@arcadiasystems/morse-cli 0.7.0 → 0.9.0

package/CHANGELOG.md

@@ -4,6 +4,44 @@ All notable changes to `@arcadiasystems/morse-cli` are documented here. The
 format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and this
 project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.9.0] - 2026-09-10
+### Fixed (config state, found in a whole-package bug hunt)
+
+- **A one-off `--network` permanently rewrote the profile's stored network.** `updateActiveProfile` resolved the network the same way `resolveSettings` does (flag > env > stored > default) and then wrote the result back, even though the caller was only changing the account, publication or collection. So `morse --network testnet use --clear` against a mainnet profile left `"network": "testnet"` on disk, and every later command silently targeted the wrong chain with nothing said. Every active-state mutation was affected: `account import`, `account use`, `use`, `use --clear`, `publication create`, `publication delete`, `collection create`, `collection delete`. An existing profile now keeps its stored network; only a profile being created takes the resolved one. Flags and env vars are per-invocation overrides again, as `CLAUDE.md`'s precedence rule always said.
+- **`config add` on an existing profile destroyed every field it was not given.** It replaced the profile object instead of merging, so `config add default --network testnet` on a profile that had an `rpc`, `uploadRelay`, `account`, `publication` or `collection` silently dropped all of them. The command has always been documented as "create or **update**". It merges now.
+- **`config remove` deleted a profile with no confirmation.** Every other destructive command confirms and honours `--yes`; this one took no `GlobalOptions` at all, so there was not even a flag to skip. It deletes a profile plus its account, publication and collection links and can silently reassign the default, so it now says which profile and, when relevant, what the default becomes.
+- **Collection selection ignored which publication a collection belonged to.** `collection create` selected the new collection as active even when created under an explicit `-P` pointing at some other publication, pairing the active publication with a collection it does not contain. `collection delete` had the mirror bug, clearing a still-valid active collection whenever a same-named one was deleted from an unrelated publication. Collection names are scoped per publication, so both now check the publication too. The existing test asserted the old behaviour and passed vacuously, with no profile written; it has been given a real one and joined by cases for both mismatch directions.
+- `file register --public --recipient` is now refused, matching `file upload`. A public file is readable by anyone, so a recipient list on one is a contradiction rather than a no-op.
+- `--max-tip` help text says it only applies alongside `--upload-relay`.
+
+
+### Fixed
+
+- **`morse file list` works again, on every network.** It walked `suix_queryEvents` over JSON-RPC, which public Sui fullnodes have retired: they answer every JSON-RPC method with "Method not found". The command has been failing on testnet and mainnet alike unless the user passed `--indexer-url` at a source that still spoke the old protocol.
+
+  gRPC is the documented replacement for most Sui reads, but `@mysten/sui`'s gRPC client exposes no event API at all, so it could not be the answer here. Events now come from a Sui GraphQL endpoint, defaulting to the canonical Mysten one for the network. `--indexer-url` still overrides it and now means "a Sui GraphQL endpoint".
+
+  The querier is hand-rolled over `fetch` against one query with one cursor, rather than pulling in a GraphQL client, keeping the dependency surface as-is. A GraphQL error or a non-2xx response raises a network `CliError` (exit 5) rather than an empty page, because reporting "No files" for a broken endpoint is the worst available answer.
+
+  Verified live: a file uploaded to testnet appears in `file list` with no `--indexer-url`, `--hydrate` and `--json` both work against it, and deleting the file reconciles it back out of the listing.
+
+### Changed
+
+- `--indexer-url` now expects a Sui GraphQL endpoint rather than a `suix_queryEvents` JSON-RPC source. Anyone relying on the old flag against a JSON-RPC indexer needs a GraphQL one instead; the previous behaviour could not have been working against a public fullnode regardless.
+- Listing on localnet requires `--indexer-url`, since there is no canonical GraphQL endpoint for it. Previously it would have used the local RPC URL and failed.
+
+## [0.8.0] - 2026-09-10
+
+Usability pass. Nothing is renamed or removed; every existing spelling keeps working.
+
+### Added
+
+- **Verb aliases, so the word you guess is the word that works.** The command surface had grown four inconsistencies where one concept had two names depending on the noun: fetching one thing was `get` on publication, entry and file but `show` on account; deleting was `delete` everywhere except `config remove`; transferring was `transfer-ownership` on publication and file but `transfer` on cap; and reading content was `entry read` but `file download`, despite both taking `--out` and `--via-aggregator`.
+
+  Each now accepts both spellings: `account show|get`, `publication get|show`, `entry get|show`, `file get|show`, `config remove|delete`, `cap transfer|transfer-ownership`, `entry read|download`, `file download|read`. Aliases, not renames, so nothing published breaks.
+- **`entry list --all`** does what `entry scan` does. `scan` is accurate but undiscoverable; people look for `--all` and conclude pagination is unsupported. `scan` stays. Combining `--all` with `--limit` or `--cursor` is refused rather than silently ignoring one.
+- **`account import` reads a key piped on stdin.** Previously it required an interactive terminal or `MORSE_PRIVATE_KEY`, so the obvious scripted form failed outright. Still never a flag: argv is visible in `ps` and shell history. The error when no key can be found now names all three routes.
+
 ## [0.7.0] - 2026-09-09
 
