@glyphteck/veyl 0.56.0 → 0.58.0

package/dist/cli.js

@@ -47,26 +47,6 @@ var __export = (target, all) => {
 var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
-// ../../core/agreement.js
-function hasCurrentAgreement(user) {
-  const agreement = user?.agreement;
-  return agreement?.termsVersion === CURRENT_AGREEMENT.termsVersion && agreement?.communityRulesVersion === CURRENT_AGREEMENT.communityRulesVersion && !!agreement?.acceptedAt;
-}
-function requireCurrentTermsVersion(value) {
-  const version = typeof value === "string" ? value.trim() : "";
-  if (version !== TERMS_VERSION) {
-    throw new Error(`Current Terms version ${TERMS_VERSION} must be accepted.`);
-  }
-  return version;
-}
-var TERMS_VERSION = "2026-07-15", COMMUNITY_RULES_VERSION = "2026-05-11.1", CURRENT_AGREEMENT;
-var init_agreement = __esm(() => {
-  CURRENT_AGREEMENT = Object.freeze({
-    termsVersion: TERMS_VERSION,
-    communityRulesVersion: COMMUNITY_RULES_VERSION
-  });
-});
-
 // ../../node_modules/.bun/@noble+hashes@2.2.0/node_modules/@noble/hashes/utils.js
 function isBytes(a) {
   return a instanceof Uint8Array || ArrayBuffer.isView(a) && a.constructor.name === "Uint8Array" && "BYTES_PER_ELEMENT" in a && a.BYTES_PER_ELEMENT === 1;
@@ -8778,6 +8758,19 @@ var init_avatar = __esm(() => {
   AVATAR_VERSION_RE = /^[0-9a-f]{64}$/;
 });
 
+// ../../core/agreement.js
+function hasCurrentAgreement(user) {
+  const agreement = user?.agreement;
+  return agreement?.termsVersion === CURRENT_AGREEMENT.termsVersion && agreement?.communityRulesVersion === CURRENT_AGREEMENT.communityRulesVersion && !!agreement?.acceptedAt;
+}
+var TERMS_VERSION = "2026-07-15", COMMUNITY_RULES_VERSION = "2026-05-11.1", CURRENT_AGREEMENT;
+var init_agreement = __esm(() => {
+  CURRENT_AGREEMENT = Object.freeze({
+    termsVersion: TERMS_VERSION,
+    communityRulesVersion: COMMUNITY_RULES_VERSION
+  });
+});
+
 // ../../core/utils/time.js
 function timestampMs(value, fallback = null, options = {}) {
   let ms = null;
@@ -32454,9 +32447,9 @@ function stopped(signal) {
 }
 async function listenAccount(client, options = {}) {
   const messageSource = nextListenerSource();
-  const compact2 = options.compact === true || options.agent === true;
-  const incomingOnly = options.incomingOnly === false ? false : options.incomingOnly === true || options.incoming === true || options.agent === true;
-  const transientChats = options.agent === true && options.persistentChats !== true;
+  const compact2 = options.compact !== false;
+  const incomingOnly = options.incomingOnly !== false;
+  const transientChats = options.persistentChats !== true;
   const chatCount = cleanCount(options.chatCount || options.chats, DEFAULT_CHAT_COUNT, 500);
   const messageCount = cleanCount(options.messageCount || options.messages, DEFAULT_MESSAGE_COUNT);
   const replayMessageLimit = cleanCount(options.replayMessageLimit, DEFAULT_REPLAY_MESSAGE_LIMIT, DEFAULT_REPLAY_MESSAGE_LIMIT);
@@ -32615,7 +32608,7 @@ async function listenAccount(client, options = {}) {
       }
       page.release?.();
       if (count >= replayMessageLimit) {
-        throw new Error(`agent replay checkpoint not found: ${chat.id}`);
+        throw new Error(`listener replay checkpoint not found: ${chat.id}`);
       }
       count = Math.min(replayMessageLimit, count * 2);
     }
@@ -41132,7 +41125,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "veyl",
-    version: "0.56.0",
+    version: "0.58.0",
     private: true,
     license: "UNLICENSED",
     workspaces: {
@@ -41249,15 +41242,13 @@ function cleanOptionalUsername(value) {
 }
 function agreementSummary(user) {
   const agreement = user?.agreement || null;
-  const acceptedAt = timestampMs(agreement?.acceptedAt);
   return {
-    current: { ...CURRENT_AGREEMENT },
-    accepted: agreement ? {
-      termsVersion: agreement.termsVersion || null,
-      communityRulesVersion: agreement.communityRulesVersion || null,
-      acceptedAt
-    } : null,
-    currentAccepted: hasCurrentAgreement(user)
+    links: {
+      terms: links.terms,
+      communityRules: links.communityRules
+    },
+    accepted: hasCurrentAgreement(user),
+    acceptedAt: timestampMs(agreement?.acceptedAt)
   };
 }
 function cleanTargetValue(value) {
@@ -41531,10 +41522,10 @@ class AccountRuntime {
       uid: profile.uid,
       username: profile.username,
       profile: profile.profile,
-      credentialId: profile.credentialId,
       network: this.session?.network || profile.network || this.network,
+      hasAccountKey: !!(profile.privateKeyPem || this.options.accountKey || this.options.credential?.privateKeyPem),
       hasVault: profile.hasVault === true,
-      hasVaultSecret: !!(profile.vaultSecret || this.options.vaultSecret),
+      hasVaultKey: !!(profile.vaultSecret || this.options.vaultKey),
