@wirecat/cli-template 0.1.2 → 0.1.3

package/.gitattributes

@@ -0,0 +1 @@
+* text=auto eol=lf

package/.github/workflows/changelog-guard.yml

@@ -9,4 +9,4 @@ permissions:
 
 jobs:
   changelog:
-    uses: WireCatLabs/cli-base/.github/workflows/changelog-guard.yml@70449547973dd113806a6829f4591dce713b5b78 # v0.51.1
+    uses: WireCatLabs/cli-base/.github/workflows/changelog-guard.yml@b2d2418af0e23ecc816f3117ae2b0c627917fca5 # v0.55.0

package/.github/workflows/ci.yml

@@ -19,7 +19,7 @@ permissions:
 
 jobs:
   ci:
-    uses: WireCatLabs/cli-base/.github/workflows/node-ci.yml@70449547973dd113806a6829f4591dce713b5b78 # v0.51.1
+    uses: WireCatLabs/cli-base/.github/workflows/node-ci.yml@b2d2418af0e23ecc816f3117ae2b0c627917fca5 # v0.55.0
     with:
       pack: ${{ inputs.pack || false }}
       bun-run: pnpm build && pnpm smoke:bun

package/.github/workflows/monthly.yml

@@ -22,7 +22,7 @@ jobs:
       contents: read
       actions: read
       security-events: write
-    uses: WireCatLabs/cli-base/.github/workflows/release-checks.yml@70449547973dd113806a6829f4591dce713b5b78 # v0.51.1
+    uses: WireCatLabs/cli-base/.github/workflows/release-checks.yml@b2d2418af0e23ecc816f3117ae2b0c627917fca5 # v0.55.0
     with:
       dependencies: true
       languages: '["actions","javascript-typescript"]'

package/.github/workflows/release.yml

@@ -56,7 +56,7 @@ jobs:
       contents: read
       actions: read
       security-events: write
-    uses: WireCatLabs/cli-base/.github/workflows/release-checks.yml@70449547973dd113806a6829f4591dce713b5b78 # v0.51.1
+    uses: WireCatLabs/cli-base/.github/workflows/release-checks.yml@b2d2418af0e23ecc816f3117ae2b0c627917fca5 # v0.55.0
 
   build:
     needs: [checks, validation]

package/CHANGELOG.md

@@ -3,6 +3,37 @@
 Notable changes to `@wirecat/cli-template`. One section per version, newest first; versions follow
 [semantic versioning](https://semver.org), so before `1.0.0` the skeleton may still change.
 
+## 0.1.3 — 25.10.2026
+
+### Added
+
+- **`new` writes the content languages into the CLI's identity.** The `--content-lang` codes go into
+  `contentLanguages` in `src/identity.ts`, so the CLI's first run ticks them in advance in the search-language question.
+  `docs/dev/DESIGN.md` still records them with the speech-model order.
+- **`scripts/audit.sh` reads `config/parity-groups.json` when the repository has one.** That file replaces
+  cli-base's parity groups for the audit. The template uses it to compare itself with the published CLIs.
+- **The release skill ends with a fresh-agent audit.** Before the version is raised, a new subagent audits the
+  repository against the handbook alone, with the prompt in `docs/dev/skills/release/fresh-audit.md`, and its report
+  goes into the release pull request.
+
+### Changed — may break callers
+
+- **The skeleton runs on cli-core 0.421.0 and cli-base 0.53.0.** A new CLI gets cli-core's changes since 0.412.0,
+  including the `contentLanguages` field on its identity. cli-base stays on 0.53, because cli-core 0.421.0 accepts
+  only cli-base 0.53.
+
+### Fixed
+
+- **`new`'s next steps run in Windows PowerShell 5.1.** It printed `cd <name> && pnpm install && pnpm ci:quick`, and
+  PowerShell 5.1 has no `&&`. Each step is now on its own line.
+- **A CLI's files keep LF line endings on Windows.** A new template-owned `.gitattributes` (`* text=auto eol=lf`)
+  stops git from checking files out with CRLF, which Biome's format check rejects.
+
+### Security
+
+- **markdownlint-cli2's markdown-it, katex and smol-toml move past their advisories.** `pnpm-workspace.yaml` raises
+  them to markdown-it 15.0.3, katex 0.18.2 and smol-toml 1.9.1 while markdownlint-cli2 stays at the shared version.
+
 ## 0.1.2 — 25.10.2026
 