 ### Added

package/README.md

@@ -6,7 +6,7 @@ content entries from your terminal, signing with a locally encrypted key.
 Content is stored on [Walrus](https://walrus.xyz); private entries are encrypted
 with [Seal](https://github.com/MystenLabs/seal).
 
-> Status: v0.7.0. Mainnet and testnet are both supported for public content;
+> Status: v0.9.0. Mainnet and testnet are both supported for public content;
 > the command surface is stable.
 >
 > **Encrypted commands are testnet-only.** `entry add-encrypted`, `entry
@@ -173,9 +173,9 @@ and `-C, --collection <name>`, both defaulting to the active context.
 | Command | Purpose |
 | --- | --- |
 | `config add <name> --network <net> [--rpc <url>] [--upload-relay <url\|auto>]` | Create or update a profile. |
+| `config remove <name>` | Delete a profile. Also `config delete`. |
 | `config list` | List profiles; `*` marks the default. |
 | `config use <name>` | Set the default profile. |
-| `config remove <name>` | Delete a profile. |
 | `config path` | Print the config file path. |
 
 ### account
@@ -281,13 +281,13 @@ also returns the raw `sealIdPrefix` and `sealNonce` as hex, usable as `--prefix`
 
 `file list` reconstructs the file set from contract events. `RecipientFile`
 objects have no on-chain owner index for the shared case, so listing is
-event-derived, not a direct query. By default the command reads events via
-`suix_queryEvents` on the configured Sui RPC. That endpoint is **deprecated**
-(Mysten is sunsetting it), so listing may degrade or stop working on the public
-RPC over time; point `--indexer-url <url>` at any source that speaks
-`suix_queryEvents` (a self-hosted indexer, a third-party endpoint) to stay in
-control. Results are best-effort and eventually consistent (subject to indexer
-lag and retention). Summary rows omit `blobId`/`blobObjectId`; add `--hydrate`
+event-derived, not a direct query. The command reads events from a Sui GraphQL
+endpoint, defaulting to the canonical Mysten one for the network. It used to use
+`suix_queryEvents` over JSON-RPC, which public fullnodes have since retired;
+`@mysten/sui`'s gRPC client exposes no event API, so GraphQL is the transport
+that remains. Point `--indexer-url <url>` at a different GraphQL endpoint (a
+self-hosted indexer, a third-party endpoint) to stay in control. Results are
+best-effort and eventually consistent (subject to indexer lag and retention). Summary rows omit `blobId`/`blobObjectId`; add `--hydrate`
 to fetch the full record per file (one read each) when you need them.
 
