@warmhub/cli 0.89.0 → 0.91.0

package/dist/wh.js

@@ -19567,6 +19567,7 @@ function resolveManifestCredentialName(name, ctx) {
 var REPO_AUTH_SCOPES = [
   "repo:read",
   "repo:checkpoint-read",
+  "repo:checkpoint-generate",
   "repo:write",
   "repo:configure",
   "repo:admin",
@@ -42940,8 +42941,8 @@ function normalizeOptionalName(value) {
 
 // ../../packages/sdk-ts/src/operation-normalize.ts
 function toBackendStreamOperation(operation) {
-  if (operation.expectedVersion !== undefined && operation.operation !== "revise" && operation.operation !== "retract") {
-    throw new Error("expectedVersion is only valid on revise or retract operations — set an explicit operation discriminator");
+  if (operation.expectedVersion !== undefined && operation.operation !== "revise" && operation.operation !== "retract" && operation.operation !== "reaffirm") {
+    throw new Error("expectedVersion is only valid on revise, retract, or reaffirm operations — set an explicit operation discriminator");
   }
   if (operation.operation === "retract") {
     return {
@@ -42953,6 +42954,17 @@ function toBackendStreamOperation(operation) {
       ...operation.leaseId ? { leaseId: operation.leaseId } : {}
     };
   }
+  if (operation.operation === "reaffirm") {
+    return {
+      operation: "reaffirm",
+      name: operation.name,
+      ...operation.expectedVersion !== undefined ? { expectedVersion: operation.expectedVersion } : {},
+      ...operation.kind ? { kind: operation.kind } : {},
+      ...operation.add ? { add: operation.add } : {},
+      ...operation.remove ? { remove: operation.remove } : {},
+      ...operation.leaseId ? { leaseId: operation.leaseId } : {}
+    };
+  }
   if (operation.operation === "rename") {
     return {
       operation: "rename",
@@ -42970,6 +42982,9 @@ function toBackendStreamOperation(operation) {
     if (Object.hasOwn(operation, "active")) {
       throw new Error(`${kind2} revise operation no longer supports 'active' — use retract('${name}') instead`);
     }
+    if (kind2 !== "assertion" && operation.affirmedTargets !== undefined) {
+      throw new Error(`${kind2} revise operation does not support 'affirmedTargets' — it applies only to assertions; set kind: 'assertion' explicitly`);
+    }
     if (kind2 === "collection") {
       return normalizeBackendCollectionRevise(operation, "commit.apply");
     }
@@ -42982,6 +42997,7 @@ function toBackendStreamOperation(operation) {
         kind: "assertion",
         name,
         data: operation.data,
+        ...operation.affirmedTargets ? { affirmedTargets: operation.affirmedTargets } : {},
         ...operation.expectedVersion !== undefined ? { expectedVersion: operation.expectedVersion } : {},
         ...operation.leaseId ? { leaseId: operation.leaseId } : {}
       };
@@ -43000,6 +43016,9 @@ function toBackendStreamOperation(operation) {
   if (kind !== "collection" && (("type" in operation) && operation.type !== undefined || ("members" in operation) && operation.members !== undefined)) {
     throw new Error(`add operation '${operation.name ?? ""}' has collection fields but resolved kind '${kind}' — collection adds require both 'type' and 'members', or set kind: 'collection'`);
   }
+  if (kind !== "assertion" && operation.affirmedTargets !== undefined) {
+    throw new Error(`${kind} add operation does not support 'affirmedTargets' — it applies only to assertions; set kind: 'assertion' explicitly`);
+  }
   if (kind === "collection") {
     return normalizeBackendCollectionAdd({ ...operation, skipExisting }, "commit.apply");
   }
@@ -43022,6 +43041,7 @@ function toBackendStreamOperation(operation) {
       name: operation.name,
       about: operation.about,
       data: operation.data,
+      ...operation.affirmedTargets ? { affirmedTargets: operation.affirmedTargets } : {},
       ...skipExisting === true ? { skipExisting } : {}
     };
   }
