12CD', '', ''));
+    expect(invite).toContain('app-argument=realunit-wallet://invite/AB12CD');
+    const promo = injectItunesBannerFromRequestUrl(META, 'https://dev.realunit.app/promo/EVT1');
+    expect(promo).toContain(core.injectItunesBannerHtml(META, '/promo/EVT1', '', ''));
+    expect(promo).toContain('app-argument=realunit-wallet://promo/EVT1');
+    const bare = injectItunesBannerFromRequestUrl(META, 'https://realunit.app/invite');
+    expect(bare).toContain('content="app-id=' + APP_STORE_ID + '"');
+    expect(bare).toContain('property="og:site_name" content="RealUnit"');
+    expect(bare).not.toContain('app-argument=');
+    const fromUtm = injectItunesBannerFromRequestUrl(
+      META,
+      'https://realunit.app/invite?utm_content=invite%3DAB12CD',
+    );
+    expect(fromUtm).toContain('app-argument=realunit-wallet://invite/AB12CD');
+    const fromFacebookU = injectItunesBannerFromRequestUrl(
+      META,
+      'https://realunit.app/invite?u=https://realunit.app/invite/AB12CD',
+    );
+    expect(fromFacebookU).toContain('app-argument=realunit-wallet://invite/AB12CD');
+  });
+});
+
+describe('canonicalLandingHref', () => {
+  test('folds www onto the apex and drops mock query', () => {
+    expect(canonicalLandingHref('https://www.realunit.app/invite/AB12CD?mock=1')).toBe(
+      'https://realunit.app/invite/AB12CD',
+    );
+    expect(canonicalLandingHref('https://realunit.app/invite?utm_content=invite%3DAB12CD')).toBe(
+      'https://realunit.app/invite/AB12CD',
+    );
+    expect(canonicalLandingHref('https://dev.realunit.app/promo/EVT1')).toBe(
+      'https://dev.realunit.app/promo/EVT1',
+    );
+    expect(canonicalLandingHref('http://127.0.0.1:4173/invite/AB12CD?mock=1')).toBe(
+      'http://127.0.0.1:4173/invite/AB12CD',
+    );
+    expect(canonicalLandingHref('https://realunit.app/')).toBeNull();
+    expect(canonicalLandingHref('http://[')).toBeNull();
+    expect(requestOrigin('http://[')).toBe('https://realunit.app');
+    expect(injectLandingCanonicalHtml('<p>x</p>', null)).toBe('<p>x</p>');
+    expect(injectLandingCanonicalHtml(null, 'https://realunit.app/invite/AB12CD')).toBeNull();
+  });
+});
+
+describe('injectLandingFromRequestUrl', () => {
+  test('sets banner, og:url, and canonical together', () => {
+    const shell =
+      META +
+      '<meta property="og:url" content="https://realunit.app/invite/" />' +
+      '<link rel="canonical" href="https://realunit.app/invite/" />' +
+      '<meta name="twitter:url" content="https://realunit.app/invite/" />' +
+      '<meta property="og:title" content="RealUnit — Einladung" />' +
+      '<meta name="twitter:title" content="RealUnit — Einladung" />' +
+      '<meta property="og:image:alt" content="RealUnit" />' +
+      '<meta name="twitter:image:alt" content="RealUnit" />' +
+      '<meta property="og:description" content="Öffne die RealUnit-App mit diesem Code." />' +
+      '<meta name="twitter:description" content="Öffne die RealUnit-App mit diesem Code." />' +
+      '<meta name="description" content="Öffne die RealUnit-App mit diesem Code." />';
+    const out = injectLandingFromRequestUrl(shell, 'https://www.realunit.app/invite/AB12CD?mock=1');
+    expect(out).toContain('app-argument=realunit-wallet://invite/AB12CD');
+    expect(out).toContain('content="https://realunit.app/invite/AB12CD"');
+    expect(out).toContain('href="https://realunit.app/invite/AB12CD"');
+    expect(out).toContain('name="twitter:url" content="https://realunit.app/invite/AB12CD"');
+    expect(out).toContain('property="og:title" content="RealUnit — Einladung AB12CD"');
+    expect(out).toContain('property="og:image:alt" content="RealUnit — Einladung AB12CD"');
+    expect(out).toContain('name="twitter:image:alt" content="RealUnit — Einladung AB12CD"');
+    expect(out).toContain(
+      'property="og:description" content="Öffne die RealUnit-App mit dem Code AB12CD."',
+    );
+    expect(out).toContain('property="al:ios:url" content="realunit-wallet://invite/AB12CD"');
+    expect(out).toContain(
+      'name="twitter:app:url:iphone" content="realunit-wallet://invite/AB12CD"',
+    );
+    expect(out).toContain('property="og:site_name" content="RealUnit"');
+    const nope = injectLandingFromRequestUrl('<p>nope</p>', 'https://realunit.app/invite/AB12CD');
+    expect(nope).toContain('<p>nope</p>');
+    expect(nope).toContain('data-android-app');
+    expect(nope).toContain('al:ios:url');
+  });
+
+  test('sets Play referrer and alternate links from the request URL', () => {
+    const shell =
+      '<head></head><a data-store="play" href="https://play.google.com/store/apps/details?id=swiss.realunit.app">Play</a>';
+    const out = injectLandingFromRequestUrl(shell, 'https://realunit.app/invite/AB12CD');
+    expect(out).toContain(playStoreUrl('AB12CD', 'invite'));
+    expect(out).toContain('data-android-app');
+    expect(out).toContain('data-ios-app');
+    expect(out).toContain('al:android:url');
+    expect(out).toContain('property="al:android:url" content="realunit-wallet://invite/AB12CD"');
+    expect(out).toContain('property="al:android:class" content="swiss.realunit.app.MainActivity"');
+    expect(out).toContain('property="al:web:url" content="https://realunit.app/invite/AB12CD"');
+    expect(out).toContain(
+      'name="twitter:app:url:iphone" content="realunit-wallet://invite/AB12CD"',
+    );
+    expect(out).toContain(
+      'name="twitter:app:url:googleplay" content="realunit-wallet://invite/AB12CD"',
+    );
+    expect(out).toContain('name="twitter:app:id:iphone" content="6759720010"');
+    expect(out).toContain('name="twitter:app:id:googleplay" content="swiss.realunit.app"');
+    expect(out).toContain('name="twitter:app:country" content="CH"');
+    expect(out).toContain('property="og:site_name" content="RealUnit"');
+    expect(injectSiteNameHtml('<head></head>')).toContain(
+      'property="og:site_name" content="RealUnit"',
+    );
+    expect(injectSiteNameHtml(null)).toBeNull();
+    expect(injectTwitterAppHtml('<head></head>', 'invite', 'AB12CD')).toContain(
+      'name="twitter:app:url:iphone" content="realunit-wallet://invite/AB12CD"',
+    );
+    expect(injectTwitterAppHtml(shell, 'invite', null)).toBe(shell);
+    expect(injectTwitterAppHtml(null, 'invite', 'AB12CD')).toBeNull();
+    expect(injectInstallHandoffHtml(shell, 'invite', null)).toBe(shell);
+    expect(
+      injectShareAppLinksHtml(shell, 'invite', null, 'https://realunit.app/invite/AB12CD'),
+    ).toBe(shell);
+  });
+
+  test('injectShareTitleHtml writes og:title from the campaign code', () => {
+    const shell =
+      '<meta property="og:title" content="RealUnit — Einladung" />' +
+      '<meta name="twitter:title" content="RealUnit — Einladung" />';
+    expect(injectShareTitleHtml(shell, 'invite', 'AB12CD')).toContain(
+      'content="RealUnit — Einladung AB12CD"',
+    );
+    expect(injectShareTitleHtml(shell, 'promo', 'EVT1')).toContain(
+      'content="RealUnit — Promo-Code EVT1"',
+    );
+    expect(injectShareTitleHtml(shell, 'invite', null)).toBe(shell);
+    expect(injectShareTitleHtml(null, 'invite', 'AB12CD')).toBeNull();
+    expect(shareTitle('invite', 'AB12CD')).toBe('RealUnit — Einladung AB12CD');
+    expect(shareTitle('invite', 'AB12CD', 'en')).toBe('RealUnit — Invitation AB12CD');
+    expect(shareTitle('promo', 'EVT1', 'en')).toBe('RealUnit — Promo code EVT1');
+    expect(shareTitle(null, 'AB12CD')).toBeNull();
+  });
+
+  test('injectShareImageAltHtml writes og:image:alt from the campaign code', () => {
+    const shell =
+      '<meta property="og:image:alt" content="RealUnit" />' +
+      '<meta name="twitter:image:alt" content="RealUnit" />';
+    expect(injectShareImageAltHtml(shell, 'invite', 'AB12CD')).toContain(
+      'content="RealUnit — Einladung AB12CD"',
+    );
+    expect(injectShareImageAltHtml(shell, 'promo', 'EVT1', 'en')).toContain(
+      'content="RealUnit — Promo code EVT1"',
+    );
+    expect(
+      injectShareImageAltHtml(
+        '<meta content="RealUnit" property="og:image:alt">' +
+          '<meta content="RealUnit" name="twitter:image:alt">',
+        'invite',
+        'AB12CD',
+      ),
+    ).toContain('content="RealUnit — Einladung AB12CD"');
+    expect(injectShareImageAltHtml(shell, 'invite', null)).toBe(shell);
+    expect(injectShareImageAltHtml(null, 'invite', 'AB12CD')).toBeNull();
+  });
+
+  test('injectShareDescriptionHtml writes og:description from the campaign code', () => {
+    const shell =
+      '<meta property="og:description" content="Öffne die RealUnit-App mit diesem Code." />' +
+      '<meta name="twitter:description" content="Öffne die RealUnit-App mit diesem Code." />' +
+      '<meta name="description" content="Öffne die RealUnit-App mit diesem Code." />';
+    expect(injectShareDescriptionHtml(shell, 'AB12CD')).toContain(
+      'content="Öffne die RealUnit-App mit dem Code AB12CD."',
+    );
+    expect(injectShareDescriptionHtml(shell, 'AB12CD', 'en')).toContain(
+      'content="Open the RealUnit app with code AB12CD."',
+    );
+    expect(injectShareDescriptionHtml(shell, null)).toBe(shell);
+    expect(injectShareDescriptionHtml(null, 'AB12CD')).toBeNull();
+    expect(shareDescription('EVT1')).toBe('Öffne die RealUnit-App mit dem Code EVT1.');
+    expect(shareDescription('EVT1', 'en')).toBe('Open the RealUnit app with code EVT1.');
+    expect(shareDescription(null)).toBeNull();
+  });
+
+  test('?lang=en sets html lang and og:locale before JS', () => {
+    expect(parseLangFromUrl('https://realunit.app/invite/AB12CD?lang=en')).toBe('en');
+    expect(parseLangFromUrl('https://realunit.app/invite/AB12CD')).toBeNull();
+    const shell =
+      '<html lang="de"><title>RealUnit — Einladung</title>' +
+      '<meta property="og:title" content="RealUnit — Einladung" />' +
+      '<meta property="og:image:alt" content="RealUnit" />' +
+      '<meta property="og:locale" content="de_CH" />' +
+      '<meta property="og:locale:alternate" content="en_GB" />' +
+      '<meta property="og:description" content="Öffne die RealUnit-App mit diesem Code." />';
+    const out = injectLandingFromRequestUrl(shell, 'https://realunit.app/invite/AB12CD?lang=en');
+    expect(out).toContain('<html lang="en">');
+    expect(out).toContain('property="og:locale" content="en_GB"');
+    expect(out).toContain('property="og:locale:alternate" content="de_CH"');
+    expect(out).toContain('property="og:title" content="RealUnit — Invitation AB12CD"');
+    expect(out).toContain('property="og:image:alt" content="RealUnit — Invitation AB12CD"');
+    expect(out).toContain('<title>RealUnit — Invitation AB12CD</title>');
+    expect(out).toContain('Open the RealUnit app with code AB12CD.');
+    expect(injectShareLocaleHtml(shell, 'de')).toBe(shell);
+    expect(injectShareLocaleHtml(shell, null)).toBe(shell);
+  });
+});
diff --git a/tests/__screenshots__/desktop-chromium/invite-invalid-en.png b/tests/__screenshots__/desktop-chromium/invite-invalid-en.png
new file mode 100644
index 0000000..422ae95
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/invite-invalid-en.png differ
diff --git a/tests/__screenshots__/desktop-chromium/invite-invalid.png b/tests/__screenshots__/desktop-chromium/invite-invalid.png
new file mode 100644
index 0000000..190d578
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/invite-invalid.png differ
diff --git a/tests/__screenshots__/desktop-chromium/invite-loading-en.png b/tests/__screenshots__/desktop-chromium/invite-loading-en.png
new file mode 100644
index 0000000..6b40da7
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/invite-loading-en.png differ
diff --git a/tests/__screenshots__/desktop-chromium/invite-loading.png b/tests/__screenshots__/desktop-chromium/invite-loading.png
new file mode 100644
index 0000000..5262bef
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/invite-loading.png differ
diff --git a/tests/__screenshots__/desktop-chromium/invite-missing-code-en.png b/tests/__screenshots__/desktop-chromium/invite-missing-code-en.png
new file mode 100644
index 0000000..422ae95
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/invite-missing-code-en.png differ
diff --git a/tests/__screenshots__/desktop-chromium/invite-missing-code.png b/tests/__screenshots__/desktop-chromium/invite-missing-code.png
new file mode 100644
index 0000000..190d578
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/invite-missing-code.png differ
diff --git a/tests/__screenshots__/desktop-chromium/invite-ok-en.png b/tests/__screenshots__/desktop-chromium/invite-ok-en.png
new file mode 100644
index 0000000..4f00f1e
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/invite-ok-en.png differ
diff --git a/tests/__screenshots__/desktop-chromium/invite-ok-fallback-en.png b/tests/__screenshots__/desktop-chromium/invite-ok-fallback-en.png
