@wirecat/cli-core 0.420.0 → 0.421.0

package/CHANGELOG.md

@@ -7,6 +7,18 @@ shape of this file.
 
 ## Unreleased
 
+## 0.421.0 — 25.10.2026
+
+### Changed — may break callers
+
+- **Old command names and old permission keys are no longer recognised.** A retired command path (`contacts profile`, `bot store fetch`, `search mail` and the rest) gets the ordinary "unknown command" answer, on the command line and over MCP, with no pointer to a replacement. A saved permission key is read only as written: nothing maps an old key to a new one, and `chats.mute` no longer covers `chats unmute`. Removed with it: `movedCommandError` from `/cli`; `PERMISSIONS`, `Permission`, `permissionFor` and `assertStatsPermissionsCurrent` from `/sends`; the `permission` field of an MCP tool definition; and the `skipMovedPermissions` option of `resolveSettings`. A CLI that imports one of them drops the import; nothing replaces them.
+- **Bot commands and `--dry-run` refuse a saved permission key that no command checks**, as messenger commands already did. They stop with a `configuration_error` that names the key and the `config unset` that removes it: "permissions.bot.store.fetch names no command — remove it with \`tg sales config unset --bot permissions.bot.store.fetch\`". `config show`, `set` and `unset` still run, so the file can be repaired. Before, a bot command did not look at the keys at all, and an old key was quietly renamed or ignored.
+- **`messages sync` and `bot messages sync` are checked as `messages.sync` and `bot.messages.sync`**, their own paths. A level on `messages` or `bot.messages` still applies to them; `commands --json` now reports the longer key.
+
+### Fixed
+
+- **A deny saved on the sync command itself now stops it.** `permissions.bot.messages.sync: deny` was ignored, because `bot messages sync` was checked under `bot.messages`; `permissions.messages.sync: deny` could not be saved at all and was refused as naming no command. Both are now honoured on the command line, in MCP discovery and by the MCP server. Bot commands also refuse a denied read (`bot.messages: deny` stops `bot messages list` and `bot messages sync`) before they connect, as messenger commands already did.
+
 ## 0.420.0 — 25.10.2026
 
 ### Changed — may break callers

package/dist/cli/bot/context.d.ts

@@ -1,7 +1,8 @@
 import type { Command } from "commander";
 import { SendJournal } from "../../sends/journal.js";
-import type { Level, PermissionKey } from "../../sends/permissions.js";
+import { type Level, type PermissionKey } from "../../sends/permissions.js";
 import { RecipientList } from "../../sends/recipients.js";
+import type { Settings } from "../settings.js";
 import type { BotAdapter, BotChatRef, BotConnectOptions, BotMessenger } from "./port.js";
 import { ChatRegistry } from "./registry.js";
 import { BotTokenStore } from "./token.js";
@@ -9,7 +10,7 @@ import { BotTokenStore } from "./token.js";
 export declare const botWords: (bot: BotMessenger, profile: string) => string;
 /** What a bot command needs, resolved once: the bot's settings, its token, its lists. */
 export declare const botContext: (command: Command, bot: BotMessenger) => {
-    settings: import("../settings.js").Settings;
+    settings: Settings;
     renderer: import("@wirecat/cli-base").Renderer;
     format: import("@wirecat/cli-base").RenderFormat;
     color: boolean;

package/dist/cli/bot/context.js

@@ -2,16 +2,30 @@ import { CliError } from "@wirecat/cli-base";
 import { pickChat } from "../../resolve.js";
 import { sendGuard } from "../../sends/guard.js";
 import { SendJournal } from "../../sends/journal.js";
+import { levelFor, readKeysForCommand } from "../../sends/permissions.js";
 import { RecipientList } from "../../sends/recipients.js";
 import { readSecret } from "../../terminal/prompt.js";
+import { commandPathOf } from "../command-contract.js";
 import { baseContext, secretInputOf } from "../context.js";
 import { terminalAsker } from "../messenger/ask.js";
+import { refuseUnknownPermissionKeys } from "../permission-keys.js";
 import { asFirstWord } from "../profile.js";
 import { botCopy } from "./copy.js";
 import { botFiles, ChatRegistry } from "./registry.js";
 import { BotTokenStore } from "./token.js";
 /** How the owner types this bot — `max sales bot` — so a refusal names the command that fixes it. */
 export const botWords = (bot, profile) => `${bot.app.command} ${asFirstWord(profile)}bot`;
+/** What a messenger command refuses before it connects, for a bot: an unknown key, then a denied read. */
+const refuseBotPermissions = (command, bot, settings) => {
+    refuseUnknownPermissionKeys(command, settings.permissions, `${bot.app.command} ${asFirstWord(settings.profile)}config unset --bot`);
+    for (const key of readKeysForCommand(commandPathOf(command))) {
+        const { level, key: named } = levelFor(settings.permissions, key);
+        if (level !== "deny")
+            continue;
+        throw new CliError("permission_error", `bot profile ${settings.profile} denies ${key} (permissions.${named} is deny, from the ` +
+            `${settings.permissionSources[named ?? ""] ?? "default"})`, { permission: key });
+    }
+};
 /** What a bot command needs, resolved once: the bot's settings, its token, its lists. */
 export const botContext = (command, bot) => {
     const base = baseContext(command, (flags, options) => bot.resolveSettings(flags, { ...options, kind: "bot" }));
@@ -21,6 +35,7 @@ export const botContext = (command, bot) => {
     const tokens = bot.tokenStore?.(command, profile) ??
         new BotTokenStore({ app: bot.app, profile, env, ...(keyring ? { keyring } : {}) });
     const words = botWords(bot, profile);
+    refuseBotPermissions(command, bot, settings);
     const registry = bot.registry?.(command, profile) ?? new ChatRegistry(bot.app, profile, env);
     const recipients = () => new RecipientList(files.recipients, words);
     const journal = () => new SendJournal(files.journal, { service: bot.app.command, version: bot.app.version });

package/dist/cli/config-command.js

@@ -55,7 +55,7 @@ export const configCommand = (app, config, { permissionKey } = {}) => {
             .option("--bot", "only for bots — the bot section of the file");
         if (action === "set")
             sub
-                .argument("<value>", "a number, true or false, or for allow a list like send,reaction; for a group tg:work,max:Alice,email:me@x")
+                .argument("<value>", "a number, true or false; for a group tg:work,max:Alice,email:me@x")
                 .description("save a setting to the configuration file");
         else
             sub.description("remove a setting from the configuration file");
@@ -64,7 +64,6 @@ export const configCommand = (app, config, { permissionKey } = {}) => {
             const context = baseContext(this, (flags, options) => config.resolveSettings(flags, {
                 ...options,
                 needsProfile: !everyone && setting !== "default_profile" && !isStoreSetting(setting),
-                skipMovedPermissions: true,
             }));
             const { settings, renderer, env } = context;
             if (isStoreSetting(setting)) {

