@profullstack/qryptchat 0.10.0 → 0.12.0

package/README.md

@@ -35,7 +35,8 @@ The first run signs you in through your browser, then opens your chats.
 | Enter | send (or open the highlighted chat) |
 | Ctrl+E | the emoji picker: search, recents and every group, drawn with [OpenEmoji](https://github.com/profullstack/openemoji) |
 | `:rocket:` | shortcodes turn into emoji when you send |
-| Tab / Esc | move between the chat list and the composer |
+| `@` `@ali` + Tab | complete a mention, like x.com and IRC: Tab again cycles the matches, Shift+Tab goes back; the line above the composer lists who matches |
+| Tab / Esc | move between the chat list and the composer (Tab completes instead when the cursor is in an `@name`) |
 | Ctrl+N / Ctrl+P | next / previous chat |
 | PgUp / PgDn, wheel | scroll back through the conversation |
 | Ctrl+R | reload |
@@ -49,9 +50,12 @@ The mouse works too: click a chat, scroll the transcript, click an emoji. Unread
 qc chats                        # id and name of every chat
 qc read alice -n 20             # the last 20 messages, decrypted
 qc send alice "on my way"       # encrypted to every participant
+qc send ops "@ri deploy is done" # an @partial matching one person is sent as @riotcoder
+qc mentions ops @al             # who @al completes to: @alice, @alina
 echo "deploy done" | qc send ops -
 qc listen --json                # new messages as NDJSON, until you stop it
 qc whoami
+qc keys                         # are this terminal's keys your account's? (qc keys publish puts them back)
 ```
 
 `<chat>` is a chat id or any unique part of its name. Add `--json` for machine output.
@@ -62,7 +66,7 @@ qc whoami
 qc mcp
 ```
 
-runs an MCP server on stdio with three tools: `list_chats`, `read_chat` and `send_message`. Encryption and decryption happen on this machine; the server only ever sees ciphertext. For Claude Code:
+runs an MCP server on stdio with `list_chats`, `read_chat`, `send_message`, `list_mentions` (who an `@partial` completes to) and `react_to_message`; `send_message` writes out an `@partial` that matches exactly one person. Encryption and decryption happen on this machine; the server only ever sees ciphertext. For Claude Code:
 
 ```sh
 claude mcp add qryptchat -- qc mcp

package/dist/{chunk-8gpysrd6.js → chunk-4ea1xy2c.js}

@@ -264,4 +264,108 @@ function listLines(conversations, titleOf = (c) => c.name || "Chat") {
   return [`${live.length} ${live.length === 1 ? "chat" : "chats"}${archived ? ` (+${archived} archived)` : ""}`, ...lines];
 }
 
-export { DEFAULT_URL, configDir, sessionPath, baseUrl, loadSession, unlockSession, storeSession, clearSession, notify, PAIRUX_URL, newVoiceRoomLink, voiceMessage, parseSlashCommand, namesLines, listLines };
+// src/lib/chat/mentions.js
+var NAME_CHAR = /[\p{L}\p{N}_.-]/u;
+var BEFORE_AT = /[\s([{"'“‘]/u;
+function mentionCandidates(participants, selfId) {
+  const seen = new Set;
+  const out = [];
+  for (const p of participants || []) {
+    const u = p.user || p;
+    const id = p.user_id ?? u.id;
+    if (!u.username || selfId && id === selfId || seen.has(u.username.toLowerCase()))
+      continue;
+    seen.add(u.username.toLowerCase());
+    out.push({ id, username: u.username, name: u.display_name || "", agent: u.account_type === "agent" });
+  }
