@wirecat/cli-base 0.50.0 → 0.50.2

package/CHANGELOG.md

@@ -8,6 +8,29 @@ Versions before 0.8.0 are in the [git tags](https://github.com/WireCatLabs/cli-b
 Every entry says what changed as a caller sees it, why, and what to watch for — the rules are
 [`docs/dev/CONVENTIONS.md`](docs/dev/CONVENTIONS.md#the-changelog).
 
+## 0.50.2 — 23.10.2026
+
+### Added
+
+- **The vocabulary has the words a messenger's bot commands use.** Verbs `answer`, `action` and `watch`; views `me`
+  and `between`; resources `callbacks`, `webhooks`, `templates`, `media` and the singular `auth`; flags `--secret`
+  (which secret beside a bot token to keep) and `--store-token`. The owner approved them for the shared bot commands
+  tg, max and wa mount, so `unknown-verb`, `unknown-resource` and `option-role` stop reporting those commands. A CLI
+  whose baseline lists them sees "stale baseline entry" and removes the lines.
+
+- The messenger vocabulary names sign-in sessions, cached metadata, conversations, analysis work and statistics views precisely. Decryption and retry keep distinct meanings; model categories and alternate spellings still use existing words in command migrations.
+
+- The flag vocabulary distinguishes analysis and embedding providers, recorded-consent identities, tag ownership claims, stored-answer models and saved reply-template policies. It also declares the disappearing-message duration, admin-only chat settings, photo removal and sticker-file input with explicit roles.
+
+## 0.50.1 — 23.10.2026
+
+### Fixed
+
+- **Joined-path hints can retain a profile.** `refuseJoinedPath` accepts an optional display prefix so hosts can preserve the caller's profile in the corrected invocation. Existing two-argument calls stay valid.
+- **Skill commands have concise summaries.** Detailed installation paths remain in their descriptions, while help and discovery show short task names.
+
+- **Secret checks follow the checked revision.** Shared CI, security and release checks scan its complete reachable history. An unrelated fetched branch can no longer fail a clean pull request.
+
 ## 0.50.0 — 22.10.2026
 
 ### Changed — may break callers

package/dist/commands/index.d.ts

@@ -16,6 +16,7 @@ export * from "./registry.js";
 /**
  * Refuses a command path that arrived as one argument — `"projects add" --help`, what a zsh loop over
  * `$c` passes. Commander settles `--help` for an unknown word before any hook runs and prints the root
- * help, so the words are checked before parsing. Pass the words after a leading profile, if any.
+ * help, so the words are checked before parsing. Pass the words after a leading profile, if any;
+ * `prefix` keeps those caller-supplied words between the tool name and path in the hint.
  */
-export declare const refuseJoinedPath: (root: Command, args: readonly string[]) => void;
+export declare const refuseJoinedPath: (root: Command, args: readonly string[], prefix?: readonly string[]) => void;

package/dist/commands/index.js

@@ -5,9 +5,10 @@ export * from "./registry.js";
 /**
  * Refuses a command path that arrived as one argument — `"projects add" --help`, what a zsh loop over
  * `$c` passes. Commander settles `--help` for an unknown word before any hook runs and prints the root
- * help, so the words are checked before parsing. Pass the words after a leading profile, if any.
+ * help, so the words are checked before parsing. Pass the words after a leading profile, if any;
+ * `prefix` keeps those caller-supplied words between the tool name and path in the hint.
  */
-export const refuseJoinedPath = (root, args) => {
+export const refuseJoinedPath = (root, args, prefix = []) => {
     let command = root;
     const path = [];
     for (const arg of args) {
@@ -18,7 +19,7 @@ export const refuseJoinedPath = (root, args) => {
         if (next === undefined)
             return;
         if (rest.length > 0)
-            throw new CliError("validation_error", `"${arg}" was given as one argument; run: ${[root.name(), ...path, first, ...rest].join(" ")}`);
+            throw new CliError("validation_error", `"${arg}" was given as one argument; run: ${[root.name(), ...prefix, ...path, first, ...rest].join(" ")}`);
         path.push(first);
         command = next;
     }

