@wirecat/cli-template 0.9.0 → 0.10.0

package/dist/bundle/server-LKVYA2AE.js

@@ -0,0 +1,39 @@
+import { createRequire as __bundleRequire } from "node:module";
+const require = __bundleRequire(import.meta.url);
+import {
+  createBotServer,
+  serveBotOverStdio
+} from "./chunk-QGNNMPUB.js";
+import "./chunk-IJ3IA7EK.js";
+import "./chunk-JEBSORH7.js";
+import "./chunk-MZVV2JZT.js";
+import "./chunk-XFXBXQBS.js";
+import "./chunk-FIHDGZIB.js";
+import "./chunk-O5LMDQTO.js";
+import "./chunk-E42W72PQ.js";
+import "./chunk-MFS52LTZ.js";
+import "./chunk-5D4AEUVA.js";
+import "./chunk-75LVQQEK.js";
+import "./chunk-W2IDKBNB.js";
+import "./chunk-ABP7FDMJ.js";
+import "./chunk-JTTW5ZKF.js";
+import "./chunk-AP7QKYBG.js";
+import "./chunk-VMTM46FH.js";
+import "./chunk-NTLPDH76.js";
+import "./chunk-54AJONOM.js";
+import "./chunk-7RXBN7HP.js";
+import "./chunk-LSEF4QC3.js";
+import "./chunk-O5EHUB2V.js";
+import "./chunk-2CFBHYFA.js";
+import "./chunk-OPJ24VGH.js";
+import "./chunk-7RB76E2L.js";
+import "./chunk-4QRLPOJ7.js";
+import "./chunk-B4EED2RF.js";
+import "./chunk-EFHLQXG6.js";
+import "./chunk-Y5E2WNWB.js";
+import "./chunk-S57AMKLX.js";
+import "./chunk-ZVVMGPBJ.js";
+export {
+  createBotServer,
+  serveBotOverStdio
+};

package/dist/bundle/state-WWPPHERF.js

@@ -0,0 +1,33 @@
+import { createRequire as __bundleRequire } from "node:module";
+const require = __bundleRequire(import.meta.url);
+import {
+  ACCESS_SECONDS,
+  REFRESH_SECONDS,
+  httpLaunchFile,
+  httpLock,
+  httpLockFile,
+  httpLogFile,
+  mcpHttpMarker,
+  readHttpLaunch,
+  readHttpLock,
+  readStored,
+  signedInClients
+} from "./chunk-222FANS2.js";
+import "./chunk-6CBWO7OF.js";
+import "./chunk-7RXBN7HP.js";
+import "./chunk-EFHLQXG6.js";
+import "./chunk-Y5E2WNWB.js";
+import "./chunk-ZVVMGPBJ.js";
+export {
+  ACCESS_SECONDS,
+  REFRESH_SECONDS,
+  httpLaunchFile,
+  httpLock,
+  httpLockFile,
+  httpLogFile,
+  mcpHttpMarker,
+  readHttpLaunch,
+  readHttpLock,
+  readStored,
+  signedInClients
+};

