@warmhub/cli 0.57.0 → 0.59.0

package/dist/wh.js

@@ -18531,6 +18531,12 @@ var DEFAULT_MAX_OPS_PER_STREAM = 1e6;
 var DEFAULT_STREAM_APPEND_CHUNK_SIZE = 1000;
 var MAX_STREAM_APPEND_OPERATION_COUNT = 1e4;
 // ../../packages/rules/src/commit-types.ts
+var COMMIT_OPERATION_KINDS = [
+  "shape",
+  "thing",
+  "assertion",
+  "collection"
+];
 function inferOperationKind(op) {
   if (op.kind === "shape" || op.kind === "thing" || op.kind === "assertion" || op.kind === "collection") {
     return op.kind;
@@ -18631,7 +18637,8 @@ var REPO_AUTH_SCOPES = [
   "repo:read",
   "repo:write",
   "repo:configure",
-  "repo:admin"
+  "repo:admin",
+  "repo:action-callback"
 ];
 
 // ../../packages/rules/src/component-manifest-contract.ts
@@ -18909,7 +18916,7 @@ function validateCliMethod(method, methodIndex, seen) {
   if (requiresPermission !== undefined && (typeof requiresPermission !== "string" || !VALID_REQUIRES_PERMISSION.has(requiresPermission))) {
     findings.push({
       code: "INVALID_CLI_REQUIRES_PERMISSION",
-      message: `${basePath}.requiresPermission must be one of "repo:read" | "repo:write" | "repo:configure" | "repo:admin"`
+      message: `${basePath}.requiresPermission must be one of ${REPO_AUTH_SCOPES.map((scope) => `"${scope}"`).join(" | ")}`
     });
   }
   return findings;
@@ -21378,6 +21385,15 @@ function nestedObjectFields(typeDef) {
   }
   return fields;
 }
+// ../../packages/rules/src/subscribable-events.ts
+var COMMIT_EVENT_TYPE = "commit";
+var REPO_RENAMED_EVENT_TYPE = "repo.renamed";
+var ORG_RENAMED_EVENT_TYPE = "org.renamed";
+var SUBSCRIBABLE_EVENT_TYPES = [
+  COMMIT_EVENT_TYPE,
+  REPO_RENAMED_EVENT_TYPE,
+  ORG_RENAMED_EVENT_TYPE
+];
 // ../../packages/rules/src/system-components/system.ts
 var SYSTEM_COMPONENT_ID = "com.warmhub.system";
 var SYSTEM_REGISTERED_COMPONENT_REF = "warmhub/system";
@@ -21441,7 +21457,7 @@ function findSystemComponent(componentId) {
 // ../../packages/sdk-ts/package.json
 var package_default = {
   name: "@warmhub/sdk-ts",
-  version: "0.57.0",
+  version: "0.59.0",
   private: false,
   type: "module",
   description: "The TypeScript SDK for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",
@@ -22051,6 +22067,27 @@ function chunkArray(items, chunkSize) {
   }
   return chunks;
 }
+function toSubscriptionRef(args) {
+  const [first, repoName, name] = args;
+  return typeof first === "string" ? { orgName: first, repoName, name } : first;
+}
+function toSubscriptionListRef(args) {
+  const [first, repoName] = args;
+  return typeof first === "string" ? { orgName: first, repoName } : first;
+}
+function toSubscriptionBindRef(args) {
+  const [first, repoName, subscriptionName, credentialSetName] = args;
+  return typeof first === "string" ? {
+    orgName: first,
+    repoName,
+    subscriptionName,
+    credentialSetName
+  } : first;
+}
+function toSubscriptionUnbindRef(args) {
+  const [first, repoName, subscriptionName] = args;
+  return typeof first === "string" ? { orgName: first, repoName, subscriptionName } : first;
+}
 function sanitizeSubscriptionCreateInput(input) {
   const {
     actionContainer: _actionContainer,
@@ -23018,35 +23055,24 @@ class WarmHubClient {
         throw toWarmHubError(error);
       }
     },
-    get: async (orgName, repoName, name) => {
+    get: async (...args) => {
       try {
-        const result = await this.trpc.subscription.get.query({
-          orgName,
-          repoName,
-          name
-        });
+        const result = await this.trpc.subscription.get.query(toSubscriptionRef(args));
