@wirecat/cli-core 0.462.0 → 0.464.0

package/dist/entities/index.js

@@ -33,7 +33,7 @@ import { document } from "./document.js";
 import { documentLink } from "./document-link.js";
 import { evidence } from "./evidence.js";
 import { fact } from "./fact.js";
-import { reference } from "./fields.js";
+import { reference, untrusted } from "./fields.js";
 import { folder } from "./folder.js";
 import { hit } from "./hit.js";
 import { identity } from "./identity.js";
@@ -101,21 +101,24 @@ export const ENTITIES = {
     message_context: messageContext,
     message_download: messageDownload,
     message_sync: messageSync,
-    "message.hit": v.pick(message, [
-        "ref",
-        "chat_title",
-        "timestamp",
-        "sender_name",
-        "excerpt",
-        "matched_in",
-        "score",
-        "match",
-        "corrections",
-        "found_in",
-        "discovery",
-        "context",
-        "email",
-    ]),
+    "message.hit": v.strictObject({
+        ...v.pick(message, [
+            "ref",
+            "chat_title",
+            "timestamp",
+            "sender_name",
+            "excerpt",
+            "matched_in",
+            "score",
+            "match",
+            "corrections",
+            "found_in",
+            "discovery",
+            "context",
+            "email",
+        ]).entries,
+        untrusted,
+    }),
     "message.summary": v.pick(message, [
         "ref",
         "chat_id",
@@ -182,21 +185,24 @@ export const ENTITIES = {
     call_record: callRecord,
     sticker_inventory: stickerInventory,
     note,
-    "note.hit": v.pick(note, [
-        "kind",
-        "provider",
-        "account",
-        "url",
-        "ref",
-        "source",
-        "folder_id",
-        "path",
-        "title",
-        "updated_at",
-        "excerpt",
-        "found_by",
-        "links",
-    ]),
+    "note.hit": v.strictObject({
+        ...v.pick(note, [
+            "kind",
+            "provider",
+            "account",
+            "url",
+            "ref",
+            "source",
+            "folder_id",
+            "path",
+            "title",
+            "updated_at",
+            "excerpt",
+            "found_by",
+            "links",
+        ]).entries,
+        untrusted,
+    }),
     hit,
     document,
     document_link: documentLink,

package/dist/entities/meeting-preparation.d.ts

@@ -320,6 +320,7 @@ export declare const meetingPreparation: v.StrictObjectSchema<{
                     readonly started_at: v.NullableSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.IsoTimestampAction<string, "an ISO 8601 time in UTC">, v.EndsWithAction<string, "Z", "an ISO 8601 time in UTC, ending in `Z`">]>, undefined>;
                     readonly url: v.NullableSchema<v.StringSchema<undefined>, undefined>;
                 }, undefined>, undefined>;
+                readonly untrusted: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
             }, undefined>, undefined>;
             readonly association: v.LiteralSchema<"unconfirmed-word-evidence", undefined>;
             readonly vocabulary_fingerprint: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;

package/dist/entities/topic.d.ts

@@ -10,4 +10,5 @@ export declare const topic: v.StrictObjectSchema<{
     readonly unread_count: v.NullableSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>]>, undefined>;
     readonly last_message_at: v.NullableSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.IsoTimestampAction<string, "an ISO 8601 time in UTC">, v.EndsWithAction<string, "Z", "an ISO 8601 time in UTC, ending in `Z`">]>, undefined>;
     readonly created_at: v.NullableSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.IsoTimestampAction<string, "an ISO 8601 time in UTC">, v.EndsWithAction<string, "Z", "an ISO 8601 time in UTC, ending in `Z`">]>, undefined>;
+    readonly untrusted: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
 }, undefined>;

package/dist/entities/topic.js

@@ -1,5 +1,5 @@
 import * as v from "valibot";
-import { count, id, text, time } from "./fields.js";
+import { count, id, text, time, untrusted } from "./fields.js";
 /** A topic of a forum group; its messages carry this id as their thread. */
 export const topic = v.strictObject({
     id,
@@ -11,4 +11,5 @@ export const topic = v.strictObject({
     unread_count: v.nullable(count),
     last_message_at: v.nullable(time),
     created_at: v.nullable(time),
+    untrusted,
 });

