@warmhub/cli 0.71.0 → 0.73.0

package/dist/wh.js

@@ -1,9 +1,678 @@
 #!/usr/bin/env node
 // @bun
 import { createRequire } from "node:module";
+var __defProp = Object.defineProperty;
 var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
+var __returnValue = (v) => v;
+function __exportSetter(name, newValue) {
+  this[name] = __returnValue.bind(null, newValue);
+}
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: __exportSetter.bind(all, name)
+    });
+};
+var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
+// ../../node_modules/.bun/is-docker@3.0.0/node_modules/is-docker/index.js
+import fs from "node:fs";
+function hasDockerEnv() {
+  try {
+    fs.statSync("/.dockerenv");
+    return true;
+  } catch {
+    return false;
+  }
+}
+function hasDockerCGroup() {
+  try {
+    return fs.readFileSync("/proc/self/cgroup", "utf8").includes("docker");
+  } catch {
+    return false;
+  }
+}
+function isDocker() {
+  if (isDockerCached === undefined) {
+    isDockerCached = hasDockerEnv() || hasDockerCGroup();
+  }
+  return isDockerCached;
+}
+var isDockerCached;
+var init_is_docker = () => {};
+
+// ../../node_modules/.bun/is-inside-container@1.0.0/node_modules/is-inside-container/index.js
+import fs2 from "node:fs";
+function isInsideContainer() {
+  if (cachedResult === undefined) {
+    cachedResult = hasContainerEnv() || isDocker();
+  }
+  return cachedResult;
+}
+var cachedResult, hasContainerEnv = () => {
+  try {
+    fs2.statSync("/run/.containerenv");
+    return true;
+  } catch {
+    return false;
+  }
+};
+var init_is_inside_container = __esm(() => {
+  init_is_docker();
+});
+
+// ../../node_modules/.bun/is-wsl@3.1.1/node_modules/is-wsl/index.js
+import process2 from "node:process";
+import os from "node:os";
+import fs3 from "node:fs";
+var isWsl = () => {
+  if (process2.platform !== "linux") {
+    return false;
+  }
+  if (os.release().toLowerCase().includes("microsoft")) {
+    if (isInsideContainer()) {
+      return false;
+    }
+    return true;
+  }
+  try {
+    if (fs3.readFileSync("/proc/version", "utf8").toLowerCase().includes("microsoft")) {
+      return !isInsideContainer();
+    }
+  } catch {}
+  if (fs3.existsSync("/proc/sys/fs/binfmt_misc/WSLInterop") || fs3.existsSync("/run/WSL")) {
+    return !isInsideContainer();
+  }
+  return false;
+}, is_wsl_default;
+var init_is_wsl = __esm(() => {
+  init_is_inside_container();
+  is_wsl_default = process2.env.__IS_WSL_TEST__ ? isWsl : isWsl();
+});
+
+// ../../node_modules/.bun/powershell-utils@0.1.0/node_modules/powershell-utils/index.js
+import process3 from "node:process";
+import { Buffer as Buffer2 } from "node:buffer";
+import { promisify } from "node:util";
+import childProcess from "node:child_process";
+var execFile, powerShellPath = () => `${process3.env.SYSTEMROOT || process3.env.windir || String.raw`C:\Windows`}\\System32\\WindowsPowerShell\\v1.0\\powershell.exe`, executePowerShell = async (command, options = {}) => {
+  const {
+    powerShellPath: psPath,
+    ...execFileOptions
+  } = options;
+  const encodedCommand = executePowerShell.encodeCommand(command);
+  return execFile(psPath ?? powerShellPath(), [
+    ...executePowerShell.argumentsPrefix,
+    encodedCommand
+  ], {
+    encoding: "utf8",
+    ...execFileOptions
+  });
+};
+var init_powershell_utils = __esm(() => {
+  execFile = promisify(childProcess.execFile);
+  executePowerShell.argumentsPrefix = [
+    "-NoProfile",
+    "-NonInteractive",
+    "-ExecutionPolicy",
+    "Bypass",
+    "-EncodedCommand"
+  ];
+  executePowerShell.encodeCommand = (command) => Buffer2.from(command, "utf16le").toString("base64");
+  executePowerShell.escapeArgument = (value) => `'${String(value).replaceAll("'", "''")}'`;
+});
+
+// ../../node_modules/.bun/wsl-utils@0.3.1/node_modules/wsl-utils/utilities.js
+function parseMountPointFromConfig(content) {
+  for (const line of content.split(`
+`)) {
+    if (/^\s*#/.test(line)) {
+      continue;
+    }
+    const match = /^\s*root\s*=\s*(?<mountPoint>"[^"]*"|'[^']*'|[^#]*)/.exec(line);
+    if (!match) {
+      continue;
+    }
+    return match.groups.mountPoint.trim().replaceAll(/^["']|["']$/g, "");
+  }
+}
+
+// ../../node_modules/.bun/wsl-utils@0.3.1/node_modules/wsl-utils/index.js
+import { promisify as promisify2 } from "node:util";
+import childProcess2 from "node:child_process";
+import fs4, { constants as fsConstants } from "node:fs/promises";
+var execFile2, wslDrivesMountPoint, powerShellPathFromWsl = async () => {
+  const mountPoint = await wslDrivesMountPoint();
+  return `${mountPoint}c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe`;
+}, powerShellPath2, canAccessPowerShellPromise, canAccessPowerShell = async () => {
+  canAccessPowerShellPromise ??= (async () => {
+    try {
+      const psPath = await powerShellPath2();
+      await fs4.access(psPath, fsConstants.X_OK);
+      return true;
+    } catch {
+      return false;
+    }
+  })();
+  return canAccessPowerShellPromise;
+}, wslDefaultBrowser = async () => {
+  const psPath = await powerShellPath2();
+  const command = String.raw`(Get-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice").ProgId`;
+  const { stdout } = await executePowerShell(command, { powerShellPath: psPath });
+  return stdout.trim();
+}, convertWslPathToWindows = async (path) => {
+  if (/^[a-z]+:\/\//i.test(path)) {
+    return path;
+  }
+  try {
+    const { stdout } = await execFile2("wslpath", ["-aw", path], { encoding: "utf8" });
+    return stdout.trim();
+  } catch {
+    return path;
+  }
+};
+var init_wsl_utils = __esm(() => {
+  init_is_wsl();
+  init_powershell_utils();
+  init_is_wsl();
+  execFile2 = promisify2(childProcess2.execFile);
+  wslDrivesMountPoint = (() => {
+    const defaultMountPoint = "/mnt/";
+    let mountPoint;
+    return async function() {
+      if (mountPoint) {
+        return mountPoint;
+      }
+      const configFilePath = "/etc/wsl.conf";
+      let isConfigFileExists = false;
+      try {
+        await fs4.access(configFilePath, fsConstants.F_OK);
+        isConfigFileExists = true;
+      } catch {}
+      if (!isConfigFileExists) {
+        return defaultMountPoint;
+      }
+      const configContent = await fs4.readFile(configFilePath, { encoding: "utf8" });
+      const parsedMountPoint = parseMountPointFromConfig(configContent);
+      if (parsedMountPoint === undefined) {
+        return defaultMountPoint;
+      }
+      mountPoint = parsedMountPoint;
+      mountPoint = mountPoint.endsWith("/") ? mountPoint : `${mountPoint}/`;
+      return mountPoint;
+    };
+  })();
+  powerShellPath2 = is_wsl_default ? powerShellPathFromWsl : powerShellPath;
+});
+
+// ../../node_modules/.bun/define-lazy-prop@3.0.0/node_modules/define-lazy-prop/index.js
+function defineLazyProperty(object, propertyName, valueGetter) {
+  const define = (value) => Object.defineProperty(object, propertyName, { value, enumerable: true, writable: true });
+  Object.defineProperty(object, propertyName, {
+    configurable: true,
+    enumerable: true,
+    get() {
+      const result = valueGetter();
+      define(result);
+      return result;
+    },
+    set(value) {
+      define(value);
+    }
+  });
+  return object;
+}
+
+// ../../node_modules/.bun/default-browser-id@5.0.1/node_modules/default-browser-id/index.js
+import { promisify as promisify3 } from "node:util";
+import process4 from "node:process";
+import { execFile as execFile3 } from "node:child_process";
+async function defaultBrowserId() {
+  if (process4.platform !== "darwin") {
+    throw new Error("macOS only");
+  }
+  const { stdout } = await execFileAsync("defaults", ["read", "com.apple.LaunchServices/com.apple.launchservices.secure", "LSHandlers"]);
+  const match = /LSHandlerRoleAll = "(?!-)(?<id>[^"]+?)";\s+?LSHandlerURLScheme = (?:http|https);/.exec(stdout);
+  const browserId = match?.groups.id ?? "com.apple.Safari";
+  if (browserId === "com.apple.safari") {
+    return "com.apple.Safari";
+  }
+  return browserId;
+}
+var execFileAsync;
+var init_default_browser_id = __esm(() => {
+  execFileAsync = promisify3(execFile3);
+});
+
+// ../../node_modules/.bun/run-applescript@7.1.0/node_modules/run-applescript/index.js
+import process5 from "node:process";
+import { promisify as promisify4 } from "node:util";
+import { execFile as execFile4, execFileSync } from "node:child_process";
+async function runAppleScript(script, { humanReadableOutput = true, signal } = {}) {
+  if (process5.platform !== "darwin") {
+    throw new Error("macOS only");
+  }
+  const outputArguments = humanReadableOutput ? [] : ["-ss"];
+  const execOptions = {};
+  if (signal) {
+    execOptions.signal = signal;
+  }
+  const { stdout } = await execFileAsync2("osascript", ["-e", script, outputArguments], execOptions);
+  return stdout.trim();
+}
+var execFileAsync2;
+var init_run_applescript = __esm(() => {
+  execFileAsync2 = promisify4(execFile4);
+});
+
+// ../../node_modules/.bun/bundle-name@4.1.0/node_modules/bundle-name/index.js
+async function bundleName(bundleId) {
+  return runAppleScript(`tell application "Finder" to set app_path to application file id "${bundleId}" as string
+tell application "System Events" to get value of property list item "CFBundleName" of property list file (app_path & ":Contents:Info.plist")`);
+}
+var init_bundle_name = __esm(() => {
+  init_run_applescript();
+});
+
+// ../../node_modules/.bun/default-browser@5.5.0/node_modules/default-browser/windows.js
+import { promisify as promisify5 } from "node:util";
+import { execFile as execFile5 } from "node:child_process";
+async function defaultBrowser(_execFileAsync = execFileAsync3) {
+  const { stdout } = await _execFileAsync("reg", [
+    "QUERY",
+    " HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\http\\UserChoice",
+    "/v",
+    "ProgId"
+  ]);
+  const match = /ProgId\s*REG_SZ\s*(?<id>\S+)/.exec(stdout);
+  if (!match) {
+    throw new UnknownBrowserError(`Cannot find Windows browser in stdout: ${JSON.stringify(stdout)}`);
+  }
+  const { id } = match.groups;
+  const dotIndex = id.lastIndexOf(".");
+  const hyphenIndex = id.lastIndexOf("-");
+  const baseIdByDot = dotIndex === -1 ? undefined : id.slice(0, dotIndex);
+  const baseIdByHyphen = hyphenIndex === -1 ? undefined : id.slice(0, hyphenIndex);
+  return windowsBrowserProgIds[id] ?? windowsBrowserProgIds[baseIdByDot] ?? windowsBrowserProgIds[baseIdByHyphen] ?? { name: id, id };
+}
+var execFileAsync3, windowsBrowserProgIds, _windowsBrowserProgIdMap, UnknownBrowserError;
+var init_windows = __esm(() => {
+  execFileAsync3 = promisify5(execFile5);
+  windowsBrowserProgIds = {
+    MSEdgeHTM: { name: "Edge", id: "com.microsoft.edge" },
+    MSEdgeBHTML: { name: "Edge Beta", id: "com.microsoft.edge.beta" },
+    MSEdgeDHTML: { name: "Edge Dev", id: "com.microsoft.edge.dev" },
+    AppXq0fevzme2pys62n3e0fbqa7peapykr8v: { name: "Edge", id: "com.microsoft.edge.old" },
+    ChromeHTML: { name: "Chrome", id: "com.google.chrome" },
+    ChromeBHTML: { name: "Chrome Beta", id: "com.google.chrome.beta" },
+    ChromeDHTML: { name: "Chrome Dev", id: "com.google.chrome.dev" },
+    ChromiumHTM: { name: "Chromium", id: "org.chromium.Chromium" },
+    BraveHTML: { name: "Brave", id: "com.brave.Browser" },
+    BraveBHTML: { name: "Brave Beta", id: "com.brave.Browser.beta" },
+    BraveDHTML: { name: "Brave Dev", id: "com.brave.Browser.dev" },
+    BraveSSHTM: { name: "Brave Nightly", id: "com.brave.Browser.nightly" },
+    FirefoxURL: { name: "Firefox", id: "org.mozilla.firefox" },
+    OperaStable: { name: "Opera", id: "com.operasoftware.Opera" },
+    VivaldiHTM: { name: "Vivaldi", id: "com.vivaldi.Vivaldi" },
+    "IE.HTTP": { name: "Internet Explorer", id: "com.microsoft.ie" }
+  };
+  _windowsBrowserProgIdMap = new Map(Object.entries(windowsBrowserProgIds));
+  UnknownBrowserError = class UnknownBrowserError extends Error {
+  };
+});
+
+// ../../node_modules/.bun/default-browser@5.5.0/node_modules/default-browser/index.js
+import { promisify as promisify6 } from "node:util";
+import process6 from "node:process";
+import { execFile as execFile6 } from "node:child_process";
+async function defaultBrowser2() {
+  if (process6.platform === "darwin") {
+    const id = await defaultBrowserId();
+    const name = await bundleName(id);
+    return { name, id };
+  }
+  if (process6.platform === "linux") {
+    const { stdout } = await execFileAsync4("xdg-mime", ["query", "default", "x-scheme-handler/http"]);
+    const id = stdout.trim();
+    const name = titleize(id.replace(/.desktop$/, "").replace("-", " "));
+    return { name, id };
+  }
+  if (process6.platform === "win32") {
+    return defaultBrowser();
+  }
+  throw new Error("Only macOS, Linux, and Windows are supported");
+}
+var execFileAsync4, titleize = (string) => string.toLowerCase().replaceAll(/(?:^|\s|-)\S/g, (x) => x.toUpperCase());
+var init_default_browser = __esm(() => {
+  init_default_browser_id();
+  init_bundle_name();
+  init_windows();
+  init_windows();
+  execFileAsync4 = promisify6(execFile6);
+});
+
+// ../../node_modules/.bun/is-in-ssh@1.0.0/node_modules/is-in-ssh/index.js
+import process7 from "node:process";
+var isInSsh, is_in_ssh_default;
+var init_is_in_ssh = __esm(() => {
+  isInSsh = Boolean(process7.env.SSH_CONNECTION || process7.env.SSH_CLIENT || process7.env.SSH_TTY);
+  is_in_ssh_default = isInSsh;
+});
+
+// ../../node_modules/.bun/open@11.0.0/node_modules/open/index.js
+var exports_open = {};
+__export(exports_open, {
+  openApp: () => openApp,
+  default: () => open_default,
+  apps: () => apps
+});
+import process8 from "node:process";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import childProcess3 from "node:child_process";
+import fs5, { constants as fsConstants2 } from "node:fs/promises";
+function detectArchBinary(binary) {
+  if (typeof binary === "string" || Array.isArray(binary)) {
+    return binary;
+  }
+  const { [arch]: archBinary } = binary;
+  if (!archBinary) {
+    throw new Error(`${arch} is not supported`);
+  }
+  return archBinary;
+}
+function detectPlatformBinary({ [platform]: platformBinary }, { wsl } = {}) {
+  if (wsl && is_wsl_default) {
+    return detectArchBinary(wsl);
+  }
+  if (!platformBinary) {
+    throw new Error(`${platform} is not supported`);
+  }
+  return detectArchBinary(platformBinary);
+}
+var fallbackAttemptSymbol, __dirname2, localXdgOpenPath, platform, arch, tryEachApp = async (apps, opener) => {
+  if (apps.length === 0) {
+    return;
+  }
+  const errors = [];
+  for (const app of apps) {
+    try {
+      return await opener(app);
+    } catch (error) {
+      errors.push(error);
+    }
+  }
+  throw new AggregateError(errors, "Failed to open in all supported apps");
+}, baseOpen = async (options) => {
+  options = {
+    wait: false,
+    background: false,
+    newInstance: false,
+    allowNonzeroExitCode: false,
+    ...options
+  };
+  const isFallbackAttempt = options[fallbackAttemptSymbol] === true;
+  delete options[fallbackAttemptSymbol];
+  if (Array.isArray(options.app)) {
+    return tryEachApp(options.app, (singleApp) => baseOpen({
+      ...options,
+      app: singleApp,
+      [fallbackAttemptSymbol]: true
+    }));
+  }
+  let { name: app, arguments: appArguments = [] } = options.app ?? {};
+  appArguments = [...appArguments];
+  if (Array.isArray(app)) {
+    return tryEachApp(app, (appName) => baseOpen({
+      ...options,
+      app: {
+        name: appName,
+        arguments: appArguments
+      },
+      [fallbackAttemptSymbol]: true
+    }));
+  }
+  if (app === "browser" || app === "browserPrivate") {
+    const ids = {
+      "com.google.chrome": "chrome",
+      "google-chrome.desktop": "chrome",
+      "com.brave.browser": "brave",
+      "org.mozilla.firefox": "firefox",
+      "firefox.desktop": "firefox",
+      "com.microsoft.msedge": "edge",
+      "com.microsoft.edge": "edge",
+      "com.microsoft.edgemac": "edge",
+      "microsoft-edge.desktop": "edge",
+      "com.apple.safari": "safari"
+    };
+    const flags = {
+      chrome: "--incognito",
+      brave: "--incognito",
+      firefox: "--private-window",
+      edge: "--inPrivate"
+    };
+    let browser;
+    if (is_wsl_default) {
+      const progId = await wslDefaultBrowser();
+      const browserInfo = _windowsBrowserProgIdMap.get(progId);
+      browser = browserInfo ?? {};
+    } else {
+      browser = await defaultBrowser2();
+    }
+    if (browser.id in ids) {
+      const browserName = ids[browser.id.toLowerCase()];
+      if (app === "browserPrivate") {
+        if (browserName === "safari") {
+          throw new Error("Safari doesn't support opening in private mode via command line");
+        }
+        appArguments.push(flags[browserName]);
+      }
+      return baseOpen({
+        ...options,
+        app: {
+          name: apps[browserName],
+          arguments: appArguments
+        }
+      });
+    }
+    throw new Error(`${browser.name} is not supported as a default browser`);
+  }
+  let command;
+  const cliArguments = [];
+  const childProcessOptions = {};
+  let shouldUseWindowsInWsl = false;
+  if (is_wsl_default && !isInsideContainer() && !is_in_ssh_default && !app) {
+    shouldUseWindowsInWsl = await canAccessPowerShell();
+  }
+  if (platform === "darwin") {
+    command = "open";
+    if (options.wait) {
+      cliArguments.push("--wait-apps");
+    }
+    if (options.background) {
+      cliArguments.push("--background");
+    }
+    if (options.newInstance) {
+      cliArguments.push("--new");
+    }
+    if (app) {
+      cliArguments.push("-a", app);
+    }
+  } else if (platform === "win32" || shouldUseWindowsInWsl) {
+    command = await powerShellPath2();
+    cliArguments.push(...executePowerShell.argumentsPrefix);
+    if (!is_wsl_default) {
+      childProcessOptions.windowsVerbatimArguments = true;
+    }
+    if (is_wsl_default && options.target) {
+      options.target = await convertWslPathToWindows(options.target);
+    }
+    const encodedArguments = ["$ProgressPreference = 'SilentlyContinue';", "Start"];
+    if (options.wait) {
+      encodedArguments.push("-Wait");
+    }
+    if (app) {
+      encodedArguments.push(executePowerShell.escapeArgument(app));
+      if (options.target) {
+        appArguments.push(options.target);
+      }
+    } else if (options.target) {
+      encodedArguments.push(executePowerShell.escapeArgument(options.target));
+    }
+    if (appArguments.length > 0) {
+      appArguments = appArguments.map((argument) => executePowerShell.escapeArgument(argument));
+      encodedArguments.push("-ArgumentList", appArguments.join(","));
+    }
+    options.target = executePowerShell.encodeCommand(encodedArguments.join(" "));
+    if (!options.wait) {
+      childProcessOptions.stdio = "ignore";
+    }
+  } else {
+    if (app) {
+      command = app;
+    } else {
+      const isBundled = !__dirname2 || __dirname2 === "/";
+      let exeLocalXdgOpen = false;
+      try {
+        await fs5.access(localXdgOpenPath, fsConstants2.X_OK);
+        exeLocalXdgOpen = true;
+      } catch {}
+      const useSystemXdgOpen = process8.versions.electron ?? (platform === "android" || isBundled || !exeLocalXdgOpen);
+      command = useSystemXdgOpen ? "xdg-open" : localXdgOpenPath;
+    }
+    if (appArguments.length > 0) {
+      cliArguments.push(...appArguments);
+    }
+    if (!options.wait) {
+      childProcessOptions.stdio = "ignore";
+      childProcessOptions.detached = true;
+    }
+  }
+  if (platform === "darwin" && appArguments.length > 0) {
+    cliArguments.push("--args", ...appArguments);
+  }
+  if (options.target) {
+    cliArguments.push(options.target);
+  }
+  const subprocess = childProcess3.spawn(command, cliArguments, childProcessOptions);
+  if (options.wait) {
+    return new Promise((resolve, reject) => {
+      subprocess.once("error", reject);
+      subprocess.once("close", (exitCode) => {
+        if (!options.allowNonzeroExitCode && exitCode !== 0) {
+          reject(new Error(`Exited with code ${exitCode}`));
+          return;
+        }
+        resolve(subprocess);
+      });
+    });
+  }
+  if (isFallbackAttempt) {
+    return new Promise((resolve, reject) => {
+      subprocess.once("error", reject);
+      subprocess.once("spawn", () => {
+        subprocess.once("close", (exitCode) => {
+          subprocess.off("error", reject);
+          if (exitCode !== 0) {
+            reject(new Error(`Exited with code ${exitCode}`));
+            return;
+          }
+          subprocess.unref();
+          resolve(subprocess);
+        });
+      });
+    });
+  }
+  subprocess.unref();
+  return new Promise((resolve, reject) => {
+    subprocess.once("error", reject);
+    subprocess.once("spawn", () => {
+      subprocess.off("error", reject);
+      resolve(subprocess);
+    });
+  });
+}, open = (target, options) => {
+  if (typeof target !== "string") {
+    throw new TypeError("Expected a `target`");
+  }
+  return baseOpen({
+    ...options,
+    target
+  });
+}, openApp = (name, options) => {
+  if (typeof name !== "string" && !Array.isArray(name)) {
+    throw new TypeError("Expected a valid `name`");
+  }
+  const { arguments: appArguments = [] } = options ?? {};
+  if (appArguments !== undefined && appArguments !== null && !Array.isArray(appArguments)) {
+    throw new TypeError("Expected `appArguments` as Array type");
+  }
+  return baseOpen({
+    ...options,
+    app: {
+      name,
+      arguments: appArguments
+    }
+  });
+}, apps, open_default;
+var init_open = __esm(() => {
+  init_wsl_utils();
+  init_powershell_utils();
+  init_default_browser();
+  init_is_inside_container();
+  init_is_in_ssh();
+  fallbackAttemptSymbol = Symbol("fallbackAttempt");
+  __dirname2 = import.meta.url ? path.dirname(fileURLToPath(import.meta.url)) : "";
+  localXdgOpenPath = path.join(__dirname2, "xdg-open");
+  ({ platform, arch } = process8);
+  apps = {
+    browser: "browser",
+    browserPrivate: "browserPrivate"
+  };
+  defineLazyProperty(apps, "chrome", () => detectPlatformBinary({
+    darwin: "google chrome",
+    win32: "chrome",
+    linux: ["google-chrome", "google-chrome-stable", "chromium", "chromium-browser"]
+  }, {
+    wsl: {
+      ia32: "/mnt/c/Program Files (x86)/Google/Chrome/Application/chrome.exe",
+      x64: ["/mnt/c/Program Files/Google/Chrome/Application/chrome.exe", "/mnt/c/Program Files (x86)/Google/Chrome/Application/chrome.exe"]
+    }
+  }));
+  defineLazyProperty(apps, "brave", () => detectPlatformBinary({
+    darwin: "brave browser",
+    win32: "brave",
+    linux: ["brave-browser", "brave"]
+  }, {
+    wsl: {
+      ia32: "/mnt/c/Program Files (x86)/BraveSoftware/Brave-Browser/Application/brave.exe",
+      x64: ["/mnt/c/Program Files/BraveSoftware/Brave-Browser/Application/brave.exe", "/mnt/c/Program Files (x86)/BraveSoftware/Brave-Browser/Application/brave.exe"]
+    }
+  }));
+  defineLazyProperty(apps, "firefox", () => detectPlatformBinary({
+    darwin: "firefox",
+    win32: String.raw`C:\Program Files\Mozilla Firefox\firefox.exe`,
+    linux: "firefox"
+  }, {
+    wsl: "/mnt/c/Program Files/Mozilla Firefox/firefox.exe"
+  }));
+  defineLazyProperty(apps, "edge", () => detectPlatformBinary({
+    darwin: "microsoft edge",
+    win32: "msedge",
+    linux: ["microsoft-edge", "microsoft-edge-dev"]
+  }, {
+    wsl: "/mnt/c/Program Files (x86)/Microsoft/Edge/Application/msedge.exe"
+  }));
+  defineLazyProperty(apps, "safari", () => detectPlatformBinary({
+    darwin: "Safari"
+  }));
+  open_default = open;
+});
+
 // ../../node_modules/.bun/undici@6.27.0/node_modules/undici/lib/core/symbols.js
 var require_symbols = __commonJS((exports, module) => {
   module.exports = {
@@ -17001,7 +17670,7 @@ var require_eventsource = __commonJS((exports, module) => {
 
