@warmhub/cli 0.63.0 → 0.64.0

package/dist/wh.js

@@ -18731,7 +18731,7 @@ function defaultMatchesCliArgType(type, value) {
 }
 function compileCliArgPattern(pattern) {
   try {
-    return new RegExp(pattern);
+    return new RegExp(`^(?:${pattern})$`);
   } catch {
     return;
   }
@@ -27353,7 +27353,7 @@ function findSystemComponent(componentId) {
 // ../../packages/sdk-ts/package.json
 var package_default = {
   name: "@warmhub/sdk-ts",
-  version: "0.62.1",
+  version: "0.63.0",
   private: false,
   type: "module",
   description: "The TypeScript SDK for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",
@@ -27403,8 +27403,7 @@ var package_default = {
     }
   },
   scripts: {
-    prebuild: "tsc --noEmit",
-    build: "tsup && bun run scripts/inject-doc-links.ts",
+    build: "tsc --noEmit && tsup && bun run scripts/inject-doc-links.ts",
     "generate:api-contract": "bun run scripts/generate-api-contract.ts",
     "generate:backend-types": "bun run scripts/generate-backend-types.ts",
     "audit:api-contract": "bun run scripts/audit-api-contract.ts",
@@ -28352,6 +28351,15 @@ class WarmHubClient {
       }
     }
   };
+  homepage = {
+    featuredLists: async () => {
+      try {
+        return await this.trpc.homepage.featuredLists.query();
+      } catch (error) {
+        throw toWarmHubError(error);
+      }
+    }
+  };
   access = {
     resolve: async (input) => {
       try {
@@ -29194,24 +29202,26 @@ class WarmHubClient {
         throw toWarmHubError(error);
       }
     },
-    claimDelivery: async (orgName, repoName, runId, holderId) => {
+    claimDelivery: async (orgName, repoName, target, holderId) => {
+      const deliveryTarget = typeof target === "string" ? { runId: target } : target;
       try {
         return await this.trpc.action.claimDelivery.mutate({
           orgName,
           repoName,
-          runId,
+          ...deliveryTarget,
           holderId
         });
       } catch (error) {
         throw toWarmHubError(error);
       }
     },
-    completeDelivery: async (orgName, repoName, runId, holderId) => {
+    completeDelivery: async (orgName, repoName, target, holderId) => {
+      const deliveryTarget = typeof target === "string" ? { runId: target } : target;
       try {
         return await this.trpc.action.completeDelivery.mutate({
           orgName,
           repoName,
-          runId,
+          ...deliveryTarget,
           holderId
         });
       } catch (error) {
@@ -30572,11 +30582,25 @@ function safeParseJson(input, label, options) {
 function parseJsonObject(input, label, options) {
   const parsed = safeParseJson(input, label, options);
   if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
-    const got = Array.isArray(parsed) ? "array" : parsed === null ? "null" : typeof parsed;
+    const got = describeJsonType(parsed);
     throw new CliError(2 /* UserInput */, "USER_INPUT", `${label} must be a JSON object, got ${got}`, undefined, `Pass an object, e.g. '{"key":"value"}'.`);
   }
   return parsed;
 }
+function parseJsonArray(input, label, options) {
+  const parsed = safeParseJson(input, label, options);
+  if (!Array.isArray(parsed)) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", `${label} must be a JSON array, got ${describeJsonType(parsed)}`, undefined, `Pass an array of operations, e.g. '[{"operation":"add","kind":"thing","name":"Shape/item","data":{}}]'.`);
+  }
+  return parsed;
+}
+function describeJsonType(value) {
+  if (Array.isArray(value))
+    return "array";
+  if (value === null)
+    return "null";
+  return typeof value;
+}
 function parsePositiveIntFlag(value, label, example) {
   if (value !== undefined && (!Number.isInteger(value) || value < 1)) {
     usageError(`${label} must be a positive integer`, example);
@@ -32352,7 +32376,7 @@ class DomainRegistry {
     }
     const verbs = {};
     for (const [verbName, v] of Object.entries(def.verbs)) {
-      verbs[verbName] = {
+      const verbSpec = {
         status: v.status ?? "live",
         prime: v.prime ?? false,
         summary: v.summary,
@@ -32363,6 +32387,13 @@ class DomainRegistry {