new file mode 100644
index 0000000..96764bc
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/invite-ok-fallback-en.png differ
diff --git a/tests/__screenshots__/desktop-chromium/invite-ok-fallback.png b/tests/__screenshots__/desktop-chromium/invite-ok-fallback.png
new file mode 100644
index 0000000..7bf1737
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/invite-ok-fallback.png differ
diff --git a/tests/__screenshots__/desktop-chromium/invite-ok.png b/tests/__screenshots__/desktop-chromium/invite-ok.png
new file mode 100644
index 0000000..c9adb89
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/invite-ok.png differ
diff --git a/tests/__screenshots__/desktop-chromium/invite-spent-en.png b/tests/__screenshots__/desktop-chromium/invite-spent-en.png
new file mode 100644
index 0000000..834c4a3
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/invite-spent-en.png differ
diff --git a/tests/__screenshots__/desktop-chromium/invite-spent.png b/tests/__screenshots__/desktop-chromium/invite-spent.png
new file mode 100644
index 0000000..660173c
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/invite-spent.png differ
diff --git a/tests/__screenshots__/desktop-chromium/invite-unavailable-en.png b/tests/__screenshots__/desktop-chromium/invite-unavailable-en.png
new file mode 100644
index 0000000..d8fa6eb
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/invite-unavailable-en.png differ
diff --git a/tests/__screenshots__/desktop-chromium/invite-unavailable.png b/tests/__screenshots__/desktop-chromium/invite-unavailable.png
new file mode 100644
index 0000000..1d3fc0a
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/invite-unavailable.png differ
diff --git a/tests/__screenshots__/desktop-chromium/promo-invalid-en.png b/tests/__screenshots__/desktop-chromium/promo-invalid-en.png
new file mode 100644
index 0000000..422ae95
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/promo-invalid-en.png differ
diff --git a/tests/__screenshots__/desktop-chromium/promo-invalid.png b/tests/__screenshots__/desktop-chromium/promo-invalid.png
new file mode 100644
index 0000000..190d578
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/promo-invalid.png differ
diff --git a/tests/__screenshots__/desktop-chromium/promo-loading-en.png b/tests/__screenshots__/desktop-chromium/promo-loading-en.png
new file mode 100644
index 0000000..f111483
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/promo-loading-en.png differ
diff --git a/tests/__screenshots__/desktop-chromium/promo-loading.png b/tests/__screenshots__/desktop-chromium/promo-loading.png
new file mode 100644
index 0000000..9135937
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/promo-loading.png differ
diff --git a/tests/__screenshots__/desktop-chromium/promo-missing-code-en.png b/tests/__screenshots__/desktop-chromium/promo-missing-code-en.png
new file mode 100644
index 0000000..422ae95
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/promo-missing-code-en.png differ
diff --git a/tests/__screenshots__/desktop-chromium/promo-missing-code.png b/tests/__screenshots__/desktop-chromium/promo-missing-code.png
new file mode 100644
index 0000000..190d578
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/promo-missing-code.png differ
diff --git a/tests/__screenshots__/desktop-chromium/promo-ok-en.png b/tests/__screenshots__/desktop-chromium/promo-ok-en.png
new file mode 100644
index 0000000..926bb70
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/promo-ok-en.png differ
diff --git a/tests/__screenshots__/desktop-chromium/promo-ok-fallback-en.png b/tests/__screenshots__/desktop-chromium/promo-ok-fallback-en.png
new file mode 100644
index 0000000..5767b54
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/promo-ok-fallback-en.png differ
diff --git a/tests/__screenshots__/desktop-chromium/promo-ok-fallback.png b/tests/__screenshots__/desktop-chromium/promo-ok-fallback.png
new file mode 100644
index 0000000..ca6ab7d
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/promo-ok-fallback.png differ
diff --git a/tests/__screenshots__/desktop-chromium/promo-ok.png b/tests/__screenshots__/desktop-chromium/promo-ok.png
new file mode 100644
index 0000000..d6be26a
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/promo-ok.png differ
diff --git a/tests/__screenshots__/desktop-chromium/promo-spent-en.png b/tests/__screenshots__/desktop-chromium/promo-spent-en.png
new file mode 100644
index 0000000..834c4a3
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/promo-spent-en.png differ
diff --git a/tests/__screenshots__/desktop-chromium/promo-spent.png b/tests/__screenshots__/desktop-chromium/promo-spent.png
new file mode 100644
index 0000000..660173c
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/promo-spent.png differ
diff --git a/tests/__screenshots__/desktop-chromium/promo-unavailable-en.png b/tests/__screenshots__/desktop-chromium/promo-unavailable-en.png
new file mode 100644
index 0000000..fa8d0fb
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/promo-unavailable-en.png differ
diff --git a/tests/__screenshots__/desktop-chromium/promo-unavailable.png b/tests/__screenshots__/desktop-chromium/promo-unavailable.png
new file mode 100644
index 0000000..1a3d291
Binary files /dev/null and b/tests/__screenshots__/desktop-chromium/promo-unavailable.png differ
diff --git a/tests/__screenshots__/mobile-safari/confirm-confirmed-mobile.png b/tests/__screenshots__/mobile-safari/confirm-confirmed-mobile.png
index c26eff9..8ff2aeb 100644
Binary files a/tests/__screenshots__/mobile-safari/confirm-confirmed-mobile.png and b/tests/__screenshots__/mobile-safari/confirm-confirmed-mobile.png differ
diff --git a/tests/__screenshots__/mobile-safari/confirm-invalid.png b/tests/__screenshots__/mobile-safari/confirm-invalid.png
index 4e8141c..1866e69 100644
Binary files a/tests/__screenshots__/mobile-safari/confirm-invalid.png and b/tests/__screenshots__/mobile-safari/confirm-invalid.png differ
diff --git a/tests/__screenshots__/mobile-safari/confirm-no-registration.png b/tests/__screenshots__/mobile-safari/confirm-no-registration.png
index 24e2658..22728d5 100644
Binary files a/tests/__screenshots__/mobile-safari/confirm-no-registration.png and b/tests/__screenshots__/mobile-safari/confirm-no-registration.png differ
diff --git a/tests/__screenshots__/mobile-safari/confirm-unavailable.png b/tests/__screenshots__/mobile-safari/confirm-unavailable.png
index e00da86..91b9ab7 100644
Binary files a/tests/__screenshots__/mobile-safari/confirm-unavailable.png and b/tests/__screenshots__/mobile-safari/confirm-unavailable.png differ
diff --git a/tests/__screenshots__/mobile-safari/home-android.png b/tests/__screenshots__/mobile-safari/home-android.png
index 4277eca..99e4a2d 100644
Binary files a/tests/__screenshots__/mobile-safari/home-android.png and b/tests/__screenshots__/mobile-safari/home-android.png differ
diff --git a/tests/__screenshots__/mobile-safari/home-ios.png b/tests/__screenshots__/mobile-safari/home-ios.png
index 88f66e5..b14381a 100644
Binary files a/tests/__screenshots__/mobile-safari/home-ios.png and b/tests/__screenshots__/mobile-safari/home-ios.png differ
diff --git a/tests/__screenshots__/mobile-safari/invite-invalid-android.png b/tests/__screenshots__/mobile-safari/invite-invalid-android.png
new file mode 100644
index 0000000..e7a9672
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/invite-invalid-android.png differ
diff --git a/tests/__screenshots__/mobile-safari/invite-invalid-en-android.png b/tests/__screenshots__/mobile-safari/invite-invalid-en-android.png
new file mode 100644
index 0000000..9b72da0
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/invite-invalid-en-android.png differ
diff --git a/tests/__screenshots__/mobile-safari/invite-invalid.png b/tests/__screenshots__/mobile-safari/invite-invalid.png
new file mode 100644
index 0000000..1a9324a
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/invite-invalid.png differ
diff --git a/tests/__screenshots__/mobile-safari/invite-loading-android.png b/tests/__screenshots__/mobile-safari/invite-loading-android.png
new file mode 100644
index 0000000..6ebf133
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/invite-loading-android.png differ
diff --git a/tests/__screenshots__/mobile-safari/invite-loading-en-android.png b/tests/__screenshots__/mobile-safari/invite-loading-en-android.png
new file mode 100644
index 0000000..5410d86
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/invite-loading-en-android.png differ
diff --git a/tests/__screenshots__/mobile-safari/invite-loading.png b/tests/__screenshots__/mobile-safari/invite-loading.png
new file mode 100644
index 0000000..6ca75b6
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/invite-loading.png differ
diff --git a/tests/__screenshots__/mobile-safari/invite-missing-code-android.png b/tests/__screenshots__/mobile-safari/invite-missing-code-android.png
new file mode 100644
index 0000000..e7a9672
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/invite-missing-code-android.png differ
diff --git a/tests/__screenshots__/mobile-safari/invite-missing-code.png b/tests/__screenshots__/mobile-safari/invite-missing-code.png
new file mode 100644
index 0000000..1a9324a
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/invite-missing-code.png differ
diff --git a/tests/__screenshots__/mobile-safari/invite-ok-android.png b/tests/__screenshots__/mobile-safari/invite-ok-android.png
new file mode 100644
index 0000000..52c6df9
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/invite-ok-android.png differ
diff --git a/tests/__screenshots__/mobile-safari/invite-ok-fallback-android.png b/tests/__screenshots__/mobile-safari/invite-ok-fallback-android.png
new file mode 100644
index 0000000..9a51625
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/invite-ok-fallback-android.png differ
diff --git a/tests/__screenshots__/mobile-safari/invite-ok-fallback.png b/tests/__screenshots__/mobile-safari/invite-ok-fallback.png
new file mode 100644
index 0000000..9e80953
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/invite-ok-fallback.png differ
diff --git a/tests/__screenshots__/mobile-safari/invite-ok-ios.png b/tests/__screenshots__/mobile-safari/invite-ok-ios.png
new file mode 100644
index 0000000..56d1fa5
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/invite-ok-ios.png differ
diff --git a/tests/__screenshots__/mobile-safari/invite-spent-android.png b/tests/__screenshots__/mobile-safari/invite-spent-android.png
new file mode 100644
index 0000000..5b5b415
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/invite-spent-android.png differ
diff --git a/tests/__screenshots__/mobile-safari/invite-spent.png b/tests/__screenshots__/mobile-safari/invite-spent.png
new file mode 100644
index 0000000..0fd38e2
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/invite-spent.png differ
diff --git a/tests/__screenshots__/mobile-safari/invite-unavailable-android.png b/tests/__screenshots__/mobile-safari/invite-unavailable-android.png
new file mode 100644
index 0000000..03d13b8
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/invite-unavailable-android.png differ
diff --git a/tests/__screenshots__/mobile-safari/invite-unavailable-en-android.png b/tests/__screenshots__/mobile-safari/invite-unavailable-en-android.png
new file mode 100644
index 0000000..4b56a1d
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/invite-unavailable-en-android.png differ
diff --git a/tests/__screenshots__/mobile-safari/invite-unavailable.png b/tests/__screenshots__/mobile-safari/invite-unavailable.png
new file mode 100644
index 0000000..572de02
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/invite-unavailable.png differ
diff --git a/tests/__screenshots__/mobile-safari/merge-already-completed.png b/tests/__screenshots__/mobile-safari/merge-already-completed.png
index 9d0f3e2..7d557b5 100644
Binary files a/tests/__screenshots__/mobile-safari/merge-already-completed.png and b/tests/__screenshots__/mobile-safari/merge-already-completed.png differ
diff --git a/tests/__screenshots__/mobile-safari/merge-confirmed-mobile.png b/tests/__screenshots__/mobile-safari/merge-confirmed-mobile.png
index 3a09ddd..0180706 100644
Binary files a/tests/__screenshots__/mobile-safari/merge-confirmed-mobile.png and b/tests/__screenshots__/mobile-safari/merge-confirmed-mobile.png differ
diff --git a/tests/__screenshots__/mobile-safari/merge-invalid.png b/tests/__screenshots__/mobile-safari/merge-invalid.png
index ba52e59..25fc50e 100644
Binary files a/tests/__screenshots__/mobile-safari/merge-invalid.png and b/tests/__screenshots__/mobile-safari/merge-invalid.png differ
diff --git a/tests/__screenshots__/mobile-safari/merge-unavailable.png b/tests/__screenshots__/mobile-safari/merge-unavailable.png
index e082915..6b203eb 100644
