@warmhub/cli 0.68.0 → 0.70.0

package/dist/wh.js

@@ -18618,6 +18618,26 @@ function stableJsonEquals(left, right) {
   return stableJson(left) === stableJson(right);
 }
 
+// ../../packages/rules/src/subscribable-events.ts
+var COMMIT_EVENT_TYPE = "commit";
+var REPO_RENAMED_EVENT_TYPE = "repo.renamed";
+var ORG_RENAMED_EVENT_TYPE = "org.renamed";
+var THING_RENAMED_EVENT_TYPE = "thing.renamed";
+var SHAPE_RENAMED_EVENT_TYPE = "shape.renamed";
+var SUBSCRIBABLE_EVENT_TYPES = [
+  COMMIT_EVENT_TYPE,
+  REPO_RENAMED_EVENT_TYPE,
+  ORG_RENAMED_EVENT_TYPE,
+  THING_RENAMED_EVENT_TYPE,
+  SHAPE_RENAMED_EVENT_TYPE
+];
+var REPO_SCOPED_EVENT_TYPES = [
+  COMMIT_EVENT_TYPE,
+  REPO_RENAMED_EVENT_TYPE,
+  THING_RENAMED_EVENT_TYPE,
+  SHAPE_RENAMED_EVENT_TYPE
+];
+
 // ../../packages/rules/src/component-install.ts
 function manifestShapeData(shape) {
   const data = { fields: shape.fields };
@@ -19168,6 +19188,24 @@ function validateCredential(cred, i, errors) {
   }
   validateProvisioning(cred, path, errors);
 }
+function validateEventTrigger(trigger, path, errors) {
+  const event = trigger.event;
+  if (event !== undefined) {
+    if (typeof event !== "string" || !REPO_SCOPED_EVENT_TYPES.includes(event)) {
+      errors.push(`${path}.event must be one of: ${REPO_SCOPED_EVENT_TYPES.join(", ")}`);
+      return;
+    }
+  }
+  if (event === undefined || event === COMMIT_EVENT_TYPE) {
+    requireString(trigger, "shape", path, errors);
+    return;
+  }
+  for (const field of ["shape", "filter"]) {
+    if (trigger[field] !== undefined) {
+      errors.push(`${path}.${field} is not valid for a "${event}" trigger — metadata events have no shape or filter`);
+    }
+  }
+}
 function validateSubscription(sub, i, errors) {
   const path = `manifest.subscriptions[${i}]`;
   if (!isObject2(sub)) {
@@ -19188,7 +19226,7 @@ function validateSubscription(sub, i, errors) {
     errors.push(`${path}.trigger must be an object`);
   } else {
     if (sub.trigger.kind === "event") {
-      requireString(sub.trigger, "shape", `${path}.trigger`, errors);
+      validateEventTrigger(sub.trigger, `${path}.trigger`, errors);
     } else if (sub.trigger.kind === "cron") {
       errors.push(`${path}.trigger.kind "cron" is no longer supported; cron subscriptions were removed from the public surface — use an "event" trigger`);
     } else {
@@ -19407,7 +19445,7 @@ function validateManifestSemantics(manifest) {
   ]);
   const knownSeedShapes = new Set([...shapeNames, "ComponentConfig"]);
   for (const sub of manifest.subscriptions) {
-    if (sub.trigger.kind === "event" && !knownSubscriptionTriggerShapes.has(sub.trigger.shape)) {
+    if (sub.trigger.kind === "event" && sub.trigger.shape !== undefined && !knownSubscriptionTriggerShapes.has(sub.trigger.shape)) {
       findings.push({
         level: "error",
         code: "MISSING_SUBSCRIPTION_TRIGGER_SHAPE_REF",
@@ -19592,336 +19630,6 @@ var PUBLIC_ORG_PERMISSIONS = new Set([
   "org:read",
   "components:read"
 ]);
-// ../../packages/rules/src/platform-status-constants.ts
-var PLATFORM_STATUS_CATALOG_SHAPE = "PlatformStatusCatalog";
-var PLATFORM_STATUS_CATALOG_NAME = "main";
-var PLATFORM_STATUS_CATALOG_WREF = `${PLATFORM_STATUS_CATALOG_SHAPE}/${PLATFORM_STATUS_CATALOG_NAME}`;
-var PLATFORM_STATUS_STATUSES = [
-  {
-    key: "available",
-    label: "Available",
-    description: "Works as expected."
-  },
-  {
-    key: "degraded",
-    label: "Degraded",
-    description: "Works with known caveats or partial reliability."
-  },
-  {
-    key: "unavailable",
-    label: "Unavailable",
-    description: "Exists in code but is broken or blocked."
-  },
-  {
-    key: "not_yet_built",
-    label: "Not Yet Built",
-    description: "This feature-surface combination does not exist yet."
-  },
-  {
-    key: "unknown",
-    label: "Unknown",
-    description: "Has not been assessed yet."
-  }
-];
-var PLATFORM_STATUS_OBSERVATION_SOURCES = [
-  "probe",
-  "code_inventory",
-  "issue_mining",
-  "manual"
-];
-var PLATFORM_STATUS_OBSERVATION_KINDS = [
-  "surface_present",
-  "surface_missing",
-  "probe_pass",
-  "probe_fail",
-  "issue_linked",
-  "manual_assessment"
-];
-var PLATFORM_STATUS_PROBE_ARTIFACT_KINDS = [
-  "evidence",
-  "note",
-  "step",
-  "workflow_run",
-  "issue"
-];
-// ../../packages/rules/src/platform-status-field-specs.ts
-var issueFields = {
-  number: {
-    type: "number",
-    integer: true,
-    description: "GitHub issue number."
-  },
-  title: {
-    type: "string",
-    description: "GitHub issue title."
-  },
-  oneLineSummary: {
-    type: "string",
-    description: "One-line summary of the issue impact."
-  }
-};
-var dimensionFields = {
-  slug: {
-    type: "string",
-    description: "Stable slug used in thing names and programmatic queries."
-  },
-  label: {
-    type: "string",
-    description: "Human-readable label."
-  },
-  description: {
-    type: "string",
-    description: "Human-readable description."
-  },
-  "url?": {
-    type: "string",
-    description: "Optional canonical URL for this environment."
-  }
-};
-var PLATFORM_STATUS_CATALOG_FIELDS = {
-  schemaVersion: {
-    type: "number",
-    integer: true,
-    description: "Schema version for the platform status catalog."
-  },
-  title: {
-    type: "string",
-    description: "Display title for the status board."
-  },
-  orgName: {
-    type: "string",
-    description: "Owning organization for the status repo."
-  },
-  repoName: {
-    type: "string",
-    description: "Repository name for the status repo."
-  },
-  sourceIssueNumber: {
-    type: "number",
-    integer: true,
-    description: "Source GitHub issue number for this board."
-  },
-  sourceIssueUrl: {
-    type: "string",
-    description: "Source GitHub issue URL for this board."
-  },
-  features: [dimensionFields],
-  surfaces: [dimensionFields],
-  environments: [dimensionFields],
-  statuses: [
-    {
-      key: {
-        type: "string",
-        enum: PLATFORM_STATUS_STATUSES.map((status) => status.key),
-        description: "Stable status key."
-      },
-      label: {
-        type: "string",
-        description: "Human-readable label for the status."
-      },
-      description: {
-        type: "string",
-        description: "Human-readable definition of the status."
-      }
-    }
-  ],
-  updatedAt: {
-    type: "number",
-    integer: true,
-    description: "Timestamp when the catalog was last updated."
-  },
-  "notes?": {
-    type: "string",
-    description: "Optional operator notes for the board as a whole."
-  }
-};
-var PLATFORM_STATUS_CELL_FIELDS = {
-  feature: {
-    type: "string",
-    description: "Feature slug from the catalog."
-  },
-  surface: {
-    type: "string",
-    description: "Surface slug from the catalog."
-  },
-  environment: {
-    type: "string",
-    description: "Environment slug from the catalog."
-  },
-  status: {
-    type: "string",
-    enum: PLATFORM_STATUS_STATUSES.map((status) => status.key),
-    description: "Current readiness state for this matrix cell."
-  },
-  since: {
-    type: "number",
-    integer: true,
-    description: "Timestamp when this status last changed."
-  },
-  lastVerified: {
-    type: "number",
-    integer: true,
-    description: "Timestamp when this cell was last verified."
-  },
-  verifiedBy: {
-    type: "string",
-    enum: ["probe", "code_inventory", "issue_mining", "manual"],
-    description: "Verification source for the latest assessment."
-  },
-  knownIssues: [issueFields],
-  caveats: [
-    {
-      type: "string",
-      description: "Human caveat describing a limitation or workaround."
-    }
-  ],
-  "notes?": {
-    type: "string",
-    description: "Optional free-form notes for this cell."
-  },
-  "issueMiningBaseline?": {
-    status: {
-      type: "string",
-      enum: PLATFORM_STATUS_STATUSES.map((status) => status.key),
-      description: "Cell status before issue mining temporarily degraded it."
-    },
-    since: {
-      type: "number",
-      integer: true,
-      description: "Original status-change timestamp before issue mining."
-    },
-    lastVerified: {
-      type: "number",
-      integer: true,
-      description: "Original verification timestamp before issue mining."
-    },
-    verifiedBy: {
-      type: "string",
-      enum: ["probe", "code_inventory", "issue_mining", "manual"],
-      description: "Original verifier before issue mining."
-    },
-    knownIssues: [issueFields],
-    caveats: [
-      {
-        type: "string",
-        description: "Original caveats before issue mining."
-      }
-    ],
-    "notes?": {
-      type: "string",
-      description: "Original notes before issue mining."
-    }
-  }
-};
-var PLATFORM_STATUS_OBSERVATION_FIELDS = {
-  cell: {
-    type: "wref",
-    description: "Target PlatformStatusCell/<feature>/<surface>/<environment> wref."
-  },
-  feature: {
-    type: "string",
-    description: "Feature slug from the catalog."
-  },
-  surface: {
-    type: "string",
-    description: "Surface slug from the catalog."
-  },
-  environment: {
-    type: "string",
-    description: "Environment slug from the catalog."
