@ghostlytools/cli 1.3.2 → 1.3.4

package/dist/assets/{main-DC8cUkDx.js → main-DNzQOdNG.js}

@@ -1,8 +1,8 @@
-import { Ja as PR_STATES, Ka as ITEM_STATES, Qn as GROUP_FILE_LIMITS, Xa as STATUS_CARD_LIMITS, Ya as RUN_RESULTS, eo as cardUrl, qa as PR_CHECKS } from "./src-yMUQvdyL.js";
-import { a as SECRET_RESULTS, i as ENGINE_READS, r as ENGINE_METHODS, t as turnRef } from "./turnRefs-B2a8to9q.js";
-import { n as EXIT, r as asCliError, t as CliError } from "./errors-DO5z6h_l.js";
-import { t as CONTACT_KEY } from "./apiKit-DYkVEs6r.js";
-import { a as createProfile, c as listProfiles, d as profilePaths, f as selectProfile, i as checkProfileName, l as lockOwner, o as currentProfile, s as ghostlyHome, u as profileExists } from "./profiles-BHc9pEYg.js";
+import { $n as GROUP_FILE_LIMITS, Ja as PR_CHECKS, Xa as RUN_RESULTS, Ya as PR_STATES, Za as STATUS_CARD_LIMITS, qa as ITEM_STATES, to as cardUrl } from "./src-RQ6OJOUO.js";
+import { a as SECRET_RESULTS, i as ENGINE_READS, r as ENGINE_METHODS, t as turnRef } from "./turnRefs-u-U75DFx.js";
+import { i as localFileError, n as EXIT, r as asCliError, t as CliError } from "./errors-B-zMxbcd.js";
+import { t as CONTACT_KEY } from "./apiKit-3MLUyuhL.js";
+import { a as createProfile, c as listProfiles, d as profilePaths, f as selectProfile, i as checkProfileName, l as lockOwner, o as currentProfile, s as ghostlyHome, u as profileExists } from "./profiles-gPCjLOQq.js";
 import { n as ownSocket } from "./privateFolder-Bk9C9oFv.js";
 import { accessSync, constants, existsSync, openSync, readFileSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { dirname, resolve } from "node:path";
@@ -12,7 +12,7 @@ import { createInterface } from "node:readline";
 import { format } from "node:util";
 var package_default = {
 	name: "@ghostlytools/cli",
-	version: "1.3.2",
+	version: "1.3.4",
 	type: "module",
 	description: "Ghostly for bots and terminals: the app's own engine, headless on Node, behind a daemon and a `ghostly` command with JSON output.",
 	license: "MIT",
@@ -172,7 +172,7 @@ function parseArgs(argv, spec, idSlot = () => false) {
 				value = argv[++i];
 			}
 			if (option.type === "number") {
-				const number = Number(value);
+				const number = value.trim() === "" ? NaN : Number(value);
 				if (!Number.isFinite(number)) throw new CliError("usage", `--${name} takes a number, not ${JSON.stringify(value)}`);
 				options[name] = number;
 			} else if (option.type === "list") options[name] = [...options[name] ?? [], value];
@@ -354,10 +354,22 @@ var confirmReal = {
 	type: "boolean",
 	description: "Confirm a Mainnet (real money) spend"
 };
-/** A path as this command's working directory means it: the daemon runs elsewhere. */
+/**
+* A path as this command's working directory means it: the daemon runs elsewhere. "" (an unset variable in a script)
+* names no file, never the current folder.
+*/
 function here(path) {
+	if (path === "") throw new CliError("usage", "A path given as \"\" names no file");
 	return typeof path === "string" ? resolve(path) : void 0;
 }
+/**
+* A list option that names chats (`--to`, `--from`): "" or "group:" alone (an unset variable in a script) names
+* nothing, and is a usage error before the profile opens; it was a prefix of every id and took the only chat or group.
