@wirecat/cli-memo 0.131.61 → 0.131.62

package/dist/bundle/{chunk-LIW42UCX.js → chunk-EGI6JHIA.js}

@@ -3,11 +3,11 @@ const require = __bundleRequire(import.meta.url);
 import {
   envName,
   readOnlyLockOf
-} from "./chunk-PSYZ33UQ.js";
+} from "./chunk-RP6VV35S.js";
 import {
   CAPABILITY_STATEMENTS,
   storeCapable
-} from "./chunk-I6LNI45S.js";
+} from "./chunk-SOQGV3ZM.js";
 import {
   catchCrashes
 } from "./chunk-RCGFSWZE.js";
@@ -21,10 +21,10 @@ import {
   __name
 } from "./chunk-ZVVMGPBJ.js";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/cli/entry.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/cli/entry.js
 import { spawn as spawn2 } from "node:child_process";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/sqlite-runtime.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/sqlite-runtime.js
 import { spawn, spawnSync } from "node:child_process";
 import { readFileSync } from "node:fs";
 import { dirname } from "node:path";
@@ -112,14 +112,14 @@ var relay = /* @__PURE__ */ __name((child, host = process) => new Promise(() =>
   });
 }), "relay");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/cli/argv-log.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/cli/argv-log.js
 import { appendFileSync } from "node:fs";
 var logVersion = /* @__PURE__ */ __name((file) => {
   appendFileSync(file, `${JSON.stringify({ command: "", options: ["--version"] })}
 `);
 }, "logVersion");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/cli/entry.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/cli/entry.js
 var processIo = /* @__PURE__ */ __name(() => ({
   argv: process.argv,
   env: process.env,
@@ -173,8 +173,8 @@ var startCli = /* @__PURE__ */ __name(async (entry) => {
       if (command.optsWithGlobals().dryRun === true)
         return;
       const [{ setupAtStart }, { commandPathOf }] = await Promise.all([
-        import("./first-run-S7RRDIGX.js"),
-        import("./command-contract-4TGN6GSP.js")
+        import("./first-run-ZKDGFY6P.js"),
+        import("./command-contract-SIXWLKAS.js")
       ]);
       await setupAtStart({
         command: entry.app.command,
@@ -189,7 +189,7 @@ var startCli = /* @__PURE__ */ __name(async (entry) => {
     ask: /* @__PURE__ */ __name(async (question, command) => {
       if (headless(command) || io.stdin.isTTY !== true)
         return false;
-      const { readSecret } = await import("./prompt-FT2MMVS7.js");
+      const { readSecret } = await import("./prompt-NTAZWPWA.js");
       const answer = await readSecret(`${question} [y/N] `, {
         input: io.stdin,
         output: io.stderr,

