@profullstack/qryptchat 0.13.0 → 0.14.0

package/dist/{chunk-8frhjf08.js → chunk-4mx8vtcw.js}

@@ -1,7 +1,7 @@
 import {
   openBrowser2,
   login2
-} from "./chunk-94qf0rg1.js";
+} from "./chunk-jfete02h.js";
 export {
   login2 as login,
   openBrowser2 as openBrowser

package/dist/{chunk-qcszcng8.js → chunk-amknn876.js}

@@ -1,7 +1,7 @@
 import {
   CALL_TYPE,
   parseCall
-} from "./chunk-94qf0rg1.js";
+} from "./chunk-jfete02h.js";
 
 // src/cli/voice-agent.js
 import { spawn } from "node:child_process";

package/dist/{chunk-94qf0rg1.js → chunk-jfete02h.js}

@@ -16,6 +16,13 @@ import {
   expandMentions
 } from "./chunk-4ea1xy2c.js";
 
+// src/cli/login.js
+import { createHash, randomBytes } from "node:crypto";
+import { createServer } from "node:http";
+import { hostname } from "node:os";
+import { spawn } from "node:child_process";
+import { createInterface } from "node:readline/promises";
+
 // src/cli/crypto.js
 import { MlKem1024 as MlKem10242 } from "mlkem";
 
@@ -222,6 +229,17 @@ class PostQuantumEncryptionService {
       console.error("\uD83D\uDD10 Failed to load ML-KEM-768 keys:", error);
     }
   }
+  async storedUserKeys(alg) {
+    const is768 = alg === this.kemName768;
+    if (is768 ? !this.userKeys768 : !this.userKeys) {
+      await (is768 ? this.loadUserKeys768() : this.loadUserKeys());
+    }
+    const keys = is768 ? this.userKeys768 : this.userKeys;
+    if (!keys?.privateKey) {
+      throw new Error("No encryption keys on this device. Restore them in Settings > Keys (backup PIN).");
+    }
+    return keys;
+  }
   async getPublicKey() {
     const keys = await this.getUserKeys();
     return keys.publicKey;
@@ -346,7 +364,7 @@ class PostQuantumEncryptionService {
         return "[Legacy encrypted message - please delete]";
       }
       const open = async (alg) => {
-        const keys = alg === this.kemName768 ? await this.getUserKeys768() : await this.getUserKeys();
+        const keys = await this.storedUserKeys(alg);
         const privateKeyBytes = this.stripKeyHeaderIfPresent(Base64.decode(keys.privateKey));
         const expected = alg === this.kemName768 ? 2400 : 3168;
         if (privateKeyBytes.length !== expected) {
@@ -553,6 +571,188 @@ async function openKeyBlob(blob, ephemeral) {
   return { keys1024: keys.keys1024, keys768: keys.keys768 };
 }
 
