@warmhub/cli 0.76.0 → 0.77.0

package/dist/wh.js

@@ -27287,6 +27287,7 @@ var RE2JS = class RE2JS2 {
 // ../../packages/rules/src/shape-validation-types.ts
 var MAX_CONTENT_FIELD_BYTES = 64 * 1024;
 var MAX_INDEXABLE_SCALAR_FIELDS_PER_SHAPE = 256;
+var MAX_INDEXABLE_FIELD_PATH_BYTES = 256;
 var UNSUPPORTED_REGEX_SYNTAX_REASON = "uses unsupported regex syntax";
 var CONTENT_FIELD_LIMIT_ERROR = `WarmHub content fields are limited to ${MAX_CONTENT_FIELD_BYTES} bytes. ` + "WarmHub is not a document store; store large documents in S3, Box, Drive, or another document system and reference them from WarmHub instead.";
 var textEncoder = new TextEncoder;
@@ -27771,6 +27772,10 @@ function validateShapeDefinition(data, options = {}) {
   const seenIndexableFieldPaths = new Set;
   const duplicateIndexableFieldPaths = new Set;
   for (const fieldPath of indexableFieldPaths) {
+    const pathBytes = utf8ByteLength(fieldPath);
+    if (pathBytes > MAX_INDEXABLE_FIELD_PATH_BYTES) {
+      errors.push(`Indexable field path "${escapeFieldNameForDisplay(fieldPath)}" is ${pathBytes} bytes; maximum is ${MAX_INDEXABLE_FIELD_PATH_BYTES}`);
+    }
     const foldedPath = foldFieldPath(fieldPath);
     if (seenIndexableFieldPaths.has(foldedPath)) {
       duplicateIndexableFieldPaths.add(foldedPath);
@@ -27855,7 +27860,7 @@ function findSystemComponent(componentId) {
 // ../../packages/sdk-ts/package.json
 var package_default = {
   name: "@warmhub/sdk-ts",
-  version: "0.74.0",
+  version: "0.75.0",
   private: false,
   type: "module",
   description: "The TypeScript SDK for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",
@@ -28158,12 +28163,14 @@ var MAX_STREAM_APPEND_OPERATION_COUNT2 = MAX_STREAM_APPEND_OPERATION_COUNT;
 class PartialStreamSubmissionError extends Error {
   code = "PARTIAL_STREAM_SUBMISSION";
   completedOperations;
+  acknowledgedOperationCount;
   cause;
   constructor(input) {
     super("Stream submission failed. A timed-out append may already have landed, so inspect repository state before sending any further operations.");
     this.name = "WarmHubError";
     this.cause = input.cause;
     this.completedOperations = input.completedOperations;
+    this.acknowledgedOperationCount = input.acknowledgedOperationCount ?? input.completedOperations.length;
   }
 }
 
@@ -28355,6 +28362,7 @@ async function submitOperationsViaStream(client, args) {
   let createdByEmail;
   let repoSeq;
   const chunkResults = [];
+  let acknowledgedOperationCount = 0;
   let sawAmbiguousAttempt = false;
   for (const { operations: chunk, start: chunkStart } of chunkOperations(operations, chunkSize)) {
     let attempt = 1;
@@ -28381,12 +28389,13 @@ async function submitOperationsViaStream(client, args) {
           repoSeq = appendResult.repoSeq;
         }
         chunkResults.push(...offsetChunkResultIndexes(appendResult.results, chunkStart));
+        acknowledgedOperationCount += chunk.length;
         break;
       } catch (cause) {
-        if (chunkResults.length === 0 && !priorAttemptAmbiguous && isDefiniteClientError(cause)) {
+        if (acknowledgedOperationCount === 0 && !priorAttemptAmbiguous && isDefiniteClientError(cause)) {
           throw cause;
         }
-        if (chunkResults.length === 0 && chunkIsAtomic && policy !== false && attempt < policy.maxAttempts && isTransientStreamFailure(cause)) {
+        if (acknowledgedOperationCount === 0 && chunkIsAtomic && policy !== false && attempt < policy.maxAttempts && isTransientStreamFailure(cause)) {
           await sleep2(computeBackoffDelayMs(attempt, policy));
           attempt += 1;
           priorAttemptAmbiguous = true;
@@ -28400,7 +28409,8 @@ async function submitOperationsViaStream(client, args) {
         }, args.committer, createdByEmail, repoSeq, args.message, chunkResults, operations));
         throw new PartialStreamSubmissionError({
           cause,
-          completedOperations
+          completedOperations,
+          acknowledgedOperationCount
         });
       }
     }
@@ -28413,7 +28423,8 @@ async function submitOperationsViaStream(client, args) {
     if (sawAmbiguousAttempt) {
       throw new PartialStreamSubmissionError({
         cause: failure,
-        completedOperations: completedOperationsFrom(result)
+        completedOperations: completedOperationsFrom(result),
+        acknowledgedOperationCount
       });
     }
     throw failure;
@@ -39149,7 +39160,7 @@ var createFlags3 = {
     description: "Only apply if the --revise target is still at this version (optimistic concurrency). Requires --revise."
