@candledottv/cli 0.13.23 → 0.13.25

package/README.md

@@ -1,6 +1,6 @@
 # @candledottv/cli
 
-The Candle CLI (current version 0.13.0): authorize a device from your browser, keep your own keys
+The Candle CLI (current version 0.13.23): authorize a device from your browser, keep your own keys
 in an encrypted vault on this machine, hand an agent a TEE wallet it can trade, and manage API
 keys, wallets, and setup health from the terminal. Zero runtime dependencies; the whole thing is
 one self-contained `dist/index.js` that runs under plain Node.
@@ -109,10 +109,10 @@ chosen words from your saved copy. Clear your terminal's scrollback too: the CLI
 | `candle keys limits <prefix> <asset>=<raw> [<asset>=<raw> ...]` | Sets a key's per-asset caps (`sol`, `usdc`, `cndl`, `eth`, `usdg`, in base units per transaction) with the profile's own API key. It can only tighten; raising or removing a cap is `LOOSEN_REQUIRES_SESSION`, and the owner does that in the web key manager. A device token cannot set these caps. |
 | `candle keys update <prefix\|label> --embedded-wallet allow\|deny [--yes]`, `candle keys self embedded-wallet deny` | Allow or deny a key the account's embedded wallet, with the device token (allowing needs the prefix typed back at a terminal). `self embedded-wallet deny` lets the profile's own key give it up with no prompt; a key can never allow itself. |
 | `candle keys signer approve <code> --key <prefix\|label> [--reject]`, `candle keys signer move <prefix\|label> [--to-key <prefix\|label>]` | Key signers for bots on a different machine from the vault. `approve` accepts (or rejects) a key's signer request with the device token, after you type the full fingerprint the trading machine printed. `move`, on the machine holding a wallet's current signer, moves every wallet on the key onto its active signer; `--to-key` moves a revoked key's wallets to a live key. |
-| `candle keys stop <prefix>` | Pause one key using the device token. Its requests are refused with `PROFILE_PAUSED` until resumed; the key and its local credential are kept. Repeating the command succeeds. |
-| `candle keys resume <prefix>` | Resume a stopped key using the device token. Repeating the command succeeds. An API key cannot stop or resume itself; a revoked key cannot be resumed. |
+| `candle keys stop <prefix\|label>` | Pause one key using the device token. Its requests are refused with `PROFILE_PAUSED` until the owner resumes it in the signed-in console; the key and its local credential are kept. Repeating the command succeeds. |
+| `candle keys resume <prefix\|label>` | A device token cannot resume a stopped key: the server answers `LOOSEN_REQUIRES_SESSION` and the key stays stopped. The owner resumes it in the signed-in console. An API key cannot stop or resume itself; a revoked key cannot be resumed. |
 | `candle keys rotate <prefix\|label> ([--grace <duration> \| --now] [--force] [--yes] [--idempotency-key <key>] \| --finish)` | Gives a key a new secret and keeps its prefix, label, access, limits, wallets and history. The old secret keeps working through `--grace` (default `1h`, at most `24h`) or stops at once with `--now`; `--finish` ends an open window early. When the key is the CLI's own, the new secret replaces it in the keychain. A copy in `CANDLE_API_KEY_FILE`, `CANDLE_API_KEY` or anywhere else must be updated by hand before the window ends; `candle doctor` warns while the old secret is in use. Each run sends an `Idempotency-Key` and retries a dropped connection once; if there is still no answer, rerun with the printed `--idempotency-key` to recover the first secret. |
-| `candle keys revoke <prefix>` | Revokes an API key by prefix. Revoking the CLI's own stored key also clears it locally. A prefix can start with `-`; the key commands accept it as typed, and `--` (`candle keys revoke -- -QVeHyie`) ends the options on any command. |
+| `candle keys revoke <prefix\|label>` | Revokes an API key by prefix or label. A label resolves to its prefix the way `keys access` does; two live keys with the same label refuse and list their prefixes. Revoking the CLI's own stored key also clears it locally. A prefix can start with `-`; the key commands accept it as typed, and `--` (`candle keys revoke -- -QVeHyie`) ends the options on any command. |
 | `candle keys wallets <prefix>`, `keys wallets set <prefix> --wallets <id,id>`, `keys wallets scope <prefix> --scope all\|selected` | Each key is an agent profile with its own wallet set: list it, replace it, or limit the profile to its assigned wallets. |
 | `candle wallets` (alias `candle wallet`) | Shows the account's embedded (launch) wallets and any linked wallets, using the API key, with a `Signer` column saying whether this machine holds each linked wallet's signing key and a `Trusted` column saying whether it is yours (linked while signed in, or marked with `trust`). It links and revokes; it never generates or prints a key, which the vault now derives. |
 | `candle wallets import --chain solana\|evm`, `wallets revoke <wallet-id>` | Link a wallet you own (key from `--key-file` or a hidden prompt, sealed to Privy before it leaves the machine), or unlink one. |
@@ -120,9 +120,9 @@ chosen words from your saved copy. Clear your terminal's scrollback too: the CLI
 | `candle wallets authorize` | Gives agents access to the account's embedded wallets. The grant is yours to make in a browser (each wallet's owner is you, so neither the CLI nor the API can attach Candle's signer): this opens the Agents page's grant-only step, creates no key, and with an API key waits until the wallets show as delegated. On a new account, run it before `candle auth login`. |
 | `candle wallets trust\|untrust <label\|address\|id\|prefix*>...` | Mark linked wallets as yours so an agent's Withdraw key can move funds into them, or clear the mark. Owner only, over the device token, with a typed confirm; a trailing `*`, as in `'tr-*'`, selects by prefix. |
 | `candle wallets allow-launch\|disallow-launch <label\|address\|id\|prefix*>...` | Deprecated. Where the server has `TEE_LAUNCH_BY_SCOPE_ENABLED` on, a key's `launch:write` decides TEE launches: `allow-launch` saves the value and exits 0, and `disallow-launch` saves it, prints the server's `ALLOW_LAUNCH_NOT_ENFORCED` message and exits 1, because no launch is stopped. A server with the switch off still lets TEE wallets pay for a launch (`candle launch`) only after `allow-launch`. Owner only, over the device token; the screen shows each wallet's label, address and bound key before a typed confirm. `disallow-launch --yes` skips the confirm. |
-| `candle wallets close-empty [--wallet embedded\|<tee address\|label>] [--keep <mint>]... [--client-trade-id <id>] [--preview] [--yes]` | Closes a wallet's empty token accounts and returns their rent to it, after a preview: the embedded wallet (`transfer:write`), or a Solana TEE wallet bound to the key (`swap:write`), whose close transactions Candle builds, this machine checks and the key signer approves. `--preview` prints what would close — the whole preview as one JSON document on stdout under `--json` — and closes, signs and prompts nothing; headless without `--yes`, the `CONFIRMATION_REQUIRED` refusal carries that same preview under `details`. |
+| `candle wallets close-empty [--wallet embedded\|<tee address\|label>] [--keep <mint>]... [--client-trade-id <id>] [--preview] [--yes]` | Closes a wallet's empty token accounts and returns their rent to it, after a preview: the embedded wallet (`swap:write` or `transfer:write`), or a Solana TEE wallet bound to the key (`swap:write`), whose close transactions Candle builds, this machine checks and the key signer approves. `--preview` prints what would close — the whole preview as one JSON document on stdout under `--json` — and closes, signs and prompts nothing; headless without `--yes`, the `CONFIRMATION_REQUIRED` refusal carries that same preview under `details`. |
 | `candle vault init\|status\|list\|new-key\|rename\|phrase show\|restore\|reconcile-exposure` | The encrypted local vault, `vault.enc` (Tier 1). `init` creates it with a passphrase factor and a 24-word recovery phrase (and no key), labels its read-back derivation as verification, and leaves security-key enrollment to the separate optional `candle vault enroll security-key` command; `new-key` derives a key inside it (`--count`, `--labels-from <file>` for many under one unlock), `list [filter] [--balances]` shows one line per key, `rename` changes a label only, `phrase show` displays the phrase on a terminal (never in `--json`, a log or a pipe), and `restore --phrase` rebuilds the derived keys on another machine with a new passphrase (`--count`, `--tee-count`, `--external-count`, `--evm-count` and `--evm-tee-count` for EVM keys and Hood TEE wallets, or a Solana gap scan with `--rpc-url`); a restored vault never allocates new keys. `reconcile-exposure` re-reads the account and adds exposure records, clearing nothing. No key ever leaves the vault to reach Candle. See [CLI custody](https://docs.candle.tv/developers/cli-custody). |
-| `candle vault factor list\|add passphrase\|add security-key\|add touch-id\|add passkey\|remove` (or `vault enroll <kind>`), `vault backup --to <path>\|icloud`, `vault verify-backup <path>` | What can open the vault, and proving a copy of it works: `backup` verifies the copy in full before reporting (a copy is sealed, keeping only the passphrase and security-key envelopes, unless it goes to a recognised local disk or removable drive, so a cloud folder and any path the CLI cannot place are both sealed unless `--accept-shared-domain` is passed), and `verify-backup` re-checks an existing one against this vault's key and address set. `add security-key` enrolls a FIDO2 security key (CTAP2 `hmac-secret`, user-verified with the key's PIN or biometric) through the bundled `candle-fido2` helper (`--install-helper` fetches and verifies this release's helper first); one key is not a recoverable factor, two keys are a pair, an enrolled key can authorize adding another, and the passphrase stays the recovery floor. `add touch-id` and `add passkey` are refused with `VAULT_FACTOR_UNSUPPORTED_ON_PLATFORM` until the Apple-signed helper ships. Every vault command then takes `--factor <id\|passphrase\|security-key>` to say which envelope opens it and `--device <id>` to name the key when several are attached. |
+| `candle vault factor list\|add passphrase\|add security-key\|add touch-id\|add passkey\|remove` (or `vault enroll <kind>`), `vault backup --to <path>\|icloud`, `vault verify-backup <path>` | What can open the vault, and proving a copy of it works: `backup` verifies the copy in full before reporting (a copy is sealed, keeping only the passphrase and security-key envelopes, unless it goes to a recognised local disk or removable drive, so a cloud folder and any path the CLI cannot place are both sealed unless `--accept-shared-domain` is passed), and `verify-backup` re-checks an existing one against this vault's key and address set. `add security-key` enrolls a FIDO2 security key (CTAP2 `hmac-secret`, user-verified with the key's PIN or biometric) through the bundled `candle-fido2` helper (`--install-helper` fetches and verifies this release's helper first); one key is not a recoverable factor, two keys are a pair, an enrolled key can authorize adding another, and the passphrase stays the recovery floor. `add touch-id` is available in 0.13.23 on supported Macs with the signed `candle-enclave.app`; npm ships no native helper. `add passkey` remains unavailable (`VAULT_FACTOR_UNSUPPORTED_ON_PLATFORM`): the shipped helper lacks the associated-domain entitlement. Every vault command then takes `--factor <id\|passphrase\|security-key\|touch-id>` to say which envelope opens it and `--device <id>` to name the key when several are attached. |
 | `candle vault transfer\|promote\|promote-batch\|fund\|demote\|export-key` | Moving value and authority. `transfer` and `fund` sign locally after showing the decoded transaction (`transfer` from a vault key or a promoted TEE wallet, which warns when an agent may be trading it and reports the finalized transfer to Candle's history; `fund` reaches a TEE wallet from its pinned vault key, or an external wallet, with no `--yes`; both verify once, at the unlock, which names the send, then show the destination grouped in fours and take a typed `confirm`); `promote --from <cold label>` derives a fresh TEE wallet pinned to that key (an EVM vault key becomes a Hood TEE wallet), shows the pinned vault address and asks you to type `confirm` to promote the new wallet (promotion moves no funds), `promote --in-place <label> --sweep-to <cold label>` promotes a key at its own address after a typed warning, `promote-batch --pairs-from <file>` does many in place under one unlock, `--to-key` binds the result to another of your keys, and `demote` (disable then sweep; `--emergency` sweeps even when the stop request fails) sends it back to its pinned vault; `export-key` is the one ceremony that writes a single private key to a file you name. `demote` takes several addresses, or `--all --empty` for every Solana TEE wallet with nothing left to sweep, under one unlock and one typed `confirm` (`--yes` skips it), with a result line per wallet and one `--json` document. |
 | `candle external new\|list\|sweep` | External wallets for outside tools: keys on the vault's third branch (`m/44'/501'/n'/2'`), never delegated to Privy and never registered with Candle. `new` allocates one (and moves the vault to format version 3; refused in a restored vault), `list` shows them, and `sweep <external> --to <vault>` sends everything back to a named vault key, signed locally, confirmed by a typed `confirm` after the vault key's address is shown. See [Bring your own services](https://docs.candle.tv/developers/cli#bring-your-own-services). |
 | `candle sign [--file <path>] --wallet <external>... [--broadcast] [--yes]`, `candle sign message --wallet <external> [--file <path>] [--yes]` | The generic signer: a base64 transaction any tool built, legacy or v0, decoded (lookup tables resolved) and simulated over your own RPC before it is displayed and signed with an external wallet only. A vault key, a TEE wallet or an unnamed signer is refused; a failing simulation is refused with no override; `--yes` skips the confirmation prompt and nothing else. `sign message` signs the exact bytes of a file or of stdin. |
@@ -240,7 +240,7 @@ transparency log: [Verify a Candle release](https://docs.candle.tv/developers/ve
 
