@wirecat/cli-template 0.1.8 → 0.3.0

package/CHANGELOG.md

@@ -3,7 +3,66 @@
 Notable changes to `@wirecat/cli-template`. One section per version, newest first; versions follow
 [semantic versioning](https://semver.org), so before `1.0.0` the skeleton may still change.
 
-<!-- cspell:words katex smol -->
+<!-- cspell:words katex smol whatsapp -->
+
+## 0.3.0 — 26.10.2026
+
+### Changed — may break callers
+
+- **The skeleton runs on cli-core 0.439.0; cli-base stays at 0.59.0.** A run record now keeps the command line as
+  typed, so `runs show` tells what was run; a secret is still `[redacted]`. The new setting `record_input`
+  (`config set record_input false`) brings back the masking of every typed word. `config set` and `config unset` list
+  `record_input`, so a CLI's help snapshot changes once. A test or page of a CLI that says a run never holds what was
+  typed needs updating. An argument or option that carries a secret is marked with `secretInput()` from
+  `@wirecat/cli-core/cli`; the skeleton has none to mark.
+
+### Security
+
+- **A first word refused as a profile no longer reaches the run record** as the run's `profile`, and an error that
+  quotes `--token=…` or `password=…` no longer keeps the value (from cli-core 0.438.0 and 0.439.0).
+
+### Fixed
+
+- **`docs/dev/reference-clis.md` links the evidence for what it says about other repositories**, no longer calls
+  whatsapp-cli the handbook's worked example, points a mail CLI at cli-memo's mail import, and no longer says `config`
+  hides messenger settings when `messenger` is `false`.
+- **`pnpm release:check` also runs `security:no-leak` and `package:check`**, which only `bin/release --local` ran.
+  `package.json` is copied once, so a CLI adds both to its own `release:check` by hand.
+- **`SECURITY.md` asks never to send a session** beside a token, a password and private content.
+
+## 0.2.0 — 26.10.2026
+
+### Added
+
+- **`skill install --for hermes` gives Hermes Agent the skill, and `skill status` reports the copy Hermes reads.**
+  A bare `skill install` still writes only Claude Code's folder and `~/.agents/skills`, which OpenClaw reads too.
+- **`search_reranker` is a new setting in `config set`.** Only a CLI that adds cli-core's message search uses it.
+
+### Changed — may break callers
+
+- **The skeleton runs on cli-core 0.437.0 and cli-base 0.59.0.** cli-core 0.437 accepts only cli-base 0.59.x, so a
+  CLI that pins cli-base moves both. `--help-all` now gives `clidev personal mcp` as the profile example, not
+  `clidev personal doctor`, since `doctor` takes no profile; a CLI that keeps help snapshots refreshes them once.
+  `skill status --json` gains a `hermes` entry beside `targets`. A run started by OpenClaw has `agent: openclaw`,
+  and one started from an OpenClaw chat adds `agent.from_chat: true`: a reader of `run.json` that refuses unknown
+  keys must accept it.
+- **`bin/release` runs `changelog restore` from the installed cli-base**, through `pnpm exec cli-dev` like the fold,
+  not from `npx -p @wirecat/cli-base@0.55.1` outside the lockfile. A CLI that takes this file with `upgrade` needs
+  cli-base 0.55.1 or later, which has `changelog restore`.
+- **`pnpm version:check` refuses a release whose number is raised less than its changelog needs.** Before `1.0.0`, a
+  section with `Changed — may break callers`, `Removed` or `Added` raises the minor; only fixes, security and docs
+  raise the patch. The release skill says the same. `scripts/` and `package.json` are copied once, so a CLI started
+  from an older template copies `scripts/version-level.ts` and the `version:check` script to get the check.
+- **A new CLI starts with coverage floors just under what the skeleton's tests reach**: lines 95, statements 92,
+  functions 85, branches 75, and still 50% lines per file. The template's kit has its own floor, which `new` leaves
+  out of the CLI's `vitest.config.ts`.
+
+### Fixed
+
+- **`new` drops a `kit/` key from a config,** not only a `kit/` entry in a list, so the CLI's `vitest.config.ts` has
+  no coverage floor for a folder it does not have.
+- **`docs/installation.md` gives the Node.js versions `engines` allows:** 22.16 or a later 22.x, or 24 or later. It
+  read as if Node 23 worked.
 