 ## Output and scripting
@@ -348,9 +348,29 @@ to fetch the full record per file (one read each) when you need them.
   an operator, use the SDK directly for now.
 - `localnet` is accepted as a network but has no canonical deployment, so it
   fails at startup unless you point the SDK at your own package and registry.
-- `file list` walks a JSON-RPC event query that public Sui fullnodes have
-  retired, so it needs `--indexer-url` pointing at a source that serves the same
-  query. This affects testnet as well as mainnet.
+- `file list` reads events from a Sui GraphQL endpoint, defaulting to the
+  canonical one for the network. `--indexer-url` points it at a different
+  GraphQL endpoint. There is no canonical endpoint for localnet, so listing
+  there requires the flag.
+
+## Command spellings
+
+Several commands accept two verbs for the same action, so whichever you reach
+for works. These are aliases, not separate commands:
+
+| Canonical | Also accepts |
+| --- | --- |
+| `account show` | `account get` |
+| `publication get` | `publication show` |
+| `entry get` | `entry show` |
+| `file get` | `file show` |
+| `config remove` | `config delete` |
+| `cap transfer` | `cap transfer-ownership` |
+| `entry read` | `entry download` |
+| `file download` | `file read` |
+| `entry scan` | `entry list --all` |
+
+`publication` also answers to `pub`.
 
 ## When uploads fail: the upload relay
 

package/dist/index.js

@@ -148,7 +148,7 @@ import { Command } from "commander";
 // package.json
 var package_default = {
   name: "@arcadiasystems/morse-cli",
-  version: "0.7.0",
+  version: "0.9.0",
   description: "Command-line interface for the Morse decentralized CMS on Sui.",
   license: "MIT",
   type: "module",
@@ -203,7 +203,7 @@ var package_default = {
     prepublishOnly: "bun run check && bun run build"
   },
   dependencies: {
-    "@arcadiasystems/morse-sdk": "^0.7.0",
+    "@arcadiasystems/morse-sdk": "^0.8.0",
     "@mysten/seal": "1.1.3",
     "@mysten/sui": "2.16.2",
     "@mysten/walrus": "1.1.6",
@@ -220,10 +220,37 @@ var package_default = {
 var DEFAULT_MAX_TIP_MIST = 1e7;
 function buildProgram() {
   const program = new Command;
-  program.name("morse").description("Command-line interface for the Morse decentralized CMS on Sui.").version(package_default.version, "-V, --version", "Print the version and exit").option("--network <network>", "Sui network: mainnet, testnet, or localnet [env: MORSE_NETWORK]").option("-p, --profile <name>", "Config profile to use [env: MORSE_PROFILE]").option("--rpc <url>", "Override the Sui RPC URL [env: MORSE_RPC_URL]").option("--upload-relay <url|auto>", "Upload Walrus blobs through a relay instead of fanning out to every storage node; 'auto' picks the canonical relay for the network. Costs a tip per upload [env: MORSE_WALRUS_UPLOAD_RELAY]").option("--max-tip <mist>", `Cap the per-upload relay tip, in MIST (default: ${DEFAULT_MAX_TIP_MIST}) [env: MORSE_WALRUS_MAX_TIP]`).option("--json", "Output machine-readable JSON on stdout").option("-q, --quiet", "Suppress progress and informational output").option("-y, --yes", "Assume yes for confirmation prompts").option("--debug", "Print stack traces on error").enablePositionalOptions().showHelpAfterError().exitOverride();
+  program.name("morse").description("Command-line interface for the Morse decentralized CMS on Sui.").version(package_default.version, "-V, --version", "Print the version and exit").option("--network <network>", "Sui network: mainnet, testnet, or localnet [env: MORSE_NETWORK]").option("-p, --profile <name>", "Config profile to use [env: MORSE_PROFILE]").option("--rpc <url>", "Override the Sui RPC URL [env: MORSE_RPC_URL]").option("--upload-relay <url|auto>", "Upload Walrus blobs through a relay instead of fanning out to every storage node; 'auto' picks the canonical relay for the network. Costs a tip per upload [env: MORSE_WALRUS_UPLOAD_RELAY]").option("--max-tip <mist>", `Cap the per-upload relay tip, in MIST (default: ${DEFAULT_MAX_TIP_MIST}). Only applies with --upload-relay [env: MORSE_WALRUS_MAX_TIP]`).option("--json", "Output machine-readable JSON on stdout").option("-q, --quiet", "Suppress progress and informational output").option("-y, --yes", "Assume yes for confirmation prompts").option("--debug", "Print stack traces on error").enablePositionalOptions().showHelpAfterError().exitOverride();
   return program;
 }
 
