@warmhub/cli 0.112.0 → 0.113.0

package/dist/wh.js

@@ -35958,8 +35958,7 @@ function isTypeSpecObject(value) {
   if ("pattern" in value && typeof value.pattern !== "string")
     return false;
   if ("pattern" in value && typeof value.pattern === "string" && VALID_PRIMITIVE_TYPES.has(value.pattern)) {
-    const baseType2 = typeof value.type === "string" && value.type.endsWith("?") ? value.type.slice(0, -1) : value.type;
-    if (baseType2 !== "string")
+    if (baseType !== "string")
       return false;
   }
   if ("enum" in value && !Array.isArray(value.enum))
@@ -35973,8 +35972,7 @@ function isTypeSpecObject(value) {
   if ("shape" in value && typeof value.shape !== "string")
     return false;
   if ("shape" in value && typeof value.shape === "string" && VALID_PRIMITIVE_TYPES.has(value.shape)) {
-    const baseType2 = typeof value.type === "string" && value.type.endsWith("?") ? value.type.slice(0, -1) : value.type;
-    if (baseType2 !== "wref")
+    if (baseType !== "wref")
       return false;
   }
   if ("items" in value && typeof value.items === "number")
@@ -36079,7 +36077,7 @@ function formatTypeSpecDisplay(spec) {
     } else if (key === "pattern" && typeof val === "string") {
       parts.push(`${key}: "${val}"`);
     } else {
-      parts.push(`${key}: ${val}`);
+      parts.push(`${key}: ${String(val)}`);
     }
   }
   return `${baseType} (${parts.join(", ")})`;
@@ -44723,7 +44721,7 @@ var legacyErrorDetailsSchema = exports_external.discriminatedUnion("reason", [
   }),
   exports_external.object({
     reason: exports_external.literal("lease_held"),
-    leaseExpiresAt: exports_external.string().datetime()
+    leaseExpiresAt: exports_external.iso.datetime()
   }),
   exports_external.object({
     reason: exports_external.literal("validation_failed"),
@@ -44732,7 +44730,7 @@ var legacyErrorDetailsSchema = exports_external.discriminatedUnion("reason", [
   exports_external.object({
     reason: exports_external.literal("rate_limit_reset"),
     retryAfterSeconds: exports_external.number().int().positive(),
-    resetAt: exports_external.string().datetime()
+    resetAt: exports_external.iso.datetime()
   }),
   exports_external.object({
     reason: exports_external.literal("cursor_fence_unavailable"),
@@ -44748,7 +44746,7 @@ var currentErrorDetailsSchema = exports_external.discriminatedUnion("reason", [
   }).strict(),
   exports_external.object({
     reason: exports_external.literal("lease_held"),
-    leaseExpiresAt: exports_external.string().datetime()
+    leaseExpiresAt: exports_external.iso.datetime()
   }).strict(),
   exports_external.object({
     reason: exports_external.literal("validation_failed"),
@@ -44757,7 +44755,7 @@ var currentErrorDetailsSchema = exports_external.discriminatedUnion("reason", [
   exports_external.object({
     reason: exports_external.literal("rate_limit_reset"),
     retryAfterSeconds: exports_external.number().nonnegative(),
-    resetAt: exports_external.string().datetime()
+    resetAt: exports_external.iso.datetime()
   }).strict(),
   exports_external.object({
     reason: exports_external.literal("cursor_fence_unavailable"),
@@ -44778,7 +44776,7 @@ var currentBaseShape = {
   affirmations: affirmationSchema.optional()
 };
 var resultSchema = exports_external.union([
-  exports_external.object({
+  exports_external.looseObject({
     ...positionShape,
     operation: legacyOperationSchema.optional(),
     version: exports_external.number().optional(),
@@ -44793,14 +44791,14 @@ var resultSchema = exports_external.union([
     retryable: exports_external.boolean().optional(),
     warnings: warningSchema,
     affirmations: affirmationSchema.optional()
-  }).passthrough(),
-  exports_external.object({
+  }),
+  exports_external.looseObject({
     ...currentBaseShape,
     status: exports_external.enum(["applied", "noop"]),
     version: exports_external.number().int().positive().optional(),
     dataHash: exports_external.string().min(1).optional()
-  }).passthrough(),
-  exports_external.object({
+  }),
+  exports_external.looseObject({
     ...currentBaseShape,
     status: exports_external.literal("error"),
     errors: exports_external.array(exports_external.object({
@@ -44810,26 +44808,26 @@ var resultSchema = exports_external.union([
       details: currentErrorDetailsSchema.optional(),
       retryable: exports_external.boolean().optional()
     }).strict()).min(1)
-  }).passthrough()
+  })
 ]);
 var operationCountsSchema = exports_external.object({
   applied: exports_external.number().int().nonnegative(),
   noop: exports_external.number().int().nonnegative(),
   failed: exports_external.number().int().nonnegative()
 });
-var groupSchema = exports_external.object({
+var groupSchema = exports_external.looseObject({
   type: exports_external.literal("group"),
   chunkOrdinal: exports_external.number().int().nonnegative(),
-  eventRequestId: exports_external.string().uuid(),
+  eventRequestId: exports_external.uuid(),
   requestDigest: digestSchema,
   outcome: exports_external.enum(["event", "no_event"]),
