@warmhub/cli 0.144.0 → 0.146.0

package/dist/wh.js

@@ -25989,6 +25989,7 @@ var SYSTEM_MANIFEST = {
   teardown: {},
   runtimeAccess: { reads: [], writes: [] }
 };
+var SYSTEM_SHAPE_NAMES = new Set(SYSTEM_MANIFEST.shapes.map((shape) => shape.name));
 var SYSTEM_COMPONENT = {
   componentId: SYSTEM_COMPONENT_ID,
   name: SYSTEM_MANIFEST.component.name,
@@ -26004,8 +26005,9 @@ var SYSTEM_COMPONENTS = [
 var SYSTEM_PROTECTED_SHAPES = SYSTEM_COMPONENT.shapes.filter((shape) => shape.installInfra !== true);
 var SYSTEM_PROTECTED_FAMILY_SHAPES = SYSTEM_PROTECTED_SHAPES.filter((shape) => shape.onDemand !== true);
 var SYSTEM_INFRA_SHAPE_NAMES = new Set(SYSTEM_COMPONENTS.flatMap((entry) => entry.shapes.filter((shape) => shape.installInfra === true).map((shape) => shape.name)));
-function findSystemComponent(componentId) {
-  return SYSTEM_COMPONENTS.find((entry) => entry.componentId === componentId);
+var SYSTEM_SHAPE_NAMES2 = new Set(SYSTEM_MANIFEST.shapes.map((shape) => shape.name));
+function isSystemShapeName(name) {
+  return SYSTEM_SHAPE_NAMES2.has(name);
 }
 
 // ../../packages/rules/src/component-manifest-validate-json.ts
@@ -26839,7 +26841,10 @@ function builtinShapeGuard(op, operationIndex) {
   const errors = [];
   const name = addressesShape(op) && op.name ? bareShapeName(op.name) : undefined;
   const isShapeRename = op.operation === "rename" && addressesShape(op);
-  const newName = isShapeRename && op.newName ? bareShapeName(op.newName) : undefined;
+  const isShapeRestore = op.operation === "restore" && op.newName !== undefined && isShapeThingName(op.newName);
+  const movesShape = isShapeRename || isShapeRestore;
+  const newName = movesShape && op.newName ? bareShapeName(op.newName) : undefined;
+  const action = op.operation === "add" ? "created" : op.operation === "rename" ? "renamed" : op.operation === "restore" ? "restored" : "revised";
   const reservedSourcePassThrough = isShapeRename && name !== undefined && isRenameableSquattedShape(name) && newName !== undefined && !isReservedCollectionShape(newName) && !isBuiltinShape(newName);
   if (name && isRetiredCollectionShape(name) && !reservedSourcePassThrough) {
     errors.push({
@@ -26856,8 +26861,7 @@ function builtinShapeGuard(op, operationIndex) {
     });
   } else {
     const builtinShapeName = name && (isBuiltinShape(name) || isCollectionV2Shape(name)) && !reservedSourcePassThrough ? name : newName && (isBuiltinShape(newName) || isCollectionV2Shape(newName)) ? newName : undefined;
-    if (builtinShapeName && (isShapeRename || op.operation === "add" || op.operation === "revise")) {
-      const action = op.operation === "add" ? "created" : op.operation === "rename" ? "renamed" : "revised";
+    if (builtinShapeName && (movesShape || op.operation === "add" || op.operation === "revise")) {
       errors.push({
         code: "RESERVED_NAME",
         operationIndex,
@@ -26865,6 +26869,14 @@ function builtinShapeGuard(op, operationIndex) {
       });
     }
   }
+  const systemShapeName = op.operation === "add" ? name : movesShape ? newName : undefined;
+  if (systemShapeName && isSystemShapeName(systemShapeName) && !isBuiltinShape(systemShapeName) && !isCollectionV2Shape(systemShapeName)) {
+    errors.push({
+      code: "RESERVED_NAME",
+      operationIndex,
+      message: `Shape "${systemShapeName}" is a system shape and cannot be ${action} manually`
+    });
+  }
   const retiredV2 = v2Write(op)?.shapes.find(isRetiredCollectionShape);
   if (op.operation === "add" && retiredV2 !== undefined) {
     errors.push({
@@ -42697,8 +42709,9 @@ function compileShapesValidator(shapes) {
     }
   }
   const unionFieldSpecs = shapes.map((shape) => shape.fields);
-  return (data) => {
-    if (typeof data !== "object" || data === null || Array.isArray(data)) {
+  return (input) => {
+    const data = input === null ? {} : input;
+    if (typeof data !== "object" || Array.isArray(data)) {
       return { valid: false, errors: ["Data must be a plain object"] };
     }
     const record2 = data;
@@ -44539,6 +44552,9 @@ function createSubmissionShapesResolver(read) {
     });
   };
 }
+function resolverFor(checks3, read) {
+  return checks3 === "passThrough" ? async (operations) => operations : createSubmissionShapesResolver(read);
+}
 function namesWritten(op) {
   if (op.operation === "rename")
     return [op.name, op.newName];
@@ -44920,7 +44936,7 @@ async function submitOperationsViaStream(client, args) {
   let acknowledgedOperationCount = 0;
   let lastAcknowledgedRepoSeq;
   let chunkOrdinal = 0;
-  const resolve = createSubmissionShapesResolver(async (wrefs) => {
+  const resolve = resolverFor(checks3, async (wrefs) => {
     if (!client.thing) {
       throw new StreamValidationError("A keepShapes revise needs the client to read its Thing: this stream client has no thing.getMany");
     }
@@ -45021,7 +45037,7 @@ async function* normalizedChunks(source, chunkSize, skipExisting, resolve, check
       const checked = whole.map((operation, index) => normalizeStreamOperation(operation, index, skipExisting, checks3));
       if (!passThrough)
         checkOperationSequence(checked);
-      const operations = passThrough ? checked : await resolve(checked);
+      const operations = await resolve(checked);
       for (let start = 0;start < operations.length; start += chunkSize) {
         yield { operations: operations.slice(start, start + chunkSize), start };
       }
@@ -45211,10 +45227,10 @@ async function resolveValidateOperations(resolve, operations) {
 async function sendCommitValidate(procedure, read, orgName, repoName, operations, opts, sender) {
   const checks3 = operationChecksFor(sender, operations);
   const checked = normalizeCommitValidationOperations(operations, opts?.skipExisting, checks3);
-  const resolve = createSubmissionShapesResolver(read);
+  const resolve = resolverFor(checks3, read);
   const input = {
     ...createCommitValidateInput(orgName, repoName, [], opts, checks3),
-    operations: checks3 === "passThrough" ? checked : await resolveValidateOperations(resolve, checked)
+    operations: await resolveValidateOperations(resolve, checked)
   };
   const encodedBytes = commitValidateRequestBodyBytes(input);
   if (encodedBytes > MAX_COMMIT_VALIDATION_ENCODED_BYTES) {
@@ -46652,7 +46668,7 @@ function submissionPath(identity2) {
 }
 function createRequestBody(source, groupSize, readThings, checks3) {
   const iterator = createNormalizedOperationIterator(source, false, checks3);
-  const resolve = checks3 === "passThrough" ? async (operations) => operations : createSubmissionShapesResolver(readThings);
+  const resolve = resolverFor(checks3, readThings);
   let position = 0;
   let closed = false;
   const observeSourceReturn = async (returned) => {
@@ -46815,7 +46831,7 @@ function createStreamingSubmissionHandle(input, deps) {
 // ../../packages/sdk-ts/package.json
 var package_default = {
   name: "@warmhub/sdk-ts",
-  version: "0.142.0",
+  version: "0.144.0",
   private: false,
   type: "module",