@@ -43406,11 +43426,12 @@ function aggregateSubmittedStreamResult(input) {
     operations: input.results.map((result) => ({
       ...result.opIndex !== undefined ? { opIndex: result.opIndex } : {},
       name: result.name ?? "",
-      operation: result.operation === "revise" || result.operation === "retract" || result.operation === "rename" || result.operation === "noop" ? result.operation : "add",
+      operation: result.operation === "revise" || result.operation === "retract" || result.operation === "reaffirm" || result.operation === "rename" || result.operation === "noop" ? result.operation : "add",
       dataHash: result.dataHash ?? "",
       version: result.version ?? 0,
       status: streamAppendResultStatus(result),
       error: result.error,
+      ...result.affirmations ? { affirmations: result.affirmations } : {},
       ...result.status === "failed" && result.opIndex !== undefined && input.operations[result.opIndex]?.name !== undefined ? { submittedName: input.operations[result.opIndex]?.name } : {},
       ...result.resolvedName !== undefined ? { resolvedName: result.resolvedName } : {},
       ...result.retryable !== undefined ? { retryable: result.retryable } : {},
@@ -43425,7 +43446,7 @@ function completedOperationsFrom(result) {
 // ../../packages/sdk-ts/package.json
 var package_default = {
   name: "@warmhub/sdk-ts",
-  version: "0.87.0",
+  version: "0.89.0",
   private: false,
   type: "module",
   description: "The TypeScript SDK for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",
@@ -45571,6 +45592,7 @@ class WarmHubClient {
           repoName,
           shape: opts?.shape,
           about: opts?.about,
+          affirmedAbout: opts?.affirmedAbout,
           kind: narrowKind(opts?.kind),
           match: opts?.match,
           includeRetracted: opts?.includeRetracted,
@@ -45644,6 +45666,7 @@ class WarmHubClient {
           repoName,
           shape: opts?.shape,
           about: opts?.about,
+          affirmedAbout: opts?.affirmedAbout,
           kind: narrowKind(opts?.kind),
           match: opts?.match,
           includeRetracted: opts?.includeRetracted,
@@ -49968,6 +49991,9 @@ function pinnedWref(c, wref, version2) {
   const base = wref.replace(/@v\d+$/, "");
   return `${c.cyan}${escapeTerminalTextForDisplay(base)}@v${version2}${c.reset}`;
 }
+function formatAffirmedWrefs(c, wrefs) {
+  return wrefs.map((wref) => pinnedWref(c, wref)).join(`${c.dim},${c.reset} `);
+}
 function kindLabel(c, kind) {
   return `${c.dim}${kind}${c.reset}`;
 }
@@ -50201,6 +50227,9 @@ function renderAbout(out, c, result) {
     const a = item;
     const wref = a.wref ?? a.name;
     out(`  ${pinnedWref(c, wref, a.version)}  ${kindLabel(c, a.kind ?? "assertion")}`);
+    if (Array.isArray(a.affirmedWrefs) && a.affirmedWrefs.length > 0) {
+      out(`    ${c.dim}affirms:${c.reset} ${formatAffirmedWrefs(c, a.affirmedWrefs.map(String))}`);
+    }
     if (a.data && typeof a.data === "object") {
       out(`    ${c.dim}data:${c.reset}`);
       const lines = JSON.stringify(a.data, null, 2).split(`
@@ -50284,6 +50313,10 @@ var createFlags = {
   shape: flag.string({ description: "Shape for assertion (required)" }),
   data: flag.string({ description: "Data payload (JSON)" }),
   about: flag.string({ description: "Target wref" }),
+  affirm: flag.string({
+    multiple: true,
+    description: "Pinned target version the claim is affirmed for (repeatable): Shape/name@vN"
+  }),
   message: flag.string({ short: "m", description: "Commit message" }),
   committer: flag.string({
     description: "Committer wref (shape or shaped thing; e.g. Agent/bot-1)"
@@ -50291,6 +50324,27 @@ var createFlags = {
 };
 var reviseFlags = {
   data: flag.string({ description: "Data payload (JSON)" }),
+  affirm: flag.string({
+    multiple: true,
+    description: "Complete affirmation set for the changed claim (repeatable); omitted clears it"