 ## 0.1.8 — 26.10.2026
 

package/README.md

@@ -32,7 +32,7 @@ such as `personal` in `clidev personal config show`; none is ever assumed. `CLID
 | `clidev doctor` | Checks this installation: version, paths, settings and profiles, without the network |
 | `clidev commands --json` | Prints every command as JSON, for agents and scripts |
 | `clidev personal config show` | Shows each setting and where it came from |
-| `clidev skill install` | Installs the agent skill for Claude Code, Codex and Gemini CLI |
+| `clidev skill install` | Installs the agent skill for Claude Code, Codex, Gemini CLI and OpenClaw; `--for hermes` for Hermes Agent |
 | `clidev personal mcp` | Serves the profile's commands to an AI agent over MCP |
 | `clidev runs list` | Lists recorded runs, newest first: every command that failed is kept |
 | `clidev upgrade --check` | Says whether a newer version is on npm |

package/SECURITY.md

@@ -5,8 +5,8 @@ Please report a security problem privately — never in a public issue:
 - by email: [hello@wirecat.dev](mailto:hello@wirecat.dev);
 - or through [GitHub's private vulnerability reporting](https://github.com/WireCatLabs/cli-template/security/advisories/new).
 
-Say what you saw, how to repeat it, and the version (`clidev --version`). Never send a token, a password or anyone's
-private content.
+Say what you saw, how to repeat it, and the version (`clidev --version`). Never send a token, a password, a session or
+anyone's private content.
 
 What `clidev` keeps on your computer: the [shared security page](https://wirecat.dev/en/docs/security) and
 [docs/security.md](docs/security.md).

package/bin/release

@@ -83,7 +83,7 @@ land() {
 
 # A pull request checked before the last release and merged after it put its entry in that release's section;
 # restore moves it to Unreleased, so the fold below brings it into this version.
-restored=$(npx -y -p @wirecat/cli-base@0.55.1 cli-dev changelog restore --land)
+restored=$(pnpm exec cli-dev changelog restore --land)
 [ -z "$restored" ] || echo "$restored"
 rerun_if_changed "$@"
 

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.1.8";
+export declare const VERSION = "0.3.0";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -1,2 +1,2 @@
-export const VERSION = "0.1.8";
+export const VERSION = "0.3.0";
 //# sourceMappingURL=version.js.map

package/docs/commands.md

@@ -90,7 +90,7 @@ clidev skill show [name] [options]
 
 ### `clidev skill install`
 
-write SKILL.md to \~/.claude/skills/clidev-cli/ (Claude Code) and \~/.agents/skills/clidev-cli/ (Codex, Gemini CLI)
+write SKILL.md to \~/.claude/skills/clidev-cli/ (Claude Code) and \~/.agents/skills/clidev-cli/ (Codex, Gemini CLI, OpenClaw); --for hermes also has Hermes read \~/.agents/skills, which changes Hermes's own settings, so all leaves it out
 
 **Changes something on this computer only.**
 
@@ -100,7 +100,7 @@ clidev skill install [options]
 
 | Option | What it does |
 |---|---|
-| `--for <agents>` | which agents to install for. One of: `claude`, `agents`, `all`. Default: `all`. |
+| `--for <agents>` | which agents to install for. One of: `claude`, `agents`, `hermes`, `all`. Default: `all`. |
 
 **Returns:** install the tool's instructions for AI agents
 
@@ -108,7 +108,7 @@ clidev skill install [options]
 
