* app: further harden refresh logic and prefer local first * address review comments * cover missing unit test vectors