         return normalizeSubscriptionInfo(result);
       } catch (error) {
         throw toWarmHubError(error);
       }
     },
-    reveal: async (orgName, repoName, name) => {
+    reveal: async (...args) => {
       try {
-        return await this.trpc.subscription.reveal.query({
-          orgName,
-          repoName,
-          name
-        });
+        return await this.trpc.subscription.reveal.query(toSubscriptionRef(args));
       } catch (error) {
         throw toWarmHubError(error);
       }
     },
-    list: async (orgName, repoName) => {
+    list: async (...args) => {
       try {
-        const result = await this.trpc.subscription.list.query({
-          orgName,
-          repoName
-        });
+        const result = await this.trpc.subscription.list.query(toSubscriptionListRef(args));
         return normalizeSubscriptionList(result);
       } catch (error) {
         throw toWarmHubError(error);
@@ -23060,58 +23086,37 @@ class WarmHubClient {
         throw toWarmHubError(error);
       }
     },
-    pause: async (orgName, repoName, name) => {
+    pause: async (...args) => {
       try {
-        return await this.trpc.subscription.pause.mutate({
-          orgName,
-          repoName,
-          name
-        });
+        return await this.trpc.subscription.pause.mutate(toSubscriptionRef(args));
       } catch (error) {
         throw toWarmHubError(error);
       }
     },
-    resume: async (orgName, repoName, name) => {
+    resume: async (...args) => {
       try {
-        return await this.trpc.subscription.resume.mutate({
-          orgName,
-          repoName,
-          name
-        });
+        return await this.trpc.subscription.resume.mutate(toSubscriptionRef(args));
       } catch (error) {
         throw toWarmHubError(error);
       }
     },
-    remove: async (orgName, repoName, name) => {
+    remove: async (...args) => {
       try {
-        return await this.trpc.subscription.remove.mutate({
-          orgName,
-          repoName,
-          name
-        });
+        return await this.trpc.subscription.remove.mutate(toSubscriptionRef(args));
       } catch (error) {
         throw toWarmHubError(error);
       }
     },
-    bindCredentials: async (orgName, repoName, subscriptionName, credentialSetName) => {
+    bindCredentials: async (...args) => {
       try {
-        return await this.trpc.subscription.bindCredentials.mutate({
-          orgName,
-          repoName,
-          subscriptionName,
-          credentialSetName
-        });
+        return await this.trpc.subscription.bindCredentials.mutate(toSubscriptionBindRef(args));
       } catch (error) {
         throw toWarmHubError(error);
       }
     },
-    unbindCredentials: async (orgName, repoName, subscriptionName) => {
+    unbindCredentials: async (...args) => {
       try {
-        return await this.trpc.subscription.unbindCredentials.mutate({
-          orgName,
-          repoName,
-          subscriptionName
-        });
+        return await this.trpc.subscription.unbindCredentials.mutate(toSubscriptionUnbindRef(args));
       } catch (error) {
         throw toWarmHubError(error);
       }
@@ -31086,7 +31091,7 @@ var handleTemplate = async (ctx, { flags, args }) => {
   if (operationType !== "add" && operationType !== "revise" && operationType !== "retract") {
     throw new CliError(2 /* UserInput */, "USER_INPUT", `Invalid --operation "${operationType}". Must be "add", "revise", or "retract".`);
   }
