@warmhub/cli 0.92.0 → 0.94.0

package/dist/wh.js

@@ -19392,10 +19392,13 @@ var ALL_BUILTIN_SHAPE_DEFS = {
 // ../../packages/rules/src/client-flags.ts
 var CLIENT_FLAGS_HEADER = "X-WarmHub-Client-Flags";
 var CLIENT_FLAG_COMPATIBILITY_OVERRIDE = "compatibility-override";
+var CLIENT_FLAG_EDGE_CACHE_OPT_IN = "edge-cache-opt-in";
 var KNOWN_CLIENT_FLAGS = new Set([
-  CLIENT_FLAG_COMPATIBILITY_OVERRIDE
+  CLIENT_FLAG_COMPATIBILITY_OVERRIDE,
+  CLIENT_FLAG_EDGE_CACHE_OPT_IN
 ]);
 var CLIENT_FLAG_TOKEN_RE = /^[a-z0-9-]+$/;
+var NO_FLAGS = new Set;
 function isValidClientFlagToken(token) {
   return CLIENT_FLAG_TOKEN_RE.test(token);
 }
@@ -42600,6 +42603,257 @@ var SYSTEM_INFRA_SHAPE_NAMES = new Set(SYSTEM_COMPONENTS.filter((entry) => entry
 function findSystemComponent(componentId) {
   return SYSTEM_COMPONENTS.find((entry) => entry.componentId === componentId);
 }
+// ../../packages/sdk-ts/src/collection-operation-normalize.ts
+var collectionTypes2 = new Set([
+  "arc",
+  "bond",
+  "pair",
+  "set",
+  "list"
+]);
+function normalizeBackendCollectionAdd(operation, source) {
+  const normalized = normalizeCollectionWrite(operation, source, "add");
+  return {
+    operation: "add",
+    kind: "collection",
+    name: normalized.name,
+    type: normalized.type,
+    members: normalized.members,
+    ...operation.skipExisting === true ? { skipExisting: true } : {}
+  };
+}
+function normalizeBackendCollectionRevise(operation, source) {
+  const normalized = normalizeCollectionWrite(operation, source, "revise");
+  if (!normalized.name) {
+    throw new Error(`${source}: collection revise requires a target name`);
+  }
+  return {
+    operation: "revise",
+    kind: "collection",
+    name: normalized.name,
+    type: normalized.type,
+    members: normalized.members,
+    ...typeof operation.expectedVersion === "number" ? { expectedVersion: operation.expectedVersion } : {},
+    ...typeof operation.leaseId === "string" && operation.leaseId.length > 0 ? { leaseId: operation.leaseId } : {}
+  };
+}
+function normalizeCollectionWrite(operation, source, writeOperation) {
+  const diagnostics = preflightOpDiagnostics2({
+    operation: writeOperation,
+    kind: "collection",
+    name: typeof operation.name === "string" ? operation.name : undefined,
+    type: typeof operation.type === "string" ? operation.type : undefined,
+    members: Array.isArray(operation.members) ? operation.members : undefined
+  }, 0);
+  if (diagnostics.length > 0) {
+    throw new Error(`${source}: ${diagnostics.map((diagnostic) => diagnostic.message).join("; ")}`);
+  }
+  const type = normalizeCollectionType(operation.type);
+  if (!type) {
+    throw new Error(`${source}: collection ${writeOperation} requires 'type'. Use one of: arc, bond, set, list`);
+  }
+  if (!Array.isArray(operation.members)) {
+    throw new Error(`${source}: collection ${writeOperation} requires a 'members' array`);
+  }
+  const name = normalizeOptionalName(operation.name);
+  if (!name) {
+    throw new Error(`${source}: collection ${writeOperation} name must be a non-empty string`);
+  }
+  assertNoUnsupportedCollectionFields(operation, source, writeOperation);
+  return {
+    name,
+    type,
+    members: operation.members
+  };
+}
+function assertNoUnsupportedCollectionFields(operation, source, writeOperation) {
+  const unsupportedFields = [
+    "about",
+    "aboutWref",
+    "shapeWref",
+    "data",
+    ...writeOperation === "revise" ? ["skipExisting"] : []
+  ].filter((field) => operation[field] !== undefined);
+  if (unsupportedFields.length > 0) {
+    throw new Error(`${source}: collection ${writeOperation} does not support ${unsupportedFields.map((field) => `'${field}'`).join(", ")}`);
+  }
+}
+function normalizeCollectionType(value) {
+  if (typeof value !== "string")
+    return;
+  const trimmed = value.trim();
+  if (!collectionTypes2.has(trimmed))
+    return;
+  return trimmed;
+}
+function normalizeOptionalName(value) {
+  if (typeof value !== "string")
+    return;
+  if (value.length === 0 || value.trim() !== value)
+    return;
+  return value;
+}
+
+// ../../packages/sdk-ts/src/operation-normalize.ts
+function toBackendStreamOperation(operation) {
+  if (operation.expectedVersion !== undefined && operation.operation !== "revise" && operation.operation !== "retract" && operation.operation !== "reaffirm") {
+    throw new Error("expectedVersion is only valid on revise, retract, or reaffirm operations — set an explicit operation discriminator");
+  }
+  if (operation.operation === "retract") {
+    return {
+      operation: "retract",
+      name: operation.name,
+      ...operation.kind ? { kind: operation.kind } : {},
+      ...operation.reason ? { reason: operation.reason } : {},
+      ...operation.expectedVersion !== undefined ? { expectedVersion: operation.expectedVersion } : {},
+      ...operation.leaseId ? { leaseId: operation.leaseId } : {}
+    };
+  }
+  if (operation.operation === "reaffirm") {
+    return {
+      operation: "reaffirm",
+      name: operation.name,
+      ...operation.expectedVersion !== undefined ? { expectedVersion: operation.expectedVersion } : {},
+      ...operation.kind ? { kind: operation.kind } : {},
+      ...operation.add ? { add: operation.add } : {},
+      ...operation.remove ? { remove: operation.remove } : {},
+      ...operation.leaseId ? { leaseId: operation.leaseId } : {}
+    };
+  }
+  if (operation.operation === "rename") {
+    return {
+      operation: "rename",
+      name: operation.name,
+      newName: operation.newName,
+      ...operation.kind ? { kind: operation.kind } : {}
+    };
+  }
+  if (operation.operation === "revise") {
+    const name = operation.name ?? operation.wref;
+    if (!name) {
+      throw new Error("revise operation requires a target");
+    }
+    const kind2 = inferOperationKind({ kind: operation.kind, name });
+    if (Object.hasOwn(operation, "active")) {
+      throw new Error(`${kind2} revise operation no longer supports 'active' — use retract('${name}') instead`);
+    }
+    if (kind2 !== "assertion" && operation.affirmedTargets !== undefined) {
+      throw new Error(`${kind2} revise operation does not support 'affirmedTargets' — it applies only to assertions; set kind: 'assertion' explicitly`);
+    }
+    if (kind2 === "collection") {
+      return normalizeBackendCollectionRevise(operation, "commit.apply");
+    }
+    if (operation.data === undefined) {
+      throw new Error(`${kind2} revise operation requires 'data'`);
+    }
+    if (kind2 === "assertion") {
+      return {
+        operation: "revise",
+        kind: "assertion",
+        name,
+        data: operation.data,
+        ...operation.affirmedTargets ? { affirmedTargets: operation.affirmedTargets } : {},
+        ...operation.expectedVersion !== undefined ? { expectedVersion: operation.expectedVersion } : {},
+        ...operation.leaseId ? { leaseId: operation.leaseId } : {}
+      };
+    }
+    return {
+      operation: "revise",
+      kind: kind2,
+      name,
+      data: operation.data,
+      ...operation.expectedVersion !== undefined ? { expectedVersion: operation.expectedVersion } : {},
+      ...operation.leaseId ? { leaseId: operation.leaseId } : {}
+    };
+  }
+  const kind = inferOperationKind(operation);
+  const skipExisting = "skipExisting" in operation ? operation.skipExisting : undefined;
+  if (kind !== "collection" && (("type" in operation) && operation.type !== undefined || ("members" in operation) && operation.members !== undefined)) {
+    throw new Error(`add operation '${operation.name ?? ""}' has collection fields but resolved kind '${kind}' — collection adds require both 'type' and 'members', or set kind: 'collection'`);
+  }
+  if (kind !== "assertion" && operation.affirmedTargets !== undefined) {
+    throw new Error(`${kind} add operation does not support 'affirmedTargets' — it applies only to assertions; set kind: 'assertion' explicitly`);
+  }
+  if (kind === "collection") {
+    return normalizeBackendCollectionAdd({ ...operation, skipExisting }, "commit.apply");
+  }
+  if (!operation.name) {
+    throw new Error("add operation requires a name");
+  }
+  if (kind === "assertion") {
+    if (!("about" in operation) || operation.about === undefined) {
+      throw new Error("assertion add operation requires 'about'");
+    }
+    if (typeof operation.about !== "string") {
+      throw new Error(COLLECTION_ABOUT_REMOVED_MESSAGE);
+    }
+    if (operation.data === undefined) {
+      throw new Error("assertion add operation requires 'data'");
+    }
+    return {
+      operation: "add",
+      kind: "assertion",
+      name: operation.name,
+      about: operation.about,
+      data: operation.data,
+      ...operation.affirmedTargets ? { affirmedTargets: operation.affirmedTargets } : {},
+      ...skipExisting === true ? { skipExisting } : {}
+    };
+  }
+  if (operation.data === undefined) {
+    throw new Error(`${kind} add operation requires 'data'`);
+  }
+  return {
+    operation: "add",
+    kind,
+    name: operation.name,
+    data: operation.data,
+    ...skipExisting === true ? { skipExisting } : {}
+  };
+}
+
+// ../../packages/sdk-ts/src/commit-validation.ts
+var MAX_COMMIT_VALIDATION_OPERATIONS = 1e4;
+var MAX_COMMIT_VALIDATION_ENCODED_BYTES = 4 * 1024 * 1024;
+
+class CommitValidationInputError extends Error {
+  code = "VALIDATION_ERROR";
+  status = 400;
+  constructor(message) {
+    super(message);
+    this.name = "WarmHubError";
+  }
+}
+function normalizeCommitValidationOperations(operations, skipExisting) {
+  return operations.map((operation, index) => {
+    let normalized;
+    try {
+      normalized = toBackendStreamOperation(operation);
+    } catch (error51) {
+      const message = error51 instanceof Error ? error51.message : String(error51);
+      throw new CommitValidationInputError(`Invalid operation at index ${index}: ${message}`);
+    }
+    return skipExisting === true && normalized.operation === "add" ? { ...normalized, skipExisting: true } : normalized;
+  });
+}
+function createCommitValidateInput(orgName, repoName, operations, opts) {
+  return {
+    orgName,
+    repoName,
+    ...opts?.committer !== undefined ? { committer: opts.committer } : {},
+    ...opts?.message !== undefined ? { message: opts.message } : {},
+    ...opts?.componentRef !== undefined ? { componentRef: opts.componentRef } : {},
+    operations: normalizeCommitValidationOperations(operations, opts?.skipExisting),
+    ...opts?.includeWouldBeBody !== undefined ? { includeWouldBeBody: opts.includeWouldBeBody } : {}
+  };
+}
+function encodeCommitValidateRequestBody(input) {
+  return JSON.stringify(input);
+}
+function commitValidateRequestBodyBytes(input) {
+  return new TextEncoder().encode(encodeCommitValidateRequestBody(input)).byteLength;
+}
+
 // ../../packages/sdk-ts/src/grant-client.ts
 function createGrantClient(getTrpc, mapError) {
   return {
@@ -42746,160 +43000,38 @@ function shapeDefinitionPreflightError(name, data, verb) {
   return `Invalid shape definition for "${name}": ${result.errors.join("; ")}`;
 }
 
-// ../../packages/sdk-ts/src/stream-submit-utils.ts
-function streamAppendResultStatus(result) {
-  const status = "status" in result ? result.status : undefined;
-  if (status === "failed") {
-    return "error";
-  }
-  return status === "noop" || result.operation === "noop" ? "noop" : "applied";
-}
-var DEFAULT_RETRY_POLICY = {
-  maxAttempts: 3,
-  baseDelayMs: 250,