         verbAliases: v.verbAliases,
         passthroughFlags: v.passthroughFlags
       };
+      if (v.rejectedFlags) {
+        Object.defineProperty(verbSpec, "rejectedFlags", {
+          value: v.rejectedFlags,
+          enumerable: false
+        });
+      }
+      verbs[verbName] = verbSpec;
     }
     const subdomains = def.subdomains ? Object.fromEntries(Object.entries(def.subdomains).map(([k, sd]) => [
       k,
@@ -32662,6 +32693,54 @@ function extractShapeName(name) {
   const slash = name.indexOf("/");
   return slash > 0 ? name.slice(0, slash) : "";
 }
+var DANGEROUS_TERMINAL_FORMAT_CODEPOINTS = new Set([
+  8203,
+  8204,
+  8205,
+  8288,
+  8294,
+  8295,
+  8296,
+  8297,
+  8234,
+  8235,
+  8236,
+  8237,
+  8238,
+  8232,
+  8233
+]);
+function isTerminalControlCodePoint(codePoint) {
+  return codePoint <= 31 || codePoint === 127 || codePoint >= 128 && codePoint <= 159;
+}
+function escapeTerminalCodePoint(codePoint) {
+  return codePoint <= 65535 ? `\\u${codePoint.toString(16).padStart(4, "0")}` : `\\u{${codePoint.toString(16)}}`;
+}
+function terminalTextNeedsEscape(value) {
+  for (const char of value) {
+    const codePoint = char.codePointAt(0);
+    if (codePoint === undefined)
+      continue;
+    if (isTerminalControlCodePoint(codePoint))
+      return true;
+    if (DANGEROUS_TERMINAL_FORMAT_CODEPOINTS.has(codePoint))
+      return true;
+  }
+  return false;
+}
+function escapeTerminalTextForDisplay(value) {
+  if (!terminalTextNeedsEscape(value))
+    return value;
+  const jsonEscaped = JSON.stringify(value).slice(1, -1);
+  let output = "";
+  for (const char of jsonEscaped) {
+    const codePoint = char.codePointAt(0);
+    if (codePoint === undefined)
+      continue;
+    output += isTerminalControlCodePoint(codePoint) || DANGEROUS_TERMINAL_FORMAT_CODEPOINTS.has(codePoint) ? escapeTerminalCodePoint(codePoint) : char;
+  }
+  return output;
+}
 var escapeInlineTerminalText = escapeFieldNameForDisplay;
 function renderWarningLine(out, c, chars, op) {
   const warnings = op.warnings;
@@ -34269,10 +34348,10 @@ var searchFlags = {
   cursor: flag.string({ description: "Opaque pagination cursor (text mode)" }),
   all: flag.boolean({ description: "Fetch all pages (text mode)" }),
   component: flag.string({
-    description: "Filter to things owned by this component (Org/Name ref)"
+    description: "Filter to things owned by this component (Org/Name ref, text mode)"
   }),
   "exclude-components": flag.boolean({
-    description: "Exclude component-owned things from results"
+    description: "Exclude component-owned things from results (text mode)"
   })
 };
 var handleSearch = async (ctx, { flags, args }) => {
@@ -34306,10 +34385,14 @@ var handleSearch = async (ctx, { flags, args }) => {
   const pageLimit = all ? Math.min(limit ?? AUTO_PAGE_LIMIT, MAX_PAGE_LIMIT) : boundedTextLimit;
   const resolveCollections = mode !== "hybrid" ? flags["resolve-collections"] : undefined;
   const supportsComponentFilters = !mode || mode === "text";
-  const componentRef = supportsComponentFilters ? flags.component : undefined;
   const hasShape = !!flags.shape;
-  const strictExclude = supportsComponentFilters ? !!flags["exclude-components"] : false;
-  validateComponentFilters(componentRef, strictExclude, 'wh thing search "policy" --component acme/veritas');
+  const hasComponentFilter = flags.component !== undefined;
+  const strictExclude = !!flags["exclude-components"];
+  validateComponentFilters(flags.component, strictExclude, 'wh thing search "policy" --component acme/veritas');
+  if (!supportsComponentFilters && (hasComponentFilter || strictExclude)) {
+    usageError("--component/--exclude-components are only supported with text search mode.", 'wh thing search "policy" --mode text --component acme/veritas');
+  }
+  const componentRef = supportsComponentFilters ? flags.component : undefined;
   const excludeComponents = supportsComponentFilters && strictExclude ? true : undefined;
   const excludeInfraShapes = supportsComponentFilters && !strictExclude && !hasShape ? true : undefined;