 Where the API has `OWNER_CONFIRM_ENABLED` on, an owner step made with the device token that widens what the account's keys can do also needs one approval in your browser, signed in as the account owner. The API answers `403 OWNER_CONFIRM_REQUIRED` and changes nothing; the CLI then:
 
-1. Prints what you are approving (a summary the server built), `Open <url>` and `Code: XXXX-XXXX` on stderr, with "Only approve if you just ran this command." It opens the browser only with `--open`. Under `--json` it writes one line to stderr instead, `{"ok":false,"pending":true,"code":"OWNER_CONFIRM_REQUIRED","ownerConfirm":{"userCode","verificationUriComplete","expiresIn","step","summary"}}`, and keeps stdout for the final result.
+1. Prints what you are approving (a summary the server built), `Open <url>` and `Code: XXXX-XXXX` on stderr, with "Only approve if you just ran this command." When the API names the account the request was made as (0.13.24+), the first line reads `This needs your approval in the browser as <display name> (<short wallet>): <summary>` and a following line says the browser must be signed in as that account — so a wrong-account browser is obvious before it answers "Request not found". It opens the browser only with `--open`. Under `--json` it writes one line to stderr instead, `{"ok":false,"pending":true,"code":"OWNER_CONFIRM_REQUIRED","ownerConfirm":{"userCode","verificationUriComplete","expiresIn","step","summary","account":{"wallet","displayName"}}}`, and keeps stdout for the final result.
 2. Waits, polling every few seconds. The code expires 5 minutes after it was issued.
 3. When you approve at `/dev/agent/confirm`, sends the identical request again and prints its result. Deny it and the command exits 1 with `Denied in the browser; nothing changed.`; let it expire and it exits 1 with `The confirmation expired; nothing changed. Run the command again.`
 4. With `--no-wait` it prints the code and exits 7 without waiting. The command does not resume later: run it again without `--no-wait`, or make the change in the console.
@@ -294,22 +294,28 @@ The npm package ships no native helper: there the factor is refused with `VAULT_
 until a release build's `candle-fido2` is installed and `CANDLE_FIDO2_HELPER` points at it. No
 other factor is ever substituted for one that is refused.
 
-The Touch ID factor (`candle vault factor add touch-id`; not yet released) needs
-the signed `candle-enclave.app` helper, which the darwin tarball, the installer script and Homebrew
-place beside `candle` once a release ships it; a release cut before Apple's approval ships no
-helper and the CLI refuses the factor with a typed code that says so. The CLI verifies the
+The Touch ID factor (`candle vault factor add touch-id`) is available in
+[0.13.23](https://github.com/candledottv/cli/releases/tag/cli-v0.13.23) on Apple silicon Macs and Intel
+Macs with a T2 chip. It needs the signed `candle-enclave.app` helper, which the darwin tarball,
+the installer script and Homebrew place beside `candle`. The npm package ships no native helper:
+install the matching signed bundle and set `CANDLE_ENCLAVE_HELPER`, or the command refuses with
+`VAULT_HELPER_MISSING`. An untrusted helper is `VAULT_HELPER_UNTRUSTED`; Linux and a Mac without
+a Secure Enclave are `VAULT_FACTOR_UNSUPPORTED_ON_PLATFORM`. The CLI verifies the
 helper's code signature with `/usr/bin/codesign` before trusting it, and `CANDLE_ENCLAVE_HELPER`
 points at a bundle elsewhere. The factor opens the vault on one Mac only and is never a recovery
 factor; the passphrase remains the recovery floor.
 
-The synced passkey factor (`candle vault factor add passkey`; not yet released)
-runs through the same signed helper on macOS 15 or later, and needs the helper's
+The synced passkey factor (`candle vault factor add passkey`) remains unavailable in 0.13.23:
+the shipped helper deliberately omits `webcredentials:cli.candle.tv`, so it refuses with
+`VAULT_FACTOR_UNSUPPORTED_ON_PLATFORM` and explains the missing entitlement. Passkey enrollment
+has not yet been checked on real Macs. A future release needs macOS 15 or later and the helper's
 associated-domains entitlement for `webcredentials:cli.candle.tv` with an embedded provisioning
 profile, plus an `apple-app-site-association` served at
 `https://cli.candle.tv/.well-known/apple-app-site-association` (status 200, no redirect,
 `Content-Type: application/json`, `{"webcredentials":{"apps":["<TEAM ID>.tv.candle.cli.enclave"]}}`).
-Each missing piece is a typed refusal before any passkey sheet, and the refusal names what must be
-served. The passkey follows the Apple account, so it is a recoverable factor; two are one factor,
+A missing association refuses with `VAULT_FACTOR_UNAVAILABLE` before any passkey sheet and names
+what must be served; serving it allows real enrollment when the local requirements are met.
+The passkey follows the Apple account, so it is a recoverable factor; two are one factor,
 and a copy of the vault is sealed (passphrase and security-key envelopes only) by default unless it goes to a
 recognised local disk or removable drive, so that one account never holds
 both the blob and a factor that opens it. iCloud Drive and other cloud folders are sealed for that
@@ -434,7 +440,7 @@ the profile they were migrated into.
 `CANDLE_DEVICE_TOKEN` and `CANDLE_API_KEY` together mean CI needs no storage backend at all: set
 both and every command works without ever touching a keychain or the encrypted file.
 
-### External key files (unreleased source support)
+### External key files (CLI 0.13.22 and later)
 
 A host may supply an absolute path with both raw key variables absent:
 
@@ -469,8 +475,9 @@ The key stays in private memory; it is never inserted into environment variables
 config or saved files. Ordinary browser/helper/hook/keychain children retain the nonsecret path;
 plugins keep their environment allowlist and receive neither the path nor key. This reduces
 environment exposure, not access by root or another process with the same UID. Extended ACLs
-are not audited. Source readiness does not imply an installed npm/binary release supports this;
-publication is a separately authorized human release.
+are not audited. This is available in `candle` and the bundled `candle mcp` from CLI 0.13.22.
+For standalone `candle-mcp` (`@candledottv/mcp`), this remains unreleased source support:
+version 0.10.32 does not include it and needs its own next release.
 