+  return out.sort((a, b) => a.username.localeCompare(b.username, undefined, { sensitivity: "base" }));
+}
+function mentionAt(value, cursor = value.length) {
+  let i = cursor;
+  while (i > 0 && NAME_CHAR.test(value[i - 1]))
+    i--;
+  if (value[i - 1] !== "@")
+    return null;
+  const start = i - 1;
+  if (start > 0 && !BEFORE_AT.test(value[start - 1]))
+    return null;
+  let end = cursor;
+  while (end < value.length && NAME_CHAR.test(value[end]))
+    end++;
+  return { start, end, query: value.slice(i, cursor) };
+}
+function matchMentions(candidates, query = "", { anywhere = true } = {}) {
+  const q = query.toLowerCase();
+  if (!q)
+    return [...candidates];
+  const rank = (c) => {
+    const u = c.username.toLowerCase();
+    if (u === q)
+      return 0;
+    if (u.startsWith(q))
+      return 1;
+    if (c.name && c.name.toLowerCase().split(/\s+/).some((w) => w.startsWith(q)))
+      return 2;
+    if (anywhere && u.includes(q))
+      return 3;
+    return -1;
+  };
+  return candidates.map((c) => ({ c, r: rank(c) })).filter((x) => x.r >= 0).sort((a, b) => a.r - b.r).map((x) => x.c);
+}
+function insertMention(value, { start, end }, username) {
+  const after = value.slice(end);
+  const space = after.startsWith(" ") ? "" : " ";
+  const next = `${value.slice(0, start)}@${username}${space}${after}`;
+  return { value: next, cursor: start + username.length + 2 };
+}
+function completeMention(value, cursor, candidates, cycle = null, dir = 1) {
+  if (cycle && cycle.value === value && cycle.cursor === cursor && cycle.matches.length) {
+    const n = cycle.matches.length;
+    const index = (cycle.index + dir + n) % n;
+    const at = { start: cycle.start, end: cycle.start + cycle.matches[cycle.index].username.length + 1 };
+    const done = insertMention(value, at, cycle.matches[index].username);
+    return { ...done, cycle: { ...cycle, index, value: done.value, cursor: done.cursor } };
+  }
+  const at = mentionAt(value, cursor);
+  if (!at)
+    return null;
+  const matches = matchMentions(candidates, at.query);
+  if (!matches.length)
+    return null;
+  const index = dir < 0 ? matches.length - 1 : 0;
+  const done = insertMention(value, at, matches[index].username);
+  return { ...done, cycle: { start: at.start, query: at.query, matches, index, value: done.value, cursor: done.cursor } };
+}
+function expandMentions(text, candidates) {
+  const mentions = [];
+  const ambiguous = [];
+  const unknown = [];
+  const out = String(text).replace(/(^|[\s([{"'“‘])@([\p{L}\p{N}_.-]+)/gu, (whole, before, raw) => {
+    const query = raw.replace(/[.-]+$/, "");
+    const tail = raw.slice(query.length);
+    if (!query)
+      return whole;
+    const exact = candidates.find((c) => c.username.toLowerCase() === query.toLowerCase());
+    const pick = exact ? [exact] : matchMentions(candidates, query, { anywhere: false });
+    if (pick.length === 1) {
+      if (!mentions.includes(pick[0].username))
+        mentions.push(pick[0].username);
+      return `${before}@${pick[0].username}${tail}`;
+    }
+    if (pick.length > 1)
+      ambiguous.push({ query, matches: pick.map((c) => c.username) });
+    else
+      unknown.push(query);
+    return whole;
+  });
+  return { text: out, mentions, ambiguous, unknown };
+}
+function mentionHint(matches, query, index = -1, max = 6) {
+  if (!matches.length)
