@profullstack/qryptchat 0.5.0 → 0.6.0

package/dist/{chunk-74kad4wd.js → chunk-074nrnc8.js}

@@ -1,11 +1,12 @@
 import {
+  DEFAULT_URL,
   sessionPath,
   baseUrl,
   loadSession,
   unlockSession,
   storeSession,
   clearSession
-} from "./chunk-vfahhydf.js";
+} from "./chunk-menzxtw0.js";
 
 // src/cli/crypto.js
 import { MlKem1024 as MlKem10242 } from "mlkem";
@@ -1090,11 +1091,56 @@ async function login(options = {}) {
   return { session, save };
 }
 
+// src/cli/agent.js
+import { randomBytes as randomBytes2 } from "node:crypto";
+function parseInvite(input) {
+  const text = String(input ?? "").trim();
+  let base = DEFAULT_URL;
+  let token = text;
+  if (/^https?:\/\//i.test(text)) {
+    const url = new URL(text);
+    base = url.origin;
+    token = url.hash.replace(/^#/, "") || url.searchParams.get("token") || "";
+  }
+  if (!/^[A-Za-z0-9_-]{40,64}$/.test(token))
+    throw new Error("That is not an agent invite link (https://qrypt.chat/agents/join#...).");
+  return { base, token };
+}
+function usernameFor(name) {
+  const stem = String(name || "agent").toLowerCase().replace(/[^a-z0-9_]+/g, "_").replace(/^_+|_+$/g, "").slice(0, 20) || "agent";
+  return `${stem.length >= 3 ? stem : `${stem}_agent`}_${randomBytes2(3).toString("hex")}`.slice(0, 30);
+}
+async function joinAsAgent(invite, { name, username, env = process.env, fetchImpl = fetch, vault } = {}) {
+  const { base, token } = parseInvite(invite);
+  const keys1024 = await ephemeralKeypair();
+  const res = await fetchImpl(`${base}/api/agents/redeem`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ token, username: username || usernameFor(name), displayName: name, publicKey: keys1024.publicKey })
+  });
+  const body = await res.json().catch(() => ({}));
+  if (!res.ok)
+    throw new Error(body.error || `Could not join (HTTP ${res.status})`);
+  const session = {
+    base,
+    access_token: body.access_token,
+    refresh_token: body.refresh_token,
+    expires_at: body.expires_at,
+    user: body.user,
+    keys: { keys1024 },
+    agent: true,
+    created_at: new Date().toISOString()
+  };
+  await storeSession(session, env, vault);
+  return { session, conversationId: body.conversation_id, operator: body.operator };
+}
+
 // src/cli/commands.js
 var HELP2 = `qc: qrypt.chat in your terminal (end-to-end encrypted, ML-KEM-1024)
 
