@warmhub/cli 0.145.0 → 0.147.0

package/dist/wh.js

@@ -18538,6 +18538,9 @@ function decodeDurableId(token) {
     thingId: bytesToUuid(payload, UUID_BYTES)
   };
 }
+function isDurableId(token) {
+  return decodeDurableId(token) !== null;
+}
 var VERSION_SELECTOR_RE = /^(?:v0*[1-9]\d*|[Hh][Ee][Aa][Dd]|[Aa][Ll][Ll])$/;
 function parseDurableReferenceToken(raw) {
   const at = raw.lastIndexOf("@");
@@ -18577,7 +18580,7 @@ function isReservedShapeName(name) {
   return name === RESERVED_THING_ROOT;
 }
 function reservedThingRootMessage(name) {
-  return `Name "${name}" is under the reserved root "${RESERVED_THING_ROOT_PREFIX}"; only Shapes live there, as ${RESERVED_THING_ROOT_PREFIX}shapes/<Name>`;
+  return `Name "${name}" is under the reserved root "${RESERVED_THING_ROOT_PREFIX}"; only platform-owned names may live there, including ${RESERVED_THING_ROOT_PREFIX}shapes/<Name> and ${RESERVED_THING_ROOT_PREFIX}redacted/<durable-id>`;
 }
 
 // ../../packages/rules/src/wref.ts
@@ -18754,11 +18757,13 @@ var COMMIT_OPERATIONS = [
   "retract",
   "reaffirm",
   "rename",
+  "redact",
   "remove",
   "restore",
   "rewrite"
 ];
 var PRIVILEGED_COMMIT_OPERATIONS = {
+  redact: "things:redact",
   remove: "things:delete",
   rewrite: "things:rewrite"
 };
@@ -18837,7 +18842,16 @@ var COMPONENT_TEMPLATE_VALUES = {
   "org-name": (ctx) => ctx.orgName,
   "repo-name": (ctx) => ctx.repoName
 };
-var TEMPLATE_TOKEN_RE = /<([a-z-]+)>/g;
+function parseComponentTemplateToken(raw) {
+  switch (raw) {
+    case "org-name":
+    case "repo-name":
+      return raw;
+    default:
+      return;
+  }
+}
+var TEMPLATE_TOKEN_RE = /<([^>]+)>/g;
 function listComponentTemplateTokens(value) {
   const tokens = new Set;
   for (const match of value.matchAll(TEMPLATE_TOKEN_RE)) {
@@ -18848,15 +18862,15 @@ function listComponentTemplateTokens(value) {
   return [...tokens];
 }
 function unsupportedComponentTemplateTokens(value) {
-  return listComponentTemplateTokens(value).filter((token) => !(token in COMPONENT_TEMPLATE_VALUES));
+  return listComponentTemplateTokens(value).filter((token) => parseComponentTemplateToken(token) === undefined);
 }
 function resolveComponentTemplate(value, ctx) {
   return value.replace(TEMPLATE_TOKEN_RE, (_match, token) => {
-    const resolver = COMPONENT_TEMPLATE_VALUES[token];
-    if (!resolver) {
+    const parsed = parseComponentTemplateToken(token);
+    if (!parsed) {
       throw new Error(`Unsupported component template token <${token}>`);
     }
-    return resolver(ctx);
+    return COMPONENT_TEMPLATE_VALUES[parsed](ctx);
   });
 }
 
@@ -25940,6 +25954,8 @@ var CORRECTED_THING_SHAPE_NAME = "CorrectedThing";
 var CORRECTED_THING_FIELDS = {
   correctionLog: { type: "array", items: { reason: "string" }, minItems: 1 }
 };
+var REDACTED_THING_SHAPE_NAME = "RedactedThing";
+var REDACTED_THING_FIELDS = {};
 var SYSTEM_SHAPES = [
   {
     name: "ComponentInstall",
@@ -25965,6 +25981,12 @@ var SYSTEM_SHAPES = [
     name: CORRECTED_THING_SHAPE_NAME,
     fields: CORRECTED_THING_FIELDS,
     onDemand: true
+  },
+  {
+    name: REDACTED_THING_SHAPE_NAME,
+    fields: REDACTED_THING_FIELDS,
+    onDemand: true,
+    systemOnlyCertification: true
   }
 ];
 var SYSTEM_MANIFEST = {
@@ -26006,6 +26028,7 @@ var SYSTEM_PROTECTED_SHAPES = SYSTEM_COMPONENT.shapes.filter((shape) => shape.in
 var SYSTEM_PROTECTED_FAMILY_SHAPES = SYSTEM_PROTECTED_SHAPES.filter((shape) => shape.onDemand !== true);
 var SYSTEM_INFRA_SHAPE_NAMES = new Set(SYSTEM_COMPONENTS.flatMap((entry) => entry.shapes.filter((shape) => shape.installInfra === true).map((shape) => shape.name)));
 var SYSTEM_SHAPE_NAMES2 = new Set(SYSTEM_MANIFEST.shapes.map((shape) => shape.name));
+var SYSTEM_ONLY_CERTIFICATE_SHAPE_NAMES = new Set(SYSTEM_COMPONENT.shapes.filter((shape) => shape.systemOnlyCertification === true).map((shape) => shape.name));
 function isSystemShapeName(name) {
   return SYSTEM_SHAPE_NAMES2.has(name);
 }
@@ -44826,6 +44849,7 @@ var DEFINITE_CLIENT_REJECT_CODES = new Set([
   "CONFLICT",
   "NAME_TAKEN",
   "TARGET_REMOVED",
+  "TARGET_REDACTED",
   "ALREADY_RETRACTED",
   "ARCHIVED",
   "RATE_LIMITED",
@@ -46325,6 +46349,11 @@ var currentErrorDetailsSchema = exports_external.discriminatedUnion("reason", [
     reason: exports_external.literal("target_removed"),
     targetDurableId: exports_external.string().min(1),
     fieldPath: exports_external.string().optional()
+  }).loose(),
+  exports_external.object({
+    reason: exports_external.literal("target_redacted"),
+    targetDurableId: exports_external.string().min(1),
+    fieldPath: exports_external.string().optional()
   }).loose()
 ]);
 var currentBaseShape = {
@@ -46831,7 +46860,7 @@ function createStreamingSubmissionHandle(input, deps) {
 // ../../packages/sdk-ts/package.json
 var package_default = {
   name: "@warmhub/sdk-ts",
-  version: "0.143.0",
+  version: "0.145.0",
   private: false,
   type: "module",
   description: "The TypeScript SDK for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",
@@ -49049,6 +49078,19 @@ class WarmHubClient {
         throw toWarmHubError(error51);
       }
     },
+    redact: async (orgName, repoName, durableId, opts) => {
+      try {
+        return await this.trpc.thing.redact.mutate({
+          orgName,
+          repoName,
+          durableId,
+          expectedVersion: opts.expectedVersion,
+          eventRequestId: opts.eventRequestId
+        });
+      } catch (error51) {
+        throw toWarmHubError(error51);
+      }
+    },
     rewrite: async (orgName, repoName, wref, opts) => {
       try {
         return await this.trpc.thing.rewrite.mutate({
@@ -51867,11 +51909,13 @@ function loadProfileStore(path) {
   } catch (cause) {
     throw corruptedAuthError(p, cause);
   }
-  if (parsed === null || typeof parsed !== "object" || parsed.version !== 1 || parsed.profiles === null || typeof parsed.profiles !== "object" || Array.isArray(parsed.profiles)) {
+  if (!isProfileStore(parsed))
     throw corruptedAuthError(p);
-  }
   return parsed;
 }
+function isProfileStore(value) {
+  return isPlainObject(value) && value.version === 1 && isPlainObject(value.profiles) && Object.values(value.profiles).every((profile) => isPlainObject(profile) && isPlainObject(profile.tokens));
+}