+// src/cli/io.ts
+import { access, readFile, writeFile } from "node:fs/promises";
+async function fileExists(path) {
+  try {
+    await access(path);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function readBytes(path) {
+  return new Uint8Array(await readFile(path));
+}
+async function readJson(path) {
+  return JSON.parse(await readFile(path, "utf8"));
+}
+async function writeFileContents(path, data) {
+  await writeFile(path, data);
+}
+async function readStdin() {
+  const chunks = [];
+  for await (const chunk of process.stdin) {
+    chunks.push(chunk);
+  }
+  return new Uint8Array(Buffer.concat(chunks));
+}
+
 // src/cli/prompts.ts
 import * as readline from "node:readline";
 function isInteractive() {
@@ -487,33 +514,6 @@ function malformed(source, detail) {
 // src/config/store.ts
 import { chmod, mkdir, rename } from "node:fs/promises";
 
-// src/cli/io.ts
-import { access, readFile, writeFile } from "node:fs/promises";
-async function fileExists(path) {
-  try {
-    await access(path);
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function readBytes(path) {
-  return new Uint8Array(await readFile(path));
-}
-async function readJson(path) {
-  return JSON.parse(await readFile(path, "utf8"));
-}
-async function writeFileContents(path, data) {
-  await writeFile(path, data);
-}
-async function readStdin() {
-  const chunks = [];
-  for await (const chunk of process.stdin) {
-    chunks.push(chunk);
-  }
-  return new Uint8Array(Buffer.concat(chunks));
-}
-
 // src/config/paths.ts
 import { homedir } from "node:os";
 import { join } from "node:path";
@@ -559,7 +559,7 @@ async function updateActiveProfile(opts, patch, env = process.env) {
   const config = await loadConfig();
   const profileName = opts.profile ?? env.MORSE_PROFILE ?? config.defaultProfile;
   const existing = config.profiles[profileName];
-  const network = coerceNetwork(opts.network ?? env.MORSE_NETWORK ?? existing?.network ?? "testnet");
+  const network = existing?.network ?? coerceNetwork(opts.network ?? env.MORSE_NETWORK ?? "testnet");
   const merged = { ...existing, network, ...patch };
   const profiles = { ...config.profiles, [profileName]: merged };
   const defaultProfile = Object.keys(config.profiles).length === 0 ? profileName : config.defaultProfile;
@@ -925,7 +925,7 @@ function registerAccountCommands(program) {
   account.command("list").description("List imported accounts").action(async (_options, command) => {
     await runAccountList(outputFor(command), globalOptions(command));
   });
-  account.command("show").description("Print the active account address").action(async (_options, command) => {
+  account.command("show").alias("get").description("Print the active account address").action(async (_options, command) => {
     await runAccountShow(outputFor(command), globalOptions(command));
   });
   account.command("use <address>").description("Set the active account for the current profile").action(async (address, _options, command) => {
@@ -940,8 +940,15 @@ async function readSecretToImport(env, signal) {
   if (raw !== undefined && raw.length > 0) {
     return raw;
   }
+  if (!process.stdin.isTTY) {
+    const piped = new TextDecoder().decode(await readStdin()).trim();
+    if (piped.length > 0) {
+      return piped;
+    }
+    throw new UsageError("Cannot read a private key: pipe it on stdin, set MORSE_PRIVATE_KEY, or run in an interactive terminal.");
+  }
   if (!isInteractive()) {
-    throw new UsageError("Cannot read a private key: set MORSE_PRIVATE_KEY or run in an interactive terminal.");
+    throw new UsageError("Cannot read a private key: pipe it on stdin, set MORSE_PRIVATE_KEY, or run in an interactive terminal.");
   }
   process.stderr.write(`Paste your Sui private key (starts with suiprivkey1...), then press Enter. Input is hidden.
 `);
@@ -981,7 +988,70 @@ import {
   RpcRecipientFilesReader
 } from "@arcadiasystems/morse-sdk";
 import { SuiGrpcClient } from "@mysten/sui/grpc";
-import { SuiJsonRpcClient } from "@mysten/sui/jsonRpc";
+
+// src/cli/graphql-events.ts
+function canonicalGraphqlUrl(network) {
+  if (network === "mainnet" || network === "testnet") {
+    return `https://graphql.${network}.sui.io/graphql`;
+  }
+  return;
+}
+var QUERY = `query Events($type: String!, $first: Int!, $after: String) {
+  events(filter: { type: $type }, first: $first, after: $after) {
+    pageInfo { hasNextPage endCursor }
+    nodes { timestamp contents { json type { repr } } }
+  }
+}`;
+
+class GraphqlEventQuerier {
+  #url;
+  #fetch;
+  constructor(url, fetchImpl = fetch) {
+    this.#url = url;
+    this.#fetch = fetchImpl;
