@wirecat/cli-template 0.7.0 → 0.9.0

package/.github/workflows/ci.yml

@@ -29,9 +29,8 @@ jobs:
       platform-run: |
         node dist/bin/clidev.js commands --json >/dev/null
         node dist/bin/clidev.js doctor --json >/dev/null
-      # The skeleton keeps no local state of its own; its config file and run records are cli-core's. A CLI that keeps
-      # its own (a store, a sync cursor, any file it writes) adds a contracts:upgrade script and removes this skip
-      # (WC-TEST-14).
+      # contracts:upgrade needs local state of the CLI's own and a published version to upgrade from (WC-TEST-14).
+      # Once a CLI has both, it adds the script and removes this skip; see docs/dev/TESTING.md.
       skip: |
         contracts:upgrade
       checks: |

package/.gitleaks.toml

@@ -3,3 +3,21 @@ useDefault = true
 
 [allowlist]
 paths = ['''pnpm-lock\.yaml''']
+
+# gitleaks' own rules know Google API keys (AIza…) only. Google calls its OAuth tokens opaque, so these prefixes are
+# the observed format, not a promised one: ya29. in Apigee's sample access token, 1// in the sample refresh token of
+# the web-server OAuth guide.
+[[rules]]
+id = "google-oauth-access-token"
+description = "Google OAuth 2.0 access token"
+regex = '''\b(ya29\.[A-Za-z0-9._-]{20,})'''
+secretGroup = 1
+keywords = ["ya29."]
+
+[[rules]]
+id = "google-oauth-refresh-token"
+description = "Google OAuth 2.0 refresh token"
+regex = '''(?:^|[^A-Za-z0-9/])(1//[A-Za-z0-9_-]{30,})'''
+secretGroup = 1
+entropy = 3.5
+keywords = ["1//"]

package/AGENTS.md

@@ -6,20 +6,12 @@ file and over every other document in this repository. The handbook ships inside
 touches (`WC-<AREA>-<n>`) in the commit message and the pull request. The rules of this CLI alone are in
 [CLAUDE.md](CLAUDE.md).
 
-## Before building anything
+## Design
 
-This CLI was made from [cli-template](https://github.com/WireCatLabs/cli-template). Its first task is the design:
-
-1. Read [docs/dev/DESIGN.md](docs/dev/DESIGN.md). If the seven answers are not there, ask the owner the
-   [design interview](docs/dev/skills/design-interview/SKILL.md) and write them down.
-2. Learn from the reference CLI below. Copy its patterns for the provider, the store and the commands; the
-   template has no sample code on purpose.
-3. Ask the further questions in the interview that the reference CLI does not answer. Build only after the owner
-   has read `DESIGN.md`.
-4. When the first command reaches the service, rewrite `README.md`, `docs/index.md` and the description in
-   `skills/clidev-cli/SKILL.md` to say what the tool does and who it is for. Rewrite the MCP server's instructions
-   in `src/mcp.ts` too: name the kinds of outside text the CLI carries, from the untrusted-text answer in
-   `DESIGN.md` (WC-MCP-11).
+[docs/dev/DESIGN.md](docs/dev/DESIGN.md) holds the owner's answers to the
+[design interview](docs/dev/skills/design-interview/SKILL.md) and the decisions made since. Read it before changing
+what a command does, and write a new decision there. Learn the patterns for the provider, the store and the commands
+from the reference CLI below; the template has no sample code on purpose.
 
 <!-- cli-template:reference-cli:start -->
 The reference CLI is not chosen yet; see [Reference CLIs](docs/dev/reference-clis.md).
@@ -27,5 +19,7 @@ The reference CLI is not chosen yet; see [Reference CLIs](docs/dev/reference-cli
 
 ## Template-owned files
 
-`template.json` names the files `npx @wirecat/cli-template upgrade` keeps in step with the template. Change one of
-them here only when this CLI needs to differ; `upgrade` asks before it touches your change.
+This CLI was made from [cli-template](https://github.com/WireCatLabs/cli-template). `template.json` names the files
+`npx @wirecat/cli-template upgrade` keeps in step with the template. Change one of them here only when this CLI needs
+to differ; `upgrade` asks before it touches your change. Text that holds for this CLI alone goes into the pages it
+owns, such as `DESIGN.md`, `CLAUDE.md` and `README.md`, not into a template-owned page.

package/CHANGELOG.md

@@ -5,6 +5,66 @@ Notable changes to `@wirecat/cli-template`. One section per version, newest firs
 
 <!-- cspell:words katex smol whatsapp -->
 
+## 0.9.0 — 27.10.2026
+
+### Changed — may break callers
+
+- **The MCP server is `clidev <profile> mcp serve`; `mcp` alone only shows its commands** (WC-CMD-3). `--http`,
+  `--port` and `--public-url` move to `mcp serve`, and `mcp --revoke` is its own command, `mcp revoke`, still refused
+  under `CLIDEV_READ_ONLY`. There is no alias: a client set up with `claude mcp add clidev -- clidev personal mcp`
+  gets the help and exits 2; set it up again with `… mcp serve`. `mcp server start` runs `mcp serve --http`.
+- **The skeleton runs on cli-core 0.463.0 and cli-base 0.63.0**, the cli-base line cli-core 0.463 accepts; a CLI that
+  pins cli-base moves both pins together. `skill show`, `skill status` and `skill install --json` answer in the
+  one-thing envelope, `{ item, meta }`, so a script reads their fields under `item`.
+- **`mcp server start` no longer offers `--permission`.** cli-core added it to every CLI and passed it to a server
+  that refused it; now it is refused before anything starts. The profile's `permissions` still make the server
+  stricter.
+
+A CLI made from an older template keeps its own `src/commands/mcp.ts`, since `src/` is a seed: copy the template's
+file, and change `claude mcp add` lines in its docs to end in `mcp serve`.
+
+### Security
+
+- **`.gitleaks.toml` catches Google OAuth tokens.** gitleaks' own rules know Google API keys only, so an access token
+  (`ya29.…`) or a refresh token (`1//…`) with no keyword beside it went through. Two rules now catch them. A CLI takes
+  them with `upgrade`; scan its history once with `gitleaks git` after that, since CI scans all of it.
+
+### Fixed
+
+- **A command other than `mcp serve` no longer loads the MCP library.** `src/commands/mcp.ts` imported `portOf` and
+  `publicUrlOf` from `@wirecat/cli-core/mcp` at the top, so `--version` and `doctor` loaded the MCP server SDK too
+  (WC-LIFE-6). `mcp serve --http` now imports them when it runs.
+- `docs/security.md` says what `mcp serve --http` listens on, what it keeps of each browser login, and that
+  `mcp revoke` ends them.
+- **`pnpm audit:commands` prints the CLI's own scorecard lines**, not the last CLI's total, which was zoom-cli's. It
+  fails when the scorecard has no line for the CLI. Whether a new finding fails the run did not change.
+- **`AGENTS.md` keeps only what holds for the CLI's whole life.** The one-time first task (interview, reference CLI,
+  rewrite the README and the MCP instructions) moved into the `DESIGN.md` that `new` writes, which the CLI owns and
+  deletes the section from when it is done. `upgrade` drops the old text from `AGENTS.md`.
+- **`new` writes a `files` list that ships only what the CLI runs from**: `dist`, `skills`, `README.md`,
+  `CHANGELOG.md` and `LICENSE`. It copied the template's own list, so a new CLI published its `src/` with tests and
+  fakes, `scripts/`, `.github/`, `bin/release`, `config/`, `lint/` and `template.json` (WC-REL-16). `package.json` is
+  a seed, so a CLI made before this trims its list by hand; `pnpm smoke` then checks the package still runs.
+- `docs/dev/TESTING.md` and `ci.yml` give both reasons `contracts:upgrade` is skipped: it needs local state of the
+  CLI's own and a published version to upgrade from (WC-TEST-14).
+- `docs/dev/reference-clis.md` shows the provider call cli-core has, `store.accounts.registerProvider(entry)`.
+  `@wirecat/cli-core/store` exports no `registerProvider` function.
+
+## 0.8.0 — 27.10.2026
+
+### Fixed
+
+- The fresh-audit prompt lets the auditor read the cli-base workflow files the CLI's workflows pin (WC-CI-8), as
+  the handbook's New CLI page now says.
+
+### Removed
+
+- **`mcp --permission` is gone.** cli-core 0.449.0 checks a `--permission` key against the messenger's names
+  (`messages`, `drafts`, `chats` and the like), so in a CLI made from this template it refused every value, its own
+  command paths included. It returns when cli-core can check a CLI's own permission names. Until then the profile's
+  `permissions` are the way to make the MCP server stricter. `mcp server start` still shows a `--permission` option,
+  which cli-core adds; the server it starts refuses it.
+
 ## 0.7.0 — 27.10.2026
 