+// src/lib/auth/cli-match.js
+var ALPHABET = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789";
+async function matchCode(challenge, kemPublicKey) {
+  const bytes = new Uint8Array(await globalThis.crypto.subtle.digest("SHA-256", new TextEncoder().encode(`qc-login
+${challenge}
+${kemPublicKey}`)));
+  let out = "";
+  for (let i = 0;i < 8; i++)
+    out += ALPHABET[bytes[i] % ALPHABET.length];
+  return `${out.slice(0, 4)}-${out.slice(4)}`;
+}
+
+// src/cli/login.js
+var b64url = (buf) => Buffer.from(buf).toString("base64url");
+var TIMEOUT_MS = 5 * 60 * 1000;
+var PAGE = (title, body) => `<!doctype html><meta charset="utf-8"><title>${title}</title>
+<style>body{font:16px system-ui,sans-serif;display:grid;place-items:center;min-height:90vh;background:#0b0d12;color:#e6e8ee}main{max-width:28rem;text-align:center}</style>
+<main><h1>${title}</h1><p>${body}</p></main>`;
+function isRemote({ platform = process.platform, env = process.env } = {}) {
+  if (env.QC_NO_BROWSER)
+    return true;
+  if (platform === "darwin" || platform === "win32")
+    return false;
+  return !env.DISPLAY && !env.WAYLAND_DISPLAY;
+}
+function parsePasted(input, state) {
+  const text = String(input || "").trim();
+  if (!text)
+    return null;
+  if (/^https?:\/\//i.test(text)) {
+    let url;
+    try {
+      url = new URL(text);
+    } catch {
+      return null;
+    }
+    const got = url.searchParams.get("state");
+    if (got && got !== state)
+      throw new Error("That link belongs to a different login. Run qc login again.");
+    return url.searchParams.get("code");
+  }
+  return /^[A-Za-z0-9_-]{20,}$/.test(text) ? text : null;
+}
+function openBrowser2(url, { platform = process.platform, env = process.env } = {}) {
+  if (isRemote({ platform, env }))
+    return false;
+  const [cmd, args] = platform === "darwin" ? ["open", [url]] : platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
+  try {
+    const child = spawn(cmd, args, { stdio: "ignore", detached: true });
+    child.on("error", () => {});
+    child.unref();
+    return true;
+  } catch {
+    return false;
+  }
+}
+function waitForCallback(server, state) {
+  return new Promise((resolve, reject) => {
+    const timer = setTimeout(() => reject(new Error("Timed out waiting for the browser (5 minutes). Run qc login again.")), TIMEOUT_MS);
+    server.on("request", (req, res) => {
+      const url = new URL(req.url, "http://127.0.0.1");
+      if (url.pathname !== "/callback") {
+        res.writeHead(404).end();
+        return;
+      }
+      const done = (status, title, body) => {
+        res.writeHead(status, { "Content-Type": "text/html; charset=utf-8" }).end(PAGE(title, body));
+      };
+      if (url.searchParams.get("state") !== state) {
+        done(400, "That was not this login", "The state did not match. Go back to your terminal.");
+        return;
+      }
+      clearTimeout(timer);
+      const error = url.searchParams.get("error");
+      if (error) {
+        done(200, "Not approved", "Nothing was shared. You can close this tab.");
+        reject(new Error(error === "access_denied" ? "Login was denied in the browser." : `Login failed: ${error}`));
+        return;
+      }
+      done(200, "Signed in", "You can close this tab and go back to your terminal.");
+      resolve(url.searchParams.get("code"));
+    });
+  });
+}
+async function login2(options = {}) {
+  const env = options.env ?? process.env;
+  const print = options.print ?? ((line) => process.stderr.write(`${line}
+`));
+  const base = (options.base ?? baseUrl(null, env)).replace(/\/+$/, "");
+  const verifier = b64url(randomBytes(32));
+  const challenge = b64url(createHash("sha256").update(verifier).digest());
+  const state = b64url(randomBytes(16));
+  const ephemeral = await ephemeralKeypair();
+  let server;
+  let redirectUri = "oob";
+  const oob = options.oob || isRemote({ env });
+  if (!oob) {
+    server = createServer();
+    await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
+    redirectUri = `http://127.0.0.1:${server.address().port}/callback`;
+  }
+  const url = new URL("/cli/authorize", base);
+  for (const [k, v] of Object.entries({
+    response_type: "code",
+    code_challenge: challenge,
+    code_challenge_method: "S256",
+    redirect_uri: redirectUri,
+    state,
+    client_name: `qc on ${hostname()}`,
+    kem: ephemeral.publicKey
+  })) {
+    url.searchParams.set(k, v);
+  }
+  const match = await matchCode(challenge, ephemeral.publicKey);
+  print("");
+  print(`  Confirmation code: ${match}`);
+  print("  Check that the browser shows the same code before you approve.");
+  print("");
+  const opened = !oob && openBrowser2(url.toString(), { env });
+  print(opened ? "  Opened your browser. If it did not, open:" : "  Open this link in a browser where you are signed in to qrypt.chat:");
+  print(`  ${url.toString()}`);
+  print("");
+  let code;
+  let rl;
+  try {
+    if (server) {
+      const waits = [waitForCallback(server, state)];
+      if (process.stdin.isTTY) {
+        rl = createInterface({ input: process.stdin, output: process.stderr });
+        waits.push((async () => {
+          for (;; ) {
+            let line;
+            try {
+              line = await rl.question("  Waiting for the browser… or paste the URL it ended up on: ");
+            } catch {
+              return new Promise(() => {});
+            }
+            const pasted = parsePasted(line, state);
+            if (pasted)
+              return pasted;
+            print("  That is not a qc login code or callback URL.");
+          }
+        })());
+      }
+      code = await Promise.race(waits);
+    } else {
+      rl = createInterface({ input: process.stdin, output: process.stderr });
+      for (;; ) {
+        code = parsePasted(await rl.question("  Paste the code (or the URL) from the browser: "), state);
+        if (code)
+          break;
+        print("  That is not a qc login code.");
+      }
+    }
+  } finally {
+    rl?.close();
+    server?.close();
+  }
+  if (!code)
+    throw new Error("No code came back from the browser.");
+  const res = await fetch(`${base}/api/cli/token`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ grant_type: "authorization_code", code, code_verifier: verifier, redirect_uri: redirectUri })
+  });
+  const token = await res.json().catch(() => ({}));
+  if (!res.ok)
+    throw new Error(token.error_description || token.error || `Sign-in failed (HTTP ${res.status})`);
+  const keys = await openKeyBlob(token.key_blob, ephemeral);
+  const session = {
+    base,
+    access_token: token.access_token,
+    refresh_token: token.refresh_token,
+    expires_at: token.expires_at,
+    user: token.user,
+    keys,
+    created_at: new Date().toISOString()
+  };
+  const save = await storeSession(session, env, options.vault);
+  return { session, save };
+}
+
 // src/lib/chat/reactions.js
 var REACTION_TYPE = "reaction";
 var MAX_EMOJI_LENGTH = 32;
@@ -959,195 +1159,6 @@ function conversationTitle(c, me) {
   return others.length ? others.join(", ") : "Just you";
 }
 
