@wirecat/mail-cli 0.5.0 → 0.7.0

package/CHANGELOG.md

@@ -2,6 +2,155 @@
 
 Notable changes to `@wirecat/mail-cli`. One section per version, newest first.
 
+## 0.7.0 — 01.11.2026
+
+### Changed — may break callers
+
+- **`drafts delete` takes `--allow-dangerous`, not `--yes`**, because a draft deleted this way does not come back
+  (WC-PERM-9). Only the owner passes it; an agent over MCP gets a preview.
+
+### Added
+
+- **`messages export --output` refuses credential folders** and the WireCat apps' folders, as `attachments download`
+  does.
+- **Outlook.com and Microsoft 365 sign in with OAuth.** `mail <profile> session start --address <you>@outlook.com`
+  shows what it will ask for, opens Microsoft's page in the browser, logs in to IMAP with the new token, and only then
+  saves the profile and the tokens (keyring entry `oauth:microsoft:<profile>`). Sync and `messages send` use the token
+  over IMAP and SMTP (XOAUTH2), refreshing it as needed; a token the server refuses is refreshed once, then the error
+  `mail.oauth-refused` asks for a new sign-in. `session status` shows the app, scopes and expiry, never a token;
+  `session end` forgets the sign-in and names where Microsoft lists the app. `--no-browser` prints the link only.
+- **`microsoft_client_id`**: the Microsoft app to sign in with, set by you once (`config set --defaults`); an agent
+  over MCP cannot change it. WireCat's own app is not registered yet, so for now this is required;
+  [register a Microsoft app](docs/oauth-microsoft.md) gives the steps.
+- **Gmail over OAuth with your own Google app**: `session start --client-file <Desktop client JSON>`
+  (or, on a profile switched with `config set auth oauth`, `MAIL_GOOGLE_CLIENT_ID` and `MAIL_GOOGLE_CLIENT_SECRET`),
+  for an account that cannot make an app password. The signed-in address must match the profile's. Gmail profiles
+  keep app passwords unless switched.
+  [Gmail with your own Google app](docs/oauth-google.md) gives the steps: a Google project just for mail, published
+  without verification. `session end --revoke` asks Google to revoke it, which ends every sign-in of that project.
+- **`mail doctor` lists each OAuth profile** with its app and last sign-in, from disk only, and warns from day 6 that
+  a Google app left in Testing ends its sign-ins on day 7.
+- `session status` and `session list` answer `auth` too.
+
+### Fixed
+
+- **An agent over MCP can attach several files**: `--file` of `messages send` and `messages forward` is a list there.
+- **Sending a message no longer shortens the archive's coverage** to the last 10 minutes, which memo reported until
+  the next full sync.
+- **`attachments list` and `download` show every attachment**, not the first 50, and `drafts update` keeps them all.
+- **Attachments are saved through cli-core's atomic write**, which also syncs the file and the folder to disk.
+- The `memo mail delete` command is named as it is now, in the docs and the help of `messages delete --rules`.
+- **Microsoft 365 is its own provider**, found by its MX record, and sends through `smtp.office365.com:587`
+  ([Microsoft](https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/how-to-set-up-a-multifunction-device-or-application-to-send-email-using-microsoft-365-or-office-365));
+  Outlook.com keeps `smtp-mail.outlook.com`.
+
+## 0.6.0 — 01.11.2026
+
+### Added
+
+- **`mail <profile> messages export [query] --output <folder>`** writes the original messages of the stored mail that
+  match a query to mbox files (one per folder, mboxrd) or a Maildir++ tree (`--format maildir`), for backup or for mu
+  and notmuch. The store keeps text only, so each message is read from the server again. The folder is private (mode
+  700, files 600); a folder with something in it is refused unless `--resume` goes on with an export or `--replace`
+  writes over files of the same name. `--limit` and `--max-pages` bound a run, which also stops before its deadline;
+  `--resume` skips what the folder holds and cuts back a half-written message.
+- **`mail <profile> stats messages top --by sender|list|domain`** ranks the stored mail by sender, mailing list or
+  sender domain, with unread counts and size.
+- **`mail <profile> messages mark-read|mark-unread|star|unstar <ref…>`** and **`messages update <ref…> --flag <flag>
+  --unflag <flag> [--replace]`** change flags and keywords on the server (read, flagged, answered, draft, `$Junk`, words
+  of your own); a folder that keeps no keywords answers `provider_unavailable`.
+- **`messages move|copy <ref…> --folder <folder|role>`** files mail by folder; on Gmail a move is a label added and
+  `Inbox` taken away, a copy a label added, `--folder archive` only `Inbox` taken away.
+- **`messages delete <ref…>`** moves mail to Trash, never expunges it; `--rules` is memo's envelope cleanup, moved
+  here: envelope mail the rules let go, each decided again, with Gmail's labels and stars read again just before the
+  move, a fresh store backup required and a first run of at most 100; it refuses to run from a schedule.
+- **`messages restore --run <id>`** undoes a change run, last step first: Trash back to where the mail was (on Gmail
+  with its labels), moves back, copies removed, flags as they were. memo's `mail delete` run ids restore here too.
+  Outside Gmail a copy is removed for good by the UID the server gave it, never by a Message-ID search that could find
+  the original.