+  }
+  async queryEvents(params) {
+    const body = JSON.stringify({
+      query: QUERY,
+      variables: {
+        type: params.query.MoveEventType,
+        first: params.limit ?? 50,
+        after: typeof params.cursor === "string" ? params.cursor : null
+      }
+    });
+    let response;
+    try {
+      response = await this.#fetch(this.#url, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body,
+        ...params.signal === undefined ? {} : { signal: params.signal }
+      });
+    } catch (cause) {
+      throw new CliError(`Could not reach the event source at ${this.#url}.`, ExitCode.Network, { cause });
+    }
+    if (!response.ok) {
+      throw new CliError(`Event source at ${this.#url} returned HTTP ${response.status}.`, ExitCode.Network);
+    }
+    const payload = await response.json();
+    if (payload.errors && payload.errors.length > 0) {
+      throw new CliError(`Event source rejected the query: ${payload.errors[0]?.message ?? "unknown error"}`, ExitCode.Network);
+    }
+    const events = payload.data?.events;
+    const nodes = events?.nodes ?? [];
+    return {
+      data: nodes.map((node) => ({
+        type: node.contents?.type?.repr ?? "",
+        parsedJson: node.contents?.json ?? {},
+        timestampMs: node.timestamp == null ? null : String(Date.parse(node.timestamp) || 0)
+      })),
+      hasNextPage: Boolean(events?.pageInfo?.hasNextPage),
+      nextCursor: events?.pageInfo?.endCursor ?? null
+    };
+  }
+}
+
+// src/cli/context.ts
 async function buildReadContext(command) {
   const opts = globalOptions(command);
   const output = outputFor(command);
@@ -1131,16 +1201,16 @@ async function buildFileListContext(command, opts = {}) {
   if (originPackageId === undefined) {
     throw new CliError("File listing is unavailable on this network: no recipientFileEventOriginPackageId in the config. Use testnet, or supply a config that sets it.", ExitCode.Usage);
   }
-  const events = new SuiJsonRpcClient({
-    network: base.settings.network,
-    url: opts.indexerUrl ?? base.config.rpcUrl
-  });
+  const indexerUrl = opts.indexerUrl ?? canonicalGraphqlUrl(base.settings.network);
+  if (indexerUrl === undefined) {
+    throw new CliError(`File listing has no canonical event source for ${base.settings.network}. Pass --indexer-url pointing at a Sui GraphQL endpoint.`, ExitCode.Usage);
+  }
   return {
     ...base,
     filesReader: RpcRecipientFilesReader.fromConfig(base.client, {
       packageId: base.config.packageId
     }),
-    events,
+    events: new GraphqlEventQuerier(indexerUrl),
     eventTypes: buildRecipientFileEventTypes(originPackageId)
   };
 }
@@ -1502,7 +1572,7 @@ function registerCapCommands(program) {
   publicationOption(destroy).action(async (publisherCapId, options, command) => {
     await runCapDestroy(await buildWriteContext(command), publisherCapId, options, globalOptions(command));
   });
-  cap.command("transfer <publisherCapId> <recipient>").description("Transfer a PublisherCap object to another address").action(async (publisherCapId, recipient, _options, command) => {
+  cap.command("transfer <publisherCapId> <recipient>").alias("transfer-ownership").description("Transfer a PublisherCap object to another address").action(async (publisherCapId, recipient, _options, command) => {
     await runCapTransfer(await buildWriteContext(command), publisherCapId, recipient, globalOptions(command));
   });
 }
@@ -1521,6 +1591,9 @@ async function runCollectionList(ctx, options) {
     collections: publication.collections
   });
 }
+function isActivePublication(ctx, target) {
+  return ctx.settings.publication === target;
+}
 async function runCollectionCreate(ctx, name, options, gopts) {
   const id = await resolvePublication(ctx, options.publication);
   const storageMode = coerceStorageMode(options.mode);
@@ -1536,8 +1609,11 @@ async function runCollectionCreate(ctx, name, options, gopts) {
     storageMode,
     signal: ctx.signal
   });
-  await updateActiveProfile(gopts, { collection: name });
-  ctx.output.result(`Created collection "${name}". Selected as the active collection. (tx: ${result.digest})`, result);
+  const selected = isActivePublication(ctx, id);
+  if (selected) {
+    await updateActiveProfile(gopts, { collection: name });
+  }
+  ctx.output.result(`Created collection "${name}".${selected ? " Selected as the active collection." : ""} (tx: ${result.digest})`, result);
 }
 async function runCollectionDelete(ctx, name, options, gopts) {
   const id = await resolvePublication(ctx, options.publication);
@@ -1559,7 +1635,7 @@ async function runCollectionDelete(ctx, name, options, gopts) {
