@ghostlytools/cli 1.3.10 → 1.4.0

package/README.md

@@ -68,6 +68,10 @@ requests, tips and "balance" in a chat, with test coins: [examples/payment-bot.m
 A Claude Code agent on `listen --turns` with an allowlist (it will not start without one), "thinking" while it works
 and `send --reply` for its answer: [examples/claude-code-agent.sh](examples/claude-code-agent.sh).
 
+Agents: [skills/ghostly](skills/ghostly) is a skill for an AI coding agent (Claude Code first) that talks to its
+owner over Ghostly: `listen`, `say` (with buttons), `status` and `react`, in `sh`, and only the owner's chat gives it
+orders.
+
 ## Profiles
 
 Each profile is a folder, `~/.ghostly/profiles/<name>/` (0700; files 0600), with its own chats, keys and wallets.
@@ -84,7 +88,10 @@ waits until the message went out. Bots should run the daemon: a one-shot is offl
 
 Every command prints one JSON object on stdout. A failure prints `{"error":{"code","message"}}` and exits with:
 `1` failed (the engine or the network refused), `2` usage, `3` not found, `4` timed out, `5` needs a confirmation
-(`--force`, `--yes`, `--confirm-real`). A `<chat>` is its id, a unique prefix of it, or its name; a `<group>` too.
+(`--force`, `--yes`, `--confirm-real`). A daemon that does not answer a read or `daemon status` within 15 seconds, or
+a command that waits (`chat wait`, `file wait`, `--wait`) within its `--timeout` plus 10, is a timeout too (`4`,
+`details.method`); `ghostly daemon restart` is the way out ([docs/CLI.md](../../docs/CLI.md#what-it-does)). A `<chat>` is
+its id, a unique prefix of it, or its name; a `<group>` too.
 