 // ../../node_modules/.bun/@trpc+client@11.17.0+f02ef5e6ba82b535/node_modules/@trpc/client/dist/objectSpread2-BvkFp-_Y.mjs
 var __create = Object.create;
-var __defProp = Object.defineProperty;
+var __defProp2 = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
@@ -17014,14 +17683,14 @@ var __copyProps = (to, from, except, desc) => {
     for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key;i < n; i++) {
       key = keys[i];
       if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, {
+        __defProp2(to, key, {
           get: ((k) => from[k]).bind(null, key),
           enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
         });
     }
   return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp2(target, "default", {
   value: mod,
   enumerable: true
 }) : target, mod));
@@ -17346,7 +18015,7 @@ var retryableRpcCodes = [
 
 // ../../node_modules/.bun/@trpc+server@11.17.0+1fb4c65d43e298b9/node_modules/@trpc/server/dist/getErrorShape-BPSzUA7W.mjs
 var __create2 = Object.create;
-var __defProp2 = Object.defineProperty;
+var __defProp3 = Object.defineProperty;
 var __getOwnPropDesc2 = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames2 = Object.getOwnPropertyNames;
 var __getProtoOf2 = Object.getPrototypeOf;
@@ -17359,14 +18028,14 @@ var __copyProps2 = (to, from, except, desc) => {
     for (var keys = __getOwnPropNames2(from), i = 0, n = keys.length, key;i < n; i++) {
       key = keys[i];
       if (!__hasOwnProp2.call(to, key) && key !== except)
-        __defProp2(to, key, {
+        __defProp3(to, key, {
           get: ((k) => from[k]).bind(null, key),
           enumerable: !(desc = __getOwnPropDesc2(from, key)) || desc.enumerable
         });
     }
   return to;
 };
-var __toESM2 = (mod, isNodeMode, target) => (target = mod != null ? __create2(__getProtoOf2(mod)) : {}, __copyProps2(isNodeMode || !mod || !mod.__esModule ? __defProp2(target, "default", {
+var __toESM2 = (mod, isNodeMode, target) => (target = mod != null ? __create2(__getProtoOf2(mod)) : {}, __copyProps2(isNodeMode || !mod || !mod.__esModule ? __defProp3(target, "default", {
   value: mod,
   enumerable: true
 }) : target, mod));
@@ -18478,7 +19147,13 @@ var import_awaitAsyncGenerator = __toESM(require_awaitAsyncGenerator(), 1);
 var import_wrapAsyncGenerator = __toESM(require_wrapAsyncGenerator(), 1);
 var import_objectSpread29 = __toESM(require_objectSpread2(), 1);
 // ../../packages/rules/src/builtin-shapes.ts
-var BUILTIN_SHAPE_NAMES = ["Pair", "Set", "List"];
+var BUILTIN_SHAPE_NAMES = [
+  "Arc",
+  "Bond",
+  "Pair",
+  "Set",
+  "List"
+];
 var RETIRED_COLLECTION_SHAPE_NAMES = ["Triple"];
 var RESERVED_COLLECTION_SHAPE_NAMES = [
   ...BUILTIN_SHAPE_NAMES,
@@ -18503,6 +19178,25 @@ function isBuiltinShape(name) {
   return BUILTIN_SHAPE_NAMES.includes(name) || BUILTIN_CONTENT_SHAPE_NAMES.includes(name);
 }
 var BUILTIN_SHAPE_DEFS = {
+  Arc: {
+    fields: {
+      from: {
+        type: "wref",
+        description: "Origin of the directed relationship"
+      },
+      to: {
+        type: "wref",
+        description: "Destination of the directed relationship"
+      }
+    },
+    description: "A directed relationship between two things"
+  },
+  Bond: {
+    fields: {
+      ends: [{ type: "wref", description: "Endpoints of the relationship" }]
+    },
+    description: "A symmetric relationship between two things"
+  },
   Pair: {
     fields: {
       first: { type: "wref", description: "First member of the pair" },
@@ -18618,6 +19312,11 @@ function stableJsonEquals(left, right) {
   return stableJson(left) === stableJson(right);
 }
 
+// ../../packages/rules/src/org-activity-events.ts
+var ORG_MEMBER_ADDED_EVENT_TYPE = "org.member_added";
+var ORG_REPO_CREATED_EVENT_TYPE = "org.repo_created";
+var ORG_REPO_PUBLISHED_EVENT_TYPE = "org.repo_published";
+
 // ../../packages/rules/src/subscribable-events.ts
 var COMMIT_EVENT_TYPE = "commit";
 var REPO_RENAMED_EVENT_TYPE = "repo.renamed";
@@ -18628,6 +19327,9 @@ var SUBSCRIBABLE_EVENT_TYPES = [
   COMMIT_EVENT_TYPE,
   REPO_RENAMED_EVENT_TYPE,
   ORG_RENAMED_EVENT_TYPE,
+  ORG_MEMBER_ADDED_EVENT_TYPE,
+  ORG_REPO_CREATED_EVENT_TYPE,
+  ORG_REPO_PUBLISHED_EVENT_TYPE,
   THING_RENAMED_EVENT_TYPE,
   SHAPE_RENAMED_EVENT_TYPE
 ];
@@ -18637,6 +19339,15 @@ var REPO_SCOPED_EVENT_TYPES = [
   THING_RENAMED_EVENT_TYPE,
   SHAPE_RENAMED_EVENT_TYPE
 ];
+var ORG_SCOPED_EVENT_TYPES = [
+  ORG_RENAMED_EVENT_TYPE,
+  ORG_MEMBER_ADDED_EVENT_TYPE,
+  ORG_REPO_CREATED_EVENT_TYPE,
+  ORG_REPO_PUBLISHED_EVENT_TYPE
+];
+function isOrgScopedEventType(eventType) {
+  return ORG_SCOPED_EVENT_TYPES.includes(eventType);
+}
 
 // ../../packages/rules/src/component-install.ts
 function manifestShapeData(shape) {
@@ -19735,7 +20446,9 @@ function preflightOpDiagnostics(op, operationIndex) {
 function builtinShapeGuard(op, operationIndex) {
   const errors = [];
   const name = op.name;
-  if (name && isRetiredCollectionShape(name)) {
+  const isShapeRename = op.operation === "rename" && (op.kind === "shape" || op.name !== undefined && !splitLocalPath(op.name));
+  const reservedSourcePassThrough = isShapeRename && name !== undefined && isReservedCollectionShape(name) && op.newName !== undefined && !isReservedCollectionShape(op.newName) && !isBuiltinShape(op.newName);
+  if (name && isRetiredCollectionShape(name) && !reservedSourcePassThrough) {
     errors.push({
       code: "RESERVED_NAME",
       operationIndex,
@@ -19749,8 +20462,7 @@ function builtinShapeGuard(op, operationIndex) {
       message: `Shape "${op.newName}" is a retired collection shape and cannot be written manually`
     });
   } else {
-    const isShapeRename = op.operation === "rename" && (op.kind === "shape" || op.name !== undefined && !splitLocalPath(op.name));
-    const builtinShapeName = name && isBuiltinShape(name) ? name : isShapeRename && op.newName && isBuiltinShape(op.newName) ? op.newName : undefined;
+    const builtinShapeName = name && isBuiltinShape(name) && !reservedSourcePassThrough ? name : isShapeRename && op.newName && isBuiltinShape(op.newName) ? op.newName : undefined;
     if (builtinShapeName && (isShapeRename || op.operation !== "retract" && op.kind === "shape")) {
       const action = op.operation === "add" ? "created" : op.operation === "rename" ? "renamed" : "revised";
       errors.push({
@@ -27136,7 +27848,7 @@ function findSystemComponent(componentId) {
 // ../../packages/sdk-ts/package.json
 var package_default = {
   name: "@warmhub/sdk-ts",
-  version: "0.69.1",
+  version: "0.71.0",
   private: false,
   type: "module",
   description: "The TypeScript SDK for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",
@@ -28501,6 +29213,15 @@ class WarmHubClient {
         throw toWarmHubError(error);
       }
     },
+    leave: async (orgName) => {
+      try {
+        await this.trpc.org.leave.mutate({
+          orgName
+        });
+      } catch (error) {
+        throw toWarmHubError(error);
+      }
+    },
     changeMemberRole: async (orgName, email, role) => {
       try {
         return await this.trpc.org.changeMemberRole.mutate({
@@ -29107,7 +29828,9 @@ class WarmHubClient {
           repoName,
           subscriptionName: opts?.subscriptionName,
           status: opts?.status,
+          outcome: opts?.outcome,
           since: opts?.since,
+          cursor: opts?.cursor,
           limit: opts?.limit
         });
       } catch (error) {
@@ -30100,6 +30823,13 @@ function parseSseChunk(chunk) {
 function isAbortError2(error) {
   return error instanceof Error && error.name === "AbortError";
 }
+var _orgActivityNeedsNoFilter = ["org.member_added", "org.repo_created", "org.repo_published"].map((eventType) => ({
+  orgName: "o",
+  name: "n",
+  kind: "webhook",
+  eventType,
+  webhookUrl: "https://x"
+}));
 
 // ../../packages/warmhub-cli/src/errors-classification.ts
 function unauthenticatedHint(message) {
@@ -30179,6 +30909,7 @@ var TOP_LEVEL_USER_INPUT_CODES = new Set([
 ]);
 var CONFLICT_SHAPED_CODES = new Set([
   "CONFLICT",
+  "BUILTIN_SHAPE_CONFLICT",
   "ARCHIVED",
   "HAS_INBOUND_REFS",
   "REPO_PENDING_DELETE",
@@ -32648,10 +33379,11 @@ function formatTime(ts, now) {
   return d.toISOString().slice(0, 16).replace("T", " ");
 }
 function pinnedWref(c, wref, version) {
-  if (version == null)
-    return `${c.cyan}${wref}${c.reset}`;
+  if (version == null) {
+    return `${c.cyan}${escapeTerminalTextForDisplay(wref)}${c.reset}`;
+  }
   const base = wref.replace(/@v\d+$/, "");
-  return `${c.cyan}${base}@v${version}${c.reset}`;
+  return `${c.cyan}${escapeTerminalTextForDisplay(base)}@v${version}${c.reset}`;
 }
 function kindLabel(c, kind) {
   return `${c.dim}${kind}${c.reset}`;
@@ -32686,7 +33418,7 @@ function effectiveKind(kind, shapeName) {
 }
 function displayName(c, name) {
   if (name)
-    return `${c.cyan}${name}${c.reset}`;
+    return `${c.cyan}${escapeTerminalTextForDisplay(name)}${c.reset}`;
   return `${c.dim}(unnamed)${c.reset}`;
 }
 function extractShapeName(name) {
@@ -33227,12 +33959,51 @@ function renderAboutAssertion(out, c, assertion, indent) {
   }
 }
 
