@wirecat/cli-core 0.399.0 → 0.401.0

package/CHANGELOG.md

@@ -5,6 +5,117 @@ Notable changes to `@wirecat/cli-core` (`@wirecat/cli-messaging` up to 0.261.0,
 minor version may break callers, and says how under "Changed — may break callers". `pnpm docs:check` checks the
 shape of this file.
 
+## Unreleased
+
+## 0.401.0 — 24.10.2026
+
+### Changed — may break callers
+
+- **`events list` writes times as ISO 8601 and ids as strings**, as every other answer does: `starts_at`, `ends_at`, `deleted_at`, `created_at` and `updated_at` were epoch milliseconds, `id` and `event_series_id` numbers. No field is gone.
+
+- **List duplicate-task pairs explicitly.** Use `tasks duplicates list [query...]` in CLI and MCP calls. The bare `tasks duplicates` group shows help or refuses in machine mode; it no longer reads the store. Reject and defer remain under that group.
+
+### Fixed
+
+- **`search all` pages meeting matches.** With a meeting account in the search, `--page 2` repeated the meetings of the first page, and `has_more` could be false while meeting matches remained. The merged list is now read as deep as the page and cut, so pages follow on and `has_more` holds.
+
+### Added
+
+- **Meeting answers keep what they knew.** A `search all` meeting hit carries its `scope` (transcript, chat or summary) and its stored line `id`, so two passages of one meeting stay apart. New entities `meeting_evidence`, `meeting_person_context` and `event`; `cli` exports `allAnswer`, `meetingEvidenceItem` and `meetingPersonContextItem`.
+
+## 0.400.0 — 24.10.2026
+
+### Fixed
+
+- **Downloads skip service events and keyboards.** A message whose only attachment is a group event (`control`) or an inline keyboard no longer makes a media archive or `attachments download` fail with `provider.invalid-response`; both count as non-files like polls and links.
+
+- Account lists accept profile and current-profile query terms, and declare their answer fields for discovery and projection.
+
+- **Account change and privacy schemas.** Profile updates, ended sessions and privacy reads and writes declare their existing answers for field discovery and projection. Privacy fields remain optional where a messenger does not expose a setting.
+
+- **`contacts timeline` stays in its account for tasks.** A task assigned to the person now shows only when its project belongs to the asked account or to no account; before, tasks from another account of the same messenger showed too. Task rows now also name the account of their project.
+
+### Added
+
+- **Album sends.** `messages send` takes `--photo` and `--file` more than once, and its MCP tool takes a list for
+  `photo` and `file`; together they go as one album, photos first. Each photo or file counts as one send toward the
+  hourly limit. An adapter returns every message of the album as `Sent.messages`, and `--json` answers with a
+  `messages` list beside `message`, which stays the first. A messenger that cannot send an album refuses it before
+  anything goes. A single attachment sends and answers as before.
+
+- **Mirror runner for folder sync.** `syncMirrors` syncs each of a CLI's mirrors both ways under one lock and reports
+  a partly failed mirror as a `mirror.partial` issue; `fileMirrorState`, `mirrorId`, `mirrorStatus` and
+  `conflictReport` are the state file, id, local plan and conflict report drive-cli's `mirrors` used, moved here so
+  other CLIs can mirror folders and a watcher can reuse the same run.
+
+- **Meeting answer schemas.** `review`, `mentions list`, `stats meetings show` and `top`, `meetings people`, `meetings passage` and `meetings task-proposal` declare their answer entities (`meeting_review`, `meeting_link`, `meeting_stats`, `meeting_speaker`, `meeting_participants`, `meeting_passage`, `meeting_task_proposal`) for field discovery and projection. `meetings/` exports the item builders the meeting CLIs share: `meetingReviewItem`, `meetingLinkItem`, `meetingStatsItem`, `meetingSpeakerItem`.
+
+- **Listener answers declare their fields.** Live messages and events, and the final serve summary, expose exact schemas for discovery and cross-CLI output contracts. Provider-only attachment references stay private.
+
+- **Poll answer schemas.** Poll reads, vote and close receipts, and newly sent poll messages declare their answer entities for field discovery and projection.
+
+- **Image embedding progress has declared fields.** Discovery and projection describe the bounded batch’s model, embedded, skipped and failed counts, and whether more pictures remain. The existing receipt and processing behavior stay unchanged.
+
+- **Model key receipt schemas.** Storing or removing a model-provider key declares its provider and storage sources for field discovery and projection. No credential value appears in either schema or answer.
+
+- Recipient lists accept ID and title queries without changing the allowlist state. Recipient commands declare their answer schemas for discovery and field projection.
+
+- **Cached chat metadata declares its answers.** Cached reads describe absent or populated metadata; refresh receipts describe each successful chat or failure and whether more chats remain. Existing keys and cached-read behavior stay unchanged.
+
+- **Contact answers have declared fields.** Address-book writes, private aliases and note removal, activity, bot checks, identity links, context and preparation expose their exact answer schemas. Context describes both the cross-account report and selected-chat message windows at every detail level. Field projection recognizes both shapes and refuses unknown fields before reading contact data. CLI, SDK and MCP receipts keep their existing shapes.
+
+- **Mention answers have declared fields.** Mentions, details, linked domains, confirmed places, decisions and rebuild receipts expose their existing schemas for discovery, JSON field projection and MCP. Numeric local IDs and cross-account decision behavior stay unchanged.
+
+- **Reaction answer schemas.** Add and remove declare the same reaction-change entity, including the operation id and a null reaction when removed. Field discovery and projection now describe these write receipts.
+
+- **Tag changes declare their results.** Add and remove expose precise chat, contact, message and task target shapes. Automatic tagging describes each classification or failed chat, including preview status and remaining work; existing receipts and ownership claims stay unchanged.
+
+- Send history includes a concrete example in help and command discovery.
+
+- Chat document lists accept a source-message reference query, filtered in the store before link pagination, and declare their document-link answer fields.
+
+- Doctor reports include a concrete creation example in help and command discovery.
+
