@wirecat/cli-core 0.424.0 → 0.426.0

package/dist/cli/help/command-help.js

@@ -2,7 +2,7 @@ import { metaOf } from "@wirecat/cli-base/commands";
 import { writes } from "@wirecat/cli-base/standards";
 import { commandPathOf, outputOf } from "../command-contract.js";
 import { environmentOf } from "../context.js";
-import { PROFILE_FREE } from "../profile.js";
+import { takesProfile } from "../profile.js";
 import { commandAt } from "../steps.js";
 import { short } from "./commands-text.js";
 /** Argument names onto the kinds `domain/references.ts` names; a plural takes the same kind. */
@@ -177,7 +177,7 @@ export const EXAMPLE_PROFILE = "personal";
 const withProfile = (command, example) => {
     const root = rootOf(command);
     const top = commandPathOf(command)[0];
-    if (!profiled.has(root) || top === undefined || PROFILE_FREE.has(top))
+    if (!profiled.has(root) || top === undefined || !takesProfile(command))
         return example;
     const prefix = `${root.name()} ${top}`;
     return example === prefix || example.startsWith(`${prefix} `)
@@ -203,11 +203,16 @@ export const commandHelpText = (command) => {
         ...metaOf(command),
         path: commandPathOf(command),
     });
-    const access = availability
-        ? rows("Availability:", [
-            availability.available ? "available for this profile" : `unavailable — ${availability.reason}`,
-        ])
-        : [];
+    // "Available for this profile" says nothing where no profile is in play: a tool without profiles, or a command
+    // that reads none.
+    const profileMatters = profiled.has(rootOf(command)) && takesProfile(command);
+    const access = !availability
+        ? []
+        : availability.available
+            ? profileMatters
+                ? rows("Availability:", ["available for this profile"])
+                : []
+            : rows("Availability:", [`unavailable — ${availability.reason}`]);
     return [
         "",
         ...access,

package/dist/cli/help/first-screen.js

@@ -25,12 +25,12 @@ export const WIRECAT_TOOLS = [
     {
         command: "zm",
         package: "@wirecat/zoom-cli",
-        does: "Zoom meetings: transcripts and summaries, searchable with your messages",
+        does: "Zoom meetings: transcripts and summaries, searchable with your other WireCat data",
     },
     {
         command: "drive",
         package: "@wirecat/drive-cli",
-        does: "Google Drive and Docs as local text, searchable with your messages",
+        does: "Google Drive and Docs as local text, searchable with your other WireCat data",
     },
     {
         command: "memo",

