@wirecat/cli-core 0.439.0 → 0.441.0

package/CHANGELOG.md

@@ -7,6 +7,55 @@ shape of this file.
 
 ## Unreleased
 
+## 0.441.0 — 26.10.2026
+
+### Added
+
+- **`tasks list claimed_by:<holder>` lists the tasks a holder has claimed**, and `claimed_by:*` every claimed task.
+  A caller that wanted one agent's claims read every open task and filtered them itself. The filter matches live
+  claims only: a claim whose lease has lapsed holds nothing, as `tasks claim` and the list's own `claimed_by` field
+  already read it, so `NOT claimed_by:*` lists what no one is working on. A wildcard such as `claimed_by:claude-code:*`
+  matches by pattern.
+
+### Fixed
+
+- **`tasks claim` and `tasks release` work on a project task**, which belongs to no messenger account, as `tasks show`
+  and `tasks update` already did. They refused it as "no task for this account", so memo, which mounts these
+  commands, could not claim its own project tasks.
+
+## 0.440.0 — 26.10.2026
+
+### Added
+
+- **A CLI's own command can keep its command line in its run record.** A command the CLI records itself with
+  `recorded` or `startRecording` kept no `argv` and no agent, since only cli-core's own commands built that part of the
+  record. `runContextOf` and the `RunContext` type are now exported from `@wirecat/cli-core/cli`. To adopt, pass
+  `context: runContextOf({ bin, command, program: rootOf(command), argv: environmentOf(command).argv, env,
+  recordInput: settings.recordInput !== false })` to the call; a CLI with its own program passes its own root command
+  and the words it parsed. Left out, `recordInput` masks every value that may be content. A CLI that records through
+  `commandRuns` under `run()` gets the command line with no change; its `settings()` may return `recordInput`, and when
+  it does not, the typed words are kept with secrets hidden.
+- **`secretInput` also marks a whole command**: every word typed after it that is not an option is `[redacted]` in a
+  run record. For a command that refuses its arguments, such as one that asks for a phone number instead of taking it,
+  this hides what was typed without declaring an argument, so its usage line and contract stay the same.
+
+### Changed — may break callers
+
+- **`--record` help says what a run keeps now.** It read "ids and timings, never content", which stopped being true
+  in 0.439.0; it now reads "keep this run, with the command as typed and secrets hidden; record_input false leaves the
+  typed words out". Every CLI's help snapshot and `docs/commands.md` change with it. `recordRuns` no longer takes
+  `content`, which only that line used.
+
+### Security
+
+- **A phone number no longer reaches a run record.** Since 0.439.0 a run keeps the words as typed, so a number typed
+  after `contacts lookup`, which the command refuses, was kept in `argv` in the clear. The command is now marked with
+  `secretInput`, so every word typed after it is `[redacted]`. A phone number typed anywhere else, message text included, is replaced by `[redacted]` inside the word,
+  the rest kept: one written with its "+" and country code, or 11 to 15 digits in a row, the shapes a kept error
+  already masks. A positive id of 11 to 15 digits, such as an 11-digit Zoom meeting id or a time in milliseconds, is
+  hidden as well; a negative chat id is kept. A number with no "+" written in groups (`8 912 345-67-89`) is not
+  recognised.
+
 ## 0.439.0 — 26.10.2026
 
 ### Changed — may break callers

package/README.md

@@ -217,8 +217,8 @@ they deliberately differ. A rule changes in its own pull request, before the cod
 - **The tool never picks an account.** Every account command names its profile — the first word in tg, max and
   wa, an option such as `--account` or `--profile` in the others; without one, the command stops and lists the
   choices — even when there is only one.
-- **Run records keep ids and timings, never content.** A failure is kept by default, so `runs show` can explain it
-  without anyone sending a log full of messages.
+- **Run records keep the command as typed, never a secret.** A failure is kept by default, so `runs show` can explain
+  it; a token, a password or a phone number is hidden, and `record_input: false` leaves the typed words out too.
 - **Tests that cannot touch real data.** A sandbox keeps every test away from the owner's store, and no test may
   sleep. A coverage floor: 92% of lines, and at least half of every file.
 - **Contract cases for every adapter.** `contractCases` turns the port's promises into cases any test runner can run,

