@wirecat/cli-core 0.508.0 → 0.509.0

package/CHANGELOG.md

@@ -7,6 +7,21 @@ shape of this file.
 
 ## Unreleased
 
+## 0.509.0 — 31.10.2026
+
+### Changed — may break callers
+
+- **The MCP agent log names the agent that made the call, not the server.** A row in `agent_actions` was always the
+  bot `<command>-mcp` (`tg-mcp`); it is now the client as it named itself (`clientInfo.name` from `initialize`, or the
+  per-request `io.modelcontextprotocol/clientInfo`), else the coding agent whose environment started a stdio server
+  (`claude-code`), else `<command>-mcp`. A filter on `tg-mcp` no longer finds new rows. The name is the client's own
+  claim: a label, never a permission. `callingAgent(fallback, caller?)` from `@wirecat/cli-core/mcp` gives the same
+  name to a CLI that runs its own server, and `Registration.log` receives the call's caller.
+- **Any proposed or accepted fact can be corrected.** `facts.add({ supersedes })` took only a decision; it now takes a
+  fact of any type, and refuses one already superseded, reversed or rejected. When the new fact is accepted (at once,
+  for the owner's), the old one becomes `superseded` whether it was proposed or accepted; a proposed one used to stay
+  proposed.
+
 ## 0.508.0 — 31.10.2026
 
 ### Added

package/dist/mcp/caller.d.ts

@@ -1,5 +1,11 @@
 import { type RunCaller } from "../runs/run-context.js";
 export { currentCaller, withCaller } from "../runs/run-context.js";
+/**
+ * The name the audit log keeps for the agent behind one call: the client as it named itself, else the coding agent
+ * whose environment started a stdio server, else `fallback`. A client's name is its own claim, a label and never a
+ * permission (MCP's `clientInfo` is self-reported).
+ */
+export declare const callingAgent: (fallback: string, caller?: RunCaller | undefined) => string;
 /** The `_meta` key the every-profile server names the real caller under, for the profile server it passes a call to. */
 export declare const CALLER_META_KEY = "wirecat.dev/caller";
 /** The name the every-profile server gives itself in `initialize`; only a connection from it may name a caller. */

package/dist/mcp/caller.js

@@ -1,6 +1,18 @@
 import { CLIENT_INFO_META_KEY } from "@modelcontextprotocol/server";
-import { agentOf, clientHash } from "../runs/run-context.js";
+import { agentOf, clientHash, currentCaller, } from "../runs/run-context.js";
 export { currentCaller, withCaller } from "../runs/run-context.js";
+/**
+ * The name the audit log keeps for the agent behind one call: the client as it named itself, else the coding agent
+ * whose environment started a stdio server, else `fallback`. A client's name is its own claim, a label and never a
+ * permission (MCP's `clientInfo` is self-reported).
+ */
+export const callingAgent = (fallback, caller = currentCaller()) => {
+    const client = caller?.agent?.client?.name;
+    if (client && client !== "unknown")
+        return client;
+    const kind = caller?.agent?.kind;
+    return kind && kind !== "mcp-client" ? kind : fallback;
+};
 /** The `_meta` key the every-profile server names the real caller under, for the profile server it passes a call to. */
 export const CALLER_META_KEY = "wirecat.dev/caller";
 /** The name the every-profile server gives itself in `initialize`; only a connection from it may name a caller. */

package/dist/mcp/index.d.ts

@@ -2,6 +2,7 @@ export { mcpUrlOf, portOf, publicUrlOf } from "../http/public-url.js";
 export { type AgentAnswer, type AgentContext, type AgentProgram, type AgentTool, type CatalogueOptions, type CommandAvailability, runCommandForAgent, toolsFromCommands, } from "./agent.js";
 export { type AllProfilesOptions, allProfilesServer, type ChildSpec, serveAllProfilesOverHttp, serveAllProfilesOverStdio, } from "./all-profiles.js";
 export { type BotServerOptions, createBotServer, type RunBotCommand } from "./bot/server.js";
+export { callingAgent } from "./caller.js";
 export { revokeAll } from "./http/oauth.js";
 export { type HttpOptions, MCP_PATH, serveOverHttp } from "./http/serve.js";
 export { httpLockFile } from "./http/state.js";