 ### `clidev skill status`
 
-for each place `clidev skill install` writes to: the path, the version installed there, and whether it is current, stale, missing or unversioned
+for each place `clidev skill install` writes to, and for the copy Hermes reads: the path, the version installed there, and whether it is current, stale, missing or unversioned
 
 ```sh
 clidev skill status
@@ -182,7 +182,7 @@ clidev config set <setting> <value> [options]
 
 | Argument | | What it is |
 |---|---|---|
-| `setting` | required | one of: limit, timeout_ms, color, record, keep_runs_for_days, permissions, sends_per_hour, requests_per_minute, transcribe_with, speech_model, search_catch_up, picture_search, embedding_provider, embedding_model, embedding_base_url, embedding_dims, models, read_other_bots, update_check, skill_hint, search_stemmers.cyrillic, search_stemmers.latin, phone_countries, task_categories.<name>, task_agent_close, task_agent_close_min, task_first_pass_per_chat, account_groups.<name>. |
+| `setting` | required | one of: limit, timeout_ms, color, record, record_input, keep_runs_for_days, permissions, sends_per_hour, requests_per_minute, transcribe_with, speech_model, search_catch_up, picture_search, search_reranker, embedding_provider, embedding_model, embedding_base_url, embedding_dims, models, read_other_bots, update_check, skill_hint, search_stemmers.cyrillic, search_stemmers.latin, phone_countries, task_categories.<name>, task_agent_close, task_agent_close_min, task_first_pass_per_chat, account_groups.<name>. |
 | `value` | required | a number, true or false; for a group tg:work,max:Alice,email:me@x. |
 
 | Option | What it does |
@@ -207,7 +207,7 @@ clidev config unset <setting> [options]
 
 | Argument | | What it is |
 |---|---|---|
-| `setting` | required | one of: limit, timeout_ms, color, record, keep_runs_for_days, permissions, sends_per_hour, requests_per_minute, transcribe_with, speech_model, search_catch_up, picture_search, embedding_provider, embedding_model, embedding_base_url, embedding_dims, models, read_other_bots, update_check, skill_hint, search_stemmers.cyrillic, search_stemmers.latin, phone_countries, task_categories.<name>, task_agent_close, task_agent_close_min, task_first_pass_per_chat, account_groups.<name>. |
+| `setting` | required | one of: limit, timeout_ms, color, record, record_input, keep_runs_for_days, permissions, sends_per_hour, requests_per_minute, transcribe_with, speech_model, search_catch_up, picture_search, search_reranker, embedding_provider, embedding_model, embedding_base_url, embedding_dims, models, read_other_bots, update_check, skill_hint, search_stemmers.cyrillic, search_stemmers.latin, phone_countries, task_categories.<name>, task_agent_close, task_agent_close_min, task_first_pass_per_chat, account_groups.<name>. |
 
 | Option | What it does |
 |---|---|

package/docs/configuration.md

@@ -16,3 +16,9 @@ clidev personal config unset limit
 `permissions` decides what a command may do for this profile: `allow`, `ask`, `readonly` or `deny`, per permission
 key. Over MCP there is no one to ask, so `ask` lets the command run. `CLIDEV_READ_ONLY=1` refuses every write, whatever
 the permissions say.
+
+## Run records
+
+A command that fails is kept as a run, for `clidev runs list` and `runs show`. `record_input` decides whether a run
+keeps the words you typed; it is `true` unless you set it to `false`. Secrets are masked either way; see
+[Security](security.md).

package/docs/dev/reference-clis.md

@@ -5,19 +5,20 @@ the first question of the [design interview](skills/design-interview/SKILL.md):
 
 | Category | Learn from |
 | --- | --- |
-| messenger | [whatsapp-cli](https://github.com/WireCatLabs/whatsapp-cli), the handbook's worked example; then [tg-cli](https://github.com/WireCatLabs/tg-cli) and [max-cli](https://github.com/WireCatLabs/max-cli) |
+| messenger | [whatsapp-cli](https://github.com/WireCatLabs/whatsapp-cli), then [tg-cli](https://github.com/WireCatLabs/tg-cli) and [max-cli](https://github.com/WireCatLabs/max-cli) |
 | files and documents | [drive-cli](https://github.com/WireCatLabs/drive-cli) |
 | meetings | [zoom-cli](https://github.com/WireCatLabs/zoom-cli) |
 | notes | [cli-memo](https://github.com/WireCatLabs/cli-memo) |
-| mail, calendar, other | none yet: pick the nearest one with the owner |
+| mail, calendar, other | none of its own yet: pick the nearest one with the owner. cli-memo [imports mail](https://github.com/WireCatLabs/cli-memo/blob/c2d21254ab360aed7149a3250d17e879283aa603/docs/mail.md) |
 
 A messenger CLI sets `messenger: true` in `src/identity.ts`, and `new --category messenger` writes it. Every other
