[dependabot]

Bumps the shared group with 1 update in the / directory: @wirecat/cli-testing.

Updates @wirecat/cli-testing from 0.5.3 to 0.6.2

Changelog

Sourced from @​wirecat/cli-testing's changelog.

0.6.2 — 07.11.2026

Fixed

• The contract deny check calls each command over MCP with the tool the server runs it with. It picked *_write only for a remote write, but cli-core sends a local write such as models download to *_write and refuses it on *_read with validation_error before the permission guard, so a CLI that honoured deny failed deny-mcp. The check now asks the server's *_tools_search for each command's writes, and falls back to the command's effects when the server has no search tool.

0.6.1 — 07.11.2026

Fixed

• The contract deny check no longer passes while checking nothing. deny-mcp fails when the server offers no *_read or *_write tool to call, and deny-keys fails when a remote command's --dry-run exits non-zero, which used to drop it from the check.

0.6.0 — 07.11.2026

Changed — may break callers

• The MCP client is @modelcontextprotocol/client 2.4 instead of @modelcontextprotocol/sdk 1.32. The v1 package pulled Express, body-parser, Ajv and express-rate-limit into every install, and all of this package's audit findings came through them. The contract suite now lets the SDK walk the tool list's pages: a server whose pagination never ends fails after 64 pages ("exceeded listMaxPages") instead of "repeated a cursor".

Security

• No known advisories in the dependency tree: the MCP SDK swap removes the fast-uri, Express and Ajv findings, and the test runner now resolves Vite 8.3.5.

Fixed

• Packed installation checks run Windows batch launchers from isolated directories with the pinned managers and platform marker required by native installers.

Added

• A deny check in contract plans. "deny": { "profile": "personal" } sets deny for each command that reaches the service and names a permission key in its --dry-run, in the fresh empty home, and expects exit 5 with permission_error before any network, keyring or child-process access; then it calls each over mcp serve and expects the same refusal. It fails when no read names a key, as when a program drops its permission table. Every CLI made from cli-template runs it in contracts:check. See the contracts guide.
• A compact evidence-ranking handoff package with pinned model preparation, synthetic CPU diagnostics, reproducible metrics and a staged comparison of mathematical, contextual and optional neural methods.
• A reproducible API cost estimator for the knowledge graph memory pilot, with explicit call/token assumptions, current rate sources and a distinction between scenarios and metered engine usage.
• cli-testing ux install checks packed tarballs with pinned npm, pnpm and Bun, validates global binaries and documented follow-up commands, and records install warnings and publint results in isolated run directories.
• A synthetic knowledge graph memory benchmark fixture and scorer: 2,000 source records, 50 known-answer

... (truncated)

Commits

• 271a6e9 chore(release): 0.6.2 (#311)
• 7e8e544 fix(contract): the deny check calls each command with the tool the server nam...
• 228170a chore(release): 0.6.1 (#309)
• c7e4ee3 fix(contract): the deny check fails instead of passing while it checks nothin...
• 8e53858 chore(release): 0.6.0 (#307)
• 26ea393 test(contract): cover the deny check's MCP client and refusals (#306)
• 2d7ddb9 feat(contract): a deny check that each remote command is refused, on the comm...
• cfcb7c2 perf(search): mail meaning through the vector index; questions find topic-les...
• b6686ea perf(projects): status fixture expects "asked" money, fourth run on memo 0.13...
• 8c4d7cc docs(projects): PMED project state run 3 totals (#299)
• Additional commits viewable in compare view