package/dist/errors/reasons.js

@@ -56,6 +56,10 @@ const OTHERS = [
     ["sync.partial", "provider_error", "some calendars did not sync; the next sync retries them"],
     validation("event.conflict", "the event changed at the provider since the last sync; sync and try again"),
     validation("event.notify-required", "the event has other attendees; say whether to notify them"),
+    validation("event.repeat-invalid", "the repeat rule is outside the RFC 5545 subset the calendars take"),
+    validation("event.repeat-kind", "the series' rule holds a date or a time of the kind the event is leaving"),
+    ["busy.offline", "permission_error", "calendars busy asks the provider; --offline was given"],
+    validation("busy.no-calendars", "no calendar syncs and no person was named, so there is nobody to ask"),
     validation("store.refused", "the local store refused the document text"),
     ["store.not-writable", "permission_error", "the message store cannot be written from this process"],
     [

package/dist/kit/mcp-stdio.d.ts

@@ -19,8 +19,8 @@ export interface McpStdio {
     close: () => Promise<number>;
 }
 /**
- * A CLI's `mcp` driven over its stdin and stdout, through its own `run()`, with no process and no SDK:
- * `start` passes the two streams to `run(["<profile>", "mcp"], { ...yourOptions, ...streams })`. It has
+ * A CLI's `mcp serve` driven over its stdin and stdout, through its own `run()`, with no process and no SDK:
+ * `start` passes the two streams to `run(["<profile>", "mcp", "serve"], { ...yourOptions, ...streams })`. It has
  * already answered `initialize` when this resolves.
  */
 export declare const mcpOverStdio: (start: (streams: McpStdioStreams) => Promise<number>, { protocolVersion }?: {

package/dist/kit/mcp-stdio.js

@@ -8,8 +8,8 @@ const parsedOrText = (text) => {
     }
 };
 /**
- * A CLI's `mcp` driven over its stdin and stdout, through its own `run()`, with no process and no SDK:
- * `start` passes the two streams to `run(["<profile>", "mcp"], { ...yourOptions, ...streams })`. It has
+ * A CLI's `mcp serve` driven over its stdin and stdout, through its own `run()`, with no process and no SDK:
+ * `start` passes the two streams to `run(["<profile>", "mcp", "serve"], { ...yourOptions, ...streams })`. It has
  * already answered `initialize` when this resolves.
  */
 export const mcpOverStdio = async (start, { protocolVersion = "2025-06-18" } = {}) => {

package/dist/mcp/http/activity.d.ts

@@ -15,7 +15,7 @@ export declare const readActivity: (path: string) => Activity;
 export declare const calledTools: (body: unknown) => string[];
 /**
  * Keeps the activity file of one running server. A call is written at once, so status shows it while the owner
- * watches; other requests at most every two seconds. Its own file, not the token file: `mcp --revoke` rewrites that
+ * watches; other requests at most every two seconds. Its own file, not the token file: `mcp revoke` rewrites that
  * from another process.
  */
 export declare const activityRecorder: (path: string, now?: () => number) => {

package/dist/mcp/http/activity.js

@@ -30,7 +30,7 @@ export const calledTools = (body) => (Array.isArray(body) ? body : [body]).flatM
 });
 /**
  * Keeps the activity file of one running server. A call is written at once, so status shows it while the owner
- * watches; other requests at most every two seconds. Its own file, not the token file: `mcp --revoke` rewrites that
+ * watches; other requests at most every two seconds. Its own file, not the token file: `mcp revoke` rewrites that
  * from another process.
  */
 export const activityRecorder = (path, now = Date.now) => {

package/dist/mcp/http/oauth.js

@@ -132,7 +132,7 @@ export const ownerLogin = ({ issuer, resource, file, appName, onCode, now = () =
         while (stored.clients.length > MAX_CLIENTS) {
             const idle = stored.clients.findIndex((one) => !holding.has(one.id));
             if (idle === -1)
-                return oauthError("invalid_client_metadata", "too many logged-in apps — run mcp --revoke first");
+                return oauthError("invalid_client_metadata", "too many logged-in apps — run mcp revoke first");
             stored.clients.splice(idle, 1);
         }
         store.write(stored);