package/dist/cli/command-runs.d.ts

@@ -6,6 +6,8 @@ import type { RequestEvent } from "../runs/events.js";
 export interface SavedRunSettings {
     record?: boolean | undefined;
     keepRunsForDays?: number | undefined;
+    /** `record_input`: left out, the typed words are kept, secrets hidden. */
+    recordInput?: boolean | undefined;
 }
 export interface RunSettings {
     record: boolean;
@@ -59,6 +61,4 @@ export declare const providerRequest: (operation: string, sink?: (event: Request
  * on. Call it after the program's other `parseAsync` wrappers, so its own is the outermost and sees how the parse
  * really ended; a refusal in an earlier `preAction` hook is then kept under the words read from the line.
  */
-export declare const recordRuns: (program: Command, options: CommandRunOptions & {
-    content: string;
-}) => void;
+export declare const recordRuns: (program: Command, options: CommandRunOptions) => void;

package/dist/cli/command-runs.js

@@ -2,7 +2,9 @@ import { AsyncLocalStorage } from "node:async_hooks";
 import { isCliError } from "@wirecat/cli-base";
 import { startRecording, wasSettled } from "../runs/recording.js";
 import { KEEP_RUNS_FOR_DAYS } from "../runs/run.js";
+import { runContextOf } from "../runs/run-context.js";
 import { environmentOf } from "./context.js";
+import { rootOf } from "./profile.js";
 /** `--record`/`--no-record` first, then the config; a failure is kept unless either says no (WC-LIFE-15). */
 export const runSettings = (flag, saved = {}) => {
     const record = flag ?? saved.record ?? false;
@@ -41,9 +43,10 @@ const tracker = (options) => {
         const agent = options.agent ?? environment.agent !== undefined;
         const streams = options.streams ?? environment.streams;
         const env = options.env ?? environment.env;
+        const command = `${agent ? "mcp " : ""}${words.join(" ") || options.app.command}`;
         recording = startRecording({
             app: options.app,
-            command: `${agent ? "mcp " : ""}${words.join(" ") || options.app.command}`,
+            command,
             ...(profile === undefined ? {} : { profile }),
             record: settings.record,
             keepFailed: settings.keepFailedRuns,
@@ -52,6 +55,14 @@ const tracker = (options) => {
             format,
             ...(streams ? { streams } : {}),
             ...(env ? { env } : {}),
+            context: runContextOf({
+                bin: options.app.command,
+                command: words.length > 0 ? command : "",
+                program: rootOf(program),
+                ...(environment.argv ? { argv: environment.argv } : {}),
+                env: env ?? process.env,
+                recordInput: saved.recordInput !== false,
+            }),
         });
     };
     const finish = () => {
@@ -131,7 +142,7 @@ const isHelpExit = (error) => {
  */
 export const recordRuns = (program, options) => {
     program
-        .option("--record", `keep this run — ids and timings, never ${options.content}`)
+        .option("--record", "keep this run, with the command as typed and secrets hidden; record_input false leaves the typed words out")
         .option("--no-record", "do not keep this run, even if it fails");
     program.hook("preAction", (_root, action) => {
         const parse = parses.getStore();

package/dist/cli/index.d.ts

@@ -24,8 +24,8 @@ export { repliesStatePathFor } from "../replies/state.js";
 export { type CacheEvent, type DiagnosticEvent, type EventSink, providerErrorKey, type RequestEvent, renderEvent, type WarningEvent, } from "../runs/events.js";
 export { CORE_LOG_EVENTS } from "../runs/log-events.js";
 export { crashOf, type Recording, type RecordingOptions, recorded, startRecording, wasSettled, } from "../runs/recording.js";
-export { findRun, KEEP_RUNS_FOR_DAYS, listRuns, pruneRuns, type RunMetadata, readEvents, runsDirFor, runtime, startRun, } from "../runs/run.js";
-export { secretInput } from "../runs/run-context.js";
+export { findRun, KEEP_RUNS_FOR_DAYS, listRuns, pruneRuns, type RunContext, type RunMetadata, readEvents, runsDirFor, runtime, startRun, } from "../runs/run.js";
+export { runContextOf, secretInput } from "../runs/run-context.js";
 export { currentRun, inRun, type RunScope, useAsProcessRun } from "../runs/scope.js";
 export { LANGUAGES } from "../search/languages.js";
 export { guardedApp, guardedPress, guardedStart, type Pressed } from "../sends/buttons.js";