   }),
   "lease-id": flag.string({
-    description: "Read-lease token from `wh thing lease`, bound to --revise/--retract (auto-released on success)"
+    description: "read-lease token from `wh thing lease`, bound to --revise or one --retract target (auto-released on success)"
   })
 };
 
@@ -39410,6 +39421,9 @@ function buildAddOperations(input) {
 }
 function buildRetractOperations(input) {
   const { retractNames, kinds, reasons, leaseId } = input;
+  if (leaseId !== undefined && retractNames.length !== 1) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", `--lease-id requires exactly one --retract target; received ${retractNames.length}.`, undefined, "wh commit submit --retract Player/alice --lease-id lease-xyz --repo acme/world");
+  }
   const assertCardinality = (flagName, values) => {
     if (values.length === 0)
       return;
@@ -39474,11 +39488,78 @@ function synthesizeCommitMessage(operations) {
   return name ? `add ${name}` : "add";
 }
 
+// ../../packages/warmhub-cli/src/domains/commit-submit-source.ts
+var SOURCE_FLAGS = [
+  ["--stream", "stream"],
+  ["--ops", "ops"],
+  ["--file", "file"],
+  ["--add", "add"],
+  ["--revise", "revise"],
+  ["--retract", "retract"],
+  ["--type", "collection"]
+];
+var ALLOWED_FLAGS = {
+  "--stream": new Set,
+  "--ops": new Set,
+  "--file": new Set,
+  "--add": new Set(["data", "shape", "about", "kind"]),
+  "--revise": new Set(["data", "kind"]),
+  "--retract": new Set(["reason", "kind"]),
+  "--type": new Set(["name", "members"])
+};
+var SOURCE_COMMAND_EXAMPLES = {
+  "--stream": "wh commit submit --stream --stream-id import-1 --skip-existing -m 'Import operations' --repo acme/world",
+  "--ops": `wh commit submit --ops '[{"operation":"add","kind":"thing","name":"Proof/example","data":{}}]' -m 'Add Proof/example' --repo acme/world`,
+  "--file": "wh commit submit --file ops.json -m 'Apply operations' --repo acme/world",
+  "--add": "wh commit submit --add Proof/example --data '{}' -m 'Add Proof/example' --repo acme/world",
+  "--revise": "wh commit submit --revise Proof/example --data '{}' -m 'Revise Proof/example' --repo acme/world",
+  "--retract": "wh commit submit --retract Proof/example -m 'Retract Proof/example' --repo acme/world",
+  "--type": "wh commit submit --type arc --name route --members Location/a,Location/b -m 'Add route' --repo acme/world"
+};
+function resolveCommitOperationSource(input) {
+  const selected = SOURCE_FLAGS.filter(([, key]) => input[key]).map(([flag2]) => flag2);
+  if (selected.length === 0) {
+    usageError("Usage: wh commit submit --ops '<json>' or --add <name> [--data <json>]", `wh commit submit --add player --shape location --data '{"x":0,"y":0}'`);
+  }
+  if (selected.length > 1) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", `Commit operation sources cannot be combined: ${selected.join(", ")}.`, undefined, `Choose one source, for example: ${SOURCE_COMMAND_EXAMPLES[selected[0]]}`);
+  }
+  return selected[0];
+}
+function assertFlagsApplyToCommitSource(source, input) {
+  const allowed = ALLOWED_FLAGS[source];
+  const invalid = Object.entries(input).filter(([flag2, present]) => present && !allowed.has(flag2)).map(([flag2]) => `--${flag2}`);
+  if (invalid.length === 0)
+    return;
+  const verb = invalid.length === 1 ? "does" : "do";
+  throw new CliError(2 /* UserInput */, "USER_INPUT", `${invalid.join(", ")} ${verb} not apply to the ${source} operation source.`, undefined, `Remove ${invalid.join(", ")} and retry: ${SOURCE_COMMAND_EXAMPLES[source]}`);
+}
+function requireCommitSourceValue(source, value) {
+  if (value !== undefined)
+    return value;
+  throw new Error(`Missing value for selected commit operation source ${source}`);
