@wirecat/cli-core 0.420.0 → 0.422.0

package/CHANGELOG.md

@@ -7,6 +7,29 @@ shape of this file.
 
 ## Unreleased
 
+## 0.422.0 — 25.10.2026
+
+### Added
+
+- **`AppIdentity.messenger`: set it to `false` in a CLI that is not a messenger** (a notes, files or calendar CLI from cli-template). The shared program, `commands`, `config` and MCP text then stop speaking of chats and messages: the profile example in the program description names the CLI's own first command, `commands info`'s example is `<cmd> commands info commands`, `--brief` and `--full` describe "found items", `--trace` and `--record` say "never content", and `config show` and the `config set`/`unset` list leave out `sender_colors`. Unset means a messenger: tg, max and wa print exactly what they did. A CLI that sets it refreshes its contract snapshots once.
+- **The MCP `_tools_search`, `_read` and `_write` tools speak neutrally when the catalogue has no `messages` commands**: task words "list", "show", "change a setting", one of the CLI's own reading commands as the example, and "creates, edits, deletes" for writes. No setting is needed; a messenger's catalogue is unchanged.
+
+### Changed — may break callers
+
+- **The languages search stems are one table, `LANGUAGES`, and each entry now names its Hunspell dictionary** (`dictionary: "dictionary-ru"`). `LANGUAGES` from `/cli` keeps its other fields. `LATIN_STEMMERS` is now `english, spanish, none`, in the order the error for an unknown stemmer already printed, so the `allowed` list of a `stemmer.invalid` error comes in that order too. A caller that compared that list in order sorts it first.
+
+## 0.421.0 — 25.10.2026
+
+### Changed — may break callers
+
+- **Old command names and old permission keys are no longer recognised.** A retired command path (`contacts profile`, `bot store fetch`, `search mail` and the rest) gets the ordinary "unknown command" answer, on the command line and over MCP, with no pointer to a replacement. A saved permission key is read only as written: nothing maps an old key to a new one, and `chats.mute` no longer covers `chats unmute`. Removed with it: `movedCommandError` from `/cli`; `PERMISSIONS`, `Permission`, `permissionFor` and `assertStatsPermissionsCurrent` from `/sends`; the `permission` field of an MCP tool definition; and the `skipMovedPermissions` option of `resolveSettings`. A CLI that imports one of them drops the import; nothing replaces them.
+- **Bot commands and `--dry-run` refuse a saved permission key that no command checks**, as messenger commands already did. They stop with a `configuration_error` that names the key and the `config unset` that removes it: "permissions.bot.store.fetch names no command — remove it with \`tg sales config unset --bot permissions.bot.store.fetch\`". `config show`, `set` and `unset` still run, so the file can be repaired. Before, a bot command did not look at the keys at all, and an old key was quietly renamed or ignored.
+- **`messages sync` and `bot messages sync` are checked as `messages.sync` and `bot.messages.sync`**, their own paths. A level on `messages` or `bot.messages` still applies to them; `commands --json` now reports the longer key.
+
+### Fixed
+
+- **A deny saved on the sync command itself now stops it.** `permissions.bot.messages.sync: deny` was ignored, because `bot messages sync` was checked under `bot.messages`; `permissions.messages.sync: deny` could not be saved at all and was refused as naming no command. Both are now honoured on the command line, in MCP discovery and by the MCP server. Bot commands also refuse a denied read (`bot.messages: deny` stops `bot messages list` and `bot messages sync`) before they connect, as messenger commands already did.
+
 ## 0.420.0 — 25.10.2026
 
 ### Changed — may break callers

package/dist/cli/bot/context.d.ts

@@ -1,7 +1,8 @@
 import type { Command } from "commander";
 import { SendJournal } from "../../sends/journal.js";
-import type { Level, PermissionKey } from "../../sends/permissions.js";
+import { type Level, type PermissionKey } from "../../sends/permissions.js";
 import { RecipientList } from "../../sends/recipients.js";
+import type { Settings } from "../settings.js";
 import type { BotAdapter, BotChatRef, BotConnectOptions, BotMessenger } from "./port.js";
 import { ChatRegistry } from "./registry.js";
 import { BotTokenStore } from "./token.js";
@@ -9,7 +10,7 @@ import { BotTokenStore } from "./token.js";
 export declare const botWords: (bot: BotMessenger, profile: string) => string;
 /** What a bot command needs, resolved once: the bot's settings, its token, its lists. */
 export declare const botContext: (command: Command, bot: BotMessenger) => {
-    settings: import("../settings.js").Settings;
+    settings: Settings;
     renderer: import("@wirecat/cli-base").Renderer;
     format: import("@wirecat/cli-base").RenderFormat;
     color: boolean;

