diff --git a/hosts/common/programs/calls.nix b/hosts/common/programs/calls.nix
index 609f5a6e..5d2ad665 100644
--- a/hosts/common/programs/calls.nix
+++ b/hosts/common/programs/calls.nix
@@ -7,7 +7,7 @@
 # - message @cheogram.com "reset sip account"  (this is not destructive, despite the name)
 # - the bot will reply with auto-generated username/password plus a SIP server endpoint.
 #   just copy those into gnome-calls' GUI configurator
-# - now gnome-calls can do outbound calls. inbound calls requires more chatting with the help bot
+# - now gnome-calls can do outbound calls. inbound calls can be routed by messaging the bot: "configure calls"
 #
 # my setup here is still very WIP.
 # open questions:
@@ -36,9 +36,11 @@ in
       ".local/share/calls"  # call "records"
       # .local/share/folks  # contacts?
     ];
+    # this is only the username/endpoint: the actual password appears to be stored in gnome-keyring
     secrets.".config/calls/sip-account.cfg" = ../../../secrets/common/gnome_calls_sip-account.cfg.bin;
     suggestedPrograms = [
       "feedbackd"  # needs `phone-incoming-call`, in particular
+      "gnome-keyring"  # to remember the password
     ];
 
     services.gnome-calls = {
diff --git a/hosts/modules/gui/default.nix b/hosts/modules/gui/default.nix
index 01468aa6..faa48181 100644
--- a/hosts/modules/gui/default.nix
+++ b/hosts/modules/gui/default.nix
@@ -56,6 +56,7 @@ in
   sane.programs.guiBaseApps = declPackageSet [
     # "abaddon"  # discord client
     "alacritty"  # terminal emulator
+    "calls"  # gnome calls (dialer/handler)
     "dconf"  # required by many packages, but not well-documented :(
     # "delfin"  # Jellyfin client
     "dialect"  # language translation
@@ -110,7 +111,6 @@ in
   ];
 
   sane.programs.handheldGuiApps = declPackageSet [
-    # "calls"  # gnome calls (dialer/handler)
     # "celluloid"  # mpv frontend
     # "chatty"  # matrix/xmpp/irc client  (2023/12/29: disabled because broken cross build)
     "cozy"  # audiobook player