package/dist/cli/index.d.ts

@@ -96,7 +96,6 @@ export type { Running, ServerOptions, ServerProcess, ServerSystem } from "./mess
 export { storeSummary } from "./messenger/store-maintenance-command.js";
 export { type Saving, stored } from "./messenger/stored.js";
 export { MODEL_CATALOGUE_QUERY, type ModelCatalogueOptions } from "./model-catalogue-command.js";
-export { movedCommandError } from "./moved.js";
 export { window, withPaging } from "./paging.js";
 export { knownBeside, knownPermissionKeys, type PermissionKeyOf, unknownPermissionKeys } from "./permission-keys.js";
 export { asFirstWord, commandWords, liftProfile, refuseCommandName, rootOf, usableProfileName } from "./profile.js";

package/dist/cli/index.js

@@ -87,7 +87,6 @@ export { STEMS_EVERY_MS, STEMS_SLICE_MS, stemFills } from "./messenger/serve-ste
 export { storeSummary } from "./messenger/store-maintenance-command.js";
 export { stored } from "./messenger/stored.js";
 export { MODEL_CATALOGUE_QUERY } from "./model-catalogue-command.js";
-export { movedCommandError } from "./moved.js";
 export { window, withPaging } from "./paging.js";
 export { knownBeside, knownPermissionKeys, unknownPermissionKeys } from "./permission-keys.js";
 export { asFirstWord, commandWords, liftProfile, refuseCommandName, rootOf, usableProfileName } from "./profile.js";

package/dist/cli/messenger/context.js

@@ -3,12 +3,12 @@ import { servingProfiles } from "../../background/lock.js";
 import { FloodMemory, floodPathFor } from "../../sends/flood.js";
 import { ceilingRefusal, guardFor } from "../../sends/guard.js";
 import { DEFAULT_PACE, Pacer, pacePathFor } from "../../sends/pace.js";
-import { assertStatsPermissionsCurrent, CEILING_KEY, levelFor, readKeysForCommand, } from "../../sends/permissions.js";
+import { CEILING_KEY, levelFor, readKeysForCommand } from "../../sends/permissions.js";
 import { RecipientList, recipientsPathFor } from "../../sends/recipients.js";
 import { OFFLINE, servicesFor } from "../../services/index.js";
 import { openStore } from "../../store/store.js";
 import { baseContext, environmentOf } from "../context.js";
-import { knownPermissionKeys, unknownPermissionKeys } from "../permission-keys.js";
+import { refuseUnknownPermissionKeys } from "../permission-keys.js";
 import { asFirstWord } from "../profile.js";
 import { rootOf } from "../steps.js";
 import { recalledAccount, rememberAccount } from "./accounts.js";
@@ -325,7 +325,6 @@ const pathOf = (command) => {
 };
 /** `deny` stops a read too, before anything connects: what the profile may not see is never fetched. */
 const refuseDenied = (command, settings) => {
-    assertStatsPermissionsCurrent(pathOf(command), settings.permissions);
     for (const key of readKeysForCommand(pathOf(command))) {
         const { level, key: named } = levelFor(settings.permissions, key);
         if (level !== "deny")
@@ -356,9 +355,7 @@ export const messengerContext = (command, messenger, resolving = {}) => {
     const { profile } = base.settings;
     refuseDenied(command, base.settings);
     refuseLacking(messenger, pathOf(command));
-    for (const key of unknownPermissionKeys(base.settings.permissions, knownPermissionKeys(command, messenger.permissionKey))) {
-        throw new CliError("configuration_error", `permissions.${key} names no command — remove it with \`${app.command} ${asFirstWord(profile)}config unset permissions.${key}\``, { permission: key });
-    }
+    refuseUnknownPermissionKeys(command, base.settings.permissions, `${app.command} ${asFirstWord(profile)}config unset`, messenger.permissionKey);
     // Read when warning, not now: serve swaps the renderer's methods for log records after this.
     const warn = (text, warning) => base.renderer.warn(text, warning);
     const accountFor = () => {

package/dist/cli/permission-keys.d.ts

@@ -9,3 +9,5 @@ export declare const knownPermissionKeys: (command: Command, keyOf?: PermissionK
 /** The known keys one level under the unknown key's parent, to name in the refusal. */
 export declare const knownBeside: (key: PermissionKey, known: ReadonlySet<PermissionKey>) => PermissionKey[];
 export declare const unknownPermissionKeys: (levels: Readonly<Record<PermissionKey, unknown>>, known: ReadonlySet<PermissionKey>) => PermissionKey[];
+/** A saved key no command checks would do nothing, so the command refuses to run; `unset` names the fix. */
+export declare const refuseUnknownPermissionKeys: (command: Command, levels: Readonly<Record<PermissionKey, unknown>>, unset: string, keyOf?: PermissionKeyOf) => void;

package/dist/cli/permission-keys.js

@@ -1,4 +1,4 @@
-import { canonicalPermissionKey } from "../sends/permission-aliases.js";
+import { CliError } from "@wirecat/cli-base";
 import { CEILING_KEY, keyForCommand, WRITE_KEYS } from "../sends/permissions.js";
 const pathOf = (command) => {
     const words = [];
@@ -20,12 +20,12 @@ const everyCommand = (command) => [command, ...command.commands.flatMap(everyCom
 export const knownPermissionKeys = (command, keyOf = (one) => keyForCommand(pathOf(one)), extra = []) => {
     const known = new Set();
     const add = (key) => {
-        key = canonicalPermissionKey(key);
         for (let parts = key.split("."); parts.length > 0; parts = parts.slice(0, -1))
             known.add(parts.join("."));
     };
     for (const one of everyCommand(rootOf(command))) {
-        const key = keyOf(one);
+        const own = keyOf(one);
+        const key = own === undefined ? keyForCommand(pathOf(one)) : own;
         if (key)
             add(key);
     }
@@ -42,3 +42,10 @@ export const knownBeside = (key, known) => {
         .sort();
 };
 export const unknownPermissionKeys = (levels, known) => Object.keys(levels).filter((key) => key !== CEILING_KEY && !known.has(key));
+/** A saved key no command checks would do nothing, so the command refuses to run; `unset` names the fix. */
+export const refuseUnknownPermissionKeys = (command, levels, unset, keyOf) => {
+    const [key] = unknownPermissionKeys(levels, knownPermissionKeys(command, keyOf));
+    if (key === undefined)
+        return;
+    throw new CliError("configuration_error", `permissions.${key} names no command — remove it with \`${unset} permissions.${key}\``, { permission: key });
+};