+// ../../packages/warmhub-cli/src/json-object-input.ts
+import { readFile } from "node:fs/promises";
+function parseWithCommandHint(input, label, example) {
+  try {
+    return parseJsonObject(input, label);
+  } catch (error) {
+    if (error instanceof CliError && error.kind === "USER_INPUT") {
+      throw new CliError(error.code, error.kind, error.message, error.cause, `Example: ${example}`, error.context, error.backendCode);
+    }
+    throw error;
+  }
+}
+async function readJsonObjectInput({
+  inline,
+  file,
+  inlineFlag,
+  missingMessage,
+  example
+}) {
+  if (inline !== undefined && file !== undefined) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", `${inlineFlag} cannot be combined with --file`, undefined, `Example: ${example}`);
+  }
+  if (inline !== undefined)
+    return parseWithCommandHint(inline, inlineFlag, example);
+  if (file === undefined) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", missingMessage ?? `${inlineFlag} or --file is required`, undefined, `Example: ${example}`);
+  }
+  let contents;
+  try {
+    contents = await readFile(file, "utf8");
+  } catch (error) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", `Cannot read file '${file}': ${error instanceof Error ? error.message : String(error)}`, undefined, `Example: ${example}`);
+  }
+  return parseWithCommandHint(contents, "--file contents", example);
+}
+
 // ../../packages/warmhub-cli/src/domains/thing/create.ts
 var createFlags2 = {
   shape: flag.string({ description: "Shape for the new thing" }),
   data: flag.string({
     description: `Thing data as a JSON object, e.g. '{"score":1}' (non-object payloads are rejected)`
   }),
+  file: flag.string({
+    description: "read thing data from a JSON object file (portable alternative to inline --data)"
+  }),
   message: flag.string({ short: "m", description: "Commit message" }),
   committer: flag.string({
     description: "Committer wref (shape or shaped thing; e.g. Agent/bot-1)"
@@ -33242,7 +34013,7 @@ var handleCreate2 = async (ctx, { flags, args }) => {
   const rawName = args[0];
   const shape = flags.shape;
   if (!rawName || !shape && !rawName.includes("/")) {
-    usageError("Usage: wh thing create <name|Shape/name> [--shape <shape>] --data <json-object>", `wh thing create player-1 --shape Player --data '{"score":1}'`);
+    usageError("Usage: wh thing create <name|Shape/name> [--shape <shape>] (--data <json-object> | --file <path>)", `wh thing create player-1 --shape Player --data '{"score":1}'`, "wh thing create player-1 --shape Player --file data.json");
   }
   if (shape && rawName.includes("/")) {
     usageError("Usage: wh thing create <name> --shape <shape> --data <json-object>", `wh thing create alice --shape Player --data '{"score":1}'`);
@@ -33250,10 +34021,13 @@ var handleCreate2 = async (ctx, { flags, args }) => {
   const { org, repo } = parseOrgRepo(getRepoRef(ctx), ctx.config);
   const committer = flags.committer;
   const message = flags.message;
-  if (flags.data === undefined) {
-    usageError("--data is required for create", `wh thing create player-1 --shape Player --data '{"score":1}'`);
-  }
-  const data = parseJsonObject(flags.data, "--data");
+  const data = await readJsonObjectInput({
+    inline: flags.data,
+    file: flags.file,
+    inlineFlag: "--data",
+    missingMessage: "--data is required for create unless --file is provided",
+    example: "wh thing create Profile/alice --file data.json"
+  });
   const name = shape ? `${shape}/${rawName}` : rawName;
   const c = ctx.colors;
   const result = await ctx.client.commit.apply(org, repo, message ?? `create ${name}`, [
@@ -33468,15 +34242,15 @@ function renderHead(out, c, chars, result, org, repo, shape, kind) {
     const fields = shapeName && (item.kind === "thing" || item.kind === "collection") && item.data ? collectionFields(shapeName, item.data) : null;
     if (fields) {
       const allWrefs = fields.flatMap((f) => f.wrefs);
-      out(`    ${allWrefs.map((w) => pinnedWref(c, escapeTerminalTextForDisplay(w))).join(`${c.dim},${c.reset} `)}`);
+      out(`    ${allWrefs.map((w) => pinnedWref(c, w)).join(`${c.dim},${c.reset} `)}`);
     } else if (item.data && typeof item.data === "object") {
       const preview = JSON.stringify(item.data);
       const truncated = preview.length > 80 ? `${preview.slice(0, 77)}...` : preview;
-      out(`    ${c.dim}${truncated}${c.reset}`);
+      out(`    ${c.dim}${escapeTerminalTextForDisplay(truncated)}${c.reset}`);
     }
     const itemMeta = item.metadata;
     if (itemMeta?.durableId) {
-      out(`    ${c.dim}durableId:${c.reset} ${styleDurableId(itemMeta.durableId, c)}`);
+      out(`    ${c.dim}durableId:${c.reset} ${styleDurableId(escapeTerminalTextForDisplay(itemMeta.durableId), c)}`);
     }
   }
   out(`${c.dim}${items.length} item(s)${c.reset}`);
@@ -33487,7 +34261,7 @@ function renderThing(out, c, result) {
   const displayKind = effectiveKind(result.kind ?? "thing", shapeName);
   const retractedTag = result.active === false ? `  ${c.red}[RETRACTED]${c.reset}` : "";
   out(`${pinnedWref(c, wref, result.version)}  ${kindLabel(c, displayKind)}${retractedTag}`);
-  out(`  ${c.dim}wref:${c.reset}      ${wref}`);
+  out(`  ${c.dim}wref:${c.reset}      ${escapeTerminalTextForDisplay(wref)}`);
   out(`  ${c.dim}version:${c.reset}   ${result.version ?? "-"}`);
   out(`  ${c.dim}active:${c.reset}    ${String(result.active)}`);
   if (result.committerWref) {
@@ -33495,13 +34269,13 @@ function renderThing(out, c, result) {
   }
   const aboutWref = result.aboutWref ?? result.about;
   if (aboutWref) {
-    out(`  ${c.dim}about:${c.reset}     ${String(aboutWref)}`);
+    out(`  ${c.dim}about:${c.reset}     ${escapeTerminalTextForDisplay(String(aboutWref))}`);
   }
   const meta = result.metadata;
   if (meta?.durableId || meta?.createdOn || meta?.revisedOn) {
     const now = Date.now();
     if (meta.durableId) {
-      out(`  ${c.dim}durableId:${c.reset} ${styleDurableId(meta.durableId, c)}`);
+      out(`  ${c.dim}durableId:${c.reset} ${styleDurableId(escapeTerminalTextForDisplay(meta.durableId), c)}`);
     }
     if (meta.createdOn) {
       out(`  ${c.dim}createdOn:${c.reset}  ${formatTime(meta.createdOn, now)}`);
@@ -33518,11 +34292,11 @@ function renderThing(out, c, result) {
     for (const field of fields) {
       if (field.wrefs.length === 1) {
         const pad = " ".repeat(Math.max(1, 9 - field.name.length));
-        out(`  ${c.dim}${field.name}:${c.reset}${pad}${pinnedWref(c, escapeTerminalTextForDisplay(field.wrefs[0]))}`);
+        out(`  ${c.dim}${escapeTerminalTextForDisplay(field.name)}:${c.reset}${pad}${pinnedWref(c, field.wrefs[0])}`);
       } else {
-        out(`  ${c.dim}${field.name}:${c.reset}`);
+        out(`  ${c.dim}${escapeTerminalTextForDisplay(field.name)}:${c.reset}`);
         for (const w of field.wrefs) {
-          out(`    ${pinnedWref(c, escapeTerminalTextForDisplay(w))}`);
+          out(`    ${pinnedWref(c, w)}`);
         }
       }
     }
@@ -33531,7 +34305,7 @@ function renderThing(out, c, result) {
     const lines = JSON.stringify(result.data, null, 2).split(`
 `);
     for (const line of lines) {
-      out(`    ${line}`);
+      out(`    ${escapeTerminalTextForDisplay(line)}`);
     }
   }
 }
@@ -33547,14 +34321,14 @@ function renderCollectionSummary(out, c, collection) {
     return;
   out(`  ${c.dim}preview:${c.reset}`);
   for (const wref of preview) {
-    out(`    ${pinnedWref(c, escapeTerminalTextForDisplay(wref))}`);
+    out(`    ${pinnedWref(c, wref)}`);
   }
 }
 function renderDataBlock(out, data, indent) {
   const lines = JSON.stringify(data, null, 2).split(`
 `);
   for (const line of lines) {
-    out(`${indent}${line}`);
+    out(`${indent}${escapeTerminalTextForDisplay(line)}`);
   }
 }
 function renderGraphValue(out, c, value, indent) {
@@ -33594,7 +34368,7 @@ function renderGraphNode(out, c, result, indent = "") {
   if (resolvedEntries.length > 0) {
     out(`${indent}  ${c.dim}resolved:${c.reset}`);
     for (const [fieldPath, value] of resolvedEntries) {
-      out(`${indent}    ${c.dim}${fieldPath}:${c.reset}`);
+      out(`${indent}    ${c.dim}${escapeTerminalTextForDisplay(fieldPath)}:${c.reset}`);
       renderGraphValue(out, c, value, `${indent}      `);
     }
   }
@@ -33620,7 +34394,7 @@ function renderHistory(out, c, result) {
   }
   const firstMeta = result.versions?.[0]?.metadata;
   if (firstMeta?.durableId) {
-    out(`  ${c.dim}durableId:${c.reset} ${styleDurableId(firstMeta.durableId, c)}`);
+    out(`  ${c.dim}durableId:${c.reset} ${styleDurableId(escapeTerminalTextForDisplay(firstMeta.durableId), c)}`);
   }
   const versions = result.versions ?? [];
   const now = Date.now();
@@ -33629,7 +34403,7 @@ function renderHistory(out, c, result) {
     if (ver.operation === "add") {
       op = `${c.green}add${c.reset}`;
     } else if (ver.operation === "retract") {
-      const reason = ver.retractReason ? ` ${c.dim}'${ver.retractReason.length > 80 ? `${ver.retractReason.slice(0, 77)}...` : ver.retractReason}'${c.reset}` : "";
+      const reason = ver.retractReason ? ` ${c.dim}'${escapeTerminalTextForDisplay(ver.retractReason.length > 80 ? `${ver.retractReason.slice(0, 77)}...` : ver.retractReason)}'${c.reset}` : "";
       op = `${c.red}retract${c.reset}${reason}`;
     } else {
       op = `${c.yellow}revise${c.reset}`;
@@ -33650,12 +34424,12 @@ function renderRefs(out, c, result, wref, direction) {
     return;
   }
   const label = direction === "inbound" ? "References to" : "Referenced by";
-  out(`${c.bold}${label}${c.reset} ${c.cyan}${wref}${c.reset}`);
+  out(`${c.bold}${label}${c.reset} ${c.cyan}${escapeTerminalTextForDisplay(wref)}${c.reset}`);
   out(`${c.dim}${"─".repeat(60)}${c.reset}`);
   for (const item of items) {
     const refWref = pinnedWref(c, item.wref, item.version);
     const kl = kindLabel(c, effectiveKind(item.kind ?? "thing", item.shapeName));
-    const field = `${c.dim}via ${c.reset}${item.fieldPath}`;
+    const field = `${c.dim}via ${c.reset}${escapeTerminalTextForDisplay(item.fieldPath ?? "(unknown)")}`;
     out(`  ${refWref}  ${kl}  ${field}`);
   }
   out(`${c.dim}${items.length} ref(s)${c.reset}`);
@@ -33685,7 +34459,7 @@ function renderBatchView(out, c, result, wrefs, flagsVersion) {
     if (event.kind === "miss")
       continue;
     if (event.kind === "desync") {
-      out(`  ${event.requested}  ${c.red}[no result]${c.reset}`);
+      out(`  ${escapeTerminalTextForDisplay(event.requested)}  ${c.red}[no result]${c.reset}`);
       continue;
     }
     const { requested, item } = event;
@@ -33694,12 +34468,12 @@ function renderBatchView(out, c, result, wrefs, flagsVersion) {
     const base = requestedBase.length > 0 ? requestedBase : fallback.replace(/@v\d+$/, "");
     const kl = kindLabel(c, effectiveKind(item.kind ?? "thing", item.shapeName));
     const retractedTag = item.active === false ? `  ${c.red}[RETRACTED]${c.reset}` : "";
-    out(`  ${base}@v${item.version}  ${kl}${retractedTag}`);
+    out(`  ${escapeTerminalTextForDisplay(base)}@v${item.version}  ${kl}${retractedTag}`);
   }
   if (result.missing.length > 0) {
     out("Missing:");
     for (const wref of result.missing) {
-      out(`  ${wref}`);
+      out(`  ${escapeTerminalTextForDisplay(wref)}`);
     }
   }
 }
@@ -34459,7 +35233,7 @@ var handleResolve = async (ctx, { args }) => {
   writeOutput(ctx, result, () => {
     const wref2 = result.wref ?? result.name ?? "(unknown)";
     ctx.out(`${pinnedWref(c, wref2, result.version)}  ${kindLabel(c, result.kind ?? "thing")}`);
-    ctx.out(`  ${c.dim}wref:${c.reset}      ${wref2}`);
+    ctx.out(`  ${c.dim}wref:${c.reset}      ${escapeTerminalTextForDisplay(wref2)}`);
     ctx.out(`  ${c.dim}version:${c.reset}   ${result.version ?? "-"}`);
     ctx.out(`  ${c.dim}active:${c.reset}    ${String(result.active)}`);
   });
@@ -34700,8 +35474,8 @@ async function readContentInput(filePath, inline, stdinStream) {
   if (inline !== undefined)
     return inline;
   if (filePath && filePath !== "-") {
-    const { readFile } = await import("node:fs/promises");
-    return await readFile(filePath, "utf8");
+    const { readFile: readFile2 } = await import("node:fs/promises");
+    return await readFile2(filePath, "utf8");
   }
   const input = stdinStream ?? process.stdin;
   if (isTTY(input)) {
@@ -34971,6 +35745,7 @@ var THING_DOMAIN = defineDomain({
       flags: createFlags2,
       examples: [
         `wh thing create player-1 --shape Player --data '{"score":1}'`,
+        "wh thing create player-1 --shape Player --file data.json",
         `wh thing create Player/player-1 --data '{"score":1}'`
       ],
       handler: handleCreate2
@@ -35428,616 +36203,6 @@ var ASSERTION_DOMAIN = defineDomain({
   }
 });
 
