@wirecat/mail-cli 0.4.0 → 0.6.0

package/CHANGELOG.md

@@ -2,6 +2,121 @@
 
 Notable changes to `@wirecat/mail-cli`. One section per version, newest first.
 
+## 0.6.0 — 01.11.2026
+
+### Added
+
+- **`mail <profile> messages export [query] --output <folder>`** writes the original messages of the stored mail that
+  match a query to mbox files (one per folder, mboxrd) or a Maildir++ tree (`--format maildir`), for backup or for mu
+  and notmuch. The store keeps text only, so each message is read from the server again. The folder is private (mode
+  700, files 600); a folder with something in it is refused unless `--resume` goes on with an export or `--replace`
+  writes over files of the same name. `--limit` and `--max-pages` bound a run, which also stops before its deadline;
+  `--resume` skips what the folder holds and cuts back a half-written message.
+- **`mail <profile> stats messages top --by sender|list|domain`** ranks the stored mail by sender, mailing list or
+  sender domain, with unread counts and size.
+- **`mail <profile> messages mark-read|mark-unread|star|unstar <ref…>`** and **`messages update <ref…> --flag <flag>
+  --unflag <flag> [--replace]`** change flags and keywords on the server (read, flagged, answered, draft, `$Junk`, words
+  of your own); a folder that keeps no keywords answers `provider_unavailable`.
+- **`messages move|copy <ref…> --folder <folder|role>`** files mail by folder; on Gmail a move is a label added and
+  `Inbox` taken away, a copy a label added, `--folder archive` only `Inbox` taken away.
+- **`messages delete <ref…>`** moves mail to Trash, never expunges it; `--rules` is memo's envelope cleanup, moved
+  here: envelope mail the rules let go, each decided again, with Gmail's labels and stars read again just before the
+  move, a fresh store backup required and a first run of at most 100; it refuses to run from a schedule.
+- **`messages restore --run <id>`** undoes a change run, last step first: Trash back to where the mail was (on Gmail
+  with its labels), moves back, copies removed, flags as they were. memo's `mail delete` run ids restore here too.
+  Outside Gmail a copy is removed for good by the UID the server gave it, never by a Message-ID search that could find
+  the original.
+- **`folders create|rename|delete`**; `delete` is a preview until `--yes`, and refuses a folder that holds mail, or
+  whose count the server does not give, unless `--allow-dangerous`, which only the owner passes at a terminal.
+- **`rules list|add|remove|apply|export|import`**, moved from memo with the same options: the profile is the mailbox,
+  so there is no account argument; the default import format is `mail`, the file memo's export writes.
+- Every message write takes the messages by `ref` or by `--filter '<query>'` (`--limit`, newest first). A deletion,
+  a `--filter` change and a change of more than 20 messages answer with a preview and the command with `--yes` in
+  `next`; `--dry-run` only previews. The store follows each server change at once: flags, folder and UID, Gmail labels,
+  deletion.
+- **Permissions:** `messages.delete`, `folders.delete` and `messages.bulk` (any change of many) ask; the rest of the
+  changes go ahead. `MAIL_READ_ONLY=1` refuses them all. Each attempt goes into the send journal (cli-core 0.522.0).
+- Error reasons (`mail.no-trash`, `mail.run-unknown`, `mail.archive-unverified`, …) now reach the JSON error.
+- **`mail <profile> drafts list|create|update|delete`** keeps drafts in the mailbox's own Drafts folder, so an agent
+  writes one and the owner checks and sends it from any mail app. `create` takes `--to`, `--cc`, `--bcc`, `--subject`
+  and the text (`-` reads stdin); `--reply-to <ref> [--reply-all]` answers a stored message in its thread. A draft is
+  named by its Message-ID; `update` replaces only what is given and keeps the rest, the thread and the attachments,
+  and moves the old version to Trash; `delete` removes it for good and asks first (`drafts.delete`).
+- **`mail <profile> tags add|remove <tag…> --message <ref> | --chat <ref>`** and **`tags list`** put your own tags on
+  stored mail and conversations. They stay in the local store, in the same tables memo tags with, and never reach the
+  server; `search messages tag:<tag>` finds them. Provider keywords stay `messages update --flag`, Gmail labels
+  `messages move|copy --folder`.
+- **`mail doctor`** says when a change run stopped part way, and when mail a run moved to Gmail's Trash is within five
+  days of Gmail emptying it, with the `messages restore` command for each. memo's doctor said this until the cleanup
+  moved here; memo's own cleanup runs count too. It needs cli-core 0.524.0 (`appDoctorCommand`'s `local` check).
