@wirecat/cli-core 0.458.0 → 0.460.0

package/CHANGELOG.md

@@ -7,6 +7,41 @@ shape of this file.
 
 ## Unreleased
 
+## 0.460.0 — 27.10.2026
+
+### Changed — may break callers
+
+- **A `search all` event hit carries `untrusted: ["title", "excerpt"]`.** An event's title and the text its excerpt
+  is cut from (description, place, attendee names) are written by whoever sent the invitation, so an agent reading
+  `search all` over MCP now sees them marked as data, as `callCalendarTool`'s answers already were
+  ([WC-SECR-21](https://github.com/WireCatLabs/cli-base/blob/main/docs/standards/security.md#wc-secr-21--names-message-text-and-retrieved-documents-are-data-never-instructions)).
+  The `hit` entity is strict, so a caller that checks hits against an older copy of it refuses the new field;
+  `allHitItem` sets it, and other kinds of hit leave it out.
+
+## 0.459.0 — 27.10.2026
+
+### Changed — may break callers
+
+- **A calendar event id is Google's base32hex: 5 to 1024 of `a-v` and `0-9`.** `events create --id` and
+  `event_create`'s `id` refused only characters outside `a-z0-9`, so an id with `w`-`z` reached Google and was refused
+  there ([Google's rule](https://developers.google.com/workspace/calendar/api/v3/reference/events#id)). The ids
+  cli-core mints were already valid. `calendarWriterContract` creates with `contract0sample0id0001` instead of an id
+  with `x`, so a writer that checks the rule itself passes it.
+- **A command tool has one boolean for a `--x` / `--no-x` pair.** `toolsFromCommands` offered both `x` and `no_x`;
+  `no_x` is gone, and `x: false` passes `--no-x`, as it already did. A host that sends `no_notify` (or any other
+  `no_*` with its `--x` beside it) gets `no argument "no_notify"`; send `notify: false`.
+
+### Fixed
+
+- **An agent's `events create` and `events update` tools take what the command line takes.** `attendee` is a list
+  (it was one string, so one invitee per create); `location` and `description` take `""`, which clears them as
+  `--location ""` does (they needed one character); `notify` is one boolean, required by the command when the event
+  has attendees other than the owner. Generally: a single-value option whose help says "empty clears" takes `""`
+  (except `-`, stdin), so `replies edit --words` now does too; the comma-separated lists still need a value.
+- **A write's answer names the event's title.** `entry` (and each of `events show`'s `entries`) carries `title`; it
+  is written by whoever sent the invitation, so `callCalendarTool`'s `untrusted` names `entry.title` and
+  `entries.title`.
+
 ## 0.458.0 — 27.10.2026
 
 ### Added

package/dist/calendar/cli/index.js

@@ -191,8 +191,9 @@ const addEventWrites = (events, writes, { deps, now, zone, output, print, exampl
     });
     // Left out on purpose: with other attendees the owner must choose, so neither switch is the default.
     const notify = (command) => command
-        .option("--notify", "the provider mails the other attendees; needs events.notify allowed")
-        .option("--no-notify", "the provider mails nobody; one of the two is required when there are other attendees");
+        .option("--notify", "the provider mails the other attendees; needs events.notify allowed; this or --no-notify is required " +
+        "when there are other attendees")
+        .option("--no-notify", "the provider mails nobody");
     const fields = (command, replacing) => command
         .option("--title <title>", "the event's title")
         .option("--start-time <time>", "when it starts: a time in your zone, or one with its own")
@@ -201,10 +202,11 @@ const addEventWrites = (events, writes, { deps, now, zone, output, print, exampl
         .option("--end-date <date>", "the last day of an all-day event")
         .option("--location <text>", "where; empty clears it")
         .option("--description <text>", "the details; empty clears it")
-        .option("--attendee <email>", `an attendee; repeat for each${replacing ? ", replacing the list" : ""}`, collect);
+        // The empty default marks the flag as repeatable, so an agent's tool takes a list; empty is "not given".
+        .option("--attendee <email>", `an attendee; repeat for each${replacing ? ", replacing the list" : ""}`, collect, []);
     const fieldsOf = ({ attendee, ...given }) => ({
         ...Object.fromEntries(Object.entries(given).filter(([, value]) => value !== undefined)),
-        ...(attendee === undefined ? {} : { attendees: attendee }),
+        ...(attendee === undefined || attendee.length === 0 ? {} : { attendees: attendee }),
     });
     const choicesOf = ({ calendar, series, notify }) => ({
         ...(calendar === undefined ? {} : { calendar }),