 function corruptedAuthError(path, cause) {
   getLog().error("auth.profile.corrupt", { path });
   return new CliError(3 /* Config */, "CONFIG", `Auth file at ${path} is unreadable or in an unknown format.`, cause, `Remove the file (\`rm ${path}\`) and run \`wh auth login\` to re-authenticate.`);
@@ -54142,7 +54186,7 @@ function emitNoMatchHint(ctx, match, count) {
 }
 
 // ../../packages/warmhub-cli/src/domains/commit-output-contract-id.ts
-var COMMIT_SUBMIT_OUTPUT_SCHEMA_ID = "wh.commit.submit.result/v0.11";
+var COMMIT_SUBMIT_OUTPUT_SCHEMA_ID = "wh.commit.submit.result/v0.12";
 function identifyCommitSubmitOutput(value) {
   if ("schema" in value) {
     if (value.schema === COMMIT_SUBMIT_OUTPUT_SCHEMA_ID) {
@@ -55695,7 +55739,7 @@ var headFlags = {
   }),
   where: flag.string({
     multiple: true,
-    description: `Field-value WHERE predicate (repeatable). Syntax: field=val, field>=val, field~prefix*, field in:[a,b] (max ${MAX_WHERE_IN_VALUES} values), field? (exists). Predicates are served by the typed field index; unservable fields return a machine-readable field-index error instead of scanning JSONB bodies.`
+    description: `Field-value WHERE predicate (repeatable). Syntax: field=val, field>=val, field~prefix*, field in:[a,b] (max ${MAX_WHERE_IN_VALUES} values), field? (exists). Text comparisons ignore case. Predicates are served by the typed field index; unservable fields return a machine-readable field-index error instead of scanning JSONB bodies.`
   })
 };
 var handleHead = async (ctx, { flags, args }) => {
@@ -55914,7 +55958,7 @@ var queryFlags = {
   }),
   where: flag.string({
     multiple: true,
-    description: `Field-value WHERE predicate (repeatable). Syntax: field=val, field>=val, field~prefix*, field in:[a,b] (max ${MAX_WHERE_IN_VALUES} values), field? (exists). Predicates are served by the typed field index; unservable fields return a machine-readable field-index error instead of scanning JSONB bodies.`
+    description: `Field-value WHERE predicate (repeatable). Syntax: field=val, field>=val, field~prefix*, field in:[a,b] (max ${MAX_WHERE_IN_VALUES} values), field? (exists). Text comparisons ignore case. Predicates are served by the typed field index; unservable fields return a machine-readable field-index error instead of scanning JSONB bodies.`
   })
 };
 var handleQuery = async (ctx, { flags }) => {
@@ -56136,6 +56180,59 @@ function renderQueryResults(out, c, result) {
   out(`${c.dim}${items.length} result(s)${c.reset}`);
 }
 
+// ../../packages/warmhub-cli/src/domains/thing/redact.ts
+var USAGE = "Usage: wh thing redact <durableId> [--expected-version <n>] [--yes]";
+var EXAMPLE = "wh thing redact 040T1QCTF2Y79... --expected-version 3 --yes";
+var redactFlags = {
+  "expected-version": flag.number({
+    description: "only redact if the Thing is still at this version (default: the version read before redacting)"
+  }),
+  yes: flag.boolean({ short: "y", description: "Skip confirmation prompt" }),
+  "event-request-id": operationEventRequestIdFlag
+};
+var handleThingRedact = async (ctx, { flags, args }) => {
+  const durableId = args[0];
+  if (!durableId)
+    usageError(USAGE, EXAMPLE);
+  const repoRef = getRepoRef(ctx);
+  if (!isDurableId(durableId)) {
+    usageError(`${USAGE}
+Redaction requires the Thing's bare durable ID, never a wref.`, `wh thing resolve ${durableId}${repoRef ? ` --repo ${repoRef}` : ""}`);
+  }
+  const { org, repo } = parseOrgRepo(repoRef, ctx.config);
+  const c = ctx.colors;
+  let expectedVersion = parsePositiveIntFlag(flags["expected-version"], "--expected-version", EXAMPLE);
+  let label = durableId;
+  if (expectedVersion === undefined || !flags.yes) {
+    const thing = await ctx.client.thing.get(org, repo, durableId, undefined, {
+      includeRetracted: true
+    });
+    expectedVersion ??= thing.version;
+    label = `${thing.wref} (${durableId})`;
+  }
+  if (!flags.yes) {
+    const confirmed = await ctx.confirm?.(`Irreversibly redact ${label} at v${expectedVersion}? This erases its canonical content and former name, but not backups, completed exports, logs, or downstream copies.`);
+    if (!confirmed) {
+      ctx.status("Cancelled");
+      return;
+    }
+  }
+  const eventRequestId = flags["event-request-id"] ?? createOperationEventRequestId();
+  ctx.status(`Operation event request: ${eventRequestId}`);
+  const receipt = await ctx.client.thing.redact(org, repo, durableId, {
+    eventRequestId,
+    expectedVersion
+  });
+  writeOutput(ctx, receipt, () => {
+    if (receipt.pruned) {
+      ctx.out(`${c.dim}Replayed${c.reset} ${displayName(c, durableId)} (the receipt was pruned; the Thing was removed since)`);
+      return;
+    }
+    const operation = receipt.operations.find((candidate) => candidate.operation === "redact");
+    ctx.out(operation?.status === "noop" ? `${c.dim}Already redacted${c.reset} ${displayName(c, durableId)}` : `${c.green}Redacted${c.reset} ${displayName(c, durableId)}`);
+  });
+};
+
 // ../../packages/warmhub-cli/src/domains/thing/refs.ts
 var refsFlags = {
   inbound: flag.boolean({
@@ -56254,8 +56351,8 @@ var handleReleaseLease = async (ctx, { flags, args }) => {
 };
 
 // ../../packages/warmhub-cli/src/domains/thing/remove.ts
-var USAGE = "Usage: wh thing remove <wref|durableId> [--expected-version <n>] [--yes]";
-var EXAMPLE = "wh thing remove cave --yes";
+var USAGE2 = "Usage: wh thing remove <wref|durableId> [--expected-version <n>] [--yes]";
+var EXAMPLE2 = "wh thing remove cave --yes";
 var removeFlags = {
   "expected-version": flag.number({
     description: "only remove if the Thing is still at this version (default: the version read before removing)"
@@ -56266,7 +56363,7 @@ var removeFlags = {
 var handleThingRemove = async (ctx, { flags, args }) => {
   const target = args[0];
   if (!target)
-    usageError(USAGE, EXAMPLE);
+    usageError(USAGE2, EXAMPLE2);
   const { org, repo } = parseOrgRepo(getRepoRef(ctx), ctx.config);
   const c = ctx.colors;
   let expectedVersion = parsePositiveIntFlag(flags["expected-version"], "--expected-version", "wh thing remove cave --expected-version 3");
@@ -56476,8 +56573,8 @@ var handleRevise2 = async (ctx, { flags, args }) => {
 };
 
 // ../../packages/warmhub-cli/src/domains/thing/rewrite.ts