+- **`search messages` asks the mail server too** for mail sync has not read yet: `--backend archive|server|both`
+  (default `both`) and `--server-time` (default 5s), as `tg search messages` has them. Gmail is searched once in All
+  Mail with its own syntax (X-GM-RAW); other servers with IMAP `UID SEARCH` in INBOX, Sent and Archive, or the
+  profile's `folders`. The server gets the words, `from:`, `to:`, `cc:`, `subject:`, `body:`, `is:` and `date:`; what
+  it finds is stored, and the same query then runs on the store, so the answer means the same on both backends and
+  each hit says `found_in`. The mailbox is opened read only. `permissions.messages.server-search=deny` turns it off;
+  `--offline` and `MAIL_READ_ONLY` keep to the store (cli-core 0.525.0).
+- **`mail <profile> messages send --to … --subject … [text]`** sends over the provider's SMTP server with the same
+  app password; the text comes from stdin when left out. `--cc`, `--bcc`, `--file <path>` (repeat; a named path, never
+  a pattern; credential and WireCat folders refused without `--allow-any-file`, which an agent over MCP never gets). `--reply-to <ref> [--reply-all]`
+  answers a stored email: `In-Reply-To`, `References`, `Re:`, the original quoted, `\Answered` set on it.
+- **`messages forward <ref> --to … [text]`** sends the original attached whole (`message/rfc822`), `Fwd:` before its
+  subject, and sets `$Forwarded` on it.
+- **Sent and the store after a send.** Gmail files SMTP mail in Sent itself; elsewhere the copy (with its Bcc line) is
+  appended to Sent unless Sent already holds that Message-ID. The message is then read into the store as `sync` reads it,
+  so it has the server's id and never a second row.
+- **Safety for sends.** Mail to anyone but the owner asks first: new key `messages.send.others`, default `ask`, which
+  the owner may set to `allow`. The question shows from, to, cc, bcc, subject, each attachment and the first
+  lines. `MAIL_READ_ONLY=1`, `readonly` and `deny` refuse; every attempt goes into the send journal without addresses,
+  subject or text; each recipient counts toward `sends_per_hour`; sends are spaced with the shared request pace
+  (cli-core 0.523.0). An answer lost after the message left is `outcome_unknown`; `--operation-id` retries it and sends
+  nothing when Sent already has it. `--dry-run` builds the message and sends nothing. A text that says "attached" with
+  no file warns.
+- **`drafts send <id>`** sends a saved draft through the same path as `messages send` (its keys and question, the
+  hourly limit, the journal, the Sent copy), then removes it from Drafts.
+- **`attachments list <ref>`** and **`attachments download <ref> [number…] --output-dir <dir> [--replace]`**: the
+  files of one email, read from the server and numbered as the store numbers them, saved readable only by you under
+  their plain names; an existing file is kept unless `--replace`.
+- **Profile keys `smtp_host`, `smtp_port`, `smtp_security`** name the submission server for a provider the built-in
+  list does not know. The built-in servers were checked against each provider's help page; Yandex's is now
+  `smtp.yandex.ru:465`.
+
+### Changed — may break callers
+
+- **An agent over MCP mails only the owner.** `messages send`, `messages forward` and `drafts send` to anyone else
+  answer `permission_error` over MCP until the owner sets `permissions.messages.send.others` in the config (`ask` or
+  `allow`); an `mcp serve --permission` cannot open it. At a terminal it still asks.
+- `mail` is no longer read-only: an MCP client with `--allow-writes` can change the mailbox through the `write` tool,
+  within the profile's permissions.
+- **On a server with OBJECTID (Fastmail, Cyrus) an email's id is the hash of its Message-ID, as memo makes it**, not
+  the server's EMAILID, and its thread comes from References. Ids come from cli-core's `mailIds`, which memo uses too,
+  so the two never store one email twice. Gmail keeps its own ids; Yandex and Mail.ru ids do not change.
+- **An agent cannot change where the app password goes, nor who it may mail.** Over MCP, `config set` and
+  `config unset` refuse `address`, `login`, `imap_host`, `imap_port`, `imap_security`, `smtp_host`, `smtp_port`,
+  `smtp_security`, `auth` and `permissions.messages.send.others` even with `mcp.authority`; the owner changes them in a
+  terminal (cli-core 0.530.0).