 ### Changed — may break callers

package/config/parity-groups.json

@@ -0,0 +1,20 @@
+[
+  {
+    "name": "template",
+    "members": ["clidev", "tg", "max", "memo", "drive", "zm", "wa"],
+    "covers": ["commands", "upgrade"],
+    "differences": []
+  },
+  {
+    "name": "template-config",
+    "members": ["clidev", "tg", "max", "wa"],
+    "covers": ["config"],
+    "differences": []
+  },
+  {
+    "name": "template-skill",
+    "members": ["clidev", "tg", "max", "memo", "zm", "wa"],
+    "covers": ["skill"],
+    "differences": []
+  }
+]

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.1.2";
+export declare const VERSION = "0.1.3";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -1,2 +1,2 @@
-export const VERSION = "0.1.2";
+export const VERSION = "0.1.3";
 //# sourceMappingURL=version.js.map

package/docs/commands.md

@@ -167,7 +167,7 @@ clidev config set <setting> <value> [options]
 | Argument | | What it is |
 |---|---|---|
 | `setting` | required | one of: limit, timeout_ms, color, sender_colors, record, keep_runs_for_days, permissions, sends_per_hour, requests_per_minute, transcribe_with, speech_model, search_catch_up, picture_search, embedding_provider, embedding_model, embedding_base_url, embedding_dims, analysis_provider, analysis_model, analysis_base_url, models, read_other_bots, update_check, skill_hint, search_stemmers.cyrillic, search_stemmers.latin, phone_countries, task_categories.<name>, task_agent_close, task_agent_close_min, task_first_pass_per_chat, account_groups.<name>. |
-| `value` | required | a number, true or false, or for allow a list like send,reaction; for a group tg:work,max:Alice,email:me@x. |
+| `value` | required | a number, true or false; for a group tg:work,max:Alice,email:me@x. |
 
 | Option | What it does |
 |---|---|

package/docs/dev/skills/release/SKILL.md

@@ -17,8 +17,11 @@ and runs `bin/release`.
    `Changed — may break callers`, `Fixed`, `Security`, `Removed` (`WC-DOC-14` to `WC-DOC-18`). No internal ids.
 4. **The docs.** `README.md`, `docs/*.md` and `skills/clidev-cli/SKILL.md` state what the code does now (`WC-DOC-3`).
    `pnpm generate` and `pnpm test:matrix` rewrite the generated pages (`WC-DOC-4`).
-5. **The version.** `npm view @wirecat/clidev-cli version` is what is published. Set the next version in
+5. **The fresh audit.** Start a new subagent that has none of your context, and give it the prompt in
+   [fresh-audit.md](fresh-audit.md) as written. Put its report in the release pull request. Fix each gap in this
+   repository there, or list it as a follow-up; take a gap in the handbook to cli-base.
+6. **The version.** `npm view @wirecat/clidev-cli version` is what is published. Set the next version in
    `package.json`, run `pnpm version:sync`, date the section as `## <version> — DD.MM.YYYY`, run
    `pnpm release:check` again, and open the pull request `chore(release): <version>`.
-6. **The owner** merges it and runs `bin/release` on a clean `main`. `bin/release --local` publishes from this
+7. **The owner** merges it and runs `bin/release` on a clean `main`. `bin/release --local` publishes from this
    computer when GitHub Actions cannot, with the owner's own npm login or `NPM_TOKEN`.

package/docs/dev/skills/release/fresh-audit.md

@@ -0,0 +1,17 @@
+# Fresh-agent audit
+
+Step 5 of the [release skill](SKILL.md) gives the prompt below to a new subagent that has none of the releasing
+agent's context. Give it as written.
+
+## Prompt
+
+You audit a WireCat CLI repository, in the current folder. Use only two sources: the handbook, starting at
+`node_modules/@wirecat/cli-base/docs/standards/README.md`, and the repository itself. Do not read plans, journals
+or earlier reviews. Run `pnpm install` first if `node_modules` is missing.
+
+Check the repository against every handbook page that applies to it: the code, the docs, the configs and the
+workflows. You may run the package scripts. Change nothing.
+
+Report each gap on one line: the rule id or handbook page, the file, what is wrong, and where the fix belongs: in
+this repository, or in the handbook, when a rule is unclear, missing or contradicts another. End with the number
+of gaps of each kind. If you find none, say so.

package/kit/README.md

@@ -35,9 +35,10 @@ choices. Nothing is guessed.
 