Binary files a/tests/__screenshots__/mobile-safari/merge-unavailable.png and b/tests/__screenshots__/mobile-safari/merge-unavailable.png differ
diff --git a/tests/__screenshots__/mobile-safari/notfound.png b/tests/__screenshots__/mobile-safari/notfound.png
index b45d75a..eaabf06 100644
Binary files a/tests/__screenshots__/mobile-safari/notfound.png and b/tests/__screenshots__/mobile-safari/notfound.png differ
diff --git a/tests/__screenshots__/mobile-safari/promo-invalid-android.png b/tests/__screenshots__/mobile-safari/promo-invalid-android.png
new file mode 100644
index 0000000..e7a9672
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/promo-invalid-android.png differ
diff --git a/tests/__screenshots__/mobile-safari/promo-invalid-en-android.png b/tests/__screenshots__/mobile-safari/promo-invalid-en-android.png
new file mode 100644
index 0000000..9b72da0
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/promo-invalid-en-android.png differ
diff --git a/tests/__screenshots__/mobile-safari/promo-invalid.png b/tests/__screenshots__/mobile-safari/promo-invalid.png
new file mode 100644
index 0000000..1a9324a
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/promo-invalid.png differ
diff --git a/tests/__screenshots__/mobile-safari/promo-loading-android.png b/tests/__screenshots__/mobile-safari/promo-loading-android.png
new file mode 100644
index 0000000..826883e
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/promo-loading-android.png differ
diff --git a/tests/__screenshots__/mobile-safari/promo-loading-en-android.png b/tests/__screenshots__/mobile-safari/promo-loading-en-android.png
new file mode 100644
index 0000000..a38f5a0
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/promo-loading-en-android.png differ
diff --git a/tests/__screenshots__/mobile-safari/promo-loading.png b/tests/__screenshots__/mobile-safari/promo-loading.png
new file mode 100644
index 0000000..92a2f9f
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/promo-loading.png differ
diff --git a/tests/__screenshots__/mobile-safari/promo-missing-code-android.png b/tests/__screenshots__/mobile-safari/promo-missing-code-android.png
new file mode 100644
index 0000000..e7a9672
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/promo-missing-code-android.png differ
diff --git a/tests/__screenshots__/mobile-safari/promo-missing-code.png b/tests/__screenshots__/mobile-safari/promo-missing-code.png
new file mode 100644
index 0000000..1a9324a
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/promo-missing-code.png differ
diff --git a/tests/__screenshots__/mobile-safari/promo-ok-android.png b/tests/__screenshots__/mobile-safari/promo-ok-android.png
new file mode 100644
index 0000000..73a9e8a
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/promo-ok-android.png differ
diff --git a/tests/__screenshots__/mobile-safari/promo-ok-fallback-android.png b/tests/__screenshots__/mobile-safari/promo-ok-fallback-android.png
new file mode 100644
index 0000000..8bfef35
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/promo-ok-fallback-android.png differ
diff --git a/tests/__screenshots__/mobile-safari/promo-ok-fallback.png b/tests/__screenshots__/mobile-safari/promo-ok-fallback.png
new file mode 100644
index 0000000..e94305e
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/promo-ok-fallback.png differ
diff --git a/tests/__screenshots__/mobile-safari/promo-ok-ios.png b/tests/__screenshots__/mobile-safari/promo-ok-ios.png
new file mode 100644
index 0000000..5c268cd
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/promo-ok-ios.png differ
diff --git a/tests/__screenshots__/mobile-safari/promo-spent-android.png b/tests/__screenshots__/mobile-safari/promo-spent-android.png
new file mode 100644
index 0000000..5b5b415
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/promo-spent-android.png differ
diff --git a/tests/__screenshots__/mobile-safari/promo-spent.png b/tests/__screenshots__/mobile-safari/promo-spent.png
new file mode 100644
index 0000000..0fd38e2
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/promo-spent.png differ
diff --git a/tests/__screenshots__/mobile-safari/promo-unavailable-android.png b/tests/__screenshots__/mobile-safari/promo-unavailable-android.png
new file mode 100644
index 0000000..8ec2da7
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/promo-unavailable-android.png differ
diff --git a/tests/__screenshots__/mobile-safari/promo-unavailable-en-android.png b/tests/__screenshots__/mobile-safari/promo-unavailable-en-android.png
new file mode 100644
index 0000000..8524474
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/promo-unavailable-en-android.png differ
diff --git a/tests/__screenshots__/mobile-safari/promo-unavailable.png b/tests/__screenshots__/mobile-safari/promo-unavailable.png
new file mode 100644
index 0000000..ca1b3df
Binary files /dev/null and b/tests/__screenshots__/mobile-safari/promo-unavailable.png differ
diff --git a/tests/__screenshots__/tablet-chromium/invite-invalid.png b/tests/__screenshots__/tablet-chromium/invite-invalid.png
new file mode 100644
index 0000000..6ec3817
Binary files /dev/null and b/tests/__screenshots__/tablet-chromium/invite-invalid.png differ
diff --git a/tests/__screenshots__/tablet-chromium/invite-loading.png b/tests/__screenshots__/tablet-chromium/invite-loading.png
new file mode 100644
index 0000000..8027845
Binary files /dev/null and b/tests/__screenshots__/tablet-chromium/invite-loading.png differ
diff --git a/tests/__screenshots__/tablet-chromium/invite-missing-code.png b/tests/__screenshots__/tablet-chromium/invite-missing-code.png
new file mode 100644
index 0000000..6ec3817
Binary files /dev/null and b/tests/__screenshots__/tablet-chromium/invite-missing-code.png differ
diff --git a/tests/__screenshots__/tablet-chromium/invite-ok-fallback.png b/tests/__screenshots__/tablet-chromium/invite-ok-fallback.png
new file mode 100644
index 0000000..bccd465
Binary files /dev/null and b/tests/__screenshots__/tablet-chromium/invite-ok-fallback.png differ
diff --git a/tests/__screenshots__/tablet-chromium/invite-ok.png b/tests/__screenshots__/tablet-chromium/invite-ok.png
new file mode 100644
index 0000000..1fdee1e
Binary files /dev/null and b/tests/__screenshots__/tablet-chromium/invite-ok.png differ
diff --git a/tests/__screenshots__/tablet-chromium/invite-spent.png b/tests/__screenshots__/tablet-chromium/invite-spent.png
new file mode 100644
index 0000000..cb08aee
Binary files /dev/null and b/tests/__screenshots__/tablet-chromium/invite-spent.png differ
diff --git a/tests/__screenshots__/tablet-chromium/invite-unavailable.png b/tests/__screenshots__/tablet-chromium/invite-unavailable.png
new file mode 100644
index 0000000..fbf2f5b
Binary files /dev/null and b/tests/__screenshots__/tablet-chromium/invite-unavailable.png differ
diff --git a/tests/__screenshots__/tablet-chromium/promo-invalid.png b/tests/__screenshots__/tablet-chromium/promo-invalid.png
new file mode 100644
index 0000000..6ec3817
Binary files /dev/null and b/tests/__screenshots__/tablet-chromium/promo-invalid.png differ
diff --git a/tests/__screenshots__/tablet-chromium/promo-loading.png b/tests/__screenshots__/tablet-chromium/promo-loading.png
new file mode 100644
index 0000000..a868427
Binary files /dev/null and b/tests/__screenshots__/tablet-chromium/promo-loading.png differ
diff --git a/tests/__screenshots__/tablet-chromium/promo-missing-code.png b/tests/__screenshots__/tablet-chromium/promo-missing-code.png
new file mode 100644
index 0000000..6ec3817
Binary files /dev/null and b/tests/__screenshots__/tablet-chromium/promo-missing-code.png differ
diff --git a/tests/__screenshots__/tablet-chromium/promo-ok-fallback.png b/tests/__screenshots__/tablet-chromium/promo-ok-fallback.png
new file mode 100644
index 0000000..1d35659
Binary files /dev/null and b/tests/__screenshots__/tablet-chromium/promo-ok-fallback.png differ
diff --git a/tests/__screenshots__/tablet-chromium/promo-ok.png b/tests/__screenshots__/tablet-chromium/promo-ok.png
new file mode 100644
index 0000000..62483df
Binary files /dev/null and b/tests/__screenshots__/tablet-chromium/promo-ok.png differ
diff --git a/tests/__screenshots__/tablet-chromium/promo-spent.png b/tests/__screenshots__/tablet-chromium/promo-spent.png
new file mode 100644
index 0000000..cb08aee
Binary files /dev/null and b/tests/__screenshots__/tablet-chromium/promo-spent.png differ
diff --git a/tests/__screenshots__/tablet-chromium/promo-unavailable.png b/tests/__screenshots__/tablet-chromium/promo-unavailable.png
new file mode 100644
index 0000000..efc8d3b
Binary files /dev/null and b/tests/__screenshots__/tablet-chromium/promo-unavailable.png differ
diff --git a/tests/behavior.spec.mjs b/tests/behavior.spec.mjs
index 6248c0f..3da1859 100644
--- a/tests/behavior.spec.mjs
+++ b/tests/behavior.spec.mjs
@@ -573,3 +573,1374 @@ test.describe('account-merge flow', () => {
     expect(requestedUrl).toContain('code=abc');
   });
 });
+
+const REFERRAL_CODE_ENDPOINT = '**/v1/realunit/referral/code/**';
+
+test.describe('invite and promo landing', () => {
+  test.beforeEach(async ({ page }, testInfo) => {
+    test.skip(testInfo.project.name !== 'desktop-chromium', 'desktop-only invite-flow checks');
+  });
+
+  test('an invite path without a code is invalid and does not call the API', async ({ page }) => {
+    const calls = [];
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) => {
+      calls.push(route.request().url());
+      route.fulfill({ status: 200, contentType: 'application/json', body: '{}' });
+    });
+    await page.goto('/invite/');
+    await expect(page.locator('#state-invalid')).toBeVisible();
+    await expect(page).toHaveTitle('Link ungültig oder abgelaufen');
+    await expect(page.locator('meta[property="og:title"]')).toHaveAttribute(
+      'content',
+      'Link ungültig oder abgelaufen',
+    );
+    await expect(page.locator('meta[name="description"]')).toHaveAttribute(
+      'content',
+      'Dieser Einladungs- oder Promo-Link ist ungültig oder bereits abgelaufen.',
+    );
+    await expect(page.locator('meta[property="og:locale:alternate"]')).toHaveAttribute(
+      'content',
+      'en_GB',
+    );
+    await expect(page.locator('meta[name="theme-color"]')).toHaveAttribute('content', '#E02523');
+    await expect(page.locator('#invalid-home')).toBeVisible();
+    await expect(page.locator('#invalid-home')).toBeFocused();
+    await expect(page.locator('#invalid-home')).toHaveAttribute('href', '/');
+    await expect(page.locator('#invalid-home')).toHaveText('Zur Startseite');
+    expect(calls).toEqual([]);
+    await page.goto('/invite');
+    await expect(page.locator('#state-invalid')).toBeVisible();
+    await page.goto('/promo');
+    await expect(page.locator('#state-invalid')).toBeVisible();
+    expect(calls).toEqual([]);
+  });
+
+  test('a bare /invite?code= looks up the query code', async ({ page }) => {
+    let requestedUrl = null;
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) => {
+      requestedUrl = route.request().url();
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({
+          kind: 'invite',
+          inviterName: 'Björn',
+          inviteeName: 'Alice',
+        }),
+      });
+    });
+    await page.goto('/invite?code=AB12CD');
+    await expect(page.locator('#state-ok')).toBeVisible();
+    expect(requestedUrl).toContain('/v1/realunit/referral/code/AB12CD');
+    await expect(page.locator('#ok-title')).toHaveText('Hey Alice');
+  });
+
+  test('a wrapped {data: {...}} lookup still greets the invitee', async ({ page }) => {
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({
+          data: {
+            kind: 'invite',
+            inviterName: 'Björn',
+            inviteeName: 'Alice',
+          },
+        }),
+      }),
+    );
+    await page.goto('/invite/AB12CD');
+    await expect(page.locator('#state-ok')).toBeVisible();
+    await expect(page.locator('#ok-title')).toHaveText('Hey Alice');
+    await expect(page.locator('#ok-body')).toHaveText('Björn lädt dich ein zu RealUnit.');
+  });
+
+  test('a sibling data object does not hide invite greeting fields', async ({ page }) => {
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({
+          kind: 'invite',
+          inviterName: 'Björn',
+          inviteeName: 'Alice',
+          data: { kind: 'promo', actionText: 'ignore' },
+        }),
+      }),
+    );
+    await page.goto('/invite/AB12CD');
+    await expect(page.locator('#state-ok')).toBeVisible();
+    await expect(page.locator('#ok-title')).toHaveText('Hey Alice');
+    await expect(page.locator('#ok-body')).toHaveText('Björn lädt dich ein zu RealUnit.');
+  });
+
+  test('a successful invite lookup shows the greeting and the custom-scheme CTA', async ({
+    page,
+  }) => {
+    let requestedUrl = null;
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) => {
