@wirecat/cli-core 0.400.0 → 0.402.0

package/CHANGELOG.md

@@ -7,6 +7,32 @@ shape of this file.
 
 ## Unreleased
 
+## 0.402.0 — 24.10.2026
+
+### Changed — may break callers
+
+- **MCP offers `bot api`, behind `bot.api`.** The generated `bot api <operation>` commands (raw calls to Bot API methods, which skip the send guard and the bot's recipient list) are bot MCP tools again, offered only where the profile sets `permissions.bot.api` to `allow`; it is `deny` by default for an MCP server, so nothing changes until the owner turns it on, and a broader `bot: allow` does not lift it. A call made after the owner turned it off is refused naming the key and the terminal command; an agent cannot set the key through `config set` (the guard on `permissions.mcp…` covers `permissions.bot.api`). Breaking for a CLI: `generatedApiCommand` no longer marks the group `mcp: false`, and each operation now declares effects (`remote: read` or `write`), so `commands --json` shows them and a catalogue built with `toolsFromCommands` without `levels` lists the operations; update a pinned bot catalogue and a document that lists what MCP leaves out. Under `<PREFIX>_READ_ONLY` a write operation now refuses on the command line too. The command line's `bot api` is otherwise unchanged.
+
+### Fixed
+
+- **Voice-note search no longer turns an English word into another real English word.** A word in a transcript widens to the spellings speech recognition garbles only past a dictionary of its language: Russian as before, and now English and Spanish, following the store's word-form languages (`search_stemmers`). Before, «cost» also found «cast». A Latin word with no dictionary for its language, and English and Spanish number words, no longer widen.
+
+## 0.401.0 — 24.10.2026
+
+### Changed — may break callers
+
+- **`events list` writes times as ISO 8601 and ids as strings**, as every other answer does: `starts_at`, `ends_at`, `deleted_at`, `created_at` and `updated_at` were epoch milliseconds, `id` and `event_series_id` numbers. No field is gone.
+
+- **List duplicate-task pairs explicitly.** Use `tasks duplicates list [query...]` in CLI and MCP calls. The bare `tasks duplicates` group shows help or refuses in machine mode; it no longer reads the store. Reject and defer remain under that group.
+
+### Fixed
+
+- **`search all` pages meeting matches.** With a meeting account in the search, `--page 2` repeated the meetings of the first page, and `has_more` could be false while meeting matches remained. The merged list is now read as deep as the page and cut, so pages follow on and `has_more` holds.
+
+### Added
+
+- **Meeting answers keep what they knew.** A `search all` meeting hit carries its `scope` (transcript, chat or summary) and its stored line `id`, so two passages of one meeting stay apart. New entities `meeting_evidence`, `meeting_person_context` and `event`; `cli` exports `allAnswer`, `meetingEvidenceItem` and `meetingPersonContextItem`.
+
 ## 0.400.0 — 24.10.2026
 
 ### Fixed
@@ -21,6 +47,17 @@ shape of this file.
 
 ### Added
 
+- **Album sends.** `messages send` takes `--photo` and `--file` more than once, and its MCP tool takes a list for
+  `photo` and `file`; together they go as one album, photos first. Each photo or file counts as one send toward the
+  hourly limit. An adapter returns every message of the album as `Sent.messages`, and `--json` answers with a
+  `messages` list beside `message`, which stays the first. A messenger that cannot send an album refuses it before
+  anything goes. A single attachment sends and answers as before.
+
+- **Mirror runner for folder sync.** `syncMirrors` syncs each of a CLI's mirrors both ways under one lock and reports
+  a partly failed mirror as a `mirror.partial` issue; `fileMirrorState`, `mirrorId`, `mirrorStatus` and
+  `conflictReport` are the state file, id, local plan and conflict report drive-cli's `mirrors` used, moved here so
+  other CLIs can mirror folders and a watcher can reuse the same run.
+
 - **Meeting answer schemas.** `review`, `mentions list`, `stats meetings show` and `top`, `meetings people`, `meetings passage` and `meetings task-proposal` declare their answer entities (`meeting_review`, `meeting_link`, `meeting_stats`, `meeting_speaker`, `meeting_participants`, `meeting_passage`, `meeting_task_proposal`) for field discovery and projection. `meetings/` exports the item builders the meeting CLIs share: `meetingReviewItem`, `meetingLinkItem`, `meetingStatsItem`, `meetingSpeakerItem`.
 