+*/
+function refs(values, flag, what) {
+	if (!Array.isArray(values)) return;
+	for (const value of values) if (typeof value === "string" && !value.replace(/^group:/, "").trim()) throw new CliError("usage", `--${flag} ${JSON.stringify(value)} names no ${what}`);
+}
 /** A whole number of sats from the command line. */
 function sats(value) {
 	const n = Number(value);
@@ -453,11 +465,12 @@ function cursor(value, flag) {
 function cardJson(value) {
 	if (value === void 0) return {};
 	const text = String(value).trim();
+	const file = text.startsWith("{") || text === "-" ? void 0 : here(text);
 	let raw;
 	try {
-		raw = text.startsWith("{") ? text : readFileSync(text === "-" ? 0 : resolve(text), "utf8");
+		raw = text.startsWith("{") ? text : readFileSync(file ?? 0, "utf8");
 	} catch (error) {
-		throw new CliError("usage", `--json takes a card as JSON, - for stdin, or a file: ${error instanceof Error ? error.message : String(error)}`);
+		throw file !== void 0 && localFileError(error, file) || new CliError("usage", `--json takes a card as JSON, - for stdin, or a file: ${error instanceof Error ? error.message : String(error)}`);
 	}
 	let parsed;
 	try {
@@ -869,7 +882,7 @@ var commands$8 = {
 				description: "Replace the three files when they are there"
 			}
 		},
-		run: async ({ options }, a) => (await import("./apps-DcZKu29s.js")).initApp(a.dir, {
+		run: async ({ options }, a) => (await import("./apps-B6gqk4GD.js")).initApp(a.dir, {
 			name: options.name,
 			title: options.title,
 			force: options.force === true
@@ -909,11 +922,11 @@ var commands$8 = {
 				description: "This version's sequence, higher than the bundle at --out's (default: one more than it)"
 			}
 		},
-		run: async ({ options }, a) => (await import("./apps-DcZKu29s.js")).publishApp(a.dir, keyFile(options.key, "app publish <dir> --key <file> [--out <file>] [--sequence n]"), options.out, options.sequence)
+		run: async ({ options }, a) => (await import("./apps-B6gqk4GD.js")).publishApp(a.dir, keyFile(options.key, "app publish <dir> --key <file> [--out <file>] [--sequence n]"), here(options.out), options.sequence)
 	},
 	"app revoke": {
 		method: "app.revoke",
-		usage: "app revoke <dir> --key <file> (--digest <digest>... | --up-to <sequence>) [--reason <text>] [--bundle <file>]",
+		usage: "app revoke <dir> --key <file> (--digest <digest>... | --up-to <sequence>) [--reason <text>] [--bundle <file>] [--force]",
 		summary: "Revoke versions of your app (WISP 1200 · Revocation): a ghostly-revoke/1 statement signed with its publisher key, added to <dir>/ghostly-revoke.json",
 		args: ["dir"],
 		options: {
@@ -936,13 +949,18 @@ var commands$8 = {
 			bundle: {
 				type: "string",
 				description: "The bundle naming the app (default <dir>/app.ghostlyapp)"
+			},
+			force: {
+				type: "boolean",
+				description: "Allow --up-to past the bundle's own sequence (versions published from elsewhere)"
 			}
 		},
-		run: async ({ options }, a) => (await import("./apps-DcZKu29s.js")).revokeApp(a.dir, keyFile(options.key, "app revoke <dir> --key <file> (--digest <digest>... | --up-to <sequence>) [--reason <text>]"), {
+		run: async ({ options }, a) => (await import("./apps-B6gqk4GD.js")).revokeApp(a.dir, keyFile(options.key, "app revoke <dir> --key <file> (--digest <digest>... | --up-to <sequence>) [--reason <text>]"), {
 			digests: options.digest,