   repoSeq: exports_external.number().int().nonnegative().optional(),
   operations: operationCountsSchema,
   manifestDigest: digestSchema
-}).passthrough();
-var summarySchema = exports_external.object({
+});
+var summarySchema = exports_external.looseObject({
   type: exports_external.literal("summary"),
-  submissionId: exports_external.string().uuid(),
+  submissionId: exports_external.uuid(),
   streamId: exports_external.string().min(1),
   groupSize: exports_external.number().int().positive(),
   groups: exports_external.number().int().nonnegative(),
@@ -44850,12 +44848,12 @@ var summarySchema = exports_external.object({
     groups: exports_external.number().int().nonnegative(),
     digest: digestSchema
   })
-}).passthrough();
-var errorSchema = exports_external.object({
+});
+var errorSchema = exports_external.looseObject({
   type: exports_external.literal("error"),
   code: exports_external.string().min(1),
   message: exports_external.string().optional()
-}).passthrough();
+});
 var rowSchema = exports_external.union([
   resultSchema,
   groupSchema,
@@ -44942,6 +44940,7 @@ class SequenceValidator {
       return this.acceptSummary(row, fail);
     }
     this.index += 1;
+    return;
   }
   async acceptGroup(row, fail) {
     this.manifestDigest = this.manifestDigest.then((previous) => advanceManifest(previous, row.chunkOrdinal, row.requestDigest));
@@ -45054,10 +45053,11 @@ async function* readStreamingSubmissionRows(response, expectedIdentity) {
     if (terminalRow)
       yield terminalRow;
   } finally {
-    if (!finished)
-      await reader.cancel().catch(() => {
-        return;
-      });
+    if (!finished) {
+      try {
+        await reader.cancel();
+      } catch {}
+    }
     reader.releaseLock();
   }
 }
@@ -45105,15 +45105,20 @@ function submissionPath(identity2) {
 function createRequestBody(source) {
   const iterator = createNormalizedOperationIterator(source, false);
   let closed = false;
+  const observeSourceReturn = async (returned) => {
+    try {
+      await returned;
+    } catch {}
+  };
   const returnSourceOnce = () => {
     if (closed)
       return;
     closed = true;
-    const returned = iterator.returnSourceOnce();
-    if (returned)
-      Promise.resolve(returned).catch(() => {
-        return;
-      });
+    try {
+      const returned = iterator.returnSourceOnce();
+      if (returned)
+        observeSourceReturn(returned);
+    } catch {}
   };
   const stream = new ReadableStream({
     async pull(controller) {
@@ -45246,7 +45251,7 @@ function createStreamingSubmissionHandle(input, deps) {
 // ../../packages/sdk-ts/package.json
 var package_default = {
   name: "@warmhub/sdk-ts",
-  version: "0.110.0",
+  version: "0.111.0",
   private: false,
   type: "module",
   description: "The TypeScript SDK for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",
@@ -48931,8 +48936,11 @@ function writeCrash(err, kind, crashDir, ring, dispatch, whVersion) {
   try {
     writeFileSync(filePath, JSON.stringify(record2, null, 2), { mode: 384 });
     result = { persisted: true, filePath };
-  } catch (err2) {
-    result = { persisted: false, errorCode: persistenceErrorCode(err2) };
+  } catch (persistenceError) {
+    result = {
+      persisted: false,
+      errorCode: persistenceErrorCode(persistenceError)
+    };
   }
   const breadcrumb = {
     v: 1,
@@ -49517,6 +49525,8 @@ function accessTokenExpiry(accessToken) {
 }
 
 // ../../packages/warmhub-cli/src/auth-refresh.ts
+var WORKOS_REFRESH_TIMEOUT_MS = 30000;
+
 class WorkOsAuthError extends Error {
   error;
   errorDescription;
@@ -49529,7 +49539,7 @@ class WorkOsAuthError extends Error {
     this.status = status;
   }
 }
-async function refreshAccessToken(tokens) {
+async function refreshAccessToken(tokens, signal) {
   const log = getLog();
   const { clientId } = tokens;
   const workosUrl = "https://api.workos.com";
@@ -49542,6 +49552,7 @@ async function refreshAccessToken(tokens) {
     request_id: requestId
   });
   const startedAt = Date.now();
+  const requestSignal = signal ?? AbortSignal.timeout(WORKOS_REFRESH_TIMEOUT_MS);
   let res;
   try {
     res = await fetch(`${workosUrl}${path}`, {
@@ -49551,7 +49562,8 @@ async function refreshAccessToken(tokens) {
         grant_type: "refresh_token",
         client_id: clientId,
         refresh_token: tokens.refreshToken
-      })
+      }),
+      signal: requestSignal
     });
   } catch (err) {
     log.info("http.error", {
@@ -50118,8 +50130,23 @@ function corruptedAuthError(path, cause) {
 function isAuthLockError(error51, authPath) {
   return error51 instanceof Error && error51.code === "ELOCKED" && (error51.file === undefined || error51.file === authPath);
 }
-function delay2(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
+function abortError(signal) {
+  return signal?.reason instanceof Error ? signal.reason : new DOMException("The operation was aborted", "AbortError");
+}
+function delay2(ms, signal) {
+  if (signal?.aborted)
+    return Promise.reject(abortError(signal));