   const rawResult = all ? await fetchAllSearchPages(ctx, org, repo, queryText, {
@@ -36060,7 +36143,7 @@ var HEADER_DELIMITER = `\r
 `;
 var CONTENT_LENGTH_RE = /^Content-Length:\s*(\d+)$/im;
 var MAX_MESSAGE_BYTES = 64 * 1024 * 1024;
-function parseFramedMessage(buffer, maxContentLength = MAX_MESSAGE_BYTES) {
+function parseFramedMessage(buffer, maxContentLength = MAX_MESSAGE_BYTES, bufferByteLength) {
   const headerEnd = buffer.indexOf(HEADER_DELIMITER);
   if (headerEnd === -1)
     return null;
@@ -36073,11 +36156,36 @@ function parseFramedMessage(buffer, maxContentLength = MAX_MESSAGE_BYTES) {
     throw new RangeError(`Content-Length ${contentLength} exceeds the maximum allowed ${maxContentLength} bytes`);
   }
   const bodyStart = headerEnd + HEADER_DELIMITER.length;
-  const remaining = Buffer.from(buffer.slice(bodyStart), "utf8");
-  if (remaining.length < contentLength)
+  const bodyStartBytes = Buffer.byteLength(buffer.slice(0, bodyStart), "utf8");
+  const totalBytes = bufferByteLength ?? Buffer.byteLength(buffer, "utf8");
+  if (totalBytes - bodyStartBytes < contentLength)
+    return null;
+  const bodyEnd = findUtf8ByteBoundary(buffer, bodyStart, contentLength);
+  if (bodyEnd === null)
     return null;
-  const body = remaining.subarray(0, contentLength).toString("utf8");
-  return { message: JSON.parse(body), consumed: bodyStart + body.length };
+  const body = buffer.slice(bodyStart, bodyEnd);
+  return { message: JSON.parse(body), consumed: bodyEnd };
+}
+function findUtf8ByteBoundary(value, start, targetBytes) {
+  let bytes = 0;
+  let index = start;
+  while (index < value.length && bytes < targetBytes) {
+    const codePoint = value.codePointAt(index);
+    if (codePoint === undefined)
+      return null;
+    bytes += utf8CodePointByteLength(codePoint);
+    index += codePoint > 65535 ? 2 : 1;
+  }
+  return bytes === targetBytes ? index : null;
+}
+function utf8CodePointByteLength(codePoint) {
+  if (codePoint <= 127)
+    return 1;
+  if (codePoint <= 2047)
+    return 2;
+  if (codePoint <= 65535)
+    return 3;
+  return 4;
 }
 function parseNdjsonMessage(buffer) {
   const newlineIdx = buffer.indexOf(`
@@ -36125,7 +36233,7 @@ function createMessageReader(input, onMessage, onError = () => {}, maxMessageByt
       }
       let result;
       try {
-        result = mode === "ndjson" ? parseNdjsonMessage(buffer) : parseFramedMessage(buffer, maxMessageBytes);
+        result = mode === "ndjson" ? parseNdjsonMessage(buffer) : parseFramedMessage(buffer, maxMessageBytes, bufferBytes);
       } catch (err) {
         if (err instanceof RangeError) {
           onError(err);
@@ -36187,27 +36295,47 @@ function createMessageReader(input, onMessage, onError = () => {}, maxMessageByt
 var MCP_PROTOCOL_VERSION2 = "2025-11-25";
 function createChannelServer(opts) {
   let reader = null;
+  let removeInputCloseListeners = () => {};
   let resolveReady;
   let rejectReady;
   let readySettled = false;
+  let resolveClosed;
+  let closedSettled = false;
   const onReady = new Promise((resolve, reject) => {
     resolveReady = resolve;
     rejectReady = reject;
   });
+  const onClosed = new Promise((resolve) => {
+    resolveClosed = resolve;
+  });
   function settleReady() {
     if (readySettled)
       return;
     readySettled = true;
     resolveReady();
   }
-  function failReady(error) {
-    if (readySettled)
+  function settleClosed() {
+    if (closedSettled)
       return;
-    readySettled = true;
+    closedSettled = true;
+    removeInputCloseListeners();
     reader?.close();
-    rejectReady(error);
+    resolveClosed();
+  }
+  function closeServer() {
+    settleClosed();
+    settleReady();
+  }
+  function failReady(error) {
+    if (!readySettled) {
+      readySettled = true;
+      rejectReady(error);
+    }
+    settleClosed();
   }
   function send(msg) {
+    if (closedSettled)
+      return;
     opts.output.write(ndjsonMessage(msg));
   }
   function handleMessage(msg) {
@@ -36246,6 +36374,13 @@ function createChannelServer(opts) {
   }
   return {
     start() {
+      const handleInputClose = () => closeServer();