 Every question except the names and `--content-lang` also takes `other:<your answer>`.
 
-The content languages go only into `DESIGN.md`. The file also holds the speech-model order a messenger definition
-should use, and the warnings for languages that have no stemmer or speech model in cli-core. `new` writes no search
-or model setting.
+`new` writes the content languages into `contentLanguages` in `src/identity.ts`; on the first run, cli-core ticks them
+in advance in the search-language question, and the person confirms. `DESIGN.md` records them too, with the
+speech-model order a messenger definition should use and the warnings for languages that have no stemmer or speech
+model in cli-core. `new` writes no search or model setting.
 
 ## `upgrade`
 
@@ -78,6 +79,10 @@ A conflict leaves git markers, and `template.json` keeps the new state under `pe
   `cspell.json`, `tsconfig*.json` and `.markdownlint-cli2.jsonc`. Do not add a kit-only workflow: `.github/` is
   template-owned and would carry it into every new CLI.
 - `README.md` and `CHANGELOG.md` describe the template, so `new` writes short ones for the new CLI.
+- `config/parity-groups.json` puts the template in parity groups with the published CLIs, so `scripts/audit.sh`
+  compares its `commands`, `upgrade`, `config` and `skill` paths with theirs. It is in neither list, so a new CLI does
+  not get it: the file replaces cli-base's `PARITY_GROUPS`, and a new CLI joins those groups instead (step 4 of
+  `new`'s output).
 - `docs/dev/DESIGN.md` is always a seed: it holds the CLI's interview answers.
 - `package.json` is always a seed. `new` rewrites it: `name` becomes `--package`, `version` becomes `0.0.0`, and
   `repository`, `homepage` and `bugs` point at `<owner>/<name>`. It also drops every `bin`, `files` entry and script

package/kit/dist/new.js

@@ -158,6 +158,15 @@ export const cliPackageJson = (text, names) => {
     return `${JSON.stringify(next, null, 2)}\n`;
 };
 const VERSION_FILE = "src/version.ts";
+const IDENTITY_FILE = "src/identity.ts";
+export const withContentLanguages = (text, languages) => {
+    const match = /export const IDENTITY: AppIdentity = \{\n[\s\S]*?\n\}/.exec(text);
+    if (!match)
+        throw new Error(`${IDENTITY_FILE}: no IDENTITY object to add contentLanguages to`);
+    const end = match.index + match[0].length - 1;
+    const line = `  contentLanguages: [${languages.map((code) => JSON.stringify(code)).join(", ")}],\n`;
+    return text.slice(0, end) + line + text.slice(end);
+};
 export const cliReadme = (names) => [
     `# ${names.command}`,
     "",
@@ -218,6 +227,7 @@ export const runNew = async (cwd, source, args, io) => {
         "README.md": () => cliReadme(names),
         "CHANGELOG.md": () => cliChangelog(names, source),
         [VERSION_FILE]: (text) => text.replace(/VERSION = "[^"]*"/, 'VERSION = "0.0.0"'),
+        [IDENTITY_FILE]: (text) => withContentLanguages(text, answers.contentLang ?? []),
         "AGENTS.md": (text) => withReference(text, category),
     };
     const hashes = {};
@@ -247,8 +257,11 @@ export const runNew = async (cwd, source, args, io) => {
         ...(warnings.length ? ["", "Content languages:", ...warnings.map((warning) => `  ${warning}`)] : []),
         "",
         "Next:",
-        `  cd ${names.name} && pnpm install && pnpm ci:quick`,
-        '  git add -A && git commit -m "chore: start from @wirecat/cli-template"',
+        `  cd ${names.name}`,
+        "  pnpm install",
+        "  pnpm ci:quick",
+        "  git add -A",
+        '  git commit -m "chore: start from @wirecat/cli-template"',
         `  then give the agent docs/dev/DESIGN.md; every example passes a profile, e.g. ${names.command} personal doctor`,
         "",
         "Four steps need a person:",