 			upTo: options["up-to"],
 			reason: options.reason,
-			bundle: options.bundle
+			bundle: here(options.bundle),
+			force: options.force === true
 		})
 	},
 	"app send": {
@@ -996,9 +1014,9 @@ var commands$8 = {
 	"app verify": {
 		method: "app.verify",
 		usage: "app verify <bundle|url>",
-		summary: "Check a .ghostlyapp as a client would, from a file or an https URL: its manifest and digest, or refused (exit 1) with the reason",
+		summary: "Check a .ghostlyapp as a client would, from a file or an https URL: its manifest and digest, or refused (exit 1) with the reason, revoked when the ghostly-revoke.json beside it revokes this version",
 		args: ["bundle"],
-		run: async (_, a) => (await import("./apps-DcZKu29s.js")).verifyApp(a.bundle)
+		run: async (_, a) => (await import("./apps-B6gqk4GD.js")).verifyApp(a.bundle)
 	},
 	"store sign": {
 		method: "store.sign",
@@ -1008,14 +1026,14 @@ var commands$8 = {
 		options: {
 			key: {
 				...key,
-				description: "The store key file (made, owner-only, when it is missing and the index names no key; keep it offline)"
+				description: "The store key file (made, owner-only, when it is missing, the index names no key and no signed index is in the output folder; keep it offline)"
 			},
 			out: {
 				type: "string",
 				description: "The folder to write ghostly-store.json and ghostly-store.sig in (default: the index's)"
 			}
 		},
-		run: async ({ options }, a) => (await import("./apps-DcZKu29s.js")).signStore(a.index, keyFile(options.key, "store sign <index> --key <file> [--out <dir>]"), options.out)
+		run: async ({ options }, a) => (await import("./apps-B6gqk4GD.js")).signStore(a.index, keyFile(options.key, "store sign <index> --key <file> [--out <dir>]"), here(options.out))
 	}
 };
 //#endregion
@@ -1048,6 +1066,7 @@ var commands$7 = {
 		params: ({ options }, a) => {
 			if (a.mode !== void 0 && a.mode !== "on" && a.mode !== "off") throw new CliError("usage", "ghostly call auto [on|off] [--from <chat>]... [--rate n]");
 			if (a.mode !== "on" && (options.from !== void 0 || options.rate !== void 0)) throw new CliError("usage", "--from and --rate go with on: ghostly call auto on --from <chat>");
+			refs(options.from, "from", "chat");
 			if (a.mode === void 0) return {};
 			return a.mode === "on" ? {
 				on: true,
@@ -1314,6 +1333,7 @@ var commands$6 = {
 		},
 		params: ({ options }, a) => {
 			if (!Array.isArray(options.to) || !options.to.length) throw new CliError("usage", "Missing --to: ghostly forward <chat|group> <message>... --to <chat|group>... [--force] [--wait none|sent] [--timeout s]");
+			refs(options.to, "to", "chat or group");
 			return {
 				chat: a.chat,
 				messages: (a.message ?? "").split(" ").filter(Boolean),
@@ -1336,9 +1356,9 @@ var commands$6 = {
 	},
 	"invite join": {
 		method: "invite.join",
-		usage: "invite join <invite-or-link> [--label <name>]",
-		summary: "Join a chat from its invite",
-		args: ["invite"],
+		usage: "invite join [<invite-or-link> | -] [--label <name>]",
+		summary: "Join a chat from its invite; the invite on stdin keeps it out of ps",
+		args: ["invite?"],
 		options: { label: {
 			type: "string",
 			description: "A name for the chat on this side"
@@ -1771,10 +1791,10 @@ var commands$4 = {
 			description: "Remove the picture"
 		} },
 		params: ({ options }, a) => {