       walletPK: profile.walletPK || null,
       chatPK: profile.chatPK || null,
       notificationPK: profile.notificationPK || null,
@@ -41560,7 +41551,6 @@ class AccountRuntime {
     const username = cleanUsername3(options.username);
     const profileName = this.store.profile || username;
     const network = String(options.network || this.network).toUpperCase();
-    const termsVersion = requireCurrentTermsVersion(options.termsVersion);
     const machine = options.credential || this.options.credential || this.ports.createCredential();
     const namespaceKeyPath = options.namespaceKeyPath || this.options.namespaceKeyPath;
     const namespaceClaim = options.namespaceClaim || (namespaceKeyPath ? await this.ports.signNamespaceClaim({
@@ -41572,7 +41562,7 @@ class AccountRuntime {
     const start = await this.callAccountEndpoint("/account/create/start", {
       username,
       publicKeyPem: machine.publicKeyPem,
-      termsVersion,
+      termsVersion: TERMS_VERSION,
       ...namespaceClaim ? { namespaceClaim } : {}
     });
     const finish = await this.callAccountEndpoint("/account/create/finish", {
@@ -41581,33 +41571,30 @@ class AccountRuntime {
     });
     await this.ports.signIn(this.auth, finish.token);
     this.autoLogin = true;
-    const profile = await this.saveProfile({
+    await this.saveProfile({
       profile: profileName,
       username,
       uid: finish.uid,
       network,
       credentialId: finish.credentialId || machine.credentialId,
       publicKeyPem: machine.publicKeyPem,
-      privateKeyPem: options.saveCredential === false ? null : machine.privateKeyPem,
+      privateKeyPem: options.saveKey === false ? null : machine.privateKeyPem,
       auth: "machine",
       bot: finish.bot === BOT_PROFILE_MARKER ? BOT_PROFILE_MARKER : null,
       createdAt: Date.now(),
       hasVault: false
     });
-    return {
-      ...this.accountSummary(profile),
-      publicKeyPem: machine.publicKeyPem,
-      privateKeyPem: machine.privateKeyPem
-    };
+    return machine.privateKeyPem;
   }
   async loginAccount(options = {}) {
     const username = cleanOptionalUsername(options.username);
     const profile = await this.loadProfile(this.store.profile || username);
-    const credential = options.credential || this.options.credential;
-    const credentialId = options.credentialId || credential?.credentialId || profile.credentialId;
-    const privateKeyPem = options.privateKeyPem || credential?.privateKeyPem || profile.privateKeyPem;
+    const key = String(options.key || this.options.accountKey || this.ports.env?.VEYL_ACCOUNT_KEY || "").trim();
+    const credential = options.credential || this.options.credential || (key ? this.ports.readCredential(key) : null);
+    const credentialId = credential?.credentialId || profile.credentialId;
+    const privateKeyPem = credential?.privateKeyPem || profile.privateKeyPem;
     if (!credentialId || !privateKeyPem) {
-      throw new Error("machine credential required");
+      throw new Error("account key required");
     }
     const namespaceKeyPath = options.namespaceKeyPath || this.options.namespaceKeyPath;
     const namespaceClaim = options.namespaceClaim || (namespaceKeyPath ? await this.ports.signNamespaceClaim({
@@ -41631,6 +41618,8 @@ class AccountRuntime {
       uid: finish.uid || profile.uid,
       username: finish.username || profile.username,
       credentialId,
+      publicKeyPem: credential?.publicKeyPem || profile.publicKeyPem,
+      privateKeyPem: options.saveKey === false ? profile.privateKeyPem || null : privateKeyPem,
       bot: finish.bot === BOT_PROFILE_MARKER ? BOT_PROFILE_MARKER : null,
       lastLoginAt: Date.now()
     });
@@ -41654,38 +41643,32 @@ class AccountRuntime {
     const username = cleanUsername3(options.username);
     const profileName = this.store.profile || username;
     const network = String(options.network || this.network).toUpperCase();
-    const termsVersion = requireCurrentTermsVersion(options.termsVersion);
     const flow = await this.ports.runPasskeyFlow({
       mode: "create",
       label: options.label || username,
       webUrl: options.webUrl,
       timeoutMs: options.timeoutMs,
       onUrl: options.onPasskeyUrl,
-      termsVersion
+      termsVersion: TERMS_VERSION
     });
     const user = await this.ports.signIn(this.auth, flow.token);
     this.autoLogin = true;
     await this.accountOwner.profile.setUsername(username);
     const machine = options.credential || this.ports.createCredential();
     const credential = machine ? await this.addMachineCredential(machine) : null;
-    const profile = await this.saveProfile({
+    await this.saveProfile({
       profile: profileName,
       username,
       uid: user.uid,
       network,