+
+### Fixed
+
+- **Built on cli-core 0.530.0 and cli-base 0.71.0.** The command lint now knows `drafts`, `--cc`, `--bcc` and
+  `--reply-all`, and accepts `--to <address>` and `--subject <text>` beside the messengers' `<chat>` and `<ref>`, so
+  thirteen lint overrides are gone and the budget is 11. The audit compares mail in cli-base's `mail-shared` group and
+  runs without `--complete`. cli-core also stops hiding a locked store when it scores senders.
+- **Gmail labels are decoded once.** imapflow already decodes them, and mail decoded `R&D-team` again into `Rteam`.
+- **`sync` says when it leaves stored rules out**: `rules_unread` and `rules_unread_why` (such as `condition label`)
+  in the answer and a `mail.rules-unreadable` issue, when the rules hold a condition this mail does not know.
+- **`sync --rescan` fails on a locked or broken store** instead of reporting the rethreading done.
+- **An attachment's file name is cleaned as cli-core's downloads clean it**: direction and zero-width characters
+  that disguise an extension go, and on Windows a reserved name (CON, NUL, …) falls back to `attachment-<n>`.
+
+## 0.5.0 — 01.11.2026
+
+### Fixed
+
+- **A scheduled sync runs from its timer.** The timer starts `mail schedule exec <file>` with no profile, and mail refused it
+  with "name a profile" before reading the schedule, so no timed run worked in 0.3.0 and 0.4.0. `schedule exec` now needs
+  no profile; the schedule's own environment names it (cli-core 0.521.0).
+
 ## 0.4.0 — 01.11.2026
 
 ### Added

package/README.md

@@ -1,8 +1,8 @@
 # mail CLI for people, scripts and agents
 
 `mail` copies your mailbox into the shared WireCat store on your computer, so you and your AI agents can search it
-and read it there. It reads over IMAP and never changes the mailbox: it does not send, move, flag or delete mail.
-It searches and reads what it stored, offline.
+and read it there, offline. It also organises the mailbox on the server: flags, folders, and deletion to Trash, each
+change one you can undo. It keeps drafts, and sends, replies and forwards over SMTP.
 
 [Documentation](https://github.com/WireCatLabs/mail-cli/blob/main/docs/index.md) · [Roadmap](https://github.com/WireCatLabs/mail-cli/blob/main/docs/roadmap.md) · [WireCat](https://wirecat.dev)
 
@@ -40,12 +40,32 @@ You need Node.js 22.16 or a later 22.x, or 24 or later. To try it with no instal
   newest first, and skips what is already stored. `--since-time 2026-10-01` reads from local midnight of that day.
 - **Search and read the stored mail.** `search messages 'from:ann@example.com has:attachment date>30d'` uses the
   query language of every WireCat CLI, with `list:` for mailing lists; `messages show` gives an email whole with its
-  attachments' text, `conversations list|show` its threads. It reads the profile's mailbox only and asks no server.
+  attachments' text, `conversations list|show` its threads. It searches the profile's mailbox only; it also asks the mail server
+  for mail `sync` has not read yet, and `--backend archive` keeps to the store.
   [memo](https://github.com/WireCatLabs/cli-memo) searches every mailbox together with your messages and notes.
+- **Export to mbox or Maildir.** `messages export 'from:ann@example.com' --output ~/mail-backup` reads the original
+  messages from the server into a private folder, one mbox file per folder or a Maildir++ tree for mu and notmuch;
+  it can be resumed and bounded. `stats messages top --by list` ranks senders, lists and domains.
 - **Sync a big mailbox in parts.** A run stops before its deadline, keeps what it read and tells you to run it again;
   `status` shows how far it is.
 - **Check a mailbox.** `account check` shows what the server supports, `folders list` the folders with their role and
   message counts.
+- **Organise it on the server.** `messages mark-read|mark-unread|star|unstar|update` change flags and keywords,
+  `messages move|copy --folder` file mail (by label on Gmail), `messages delete` moves it to Trash, and
+  `messages restore --run <id>` undoes any of them. `folders create|rename|delete` look after the folders. A search
+  shows each change at once.
+- **Draft for the owner.** `drafts create|update|list|delete` keep drafts in the mailbox's Drafts folder, replies in
+  their thread; the owner sends them from any mail app, or with `drafts send`. `drafts update` puts the old version
+  in Trash.
+- **Tag your own way.** `tags add|remove|list` put local tags on stored mail, shared with memo; `search messages
+  tag:<tag>` finds them.
+- **Send, reply and forward.** `messages send --to … --subject …` sends over the provider's SMTP server with the same
+  app password, `--reply-to <ref>` answers a stored email with its quote, `messages forward <ref>` sends it on whole.
