@wirecat/cli-core 0.400.0 → 0.402.0

package/dist/meetings/mcp/index.d.ts

@@ -38,6 +38,7 @@ export declare const meetingTools: ({
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -53,11 +54,11 @@ export declare const meetingTools: ({
             format?: undefined;
             transcript_id?: undefined;
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -75,11 +76,11 @@ export declare const meetingTools: ({
             format?: undefined;
             transcript_id?: undefined;
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -101,7 +102,6 @@ export declare const meetingTools: ({
                 minimum: number;
             };
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
@@ -188,6 +188,7 @@ export declare const meetingTools: ({
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -203,11 +204,11 @@ export declare const meetingTools: ({
             format?: undefined;
             transcript_id?: undefined;
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -225,11 +226,11 @@ export declare const meetingTools: ({
             format?: undefined;
             transcript_id?: undefined;
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -251,7 +252,6 @@ export declare const meetingTools: ({
                 minimum: number;
             };
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
@@ -338,6 +338,7 @@ export declare const meetingTools: ({
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -353,11 +354,11 @@ export declare const meetingTools: ({
             format?: undefined;
             transcript_id?: undefined;
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -375,11 +376,11 @@ export declare const meetingTools: ({
             format?: undefined;
             transcript_id?: undefined;
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -401,7 +402,6 @@ export declare const meetingTools: ({
                 minimum: number;
             };
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
@@ -488,6 +488,7 @@ export declare const meetingTools: ({
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -503,11 +504,11 @@ export declare const meetingTools: ({
             format?: undefined;
             transcript_id?: undefined;
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -525,11 +526,11 @@ export declare const meetingTools: ({
             format?: undefined;
             transcript_id?: undefined;
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -551,7 +552,6 @@ export declare const meetingTools: ({
                 minimum: number;
             };
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
@@ -638,6 +638,7 @@ export declare const meetingTools: ({
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -653,11 +654,11 @@ export declare const meetingTools: ({
             format?: undefined;
             transcript_id?: undefined;
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -675,11 +676,11 @@ export declare const meetingTools: ({
             format?: undefined;
             transcript_id?: undefined;
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -701,7 +702,6 @@ export declare const meetingTools: ({
                 minimum: number;
             };
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;

package/dist/meetings/read-answers.d.ts

@@ -1,5 +1,6 @@
 import * as v from "valibot";
 import type { MeetingLink } from "./links.js";
+import type { Event } from "./model.js";
 import type { MeetingReviewItem } from "./review.js";
 import type { MeetingSpeakerStats, MeetingStats } from "./stats.js";
 /** One meeting in `review`: what the store holds about it, never transcript text. */
@@ -165,3 +166,20 @@ export declare const meetingPassage: v.StrictObjectSchema<{
         readonly revision: v.PicklistSchema<["current", "superseded"], undefined>;
     }, undefined>, undefined>;
 }, undefined>;
+/** A stored event a meeting belongs to; `id` is what `meetings update --event-id` takes. */
+export declare const event: v.StrictObjectSchema<{
+    readonly id: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+    readonly event_series_id: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+    readonly title: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+    readonly description: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+    readonly location: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+    readonly starts_at: v.NullableSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.IsoTimestampAction<string, "an ISO 8601 time in UTC">, v.EndsWithAction<string, "Z", "an ISO 8601 time in UTC, ending in `Z`">]>, undefined>;
+    readonly ends_at: v.NullableSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.IsoTimestampAction<string, "an ISO 8601 time in UTC">, v.EndsWithAction<string, "Z", "an ISO 8601 time in UTC, ending in `Z`">]>, undefined>;
+    readonly timezone: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+    /** `auto`: made from a meeting; `owner`: made by hand. */
+    readonly origin: v.PicklistSchema<["auto", "owner"], undefined>;
+    readonly deleted_at: v.NullableSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.IsoTimestampAction<string, "an ISO 8601 time in UTC">, v.EndsWithAction<string, "Z", "an ISO 8601 time in UTC, ending in `Z`">]>, undefined>;
+    readonly created_at: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.IsoTimestampAction<string, "an ISO 8601 time in UTC">, v.EndsWithAction<string, "Z", "an ISO 8601 time in UTC, ending in `Z`">]>;
+    readonly updated_at: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.IsoTimestampAction<string, "an ISO 8601 time in UTC">, v.EndsWithAction<string, "Z", "an ISO 8601 time in UTC, ending in `Z`">]>;
+}, undefined>;
+export declare const eventItem: (one: Event) => v.InferOutput<typeof event>;