package/dist/bundle/{chunk-2UXFM5GE.js → chunk-FC5PK6M6.js}

@@ -7,7 +7,7 @@ import {
   __name
 } from "./chunk-ZVVMGPBJ.js";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/files/ordinary-file.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/files/ordinary-file.js
 import { constants } from "node:fs";
 import { lstat, open } from "node:fs/promises";
 var deviceOf = /* @__PURE__ */ __name((dev) => process.platform === "win32" ? BigInt.asUintN(32, dev) : dev, "deviceOf");
@@ -73,7 +73,7 @@ var syncDirectory = /* @__PURE__ */ __name(async (path) => {
   }
 }, "syncDirectory");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/files/atomic-write.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/files/atomic-write.js
 import { randomUUID } from "node:crypto";
 import { constants as constants2 } from "node:fs";
 import { link, open as open2, realpath, rename, unlink } from "node:fs/promises";
@@ -111,7 +111,7 @@ var writeFileAtomic = /* @__PURE__ */ __name(async (path, content, { mode = 384,
   }
 }, "writeFileAtomic");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/files/bounded-utf8.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/files/bounded-utf8.js
 var readBoundedUtf8File = /* @__PURE__ */ __name(async (path, { maxBytes }) => {
   if (!Number.isSafeInteger(maxBytes) || maxBytes < 1 || maxBytes > 16 * 1024 * 1024)
     throw new CliError("validation_error", "file maxBytes takes 1\u201316777216 bytes");
@@ -140,21 +140,21 @@ var readBoundedUtf8File = /* @__PURE__ */ __name(async (path, { maxBytes }) => {
   }
 }, "readBoundedUtf8File");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/files/lock.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/files/lock.js
 import { mkdir as mkdir2 } from "node:fs/promises";
 import { basename as basename2, dirname as dirname2 } from "node:path";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/files/native-writer-lease.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/files/native-writer-lease.js
 import { randomUUID as randomUUID2 } from "node:crypto";
 import { lstat as lstat3, mkdir, open as open3, realpath as realpath3, rmdir as rmdir2, unlink as unlink4 } from "node:fs/promises";
 import { hostname as hostname2 } from "node:os";
 import { join as join3 } from "node:path";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/files/native-lease-inspection.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/files/native-lease-inspection.js
 import { lstat as lstat2, readdir, realpath as realpath2, unlink as unlink2 } from "node:fs/promises";
 import { join as join2 } from "node:path";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/files/native-lease-owner.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/files/native-lease-owner.js
 import { hostname } from "node:os";
 var missingLeaseFile = /* @__PURE__ */ __name((error) => typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT", "missingLeaseFile");
 var readLeaseOwner = /* @__PURE__ */ __name(async (path, name, signal) => {
@@ -199,7 +199,7 @@ var leaseOwnerStatus = /* @__PURE__ */ __name((owner) => {
   }
 }, "leaseOwnerStatus");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/files/native-lease-inspection.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/files/native-lease-inspection.js
 var leaseInspection = /* @__PURE__ */ __name((markerDirectory) => {
   const inspect = /* @__PURE__ */ __name(async (destination, options = {}) => {
     options.signal?.throwIfAborted();
@@ -258,7 +258,7 @@ var leaseInspection = /* @__PURE__ */ __name((markerDirectory) => {
   return { inspect, recover };
 }, "leaseInspection");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/files/native-lease-release.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/files/native-lease-release.js
 import { rmdir, unlink as unlink3 } from "node:fs/promises";
 var ownedNativeLease = /* @__PURE__ */ __name((path, name, owner, folder, identity) => {
   let releasing;
@@ -283,7 +283,7 @@ var ownedNativeLease = /* @__PURE__ */ __name((path, name, owner, folder, identi
   };
 }, "ownedNativeLease");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/files/native-writer-lease.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/files/native-writer-lease.js
 var validName = /* @__PURE__ */ __name((value) => typeof value === "string" && value.length > 0 && value !== "." && value !== ".." && !/[\\/\0:]/.test(value), "validName");
 var nativeWriterLeaseStore = /* @__PURE__ */ __name((layout) => {
   const { markerDirectory, legacyMarker } = layout;
@@ -354,7 +354,7 @@ var nativeWriterLeaseStore = /* @__PURE__ */ __name((layout) => {
   };
 }, "nativeWriterLeaseStore");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/files/lock.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/files/lock.js
 var acquireLock = /* @__PURE__ */ __name(async (path, { signal } = {}) => {
   const folder = dirname2(path);
   await mkdir2(folder, { recursive: true, mode: 448 });
@@ -369,7 +369,7 @@ var acquireLock = /* @__PURE__ */ __name(async (path, { signal } = {}) => {
   });
 }, "acquireLock");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/files/safe-name.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/files/safe-name.js
 import { basename as basename3 } from "node:path";
 var safeName = /* @__PURE__ */ __name((name, platform = process.platform) => {
   let plain = name === void 0 ? "" : basename3(name.replaceAll("\\", "/")).replace(/[\p{Cc}​-‏‪-‮⁦-⁩]/gu, "").replace(/^\.+/, "");