-  maxDelayMs: 8000
-};
-var MAX_ATTEMPTS_HARD_CAP = 10;
-var MAX_DELAY_HARD_CAP_MS = 60000;
-function resolveRetryPolicy(retry) {
-  if (retry === false)
-    return false;
-  const overrides = {};
-  if (retry !== undefined) {
-    if (Number.isFinite(retry.maxAttempts))
-      overrides.maxAttempts = retry.maxAttempts;
-    if (Number.isFinite(retry.baseDelayMs))
-      overrides.baseDelayMs = retry.baseDelayMs;
-    if (Number.isFinite(retry.maxDelayMs))
-      overrides.maxDelayMs = retry.maxDelayMs;
-  }
-  const merged = { ...DEFAULT_RETRY_POLICY, ...overrides };
-  return {
-    maxAttempts: Math.min(MAX_ATTEMPTS_HARD_CAP, Math.max(1, Math.trunc(merged.maxAttempts))),
-    baseDelayMs: Math.min(MAX_DELAY_HARD_CAP_MS, Math.max(0, Math.trunc(merged.baseDelayMs))),
-    maxDelayMs: Math.min(MAX_DELAY_HARD_CAP_MS, Math.max(0, Math.trunc(merged.maxDelayMs)))
-  };
-}
-var DEFINITE_CLIENT_REJECT_CODES = new Set([
-  "BAD_REQUEST",
-  "METHOD_NOT_SUPPORTED",
-  "PARSE_ERROR",
-  "PAYLOAD_TOO_LARGE",
-  "PRECONDITION_FAILED",
-  "UNAUTHORIZED",
-  "UNPROCESSABLE_CONTENT",
-  "UNSUPPORTED_MEDIA_TYPE",
-  "UNAUTHENTICATED",
-  "FORBIDDEN",
-  "VALIDATION_ERROR",
-  "SHAPE_MISMATCH",
-  "RESERVED_NAME",
-  "ILLEGAL_OP_SEQUENCE",
-  "NOT_FOUND",
-  "KIND_MISMATCH",
-  "CONFLICT",
-  "ALREADY_RETRACTED",
-  "ARCHIVED",
-  "RATE_LIMITED",
-  "TOO_MANY_REQUESTS",
-  "UNRESOLVED_TOKEN"
-]);
-var TERMINAL_AMBIGUOUS_CODES = new Set(["COMMIT_OUTCOME_UNKNOWN"]);
-function extractErrorCode(cause) {
-  if (!cause || typeof cause !== "object")
-    return;
-  const direct = cause.code;
-  if (typeof direct === "string")
-    return direct;
-  const data = cause.data;
-  const wh = data?.warmhub?.code;
-  if (typeof wh === "string")
-    return wh;
-  const dc = data?.code;
-  if (typeof dc === "string")
-    return dc;
-  return;
-}
-function extractHttpStatus(cause) {
-  if (!cause || typeof cause !== "object")
-    return;
-  const status = cause.data?.httpStatus;
-  if (typeof status === "number")
-    return status;
-  const warmhubStatus = cause.data?.warmhub?.status;
-  if (typeof warmhubStatus === "number")
-    return warmhubStatus;
-  const direct = cause.status;
-  return typeof direct === "number" ? direct : undefined;
-}
-function isDefiniteClientRejectionStatus(status) {
-  return status !== undefined && status >= 400 && status < 500 && status !== 408;
-}
-function isTerminalAmbiguousError(cause) {
-  const code = extractErrorCode(cause);
-  return code !== undefined && TERMINAL_AMBIGUOUS_CODES.has(code);
-}
-function isDefiniteStreamAppendRejection(cause) {
-  if (isTerminalAmbiguousError(cause))
-    return false;
-  const code = extractErrorCode(cause);
-  return code !== undefined && DEFINITE_CLIENT_REJECT_CODES.has(code) || isDefiniteClientRejectionStatus(extractHttpStatus(cause));
-}
-function isTransientStreamFailure(cause) {
-  if (isTerminalAmbiguousError(cause))
-    return false;
-  if (isDefiniteStreamAppendRejection(cause))
-    return false;
-  if (isFetchNetworkTypeError(cause))
-    return true;
-  if (cause instanceof TypeError)
-    return false;
-  if (cause instanceof SyntaxError)
-    return false;
-  const inner = cause?.cause;
-  if (isFetchNetworkTypeError(inner))
-    return true;
-  if (inner instanceof TypeError)
-    return false;
-  if (inner instanceof SyntaxError)
-    return false;
-  return true;
-}
-function isFetchNetworkTypeError(cause) {
-  return cause instanceof TypeError && /fetch/i.test(cause.message);
-}
-function computeBackoffDelayMs(attempt, policy) {
-  const exponential = policy.baseDelayMs * 2 ** Math.max(0, attempt - 1);
-  const jitter = Math.random() * policy.baseDelayMs;
-  return Math.min(policy.maxDelayMs, exponential + jitter);
-}
-function sleep2(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
-
 // ../../packages/sdk-ts/src/stream-submit-aggregate.ts
-function toSubmittedOperation(result, opIndex, status, submittedName) {
-  const row = {
+function toSubmittedOperation(result, opIndex, submitted) {
+  const operation = result.operation === undefined || result.operation === "noop" ? submitted?.operation ?? "add" : result.operation;
+  const base = {
     opIndex,
     name: result.name ?? "",
-    operation: result.operation === "revise" || result.operation === "retract" || result.operation === "reaffirm" || result.operation === "rename" || result.operation === "noop" ? result.operation : "add",
-    dataHash: result.dataHash ?? "",
-    version: result.version ?? 0,
-    status,
-    error: result.error
-  };
-  if (result.affirmations)
-    row.affirmations = result.affirmations;
-  if (result.status === "failed" && submittedName !== undefined) {
-    row.submittedName = submittedName;
-  }
-  if (result.resolvedName !== undefined)
-    row.resolvedName = result.resolvedName;
-  if (result.retryable !== undefined)
-    row.retryable = result.retryable;
-  if (result.warnings)
-    row.warnings = result.warnings;
-  return row;
+    operation,
+    ...result.affirmations ? { affirmations: result.affirmations } : {},
+    ...result.resolvedName !== undefined ? { resolvedName: result.resolvedName } : {},
+    ...result.warnings ? { warnings: result.warnings } : {}
+  };
+  if (result.status === "failed") {
+    return {
+      ...base,
+      status: "error",
+      errors: [
+        {
+          code: result.error?.code ?? "BACKEND",
+          message: result.error?.message ?? `Operation on "${result.name}" failed`,
+          ...result.error?.details ? { details: result.error.details } : {},
+          ...result.retryable !== undefined ? { retryable: result.retryable } : {}
+        }
+      ],
+      ...submitted?.name !== undefined ? { submittedName: submitted.name } : {}
+    };
+  }
+  return {
+    ...base,
+    status: result.status === "noop" || result.operation === "noop" ? "noop" : "applied",
+    ...result.version !== undefined ? { version: result.version } : {},
+    ...result.dataHash !== undefined ? { dataHash: result.dataHash } : {}
+  };
 }
 
 class StreamSubmissionAggregator {
@@ -42910,11 +43042,22 @@ class StreamSubmissionAggregator {
     return this.operations.length > 0 && this.statusCounts.error === this.operations.length;
   }
   addChunk(input) {
-    input.results.forEach((result, position) => {
+    if (input.result.schemaVersion === "operation-event-receipt/v2") {
+      input.result.results.forEach((result) => {
+        this.statusCounts[result.status]++;
+        this.operations.push({
+          ...result,
+          opIndex: input.chunkStart + result.opIndex
+        });
+      });
+      return;
+    }
+    input.result.results.forEach((result, position) => {
       const local = result.opIndex ?? position;
-      const status = streamAppendResultStatus(result);
-      this.statusCounts[status]++;
-      this.operations.push(toSubmittedOperation(result, input.chunkStart + local, status, input.submittedNames?.[local]?.name));
+      const submitted = input.submittedOperations[local];
+      const operation = toSubmittedOperation(result, input.chunkStart + local, submitted);
+      this.statusCounts[operation.status]++;
+      this.operations.push(operation);
     });
   }
   addReceipt(receipt) {
@@ -43039,215 +43182,6 @@ function operationEventStreamRequestId(submissionId, chunkOrdinal) {
   return formatUuid(digest);
 }
 
-// ../../packages/sdk-ts/src/collection-operation-normalize.ts
-var collectionTypes2 = new Set([
-  "arc",
-  "bond",
-  "pair",
-  "set",
-  "list"
-]);
-function normalizeBackendCollectionAdd(operation, source) {
-  const normalized = normalizeCollectionWrite(operation, source, "add");
-  return {
-    operation: "add",
-    kind: "collection",
-    name: normalized.name,
-    type: normalized.type,
-    members: normalized.members,
-    ...operation.skipExisting === true ? { skipExisting: true } : {}
-  };
-}
-function normalizeBackendCollectionRevise(operation, source) {
-  const normalized = normalizeCollectionWrite(operation, source, "revise");
-  if (!normalized.name) {
-    throw new Error(`${source}: collection revise requires a target name`);
-  }
-  return {
-    operation: "revise",
-    kind: "collection",
-    name: normalized.name,
-    type: normalized.type,
-    members: normalized.members,
-    ...typeof operation.expectedVersion === "number" ? { expectedVersion: operation.expectedVersion } : {},
-    ...typeof operation.leaseId === "string" && operation.leaseId.length > 0 ? { leaseId: operation.leaseId } : {}
-  };
-}
-function normalizeCollectionWrite(operation, source, writeOperation) {
-  const diagnostics = preflightOpDiagnostics2({
-    operation: writeOperation,
-    kind: "collection",
-    name: typeof operation.name === "string" ? operation.name : undefined,
-    type: typeof operation.type === "string" ? operation.type : undefined,
-    members: Array.isArray(operation.members) ? operation.members : undefined
-  }, 0);
-  if (diagnostics.length > 0) {
-    throw new Error(`${source}: ${diagnostics.map((diagnostic) => diagnostic.message).join("; ")}`);
-  }
-  const type = normalizeCollectionType(operation.type);
-  if (!type) {
-    throw new Error(`${source}: collection ${writeOperation} requires 'type'. Use one of: arc, bond, set, list`);
-  }
-  if (!Array.isArray(operation.members)) {
-    throw new Error(`${source}: collection ${writeOperation} requires a 'members' array`);
-  }
-  const name = normalizeOptionalName(operation.name);
-  if (!name) {
-    throw new Error(`${source}: collection ${writeOperation} name must be a non-empty string`);
-  }
-  assertNoUnsupportedCollectionFields(operation, source, writeOperation);
-  return {
-    name,
-    type,
-    members: operation.members
-  };
-}
-function assertNoUnsupportedCollectionFields(operation, source, writeOperation) {
-  const unsupportedFields = [
-    "about",
-    "aboutWref",
-    "shapeWref",
-    "data",
-    ...writeOperation === "revise" ? ["skipExisting"] : []
-  ].filter((field) => operation[field] !== undefined);
-  if (unsupportedFields.length > 0) {
-    throw new Error(`${source}: collection ${writeOperation} does not support ${unsupportedFields.map((field) => `'${field}'`).join(", ")}`);
-  }
-}
-function normalizeCollectionType(value) {
-  if (typeof value !== "string")
-    return;
-  const trimmed = value.trim();
-  if (!collectionTypes2.has(trimmed))
-    return;
-  return trimmed;
-}
-function normalizeOptionalName(value) {
-  if (typeof value !== "string")
-    return;
-  if (value.length === 0 || value.trim() !== value)
-    return;
-  return value;
-}
-
-// ../../packages/sdk-ts/src/operation-normalize.ts
-function toBackendStreamOperation(operation) {
-  if (operation.expectedVersion !== undefined && operation.operation !== "revise" && operation.operation !== "retract" && operation.operation !== "reaffirm") {
-    throw new Error("expectedVersion is only valid on revise, retract, or reaffirm operations — set an explicit operation discriminator");
-  }
-  if (operation.operation === "retract") {
-    return {
-      operation: "retract",
-      name: operation.name,
-      ...operation.kind ? { kind: operation.kind } : {},
-      ...operation.reason ? { reason: operation.reason } : {},
-      ...operation.expectedVersion !== undefined ? { expectedVersion: operation.expectedVersion } : {},
-      ...operation.leaseId ? { leaseId: operation.leaseId } : {}
-    };
-  }
-  if (operation.operation === "reaffirm") {
-    return {
-      operation: "reaffirm",