+    return `@${query}: nobody here by that name`;
+  const shown = matches.slice(0, max).map((c, i) => i === index ? `[${c.username}]` : c.username);
+  const more = matches.length > max ? `  +${matches.length - max}` : "";
+  return `@${query} → ${shown.join("  ")}${more}  (Tab)`;
+}
+
+export { DEFAULT_URL, configDir, sessionPath, baseUrl, loadSession, unlockSession, storeSession, clearSession, notify, PAIRUX_URL, newVoiceRoomLink, voiceMessage, parseSlashCommand, namesLines, listLines, mentionCandidates, mentionAt, matchMentions, completeMention, expandMentions, mentionHint };

package/dist/{chunk-vj54b54e.js → chunk-hmyhm26d.js}

@@ -10,8 +10,11 @@ import {
   PAIRUX_URL,
   newVoiceRoomLink,
   voiceMessage,
-  namesLines
-} from "./chunk-8gpysrd6.js";
+  namesLines,
+  mentionCandidates,
+  matchMentions,
+  expandMentions
+} from "./chunk-4ea1xy2c.js";
 
 // src/cli/crypto.js
 import { MlKem1024 as MlKem10242 } from "mlkem";
@@ -733,6 +736,13 @@ class QcClient {
       return "unknown";
     }
   }
+  async publishKey() {
+    const mine = this.session.keys?.keys1024?.publicKey;
+    if (!mine)
+      throw new QcError("This terminal holds no keys. Run qc login.");
+    await this.request("/api/crypto/public-keys", { method: "PUT", body: { public_key: mine, key_type: "ML-KEM-1024" } });
+    return this.keyCheck();
+  }
   async profile() {
     const { user } = await this.request(`/api/users/by-username/${encodeURIComponent(this.me?.username ?? "")}`);
     return user;
@@ -1259,6 +1269,8 @@ Usage:
   qc logout               forget this terminal's session and keys
   qc update [--check]     update qc to the latest release (--check only says whether there is one)
   qc whoami               who this terminal is signed in as
+  qc keys [publish]       whether this terminal's keys are your account's; publish makes them the
+                          account's again (when another device published keys qc does not hold)
   qc profile [--emoji \uD83D\uDD2D] [--pronouns she/her] [--website URL] [--bio TEXT]
                           show or set your public profile (an empty value clears it);
                           --openprofile prints it as OpenProfile.md
@@ -1271,10 +1283,12 @@ Usage:
   qc call <number>        call a phone (US/Canada free 10 min a day; +country code for others):
                           opens qrypt.chat's dialer with the number filled in
   qc read <chat> [-n 20]  print the last messages of a chat
-  qc send <chat> <text>   send a message (text "-" reads stdin; --reply <message-id> to reply)
+  qc send <chat> <text>   send a message (text "-" reads stdin; --reply <message-id> to reply);
+                          an @partial that matches one person becomes their @username
+  qc mentions <chat> [@partial]   who @ completes to in a chat, best match first (one per line)
   qc react <chat> <message-id> <emoji> [--remove]   react to a message
   qc listen               print new messages as they arrive (NDJSON with --json; --notify alerts with it)
-  qc mcp                  run as an MCP server on stdio (list_chats, read_chat, send_message)
+  qc mcp                  run as an MCP server on stdio (list_chats, read_chat, send_message, list_mentions)
   qc join <link>          join a group chat from its invite link (https://qrypt.chat/join/...)