 - **Listener answers declare their fields.** Live messages and events, and the final serve summary, expose exact schemas for discovery and cross-CLI output contracts. Provider-only attachment references stay private.
@@ -79,6 +116,8 @@ shape of this file.
 
 ### Changed — may break callers
 
+- **MCP offers the writes no permission level stopped before.** `store backup|restore|migrate|repair|reset|clear|decrypt`, `store copies delete`, `server start|stop|restart`, model downloads, `schedule run|exec`, `doctor report create`, `account sessions end`, `chats delete|clear` and `bot store fetch` are MCP tools, each limited by a key named after its path (`store.reset`, `server.start`, `schedule.run`…), `ask` by default; set one to `deny` to keep an agent from it. `server`, `models`, `schedule`, `doctor` and `images` are now valid roots of a permission key. Command-line behaviour is unchanged. What to change in a CLI: a pinned MCP catalogue and a document listing what MCP leaves out.
+
 - **Watch uses the shared JSONL contract.** Read each message or event from `{ type: "item", data }` and wait for the final `type: "end"` record. Message and event fields are snake_case, message values use the canonical read shape with references, and live counter observations remain available. Normal stops and timeouts finish complete; a source failure finishes incomplete and returns its failure code. Update readers of the old raw lines.
 
 - **MCP offers the commands that change what a later run may do, behind `mcp.authority`.** `config set|unset`, `schedule command|agent|remove`, auto-reply rules and consents, recipients, chat rules, `server install`, `skill install`, model keys, media archive timers and `flood clear` are MCP tools again, offered only where the profile sets `permissions.mcp.authority` to `allow`; it is `deny` by default, so nothing changes until the owner turns it on. An agent cannot change that key through `config set`. What to change in a CLI: `grantsAuthority` no longer adds `mcp: false`, so `commands --json` no longer marks these commands, and a catalogue built with `toolsFromCommands` without `levels` lists them; update a pinned catalogue and a document that lists what MCP leaves out. A command of the CLI's own marked `grantsAuthority` (max `recipients add`) is gated the same way. A caller of `createBotServer` passes `authority: changesAuthorityAt(root)` to hide them; without it they are listed and refuse when called.

package/README.md

@@ -178,7 +178,7 @@ or a launchd agent.
 - **A permission level per command path:** deny, readonly, ask or allow. The most specific key wins, and a built-in
   default can only tighten what the owner set. No level lets an agent delete for everyone.
 - **A recipient list and an hourly limit** for sends, and a journal of every attempt that records the length of the
-  text, never the text.
+  text, never the text. Each photo or file of an album counts as one send.
 - **A send id across retries.** A write whose outcome is unknown is never retried automatically; a retry under the
   same send id cannot send twice.
 - **Deletion asks first,** at most ten messages at a time.

package/dist/cli/bot/api.js

@@ -1,15 +1,18 @@
 import { CliError } from "@wirecat/cli-base";
 import { annotate } from "@wirecat/cli-base/commands";
 import { Command, Option } from "commander";
+import { REMOTE_READ, REMOTE_WRITE } from "../effects.js";
 import { apiFlagOf, apiOptionKey, readApiBody } from "./api-input.js";
 export const generatedApiCommand = (api) => {
-    const group = annotate(new Command("api"), { mcp: false }).description(api.description ?? "every operation of the official Bot API, generated from its schema");
+    const group = new Command("api").description(api.description ?? "every operation of the official Bot API, generated from its schema");
     group.option("--store-token <profile>", "keep a returned authentication token only in this bot profile's OS keyring; never print it");
     for (const operation of api.operations) {
         const binding = operation.binding.kind === "http"
             ? `${operation.binding.method} ${operation.binding.path}`
             : operation.binding.name;
-        const command = new Command(operation.command).description(`${operation.summary ?? operation.id} — ${operation.effect} (${binding})`);
+        const command = annotate(new Command(operation.command), {
+            effects: operation.effect === "read" ? REMOTE_READ : REMOTE_WRITE,
+        }).description(`${operation.summary ?? operation.id} — ${operation.effect} (${binding})`);
         for (const parameter of operation.parameters) {
             if (parameter.sensitive)
                 continue;