+  }),
+  message: flag.string({ short: "m", description: "Commit message" }),
+  committer: flag.string({
+    description: "Committer wref (shape or shaped thing; e.g. Agent/bot-1)"
+  })
+};
+var reaffirmFlags = {
+  add: flag.string({
+    multiple: true,
+    description: "Pinned target wref to affirm (repeatable): Shape/name@vN"
+  }),
+  remove: flag.string({
+    multiple: true,
+    description: "Pinned target wref to stop affirming (repeatable)"
+  }),
+  "expected-version": flag.number({
+    description: "only reaffirm if the assertion is still at this version (optimistic concurrency)"
+  }),
   message: flag.string({ short: "m", description: "Commit message" }),
   committer: flag.string({
     description: "Committer wref (shape or shaped thing; e.g. Agent/bot-1)"
@@ -50322,7 +50376,8 @@ var handleRevise = async (ctx, { flags, args }) => {
       operation: "revise",
       kind: "assertion",
       name,
-      data
+      data,
+      ...flags.affirm && flags.affirm.length > 0 ? { affirmedTargets: flags.affirm } : {}
     }
   ], { committer: flags.committer });
   const result = requireSingleOpSuccess(commitResult);
@@ -50356,6 +50411,47 @@ var handleRetract = async (ctx, { flags, args }) => {
     ctx.out(`${ctx.colors.red}-${ctx.colors.reset} ${displayName(ctx.colors, result.name)}`);
   });
 };
+var handleReaffirm = async (ctx, { flags, args }) => {
+  const name = args[0];
+  const expectedVersion = parsePositiveIntFlag(flags["expected-version"], "--expected-version", "wh assertion reaffirm Belief/cave-safe --add Location/cave@v3 --expected-version 2");
+  if (!name) {
+    usageError("Usage: wh assertion reaffirm <wref> [--add <wref@vN>]... [--remove <wref@vN>]... [--expected-version <n>]", "wh assertion reaffirm Belief/cave-safe --add Location/cave@v3");
+  }
+  const add = flags.add ?? [];
+  const remove = flags.remove ?? [];
+  if (add.length + remove.length === 0) {
+    usageError("Reaffirm requires at least one --add or --remove target", "wh assertion reaffirm Belief/cave-safe --add Location/cave@v3 --expected-version 2");
+  }
+  const { org, repo } = parseOrgRepo(getRepoRef(ctx), ctx.config);
+  const commitResult = await ctx.client.commit.apply(org, repo, flags.message ?? `reaffirm ${name}`, [
+    {
+      operation: "reaffirm",
+      kind: "assertion",
+      name,
+      ...expectedVersion !== undefined ? { expectedVersion } : {},
+      ...add.length > 0 ? { add } : {},
+      ...remove.length > 0 ? { remove } : {}
+    }
+  ], { committer: flags.committer });
+  const result = requireSingleOpSuccess(commitResult);
+  writeOutput(ctx, commitResult, () => {
+    const c = ctx.colors;
+    renderSingleOpSuccess(ctx.out, c, ctx.chars, result, {
+      marker: "±",
+      color: c.cyan,
+      committer: flags.committer
+    });
+    const delta = result.affirmations;
+    if (delta) {
+      for (const wref of delta.added)
+        ctx.out(`  ${c.green}+${c.reset} ${wref}`);
+      for (const wref of delta.removed)
+        ctx.out(`  ${c.red}-${c.reset} ${wref}`);
+      for (const wref of delta.ignored)
+        ctx.out(`  ${c.dim}= ${wref} (no change)${c.reset}`);
+    }
+  });
+};
 var handleCreate = async (ctx, { flags, args }) => {
   const { org, repo } = parseOrgRepo(getRepoRef(ctx) ?? args[0], ctx.config);
   const shape = flags.shape;
@@ -50370,13 +50466,15 @@ var handleCreate = async (ctx, { flags, args }) => {
   }
   const about = parseAbout(aboutRaw);
   const localName = `${shape}/${name}`;
+  const affirmedTargets = flags.affirm ?? [];
   const operations = [
     {
       operation: "add",
       kind: "assertion",
       name: localName,
       about,
-      data
+      data,
+      ...affirmedTargets.length > 0 ? { affirmedTargets } : {}
     }
   ];
   const commitResult = await ctx.client.commit.apply(org, repo, message ?? `assert ${shape}`, operations, { committer });