package/dist/meetings/read-answers.js

@@ -181,3 +181,33 @@ export const meetingPassage = v.strictObject({
         revision,
     })),
 });
+/** A stored event a meeting belongs to; `id` is what `meetings update --event-id` takes. */
+export const event = v.strictObject({
+    id: v.pipe(v.string(), v.minLength(1)),
+    event_series_id: v.nullable(text),
+    title: v.nullable(text),
+    description: v.nullable(text),
+    location: v.nullable(text),
+    starts_at: v.nullable(isoTime),
+    ends_at: v.nullable(isoTime),
+    timezone: v.nullable(text),
+    /** `auto`: made from a meeting; `owner`: made by hand. */
+    origin: v.picklist(["auto", "owner"]),
+    deleted_at: v.nullable(isoTime),
+    created_at: isoTime,
+    updated_at: isoTime,
+});
+export const eventItem = (one) => ({
+    id: String(one.id),
+    event_series_id: one.eventSeriesId === null ? null : String(one.eventSeriesId),
+    title: one.title,
+    description: one.description,
+    location: one.location,
+    starts_at: iso(one.startsAt),
+    ends_at: iso(one.endsAt),
+    timezone: one.timezone,
+    origin: one.origin,
+    deleted_at: iso(one.deletedAt),
+    created_at: new Date(one.createdAt).toISOString(),
+    updated_at: new Date(one.updatedAt).toISOString(),
+});

package/dist/ports/messenger.d.ts

@@ -41,7 +41,10 @@ export interface SendOptions {
     formatting?: TextSpan[];
     /** ISO time: the messenger holds it and sends it then, under a new id. */
     at?: string;
-    /** Sent in one message, `text` as the caption. More than one is an album. */
+    /**
+     * Sent in one message, `text` as the caption. More than one is an album: photos first, then files, each in the
+     * order given. An adapter whose messenger cannot send one refuses it with `validation_error` before anything goes.
+     */
     attachments?: Upload[];
     /** One sticker by id, alone: no text, no attachment. Only where `Messenger.stickers` is on. */
     sticker?: Id;
@@ -82,7 +85,13 @@ export interface NewPoll {
     closeAfter?: number;
 }
 export interface Sent {
+    /** The message sent; for an album, its first. */
     message: Message;
+    /**
+     * For an album, every message it made, in order, `message` among them. Unset for a single message, and where an
+     * adapter has not learned to answer with them yet.
+     */
+    messages?: Message[];
     /** The send's identity. Repeat it after an unknown outcome, never a new one. */
     sendId: string;
 }

package/dist/search/dictionary.d.ts

@@ -0,0 +1,20 @@
+/** The Hunspell dictionary that tells a real word from a garbled one, for each language the store stems. */
+export declare const DICTIONARIES: {
+    readonly russian: "dictionary-ru";
+    readonly english: "dictionary-en";
+    readonly spanish: "dictionary-es";
+};
+export type DictionaryLanguage = keyof typeof DICTIONARIES;
+/**
+ * `known`: whether a folded word the index stores is real in one of `languages` that write in its alphabet.
+ * `covers`: whether any of them does; without one, a garbled spelling cannot be told from a real word.
+ */
+export declare const knownWord: (languages: readonly DictionaryLanguage[]) => {
+    covers: (word: string) => boolean;
+    known: (word: string) => boolean;
+};
+/** The dictionaries of the store's stemmers: Russian for Cyrillic, each named Latin stemmer for Latin. */
+export declare const dictionaryLanguages: (stemmers: {
+    cyrillic: string;
+    latin: string;
+}) => DictionaryLanguage[];