   description: "The TypeScript SDK for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",
@@ -53792,6 +53808,9 @@ var flag = {
     ...def
   })
 };
+var committerFlag = flag.string({
+  description: "Committer wref: a Thing name (bot-1) or a Shape (hub/shapes/Agent)"
+});
 function defineDomain(def) {
   return def;
 }
@@ -54111,11 +54130,16 @@ function decorateJsonlRows(items, decorations) {
   });
 }
 function emitPartialPageHint(ctx, count, _nextCursor, _limit) {
-  if (ctx.format === "json" || ctx.format === "jsonl")
+  if (ctx.format === "json")
     return;
   const c = ctx.colors;
   ctx.status(`${c.yellow}${count} shown; more available${c.reset}. Use ${c.cyan}--all${c.reset} to fetch every page.`);
 }
+function emitNoMatchHint(ctx, match, count) {
+  if (!match || count > 0 || ctx.format === "json")
+    return;
+  ctx.status(`${ctx.colors.yellow}No results match "${match}"${ctx.colors.reset}. --match globs the Thing name, not its Shape; use ${ctx.colors.cyan}--shape <Shape>${ctx.colors.reset} to filter by Shape.`);
+}
 
 // ../../packages/warmhub-cli/src/domains/commit-output-contract-id.ts
 var COMMIT_SUBMIT_OUTPUT_SCHEMA_ID = "wh.commit.submit.result/v0.11";
@@ -54590,9 +54614,7 @@ var createFlags = {
     description: "Pinned target version the claim is affirmed for (repeatable): name@vN"
   }),
   message: flag.string({ short: "m", description: "Commit message" }),
-  committer: flag.string({
-    description: "Committer wref: a Thing name (bot-1) or a Shape (hub/shapes/Agent)"
-  })
+  committer: committerFlag
 };
 var reviseFlags = {
   shape: shapeChoiceFlags.shape,
@@ -54603,9 +54625,7 @@ var reviseFlags = {
     description: "Complete affirmation set for the changed claim (repeatable); omitted clears it"
   }),
   message: flag.string({ short: "m", description: "Commit message" }),
-  committer: flag.string({
-    description: "Committer wref: a Thing name (bot-1) or a Shape (hub/shapes/Agent)"
-  })
+  committer: committerFlag
 };
 var reaffirmFlags = {
   add: flag.string({
@@ -54620,9 +54640,7 @@ var reaffirmFlags = {
     description: "only reaffirm if the assertion is still at this version (optimistic concurrency)"
   }),
   message: flag.string({ short: "m", description: "Commit message" }),
-  committer: flag.string({
-    description: "Committer wref: a Thing name (bot-1) or a Shape (hub/shapes/Agent)"
-  })
+  committer: committerFlag
 };
 var retractFlags = {
   reason: flag.string({ description: "Reason for retraction (<=500 chars)" }),
@@ -54630,9 +54648,7 @@ var retractFlags = {
     description: "only retract if the target is still at this version (optimistic concurrency)"
   }),
   message: flag.string({ short: "m", description: "Commit message" }),
-  committer: flag.string({
-    description: "Committer wref: a Thing name (bot-1) or a Shape (hub/shapes/Agent)"
-  })
+  committer: committerFlag
 };
 var handleRevise = async (ctx, { flags, args }) => {
   const name = args[0];
@@ -55041,9 +55057,7 @@ var createFlags2 = {
     description: "read thing data from a JSON object file (portable alternative to inline --data)"
   }),
   message: flag.string({ short: "m", description: "Commit message" }),
-  committer: flag.string({
-    description: "Committer wref: a Thing name (bot-1) or a Shape (hub/shapes/Agent)"
-  })
+  committer: committerFlag
 };
 var handleCreate2 = async (ctx, { flags, args }) => {
   const name = args[0];
@@ -55681,7 +55695,7 @@ var headFlags = {
   }),
   where: flag.string({
     multiple: true,
-    description: `Field-value WHERE predicate (repeatable). Syntax: field=val, field>=val, field~prefix*, field in:[a,b] (max ${MAX_WHERE_IN_VALUES} values), field? (exists). Predicates are served by the typed field index; unservable fields return a machine-readable field-index error instead of scanning JSONB bodies.`
+    description: `Field-value WHERE predicate (repeatable). Syntax: field=val, field>=val, field~prefix*, field in:[a,b] (max ${MAX_WHERE_IN_VALUES} values), field? (exists). Text comparisons ignore case. Predicates are served by the typed field index; unservable fields return a machine-readable field-index error instead of scanning JSONB bodies.`
   })
 };
 var handleHead = async (ctx, { flags, args }) => {
@@ -55823,6 +55837,7 @@ var handleHead = async (ctx, { flags, args }) => {
   if (!all && result.nextCursor) {
     emitPartialPageHint(ctx, (result.items ?? []).length, result.nextCursor, boundedLimit);
   }
+  emitNoMatchHint(ctx, match, (result.items ?? []).length);
   writePageOutput(ctx, result.items ?? [], {
     limit: all ? pageLimit : boundedLimit,
     nextCursor: result.nextCursor ?? null,
@@ -55899,7 +55914,7 @@ var queryFlags = {
   }),
   where: flag.string({
     multiple: true,
-    description: `Field-value WHERE predicate (repeatable). Syntax: field=val, field>=val, field~prefix*, field in:[a,b] (max ${MAX_WHERE_IN_VALUES} values), field? (exists). Predicates are served by the typed field index; unservable fields return a machine-readable field-index error instead of scanning JSONB bodies.`
+    description: `Field-value WHERE predicate (repeatable). Syntax: field=val, field>=val, field~prefix*, field in:[a,b] (max ${MAX_WHERE_IN_VALUES} values), field? (exists). Text comparisons ignore case. Predicates are served by the typed field index; unservable fields return a machine-readable field-index error instead of scanning JSONB bodies.`
   })
 };
 var handleQuery = async (ctx, { flags }) => {
@@ -56061,6 +56076,7 @@ var handleQuery = async (ctx, { flags }) => {
   if (!all && result.nextCursor) {
     emitPartialPageHint(ctx, (result.items ?? []).length, result.nextCursor, boundedLimit);
   }
+  emitNoMatchHint(ctx, match, (result.items ?? []).length);
   writePageOutput(ctx, result.items ?? [], {
     limit: all ? pageLimit : boundedLimit,
     nextCursor: result.nextCursor ?? null,
@@ -56342,9 +56358,7 @@ var restoreFlags = {
     description: "only restore if the target is still at this version (optimistic concurrency)"
   }),
   message: flag.string({ short: "m", description: "Commit message" }),
-  committer: flag.string({
-    description: "Committer wref: a Thing name (bot-1) or a Shape (hub/shapes/Agent)"
-  }),
+  committer: committerFlag,
   "lease-id": flag.string({
     description: "Read-lease token from `wh thing lease` (auto-released on success)"
   })
@@ -56383,9 +56397,7 @@ var retractFlags2 = {
     description: "only retract if the target is still at this version (optimistic concurrency)"
   }),
   message: flag.string({ short: "m", description: "Commit message" }),
-  committer: flag.string({
-    description: "Committer wref: a Thing name (bot-1) or a Shape (hub/shapes/Agent)"
-  }),
+  committer: committerFlag,
   "lease-id": flag.string({
     description: "Read-lease token from `wh thing lease` (auto-released on success)"
   })
@@ -56424,9 +56436,7 @@ var reviseFlags2 = {
   ...keepShapesFlag,
   data: flag.string({ description: "Data payload (JSON)" }),
   message: flag.string({ short: "m", description: "Commit message" }),
-  committer: flag.string({