   qc invite <chat>        print a group's invite link (group admins) [--reset makes a new one, --off turns it off]
 
@@ -1330,6 +1344,8 @@ function findChat2(chats, query) {
     throw new Error(`"${query}" matches ${some.length} chats: ${some.map((c) => c.title).join(", ")}`);
   throw new Error(`No chat matches "${query}". Try qc chats.`);
 }
+var mentionMatches2 = (chat, me, partial = "") => matchMentions(mentionCandidates(chat.participants, me?.id), String(partial).replace(/^@/, ""));
+var withMentions2 = (chat, me, text) => expandMentions(text, mentionCandidates(chat.participants, me?.id));
 async function client(flags, { interactive = false } = {}) {
   if (flags.url)
     process.env.QC_URL = flags.url;
@@ -1372,7 +1388,7 @@ async function main2(argv, { version = "0.0.0" } = {}) {
     }
     case "agent": {
       if (rest[0] === "call") {
-        const { runVoiceAgent } = await import("./chunk-ckgythyp.js");
+        const { runVoiceAgent } = await import("./chunk-ycvwj8wy.js");
         return runVoiceAgent(await client(flags), {
           brain: typeof flags.brain === "string" ? flags.brain : undefined,
           voice: typeof flags.voice === "string" ? flags.voice : undefined,
@@ -1435,6 +1451,35 @@ ${ok("Installed OpenEmoji. Restart the terminal, then run: qc fonts status")}`);
       }
       return;
     }
+    case "keys": {
+      const c = await client(flags);
+      const status = await c.keyCheck();
+      if (rest[0] !== "publish") {
+        if (flags.json)
+          return json({ keys: status });
+        if (status === "ok")
+          return out(ok("This terminal's keys are your account's keys."));
+        if (status === "mismatch")
+          return out(warn("Your account publishes a different key, so messages sent to you since then won't decrypt here. If older messages read fine in qc read, run qc keys publish."));
+        return out(info("Could not compare keys (no key on file, or the check failed)."));
+      }
+      if (status === "ok")
+        return out(ok("Already published: nothing to do."));
+      if (!flags.yes) {
+        if (!process.stdin.isTTY)
+          throw new Error("qc keys publish replaces the key everyone encrypts to. Add --yes to confirm.");
+        const { createInterface } = await import("node:readline/promises");
+        const rl = createInterface({ input: process.stdin, output: process.stdout });
+        const answer = await rl.question("Publish this terminal's key? Devices holding the other key will stop decrypting new messages until they restore your keys. [y/N] ");
+        rl.close();
+        if (!/^y(es)?$/i.test(answer.trim()))
+          return out(info("Left the published key alone."));
+      }
+      const after = await c.publishKey();
+      if (flags.json)
+        return json({ published: true, keys: after });
+      return out(ok("Published. New messages are encrypted to this terminal's key again; other devices on the other key should restore from Settings > Keys."));
+    }
     case "logout":
       clearSession();
       return out(ok("Signed out. This terminal no longer holds your keys."));
@@ -1507,7 +1552,7 @@ ${info("Set: qc profile --emoji :telescope: --pronouns she/her --website https:/
         throw new Error('Usage: qc call <number>   (e.g. qc call "(415) 555-1234" or qc call +442079460958)');
       const c = await client(flags);
       const url = `${c.base}/phone?to=${encodeURIComponent(rest.join(" "))}`;
-      const { openBrowser } = await import("./chunk-kycg804s.js");
+      const { openBrowser } = await import("./chunk-zh85gmtq.js");
       const opened = openBrowser(url);
       return out(`${mark("send")}${opened === false ? "Open" : "Opened"} ${url}
   Calls to phones need your browser for the audio; tap Call there.`);