-  },
-  source: {
-    type: "string",
-    enum: [...PLATFORM_STATUS_OBSERVATION_SOURCES],
-    description: "Producer of this observation."
-  },
-  kind: {
-    type: "string",
-    enum: [...PLATFORM_STATUS_OBSERVATION_KINDS],
-    description: "Observation kind within the status pipeline."
-  },
-  observedAt: {
-    type: "number",
-    integer: true,
-    description: "Timestamp when this observation was recorded."
-  },
-  summary: {
-    type: "string",
-    description: "One-line summary of the observation."
-  },
-  evidence: [
-    {
-      type: "string",
-      description: "Supporting evidence path, command, or URL."
-    }
-  ],
-  "statusHint?": {
-    type: "string",
-    enum: PLATFORM_STATUS_STATUSES.map((status) => status.key),
-    description: "Optional status implication suggested by this observation alone."
-  },
-  "notes?": {
-    type: "string",
-    description: "Optional free-form notes for this observation."
-  }
-};
-var PLATFORM_STATUS_PROBE_ARTIFACT_FIELDS = {
-  run: {
-    type: "wref",
-    description: "Target PlatformStatusProbeRun wref."
-  },
-  cell: {
-    type: "wref",
-    description: "Target PlatformStatusCell/<feature>/<surface>/<environment> wref."
-  },
-  runId: {
-    type: "string",
-    description: "Shared batch run identifier for this probe execution."
-  },
-  probeId: {
-    type: "string",
-    description: "Stable probe definition identifier."
-  },
-  feature: {
-    type: "string",
-    description: "Feature slug from the catalog."
-  },
-  surface: {
-    type: "string",
-    description: "Surface slug from the catalog."
-  },
-  environment: {
-    type: "string",
-    description: "Environment slug from the catalog."
-  },
-  observedAt: {
-    type: "number",
-    integer: true,
-    description: "Timestamp when this artifact was captured."
-  },
-  index: {
-    type: "number",
-    integer: true,
-    description: "Stable ordering index within the probe run."
-  },
-  kind: {
-    type: "string",
-    enum: [...PLATFORM_STATUS_PROBE_ARTIFACT_KINDS],
-    description: "Artifact category captured during the run."
-  },
-  label: {
-    type: "string",
-    description: "Human-readable artifact label."
-  },
-  value: {
-    type: "string",
-    description: "Artifact payload or summary text."
-  },
-  "url?": {
-    type: "string",
-    description: "Optional URL associated with this artifact."
-  }
-};
 // ../../packages/rules/src/tokens.ts
 var COMMIT_TOKEN_SYNTAX_REMOVED_MESSAGE = "$N/#N commit-token syntax is no longer supported. Use explicit names and explicit wrefs. For assertions about newly created things, create the thing with a deterministic name and set about to that wref in the same commit.";
 var ANY_TOKEN_RE = /[$#]\d+/;
@@ -20040,12 +19748,17 @@ function builtinShapeGuard(op, operationIndex) {
       operationIndex,
       message: `Shape "${op.newName}" is a retired collection shape and cannot be written manually`
     });
-  } else if (op.operation !== "retract" && op.kind === "shape" && name && isBuiltinShape(name)) {
-    errors.push({
-      code: "RESERVED_NAME",
-      operationIndex,
-      message: `Shape "${name}" is a built-in shape and cannot be ${op.operation === "add" ? "created" : "revised"} manually`
-    });
+  } else {
+    const isShapeRename = op.operation === "rename" && (op.kind === "shape" || op.name !== undefined && !splitLocalPath(op.name));
+    const builtinShapeName = name && isBuiltinShape(name) ? name : isShapeRename && op.newName && isBuiltinShape(op.newName) ? op.newName : undefined;
+    if (builtinShapeName && (isShapeRename || op.operation !== "retract" && op.kind === "shape")) {
+      const action = op.operation === "add" ? "created" : op.operation === "rename" ? "renamed" : "revised";
+      errors.push({
+        code: "RESERVED_NAME",
+        operationIndex,
+        message: `Shape "${builtinShapeName}" is a built-in shape and cannot be ${action} manually`
+      });
+    }
   }
   if (name) {
     const local = splitLocalPath(name);
@@ -26946,7 +26659,7 @@ function validatePersistedStringFieldLimits(value, typeDef, errors, path) {
   }
   if (Array.isArray(value)) {
     const elementType = arrayElementType(normalized);
-    if (normalized !== undefined && elementType === undefined)
+    if (elementType === undefined && !isDeclaredArrayType(normalized))
       return;
     for (let i = 0;i < value.length; i++) {
       validatePersistedStringFieldLimits(value[i], elementType, errors, `${path ?? "<value>"}[${i}]`);
@@ -26979,6 +26692,11 @@ function arrayElementType(typeDef) {
     return typeDef.items;
   return;
 }
+function isDeclaredArrayType(typeDef) {
+  if (typeDef === "array" || Array.isArray(typeDef))
+    return true;
+  return isTypeSpecObject(typeDef) && typeDef.type === "array";
+}
 function nestedObjectFields(typeDef) {
   if (!isPlainObject(typeDef) || isTypeSpecObject(typeDef))
     return;
@@ -27356,15 +27074,6 @@ function validateShapeDefinition(data, options = {}) {
   }
   return { valid: true };
 }
-// ../../packages/rules/src/subscribable-events.ts
-var COMMIT_EVENT_TYPE = "commit";
-var REPO_RENAMED_EVENT_TYPE = "repo.renamed";
-var ORG_RENAMED_EVENT_TYPE = "org.renamed";
-var SUBSCRIBABLE_EVENT_TYPES = [
-  COMMIT_EVENT_TYPE,
-  REPO_RENAMED_EVENT_TYPE,
-  ORG_RENAMED_EVENT_TYPE
-];
 // ../../packages/rules/src/system-components/system.ts
 var SYSTEM_COMPONENT_ID = "com.warmhub.system";
 var COMPONENT_INSTALL_FIELDS = {
@@ -27427,7 +27136,7 @@ function findSystemComponent(componentId) {
 // ../../packages/sdk-ts/package.json
 var package_default = {
   name: "@warmhub/sdk-ts",
-  version: "0.67.0",
+  version: "0.69.0",
   private: false,
   type: "module",
   description: "The TypeScript SDK for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",
@@ -32968,7 +32677,7 @@ function collectionFields(shapeName, data) {
   return result;
 }
 function effectiveKind(kind, shapeName) {
-  if ((kind === "thing" || !kind) && shapeName && isBuiltinCollectionShape(shapeName)) {
+  if ((kind === "thing" || kind === "collection" || !kind) && shapeName && isBuiltinCollectionShape(shapeName)) {
     return shapeName.toLowerCase();
   }
   return kind;
@@ -33211,7 +32920,8 @@ async function fetchAllAssertionHeadPages(ctx, org, repo, opts) {
       match: opts.match,
       includeRetracted: opts.includeRetracted,
       limit: opts.limit,
-      cursor
+      cursor,
+      ...opts.where ? { where: opts.where } : {}
     });
     items.push(...page.items ?? []);
     if (!page.nextCursor)
@@ -33232,7 +32942,8 @@ async function fetchAllAssertionAboutPages(ctx, org, repo, wref, opts) {
       includeRetracted: opts.includeRetracted,
       resolveCollections: opts.resolveCollections,
       limit: opts.limit,
-      cursor
+      cursor,
+      ...opts.where ? { where: opts.where } : {}
     });
     target = page.target;
     assertions.push(...page.assertions ?? []);
@@ -33249,27 +32960,27 @@ async function fetchAllAssertionAboutPages(ctx, org, repo, wref, opts) {
 
 // ../../packages/warmhub-cli/src/domains/assertion/mutators.ts
 var createFlags = {
-  name: flag.string({ description: "Assertion name" }),
+  name: flag.string({ description: "assertion name (required)" }),
   shape: flag.string({ description: "Shape for assertion (required)" }),
   data: flag.string({ description: "Data payload (JSON)" }),
   about: flag.string({ description: "Target wref" }),
   message: flag.string({ short: "m", description: "Commit message" }),
   committer: flag.string({
-    description: "Committer thing wref (e.g. Agent/bot-1)"
+    description: "Committer wref (shape or shaped thing; e.g. Agent/bot-1)"
   })
 };
 var reviseFlags = {
   data: flag.string({ description: "Data payload (JSON)" }),
   message: flag.string({ short: "m", description: "Commit message" }),
   committer: flag.string({
-    description: "Committer thing wref (e.g. Agent/bot-1)"
+    description: "Committer wref (shape or shaped thing; e.g. Agent/bot-1)"
   })
 };
 var retractFlags = {
   reason: flag.string({ description: "Reason for retraction (<=500 chars)" }),
   message: flag.string({ short: "m", description: "Commit message" }),
   committer: flag.string({
-    description: "Committer thing wref (e.g. Agent/bot-1)"
+    description: "Committer wref (shape or shaped thing; e.g. Agent/bot-1)"
   })
 };
 var handleRevise = async (ctx, { flags, args }) => {
@@ -33330,11 +33041,11 @@ var handleCreate = async (ctx, { flags, args }) => {
   const message = flags.message;
   const data = flags.data !== undefined ? parseJsonObject(flags.data, "--data") : undefined;
   const c = ctx.colors;
-  if (!shape || !aboutRaw) {
-    usageError("Usage: wh assertion create --shape <shape> --about <wref|type:members> [--name <name>] --data <json>", `wh assertion create --shape belief --about player --data '{"confidence":0.8}'`);
+  if (!shape || !aboutRaw || !name) {
+    usageError("Usage: wh assertion create --shape <shape> --name <name> --about <wref> [--data <json>]", `wh assertion create --shape belief --name player-belief --about player --data '{"confidence":0.8}'`);
   }
   const about = parseAbout(aboutRaw);
-  const localName = name ? `${shape}/${name}` : `${shape}/${shape}-$1`;
+  const localName = `${shape}/${name}`;
   const operations = [
     {
       operation: "add",
@@ -33356,9 +33067,14 @@ var handleCreate = async (ctx, { flags, args }) => {
 
 // ../../packages/warmhub-cli/src/domains/thing/shared.ts
 var DURABLE_ID_PATTERN_RE = /^[0-9a-zA-HJ-NP-Tv-z]{60}(@(v\d+|HEAD|ALL))?$/i;
+var WREF_SEGMENT = String.raw`[^/?#@:\s$]+`;