+  return new Promise((resolve, reject) => {
+    const onAbort = () => {
+      clearTimeout(timer);
+      reject(abortError(signal));
+    };
+    const timer = setTimeout(() => {
+      signal?.removeEventListener("abort", onAbort);
+      resolve();
+    }, ms);
+    signal?.addEventListener("abort", onAbort, { once: true });
+  });
 }
 function getTokenInfo(profile) {
   const envToken = process.env.WH_TOKEN;
@@ -50149,7 +50176,7 @@ function getTokenInfo(profile) {
     canRefresh: source === "device" && !!tokens.refreshToken
   };
 }
-async function getValidToken(profile) {
+async function getValidToken(profile, signal) {
   const log = getLog();
   const envToken = process.env.WH_TOKEN;
   if (envToken) {
@@ -50213,7 +50240,7 @@ async function getValidToken(profile) {
         client_id: lockedTokens.clientId
       });
       try {
-        const refreshed = await refreshAccessToken(lockedTokens);
+        const refreshed = await refreshAccessToken(lockedTokens, signal);
         saveProfileWhileLocked(profileName, { ...lockedProf, tokens: refreshed }, authPath);
         log.info("auth.refresh.ok", {
           profile: profileName,
@@ -50222,6 +50249,8 @@ async function getValidToken(profile) {
         });
         return refreshed.accessToken;
       } catch (err) {
+        if (signal?.aborted)
+          throw err;
         const isTransientHttp = err instanceof WorkOsAuthError && (err.status >= 500 || err.status === 429 || err.status === 408);
         if (err instanceof WorkOsAuthError && !isTransientHttp) {
           const classification = err.error === "invalid_grant" ? "invalid_grant" : "terminal";
@@ -50240,14 +50269,14 @@ async function getValidToken(profile) {
           duration_ms: Date.now() - refreshStarted,
           error_name: err instanceof Error ? err.name : "Unknown"
         });
-        await delay2(1000);
+        await delay2(1000, signal);
         log.info("auth.refresh.retry", { profile: profileName, attempt: 2 });
         let retryStarted = Date.now();
         try {
           const retryProf = getProfile(profileName, authPath);
           const retryTokens = retryProf?.tokens ?? lockedTokens;
           retryStarted = Date.now();
-          const refreshed = await refreshAccessToken(retryTokens);
+          const refreshed = await refreshAccessToken(retryTokens, signal);
           saveProfileWhileLocked(profileName, { ...retryProf ?? lockedProf, tokens: refreshed }, authPath);
           log.info("auth.refresh.ok", {
             profile: profileName,
@@ -50257,6 +50286,8 @@ async function getValidToken(profile) {
           });
           return refreshed.accessToken;
         } catch (retryErr) {
+          if (signal?.aborted)
+            throw retryErr;
           const isTerminal = retryErr instanceof WorkOsAuthError && !(retryErr.status >= 500 || retryErr.status === 429 || retryErr.status === 408);
           const classification = isTerminal ? "terminal" : "transient";
           const fields = {
@@ -50444,7 +50475,7 @@ function createClient(config2, opts = {}) {
   return new WarmHubClient({
     apiUrl: config2.apiUrl,
     auth: {
-      getToken: async () => await getValidToken(profile) ?? undefined
+      getToken: async () => await getValidToken(profile, opts.signal) ?? undefined
     },
     fetch: createBenchmarkAwareFetch(benchmarkId, opts.signal),
     functionLogs: opts.functionLogs,
@@ -50479,16 +50510,16 @@ function pollUntilAbort(poll, signal) {
       resolve(result);
     }, (error51) => {
       signal.removeEventListener("abort", onAbort);
-      reject(error51);
+      reject(error51 instanceof Error ? error51 : new Error("live poll failed", { cause: error51 }));
     });
   });
 }
 async function runLive(opts) {
+  const controller = new AbortController;
   const auth = opts.auth ?? {
-    getToken: async () => await getValidToken(opts.profile) ?? undefined
+    getToken: async () => await getValidToken(opts.profile, controller.signal) ?? undefined
   };
   const benchmarkId = process.env.WH_BENCHMARK_ID?.trim();
-  const controller = new AbortController;
   const client = new WarmHubClient({
     apiUrl: opts.apiUrl,
     auth,
@@ -50498,11 +50529,12 @@ async function runLive(opts) {
     clientFlags: opts.clientFlags,
     decorateResponses: opts.decorateResponses
   });
+  const forwardAbort = () => controller.abort();
   if (opts.signal) {
     if (opts.signal.aborted)
       controller.abort();
     else
-      opts.signal.addEventListener("abort", () => controller.abort(), {
+      opts.signal.addEventListener("abort", forwardAbort, {
         once: true
       });
   }
@@ -50524,7 +50556,7 @@ async function runLive(opts) {
       const poll = opts.poll(client, controller.signal);
       const result = await pollUntilAbort(poll, controller.signal);
       if (result === LIVE_ABORTED) {
-        poll.catch(() => {});
+        observePollAfterAbort(poll);
         break;
       }
       updates += 1;
@@ -50549,12 +50581,18 @@ ${opts.colors.dim}[live • update #${updates} • Ctrl-C to stop]${opts.colors.
