WeRead

Use the installed CLI as the only interface. Always pass --json, parse successful stdout as JSON, and summarize the result for the user. On a non-zero exit, parse the JSON error from stderr. Never expose credentials or paste raw tokens.

Account selection

Choose exactly one account for the session and preserve it through every CLI call. Use the alias supplied by the user or operator. If none was supplied, weread-omni accounts --json must show exactly one configured account. In the examples below, $ACCOUNT means that alias. Do not switch accounts after a failure.

Writes are permitted unless the operator has set WEREAD_READONLY. A refused write fails with disabled by WEREAD_READONLY; report that limit as policy, and never unset it or retry against another account on the user's behalf.