-category keeps the template's `messenger: false`, so the shared help, `commands` and `config` do not speak of chats,
-messages and senders.
+category keeps the template's `messenger: false`, so the shared help and `commands` do not speak of chats, messages
+and senders. `config` still lists cli-core's messenger settings, such as `sends_per_hour` and `read_other_bots`.
 
 cli-core keeps a provider registry (WC-ARCH-21). A CLI whose provider is not built into cli-core calls
 `registerProvider(store, { name, kind, aliases, command })` from `@wirecat/cli-core/store` on every run that opens
 the shared store. `kind` is one of `messages`, `mail`, `notes`, `documents`, `meetings` or `events`. Until the CLI
 has run once on a computer, `search` there leaves its accounts out and lists them under `skipped`. The reference CLIs
-do not show this call: their providers are built into cli-core. The skeleton opens no store and has no provider, so
-it registers nothing; the call comes with the CLI's first store code.
+do not show this call: cli-core already knows their providers, from its [seed list](https://github.com/WireCatLabs/cli-core/blob/6d8f415a6ba3124679741f57d3c22ee0f236e8bf/src/domain/providers.ts#L17-L29) and, for Drive, its
+[document providers](https://github.com/WireCatLabs/cli-core/blob/6d8f415a6ba3124679741f57d3c22ee0f236e8bf/src/domain/providers.ts#L50) (cli-core 0.439.0). `grep -rl registerProvider` over a clone of each of the six finds no call. The skeleton opens no store and has no provider, so it registers nothing; the call comes with
+the CLI's first store code.

package/docs/dev/skills/design-interview/SKILL.md

@@ -21,7 +21,9 @@ go to the further questions.
 5. **How do people filter what they find?** by time · by person · by container (chat, folder, calendar) · by words in
    the text · by status or label · other; several allowed.
 6. **What must never reach the store, a log or the output?** tokens and passwords · one-time codes and passcodes ·
-   links that carry a secret · the full content, keep only metadata · other; several allowed.
+   links that carry a secret · the full content, keep only metadata · other; several allowed. A run record keeps
+   the words typed on the command line: an argument or option that carries such a value is marked with
+   `secretInput()` from `@wirecat/cli-core/cli`.
 7. **What untrusted input arrives?** messages from other people · files and attachments · links · names and titles set
    by others · none · other; several allowed.
 

package/docs/dev/skills/release/SKILL.md

@@ -20,9 +20,13 @@ and runs `bin/release`.
 5. **The fresh audit.** Start a new subagent that has none of your context, and give it the prompt in
    [fresh-audit.md](fresh-audit.md) as written. Put its report in the release pull request. Fix each gap in this
    repository there, or list it as a follow-up; take a gap in the handbook to cli-base.
-6. **The version.** `npm view @wirecat/clidev-cli version` is what is published. Set the next version in
-   `package.json`, run `pnpm version:sync`, date the section as `## <version> — DD.MM.YYYY`, run
-   `pnpm release:check` again, and open the pull request `chore(release): <version>`.
+6. **The version.** `npm view @wirecat/clidev-cli version` is what is published. The changelog picks the level, and
+   before `1.0.0` this narrows `WC-REL-7`: a section with `Changed — may break callers` or `Removed` raises the minor
+   (`0.1.8` to `0.2.0`), and so does one with `Added`; only a section of `Fixed`, `Security` or docs raises the patch.
+   From `1.0.0`, a breaking change raises the major. `pnpm version:check` refuses a dated section whose number is
+   raised less than its headings need. Set the next version in `package.json`, run `pnpm version:sync`, date the
+   section as `## <version> — DD.MM.YYYY`, run `pnpm release:check` again, and open the pull request
+   `chore(release): <version>`.
 7. **The owner** merges it and runs `bin/release` on a clean `main`. `bin/release --local` publishes from this
    computer when GitHub Actions cannot, with `NPM_TOKEN`, the npm token in the keyring, or the owner's own npm login.
    The keyring is read only when `NPM_KEYRING_ACCOUNT` names the account the token is stored under (service `npm`);

package/docs/installation.md

@@ -1,6 +1,6 @@
 # Install
 
-Install `clidev` once on each computer where you or an agent use it. You need Node.js 22.16 or later, or 24.
+Install `clidev` once on each computer where you or an agent use it. You need Node.js 22.16 or a later 22.x, or 24 or later; Node 23 is not supported.
 