-  const validKinds = operationType === "retract" ? ["thing", "assertion", "shape", "collection"] : ["thing", "assertion"];
+  const validKinds = operationType === "retract" ? COMMIT_OPERATION_KINDS : ["thing", "assertion"];
   if (!validKinds.includes(flags.kind ?? "thing")) {
     throw new CliError(2 /* UserInput */, "USER_INPUT", `Invalid --kind "${flags.kind}". Must be one of: ${validKinds.join(", ")}.`);
   }
@@ -31431,7 +31436,11 @@ var GLOBAL_FLAGS = [
     description: "Output mode: pretty|json (default: pretty)"
   },
   { long: "json", type: "boolean", description: "Alias for --format json" },
-  { long: "live", type: "boolean", description: "Reactive WebSocket mode" },
+  {
+    long: "live",
+    type: "boolean",
+    description: "Live mode (polls for updates)"
+  },
   {
     long: "max-updates",
     type: "number",
@@ -36470,10 +36479,19 @@ function renderSubscriptionLog(out, statusOut, c, subscriptionName, result) {
     }
   }
 }
+var orgScopeFlag = flag.string({
+  description: "Org slug for an org-scoped subscription (org.renamed); use instead of --repo"
+});
 var createFlags8 = {
   on: flag.string({
     description: "Shape to subscribe to"
   }),
+  event: flag.string({
+    description: "Event to watch: commit (default), repo.renamed, or org.renamed"
+  }),
+  org: flag.string({
+    description: "Org slug for an org-scoped subscription (org.renamed)"
+  }),
   kind: flag.string({
     description: "Subscription kind (webhook; the default)"
   }),
@@ -36518,18 +36536,34 @@ var updateFlags4 = {
     description: "Clear the fallback webhook URL"
   }),
   "allow-trace-reentry": createFlags8["allow-trace-reentry"],
-  name: createFlags8.name
+  name: createFlags8.name,
+  org: orgScopeFlag
 };
 var logFlags = {
   limit: flag.number({ description: "Max deliveries to return" })
 };
 var listFlags5 = {
-  limit: flag.number({ description: "Max subscriptions to return" })
+  limit: flag.number({ description: "Max subscriptions to return" }),
+  org: orgScopeFlag
+};
+function resolveSubScope(ctx, flags) {
+  if (typeof flags.org === "string" && flags.org) {
+    return { orgName: flags.org };
+  }
+  const { org, repo } = resolveRepoContext(ctx);
+  return { orgName: org, repoName: repo };
+}
+function scopeLabel(scope) {
+  return scope.repoName ? `${scope.orgName}/${scope.repoName}` : scope.orgName;
+}
+var scopeFlags = {
+  org: orgScopeFlag
 };
 var viewFlags5 = {
   "show-secrets": flag.boolean({
     description: "Reveal the raw webhook URL(s) instead of the redacted origin (audit-logged)"
-  })
+  }),
+  org: orgScopeFlag
 };
 function buildSubscriptionPatchArgs(flags, usage, example) {
   const args = {};
@@ -36575,22 +36609,83 @@ function buildSubscriptionMutationArgs(flags, usage, example) {
   }
   return mutationArgs;
 }
+function parseEventType(raw, _usage, example) {
+  if (raw === undefined) {
+    return COMMIT_EVENT_TYPE;
+  }
+  if (SUBSCRIBABLE_EVENT_TYPES.includes(raw)) {
+    return raw;
+  }
+  usageError(`--event must be one of: ${SUBSCRIBABLE_EVENT_TYPES.join(", ")}`, example);
+}
+function rejectCommitFlags(flags, eventType) {
+  for (const f of ["on", "filter", "source"]) {
+    const v = flags[f];
+    if (typeof v === "string" && v.length > 0) {
+      usageError(`--${f} is not valid for ${eventType} subscriptions — rename events have no shape or filter`, `wh sub create rename-hook --event ${eventType} --webhook-url https://example.com/hook`);
+    }
+  }
+}
 var handleCreate7 = async (ctx, { flags, args }) => {
   const name = args[0] ?? flags.name;