-// ../../node_modules/.bun/open@11.0.0/node_modules/open/index.js
-import process8 from "node:process";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import childProcess3 from "node:child_process";
-import fs5, { constants as fsConstants2 } from "node:fs/promises";
-
-// ../../node_modules/.bun/wsl-utils@0.3.1/node_modules/wsl-utils/index.js
-import { promisify as promisify2 } from "node:util";
-import childProcess2 from "node:child_process";
-import fs4, { constants as fsConstants } from "node:fs/promises";
-
-// ../../node_modules/.bun/is-wsl@3.1.1/node_modules/is-wsl/index.js
-import process2 from "node:process";
-import os from "node:os";
-import fs3 from "node:fs";
-
-// ../../node_modules/.bun/is-inside-container@1.0.0/node_modules/is-inside-container/index.js
-import fs2 from "node:fs";
-
-// ../../node_modules/.bun/is-docker@3.0.0/node_modules/is-docker/index.js
-import fs from "node:fs";
-var isDockerCached;
-function hasDockerEnv() {
-  try {
-    fs.statSync("/.dockerenv");
-    return true;
-  } catch {
-    return false;
-  }
-}
-function hasDockerCGroup() {
-  try {
-    return fs.readFileSync("/proc/self/cgroup", "utf8").includes("docker");
-  } catch {
-    return false;
-  }
-}
-function isDocker() {
-  if (isDockerCached === undefined) {
-    isDockerCached = hasDockerEnv() || hasDockerCGroup();
-  }
-  return isDockerCached;
-}
-
-// ../../node_modules/.bun/is-inside-container@1.0.0/node_modules/is-inside-container/index.js
-var cachedResult;
-var hasContainerEnv = () => {
-  try {
-    fs2.statSync("/run/.containerenv");
-    return true;
-  } catch {
-    return false;
-  }
-};
-function isInsideContainer() {
-  if (cachedResult === undefined) {
-    cachedResult = hasContainerEnv() || isDocker();
-  }
-  return cachedResult;
-}
-
-// ../../node_modules/.bun/is-wsl@3.1.1/node_modules/is-wsl/index.js
-var isWsl = () => {
-  if (process2.platform !== "linux") {
-    return false;
-  }
-  if (os.release().toLowerCase().includes("microsoft")) {
-    if (isInsideContainer()) {
-      return false;
-    }
-    return true;
-  }
-  try {
-    if (fs3.readFileSync("/proc/version", "utf8").toLowerCase().includes("microsoft")) {
-      return !isInsideContainer();
-    }
-  } catch {}
-  if (fs3.existsSync("/proc/sys/fs/binfmt_misc/WSLInterop") || fs3.existsSync("/run/WSL")) {
-    return !isInsideContainer();
-  }
-  return false;
-};
-var is_wsl_default = process2.env.__IS_WSL_TEST__ ? isWsl : isWsl();
-
-// ../../node_modules/.bun/powershell-utils@0.1.0/node_modules/powershell-utils/index.js
-import process3 from "node:process";
-import { Buffer as Buffer2 } from "node:buffer";
-import { promisify } from "node:util";
-import childProcess from "node:child_process";
-var execFile = promisify(childProcess.execFile);
-var powerShellPath = () => `${process3.env.SYSTEMROOT || process3.env.windir || String.raw`C:\Windows`}\\System32\\WindowsPowerShell\\v1.0\\powershell.exe`;
-var executePowerShell = async (command, options = {}) => {
-  const {
-    powerShellPath: psPath,
-    ...execFileOptions
-  } = options;
-  const encodedCommand = executePowerShell.encodeCommand(command);
-  return execFile(psPath ?? powerShellPath(), [
-    ...executePowerShell.argumentsPrefix,
-    encodedCommand
-  ], {
-    encoding: "utf8",
-    ...execFileOptions
-  });
-};
-executePowerShell.argumentsPrefix = [
-  "-NoProfile",
-  "-NonInteractive",
-  "-ExecutionPolicy",
-  "Bypass",
-  "-EncodedCommand"
-];
-executePowerShell.encodeCommand = (command) => Buffer2.from(command, "utf16le").toString("base64");
-executePowerShell.escapeArgument = (value) => `'${String(value).replaceAll("'", "''")}'`;
-
-// ../../node_modules/.bun/wsl-utils@0.3.1/node_modules/wsl-utils/utilities.js
-function parseMountPointFromConfig(content) {
-  for (const line of content.split(`
-`)) {
-    if (/^\s*#/.test(line)) {
-      continue;
-    }
-    const match = /^\s*root\s*=\s*(?<mountPoint>"[^"]*"|'[^']*'|[^#]*)/.exec(line);
-    if (!match) {
-      continue;
-    }
-    return match.groups.mountPoint.trim().replaceAll(/^["']|["']$/g, "");
-  }
-}
-
-// ../../node_modules/.bun/wsl-utils@0.3.1/node_modules/wsl-utils/index.js
-var execFile2 = promisify2(childProcess2.execFile);
-var wslDrivesMountPoint = (() => {
-  const defaultMountPoint = "/mnt/";
-  let mountPoint;
-  return async function() {
-    if (mountPoint) {
-      return mountPoint;
-    }
-    const configFilePath = "/etc/wsl.conf";
-    let isConfigFileExists = false;
-    try {
-      await fs4.access(configFilePath, fsConstants.F_OK);
-      isConfigFileExists = true;
-    } catch {}
-    if (!isConfigFileExists) {
-      return defaultMountPoint;
-    }
-    const configContent = await fs4.readFile(configFilePath, { encoding: "utf8" });
-    const parsedMountPoint = parseMountPointFromConfig(configContent);
-    if (parsedMountPoint === undefined) {
-      return defaultMountPoint;
-    }
-    mountPoint = parsedMountPoint;
-    mountPoint = mountPoint.endsWith("/") ? mountPoint : `${mountPoint}/`;
-    return mountPoint;
-  };
-})();
-var powerShellPathFromWsl = async () => {
-  const mountPoint = await wslDrivesMountPoint();
-  return `${mountPoint}c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe`;
-};
-var powerShellPath2 = is_wsl_default ? powerShellPathFromWsl : powerShellPath;
-var canAccessPowerShellPromise;
-var canAccessPowerShell = async () => {
-  canAccessPowerShellPromise ??= (async () => {
-    try {
-      const psPath = await powerShellPath2();
-      await fs4.access(psPath, fsConstants.X_OK);
-      return true;
-    } catch {
-      return false;
-    }
-  })();
-  return canAccessPowerShellPromise;
-};
-var wslDefaultBrowser = async () => {
-  const psPath = await powerShellPath2();
-  const command = String.raw`(Get-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice").ProgId`;
-  const { stdout } = await executePowerShell(command, { powerShellPath: psPath });
-  return stdout.trim();
-};
-var convertWslPathToWindows = async (path) => {
-  if (/^[a-z]+:\/\//i.test(path)) {
-    return path;
-  }
-  try {
-    const { stdout } = await execFile2("wslpath", ["-aw", path], { encoding: "utf8" });
-    return stdout.trim();
-  } catch {
-    return path;
-  }
-};
-
-// ../../node_modules/.bun/define-lazy-prop@3.0.0/node_modules/define-lazy-prop/index.js
-function defineLazyProperty(object, propertyName, valueGetter) {
-  const define = (value) => Object.defineProperty(object, propertyName, { value, enumerable: true, writable: true });
-  Object.defineProperty(object, propertyName, {
-    configurable: true,
-    enumerable: true,
-    get() {
-      const result = valueGetter();
-      define(result);
-      return result;
-    },
-    set(value) {
-      define(value);
-    }
-  });
-  return object;
-}
-
-// ../../node_modules/.bun/default-browser@5.5.0/node_modules/default-browser/index.js
-import { promisify as promisify6 } from "node:util";
-import process6 from "node:process";
-import { execFile as execFile6 } from "node:child_process";
-
-// ../../node_modules/.bun/default-browser-id@5.0.1/node_modules/default-browser-id/index.js
-import { promisify as promisify3 } from "node:util";
-import process4 from "node:process";
-import { execFile as execFile3 } from "node:child_process";
-var execFileAsync = promisify3(execFile3);
-async function defaultBrowserId() {
-  if (process4.platform !== "darwin") {
-    throw new Error("macOS only");
-  }
-  const { stdout } = await execFileAsync("defaults", ["read", "com.apple.LaunchServices/com.apple.launchservices.secure", "LSHandlers"]);
-  const match = /LSHandlerRoleAll = "(?!-)(?<id>[^"]+?)";\s+?LSHandlerURLScheme = (?:http|https);/.exec(stdout);
-  const browserId = match?.groups.id ?? "com.apple.Safari";
-  if (browserId === "com.apple.safari") {
-    return "com.apple.Safari";
-  }
-  return browserId;
-}
-
-// ../../node_modules/.bun/run-applescript@7.1.0/node_modules/run-applescript/index.js
-import process5 from "node:process";
-import { promisify as promisify4 } from "node:util";
-import { execFile as execFile4, execFileSync } from "node:child_process";
-var execFileAsync2 = promisify4(execFile4);
-async function runAppleScript(script, { humanReadableOutput = true, signal } = {}) {
-  if (process5.platform !== "darwin") {
-    throw new Error("macOS only");
-  }
-  const outputArguments = humanReadableOutput ? [] : ["-ss"];
-  const execOptions = {};
-  if (signal) {
-    execOptions.signal = signal;
-  }
-  const { stdout } = await execFileAsync2("osascript", ["-e", script, outputArguments], execOptions);
-  return stdout.trim();
-}
-
-// ../../node_modules/.bun/bundle-name@4.1.0/node_modules/bundle-name/index.js
-async function bundleName(bundleId) {
-  return runAppleScript(`tell application "Finder" to set app_path to application file id "${bundleId}" as string
-tell application "System Events" to get value of property list item "CFBundleName" of property list file (app_path & ":Contents:Info.plist")`);
-}
-
-// ../../node_modules/.bun/default-browser@5.5.0/node_modules/default-browser/windows.js
-import { promisify as promisify5 } from "node:util";
-import { execFile as execFile5 } from "node:child_process";
-var execFileAsync3 = promisify5(execFile5);
-var windowsBrowserProgIds = {
-  MSEdgeHTM: { name: "Edge", id: "com.microsoft.edge" },
-  MSEdgeBHTML: { name: "Edge Beta", id: "com.microsoft.edge.beta" },
-  MSEdgeDHTML: { name: "Edge Dev", id: "com.microsoft.edge.dev" },
-  AppXq0fevzme2pys62n3e0fbqa7peapykr8v: { name: "Edge", id: "com.microsoft.edge.old" },
-  ChromeHTML: { name: "Chrome", id: "com.google.chrome" },
-  ChromeBHTML: { name: "Chrome Beta", id: "com.google.chrome.beta" },
-  ChromeDHTML: { name: "Chrome Dev", id: "com.google.chrome.dev" },
-  ChromiumHTM: { name: "Chromium", id: "org.chromium.Chromium" },
-  BraveHTML: { name: "Brave", id: "com.brave.Browser" },
-  BraveBHTML: { name: "Brave Beta", id: "com.brave.Browser.beta" },
-  BraveDHTML: { name: "Brave Dev", id: "com.brave.Browser.dev" },
-  BraveSSHTM: { name: "Brave Nightly", id: "com.brave.Browser.nightly" },
-  FirefoxURL: { name: "Firefox", id: "org.mozilla.firefox" },
-  OperaStable: { name: "Opera", id: "com.operasoftware.Opera" },
-  VivaldiHTM: { name: "Vivaldi", id: "com.vivaldi.Vivaldi" },
-  "IE.HTTP": { name: "Internet Explorer", id: "com.microsoft.ie" }
-};
-var _windowsBrowserProgIdMap = new Map(Object.entries(windowsBrowserProgIds));
-
-class UnknownBrowserError extends Error {
-}
-async function defaultBrowser(_execFileAsync = execFileAsync3) {
-  const { stdout } = await _execFileAsync("reg", [
-    "QUERY",
-    " HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\http\\UserChoice",
-    "/v",
-    "ProgId"
-  ]);
-  const match = /ProgId\s*REG_SZ\s*(?<id>\S+)/.exec(stdout);
-  if (!match) {
-    throw new UnknownBrowserError(`Cannot find Windows browser in stdout: ${JSON.stringify(stdout)}`);
-  }
-  const { id } = match.groups;
-  const dotIndex = id.lastIndexOf(".");
-  const hyphenIndex = id.lastIndexOf("-");
-  const baseIdByDot = dotIndex === -1 ? undefined : id.slice(0, dotIndex);
-  const baseIdByHyphen = hyphenIndex === -1 ? undefined : id.slice(0, hyphenIndex);
-  return windowsBrowserProgIds[id] ?? windowsBrowserProgIds[baseIdByDot] ?? windowsBrowserProgIds[baseIdByHyphen] ?? { name: id, id };
-}
-
-// ../../node_modules/.bun/default-browser@5.5.0/node_modules/default-browser/index.js
-var execFileAsync4 = promisify6(execFile6);
-var titleize = (string) => string.toLowerCase().replaceAll(/(?:^|\s|-)\S/g, (x) => x.toUpperCase());
-async function defaultBrowser2() {
-  if (process6.platform === "darwin") {
-    const id = await defaultBrowserId();
-    const name = await bundleName(id);
-    return { name, id };
-  }
-  if (process6.platform === "linux") {
-    const { stdout } = await execFileAsync4("xdg-mime", ["query", "default", "x-scheme-handler/http"]);
-    const id = stdout.trim();
-    const name = titleize(id.replace(/.desktop$/, "").replace("-", " "));
-    return { name, id };
-  }
-  if (process6.platform === "win32") {
-    return defaultBrowser();
-  }
-  throw new Error("Only macOS, Linux, and Windows are supported");
-}
-
-// ../../node_modules/.bun/is-in-ssh@1.0.0/node_modules/is-in-ssh/index.js
-import process7 from "node:process";
-var isInSsh = Boolean(process7.env.SSH_CONNECTION || process7.env.SSH_CLIENT || process7.env.SSH_TTY);
-var is_in_ssh_default = isInSsh;
-
-// ../../node_modules/.bun/open@11.0.0/node_modules/open/index.js
-var fallbackAttemptSymbol = Symbol("fallbackAttempt");
-var __dirname2 = import.meta.url ? path.dirname(fileURLToPath(import.meta.url)) : "";
-var localXdgOpenPath = path.join(__dirname2, "xdg-open");
-var { platform, arch } = process8;
-var tryEachApp = async (apps, opener) => {
-  if (apps.length === 0) {
-    return;
-  }
-  const errors = [];
-  for (const app of apps) {
-    try {
-      return await opener(app);
-    } catch (error) {
-      errors.push(error);
-    }
-  }
-  throw new AggregateError(errors, "Failed to open in all supported apps");
-};
-var baseOpen = async (options) => {
-  options = {
-    wait: false,
-    background: false,
-    newInstance: false,
-    allowNonzeroExitCode: false,
-    ...options
-  };
-  const isFallbackAttempt = options[fallbackAttemptSymbol] === true;
-  delete options[fallbackAttemptSymbol];
-  if (Array.isArray(options.app)) {
-    return tryEachApp(options.app, (singleApp) => baseOpen({
-      ...options,
-      app: singleApp,
-      [fallbackAttemptSymbol]: true
-    }));
-  }
-  let { name: app, arguments: appArguments = [] } = options.app ?? {};
-  appArguments = [...appArguments];
-  if (Array.isArray(app)) {
-    return tryEachApp(app, (appName) => baseOpen({
-      ...options,
-      app: {
-        name: appName,
-        arguments: appArguments
-      },
-      [fallbackAttemptSymbol]: true
-    }));
-  }
-  if (app === "browser" || app === "browserPrivate") {
-    const ids = {
-      "com.google.chrome": "chrome",
-      "google-chrome.desktop": "chrome",
-      "com.brave.browser": "brave",
-      "org.mozilla.firefox": "firefox",
-      "firefox.desktop": "firefox",
-      "com.microsoft.msedge": "edge",
-      "com.microsoft.edge": "edge",
-      "com.microsoft.edgemac": "edge",
-      "microsoft-edge.desktop": "edge",
-      "com.apple.safari": "safari"
-    };
-    const flags = {
-      chrome: "--incognito",
-      brave: "--incognito",
-      firefox: "--private-window",
-      edge: "--inPrivate"
-    };
-    let browser;
-    if (is_wsl_default) {
-      const progId = await wslDefaultBrowser();
-      const browserInfo = _windowsBrowserProgIdMap.get(progId);
-      browser = browserInfo ?? {};
-    } else {
-      browser = await defaultBrowser2();
-    }
-    if (browser.id in ids) {
-      const browserName = ids[browser.id.toLowerCase()];
-      if (app === "browserPrivate") {
-        if (browserName === "safari") {
-          throw new Error("Safari doesn't support opening in private mode via command line");
-        }
-        appArguments.push(flags[browserName]);
-      }
-      return baseOpen({
-        ...options,
-        app: {
-          name: apps[browserName],
-          arguments: appArguments
-        }
-      });
-    }
-    throw new Error(`${browser.name} is not supported as a default browser`);
-  }
-  let command;
-  const cliArguments = [];
-  const childProcessOptions = {};
-  let shouldUseWindowsInWsl = false;
-  if (is_wsl_default && !isInsideContainer() && !is_in_ssh_default && !app) {
-    shouldUseWindowsInWsl = await canAccessPowerShell();
-  }
-  if (platform === "darwin") {
-    command = "open";
-    if (options.wait) {
-      cliArguments.push("--wait-apps");
-    }
-    if (options.background) {
-      cliArguments.push("--background");
-    }
-    if (options.newInstance) {
-      cliArguments.push("--new");
-    }
-    if (app) {
-      cliArguments.push("-a", app);
-    }
-  } else if (platform === "win32" || shouldUseWindowsInWsl) {
-    command = await powerShellPath2();
-    cliArguments.push(...executePowerShell.argumentsPrefix);
-    if (!is_wsl_default) {
-      childProcessOptions.windowsVerbatimArguments = true;
-    }
-    if (is_wsl_default && options.target) {
-      options.target = await convertWslPathToWindows(options.target);
-    }
-    const encodedArguments = ["$ProgressPreference = 'SilentlyContinue';", "Start"];
-    if (options.wait) {
-      encodedArguments.push("-Wait");
-    }
-    if (app) {
-      encodedArguments.push(executePowerShell.escapeArgument(app));
-      if (options.target) {
-        appArguments.push(options.target);
-      }
-    } else if (options.target) {
-      encodedArguments.push(executePowerShell.escapeArgument(options.target));
-    }
-    if (appArguments.length > 0) {
-      appArguments = appArguments.map((argument) => executePowerShell.escapeArgument(argument));
-      encodedArguments.push("-ArgumentList", appArguments.join(","));
-    }
-    options.target = executePowerShell.encodeCommand(encodedArguments.join(" "));
-    if (!options.wait) {
-      childProcessOptions.stdio = "ignore";
-    }
-  } else {
-    if (app) {
-      command = app;
-    } else {
-      const isBundled = !__dirname2 || __dirname2 === "/";
-      let exeLocalXdgOpen = false;
-      try {
-        await fs5.access(localXdgOpenPath, fsConstants2.X_OK);
-        exeLocalXdgOpen = true;
-      } catch {}
-      const useSystemXdgOpen = process8.versions.electron ?? (platform === "android" || isBundled || !exeLocalXdgOpen);
-      command = useSystemXdgOpen ? "xdg-open" : localXdgOpenPath;
-    }
-    if (appArguments.length > 0) {
-      cliArguments.push(...appArguments);
-    }
-    if (!options.wait) {
-      childProcessOptions.stdio = "ignore";
-      childProcessOptions.detached = true;
-    }
-  }
-  if (platform === "darwin" && appArguments.length > 0) {
-    cliArguments.push("--args", ...appArguments);
-  }
-  if (options.target) {
-    cliArguments.push(options.target);
-  }
-  const subprocess = childProcess3.spawn(command, cliArguments, childProcessOptions);
-  if (options.wait) {
-    return new Promise((resolve, reject) => {
-      subprocess.once("error", reject);
-      subprocess.once("close", (exitCode) => {
-        if (!options.allowNonzeroExitCode && exitCode !== 0) {
-          reject(new Error(`Exited with code ${exitCode}`));
-          return;
-        }
-        resolve(subprocess);
-      });
-    });
-  }
-  if (isFallbackAttempt) {
-    return new Promise((resolve, reject) => {
-      subprocess.once("error", reject);
-      subprocess.once("spawn", () => {
-        subprocess.once("close", (exitCode) => {
-          subprocess.off("error", reject);
-          if (exitCode !== 0) {
-            reject(new Error(`Exited with code ${exitCode}`));
-            return;
-          }
-          subprocess.unref();
-          resolve(subprocess);
-        });
-      });
-    });
-  }
-  subprocess.unref();
-  return new Promise((resolve, reject) => {
-    subprocess.once("error", reject);
-    subprocess.once("spawn", () => {
-      subprocess.off("error", reject);
-      resolve(subprocess);
-    });
-  });
-};
-var open = (target, options) => {
-  if (typeof target !== "string") {
-    throw new TypeError("Expected a `target`");
-  }
-  return baseOpen({
-    ...options,
-    target
-  });
-};
-function detectArchBinary(binary) {
-  if (typeof binary === "string" || Array.isArray(binary)) {
-    return binary;
-  }
-  const { [arch]: archBinary } = binary;
-  if (!archBinary) {
-    throw new Error(`${arch} is not supported`);
-  }
-  return archBinary;
-}
-function detectPlatformBinary({ [platform]: platformBinary }, { wsl } = {}) {
-  if (wsl && is_wsl_default) {
-    return detectArchBinary(wsl);
-  }
-  if (!platformBinary) {
-    throw new Error(`${platform} is not supported`);
-  }
-  return detectArchBinary(platformBinary);
-}
-var apps = {
-  browser: "browser",
-  browserPrivate: "browserPrivate"
-};
-defineLazyProperty(apps, "chrome", () => detectPlatformBinary({
-  darwin: "google chrome",
-  win32: "chrome",
-  linux: ["google-chrome", "google-chrome-stable", "chromium", "chromium-browser"]
-}, {
-  wsl: {
-    ia32: "/mnt/c/Program Files (x86)/Google/Chrome/Application/chrome.exe",
-    x64: ["/mnt/c/Program Files/Google/Chrome/Application/chrome.exe", "/mnt/c/Program Files (x86)/Google/Chrome/Application/chrome.exe"]
-  }
-}));
-defineLazyProperty(apps, "brave", () => detectPlatformBinary({
-  darwin: "brave browser",
-  win32: "brave",
-  linux: ["brave-browser", "brave"]
-}, {
-  wsl: {
-    ia32: "/mnt/c/Program Files (x86)/BraveSoftware/Brave-Browser/Application/brave.exe",
-    x64: ["/mnt/c/Program Files/BraveSoftware/Brave-Browser/Application/brave.exe", "/mnt/c/Program Files (x86)/BraveSoftware/Brave-Browser/Application/brave.exe"]
-  }
-}));
-defineLazyProperty(apps, "firefox", () => detectPlatformBinary({
-  darwin: "firefox",
-  win32: String.raw`C:\Program Files\Mozilla Firefox\firefox.exe`,
-  linux: "firefox"
-}, {
-  wsl: "/mnt/c/Program Files/Mozilla Firefox/firefox.exe"
-}));
-defineLazyProperty(apps, "edge", () => detectPlatformBinary({
-  darwin: "microsoft edge",
-  win32: "msedge",
-  linux: ["microsoft-edge", "microsoft-edge-dev"]
-}, {
-  wsl: "/mnt/c/Program Files (x86)/Microsoft/Edge/Application/msedge.exe"
-}));
-defineLazyProperty(apps, "safari", () => detectPlatformBinary({
-  darwin: "Safari"
-}));
-var open_default = open;
-
 // ../../packages/warmhub-cli/src/domains/auth-shared.ts
 async function loginWithToken(ctx, profile) {
   const c = ctx.colors;
@@ -36165,7 +36330,7 @@ function renderTokenInfo(ctx, info, profileName, apiUrl, identityWref) {
       ctx.status(`${c.dim}Check the value of your WH_TOKEN environment variable.${c.reset}`);
     } else if (info.source === "device") {
       if (info.canRefresh) {
-        ctx.status(`${prefix}${c.bold}${info.email ?? "unknown"}${c.reset} via ${via} ${c.dim}(token expired at ${expiry} — will auto-refresh)${c.reset}${endpoint}`);
+        ctx.status(`${prefix}${c.bold}${info.email ?? "unknown"}${c.reset} via ${via} ${c.dim}(token expired at ${expiry} — refresh token available)${c.reset}${endpoint}`);
       } else {
         ctx.status(`${prefix}${c.red}Session expired${c.reset}${email} via ${via} ${c.dim}(expired at ${expiry})${c.reset}${endpoint}`);
         ctx.status(`${c.dim}Run: wh auth login${profileName && profileName !== "default" ? ` --profile ${profileName}` : ""}${c.reset}`);
@@ -36196,7 +36361,7 @@ async function fetchIdentityWref(ctx) {
   }
 }
 function openBrowser(url) {
-  open_default(url).catch(() => {});
+  Promise.resolve().then(() => (init_open(), exports_open)).then(({ default: open2 }) => open2(url)).catch(() => {});
 }
 