 ```sh
 npm install -g @wirecat/clidev-cli

package/docs/security.md

@@ -6,6 +6,10 @@ What WireCat CLIs share — the keyring, permissions, MCP and what never reaches
 `clidev` keeps its settings in `config.json` and its state in the folders `clidev doctor` shows. It sends nothing
 to any service yet.
 
+A run record keeps the command line as you typed it, so `clidev runs show` tells you what was run. A secret is still
+stored as `[redacted]`: an option named like a token or password, a password in a link, a long opaque string. To
+keep none of the words you type, run `clidev personal config set record_input false`.
+
 `config.json` is saved readable by you only (`0600`), and its folder is created for you only (`0700`). A file or
 folder made by an older version may be open to other users of the computer: `clidev doctor` lists each under
 `files.problems` and prints the `chmod` that fixes it. Windows is not checked. Report a vulnerability as [SECURITY.md](https://github.com/WireCatLabs/cli-template/blob/main/SECURITY.md)

package/docs/usage.md

@@ -20,8 +20,9 @@ on. The [command reference](commands.md) lists the codes.
 
 ## Agents
 
-`clidev skill install` puts the tool's skill where Claude Code, Codex and Gemini CLI look for it. `clidev personal mcp`
-serves the profile's commands over MCP, on stdin and stdout:
+`clidev skill install` puts the tool's skill where Claude Code, Codex, Gemini CLI and OpenClaw look for it.
+`clidev skill install --for hermes` also adds that folder to Hermes Agent's own settings, so a bare `skill install`
+leaves Hermes out. `clidev personal mcp` serves the profile's commands over MCP, on stdin and stdout:
 
 ```sh
 claude mcp add clidev -- clidev personal mcp

package/kit/dist/rename.js

@@ -30,6 +30,7 @@ export const stripKit = (path, content) => {
     const text = content.toString("utf8");
     const stripped = text
         .replace(/^[ \t]*\/\/[^\n]*\n(?=[ \t]*"!?(\.\/)?kit\/)/gm, "")
+        .replace(/^[ \t]*"(\.\/)?kit\/[^"]*":[^\n]*\n/gm, "")
         .replace(/\[\s*"!?(\.\/)?kit\/[^"]*"\s*\]/g, "[]")
         .replace(/,\s*"!?(\.\/)?kit\/[^"]*"/g, "")
         .replace(/"!?(\.\/)?kit\/[^"]*",\s*/g, "");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wirecat/cli-template",
-  "version": "0.1.8",
+  "version": "0.3.0",
   "description": "Start a new WireCat CLI: a working skeleton on cli-base and cli-core, copied by new and kept current by upgrade",
   "license": "Apache-2.0",
   "author": "Viacheslav Ptsarev",
@@ -67,13 +67,13 @@
     "docs:lint": "markdownlint-cli2",
     "contracts:check": "cli-contract contracts/plan.json",
     "security:no-leak": "cli-testing security no-leak . contracts/no-leak.json",
-    "version:check": "cli-dev version",
+    "version:check": "cli-dev version && node --experimental-strip-types scripts/version-level.ts",
     "version:sync": "cli-dev version --sync",
     "standards:check": "node config/wirecat/check.mjs",
     "lint:commands": "pnpm build && cli-dev lint --cli dist/bin/clidev.js",
     "audit:commands": "pnpm build && bash scripts/audit.sh",
     "ci:quick": "pnpm typecheck && pnpm build && pnpm lint:commands",