 The rows are in alphabetical order of their first command, and every command of `ghostly help` has one
 (`test/readme.test.ts` checks both).
@@ -113,9 +120,9 @@ The rows are in alphabetical order of their first command, and every command of
 | `chat transport <chat> <auto\|dht\|webrtc\|iroh\|hyperdht>` | What carries the chat |
 | `chat verify <chat> --code <code>` | Mark the contact verified after comparing the codes out of band |
 | `chat wait <chat> [--until live\|text\|paired] [--timeout s]` | Wait for a chat to go live, carry text, or see its contact. Live means a session that exists now, in this run of the daemon: a chat that was live before a restart counts once its contact answers again |
-| `daemon [--detach] [--timeout s]`, `daemon status`, `daemon stop [--timeout s]`, `daemon restart [--timeout s]` | Keep the profile online; `status` names its version and its socket (`socket`, for the [socket API](#the-socket-api)); `restart` stops it and starts this release's code in the background ([After an upgrade](#after-an-upgrade)). Ctrl-C, SIGTERM and the terminal closing (SIGHUP) stop it cleanly |
+| `daemon [--detach] [--timeout s]`, `daemon status [--timeout s]`, `daemon stop [--timeout s]`, `daemon restart [--timeout s]` | Keep the profile online; `status` names its version and its socket (`socket`, for the [socket API](#the-socket-api)); `restart` stops it and starts this release's code in the background ([After an upgrade](#after-an-upgrade)). Ctrl-C, SIGTERM and the terminal closing (SIGHUP) stop it cleanly |
 | `edit <chat> <message> [text… \| --text <text> \| --stdin] [--force] [--wait none\|confirmed] [--timeout s]` | Replace the text of a message you sent (1:1 chats, `group edit` for a group; `<message>` is the `messageId` `send` gave, or its wire id). The contact sees it in place, marked edited; `--wait confirmed` waits for its app to confirm (the default without a daemon). At most 100 edits a message, no time limit; an older contact app gets it once it shows edits |
-| `engine <method> [json \| -] [--confirm-real] [--show-secret] [--force]`, `engine --list` | Any call of the app's engine |
+| `engine <method> [json \| -] [--confirm-real] [--show-secret] [--yes] [--force]`, `engine --list [--verbose]` | Any call of the app's engine; `--verbose` lists what each takes (`{ linkId, label }`, `?` for an optional key). A call given less than it takes is refused as `bad_request`. One that deletes chats or groups (`clearProfileData`, `removeLink`, `leaveGroup`, `forgetGroup`, `deviceRemove`) needs `--yes`; `clearProfileData` answers what it removed and stops a daemon. One that sends a text that looks like a secret (`sendMessage`, `sendGroupMessage`, `editMessage`, `forwardMessages`) needs `--force` |
 | `events [--since seq]` | What the event journal holds, without following |
 | `file list <chat\|group>`, `file accept\|decline\|pause\|resume\|cancel [<chat>] <file>` | Transfers; a file over 25 MiB waits for `file accept` (files/3), and so does a group's file that did not come by itself (over 8 MiB). A file's id names its chat or its group, so `<chat>` may be left out |
 | `file resend [<chat>] <file>`, `file request [<chat>] <file>` | A file that stopped moving: sent again from here, or asked for again from the contact (a group's file: from whoever holds it); either goes on from the bytes the receiver holds (files/3) |
@@ -167,6 +174,8 @@ The rows are in alphabetical order of their first command, and every command of
 | `wallet list [--network n]` | Wallets and balances, and what `wallet create` can make on each network |
 | `wallet receive <sats>`, `wallet address <type>`, `wallet redeem [<token>]`, `wallet history` | Receive, and what came and went. `wallet redeem` reads the token from stdin when none is given, which keeps it out of `ps` and the shell's history |
 | `wallet remove <type> [--network n] [--card id] [--accept-loss]` | Refused while it holds money or waits for some, unless `--accept-loss` |
+| `x401 credential add <file\|-> [--label name]`, `x401 credential list [--show-secret]`, `x401 credential remove <id>` | x401 credentials ([WISP 3xx](../../docs/wisps/3xx-x401.md), a draft: test credentials only): keep an issued SD-JWT VC bound to a key from `x401 key new` (a label is up to 80 characters on one line), list them (claim paths; values only with `--show-secret`), remove one with its key. Never shared with contacts |
+| `x401 key new` | A fresh P-256 holder key, one per credential: give its public JWK to the issuer. The 8 newest keys wait for a credential; a ninth drops the oldest (`dropped` names it) |
 
 Help: `ghostly help` lists every command; `ghostly help file` (or `ghostly file --help`) a group; `ghostly help file
 save` (or `ghostly file save --help`) one command, with its options. `-h` works too, except after `--`.
@@ -372,7 +381,7 @@ receive|address|redeem`, `wallet.mint.add`, `lightning.default|rename`, `pay`, `
 `identity.providers|list|add|complete|cancel|remove|share|withdraw|contact|recheck`, `service.list|add|remove|enable|share|peer|open|close`,
 `call.start|answer|hangup|list|get|flush|auto`,
 `events.replay`, `events.subscribe`, `daemon.stop`, `daemon.hello`, and `engine.call` with
-`{"method":"<engine call>","params":{…},"confirmReal":false}` for anything else the app does. Parameters are the
+`{"method":"<engine call>","params":{…},"confirmReal":false,"yes":false}` for anything else the app does. Parameters are the
 commands' (see `src/api.ts`). Errors: `{"id":…,"error":{"code","message","details"?}}` with the codes above.
 
 Before its first request, a program can check that the socket is the profile's daemon and not a process that opened