-    description: "Committer wref: a Thing name (bot-1) or a Shape (hub/shapes/Agent)"
-  }),
+  committer: committerFlag,
   "expected-version": flag.number({
     description: "Only apply if the target is still at this version (optimistic concurrency)"
   }),
@@ -57359,7 +57369,7 @@ var listFlags = {
   all: flag.boolean({ description: "Fetch all pages" }),
   count: flag.boolean({ description: "Return count of matching assertions" }),
   field: flag.string({
-    description: "exact data-field filter (data.path=value); served by the typed field index"
+    description: "data-field equality filter (data.path=value); served by the typed field index; text ignores case"
   }),
   match: flag.string({ description: "Filter by wref glob pattern" }),
   "resolve-collections": flag.boolean({
@@ -57453,6 +57463,7 @@ var handleList = async (ctx, { flags, args }) => {
     if (!all && result2.nextCursor) {
       emitPartialPageHint(ctx, (result2.items ?? []).length, result2.nextCursor, boundedLimit);
     }
+    emitNoMatchHint(ctx, match, (result2.items ?? []).length);
     writePageOutput(ctx, result2.items ?? [], {
       limit: all ? pageLimit : boundedLimit,
       nextCursor: result2.nextCursor ?? null,
@@ -57700,6 +57711,9 @@ Run \`wh auth login --profile ${explicitProfile}\` to create it.`);
 }
 
 // ../../packages/warmhub-cli/src/scope-parse.ts
+function fail(message, hint) {
+  throw new CliError(2 /* UserInput */, "USER_INPUT", message, undefined, hint);
+}
 var ENTRY_KEYS = new Set(["resource", "permissions", "grants"]);
 var PAIR_KEYS = new Set(["allowedMatches", "allowedShapes"]);
 var SHAPE_LIST_KEYS = ["shapes", "shapesAll", "shapesNot"];
@@ -57718,54 +57732,54 @@ function parseScopeEntriesJson(json2, opts) {
   try {
     parsed = JSON.parse(json2);
   } catch {
-    throw new CliError(2 /* UserInput */, "USER_INPUT", `${flagLabel} must be valid JSON`, undefined, inputHint);
+    fail(`${flagLabel} must be valid JSON`, inputHint);
   }
   if (!Array.isArray(parsed) || parsed.length === 0) {
-    throw new CliError(2 /* UserInput */, "USER_INPUT", `${flagLabel} must be a non-empty JSON array`, undefined, inputHint);
+    fail(`${flagLabel} must be a non-empty JSON array`, inputHint);
   }
   return parsed.map((entry, i) => {
     if (typeof entry !== "object" || entry === null || Array.isArray(entry)) {
-      throw new CliError(2 /* UserInput */, "USER_INPUT", `${flagLabel} entry ${i + 1}: must be an object`, undefined, inputHint);
+      fail(`${flagLabel} entry ${i + 1}: must be an object`, inputHint);
     }
     const obj = entry;
     if ("allowedMatches" in obj || "allowedShapes" in obj) {
-      throw new CliError(2 /* UserInput */, "USER_INPUT", `${flagLabel} entry ${i + 1}: allowedMatches and allowedShapes are no longer scope-entry fields; use grants: [{"allowedMatches": [...], "allowedShapes": {...}}]`, undefined, grantsHint(flagLabel));
+      fail(`${flagLabel} entry ${i + 1}: allowedMatches and allowedShapes are no longer scope-entry fields; use grants: [{"allowedMatches": [...], "allowedShapes": {...}}]`, grantsHint(flagLabel));
     }
     const unknownKey = Object.keys(obj).find((key) => !ENTRY_KEYS.has(key));
     if (unknownKey !== undefined) {
-      throw new CliError(2 /* UserInput */, "USER_INPUT", `${flagLabel} entry ${i + 1}: unknown key "${unknownKey}"`, undefined, `Entry keys are resource, permissions, grants. Example: ${exampleCommand(flagLabel)}`);
+      fail(`${flagLabel} entry ${i + 1}: unknown key "${unknownKey}"`, `Entry keys are resource, permissions, grants. Example: ${exampleCommand(flagLabel)}`);
     }
     if (!Array.isArray(obj.permissions) || obj.permissions.length === 0 || obj.permissions.some((p) => typeof p !== "string" || p.trim().length === 0)) {
-      throw new CliError(2 /* UserInput */, "USER_INPUT", `${flagLabel} entry ${i + 1}: "permissions" must be a non-empty array of non-empty strings`, undefined, inputHint);
+      fail(`${flagLabel} entry ${i + 1}: "permissions" must be a non-empty array of non-empty strings`, inputHint);
     }
     if (obj.resource !== undefined && typeof obj.resource !== "string") {
-      throw new CliError(2 /* UserInput */, "USER_INPUT", `${flagLabel} entry ${i + 1}: "resource" must be a string`, undefined, inputHint);
+      fail(`${flagLabel} entry ${i + 1}: "resource" must be a string`, inputHint);
     }
     let grants;
     if (obj.grants !== undefined) {
       if (!Array.isArray(obj.grants) || obj.grants.length === 0) {
-        throw new CliError(2 /* UserInput */, "USER_INPUT", `${flagLabel} entry ${i + 1}: "grants" must be a non-empty array of pairs`, undefined, grantsHint(flagLabel));
+        fail(`${flagLabel} entry ${i + 1}: "grants" must be a non-empty array of pairs`, grantsHint(flagLabel));
       }
       grants = obj.grants.map((pair, pairIndex) => {
         const label = `${flagLabel} entry ${i + 1} grants pair ${pairIndex + 1}`;
         if (typeof pair !== "object" || pair === null || Array.isArray(pair)) {
-          throw new CliError(2 /* UserInput */, "USER_INPUT", `${label}: must be an object`, undefined, grantsHint(flagLabel));
+          fail(`${label}: must be an object`, grantsHint(flagLabel));
         }
         const fields = pair;
         const unknown2 = Object.keys(fields).find((key) => !PAIR_KEYS.has(key));
         if (unknown2 !== undefined) {
-          throw new CliError(2 /* UserInput */, "USER_INPUT", `${label}: unknown key "${unknown2}"`, undefined, grantsHint(flagLabel));
+          fail(`${label}: unknown key "${unknown2}"`, grantsHint(flagLabel));
         }
         let allowedMatches;
         if (fields.allowedMatches !== undefined) {
           if (!Array.isArray(fields.allowedMatches) || fields.allowedMatches.length === 0 || fields.allowedMatches.some((m) => typeof m !== "string" || m.trim().length === 0)) {
-            throw new CliError(2 /* UserInput */, "USER_INPUT", `${label}: "allowedMatches" must be a non-empty array of non-empty strings`, undefined, grantsHint(flagLabel));
+            fail(`${label}: "allowedMatches" must be a non-empty array of non-empty strings`, grantsHint(flagLabel));
           }
           allowedMatches = fields.allowedMatches.map((m) => m.trim());
         }
         const allowedShapes = fields.allowedShapes === undefined ? undefined : parseAllowedShapes(fields.allowedShapes, flagLabel, label);
         if (allowedMatches === undefined && (allowedShapes === undefined || Object.values(allowedShapes).every((v) => v === undefined))) {
-          throw new CliError(2 /* UserInput */, "USER_INPUT", `${label}: pair must restrict allowedMatches or allowedShapes`, undefined, grantsHint(flagLabel));
+          fail(`${label}: pair must restrict allowedMatches or allowedShapes`, grantsHint(flagLabel));
         }
         return {
           ...allowedMatches && { allowedMatches },
@@ -57774,7 +57788,7 @@ function parseScopeEntriesJson(json2, opts) {
       });
     }
     if (grants !== undefined && (typeof obj.resource !== "string" || !obj.resource.includes("/"))) {