+var CANONICAL_WREF_PATTERN_RE = new RegExp(String.raw`^wh:${WREF_SEGMENT}/${WREF_SEGMENT}/${WREF_SEGMENT}(?:/${WREF_SEGMENT})*(?:@(?:v[1-9]\d*|HEAD|ALL))?$`, "i");
 function looksLikeDurableId(wref) {
   return DURABLE_ID_PATTERN_RE.test(wref);
 }
+function looksLikeCanonicalWref(wref) {
+  return CANONICAL_WREF_PATTERN_RE.test(wref);
+}
 var DEFAULT_PAGE_LIMIT = 50;
 var DEFAULT_SEARCH_LIMIT = 25;
 var MAX_PAGE_LIMIT = 500;
@@ -33510,7 +33226,7 @@ var createFlags2 = {
   }),
   message: flag.string({ short: "m", description: "Commit message" }),
   committer: flag.string({
-    description: "Committer thing wref (e.g. Agent/bot-1)"
+    description: "Committer wref (shape or shaped thing; e.g. Agent/bot-1)"
   })
 };
 var handleCreate2 = async (ctx, { flags, args }) => {
@@ -33566,10 +33282,10 @@ function renderHead(out, c, chars, result, org, repo, shape, kind) {
     if (item.kind === "assertion" && item.aboutWref) {
       out(`    ${c.dim}about:${c.reset} ${pinnedWref(c, item.aboutWref)}`);
     }
-    const fields = shapeName && item.kind === "thing" && item.data ? collectionFields(shapeName, item.data) : null;
+    const fields = shapeName && (item.kind === "thing" || item.kind === "collection") && item.data ? collectionFields(shapeName, item.data) : null;
     if (fields) {
       const allWrefs = fields.flatMap((f) => f.wrefs);
-      out(`    ${allWrefs.map((w) => pinnedWref(c, w)).join(`${c.dim},${c.reset} `)}`);
+      out(`    ${allWrefs.map((w) => pinnedWref(c, escapeTerminalTextForDisplay(w))).join(`${c.dim},${c.reset} `)}`);
     } else if (item.data && typeof item.data === "object") {
       const preview = JSON.stringify(item.data);
       const truncated = preview.length > 80 ? `${preview.slice(0, 77)}...` : preview;
@@ -33619,11 +33335,11 @@ function renderThing(out, c, result) {
     for (const field of fields) {
       if (field.wrefs.length === 1) {
         const pad = " ".repeat(Math.max(1, 9 - field.name.length));
-        out(`  ${c.dim}${field.name}:${c.reset}${pad}${pinnedWref(c, field.wrefs[0])}`);
+        out(`  ${c.dim}${field.name}:${c.reset}${pad}${pinnedWref(c, escapeTerminalTextForDisplay(field.wrefs[0]))}`);
       } else {
         out(`  ${c.dim}${field.name}:${c.reset}`);
         for (const w of field.wrefs) {
-          out(`    ${pinnedWref(c, w)}`);
+          out(`    ${pinnedWref(c, escapeTerminalTextForDisplay(w))}`);
         }
       }
     }
@@ -33648,7 +33364,7 @@ function renderCollectionSummary(out, c, collection) {
     return;
   out(`  ${c.dim}preview:${c.reset}`);
   for (const wref of preview) {
-    out(`    ${pinnedWref(c, wref)}`);
+    out(`    ${pinnedWref(c, escapeTerminalTextForDisplay(wref))}`);
   }
 }
 function renderDataBlock(out, data, indent) {
@@ -33717,7 +33433,7 @@ function renderThingGraph(out, c, result) {
 function renderHistory(out, c, result) {
   if (result.thing && typeof result.thing === "object") {
     const wref = result.thing.wref ?? result.thing.name ?? "(unknown)";
-    out(`${c.bold}History: ${pinnedWref(c, wref)}${c.reset}  ${kindLabel(c, result.thing.kind ?? "thing")}`);
+    out(`${c.bold}History: ${pinnedWref(c, wref)}${c.reset}  ${kindLabel(c, effectiveKind(result.thing.kind ?? "thing", result.thing.shapeName))}`);
   }
   const firstMeta = result.versions?.[0]?.metadata;
   if (firstMeta?.durableId) {
@@ -33821,7 +33537,7 @@ var handleThingGraph = async (ctx, { flags, args }) => {
   if (depth !== undefined && (depth < 1 || depth > 5)) {
     usageError("Usage: wh thing graph <wref> --depth <1-5>", "wh thing graph Game/base --depth 2");
   }
-  const { org, repo } = parseOrgRepo(getRepoRef(ctx), ctx.config);
+  const { org, repo } = looksLikeDurableId(wref) ? parseOrgRepoOptional(getRepoRef(ctx), ctx.config) : parseOrgRepo(getRepoRef(ctx), ctx.config);
   const result = await ctx.client.thing.graph(org, repo, wref, {
     depth,
     version: flags.version
@@ -34008,6 +33724,7 @@ function validateComponentFilters(componentRef, excludeComponents, ...examples)
 // ../../packages/warmhub-cli/src/domains/thing/where.ts
 var MAX_WHERE_IN_VALUES = 1000;
 var WHERE_USAGE_HINT = 'Example: --where state=NC --where "employees>=100" --where "state?"';
+var FIELD_USAGE_HINT = "Example: --field data.round=1";
 function requireWhereFieldPath(raw, fieldPath) {
   const normalized = fieldPath.trim();
   if (!normalized) {
@@ -34050,6 +33767,27 @@ function parseWhereFlag(raw) {
   }
   throw new CliError(2 /* UserInput */, "USER_INPUT", `Malformed --where predicate: "${raw}". Supported operators: =, !=, >, >=, <, <=, ~, in:[...], ?`, undefined, WHERE_USAGE_HINT);
 }
+function parseFieldFlag(raw) {
+  if (!raw.trim()) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", `Malformed --field predicate: "${raw}". --field requires data.path=value.`, undefined, FIELD_USAGE_HINT);
+  }
+  const parsed = parseWhereFlag(raw);
+  if (parsed.op !== "eq") {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", `Malformed --field predicate: "${raw}". --field supports exact equality only.`, undefined, FIELD_USAGE_HINT);
+  }
+  if (!parsed.fieldPath.startsWith("data.")) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", `Malformed --field predicate: "${raw}". Field paths must start with "data.".`, undefined, FIELD_USAGE_HINT);
+  }
+  const fieldPath = parsed.fieldPath.slice("data.".length);
+  if (!fieldPath) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", `Malformed --field predicate: "${raw}". Field path cannot be empty after "data.".`, undefined, FIELD_USAGE_HINT);
+  }
+  return {
+    fieldPath,
+    op: "eq",
+    rhs: parsed.rhs
+  };
+}
 function coerceValue(s) {
   if (s.startsWith('"') && s.endsWith('"') || s.startsWith("'") && s.endsWith("'")) {
     return s.slice(1, -1);
@@ -34398,10 +34136,10 @@ function renderQueryResults(out, c, result) {
     const kl = kindLabel(c, effectiveKind(item.kind ?? "thing", shapeName));
     const retractedTag = item.active === false ? `  ${c.red}[RETRACTED]${c.reset}` : "";
     out(`  ${wref}  ${kl}${retractedTag}`);
-    const fields = shapeName && (item.kind === "thing" || !item.kind) && item.data ? collectionFields(shapeName, item.data) : null;
+    const fields = shapeName && (item.kind === "thing" || item.kind === "collection" || !item.kind) && item.data ? collectionFields(shapeName, item.data) : null;
     if (fields) {
       const allWrefs = fields.flatMap((f) => f.wrefs);
-      out(`    ${allWrefs.map((w) => pinnedWref(c, w)).join(`${c.dim},${c.reset} `)}`);
+      out(`    ${allWrefs.map((w) => pinnedWref(c, escapeTerminalTextForDisplay(w))).join(`${c.dim},${c.reset} `)}`);
     } else if (item.data && typeof item.data === "object") {
       const preview = JSON.stringify(item.data);
       const truncated = preview.length > 80 ? `${preview.slice(0, 77)}...` : preview;
@@ -34414,10 +34152,10 @@ function renderQueryResults(out, c, result) {
 // ../../packages/warmhub-cli/src/domains/thing/refs.ts
 var refsFlags = {
   inbound: flag.boolean({
-    description: "Show inbound refs (what references this thing) [default]"
+    description: "Show inbound refs (what references this target) [default]"
   }),
   outbound: flag.boolean({
-    description: "Show outbound refs (what this thing references)"
+    description: "Show outbound refs (what this target references)"
   }),
   field: flag.string({ description: "Filter by field path (inbound only)" }),
   limit: flag.number({
@@ -34532,7 +34270,7 @@ var handleResolve = async (ctx, { args }) => {
   if (!wref) {
     usageError("Usage: wh thing resolve <wref>", "wh thing resolve player");
   }
-  const { org, repo } = looksLikeDurableId(wref) ? parseOrgRepoOptional(getRepoRef(ctx), ctx.config) : parseOrgRepo(getRepoRef(ctx), ctx.config);
+  const { org, repo } = looksLikeDurableId(wref) || looksLikeCanonicalWref(wref) ? parseOrgRepoOptional(getRepoRef(ctx), ctx.config) : parseOrgRepo(getRepoRef(ctx), ctx.config);
   const c = ctx.colors;
   const result = await ctx.client.thing.resolve(org, repo, wref);
   writeOutput(ctx, result, () => {
@@ -34552,7 +34290,7 @@ var retractFlags2 = {
   reason: flag.string({ description: "Reason for retraction (<=500 chars)" }),
   message: flag.string({ short: "m", description: "Commit message" }),
   committer: flag.string({
-    description: "Committer thing wref (e.g. Agent/bot-1)"
+    description: "Committer wref (shape or shaped thing; e.g. Agent/bot-1)"
   }),
   "lease-id": flag.string({
     description: "Read-lease token from `wh thing lease` (auto-released on success)"
@@ -34592,7 +34330,7 @@ var reviseFlags2 = {
   data: flag.string({ description: "Data payload (JSON)" }),
   message: flag.string({ short: "m", description: "Commit message" }),
   committer: flag.string({
-    description: "Committer thing wref (e.g. Agent/bot-1)"
+    description: "Committer wref (shape or shaped thing; e.g. Agent/bot-1)"
   }),
   "expected-version": flag.number({
     description: "Only apply if the target is still at this version (optimistic concurrency)"
@@ -34805,7 +34543,7 @@ var viewFlags = {
     description: "Resolve embedded graph to this depth (1-5)"
   }),
   "include-retracted": flag.boolean({
-    description: "View a retracted thing"
+    description: "View a retracted shape or shaped thing"
   }),
   file: flag.string({
     description: "Read additional wrefs from <path>, one per line. Use `--file=-` for stdin (the `=` form is required) or pass bare `-` as a positional. Lines starting with '#' and blank lines are ignored; lines are not split on any other character."