@@ -50891,6 +50989,9 @@ function renderHead(out, c, chars, result, org, repo, shape, kind) {
     if (item.kind === "assertion" && item.aboutWref) {
       out(`    ${c.dim}about:${c.reset} ${pinnedWref(c, item.aboutWref)}`);
     }
+    if (item.affirmedWrefs?.length) {
+      out(`    ${c.dim}affirms:${c.reset} ${formatAffirmedWrefs(c, item.affirmedWrefs)}`);
+    }
     const fields = shapeName && (item.kind === "thing" || item.kind === "collection") && item.data ? collectionFields(shapeName, item.data) : null;
     if (fields) {
       const allWrefs = fields.flatMap((f) => f.wrefs);
@@ -50923,6 +51024,9 @@ function renderThing(out, c, result) {
   if (aboutWref) {
     out(`  ${c.dim}about:${c.reset}     ${escapeTerminalTextForDisplay(String(aboutWref))}`);
   }
+  if (result.affirmedWrefs?.length) {
+    out(`  ${c.dim}affirms:${c.reset}   ${formatAffirmedWrefs(c, result.affirmedWrefs)}`);
+  }
   const meta3 = result.metadata;
   if (meta3?.durableId || meta3?.createdOn || meta3?.revisedOn) {
     const now = Date.now();
@@ -51057,6 +51161,8 @@ function renderHistory(out, c, result) {
     } else if (ver.operation === "retract") {
       const reason = ver.retractReason ? ` ${c.dim}'${escapeTerminalTextForDisplay(ver.retractReason.length > 80 ? `${ver.retractReason.slice(0, 77)}...` : ver.retractReason)}'${c.reset}` : "";
       op = `${c.red}retract${c.reset}${reason}`;
+    } else if (ver.operation === "reaffirm") {
+      op = `${c.cyan}reaffirm${c.reset}`;
     } else {
       op = `${c.yellow}revise${c.reset}`;
     }
@@ -51067,6 +51173,10 @@ function renderHistory(out, c, result) {
     const createdOn = ver.metadata?.createdOn;
     const thingCreatedStr = createdOn ? `  ${c.dim}born:${formatTime(createdOn, now)}${c.reset}` : "";
     out(`  ${wrefStr}  ${op}  ${c.dim}${time3}${c.reset}${by}${thingCreatedStr}`);
+    const affirmed = ver.affirmedWrefs;
+    if (Array.isArray(affirmed) && affirmed.length > 0) {
+      out(`    ${c.dim}affirms:${c.reset} ${formatAffirmedWrefs(c, affirmed.map(String))}`);
+    }
   }
 }
 function renderRefs(out, c, result, wref, direction) {
@@ -51592,6 +51702,9 @@ var queryFlags = {
   shape: flag.string({ description: "Filter by shape" }),
   kind: flag.string({ description: "Filter by kind" }),
   about: flag.string({ description: "Filter by about wref" }),
+  "affirmed-about": flag.string({
+    description: "Only active assertions whose current version affirms exactly this pinned target version: Shape/name@vN"
+  }),
   limit: flag.number({
     description: "Max results per page (default: 50, max: 500)"
   }),
@@ -51626,6 +51739,7 @@ var handleQuery = async (ctx, { flags }) => {
   const { org, repo } = parseOrgRepo(getRepoRef(ctx), ctx.config);
   const shape = flags.shape;
   const about = flags.about;
+  const affirmedAbout = flags["affirmed-about"];
   const kind = validateKind(flags.kind);
   const limit = flags.limit;
   const cursor = flags.cursor;
@@ -51648,6 +51762,9 @@ var handleQuery = async (ctx, { flags }) => {
   if (ctx.liveMode && sinceRepoSeq !== undefined) {
     usageError("--since-repo-seq cannot be used with --live.", "wh thing query --since-repo-seq 42 --all --format json");
   }
+  if (affirmedAbout && match) {
+    usageError("--affirmed-about is PG-served per exact pinned version; it cannot be combined with --match.", "wh thing query --affirmed-about Location/cave@v3");
+  }
   if (count) {
     if (cursor || all || limit || ctx.liveMode || role) {
       usageError("Usage: wh thing query --count [--shape SHAPE] [--about WREF] [--kind KIND] [--match PATTERN] [--since-repo-seq N]", "wh thing query --kind assertion --about Player/alice --count --since-repo-seq 42");
@@ -51657,6 +51774,7 @@ var handleQuery = async (ctx, { flags }) => {
       kind,
       match,
       about,
+      affirmedAbout,
       includeRetracted,
       resolveCollections,