-  const usage = "Usage: wh sub create <name> --repo org/repo [--kind webhook] [options]";
+  const usage = "Usage: wh sub create <name> (--repo org/repo | --org org) [--event commit|repo.renamed|org.renamed] [options]";
   const example = `wh sub create signal-hook --repo myorg/myrepo --on Signal --filter '{"shape":"Signal"}' --webhook-url https://example.com/hook`;
   if (!name) {
     usageError(usage, example);
   }
   rejectRemovedCronFlags(flags);
   const kind = parseKind(flags.kind, usage, example);
-  const { org, repo } = resolveRepoContext(ctx);
-  const createArgs = buildSubscriptionMutationArgs(flags, usage, example);
-  const sourceRepoRef = typeof flags.source === "string" ? flags.source : undefined;
-  const webhookUrl = createArgs.webhookUrl;
+  const eventType = parseEventType(flags.event, usage, example);
+  const webhookUrl = typeof flags["webhook-url"] === "string" ? flags["webhook-url"] : typeof flags.url === "string" ? flags.url : undefined;
   if (!webhookUrl) {
     usageError(usage, example);
   }
+  const fallbackWebhookUrl = typeof flags["fallback-webhook-url"] === "string" ? flags["fallback-webhook-url"] : undefined;
+  const allowTraceReentry = flags["allow-trace-reentry"] === true;
+  const renameExtras = {
+    ...fallbackWebhookUrl ? { fallbackWebhookUrl } : {},
+    ...allowTraceReentry ? { allowTraceReentry: true } : {}
+  };
+  if (eventType === "org.renamed") {
+    const orgName = typeof flags.org === "string" ? flags.org : undefined;
+    if (!orgName) {
+      usageError("org.renamed subscriptions are org-scoped — pass --org <org> (not --repo)", "wh sub create org-rename-hook --org myorg --event org.renamed --webhook-url https://example.com/hook");
+    }
+    rejectCommitFlags(flags, eventType);
+    const result2 = await ctx.client.subscription.create({
+      orgName,
+      name,
+      eventType,
+      kind,
+      webhookUrl,
+      ...renameExtras
+    });
+    writeOutput(ctx, result2, () => {
+      const c = ctx.colors;
+      ctx.status(`${c.green}Created subscription${c.reset} ${c.cyan}${name}${c.reset} on org ${c.cyan}${orgName}${c.reset} (org.renamed)`);
+    });
+    return;
+  }
+  const { org, repo } = resolveRepoContext(ctx);
+  if (eventType === "repo.renamed") {
+    rejectCommitFlags(flags, eventType);
+    const result2 = await ctx.client.subscription.create({
+      orgName: org,
+      repoName: repo,
+      name,
+      eventType,
+      kind,
+      webhookUrl,
+      ...renameExtras
+    });
+    writeOutput(ctx, result2, () => {
+      const c = ctx.colors;
+      ctx.status(`${c.green}Created subscription${c.reset} ${c.cyan}${name}${c.reset} on ${c.cyan}${org}/${repo}${c.reset} (repo.renamed)`);
+    });
+    return;
+  }
+  const createArgs = buildSubscriptionMutationArgs(flags, usage, example);
+  const sourceRepoRef = typeof flags.source === "string" ? flags.source : undefined;
   const result = await ctx.client.subscription.create({
     orgName: org,
     repoName: repo,
@@ -36610,24 +36705,24 @@ var handleCreate7 = async (ctx, { flags, args }) => {
 };
 var handleUpdate4 = async (ctx, { flags, args }) => {
   const name = args[0] ?? flags.name;
-  const usage = "Usage: wh sub update <name> --repo org/repo [options]";
+  const usage = "Usage: wh sub update <name> (--repo org/repo | --org org) [options]";
   const example = "wh sub update signal-hook --repo myorg/myrepo";
   if (!name) {
     usageError(usage, example);
   }
   rejectRemovedCronFlags(flags);
-  const { org, repo } = resolveRepoContext(ctx);
-  const existing = await ctx.client.subscription.get(org, repo, name);