package/dist/bundle/store-H6UIA4PK.js

@@ -0,0 +1,120 @@
+import { createRequire as __bundleRequire } from "node:module";
+const require = __bundleRequire(import.meta.url);
+import {
+  AGENDA_COLUMNS,
+  BACKFILL_ON_OPEN,
+  CHAT_COLUMNS,
+  CHAT_LIST_KEY,
+  CONVERSATION_COLUMNS,
+  DEFAULT_AGENT_CLOSE,
+  DEFAULT_FIRST_PASS_PER_CHAT,
+  MENTION_QUERY,
+  MENTION_STATUSES,
+  OTHER_SOURCES,
+  TRACKED_CHAT_COLUMNS,
+  accountGroupsOf,
+  attachmentColumns,
+  drainNoteIndex,
+  dropAllUnusedVectors,
+  fetchedKey,
+  fileFacts,
+  fillSearchIndex,
+  fillStems,
+  firstPassPerChatOf,
+  historyStartKey,
+  inboxKey,
+  involvementStoreOver,
+  messageOfEmail,
+  noteIndexState,
+  openSqlite,
+  openStore,
+  orphanPointers,
+  pendingNormalization,
+  queryFilter,
+  readStoreTables,
+  registerProvider,
+  resetAttachmentWords,
+  resetNoteIndex,
+  resetSearchIndex,
+  resetStems,
+  rowCounts,
+  saveStorePhoneCountries,
+  savedAgentClose,
+  savedFirstPassPerChat,
+  savedPhoneCountries,
+  savedStemmers,
+  savedTaskCategories,
+  searchIndexState,
+  stemmerCache,
+  stemmersOrigin,
+  stemsState,
+  storeClients,
+  storeContents,
+  threadConversation,
+  titlePart,
+  vectorIndexCounts
+} from "./chunk-75LVQQEK.js";
+import "./chunk-W2IDKBNB.js";
+import "./chunk-LSEF4QC3.js";
+import "./chunk-O5EHUB2V.js";
+import "./chunk-2CFBHYFA.js";
+import "./chunk-4QRLPOJ7.js";
+import "./chunk-B4EED2RF.js";
+import "./chunk-EFHLQXG6.js";
+import "./chunk-Y5E2WNWB.js";
+import "./chunk-S57AMKLX.js";
+import "./chunk-ZVVMGPBJ.js";
+export {
+  AGENDA_COLUMNS,
+  BACKFILL_ON_OPEN,
+  CHAT_COLUMNS,
+  CHAT_LIST_KEY,
+  CONVERSATION_COLUMNS,
+  DEFAULT_AGENT_CLOSE,
+  DEFAULT_FIRST_PASS_PER_CHAT,
+  MENTION_QUERY,
+  MENTION_STATUSES,
+  OTHER_SOURCES,
+  TRACKED_CHAT_COLUMNS,
+  accountGroupsOf,
+  attachmentColumns,
+  drainNoteIndex,
+  dropAllUnusedVectors,
+  fetchedKey,
+  fileFacts,
+  fillSearchIndex,
+  fillStems,
+  firstPassPerChatOf,
+  historyStartKey,
+  inboxKey,
+  involvementStoreOver,
+  messageOfEmail,
+  noteIndexState,
+  openSqlite,
+  openStore,
+  orphanPointers,
+  pendingNormalization,
+  queryFilter,
+  readStoreTables,
+  registerProvider,
+  resetAttachmentWords,
+  resetNoteIndex,
+  resetSearchIndex,
+  resetStems,
+  rowCounts,
+  saveStorePhoneCountries,
+  savedAgentClose,
+  savedFirstPassPerChat,
+  savedPhoneCountries,
+  savedStemmers,
+  savedTaskCategories,
+  searchIndexState,
+  stemmerCache,
+  stemmersOrigin,
+  stemsState,
+  storeClients,
+  storeContents,
+  threadConversation,
+  titlePart,
+  vectorIndexCounts
+};

package/dist/bundle/store-maintenance-command-EYBT64A2.js

@@ -0,0 +1,40 @@
+import { createRequire as __bundleRequire } from "node:module";
+const require = __bundleRequire(import.meta.url);
+import {
+  buildStems,
+  storeMaintenanceCommands,
+  storeSummary
+} from "./chunk-NE3NSB5O.js";
+import "./chunk-B4LM2B6F.js";
+import "./chunk-FIHDGZIB.js";
+import "./chunk-2KQZ24GI.js";
+import "./chunk-O5LMDQTO.js";
+import "./chunk-HTQTIKWP.js";
+import "./chunk-E42W72PQ.js";
+import "./chunk-MFS52LTZ.js";
+import "./chunk-6CBWO7OF.js";
+import "./chunk-75LVQQEK.js";
+import "./chunk-W2IDKBNB.js";
+import "./chunk-ABP7FDMJ.js";
+import "./chunk-2TBVT4SZ.js";
+import "./chunk-JTTW5ZKF.js";
+import "./chunk-VMTM46FH.js";
+import "./chunk-NTLPDH76.js";
+import "./chunk-54AJONOM.js";
+import "./chunk-7RXBN7HP.js";
+import "./chunk-LSEF4QC3.js";
+import "./chunk-O5EHUB2V.js";
+import "./chunk-2CFBHYFA.js";
+import "./chunk-OPJ24VGH.js";
+import "./chunk-7RB76E2L.js";
+import "./chunk-4QRLPOJ7.js";
+import "./chunk-B4EED2RF.js";
+import "./chunk-EFHLQXG6.js";
+import "./chunk-Y5E2WNWB.js";
+import "./chunk-S57AMKLX.js";
+import "./chunk-ZVVMGPBJ.js";
+export {
+  buildStems,
+  storeMaintenanceCommands,
+  storeSummary
+};