package/dist/cli/bot/context.js

@@ -2,16 +2,30 @@ import { CliError } from "@wirecat/cli-base";
 import { pickChat } from "../../resolve.js";
 import { sendGuard } from "../../sends/guard.js";
 import { SendJournal } from "../../sends/journal.js";
+import { levelFor, readKeysForCommand } from "../../sends/permissions.js";
 import { RecipientList } from "../../sends/recipients.js";
 import { readSecret } from "../../terminal/prompt.js";
+import { commandPathOf } from "../command-contract.js";
 import { baseContext, secretInputOf } from "../context.js";
 import { terminalAsker } from "../messenger/ask.js";
+import { refuseUnknownPermissionKeys } from "../permission-keys.js";
 import { asFirstWord } from "../profile.js";
 import { botCopy } from "./copy.js";
 import { botFiles, ChatRegistry } from "./registry.js";
 import { BotTokenStore } from "./token.js";
 /** How the owner types this bot — `max sales bot` — so a refusal names the command that fixes it. */
 export const botWords = (bot, profile) => `${bot.app.command} ${asFirstWord(profile)}bot`;
+/** What a messenger command refuses before it connects, for a bot: an unknown key, then a denied read. */
+const refuseBotPermissions = (command, bot, settings) => {
+    refuseUnknownPermissionKeys(command, settings.permissions, `${bot.app.command} ${asFirstWord(settings.profile)}config unset --bot`);
+    for (const key of readKeysForCommand(commandPathOf(command))) {
+        const { level, key: named } = levelFor(settings.permissions, key);
+        if (level !== "deny")
+            continue;
+        throw new CliError("permission_error", `bot profile ${settings.profile} denies ${key} (permissions.${named} is deny, from the ` +
+            `${settings.permissionSources[named ?? ""] ?? "default"})`, { permission: key });
+    }
+};
 /** What a bot command needs, resolved once: the bot's settings, its token, its lists. */
 export const botContext = (command, bot) => {
     const base = baseContext(command, (flags, options) => bot.resolveSettings(flags, { ...options, kind: "bot" }));
@@ -21,6 +35,7 @@ export const botContext = (command, bot) => {
     const tokens = bot.tokenStore?.(command, profile) ??
         new BotTokenStore({ app: bot.app, profile, env, ...(keyring ? { keyring } : {}) });
     const words = botWords(bot, profile);
+    refuseBotPermissions(command, bot, settings);
     const registry = bot.registry?.(command, profile) ?? new ChatRegistry(bot.app, profile, env);
     const recipients = () => new RecipientList(files.recipients, words);
     const journal = () => new SendJournal(files.journal, { service: bot.app.command, version: bot.app.version });

package/dist/cli/commands-command.js

@@ -59,7 +59,7 @@ export const commandsCommand = (app) => {
     });
     command.addCommand(annotate(new Command("info"), {
         effects: NO_EFFECTS,
-        examples: [`${app.command} commands info messages list`],
+        examples: [`${app.command} commands info ${app.messenger === false ? "commands" : "messages list"}`],
     })
         .description(DISCOVERY_DESCRIPTIONS.info)
         .argument("[path...]", "one command path; without one, export schemas, error reasons and explicit overrides")

package/dist/cli/config-command.d.ts

@@ -2,10 +2,6 @@ import { Command } from "commander";
 import { type AppIdentity } from "../ports/app.js";
 import { type PermissionKeyOf } from "./permission-keys.js";
 import { type Configuration } from "./settings.js";
-/**
- * The settings in force and where each came from, and changing them. Printed whole: no field the
- * configuration accepts can hold a secret — the schema has nowhere to put one.
- */
 export declare const configCommand: (app: AppIdentity, config: Configuration, { permissionKey }?: {
     permissionKey?: PermissionKeyOf;
 }) => Command;

package/dist/cli/config-command.js

@@ -15,6 +15,8 @@ import { changeStoreSetting, isStoreSetting, STORE_SETTINGS, storeSettings } fro
  * The settings in force and where each came from, and changing them. Printed whole: no field the
  * configuration accepts can hold a secret — the schema has nowhere to put one.
  */
+/** `sender_colors` colours who wrote a message; a CLI without messages has nothing to colour. */
+const shownSettings = (app, config) => app.messenger === false ? config.allSettings.filter((setting) => setting !== "sender_colors") : config.allSettings;
 export const configCommand = (app, config, { permissionKey } = {}) => {
     const command = new Command("config").description("the settings in force, and where each one came from");
     annotate(command.command("show"), { effects: LOCAL_READ, examples: [`${app.command} personal config show`] })
@@ -32,7 +34,7 @@ export const configCommand = (app, config, { permissionKey } = {}) => {
             config_file: settings.configPath,
             config_found: settings.configFound,
             paths_overridden: overridden,
-            settings: [...config.allSettings, "command_timeout_ms"]
+            settings: [...shownSettings(app, config), "command_timeout_ms"]
                 .filter((setting) => bot || setting !== "read_other_bots")
                 .map((setting) => sourced(settings, setting, config.schema)),
             store_settings: await storeSettings(env),
@@ -49,13 +51,13 @@ export const configCommand = (app, config, { permissionKey } = {}) => {
         }))
             .argument("<setting>", 
         // default_profile is only removed now: `config unset` still takes it, `config set` refuses it.
-        `one of: ${[...config.allSettings.filter((one) => action === "unset" || one !== "default_profile"), ...STORE_SETTINGS, "account_groups.<name>"].join(", ")}`)
+        `one of: ${[...shownSettings(app, config).filter((one) => action === "unset" || one !== "default_profile"), ...STORE_SETTINGS, "account_groups.<name>"].join(", ")}`)
             .option("--defaults", "change what every profile gets, rather than this profile")
             .option("--personal", "only for personal accounts — the personal section of the file")
             .option("--bot", "only for bots — the bot section of the file");
         if (action === "set")
             sub
-                .argument("<value>", "a number, true or false, or for allow a list like send,reaction; for a group tg:work,max:Alice,email:me@x")
+                .argument("<value>", "a number, true or false; for a group tg:work,max:Alice,email:me@x")
                 .description("save a setting to the configuration file");
         else
             sub.description("remove a setting from the configuration file");
@@ -64,7 +66,6 @@ export const configCommand = (app, config, { permissionKey } = {}) => {
             const context = baseContext(this, (flags, options) => config.resolveSettings(flags, {
                 ...options,
                 needsProfile: !everyone && setting !== "default_profile" && !isStoreSetting(setting),
-                skipMovedPermissions: true,
             }));
             const { settings, renderer, env } = context;
             if (isStoreSetting(setting)) {