-      name: operation.name,
-      ...operation.expectedVersion !== undefined ? { expectedVersion: operation.expectedVersion } : {},
-      ...operation.kind ? { kind: operation.kind } : {},
-      ...operation.add ? { add: operation.add } : {},
-      ...operation.remove ? { remove: operation.remove } : {},
-      ...operation.leaseId ? { leaseId: operation.leaseId } : {}
-    };
-  }
-  if (operation.operation === "rename") {
-    return {
-      operation: "rename",
-      name: operation.name,
-      newName: operation.newName,
-      ...operation.kind ? { kind: operation.kind } : {}
-    };
-  }
-  if (operation.operation === "revise") {
-    const name = operation.name ?? operation.wref;
-    if (!name) {
-      throw new Error("revise operation requires a target");
-    }
-    const kind2 = inferOperationKind({ kind: operation.kind, name });
-    if (Object.hasOwn(operation, "active")) {
-      throw new Error(`${kind2} revise operation no longer supports 'active' — use retract('${name}') instead`);
-    }
-    if (kind2 !== "assertion" && operation.affirmedTargets !== undefined) {
-      throw new Error(`${kind2} revise operation does not support 'affirmedTargets' — it applies only to assertions; set kind: 'assertion' explicitly`);
-    }
-    if (kind2 === "collection") {
-      return normalizeBackendCollectionRevise(operation, "commit.apply");
-    }
-    if (operation.data === undefined) {
-      throw new Error(`${kind2} revise operation requires 'data'`);
-    }
-    if (kind2 === "assertion") {
-      return {
-        operation: "revise",
-        kind: "assertion",
-        name,
-        data: operation.data,
-        ...operation.affirmedTargets ? { affirmedTargets: operation.affirmedTargets } : {},
-        ...operation.expectedVersion !== undefined ? { expectedVersion: operation.expectedVersion } : {},
-        ...operation.leaseId ? { leaseId: operation.leaseId } : {}
-      };
-    }
-    return {
-      operation: "revise",
-      kind: kind2,
-      name,
-      data: operation.data,
-      ...operation.expectedVersion !== undefined ? { expectedVersion: operation.expectedVersion } : {},
-      ...operation.leaseId ? { leaseId: operation.leaseId } : {}
-    };
-  }
-  const kind = inferOperationKind(operation);
-  const skipExisting = "skipExisting" in operation ? operation.skipExisting : undefined;
-  if (kind !== "collection" && (("type" in operation) && operation.type !== undefined || ("members" in operation) && operation.members !== undefined)) {
-    throw new Error(`add operation '${operation.name ?? ""}' has collection fields but resolved kind '${kind}' — collection adds require both 'type' and 'members', or set kind: 'collection'`);
-  }
-  if (kind !== "assertion" && operation.affirmedTargets !== undefined) {
-    throw new Error(`${kind} add operation does not support 'affirmedTargets' — it applies only to assertions; set kind: 'assertion' explicitly`);
-  }
-  if (kind === "collection") {
-    return normalizeBackendCollectionAdd({ ...operation, skipExisting }, "commit.apply");
-  }
-  if (!operation.name) {
-    throw new Error("add operation requires a name");
-  }
-  if (kind === "assertion") {
-    if (!("about" in operation) || operation.about === undefined) {
-      throw new Error("assertion add operation requires 'about'");
-    }
-    if (typeof operation.about !== "string") {
-      throw new Error(COLLECTION_ABOUT_REMOVED_MESSAGE);
-    }
-    if (operation.data === undefined) {
-      throw new Error("assertion add operation requires 'data'");
-    }
-    return {
-      operation: "add",
-      kind: "assertion",
-      name: operation.name,
-      about: operation.about,
-      data: operation.data,
-      ...operation.affirmedTargets ? { affirmedTargets: operation.affirmedTargets } : {},
-      ...skipExisting === true ? { skipExisting } : {}
-    };
-  }
-  if (operation.data === undefined) {
-    throw new Error(`${kind} add operation requires 'data'`);
-  }
-  return {
-    operation: "add",
-    kind,
-    name: operation.name,
-    data: operation.data,
-    ...skipExisting === true ? { skipExisting } : {}
-  };
-}
-
 // ../../packages/sdk-ts/src/stream-submit-types.ts
 var DEFAULT_STREAM_CHUNK_SIZE = DEFAULT_STREAM_APPEND_CHUNK_SIZE;
 var MAX_STREAM_APPEND_OPERATION_COUNT2 = MAX_STREAM_APPEND_OPERATION_COUNT;
@@ -43290,7 +43224,7 @@ class AllStreamOperationsFailedError extends Error {
   statusCounts;
   cause;
   constructor(result) {
-    const primaryFailure = result.operations.find((operation) => operation.error !== undefined)?.error;
+    const primaryFailure = result.operations.find((operation) => operation.status === "error")?.errors[0];
     super(primaryFailure ? `All ${result.operationCount} stream operations failed: ${primaryFailure.message}` : `All ${result.operationCount} stream operations failed.`);
     this.name = "WarmHubError";
     this.cause = primaryFailure;
@@ -43305,6 +43239,130 @@ class AllStreamOperationsFailedError extends Error {
   }
 }
 
+// ../../packages/sdk-ts/src/stream-submit-utils.ts
+var DEFAULT_RETRY_POLICY = {
+  maxAttempts: 3,
+  baseDelayMs: 250,
+  maxDelayMs: 8000
+};
+var MAX_ATTEMPTS_HARD_CAP = 10;
+var MAX_DELAY_HARD_CAP_MS = 60000;
+function resolveRetryPolicy(retry) {
+  if (retry === false)
+    return false;
+  const overrides = {};
+  if (retry !== undefined) {
+    if (Number.isFinite(retry.maxAttempts))
+      overrides.maxAttempts = retry.maxAttempts;
+    if (Number.isFinite(retry.baseDelayMs))
+      overrides.baseDelayMs = retry.baseDelayMs;
+    if (Number.isFinite(retry.maxDelayMs))
+      overrides.maxDelayMs = retry.maxDelayMs;
+  }
+  const merged = { ...DEFAULT_RETRY_POLICY, ...overrides };
+  return {
+    maxAttempts: Math.min(MAX_ATTEMPTS_HARD_CAP, Math.max(1, Math.trunc(merged.maxAttempts))),
+    baseDelayMs: Math.min(MAX_DELAY_HARD_CAP_MS, Math.max(0, Math.trunc(merged.baseDelayMs))),
+    maxDelayMs: Math.min(MAX_DELAY_HARD_CAP_MS, Math.max(0, Math.trunc(merged.maxDelayMs)))
+  };
+}
+var DEFINITE_CLIENT_REJECT_CODES = new Set([
+  "BAD_REQUEST",
+  "METHOD_NOT_SUPPORTED",
+  "PARSE_ERROR",
+  "PAYLOAD_TOO_LARGE",
+  "PRECONDITION_FAILED",
+  "UNAUTHORIZED",
+  "UNPROCESSABLE_CONTENT",
+  "UNSUPPORTED_MEDIA_TYPE",
+  "UNAUTHENTICATED",
+  "FORBIDDEN",
+  "VALIDATION_ERROR",
+  "SHAPE_MISMATCH",
+  "RESERVED_NAME",
+  "ILLEGAL_OP_SEQUENCE",
+  "NOT_FOUND",
+  "KIND_MISMATCH",
+  "CONFLICT",
+  "ALREADY_RETRACTED",
+  "ARCHIVED",
+  "RATE_LIMITED",
+  "TOO_MANY_REQUESTS",
+  "UNRESOLVED_TOKEN"
+]);
+var TERMINAL_AMBIGUOUS_CODES = new Set(["COMMIT_OUTCOME_UNKNOWN"]);
+function extractErrorCode(cause) {
+  if (!cause || typeof cause !== "object")
+    return;
+  const direct = cause.code;
+  if (typeof direct === "string")
+    return direct;
+  const data = cause.data;
+  const wh = data?.warmhub?.code;
+  if (typeof wh === "string")
+    return wh;
+  const dc = data?.code;
+  if (typeof dc === "string")
+    return dc;
+  return;
+}
+function extractHttpStatus(cause) {
+  if (!cause || typeof cause !== "object")
+    return;
+  const status = cause.data?.httpStatus;
+  if (typeof status === "number")
+    return status;
+  const warmhubStatus = cause.data?.warmhub?.status;
+  if (typeof warmhubStatus === "number")
+    return warmhubStatus;
+  const direct = cause.status;
+  return typeof direct === "number" ? direct : undefined;
+}
+function isDefiniteClientRejectionStatus(status) {
+  return status !== undefined && status >= 400 && status < 500 && status !== 408;
+}
+function isTerminalAmbiguousError(cause) {
+  const code = extractErrorCode(cause);
+  return code !== undefined && TERMINAL_AMBIGUOUS_CODES.has(code);
+}
+function isDefiniteStreamAppendRejection(cause) {
+  if (isTerminalAmbiguousError(cause))
+    return false;
+  const code = extractErrorCode(cause);
+  return code !== undefined && DEFINITE_CLIENT_REJECT_CODES.has(code) || isDefiniteClientRejectionStatus(extractHttpStatus(cause));
+}
+function isTransientStreamFailure(cause) {
+  if (isTerminalAmbiguousError(cause))
+    return false;
+  if (isDefiniteStreamAppendRejection(cause))
+    return false;
+  if (isFetchNetworkTypeError(cause))
+    return true;
+  if (cause instanceof TypeError)
+    return false;
+  if (cause instanceof SyntaxError)
+    return false;
+  const inner = cause?.cause;
+  if (isFetchNetworkTypeError(inner))
+    return true;
+  if (inner instanceof TypeError)
+    return false;
+  if (inner instanceof SyntaxError)
+    return false;
+  return true;
+}
+function isFetchNetworkTypeError(cause) {
+  return cause instanceof TypeError && /fetch/i.test(cause.message);
+}
+function computeBackoffDelayMs(attempt, policy) {
+  const exponential = policy.baseDelayMs * 2 ** Math.max(0, attempt - 1);
+  const jitter = Math.random() * policy.baseDelayMs;
+  return Math.min(policy.maxDelayMs, exponential + jitter);
+}
+function sleep2(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+
 // ../../packages/sdk-ts/src/stream-submit-submit.ts
 class StreamValidationError extends Error {
   code;
@@ -43371,9 +43429,9 @@ async function submitOperationsViaStream(client, args) {
           createdByEmail = appendResult.createdByEmail ?? createdByEmail;
           repoSeq = appendResult.repoSeq ?? repoSeq;
           aggregate.addChunk({
-            results: appendResult.results,
+            result: appendResult,
             chunkStart: chunk.start,
-            submittedNames: chunk.operations
+            submittedOperations: chunk.operations
           });
           acknowledgedOperationCount += chunk.operations.length;
           const acknowledgedRepoSeq = receiptRepoSeq(appendResult.receipt);
@@ -43489,7 +43547,7 @@ function normalizeChunkSize(chunkSize) {
 // ../../packages/sdk-ts/package.json
 var package_default = {
   name: "@warmhub/sdk-ts",
-  version: "0.90.0",
+  version: "0.92.0",
   private: false,
   type: "module",
   description: "The TypeScript SDK for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",
@@ -43698,6 +43756,7 @@ function normalizeClientFlags(flags) {
 }
 var DEFAULT_API_URL = "https://api.warmhub.ai";
 var UNBATCHED_TRPC_PATHS = new Set([
+  "commit.validate",
   "repo.shapeInstanceCounts",
   "thing.getMany",
   "thing.headVersions"
@@ -44062,8 +44121,9 @@ class WarmHubClient {
   }
   createCompatibilityLink() {
     return () => ({ op, next }) => {
-      if (op.type !== "mutation")
+      if (op.type !== "mutation" || op.path === "commit.validate") {
         return next(op);
+      }
       return observable((observer) => {
         let cancelled = false;
         let downstream;
@@ -44333,6 +44393,21 @@ class WarmHubClient {
     }
   };
   commit = {
+    validate: async (orgName, repoName, operations, opts) => {
+      try {
+        return await this.trpc.commit.validate.mutate({
+          orgName,
+          repoName,
+          committer: opts?.committer,
+          message: opts?.message,
+          componentRef: opts?.componentRef,
+          operations: normalizeCommitValidationOperations(operations, opts?.skipExisting),
+          includeWouldBeBody: opts?.includeWouldBeBody
+        }, { signal: opts?.signal });
+      } catch (error51) {
+        throw toWarmHubError(error51);
+      }
+    },
     apply: async (orgName, repoName, message, operations, opts) => {
       try {
         return await submitOperationsViaStream(this, {
@@ -45676,6 +45751,7 @@ class WarmHubClient {
           query,
           shape: opts?.shape,