package/dist/cli/index.d.ts

@@ -11,7 +11,7 @@ export { callMeetingPreparationTool, meetingPreparationTool } from "../mcp/meeti
 export { callMeetingProjectCandidatesTool, meetingProjectCandidatesTool } from "../mcp/meeting-project-candidates.js";
 export { callMeetingSeriesInventoryTool, meetingSeriesInventoryTool } from "../mcp/meeting-series-inventory.js";
 export { registerLinkConversationsPrompt } from "../mcp/prompts.js";
-export { agentBody, agentJson, agentResult, UNTRUSTED, UNTRUSTED_INSTRUCTION } from "../mcp/text.js";
+export { agentBody, agentJson, agentResult, UNTRUSTED, UNTRUSTED_INSTRUCTION, UNTRUSTED_NEUTRAL } from "../mcp/text.js";
 export { MEETING_RESULT_ENTITIES } from "../meetings/index.js";
 export { type AppIdentity, envName, readOnlyLockOf, readOnlyRefusal } from "../ports/app.js";
 export type { AccountEditing, AccountHealth, AccountRecords, AccountSettings, AccountStanding, AccountTools, After, BotChats, ChannelComments, ChatDeletion, ChatFolders, ChatReading, ContactBook, Download, ForumControl, ForumState, GroupAdmin, GroupModeration, HistoryBatch, HistoryChatEvent, HistoryReaction, HistoryStar, HistoryVote, InviteLinks, JoinRequests, LiveUpdates, MessageButtons, MessageEditing, MessageMedia, MessagePermalinks, MessagePins, MessagePolls, MessageReactions, MessageSearch, MessageStars, MessengerAdapter, MessengerCore, NewPoll, OfficialStats, PassiveUpdates, PersonProfiles, ProfileChange, ProfilePhotos, PushedHistory, ReadState, RemoteFile, ScheduledMessages, SenderIdentities, SenderSearch, SendOptions, Sent, ServerQuery, ServerReads, ThreadAddressing, TopicEditing, TopicHistory, TopicReadState, Transcript, } from "../ports/messenger.js";
@@ -52,7 +52,7 @@ export type { CommandAvailability, DiscoveredCommand } from "./command-availabil
 export { commandContract, type JsonSchema, SCHEMA_DIALECT } from "./command-contract.js";
 export { CONTRACT } from "./commands-command.js";
 export { refuseUnknownKey } from "./config-command.js";
-export type { ConfigIssue, ConfigIssueKind } from "./config-issues.js";
+export { type ConfigIssue, type ConfigIssueKind, checkConfigText, issueMessage } from "./config-issues.js";
 export { loadSnakeCaseConfig } from "./config-keys.js";
 export { type AgentRun, type BaseContext, type BaseEnvironment, baseContext, environmentOf, outputFor, provide, secretInputOf, } from "./context.js";
 export { addContractInfo, type ContractEvidenceOptions, contractEvidence } from "./contract-evidence.js";
@@ -60,7 +60,7 @@ export { sharedCommandTemplate } from "./contract-templates.js";
 export { type Closeable, withDeadline } from "./deadline.js";
 export { DEFAULT_CONFIG, ensureDefaultConfig } from "./default-config.js";
 export { DISCOVERY_DESCRIPTIONS } from "./discovery-descriptions.js";
-export { changesAuthority, changesAuthorityAt, changesAuthorityNow, destroysNothing, FETCH, grantsAuthority, isLogin, isOtherServiceCall, isStoreChange, judgedEffects, judgedTargets, LOCAL_READ, LOCAL_WRITE, logsInOrOut, NO_EFFECTS, ownerOnlyOption, REMOTE_READ, REMOTE_WRITE, reachesOtherService, refuseUnderReadOnly, } from "./effects.js";
+export { changesAuthority, changesAuthorityAt, changesAuthorityNow, destroysNothing, FETCH, grantsAuthority, isLogin, isOtherServiceCall, isStoreChange, judgedEffects, judgedTargets, LOCAL_READ, LOCAL_WRITE, logsInOrOut, NO_EFFECTS, ownerOnlyOption, previewFlag, REMOTE_READ, REMOTE_WRITE, reachesOtherService, refuseUnderReadOnly, storeChangeRefusal, } from "./effects.js";
 export { type CliEntry, type EntryContext, type EntryIo, startCli } from "./entry.js";
 export { type AnswerOutput, answerSchema, type Body, type ItemBody, isBody, itemAnswer, itemOf, jsonlRecords, judgedAnswer, type ListBody, type ListInput, listOf, metaNow, printItem, renderAnswer, sealed, snakeKeys, snakeKeysKeeping, } from "./envelope.js";
 export { withAbort } from "./execution.js";
@@ -99,8 +99,8 @@ export { storeSummary } from "./messenger/store-maintenance-command.js";
 export { type Saving, stored } from "./messenger/stored.js";
 export { MODEL_CATALOGUE_QUERY, type ModelCatalogueOptions } from "./model-catalogue-command.js";
 export { window, withPaging } from "./paging.js";
-export { knownBeside, knownPermissionKeys, type PermissionKeyOf, unknownPermissionKeys } from "./permission-keys.js";
-export { asFirstWord, commandWords, liftProfile, refuseCommandName, rootOf, usableProfileName } from "./profile.js";
+export { knownBeside, knownPermissionKeys, type PermissionKeyOf, unknownPermissionIssues, unknownPermissionKeys, } from "./permission-keys.js";
+export { asFirstWord, commandWords, liftProfile, profileFree, refuseCommandName, rootOf, takesProfile, usableProfileName, } from "./profile.js";
 export { createProgram, type ProgramDefinition, type ProgramOptions, type RunOptions, run } from "./program.js";
 export { fieldsOf, projectFields } from "./result-fields.js";
 export { type Config, type Configuration, count, first, flag, fromFile, type GlobalFlags, NONE_NAMED, namedProfile, type ProfileKind, plain, type ResolveOptions, type Settings, type SettingsExtension, type SettingsExtensionContext, type Source, settingsFor, } from "./settings.js";