@@ -1523,6 +1568,18 @@ ${info("Set: qc profile --emoji :telescope: --pronouns she/her --website https:/
         out(line);
       return;
     }
+    case "mentions": {
+      if (!rest[0])
+        throw new Error("Usage: qc mentions <chat> [@partial]");
+      const c = await client(flags);
+      const chat = findChat2(await c.conversations(), rest[0]);
+      const matches = mentionMatches2(chat, c.me, rest[1] ?? "");
+      if (flags.json)
+        return json(matches);
+      for (const p of matches)
+        out(`@${p.username}${p.agent ? " \uD83E\uDD16" : ""}${p.name ? `  ${p.name}` : ""}`);
+      return;
+    }
     case "read": {
       if (!rest[0])
         throw new Error("Usage: qc read <chat> [-n 20]");
@@ -1586,11 +1643,14 @@ ${info("Set: qc profile --emoji :telescope: --pronouns she/her --website https:/
         throw new Error("Nothing to send.");
       const c = await client(flags);
       const chat = findChat2(await c.conversations(), rest[0]);
-      const { message, skipped } = await c.send(chat.id, text, { replyTo: flags.reply || undefined });
+      const m = withMentions2(chat, c.me, text);
+      const { message, skipped } = await c.send(chat.id, m.text, { replyTo: flags.reply || undefined });
       if (flags.json)
-        return json({ id: message?.id, conversation: chat.id, skipped });
+        return json({ id: message?.id, conversation: chat.id, skipped, mentions: m.mentions, ambiguous: m.ambiguous });
       if (skipped)
         out(warn(`${skipped} participant(s) have no key yet and will not see it.`));
+      for (const a of m.ambiguous)
+        out(warn(`@${a.query} could be ${a.matches.join(", ")}: sent as typed.`));
       return out(`${mark("send")}Sent to ${chat.title}.`);
     }
     case "listen": {
@@ -1666,4 +1726,4 @@ async function voiceCommand(argv, { out, json }) {
   }
 }
 
-export { CALL_TYPE, parseCall, openBrowser2, login2, exitWhenFlushed2, errorLine2, HELP2, parseArgs2, findChat2, main2 };
+export { CALL_TYPE, parseCall, openBrowser2, login2, exitWhenFlushed2, errorLine2, HELP2, parseArgs2, findChat2, mentionMatches2, withMentions2, main2 };

package/dist/{chunk-ckgythyp.js → chunk-ycvwj8wy.js}

@@ -1,7 +1,7 @@
 import {
   CALL_TYPE,
   parseCall
-} from "./chunk-vj54b54e.js";
+} from "./chunk-hmyhm26d.js";
 
 // src/cli/voice-agent.js
 import { spawn } from "node:child_process";

package/dist/{chunk-kycg804s.js → chunk-zh85gmtq.js}

@@ -1,7 +1,7 @@
 import {
   openBrowser2,
   login2
-} from "./chunk-vj54b54e.js";
+} from "./chunk-hmyhm26d.js";
 export {
   login2 as login,
   openBrowser2 as openBrowser

package/dist/commands.js

@@ -4,14 +4,18 @@ import {
   HELP2,
   parseArgs2,
   findChat2,
+  mentionMatches2,
+  withMentions2,
   main2
-} from "./chunk-vj54b54e.js";
-import"./chunk-8gpysrd6.js";
+} from "./chunk-hmyhm26d.js";
+import"./chunk-4ea1xy2c.js";
 export {
   HELP2 as HELP,
   errorLine2 as errorLine,
   exitWhenFlushed2 as exitWhenFlushed,
   findChat2 as findChat,
   main2 as main,
-  parseArgs2 as parseArgs
+  mentionMatches2 as mentionMatches,
+  parseArgs2 as parseArgs,
+  withMentions2 as withMentions
 };

package/dist/mcp.js

@@ -1,7 +1,9 @@
-import"./chunk-8gpysrd6.js";
+import"./chunk-4ea1xy2c.js";
 import {
-  findChat2
-} from "./chunk-vj54b54e.js";
+  findChat2,
+  mentionMatches2,
+  withMentions2
+} from "./chunk-hmyhm26d.js";
 
 // src/cli/mcp.js
 import { createInterface } from "node:readline";
@@ -26,7 +28,7 @@ var TOOLS = [
   },
   {
     name: "send_message",
-    description: "Send an end-to-end encrypted message (ML-KEM-1024) to a conversation.",
+    description: "Send an end-to-end encrypted message (ML-KEM-1024) to a conversation. An @partial in the text that matches exactly one participant is written out as their full @username (list_mentions shows who matches).",
     inputSchema: {