 // ../../packages/warmhub-cli/src/domains/auth-handlers.ts
@@ -36212,6 +36377,26 @@ var loginFlags = {
   }),
   ...profileFlag
 };
+function authStatusEntry(info, options) {
+  return {
+    active: options.active,
+    apiUrl: options.apiUrl ?? null,
+    authenticated: !info.expired,
+    canRefresh: info.canRefresh,
+    email: info.email ?? null,
+    expiresAt: info.expiresAt ?? null,
+    identityWref: options.identityWref ?? null,
+    profile: options.profile ?? null,
+    source: info.source
+  };
+}
+function authStatusOutput(activeProfile, entries) {
+  return {
+    activeProfile,
+    authenticated: entries.some((entry) => entry.active && entry.authenticated),
+    entries
+  };
+}
 var handleLogin = async (ctx, { flags }) => {
   const profile = flags.profile ?? ctx.config.profile ?? "default";
   if (flags["with-token"]) {
@@ -36306,7 +36491,7 @@ var handleStatus = async (ctx, { flags }) => {
   if (selectedProfile) {
     const prof = getProfile(selectedProfile);
     if (!prof) {
-      ctx.status(`Not logged in for profile ${c.bold}${selectedProfile}${c.reset}. Run: wh auth login --profile ${selectedProfile}`);
+      writeOutput(ctx, authStatusOutput(selectedProfile, []), () => ctx.status(`Not logged in for profile ${c.bold}${selectedProfile}${c.reset}. Run: wh auth login --profile ${selectedProfile}`));
       return;
     }
     const tokens = prof.tokens;
@@ -36320,17 +36505,26 @@ var handleStatus = async (ctx, { flags }) => {
       canRefresh: source === "device" && !!tokens.refreshToken
     };
     const identityWref = info.expired ? null : await fetchIdentityWref(ctx);
-    renderTokenInfo(ctx, info, selectedProfile, prof.apiUrl, identityWref);
+    const entry = authStatusEntry(info, {
+      active: true,
+      apiUrl: prof.apiUrl,
+      identityWref,
+      profile: selectedProfile
+    });
+    writeOutput(ctx, authStatusOutput(selectedProfile, [entry]), () => renderTokenInfo(ctx, info, selectedProfile, prof.apiUrl, identityWref));
     return;
   }
   const envToken = process.env.WH_TOKEN;
+  const activeProfile = ctx.config.profile ?? "default";
+  const entries = [];
+  const prettyEntries = [];
   if (envToken) {
     const envInfo = getTokenInfo();
     if (envInfo) {
-      renderTokenInfo(ctx, envInfo);
+      entries.push(authStatusEntry(envInfo, { active: true }));
+      prettyEntries.push(() => renderTokenInfo(ctx, envInfo));
     }
   }
-  const activeProfile = ctx.config.profile ?? "default";
   const profiles = listProfiles();
   for (const name of profiles) {
     const prof = getProfile(name);
@@ -36346,12 +36540,22 @@ var handleStatus = async (ctx, { flags }) => {
         canRefresh: source === "device" && !!tokens.refreshToken
       };
       const identityWref = !info.expired && name === activeProfile ? await fetchIdentityWref(ctx) : null;
-      renderTokenInfo(ctx, info, name, prof.apiUrl, identityWref);
+      entries.push(authStatusEntry(info, {
+        active: !envToken && name === activeProfile,
+        apiUrl: prof.apiUrl,
+        identityWref,
+        profile: name
+      }));
+      prettyEntries.push(() => renderTokenInfo(ctx, info, name, prof.apiUrl, identityWref));
     }
   }
-  if (!envToken && profiles.length === 0) {
-    ctx.status("Not logged in. Run: wh auth login");
-  }
+  writeOutput(ctx, authStatusOutput(envToken ? null : activeProfile, entries), () => {
+    for (const render of prettyEntries)
+      render();
+    if (!envToken && profiles.length === 0) {
+      ctx.status("Not logged in. Run: wh auth login");
+    }
+  });
 };
 var statusVerb = {
   prime: true,
@@ -37554,7 +37758,7 @@ var createFlags3 = {
 };
 
 // ../../packages/warmhub-cli/src/domains/commit-submit-handler.ts
-import { readFile } from "node:fs/promises";
+import { readFile as readFile2 } from "node:fs/promises";
 
 // ../../packages/warmhub-cli/src/commit-payload-validate.ts
 var NUL = String.fromCharCode(0);
@@ -37799,6 +38003,10 @@ function buildAddOperations(input) {
     const rawAbout = pick(abouts, i, { allowBroadcast: true });
     const about = rawAbout ? parseCollectionAboutFlag(rawAbout) : rawAbout;
     const kindFlag = pick(kinds, i, { allowBroadcast: true });
+    const addNameParts = addName.split("/");
+    if (shape && addNameParts.length === 2 && addNameParts[0] === shape) {
+      throw new CliError(2 /* UserInput */, "USER_INPUT", `--add value "${addName}" already includes the --shape prefix "${shape}/".`, undefined, "Pass a bare name with --shape (for example: wh commit submit --add item --shape Shape), or omit --shape and pass the full wref.");
+    }
     const localName = shape ? `${shape}/${addName}` : addName;
     const kind = kindFlag ?? (about ? "assertion" : "thing");
     return { operation: "add", kind, name: localName, data, about };
@@ -38560,7 +38768,7 @@ var handleSubmit = async (ctx, { flags, args }) => {
     } else {
       let file;
       try {
-        file = await readFile(opsFile, "utf-8");
+        file = await readFile2(opsFile, "utf-8");
       } catch (e) {
         throw new CliError(2 /* UserInput */, "USER_INPUT", `Cannot read file '${opsFile}': ${e instanceof Error ? e.message : String(e)}`, undefined, "Check that the file path is correct and the file exists.");
       }
@@ -39608,15 +39816,15 @@ function renderValidationResult(ctx, result) {
   if (result.errors.length > 0) {
     ctx.out(`${c.red}Validation failed${c.reset}`);
     for (const err of result.errors) {
-      ctx.out(`  ${c.red}error${c.reset}: ${err}`);
+      ctx.out(`  ${c.red}error${c.reset}: ${escapeTerminalTextForDisplay(err)}`);
     }
   }
   for (const finding of result.findings) {
     const color = finding.level === "error" ? c.red : finding.level === "warning" ? c.yellow : c.dim;
-    ctx.out(`  ${color}${finding.level}${c.reset} [${finding.code}]: ${finding.message}`);
+    ctx.out(`  ${color}${finding.level}${c.reset} [${escapeTerminalTextForDisplay(finding.code)}]: ${escapeTerminalTextForDisplay(finding.message)}`);
   }
   for (const warn of result.warnings) {
-    ctx.out(`  ${c.yellow}warning${c.reset}: ${warn}`);
+    ctx.out(`  ${c.yellow}warning${c.reset}: ${escapeTerminalTextForDisplay(warn)}`);
   }
   if (result.valid && result.errors.length === 0) {
     ctx.out(`${c.green}Valid component package${c.reset}`);
@@ -39626,29 +39834,29 @@ function renderValidationResult(ctx, result) {
 function renderDoctorResult(ctx, result) {
   const c = ctx.colors;
   const stateColor = stateToColor(c, result.state);
-  ctx.out(`${c.bold}Doctor:${c.reset} ${c.cyan}${result.componentName}${c.reset}  ${stateColor}${result.state}${c.reset}`);
+  ctx.out(`${c.bold}Doctor:${c.reset} ${c.cyan}${escapeTerminalTextForDisplay(result.componentName)}${c.reset}  ${stateColor}${escapeTerminalTextForDisplay(result.state)}${c.reset}`);
   ctx.out("");
   for (const finding of result.findings) {
     const color = finding.status === "ok" ? c.green : finding.status === "missing" || finding.status === "error" ? c.red : finding.status === "inactive" ? c.yellow : c.dim;
-    ctx.out(`  ${color}${finding.status}${c.reset} ${finding.resource}  ${c.dim}${finding.message}${c.reset}`);
+    ctx.out(`  ${color}${escapeTerminalTextForDisplay(finding.status)}${c.reset} ${escapeTerminalTextForDisplay(finding.resource)}  ${c.dim}${escapeTerminalTextForDisplay(finding.message)}${c.reset}`);
   }
 }
 function renderTeardownResult(ctx, result) {
   const c = ctx.colors;
   const stateColor = stateToColor(c, result.state);
-  ctx.out(`${c.bold}Teardown:${c.reset} ${c.cyan}${result.componentName}${c.reset}  ${stateColor}${result.state}${c.reset}`);
+  ctx.out(`${c.bold}Teardown:${c.reset} ${c.cyan}${escapeTerminalTextForDisplay(result.componentName)}${c.reset}  ${stateColor}${escapeTerminalTextForDisplay(result.state)}${c.reset}`);
   if (result.pausedSubscriptions.length > 0) {
-    ctx.out(`  ${c.green}paused${c.reset} ${result.pausedSubscriptions.length} subscription(s): ${result.pausedSubscriptions.join(", ")}`);
+    ctx.out(`  ${c.green}paused${c.reset} ${result.pausedSubscriptions.length} subscription(s): ${result.pausedSubscriptions.map(escapeTerminalTextForDisplay).join(", ")}`);
   }
   if (result.releasedShapes.length > 0) {
-    ctx.out(`  ${c.green}released${c.reset} ${result.releasedShapes.length} shape(s): ${result.releasedShapes.join(", ")}`);
+    ctx.out(`  ${c.green}released${c.reset} ${result.releasedShapes.length} shape(s): ${result.releasedShapes.map(escapeTerminalTextForDisplay).join(", ")}`);
   }
   if (result.tokensRevoked > 0) {
     ctx.out(`  ${c.green}revoked${c.reset} ${result.tokensRevoked} token(s)`);
   }
   ctx.out(`  uninstall callback: ${result.uninstallDispatched ? `${c.green}dispatched${c.reset}` : `${c.dim}not dispatched${c.reset}`}`);
   for (const warning of result.warnings) {
-    ctx.out(`  ${c.yellow}warning${c.reset}: ${warning}`);
+    ctx.out(`  ${c.yellow}warning${c.reset}: ${escapeTerminalTextForDisplay(warning)}`);
   }
 }
 function redactRegistryEntryLifecycleUrls(entry, showSecrets) {
@@ -39668,26 +39876,26 @@ function redactRegistryEntryListLifecycleUrls(entries, showSecrets) {
 function renderRegistryList(ctx, orgName, result) {
   const c = ctx.colors;
   if (!result.items.length) {
-    ctx.status(`${c.dim}No registered components in ${orgName}${c.reset}`);
+    ctx.status(`${c.dim}No registered components in ${escapeTerminalTextForDisplay(orgName)}${c.reset}`);
     return;
   }
-  ctx.out(`${c.bold}Registered Components${c.reset} ${c.cyan}${orgName}${c.reset}`);
+  ctx.out(`${c.bold}Registered Components${c.reset} ${c.cyan}${escapeTerminalTextForDisplay(orgName)}${c.reset}`);
   ctx.out("");
   for (const item of result.items) {
     const visibility = item.isPrivate ? `${c.yellow}private${c.reset}` : `${c.green}public${c.reset}`;
-    const description = item.description ? `  ${c.dim}${item.description}${c.reset}` : "";
-    ctx.out(`  ${c.cyan}${orgName}/${item.componentName}${c.reset}  ${visibility}${description}`);
+    const description = item.description ? `  ${c.dim}${escapeTerminalTextForDisplay(item.description)}${c.reset}` : "";
+    ctx.out(`  ${c.cyan}${escapeTerminalTextForDisplay(orgName)}/${escapeTerminalTextForDisplay(item.componentName)}${c.reset}  ${visibility}${description}`);
   }
 }
 function renderRegistryEntry(ctx, entry) {
   const c = ctx.colors;
-  ctx.out(`${c.bold}${entry.ownerOrgName}/${entry.componentName}${c.reset} ${entry.isPrivate ? `${c.yellow}[private]${c.reset}` : `${c.green}[public]${c.reset}`}`);
+  ctx.out(`${c.bold}${escapeTerminalTextForDisplay(entry.ownerOrgName)}/${escapeTerminalTextForDisplay(entry.componentName)}${c.reset} ${entry.isPrivate ? `${c.yellow}[private]${c.reset}` : `${c.green}[public]${c.reset}`}`);
   if (entry.description) {
-    ctx.out(`  ${entry.description}`);
+    ctx.out(`  ${escapeTerminalTextForDisplay(entry.description)}`);
   }
   if (entry.sourceUrl) {
-    const suffix = entry.sourceDefaultRef ? ` @ ${entry.sourceDefaultRef}` : "";
-    ctx.out(`  Source: ${entry.sourceUrl}${suffix}`);
+    const suffix = entry.sourceDefaultRef ? ` @ ${escapeTerminalTextForDisplay(entry.sourceDefaultRef)}` : "";
+    ctx.out(`  Source: ${escapeTerminalTextForDisplay(entry.sourceUrl)}${suffix}`);
   } else {
     ctx.out(`  Source: ${c.dim}(not installable — no source URL)${c.reset}`);
   }
@@ -39698,10 +39906,10 @@ function renderRegistryEntry(ctx, entry) {
     ctx.out(`  Uninstall: ${formatLifecycleUrl(entry.uninstallUrl, c)}`);
   }
   if (entry.credentialSetName || entry.credentialSetId) {
-    ctx.out(`  Credential set: ${entry.credentialSetName ?? entry.credentialSetId}`);
+    ctx.out(`  Credential set: ${escapeTerminalTextForDisplay(entry.credentialSetName ?? entry.credentialSetId ?? "")}`);
   }
   if (entry.allowedCallbackDomains.length > 0) {
-    ctx.out(`  Allowed callback domains: ${entry.allowedCallbackDomains.join(", ")}`);
+    ctx.out(`  Allowed callback domains: ${entry.allowedCallbackDomains.map(escapeTerminalTextForDisplay).join(", ")}`);
   }
   ctx.out(`  ${c.dim}Updated: ${new Date(entry.updatedAt).toISOString().slice(0, 16)}${c.reset}`);
 }
@@ -39737,13 +39945,13 @@ function redactSecretBearingUrl(rawUrl) {
 }
 function formatLifecycleUrl(url, colors) {
   if (url === REDACTED_LIFECYCLE_URL) {
-    return `${colors.dim}${url}${colors.reset}`;
+    return `${colors.dim}${escapeTerminalTextForDisplay(url)}${colors.reset}`;
   }
   if (url.endsWith(REDACTED_LIFECYCLE_PATH_SUFFIX)) {
     const visiblePrefix = url.slice(0, -REDACTED_LIFECYCLE_PATH_SUFFIX.length);
-    return `${visiblePrefix}${colors.dim}${REDACTED_LIFECYCLE_PATH_SUFFIX}${colors.reset}`;
+    return `${escapeTerminalTextForDisplay(visiblePrefix)}${colors.dim}${REDACTED_LIFECYCLE_PATH_SUFFIX}${colors.reset}`;
   }
-  return url;
+  return escapeTerminalTextForDisplay(url);
 }
 