package/dist/cli/bot/store.js

@@ -20,7 +20,7 @@ const wholeNumber = (value) => {
  * personal `messages sync` does. Mounted for a messenger whose Bot API pages back through a chat.
  */
 export const botStoreCommand = (bot, fetching) => {
-    const command = annotate(new Command("store"), { mcp: false }).description("the bot's local copy on this machine");
+    const command = new Command("store").description("the bot's local copy on this machine");
     const fetch = annotate(command.command("fetch"), { effects: FETCH })
         .description("fetch a chat's history into the bot's local copy, newest first; run it again to continue")
         .argument("<chat>", "a chat id, or the title of a chat this bot has seen")

package/dist/cli/config-command.js

@@ -2,7 +2,7 @@ import { CliError, pathsAreOverridden } from "@wirecat/cli-base";
 import { annotate } from "@wirecat/cli-base/commands";
 import { Command } from "commander";
 import { envName } from "../ports/app.js";
-import { AUTHORITY_KEY } from "../sends/permissions.js";
+import { AUTHORITY_KEY, BOT_API_KEY } from "../sends/permissions.js";
 import { loadSnakeCaseConfig } from "./config-keys.js";
 import { baseContext, environmentOf } from "./context.js";
 import { grantsAuthority, LOCAL_READ, LOCAL_WRITE } from "./effects.js";
@@ -96,7 +96,7 @@ export const configCommand = (app, config, { permissionKey } = {}) => {
                 throw new CliError("permission_error", `this process is locked to profile ${settings.profile} (${lock}) — ${setting === "default_profile" ? setting : "--defaults"} changes other profiles`);
             }
             if (environmentOf(this).agent)
-                refuseAuthorityKey(setting, action === "set" ? String(given) : undefined);
+                refuseGuardedKey(setting, action === "set" ? String(given) : undefined);
             if (action === "set")
                 refuseUnknownKey(this, setting, String(given), permissionKey);
             const saved = config.changeSetting(settings.configPath, {
@@ -137,10 +137,11 @@ export const refuseUnknownKey = (command, setting, value, permissionKey) => {
     }
 };
 /**
- * An agent may hold `mcp.authority` and change other settings, but never the key that let it in: on any profile, in
- * the defaults, or by replacing `permissions` whole. Only the owner, in a terminal, turns it on or off (NEED-1662).
+ * An agent may hold `mcp.authority` or `bot.api` and change other settings, but never the key that let it in: on any
+ * profile, in the defaults, or by replacing `permissions` whole. Only the owner, in a terminal, turns it on or off
+ * (NEED-1662, NEED-1679).
  */
-const refuseAuthorityKey = (setting, value) => {
+const refuseGuardedKey = (setting, value) => {
     const keys = setting.startsWith("permissions.")
         ? [setting.slice("permissions.".length)]
         : setting === "permissions"
@@ -148,9 +149,14 @@ const refuseAuthorityKey = (setting, value) => {
                 ? ["mcp"]
                 : objectKeys(value)
             : [];
-    if (!keys.some((key) => key === "mcp" || key.startsWith("mcp.")))
+    const guarded = keys.some((key) => key === BOT_API_KEY || key.startsWith(`${BOT_API_KEY}.`))
+        ? BOT_API_KEY
+        : keys.some((key) => key === "mcp" || key.startsWith("mcp."))
+            ? AUTHORITY_KEY
+            : undefined;
+    if (!guarded)
         return;
-    throw new CliError("permission_error", `an agent cannot change permissions.${AUTHORITY_KEY} — the owner sets it in a terminal`, { permission: AUTHORITY_KEY });
+    throw new CliError("permission_error", `an agent cannot change permissions.${guarded} — the owner sets it in a terminal`, { permission: guarded });
 };
 /** The keys of a `permissions` object given whole; anything else is left to the schema to refuse. */
 const objectKeys = (value) => {

package/dist/cli/context.d.ts

@@ -87,6 +87,8 @@ export interface AgentRun {
     overrides?: readonly string[];
     /** The server's levels allow `mcp.authority`: a command that changes what a later run may do may run. */
     authority?: boolean;
+    /** The server's levels allow `bot.api`: a raw Bot API call, past the send guard, may run. */
+    botApi?: boolean;
 }
 export interface RelayedRun {
     /** The profile serve holds; a command for another is refused before it touches the connection. */