     }
     return { updates };
   } finally {
+    opts.signal?.removeEventListener("abort", forwardAbort);
     if (startTimer)
       clearTimeout(startTimer);
     if (inactivityTimer)
       clearTimeout(inactivityTimer);
   }
 }
+async function observePollAfterAbort(poll) {
+  try {
+    await poll;
+  } catch {}
+}
 function toCliError2(e) {
   return toCliError(e);
 }
@@ -51854,7 +51892,7 @@ function notYetImplemented(command) {
 }
 function levenshtein(a, b) {
   const m = a.length, n = b.length;
-  const dp = Array.from({ length: m + 1 }, (_, i) => Array.from({ length: n + 1 }, (_2, j) => i === 0 ? j : j === 0 ? i : 0));
+  const dp = Array.from({ length: m + 1 }, (_row, i) => Array.from({ length: n + 1 }, (_cell, j) => i === 0 ? j : j === 0 ? i : 0));
   for (let i = 1;i <= m; i++) {
     const row = dp[i];
     const previousRow = dp[i - 1];
@@ -53978,9 +54016,9 @@ var handleResolve = async (ctx, { args }) => {
   const c = ctx.colors;
   const result = await ctx.client.thing.resolve(org, repo, wref);
   writeOutput(ctx, result, () => {
-    const wref2 = result.wref ?? result.name ?? "(unknown)";
-    ctx.out(`${pinnedWref(c, wref2, result.version)}  ${kindLabel(c, result.kind ?? "thing")}`);
-    ctx.out(`  ${c.dim}wref:${c.reset}      ${escapeTerminalTextForDisplay(wref2)}`);
+    const resolvedWref = result.wref ?? result.name ?? "(unknown)";
+    ctx.out(`${pinnedWref(c, resolvedWref, result.version)}  ${kindLabel(c, result.kind ?? "thing")}`);
+    ctx.out(`  ${c.dim}wref:${c.reset}      ${escapeTerminalTextForDisplay(resolvedWref)}`);
     ctx.out(`  ${c.dim}version:${c.reset}   ${result.version ?? "-"}`);
     ctx.out(`  ${c.dim}active:${c.reset}    ${String(result.active)}`);
   });
@@ -55299,7 +55337,7 @@ async function pollForDeviceToken(params) {
           reject(new CliError(4 /* Backend */, "BACKEND", connectionErrorMessage(workosUrl), err2));
           return;
         }
-        reject(err2);
+        reject(err2 instanceof Error ? err2 : new Error("Device authorization failed.", { cause: err2 }));
         return;
       }
       if (res.ok) {
@@ -55378,7 +55416,9 @@ async function fetchIdentityWref(ctx) {
 function openBrowser(url2) {
   if (process.env.WH_NO_BROWSER)
     return;
-  Promise.resolve().then(() => (init_open(), exports_open)).then(({ default: open2 }) => open2(url2)).catch(() => {});
+  Promise.resolve().then(() => (init_open(), exports_open)).then(({ default: open2 }) => open2(url2)).catch(() => {
+    getLog().warn("auth.browser_open_failed");
+  });
 }
 
 // ../../packages/warmhub-cli/src/domains/auth-handlers.ts
@@ -55436,11 +55476,14 @@ var handleLogin = async (ctx, { flags }) => {
   let clientId;
   try {
     clientId = await ctx.client.auth.getClientId();
-  } catch {
+  } catch (error51) {
+    if (ctx.signal?.aborted)
+      throw error51;
     clientId = await createUnauthenticatedClient(ctx.config, {
       functionLogs: ctx.functionLogMode,
       clientFlags: ctx.clientFlags,
-      decorateResponses: ctx.decorate
+      decorateResponses: ctx.decorate,
+      signal: ctx.signal
     }).auth.getClientId();
   }
   if (!clientId) {
@@ -55452,7 +55495,8 @@ var handleLogin = async (ctx, { flags }) => {
     deviceRes = await fetch(`${workosUrl}/user_management/authorize/device`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ client_id: clientId })
+      body: JSON.stringify({ client_id: clientId }),
+      signal: ctx.signal
     });
   } catch (err) {
     if (isConnectionError(err)) {
@@ -55927,6 +55971,7 @@ function createChannelServer(opts) {
 
 // ../../packages/warmhub-cli/src/domains/channel.ts
 var RECONNECT_DELAY_MS = 2000;
+var MAX_CHANNEL_REPOS = 16;
 function formatChannelEvent(org, repo, event) {
   const things = event.affectedThings.join(", ");
   const shapes = event.affectedShapes.join(",");
@@ -55973,7 +56018,7 @@ async function subscribeLoop(client, org, repo, signal, server) {
         break;
       const msg = err instanceof Error ? err.message : String(err);
       if (msg.includes("401") || msg.includes("403") || msg.includes("404") || msg.includes("AUTH") || msg.includes("not found") || msg.includes("Session expired")) {
-        throw new Error(`${org}/${repo}: ${msg}`);
+        throw new Error(`${org}/${repo}: ${msg}`, { cause: err });
       }
       await pauseBeforeReconnect();
     }
@@ -55982,7 +56027,13 @@ async function subscribeLoop(client, org, repo, signal, server) {
 var channelFlags = {};
 var handleChannel = async (ctx, { flags }) => {
   const repoRefs = Array.isArray(flags.repo) ? flags.repo : flags.repo ? [flags.repo] : undefined;
-  const repos = repoRefs ? repoRefs.map((ref) => parseOrgRepo(ref, ctx.config)) : [parseOrgRepo(undefined, ctx.config)];