+}
+
 // ../../packages/warmhub-cli/src/domains/commit-submit-stream.ts
 import { createReadStream as createReadStream2 } from "node:fs";
 import { writeFile as writeFile2 } from "node:fs/promises";
 import { createInterface as createInterface2 } from "node:readline";
 
+// ../../packages/warmhub-cli/src/domains/commit-submit-partial-receipt.ts
+class JsonlPartialSubmissionError extends CliError {
+}
+function jsonlPartialSubmissionError(args) {
+  const { acknowledgedOperationCount, cause } = args;
+  if (args.failedAppendMayHaveLanded === true) {
+    const backendCode = toWarmHubError(cause).backendCode;
+    const suffix = backendCode ? ` (backend: ${backendCode})` : "";
+    return new JsonlPartialSubmissionError(4 /* Backend */, "BACKEND", `Stream append failed after ${acknowledgedOperationCount} acknowledged operation(s).${suffix}`, cause, "The failed append may also have landed; inspect repository state before submitting any remaining JSONL operations.", undefined, backendCode);
+  }
+  const message = cause instanceof Error ? cause.message : String(cause);
+  const causeHint = cause instanceof CliError && cause.hint ? `${cause.hint} ` : "";
+  return new JsonlPartialSubmissionError(4 /* Backend */, "BACKEND", `${message} (${acknowledgedOperationCount} earlier operation(s) already acknowledged by the server before this input failure).`, cause, `${causeHint}Earlier chunks have landed; inspect repository state before submitting any remaining JSONL operations.`);
+}
+
 // ../../packages/warmhub-cli/src/domains/commit-submit-utils.ts
 var DEFAULT_JSONL_STREAM_CHUNK_SIZE = Math.max(1, Math.min(MAX_STREAM_APPEND_OPERATION_COUNT, Number(process.env.WH_STREAM_CHUNK_SIZE) || DEFAULT_STREAM_APPEND_CHUNK_SIZE));
 function resolveJsonlStreamChunkSize(chunkSize) {
@@ -39788,13 +39869,13 @@ async function applyJsonlCommit(ctx, args) {
   const streamId = args.streamId;
   const tAppendStart = performance.now();
   progress.start(t0);
+  let opCount = 0;
   try {
     const operations = [];
     const submittedOperations = [];
     let allocatedTokenRanges = [];
     let createdByEmail;
     let repoSeq;
-    let opCount = 0;
     let parsedOpCount = 0;
     let chunk = [];
     let lineNumber = 0;
@@ -39818,9 +39899,11 @@ async function applyJsonlCommit(ctx, args) {
       } catch (cause) {
         const completed = opCount;
         if (opCount > 0 || firstJsonlAppendErrorMayHaveCommitted(cause)) {
-          const backendCode = toWarmHubError(cause).backendCode;
-          const suffix = backendCode ? ` (backend: ${backendCode})` : "";
-          throw new CliError(4 /* Backend */, "BACKEND", `Stream append failed after ${completed} acknowledged operation(s).${suffix}`, cause, "The failed append may also have landed; inspect repository state before submitting any remaining JSONL operations.", undefined, backendCode);
+          throw jsonlPartialSubmissionError({
+            acknowledgedOperationCount: completed,
+            cause,
+            failedAppendMayHaveLanded: true
+          });
         }
         throw cause;
       }
@@ -39881,18 +39964,9 @@ async function applyJsonlCommit(ctx, args) {
           continue;
         assertWithinStreamOpLimit(parsedOpCount + 1);
         const operation = safeParseJson(trimmed, `${args.lineLabel} JSONL line ${lineNumber}`);
+        rejectLegacyLifecycleOperations([operation]);
         if (args.allowNulBytes !== true) {
-          try {
-            assertNoNulBytes("data" in operation ? operation.data : undefined, `${args.lineLabel} JSONL line ${lineNumber}`);
-          } catch (cause) {
-            if (cause instanceof CliError) {
-              if (opCount > 0) {