+      requestedUrl = route.request().url();
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({
+          kind: 'invite',
+          inviterName: 'Björn',
+          inviteeName: 'Alice',
+          actionText: '',
+        }),
+      });
+    });
+    await page.goto('/invite/AB12CD');
+    await expect(page.locator('#state-ok')).toBeVisible();
+    expect(requestedUrl).toContain('/v1/realunit/referral/code/AB12CD');
+    await expect(page.locator('#ok-title')).toHaveText('Hey Alice');
+    await expect(page.locator('#ok-title')).toBeFocused();
+    await expect(page.locator('#ok-body')).toHaveText('Björn lädt dich ein zu RealUnit.');
+    await expect(page.locator('#ok-title')).toHaveAttribute('translate', 'no');
+    await expect(page.locator('#ok-title')).toHaveClass(/notranslate/);
+    await expect(page.locator('#ok-body')).toHaveAttribute('translate', 'no');
+    await expect(page.locator('#ok-body')).toHaveClass(/notranslate/);
+    await expect(page.locator('meta[property="og:title"]')).toHaveAttribute('content', 'Hey Alice');
+    await expect(page.locator('meta[property="og:description"]')).toHaveAttribute(
+      'content',
+      'Björn lädt dich ein zu RealUnit.',
+    );
+    await expect(page.locator('meta[name="description"]')).toHaveAttribute(
+      'content',
+      'Björn lädt dich ein zu RealUnit.',
+    );
+    await expect(page.locator('meta[property="og:locale:alternate"]')).toHaveAttribute(
+      'content',
+      'en_GB',
+    );
+    await expect(page.locator('meta[name="twitter:title"]')).toHaveAttribute(
+      'content',
+      'Hey Alice',
+    );
+    await expect(page.locator('meta[name="twitter:description"]')).toHaveAttribute(
+      'content',
+      'Björn lädt dich ein zu RealUnit.',
+    );
+    await expect(page.locator('meta[property="og:image:alt"]')).toHaveAttribute(
+      'content',
+      'Hey Alice',
+    );
+    await expect(page.locator('meta[name="twitter:image:alt"]')).toHaveAttribute(
+      'content',
+      'Hey Alice',
+    );
+    await expect(page.locator('meta[name="theme-color"]')).toHaveAttribute('content', '#1988C6');
+    await expect(page.locator('meta[property="og:locale"]')).toHaveAttribute('content', 'de_CH');
+    await expect(page.locator('link[rel="canonical"]')).toHaveAttribute(
+      'href',
+      /\/invite\/AB12CD$/,
+    );
+    await expect(page.locator('meta[property="og:url"]')).toHaveAttribute(
+      'content',
+      /\/invite\/AB12CD$/,
+    );
+    await expect(page.locator('meta[property="og:image"]')).toHaveAttribute(
+      'content',
+      'https://realunit.app/assets/og.png',
+    );
+    await expect(page.locator('meta[name="apple-itunes-app"]')).toHaveAttribute(
+      'content',
+      'app-id=6759720010, app-argument=realunit-wallet://invite/AB12CD',
+    );
+    await expect(page.locator('link[rel="alternate"][data-android-app]')).toHaveAttribute(
+      'href',
+      'android-app://swiss.realunit.app/https/realunit.app/invite/AB12CD',
+    );
+    await expect(page.locator('link[rel="alternate"][data-ios-app]')).toHaveAttribute(
+      'href',
+      'ios-app://6759720010/realunit-wallet/invite/AB12CD',
+    );
+    await expect(page.locator('#ok-retap')).toHaveText(/nochmals antippen/);
+    await expect(page.locator('#ok-retap')).toBeHidden();
+    await expect(page.locator('#ok-code')).toHaveText('AB12CD');
+    await expect(page.locator('#ok-code')).toHaveAttribute('role', 'button');
+    await expect(page.locator('#ok-code')).toHaveAttribute('translate', 'no');
+    await expect(page.locator('#ok-code')).toHaveClass(/notranslate/);
+    await expect(page.locator('#ok-code')).toHaveAttribute('lang', 'zxx');
+    await expect(page.locator('#ok-code')).toHaveAttribute('aria-label', /AB12CD/);
+    await expect(page.locator('#ok-code')).toHaveAttribute('aria-describedby', 'ok-code-hint');
+    await expect(page.locator('#state-ok')).toHaveAttribute('role', 'status');
+    await expect(page.locator('#state-ok')).toHaveAttribute('aria-busy', 'false');
+    await expect(page.locator('#ok-copy')).not.toHaveAttribute('aria-live');
+    await expect(page.locator('#ok-copy')).toHaveAttribute('aria-label', /AB12CD/);
+    await expect(page.locator('#ok-code-label')).toHaveText('Dein Code');
+    await expect(page.locator('#ok-copy')).toHaveText('Code kopieren');
+    await expect(page.locator('#ok-copy-link')).toBeVisible();
+    await expect(page.locator('#ok-copy-link')).toHaveText('Link kopieren');
+    await expect(page.locator('#ok-copy-link')).toHaveAttribute(
+      'aria-label',
+      /Link kopieren .*\/invite\/AB12CD$/,
+    );
+    await expect(page.locator('#ok-open')).toBeHidden();
+    await expect(page.locator('#ok-cta')).toBeHidden();
+    await expect(page.locator('#ok-cta')).toHaveAttribute(
+      'href',
+      'realunit-wallet://invite/AB12CD',
+    );
+    await expect(page.locator('a[data-store="play"]')).toHaveAttribute(
+      'href',
+      'https://play.google.com/store/apps/details?id=swiss.realunit.app&referrer=invite%3DAB12CD',
+    );
+    await expect(page.locator('a[data-store="apple"]')).toHaveAttribute(
+      'href',
+      'https://apps.apple.com/ch/app/realunit/id6759720010',
+    );
+  });
+
+  test('copy confirmation includes the code in the live label', async ({ page }) => {
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({
+          kind: 'invite',
+          inviterName: 'Björn',
+          inviteeName: 'Alice',
+        }),
+      }),
+    );
+    await page.goto('/invite/AB12CD');
+    await page.evaluate(() => {
+      Object.defineProperty(navigator, 'clipboard', {
+        configurable: true,
+        value: { writeText: () => Promise.resolve() },
+      });
+    });
+    await expect(page.locator('#state-ok')).toBeVisible();
+    await page.clock.install();
+    await expect(page.locator('#ok-copy')).not.toHaveAttribute('aria-live');
+    await page.locator('#ok-copy').click();
+    await expect(page.locator('#ok-copy')).toHaveText('Kopiert');
+    await expect(page.locator('#ok-copy')).toHaveAttribute('aria-label', /Kopiert AB12CD/);
+    await expect(page.locator('#ok-copy')).not.toHaveAttribute('aria-live');
+    await expect(page.locator('#ok-code-hint')).toHaveText('Kopiert');
+    await expect(page.locator('#ok-code')).toHaveAttribute('aria-label', /Kopiert AB12CD/);
+    await page.clock.fastForward(500);
+    await page.locator('#ok-copy').click();
+    await page.clock.fastForward(1700);
+    await expect(page.locator('#ok-copy')).toHaveText('Kopiert');
+    await page.clock.fastForward(400);
+    await expect(page.locator('#ok-copy')).toHaveText('Code kopieren');
+    await expect(page.locator('#ok-code')).toHaveAttribute('aria-label', /Dein Code AB12CD/);
+    await expect(page.locator('#ok-code-hint')).toHaveText(/Registrierung/);
+  });
+
+  test('failed copy does not announce Kopiert', async ({ page }) => {
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({
+          kind: 'invite',
+          inviterName: 'Björn',
+          inviteeName: 'Alice',
+        }),
+      }),
+    );
+    await page.goto('/invite/AB12CD');
+    await page.evaluate(() => {
+      Object.defineProperty(navigator, 'clipboard', {
+        configurable: true,
+        value: { writeText: () => Promise.reject(new Error('denied')) },
+      });
+      document.execCommand = function () {
+        return false;
+      };
+    });
+    await expect(page.locator('#state-ok')).toBeVisible();
+    await page.locator('#ok-copy').click();
+    await expect(page.locator('#ok-copy')).toHaveText('Code kopieren');
+    await expect(page.locator('#ok-copy')).toHaveClass(/btn-copy-failed/);
+    await expect(page.locator('#ok-code')).toHaveClass(/code-copy-failed/);
+    await expect(page.locator('#ok-copy')).not.toHaveAttribute('aria-live');
+    await expect(page.locator('#ok-code')).toHaveAttribute('aria-label', /Dein Code AB12CD/);
+    await expect(page.locator('#ok-code-hint')).not.toHaveText('Kopiert');
+    await page.locator('#ok-copy-link').click();
+    await expect(page.locator('#ok-copy-link')).toHaveText('Link kopieren');
+    await expect(page.locator('#ok-copy-link')).toHaveClass(/btn-copy-failed/);
+    await expect(page.locator('#ok-copy-link')).not.toHaveAttribute('aria-live');
+  });
+
+  test('ignores a second copy tap while writeText is in flight', async ({ page }) => {
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({
+          kind: 'invite',
+          inviterName: 'Björn',
+          inviteeName: 'Alice',
+        }),
+      }),
+    );
+    await page.goto('/invite/AB12CD');
+    await page.evaluate(() => {
+      window.__copyWrites = 0;
+      Object.defineProperty(navigator, 'clipboard', {
+        configurable: true,
+        value: {
+          writeText: () => {
+            window.__copyWrites += 1;
+            return new Promise(() => {});
+          },
+        },
+      });
+    });
+    await expect(page.locator('#state-ok')).toBeVisible();
+    await page.locator('#ok-copy').click();
+    await expect(page.locator('#ok-copy')).toBeDisabled();
+    await expect(page.locator('#ok-copy')).toHaveAttribute('aria-busy', 'true');
+    await expect(page.locator('#ok-code')).toHaveAttribute('aria-busy', 'true');
+    await expect(page.locator('#ok-code')).toHaveAttribute('aria-disabled', 'true');
+    await page.evaluate(() => document.getElementById('ok-copy').click());
+    await page.evaluate(() => document.getElementById('ok-code').click());
+    expect(await page.evaluate(() => window.__copyWrites)).toBe(1);
+    await expect(page.locator('#ok-copy')).toHaveText('Code kopieren');
+  });
+
+  test('a hung writeText falls back after two seconds so copy is not stuck', async ({ page }) => {
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({
+          kind: 'invite',
+          inviterName: 'Björn',
+          inviteeName: 'Alice',
+        }),
+      }),
+    );
+    await page.goto('/invite/AB12CD');
+    await page.evaluate(() => {
+      window.__copyWrites = 0;
+      Object.defineProperty(navigator, 'clipboard', {
+        configurable: true,
+        value: {
+          writeText: () => {
+            window.__copyWrites += 1;
+            return new Promise(() => {});
+          },
+        },
+      });
+    });
+    await expect(page.locator('#state-ok')).toBeVisible();
+    await page.locator('#ok-copy').click();
+    expect(await page.evaluate(() => window.__copyWrites)).toBe(1);
+    await page.waitForTimeout(2100);
+    await page.locator('#ok-copy').click();
+    expect(await page.evaluate(() => window.__copyWrites)).toBe(2);
+  });
+
+  test('code and link copy can run while the other writeText is in flight', async ({
+    page,
+  }, testInfo) => {
+    test.skip(testInfo.project.name !== 'desktop-chromium', 'copy-link is desktop-only');
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({
+          kind: 'invite',
+          inviterName: 'Björn',
+          inviteeName: 'Alice',
+        }),
+      }),
+    );
+    await page.goto('/invite/AB12CD');
+    await page.evaluate(() => {
+      window.__copyWrites = 0;
+      Object.defineProperty(navigator, 'clipboard', {
+        configurable: true,
+        value: {
+          writeText: () => {
+            window.__copyWrites += 1;
+            return new Promise(() => {});
+          },
+        },
+      });
+    });
+    await expect(page.locator('#state-ok')).toBeVisible();
+    await page.locator('#ok-copy').click();
+    await page.locator('#ok-copy-link').click();
+    expect(await page.evaluate(() => window.__copyWrites)).toBe(2);
+  });
+
+  test('desktop copy-link copies the canonical invite URL', async ({ page }) => {
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({
+          kind: 'invite',
+          inviterName: 'Björn',
+          inviteeName: 'Alice',
+        }),
+      }),
+    );
+    await page.goto('/invite/AB12CD');
+    await page.evaluate(() => {
+      Object.defineProperty(navigator, 'clipboard', {
+        configurable: true,
+        value: { writeText: () => Promise.resolve() },
+      });
+    });
+    await expect(page.locator('#ok-copy-link')).toBeVisible();
+    await expect(page.locator('#ok-copy-link')).toHaveAttribute(
+      'aria-label',
+      /Link kopieren .*\/invite\/AB12CD$/,
+    );
+    await expect(page.locator('#state-ok')).toBeVisible();
+    await page.clock.install();
+    await expect(page.locator('#ok-copy-link')).not.toHaveAttribute('aria-live');
+    await page.locator('#ok-copy-link').click();
+    await expect(page.locator('#ok-copy-link')).toHaveText('Kopiert');
+    await expect(page.locator('#ok-copy-link')).toHaveAttribute(
+      'aria-label',
+      /Kopiert .*\/invite\/AB12CD$/,
+    );
+    await expect(page.locator('#ok-copy-link')).not.toHaveAttribute('aria-live');