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.9.0";
+export declare const VERSION = "0.10.0";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,UAAU,CAAA"}
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,WAAW,CAAA"}

package/dist/version.js

@@ -1,2 +1,2 @@
-export const VERSION = "0.9.0";
+export const VERSION = "0.10.0";
 //# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -1 +1 @@
-{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAA"}
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAA"}

package/docs/commands.md

@@ -29,8 +29,8 @@ lists the profiles on this computer.
 | `--full` | found items with their whole text and every provider field. |
 | `--dry-run` | preview parsed arguments and permissions before running the action. |
 | `--yes` | go ahead without the question an ask level puts before a write. |
-| `--record` | keep this run, with the command as typed and secrets hidden; record_input false leaves the typed words out. |
-| `--no-record` | do not keep it, whatever the configuration says. |
+| `--record` | keep this run even where the config says record false; record_input false leaves the typed words out. |
+| `--no-record` | do not keep this run, even if it fails. |
 
 ## `clidev commands`
 
@@ -70,23 +70,19 @@ the instructions an agent is given for this tool
 
 ### `clidev skill show`
 
-print SKILL.md — `clidev skill install` puts it where Claude Code, Codex and Gemini CLI look for it; --for prints the copy already there
+print SKILL.md — `clidev skill install` puts it where Claude Code, Codex, Gemini CLI and OpenClaw look for it, and where Hermes does on request; --for prints the copy already there
 
 ```sh
-clidev skill show [name] [options]
+clidev skill show [options]
 ```
 
-| Argument | | What it is |
-|---|---|---|
-| `name` | optional | one of the skills shipped for a task: follow-ups, link-conversations. |
-
 | Option | What it does |
 |---|---|
 | `--for <agents>` | print the copy installed for these agents instead of this version's. One of: `claude`, `agents`. |
 
 **Returns:** print the tool's instructions for AI agents
 
-**Example:** `clidev skill show`, `clidev skill show follow-ups`
+**Example:** `clidev skill show`
 
 ### `clidev skill install`
 
@@ -255,7 +251,7 @@ clidev config set <setting> <value> [options]
 
 | Argument | | What it is |
 |---|---|---|
-| `setting` | required | one of: limit, timeout_ms, color, record, record_input, keep_runs_for_days, permissions, sends_per_hour, requests_per_minute, transcribe_with, speech_model, search_catch_up, picture_search, search_reranker, embedding_provider, embedding_model, embedding_base_url, embedding_dims, models, read_other_bots, update_check, skill_hint, search_stemmers.cyrillic, search_stemmers.latin, phone_countries, task_categories.<name>, task_agent_close, task_agent_close_min, task_first_pass_per_chat, account_groups.<name>. |
+| `setting` | required | one of: limit, timeout_ms, color, record, record_input, keep_runs_for_days, keep_successful_runs_for_days, runs_size_limit_mb, permissions, requests_per_minute, speech_model, picture_search, search_reranker, embedding_provider, embedding_model, embedding_base_url, embedding_dims, models, update_check, skill_hint, search_stemmers.cyrillic, search_stemmers.latin. |
 | `value` | required | a number, true or false; for a group tg:work,max:Alice,email:me@x. |
 
 | Option | What it does |
@@ -280,7 +276,7 @@ clidev config unset <setting> [options]
 
 | Argument | | What it is |
 |---|---|---|
-| `setting` | required | one of: limit, timeout_ms, color, record, record_input, keep_runs_for_days, permissions, sends_per_hour, requests_per_minute, transcribe_with, speech_model, search_catch_up, picture_search, search_reranker, embedding_provider, embedding_model, embedding_base_url, embedding_dims, models, read_other_bots, update_check, skill_hint, search_stemmers.cyrillic, search_stemmers.latin, phone_countries, task_categories.<name>, task_agent_close, task_agent_close_min, task_first_pass_per_chat, account_groups.<name>. |
+| `setting` | required | one of: limit, timeout_ms, color, record, record_input, keep_runs_for_days, keep_successful_runs_for_days, runs_size_limit_mb, permissions, requests_per_minute, speech_model, picture_search, search_reranker, embedding_provider, embedding_model, embedding_base_url, embedding_dims, models, update_check, skill_hint, search_stemmers.cyrillic, search_stemmers.latin. |
 
 | Option | What it does |
 |---|---|
@@ -313,7 +309,7 @@ clidev runs list [query] [options]
 | `--limit <n>` | how many to show. Default: `20`. |
 | `--page <n>` | which page, starting at 1. Default: `1`. |
 