package/kit/dist/source.js

@@ -79,10 +79,10 @@ export const npmCommand = (args) => {
     ].find((path) => existsSync(path));
     return cli ? [process.execPath, [cli, ...args]] : ["npm", args];
 };
-export const fetchPublished = async (name, version) => {
+export const fetchPacked = async (spec) => {
     const dir = await mkdtemp(join(tmpdir(), "cli-template-"));
-    const { stdout } = await run(...npmCommand(["pack", `${name}@${version}`, "--silent", "--pack-destination", dir])).catch((error) => {
-        throw new Error(`could not download ${name}@${version} from npm, which upgrade needs as the merge base: ${error.message}`);
+    const { stdout } = await run(...npmCommand(["pack", spec, "--silent", "--pack-destination", dir])).catch((error) => {
+        throw new Error(`could not download ${spec} from npm, which upgrade needs as the merge base: ${error.message}`);
     });
     const tarball = stdout.trim().split("\n").pop() ?? "";
     const dispose = () => rm(dir, { recursive: true, force: true });
@@ -96,3 +96,4 @@ export const fetchPublished = async (name, version) => {
         throw error;
     }
 };
+export const fetchPublished = (name, version) => fetchPacked(`${name}@${version}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wirecat/cli-template",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Start a new WireCat CLI: a working skeleton on cli-base and cli-core, copied by new and kept current by upgrade",
   "license": "Apache-2.0",
   "author": "Viacheslav Ptsarev",
@@ -34,6 +34,7 @@
     "LICENSE",
     "README.md",
     "SECURITY.md",
+    ".gitattributes",
     ".gitleaks.toml",
     ".markdownlint-cli2.jsonc",
     ".vale.ini",
@@ -82,8 +83,8 @@
   },
   "dependencies": {
     "@modelcontextprotocol/server": "2.3.0",
-    "@wirecat/cli-base": "0.51.1",
-    "@wirecat/cli-core": "0.412.0",
+    "@wirecat/cli-base": "0.53.0",
+    "@wirecat/cli-core": "0.421.0",
     "commander": "15.0.0"
   },
   "devDependencies": {
@@ -91,7 +92,7 @@
     "@cspell/dict-en-gb": "5.0.34",
     "@cspell/dict-es-es": "3.0.9",
     "@cspell/dict-ru_ru": "2.3.3",
-    "@modelcontextprotocol/client": "2.3.1",
+    "@modelcontextprotocol/client": "2.4.0",
     "@types/node": "22.20.5",
     "@vitest/coverage-v8": "5.0.5",
     "@wirecat/cli-testing": "0.5.3",

package/pnpm-workspace.yaml

@@ -4,3 +4,8 @@ allowBuilds:
   lefthook: true
 minimumReleaseAgeExclude:
   - '@wirecat/*'
+# markdownlint-cli2 is pinned to community's version, whose markdown-it, katex and smol-toml have advisories.
+overrides:
+  markdown-it: ^15.0.3
+  katex: ^0.18.2
+  smol-toml: ^1.9.1

package/scripts/audit.sh

@@ -14,6 +14,8 @@ npm install -g --prefix "$scratch/prefix" --ignore-scripts --no-audit --no-fund
   @wirecat/tg-cli @wirecat/max-cli @wirecat/whatsapp-cli @wirecat/cli-memo @wirecat/drive-cli @wirecat/zoom-cli
 bin="$scratch/prefix/bin"
 others=()
+# A groups file replaces cli-base's PARITY_GROUPS. The template keeps one because it is in no group of cli-base's.
+[ -f "$root/config/parity-groups.json" ] && others+=(--groups "$root/config/parity-groups.json")
 for cli in tg max wa memo drive zm; do
   [ "$cli" = "$command" ] || others+=(--cli "$bin/$cli")
 done

package/src/version.ts

@@ -1 +1 @@
-export const VERSION = "0.1.2"
+export const VERSION = "0.1.3"

package/template.json

@@ -1,6 +1,7 @@
 {
   "files": [
     ".github/",
+    ".gitattributes",
     ".gitignore",
     ".gitleaks.toml",
     ".vale.ini",