@wirecat/cli-core 0.437.0 → 0.438.0

package/CHANGELOG.md

@@ -5,6 +5,20 @@ Notable changes to `@wirecat/cli-core` (`@wirecat/cli-messaging` up to 0.261.0,
 minor version may break callers, and says how under "Changed — may break callers". `pnpm docs:check` checks the
 shape of this file.
 
+## Unreleased
+
+## 0.438.0 — 26.10.2026
+
+### Security
+
+- **A first word refused as a profile no longer reaches the run log.** When the first word could not be a profile
+  (`app "runs list"`, two words in one argument) or a profile lock refused it, the failed run's record kept it as
+  `profile` while its `argv` showed `[redacted]` — so whatever was typed first, possibly message text or a person's
+  name, was stored in the clear. Such a run now records no profile, as a run that names none does; a valid profile
+  the settings accepted is recorded as before. The lock's refusal quotes the refused word, so a kept error masks it,
+  and a bare first word with no command after it suggests `<tool> <word> account show` only when the word can be a
+  profile and the CLI has an `account show` command — that suggestion repeated the word unmasked in the kept error.
+
 ## 0.437.0 — 26.10.2026
 
 ### Added

package/dist/cli/profile.d.ts

@@ -1,6 +1,7 @@
 import type { Command } from "commander";
 /** How the command line names this profile: always the first word, since none is assumed. */
 export declare const asFirstWord: (profile: string) => string;
+export declare const isProfileName: (word: string) => boolean;
 export declare const usableProfileName: (profile: string) => string;
 /** The top-level commands that never read a profile; every other one is `<tool> <profile> …`. */
 export declare const PROFILE_FREE: ReadonlySet<string>;

package/dist/cli/profile.js

@@ -7,8 +7,9 @@ export const asFirstWord = (profile) => `${profile} `;
  * somewhere nobody would think to look.
  */
 const PLAIN_NAME = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+export const isProfileName = (word) => PLAIN_NAME.test(word);
 export const usableProfileName = (profile) => {
-    if (!PLAIN_NAME.test(profile)) {
+    if (!isProfileName(profile)) {
         throw new CliError("validation_error", `"${profile}" cannot be a profile name — letters, digits, dot, dash and underscore only, ` +
             "starting with a letter or a digit");
     }

package/dist/cli/program.js

@@ -27,7 +27,7 @@ import { showInputFields } from "./input-fields.js";
 import { MAX_BUFFERED_INPUT, provideInputPolicy } from "./input-policy.js";
 import { checkJson, liftJson } from "./json-fields.js";
 import { PreviewComplete, preview } from "./preview.js";
-import { commandWords, liftProfile, sampleCommand, takesProfile, valuedOptions } from "./profile.js";
+import { commandWords, isProfileName, liftProfile, sampleCommand, takesProfile, valuedOptions } from "./profile.js";
 import { absolutePaths, relayTarget } from "./relay-route.js";
 import { NoProfileHere, namedProfile, settingsFor, } from "./settings.js";
 import { assertSharedContracts } from "./shared-contracts.js";
@@ -433,8 +433,11 @@ const runOnce = async (argv, definition, options) => {
     // A bare word with nothing after it would make commander print help **on stdout**, which breaks
     // the one contract this program has and says nothing about why.
     if (profile !== undefined && rest.length === 0) {
+        const asProfile = commandAt(program, "account show") && isProfileName(profile)
+            ? `, or \`${command} ${profile} account show\` if "${profile}" is your profile`
+            : "";
         const message = `"${profile}" is not a command, so it was read as a profile name — and no command followed it. ` +
-            `Run \`${command} --help\` for the commands, or \`${command} ${profile} account show\` if "${profile}" is your profile.`;
+            `Run \`${command} --help\` for the commands${asProfile}.`;
         const failure = new CliError("validation_error", message, { param: "profile" });
         const settled = await settleFailure(failure, { definition, program, rest, argv, profile, options });
         return report(streams, reporting, failed(definition, program, rest, failure, settled, debug));
@@ -597,7 +600,8 @@ const keepFailure = async (failure, { definition, program, rest, argv, profile,
             argv,
             env,
         }),
-        profile: settings ? namedProfile(settings) : profile,
+        // Settings that did not load never accepted the word, which may be a refused name or somebody's words.
+        profile: settings ? namedProfile(settings) : undefined,
         record: false,
         keepFailed: settings?.keepFailedRuns ?? !rest.includes("--no-record"),
         trace: false,

package/dist/cli/settings.js

@@ -168,7 +168,7 @@ export const settingsFor = (app, extension = {}) => {
         if (profile.value === lock)
             return profile;
         if (profile.from === "first word" || profile.from === PROFILE) {
-            throw new CliError("permission_error", `this process is locked to profile ${lock} (${PROFILE_LOCK}) — profile ${profile.value} is refused`);
+            throw new CliError("permission_error", `this process is locked to profile ${lock} (${PROFILE_LOCK}) — profile "${profile.value}" is refused`);
         }
         return { value: lock, from: PROFILE_LOCK };
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wirecat/cli-core",
-  "version": "0.437.0",
+  "version": "0.438.0",
   "description": "The messenger-neutral half of a messaging CLI: domain model, message locators, rendering, name resolution, the SQLite seam, the command skeleton and shared read commands, the send guard, run records and the message store",
   "license": "Apache-2.0",
   "author": "Viacheslav Ptsarev",