     name,
     signal: ctx.signal
   });
-  if (ctx.settings.collection === name) {
+  if (ctx.settings.collection === name && isActivePublication(ctx, id)) {
     await updateActiveProfile(gopts, { collection: undefined });
   }
   ctx.output.result(`Deleted collection "${name}". (tx: ${result.digest})`, result);
@@ -1599,6 +1675,7 @@ async function runConfigAdd(output, name, options) {
   const profiles = {
     ...cfg.profiles,
     [name]: {
+      ...cfg.profiles[name],
       network,
       ...options.rpc === undefined ? {} : { rpc: options.rpc },
       ...options.uploadRelay === undefined ? {} : { uploadRelay: options.uploadRelay }
@@ -1620,11 +1697,19 @@ async function runConfigUse(output, name) {
   await saveConfig({ ...cfg, defaultProfile: name });
   output.result(`Default profile set to "${name}".`, { defaultProfile: name });
 }
-async function runConfigRemove(output, name) {
+async function runConfigRemove(output, name, gopts = {}, signal) {
   const cfg = await loadConfig();
   requireProfile(cfg, name);
   const { [name]: _removed, ...rest } = cfg.profiles;
   const defaultProfile = cfg.defaultProfile === name ? Object.keys(rest)[0] ?? "default" : cfg.defaultProfile;
+  const reassigns = cfg.defaultProfile === name && defaultProfile !== name;
+  const proceed = await confirm(`Delete profile "${name}"?${reassigns ? ` The default becomes "${defaultProfile}".` : ""}`, {
+    assumeYes: Boolean(gopts.yes),
+    ...signal === undefined ? {} : { signal }
+  });
+  if (!proceed) {
+    cancelled();
+  }
   await saveConfig({ ...cfg, profiles: rest, defaultProfile });
   output.result(`Removed profile "${name}".`, {
     removed: name,
@@ -1646,8 +1731,8 @@ function registerConfigCommands(program) {
   config.command("use <name>").description("Set the default profile").action(async (name, _options, command) => {
     await runConfigUse(outputFor(command), name);
   });
-  config.command("remove <name>").description("Delete a profile").action(async (name, _options, command) => {
-    await runConfigRemove(outputFor(command), name);
+  config.command("remove <name>").alias("delete").description("Delete a profile").action(async (name, _options, command) => {
+    await runConfigRemove(outputFor(command), name, globalOptions(command), sigintSignal());
   });
 }
 function requireProfile(config, name) {
@@ -1850,6 +1935,12 @@ async function runEntryGet(ctx, entryId, options) {
   ctx.output.result(renderEntry(result), result);
 }
 async function runEntryList(ctx, options) {
+  if (options.all) {
+    if (options.limit !== undefined || options.cursor !== undefined) {
+      throw new UsageError("--all cannot be combined with --limit or --cursor.");
+    }
+    return runEntryScan(ctx, options);
+  }
   const id = await resolvePublication(ctx, options.publication);
   const collection = resolveCollection(ctx, options.collection);
   const page = await ctx.reader.listEntries(id, collection, {
@@ -1961,11 +2052,11 @@ async function runEntryRead(ctx, entryId, revisionId, options) {
 }
 function registerEntryCommands(program) {
   const entry = program.command("entry").description("Read, add, and delete entries in a collection");
-  const get = entry.command("get <entryId>").description("Fetch a single entry");
+  const get = entry.command("get <entryId>").alias("show").description("Fetch a single entry");
   collectionOption(publicationOption(get)).action(async (entryId, options, command) => {
     await runEntryGet(await buildReadContext(command), entryId, options);
   });
-  const list = entry.command("list").description("List entries in a collection").option("--limit <n>", "Maximum results per page").option("--cursor <cursor>", "Continue from a previous page cursor").option("--drafts-only", "Show only entries with a pending (unpublished) draft");
+  const list = entry.command("list").description("List entries in a collection").option("--limit <n>", "Maximum results per page").option("--cursor <cursor>", "Continue from a previous page cursor").option("--all", "Fetch every page (same as `entry scan`)").option("--drafts-only", "Show only entries with a pending (unpublished) draft");
   collectionOption(publicationOption(list)).action(async (options, command) => {
     await runEntryList(await buildReadContext(command), options);
   });
@@ -1981,7 +2072,7 @@ function registerEntryCommands(program) {
   collectionOption(publicationOption(publisherCapOption(remove))).action(async (entryId, options, command) => {
     await runEntryDelete(await buildWriteContext(command), entryId, options, globalOptions(command));
   });