-**Returns:** run — run_id, command, started_at, status, cli_version, profile, completed_at, requests, and 20 more; every field: clidev commands info runs list
+**Returns:** run — run_id, command, started_at, status, cli_version, profile, completed_at, requests, and 23 more; every field: clidev commands info runs list
 
 **Example:** `clidev personal runs list --limit 10`
 
@@ -333,7 +329,7 @@ clidev runs show <run-id> [options]
 |---|---|
 | `--problems` | only failed responses, warnings and crashes. |
 
-**Returns:** run details — run_id, command, started_at, status, cli_version, directory, event_count, events, and 19 more; every field: clidev commands info runs show
+**Returns:** run details — run_id, command, started_at, status, cli_version, directory, event_count, events, and 22 more; every field: clidev commands info runs show
 
 **Example:** `clidev personal runs show run-101`
 

package/docs/dev/TESTING.md

@@ -20,3 +20,11 @@ How the tests run, and what they never touch. The rules are the handbook's
   [drive-cli does](https://github.com/WireCatLabs/drive-cli/blob/150b105569a98fbd0d4b66349305ad84128adfda/package.json#L37), and remove the skip.
 - `pnpm smoke` installs the packed package into a temporary folder and runs it offline.
 - `pnpm audit:commands` audits the command tree beside the latest published WireCat CLIs.
+
+## The bundle a user installs
+
+`pnpm build` compiles `src/` with `tsc`, then cli-base's `cli-dev bundle`
+([WC-LAY-10](https://github.com/WireCatLabs/cli-base/blob/main/docs/standards/layout.md))
+bundles `dist/bin/clidev.js` into `dist/bundle/` and makes the bin a loader. The vitest suite runs
+against `src/`, so `scripts/smoke-bundle.ts` is the proof the bundle works: `pnpm smoke:node` runs it
+under Node and `pnpm smoke:bun` under Bun, both in CI.

package/docs/dev/reference-clis.md

@@ -7,13 +7,14 @@ the first question of the [design interview](skills/design-interview/SKILL.md):
 | --- | --- |
 | messenger | [whatsapp-cli](https://github.com/WireCatLabs/whatsapp-cli), then [tg-cli](https://github.com/WireCatLabs/tg-cli) and [max-cli](https://github.com/WireCatLabs/max-cli) |
 | files and documents | [drive-cli](https://github.com/WireCatLabs/drive-cli) |
+| calendar | [gcal-cli](https://github.com/WireCatLabs/gcal-cli) |
 | meetings | [zoom-cli](https://github.com/WireCatLabs/zoom-cli) |
 | notes | [cli-memo](https://github.com/WireCatLabs/cli-memo) |
-| mail, calendar, other | none of its own yet: pick the nearest one with the owner. cli-memo [imports mail](https://github.com/WireCatLabs/cli-memo/blob/c2d21254ab360aed7149a3250d17e879283aa603/docs/mail.md) |
+| mail, other | none of its own yet: pick the nearest one with the owner. cli-memo [imports mail](https://github.com/WireCatLabs/cli-memo/blob/c2d21254ab360aed7149a3250d17e879283aa603/docs/mail.md) |
 
 A messenger CLI sets `messenger: true` in `src/identity.ts`, and `new --category messenger` writes it. Every other
 category keeps the template's `messenger: false`, so the shared help and `commands` do not speak of chats, messages
-and senders. `config` still lists cli-core's messenger settings, such as `sends_per_hour` and `read_other_bots`.
+and senders, and `config` lists none of cli-core's messenger settings.
 