package/dist/mcp/http/state.d.ts

@@ -33,6 +33,20 @@ export declare const mcpHttpMarker: (envPrefix: string) => string;
 export declare const httpLogFile: (tokenFile: string) => string;
 /** Beside the token file, so each CLI's own layout decides both: `mcp-http/<profile>.json` → `.lock`. */
 export declare const httpLockFile: (tokenFile: string) => string;
+/**
+ * What `mcp server start` ran, so `upgrade` can run it again on the new code with the same port, address and
+ * `--permission` limits. Without it a server is left running rather than restarted with fewer limits.
+ */
+export interface HttpLaunch {
+    /** What a person types before `mcp`: `tg personal`. */
+    invocation: string;
+    /** The words after the CLI's entry. */
+    argv: string[];
+    /** Added to the inherited environment: the marker, and the profile for a CLI that reads it from there. */
+    env: Record<string, string>;
+}
+export declare const httpLaunchFile: (lockFile: string) => string;
+export declare const readHttpLaunch: (path: string) => HttpLaunch | undefined;
 export declare const readHttpLock: (path: string) => HttpLock | undefined;
 /** The lock a serving process keeps current: taken before it listens, given up when it closes. */
 export declare const httpLock: (path: string, first: HttpLock) => {

package/dist/mcp/http/state.js

@@ -9,6 +9,22 @@ export const mcpHttpMarker = (envPrefix) => `${envPrefix}_MCP_HTTP`;
 export const httpLogFile = (tokenFile) => `${tokenFile.replace(/\.json$/, "")}.log`;
 /** Beside the token file, so each CLI's own layout decides both: `mcp-http/<profile>.json` → `.lock`. */
 export const httpLockFile = (tokenFile) => `${tokenFile.replace(/\.json$/, "")}.lock`;
+export const httpLaunchFile = (lockFile) => `${lockFile.replace(/\.lock$/, "")}.launch.json`;
+export const readHttpLaunch = (path) => {
+    try {
+        const launch = JSON.parse(readFileSync(path, "utf8"));
+        return typeof launch.invocation === "string" &&
+            Array.isArray(launch.argv) &&
+            launch.argv.every((word) => typeof word === "string") &&
+            typeof launch.env === "object" &&
+            launch.env !== null
+            ? launch
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+};
 export const readHttpLock = (path) => {
     const lock = readLock(path);
     return lock && typeof lock.port === "number" && typeof lock.publicUrl === "string" ? lock : undefined;

package/dist/mcp/meeting-preparation.d.ts

@@ -387,6 +387,7 @@ export declare const callMeetingPreparationTool: (read: MeetingPreparationReader
                         started_at: string | null;
                         url: string | null;
                     } | undefined;
+                    untrusted?: string[] | undefined;
                 }[];
                 association: "unconfirmed-word-evidence";
                 vocabulary_fingerprint: string;

package/dist/meetings/answers.d.ts

@@ -27,6 +27,8 @@ export declare const meetingHit: v.StrictObjectSchema<{
         readonly started_at: v.NullableSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.IsoTimestampAction<string, "an ISO 8601 time in UTC">, v.EndsWithAction<string, "Z", "an ISO 8601 time in UTC, ending in `Z`">]>, undefined>;
         readonly url: v.NullableSchema<v.StringSchema<undefined>, undefined>;
     }, undefined>, undefined>;
+    /** What people said, wrote or a provider summarised from it, and the invitation's title: data, never instructions. */
+    readonly untrusted: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
 }, undefined>;
 /** One retained transcript of a meeting, its cues in order. */
 export declare const meetingTranscript: v.StrictObjectSchema<{