package/dist/cli/preview.d.ts

@@ -1,8 +1,8 @@
 import type { Command } from "commander";
-import { type Level } from "../sends/permissions.js";
+import { type Level, type PermissionKey } from "../sends/permissions.js";
 export declare class PreviewComplete extends Error {
 }
-export declare const preview: (command: Command, permissions: Readonly<Record<string, Level>>) => {
+export declare const preview: (command: Command, permissions: Readonly<Record<string, Level>>, unset: string, keyOf?: (path: readonly string[]) => PermissionKey | null | undefined) => {
     preview: boolean;
     path: string[];
     permission: {

package/dist/cli/preview.js

@@ -1,15 +1,16 @@
 import { CliError } from "@wirecat/cli-base";
 import { metaOf } from "@wirecat/cli-base/commands";
 import { writes as writesAnything } from "@wirecat/cli-base/standards";
-import { assertStatsPermissionsCurrent, keyForCommand, levelFor, readKeysForCommand, WRITE_KEYS, } from "../sends/permissions.js";
+import { keyForCommand, levelFor, readKeysForCommand, WRITE_KEYS, } from "../sends/permissions.js";
 import { commandPathOf } from "./command-contract.js";
+import { refuseUnknownPermissionKeys } from "./permission-keys.js";
 export class PreviewComplete extends Error {
 }
-export const preview = (command, permissions) => {
+export const preview = (command, permissions, unset, keyOf) => {
     const path = commandPathOf(command);
+    refuseUnknownPermissionKeys(command, permissions, unset, keyOf && ((one) => keyOf(commandPathOf(one))));
     const key = keyForCommand(path);
     const level = key ? levelFor(permissions, key).level : "allow";
-    assertStatsPermissionsCurrent(path, permissions);
     for (const source of readKeysForCommand(path)) {
         if (levelFor(permissions, source).level === "deny")
             throw new CliError("permission_error", `this profile does not permit ${source}`, { permission: source });

package/dist/cli/program.js

@@ -25,9 +25,8 @@ import { installHelp } from "./help/first-screen.js";
 import { showInputFields } from "./input-fields.js";
 import { MAX_BUFFERED_INPUT, provideInputPolicy } from "./input-policy.js";
 import { checkJson, liftJson } from "./json-fields.js";
-import { movedCommandError } from "./moved.js";
 import { PreviewComplete, preview } from "./preview.js";
-import { commandWords, liftProfile, PROFILE_FREE, valuedOptions } from "./profile.js";
+import { asFirstWord, commandWords, liftProfile, PROFILE_FREE, valuedOptions } from "./profile.js";
 import { absolutePaths, relayTarget } from "./relay-route.js";
 import { settingsFor } from "./settings.js";
 import { assertSharedContracts } from "./shared-contracts.js";
@@ -377,7 +376,9 @@ const runOnce = async (argv, definition, options) => {
                 needsProfile: keyForCommand(path) !== null,
             });
             const permissions = "permissions" in resolved ? resolved.permissions : {};
-            renderAnswer(action, outputFor(action), itemOf(snakeKeys(preview(action, permissions))));
+            const unset = `${command} ${asFirstWord(resolved.profile)}config unset${path[0] === "bot" ? " --bot" : ""}`;
+            const previewed = preview(action, permissions, unset, definition.configuration?.permissionKey);
+            renderAnswer(action, outputFor(action), itemOf(snakeKeys(previewed)));
             throw new PreviewComplete();
         }
         // Not inside the scheduled run itself: its own failure is already on its way to last.json.
@@ -421,11 +422,6 @@ const runOnce = async (argv, definition, options) => {
         const settled = await settleFailure(failure, { definition, program, rest, profile, options });
         return report(streams, reporting, failed(definition, program, rest, failure, settled, debug));
     }
-    const failure = movedCommandError(program, rest);
-    if (failure !== undefined) {
-        const settled = await settleFailure(failure, { definition, program, rest, profile, options });
-        return report(streams, reporting, failed(definition, program, rest, failure, settled, debug));
-    }
     try {
         await control.race(() => program.parseAsync(rest, { from: "user" }));
         const code = exit.code ?? (process.exitCode === undefined ? 0 : Number(process.exitCode));

package/dist/cli/settings.d.ts

@@ -140,8 +140,6 @@ export interface ResolveOptions {
     needsProfile?: boolean;
     /** Read the config file without writing it: no default file. For a dry run. */
     readOnly?: boolean;
-    /** Skip moved permission keys instead of refusing them, so `config set` and `unset` can fix one. */
-    skipMovedPermissions?: boolean;
 }
 /** Where `profile` came from when none was named and the command needs none. */
 export declare const NONE_NAMED = "none named";

package/dist/cli/settings.js

@@ -4,7 +4,6 @@ import * as v from "valibot";
 import { AI_ENTRIES, resolveAISettings } from "../analysis/settings.js";
 import { parseDuration } from "../domain/duration.js";
 import { envName, readOnlyLockOf } from "../ports/app.js";
-import { canonicalPermissionKey } from "../sends/permission-aliases.js";
 import { assertOverridesTighten, CEILING_KEY, LEVELS, layerPermissions, permissionOverrides, RESOURCES, } from "../sends/permissions.js";
 import { storePath } from "../store/path.js";
 import { sharedConfigPath } from "../store/shared-config.js";
@@ -78,7 +77,6 @@ const SHARED_DEFAULTS_ONLY = {
     update_check: v.optional(flag),
     skill_hint: v.optional(flag),
 };
-const withoutMoved = (levels) => levels && Object.fromEntries(Object.entries(levels).filter(([key]) => canonicalPermissionKey(key) === key));
 /** Where `profile` came from when none was named and the command needs none. */
 export const NONE_NAMED = "none named";
 /** A name for a command that speaks for no account; never chosen for one that does. */
@@ -232,9 +230,7 @@ export const settingsFor = (app, extension = {}) => {
             : { value: false, from: "default" };
         const fileLayers = layers.map(([from, scope]) => [
             from,
-            options.skipMovedPermissions
-                ? withoutMoved(scope?.permissions)
-                : scope?.permissions,
+            scope?.permissions,
         ]);
         const overrides = permissionOverrides(flags.permission);
         assertOverridesTighten(overrides, layerPermissions(fileLayers).levels);