 // ../../packages/warmhub-cli/src/domains/component-utils.ts
@@ -40296,12 +40504,13 @@ var handleList2 = async (ctx, { flags }) => {
     ctx.out(`${c.bold}Installed Components${c.reset} ${c.cyan}${org}/${repo}${c.reset}`);
     ctx.out("");
     for (const item of items) {
-      const version = item.version ?? "unknown";
-      const state = item.state ?? "unknown";
-      const source = item.source ?? "-";
-      const stateColor = stateToColor2(c, state);
-      const update = item.updateAvailable && item.latestVersion ? ` ${c.yellow}(${item.latestVersion} available)${c.reset}` : "";
-      ctx.out(`  ${c.cyan}${item.ref ?? item.componentName}${c.reset}  ${stateColor}${state}${c.reset}  ${c.dim}v${version}${c.reset}${update}  ${source}`);
+      const version = escapeTerminalTextForDisplay(item.version ?? "unknown");
+      const rawState = item.state ?? "unknown";
+      const state = escapeTerminalTextForDisplay(rawState);
+      const source = escapeTerminalTextForDisplay(item.source ?? "-");
+      const stateColor = stateToColor2(c, rawState);
+      const update = item.updateAvailable && item.latestVersion ? ` ${c.yellow}(${escapeTerminalTextForDisplay(item.latestVersion)} available)${c.reset}` : "";
+      ctx.out(`  ${c.cyan}${escapeTerminalTextForDisplay(item.ref ?? item.componentName)}${c.reset}  ${stateColor}${state}${c.reset}  ${c.dim}v${version}${c.reset}${update}  ${source}`);
     }
   });
 };
@@ -40879,7 +41088,7 @@ var CREDENTIAL_DOMAIN = defineDomain({
 import { basename } from "node:path";
 
 // ../../packages/warmhub-cli/src/harness.ts
-import { mkdir, readFile as readFile2, writeFile as writeFile3 } from "node:fs/promises";
+import { mkdir, readFile as readFile3, writeFile as writeFile3 } from "node:fs/promises";
 import { homedir as homedir4 } from "node:os";
 import { dirname as dirname6, join as join7 } from "node:path";
 var AGENTS_BEGIN_MARKER = "<!-- BEGIN WARMHUB CLI INTEGRATION -->";
@@ -40910,7 +41119,7 @@ function getHarnessPaths(opts) {
 async function readJsonFile(path2) {
   let data;
   try {
-    data = await readFile2(path2, "utf-8");
+    data = await readFile3(path2, "utf-8");
   } catch (error) {
     if (typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT") {
       return { exists: false };
@@ -41084,7 +41293,7 @@ ${AGENTS_STANZA}
 async function checkAgentsPrimeStanza(paths) {
   let content;
   try {
-    content = await readFile2(paths.agentsPath, "utf-8");
+    content = await readFile3(paths.agentsPath, "utf-8");
   } catch (error) {
     if (typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT") {
       return { fileExists: false, hasStanza: false };
@@ -41100,7 +41309,7 @@ async function ensureAgentsPrimeStanza(paths) {
   let current = "";
   let createdFile = false;
   try {
-    current = await readFile2(paths.agentsPath, "utf-8");
+    current = await readFile3(paths.agentsPath, "utf-8");
   } catch (error) {
     if (typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT") {
       createdFile = true;
@@ -42193,12 +42402,12 @@ var handleView5 = async (ctx, { args }) => {
   const c = ctx.colors;
   const result = await ctx.client.org.get(name);
   writeOutput(ctx, result, () => {
-    ctx.out(`${c.bold}${result.name}${c.reset}`);
+    ctx.out(`${c.bold}${escapeTerminalTextForDisplay(result.name)}${c.reset}`);
     if (result.displayName) {
-      ctx.out(`  ${result.displayName}`);
+      ctx.out(`  ${escapeTerminalTextForDisplay(result.displayName)}`);
     }
     if (result.description) {
-      ctx.out(`  ${c.dim}${result.description}${c.reset}`);
+      ctx.out(`  ${c.dim}${escapeTerminalTextForDisplay(result.description)}${c.reset}`);
     }
     if (result.tier !== "free") {
       ctx.out(`  ${c.cyan}Tier: ${result.tier}${c.reset}`);
@@ -42226,10 +42435,10 @@ var handleList4 = async (ctx, { flags }) => {
     }
     ctx.out(`${c.bold}Organizations:${c.reset}`);
     for (const org of result.items) {
-      const display = org.displayName ? `  ${c.dim}${org.displayName}${c.reset}` : "";
-      const desc = org.description ? `  ${c.dim}${org.description}${c.reset}` : "";
+      const display = org.displayName ? `  ${c.dim}${escapeTerminalTextForDisplay(org.displayName)}${c.reset}` : "";
+      const desc = org.description ? `  ${c.dim}${escapeTerminalTextForDisplay(org.description)}${c.reset}` : "";
       const archived = org.archivedAt ? `  ${c.yellow}[archived]${c.reset}` : "";
-      ctx.out(`  ${c.cyan}${org.name}${c.reset}${display}${desc}${archived}`);
+      ctx.out(`  ${c.cyan}${escapeTerminalTextForDisplay(org.name)}${c.reset}${display}${desc}${archived}`);
     }
   });
 };
@@ -42381,7 +42590,7 @@ var ORG_DOMAIN = defineDomain({
 });
 