       credentialId: credential?.credentialId || machine?.credentialId || null,
       publicKeyPem: machine?.publicKeyPem || null,
-      privateKeyPem: options.saveCredential === false ? null : machine?.privateKeyPem || null,
+      privateKeyPem: options.saveKey === false ? null : machine?.privateKeyPem || null,
       auth: "passkey",
       createdAt: Date.now(),
       hasVault: false
     });
-    return {
-      ...this.accountSummary(profile),
-      passkey: true,
-      publicKeyPem: machine?.publicKeyPem || null,
-      privateKeyPem: machine?.privateKeyPem || null
-    };
+    return machine.privateKeyPem;
   }
   async loginPasskeyAccount(options = {}) {
     const requested = cleanOptionalUsername(options.username);
@@ -41701,7 +41684,7 @@ class AccountRuntime {
     this.autoLogin = true;
     const username = await this.readUsername(user.uid, stored?.username || requested);
     const hasSavedCredential = !!(stored?.credentialId && stored?.privateKeyPem);
-    const machine = hasSavedCredential ? null : options.credential || this.ports.createCredential();
+    const machine = hasSavedCredential ? null : options.credential || (options.saveKey === false ? null : this.ports.createCredential());
     const credential = machine ? await this.addMachineCredential(machine) : null;
     const profile = await this.saveProfile({
       ...stored || {},
@@ -41711,17 +41694,12 @@ class AccountRuntime {
       network: String(stored?.network || options.network || this.network).toUpperCase(),
       credentialId: credential?.credentialId || stored?.credentialId || machine?.credentialId || null,
       publicKeyPem: machine?.publicKeyPem || stored?.publicKeyPem || null,
-      privateKeyPem: options.saveCredential === false ? stored?.privateKeyPem || null : machine?.privateKeyPem || stored?.privateKeyPem || null,
+      privateKeyPem: options.saveKey === false ? stored?.privateKeyPem || null : machine?.privateKeyPem || stored?.privateKeyPem || null,
       auth: "passkey",
       bot: null,
       lastLoginAt: Date.now()
     });
-    return {
-      ...this.accountSummary(profile),
-      passkey: true,
-      publicKeyPem: machine?.publicKeyPem || null,
-      privateKeyPem: machine?.privateKeyPem || null
-    };
+    return this.accountSummary(profile);
   }
   async me() {
     const profile = await this.store.load();
@@ -41757,7 +41735,7 @@ class AccountRuntime {
       throw new Error("account login required");
     }
     if (profile.auth === "passkey" && (!profile.credentialId || !profile.privateKeyPem)) {
-      await this.loginPasskeyAccount({ username: profile.profile, saveCredential: false });
+      await this.loginPasskeyAccount({ username: profile.profile, saveKey: false });
       return this.profileData;
     }
     await this.loginAccount({
@@ -41784,7 +41762,6 @@ class AccountRuntime {
     return agreementSummary(await this.readyAccountUser(options));
   }
   async acceptAccountTerms(options = {}) {
-    requireCurrentTermsVersion(options.termsVersion);
     const user = await this.readyAccountUser(options);
     if (!hasCurrentAgreement(user)) {
       await user.acceptAgreement();
@@ -41872,9 +41849,9 @@ class AccountRuntime {
     if (await this.cloud.user.vault.exists(profile.uid)) {
       throw new Error("vault already exists");
     }
-    const vaultSecret = String(options.secret || this.options.vaultSecret || this.ports.env?.VEYL_VAULT_SECRET || this.ports.randomSecret()).trim();
+    const vaultSecret = String(options.key || this.options.vaultKey || this.ports.env?.VEYL_VAULT_KEY || this.ports.randomSecret()).trim();
     if (!vaultSecret) {
-      throw new Error("vault secret required");
+      throw new Error("vault key required");
     }
     const encrypted = options.masterSeed ? await this.ports.vaultCrypto.encryptMasterSeed(options.masterSeed, vaultSecret, { registry: options.registry }) : await this.ports.vaultCrypto.encryptSeed(vaultSecret, { registry: options.registry });
     const vault = packSeedData(encrypted);
@@ -41883,7 +41860,7 @@ class AccountRuntime {
     const next = await this.saveProfile({
       ...profile,
       hasVault: true,
-      vaultSecret: options.saveSecret === false ? null : vaultSecret,
+      vaultSecret: options.saveKey === false ? null : vaultSecret,
       network: session.network,
       walletPK: session.walletPK,
       chatPK: session.chatPK,
@@ -41892,16 +41869,13 @@ class AccountRuntime {
     });
     this.session.account = this.accountSummary(next);
     this.trackWalletIdentity(session);
-    return {
-      ...this.accountSummary(next),
-      vaultSecret
-    };
+    return vaultSecret;
   }
   async exportWallet(options = {}) {
     const profile = await this.ensureAuth();
