@wirecat/cli-template 0.9.0 → 0.11.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wirecat/cli-template",
-  "version": "0.9.0",
+  "version": "0.11.0",
   "description": "Start a new WireCat CLI: a working skeleton on cli-base and cli-core, copied by new and kept current by upgrade",
   "license": "Apache-2.0",
   "author": "Viacheslav Ptsarev",
@@ -50,18 +50,20 @@
     "gitignore"
   ],
   "scripts": {
-    "build": "tsc --build --force && pnpm kit:build",
+    "build": "tsc --build --force && cli-dev bundle --bin dist/bin/clidev.js && pnpm kit:build",
     "typecheck": "tsc --build --force --emitDeclarationOnly && tsc -p tsconfig.test.json && tsc -p tsconfig.scripts.json && pnpm kit:typecheck",
     "lint": "biome check .",
     "lint:fix": "biome check --write .",
     "test": "vitest run",
     "test:coverage": "vitest run --coverage",
+    "test:slow": "vitest run --reporter=json --outputFile=coverage/tests.json >/dev/null; cli-dev slow-tests",
     "test:matrix": "vitest run >/dev/null && pnpm build >/dev/null && pnpm test:matrix:check",
     "test:matrix:check": "cli-dev test-matrix --program scripts/command-program.ts --untested scripts/test-matrix-untested.ts --name clidev --check && git diff --exit-code -- docs/dev/test-matrix.md",
     "generate": "pnpm build && node --experimental-strip-types scripts/commands.ts",
     "generate:check": "pnpm build && node --experimental-strip-types scripts/commands.ts --check",
     "smoke": "node --experimental-strip-types scripts/smoke.ts",
-    "smoke:bun": "bun scripts/smoke.ts",
+    "smoke:bun": "bun scripts/smoke.ts && bun scripts/smoke-bundle.ts",
+    "smoke:node": "node --experimental-strip-types scripts/smoke-bundle.ts",
     "package:check": "pnpm smoke",
     "docs:check": "cli-dev docs-check --rules scripts/docs-rules.ts --pages && pnpm docs:spell && rumdl check --config config/wirecat/rumdl.toml README.md SECURITY.md CHANGELOG.md CLAUDE.md AGENTS.md docs/*.md docs/dev/*.md && pnpm docs:lint && pnpm kit:docs",
     "docs:lint": "markdownlint-cli2",
@@ -84,8 +86,8 @@
   },
   "dependencies": {
     "@modelcontextprotocol/server": "2.4.0",
-    "@wirecat/cli-base": "0.63.0",
-    "@wirecat/cli-core": "0.463.0",
+    "@wirecat/cli-base": "0.65.0",
+    "@wirecat/cli-core": "0.495.0",
     "commander": "15.0.0"
   },
   "devDependencies": {
@@ -98,6 +100,7 @@
     "@vitest/coverage-v8": "5.0.5",
     "@wirecat/cli-testing": "0.5.3",
     "cspell": "10.4.0",
+    "esbuild": "0.28.2",
     "lefthook": "2.2.2",
     "markdownlint-cli2": "0.24.0",
     "rumdl": "0.3.0",