package/SKILL.md

@@ -95,13 +95,14 @@ ghostly chat wait alice --until live    # returns once Alice opened the link in
 ```
 
 Give the link to the person through the channel your owner chose. To join someone else's invite instead:
-`ghostly invite join "<ghostly1… or https://ghostly.tools/#ghostly1…>" --label bob`. `ghostly chat list` shows every
+`printf '%s' '<ghostly1… or https://ghostly.tools/#ghostly1…>' | ghostly invite join --label bob` (on stdin, not in `ps`
+or the shell's history). `ghostly chat list` shows every
 chat; a `<chat>` is its id, a unique prefix of it, or its name.
 
 Names are for people at a terminal. A contact chooses its own name, a group's admin its group's name and a member its
 name in a group, so in a script or an agent keep the **id** (`chat` and `group` in every answer and event, a member's
 key) and address by it: `<chat id>`, `group:<group id>`, `<member key>`. Where a command takes a chat or a group, a
-name that a contact gave itself and that also names one of your groups is refused (exit 2) and both ids are shown.
+name that a contact gave itself and that also names one of your groups is refused (exit 1, `bad_request`) and both ids are shown.
 
 ### 5. Be woken: listen with an allowlist
 
@@ -189,7 +190,7 @@ or open one because its sender asks: files come from other people.
 ### 9. Groups and mentions
 
 ```bash
-ghostly group join "<group link>"                    # a link your owner gave you
+printf '%s' '<group link>' | ghostly group join    # a link your owner gave you; on stdin, not in ps
 ghostly group create "Support"                       # a community {"group","link"}; --mesh for a private group
 ghostly group send Support "Thanks @Ana, on it" --mention Ana --reply <message id>
 ghostly group history Support                        # each message names its member (key) and nick
@@ -368,7 +369,9 @@ proof needs a person who holds the key: leave that to the owner.
 
 ## Anything else
 
-Every call of the app's engine is reachable: `ghostly engine --list`, then `ghostly engine <method> '<json params>'`.
+Every call of the app's engine is reachable: `ghostly engine --list --verbose` (each call with what it takes), then `ghostly engine <method> '<json params>'`.
+A call that deletes chats or groups (`clearProfileData`, `removeLink`, `leaveGroup`, `forgetGroup`, `deviceRemove`)
+needs `--yes`; `clearProfileData` stops a running daemon after it answers.
 Not on the CLI yet: Bark wallets, OpenID Connect proofs, and video in calls (voice only). More:
 [AI agents on Ghostly](https://ghostly.tools/developers/agents), the
 [CLI guide](https://github.com/MiguelMedeiros/ghostly/blob/main/docs/CLI.md), the

package/dist/assets/{api-Cp9GxjUO.js → api-BqLfti32.js}

@@ -1,3 +1,3 @@
-import { a as findChat, s as findGroup } from "./apiKit-B4qhnLQT.js";
-import { a as hideStateSecrets, i as groupSendRefused, n as SETTABLE, o as mentionsFor, r as callApi, s as redactSettings, t as API_METHODS } from "./api-BCrwJ57L.js";
+import { a as findChat, s as findGroup } from "./apiKit-BpIUCwa-.js";
+import { a as hideStateSecrets, i as groupSendRefused, n as SETTABLE, o as mentionsFor, r as callApi, s as redactSettings, t as API_METHODS } from "./api-JMkEO0RR.js";
 export { API_METHODS, SETTABLE, callApi, findChat, findGroup, groupSendRefused, hideStateSecrets, mentionsFor, redactSettings };