package/dist/cli/index.d.ts

@@ -65,6 +65,7 @@ export { bufferedInput, type InputPolicy, inputPolicy, MAX_BUFFERED_INPUT, MAX_S
 export { answerFields, checkJson, type EntityFields, entityFields, type JsonFieldsResolver, type JsonRequest, liftJson, } from "./json-fields.js";
 export { commandPath, LIST_QUERY_GUIDE, listQuery, nativeField, nativeTerms, pagedList, pageOf, type QueryWords, queryArgument, queryHelp, queryTerms, searchText, termField, timeBounds, typedQuery, unfilteredQuery, withQuery, } from "./list-query.js";
 export { addMeetingBatchCommand, formatMeetingBatch, prepareMeetingBatch } from "./meeting-batch.js";
+export { meetingEvidenceItem, meetingPersonContextItem } from "./meeting-evidence-answer.js";
 export { parseEvidenceFindingsJson, parseMeetingFindingsJson } from "./meeting-findings-input.js";
 export { meetingPreparationAnswer } from "./meeting-preparation-answer.js";
 export { addMeetingPreparationCommand } from "./meeting-preparation-command.js";
@@ -106,7 +107,7 @@ export { callsCommand, stickersCommand } from "./messenger/records-command.js";
 export { repliesCommand } from "./messenger/replies-command.js";
 export { reviewCommand } from "./messenger/review.js";
 export { scheduleCommand } from "./messenger/schedule-command.js";
-export { allHitItem, type HitItem, type MessageHitItem, messageHitItem, type NoteHitItem, noteHitItem, } from "./messenger/search-answers.js";
+export { allAnswer, allHitItem, type HitItem, type MessageHitItem, messageHitItem, type NoteHitItem, noteHitItem, } from "./messenger/search-answers.js";
 export { searchCommand } from "./messenger/search-command.js";
 export { SEARCHES_QUERY, searchesCommand } from "./messenger/searches-command.js";
 export { serveCommand, servingProfiles } from "./messenger/serve-command.js";

package/dist/cli/index.js

@@ -60,6 +60,7 @@ export { bufferedInput, inputPolicy, MAX_BUFFERED_INPUT, MAX_SECRET_INPUT, provi
 export { answerFields, checkJson, entityFields, liftJson, } from "./json-fields.js";
 export { commandPath, LIST_QUERY_GUIDE, listQuery, nativeField, nativeTerms, pagedList, pageOf, queryArgument, queryHelp, queryTerms, searchText, termField, timeBounds, typedQuery, unfilteredQuery, withQuery, } from "./list-query.js";
 export { addMeetingBatchCommand, formatMeetingBatch, prepareMeetingBatch } from "./meeting-batch.js";
+export { meetingEvidenceItem, meetingPersonContextItem } from "./meeting-evidence-answer.js";
 export { parseEvidenceFindingsJson, parseMeetingFindingsJson } from "./meeting-findings-input.js";
 export { meetingPreparationAnswer } from "./meeting-preparation-answer.js";
 export { addMeetingPreparationCommand } from "./meeting-preparation-command.js";
@@ -101,7 +102,7 @@ export { callsCommand, stickersCommand } from "./messenger/records-command.js";
 export { repliesCommand } from "./messenger/replies-command.js";
 export { reviewCommand } from "./messenger/review.js";
 export { scheduleCommand } from "./messenger/schedule-command.js";
-export { allHitItem, messageHitItem, noteHitItem, } from "./messenger/search-answers.js";
+export { allAnswer, allHitItem, messageHitItem, noteHitItem, } from "./messenger/search-answers.js";
 export { searchCommand } from "./messenger/search-command.js";
 export { SEARCHES_QUERY, searchesCommand } from "./messenger/searches-command.js";
 export { serveCommand, servingProfiles } from "./messenger/serve-command.js";