       componentRef,
@@ -51680,6 +51798,7 @@ var handleQuery = async (ctx, { flags }) => {
   const queryOpts = {
     shape,
     about,
+    affirmedAbout,
     kind,
     match,
     includeRetracted,
@@ -51718,6 +51837,7 @@ var handleQuery = async (ctx, { flags }) => {
   const result = all ? await fetchAllQueryPages(ctx, org, repo, {
     shape,
     about,
+    affirmedAbout,
     kind,
     match,
     includeRetracted,
@@ -51736,6 +51856,7 @@ var handleQuery = async (ctx, { flags }) => {
   } : undefined) : await ctx.client.thing.query(org, repo, {
     shape,
     about,
+    affirmedAbout,
     kind,
     match,
     includeRetracted,
@@ -51767,6 +51888,7 @@ async function fetchAllQueryPages(ctx, org, repo, opts, onPage) {
     fetchPage: (cursor) => ctx.client.thing.query(org, repo, {
       shape: opts.shape,
       about: opts.about,
+      affirmedAbout: opts.affirmedAbout,
       kind: opts.kind,
       match: opts.match,
       includeRetracted: opts.includeRetracted,
@@ -53007,6 +53129,17 @@ var ASSERTION_DOMAIN = defineDomain({
       ],
       handler: handleRevise
     },
+    reaffirm: {
+      prime: true,
+      summary: "Edit which pinned target versions an assertion's claim is affirmed for (claim data unchanged)",
+      args: "<wref>",
+      flags: reaffirmFlags,
+      examples: [
+        "wh assertion reaffirm Belief/cave-safe --add Location/cave@v3",
+        "wh assertion reaffirm Belief/cave-safe --add Location/cave@v4 --remove Location/cave@v1 --expected-version 3"
+      ],
+      handler: handleReaffirm
+    },
     retract: {
       prime: true,
       summary: "Retract an assertion",
@@ -54740,7 +54873,7 @@ function renderPrettyReceipt(ctx, receipt, committer) {
     const record2 = operation;
     const operationKind = String(record2.operation ?? "operation");
     const failed = isFailedOpStatus(record2.status);
-    const marker = failed ? "!" : operationKind === "add" ? "+" : operationKind === "revise" ? "~" : "-";
+    const marker = failed ? "!" : operationKind === "add" ? "+" : operationKind === "revise" ? "~" : operationKind === "reaffirm" ? "±" : "-";
     const error51 = typeof record2.error === "object" && record2.error !== null ? record2.error : undefined;
     const errorSummary = failed ? ` ${error51?.message ?? error51?.code ?? "failed"}` : "";
     ctx.out(`  ${marker} ${displayName(c, String(record2.name ?? record2.resolvedName ?? "(unnamed)"))}${errorSummary}`);
@@ -54842,6 +54975,10 @@ var createFlags3 = {
     description: "Target shape or shaped thing for assertions. Repeatable; one per --add, or a single value broadcast to all.",
     multiple: true
   }),
+  affirm: flag.string({
+    description: "Pinned target version the assertion claim is affirmed for (repeatable): Shape/name@vN. Requires a single assertion --add or --revise.",
+    multiple: true
+  }),
   reason: flag.string({
     description: "Reason for retraction. Repeatable; one per --retract, or a single value broadcast to all.",
     multiple: true
@@ -55042,18 +55179,21 @@ var handleTemplate = async (ctx, { flags, args }) => {
     }
     const data = buildTemplateData(fields);
     const nameSuffix = count > 1 ? (i) => `my-${shapeName.toLowerCase()}-${i + 1}` : () => `my-${shapeName.toLowerCase()}`;
+    const affirmedTargetsPlaceholder = templateKind === "assertion" ? { affirmedTargets: [] } : {};
     for (let i = 0;i < count; i++) {
       const op = operationType === "add" ? {
         operation: "add",
         kind: templateKind,
         name: `${shapeName}/${nameSuffix(i)}`,
         ...aboutPlaceholder ? { about: aboutPlaceholder } : {},
-        data
+        data,
+        ...affirmedTargetsPlaceholder
       } : {
         operation: "revise",
         kind: templateKind,
         name: `${shapeName}/FILL_IN`,
-        data
+        data,
+        ...affirmedTargetsPlaceholder