@@ -34869,7 +34607,7 @@ async function collectWrefs(opts) {
 async function runSingleView(ctx, wref, flags) {
   const version = flags.version;
   const depth = flags.depth;
-  const { org, repo } = looksLikeDurableId(wref) && depth === undefined ? parseOrgRepoOptional(getRepoRef(ctx), ctx.config) : parseOrgRepo(getRepoRef(ctx), ctx.config);
+  const { org, repo } = looksLikeDurableId(wref) ? parseOrgRepoOptional(getRepoRef(ctx), ctx.config) : parseOrgRepo(getRepoRef(ctx), ctx.config);
   const includeRetracted = flags["include-retracted"] || version !== undefined;
   const dataMode = validateDataMode(flags["data-mode"]);
   if (depth !== undefined && (depth < 1 || depth > 5)) {
@@ -35032,7 +34770,7 @@ var THING_DOMAIN = defineDomain({
     },
     resolve: {
       prime: true,
-      summary: "Resolve wref to thing",
+      summary: "Resolve a wref to its canonical thing identity",
       args: "<wref>",
       handler: handleResolve
     },
@@ -35056,7 +34794,7 @@ var THING_DOMAIN = defineDomain({
     },
     retract: {
       prime: true,
-      summary: "Withdraw a thing, assertion, shape, or collection. Irreversible for the given identity.",
+      summary: "Withdraw a thing. Irreversible for the given identity.",
       args: "<wref>",
       flags: retractFlags2,
       examples: [
@@ -35094,7 +34832,7 @@ var THING_DOMAIN = defineDomain({
     },
     refs: {
       prime: true,
-      summary: "Show refs (backlinks or cross-references) for a thing",
+      summary: "Show refs (backlinks or cross-references) for a target",
       args: "<wref>",
       flags: refsFlags,
       examples: [
@@ -35126,7 +34864,7 @@ var THING_DOMAIN = defineDomain({
         "wh thing graph Game/base --depth 2"
       ],
       notes: [
-        "`graph` does not traverse inbound wref-field references; use `wh thing refs <wref> --inbound` to find things whose fields point at this thing."
+        "`graph` does not traverse inbound wref-field references; use `wh thing refs <wref> --inbound` to find things whose fields point at this target."
       ],
       handler: handleThingGraph
     }
@@ -35151,9 +34889,9 @@ var handleView2 = async (ctx, { flags, args }) => {
   if (!wref) {
     usageError("Usage: wh assertion view <wref> [--version <n>] [--depth <n>]", "wh assertion view Belief/cave-safe --depth 2");
   }
-  const { org, repo } = parseOrgRepo(getRepoRef(ctx), ctx.config);
   const version = flags.version;
   const depth = flags.depth;
+  const { org, repo } = looksLikeDurableId(wref) ? parseOrgRepoOptional(getRepoRef(ctx), ctx.config) : parseOrgRepo(getRepoRef(ctx), ctx.config);
   const includeRetracted = flags["include-retracted"] || version !== undefined;
   if (depth !== undefined && (depth < 1 || depth > 5)) {
     usageError("Usage: wh assertion view <wref> --depth <1-5>", "wh assertion view Belief/cave-safe --depth 2");
@@ -35215,7 +34953,7 @@ var handleHistory2 = async (ctx, { flags, args }) => {
   if (ctx.liveMode && flags.all) {
     usageError("Usage: wh assertion history <wref> [--limit N] [--cursor TOKEN] [--live]", "wh assertion history Belief/cave-safe --limit 50 --live");
   }
-  const { org, repo } = parseOrgRepo(getRepoRef(ctx), ctx.config);
+  const { org, repo } = looksLikeDurableId(wref) ? parseOrgRepoOptional(getRepoRef(ctx), ctx.config) : parseOrgRepo(getRepoRef(ctx), ctx.config);
   const limit = Math.min(flags.limit ?? DEFAULT_PAGE_LIMIT2, MAX_PAGE_LIMIT2);
   if (ctx.liveMode) {
     await runLive({
@@ -35278,6 +35016,9 @@ var listFlags = {
   cursor: flag.string({ description: "Opaque pagination cursor" }),
   all: flag.boolean({ description: "Fetch all pages" }),
   count: flag.boolean({ description: "Return count of matching assertions" }),
+  field: flag.string({
+    description: "exact data-field filter (data.path=value); served by the typed field index"
+  }),
   match: flag.string({ description: "Filter by wref glob pattern" }),
   "resolve-collections": flag.boolean({
     description: "Include assertions about collections (Pair/Set/List) containing the target."
@@ -35295,9 +35036,11 @@ var handleList = async (ctx, { flags, args }) => {
   const cursor = flags.cursor;
   const all = flags.all;
   const count = flags.count;
+  const field = flags.field;
   const match = flags.match;
   const resolveCollections = flags["resolve-collections"];
   const includeRetracted = flags["include-retracted"];
+  const where = field === undefined ? undefined : [parseFieldFlag(field)];
   if (count) {
     if (cursor || all || limit || ctx.liveMode) {
       usageError("Usage: wh assertion list --count [--shape SHAPE] [--about WREF] [--match PATTERN]", "wh assertion list --shape Belief --count");
@@ -35311,7 +35054,8 @@ var handleList = async (ctx, { flags, args }) => {
       match,
       about: wref,
       includeRetracted,
-      resolveCollections
+      resolveCollections,
+      ...where ? { where } : {}
     });
   }
   if (cursor && !limit) {
@@ -35332,7 +35076,8 @@ var handleList = async (ctx, { flags, args }) => {
       match,
       includeRetracted,
       limit: pageLimit,
-      cursor
+      cursor,
+      ...where ? { where } : {}
     };
     if (ctx.liveMode) {
       await runLive({
@@ -35377,7 +35122,8 @@ var handleList = async (ctx, { flags, args }) => {
     includeRetracted,
     resolveCollections,
     limit: pageLimit,
-    cursor
+    cursor,
+    ...where ? { where } : {}
   };
   if (ctx.liveMode) {
     await runLive({
@@ -35406,7 +35152,8 @@ var handleList = async (ctx, { flags, args }) => {
     includeRetracted,
     resolveCollections,
     limit: pageLimit,
-    cursor
+    cursor,
+    ...where ? { where } : {}
   }) : await ctx.client.thing.about(org, repo, wref, {
     shape,
     match,
@@ -35414,7 +35161,8 @@ var handleList = async (ctx, { flags, args }) => {
     includeRetracted,
     resolveCollections,
     limit: boundedLimit,
-    cursor
+    cursor,
+    ...where ? { where } : {}
   });
   if (!all && result.nextCursor) {
     emitPartialPageHint(ctx, (result.assertions ?? []).length, result.nextCursor, boundedLimit);
@@ -35439,6 +35187,7 @@ var ASSERTION_DOMAIN = defineDomain({
       examples: [
         "wh assertion list",
         "wh assertion list Location/cave --shape Belief",
+        "wh assertion list Session/run-001 --shape HypothesisCandidate --field data.round=1",
         "wh assertion view Belief/cave-safe",
         "wh assertion list --about Location/cave --shape Belief"
       ],
@@ -35462,8 +35211,8 @@ var ASSERTION_DOMAIN = defineDomain({
       args: "",
       flags: createFlags,
       examples: [
-        `wh assertion create --shape belief --about player --data '{"confidence":0.8}'`,
-        `wh assertion create --shape Distance --about Pair/location-distance --data '{"value":5}'`
+        `wh assertion create --shape belief --name player-belief --about player --data '{"confidence":0.8}'`,
+        `wh assertion create --shape Distance --name location-distance-value --about Pair/location-distance --data '{"value":5}'`
       ],
       handler: handleCreate
     },
@@ -37009,7 +36758,7 @@ var COLLECTION_TYPES = ["pair", "set", "list"];
 var commonWriteFlags = {
   message: flag.string({ short: "m", description: "Commit message" }),
   committer: flag.string({
-    description: "Committer thing wref (e.g. Agent/bot-1)"
+    description: "Committer wref (shape or shaped thing; e.g. Agent/bot-1)"
   })
 };
 var collectionInputFlags = {
@@ -37573,7 +37322,7 @@ var createFlags3 = {
   }),
   message: flag.string({ short: "m", description: "Commit message" }),
   committer: flag.string({
-    description: "Committer thing wref (e.g. Agent/bot-1)"
+    description: "Committer wref (shape or shaped thing; e.g. Agent/bot-1)"
   }),
   add: flag.string({
     description: "Add a new thing (bare name — use --shape to set the shape). Repeatable; pair each --add with its own --data. For >20 ops, use --file <path>.",
@@ -37597,7 +37346,7 @@ var createFlags3 = {
     multiple: true
   }),
   about: flag.string({
-    description: "Target thing for assertions. Repeatable; one per --add, or a single value broadcast to all.",
+    description: "Target shape or shaped thing for assertions. Repeatable; one per --add, or a single value broadcast to all.",
     multiple: true
   }),
   reason: flag.string({
@@ -40932,7 +40681,7 @@ var CREDENTIAL_DOMAIN = defineDomain({
     revoke: {
       status: "live",
       prime: true,
-      summary: "Revoke a credential set (blocks new binds and strips auth from existing webhook deliveries)",
+      summary: "Revoke a credential set (blocks new binds and stops bound webhook deliveries)",
       args: "<setName>",
       flags: revokeFlags,
       examples: [
@@ -42080,6 +41829,13 @@ var ONBOARD_DOMAIN = defineDomain({
   handler: handleOnboard
 });
 
+// ../../packages/warmhub-cli/src/display-name.ts
+function ensureNonEmptyDisplayName(value, exampleCommand) {
+  if (value !== undefined && value.trim() === "") {
+    usageError("--display-name requires a non-empty value", exampleCommand);
+  }
+}
+
 // ../../packages/warmhub-cli/src/domains/org-member.ts
 var addMemberFlags = {
   role: flag.string({
@@ -42233,6 +41989,7 @@ var handleCreate4 = async (ctx, { flags, args }) => {
   if (!name) {
     usageError('Usage: wh org create <name> [--display-name "..."] [--description "..."]', 'wh org create caryden --display-name "Carl Ryden" -d "A great org"');
   }
+  ensureNonEmptyDisplayName(flags["display-name"], 'wh org create acme --display-name "Acme Co"');
   const c = ctx.colors;
   const result = await ctx.client.org.create(name, flags["display-name"], flags.description);
   writeOutput(ctx, result, () => {
@@ -42317,6 +42074,7 @@ var handleOrgRename = async (ctx, { args, flags }) => {
   if (newSlug !== undefined && newSlug.length === 0 || rawSlugFromInvocation === "" || flagSlug === "") {
     usageError("New slug must be a non-empty string", "wh org rename acme acme-co");
   }
+  ensureNonEmptyDisplayName(displayName2, 'wh org rename acme --display-name "Acme Co"');
   const c = ctx.colors;
   const slugChange = newSlug && newSlug !== oldName ? newSlug : undefined;
   if (displayName2 !== undefined && slugChange) {
@@ -42440,242 +42198,7 @@ var ORG_DOMAIN = defineDomain({
 });
 
 // ../../packages/warmhub-cli/src/domains/prime-content.md
-var prime_content_default = `# WarmHub CLI Context
-> **Context Recovery**: Run \`wh prime\` after compaction or new session
-
-## Environment
-{{REPO_LINE}}
-
-## Core Concepts
-- **Thing**: A named entity versioned by write operations. **Assertion**: A claim about a thing with shape-validated data.
