@wirecat/cli-core 0.454.0 → 0.455.0

package/CHANGELOG.md

@@ -7,6 +7,16 @@ shape of this file.
 
 ## Unreleased
 
+## 0.455.0 — 27.10.2026
+
+### Added
+
+- **A CLI that is not a messenger reuses the shared permission helpers.** `./cli` exports `terminalAsker(command)`,
+  the guard's question at a terminal, and `refuseUnknownPermissionKeys`, the unknown-key refusal for a command the
+  shared check does not key (`api call`, `mcp`). `guardFor` takes `permissionDefaults` on its settings, so a key
+  the CLI defaults to `ask` asks instead of being allowed; without them it keeps the messenger defaults.
+  `terminalAsker`'s `confirmation_required` now names the key in `details.permission`.
+
 ## 0.454.0 — 27.10.2026
 
 ### Added

package/dist/cli/index.d.ts

@@ -86,6 +86,7 @@ export { readMeetingProjectCandidates } from "./meeting-project-candidates-read.
 export { meetingResultItem } from "./meeting-results.js";
 export { type MeetingSeriesInventoryReader, readMeetingSeriesInventory } from "./meeting-series-inventory-read.js";
 export { accountFileFor, profilesHere, rememberAccount } from "./messenger/accounts.js";
+export { terminalAsker } from "./messenger/ask.js";
 export type { CompletionOptions } from "./messenger/complete-command.js";
 export { type ConnectOptions, connectFor, type Messenger, type MessengerContext, messengerContext, type ReadConnection, type StoredMessages, } from "./messenger/context.js";
 export { COMMAND_NEEDS } from "./messenger/lacks.js";
@@ -103,7 +104,7 @@ export { storeSummary } from "./messenger/store-maintenance-command.js";
 export { type Saving, stored } from "./messenger/stored.js";
 export { MODEL_CATALOGUE_QUERY, type ModelCatalogueOptions } from "./model-catalogue-command.js";
 export { window, withPaging } from "./paging.js";
-export { type CommandPermissions, commandPathKey, commandPermissions, knownBeside, knownPermissionKeys, type PermissionKeyOf, type PermissionKeySource, unknownPermissionIssues, unknownPermissionKeys, } from "./permission-keys.js";
+export { type CommandPermissions, commandPathKey, commandPermissions, knownBeside, knownPermissionKeys, type PermissionKeyOf, type PermissionKeySource, refuseUnknownPermissionKeys, unknownPermissionIssues, unknownPermissionKeys, } from "./permission-keys.js";
 export { asFirstWord, commandWords, liftProfile, profileFree, refuseCommandName, rootOf, takesProfile, usableProfileName, } from "./profile.js";
 export { createProgram, type ProgramDefinition, type ProgramOptions, type RunOptions, run } from "./program.js";
 export { fieldsOf, projectFields } from "./result-fields.js";

package/dist/cli/index.js

@@ -79,6 +79,7 @@ export { readMeetingProjectCandidates } from "./meeting-project-candidates-read.
 export { meetingResultItem } from "./meeting-results.js";
 export { readMeetingSeriesInventory } from "./meeting-series-inventory-read.js";
 export { accountFileFor, profilesHere, rememberAccount } from "./messenger/accounts.js";
+export { terminalAsker } from "./messenger/ask.js";
 export { connectFor, messengerContext, } from "./messenger/context.js";
 export { COMMAND_NEEDS } from "./messenger/lacks.js";
 export { httpTokenFile, serverEntry } from "./messenger/mcp-command.js";
@@ -94,7 +95,7 @@ export { storeSummary } from "./messenger/store-maintenance-command.js";
 export { stored } from "./messenger/stored.js";
 export { MODEL_CATALOGUE_QUERY } from "./model-catalogue-command.js";
 export { window, withPaging } from "./paging.js";
-export { commandPathKey, commandPermissions, knownBeside, knownPermissionKeys, unknownPermissionIssues, unknownPermissionKeys, } from "./permission-keys.js";
+export { commandPathKey, commandPermissions, knownBeside, knownPermissionKeys, refuseUnknownPermissionKeys, unknownPermissionIssues, unknownPermissionKeys, } from "./permission-keys.js";
 export { asFirstWord, commandWords, liftProfile, profileFree, refuseCommandName, rootOf, takesProfile, usableProfileName, } from "./profile.js";
 export { createProgram, run } from "./program.js";
 export { fieldsOf, projectFields } from "./result-fields.js";

package/dist/cli/messenger/ask.js

@@ -67,7 +67,7 @@ export const terminalAsker = (command) => async (key, request) => {
         : await (environmentOf(command).answer ?? fromTerminal)(`${what(key, request)} — go ahead? [y/N] `);
     if (answer === null) {
         throw new CliError("confirmation_required", `${key} asks before it acts (its permission level is ask), and nobody is at a terminal to answer — ` +
-            `add ${flag} to go ahead`);
+            `add ${flag} to go ahead`, { permission: key });
     }
     if (!/^\s*y(es)?\s*$/i.test(answer))
         throw new CliError("cancelled", `${key}: not done — the answer was no`);

package/dist/sends/guard.d.ts

@@ -93,6 +93,8 @@ export interface GuardSettings {
     readOnlyLock?: string;
     permissions: Readonly<Record<PermissionKey, Level>>;
     permissionSources: Readonly<Record<PermissionKey, string>>;
+    /** A CLI's own defaults (`commandPermissions`); without them a key falls back to the messenger's. */
+    permissionDefaults?: Readonly<Record<PermissionKey, Level>>;
     sendsPerHour: number;
 }
 /**

package/dist/sends/guard.js

@@ -259,6 +259,7 @@ export const guardFor = (app, settings, warn, env = process.env, ask) => sendGua
     ...(settings.readOnlyLock ? { readOnlyLock: settings.readOnlyLock } : {}),
     permissions: () => settings.permissions,
     permissionSources: settings.permissionSources,
+    ...(settings.permissionDefaults ? { permissionDefaults: settings.permissionDefaults } : {}),
     ...(ask ? { ask } : {}),
     sendsPerHour: settings.sendsPerHour,
     journal: new SendJournal(sendsPathFor(app, settings.profile, env), { service: app.command, version: app.version }),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wirecat/cli-core",
-  "version": "0.454.0",
+  "version": "0.455.0",
   "description": "The messenger-neutral half of a messaging CLI: domain model, message locators, rendering, name resolution, the SQLite seam, the command skeleton and shared read commands, the send guard, run records and the message store",
   "license": "Apache-2.0",
   "author": "Viacheslav Ptsarev",