           about: opts?.about,
+          affirmedAbout: opts?.affirmedAbout,
           kind: narrowKind(opts?.kind),
           match: opts?.match,
           includeRetracted: opts?.includeRetracted,
@@ -46333,7 +46409,8 @@ var TOP_LEVEL_USER_INPUT_CODES = new Set([
   "ILLEGAL_OP_SEQUENCE",
   "CURSOR_EPOCH_INVALID",
   "BUILTIN_SHAPE",
-  "KIND_MISMATCH"
+  "KIND_MISMATCH",
+  "DEPENDENCY_FAILED"
 ]);
 var CONFLICT_SHAPED_CODES = new Set([
   "CONFLICT",
@@ -46754,6 +46831,22 @@ function toCliError(err) {
   const message = err instanceof Error ? err.message : String(err);
   return new CliError(1 /* Runtime */, "UNKNOWN", message, err);
 }
+function containedDiagnosticError(diagnostics) {
+  let best;
+  let bestPriority = -1;
+  for (const diagnostic of diagnostics) {
+    const candidate = cliErrorFromOpFailure({
+      status: "error",
+      errors: [diagnostic]
+    });
+    const priority = candidate.code === 5 /* Auth */ ? 3 : candidate.code === 2 /* UserInput */ ? 2 : 1;
+    if (priority > bestPriority) {
+      best = candidate;
+      bestPriority = priority;
+    }
+  }
+  return best;
+}
 function isFailedOpStatus(status) {
   return status === "failed" || status === "error" || status === "rejected";
 }
@@ -46767,12 +46860,14 @@ var OP_USER_INPUT_CODES = new Set([
   "ILLEGAL_OP_SEQUENCE",
   "CURSOR_EPOCH_INVALID",
   "KIND_MISMATCH",
-  "BUILTIN_SHAPE"
+  "BUILTIN_SHAPE",
+  "DEPENDENCY_FAILED"
 ]);
 function cliErrorFromOpFailure(failure) {
-  const code = failure.error?.code ?? "BACKEND";
-  const message = failure.error?.message ?? `Operation on "${failure.name}" failed`;
-  const errorCode = failure.error?.code;
+  const diagnostic = failure.errors?.[0] ?? failure.error;
+  const code = diagnostic?.code ?? "BACKEND";
+  const message = diagnostic?.message ?? `Operation on "${failure.name}" failed`;
+  const errorCode = diagnostic?.code;
   const make = (exit, kind, hint) => new CliError(exit, kind, message, undefined, hint, undefined, errorCode);
   const authError = authCliError({
     code,
@@ -48966,7 +49061,7 @@ var FLAG_CATALOG = [
     spec: {
       long: "dry-run",
       type: "boolean",
-      description: "Resolve dispatch and emit JSON envelope; do not call backend"
+      description: "Emit a dispatch plan; commit submit instead runs server validation"
     }
   },
   {
@@ -49197,7 +49292,8 @@ class DomainRegistry {
         args: def.args,
         flags: this.flagsToSpecs(def.flags ?? {}),
         examples: def.examples,
-        notes: def.notes
+        notes: def.notes,
+        dryRunBehavior: def.dryRunBehavior ?? "dispatch"
       };
       if (def.globalFlagOverrides) {
         Object.defineProperty(spec, "globalFlagOverrides", {
@@ -49218,7 +49314,8 @@ class DomainRegistry {
         examples: v.examples,
         notes: v.notes,
         verbAliases: v.verbAliases,
-        passthroughFlags: v.passthroughFlags
+        passthroughFlags: v.passthroughFlags,
+        dryRunBehavior: v.dryRunBehavior ?? "dispatch"
       };
       if (v.rejectedFlags) {
         Object.defineProperty(verbSpec, "rejectedFlags", {
@@ -50241,6 +50338,18 @@ function emitPartialPageHint(ctx, count, _nextCursor, _limit) {
   ctx.status(`${c.yellow}${count} shown; more available${c.reset}. Use ${c.cyan}--all${c.reset} to fetch every page.`);
 }
 
+// ../../packages/warmhub-cli/src/domains/commit-output-contract-id.ts
+var COMMIT_SUBMIT_OUTPUT_SCHEMA_ID = "wh.commit.submit.result/v0.2";
+function identifyCommitSubmitOutput(value) {
+  if ("schema" in value) {
+    if (value.schema === COMMIT_SUBMIT_OUTPUT_SCHEMA_ID) {
+      return value;
+    }
+    throw new Error("Commit submit output already defines a schema field");
+  }
+  return { schema: COMMIT_SUBMIT_OUTPUT_SCHEMA_ID, ...value };
+}
+
 // ../../packages/warmhub-cli/src/domains/assertion/shared.ts
 var COLLECTION_TAGS = ["arc", "bond", "pair", "set", "list"];
 function parseAbout(raw) {
@@ -50414,7 +50523,7 @@ var handleRevise = async (ctx, { flags, args }) => {
   if (data === undefined) {
     usageError("--data is required for revise", `wh assertion revise Belief/cave-safe --data '{"confidence":0.9}'`);
   }
-  const commitResult = await ctx.client.commit.apply(org, repo, flags.message ?? `revise ${name}`, [
+  const commitResult = identifyCommitSubmitOutput(await ctx.client.commit.apply(org, repo, flags.message ?? `revise ${name}`, [
     {
       operation: "revise",
       kind: "assertion",
@@ -50422,7 +50531,7 @@ var handleRevise = async (ctx, { flags, args }) => {
       data,
       ...flags.affirm && flags.affirm.length > 0 ? { affirmedTargets: flags.affirm } : {}
     }
-  ], { committer: flags.committer });
+  ], { committer: flags.committer }));
   const result = requireSingleOpSuccess(commitResult);
   writeOutput(ctx, commitResult, () => renderSingleOpSuccess(ctx.out, c, ctx.chars, result, {
     marker: "~",
@@ -50437,7 +50546,7 @@ var handleRetract = async (ctx, { flags, args }) => {
   }
   const { org, repo } = parseOrgRepo(getRepoRef(ctx), ctx.config);
   const expectedVersion = parsePositiveIntFlag(flags["expected-version"], "--expected-version", "wh assertion retract Belief/cave-safe --expected-version 3");
-  const commitResult = await ctx.client.commit.apply(org, repo, flags.message ?? `retract ${name}`, [
+  const commitResult = identifyCommitSubmitOutput(await ctx.client.commit.apply(org, repo, flags.message ?? `retract ${name}`, [
     {
       operation: "retract",
       kind: "assertion",
@@ -50447,7 +50556,7 @@ var handleRetract = async (ctx, { flags, args }) => {
     }
   ], {
     committer: flags.committer
-  });
+  }));
   const result = requireSingleOpSuccess(commitResult);
   writeOutput(ctx, commitResult, () => {
     renderCommitterEcho(ctx.out, ctx.colors, flags.committer);
@@ -50466,7 +50575,7 @@ var handleReaffirm = async (ctx, { flags, args }) => {
     usageError("Reaffirm requires at least one --add or --remove target", "wh assertion reaffirm Belief/cave-safe --add Location/cave@v3 --expected-version 2");
   }
   const { org, repo } = parseOrgRepo(getRepoRef(ctx), ctx.config);
-  const commitResult = await ctx.client.commit.apply(org, repo, flags.message ?? `reaffirm ${name}`, [
+  const commitResult = identifyCommitSubmitOutput(await ctx.client.commit.apply(org, repo, flags.message ?? `reaffirm ${name}`, [
     {
       operation: "reaffirm",
       kind: "assertion",
@@ -50475,7 +50584,7 @@ var handleReaffirm = async (ctx, { flags, args }) => {
       ...add.length > 0 ? { add } : {},
       ...remove.length > 0 ? { remove } : {}
     }
-  ], { committer: flags.committer });
+  ], { committer: flags.committer }));
   const result = requireSingleOpSuccess(commitResult);
   writeOutput(ctx, commitResult, () => {
     const c = ctx.colors;
@@ -50520,7 +50629,7 @@ var handleCreate = async (ctx, { flags, args }) => {
       ...affirmedTargets.length > 0 ? { affirmedTargets } : {}
     }
   ];
-  const commitResult = await ctx.client.commit.apply(org, repo, message ?? `assert ${shape}`, operations, { committer });
+  const commitResult = identifyCommitSubmitOutput(await ctx.client.commit.apply(org, repo, message ?? `assert ${shape}`, operations, { committer }));
   const result = requireSingleOpSuccess(commitResult);
   writeOutput(ctx, commitResult, () => renderSingleOpSuccess(ctx.out, c, ctx.chars, result, {
     marker: "+",
@@ -50823,14 +50932,14 @@ var handleCreate2 = async (ctx, { flags, args }) => {
   });
   const name = shape ? `${shape}/${rawName}` : rawName;
   const c = ctx.colors;
-  const commitResult = await ctx.client.commit.apply(org, repo, message ?? `create ${name}`, [
+  const commitResult = identifyCommitSubmitOutput(await ctx.client.commit.apply(org, repo, message ?? `create ${name}`, [
     {
       operation: "add",
       kind: "thing",
       name,
       data
     }
-  ], { committer });
+  ], { committer }));
   const result = requireSingleOpSuccess(commitResult);
   writeOutput(ctx, commitResult, () => renderSingleOpSuccess(ctx.out, c, ctx.chars, result, {
     marker: "+",
@@ -51805,9 +51914,6 @@ var handleQuery = async (ctx, { flags }) => {
   if (ctx.liveMode && sinceRepoSeq !== undefined) {
     usageError("--since-repo-seq cannot be used with --live.", "wh thing query --since-repo-seq 42 --all --format json");
   }
-  if (affirmedAbout && match) {
-    usageError("--affirmed-about is PG-served per exact pinned version; it cannot be combined with --match.", "wh thing query --affirmed-about Location/cave@v3");
-  }
   if (count) {
     if (cursor || all || limit || ctx.liveMode || role) {
       usageError("Usage: wh thing query --count [--shape SHAPE] [--about WREF] [--kind KIND] [--match PATTERN] [--since-repo-seq N]", "wh thing query --kind assertion --about Player/alice --count --since-repo-seq 42");
@@ -52148,7 +52254,7 @@ var handleThingRetract = async (ctx, { flags, args }) => {
   const expectedVersion = parsePositiveIntFlag(flags["expected-version"], "--expected-version", "wh thing retract Player/alice --expected-version 3");
   const leaseId = requireLeaseIdFlag(flags["lease-id"], "wh thing retract Player/alice --lease-id <id>");
   const c = ctx.colors;
-  const commitResult = await ctx.client.commit.apply(org, repo, message ?? `retract ${name}`, [
+  const commitResult = identifyCommitSubmitOutput(await ctx.client.commit.apply(org, repo, message ?? `retract ${name}`, [
     {
       operation: "retract",
       name,
@@ -52157,7 +52263,7 @@ var handleThingRetract = async (ctx, { flags, args }) => {
       ...expectedVersion !== undefined ? { expectedVersion } : {},
       ...leaseId ? { leaseId } : {}
     }
-  ], { committer });
+  ], { committer }));
   const result = requireSingleOpSuccess(commitResult);
   writeOutput(ctx, commitResult, () => {
     renderCommitterEcho(ctx.out, c, committer);
@@ -52194,7 +52300,7 @@ var handleRevise2 = async (ctx, { flags, args }) => {
   if (data === undefined) {
     usageError("--data is required for revise", `wh thing revise Location/player --data '{"x":1}'`);
   }
-  const commitResult = await ctx.client.commit.apply(org, repo, message ?? `revise ${name}`, [
+  const commitResult = identifyCommitSubmitOutput(await ctx.client.commit.apply(org, repo, message ?? `revise ${name}`, [
     {
       operation: "revise",
       kind: "thing",
@@ -52203,7 +52309,7 @@ var handleRevise2 = async (ctx, { flags, args }) => {
       ...expectedVersion !== undefined ? { expectedVersion } : {},
       ...leaseId ? { leaseId } : {}
     }
-  ], { committer });
+  ], { committer }));
   const result = requireSingleOpSuccess(commitResult);
   writeOutput(ctx, commitResult, () => renderSingleOpSuccess(ctx.out, c, ctx.chars, result, {
     marker: "~",
@@ -52217,6 +52323,9 @@ var searchFlags = {
   shape: flag.string({ description: "Filter by shape" }),
   kind: flag.string({ description: "Filter by kind" }),
   about: flag.string({ description: "Filter by about wref" }),
+  "affirmed-about": flag.string({
+    description: "Only assertions whose current version affirms exactly this pinned target (Shape/name@vN)"
+  }),
   mode: flag.string({
     description: "Search mode: text (default), vector, or hybrid"
   }),
@@ -52281,6 +52390,7 @@ var handleSearch = async (ctx, { flags, args }) => {
     shape: flags.shape,
     kind,
     about: flags.about,
+    affirmedAbout: flags["affirmed-about"],
     includeRetracted: flags["include-retracted"],
     resolveCollections,
     limit: pageLimit,