+  const parsedRepos = repoRefs ? repoRefs.map((ref) => parseOrgRepo(ref, ctx.config)) : [parseOrgRepo(undefined, ctx.config)];
+  const repos = [
+    ...new Map(parsedRepos.map(({ org, repo }) => [`${org}/${repo}`, { org, repo }])).values()
+  ];
+  if (repos.length > MAX_CHANNEL_REPOS) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", `Channel can watch at most ${MAX_CHANNEL_REPOS} unique repositories`);
+  }
   const server = createChannelServer({
     name: "warmhub",
     version: "0.1.0",
@@ -56025,6 +56076,7 @@ var handleChannel = async (ctx, { flags }) => {
   else
     signal.addEventListener("abort", () => controller.abort(), { once: true });
   let fatal;
+  let fatalMessage;
   try {
     const subscriptions = Promise.all(repos.map(({ org, repo }) => subscribeLoop(ctx.client, org, repo, controller.signal, server)));
     const closed = server.onClosed.then(() => {
@@ -56034,14 +56086,13 @@ var handleChannel = async (ctx, { flags }) => {
   } catch (err) {
     controller.abort();
     fatal = err;
-    const msg = err instanceof Error ? err.message : String(err);
-    process.stderr.write(`[warmhub-channel] Fatal: ${msg}
+    fatalMessage = err instanceof Error ? err.message : String(err);
+    process.stderr.write(`[warmhub-channel] Fatal: ${fatalMessage}
 `);
   }
   server.close();
-  if (fatal !== undefined) {
-    const msg = fatal instanceof Error ? fatal.message : String(fatal);
-    throw new CliError(4 /* Backend */, "BACKEND", `channel subscription failed: ${msg}`);
+  if (fatalMessage !== undefined) {
+    throw new CliError(4 /* Backend */, "BACKEND", `channel subscription failed: ${fatalMessage}`, fatal);
   }
 };
 var CHANNEL_DOMAIN = defineDomain({
@@ -58720,7 +58771,7 @@ function constantAliasValueHint(alias, spec) {
   return alias === "json" && spec.long === "format" ? "Use --json alone, or --format json." : `Use --${alias} alone, or --${spec.long} <value>.`;
 }
 function malformedShortCopy(source, knownShorts, spec) {
-  const characters = [...source.slice(1)];
+  const characters = Array.from(source.slice(1));
   const clustered = characters.length > 1 && characters.every((name) => knownShorts.has(name));
   if (clustered) {
     return {
@@ -58735,15 +58786,17 @@ function malformedShortCopy(source, knownShorts, spec) {
   };
 }
 function editDistance(left, right) {
-  let previous = Array.from({ length: right.length + 1 }, (_, index) => index);
-  for (const [leftIndex, leftCharacter] of [...left].entries()) {
+  const leftCharacters = Array.from(left);
+  const rightCharacters = Array.from(right);
+  let previous = Array.from({ length: rightCharacters.length + 1 }, (_, index) => index);
+  for (const [leftIndex, leftCharacter] of leftCharacters.entries()) {
     const current = [leftIndex + 1];
-    for (const [rightIndex, rightCharacter] of [...right].entries()) {
+    for (const [rightIndex, rightCharacter] of rightCharacters.entries()) {
       current.push(Math.min((current[rightIndex] ?? 0) + 1, (previous[rightIndex + 1] ?? 0) + 1, (previous[rightIndex] ?? 0) + (leftCharacter === rightCharacter ? 0 : 1)));
     }
     previous = current;
   }
-  return previous[right.length] ?? left.length;
+  return previous[rightCharacters.length] ?? leftCharacters.length;
 }
 function closestLongName(input, specs) {
   const candidates = specs.flatMap((spec) => [
@@ -60347,21 +60400,21 @@ var COMPONENT_DOMAIN = defineDomain({
 function resolveCredentialContext(args) {
   const repoRef = getRepoRef(args.ctx);
   if (repoRef) {
-    const { org: org2, repo } = parseOrgRepo(repoRef, args.ctx.config);
-    if (args.orgFlag && args.orgFlag !== org2) {
-      throw new CliError(2 /* UserInput */, "USER_INPUT", `Conflicting org: --repo resolves to '${org2}' but --org was '${args.orgFlag}'`);
+    const { org, repo } = parseOrgRepo(repoRef, args.ctx.config);
+    if (args.orgFlag && args.orgFlag !== org) {
+      throw new CliError(2 /* UserInput */, "USER_INPUT", `Conflicting org: --repo resolves to '${org}' but --org was '${args.orgFlag}'`);
     }
-    return { org: org2, repo };
+    return { org, repo };
   }
-  const org = args.orgFlag ?? args.ctx.config.defaultOrg;
-  if (!org) {
+  const resolvedOrg = args.orgFlag ?? args.ctx.config.defaultOrg;
+  if (!resolvedOrg) {
     if (args.ctx.config.defaultRepo) {
-      const { org: org2, repo } = parseOrgRepo(undefined, args.ctx.config);
-      return { org: org2, repo };
+      const { org, repo } = parseOrgRepo(undefined, args.ctx.config);
+      return { org, repo };
     }
     throw new CliError(3 /* Config */, "CONFIG", "No org specified. Use --org <org>, --repo org/repo, or set WARMHUB_ORG.");