package/dist/assets/{api-BCrwJ57L.js → api-JMkEO0RR.js}

@@ -1,14 +1,15 @@
-import { $n as GROUP_FILE_LIMITS, Bo as GhostlyHttpError, Cl as randomBytes$1, Fo as AWAITING_PEER_MS, Hr as TYPING_REFRESH_MS, Qa as appCardId, Sc as ownInviteRefusal, Vr as TYPING_KINDS, Wo as LIMITS, Wr as sanitizeTypingStatus, Xi as identityStatement, Za as STATUS_CARD_LIMITS, _a as VOICE_LIMITS, _l as MAX_AVATAR_LENGTH, _o as isAppRef, at as groupName, ba as parseVoiceMeta, bc as inviteLink, ci as APP_DATA_MAX_BYTES, eo as cardLine, ga as PLAYABLE_AUDIO, ha as sanitizeMime, m as APP_PERMISSIONS, ma as sanitizeFileName, no as checkStatusCard, po as appRef, va as baseMime, vl as sanitizeAvatar, wa as readImageMeta, wl as toBase64Url, xa as voicePeaksOf, y as isAppUrl } from "./src-Dg1bvMNv.js";
-import { c as fileStore } from "./idb-B5L8wuOm.js";
-import { O as waitingGroupFile, T as removeStored, U as iceServerProblem, W as iceServerSetting, i as groupOfFile, l as replyRef, n as groupFileId, v as paymentNetwork } from "./groupFiles-uxa0U9_n.js";
-import { f as FILE_BYTES_STEP, o as fileBytes, s as fileBytesOf } from "./fileBytes-Di7VZtmU.js";
-import { t as IDENTITY_PROVIDERS } from "./registry-OVx2kY3d.js";
-import { a as waitForEdit, c as findSecret, i as pressable, n as buttonsCard, o as waitForGroupFrame, s as waitForMessage, t as BUTTON_METHODS } from "./buttons-BtxwyM2l.js";
-import { i as ENGINE_READS, n as withStoredIds, r as ENGINE_METHODS } from "./turnRefs-WnggXm2T.js";
-import { i as localFileError, r as asCliError, t as CliError } from "./errors-B-zMxbcd.js";
-import { _ as str, a as findChat, c as groupOf, d as messageOf, f as node, g as state, h as sentAt, i as chatOrGroup, l as inviteTaken, m as oneOf, n as bool, o as findChatOrGroup, p as num, r as chatOf, s as findGroup, u as list, v as waitForState } from "./apiKit-B4qhnLQT.js";
-import { t as BACKUP_METHODS } from "./backup-CTpFFQ-4.js";
-import { o as checkedBundle } from "./apps-DOH1P_S0.js";
+import { $l as randomBytes$1, Ac as isAppRef, Ba as appCardId, Bi as identityStatement, Ec as appRef, Ha as cardLine, Ic as readImageMeta, Jl as sanitizeAvatar, Mr as TYPING_REFRESH_MS, Pr as sanitizeTypingStatus, Qc as ownInviteRefusal, Qr as APP_DATA_MAX_BYTES, Un as GROUP_FILE_LIMITS, Wa as checkStatusCard, Xc as inviteLink, Y as groupName, aa as sanitizeMime, ca as baseMime, da as voicePeaksOf, eu as toBase64Url, ho as GhostlyHttpError, ia as sanitizeFileName, jr as TYPING_KINDS, lo as AWAITING_PEER_MS, oa as PLAYABLE_AUDIO, pc as APP_PERMISSIONS, ql as MAX_AVATAR_LENGTH, sa as VOICE_LIMITS, ua as parseVoiceMeta, vc as isAppUrl, yo as LIMITS, za as STATUS_CARD_LIMITS } from "./src-DzXL-GYu.js";
+import { l as fileStore } from "./idb-CMVgtn2k.js";
+import { O as waitingGroupFile, T as removeStored, U as iceServerProblem, W as iceServerSetting, i as groupOfFile, l as replyRef, n as groupFileId, v as paymentNetwork } from "./groupFiles-sIdGq4AV.js";
+import { f as FILE_BYTES_STEP, o as fileBytes, s as fileBytesOf } from "./fileBytes-B-fqGdEd.js";
+import { t as IDENTITY_PROVIDERS } from "./registry-qbnWmwCE.js";
+import { a as waitForEdit, c as findSecret, i as pressable, n as buttonsCard, o as waitForGroupFrame, s as waitForMessage, t as BUTTON_METHODS } from "./buttons-YgijrprJ.js";
+import { a as ENGINE_PARAMS, i as ENGINE_METHODS, l as engineParamsProblem, n as withStoredIds, o as ENGINE_READS, r as DESTRUCTIVE_CALLS, s as READ_PARAMS } from "./turnRefs-BCtM10d3.js";
+import { i as localFileError, r as asCliError, t as CliError } from "./errors-BLSPp0tK.js";