 ### Changed — may break callers

package/README.md

@@ -33,14 +33,15 @@ such as `personal` in `clidev personal config show`; none is ever assumed. `CLID
 | `clidev commands --json` | Prints every command as JSON, for agents and scripts |
 | `clidev personal config show` | Shows each setting and where it came from |
 | `clidev skill install` | Installs the agent skill for Claude Code, Codex, Gemini CLI and OpenClaw; `--for hermes` for Hermes Agent |
-| `clidev personal mcp` | Serves the profile's commands to an AI agent over MCP; `--http` for agents in the browser |
+| `clidev personal mcp serve` | Serves the profile's commands to an AI agent over MCP; `--http` for agents in the browser |
 | `clidev runs list` | Lists recorded runs, newest first: every command that failed is kept |
 | `clidev upgrade --check` | Says whether a newer version is on npm |
 
 ## For AI agents
 
-`clidev skill show` prints the rules an agent follows with this tool. `clidev personal mcp` serves every command to an
-agent, writes included: the profile's permissions decide what runs. See [MCP and permissions](docs/usage.md#agents).
+`clidev skill show` prints the rules an agent follows with this tool. `clidev personal mcp serve` serves every
+command to an agent, writes included: the profile's permissions decide what runs. See
+[MCP and permissions](docs/usage.md#agents).
 
 ## Why this template
 

package/contracts/plan.json

@@ -36,7 +36,7 @@
     },
     {
       "id": "missing-explicit-profile",
-      "args": ["mcp"],
+      "args": ["mcp", "serve"],
       "exit": 2,
       "stream": "stderr",
       "kind": "json",
@@ -44,7 +44,7 @@
     }
   ],
   "mcp": {
-    "args": ["personal", "mcp"],
+    "args": ["personal", "mcp", "serve"],
     "snapshot": "mcp-tools.json"
   }
 }

package/dist/commands/mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/commands/mcp.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAyBnC,eAAO,MAAM,UAAU,QAAO,OA2ExB,CAAA"}
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/commands/mcp.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAwFnC,eAAO,MAAM,UAAU,QAAO,OAuBzB,CAAA"}

package/dist/commands/mcp.js

@@ -1,60 +1,38 @@
 import { CliError } from "@wirecat/cli-base";
 import { annotate, describeProgram } from "@wirecat/cli-base/commands";
-import { changesAuthorityAt, environmentOf, httpTokenFile, itemOf, MCP_HTTP_DEFAULT_PORT, mcpServerCommand, outputFor, REMOTE_WRITE, refuseUnderReadOnly, renderAnswer, rootOf, } from "@wirecat/cli-core/cli";
-import { portOf, publicUrlOf } from "@wirecat/cli-core/mcp";
+import { changesAuthorityAt, environmentOf, httpTokenFile, itemOf, LOCAL_READ, LOCAL_WRITE, MCP_HTTP_DEFAULT_PORT, mcpServerCommand, outputFor, REMOTE_WRITE, refuseUnderReadOnly, renderAnswer, rootOf, } from "@wirecat/cli-core/cli";
 import { Command } from "commander";
 import { configuration } from "../config.js";
 import { IDENTITY } from "../identity.js";
+const SETUP = `claude mcp add ${IDENTITY.command} -- ${IDENTITY.command} personal mcp serve`;
 const settingsOf = (command) => {
     const flags = command.optsWithGlobals();
     const env = environmentOf(command).env ?? process.env;
     const { profile } = configuration.resolveSettings(flags, { env });
     return { flags, env, profile, tokenFile: httpTokenFile(IDENTITY, profile, env) };
 };
-const withPermission = (command) => command.option("--permission <key=level>", "make a permission stricter for this server only, like messages.send=deny; it never loosens the profile; repeat for more keys", (value, previous = []) => [...previous, value]);
-export const mcpCommand = () => withPermission(annotate(new Command("mcp"), {
+const serveCommand = () => annotate(new Command("serve"), {
     effects: REMOTE_WRITE,
     lifetime: "persistent",
     mcp: false,
-    examples: [`${IDENTITY.command} personal mcp`],
+    examples: [
+        `${IDENTITY.command} personal mcp serve`,
+        `${IDENTITY.command} personal mcp serve --http --public-url https://laptop.example.ts.net`,
+    ],
 })
     .summary("serve this profile's commands to an AI agent")
-    .description(`serve this profile's commands to an agent over MCP, on stdin and stdout, writes included; the profile's permissions decide — \`claude mcp add ${IDENTITY.command} -- ${IDENTITY.command} personal mcp\``))
+    .description(`serve this profile's commands to an agent over MCP, on stdin and stdout, writes included; the profile's permissions decide — \`${SETUP}\``)
     .option("--http", "serve over HTTP on 127.0.0.1 for ChatGPT and Claude in the browser, behind your tunnel; the profile's permissions decide")
     .option("--port <port>", `the local port for --http (default ${MCP_HTTP_DEFAULT_PORT})`)
     .option("--public-url <url>", "the tunnel's https address the browser apps use, e.g. https://<name>.ts.net")
-    .option("--revoke", "forget every login given to a browser app; each must log in again")
-    .addCommand(mcpServerCommand({
-    example: `${IDENTITY.command} personal`,
-    target: (self) => {
-        const { env, profile, tokenFile } = settingsOf(self);
-        return {
-            invocation: `${IDENTITY.command} ${profile}`,
-            profile,
-            envPrefix: IDENTITY.envPrefix,
-            env,
-            tokenFile,
-            argv: [profile, "mcp", "--http"],
-            version: IDENTITY.version,
-        };
-    },
-    answer: (self, item, lines) => renderAnswer(self, outputFor(self), itemOf(item), () => lines.join("\n")),
-}))
     .action(async function () {
     const { flags, env, profile, tokenFile } = settingsOf(this);
-    if (flags.revoke) {
-        refuseUnderReadOnly(this, "mcp --revoke");
-        const { revokeAll } = await import("@wirecat/cli-core/mcp");
-        revokeAll(tokenFile);
-        renderAnswer(this, outputFor(this), itemOf({ revoked: true, profile }));
-        return;
-    }
     if (!flags.http && (flags.json || flags.jsonl))
         throw new CliError("validation_error", "MCP over stdio controls its own output; leave out --json and --jsonl");
     const environment = environmentOf(this);
     const run = environment.runCommand;
     if (!run)
-        throw new Error("mcp runs inside the program's run(), which provides runCommand");
+        throw new Error("mcp serve runs inside the program's run(), which provides runCommand");
     const program = rootOf(this);
     const options = {
         profile,
@@ -68,6 +46,7 @@ export const mcpCommand = () => withPermission(annotate(new Command("mcp"), {
     const { serveMcp, serveMcpOverHttp } = await import("../mcp.js");
     if (!flags.http)
         return serveMcp(options);
+    const { portOf, publicUrlOf } = await import("@wirecat/cli-core/mcp");
     const { renderer } = outputFor(this);
     await serveMcpOverHttp(options, {
         publicUrl: publicUrlOf(flags.publicUrl, {
@@ -80,4 +59,39 @@ export const mcpCommand = () => withPermission(annotate(new Command("mcp"), {
         note: (line) => renderer.note(line),
     });
 });
+const revokeCommand = () => annotate(new Command("revoke"), {
+    effects: LOCAL_WRITE,
+    mcp: false,
+    examples: [`${IDENTITY.command} personal mcp revoke`],
+})
+    .summary("forget every login given to a browser app")
+    .description("forget every login `mcp serve --http` gave a browser app; each must log in again")
+    .action(async function () {
+    refuseUnderReadOnly(this, "mcp revoke");
+    const { profile, tokenFile } = settingsOf(this);
+    const { revokeAll } = await import("@wirecat/cli-core/mcp");
+    revokeAll(tokenFile);
+    renderAnswer(this, outputFor(this), itemOf({ revoked: true, profile }));
+});
+export const mcpCommand = () => annotate(new Command("mcp"), { effects: LOCAL_READ, mcp: false })
+    .summary("serve this profile's commands to an AI agent")
+    .description(`serve this profile's commands to an agent over MCP — \`${SETUP}\``)
+    .addCommand(serveCommand())
+    .addCommand(revokeCommand())
+    .addCommand(mcpServerCommand({
+    example: `${IDENTITY.command} personal`,
+    target: (self) => {
+        const { env, profile, tokenFile } = settingsOf(self);
+        return {
+            invocation: `${IDENTITY.command} ${profile}`,
+            profile,
+            envPrefix: IDENTITY.envPrefix,
+            env,
+            tokenFile,
+            argv: [profile, "mcp", "serve", "--http"],
+            version: IDENTITY.version,
+        };
+    },
+    answer: (self, item, lines) => renderAnswer(self, outputFor(self), itemOf(item), () => lines.join("\n")),
+}));
 //# sourceMappingURL=mcp.js.map