-var USAGE2 = "Usage: wh thing rewrite <name@vN|durableId@vN> --shape <Shape>... (--data <json-object> | --file <path>) [--yes]";
-var EXAMPLE2 = "wh thing rewrite cave@v2 --shape Location --shape CorrectedThing --file corrected.json --yes";
+var USAGE3 = "Usage: wh thing rewrite <name@vN|durableId@vN> --shape <Shape>... (--data <json-object> | --file <path>) [--yes]";
+var EXAMPLE3 = "wh thing rewrite cave@v2 --shape Location --shape CorrectedThing --file corrected.json --yes";
 var rewriteFlags = {
   shape: flag.string({
     multiple: true,
@@ -56497,24 +56594,24 @@ function parseTarget(target) {
   try {
     parsed = parseWref(target);
   } catch (error51) {
-    usageError(`${USAGE2}
-${error51 instanceof Error ? error51.message : String(error51)}`, EXAMPLE2);
+    usageError(`${USAGE3}
+${error51 instanceof Error ? error51.message : String(error51)}`, EXAMPLE3);
   }
   if (parsed.version.type !== "pinned") {
-    usageError(`${USAGE2}
-Name the exact version to correct, e.g. cave@v2.`, EXAMPLE2);
+    usageError(`${USAGE3}
+Name the exact version to correct, e.g. cave@v2.`, EXAMPLE3);
   }
   return { wref: stripWrefVersion(target), version: parsed.version.n };
 }
 var handleThingRewrite = async (ctx, { flags, args }) => {
   const target = args[0];
   if (!target)
-    usageError(USAGE2, EXAMPLE2);
+    usageError(USAGE3, EXAMPLE3);
   const { wref, version: version2 } = parseTarget(target);
   const shapes = flags.shape ?? [];
   if (shapes.length === 0) {
-    usageError(`${USAGE2}
-State the Shapes the version declares, plus CorrectedThing.`, EXAMPLE2);
+    usageError(`${USAGE3}
+State the Shapes the version declares, plus CorrectedThing.`, EXAMPLE3);
   }
   const { org, repo } = parseOrgRepo(getRepoRef(ctx), ctx.config);
   const c = ctx.colors;
@@ -56523,7 +56620,7 @@ State the Shapes the version declares, plus CorrectedThing.`, EXAMPLE2);
     file: flags.file,
     inlineFlag: "--data",
     missingMessage: "--data is required for rewrite unless --file is provided: the complete replacement body",
-    example: EXAMPLE2
+    example: EXAMPLE3
   });
   if (ctx.dryRun) {
     const validation = await ctx.client.commit.validate(org, repo, [
@@ -57126,6 +57223,20 @@ var THING_DOMAIN = defineDomain({
       ],
       handler: handleThingRemove
     },
+    redact: {
+      prime: false,
+      summary: "Irreversibly erase canonical content while preserving identity (needs things:redact)",
+      args: "<durableId>",
+      flags: redactFlags,
+      examples: [
+        "wh thing redact 040T1QCTF2Y79... --yes",
+        "wh thing redact 040T1QCTF2Y79... --expected-version 3 --yes"
+      ],
+      notes: [
+        "Core redaction does not erase backups, completed exports, logs, or copies already delivered downstream."
+      ],
+      handler: handleThingRedact
+    },
     rewrite: {
       prime: false,
       summary: "Replace the body of one exact version in place (needs things:rewrite)",
@@ -57369,7 +57480,7 @@ var listFlags = {
   all: flag.boolean({ description: "Fetch all pages" }),
   count: flag.boolean({ description: "Return count of matching assertions" }),
   field: flag.string({
-    description: "exact data-field filter (data.path=value); served by the typed field index"
+    description: "data-field equality filter (data.path=value); served by the typed field index; text ignores case"
   }),
   match: flag.string({ description: "Filter by wref glob pattern" }),
   "resolve-collections": flag.boolean({
@@ -59687,7 +59798,7 @@ var createFlags3 = {
 };
 
 // ../../packages/warmhub-cli/src/domains/commit-stream-output-contract-id.ts
-var COMMIT_SUBMIT_STREAM_ROW_SCHEMA_ID = "wh.commit.submit.stream.row/v0.10";
+var COMMIT_SUBMIT_STREAM_ROW_SCHEMA_ID = "wh.commit.submit.stream.row/v0.11";
 function identify(row) {
   if ("schema" in row) {
     throw new Error("Streaming submission row already defines a schema field");
@@ -59954,6 +60065,7 @@ function retractHint(name) {
   return `use {"operation":"retract","name":"${name ?? "<wref>"}"} or \`wh commit submit --retract${name ? ` ${name}` : ""}\``;
 }
 var PRIVILEGED_OPERATION_HINTS = {
+  redact: ({ name }) => `To irreversibly erase canonical Thing content while preserving its identity, use \`wh thing redact ${name && isDurableId(name) ? name : "<durable-id>"} --expected-version <n> --yes\`.`,
   remove: ({ name }) => `To delete the Thing permanently, use \`wh thing remove ${name ?? "<wref>"}\`. To withdraw it, ${retractHint(name)}.`,
   rewrite: ({ name, version: version2 }) => `To correct a version in place, use \`wh thing rewrite ${name ?? "<wref>"}@v${typeof version2 === "number" ? version2 : "<n>"} --shape <Shape>... --file <body.json>\`.`
 };
@@ -61665,7 +61777,7 @@ function bindComponentMethodArgs(invocation, method) {
 }
 
 // ../../packages/warmhub-cli/src/component-exec.ts
-var USAGE3 = "wh component exec <component> <method> [args] --repo org/repo";
+var USAGE4 = "wh component exec <component> <method> [args] --repo org/repo";
 function methodHelpHint(componentName, methodName, installRepo) {
   return `wh component exec ${componentName} ${methodName} --help --repo ${installRepo}`;
 }
@@ -61719,7 +61831,7 @@ var handleComponentExec = async (ctx, _domain) => {
   const helpRequested = invocation.help;
   const dryRun = invocation.flags["dry-run"] === true;
   if (!invocation.component)
-    usageError("Component name is required", USAGE3);
+    usageError("Component name is required", USAGE4);
   const componentName = invocation.component;
   const methodName = invocation.method;
   const { org, repo } = parseOrgRepo(getRepoRef(ctx), ctx.config);
@@ -63252,7 +63364,7 @@ var handleCreate3 = async (ctx, { flags, args }) => {
   });
   writeOutput(ctx, result, () => {
     const c = ctx.colors;
-    ctx.status(`${c.green}Created credential set${c.reset} ${c.cyan}${name}${c.reset} (${scope}) in ${c.cyan}${formatCredentialContextTarget(context)}${c.reset}`);
+    ctx.status(`${c.green}Created credential set${c.reset} ${c.cyan}${name}${c.reset} (${result.scope}) in ${c.cyan}${formatCredentialContextTarget(context)}${c.reset}`);
   });
 };
 var handleList3 = async (ctx, { flags }) => {
@@ -65120,8 +65232,10 @@ var handleAddMember = async (ctx, { flags, args }) => {