-    "release:check": "pnpm standards:check && pnpm lint && pnpm typecheck && pnpm test:coverage && pnpm lint:commands && pnpm audit:commands && pnpm contracts:check && pnpm test:matrix:check && pnpm docs:check && pnpm generate:check && pnpm version:check",
+    "release:check": "pnpm standards:check && pnpm lint && pnpm typecheck && pnpm test:coverage && pnpm lint:commands && pnpm audit:commands && pnpm contracts:check && pnpm test:matrix:check && pnpm docs:check && pnpm generate:check && pnpm version:check && pnpm security:no-leak && pnpm package:check",
     "prepare": "lefthook install || true",
     "prepack": "pnpm build",
     "docs:spell": "cspell lint --config cspell.json --no-progress --no-summary README.md SECURITY.md CHANGELOG.md 'docs/*.md'",
@@ -84,8 +84,8 @@
   },
   "dependencies": {
     "@modelcontextprotocol/server": "2.4.0",
-    "@wirecat/cli-base": "0.57.1",
-    "@wirecat/cli-core": "0.434.0",
+    "@wirecat/cli-base": "0.59.0",
+    "@wirecat/cli-core": "0.439.0",
     "commander": "15.0.0"
   },
   "devDependencies": {

package/scripts/version-level.test.ts

@@ -0,0 +1,30 @@
+import { expect, it } from "vitest"
+import { versionLevelProblem } from "./version-level.js"
+
+const changelog = (version: string, headings: string[], previous = "0.1.8") =>
+  [`## ${version} — 26.10.2026`, ...headings.flatMap((h) => [`### ${h}`, "- x"]), `## ${previous} — 25.10.2026`].join(
+    "\n",
+  )
+
+it("refuses 0.1.8 as it shipped: a patch release with changes that may break callers", () => {
+  expect(versionLevelProblem(changelog("0.1.8", ["Changed — may break callers", "Fixed"], "0.1.7"))).toBe(
+    "0.1.8 raises the patch version over 0.1.7, but its changelog needs a minor release",
+  )
+})
+
+it.each([
+  ["0.1.9", ["Fixed", "Security"]],
+  ["0.2.0", ["Added", "Changed — may break callers"]],
+  ["0.2.0", ["Removed"]],
+  ["1.0.0", ["Changed — may break callers"]],
+])("accepts %s with %j", (version, headings) => {
+  expect(versionLevelProblem(changelog(version, headings))).toBeUndefined()
+})
+
+it("refuses a patch release that adds something", () => {
+  expect(versionLevelProblem(changelog("0.1.9", ["Added"]))).toMatch(/needs a minor release/)
+})
+
+it("checks nothing while the top section is Unreleased", () => {
+  expect(versionLevelProblem("## Unreleased\n\n### Removed\n\n- x\n\n## 0.1.8 — 25.10.2026\n")).toBeUndefined()
+})

package/scripts/version-level.ts

@@ -0,0 +1,43 @@
+import { readFileSync } from "node:fs"
+import { resolve } from "node:path"
+import { fileURLToPath } from "node:url"
+
+const LEVELS = ["patch", "minor", "major"] as const
+type Level = (typeof LEVELS)[number]
+
+const parse = (version: string) => version.split(".").map(Number)
+
+const raised = (from: string, to: string): Level => {
+  const [a = 0, b = 0] = parse(from)
+  const [x = 0, y = 0] = parse(to)
+  if (x !== a) return "major"
+  return y !== b ? "minor" : "patch"
+}
+
+// Before 1.0.0 the minor carries what a major would; a fix-only release is the only patch.
+const needed = (version: string, section: string): Level => {
+  const breaks = /^### (Changed — may break callers|Removed)$/m.test(section)