+import { _ as str, a as findChat, c as groupOf, d as messageOf, f as node, g as state, h as sentAt, i as chatOrGroup, l as inviteTaken, m as oneOf, n as bool, o as findChatOrGroup, p as num, r as chatOf, s as findGroup, u as list, v as waitForState } from "./apiKit-BpIUCwa-.js";
+import { a as checkShownName } from "./profiles-DSxPYdlU.js";
+import { t as BACKUP_METHODS } from "./backup-BmBtta66.js";
+import { o as checkedBundle } from "./apps-Bettj7WQ.js";
 import { generateMnemonic } from "@scure/bip39";
 import { wordlist } from "@scure/bip39/wordlists/english.js";
 import { openAsBlob, readFileSync, renameSync, writeFileSync } from "node:fs";
@@ -2058,6 +2059,47 @@ var IDENTITY_METHODS = {
 	}
 };
 //#endregion
+//#region src/x401.ts
+/**
+* x401 credentials (WISP 3xx): the holder keys and issued credentials a bot keeps to show a website who stands behind
+* it. Here only keeping them: `x401 fetch`, which presents one, comes later. Claim values are printed only with
+* `--show-secret`; the credential itself and the holder keys never leave the profile.
+*/
+/** The engine's refusals (a credential that does not read, expired, bound to another key) are the caller's to fix. */
+async function engine$1(work) {
+	try {
+		return await work();
+	} catch (error) {
+		throw new CliError("bad_request", error instanceof Error ? error.message : String(error));
+	}
+}
+var X401_METHODS = {
+	/** `dropped`: the oldest key still waiting, gone for this one (a profile keeps the 8 newest waiting). */
+	async "x401.key.new"(ctx) {
+		const { id, jwk, dropped } = await node(ctx).newX401HolderKey();
+		return {
+			key: id,
+			jwk,
+			...dropped ? { dropped } : {}
+		};
+	},
+	async "x401.credential.add"(ctx, params) {
+		const label = str(params, "label");
+		return { credential: await engine$1(() => node(ctx).addX401Credential({
+			credential: str(params, "credential", true),
+			...label ? { label } : {}
+		})) };
+	},
+	async "x401.credential.list"(ctx, params) {
+		return { credentials: await node(ctx).x401Credentials({ values: bool(params, "showSecret") }) };
+	},
+	async "x401.credential.remove"(ctx, params) {
+		const id = str(params, "id", true);
+		if (!await node(ctx).removeX401Credential({ id })) throw new CliError("not_found", `No x401 credential ${JSON.stringify(id)} (ghostly x401 credential list)`);
+		return { removed: id };
+	}
+};
+//#endregion
 //#region src/services.ts
 /**
 * Shared services (WISP 700/701, WISP 1100 phase 3b): a web app on this machine a contact may open over the chat's live
@@ -3392,6 +3434,8 @@ function showUntilPaired(ctx, linkId) {
 	});
 	inviteShown.set(ctx, stop);
 }
+/** V8's words for reading what a value does not have: an `engine.call` given a parameter of the wrong kind. */
+var BAD_VALUE = /^Cannot (destructure|read properties of (undefined|null))|is not (a function|iterable)/;
 var METHODS = {
 	...WALLET_METHODS,
 	...FILE_METHODS,
@@ -3399,6 +3443,7 @@ var METHODS = {
 	...BUTTON_METHODS,
 	...GROUP_ADMIN_METHODS,
 	...IDENTITY_METHODS,
+	...X401_METHODS,
 	...SERVICE_METHODS,
 	...BACKUP_METHODS,
 	...CALL_METHODS,
@@ -3437,11 +3482,7 @@ var METHODS = {
 	},
 	async "profile.set"(ctx, params) {
 		const patch = {};
-		const name = params.name;
-		if (name !== void 0) {
-			if (typeof name !== "string" || [...name].length > 64) throw new CliError("bad_request", "name must be a string of up to 64 characters");
-			patch.nick = name.trim();
-		}
+		if (params.name !== void 0) patch.nick = checkShownName(params.name);
 		if (params.shareProfile !== void 0) patch.shareProfile = bool(params, "shareProfile");
 		await node(ctx).updateSettings({ settings: patch });