   writeOutput(ctx, result, () => {
     if (result.status === "pending") {
       ctx.status(`${c.green}Invited${c.reset} ${c.bold}${email3}${c.reset} to ${c.bold}${orgName}${c.reset} as ${c.cyan}${result.role}${c.reset} ${c.dim}— invite email pending${c.reset}`);
-    } else {
+    } else if (result.status === "active") {
       ctx.status(`${c.green}Added${c.reset} ${c.bold}${email3}${c.reset} to ${c.bold}${orgName}${c.reset} as ${c.cyan}${result.role}${c.reset}`);
+    } else {
+      ctx.status(`${c.bold}${email3}${c.reset} in ${c.bold}${orgName}${c.reset}: membership status ${result.status}`);
     }
   });
 };
@@ -65177,7 +65291,7 @@ var handleListMembers = async (ctx, { args, flags }) => {
     for (const m of members) {
       const name = [m.firstName, m.lastName].filter(Boolean).join(" ");
       const display = name ? ` ${c.dim}(${name})${c.reset}` : "";
-      const status = m.status === "pending" ? `  ${c.yellow}pending${c.reset}` : `  ${c.dim}active${c.reset}`;
+      const status = m.status === "pending" ? `  ${c.yellow}pending${c.reset}` : `  ${c.dim}${m.status}${c.reset}`;
       ctx.out(`  ${c.cyan}${m.email}${c.reset}${display}  ${c.dim}${m.role}${c.reset}${status}`);
     }
   });
@@ -65463,7 +65577,7 @@ var ORG_DOMAIN = defineDomain({
 });
 
 // ../../packages/warmhub-cli/src/domains/prime-content.md
-var prime_content_default = "# WarmHub CLI Context\n> **Context Recovery**: Run `wh prime` after compaction or new session\n\n## Environment\n{{REPO_LINE}}\n\n## Core Concepts\n- **Thing**: A named entity versioned by writes. **Assertion**: A thing that makes a shape-validated claim about another thing.\n- **Shape**: A thing defining data structure. **Write**: One or more add/revise/retract operations with per-operation results.\n- **wref**: A thing's full name: `alice`, or `hub/shapes/Player` for a Shape. Cross-repo: `wh:org/repo/alice`.\n\n## Versioned Wrefs\n- `hub/shapes/X` addresses the Shape X. `@vN` pins a version. `--shape` takes bare names.\n- Floating write refs to retracted targets fail; existing pinned versions remain valid.\n- Rename invalidates old spellings, including `@vN`; the new name resolves history.\n- Untyped wrefs accept any thing. `wref<T>` requires the target's shape to be `T`; a shape has no shape, so never satisfies it. `wref?` coalesces only `thing_absent`, never a missing shape.\n- Wref `binding`: `identity` follows the Thing, `versioned` pins.\n\n## Key Workflows\n\n**Write data** (discover shapes → scaffold ops → submit):\n```bash\nwh shape list --repo org/repo                             # list available shapes\nwh shape view ShapeName --repo org/repo                   # inspect fields\nwh shape template ShapeName -o ops.json --repo org/repo   # scaffold write ops (supports --kind assertion)\n# edit ops.json — fill FILL_IN placeholders — then:\nwh commit submit --file ops.json --dry-run --repo org/repo  # preview; remove --dry-run to submit\n# or single assertion (no file needed):\nwh assertion create my-assertion --shape ShapeName --about target --data '{\"field\":1}' --repo org/repo  # ShapeName composes Assertion\n# Relay failed operation details when present. Never hand-guess ops JSON — use `wh shape template <Shape>`.\n```\n\n**Read data:**\n```bash\nwh thing list --repo org/repo                 # all things at HEAD\nwh thing view alice --repo org/repo           # inspect a thing\nwh thing query --shape MyShape --repo org/repo  # find things by shape\nwh thing about hub/shapes/X --repo org/repo   # assertions about a shape\nwh assertion list --repo org/repo             # all assertions at HEAD\nwh thing history alice --repo org/repo        # version history\n\n# Batch read — wh thing view is variadic (max 500 wrefs/call):\nwh thing view alice bob                             # variadic positionals\nwh thing view --file wrefs.txt --json               # one wref per line\ncat wrefs.txt | wh thing view --format jsonl        # one JSON line per *deduped* requested wref\n```\n\n## Wref Quick Reference\n\nWrites use explicit names and wrefs. Untyped fields, collection members,\nassertion `about`, and committers accept any thing. Create a deterministic\ntarget before referencing it in the same commit.\n`WH_CLIENT_FLAGS=legacy-wrefs`: raw v1 `commit submit` only; a bare name is a Shape.\n\n## Command Reference\n\n**Global flags**: `--repo`, `--format`, `--json`, `--live`\n### thing — Things\n- `wh thing list [--shape] [--kind] [--match] [--include-retracted]` — Current HEAD state\n- `wh thing view [<wref>...] [--file <path>] [--version] [--depth] [--include-retracted] [--data-mode auto|full]` — Thing details. Variadic (max 500). `--version` implies `--include-retracted`. Batch JSON returns `{ requested, items, missing }`; jsonl emits one row per deduped requested wref. Large Set/List bodies summarize by default; use `--data-mode full` for canonical collection JSON.\n- `wh thing history [wref] [--shape] [--about] [--include-retracted]` — Version history\n- `wh thing resolve <wref>` — Resolve a wref to its canonical thing identity\n- `wh thing create <name> (--shape <S>...|--shapeless) (--data|--file)` — Create\n- `wh thing revise <name> (--shape <S>...|--shapeless|--keep-shapes) [--data] [--expected-version]` — Revise (CONFLICT if HEAD≠n)\n- `wh thing retract <name> -m <message> [--reason] [--expected-version]` — Retract\n- `wh thing query [--shape] [--kind] [--about] [--match]` — Query by filters\n- `wh thing search <query> [--shape] [--kind] [--about] [--mode]` — Search text\n- `wh thing rename <name> <newName>` — Rename\n- `wh thing refs <wref> [--inbound] [--outbound] [--field]` — Show field references; use `wh thing about` for assertions about the target thing\n- `wh thing about <wref> [--shape] [--match] [--depth] [--resolve-collections] [--role from|to|ends] [--limit] [--include-retracted]` — Show assertions about the target identity; `--resolve-collections` expands bare/@HEAD/@ALL members, `--role` filters direction; not pinned @vN\n\n- `wh view evaluate VIEW [--limit N] [--cursor TOK] [--all]`\n### commit — Write operations\n- `wh commit submit [--ops|--file|--add|--revise|--retract] [--dry-run] [--skip-existing]` — Submit operations, or evaluate the complete bounded input without durable changes under `--dry-run`. JSONL preview emits one operation row per input plus one summary.