-			if (a.path === void 0 && options.clear !== true) throw new CliError("usage", "Missing <jpeg>: ghostly profile picture <jpeg> | --clear");
-			if (a.path !== void 0 && options.clear === true) throw new CliError("usage", "--clear removes the picture: not with a <jpeg>");
+			if (!a.path && options.clear !== true) throw new CliError("usage", "Missing <jpeg>: ghostly profile picture <jpeg> | --clear");
+			if (a.path && options.clear === true) throw new CliError("usage", "--clear removes the picture: not with a <jpeg>");
 			return {
-				path: here(a.path),
+				path: here(a.path || void 0),
 				clear: options.clear === true
 			};
 		}
@@ -1918,9 +1938,9 @@ var commands$3 = {
 	},
 	"group join": {
 		method: "group.join",
-		usage: "group join <link>",
-		summary: "Join a group by its link",
-		args: ["link"],
+		usage: "group join [<link> | -]",
+		summary: "Join a group by its link; the link on stdin keeps it out of ps",
+		args: ["link?"],
 		params: (_, { link }) => ({ link })
 	},
 	"group leave": {
@@ -1978,11 +1998,11 @@ var commands$3 = {
 			description: "Remove the picture"
 		} },
 		params: ({ options }, a) => {
-			if (a.path === void 0 && options.clear !== true) throw new CliError("usage", "Missing <jpeg>: ghostly group picture <group> <jpeg> | --clear");
-			if (a.path !== void 0 && options.clear === true) throw new CliError("usage", "--clear removes the picture: not with a <jpeg>");
+			if (!a.path && options.clear !== true) throw new CliError("usage", "Missing <jpeg>: ghostly group picture <group> <jpeg> | --clear");
+			if (a.path && options.clear === true) throw new CliError("usage", "--clear removes the picture: not with a <jpeg>");
 			return {
 				group: a.group,
-				path: here(a.path),
+				path: here(a.path || void 0),
 				clear: options.clear === true
 			};
 		}
@@ -2735,28 +2755,45 @@ function idSlot(command) {
 	return (index) => at(index) && (shift === 0 || index + shift >= names.length || at(index + shift));
 }
 /**
-* The positionals of a command, by name; missing required ones are a usage error. A leading `name?` is optional: it
-* is given only when every required one is there too (`file accept [<chat>] <file>`). A trailing `name...` takes the
-* rest and needs at least one word; `name...?` may take none (text from stdin, `chat rename`'s name back to the
-* contact's).
+* The placeholders a usage line shows for its positionals, in order: `chat pay <chat> <sats> [--memo t]` →
+* ["chat", "sats"]. One that is not a plain `<x>` (`[text... | --text <text>]`) is undefined; the flags end them.
+*/
+function usageNames(usage) {
+	const words = usage.split(/\s+/);
+	const first = words.findIndex((word) => word.startsWith("<") || word.startsWith("["));
+	const out = [];
+	for (const word of first === -1 ? [] : words.slice(first)) {
+		if (/^\[?-|^\|/.test(word)) break;
+		out.push(/^\[?<([^>]+?)(?:\.\.\.)?>(?:\.\.\.)?\]?$/.exec(word)?.[1]);
+	}
+	return out;
+}
+/**
+* The positionals of a command, by name; missing required ones are a usage error, and so are ones given as "" (an
+* unset variable in a script), before the profile opens. A leading `name?` is optional: it is given only when every
+* required one is there too (`file accept [<chat>] <file>`). A trailing `name...` takes the rest and needs at least
+* one word that is not ""; `name...?` may take none (text from stdin, `chat rename`'s name back to the contact's).