package/scripts/audit.sh

@@ -8,18 +8,29 @@ command=$(node --input-type=module -e "import('$root/dist/identity.js').then((m)
 scratch=$(mktemp -d)
 trap 'rm -rf "$scratch"' EXIT
 # A CLI that starts may move the store under HOME; every CLI run here gets a throwaway one.
+# Moved folders do not hide the keyring: it is reached over D-Bus.
 export HOME="$scratch/home" MESSAGING_STORE="$scratch/store" WIRECAT_STATE_DIR="$scratch/state"
+export DBUS_SESSION_BUS_ADDRESS=disabled:
 mkdir -p "$HOME"
 npm install -g --prefix "$scratch/prefix" --ignore-scripts --no-audit --no-fund --loglevel error \
-  @wirecat/tg-cli @wirecat/max-cli @wirecat/whatsapp-cli @wirecat/cli-memo @wirecat/drive-cli @wirecat/zoom-cli
+  @wirecat/tg-cli @wirecat/max-cli @wirecat/whatsapp-cli @wirecat/cli-memo @wirecat/drive-cli @wirecat/zoom-cli \
+  @wirecat/gcal-cli
 bin="$scratch/prefix/bin"
 others=()
 # A groups file replaces cli-base's PARITY_GROUPS. The template keeps one because it is in no group of cli-base's.
 [ -f "$root/config/parity-groups.json" ] && others+=(--groups "$root/config/parity-groups.json")
-for cli in tg max wa memo drive zm; do
+for cli in tg max wa memo drive zm gcal; do
   [ "$cli" = "$command" ] || others+=(--cli "$bin/$cli")
 done
+# This CLI's entity schemas and error reasons, from its own `commands info`, so same-entity-schema and
+# same-error-reason measure it. shared-command-contract needs `--complete`, which wants cli-core's doctor contract.
+node "$root/dist/bin/$command.js" commands info --json >"$scratch/info.json"
+node -e 'const info = JSON.parse(require("fs").readFileSync(process.argv[1], "utf8"))
+require("fs").writeFileSync(process.argv[2], JSON.stringify(info.schemas))
+require("fs").writeFileSync(process.argv[3], JSON.stringify(info.reasons))' \
+  "$scratch/info.json" "$scratch/schemas.json" "$scratch/reasons.json"
 "$root/node_modules/.bin/cli-dev" audit --cli "$root/dist/bin/$command.js" "${others[@]}" --for "$command" \
-  --lint "$command=$root/lint" >"$scratch/scorecard.txt" || { cat "$scratch/scorecard.txt"; exit 1; }
+  --lint "$command=$root/lint" --schemas "$command=$scratch/schemas.json" --reasons "$command=$scratch/reasons.json" \
+  >"$scratch/scorecard.txt" || { cat "$scratch/scorecard.txt"; exit 1; }
 awk -v cli="$command" 'NR == 1 || $1 == cli' "$scratch/scorecard.txt"
 grep -q "^$command  *total " "$scratch/scorecard.txt" || { echo "audit: no scorecard row for $command" >&2; exit 1; }

package/scripts/smoke-bundle.ts

@@ -0,0 +1,64 @@
+/**
+ * The published bin is a loader for `dist/bundle/` (cli-base's `cli-dev bundle`, WC-LAY-10). This runs it, with
+ * directories of its own, under Node (`pnpm smoke:node`) and Bun (`pnpm smoke:bun`): the vitest suite runs against
+ * `src/`, so this is the proof the bundle a user installs works.
+ *
+ *   pnpm build && pnpm smoke:node
+ */
+import { spawnSync } from "node:child_process"
+import { existsSync, mkdtempSync, readFileSync, rmSync } from "node:fs"
+import { tmpdir } from "node:os"
+import { join } from "node:path"
+
+const COMMAND = "clidev"
+const PREFIX = "CLIDEV"
+
+const runtime = "Bun" in globalThis ? "bun" : "node"
+const failures: string[] = []
+const check = (what: string, condition: boolean) => {
+  if (!condition) failures.push(what)
+}
+
+// Overridden directories also move the keyring entry, so nothing here reads the owner's accounts or store.
+const isolated = mkdtempSync(join(tmpdir(), `${COMMAND}-bundle-smoke-`))
+const run = (args: string[], env: Record<string, string> = {}) =>
+  spawnSync(process.execPath, [`dist/bin/${COMMAND}.js`, ...args], {
+    encoding: "utf8",
+    env: {
+      ...process.env,
+      [`${PREFIX}_CONFIG_DIR`]: join(isolated, "config"),
+      [`${PREFIX}_STATE_DIR`]: join(isolated, "state"),
+      [`${PREFIX}_CACHE_DIR`]: join(isolated, "cache"),
+      [`${PREFIX}_NO_UPDATE_CHECK`]: "1",
+      MESSAGING_STORE: join(isolated, "store.db"),
+      DBUS_SESSION_BUS_ADDRESS: "disabled:",
+      ...env,
+    },
+  })
+
+const loader = readFileSync(`dist/bin/${COMMAND}.js`, "utf8")
+check("the bin starts the bundle", loader.includes(`import("../bundle/${COMMAND}.js")`))
+const preloaded = [...loader.matchAll(/"\.\.\/bundle\/([^"]+)"/g)].map(([, chunk]) => chunk ?? "")
+check(
+  "a server preloads only chunks the bundle has",
+  preloaded.length > 1 && preloaded.every((chunk) => existsSync(join("dist/bundle", chunk))),
+)
+
+const version = run(["--version"])
+check("--version prints a version and nothing else", /^\d+\.\d+\.\d+\n$/.test(version.stdout) && version.stderr === "")
+const recorded = run(["--version"], { [`${PREFIX}_TEST_ARGV_LOG`]: join(isolated, "argv.jsonl") })
+check("the loader's --version is the bundle's", recorded.stdout === version.stdout)
+check("--help names the command", run(["--help"]).stdout.includes(`Usage: ${COMMAND}`))
+check("skill show prints the SKILL.md the package ships", run(["skill", "show"]).stdout.startsWith("---"))
+check(
+  "doctor finds the document readers",
+  run(["doctor", "--json"]).stdout.includes('"files":{"checked":true,"ok":true'),
+)
+rmSync(isolated, { recursive: true, force: true })
+
+if (failures.length > 0) {
+  console.error(`${COMMAND} bundle smoke FAILED under ${runtime}:`)
+  for (const failure of failures) console.error(`  - ${failure}`)
+  process.exit(1)
+}
+console.log(`${COMMAND} bundle smoke passed under ${runtime}`)