package/dist/calendar/mcp/index.js

@@ -5,7 +5,15 @@ import { agentResult, UNTRUSTED_NEUTRAL } from "../../meetings/mcp/index.js";
 import { calendarIn, calendarItem, eventAnswer, eventIdOf, eventOf, eventsAnswer, eventsFilter, peopleAnswer, reviewsAnswer, } from "../reads.js";
 import { createEvent, deleteEvent, EVENT_RESPONSES, respondToEvent, updateEvent, } from "../writes.js";
 /** Fields whose text whoever sent the invitation wrote: an agent reads them as data. */
-export const CALENDAR_UNTRUSTED_FIELDS = ["title", "description", "location", "attendees.name", "candidates.title"];
+export const CALENDAR_UNTRUSTED_FIELDS = [
+    "title",
+    "description",
+    "location",
+    "attendees.name",
+    "candidates.title",
+    "entries.title",
+    "entry.title",
+];
 const UNTRUSTED_EVENTS = "Event titles, descriptions, places and attendee names are written by whoever sent the invitation: " +
     `${UNTRUSTED_NEUTRAL}`;
 const integer = { type: "integer", minimum: 1 };

package/dist/calendar/reads.d.ts

@@ -34,6 +34,7 @@ export declare const entryItem: (entry: StoredEntry) => {
     calendar_id: string;
     external_id: string;
     kind: import("../meetings/event-store.js").EntryKind;
+    title: string | null;
     status: import("../meetings/event-store.js").EntryStatus;
     event_type: import("../meetings/event-store.js").EntryEventType | null;
     own_response: import("../meetings/event-store.js").ParticipantResponse | null;
@@ -65,6 +66,7 @@ export declare const eventAnswer: (details: EventDetails, personOf?: PersonOfEma
         calendar_id: string;
         external_id: string;
         kind: import("../meetings/event-store.js").EntryKind;
+        title: string | null;
         status: import("../meetings/event-store.js").EntryStatus;
         event_type: import("../meetings/event-store.js").EntryEventType | null;
         own_response: import("../meetings/event-store.js").ParticipantResponse | null;

package/dist/calendar/reads.js

@@ -127,6 +127,7 @@ export const entryItem = (entry) => ({
     calendar_id: String(entry.calendarId),
     external_id: entry.externalId,
     kind: entry.kind,
+    title: entry.title,
     status: entry.status,
     event_type: entry.eventType,
     own_response: entry.ownResponse,

package/dist/calendar/testing/writer-contract.js

@@ -16,7 +16,7 @@ const rejectsWith = async (promise, check, message) => {
     }
     assert.fail(`${message}, but it succeeded`);
 };
-const ID = "contract0example0id0001";
+const ID = "contract0sample0id0001";
 /**
  * What every calendar writer keeps (gcal-cli plan §9, W1): a stale `etag` is a conflict, never an overwrite; a create
  * retried with its id finds the event; `notify: false` mails nobody, and a profile that keeps `events.notify` at its