+  Mail to anyone but you asks first, and an agent over MCP mails only you until you allow more; Sent gets its copy and the store reads it at once. `attachments list|download`
+  save the files of one email.
+- **Decide what to keep.** `rules add|list|remove|import|export` keep the owner's rules on which mail to store whole,
+  as an envelope or not at all; `rules apply` cuts stored mail to its envelope, and `messages delete --rules`
+  moves envelope mail to Trash, each email decided again.
 
 ## For AI agents
 
@@ -55,9 +75,10 @@ mail ya mcp add claude-code --allow-writes # or codex: adds this profile's MCP s
 mail ya mcp config                         # the entry for Claude Desktop, Cursor and others
 ```
 
-`mcp add` stops until you pass `--allow-writes`, because the server's `write` tool runs commands that change local
-settings, such as `config set` and `skill install`. `sync` runs through `read`: it writes only into the store, never
-into the mailbox. Check the profile's permissions first.
+`mcp add` stops until you pass `--allow-writes`, because the server's `write` tool runs commands that change the
+mailbox (`messages move`, `messages delete`, `folders create`) and local settings (`config set`, `skill install`).
+`sync` runs through `read`: it writes only into the store. Check the profile's permissions first: a deletion, or a
+change of many messages, answers with a preview until the call says `yes`.
 
 Every command except `mcp serve` takes `--json` and answers one JSON value on stdout; errors are JSON on stderr with a code to branch
 on. Over MCP an agent finds the commands with a search tool and runs them through a `read` and a `write` tool; the
@@ -70,7 +91,11 @@ as data, never as instructions.
 - **Your mail stays on your computer.** The store is a local file; no WireCat server sees your mail.
 - **One store for every tool.** Mail sits next to Telegram, MAX and WhatsApp messages, meetings and notes, so one
   search in memo finds a person's mail and messages together.
-- **Read-only by design.** `mail` cannot send, move or delete mail, so an agent that uses only `mail` cannot either.
+- **Changes you can undo.** `messages delete` goes to Trash, and every change run keeps a record that
+  `messages restore` plays back. What is lost for good is named so and previewed first: `drafts delete`, and
+  `folders delete` of a folder that holds mail, which only the owner can run. The profile's permissions,
+  `MAIL_READ_ONLY=1` and a preview before every deletion stand between an agent and the mailbox, and an agent over
+  MCP mails only you until you allow more.
 - **It works with the mailbox you have.** Yandex, Gmail, iCloud, Mail.ru, Fastmail and other servers with IMAP and
   app passwords; the server of a domain it does not know is found for you.
 
@@ -99,12 +124,15 @@ mail ya config show                            # every setting and where it came
 
 ## Limits
 
-- Read-only: `mail` never sends, moves, flags or deletes mail. But memo has `memo mail delete`, which moves Gmail mail
-  to Trash, so an agent with write access to memo can change mail.
+- `messages delete` goes to Trash, and the provider empties Trash in its own time (Gmail: 30 days). Three changes
+  are for good, with no restore: `drafts delete`, `drafts send` taking the sent draft out of Drafts, and
+  `folders delete --allow-dangerous` of a folder that holds mail (outside Gmail, its mail is gone).
+  Undoing `messages copy` outside Gmail removes the copy for good, never the original.
 - Text and headers only: the text of attachments is stored, not the files, nor the original message.
 - No OAuth yet, so no Outlook or Microsoft 365, and no Google Workspace domain that turns app passwords off.
 - Gmail caps IMAP downloads at 2,500 MB a day; a new Yandex app password can take 2 to 3 hours to work.
-- Search reads what `sync` stored: mail not synced yet is not found. Search on the server is planned.
+- Search reads the store and asks the mail server for mail `sync` has not read yet; `--backend archive` keeps to
+  the store.
 
 What comes next, such as OAuth sign-in, is on the
 [roadmap](https://github.com/WireCatLabs/mail-cli/blob/main/docs/roadmap.md).
@@ -164,6 +192,9 @@ keyring, the store, MCP) come from [cli-base](https://github.com/WireCatLabs/cli
 mail-cli is part of [WireCat](https://wirecat.dev): an open context layer for AI agents that keeps your data on your
 computer. Start with mail. Add Telegram, MAX and notes when you need them.
 
+Questions and setup help: join the [WireCat Discord](https://discord.gg/DebENqbRrJ). Bugs go to this
+repository's issues.
+
 ## Contributing and license
 
 Pull requests, bug reports and ideas: [issues](https://github.com/WireCatLabs/mail-cli/issues).