\n- `wh shape template <shape> [shape2 ...] [--kind] [--operation add|revise|retract] [-o file]` — Generate sample ops\n\n### assertion — Assertion operations\n- `wh assertion list [--about wref] [--shape] [--match] [--include-retracted]` — Browse assertions\n- `wh assertion view <wref> [--version] [--include-retracted]` — Assertion details\n- `wh assertion create --shape <s> --name <n> --about <wref> [--data] [-m] [--committer]` — Create assertion\n- `wh assertion revise <wref> --data <json> [--message] [--committer]` — Revise assertion\n- `wh assertion retract <wref> -m <message> [--reason] [--committer] [--expected-version]` — Retract assertion\n- `wh assertion history <wref> [--include-retracted]` — Assertion history\n\n### shape — Shape management\n- `wh shape list [--match] [--include-retracted]` — List all shapes\n- `wh shape view <name> [--include-retracted]` — Shape details\n- `wh shape revise <name> (--fields|--file)`\n- `wh shape create <name> (--fields|--file)`\n- `wh shape retract <name> -m <message> [--reason] [--expected-version]` — Retract shape\n- `wh shape history <name> [--include-retracted]` — Shape history\n- `wh shape rename <oldName> <newName>` — Rename shape\n\n### repo — Repository management\n- `wh repo create <org/name> [--display-name] [--description] [--visibility]` — Create repo\n- `wh repo list [org]` — List repos\n- `wh repo view [org/repo]` — Repo details\n\n### org — Organization management\n- `wh org create <name> [--display-name]` — Create a new organization\n- `wh org view <name>` — View organization details (alias: info)\n- `wh org list` — List all organizations\n\n### sub — Subscription management\n- `wh sub create <name> [flags]` — Create a subscription\n- `wh sub view <name>` — View subscription details\n- `wh sub list` — List all subscriptions\n- `wh sub log <name>` — Tail subscription delivery feed\n- `wh sub attempts <runId>` — Show attempt history for a run\n- `wh sub pause <name>` — Pause a subscription\n- `wh sub resume <name>` — Resume a paused subscription\n- `wh sub bind <name> [--credentials]` — Bind a credential set to a subscription for webhook auth\n- `wh sub unbind <name>` — Remove credential binding from a subscription\n- `wh sub delete <name>` — Retire; name reserved\n\n### notifications — Action notification listing\n- `wh notifications [--limit] [--since]` — List repo-scoped action notifications\n\n### credential — Credential set management\n- `wh credential create <name> [--repo org/repo | --org org] [--scope] [--description]` — Create an empty credential set\n- `wh credential list [--repo org/repo | --org org]` — List credential sets accessible from a repo or org\n- `wh credential view <name> [--repo org/repo | --org org]` — View a credential set (key names only, no values)\n- `wh credential delete <name> [--repo org/repo | --org org]` — Delete a credential set and its Vault object\n- `wh credential set <setName> [<keyName>] [--repo org/repo | --org org] [--value]` — Set credential key(s). With `<keyName>`: single-key form (reads value from `--value` or stdin). Without `<keyName>`: batch form (reads JSON object from stdin, e.g. `{\"KEY\":\"val\"}`)\n- `wh credential unset <setName> <keyName> [--repo org/repo | --org org]` — Remove a key from a credential set\n- `wh credential audit <setName> [--repo org/repo | --org org]` — View audit log for a credential set\n- `wh credential revoke <setName> [--repo org/repo | --org org] [--reason]` — Revoke a credential set (blocks new binds and stops bound webhook deliveries)\n\n### component — Component management\n- `wh component validate <path>` — Validate package\n- `wh component install <org/name>` — Install; resource-phase CONFLICT → 2, degraded replay → 1\n- `wh component register <name> --org <org> --manifest <path> [flags]` — Register component identity\n- `wh component unregister <org/name>` — Remove a registered component identity\n- `wh component registry list --org <org>` — List registered components\n- `wh component registry view <org/name>` — View a registered component\n- `wh component registry update <org/name> [flags]` — Update a registered component\n- `wh component list` — List installed components\n- `wh component update <org/name>` — Update; resource-phase CONFLICT → 2, degraded replay → 1\n- `wh component view <org/name>` — Show component details (alias: show)\n- `wh component doctor <org/name>` — Health; degraded/error/uninstalled → exit 1\n- `wh component teardown <org/name>` — Pause component subscriptions\n\n### Getting More Info\n- `wh help` — help overview\n- `wh <domain>` — domain verbs\n- `wh <domain> <verb> --help` — verb flags and examples\n- `wh help --format json` — `CliSpecV2` (`schemaVersion: 2`): global/contextual/root tables and command overrides\n\n## Common Workflows\n\n**Explore a repo:**\n```bash\nwh thing list --repo org/repo             # see all things in HEAD\nwh thing view alice --repo org/repo       # inspect a specific thing\nwh thing history alice --repo org/repo    # inspect version history\nwh thing about alice                      # assertions about a thing\n```\n\n**Create an assertion** (most common write):\n```bash\n# Assertion = Shape with composes:[\"Assertion\"]; write a thing with data.about.\n# --about is written as data.about.\nwh assertion create my-assertion --shape MyShape --about target-name \\\n  --data '{\"field_a\":1,\"field_b\":\"value\"}' --repo org/repo\n# Output includes per-operation status; relay failures.\n```\n\n**Write entrypoint** (batches and streams):\n```bash\nwh commit submit --add my-item --shape MyShape \\\n  --about target-name --data '{\"field_a\":1}' --repo org/repo\n```\n\n**Batch write via file** (generate template → edit → submit):\n```bash\nwh shape template Hypothesis Evidence -o ops.json    # --kind assertion --about X for assertions\n# edit ops.json — fill FILL_IN placeholders\nwh commit submit --file ops.json -m \"batch update\"   # submit all ops (bare `wh commit` is equivalent)\n# --file format: docs.warmhub.ai/cli-reference/commit-operations\n```\n\n**Bulk write (JSONL stream, >1k ops)** — one chunked stream beats per-record commits (~60× faster):\n```bash\nwh shape template MyShape -o ops.jsonl                          # one op per line (.jsonl)\nID=\"bulk-$(date +%s)\"   # caller id for chunk correlation\nwh commit submit --file ops.jsonl --stream-id \"$ID\" --chunk-size 5000 \\\n  --skip-existing --progress -m \"bulk ingest\" --repo org/repo\n# --chunk-size: ops per append chunk (default 1000, max 10000); chunk≈1 is ~60× slower\n# --skip-existing: skips already-written add ops (drops per-row read-before-write)\n# --stream-id identifies the submission but provides no receipt or resume.