+- Send-attempt lists accept queries over their stored metadata before pagination. Continuation steps keep the query, and discovery declares the answer fields.
+
+- **Clearing search history declares its receipt.** Discovery and JSON projection expose the existing cleared count; saved searches remain untouched.
+
+- Recorded-run lists accept metadata queries before pagination, and recorded-run commands declare their answer schemas. Continuation steps keep the query.
+
+- **Message read and write schemas.** Showing a message, sending, editing, forwarding, pinning, starring and deleting declare their existing answer entities for field discovery and projection. Write receipts retain their operation id.
+
+- **Chat-state write schemas.** Muting, archiving, pinning, marking unread, deleting a chat and clearing its history declare their existing write receipts for field discovery and projection, including their operation ids.
+
+- **Chat administration declares its answers.** Invite inspection, posting identities, read receipts, roster fetches, membership and group changes, invitations, join requests, administrators, folder writes and moderation expose their exact existing result fields, including operation identifiers and partial outcomes.
+
+- **Message read schemas.** Evidence packets, voice transcripts and conversation links declare separate answer entities for field discovery and projection, preserving existing response keys.
+
+- **Conversation results have declared schemas.** Builds, analysis, message batches, link changes, embedding progress, readiness, related conversations and search hits describe their existing answer fields for discovery and projection, including bounded preparation and empty batches.
+
+- **Message context, downloads and sync have declared answers.** Context describes both message windows and bounded thread reports. Downloads retain file paths and partial extraction results; sync describes estimates, chat and all-chat progress, preparation and background jobs. General chat evidence packets and exact statistics evidence now explain their separate purposes in help and the guide.
+
+- Analysis-consent lists accept chat and provider-identity queries, and consent commands declare their answer fields. Reading a filtered list leaves remembered permissions unchanged.
+
+- **Attachment and media archive results have declared fields.** Extraction reports and streamed file rows, retained-file transfers, saved text, archive downloads, integrity checks, relocations and timer management describe their existing receipts. MCP resource/image transfers keep byte metadata in the same shape while carrying bytes separately.
+
+- Tracked-chat lists accept a query over chat IDs and titles, filtered in the store. Tracking commands declare their answer schemas for field projection and discovery.
+
+- **Task actions declare their answers.** Task cards, source previews, creation and close receipts, relationships, similarity and duplicate decisions, merges, categories and rule scans expose their exact existing fields for discovery and projection. Stored tasks and actions keep their behavior.
+
+- **Store commands declare their answers.** Archive coverage, exports, selected-chat clearing, gap plans and repairs, background jobs, health checks, maintenance and backup/restore receipts describe their existing result fields. Missing-file and partial-result variants remain explicit; stored data and command behavior stay unchanged.
+
+### Changed — may break callers
+
+- **MCP offers the writes no permission level stopped before.** `store backup|restore|migrate|repair|reset|clear|decrypt`, `store copies delete`, `server start|stop|restart`, model downloads, `schedule run|exec`, `doctor report create`, `account sessions end`, `chats delete|clear` and `bot store fetch` are MCP tools, each limited by a key named after its path (`store.reset`, `server.start`, `schedule.run`…), `ask` by default; set one to `deny` to keep an agent from it. `server`, `models`, `schedule`, `doctor` and `images` are now valid roots of a permission key. Command-line behaviour is unchanged. What to change in a CLI: a pinned MCP catalogue and a document listing what MCP leaves out.
+
+- **Watch uses the shared JSONL contract.** Read each message or event from `{ type: "item", data }` and wait for the final `type: "end"` record. Message and event fields are snake_case, message values use the canonical read shape with references, and live counter observations remain available. Normal stops and timeouts finish complete; a source failure finishes incomplete and returns its failure code. Update readers of the old raw lines.
+
+- **MCP offers the commands that change what a later run may do, behind `mcp.authority`.** `config set|unset`, `schedule command|agent|remove`, auto-reply rules and consents, recipients, chat rules, `server install`, `skill install`, model keys, media archive timers and `flood clear` are MCP tools again, offered only where the profile sets `permissions.mcp.authority` to `allow`; it is `deny` by default, so nothing changes until the owner turns it on. An agent cannot change that key through `config set`. What to change in a CLI: `grantsAuthority` no longer adds `mcp: false`, so `commands --json` no longer marks these commands, and a catalogue built with `toolsFromCommands` without `levels` lists them; update a pinned catalogue and a document that lists what MCP leaves out. A command of the CLI's own marked `grantsAuthority` (max `recipients add`) is gated the same way. A caller of `createBotServer` passes `authority: changesAuthorityAt(root)` to hide them; without it they are listed and refuse when called.
+
+- **Diagnostic search is `search runs`.** Replace `runs search`; saved MCP requests use the new command path. Filters are query terms: `status:failed`, `error_code:timeout`, `operation:messages.download` and `profile:work`, alongside literal diagnostic words. Unsupported operators are refused; time bounds and paging remain options. The local search still needs no linked messenger profile, filters before pagination and returns diagnostic fields without message contents. No alias remains for the retired path.
+
+- **Statistics select rows through their query.** Rankings use `message_kind:` with `posts`, `comments` or `all`, and author rankings `min_messages:5`; discussion uses `min_views:10` and `max_replies:0`; unanswered questions use `older_than:24h`. These predicates replace the corresponding filter flags and reach the existing SQL selection before aggregation or row limits. The same reports select chats with `chat:` and exact words with `exact:` instead of `--chat` and `--exact`; source and timezone remain options. Saved CLI/MCP requests must migrate. Stored selections and SDK parameters retain their meanings.
+
 ## 0.399.0 — 23.10.2026
 