package/dist/search/dictionary.js

@@ -0,0 +1,106 @@
+import { readFileSync } from "node:fs";
+import { fold } from "../store/normalize.js";
+/** The Hunspell dictionary that tells a real word from a garbled one, for each language the store stems. */
+export const DICTIONARIES = { russian: "dictionary-ru", english: "dictionary-en", spanish: "dictionary-es" };
+/** `fold`, without Unicode normalisation for plain Russian letters: it would double the time Russian loads in. */
+const folded = (word) => /^[а-яё'-]*$/.test(word) ? word.replaceAll("ё", "е").replaceAll("й", "и") : fold(word);
+const loaded = new Map();
+/**
+ * Hunspell's own check, an affix at a time, instead of nspell's: nspell expands Russian's 146,269 entries into
+ * 1.44 million forms (1.4 s, 172 MB) where this loads in about 0.2 s. The index stores words folded as `normalize`
+ * folds them, so entries, affixes and conditions are folded too; a condition such as `[^ейоь]` then refuses и as
+ * well, which changed none of 12,769 sample words. Continuation classes and compounds are not followed: a word
+ * only they make counts as unknown and may widen.
+ */
+const dictionary = (language) => {
+    const cached = loaded.get(language);
+    if (cached)
+        return cached;
+    const file = (name) => readFileSync(new URL(name, import.meta.resolve(DICTIONARIES[language])), "utf8");
+    const words = new Map();
+    for (const line of file("index.dic").split("\n").slice(1)) {
+        const [entry, flags = ""] = line.trim().split("/");
+        if (!entry)
+            continue;
+        // Names and abbreviations are capitalised in the dictionary; the index is lower case.
+        const spelled = entry.toLowerCase();
+        const key = folded(spelled);
+        words.set(key, (words.get(key) ?? "") + flags);
+    }
+    const suffixes = new Map();
+    const prefixes = new Map();
+    const crosses = new Set();
+    let longest = 0;
+    for (const line of file("index.aff").split("\n")) {
+        const [kind, flag, strip, add, condition] = line.trim().split(/\s+/);
+        if ((kind !== "SFX" && kind !== "PFX") || flag === undefined || strip === undefined || add === undefined)
+            continue;
+        if (!condition) {
+            if (strip === "Y")
+                crosses.add(`${kind}${flag}`);
+            continue;
+        }
+        const affix = folded(add.split("/")[0].replace(/^0$/, ""));
+        const pattern = condition === "." ? "" : folded(condition);
+        const into = kind === "SFX" ? suffixes : prefixes;
+        const rules = into.get(affix) ?? [];
+        rules.push({
+            flag,
+            strip: strip === "0" ? "" : folded(strip),
+            condition: new RegExp(kind === "SFX" ? `${pattern}$` : `^${pattern}`),
+            cross: crosses.has(`${kind}${flag}`),
+        });
+        into.set(affix, rules);
+        longest = Math.max(longest, affix.length);
+    }
+    const made = { words, suffixes, prefixes, longest };
+    loaded.set(language, made);
+    return made;
+};
+const entry = ({ words }, key, rule, also) => {
+    const flags = words.get(key) ?? "";
+    return flags.includes(rule.flag) && (also === undefined || flags.includes(also)) && rule.condition.test(key);
+};
+/** A suffix on a dictionary word; `prefix` is the flag of a prefix already taken off, which both must allow. */
+const suffixed = (found, word, prefix) => {
+    for (let cut = 0; cut <= Math.min(word.length - 1, found.longest); cut++)
+        for (const rule of found.suffixes.get(word.slice(word.length - cut)) ?? [])
+            if ((prefix === undefined || rule.cross) &&
+                entry(found, word.slice(0, word.length - cut) + rule.strip, rule, prefix))
+                return true;
+    return false;
+};
+const spelled = (language, word) => {
+    const found = dictionary(language);
+    if (found.words.has(word) || suffixed(found, word))
+        return true;
+    for (let cut = 1; cut <= Math.min(word.length - 1, found.longest); cut++)
+        for (const rule of found.prefixes.get(word.slice(0, cut)) ?? []) {
+            const rest = rule.strip + word.slice(cut);
+            if (entry(found, rest, rule) || (rule.cross && suffixed(found, rest, rule.flag)))
+                return true;
+        }
+    return false;
+};
+const CYRILLIC = /\p{Script=Cyrillic}/u;
+const SCRIPT_OF = {
+    russian: "cyrillic",
+    english: "latin",
+    spanish: "latin",
+};
+/**
+ * `known`: whether a folded word the index stores is real in one of `languages` that write in its alphabet.
+ * `covers`: whether any of them does; without one, a garbled spelling cannot be told from a real word.
+ */
+export const knownWord = (languages) => {
+    const byScript = (word) => {
+        const script = CYRILLIC.test(word) ? "cyrillic" : "latin";
+        return languages.filter((language) => SCRIPT_OF[language] === script);
+    };
+    return {
+        covers: (word) => byScript(word).length > 0,
+        known: (word) => byScript(word).some((language) => spelled(language, word)),
+    };
+};
+/** The dictionaries of the store's stemmers: Russian for Cyrillic, each named Latin stemmer for Latin. */
+export const dictionaryLanguages = (stemmers) => [stemmers.cyrillic, ...stemmers.latin.split(",")].filter((name) => Object.hasOwn(DICTIONARIES, name));