-      throw new CliError(2 /* UserInput */, "USER_INPUT", `${flagLabel} entry ${i + 1}: grants would restrict nothing on ${typeof obj.resource === "string" ? `the org entry "${obj.resource}"` : "an entry without a resource"}; name and Shape restrictions apply only to a repository entry`, undefined, `Name the repository. Example: ${exampleCommand(flagLabel)}`);
+      fail(`${flagLabel} entry ${i + 1}: grants would restrict nothing on ${typeof obj.resource === "string" ? `the org entry "${obj.resource}"` : "an entry without a resource"}; name and Shape restrictions apply only to a repository entry`, `Name the repository. Example: ${exampleCommand(flagLabel)}`);
     }
     const result = {
       permissions: obj.permissions.map((p) => p.trim())
@@ -57788,7 +57802,7 @@ function parseScopeEntriesJson(json2, opts) {
 }
 function parseAllowedShapes(value, flagLabel, label) {
   const refuse = (message) => {
-    throw new CliError(2 /* UserInput */, "USER_INPUT", `${label}: "allowedShapes" ${message}`, undefined, `Keys are shapes, shapesAll, shapesNot (1-${MAX_ALLOWED_SHAPES_PER_LIST} Shape names each) and shapeless (boolean). Example: ${exampleCommand(flagLabel)}`);
+    fail(`${label}: "allowedShapes" ${message}`, `Keys are shapes, shapesAll, shapesNot (1-${MAX_ALLOWED_SHAPES_PER_LIST} Shape names each) and shapeless (boolean). Example: ${exampleCommand(flagLabel)}`);
   };
   if (typeof value !== "object" || value === null || Array.isArray(value)) {
     refuse("must be an object");
@@ -58916,9 +58930,7 @@ var CANONICAL_COLLECTION_TYPE_USAGE = "<arc|bond|pair|set|list>";
 var commonWriteFlags = {
   "event-request-id": operationEventRequestIdFlag,
   message: flag.string({ short: "m", description: "Commit message" }),
-  committer: flag.string({
-    description: "Committer wref: a Thing name (bot-1) or a Shape (hub/shapes/Agent)"
-  })
+  committer: committerFlag
 };
 var collectionInputFlags = {
   members: flag.string({
@@ -59612,9 +59624,7 @@ var createFlags3 = {
   }),
   "submission-id": operationEventSubmissionIdFlag,
   message: flag.string({ short: "m", description: "Commit message" }),
-  committer: flag.string({
-    description: "Committer wref: a Thing name (bot-1) or a Shape (hub/shapes/Agent)"
-  }),
+  committer: committerFlag,
   "component-ref": flag.string({
     description: "attribute writes to an actively installed component (Org/Name); the server checks caller authorization."
   }),
@@ -63242,7 +63252,7 @@ var handleCreate3 = async (ctx, { flags, args }) => {
   });
   writeOutput(ctx, result, () => {
     const c = ctx.colors;
-    ctx.status(`${c.green}Created credential set${c.reset} ${c.cyan}${name}${c.reset} (${scope}) in ${c.cyan}${formatCredentialContextTarget(context)}${c.reset}`);
+    ctx.status(`${c.green}Created credential set${c.reset} ${c.cyan}${name}${c.reset} (${result.scope}) in ${c.cyan}${formatCredentialContextTarget(context)}${c.reset}`);
   });
 };
 var handleList3 = async (ctx, { flags }) => {
@@ -65110,8 +65120,10 @@ var handleAddMember = async (ctx, { flags, args }) => {
   writeOutput(ctx, result, () => {
     if (result.status === "pending") {
       ctx.status(`${c.green}Invited${c.reset} ${c.bold}${email3}${c.reset} to ${c.bold}${orgName}${c.reset} as ${c.cyan}${result.role}${c.reset} ${c.dim}— invite email pending${c.reset}`);
-    } else {
+    } else if (result.status === "active") {
       ctx.status(`${c.green}Added${c.reset} ${c.bold}${email3}${c.reset} to ${c.bold}${orgName}${c.reset} as ${c.cyan}${result.role}${c.reset}`);
+    } else {
+      ctx.status(`${c.bold}${email3}${c.reset} in ${c.bold}${orgName}${c.reset}: membership status ${result.status}`);
     }
   });
 };
@@ -65167,7 +65179,7 @@ var handleListMembers = async (ctx, { args, flags }) => {
     for (const m of members) {
       const name = [m.firstName, m.lastName].filter(Boolean).join(" ");
       const display = name ? ` ${c.dim}(${name})${c.reset}` : "";
-      const status = m.status === "pending" ? `  ${c.yellow}pending${c.reset}` : `  ${c.dim}active${c.reset}`;
+      const status = m.status === "pending" ? `  ${c.yellow}pending${c.reset}` : `  ${c.dim}${m.status}${c.reset}`;
       ctx.out(`  ${c.cyan}${m.email}${c.reset}${display}  ${c.dim}${m.role}${c.reset}${status}`);
     }
   });
@@ -65453,7 +65465,7 @@ var ORG_DOMAIN = defineDomain({
 });
 
 // ../../packages/warmhub-cli/src/domains/prime-content.md
-var prime_content_default = "# WarmHub CLI Context\n> **Context Recovery**: Run `wh prime` after compaction or new session\n\n## Environment\n{{REPO_LINE}}\n\n## Core Concepts\n- **Thing**: A named entity versioned by writes. **Assertion**: A thing that makes a shape-validated claim about another thing.\n- **Shape**: A thing defining data structure. **Write**: One or more add/revise/retract operations with per-operation results.\n- **wref**: A thing's full name: `alice`, or `hub/shapes/Player` for a Shape. Cross-repo: `wh:org/repo/alice`.\n\n## Versioned Wrefs\n- `hub/shapes/X` addresses the Shape X. `@vN` pins a version. `--shape` takes bare names.\n- Floating write refs to retracted targets fail; existing pinned versions remain valid.\n- Rename invalidates old spellings, including `@vN`; the new name resolves history.\n- Untyped wrefs accept any thing. `wref<T>` requires the target's shape to be `T`; a shape has no shape, so never satisfies it. `wref?` coalesces only `thing_absent`, never a missing shape.\n- Wref `binding`: `identity` follows the Thing, `versioned` pins.\n\n## Key Workflows\n\n**Write data** (discover shapes → scaffold ops → submit):\n```bash\nwh shape list --repo org/repo                             # list available shapes\nwh shape view ShapeName --repo org/repo                   # inspect fields\nwh shape template ShapeName -o ops.json --repo org/repo   # scaffold write ops (supports --kind assertion)\n# edit ops.json — fill FILL_IN placeholders — then:\nwh commit submit --file ops.json --dry-run --repo org/repo  # preview; remove --dry-run to submit\n# or single assertion (no file needed):\nwh assertion create my-assertion --shape ShapeName --about target --data '{\"field\":1}' --repo org/repo  # ShapeName composes Assertion\n# Relay failed operation details when present. Never hand-guess ops JSON — use `wh shape template <Shape>`.\n```\n\n**Read data:**\n```bash\nwh thing list --repo org/repo                 # all things at HEAD\nwh thing view alice --repo org/repo           # inspect a thing\nwh thing query --shape MyShape --repo org/repo  # find things by shape\nwh thing about hub/shapes/X --repo org/repo   # assertions about a shape\nwh assertion list --repo org/repo             # all assertions at HEAD\nwh thing history alice --repo org/repo        # version history\n\n# Batch read — wh thing view is variadic (max 500 wrefs/call):\nwh thing view alice bob                             # variadic positionals\nwh thing view --file wrefs.txt --json               # one wref per line\ncat wrefs.txt | wh thing view --format jsonl        # one JSON line per *deduped* requested wref\n```\n\n## Wref Quick Reference\n\nWrites use explicit names and wrefs. Untyped fields, collection members,\nassertion `about`, and committers accept any thing. Create a deterministic\ntarget before referencing it in the same commit.