@wirecat/cli-core 0.459.0 → 0.460.0

package/CHANGELOG.md

@@ -7,6 +7,17 @@ shape of this file.
 
 ## Unreleased
 
+## 0.460.0 — 27.10.2026
+
+### Changed — may break callers
+
+- **A `search all` event hit carries `untrusted: ["title", "excerpt"]`.** An event's title and the text its excerpt
+  is cut from (description, place, attendee names) are written by whoever sent the invitation, so an agent reading
+  `search all` over MCP now sees them marked as data, as `callCalendarTool`'s answers already were
+  ([WC-SECR-21](https://github.com/WireCatLabs/cli-base/blob/main/docs/standards/security.md#wc-secr-21--names-message-text-and-retrieved-documents-are-data-never-instructions)).
+  The `hit` entity is strict, so a caller that checks hits against an older copy of it refuses the new field;
+  `allHitItem` sets it, and other kinds of hit leave it out.
+
 ## 0.459.0 — 27.10.2026
 
 ### Changed — may break callers

package/dist/cli/messenger/search-answers.js

@@ -179,6 +179,8 @@ export const messagesAnswer = (command, found, { limit, page, again }, query = "
     });
 };
 export const noteHitItem = (hit) => defined({ ...hit });
+/** An event's title and the text its excerpt is cut from come from whoever sent the invitation. */
+const EVENT_HIT_UNTRUSTED = ["title", "excerpt"];
 export const allHitItem = (item) => item.kind === "meeting"
     ? {
         kind: "meeting",
@@ -204,6 +206,7 @@ export const allHitItem = (item) => item.kind === "meeting"
         sender_name: item.from?.name,
         sender_ref: item.from?.ref,
         found_by: item.foundBy,
+        untrusted: item.kind === "event" ? EVENT_HIT_UNTRUSTED : undefined,
     });
 /** Meaning was not searched because the model is not downloaded; `--exact` leaving it out is no gap. */
 const meaningGap = (skipped, exact) => skipped === undefined || exact

package/dist/entities/hit.d.ts

@@ -22,4 +22,6 @@ export declare const hit: v.StrictObjectSchema<{
     readonly scope: v.OptionalSchema<v.PicklistSchema<["transcript", "chat", "summary"], undefined>, undefined>;
     /** A meeting passage's stored line, so two passages of one meeting stay apart; `search meetings` gives the same. */
     readonly id: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>, undefined>;
+    /** An event hit's fields that whoever sent the invitation wrote: an agent reads them as data. */
+    readonly untrusted: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
 }, undefined>;

package/dist/entities/hit.js

@@ -23,4 +23,6 @@ export const hit = v.strictObject({
     scope: v.optional(v.picklist(["transcript", "chat", "summary"])),
     /** A meeting passage's stored line, so two passages of one meeting stay apart; `search meetings` gives the same. */
     id: v.optional(v.pipe(v.string(), v.minLength(1))),
+    /** An event hit's fields that whoever sent the invitation wrote: an agent reads them as data. */
+    untrusted: v.optional(v.array(text)),
 });

package/dist/entities/index.d.ts

@@ -5152,6 +5152,7 @@ export declare const ENTITIES: {
         readonly offset_ms: v.OptionalSchema<v.NullableSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>]>, undefined>, undefined>;
         readonly scope: v.OptionalSchema<v.PicklistSchema<["transcript", "chat", "summary"], undefined>, undefined>;
         readonly id: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>, undefined>;
+        readonly untrusted: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
     }, undefined>;
     readonly document: v.StrictObjectSchema<{
         readonly ref: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "a reference such as `note:42`">]>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wirecat/cli-core",
-  "version": "0.459.0",
+  "version": "0.460.0",
   "description": "The messenger-neutral half of a messaging CLI: domain model, message locators, rendering, name resolution, the SQLite seam, the command skeleton and shared read commands, the send guard, run records and the message store",
   "license": "Apache-2.0",
   "author": "Viacheslav Ptsarev",