package/dist/bin/mail.js

@@ -9,7 +9,7 @@ if (
   (words[0] === "--version" || words[0] === "-V") &&
   !Object.keys(process.env).some((key) => key.endsWith("_TEST_ARGV_LOG"))
 ) {
-  process.stdout.write("0.4.0\n")
+  process.stdout.write("0.6.0\n")
 } else {
   // Before the bundle compiles: the bundle's own call comes after its chunks.
   module.enableCompileCache()
@@ -29,7 +29,7 @@ if (
     })
   }
   const running = import("../bundle/mail.js")
-  const chunks = ["../bundle/all-profiles-55XPXQHY.js","../bundle/anthropic-K5B6I4LB.js","../bundle/app-server-VWWLQLTZ.js","../bundle/bun-EO7AI6YP.js","../bundle/bun-sqlite-F24A4IOP.js","../bundle/decode-ON4KBMEX.js","../bundle/dispatch-EUKKT3PD.js","../bundle/dist-FMN7UZ7R.js","../bundle/dist-HFUVURJG.js","../bundle/echarts-XPA226QR.js","../bundle/embed-QERDAB73.js","../bundle/embedder-I76YT3E5.js","../bundle/failure-OAIC5VAP.js","../bundle/first-screen-EORANEAK.js","../bundle/instructions-NN3BCFIM.js","../bundle/mcp-L7SRVDRN.js","../bundle/node-2S75QJ6B.js","../bundle/node-KM3CUABH.js","../bundle/node-TLZSIHIJ.js","../bundle/node-sqlite-RC7WM3EG.js","../bundle/oauth-FUHLZCKV.js","../bundle/open-JOKT7LKY.js","../bundle/openai-U3IMQ6UI.js","../bundle/process-LKODK722.js","../bundle/program-RMLIQXCA.js","../bundle/prompt-23VYMNNB.js","../bundle/recognize-TXO3462R.js","../bundle/remote-5F4ZOASM.js","../bundle/rerank-TXSDPEFE.js","../bundle/serve-TWYECYWM.js","../bundle/server-2GEAXKX2.js","../bundle/server-3S3BKE6D.js","../bundle/sqlite-runtime-BEOBGC6K.js","../bundle/state-ERWIUTQQ.js","../bundle/store-2JO4JGQL.js","../bundle/store-4RY5UMOP.js","../bundle/store-maintenance-command-T7D4OTN7.js"]
+  const chunks = ["../bundle/all-profiles-GBFTKUHA.js","../bundle/anthropic-PTSCWUG6.js","../bundle/app-server-5VJ2WCKJ.js","../bundle/bun-2KRUBPIN.js","../bundle/bun-sqlite-ELSRSJBM.js","../bundle/decode-HVXDCQ63.js","../bundle/dispatch-GDAH4JHS.js","../bundle/dist-43DZXMBL.js","../bundle/dist-HFUVURJG.js","../bundle/echarts-LZ74IXHG.js","../bundle/embed-OQF5U2C6.js","../bundle/embedder-OCWQAWKO.js","../bundle/failure-6COJAO7T.js","../bundle/first-screen-4PBS6QK5.js","../bundle/instructions-M6F4FP7U.js","../bundle/mcp-GAPDLFWA.js","../bundle/node-KM3CUABH.js","../bundle/node-NYBBFHGN.js","../bundle/node-TLZSIHIJ.js","../bundle/node-sqlite-CWCNWO75.js","../bundle/oauth-DVX45EME.js","../bundle/open-M7EQWWHL.js","../bundle/openai-63KRU5H2.js","../bundle/process-DV5GQIGM.js","../bundle/program-EPR3QCMX.js","../bundle/prompt-EPWPWTB3.js","../bundle/recognize-R46KDXK4.js","../bundle/remote-RENCYB5X.js","../bundle/rerank-VHPC5O73.js","../bundle/serve-KCH3ORYO.js","../bundle/server-FMCPE2ZK.js","../bundle/server-HZVXSK7B.js","../bundle/sqlite-runtime-XP7ZJCKJ.js","../bundle/state-GQ4MEQJ5.js","../bundle/store-CQNLNINW.js","../bundle/store-WT7YTR3Y.js","../bundle/store-maintenance-command-YYR42IT4.js"]
   // After the server answers its first request, so it starts no later.