 		return METHODS["profile.get"](ctx, {});
@@ -3458,6 +3499,10 @@ var METHODS = {
 			if (kind === "strings" && !(Array.isArray(value) && value.every((v) => typeof v === "string"))) throw new CliError("bad_request", `${key} must be a list of strings`);
 			if (kind === "string" && typeof value !== "string") throw new CliError("bad_request", `${key} must be a string`);
 			if (kind === "boolean" && typeof value !== "boolean") throw new CliError("bad_request", `${key} must be true or false`);
+			if (key === "nick") {
+				patch.nick = checkShownName(value, key);
+				continue;
+			}
 			if (kind === "ice") {
 				if (!(Array.isArray(value) && value.every((v) => v && typeof v === "object"))) throw new CliError("bad_request", `${key} must be a list of ICE servers`);
 				const servers = value.map(iceServerSetting);
@@ -3553,6 +3598,10 @@ var METHODS = {
 			"sent",
 			"delivered"
 		], "none");
+		const ms = num(params, "timeout", 30, {
+			min: 1,
+			max: 3600
+		}) * 1e3;
 		const replyTo = str(params, "reply");
 		const card = buttonsCard(params);
 		endTyping(ctx, { linkId: link.id }, false);
@@ -3565,10 +3614,7 @@ var METHODS = {
 		if (result.error) throw /not in this chat|cannot be replied to/.test(result.error) ? new CliError("not_found", result.error) : new CliError(result.refused ? "refused" : "unavailable", result.error);
 		if (!result.messageId) throw new CliError("bad_request", "Nothing to send");
 		let message = await node(ctx).getMessage(link.id, result.messageId);
-		if (wait !== "none") message = await waitForMessage(ctx, link.id, result.messageId, wait, num(params, "timeout", 30, {
-			min: 1,
-			max: 3600
-		}) * 1e3);
+		if (wait !== "none") message = await waitForMessage(ctx, link.id, result.messageId, wait, ms);
 		return {
 			chat: link.id,
 			messageId: result.messageId,
@@ -3593,6 +3639,10 @@ var METHODS = {
 			if (secret) throw new CliError("confirm", `The text looks like ${secret.kind === "cashu" ? "a Cashu token (money anyone who reads it can take)" : "a secret (a seed or a private key)"}; edit with --force if you mean to`, { kind: secret.kind });
 		}
 		const wait = oneOf(params, "wait", ["none", "confirmed"], "none");
+		const ms = num(params, "timeout", 30, {
+			min: 1,
+			max: 3600
+		}) * 1e3;
 		const result = await node(ctx).editMessage({
 			linkId: link.id,
 			messageId,
@@ -3601,10 +3651,7 @@ var METHODS = {
 		if (result.error) throw editRefused(await messageOf(ctx, link.id, messageId), messageId, "chat", result.error, result.refused);
 		const id = result.messageId ?? messageId;
 		let message = await node(ctx).getMessage(link.id, id);
-		if (wait === "confirmed" && message?.edit?.pending) message = await waitForEdit(ctx, link.id, id, num(params, "timeout", 30, {
-			min: 1,
-			max: 3600
-		}) * 1e3);
+		if (wait === "confirmed" && message?.edit?.pending) message = await waitForEdit(ctx, link.id, id, ms);
 		return {
 			chat: link.id,
 			messageId: id,
@@ -3705,6 +3752,10 @@ var METHODS = {
 			});
 		}
 		const wait = oneOf(params, "wait", ["none", "sent"], "none");
+		const ms = num(params, "timeout", 30, {
+			min: 1,
+			max: 3600
+		}) * 1e3;
 		let results;
 		try {
 			({results} = await node(ctx).forwardMessages({
@@ -3715,14 +3766,11 @@ var METHODS = {
 		} catch (error) {
 			throw new CliError("refused", error instanceof Error ? error.message : String(error));
 		}
-		const ms = num(params, "timeout", 30, {
-			min: 1,
-			max: 3600
-		}) * 1e3;
 		const out = results.map((result, i) => ({
 			to: to[i].id,
 			kind: to[i].group ? "group" : "chat",