package/dist/cli/first-run.d.ts

@@ -1,22 +1,6 @@
 import { type Installer } from "@wirecat/cli-base/update";
 import { type Question } from "./setup-answers.js";
 /** The languages cli-core stems and has a dictionary for; each is one stemmer of its alphabet. */
-export declare const LANGUAGES: readonly [{
-    readonly name: "russian";
-    readonly code: "ru";
-    readonly label: "Russian";
-    readonly script: "cyrillic";
-}, {
-    readonly name: "english";
-    readonly code: "en";
-    readonly label: "English";
-    readonly script: "latin";
-}, {
-    readonly name: "spanish";
-    readonly code: "es";
-    readonly label: "Spanish";
-    readonly script: "latin";
-}];
 export interface FirstRunIo {
     ask: (prompt: string) => Promise<string>;
     say: (text: string) => void;

package/dist/cli/first-run.js

@@ -2,6 +2,7 @@ import { spawnSync } from "node:child_process";
 import { accessSync, constants, realpathSync } from "node:fs";
 import { delimiter, join } from "node:path";
 import { installerOf, updateCommand } from "@wirecat/cli-base/update";
+import { LANGUAGES } from "../search/languages.js";
 import { DEFAULT_STEMMERS } from "../search/stem.js";
 import { openCache } from "../store/open.js";
 import { storePath } from "../store/path.js";
@@ -11,12 +12,6 @@ import { readSecret } from "../terminal/prompt.js";
 import { WIRECAT_TOOLS } from "./help/first-screen.js";
 import { buildStems } from "./messenger/store-maintenance-command.js";
 import { QUESTIONS, readSetupAnswers, unanswered, writeSetupAnswers, } from "./setup-answers.js";
-/** The languages cli-core stems and has a dictionary for; each is one stemmer of its alphabet. */
-export const LANGUAGES = [
-    { name: "russian", code: "ru", label: "Russian", script: "cyrillic" },
-    { name: "english", code: "en", label: "English", script: "latin" },
-    { name: "spanish", code: "es", label: "Spanish", script: "latin" },
-];
 /** Commands that run without first-run questions: they serve agents, help, or open the store themselves. */
 const SKIPPED = new Set(["help", "guide", "completion", "mcp", "serve", "server", "update", "store"]);
 /**

package/dist/cli/index.d.ts

@@ -26,6 +26,7 @@ export { CORE_LOG_EVENTS } from "../runs/log-events.js";
 export { crashOf, type Recording, type RecordingOptions, recorded, startRecording, wasSettled, } from "../runs/recording.js";
 export { findRun, KEEP_RUNS_FOR_DAYS, listRuns, pruneRuns, type RunMetadata, readEvents, runsDirFor, runtime, startRun, } from "../runs/run.js";
 export { currentRun, inRun, type RunScope, useAsProcessRun } from "../runs/scope.js";
+export { LANGUAGES } from "../search/languages.js";
 export { guardedApp, guardedPress, guardedStart, type Pressed } from "../sends/buttons.js";
 export { guardedClose, guardedCreatePoll, guardedVote } from "../sends/polls.js";
 export type { InboxReader } from "../services/inbox.js";
@@ -62,7 +63,7 @@ export { changesAuthority, changesAuthorityAt, changesAuthorityNow, destroysNoth
 export { type CliEntry, type EntryContext, type EntryIo, startCli } from "./entry.js";
 export { type AnswerOutput, answerSchema, type Body, type ItemBody, isBody, itemAnswer, itemOf, jsonlRecords, judgedAnswer, type ListBody, type ListInput, listOf, metaNow, printItem, renderAnswer, sealed, snakeKeys, snakeKeysKeeping, } from "./envelope.js";
 export { withAbort } from "./execution.js";
-export { askSetupQuestions, asksAtStart, type FirstRun, type FirstRunIo, LANGUAGES, setupAtStart, systemLanguage, } from "./first-run.js";
+export { askSetupQuestions, asksAtStart, type FirstRun, type FirstRunIo, setupAtStart, systemLanguage, } from "./first-run.js";
 export { checkGuide, checkStep, type GuideOptions, type GuideReference, type GuideStep, loadScenarios, MEMO_SCENARIOS, type Scenario, shellProblems, } from "./guide.js";
 export { type CommandHelp, commandHelp, commandHelpMarkdown, commandHelpText, exampleReport, type NextChoice, nextUsually, } from "./help/command-help.js";
 export { commandsText } from "./help/commands-text.js";
@@ -96,7 +97,6 @@ export type { Running, ServerOptions, ServerProcess, ServerSystem } from "./mess
 export { storeSummary } from "./messenger/store-maintenance-command.js";
 export { type Saving, stored } from "./messenger/stored.js";
 export { MODEL_CATALOGUE_QUERY, type ModelCatalogueOptions } from "./model-catalogue-command.js";
-export { movedCommandError } from "./moved.js";
 export { window, withPaging } from "./paging.js";
 export { knownBeside, knownPermissionKeys, type PermissionKeyOf, unknownPermissionKeys } from "./permission-keys.js";
 export { asFirstWord, commandWords, liftProfile, refuseCommandName, rootOf, usableProfileName } from "./profile.js";