package/dist/mcp/surface.js

@@ -2,7 +2,6 @@ import { toJsonSchema, toStandardJsonSchema } from "@valibot/to-json-schema";
 import { CliError } from "@wirecat/cli-base";
 import * as v from "valibot";
 import { answerSchema, listOf } from "../cli/envelope.js";
-import { movedPath, movedPointer } from "../cli/moved.js";
 import { ENTITIES } from "../entities/index.js";
 import { agentArguments } from "./text.js";
 import { answered, commandOf, entryRunner, failed, inputOf, outputSchemaOf, READ, syncAllowedFor, UNTRUSTED, WRITE, } from "./tool.js";
@@ -103,9 +102,6 @@ withheld) => {
             const one = command === undefined ? undefined : commands[command];
             if (command === undefined || !one) {
                 withheld?.(normal(asked));
-                const moved = movedPath(normal(asked).split(" "), (path) => byNormal.has(path));
-                if (moved !== undefined)
-                    throw new CliError("validation_error", `no command "${asked}" here — ${movedPointer(moved)}`);
                 const near = nearest(commands, asked);
                 throw new CliError("validation_error", `no command "${asked}" here${near.length ? ` — did you mean ${near.map((name) => `"${name}"`).join(", ")}?` : ""}; ${prefix}_tools_search finds one`);
             }

package/dist/mcp/tool.d.ts

@@ -10,7 +10,7 @@ import { type EntityName } from "../entities/index.js";
 import { type AppErrors } from "../errors/reasons.js";
 import type { MessengerAdapter } from "../ports/messenger.js";
 import type { SendGuard } from "../sends/guard.js";
-import { type Permission, type PermissionKey } from "../sends/permissions.js";
+import { type PermissionKey } from "../sends/permissions.js";
 import { type Services } from "../services/index.js";
 import type { AccountKey, MessageStore } from "../store/store.js";
 import type { MessengerSession } from "./session.js";
@@ -50,8 +50,6 @@ interface Tool<S extends Input> {
     /** What it touches, where its hints cannot say: a read of the messenger kept in the store is not a write there. */
     effects?: Effects;
     _meta?: Record<string, unknown>;
-    /** A write, and what the profile's `allow` must name for it to be offered. */
-    permission?: Permission;
     /** Writes what the owner keeps, as its command (`isStoreChange`): `<PREFIX>_READ_ONLY` refuses it. */
     changesStore?: true;
     /** The CLI command it answers as, where its name does not spell it: `chats send-as`. Its level is read from it. */

package/dist/mcp/tool.js

@@ -12,7 +12,7 @@ import { failureContext } from "../errors/reasons.js";
 import { partialOutcome, startRecording } from "../runs/recording.js";
 import { newRunId } from "../runs/run.js";
 import { inRun } from "../runs/scope.js";
-import { assertStatsPermissionsCurrent, keyForCommand, levelFor, readKeysForCommand, } from "../sends/permissions.js";
+import { keyForCommand, levelFor, readKeysForCommand } from "../sends/permissions.js";
 import { onlineDeps, storeModeDeps } from "../services/deps.js";
 import { servicesFor } from "../services/index.js";
 import { agentJson } from "./text.js";
@@ -178,7 +178,6 @@ const callRunner = ({ messenger, session, withStore, withServices, defaults, aro
                 definition.check?.(args);
                 if (definition.changesStore)
                     refuseStoreChange(messenger.app, defaults.env);
-                assertStatsPermissionsCurrent(path, defaults.settings.permissions ?? {});
                 refuseLacking(messenger, path);
                 for (const permission of readKeysForCommand(path)) {
                     if (levelFor(defaults.settings.permissions ?? {}, permission).level === "deny")

package/dist/meetings/mcp/index.d.ts

@@ -38,6 +38,7 @@ export declare const meetingTools: ({
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -53,11 +54,11 @@ export declare const meetingTools: ({
             format?: undefined;
             transcript_id?: undefined;
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -75,11 +76,11 @@ export declare const meetingTools: ({
             format?: undefined;
             transcript_id?: undefined;
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -101,7 +102,6 @@ export declare const meetingTools: ({
                 minimum: number;
             };
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
@@ -188,6 +188,7 @@ export declare const meetingTools: ({
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -203,11 +204,11 @@ export declare const meetingTools: ({
             format?: undefined;
             transcript_id?: undefined;
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -225,11 +226,11 @@ export declare const meetingTools: ({
             format?: undefined;
             transcript_id?: undefined;
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -251,7 +252,6 @@ export declare const meetingTools: ({
                 minimum: number;
             };
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
@@ -338,6 +338,7 @@ export declare const meetingTools: ({
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -353,11 +354,11 @@ export declare const meetingTools: ({
             format?: undefined;
             transcript_id?: undefined;
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -375,11 +376,11 @@ export declare const meetingTools: ({
             format?: undefined;
             transcript_id?: undefined;
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -401,7 +402,6 @@ export declare const meetingTools: ({
                 minimum: number;
             };
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
@@ -488,6 +488,7 @@ export declare const meetingTools: ({
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -503,11 +504,11 @@ export declare const meetingTools: ({
             format?: undefined;
             transcript_id?: undefined;
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -525,11 +526,11 @@ export declare const meetingTools: ({
             format?: undefined;
             transcript_id?: undefined;
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -551,7 +552,6 @@ export declare const meetingTools: ({
                 minimum: number;
             };
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
@@ -638,6 +638,7 @@ export declare const meetingTools: ({
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -653,11 +654,11 @@ export declare const meetingTools: ({
             format?: undefined;
             transcript_id?: undefined;
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -675,11 +676,11 @@ export declare const meetingTools: ({
             format?: undefined;
             transcript_id?: undefined;
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;
         } | {
+            limit?: undefined;
             event_id?: undefined;
             series_id?: undefined;
             page?: undefined;
@@ -701,7 +702,6 @@ export declare const meetingTools: ({
                 minimum: number;
             };
             query?: undefined;
-            limit?: undefined;
             scan_limit?: undefined;
             max_read_bytes?: undefined;
             cursor?: undefined;

package/dist/parity/manifest.js

@@ -1,4 +1,3 @@
-import { MOVED_TO_MEMO } from "../cli/moved.js";
 export const longName = (flags) => flags.split(/[\s,|]+/).find((part) => part.startsWith("--")) ?? flags;
 const presence = (entry) => (typeof entry === "string" ? { in: entry } : entry);
 /** `true` the CLI must have it, `false` it must not, `undefined` it is planned and either passes. */
@@ -93,9 +92,6 @@ export const manifestProblems = (manifest) => {
         }
         optionEntries(path, row.options ?? {});
     }
-    for (const path of Object.keys(manifest.commands))
-        if (Object.keys(MOVED_TO_MEMO).some((moved) => path === moved || path.startsWith(`${moved} `)))
-            problems.push(`${path}: moved to memo (src/cli/moved.ts), so a source tool has no row for it`);
     for (const [name, option] of Object.entries(manifest.options)) {
         if (!option.meaning)
             problems.push(`options ${name}: no meaning`);