 ### Changed — may break callers

package/README.md

@@ -178,7 +178,7 @@ or a launchd agent.
 - **A permission level per command path:** deny, readonly, ask or allow. The most specific key wins, and a built-in
   default can only tighten what the owner set. No level lets an agent delete for everyone.
 - **A recipient list and an hourly limit** for sends, and a journal of every attempt that records the length of the
-  text, never the text.
+  text, never the text. Each photo or file of an album counts as one send.
 - **A send id across retries.** A write whose outcome is unknown is never retried automatically; a retry under the
   same send id cannot send twice.
 - **Deletion asks first,** at most ten messages at a time.

package/dist/analysis/consents.d.ts

@@ -4,9 +4,14 @@ export interface AnalysisConsent {
     provider: string;
     at: string;
 }
-export declare const analysisConsents: (store: MessageStore, account: AccountKey) => {
-    list: () => Promise<AnalysisConsent[]>;
-    has: (chat: string, provider: string) => Promise<boolean>;
-    remember: (chat: string, provider: string) => Promise<void>;
-    revoke: (chat?: string, provider?: string) => Promise<void>;
-};
+export interface AnalysisConsentFilter {
+    chat?: string;
+    provider?: string;
+}
+export interface AnalysisConsents {
+    list(filter?: AnalysisConsentFilter): Promise<AnalysisConsent[]>;
+    has(chat: string, provider: string): Promise<boolean>;
+    remember(chat: string, provider: string): Promise<void>;
+    revoke(chat?: string, provider?: string): Promise<void>;
+}
+export declare const analysisConsents: (store: MessageStore, account: AccountKey) => AnalysisConsents;

package/dist/analysis/consents.js

@@ -1,7 +1,7 @@
 import { CliError } from "@wirecat/cli-base";
 const KEY = "analysis-consents-v1";
 export const analysisConsents = (store, account) => {
-    const list = async () => {
+    const list = async (filter) => {
         const state = await store.sync.syncState(account, KEY);
         if (!state)
             return [];
@@ -10,7 +10,10 @@ export const analysisConsents = (store, account) => {
             if (!Array.isArray(items) ||
                 items.some((item) => !item || typeof item.chat !== "string" || typeof item.provider !== "string" || typeof item.at !== "string"))
                 throw new Error("invalid");
-            return items;
+            return filter === undefined
+                ? items
+                : items.filter((item) => (filter.chat === undefined || item.chat === filter.chat) &&
+                    (filter.provider === undefined || item.provider === filter.provider));
         }
         catch {
             throw new CliError("configuration_error", "stored analysis consent is invalid; revoke it before running analysis");

package/dist/cli/bot/mcp.js

@@ -3,7 +3,7 @@ import { CliError } from "@wirecat/cli-base";
 import { annotate, describeProgram } from "@wirecat/cli-base/commands";
 import { Command } from "commander";
 import { environmentOf } from "../context.js";
-import { LOCAL_READ, REMOTE_WRITE } from "../effects.js";
+import { changesAuthorityAt, LOCAL_READ, REMOTE_WRITE } from "../effects.js";
 import { itemOf, renderAnswer } from "../envelope.js";
 import { serverEntry } from "../messenger/mcp-command.js";
 import { nextStep, rootOf } from "../steps.js";
@@ -28,6 +28,7 @@ export const botMcpCommand = (bot) => {
         await serveBotOverStdio({
             bot,
             program: { run, commands: describeProgram(rootOf(this)) },
+            authority: changesAuthorityAt(rootOf(this)),
             settings: context.settings,
             levels: () => bot.resolveSettings(this.optsWithGlobals(), { env: context.env, kind: "bot" }).permissions,
             env: context.env,