package/dist/mcp/index.js

@@ -3,6 +3,7 @@ export { mcpUrlOf, portOf, publicUrlOf } from "../http/public-url.js";
 export { runCommandForAgent, toolsFromCommands, } from "./agent.js";
 export { allProfilesServer, serveAllProfilesOverHttp, serveAllProfilesOverStdio, } from "./all-profiles.js";
 export { createBotServer } from "./bot/server.js";
+export { callingAgent } from "./caller.js";
 export { revokeAll } from "./http/oauth.js";
 export { MCP_PATH, serveOverHttp } from "./http/serve.js";
 export { httpLockFile } from "./http/state.js";

package/dist/mcp/server.js

@@ -26,7 +26,7 @@ import { levelFor, readKeysForCommand } from "../sends/permissions.js";
 import { openStore } from "../store/store.js";
 import { runCommandForAgent, toolsFromCommands } from "./agent.js";
 import { agentLog } from "./agent-log.js";
-import { callerOf, withCaller } from "./caller.js";
+import { callerOf, callingAgent, withCaller } from "./caller.js";
 import { mcpHttpMarker } from "./http/state.js";
 import { instructions } from "./instructions.js";
 import { registerPrompts } from "./prompts.js";
@@ -182,10 +182,10 @@ export const createServer = (command, context, messenger, sessionOptions) => {
     });
     const skill = messenger.skill ? skillResource(app, messenger.skill) : undefined;
     const log = agentLog(() => openStore({ env: context.env, command: app.command, version: app.version }));
-    const audit = async (call) => {
+    const audit = async (call, caller) => {
         if (!recalledAccount(app, provider, settings.profile, context.env))
             return;
-        await log.record({ actor: { bot: `${app.command}-mcp` }, ...call });
+        await log.record({ actor: { bot: callingAgent(`${app.command}-mcp`, caller) }, ...call });
     };
     const targets = judgedTargets(root);
     const passed = Object.fromEntries(Object.entries(environment).filter(([key]) => !PER_RUN.has(key)));
@@ -267,7 +267,7 @@ export const createServer = (command, context, messenger, sessionOptions) => {
                 ...outcomeOf(result),
                 startedAt,
                 finishedAt: Date.now(),
-            }).catch(() => undefined);
+            }, caller).catch(() => undefined);
             return result;
         },
     });

package/dist/mcp/tool.d.ts

@@ -9,6 +9,7 @@ import type { WarmEmbedders } from "../embeddings/embed.js";
 import { type EntityName } from "../entities/index.js";
 import { type AppErrors } from "../errors/reasons.js";
 import type { MessengerAdapter } from "../ports/messenger.js";
+import { type RunCaller } from "../runs/run-context.js";
 import type { SendGuard } from "../sends/guard.js";
 import { type PermissionKey } from "../sends/permissions.js";
 import { type Services } from "../services/index.js";
@@ -121,7 +122,7 @@ export interface Registration {
     /** A host's permission scope encloses local reads and online calls alike. */
     around?: <T>(name: string, definition: AnyTool, work: () => Promise<T>) => Promise<T>;
     /** Keeps one audit row per call — tool, tier, outcome, times — never the arguments or the answer. */
-    log?: (call: ToolCall) => Promise<void>;
+    log?: (call: ToolCall, caller: RunCaller | undefined) => Promise<void>;
     /** The CLI's commands, by which an answer's next steps are judged safe to run unasked. */
     targets?: NonNullable<StepInput["targets"]>;
     /** How a call's caller is worked out on this connection (`callerOf`); without it the environment's agent is kept. */

package/dist/mcp/tool.js

@@ -167,7 +167,7 @@ export const entryRunner = (registration) => {
             ...outcomeOf(result),
             startedAt,
             finishedAt: Date.now(),
-        })?.catch(() => undefined);
+        }, caller)?.catch(() => undefined);
         return result;
     };
 };