package/dist/commands/mcp.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/commands/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AACtE,OAAO,EACL,kBAAkB,EAClB,aAAa,EAEb,aAAa,EACb,MAAM,EACN,qBAAqB,EACrB,gBAAgB,EAChB,SAAS,EACT,YAAY,EACZ,mBAAmB,EACnB,YAAY,EACZ,MAAM,GACP,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AASzC,MAAM,UAAU,GAAG,CAAC,OAAgB,EAAE,EAAE;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,eAAe,EAAY,CAAA;IACjD,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IACrD,MAAM,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;IACjE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,CAAA;AAClF,CAAC,CAAA;AAED,MAAM,cAAc,GAAG,CAAC,OAAgB,EAAE,EAAE,CAC1C,OAAO,CAAC,MAAM,CACZ,0BAA0B,EAC1B,8HAA8H,EAC9H,CAAC,KAAa,EAAE,QAAQ,GAAa,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC,CACjE,CAAA;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,GAAY,EAAE,CACtC,cAAc,CACZ,QAAQ,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE;IAC3B,OAAO,EAAE,YAAY;IACrB,QAAQ,EAAE,YAAY;IACtB,GAAG,EAAE,KAAK;IACV,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,eAAe,CAAC;CAC/C,CAAC;KACC,OAAO,CAAC,8CAA8C,CAAC;KACvD,WAAW,CACV,iJAAiJ,QAAQ,CAAC,OAAO,OAAO,QAAQ,CAAC,OAAO,iBAAiB,CAC1M,CACJ;KACE,MAAM,CACL,QAAQ,EACR,0HAA0H,CAC3H;KACA,MAAM,CAAC,eAAe,EAAE,sCAAsC,qBAAqB,GAAG,CAAC;KACvF,MAAM,CAAC,oBAAoB,EAAE,6EAA6E,CAAC;KAC3G,MAAM,CAAC,UAAU,EAAE,mEAAmE,CAAC;KACvF,UAAU,CACT,gBAAgB,CAAC;IACf,OAAO,EAAE,GAAG,QAAQ,CAAC,OAAO,WAAW;IACvC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QACf,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;QACpD,OAAO;YACL,UAAU,EAAE,GAAG,QAAQ,CAAC,OAAO,IAAI,OAAO,EAAE;YAC5C,OAAO;YACP,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,GAAG;YACH,SAAS;YACT,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC;YAChC,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC1B,CAAA;IACH,CAAC;IACD,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;CACzG,CAAC,CACH;KACA,MAAM,CAAC,KAAK;IACX,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAC3D,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,mBAAmB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAA;QACzC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAA;QAC3D,SAAS,CAAC,SAAS,CAAC,CAAA;QACpB,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;QACvE,OAAM;IACR,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC;QAC5C,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,sEAAsE,CAAC,CAAA;IAChH,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACvC,MAAM,GAAG,GAAG,WAAW,CAAC,UAAU,CAAA;IAClC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAA;IAC3F,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;IAC5B,MAAM,OAAO,GAAG;QACd,OAAO;QACP,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC;QAClC,MAAM,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,WAAW;QACvE,SAAS,EAAE,kBAAkB,CAAC,OAAO,CAAC;QACtC,GAAG;QACH,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAA;IACD,wFAAwF;IACxF,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;IAChE,IAAI,CAAC,KAAK,CAAC,IAAI;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAA;IACzC,MAAM,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IACpC,MAAM,gBAAgB,CAAC,OAAO,EAAE;QAC9B,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE;YACtC,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,0BAA0B,QAAQ,CAAC,OAAO,EAAE;SACtD,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,qBAAqB,CAAC;QAC/C,SAAS;QACT,UAAU,EAAE,GAAG,CAAC,GAAG,QAAQ,CAAC,SAAS,WAAW,CAAC,KAAK,SAAS;QAC/D,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;KACpC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/commands/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AACtE,OAAO,EACL,kBAAkB,EAClB,aAAa,EAEb,aAAa,EACb,MAAM,EACN,UAAU,EACV,WAAW,EACX,qBAAqB,EACrB,gBAAgB,EAChB,SAAS,EACT,YAAY,EACZ,mBAAmB,EACnB,YAAY,EACZ,MAAM,GACP,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAQzC,MAAM,KAAK,GAAG,kBAAkB,QAAQ,CAAC,OAAO,OAAO,QAAQ,CAAC,OAAO,qBAAqB,CAAA;AAE5F,MAAM,UAAU,GAAG,CAAC,OAAgB,EAAE,EAAE;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,eAAe,EAAY,CAAA;IACjD,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IACrD,MAAM,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;IACjE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,CAAA;AAClF,CAAC,CAAA;AAED,MAAM,YAAY,GAAG,GAAY,EAAE,CACjC,QAAQ,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;IAC7B,OAAO,EAAE,YAAY;IACrB,QAAQ,EAAE,YAAY;IACtB,GAAG,EAAE,KAAK;IACV,QAAQ,EAAE;QACR,GAAG,QAAQ,CAAC,OAAO,qBAAqB;QACxC,GAAG,QAAQ,CAAC,OAAO,uEAAuE;KAC3F;CACF,CAAC;KACC,OAAO,CAAC,8CAA8C,CAAC;KACvD,WAAW,CACV,kIAAkI,KAAK,IAAI,CAC5I;KACA,MAAM,CACL,QAAQ,EACR,0HAA0H,CAC3H;KACA,MAAM,CAAC,eAAe,EAAE,sCAAsC,qBAAqB,GAAG,CAAC;KACvF,MAAM,CAAC,oBAAoB,EAAE,6EAA6E,CAAC;KAC3G,MAAM,CAAC,KAAK;IACX,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAC3D,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC;QAC5C,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,sEAAsE,CAAC,CAAA;IAChH,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACvC,MAAM,GAAG,GAAG,WAAW,CAAC,UAAU,CAAA;IAClC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAA;IACjG,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;IAC5B,MAAM,OAAO,GAAG;QACd,OAAO;QACP,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC;QAClC,MAAM,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,WAAW;QACvE,SAAS,EAAE,kBAAkB,CAAC,OAAO,CAAC;QACtC,GAAG;QACH,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAA;IACD,wFAAwF;IACxF,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;IAChE,IAAI,CAAC,KAAK,CAAC,IAAI;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAA;IACzC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAA;IACrE,MAAM,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IACpC,MAAM,gBAAgB,CAAC,OAAO,EAAE;QAC9B,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE;YACtC,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,0BAA0B,QAAQ,CAAC,OAAO,EAAE;SACtD,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,qBAAqB,CAAC;QAC/C,SAAS;QACT,UAAU,EAAE,GAAG,CAAC,GAAG,QAAQ,CAAC,SAAS,WAAW,CAAC,KAAK,SAAS;QAC/D,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;KACpC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEN,MAAM,aAAa,GAAG,GAAY,EAAE,CAClC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE;IAC9B,OAAO,EAAE,WAAW;IACpB,GAAG,EAAE,KAAK;IACV,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,sBAAsB,CAAC;CACtD,CAAC;KACC,OAAO,CAAC,2CAA2C,CAAC;KACpD,WAAW,CAAC,kFAAkF,CAAC;KAC/F,MAAM,CAAC,KAAK;IACX,mBAAmB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;IACvC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAC/C,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAA;IAC3D,SAAS,CAAC,SAAS,CAAC,CAAA;IACpB,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;AACzE,CAAC,CAAC,CAAA;AAEN,MAAM,CAAC,MAAM,UAAU,GAAG,GAAY,EAAE,CACtC,QAAQ,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;KAC9D,OAAO,CAAC,8CAA8C,CAAC;KACvD,WAAW,CAAC,0DAA0D,KAAK,IAAI,CAAC;KAChF,UAAU,CAAC,YAAY,EAAE,CAAC;KAC1B,UAAU,CAAC,aAAa,EAAE,CAAC;KAC3B,UAAU,CACT,gBAAgB,CAAC;IACf,OAAO,EAAE,GAAG,QAAQ,CAAC,OAAO,WAAW;IACvC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QACf,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;QACpD,OAAO;YACL,UAAU,EAAE,GAAG,QAAQ,CAAC,OAAO,IAAI,OAAO,EAAE;YAC5C,OAAO;YACP,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,GAAG;YACH,SAAS;YACT,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC;YACzC,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC1B,CAAA;IACH,CAAC;IACD,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;CACzG,CAAC,CACH,CAAA"}