package/dist/sends/guard.d.ts

@@ -12,7 +12,7 @@ export interface GuardRequest {
     chatId: Id | null;
     kind?: SendKind;
     action?: ChatAction | AccountAction;
-    /** Messages a deletion names, or people a chat change adds. */
+    /** Messages a deletion names or an album sends, or people a chat change adds. */
     count?: number;
     sendId?: string;
     sendAs?: Id;

package/dist/sends/guard.js

@@ -40,11 +40,11 @@ const countsTowardLimit = ({ kind = "message", action, notify }) => kind === "me
     action === "join" ||
     action === "contact-import";
 /**
- * Each deleted message, each person added to a group or let in by a request, and each imported number
- * counts as one.
+ * Each deleted message, each photo or file of an album (`NEED-1660`), each person added to a group or let in by a
+ * request, and each imported number counts as one.
  */
-const weightOf = ({ kind, action, count, people }) => kind === "delete"
-    ? (count ?? 1)
+const weightOf = ({ kind = "message", action, count, people }) => kind === "delete" || (kind === "message" && action === undefined)
+    ? Math.max(1, count ?? 1)
     : action === "create" || action === "members.add" || action === "requests.accept" || action === "contact-import"
         ? Math.max(1, people ?? count ?? 1)
         : 1;
@@ -180,7 +180,11 @@ export const sendGuard = ({ profile, recipients, command = recipients.command, r
                 reservation: id,
                 ...(kind ? { kind } : {}),
                 ...(action ? { action } : {}),
-                ...(asked.people === undefined ? {} : kind === "delete" ? { count: asked.people } : { people: asked.people }),
+                ...(asked.people === undefined
+                    ? {}
+                    : kind === "delete" || kind === "message" || kind === undefined
+                        ? { count: asked.people }
+                        : { people: asked.people }),
                 ...(sendId === undefined ? {} : { sendId }),
                 ...(operationId === undefined ? {} : { operationId }),
                 ...(scheduledFor ? { scheduledFor } : {}),

package/dist/sends/journal.d.ts

@@ -23,7 +23,7 @@ export interface SendEntry {
     messageId?: Id;
     /** The command a write belongs to, where it named one: `polls.create` sets a poll apart from a message. */
     key?: string;
-    /** How many messages a `delete` entry named — each one counts toward the hourly limit. */
+    /** How many messages a `delete` entry named, or an album sent — each one counts toward the hourly limit. */
     count?: number;
     forEveryone?: boolean;
     /**

package/dist/sends/permissions.d.ts

@@ -21,8 +21,17 @@ export declare const DEFAULT_PERMISSIONS: Readonly<Record<PermissionKey, Level>>
 export declare const AUTHORITY_KEY: PermissionKey;
 /** Whether these levels let an agent run a command that changes what a later run may do; `ask` does, as for any write. */
 export declare const authorityAllowed: (levels: Readonly<Record<PermissionKey, Level>>) => boolean;
+/** Lets an MCP server offer `bot api`, whose calls skip the send guard and the bot's recipient list (NEED-1679). */
+export declare const BOT_API_KEY: PermissionKey;
+export declare const isBotApi: (path: readonly string[]) => boolean;
+/**
+ * Deny by default for an MCP server only: the key stays out of `DEFAULT_PERMISSIONS` because the command line's
+ * `bot api` is checked per operation (`bot.api.<operation>`), and a default there would deny it for the owner too.
+ * A broader `bot: allow` does not lift it; `ask` goes ahead over MCP, as for any write.
+ */
+export declare const botApiAllowed: (levels: Readonly<Record<PermissionKey, Level>>) => boolean;
 /** The resources at the top of the command tree, which `readOnly` and `allow` turn read-only as a whole. */
-export declare const RESOURCES: readonly ["messages", "reactions", "polls", "topics", "chats", "contacts", "account", "bot", "conversations", "tags", "mentions", "search", "searches", "tasks", "replies", "attachments", "stats", "store", "metadata", "mcp"];
+export declare const RESOURCES: readonly ["messages", "reactions", "polls", "topics", "chats", "contacts", "account", "bot", "conversations", "tags", "mentions", "search", "searches", "tasks", "replies", "attachments", "stats", "store", "metadata", "mcp", "server", "models", "schedule", "doctor", "images"];
 /** The command path an old `allow` word stood for, as one key — what an MCP tool's `permission` is checked against. */
 export declare const keyOfWord: (word: Permission) => PermissionKey;
 /**