+  if (breaks) return (parse(version)[0] ?? 0) >= 1 ? "major" : "minor"
+  return /^### Added$/m.test(section) ? "minor" : "patch"
+}
+
+export const versionLevelProblem = (changelog: string): string | undefined => {
+  const headings = [...changelog.matchAll(/^## (\S+).*$/gm)]
+  const [top, below] = headings
+  const version = top?.[1]
+  const previous = below?.[1]
+  if (!top || !below || !version || !previous || !/^\d+\.\d+\.\d+$/.test(version)) return undefined
+  const section = changelog.slice(top.index, below.index)
+  const want = needed(version, section)
+  const got = raised(previous, version)
+  if (LEVELS.indexOf(got) >= LEVELS.indexOf(want)) return undefined
+  return `${version} raises the ${got} version over ${previous}, but its changelog needs a ${want} release`
+}
+
+if (process.argv[1] === fileURLToPath(import.meta.url)) {
+  const problem = versionLevelProblem(readFileSync(resolve(import.meta.dirname, "../CHANGELOG.md"), "utf8"))
+  if (problem) {
+    console.error(`${problem} (docs/dev/skills/release/SKILL.md, step 6)`)
+    process.exit(1)
+  }
+}

package/src/mcp.test.ts

@@ -29,7 +29,13 @@ const connect = async () => {
   return client
 }
 
-const structured = (result: unknown) => (result as { structuredContent: Record<string, unknown> }).structuredContent
+const isRecord = (value: unknown): value is Record<string, unknown> =>
+  typeof value === "object" && value !== null && !Array.isArray(value)
+const structured = (result: unknown) => {
+  if (!isRecord(result) || !isRecord(result.structuredContent))
+    throw new Error("the tool answered without structured content")
+  return result.structuredContent
+}
 
 it("offers search, read and write", async () => {
   const client = await connect()
@@ -40,9 +46,8 @@ it("offers search, read and write", async () => {
 it("finds writes as well as reads", async () => {
   const client = await connect()
   const found = structured(await client.callTool({ name: "clidev_tools_search", arguments: {} }))
-  const items = found.items as { command: string; writes: boolean }[]
-  expect(items.some((item) => item.writes)).toBe(true)
-  expect(items.map((item) => item.command)).not.toContain("mcp")
+  expect(found.items).toContainEqual(expect.objectContaining({ writes: true }))
+  expect(found.items).not.toContainEqual(expect.objectContaining({ command: "mcp" }))
 })
 
 it("runs a command through the CLI and answers with its result", async () => {

package/src/program.test.ts

@@ -14,13 +14,21 @@ const ran = async (argv: string[]) => {
   })
   return { code, out: out.join("\n"), err: err.join("\n") }
 }
-const json = (text: string) => JSON.parse(text) as { item: Record<string, unknown> }
+const isRecord = (value: unknown): value is Record<string, unknown> =>
+  typeof value === "object" && value !== null && !Array.isArray(value)
+const json = (text: string) => {
+  const parsed: unknown = JSON.parse(text)
+  if (!isRecord(parsed) || !isRecord(parsed.item)) throw new Error(`not an answer with one item: ${text}`)
+  return { item: parsed.item }
+}
 
 it("lists the required root commands and config", async () => {
   const { code, out } = await ran(["commands", "--json"])