@@ -52292,6 +52402,7 @@ var handleSearch = async (ctx, { flags, args }) => {
     shape: flags.shape,
     kind,
     about: flags.about,
+    affirmedAbout: flags["affirmed-about"],
     includeRetracted: flags["include-retracted"],
     resolveCollections,
     limit: boundedTextLimit,
@@ -52321,6 +52432,7 @@ async function fetchAllSearchPages(ctx, org, repo, queryText, opts) {
       shape: opts.shape,
       kind: opts.kind,
       about: opts.about,
+      affirmedAbout: opts.affirmedAbout,
       includeRetracted: opts.includeRetracted,
       resolveCollections: opts.resolveCollections,
       limit: opts.limit,
@@ -54200,7 +54312,7 @@ function renderMutation(ctx, result) {
   if (!("version" in operation) || typeof operation.version !== "number") {
     throw new Error("Collection mutation returned no version-bearing operation");
   }
-  const isNoop = operation.operation === "noop";
+  const isNoop = operation.status === "noop" || operation.operation === "noop";
   renderSingleOpSuccess(ctx.out, ctx.colors, ctx.chars, operation, {
     marker: isNoop ? "=" : "+",
     color: isNoop ? ctx.colors.dim : ctx.colors.green,
@@ -54874,7 +54986,7 @@ function renderOperationEventReceipt(ctx, receipt) {
   writeOutput(ctx, receipt, () => renderPrettyReceipt(ctx, receipt));
 }
 function renderSubmittedStreamResult(ctx, result, options) {
-  writeOutput(ctx, result, () => renderPrettyReceipts(ctx, result.receipts, options));
+  writeOutput(ctx, identifyCommitSubmitOutput(result), () => renderPrettyReceipts(ctx, result.receipts, options));
 }
 function renderPartialStreamSubmission(ctx, error51, options) {
   const noop3 = error51.completedOperations.filter((operation) => operation.status === "noop").length;
@@ -54894,7 +55006,7 @@ function renderPartialStreamSubmission(ctx, error51, options) {
     eventRequestId: error51.eventRequestId,
     chunkOrdinal: error51.chunkOrdinal
   };
-  writeOutput(ctx, payload, () => renderPrettyReceipts(ctx, error51.completedReceipts, options));
+  writeOutput(ctx, identifyCommitSubmitOutput(payload), () => renderPrettyReceipts(ctx, error51.completedReceipts, options));
 }
 function renderPrettyReceipts(ctx, receipts, options) {
   for (const [index, receipt] of receipts.entries()) {
@@ -54916,26 +55028,40 @@ function renderPrettyReceipt(ctx, receipt, committer) {
     const record2 = operation;
     const operationKind = String(record2.operation ?? "operation");
     const failed = isFailedOpStatus(record2.status);
-    const marker = failed ? "!" : operationKind === "add" ? "+" : operationKind === "revise" ? "~" : operationKind === "reaffirm" ? "±" : "-";
-    const error51 = typeof record2.error === "object" && record2.error !== null ? record2.error : undefined;
+    const marker = failed ? "!" : record2.status === "noop" ? "-" : operationKind === "add" ? "+" : operationKind === "revise" ? "~" : operationKind === "reaffirm" ? "±" : "-";
+    const errors3 = Array.isArray(record2.errors) ? record2.errors : undefined;
+    const error51 = errors3?.[0] ?? (typeof record2.error === "object" && record2.error !== null ? record2.error : undefined);
     const errorSummary = failed ? ` ${error51?.message ?? error51?.code ?? "failed"}` : "";
     ctx.out(`  ${marker} ${displayName(c, String(record2.name ?? record2.resolvedName ?? "(unnamed)"))}${errorSummary}`);
     renderWarningLine(ctx.out, c, ctx.chars, operation);
   }
 }
 function allReceiptOperationsFailed(receipts) {
-  const operations = receipts.flatMap((receipt) => receipt.operations);
-  return operations.length > 0 && operations.every((operation) => isFailedOpStatus(operation.status));
+  let operationCount = 0;
+  for (const receipt of receipts) {
+    for (const operation of receipt.operations) {
+      operationCount++;
+      if (!isFailedOpStatus(operation.status)) {
+        return false;
+      }
+    }
+  }
+  return operationCount > 0;
 }
 function allFailedReceiptError(receipts) {
-  return cliErrorFromAllFailed(receipts.flatMap((receipt) => receipt.operations.map((operation) => {
-    const record2 = operation;
-    return {
-      name: typeof record2.name === "string" ? record2.name : undefined,
-      status: typeof record2.status === "string" ? record2.status : undefined,
-      error: typeof record2.error === "object" && record2.error !== null ? record2.error : undefined
-    };
-  })));
+  const failures = [];
+  for (const receipt of receipts) {
+    for (const operation of receipt.operations) {
+      const record2 = operation;
+      failures.push({
+        name: typeof record2.name === "string" ? record2.name : undefined,
+        status: typeof record2.status === "string" ? record2.status : undefined,
+        error: typeof record2.error === "object" && record2.error !== null ? record2.error : undefined,
+        errors: Array.isArray(record2.errors) ? record2.errors : undefined
+      });
+    }
+  }
+  return cliErrorFromAllFailed(failures);
 }
 var handleReceiptLookup = async (ctx, { args }) => {
   const eventRequestId = args[0];
@@ -54976,6 +55102,9 @@ var createFlags3 = {
   "return-repo-seq": flag.boolean({
     description: "return the sequence allocated to this caller's own successful write; omitted for noops and all-failed writes"
   }),
+  "include-would-be-body": flag.boolean({
+    description: "Include projected resulting bodies in dry-run output when disclosure rules permit."
+  }),
   "chunk-size": flag.number({
     description: `Streamed ops per append chunk for --stream or .jsonl --file (default: ${DEFAULT_STREAM_APPEND_CHUNK_SIZE}, max: ${MAX_STREAM_APPEND_OPERATION_COUNT})`
   }),
@@ -55043,65 +55172,6 @@ var createFlags3 = {
   })
 };
 
-// ../../packages/warmhub-cli/src/domains/commit-submit-handler.ts
-import { readFile as readFile2 } from "node:fs/promises";
-
-// ../../packages/warmhub-cli/src/commit-payload-validate.ts
-var NUL = String.fromCharCode(0);
-function findInvalidControlByte(data, rootLabel = "data") {
-  const segs = [];
-  const pos = visit(data, segs);
-  return pos === -1 ? null : { path: buildPath(rootLabel, segs), position: pos };
-}
-function visit(value, segs) {
-  if (typeof value === "string")
-    return value.indexOf(NUL);
-  if (value === null || typeof value !== "object")
-    return -1;
-  if (Array.isArray(value)) {
-    for (let i = 0;i < value.length; i++) {
-      segs.push(i);
-      const p = visit(value[i], segs);
-      if (p !== -1)
-        return p;
-      segs.pop();
-    }
-    return -1;
-  }
-  const keys = Object.keys(value);
-  for (let i = 0;i < keys.length; i++) {
-    const k = keys[i];
-    segs.push(k);
-    const ki = k.indexOf(NUL);
-    if (ki !== -1)
-      return ki;
-    const p = visit(value[k], segs);
-    if (p !== -1)
-      return p;
-    segs.pop();
-  }
-  return -1;
-}
-function buildPath(root, segs) {
-  let out = root;
-  for (const s of segs)
-    out += typeof s === "number" ? `[${s}]` : `.${s}`;
-  return out;
-}
-function formatInvalidControlByteMessage(hit, locator) {
-  return {
-    message: `${locator}: ${hit.path} contains literal U+0000 byte at position ${hit.position}, ` + "which PostgreSQL `text` cannot store (SQLSTATE 22P05).",
-    hint: "Strip NUL bytes before submit, e.g. `.replace(/\\u0000/g, '')`, or pass --allow-nul-bytes to send anyway."
-  };
-}
-function assertNoNulBytes(data, locator) {
-  const hit = findInvalidControlByte(data);
-  if (!hit)
-    return;
-  const { message, hint } = formatInvalidControlByteMessage(hit, locator);
-  throw new CliError(2 /* UserInput */, "USER_INPUT", message, undefined, hint);
-}
-
 // ../../packages/warmhub-cli/src/domains/commit-submit-template.ts
 import { writeFile } from "node:fs/promises";
 var WRITE_TEMPLATE_KINDS = ["thing", "assertion"];
@@ -55353,7 +55423,7 @@ function buildRetractOperations(input) {
 }
 function rejectLegacyLifecycleOperations(operations) {
   const legacy = operations.find((op) => {
-    const operation = op.operation;
+    const operation = op?.operation;
     return operation === "remove" || operation === "deactivate";
   });
   if (!legacy)
@@ -55441,12 +55511,91 @@ function requireCommitSourceValue(source, value) {
     return value;
   throw new Error(`Missing value for selected commit operation source ${source}`);
 }
+function assertSubmitDeliveryFlags(args) {
+  if (args.dryRun)
+    return;
+  const streamed = args.streamInput || args.jsonlFile;
+  if (args.chunkSize !== undefined && !streamed) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", "--chunk-size requires --stream or a .jsonl --file.");
+  }
+  if (args.progressRequested && !streamed) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", "--progress requires --stream or a .jsonl --file.");
+  }
+  if (args.streamId !== undefined && !streamed) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", "--stream-id requires --stream or a .jsonl --file.");
+  }
+  if (args.timingOut !== undefined && !args.jsonlFile) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", "--timing-out requires a .jsonl --file.", undefined, "wh commit submit --file ops.jsonl --timing-out timing.json --stream-id import-1 --skip-existing -m 'Import operations' --repo acme/world");
+  }
+  if (streamed && args.streamId === undefined) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", "JSONL streaming requires --stream-id.", undefined, 'Example: wh commit submit --file ops.jsonl --stream-id bulk-2026-06-04 --skip-existing -m "Bulk import" --repo acme/world');
+  }
+  if (streamed && !args.skipExisting) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", "JSONL streaming requires --skip-existing.", undefined, 'Example: wh commit submit --file ops.jsonl --stream-id bulk-2026-06-04 --skip-existing -m "Bulk import" --repo acme/world');
+  }
+}
 
 // ../../packages/warmhub-cli/src/domains/commit-submit-stream.ts
 import { createReadStream as createReadStream2 } from "node:fs";
 import { writeFile as writeFile2 } from "node:fs/promises";
 import { createInterface as createInterface2 } from "node:readline";
 
+// ../../packages/warmhub-cli/src/commit-payload-validate.ts
+var NUL = String.fromCharCode(0);
+function findInvalidControlByte(data, rootLabel = "data") {
+  const segs = [];
+  const pos = visit(data, segs);
+  return pos === -1 ? null : { path: buildPath(rootLabel, segs), position: pos };
+}
+function visit(value, segs) {
+  if (typeof value === "string")
+    return value.indexOf(NUL);
+  if (value === null || typeof value !== "object")
+    return -1;
+  if (Array.isArray(value)) {
+    for (let i = 0;i < value.length; i++) {
+      segs.push(i);
+      const p = visit(value[i], segs);
+      if (p !== -1)
+        return p;
+      segs.pop();
+    }
+    return -1;
+  }
+  const keys = Object.keys(value);
+  for (let i = 0;i < keys.length; i++) {
+    const k = keys[i];
+    segs.push(k);
+    const ki = k.indexOf(NUL);
+    if (ki !== -1)
+      return ki;
+    const p = visit(value[k], segs);
+    if (p !== -1)
+      return p;
+    segs.pop();
+  }
+  return -1;
+}
+function buildPath(root, segs) {
+  let out = root;
+  for (const s of segs)
+    out += typeof s === "number" ? `[${s}]` : `.${s}`;
+  return out;
+}
+function formatInvalidControlByteMessage(hit, locator) {
+  return {
+    message: `${locator}: ${hit.path} contains literal U+0000 byte at position ${hit.position}, ` + "which PostgreSQL `text` cannot store (SQLSTATE 22P05).",
+    hint: "Strip NUL bytes before submit, e.g. `.replace(/\\u0000/g, '')`, or pass --allow-nul-bytes to send anyway."