package/dist/cli/index.js

@@ -9,7 +9,7 @@ export { callMeetingPreparationTool, meetingPreparationTool } from "../mcp/meeti
 export { callMeetingProjectCandidatesTool, meetingProjectCandidatesTool } from "../mcp/meeting-project-candidates.js";
 export { callMeetingSeriesInventoryTool, meetingSeriesInventoryTool } from "../mcp/meeting-series-inventory.js";
 export { registerLinkConversationsPrompt } from "../mcp/prompts.js";
-export { agentBody, agentJson, agentResult, UNTRUSTED, UNTRUSTED_INSTRUCTION } from "../mcp/text.js";
+export { agentBody, agentJson, agentResult, UNTRUSTED, UNTRUSTED_INSTRUCTION, UNTRUSTED_NEUTRAL } from "../mcp/text.js";
 export { MEETING_RESULT_ENTITIES } from "../meetings/index.js";
 export { envName, readOnlyLockOf, readOnlyRefusal } from "../ports/app.js";
 export { senderFacts } from "../replies/dry-run.js";
@@ -45,6 +45,7 @@ export { PressLog, UpdatesCursor } from "./bot/updates.js";
 export { commandContract, SCHEMA_DIALECT } from "./command-contract.js";
 export { CONTRACT } from "./commands-command.js";
 export { refuseUnknownKey } from "./config-command.js";
+export { checkConfigText, issueMessage } from "./config-issues.js";
 export { loadSnakeCaseConfig } from "./config-keys.js";
 export { baseContext, environmentOf, outputFor, provide, secretInputOf, } from "./context.js";
 export { addContractInfo, contractEvidence } from "./contract-evidence.js";
@@ -52,7 +53,7 @@ export { sharedCommandTemplate } from "./contract-templates.js";
 export { withDeadline } from "./deadline.js";
 export { DEFAULT_CONFIG, ensureDefaultConfig } from "./default-config.js";
 export { DISCOVERY_DESCRIPTIONS } from "./discovery-descriptions.js";
-export { changesAuthority, changesAuthorityAt, changesAuthorityNow, destroysNothing, FETCH, grantsAuthority, isLogin, isOtherServiceCall, isStoreChange, judgedEffects, judgedTargets, LOCAL_READ, LOCAL_WRITE, logsInOrOut, NO_EFFECTS, ownerOnlyOption, REMOTE_READ, REMOTE_WRITE, reachesOtherService, refuseUnderReadOnly, } from "./effects.js";
+export { changesAuthority, changesAuthorityAt, changesAuthorityNow, destroysNothing, FETCH, grantsAuthority, isLogin, isOtherServiceCall, isStoreChange, judgedEffects, judgedTargets, LOCAL_READ, LOCAL_WRITE, logsInOrOut, NO_EFFECTS, ownerOnlyOption, previewFlag, REMOTE_READ, REMOTE_WRITE, reachesOtherService, refuseUnderReadOnly, storeChangeRefusal, } from "./effects.js";
 export { startCli } from "./entry.js";
 export { answerSchema, isBody, itemAnswer, itemOf, jsonlRecords, judgedAnswer, listOf, metaNow, printItem, renderAnswer, sealed, snakeKeys, snakeKeysKeeping, } from "./envelope.js";
 export { withAbort } from "./execution.js";
@@ -89,8 +90,8 @@ export { storeSummary } from "./messenger/store-maintenance-command.js";
 export { stored } from "./messenger/stored.js";
 export { MODEL_CATALOGUE_QUERY } from "./model-catalogue-command.js";
 export { window, withPaging } from "./paging.js";
-export { knownBeside, knownPermissionKeys, unknownPermissionKeys } from "./permission-keys.js";
-export { asFirstWord, commandWords, liftProfile, refuseCommandName, rootOf, usableProfileName } from "./profile.js";
+export { knownBeside, knownPermissionKeys, unknownPermissionIssues, unknownPermissionKeys, } from "./permission-keys.js";
+export { asFirstWord, commandWords, liftProfile, profileFree, refuseCommandName, rootOf, takesProfile, usableProfileName, } from "./profile.js";
 export { createProgram, run } from "./program.js";
 export { fieldsOf, projectFields } from "./result-fields.js";
 export { count, first, flag, fromFile, NONE_NAMED, namedProfile, plain, settingsFor, } from "./settings.js";

package/dist/cli/list-query.d.ts

@@ -47,6 +47,8 @@ export declare const queryTerms: (words: QueryWords, registry: QueryRegistry, co
 /**
  * A `time` term as epoch ms bounds: `time>=7d`, `time:[2026-10-01 TO 2026-10-07]`, `time:today`, and the `meta`
  * an answer reports them by: the zone calendar words and bare dates were read in, and the bounds in UTC.
+ * `until` is inclusive: an exclusive end (a bare date's next midnight, `… TO …}`) comes back 1 ms inside. `since` stays
+ * as written, because the inbox reads strictly after a `date>` start.
  */
 export declare const timeBounds: (term: Predicate | undefined, zone?: string) => {
     since?: number;