package/dist/cli/index.js

@@ -22,6 +22,7 @@ export { CORE_LOG_EVENTS } from "../runs/log-events.js";
 export { crashOf, recorded, startRecording, wasSettled, } from "../runs/recording.js";
 export { findRun, KEEP_RUNS_FOR_DAYS, listRuns, pruneRuns, readEvents, runsDirFor, runtime, startRun, } from "../runs/run.js";
 export { currentRun, inRun, useAsProcessRun } from "../runs/scope.js";
+export { LANGUAGES } from "../search/languages.js";
 export { guardedApp, guardedPress, guardedStart } from "../sends/buttons.js";
 export { guardedClose, guardedCreatePoll, guardedVote } from "../sends/polls.js";
 export { INBOX_CHATS, newIn, REVIEW_CHATS, reviewIn, unreadIn } from "../services/inbox.js";
@@ -55,7 +56,7 @@ export { changesAuthority, changesAuthorityAt, changesAuthorityNow, destroysNoth
 export { startCli } from "./entry.js";
 export { answerSchema, isBody, itemAnswer, itemOf, jsonlRecords, judgedAnswer, listOf, metaNow, printItem, renderAnswer, sealed, snakeKeys, snakeKeysKeeping, } from "./envelope.js";
 export { withAbort } from "./execution.js";
-export { askSetupQuestions, asksAtStart, LANGUAGES, setupAtStart, systemLanguage, } from "./first-run.js";
+export { askSetupQuestions, asksAtStart, setupAtStart, systemLanguage, } from "./first-run.js";
 export { checkGuide, checkStep, loadScenarios, MEMO_SCENARIOS, shellProblems, } from "./guide.js";
 export { commandHelp, commandHelpMarkdown, commandHelpText, exampleReport, nextUsually, } from "./help/command-help.js";
 export { commandsText } from "./help/commands-text.js";
@@ -87,7 +88,6 @@ export { STEMS_EVERY_MS, STEMS_SLICE_MS, stemFills } from "./messenger/serve-ste
 export { storeSummary } from "./messenger/store-maintenance-command.js";
 export { stored } from "./messenger/stored.js";
 export { MODEL_CATALOGUE_QUERY } from "./model-catalogue-command.js";
-export { movedCommandError } from "./moved.js";
 export { window, withPaging } from "./paging.js";
 export { knownBeside, knownPermissionKeys, unknownPermissionKeys } from "./permission-keys.js";
 export { asFirstWord, commandWords, liftProfile, refuseCommandName, rootOf, usableProfileName } from "./profile.js";