+  };
+}
+function assertNoNulBytes(data, locator) {
+  const hit = findInvalidControlByte(data);
+  if (!hit)
+    return;
+  const { message, hint } = formatInvalidControlByteMessage(hit, locator);
+  throw new CliError(2 /* UserInput */, "USER_INPUT", message, undefined, hint);
+}
+
 // ../../packages/warmhub-cli/src/domains/commit-submit-utils.ts
 var DEFAULT_JSONL_STREAM_CHUNK_SIZE = Math.max(1, Math.min(MAX_STREAM_APPEND_OPERATION_COUNT, Number(process.env.WH_STREAM_CHUNK_SIZE) || DEFAULT_STREAM_APPEND_CHUNK_SIZE));
 function resolveJsonlStreamChunkSize(chunkSize) {
@@ -55697,9 +55846,9 @@ async function applyJsonlCommit(ctx, args) {
         createdByEmail = appendResult.createdByEmail ?? createdByEmail;
         repoSeq = appendResult.repoSeq ?? repoSeq;
         aggregate.addChunk({
-          results: appendResult.results,
+          result: appendResult,
           chunkStart,
-          submittedNames: operationsChunk
+          submittedOperations: operationsChunk
         });
       } catch (cause) {
         const pendingOutcome = isDefiniteStreamAppendRejection(cause) ? "absent" : "unknown";
@@ -55878,6 +56027,219 @@ function isErrnoException(error51) {
   return typeof code === "string" && /^E[A-Z0-9]+$/.test(code) && typeof syscall === "string";
 }
 
+// ../../packages/warmhub-cli/src/domains/commit-validation-execute.ts
+import { writeFile as writeFile3 } from "node:fs/promises";
+
+// ../../packages/warmhub-cli/src/domains/commit-validation-input.ts
+import { createReadStream as createReadStream3 } from "node:fs";
+import { readFile as readFile2 } from "node:fs/promises";
+import { createInterface as createInterface3 } from "node:readline";
+async function readValidationJsonlFile(path2, allowNulBytes) {
+  try {
+    return await readValidationJsonl(createReadStream3(path2, { encoding: "utf-8" }), "--file", allowNulBytes, `Operations file '${path2}' did not contain any JSONL operations`);
+  } catch (error51) {
+    if (isErrnoException(error51)) {
+      throw new CliError(2 /* UserInput */, "USER_INPUT", `Cannot read file '${path2}': ${error51.message}`, undefined, "Check that the file path is correct and the file exists.");
+    }
+    throw error51;
+  }
+}
+async function readValidationJsonlStdin(ctx, allowNulBytes) {
+  const input = ctx.stdin ?? process.stdin;
+  if (isTTY(input)) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", "No JSONL operations provided on stdin.", undefined, "Pipe JSONL operations via stdin: producer | wh commit submit --stream --dry-run --repo acme/world");
+  }
+  return readValidationJsonl(input, "--stream", allowNulBytes, "No JSONL operations provided on stdin.");
+}
+async function readValidationJsonl(input, label, allowNulBytes, emptyMessage) {
+  const operations = [];
+  const lines = createInterface3({ input, crlfDelay: Infinity });
+  let lineNumber = 0;
+  try {
+    for await (const rawLine of lines) {
+      lineNumber += 1;
+      const trimmed = rawLine.trim();
+      if (!trimmed)
+        continue;
+      assertValidationOperationCount(operations.length + 1);
+      const operation = safeParseJson(trimmed, `${label} JSONL line ${lineNumber}`);
+      assertStructurallyValidOperation(operation, `${label} JSONL line ${lineNumber}`);
+      rejectLegacyLifecycleOperations([operation]);
+      assertValidationOperationData(operation, `${label} JSONL line ${lineNumber}`, allowNulBytes);
+      operations.push(operation);
+    }
+  } finally {
+    lines.close();
+  }
+  if (operations.length === 0) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", emptyMessage);
+  }
+  return operations;
+}
+async function readValidationJsonArrayFile(path2) {
+  try {
+    return await readFile2(path2, "utf-8");
+  } catch (error51) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", `Cannot read file '${path2}': ${error51 instanceof Error ? error51.message : String(error51)}`, undefined, "Check that the file path is correct and the file exists.");
+  }
+}
+function assertValidationOperationData(operation, source, allowNulBytes) {
+  if (allowNulBytes)
+    return;
+  assertNoNulBytes("data" in operation ? operation.data : undefined, source);
+}
+function assertPreparedCommitOperations(args) {
+  if (args.streamInput && !args.dryRun || args.operations.length === 0)
+    return;
+  rejectLegacyLifecycleOperations(args.operations);
+  const source = args.operationSource === "--file" ? args.opsFile : args.operationSource;
+  if (args.dryRun) {
+    for (const [index, operation] of args.operations.entries()) {
+      assertStructurallyValidOperation(operation, `${source} op ${index}`);
+    }
+  }
+  if (args.dryRun)
+    assertValidationOperationCount(args.operations.length);
+  else
+    assertWithinStreamOpLimit(args.operations.length);
+  if (args.allowNulBytes)
+    return;
+  for (const [index, operation] of args.operations.entries()) {
+    const namePart = operation.name ? ` (${operation.name})` : "";
+    assertValidationOperationData(operation, `${source} op ${index}${namePart}`, false);
+  }
+}
+function assertStructurallyValidOperation(operation, source) {
+  try {
+    createCommitValidateInput("_", "_", [operation]);
+  } catch (error51) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", `${source}: ${error51 instanceof Error ? error51.message : String(error51)}`);
+  }
+}
+function assertValidationOperationCount(operationCount) {
+  if (operationCount <= MAX_COMMIT_VALIDATION_OPERATIONS)
+    return;
+  throw new CliError(2 /* UserInput */, "USER_INPUT", `Commit validation accepts at most ${MAX_COMMIT_VALIDATION_OPERATIONS} operations (${operationCount} requested).`, undefined, "Split the preview into smaller current-commit units.");
+}
+function createBoundedCommitValidateInput(org, repo, operations, options) {
+  assertValidationOperationCount(operations.length);
+  const input = createCommitValidateInput(org, repo, operations, options);
+  const encodedBytes = commitValidateRequestBodyBytes(input);
+  if (encodedBytes > MAX_COMMIT_VALIDATION_ENCODED_BYTES) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", `Commit validation request exceeds the ${MAX_COMMIT_VALIDATION_ENCODED_BYTES}-byte encoded limit (${encodedBytes} bytes).`, undefined, "Split the preview into smaller current-commit units.");
+  }
+  return input;
+}
+
+// ../../packages/warmhub-cli/src/domains/commit-validation-render.ts
+function renderCommitValidation(ctx, result) {
+  if (ctx.format === "json") {
+    ctx.out(JSON.stringify(result));
+  } else if (ctx.format === "jsonl") {
+    for (const operation of result.operations) {
+      ctx.out(JSON.stringify({ type: "operation", ...operation }));
+    }
+    const { operations: _operations, ...summary } = result;
+    ctx.out(JSON.stringify({ type: "summary", ...summary }));
+  } else {
+    renderPrettyValidation(ctx, result);
+  }
+  const error51 = containedDiagnosticError(validationDiagnostics(result));
+  if (error51)
+    ctx.requestedExitCode = error51.code;
+}
+function renderPrettyValidation(ctx, result) {
+  const c = ctx.colors;
+  const baseline = result.baseline.kind === "repo_seq" ? `repo sequence ${result.baseline.repoSeq}` : "withheld";
+  ctx.out(`${c.dim}validation baseline${c.reset} ${baseline}`);
+  for (const caveat of result.caveats) {
+    ctx.out(`  ${ctx.chars.warn} ${c.dim}${caveat.code}${c.reset} ${caveat.message}`);
+  }
+  for (const operation of result.operations) {
+    const marker = markerFor(operation.status, ctx);
+    ctx.out(`${marker} [${operation.opIndex}] ${operation.operation} ${displayName(c, operation.name)} ${operation.status}`);
+    renderDiagnostics(ctx, operation.status === "error" ? operation.errors : undefined);
+    for (const effect of operation.effects ?? []) {
+      renderEffect(ctx, effect);
+    }
+  }
+  ctx.out(`${c.bold}${result.canCommit ? "can commit" : "cannot commit"}${c.reset} — ${result.counts.wouldApply} would apply, ${result.counts.noop} noop, ${result.counts.error} error`);
+}
+function renderEffect(ctx, effect) {
+  ctx.out(`    ${markerFor(effect.status, ctx)} effect ${effect.effectIndex}: ${effect.operation} ${displayName(ctx.colors, effect.name)} ${effect.status}`);
+  renderDiagnostics(ctx, "errors" in effect ? effect.errors : undefined, 6);
+}
+function renderDiagnostics(ctx, diagnostics, indent = 4) {
+  for (const diagnostic of diagnostics ?? []) {
+    ctx.out(`${" ".repeat(indent)}${diagnostic.code}: ${diagnostic.message}`);
+  }
+}
+function markerFor(status, ctx) {
+  if (status === "error" || status === "discarded")
+    return ctx.chars.cross;
+  if (status === "noop")
+    return ctx.chars.warn;
+  return ctx.chars.check;
+}
+function validationDiagnostics(result) {
+  const diagnostics = [];
+  for (const operation of result.operations) {
+    if (operation.status === "error")
+      diagnostics.push(...operation.errors);
+    for (const effect of operation.effects ?? []) {
+      if ("errors" in effect)
+        diagnostics.push(...effect.errors);
+    }
+  }
+  return diagnostics;
+}
+
+// ../../packages/warmhub-cli/src/domains/commit-validation-execute.ts
+async function executeCommitValidation(ctx, args) {
+  const options = {
+    ...args.message !== undefined ? { message: args.message } : {},
+    ...args.committer !== undefined ? { committer: args.committer } : {},
+    ...args.skipExisting ? { skipExisting: true } : {},
+    ...args.includeWouldBeBody ? { includeWouldBeBody: true } : {},
+    ...ctx.signal ? { signal: ctx.signal } : {}
+  };
+  createBoundedCommitValidateInput(args.org, args.repo, args.operations, options);
+  const unusedDeliveryControls = [
+    args.chunkSize !== undefined ? "--chunk-size" : undefined,
+    args.streamId !== undefined ? "--stream-id" : undefined,
+    args.submissionId !== undefined ? "--submission-id" : undefined,
+    args.returnRepoSeq ? "--return-repo-seq" : undefined
+  ].filter((value) => value !== undefined);
+  if (unusedDeliveryControls.length > 0) {
+    ctx.err(`dry-run validates one complete request; delivery controls are unused: ${unusedDeliveryControls.join(", ")}`);
+  }
+  if (args.progressRequested) {
+    ctx.err("validation: waiting for server evaluation");
+  }
+  const startedAt = performance.now();
+  const validation = await ctx.client.commit.validate(args.org, args.repo, args.operations, options);
+  const validationMs = performance.now() - startedAt;
+  if (args.progressRequested)
+    ctx.err("validation: complete");
+  if (args.timingOut) {
+    try {
+      await writeFile3(args.timingOut, JSON.stringify({
+        benchmarkId: process.env.WH_BENCHMARK_ID ?? undefined,
+        org: args.org,
+        repo: args.repo,
+        opCount: args.operations.length,
+        chunkCount: 1,
+        validationMs,
+        totalMs: validationMs,
+        phases: { validationMs }
+      }));
+    } catch (error51) {
+      ctx.err(`  warn: failed to write timing sidecar: ${String(error51)}`);
+    }
+  }
+  renderCommitValidation(ctx, validation);
+}
+
 // ../../packages/warmhub-cli/src/domains/commit-submit-handler.ts
 var handleSubmit = async (ctx, { flags, args }) => {
   const { org, repo } = parseOrgRepo(getRepoRef(ctx) ?? args[0], ctx.config);
@@ -55893,7 +56255,10 @@ var handleSubmit = async (ctx, { flags, args }) => {
   const allowNulBytes = flags["allow-nul-bytes"] === true;
   const timingOut = flags["timing-out"];
   const streamId = flags["stream-id"];
-  const submissionId = flags["submission-id"] ?? createOperationEventSubmissionId();
+  const submissionIdFlag = flags["submission-id"];
+  if (flags["include-would-be-body"] === true && !ctx.dryRun) {
+    throw new CliError(2 /* UserInput */, "USER_INPUT", "--include-would-be-body requires --dry-run.", undefined, "Add --dry-run to preview projected bodies, or remove --include-would-be-body for a real commit.");
+  }
   const addNames = flags.add ?? [];
   const reviseName = flags.revise;
   const retractNames = flags.retract ?? [];
@@ -55954,27 +56319,22 @@ var handleSubmit = async (ctx, { flags, args }) => {
     name: flags.name !== undefined,
     members: flags.members !== undefined
   });
-  if (chunkSize !== undefined && !streamInput && !jsonlFile) {
-    throw new CliError(2 /* UserInput */, "USER_INPUT", "--chunk-size requires --stream or a .jsonl --file.");
-  }
-  if (progressRequested && !streamInput && !jsonlFile) {
-    throw new CliError(2 /* UserInput */, "USER_INPUT", "--progress requires --stream or a .jsonl --file.");
-  }
-  if (streamId !== undefined && !streamInput && !jsonlFile) {
-    throw new CliError(2 /* UserInput */, "USER_INPUT", "--stream-id requires --stream or a .jsonl --file.");
-  }
-  if (timingOut !== undefined && !jsonlFile) {
-    throw new CliError(2 /* UserInput */, "USER_INPUT", "--timing-out requires a .jsonl --file.", undefined, "wh commit submit --file ops.jsonl --timing-out timing.json --stream-id import-1 --skip-existing -m 'Import operations' --repo acme/world");
-  }
