feat(cli): chat — Tier 2 check on the signing device, interactive room

Each message's signing device is checked against the group's roster as the
page checks it (a port of transport-roster.js, held to it by the parity
test): chains of countersignatures walked from each account's roots, the
keys accepted per account and node kept in the store, the roster read again
once before a key is called changed. Only "changed" is said, under the
message; --json carries every verdict.

chat with no group opens the interactive chat: the groups, then one group's
conversation IRC-style with pushed messages arriving live and a line to
write in; Esc or /part goes back to the groups, /quit or Ctrl+Q quits. Like
the bare command, it opens on the sign-in screen when nothing is stored.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

1 files changed, 11 insertions, 0 deletions

diff --git a/packages/meshbay-cli/src/meshbay_cli/manpage.py b/packages/meshbay-cli/src/meshbay_cli/manpage.py
index 4491896..022cd99 100644
--- a/packages/meshbay-cli/src/meshbay_cli/manpage.py
+++ b/packages/meshbay-cli/src/meshbay_cli/manpage.py
@@ -234,6 +234,17 @@ its sender sealed in it, and posts one with
 .BR \-m .
 Messages are encrypted and signed end to end, as the application's are; one this
 machine cannot verify or open is shown as unreadable, never left out.
+The device that signed a message is checked against the group's roster and the
+keys this machine accepted for that account before; a key it has not seen and
+nothing vouches for is pointed out under the message.
+.B meshbay\-cli chat
+with no group opens the interactive chat: the groups (Enter joins one whose chat
+is on), then the conversation, with new messages as they arrive and a line to
+write in; Esc or
+.B /part
+goes back to the groups,
+.B /quit
+or Ctrl+Q quits.
 .PP
 .B browser\-access on
 makes this machine leave, on each node it opens a group on, a copy of its keys