 ## What this CLI deliberately does not do
 

package/dist/index.js

@@ -225,6 +225,11 @@ function ownerConfirmChallengeOf(result) {
   const verificationUriComplete = str("verificationUriComplete");
   if (!confirmId || !userCode || !verificationUriComplete)
     return null;
+  const accountRaw = oc.account;
+  const account = accountRaw && typeof accountRaw === "object" && !Array.isArray(accountRaw) && typeof accountRaw.wallet === "string" ? {
+    wallet: accountRaw.wallet,
+    displayName: typeof accountRaw.displayName === "string" ? accountRaw.displayName : null
+  } : undefined;
   return {
     confirmId,
     userCode,
@@ -234,6 +239,7 @@ function ownerConfirmChallengeOf(result) {
     interval: Math.max(1, num("interval") ?? 5),
     step: str("step") ?? "",
     summary: str("summary") ?? "",
+    ...account ? { account } : {},
     reason: str("reason") ?? "required"
   };
 }
@@ -728,6 +734,23 @@ var init_agent_key_access = __esm(() => {
   ];
 });
 
+// src/terminal-text.ts
+function escapeTerminalText(value) {
+  return value.replace(/[\u0000-\u0008\u000a-\u001f\u007f-\u009f]/g, (char) => {
+    if (char === `
+`)
+      return "\\n";
+    if (char === "\r")
+      return "\\r";
+    return `\\x${char.charCodeAt(0).toString(16).padStart(2, "0")}`;
+  });
+}
+function terminalLines(value) {
+  return value.split(`
+`).map(escapeTerminalText).join(`
+`);
+}
+
 // src/terminal-theme.ts
 var TERMINAL_TOKENS;
 var init_terminal_theme = __esm(() => {
@@ -755,7 +778,7 @@ var init_terminal_theme = __esm(() => {
 });
 
 // src/version.ts
-var CLI_VERSION = "0.13.23";
+var CLI_VERSION = "0.13.25";
 
 // src/presentation.ts
 function terminalStyle(deps, stream, machine = false) {
@@ -775,6 +798,7 @@ function terminalStyle(deps, stream, machine = false) {
   };
 }
 function accent(text, style, role = "brand") {
+  text = terminalLines(text);
   if (!style.color)
     return text;
   const token = TERMINAL_TOKENS[style.theme][role];
@@ -938,6 +962,7 @@ function symbols(style) {
   return style.styled ? UNICODE_SYMBOLS : ASCII_SYMBOLS;
 }
 function sgr(text, style, code) {
+  text = terminalLines(text);
   return style.color && text ? `\x1B[${code}m${text}\x1B[0m` : text;
 }
 function bold(text, style) {
@@ -947,30 +972,32 @@ function dim(text, style) {
   return sgr(text, style, "2");
 }
 function heading(text, style) {
-  return wrapText(text, proseWidth(style)).map((line) => bold(line, style)).join(`
+  return wrapText(terminalLines(text), proseWidth(style)).map((line) => bold(line, style)).join(`
 `);
 }
 function fields(rows, style, indent = 2) {
+  rows = rows.map(([label, value]) => [escapeTerminalText(label), value]);
   const budget = proseWidth(style);
   const pad = " ".repeat(Math.min(indent, Math.max(0, budget)));
   const labelWidth = Math.max(0, ...rows.map(([label]) => displayWidth(label)));
   const sideWidth = budget - pad.length - labelWidth - 2;
   const out = [];
   for (const [label, raw] of rows) {
-    const value = raw === undefined || raw === null || raw === "" ? symbols(style).missing : String(raw);
+    const paint = (text) => typeof raw === "object" && raw !== null ? accent(text, style, raw.role) : text;
+    const value = raw === undefined || raw === null || raw === "" ? symbols(style).missing : escapeTerminalText(typeof raw === "object" ? raw.text : String(raw));
     if (sideWidth >= 1 && fitsWidth(value, sideWidth)) {
       const [first = "", ...rest] = value.split(`
 `).flatMap((line) => wrapText(line, sideWidth));
-      out.push(`${pad}${dim(padDisplay(label, labelWidth), style)}  ${first}`);
+      out.push(`${pad}${dim(padDisplay(label, labelWidth), style)}  ${paint(first)}`);
       for (const line of rest)
-        out.push(`${pad}${" ".repeat(labelWidth + 2)}${line}`);
+        out.push(`${pad}${" ".repeat(labelWidth + 2)}${paint(line)}`);
     } else {
-      out.push(...stackedField(label, value, style, pad, budget));
+      out.push(...stackedField(label, value, style, pad, budget, paint));
     }
   }
   return out;
 }
-function stackedField(label, value, style, pad, budget) {
+function stackedField(label, value, style, pad, budget, paint) {
   const labelBudget = Math.max(1, budget - pad.length);
   const out = wrapText(label, labelBudget).map((line) => `${pad}${dim(line, style)}`);
   const nested = budget - pad.length - 2;
@@ -987,11 +1014,12 @@ function stackedField(label, value, style, pad, budget) {
   for (const part of value.split(`
 `)) {
     for (const line of wrapText(part, valueWidth))
-      out.push(line ? `${valuePad}${line}` : "");
+      out.push(line ? `${valuePad}${paint(line)}` : "");
   }
   return out;
 }
 function renderNotice(level, text, style, indent = 2) {
+  text = terminalLines(text);
   const sym = symbols(style);
   const mark = level === "note" ? sym.note : level === "warning" ? sym.warning : sym.danger;
   const budget = proseWidth(style);
@@ -1021,6 +1049,7 @@ ${renderNotice(level, text, style).join(`
 `);
 }
 function success(text, style) {
+  text = terminalLines(text);
   const mark = symbols(style).ok;
   const hang = " ".repeat(displayWidth(mark) + 1);
   const budget = Math.max(1, proseWidth(style) - displayWidth(mark) - 1);
@@ -1042,17 +1071,19 @@ var init_presentation = __esm(() => {
 });
 
 // src/render.ts
-function formatScopesForSummary(scopes) {
-  return sortAgentKeyScopes(scopes).map((scope) => scope === "swap:write" ? `${scope} (${SWAP_WRITE_NOTE})` : scope === "transfer:write" ? `${scope} (${TRANSFER_WRITE_NOTE})` : scope === "transfer:bound" ? `${scope} (${TRANSFER_BOUND_NOTE})` : scope === "perps:write" ? `${scope} (${PERPS_WRITE_NOTE})` : scope).join(", ");
-}
 function terminalText(value) {
   return value.replace(/[\u0000-\u001f\u007f-\u009f]/g, "");
 }
+function formatScopesForSummary(scopes) {
+  return sortAgentKeyScopes(scopes).map((scope) => scope === "swap:write" ? `${scope} (${SWAP_WRITE_NOTE})` : scope === "transfer:write" ? `${scope} (${TRANSFER_WRITE_NOTE})` : scope === "transfer:bound" ? `${scope} (${TRANSFER_BOUND_NOTE})` : scope === "perps:write" ? `${scope} (${PERPS_WRITE_NOTE})` : scope).join(", ");
+}
 function numericColumn(rows, col) {
   const known = rows.map((row) => row[col] ?? "").filter((cell) => cell !== "" && cell !== "–" && cell !== "-");
   return known.length > 0 && known.every((cell) => NUMERIC_CELL.test(cell));
 }
 function renderTable(headers, rows, options) {
+  headers = headers.map(escapeTerminalText);
+  rows = rows.map((row) => row.map((cell) => escapeTerminalText(cell ?? "")));
   if (!options)
     return renderPlainTable(headers, rows);
   const specs = headers.map((_, col) => options.columns?.[col] ?? {});
@@ -1213,6 +1244,14 @@ function errorParts(result, ctx) {
   return { message: result.message, fixes: result.uiHint ? [{ label: result.uiHint }] : [] };
 }
 function renderErrorBlock(parts, style) {
+  parts = {
+    message: terminalLines(parts.message),
+    fixes: parts.fixes.map((fix) => ({
+      ...fix,
+      label: terminalLines(fix.label),
+      ...fix.command ? { command: terminalLines(fix.command) } : {}
+    }))
+  };
   const budget = proseWidth(style);
   const out = [...errorMessageLines(parts.message, style, budget)];
   if (parts.fixes.length === 0)
@@ -1280,7 +1319,7 @@ function writeFailure(deps, result, ctx, json) {
     deps.stdout.write(`${JSON.stringify(errorEnvelope(result, ctx))}
 `);
   else
-    deps.stderr.write(`${renderError(result, ctx)}
+    deps.stderr.write(`${terminalLines(renderError(result, ctx))}
 `);
 }
 function writeLocalFailure(deps, failure2, json) {
@@ -1292,7 +1331,7 @@ function writeLocalFailure(deps, failure2, json) {
   const separator = failure2.suggestion?.includes(`
 `) ? `
 ` : " ";
-  deps.stderr.write(`${failure2.suggestion ? `${failure2.message}${separator}${failure2.suggestion}` : failure2.message}
+  deps.stderr.write(`${terminalLines(failure2.suggestion ? `${failure2.message}${separator}${failure2.suggestion}` : failure2.message)}
 `);
 }
 function writeUsageFailure(deps, message, json) {
@@ -1300,7 +1339,7 @@ function writeUsageFailure(deps, message, json) {
     deps.stdout.write(`${JSON.stringify({ ok: false, code: "USAGE", message })}
 `);
   else
-    deps.stderr.write(`${message}
+    deps.stderr.write(`${terminalLines(message)}
 `);
 }
 function portalDevicesUrl(apiUrl, portalOrigin) {
@@ -6852,7 +6891,7 @@ var init_launch_definition = __esm(() => {
       {
         key: "curve.virtualQuote",
         type: "decimal",
-        help: "exp-custom's virtual quote, in whole quote units: 1 to 100 SOL or 66000 to 6600000 CNDL; requires --curve-g and EXP_CUSTOM_CURVES.",
+        help: "exp-custom's virtual quote, in whole quote units: 1 to 100 SOL or 66000 to 6600000 CNDL; requires --curve-g.",
         modes: [
           "exp-custom"
         ],
@@ -6891,7 +6930,7 @@ var init_launch_definition = __esm(() => {
       {
         key: "curve.threshold",
         type: "decimal",
-        help: "exp-custom's graduation threshold, in whole quote units: 1 to 250 SOL or 66000 to 16500000 CNDL; requires --curve-v and EXP_CUSTOM_CURVES.",
+        help: "exp-custom's graduation threshold, in whole quote units: 1 to 250 SOL or 66000 to 16500000 CNDL; requires --curve-v.",
         modes: [
           "exp-custom"
         ],
@@ -20209,10 +20248,13 @@ function credentialEnvOverrides(env) {
   return ["CANDLE_API_KEY_FILE", "CANDLE_API_KEY", "CANDLE_DEVICE_TOKEN"].filter((name) => env[name]?.trim());
 }
 function identityLine(profile, account, apiUrl, overrides, username, options = {}) {
-  const address = account === undefined ? undefined : shortId(account, options.full);
+  profile = profile === undefined ? undefined : escapeTerminalText(profile);
+  username = username === undefined ? undefined : escapeTerminalText(username);
+  overrides = overrides?.map(escapeTerminalText);
+  const address = account === undefined ? undefined : escapeTerminalText(shortId(account, options.full));
   const shown = overrides?.length ? address ? `${address} (${overrides.join(", ")} override)` : `unknown (${overrides.join(", ")} override)` : username && address ? `${username} (${address})` : address ?? "unknown";
   const name = profile ?? "none";
-  const host = apiUrl.replace(/^https:\/\//i, "").replace(/\/+$/, "");
+  const host = escapeTerminalText(apiUrl).replace(/^https:\/\//i, "").replace(/\/+$/, "");
   const sep2 = options.style ? symbols(options.style).note : "·";
   return `Profile ${options.style ? bold(name, options.style) : name} ${sep2} Account ${shown} ${sep2} ${host}`;
 }
@@ -25682,6 +25724,76 @@ var init_hood_legs = __esm(() => {
   V4_SWAP_PARAMS = { tuple: [V4_POOL_KEY, "bool", "uint", "uint", "uint", "bytes"] };
 });
 