package/dist/sends/permissions.js

@@ -79,7 +79,27 @@ export const DEFAULT_PERMISSIONS = {
     "replies.send": "deny",
     // NEED-1662: an agent that changes settings, schedules or recipients could lift its own limits; the owner opts in.
     "mcp.authority": "deny",
+    // NEED-1663: writes no level stopped before, so MCP could not offer them; over MCP `ask` goes ahead.
+    "store.backup": "ask",
+    "store.restore": "ask",
+    "store.migrate": "ask",
+    "store.repair": "ask",
+    "store.reset": "ask",
+    "store.clear": "ask",
+    "store.decrypt": "ask",
+    "store.copies.delete": "ask",
+    "server.start": "ask",
+    "server.stop": "ask",
+    "server.restart": "ask",
+    "models.audio.download": "ask",
+    "models.text.download": "ask",
+    "images.models.download": "ask",
+    "schedule.run": "ask",
+    "schedule.exec": "ask",
+    "doctor.report.create": "ask",
 };
+/** Commands under a housekeeping word, or store maintenance, that still have a key of their own: their path. */
+const KEYED_UNDER_HOUSEKEEPING = new Set(Object.keys(DEFAULT_PERMISSIONS).filter((key) => /^(store|server|models|images|schedule|doctor)\./.test(key)));
 /** Lets an MCP server offer the commands that change what a later run may do (`grantsAuthority`). */
 export const AUTHORITY_KEY = "mcp.authority";
 /** Whether these levels let an agent run a command that changes what a later run may do; `ask` does, as for any write. */
@@ -87,6 +107,18 @@ export const authorityAllowed = (levels) => {
     const { level } = levelFor(levels, AUTHORITY_KEY);
     return level === "allow" || level === "ask";
 };
+/** Lets an MCP server offer `bot api`, whose calls skip the send guard and the bot's recipient list (NEED-1679). */
+export const BOT_API_KEY = "bot.api";
+export const isBotApi = (path) => path[0] === "bot" && path[1] === "api";
+/**
+ * Deny by default for an MCP server only: the key stays out of `DEFAULT_PERMISSIONS` because the command line's
+ * `bot api` is checked per operation (`bot.api.<operation>`), and a default there would deny it for the owner too.
+ * A broader `bot: allow` does not lift it; `ask` goes ahead over MCP, as for any write.
+ */
+export const botApiAllowed = (levels) => {
+    const { level } = levelFor(levels, BOT_API_KEY, { ...DEFAULT_PERMISSIONS, [BOT_API_KEY]: "deny" });
+    return level === "allow" || level === "ask";
+};
 /** The resources at the top of the command tree, which `readOnly` and `allow` turn read-only as a whole. */
 export const RESOURCES = [
     "messages",
@@ -109,6 +141,11 @@ export const RESOURCES = [
     "store",
     "metadata",
     "mcp",
+    "server",
+    "models",
+    "schedule",
+    "doctor",
+    "images",
 ];
 const OLD_WORDS = {
     send: ["messages.send", "polls.create", "chats.start"],
@@ -375,7 +412,7 @@ const HOUSEKEEPING = new Set([
 ]);
 /** Under `bot`: its token, its names, its lists and its MCP server. */
 const BOT_HOUSEKEEPING = new Set(["auth", "list", "sends", "recipients", "mcp"]);
-const STORE_MAINTENANCE = new Set(["info", "check", "migrate", "backup", "restore", "repair", "copies"]);
+const STORE_MAINTENANCE = new Set(["info", "check", "copies"]);
 /** Commands outside `messages` that print what people wrote, so `deny messages` reaches them too. */
 const SHOW_MESSAGES = new Set(["inbox", "review", "watch", "serve", "store", "conversations"]);
 /** Before every search moved under `search` (2026-10-09). */
@@ -405,6 +442,9 @@ export const readKeysForCommand = (path) => {
         return [key, "messages"];
     if (path[0] === "store" && path[1] === "gaps" && path[2] === "repair")
         return [key, "messages"];
+    // Checked as `messages` before they had keys of their own: `deny messages` keeps stopping them.
+    if (path[0] === "store" && ["reset", "clear", "decrypt"].includes(path[1] ?? ""))
+        return [key, "messages"];
     // A search shows what people wrote, so `deny messages` reaches every leaf that reads messages.
     if (path[0] === "search") {
         if (path[1] === "notes")
@@ -438,6 +478,8 @@ export const keyForCommand = (path) => {
         const inner = keyForCommand(path.slice(1));
         return `bot.${inner ?? path.slice(1).join(".")}`;
     }
+    if (KEYED_UNDER_HOUSEKEEPING.has(path.join(".")))
+        return path.join(".");
     if (top === undefined || HOUSEKEEPING.has(top) || (top === "search" && next === "runs"))
         return null;
     // Picture models moved from `models image` (0.270.0); a model is housekeeping wherever it is listed.