-- **Shape**: Schema defining data structure. **Write**: One or more add/revise/retract operations with per-operation results.
-- **wref**: Reference as \`Shape/name\` (e.g., \`Player/alice\`). Cross-repo: \`wh:org/repo/Shape/name\`.
-
-## Versioned Things
-- \`Shape/name\` identifies the logical thing. \`Shape/name@vN\` pins an exact version.
-- Read surfaces may show pinned wrefs (\`@vN\`) in data. Treat them as version metadata, not a different thing.
-
-## Key Workflows
-
-**Write data** (discover shapes → scaffold ops → submit):
-\`\`\`bash
-wh shape list --repo org/repo                             # list available shapes
-wh shape view ShapeName --repo org/repo                   # inspect fields
-wh shape template ShapeName -o ops.json --repo org/repo   # scaffold write ops (supports --kind assertion)
-# edit ops.json — fill FILL_IN placeholders — then:
-wh commit submit --file ops.json -m "msg" --repo org/repo  # submit operations (bare \`wh commit\` also works)
-# or single assertion (no file needed):
-wh assertion create --shape ShapeName --about Target/name --name my-assertion --data '{"field":1}' --repo org/repo
-# Relay failed operation details when present. Never hand-guess ops JSON — use \`wh shape template <Shape>\`.
-\`\`\`
-
-**Read data:**
-\`\`\`bash
-wh thing list --repo org/repo                 # all things at HEAD
-wh thing view Shape/name --repo org/repo      # inspect a thing
-wh thing query --shape MyShape --repo org/repo  # find things by shape
-wh thing about Shape/name --repo org/repo     # assertions about thing/shape
-wh assertion list --repo org/repo             # all assertions at HEAD
-wh thing history Shape/name --repo org/repo   # version history
-
-# Batch read — wh thing view is variadic (max 500 wrefs/call):
-wh thing view Player/alice Player/bob               # variadic positionals
-wh thing view --file wrefs.txt --json               # one wref per line
-cat wrefs.txt | wh thing view --format jsonl        # one JSON line per *deduped* requested wref
-\`\`\`
-
-## Wref Quick Reference
-
-Write operations use explicit names and explicit wrefs. To connect operations
-inside one commit, create the first thing with a deterministic name and point
-later operations at that wref.
-
-## Command Reference
-
-**Global flags**: \`--repo\`, \`--format\`, \`--json\`, \`--live\`
-### thing — Thing operations
-- \`wh thing list [--shape] [--kind] [--match] [--include-retracted]\` — Current HEAD state
-- \`wh thing view [<wref>...] [--file <path>] [--version] [--depth] [--include-retracted] [--data-mode auto|full]\` — Thing details. Variadic (max 500). \`--version\` implies \`--include-retracted\`. Batch JSON returns \`{ requested, items, missing }\`; jsonl emits one row per deduped requested wref. Large Set/List bodies summarize by default; use \`--data-mode full\` for canonical collection JSON.
-- \`wh thing history [wref] [--shape] [--about] [--include-retracted]\` — Version history
-- \`wh thing resolve <wref>\` — Resolve wref
-- \`wh thing create <name|Shape/name> --data <json-object> [--shape] [--message] [--committer]\` — Create
-- \`wh thing revise <name> [--data] [--message] [--committer] [--expected-version]\` — Revise (CONFLICT if HEAD≠n)
-- \`wh thing retract <wref> -m <message> [--reason] [--kind]\` — Retract
-- \`wh thing query [--shape] [--kind] [--about] [--match]\` — Query by filters
-- \`wh thing search <query> [--shape] [--kind] [--about] [--mode]\` — Search text
-- \`wh thing rename <Shape/oldName> <newName>\` — Rename
-- \`wh thing refs <wref> [--inbound] [--outbound] [--field]\` — Show field references; use \`wh thing about\` for assertions about things/shapes
-- \`wh thing about <wref> [--shape] [--match] [--depth] [--resolve-collections] [--limit] [--include-retracted]\` — Show assertions about the target identity; \`--resolve-collections\` expands collection members for bare/@HEAD/@ALL inputs, not pinned @vN
-
-### commit — Write operations
-- \`wh commit submit [--ops|--file|--add|--revise|--retract] [--kind] [--data] [--reason] [--expected-version] [--chunk-size] [--skip-existing] [--progress] [--stream-id]\` — Submit operations (bare \`wh commit\` is equivalent). Use \`--file ops.jsonl --stream-id <id> --chunk-size 5000 --skip-existing\` for bulk ingest.
-- \`wh shape template <shape> [shape2 ...] [--kind] [--operation add|revise|retract] [-o file]\` — Generate sample ops
-
-### assertion — Assertion operations
-- \`wh assertion list [--about wref] [--shape] [--match] [--include-retracted]\` — Browse assertions
-- \`wh assertion view <wref> [--version] [--include-retracted]\` — Assertion details
-- \`wh assertion create [--name] [--shape] [--data] [--about] [--message] [--committer]\` — Create assertion
-- \`wh assertion revise <wref> --data <json> [--message] [--committer]\` — Revise assertion
-- \`wh assertion retract <wref> -m <message> [--reason] [--committer]\` — Retract assertion
-- \`wh assertion history <wref> [--include-retracted]\` — Assertion history
-
-### shape — Shape management
-- \`wh shape list [--match] [--include-retracted]\` — List all shapes
-- \`wh shape view <name> [--include-retracted]\` — Shape details
-- \`wh shape revise <name> [--fields]\` — Revise shape
-- \`wh shape create <name> [--fields]\` — Create shape
-- \`wh shape retract <name> -m <message> [--reason]\` — Retract shape
-- \`wh shape history <name> [--include-retracted]\` — Shape history
-- \`wh shape rename <oldName> <newName>\` — Rename shape
-
-### repo — Repository management
-- \`wh repo create <org/name> [--display-name] [--description] [--visibility]\` — Create repo
-- \`wh repo list [org]\` — List repos
-- \`wh repo view [org/repo]\` — Repo details
-
-### org — Organization management
-- \`wh org create <name> [--display-name]\` — Create a new organization
-- \`wh org view <name>\` — View organization details (alias: info)
-- \`wh org list\` — List all organizations
-
-### sub — Subscription management
-- \`wh sub create <name> [flags]\` — Create a subscription
-- \`wh sub view <name>\` — View subscription details
-- \`wh sub list\` — List all subscriptions
-- \`wh sub log <name>\` — Tail subscription delivery feed
-- \`wh sub attempts <runId>\` — Show attempt history for a run
-- \`wh sub pause <name>\` — Pause a subscription
-- \`wh sub resume <name>\` — Resume a paused subscription
-- \`wh sub bind <name> [--credentials]\` — Bind a credential set to a subscription for webhook auth
-- \`wh sub unbind <name>\` — Remove credential binding from a subscription
-- \`wh sub delete <name>\` — Delete a subscription
-
-### notifications — Action notification listing
-- \`wh notifications [--limit] [--since]\` — List repo-scoped action notifications
-
-### credential — Credential set management
-- \`wh credential create <name> [--repo org/repo | --org org] [--scope] [--description]\` — Create an empty credential set
-- \`wh credential list [--repo org/repo | --org org]\` — List credential sets accessible from a repo or org
-- \`wh credential view <name> [--repo org/repo | --org org]\` — View a credential set (key names only, no values)
-- \`wh credential delete <name> [--repo org/repo | --org org]\` — Delete a credential set and its Vault object
-- \`wh credential set <setName> [<keyName>] [--repo org/repo | --org org] [--value]\` — Set credential key(s). With \`<keyName>\`: single-key form (reads value from \`--value\` or stdin). Without \`<keyName>\`: batch form (reads JSON object from stdin, e.g. \`{"KEY":"val"}\`)
-- \`wh credential unset <setName> <keyName> [--repo org/repo | --org org]\` — Remove a key from a credential set
-- \`wh credential audit <setName> [--repo org/repo | --org org]\` — View audit log for a credential set
-- \`wh credential revoke <setName> [--repo org/repo | --org org] [--reason]\` — Revoke a credential set (blocks new binds and strips auth from existing webhook deliveries)
-
-### component — Component management
-- \`wh component validate <path>\` — Validate package
-- \`wh component install <org/name>\` — Install a registered component
-- \`wh component register <name> --org <org> --manifest <path> [flags]\` — Register component identity
-- \`wh component unregister <org/name>\` — Remove a registered component identity
-- \`wh component registry list --org <org>\` — List registered components
-- \`wh component registry view <org/name>\` — View a registered component
-- \`wh component registry update <org/name> [flags]\` — Update a registered component
-- \`wh component list\` — List installed components
-- \`wh component update <org/name>\` — Update installed component
-- \`wh component view <org/name>\` — Show component details (alias: show)
-- \`wh component doctor <org/name>\` — Run component health checks
-- \`wh component teardown <org/name>\` — Pause component subscriptions
-
-### Getting More Info
-- \`wh help\` — full help overview
-- \`wh <domain>\` — list verbs for a domain
-- \`wh <domain> <verb> --help\` — verb details with flags and examples
-- \`wh help --format json\` — full CLI spec as JSON (best for agents)
-
-## Common Workflows
-
-**Explore a repo:**
-\`\`\`bash
-wh thing list --repo org/repo             # see all things in HEAD
-wh thing view Shape/name --repo org/repo  # inspect a specific thing
-wh thing history Shape/name --repo org/repo # inspect version history
-wh thing about Shape/name                 # assertions about thing/shape
-\`\`\`
-
-**Create an assertion** (most common write):
-\`\`\`bash
-# --about takes a target wref: Shape/name thing, or Shape itself.