+// src/hood-operation-wait.ts
+async function waitForHoodOperation(ctx, key, id, evidence) {
+  const deadline = ctx.deps.now() + WAIT_MS;
+  const hint = `candle swap status --operation ${safeText(id)}`;
+  const readCtx = {
+    ...ctx,
+    deps: {
+      ...ctx.deps,
+      fetch: (input, init) => ctx.deps.fetch(input, {
+        ...init,
+        signal: AbortSignal.timeout(Math.max(1, deadline - ctx.deps.now()))
+      })
+    }
+  };
+  for (;; ) {
+    let result2;
+    try {
+      result2 = responseSchema.parse(await request(readCtx, key, `/api/v1/agent/hood-tee/operations/${encodeURIComponent(id)}`));
+      if (result2.operation.operationId !== id)
+        throw new Error("The server returned a different operation");
+    } catch (error) {
+      throw new TradingError("HOOD_WAIT_UNAVAILABLE", `Could not follow Hood settlement. Do not repeat the swap. Read ${hint}.`, {
+        exitCode: 3,
+        details: {
+          ...evidence,
+          operationId: id,
+          readCode: error instanceof TradingError ? error.code : "INVALID_RESPONSE"
+        }
+      });
+    }
+    const op = result2.operation;
+    const held = op.guard?.recoveryRequired === true || op.recovery?.recoveryRequired === true;
+    const completed = op.status === "completed" && op.legs.length === op.plannedLegCount && op.legs.every((leg) => leg.status === "landed");
+    const failed = op.status === "failed" || op.status === "expired";
+    const final = !held && (completed || failed);
+    if (final || ctx.deps.now() >= deadline) {
+      ctx.deps.stdout.write(`${JSON.stringify(result2, null, ctx.json ? undefined : 2)}
+`);
+      if (!final)
+        ctx.deps.stderr.write(`Still not final after ten minutes. Do not repeat the swap. Read ${hint}.
+`);
+      else if (failed)
+        ctx.deps.stderr.write(`Hood operation ${safeText(op.status)}. Do not repeat the swap. Read ${hint}.
+`);
+      if (!final)
+        return 3;
+      if (completed)
+        return 0;
+      return op.legs.some((leg) => leg.kind === "trade" && leg.status === "landed") ? 3 : 1;
+    }
+    await ctx.deps.sleep(Math.min(POLL_MS, deadline - ctx.deps.now()));
+  }
+}
+var WAIT_MS, POLL_MS = 5000, responseSchema;
+var init_hood_operation_wait = __esm(() => {
+  init_zod();
+  init_trading();
+  WAIT_MS = 10 * 60000;
+  responseSchema = exports_external.object({
+    operation: exports_external.object({
+      operationId: exports_external.string(),
+      status: exports_external.enum(["active", "completed", "failed", "expired"]),
+      plannedLegCount: exports_external.number().int().positive(),
+      legs: exports_external.array(exports_external.object({ kind: exports_external.string(), status: exports_external.string() }).passthrough()),
+      guard: exports_external.object({ recoveryRequired: exports_external.boolean() }).passthrough().optional(),
+      recovery: exports_external.object({ recoveryRequired: exports_external.boolean() }).passthrough().optional()
+    }).passthrough()
+  }).passthrough();
+});
+
 // src/human-output.ts
 function writeFields(deps, stream, rows, title) {
   const style = terminalStyle(deps, stream);
@@ -26005,7 +26117,7 @@ function walletRecordCheck(row, trading, records) {
     differences
   } : pass("record");
 }
-async function inspectReport(ctx, key, row, listing, records, payable, name) {
+async function inspectReport(ctx, key, row, listing, records, payable, name, chain2) {
   const checks = [pass("key"), payable ? failure2("payable", payable) : pass("payable")];
   checks.push(listing.scopes.includes("swap:write") ? pass("scope") : failure2("scope", new TradingError("SCOPE_MISSING", "The bound key needs swap:write.")));
   const report = {
@@ -26018,7 +26130,7 @@ async function inspectReport(ctx, key, row, listing, records, payable, name) {
     return { report };
   }
   checks.push(walletRecordCheck(row, listing.rows, records));
-  const inspected = await inspectTradingWallet(ctx, row, listing.appId, "swap:write", "solana", {
+  const inspected = await inspectTradingWallet(ctx, row, listing.appId, "swap:write", chain2 ?? rowChain(row) ?? "solana", {
     apiKey: key,
     keyPrefix: listing.keyPrefix
   });
@@ -26211,14 +26323,18 @@ async function buildCheck(ctx, key, wallet3, report, from, to, amount, slippage,
   }
 }
 async function teeCheck(args, ctx) {
-  const parsed = parseArgs(args, { valueFlags: ["--label-prefix", "--max", "--rpc-url"], booleanFlags: ["--sign"] });
+  const parsed = parseArgs(args, {
+    valueFlags: ["--label-prefix", "--max", "--rpc-url", "--chain"],
+    booleanFlags: ["--sign"]
+  });
   if ("error" in parsed) {
     writeUsageFailure(ctx.deps, parsed.error, ctx.json);
     return 2;
   }
   const max = Number(parsed.values["--max"] ?? "10");
-  if (!parsed.positionals.length && parsed.values["--label-prefix"] === undefined || !Number.isSafeInteger(max) || max < 1) {
-    writeUsageFailure(ctx.deps, "Usage: candle tee check <address|id|label>... [--label-prefix <p>] [--sign] [--max <n>] [--rpc-url <url>]", ctx.json);
+  const chainFlag = parsed.values["--chain"];
+  if (!parsed.positionals.length && parsed.values["--label-prefix"] === undefined || !Number.isSafeInteger(max) || max < 1 || chainFlag !== undefined && chainFlag !== "solana" && chainFlag !== "hood") {
+    writeUsageFailure(ctx.deps, "Usage: candle tee check <address|id|label>... [--label-prefix <p>] [--chain solana|hood] [--sign] [--max <n>] [--rpc-url <url>]", ctx.json);
     return 2;
   }
   try {
@@ -26250,8 +26366,13 @@ async function teeCheck(args, ctx) {
     for (const name of targets) {
       const matches = listing.rows.filter((row) => matchesName(row, name));
       const payable = matches.length === 1 ? undefined : new TradingError("TEE_WALLET_REQUIRED", `"${safeText(name)}" matches ${matches.length} TEE wallets. Bound to this key: ${listing.rows.map(describeWallet).join("; ") || "no TEE wallets bound to this key"}.`);
-      const { report, wallet: wallet3 } = await inspectReport(ctx, key, matches.length === 1 ? matches[0] : undefined, listing, records, payable, name);
-      if (sign4 && wallet3)
+      const { report, wallet: wallet3 } = await inspectReport(ctx, key, matches.length === 1 ? matches[0] : undefined, listing, records, payable, name, chainFlag);
+      if (sign4 && wallet3?.chain === "evm")
+        report.checks.push({
+          ...skipped("sign", "hood"),
+          message: "Signing is checked on Solana wallets only; a Hood test build would hold the wallet."
+        });
+      else if (sign4 && wallet3)
         await buildCheck(ctx, key, wallet3, report, "SOL", "USDC", "0.000001", 50, parsed.values["--rpc-url"], true);
       else
         report.checks.push(skipped("sign", sign4 ? report.checks.find((check) => check.status === "fail")?.id ?? "signer" : "--sign not set"));
@@ -26288,7 +26409,7 @@ async function swapCheck(args, ctx) {
     if (from.chain !== "solana" || to.chain !== "solana")
       throw new TradingError("VALIDATION_FAILED", "Dry run checks Solana TEE pairs; Hood and bridge pairs are unsupported.");
     if (parsed.values["--to"] !== undefined || parsed.booleans.has("--wait")) {
-      writeUsageFailure(ctx.deps, "--to and --wait are for a bridge.", ctx.json);
+      writeUsageFailure(ctx.deps, "--to selects a bridge destination; --wait follows a bridge or a Hood TEE swap without --dry-run. Follow a Hood swap with candle swap status --operation <id>, or a job with candle swap status <client-trade-id>.", ctx.json);
       return 2;
     }
     if (from.asset === to.asset || !from.base && !to.base)
@@ -26311,7 +26432,7 @@ async function swapCheck(args, ctx) {
       payable = error;
     }
     const records = await readWalletRecords(ctx, key);
-    const { report, wallet: wallet3 } = await inspectReport(ctx, key, row, listing, records, payable, parsed.values["--wallet"]);
+    const { report, wallet: wallet3 } = await inspectReport(ctx, key, row, listing, records, payable, parsed.values["--wallet"], from.chain);
     if (wallet3)
       await buildCheck(ctx, key, wallet3, report, from.asset, to.asset, parsed.values["--amount"], slippage, parsed.values["--rpc-url"], false);
     else
@@ -26446,7 +26567,7 @@ function printTradingResult(ctx, result2) {
   }
   const printed = ctx.json && (result2.kind === "swap" || result2.kind === "trade") ? swapJsonResult(result2) : result2;
   ctx.deps.stdout.write(ctx.json ? `${JSON.stringify(printed)}
-` : `${JSON.stringify(result2, null, 2)}
+` : `${terminalLines(JSON.stringify(result2, null, 2))}
 `);
   const job = result2.job;
   const operation = job?.operation;
@@ -26495,11 +26616,11 @@ async function lookupOperation(ctx, key, id, kind) {
 async function swapStatus(args, ctx) {
   const parsed = parseArgs(args, { valueFlags: ["--kind", "--operation"], booleanFlags: ["--wait"] });
   if (!("error" in parsed) && parsed.values["--operation"] !== undefined) {
-    if (parsed.positionals.length || parsed.values["--kind"] || parsed.booleans.has("--wait")) {
-      writeUsageFailure(ctx.deps, "Usage: candle swap status --operation <operationId>", ctx.json);
+    if (parsed.positionals.length || parsed.values["--kind"]) {
+      writeUsageFailure(ctx.deps, "Usage: candle swap status --operation <operationId> [--wait]", ctx.json);
       return 2;
     }
-    return hoodOperationRead(ctx, parsed.values["--operation"]);
+    return hoodOperationRead(ctx, parsed.values["--operation"], undefined, false, parsed.booleans.has("--wait"));