-    const vaultSecret = String(options.secret || this.options.vaultSecret || this.ports.env?.VEYL_VAULT_SECRET || profile.vaultSecret || "").trim();
+    const vaultSecret = String(options.key || this.options.vaultKey || this.ports.env?.VEYL_VAULT_KEY || profile.vaultSecret || "").trim();
     if (!vaultSecret) {
-      throw new Error("vault secret required");
+      throw new Error("vault key required");
     }
     const vault = await this.cloud.user.vault.read(profile.uid);
     if (!vault) {
@@ -41917,9 +41891,9 @@ class AccountRuntime {
     if (this.session) {
       return this.accountSummary(profile);
     }
-    const vaultSecret = String(options.secret || this.options.vaultSecret || this.ports.env?.VEYL_VAULT_SECRET || profile.vaultSecret || "").trim();
+    const vaultSecret = String(options.key || this.options.vaultKey || this.ports.env?.VEYL_VAULT_KEY || profile.vaultSecret || "").trim();
     if (!vaultSecret) {
-      throw new Error("vault secret required");
+      throw new Error("vault key required");
     }
     const vault = await this.cloud.user.vault.read(profile.uid);
     if (!vault) {
@@ -41929,7 +41903,7 @@ class AccountRuntime {
     const next = await this.saveProfile({
       ...profile,
       hasVault: true,
-      vaultSecret: options.saveSecret === false ? profile.vaultSecret || null : profile.vaultSecret || vaultSecret,
+      vaultSecret: options.saveKey === false ? profile.vaultSecret || null : profile.vaultSecret || vaultSecret,
       network: session.network,
       walletPK: session.walletPK || profile.walletPK || null,
       chatPK: session.chatPK,
@@ -42164,7 +42138,7 @@ class AccountRuntime {
     }
   }
 }
-var API_VERSION = 3, REQUIRED_FUNCTION_PORTS;
+var API_VERSION = 4, REQUIRED_FUNCTION_PORTS;
 var init_client = __esm(() => {
   init_values();
   init_pack();
@@ -42175,6 +42149,7 @@ var init_client = __esm(() => {
   init_username();
   init_time();
   init_vault();
+  init_links();
   init_account();
   init_auth();
   init_listen();
@@ -42185,6 +42160,7 @@ var init_client = __esm(() => {
     "openLocalCache",
     "runPasskeyFlow",
     "createCredential",
+    "readCredential",
     "signChallenge",
     "signNamespaceClaim",
     "signIn",
@@ -177109,6 +177085,16 @@ function credentialIdForPublicKey(publicKeyPem) {
   }
   return createHash3("sha256").update(key).digest("base64url");
 }
+function machineCredential(privateKey, publicKey) {
+  const publicKeyPem = publicKey.export({ type: "spki", format: "pem" });
+  const privateKeyPem = privateKey.export({ type: "pkcs8", format: "pem" });
+  return {
+    type: "ed25519",
+    credentialId: credentialIdForPublicKey(publicKeyPem),
+    publicKeyPem,
+    privateKeyPem
+  };
+}
 function createMachineCredential(options2 = {}) {
   let privateKey;
   let publicKey;
@@ -177133,15 +177119,11 @@ function createMachineCredential(options2 = {}) {
   } else {
     ({ privateKey, publicKey } = generateKeyPairSync("ed25519"));
   }
-  const publicKeyPem = publicKey.export({ type: "spki", format: "pem" });
-  const privateKeyPem = privateKey.export({ type: "pkcs8", format: "pem" });
-  const credentialId = credentialIdForPublicKey(publicKeyPem);
-  return {
-    type: "ed25519",
-    credentialId,
-    publicKeyPem,
-    privateKeyPem
-  };
+  return machineCredential(privateKey, publicKey);
+}
+function readMachineCredential(key) {
+  const privateKey = createPrivateKey(String(key ?? ""));
+  return machineCredential(privateKey, createPublicKey(privateKey));
 }
 function signMachineChallenge(privateKeyPem, challenge2) {
   const key = createPrivateKey(String(privateKeyPem ?? ""));
@@ -177651,6 +177633,7 @@ function createNodePorts(options2 = {}) {
     })),
     runPasskeyFlow: options2.runPasskeyFlow || runPasskeyBrowserFlow,
     createCredential: options2.createCredential || createMachineCredential,
+    readCredential: options2.readCredential || readMachineCredential,
     signChallenge: options2.signChallenge || signMachineChallenge,
     signNamespaceClaim: options2.signNamespaceClaim || signNamespaceClaim,
     signIn: options2.signIn || signInRuntime,
@@ -177958,7 +177941,6 @@ class Fleet {
     }) || (() => {});
     const accountEventOptions = typeof this.eventOptions === "function" ? await this.eventOptions(profile) : this.eventOptions;
     record.listenTask = record.client.listen({
-      ...DEFAULT_EVENT_OPTIONS,
       ...accountEventOptions || {},
       signal: controller.signal,
       onEvent: (event2) => {
@@ -178252,13 +178234,9 @@ class Fleet {
 function createFleet(options2 = {}) {
   return new Fleet(options2);
 }
-var DEFAULT_BOOT_CONCURRENCY = 4, DEFAULT_EVENT_BACKLOG = 1000, DEFAULT_START_TIMEOUT_MS = 30000, DEFAULT_EVENT_OPTIONS;
+var DEFAULT_BOOT_CONCURRENCY = 4, DEFAULT_EVENT_BACKLOG = 1000, DEFAULT_START_TIMEOUT_MS = 30000;