package/dist/meetings/answers.js

@@ -25,6 +25,8 @@ export const meetingHit = v.strictObject({
         started_at: v.nullable(isoTime),
         url: v.nullable(text),
     })),
+    /** What people said, wrote or a provider summarised from it, and the invitation's title: data, never instructions. */
+    untrusted: v.optional(v.array(text)),
 });
 const line = v.strictObject({
     position: count,
@@ -188,6 +190,7 @@ export const meetingHitItem = (hit) => ({
     id: String(hit.id),
     excerpt: hit.text,
     offset_ms: hit.startMs,
+    untrusted: hit.source === undefined ? ["excerpt"] : ["excerpt", "source.title"],
     ...(hit.match === undefined ? {} : { match: hit.match }),
     ...(hit.corrections === undefined ? {} : { corrections: hit.corrections }),
     ...(hit.source === undefined

package/dist/meetings/mcp/search.d.ts

@@ -150,6 +150,7 @@ export declare const callMeetingSearchTool: (search: MeetingHitSearch, input: un
             started_at: string | null;
             url: string | null;
         } | undefined;
+        untrusted?: string[] | undefined;
     }> & {
         meta?: Partial<import("@wirecat/cli-base/standards").Meta>;
     };

package/dist/meetings/project-evidence-answer.d.ts

@@ -35,6 +35,7 @@ export declare const meetingProjectEvidence: v.StrictObjectSchema<{
             readonly started_at: v.NullableSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.IsoTimestampAction<string, "an ISO 8601 time in UTC">, v.EndsWithAction<string, "Z", "an ISO 8601 time in UTC, ending in `Z`">]>, undefined>;
             readonly url: v.NullableSchema<v.StringSchema<undefined>, undefined>;
         }, undefined>, undefined>;
+        readonly untrusted: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
     }, undefined>, undefined>;
     readonly association: v.LiteralSchema<"unconfirmed-word-evidence", undefined>;
     readonly vocabulary_fingerprint: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;

package/dist/ports/app.d.ts

@@ -25,6 +25,11 @@ export interface AppIdentity {
      * tg, max and wa print what they always did.
      */
     messenger?: boolean;
+    /**
+     * How long one request to the provider usually takes, in ms: a sync's budget is the deadline, less its margin,
+     * divided by it (`requestsFor`). 2 s when unset.
+     */
+    requestMs?: number;
     /** Error reasons and detail keys of its own — max's `max_code`, tg's `migrated_chat_id` — kept in every error it prints. */
     errors?: AppErrors;
 }

package/dist/services/package-upgrade.d.ts

@@ -1,7 +1,12 @@
 import { type Installer } from "@wirecat/cli-base/update";
+import type { McpServerRestart, StaleSessions } from "../background/after-upgrade.js";
 export interface ServerRestarts {
     restarted: readonly string[];
     left: readonly string[];
+    /** Profiles whose `server restart` ran out of time: their serve may still run the old code. */
+    timedOut?: readonly string[];
+    mcpServers?: readonly McpServerRestart[];
+    staleSessions?: StaleSessions;
 }
 export interface PackageUpgradePorts {
     installer: () => Installer;
@@ -22,6 +27,9 @@ export interface PackageUpgradeResult {
     command: string | null;
     updated: boolean;
     restarted: readonly string[];
+    /** Set once an install ran: the HTTP MCP servers it restarted or left, and the stdio sessions still on old code. */
+    mcpServers?: readonly McpServerRestart[];
+    staleSessions?: StaleSessions;
     installed?: string;
     /** The package manager installed an older version than `latest`. */
     heldBack?: {
@@ -33,6 +41,7 @@ export interface PackageUpgradeOutcome {
     result: PackageUpgradeResult;
     reason: "checked" | "unavailable" | "up_to_date" | "manual" | "updated" | "held_back";
     left: readonly string[];
+    timedOut?: readonly string[];
 }
 export declare const upgradePackage: ({ current, command, packageName, check }: {
     current: string;