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.7.0";
+export declare const VERSION = "0.9.0";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -1,2 +1,2 @@
-export const VERSION = "0.7.0";
+export const VERSION = "0.9.0";
 //# sourceMappingURL=version.js.map

package/docs/commands.md

@@ -120,29 +120,49 @@ clidev skill status
 
 ## `clidev mcp`
 
-serve this profile's commands to an agent over MCP, on stdin and stdout, writes included; the profile's permissions decide — `claude mcp add clidev -- clidev personal mcp`
+serve this profile's commands to an agent over MCP — `claude mcp add clidev -- clidev personal mcp serve`
+
+### `clidev mcp serve`
+
+serve this profile's commands to an agent over MCP, on stdin and stdout, writes included; the profile's permissions decide — `claude mcp add clidev -- clidev personal mcp serve`
 
 **Changes something in the service.**
 
 ```sh
-clidev mcp [options]
+clidev mcp serve [options]
 ```
 
 | Option | What it does |
 |---|---|
-| `--permission <key=level>` | make a permission stricter for this server only, like messages.send=deny; it never loosens the profile; repeat for more keys. |
 | `--http` | serve over HTTP on 127.0.0.1 for ChatGPT and Claude in the browser, behind your tunnel; the profile's permissions decide. |
 | `--port <port>` | the local port for --http (default 8765). |
 | `--public-url <url>` | the tunnel's https address the browser apps use, e.g. https://<name>.ts.net. |
-| `--revoke` | forget every login given to a browser app; each must log in again. |
+
+**Returns:** serve this profile's commands to an AI agent
+
+**Example:** `clidev personal mcp serve`, `clidev personal mcp serve --http --public-url https://laptop.example.ts.net`
+
+### `clidev mcp revoke`
+
+forget every login `mcp serve --http` gave a browser app; each must log in again
+
+**Changes something on this computer only.**
+
+```sh
+clidev mcp revoke
+```
+
+**Returns:** forget every login given to a browser app
+
+**Example:** `clidev personal mcp revoke`
 
 ### `clidev mcp server`
 
-start, stop and check `mcp --http` in the background; status shows the login code for a browser app
+start, stop and check `mcp serve --http` in the background; status shows the login code for a browser app
 
 #### `clidev mcp server start`
 
-start `mcp --http` apart from this shell and answer once it listens, with its login code
+start `mcp serve --http` apart from this shell and answer once it listens, with its login code
 
 **Changes something on this computer only.**
 
@@ -153,8 +173,7 @@ clidev mcp server start [options]
 | Option | What it does |
 |---|---|
 | `--port <port>` | the local port (default 8765). |
-| `--public-url <url>` | the tunnel's https address the browser apps use, e.g. https://<name>.ts.net. |
-| `--permission <key=level>` | make a permission stricter for this server only; repeat for more keys. |
+| `--public-url <url>` | the tunnel's https address the browser apps use, e.g. https://<name>.ts.net or https://<name>.ts.net/tg. |
 
 **Returns:** start the HTTP MCP server in the background
 
@@ -162,7 +181,7 @@ clidev mcp server start [options]
 
 #### `clidev mcp server stop`
 
-stop `mcp --http` — only one that `mcp server start` started
+stop `mcp serve --http` — only one that `mcp server start` started
 