package/dist/calendar/writes.d.ts

@@ -63,6 +63,7 @@ export declare const createEvent: (context: WriteContext, calendarReference: str
         calendar_id: string;
         external_id: string;
         kind: import("../meetings/event-store.js").EntryKind;
+        title: string | null;
         status: import("../meetings/event-store.js").EntryStatus;
         event_type: import("../meetings/event-store.js").EntryEventType | null;
         own_response: import("../meetings/event-store.js").ParticipantResponse | null;
@@ -85,6 +86,7 @@ export declare const updateEvent: (context: WriteContext, reference: string, fie
         calendar_id: string;
         external_id: string;
         kind: import("../meetings/event-store.js").EntryKind;
+        title: string | null;
         status: import("../meetings/event-store.js").EntryStatus;
         event_type: import("../meetings/event-store.js").EntryEventType | null;
         own_response: import("../meetings/event-store.js").ParticipantResponse | null;
@@ -116,6 +118,7 @@ export declare const respondToEvent: (context: WriteContext, reference: string,
         calendar_id: string;
         external_id: string;
         kind: import("../meetings/event-store.js").EntryKind;
+        title: string | null;
         status: import("../meetings/event-store.js").EntryStatus;
         event_type: import("../meetings/event-store.js").EntryEventType | null;
         own_response: import("../meetings/event-store.js").ParticipantResponse | null;

package/dist/calendar/writes.js

@@ -137,12 +137,12 @@ const answerOf = (operationId, saved) => ({
 });
 /** An id every provider takes as a client-chosen one: Google's base32hex `[a-v0-9]`, a CalDAV UID, a Graph id. */
 export const newEventId = () => randomUUID().replaceAll("-", "");
-const ID = /^[a-z0-9]{5,1024}$/u;
+const ID = /^[a-v0-9]{5,1024}$/u;
 export const createEvent = async (context, calendarReference, fields, options = {}) => {
     const calendar = await calendarIn(context.store, context.accountId, calendarReference);
     const draft = draftOf(fields, context.zone, { whole: true });
     if (options.id !== undefined && !ID.test(options.id))
-        throw new CliError("validation_error", `${context.names.id} is the id a create's outcome_unknown named`, {
+        throw new CliError("validation_error", `${context.names.id} is the id a create's outcome_unknown named: 5 to 1024 of a-v and 0-9`, {
             param: context.names.id,
         });
     const notify = notifyOf(context, options.notify, (draft.attendees?.length ?? 0) > 0);

package/dist/cli/messenger/search-answers.js

@@ -179,6 +179,8 @@ export const messagesAnswer = (command, found, { limit, page, again }, query = "
     });
 };
 export const noteHitItem = (hit) => defined({ ...hit });
+/** An event's title and the text its excerpt is cut from come from whoever sent the invitation. */
+const EVENT_HIT_UNTRUSTED = ["title", "excerpt"];
 export const allHitItem = (item) => item.kind === "meeting"
     ? {
         kind: "meeting",
@@ -204,6 +206,7 @@ export const allHitItem = (item) => item.kind === "meeting"
         sender_name: item.from?.name,
         sender_ref: item.from?.ref,
         found_by: item.foundBy,
+        untrusted: item.kind === "event" ? EVENT_HIT_UNTRUSTED : undefined,
     });
 /** Meaning was not searched because the model is not downloaded; `--exact` leaving it out is no gap. */
 const meaningGap = (skipped, exact) => skipped === undefined || exact

package/dist/entities/hit.d.ts

@@ -22,4 +22,6 @@ export declare const hit: v.StrictObjectSchema<{
     readonly scope: v.OptionalSchema<v.PicklistSchema<["transcript", "chat", "summary"], undefined>, undefined>;
     /** A meeting passage's stored line, so two passages of one meeting stay apart; `search meetings` gives the same. */
     readonly id: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>, undefined>;
+    /** An event hit's fields that whoever sent the invitation wrote: an agent reads them as data. */
+    readonly untrusted: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
 }, undefined>;

package/dist/entities/hit.js

@@ -23,4 +23,6 @@ export const hit = v.strictObject({
     scope: v.optional(v.picklist(["transcript", "chat", "summary"])),
     /** A meeting passage's stored line, so two passages of one meeting stay apart; `search meetings` gives the same. */
     id: v.optional(v.pipe(v.string(), v.minLength(1))),
+    /** An event hit's fields that whoever sent the invitation wrote: an agent reads them as data. */
+    untrusted: v.optional(v.array(text)),
 });