 // ../../packages/warmhub-cli/src/domains/prime-content.md
-var prime_content_default = "# WarmHub CLI Context\n> **Context Recovery**: Run `wh prime` after compaction or new session\n\n## Environment\n{{REPO_LINE}}\n\n## Core Concepts\n- **Thing**: A named entity versioned by writes. **Assertion**: A thing that makes a shape-validated claim about another thing.\n- **Shape**: A thing defining data structure; every other thing has one. **Write**: One or more add/revise/retract operations with per-operation results.\n- **wref**: A reference to a thing. Local: `Player` (the shape) or `Player/alice` (a thing with that shape). Cross-repo: `wh:org/repo/Shape` or `wh:org/repo/Shape/name`.\n\n## Versioned Wrefs\n- `Shape` addresses the shape itself; `Shape/name` addresses a thing with that shape. `@vN` pins either.\n- Floating write refs to retracted targets fail; existing pinned versions remain valid.\n- Rename invalidates old spellings, including `@vN`; the new name resolves history.\n- Untyped wrefs accept any thing. `wref<T>` requires the target's shape to be `T`; a shape has no shape, so never satisfies it. `wref?` coalesces only `thing_absent`, never a missing shape.\n\n## Key Workflows\n\n**Write data** (discover shapes → scaffold ops → submit):\n```bash\nwh shape list --repo org/repo                             # list available shapes\nwh shape view ShapeName --repo org/repo                   # inspect fields\nwh shape template ShapeName -o ops.json --repo org/repo   # scaffold write ops (supports --kind assertion)\n# edit ops.json — fill FILL_IN placeholders — then:\nwh commit submit --file ops.json -m \"msg\" --repo org/repo  # submit operations (bare `wh commit` also works)\n# or single assertion (no file needed):\nwh assertion create --shape ShapeName --about Target/name --name my-assertion --data '{\"field\":1}' --repo org/repo\n# Relay failed operation details when present. Never hand-guess ops JSON — use `wh shape template <Shape>`.\n```\n\n**Read data:**\n```bash\nwh thing list --repo org/repo                 # all things at HEAD\nwh thing view Shape/name --repo org/repo      # inspect a thing\nwh thing query --shape MyShape --repo org/repo  # find things by shape\nwh thing about Shape --repo org/repo          # assertions about a shape\nwh assertion list --repo org/repo             # all assertions at HEAD\nwh thing history Shape/name --repo org/repo   # version history\n\n# Batch read — wh thing view is variadic (max 500 wrefs/call):\nwh thing view Player/alice Player/bob               # variadic positionals\nwh thing view --file wrefs.txt --json               # one wref per line\ncat wrefs.txt | wh thing view --format jsonl        # one JSON line per *deduped* requested wref\n```\n\n## Wref Quick Reference\n\nWrites use explicit names and wrefs. Untyped fields, collection members,\nassertion `about`, and committers accept any thing. Create a deterministic\ntarget before referencing it in the same commit.\n\n## Command Reference\n\n**Global flags**: `--repo`, `--format`, `--json`, `--live`\n### thing — Thing operations\n- `wh thing list [--shape] [--kind] [--match] [--include-retracted]` — Current HEAD state\n- `wh thing view [<wref>...] [--file <path>] [--version] [--depth] [--include-retracted] [--data-mode auto|full]` — Thing details. Variadic (max 500). `--version` implies `--include-retracted`. Batch JSON returns `{ requested, items, missing }`; jsonl emits one row per deduped requested wref. Large Set/List bodies summarize by default; use `--data-mode full` for canonical collection JSON.\n- `wh thing history [wref] [--shape] [--about] [--include-retracted]` — Version history\n- `wh thing resolve <wref>` — Resolve a wref to its canonical thing identity\n- `wh thing create <name|Shape/name> --data <json-object> [--shape] [--message] [--committer]` — Create\n- `wh thing revise <name> [--data] [--message] [--committer] [--expected-version]` — Revise (CONFLICT if HEAD≠n)\n- `wh thing retract <wref> -m <message> [--reason] [--kind]` — Retract\n- `wh thing query [--shape] [--kind] [--about] [--match]` — Query by filters\n- `wh thing search <query> [--shape] [--kind] [--about] [--mode]` — Search text\n- `wh thing rename <Shape/oldName> <newName>` — Rename\n- `wh thing refs <wref> [--inbound] [--outbound] [--field]` — Show field references; use `wh thing about` for assertions about the target thing\n- `wh thing about <wref> [--shape] [--match] [--depth] [--resolve-collections] [--limit] [--include-retracted]` — Show assertions about the target identity; `--resolve-collections` expands collection members for bare/@HEAD/@ALL inputs, not pinned @vN\n\n### commit — Write operations\n- `wh commit submit [--ops|--file|--add|--revise|--retract] [--kind] [--data] [--reason] [--expected-version] [--chunk-size] [--skip-existing] [--progress] [--stream-id]` — Submit operations (bare `wh commit` is equivalent). Use `--file ops.jsonl --stream-id <id> --chunk-size 5000 --skip-existing` for bulk ingest.\n- `wh shape template <shape> [shape2 ...] [--kind] [--operation add|revise|retract] [-o file]` — Generate sample ops\n\n### assertion — Assertion operations\n- `wh assertion list [--about wref] [--shape] [--match] [--include-retracted]` — Browse assertions\n- `wh assertion view <wref> [--version] [--include-retracted]` — Assertion details\n- `wh assertion create --shape <s> --name <n> --about <wref> [--data] [-m] [--committer]` — Create assertion\n- `wh assertion revise <wref> --data <json> [--message] [--committer]` — Revise assertion\n- `wh assertion retract <wref> -m <message> [--reason] [--committer]` — Retract assertion\n- `wh assertion history <wref> [--include-retracted]` — Assertion history\n\n### shape — Shape management\n- `wh shape list [--match] [--include-retracted]` — List all shapes\n- `wh shape view <name> [--include-retracted]` — Shape details\n- `wh shape revise <name> [--fields]` — Revise shape\n- `wh shape create <name> [--fields]` — Create shape\n- `wh shape retract <name> -m <message> [--reason]` — Retract shape\n- `wh shape history <name> [--include-retracted]` — Shape history\n- `wh shape rename <oldName> <newName>` — Rename shape\n\n### repo — Repository management\n- `wh repo create <org/name> [--display-name] [--description] [--visibility]` — Create repo\n- `wh repo list [org]` — List repos\n- `wh repo view [org/repo]` — Repo details\n\n### org — Organization management\n- `wh org create <name> [--display-name]` — Create a new organization\n- `wh org view <name>` — View organization details (alias: info)\n- `wh org list` — List all organizations\n\n### sub — Subscription management\n- `wh sub create <name> [flags]` — Create a subscription\n- `wh sub view <name>` — View subscription details\n- `wh sub list` — List all subscriptions\n- `wh sub log <name>` — Tail subscription delivery feed\n- `wh sub attempts <runId>` — Show attempt history for a run\n- `wh sub pause <name>` — Pause a subscription\n- `wh sub resume <name>` — Resume a paused subscription\n- `wh sub bind <name> [--credentials]` — Bind a credential set to a subscription for webhook auth\n- `wh sub unbind <name>` — Remove credential binding from a subscription\n- `wh sub delete <name>` — Delete a subscription\n\n### notifications — Action notification listing\n- `wh notifications [--limit] [--since]` — List repo-scoped action notifications\n\n### credential — Credential set management\n- `wh credential create <name> [--repo org/repo | --org org] [--scope] [--description]` — Create an empty credential set\n- `wh credential list [--repo org/repo | --org org]` — List credential sets accessible from a repo or org\n- `wh credential view <name> [--repo org/repo | --org org]` — View a credential set (key names only, no values)\n- `wh credential delete <name> [--repo org/repo | --org org]` — Delete a credential set and its Vault object\n- `wh credential set <setName> [<keyName>] [--repo org/repo | --org org] [--value]` — Set credential key(s). With `<keyName>`: single-key form (reads value from `--value` or stdin). Without `<keyName>`: batch form (reads JSON object from stdin, e.g. `{\"KEY\":\"val\"}`)\n- `wh credential unset <setName> <keyName> [--repo org/repo | --org org]` — Remove a key from a credential set\n- `wh credential audit <setName> [--repo org/repo | --org org]` — View audit log for a credential set\n- `wh credential revoke <setName> [--repo org/repo | --org org] [--reason]` — Revoke a credential set (blocks new binds and stops bound webhook deliveries)\n\n### component — Component management\n- `wh component validate <path>` — Validate package\n- `wh component install <org/name>` — Install a registered component\n- `wh component register <name> --org <org> --manifest <path> [flags]` — Register component identity\n- `wh component unregister <org/name>` — Remove a registered component identity\n- `wh component registry list --org <org>` — List registered components\n- `wh component registry view <org/name>` — View a registered component\n- `wh component registry update <org/name> [flags]` — Update a registered component\n- `wh component list` — List installed components\n- `wh component update <org/name>` — Update installed component\n- `wh component view <org/name>` — Show component details (alias: show)\n- `wh component doctor <org/name>` — Run component health checks\n- `wh component teardown <org/name>` — Pause component subscriptions\n\n### Getting More Info\n- `wh help` — full help overview\n- `wh <domain>` — list verbs for a domain\n- `wh <domain> <verb> --help` — verb details with flags and examples\n- `wh help --format json` — full CLI spec as JSON (best for agents)\n\n## Common Workflows\n\n**Explore a repo:**\n```bash\nwh thing list --repo org/repo             # see all things in HEAD\nwh thing view Shape/name --repo org/repo  # inspect a specific thing\nwh thing history Shape/name --repo org/repo # inspect version history\nwh thing about Shape/name                 # assertions about thing/shape\n```\n\n**Create an assertion** (most common write):\n```bash\n# --about takes an untyped target wref: Shape or Shape/name.\nwh assertion create --shape MyShape --about TargetShape/target-name \\\n  --name my-assertion --data '{\"field_a\":1,\"field_b\":\"value\"}' --repo org/repo\n# Output includes per-operation status; relay failures when present.\n```\n\n**Create via write entrypoint** (alternative, supports batches and streams):\n```bash\nwh commit submit --add my-item --shape MyShape --kind assertion \\\n  --about TargetShape/target-name --data '{\"field_a\":1}' --repo org/repo\n```\n\n**Batch write via file** (generate template → edit → submit):\n```bash\nwh shape template Hypothesis Evidence -o ops.json    # add --kind assertion --about TargetShape/name for assertions\n# edit ops.json — fill FILL_IN placeholders\nwh commit submit --file ops.json -m \"batch update\"   # submit all operations (bare `wh commit` is equivalent)\n# --file format: docs.warmhub.ai/cli-reference/commit-operations\n```\n\n**Bulk write (JSONL stream, >1k ops)** — one chunked stream beats per-record commits (~60× faster):\n```bash\nwh shape template MyShape -o ops.jsonl                          # one op per line (.jsonl)\nID=\"bulk-$(date +%s)\"   # choose your own; set it up front so reruns are safe\nwh commit submit --file ops.jsonl --stream-id \"$ID\" --chunk-size 5000 \\\n  --skip-existing --progress -m \"bulk ingest\" --repo org/repo\n# --chunk-size: ops per append chunk (default 1000, max 10000); chunk≈1 is ~60× slower\n# --skip-existing: skips already-written add ops (drops per-row read-before-write)\n# Add-stream restart: rerun the WHOLE file with the SAME --stream-id.\n# Fixed-name adds are idempotent via --skip-existing. Mid-stream resume is not\n# a CLI mode. Mixed revise/retract JSONL streams are not full-rerun safe after\n# an ambiguous append; inspect repo state and reconcile explicitly.\n```\n\n**Create collections:**\n```bash\nwh commit submit --type pair --name location-distance --members Location,Location/a --repo org/repo\nwh assertion create --shape Distance --name location-distance-value --about Pair/location-distance --data '{\"value\":5}' --repo org/repo\n```\n\n**Modify data:**\n```bash\nwh thing revise Shape/name --data '{\"x\":5,\"y\":3}' -m \"update\" --repo org/repo\nwh thing retract Shape/old-item -m \"withdrawn\" --reason \"data feed contaminated\" --repo org/repo\n```\n\n**Query and filter:**\n```bash\nwh thing query --shape MyShape                       # by shape\nwh thing query --kind assertion --about Shape/name   # by kind + target\nwh thing history Shape/name --limit 10               # version history\n```\n\n## Built-in Content shape\n\nWarmHub repos expose three well-known content wrefs:\n- `Content/Readme`  — stored markdown for humans\n- `Content/Agents`  — stored markdown guidance for AI agents\n- `Content/LlmsTxt` — synthesized per-request sitemap (read-only)\n\nFetch via `wh repo content get --kind readme|agents|llms-txt`,\n`client.repo.getReadme/getAgents/getLlmsTxt`, MCP `warmhub_repo_content_get`,\nor raw HTTP `GET /{org}/{repo}/readme.md|agents.md|llms.txt`.\nSee `wh repo describe` → `additionalInformation` for the discovery field.\n\n## Query Discipline\n- Plan the repo, shapes, and wrefs you need before the first query.\n- Gather the needed facts from one repo before switching to another.\n- Do the queries first, then write one complete answer.\n\n## Agent Tips\n- **Always run commands for live data** — this context describes the CLI, not repo contents\n- **Before writing, discover wrefs** — run `wh thing list` or `wh shape list`\n- **Shape field types**: `string`, `number`, `boolean`, `wref`, arrays, optionals, nested objects\n- **Write commands return per-operation results** — relay failures and affected wrefs to the user\n- **Pass data inline** with `--data '{...}'` — do NOT create temp files\n- Add `--json` to any command for machine-readable JSON output\n- **Aliases teach canonical commands** — executing aliases emit a status hint; misleading lifecycle aliases reject and point to `retract`\n- Writes go through `wh commit submit` (or bare `wh commit`) or wrappers (`create`, `revise`, `retract`, `assertion create`). `retract` irreversibly withdraws an identity and creates a history entry.\n- Use `wh doctor` to check environment health\n";
+var prime_content_default = "# WarmHub CLI Context\n> **Context Recovery**: Run `wh prime` after compaction or new session\n\n## Environment\n{{REPO_LINE}}\n\n## Core Concepts\n- **Thing**: A named entity versioned by writes. **Assertion**: A thing that makes a shape-validated claim about another thing.\n- **Shape**: A thing defining data structure; every other thing has one. **Write**: One or more add/revise/retract operations with per-operation results.\n- **wref**: A reference to a thing. Local: `Player` (the shape) or `Player/alice` (a thing with that shape). Cross-repo: `wh:org/repo/Shape` or `wh:org/repo/Shape/name`.\n\n## Versioned Wrefs\n- `Shape` addresses the shape itself; `Shape/name` addresses a thing with that shape. `@vN` pins either.\n- Floating write refs to retracted targets fail; existing pinned versions remain valid.\n- Rename invalidates old spellings, including `@vN`; the new name resolves history.\n- Untyped wrefs accept any thing. `wref<T>` requires the target's shape to be `T`; a shape has no shape, so never satisfies it. `wref?` coalesces only `thing_absent`, never a missing shape.\n\n## Key Workflows\n\n**Write data** (discover shapes → scaffold ops → submit):\n```bash\nwh shape list --repo org/repo                             # list available shapes\nwh shape view ShapeName --repo org/repo                   # inspect fields\nwh shape template ShapeName -o ops.json --repo org/repo   # scaffold write ops (supports --kind assertion)\n# edit ops.json — fill FILL_IN placeholders — then:\nwh commit submit --file ops.json -m \"msg\" --repo org/repo  # submit operations (bare `wh commit` also works)\n# or single assertion (no file needed):\nwh assertion create --shape ShapeName --about Target/name --name my-assertion --data '{\"field\":1}' --repo org/repo\n# Relay failed operation details when present. Never hand-guess ops JSON — use `wh shape template <Shape>`.\n```\n\n**Read data:**\n```bash\nwh thing list --repo org/repo                 # all things at HEAD\nwh thing view Shape/name --repo org/repo      # inspect a thing\nwh thing query --shape MyShape --repo org/repo  # find things by shape\nwh thing about Shape --repo org/repo          # assertions about a shape\nwh assertion list --repo org/repo             # all assertions at HEAD\nwh thing history Shape/name --repo org/repo   # version history\n\n# Batch read — wh thing view is variadic (max 500 wrefs/call):\nwh thing view Player/alice Player/bob               # variadic positionals\nwh thing view --file wrefs.txt --json               # one wref per line\ncat wrefs.txt | wh thing view --format jsonl        # one JSON line per *deduped* requested wref\n```\n\n## Wref Quick Reference\n\nWrites use explicit names and wrefs. Untyped fields, collection members,\nassertion `about`, and committers accept any thing. Create a deterministic\ntarget before referencing it in the same commit.\n\n## Command Reference\n\n**Global flags**: `--repo`, `--format`, `--json`, `--live`\n### thing — Thing operations\n- `wh thing list [--shape] [--kind] [--match] [--include-retracted]` — Current HEAD state\n- `wh thing view [<wref>...] [--file <path>] [--version] [--depth] [--include-retracted] [--data-mode auto|full]` — Thing details. Variadic (max 500). `--version` implies `--include-retracted`. Batch JSON returns `{ requested, items, missing }`; jsonl emits one row per deduped requested wref. Large Set/List bodies summarize by default; use `--data-mode full` for canonical collection JSON.\n- `wh thing history [wref] [--shape] [--about] [--include-retracted]` — Version history\n- `wh thing resolve <wref>` — Resolve a wref to its canonical thing identity\n- `wh thing create <name|Shape/name> (--data|--file) [--shape]` — Create\n- `wh thing revise <name> [--data] [--message] [--committer] [--expected-version]` — Revise (CONFLICT if HEAD≠n)\n- `wh thing retract <wref> -m <message> [--reason] [--kind]` — Retract\n- `wh thing query [--shape] [--kind] [--about] [--match]` — Query by filters\n- `wh thing search <query> [--shape] [--kind] [--about] [--mode]` — Search text\n- `wh thing rename <Shape/oldName> <newName>` — Rename\n- `wh thing refs <wref> [--inbound] [--outbound] [--field]` — Show field references; use `wh thing about` for assertions about the target thing\n- `wh thing about <wref> [--shape] [--match] [--depth] [--resolve-collections] [--limit] [--include-retracted]` — Show assertions about the target identity; `--resolve-collections` expands collection members for bare/@HEAD/@ALL inputs, not pinned @vN\n\n### commit — Write operations\n- `wh commit submit [--ops|--file|--add|--revise|--retract] [--kind] [--data] [--reason] [--expected-version] [--chunk-size] [--skip-existing] [--progress] [--stream-id]` — Submit operations (bare `wh commit` is equivalent). Use `--file ops.jsonl --stream-id <id> --chunk-size 5000 --skip-existing` for bulk ingest.\n- `wh shape template <shape> [shape2 ...] [--kind] [--operation add|revise|retract] [-o file]` — Generate sample ops\n\n### assertion — Assertion operations\n- `wh assertion list [--about wref] [--shape] [--match] [--include-retracted]` — Browse assertions\n- `wh assertion view <wref> [--version] [--include-retracted]` — Assertion details\n- `wh assertion create --shape <s> --name <n> --about <wref> [--data] [-m] [--committer]` — Create assertion\n- `wh assertion revise <wref> --data <json> [--message] [--committer]` — Revise assertion\n- `wh assertion retract <wref> -m <message> [--reason] [--committer]` — Retract assertion\n- `wh assertion history <wref> [--include-retracted]` — Assertion history\n\n### shape — Shape management\n- `wh shape list [--match] [--include-retracted]` — List all shapes\n- `wh shape view <name> [--include-retracted]` — Shape details\n- `wh shape revise <name> (--fields|--file)`\n- `wh shape create <name> (--fields|--file)`\n- `wh shape retract <name> -m <message> [--reason]` — Retract shape\n- `wh shape history <name> [--include-retracted]` — Shape history\n- `wh shape rename <oldName> <newName>` — Rename shape\n\n### repo — Repository management\n- `wh repo create <org/name> [--display-name] [--description] [--visibility]` — Create repo\n- `wh repo list [org]` — List repos\n- `wh repo view [org/repo]` — Repo details\n\n### org — Organization management\n- `wh org create <name> [--display-name]` — Create a new organization\n- `wh org view <name>` — View organization details (alias: info)\n- `wh org list` — List all organizations\n\n### sub — Subscription management\n- `wh sub create <name> [flags]` — Create a subscription\n- `wh sub view <name>` — View subscription details\n- `wh sub list` — List all subscriptions\n- `wh sub log <name>` — Tail subscription delivery feed\n- `wh sub attempts <runId>` — Show attempt history for a run\n- `wh sub pause <name>` — Pause a subscription\n- `wh sub resume <name>` — Resume a paused subscription\n- `wh sub bind <name> [--credentials]` — Bind a credential set to a subscription for webhook auth\n- `wh sub unbind <name>` — Remove credential binding from a subscription\n- `wh sub delete <name>` — Delete a subscription\n\n### notifications — Action notification listing\n- `wh notifications [--limit] [--since]` — List repo-scoped action notifications\n\n### credential — Credential set management\n- `wh credential create <name> [--repo org/repo | --org org] [--scope] [--description]` — Create an empty credential set\n- `wh credential list [--repo org/repo | --org org]` — List credential sets accessible from a repo or org\n- `wh credential view <name> [--repo org/repo | --org org]` — View a credential set (key names only, no values)\n- `wh credential delete <name> [--repo org/repo | --org org]` — Delete a credential set and its Vault object\n- `wh credential set <setName> [<keyName>] [--repo org/repo | --org org] [--value]` — Set credential key(s). With `<keyName>`: single-key form (reads value from `--value` or stdin). Without `<keyName>`: batch form (reads JSON object from stdin, e.g. `{\"KEY\":\"val\"}`)\n- `wh credential unset <setName> <keyName> [--repo org/repo | --org org]` — Remove a key from a credential set\n- `wh credential audit <setName> [--repo org/repo | --org org]` — View audit log for a credential set\n- `wh credential revoke <setName> [--repo org/repo | --org org] [--reason]` — Revoke a credential set (blocks new binds and stops bound webhook deliveries)\n\n### component — Component management\n- `wh component validate <path>` — Validate package\n- `wh component install <org/name>` — Install a registered component\n- `wh component register <name> --org <org> --manifest <path> [flags]` — Register component identity\n- `wh component unregister <org/name>` — Remove a registered component identity\n- `wh component registry list --org <org>` — List registered components\n- `wh component registry view <org/name>` — View a registered component\n- `wh component registry update <org/name> [flags]` — Update a registered component\n- `wh component list` — List installed components\n- `wh component update <org/name>` — Update installed component\n- `wh component view <org/name>` — Show component details (alias: show)\n- `wh component doctor <org/name>` — Run component health checks\n- `wh component teardown <org/name>` — Pause component subscriptions\n\n### Getting More Info\n- `wh help` — full help overview\n- `wh <domain>` — list verbs for a domain\n- `wh <domain> <verb> --help` — verb details with flags and examples\n- `wh help --format json` — full CLI spec as JSON (best for agents)\n\n## Common Workflows\n\n**Explore a repo:**\n```bash\nwh thing list --repo org/repo             # see all things in HEAD\nwh thing view Shape/name --repo org/repo  # inspect a specific thing\nwh thing history Shape/name --repo org/repo # inspect version history\nwh thing about Shape/name                 # assertions about thing/shape\n```\n\n**Create an assertion** (most common write):\n```bash\n# --about takes an untyped target wref: Shape or Shape/name.\nwh assertion create --shape MyShape --about TargetShape/target-name \\\n  --name my-assertion --data '{\"field_a\":1,\"field_b\":\"value\"}' --repo org/repo\n# Output includes per-operation status; relay failures when present.\n```\n\n**Create via write entrypoint** (alternative, supports batches and streams):\n```bash\nwh commit submit --add my-item --shape MyShape --kind assertion \\\n  --about TargetShape/target-name --data '{\"field_a\":1}' --repo org/repo\n```\n\n**Batch write via file** (generate template → edit → submit):\n```bash\nwh shape template Hypothesis Evidence -o ops.json    # add --kind assertion --about TargetShape/name for assertions\n# edit ops.json — fill FILL_IN placeholders\nwh commit submit --file ops.json -m \"batch update\"   # submit all operations (bare `wh commit` is equivalent)\n# --file format: docs.warmhub.ai/cli-reference/commit-operations\n```\n\n**Bulk write (JSONL stream, >1k ops)** — one chunked stream beats per-record commits (~60× faster):\n```bash\nwh shape template MyShape -o ops.jsonl                          # one op per line (.jsonl)\nID=\"bulk-$(date +%s)\"   # choose your own; set it up front so reruns are safe\nwh commit submit --file ops.jsonl --stream-id \"$ID\" --chunk-size 5000 \\\n  --skip-existing --progress -m \"bulk ingest\" --repo org/repo\n# --chunk-size: ops per append chunk (default 1000, max 10000); chunk≈1 is ~60× slower\n# --skip-existing: skips already-written add ops (drops per-row read-before-write)\n# Add-stream restart: rerun the WHOLE file with the SAME --stream-id.\n# Fixed-name adds are idempotent via --skip-existing. Mid-stream resume is not\n# a CLI mode. Mixed revise/retract JSONL streams are not full-rerun safe after\n# an ambiguous append; inspect repo state and reconcile explicitly.\n```\n\n**Create collections:**\n```bash\nwh commit submit --type pair --name location-distance --members Location,Location/a --repo org/repo\nwh assertion create --shape Distance --name location-distance-value --about Pair/location-distance --data '{\"value\":5}' --repo org/repo\n```\n\n**Modify data:**\n```bash\nwh thing revise Shape/name --data '{\"x\":5,\"y\":3}' -m \"update\" --repo org/repo\nwh thing retract Shape/old-item -m \"withdrawn\" --reason \"data feed contaminated\" --repo org/repo\n```\n\n**Query and filter:**\n```bash\nwh thing query --shape MyShape                       # by shape\nwh thing query --kind assertion --about Shape/name   # by kind + target\nwh thing history Shape/name --limit 10               # version history\n```\n\n## Built-in Content shape\n\nWarmHub repos expose three well-known content wrefs:\n- `Content/Readme`  — stored markdown for humans\n- `Content/Agents`  — stored markdown guidance for AI agents\n- `Content/LlmsTxt` — synthesized per-request sitemap (read-only)\n\nFetch via `wh repo content get --kind readme|agents|llms-txt`,\n`client.repo.getReadme/getAgents/getLlmsTxt`, MCP `warmhub_repo_content_get`,\nor raw HTTP `GET /{org}/{repo}/readme.md|agents.md|llms.txt`.\nSee `wh repo describe` → `additionalInformation` for the discovery field.\n\n## Query Discipline\n- Plan the repo, shapes, and wrefs you need before the first query.\n- Gather the needed facts from one repo before switching to another.\n- Do the queries first, then write one complete answer.\n\n## Agent Tips\n- **Always run commands for live data** — this context describes the CLI, not repo contents\n- **Before writing, discover wrefs** — run `wh thing list` or `wh shape list`\n- **Shape field types**: `string`, `number`, `boolean`, `wref`, arrays, optionals, nested objects\n- **Write commands return per-operation results** — relay failures and affected wrefs to the user\n- **Pass data inline** with `--data '{...}'` — do NOT create temp files\n- Add `--json` to any command for machine-readable JSON output\n- **Aliases teach canonical commands** — executing aliases emit a status hint; misleading lifecycle aliases reject and point to `retract`\n- Writes go through `wh commit submit` (or bare `wh commit`) or wrappers (`create`, `revise`, `retract`, `assertion create`). `retract` irreversibly withdraws an identity and creates a history entry.\n- Use `wh doctor` to check environment health\n";
 