 **Changes something on this computer only.**
 
@@ -176,7 +195,7 @@ clidev mcp server stop
 
 #### `clidev mcp server status`
 
-whether `mcp --http` runs, on which port and address, the login code for a new browser app, and the apps logged in
+whether `mcp serve --http` runs, on which port and address, the login code for a new browser app, and the apps logged in
 
 ```sh
 clidev mcp server status

package/docs/dev/TESTING.md

@@ -12,8 +12,11 @@ How the tests run, and what they never touch. The rules are the handbook's
   `scripts/test-matrix-untested.ts`.
 - `pnpm contracts:check` runs the built CLI against `contracts/plan.json`: help, discovery, errors and the MCP tool
   list. `pnpm exec cli-contract contracts/plan.json --update` rewrites the snapshots; review the diff.
-- `pnpm contracts:upgrade` does not exist yet: the skeleton keeps no local state of its own (its config file and run
-  records are cli-core's), and `.github/workflows/ci.yml` skips the step. Add it, and remove the skip, as soon as the
-  CLI writes state of its own: a store, a sync cursor or any other file.
+- `pnpm contracts:upgrade` does not exist yet, and `.github/workflows/ci.yml` skips the step. It needs both local
+  state of the CLI's own (a store, a sync cursor, any other file its code writes and reads back) and a published
+  version to upgrade from; the skeleton has neither, and the config file and run records are cli-core's
+  ([WC-TEST-14](../../node_modules/@wirecat/cli-base/docs/standards/testing.md)). Once the CLI keeps such state and its
+  first version is on npm, add the script, as
+  [drive-cli does](https://github.com/WireCatLabs/drive-cli/blob/150b105569a98fbd0d4b66349305ad84128adfda/package.json#L37), and remove the skip.
 - `pnpm smoke` installs the packed package into a temporary folder and runs it offline.
 - `pnpm audit:commands` audits the command tree beside the latest published WireCat CLIs.

package/docs/dev/reference-clis.md

@@ -15,10 +15,16 @@ A messenger CLI sets `messenger: true` in `src/identity.ts`, and `new --category
 category keeps the template's `messenger: false`, so the shared help and `commands` do not speak of chats, messages
 and senders. `config` still lists cli-core's messenger settings, such as `sends_per_hour` and `read_other_bots`.
 
-cli-core keeps a provider registry (WC-ARCH-21). A CLI whose provider is not built into cli-core calls
-`registerProvider(store, { name, kind, aliases, command })` from `@wirecat/cli-core/store` on every run that opens
-the shared store. `kind` is one of `messages`, `mail`, `notes`, `documents`, `meetings` or `events`. Until the CLI
-has run once on a computer, `search` there leaves its accounts out and lists them under `skipped`. The reference CLIs
-do not show this call: cli-core already knows their providers, from its [seed list](https://github.com/WireCatLabs/cli-core/blob/6d8f415a6ba3124679741f57d3c22ee0f236e8bf/src/domain/providers.ts#L17-L29) and, for Drive, its
-[document providers](https://github.com/WireCatLabs/cli-core/blob/6d8f415a6ba3124679741f57d3c22ee0f236e8bf/src/domain/providers.ts#L50) (cli-core 0.439.0). `grep -rl registerProvider` over a clone of each of the six finds no call. The skeleton opens no store and has no provider, so it registers nothing; the call comes with
-the CLI's first store code.
+cli-core keeps a provider registry (WC-ARCH-21). A CLI whose provider is not built into cli-core writes its entry on
+every run that opens the shared store: `await store.accounts.registerProvider({ name, kind, aliases, command })`, on the
+store that `openStore` from `@wirecat/cli-core/store` returns
+([`AccountsStore`](https://github.com/WireCatLabs/cli-core/blob/185718d3212cda9bb026e09809760979fe31a1e6/src/store/accounts.ts#L40-L41),
+cli-core 0.459.0). `@wirecat/cli-core/store` does not export a `registerProvider` function. `kind` is one of
+`messages`, `mail`, `notes`, `documents`, `meetings` or `events`. Until the CLI has run once on a computer, `search`
+there leaves its accounts out and lists them under `skipped`. Of the reference CLIs, none makes this call: cli-core
+already knows their providers, from its
+[seed list](https://github.com/WireCatLabs/cli-core/blob/185718d3212cda9bb026e09809760979fe31a1e6/src/domain/providers.ts#L17-L29)
+and, for Drive, its
+[document providers](https://github.com/WireCatLabs/cli-core/blob/185718d3212cda9bb026e09809760979fe31a1e6/src/domain/providers.ts#L50).
+[gcal-cli](https://github.com/WireCatLabs/gcal-cli/blob/14e27c45e6dc204cde8adcd9e4fa6aa069745335/src/store.ts) does. The skeleton opens no store and
+has no provider, so it registers nothing; the call comes with the CLI's first store code.

package/docs/dev/skills/release/fresh-audit.md

@@ -5,9 +5,9 @@ agent's context. Give it as written.
 
 ## Prompt
 
-You audit a WireCat CLI repository, in the current folder. Use only two sources: the handbook, starting at
-`node_modules/@wirecat/cli-base/docs/standards/README.md`, and the repository itself. Do not read plans, journals
-or earlier reviews. Run `pnpm install` first if `node_modules` is missing.
+You audit a WireCat CLI repository, in the current folder. Use only three sources: the handbook, starting at
+`node_modules/@wirecat/cli-base/docs/standards/README.md`, the repository itself, and the cli-base workflow files its
+own workflows pin (WC-CI-8). Do not read plans, journals or earlier reviews. Run `pnpm install` first if `node_modules` is missing.
 
 Check the repository against every handbook page that applies to it: the code, the docs, the configs and the
 workflows. You may run the package scripts. Change nothing.

package/docs/dev/test-matrix.md

@@ -7,7 +7,7 @@ ran it · ⛔ not tested offline, with the reason and where it is checked instea
 Measured from the test run (`coverage/argv.jsonl`), not searched for — see
 [TESTING.md](TESTING.md) for how, and for the states and failures that cut across commands.
 
-**51 ✅ · 7 ⛔ · 0 ❌** — 18 commands, 40 options.
+**50 ✅ · 6 ⛔ · 0 ❌** — 19 commands, 37 options.
 
 | Command | Option | | Note |
 |---|---|---|---|
@@ -19,17 +19,15 @@ Measured from the test run (`coverage/argv.jsonl`), not searched for — see
 | `skill install` |  | ✅ |  |
 | `skill install` | `--for` | ✅ |  |
 | `skill status` |  | ✅ |  |
-| `mcp` |  | ✅ |  |
-| `mcp` | `--permission` | ✅ |  |
-| `mcp` | `--http` | ✅ |  |
-| `mcp` | `--port` | ✅ |  |
-| `mcp` | `--public-url` | ✅ |  |
-| `mcp` | `--revoke` | ✅ |  |
-| `mcp server start` |  | ⛔ | starts a detached `mcp --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/ |
-| `mcp server start` | `--port` | ⛔ | starts a detached `mcp --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/ |
-| `mcp server start` | `--public-url` | ⛔ | starts a detached `mcp --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/ |
-| `mcp server start` | `--permission` | ⛔ | starts a detached `mcp --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/ |
-| `mcp server stop` |  | ⛔ | starts a detached `mcp --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/ |
+| `mcp serve` |  | ✅ |  |
+| `mcp serve` | `--http` | ✅ |  |
+| `mcp serve` | `--port` | ✅ |  |
+| `mcp serve` | `--public-url` | ✅ |  |
+| `mcp revoke` |  | ✅ |  |
+| `mcp server start` |  | ⛔ | starts a detached `mcp serve --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/ |
+| `mcp server start` | `--port` | ⛔ | starts a detached `mcp serve --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/ |
+| `mcp server start` | `--public-url` | ⛔ | starts a detached `mcp serve --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/ |
+| `mcp server stop` |  | ⛔ | starts a detached `mcp serve --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/ |
 | `mcp server status` |  | ✅ |  |
 | `upgrade` |  | ✅ |  |
 | `upgrade` | `--check` | ✅ |  |

package/docs/security.md

@@ -6,6 +6,10 @@ What WireCat CLIs share — the keyring, permissions, MCP and what never reaches
 `clidev` keeps its settings in `config.json` and its state in the folders `clidev doctor` shows. It sends nothing
 to any service yet.
 
+`clidev personal mcp serve --http` listens on `127.0.0.1` only, for browser apps that reach it through your own
+tunnel. Each app logs in with a one-time code, and the server keeps a hash of each login it gives, in the state
+folder, readable by you only. `clidev personal mcp revoke` forgets every one of them.
+
 A run record keeps the command line as you typed it, so `clidev runs show` tells you what was run. A secret is still
 stored as `[redacted]`: an option named like a token or password, a password in a link, a long opaque string. A
 phone number is replaced by `[redacted]` inside the word you typed, message text included: one written with its "+" and

package/docs/usage.md

@@ -15,25 +15,25 @@ command without one stops with exit code 2 and lists the profiles on this comput
 
 ## Output for scripts
 
-Every command except `mcp` on stdin and stdout takes `--json`, and prints one JSON value on stdout. Errors are JSON on stderr, with a code to branch
+Every command except `mcp serve` on stdin and stdout takes `--json`, and prints one JSON value on stdout. Errors are JSON on stderr, with a code to branch
 on. The [command reference](commands.md) lists the codes.
 
 ## Agents
 
 `clidev skill install` puts the tool's skill where Claude Code, Codex, Gemini CLI and OpenClaw look for it.
 `clidev skill install --for hermes` also adds that folder to Hermes Agent's own settings, so a bare `skill install`
-leaves Hermes out. `clidev personal mcp` serves the profile's commands over MCP, on stdin and stdout:
+leaves Hermes out. `clidev personal mcp serve` serves the profile's commands over MCP, on stdin and stdout:
 