+      opts.input.on("end", handleInputClose);
+      opts.input.on("close", handleInputClose);
+      removeInputCloseListeners = () => {
+        opts.input.removeListener("end", handleInputClose);
+        opts.input.removeListener("close", handleInputClose);
+      };
       reader = createMessageReader(opts.input, handleMessage, failReady);
     },
     notify(content, meta) {
@@ -36256,14 +36391,15 @@ function createChannelServer(opts) {
       });
     },
     onReady,
+    onClosed,
     close() {
-      reader?.close();
-      settleReady();
+      closeServer();
     }
   };
 }
 
 // ../../packages/warmhub-cli/src/domains/channel.ts
+var RECONNECT_DELAY_MS = 2000;
 function formatChannelEvent(org, repo, event) {
   const things = event.affectedThings.join(", ");
   const shapes = event.affectedShapes.join(",");
@@ -36280,6 +36416,22 @@ function formatChannelEvent(org, repo, event) {
   };
 }
 async function subscribeLoop(client, org, repo, signal, server) {
+  const pauseBeforeReconnect = () => new Promise((resolve) => {
+    if (signal.aborted) {
+      resolve();
+      return;
+    }
+    let timeout;
+    const onAbort = () => {
+      clearTimeout(timeout);
+      resolve();
+    };
+    timeout = setTimeout(() => {
+      signal.removeEventListener("abort", onAbort);
+      resolve();
+    }, RECONNECT_DELAY_MS);
+    signal.addEventListener("abort", onAbort, { once: true });
+  });
   while (!signal.aborted) {
     try {
       const handle = await client.live.subscribe(org, repo, { signal }, (event) => {
@@ -36287,6 +36439,8 @@ async function subscribeLoop(client, org, repo, signal, server) {
         server.notify(content, meta);
       });
       await handle.closed;
+      if (!signal.aborted)
+        await pauseBeforeReconnect();
     } catch (err) {
       if (signal.aborted)
         break;
@@ -36294,7 +36448,7 @@ async function subscribeLoop(client, org, repo, signal, server) {
       if (msg.includes("401") || msg.includes("403") || msg.includes("404") || msg.includes("AUTH") || msg.includes("not found") || msg.includes("Session expired")) {
         throw new Error(`${org}/${repo}: ${msg}`);
       }
-      await new Promise((r) => setTimeout(r, 2000));
+      await pauseBeforeReconnect();
     }
   }
 }
@@ -36313,7 +36467,6 @@ var handleChannel = async (ctx) => {
     input: process.stdin,
     output: process.stdout
   });
-  server.start();
   const signal = ctx.signal ?? new AbortController().signal;
   const aborted = new Promise((resolve) => {
     if (signal.aborted)
@@ -36323,15 +36476,19 @@ var handleChannel = async (ctx) => {
   });
   let ready;
   try {
-    ready = await Promise.race([server.onReady.then(() => {
-      return;
-    }), aborted]);
+    const startup = Promise.race([
+      server.onClosed.then(() => "closed"),
+      server.onReady.then(() => "ready"),
+      aborted
+    ]);
+    server.start();
+    ready = await startup;
   } catch (err) {
     server.close();
     const msg = err instanceof Error ? err.message : String(err);
     throw new CliError(4 /* Backend */, "BACKEND", `channel startup failed: ${msg}`);
   }
-  if (ready === "aborted") {
+  if (ready !== "ready") {
     server.close();
     return;
   }
@@ -36342,7 +36499,11 @@ var handleChannel = async (ctx) => {
     signal.addEventListener("abort", () => controller.abort(), { once: true });
   let fatal;
   try {
-    await Promise.all(repos.map(({ org, repo }) => subscribeLoop(ctx.client, org, repo, controller.signal, server)));
+    const subscriptions = Promise.all(repos.map(({ org, repo }) => subscribeLoop(ctx.client, org, repo, controller.signal, server)));
+    const closed = server.onClosed.then(() => {
+      controller.abort();
+    });
+    await Promise.race([subscriptions, closed]);
   } catch (err) {
     controller.abort();
     fatal = err;
@@ -36373,7 +36534,7 @@ var CHANNEL_DOMAIN = defineDomain({
 // ../../packages/warmhub-cli/src/domains/commit-submit-flags.ts
 var createFlags3 = {
   ops: flag.string({
-    description: "Operations JSON (inline). For ops from a file, use -f/--file <path> instead; --ops accepts inline JSON only."