package/dist/cli/bot/store.js

@@ -20,7 +20,7 @@ const wholeNumber = (value) => {
  * personal `messages sync` does. Mounted for a messenger whose Bot API pages back through a chat.
  */
 export const botStoreCommand = (bot, fetching) => {
-    const command = annotate(new Command("store"), { mcp: false }).description("the bot's local copy on this machine");
+    const command = new Command("store").description("the bot's local copy on this machine");
     const fetch = annotate(command.command("fetch"), { effects: FETCH })
         .description("fetch a chat's history into the bot's local copy, newest first; run it again to continue")
         .argument("<chat>", "a chat id, or the title of a chat this bot has seen")

package/dist/cli/config-command.js

@@ -2,8 +2,9 @@ import { CliError, pathsAreOverridden } from "@wirecat/cli-base";
 import { annotate } from "@wirecat/cli-base/commands";
 import { Command } from "commander";
 import { envName } from "../ports/app.js";
+import { AUTHORITY_KEY } from "../sends/permissions.js";
 import { loadSnakeCaseConfig } from "./config-keys.js";
-import { baseContext } from "./context.js";
+import { baseContext, environmentOf } from "./context.js";
 import { grantsAuthority, LOCAL_READ, LOCAL_WRITE } from "./effects.js";
 import { itemOf, renderAnswer } from "./envelope.js";
 import { knownBeside, knownPermissionKeys } from "./permission-keys.js";
@@ -94,6 +95,8 @@ export const configCommand = (app, config, { permissionKey } = {}) => {
                 // The defaults are every other profile's settings too, and default_profile picks one of them.
                 throw new CliError("permission_error", `this process is locked to profile ${settings.profile} (${lock}) — ${setting === "default_profile" ? setting : "--defaults"} changes other profiles`);
             }
+            if (environmentOf(this).agent)
+                refuseAuthorityKey(setting, action === "set" ? String(given) : undefined);
             if (action === "set")
                 refuseUnknownKey(this, setting, String(given), permissionKey);
             const saved = config.changeSetting(settings.configPath, {
@@ -133,6 +136,22 @@ export const refuseUnknownKey = (command, setting, value, permissionKey) => {
             (beside.length > 0 ? ` — the known ones there are ${beside.join(", ")}` : ""));
     }
 };
+/**
+ * An agent may hold `mcp.authority` and change other settings, but never the key that let it in: on any profile, in
+ * the defaults, or by replacing `permissions` whole. Only the owner, in a terminal, turns it on or off (NEED-1662).
+ */
+const refuseAuthorityKey = (setting, value) => {
+    const keys = setting.startsWith("permissions.")
+        ? [setting.slice("permissions.".length)]
+        : setting === "permissions"
+            ? value === undefined
+                ? ["mcp"]
+                : objectKeys(value)
+            : [];
+    if (!keys.some((key) => key === "mcp" || key.startsWith("mcp.")))
+        return;
+    throw new CliError("permission_error", `an agent cannot change permissions.${AUTHORITY_KEY} — the owner sets it in a terminal`, { permission: AUTHORITY_KEY });
+};
 /** The keys of a `permissions` object given whole; anything else is left to the schema to refuse. */
 const objectKeys = (value) => {
     try {

package/dist/cli/context.d.ts

@@ -85,6 +85,8 @@ export interface AgentRun {
     failure: (error: ErrorObject) => void;
     /** The server's own stricter levels, `key=level`, as `mcp --permission` takes them; they never loosen. */
     overrides?: readonly string[];
+    /** The server's levels allow `mcp.authority`: a command that changes what a later run may do may run. */
+    authority?: boolean;
 }
 export interface RelayedRun {
     /** The profile serve holds; a command for another is refused before it touches the connection. */

package/dist/cli/context.js

@@ -72,7 +72,7 @@ export const baseContext = (command, resolveSettings) => {
         run: (body, { unbounded = false, name } = {}) => environment.app
             ? recorded({
                 app: environment.app,
-                // An agent's run is named `mcp <command>`, so `runs search` and `sends list` tell it from the owner's.
+                // An agent's run is named `mcp <command>`, so `search runs` and `sends list` tell it from the owner's.
                 command: name ?? `${environment.agent ? "mcp " : ""}${commandPath(command)}`,
                 profile: settings.profile,
                 record: settings.record,