   if (serves) setTimeout(() => void Promise.allSettled(chunks.map((chunk) => import(chunk))), 2000).unref()
   await running

package/dist/bundle/{all-profiles-55XPXQHY.js → all-profiles-GBFTKUHA.js}

@@ -2,28 +2,28 @@ import { createRequire as __bundleRequire } from "node:module";
 const require = __bundleRequire(import.meta.url);
 import {
   answeredWire
-} from "./chunk-JKHI3PH7.js";
+} from "./chunk-J4C32YKH.js";
 import {
   CALLER_META_KEY,
   PROXY_CLIENT_NAME,
   StdioServerTransport,
   callerOf,
   serveStdio
-} from "./chunk-MGBGE2Y4.js";
+} from "./chunk-O7VK7CJX.js";
 import {
   McpServer
 } from "./chunk-5D4AEUVA.js";
-import "./chunk-H7K2DN3R.js";
-import "./chunk-NPGVOZVK.js";
-import "./chunk-J3QXTBD2.js";
-import "./chunk-LQ37ALDJ.js";
+import "./chunk-BVIHT7KR.js";
+import "./chunk-WJWLHLQ7.js";
+import "./chunk-JLRMSNPX.js";
+import "./chunk-NXJLC2WK.js";
 import "./chunk-Y5E2WNWB.js";
-import "./chunk-5BVIWP3S.js";
+import "./chunk-BM445GYF.js";
 import {
   __name
 } from "./chunk-ZVVMGPBJ.js";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.520.0_@wirecat+cli-base@0.68.1_commander@15.0.0_esbuild@0.28.2_type_33ccf8bfbe17590bae2f3fc544520037/node_modules/@wirecat/cli-core/dist/mcp/all-profiles.js
+// node_modules/.pnpm/@wirecat+cli-core@0.530.0_@wirecat+cli-base@0.71.0_commander@15.0.0_esbuild@0.28.2_type_f01b7e2db7d22734373a522c868220f7/node_modules/@wirecat/cli-core/dist/mcp/all-profiles.js
 import { spawn } from "node:child_process";
 import { randomUUID } from "node:crypto";
 var PROTOCOL = "2025-06-18";
@@ -257,7 +257,7 @@ var serveAllProfilesOverStdio = /* @__PURE__ */ __name(async (options, io = {})
 }, "serveAllProfilesOverStdio");
 var serveAllProfilesOverHttp = /* @__PURE__ */ __name(async (options, http) => {
   const { build, close } = allProfilesServer(options);
-  const { serveOverHttp } = await import("./serve-TWYECYWM.js");
+  const { serveOverHttp } = await import("./serve-KCH3ORYO.js");
   const listening = await serveOverHttp(build, {
     ...http,
     appName: options.command,

package/dist/bundle/{anthropic-K5B6I4LB.js → anthropic-PTSCWUG6.js}

@@ -5,25 +5,25 @@ import {
 } from "./chunk-XQUUANA2.js";
 import {
   checkedOptions
-} from "./chunk-FFKNUVVD.js";
+} from "./chunk-WCL3WBH5.js";
 import {
   messagesFor,
   systemFor
-} from "./chunk-BHKI5OCD.js";
-import "./chunk-J3QXTBD2.js";
+} from "./chunk-JKA2AICL.js";
+import "./chunk-JLRMSNPX.js";
 import {
   array,
   optional,
   strictObject,
   string
-} from "./chunk-LQ37ALDJ.js";
+} from "./chunk-NXJLC2WK.js";
 import "./chunk-Y5E2WNWB.js";
-import "./chunk-5BVIWP3S.js";
+import "./chunk-BM445GYF.js";
 import {
   __name
 } from "./chunk-ZVVMGPBJ.js";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.520.0_@wirecat+cli-base@0.68.1_commander@15.0.0_esbuild@0.28.2_type_33ccf8bfbe17590bae2f3fc544520037/node_modules/@wirecat/cli-core/dist/models/anthropic.js
+// node_modules/.pnpm/@wirecat+cli-core@0.530.0_@wirecat+cli-base@0.71.0_commander@15.0.0_esbuild@0.28.2_type_f01b7e2db7d22734373a522c868220f7/node_modules/@wirecat/cli-core/dist/models/anthropic.js
 var options = strictObject({
   stop_sequences: optional(array(string()))
 });