\n# After an outcome-unknown append, stop writes and reconcile attempted + unsent\n# work from a later verified checkpoint; never blindly replay revise/retract.\n```\n\n**Create collections:**\n```bash\nwh commit submit --add route --shape Arc --data '{\"from\":\"a\",\"to\":\"b\"}'\nwh assertion create route-support --shape Supports --about route --data '{\"confidence\":0.8}' --repo org/repo\n```\n\n**Modify data:**\n```bash\nwh thing revise my-item --keep-shapes --data '{\"x\":5,\"y\":3}' -m \"update\" --repo org/repo\nwh thing retract old-item -m \"withdrawn\" --reason \"data feed contaminated\" --repo org/repo\n```\n\n**Query and filter:**\n```bash\nwh thing query --shape MyShape                       # by shape\nwh thing query --kind assertion --about alice        # by kind + target\nwh thing history alice --limit 10                    # version history\n```\n\n## Built-in Content shape\n\nWarmHub repos expose three well-known content Things (Shape `Content`):\n- `Readme`  — stored markdown for humans\n- `Agents`  — stored markdown guidance for AI agents\n- `LlmsTxt` — synthesized per-request sitemap (read-only)\n\nFetch via `wh repo content get --kind readme|agents|llms-txt`,\n`client.repo.getReadme/getAgents/getLlmsTxt`, MCP `warmhub_repo_content_get`,\nor raw HTTP `GET /{org}/{repo}/readme.md|agents.md|llms.txt`.\nSee `wh repo describe` → `additionalInformation` for the discovery field.\n\n## Query Discipline\n- Plan the repo, shapes, and wrefs you need before the first query.\n- Gather the needed facts from one repo before switching to another.\n- Do the queries first, then write one complete answer.\n\n## Agent Tips\n- **Always run commands for live data** — this context describes the CLI, not repo contents\n- **Before writing, discover wrefs** — run `wh thing list` or `wh shape list`\n- **Shape field types**: `string`, `number`, `boolean`, `wref`, arrays, optionals, nested objects\n- **Write commands return per-operation results** — relay failures and affected wrefs to the user\n- **Pass data inline** with `--data '{...}'` — do NOT create temp files\n- Add `--json` to any command for machine-readable JSON output\n- **Aliases teach canonical commands** — executing aliases emit a status hint; misleading lifecycle aliases reject and point to `retract`\n- Writes go through `wh commit submit` (or bare `wh commit`) or wrappers (`create`, `revise`, `retract`, `assertion create`). `retract` withdraws an identity and creates a history entry; `wh thing restore <durableId>` makes it active again.\n- Use `wh doctor` to check environment health\n";
+var prime_content_default = "# WarmHub CLI Context\n> **Context Recovery**: Run `wh prime` after compaction or new session\n\n## Environment\n{{REPO_LINE}}\n\n## Core Concepts\n- **Thing**: A named entity versioned by writes. **Assertion**: A thing that makes a shape-validated claim about another thing.\n- **Shape**: A thing defining data structure. **Write**: One or more add/revise/retract operations with per-operation results.\n- **wref**: A thing's full name: `alice`, or `hub/shapes/Player` for a Shape. Cross-repo: `wh:org/repo/alice`.\n\n## Versioned Wrefs\n- `hub/shapes/X` addresses the Shape X. `@vN` pins a version. `--shape` takes bare names.\n- Floating write refs to retracted targets fail; existing pinned versions remain valid.\n- Rename invalidates old spellings, including `@vN`; the new name resolves history.\n- Untyped wrefs accept any thing. `wref<T>` requires the target's shape to be `T`; a shape has no shape, so never satisfies it. `wref?` coalesces only `thing_absent`, never a missing shape.\n- Wref `binding`: `identity` follows the Thing, `versioned` pins.\n\n## Key Workflows\n\n**Write data** (discover shapes → scaffold ops → submit):\n```bash\nwh shape list --repo org/repo                             # list available shapes\nwh shape view ShapeName --repo org/repo                   # inspect fields\nwh shape template ShapeName -o ops.json --repo org/repo   # scaffold write ops (supports --kind assertion)\n# edit ops.json — fill FILL_IN placeholders — then:\nwh commit submit --file ops.json --dry-run --repo org/repo  # preview; remove --dry-run to submit\n# or single assertion (no file needed):\nwh assertion create my-assertion --shape ShapeName --about target --data '{\"field\":1}' --repo org/repo  # ShapeName composes Assertion\n# Relay failed operation details when present. Never hand-guess ops JSON — use `wh shape template <Shape>`.\n```\n\n**Read data:**\n```bash\nwh thing list --repo org/repo                 # all things at HEAD\nwh thing view alice --repo org/repo           # inspect a thing\nwh thing query --shape MyShape --repo org/repo  # find things by shape\nwh thing about hub/shapes/X --repo org/repo   # assertions about a shape\nwh assertion list --repo org/repo             # all assertions at HEAD\nwh thing history alice --repo org/repo        # version history\n\n# Batch read — wh thing view is variadic (max 500 wrefs/call):\nwh thing view alice bob                             # variadic positionals\nwh thing view --file wrefs.txt --json               # one wref per line\ncat wrefs.txt | wh thing view --format jsonl        # one JSON line per *deduped* requested wref\n```\n\n## Wref Quick Reference\n\nWrites use explicit names and wrefs. Untyped fields, collection members,\nassertion `about`, and committers accept any thing. Create a deterministic\ntarget before referencing it in the same commit.\n`WH_CLIENT_FLAGS=legacy-wrefs`: raw v1 `commit submit` only; a bare name is a Shape.