@wirecat/cli-template 0.13.1 → 0.14.0

package/.github/workflows/changelog-guard.yml

@@ -9,4 +9,4 @@ permissions:
 
 jobs:
   changelog:
-    uses: WireCatLabs/cli-base/.github/workflows/changelog-guard.yml@08d954b245268c7552a2d33a9ed4c78743784e5a # v0.61.2
+    uses: WireCatLabs/cli-base/.github/workflows/changelog-guard.yml@bff94fff66ae17bde081de343fb8cd56d66602e0 # v0.77.1

package/.github/workflows/ci.yml

@@ -19,7 +19,7 @@ permissions:
 
 jobs:
   ci:
-    uses: WireCatLabs/cli-base/.github/workflows/node-ci.yml@08d954b245268c7552a2d33a9ed4c78743784e5a # v0.61.2
+    uses: WireCatLabs/cli-base/.github/workflows/node-ci.yml@bff94fff66ae17bde081de343fb8cd56d66602e0 # v0.77.1
     with:
       pack: ${{ inputs.pack || false }}
       bun-run: pnpm build && pnpm smoke:bun

package/.github/workflows/monthly.yml

@@ -22,7 +22,7 @@ jobs:
       contents: read
       actions: read
       security-events: write
-    uses: WireCatLabs/cli-base/.github/workflows/release-checks.yml@08d954b245268c7552a2d33a9ed4c78743784e5a # v0.61.2
+    uses: WireCatLabs/cli-base/.github/workflows/release-checks.yml@bff94fff66ae17bde081de343fb8cd56d66602e0 # v0.77.1
     with:
       dependencies: true
       languages: '["actions","javascript-typescript"]'

package/.github/workflows/release.yml

@@ -56,7 +56,7 @@ jobs:
       contents: read
       actions: read
       security-events: write
-    uses: WireCatLabs/cli-base/.github/workflows/release-checks.yml@08d954b245268c7552a2d33a9ed4c78743784e5a # v0.61.2
+    uses: WireCatLabs/cli-base/.github/workflows/release-checks.yml@bff94fff66ae17bde081de343fb8cd56d66602e0 # v0.77.1
 
   build:
     needs: [checks, validation]
@@ -67,6 +67,7 @@ jobs:
     outputs:
       version: ${{ steps.version.outputs.version }}
       name: ${{ steps.version.outputs.name }}
+      package-sha256: ${{ steps.digest.outputs.sha256 }}
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
@@ -103,6 +104,14 @@ jobs:
             exit 1
           fi
 
+      # A CLI that changes the package after the check above unpacks the new file and compares it with the checked
+      # one before this step (gcal-cli adds its Google client this way); `publish` refuses any other file.
+      - name: digest of the package to publish
+        id: digest
+        run: |
+          set -- ./validated/*.tgz
+          echo "sha256=$(sha256sum "$1" | cut -d' ' -f1)" >> "$GITHUB_OUTPUT"
+
       - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: package
@@ -137,6 +146,7 @@ jobs:
     env:
       VERSION: ${{ needs.build.outputs.version }}
       NAME: ${{ needs.build.outputs.name }}
+      EXPECTED_SHA256: ${{ needs.build.outputs.package-sha256 }}
     steps:
       - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
@@ -151,6 +161,8 @@ jobs:
       # lifecycle scripts, and nothing is installed here. A tarball path needs its ./.
       - run: |
           set -- ./*.tgz
+          [ "$#" -eq 1 ] && [ -f "$1" ] && [ -n "$EXPECTED_SHA256" ] || { echo "::error::no single package to verify"; exit 1; }
+          printf '%s  %s\n' "$EXPECTED_SHA256" "$1" | sha256sum --check -
           npm publish "$1" --access public
 
       - name: wait for npm to show the version
@@ -191,24 +203,46 @@ jobs:
             gh release create "v$VERSION" --title "$VERSION" --notes-file -
 