   }
   if ("error" in parsed || parsed.positionals.length !== 1 || !validClientId(parsed.positionals[0] ?? "") || parsed.values["--kind"] !== undefined && !["trade", "swap", "launch"].includes(parsed.values["--kind"])) {
     writeUsageFailure(ctx.deps, "Usage: candle swap status <id> [--kind trade|swap|launch] [--wait]", ctx.json);
@@ -26572,7 +26693,7 @@ async function swapReceipt(args, ctx) {
     }
     describeReceipt(ctx, body, answer.job);
     ctx.deps.stdout.write(ctx.json ? `${JSON.stringify(body)}
-` : `${JSON.stringify(body, null, 2)}
+` : `${terminalLines(JSON.stringify(body, null, 2))}
 `);
     return 0;
   } catch (error) {
@@ -26583,7 +26704,7 @@ function describeReceipt(ctx, body, job) {
   const settlement = body.settlement;
   if (settlement === null || typeof settlement !== "object") {
     if (typeof body.next === "string")
-      ctx.deps.stderr.write(`${body.next}
+      ctx.deps.stderr.write(`${terminalLines(body.next)}
 `);
     return;
   }
@@ -26706,8 +26827,9 @@ async function swap2(args, ctx) {
         slippage,
         ...bridge
       });
-    if (flags["--to"] !== undefined || parsed.booleans.has("--wait"))
-      throw new TradingUsage("--to and --wait are for a bridge: SOL or USDC to ETH or USDG, or back.");
+    const unsupportedWait = "--to is for a bridge: SOL or USDC to ETH or USDG, or back. --wait follows a bridge or a Hood TEE swap. Follow a Hood swap with candle swap status --operation <id>; use candle swap status <client-trade-id> for a job.";
+    if (flags["--to"] !== undefined)
+      throw new TradingUsage(unsupportedWait);
     const chain2 = pairChain(fromAsset, toAsset);
     const walletFlag = flags["--wallet"];
     const named = walletFlag === undefined ? undefined : walletNameChain(walletFlag);
@@ -26715,6 +26837,7 @@ async function swap2(args, ctx) {
       throw chainMismatch(`--wallet ${safeText(walletFlag)}`, named, chain2);
     if (chain2 === "hood")
       return await hoodSwap(ctx, {
+        wait: parsed.booleans.has("--wait"),
         flags,
         yes: parsed.booleans.has("--yes"),
         id,
@@ -26722,6 +26845,8 @@ async function swap2(args, ctx) {
         from: fromAsset,
         to: toAsset
       });
+    if (parsed.booleans.has("--wait"))
+      throw new TradingUsage(unsupportedWait);
     const from = fromAsset.asset;
     const to = toAsset.asset;
     if (from === to)
@@ -26947,9 +27072,19 @@ async function hoodSwap(ctx, args) {
   const kind = from.base && to.base ? "swap" : "trade";
   const key = await tradingKey(ctx);
   const prior = await lookupOperation(ctx, key, id, kind);
+  const replay = async (result2) => {
+    if (!args.wait)
+      return printTradingResult(ctx, result2);
+    const operation = result2.job?.operation;
+    if (typeof operation?.operationId !== "string")
+      throw new TradingUsage(`No Hood TEE operationId is available. Follow with candle swap status ${id}; a Hood TEE swap uses candle swap status --operation <id>.`);
+    return waitForHoodOperation(ctx, key, operation.operationId);
+  };
   if (prior)
-    return printTradingResult(ctx, prior);
+    return replay(prior);
   const payer = await tradingPayer(ctx, key, flags["--wallet"], "swap:write", "hood");
+  if (args.wait && payer.kind !== "tee")
+    throw new TradingUsage(`--wait follows a bridge or a Hood TEE swap. Follow this swap with candle swap status ${id}; a Hood TEE swap uses candle swap status --operation <id>.`);
   const payerAddress = payer.kind === "tee" ? payer.wallet.address : payer.address;
   const rpc = lazyEvmRpc(ctx, flags["--rpc-url"]);
   const decimals = await hoodDecimals(from, rpc);
@@ -26989,7 +27124,7 @@ async function hoodSwap(ctx, args) {
     ...payer.kind === "embedded" ? { deferExecution: true } : {}
   });
   if (built.job || built.status === "executed")
-    return printTradingResult(ctx, { ...built, clientTradeId: id, kind });
+    return replay({ ...built, clientTradeId: id, kind });
   const body = kind === "swap" ? built.payload : built;
   const data = swapBuildSchema.parse(body);
   const echoed = kind === "swap" ? body?.recipient : body?.walletAddress;
@@ -27073,7 +27208,7 @@ async function hoodSwap(ctx, args) {
     treasury: () => hoodFeeTreasury(rpc()),
     curve: () => registeredCurveFor(rpc(), token2)
   });
-  const run = await runSequencedLegs(ctx, key, {
+  const execute = () => runSequencedLegs(ctx, key, {
     wallet: wallet3,
     first: sequenced,
     submitPath: kind === "swap" ? "/api/v1/agent/swap/submit" : "/api/v1/trade/agent/submit",
@@ -27089,6 +27224,16 @@ async function hoodSwap(ctx, args) {
         notices.push(notice2);
     }
   });
+  let run;
+  try {
+    run = await execute();
+  } catch (error) {
+    if (args.wait && error instanceof TradingError && (error.exitCode === 3 || error.details?.stage === "reverted"))
+      return waitForHoodOperation(ctx, key, sequenced.operationId, error.details);
+    throw error;
+  }
+  if (args.wait)
+    return waitForHoodOperation(ctx, key, sequenced.operationId);
   const settled = kind === "swap" ? reportSettlement(ctx, run.final.settlement, { asset: to.asset, decimals: outDecimals }, id) : {};
   return printTradingResult(ctx, {
     ...run.final,
@@ -27347,18 +27492,21 @@ async function bridgeSwap(ctx, args) {
     return printTradingResult(ctx, { ...receipt, waited: { final: false, error: reason } });
   }
 }
-async function hoodOperationRead(ctx, id, candidateHash, recover = false) {
+async function hoodOperationRead(ctx, id, candidateHash, recover = false, wait = false) {
   if (!validClientId(id)) {
     writeUsageFailure(ctx.deps, "An operationId is required", ctx.json);
     return 2;
   }
   try {
     const key = await tradingKey(ctx);
+    if (wait)
+      return await waitForHoodOperation(ctx, key, id);
     const path = `/api/v1/agent/hood-tee/operations/${encodeURIComponent(id)}${recover ? "/recover" : ""}`;
     const result2 = await request(ctx, key, path, recover ? candidateHash ? { candidateHash } : {} : undefined);
     const operation = result2.operation;
     const guard = operation?.guard;
-    ctx.deps.stdout.write(`${JSON.stringify(result2, null, ctx.json ? undefined : 2)}
+    const output = JSON.stringify(result2, null, ctx.json ? undefined : 2);
+    ctx.deps.stdout.write(`${ctx.json ? output : terminalLines(output)}
 `);
     if (guard)
       ctx.deps.stderr.write(`${safeText(guard.reason)}: ${safeText(guard.clearingCondition)} Read: candle swap status --operation ${id}.
@@ -27390,6 +27538,7 @@ var init_swap = __esm(() => {
   init_client();
   init_evm_lite();
   init_hood_legs();
+  init_hood_operation_wait();
   init_human_output();
   init_presentation();
   init_profiles();
@@ -47607,11 +47756,10 @@ function mintedByLabel(mintedBy, ownDeviceTokenPrefix) {
 function labelCell(label) {
   if (!label)
     return "";
-  const cleaned = Array.from(label).map((ch) => {
+  const cleaned = Array.from(escapeTerminalText(label)).map((ch) => {
     const code = ch.codePointAt(0) ?? 0;
-    const isControl = code < 32 || code >= 127 && code <= 159;
     const isBidiOrInvisible = code >= 8203 && code <= 8207 || code >= 8234 && code <= 8238 || code >= 8294 && code <= 8297 || code === 65279;
-    return isControl || isBidiOrInvisible ? " " : ch;
+    return isBidiOrInvisible ? " " : ch;
   }).join("");
   return cleaned.replace(/\s+/g, " ").trim();
 }
@@ -47895,17 +48043,27 @@ async function keysRevoke(args, ctx) {
     return 2;
   }
   if (parsed.positionals.length !== 1) {
-    deps.stderr.write(`Usage: candle keys revoke <prefix>
+    deps.stderr.write(`Usage: candle keys revoke <prefix|label>
 `);
     return 2;
   }
-  const prefix = parsed.positionals[0];
+  const target = parsed.positionals[0];
   await printIdentity(ctx);
   const deviceToken = await resolveDeviceToken(deps, ctx.profile);
   if (!deviceToken) {
     writeLocalFailure(deps, NO_DEVICE_TOKEN, json);
     return 1;
   }
+  const resolved = await resolveTargetKey(ctx, deviceToken, target, {
+    codePrefix: "KEY_REVOKE",
+    writeListFailure: (failure3) => {
+      writeFailure(deps, failure3, { apiUrl, authType: "device" }, json);
+      return 1;
+    }
+  });
+  if (!resolved.ok)
+    return resolved.code;
+  const prefix = resolved.keyPrefix;
   const result2 = await apiRequest(`${KEYS_PATH3}/${encodeURIComponent(prefix)}`, {
     method: "DELETE",
     auth: "device",
@@ -47955,6 +48113,7 @@ var init_keys = __esm(() => {
   init_secret_store();
   init_key_output();
   init_keys_embedded_wallet();
+  init_tee_rebind();
   ACCESS_LEVELS = {
     read: "read",
     write: "readwrite",
@@ -77034,7 +77193,7 @@ var LAUNCH_DEFINITION2 = {
     {
       key: "curve.virtualQuote",
       type: "decimal",
-      help: "exp-custom's virtual quote, in whole quote units: 1 to 100 SOL or 66000 to 6600000 CNDL; requires --curve-g and EXP_CUSTOM_CURVES.",
+      help: "exp-custom's virtual quote, in whole quote units: 1 to 100 SOL or 66000 to 6600000 CNDL; requires --curve-g.",
       modes: [
         "exp-custom"
       ],
@@ -77073,7 +77232,7 @@ var LAUNCH_DEFINITION2 = {
     {
       key: "curve.threshold",
       type: "decimal",
-      help: "exp-custom's graduation threshold, in whole quote units: 1 to 250 SOL or 66000 to 16500000 CNDL; requires --curve-v and EXP_CUSTOM_CURVES.",
+      help: "exp-custom's graduation threshold, in whole quote units: 1 to 250 SOL or 66000 to 16500000 CNDL; requires --curve-v.",
       modes: [