 var init_fleet = __esm(() => {
   init_node();
-  DEFAULT_EVENT_OPTIONS = Object.freeze({
-    agent: true,
-    replay: false
-  });
 });
 
 // src/fleet-journal.js
@@ -179131,7 +179109,7 @@ class FleetOwner {
         homeDir: this.homeDir,
         activate: false,
         credential: material.credential,
-        vaultSecret: material.vaultSecret,
+        vaultKey: material.vaultSecret,
         namespaceKeyPath: this.options.namespaceKeyPath,
         getVaultMasterSeed: () => {
           const derived = deriveFleetAccount(this.seed, accountIndex);
@@ -179265,7 +179243,6 @@ class FleetOwner {
         throw new Error("stop the fleet owner before provisioning an account");
       }
       return this.withStoppedOwnerLock(async () => {
-        requireCurrentTermsVersion(input.termsVersion);
         const record = accountRecord(input, this.manifest.nextAccountIndex);
         if (this.slot(record.profile)) {
           throw new Error(`fleet profile exists: ${record.profile}`);
@@ -179274,30 +179251,23 @@ class FleetOwner {
           throw new Error(`fleet username exists: ${record.username}`);
         }
         await this.saveProfiles([...this.manifest.profiles, record], record.accountIndex + 1);
-        return this.finishProvision(record, {
-          create: true,
-          termsVersion: input.termsVersion
-        });
+        return this.finishProvision(record, { create: true });
       });
     });
   }
-  resume(profile, options2 = {}) {
+  resume(profile) {
     return this.mutate(async () => {
       if (this.fleet) {
         throw new Error("stop the fleet owner before resuming provisioning");
       }
       return this.withStoppedOwnerLock(async () => {
-        requireCurrentTermsVersion(options2.termsVersion);
         const record = this.slot(profile);
         if (!record)
           throw new Error("fleet profile not found");
         if (record.state !== "provisioning") {
           throw new Error("fleet profile is already provisioned");
         }
-        return this.finishProvision(record, {
-          create: false,
-          termsVersion: options2.termsVersion
-        });
+        return this.finishProvision(record, { create: false });
       });
     });
   }
@@ -179329,7 +179299,7 @@ class FleetOwner {
       homeDir: this.homeDir,
       activate: false,
       credential: material.credential,
-      vaultSecret: material.vaultSecret,
+      vaultKey: material.vaultSecret,
       namespaceKeyPath: this.options.namespaceKeyPath,
       namespaceKeyOptional: true
     }, record);
@@ -179337,13 +179307,13 @@ class FleetOwner {
       let account = await client2.account.me();
       if (!account?.uid) {
         if (options2.create) {
-          account = await client2.account.create({
+          await client2.account.create({
             username: record.username,
             network: record.network,
-            termsVersion: options2.termsVersion,
             credential: material.credential,
-            saveCredential: false
+            saveKey: false
           });
+          account = await client2.account.me();
         } else {
           try {
             account = await client2.account.login({
@@ -179352,13 +179322,13 @@ class FleetOwner {
           } catch (error) {
             if (error?.code !== "not-found")
               throw error;
-            account = await client2.account.create({
+            await client2.account.create({
               username: record.username,
               network: record.network,
-              termsVersion: options2.termsVersion,
               credential: material.credential,
-              saveCredential: false
+              saveKey: false
             });
+            account = await client2.account.me();
           }
         }
       } else {
@@ -179367,12 +179337,13 @@ class FleetOwner {
         });
       }
       if (account.hasVault !== true) {
-        account = await client2.vault.create({
-          secret: material.vaultSecret,
+        await client2.vault.create({
+          key: material.vaultSecret,
           masterSeed: material.masterSeed,
           registry: material.registry,
-          saveSecret: false
+          saveKey: false
         });
+        account = await client2.account.me();
       } else {
         await client2.ensureUnlocked();
         account = await client2.account.me();
@@ -179417,7 +179388,6 @@ async function openFleetOwner(options2 = {}) {
   });
 }
 var init_fleet_owner = __esm(() => {
-  init_agreement();
   init_username();
   init_node();
   init_fleet_manifest();
@@ -179674,7 +179644,6 @@ __export(exports_src, {
   cleanProfileName: () => cleanProfileName,
   callFleetControl: () => callFleetControl,
   VERSION: () => VERSION,
-  TERMS_VERSION: () => TERMS_VERSION,
   SdkError: () => SdkError,
