@profullstack/qryptchat 0.11.0 → 0.12.0

package/README.md

@@ -55,6 +55,7 @@ qc mentions ops @al             # who @al completes to: @alice, @alina
 echo "deploy done" | qc send ops -
 qc listen --json                # new messages as NDJSON, until you stop it
 qc whoami
+qc keys                         # are this terminal's keys your account's? (qc keys publish puts them back)
 ```
 
 `<chat>` is a chat id or any unique part of its name. Add `--json` for machine output.

package/dist/{chunk-ywyhy3sp.js → chunk-hmyhm26d.js}

@@ -736,6 +736,13 @@ class QcClient {
       return "unknown";
     }
   }
+  async publishKey() {
+    const mine = this.session.keys?.keys1024?.publicKey;
+    if (!mine)
+      throw new QcError("This terminal holds no keys. Run qc login.");
+    await this.request("/api/crypto/public-keys", { method: "PUT", body: { public_key: mine, key_type: "ML-KEM-1024" } });
+    return this.keyCheck();
+  }
   async profile() {
     const { user } = await this.request(`/api/users/by-username/${encodeURIComponent(this.me?.username ?? "")}`);
     return user;
@@ -1262,6 +1269,8 @@ Usage:
   qc logout               forget this terminal's session and keys
   qc update [--check]     update qc to the latest release (--check only says whether there is one)
   qc whoami               who this terminal is signed in as
+  qc keys [publish]       whether this terminal's keys are your account's; publish makes them the
+                          account's again (when another device published keys qc does not hold)
   qc profile [--emoji \uD83D\uDD2D] [--pronouns she/her] [--website URL] [--bio TEXT]
                           show or set your public profile (an empty value clears it);
                           --openprofile prints it as OpenProfile.md
@@ -1379,7 +1388,7 @@ async function main2(argv, { version = "0.0.0" } = {}) {
     }
     case "agent": {
       if (rest[0] === "call") {
-        const { runVoiceAgent } = await import("./chunk-wkjs9anq.js");
+        const { runVoiceAgent } = await import("./chunk-ycvwj8wy.js");
         return runVoiceAgent(await client(flags), {
           brain: typeof flags.brain === "string" ? flags.brain : undefined,
           voice: typeof flags.voice === "string" ? flags.voice : undefined,
@@ -1442,6 +1451,35 @@ ${ok("Installed OpenEmoji. Restart the terminal, then run: qc fonts status")}`);
       }
       return;
     }
+    case "keys": {
+      const c = await client(flags);
+      const status = await c.keyCheck();
+      if (rest[0] !== "publish") {
+        if (flags.json)
+          return json({ keys: status });
+        if (status === "ok")
+          return out(ok("This terminal's keys are your account's keys."));
+        if (status === "mismatch")
+          return out(warn("Your account publishes a different key, so messages sent to you since then won't decrypt here. If older messages read fine in qc read, run qc keys publish."));
+        return out(info("Could not compare keys (no key on file, or the check failed)."));
+      }
+      if (status === "ok")
+        return out(ok("Already published: nothing to do."));
+      if (!flags.yes) {
+        if (!process.stdin.isTTY)
+          throw new Error("qc keys publish replaces the key everyone encrypts to. Add --yes to confirm.");
+        const { createInterface } = await import("node:readline/promises");
+        const rl = createInterface({ input: process.stdin, output: process.stdout });
+        const answer = await rl.question("Publish this terminal's key? Devices holding the other key will stop decrypting new messages until they restore your keys. [y/N] ");
+        rl.close();
+        if (!/^y(es)?$/i.test(answer.trim()))
+          return out(info("Left the published key alone."));
+      }
+      const after = await c.publishKey();
+      if (flags.json)
+        return json({ published: true, keys: after });
+      return out(ok("Published. New messages are encrypted to this terminal's key again; other devices on the other key should restore from Settings > Keys."));
+    }
     case "logout":
       clearSession();
       return out(ok("Signed out. This terminal no longer holds your keys."));
@@ -1514,7 +1552,7 @@ ${info("Set: qc profile --emoji :telescope: --pronouns she/her --website https:/
         throw new Error('Usage: qc call <number>   (e.g. qc call "(415) 555-1234" or qc call +442079460958)');
       const c = await client(flags);
       const url = `${c.base}/phone?to=${encodeURIComponent(rest.join(" "))}`;
-      const { openBrowser } = await import("./chunk-nsn86c8y.js");
+      const { openBrowser } = await import("./chunk-zh85gmtq.js");
       const opened = openBrowser(url);
       return out(`${mark("send")}${opened === false ? "Open" : "Opened"} ${url}
   Calls to phones need your browser for the audio; tap Call there.`);

package/dist/{chunk-wkjs9anq.js → chunk-ycvwj8wy.js}

@@ -1,7 +1,7 @@
 import {
   CALL_TYPE,
   parseCall
-} from "./chunk-ywyhy3sp.js";
+} from "./chunk-hmyhm26d.js";
 
 // src/cli/voice-agent.js
 import { spawn } from "node:child_process";

package/dist/{chunk-nsn86c8y.js → chunk-zh85gmtq.js}

@@ -1,7 +1,7 @@
 import {
   openBrowser2,
   login2
-} from "./chunk-ywyhy3sp.js";
+} from "./chunk-hmyhm26d.js";
 export {
   login2 as login,
   openBrowser2 as openBrowser

package/dist/commands.js

@@ -7,7 +7,7 @@ import {
   mentionMatches2,
   withMentions2,
   main2
-} from "./chunk-ywyhy3sp.js";
+} from "./chunk-hmyhm26d.js";
 import"./chunk-4ea1xy2c.js";
 export {
   HELP2 as HELP,

package/dist/mcp.js

@@ -3,7 +3,7 @@ import {
   findChat2,
   mentionMatches2,
   withMentions2
-} from "./chunk-ywyhy3sp.js";
+} from "./chunk-hmyhm26d.js";
 
 // src/cli/mcp.js
 import { createInterface } from "node:readline";

package/dist/tui.js

@@ -262,7 +262,7 @@ function saveRecent(list) {
     writeFileSync(recentFile(), JSON.stringify(list), { mode: 384 });
   } catch {}
 }
-var KEY_MISMATCH = "Keys don't match your account, so messages can't decrypt. Run qc login and approve from a browser that can read your chats.";
+var KEY_MISMATCH = "Keys don't match your account, so new messages can't decrypt. If your history reads here, run qc keys publish; else qc login from a browser that reads your chats.";
 async function runTui(client, { initialChat } = {}) {
   const state = initialState(client.me);
   state.recent = loadRecent();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@profullstack/qryptchat",
-  "version": "0.11.0",
+  "version": "0.12.0",
   "description": "qc: qrypt.chat in your terminal. A full-screen end-to-end encrypted chat client (ML-KEM-1024), plus a scriptable CLI and an MCP server.",
   "type": "module",
   "bin": {