 ```sh
-claude mcp add clidev -- clidev personal mcp
+claude mcp add clidev -- clidev personal mcp serve
 ```
 
 The server offers every command, the ones that write included. The profile's permissions decide what runs; see
-[settings](configuration.md#permissions). `--permission <key>=deny` makes one permission key stricter for this server
-only; it never loosens the profile.
+[settings](configuration.md#permissions).
 
-For ChatGPT and Claude in the browser, `clidev personal mcp --http --public-url https://laptop.example.ts.net` serves on
-`127.0.0.1` (port 8765, or `--port`) behind your own tunnel. A browser app logs in with a one-time code that the
-command prints; `clidev personal mcp --revoke` ends every login. `clidev personal mcp server start` runs the same
+For ChatGPT and Claude in the browser,
+`clidev personal mcp serve --http --public-url https://laptop.example.ts.net` serves on `127.0.0.1` (port 8765, or
+`--port`) behind your own tunnel. A browser app logs in with a one-time code that the command prints;
+`clidev personal mcp revoke` ends every login. `clidev personal mcp server start` runs the same
 server in the background, `mcp server status` shows its port, the login code and the apps logged in, and
 `mcp server stop` ends it.

package/kit/dist/new.js

@@ -5,7 +5,7 @@ import { createInterface } from "node:readline/promises";
 import { promisify } from "node:util";
 import { ask, choiceList, INTERVIEW, labelOf, NAME_QUESTIONS, parseAnswer } from "./interview.js";
 import { isRecord, MANIFEST, sha256 } from "./manifest.js";
-import { PACKED_AS, renderTemplate } from "./source.js";
+import { renderTemplate } from "./source.js";
 const run = promisify(execFile);
 const REFERENCES = {
     messenger: ["whatsapp-cli", "tg-cli", "max-cli"],
@@ -107,6 +107,18 @@ export const designDoc = (names, answers) => {
         `Written by \`npx @wirecat/cli-template new\`. The agent reads it first, asks the further questions the reference CLI`,
         "does not answer, and starts building only after the owner has read it.",
         "",
+        "## First task",
+        "",
+        "Delete this section once every step is done (WC-DOC-3).",
+        "",
+        "1. If an answer below is missing, ask the owner the [design interview](skills/design-interview/SKILL.md).",
+        "2. Learn from the reference CLI below: its provider, its store and its commands.",
+        "3. Ask the further questions in the interview that the reference CLI does not answer, and write the answers here.",
+        "   Build only after the owner has read this page.",
+        "4. When the first command reaches the service, rewrite `README.md`, `docs/index.md` and the description in",
+        `   \`skills/${names.name}/SKILL.md\` to say what the tool does and who it is for. Rewrite the MCP server's`,
+        "   instructions in `src/mcp.ts` too: name the kinds of outside text the CLI carries (WC-MCP-11).",
+        "",
         "## Answers",
         "",
         ...rows,
@@ -137,6 +149,7 @@ const removeKit = (command) => command
     .split(" && ")
     .filter((part) => !/\bkit[:/]/.test(part))
     .join(" && ");
+const CLI_FILES = ["dist", "skills", "/README.md", "CHANGELOG.md", "LICENSE"];
 export const cliPackageJson = (text, names) => {
     const pkg = JSON.parse(text);
     if (!isRecord(pkg))
@@ -149,8 +162,9 @@ export const cliPackageJson = (text, names) => {
         ...Object.fromEntries(Object.entries(bin).filter(([, value]) => !isKit(value))),
         [names.command]: `dist/bin/${names.command}.js`,
     };
+    // The template's own list ships the skeleton's sources for `new` to copy; a CLI ships what runs (WC-REL-16).
     if (Array.isArray(pkg.files))
-        next.files = pkg.files.filter((entry) => !isKit(entry) && !Object.values(PACKED_AS).includes(entry));
+        next.files = CLI_FILES;
     if (isRecord(pkg.scripts)) {
         next.scripts = Object.fromEntries(Object.entries(pkg.scripts)
             .filter((entry) => typeof entry[1] === "string" && !entry[0].startsWith("kit:"))

package/lint/baseline/unknown-verb.json

@@ -0,0 +1 @@
+["mcp revoke", "mcp serve"]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wirecat/cli-template",
-  "version": "0.7.0",
+  "version": "0.9.0",
   "description": "Start a new WireCat CLI: a working skeleton on cli-base and cli-core, copied by new and kept current by upgrade",
   "license": "Apache-2.0",
   "author": "Viacheslav Ptsarev",
@@ -84,8 +84,8 @@
   },
   "dependencies": {
     "@modelcontextprotocol/server": "2.4.0",
-    "@wirecat/cli-base": "0.62.0",
-    "@wirecat/cli-core": "0.449.0",
+    "@wirecat/cli-base": "0.63.0",
+    "@wirecat/cli-core": "0.463.0",
     "commander": "15.0.0"
   },
   "devDependencies": {

package/scripts/audit.sh

@@ -21,4 +21,5 @@ for cli in tg max wa memo drive zm; do
 done
 "$root/node_modules/.bin/cli-dev" audit --cli "$root/dist/bin/$command.js" "${others[@]}" --for "$command" \
   --lint "$command=$root/lint" >"$scratch/scorecard.txt" || { cat "$scratch/scorecard.txt"; exit 1; }
-tail -n 1 "$scratch/scorecard.txt"
+awk -v cli="$command" 'NR == 1 || $1 == cli' "$scratch/scorecard.txt"
+grep -q "^$command  *total " "$scratch/scorecard.txt" || { echo "audit: no scorecard row for $command" >&2; exit 1; }

package/scripts/test-matrix-untested.ts

@@ -12,29 +12,23 @@ export const UNTESTED: { command: string; option?: string; reason: string }[] =
   {
     command: "mcp server start",
     reason:
-      "starts a detached `mcp --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/",
+      "starts a detached `mcp serve --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/",
   },
   {
     command: "mcp server start",
     option: "--port",
     reason:
-      "starts a detached `mcp --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/",
+      "starts a detached `mcp serve --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/",
   },
   {
     command: "mcp server start",
     option: "--public-url",
     reason:
-      "starts a detached `mcp --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/",
-  },
-  {
-    command: "mcp server start",
-    option: "--permission",
-    reason:
-      "starts a detached `mcp --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/",
+      "starts a detached `mcp serve --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/",
   },
   {
     command: "mcp server stop",
     reason:
-      "starts a detached `mcp --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/",
+      "starts a detached `mcp serve --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/",
   },
 ]

package/src/commands/mcp.ts

@@ -6,6 +6,8 @@ import {
   type GlobalFlags,
   httpTokenFile,
   itemOf,
+  LOCAL_READ,
+  LOCAL_WRITE,
   MCP_HTTP_DEFAULT_PORT,
   mcpServerCommand,
   outputFor,
@@ -14,7 +16,6 @@ import {
   renderAnswer,
   rootOf,