+    description: "Operations JSON array (inline). For ops from a file, use -f/--file <path> instead; --ops accepts an inline JSON array only."
   }),
   file: flag.string({
     short: "f",
@@ -37461,7 +37622,7 @@ var handleSubmit = async (ctx, { flags, args }) => {
       }
     ];
   } else if (opsJson) {
-    operations = safeParseJson(opsJson, "--ops", {
+    operations = parseJsonArray(opsJson, "--ops", {
       fileFlagSibling: "-f/--file"
     });
   } else if (opsFile) {
@@ -37474,7 +37635,7 @@ var handleSubmit = async (ctx, { flags, args }) => {
       } catch (e) {
         throw new CliError(2 /* UserInput */, "USER_INPUT", `Cannot read file '${opsFile}': ${e instanceof Error ? e.message : String(e)}`, undefined, "Check that the file path is correct and the file exists.");
       }
-      operations = safeParseJson(file, "--file contents");
+      operations = parseJsonArray(file, "--file contents");
     }
   } else if (addNames.length > 0) {
     operations = buildAddOperations({
@@ -38112,7 +38273,7 @@ function coerceArg(arg, value) {
       if (arg.pattern) {
         let re;
         try {
-          re = new RegExp(arg.pattern);
+          re = new RegExp(`^(?:${arg.pattern})$`);
         } catch {
           throw new CliError(2 /* UserInput */, "USER_INPUT", `invalid regex pattern for --${arg.name}: /${arg.pattern}/`);
         }
@@ -40666,8 +40827,9 @@ function renderActionNotifications(out, statusOut, c, notifications) {
     const subscriptionName = notification.subscriptionName ? `${c.cyan}${notification.subscriptionName}${c.reset}` : `${c.dim}(unknown subscription)${c.reset}`;
     out(`  ${status} ${c.dim}${time}${c.reset} ${subscriptionName} attempt #${notification.attempt} ${c.dim}${notification.channel}${c.reset}`);
     if (notification.errorMessage) {
-      const code = notification.errorCode ? `${notification.errorCode}: ` : "";
-      out(`    ${c.red}${code}${notification.errorMessage}${c.reset}`);
+      const code = notification.errorCode ? `${escapeTerminalTextForDisplay(notification.errorCode)}: ` : "";
+      const message = escapeTerminalTextForDisplay(notification.errorMessage);
+      out(`    ${c.red}${code}${message}${c.reset}`);
     }
   }
 }
@@ -42244,7 +42406,7 @@ var handleDescribe = async (ctx, { args, flags }) => {
       const data = version?.data;
       const shapeDesc = data?.description;
       if (typeof shapeDesc === "string" && shapeDesc) {
-        ctx.out(`    ${c.dim}${shapeDesc}${c.reset}`);
+        ctx.out(`    ${c.dim}${escapeTerminalTextForDisplay(shapeDesc)}${c.reset}`);
       }
       const fields = data?.fields;
       if (fields) {
@@ -42256,9 +42418,10 @@ var handleDescribe = async (ctx, { args, flags }) => {
           return Math.max(m, ts.length);
         }, 0);
         for (const [fieldName, fieldType] of entries) {
+          const safeFieldName = escapeFieldNameForDisplay(fieldName);
           const typeStr = displayFieldType(fieldType);
           const fieldDesc = fieldDescriptionFromSpec(fieldType);
-          const line = fieldDesc ? `      ${c.cyan}${fieldName.padEnd(maxName)}${c.reset}  ${c.dim}${typeStr.padEnd(maxType)}${c.reset}  ${fieldDesc}` : `      ${c.cyan}${fieldName.padEnd(maxName)}${c.reset}  ${c.dim}${typeStr}${c.reset}`;