 */
 function positionals(command, values) {
 	let names = command.args ?? [];
 	const optional = names.filter(leadingOptional);
+	let skip = 0;
 	if (optional.length) {
-		const skip = Math.max(0, optional.length - Math.max(0, values.length - (names.length - optional.length)));
+		skip = Math.max(0, optional.length - Math.max(0, values.length - (names.length - optional.length)));
 		names = [...optional.slice(skip).map((name) => name.slice(0, -1)), ...names.filter((name) => !leadingOptional(name))];
 	}
+	const shown = usageNames(command.usage);
+	const missing = (i, name) => new CliError("usage", `Missing <${shown[i + skip] ?? name}>: ghostly ${command.usage}`);
 	const out = {};
 	for (let i = 0; i < names.length; i++) {
 		const name = names[i].replace(/\?$/, "");
 		if (name.endsWith("...")) {
 			const rest = values.slice(i);
-			if (!rest.length && !names[i].endsWith("?")) throw new CliError("usage", `Missing <${name.slice(0, -3)}>: ghostly ${command.usage}`);
+			if (rest.every((word) => word === "") && !names[i].endsWith("?")) throw missing(i, name.slice(0, -3));
 			out[name.slice(0, -3)] = rest.length ? rest.join(" ") : void 0;
 			return out;
 		}
-		if (values[i] === void 0) throw new CliError("usage", `Missing <${name}>: ghostly ${command.usage}`);
+		if (values[i] === void 0 || values[i] === "") throw missing(i, name);
 		out[name] = values[i];
 	}
 	noMoreThan(names.length, values, command.usage);
@@ -3131,6 +3168,20 @@ var Feed = class {
 * a warning. Fills `params` in place; the warning to print on stderr, if any. `tty`: stdin is a terminal, where a
 * read would wait on the keyboard without a word.
 */
+var JOINS = {
+	"group.join": {
+		param: "link",
+		arg: "<link>",
+		command: "group join",
+		what: "A group's link"
+	},
+	"invite.join": {
+		param: "invite",
+		arg: "<invite-or-link>",
+		command: "invite join",
+		what: "An invite"
+	}
+};
 async function secretsFromStdin(method, params, read, tty = false) {
 	const warning = (what) => `${what} on the command line shows in ps and the shell's history: give it on stdin instead`;
 	if (method === "wallet.redeem") {
@@ -3142,6 +3193,16 @@ async function secretsFromStdin(method, params, read, tty = false) {
 		params.token = token;
 		return;
 	}
+	const join = JOINS[method];
+	if (join) {
+		if (params[join.param] !== void 0 && params[join.param] !== "-") return warning(join.what);
+		const missing = () => new CliError("usage", `Missing ${join.arg}: give it on stdin (… | ghostly ${join.command}) or as an argument`);
+		if (tty) throw missing();
+		const value = (await read()).trim();
+		if (!value) throw missing();
+		params[join.param] = value;
+		return;
+	}
 	if (method === "wallet.create") {
 		const onLine = params.apiKey !== void 0;
 		if (params.stdin === true) {
@@ -3160,6 +3221,18 @@ async function secretsFromStdin(method, params, read, tty = false) {
 		return onLine ? warning("An API key") : void 0;
 	}
 }
+/**
+* `wallet create --value`: the names given on the command line that the chosen source's form marks `kind: "secret"`
+* (an NWC URI, a macaroon, a rune, an RPC password), as a warning. `list`: a `wallet.list` answer, where the forms are.
+*/
+function secretValuesWarning(list, type, provider, names) {
+	if (!names.length) return void 0;
+	const id = provider ?? (type === "bitcoin" ? "bdk" : void 0);
+	const fields = (list?.offers ?? []).find((o) => o.type === type && o.providers)?.providers?.find((p) => p.id === id)?.fields ?? [];
+	const secret = names.filter((name) => fields.some((f) => f.name === name && f.kind === "secret"));
+	if (!secret.length) return void 0;
+	return `${secret.map((name) => `--value ${name}`).join(", ")} on the command line shows in ps and the shell's history: give ${secret.length > 1 ? "them" : "it"} on stdin instead (--stdin, name=value lines)`;
+}
 //#endregion
 //#region src/main.ts
 var VERSION = package_default.version;
@@ -3168,8 +3241,8 @@ var VERSION = package_default.version;
 * command a running daemon answers loads none of them, and starts about as fast as Node does. Statically imported, they
 * cost every command ~100 ms before its socket was opened.