 			messageIds: result.messageIds,
+			sent: result.sent,
 			error: result.error
 		}));
 		if (wait === "sent") for (const [i, result] of out.entries()) for (const messageId of result.messageIds) {
@@ -3916,6 +3964,10 @@ var METHODS = {
 		const mentions = mentionsFor(text, list(params, "mentions"), group);
 		const replyTo = str(params, "reply");
 		const wait = oneOf(params, "wait", ["none", "sent"], "none");
+		const ms = num(params, "timeout", 30, {
+			min: 1,
+			max: 3600
+		}) * 1e3;
 		const card = buttonsCard(params);
 		endTyping(ctx, { groupId: group.id }, false);
 		const result = await node(ctx).sendGroupMessage({
@@ -3927,10 +3979,7 @@ var METHODS = {
 		});
 		if (result.error) throw result.refused ? new CliError("refused", result.error) : groupSendRefused(result.error);
 		const messageId = result.messageId ?? null;
-		const edges = messageId ? wait === "sent" ? await waitForGroupFrame(ctx, group.id, messageId, void 0, num(params, "timeout", 30, {
-			min: 1,
-			max: 3600
-		}) * 1e3) : node(ctx).groupTaken({
+		const edges = messageId ? wait === "sent" ? await waitForGroupFrame(ctx, group.id, messageId, void 0, ms) : node(ctx).groupTaken({
 			groupId: group.id,
 			messageId
 		}) : 0;
@@ -3960,6 +4009,10 @@ var METHODS = {
 		}
 		const mentions = mentionsFor(text, list(params, "mentions"), group);
 		const wait = oneOf(params, "wait", ["none", "sent"], "none");
+		const ms = num(params, "timeout", 30, {
+			min: 1,
+			max: 3600
+		}) * 1e3;
 		const linkId = `group:${group.id}`;
 		const before = (await node(ctx).getMessage(linkId, messageId))?.edit?.seq ?? 0;
 		const result = await node(ctx).editMessage({
@@ -3979,10 +4032,7 @@ var METHODS = {
 			edges: 0,
 			unchanged: true
 		};
-		const edges = !edits ? 0 : wait === "sent" ? await waitForGroupFrame(ctx, group.id, messageId, edits, num(params, "timeout", 30, {
-			min: 1,
-			max: 3600
-		}) * 1e3) : node(ctx).groupTaken({
+		const edges = !edits ? 0 : wait === "sent" ? await waitForGroupFrame(ctx, group.id, messageId, edits, ms) : node(ctx).groupTaken({
 			groupId: group.id,
 			messageId,
 			edit: edits
@@ -4086,19 +4136,52 @@ var METHODS = {
 		if (!ENGINE_METHODS.includes(method) && !ENGINE_READS.includes(method)) throw new CliError("not_found", `The engine has no call ${method}`);
 		const raw = params.params;
 		if (raw !== void 0 && (raw === null || typeof raw !== "object" || Array.isArray(raw))) throw new CliError("bad_request", "params must be an object");
-		let args = raw;
+		const args = raw;
 		if (args && "confirmedReal" in args && !bool(params, "confirmReal")) throw new CliError("confirm", `${method} spends real money: pass --confirm-real (confirmReal: true over the socket) to confirm it`);
+		const deletes = DESTRUCTIVE_CALLS.get(method);
+		if (deletes && !bool(params, "yes")) throw new CliError("confirm", `${method} ${deletes}; pass --yes (yes: true over the socket) to go on`);
+		if (method === "clearProfileData") return clearProfile(ctx);
+		const takes = ENGINE_PARAMS[method] ?? READ_PARAMS[method];
+		const wrong = (why, rawError) => new CliError("bad_request", `${method} takes ${takes || "no parameters"}: ${why} (ghostly engine --list --verbose)`, {
+			takes,
+			...rawError ? { rawError } : {}
+		});
+		const problem = engineParamsProblem(method, args);
+		if (problem) throw wrong(problem);
 		if (args && ENGINE_SENDS.has(method) && !bool(params, "force")) await guardEngineSend(ctx, method, args);
 		if (method === "getMessages") return node(ctx).getMessages(str(args ?? {}, "linkId", true));
 		if (method === "getState") return state(ctx);