\n`WH_CLIENT_FLAGS=legacy-wrefs`: raw v1 `commit submit` only; a bare name is a Shape.\n\n## Command Reference\n\n**Global flags**: `--repo`, `--format`, `--json`, `--live`\n### thing — Things\n- `wh thing list [--shape] [--kind] [--match] [--include-retracted]` — Current HEAD state\n- `wh thing view [<wref>...] [--file <path>] [--version] [--depth] [--include-retracted] [--data-mode auto|full]` — Thing details. Variadic (max 500). `--version` implies `--include-retracted`. Batch JSON returns `{ requested, items, missing }`; jsonl emits one row per deduped requested wref. Large Set/List bodies summarize by default; use `--data-mode full` for canonical collection JSON.\n- `wh thing history [wref] [--shape] [--about] [--include-retracted]` — Version history\n- `wh thing resolve <wref>` — Resolve a wref to its canonical thing identity\n- `wh thing create <name> (--shape <S>...|--shapeless) (--data|--file)` — Create\n- `wh thing revise <name> (--shape <S>...|--shapeless|--keep-shapes) [--data] [--expected-version]` — Revise (CONFLICT if HEAD≠n)\n- `wh thing retract <name> -m <message> [--reason] [--expected-version]` — Retract\n- `wh thing query [--shape] [--kind] [--about] [--match]` — Query by filters\n- `wh thing search <query> [--shape] [--kind] [--about] [--mode]` — Search text\n- `wh thing rename <name> <newName>` — Rename\n- `wh thing refs <wref> [--inbound] [--outbound] [--field]` — Show field references; use `wh thing about` for assertions about the target thing\n- `wh thing about <wref> [--shape] [--match] [--depth] [--resolve-collections] [--role from|to|ends] [--limit] [--include-retracted]` — Show assertions about the target identity; `--resolve-collections` expands bare/@HEAD/@ALL members, `--role` filters direction; not pinned @vN\n\n- `wh view evaluate VIEW [--limit N] [--cursor TOK] [--all]`\n### commit — Write operations\n- `wh commit submit [--ops|--file|--add|--revise|--retract] [--dry-run] [--skip-existing]` — Submit operations, or evaluate the complete bounded input without durable changes under `--dry-run`. JSONL preview emits one operation row per input plus one summary.\n- `wh shape template <shape> [shape2 ...] [--kind] [--operation add|revise|retract] [-o file]` — Generate sample ops\n\n### assertion — Assertion operations\n- `wh assertion list [--about wref] [--shape] [--match] [--include-retracted]` — Browse assertions\n- `wh assertion view <wref> [--version] [--include-retracted]` — Assertion details\n- `wh assertion create --shape <s> --name <n> --about <wref> [--data] [-m] [--committer]` — Create assertion\n- `wh assertion revise <wref> --data <json> [--message] [--committer]` — Revise assertion\n- `wh assertion retract <wref> -m <message> [--reason] [--committer] [--expected-version]` — Retract assertion\n- `wh assertion history <wref> [--include-retracted]` — Assertion history\n\n### shape — Shape management\n- `wh shape list [--match] [--include-retracted]` — List all shapes\n- `wh shape view <name> [--include-retracted]` — Shape details\n- `wh shape revise <name> (--fields|--file)`\n- `wh shape create <name> (--fields|--file)`\n- `wh shape retract <name> -m <message> [--reason] [--expected-version]` — Retract shape\n- `wh shape history <name> [--include-retracted]` — Shape history\n- `wh shape rename <oldName> <newName>` — Rename shape\n\n### repo — Repository management\n- `wh repo create <org/name> [--display-name] [--description] [--visibility]` — Create repo\n- `wh repo list [org]` — List repos\n- `wh repo view [org/repo]` — Repo details\n\n### org — Organization management\n- `wh org create <name> [--display-name]` — Create a new organization\n- `wh org view <name>` — View organization details (alias: info)\n- `wh org list` — List all organizations\n\n### sub — Subscription management\n- `wh sub create <name> [flags]` — Create a subscription\n- `wh sub view <name>` — View subscription details\n- `wh sub list` — List all subscriptions\n- `wh sub log <name>` — Tail subscription delivery feed\n- `wh sub attempts <runId>` — Show attempt history for a run\n- `wh sub pause <name>` — Pause a subscription\n- `wh sub resume <name>` — Resume a paused subscription\n- `wh sub bind <name> [--credentials]` — Bind a credential set to a subscription for webhook auth\n- `wh sub unbind <name>` — Remove credential binding from a subscription\n- `wh sub delete <name>` — Retire; name reserved\n\n### notifications — Action notification listing\n- `wh notifications [--limit] [--since]` — List repo-scoped action notifications\n\n### credential — Credential set management\n- `wh credential create <name> [--repo org/repo | --org org] [--scope] [--description]` — Create an empty credential set\n- `wh credential list [--repo org/repo | --org org]` — List credential sets accessible from a repo or org\n- `wh credential view <name> [--repo org/repo | --org org]` — View a credential set (key names only, no values)\n- `wh credential delete <name> [--repo org/repo | --org org]` — Delete a credential set and its Vault object\n- `wh credential set <setName> [<keyName>] [--repo org/repo | --org org] [--value]` — Set credential key(s). With `<keyName>`: single-key form (reads value from `--value` or stdin). Without `<keyName>`: batch form (reads JSON object from stdin, e.g. `{\"KEY\":\"val\"}`)\n- `wh credential unset <setName> <keyName> [--repo org/repo | --org org]` — Remove a key from a credential set\n- `wh credential audit <setName> [--repo org/repo | --org org]` — View audit log for a credential set\n- `wh credential revoke <setName> [--repo org/repo | --org org] [--reason]` — Revoke a credential set (blocks new binds and stops bound webhook deliveries)\n\n### component — Component management\n- `wh component validate <path>` — Validate package\n- `wh component install <org/name>` — Install; resource-phase CONFLICT → 2, degraded replay → 1\n- `wh component register <name> --org <org> --manifest <path> [flags]` — Register component identity\n- `wh component unregister <org/name>` — Remove a registered component identity\n- `wh component registry list --org <org>` — List registered components\n- `wh component registry view <org/name>` — View a registered component\n- `wh component registry update <org/name> [flags]` — Update a registered component\n- `wh component list` — List installed components\n- `wh component update <org/name>` — Update; resource-phase CONFLICT → 2, degraded replay → 1\n- `wh component view <org/name>` — Show component details (alias: show)\n- `wh component doctor <org/name>` — Health; degraded/error/uninstalled → exit 1\n- `wh component teardown <org/name>` — Pause component subscriptions\n\n### Getting More Info\n- `wh help` — help overview\n- `wh <domain>` — domain verbs\n- `wh <domain> <verb> --help` — verb flags and examples\n- `wh help --format json` — `CliSpecV2` (`schemaVersion: 2`): global/contextual/root tables and command overrides\n\n## Common Workflows\n\n**Explore a repo:**\n```bash\nwh thing list --repo org/repo             # see all things in HEAD\nwh thing view alice --repo org/repo       # inspect a specific thing\nwh thing history alice --repo org/repo    # inspect version history\nwh thing about alice                      # assertions about a thing\n```\n\n**Create an assertion** (most common write):\n```bash\n# Assertion = Shape with composes:[\"Assertion\"]; write a thing with data.about.