+  const scope = resolveSubScope(ctx, flags);
+  const scopeArg = scope.repoName ? `--repo ${scopeLabel(scope)}` : `--org ${scope.orgName}`;
+  const existing = await ctx.client.subscription.get({ ...scope, name });
   if (existing.kind !== "webhook") {
-    throw new CliError(2 /* UserInput */, "USER_INPUT", `Subscription "${name}" has kind "${existing.kind}", which is no longer supported and cannot be updated`, undefined, `Delete it with: wh sub delete ${name} --repo ${org}/${repo}`);
+    throw new CliError(2 /* UserInput */, "USER_INPUT", `Subscription "${name}" has kind "${existing.kind}", which is no longer supported and cannot be updated`, undefined, `Delete it with: wh sub delete ${name} ${scopeArg}`);
   }
   if (flags.kind && flags.kind !== existing.kind) {
     usageError(usage, example);
   }
   const patchArgs = buildSubscriptionPatchArgs(flags, usage, example);
   const result = await ctx.client.subscription.update({
-    orgName: org,
-    repoName: repo,
+    ...scope,
     name,
     ...patchArgs.shapeName != null ? { shapeName: patchArgs.shapeName } : {},
     ...patchArgs.filterJson != null ? {
@@ -36641,17 +36736,17 @@ var handleUpdate4 = async (ctx, { flags, args }) => {
   });
   writeOutput(ctx, result, () => {
     const c = ctx.colors;
-    ctx.status(`${c.green}Updated subscription${c.reset} ${c.cyan}${name}${c.reset} on ${c.cyan}${org}/${repo}${c.reset}`);
+    ctx.status(`${c.green}Updated subscription${c.reset} ${c.cyan}${name}${c.reset} on ${c.cyan}${scopeLabel(scope)}${c.reset}`);
   });
 };
 var handleView8 = async (ctx, { args, flags }) => {
   const name = args[0];
   if (!name) {
-    usageError("Usage: wh sub view <name> [--show-secrets] [--repo org/repo]", "wh sub view signal-hook --repo myorg/myrepo");
+    usageError("Usage: wh sub view <name> [--show-secrets] (--repo org/repo | --org org)", "wh sub view signal-hook --repo myorg/myrepo");
   }
-  const { org, repo } = resolveRepoContext(ctx);
-  const sub = await ctx.client.subscription.get(org, repo, name);
-  const revealed = flags["show-secrets"] ? await ctx.client.subscription.reveal(org, repo, name) : undefined;
+  const scope = resolveSubScope(ctx, flags);
+  const sub = await ctx.client.subscription.get({ ...scope, name });
+  const revealed = flags["show-secrets"] ? await ctx.client.subscription.reveal({ ...scope, name }) : undefined;
   writeOutput(ctx, revealed ? { ...sub, ...revealed } : sub, () => {
     const c = ctx.colors;
     ctx.out(`${c.bold}${sub.name}${c.reset}`);
@@ -36678,16 +36773,17 @@ var handleView8 = async (ctx, { args, flags }) => {
   });
 };
 var handleList7 = async (ctx, { flags }) => {
-  const { org, repo } = resolveRepoContext(ctx);
-  const all = await ctx.client.subscription.list(org, repo);
+  const scope = resolveSubScope(ctx, flags);
+  const label = scopeLabel(scope);
+  const all = await ctx.client.subscription.list(scope);
   const items = all.slice(0, flags.limit ?? all.length);
   writePageOutput(ctx, items, { limit: flags.limit ?? all.length, nextCursor: null }, () => {
     const c = ctx.colors;
     if (!items.length) {
-      ctx.status(`${c.dim}No subscriptions in ${org}/${repo}${c.reset}`);
+      ctx.status(`${c.dim}No subscriptions in ${label}${c.reset}`);
       return;
     }
-    ctx.out(`${c.bold}Subscriptions:${c.reset} ${c.cyan}${org}/${repo}${c.reset}`);
+    ctx.out(`${c.bold}Subscriptions:${c.reset} ${c.cyan}${label}${c.reset}`);
     for (const sub of items) {
       const active = sub.active ? `${c.green}active` : `${c.yellow}paused`;