 } from "@wirecat/cli-core/cli"
-import { portOf, publicUrlOf } from "@wirecat/cli-core/mcp"
 import { Command } from "commander"
 import { configuration } from "../config.js"
 import { IDENTITY } from "../identity.js"
@@ -23,9 +24,10 @@ interface McpFlags extends GlobalFlags {
   http?: boolean
   port?: string
   publicUrl?: string
-  revoke?: boolean
 }
 
+const SETUP = `claude mcp add ${IDENTITY.command} -- ${IDENTITY.command} personal mcp serve`
+
 const settingsOf = (command: Command) => {
   const flags = command.optsWithGlobals<McpFlags>()
   const env = environmentOf(command).env ?? process.env
@@ -33,65 +35,33 @@ const settingsOf = (command: Command) => {
   return { flags, env, profile, tokenFile: httpTokenFile(IDENTITY, profile, env) }
 }
 
-const withPermission = (command: Command) =>
-  command.option(
-    "--permission <key=level>",
-    "make a permission stricter for this server only, like messages.send=deny; it never loosens the profile; repeat for more keys",
-    (value: string, previous: string[] = []) => [...previous, value],
-  )
-
-export const mcpCommand = (): Command =>
-  withPermission(
-    annotate(new Command("mcp"), {
-      effects: REMOTE_WRITE,
-      lifetime: "persistent",
-      mcp: false,
-      examples: [`${IDENTITY.command} personal mcp`],
-    })
-      .summary("serve this profile's commands to an AI agent")
-      .description(
-        `serve this profile's commands to an agent over MCP, on stdin and stdout, writes included; the profile's permissions decide — \`claude mcp add ${IDENTITY.command} -- ${IDENTITY.command} personal mcp\``,
-      ),
-  )
+const serveCommand = (): Command =>
+  annotate(new Command("serve"), {
+    effects: REMOTE_WRITE,
+    lifetime: "persistent",
+    mcp: false,
+    examples: [
+      `${IDENTITY.command} personal mcp serve`,
+      `${IDENTITY.command} personal mcp serve --http --public-url https://laptop.example.ts.net`,
+    ],
+  })
+    .summary("serve this profile's commands to an AI agent")
+    .description(
+      `serve this profile's commands to an agent over MCP, on stdin and stdout, writes included; the profile's permissions decide — \`${SETUP}\``,
+    )
     .option(
       "--http",
       "serve over HTTP on 127.0.0.1 for ChatGPT and Claude in the browser, behind your tunnel; the profile's permissions decide",
     )
     .option("--port <port>", `the local port for --http (default ${MCP_HTTP_DEFAULT_PORT})`)
     .option("--public-url <url>", "the tunnel's https address the browser apps use, e.g. https://<name>.ts.net")
-    .option("--revoke", "forget every login given to a browser app; each must log in again")
-    .addCommand(
-      mcpServerCommand({
-        example: `${IDENTITY.command} personal`,
-        target: (self) => {
-          const { env, profile, tokenFile } = settingsOf(self)
-          return {
-            invocation: `${IDENTITY.command} ${profile}`,
-            profile,
-            envPrefix: IDENTITY.envPrefix,
-            env,
-            tokenFile,
-            argv: [profile, "mcp", "--http"],
-            version: IDENTITY.version,
-          }
-        },
-        answer: (self, item, lines) => renderAnswer(self, outputFor(self), itemOf(item), () => lines.join("\n")),
-      }),
-    )
     .action(async function (this: Command) {
       const { flags, env, profile, tokenFile } = settingsOf(this)
-      if (flags.revoke) {
-        refuseUnderReadOnly(this, "mcp --revoke")
-        const { revokeAll } = await import("@wirecat/cli-core/mcp")
-        revokeAll(tokenFile)
-        renderAnswer(this, outputFor(this), itemOf({ revoked: true, profile }))
-        return
-      }
       if (!flags.http && (flags.json || flags.jsonl))
         throw new CliError("validation_error", "MCP over stdio controls its own output; leave out --json and --jsonl")
       const environment = environmentOf(this)
       const run = environment.runCommand
-      if (!run) throw new Error("mcp runs inside the program's run(), which provides runCommand")
+      if (!run) throw new Error("mcp serve runs inside the program's run(), which provides runCommand")
       const program = rootOf(this)
       const options = {
         profile,
@@ -104,6 +74,7 @@ export const mcpCommand = (): Command =>
       // Loaded here, not at the top: every other command would otherwise pay for the MCP SDK.
       const { serveMcp, serveMcpOverHttp } = await import("../mcp.js")
       if (!flags.http) return serveMcp(options)
+      const { portOf, publicUrlOf } = await import("@wirecat/cli-core/mcp")
       const { renderer } = outputFor(this)
       await serveMcpOverHttp(options, {
         publicUrl: publicUrlOf(flags.publicUrl, {
@@ -116,3 +87,44 @@ export const mcpCommand = (): Command =>
         note: (line) => renderer.note(line),
       })
     })
+
+const revokeCommand = (): Command =>
+  annotate(new Command("revoke"), {
+    effects: LOCAL_WRITE,
+    mcp: false,
+    examples: [`${IDENTITY.command} personal mcp revoke`],
+  })
+    .summary("forget every login given to a browser app")
+    .description("forget every login `mcp serve --http` gave a browser app; each must log in again")
+    .action(async function (this: Command) {
+      refuseUnderReadOnly(this, "mcp revoke")
+      const { profile, tokenFile } = settingsOf(this)
+      const { revokeAll } = await import("@wirecat/cli-core/mcp")
+      revokeAll(tokenFile)
+      renderAnswer(this, outputFor(this), itemOf({ revoked: true, profile }))
+    })
+
+export const mcpCommand = (): Command =>
+  annotate(new Command("mcp"), { effects: LOCAL_READ, mcp: false })
+    .summary("serve this profile's commands to an AI agent")
+    .description(`serve this profile's commands to an agent over MCP — \`${SETUP}\``)
+    .addCommand(serveCommand())
+    .addCommand(revokeCommand())
+    .addCommand(
+      mcpServerCommand({
+        example: `${IDENTITY.command} personal`,
+        target: (self) => {
+          const { env, profile, tokenFile } = settingsOf(self)
+          return {
+            invocation: `${IDENTITY.command} ${profile}`,
+            profile,
+            envPrefix: IDENTITY.envPrefix,
+            env,
+            tokenFile,
+            argv: [profile, "mcp", "serve", "--http"],
+            version: IDENTITY.version,
+          }
+        },
+        answer: (self, item, lines) => renderAnswer(self, outputFor(self), itemOf(item), () => lines.join("\n")),
+      }),
+    )

package/src/mcp-http.test.ts

@@ -95,7 +95,10 @@ it("serves the three tools behind the browser login, and shows the server in mcp
   const port = await freePort()
   const base = new URL(`http://127.0.0.1:${port}`)
   const stop = new AbortController()
-  const serving = started(["personal", "mcp", "--http", "--public-url", base.href, "--port", String(port)], stop.signal)
+  const serving = started(