package/dist/services/package-upgrade.js

@@ -47,9 +47,16 @@ export const upgradePackage = async ({ current, command, packageName, check }, p
 const restart = async (result, ports) => {
     const servers = await ports.afterUpdate?.();
     return {
-        result: { ...result, updated: true, restarted: servers?.restarted ?? [] },
+        result: {
+            ...result,
+            updated: true,
+            restarted: servers?.restarted ?? [],
+            ...(servers?.mcpServers ? { mcpServers: servers.mcpServers } : {}),
+            ...(servers?.staleSessions ? { staleSessions: servers.staleSessions } : {}),
+        },
         reason: "updated",
         left: servers?.left ?? [],
+        ...(servers?.timedOut?.length ? { timedOut: servers.timedOut } : {}),
     };
 };
 const dayAfter = (published) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wirecat/cli-core",
-  "version": "0.462.0",
+  "version": "0.464.0",
   "description": "The messenger-neutral half of a messaging CLI: domain model, message locators, rendering, name resolution, the SQLite seam, the command skeleton and shared read commands, the send guard, run records and the message store",
   "license": "Apache-2.0",
   "author": "Viacheslav Ptsarev",
@@ -233,7 +233,7 @@
     "@types/node": "^22.20.5",
     "@types/pngjs": "6.0.5",
     "@vitest/coverage-v8": "^5.0.5",
-    "@wirecat/cli-base": "0.63.0",
+    "@wirecat/cli-base": "0.64.0",
     "@wirecat/cli-core-legacy-tags": "npm:@wirecat/cli-core@0.414.0",
     "commander": "15.0.0",
     "cspell": "10.4.0",
@@ -253,7 +253,7 @@
   },
   "peerDependencies": {
     "@napi-rs/canvas": ">=0.1.69 <2",
-    "@wirecat/cli-base": ">=0.63.0 <0.64.0",
+    "@wirecat/cli-base": ">=0.64.0 <0.65.0",
     "commander": ">=15"
   },
   "bin": {

package/parity.json

@@ -789,7 +789,7 @@
     },
     "--port": {
       "value": "<port>",
-      "meaning": "the local port behind the tunnel, for mcp --http or bot watch --public-url"
+      "meaning": "the local port behind the tunnel, for mcp serve --http or bot watch --public-url"
     },
     "--priority": {
       "value": "<n>",
@@ -804,7 +804,7 @@
     },
     "--public-url": {
       "value": "<url>",
-      "meaning": "the tunnel's https address: the browser apps reach mcp --http through it, a messenger delivers to bot watch"
+      "meaning": "the tunnel's https address: the browser apps reach mcp serve --http through it, a messenger delivers to bot watch"
     },
     "--question": {
       "meaning": "match only questions"
@@ -861,9 +861,6 @@
       "value": "<n>",
       "meaning": "the revision you read before editing"
     },
-    "--revoke": {
-      "meaning": "forget every login given to a browser app over --http"
-    },
     "--revote": {
       "meaning": "people may change their vote"
     },
@@ -1732,7 +1729,6 @@
     },
     "bot mcp": {
       "in": ["max", "tg"],
-      "options": {},
       "planned": {
         "wa": "whatsapp-cli: wa bot API, plans/2026-10-22-wa-bot-api"
       }
@@ -1744,6 +1740,13 @@
         "wa": "whatsapp-cli: wa bot API, plans/2026-10-22-wa-bot-api"
       }
     },
+    "bot mcp serve": {
+      "in": ["max", "tg"],
+      "options": {},
+      "planned": {
+        "wa": "whatsapp-cli: wa bot API, plans/2026-10-22-wa-bot-api"
+      }
+    },
     "bot me": {
       "in": ["max", "tg"],
       "planned": {
@@ -3138,22 +3141,7 @@
       }
     },
     "mcp": {
-      "in": "all",
-      "options": {
-        "--http": "all",
-        "--permission": "all",
-        "--port": "all",
-        "--public-url": "all",
-        "--revoke": "all",
-        "--yes": {
-          "in": [],
-          "planned": {
-            "max": "P7",
-            "tg": "P7",
-            "wa": "P7"
-          }
-        }
-      }
+      "in": "all"
     },
     "mcp add": {
       "in": "all",
@@ -3182,6 +3170,26 @@
         }
       }
     },
+    "mcp revoke": {
+      "in": "all"
+    },
+    "mcp serve": {
+      "in": "all",
+      "options": {
+        "--http": "all",
+        "--permission": "all",
+        "--port": "all",
+        "--public-url": "all",
+        "--yes": {
+          "in": [],
+          "planned": {
+            "max": "P7",
+            "tg": "P7",
+            "wa": "P7"
+          }
+        }
+      }
+    },
     "mcp server": {
       "in": "all"
     },