package/dist/sends/index.d.ts

@@ -3,7 +3,7 @@ export { type FloodDeadline, FloodMemory, type FloodState, FROZEN_HOLD_MS, flood
 export { type Asker, type GuardRequest, guardFor, type SendGuard, type SendGuardOptions, sendGuard, sharedJournal, } from "./guard.js";
 export { currentOperation, guardedWrite, type Operated } from "./guarded.js";
 export { type AccountAction, type ChatAction, type SendEntry, SendJournal, type SendKind, type SendOutcome, sendsPathFor, } from "./journal.js";
-export { assertStatsPermissionsCurrent, CEILING_KEY, DEFAULT_PERMISSIONS, keyForCommand, keyForWrite, LEVELS, type Level, layerPermissions, levelFor, PERMISSIONS, type Permission, type PermissionKey, permissionFor, permissionOverrides, readKeysForCommand, skipFlagFor, WRITE_KEYS, } from "./permissions.js";
+export { CEILING_KEY, DEFAULT_PERMISSIONS, keyForCommand, keyForWrite, LEVELS, type Level, layerPermissions, levelFor, type PermissionKey, permissionOverrides, readKeysForCommand, skipFlagFor, WRITE_KEYS, } from "./permissions.js";
 export { type Recipient, RecipientList, recipientsPathFor } from "./recipients.js";
 export { newOperationId, newSendId } from "./send-id.js";
 export { MAX_BUFFERED_UPLOAD_BYTES, readUpload, refusedPlace, uploadBlob, uploadBytes, uploadSize, } from "./upload.js";

package/dist/sends/index.js

@@ -2,7 +2,7 @@ export { FloodMemory, FROZEN_HOLD_MS, floodPathFor, LIMITED_HOLD_MS, } from "./f
 export { guardFor, sendGuard, sharedJournal, } from "./guard.js";
 export { currentOperation, guardedWrite } from "./guarded.js";
 export { SendJournal, sendsPathFor, } from "./journal.js";
-export { assertStatsPermissionsCurrent, CEILING_KEY, DEFAULT_PERMISSIONS, keyForCommand, keyForWrite, LEVELS, layerPermissions, levelFor, PERMISSIONS, permissionFor, permissionOverrides, readKeysForCommand, skipFlagFor, WRITE_KEYS, } from "./permissions.js";
+export { CEILING_KEY, DEFAULT_PERMISSIONS, keyForCommand, keyForWrite, LEVELS, layerPermissions, levelFor, permissionOverrides, readKeysForCommand, skipFlagFor, WRITE_KEYS, } from "./permissions.js";
 export { RecipientList, recipientsPathFor } from "./recipients.js";
 export { newOperationId, newSendId } from "./send-id.js";
 export { MAX_BUFFERED_UPLOAD_BYTES, readUpload, refusedPlace, uploadBlob, uploadBytes, uploadSize, } from "./upload.js";

package/dist/sends/permissions.d.ts

@@ -1,13 +1,4 @@
 import type { AccountAction, ChatAction, SendKind } from "./journal.js";
-/**
- * What a profile may be allowed to do (max-cli `CLI-37`, `NEED-251`). One name per thing the owner would
- * recognise, so `sessions` — which logs the owner out of their phone — never rides along with
- * adding a contact. There is no `*`: "everything" is not setting `allow` at all, and a wildcard
- * would switch on `delete` without anyone naming it.
- */
-export declare const PERMISSIONS: readonly ["send", "forward", "reaction", "edit", "pin", "read", "delete", "groups", "contacts", "profile", "folders", "sessions"];
-export type Permission = (typeof PERMISSIONS)[number];
-export declare const permissionFor: (kind: SendKind, action?: string) => Permission;
 /** What a profile may do with one command path — the standard's "Permissions". */
 export declare const LEVELS: readonly ["deny", "readonly", "ask", "allow"];
 export type Level = (typeof LEVELS)[number];
@@ -32,8 +23,6 @@ export declare const isBotApi: (path: readonly string[]) => boolean;
 export declare const botApiAllowed: (levels: Readonly<Record<PermissionKey, Level>>) => boolean;
 /** The resources at the top of the command tree, which `readOnly` and `allow` turn read-only as a whole. */
 export declare const RESOURCES: readonly ["messages", "drafts", "reactions", "polls", "topics", "chats", "contacts", "account", "bot", "conversations", "tags", "mentions", "search", "searches", "tasks", "replies", "attachments", "stats", "store", "metadata", "mcp", "server", "models", "schedule", "doctor", "images"];
-/** The command path an old `allow` word stood for, as one key — what an MCP tool's `permission` is checked against. */
-export declare const keyOfWord: (word: Permission) => PermissionKey;
 /**
  * Layers come nearest first. A key a nearer layer sets hides that key and every key under it in the
  * farther layers, so a profile's `messages: readonly` is not undone by `messages.delete: allow` in
@@ -67,8 +56,6 @@ export declare const writeOfKey: (key: PermissionKey) => {
 };
 /** Every key a write is checked against that a command path may not spell out. */
 export declare const WRITE_KEYS: readonly PermissionKey[];
-/** Statistics and searches moved; a deny under an old path would stop applying unseen, so the command refuses. */
-export declare const assertStatsPermissionsCurrent: (path: readonly string[], permissions: Readonly<Record<string, Level>>) => void;
 export declare const readKeysForCommand: (path: readonly string[]) => PermissionKey[];
 /**
  * The key a command path is checked against: `null` for housekeeping, which no level stops, and