         "exp-custom"
       ],
@@ -78065,7 +78224,7 @@ var HELP = {
     group: "Trade",
     intro: "Quote, swap and bridge on Solana or Hood; read an operation",
     summary: "Quote, confirm and swap on Solana or Hood, bridge between them; read an operation by id",
-    description: "Swaps run through a TEE wallet's bound key: the quote is shown and confirmed before anything is sent. The first buy after a launch is this command, unless the launch carried it with candle launch --buy. The assets decide the chain (ETH, USDG or a 0x token is Hood; SOL, USDC, CNDL or a mint is Solana) and a named wallet must be on it. A Hood TEE wallet signs one leg at a time: approve, Permit2, trade, then the fee, each only after the one before it landed. SOL or USDC to ETH or USDG, or back, is a bridge through Relay from a TEE wallet into this key's own TEE wallet on the other chain (--to names it when there are several); Candle charges no fee, only configured raw caps and USD limits apply (unset means unlimited, zero still binds), and this machine checks Relay's deposit before it is signed. The bridge prints its deposit and returns while Relay fills; --wait follows it for up to ten minutes. While it is open, a sweep of either wallet refuses BRIDGE_IN_FLIGHT for two hours. Vault to vault: fund the Solana TEE wallet from the vault, bridge, then disable and sweep the Hood TEE wallet into its vault. Every plan can trade Candle-launched tokens and base assets, and buy or sell a token that was not launched on Candle. Each trade pays the plan's agent fee on top; a base-pair swap or a bridge between this key's own wallets pays none. candle plans shows the fees in force. With --dry-run, stdout reports per-check results and the quote; nothing is signed or sent. Otherwise with --json, stdout is one JSON value for every swap, trade, replay and status read: kind, status, clientTradeId, signature (the primary transaction, or null), signatures (a list) and raw (the original response); every human line is on stderr. The keys older versions printed stay beside them.",
+    description: "Swaps run through a TEE wallet's bound key: the quote is shown and confirmed before anything is sent. The first buy after a launch is this command, unless the launch carried it with candle launch --buy. The assets decide the chain (ETH, USDG or a 0x token is Hood; SOL, USDC, CNDL or a mint is Solana) and a named wallet must be on it. A Hood TEE wallet signs one leg at a time: approve, Permit2, trade, then the fee, each only after the one before it landed. SOL or USDC to ETH or USDG, or back, is a bridge through Relay from a TEE wallet into this key's own TEE wallet on the other chain (--to names it when there are several); Candle charges no fee, only configured raw caps and USD limits apply (unset means unlimited, zero still binds), and this machine checks Relay's deposit before it is signed. The bridge prints its deposit and returns while Relay fills; --wait follows it for up to ten minutes. While it is open, a sweep of either wallet refuses BRIDGE_IN_FLIGHT for two hours. On a Hood TEE swap, --wait follows the trade and fee legs for up to ten minutes and prints the same operation response as candle swap status --operation <id>; exit 0 means completed, 1 failed, and 3 partial execution, unresolved settlement or timeout. Embedded and Solana same-chain swaps use candle swap status <client-trade-id>. Vault to vault: fund the Solana TEE wallet from the vault, bridge, then disable and sweep the Hood TEE wallet into its vault. Every plan can trade Candle-launched tokens and base assets, and buy or sell a token that was not launched on Candle. Each trade pays the plan's agent fee on top; a base-pair swap or a bridge between this key's own wallets pays none. candle plans shows the fees in force. With --dry-run, stdout reports per-check results and the quote; nothing is signed or sent. Otherwise with --json, stdout is one JSON value: swaps, trades, replays and job status reads carry kind, status, clientTradeId, signature (the primary transaction, or null), signatures (a list) and raw (the original response); Hood --wait and explicit --operation reads return the operation response. Every human line is on stderr. The keys older versions printed stay beside them.",
     usage: [
       "candle swap <from> <to> [flags]",
       "candle swap status <id>",
@@ -78080,8 +78239,8 @@ var HELP = {
         description: "Quote, confirm and swap on Solana or Hood, or bridge between them"
       },
       {
-        invocation: "status <id> [--kind trade|swap|launch] [--wait] | status --operation <operationId>",
-        description: "Read without resending; --wait follows a bridge. --operation reads a Hood TEE guard with no signing or sending, and exits 3 while held"
+        invocation: "status <id> [--kind trade|swap|launch] [--wait] | status --operation <operationId> [--wait]",
+        description: "Read without resending; --wait follows a bridge. --operation reads a Hood TEE guard; add --wait to follow all legs for up to ten minutes (0 completed, 1 failed, 3 partial or unresolved)"
       },
       {
         invocation: "recover --operation <operationId> [--hash <0x…>]",
@@ -78928,13 +79087,19 @@ var HELP = {
         invocation: "self embedded-wallet deny",
         description: "The profile's own key gives up the embedded wallet, with no prompt. A key can never allow itself: the owner does that with keys update"
       },
-      { invocation: "stop <prefix>", description: "Pause one key with the device token; reversible with keys resume" },
-      { invocation: "resume <prefix>", description: "Resume a stopped key with the device token" },
+      {
+        invocation: "stop <prefix|label>",
+        description: "Pause one key with the device token (starting it again is done in the signed-in console)"
+      },
+      {
+        invocation: "resume <prefix|label>",
+        description: "Resume a stopped key in the signed-in console, because the server refuses a device token here (LOOSEN_REQUIRES_SESSION)"
+      },
       {
         invocation: "rotate <prefix|label> ([--grace <duration> | --now] [--force] [--yes] | --finish)",
         description: "Give a key a new secret, keeping its prefix, label, access, limits, wallets and history. The old secret works through --grace (default 1h, at most 24h) or stops at once with --now; --finish ends an open window early. The profile's own key is replaced in the keychain; update CANDLE_API_KEY or CANDLE_API_KEY_FILE yourself and restart MCP. --force rotates again while a window is open"
       },
-      { invocation: "revoke <prefix>", description: "Revoke an API key permanently" },
+      { invocation: "revoke <prefix|label>", description: "Revoke an API key permanently" },
       {
         invocation: "signer approve <code> --key <prefix|label> [--reject]",
         description: "Approve (or reject) a key's signer request with the device token; type the full fingerprint the trading machine printed"
@@ -79018,7 +79183,7 @@ var HELP = {
       },
       {
         invocation: "close-empty [--wallet embedded|<tee address|label>] [--keep <mint>]... [--client-trade-id <id>] [--preview] [--yes]",
-        description: "Close a wallet's empty token accounts and return their rent to it, after a preview: the embedded wallet (transfer:write), or a TEE wallet bound to this key, signed by its key signer (swap:write). --preview prints what would close (one JSON document on stdout under --json) and closes nothing"
+        description: "Close a wallet's empty token accounts and return their rent to it, after a preview: the embedded wallet (swap:write or transfer:write), or a TEE wallet bound to this key, signed by its key signer (swap:write). --preview prints what would close (one JSON document on stdout under --json) and closes nothing"
       }
     ],
     flags: [
@@ -79232,8 +79397,8 @@ var HELP = {
     usage: ["candle tee <subcommand> [flags]"],
     rows: [
       {
-        invocation: "check <address|id|label>... [--label-prefix <p>] [--sign] [--max <n>] [--rpc-url <url>]",
-        description: "Check payable membership, record parity and this machine's signer without spending. --sign builds a tiny SOL/USDC quote, checks spend, signs and simulates; never broadcasts (default cap 10). Needs swap:write"
+        invocation: "check <address|id|label>... [--label-prefix <p>] [--chain solana|hood] [--sign] [--max <n>] [--rpc-url <url>]",
+        description: "Check payable membership, record parity and this machine's signer without spending. Each wallet is checked on its own chain; --chain checks every wallet against one chain (CHAIN_MISMATCH otherwise). --sign builds a tiny SOL/USDC quote on a Solana wallet, checks spend, signs and simulates; never broadcasts (default cap 10). A Hood wallet skips sign: a Hood build holds the wallet. Needs swap:write"
       },
       {
         invocation: "new [--label <name>]",
@@ -79299,6 +79464,7 @@ var HELP = {
     examples: [
       "candle tee check --label-prefix pool- --json",
       "candle tee check AgentOne --sign --rpc-url <url>",
+      "candle tee check hood-1 --chain hood --json",
       "candle tee new --label AgentOne",
       "candle tee status AgentOneAddress",
       "candle tee sweep AgentOneAddress",
@@ -85264,6 +85430,13 @@ init_evm_lite();
 init_client();
 var EXIT_OWNER_CONFIRM_PENDING = 7;
 var OWN_NO_WAIT_COMMANDS = [["tee"], ["lab"], ["wallets", "authorize"]];