   # The template's own release publishes @wirecat/cli-template, which has no skill on ClawHub.
-  # ClawHub's own workflow, pinned: it runs the ClawHub CLI from this commit and needs id-token only to read which
-  # commit that is. It publishes the skill only when it changed, as the next patch of ClawHub's own version line.
+  # The same ClawHub CLI commit as `clawhub`, run here rather than through ClawHub's reusable workflow: that workflow
+  # asks for id-token: write, and an OIDC token has no place in a job that runs third-party code outside the npm
+  # environment. A dry run needs no ClawHub token either. Bump CLAWHUB_SHA together with `clawhub`'s.
   clawhub-dry-run:
     needs: build
     if: inputs.dry_run && github.repository != 'WireCatLabs/cli-template'
+    runs-on: ubuntu-latest
     permissions:
       contents: read
-      id-token: write
-    uses: openclaw/clawhub/.github/workflows/skill-publish.yml@52358852d3510f1150756d48e8a72cb8c8e698e0 # main, 2026-10-25
-    with:
-      skill_path: skills/clidev-cli
-      owner: wirecat
-      dry_run: true
+    env:
+      SKILL_PATH: skills/clidev-cli
+      CLAWHUB_SLUG: wirecat-clidev
+      CLAWHUB_SHA: 52358852d3510f1150756d48e8a72cb8c8e698e0
+      CLAWHUB_URL: https://clawhub.ai
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          repository: openclaw/clawhub
+          ref: ${{ env.CLAWHUB_SHA }}
+          path: clawhub-source
+          persist-credentials: false
+      - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
+        with:
+          bun-version: 1.4.4
+      - run: bun install --frozen-lockfile
+        working-directory: clawhub-source
+      - name: check the skill would publish
+        run: |
+          bun clawhub-source/packages/clawhub/src/cli.ts --workdir "$GITHUB_WORKSPACE" \
+            --site "$CLAWHUB_URL" --registry "$CLAWHUB_URL" skill publish "$SKILL_PATH" --slug "$CLAWHUB_SLUG" --json \
+            --owner wirecat --tags latest --source-repo "$GITHUB_REPOSITORY" --source-commit "$GITHUB_SHA" \
+            --source-path "$SKILL_PATH" --source-ref "$GITHUB_REF" --dry-run
 
   # After the tag, so a ClawHub failure never holds back the npm release. The same CLI commit as the dry run, but run
   # here instead of through ClawHub's workflow, which GitHub cannot let fail: a version stuck pending ClawHub's scan
   # is not counted as the latest, so the next publish picks it again and gets "already exists" (openclaw/clawhub#4046).
-  # That one error warns; any other fails. Bump CLAWHUB_SHA together with the dry run's pin.
+  # That one error warns; any other fails. Bump CLAWHUB_SHA together with clawhub-dry-run's.
   clawhub:
     needs: tag
     if: ${{ !inputs.dry_run && github.repository != 'WireCatLabs/cli-template' }}

package/CHANGELOG.md

@@ -5,6 +5,42 @@ Notable changes to `@wirecat/cli-template`. One section per version, newest firs
 