package/dist/cli/list-query.js

@@ -133,20 +133,23 @@ export const queryTerms = (words, registry, command) => {
 /**
  * A `time` term as epoch ms bounds: `time>=7d`, `time:[2026-10-01 TO 2026-10-07]`, `time:today`, and the `meta`
  * an answer reports them by: the zone calendar words and bare dates were read in, and the bounds in UTC.
+ * `until` is inclusive: an exclusive end (a bare date's next midnight, `… TO …}`) comes back 1 ms inside. `since` stays
+ * as written, because the inbox reads strictly after a `date>` start.
  */
 export const timeBounds = (term, zone = timezoneOf()) => {
     if (!term)
         return {};
     const upper = term.operator === "range" ? (term.upper ?? "*") : term.value;
     const range = dateRange(term.value, upper, term.operator === "range" ? term.lower_inclusive !== false : true, term.operator === "range" ? term.upper_inclusive !== false : true, zone, term.span);
+    const until = range.upper === undefined ? undefined : range.upper - (range.upper_inclusive ? 0 : 1);
     return {
         ...(range.lower === undefined ? {} : { since: range.lower }),
-        ...(range.upper === undefined ? {} : { until: range.upper }),
+        ...(until === undefined ? {} : { until }),
         meta: {
             timezone: zone,
             window: {
                 ...(range.lower === undefined ? {} : { since: new Date(range.lower).toISOString() }),
-                ...(range.upper === undefined ? {} : { until: new Date(range.upper).toISOString() }),
+                ...(until === undefined ? {} : { until: new Date(until).toISOString() }),
             },
         },
     };

package/dist/cli/meeting-preparation-command.js

@@ -1,6 +1,6 @@
 import { CliError } from "@wirecat/cli-base";
 import { annotate } from "@wirecat/cli-base/commands";
-import { REMOTE_READ } from "./effects.js";
+import { previewFlag, REMOTE_READ } from "./effects.js";
 import { communicationOptions } from "./meeting-communications.js";
 import { readMeetingPreparation } from "./meeting-preparation-read.js";
 const integer = (value) => {
@@ -48,6 +48,6 @@ export const addMeetingPreparationCommand = (program, deps) => {
         origin: "handwritten",
         effects: REMOTE_READ,
         output: { entity: "meeting_preparation" },
-        examples: [`${program.name()} meetings prepare 123 --json`],
+        examples: [`${program.name()} meetings prepare 123${previewFlag(program)} --json`],
     });
 };

package/dist/cli/meeting-series-inventory-command.js

@@ -1,6 +1,6 @@
 import { CliError } from "@wirecat/cli-base";
 import { annotate } from "@wirecat/cli-base/commands";
-import { REMOTE_READ } from "./effects.js";
+import { previewFlag, REMOTE_READ } from "./effects.js";
 import { readMeetingSeriesInventory } from "./meeting-series-inventory-read.js";
 const integer = (value) => {
     if (!/^[1-9]\d*$/.test(value) || !Number.isSafeInteger(Number(value)))
@@ -32,6 +32,6 @@ export const addMeetingSeriesInventoryCommand = (program, deps) => {
         effects: REMOTE_READ,
         offline: false,
         output: { entity: "meeting_series_inventory" },
-        examples: [`${program.name()} meetings scheduled --json`],
+        examples: [`${program.name()} meetings scheduled${previewFlag(program)} --json`],
     });
 };

package/dist/cli/messenger/models-command.js

@@ -165,9 +165,10 @@ export const modelsCommand = (messenger) => {
     reachesOtherService(annotate(models.command("download"), {
         effects: FETCH,
         output: { entity: "model" },
-        examples: [`${tool} models download parakeet-v3`, `${tool} models download ${DEFAULT_TEXT_MODEL}`],
+        examples: [`${tool} models download ${DEFAULT_TEXT_MODEL}`],
     }))
-        .description("download and verify one speech or embedding model")
+        .summary("download and verify one speech or embedding model")
+        .description("download and verify one speech or embedding model: tens to hundreds of MB, each size in models list")
         .argument("<model>", "a model id from models list")
         .option("--accept-terms", "accept the model's licence terms, for a model that has its own")
         .action(async function (id, options) {