+          const line = fieldDesc ? `      ${c.cyan}${safeFieldName.padEnd(maxName)}${c.reset}  ${c.dim}${typeStr.padEnd(maxType)}${c.reset}  ${escapeTerminalTextForDisplay(fieldDesc)}` : `      ${c.cyan}${safeFieldName.padEnd(maxName)}${c.reset}  ${c.dim}${typeStr}${c.reset}`;
           ctx.out(line);
         }
       }
@@ -42647,7 +42810,7 @@ var handleList6 = async (ctx, { flags }) => {
       const shapeData = shape.version?.data;
       const shapeDescription = shapeData?.description;
       if (typeof shapeDescription === "string" && shapeDescription) {
-        ctx.out(`    ${c.dim}${shapeDescription}${c.reset}`);
+        ctx.out(`    ${c.dim}${escapeTerminalTextForDisplay(shapeDescription)}${c.reset}`);
       }
       const fields = shapeData?.fields;
       if (fields) {
@@ -42662,7 +42825,7 @@ var handleList6 = async (ctx, { flags }) => {
           const typeStr = displayFieldType(fieldType);
           const padded = fieldName.padEnd(maxLen);
           const fieldDesc = fieldDescriptionFromSpec(fieldType);
-          const descSuffix = fieldDesc ? `  ${typeStr.padEnd(maxTypeLen)}  ${fieldDesc}` : `  ${typeStr}`;
+          const descSuffix = fieldDesc ? `  ${typeStr.padEnd(maxTypeLen)}  ${escapeTerminalTextForDisplay(fieldDesc)}` : `  ${typeStr}`;
           ctx.out(`    ${c.cyan}${padded}${c.reset}  ${c.dim}${descSuffix}${c.reset}`);
         }
       }
@@ -42694,7 +42857,7 @@ var handleView7 = async (ctx, { flags, args }) => {
     const shapeData = shapeVersion?.data;
     const shapeDescription = shapeData?.description;
     if (typeof shapeDescription === "string" && shapeDescription) {
-      ctx.out(`  ${c.dim}${shapeDescription}${c.reset}`);
+      ctx.out(`  ${c.dim}${escapeTerminalTextForDisplay(shapeDescription)}${c.reset}`);
     }
     const componentRef = result.componentRef;
     if (componentRef) {
@@ -42706,7 +42869,7 @@ var handleView7 = async (ctx, { flags, args }) => {
       for (const [fieldName, fieldType] of Object.entries(fields)) {
         const typeStr = displayFieldType(fieldType);
         const fieldDesc = fieldDescriptionFromSpec(fieldType);
-        const descSuffix = fieldDesc ? `  ${c.dim}${fieldDesc}${c.reset}` : "";
+        const descSuffix = fieldDesc ? `  ${c.dim}${escapeTerminalTextForDisplay(fieldDesc)}${c.reset}` : "";
         const safeFieldName = escapeFieldNameForDisplay(fieldName);
         ctx.out(`    ${c.cyan}${safeFieldName}${c.reset}: ${c.dim}${typeStr}${c.reset}${descSuffix}`);
       }
@@ -42807,8 +42970,10 @@ var handleShapeRename = async (ctx, { args }) => {
   }
   const { org, repo } = parseOrgRepo(getRepoRef(ctx), ctx.config);
   const c = ctx.colors;
-  await ctx.client.shape.rename(org, repo, oldName, newName);
-  ctx.out(`${c.green}Renamed shape${c.reset} ${c.magenta}${oldName}${c.reset} → ${c.magenta}${newName}${c.reset}`);
+  const result = await ctx.client.shape.rename(org, repo, oldName, newName);
+  writeOutput(ctx, { ...result, oldName, newName }, () => {
+    ctx.out(`${c.green}Renamed shape${c.reset} ${c.magenta}${oldName}${c.reset} → ${c.magenta}${newName}${c.reset}`);
+  });
 };
 
 // ../../packages/warmhub-cli/src/domains/shape.ts
@@ -43265,6 +43430,11 @@ function renderResponseSnippet(out, c, snippet, baseIndent) {
     out(`${baseIndent}  ${c.dim}${line}${c.reset}`);
   }
 }
+function renderErrorMessageLine(out, c, code, message, baseIndent) {
+  const safeCode = code ? `${escapeTerminalTextForDisplay(code)}: ` : "";
+  const safeMessage = escapeTerminalTextForDisplay(message);