package/dist/cli/meeting-evidence-answer.d.ts

@@ -0,0 +1,46 @@
+import type { MeetingEvidencePacket, PersonMeetingContext } from "../services/index.js";
+/** A meeting evidence packet with `ref`, `offset_ms` and string ids, as every answer that carries one names them. */
+export declare const mapEvidence: (evidence: MeetingEvidencePacket) => {
+    schemaVersion: 1;
+    kind: "meeting";
+    source: string;
+    fingerprint: string;
+    limits: {
+        cues: number;
+        bytes: number;
+        maxReadBytes: number;
+        maxTranscriptPages: number;
+    };
+    contentBytes: number;
+    coverage: {
+        provided: number;
+        included: number;
+        omitted: number | null;
+        providedExact: boolean;
+        nextReference: string | null;
+        transcriptPages: number;
+        skippedUnavailable: number;
+        hasMore: boolean;
+        truncatedBy: "cues" | "bytes" | "transcripts" | null;
+        input: "bounded-meeting-pages";
+        archiveCompleteness: "unknown";
+        nextTranscriptId: string | null;
+    };
+    items: {
+        fingerprint: string;
+        contentHash: string | null;
+        position: number;
+        endMs: number;
+        speakerName: string | null;
+        text: string;
+        revision: "current" | "superseded";
+        ref: string;
+        offsetMs: number;
+        transcriptId: string | null;
+        speakerParticipantId: string | null;
+    }[];
+};
+/** `meetings evidence`: the `meeting_evidence` entity. */
+export declare const meetingEvidenceItem: (evidence: MeetingEvidencePacket) => unknown;
+/** `meetings context`: the `meeting_person_context` entity. */
+export declare const meetingPersonContextItem: (context: PersonMeetingContext) => unknown;

package/dist/cli/meeting-evidence-answer.js

@@ -0,0 +1,22 @@
+import { snakeKeys } from "./envelope.js";
+const id = (value) => (value === null ? null : String(value));
+const mapCue = ({ reference, startMs, ...cue }) => ({
+    ...cue,
+    ref: reference,
+    offsetMs: startMs,
+    transcriptId: id(cue.transcriptId),
+    speakerParticipantId: id(cue.speakerParticipantId),
+});
+/** A meeting evidence packet with `ref`, `offset_ms` and string ids, as every answer that carries one names them. */
+export const mapEvidence = (evidence) => ({
+    ...evidence,
+    coverage: { ...evidence.coverage, nextTranscriptId: id(evidence.coverage.nextTranscriptId) },
+    items: evidence.items.map(mapCue),
+});
+/** `meetings evidence`: the `meeting_evidence` entity. */
+export const meetingEvidenceItem = (evidence) => snakeKeys(mapEvidence(evidence));
+/** `meetings context`: the `meeting_person_context` entity. */
+export const meetingPersonContextItem = (context) => snakeKeys({
+    ...context,
+    items: context.items.map(({ reference, cues, ...item }) => ({ ...item, ref: reference, cues: cues.map(mapCue) })),
+});

package/dist/cli/meeting-preparation-answer.js

@@ -3,6 +3,7 @@ import * as v from "valibot";
 import { meetingPreparation } from "../entities/index.js";
 import { itemOf, metaNow, sealed, snakeKeys } from "./envelope.js";
 import { mapPreparationCommunications } from "./meeting-communications.js";
+import { mapEvidence } from "./meeting-evidence-answer.js";
 import { boundMeetingPreparationItem } from "./meeting-preparation-budget.js";
 import { mapPreparationProjectEvidence } from "./meeting-preparation-projects.js";
 const id = (value) => (value === null ? null : String(value));
@@ -17,19 +18,6 @@ const mapMeeting = (meeting) => {
         updatedAt: at(meeting.updatedAt),
     };
 };
-const mapEvidence = (evidence) => {
-    return {
-        ...evidence,
-        coverage: { ...evidence.coverage, nextTranscriptId: id(evidence.coverage.nextTranscriptId) },
-        items: evidence.items.map(({ reference, startMs, ...cue }) => ({
-            ...cue,
-            ref: reference,
-            offsetMs: startMs,
-            transcriptId: id(cue.transcriptId),
-            speakerParticipantId: id(cue.speakerParticipantId),
-        })),
-    };
-};
 export const meetingPreparationAnswer = (packet) => {
     const candidate = packet.upcoming.candidate;
     const mapped = snakeKeys({

package/dist/cli/messenger/account-sessions-command.js

@@ -23,11 +23,9 @@ export const accountSessionsCommand = (messenger) => {
         const found = await context.withMessenger((adapter) => capability(adapter, "sessions", "list the account's sessions")());
         renderAnswer(this, context, wholeList("account sessions list", found.map(sessionAnswer)));
     });
-    // No MCP tool, at any permission level: it logs the owner out of the phone.
     sessions.addCommand(annotate(new Command("end"), {
         effects: REMOTE_WRITE,
         output: { entity: "ended_account_sessions" },
-        mcp: false,
         examples: [`${tool} account sessions end --others`],
     })
         .description("log out every other device, your phone included; this one stays")