+- **`folders create|rename|delete`**; `delete` is a preview until `--yes`, and refuses a folder that holds mail, or
+  whose count the server does not give, unless `--allow-dangerous`, which only the owner passes at a terminal.
+- **`rules list|add|remove|apply|export|import`**, moved from memo with the same options: the profile is the mailbox,
+  so there is no account argument; the default import format is `mail`, the file memo's export writes.
+- Every message write takes the messages by `ref` or by `--filter '<query>'` (`--limit`, newest first). A deletion,
+  a `--filter` change and a change of more than 20 messages answer with a preview and the command with `--yes` in
+  `next`; `--dry-run` only previews. The store follows each server change at once: flags, folder and UID, Gmail labels,
+  deletion.
+- **Permissions:** `messages.delete`, `folders.delete` and `messages.bulk` (any change of many) ask; the rest of the
+  changes go ahead. `MAIL_READ_ONLY=1` refuses them all. Each attempt goes into the send journal (cli-core 0.522.0).
+- Error reasons (`mail.no-trash`, `mail.run-unknown`, `mail.archive-unverified`, …) now reach the JSON error.
+- **`mail <profile> drafts list|create|update|delete`** keeps drafts in the mailbox's own Drafts folder, so an agent
+  writes one and the owner checks and sends it from any mail app. `create` takes `--to`, `--cc`, `--bcc`, `--subject`
+  and the text (`-` reads stdin); `--reply-to <ref> [--reply-all]` answers a stored message in its thread. A draft is
+  named by its Message-ID; `update` replaces only what is given and keeps the rest, the thread and the attachments,
+  and moves the old version to Trash; `delete` removes it for good and asks first (`drafts.delete`).
+- **`mail <profile> tags add|remove <tag…> --message <ref> | --chat <ref>`** and **`tags list`** put your own tags on
+  stored mail and conversations. They stay in the local store, in the same tables memo tags with, and never reach the
+  server; `search messages tag:<tag>` finds them. Provider keywords stay `messages update --flag`, Gmail labels
+  `messages move|copy --folder`.
+- **`mail doctor`** says when a change run stopped part way, and when mail a run moved to Gmail's Trash is within five
+  days of Gmail emptying it, with the `messages restore` command for each. memo's doctor said this until the cleanup
+  moved here; memo's own cleanup runs count too. It needs cli-core 0.524.0 (`appDoctorCommand`'s `local` check).
+- **`search messages` asks the mail server too** for mail sync has not read yet: `--backend archive|server|both`
+  (default `both`) and `--server-time` (default 5s), as `tg search messages` has them. Gmail is searched once in All
+  Mail with its own syntax (X-GM-RAW); other servers with IMAP `UID SEARCH` in INBOX, Sent and Archive, or the
+  profile's `folders`. The server gets the words, `from:`, `to:`, `cc:`, `subject:`, `body:`, `is:` and `date:`; what
+  it finds is stored, and the same query then runs on the store, so the answer means the same on both backends and
+  each hit says `found_in`. The mailbox is opened read only. `permissions.messages.server-search=deny` turns it off;
+  `--offline` and `MAIL_READ_ONLY` keep to the store (cli-core 0.525.0).
+- **`mail <profile> messages send --to … --subject … [text]`** sends over the provider's SMTP server with the same
+  app password; the text comes from stdin when left out. `--cc`, `--bcc`, `--file <path>` (repeat; a named path, never
+  a pattern; credential and WireCat folders refused without `--allow-any-file`, which an agent over MCP never gets). `--reply-to <ref> [--reply-all]`
+  answers a stored email: `In-Reply-To`, `References`, `Re:`, the original quoted, `\Answered` set on it.
+- **`messages forward <ref> --to … [text]`** sends the original attached whole (`message/rfc822`), `Fwd:` before its
+  subject, and sets `$Forwarded` on it.
+- **Sent and the store after a send.** Gmail files SMTP mail in Sent itself; elsewhere the copy (with its Bcc line) is
+  appended to Sent unless Sent already holds that Message-ID. The message is then read into the store as `sync` reads it,
+  so it has the server's id and never a second row.
+- **Safety for sends.** Mail to anyone but the owner asks first: new key `messages.send.others`, default `ask`, which
+  the owner may set to `allow`. The question shows from, to, cc, bcc, subject, each attachment and the first
+  lines. `MAIL_READ_ONLY=1`, `readonly` and `deny` refuse; every attempt goes into the send journal without addresses,
+  subject or text; each recipient counts toward `sends_per_hour`; sends are spaced with the shared request pace
+  (cli-core 0.523.0). An answer lost after the message left is `outcome_unknown`; `--operation-id` retries it and sends
+  nothing when Sent already has it. `--dry-run` builds the message and sends nothing. A text that says "attached" with
+  no file warns.
+- **`drafts send <id>`** sends a saved draft through the same path as `messages send` (its keys and question, the
+  hourly limit, the journal, the Sent copy), then removes it from Drafts.
+- **`attachments list <ref>`** and **`attachments download <ref> [number…] --output-dir <dir> [--replace]`**: the
+  files of one email, read from the server and numbered as the store numbers them, saved readable only by you under
+  their plain names; an existing file is kept unless `--replace`.