-wh assertion create --shape MyShape --about TargetShape/target-name \\
-  --name my-assertion --data '{"field_a":1,"field_b":"value"}' --repo org/repo
-# Output includes per-operation status; relay failures when present.
-\`\`\`
-
-**Create via write entrypoint** (alternative, supports batches and streams):
-\`\`\`bash
-wh commit submit --add my-item --shape MyShape --kind assertion \\
-  --about TargetShape/target-name --data '{"field_a":1}' --repo org/repo
-\`\`\`
-
-**Batch write via file** (generate template → edit → submit):
-\`\`\`bash
-wh shape template Hypothesis Evidence -o ops.json    # add --kind assertion --about TargetShape/name for assertions
-# edit ops.json — fill FILL_IN placeholders
-wh commit submit --file ops.json -m "batch update"   # submit all operations (bare \`wh commit\` is equivalent)
-# --file format: docs.warmhub.ai/cli-reference/commit-operations
-\`\`\`
-
-**Bulk write (JSONL stream, >1k ops)** — one chunked stream beats per-record commits (~60× faster):
-\`\`\`bash
-wh shape template MyShape -o ops.jsonl                          # one op per line (.jsonl)
-ID="bulk-$(date +%s)"   # choose your own; set it up front so reruns are safe
-wh commit submit --file ops.jsonl --stream-id "$ID" --chunk-size 5000 \\
-  --skip-existing --progress -m "bulk ingest" --repo org/repo
-# --chunk-size: ops per append chunk (default 1000, max 10000); chunk≈1 is ~60× slower
-# --skip-existing: skips already-written add ops (drops per-row read-before-write)
-# Add-stream restart: rerun the WHOLE file with the SAME --stream-id.
-# Fixed-name adds are idempotent via --skip-existing. Mid-stream resume is not
-# a CLI mode. Mixed revise/retract JSONL streams are not full-rerun safe after
-# an ambiguous append; inspect repo state and reconcile explicitly.
-\`\`\`
-
-**Create collections:**
-\`\`\`bash
-wh commit submit --type pair --name location-distance --members Location/a,Location/b --repo org/repo
-wh assertion create --shape Distance --about Pair/location-distance --data '{"value":5}' --repo org/repo
-\`\`\`
-
-**Modify data:**
-\`\`\`bash
-wh thing revise Shape/name --data '{"x":5,"y":3}' -m "update" --repo org/repo
-wh thing retract Shape/old-item -m "withdrawn" --reason "data feed contaminated" --repo org/repo
-\`\`\`
-
-**Query and filter:**
-\`\`\`bash
-wh thing query --shape MyShape                       # by shape
-wh thing query --kind assertion --about Shape/name   # by kind + target
-wh thing history Shape/name --limit 10               # version history
-\`\`\`
-
-## Built-in Content shape
-
-WarmHub repos expose three well-known content wrefs:
-- \`Content/Readme\`  — stored markdown for humans
-- \`Content/Agents\`  — stored markdown guidance for AI agents
-- \`Content/LlmsTxt\` — synthesized per-request sitemap (read-only)
-
-Fetch via \`wh repo content get --kind readme|agents|llms-txt\`,
-\`client.repo.getReadme/getAgents/getLlmsTxt\`, MCP \`warmhub_repo_content_get\`,
-or raw HTTP \`GET /{org}/{repo}/readme.md|agents.md|llms.txt\`.
-See \`wh repo describe\` → \`additionalInformation\` for the discovery field.
-
-## Query Discipline
-- Plan the repo, shapes, and wrefs you need before the first query.
-- Gather the needed facts from one repo before switching to another.
-- Do the queries first, then write one complete answer.
-
-## Agent Tips
-- **Always run commands for live data** — this context describes the CLI, not repo contents
-- **Before writing, discover wrefs** — run \`wh thing list\` or \`wh shape list\`
-- **Shape field types**: \`string\`, \`number\`, \`boolean\`, \`wref\`, arrays, optionals, nested objects
-- **Write commands return per-operation results** — relay failures and affected wrefs to the user
-- **Pass data inline** with \`--data '{...}'\` — do NOT create temp files
-- Add \`--json\` to any command for machine-readable JSON output
-- **Aliases teach canonical commands** — executing aliases emit a status hint; misleading lifecycle aliases reject and point to \`retract\`
-- Writes go through \`wh commit submit\` (or bare \`wh commit\`) or wrappers (\`create\`, \`revise\`, \`retract\`, \`assertion create\`). \`retract\` irreversibly withdraws an identity and creates a history entry.
-- Use \`wh doctor\` to check environment health
-`;
+var prime_content_default = "# WarmHub CLI Context\n> **Context Recovery**: Run `wh prime` after compaction or new session\n\n## Environment\n{{REPO_LINE}}\n\n## Core Concepts\n- **Thing**: A named entity versioned by writes. **Assertion**: A thing that makes a shape-validated claim about another thing.\n- **Shape**: A thing defining data structure; every other thing has one. **Write**: One or more add/revise/retract operations with per-operation results.\n- **wref**: A reference to a thing. Local: `Player` (the shape) or `Player/alice` (a thing with that shape). Cross-repo: `wh:org/repo/Shape` or `wh:org/repo/Shape/name`.\n\n## Versioned Wrefs\n- `Shape` addresses the shape itself; `Shape/name` addresses a thing with that shape. `@vN` pins either.\n- Floating write refs to retracted targets fail; existing pinned versions remain valid.\n- Rename invalidates old spellings, including `@vN`; the new name resolves history.\n- Untyped wrefs accept any thing. `wref<T>` requires the target's shape to be `T`; a shape has no shape, so never satisfies it. `wref?` coalesces only `thing_absent`, never a missing shape.\n\n## Key Workflows\n\n**Write data** (discover shapes → scaffold ops → submit):\n```bash\nwh shape list --repo org/repo                             # list available shapes\nwh shape view ShapeName --repo org/repo                   # inspect fields\nwh shape template ShapeName -o ops.json --repo org/repo   # scaffold write ops (supports --kind assertion)\n# edit ops.json — fill FILL_IN placeholders — then:\nwh commit submit --file ops.json -m \"msg\" --repo org/repo  # submit operations (bare `wh commit` also works)\n# or single assertion (no file needed):\nwh assertion create --shape ShapeName --about Target/name --name my-assertion --data '{\"field\":1}' --repo org/repo\n# Relay failed operation details when present. Never hand-guess ops JSON — use `wh shape template <Shape>`.\n```\n\n**Read data:**\n```bash\nwh thing list --repo org/repo                 # all things at HEAD\nwh thing view Shape/name --repo org/repo      # inspect a thing\nwh thing query --shape MyShape --repo org/repo  # find things by shape\nwh thing about Shape --repo org/repo          # assertions about a shape\nwh assertion list --repo org/repo             # all assertions at HEAD\nwh thing history Shape/name --repo org/repo   # version history\n\n# Batch read — wh thing view is variadic (max 500 wrefs/call):\nwh thing view Player/alice Player/bob               # variadic positionals\nwh thing view --file wrefs.txt --json               # one wref per line\ncat wrefs.txt | wh thing view --format jsonl        # one JSON line per *deduped* requested wref\n```\n\n## Wref Quick Reference\n\nWrites use explicit names and wrefs. Untyped fields, collection members,\nassertion `about`, and committers accept any thing. Create a deterministic\ntarget before referencing it in the same commit.\n\n## Command Reference\n\n**Global flags**: `--repo`, `--format`, `--json`, `--live`\n### thing — Thing operations\n- `wh thing list [--shape] [--kind] [--match] [--include-retracted]` — Current HEAD state\n- `wh thing view [<wref>...] [--file <path>] [--version] [--depth] [--include-retracted] [--data-mode auto|full]` — Thing details. Variadic (max 500). `--version` implies `--include-retracted`. Batch JSON returns `{ requested, items, missing }`; jsonl emits one row per deduped requested wref. Large Set/List bodies summarize by default; use `--data-mode full` for canonical collection JSON.\n- `wh thing history [wref] [--shape] [--about] [--include-retracted]` — Version history\n- `wh thing resolve <wref>` — Resolve a wref to its canonical thing identity\n- `wh thing create <name|Shape/name> --data <json-object> [--shape] [--message] [--committer]` — Create\n- `wh thing revise <name> [--data] [--message] [--committer] [--expected-version]` — Revise (CONFLICT if HEAD≠n)\n- `wh thing retract <wref> -m <message> [--reason] [--kind]` — Retract\n- `wh thing query [--shape] [--kind] [--about] [--match]` — Query by filters\n- `wh thing search <query> [--shape] [--kind] [--about] [--mode]` — Search text\n- `wh thing rename <Shape/oldName> <newName>` — Rename\n- `wh thing refs <wref> [--inbound] [--outbound] [--field]` — Show field references; use `wh thing about` for assertions about the target thing\n- `wh thing about <wref> [--shape] [--match] [--depth] [--resolve-collections] [--limit] [--include-retracted]` — Show assertions about the target identity; `--resolve-collections` expands collection members for bare/@HEAD/@ALL inputs, not pinned @vN\n\n### commit — Write operations\n- `wh commit submit [--ops|--file|--add|--revise|--retract] [--kind] [--data] [--reason] [--expected-version] [--chunk-size] [--skip-existing] [--progress] [--stream-id]` — Submit operations (bare `wh commit` is equivalent). Use `--file ops.jsonl --stream-id <id> --chunk-size 5000 --skip-existing` for bulk ingest.