 <!-- cspell:words clawhub gcal katex openclaw smol whatsapp -->
 
+## 0.14.0 — 06.11.2026
+
+### Added
+
+- **The skeleton runs on cli-core 0.584.0 and cli-base 0.77.1.** cli-core 0.584 is the newest; its peer range takes
+  cli-base `>=0.76.0 <0.78.0`, so cli-base stays at 0.77.1, not 0.78.0. A new CLI gets the shared `config migrate`,
+  `config repair` (with `--dry-run`) and the global `--compact`, each with a test, the error code `conflict` (exit 15)
+  and the `page.total` and `meta.now` fields in its MCP schemas. The reusable workflows in `.github/` move from
+  cli-base v0.61.2 to v0.77.1; their files are the same. A CLI gets the workflow pins from `upgrade`. `package.json`,
+  `contracts/` and the docs belong to the CLI, so it raises cli-core and cli-base itself and regenerates
+  `contracts/mcp-tools.json` and `docs/commands.md`.
+- **CRM is a category of its own.** `new --category crm` and the design interview offer "CRM (sales: deals, contacts,
+  companies)". It has no reference CLI yet, so `AGENTS.md` asks to pick the nearest one with the owner, and the CLI
+  keeps `messenger: false`.
+
+### Changed — may break callers
+
+- **`config show`, `set` and `unset` no longer offer the messenger-only `--bot`, `--personal`, `speech_model` and
+  `picture_search`** (cli-core 0.565). A script that passes them gets an error.
+
+### Fixed
+
+- **`new` no longer copies the template's own description into the new CLI's `package.json`.** It writes a neutral
+  placeholder, and the first task in `DESIGN.md` says to rewrite it with `README.md`.
+
+## 0.13.2 — 03.11.2026
+
+### Fixed
+
+- **`release.yml` publishes only the file the build checked.** `build` passes the sha256 of the package it uploads to
+  `publish`, which checks it before `npm publish`. A CLI that changes the package after the check must unpack the new
+  file and compare it with the checked one in `build`; gcal-cli does this for its Google client.
+- **The ClawHub dry run gets no OIDC token.** `clawhub-dry-run` called ClawHub's shared workflow, which asks for
+  `id-token: write` while it runs ClawHub's code outside the `npm` environment. It now runs the same pinned ClawHub
+  CLI directly with `--dry-run`, as the `clawhub` job already did. A CLI gets both from `upgrade`.
+
 ## 0.13.1 — 02.11.2026
 
 ### Fixed

package/config/parity-groups.json

@@ -9,7 +9,38 @@
     "name": "template-config",
     "members": ["clidev", "tg", "max", "wa"],
     "covers": ["config"],
-    "differences": []
+    "differences": [
+      {
+        "rule": "same-path-contract",
+        "target": "config set --bot",
+        "absent": "clidev",
+        "reason": "cli-core 0.565 offers the personal and bot sections of the config file only to a messenger CLI; the template is not one"
+      },
+      {
+        "rule": "same-path-contract",
+        "target": "config set --personal",
+        "absent": "clidev",
+        "reason": "cli-core 0.565 offers the personal and bot sections of the config file only to a messenger CLI; the template is not one"
+      },
+      {
+        "rule": "same-path-contract",
+        "target": "config show --bot",
+        "absent": "clidev",
+        "reason": "cli-core 0.565 offers the personal and bot sections of the config file only to a messenger CLI; the template is not one"
+      },
+      {
+        "rule": "same-path-contract",
+        "target": "config unset --bot",
+        "absent": "clidev",
+        "reason": "cli-core 0.565 offers the personal and bot sections of the config file only to a messenger CLI; the template is not one"
+      },
+      {
+        "rule": "same-path-contract",
+        "target": "config unset --personal",
+        "absent": "clidev",
+        "reason": "cli-core 0.565 offers the personal and bot sections of the config file only to a messenger CLI; the template is not one"
+      }
+    ]
   },
   {
     "name": "template-skill",