+    await expect(page.locator('#ok-code-hint')).toHaveText('Kopiert');
+    await page.clock.fastForward(500);
+    await page.locator('#ok-copy-link').click();
+    await page.clock.fastForward(1700);
+    await expect(page.locator('#ok-copy-link')).toHaveText('Kopiert');
+    await page.clock.fastForward(400);
+    await expect(page.locator('#ok-copy-link')).toHaveText('Link kopieren');
+  });
+
+  test('iOS shows the re-tap hint after a successful lookup', async ({ page }) => {
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({
+          kind: 'invite',
+          inviterName: 'Björn',
+          inviteeName: 'Alice',
+        }),
+      }),
+    );
+    await forcePlatform(page, 'ios');
+    await page.goto('/invite/AB12CD');
+    await expect(page.locator('#state-ok')).toBeVisible();
+    await expect(page.locator('#ok-retap')).toBeVisible();
+    await expect(page.locator('#ok-code-box').locator('#ok-retap')).toBeVisible();
+    await expect(page.locator('#ok-copy-link')).toBeHidden();
+    await expect(page.locator('#ok-retap')).toHaveAttribute('role', 'note');
+    await expect(page.locator('#ok-retap')).toHaveText(/Code unten kopieren/);
+    await expect(page.locator('#ok-cta')).toBeVisible();
+    await expect(page.locator('#ok-cta')).toHaveAttribute('aria-describedby', 'ok-retap');
+    await expect(page.locator('a[data-store="apple"]')).toHaveAttribute('aria-current', 'true');
+    await expect(page.locator('a[data-store="play"]')).not.toHaveAttribute('aria-current');
+    await expect(page.locator('#ok-code')).toHaveText('AB12CD');
+    await expect(page.locator('#ok-code-hint')).toHaveText(/Registrierung/);
+  });
+
+  test('App Store tap copies the code for iOS install handoff', async ({ page }) => {
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({
+          kind: 'invite',
+          inviterName: 'Björn',
+          inviteeName: 'Alice',
+        }),
+      }),
+    );
+    await forcePlatform(page, 'ios');
+    await page.goto('/invite/AB12CD');
+    await page.evaluate(() => {
+      Object.defineProperty(navigator, 'clipboard', {
+        configurable: true,
+        value: { writeText: () => Promise.resolve() },
+      });
+    });
+    await expect(page.locator('#state-ok')).toBeVisible();
+    page.on('popup', (popup) => popup.close());
+    await page.locator('a[data-store="apple"]').click();
+    await expect(page.locator('#ok-copy')).toHaveText('Kopiert');
+    await expect(page.locator('#ok-code-hint')).toHaveText('Kopiert');
+  });
+
+  test('an invalid lookup does not copy the code on an App Store tap', async ({ page }) => {
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({ status: 404, contentType: 'application/json', body: '{}' }),
+    );
+    await page.goto('/invite/NOPE');
+    await page.evaluate(() => {
+      Object.defineProperty(navigator, 'clipboard', {
+        configurable: true,
+        value: { writeText: () => Promise.resolve() },
+      });
+    });
+    await expect(page.locator('#state-invalid')).toBeVisible();
+    page.on('popup', (popup) => popup.close());
+    await page.locator('a[data-store="apple"]').click();
+    await expect(page.locator('#ok-copy')).toHaveText('Code kopieren');
+    await expect(page.locator('#ok-code-hint')).not.toHaveText('Kopiert');
+  });
+
+  test('iOS re-tap hint is visible while lookup is in flight', async ({ page }) => {
+    let release;
+    const gate = new Promise((resolve) => {
+      release = resolve;
+    });
+    await page.route(REFERRAL_CODE_ENDPOINT, async (route) => {
+      await gate;
+      await route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({
+          kind: 'invite',
+          inviterName: 'Björn',
+          inviteeName: 'Alice',
+        }),
+      });
+    });
+    await forcePlatform(page, 'ios');
+    await page.goto('/invite/AB12CD');
+    await expect(page.locator('#ok-code-box')).toBeVisible();
+    await expect(page.locator('#ok-open')).toBeHidden();
+    await expect(page.locator('#ok-retap')).toBeVisible();
+    await expect(page.locator('#ok-cta')).toBeHidden();
+    release();
+    await expect(page.locator('#ok-cta')).toBeVisible();
+    await expect(page.locator('#ok-retap')).toBeVisible();
+  });
+
+  test('Android hides the re-tap hint (Play Install Referrer keeps the code)', async ({ page }) => {
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({ kind: 'promo', actionText: '20 REALU extra' }),
+      }),
+    );
+    await forcePlatform(page, 'android');
+    await page.goto('/promo/EVT1');
+    await expect(page.locator('#state-ok')).toBeVisible();
+    await expect(page.locator('#ok-pitch')).toHaveText(/Promo-Code/);
+    await expect(page.locator('#ok-retap')).toBeHidden();
+    await expect(page.locator('#ok-copy-link')).toBeHidden();
+    await expect(page.locator('#ok-cta')).toBeVisible();
+    await expect(page.locator('#ok-cta')).not.toHaveAttribute('aria-describedby');
+    await expect(page.locator('a[data-store="play"]')).toHaveAttribute('aria-current', 'true');
+    await expect(page.locator('a[data-store="apple"]')).not.toHaveAttribute('aria-current');
+    await expect(page.locator('#ok-cta')).toHaveAttribute(
+      'href',
+      /intent:\/\/realunit\.app\/promo\/EVT1#Intent;scheme=https;package=swiss\.realunit\.app/,
+    );
+    await expect(page.locator('#ok-code')).toHaveAttribute('aria-label', /EVT1/);
+    await expect(page.locator('#ok-copy')).not.toHaveAttribute('aria-live');
+    await expect(page.locator('#ok-copy')).toHaveAttribute('aria-label', /EVT1/);
+  });
+
+  test('CTA stays hidden until lookup finishes', async ({ page }) => {
+    let release;
+    const gate = new Promise((resolve) => {
+      release = resolve;
+    });
+    await page.route(REFERRAL_CODE_ENDPOINT, async (route) => {
+      await gate;
+      await route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({
+          kind: 'invite',
+          inviterName: 'Björn',
+          inviteeName: 'Alice',
+        }),
+      });
+    });
+    await page.goto('/invite/AB12CD');
+    await expect(page.locator('#ok-code-box')).toBeVisible();
+    await expect(page.locator('#ok-open')).toBeHidden();
+    await expect(page.locator('#ok-copy-link')).toBeVisible();
+    await expect(page.locator('#ok-desktop')).toBeVisible();
+    await expect(page.locator('#ok-desktop')).toHaveText(/Smartphone/);
+    await expect(page.locator('#ok-pitch')).toBeVisible();
+    await expect(page.locator('#ok-pitch')).toHaveText(/Aktionärin/);
+    await expect(page.locator('#ok-retap')).toBeHidden();
+    await expect(page.locator('#state-loading')).toBeHidden();
+    await expect(page.locator('#ok-code-hint')).toHaveText('Code wird geprüft…');
+    await expect(page).toHaveTitle('Einladung wird geladen…');
+    await expect(page.locator('meta[property="og:title"]')).toHaveAttribute(
+      'content',
+      'Einladung wird geladen…',
+    );
+    await expect(page.locator('meta[name="description"]')).toHaveAttribute(
+      'content',
+      'Einen Moment bitte.',
+    );
+    await expect(page.locator('#ok-code-hint')).toHaveAttribute('role', 'status');
+    await expect(page.locator('#ok-code-hint')).toHaveAttribute('aria-live', 'polite');
+    await expect(page.locator('#ok-code-hint')).toHaveAttribute('aria-busy', 'true');
+    await expect(page.locator('a[data-store="play"]')).toHaveAttribute(
+      'href',
+      /referrer=invite%3DAB12CD/,
+    );
+    await expect(page.locator('meta[name="apple-itunes-app"]')).toHaveAttribute(
+      'content',
+      'app-id=6759720010, app-argument=realunit-wallet://invite/AB12CD',
+    );
+    await expect(page.locator('link[rel="alternate"][data-android-app]')).toHaveAttribute(
+      'href',
+      'android-app://swiss.realunit.app/https/realunit.app/invite/AB12CD',
+    );
+    release();
+    await expect(page.locator('#state-ok')).toBeVisible();
+    await expect(page).toHaveTitle('RealUnit — Einladung');
+    await expect(page.locator('#ok-open')).toBeHidden();
+    await expect(page.locator('#ok-cta')).toBeHidden();
+    await expect(page.locator('#ok-code-hint')).toHaveText(/Registrierung/);
+    await expect(page.locator('#ok-code-hint')).toHaveAttribute('aria-busy', 'false');
+  });
+
+  test('a 404 invite is invalid; a 500 is unavailable', async ({ page }) => {
+    let status = 404;
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({ status, contentType: 'application/json', body: '{}' }),
+    );
+    await page.goto('/invite/NOPE');
+    await expect(page.locator('#state-invalid')).toBeVisible();
+    await expect(page).toHaveTitle('Link ungültig oder abgelaufen');
+    await expect(page.locator('meta[name="description"]')).toHaveAttribute(
+      'content',
+      'Dieser Einladungs- oder Promo-Link ist ungültig oder bereits abgelaufen.',
+    );
+    await expect(page.locator('#invalid-home')).toBeFocused();
+    await expect(page.locator('#invalid-home')).toHaveCSS('outline-color', 'rgb(25, 136, 198)');
+    await expect(page.locator('#invalid-home')).toBeVisible();
+    await expect(page.locator('#invalid-home')).toHaveAttribute('href', '/');
+    await expect(page.locator('#invalid-title')).toHaveCSS('color', 'rgb(224, 37, 35)');
+    await expect(page.locator('#invalid-body')).toHaveCSS('color', 'rgb(224, 37, 35)');
+    await expect(page.locator('meta[name="theme-color"]')).toHaveAttribute('content', '#E02523');
+    await expect(page.locator('#invalid-status')).toHaveAttribute('role', 'status');
+    await expect(page.locator('#invalid-status')).toHaveAttribute('aria-live', 'assertive');
+    await expect(page.locator('#invalid-status #invalid-home')).toHaveCount(0);
+    await expect(page.locator('#ok-code-box')).toBeHidden();
+    await expect(page.locator('meta[name="apple-itunes-app"]')).toHaveAttribute(
+      'content',
+      'app-id=6759720010',
+    );
+    await expect(page.locator('a[data-store="play"]')).toHaveAttribute(
+      'href',
+      'https://play.google.com/store/apps/details?id=swiss.realunit.app',
+    );
+    await expect(page.locator('a[data-store="play"]')).not.toHaveAttribute('href', /referrer=/);
+    status = 500;
+    await page.goto('/invite/NOPE');
+    await expect(page.locator('#state-unavailable')).toBeVisible();
+    await expect(page).toHaveTitle('Dienst vorübergehend nicht erreichbar');
+    await expect(page.locator('meta[name="description"]')).toHaveAttribute(
+      'content',
+      'Wir konnten den Code gerade nicht prüfen. Bitte versuche es später erneut.',
+    );
+    await expect(page.locator('#unavailable-status')).toHaveAttribute('role', 'status');
+    await expect(page.locator('#unavailable-status')).toHaveAttribute('aria-live', 'polite');
+    await expect(page.locator('#state-unavailable')).toHaveAttribute('aria-busy', 'false');
+    await expect(page.locator('#unavailable-status #unavailable-cta')).toHaveCount(0);
+    await expect(page.locator('#unavailable-status #unavailable-home')).toHaveCount(0);
+    await expect(page.locator('#unavailable-cta')).toHaveAttribute(
+      'aria-describedby',
+      'unavailable-body',
+    );
+    await expect(page.locator('#unavailable-cta')).toBeFocused();
+    await expect(page.locator('#unavailable-cta')).toHaveCSS('outline-color', 'rgb(25, 136, 198)');
+    await expect(page.locator('#unavailable-home')).toBeVisible();
+    await expect(page.locator('#unavailable-home')).toHaveAttribute('href', '/');
+    await expect(page.locator('#unavailable-home')).toHaveText('Zur Startseite');
+    await expect(page.locator('meta[name="theme-color"]')).toHaveAttribute('content', '#1988C6');
+    await expect(page.locator('#ok-code-box')).toBeVisible();
+    await expect(page.locator('#ok-code')).toHaveText('NOPE');
+    await expect(page.locator('#ok-open')).toBeHidden();
+    await expect(page.locator('#ok-pitch')).toHaveText(/Aktionärin/);
+    await expect(page.locator('#ok-cta')).toHaveAttribute('href', 'realunit-wallet://invite/NOPE');
+    await expect(page.locator('a[data-store="apple"]')).toBeVisible();
+    await expect(page.locator('a[data-store="play"]')).toHaveAttribute(
+      'href',
+      /referrer=invite%3DNOPE/,
+    );
+  });
+
+  test('a NestJS unmounted-route 404 is unavailable, not expired', async ({ page }) => {
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({
+        status: 404,
+        contentType: 'application/json',
+        body: JSON.stringify({
+          statusCode: 404,
+          message: 'Cannot GET /v1/realunit/referral/code/TEST',
+          error: 'Not Found',
+        }),
+      }),
+    );
+    await page.goto('/invite/TEST');
+    await expect(page.locator('#state-unavailable')).toBeVisible();
+    await expect(page.locator('#state-invalid')).toBeHidden();
+  });
+
+  test('unavailable retry looks up again without a reload', async ({ page }) => {
+    let calls = 0;
+    let releaseSecond;