       };
       operations.push(op);
     }
@@ -55078,7 +55218,7 @@ var handleTemplate = async (ctx, { flags, args }) => {
 // ../../packages/warmhub-cli/src/domains/commit-submit-ops.ts
 var SHORT_FORM_MAX_ADDS = 20;
 function buildAddOperations(input) {
-  const { addNames, dataJsons, shapes, abouts, kinds } = input;
+  const { addNames, dataJsons, shapes, abouts, affirms, kinds } = input;
   if (addNames.length > SHORT_FORM_MAX_ADDS) {
     throw new CliError(2 /* UserInput */, "USER_INPUT", `Short-form --add is capped at ${SHORT_FORM_MAX_ADDS} operations per write (got ${addNames.length}).`, undefined, "Use --file <path.json> or --ops '<json>' for bulk writes.");
   }
@@ -55096,6 +55236,9 @@ function buildAddOperations(input) {
   assertCardinality("--shape", shapes, { allowBroadcast: true });
   assertCardinality("--about", abouts, { allowBroadcast: true });
   assertCardinality("--kind", kinds, { allowBroadcast: true });
+  if (affirms.length > 0 && addNames.length !== 1) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", `--affirm requires exactly one --add (got ${addNames.length}); the repeated values form that assertion's affirmation set.`, undefined, 'Use --file <path.json> with per-op "affirmedTargets" for multi-add writes.');
+  }
   const pick2 = (values, i, { allowBroadcast }) => {
     if (values.length === 0)
       return;
@@ -55116,7 +55259,17 @@ function buildAddOperations(input) {
     }
     const localName = shape ? `${shape}/${addName}` : addName;
     const kind = kindFlag ?? (about ? "assertion" : "thing");
-    return { operation: "add", kind, name: localName, data, about };
+    if (affirms.length > 0 && kind !== "assertion") {
+      throw new CliError(2 /* UserInput */, "USER_INPUT", `--affirm applies only to assertion adds, but --add "${addName}" resolved kind '${kind}'.`, undefined, `wh commit submit --add ${addName} --about Target/FILL_IN --data '{...}' --affirm Target/FILL_IN@v1`);
+    }
+    return {
+      operation: "add",
+      kind,
+      name: localName,
+      data,
+      about,
+      ...affirms.length > 0 ? { affirmedTargets: affirms } : {}
+    };
   });
 }
 function buildRetractOperations(input) {
@@ -55171,6 +55324,8 @@ function synthesizeCommitMessage(operations) {
   if (operations.length > 1)
     return `batch: ${operations.length} operations`;
   const op = operations[0];
+  if (!op)
+    return;
   const name = op.name ?? "";
   if (op.operation === "revise") {
     return name ? `revise ${name}` : "revise";
@@ -55180,6 +55335,9 @@ function synthesizeCommitMessage(operations) {
       return `retract shape ${name}`;
     return name ? `retract ${name}` : "retract";
   }
+  if (op.operation === "reaffirm") {
+    return name ? `reaffirm ${name}` : "reaffirm";
+  }
   const add = op;
   if (add.kind === "collection") {
     const type = add.type ?? "collection";
@@ -55203,8 +55361,8 @@ var ALLOWED_FLAGS = {
   "--stream": new Set,
   "--ops": new Set,
   "--file": new Set,
-  "--add": new Set(["data", "shape", "about", "kind"]),
-  "--revise": new Set(["data", "kind"]),
+  "--add": new Set(["data", "shape", "about", "affirm", "kind"]),
+  "--revise": new Set(["data", "affirm", "kind"]),
   "--retract": new Set(["reason", "kind"]),
   "--type": new Set(["name", "members"])
 };
@@ -55704,6 +55862,7 @@ var handleSubmit = async (ctx, { flags, args }) => {
   const dataJsons = flags.data ?? [];
   const shapes = flags.shape ?? [];
   const abouts = flags.about ?? [];
+  const affirms = flags.affirm ?? [];
   const reasons = flags.reason ?? [];
   const kinds = flags.kind ?? [];
   const expectedVersionExample = retractNames.length > 0 ? "wh commit submit --retract Player/alice --expected-version 3" : "wh commit submit --revise Player/alice --data '{...}' --expected-version 3";
@@ -55751,6 +55910,7 @@ var handleSubmit = async (ctx, { flags, args }) => {
     data: dataJsons.length > 0,