package/dist/cli/index.js

@@ -21,7 +21,7 @@ export { providerErrorKey, renderEvent, } from "../runs/events.js";
 export { CORE_LOG_EVENTS } from "../runs/log-events.js";
 export { crashOf, recorded, startRecording, wasSettled, } from "../runs/recording.js";
 export { findRun, KEEP_RUNS_FOR_DAYS, listRuns, pruneRuns, readEvents, runsDirFor, runtime, startRun, } from "../runs/run.js";
-export { secretInput } from "../runs/run-context.js";
+export { runContextOf, secretInput } from "../runs/run-context.js";
 export { currentRun, inRun, useAsProcessRun } from "../runs/scope.js";
 export { LANGUAGES } from "../search/languages.js";
 export { guardedApp, guardedPress, guardedStart } from "../sends/buttons.js";

package/dist/cli/messenger/contacts-command.js

@@ -3,6 +3,7 @@ import { annotate } from "@wirecat/cli-base/commands";
 import { defineQuery } from "@wirecat/cli-base/query";
 import { Command } from "commander";
 import { REGISTRIES, registriesCover } from "../../botcheck/registries.js";
+import { secretInput } from "../../runs/run-context.js";
 import { levelFor } from "../../sends/permissions.js";
 import { phoneOf } from "../../services/index.js";
 import { dateWindow } from "../../services/moment.js";
@@ -276,7 +277,7 @@ export const contactsCommand = (messenger) => {
      * ⚠ **The number is asked for or piped, never an argument**: argv is read by `ps` and kept by shell
      * history, and a phone number is personal data.
      */
-    annotate(contacts.command("lookup"), { effects: REMOTE_READ, output: { entity: "contact_lookup" } })
+    annotate(secretInput(contacts.command("lookup")), { effects: REMOTE_READ, output: { entity: "contact_lookup" } })
         .summary("find an account by a phone number")
         .description("who has this phone number — asks for it, or reads it from stdin; never an argument")
         // Commander's own refusal would repeat the number on stderr.

package/dist/cli/program.js

@@ -69,7 +69,7 @@ export const createProgram = ({ app, commands, configure, firstScreen }, { out,
         .option("--full", `${found} with their whole text and every provider field`)
         .option("--dry-run", "preview parsed arguments and permissions before running the action")
         .option("--yes", "go ahead without the question an ask level puts before a write")
-        .option("--record", `keep this run — ids and timings, never ${content}`)
+        .option("--record", "keep this run, with the command as typed and secrets hidden; record_input false leaves the typed words out")
         .option("--no-record", "do not keep it, whatever the configuration says")
         .showHelpAfterError();
     for (const command of mounted)

package/dist/runs/error-detail.d.ts

@@ -34,6 +34,9 @@ export declare const framesOf: (error: unknown, limit?: number) => string[];
  * or a token in the path as `:id` / `:token`. The host stays — which service refused is the point.
  */
 export declare const endpointTemplate: (raw: string) => string;
+/** A phone number as people type it with its country code, and one written as digits only without the "+". */
+export declare const INTERNATIONAL_PHONE: string;
+export declare const BARE_PHONE: string;
 /**
  * An error's sentence with what could be somebody's words or a secret taken out: anything in quotes, an email, a
  * phone number, a bot token, a bearer or a long opaque string, a URL's query, the home directory. A second line of