   ProfileStore: () => ProfileStore,
   OPERATION_OUTCOME_UNKNOWN_CODE: () => OPERATION_OUTCOME_UNKNOWN_CODE,
@@ -179691,7 +179660,6 @@ __export(exports_src, {
   API_VERSION: () => API_VERSION
 });
 var init_src = __esm(() => {
-  init_agreement();
   init_account();
   init_auth();
   init_client();
@@ -179709,9 +179677,6 @@ var init_src = __esm(() => {
 });
 
 // src/cli.js
-init_links();
-init_agreement();
-import { createInterface as createInterface2 } from "node:readline/promises";
 import process11 from "node:process";
 
 // src/commands.js
@@ -179821,22 +179786,35 @@ var inviteLinkInput = (args, context) => ({ ...context.commandOptions, kind: arg
 function peerList(value) {
   return [...new Set((Array.isArray(value) ? value : [value]).flatMap((item) => String(item || "").split(",")).map((item) => item.trim()).filter(Boolean))];
 }
-function accountInput(args, context) {
+function accountCreateInput(args, context) {
   return {
     username: args[0],
     network: context.options.network,
     webUrl: context.options.webUrl,
-    termsVersion: context.options.termsVersion,
-    saveCredential: context.options.saveCredential,
+    saveKey: context.options.saveKey,
     passkey: context.options.passkey === true,
     reserved: context.options.reserved === true,
     onPasskeyUrl: context.onPasskeyUrl
   };
 }
-function vaultInput(_args, context) {
+function accountLoginInput(args, context) {
   return {
-    secret: context.options.secret,
-    saveSecret: context.options.saveSecret
+    username: args[0],
+    network: context.options.network,
+    webUrl: context.options.webUrl,
+    key: context.options.key,
+    saveKey: context.options.saveKey,
+    passkey: context.options.passkey === true,
+    onPasskeyUrl: context.onPasskeyUrl
+  };
+}
+function vaultKeyInput(_args, context) {
+  return { key: context.options.key };
+}
+function vaultStoredKeyInput(_args, context) {
+  return {
+    key: context.options.key,
+    saveKey: context.options.saveKey
   };
 }
 function invoiceCreateInput(args, context) {
@@ -179935,19 +179913,18 @@ var CLI_COMMANDS = Object.freeze([
     apiName: "create",
     clientMethods: ["create", "createPasskey"],
     description: "Create a Veyl account.",
-    properties: { username: stringProp, network: stringProp, termsVersion: stringProp, passkey: booleanProp },
-    required: ["username", "termsVersion"],
+    properties: { username: stringProp, network: stringProp, saveKey: booleanProp, passkey: booleanProp },
+    required: ["username"],
     usage: "account create @name",
-    cliInput: accountInput,
+    cliInput: accountCreateInput,
     access: "write",
     secret: true,
     invoke: (client2, input) => input.passkey ? client2.account.createPasskey(input) : client2.account.create(input),
-    invokeCli: async (client2, input, context) => {
+    invokeCli: (client2, input) => {
       if (input.passkey && input.reserved) {
         throw new Error("reserved username claims require a machine account");
       }
-      const termsVersion = await context.acceptTerms(input.termsVersion);
-      return input.passkey ? client2.account.createPasskey({ ...input, termsVersion }) : client2.account.create({ ...input, termsVersion });
+      return input.passkey ? client2.account.createPasskey(input) : client2.account.create(input);
     }
   }),
   command({
@@ -179955,37 +179932,34 @@ var CLI_COMMANDS = Object.freeze([
     group: "account",
     apiName: "login",
     clientMethods: ["login", "loginPasskey"],
-    description: "Log into a saved machine or passkey account.",
-    properties: { username: stringProp, passkey: booleanProp },
+    description: "Log in with a saved account key or passkey.",
+    properties: { username: stringProp, key: stringProp, saveKey: booleanProp, passkey: booleanProp },
     usage: "account login [@name]",
-    cliInput: accountInput,
+    cliInput: accountLoginInput,
     access: "write",
     secret: true,
     invoke: (client2, input) => input.passkey ? client2.account.loginPasskey(input) : client2.account.login(input),
-    invokeCli: (client2, input) => input.passkey ? client2.account.loginPasskey(input) : client2.account.login({ username: input.username })
+    invokeCli: (client2, input) => input.passkey ? client2.account.loginPasskey(input) : client2.account.login(input)
   }),
   command({ name: "account_show", group: "account", apiName: "show", clientMethods: ["me"], description: "Show the current local account.", usage: "account show", cliInput: optionsOnly, invoke: (client2) => client2.account.me() }),
-  command({ name: "account_terms", group: "account", apiName: "terms", description: "Show current and accepted agreement versions.", usage: "account terms", cliInput: optionsOnly, invoke: (client2) => client2.account.terms() }),