package/dist/bundle/{chunk-6YK3RZZJ.js → chunk-FD3OQYFL.js}

@@ -3,21 +3,21 @@ const require = __bundleRequire(import.meta.url);
 import {
   answers,
   itemAnswer
-} from "./chunk-3FDJSMLJ.js";
+} from "./chunk-HMJ3D7XE.js";
 import {
   loadConfig,
   updateConfig
-} from "./chunk-F6E7DSJO.js";
+} from "./chunk-H3COKFXP.js";
 import {
   failingNotice,
   recordRun
-} from "./chunk-5SD4CV2D.js";
+} from "./chunk-TBSWOVM3.js";
 import {
   InvalidArgumentError,
   LOCAL_READ,
   LOCAL_WRITE,
   annotate
-} from "./chunk-OEPBIWHI.js";
+} from "./chunk-WDWKG7FJ.js";
 import {
   installerOf
 } from "./chunk-IK6KH3RE.js";

package/dist/bundle/{chunk-HLTGPK6P.js → chunk-FG4Q6T72.js}

@@ -2,10 +2,10 @@ import { createRequire as __bundleRequire } from "node:module";
 const require = __bundleRequire(import.meta.url);
 import {
   listen
-} from "./chunk-4HLYKLGJ.js";
+} from "./chunk-SIBQ34LX.js";
 import {
   ownerLogin
-} from "./chunk-2VMZLQ5K.js";
+} from "./chunk-V7TJSYFK.js";
 import {
   WebStandardStreamableHTTPServerTransport,
   createMcpHandler,
@@ -22,7 +22,7 @@ import {
   calledTools,
   httpActivityFile,
   httpLock
-} from "./chunk-37ILRM2G.js";
+} from "./chunk-RTLQHLHG.js";
 import {
   CliError
 } from "./chunk-4ZW6ZJ2V.js";
@@ -30,7 +30,7 @@ import {
   __name
 } from "./chunk-ZVVMGPBJ.js";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/mcp/http/serve.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/mcp/http/serve.js
 import { randomUUID } from "node:crypto";
 var MCP_PATH = "/mcp";
 var AS_METADATA = "/.well-known/oauth-authorization-server";

package/dist/bundle/{chunk-ETYD55QD.js → chunk-FH4P5UQA.js}

@@ -4,10 +4,10 @@ import {
   readSharedSection,
   sharedConfigPath,
   writeSharedSection
-} from "./chunk-OQSOQYSQ.js";
+} from "./chunk-HKC7GDJD.js";
 import {
   storePath
-} from "./chunk-D4PK5OXW.js";
+} from "./chunk-NZJUMLTD.js";
 import {
   CliError
 } from "./chunk-4ZW6ZJ2V.js";
@@ -15,7 +15,7 @@ import {
   __name
 } from "./chunk-ZVVMGPBJ.js";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/cli/setup-answers.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/cli/setup-answers.js
 var PERMISSION_ANSWERS = ["readonly", "allow"];
 var QUESTIONS = ["languages", "tools", "permissions"];
 var SECTION = "setup";

package/dist/bundle/{chunk-7CKXTTZG.js → chunk-FWRBJAQZ.js}

@@ -3,7 +3,7 @@ const require = __bundleRequire(import.meta.url);
 import {
   SAMPLE_RATE,
   decodeOgg
-} from "./chunk-OIHKFGHK.js";
+} from "./chunk-PKUBC2ME.js";
 import {
   importFrom
 } from "./chunk-Y5E2WNWB.js";
@@ -14,7 +14,7 @@ import {
   __name
 } from "./chunk-ZVVMGPBJ.js";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/speech/decode.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/speech/decode.js
 import { spawn } from "node:child_process";
 import { mkdtemp, rm, writeFile } from "node:fs/promises";
 import { createRequire } from "node:module";