+    ["personal", "mcp", "serve", "--http", "--public-url", base.href, "--port", String(port)],
+    stop.signal,
+  )
   await vi.waitFor(() => expect(serving.err.join("\n")).toContain("serving on"))
   const codes = () => [...serving.err.join("\n").matchAll(/login code for a new browser app: (\S+)/g)].map((m) => m[1])
   const client = await loggedInClient(base, () => codes()[0] ?? "")
@@ -121,36 +124,34 @@ it("serves the three tools behind the browser login, and shows the server in mcp
   expect(await answer(["personal", "mcp", "server", "status", "--json"])).toMatchObject({ running: false })
 })
 
-it("refuses mcp --http without the tunnel's address", async () => {
-  const one = started(["personal", "mcp", "--http", "--json"])
+it("refuses mcp serve --http without the tunnel's address", async () => {
+  const one = started(["personal", "mcp", "serve", "--http", "--json"])
   expect(await one.code).not.toBe(0)
   expect(one.err.join("\n")).toContain("--public-url")
 })
 
-it("forgets every browser login on --revoke", async () => {
-  expect(await answer(["personal", "mcp", "--revoke", "--json"])).toEqual({ revoked: true, profile: "personal" })
-})
-
-it("reads --permission through the profile's settings, refusing one that is not a command path and level", async () => {
-  const one = started(["personal", "mcp", "--permission", "messages.send", "--json"])
-  expect(await one.code).toBe(2)
-  expect(one.err.join("\n")).toContain("--permission takes a command path and level")
+it("forgets every browser login on mcp revoke", async () => {
+  expect(await answer(["personal", "mcp", "revoke", "--json"])).toEqual({ revoked: true, profile: "personal" })
 })
 
 it("keeps the login code out of a background server's log, and refuses a port in use", async () => {
   const port = await freePort()
   const url = `http://127.0.0.1:${port}`
   const stop = new AbortController()
-  const background = started(["personal", "mcp", "--http", "--public-url", url, "--port", String(port)], stop.signal, {
-    ...process.env,
-    CLIDEV_MCP_HTTP: "personal",
-  })
+  const background = started(
+    ["personal", "mcp", "serve", "--http", "--public-url", url, "--port", String(port)],
+    stop.signal,
+    {
+      ...process.env,
+      CLIDEV_MCP_HTTP: "personal",
+    },
+  )
   try {
     await vi.waitFor(() => expect(background.err.join("\n")).toContain("serving on"))
     expect(background.err.join("\n")).toContain(
       "a new login code for a browser app: `clidev personal mcp server status`",
     )
-    const second = started(["work", "mcp", "--http", "--public-url", url, "--port", String(port), "--json"])
+    const second = started(["work", "mcp", "serve", "--http", "--public-url", url, "--port", String(port), "--json"])
     expect(await second.code).not.toBe(0)
     expect(second.err.join("\n")).toContain(`port ${port} is in use`)
   } finally {
@@ -160,12 +161,12 @@ it("keeps the login code out of a background server's log, and refuses a port in
 })
 
 it("refuses --json for MCP over stdio", async () => {
-  const one = started(["personal", "mcp", "--json"])
+  const one = started(["personal", "mcp", "serve", "--json"])
   expect(await one.code).toBe(2)
   expect(one.err.join("\n")).toContain("MCP over stdio controls its own output")
 })
 
-it("refuses --revoke under the read-only lock", async () => {
-  const one = started(["personal", "mcp", "--revoke", "--json"], undefined, { ...process.env, CLIDEV_READ_ONLY: "1" })
+it("refuses mcp revoke under the read-only lock", async () => {
+  const one = started(["personal", "mcp", "revoke", "--json"], undefined, { ...process.env, CLIDEV_READ_ONLY: "1" })
   expect(await one.code).toBe(5)
 })

package/src/mcp.test.ts

@@ -47,7 +47,7 @@ it("finds writes as well as reads", async () => {
   const client = await connect()
   const found = structured(await client.callTool({ name: "clidev_tools_search", arguments: {} }))
   expect(found.items).toContainEqual(expect.objectContaining({ writes: true }))
-  expect(found.items).not.toContainEqual(expect.objectContaining({ command: "mcp" }))
+  expect(found.items).not.toContainEqual(expect.objectContaining({ command: expect.stringMatching(/^mcp\b/) }))
 })
 
 it("runs a command through the CLI and answers with its result", async () => {
@@ -76,9 +76,9 @@ it("serves until the command is stopped", async () => {
   await expect(serving).resolves.toBeUndefined()
 })
 
-it("clidev <profile> mcp starts the server and ends on a signal", async () => {
+it("clidev <profile> mcp serve starts the server and ends on a signal", async () => {
   const stop = new AbortController()
-  const serving = run(["personal", "mcp"], {
+  const serving = run(["personal", "mcp", "serve"], {
     signal: stop.signal,
     tty: false,
     streams: { data: () => {}, diagnostic: () => {} },

package/src/program.test.ts

@@ -127,12 +127,18 @@ it("skill show prints the packaged skill", async () => {
   expect(out).toContain(readFileSync(new URL("../skills/clidev-cli/SKILL.md", import.meta.url), "utf8").split("\n")[0])
 })
 
-it("mcp without a profile stops and says so", async () => {
-  const { code, err } = await ran(["mcp", "--json"])
+it("mcp serve without a profile stops and says so", async () => {
+  const { code, err } = await ran(["mcp", "serve", "--json"])
   expect(code).toBe(2)
   expect(err).toContain("validation_error")
 })
 
+it("mcp alone only names its commands", async () => {
+  const { code, err } = await ran(["personal", "mcp", "--json"])
+  expect(code).toBe(2)
+  expect(err).toContain("--help")
+})
+
 it("upgrade --check installs nothing when npm cannot be reached", async () => {
   const { code, out } = await ran(["upgrade", "--check", "--json"])
   expect(code).toBe(0)

package/src/roots.test.ts

@@ -77,18 +77,13 @@ it("skill status and skill show --for read what skill install wrote", async () =
   expect((await ran(["skill", "install", "--for", "claude", "--json"])).code).toBe(0)
   const status = await ran(["skill", "status", "--json"])
   expect(status.code).toBe(0)
-  // cli-core #2059 wraps skill answers in `{ item, meta }`; accept both until this CLI pins the release that ships it.
-  const answer = (out: string) => {
-    const body = JSON.parse(out)
-    return body.item ?? body
-  }
-  expect(answer(status.out).targets).toEqual([
+  expect(JSON.parse(status.out).item.targets).toEqual([
     expect.objectContaining({ target: "claude", state: "current" }),
     expect.objectContaining({ target: "agents", installed: null, state: "missing" }),
   ])
   const shown = await ran(["skill", "show", "--for", "claude", "--json"])
   expect(shown.code).toBe(0)
-  expect(answer(shown.out)).toMatchObject({
+  expect(JSON.parse(shown.out).item).toMatchObject({
     target: "claude",
     content: expect.stringContaining("name: clidev-cli"),
   })

package/src/version.ts

@@ -1 +1 @@
-export const VERSION = "0.7.0"
+export const VERSION = "0.9.0"