+    const second = new Promise((resolve) => {
+      releaseSecond = resolve;
+    });
+    await page.route(REFERRAL_CODE_ENDPOINT, async (route) => {
+      calls += 1;
+      if (calls === 1) {
+        await route.fulfill({
+          status: 500,
+          contentType: 'application/json',
+          body: '{}',
+        });
+        return;
+      }
+      await second;
+      await route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({
+          kind: 'invite',
+          inviterName: 'Björn',
+          inviteeName: 'Alice',
+        }),
+      });
+    });
+    await page.goto('/invite/AB12CD');
+    await expect(page.locator('#state-unavailable')).toBeVisible();
+    await expect(page.locator('#unavailable-cta')).toBeFocused();
+    await page.locator('#unavailable-cta').click();
+    await expect(page.locator('#state-unavailable')).toBeVisible();
+    await expect(page.locator('#unavailable-cta')).toBeDisabled();
+    await expect(page.locator('#unavailable-cta')).toHaveAttribute('aria-busy', 'true');
+    await expect(page.locator('#ok-code-box')).toBeVisible();
+    releaseSecond();
+    await expect(page.locator('#state-ok')).toBeVisible();
+    await expect(page.locator('#ok-title')).toHaveText(/Alice/);
+    await expect(page.locator('#ok-title')).toBeFocused();
+    expect(calls).toBe(2);
+  });
+
+  test('unavailable retry ignores a second tap while lookup is in flight', async ({ page }) => {
+    let calls = 0;
+    await page.route(REFERRAL_CODE_ENDPOINT, async (route) => {
+      calls += 1;
+      if (calls === 1) {
+        await route.fulfill({
+          status: 500,
+          contentType: 'application/json',
+          body: '{}',
+        });
+        return;
+      }
+      await new Promise(() => {});
+    });
+    await page.goto('/invite/AB12CD');
+    await expect(page.locator('#state-unavailable')).toBeVisible();
+    await expect(page.locator('#unavailable-cta')).toBeEnabled();
+    await page.evaluate(() => {
+      const btn = document.getElementById('unavailable-cta');
+      btn.click();
+      btn.click();
+    });
+    await expect(page.locator('#state-unavailable')).toBeVisible();
+    await expect(page.locator('#unavailable-cta')).toBeDisabled();
+    await expect(page.locator('#unavailable-cta')).toHaveAttribute('aria-busy', 'true');
+    expect(calls).toBe(2);
+  });
+
+  test('unavailable retry that still fails returns focus to retry', async ({ page }) => {
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({
+        status: 500,
+        contentType: 'application/json',
+        body: '{}',
+      }),
+    );
+    await page.goto('/invite/AB12CD');
+    await expect(page.locator('#state-unavailable')).toBeVisible();
+    await expect(page.locator('#unavailable-cta')).toBeFocused();
+    await page.locator('#unavailable-cta').click();
+    await expect(page.locator('#state-unavailable')).toBeVisible();
+    await expect(page.locator('#unavailable-cta')).toBeFocused();
+  });
+
+  test('409, 410 and 422 lookups are invalid', async ({ page }) => {
+    let status = 409;
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({ status, contentType: 'application/json', body: '{}' }),
+    );
+    await page.goto('/invite/USED');
+    await expect(page.locator('#state-invalid')).toBeVisible();
+    status = 410;
+    await page.goto('/invite/GONE');
+    await expect(page.locator('#state-invalid')).toBeVisible();
+    status = 422;
+    await page.goto('/promo/BAD');
+    await expect(page.locator('#state-invalid')).toBeVisible();
+  });
+
+  test('a percent-encoded invite path is looked up decoded', async ({ page }) => {
+    let requestedUrl = null;
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) => {
+      requestedUrl = route.request().url();
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({
+          kind: 'invite',
+          inviterName: 'Björn',
+          inviteeName: 'Alice',
+        }),
+      });
+    });
+    await page.goto('/invite/AB%2F12');
+    await expect(page.locator('#state-ok')).toBeVisible();
+    expect(requestedUrl).toContain('/v1/realunit/referral/code/AB%2F12');
+    await expect(page.locator('#ok-cta')).toHaveAttribute(
+      'href',
+      'realunit-wallet://invite/AB%2F12',
+    );
+  });
+
+  test('a blank inviter name uses the fallback body', async ({ page }) => {
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({
+          kind: 'invite',
+          inviterName: '   ',
+          inviteeName: 'Alice',
+        }),
+      }),
+    );
+    await page.goto('/invite/AB12CD');
+    await expect(page.locator('#ok-title')).toHaveText('Hey Alice');
+    await expect(page.locator('#ok-title')).toHaveAttribute('translate', 'no');
+    await expect(page.locator('#ok-body')).toHaveText('Du bist zu RealUnit eingeladen.');
+    await expect(page.locator('#ok-body')).not.toHaveAttribute('translate');
+  });
+
+  test('a blank invitee name uses the fallback title', async ({ page }) => {
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({
+          kind: 'invite',
+          inviterName: 'Björn',
+          inviteeName: '   ',
+        }),
+      }),
+    );
+    await page.goto('/invite/AB12CD');
+    await expect(page.locator('#ok-title')).toHaveText('Du bist eingeladen');
+    await expect(page.locator('#ok-title')).not.toHaveAttribute('translate');
+    await expect(page.locator('#ok-body')).toHaveText('Björn lädt dich ein zu RealUnit.');
+    await expect(page.locator('#ok-body')).toHaveAttribute('translate', 'no');
+  });
+
+  test('a promo path without kind still uses promo copy', async ({ page }) => {
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({ actionText: '20 REALU extra' }),
+      }),
+    );
+    await page.goto('/promo/EVT1');
+    await expect(page.locator('#ok-title')).toHaveText('Promo-Code');
+    await expect(page.locator('#ok-title')).not.toHaveAttribute('translate');
+    await expect(page.locator('#ok-body')).toHaveText('20 REALU extra');
+    await expect(page.locator('#ok-body')).toHaveAttribute('translate', 'no');
+  });
+
+  test('an invite path with campaign text and no kind still renders as promo', async ({ page }) => {
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({ actionText: '20 REALU extra' }),
+      }),
+    );
+    await page.goto('/invite/EVT1');
+    await expect(page.locator('#ok-title')).toHaveText('Promo-Code');
+    await expect(page.locator('#ok-body')).toHaveText('20 REALU extra');
+  });
+
+  test('a promo path renders the API action text 1:1', async ({ page }) => {
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({ kind: 'promo', actionText: '20 REALU extra' }),
+      }),
+    );
+    await page.goto('/promo/EVT1');
+    await expect(page.locator('#ok-body')).toHaveText('20 REALU extra');
+    await expect(page.locator('a[data-store="play"]')).toHaveAttribute(
+      'href',
+      'https://play.google.com/store/apps/details?id=swiss.realunit.app&referrer=promo%3DEVT1',
+    );
+  });
+
+  test('a promo path with lang=en prefers campaignTextEn', async ({ page }) => {
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({
+          kind: 'Promo',
+          actionText: 'DE Aktion',
+          campaignTextEn: 'EN campaign',
+        }),
+      }),
+    );
+    await page.goto('/promo/EVT1?lang=en');
+    await expect(page.locator('#ok-body')).toHaveText('EN campaign');
+    await expect(page.locator('#ok-body')).not.toHaveAttribute('lang');
+  });
+
+  test('an English landing marks German promo fallback with lang=de', async ({ page }) => {
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({ kind: 'promo', actionText: 'DE Aktion' }),
+      }),
+    );
+    await page.goto('/promo/EVT1?lang=en');
+    await expect(page.locator('#ok-body')).toHaveText('DE Aktion');
+    await expect(page.locator('#ok-body')).toHaveAttribute('lang', 'de');
+  });
+
+  test('an English invite landing uses the inviter greeting, not leftover actionText', async ({
+    page,
+  }) => {
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({
+          kind: 'invite',
+          inviterName: 'Björn',
+          inviteeName: 'Alice',
+          actionText: 'DE action',
+          actionTextEn: 'EN action',
+        }),
+      }),
+    );
+    await page.goto('/invite/AB12CD?lang=en');
+    await expect(page.locator('#ok-body')).toHaveText('Björn is inviting you to RealUnit.');
+    await expect(page.locator('#ok-body')).not.toHaveAttribute('lang');
+  });
+
+  test('an English invite landing ignores leftover German actionText', async ({ page }) => {
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({
+          kind: 'invite',
+          inviterName: 'Björn',
+          inviteeName: 'Alice',
+          actionText: 'DE action',
+        }),
+      }),
+    );
+    await page.goto('/invite/AB12CD?lang=en');
+    await expect(page.locator('#ok-body')).toHaveText('Björn is inviting you to RealUnit.');
+    await expect(page.locator('#ok-body')).not.toHaveAttribute('lang');
+  });
+
+  test('a promo payload without action text uses the fallback body', async ({ page }) => {
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify({ kind: 'promo' }),
+      }),
+    );
+    await page.goto('/promo/EVT1');
+    await expect(page.locator('#ok-body')).toHaveText(
+      'Öffne die App, um den Promo-Code zu übernehmen.',
+    );
+  });
+
+  test('Smart App Banner skips a foreign code= and uses a later invite=', async ({ page }) => {
+    await page.route('**/invite/invite.js', (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/javascript',
+        body: '',
+      }),
+    );
+    await page.goto('/invite?code=https://example.com/foo&invite=AB12CD&mock=1');
+    await expect(page.locator('meta[name="apple-itunes-app"]')).toHaveAttribute(
+      'content',
+      'app-id=6759720010, app-argument=realunit-wallet://invite/AB12CD',
+    );
+  });
+
+  test('Smart App Banner skips a foreign nested code= inside utm_content', async ({ page }) => {
+    await page.route('**/invite/invite.js', (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/javascript',
+        body: '',
+      }),
+    );
+    await page.goto(
+      '/invite?utm_content=' +
+        encodeURIComponent(
+          'https://realunit.app/invite?code=https://example.com/foo&invite=AB12CD',
+        ) +
+        '&mock=1',
+    );
+    await expect(page.locator('meta[name="apple-itunes-app"]')).toHaveAttribute(
+      'content',
+      'app-id=6759720010, app-argument=realunit-wallet://invite/AB12CD',
+    );
+  });
+
+  test('Smart App Banner skips a campaign utm_content and uses a later wrapper key', async ({
+    page,
+  }) => {
+    await page.route('**/invite/invite.js', (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/javascript',
+        body: '',
+      }),
+    );
+    await page.goto(
+      '/invite?utm_content=summer-sale&link=' +
+        encodeURIComponent('https://realunit.app/invite/AB12CD') +
+        '&mock=1',
+    );
+    await expect(page.locator('meta[name="apple-itunes-app"]')).toHaveAttribute(
+      'content',
+      'app-id=6759720010, app-argument=realunit-wallet://invite/AB12CD',
+    );
+  });
+
+  test('Smart App Banner unwraps email link= and ios-app utm_content', async ({ page }) => {
+    await page.route('**/invite/invite.js', (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/javascript',
+        body: '',
+      }),
+    );
+    await page.goto(
+      '/invite?link=' + encodeURIComponent('https://realunit.app/invite/AB12CD') + '&mock=1',
+    );
+    await expect(page.locator('meta[name="apple-itunes-app"]')).toHaveAttribute(
+      'content',
+      'app-id=6759720010, app-argument=realunit-wallet://invite/AB12CD',
+    );
+    await page.goto(
+      '/invite?utm_content=' + encodeURIComponent('ios-app://6759720010/invite/AB12CD') + '&mock=1',
+    );
+    await expect(page.locator('meta[name="apple-itunes-app"]')).toHaveAttribute(
+      'content',
+      'app-id=6759720010, app-argument=realunit-wallet://invite/AB12CD',
+    );
+    await page.goto('/invite?link=hello&mock=1');
+    await expect(page.locator('meta[name="apple-itunes-app"]')).toHaveAttribute(
+      'content',
+      'app-id=6759720010',
+    );
+  });
+
+  test('Smart App Banner carries the code before invite.js runs', async ({ page }) => {
+    await page.route('**/invite/invite.js', (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/javascript',
+        body: '',
+      }),
+    );
+    await page.goto('/invite/AB12CD?mock=1');
+    await expect(page.locator('script[src="/js/invite-banner.js"]')).toHaveCount(1);
+    await expect(page.locator('meta[name="format-detection"]')).toHaveAttribute(
+      'content',
+      'telephone=no, date=no',
+    );
+    await expect(page.locator('#ok-code')).toHaveAttribute('x-apple-data-detectors', 'false');