package/dist/bundle/{chunk-F6E7DSJO.js → chunk-H3COKFXP.js}

@@ -27,22 +27,23 @@ import {
   serverSearchOptions,
   summaryOf,
   unansweredHours
-} from "./chunk-5SD4CV2D.js";
+} from "./chunk-TBSWOVM3.js";
 import {
   MAIL_HIT_UNTRUSTED,
   messagesAnswer,
   offsetOf,
   shownOf
-} from "./chunk-K6FQVROA.js";
+} from "./chunk-LK6D26RK.js";
 import {
   messageItem
-} from "./chunk-YVCNJKDA.js";
+} from "./chunk-E5JQFEIQ.js";
 import {
   knownPermissionKeys
-} from "./chunk-7DPHHUSZ.js";
+} from "./chunk-3ZXWLFUG.js";
 import {
   AGENDA_DEFAULTS,
   DEFAULT_BACKEND,
+  RESOURCES_SEARCHED,
   REVIEW_DAYS,
   SERVER_BOUNDS,
   SERVER_SEARCH_KEY,
@@ -62,7 +63,7 @@ import {
   sourceKey,
   typedQuery,
   withQuery
-} from "./chunk-233N77WN.js";
+} from "./chunk-2UCLF4AO.js";
 import {
   Command,
   FETCH,
@@ -89,16 +90,17 @@ import {
   readConfigFile,
   readConfigText,
   renderAnswer,
+  rootOf,
   settingPathOf,
   sharedCommand,
   snakeKeys,
   withSettingDefaults,
   withoutSetting
-} from "./chunk-OEPBIWHI.js";
+} from "./chunk-WDWKG7FJ.js";
 import {
   mailHolderVariable,
   readOnlyLockOf
-} from "./chunk-PSYZ33UQ.js";
+} from "./chunk-RP6VV35S.js";
 import {
   DEFAULT_DECISION_POLICY,
   MESSAGE_PARSING,
@@ -111,7 +113,7 @@ import {
   registrableOf,
   scoreGroup,
   validateFields
-} from "./chunk-6NHJ4TTJ.js";
+} from "./chunk-HGNWJJDT.js";
 import {
   count,
   dateRange,
@@ -122,7 +124,7 @@ import {
   time,
   timezoneOf,
   untrusted
-} from "./chunk-RRHSJ7CR.js";
+} from "./chunk-37E74SKW.js";
 import {
   configFilePath,
   resolvePaths,
@@ -159,7 +161,7 @@ import {
   __toESM
 } from "./chunk-ZVVMGPBJ.js";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/mail/attachments.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/mail/attachments.js
 var MAX_ATTACHMENT_CHARS = 2e5;
 var DEFAULT_ATTACHMENT_POLICY = { read: true, maxBytes: 10 * 1024 * 1024 };
 var POLICY_SKIPS = ["not-read", "too-large"];
@@ -198,7 +200,7 @@ var readAttachments = /* @__PURE__ */ __name(async (mail, messageId, { loadEngin
   return files;
 }, "readAttachments");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/mail/read.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/mail/read.js
 var lowerSuspicious = /* @__PURE__ */ __name((items, suspicious) => [
   ...items.filter((item) => !suspicious(item)),
   ...items.filter(suspicious)
@@ -285,11 +287,11 @@ var attachmentsText = /* @__PURE__ */ __name((hit) => (hit.attachments ?? []).ma
   ${file.text.replace(/\n/g, "\n  ")}`;
 }).join("\n"), "attachmentsText");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/mail/bulk.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/mail/bulk.js
 var BULK = "bulk";
 var bulkBox = { externalId: "memo:bulk", name: "bulk", kind: BULK };
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/mail/email-input.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/mail/email-input.js
 var sentAtOf = /* @__PURE__ */ __name((date, receivedAt) => {
   const sent = date === null ? Number.NaN : Date.parse(date);
   return Number.isNaN(sent) ? Date.parse(receivedAt) : sent;
@@ -309,7 +311,7 @@ var parsedEmail = /* @__PURE__ */ __name((mail, item, header, address) => ({
   outgoing: mail.from === null ? null : mail.from.email === address
 }), "parsedEmail");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/mail/presets.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/mail/presets.js
 var PRESETS = {
   social: {
     about: "notifications from social networks",
@@ -401,7 +403,7 @@ var presetMatches = /* @__PURE__ */ __name((name, facts) => {
   return false;
 }, "presetMatches");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/mail/probe.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/mail/probe.js
 var share = /* @__PURE__ */ __name((part, whole) => Math.round(part / whole * 100) / 100, "share");