+  command({ name: "account_terms", group: "account", apiName: "terms", description: "Show the agreement links and current acceptance.", usage: "account terms", cliInput: optionsOnly, invoke: (client2) => client2.account.terms() }),
   command({
     name: "account_accept_terms",
     group: "account",
     apiName: "acceptTerms",
     description: "Accept the current Terms and Community Rules.",
-    properties: { termsVersion: stringProp },
-    required: ["termsVersion"],
     usage: "account accept-terms",
-    cliInput: accountInput,
+    cliInput: optionsOnly,
     access: "write",
-    invoke: (client2, input) => client2.account.acceptTerms(input),
-    invokeCli: async (client2, input, context) => client2.account.acceptTerms({ ...input, termsVersion: await context.acceptTerms(input.termsVersion) })
+    invoke: (client2) => client2.account.acceptTerms()
   }),
   command({ name: "account_logout", group: "account", apiName: "logout", description: "Lock and sign out this runtime.", usage: "account logout", cliInput: optionsOnly, access: "write", invoke: (client2) => client2.account.logout() }),
   command({ name: "account_logout_all", group: "account", apiName: "logoutAll", description: LOGOUT_ALL_DEVICES_BODY, usage: "account logout-all", cliInput: optionsOnly, access: "destructive", invoke: (client2) => client2.account.logoutAll() }),
   command({ name: "account_delete", group: "account", apiName: "delete", description: ACCOUNT_DELETE_COPY.body, properties: { confirm: booleanProp }, required: ["confirm"], usage: "account delete", cliInput: optionsOnly, access: "destructive", invoke: (client2, input) => client2.account.delete(input) }),
-  command({ name: "vault_create", group: "vault", apiName: "create", description: "Create and upload a locally encrypted vault.", properties: { secret: stringProp, saveSecret: booleanProp }, usage: "vault create", cliInput: vaultInput, access: "write", secret: true, invoke: (client2, input) => client2.vault.create(input) }),
-  command({ name: "vault_unlock", group: "vault", apiName: "unlock", description: "Unlock the local vault.", properties: { secret: stringProp }, usage: "vault unlock", cliInput: vaultInput, access: "write", secret: true, invoke: (client2, input) => client2.vault.unlock(input) }),
+  command({ name: "vault_create", group: "vault", apiName: "create", description: "Create and upload a locally encrypted vault.", properties: { key: stringProp, saveKey: booleanProp }, usage: "vault create", cliInput: vaultStoredKeyInput, access: "write", secret: true, invoke: (client2, input) => client2.vault.create(input) }),
+  command({ name: "vault_unlock", group: "vault", apiName: "unlock", description: "Unlock the local vault.", properties: { key: stringProp, saveKey: booleanProp }, usage: "vault unlock", cliInput: vaultStoredKeyInput, access: "write", secret: true, invoke: (client2, input) => client2.vault.unlock(input) }),
   command({ name: "vault_lock", group: "vault", apiName: "lock", description: "Lock wallet and chat state.", usage: "vault lock", cliInput: optionsOnly, access: "write", invoke: (client2) => client2.vault.lock() }),
-  command({ name: "vault_export", group: "vault", apiName: "export", description: WALLET_EXPORT_COPY.secretBody, properties: { secret: stringProp }, usage: "vault export", cliInput: vaultInput, session: false, secret: true, invoke: (client2, input) => client2.vault.export(input) }),
+  command({ name: "vault_export", group: "vault", apiName: "export", description: WALLET_EXPORT_COPY.secretBody, properties: { key: stringProp }, usage: "vault export", cliInput: vaultKeyInput, session: false, secret: true, invoke: (client2, input) => client2.vault.export(input) }),
   command({ name: "profile_show", group: "profile", apiName: "show", description: "Show the public account profile.", usage: "profile show", cliInput: optionsOnly, invoke: (client2) => client2.profile.show() }),
   command({
     name: "profile_avatar_set",
@@ -180776,9 +180750,7 @@ Persistent runtime:
 
 Events:
   --replay             emit current messages and transactions on startup
-  --incoming           emit only peer-authored messages
-  --compact            emit smaller event payloads
-  --agent              shorthand for --incoming --compact
+  --all                include self-authored messages; defaults to incoming only
   --no-chats           skip chat message events
   --no-transactions    skip transaction events
 
@@ -180787,8 +180759,10 @@ Entered chat:
 
 Common options:
   --version            print the Veyl product version
+  --key value          account or vault key for the selected command
+  --no-save-key        do not save a supplied or generated key locally
   --count n            result count for list/read/claim/transactions