       type: "object",
       properties: {
@@ -38,6 +40,19 @@ var TOOLS = [
       additionalProperties: false
     }
   },
+  {
+    name: "list_mentions",
+    description: "Who an @mention can complete to in a conversation, best match first (like typing @ali then Tab). Without partial: everyone you can mention.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        chat: { type: "string", description: "Conversation id or part of its name" },
+        partial: { type: "string", description: "Optional: the start of a name, with or without the @" }
+      },
+      required: ["chat"],
+      additionalProperties: false
+    }
+  },
   {
     name: "react_to_message",
     description: "React to a message with an emoji (Signal-style: one reaction per person; a new one replaces yours). End-to-end encrypted.",
@@ -79,8 +94,14 @@ async function callTool(client, name, args = {}) {
     if (!args.text || typeof args.text !== "string")
       throw new Error("text is required");
     const chat = findChat2(await client.conversations(), args.chat);
-    const { message, skipped } = await client.send(chat.id, args.text, { replyTo: typeof args.reply_to === "string" ? args.reply_to : undefined });
-    return { sent: true, id: message?.id, chat: chat.title, skipped };
+    const m = withMentions2(chat, client.me, args.text);
+    const { message, skipped } = await client.send(chat.id, m.text, { replyTo: typeof args.reply_to === "string" ? args.reply_to : undefined });
+    return { sent: true, id: message?.id, chat: chat.title, skipped, ...m.mentions.length ? { mentions: m.mentions } : {}, ...m.ambiguous.length ? { ambiguous: m.ambiguous } : {} };
+  }
+  if (name === "list_mentions") {
+    const chat = findChat2(await client.conversations(), args.chat);
+    const matches = mentionMatches2(chat, client.me, typeof args.partial === "string" ? args.partial : "");
+    return { chat: chat.title, mentions: matches.map(({ username, name: display_name, agent }) => ({ mention: `@${username}`, username, ...display_name ? { display_name } : {}, agent })) };
   }
   if (name === "react_to_message") {
     if (!args.emoji || typeof args.emoji !== "string")

package/dist/tui.js

@@ -6,8 +6,13 @@ import {
   voiceMessage,
   parseSlashCommand,
   namesLines,
-  listLines
-} from "./chunk-8gpysrd6.js";
+  listLines,
+  mentionCandidates,
+  mentionAt,
+  matchMentions,
+  completeMention,
+  mentionHint
+} from "./chunk-4ea1xy2c.js";
 
 // src/cli/tui.js
 import { createApp, createImageStore, drawIcon, drawRichText, editText, emojify, insertText, stringWidth, truncate, widgets, wrap } from "@profullstack/hqtui";
@@ -41,9 +46,28 @@ function initialState(me) {
     status: "connecting",
     notice: "",
     loading: true,
-    showArchived: false
+    showArchived: false,
+    mention: null
   };
 }
+var mentionPeople = (state) => mentionCandidates(state.conversations.find((c) => c.id === state.activeId)?.participants, state.me?.id);
+function mentionSuggestions(state) {
+  if (state.focus !== "compose" || !state.activeId)
+    return null;
+  const cycle = state.mention;
+  if (cycle && cycle.value === state.field.value && cycle.cursor === state.field.cursor)
+    return { query: cycle.query, matches: cycle.matches, index: cycle.index };
+  const at = mentionAt(state.field.value, state.field.cursor);
+  return at ? { query: at.query, matches: matchMentions(mentionPeople(state), at.query), index: -1 } : null;
+}
+function tabComplete(state, dir = 1) {
+  const done = completeMention(state.field.value, state.field.cursor, mentionPeople(state), state.mention, dir);
+  if (!done)
+    return false;
+  state.field = { value: done.value, cursor: done.cursor };
+  state.mention = done.cycle;
+  return true;
+}
 var listed = (state) => state.conversations.filter((c) => !!c.is_archived === !!state.showArchived);