package/contracts/mcp-tools.json

@@ -73,6 +73,7 @@
                           "provider_unavailable",
                           "invalid_response",
                           "outcome_unknown",
+                          "conflict",
                           "cancelled"
                         ],
                         "type": "string"
@@ -91,6 +92,15 @@
                   },
                   "type": "array"
                 },
+                "now": {
+                  "format": "date-time",
+                  "pattern": "Z$",
+                  "type": "string"
+                },
+                "now_local": {
+                  "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}[+-]\\d{2}:\\d{2}$",
+                  "type": "string"
+                },
                 "run_id": {
                   "pattern": "\\S",
                   "type": "string"
@@ -228,6 +238,21 @@
                     "next_page": {
                       "minimum": 2,
                       "type": "integer"
+                    },
+                    "total": {
+                      "additionalProperties": false,
+                      "properties": {
+                        "relation": {
+                          "enum": ["eq", "gte"],
+                          "type": "string"
+                        },
+                        "value": {
+                          "minimum": 0,
+                          "type": "integer"
+                        }
+                      },
+                      "required": ["value", "relation"],
+                      "type": "object"
                     }
                   },
                   "required": ["mode", "limit", "has_more"],
@@ -249,6 +274,21 @@
                     "next_cursor": {
                       "pattern": "\\S",
                       "type": "string"
+                    },
+                    "total": {
+                      "additionalProperties": false,
+                      "properties": {
+                        "relation": {
+                          "enum": ["eq", "gte"],
+                          "type": "string"
+                        },
+                        "value": {
+                          "minimum": 0,
+                          "type": "integer"
+                        }
+                      },
+                      "required": ["value", "relation"],
+                      "type": "object"
                     }
                   },
                   "required": ["mode", "limit", "has_more"],
@@ -300,6 +340,7 @@
                           "provider_unavailable",
                           "invalid_response",
                           "outcome_unknown",
+                          "conflict",
                           "cancelled"
                         ],
                         "type": "string"
@@ -318,6 +359,15 @@
                   },
                   "type": "array"
                 },
+                "now": {
+                  "format": "date-time",
+                  "pattern": "Z$",
+                  "type": "string"
+                },
+                "now_local": {
+                  "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}[+-]\\d{2}:\\d{2}$",
+                  "type": "string"
+                },
                 "run_id": {
                   "pattern": "\\S",
                   "type": "string"
@@ -547,6 +597,7 @@
                           "provider_unavailable",
                           "invalid_response",
                           "outcome_unknown",
+                          "conflict",
                           "cancelled"
                         ],
                         "type": "string"
@@ -565,6 +616,15 @@
                   },
                   "type": "array"
                 },
+                "now": {
+                  "format": "date-time",
+                  "pattern": "Z$",
+                  "type": "string"
+                },
+                "now_local": {
+                  "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}[+-]\\d{2}:\\d{2}$",
+                  "type": "string"
+                },
                 "run_id": {
                   "pattern": "\\S",
                   "type": "string"
@@ -702,6 +762,21 @@
                     "next_page": {
                       "minimum": 2,
                       "type": "integer"
+                    },
+                    "total": {
+                      "additionalProperties": false,
+                      "properties": {
+                        "relation": {
+                          "enum": ["eq", "gte"],
+                          "type": "string"
+                        },
+                        "value": {
+                          "minimum": 0,
+                          "type": "integer"
+                        }
+                      },
+                      "required": ["value", "relation"],
+                      "type": "object"
                     }
                   },
                   "required": ["mode", "limit", "has_more"],
@@ -723,6 +798,21 @@
                     "next_cursor": {
                       "pattern": "\\S",
                       "type": "string"
+                    },
+                    "total": {
+                      "additionalProperties": false,
+                      "properties": {
+                        "relation": {
+                          "enum": ["eq", "gte"],
+                          "type": "string"
+                        },
+                        "value": {
+                          "minimum": 0,
+                          "type": "integer"
+                        }
+                      },
+                      "required": ["value", "relation"],
+                      "type": "object"
                     }
                   },
                   "required": ["mode", "limit", "has_more"],
@@ -774,6 +864,7 @@
                           "provider_unavailable",
                           "invalid_response",
                           "outcome_unknown",
+                          "conflict",
                           "cancelled"
                         ],
                         "type": "string"
@@ -792,6 +883,15 @@
                   },
                   "type": "array"
                 },
+                "now": {
+                  "format": "date-time",
+                  "pattern": "Z$",
+                  "type": "string"
+                },
+                "now_local": {
+                  "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}[+-]\\d{2}:\\d{2}$",
+                  "type": "string"
+                },
                 "run_id": {
                   "pattern": "\\S",
                   "type": "string"