package/dist/cli/messenger/context.js

@@ -3,12 +3,12 @@ import { servingProfiles } from "../../background/lock.js";
 import { FloodMemory, floodPathFor } from "../../sends/flood.js";
 import { ceilingRefusal, guardFor } from "../../sends/guard.js";
 import { DEFAULT_PACE, Pacer, pacePathFor } from "../../sends/pace.js";
-import { assertStatsPermissionsCurrent, CEILING_KEY, levelFor, readKeysForCommand, } from "../../sends/permissions.js";
+import { CEILING_KEY, levelFor, readKeysForCommand } from "../../sends/permissions.js";
 import { RecipientList, recipientsPathFor } from "../../sends/recipients.js";
 import { OFFLINE, servicesFor } from "../../services/index.js";
 import { openStore } from "../../store/store.js";
 import { baseContext, environmentOf } from "../context.js";
-import { knownPermissionKeys, unknownPermissionKeys } from "../permission-keys.js";
+import { refuseUnknownPermissionKeys } from "../permission-keys.js";
 import { asFirstWord } from "../profile.js";
 import { rootOf } from "../steps.js";
 import { recalledAccount, rememberAccount } from "./accounts.js";
@@ -325,7 +325,6 @@ const pathOf = (command) => {
 };
 /** `deny` stops a read too, before anything connects: what the profile may not see is never fetched. */
 const refuseDenied = (command, settings) => {
-    assertStatsPermissionsCurrent(pathOf(command), settings.permissions);
     for (const key of readKeysForCommand(pathOf(command))) {
         const { level, key: named } = levelFor(settings.permissions, key);
         if (level !== "deny")
@@ -356,9 +355,7 @@ export const messengerContext = (command, messenger, resolving = {}) => {
     const { profile } = base.settings;
     refuseDenied(command, base.settings);
     refuseLacking(messenger, pathOf(command));
-    for (const key of unknownPermissionKeys(base.settings.permissions, knownPermissionKeys(command, messenger.permissionKey))) {
-        throw new CliError("configuration_error", `permissions.${key} names no command — remove it with \`${app.command} ${asFirstWord(profile)}config unset permissions.${key}\``, { permission: key });
-    }
+    refuseUnknownPermissionKeys(command, base.settings.permissions, `${app.command} ${asFirstWord(profile)}config unset`, messenger.permissionKey);
     // Read when warning, not now: serve swaps the renderer's methods for log records after this.
     const warn = (text, warning) => base.renderer.warn(text, warning);
     const accountFor = () => {

package/dist/cli/permission-keys.d.ts

@@ -9,3 +9,5 @@ export declare const knownPermissionKeys: (command: Command, keyOf?: PermissionK
 /** The known keys one level under the unknown key's parent, to name in the refusal. */
 export declare const knownBeside: (key: PermissionKey, known: ReadonlySet<PermissionKey>) => PermissionKey[];
 export declare const unknownPermissionKeys: (levels: Readonly<Record<PermissionKey, unknown>>, known: ReadonlySet<PermissionKey>) => PermissionKey[];
+/** A saved key no command checks would do nothing, so the command refuses to run; `unset` names the fix. */
+export declare const refuseUnknownPermissionKeys: (command: Command, levels: Readonly<Record<PermissionKey, unknown>>, unset: string, keyOf?: PermissionKeyOf) => void;

package/dist/cli/permission-keys.js

@@ -1,4 +1,4 @@
-import { canonicalPermissionKey } from "../sends/permission-aliases.js";
+import { CliError } from "@wirecat/cli-base";
 import { CEILING_KEY, keyForCommand, WRITE_KEYS } from "../sends/permissions.js";
 const pathOf = (command) => {
     const words = [];
@@ -20,12 +20,12 @@ const everyCommand = (command) => [command, ...command.commands.flatMap(everyCom
 export const knownPermissionKeys = (command, keyOf = (one) => keyForCommand(pathOf(one)), extra = []) => {
     const known = new Set();
     const add = (key) => {
-        key = canonicalPermissionKey(key);
         for (let parts = key.split("."); parts.length > 0; parts = parts.slice(0, -1))
             known.add(parts.join("."));
     };
     for (const one of everyCommand(rootOf(command))) {
-        const key = keyOf(one);
+        const own = keyOf(one);
+        const key = own === undefined ? keyForCommand(pathOf(one)) : own;
         if (key)
             add(key);
     }
@@ -42,3 +42,10 @@ export const knownBeside = (key, known) => {
         .sort();
 };
 export const unknownPermissionKeys = (levels, known) => Object.keys(levels).filter((key) => key !== CEILING_KEY && !known.has(key));
+/** A saved key no command checks would do nothing, so the command refuses to run; `unset` names the fix. */
+export const refuseUnknownPermissionKeys = (command, levels, unset, keyOf) => {
+    const [key] = unknownPermissionKeys(levels, knownPermissionKeys(command, keyOf));
+    if (key === undefined)
+        return;
+    throw new CliError("configuration_error", `permissions.${key} names no command — remove it with \`${unset} permissions.${key}\``, { permission: key });
+};

package/dist/cli/preview.d.ts

@@ -1,8 +1,8 @@
 import type { Command } from "commander";
-import { type Level } from "../sends/permissions.js";
+import { type Level, type PermissionKey } from "../sends/permissions.js";
 export declare class PreviewComplete extends Error {
 }
-export declare const preview: (command: Command, permissions: Readonly<Record<string, Level>>) => {
+export declare const preview: (command: Command, permissions: Readonly<Record<string, Level>>, unset: string, keyOf?: (path: readonly string[]) => PermissionKey | null | undefined) => {
     preview: boolean;
     path: string[];
     permission: {