\n# --about is written as data.about.\nwh assertion create my-assertion --shape MyShape --about target-name \\\n  --data '{\"field_a\":1,\"field_b\":\"value\"}' --repo org/repo\n# Output includes per-operation status; relay failures.\n```\n\n**Write entrypoint** (batches and streams):\n```bash\nwh commit submit --add my-item --shape MyShape \\\n  --about target-name --data '{\"field_a\":1}' --repo org/repo\n```\n\n**Batch write via file** (generate template → edit → submit):\n```bash\nwh shape template Hypothesis Evidence -o ops.json    # --kind assertion --about X for assertions\n# edit ops.json — fill FILL_IN placeholders\nwh commit submit --file ops.json -m \"batch update\"   # submit all ops (bare `wh commit` is equivalent)\n# --file format: docs.warmhub.ai/cli-reference/commit-operations\n```\n\n**Bulk write (JSONL stream, >1k ops)** — one chunked stream beats per-record commits (~60× faster):\n```bash\nwh shape template MyShape -o ops.jsonl                          # one op per line (.jsonl)\nID=\"bulk-$(date +%s)\"   # caller id for chunk correlation\nwh commit submit --file ops.jsonl --stream-id \"$ID\" --chunk-size 5000 \\\n  --skip-existing --progress -m \"bulk ingest\" --repo org/repo\n# --chunk-size: ops per append chunk (default 1000, max 10000); chunk≈1 is ~60× slower\n# --skip-existing: skips already-written add ops (drops per-row read-before-write)\n# --stream-id identifies the submission but provides no receipt or resume.\n# After an outcome-unknown append, stop writes and reconcile attempted + unsent\n# work from a later verified checkpoint; never blindly replay revise/retract.\n```\n\n**Create collections:**\n```bash\nwh commit submit --add route --shape Arc --data '{\"from\":\"a\",\"to\":\"b\"}'\nwh assertion create route-support --shape Supports --about route --data '{\"confidence\":0.8}' --repo org/repo\n```\n\n**Modify data:**\n```bash\nwh thing revise my-item --keep-shapes --data '{\"x\":5,\"y\":3}' -m \"update\" --repo org/repo\nwh thing retract old-item -m \"withdrawn\" --reason \"data feed contaminated\" --repo org/repo\n```\n\n**Query and filter:**\n```bash\nwh thing query --shape MyShape                       # by shape\nwh thing query --kind assertion --about alice        # by kind + target\nwh thing history alice --limit 10                    # version history\n```\n\n## Built-in Content shape\n\nWarmHub repos expose three well-known content Things (Shape `Content`):\n- `Readme`  — stored markdown for humans\n- `Agents`  — stored markdown guidance for AI agents\n- `LlmsTxt` — synthesized per-request sitemap (read-only)\n\nFetch via `wh repo content get --kind readme|agents|llms-txt`,\n`client.repo.getReadme/getAgents/getLlmsTxt`, MCP `warmhub_repo_content_get`,\nor raw HTTP `GET /{org}/{repo}/readme.md|agents.md|llms.txt`.\nSee `wh repo describe` → `additionalInformation` for the discovery field.\n\n## Query Discipline\n- Plan the repo, shapes, and wrefs you need before the first query.\n- Gather the needed facts from one repo before switching to another.\n- Do the queries first, then write one complete answer.\n\n## Agent Tips\n- **Always run commands for live data** — this context describes the CLI, not repo contents\n- **Before writing, discover wrefs** — run `wh thing list` or `wh shape list`\n- **Shape field types**: `string`, `number`, `boolean`, `wref`, arrays, optionals, nested objects\n- **Write commands return per-operation results** — relay failures and affected wrefs to the user\n- **Pass data inline** with `--data '{...}'` — do NOT create temp files\n- Add `--json` to any command for machine-readable JSON output\n- **Aliases teach canonical commands** — executing aliases emit a status hint; misleading lifecycle aliases reject and point to `retract`\n- Writes go through `wh commit submit` (or bare `wh commit`) or wrappers (`create`, `revise`, `retract`, `assertion create`). `retract` withdraws an identity and creates a history entry; `wh thing restore <durableId>` makes it active again.\n- Use `wh doctor` to check environment health\n";
+var prime_content_default = "# WarmHub CLI Context\n> **Context Recovery**: Run `wh prime` after compaction or new session\n\n## Environment\n{{REPO_LINE}}\n\n## Core Concepts\n- **Thing**: A named entity versioned by writes. **Assertion**: A thing that makes a shape-validated claim about another thing.\n- **Shape**: A thing defining data structure. **Write**: One or more add/revise/retract operations with per-operation results.\n- **wref**: A thing's full name: `alice`, or `hub/shapes/Player` for a Shape. Cross-repo: `wh:org/repo/alice`.\n\n## Versioned Wrefs\n- `hub/shapes/X` addresses the Shape X. `@vN` pins a version. `--shape` takes bare names.\n- Floating write refs to retracted targets fail; existing pinned versions remain valid.\n- Rename invalidates old spellings, including `@vN`; the new name resolves history.\n- Untyped wrefs accept any thing. `wref<T>` requires the target's shape to be `T`; a shape has no shape, so never satisfies it. `wref?` coalesces only `thing_absent`, never a missing shape.\n- Wref `binding`: `identity` follows the Thing, `versioned` pins.\n\n## Key Workflows\n\n**Write data** (discover shapes → scaffold ops → submit):\n```bash\nwh shape list --repo org/repo                             # list available shapes\nwh shape view ShapeName --repo org/repo                   # inspect fields\nwh shape template ShapeName -o ops.json --repo org/repo   # scaffold write ops (supports --kind assertion)\n# edit ops.json — fill FILL_IN placeholders — then:\nwh commit submit --file ops.json --dry-run --repo org/repo  # preview; remove --dry-run to submit\n# or single assertion (no file needed):\nwh assertion create my-assertion --shape ShapeName --about target --data '{\"field\":1}' --repo org/repo  # ShapeName composes Assertion\n# Relay failed operation details when present. Never hand-guess ops JSON — use `wh shape template <Shape>`.\n```\n\n**Read data:**\n```bash\nwh thing list --repo org/repo                 # all things at HEAD\nwh thing view alice --repo org/repo           # inspect a thing\nwh thing query --shape MyShape --repo org/repo  # find things by shape\nwh thing about hub/shapes/X --repo org/repo   # assertions about a shape\nwh assertion list --repo org/repo             # all assertions at HEAD\nwh thing history alice --repo org/repo        # version history\n\n# Batch read — wh thing view is variadic (max 500 wrefs/call):\nwh thing view alice bob                             # variadic positionals\nwh thing view --file wrefs.txt --json               # one wref per line\ncat wrefs.txt | wh thing view --format jsonl        # one JSON line per *deduped* requested wref\n```\n\n## Wref Quick Reference\n\nWrites use explicit names and wrefs. Untyped fields, collection members,\nassertion `about`, and committers accept any thing. Create a deterministic\ntarget before referencing it in the same commit.