 var isSent = /* @__PURE__ */ __name((item) => item.labels?.includes("Sent") || /(^|\/)sent\b/i.test(item.folder ?? ""), "isSent");
 var groupKey = /* @__PURE__ */ __name((headers) => headers.listId === void 0 ? `from:${headers.from}` : `list:${headers.listId}`, "groupKey");
@@ -469,7 +471,7 @@ var probeMail = /* @__PURE__ */ __name((items, limit, ages = /* @__PURE__ */ new
   };
 }, "probeMail");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/mail/facts.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/mail/facts.js
 var factsOf = /* @__PURE__ */ __name((listed2, rules, ages = /* @__PURE__ */ new Map()) => {
   const grouped = rules.some(({ match }) => match.score_at_least !== void 0 || match.preset !== void 0);
   if (!grouped)
@@ -5740,7 +5742,7 @@ var PostalMime = class _PostalMime {
   }
 };
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/mail/headers.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/mail/headers.js
 var unfold = /* @__PURE__ */ __name((text2) => text2.replace(/\r?\n[ \t]+/g, " "), "unfold");
 var field = /* @__PURE__ */ __name((unfolded, name) => new RegExp(`^${name}:[ \\t]*(.*?)\\r?$`, "im").exec(unfolded)?.[1], "field");
 var fieldsOf = /* @__PURE__ */ __name((unfolded, name) => [...unfolded.matchAll(new RegExp(`^${name}:[ \\t]*(.*?)\\r?$`, "gim"))].map(([, value]) => value), "fieldsOf");
@@ -5787,7 +5789,7 @@ var mailHeadersOf = /* @__PURE__ */ __name((raw) => {
   };
 }, "mailHeadersOf");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/mail/parse.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/mail/parse.js
 var MAX_BODY_CHARS = 1e6;
 var MAX_ATTACHMENTS = 50;
 var BRACKETED_ID = /<[^<>\s]+>/g;
@@ -5852,13 +5854,13 @@ var parseMail = /* @__PURE__ */ __name(async (raw, maxBodyChars = MAX_BODY_CHARS
   };
 }, "parseMail");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/mail/partial.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/mail/partial.js
 var PARTIAL = "partial";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/mail/account-key.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/mail/account-key.js
 var mailAccountKey = /* @__PURE__ */ __name((address) => ({ provider: "email", account: address.toLowerCase() }), "mailAccountKey");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/mail/rule-stored.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/mail/rule-stored.js
 var ACTION_OF = { full: "keep", envelope: "envelope", skip: "skip" };
 var KINDS = {
   from: "string",
@@ -5927,7 +5929,7 @@ var storedMailRuleSet = /* @__PURE__ */ __name(async (store, account, query) =>
 }, "storedMailRuleSet");
 var storedMailRules = /* @__PURE__ */ __name(async (store, account, query) => (await storedMailRuleSet(store, account, query)).rules, "storedMailRules");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/mail/rules.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/mail/rules.js
 var DAY_MS = 24 * 60 * 60 * 1e3;
 var domainOf = /* @__PURE__ */ __name((address) => address.slice(address.lastIndexOf("@") + 1), "domainOf");
 var domainMatches = /* @__PURE__ */ __name((wanted2, sender) => {
@@ -5999,7 +6001,7 @@ var tagsOf = /* @__PURE__ */ __name((rules, facts) => {
 }, "tagsOf");
 var conditionKeys = /* @__PURE__ */ __name((match) => Object.keys(match).filter((key) => match[key] !== void 0).sort(), "conditionKeys");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/mail/rule-input.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/mail/rule-input.js
 var STORE_ACTION = { keep: "full", envelope: "envelope", skip: "skip" };
 var LOWER = ["from", "domain", "list_id", "subject"];
 var conditionsOf = /* @__PURE__ */ __name((match) => Object.fromEntries(conditionKeys(match).map((key) => {
@@ -6029,7 +6031,7 @@ var ruleInput = /* @__PURE__ */ __name((rule, source = rule.source ?? "owner") =
   decidedAt: decidedAtOf(rule.decided_at)