+- **Profile keys `smtp_host`, `smtp_port`, `smtp_security`** name the submission server for a provider the built-in
+  list does not know. The built-in servers were checked against each provider's help page; Yandex's is now
+  `smtp.yandex.ru:465`.
+
+### Changed — may break callers
+
+- **An agent over MCP mails only the owner.** `messages send`, `messages forward` and `drafts send` to anyone else
+  answer `permission_error` over MCP until the owner sets `permissions.messages.send.others` in the config (`ask` or
+  `allow`); an `mcp serve --permission` cannot open it. At a terminal it still asks.
+- `mail` is no longer read-only: an MCP client with `--allow-writes` can change the mailbox through the `write` tool,
+  within the profile's permissions.
+- **On a server with OBJECTID (Fastmail, Cyrus) an email's id is the hash of its Message-ID, as memo makes it**, not
+  the server's EMAILID, and its thread comes from References. Ids come from cli-core's `mailIds`, which memo uses too,
+  so the two never store one email twice. Gmail keeps its own ids; Yandex and Mail.ru ids do not change.
+- **An agent cannot change where the app password goes, nor who it may mail.** Over MCP, `config set` and
+  `config unset` refuse `address`, `login`, `imap_host`, `imap_port`, `imap_security`, `smtp_host`, `smtp_port`,
+  `smtp_security`, `auth` and `permissions.messages.send.others` even with `mcp.authority`; the owner changes them in a
+  terminal (cli-core 0.530.0).
+
+### Fixed
+
+- **Built on cli-core 0.530.0 and cli-base 0.71.0.** The command lint now knows `drafts`, `--cc`, `--bcc` and
+  `--reply-all`, and accepts `--to <address>` and `--subject <text>` beside the messengers' `<chat>` and `<ref>`, so
+  thirteen lint overrides are gone and the budget is 11. The audit compares mail in cli-base's `mail-shared` group and
+  runs without `--complete`. cli-core also stops hiding a locked store when it scores senders.
+- **Gmail labels are decoded once.** imapflow already decodes them, and mail decoded `R&D-team` again into `Rteam`.
+- **`sync` says when it leaves stored rules out**: `rules_unread` and `rules_unread_why` (such as `condition label`)
+  in the answer and a `mail.rules-unreadable` issue, when the rules hold a condition this mail does not know.
+- **`sync --rescan` fails on a locked or broken store** instead of reporting the rethreading done.
+- **An attachment's file name is cleaned as cli-core's downloads clean it**: direction and zero-width characters
+  that disguise an extension go, and on Windows a reserved name (CON, NUL, …) falls back to `attachment-<n>`.
+
 ## 0.5.0 — 01.11.2026
 
 ### Fixed

package/README.md

@@ -1,8 +1,8 @@
 # mail CLI for people, scripts and agents
 
 `mail` copies your mailbox into the shared WireCat store on your computer, so you and your AI agents can search it
-and read it there. It reads over IMAP and never changes the mailbox: it does not send, move, flag or delete mail.
-It searches and reads what it stored, offline.
+and read it there, offline. It also organises the mailbox on the server: flags, folders, and deletion to Trash, each
+change one you can undo. It keeps drafts, and sends, replies and forwards over SMTP.
 
 [Documentation](https://github.com/WireCatLabs/mail-cli/blob/main/docs/index.md) · [Roadmap](https://github.com/WireCatLabs/mail-cli/blob/main/docs/roadmap.md) · [WireCat](https://wirecat.dev)
 
@@ -40,12 +40,32 @@ You need Node.js 22.16 or a later 22.x, or 24 or later. To try it with no instal
   newest first, and skips what is already stored. `--since-time 2026-10-01` reads from local midnight of that day.
 - **Search and read the stored mail.** `search messages 'from:ann@example.com has:attachment date>30d'` uses the
   query language of every WireCat CLI, with `list:` for mailing lists; `messages show` gives an email whole with its
-  attachments' text, `conversations list|show` its threads. It reads the profile's mailbox only and asks no server.
+  attachments' text, `conversations list|show` its threads. It searches the profile's mailbox only; it also asks the mail server
+  for mail `sync` has not read yet, and `--backend archive` keeps to the store.
   [memo](https://github.com/WireCatLabs/cli-memo) searches every mailbox together with your messages and notes.
+- **Export to mbox or Maildir.** `messages export 'from:ann@example.com' --output ~/mail-backup` reads the original
+  messages from the server into a private folder, one mbox file per folder or a Maildir++ tree for mu and notmuch;
+  it can be resumed and bounded. `stats messages top --by list` ranks senders, lists and domains.
 - **Sync a big mailbox in parts.** A run stops before its deadline, keeps what it read and tells you to run it again;
   `status` shows how far it is.
 - **Check a mailbox.** `account check` shows what the server supports, `folders list` the folders with their role and
   message counts.
+- **Organise it on the server.** `messages mark-read|mark-unread|star|unstar|update` change flags and keywords,
+  `messages move|copy --folder` file mail (by label on Gmail), `messages delete` moves it to Trash, and
+  `messages restore --run <id>` undoes any of them. `folders create|rename|delete` look after the folders. A search
+  shows each change at once.