 cli-core keeps a provider registry (WC-ARCH-21). A CLI whose provider is not built into cli-core writes its entry on
 every run that opens the shared store: `await store.accounts.registerProvider({ name, kind, aliases, command })`, on the
@@ -21,10 +22,11 @@ store that `openStore` from `@wirecat/cli-core/store` returns
 ([`AccountsStore`](https://github.com/WireCatLabs/cli-core/blob/185718d3212cda9bb026e09809760979fe31a1e6/src/store/accounts.ts#L40-L41),
 cli-core 0.459.0). `@wirecat/cli-core/store` does not export a `registerProvider` function. `kind` is one of
 `messages`, `mail`, `notes`, `documents`, `meetings` or `events`. Until the CLI has run once on a computer, `search`
-there leaves its accounts out and lists them under `skipped`. Of the reference CLIs, none makes this call: cli-core
-already knows their providers, from its
+there leaves its accounts out and lists them under `skipped`. Of the reference CLIs, only gcal-cli makes this call: cli-core
+already knows the others' providers, from its
 [seed list](https://github.com/WireCatLabs/cli-core/blob/185718d3212cda9bb026e09809760979fe31a1e6/src/domain/providers.ts#L17-L29)
 and, for Drive, its
 [document providers](https://github.com/WireCatLabs/cli-core/blob/185718d3212cda9bb026e09809760979fe31a1e6/src/domain/providers.ts#L50).
-[gcal-cli](https://github.com/WireCatLabs/gcal-cli/blob/14e27c45e6dc204cde8adcd9e4fa6aa069745335/src/store.ts) does. The skeleton opens no store and
+[gcal-cli](https://github.com/WireCatLabs/gcal-cli/blob/14e27c45e6dc204cde8adcd9e4fa6aa069745335/src/store.ts) registers
+its own. The skeleton opens no store and
 has no provider, so it registers nothing; the call comes with the CLI's first store code.

package/docs/dev/skills/release/SKILL.md

@@ -1,13 +1,13 @@
 ---
 name: release
-description: Prepare a release of this CLI for the owner to publish — run release:check, write the changelog under the handbook's headings, check the docs against what changed, raise the version in a pull request; the owner runs bin/release. Use when asked to release, prepare a release, cut a version, «выпуск», «выпустить версию».
+description: Release this CLI — run release:check, write the changelog under the handbook's headings, check the docs against what changed, raise the version in a pull request, merge it and publish with bin/release from GitHub Actions. Use when asked to release, prepare a release, cut a version, «выпуск», «выпустить версию».
 ---
 
 # Release
 
 The rules are the handbook's [Releases page](../../../../node_modules/@wirecat/cli-base/docs/standards/releases.md)
-(`WC-REL-<n>`), which wins over this skill. An agent prepares the release; the owner merges the release pull request
-and runs `bin/release`.
+(`WC-REL-<n>`), which wins over this skill. An agent prepares the release, merges the release pull request and runs
+`bin/release`, which publishes from GitHub Actions. Only the first release is the owner's, from this computer.
 
 1. **What changed.** In a worktree off `origin/main`: `git log --oneline "$(git describe --tags --abbrev=0 origin/main)..origin/main"`. The
    `docs/commands.md` diff shows what a cli-core or cli-base release changed in the commands.
@@ -24,10 +24,13 @@ and runs `bin/release`.
    before `1.0.0` this narrows `WC-REL-7`: a section with `Changed — may break callers` or `Removed` raises the minor
    (`0.1.8` to `0.2.0`), and so does one with `Added`; only a section of `Fixed`, `Security` or docs raises the patch.
    From `1.0.0`, a breaking change raises the major. `pnpm version:check` refuses a dated section whose number is
-   raised less than its headings need. Set the next version in `package.json`, run `pnpm version:sync`, date the
+   raised less than its headings need, and when `bin/release` moves to the next free number on npm it raises that
+   number to the level the headings need. Set the next version in `package.json`, run `pnpm version:sync`, date the
    section as `## <version> — DD.MM.YYYY`, run `pnpm release:check` again, and open the pull request
    `chore(release): <version>`.
-7. **The owner** merges it and runs `bin/release` on a clean `main`. `bin/release --local` publishes from this
-   computer when GitHub Actions cannot, with `NPM_TOKEN`, the npm token in the keyring, or the owner's own npm login.
+7. **The publish.** Merge it when its checks pass, then run `bin/release` on a clean `main`: it starts
+   `release.yml` and follows it (`WC-REL-11`). A messenger CLI also needs the owner's signed release report
+   (`WC-REL-10`). Never `bin/release --local`: that is the owner's, for the first release before npm trusts
+   `release.yml`, with `NPM_TOKEN`, the npm token in the keyring, or the owner's own npm login.
    The keyring is read only when `NPM_KEYRING_ACCOUNT` names the account the token is stored under (service `npm`);
    there is no default account. When that lookup fails, `bin/release` stops; it does not fall back to the npm login.

package/docs/dev/skills/release/fresh-audit.md

@@ -9,6 +9,10 @@ You audit a WireCat CLI repository, in the current folder. Use only three source
 `node_modules/@wirecat/cli-base/docs/standards/README.md`, the repository itself, and the cli-base workflow files its
 own workflows pin (WC-CI-8). Do not read plans, journals or earlier reviews. Run `pnpm install` first if `node_modules` is missing.
 