-                const baseHint = cause.hint && cause.hint.length > 0 ? `${cause.hint} ` : "";
-                throw new CliError(4 /* Backend */, "BACKEND", `${cause.message} (${opCount} earlier operation(s) already acknowledged by the server before this NUL-byte rejection).`, undefined, `${baseHint}The earlier chunks have landed; inspect repository state before submitting any remaining JSONL operations.`);
-              }
-            }
-            throw cause;
-          }
+          assertNoNulBytes("data" in operation ? operation.data : undefined, `${args.lineLabel} JSONL line ${lineNumber}`);
         }
         parsedOpCount += 1;
         chunk.push(withSkipExisting(operation, args.skipExisting === true));
@@ -40018,7 +40092,13 @@ async function applyJsonlCommit(ctx, args) {
     });
   } catch (error) {
     progress.onError();
-    throw error;
+    if (error instanceof JsonlPartialSubmissionError || opCount === 0) {
+      throw error;
+    }
+    throw jsonlPartialSubmissionError({
+      acknowledgedOperationCount: opCount,
+      cause: error
+    });
   }
 }
 async function applyJsonlFileCommit(ctx, args) {
@@ -40113,9 +40193,27 @@ var handleSubmit = async (ctx, { flags, args }) => {
   }
   const collectionType = flags.type;
   const jsonlFile = opsFile?.endsWith(".jsonl") === true;
-  if (streamInput && (opsJson !== undefined || opsFile !== undefined || addNames.length > 0 || reviseName !== undefined || retractNames.length > 0 || collectionType !== undefined)) {
-    throw new CliError(2 /* UserInput */, "USER_INPUT", "--stream cannot be combined with --ops, --file, --add, --revise, --retract, or --type.");
-  }
+  const operationSource = resolveCommitOperationSource({
+    stream: streamInput,
+    ops: opsJson !== undefined,
+    file: opsFile !== undefined,
+    add: addNames.length > 0,
+    revise: reviseName !== undefined,
+    retract: retractNames.length > 0,
+    collection: collectionType !== undefined
+  });
+  if (operationSource === "--retract" && (dataJsons.length > 0 || shapes.length > 0 || abouts.length > 0)) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", "--retract cannot be combined with --data, --shape, or --about.", undefined, "Use --file <path.json> for mixed operation writes.");
+  }
+  assertFlagsApplyToCommitSource(operationSource, {
+    data: dataJsons.length > 0,
+    shape: shapes.length > 0,
+    about: abouts.length > 0,
+    reason: reasons.length > 0,
+    kind: kinds.length > 0,
+    name: flags.name !== undefined,
+    members: flags.members !== undefined
+  });
   if (chunkSize !== undefined && !streamInput && !jsonlFile) {
     throw new CliError(2 /* UserInput */, "USER_INPUT", "--chunk-size requires --stream or a .jsonl --file.");
   }
@@ -40125,20 +40223,20 @@ var handleSubmit = async (ctx, { flags, args }) => {
   if (streamId !== undefined && !streamInput && !jsonlFile) {
     throw new CliError(2 /* UserInput */, "USER_INPUT", "--stream-id requires --stream or a .jsonl --file.");
   }
+  if (timingOut !== undefined && !jsonlFile) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", "--timing-out requires a .jsonl --file.", undefined, "wh commit submit --file ops.jsonl --timing-out timing.json --stream-id import-1 --skip-existing -m 'Import operations' --repo acme/world");
+  }
   if ((streamInput || jsonlFile) && streamId === undefined) {
     throw new CliError(2 /* UserInput */, "USER_INPUT", "JSONL streaming requires --stream-id.", undefined, "Choose a stable id up front so add streams can rebuild token state on full rerun: --stream-id bulk-2026-06-04.");
   }
   if ((streamInput || jsonlFile) && !skipExisting) {