package/dist/cli/preview.js

@@ -1,15 +1,16 @@
 import { CliError } from "@wirecat/cli-base";
 import { metaOf } from "@wirecat/cli-base/commands";
 import { writes as writesAnything } from "@wirecat/cli-base/standards";
-import { assertStatsPermissionsCurrent, keyForCommand, levelFor, readKeysForCommand, WRITE_KEYS, } from "../sends/permissions.js";
+import { keyForCommand, levelFor, readKeysForCommand, WRITE_KEYS, } from "../sends/permissions.js";
 import { commandPathOf } from "./command-contract.js";
+import { refuseUnknownPermissionKeys } from "./permission-keys.js";
 export class PreviewComplete extends Error {
 }
-export const preview = (command, permissions) => {
+export const preview = (command, permissions, unset, keyOf) => {
     const path = commandPathOf(command);
+    refuseUnknownPermissionKeys(command, permissions, unset, keyOf && ((one) => keyOf(commandPathOf(one))));
     const key = keyForCommand(path);
     const level = key ? levelFor(permissions, key).level : "allow";
-    assertStatsPermissionsCurrent(path, permissions);
     for (const source of readKeysForCommand(path)) {
         if (levelFor(permissions, source).level === "deny")
             throw new CliError("permission_error", `this profile does not permit ${source}`, { permission: source });

package/dist/cli/profile.d.ts

@@ -28,3 +28,5 @@ export declare const valuedOptions: (program: Command) => Set<string>;
 export declare const refuseCommandName: (profile: string, words: Set<string>, command: string) => void;
 /** The root of the command tree, from anywhere inside it. */
 export declare const rootOf: (command: Command) => Command;
+/** A command this CLI really has, for an example: the first that takes a profile, down to its first leaf. */
+export declare const sampleCommand: (commands: readonly Command[]) => string | undefined;

package/dist/cli/profile.js

@@ -59,3 +59,13 @@ export const rootOf = (command) => {
         root = root.parent;
     return root;
 };
+/** A command this CLI really has, for an example: the first that takes a profile, down to its first leaf. */
+export const sampleCommand = (commands) => {
+    const words = [];
+    let command = commands.find((one) => !PROFILE_FREE.has(one.name()));
+    while (command) {
+        words.push(command.name());
+        command = command.commands.find((one) => one.name() !== "help");
+    }
+    return words.length ? words.join(" ") : undefined;
+};

package/dist/cli/program.js

@@ -25,9 +25,8 @@ import { installHelp } from "./help/first-screen.js";
 import { showInputFields } from "./input-fields.js";
 import { MAX_BUFFERED_INPUT, provideInputPolicy } from "./input-policy.js";
 import { checkJson, liftJson } from "./json-fields.js";
-import { movedCommandError } from "./moved.js";
 import { PreviewComplete, preview } from "./preview.js";
-import { commandWords, liftProfile, PROFILE_FREE, valuedOptions } from "./profile.js";
+import { asFirstWord, commandWords, liftProfile, PROFILE_FREE, sampleCommand, valuedOptions } from "./profile.js";
 import { absolutePaths, relayTarget } from "./relay-route.js";
 import { settingsFor } from "./settings.js";
 import { assertSharedContracts } from "./shared-contracts.js";
@@ -38,11 +37,15 @@ import { commandAt, lineOf, withLines } from "./steps.js";
  */
 export const createProgram = ({ app, commands, configure, firstScreen }, { out, err } = {}) => {
     const program = new Command();
+    const mounted = commands();
+    const messenger = app.messenger !== false;
+    const found = messenger ? "found messages" : "found items";
+    const content = messenger ? "message content" : "content";
     program
         .name(app.command)
         .usage("[profile] [options] <command>")
         .description(`${app.description}\n\n` +
-        `The first word is the profile whenever it is not a command — \`${app.command} personal chats list\`.\n` +
+        `The first word is the profile whenever it is not a command — \`${app.command} personal ${messenger ? "chats list" : (sampleCommand(mounted) ?? "<command>")}\`.\n` +
         `\`${app.envPrefix}_PROFILE\` says the same thing for a whole shell session.\n` +
         "No profile is assumed: without one, a command that uses an account stops and lists the profiles here.")
         .version(app.version, "-V, --version")
@@ -50,21 +53,21 @@ export const createProgram = ({ app, commands, configure, firstScreen }, { out,
         .option("--json", "machine-readable output: one JSON value on stdout; --json=id,text keeps only those fields")
         .option("--jsonl", "machine-readable output: one JSON object per line, for streaming and jq")
         .option("--quiet", "diagnostics off; a failure is still said")
-        .option("--trace", "the connection's own log lines on stderr — never message content")
+        .option("--trace", `the connection's own log lines on stderr — never ${content}`)
         .option("--debug", "on a failure, its whole record — cause and stack — in place of the short line")
         .option("--timeout <duration>", "give up on the whole command after this — 30s, 2m, 500ms")
         .option("--offline", "answer from what was recorded and never connect; fails if nothing was")
         .option("--no-input", "never prompt or open interactive login; piped input remains available")
         .option("--max-input-bytes <bytes>", "maximum buffered input bytes (default: 16777216)")
         .option("--max-output-bytes <bytes>", "maximum machine output bytes (default: 4194304; 0 disables)")
-        .option("--brief", "found messages as reference, title, time, sender and excerpt only")
-        .option("--full", "found messages with their whole text and every provider field")
+        .option("--brief", `${found} as reference, title, time, ${messenger ? "sender" : "author"} and excerpt only`)
+        .option("--full", `${found} with their whole text and every provider field`)
         .option("--dry-run", "preview parsed arguments and permissions before running the action")
         .option("--yes", "go ahead without the question an ask level puts before a write")
-        .option("--record", "keep this run — ids and timings, never message content")
+        .option("--record", `keep this run — ids and timings, never ${content}`)
         .option("--no-record", "do not keep it, whatever the configuration says")
         .showHelpAfterError();
-    for (const command of commands())
+    for (const command of mounted)
         program.addCommand(command);
     configure?.(program);
     assertSharedContracts(program);
@@ -377,7 +380,9 @@ const runOnce = async (argv, definition, options) => {
                 needsProfile: keyForCommand(path) !== null,
             });
             const permissions = "permissions" in resolved ? resolved.permissions : {};
-            renderAnswer(action, outputFor(action), itemOf(snakeKeys(preview(action, permissions))));
+            const unset = `${command} ${asFirstWord(resolved.profile)}config unset${path[0] === "bot" ? " --bot" : ""}`;
+            const previewed = preview(action, permissions, unset, definition.configuration?.permissionKey);
+            renderAnswer(action, outputFor(action), itemOf(snakeKeys(previewed)));
             throw new PreviewComplete();
         }
         // Not inside the scheduled run itself: its own failure is already on its way to last.json.
@@ -421,11 +426,6 @@ const runOnce = async (argv, definition, options) => {
         const settled = await settleFailure(failure, { definition, program, rest, profile, options });
         return report(streams, reporting, failed(definition, program, rest, failure, settled, debug));
     }
-    const failure = movedCommandError(program, rest);
-    if (failure !== undefined) {
-        const settled = await settleFailure(failure, { definition, program, rest, profile, options });
-        return report(streams, reporting, failed(definition, program, rest, failure, settled, debug));
-    }
     try {
         await control.race(() => program.parseAsync(rest, { from: "user" }));
         const code = exit.code ?? (process.exitCode === undefined ? 0 : Number(process.exitCode));

