The wl CLI
CLI commands
The `wl` CLI manages your home workspace, renders and syncs workspaces, checks them for drift, keeps secrets on your machine and talks to the registry. One page per command.
Commands, arguments and options come from the CLI’s own definitions (apps/cli/src/index.ts); this site checks its list against that file. Options marked required must be given.
Home workspace
- wl install <package>
Add a package to the home workspace and sync it.
- wl uninstall <package>
Remove a package from the home workspace, deleting the files it owned.
- wl list
List packages installed in the home workspace, with their drift status.
- wl doctor
Health-check the home workspace: trust and drift.
- wl upgrade [package]
Bump home-workspace package pins to the latest registry version and sync.
Workspaces and sync
- wl init
Create a workspace manifest skeleton.
- wl bind <workspace>
Bind a workspace manifest to the current workspace root.
- wl validate <workspace>
Validate a workspace manifest and run the trust gate on it.
- wl render
Compute the render plan for a workspace.
- wl pull
Fetch a workspace’s current revision and list its packages.
- wl sync
Apply the render plan: write approved, Workloom-owned files. Alias: wl apply.
- wl restore
Rewrite owned files back to their render-plan content.
- wl unbind
Restore adopted originals, remove owned files and drop Workloom ownership state.
Drift and diagnostics
- wl status
Show the workspace’s drift status.
- wl diff
List the planned files and their content hashes.
- wl drift [fixture]
Classify drift, from a fixture or from the real filesystem.
- wl debug-bundle
Write a privacy-scrubbed support bundle for a workspace.
Secrets
- wl secret set <name>
Store a secret for {{secret:NAME}} references.
- wl secret get <name>
Read a secret, masked unless you pass --reveal.
- wl secret rm <name>
Remove a secret from the keychain and the vault.
- wl secret ls
List the secret names in the encrypted vault.
Registry and catalog
- wl push
Create a draft package version from selected package assets.
- wl publish-workspace
Publish a shareable workspace to the registry catalog.
- wl fork <workspace-id>
Fork a catalog workspace into a local workloom.workspace.json.
- wl visibility
Make a published package or workspace public or private (admin).
Sign-in and tokens
- wl login
Sign in to a registry with a device login and store the token.
- wl ci-token
Mint a CI token scoped to one workspace.