-  const read = entry.command("read <entryId> [revisionIndex]").description("Fetch a public entry's content to stdout or a file").option("--out <path>", "Write content to a file instead of stdout");
+  const read = entry.command("read <entryId> [revisionIndex]").alias("download").description("Fetch a public entry's content to stdout or a file").option("--out <path>", "Write content to a file instead of stdout");
   collectionOption(publicationOption(viaAggregatorOption(read))).action(async (entryId, revisionId, options, command) => {
     await runEntryRead(await buildReadContentContext(command, {
       viaAggregator: options.viaAggregator
@@ -2116,6 +2207,9 @@ async function runFileRegister(ctx, options) {
     throw new UsageError("Pass --public or --encrypted, not both.");
   }
   const recipients = (options.recipient ?? []).map((r) => toSuiAddress4(r));
+  if (options.public && recipients.length > 0) {
+    throw new UsageError("--recipient applies to encrypted files; a public file is readable by anyone.");
+  }
   const blobId = toWalrusBlobId(options.blobId);
   const size = parseByteSize(options.size, "--size");
   const blobObjectId = options.blobObjectId === undefined ? undefined : toBlobObjectId(options.blobObjectId);
@@ -2411,13 +2505,13 @@ function registerFileCommands(program) {
       indexerUrl: options.indexerUrl
     }), options);
   });
-  const download = file.command("download [file]").description("Download a file's content; decrypts in place when encrypted").option("--out <path>", "Write content to a file instead of stdout").option("--share <string>", "Share string from upload (bundles file id, prefix, nonce)").option("--prefix <hex>", "Seal prefix (with --nonce) to decrypt").option("--nonce <hex>", "Seal nonce (with --prefix) to decrypt").option("--raw", "Write the raw (still-encrypted) bytes when no decrypt input is given");
+  const download = file.command("download [file]").alias("read").description("Download a file's content; decrypts in place when encrypted").option("--out <path>", "Write content to a file instead of stdout").option("--share <string>", "Share string from upload (bundles file id, prefix, nonce)").option("--prefix <hex>", "Seal prefix (with --nonce) to decrypt").option("--nonce <hex>", "Seal nonce (with --prefix) to decrypt").option("--raw", "Write the raw (still-encrypted) bytes when no decrypt input is given");
   viaAggregatorOption(download).action(async (target, options, command) => {
     await runFileDownload(await buildFileDownloadContext(command, {
       viaAggregator: options.viaAggregator
     }), target, options);
   });
-  file.command("get <file>").description("Fetch a file's on-chain metadata").action(async (target, _options, command) => {
+  file.command("get <file>").alias("show").description("Fetch a file's on-chain metadata").action(async (target, _options, command) => {
     await runFileGet(await buildFilesReadContext(command), target);
   });
   const register = file.command("register").description("Register on-chain metadata for a blob already on Walrus").requiredOption("--blob-id <id>", "Walrus content id").requiredOption("-n, --name <name>", "File name").requiredOption("--content-type <mime>", "MIME content type").requiredOption("--size <bytes>", "Plaintext byte length").option("--public", "Register a world-readable (unencrypted) file").option("--encrypted", "Register an encrypted file (needs --seal-prefix)").option("--seal-prefix <hex>", "Seal prefix the blob was encrypted under").option("--blob-object-id <id>", "On-chain Walrus Blob object id, if known");
@@ -2553,7 +2647,7 @@ async function runPublicationTransferOwnership(ctx, recipient, options, gopts) {
 }
 function registerPublicationCommands(program) {
   const publication = program.command("publication").alias("pub").description("Work with publications");
-  publication.command("get [publication]").description("Fetch a publication (slug or id; default: the active publication)").action(async (target, _options, command) => {
+  publication.command("get [publication]").alias("show").description("Fetch a publication (slug or id; default: the active publication)").action(async (target, _options, command) => {
     await runPublicationGet(await buildReadContext(command), target);
   });
   publication.command("list [address]").description("List publications owned by an address (default: the active account)").option("--limit <n>", "Maximum results per page").option("--cursor <cursor>", "Continue from a previous page cursor").option("--ids-only", "Skip slug/name resolution (one RPC, no per-publication reads)").action(async (address, options, command) => {