+  out(`${baseIndent}${c.red}${safeCode}${safeMessage}${c.reset}`);
+}
 function statusColor(c, status) {
   switch (status) {
     case "completed":
@@ -43305,11 +43475,10 @@ function renderSubscriptionLog(out, statusOut, c, subscriptionName, result) {
     const sourceLabel = (item.matchedOperationIndexes?.length ?? 0) > 0 ? `${c.cyan}write${c.reset}` : `${c.magenta}cron tick${c.reset}`;
     const matched = (item.matchedOperationIndexes ?? []).join(",") || "-";
     const attemptSuffix = item.attemptCount != null && item.maxAttempts != null ? ` ${c.dim}${item.attemptCount}/${item.maxAttempts}${c.reset}` : "";
-    const runSuffix = item.runId ? ` ${c.dim}run ${item.runId}${c.reset}` : "";
-    out(`  ${status}${attemptSuffix} ${c.dim}${time}${c.reset}${runSuffix} ${sourceLabel} ops[${matched}]`);
+    const idSuffix = item.runId ? ` ${c.dim}run ${item.runId}${c.reset}` : item.deliveryId ? ` ${c.dim}delivery ${item.deliveryId}${c.reset}` : "";
+    out(`  ${status}${attemptSuffix} ${c.dim}${time}${c.reset}${idSuffix} ${sourceLabel} ops[${matched}]`);
     if ((displayStatus === "failed_terminal" || displayStatus === "dead_letter") && item.lastErrorMessage) {
-      const code = item.lastErrorCode ? `${item.lastErrorCode}: ` : "";
-      out(`    ${c.red}${code}${item.lastErrorMessage}${c.reset}`);
+      renderErrorMessageLine(out, c, item.lastErrorCode, item.lastErrorMessage, "    ");
     }
     if ((displayStatus === "failed_terminal" || displayStatus === "dead_letter") && item.lastResponseSnippet) {
       renderResponseSnippet(out, c, item.lastResponseSnippet, "    ");
@@ -43420,7 +43589,12 @@ var handleLog = async (ctx, { flags, args }) => {
   if (!name) {
     usageError("Usage: wh sub log <name> [--repo org/repo]", "wh sub log my-sub");
   }
-  const { org, repo } = parseOrgRepo(getRepoRef(ctx), ctx.config);
+  const scope = resolveSubScope(ctx, flags);
+  if (!scope.repoName) {
+    usageError("Usage: wh sub log <name> [--repo org/repo]", "wh sub log my-sub --repo myorg/myrepo");
+  }
+  const org = scope.orgName;
+  const repo = scope.repoName;
   if (ctx.liveMode) {
     await runLive({
       apiUrl: ctx.config.apiUrl,
@@ -43464,8 +43638,7 @@ var handleAttempts = async (ctx, { args }) => {
       const http = attempt.httpStatus ? ` ${c.dim}HTTP ${attempt.httpStatus}${c.reset}` : "";
       ctx.out(`  #${attempt.attempt} ${sc}${attempt.status}${c.reset}${dur}${http}`);
       if (attempt.errorMessage) {
-        const code = attempt.errorCode ? `${attempt.errorCode}: ` : "";
-        ctx.out(`    ${c.red}${code}${attempt.errorMessage}${c.reset}`);
+        renderErrorMessageLine(ctx.out, c, attempt.errorCode, attempt.errorMessage, "    ");
       }
       if (attempt.status === "failed" && attempt.responseSnippet) {
         renderResponseSnippet(ctx.out, c, attempt.responseSnippet, "    ");
@@ -43558,6 +43731,9 @@ var SUB_DOMAIN = defineDomain({
       summary: "Tail subscription delivery feed with failed response snippets",
       args: "<name>",
       flags: logFlags,
+      rejectedFlags: {
+        org: "Use repo-scoped delivery logs: wh sub log my-sub --repo myorg/myrepo"
+      },
       examples: [
         "# Show recent deliveries",
         "  $ wh sub log signal-hook --repo org/repo",
@@ -43566,7 +43742,10 @@ var SUB_DOMAIN = defineDomain({
         "  $ wh sub log daily-digest --repo org/repo",