 		if (method === "setActiveLink") inviteShown.get(ctx)?.();
 		const target = node(ctx)[method];
 		if (typeof target !== "function") throw new CliError("not_found", `The engine has no call ${method}`);
-		if (args === void 0) args = void 0;
-		return await target.call(node(ctx), args) ?? null;
+		try {
+			return await target.call(node(ctx), args) ?? null;
+		} catch (error) {
+			if (error instanceof TypeError && BAD_VALUE.test(error.message)) throw wrong("a parameter of the wrong kind", error.message);
+			throw error;
+		}
 	}
 };
 /**
+* "Clear all data": the engine withdraws what it can, stops and empties its stores; the app reloads its page after it.
+* A daemon would go on serving the stopped engine's memory (chats and groups that are gone, new ones that are not
+* kept): it stops once it has answered, and the next command starts on the emptied profile.
+*/
+async function clearProfile(ctx) {
+	const { links, groups } = state(ctx);
+	await node(ctx).clearProfileData();
+	const cleared = {
+		chats: links.length,
+		groups: groups.length
+	};
+	if (ctx.mode !== "daemon" || !ctx.stop) return { cleared };
+	setTimeout(() => ctx.stop(), 10);
+	return {
+		cleared,
+		stopped: true
+	};
+}
+/**
 * The engine's calls that send a text this side writes (a message, a file's caption, a payment's memo): `engine.call`
 * runs the secret guard of `send`, `edit` and `forward` on them too (docs/CLI.md § Safety), so a raw call is no way around it. `force: true` (`--force`) sends it.
 */
@@ -4244,20 +4327,17 @@ function history(messages, params, json = messageJson) {
 	});
 	const before = params.before;
 	const after = params.after;
-	let list = messages.slice().sort((a, b) => a.timestamp - b.timestamp);
-	const cut = (value, side) => {
+	const sorted = messages.slice().sort((a, b) => a.timestamp - b.timestamp);
+	const bound = (value, side) => {
 		if (value === void 0 || value === null) return;
-		if (typeof value === "number") {
-			list = list.filter((m) => side === "before" ? m.timestamp < value : m.timestamp > value);
-			return;
-		}
+		if (typeof value === "number") return (m) => side === "before" ? m.timestamp < value : m.timestamp > value;
 		if (typeof value !== "string") throw new CliError("bad_request", `${side} must be a timestamp or a message id`);
-		const index = list.findIndex((m) => m.id === value);
+		const index = sorted.findIndex((m) => m.id === value);
 		if (index === -1) throw new CliError("not_found", `No message ${value}`);
-		list = side === "before" ? list.slice(0, index) : list.slice(index + 1);
+		return (_, at) => side === "before" ? at < index : at > index;
 	};
-	cut(before, "before");
-	cut(after, "after");
+	const bounds = [bound(before, "before"), bound(after, "after")].filter((b) => b !== void 0);
+	const list = sorted.filter((m, at) => bounds.every((within) => within(m, at)));
 	const more = after !== void 0 && after !== null ? list.length > limit : list.length > limit;
 	return {
 		messages: (after !== void 0 && after !== null ? list.slice(0, limit) : list.slice(-limit)).map((m) => json(m)),
@@ -4275,4 +4355,4 @@ async function callApi(ctx, method, params = {}) {
 //#endregion
 export { flushCardUpdates as _, hideStateSecrets as a, paymentJson as c, nodeLocalFetch as d, chatJson as f, resumeHolds as g, groupMessageJson as h, groupSendRefused as i, reportAppFrames as l, groupJson as m, SETTABLE as n, mentionsFor as o, chatMessageJson as p, callApi as r, redactSettings as s, API_METHODS as t, servedApps as u };
 
-//# sourceMappingURL=api-BCrwJ57L.js.map
+//# sourceMappingURL=api-JMkEO0RR.js.map