package/dist/cli/settings.d.ts

@@ -140,8 +140,6 @@ export interface ResolveOptions {
     needsProfile?: boolean;
     /** Read the config file without writing it: no default file. For a dry run. */
     readOnly?: boolean;
-    /** Skip moved permission keys instead of refusing them, so `config set` and `unset` can fix one. */
-    skipMovedPermissions?: boolean;
 }
 /** Where `profile` came from when none was named and the command needs none. */
 export declare const NONE_NAMED = "none named";

package/dist/cli/settings.js

@@ -4,7 +4,6 @@ import * as v from "valibot";
 import { AI_ENTRIES, resolveAISettings } from "../analysis/settings.js";
 import { parseDuration } from "../domain/duration.js";
 import { envName, readOnlyLockOf } from "../ports/app.js";
-import { canonicalPermissionKey } from "../sends/permission-aliases.js";
 import { assertOverridesTighten, CEILING_KEY, LEVELS, layerPermissions, permissionOverrides, RESOURCES, } from "../sends/permissions.js";
 import { storePath } from "../store/path.js";
 import { sharedConfigPath } from "../store/shared-config.js";
@@ -78,7 +77,6 @@ const SHARED_DEFAULTS_ONLY = {
     update_check: v.optional(flag),
     skill_hint: v.optional(flag),
 };
-const withoutMoved = (levels) => levels && Object.fromEntries(Object.entries(levels).filter(([key]) => canonicalPermissionKey(key) === key));
 /** Where `profile` came from when none was named and the command needs none. */
 export const NONE_NAMED = "none named";
 /** A name for a command that speaks for no account; never chosen for one that does. */
@@ -232,9 +230,7 @@ export const settingsFor = (app, extension = {}) => {
             : { value: false, from: "default" };
         const fileLayers = layers.map(([from, scope]) => [
             from,
-            options.skipMovedPermissions
-                ? withoutMoved(scope?.permissions)
-                : scope?.permissions,
+            scope?.permissions,
         ]);
         const overrides = permissionOverrides(flags.permission);
         assertOverridesTighten(overrides, layerPermissions(fileLayers).levels);