 var CHAT_LIST_REFRESH_MS = 15000;
 function chatsWithNews(prev, next) {
@@ -138,6 +162,7 @@ function drawTranscript(surface, state) {
 function render({ ui, width, height, theme }, state, on = {}) {
   const active = state.conversations.find((c) => c.id === state.activeId);
   const typingNames = Object.values(state.typing[state.activeId] || {}).map((t) => t.name);
+  const mention = mentionSuggestions(state);
   ui.row({ size: 1 }, (bar) => {
     bar.draw((s) => {
       const t = s.theme;
@@ -188,11 +213,11 @@ function render({ ui, width, height, theme }, state, on = {}) {
         drawTranscript(s, state);
         p.ctx.hit({ rect: s.hitRect(), onScroll: (delta) => on.scroll?.(-delta) });
       }, { size: "fill" });
-      p.label(typingNames.length ? `${typingNames.join(", ")} ${typingNames.length === 1 ? "is" : "are"} typing…` : " ", { size: 1 });
+      p.label(mention ? mentionHint(mention.matches, mention.query, mention.index) : typingNames.length ? `${typingNames.join(", ")} ${typingNames.length === 1 ? "is" : "are"} typing…` : " ", { size: 1 });
       p.textInput({
         value: state.field.value,
         cursor: state.field.cursor,
-        placeholder: active ? `Message ${active.title}  (Ctrl+E emoji, :rocket: works too)` : "Pick a chat first",
+        placeholder: active ? `Message ${active.title}  (@name Tab, Ctrl+E emoji, :rocket: works too)` : "Pick a chat first",
         focused: state.focus === "compose" && !state.picker,
         size: 1
       });
@@ -202,7 +227,7 @@ function render({ ui, width, height, theme }, state, on = {}) {
     items: [
       { key: "Enter", label: state.focus === "list" ? "open" : "send" },
       { key: "Ctrl+E", label: "emoji" },
-      { key: "Tab", label: state.focus === "list" ? "compose" : "chats" },
+      { key: "Tab", label: state.focus === "list" ? "compose" : mention?.matches.length ? "complete @" : "chats" },
       { key: "PgUp", label: "scroll" },
       ...state.focus === "list" ? [{ key: "a", label: state.showArchived ? "unarchive" : "archive" }] : [],
       { key: "Ctrl+O", label: state.showArchived ? "chats" : "archived" },
@@ -237,7 +262,7 @@ function saveRecent(list) {
     writeFileSync(recentFile(), JSON.stringify(list), { mode: 384 });
   } catch {}
 }
-var KEY_MISMATCH = "Keys don't match your account, so messages can't decrypt. Run qc login and approve from a browser that can read your chats.";
+var KEY_MISMATCH = "Keys don't match your account, so new messages can't decrypt. If your history reads here, run qc keys publish; else qc login from a browser that reads your chats.";
 async function runTui(client, { initialChat } = {}) {
   const state = initialState(client.me);
   state.recent = loadRecent();
@@ -442,6 +467,8 @@ async function runTui(client, { initialChat } = {}) {
       return;
     if (event.key === "ctrl+e") {
       state.picker = widgets.createEmojiPicker(state.recent);
+    } else if ((event.key === "tab" || event.key === "shift+tab") && state.focus === "compose" && tabComplete(state, event.key === "tab" ? 1 : -1)) {
+      typed();
     } else if (event.key === "tab" || event.key === "shift+tab" || event.key === "escape" && state.focus === "compose") {
       state.focus = state.focus === "list" ? "compose" : "list";
     } else if (event.key === "pageup") {
@@ -562,7 +589,9 @@ export {
   chatsWithNews,
   initialState,
   listed,
+  mentionSuggestions,
   render,
   runTui,
+  tabComplete,
   transcriptLines
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@profullstack/qryptchat",
-  "version": "0.10.0",
+  "version": "0.12.0",
   "description": "qc: qrypt.chat in your terminal. A full-screen end-to-end encrypted chat client (ML-KEM-1024), plus a scriptable CLI and an MCP server.",
   "type": "module",
   "bin": {