package/dist/cli/messenger/store-maintenance-command.js

@@ -11,7 +11,7 @@ import { MIGRATIONS, migrate } from "../../store/migrations.js";
 import { openCache } from "../../store/open.js";
 import { storePath } from "../../store/path.js";
 import { deleteCopy, repairStore } from "../../store/repair.js";
-import { drainNoteIndex, fillSearchIndex, fillStems, involvementStoreOver, noteIndexState, openStore, orphanPointers, pendingNormalization, resetAttachmentWords, resetNoteIndex, resetSearchIndex, resetStems, searchIndexState, stemmerCache, stemsState, } from "../../store/store.js";
+import { drainNoteIndex, fillSearchIndex, fillStems, involvementStoreOver, noteIndexState, openSqlite, openStore, orphanPointers, pendingNormalization, resetAttachmentWords, resetNoteIndex, resetSearchIndex, resetStems, rowCounts, searchIndexState, stemmerCache, stemsState, storeContents, } from "../../store/store.js";
 import { environmentOf, outputFor } from "../context.js";
 import { destroysNothing, LOCAL_READ, LOCAL_WRITE } from "../effects.js";
 import { itemOf, renderAnswer, snakeKeys } from "../envelope.js";
@@ -49,6 +49,16 @@ const reading = async (path, read) => {
         database.close();
     }
 };
+/** For a command that only reads: the connection refuses writes, and opening sets no journal mode. */
+const readingOnly = async (path, read) => {
+    const { database } = await openSqlite(path, { readOnly: true });
+    try {
+        return read(database);
+    }
+    finally {
+        database.close();
+    }
+};
 /** `doctor`'s short summary of the store. Must answer for a broken file, so an error is a field. */
 export const storeSummary = async (env) => {
     const path = storePath(env);
@@ -154,25 +164,25 @@ const copiesCommand = () => new Command("copies").description("the tables `store
 }));
 const infoCommand = () => annotate(new Command("info"), { output: { entity: "store_info" }, effects: LOCAL_READ })
     .summary("the local archive's format, size and contents")
-    .description("the store file: where it is, its size, its schema and how many rows it holds; changes nothing")
+    .description("the store file: where it is, its size, its schema and how many rows it holds, by provider, chat kind, account, year (UTC) and attachment kind, over every account; changes nothing")
     .action(async function () {
     const path = storePath(environmentOf(this).env ?? process.env);
     if (!existsSync(path)) {
         result(this, { path, exists: false });
         return;
     }
-    const read = reading(path, (database) => {
+    const read = readingOnly(path, (database) => {
         const { version, minCompatible, writable } = schemaOf(database);
-        const tables = ["accounts", "chats", "messages", "attachments", "identities"];
         return {
             path,
             exists: true,
             bytes: { file: bytesOf(path), wal: bytesOf(`${path}-wal`) },
             schema: { version, minCompatible, speaks: SPEAKS, writable },
-            rows: version > 0 ? Object.fromEntries(tables.map((table) => [table, count(database, table)])) : {},
+            rows: version > 0 ? rowCounts(database) : {},
             pendingNormalization: pendingIfKnown(database),
             wordIndex: searchIndexState(database) ?? null,
             stemIndex: stemsState(database) ?? null,
+            ...(version > 0 ? storeContents(database) : {}),
         };
     });
     result(this, await read.catch((error) => ({ path, exists: true, opens: false, error: messageOf(error) })));

package/dist/cli/preview.d.ts

@@ -3,13 +3,51 @@ import { type PermissionKey } from "../sends/permissions.js";
 import type { Settings } from "./settings.js";
 export declare class PreviewComplete extends Error {
 }
-export declare const preview: (command: Command, settings: Pick<Settings, "permissions" | "permissionSources" | "configPath" | "savedPermissions" | "profile">, tool: string, keyOf?: (path: readonly string[]) => PermissionKey | null | undefined) => {
+export declare const preview: (command: Command, settings: Pick<Settings, "permissions" | "permissionSources" | "configPath" | "savedPermissions" | "profile">, tool: string, keyOf?: (path: readonly string[]) => PermissionKey | null | undefined, messenger?: boolean) => {
     preview: boolean;
     path: string[];
-    permission: {
-        key: string | null;
-        level: "allow" | "ask" | "readonly";
+    permission?: {
+        key: PermissionKey | null;
+        level: string;
+    } | undefined;
+    validation: {
+        arguments: string;
+        permissions: string;
+        targets: string;
+        businessRules: string;
+    };
+    effects: {
+        actionInvoked: boolean;
+        writeReserved: boolean;
+        messengerContacted?: boolean | undefined;
+        serviceContacted: boolean;
+        configurationRead: boolean;
     };
+    arguments: ({
+        name: string;
+        reference: string;
+    } | {
+        name: string;
+        supplied: boolean;
+        bytes: number | undefined;
+    })[];
+    options: string[];
+    trust: string;
+};
+/**
+ * `messenger_contacted` stays for the messengers, whose callers may read it; `service_contacted` says the same
+ * for every tool. Without `permission` nothing was checked: a host that is not `run` has no settings to check.
+ */
+export declare const previewBody: (command: Command, permission: {
+    key: PermissionKey | null;
+    level: string;
+} | undefined, messenger: boolean) => {
+    preview: boolean;
+    path: string[];
+    permission?: {
+        key: PermissionKey | null;
+        level: string;
+    } | undefined;
     validation: {
         arguments: string;
         permissions: string;
@@ -19,7 +57,8 @@ export declare const preview: (command: Command, settings: Pick<Settings, "permi
     effects: {
         actionInvoked: boolean;
         writeReserved: boolean;
-        messengerContacted: boolean;
+        messengerContacted?: boolean | undefined;
+        serviceContacted: boolean;
         configurationRead: boolean;
     };
     arguments: ({