\n`WH_CLIENT_FLAGS=legacy-wrefs`: raw v1 `commit submit` only; a bare name is a Shape.\n\n## Command Reference\n\n**Global flags**: `--repo`, `--format`, `--json`, `--live`\n### thing — Things\n- `wh thing list [--shape] [--kind] [--match] [--include-retracted]` — Current HEAD state\n- `wh thing view [<wref>...] [--file <path>] [--version] [--depth] [--include-retracted] [--data-mode auto|full]` — Thing details. Variadic (max 500). `--version` implies `--include-retracted`. Batch JSON returns `{ requested, items, missing }`; jsonl emits one row per deduped requested wref. Large Set/List bodies summarize by default; use `--data-mode full` for canonical collection JSON.\n- `wh thing history [wref] [--shape] [--about] [--include-retracted]` — Version history\n- `wh thing resolve <wref>` — Resolve a wref to its canonical thing identity\n- `wh thing create <name> (--shape <S>...|--shapeless) (--data|--file)` — Create\n- `wh thing revise <name> (--shape <S>...|--shapeless|--keep-shapes) [--data] [--expected-version]` — Revise (CONFLICT if HEAD≠n)\n- `wh thing retract <name> -m <message> [--reason] [--expected-version]` — Retract\n- `wh thing query [--shape] [--kind] [--about] [--match]` — Query by filters\n- `wh thing search <query> [--shape] [--kind] [--about] [--mode]` — Search text\n- `wh thing rename <name> <newName>` — Rename\n- `wh thing refs <wref> [--inbound] [--outbound] [--field]` — Show field references; use `wh thing about` for assertions about the target thing\n- `wh thing about <wref> [--shape] [--match] [--depth] [--resolve-collections] [--role from|to|ends] [--limit] [--include-retracted]` — Show assertions about the target identity; `--resolve-collections` expands bare/@HEAD/@ALL members, `--role` filters direction; not pinned @vN\n\n- `wh view evaluate VIEW [--limit N] [--cursor TOK] [--all]`\n### commit — Write operations\n- `wh commit submit [--ops|--file|--add|--revise|--retract] [--dry-run] [--skip-existing]` — Submit operations, or evaluate the complete bounded input without durable changes under `--dry-run`. JSONL preview emits one operation row per input plus one summary.\n- `wh shape template <shape> [shape2 ...] [--kind] [--operation add|revise|retract] [-o file]` — Generate sample ops\n\n### assertion — Assertion operations\n- `wh assertion list [--about wref] [--shape] [--match] [--include-retracted]` — Browse assertions\n- `wh assertion view <wref> [--version] [--include-retracted]` — Assertion details\n- `wh assertion create --shape <s> --name <n> --about <wref> [--data] [-m] [--committer]` — Create assertion\n- `wh assertion revise <wref> --data <json> [--message] [--committer]` — Revise assertion\n- `wh assertion retract <wref> -m <message> [--reason] [--committer] [--expected-version]` — Retract assertion\n- `wh assertion history <wref> [--include-retracted]` — Assertion history\n\n### shape — Shape management\n- `wh shape list [--match] [--include-retracted]` — List all shapes\n- `wh shape view <name> [--include-retracted]` — Shape details\n- `wh shape revise <name> (--fields|--file)`\n- `wh shape create <name> (--fields|--file)`\n- `wh shape retract <name> -m <message> [--reason] [--expected-version]` — Retract shape\n- `wh shape history <name> [--include-retracted]` — Shape history\n- `wh shape rename <oldName> <newName>` — Rename shape\n\n### repo — Repository management\n- `wh repo create <org/name> [--display-name] [--description] [--visibility]` — Create repo\n- `wh repo list [org]` — List repos\n- `wh repo view [org/repo]` — Repo details\n\n### org — Organization management\n- `wh org create <name> [--display-name]` — Create a new organization\n- `wh org view <name>` — View organization details (alias: info)\n- `wh org list` — List all organizations\n\n### sub — Subscription management\n- `wh sub create <name> [flags]` — Create a subscription\n- `wh sub view <name>` — View subscription details\n- `wh sub list` — List all subscriptions\n- `wh sub log <name>` — Tail subscription delivery feed\n- `wh sub attempts <runId>` — Show attempt history for a run\n- `wh sub pause <name>` — Pause a subscription\n- `wh sub resume <name>` — Resume a paused subscription\n- `wh sub bind <name> [--credentials]` — Bind a credential set to a subscription for webhook auth\n- `wh sub unbind <name>` — Remove credential binding from a subscription\n- `wh sub delete <name>` — Retire; name reserved\n\n### notifications — Action notification listing\n- `wh notifications [--limit] [--since]` — List repo-scoped action notifications\n\n### credential — Credential set management\n- `wh credential create <name> [--repo org/repo | --org org] [--scope] [--description]` — Create an empty credential set\n- `wh credential list [--repo org/repo | --org org]` — List credential sets accessible from a repo or org\n- `wh credential view <name> [--repo org/repo | --org org]` — View a credential set (key names only, no values)\n- `wh credential delete <name> [--repo org/repo | --org org]` — Delete a credential set and its Vault object\n- `wh credential set <setName> [<keyName>] [--repo org/repo | --org org] [--value]` — Set credential key(s). With `<keyName>`: single-key form (reads value from `--value` or stdin). Without `<keyName>`: batch form (reads JSON object from stdin, e.g. `{\"KEY\":\"val\"}`)\n- `wh credential unset <setName> <keyName> [--repo org/repo | --org org]` — Remove a key from a credential set\n- `wh credential audit <setName> [--repo org/repo | --org org]` — View audit log for a credential set\n- `wh credential revoke <setName> [--repo org/repo | --org org] [--reason]` — Revoke a credential set (blocks new binds and stops bound webhook deliveries)\n\n### component — Component management\n- `wh component validate <path>` — Validate package\n- `wh component install <org/name>` — Install; resource-phase CONFLICT → 2, degraded replay → 1\n- `wh component register <name> --org <org> --manifest <path> [flags]` — Register component identity\n- `wh component unregister <org/name>` — Remove a registered component identity\n- `wh component registry list --org <org>` — List registered components\n- `wh component registry view <org/name>` — View a registered component\n- `wh component registry update <org/name> [flags]` — Update a registered component\n- `wh component list` — List installed components\n- `wh component update <org/name>` — Update; resource-phase CONFLICT → 2, degraded replay → 1\n- `wh component view <org/name>` — Show component details (alias: show)\n- `wh component doctor <org/name>` — Health; degraded/error/uninstalled → exit 1\n- `wh component teardown <org/name>` — Pause component subscriptions\n\n### Getting More Info\n- `wh help` — help overview\n- `wh <domain>` — domain verbs\n- `wh <domain> <verb> --help` — verb flags and examples\n- `wh help --format json` — `CliSpecV2` (`schemaVersion: 2`): global/contextual/root tables and command overrides\n\n## Common Workflows\n\n**Agent identities:** `wh auth status` shows your user identity; `wh token create --committer-identity wh:org/repo/agent` binds a persona to a PAT. Install `warmhub/identity` in your chosen repo and manage personas with `wh thing`. [Create an agent identity](https://docs.warmhub.ai/auth/agent-identities/) covers setup, private-repo scopes, attribution, and retirement.