-// src/cli/login.js
-import { createHash, randomBytes } from "node:crypto";
-import { createServer } from "node:http";
-import { hostname } from "node:os";
-import { spawn } from "node:child_process";
-import { createInterface } from "node:readline/promises";
-
-// src/lib/auth/cli-match.js
-var ALPHABET = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789";
-async function matchCode(challenge, kemPublicKey) {
-  const bytes = new Uint8Array(await globalThis.crypto.subtle.digest("SHA-256", new TextEncoder().encode(`qc-login
-${challenge}
-${kemPublicKey}`)));
-  let out = "";
-  for (let i = 0;i < 8; i++)
-    out += ALPHABET[bytes[i] % ALPHABET.length];
-  return `${out.slice(0, 4)}-${out.slice(4)}`;
-}
-
-// src/cli/login.js
-var b64url = (buf) => Buffer.from(buf).toString("base64url");
-var TIMEOUT_MS = 5 * 60 * 1000;
-var PAGE = (title, body) => `<!doctype html><meta charset="utf-8"><title>${title}</title>
-<style>body{font:16px system-ui,sans-serif;display:grid;place-items:center;min-height:90vh;background:#0b0d12;color:#e6e8ee}main{max-width:28rem;text-align:center}</style>
-<main><h1>${title}</h1><p>${body}</p></main>`;
-function isRemote({ platform = process.platform, env = process.env } = {}) {
-  if (env.QC_NO_BROWSER)
-    return true;
-  if (platform === "darwin" || platform === "win32")
-    return false;
-  return !env.DISPLAY && !env.WAYLAND_DISPLAY;
-}
-function parsePasted(input, state) {
-  const text = String(input || "").trim();
-  if (!text)
-    return null;
-  if (/^https?:\/\//i.test(text)) {
-    let url;
-    try {
-      url = new URL(text);
-    } catch {
-      return null;
-    }
-    const got = url.searchParams.get("state");
-    if (got && got !== state)
-      throw new Error("That link belongs to a different login. Run qc login again.");
-    return url.searchParams.get("code");
-  }
-  return /^[A-Za-z0-9_-]{20,}$/.test(text) ? text : null;
-}
-function openBrowser2(url, { platform = process.platform, env = process.env } = {}) {
-  if (isRemote({ platform, env }))
-    return false;
-  const [cmd, args] = platform === "darwin" ? ["open", [url]] : platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
-  try {
-    const child = spawn(cmd, args, { stdio: "ignore", detached: true });
-    child.on("error", () => {});
-    child.unref();
-    return true;
-  } catch {
-    return false;
-  }
-}
-function waitForCallback(server, state) {
-  return new Promise((resolve, reject) => {
-    const timer = setTimeout(() => reject(new Error("Timed out waiting for the browser (5 minutes). Run qc login again.")), TIMEOUT_MS);
-    server.on("request", (req, res) => {
-      const url = new URL(req.url, "http://127.0.0.1");
-      if (url.pathname !== "/callback") {
-        res.writeHead(404).end();
-        return;
-      }
-      const done = (status, title, body) => {
-        res.writeHead(status, { "Content-Type": "text/html; charset=utf-8" }).end(PAGE(title, body));
-      };
-      if (url.searchParams.get("state") !== state) {
-        done(400, "That was not this login", "The state did not match. Go back to your terminal.");
-        return;
-      }
-      clearTimeout(timer);
-      const error = url.searchParams.get("error");
-      if (error) {
-        done(200, "Not approved", "Nothing was shared. You can close this tab.");
-        reject(new Error(error === "access_denied" ? "Login was denied in the browser." : `Login failed: ${error}`));
-        return;
-      }
-      done(200, "Signed in", "You can close this tab and go back to your terminal.");
-      resolve(url.searchParams.get("code"));
-    });
-  });
-}
-async function login2(options = {}) {
-  const env = options.env ?? process.env;
-  const print = options.print ?? ((line) => process.stderr.write(`${line}