package/dist/bin/clidev.js

@@ -9,7 +9,7 @@ if (
   (words[0] === "--version" || words[0] === "-V") &&
   !Object.keys(process.env).some((key) => key.endsWith("_TEST_ARGV_LOG"))
 ) {
-  process.stdout.write("0.13.1\n")
+  process.stdout.write("0.14.0\n")
 } else {
   // Before the bundle compiles: the bundle's own call comes after its chunks.
   module.enableCompileCache()
@@ -28,8 +28,12 @@ if (
           : next(specifier, context),
     })
   }
+  const chunks = ["../bundle/all-profiles-NVB2HT2S.js","../bundle/anthropic-ICTW7CNQ.js","../bundle/app-server-B6BCKXR7.js","../bundle/bun-ILPS6AYA.js","../bundle/bun-sqlite-JE6FJFQT.js","../bundle/decode-NXB5UKMO.js","../bundle/dist-ESHIQU4M.js","../bundle/echarts-DRDGGHJT.js","../bundle/embed-IKZ24BMC.js","../bundle/embedder-GMQ24DOQ.js","../bundle/first-screen-376CXGXJ.js","../bundle/instructions-EOQOXY6V.js","../bundle/mcp-7HBLFGCW.js","../bundle/mcp-KHUZOJO6.js","../bundle/mcp-MZHWJXAE.js","../bundle/node-52WF2326.js","../bundle/node-P4E63KXA.js","../bundle/node-TLZSIHIJ.js","../bundle/node-sqlite-73Z4SFOA.js","../bundle/oauth-EVTPAMZP.js","../bundle/open-46WZAPJ3.js","../bundle/openai-GWRDAHDU.js","../bundle/process-YIQPKLZI.js","../bundle/program-B3CY3FP7.js","../bundle/prompt-IVEYRLS5.js","../bundle/recognize-WVEKHODM.js","../bundle/remote-4K5VPMC7.js","../bundle/rerank-V24UJZYJ.js","../bundle/serve-PJWSOV7F.js","../bundle/server-2ZN7KZHZ.js","../bundle/server-5VYM7CCF.js","../bundle/state-ZPYGECVP.js","../bundle/store-6JQCLPQF.js","../bundle/store-maintenance-command-7XICIYHW.js"]
+  if (((words) => words
+    .filter((word) => !word.startsWith("-"))
+    .slice(0, 2)
+    .includes("upgrade"))(words)) await Promise.allSettled(chunks.map((chunk) => import(chunk)))
   const running = import("../bundle/clidev.js")
-  const chunks = ["../bundle/all-profiles-MJ6XSFOO.js","../bundle/anthropic-W5UKBZUB.js","../bundle/app-server-EZ46JAHB.js","../bundle/bun-HB6O2TTT.js","../bundle/bun-sqlite-KBXOW2ES.js","../bundle/decode-AMXUVKNY.js","../bundle/dist-ESHIQU4M.js","../bundle/echarts-GJDMQ2AQ.js","../bundle/embed-L4CRZ2XQ.js","../bundle/embedder-IBGV4M2K.js","../bundle/first-screen-X5IJKBSU.js","../bundle/instructions-YJECS4KN.js","../bundle/mcp-7XPOACO4.js","../bundle/mcp-OQBZXELQ.js","../bundle/mcp-RDZGYPSY.js","../bundle/node-NQG4EVZR.js","../bundle/node-P4E63KXA.js","../bundle/node-TLZSIHIJ.js","../bundle/node-sqlite-BR7F3BLB.js","../bundle/oauth-J7UAWNIK.js","../bundle/open-BR47R5UE.js","../bundle/process-66I7RDPJ.js","../bundle/program-ZNXLJ3D2.js","../bundle/prompt-NE5JJ7UP.js","../bundle/recognize-GC3YFVIA.js","../bundle/remote-QELOMKQM.js","../bundle/rerank-BH6TZ2SP.js","../bundle/serve-WWLRNDT2.js","../bundle/server-DE6NLNUF.js","../bundle/server-ZPSQKOAH.js","../bundle/state-2BEGXAMO.js","../bundle/store-AH6WZMCF.js","../bundle/store-maintenance-command-PBXX3IEV.js"]
   // After the server answers its first request, so it starts no later.
   if (serves) setTimeout(() => void Promise.allSettled(chunks.map((chunk) => import(chunk))), 2000).unref()
   await running