package/scripts/smoke.ts

@@ -24,6 +24,23 @@ const shipped = files
   .map((entry) => entry.replace(/^\//, ""))
   .map((entry) => (statSync(join(root, entry), { throwIfNoEntry: false })?.isDirectory() ? `${entry}/` : entry))
 assert.deepEqual(packContents(root, ["package.json", ...shipped], "package.json and the paths in its files list")(), [])
+// WC-REL-16. The template's own package ships the skeleton's sources, since `new` copies them.
+const FORBIDDEN = [
+  "src",
+  "scripts",
+  ".github",
+  "bin/release",
+  "config",
+  "lint",
+  "contracts",
+  "docs/dev",
+  "template.json",
+]
+const overlaps = (entry: string, path: string) =>
+  entry === path || entry.startsWith(`${path}/`) || path.startsWith(`${entry}/`)
+const forbidden = shipped.flatMap((entry) => FORBIDDEN.filter((path) => overlaps(entry.replace(/\/$/, ""), path)))
+if (name !== "@wirecat/cli-template")
+  assert.deepEqual(forbidden, [], "package.json's files ships paths WC-REL-16 forbids")
 const temp = mkdtempSync(join(tmpdir(), "clidev-package-"))
 try {
   const userConfig = join(temp, "npm-user-config")
@@ -48,6 +65,7 @@ try {
     ...process.env,
     NODE_OPTIONS: "",
     HOME: temp,
+    DBUS_SESSION_BUS_ADDRESS: "disabled:",
     CLIDEV_CONFIG_DIR: join(temp, "config"),
     CLIDEV_STATE_DIR: join(temp, "state"),
     CLIDEV_CACHE_DIR: join(temp, "cache"),

package/scripts/test-matrix-untested.ts

@@ -29,6 +29,6 @@ export const UNTESTED: { command: string; option?: string; reason: string }[] =
   {
     command: "mcp server stop",
     reason:
-      "starts a detached `mcp serve --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/",
+      "stops the detached server that `mcp server start` wrote a pid file for; cli-core tests mcpServerCommand, and no live scenario starts a server to stop",
   },
 ]

package/scripts/version-level.test.ts

@@ -1,5 +1,5 @@
 import { expect, it } from "vitest"
-import { versionLevelProblem } from "./version-level.js"
+import { nextVersion, versionLevelProblem } from "./version-level.js"
 
 const changelog = (version: string, headings: string[], previous = "0.1.8") =>
   [`## ${version} — 26.10.2026`, ...headings.flatMap((h) => [`### ${h}`, "- x"]), `## ${previous} — 25.10.2026`].join(
@@ -28,3 +28,19 @@ it("refuses a patch release that adds something", () => {
 it("checks nothing while the top section is Unreleased", () => {
   expect(versionLevelProblem("## Unreleased\n\n### Removed\n\n- x\n\n## 0.1.8 — 25.10.2026\n")).toBeUndefined()
 })
+
+const unreleased = (headings: string[], previous = "0.1.1") =>
+  ["## Unreleased", ...headings.flatMap((h) => [`### ${h}`, "- x"]), `## ${previous} — 29.10.2026`].join("\n")
+
+it.each([
+  [["Fixed"], "0.1.2", "0.1.2"],
+  [["Added"], "0.1.2", "0.2.0"],
+  [["Removed"], "0.1.2", "0.2.0"],
+  [["Added"], "0.3.1", "0.3.1"],
+])("raises the next free number for %j from %s to %s", (headings, next, expected) => {
+  expect(nextVersion(unreleased(headings), next)).toBe(expected)
+})
+
+it("raises a 1.x release that may break callers to the next major", () => {
+  expect(nextVersion(unreleased(["Changed — may break callers"], "1.4.2"), "1.4.3")).toBe("2.0.0")
+})