package/dist/runs/error-detail.js

@@ -109,6 +109,9 @@ export const endpointTemplate = (raw) => {
     });
     return `${scheme}${segments.join("/")}`.slice(0, 300);
 };
+/** A phone number as people type it with its country code, and one written as digits only without the "+". */
+export const INTERNATIONAL_PHONE = /\+\d[\d\s()-]{6,}\d/.source;
+export const BARE_PHONE = /(^|[^\w-])\d{11,15}\b/.source;
 /**
  * An error's sentence with what could be somebody's words or a secret taken out: anything in quotes, an email, a
  * phone number, a bot token, a bearer or a long opaque string, a URL's query, the home directory. A second line of
@@ -121,8 +124,8 @@ export const redactText = (text) => {
         .replace(/"[^"\n]*"|“[^”\n]*”|«[^»\n]*»/g, '"[redacted]"')
         .replace(/\b(bearer|basic|token|key|password|secret)(\s*[:=]\s*|\s+)[^\s'"]+/gi, "$1$2[redacted]")
         .replace(/[\w.+-]+@[\w-]+\.[\w.-]+/g, "[email]")
-        .replace(/\+\d[\d\s()-]{6,}\d/g, "[number]")
-        .replace(/(^|[^\w-])\d{11,15}\b/g, "$1[number]")
+        .replace(new RegExp(INTERNATIONAL_PHONE, "g"), "[number]")
+        .replace(new RegExp(BARE_PHONE, "g"), "$1[number]")
         .replace(/\bbot\d+:[\w-]+/g, "bot[token]")
         .replace(/\b\d{6,}:[\w-]{20,}\b/g, "[token]")
         .replace(/(\?|&)[^\s#]*/g, "$1[redacted]")

package/dist/runs/run-context.d.ts

@@ -22,12 +22,15 @@ export interface MaskedArgv {
     /** The first word that names no command where one was expected. */
     unknownCommand?: string;
 }
-/** Marks an option or argument whose value a run record never keeps, whatever the owner's `record_input`. */
-export declare const secretInput: <T extends Option | Argument>(input: T) => T;
+/**
+ * Marks an option or argument whose value a run record never keeps, whatever the owner's `record_input`; on a command,
+ * every word typed after it that is not an option.
+ */
+export declare const secretInput: <T extends Option | Argument | Command>(input: T) => T;
 /**
  * The command line for a run record. With `keep` (the owner's `record_input`, on unless turned off) every word stays
- * as typed except a secret: a value of an input marked `secretInput` or named for one (`--token`), and a word shaped
- * like a credential. With `keep` off, command words, flag names and the profile stay; a value stays only when its
+ * as typed except a secret: a value of an input marked `secretInput` or named for one (`--token`), a word shaped
+ * like a credential, and a phone number inside any word. With `keep` off, command words, flag names and the profile stay; a value stays only when its
  * shape cannot be somebody's words — a number short of a phone's length, a duration, a date, `true`, one of the
  * option's declared choices — and its option or argument is not named for content (`--text`, `<phone>`). Anything
  * else, a positional after `--` or an argument no command declares, is `[redacted]`: a chat is often typed by title.
@@ -35,7 +38,11 @@ export declare const secretInput: <T extends Option | Argument>(input: T) => T;
 export declare const maskArgv: (program: Command, words: readonly string[], { keep }?: {
     keep?: boolean | undefined;
 }) => MaskedArgv;
-/** A run's context from the parsed program: `max messages list` and its words, or the word that named nothing. */
+/**
+ * A run's context from the parsed program: `max messages list` and its words, or the word that named nothing. A CLI
+ * that calls `recorded` or `startRecording` for a command of its own passes this as `context`; without it the run
+ * keeps no command line and no agent.
+ */
 export declare const runContextOf: ({ bin, command, program, argv, env, recordInput, }: {
     bin: string;
     /** The run's own name, `messages list` or `mcp messages list`; empty when no command was recognised. */