\n\n**Explore a repo:**\n```bash\nwh thing list --repo org/repo             # see all things in HEAD\nwh thing view alice --repo org/repo       # inspect a specific thing\nwh thing history alice --repo org/repo    # inspect version history\nwh thing about alice                      # assertions about a thing\n```\n\n**Create an assertion** (most common write):\n```bash\n# Assertion = Shape with composes:[\"Assertion\"]; write a thing with data.about.\n# --about is written as data.about.\nwh assertion create my-assertion --shape MyShape --about target-name \\\n  --data '{\"field_a\":1,\"field_b\":\"value\"}' --repo org/repo\n# Output includes per-operation status; relay failures.\n```\n\n**Write entrypoint** (batches and streams):\n```bash\nwh commit submit --add my-item --shape MyShape \\\n  --about target-name --data '{\"field_a\":1}' --repo org/repo\n```\n\n**Batch write via file** (generate template → edit → submit):\n```bash\nwh shape template Hypothesis Evidence -o ops.json    # --kind assertion --about X for assertions\n# edit ops.json — fill FILL_IN placeholders\nwh commit submit --file ops.json -m \"batch update\"   # submit all ops (bare `wh commit` is equivalent)\n# --file format: docs.warmhub.ai/cli-reference/commit-operations\n```\n\n**Bulk write (JSONL stream, >1k ops)** — one chunked stream beats per-record commits (~60× faster):\n```bash\nwh shape template MyShape -o ops.jsonl                          # one op per line (.jsonl)\nID=\"bulk-$(date +%s)\"   # caller id for chunk correlation\nwh commit submit --file ops.jsonl --stream-id \"$ID\" --chunk-size 5000 \\\n  --skip-existing --progress -m \"bulk ingest\" --repo org/repo\n# --chunk-size: ops per append chunk (default 1000, max 10000); chunk≈1 is ~60× slower\n# --skip-existing: skips already-written add ops (drops per-row read-before-write)\n# --stream-id identifies the submission but provides no receipt or resume.\n# After an outcome-unknown append, stop writes and reconcile attempted + unsent\n# work from a later verified checkpoint; never blindly replay revise/retract.\n```\n\n**Create collections:**\n```bash\nwh commit submit --add route --shape Arc --data '{\"from\":\"a\",\"to\":\"b\"}'\nwh assertion create route-support --shape Supports --about route --data '{\"confidence\":0.8}' --repo org/repo\n```\n\n**Modify data:**\n```bash\nwh thing revise my-item --keep-shapes --data '{\"x\":5,\"y\":3}' -m \"update\" --repo org/repo\nwh thing retract old-item -m \"withdrawn\" --reason \"data feed contaminated\" --repo org/repo\n```\n\n**Query and filter:**\n```bash\nwh thing query --shape MyShape                       # by shape\nwh thing query --kind assertion --about alice        # by kind + target\nwh thing history alice --limit 10                    # version history\n```\n\n## Built-in Content shape\n\nWarmHub repos expose three well-known content Things (Shape `Content`):\n- `Readme`  — stored markdown for humans\n- `Agents`  — stored markdown guidance for AI agents\n- `LlmsTxt` — synthesized per-request sitemap (read-only)\n\nFetch via `wh repo content get --kind readme|agents|llms-txt`,\n`client.repo.getReadme/getAgents/getLlmsTxt`, MCP `warmhub_repo_content_get`,\nor raw HTTP `GET /{org}/{repo}/readme.md|agents.md|llms.txt`.\nSee `wh repo describe` → `additionalInformation` for the discovery field.\n\n## Query Discipline\n- Plan the repo, shapes, and wrefs you need before the first query.\n- Gather the needed facts from one repo before switching to another.\n- Do the queries first, then write one complete answer.\n\n## Agent Tips\n- **Always run commands for live data** — this context describes the CLI, not repo contents\n- **Before writing, discover wrefs** — run `wh thing list` or `wh shape list`\n- **Shape field types**: `string`, `number`, `boolean`, `wref`, arrays, optionals, nested objects\n- **Write commands return per-operation results** — relay failures and affected wrefs to the user\n- **Pass data inline** with `--data '{...}'` — do NOT create temp files\n- Add `--json` to any command for machine-readable JSON output\n- **Aliases teach canonical commands** — executing aliases emit a status hint; misleading lifecycle aliases reject and point to `retract`\n- Writes go through `wh commit submit` (or bare `wh commit`) or wrappers (`create`, `revise`, `retract`, `assertion create`). `retract` withdraws an identity and creates a history entry; `wh thing restore <durableId>` makes it active again.\n- Use `wh doctor` to check environment health\n";
 
 // ../../packages/warmhub-cli/src/domains/prime.ts
 function buildMarkdown(config2) {
@@ -68584,9 +68596,7 @@ var retractFlags3 = {
     description: "only retract if the target is still at this version (optimistic concurrency)"
   }),
   message: flag.string({ short: "m", description: "Commit message" }),
-  committer: flag.string({
-    description: "Committer wref: a Thing name (bot-1) or a Shape (hub/shapes/Agent)"
-  })
+  committer: committerFlag
 };
 var handleCreate7 = async (ctx, { flags, args }) => {
   const shapeName = args[0];
@@ -70833,8 +70843,6 @@ async function dispatch(ctx) {
   }
   await dispatchDomain(ctx, invocation);
 }
-// ../../packages/warmhub-cli/src/manifest/shared-infra.ts
-var SHARED_INFRA_SHAPES = findSystemComponent(SYSTEM_COMPONENT_ID)?.shapes.filter((shape) => shape.installInfra === true) ?? [];
 // ../../packages/warmhub-cli/src/parser/binder.ts
 function effectiveSpecs(specs, options) {
   return specs.map((spec) => {
@@ -72240,7 +72248,7 @@ function resolveLogLevel(flagLevel, env) {
 // package.json
 var package_default3 = {
   name: "@warmhub/cli",
-  version: "0.144.0",
+  version: "0.146.0",
   private: false,
   type: "module",
   description: "The wh CLI for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",
@@ -72865,5 +72873,5 @@ process.exitCode = interceptedExitCode === undefined ? await runPreparedCli(laun
   version: package_default3.version
 }) : interceptedExitCode;
 
-//# debugId=F70A24E2F3694B9264756E2164756E21
-//# warmhub-cli-build-info {"cliVersion":"0.144.0","sdkVersion":"0.142.0"}
+//# debugId=C60966EBD66E31FA64756E2164756E21
+//# warmhub-cli-build-info {"cliVersion":"0.146.0","sdkVersion":"0.144.0"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@warmhub/cli",
-  "version": "0.144.0",
+  "version": "0.146.0",
   "private": false,
   "type": "module",
   "description": "The wh CLI for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",