+- **Draft for the owner.** `drafts create|update|list|delete` keep drafts in the mailbox's Drafts folder, replies in
+  their thread; the owner sends them from any mail app, or with `drafts send`. `drafts update` puts the old version
+  in Trash.
+- **Tag your own way.** `tags add|remove|list` put local tags on stored mail, shared with memo; `search messages
+  tag:<tag>` finds them.
+- **Send, reply and forward.** `messages send --to … --subject …` sends over the provider's SMTP server with the same
+  app password, `--reply-to <ref>` answers a stored email with its quote, `messages forward <ref>` sends it on whole.
+  Mail to anyone but you asks first, and an agent over MCP mails only you until you allow more; Sent gets its copy and the store reads it at once. `attachments list|download`
+  save the files of one email.
+- **Decide what to keep.** `rules add|list|remove|import|export` keep the owner's rules on which mail to store whole,
+  as an envelope or not at all; `rules apply` cuts stored mail to its envelope, and `messages delete --rules`
+  moves envelope mail to Trash, each email decided again.
 
 ## For AI agents
 
@@ -55,9 +75,10 @@ mail ya mcp add claude-code --allow-writes # or codex: adds this profile's MCP s
 mail ya mcp config                         # the entry for Claude Desktop, Cursor and others
 ```
 
-`mcp add` stops until you pass `--allow-writes`, because the server's `write` tool runs commands that change local
-settings, such as `config set` and `skill install`. `sync` runs through `read`: it writes only into the store, never
-into the mailbox. Check the profile's permissions first.
+`mcp add` stops until you pass `--allow-writes`, because the server's `write` tool runs commands that change the
+mailbox (`messages move`, `messages delete`, `folders create`) and local settings (`config set`, `skill install`).
+`sync` runs through `read`: it writes only into the store. Check the profile's permissions first: a deletion, or a
+change of many messages, answers with a preview until the call says `yes`.
 
 Every command except `mcp serve` takes `--json` and answers one JSON value on stdout; errors are JSON on stderr with a code to branch
 on. Over MCP an agent finds the commands with a search tool and runs them through a `read` and a `write` tool; the
@@ -70,7 +91,11 @@ as data, never as instructions.
 - **Your mail stays on your computer.** The store is a local file; no WireCat server sees your mail.
 - **One store for every tool.** Mail sits next to Telegram, MAX and WhatsApp messages, meetings and notes, so one
   search in memo finds a person's mail and messages together.
-- **Read-only by design.** `mail` cannot send, move or delete mail, so an agent that uses only `mail` cannot either.
+- **Changes you can undo.** `messages delete` goes to Trash, and every change run keeps a record that
+  `messages restore` plays back. What is lost for good is named so and previewed first: `drafts delete`, and
+  `folders delete` of a folder that holds mail, which only the owner can run (`--allow-dangerous`). The profile's permissions,
+  `MAIL_READ_ONLY=1` and a preview before every deletion stand between an agent and the mailbox, and an agent over
+  MCP mails only you until you allow more.
 - **It works with the mailbox you have.** Yandex, Gmail, iCloud, Mail.ru, Fastmail and other servers with IMAP and
   app passwords; the server of a domain it does not know is found for you.
 
@@ -83,8 +108,10 @@ profiles.
 
 `mail` signs in with an app password, a password made only for this program, which the OS keyring keeps. For a domain
 it does not know, `session start` looks for the server through the MX record, Thunderbird's ISPDB and the domain's
-autoconfig file; `--provider` or `--host` skips that. **Outlook and Microsoft 365 are not supported yet**: Microsoft
-accepts only OAuth for IMAP, and `mail` does not do OAuth yet.
+autoconfig file; `--provider` or `--host` skips that. Outlook.com and Microsoft 365 accept only OAuth, so for them
+`session start` opens Microsoft's sign-in page in the browser instead of asking for a password, and keeps the tokens in
+the same keyring. Until WireCat's Microsoft app is registered, this needs an app of your own, set once with
+`mail config set --defaults microsoft_client_id <id>` ([register a Microsoft app](https://github.com/WireCatLabs/mail-cli/blob/main/docs/oauth-microsoft.md)).
 
 ## Settings and permissions
 
@@ -99,12 +126,17 @@ mail ya config show                            # every setting and where it came
 
 ## Limits
 
-- Read-only: `mail` never sends, moves, flags or deletes mail. But memo has `memo mail delete`, which moves Gmail mail
-  to Trash, so an agent with write access to memo can change mail.
+- `messages delete` goes to Trash, and the provider empties Trash in its own time (Gmail: 30 days). Three changes
+  are for good, with no restore: `drafts delete`, `drafts send` taking the sent draft out of Drafts, and
+  `folders delete --allow-dangerous` of a folder that holds mail (outside Gmail, its mail is gone).
+  Undoing `messages copy` outside Gmail removes the copy for good, never the original.
 - Text and headers only: the text of attachments is stored, not the files, nor the original message.
-- No OAuth yet, so no Outlook or Microsoft 365, and no Google Workspace domain that turns app passwords off.
+- Gmail over OAuth needs a Google app of your own
+  ([steps](https://github.com/WireCatLabs/mail-cli/blob/main/docs/oauth-google.md)); `mail` ships no Google app for
+  mail.