package/dist/cli/preview.js

@@ -6,11 +6,11 @@ import { commandPathOf } from "./command-contract.js";
 import { refuseUnknownPermissionKeys } from "./permission-keys.js";
 export class PreviewComplete extends Error {
 }
-export const preview = (command, settings, tool, keyOf) => {
+export const preview = (command, settings, tool, keyOf, messenger = true) => {
     const path = commandPathOf(command);
     const { permissions } = settings;
     refuseUnknownPermissionKeys(command, settings, tool, keyOf && ((one) => keyOf(commandPathOf(one))));
-    const key = keyForCommand(path);
+    const key = keyOf?.(path) ?? keyForCommand(path);
     const level = key ? levelFor(permissions, key).level : "allow";
     for (const source of readKeysForCommand(path)) {
         if (levelFor(permissions, source).level === "deny")
@@ -21,18 +21,36 @@ export const preview = (command, settings, tool, keyOf) => {
         (key !== null && key !== undefined && WRITE_KEYS.includes(key));
     if (level === "deny" || (writes && level === "readonly"))
         throw new CliError("permission_error", `this profile does not permit ${path.join(" ")}`, { permission: key });
-    const targets = new Set(["chat", "message", "person", "profile"]);
+    return previewBody(command, { key: key ?? null, level }, messenger);
+};
+const TARGETS = new Set(["chat", "message", "person", "profile"]);
+/**
+ * `messenger_contacted` stays for the messengers, whose callers may read it; `service_contacted` says the same
+ * for every tool. Without `permission` nothing was checked: a host that is not `run` has no settings to check.
+ */
+export const previewBody = (command, permission, messenger) => {
     return {
         preview: true,
-        path,
-        permission: { key: key ?? null, level },
-        validation: { arguments: "parsed", permissions: "checked", targets: "unresolved", businessRules: "not-executed" },
-        effects: { actionInvoked: false, writeReserved: false, messengerContacted: false, configurationRead: true },
+        path: commandPathOf(command),
+        ...(permission ? { permission } : {}),
+        validation: {
+            arguments: "parsed",
+            permissions: permission ? "checked" : "not-checked",
+            targets: "unresolved",
+            businessRules: "not-executed",
+        },
+        effects: {
+            actionInvoked: false,
+            writeReserved: false,
+            ...(messenger ? { messengerContacted: false } : {}),
+            serviceContacted: false,
+            configurationRead: permission !== undefined,
+        },
         arguments: command.registeredArguments.map((argument, at) => {
             const value = command.processedArgs[at];
             return {
                 name: argument.name(),
-                ...(targets.has(argument.name()) && typeof value === "string"
+                ...(TARGETS.has(argument.name()) && typeof value === "string"
                     ? { reference: value }
                     : { supplied: value !== undefined, bytes: typeof value === "string" ? Buffer.byteLength(value) : undefined }),
             };

package/dist/cli/profile.d.ts

@@ -4,6 +4,13 @@ export declare const asFirstWord: (profile: string) => string;
 export declare const usableProfileName: (profile: string) => string;
 /** The top-level commands that never read a profile; every other one is `<tool> <profile> …`. */
 export declare const PROFILE_FREE: ReadonlySet<string>;
+/**
+ * Marks a command, and every command under it, as one that reads no profile, so help shows it without one:
+ * `drive doctor`, not `drive personal doctor`. Which commands those are is the CLI's to say.
+ */
+export declare const profileFree: <T extends Command>(command: T) => T;
+/** Whether the command line puts a profile before this command: not for `PROFILE_FREE` or a `profileFree` one. */
+export declare const takesProfile: (command: Command) => boolean;
 /**
  * Every word that means a command at the top level. Taken off the built program rather than
  * written out, because a list written out goes stale the day a command is added — and `help` is in

package/dist/cli/profile.js

@@ -16,6 +16,25 @@ export const usableProfileName = (profile) => {
 };
 /** The top-level commands that never read a profile; every other one is `<tool> <profile> …`. */
 export const PROFILE_FREE = new Set(["commands", "complete", "guide", "help", "skill", "upgrade"]);
+const freeOfProfile = new WeakSet();
+/**
+ * Marks a command, and every command under it, as one that reads no profile, so help shows it without one:
+ * `drive doctor`, not `drive personal doctor`. Which commands those are is the CLI's to say.
+ */
+export const profileFree = (command) => {
+    freeOfProfile.add(command);
+    return command;
+};
+/** Whether the command line puts a profile before this command: not for `PROFILE_FREE` or a `profileFree` one. */
+export const takesProfile = (command) => {
+    let top;
+    for (let at = command; at?.parent; at = at.parent) {
+        if (freeOfProfile.has(at))
+            return false;
+        top = at;
+    }
+    return top !== undefined && !PROFILE_FREE.has(top.name());
+};
 /**
  * Every word that means a command at the top level. Taken off the built program rather than
  * written out, because a list written out goes stale the day a command is added — and `help` is in