 */
-var engineApi = () => import("./api-SYPJgFRU.js");
-var engineHost = () => import("./host-C7hA-Za7.js");
+var engineApi = () => import("./api-BCwaCbKh.js");
+var engineHost = () => import("./host-C74Sy5jT.js");
 var pretty = false;
 function print(value) {
 	process.stdout.write(JSON.stringify(value, null, pretty ? 2 : void 0) + "\n");
@@ -3384,11 +3457,12 @@ var SPECIAL = [
 	],
 	["settings set <key> <json-value>", "Change one: relays, irohRelays, hyperdhtRelay, readRelays, iceServers, publicProfiles, online, shareProfile, sendTyping, autoDownloads, serveFiles, nick"],
 	[
-		"engine <method> [json-params | -] [--confirm-real] [--show-secret]",
+		"engine <method> [json-params | -] [--confirm-real] [--show-secret] [--force]",
 		"Any call of the app's engine, with its own parameters",
 		{
 			"confirm-real": o("boolean", "Confirm a Mainnet (real money) spend"),
-			"show-secret": o("boolean", "Print a call's secrets")
+			"show-secret": o("boolean", "Print a call's secrets"),
+			force: o("boolean", "Send a text that looks like a secret")
 		}
 	],
 	["engine --list", "The engine's calls"],
@@ -3467,11 +3541,13 @@ function commandHelp(words) {
 		const own = commandWords(row.usage);
 		return list.every((word, i) => own[i] === word);
 	});
+	const given = words;
 	let rows = named(words);
 	while (!rows.length && words.length > 1) rows = named(words = words.slice(0, -1));
 	const asked = words.join(" ");
 	if (!rows.length) throw new CliError("usage", `Unknown command: ${asked} (ghostly help)`);
 	const exact = rows.filter((row) => commandWords(row.usage).join(" ") === asked);
+	if (!exact.length && words.length < given.length) throw unknownCommand(given[0], given[1]);
 	const lines = [];
 	for (const row of exact) {
 		lines.push(`Usage: ghostly ${row.usage}`, "", `  ${row.summary}`);
@@ -3611,12 +3687,13 @@ async function profileCommand(sub, argv) {
 			if (parsed.options.passphrase === true) throw new CliError("usage", "The passphrase comes from --passphrase-file or GHOSTLY_BACKUP_PASSPHRASE, never the command line");
 			if (unsealed && (parsed.options["passphrase-file"] !== void 0 || process.env.GHOSTLY_BACKUP_PASSPHRASE)) throw new CliError("usage", "A passphrase is set (--passphrase-file or GHOSTLY_BACKUP_PASSPHRASE) and --no-passphrase was given: choose one");
 			const light = parsed.options.light === true ? { light: true } : {};
+			const path = here(out);
 			const params = unsealed ? {
-				path: resolve(out),
+				path,
 				noPassphrase: true,
 				...light
 			} : {
-				path: resolve(out),
+				path,
 				passphrase: backupPassphrase(parsed.options["passphrase-file"]),
 				...light
 			};
@@ -3629,7 +3706,7 @@ async function profileCommand(sub, argv) {
 			const [file, name] = parsed.positionals;
 			if (!file || !name) throw new CliError("usage", "ghostly profile restore <file> <new profile> [--passphrase-file f] [--use]");
 			noMoreThan(2, parsed.positionals, "profile restore <file> <new profile> [--passphrase-file f] [--use]");
-			const { backupFileProtection, restoreProfile } = await import("./backup-CSMw2GHv.js");
+			const { backupFileProtection, restoreProfile } = await import("./backup-Cm8ptQQA.js");
 			const protection = await backupFileProtection(file);
 			const paths = await restoreProfile(g.home, checkProfileName(name), file, protection === "none" ? void 0 : backupPassphrase(parsed.options["passphrase-file"], RESTORE_PASSPHRASE));
 			if (parsed.options.use) selectProfile(g.home, name);
@@ -3640,7 +3717,7 @@ async function profileCommand(sub, argv) {
 			});
 			return;
 		}
-		default: throw new CliError("usage", "ghostly profile create|list|use|show|set|picture|backup|restore");
+		default: throw unknownCommand("profile", sub);
 	}
 }
 /**
@@ -3670,10 +3747,24 @@ function onStopSignals(stop) {
 var BACKUP_PASSPHRASE = "The backup passphrase comes from --passphrase-file or GHOSTLY_BACKUP_PASSPHRASE (at least 12 characters). For a backup that is not encrypted, say so with --no-passphrase";
 /** Restore takes no --no-passphrase: a backup made without one says so itself. */
 var RESTORE_PASSPHRASE = "This backup is encrypted: its passphrase comes from --passphrase-file or GHOSTLY_BACKUP_PASSPHRASE";
-/** The backup passphrase: from a file or the environment, never the command line (it would sit in shell history). */
+/**
+* The backup passphrase: from a file or the environment, never the command line (it would sit in shell history). The
+* file is said as every other file the CLI reads: "" names none, a folder is named, and an empty one is called that,
+* not "comes from --passphrase-file" to someone who gave it.