package/dist/bundle/{all-profiles-MJ6XSFOO.js → all-profiles-NVB2HT2S.js}

@@ -6,13 +6,13 @@ import {
   serveAllProfilesOverHttp,
   serveAllProfilesOverStdio,
   withProfile
-} from "./chunk-HDY5X3WQ.js";
-import "./chunk-IN3FVRPK.js";
-import "./chunk-IBBN7Z3A.js";
+} from "./chunk-LU4A2T7Y.js";
+import "./chunk-VS5LGSTM.js";
+import "./chunk-F34HGYWF.js";
 import "./chunk-5D4AEUVA.js";
-import "./chunk-MJRSEUKG.js";
-import "./chunk-O5EHUB2V.js";
-import "./chunk-EFHLQXG6.js";
+import "./chunk-VXOR76ZL.js";
+import "./chunk-3WDYHOAF.js";
+import "./chunk-IOJ2DTCY.js";
 import "./chunk-Y5E2WNWB.js";
 import "./chunk-ZVVMGPBJ.js";
 export {

package/dist/bundle/{anthropic-W5UKBZUB.js → anthropic-ICTW7CNQ.js}

@@ -2,11 +2,11 @@ import { createRequire as __bundleRequire } from "node:module";
 const require = __bundleRequire(import.meta.url);
 import {
   checkedOptions
-} from "./chunk-PDGXMKJS.js";
+} from "./chunk-R5RYPD23.js";
 import {
   messagesFor,
   systemFor
-} from "./chunk-NOVLCHDV.js";
+} from "./chunk-LATYBJ4T.js";
 import {
   Anthropic
 } from "./chunk-ADLS6FVG.js";
@@ -15,13 +15,13 @@ import {
   optional,
   strictObject,
   string
-} from "./chunk-EFHLQXG6.js";
+} from "./chunk-IOJ2DTCY.js";
 import "./chunk-Y5E2WNWB.js";
 import {
   __name
 } from "./chunk-ZVVMGPBJ.js";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.495.0_@wirecat+cli-base@0.65.0_commander@15.0.0_esbuild@0.28.2_type_24cca5e5c8b0984f2f26e7d1ba6b6d47/node_modules/@wirecat/cli-core/dist/models/anthropic.js
+// node_modules/.pnpm/@wirecat+cli-core@0.584.0_@wirecat+cli-base@0.77.1_commander@15.0.0_esbuild@0.28.2_type_ab8c0b68b8b4768d5b87d6e249ef10da/node_modules/@wirecat/cli-core/dist/models/anthropic.js
 var options = strictObject({
   stop_sequences: optional(array(string()))
 });