-`));
-  const base = (options.base ?? baseUrl(null, env)).replace(/\/+$/, "");
-  const verifier = b64url(randomBytes(32));
-  const challenge = b64url(createHash("sha256").update(verifier).digest());
-  const state = b64url(randomBytes(16));
-  const ephemeral = await ephemeralKeypair();
-  let server;
-  let redirectUri = "oob";
-  const oob = options.oob || isRemote({ env });
-  if (!oob) {
-    server = createServer();
-    await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
-    redirectUri = `http://127.0.0.1:${server.address().port}/callback`;
-  }
-  const url = new URL("/cli/authorize", base);
-  for (const [k, v] of Object.entries({
-    response_type: "code",
-    code_challenge: challenge,
-    code_challenge_method: "S256",
-    redirect_uri: redirectUri,
-    state,
-    client_name: `qc on ${hostname()}`,
-    kem: ephemeral.publicKey
-  })) {
-    url.searchParams.set(k, v);
-  }
-  const match = await matchCode(challenge, ephemeral.publicKey);
-  print("");
-  print(`  Confirmation code: ${match}`);
-  print("  Check that the browser shows the same code before you approve.");
-  print("");
-  const opened = !oob && openBrowser2(url.toString(), { env });
-  print(opened ? "  Opened your browser. If it did not, open:" : "  Open this link in a browser where you are signed in to qrypt.chat:");
-  print(`  ${url.toString()}`);
-  print("");
-  let code;
-  let rl;
-  try {
-    if (server) {
-      const waits = [waitForCallback(server, state)];
-      if (process.stdin.isTTY) {
-        rl = createInterface({ input: process.stdin, output: process.stderr });
-        waits.push((async () => {
-          for (;; ) {
-            let line;
-            try {
-              line = await rl.question("  Waiting for the browser… or paste the URL it ended up on: ");
-            } catch {
-              return new Promise(() => {});
-            }
-            const pasted = parsePasted(line, state);
-            if (pasted)
-              return pasted;
-            print("  That is not a qc login code or callback URL.");
-          }
-        })());
-      }
-      code = await Promise.race(waits);
-    } else {
-      rl = createInterface({ input: process.stdin, output: process.stderr });
-      for (;; ) {
-        code = parsePasted(await rl.question("  Paste the code (or the URL) from the browser: "), state);
-        if (code)
-          break;
-        print("  That is not a qc login code.");
-      }
-    }
-  } finally {
-    rl?.close();
-    server?.close();
-  }
-  if (!code)
-    throw new Error("No code came back from the browser.");
-  const res = await fetch(`${base}/api/cli/token`, {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({ grant_type: "authorization_code", code, code_verifier: verifier, redirect_uri: redirectUri })
-  });
-  const token = await res.json().catch(() => ({}));
-  if (!res.ok)
-    throw new Error(token.error_description || token.error || `Sign-in failed (HTTP ${res.status})`);
-  const keys = await openKeyBlob(token.key_blob, ephemeral);
-  const session = {
-    base,
-    access_token: token.access_token,
-    refresh_token: token.refresh_token,
-    expires_at: token.expires_at,
-    user: token.user,
-    keys,
-    created_at: new Date().toISOString()
-  };
-  const save = await storeSession(session, env, options.vault);
-  return { session, save };
-}
-
 // src/cli/agent.js
 import { randomBytes as randomBytes2 } from "node:crypto";
 function parseInvite(input) {
@@ -1301,7 +1312,7 @@ Usage:
   qc whoami               who this terminal is signed in as
   qc keys [publish]       whether this terminal's keys are your account's; publish makes them the
                           account's again (when another device published keys qc does not hold)