+*/
 function backupPassphrase(file, missing = BACKUP_PASSPHRASE) {
-	const value = typeof file === "string" ? readFileSync(file, "utf8").replace(/\r?\n$/, "") : process.env.GHOSTLY_BACKUP_PASSPHRASE;
-	if (!value) throw new CliError("usage", missing);
+	if (typeof file !== "string") {
+		const value = process.env.GHOSTLY_BACKUP_PASSPHRASE;
+		if (!value) throw new CliError("usage", missing);
+		return value;
+	}
+	let value;
+	try {
+		value = readFileSync(here(file), "utf8").replace(/\r?\n$/, "");
+	} catch (error) {
+		throw localFileError(error, file) ?? error;
+	}
+	if (!value) throw new CliError("bad_request", `${file} is empty: it holds the backup's passphrase`);
 	return value;
 }
 async function runDaemon(g) {
@@ -3772,7 +3863,7 @@ async function daemonCommand(argv) {
 		});
 		return;
 	}
-	if (sub) throw new CliError("usage", "ghostly daemon [--detach] [--timeout s] | daemon status | daemon stop | daemon restart");
+	if (sub) throw unknownCommand("daemon", sub);
 	const startFor = seconds(parsed, 60);
 	if (!parsed.options.detach) {
 		await runDaemon(g);
@@ -3900,9 +3991,15 @@ async function listenCommand(argv) {
 		}
 	});
 	noMoreThan(0, parsed.positionals, SPECIAL.find(([usage]) => usage.startsWith("listen "))[0]);
+	const blank = (value) => typeof value === "string" && value.trim() === "";
+	if (blank(parsed.options.webhook)) throw new CliError("usage", "--webhook needs a URL");
+	if (blank(parsed.options.exec)) throw new CliError("usage", "--exec needs a command");
+	if (parsed.options.cursor === "") throw new CliError("usage", "--cursor needs a file");
+	if (parsed.options.from?.some(blank)) throw new CliError("usage", "--from needs a chat or a contact key");
+	if (parsed.options.group?.some(blank)) throw new CliError("usage", "--group needs a group");
 	const g = globals(parsed);
 	pretty = false;
-	if (parsed.options.webhook) checkWebhook(String(parsed.options.webhook));
+	if (parsed.options.webhook !== void 0) checkWebhook(String(parsed.options.webhook));
 	const types = parsed.options.type ?? [];
 	const turns = parsed.options.turns === true;
 	if (turns && types.length) throw new CliError("usage", "--turns takes the place of --type: a turn is a message received, or a group message that mentions you");
@@ -4042,6 +4139,10 @@ async function engineCommand(argv) {
 			type: "boolean",
 			description: ""
 		},
+		force: {
+			type: "boolean",
+			description: ""
+		},
 		list: {
 			type: "boolean",
 			description: ""
@@ -4071,7 +4172,8 @@ async function engineCommand(argv) {
 	let result = await withSession(g, (s) => s.call("engine.call", {
 		method,
 		params,
-		confirmReal
+		confirmReal,
+		force: parsed.options.force === true
 	}), { offline: ENGINE_READS.includes(method) });
 	if (method === "getState" && !showSecret && result && typeof result === "object") {
 		const { hideStateSecrets } = await engineApi();
@@ -4104,7 +4206,7 @@ async function settingsCommand(sub, argv) {
 		printAnswer(await withSession(g, (s) => s.call("settings.set", { [key]: parsedValue })));