-  if ((streamInput || jsonlFile) && streamId === undefined) {
-    throw new CliError(2 /* UserInput */, "USER_INPUT", "JSONL streaming requires --stream-id.", undefined, 'Example: wh commit submit --file ops.jsonl --stream-id bulk-2026-06-04 --skip-existing -m "Bulk import" --repo acme/world');
-  }
-  if ((streamInput || jsonlFile) && !skipExisting) {
-    throw new CliError(2 /* UserInput */, "USER_INPUT", "JSONL streaming requires --skip-existing.", undefined, 'Example: wh commit submit --file ops.jsonl --stream-id bulk-2026-06-04 --skip-existing -m "Bulk import" --repo acme/world');
-  }
+  assertSubmitDeliveryFlags({
+    dryRun: ctx.dryRun === true,
+    streamInput,
+    jsonlFile,
+    chunkSize,
+    progressRequested,
+    streamId,
+    timingOut,
+    skipExisting
+  });
   let operations;
+  if (ctx.dryRun && progressRequested) {
+    ctx.err("validation: acquiring operations");
+  }
   if (operationSource === "--stream") {
-    operations = [];
+    operations = ctx.dryRun ? await readValidationJsonlStdin(ctx, allowNulBytes) : [];
   } else if (operationSource === "--type") {
     const selectedCollectionType = requireCommitSourceValue(operationSource, collectionType);
     if (!flags.name) {
@@ -56010,14 +56370,9 @@ var handleSubmit = async (ctx, { flags, args }) => {
   } else if (operationSource === "--file") {
     const selectedOpsFile = requireCommitSourceValue(operationSource, opsFile);
     if (selectedOpsFile.endsWith(".jsonl")) {
-      operations = [];
+      operations = ctx.dryRun ? await readValidationJsonlFile(selectedOpsFile, allowNulBytes) : [];
     } else {
-      let file2;
-      try {
-        file2 = await readFile2(selectedOpsFile, "utf-8");
-      } catch (e) {
-        throw new CliError(2 /* UserInput */, "USER_INPUT", `Cannot read file '${selectedOpsFile}': ${e instanceof Error ? e.message : String(e)}`, undefined, "Check that the file path is correct and the file exists.");
-      }
+      const file2 = await readValidationJsonArrayFile(selectedOpsFile);
       operations = parseJsonArray(file2, "--file contents");
     }
   } else if (operationSource === "--add") {
@@ -56065,19 +56420,34 @@ var handleSubmit = async (ctx, { flags, args }) => {
   } else {
     operations = [];
   }
-  if (!streamInput && operations.length > 0) {
-    rejectLegacyLifecycleOperations(operations);
-    assertWithinStreamOpLimit(operations.length);
-    if (!allowNulBytes) {
-      const source = operationSource === "--file" ? opsFile : operationSource;
-      for (let i = 0;i < operations.length; i++) {
-        const op = operations[i];
-        const namePart = op.name ? ` (${op.name})` : "";
-        assertNoNulBytes("data" in op ? op.data : undefined, `${source} op ${i}${namePart}`);
-      }
-    }
-  }
+  assertPreparedCommitOperations({
+    operations,
+    operationSource,
+    opsFile,
+    streamInput,
+    dryRun: ctx.dryRun === true,
+    allowNulBytes
+  });
   const message = streamInput || jsonlFile ? messageFlag : messageFlag ?? synthesizeCommitMessage(operations);
+  if (ctx.dryRun) {
+    await executeCommitValidation(ctx, {
+      org,
+      repo,
+      operations,
+      message,
+      committer,
+      skipExisting,
+      includeWouldBeBody: flags["include-would-be-body"] === true,
+      progressRequested,
+      timingOut,
+      chunkSize,
+      streamId,
+      submissionId: submissionIdFlag,
+      returnRepoSeq: returnRepoSeq === true
+    });
+    return;
+  }
+  const submissionId = submissionIdFlag ?? createOperationEventSubmissionId();
   if (streamInput || jsonlFile) {
     ctx.err(`submission ${submissionId}`);
   }
@@ -56116,12 +56486,12 @@ var handleSubmit = async (ctx, { flags, args }) => {
       streamId,
       submissionId,
       allowNulBytes
-    }) : await ctx.client.commit.apply(org, repo, message, operations, {
+    }) : identifyCommitSubmitOutput(await ctx.client.commit.apply(org, repo, message, operations, {
       committer,
       skipExisting,
       submissionId,
       ...returnRepoSeq === true ? { returnRepoSeq: true } : {}
-    });
+    }));
   } catch (error51) {
     if (error51 instanceof AllStreamOperationsFailedError) {
       renderSubmittedStreamResult(ctx, error51.result);
@@ -56162,6 +56532,7 @@ var COMMIT_DOMAIN = defineDomain({
     },
     submit: {
       prime: true,
+      dryRunBehavior: "execute",
       summary: "Submit write operations",
       args: "",
       flags: createFlags3,
@@ -56169,6 +56540,7 @@ var COMMIT_DOMAIN = defineDomain({
         `wh commit submit --add player --shape location --data '{"x":0,"y":0}'`,
         `wh commit submit --add alice --data '{"score":1}' --add bob --data '{"score":2}' --shape Player -m "seed players"`,
         'wh commit submit -f operations.json -m "Batch update"',
+        "wh commit submit -f operations.json --dry-run --format jsonl",
         `wh commit submit --ops '[{"operation":"add","kind":"thing","name":"Session/run-001","data":{}},{"operation":"add","kind":"assertion","name":"HypothesisCandidate/run-001-claim","about":"Session/run-001","data":{}}]' -m "Create session + assertion"`,
         `printf '%s\\n' '{"operation":"add","kind":"thing","name":"Player/alice","data":{"score":1}}' | wh commit submit --stream --stream-id bulk-2026-06-04 --skip-existing --repo acme/world -m "stdin stream"`,
         'wh commit submit --file dataset.jsonl --stream-id bulk-2026-06-04 --skip-existing --progress -m "bulk stream"',
@@ -56178,6 +56550,7 @@ var COMMIT_DOMAIN = defineDomain({
         'wh commit submit --type set --name active-locations --members Location/a,Location/b,Location/c -m "Create location set"'
       ],
       notes: [
+        "`--dry-run` evaluates the complete bounded input with the real server commit evaluator and makes no durable repository change.",
         "Need to build an ops file? Run `wh shape template <Shape>` to scaffold the JSON from a shape definition, edit the FILL_IN placeholders, then pass it to `--file`.",
         "Inspect a shape's fields first with `wh thing view <Shape>` before authoring or editing an ops file."
       ],
@@ -60110,7 +60483,7 @@ var ORG_DOMAIN = defineDomain({
 });
 
 // ../../packages/warmhub-cli/src/domains/prime-content.md
-var prime_content_default = "# WarmHub CLI Context\n> **Context Recovery**: Run `wh prime` after compaction or new session\n\n## Environment\n{{REPO_LINE}}\n\n## Core Concepts\n- **Thing**: A named entity versioned by writes. **Assertion**: A thing that makes a shape-validated claim about another thing.\n- **Shape**: A thing defining data structure; every other thing has one. **Write**: One or more add/revise/retract operations with per-operation results.\n- **wref**: A reference to a thing. Local: `Player` (the shape) or `Player/alice` (a thing with that shape). Cross-repo: `wh:org/repo/Shape` or `wh:org/repo/Shape/name`.\n\n## Versioned Wrefs\n- `Shape` addresses the shape itself; `Shape/name` addresses a thing with that shape. `@vN` pins either.\n- Floating write refs to retracted targets fail; existing pinned versions remain valid.\n- Rename invalidates old spellings, including `@vN`; the new name resolves history.\n- Untyped wrefs accept any thing. `wref<T>` requires the target's shape to be `T`; a shape has no shape, so never satisfies it. `wref?` coalesces only `thing_absent`, never a missing shape.\n\n## Key Workflows\n\n**Write data** (discover shapes → scaffold ops → submit):\n```bash\nwh shape list --repo org/repo                             # list available shapes\nwh shape view ShapeName --repo org/repo                   # inspect fields\nwh shape template ShapeName -o ops.json --repo org/repo   # scaffold write ops (supports --kind assertion)\n# edit ops.json — fill FILL_IN placeholders — then:\nwh commit submit --file ops.json -m \"msg\" --repo org/repo  # submit operations (bare `wh commit` also works)\n# or single assertion (no file needed):\nwh assertion create --shape ShapeName --about Target/name --name my-assertion --data '{\"field\":1}' --repo org/repo\n# Relay failed operation details when present. Never hand-guess ops JSON — use `wh shape template <Shape>`.\n```\n\n**Read data:**\n```bash\nwh thing list --repo org/repo                 # all things at HEAD\nwh thing view Shape/name --repo org/repo      # inspect a thing\nwh thing query --shape MyShape --repo org/repo  # find things by shape\nwh thing about Shape --repo org/repo          # assertions about a shape\nwh assertion list --repo org/repo             # all assertions at HEAD\nwh thing history Shape/name --repo org/repo   # version history\n\n# Batch read — wh thing view is variadic (max 500 wrefs/call):\nwh thing view Player/alice Player/bob               # variadic positionals\nwh thing view --file wrefs.txt --json               # one wref per line\ncat wrefs.txt | wh thing view --format jsonl        # one JSON line per *deduped* requested wref\n```\n\n## Wref Quick Reference\n\nWrites use explicit names and wrefs. Untyped fields, collection members,\nassertion `about`, and committers accept any thing. Create a deterministic\ntarget before referencing it in the same commit.\n\n## Command Reference\n\n**Global flags**: `--repo`, `--format`, `--json`, `--live`\n### thing — Things\n- `wh thing list [--shape] [--kind] [--match] [--include-retracted]` — Current HEAD state\n- `wh thing view [<wref>...] [--file <path>] [--version] [--depth] [--include-retracted] [--data-mode auto|full]` — Thing details. Variadic (max 500). `--version` implies `--include-retracted`. Batch JSON returns `{ requested, items, missing }`; jsonl emits one row per deduped requested wref. Large Set/List bodies summarize by default; use `--data-mode full` for canonical collection JSON.\n- `wh thing history [wref] [--shape] [--about] [--include-retracted]` — Version history\n- `wh thing resolve <wref>` — Resolve a wref to its canonical thing identity\n- `wh thing create <name|Shape/name> (--data|--file) [--shape]` — Create\n- `wh thing revise <name> [--data] [--message] [--committer] [--expected-version]` — Revise (CONFLICT if HEAD≠n)\n- `wh thing retract <wref> -m <message> [--reason] [--kind] [--expected-version]` — Retract\n- `wh thing query [--shape] [--kind] [--about] [--match]` — Query by filters\n- `wh thing search <query> [--shape] [--kind] [--about] [--mode]` — Search text\n- `wh thing rename <Shape/oldName> <newName>` — Rename\n- `wh thing refs <wref> [--inbound] [--outbound] [--field]` — Show field references; use `wh thing about` for assertions about the target thing\n- `wh thing about <wref> [--shape] [--match] [--depth] [--resolve-collections] [--role from|to|ends] [--limit] [--include-retracted]` — Show assertions about the target identity; `--resolve-collections` expands bare/@HEAD/@ALL members, `--role` filters direction; not pinned @vN\n\n- `wh view evaluate VIEW [--limit N] [--cursor TOK] [--all]`\n### commit — Write operations\n- `wh commit submit [--ops|--file|--add|--revise|--retract] [--kind] [--data] [--reason] [--expected-version] [--chunk-size] [--skip-existing] [--progress] [--stream-id]` — Submit operations (bare `wh commit` is equivalent). Use `--file ops.jsonl --stream-id <id> --chunk-size 5000 --skip-existing` for bulk ingest.