package/dist/cli/effects.d.ts

@@ -14,13 +14,16 @@ export declare const NO_EFFECTS: Effects;
 /**
  * Marks a local write that changes what a later run may do: a schedule, a setting, the recipient list, an
  * auto-reply, an agent's setup. `<PREFIX>_READ_ONLY` refuses it, or an agent under the lock could hand an
- * unlocked run the send it may not make itself (SEC-47). For the same reason no MCP server offers it (`mcp: false`).
+ * unlocked run the send it may not make itself (SEC-47). For the same reason an MCP server offers it only where the
+ * profile allows `mcp.authority`, which is off until the owner turns it on (NEED-1662).
  * `unless` names a flag that makes the run only look (`upgrade --check`), which the lock lets through.
  */
 export declare const grantsAuthority: <T extends Command>(command: T, { unless }?: {
     unless?: string;
 }) => T;
 export declare const changesAuthority: (command: Command) => boolean;
+/** `changesAuthority` by command path under `root`, as an MCP catalogue asks it; an unknown path is not one. */
+export declare const changesAuthorityAt: (root: Command) => (path: readonly string[]) => boolean;
 export declare const changesAuthorityNow: (command: Command) => boolean;
 /**
  * Marks a command that links or unlinks the account — `session start`, `session end`, a setup that logs in. It never

package/dist/cli/effects.js

@@ -16,14 +16,22 @@ const AUTHORITY = new WeakMap();
 /**
  * Marks a local write that changes what a later run may do: a schedule, a setting, the recipient list, an
  * auto-reply, an agent's setup. `<PREFIX>_READ_ONLY` refuses it, or an agent under the lock could hand an
- * unlocked run the send it may not make itself (SEC-47). For the same reason no MCP server offers it (`mcp: false`).
+ * unlocked run the send it may not make itself (SEC-47). For the same reason an MCP server offers it only where the
+ * profile allows `mcp.authority`, which is off until the owner turns it on (NEED-1662).
  * `unless` names a flag that makes the run only look (`upgrade --check`), which the lock lets through.
  */
 export const grantsAuthority = (command, { unless } = {}) => {
     AUTHORITY.set(command, unless);
-    return annotate(command, { mcp: false });
+    return command;
 };
 export const changesAuthority = (command) => AUTHORITY.has(command);
+/** `changesAuthority` by command path under `root`, as an MCP catalogue asks it; an unknown path is not one. */
+export const changesAuthorityAt = (root) => (path) => {
+    let at = root;
+    for (const word of path)
+        at = at?.commands.find((one) => one.name() === word);
+    return at !== undefined && changesAuthority(at);
+};
 export const changesAuthorityNow = (command) => {
     if (!AUTHORITY.has(command))
         return false;

package/dist/cli/index.d.ts

@@ -53,7 +53,7 @@ export { loadSnakeCaseConfig } from "./config-keys.js";
 export { type AgentRun, type BaseContext, type BaseEnvironment, baseContext, environmentOf, outputFor, provide, secretInputOf, } from "./context.js";
 export { type Closeable, withDeadline } from "./deadline.js";
 export { DEFAULT_CONFIG, ensureDefaultConfig } from "./default-config.js";
-export { changesAuthority, destroysNothing, FETCH, grantsAuthority, isLogin, isOtherServiceCall, isStoreChange, judgedEffects, judgedTargets, LOCAL_READ, LOCAL_WRITE, logsInOrOut, NO_EFFECTS, ownerOnlyOption, REMOTE_READ, REMOTE_WRITE, reachesOtherService, refuseUnderReadOnly, } from "./effects.js";
+export { changesAuthority, changesAuthorityAt, destroysNothing, FETCH, grantsAuthority, isLogin, isOtherServiceCall, isStoreChange, judgedEffects, judgedTargets, LOCAL_READ, LOCAL_WRITE, logsInOrOut, NO_EFFECTS, ownerOnlyOption, REMOTE_READ, REMOTE_WRITE, reachesOtherService, refuseUnderReadOnly, } from "./effects.js";
 export { type AnswerOutput, answerSchema, type Body, type ItemBody, itemAnswer, itemOf, jsonlRecords, judgedAnswer, type ListBody, type ListInput, listOf, metaNow, printItem, renderAnswer, sealed, snakeKeys, snakeKeysKeeping, } from "./envelope.js";
 export { withAbort } from "./execution.js";
 export { checkGuide, checkStep, type GuideOptions, type GuideReference, type GuideStep, guideCommand, loadScenarios, MEMO_SCENARIOS, type Scenario, shellProblems, } from "./guide.js";
@@ -65,6 +65,7 @@ export { bufferedInput, type InputPolicy, inputPolicy, MAX_BUFFERED_INPUT, MAX_S
 export { answerFields, checkJson, type EntityFields, entityFields, type JsonFieldsResolver, type JsonRequest, liftJson, } from "./json-fields.js";
 export { commandPath, LIST_QUERY_GUIDE, listQuery, nativeField, nativeTerms, pagedList, pageOf, type QueryWords, queryArgument, queryHelp, queryTerms, searchText, termField, timeBounds, typedQuery, unfilteredQuery, withQuery, } from "./list-query.js";
 export { addMeetingBatchCommand, formatMeetingBatch, prepareMeetingBatch } from "./meeting-batch.js";
+export { meetingEvidenceItem, meetingPersonContextItem } from "./meeting-evidence-answer.js";
 export { parseEvidenceFindingsJson, parseMeetingFindingsJson } from "./meeting-findings-input.js";
 export { meetingPreparationAnswer } from "./meeting-preparation-answer.js";
 export { addMeetingPreparationCommand } from "./meeting-preparation-command.js";
@@ -106,7 +107,7 @@ export { callsCommand, stickersCommand } from "./messenger/records-command.js";
 export { repliesCommand } from "./messenger/replies-command.js";
 export { reviewCommand } from "./messenger/review.js";
 export { scheduleCommand } from "./messenger/schedule-command.js";
-export { allHitItem, type HitItem, type MessageHitItem, messageHitItem, type NoteHitItem, noteHitItem, } from "./messenger/search-answers.js";
+export { allAnswer, allHitItem, type HitItem, type MessageHitItem, messageHitItem, type NoteHitItem, noteHitItem, } from "./messenger/search-answers.js";
 export { searchCommand } from "./messenger/search-command.js";
 export { SEARCHES_QUERY, searchesCommand } from "./messenger/searches-command.js";
 export { serveCommand, servingProfiles } from "./messenger/serve-command.js";