     throw new CliError(2 /* UserInput */, "USER_INPUT", "JSONL streaming requires --skip-existing.", undefined, "Full-input rerun recovery depends on idempotent add operations; pass --skip-existing with --stream-id.");
   }
-  const shorthandModeCount = (addNames.length > 0 ? 1 : 0) + (reviseName !== undefined ? 1 : 0) + (retractNames.length > 0 ? 1 : 0) + (collectionType !== undefined ? 1 : 0);
-  if (!streamInput && !opsJson && !opsFile && shorthandModeCount > 1) {
-    throw new CliError(2 /* UserInput */, "USER_INPUT", "Short-form write flags cannot mix --add, --revise, --retract, or --type.", undefined, "Use --file <path.json> for mixed operation writes.");
-  }
   let operations;
-  if (streamInput) {
+  if (operationSource === "--stream") {
     operations = [];
-  } else if (collectionType) {
+  } else if (operationSource === "--type") {
+    const selectedCollectionType = requireCommitSourceValue(operationSource, collectionType);
     if (!flags.name) {
       usageError("Usage: wh commit submit --type <arc|bond|set|list> --name <collection-name> --members <wref1,wref2,...>", "wh commit submit --type arc --name route --members Location/a,Location/b");
     }
@@ -40147,40 +40245,42 @@ var handleSubmit = async (ctx, { flags, args }) => {
     }
     const members = flags.members.split(",").map((m) => m.trim()).filter(Boolean);
     const arityMap = { arc: 2, bond: 2, pair: 2 };
-    const expected = arityMap[collectionType];
-    const collectionExample = `wh commit submit --type ${collectionType} --name ${flags.name} --members Location/a,Location/b`;
+    const expected = arityMap[selectedCollectionType];
+    const collectionExample = `wh commit submit --type ${selectedCollectionType} --name ${flags.name} --members Location/a,Location/b`;
     if (expected && members.length !== expected) {
-      throw new CliError(2 /* UserInput */, "USER_INPUT", `${collectionType} requires exactly ${expected} members, got ${members.length}`, undefined, collectionExample);
+      throw new CliError(2 /* UserInput */, "USER_INPUT", `${selectedCollectionType} requires exactly ${expected} members, got ${members.length}`, undefined, collectionExample);
     }
     if (members.length === 0) {
-      throw new CliError(2 /* UserInput */, "USER_INPUT", `${collectionType} requires at least 1 member`, undefined, collectionExample);
+      throw new CliError(2 /* UserInput */, "USER_INPUT", `${selectedCollectionType} requires at least 1 member`, undefined, collectionExample);
     }
     operations = [
       {
         operation: "add",
         kind: "collection",
-        type: collectionType,
+        type: selectedCollectionType,
         name: flags.name,
         members
       }
     ];
-  } else if (opsJson) {
-    operations = parseJsonArray(opsJson, "--ops", {
+  } else if (operationSource === "--ops") {
+    const selectedOpsJson = requireCommitSourceValue(operationSource, opsJson);
+    operations = parseJsonArray(selectedOpsJson, "--ops", {
       fileFlagSibling: "-f/--file"
     });
-  } else if (opsFile) {
-    if (opsFile.endsWith(".jsonl")) {
+  } else if (operationSource === "--file") {
+    const selectedOpsFile = requireCommitSourceValue(operationSource, opsFile);
+    if (selectedOpsFile.endsWith(".jsonl")) {
       operations = [];
     } else {
       let file;
       try {
-        file = await readFile2(opsFile, "utf-8");
+        file = await readFile2(selectedOpsFile, "utf-8");
       } catch (e) {
-        throw new CliError(2 /* UserInput */, "USER_INPUT", `Cannot read file '${opsFile}': ${e instanceof Error ? e.message : String(e)}`, undefined, "Check that the file path is correct and the file exists.");