package/dist/sends/permissions.js

@@ -1,66 +1,4 @@
 import { CliError } from "@wirecat/cli-base";
-import { canonicalPermissionKey, canonicalPermissions } from "./permission-aliases.js";
-/**
- * What a profile may be allowed to do (max-cli `CLI-37`, `NEED-251`). One name per thing the owner would
- * recognise, so `sessions` — which logs the owner out of their phone — never rides along with
- * adding a contact. There is no `*`: "everything" is not setting `allow` at all, and a wildcard
- * would switch on `delete` without anyone naming it.
- */
-export const PERMISSIONS = [
-    "send",
-    "forward",
-    "reaction",
-    "edit",
-    "pin",
-    "read",
-    "delete",
-    "groups",
-    "contacts",
-    "profile",
-    "folders",
-    "sessions",
-];
-const ACCOUNT = {
-    "contact-add": "contacts",
-    "contact-remove": "contacts",
-    "contact-import": "contacts",
-    "contact-rename": "contacts",
-    "contact-block": "contacts",
-    "contact-unblock": "contacts",
-    profile: "profile",
-    "folder-create": "folders",
-    "folder-update": "folders",
-    "folder-delete": "folders",
-    "folder-order": "folders",
-    "folder-join": "folders",
-    "sessions-end": "sessions",
-    "chat-mute": "profile",
-    "chat-unmute": "profile",
-    "chat-archive": "profile",
-    "chat-unarchive": "profile",
-    "chat-pin": "profile",
-    "chat-unpin": "profile",
-    "chat-mark-unread": "profile",
-    "message-star": "profile",
-    "message-unstar": "profile",
-    privacy: "profile",
-};
-export const permissionFor = (kind, action) => {
-    switch (kind) {
-        case "message":
-            return "send";
-        case "chat":
-            return "groups";
-        case "account": {
-            const permission = ACCOUNT[action];
-            if (!permission)
-                throw new Error(`an account change without a known action: ${action}`);
-            return permission;
-        }
-        default:
-            return kind;
-    }
-};
 /** What a profile may do with one command path — the standard's "Permissions". */
 export const LEVELS = ["deny", "readonly", "ask", "allow"];
 /** The deletions nobody gets back: the word that skips their question is `--allow-dangerous`, never `--yes`. */
@@ -148,47 +86,6 @@ export const RESOURCES = [
     "doctor",
     "images",
 ];
-const OLD_WORDS = {
-    send: ["messages.send", "polls.create", "chats.start"],
-    forward: ["messages.forward"],
-    reaction: ["reactions", "polls.vote", "messages.press", "chats.app"],
-    edit: ["messages.edit", "polls.close"],
-    pin: ["messages.pin", "messages.unpin"],
-    read: ["chats.mark-read"],
-    delete: ["messages.delete", "chats.delete", "chats.clear"],
-    groups: [
-        "chats.create",
-        "chats.update",
-        "chats.join",
-        "chats.leave",
-        "chats.members",
-        "chats.admins",
-        "chats.links",
-        "chats.requests",
-        "chats.moderate",
-        "topics.enable",
-        "topics.create",
-        "topics.edit",
-        "topics.delete",
-    ],
-    contacts: ["contacts"],
-    profile: ["account.update", "account.privacy.set", "chats.mute", "messages.star", "messages.unstar"],
-    folders: ["chats.folders"],
-    sessions: ["account.sessions.end"],
-};
-/** The command path an old `allow` word stood for, as one key — what an MCP tool's `permission` is checked against. */
-export const keyOfWord = (word) => OLD_WORDS[word][0];
-/**
- * A bot's old words meant its own writes: `profile` was its command menu, and `read` was taking
- * updates, which every level but `deny` allows now.
- */
-const botKeysOf = (word) => {
-    if (word === "profile")
-        return ["bot.commands"];
-    if (word === "read")
-        return [];
-    return OLD_WORDS[word].map((key) => `bot.${key}`);
-};
 /**
  * Layers come nearest first. A key a nearer layer sets hides that key and every key under it in the
  * farther layers, so a profile's `messages: readonly` is not undone by `messages.delete: allow` in
@@ -199,7 +96,7 @@ export const layerPermissions = (layers) => {
     const sources = {};
     for (const [from, layer] of layers) {
         const nearer = Object.keys(levels);
-        for (const [key, level] of Object.entries(canonicalPermissions(layer ?? {}))) {
+        for (const [key, level] of Object.entries(layer ?? {})) {
             if (nearer.some((named) => key === named || key.startsWith(`${named}.`)))
                 continue;
             levels[key] = level;
@@ -224,11 +121,6 @@ const nearest = (levels, key) => {
     }
     return undefined;
 };
-/**
- * `chats unmute` was checked as `chats.mute` before it had its own key; a config that names only the old key
- * keeps meaning it, so a `chats.mute: readonly` written then still stops an unmute.
- */
-const FORMER_KEYS = { "chats.unmute": "chats.mute" };
 /**
  * The most specific key the owner set wins. A built-in default (`DEFAULT_PERMISSIONS`) only ever
  * tightens: against a broader key of the owner's, the stricter of the two holds — so
@@ -236,16 +128,11 @@ const FORMER_KEYS = { "chats.unmute": "chats.mute" };
  * A path nothing names is allowed.
  */
 export const levelFor = (permissions, key, defaults = DEFAULT_PERMISSIONS) => {
-    permissions = canonicalPermissions(permissions);
-    key = canonicalPermissionKey(key);
     const found = profileLevel(permissions, key, defaults);
     const ceiling = permissions[CEILING_KEY];
     return ceiling && ORDER[ceiling] < ORDER[found.level] ? { level: ceiling, key: CEILING_KEY } : found;
 };
 const profileLevel = (permissions, key, defaults) => {
-    const former = FORMER_KEYS[key];
-    if (former !== undefined && permissions[key] === undefined)
-        return profileLevel(permissions, former, defaults);
     const own = nearest(permissions, key);
     const builtIn = nearest(defaults, key);
     if (!builtIn || (own && own.depth >= builtIn.depth))
@@ -254,7 +141,15 @@ const profileLevel = (permissions, key, defaults) => {
         return { level: builtIn.level, key: builtIn.key };
     return { level: own.level, key: own.key };
 };
-const CHAT_KEYS = { settings: "chats.update" };
+const CHAT_KEYS = {
+    settings: "chats.update",
+    "requests.accept": "chats.requests.confirm",
+    "requests.decline": "chats.requests.reject",
+    "link.create": "chats.links.create",
+    "link.reset": "chats.links.reset",
+    "link.revoke": "chats.links.remove",
+    "link.update": "chats.links.update",