package/dist/cli/index.js

@@ -48,7 +48,7 @@ export { loadSnakeCaseConfig } from "./config-keys.js";
 export { baseContext, environmentOf, outputFor, provide, secretInputOf, } from "./context.js";
 export { withDeadline } from "./deadline.js";
 export { DEFAULT_CONFIG, ensureDefaultConfig } from "./default-config.js";
-export { changesAuthority, destroysNothing, FETCH, grantsAuthority, isLogin, isOtherServiceCall, isStoreChange, judgedEffects, judgedTargets, LOCAL_READ, LOCAL_WRITE, logsInOrOut, NO_EFFECTS, ownerOnlyOption, REMOTE_READ, REMOTE_WRITE, reachesOtherService, refuseUnderReadOnly, } from "./effects.js";
+export { changesAuthority, changesAuthorityAt, destroysNothing, FETCH, grantsAuthority, isLogin, isOtherServiceCall, isStoreChange, judgedEffects, judgedTargets, LOCAL_READ, LOCAL_WRITE, logsInOrOut, NO_EFFECTS, ownerOnlyOption, REMOTE_READ, REMOTE_WRITE, reachesOtherService, refuseUnderReadOnly, } from "./effects.js";
 export { answerSchema, itemAnswer, itemOf, jsonlRecords, judgedAnswer, listOf, metaNow, printItem, renderAnswer, sealed, snakeKeys, snakeKeysKeeping, } from "./envelope.js";
 export { withAbort } from "./execution.js";
 export { checkGuide, checkStep, guideCommand, loadScenarios, MEMO_SCENARIOS, shellProblems, } from "./guide.js";
@@ -60,6 +60,7 @@ export { bufferedInput, inputPolicy, MAX_BUFFERED_INPUT, MAX_SECRET_INPUT, provi
 export { answerFields, checkJson, entityFields, liftJson, } from "./json-fields.js";
 export { commandPath, LIST_QUERY_GUIDE, listQuery, nativeField, nativeTerms, pagedList, pageOf, queryArgument, queryHelp, queryTerms, searchText, termField, timeBounds, typedQuery, unfilteredQuery, withQuery, } from "./list-query.js";
 export { addMeetingBatchCommand, formatMeetingBatch, prepareMeetingBatch } from "./meeting-batch.js";
+export { meetingEvidenceItem, meetingPersonContextItem } from "./meeting-evidence-answer.js";
 export { parseEvidenceFindingsJson, parseMeetingFindingsJson } from "./meeting-findings-input.js";
 export { meetingPreparationAnswer } from "./meeting-preparation-answer.js";
 export { addMeetingPreparationCommand } from "./meeting-preparation-command.js";
@@ -101,7 +102,7 @@ export { callsCommand, stickersCommand } from "./messenger/records-command.js";
 export { repliesCommand } from "./messenger/replies-command.js";
 export { reviewCommand } from "./messenger/review.js";
 export { scheduleCommand } from "./messenger/schedule-command.js";
-export { allHitItem, messageHitItem, noteHitItem, } from "./messenger/search-answers.js";
+export { allAnswer, allHitItem, messageHitItem, noteHitItem, } from "./messenger/search-answers.js";
 export { searchCommand } from "./messenger/search-command.js";
 export { SEARCHES_QUERY, searchesCommand } from "./messenger/searches-command.js";
 export { serveCommand, servingProfiles } from "./messenger/serve-command.js";