 - Gmail caps IMAP downloads at 2,500 MB a day; a new Yandex app password can take 2 to 3 hours to work.
-- Search reads what `sync` stored: mail not synced yet is not found. Search on the server is planned.
+- Search reads the store and asks the mail server for mail `sync` has not read yet; `--backend archive` keeps to
+  the store.
 
 What comes next, such as OAuth sign-in, is on the
 [roadmap](https://github.com/WireCatLabs/mail-cli/blob/main/docs/roadmap.md).
@@ -164,6 +196,9 @@ keyring, the store, MCP) come from [cli-base](https://github.com/WireCatLabs/cli
 mail-cli is part of [WireCat](https://wirecat.dev): an open context layer for AI agents that keeps your data on your
 computer. Start with mail. Add Telegram, MAX and notes when you need them.
 
+Questions and setup help: join the [WireCat Discord](https://discord.gg/DebENqbRrJ). Bugs go to this
+repository's issues.
+
 ## Contributing and license
 
 Pull requests, bug reports and ideas: [issues](https://github.com/WireCatLabs/mail-cli/issues).

package/dist/bin/mail.js

@@ -9,7 +9,7 @@ if (
   (words[0] === "--version" || words[0] === "-V") &&
   !Object.keys(process.env).some((key) => key.endsWith("_TEST_ARGV_LOG"))
 ) {
-  process.stdout.write("0.5.0\n")
+  process.stdout.write("0.7.0\n")
 } else {
   // Before the bundle compiles: the bundle's own call comes after its chunks.
   module.enableCompileCache()
@@ -29,7 +29,7 @@ if (
     })
   }
   const running = import("../bundle/mail.js")
-  const chunks = ["../bundle/all-profiles-GR5JXYEQ.js","../bundle/anthropic-REBXE65F.js","../bundle/app-server-QJ7ICQXZ.js","../bundle/bun-WAX4QHW5.js","../bundle/bun-sqlite-5S7TQ4SG.js","../bundle/decode-D7BDVIVB.js","../bundle/dispatch-EUKKT3PD.js","../bundle/dist-HFUVURJG.js","../bundle/dist-KJOAJ6NF.js","../bundle/echarts-IVRX7XHP.js","../bundle/embed-X527RBTG.js","../bundle/embedder-F4PSJS6S.js","../bundle/failure-OAIC5VAP.js","../bundle/first-screen-M7MT776O.js","../bundle/instructions-UX36BT5F.js","../bundle/mcp-L7SRVDRN.js","../bundle/node-KM3CUABH.js","../bundle/node-OXT7WE2T.js","../bundle/node-TLZSIHIJ.js","../bundle/node-sqlite-X2PSEHA4.js","../bundle/oauth-MYK4BSYN.js","../bundle/open-GONIP2DH.js","../bundle/openai-YJFNUOQT.js","../bundle/process-7IEUUSRK.js","../bundle/program-Q73TTG3E.js","../bundle/prompt-SKQ72KN7.js","../bundle/recognize-GC7CU2DB.js","../bundle/remote-UEXFZP2I.js","../bundle/rerank-2U2NDEZP.js","../bundle/serve-OOGKFEWL.js","../bundle/server-4JMHDHZ7.js","../bundle/server-FZ3LFQTF.js","../bundle/sqlite-runtime-GIQSW6LJ.js","../bundle/state-EMFXPQVZ.js","../bundle/store-BDU4UPNK.js","../bundle/store-LDI62AUG.js","../bundle/store-maintenance-command-OFRPORN2.js"]
+  const chunks = ["../bundle/all-profiles-SI67TKZM.js","../bundle/anthropic-DALMLC3Y.js","../bundle/app-server-XOH327Z2.js","../bundle/bun-ORL67CJ6.js","../bundle/bun-sqlite-DGXFNFHI.js","../bundle/decode-KOBURZIQ.js","../bundle/dispatch-GDAH4JHS.js","../bundle/dist-HFUVURJG.js","../bundle/dist-T7HMT675.js","../bundle/echarts-LEWTQO6H.js","../bundle/embed-PUFE4BSQ.js","../bundle/embedder-3G4BQQ6X.js","../bundle/failure-6COJAO7T.js","../bundle/first-screen-VUZEDSQW.js","../bundle/instructions-HGSXDCBT.js","../bundle/mcp-GAPDLFWA.js","../bundle/node-5Z7PS4F5.js","../bundle/node-KM3CUABH.js","../bundle/node-TLZSIHIJ.js","../bundle/node-sqlite-OAW7APIX.js","../bundle/oauth-ZFZWPAJN.js","../bundle/open-ZQMBZVH4.js","../bundle/openai-XT2RIXAK.js","../bundle/process-VVEQIHPE.js","../bundle/program-RD3BBDNY.js","../bundle/prompt-PU7GE4Z4.js","../bundle/recognize-AG4A3KUK.js","../bundle/remote-D6TQ6T7F.js","../bundle/rerank-GO24HJPF.js","../bundle/serve-WCHJAH6G.js","../bundle/server-5KJJ3D6P.js","../bundle/server-CAVNBG3P.js","../bundle/sqlite-runtime-ANXC4AW2.js","../bundle/state-EGJ66A62.js","../bundle/store-OON7FCMQ.js","../bundle/store-SBFA444C.js","../bundle/store-maintenance-command-UEOJLYMJ.js"]
   // After the server answers its first request, so it starts no later.