   }
-  return { org };
+  return { org: resolvedOrg };
 }
 function formatCredentialContextTarget(context) {
   return context.repo ? `${context.org}/${context.repo}` : context.org;
@@ -60840,13 +60893,14 @@ async function prepareTextFile(path2, content, mode) {
     temporaryClosed = true;
     return temporaryPath;
   } catch (error51) {
-    if (!temporaryClosed)
-      await temporary.close().catch(() => {
-        return;
-      });
-    await unlink(temporaryPath).catch(() => {
-      return;
-    });
+    if (!temporaryClosed) {
+      try {
+        await temporary.close();
+      } catch {}
+    }
+    try {
+      await unlink(temporaryPath);
+    } catch {}
     throw error51;
   }
 }
@@ -61256,9 +61310,9 @@ async function collectChecks(ctx) {
     status: repo !== undefined ? repoParts ? "ok" : "fail" : "warn",
     message: repo !== undefined ? repoParts ? `${hasRepoFlag ? "Target" : "Default"} repo: ${repoForDisplay}${repoProvenance}` : `Invalid repo format "${repoForDisplay}". Expected "org/repo".` : "No default repo set (use --repo flag, WARMHUB_REPO, or wh use org/repo)"
   });
-  const profileFlag = ctx.invocation.flags.profile;
-  const profile = (typeof profileFlag === "string" ? profileFlag : undefined) ?? ctx.config.profile ?? ctx.profile ?? "default";
-  const profileSource = typeof profileFlag === "string" ? "flag" : ctx.config.configSource?.profile;
+  const requestedProfile = ctx.invocation.flags.profile;
+  const profile = (typeof requestedProfile === "string" ? requestedProfile : undefined) ?? ctx.config.profile ?? ctx.profile ?? "default";
+  const profileSource = typeof requestedProfile === "string" ? "flag" : ctx.config.configSource?.profile;
   const profileProvenance = profileSource === "env" ? " (from WH_PROFILE)" : profileSource === "wh-file" ? " (from .wh file)" : profileSource === "flag" ? " (from --profile flag)" : "";
   checks3.push({
     key: "profile",
@@ -61341,8 +61395,8 @@ async function collectChecks(ctx) {
           message: `Token validation failed: ${whoami.error}`
         });
       } else {
-        const profileFlag2 = ctx.invocation.flags.profile;
-        const activeProfile = (typeof profileFlag2 === "string" ? profileFlag2 : undefined) ?? ctx.config.profile;
+        const profileFlag = ctx.invocation.flags.profile;
+        const activeProfile = (typeof profileFlag === "string" ? profileFlag : undefined) ?? ctx.config.profile;
         const loginCmd = activeProfile && activeProfile !== "default" ? `wh auth login --profile ${activeProfile}` : "wh auth login";
         const detail = process.env.WH_TOKEN ? `WH_TOKEN is set; verify it was issued for ${ctx.config.apiUrl} and that the backend has auth verification enabled, or unset WH_TOKEN and run \`${loginCmd}\`.` : `Run \`${loginCmd}\`, or verify ${ctx.config.apiUrl} is what you expect and has auth verification enabled.`;
         checks3.push({
@@ -62733,6 +62787,7 @@ import { join as join11 } from "node:path";
 import { createHash as createHash2 } from "node:crypto";
 import { Writable } from "node:stream";
 import { pipeline } from "node:stream/promises";
+import { callbackify } from "node:util";
 import { crc32, createInflateRaw } from "node:zlib";
 var LOCAL_SIGNATURE = 67324752;
 var CENTRAL_SIGNATURE = 33639248;
@@ -62802,32 +62857,31 @@ async function inflateEntry(reader, sink) {
   let compressedSize = 0n;
   let uncompressedSize = 0n;
   let crc = 0;
+  const writeChunk = callbackify(async (bytes) => {
+    try {
+      await sink.write(bytes);
+    } catch (error51) {
+      throw error51 instanceof Error ? error51 : new Error("checkpoint sink failed");
+    }
+    crc = crc32(bytes, crc);
+    uncompressedSize += BigInt(bytes.byteLength);
+  });
   const output = new Writable({
     highWaterMark: INFLATE_INPUT_BYTES,
     write(bytes, _encoding, done) {
-      sink.write(bytes).then(() => {
-        crc = crc32(bytes, crc);
-        uncompressedSize += BigInt(bytes.byteLength);
-        done();
-      }).catch((error51) => {
-        done(error51 instanceof Error ? error51 : new Error("checkpoint sink failed"));
-      });
+      writeChunk(bytes, done);
     }
   });
   const completed = pipeline(inflater, output);
-  const failed = completed.then(() => new Promise(() => {
-    return;
-  }), (error51) => Promise.reject(error51));
-  failed.catch(() => {
-    return;
-  });
+  const pipelineFailure = new PipelineFailureSignal;
+  const failureObservation = observePipelineFailure(completed, pipelineFailure);
   try {
     while (!inflater.readableEnded) {
       const input = await reader.readSome(INFLATE_INPUT_BYTES);
       if (!input)