package/dist/cli/json-fields.js

@@ -21,6 +21,17 @@ export const entityFields = (table) => {
         return name !== undefined && Object.hasOwn(table, name) ? namesOf(table[name]) : undefined;
     };
 };
+const schemaFields = (schema) => {
+    if (typeof schema !== "object" || schema === null)
+        return undefined;
+    if ("entries" in schema && typeof schema.entries === "object" && schema.entries !== null)
+        return Object.keys(schema.entries);
+    if ("type" in schema && schema.type === "union" && "options" in schema && Array.isArray(schema.options)) {
+        const branches = schema.options.map(schemaFields);
+        return branches.every((fields) => fields !== undefined) ? [...new Set(branches.flat())] : undefined;
+    }
+    return undefined;
+};
 /** The fields of the answer a command declares (`annotate(…, { output })`); nothing until it declares one. */
 export const answerFields = (command, resolve) => {
     const own = resolve?.(command);
@@ -28,7 +39,7 @@ export const answerFields = (command, resolve) => {
         return [...own];
     const name = declaredEntity(command);
     const schema = name === undefined ? undefined : ENTITIES[name];
-    return schema && "entries" in schema ? namesOf(schema) : undefined;
+    return schemaFields(schema);
 };
 const PATHS = /^[a-z][a-z0-9_]*(\.[a-z][a-z0-9_]*)*(,[a-z][a-z0-9_]*(\.[a-z][a-z0-9_]*)*)*$/;
 const topOf = (fields, known) => fields.split(",").map((path) => {

package/dist/cli/meeting-evidence-answer.d.ts

@@ -0,0 +1,46 @@
+import type { MeetingEvidencePacket, PersonMeetingContext } from "../services/index.js";
+/** A meeting evidence packet with `ref`, `offset_ms` and string ids, as every answer that carries one names them. */
+export declare const mapEvidence: (evidence: MeetingEvidencePacket) => {
+    schemaVersion: 1;
+    kind: "meeting";
+    source: string;
+    fingerprint: string;
+    limits: {
+        cues: number;
+        bytes: number;
+        maxReadBytes: number;
+        maxTranscriptPages: number;
+    };
+    contentBytes: number;
+    coverage: {
+        provided: number;
+        included: number;
+        omitted: number | null;
+        providedExact: boolean;
+        nextReference: string | null;
+        transcriptPages: number;
+        skippedUnavailable: number;
+        hasMore: boolean;
+        truncatedBy: "cues" | "bytes" | "transcripts" | null;
+        input: "bounded-meeting-pages";
+        archiveCompleteness: "unknown";
+        nextTranscriptId: string | null;
+    };
+    items: {
+        fingerprint: string;
+        contentHash: string | null;
+        position: number;
+        endMs: number;
+        speakerName: string | null;
+        text: string;
+        revision: "current" | "superseded";
+        ref: string;
+        offsetMs: number;
+        transcriptId: string | null;
+        speakerParticipantId: string | null;
+    }[];
+};
+/** `meetings evidence`: the `meeting_evidence` entity. */
+export declare const meetingEvidenceItem: (evidence: MeetingEvidencePacket) => unknown;
+/** `meetings context`: the `meeting_person_context` entity. */
+export declare const meetingPersonContextItem: (context: PersonMeetingContext) => unknown;

package/dist/cli/meeting-evidence-answer.js

@@ -0,0 +1,22 @@
+import { snakeKeys } from "./envelope.js";
+const id = (value) => (value === null ? null : String(value));
+const mapCue = ({ reference, startMs, ...cue }) => ({
+    ...cue,
+    ref: reference,
+    offsetMs: startMs,
+    transcriptId: id(cue.transcriptId),
+    speakerParticipantId: id(cue.speakerParticipantId),
+});
+/** A meeting evidence packet with `ref`, `offset_ms` and string ids, as every answer that carries one names them. */
+export const mapEvidence = (evidence) => ({
+    ...evidence,
+    coverage: { ...evidence.coverage, nextTranscriptId: id(evidence.coverage.nextTranscriptId) },
+    items: evidence.items.map(mapCue),
+});
+/** `meetings evidence`: the `meeting_evidence` entity. */
+export const meetingEvidenceItem = (evidence) => snakeKeys(mapEvidence(evidence));
+/** `meetings context`: the `meeting_person_context` entity. */
+export const meetingPersonContextItem = (context) => snakeKeys({
+    ...context,
+    items: context.items.map(({ reference, cues, ...item }) => ({ ...item, ref: reference, cues: cues.map(mapCue) })),
+});

package/dist/cli/meeting-preparation-answer.js

@@ -3,6 +3,7 @@ import * as v from "valibot";
 import { meetingPreparation } from "../entities/index.js";
 import { itemOf, metaNow, sealed, snakeKeys } from "./envelope.js";
 import { mapPreparationCommunications } from "./meeting-communications.js";
+import { mapEvidence } from "./meeting-evidence-answer.js";
 import { boundMeetingPreparationItem } from "./meeting-preparation-budget.js";
 import { mapPreparationProjectEvidence } from "./meeting-preparation-projects.js";
 const id = (value) => (value === null ? null : String(value));
@@ -17,19 +18,6 @@ const mapMeeting = (meeting) => {
         updatedAt: at(meeting.updatedAt),
     };
 };
-const mapEvidence = (evidence) => {
-    return {
-        ...evidence,
-        coverage: { ...evidence.coverage, nextTranscriptId: id(evidence.coverage.nextTranscriptId) },
-        items: evidence.items.map(({ reference, startMs, ...cue }) => ({
-            ...cue,
-            ref: reference,
-            offsetMs: startMs,
-            transcriptId: id(cue.transcriptId),
-            speakerParticipantId: id(cue.speakerParticipantId),
-        })),
-    };
-};
 export const meetingPreparationAnswer = (packet) => {
     const candidate = packet.upcoming.candidate;
     const mapped = snakeKeys({