package/scripts/version-level.ts

@@ -21,13 +21,35 @@ const needed = (version: string, section: string): Level => {
   return /^### Added$/m.test(section) ? "minor" : "patch"
 }
 
+const raise = (from: string, level: Level) => {
+  const [a = 0, b = 0, c = 0] = parse(from)
+  if (level === "major") return `${a + 1}.0.0`
+  return level === "minor" ? `${a}.${b + 1}.0` : `${a}.${b}.${c + 1}`
+}
+
+const later = (x: string, y: string) => {
+  const [a, b] = [parse(x), parse(y)]
+  const i = a.findIndex((n, k) => n !== b[k])
+  return i === -1 || (a[i] ?? 0) > (b[i] ?? 0) ? x : y
+}
+
+const sections = (changelog: string) => {
+  const [top, below] = [...changelog.matchAll(/^## (\S+).*$/gm)]
+  if (!top || !below?.[1]) return undefined
+  return { version: top[1], previous: below[1], section: changelog.slice(top.index, below.index) }
+}
+
+// The next free number on npm is a patch; the top section may need a minor or major over the version below it.
+export const nextVersion = (changelog: string, next: string): string => {
+  const parts = sections(changelog)
+  if (!parts) return next
+  return later(next, raise(parts.previous, needed(next, parts.section)))
+}
+
 export const versionLevelProblem = (changelog: string): string | undefined => {
-  const headings = [...changelog.matchAll(/^## (\S+).*$/gm)]
-  const [top, below] = headings
-  const version = top?.[1]
-  const previous = below?.[1]
-  if (!top || !below || !version || !previous || !/^\d+\.\d+\.\d+$/.test(version)) return undefined
-  const section = changelog.slice(top.index, below.index)
+  const parts = sections(changelog)
+  if (!parts?.version || !/^\d+\.\d+\.\d+$/.test(parts.version)) return undefined
+  const { version, previous, section } = parts
   const want = needed(version, section)
   const got = raised(previous, version)
   if (LEVELS.indexOf(got) >= LEVELS.indexOf(want)) return undefined
@@ -35,7 +57,13 @@ export const versionLevelProblem = (changelog: string): string | undefined => {
 }
 
 if (process.argv[1] === fileURLToPath(import.meta.url)) {
-  const problem = versionLevelProblem(readFileSync(resolve(import.meta.dirname, "../CHANGELOG.md"), "utf8"))
+  const changelog = readFileSync(resolve(import.meta.dirname, "../CHANGELOG.md"), "utf8")
+  const [flag, next] = process.argv.slice(2)
+  if (flag === "--next" && next) {
+    console.log(nextVersion(changelog, next))
+    process.exit(0)
+  }
+  const problem = versionLevelProblem(changelog)
   if (problem) {
     console.error(`${problem} (docs/dev/skills/release/SKILL.md, step 6)`)
     process.exit(1)

package/skills/clidev-cli/SKILL.md

@@ -1,6 +1,14 @@
 ---
 name: clidev-cli
 description: Use clidev, a WireCat CLI started from cli-template, from an agent — find a command, run it with the owner's profile, read JSON answers. Use when a task needs clidev. It does not connect to a service yet.
+metadata:
+  openclaw:
+    requires:
+      bins: [clidev]
+    install:
+      - kind: node
+        package: "@wirecat/clidev-cli"
+        bins: [clidev]
 ---
 
 # clidev

package/src/version.ts

@@ -1 +1 @@
-export const VERSION = "0.9.0"
+export const VERSION = "0.11.0"

package/lint/baseline/unknown-verb.json

@@ -1 +0,0 @@
-["mcp revoke", "mcp serve"]