package/dist/cli/program.js

@@ -10,6 +10,7 @@ import { isCliFailure, isCommanderFailure } from "../errors/failures.js";
 import { failureContext } from "../errors/reasons.js";
 import { envName, readOnlyLockOf, readOnlyRefusal } from "../ports/app.js";
 import { recorded, wasSettled } from "../runs/recording.js";
+import { runContextOf } from "../runs/run-context.js";
 import { processRun, useAsProcessRun } from "../runs/scope.js";
 import { AUTHORITY_KEY, BOT_API_KEY, isBotApi, keyForCommand } from "../sends/permissions.js";
 import { logParsedArgv, logVersion } from "./argv-log.js";
@@ -17,7 +18,7 @@ import { commandAvailability } from "./command-availability.js";
 import { commandPathOf } from "./command-contract.js";
 import { outputFor, provide } from "./context.js";
 import { refuseWriteBeforeConnecting } from "./early-refusal.js";
-import { changesAuthorityAt, changesAuthorityNow, isLogin, isStoreChange, judgedEffects, judgedTargets, STORE_CHANGE_REFUSAL, } from "./effects.js";
+import { changesAuthorityAt, changesAuthorityNow, isLogin, isStoreChange, judgedEffects, judgedTargets, storeChangeRefusal, } from "./effects.js";
 import { itemOf, renderAnswer, snakeKeys } from "./envelope.js";
 import { byteCount, DEFAULT_COMMAND_MS, DEFAULT_OUTPUT_BYTES, execution } from "./execution.js";
 import { setupAtStart } from "./first-run.js";
@@ -26,7 +27,7 @@ import { showInputFields } from "./input-fields.js";
 import { MAX_BUFFERED_INPUT, provideInputPolicy } from "./input-policy.js";
 import { checkJson, liftJson } from "./json-fields.js";
 import { PreviewComplete, preview } from "./preview.js";
-import { commandWords, liftProfile, PROFILE_FREE, sampleCommand, valuedOptions } from "./profile.js";
+import { commandWords, liftProfile, sampleCommand, takesProfile, valuedOptions } from "./profile.js";
 import { absolutePaths, relayTarget } from "./relay-route.js";
 import { NoProfileHere, namedProfile, settingsFor, } from "./settings.js";
 import { assertSharedContracts } from "./shared-contracts.js";
@@ -73,14 +74,15 @@ export const createProgram = ({ app, commands, configure, firstScreen }, { out,
     assertSharedContracts(program);
     installHelp(program, { pitch: app.description, ...firstScreen });
     // Commander builds a usage line from the command tree, where the profile is not a word.
-    for (const top of program.commands) {
-        if (PROFILE_FREE.has(top.name()))
-            continue;
-        forEachCommand(top, (command) => command.configureHelp({
-            ...command.configureHelp(),
-            commandUsage: (shown) => `${app.command} <profile>${new Help().commandUsage(shown).slice(app.command.length)}`,
-        }));
-    }
+    if (firstScreen?.profile !== false)
+        for (const top of program.commands)
+            forEachCommand(top, (command) => command.configureHelp({
+                ...command.configureHelp(),
+                commandUsage: (shown) => {
+                    const usage = new Help().commandUsage(shown);
+                    return takesProfile(shown) ? `${app.command} <profile>${usage.slice(app.command.length)}` : usage;
+                },
+            }));
     // Depth-first: Commander does not pass `configureOutput` down to a command added with
     // `addCommand`, so `tg messages --help` would write to the real terminal.
     if (out || err) {
@@ -191,6 +193,7 @@ const runOnce = async (argv, definition, options) => {
     const exit = {};
     const environment = {
         ...options,
+        argv,
         streams: control.streams,
         signal: options.signal ? AbortSignal.any([control.signal, options.signal]) : control.signal,
         commandSignal: control.signal,
@@ -267,20 +270,22 @@ const runOnce = async (argv, definition, options) => {
         const path = commandPathOf(action);
         const lock = readOnlyLockOf(definition.app, commandEnv);
         const input = options.stdin ?? process.stdin;
-        await setupAtStart({
-            command,
-            env: commandEnv,
-            contentLanguages: definition.app.contentLanguages,
-            path,
-            headless,
-            readOnlyLock: lock,
-            input,
-            terminal: !options.streams && input.isTTY === true && process.stderr.isTTY === true,
-        });
+        // The first-run questions write the shared config; a dry run writes nothing.
+        if (!flags.dryRun)
+            await setupAtStart({
+                command,
+                env: commandEnv,
+                contentLanguages: definition.app.contentLanguages,
+                path,
+                headless,
+                readOnlyLock: lock,
+                input,
+                terminal: !options.streams && input.isTTY === true && process.stderr.isTTY === true,
+            });
         if (lock && isLogin(action) && !flags.dryRun)
             throw readOnlyRefusal(lock, "log in or out");
         if (lock && isStoreChange(action) && !flags.dryRun)