package/dist/cli/messenger/account-command.js

@@ -6,7 +6,9 @@ import { storePath } from "../../store/path.js";
 import { openStore } from "../../store/store.js";
 import { REMOTE_READ, REMOTE_WRITE } from "../effects.js";
 import { itemOf, renderAnswer } from "../envelope.js";
+import { queryTerms, withQuery } from "../list-query.js";
 import { NONE_NAMED } from "../settings.js";
+import { ACCOUNT_PROFILES_QUERY } from "./account-profile-query.js";
 import { accountSessionsCommand } from "./account-sessions-command.js";
 import { recalledAccount } from "./accounts.js";
 import { photoHelp, readProfilePhoto } from "./admin-commands.js";
@@ -18,16 +20,19 @@ export const accountCommand = (messenger) => {
     const tool = `${messenger.app.command} personal`;
     const account = new Command("account")
         .description("the logged-in account")
-        .addCommand(annotate(new Command("list"), { effects: REMOTE_READ, examples: [`${tool} account list`] })
+        .addCommand(withQuery(annotate(new Command("list"), { effects: REMOTE_READ, examples: [`${tool} account list`] }), ACCOUNT_PROFILES_QUERY)
         .summary("profiles on this computer and their signed-in accounts")
         .description("every profile on this computer, and the account each is logged in as; asks the messenger nothing")
-        .action(async function () {
+        .action(async function (words) {
+        const terms = queryTerms(words, ACCOUNT_PROFILES_QUERY, "account list");
         const context = messengerContext(this, messenger, { needsProfile: false });
         const { app, provider } = messenger;
         const current = context.settings.sources.profile === NONE_NAMED ? undefined : context.settings.profile;
-        const profiles = [
-            ...new Set([...(current === undefined ? [] : [current]), ...context.settings.profilesHere]),
-        ].sort();
+        const profiles = [...new Set([...(current === undefined ? [] : [current]), ...context.settings.profilesHere])]
+            .filter((profile) => terms.get("profile") === undefined || profile === terms.get("profile"))
+            .filter((profile) => terms.get("current") === undefined ||
+            (profile === current) === (terms.get("current")?.toLowerCase() === "true"))
+            .sort();
         const store = existsSync(storePath(context.env))
             ? await openStore({ env: context.env }).catch(() => undefined)
             : undefined;
@@ -61,7 +66,11 @@ export const accountCommand = (messenger) => {
         const account = await context.withMessenger((connection) => connection.me());
         renderAnswer(this, context, itemOf(accountAnswer(messenger.provider, whole ? account : maskedAccount(account))));
     }))
-        .addCommand(annotate(new Command("update"), { effects: REMOTE_WRITE, examples: [`${tool} account update --first-name Alex`] })
+        .addCommand(annotate(new Command("update"), {
+        effects: REMOTE_WRITE,
+        output: { entity: "account_change" },
+        examples: [`${tool} account update --first-name Alex`],
+    })
         .description("change the name, the description or the photo everyone sees on your profile")
         .option("--first-name <name>", "your first name")
         .option("--last-name <name>", "your last name")

package/dist/cli/messenger/account-profile-query.d.ts

@@ -0,0 +1,2 @@
+import { type QueryRegistry } from "@wirecat/cli-base/query";
+export declare const ACCOUNT_PROFILES_QUERY: QueryRegistry;

package/dist/cli/messenger/account-profile-query.js

@@ -0,0 +1,13 @@
+import { queryFieldsOf } from "@wirecat/cli-base/query";
+import { accountProfile } from "../../entities/index.js";
+export const ACCOUNT_PROFILES_QUERY = {
+    entity: "account_profile",
+    backend: "native",
+    fields: queryFieldsOf(accountProfile, {
+        native: ["profile", "current"],
+        examples: { profile: "profile:work", current: "current:true" },
+    }).map((field) => ({
+        ...field,
+        operators: field.operators.filter((operator) => operator === "term" || operator === "phrase"),
+    })),
+};

package/dist/cli/messenger/account-sessions-command.js

@@ -23,10 +23,9 @@ export const accountSessionsCommand = (messenger) => {
         const found = await context.withMessenger((adapter) => capability(adapter, "sessions", "list the account's sessions")());
         renderAnswer(this, context, wholeList("account sessions list", found.map(sessionAnswer)));
     });
-    // No MCP tool, at any permission level: it logs the owner out of the phone.
     sessions.addCommand(annotate(new Command("end"), {
         effects: REMOTE_WRITE,
-        mcp: false,
+        output: { entity: "ended_account_sessions" },
         examples: [`${tool} account sessions end --others`],
     })
         .description("log out every other device, your phone included; this one stays")