package/dist/bundle/{app-server-EZ46JAHB.js → app-server-B6BCKXR7.js}

@@ -3,81 +3,82 @@ const require = __bundleRequire(import.meta.url);
 import {
   PER_RUN,
   envelope
-} from "./chunk-N2Z3MCOF.js";
-import "./chunk-ERKR3VJ5.js";
+} from "./chunk-BEBD27QT.js";
+import "./chunk-BWBZCYUN.js";
 import {
   mcpUrlOf
-} from "./chunk-JAOGZMKQ.js";
+} from "./chunk-GUFPQZUA.js";
 import {
   answeredWire
-} from "./chunk-IN3FVRPK.js";
+} from "./chunk-VS5LGSTM.js";
 import {
   answered,
   failed,
   registerCommands,
   runCommandForAgent,
   toolsFromCommands
-} from "./chunk-YJNUDHJD.js";
+} from "./chunk-UT5TQ6MD.js";
 import {
   agentJson,
   skillResource
-} from "./chunk-4LURWBVV.js";
+} from "./chunk-HYTHTSJP.js";
 import {
   StdioServerTransport,
   serveStdio
-} from "./chunk-IBBN7Z3A.js";
-import "./chunk-L5WWMP5M.js";
-import "./chunk-FZZIU4B7.js";
-import "./chunk-KJTNT4SW.js";
-import "./chunk-E42W72PQ.js";
-import "./chunk-MFS52LTZ.js";
+} from "./chunk-F34HGYWF.js";
+import "./chunk-IZKXJJ7V.js";
+import "./chunk-5SAF3XOL.js";
+import "./chunk-PIJUGF5F.js";
+import "./chunk-2DAXUNTS.js";
+import "./chunk-AS2PJNQ2.js";
+import "./chunk-7Z4HR6GO.js";
 import {
   appInstructions
-} from "./chunk-ERGB4NJA.js";
+} from "./chunk-G45R7M42.js";
 import {
   McpServer
 } from "./chunk-5D4AEUVA.js";
 import {
   mcpHttpMarker
-} from "./chunk-V3ZTQ24B.js";
-import "./chunk-RUKDZEID.js";
-import "./chunk-OV6PHTAY.js";
-import "./chunk-PBN4RBHS.js";
-import "./chunk-35KYY65W.js";
-import "./chunk-NOVLCHDV.js";
-import "./chunk-IGHEW777.js";
-import "./chunk-MUSYGFCY.js";
+} from "./chunk-6AW4DDK4.js";
+import "./chunk-DZLHY4IA.js";
+import "./chunk-SOYOOU2D.js";
+import "./chunk-LATYBJ4T.js";
+import "./chunk-BM5ZCDPQ.js";
 import {
   DEFAULT_OUTPUT_BYTES,
   changesAuthorityAt,
   describeProgram,
   environmentOf,
-  fetchesOnlyAt,
   judgedTargets,
   readOnlyLockOf,
+  readsOverMcpAt,
   rootOf2 as rootOf
-} from "./chunk-QJ6XW4DM.js";
-import "./chunk-MJRSEUKG.js";
-import "./chunk-O3UXNU3S.js";
-import "./chunk-VYSUKHKL.js";
-import "./chunk-VLNKTMV7.js";
-import "./chunk-O5EHUB2V.js";
-import "./chunk-FDBINRWA.js";
-import "./chunk-QKWRL4OD.js";
-import "./chunk-EGRB55FF.js";
-import "./chunk-IDWW4TU2.js";
-import "./chunk-2B5U4Z5H.js";
+} from "./chunk-RJ7AS7UB.js";
+import "./chunk-VXOR76ZL.js";
+import "./chunk-U6QD3J3F.js";
+import "./chunk-VOTEB3AN.js";
+import "./chunk-NVNUUHT5.js";
+import "./chunk-R2JKPHH5.js";
+import "./chunk-YOJLIVGO.js";
+import "./chunk-3WDYHOAF.js";
+import "./chunk-TJJ2XSJP.js";
+import "./chunk-NH6LZ3H3.js";
+import "./chunk-3MDNAYQA.js";
+import "./chunk-CGFQT3LQ.js";
+import "./chunk-DQIBGCF3.js";
+import "./chunk-45244QQ6.js";
+import "./chunk-62JRF2JA.js";
 import {
   CliError,
   mcpErrorResult
-} from "./chunk-EFHLQXG6.js";
+} from "./chunk-IOJ2DTCY.js";
 import "./chunk-Y5E2WNWB.js";
-import "./chunk-Z7MSIRSQ.js";
 import {
   __name
 } from "./chunk-ZVVMGPBJ.js";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.495.0_@wirecat+cli-base@0.65.0_commander@15.0.0_esbuild@0.28.2_type_24cca5e5c8b0984f2f26e7d1ba6b6d47/node_modules/@wirecat/cli-core/dist/mcp/app-server.js
+// node_modules/.pnpm/@wirecat+cli-core@0.584.0_@wirecat+cli-base@0.77.1_commander@15.0.0_esbuild@0.28.2_type_ab8c0b68b8b4768d5b87d6e249ef10da/node_modules/@wirecat/cli-core/dist/mcp/app-server.js
 var EXCLUDED = [["mcp"]];
 var createAppServer = /* @__PURE__ */ __name((command, context, options) => {
   const { app } = options;
@@ -101,7 +102,7 @@ var createAppServer = /* @__PURE__ */ __name((command, context, options) => {
     currentLevels: levels,
     readOnly: readOnly(),
     authority,
-    fetchOnly: fetchesOnlyAt(root),
+    fetchOnly: readsOverMcpAt(root),
     permissions: options.permissions
   });
   const availability = /* @__PURE__ */ __name((one) => () => {
@@ -192,10 +193,11 @@ var serveAppOverStdio = /* @__PURE__ */ __name(async (command, context, options)
 var serveAppOverHttp = /* @__PURE__ */ __name(async (command, context, options, http) => {
   const { app } = options;
   const { build } = createAppServer(command, context, options);
-  const { serveOverHttp } = await import("./serve-WWLRNDT2.js");
+  const { serveOverHttp } = await import("./serve-PJWSOV7F.js");
   const listening = await serveOverHttp(build, {
     ...http,
     appName: app.command,
+    reaches: `your ${options.name}`,
     onCode: /* @__PURE__ */ __name((code, expires) => context.renderer.note(context.env[mcpHttpMarker(app.envPrefix)] === void 0 ? `login code for a new browser app: ${code} (until ${expires.toTimeString().slice(0, 5)}; a new one after each login)` : `a new login code for a browser app: \`${app.command} ${context.settings.profile} mcp server status\``), "onCode"),
     onError: /* @__PURE__ */ __name((error) => context.renderer.note(`mcp: ${error.message}`), "onError")
   }).catch((error) => {

