[dependabot]

Bumps the shared group with 1 update in the / directory: @wirecat/cli-base.

Updates @wirecat/cli-base from 0.65.0 to 0.66.1

Changelog

Sourced from @​wirecat/cli-base's changelog.

0.66.1 — 31.10.2026

Fixed

• implicitTextTerms counts a bare number as a word. It left out every number token, so a question with a number ("do logs expire after 21 days") looked like query syntax: cli-core's --discover then ran strict search and usually found nothing. A number that is a field's value (size:>2) is still not a bare word.

0.66.0 — 31.10.2026

Added

• wcat, one command that runs every tool: wcat tg … runs wcat-tg … (@wirecat/cli-base/wcat). Another program named tg or drive can sit earlier on PATH, and an agent or a script then runs it without any sign; a wcat-<name> name is the tool's alone. Any wcat-<name> program on PATH joins, ours or not. wcat --help lists what is installed with each tool's description, the WireCat tools that are not, with their install commands, and warns when two programs share a name; --json prints the list. Built-in names (help, version, shortcuts, doctor, update, upgrade, app) always belong to wcat. An unknown tool is not_found with the new reason tool.not-installed. Nothing changes for a CLI until it calls wcatStart.
• wcatStart(tool) from @wirecat/cli-base/wcat/start, the first call in a CLI's bin. It answers --wcat-describe with the tool's name, version, description and docs page, runs wcat when the wcat launcher starts the tool, and on any other start makes sure the wcat launcher in the tool's global bin folder works. The launcher is a small marked script that starts an installed wcat-<tool> by name (a .cmd and .ps1 pair on Windows), never a link into a package folder, which pnpm renames on every upgrade. A file named wcat that cli-base did not write is never touched. When the launcher works, the check costs a few stat calls; it loads only Node built-ins. Call it before startCli, and set process.exitCode to the code it returns.
• wcat shortcuts, and listShortcuts, addShortcuts and removeShortcuts for a program. A tool's short name, such as tg, is made only when no program on PATH has it, and only shortcuts cli-base made are removed. A short name the tool's package installs itself shows as package and is left to the package manager.
• RESERVED_NAMES and a cli-dev lint warning for joining wcat (WC-CMD-29). The lint warns when a "bin" key does not start with wcat-, when a package outside @wirecat/ takes a reserved name, and, with --cli, when the built CLI does not answer --wcat-describe. The warnings do not fail the run: every CLI still installs its short name today.

0.65.5 — 31.10.2026

Added

• movedRunService(app, configDir) names a moved run's temporary keyring entry, so a test or an agent can delete it by name.

Security

• A moved run no longer replaces the owner's keyring entry. session start in a worktree or with HOME=/tmp/x overwrote the owner's real sign-in. With the system keyring, Credentials in a moved run (isolated, or a moved HOME or XDG folder) now writes a temporary entry, <app>:<absolute config folder>; reads it first and the owner's <app> entry when it has none; and remove deletes only the temporary entry, so session end cleans up. A token refreshed in a moved run is saved in the temporary entry too, so a run that never ends its session leaves one behind (WC-SECR-24). A run with the default folders, and a test with memoryKeyring(), are unchanged.

... (truncated)

Commits

• 19196cc chore(release): 0.66.1 (#410)
• d8c8c3a fix(query): a bare number is an implicit text term (#409)
• 858e9e0 feat(wcat): the wcat umbrella command, its launcher and shortcuts (#404)
• d6be910 chore(release): 0.65.5 (#408)
• babda76 fix(credentials): a moved run writes a temporary keyring entry, never the own...
• d3cf404 chore(release): 0.65.4 (#406)
• bd2777c fix(credentials): a moved run shares the app's keyring entry and never delete...
• c2a86c3 docs(plan): wcat step 0 result, option B (#403)
• deeb55a docs(plan): unique wcat-<tool> commands and the wcat umbrella (#402)
• 9929dc6 chore(release): 0.65.3 (#401)
• Additional commits viewable in compare view

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​wirecat/​cli-base@​0.65.0 ⏵ 0.66.1	+2		+1	+1

View full report

[dependabot]

Looks like @wirecat/cli-base is updatable in another way, so this is no longer needed.