       let line = `  ${c.cyan}${sub.name}${c.reset} ${c.dim}[${sub.kind}]${c.reset} ${active}${c.reset}`;
@@ -36698,37 +36794,37 @@ var handleList7 = async (ctx, { flags }) => {
     }
   });
 };
-var handlePause = async (ctx, { args }) => {
+var handlePause = async (ctx, { args, flags }) => {
   const name = args[0];
   if (!name) {
-    usageError("Usage: wh sub pause <name> [--repo org/repo]", "wh sub pause signal-hook --repo myorg/myrepo");
+    usageError("Usage: wh sub pause <name> (--repo org/repo | --org org)", "wh sub pause signal-hook --repo myorg/myrepo");
   }
-  const { org, repo } = resolveRepoContext(ctx);
-  const result = await ctx.client.subscription.pause(org, repo, name);
+  const scope = resolveSubScope(ctx, flags);
+  const result = await ctx.client.subscription.pause({ ...scope, name });
   writeOutput(ctx, result, () => {
     const c = ctx.colors;
     ctx.status(`${c.yellow}Paused subscription${c.reset} ${c.cyan}${name}${c.reset}`);
   });
 };
-var handleResume = async (ctx, { args }) => {
+var handleResume = async (ctx, { args, flags }) => {
   const name = args[0];
   if (!name) {
-    usageError("Usage: wh sub resume <name> [--repo org/repo]", "wh sub resume signal-hook --repo myorg/myrepo");
+    usageError("Usage: wh sub resume <name> (--repo org/repo | --org org)", "wh sub resume signal-hook --repo myorg/myrepo");
   }
-  const { org, repo } = resolveRepoContext(ctx);
-  const result = await ctx.client.subscription.resume(org, repo, name);
+  const scope = resolveSubScope(ctx, flags);
+  const result = await ctx.client.subscription.resume({ ...scope, name });
   writeOutput(ctx, result, () => {
     const c = ctx.colors;
     ctx.status(`${c.green}Resumed subscription${c.reset} ${c.cyan}${name}${c.reset}`);
   });
 };
-var handleDelete3 = async (ctx, { args }) => {
+var handleDelete3 = async (ctx, { args, flags }) => {
   const name = args[0];
   if (!name) {
-    usageError("Usage: wh sub delete <name> [--repo org/repo]", "wh sub delete signal-hook --repo myorg/myrepo");
+    usageError("Usage: wh sub delete <name> (--repo org/repo | --org org)", "wh sub delete signal-hook --repo myorg/myrepo");
   }
-  const { org, repo } = resolveRepoContext(ctx);
-  const result = await ctx.client.subscription.remove(org, repo, name);
+  const scope = resolveSubScope(ctx, flags);
+  const result = await ctx.client.subscription.remove({ ...scope, name });
   writeOutput(ctx, result, () => {
     const c = ctx.colors;
     ctx.status(`${c.red}Deleted subscription${c.reset} ${c.cyan}${name}${c.reset}`);
@@ -36737,28 +36833,36 @@ var handleDelete3 = async (ctx, { args }) => {
 var bindFlags = {
   credentials: flag.string({
     description: "Name of the credential set to bind"
-  })
+  }),
+  org: orgScopeFlag
 };
 var handleBind = async (ctx, { flags, args }) => {
   const name = args[0];
   const setName = flags.credentials;
   if (!name || !setName) {
-    usageError("Usage: wh sub bind <name> --credentials <setName> [--repo org/repo]", "wh sub bind signal-hook --credentials webhook-keys --repo myorg/myrepo");
+    usageError("Usage: wh sub bind <name> --credentials <setName> (--repo org/repo | --org org)", "wh sub bind signal-hook --credentials webhook-keys --repo myorg/myrepo");
   }
-  const { org, repo } = resolveRepoContext(ctx);
-  const result = await ctx.client.subscription.bindCredentials(org, repo, name, setName);
+  const scope = resolveSubScope(ctx, flags);
+  const result = await ctx.client.subscription.bindCredentials({
+    ...scope,