 Usage:
   qc                      open the chat client (signs you in first if needed)
+  qc agent join <link>    join as an AI agent from an invite (makes its own keys) [--name --username]
   qc login [--oob]        sign in through your browser; --oob to paste a code (SSH)
   qc logout               forget this terminal's session and keys
   qc whoami               who this terminal is signed in as
@@ -1113,7 +1159,8 @@ Keys and tokens are sealed (ChaCha20-Poly1305) in ${"$"}QC_HOME or ~/.config/qc;
 OS keychain, or comes from a passphrase (QC_PASSPHRASE for scripts and qc mcp).
 HD: emoji and icons are drawn as our OpenEmoji/OpenIcon images in Kitty, Ghostty, WezTerm and iTerm2.
 Over SSH or in tmux (set -g allow-passthrough on) say which: QC_HD=1 (Kitty/Ghostty) or
-QC_HD=wezterm (WezTerm/iTerm2). QC_HD=0 turns it off.`;
+QC_HD=wezterm (WezTerm/iTerm2). QC_HD=0 turns it off. Mosh carries only text, so behind mosh
+emoji stay characters: for images use ssh or WezTerm's multiplexer (wezterm connect).`;
 function parseArgs2(argv) {
   const args = { _: [], flags: {} };
   for (let i = 0;i < argv.length; i++) {
@@ -1126,7 +1173,7 @@ function parseArgs2(argv) {
       const [k, v] = a.slice(2).split("=", 2);
       if (v !== undefined)
         args.flags[k] = v;
-      else if (["url", "n", "limit", "reply", "emoji", "pronouns", "website", "bio"].includes(k) && argv[i + 1] !== undefined && !argv[i + 1].startsWith("--"))
+      else if (["url", "n", "limit", "reply", "emoji", "pronouns", "website", "bio", "name", "username"].includes(k) && argv[i + 1] !== undefined && !argv[i + 1].startsWith("--"))
         args.flags[k] = argv[++i];
       else
         args.flags[k] = true;
@@ -1195,6 +1242,21 @@ async function main2(argv, { version = "0.0.0" } = {}) {
       const { runTui } = await import("./tui.js");
       return runTui(c, { initialChat: rest[0] });
     }
+    case "agent": {
+      if (rest[0] !== "join" || !rest[1])
+        throw new Error("Usage: qc agent join <invite link> [--name NAME] [--username NAME]");
+      const { session, conversationId, operator } = await joinAsAgent(rest[1], {
+        name: typeof flags.name === "string" ? flags.name : undefined,
+        username: typeof flags.username === "string" ? flags.username : undefined
+      });
+      if (flags.json)
+        return json({ user: session.user, conversation_id: conversationId, operator });
+      out(`Joined qrypt.chat as @${session.user?.username} (agent), operated by @${operator?.username ?? "?"}.`);
+      out(`Keys made here and sealed in ${sessionPath()}; only the public key left this machine.`);
+      const chatName = operator?.display_name || operator?.username || "<chat>";
+      out(`Your chat with ${chatName} is open. Try: qc listen   or   qc send "${chatName}" "hello"   or   qc mcp`);
+      return;
+    }
     case "login": {
       const { session } = await login({ oob: !!flags.oob });
       out(`Signed in as @${session.user?.username ?? "unknown"} on ${session.base}. Keys sealed (ChaCha20-Poly1305) in ${sessionPath()}.`);

package/dist/{chunk-vfahhydf.js → chunk-menzxtw0.js}

@@ -187,4 +187,4 @@ function clearSession(env = process.env) {
     rmSync(file);
 }
 
-export { configDir, sessionPath, baseUrl, loadSession, unlockSession, storeSession, clearSession };
+export { DEFAULT_URL, configDir, sessionPath, baseUrl, loadSession, unlockSession, storeSession, clearSession };

package/dist/commands.js

@@ -3,8 +3,8 @@ import {
   parseArgs2,
   findChat2,
   main2
-} from "./chunk-74kad4wd.js";
-import"./chunk-vfahhydf.js";
+} from "./chunk-074nrnc8.js";
+import"./chunk-menzxtw0.js";
 export {
   HELP2 as HELP,
   findChat2 as findChat,

package/dist/mcp.js

@@ -1,7 +1,7 @@
-import"./chunk-vfahhydf.js";
+import"./chunk-menzxtw0.js";
 import {
   findChat2
-} from "./chunk-74kad4wd.js";
+} from "./chunk-074nrnc8.js";
 
 // src/cli/mcp.js
 import { createInterface } from "node:readline";

package/dist/tui.js

@@ -1,6 +1,6 @@
 import {
   configDir
-} from "./chunk-vfahhydf.js";
+} from "./chunk-menzxtw0.js";
 
 // src/cli/tui.js
 import { createApp, createImageStore, drawIcon, drawRichText, editText, emojify, insertText, stringWidth, truncate, widgets, wrap } from "@profullstack/hqtui";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@profullstack/qryptchat",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "qc: qrypt.chat in your terminal. A full-screen end-to-end encrypted chat client (ML-KEM-1024), plus a scriptable CLI and an MCP server.",
   "type": "module",
   "bin": {
@@ -18,7 +18,7 @@
   "dependencies": {
     "@noble/ciphers": "^2.0.0",
     "@profullstack/encrypt": "^0.1.0",
-    "@profullstack/hqtui": "^0.10.1",
+    "@profullstack/hqtui": "^0.10.2",
     "mlkem": "^2.5.0"
   },
   "keywords": [