+function shortWallet(wallet3) {
+  return wallet3.length >= 12 ? `${wallet3.slice(0, 4)}…${wallet3.slice(-4)}` : wallet3;
+}
+function accountLabel(account) {
+  const short = shortWallet(account.wallet);
+  return account.displayName ? `${account.displayName} (${short})` : short;
+}
 function ownerConfirmPendingLine(challenge) {
   return JSON.stringify({
     ok: false,
@@ -85274,7 +85447,8 @@ function ownerConfirmPendingLine(challenge) {
       verificationUriComplete: challenge.verificationUriComplete,
       expiresIn: challenge.expiresIn,
       step: challenge.step,
-      summary: challenge.summary
+      summary: challenge.summary,
+      ...challenge.account ? { account: challenge.account } : {}
     }
   });
 }
@@ -85291,10 +85465,12 @@ function cliOwnerConfirmHooks(deps, opts, state) {
 `);
       } else {
         const minutes = Math.max(1, Math.round(challenge.expiresIn / 60));
+        const as = challenge.account ? ` as ${accountLabel(challenge.account)}` : "";
         deps.stderr.write([
-          `This needs your approval in the browser: ${challenge.summary}`,
+          `This needs your approval in the browser${as}: ${challenge.summary}`,
           `Open ${challenge.verificationUriComplete}`,
           `Code: ${challenge.userCode}`,
+          ...challenge.account ? [`The browser must be signed in as ${accountLabel(challenge.account)}.`] : [],
           "Only approve if you just ran this command.",
           opts.wait ? `Waiting for approval (expires in ${minutes} minute${minutes === 1 ? "" : "s"})...` : ""
         ].filter(Boolean).join(`
@@ -86262,7 +86438,7 @@ ${USAGE6}`, json);
   } catch (error) {
     if (!(error instanceof CoreClientError))
       throw error;
-    deps.stderr.write(`${error.code}: ${error.message}
+    deps.stderr.write(`${terminalLines(`${error.code}: ${error.message}`)}
 `);
     return 1;
   }
@@ -91975,7 +92151,7 @@ async function help(args, ctx) {
   }
   const topic = renderTopic(word3, terminalStyle(ctx.deps, "stdout", ctx.json), args.includes("--more"));
   if (topic === undefined) {
-    ctx.deps.stderr.write(`Unknown command: ${word3}
+    ctx.deps.stderr.write(`Unknown command: ${escapeTerminalText(word3)}
 `);
     ctx.deps.stderr.write(renderTopLevel());
     return 1;
@@ -92305,7 +92481,7 @@ async function keysAccessHistory(target, ctx) {
 `);
     return 0;
   }
-  const rows = result2.body.changes ?? [];
+  const rows = (result2.body.changes ?? []).filter((row2) => row2.eventKind !== "profile_edit" && row2.change !== "profile_edit");
   if (rows.length === 0) {
     notice(deps, "stdout", "note", `No access changes on key ${resolved.keyPrefix}.`);
     return 0;
@@ -92615,7 +92791,7 @@ function writeRefusal(ctx, refusal3, suggestion) {
 `);
     return;
   }
-  ctx.deps.stderr.write(`${suggestion ? `${message} ${suggestion}` : message}
+  ctx.deps.stderr.write(`${escapeTerminalText(suggestion ? `${message} ${suggestion}` : message)}
 `);
 }
 function writeApiFailure(ctx, result2, authType) {
@@ -92710,8 +92886,8 @@ function identity2(who) {
   if (who.kind === "candle")
     return "Candle";
   if (who.kind === "agent")
-    return terminalText(who.name ?? "Agent");
-  return terminalText(who.name ?? who.account);
+    return escapeTerminalText(who.name ?? "Agent");
+  return escapeTerminalText(who.name ?? who.account);
 }
 function sectionText(bytes, section2) {
   if (bytes.length > TOKEN_PAGE_BODY_CAP_BYTES)
@@ -92750,7 +92926,7 @@ function factValue(fact) {
   if (fact.raw === undefined)
     return fact.status;
   const value = fact.decimals ? rawUnits2(fact.raw, fact.decimals) : fact.raw;
-  return `${value}${fact.unit === "token" ? "" : ` ${fact.unit}`} (${fact.status}, ${fact.coverage}, ${terminalText(fact.source)}${fact.measuredAt ? `, ${fact.measuredAt}` : ""})`;
+  return `${value}${fact.unit === "token" ? "" : ` ${fact.unit}`} (${fact.status}, ${fact.coverage}, ${escapeTerminalText(fact.source)}${fact.measuredAt ? `, ${fact.measuredAt}` : ""})`;
 }
 function rawUnits2(raw, decimals) {
   if (!/^\d+$/.test(raw))
@@ -92792,7 +92968,7 @@ function writeAbout(ctx, about) {
     if (v.linksWithheld)
       notice(ctx.deps, "stdout", "note", "Links are withheld pending review.");
     ctx.deps.stdout.write(`
-${terminalTextKeepingLines(v.text)}
+${escapeTerminalText(v.text)}
 `);
   }
   writeHeading(ctx.deps, "stdout", "Supply, measured by Candle");
@@ -92801,12 +92977,7 @@ ${terminalTextKeepingLines(v.text)}
     ctx.deps.stdout.write(`  Measurements unavailable
 `);
   else
-    writeFields(ctx.deps, "stdout", facts.map((f) => [terminalText(f.metric), factValue(f)]));
-}
-function terminalTextKeepingLines(text3) {
-  return text3.split(`
-`).map((line) => terminalText(line.replace(/\t/g, "    "))).join(`
-`);
+    writeFields(ctx.deps, "stdout", facts.map((f) => [escapeTerminalText(f.metric), factValue(f)]));
 }
 async function tokenAbout(args, ctx) {
   const usage4 = usageFor(ctx, USAGE9.about);
@@ -93120,12 +93291,12 @@ async function tokenHistory(args, ctx) {
     ]);
     if (item.text !== null)
       ctx.deps.stdout.write(`
-${terminalTextKeepingLines(item.text)}
+${escapeTerminalText(item.text)}
 `);
   }
   if (data.nextCursor)
     ctx.deps.stdout.write(`
-More: --cursor ${data.nextCursor}
+More: --cursor ${escapeTerminalText(data.nextCursor)}
 `);
   return 0;
 }
@@ -93311,12 +93482,12 @@ async function tokenComments(args, ctx) {
     ]);
     if (item.text !== null)
       ctx.deps.stdout.write(`
-${terminalTextKeepingLines(item.text)}
+${escapeTerminalText(item.text)}
 `);
   }
   if (data.nextCursor)
     ctx.deps.stdout.write(`
-More: --cursor ${data.nextCursor}
+More: --cursor ${escapeTerminalText(data.nextCursor)}
 `);
   return 0;
 }
@@ -93591,6 +93762,7 @@ init_presentation();
 init_profiles();
 init_key_output();
 init_keys();
+init_tee_rebind();
 function keysStop(args, ctx) {
   return setKeyPaused(args, ctx, true);
 }
@@ -93599,14 +93771,14 @@ function keysResume(args, ctx) {
 }
 async function setKeyPaused(args, ctx, paused) {
   const { deps, apiUrl, json } = ctx;
-  const parsed = parseArgs(args, {});
+  const parsed = parseArgs(args, { keyPrefixPositional: true });
   if ("error" in parsed) {
     writeScreenUsageFailure(deps, parsed.error, json);
     return 2;
   }
-  const prefix = parsed.positionals[0];
-  if (!prefix?.trim() || parsed.positionals.length !== 1) {
-    writeScreenUsageFailure(deps, `Usage: candle keys ${paused ? "stop" : "resume"} <prefix>`, json);
+  const target = parsed.positionals[0];
+  if (!target?.trim() || parsed.positionals.length !== 1) {
+    writeScreenUsageFailure(deps, `Usage: candle keys ${paused ? "stop" : "resume"} <prefix|label>`, json);
     return 2;
   }
   await printIdentity(ctx);
@@ -93615,6 +93787,16 @@ async function setKeyPaused(args, ctx, paused) {
     writeScreenLocalFailure(deps, NO_DEVICE_TOKEN, json);
     return 1;
   }
+  const resolved = await resolveTargetKey(ctx, deviceToken, target, {
+    codePrefix: paused ? "KEY_STOP" : "KEY_RESUME",
+    writeListFailure: (failure3) => {
+      writeScreenFailure(deps, failure3, { apiUrl, authType: "device" }, json);
+      return 1;
+    }
+  });
+  if (!resolved.ok)
+    return resolved.code;
+  const prefix = resolved.keyPrefix;
   const result2 = await apiRequest(`/api/v1/agent/keys/${encodeURIComponent(prefix)}/stop`, {
     method: "POST",
     auth: "device",
@@ -101426,7 +101608,7 @@ async function read2(ctx, argv, command) {
     for (const warning of result2.warnings)
       notice(ctx.deps, "stderr", "note", `${safeText(warning)}
 `.trim());
-    const out = (line) => ctx.deps.stdout.write(`${line}
+    const out = (line) => ctx.deps.stdout.write(`${terminalLines(line)}
 `);
     out(`Hyperliquid ${result2.network}; OI floor $${result2.gate.minOpenInterestUsd} (${result2.gate.source}). Tradeability is Candle's build gate at read time, not a promise. OI caps may still refuse an order.`);
     if ("market" in result2) {
@@ -102844,7 +103026,7 @@ async function runPaidRead(ctx, input) {
       ctx.deps.stdout.write(`${JSON.stringify({ ok: true, data, ...paid.payment ? { payment: paid.payment } : {}, ...paid.servedFromCredit ? { servedFromCredit: true } : {} })}
 `);
     } else {
-      ctx.deps.stdout.write(`${JSON.stringify(data, null, 2)}
+      ctx.deps.stdout.write(`${terminalLines(JSON.stringify(data, null, 2))}
 `);
     }
     return 0;
@@ -104258,6 +104440,9 @@ function financialHeading(text4, style) {
 function signed(text4, style) {
   return /^\+/.test(text4) ? accent(text4, style, "positive") : /^[-−]/.test(text4) ? accent(text4, style, "negative") : text4;
 }
+function signedField(text4) {
+  return /^\+/.test(text4) ? { text: text4, role: "positive" } : /^[-−]/.test(text4) ? { text: text4, role: "negative" } : text4;
+}
 function financialTable(ctx, headers2, rows, columns) {
   const style = terminalStyle(ctx.deps, "stdout");
   const clean3 = rows.map((row2) => row2.map(terminalText));
@@ -104274,7 +104459,7 @@ function financialTable(ctx, headers2, rows, columns) {
   if (style.width >= 60 && table.split(`
 `).every((line) => displayWidth(line) <= style.width))
     return table;
-  return clean3.map((row2) => fields(headers2.map((label, col) => [label, specs[col]?.signed ? signed(row2[col] ?? "", style) : row2[col]]), style).join(`
+  return clean3.map((row2) => fields(headers2.map((label, col) => [label, specs[col]?.signed ? signedField(row2[col] ?? "") : row2[col]]), style).join(`
 `)).join(`
 