-  --raw                include raw SDK/backend data when supported
+  --raw                include complete event payloads and raw data when supported
   --memo text          lightning invoice memo
   --expiry seconds     lightning invoice expiry
   --max-fee sats       maximum lightning fee
@@ -180808,7 +180782,6 @@ Common options:
   --note text          report note
   --context text       feedback context
   --no-attachment      report without uploading attached media
-  --accept-terms ver   accept the current Terms and Community Rules when creating an account
 
 Owner namespace:
   namespace init       create the local reserved-username signing key once
@@ -180820,7 +180793,8 @@ Env:
   VEYL_HOME            local profile directory
   VEYL_PROFILE         default profile
   VEYL_NETWORK         wallet network
-  VEYL_VAULT_SECRET    vault secret for unlock/create
+  VEYL_ACCOUNT_KEY     account key for login
+  VEYL_VAULT_KEY       vault key for unlock/create
   VEYL_WEB_URL         passkey browser origin`;
 function print(value) {
   if (value === undefined) {
@@ -180884,7 +180858,7 @@ var VALUE_FLAGS = Object.freeze({
   "--profile": "profile",
   "--network": "network",
   "--session": "session",
-  "--secret": "secret",
+  "--key": "key",
   "--web-url": "webUrl",
   "--interval": "interval",
   "--chat-count": "chatCount",
@@ -180916,13 +180890,11 @@ var VALUE_FLAGS = Object.freeze({
   "--cid": "cid",
   "--fee-quote-id": "feeQuoteId",
   "--fee-amount": "feeAmountSats",
-  "--accept-terms": "termsVersion",
   "--read-policy": "readPolicy"
 });
 var BOOLEAN_FLAGS = Object.freeze({
-  "--no-save-secret": ["saveSecret", false],
+  "--no-save-key": ["saveKey", false],
   "--passkey": ["passkey", true],
-  "--no-save-credential": ["saveCredential", false],
   "--raw": ["raw", true],
   "--no-deduct-fee": ["deductFeeFromWithdrawalAmount", false],
   "--prefer-spark": ["preferSpark", true],
@@ -180931,11 +180903,7 @@ var BOOLEAN_FLAGS = Object.freeze({
   "--include-spark-invoice": ["includeSparkInvoice", true],
   "--no-cleanup": ["cleanup", false],
   "--replay": ["replay", true],
-  "--incoming": ["incomingOnly", true],
-  "--incoming-only": ["incomingOnly", true],
   "--all": ["incomingOnly", false],
-  "--compact": ["compact", true],
-  "--agent": ["agent", true],
   "--no-chats": ["chats", false],
   "--no-transactions": ["transactions", false],
   "--confirm": ["confirm", true],
@@ -180963,26 +180931,6 @@ function parseArgs(argv) {
   }
   return { args, options: options2 };
 }
-async function acceptTerms(value) {
-  if (value != null) {
-    return requireCurrentTermsVersion(value);
-  }
-  if (!process11.stdin.isTTY || !process11.stderr.isTTY) {
-    throw new Error(`Non-interactive account creation requires --accept-terms ${TERMS_VERSION}.`);
-  }
-  console.error(`Terms: ${links.terms}`);
-  console.error(`Community Rules: ${links.communityRules}`);
-  const rl = createInterface2({ input: process11.stdin, output: process11.stderr });
-  try {
-    const answer = await rl.question("Do you agree to the current Terms and Community Rules? [y/N] ");
-    if (!/^y(?:es)?$/iu.test(answer.trim())) {
-      throw new Error("Terms and Community Rules were not accepted.");
-    }
-    return TERMS_VERSION;
-  } finally {
-    rl.close();
-  }
-}
 async function streamClientChat(client2, input) {
   const route = await client2.chat.enter(input.peer, input);
   let finish;
@@ -181024,8 +180972,8 @@ async function runCommand(argv) {
   if (!resolved) {
     throw usageError("unknown command");
   }
-  if (parsed.options.secret) {
-    process11.env.VEYL_VAULT_SECRET = parsed.options.secret;
+  if (parsed.options.key && resolved.command.group !== "account") {
+    process11.env.VEYL_VAULT_KEY = parsed.options.key;
   }
   const sessionOptions = {
     profile: parsed.options.profile,
@@ -181045,7 +180993,6 @@ async function runCommand(argv) {
     return await invokeCliCommand(client2, resolved, {
       options: parsed.options,
       commandOptions: commandOptions(parsed.options),
-      acceptTerms,
       onPasskeyUrl: (url) => console.error(`open ${url}`),
       dispatch: parsed.options.session ? (name7, input) => callSession(sessionOptions, "command", { name: name7, input }) : null,
       chatEnter: (activeClient, input) => parsed.options.session ? streamSessionChat({
@@ -181066,7 +181013,10 @@ async function runCommand(argv) {
       sessionEvents: () => streamSessionEvents({
         profile: parsed.options.profile,
         session: parsed.options.session,
-        eventOptions: parsed.options,
+        eventOptions: {
+          ...parsed.options,
+          compact: parsed.options.raw === true ? false : undefined
+        },
         onEvent: (event2) => console.log(JSON.stringify(event2))
       })
     });