package/dist/bundle/{bun-HB6O2TTT.js → bun-ILPS6AYA.js}

@@ -18,12 +18,12 @@ import {
   jitCompatCheck,
   refineSqliteCodecs,
   sql
-} from "./chunk-Z7MSIRSQ.js";
+} from "./chunk-CGFQT3LQ.js";
 import {
   __name
 } from "./chunk-ZVVMGPBJ.js";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.495.0_@wirecat+cli-base@0.65.0_commander@15.0.0_esbuild@0.28.2_type_24cca5e5c8b0984f2f26e7d1ba6b6d47/node_modules/@wirecat/cli-core/dist/store/sqlite/drizzle/bun.js
+// node_modules/.pnpm/@wirecat+cli-core@0.584.0_@wirecat+cli-base@0.77.1_commander@15.0.0_esbuild@0.28.2_type_ab8c0b68b8b4768d5b87d6e249ef10da/node_modules/@wirecat/cli-core/dist/store/sqlite/drizzle/bun.js
 import { Database } from "bun:sqlite";
 var bunSQLiteCodecs = refineSqliteCodecs({
   "integer:boolean": { normalize: booleanFromInteger },

package/dist/bundle/{bun-sqlite-KBXOW2ES.js → bun-sqlite-JE6FJFQT.js}

@@ -3,8 +3,8 @@ const require = __bundleRequire(import.meta.url);
 import {
   loadVectorExtension,
   vectorExtension
-} from "./chunk-QBP7OMN5.js";
-import "./chunk-EFHLQXG6.js";
+} from "./chunk-LFLSV353.js";
+import "./chunk-IOJ2DTCY.js";
 import {
   importFrom
 } from "./chunk-Y5E2WNWB.js";
@@ -12,7 +12,7 @@ import {
   __name
 } from "./chunk-ZVVMGPBJ.js";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.495.0_@wirecat+cli-base@0.65.0_commander@15.0.0_esbuild@0.28.2_type_24cca5e5c8b0984f2f26e7d1ba6b6d47/node_modules/@wirecat/cli-core/dist/store/drivers/bun-sqlite.js
+// node_modules/.pnpm/@wirecat+cli-core@0.584.0_@wirecat+cli-base@0.77.1_commander@15.0.0_esbuild@0.28.2_type_ab8c0b68b8b4768d5b87d6e249ef10da/node_modules/@wirecat/cli-core/dist/store/drivers/bun-sqlite.js
 var customised = false;
 var ownLibrary = /* @__PURE__ */ __name(async () => {
   try {