package/dist/runs/run-context.js

@@ -1,4 +1,5 @@
 import { isContentKey } from "@wirecat/cli-base/standards";
+import { BARE_PHONE, INTERNATIONAL_PHONE } from "./error-detail.js";
 export const REDACTED = "[redacted]";
 /**
  * The agent is read from what each one sets in the processes it starts: Claude Code `CLAUDECODE` and
@@ -40,7 +41,10 @@ const sessionOf = (kind, env) => {
 };
 const plainWord = (word) => /^[A-Za-z][A-Za-z0-9.-]{0,39}$/.test(word);
 const secretInputs = new WeakSet();
-/** Marks an option or argument whose value a run record never keeps, whatever the owner's `record_input`. */
+/**
+ * Marks an option or argument whose value a run record never keeps, whatever the owner's `record_input`; on a command,
+ * every word typed after it that is not an option.
+ */
 export const secretInput = (input) => {
     secretInputs.add(input);
     return input;
@@ -67,10 +71,12 @@ const secretNamed = (name) => {
 };
 // A password inside a URL, or one unbroken run of 40 token characters, is a credential wherever it was typed.
 const secretShaped = (word) => /:\/\/[^/@\s:]+:[^/@\s]+@/.test(word) || /(^|[^A-Za-z0-9_-])[A-Za-z0-9_-]{40,}($|[^A-Za-z0-9_-])/.test(word);
+// Messaging CLIs promise a phone number reaches no log, so it goes even from text the record otherwise keeps.
+const withoutPhones = (word) => word.replace(new RegExp(INTERNATIONAL_PHONE, "g"), REDACTED).replace(new RegExp(BARE_PHONE, "g"), `$1${REDACTED}`);
 /**
  * The command line for a run record. With `keep` (the owner's `record_input`, on unless turned off) every word stays
- * as typed except a secret: a value of an input marked `secretInput` or named for one (`--token`), and a word shaped
- * like a credential. With `keep` off, command words, flag names and the profile stay; a value stays only when its
+ * as typed except a secret: a value of an input marked `secretInput` or named for one (`--token`), a word shaped
+ * like a credential, and a phone number inside any word. With `keep` off, command words, flag names and the profile stay; a value stays only when its
  * shape cannot be somebody's words — a number short of a phone's length, a duration, a date, `true`, one of the
  * option's declared choices — and its option or argument is not named for content (`--text`, `<phone>`). Anything
  * else, a positional after `--` or an argument no command declares, is `[redacted]`: a chat is often typed by title.
@@ -82,7 +88,7 @@ export const maskArgv = (program, words, { keep = false } = {}) => {
     let positional = 0;
     let profileSeen = false;
     let lost = false;
-    const raw = (word) => (keep && !secretShaped(word) ? word : REDACTED);
+    const raw = (word) => (keep && !secretShaped(word) ? withoutPhones(word) : REDACTED);
     const keptValue = (name, value, input) => keep
         ? (input && secretInputs.has(input)) || secretNamed(name)
             ? REDACTED
@@ -145,7 +151,7 @@ export const maskArgv = (program, words, { keep = false } = {}) => {
             }
             if (current === program && !profileSeen) {
                 profileSeen = true;
-                argv.push(keep ? raw(word) : PROFILE.test(word) ? word : REDACTED);
+                argv.push(keep ? raw(word) : PROFILE.test(word) && withoutPhones(word) === word ? word : REDACTED);
                 continue;
             }
             if (current.commands.length > 0 && current.registeredArguments.length === 0) {
@@ -158,7 +164,7 @@ export const maskArgv = (program, words, { keep = false } = {}) => {
         const declared = lost ? undefined : current.registeredArguments;
         const argument = declared?.[Math.min(positional, declared.length - 1)];
         positional += 1;
-        argv.push(argument ? keptValue(argument.name(), word, argument) : raw(word));
+        argv.push(secretInputs.has(current) ? REDACTED : argument ? keptValue(argument.name(), word, argument) : raw(word));
     }
     return { argv, ...(unknownCommand === undefined ? {} : { unknownCommand }) };
 };
@@ -184,7 +190,11 @@ const safeShape = (value) => (NUMBER.test(value) && !/^\d{11,}$/.test(value)) ||
     /^\d{4}-\d{2}-\d{2}([T ]\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:?\d{2})?)?$/.test(value) ||
     value === "true" ||
     value === "false";
-/** A run's context from the parsed program: `max messages list` and its words, or the word that named nothing. */
+/**
+ * A run's context from the parsed program: `max messages list` and its words, or the word that named nothing. A CLI
+ * that calls `recorded` or `startRecording` for a command of its own passes this as `context`; without it the run
+ * keeps no command line and no agent.
+ */
 export const runContextOf = ({ bin, command, program, argv, env, recordInput = false, }) => {
     const masked = program && argv ? maskArgv(program, argv, { keep: recordInput }) : undefined;
     const agent = agentOf(env);