+};
 const ACCOUNT_KEYS = {
     "contact-add": "contacts.add",
     "contact-remove": "contacts.remove",
@@ -292,7 +187,7 @@ const KIND_KEYS = {
 /** The command path a guarded write belongs to, when the caller did not name it. */
 export const keyForWrite = (kind, action) => {
     if (kind === "chat")
-        return canonicalPermissionKey(CHAT_KEYS[action ?? ""] ?? `chats.${action ?? "update"}`);
+        return CHAT_KEYS[action] ?? `chats.${action ?? "update"}`;
     if (kind === "account") {
         const key = ACCOUNT_KEYS[action];
         if (!key)
@@ -303,7 +198,6 @@ export const keyForWrite = (kind, action) => {
 };
 /** `keyForWrite` read backwards, as far as a command's key says it: an unpin is a `pin`, a chat change names its action. */
 export const writeOfKey = (key) => {
-    key = canonicalPermissionKey(key);
     const account = Object.entries(ACCOUNT_KEYS).find(([, named]) => named === key)?.[0];
     if (account)
         return { kind: "account", action: account };
@@ -399,8 +293,7 @@ export const WRITE_KEYS = [
         ...Object.values(KIND_KEYS),
         ...Object.values(ACCOUNT_KEYS),
         ...Object.values(CHAT_KEYS),
-        ...PERMISSIONS.flatMap((word) => [...OLD_WORDS[word], ...botKeysOf(word)]),
-    ].map(canonicalPermissionKey)),
+    ]),
 ];
 /** Commands that look after the tool and its files and never show a message: no level stops them. */
 const HOUSEKEEPING = new Set([
@@ -430,21 +323,6 @@ const BOT_HOUSEKEEPING = new Set(["auth", "list", "sends", "recipients", "mcp"])
 const STORE_MAINTENANCE = new Set(["info", "check", "copies"]);
 /** Commands outside `messages` that print what people wrote, so `deny messages` reaches them too. */
 const SHOW_MESSAGES = new Set(["inbox", "review", "watch", "serve", "store", "conversations"]);
-/** Before every search moved under `search` (2026-10-09). */
-const OLD_SEARCH_KEY = /^(bot\.)?(messages|conversations|topics)\.search(?:\.|$)/;
-/** Statistics and searches moved; a deny under an old path would stop applying unseen, so the command refuses. */
-export const assertStatsPermissionsCurrent = (path, permissions) => {
-    if (path[0] === "bot") {
-        assertStatsPermissionsCurrent(path.slice(1), permissions);
-        return;
-    }
-    if (path[0] === "search" && Object.keys(permissions).some((key) => OLD_SEARCH_KEY.test(key)))
-        throw new CliError("configuration_error", "search permission paths have moved — rename messages.search, conversations.search and topics.search to search.messages, search.conversations and search.topics", { retryable: false });
-    if (path[0] !== "stats")
-        return;
-    if (Object.keys(permissions).some((key) => /^(bot\.)?(messages|chats|tasks)\.stats(?:\.|$)/.test(key)))
-        throw new CliError("configuration_error", "statistics permission paths have moved — rename messages.stats, chats.stats and tasks.stats to stats.messages.show, stats.chats.show and stats.tasks.show", { retryable: false });
-};
 export const readKeysForCommand = (path) => {
     if (path[0] === "bot")
         return readKeysForCommand(path.slice(1)).map((key) => `bot.${key}`);
@@ -488,7 +366,6 @@ export const readKeysForCommand = (path) => {
 export const keyForCommand = (path) => {
     if (path.length === 0)
         return null;
-    path = canonicalPermissionKey(path.join(".")).split(".");
     const [top, next] = path;
     if (top === "bot") {
         if (next === undefined || BOT_HOUSEKEEPING.has(next))
@@ -500,7 +377,7 @@ export const keyForCommand = (path) => {
         return path.join(".");
     if (top === undefined || HOUSEKEEPING.has(top) || (top === "search" && next === "runs"))
         return null;
-    // Picture models moved from `models image` (0.270.0); a model is housekeeping wherever it is listed.
+    // A model is housekeeping wherever it is listed.
     if (top === "images" && next === "models")
         return null;
     if (top === "attachments" && (next === "check" || next === "jobs"))
@@ -513,7 +390,7 @@ export const keyForCommand = (path) => {
     if (top === "conversations" && next === "links")
         return path[2] === "rebuild" ? "conversations.links.rebuild" : "conversations.links";
     // Vectors are written to the local store only, and the text never leaves the machine (phase 5 E10).
-    if ((top === "conversations" && next === "embeddings") ||
+    if ((top === "conversations" && (next === "embeddings" || next === "embed")) ||
         (top === "images" && next === "embed") ||
         (top === "conversations" && next === "rebuild"))
         return "conversations.embeddings";
@@ -526,8 +403,6 @@ export const keyForCommand = (path) => {
         return next === "rebuild" || next === "confirm" || next === "reject" ? `mentions.${next}` : "messages";
     if (top === "store" && (next === "gaps" || next === "jobs"))
         return path.join(".");
-    if (top === "messages" && next === "sync")
-        return "messages";
     if (SHOW_MESSAGES.has(top) || (top === "contacts" && (next === "context" || next === "prepare" || next === "events")))
         return "messages";
     if (RESOURCES.includes(top))
@@ -544,12 +419,10 @@ export const permissionOverrides = (entries = []) => {
             throw new CliError("validation_error", "--permission takes a command path and level, e.g. messages.send=allow (deny, readonly, ask, allow)");
         levels[key] = level;
     }
-    return canonicalPermissions(levels);
+    return levels;
 };
 /** No startup flag grants access: an override may narrow the profile's level, never lift it or a key under it. */
 export const assertOverridesTighten = (overrides, profile) => {
-    overrides = canonicalPermissions(overrides);
-    profile = canonicalPermissions(profile);
     for (const [key, level] of Object.entries(overrides)) {
         const under = Object.keys(profile).filter((named) => named.startsWith(`${key}.`));
         const lifted = [key, ...under].find((named) => ORDER[level] > ORDER[levelFor(profile, named).level]);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wirecat/cli-core",
-  "version": "0.420.0",
+  "version": "0.421.0",
   "description": "The messenger-neutral half of a messaging CLI: domain model, message locators, rendering, name resolution, the SQLite seam, the command skeleton and shared read commands, the send guard, run records and the message store",
   "license": "Apache-2.0",
   "author": "Viacheslav Ptsarev",