\n- `wh shape template <shape> [shape2 ...] [--kind] [--operation add|revise|retract] [-o file]` — Generate sample ops\n\n### assertion — Assertion operations\n- `wh assertion list [--about wref] [--shape] [--match] [--include-retracted]` — Browse assertions\n- `wh assertion view <wref> [--version] [--include-retracted]` — Assertion details\n- `wh assertion create --shape <s> --name <n> --about <wref> [--data] [-m] [--committer]` — Create assertion\n- `wh assertion revise <wref> --data <json> [--message] [--committer]` — Revise assertion\n- `wh assertion retract <wref> -m <message> [--reason] [--committer]` — Retract assertion\n- `wh assertion history <wref> [--include-retracted]` — Assertion history\n\n### shape — Shape management\n- `wh shape list [--match] [--include-retracted]` — List all shapes\n- `wh shape view <name> [--include-retracted]` — Shape details\n- `wh shape revise <name> [--fields]` — Revise shape\n- `wh shape create <name> [--fields]` — Create shape\n- `wh shape retract <name> -m <message> [--reason]` — Retract shape\n- `wh shape history <name> [--include-retracted]` — Shape history\n- `wh shape rename <oldName> <newName>` — Rename shape\n\n### repo — Repository management\n- `wh repo create <org/name> [--display-name] [--description] [--visibility]` — Create repo\n- `wh repo list [org]` — List repos\n- `wh repo view [org/repo]` — Repo details\n\n### org — Organization management\n- `wh org create <name> [--display-name]` — Create a new organization\n- `wh org view <name>` — View organization details (alias: info)\n- `wh org list` — List all organizations\n\n### sub — Subscription management\n- `wh sub create <name> [flags]` — Create a subscription\n- `wh sub view <name>` — View subscription details\n- `wh sub list` — List all subscriptions\n- `wh sub log <name>` — Tail subscription delivery feed\n- `wh sub attempts <runId>` — Show attempt history for a run\n- `wh sub pause <name>` — Pause a subscription\n- `wh sub resume <name>` — Resume a paused subscription\n- `wh sub bind <name> [--credentials]` — Bind a credential set to a subscription for webhook auth\n- `wh sub unbind <name>` — Remove credential binding from a subscription\n- `wh sub delete <name>` — Delete a subscription\n\n### notifications — Action notification listing\n- `wh notifications [--limit] [--since]` — List repo-scoped action notifications\n\n### credential — Credential set management\n- `wh credential create <name> [--repo org/repo | --org org] [--scope] [--description]` — Create an empty credential set\n- `wh credential list [--repo org/repo | --org org]` — List credential sets accessible from a repo or org\n- `wh credential view <name> [--repo org/repo | --org org]` — View a credential set (key names only, no values)\n- `wh credential delete <name> [--repo org/repo | --org org]` — Delete a credential set and its Vault object\n- `wh credential set <setName> [<keyName>] [--repo org/repo | --org org] [--value]` — Set credential key(s). With `<keyName>`: single-key form (reads value from `--value` or stdin). Without `<keyName>`: batch form (reads JSON object from stdin, e.g. `{\"KEY\":\"val\"}`)\n- `wh credential unset <setName> <keyName> [--repo org/repo | --org org]` — Remove a key from a credential set\n- `wh credential audit <setName> [--repo org/repo | --org org]` — View audit log for a credential set\n- `wh credential revoke <setName> [--repo org/repo | --org org] [--reason]` — Revoke a credential set (blocks new binds and stops bound webhook deliveries)\n\n### component — Component management\n- `wh component validate <path>` — Validate package\n- `wh component install <org/name>` — Install a registered component\n- `wh component register <name> --org <org> --manifest <path> [flags]` — Register component identity\n- `wh component unregister <org/name>` — Remove a registered component identity\n- `wh component registry list --org <org>` — List registered components\n- `wh component registry view <org/name>` — View a registered component\n- `wh component registry update <org/name> [flags]` — Update a registered component\n- `wh component list` — List installed components\n- `wh component update <org/name>` — Update installed component\n- `wh component view <org/name>` — Show component details (alias: show)\n- `wh component doctor <org/name>` — Run component health checks\n- `wh component teardown <org/name>` — Pause component subscriptions\n\n### Getting More Info\n- `wh help` — full help overview\n- `wh <domain>` — list verbs for a domain\n- `wh <domain> <verb> --help` — verb details with flags and examples\n- `wh help --format json` — full CLI spec as JSON (best for agents)\n\n## Common Workflows\n\n**Explore a repo:**\n```bash\nwh thing list --repo org/repo             # see all things in HEAD\nwh thing view Shape/name --repo org/repo  # inspect a specific thing\nwh thing history Shape/name --repo org/repo # inspect version history\nwh thing about Shape/name                 # assertions about thing/shape\n```\n\n**Create an assertion** (most common write):\n```bash\n# --about takes an untyped target wref: Shape or Shape/name.\nwh assertion create --shape MyShape --about TargetShape/target-name \\\n  --name my-assertion --data '{\"field_a\":1,\"field_b\":\"value\"}' --repo org/repo\n# Output includes per-operation status; relay failures when present.\n```\n\n**Create via write entrypoint** (alternative, supports batches and streams):\n```bash\nwh commit submit --add my-item --shape MyShape --kind assertion \\\n  --about TargetShape/target-name --data '{\"field_a\":1}' --repo org/repo\n```\n\n**Batch write via file** (generate template → edit → submit):\n```bash\nwh shape template Hypothesis Evidence -o ops.json    # add --kind assertion --about TargetShape/name for assertions\n# edit ops.json — fill FILL_IN placeholders\nwh commit submit --file ops.json -m \"batch update\"   # submit all operations (bare `wh commit` is equivalent)\n# --file format: docs.warmhub.ai/cli-reference/commit-operations\n```\n\n**Bulk write (JSONL stream, >1k ops)** — one chunked stream beats per-record commits (~60× faster):\n```bash\nwh shape template MyShape -o ops.jsonl                          # one op per line (.jsonl)\nID=\"bulk-$(date +%s)\"   # choose your own; set it up front so reruns are safe\nwh commit submit --file ops.jsonl --stream-id \"$ID\" --chunk-size 5000 \\\n  --skip-existing --progress -m \"bulk ingest\" --repo org/repo\n# --chunk-size: ops per append chunk (default 1000, max 10000); chunk≈1 is ~60× slower\n# --skip-existing: skips already-written add ops (drops per-row read-before-write)\n# Add-stream restart: rerun the WHOLE file with the SAME --stream-id.\n# Fixed-name adds are idempotent via --skip-existing. Mid-stream resume is not\n# a CLI mode. Mixed revise/retract JSONL streams are not full-rerun safe after\n# an ambiguous append; inspect repo state and reconcile explicitly.\n```\n\n**Create collections:**\n```bash\nwh commit submit --type pair --name location-distance --members Location,Location/a --repo org/repo\nwh assertion create --shape Distance --name location-distance-value --about Pair/location-distance --data '{\"value\":5}' --repo org/repo\n```\n\n**Modify data:**\n```bash\nwh thing revise Shape/name --data '{\"x\":5,\"y\":3}' -m \"update\" --repo org/repo\nwh thing retract Shape/old-item -m \"withdrawn\" --reason \"data feed contaminated\" --repo org/repo\n```\n\n**Query and filter:**\n```bash\nwh thing query --shape MyShape                       # by shape\nwh thing query --kind assertion --about Shape/name   # by kind + target\nwh thing history Shape/name --limit 10               # version history\n```\n\n## Built-in Content shape\n\nWarmHub repos expose three well-known content wrefs:\n- `Content/Readme`  — stored markdown for humans\n- `Content/Agents`  — stored markdown guidance for AI agents\n- `Content/LlmsTxt` — synthesized per-request sitemap (read-only)\n\nFetch via `wh repo content get --kind readme|agents|llms-txt`,\n`client.repo.getReadme/getAgents/getLlmsTxt`, MCP `warmhub_repo_content_get`,\nor raw HTTP `GET /{org}/{repo}/readme.md|agents.md|llms.txt`.\nSee `wh repo describe` → `additionalInformation` for the discovery field.\n\n## Query Discipline\n- Plan the repo, shapes, and wrefs you need before the first query.\n- Gather the needed facts from one repo before switching to another.\n- Do the queries first, then write one complete answer.\n\n## Agent Tips\n- **Always run commands for live data** — this context describes the CLI, not repo contents\n- **Before writing, discover wrefs** — run `wh thing list` or `wh shape list`\n- **Shape field types**: `string`, `number`, `boolean`, `wref`, arrays, optionals, nested objects\n- **Write commands return per-operation results** — relay failures and affected wrefs to the user\n- **Pass data inline** with `--data '{...}'` — do NOT create temp files\n- Add `--json` to any command for machine-readable JSON output\n- **Aliases teach canonical commands** — executing aliases emit a status hint; misleading lifecycle aliases reject and point to `retract`\n- Writes go through `wh commit submit` (or bare `wh commit`) or wrappers (`create`, `revise`, `retract`, `assertion create`). `retract` irreversibly withdraws an identity and creates a history entry.\n- Use `wh doctor` to check environment health\n";
 