         throw new Error("archive entry is truncated");
       const before = inflater.bytesWritten;
-      await writeInflateInput(inflater, input, failed);
+      await writeInflateInput(inflater, input, pipelineFailure);
       const consumed = inflater.bytesWritten - before;
       if (!Number.isSafeInteger(consumed) || consumed < 0 || consumed > input.byteLength) {
         throw new Error("archive inflater consumed invalid input");
@@ -62846,12 +62900,44 @@ async function inflateEntry(reader, sink) {
   } finally {
     if (!inflater.destroyed)
       inflater.destroy();
-    await completed.catch(() => {
-      return;
+    await failureObservation;
+  }
+}
+
+class PipelineFailureSignal {
+  #failure;
+  #rejectCurrent;
+  fail(error51) {
+    const failure = error51 instanceof Error ? error51 : new Error("archive inflater failed");
+    this.#failure = failure;
+    this.#rejectCurrent?.(failure);
+    this.#rejectCurrent = undefined;
+  }
+  async race(work) {
+    if (this.#failure)
+      throw this.#failure;
+    let rejectCurrent;
+    const currentFailure = new Promise((_resolve, reject) => {
+      rejectCurrent = (error51) => reject(error51);
+      this.#rejectCurrent = rejectCurrent;
     });
+    try {
+      return await Promise.race([work, currentFailure]);
+    } finally {
+      if (rejectCurrent && this.#rejectCurrent === rejectCurrent) {
+        this.#rejectCurrent = undefined;
+      }
+    }
+  }
+}
+async function observePipelineFailure(completed, signal) {
+  try {
+    await completed;
+  } catch (error51) {
+    signal.fail(error51);
   }
 }
-async function writeInflateInput(inflater, input, failed) {
+async function writeInflateInput(inflater, input, pipelineFailure) {
   const written = new Promise((resolve4, reject) => {
     inflater.write(input, (error51) => {
       if (error51)
@@ -62860,7 +62946,7 @@ async function writeInflateInput(inflater, input, failed) {
         resolve4();
     });
   });
-  await Promise.race([written, failed]);
+  await pipelineFailure.race(written);
 }
 async function readCentralDirectory(reader, entries) {
   const centralOffset = BigInt(reader.position);
@@ -63054,10 +63140,11 @@ function toAsyncIterable2(source) {
           yield value;
         }
       } finally {
-        if (!completed)
-          await reader.cancel().catch(() => {
-            return;
-          });
+        if (!completed) {
+          try {
+            await reader.cancel();
+          } catch {}
+        }
         reader.releaseLock();
       }
     }
@@ -63095,7 +63182,7 @@ class CheckpointIdentitySorter {
     this.#scratchPath = scratchPath;
     const sortBudgetBytes = options.sortBudgetBytes ?? CHECKPOINT_IDENTITY_SORT_BUDGET_BYTES;
     this.#mergeFanIn = options.mergeFanIn ?? CHECKPOINT_IDENTITY_MERGE_FAN_IN;
-    if (!Number.isSafeInteger(sortBudgetBytes) || sortBudgetBytes < MINIMUM_RESIDENT_BYTES || !Number.isSafeInteger(this.#mergeFanIn) || this.#mergeFanIn < 2) {
+    if (!Number.isSafeInteger(sortBudgetBytes) || sortBudgetBytes < MINIMUM_RESIDENT_BYTES || !Number.isSafeInteger(this.#mergeFanIn) || this.#mergeFanIn < 2 || this.#mergeFanIn > CHECKPOINT_IDENTITY_MERGE_FAN_IN) {
       throw new Error("checkpoint identity sort limits are invalid");
     }
     this.#resident = new ResidentDurableIds(sortBudgetBytes);
@@ -63191,7 +63278,12 @@ class ResidentDurableIds {
     const offsets = this.#offsets.subarray(0, this.#count);
     offsets.sort((left, right) => this.#compareAt(left, right));
     for (let index = 1;index < offsets.length; index += 1) {
-      if (this.#compareAt(offsets[index - 1], offsets[index]) === 0) {
+      const previousOffset = offsets[index - 1];
+      const offset = offsets[index];
+      if (previousOffset === undefined || offset === undefined) {
+        throw new Error("checkpoint identity offset is missing");
+      }
+      if (this.#compareAt(previousOffset, offset) === 0) {
         throw new DuplicateCheckpointDurableIdError;
       }
     }
@@ -63415,7 +63507,12 @@ async function writeChunk(output, chunk) {
 function compareUtf8Bytes(left, right) {
   const sharedLength = Math.min(left.length, right.length);
   for (let index = 0;index < sharedLength; index += 1) {
-    const difference = left[index] - right[index];
+    const leftByte = left[index];
+    const rightByte = right[index];
+    if (leftByte === undefined || rightByte === undefined) {
+      throw new Error("checkpoint identity byte is missing");
+    }
+    const difference = leftByte - rightByte;
     if (difference !== 0)
       return difference;
   }
@@ -63656,31 +63753,31 @@ function mapVerificationError(error51) {
 import { createHash as createHash4, randomUUID as randomUUID3 } from "node:crypto";