\n\n## Command Reference\n\n**Global flags**: `--repo`, `--format`, `--json`, `--live`\n### thing — Things\n- `wh thing list [--shape] [--kind] [--match] [--include-retracted]` — Current HEAD state\n- `wh thing view [<wref>...] [--file <path>] [--version] [--depth] [--include-retracted] [--data-mode auto|full]` — Thing details. Variadic (max 500). `--version` implies `--include-retracted`. Batch JSON returns `{ requested, items, missing }`; jsonl emits one row per deduped requested wref. Large Set/List bodies summarize by default; use `--data-mode full` for canonical collection JSON.\n- `wh thing history [wref] [--shape] [--about] [--include-retracted]` — Version history\n- `wh thing resolve <wref>` — Resolve a wref to its canonical thing identity\n- `wh thing create <name> (--shape <S>...|--shapeless) (--data|--file)` — Create\n- `wh thing revise <name> (--shape <S>...|--shapeless|--keep-shapes) [--data] [--expected-version]` — Revise (CONFLICT if HEAD≠n)\n- `wh thing retract <name> -m <message> [--reason] [--expected-version]` — Retract\n- `wh thing query [--shape] [--kind] [--about] [--match]` — Query by filters\n- `wh thing search <query> [--shape] [--kind] [--about] [--mode]` — Search text\n- `wh thing rename <name> <newName>` — Rename\n- `wh thing refs <wref> [--inbound] [--outbound] [--field]` — Show field references; use `wh thing about` for assertions about the target thing\n- `wh thing about <wref> [--shape] [--match] [--depth] [--resolve-collections] [--role from|to|ends] [--limit] [--include-retracted]` — Show assertions about the target identity; `--resolve-collections` expands bare/@HEAD/@ALL members, `--role` filters direction; not pinned @vN\n\n- `wh view evaluate VIEW [--limit N] [--cursor TOK] [--all]`\n### commit — Write operations\n- `wh commit submit [--ops|--file|--add|--revise|--retract] [--dry-run] [--skip-existing]` — Submit operations, or evaluate the complete bounded input without durable changes under `--dry-run`. JSONL preview emits one operation row per input plus one summary.\n- `wh shape template <shape> [shape2 ...] [--kind] [--operation add|revise|retract] [-o file]` — Generate sample ops\n\n### assertion — Assertion operations\n- `wh assertion list [--about wref] [--shape] [--match] [--include-retracted]` — Browse assertions\n- `wh assertion view <wref> [--version] [--include-retracted]` — Assertion details\n- `wh assertion create --shape <s> --name <n> --about <wref> [--data] [-m] [--committer]` — Create assertion\n- `wh assertion revise <wref> --data <json> [--message] [--committer]` — Revise assertion\n- `wh assertion retract <wref> -m <message> [--reason] [--committer] [--expected-version]` — Retract assertion\n- `wh assertion history <wref> [--include-retracted]` — Assertion history\n\n### shape — Shape management\n- `wh shape list [--match] [--include-retracted]` — List all shapes\n- `wh shape view <name> [--include-retracted]` — Shape details\n- `wh shape revise <name> (--fields|--file)`\n- `wh shape create <name> (--fields|--file)`\n- `wh shape retract <name> -m <message> [--reason] [--expected-version]` — Retract shape\n- `wh shape history <name> [--include-retracted]` — Shape history\n- `wh shape rename <oldName> <newName>` — Rename shape\n\n### repo — Repository management\n- `wh repo create <org/name> [--display-name] [--description] [--visibility]` — Create repo\n- `wh repo list [org]` — List repos\n- `wh repo view [org/repo]` — Repo details\n\n### org — Organization management\n- `wh org create <name> [--display-name]` — Create a new organization\n- `wh org view <name>` — View organization details (alias: info)\n- `wh org list` — List all organizations\n\n### sub — Subscription management\n- `wh sub create <name> [flags]` — Create a subscription\n- `wh sub view <name>` — View subscription details\n- `wh sub list` — List all subscriptions\n- `wh sub log <name>` — Tail subscription delivery feed\n- `wh sub attempts <runId>` — Show attempt history for a run\n- `wh sub pause <name>` — Pause a subscription\n- `wh sub resume <name>` — Resume a paused subscription\n- `wh sub bind <name> [--credentials]` — Bind a credential set to a subscription for webhook auth\n- `wh sub unbind <name>` — Remove credential binding from a subscription\n- `wh sub delete <name>` — Retire; name reserved\n\n### notifications — Action notification listing\n- `wh notifications [--limit] [--since]` — List repo-scoped action notifications\n\n### credential — Credential set management\n- `wh credential create <name> [--repo org/repo | --org org] [--scope] [--description]` — Create an empty credential set\n- `wh credential list [--repo org/repo | --org org]` — List credential sets accessible from a repo or org\n- `wh credential view <name> [--repo org/repo | --org org]` — View a credential set (key names only, no values)\n- `wh credential delete <name> [--repo org/repo | --org org]` — Delete a credential set and its Vault object\n- `wh credential set <setName> [<keyName>] [--repo org/repo | --org org] [--value]` — Set credential key(s). With `<keyName>`: single-key form (reads value from `--value` or stdin). Without `<keyName>`: batch form (reads JSON object from stdin, e.g. `{\"KEY\":\"val\"}`)\n- `wh credential unset <setName> <keyName> [--repo org/repo | --org org]` — Remove a key from a credential set\n- `wh credential audit <setName> [--repo org/repo | --org org]` — View audit log for a credential set\n- `wh credential revoke <setName> [--repo org/repo | --org org] [--reason]` — Revoke a credential set (blocks new binds and stops bound webhook deliveries)\n\n### component — Component management\n- `wh component validate <path>` — Validate package\n- `wh component install <org/name>` — Install; resource-phase CONFLICT → 2, degraded replay → 1\n- `wh component register <name> --org <org> --manifest <path> [flags]` — Register component identity\n- `wh component unregister <org/name>` — Remove a registered component identity\n- `wh component registry list --org <org>` — List registered components\n- `wh component registry view <org/name>` — View a registered component\n- `wh component registry update <org/name> [flags]` — Update a registered component\n- `wh component list` — List installed components\n- `wh component update <org/name>` — Update; resource-phase CONFLICT → 2, degraded replay → 1\n- `wh component view <org/name>` — Show component details (alias: show)\n- `wh component doctor <org/name>` — Health; degraded/error/uninstalled → exit 1\n- `wh component teardown <org/name>` — Pause component subscriptions\n\n### Getting More Info\n- `wh help` — help overview\n- `wh <domain>` — domain verbs\n- `wh <domain> <verb> --help` — verb flags and examples\n- `wh help --format json` — `CliSpecV2` (`schemaVersion: 2`): global/contextual/root tables and command overrides\n\n## Common Workflows\n\n**Agent identities:** `wh auth status` shows your user identity; `wh token create --committer-identity wh:org/repo/agent` binds a persona to a PAT. Install `warmhub/identity` in your chosen repo and manage personas with `wh thing`. [Create an agent identity](https://docs.warmhub.ai/auth/agent-identities/) covers setup, private-repo scopes, attribution, and retirement.