   if (serves) setTimeout(() => void Promise.allSettled(chunks.map((chunk) => import(chunk))), 2000).unref()
   await running

package/dist/bundle/{all-profiles-GR5JXYEQ.js → all-profiles-SI67TKZM.js}

@@ -2,28 +2,28 @@ import { createRequire as __bundleRequire } from "node:module";
 const require = __bundleRequire(import.meta.url);
 import {
   answeredWire
-} from "./chunk-7A7BHABA.js";
+} from "./chunk-3GZK5GTU.js";
 import {
   CALLER_META_KEY,
   PROXY_CLIENT_NAME,
   StdioServerTransport,
   callerOf,
   serveStdio
-} from "./chunk-7XNPSIWD.js";
+} from "./chunk-VNJMO5F6.js";
 import {
   McpServer
 } from "./chunk-5D4AEUVA.js";
-import "./chunk-WNI5BZFB.js";
-import "./chunk-NPGVOZVK.js";
-import "./chunk-J3QXTBD2.js";
-import "./chunk-LQ37ALDJ.js";
+import "./chunk-ZNGQ3NZ4.js";
+import "./chunk-WJWLHLQ7.js";
+import "./chunk-Q2C3VMSU.js";
+import "./chunk-NXJLC2WK.js";
 import "./chunk-Y5E2WNWB.js";
-import "./chunk-5BVIWP3S.js";
+import "./chunk-BM445GYF.js";
 import {
   __name
 } from "./chunk-ZVVMGPBJ.js";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.521.0_@wirecat+cli-base@0.68.1_commander@15.0.0_esbuild@0.28.2_type_66d5ccffb8b88e4b24c051b84ef1952a/node_modules/@wirecat/cli-core/dist/mcp/all-profiles.js
+// node_modules/.pnpm/@wirecat+cli-core@0.537.0_@wirecat+cli-base@0.71.0_commander@15.0.0_esbuild@0.28.2_type_e3a3074c051d1ca759b7e8b914e3af6d/node_modules/@wirecat/cli-core/dist/mcp/all-profiles.js
 import { spawn } from "node:child_process";
 import { randomUUID } from "node:crypto";
 var PROTOCOL = "2025-06-18";
@@ -257,7 +257,7 @@ var serveAllProfilesOverStdio = /* @__PURE__ */ __name(async (options, io = {})
 }, "serveAllProfilesOverStdio");
 var serveAllProfilesOverHttp = /* @__PURE__ */ __name(async (options, http) => {
   const { build, close } = allProfilesServer(options);
-  const { serveOverHttp } = await import("./serve-OOGKFEWL.js");
+  const { serveOverHttp } = await import("./serve-WCHJAH6G.js");
   const listening = await serveOverHttp(build, {
     ...http,
     appName: options.command,

package/dist/bundle/{anthropic-REBXE65F.js → anthropic-DALMLC3Y.js}

@@ -5,25 +5,25 @@ import {
 } from "./chunk-XQUUANA2.js";
 import {
   checkedOptions
-} from "./chunk-LNS27BTB.js";
+} from "./chunk-ZKZABB4K.js";
 import {
   messagesFor,
   systemFor
-} from "./chunk-2U4IANVV.js";
-import "./chunk-J3QXTBD2.js";
+} from "./chunk-ZKCNMW7G.js";
+import "./chunk-Q2C3VMSU.js";
 import {
   array,
   optional,
   strictObject,
   string
-} from "./chunk-LQ37ALDJ.js";
+} from "./chunk-NXJLC2WK.js";
 import "./chunk-Y5E2WNWB.js";
-import "./chunk-5BVIWP3S.js";
+import "./chunk-BM445GYF.js";
 import {
   __name
 } from "./chunk-ZVVMGPBJ.js";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.521.0_@wirecat+cli-base@0.68.1_commander@15.0.0_esbuild@0.28.2_type_66d5ccffb8b88e4b24c051b84ef1952a/node_modules/@wirecat/cli-core/dist/models/anthropic.js
+// node_modules/.pnpm/@wirecat+cli-core@0.537.0_@wirecat+cli-base@0.71.0_commander@15.0.0_esbuild@0.28.2_type_e3a3074c051d1ca759b7e8b914e3af6d/node_modules/@wirecat/cli-core/dist/models/anthropic.js
 var options = strictObject({
   stop_sequences: optional(array(string()))
 });

package/dist/bundle/{app-server-QJ7ICQXZ.js → app-server-XOH327Z2.js}

@@ -3,43 +3,43 @@ const require = __bundleRequire(import.meta.url);
 import {
   PER_RUN,
   envelope
-} from "./chunk-ESNNQA7D.js";
+} from "./chunk-6RMMAUUW.js";
 import {
   answered,
   failed,
   registerCommands,
   runCommandForAgent,
   toolsFromCommands
-} from "./chunk-VDAIJM5L.js";
+} from "./chunk-MHQKHWCJ.js";