 }), "ruleInput");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/mail/rule-tags.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/mail/rule-tags.js
 var reuseOf = /* @__PURE__ */ __name((error) => {
   const { details } = error;
   return details?.reason === "tag-review.required" ? details.candidates?.[0]?.name : void 0;
@@ -6090,7 +6092,7 @@ var settleRuleTags = /* @__PURE__ */ __name(async (store, accountId, rules, outc
   }
 }, "settleRuleTags");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/mail/server-query.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/mail/server-query.js
 var DAY = 864e5;
 var empty = /* @__PURE__ */ __name(() => ({ words: [], from: [], to: [], cc: [], subject: [], body: [] }), "empty");
 var narrows = /* @__PURE__ */ __name((criteria) => criteria.words.length + criteria.from.length + criteria.to.length + criteria.cc.length + criteria.subject.length + criteria.body.length > 0 || criteria.since !== void 0 || criteria.before !== void 0 || criteria.seen !== void 0 || criteria.flagged !== void 0, "narrows");
@@ -6163,7 +6165,7 @@ var mailCriteriaOf = /* @__PURE__ */ __name((text2, { exact, timezone } = {}) =>
   };
 }, "mailCriteriaOf");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/mail/server-search.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/mail/server-search.js
 var refusal = {
   unsupported: "this mailbox's server cannot be searched \u2014 use --backend archive",
   offline: "--backend server needs the network \u2014 not with --offline",
@@ -6378,7 +6380,7 @@ var searchMailServer = /* @__PURE__ */ __name(async (store, mailbox, access, req
   return { report, sources };
 }, "searchMailServer");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/mail/cli/marks.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/mail/cli/marks.js
 var iso = /* @__PURE__ */ __name((ms) => ms === null ? null : new Date(ms).toISOString(), "iso");
 var mailMark = strictObject({
   holder: string(),
@@ -6476,7 +6478,7 @@ var resetMarkCommand = /* @__PURE__ */ __name((mail) => answerEntity(annotate(ne
   });
 }), "resetMarkCommand");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/mail/review.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/mail/review.js
 var REVIEW_THREADS = 50;
 var REVIEW_PER_THREAD = 50;
 var OWED_DAYS = 30;
@@ -6574,7 +6576,7 @@ var reviewMail = /* @__PURE__ */ __name(async (store, mailbox, options) => {
   };
 }, "reviewMail");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/mail/cli/review.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/mail/cli/review.js
 var DAY2 = 864e5;
 var REVIEW_UNTRUSTED = [...SUMMARY_UNTRUSTED, ...MAIL_HIT_UNTRUSTED];
 var MAIL_REVIEW_QUERY = defineQuery({
@@ -6856,7 +6858,7 @@ an agent over MCP, and each scheduled run.`).action(async function(query) {
   saved?.save(found.checked ?? {}, found.complete ? { through: found.until } : {});
 }), "mailReviewCommand");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/mail/cli/bulk-settings.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/mail/cli/bulk-settings.js
 var listed = /* @__PURE__ */ __name((words2) => words2.join(", "), "listed");
 var MAIL_BULK_SETTINGS = [
   {
@@ -6912,7 +6914,7 @@ var bulkTriageOf = /* @__PURE__ */ __name((config) => {
   };
 }, "bulkTriageOf");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.612.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_2b92b8a5a9536cd50d24d35c3ce22b6a/node_modules/@wirecat/cli-core/dist/mail/cli/index.js
+// node_modules/.pnpm/@wirecat+cli-core@0.613.0_@wirecat+cli-base@0.82.0_commander@15.0.0_esbuild@0.28.2_type_562287bbc40b862fa82b63f307e02b11/node_modules/@wirecat/cli-core/dist/mail/cli/index.js
 var absentAccount = /* @__PURE__ */ __name((error) => {
   if (error instanceof CliError && error.code === "not_found")
     return void 0;
@@ -7196,6 +7198,68 @@ var mailReadCommands = sharedCommand((mail) => [
   conversationsCommand(mail)
 ]);
 