package/dist/store/sqlite/facts.d.ts

@@ -9,7 +9,7 @@ export interface Fact {
     ref: string;
     type: (typeof FACT_TYPES)[number];
     statement: string;
-    /** Every fact is proposed or accepted; only a decision is also superseded or reversed. */
+    /** Proposed, then accepted or rejected; a correction supersedes it; only a decision is reversed. */
     status: (typeof FACT_STATUSES)[number];
     project: string | null;
     subject: string | null;
@@ -45,7 +45,7 @@ export interface FactInput {
     occurredAt?: string;
     evidence?: string[];
     scope?: Fact["scope"] & string;
-    /** A decision only: the decision this one replaces, `superseded` once this one is accepted. */
+    /** The proposed or accepted fact this one corrects, `superseded` once this one is accepted. */
     supersedes?: string;
     /** The memory an agent drew it from: a `created-from` link. */
     createdFrom?: string;
@@ -60,7 +60,7 @@ export interface FactsStore {
         status?: Fact["status"];
         limit?: number;
     }): Promise<Fact[]>;
-    /** The owner accepts a proposed fact; a decision it supersedes stops holding. */
+    /** The owner accepts a proposed fact; the fact it supersedes stops holding. */
     accept(reference: string): Promise<Fact>;
     /** An accepted decision no longer holds and nothing replaced it. */
     reverse(reference: string): Promise<Fact>;

package/dist/store/sqlite/facts.js

@@ -45,7 +45,7 @@ export const factOperationsOver = (context) => {
     const accept = (id) => {
         const row = database.prepare("SELECT * FROM facts WHERE id = ?").get(id);
         if (row.status !== "proposed" && row.status !== "accepted")
-            throw new CliError("validation_error", `a ${String(row.status)} decision cannot be accepted`);
+            throw new CliError("validation_error", `a ${String(row.status)} fact cannot be accepted`);
         const { actor } = authorActor(context, "owner");
         const at = now();
         database
@@ -53,7 +53,7 @@ export const factOperationsOver = (context) => {
             .run(actor.type, actor.id, at, id);
         if (row.supersedes_id != null)
             database
-                .prepare("UPDATE facts SET status = 'superseded', updated_at = ? WHERE id = ? AND status = 'accepted'")
+                .prepare("UPDATE facts SET status = 'superseded', updated_at = ? WHERE id = ? AND status IN ('proposed', 'accepted')")
                 .run(at, Number(row.supersedes_id));
     };
     return {
@@ -66,16 +66,14 @@ export const factOperationsOver = (context) => {
             const occurredAt = input.occurredAt === undefined ? null : calendarMoment(input.occurredAt, "occurredAt");
             if (occurredAt !== null && !Number.isFinite(occurredAt))
                 throw new CliError("validation_error", "occurredAt takes an ISO timestamp");
-            if (input.supersedes !== undefined && type !== "decision")
-                throw new CliError("validation_error", "only a decision supersedes another");
             const id = write(database, () => {
                 const project = input.project === undefined ? undefined : requiredThing(database, input.project, "the project");
                 if (project && project.type !== "project")
                     throw new CliError("validation_error", `${input.project} is not a project`);
                 const subject = input.subject === undefined ? undefined : requiredThing(database, input.subject, "the subject");
                 const replaced = input.supersedes === undefined ? undefined : rowOf(input.supersedes);
-                if (replaced && replaced.type !== "decision")
-                    throw new CliError("validation_error", `${input.supersedes} is not a decision`);
+                if (replaced && replaced.status !== "proposed" && replaced.status !== "accepted")
+                    throw new CliError("validation_error", `${input.supersedes} is ${String(replaced.status)}; only a proposed or accepted fact can be corrected`);
                 const owner = input.by === "owner";
                 const { actor, model } = authorActor(context, input.by);
                 const at = now();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wirecat/cli-core",
-  "version": "0.508.0",
+  "version": "0.509.0",
   "description": "The messenger-neutral half of a messaging CLI: domain model, message locators, rendering, name resolution, the SQLite seam, the command skeleton and shared read commands, the send guard, run records and the message store",
   "license": "Apache-2.0",
   "author": "Viacheslav Ptsarev",