-  qc profile [--emoji \uD83D\uDD2D] [--pronouns she/her] [--website URL] [--bio TEXT]
+  qc profile [--name "Ada L"] [--emoji \uD83D\uDD2D] [--pronouns she/her] [--website URL] [--bio TEXT]
                           show or set your public profile (an empty value clears it);
                           --openprofile prints it as OpenProfile.md
   qc chats [--archived]   list your chats (archived ones only with --archived); qc list is the same
@@ -1420,7 +1431,7 @@ async function main2(argv, { version = "0.0.0" } = {}) {
     }
     case "agent": {
       if (rest[0] === "call") {
-        const { runVoiceAgent } = await import("./chunk-qcszcng8.js");
+        const { runVoiceAgent } = await import("./chunk-amknn876.js");
         return runVoiceAgent(await client(flags), {
           brain: typeof flags.brain === "string" ? flags.brain : undefined,
           voice: typeof flags.voice === "string" ? flags.voice : undefined,
@@ -1529,9 +1540,11 @@ ${ok("Installed OpenEmoji. Restart the terminal, then run: qc fonts status")}`);
       for (const k of ["emoji", "pronouns", "website", "bio"])
         if (flags[k] !== undefined)
           fields[k] = flags[k] === true ? "" : String(flags[k]);
+      if (flags.name !== undefined && flags.name !== true)
+        fields.displayName = String(flags.name);
       const p = Object.keys(fields).length ? await c.updateProfile(fields) : await c.profile();
       if (flags.json)
-        return json({ username: p.username, emoji: p.emoji ?? null, pronouns: p.pronouns ?? null, website: p.website ?? null, bio: p.bio ?? null });
+        return json({ username: p.username, displayName: p.displayName ?? p.display_name ?? null, emoji: p.emoji ?? null, pronouns: p.pronouns ?? null, website: p.website ?? null, bio: p.bio ?? null });
       out(who(p));
       if (p.website)
         out(`${mark("link")}${p.website}`);
@@ -1539,7 +1552,7 @@ ${ok("Installed OpenEmoji. Restart the terminal, then run: qc fonts status")}`);
         out(p.bio);
       if (!Object.keys(fields).length)
         out(`
-${info("Set: qc profile --emoji :telescope: --pronouns she/her --website https://you.example  (an empty value clears)")}`);
+${info('Set: qc profile --name "Ada L" --emoji :telescope: --pronouns she/her --website https://you.example  (an empty value clears)')}`);
       return;
     }
     case "chats":
@@ -1584,7 +1597,7 @@ ${info("Set: qc profile --emoji :telescope: --pronouns she/her --website https:/
         throw new Error('Usage: qc call <number>   (e.g. qc call "(415) 555-1234" or qc call +442079460958)');
       const c = await client(flags);
       const url = `${c.base}/phone?to=${encodeURIComponent(rest.join(" "))}`;
-      const { openBrowser } = await import("./chunk-8frhjf08.js");
+      const { openBrowser } = await import("./chunk-4mx8vtcw.js");
       const opened = openBrowser(url);
       return out(`${mark("send")}${opened === false ? "Open" : "Opened"} ${url}
   Calls to phones need your browser for the audio; tap Call there.`);

package/dist/commands.js

@@ -7,7 +7,7 @@ import {
   mentionMatches2,
   withMentions2,
   main2
-} from "./chunk-94qf0rg1.js";
+} from "./chunk-jfete02h.js";
 import"./chunk-4ea1xy2c.js";
 export {
   HELP2 as HELP,

package/dist/mcp.js

@@ -3,7 +3,7 @@ import {
   findChat2,
   mentionMatches2,
   withMentions2
-} from "./chunk-94qf0rg1.js";
+} from "./chunk-jfete02h.js";
 
 // src/cli/mcp.js
 import { createInterface } from "node:readline";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@profullstack/qryptchat",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "description": "qc: qrypt.chat in your terminal. A full-screen end-to-end encrypted chat client (ML-KEM-1024), plus a scriptable CLI and an MCP server.",
   "type": "module",
   "bin": {