+    await expect(page.locator('#ok-body')).toHaveAttribute('x-apple-data-detectors', 'false');
+    await expect(page.locator('meta[name="apple-itunes-app"]')).toHaveAttribute(
+      'content',
+      'app-id=6759720010, app-argument=realunit-wallet://invite/AB12CD',
+    );
+    await page.goto('/promo/EVT1?mock=1');
+    await expect(page.locator('meta[name="apple-itunes-app"]')).toHaveAttribute(
+      'content',
+      'app-id=6759720010, app-argument=realunit-wallet://promo/EVT1',
+    );
+  });
+
+  test('without the head banner script the HTML already carries app-argument', async ({ page }) => {
+    await page.route('**/js/invite-banner.js', (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/javascript',
+        body: '',
+      }),
+    );
+    await page.route('**/invite/invite.js', (route) =>
+      route.fulfill({
+        status: 200,
+        contentType: 'application/javascript',
+        body: '',
+      }),
+    );
+    await page.goto('/invite/AB12CD?mock=1');
+    await expect(page.locator('meta[name="apple-itunes-app"]')).toHaveAttribute(
+      'content',
+      'app-id=6759720010, app-argument=realunit-wallet://invite/AB12CD',
+    );
+    await expect(page.locator('link[rel="canonical"]')).toHaveAttribute(
+      'href',
+      /\/invite\/AB12CD$/,
+    );
+    await expect(page.locator('meta[property="og:url"]')).toHaveAttribute(
+      'content',
+      /\/invite\/AB12CD$/,
+    );
+    await expect(page.locator('a[data-store="play"]')).toHaveAttribute(
+      'href',
+      /referrer=invite%3DAB12CD/,
+    );
+    await expect(page.locator('link[rel="alternate"][data-android-app]')).toHaveAttribute(
+      'href',
+      'android-app://swiss.realunit.app/https/realunit.app/invite/AB12CD',
+    );
+    await expect(page.locator('link[rel="alternate"][data-ios-app]')).toHaveAttribute(
+      'href',
+      'ios-app://6759720010/realunit-wallet/invite/AB12CD',
+    );
+    await expect(page.locator('meta[name="twitter:url"]')).toHaveAttribute(
+      'content',
+      /\/invite\/AB12CD$/,
+    );
+    await expect(page.locator('meta[property="og:site_name"]')).toHaveAttribute(
+      'content',
+      'RealUnit',
+    );
+    await expect(page.locator('meta[property="og:title"]')).toHaveAttribute(
+      'content',
+      'RealUnit — Einladung AB12CD',
+    );
+    await expect(page.locator('meta[name="twitter:title"]')).toHaveAttribute(
+      'content',
+      'RealUnit — Einladung AB12CD',
+    );
+    await expect(page.locator('meta[property="og:image:alt"]')).toHaveAttribute(
+      'content',
+      'RealUnit — Einladung AB12CD',
+    );
+    await expect(page.locator('meta[name="twitter:image:alt"]')).toHaveAttribute(
+      'content',
+      'RealUnit — Einladung AB12CD',
+    );
+    await expect(page.locator('meta[property="og:description"]')).toHaveAttribute(
+      'content',
+      'Öffne die RealUnit-App mit dem Code AB12CD.',
+    );
+    await expect(page.locator('meta[name="twitter:description"]')).toHaveAttribute(
+      'content',
+      'Öffne die RealUnit-App mit dem Code AB12CD.',
+    );
+    await expect(page.locator('meta[name="description"]')).toHaveAttribute(
+      'content',
+      'Öffne die RealUnit-App mit dem Code AB12CD.',
+    );
+    await expect(page.locator('meta[property="al:ios:url"]')).toHaveAttribute(
+      'content',
+      'realunit-wallet://invite/AB12CD',
+    );
+    await expect(page.locator('meta[property="al:ios:app_store_id"]')).toHaveAttribute(
+      'content',
+      '6759720010',
+    );
+    await expect(page.locator('meta[property="al:android:package"]')).toHaveAttribute(
+      'content',
+      'swiss.realunit.app',
+    );
+    await expect(page.locator('meta[property="al:android:class"]')).toHaveAttribute(
+      'content',
+      'swiss.realunit.app.MainActivity',
+    );
+    await expect(page.locator('meta[property="al:android:url"]')).toHaveAttribute(
+      'content',
+      'realunit-wallet://invite/AB12CD',
+    );
+    await expect(page.locator('meta[property="al:web:url"]')).toHaveAttribute(
+      'content',
+      /\/invite\/AB12CD$/,
+    );
+    await expect(page.locator('meta[name="twitter:app:url:iphone"]')).toHaveAttribute(
+      'content',
+      'realunit-wallet://invite/AB12CD',
+    );
+    await expect(page.locator('meta[name="twitter:app:id:iphone"]')).toHaveAttribute(
+      'content',
+      '6759720010',
+    );
+    await expect(page.locator('meta[name="twitter:app:url:googleplay"]')).toHaveAttribute(
+      'content',
+      'realunit-wallet://invite/AB12CD',
+    );
+    await expect(page.locator('meta[name="twitter:app:id:googleplay"]')).toHaveAttribute(
+      'content',
+      'swiss.realunit.app',
+    );
+    await expect(page.locator('meta[name="twitter:app:country"]')).toHaveAttribute('content', 'CH');
+    await page.goto('/invite/AB12CD?mock=1&lang=en');
+    await expect(page.locator('html')).toHaveAttribute('lang', 'en');
+    await expect(page.locator('meta[property="og:locale"]')).toHaveAttribute('content', 'en_GB');
+    await expect(page.locator('meta[property="og:title"]')).toHaveAttribute(
+      'content',
+      'RealUnit — Invitation AB12CD',
+    );
+    await expect(page.locator('meta[property="og:image:alt"]')).toHaveAttribute(
+      'content',
+      'RealUnit — Invitation AB12CD',
+    );
+    await expect(page.locator('meta[property="og:description"]')).toHaveAttribute(
+      'content',
+      'Open the RealUnit app with code AB12CD.',
+    );
+  });
+
+  test('?mock=1 does not call the API and greets the invitee', async ({ page }) => {
+    const calls = [];
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) => {
+      calls.push(route.request().url());
+      route.fulfill({ status: 500, contentType: 'application/json', body: '{}' });
+    });
+    await page.goto('/invite/AB12CD?mock=1');
+    await expect(page.locator('#state-ok')).toBeVisible();
+    await expect(page.locator('#ok-title')).toHaveText('Hey Alice');
+    expect(calls).toEqual([]);
+  });
+
+  test('?mock=fallback uses nameless invite and promo copy without calling the API', async ({
+    page,
+  }) => {
+    const calls = [];
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) => {
+      calls.push(route.request().url());
+      route.fulfill({ status: 200, contentType: 'application/json', body: '{}' });
+    });
+    await page.goto('/invite/AB12CD?mock=fallback');
+    await expect(page.locator('#state-ok')).toBeVisible();
+    await expect(page.locator('#ok-title')).toHaveText('Du bist eingeladen');
+    await expect(page.locator('#ok-body')).toHaveText('Du bist zu RealUnit eingeladen.');
+    await page.goto('/promo/EVT1?mock=fallback');
+    await expect(page.locator('#state-ok')).toBeVisible();
+    await expect(page.locator('#ok-title')).toHaveText('Promo-Code');
+    await expect(page.locator('#ok-body')).toHaveText(
+      'Öffne die App, um den Promo-Code zu übernehmen.',
+    );
+    expect(calls).toEqual([]);
+  });
+
+  test('?mock=loading stays on the loading state and does not call the API', async ({ page }) => {
+    const calls = [];
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) => {
+      calls.push(route.request().url());
+      route.fulfill({ status: 200, contentType: 'application/json', body: '{}' });
+    });
+    await page.goto('/invite/AB12CD?mock=loading');
+    await expect(page.locator('#state-loading')).toBeVisible();
+    await expect(page.locator('#loading-title')).toHaveText('Einladung wird geladen…');
+    await page.goto('/promo/EVT1?mock=loading');
+    await expect(page.locator('#state-loading')).toBeVisible();
+    await expect(page.locator('#loading-title')).toHaveText('Promo-Code wird geladen…');
+    expect(calls).toEqual([]);
+  });
+
+  test('?mock=spent shows already-used copy without calling the API', async ({ page }) => {
+    const calls = [];
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) => {
+      calls.push(route.request().url());
+      route.fulfill({ status: 200, contentType: 'application/json', body: '{}' });
+    });
+    await page.goto('/invite/AB12CD?mock=spent');
+    await expect(page.locator('#state-invalid')).toBeVisible();
+    await expect(page.locator('#invalid-title')).toHaveText('Code bereits eingelöst');
+    await expect(page.locator('#invalid-body')).toHaveText(/bereits verwendet/);
+    await page.goto('/invite/AB12CD?mock=spent&lang=en');
+    await expect(page.locator('#invalid-title')).toHaveText('Code already used');
+    await page.goto('/promo/EVT1?mock=spent&lang=de');
+    await expect(page.locator('#state-invalid')).toBeVisible();
+    await expect(page.locator('#invalid-title')).toHaveText('Code bereits eingelöst');
+    await expect(page.locator('#invalid-body')).toHaveText(/bereits verwendet/);
+    expect(calls).toEqual([]);
+  });
+
+  test('?mock=invalid and ?mock=unavailable skip the API', async ({ page }) => {
+    const calls = [];
+    await page.route(REFERRAL_CODE_ENDPOINT, (route) => {
+      calls.push(route.request().url());
+      route.fulfill({ status: 200, contentType: 'application/json', body: '{}' });
+    });
+    await page.goto('/invite/AB12CD?mock=invalid');
+    await expect(page.locator('#state-invalid')).toBeVisible();
+    await expect(page.locator('#invalid-home')).toHaveText('Zur Startseite');
+    await page.goto('/invite/AB12CD?mock=invalid&lang=en');
+    await expect(page.locator('#invalid-home')).toHaveText('Back to homepage');
+    await expect(page.locator('#invalid-home')).toHaveAttribute('href', '/');
+    await page.goto('/promo/EVT1?mock=unavailable');
+    await expect(page.locator('#state-unavailable')).toBeVisible();
+    await expect(page.locator('#unavailable-home')).toHaveText('Zur Startseite');
+    await page.goto('/promo/EVT1?mock=unavailable&lang=en');
+    await expect(page.locator('#unavailable-home')).toHaveText('Back to homepage');
+    await expect(page.locator('#unavailable-home')).toHaveAttribute('href', '/');
+    expect(calls).toEqual([]);
+  });
+
+  test('promo mock copy includes the 200 REALU first-purchase floor', async ({ page }) => {
+    await page.goto('/promo/EVT1?mock=1');
+    await expect(page.locator('#ok-body')).toHaveText(/mindestens 200 RealUnit-Aktientoken/);
+    await expect(page.locator('#ok-body')).toHaveText(/begrenzt auf 100 Einlösungen/);
+  });
+
+  test('promo mock with lang=en uses campaignTextEn', async ({ page }) => {
+    await page.goto('/promo/EVT1?mock=1&lang=en');
+    await expect(page.locator('#ok-body')).toHaveText(/at least 200 RealUnit share tokens/);
+    await expect(page.locator('#ok-body')).toHaveText(/limited to 100 redemptions/);
+  });
+
+  test('English landings localize store badge labels', async ({ page }) => {
+    await page.goto('/invite/AB12CD?mock=1&lang=en');
+    await expect(page.locator('#state-ok')).toBeVisible();
+    await expect(page.locator('meta[property="og:locale"]')).toHaveAttribute('content', 'en_GB');
+    await expect(page.locator('meta[property="og:locale:alternate"]')).toHaveAttribute(
+      'content',
+      'de_CH',
+    );
+    await expect(page.locator('nav.stores')).toHaveAttribute('aria-label', 'Download the app');
+    await expect(page.locator('a[data-store="apple"]')).toHaveAttribute(
+      'aria-label',
+      'Get RealUnit on the App Store',
+    );
+    await expect(page.locator('a[data-store="play"]')).toHaveAttribute(
+      'aria-label',
+      'Get RealUnit on Google Play',
+    );
+    await expect(page.locator('a[data-store="apple"] img')).toHaveAttribute('alt', '');
+    await expect(page.locator('a[data-store="play"] img')).toHaveAttribute('alt', '');
+  });
+});
diff --git a/tests/pages.mjs b/tests/pages.mjs
index c40dd9e..6c6a1b6 100644
--- a/tests/pages.mjs
+++ b/tests/pages.mjs
@@ -7,8 +7,20 @@ export const PORT = 4173;
 
 // Every public HTML page, used by the smoke spec. `/confirm-aktionariat/` and
 // `/account-merge/` load with no query params, so they render the "invalid link"
-// state without making a network request.
-export const PAGES = ['/', '/confirm-aktionariat/', '/account-merge/', '/404.html'];
+// state without making a network request. Bare `/invite` and `/promo` (no code)
+// are the same: invalid, no API call.
+export const PAGES = [
+  '/',
+  '/confirm-aktionariat/',
+  '/account-merge/',
+  '/404.html',
+  '/invite/AB12CD?mock=1',
+  '/invite/AB12CD?mock=spent',
+  '/promo/EVT1?mock=1',
+  '/promo/EVT1?mock=spent',
+  '/invite',
+  '/promo',
+];
 
 // Viewports the visual suite renders: desktop, a real tablet width, and a phone.
 export const PROJECTS = ['desktop-chromium', 'tablet-chromium', 'mobile-safari'];
@@ -170,6 +182,330 @@ export const VIEWS = [
     path: '/404.html',
     projects: ['desktop-chromium', 'tablet-chromium', 'mobile-safari'],
   },
+
+  // Invite landing — personal greeting, stores, copy (no live API).