package/docs/QUICKSTART.md

@@ -43,6 +43,18 @@ Saved profile "testnet" (testnet).
 
 ## 2. Import your key
 
+Three ways to give the CLI a key. It is never accepted as a flag, because argv
+is visible in `ps` and shell history.
+
+- **Interactive**: run `morse account import` and paste at the hidden prompt.
+- **Piped**: `echo "$KEY" | morse account import`
+- **No keystore at all**: export `MORSE_PRIVATE_KEY` and skip the import; every
+  command picks it up.
+
+The first two store the key encrypted and need `MORSE_KEYSTORE_PASSWORD` (or an
+interactive password prompt).
+
+
 `account import` prompts for the secret key and a keystore password, both hidden.
 The key is encrypted at rest (scrypt + AES-256-GCM) and never stored in plaintext.
 

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@arcadiasystems/morse-cli",
-	"version": "0.7.0",
+	"version": "0.9.0",
 	"description": "Command-line interface for the Morse decentralized CMS on Sui.",
 	"license": "MIT",
 	"type": "module",
@@ -55,7 +55,7 @@
 		"prepublishOnly": "bun run check && bun run build"
 	},
 	"dependencies": {
-		"@arcadiasystems/morse-sdk": "^0.7.0",
+		"@arcadiasystems/morse-sdk": "^0.8.0",
 		"@mysten/seal": "1.1.3",
 		"@mysten/sui": "2.16.2",
 		"@mysten/walrus": "1.1.6",