+// dist/mcp/granted.js
+var granted = /* @__PURE__ */ new WeakMap();
+var grantLevels = /* @__PURE__ */ __name((program, levels) => {
+  granted.set(program, levels);
+}, "grantLevels");
+var grantedLevel = /* @__PURE__ */ __name((command, key) => {
+  const levels = granted.get(rootOf(command));
+  return levels === void 0 ? void 0 : levelFor(levels, key).level;
+}, "grantedLevel");
+
+// dist/search/lane-gates.js
+var LANE_GATES = [
+  {
+    lane: "business",
+    key: "business.list",
+    // contracts, subscriptions, products and wallets have no memo command yet; their keys guard them once they do.
+    kinds: {
+      invoice: "invoices.list",
+      payment: "payments.list",
+      order: "orders.list",
+      contract: "contracts.list",
+      subscription: "subscriptions.list",
+      product: "products.list",
+      wallet: "wallets.list"
+    }
+  }
+];
+var LANE_KEYS = LANE_GATES.map(({ key }) => key);
+var leftOut = /* @__PURE__ */ __name((lane, what, key) => ({
+  code: "permission_error",
+  resource: lane,
+  reason: `${what} left out: memo's MCP server denies ${key}`
+}), "leftOut");
+var lanesFor = /* @__PURE__ */ __name((command, asked) => {
+  const lanes = asked ?? [...RESOURCES_SEARCHED];
+  const denied = /* @__PURE__ */ __name((key) => grantedLevel(command, key) === "deny", "denied");
+  const skipped = [];
+  const hidden = /* @__PURE__ */ new Set();
+  const off = /* @__PURE__ */ new Set();
+  for (const gate of LANE_GATES) {
+    if (!lanes.includes(gate.lane))
+      continue;
+    if (denied(gate.key)) {
+      off.add(gate.lane);
+      skipped.push(leftOut(gate.lane, gate.lane, gate.key));
+      continue;
+    }
+    for (const [kind, key] of Object.entries(gate.kinds))
+      if (denied(key)) {
+        hidden.add(kind);
+        skipped.push(leftOut(gate.lane, kind, key));
+      }
+  }
+  const shows = hidden.size ? { shows: /* @__PURE__ */ __name((item) => !hidden.has(item.kind), "shows") } : {};
+  if (!off.size)
+    return { only: asked, skipped, ...shows };
+  const only = lanes.filter((lane) => !off.has(lane));
+  if (!only.length)
+    throw new CliError("permission_error", `search all has nothing it may read: ${skipped.map(({ reason }) => reason).join("; ")}`, { reason: "search.all-denied" });
+  return { only, skipped, ...shows };
+}, "lanesFor");
+
 // dist/config-issues.js
 var pathOf = /* @__PURE__ */ __name((command) => {
   const words2 = [];
@@ -7204,7 +7268,7 @@ var pathOf = /* @__PURE__ */ __name((command) => {
   return words2;
 }, "pathOf");
 var permissionKeyOf = /* @__PURE__ */ __name((command) => pathOf(command).join(".") || null, "permissionKeyOf");
-var memoPermissionKeys = /* @__PURE__ */ __name((program) => knownPermissionKeys(program, permissionKeyOf, ["mcp.authority"]), "memoPermissionKeys");
+var memoPermissionKeys = /* @__PURE__ */ __name((program) => knownPermissionKeys(program, permissionKeyOf, ["mcp.authority", ...LANE_KEYS]), "memoPermissionKeys");
 
 // dist/notes/files.js
 import { closeSync, openSync, readdirSync, readSync } from "node:fs";
@@ -7597,6 +7661,8 @@ export {
   markItem,
   OWED_DAYS,
   mailReadCommands,
+  grantLevels,
+  lanesFor,
   memoPermissionKeys,
   NOTE_EXTENSIONS,
   readMemoId,