package/dist/cli/messenger/archive-commands.js

@@ -93,7 +93,7 @@ const leftLines = (left) => {
  * store is not offered. The refusal names the chats to a person but keeps them out of its message,
  * which a scheduled run's `last.json` keeps.
  */
-const clearCommand = (messenger) => annotate(new Command("clear"), { output: { entity: "store_clear" }, effects: LOCAL_WRITE, mcp: false })
+const clearCommand = (messenger) => annotate(new Command("clear"), { output: { entity: "store_clear" }, effects: LOCAL_WRITE })
     .description("delete from the store the chats this account has left, with their messages")
     .option("--left", "the chats this account has left — the only thing this clears")
     .option("--allow-dangerous", "yes, delete — it cannot be undone, and a chat you left cannot be fetched again")

package/dist/cli/messenger/doctor-command.js

@@ -76,7 +76,6 @@ const reportCommand = (messenger) => {
     });
     destroysNothing(annotate(report.command("create"), {
         effects: LOCAL_WRITE,
-        mcp: false,
         examples: [`${app.command} personal doctor report create --output ./problem-report.json`],
     }))
         .description("write a problem report to a file, and say where to send it")

package/dist/cli/messenger/message-writes.d.ts

@@ -4,14 +4,16 @@ interface Written {
     operationId: string;
     sendId?: string;
     message: Message;
+    messages?: Message[];
     scheduledFor?: string;
 }
 /**
  * A send, forward or edit: the message as it now stands, with its `operation_id` — for a send, the id a repeat
- * passes as `--operation-id` so it cannot make a second copy. A scheduled message gets a new id when it goes out,
+ * passes as `--operation-id` so it cannot make a second copy. An album adds `messages`, every one it made, in order;
+ * `message` stays its first, so a reader of one message reads an album as before. A scheduled message gets a new id when it goes out,
  * so its next step is the list that shows it, never a retry.
  */
-export declare const writtenAnswer: ({ operationId, sendId, message, scheduledFor }: Written, reader: AccountKey) => import("../envelope.js").ItemBody<{
+export declare const writtenAnswer: ({ operationId, sendId, message, messages, scheduledFor }: Written, reader: AccountKey) => import("../envelope.js").ItemBody<{
     operation_id: string;
     message: {
         ref: string;
@@ -201,6 +203,194 @@ export declare const writtenAnswer: ({ operationId, sendId, message, scheduledFo
             [x: string]: unknown;
         } | undefined;
     };
+    messages?: {
+        ref: string;
+        id: string;
+        provider?: string | undefined;
+        account?: string | undefined;
+        chat_id: string;
+        chat_title?: string | null | undefined;
+        sender_id: string | null;
+        sender_name: string | null;
+        sender_username?: string | undefined;
+        sender_is_chat?: boolean | undefined;
+        mentions?: string[] | undefined;
+        timestamp: string;
+        edited_at: string | null;
+        text: string;
+        transcript?: string | undefined;
+        anchor?: boolean | undefined;
+        excerpt?: string | undefined;
+        matched_in?: "context" | "file" | "filename" | "picture" | "text" | "transcript" | undefined;
+        score?: number | undefined;
+        match?: "beginnings" | "corrected" | "words" | undefined;
+        corrections?: {
+            from: string;
+            to: string[];
+        }[] | undefined;
+        found_in?: "archive" | "both" | "server" | undefined;
+        discovery?: {
+            coverage: number;
+            matched_terms: string[];
+            missing_terms: string[];
+            parent?: string | undefined;
+        } | undefined;
+        context?: {
+            ref: string;
+            timestamp: string;
+            sender_name: string | null;
+            text: string;
+        }[] | undefined;
+        outgoing: boolean | null;
+        attachments: {
+            message?: string | undefined;
+            kind: string;
+            position?: number | undefined;
+            url?: string | undefined;
+            name?: string | undefined;
+            title?: string | undefined;
+            mime?: string | undefined;
+            size?: number | undefined;
+            width?: number | undefined;
+            height?: number | undefined;
+            duration?: number | undefined;
+            text?: string | undefined;
+            extraction?: {
+                origin: string;
+                extractor: string;
+                chars: number;
+                error?: string | undefined;
+            } | undefined;
+            local_path?: string | undefined;
+            buttons?: {