 		return;
 	}
-	throw new CliError("usage", "ghostly settings get | settings set <key> <json-value>");
+	throw unknownCommand("settings", sub);
 }
 async function textCommand(name, argv) {
 	const spec = TEXT_COMMANDS[name];
@@ -4118,7 +4220,7 @@ async function textCommand(name, argv) {
 	if (parsed.options.text !== void 0) {
 		if (text || parsed.options.stdin) throw new CliError("usage", "Give the text once: as arguments, --text or stdin");
 		text = String(parsed.options.text);
-	} else if (parsed.options.stdin || !text && !process.stdin.isTTY) {
+	} else if (parsed.options.stdin || words.length === 0 && !process.stdin.isTTY) {
 		if (text) throw new CliError("usage", "Give the text as arguments or on stdin, not both");
 		text = (await readStdin()).replace(/\n$/, "");
 	}
@@ -4131,7 +4233,7 @@ async function textCommand(name, argv) {
 	};
 	if (spec.target === "group") params.mentions = parsed.options.mention ?? [];
 	if (parsed.options.reply !== void 0) params.reply = parsed.options.reply;
-	if (!spec.message) Object.assign(params, (await import("./buttons-CGRqZ7z0.js")).buttonsOf(parsed.options));
+	if (!spec.message) Object.assign(params, (await import("./buttons-PCvHRlkS.js")).buttonsOf(parsed.options));
 	print(await withSession(g, (s) => {
 		if (spec.target === "chat") {
 			params.wait = parsed.options.wait ?? (s.mode === "one-shot" ? spec.message ? "confirmed" : "sent" : "none");
@@ -4230,14 +4332,23 @@ async function tableCommand(name, argv) {
 	const params = command.params?.(parsed, args) ?? {};
 	for (const key of Object.keys(params)) if (params[key] === void 0) delete params[key];
 	if (command.method === "identity.complete") {
-		if (params.evidenceFile) params.evidence = readFileSync(params.evidenceFile, "utf8");
+		if (params.evidenceFile) try {
+			params.evidence = readFileSync(params.evidenceFile, "utf8");
+		} catch (error) {
+			throw localFileError(error, params.evidenceFile) ?? error;
+		}
 		else if (params.stdin) params.evidence = await readStdin();
 		delete params.evidenceFile;
 		delete params.stdin;
 	}
+	const lineValues = command.method === "wallet.create" ? Object.keys(params.values ?? {}) : [];
 	const secretWarning = await secretsFromStdin(command.method, params, readStdin, process.stdin.isTTY === true);
 	if (secretWarning) process.stderr.write(`ghostly: ${secretWarning}\n`);
 	printAnswer(await withSession(g, async (s) => {
+		if (lineValues.length) {
+			const warning = secretValuesWarning(await s.call("wallet.list", { network: params.network ?? "testnet" }).catch(() => void 0), params.type, params.provider, lineValues);
+			if (warning) process.stderr.write(`ghostly: ${warning}\n`);
+		}
 		const result = await s.call(command.method, params);
 		if (command.method === "invite.join" && s.mode === "one-shot") await s.call("chat.wait", {
 			chat: result.chat,
@@ -4406,4 +4517,4 @@ async function run(argv) {
 //#endregion
 export { run };
 
-//# sourceMappingURL=main-DC8cUkDx.js.map
+//# sourceMappingURL=main-DNzQOdNG.js.map