-            throw readOnlyRefusal(lock, STORE_CHANGE_REFUSAL);
+            throw readOnlyRefusal(lock, storeChangeRefusal(definition.app));
         refuseWriteBeforeConnecting(action, {
             app: definition.app,
             env: commandEnv,
@@ -385,7 +390,7 @@ const runOnce = async (argv, definition, options) => {
                 configPath: resolved.configPath ?? "",
                 profile: resolved.profile,
                 ...(resolved.savedPermissions ? { savedPermissions: resolved.savedPermissions } : {}),
-            }, command, definition.configuration?.permissionKey);
+            }, command, definition.configuration?.permissionKey, definition.app.messenger !== false);
             renderAnswer(action, outputFor(action), itemOf(snakeKeys(previewed)));
             throw new PreviewComplete();
         }
@@ -412,7 +417,7 @@ const runOnce = async (argv, definition, options) => {
             refuseJoinedPath(program, words.filter((word) => !word.startsWith("-")), profile !== undefined && !/\s/.test(profile) ? [profile] : []);
     }
     catch (failure) {
-        const settled = await settleFailure(failure, { definition, program, rest: lifted, profile, options });
+        const settled = await settleFailure(failure, { definition, program, rest: lifted, argv, profile, options });
         return report(streams, reporting, failed(definition, program, lifted, failure, settled, debug));
     }
     if (profile !== undefined)
@@ -427,7 +432,7 @@ const runOnce = async (argv, definition, options) => {
         const message = `"${profile}" is not a command, so it was read as a profile name — and no command followed it. ` +
             `Run \`${command} --help\` for the commands, or \`${command} ${profile} account show\` if "${profile}" is your profile.`;
         const failure = new CliError("validation_error", message, { param: "profile" });
-        const settled = await settleFailure(failure, { definition, program, rest, profile, options });
+        const settled = await settleFailure(failure, { definition, program, rest, argv, profile, options });
         return report(streams, reporting, failed(definition, program, rest, failure, settled, debug));
     }
     try {
@@ -472,10 +477,10 @@ const runOnce = async (argv, definition, options) => {
                 message += ` — "${profile}" is not a command, so it was read as a profile name — which left "${rest[0]}" to be one.`;
             }
             const failure = new CliError("validation_error", message);
-            const settled = await settleFailure(failure, { definition, program, rest, profile, options });
+            const settled = await settleFailure(failure, { definition, program, rest, argv, profile, options });
             return report(streams, reporting, failed(definition, program, rest, failure, settled, debug));
         }
-        const settled = await settleFailure(error, { definition, program, rest, profile, options });
+        const settled = await settleFailure(error, { definition, program, rest, argv, profile, options });
         const exit = report(streams, reporting, failed(definition, program, rest, error, settled, debug));
         return signalExit ?? exit;
     }
@@ -562,9 +567,9 @@ const settleFailure = async (failure, state) => {
 /**
  * **Every failure is kept as a run** — a usage error, a configuration that will not load, a command
  * that never opens a run — unless recording was turned off. One its own run already kept is skipped.
- * Only the command's words are named, never its arguments: those can be a message.
+ * Its arguments are kept masked (`maskArgv`): a value that can be a message never is.
  */
-const keepFailure = async (failure, { definition, program, rest, profile, options }) => {
+const keepFailure = async (failure, { definition, program, rest, argv, profile, options }) => {
     if (wasSettled(failure))
         return;
     const env = options.env ?? process.env;
@@ -577,9 +582,17 @@ const keepFailure = async (failure, { definition, program, rest, profile, option
     catch {
         // A configuration that will not load is a failure worth keeping too; the flags are all there is to go on.
     }
+    const command = `${options.agent ? "mcp " : ""}${path || definition.app.command}`;
     await recorded({
         app: definition.app,
-        command: `${options.agent ? "mcp " : ""}${path || definition.app.command}`,
+        command,
+        context: runContextOf({
+            bin: definition.app.command,
+            command: path ? command : options.agent ? "mcp" : "",
+            program,
+            argv,
+            env,
+        }),
         profile: settings ? namedProfile(settings) : profile,
         record: false,
         keepFailed: settings?.keepFailedRuns ?? !rest.includes("--no-record"),

package/dist/cli/runs/search.js

@@ -8,6 +8,8 @@ const FIELDS = [
     "opcode",
     "seq",
     "status",
+    "method",
+    "endpoint_template",
     "bytes",
     "ids",
     "counts",