\n\n**Explore a repo:**\n```bash\nwh thing list --repo org/repo             # see all things in HEAD\nwh thing view alice --repo org/repo       # inspect a specific thing\nwh thing history alice --repo org/repo    # inspect version history\nwh thing about alice                      # assertions about a thing\n```\n\n**Create an assertion** (most common write):\n```bash\n# Assertion = Shape with composes:[\"Assertion\"]; write a thing with data.about.\n# --about is written as data.about.\nwh assertion create my-assertion --shape MyShape --about target-name \\\n  --data '{\"field_a\":1,\"field_b\":\"value\"}' --repo org/repo\n# Output includes per-operation status; relay failures.\n```\n\n**Write entrypoint** (batches and streams):\n```bash\nwh commit submit --add my-item --shape MyShape \\\n  --about target-name --data '{\"field_a\":1}' --repo org/repo\n```\n\n**Batch write via file** (generate template → edit → submit):\n```bash\nwh shape template Hypothesis Evidence -o ops.json    # --kind assertion --about X for assertions\n# edit ops.json — fill FILL_IN placeholders\nwh commit submit --file ops.json -m \"batch update\"   # submit all ops (bare `wh commit` is equivalent)\n# --file format: docs.warmhub.ai/cli-reference/commit-operations\n```\n\n**Bulk write (JSONL stream, >1k ops)** — one chunked stream beats per-record commits (~60× faster):\n```bash\nwh shape template MyShape -o ops.jsonl                          # one op per line (.jsonl)\nID=\"bulk-$(date +%s)\"   # caller id for chunk correlation\nwh commit submit --file ops.jsonl --stream-id \"$ID\" --chunk-size 5000 \\\n  --skip-existing --progress -m \"bulk ingest\" --repo org/repo\n# --chunk-size: ops per append chunk (default 1000, max 10000); chunk≈1 is ~60× slower\n# --skip-existing: skips already-written add ops (drops per-row read-before-write)\n# --stream-id identifies the submission but provides no receipt or resume.\n# After an outcome-unknown append, stop writes and reconcile attempted + unsent\n# work from a later verified checkpoint; never blindly replay revise/retract.\n```\n\n**Create collections:**\n```bash\nwh commit submit --add route --shape Arc --data '{\"from\":\"a\",\"to\":\"b\"}'\nwh assertion create route-support --shape Supports --about route --data '{\"confidence\":0.8}' --repo org/repo\n```\n\n**Modify data:**\n```bash\nwh thing revise my-item --keep-shapes --data '{\"x\":5,\"y\":3}' -m \"update\" --repo org/repo\nwh thing retract old-item -m \"withdrawn\" --reason \"data feed contaminated\" --repo org/repo\n```\n\n**Query and filter:**\n```bash\nwh thing query --shape MyShape                       # by shape\nwh thing query --kind assertion --about alice        # by kind + target\nwh thing history alice --limit 10                    # version history\n```\n\n## Built-in Content shape\n\nWarmHub repos expose three well-known content Things (Shape `Content`):\n- `Readme`  — stored markdown for humans\n- `Agents`  — stored markdown guidance for AI agents\n- `LlmsTxt` — synthesized per-request sitemap (read-only)\n\nFetch via `wh repo content get --kind readme|agents|llms-txt`,\n`client.repo.getReadme/getAgents/getLlmsTxt`, MCP `warmhub_repo_content_get`,\nor raw HTTP `GET /{org}/{repo}/readme.md|agents.md|llms.txt`.\nSee `wh repo describe` → `additionalInformation` for the discovery field.\n\n## Query Discipline\n- Plan the repo, shapes, and wrefs you need before the first query.\n- Gather the needed facts from one repo before switching to another.\n- Do the queries first, then write one complete answer.\n\n## Agent Tips\n- **Always run commands for live data** — this context describes the CLI, not repo contents\n- **Before writing, discover wrefs** — run `wh thing list` or `wh shape list`\n- **Shape field types**: `string`, `number`, `boolean`, `wref`, arrays, optionals, nested objects\n- **Write commands return per-operation results** — relay failures and affected wrefs to the user\n- **Pass data inline** with `--data '{...}'` — do NOT create temp files\n- Add `--json` to any command for machine-readable JSON output\n- **Aliases teach canonical commands** — executing aliases emit a status hint; misleading lifecycle aliases reject and point to `retract`\n- Writes go through `wh commit submit` (or bare `wh commit`) or wrappers (`create`, `revise`, `retract`, `assertion create`). `retract` withdraws an identity and creates a history entry; `wh thing restore <durableId>` makes it active again.\n- Use `wh doctor` to check environment health\n";
 
 // ../../packages/warmhub-cli/src/domains/prime.ts
 function buildMarkdown(config2) {
@@ -72246,7 +72360,7 @@ function resolveLogLevel(flagLevel, env) {
 // package.json
 var package_default3 = {
   name: "@warmhub/cli",
-  version: "0.145.0",
+  version: "0.147.0",
   private: false,
   type: "module",
   description: "The wh CLI for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",
@@ -72871,5 +72985,5 @@ process.exitCode = interceptedExitCode === undefined ? await runPreparedCli(laun
   version: package_default3.version
 }) : interceptedExitCode;
 
-//# debugId=F265A15255A53BDA64756E2164756E21
-//# warmhub-cli-build-info {"cliVersion":"0.145.0","sdkVersion":"0.143.0"}
+//# debugId=2ABA0653C6EADCF764756E2164756E21
+//# warmhub-cli-build-info {"cliVersion":"0.147.0","sdkVersion":"0.145.0"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@warmhub/cli",
-  "version": "0.145.0",
+  "version": "0.147.0",
   "private": false,
   "type": "module",
   "description": "The wh CLI for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",