package/dist/sends/upload.d.ts

@@ -18,12 +18,12 @@ export declare const readUpload: (kind: UploadKind, path: string, { app, env, an
     photoTypes?: readonly string[];
 }) => Promise<Upload>;
 /**
- * What a send attaches, as `messages send` and its tool take it. A voice message goes alone, as the
- * messengers' own apps send one.
+ * What a send attaches, as `messages send` and its tool take it. More than one photo or file is an album: photos
+ * first, then files, each in the order given. A voice message goes alone, as the messengers' own apps send one.
  */
 export declare const readAttachments: ({ photo, file, voice, asFile, filename, text, }: {
-    photo?: string;
-    file?: string;
+    photo?: string | readonly string[];
+    file?: string | readonly string[];
     voice?: string;
     asFile?: boolean;
     filename?: string;

package/dist/sends/upload.js

@@ -197,37 +197,41 @@ export const readUpload = async (kind, path, { app, env = process.env, anyFile =
     }
     return { kind, name: basename(path), source: { kind: "file", path: resolve(path), size } };
 };
-const checkFilename = (filename, file) => {
-    if (file === undefined)
+const checkFilename = (filename, files) => {
+    if (files.length === 0)
         throw new CliError("validation_error", "--filename names a --file; give one");
+    if (files.length > 1)
+        throw new CliError("validation_error", "--filename names one --file; an album keeps its names");
     if (filename.trim() === "" || /[/\\\0]/.test(filename) || filename.length > 255)
         throw new CliError("validation_error", "--filename is a name, not a path: no / or \\, at most 255 characters");
 };
+const listOf = (value) => value === undefined ? [] : typeof value === "string" ? [value] : value;
 /**
- * What a send attaches, as `messages send` and its tool take it. A voice message goes alone, as the
- * messengers' own apps send one.
+ * What a send attaches, as `messages send` and its tool take it. More than one photo or file is an album: photos
+ * first, then files, each in the order given. A voice message goes alone, as the messengers' own apps send one.
  */
 export const readAttachments = async ({ photo, file, voice, asFile, filename, text, }, read) => {
-    if (voice !== undefined && (photo !== undefined || file !== undefined || (text ?? "").trim() !== "")) {
+    const photos = listOf(photo);
+    const files = listOf(file);
+    if (voice !== undefined && (photos.length > 0 || files.length > 0 || (text ?? "").trim() !== "")) {
         throw new CliError("validation_error", "a voice message goes alone — no text, no file, no photo beside it");
     }
-    if (asFile && file === undefined)
+    if (asFile && files.length === 0)
         throw new CliError("validation_error", "--as-file is about a --file; give one");
     if (filename !== undefined)
-        checkFilename(filename, file);
-    return [
-        ...(photo === undefined ? [] : [await readUpload("photo", photo, read)]),
-        ...(file === undefined
-            ? []
-            : [
-                {
-                    ...(await readUpload("file", file, read)),
-                    ...(filename === undefined ? {} : { name: filename }),
-                    ...(asFile ? { asFile: true } : {}),
-                },
-            ]),
-        ...(voice === undefined ? [] : [await readUpload("voice", voice, read)]),
-    ];
+        checkFilename(filename, files);
+    const uploads = [];
+    for (const one of photos)
+        uploads.push(await readUpload("photo", one, read));
+    for (const one of files)
+        uploads.push({
+            ...(await readUpload("file", one, read)),
+            ...(filename === undefined ? {} : { name: filename }),
+            ...(asFile ? { asFile: true } : {}),
+        });
+    if (voice !== undefined)
+        uploads.push(await readUpload("voice", voice, read));
+    return uploads;
 };
 /** A sticker to send from a file: a WebP image of at most `maxBytes`, behind the same file guard as `--file`. */
 export const readStickerFile = async (path, maxBytes, read) => {