+  {
+    slug: 'invite-ok',
+    path: '/invite/AB12CD?mock=1&lang=de',
+    waitFor: 'ok',
+    projects: ['desktop-chromium', 'tablet-chromium'],
+  },
+  {
+    slug: 'invite-loading',
+    path: '/invite/AB12CD?mock=loading&lang=de',
+    waitFor: 'loading',
+    projects: ['desktop-chromium', 'tablet-chromium', 'mobile-safari'],
+  },
+  {
+    slug: 'invite-loading-en',
+    path: '/invite/AB12CD?mock=loading&lang=en',
+    waitFor: 'loading',
+    projects: ['desktop-chromium'],
+  },
+  {
+    slug: 'invite-loading-android',
+    path: '/invite/AB12CD?mock=loading&lang=de',
+    platform: 'android',
+    waitFor: 'loading',
+    projects: ['mobile-safari'],
+  },
+  {
+    slug: 'invite-loading-en-android',
+    path: '/invite/AB12CD?mock=loading&lang=en',
+    platform: 'android',
+    waitFor: 'loading',
+    projects: ['mobile-safari'],
+  },
+  {
+    slug: 'invite-ok-ios',
+    path: '/invite/AB12CD?mock=1&lang=de',
+    platform: 'ios',
+    waitFor: 'ok',
+    projects: ['mobile-safari'],
+  },
+  {
+    slug: 'invite-ok-android',
+    path: '/invite/AB12CD?mock=1&lang=de',
+    platform: 'android',
+    waitFor: 'ok',
+    projects: ['mobile-safari'],
+  },
+  {
+    slug: 'invite-ok-en',
+    path: '/invite/AB12CD?mock=1&lang=en',
+    waitFor: 'ok',
+    projects: ['desktop-chromium'],
+  },
+  {
+    slug: 'invite-ok-fallback',
+    path: '/invite/AB12CD?mock=fallback&lang=de',
+    waitFor: 'ok',
+    projects: ['desktop-chromium', 'tablet-chromium', 'mobile-safari'],
+  },
+  {
+    slug: 'invite-ok-fallback-en',
+    path: '/invite/AB12CD?mock=fallback&lang=en',
+    waitFor: 'ok',
+    projects: ['desktop-chromium'],
+  },
+  {
+    slug: 'invite-ok-fallback-android',
+    path: '/invite/AB12CD?mock=fallback&lang=de',
+    platform: 'android',
+    waitFor: 'ok',
+    projects: ['mobile-safari'],
+  },
+  {
+    slug: 'invite-invalid',
+    path: '/invite/AB12CD?mock=invalid&lang=de',
+    waitFor: 'invalid',
+    projects: ['desktop-chromium', 'tablet-chromium', 'mobile-safari'],
+  },
+  {
+    slug: 'invite-missing-code',
+    path: '/invite',
+    waitFor: 'invalid',
+    projects: ['desktop-chromium', 'tablet-chromium', 'mobile-safari'],
+  },
+  {
+    slug: 'invite-missing-code-en',
+    path: '/invite?lang=en',
+    waitFor: 'invalid',
+    projects: ['desktop-chromium'],
+  },
+  {
+    slug: 'invite-missing-code-android',
+    path: '/invite',
+    platform: 'android',
+    waitFor: 'invalid',
+    projects: ['mobile-safari'],
+  },
+  {
+    slug: 'invite-invalid-en',
+    path: '/invite/AB12CD?mock=invalid&lang=en',
+    waitFor: 'invalid',
+    projects: ['desktop-chromium'],
+  },
+  {
+    slug: 'invite-invalid-android',
+    path: '/invite/AB12CD?mock=invalid&lang=de',
+    platform: 'android',
+    waitFor: 'invalid',
+    projects: ['mobile-safari'],
+  },
+  {
+    slug: 'invite-invalid-en-android',
+    path: '/invite/AB12CD?mock=invalid&lang=en',
+    platform: 'android',
+    waitFor: 'invalid',
+    projects: ['mobile-safari'],
+  },
+  {
+    slug: 'invite-unavailable',
+    path: '/invite/AB12CD?mock=unavailable&lang=de',
+    waitFor: 'unavailable',
+    projects: ['desktop-chromium', 'tablet-chromium', 'mobile-safari'],
+  },
+  {
+    slug: 'invite-unavailable-en',
+    path: '/invite/AB12CD?mock=unavailable&lang=en',
+    waitFor: 'unavailable',
+    projects: ['desktop-chromium'],
+  },
+  {
+    slug: 'invite-unavailable-android',
+    path: '/invite/AB12CD?mock=unavailable&lang=de',
+    platform: 'android',
+    waitFor: 'unavailable',
+    projects: ['mobile-safari'],
+  },
+  {
+    slug: 'invite-unavailable-en-android',
+    path: '/invite/AB12CD?mock=unavailable&lang=en',
+    platform: 'android',
+    waitFor: 'unavailable',
+    projects: ['mobile-safari'],
+  },
+  {
+    slug: 'invite-spent',
+    path: '/invite/AB12CD?mock=spent&lang=de',
+    waitFor: 'invalid',
+    projects: ['desktop-chromium', 'tablet-chromium', 'mobile-safari'],
+  },
+  {
+    slug: 'invite-spent-en',
+    path: '/invite/AB12CD?mock=spent&lang=en',
+    waitFor: 'invalid',
+    projects: ['desktop-chromium'],
+  },
+  {
+    slug: 'invite-spent-android',
+    path: '/invite/AB12CD?mock=spent&lang=de',
+    platform: 'android',
+    waitFor: 'invalid',
+    projects: ['mobile-safari'],
+  },
+  {
+    slug: 'promo-ok',
+    path: '/promo/EVT1?mock=1&lang=de',
+    waitFor: 'ok',
+    projects: ['desktop-chromium', 'tablet-chromium'],
+  },
+  {
+    slug: 'promo-loading',
+    path: '/promo/EVT1?mock=loading&lang=de',
+    waitFor: 'loading',
+    projects: ['desktop-chromium', 'tablet-chromium', 'mobile-safari'],
+  },
+  {
+    slug: 'promo-loading-en',
+    path: '/promo/EVT1?mock=loading&lang=en',
+    waitFor: 'loading',
+    projects: ['desktop-chromium'],
+  },
+  {
+    slug: 'promo-loading-android',
+    path: '/promo/EVT1?mock=loading&lang=de',
+    platform: 'android',
+    waitFor: 'loading',
+    projects: ['mobile-safari'],
+  },
+  {
+    slug: 'promo-loading-en-android',
+    path: '/promo/EVT1?mock=loading&lang=en',
+    platform: 'android',
+    waitFor: 'loading',
+    projects: ['mobile-safari'],
+  },
+  {
+    slug: 'promo-ok-ios',
+    path: '/promo/EVT1?mock=1&lang=de',
+    platform: 'ios',
+    waitFor: 'ok',
+    projects: ['mobile-safari'],
+  },
+  {
+    slug: 'promo-ok-android',
+    path: '/promo/EVT1?mock=1&lang=de',
+    platform: 'android',
+    waitFor: 'ok',
+    projects: ['mobile-safari'],
+  },
+  {
+    slug: 'promo-ok-en',
+    path: '/promo/EVT1?mock=1&lang=en',
+    waitFor: 'ok',
+    projects: ['desktop-chromium'],
+  },
+  {
+    slug: 'promo-ok-fallback',
+    path: '/promo/EVT1?mock=fallback&lang=de',
+    waitFor: 'ok',
+    projects: ['desktop-chromium', 'tablet-chromium', 'mobile-safari'],
+  },
+  {
+    slug: 'promo-ok-fallback-en',
+    path: '/promo/EVT1?mock=fallback&lang=en',
+    waitFor: 'ok',
+    projects: ['desktop-chromium'],
+  },
+  {
+    slug: 'promo-ok-fallback-android',
+    path: '/promo/EVT1?mock=fallback&lang=de',
+    platform: 'android',
+    waitFor: 'ok',
+    projects: ['mobile-safari'],
+  },
+  {
+    slug: 'promo-invalid',
+    path: '/promo/EVT1?mock=invalid&lang=de',
+    waitFor: 'invalid',
+    projects: ['desktop-chromium', 'tablet-chromium', 'mobile-safari'],
+  },
+  {
+    slug: 'promo-missing-code',
+    path: '/promo',
+    waitFor: 'invalid',
+    projects: ['desktop-chromium', 'tablet-chromium', 'mobile-safari'],
+  },
+  {
+    slug: 'promo-missing-code-en',
+    path: '/promo?lang=en',
+    waitFor: 'invalid',
+    projects: ['desktop-chromium'],
+  },
+  {
+    slug: 'promo-missing-code-android',
+    path: '/promo',
+    platform: 'android',
+    waitFor: 'invalid',
+    projects: ['mobile-safari'],
+  },
+  {
+    slug: 'promo-invalid-en',
+    path: '/promo/EVT1?mock=invalid&lang=en',
+    waitFor: 'invalid',
+    projects: ['desktop-chromium'],
+  },
+  {
+    slug: 'promo-invalid-android',
+    path: '/promo/EVT1?mock=invalid&lang=de',
+    platform: 'android',
+    waitFor: 'invalid',
+    projects: ['mobile-safari'],
+  },
+  {
+    slug: 'promo-invalid-en-android',
+    path: '/promo/EVT1?mock=invalid&lang=en',
+    platform: 'android',
+    waitFor: 'invalid',
+    projects: ['mobile-safari'],
+  },
+  {
+    slug: 'promo-unavailable',
+    path: '/promo/EVT1?mock=unavailable&lang=de',
+    waitFor: 'unavailable',
+    projects: ['desktop-chromium', 'tablet-chromium', 'mobile-safari'],
+  },
+  {
+    slug: 'promo-unavailable-en',
+    path: '/promo/EVT1?mock=unavailable&lang=en',
+    waitFor: 'unavailable',
+    projects: ['desktop-chromium'],
+  },
+  {
+    slug: 'promo-unavailable-android',
+    path: '/promo/EVT1?mock=unavailable&lang=de',
+    platform: 'android',
+    waitFor: 'unavailable',
+    projects: ['mobile-safari'],
+  },
+  {
+    slug: 'promo-unavailable-en-android',
+    path: '/promo/EVT1?mock=unavailable&lang=en',
+    platform: 'android',
+    waitFor: 'unavailable',
+    projects: ['mobile-safari'],
+  },
+  {
+    slug: 'promo-spent',
+    path: '/promo/EVT1?mock=spent&lang=de',
+    waitFor: 'invalid',
+    projects: ['desktop-chromium', 'tablet-chromium', 'mobile-safari'],
+  },
+  {
+    slug: 'promo-spent-en',
+    path: '/promo/EVT1?mock=spent&lang=en',
+    waitFor: 'invalid',
+    projects: ['desktop-chromium'],
+  },
+  {
+    slug: 'promo-spent-android',
+    path: '/promo/EVT1?mock=spent&lang=de',
+    platform: 'android',
+    waitFor: 'invalid',
+    projects: ['mobile-safari'],
+  },
 ];
 
 // Projects a given view applies to.
diff --git a/tests/visual.spec.mjs b/tests/visual.spec.mjs
index 48dea76..3605097 100644
--- a/tests/visual.spec.mjs
+++ b/tests/visual.spec.mjs
@@ -4,24 +4,39 @@ import { installVisualDeterminism, settle } from './helpers.mjs';
 
 test.describe('visual regression', () => {
   for (const view of VIEWS) {
-    test(`${view.slug}`, async ({ page }, testInfo) => {
-      test.skip(
-        !projectsForView(view).includes(testInfo.project.name),
-        `view "${view.slug}" does not apply to ${testInfo.project.name}`,
-      );
+    // Do not request the `page` fixture up front: Playwright launches the
+    // project browser before `test.skip()` runs, so a view that does not
+    // apply to this project (invite-ok on mobile-safari, invite-ok-ios on
+    // desktop) would fail in 1ms if that browser cannot start.
+    test(`${view.slug}`, async ({ playwright }, testInfo) => {
+      if (!projectsForView(view).includes(testInfo.project.name)) {
+        test.skip();
+        return;
+      }
 
-      await installVisualDeterminism(page, { platform: view.platform });
-      await page.goto(view.path, { waitUntil: 'load' });
-      await settle(page);
+      const browserName = testInfo.project.use.browserName || 'chromium';
+      const browser = await playwright[browserName].launch();
+      const context = await browser.newContext(testInfo.project.use);
+      const page = await context.newPage();
+      try {
+        await installVisualDeterminism(page, { platform: view.platform });
+        await page.goto(view.path, { waitUntil: 'load' });
+        await settle(page);
 
-      // Confirm-page views render their end state via the ?mock hook after a short
-      // delay; wait for it before the shot. The page has no <video>/<canvas>, so no
-      // masking is needed and the whole page is byte-compared.
-      if (view.waitFor) {
-        await page.waitForSelector(`#state-${view.waitFor}:not([hidden])`, { state: 'visible' });
-      }
+        // Confirm-page views render their end state via the ?mock hook after a short
+        // delay; wait for it before the shot. The page has no <video>/<canvas>, so no
+        // masking is needed and the whole page is byte-compared.
+        if (view.waitFor) {
+          await page.waitForSelector(`#state-${view.waitFor}:not([hidden])`, {
+            state: 'visible',
+          });
+        }
 
-      await expect(page).toHaveScreenshot(`${view.slug}.png`, { fullPage: true });
+        await expect(page).toHaveScreenshot(`${view.slug}.png`, { fullPage: true });
+      } finally {
+        await context.close();
+        await browser.close();
+      }
     });
   }
 });