+Never use the owner's accounts. Do not sign in, and run the built CLI only with every config, state and cache folder
+moved to a temporary folder and `DBUS_SESSION_BUS_ADDRESS=disabled:`, so it cannot reach the system keyring (removing
+the variable is not enough). Run no command that writes to a service: no `--yes`, no `api` call that changes data.
+
 Check the repository against every handbook page that applies to it: the code, the docs, the configs and the
 workflows. You may run the package scripts. Change nothing.
 

package/kit/dist/new.js

@@ -10,6 +10,7 @@ const run = promisify(execFile);
 const REFERENCES = {
     messenger: ["whatsapp-cli", "tg-cli", "max-cli"],
     files: ["drive-cli"],
+    calendar: ["gcal-cli"],
     meetings: ["zoom-cli"],
     notes: ["cli-memo"],
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wirecat/cli-template",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "Start a new WireCat CLI: a working skeleton on cli-base and cli-core, copied by new and kept current by upgrade",
   "license": "Apache-2.0",
   "author": "Viacheslav Ptsarev",
@@ -50,7 +50,7 @@
     "gitignore"
   ],
   "scripts": {
-    "build": "tsc --build --force && pnpm kit:build",
+    "build": "tsc --build --force && cli-dev bundle --bin dist/bin/clidev.js && pnpm kit:build",
     "typecheck": "tsc --build --force --emitDeclarationOnly && tsc -p tsconfig.test.json && tsc -p tsconfig.scripts.json && pnpm kit:typecheck",
     "lint": "biome check .",
     "lint:fix": "biome check --write .",
@@ -61,7 +61,8 @@
     "generate": "pnpm build && node --experimental-strip-types scripts/commands.ts",
     "generate:check": "pnpm build && node --experimental-strip-types scripts/commands.ts --check",
     "smoke": "node --experimental-strip-types scripts/smoke.ts",
-    "smoke:bun": "bun scripts/smoke.ts",
+    "smoke:bun": "bun scripts/smoke.ts && bun scripts/smoke-bundle.ts",
+    "smoke:node": "node --experimental-strip-types scripts/smoke-bundle.ts",
     "package:check": "pnpm smoke",
     "docs:check": "cli-dev docs-check --rules scripts/docs-rules.ts --pages && pnpm docs:spell && rumdl check --config config/wirecat/rumdl.toml README.md SECURITY.md CHANGELOG.md CLAUDE.md AGENTS.md docs/*.md docs/dev/*.md && pnpm docs:lint && pnpm kit:docs",
     "docs:lint": "markdownlint-cli2",
@@ -84,8 +85,8 @@
   },
   "dependencies": {
     "@modelcontextprotocol/server": "2.4.0",
-    "@wirecat/cli-base": "0.63.0",
-    "@wirecat/cli-core": "0.463.0",
+    "@wirecat/cli-base": "0.65.0",
+    "@wirecat/cli-core": "0.469.0",
     "commander": "15.0.0"
   },
   "devDependencies": {
@@ -98,6 +99,7 @@
     "@vitest/coverage-v8": "5.0.5",
     "@wirecat/cli-testing": "0.5.3",
     "cspell": "10.4.0",
+    "esbuild": "0.28.2",
     "lefthook": "2.2.2",
     "markdownlint-cli2": "0.24.0",
     "rumdl": "0.3.0",