package/dist/mcp/surface.js

@@ -2,7 +2,6 @@ import { toJsonSchema, toStandardJsonSchema } from "@valibot/to-json-schema";
 import { CliError } from "@wirecat/cli-base";
 import * as v from "valibot";
 import { answerSchema, listOf } from "../cli/envelope.js";
-import { movedPath, movedPointer } from "../cli/moved.js";
 import { ENTITIES } from "../entities/index.js";
 import { agentArguments } from "./text.js";
 import { answered, commandOf, entryRunner, failed, inputOf, outputSchemaOf, READ, syncAllowedFor, UNTRUSTED, WRITE, } from "./tool.js";
@@ -63,10 +62,16 @@ export const registerCommands = (server, prefix, commands, errors,
 /** Throws the refusal of a command left out because the lock or a level stops it, so the agent learns why. */
 withheld) => {
     const byNormal = new Map(Object.keys(commands).map((command) => [normal(command), command]));
+    // No AppIdentity reaches here; only a messenger's catalogue has `messages` commands.
+    const messenger = Object.keys(commands).some((command) => command.split(" ")[0] === "messages");
+    const tasks = messenger ? '"unread", "send message", "chat members"' : '"list", "show", "change a setting"';
+    const sample = messenger
+        ? "messages list"
+        : (Object.entries(commands).find(([, one]) => !one.writes)?.[0] ?? Object.keys(commands)[0] ?? "");
     server.registerTool(`${prefix}_tools_search`, {
         outputSchema: toStandardJsonSchema(v.looseObject({})),
         title: "Find a command",
-        description: `Find the command for a task — "unread", "send message", "chat members" — before calling ` +
+        description: `Find the command for a task — ${tasks} — before calling ` +
             `${prefix}_read or ${prefix}_write with it. Each match gives its command, whether it writes, its arguments and the shape of its answer. ` +
             "With no words, lists every command and title, without arguments.",
         inputSchema: toStandardJsonSchema(v.strictObject({ query: v.optional(v.pipe(v.string(), v.description("words that describe the task"))) })),
@@ -103,9 +108,6 @@ withheld) => {
             const one = command === undefined ? undefined : commands[command];
             if (command === undefined || !one) {
                 withheld?.(normal(asked));
-                const moved = movedPath(normal(asked).split(" "), (path) => byNormal.has(path));
-                if (moved !== undefined)
-                    throw new CliError("validation_error", `no command "${asked}" here — ${movedPointer(moved)}`);
                 const near = nearest(commands, asked);
                 throw new CliError("validation_error", `no command "${asked}" here${near.length ? ` — did you mean ${near.map((name) => `"${name}"`).join(", ")}?` : ""}; ${prefix}_tools_search finds one`);
             }
@@ -126,7 +128,7 @@ withheld) => {
         }
     };
     const call = v.strictObject({
-        command: v.pipe(v.string(), v.minLength(1), v.description(`a command ${prefix}_tools_search returned: "messages list"`)),
+        command: v.pipe(v.string(), v.minLength(1), v.description(`a command ${prefix}_tools_search returned: "${sample}"`)),
         arguments: v.optional(v.pipe(v.record(v.string(), v.unknown()), v.description("that command's arguments"))),
     });
     server.registerTool(`${prefix}_read`, {
@@ -140,7 +142,7 @@ withheld) => {
         server.registerTool(`${prefix}_write`, {
             outputSchema: toStandardJsonSchema(ANSWER),
             title: "Run a writing command",
-            description: `Run one command that changes something — sends, edits, deletes, joins — with the arguments ${prefix}_tools_search showed. ${UNTRUSTED}`,
+            description: `Run one command that changes something — ${messenger ? "sends, edits, deletes, joins" : "creates, edits, deletes"} — with the arguments ${prefix}_tools_search showed. ${UNTRUSTED}`,
             inputSchema: toStandardJsonSchema(call),
             annotations: WRITE,
         }, runner(true));

package/dist/mcp/tool.d.ts

@@ -10,7 +10,7 @@ import { type EntityName } from "../entities/index.js";
 import { type AppErrors } from "../errors/reasons.js";
 import type { MessengerAdapter } from "../ports/messenger.js";
 import type { SendGuard } from "../sends/guard.js";
-import { type Permission, type PermissionKey } from "../sends/permissions.js";
+import { type PermissionKey } from "../sends/permissions.js";
 import { type Services } from "../services/index.js";
 import type { AccountKey, MessageStore } from "../store/store.js";
 import type { MessengerSession } from "./session.js";
@@ -50,8 +50,6 @@ interface Tool<S extends Input> {
     /** What it touches, where its hints cannot say: a read of the messenger kept in the store is not a write there. */
     effects?: Effects;
     _meta?: Record<string, unknown>;
-    /** A write, and what the profile's `allow` must name for it to be offered. */
-    permission?: Permission;
     /** Writes what the owner keeps, as its command (`isStoreChange`): `<PREFIX>_READ_ONLY` refuses it. */
     changesStore?: true;
     /** The CLI command it answers as, where its name does not spell it: `chats send-as`. Its level is read from it. */

package/dist/mcp/tool.js

@@ -12,7 +12,7 @@ import { failureContext } from "../errors/reasons.js";
 import { partialOutcome, startRecording } from "../runs/recording.js";
 import { newRunId } from "../runs/run.js";
 import { inRun } from "../runs/scope.js";
-import { assertStatsPermissionsCurrent, keyForCommand, levelFor, readKeysForCommand, } from "../sends/permissions.js";
+import { keyForCommand, levelFor, readKeysForCommand } from "../sends/permissions.js";
 import { onlineDeps, storeModeDeps } from "../services/deps.js";
 import { servicesFor } from "../services/index.js";
 import { agentJson } from "./text.js";
@@ -178,7 +178,6 @@ const callRunner = ({ messenger, session, withStore, withServices, defaults, aro
                 definition.check?.(args);
                 if (definition.changesStore)
                     refuseStoreChange(messenger.app, defaults.env);
-                assertStatsPermissionsCurrent(path, defaults.settings.permissions ?? {});
                 refuseLacking(messenger, path);
                 for (const permission of readKeysForCommand(path)) {
                     if (levelFor(defaults.settings.permissions ?? {}, permission).level === "deny")