package/dist/cli/moved.d.ts

@@ -1,18 +0,0 @@
-import { CliError } from "@wirecat/cli-base";
-import type { Command } from "commander";
-/**
- * Commands a source tool no longer has, each with the memo command that does the job
- * (docs/dev/TOOL-BOUNDARIES.md). The CLI and the MCP server answer with the pointer instead of
- * "unknown command"; a path the program still mounts never reaches it.
- */
-export declare const MOVED_TO_MEMO: Readonly<Record<string, {
-    what: string;
-    memo: string;
-}>>;
-/** Retired spellings are guidance only; none is mounted as a command alias. */
-export declare const RENAMED_COMMANDS: Readonly<Record<string, string>>;
-export declare const movedPointer: (path: string) => string | undefined;
-/** The longest moved path the words start with, unless the program still has it. */
-export declare const movedPath: (words: readonly string[], has: (path: string) => boolean) => string | undefined;
-/** The pointer for a moved or renamed path in `args`, for a CLI that parses without `run`. */
-export declare const movedCommandError: (program: Command, args: readonly string[]) => CliError | undefined;

package/dist/cli/moved.js

@@ -1,72 +0,0 @@
-import { CliError } from "@wirecat/cli-base";
-import { commandAt } from "./steps.js";
-/**
- * Commands a source tool no longer has, each with the memo command that does the job
- * (docs/dev/TOOL-BOUNDARIES.md). The CLI and the MCP server answer with the pointer instead of
- * "unknown command"; a path the program still mounts never reaches it.
- */
-export const MOVED_TO_MEMO = {
-    "search mail": { what: "mail is searched by the separate memo CLI", memo: "memo search mail …" },
-};
-/** Retired spellings are guidance only; none is mounted as a command alias. */
-export const RENAMED_COMMANDS = {
-    "contacts alias rm": "contacts aliases remove",
-    "contacts alias": "contacts aliases",
-    "contacts profile": "contacts info",
-    "contacts timeline": "contacts events",
-    "chats link revoke": "chats links remove",
-    "chats link": "chats links",
-    "chats members audit": "chats members check",
-    "chats requests accept": "chats requests confirm",
-    "chats requests decline": "chats requests reject",
-    "metadata get": "metadata show",
-    "metadata refresh": "metadata sync",
-    "tasks plan": "tasks update",
-    "tags auto": "tags rebuild",
-    "attachments text set": "attachments update",
-    "conversations build": "conversations links rebuild",
-    "conversations embed status": "conversations embeddings status",
-    "conversations embed clear": "conversations embeddings clear",
-    "conversations batches next": "conversations batches show",
-    "conversations consents revoke": "conversations consents remove",
-    "doctor report create": "doctor reports create",
-    "doctor report": "doctor reports show",
-    "mcp setup": "mcp add",
-    "mcp doctor": "mcp check",
-    "commands schema": "commands info",
-    "bot store fetch": "bot messages sync",
-    "store gaps plan": "store gaps show",
-    "store reindex": "store rebuild",
-    "stats messages counters refresh": "stats messages counters sync",
-    "models text key": "models keys",
-    "models audio list": "models list kind:audio",
-    "models text list": "models list kind:text",
-    "models audio download": "models download",
-    "models text download": "models download",
-};
-export const movedPointer = (path) => {
-    const renamed = RENAMED_COMMANDS[path];
-    if (renamed)
-        return `use \`${renamed}\``;
-    const moved = MOVED_TO_MEMO[path];
-    return moved && `${moved.what}: install @wirecat/cli-memo, then \`${moved.memo}\``;
-};
-/** The longest moved path the words start with, unless the program still has it. */
-export const movedPath = (words, has) => [...Object.keys(MOVED_TO_MEMO), ...Object.keys(RENAMED_COMMANDS)]
-    .filter((path) => path.split(" ").every((word, at) => words[at] === word))
-    .sort((a, b) => b.length - a.length)
-    .find((path) => !has(path));
-const mountedOrArgument = (program, path) => {
-    const words = path.split(" ");
-    return words.some((_, at) => {
-        const command = commandAt(program, words.slice(0, at + 1).join(" "));
-        return command !== undefined && (at === words.length - 1 || command.commands.length === 0);
-    });
-};
-/** The pointer for a moved or renamed path in `args`, for a CLI that parses without `run`. */
-export const movedCommandError = (program, args) => {
-    const moved = movedPath(args.filter((word) => !word.startsWith("-")), (path) => mountedOrArgument(program, path));
-    return moved === undefined
-        ? undefined
-        : new CliError("validation_error", `\`${program.name()} ${moved}\` is not here — ${movedPointer(moved)}`);
-};

package/dist/sends/permission-aliases.d.ts

@@ -1,5 +0,0 @@
-import type { Level } from "./permissions.js";
-/** Canonical names for internal permission keys; saved moved paths are refused below. */
-export declare const canonicalPermissionKey: (key: string) => string;
-/** WC-PERM-8: a moved saved path must name the replacement before any command runs. */
-export declare const canonicalPermissions: (levels: Readonly<Record<string, Level>>) => Record<string, Level>;

package/dist/sends/permission-aliases.js

@@ -1,50 +0,0 @@
-import { CliError } from "@wirecat/cli-base";
-const RENAMED = [
-    ["models.audio.download", "models.download"],
-    ["models.text.download", "models.download"],
-    ["models.text.key", "models.keys"],
-    ["models.audio", "models"],
-    ["models.text", "models"],
-    ["doctor.report", "doctor.reports"],
-    ["contacts.aliases.rm", "contacts.aliases.remove"],
-    ["contacts.alias.rm", "contacts.aliases.remove"],
-    ["contacts.alias", "contacts.aliases"],
-    ["contacts.profile", "contacts.info"],
-    ["contacts.timeline", "contacts.events"],
-    ["chats.links.revoke", "chats.links.remove"],
-    ["chats.link.revoke", "chats.links.remove"],
-    ["chats.link", "chats.links"],
-    ["chats.members.audit", "chats.members.check"],
-    ["chats.requests.accept", "chats.requests.confirm"],
-    ["chats.requests.decline", "chats.requests.reject"],
-    ["metadata.get", "metadata.show"],
-    ["metadata.refresh", "metadata.sync"],
-    ["tasks.plan", "tasks.update"],
-    ["tags.auto", "tags.rebuild"],
-    ["attachments.text.set", "attachments.update"],
-    ["attachments.text", "attachments.update"],
-    ["conversations.build", "conversations.links.rebuild"],
-    ["conversations.embed", "conversations.embeddings"],
-    ["conversations.batches.next", "conversations.batches.show"],
-    ["conversations.consents.revoke", "conversations.consents.remove"],
-    ["stats.messages.counters.refresh", "stats.messages.counters.sync"],
-    ["store.fetch", "messages.sync"],
-    ["store.gaps.plan", "store.gaps.show"],
-    ["store.reindex", "store.rebuild"],
-];
-/** Canonical names for internal permission keys; saved moved paths are refused below. */
-export const canonicalPermissionKey = (key) => {
-    if (key.startsWith("bot."))
-        return `bot.${canonicalPermissionKey(key.slice(4))}`;
-    const renamed = RENAMED.find(([old]) => key === old || key.startsWith(`${old}.`));
-    return renamed ? renamed[1] + key.slice(renamed[0].length) : key;
-};
-/** WC-PERM-8: a moved saved path must name the replacement before any command runs. */
-export const canonicalPermissions = (levels) => {
-    for (const key of Object.keys(levels)) {
-        const canonical = canonicalPermissionKey(key);
-        if (key !== canonical)
-            throw new CliError("configuration_error", `permission path moved — rename permissions.${key} to permissions.${canonical}`, { permission: key, replacement: canonical, retryable: false });
-    }
-    return { ...levels };
-};