package/dist/skill/index.js

@@ -100,7 +100,9 @@ export const skillCommand = (app, skill, environment, more = {}) => {
         return json === true || jsonl === true;
     };
     const named = Object.keys(more);
-    const show = annotate(command.command("show"), { effects: { remote: "none", local: "read" } }).description(`print SKILL.md — \`${app.command} skill install\` puts it where Claude Code, Codex and Gemini CLI look for it`);
+    const show = annotate(command.command("show"), { effects: { remote: "none", local: "read" } })
+        .summary("print the tool's instructions for AI agents")
+        .description(`print SKILL.md — \`${app.command} skill install\` puts it where Claude Code, Codex and Gemini CLI look for it`);
     if (named.length > 0)
         show.argument("[name]", `one of the skills shipped for a task: ${named.join(", ")}`);
     show.action(function (given) {
@@ -122,6 +124,7 @@ export const skillCommand = (app, skill, environment, more = {}) => {
             streams.data(content);
     });
     annotate(command.command("install"), { effects: { remote: "none", local: "write" } })
+        .summary("install the tool's instructions for AI agents")
         .description(`write SKILL.md to ~/.claude/skills/${app.appName}/ (Claude Code) and ~/.agents/skills/${app.appName}/ (Codex, Gemini CLI)`)
         .addOption(new Option("--for <agents>", "which agents to install for").choices(["claude", "agents", "all"]).default("all"))
         .action(function ({ for: chosen }) {

package/dist/standards/flags-what.js

@@ -1,4 +1,80 @@
 export const WHAT_FLAGS = [
+    {
+        name: "--analysis-provider",
+        value: "<provider>",
+        role: "mode",
+        type: "choice",
+        meaning: "who analyses the selected text: the calling agent or a configured model service",
+    },
+    {
+        name: "--embedding-provider",
+        value: "<provider>",
+        role: "mode",
+        type: "choice",
+        meaning: "who computes embeddings: a local model or a configured remote model service",
+    },
+    {
+        name: "--consent-provider",
+        value: "<identity>",
+        role: "target",
+        type: "string",
+        meaning: "the exact model-service identity whose recorded consent is being removed",
+    },
+    {
+        name: "--claim",
+        value: "<claim>",
+        role: "target",
+        type: "choice",
+        meaning: "the ownership claim to remove from a tag: manual or auto",
+    },
+    {
+        name: "--answer-model",
+        value: "<model>",
+        role: "target",
+        type: "string",
+        meaning: "remove only stored analysis answers made by this model; does not run a model",
+    },
+    {
+        name: "--template-mode",
+        value: "<mode>",
+        role: "value",
+        type: "choice",
+        meaning: "the saved reply template's policy: fill-only or may-reword",
+    },
+    {
+        name: "--disappear-after",
+        value: "<duration|off>",
+        role: "value",
+        type: "duration",
+        meaning: "how long a new chat message is kept after sending; off keeps messages",
+    },
+    {
+        name: "--only-admins-edit-info",
+        value: "<on|off>",
+        role: "value",
+        type: "choice",
+        meaning: "only admins may change the chat's name, photo and description",
+    },
+    {
+        name: "--only-admins-send",
+        value: "<on|off>",
+        role: "value",
+        type: "choice",
+        meaning: "only admins may send messages to the chat",
+    },
+    {
+        name: "--remove-photo",
+        role: "value",
+        type: "switch",
+        meaning: "remove the chat's photo; not with a replacement photo",
+    },
+    {
+        name: "--sticker-file",
+        value: "<file>",
+        role: "value",
+        type: "path",
+        meaning: "a local sticker file to send as a message",
+    },
     {
         name: "--target-store",
         value: "<file>",
@@ -316,6 +392,20 @@ export const WHAT_FLAGS = [
         type: "string",
         meaning: "what it acts on, as a reference: msg:, chat:, person:, task:, …",
     },
+    {
+        name: "--secret",
+        value: "<name>",
+        role: "target",
+        type: "choice",
+        meaning: "which secret beside a bot's token to keep, typed at a hidden prompt; never the secret itself",
+    },
+    {
+        name: "--store-token",
+        value: "<profile>",
+        role: "action",
+        type: "string",
+        meaning: "keep a token an operation returns only in this bot profile's keyring; never print it",
+    },
     { name: "--task", value: "<id>", role: "target", type: "id", meaning: "a task, by id" },
     { name: "--to", value: "<chat>", role: "target", type: "id", meaning: "the chat it goes to" },
     { name: "--topic", value: "<id>", role: "target", type: "id", meaning: "the forum topic, in a chat that has topics" },