   expect(code).toBe(0)
-  const names = (JSON.parse(out) as { commands: { name: string }[] }).commands.map((command) => command.name)
-  expect(names).toEqual(expect.arrayContaining(["commands", "doctor", "skill", "mcp", "upgrade", "config", "runs"]))
+  const required = ["commands", "doctor", "skill", "mcp", "upgrade", "config", "runs"]
+  expect(JSON.parse(out).commands).toEqual(
+    expect.arrayContaining(required.map((name) => expect.objectContaining({ name }))),
+  )
 })
 
 it("doctor answers without a config file", async () => {
@@ -123,11 +131,9 @@ it("keeps a failed command as a run, and runs list, show and path read it back",
   expect((await ran(["--no-such-flag"])).code).toBe(2)
   const listed = await ran(["runs", "list", "--limit", "5", "--page", "1", "--json"])
   expect(listed.code).toBe(0)
-  const failed = (JSON.parse(listed.out) as { items: { run_id: string; status: string }[] }).items.find(
-    (run) => run.status === "failed",
-  )
-  expect(failed).toBeDefined()
-  const id = failed?.run_id ?? ""
+  const failed: unknown = JSON.parse(listed.out).items.find((run: { status: string }) => run.status === "failed")
+  if (!isRecord(failed) || typeof failed.run_id !== "string") throw new Error(`no failed run in ${listed.out}`)
+  const id = failed.run_id
   const shown = await ran(["runs", "show", id, "--json"])
   expect(shown.code).toBe(0)
   expect(shown.out).toContain(id)
@@ -136,3 +142,17 @@ it("keeps a failed command as a run, and runs list, show and path read it back",
   expect(path.code).toBe(0)
   expect(path.out).toContain(id)
 })
+
+it("a failed run keeps the words typed, and record_input false masks them", async () => {
+  const keptArgv = async (words: string) => {
+    expect((await ran(["personal", "skill", "show", words])).code).toBe(2)
+    const { out } = await ran(["runs", "list", "--limit", "50", "--json"])
+    return JSON.parse(out).items.map((run: { argv: string[] }) => run.argv)
+  }
+  expect(await keptArgv("weekly report")).toContainEqual(["personal", "skill", "show", "weekly report"])
+  expect((await ran(["personal", "config", "set", "record_input", "false"])).code).toBe(0)
+  const masked = await keptArgv("monthly report")
+  expect(JSON.stringify(masked)).not.toContain("monthly report")
+  expect(masked).toContainEqual(["personal", "skill", "show", "[redacted]"])
+  expect((await ran(["personal", "config", "unset", "record_input"])).code).toBe(0)
+})

package/src/version.ts

@@ -1 +1 @@
-export const VERSION = "0.1.8"
+export const VERSION = "0.3.0"

package/vitest.config.ts

@@ -21,7 +21,11 @@ export default defineConfig({
         "kit/src/main.ts",
       ],
       reporter: ["text-summary", "json-summary"],
-      thresholds: { lines: 90, statements: 90, functions: 80, branches: 70, perFile: { lines: 50 } },
+      thresholds: {
+        "src/**": { lines: 95, statements: 92, functions: 85, branches: 75, perFile: { lines: 50 } },
+        // The kit is a separate program, copied by npx, so it keeps its own floor.
+        "kit/src/**": { lines: 95, statements: 91, functions: 90, branches: 78, perFile: { lines: 50 } },
+      },
     },
   },
 })