     shape: shapes.length > 0,
     about: abouts.length > 0,
+    affirm: affirms.length > 0,
     reason: reasons.length > 0,
     kind: operationKinds.length > 0,
     name: flags.name !== undefined,
@@ -55828,6 +55988,7 @@ var handleSubmit = async (ctx, { flags, args }) => {
       dataJsons,
       shapes,
       abouts,
+      affirms,
       kinds: operationKinds
     });
   } else if (operationSource === "--retract") {
@@ -55849,12 +56010,16 @@ var handleSubmit = async (ctx, { flags, args }) => {
     const data = rawData !== undefined ? parseJsonObject(rawData, "--data") : undefined;
     const kindFlag = operationKinds[0];
     const kind = kindFlag ?? "thing";
+    if (affirms.length > 0 && kind !== "assertion") {
+      throw new CliError(2 /* UserInput */, "USER_INPUT", `--affirm applies only to assertion revises, but --revise resolved kind '${kind}'.`, undefined, `wh commit submit --revise ${reviseName} --kind assertion --data '{...}' --affirm Location/cave@v3`);
+    }
     operations = [
       {
         operation: "revise",
         kind,
         name: reviseName,
         data,
+        ...affirms.length > 0 ? { affirmedTargets: affirms } : {},
         ...expectedVersion !== undefined ? { expectedVersion } : {},
         ...leaseIdFlag ? { leaseId: leaseIdFlag } : {}
       }
@@ -58922,6 +59087,9 @@ var createFlags5 = {
   coverage: flag.string({
     description: "inline coverage JSON ({include, exclude?})"
   }),
+  view: flag.string({
+    description: "View backing coverage instead (View/NAME or View/NAME@vN)"
+  }),
   op: flag.string({
     description: "operation to grant (repeatable)",
     multiple: true
@@ -58937,31 +59105,51 @@ var revokeFlags2 = {
 function repo(ctx) {
   return parseOrgRepo(getRepoRef(ctx), ctx.config);
 }
-var handleCreate4 = async (ctx, { args, flags }) => {
-  const [principalKind, principalId] = args;
-  if (!principalKind || !principalId || !flags.key || !flags.op?.length) {
-    usageError("Usage: wh grant create <member|pat|component> <principal-id> --key KEY --op OP [--op OP] --coverage JSON", `wh grant create component install-1:7 --key provision --op things:read --coverage '{"include":["Lesson/**"]}'`);
+var CREATE_USAGE = "Usage: wh grant create <member EMAIL | pat NAME | component ORG/NAME> --key KEY --op OP [--op OP] (--coverage JSON | --view View/NAME[@vN])";
+var CREATE_EXAMPLE = `wh grant create component acme/indexer --key provision --op things:read --coverage '{"include":["Lesson/**"]}'`;
+function parseRecipient(kind, name) {
+  switch (kind) {
+    case "member":
+      return { kind: "member", email: name };
+    case "pat":
+      return { kind: "pat", name };
+    case "component":
+      return {
+        kind: "component",
+        ...resolveRegisteredComponentRef(name, CREATE_USAGE, CREATE_EXAMPLE)
+      };
+    default:
+      usageError("Grant recipient kind must be member, pat, or component.", CREATE_EXAMPLE);
   }
-  if (!flags.coverage) {
-    usageError("Grant create requires --coverage.", `wh grant create component install-1:7 --key provision --op things:read --coverage '{"include":["Lesson/**"]}'`);
+}
+function isPatternList(value) {
+  return Array.isArray(value) && value.every((entry) => typeof entry === "string" && entry.length > 0);
+}
+function parseCoverage(raw) {
+  const candidate = parseJsonObject(raw, "--coverage");
+  if (!isPatternList(candidate.include) || candidate.include.length === 0) {
+    usageError("--coverage must be an object with a non-empty include array of patterns ({include, exclude?}).", CREATE_EXAMPLE);
   }
-  if (!["member", "pat", "component"].includes(principalKind)) {
-    usageError("Grant grantee kind must be member, pat, or component.", `wh grant create component install-1:7 --key provision --op things:read --coverage '{"include":["Lesson/**"]}'`);
+  if (candidate.exclude !== undefined && !isPatternList(candidate.exclude)) {