package/dist/bundle/{app-server-VWWLQLTZ.js → app-server-5VJ2WCKJ.js}

@@ -3,43 +3,43 @@ const require = __bundleRequire(import.meta.url);
 import {
   PER_RUN,
   envelope
-} from "./chunk-JZFIHVRB.js";
+} from "./chunk-ES4PWHBJ.js";
 import {
   answered,
   failed,
   registerCommands,
   runCommandForAgent,
   toolsFromCommands
-} from "./chunk-OM4ZBLT7.js";
+} from "./chunk-XERTHQ6D.js";
 import {
   mcpUrlOf
-} from "./chunk-ORYYYM5Y.js";
+} from "./chunk-TKJDGAHT.js";
 import {
   agentJson,
   skillResource
-} from "./chunk-6BR6JMCR.js";
-import "./chunk-VWHRIGYJ.js";
+} from "./chunk-XZGLY2LU.js";
+import "./chunk-PBYDT3CG.js";
 import {
   appInstructions
-} from "./chunk-EDKV6D6T.js";
+} from "./chunk-DA46WQEA.js";
 import {
   answeredWire
-} from "./chunk-JKHI3PH7.js";
+} from "./chunk-J4C32YKH.js";
 import {
   StdioServerTransport,
   serveStdio
-} from "./chunk-MGBGE2Y4.js";
+} from "./chunk-O7VK7CJX.js";
 import {
   McpServer
 } from "./chunk-5D4AEUVA.js";
-import "./chunk-NL5LNYGX.js";
-import "./chunk-X7AXH2IC.js";
-import "./chunk-4KLJN3LK.js";
-import "./chunk-VP5GCMHM.js";
-import "./chunk-BHKI5OCD.js";
-import "./chunk-HJEMHZRU.js";
-import "./chunk-7IYDIU4P.js";
-import "./chunk-2LP46EUH.js";
+import "./chunk-RAZOSYEO.js";
+import "./chunk-3KY7DA5A.js";
+import "./chunk-AGX7NR3S.js";
+import "./chunk-5KHJUYHQ.js";
+import "./chunk-JKA2AICL.js";
+import "./chunk-P5B7IFOG.js";
+import "./chunk-PHPC72DP.js";
+import "./chunk-Y7JKWQC2.js";
 import {
   DEFAULT_OUTPUT_BYTES,
   changesAuthorityAt,
@@ -49,47 +49,47 @@ import {
   judgedTargets,
   readOnlyLockOf,
   rootOf2 as rootOf
-} from "./chunk-HUB42T2Z.js";
-import "./chunk-F6JTOQIK.js";
-import "./chunk-H7K2DN3R.js";
-import "./chunk-ZD3WUGR2.js";
-import "./chunk-P7P5MNAU.js";
-import "./chunk-VWXCEEUH.js";
+} from "./chunk-6MV2TBDB.js";
+import "./chunk-J5MYH4L5.js";
+import "./chunk-BVIHT7KR.js";
+import "./chunk-B337KHJ5.js";
+import "./chunk-QZBT6BOU.js";
+import "./chunk-H4VFIH5W.js";
 import {
   mcpHttpMarker
-} from "./chunk-RLSGMMGC.js";
-import "./chunk-EOEYP7CJ.js";
-import "./chunk-CADRRSQK.js";
-import "./chunk-UJYCKCFR.js";
-import "./chunk-ID24SLH3.js";
-import "./chunk-5RUTHKXZ.js";
-import "./chunk-CCNHVZ3G.js";
-import "./chunk-SY3SP7EI.js";
-import "./chunk-2NZGUKYK.js";
-import "./chunk-YYTWV5GU.js";
-import "./chunk-NPGVOZVK.js";
-import "./chunk-ANRI6EZY.js";
-import "./chunk-F7KAJNNK.js";
-import "./chunk-UO7X2VW4.js";
-import "./chunk-7X64JS6S.js";
-import "./chunk-QX7RCLRS.js";
+} from "./chunk-TPNC5VCJ.js";
+import "./chunk-ZPGLWMNH.js";
+import "./chunk-56PI2BRH.js";
+import "./chunk-ZRYFEEXZ.js";
+import "./chunk-PKU6V4EQ.js";
+import "./chunk-O555ZEQR.js";
+import "./chunk-RDSAI6DC.js";
+import "./chunk-KUQYWIVR.js";
+import "./chunk-VEAP5RVI.js";
+import "./chunk-ZMMIIBTM.js";
+import "./chunk-4PKHZQIM.js";
+import "./chunk-YBJMBPL7.js";
+import "./chunk-DV4RSEAH.js";
+import "./chunk-FIQOBLHS.js";
+import "./chunk-SQLCCKEL.js";
+import "./chunk-WJWLHLQ7.js";
 import "./chunk-D72URWJE.js";
-import "./chunk-ZAR67WKR.js";
-import "./chunk-WFBTPZK3.js";
-import "./chunk-UZDHK26H.js";
-import "./chunk-J3QXTBD2.js";
+import "./chunk-NZB4WGQS.js";
+import "./chunk-OHV5RDFE.js";
+import "./chunk-JIQAFFPV.js";