+                kind: "app" | "callback" | "chat" | "clipboard" | "contact" | "link" | "location" | "message" | "other";
+                text: string;
+                url?: string | undefined;
+            }[][] | undefined;
+        }[];
+        reply_to: {
+            id: string;
+            sender_id: string | null;
+            sender_name: string | null;
+            timestamp: string | null;
+            text: string;
+            attachments: {
+                message?: string | undefined;
+                kind: string;
+                position?: number | undefined;
+                url?: string | undefined;
+                name?: string | undefined;
+                title?: string | undefined;
+                mime?: string | undefined;
+                size?: number | undefined;
+                width?: number | undefined;
+                height?: number | undefined;
+                duration?: number | undefined;
+                text?: string | undefined;
+                extraction?: {
+                    origin: string;
+                    extractor: string;
+                    chars: number;
+                    error?: string | undefined;
+                } | undefined;
+                local_path?: string | undefined;
+                buttons?: {
+                    kind: "app" | "callback" | "chat" | "clipboard" | "contact" | "link" | "location" | "message" | "other";
+                    text: string;
+                    url?: string | undefined;
+                }[][] | undefined;
+            }[];
+            outgoing: boolean | null;
+        } | null;
+        reply_to_id?: string | undefined;
+        forwarded_from: {
+            id: string;
+            sender_id: string | null;
+            sender_name: string | null;
+            timestamp: string | null;
+            text: string;
+            attachments: {
+                message?: string | undefined;
+                kind: string;
+                position?: number | undefined;
+                url?: string | undefined;
+                name?: string | undefined;
+                title?: string | undefined;
+                mime?: string | undefined;
+                size?: number | undefined;
+                width?: number | undefined;
+                height?: number | undefined;
+                duration?: number | undefined;
+                text?: string | undefined;
+                extraction?: {
+                    origin: string;
+                    extractor: string;
+                    chars: number;
+                    error?: string | undefined;
+                } | undefined;
+                local_path?: string | undefined;
+                buttons?: {
+                    kind: "app" | "callback" | "chat" | "clipboard" | "contact" | "link" | "location" | "message" | "other";
+                    text: string;
+                    url?: string | undefined;
+                }[][] | undefined;
+            }[];
+            outgoing: boolean | null;
+        } | null;
+        thread_id?: string | undefined;
+        thread_root_id?: string | undefined;
+        reactions?: {
+            counts: {
+                reaction: string;
+                count: number;
+            }[];
+            mine: string | null;
+            total: number;
+        } | null | undefined;
+        scheduled_for?: string | undefined;
+        starred?: true | undefined;
+        delivery?: "delivered" | "read" | undefined;
+        email?: {
+            subject: string | null;
+            from: {
+                name: string | null;
+                address: string;
+                ref: string | null;
+            } | null;
+            to: {
+                name: string | null;
+                address: string;
+                ref: string | null;
+            }[];
+            cc: {
+                name: string | null;
+                address: string;
+                ref: string | null;
+            }[];
+            bcc: {
+                name: string | null;
+                address: string;
+                ref: string | null;
+            }[];
+            reply_addresses: {
+                name: string | null;
+                address: string;
+                ref: string | null;
+            }[];
+            labels: string[];
+            thread: string;
+            read: boolean | null;
+            flagged: boolean | null;
+            sender_score?: {
+                score: number;
+                signals: string[];
+                demoted?: true | undefined;
+            } | undefined;
+        } | undefined;
+        provider_metadata?: {
+            [x: string]: unknown;
+        } | undefined;
+    }[] | undefined;
     scheduled_for?: string | undefined;
 }>;
 /**