 // ../../packages/warmhub-cli/src/domains/prime.ts
 function buildMarkdown(config) {
@@ -42721,7 +42244,7 @@ var wrefSyntax = {
     "Player/alice",
     "GameState/round-1/state"
   ],
-  canonicalFormat: "wh:org/repo/Shape/name",
+  canonicalFormat: "wh:org/repo/Shape or wh:org/repo/Shape/name",
   versionModifiers: ["@HEAD", "@vN", "@ALL"]
 };
 var handlePrime = async (ctx) => {
@@ -42826,11 +42349,6 @@ function parseExplicitOrgRepoArg(ref, usage, example) {
   const [orgName, repoName] = parts;
   return { orgName, repoName };
 }
-function ensureNonEmptyDisplayName(value, exampleCommand) {
-  if (value !== undefined && value.trim() === "") {
-    usageError("--display-name requires a non-empty value", exampleCommand);
-  }
-}
 function resolveOrgRepoArg(ref, orgFlag) {
   if (ref?.includes("/")) {
     const parts = ref.split("/");
@@ -43830,7 +43348,7 @@ var retractFlags3 = {
   reason: flag.string({ description: "Reason for retraction (<=500 chars)" }),
   message: flag.string({ short: "m", description: "Commit message" }),
   committer: flag.string({
-    description: "Committer thing wref (e.g. Agent/bot-1)"
+    description: "Committer wref (shape or shaped thing; e.g. Agent/bot-1)"
   })
 };
 var handleCreate6 = async (ctx, { flags, args }) => {
@@ -44006,7 +43524,7 @@ var createFlags8 = {
     description: "Shape to subscribe to"
   }),
   event: flag.string({
-    description: "Event to watch: commit (default), repo.renamed, or org.renamed"
+    description: "Event to watch: commit (default), repo.renamed, org.renamed, thing.renamed, or shape.renamed"
   }),
   org: flag.string({
     description: "Org slug for an org-scoped subscription (org.renamed)"
@@ -44203,7 +43721,7 @@ function scopeLabel(scope) {
 // ../../packages/warmhub-cli/src/domains/sub/handlers-create.ts
 var handleCreate7 = async (ctx, { flags, args }) => {
   const name = args[0] ?? flags.name;
-  const usage = "Usage: wh sub create <name> (--repo org/repo | --org org) [--event commit|repo.renamed|org.renamed] [options]";
+  const usage = "Usage: wh sub create <name> (--repo org/repo | --org org) [--event commit|repo.renamed|org.renamed|thing.renamed|shape.renamed] [options]";
   const example = `wh sub create signal-hook --repo myorg/myrepo --on Signal --filter '{"shape":"Signal"}' --webhook-url https://example.com/hook`;
   if (!name) {
     usageError(usage, example);
@@ -44242,7 +43760,7 @@ var handleCreate7 = async (ctx, { flags, args }) => {
     return;
   }
   const { org, repo } = resolveRepoContext(ctx);
-  if (eventType === "repo.renamed") {
+  if (eventType !== "commit") {
     rejectCommitFlags(flags, eventType);
     const result2 = await ctx.client.subscription.create({
       orgName: org,
@@ -44255,7 +43773,7 @@ var handleCreate7 = async (ctx, { flags, args }) => {
     });
     writeOutput(ctx, result2, () => {
       const c = ctx.colors;
-      ctx.status(`${c.green}Created subscription${c.reset} ${c.cyan}${name}${c.reset} on ${c.cyan}${org}/${repo}${c.reset} (repo.renamed)`);
+      ctx.status(`${c.green}Created subscription${c.reset} ${c.cyan}${name}${c.reset} on ${c.cyan}${org}/${repo}${c.reset} (${eventType})`);
     });
     return;
   }
@@ -45048,10 +44566,11 @@ var TOKEN_DOMAIN = defineDomain({
 // ../../packages/warmhub-cli/src/update-check-cache.ts
 import { mkdirSync as mkdirSync7, readFileSync as readFileSync10, writeFileSync as writeFileSync7 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { dirname as dirname7, resolve as resolve3 } from "node:path";
+import { dirname as dirname8, resolve as resolve3 } from "node:path";
 
 // ../../packages/warmhub-cli/src/update-check-fetch.ts
 import * as childProcess4 from "node:child_process";
+import { dirname as dirname7 } from "node:path";
 var WH_CLI_PACKAGE_NAME = "@warmhub/cli";
 var UPDATE_DIST_TAG = "latest";
 var DEFAULT_UPDATE_REGISTRY = "https://registry.npmjs.org";
@@ -45092,8 +44611,24 @@ var getUpdateRegistryConfigFingerprint = (env, _cwd, _homePath, _options = {}) =
     return `env:${override}`;
   return `default:${DEFAULT_UPDATE_REGISTRY}`;
 };
+function withNpmRegistryEnv(env, registry2) {
+  const childEnv = { ...env };
+  for (const key of Object.keys(childEnv)) {
+    if (key.toLowerCase() === "npm_config_registry")
+      delete childEnv[key];
+  }
+  return { ...childEnv, npm_config_registry: registry2 };
+}
 var fetchLatestCliVersion = (env, registry2) => {
-  const proc = childProcess4.spawnSync("npm", [
+  const isWindows = process.platform === "win32";
+  const proc = isWindows ? childProcess4.spawnSync(`npm view ${WH_CLI_PACKAGE_NAME}@${UPDATE_DIST_TAG} version --json`, {
+    encoding: "utf8",
+    cwd: dirname7(process.execPath),
+    env: withNpmRegistryEnv(env, registry2),
+    shell: true,
+    stdio: "pipe",
+    timeout: 8000
+  }) : childProcess4.spawnSync("npm", [
     "view",
     `${WH_CLI_PACKAGE_NAME}@${UPDATE_DIST_TAG}`,
     "version",
@@ -45122,7 +44657,7 @@ var readCache = (homePath) => {
 };
 var writeCache = (homePath, cache) => {
   const path2 = cachePath(homePath);
-  mkdirSync7(dirname7(path2), { recursive: true });
+  mkdirSync7(dirname8(path2), { recursive: true });
   writeFileSync7(path2, `${JSON.stringify(cache, null, 2)}
 `, "utf8");
 };
@@ -45141,7 +44676,7 @@ var markUpdateNoticeShown = ({
 import { spawnSync as spawnSync2 } from "node:child_process";
 import { existsSync as existsSync9, readFileSync as readFileSync11, realpathSync } from "node:fs";
 import { homedir as homedir6 } from "node:os";
-import { dirname as dirname8, resolve as resolve4 } from "node:path";
+import { dirname as dirname9, resolve as resolve4 } from "node:path";
 var DEV_INSTALL_PACKAGE_SEARCH_DEPTH = 8;
 var DEV_INSTALL_GIT_SEARCH_DEPTH = 4;
 var normalizePath = (path2) => path2 ? path2.replaceAll("\\", "/") : "";
@@ -45285,7 +44820,7 @@ var formatUnknownInstallHint = (activePath, realPath, latestVersion, registry2)
 var isDevInstall = (scriptPath) => {
   if (!scriptPath)
     return false;
-  let dir = dirname8(scriptPath);
+  let dir = dirname9(scriptPath);
   for (let i = 0;i < DEV_INSTALL_PACKAGE_SEARCH_DEPTH; i += 1) {
     const pkgPath = resolve4(dir, "package.json");
     try {
@@ -45297,7 +44832,7 @@ var isDevInstall = (scriptPath) => {
         for (let j = 0;j < DEV_INSTALL_GIT_SEARCH_DEPTH; j += 1) {
           if (existsSync9(resolve4(probe, ".git")))
             return true;
-          const parent2 = dirname8(probe);
+          const parent2 = dirname9(probe);
           if (parent2 === probe)
             break;
           probe = parent2;
@@ -45305,7 +44840,7 @@ var isDevInstall = (scriptPath) => {
         return false;
       }
     } catch {}
-    const parent = dirname8(dir);
+    const parent = dirname9(dir);
     if (parent === dir)
       break;
     dir = parent;
@@ -46520,6 +46055,7 @@ async function runCli(argv, opts) {
     ...traceFields
   });
   let exitCode = 0 /* Ok */;
+  let cancelledExitCode;
   let removeSignalListeners;
   try {
     canonicalizeGlobalFlags({ invocation });
@@ -46573,7 +46109,6 @@ async function runCli(argv, opts) {
     const chars = makeChars();
     const ac = new AbortController;
     const liveMode = getBoolFlag(invocation.flags, "live");
-    let cancelledExitCode;
     const handleSigint = () => {
       ac.abort();
       logger.info("cli.cancelled", { signal: "SIGINT", ...traceFields });
@@ -46620,6 +46155,10 @@ async function runCli(argv, opts) {
     exitCode = cancelledExitCode ?? 0 /* Ok */;
     return exitCode;
   } catch (error) {
+    if (cancelledExitCode !== undefined) {
+      exitCode = cancelledExitCode;
+      return exitCode;
+    }
     const cliError = toCliError2(error);
     const fields = {
       kind: cliError.kind,
@@ -46698,7 +46237,7 @@ function resolveLogLevel(flags, env) {
 // package.json
 var package_default3 = {
   name: "@warmhub/cli",
-  version: "0.68.0",
+  version: "0.70.0",
   private: false,
   type: "module",
   description: "The wh CLI for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",
@@ -47353,4 +46892,4 @@ if (!updateCheckSuppressedByArgv && shouldRunUpdateCheck(updateEligibility)) {
 var interceptedExitCode = await maybeHandleComponentShellBoundary(dispatchArgv);
 process.exitCode = interceptedExitCode === undefined ? await runCli(dispatchArgv, { version: package_default3.version }) : interceptedExitCode;
 
-//# debugId=201635543D774B8564756E2164756E21
+//# debugId=14D7F2CE92253D6D64756E2164756E21