+        throw new CliError(2 /* UserInput */, "USER_INPUT", `Cannot read file '${selectedOpsFile}': ${e instanceof Error ? e.message : String(e)}`, undefined, "Check that the file path is correct and the file exists.");
       }
       operations = parseJsonArray(file, "--file contents");
     }
-  } else if (addNames.length > 0) {
+  } else if (operationSource === "--add") {
     operations = buildAddOperations({
       addNames,
       dataJsons,
@@ -40188,17 +40288,14 @@ var handleSubmit = async (ctx, { flags, args }) => {
       abouts,
       kinds
     });
-  } else if (retractNames.length > 0) {
-    if (dataJsons.length > 0 || shapes.length > 0 || abouts.length > 0) {
-      throw new CliError(2 /* UserInput */, "USER_INPUT", "--retract cannot be combined with --data, --shape, or --about.", undefined, "Use --file <path.json> for mixed operation writes.");
-    }
+  } else if (operationSource === "--retract") {
     operations = buildRetractOperations({
       retractNames,
       kinds,
       reasons,
       leaseId: leaseIdFlag
     });
-  } else if (reviseName) {
+  } else if (operationSource === "--revise") {
     if (dataJsons.length > 1) {
       throw new CliError(2 /* UserInput */, "USER_INPUT", `--revise supports a single operation, but --data was repeated ${dataJsons.length} times.`, undefined, "Use --file <path.json> for multi-revision writes.");
     }
@@ -40220,13 +40317,13 @@ var handleSubmit = async (ctx, { flags, args }) => {
       }
     ];
   } else {
-    usageError("Usage: wh commit submit --ops '<json>' or --add <name> [--data <json>]", `wh commit submit --add player --shape location --data '{"x":0,"y":0}'`);
+    operations = [];
   }
   if (!streamInput && operations.length > 0) {
     rejectLegacyLifecycleOperations(operations);
     assertWithinStreamOpLimit(operations.length);
     if (!allowNulBytes) {
-      const source = opsJson ? "--ops" : opsFile ? opsFile : addNames.length > 0 ? "--add" : reviseName !== undefined ? "--revise" : collectionType ? "--type" : "op";
+      const source = operationSource === "--file" ? opsFile : operationSource;
       for (let i = 0;i < operations.length; i++) {
         const op = operations[i];
         const namePart = op.name ? ` (${op.name})` : "";
@@ -45671,21 +45768,27 @@ function buildSubscriptionMutationArgs(flags, usage, example) {
   }
   return mutationArgs;
 }
-function rejectCommitOnlyFlags(flags, eventType) {
+function rejectCommitOnlyFlags(flags, eventType, correctiveExample) {
   for (const f of ["on", "filter", "source"]) {
     const v = flags[f];
     if (typeof v === "string" && v.length > 0) {
-      usageError(`--${f} is not valid for ${eventType} subscriptions — metadata events have no shape, filter, or source`, `wh sub create metadata-hook ${isOrgScopedEventType(eventType) ? "--org myorg" : "--repo myorg/myrepo"} --event ${eventType} --webhook-url https://example.com/hook`);
+      usageError(`--${f} is not valid for ${eventType} subscriptions — metadata events have no shape, filter, or source`, correctiveExample ?? `wh sub create metadata-hook ${isOrgScopedEventType(eventType) ? "--org myorg" : "--repo myorg/myrepo"} --event ${eventType} --webhook-url https://example.com/hook`);
     }
   }
 }
-function resolveSubScope(ctx, flags) {
+function resolveSubScope(ctx, flags, correctiveExample) {
+  rejectConflictingSubScope(ctx, flags, correctiveExample);
   if (typeof flags.org === "string" && flags.org) {
     return { orgName: flags.org };
   }
   const { org, repo } = resolveRepoContext(ctx);
   return { orgName: org, repoName: repo };
 }
+function rejectConflictingSubScope(ctx, flags, correctiveExample) {
+  if (flags.org !== undefined && ctx.invocation.flags.repo !== undefined) {
+    usageError("Flags --org and --repo cannot be used together", correctiveExample);