         "",
         "# Follow deliveries in live mode",
-        "  $ wh sub log signal-hook --repo org/repo --live"
+        "  $ wh sub log signal-hook --repo org/repo --live",
+        "",
+        "# Delivery logs currently require a repo-scoped subscription",
+        "  $ wh sub log signal-hook --repo org/repo"
       ],
       handler: handleLog
     },
@@ -44523,9 +44702,9 @@ function extractFlagsForVerb(flags, verbSpec) {
     }
     return flags;
   }
-  return extractFlags(flags, verbSpec.flags);
+  return extractFlags(flags, verbSpec.flags, verbSpec.rejectedFlags);
 }
-function extractFlags(flags, specs) {
+function extractFlags(flags, specs, rejectedFlags = {}) {
   const normalized = { ...flags };
   const result = {};
   const specLongs = specs.map((s) => s.long);
@@ -44560,11 +44739,19 @@ function extractFlags(flags, specs) {
   }
   for (const key of Object.keys(normalized)) {
     if (key.length === 1) {
+      const rejectedHint2 = rejectedFlags[key];
+      if (rejectedHint2) {
+        throw new CliError(2 /* UserInput */, "USER_INPUT", `Unknown flag: -${key}`, undefined, rejectedHint2);
+      }
       if (!allowedShorts.has(key) && !isGlobalFlag(key)) {
         throw new CliError(2 /* UserInput */, "USER_INPUT", `Unknown flag: -${key}`);
       }
       continue;
     }
+    const rejectedHint = rejectedFlags[key];
+    if (rejectedHint) {
+      throw new CliError(2 /* UserInput */, "USER_INPUT", `Unknown flag: --${key}`, undefined, rejectedHint);
+    }
     if (!allowedLongs.has(key) && !isGlobalFlag(key)) {
       const hint = findClosest(key, [...allowedLongs]);
       throw new CliError(2 /* UserInput */, "USER_INPUT", `Unknown flag: --${key}`, undefined, hint ? `Did you mean '--${hint}'?` : undefined);
@@ -45574,7 +45761,7 @@ function resolveLogLevel(flags, env) {
 // package.json
 var package_default3 = {
   name: "@warmhub/cli",
-  version: "0.63.0",
+  version: "0.64.0",
   private: false,
   type: "module",
   description: "The wh CLI for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",
@@ -45615,6 +45802,7 @@ var package_default3 = {
   },
   scripts: {
     build: "bun run scripts/build.ts",
+    prepack: "bun run build",
     "check:boundary": "node ../../scripts/lint/boundary-imports.mjs bin src scripts",
     "audit:bundle": "bun run scripts/audit-bundle.ts",
     "audit:pack": "bun run scripts/audit-pack.ts",
@@ -46228,4 +46416,4 @@ if (!updateCheckSuppressedByArgv && shouldRunUpdateCheck(updateEligibility)) {
 var interceptedExitCode = await maybeHandleComponentShellBoundary(dispatchArgv);
 process.exitCode = interceptedExitCode === undefined ? await runCli(dispatchArgv, { version: package_default3.version }) : interceptedExitCode;
 
-//# debugId=AA99DB1239BF58B064756E2164756E21
+//# debugId=7FF3388CDD4F972C64756E2164756E21

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@warmhub/cli",
-  "version": "0.63.0",
+  "version": "0.64.0",
   "private": false,
   "type": "module",
   "description": "The wh CLI for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",
@@ -41,6 +41,7 @@
   },
   "scripts": {
     "build": "bun run scripts/build.ts",
+    "prepack": "bun run build",
     "check:boundary": "node ../../scripts/lint/boundary-imports.mjs bin src scripts",
     "audit:bundle": "bun run scripts/audit-bundle.ts",
     "audit:pack": "bun run scripts/audit-pack.ts",