package/scripts/audit.sh

@@ -11,12 +11,13 @@ trap 'rm -rf "$scratch"' EXIT
 export HOME="$scratch/home" MESSAGING_STORE="$scratch/store" WIRECAT_STATE_DIR="$scratch/state"
 mkdir -p "$HOME"
 npm install -g --prefix "$scratch/prefix" --ignore-scripts --no-audit --no-fund --loglevel error \
-  @wirecat/tg-cli @wirecat/max-cli @wirecat/whatsapp-cli @wirecat/cli-memo @wirecat/drive-cli @wirecat/zoom-cli
+  @wirecat/tg-cli @wirecat/max-cli @wirecat/whatsapp-cli @wirecat/cli-memo @wirecat/drive-cli @wirecat/zoom-cli \
+  @wirecat/gcal-cli
 bin="$scratch/prefix/bin"
 others=()
 # A groups file replaces cli-base's PARITY_GROUPS. The template keeps one because it is in no group of cli-base's.
 [ -f "$root/config/parity-groups.json" ] && others+=(--groups "$root/config/parity-groups.json")
-for cli in tg max wa memo drive zm; do
+for cli in tg max wa memo drive zm gcal; do
   [ "$cli" = "$command" ] || others+=(--cli "$bin/$cli")
 done
 "$root/node_modules/.bin/cli-dev" audit --cli "$root/dist/bin/$command.js" "${others[@]}" --for "$command" \

package/scripts/smoke-bundle.ts

@@ -0,0 +1,63 @@
+/**
+ * The published bin is a loader for `dist/bundle/` (cli-base's `cli-dev bundle`, WC-LAY-10). This runs it, with
+ * directories of its own, under Node (`pnpm smoke:node`) and Bun (`pnpm smoke:bun`): the vitest suite runs against
+ * `src/`, so this is the proof the bundle a user installs works.
+ *
+ *   pnpm build && pnpm smoke:node
+ */
+import { spawnSync } from "node:child_process"
+import { existsSync, mkdtempSync, readFileSync, rmSync } from "node:fs"
+import { tmpdir } from "node:os"
+import { join } from "node:path"
+
+const COMMAND = "clidev"
+const PREFIX = "CLIDEV"
+
+const runtime = typeof (globalThis as { Bun?: unknown }).Bun === "undefined" ? "node" : "bun"
+const failures: string[] = []
+const check = (what: string, condition: boolean) => {
+  if (!condition) failures.push(what)
+}
+
+// Overridden directories also move the keyring entry, so nothing here reads the owner's accounts or store.
+const isolated = mkdtempSync(join(tmpdir(), `${COMMAND}-bundle-smoke-`))
+const run = (args: string[], env: Record<string, string> = {}) =>
+  spawnSync(process.execPath, [`dist/bin/${COMMAND}.js`, ...args], {
+    encoding: "utf8",
+    env: {
+      ...process.env,
+      [`${PREFIX}_CONFIG_DIR`]: join(isolated, "config"),
+      [`${PREFIX}_STATE_DIR`]: join(isolated, "state"),
+      [`${PREFIX}_CACHE_DIR`]: join(isolated, "cache"),
+      [`${PREFIX}_NO_UPDATE_CHECK`]: "1",
+      MESSAGING_STORE: join(isolated, "store.db"),
+      ...env,
+    },
+  })
+
+const loader = readFileSync(`dist/bin/${COMMAND}.js`, "utf8")
+check("the bin starts the bundle", loader.includes(`import("../bundle/${COMMAND}.js")`))
+const preloaded = [...loader.matchAll(/"\.\.\/bundle\/([^"]+)"/g)].map(([, chunk]) => chunk ?? "")
+check(
+  "a server preloads only chunks the bundle has",
+  preloaded.length > 1 && preloaded.every((chunk) => existsSync(join("dist/bundle", chunk))),
+)
+
+const version = run(["--version"])
+check("--version prints a version and nothing else", /^\d+\.\d+\.\d+\n$/.test(version.stdout) && version.stderr === "")
+const recorded = run(["--version"], { [`${PREFIX}_TEST_ARGV_LOG`]: join(isolated, "argv.jsonl") })
+check("the loader's --version is the bundle's", recorded.stdout === version.stdout)
+check("--help names the command", run(["--help"]).stdout.includes(`Usage: ${COMMAND}`))
+check("skill show prints the SKILL.md the package ships", run(["skill", "show"]).stdout.startsWith("---"))
+check(
+  "doctor finds the document readers",
+  run(["doctor", "--json"]).stdout.includes('"files":{"checked":true,"ok":true'),
+)
+rmSync(isolated, { recursive: true, force: true })
+
+if (failures.length > 0) {
+  console.error(`${COMMAND} bundle smoke FAILED under ${runtime}:`)
+  for (const failure of failures) console.error(`  - ${failure}`)
+  process.exit(1)
+}
+console.log(`${COMMAND} bundle smoke passed under ${runtime}`)

package/scripts/version-level.test.ts

@@ -1,5 +1,5 @@
 import { expect, it } from "vitest"
-import { versionLevelProblem } from "./version-level.js"
+import { nextVersion, versionLevelProblem } from "./version-level.js"
 