+  }
+}
 function scopeLabel(scope) {
   return scope.repoName ? `${scope.orgName}/${scope.repoName}` : scope.orgName;
 }
@@ -45711,14 +45814,12 @@ var handleCreate7 = async (ctx, { flags, args }) => {
     ...fallbackWebhookUrl ? { fallbackWebhookUrl } : {},
     ...allowTraceReentry ? { allowTraceReentry: true } : {}
   };
+  rejectConflictingSubScope(ctx, flags, example);
   if (isOrgScopedEventType(eventType)) {
     const orgName = typeof flags.org === "string" ? flags.org : undefined;
     if (!orgName) {
       usageError(`${eventType} subscriptions are org-scoped — pass --org <org> (not --repo)`, `wh sub create org-hook --org myorg --event ${eventType} --webhook-url https://example.com/hook`);
     }
-    if (ctx.invocation.flags.repo !== undefined) {
-      usageError(`--repo is not valid for ${eventType} subscriptions — use --org <org>`, `wh sub create org-hook --org ${orgName} --event ${eventType} --webhook-url https://example.com/hook`);
-    }
     rejectCommitOnlyFlags(flags, eventType);
     const result2 = await ctx.client.subscription.create({
       orgName,
@@ -45734,6 +45835,9 @@ var handleCreate7 = async (ctx, { flags, args }) => {
     });
     return;
   }
+  if (flags.org !== undefined) {
+    usageError(`Flag --org cannot be used with repo-scoped ${eventType} subscriptions`, `wh sub create repo-hook --repo myorg/myrepo --event ${eventType} --webhook-url https://example.com/hook`);
+  }
   const { org, repo } = resolveRepoContext(ctx);
   if (eventType !== "commit") {
     rejectCommitOnlyFlags(flags, eventType);
@@ -45779,7 +45883,7 @@ var handleUpdate4 = async (ctx, { flags, args }) => {
     usageError(usage, example);
   }
   rejectRemovedCronFlags(flags);
-  const scope = resolveSubScope(ctx, flags);
+  const scope = resolveSubScope(ctx, flags, example);
   const scopeArg = scope.repoName ? `--repo ${scopeLabel(scope)}` : `--org ${scope.orgName}`;
   const existing = await ctx.client.subscription.get({ ...scope, name });
   if (existing.kind !== "webhook") {
@@ -45788,6 +45892,9 @@ var handleUpdate4 = async (ctx, { flags, args }) => {
   if (flags.kind && flags.kind !== existing.kind) {
     usageError(usage, example);
   }
+  if (existing.eventType !== "commit") {
+    rejectCommitOnlyFlags(flags, existing.eventType, `wh sub update ${name} ${scopeArg}`);
+  }
   const patchArgs = buildSubscriptionPatchArgs(flags, usage, example);
   const result = await ctx.client.subscription.update({
     ...scope,
@@ -45808,7 +45915,7 @@ var handleView8 = async (ctx, { args, flags }) => {
   if (!name) {
     usageError("Usage: wh sub view <name> [--show-secrets] (--repo org/repo | --org org)", "wh sub view signal-hook --repo myorg/myrepo");
   }
-  const scope = resolveSubScope(ctx, flags);
+  const scope = resolveSubScope(ctx, flags, "wh sub view signal-hook --repo myorg/myrepo");
   const sub = await ctx.client.subscription.get({ ...scope, name });
   const revealed = flags["show-secrets"] ? await ctx.client.subscription.reveal({ ...scope, name }) : undefined;
   writeOutput(ctx, revealed ? { ...sub, ...revealed } : sub, () => {
@@ -45923,7 +46030,7 @@ function renderSubscriptionLog(out, statusOut, c, subscriptionName, result) {
 
 // ../../packages/warmhub-cli/src/domains/sub/handlers-management.ts
 var handleList7 = async (ctx, { flags }) => {
-  const scope = resolveSubScope(ctx, flags);
+  const scope = resolveSubScope(ctx, flags, "wh sub list --repo myorg/myrepo");
   const label = scopeLabel(scope);
   const all = await ctx.client.subscription.list(scope);
   const items = all.slice(0, flags.limit ?? all.length);
@@ -45949,7 +46056,7 @@ var handlePause = async (ctx, { args, flags }) => {
   if (!name) {