+    usageError("--coverage exclude must be an array of patterns when present.", CREATE_EXAMPLE);
   }
-  let coverage;
-  try {
-    coverage = JSON.parse(flags.coverage);
-  } catch {
-    usageError("--coverage must be valid JSON.", `wh grant create component install-1:7 --key provision --op things:read --coverage '{"include":["Lesson/**"]}'`);
+  return candidate;
+}
+var handleCreate4 = async (ctx, { args, flags }) => {
+  const [recipientKind, recipientName] = args;
+  if (!recipientKind || !recipientName || !flags.key || !flags.op?.length) {
+    usageError(CREATE_USAGE, CREATE_EXAMPLE);
+  }
+  if (flags.coverage && flags.view) {
+    usageError("Grant create takes --coverage or --view, not both.", CREATE_EXAMPLE);
   }
+  const recipient = parseRecipient(recipientKind, recipientName);
   const { org, repo: repoName } = repo(ctx);
+  const source = flags.coverage ? { coverage: parseCoverage(flags.coverage) } : flags.view ? { viewRef: flags.view } : usageError("Grant create requires --coverage or --view.", CREATE_EXAMPLE);
   const result = await ctx.client.grant.create(org, repoName, {
     idempotencyKey: flags.key,
-    grantee: {
-      principalId,
-      principalKind
-    },
-    coverage,
+    recipient,
+    ...source,
     ops: flags.op
   });
   writeOutput(ctx, result, () => ctx.out(JSON.stringify(result, null, 2)));
@@ -58977,7 +59165,7 @@ var handleGet = async (ctx, { args }) => {
 };
 var handleList4 = async (ctx, { flags }) => {
   const { org, repo: repoName } = repo(ctx);
-  const limit = Math.min(flags.limit ?? 50, 100);
+  const limit = Math.min(parsePositiveIntFlag(flags.limit, "--limit", "wh grant list --limit 25") ?? 50, 100);
   const result = await ctx.client.grant.list(org, repoName, {
     limit,
     cursor: flags.cursor
@@ -59003,7 +59191,7 @@ var GRANT_DOMAIN = defineDomain({
     create: {
       prime: true,
       summary: "Create or replay an issuer-scoped Grant request",
-      args: "<member|pat|component> <principal-id>",
+      args: "<member|pat|component> <email|token-name|org/name>",
       flags: createFlags5,
       handler: handleCreate4
     },
@@ -61063,7 +61251,7 @@ var CHECKPOINT_ID_EXAMPLE = "0198f6d5-78aa-7000-8000-000000000001";
 var CHECKPOINT_ACCESS_EXAMPLE = "wh repo checkpoint access acme/widgets --latest --archive";
 var CHECKPOINT_DOWNLOAD_EXAMPLE = "wh repo checkpoint download acme/widgets --latest --archive --output checkpoint.zip";
 var CHECKPOINT_READ_NOTE = "Requires unrestricted repo:read plus repo:checkpoint-read.";
-var CHECKPOINT_MANAGEMENT_NOTE = "Requires unrestricted repo:read, repo:checkpoint-read, and repo:admin.";
+var CHECKPOINT_MANAGEMENT_NOTE = "Requires unrestricted repo:read, repo:checkpoint-read, and repo:checkpoint-generate (or repo:admin for compatibility).";
 var generateFlags = {
   "at-least-repo-seq": checkpointFlags["at-least-repo-seq"],
   wait: checkpointFlags.wait
@@ -66200,7 +66388,7 @@ function resolveLogLevel(flagLevel, env) {
 // package.json
 var package_default3 = {
   name: "@warmhub/cli",
-  version: "0.89.0",
+  version: "0.91.0",
   private: false,
   type: "module",
   description: "The wh CLI for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",
@@ -66819,5 +67007,5 @@ process.exitCode = interceptedExitCode === undefined ? await runPreparedCli(laun
   version: package_default3.version
 }) : interceptedExitCode;
 
-//# debugId=0D9B1F5B8E62352264756E2164756E21
-//# warmhub-cli-build-info {"cliVersion":"0.89.0","sdkVersion":"0.87.0"}
+//# debugId=B83F4BF04D38984164756E2164756E21
+//# warmhub-cli-build-info {"cliVersion":"0.91.0","sdkVersion":"0.89.0"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@warmhub/cli",
-  "version": "0.89.0",
+  "version": "0.91.0",
   "private": false,
   "type": "module",
   "description": "The wh CLI for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",