 import {
   mcpUrlOf
-} from "./chunk-VXAZZGXE.js";
+} from "./chunk-6XNPXAJU.js";
 import {
   agentJson,
   skillResource
-} from "./chunk-YRGBZZUW.js";
-import "./chunk-5INWLYBD.js";
+} from "./chunk-V4TDG4KF.js";
+import "./chunk-73OJJGZE.js";
 import {
   appInstructions
-} from "./chunk-6EO7GVYJ.js";
+} from "./chunk-JFMUI4H6.js";
 import {
   answeredWire
-} from "./chunk-7A7BHABA.js";
+} from "./chunk-3GZK5GTU.js";
 import {
   StdioServerTransport,
   serveStdio
-} from "./chunk-7XNPSIWD.js";
+} from "./chunk-VNJMO5F6.js";
 import {
   McpServer
 } from "./chunk-5D4AEUVA.js";
-import "./chunk-EB3R2PV3.js";
-import "./chunk-5CXAH4Y6.js";
-import "./chunk-M6BDHZON.js";
-import "./chunk-S677WGOQ.js";
-import "./chunk-2U4IANVV.js";
-import "./chunk-BFJV4FWJ.js";
-import "./chunk-AFCGOZR7.js";
-import "./chunk-WNCCYHRV.js";
+import "./chunk-DKQWTQVY.js";
+import "./chunk-S4YUR4S3.js";
+import "./chunk-45KA5667.js";
+import "./chunk-FTFNWGIR.js";
+import "./chunk-ZKCNMW7G.js";
+import "./chunk-BGUMGCUY.js";
+import "./chunk-NNIXREJH.js";
+import "./chunk-M2JCUVCJ.js";
 import {
   DEFAULT_OUTPUT_BYTES,
   changesAuthorityAt,
@@ -49,47 +49,47 @@ import {
   judgedTargets,
   readOnlyLockOf,
   rootOf2 as rootOf
-} from "./chunk-IBYTYIYO.js";
-import "./chunk-MMDCL42A.js";
-import "./chunk-WNI5BZFB.js";
-import "./chunk-ZD3WUGR2.js";
-import "./chunk-P7P5MNAU.js";
-import "./chunk-EL554DV2.js";
+} from "./chunk-R5MML3FC.js";
+import "./chunk-VSHJWTX5.js";
+import "./chunk-ZNGQ3NZ4.js";
+import "./chunk-23IEVVL2.js";
+import "./chunk-QZBT6BOU.js";
+import "./chunk-IYZHM3ZN.js";
 import {
   mcpHttpMarker
-} from "./chunk-6TY3DGCC.js";
-import "./chunk-HCMUGUAG.js";
-import "./chunk-QXOSGGKS.js";
-import "./chunk-CEAANMJ2.js";
-import "./chunk-B5WSIWY5.js";
-import "./chunk-2FXVBCA3.js";
-import "./chunk-IWDOGGMY.js";
-import "./chunk-7F3NDIYL.js";
-import "./chunk-SQ7KOBRA.js";
-import "./chunk-5FK6RD4M.js";
-import "./chunk-NPGVOZVK.js";
-import "./chunk-7JCRQX56.js";
-import "./chunk-LOA4X6JW.js";
-import "./chunk-2MRECWJZ.js";
-import "./chunk-KIDF77MA.js";
-import "./chunk-QX7RCLRS.js";
+} from "./chunk-DXGMPMFP.js";
+import "./chunk-5JEYIHS6.js";
+import "./chunk-6LK7KTWB.js";
+import "./chunk-RQVWZBW3.js";
+import "./chunk-2M4K7HYR.js";
+import "./chunk-5BSEGMNE.js";
+import "./chunk-35KD2CI2.js";
+import "./chunk-MCJ7LKYR.js";
+import "./chunk-MMXMVGA6.js";
+import "./chunk-VBOMKZ4E.js";
+import "./chunk-GJUUTUK4.js";
+import "./chunk-4NYWHINR.js";
+import "./chunk-XQJWMBDY.js";
+import "./chunk-AP7V256W.js";
+import "./chunk-SQLCCKEL.js";
+import "./chunk-WJWLHLQ7.js";
 import "./chunk-D72URWJE.js";
-import "./chunk-F3NYA4KN.js";
-import "./chunk-JJBQPA7D.js";
-import "./chunk-SWJAG5IE.js";
-import "./chunk-J3QXTBD2.js";
+import "./chunk-CAKBG5FC.js";
+import "./chunk-3TYEJRMZ.js";
+import "./chunk-Q44AYEOB.js";
+import "./chunk-Q2C3VMSU.js";
 import {
   mcpErrorResult
-} from "./chunk-LQ37ALDJ.js";
+} from "./chunk-NXJLC2WK.js";
 import "./chunk-Y5E2WNWB.js";
 import {
   CliError
-} from "./chunk-5BVIWP3S.js";
+} from "./chunk-BM445GYF.js";
 import {
   __name
 } from "./chunk-ZVVMGPBJ.js";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.521.0_@wirecat+cli-base@0.68.1_commander@15.0.0_esbuild@0.28.2_type_66d5ccffb8b88e4b24c051b84ef1952a/node_modules/@wirecat/cli-core/dist/mcp/app-server.js
+// node_modules/.pnpm/@wirecat+cli-core@0.537.0_@wirecat+cli-base@0.71.0_commander@15.0.0_esbuild@0.28.2_type_e3a3074c051d1ca759b7e8b914e3af6d/node_modules/@wirecat/cli-core/dist/mcp/app-server.js
 var EXCLUDED = [["mcp"]];