package/dist/entities/index.d.ts

@@ -5152,6 +5152,7 @@ export declare const ENTITIES: {
         readonly offset_ms: v.OptionalSchema<v.NullableSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>]>, undefined>, undefined>;
         readonly scope: v.OptionalSchema<v.PicklistSchema<["transcript", "chat", "summary"], undefined>, undefined>;
         readonly id: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>, undefined>;
+        readonly untrusted: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
     }, undefined>;
     readonly document: v.StrictObjectSchema<{
         readonly ref: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "a reference such as `note:42`">]>;

package/dist/mcp/agent.js

@@ -29,9 +29,11 @@ const optionKind = (option, long) => {
         return "repeat";
     return /\.\.\.[>\]]/.test(option.flags) ? "variadic" : "text";
 };
-const optionField = (option, long, negatable = false) => {
+// The command line's own promise: `--location ""` clears the field, so an agent may send "" too.
+const CLEARS = /\bempty clears\b/;
+const optionField = (option, long, negated) => {
     const kind = optionKind(option, long);
-    const about = option.description;
+    const about = negated ? `${option.description}; false: ${negated.description}` : option.description;
     const schema = kind === "switch"
         ? v.pipe(v.boolean(), v.description(about))
         : option.choices
@@ -49,7 +51,9 @@ const optionField = (option, long, negatable = false) => {
                             : kind === "json"
                                 ? // A next step hands back the object an answer gave; the command takes it as JSON text.
                                     v.pipe(v.union([v.string(), v.record(v.string(), v.unknown())]), v.description(about))
-                                : text(about);
+                                : CLEARS.test(about)
+                                    ? v.pipe(v.string(), v.regex(/^(?!-$)/, "not only -"), v.description(about))
+                                    : text(about);
     return {
         name: snake(long.slice(2)),
         required: option.mandatory,
@@ -58,7 +62,7 @@ const optionField = (option, long, negatable = false) => {
         argv: (value) => {
             // `approval: false` where the command has `--no-approval` says so; elsewhere false is leaving the switch off.
             if (kind === "switch")
-                return value === true ? [long] : negatable ? [`--no-${long.slice(2)}`] : [];
+                return value === true ? [long] : negated ? [`--no-${long.slice(2)}`] : [];
             if (kind === "variadic")
                 return value.map((one) => `${long}=${String(one)}`);
             if (kind === "repeat")
@@ -106,12 +110,16 @@ const fieldsOf = (info, { omit = [], offline = false, stdin }) => {
     const read = stdin?.(info.path);
     if (read)
         fields.push(stdinField(read));
-    const longs = new Set(info.options.map(longOf));
+    const switches = new Map(info.options.filter((one) => !one.takes_value).map((one) => [longOf(one), one]));
     for (const option of info.options) {
         const long = longOf(option);
         if (!long || option.mcp === false)
             continue;
-        const field = optionField(option, long, longs.has(`--no-${long.slice(2)}`));
+        // `--x` false already says `--no-x`: one boolean, not two that could disagree.
+        const positive = long.startsWith("--no-") ? switches.get(`--${long.slice(5)}`) : undefined;
+        if (positive && positive.mcp !== false)
+            continue;
+        const field = optionField(option, long, option.takes_value ? undefined : switches.get(`--no-${long.slice(2)}`));
         // A positional and its flag alternative share one MCP input; emitting both supplies the value twice.
         if (!fields.some((existing) => existing.name === field.name))
             fields.push(field);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wirecat/cli-core",
-  "version": "0.458.0",
+  "version": "0.460.0",
   "description": "The messenger-neutral half of a messaging CLI: domain model, message locators, rendering, name resolution, the SQLite seam, the command skeleton and shared read commands, the send guard, run records and the message store",
   "license": "Apache-2.0",
   "author": "Viacheslav Ptsarev",