+    subscriptionName: name,
+    credentialSetName: setName
+  });
   writeOutput(ctx, result, () => {
     const c = ctx.colors;
     ctx.status(`${c.green}Bound${c.reset} ${c.cyan}${setName}${c.reset} to ${c.cyan}${name}${c.reset}`);
   });
 };
-var handleUnbind = async (ctx, { args }) => {
+var handleUnbind = async (ctx, { args, flags }) => {
   const name = args[0];
   if (!name) {
-    usageError("Usage: wh sub unbind <name> [--repo org/repo]", "wh sub unbind signal-hook --repo myorg/myrepo");
+    usageError("Usage: wh sub unbind <name> (--repo org/repo | --org org)", "wh sub unbind signal-hook --repo myorg/myrepo");
   }
-  const { org, repo } = resolveRepoContext(ctx);
-  const result = await ctx.client.subscription.unbindCredentials(org, repo, name);
+  const scope = resolveSubScope(ctx, flags);
+  const result = await ctx.client.subscription.unbindCredentials({
+    ...scope,
+    subscriptionName: name
+  });
   writeOutput(ctx, result, () => {
     const c = ctx.colors;
     ctx.status(`${c.yellow}Unbound${c.reset} credentials from ${c.cyan}${name}${c.reset}`);
@@ -36843,6 +36947,12 @@ var SUB_DOMAIN = defineDomain({
         "# Subscribe to shape retracts only",
         `  $ wh sub create shape-retracts --repo myorg/myrepo --kind webhook --filter '{"all":[{"kind":"shape"},{"operation":"retract"}]}' --webhook-url https://hooks.example.com/shapes`,
         "",
+        "# Subscribe to repo renames (metadata event — no shape/filter)",
+        "  $ wh sub create repo-rename-hook --repo myorg/myrepo --event repo.renamed --webhook-url https://example.com/hook",
+        "",
+        "# Subscribe to org renames (org-scoped — use --org, not --repo)",
+        "  $ wh sub create org-rename-hook --org myorg --event org.renamed --webhook-url https://example.com/hook",
+        "",
         "# Webhook auth: create a credential set with WEBHOOK_* keys, then bind it to the subscription.",
         "# See `wh credential set --help` for supported key names and `wh sub bind --help`.",
         "  $ wh credential create webhook-keys --repo myorg/myrepo",
@@ -36859,7 +36969,9 @@ var SUB_DOMAIN = defineDomain({
       flags: updateFlags4,
       examples: [
         "# Update only the webhook URL",
-        "  $ wh sub update signal-hook --repo myorg/myrepo --webhook-url https://example.com/v2/hook"
+        "  $ wh sub update signal-hook --repo myorg/myrepo --webhook-url https://example.com/v2/hook",
+        "# Repoint an org-scoped (org.renamed) rename hook in place",
+        "  $ wh sub update org-rename-hook --org myorg --webhook-url https://example.com/v2/hook"
       ],
       handler: handleUpdate4
     },
@@ -36871,7 +36983,9 @@ var SUB_DOMAIN = defineDomain({
       flags: viewFlags5,
       examples: [
         "wh sub view signal-hook --repo myorg/myrepo",
-        "wh sub view signal-hook --show-secrets --repo myorg/myrepo"
+        "wh sub view signal-hook --show-secrets --repo myorg/myrepo",
+        "# Org-scoped (org.renamed) subscription",
+        "  $ wh sub view org-rename-hook --org myorg"
       ],
       handler: handleView8
     },
@@ -36881,7 +36995,12 @@ var SUB_DOMAIN = defineDomain({
       summary: "List all subscriptions",
       args: "",
       flags: listFlags5,
-      examples: ["wh sub list --repo myorg/myrepo", "wh sub list --limit 10"],
+      examples: [
+        "wh sub list --repo myorg/myrepo",
+        "wh sub list --limit 10",
+        "# Org-scoped (org.renamed) subscriptions",
+        "  $ wh sub list --org myorg"
+      ],
       handler: handleList7
     },