     usageError("Usage: wh sub pause <name> (--repo org/repo | --org org)", "wh sub pause signal-hook --repo myorg/myrepo");
   }
-  const scope = resolveSubScope(ctx, flags);
+  const scope = resolveSubScope(ctx, flags, "wh sub pause signal-hook --repo myorg/myrepo");
   const result = await ctx.client.subscription.pause({ ...scope, name });
   writeOutput(ctx, result, () => {
     const c = ctx.colors;
@@ -45961,7 +46068,7 @@ var handleResume = async (ctx, { args, flags }) => {
   if (!name) {
     usageError("Usage: wh sub resume <name> (--repo org/repo | --org org)", "wh sub resume signal-hook --repo myorg/myrepo");
   }
-  const scope = resolveSubScope(ctx, flags);
+  const scope = resolveSubScope(ctx, flags, "wh sub resume signal-hook --repo myorg/myrepo");
   const result = await ctx.client.subscription.resume({ ...scope, name });
   writeOutput(ctx, result, () => {
     const c = ctx.colors;
@@ -45973,7 +46080,7 @@ var handleDelete3 = async (ctx, { args, flags }) => {
   if (!name) {
     usageError("Usage: wh sub delete <name> (--repo org/repo | --org org)", "wh sub delete signal-hook --repo myorg/myrepo");
   }
-  const scope = resolveSubScope(ctx, flags);
+  const scope = resolveSubScope(ctx, flags, "wh sub delete signal-hook --repo myorg/myrepo");
   const result = await ctx.client.subscription.remove({ ...scope, name });
   writeOutput(ctx, result, () => {
     const c = ctx.colors;
@@ -45986,7 +46093,7 @@ var handleBind = async (ctx, { flags, args }) => {
   if (!name || !setName) {
     usageError("Usage: wh sub bind <name> --credentials <setName> (--repo org/repo | --org org)", "wh sub bind signal-hook --credentials webhook-keys --repo myorg/myrepo");
   }
-  const scope = resolveSubScope(ctx, flags);
+  const scope = resolveSubScope(ctx, flags, "wh sub bind signal-hook --credentials webhook-keys --repo myorg/myrepo");
   const result = await ctx.client.subscription.bindCredentials({
     ...scope,
     subscriptionName: name,
@@ -46002,7 +46109,7 @@ var handleUnbind = async (ctx, { args, flags }) => {
   if (!name) {
     usageError("Usage: wh sub unbind <name> (--repo org/repo | --org org)", "wh sub unbind signal-hook --repo myorg/myrepo");
   }
-  const scope = resolveSubScope(ctx, flags);
+  const scope = resolveSubScope(ctx, flags, "wh sub unbind signal-hook --repo myorg/myrepo");
   const result = await ctx.client.subscription.unbindCredentials({
     ...scope,
     subscriptionName: name
@@ -46017,7 +46124,7 @@ var handleLog = async (ctx, { flags, args }) => {
   if (!name) {
     usageError("Usage: wh sub log <name> [--repo org/repo]", "wh sub log my-sub");
   }
-  const scope = resolveSubScope(ctx, flags);
+  const scope = resolveSubScope(ctx, flags, "wh sub log my-sub --repo myorg/myrepo");
   if (!scope.repoName) {
     usageError("Usage: wh sub log <name> [--repo org/repo]", "wh sub log my-sub --repo myorg/myrepo");
   }
@@ -48801,7 +48908,7 @@ function resolveLogLevel(flagLevel, env) {
 // package.json
 var package_default3 = {
   name: "@warmhub/cli",
-  version: "0.76.0",
+  version: "0.77.0",
   private: false,
   type: "module",
   description: "The wh CLI for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",
@@ -49399,4 +49506,4 @@ process.exitCode = interceptedExitCode === undefined ? await runPreparedCli(laun
   version: package_default3.version
 }) : interceptedExitCode;
 
-//# debugId=4AC624B4C136D1A764756E2164756E21
+//# debugId=3CF608ED13A4149264756E2164756E21

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@warmhub/cli",
-  "version": "0.76.0",
+  "version": "0.77.0",
   "private": false,
   "type": "module",
   "description": "The wh CLI for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",