+import "./chunk-JLRMSNPX.js";
 import {
   mcpErrorResult
-} from "./chunk-LQ37ALDJ.js";
+} from "./chunk-NXJLC2WK.js";
 import "./chunk-Y5E2WNWB.js";
 import {
   CliError
-} from "./chunk-5BVIWP3S.js";
+} from "./chunk-BM445GYF.js";
 import {
   __name
 } from "./chunk-ZVVMGPBJ.js";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.520.0_@wirecat+cli-base@0.68.1_commander@15.0.0_esbuild@0.28.2_type_33ccf8bfbe17590bae2f3fc544520037/node_modules/@wirecat/cli-core/dist/mcp/app-server.js
+// node_modules/.pnpm/@wirecat+cli-core@0.530.0_@wirecat+cli-base@0.71.0_commander@15.0.0_esbuild@0.28.2_type_f01b7e2db7d22734373a522c868220f7/node_modules/@wirecat/cli-core/dist/mcp/app-server.js
 var EXCLUDED = [["mcp"]];
 var createAppServer = /* @__PURE__ */ __name((command, context, options) => {
   const { app } = options;
@@ -204,7 +204,7 @@ var serveAppOverStdio = /* @__PURE__ */ __name(async (command, context, options)
 var serveAppOverHttp = /* @__PURE__ */ __name(async (command, context, options, http) => {
   const { app } = options;
   const { build } = createAppServer(command, context, options);
-  const { serveOverHttp } = await import("./serve-TWYECYWM.js");
+  const { serveOverHttp } = await import("./serve-KCH3ORYO.js");
   const listening = await serveOverHttp(build, {
     ...http,
     appName: app.command,

package/dist/bundle/{bun-EO7AI6YP.js → bun-2KRUBPIN.js}

@@ -18,12 +18,12 @@ import {
   jitCompatCheck,
   refineSqliteCodecs,
   sql
-} from "./chunk-7X64JS6S.js";
+} from "./chunk-FIQOBLHS.js";
 import {
   __name
 } from "./chunk-ZVVMGPBJ.js";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.520.0_@wirecat+cli-base@0.68.1_commander@15.0.0_esbuild@0.28.2_type_33ccf8bfbe17590bae2f3fc544520037/node_modules/@wirecat/cli-core/dist/store/sqlite/drizzle/bun.js
+// node_modules/.pnpm/@wirecat+cli-core@0.530.0_@wirecat+cli-base@0.71.0_commander@15.0.0_esbuild@0.28.2_type_f01b7e2db7d22734373a522c868220f7/node_modules/@wirecat/cli-core/dist/store/sqlite/drizzle/bun.js
 import { Database } from "bun:sqlite";
 var bunSQLiteCodecs = refineSqliteCodecs({
   "integer:boolean": { normalize: booleanFromInteger },

package/dist/bundle/{bun-sqlite-F24A4IOP.js → bun-sqlite-ELSRSJBM.js}

@@ -3,18 +3,18 @@ const require = __bundleRequire(import.meta.url);
 import {
   loadVectorExtension,
   vectorExtension
-} from "./chunk-SWRNMYDL.js";
-import "./chunk-J3QXTBD2.js";
-import "./chunk-LQ37ALDJ.js";
+} from "./chunk-NCWO2FNC.js";
+import "./chunk-JLRMSNPX.js";
+import "./chunk-NXJLC2WK.js";
 import {
   importFrom
 } from "./chunk-Y5E2WNWB.js";
-import "./chunk-5BVIWP3S.js";
+import "./chunk-BM445GYF.js";
 import {
   __name
 } from "./chunk-ZVVMGPBJ.js";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.520.0_@wirecat+cli-base@0.68.1_commander@15.0.0_esbuild@0.28.2_type_33ccf8bfbe17590bae2f3fc544520037/node_modules/@wirecat/cli-core/dist/store/drivers/bun-sqlite.js
+// node_modules/.pnpm/@wirecat+cli-core@0.530.0_@wirecat+cli-base@0.71.0_commander@15.0.0_esbuild@0.28.2_type_f01b7e2db7d22734373a522c868220f7/node_modules/@wirecat/cli-core/dist/store/drivers/bun-sqlite.js
 var customised = false;
 var ownLibrary = /* @__PURE__ */ __name(async () => {
   try {