 const changelog = (version: string, headings: string[], previous = "0.1.8") =>
   [`## ${version} — 26.10.2026`, ...headings.flatMap((h) => [`### ${h}`, "- x"]), `## ${previous} — 25.10.2026`].join(
@@ -28,3 +28,19 @@ it("refuses a patch release that adds something", () => {
 it("checks nothing while the top section is Unreleased", () => {
   expect(versionLevelProblem("## Unreleased\n\n### Removed\n\n- x\n\n## 0.1.8 — 25.10.2026\n")).toBeUndefined()
 })
+
+const unreleased = (headings: string[], previous = "0.1.1") =>
+  ["## Unreleased", ...headings.flatMap((h) => [`### ${h}`, "- x"]), `## ${previous} — 29.10.2026`].join("\n")
+
+it.each([
+  [["Fixed"], "0.1.2", "0.1.2"],
+  [["Added"], "0.1.2", "0.2.0"],
+  [["Removed"], "0.1.2", "0.2.0"],
+  [["Added"], "0.3.1", "0.3.1"],
+])("raises the next free number for %j from %s to %s", (headings, next, expected) => {
+  expect(nextVersion(unreleased(headings), next)).toBe(expected)
+})
+
+it("raises a 1.x release that may break callers to the next major", () => {
+  expect(nextVersion(unreleased(["Changed — may break callers"], "1.4.2"), "1.4.3")).toBe("2.0.0")
+})

package/scripts/version-level.ts

@@ -21,13 +21,35 @@ const needed = (version: string, section: string): Level => {
   return /^### Added$/m.test(section) ? "minor" : "patch"
 }
 
+const raise = (from: string, level: Level) => {
+  const [a = 0, b = 0, c = 0] = parse(from)
+  if (level === "major") return `${a + 1}.0.0`
+  return level === "minor" ? `${a}.${b + 1}.0` : `${a}.${b}.${c + 1}`
+}
+
+const later = (x: string, y: string) => {
+  const [a, b] = [parse(x), parse(y)]
+  const i = a.findIndex((n, k) => n !== b[k])
+  return i === -1 || (a[i] ?? 0) > (b[i] ?? 0) ? x : y
+}
+
+const sections = (changelog: string) => {
+  const [top, below] = [...changelog.matchAll(/^## (\S+).*$/gm)]
+  if (!top || !below?.[1]) return undefined
+  return { version: top[1], previous: below[1], section: changelog.slice(top.index, below.index) }
+}
+
+// The next free number on npm is a patch; the top section may need a minor or major over the version below it.
+export const nextVersion = (changelog: string, next: string): string => {
+  const parts = sections(changelog)
+  if (!parts) return next
+  return later(next, raise(parts.previous, needed(next, parts.section)))
+}
+
 export const versionLevelProblem = (changelog: string): string | undefined => {
-  const headings = [...changelog.matchAll(/^## (\S+).*$/gm)]
-  const [top, below] = headings
-  const version = top?.[1]
-  const previous = below?.[1]
-  if (!top || !below || !version || !previous || !/^\d+\.\d+\.\d+$/.test(version)) return undefined
-  const section = changelog.slice(top.index, below.index)
+  const parts = sections(changelog)
+  if (!parts?.version || !/^\d+\.\d+\.\d+$/.test(parts.version)) return undefined
+  const { version, previous, section } = parts
   const want = needed(version, section)
   const got = raised(previous, version)
   if (LEVELS.indexOf(got) >= LEVELS.indexOf(want)) return undefined
@@ -35,7 +57,13 @@ export const versionLevelProblem = (changelog: string): string | undefined => {
 }
 
 if (process.argv[1] === fileURLToPath(import.meta.url)) {
-  const problem = versionLevelProblem(readFileSync(resolve(import.meta.dirname, "../CHANGELOG.md"), "utf8"))
+  const changelog = readFileSync(resolve(import.meta.dirname, "../CHANGELOG.md"), "utf8")
+  const [flag, next] = process.argv.slice(2)
+  if (flag === "--next" && next) {
+    console.log(nextVersion(changelog, next))
+    process.exit(0)
+  }
+  const problem = versionLevelProblem(changelog)
   if (problem) {
     console.error(`${problem} (docs/dev/skills/release/SKILL.md, step 6)`)
     process.exit(1)