package/dist/standards/vocabulary.js

@@ -152,6 +152,9 @@ const verbs = [
     ["star", "mark a message so the owner finds it again; only the owner sees the star"],
     ["unstar", "take the owner's star off a message"],
     ["vote", "answer a poll"],
+    ["answer", "reply to a button someone pressed under a bot's message"],
+    ["action", "show what a bot is doing in a chat, such as typing, for a few seconds"],
+    ["watch", "follow new events as they come, and keep them"],
     ["close", "close a thing that stays: a poll, a task"],
     ["join", "join a chat"],
     ["leave", "leave a chat"],
@@ -176,6 +179,8 @@ const verbs = [
     ["unmerge", "undo a merge"],
     ["defer", "leave a decision undecided, for the owner"],
     ["embed", "compute the vectors a meaning search reads, for what is stored and has none"],
+    ["decrypt", "write an unencrypted copy of a file sealed by the tool, using the supplied password"],
+    ["retry", "start a fresh attempt at partial or failed work, retaining the previous attempt"],
 ];
 const replaces = {
     list: ["ls"],
@@ -237,6 +242,23 @@ const collections = [
     ["mentions", "phones, e-mail addresses, links and documents found in stored text, each where it was written"],
     ["images", "pictures in stored messages, searched by what they show"],
     ["duplicates", "pairs of things that may be one, each waiting for a decision"],
+    ["sessions", "devices and applications signed in to an account"],
+    ["folders", "named groupings of chats or source files"],
+    ["links", "stored or source-provided connections between selected things"],
+    ["requests", "requests waiting for an explicit decision"],
+    ["rules", "saved rules the owner applies to selected things"],
+    ["conversations", "derived stretches of chat messages grouped by topic"],
+    ["batches", "bounded work packets submitted or waiting for processing"],
+    ["consents", "recorded permission to process selected data with a specified service"],
+    ["embeddings", "vectors computed from stored content for similarity search"],
+    ["reports", "saved reports about selected data or a tool's state"],
+    ["keys", "credentials for a selected external service"],
+    ["counters", "stored observations of source counts, with their freshness"],
+    ["gaps", "ranges a source could contain that the local store does not hold"],
+    ["callbacks", "button presses a bot received and may answer"],
+    ["webhooks", "addresses a messenger pushes a bot's updates to"],
+    ["templates", "messages a business has approved in advance, the only kind some messengers deliver late"],
+    ["media", "files people sent, held by the messenger under an id"],
 ];
 const singulars = [
     ["session", "this tool's login"],
@@ -251,6 +273,8 @@ const singulars = [
     ["vocabulary", "the owner's catalogue of canonical names, with their aliases"],
     ["api", "the source's own API, one command per operation"],
     ["privacy", "who may find, see, call or add the account"],
+    ["metadata", "a profile's cached source attributes"],
+    ["auth", "the credentials a bot profile uses: its token and the secrets beside it"],
 ];
 const views = [
     ["tree", "the parent and child hierarchy of stored sources"],
@@ -270,6 +294,17 @@ const views = [
     ["categories", "the categories a thing takes, with what each means"],
     ["domains", "the internet domains links point to, most linked first"],
     ["places", "the street addresses confirmed as places, most mentioned first"],
+    ["comments", "replies attached to a selected source item"],
+    ["links", "links held for a selected thing"],
+    ["voters", "people whose recorded votes are visible for a selected poll"],
+    ["charts", "time series drawn from selected statistics, optionally rendered to a file"],
+    ["newcomers", "members observed joining during the selected time window"],
+    ["retention", "whether members of a selected cohort remain or return over time"],
+    ["responses", "observed replies between participants and the time taken to answer"],
+    ["discussion", "source posts compared by known views and observed discussion replies"],
+    ["unanswered", "questions without an observed qualifying answer"],
+    ["me", "the account a profile's token belongs to"],
+    ["between", "the messages between two given messages of one chat"],
 ];
 const roots = [
     ["batch", "run bounded explicitly registered reads with independent correlated answers"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wirecat/cli-base",
-  "version": "0.50.0",
+  "version": "0.50.2",
   "description": "The parts every command line tool needs: output modes, terminal rendering, error model, exit codes, credentials, clocks",
   "license": "Apache-2.0",
   "author": "Viacheslav Ptsarev",