 import { link, lstat as lstat2, open as open4, unlink as unlink2 } from "node:fs/promises";
 import { basename as basename5, dirname as dirname7, join as join12 } from "node:path";
+async function bestEffortCleanup(cleanup) {
+  try {
+    await cleanup();
+  } catch {}
+}
 async function writeDownloadedCheckpointArtifact(ctx, response, descriptor, output, ports = {}) {
-  if (!response.ok || !response.body) {
-    await response.body?.cancel().catch(() => {
-      return;
-    });
+  const body = response.body;
+  if (!response.ok || !body) {
+    await bestEffortCleanup(() => body?.cancel());
     throw new CliError(4 /* Backend */, "BACKEND", `Checkpoint artifact download failed with HTTP ${response.status}`);
   }
   if (output !== "-") {
     try {
       await refuseExistingDestination(output);
     } catch (error51) {
-      await response.body.cancel().catch(() => {
-        return;
-      });
+      await bestEffortCleanup(() => body.cancel());
       throw error51;
     }
   }
   const digest2 = createHash4("sha256");
   let byteLength = 0;
-  const stream = responseChunks(response.body);
+  const stream = responseChunks(body);
   if (output === "-") {
     if (!ctx.writeBinary) {
-      await response.body.cancel().catch(() => {
-        return;
-      });
+      await bestEffortCleanup(() => body.cancel());
       throw new CliError(1 /* Runtime */, "UNKNOWN", "Binary stdout is unavailable for this command context.");
     }
     for await (const bytes of stream) {
@@ -63710,15 +63807,9 @@ async function writeDownloadedCheckpointArtifact(ctx, response, descriptor, outp
     await link(temporary, output);
     await unlink2(temporary);
   } catch (error51) {
-    await handle?.close().catch(() => {
-      return;
-    });
-    await unlink2(temporary).catch(() => {
-      return;
-    });
-    await response.body.cancel().catch(() => {
-      return;
-    });
+    await bestEffortCleanup(() => handle?.close());
+    await bestEffortCleanup(() => unlink2(temporary));
+    await bestEffortCleanup(() => body.cancel());
     if (error51.code === "EEXIST") {
       throw new CliError(2 /* UserInput */, "USER_INPUT", `Refusing to overwrite existing output path '${output}'.`);
     }
@@ -63760,9 +63851,7 @@ async function* responseChunks(body) {
       yield value;
     }
   } finally {
-    await reader.cancel().catch(() => {
-      return;
-    });
+    await bestEffortCleanup(() => reader.cancel());
     reader.releaseLock();
   }
 }
@@ -67875,7 +67964,7 @@ function buildLookup(specs) {
       });
     }
     if (spec.short !== undefined) {
-      if ([...spec.short].length !== 1) {
+      if (Array.from(spec.short).length !== 1) {
         throw new Error(`Short flag -${spec.short} must be one character`);
       }
       addUnique(shorts, spec.short, { spec, spelling: "short" });
@@ -68085,7 +68174,7 @@ function bindOccurrences(records, specs, options = {}) {
       continue;
     if (record2.kind === "malformed-short") {
       if ((options.unknownFlags ?? "error") === "error") {
-        const firstShort = [...record2.source.slice(1)][0];
+        const firstShort = Array.from(record2.source.slice(1))[0];
         const spec = firstShort ? lookup.shorts.get(firstShort)?.spec : undefined;
         const copy = malformedShortCopy(record2.source, lookup.shorts, spec);
         errors3.push({
@@ -68277,7 +68366,7 @@ function scanArgv(argv) {
       };
     }
     if (source.startsWith("-") && source !== "-") {
-      const shortCharacters = [...source.slice(1)];
+      const shortCharacters = Array.from(source.slice(1));
       if (shortCharacters.length === 1) {
         return {
           kind: "option",
@@ -69235,7 +69324,7 @@ function resolveLogLevel(flagLevel, env) {
 // package.json
 var package_default3 = {
   name: "@warmhub/cli",
-  version: "0.112.0",
+  version: "0.113.0",
   private: false,
   type: "module",
   description: "The wh CLI for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",
@@ -69860,5 +69949,5 @@ process.exitCode = interceptedExitCode === undefined ? await runPreparedCli(laun
   version: package_default3.version
 }) : interceptedExitCode;
 
-//# debugId=A0E5CC4BED9D3F1464756E2164756E21
-//# warmhub-cli-build-info {"cliVersion":"0.112.0","sdkVersion":"0.110.0"}
+//# debugId=4FF14B239E0A264364756E2164756E21
+//# warmhub-cli-build-info {"cliVersion":"0.113.0","sdkVersion":"0.111.0"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@warmhub/cli",
-  "version": "0.112.0",
+  "version": "0.113.0",
   "private": false,
   "type": "module",
   "description": "The wh CLI for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",