 var createAppServer = /* @__PURE__ */ __name((command, context, options) => {
   const { app } = options;
@@ -204,7 +204,7 @@ var serveAppOverStdio = /* @__PURE__ */ __name(async (command, context, options)
 var serveAppOverHttp = /* @__PURE__ */ __name(async (command, context, options, http) => {
   const { app } = options;
   const { build } = createAppServer(command, context, options);
-  const { serveOverHttp } = await import("./serve-OOGKFEWL.js");
+  const { serveOverHttp } = await import("./serve-WCHJAH6G.js");
   const listening = await serveOverHttp(build, {
     ...http,
     appName: app.command,

package/dist/bundle/{bun-WAX4QHW5.js → bun-ORL67CJ6.js}

@@ -18,12 +18,12 @@ import {
   jitCompatCheck,
   refineSqliteCodecs,
   sql
-} from "./chunk-KIDF77MA.js";
+} from "./chunk-AP7V256W.js";
 import {
   __name
 } from "./chunk-ZVVMGPBJ.js";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.521.0_@wirecat+cli-base@0.68.1_commander@15.0.0_esbuild@0.28.2_type_66d5ccffb8b88e4b24c051b84ef1952a/node_modules/@wirecat/cli-core/dist/store/sqlite/drizzle/bun.js
+// node_modules/.pnpm/@wirecat+cli-core@0.537.0_@wirecat+cli-base@0.71.0_commander@15.0.0_esbuild@0.28.2_type_e3a3074c051d1ca759b7e8b914e3af6d/node_modules/@wirecat/cli-core/dist/store/sqlite/drizzle/bun.js
 import { Database } from "bun:sqlite";
 var bunSQLiteCodecs = refineSqliteCodecs({
   "integer:boolean": { normalize: booleanFromInteger },

package/dist/bundle/{bun-sqlite-5S7TQ4SG.js → bun-sqlite-DGXFNFHI.js}

@@ -3,18 +3,18 @@ const require = __bundleRequire(import.meta.url);
 import {
   loadVectorExtension,
   vectorExtension
-} from "./chunk-MQUJEQTU.js";
-import "./chunk-J3QXTBD2.js";
-import "./chunk-LQ37ALDJ.js";
+} from "./chunk-VKPWP3AK.js";
+import "./chunk-Q2C3VMSU.js";
+import "./chunk-NXJLC2WK.js";
 import {
   importFrom
 } from "./chunk-Y5E2WNWB.js";
-import "./chunk-5BVIWP3S.js";
+import "./chunk-BM445GYF.js";
 import {
   __name
 } from "./chunk-ZVVMGPBJ.js";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.521.0_@wirecat+cli-base@0.68.1_commander@15.0.0_esbuild@0.28.2_type_66d5ccffb8b88e4b24c051b84ef1952a/node_modules/@wirecat/cli-core/dist/store/drivers/bun-sqlite.js
+// node_modules/.pnpm/@wirecat+cli-core@0.537.0_@wirecat+cli-base@0.71.0_commander@15.0.0_esbuild@0.28.2_type_e3a3074c051d1ca759b7e8b914e3af6d/node_modules/@wirecat/cli-core/dist/store/drivers/bun-sqlite.js
 var customised = false;
 var ownLibrary = /* @__PURE__ */ __name(async () => {
   try {

package/dist/bundle/{chunk-ZD3WUGR2.js → chunk-23IEVVL2.js}

@@ -3,26 +3,26 @@ const require = __bundleRequire(import.meta.url);
 import {
   executableEnvironment,
   executableOnPath
-} from "./chunk-P7P5MNAU.js";
+} from "./chunk-QZBT6BOU.js";
 import {
   require_cross_spawn
 } from "./chunk-D72URWJE.js";
 import {
   loadConfigFile,
   saveConfigFile
-} from "./chunk-J3QXTBD2.js";
+} from "./chunk-Q2C3VMSU.js";
 import {
   number,
   object,
   optional,
   string
-} from "./chunk-LQ37ALDJ.js";
+} from "./chunk-NXJLC2WK.js";
 import {
   __name,
   __toESM
 } from "./chunk-ZVVMGPBJ.js";
 
-// node_modules/.pnpm/@wirecat+cli-base@0.68.1_commander@15.0.0_esbuild@0.28.2_typescript@7.0.2_vitest@5.0.5/node_modules/@wirecat/cli-base/dist/update/index.js
+// node_modules/.pnpm/@wirecat+cli-base@0.71.0_commander@15.0.0_esbuild@0.28.2_typescript@7.0.2_vitest@5.0.5/node_modules/@wirecat/cli-base/dist/update/index.js
 var import_cross_spawn = __toESM(require_cross_spawn(), 1);
 import { existsSync } from "node:fs";
 var updateCommand = /* @__PURE__ */ __name((installer, packageName) => {