package/dist/services/tasks.js

@@ -15,17 +15,7 @@ export const TASK_QUERY = {
     entity: "task",
     backend: "sql",
     fields: queryFieldsOf(taskEntity, {
-        exclude: [
-            "ref",
-            "description",
-            "project",
-            "account",
-            "priority",
-            "parent",
-            "claimed_by",
-            "claimed_until",
-            "close_suggestion",
-        ],
+        exclude: ["ref", "description", "project", "account", "priority", "parent", "claimed_until", "close_suggestion"],
         relations: {
             close: {
                 type: "enum",
@@ -47,6 +37,7 @@ export const TASK_QUERY = {
             chat: "chat:12345",
             title: "title:*invoice*",
             source_message: 'source_message:"msg:telegram/1/2/3"',
+            claimed_by: "claimed_by:session-1",
         },
     }),
 };
@@ -84,6 +75,13 @@ const taskColumns = (groups, tags) => ({
             : { sql: "t.source_group = ?", params: [groups.get(node.value) ?? ""] },
     },
     source_message: { type: "ref", sql: "t.source_locator" },
+    // A lapsed claim holds nothing, as tasks claim and the list's own claimed_by read it.
+    claimed_by: {
+        where: (node) => ({
+            sql: `t.claimed_by ${node.operator === "wildcard" ? "GLOB" : "="} ? AND t.claimed_until >= ?`,
+            params: [node.value, Date.now()],
+        }),
+    },
     reason: { type: "kw", sql: "t.close_reason_folded", folded: true },
     close: { where: () => ({ sql: "t.close_suggested_as IS NOT NULL", params: [] }) },
     assignee: {
@@ -343,16 +341,21 @@ export const tasksService = (deps, categories) => {
             const { pair } = await store.tasks.unmerge(dup, by === "owner" ? "owner" : { bot: by });
             return { pair, task: await cardOf(store, dup) };
         }),
-        claim: (id, holder, forMs) => inStore(async (store, account) => {
-            await owned(store, account, id);
+        // A project task belongs to no messenger account, as show reads it.
+        claim: async (id, holder, forMs) => {
+            const store = await deps.store();
+            if (!(await store.tasks.projectTask(id)))
+                await owned(store, await deps.account(), id);
             await store.tasks.claim(id, holder, new Date(Date.now() + forMs));
             return cardOf(store, id);
-        }),
-        release: (id, holder) => inStore(async (store, account) => {
-            await owned(store, account, id);
+        },
+        release: async (id, holder) => {
+            const store = await deps.store();
+            if (!(await store.tasks.projectTask(id)))
+                await owned(store, await deps.account(), id);
             await store.tasks.release(id, holder);
             return cardOf(store, id);
-        }),
+        },
         close: (id, { as, reason, by, agent, certainty, suggestOnly }) => inStore(async (store, account) => {
             const existing = await owned(store, account, id);
             const suggested = existing.state === "open" ? await store.tasks.closeSuggestion(id) : null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wirecat/cli-core",
-  "version": "0.439.0",
+  "version": "0.441.0",
   "description": "The messenger-neutral half of a messaging CLI: domain model, message locators, rendering, name resolution, the SQLite seam, the command skeleton and shared read commands, the send guard, run records and the message store",
   "license": "Apache-2.0",
   "author": "Viacheslav Ptsarev",

package/parity.json

@@ -822,7 +822,7 @@
       "meaning": "why a task was closed, kept with it — no-reply-needed, for example"
     },
     "--record": {
-      "meaning": "keep this run under `runs` — ids and timings, never message content",
+      "meaning": "keep this run under `runs`, with the command as typed and secrets hidden; record_input false leaves the typed words out",
       "note": "max's own copy is worded differently until T6 moves the command onto the shared one (e13)"
     },
     "--remind-time": {