     log: {
@@ -36921,7 +37040,12 @@ var SUB_DOMAIN = defineDomain({
       prime: true,
       summary: "Pause a subscription",
       args: "<name>",
-      examples: ["wh sub pause signal-hook --repo myorg/myrepo"],
+      flags: scopeFlags,
+      examples: [
+        "wh sub pause signal-hook --repo myorg/myrepo",
+        "# Org-scoped (org.renamed) subscription",
+        "  $ wh sub pause org-rename-hook --org myorg"
+      ],
       handler: handlePause
     },
     resume: {
@@ -36929,7 +37053,11 @@ var SUB_DOMAIN = defineDomain({
       prime: true,
       summary: "Resume a paused subscription",
       args: "<name>",
-      examples: ["wh sub resume signal-hook --repo myorg/myrepo"],
+      flags: scopeFlags,
+      examples: [
+        "wh sub resume signal-hook --repo myorg/myrepo",
+        "  $ wh sub resume org-rename-hook --org myorg"
+      ],
       handler: handleResume
     },
     bind: {
@@ -36940,7 +37068,9 @@ var SUB_DOMAIN = defineDomain({
       flags: bindFlags,
       examples: [
         "# Bind credentials to inject auth headers on webhook delivery",
-        "  $ wh sub bind signal-hook --credentials webhook-keys --repo myorg/myrepo"
+        "  $ wh sub bind signal-hook --credentials webhook-keys --repo myorg/myrepo",
+        "# Org-scoped (org.renamed) subscription + org-scoped credential set",
+        "  $ wh sub bind org-rename-hook --credentials org-webhook-keys --org myorg"
       ],
       handler: handleBind
     },
@@ -36949,7 +37079,11 @@ var SUB_DOMAIN = defineDomain({
       prime: true,
       summary: "Remove credential binding from a subscription",
       args: "<name>",
-      examples: ["wh sub unbind signal-hook --repo myorg/myrepo"],
+      flags: scopeFlags,
+      examples: [
+        "wh sub unbind signal-hook --repo myorg/myrepo",
+        "  $ wh sub unbind org-rename-hook --org myorg"
+      ],
       handler: handleUnbind
     },
     delete: {
@@ -36957,7 +37091,11 @@ var SUB_DOMAIN = defineDomain({
       prime: true,
       summary: "Delete a subscription",
       args: "<name>",
-      examples: ["wh sub delete signal-hook --repo myorg/myrepo"],
+      flags: scopeFlags,
+      examples: [
+        "wh sub delete signal-hook --repo myorg/myrepo",
+        "  $ wh sub delete org-rename-hook --org myorg"
+      ],
       handler: handleDelete3
     }
   }
@@ -37713,7 +37851,7 @@ var GLOBAL_FLAGS2 = [
   {
     long: "live",
     type: "boolean",
-    description: "Reactive WebSocket mode"
+    description: "Live mode (polls for updates)"
   },
   {
     long: "max-updates",
@@ -38736,7 +38874,7 @@ function resolveLogLevel(flags, env) {
 // package.json
 var package_default3 = {
   name: "@warmhub/cli",
-  version: "0.57.0",
+  version: "0.59.0",
   private: false,
   type: "module",
   description: "The wh CLI for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",
@@ -39377,4 +39515,4 @@ if (!updateCheckSuppressedByArgv && shouldRunUpdateCheck(updateEligibility)) {
 var interceptedExitCode = await maybeHandleComponentShellBoundary(dispatchArgv);
 process.exitCode = interceptedExitCode === undefined ? await runCli(dispatchArgv, { version: package_default3.version }) : interceptedExitCode;
 
-//# debugId=C665F4BA94FD1E0F64756E2164756E21
+//# debugId=133777AA8F34C0BB64756E2164756E21

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@warmhub/cli",
-  "version": "0.57.0",
+  "version": "0.59.0",
   "private": false,
   "type": "module",
   "description": "The wh CLI for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",