 `);
@@ -104288,7 +104473,7 @@ function writeFinancialLines(ctx, rows) {
   for (const [label = "", value = "", note = ""] of rows) {
     const head = `  ${dim(padDisplay(label, labelWidth), style)}  ${" ".repeat(valueWidth - displayWidth(value))}${signed(value, style)}`;
     if (displayWidth(head) > style.width) {
-      ctx.deps.stdout.write(`${fields([[label, signed(value, style)]], style).join(`
+      ctx.deps.stdout.write(`${fields([[label, signedField(value)]], style).join(`
 `)}
 `);
       if (note)
@@ -106278,10 +106463,12 @@ async function quantAsk(args, ctx) {
       })}
 `);
     } else {
-      ctx.deps.stdout.write(`${answer2}
+      ctx.deps.stdout.write(`${result2.paragraphs.map(escapeTerminalText).join(`
+
+`)}
 `);
       if (remaining !== undefined) {
-        ctx.deps.stderr.write(`${remaining} Quant answer${remaining === 1 ? "" : "s"} left today${resetsAt !== undefined ? `, resets at ${resetsAt}` : ""}.
+        ctx.deps.stderr.write(`${remaining} Quant answer${remaining === 1 ? "" : "s"} left today${resetsAt !== undefined ? `, resets at ${escapeTerminalText(String(resetsAt))}` : ""}.
 `);
       }
     }
@@ -108435,10 +108622,10 @@ function eventLine(event, widths) {
   const { doing, detail } = action(event);
   return [
     formatTime(event.at).padEnd(widths.time),
-    event.kind.padEnd(widths.kind),
-    who(event).padEnd(widths.who),
-    doing,
-    detail
+    escapeTerminalText(event.kind).padEnd(widths.kind),
+    escapeTerminalText(who(event)).padEnd(widths.who),
+    escapeTerminalText(doing),
+    escapeTerminalText(detail)
   ].filter((cell) => cell.trim().length > 0).join("  ").trimEnd();
 }
 async function tokenEvents(args, ctx) {
@@ -108519,7 +108706,7 @@ async function tokenEvents(args, ctx) {
     const widths = {
       time: Math.max(...events.map((event) => formatTime(event.at).length)),
       kind: Math.max(...events.map((event) => event.kind.length)),
-      who: Math.max(...events.map((event) => who(event).length))
+      who: Math.max(...events.map((event) => escapeTerminalText(who(event)).length))
     };
     for (const event of events)
       out.write(`${eventLine(event, widths)}
@@ -108717,7 +108904,7 @@ ${retry}
     ["Result", payload.changed ? "edited" : "nothing changed"],
     ["Version", payload.version === null ? "-" : String(payload.version)],
     ...payload.changed ? [["Changed", changedOf(body)]] : [],
-    ["Description", payload.description ? terminalText(payload.description) : "-"],
+    ["Description", payload.description ? escapeTerminalText(payload.description) : "-"],
     ...linkRows(payload.socials)
   ]);
   return 0;
@@ -108771,18 +108958,18 @@ async function tokenHistory2(args, ctx) {
     writeHeading(ctx.deps, "stdout", `version ${item.version}`);
     writeFields(ctx.deps, "stdout", [
       ["At", item.createdAt],
-      ["By", item.author?.name ? terminalText(item.author.name) : "Agent"],
+      ["By", item.author?.name ? escapeTerminalText(item.author.name) : "Agent"],
       ["Changed", item.changedFields.join(", ")],
       ...item.changedFields.map((field) => {
         const now = field === "description" ? item.description : item.socials[field.slice("socials.".length)];
         const was = field === "description" ? item.prevDescription : item.prevSocials[field.slice("socials.".length)];
-        return [field, `${was ? terminalText(was) : "-"} -> ${now ? terminalText(now) : "-"}`];
+        return [field, `${was ? escapeTerminalText(was) : "-"} -> ${now ? escapeTerminalText(now) : "-"}`];
       })
     ]);
   }
   if (data.nextCursor)
     ctx.deps.stdout.write(`
-More: --cursor ${data.nextCursor}
+More: --cursor ${escapeTerminalText(data.nextCursor)}
 `);
   return 0;
 }
@@ -118681,7 +118868,7 @@ async function runWithConfirm(argv, deps) {
 async function runCommand(argv, deps) {
   const extracted = extractGlobalFlags(argv);
   if ("error" in extracted) {
-    deps.stderr.write(`${extracted.error}
+    deps.stderr.write(`${escapeTerminalText(extracted.error)}
 `);
     return 2;
   }
@@ -118802,7 +118989,7 @@ async function runCommand(argv, deps) {
       return 1;
     }
     if (verdict.warning)
-      deps.stderr.write(`${verdict.warning}
+      deps.stderr.write(`${terminalLines(verdict.warning)}
 `);
   }
   if (ROUTED_COMMANDS.has(word3) && routesToCommand(cmd, sub))
@@ -118833,7 +119020,7 @@ function splitFix(message) {
 }
 function unknownCommand(deps, token2, word3) {
   if (token2 !== undefined)
-    deps.stderr.write(`Unknown command: ${token2}
+    deps.stderr.write(`Unknown command: ${escapeTerminalText(token2)}
 `);
   deps.stderr.write((word3 === undefined ? undefined : renderTopic(word3)) ?? renderTopLevel());
   return 1;
@@ -119049,12 +119236,12 @@ if (isMainModule) {
       process.exitCode = 1;
       if (stream === process.stderr)
         return;
-      process.stderr.write(`Unexpected error: ${err?.message ?? String(err)}
+      process.stderr.write(`Unexpected error: ${escapeTerminalText(err?.message ?? String(err))}
 `);
     });
   }
   await main().catch((err) => {
-    process.stderr.write(`Unexpected error: ${err instanceof Error ? err.message : String(err)}
+    process.stderr.write(`Unexpected error: ${escapeTerminalText(err instanceof Error ? err.message : String(err))}
 `);
     process.exitCode = 1;
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@candledottv/cli",
-  "version": "0.13.23",
+  "version": "0.13.25",
   "description": "The Candle CLI: authorize a device from your browser, then manage API keys, wallets, and setup health from the terminal",
   "type": "module",
   "bin": {