 // ../../packages/warmhub-cli/src/domains/prime.ts
 function buildMarkdown(config) {
@@ -42879,10 +43088,10 @@ var handleList5 = async (ctx, { flags, args }) => {
     }
     ctx.out(`${c.bold}Repos in ${orgName}:${c.reset}`);
     for (const r of items) {
-      const display = r.displayName && r.displayName !== r.name ? `  ${c.dim}${r.displayName}${c.reset}` : "";
-      const desc = r.description ? `  ${c.dim}${r.description}${c.reset}` : "";
+      const display = r.displayName && r.displayName !== r.name ? `  ${c.dim}${escapeTerminalTextForDisplay(r.displayName)}${c.reset}` : "";
+      const desc = r.description ? `  ${c.dim}${escapeTerminalTextForDisplay(r.description)}${c.reset}` : "";
       const archived = r.archivedAt ? `  ${c.yellow}[archived]${c.reset}` : "";
-      ctx.out(`  ${c.cyan}${orgName}/${r.name}${c.reset}${display}${desc}${archived}`);
+      ctx.out(`  ${c.cyan}${orgName}/${escapeTerminalTextForDisplay(r.name)}${c.reset}${display}${desc}${archived}`);
     }
   });
 };
@@ -43015,7 +43224,7 @@ var handleDescribe = async (ctx, { args, flags }) => {
   writeOutput(ctx, payload, () => {
     ctx.out(`${c.bold}${org}/${repo}${c.reset}`);
     if (repoInfo.description) {
-      ctx.out(`  ${repoInfo.description}`);
+      ctx.out(`  ${escapeTerminalTextForDisplay(repoInfo.description)}`);
     }
     ctx.out("");
     ctx.out(`${c.bold}Counts${c.reset}  ${stats.byKind.shape} shapes, ${stats.byKind.thing} things, ${stats.byKind.assertion} assertions (${stats.total} total)`);
@@ -43023,7 +43232,7 @@ var handleDescribe = async (ctx, { args, flags }) => {
     if (shapeCountEntries.length > 0) {
       const maxName = shapeCountEntries.reduce((max, [name]) => Math.max(max, name.length), 0);
       for (const [shapeName, count] of shapeCountEntries) {
-        ctx.out(`  ${c.cyan}${shapeName.padEnd(maxName)}${c.reset}  ${count}`);
+        ctx.out(`  ${c.cyan}${escapeTerminalTextForDisplay(shapeName.padEnd(maxName))}${c.reset}  ${count}`);
       }
     }
     ctx.out("");
@@ -43090,9 +43299,9 @@ var handleDescribe = async (ctx, { args, flags }) => {
         const maxField = allEntries.reduce((m, e) => Math.max(m, e.fieldPath.length), 0);
         const maxState = allEntries.reduce((m, e) => Math.max(m, e.state.length), 0);
         for (const entry of allEntries) {
-          const shapeLabel = entry.shapeName.padEnd(maxShape);
-          const fieldLabel = entry.fieldPath.padEnd(maxField);
-          const stateLabel = entry.state.padEnd(maxState);
+          const shapeLabel = escapeTerminalTextForDisplay(entry.shapeName.padEnd(maxShape));
+          const fieldLabel = escapeTerminalTextForDisplay(entry.fieldPath.padEnd(maxField));
+          const stateLabel = escapeTerminalTextForDisplay(entry.state.padEnd(maxState));
           const sc = stateColor(entry.state);
           let line = `  ${c.cyan}${shapeLabel}${c.reset}  ${c.dim}${fieldLabel}${c.reset}  ${sc}${stateLabel}${c.reset}`;
           if (entry.state === "building" && entry.backfillTotal != null && entry.backfillTotal > 0) {
@@ -43101,7 +43310,7 @@ var handleDescribe = async (ctx, { args, flags }) => {
           } else if (entry.state === "building") {
             line += `  ${c.dim}${entry.backfillDone} rows${c.reset}`;
           } else if (entry.state === "failed" && entry.failureReason) {
-            line += `  ${c.dim}${entry.failureReason}${c.reset}`;
+            line += `  ${c.dim}${escapeTerminalTextForDisplay(entry.failureReason)}${c.reset}`;
           }
           ctx.out(line);
         }
@@ -43155,10 +43364,11 @@ var handleView6 = async (ctx, { args }) => {
   writeOutput(ctx, { ...repoInfo, stats, configureStats }, () => {
     ctx.out(`${c.bold}${org}/${repo}${c.reset}`);
     if (repoInfo.displayName && repoInfo.displayName !== repoInfo.name) {
-      ctx.out(`  ${repoInfo.displayName}`);
+      ctx.out(`  ${escapeTerminalTextForDisplay(repoInfo.displayName)}`);
+    }
+    if (repoInfo.description) {
+      ctx.out(`  ${escapeTerminalTextForDisplay(repoInfo.description)}`);
     }
-    if (repoInfo.description)
-      ctx.out(`  ${repoInfo.description}`);
     if (repoInfo.archivedAt) {
       ctx.out(`${c.yellow}ARCHIVED${c.reset} ${c.dim}${new Date(repoInfo.archivedAt).toISOString().slice(0, 16)}${c.reset}`);
     }
@@ -43515,14 +43725,19 @@ var handleView7 = async (ctx, { flags, args }) => {
 };
 
 // ../../packages/warmhub-cli/src/domains/shape/write.ts
+var fieldsFileFlag = flag.string({
+  description: "read fields from a JSON object file (portable alternative to inline --fields)"
+});
 var createFlags7 = {
   fields: flag.string({ description: FIELDS_FLAG_DESCRIPTION }),
+  file: fieldsFileFlag,
   description: flag.string({
     description: "Human-readable description of the shape"
   })
 };
 var reviseFlags3 = {
   fields: flag.string({ description: FIELDS_FLAG_DESCRIPTION }),
+  file: fieldsFileFlag,
   description: flag.string({
     description: "Human-readable description of the shape"
   })
@@ -43536,13 +43751,18 @@ var retractFlags3 = {
 };
 var handleCreate6 = async (ctx, { flags, args }) => {
   const shapeName = args[0];
-  const fieldsJson = flags.fields;
-  if (!shapeName || fieldsJson === undefined) {
-    usageError("Usage: wh shape create <name> --fields '<json>'", `wh shape create Location --fields '{"x":"number","y":"number"}'`, `wh shape create Tags --fields '{"labels":["string"],"scores":["number"]}'`, `wh shape create Player --fields '{"name":"string","position":{"x":"number","y":"number"}}'`, `wh shape create Review --fields '{"score":"number","reason?":"string"}'`);
+  if (!shapeName) {
+    usageError("Usage: wh shape create <name> (--fields '<json>' | --file <path>)", `wh shape create Location --fields '{"x":"number","y":"number"}'`, "wh shape create Location --file fields.json", `wh shape create Tags --fields '{"labels":["string"],"scores":["number"]}'`, `wh shape create Player --fields '{"name":"string","position":{"x":"number","y":"number"}}'`, `wh shape create Review --fields '{"score":"number","reason?":"string"}'`);
   }
+  const fields = await readJsonObjectInput({
+    inline: flags.fields,
+    file: flags.file,
+    inlineFlag: "--fields",
+    missingMessage: "Usage: wh shape create <name> (--fields '<json>' | --file <path>)",
+    example: "wh shape create Location --file fields.json"
+  });
   const { org, repo } = parseOrgRepo(getRepoRef(ctx), ctx.config);
   const c = ctx.colors;
-  const fields = parseJsonObject(fieldsJson, "--fields");
   const opts = {};
   if (flags.description !== undefined)
     opts.description = flags.description;
@@ -43557,13 +43777,18 @@ var handleCreate6 = async (ctx, { flags, args }) => {
 };
 var handleRevise3 = async (ctx, { flags, args }) => {
   const shapeName = args[0];
-  const fieldsJson = flags.fields;
-  if (!shapeName || fieldsJson === undefined) {
-    usageError("Usage: wh shape revise <name> --fields '<json>'", `wh shape revise Location --fields '{"x":"number","y":"number","z":"number"}'`, `wh shape revise Review --fields '{"score":"number","reason?":"string","tags":["string"]}'`);
+  if (!shapeName) {
+    usageError("Usage: wh shape revise <name> (--fields '<json>' | --file <path>)", `wh shape revise Location --fields '{"x":"number","y":"number","z":"number"}'`, "wh shape revise Location --file fields.json", `wh shape revise Review --fields '{"score":"number","reason?":"string","tags":["string"]}'`);
   }
+  const newFields = await readJsonObjectInput({
+    inline: flags.fields,
+    file: flags.file,
+    inlineFlag: "--fields",
+    missingMessage: "Usage: wh shape revise <name> (--fields '<json>' | --file <path>)",
+    example: "wh shape revise Location --file fields.json"
+  });
   const { org, repo } = parseOrgRepo(getRepoRef(ctx), ctx.config);
   const c = ctx.colors;
-  const newFields = parseJsonObject(fieldsJson, "--fields");
   const opts = {};
   if (flags.description !== undefined)
     opts.description = flags.description;
@@ -43640,6 +43865,7 @@ var SHAPE_DOMAIN = defineDomain({
       flags: reviseFlags3,
       examples: [
         `wh shape revise location --fields '{"x":"number","y":"number"}'`,
+        "wh shape revise location --file fields.json",
         `wh shape revise Player --fields '{"name":{"type":"string","maxLength":80},"tags":{"type":"array","items":"string","maxItems":10}}'`
       ],
       notes: [...FIELD_CONSTRAINTS_NOTES],
@@ -43652,6 +43878,7 @@ var SHAPE_DOMAIN = defineDomain({
       flags: createFlags7,
       examples: [
         `wh shape create GameConfig --repo org/repo --fields '{"x":"number"}'`,
+        "wh shape create GameConfig --repo org/repo --file fields.json",
         `wh shape create Player --fields '{"name":{"type":"string","minLength":1,"maxLength":40},"role":{"type":"string","enum":["dm","player"]},"level":{"type":"number","minimum":1,"integer":true},"home":{"type":"wref","shape":"Location"},"tags":{"type":"array","items":"string","minItems":1}}'`
       ],
       notes: [...FIELD_CONSTRAINTS_NOTES],
@@ -43700,18 +43927,16 @@ var SHAPE_DOMAIN = defineDomain({
 
 // ../../packages/warmhub-cli/src/domains/sub/flags.ts
 var orgScopeFlag = flag.string({
-  description: "Org slug for an org-scoped subscription (org.renamed); use instead of --repo"
+  description: `org slug for org-scoped events (${ORG_SCOPED_EVENT_TYPES.join(", ")}); use instead of --repo`
 });
 var createFlags8 = {
   on: flag.string({
     description: "Shape to subscribe to"
   }),
   event: flag.string({
-    description: "Event to watch: commit (default), repo.renamed, org.renamed, thing.renamed, or shape.renamed"
-  }),
-  org: flag.string({
-    description: "Org slug for an org-scoped subscription (org.renamed)"
+    description: `event to watch: ${SUBSCRIBABLE_EVENT_TYPES.join(", ")} (commit is default)`
   }),
+  org: orgScopeFlag,
   kind: flag.string({
     description: "Subscription kind (webhook; the default)"
   }),
@@ -43882,11 +44107,11 @@ function buildSubscriptionMutationArgs(flags, usage, example) {
   }
   return mutationArgs;
 }
-function rejectCommitFlags(flags, eventType) {
+function rejectCommitOnlyFlags(flags, eventType) {
   for (const f of ["on", "filter", "source"]) {
     const v = flags[f];
     if (typeof v === "string" && v.length > 0) {
-      usageError(`--${f} is not valid for ${eventType} subscriptions — rename events have no shape or filter`, `wh sub create rename-hook --event ${eventType} --webhook-url https://example.com/hook`);
+      usageError(`--${f} is not valid for ${eventType} subscriptions — metadata events have no shape, filter, or source`, `wh sub create metadata-hook ${isOrgScopedEventType(eventType) ? "--org myorg" : "--repo myorg/myrepo"} --event ${eventType} --webhook-url https://example.com/hook`);
     }
   }
 }
@@ -43904,7 +44129,7 @@ function scopeLabel(scope) {
 // ../../packages/warmhub-cli/src/domains/sub/handlers-create.ts
 var handleCreate7 = async (ctx, { flags, args }) => {
   const name = args[0] ?? flags.name;
-  const usage = "Usage: wh sub create <name> (--repo org/repo | --org org) [--event commit|repo.renamed|org.renamed|thing.renamed|shape.renamed] [options]";
+  const usage = `Usage: wh sub create <name> (--repo org/repo | --org org) [--event ${SUBSCRIBABLE_EVENT_TYPES.join("|")}] [options]`;
   const example = `wh sub create signal-hook --repo myorg/myrepo --on Signal --filter '{"shape":"Signal"}' --webhook-url https://example.com/hook`;
   if (!name) {
     usageError(usage, example);
@@ -43918,33 +44143,36 @@ var handleCreate7 = async (ctx, { flags, args }) => {
   }
   const fallbackWebhookUrl = typeof flags["fallback-webhook-url"] === "string" ? flags["fallback-webhook-url"] : undefined;
   const allowTraceReentry = flags["allow-trace-reentry"] === true;
-  const renameExtras = {
+  const metadataExtras = {
     ...fallbackWebhookUrl ? { fallbackWebhookUrl } : {},
     ...allowTraceReentry ? { allowTraceReentry: true } : {}
   };
-  if (eventType === "org.renamed") {
+  if (isOrgScopedEventType(eventType)) {
     const orgName = typeof flags.org === "string" ? flags.org : undefined;
     if (!orgName) {
-      usageError("org.renamed subscriptions are org-scoped — pass --org <org> (not --repo)", "wh sub create org-rename-hook --org myorg --event org.renamed --webhook-url https://example.com/hook");
+      usageError(`${eventType} subscriptions are org-scoped — pass --org <org> (not --repo)`, `wh sub create org-hook --org myorg --event ${eventType} --webhook-url https://example.com/hook`);
+    }
+    if (ctx.invocation.flags.repo !== undefined) {
+      usageError(`--repo is not valid for ${eventType} subscriptions — use --org <org>`, `wh sub create org-hook --org ${orgName} --event ${eventType} --webhook-url https://example.com/hook`);
     }
-    rejectCommitFlags(flags, eventType);
+    rejectCommitOnlyFlags(flags, eventType);
     const result2 = await ctx.client.subscription.create({
       orgName,
       name,
       eventType,
       kind,
       webhookUrl,
-      ...renameExtras
+      ...metadataExtras
     });
     writeOutput(ctx, result2, () => {
       const c = ctx.colors;
-      ctx.status(`${c.green}Created subscription${c.reset} ${c.cyan}${name}${c.reset} on org ${c.cyan}${orgName}${c.reset} (org.renamed)`);
+      ctx.status(`${c.green}Created subscription${c.reset} ${c.cyan}${name}${c.reset} on org ${c.cyan}${orgName}${c.reset} (${eventType})`);
     });
     return;
   }
   const { org, repo } = resolveRepoContext(ctx);
   if (eventType !== "commit") {
-    rejectCommitFlags(flags, eventType);
+    rejectCommitOnlyFlags(flags, eventType);
     const result2 = await ctx.client.subscription.create({
       orgName: org,
       repoName: repo,
@@ -43952,7 +44180,7 @@ var handleCreate7 = async (ctx, { flags, args }) => {
       eventType,
       kind,
       webhookUrl,
-      ...renameExtras
+      ...metadataExtras
     });
     writeOutput(ctx, result2, () => {
       const c = ctx.colors;
@@ -44023,6 +44251,7 @@ var handleView8 = async (ctx, { args, flags }) => {
     const c = ctx.colors;
     ctx.out(`${c.bold}${sub.name}${c.reset}`);
     ctx.out(`  kind: ${c.cyan}${sub.kind}${c.reset}`);
+    ctx.out(`  eventType: ${c.cyan}${sub.eventType}${c.reset}`);
     ctx.out(`  active: ${sub.active ? c.green : c.yellow}${sub.active}${c.reset}`);
     if (sub.sourceRepo) {
       ctx.out(`  source repo: ${c.cyan}${sub.sourceRepo}${c.reset}`);
@@ -44143,7 +44372,7 @@ var handleList7 = async (ctx, { flags }) => {
     ctx.out(`${c.bold}Subscriptions:${c.reset} ${c.cyan}${label}${c.reset}`);
     for (const sub of items) {
       const active = sub.active ? `${c.green}active` : `${c.yellow}paused`;
-      let line = `  ${c.cyan}${sub.name}${c.reset} ${c.dim}[${sub.kind}]${c.reset} ${active}${c.reset}`;
+      let line = `  ${c.cyan}${sub.name}${c.reset} ${c.dim}[${sub.kind}/${sub.eventType}]${c.reset} ${active}${c.reset}`;
       if (sub.sourceRepo) {
         line += ` ${c.dim}← ${sub.sourceRepo}${c.reset}`;
       }
@@ -44310,6 +44539,9 @@ var SUB_DOMAIN = defineDomain({
         "# Subscribe to org renames (org-scoped — use --org, not --repo)",
         "  $ wh sub create org-rename-hook --org myorg --event org.renamed --webhook-url https://example.com/hook",
         "",
+        "# Subscribe to repository creation activity in an organization",
+        "  $ wh sub create repo-feed --org myorg --event org.repo_created --webhook-url https://example.com/hook",
+        "",
         "# Webhook auth: create a credential set with WEBHOOK_* keys, then bind it to the subscription.",
         "# See `wh credential set --help` for supported key names and `wh sub bind --help`.",
         "  $ wh credential create webhook-keys --repo myorg/myrepo",
@@ -44327,7 +44559,7 @@ var SUB_DOMAIN = defineDomain({
       examples: [
         "# Update only the webhook URL",
         "  $ wh sub update signal-hook --repo myorg/myrepo --webhook-url https://example.com/v2/hook",
-        "# Repoint an org-scoped (org.renamed) rename hook in place",
+        "# Repoint an org-scoped metadata hook in place",
         "  $ wh sub update org-rename-hook --org myorg --webhook-url https://example.com/v2/hook"
       ],
       handler: handleUpdate4
@@ -44341,7 +44573,7 @@ var SUB_DOMAIN = defineDomain({
       examples: [
         "wh sub view signal-hook --repo myorg/myrepo",
         "wh sub view signal-hook --show-secrets --repo myorg/myrepo",
-        "# Org-scoped (org.renamed) subscription",
+        "# Org-scoped metadata subscription",
         "  $ wh sub view org-rename-hook --org myorg"
       ],
       handler: handleView8
@@ -44355,7 +44587,7 @@ var SUB_DOMAIN = defineDomain({
       examples: [
         "wh sub list --repo myorg/myrepo",
         "wh sub list --limit 10",
-        "# Org-scoped (org.renamed) subscriptions",
+        "# Org-scoped metadata subscriptions",
         "  $ wh sub list --org myorg"
       ],
       handler: handleList7
@@ -44406,7 +44638,7 @@ var SUB_DOMAIN = defineDomain({
       flags: scopeFlags,
       examples: [
         "wh sub pause signal-hook --repo myorg/myrepo",
-        "# Org-scoped (org.renamed) subscription",
+        "# Org-scoped metadata subscription",
         "  $ wh sub pause org-rename-hook --org myorg"
       ],
       handler: handlePause
@@ -44432,7 +44664,7 @@ var SUB_DOMAIN = defineDomain({
       examples: [
         "# Bind credentials to inject auth headers on webhook delivery",
         "  $ wh sub bind signal-hook --credentials webhook-keys --repo myorg/myrepo",
-        "# Org-scoped (org.renamed) subscription + org-scoped credential set",
+        "# Org-scoped metadata subscription + org-scoped credential set",
         "  $ wh sub bind org-rename-hook --credentials org-webhook-keys --org myorg"
       ],
       handler: handleBind
@@ -46421,7 +46653,7 @@ function resolveLogLevel(flags, env) {
 // package.json
 var package_default3 = {
   name: "@warmhub/cli",
-  version: "0.71.0",
+  version: "0.73.0",
   private: false,
   type: "module",
   description: "The wh CLI for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",
@@ -47076,4 +47308,4 @@ if (!updateCheckSuppressedByArgv && shouldRunUpdateCheck(updateEligibility)) {
 var interceptedExitCode = await maybeHandleComponentShellBoundary(dispatchArgv);
 process.exitCode = interceptedExitCode === undefined ? await runCli(dispatchArgv, { version: package_default3.version }) : interceptedExitCode;
 
-//# debugId=94B2C7EE252C64A264756E2164756E21
+//# debugId=D881F1662B4C6E3E64756E2164756E21