package/dist/cli/messenger/message-writes.js

@@ -4,12 +4,16 @@ import { nextStep } from "../steps.js";
 import { messageItem } from "./message-items.js";
 /**
  * A send, forward or edit: the message as it now stands, with its `operation_id` — for a send, the id a repeat
- * passes as `--operation-id` so it cannot make a second copy. A scheduled message gets a new id when it goes out,
+ * passes as `--operation-id` so it cannot make a second copy. An album adds `messages`, every one it made, in order;
+ * `message` stays its first, so a reader of one message reads an album as before. A scheduled message gets a new id when it goes out,
  * so its next step is the list that shows it, never a retry.
  */
-export const writtenAnswer = ({ operationId, sendId, message, scheduledFor }, reader) => itemOf({
+export const writtenAnswer = ({ operationId, sendId, message, messages, scheduledFor }, reader) => itemOf({
     operation_id: sendId ?? operationId,
     message: messageItem(message, reader),
+    ...(messages === undefined || messages.length < 2
+        ? {}
+        : { messages: messages.map((one) => messageItem(one, reader)) }),
     ...(scheduledFor === undefined ? {} : { scheduled_for: scheduledFor }),
 }, scheduledFor === undefined ? {} : { next: [nextStep("messages.scheduled", { args: { chat: message.chatId } })] });
 /**

package/dist/cli/messenger/messages-send-command.js

@@ -1,6 +1,6 @@
 import { CliError } from "@wirecat/cli-base";
 import { annotate } from "@wirecat/cli-base/commands";
-import { Command } from "commander";
+import { Command, Option } from "commander";
 import { sendTime } from "../../domain/send-time.js";
 import { threadIdOf } from "../../domain/thread.js";
 import { typedSendAs } from "../../sends/send-as.js";
@@ -15,6 +15,9 @@ import { readAll } from "./stdin.js";
  * of what this profile tried to send, and it never holds the text.
  */
 export const HTML_HELP = "the text is HTML: <b>, <i>, <a href>, <code>";
+const collect = (value, previous) => [...previous, value];
+/** The empty list as its default is what tells the MCP tool to take a list for it. */
+const repeatable = (flags, description) => new Option(flags, description).argParser(collect).default([], "none");
 export const sendCommand = (messenger) => {
     const send = annotate(new Command("send"), {
         examples: [`${messenger.app.command} personal messages send "Book club" "The meeting starts at 10."`],
@@ -38,9 +41,9 @@ export const sendCommand = (messenger) => {
     send
         .option("--no-preview", "no preview card for a link in the text")
         .option("--md", "read this messenger's Markdown; see its formatting guide for supported syntax")
-        .option("--file <file>", "attach a file; the text becomes its caption")
-        .option("--photo <file>", "attach a .jpg, .png or .webp as a photo; the text becomes its caption")
-        .option("--as-file", "send the --file as a file to download, a video included")
+        .addOption(repeatable("--file <file>", "attach a file; the text becomes its caption; repeat it for an album"))
+        .addOption(repeatable("--photo <file>", "attach a .jpg, .png or .webp as a photo; the text becomes its caption; repeat it for an album"))
+        .option("--as-file", "send each --file as a file to download, a video included")
         .option("--voice <file>", "send an Ogg Opus file as a voice message, alone, with no text")
         .addOption(ownerOnlyOption("--allow-any-file", "send a file even from credential folders or this CLI's own folders"));
     if (messenger.scheduledSends !== false)
@@ -76,8 +79,8 @@ const sendText = async (command, messenger, chat, text) => {
         throw new CliError("validation_error", "--comment-to needs the post's message id");
     const read = { app: messenger.app, env: context.env, anyFile: allowAnyFile === true };
     const attachments = await readAttachments({
-        ...(photo === undefined ? {} : { photo }),
-        ...(file === undefined ? {} : { file }),
+        photo,
+        file,
         ...(voice === undefined ? {} : { voice }),
         ...(text === undefined ? {} : { text }),
         asFile: asFile === true,

package/dist/cli/messenger/models-command.js

@@ -76,7 +76,6 @@ export const modelsCommand = (messenger) => {
         });
     });
     reachesOtherService(annotate(audio.command("download"), {
-        mcp: false,
         effects: FETCH,
         output: { entity: "model" },
         examples: [`${tool} models audio download parakeet-v3`],
@@ -124,7 +123,6 @@ export const modelsCommand = (messenger) => {
         });
     });
     reachesOtherService(annotate(text.command("download"), {
-        mcp: false,
         effects: FETCH,
         output: { entity: "model" },
         examples: [`${tool} models text download ${DEFAULT_TEXT_MODEL}`],
@@ -197,7 +195,6 @@ export const imageModelsCommand = (messenger) => {
         });
     });
     reachesOtherService(annotate(image.command("download"), {
-        mcp: false,
         effects: FETCH,
         output: { entity: "model" },
         examples: [`${tool} images models download ${DEFAULT_IMAGE_MODEL}`],