\n- `wh shape template <shape> [shape2 ...] [--kind] [--operation add|revise|retract] [-o file]` — Generate sample ops\n\n### assertion — Assertion operations\n- `wh assertion list [--about wref] [--shape] [--match] [--include-retracted]` — Browse assertions\n- `wh assertion view <wref> [--version] [--include-retracted]` — Assertion details\n- `wh assertion create --shape <s> --name <n> --about <wref> [--data] [-m] [--committer]` — Create assertion\n- `wh assertion revise <wref> --data <json> [--message] [--committer]` — Revise assertion\n- `wh assertion retract <wref> -m <message> [--reason] [--committer] [--expected-version]` — Retract assertion\n- `wh assertion history <wref> [--include-retracted]` — Assertion history\n\n### shape — Shape management\n- `wh shape list [--match] [--include-retracted]` — List all shapes\n- `wh shape view <name> [--include-retracted]` — Shape details\n- `wh shape revise <name> (--fields|--file)`\n- `wh shape create <name> (--fields|--file)`\n- `wh shape retract <name> -m <message> [--reason] [--expected-version]` — Retract shape\n- `wh shape history <name> [--include-retracted]` — Shape history\n- `wh shape rename <oldName> <newName>` — Rename shape\n\n### repo — Repository management\n- `wh repo create <org/name> [--display-name] [--description] [--visibility]` — Create repo\n- `wh repo list [org]` — List repos\n- `wh repo view [org/repo]` — Repo details\n\n### org — Organization management\n- `wh org create <name> [--display-name]` — Create a new organization\n- `wh org view <name>` — View organization details (alias: info)\n- `wh org list` — List all organizations\n\n### sub — Subscription management\n- `wh sub create <name> [flags]` — Create a subscription\n- `wh sub view <name>` — View subscription details\n- `wh sub list` — List all subscriptions\n- `wh sub log <name>` — Tail subscription delivery feed\n- `wh sub attempts <runId>` — Show attempt history for a run\n- `wh sub pause <name>` — Pause a subscription\n- `wh sub resume <name>` — Resume a paused subscription\n- `wh sub bind <name> [--credentials]` — Bind a credential set to a subscription for webhook auth\n- `wh sub unbind <name>` — Remove credential binding from a subscription\n- `wh sub delete <name>` — Retire; name reserved\n\n### notifications — Action notification listing\n- `wh notifications [--limit] [--since]` — List repo-scoped action notifications\n\n### credential — Credential set management\n- `wh credential create <name> [--repo org/repo | --org org] [--scope] [--description]` — Create an empty credential set\n- `wh credential list [--repo org/repo | --org org]` — List credential sets accessible from a repo or org\n- `wh credential view <name> [--repo org/repo | --org org]` — View a credential set (key names only, no values)\n- `wh credential delete <name> [--repo org/repo | --org org]` — Delete a credential set and its Vault object\n- `wh credential set <setName> [<keyName>] [--repo org/repo | --org org] [--value]` — Set credential key(s). With `<keyName>`: single-key form (reads value from `--value` or stdin). Without `<keyName>`: batch form (reads JSON object from stdin, e.g. `{\"KEY\":\"val\"}`)\n- `wh credential unset <setName> <keyName> [--repo org/repo | --org org]` — Remove a key from a credential set\n- `wh credential audit <setName> [--repo org/repo | --org org]` — View audit log for a credential set\n- `wh credential revoke <setName> [--repo org/repo | --org org] [--reason]` — Revoke a credential set (blocks new binds and stops bound webhook deliveries)\n\n### component — Component management\n- `wh component validate <path>` — Validate package\n- `wh component install <org/name>` — Install a registered component\n- `wh component register <name> --org <org> --manifest <path> [flags]` — Register component identity\n- `wh component unregister <org/name>` — Remove a registered component identity\n- `wh component registry list --org <org>` — List registered components\n- `wh component registry view <org/name>` — View a registered component\n- `wh component registry update <org/name> [flags]` — Update a registered component\n- `wh component list` — List installed components\n- `wh component update <org/name>` — Update installed component\n- `wh component view <org/name>` — Show component details (alias: show)\n- `wh component doctor <org/name>` — Run component health checks\n- `wh component teardown <org/name>` — Pause component subscriptions\n\n### Getting More Info\n- `wh help` — help overview\n- `wh <domain>` — domain verbs\n- `wh <domain> <verb> --help` — verb flags and examples\n- `wh help --format json` — `CliSpecV2` (`schemaVersion: 2`): global/contextual/root tables and command overrides\n\n## Common Workflows\n\n**Explore a repo:**\n```bash\nwh thing list --repo org/repo             # see all things in HEAD\nwh thing view Shape/name --repo org/repo  # inspect a specific thing\nwh thing history Shape/name --repo org/repo # inspect version history\nwh thing about Shape/name                 # assertions about thing/shape\n```\n\n**Create an assertion** (most common write):\n```bash\n# --about takes an untyped target wref: Shape or Shape/name.\nwh assertion create --shape MyShape --about TargetShape/target-name \\\n  --name my-assertion --data '{\"field_a\":1,\"field_b\":\"value\"}' --repo org/repo\n# Output includes per-operation status; relay failures when present.\n```\n\n**Create via write entrypoint** (alternative, supports batches and streams):\n```bash\nwh commit submit --add my-item --shape MyShape --kind assertion \\\n  --about TargetShape/target-name --data '{\"field_a\":1}' --repo org/repo\n```\n\n**Batch write via file** (generate template → edit → submit):\n```bash\nwh shape template Hypothesis Evidence -o ops.json    # add --kind assertion --about TargetShape/name for assertions\n# edit ops.json — fill FILL_IN placeholders\nwh commit submit --file ops.json -m \"batch update\"   # submit all operations (bare `wh commit` is equivalent)\n# --file format: docs.warmhub.ai/cli-reference/commit-operations\n```\n\n**Bulk write (JSONL stream, >1k ops)** — one chunked stream beats per-record commits (~60× faster):\n```bash\nwh shape template MyShape -o ops.jsonl                          # one op per line (.jsonl)\nID=\"bulk-$(date +%s)\"   # caller id for chunk correlation\nwh commit submit --file ops.jsonl --stream-id \"$ID\" --chunk-size 5000 \\\n  --skip-existing --progress -m \"bulk ingest\" --repo org/repo\n# --chunk-size: ops per append chunk (default 1000, max 10000); chunk≈1 is ~60× slower\n# --skip-existing: skips already-written add ops (drops per-row read-before-write)\n# --stream-id identifies the submission but provides no receipt or resume.\n# After an outcome-unknown append, stop writes and reconcile attempted + unsent\n# work from a later verified checkpoint; never blindly replay revise/retract.\n```\n\n**Create collections:**\n```bash\nwh commit submit --type arc --name route --members Location/a,Location/b --repo org/repo\nwh assertion create --shape Supports --name route-support --about Arc/route --data '{\"confidence\":0.8}' --repo org/repo\n```\n\n**Modify data:**\n```bash\nwh thing revise Shape/name --data '{\"x\":5,\"y\":3}' -m \"update\" --repo org/repo\nwh thing retract Shape/old-item -m \"withdrawn\" --reason \"data feed contaminated\" --repo org/repo\n```\n\n**Query and filter:**\n```bash\nwh thing query --shape MyShape                       # by shape\nwh thing query --kind assertion --about Shape/name   # by kind + target\nwh thing history Shape/name --limit 10               # version history\n```\n\n## Built-in Content shape\n\nWarmHub repos expose three well-known content wrefs:\n- `Content/Readme`  — stored markdown for humans\n- `Content/Agents`  — stored markdown guidance for AI agents\n- `Content/LlmsTxt` — synthesized per-request sitemap (read-only)\n\nFetch via `wh repo content get --kind readme|agents|llms-txt`,\n`client.repo.getReadme/getAgents/getLlmsTxt`, MCP `warmhub_repo_content_get`,\nor raw HTTP `GET /{org}/{repo}/readme.md|agents.md|llms.txt`.\nSee `wh repo describe` → `additionalInformation` for the discovery field.\n\n## Query Discipline\n- Plan the repo, shapes, and wrefs you need before the first query.\n- Gather the needed facts from one repo before switching to another.\n- Do the queries first, then write one complete answer.\n\n## Agent Tips\n- **Always run commands for live data** — this context describes the CLI, not repo contents\n- **Before writing, discover wrefs** — run `wh thing list` or `wh shape list`\n- **Shape field types**: `string`, `number`, `boolean`, `wref`, arrays, optionals, nested objects\n- **Write commands return per-operation results** — relay failures and affected wrefs to the user\n- **Pass data inline** with `--data '{...}'` — do NOT create temp files\n- Add `--json` to any command for machine-readable JSON output\n- **Aliases teach canonical commands** — executing aliases emit a status hint; misleading lifecycle aliases reject and point to `retract`\n- Writes go through `wh commit submit` (or bare `wh commit`) or wrappers (`create`, `revise`, `retract`, `assertion create`). `retract` irreversibly withdraws an identity and creates a history entry.\n- Use `wh doctor` to check environment health\n";
+var prime_content_default = "# WarmHub CLI Context\n> **Context Recovery**: Run `wh prime` after compaction or new session\n\n## Environment\n{{REPO_LINE}}\n\n## Core Concepts\n- **Thing**: A named entity versioned by writes. **Assertion**: A thing that makes a shape-validated claim about another thing.\n- **Shape**: A thing defining data structure; every other thing has one. **Write**: One or more add/revise/retract operations with per-operation results.\n- **wref**: A reference to a thing. Local: `Player` (the shape) or `Player/alice` (a thing with that shape). Cross-repo: `wh:org/repo/Shape` or `wh:org/repo/Shape/name`.\n\n## Versioned Wrefs\n- `Shape` addresses the shape itself; `Shape/name` addresses a thing with that shape. `@vN` pins either.\n- Floating write refs to retracted targets fail; existing pinned versions remain valid.\n- Rename invalidates old spellings, including `@vN`; the new name resolves history.\n- Untyped wrefs accept any thing. `wref<T>` requires the target's shape to be `T`; a shape has no shape, so never satisfies it. `wref?` coalesces only `thing_absent`, never a missing shape.\n\n## Key Workflows\n\n**Write data** (discover shapes → scaffold ops → submit):\n```bash\nwh shape list --repo org/repo                             # list available shapes\nwh shape view ShapeName --repo org/repo                   # inspect fields\nwh shape template ShapeName -o ops.json --repo org/repo   # scaffold write ops (supports --kind assertion)\n# edit ops.json — fill FILL_IN placeholders — then:\nwh commit submit --file ops.json --dry-run --repo org/repo  # preview; remove --dry-run to submit\n# or single assertion (no file needed):\nwh assertion create --shape ShapeName --about Target/name --name my-assertion --data '{\"field\":1}' --repo org/repo\n# Relay failed operation details when present. Never hand-guess ops JSON — use `wh shape template <Shape>`.\n```\n\n**Read data:**\n```bash\nwh thing list --repo org/repo                 # all things at HEAD\nwh thing view Shape/name --repo org/repo      # inspect a thing\nwh thing query --shape MyShape --repo org/repo  # find things by shape\nwh thing about Shape --repo org/repo          # assertions about a shape\nwh assertion list --repo org/repo             # all assertions at HEAD\nwh thing history Shape/name --repo org/repo   # version history\n\n# Batch read — wh thing view is variadic (max 500 wrefs/call):\nwh thing view Player/alice Player/bob               # variadic positionals\nwh thing view --file wrefs.txt --json               # one wref per line\ncat wrefs.txt | wh thing view --format jsonl        # one JSON line per *deduped* requested wref\n```\n\n## Wref Quick Reference\n\nWrites use explicit names and wrefs. Untyped fields, collection members,\nassertion `about`, and committers accept any thing. Create a deterministic\ntarget before referencing it in the same commit.\n\n## Command Reference\n\n**Global flags**: `--repo`, `--format`, `--json`, `--live`\n### thing — Things\n- `wh thing list [--shape] [--kind] [--match] [--include-retracted]` — Current HEAD state\n- `wh thing view [<wref>...] [--file <path>] [--version] [--depth] [--include-retracted] [--data-mode auto|full]` — Thing details. Variadic (max 500). `--version` implies `--include-retracted`. Batch JSON returns `{ requested, items, missing }`; jsonl emits one row per deduped requested wref. Large Set/List bodies summarize by default; use `--data-mode full` for canonical collection JSON.\n- `wh thing history [wref] [--shape] [--about] [--include-retracted]` — Version history\n- `wh thing resolve <wref>` — Resolve a wref to its canonical thing identity\n- `wh thing create <name|Shape/name> (--data|--file) [--shape]` — Create\n- `wh thing revise <name> [--data] [--message] [--committer] [--expected-version]` — Revise (CONFLICT if HEAD≠n)\n- `wh thing retract <wref> -m <message> [--reason] [--kind] [--expected-version]` — Retract\n- `wh thing query [--shape] [--kind] [--about] [--match]` — Query by filters\n- `wh thing search <query> [--shape] [--kind] [--about] [--mode]` — Search text\n- `wh thing rename <Shape/oldName> <newName>` — Rename\n- `wh thing refs <wref> [--inbound] [--outbound] [--field]` — Show field references; use `wh thing about` for assertions about the target thing\n- `wh thing about <wref> [--shape] [--match] [--depth] [--resolve-collections] [--role from|to|ends] [--limit] [--include-retracted]` — Show assertions about the target identity; `--resolve-collections` expands bare/@HEAD/@ALL members, `--role` filters direction; not pinned @vN\n\n- `wh view evaluate VIEW [--limit N] [--cursor TOK] [--all]`\n### commit — Write operations\n- `wh commit submit [--ops|--file|--add|--revise|--retract] [--dry-run] [--skip-existing]` — Submit operations, or evaluate the complete bounded input without durable changes under `--dry-run`. JSONL preview emits one operation row per input plus one summary.\n- `wh shape template <shape> [shape2 ...] [--kind] [--operation add|revise|retract] [-o file]` — Generate sample ops\n\n### assertion — Assertion operations\n- `wh assertion list [--about wref] [--shape] [--match] [--include-retracted]` — Browse assertions\n- `wh assertion view <wref> [--version] [--include-retracted]` — Assertion details\n- `wh assertion create --shape <s> --name <n> --about <wref> [--data] [-m] [--committer]` — Create assertion\n- `wh assertion revise <wref> --data <json> [--message] [--committer]` — Revise assertion\n- `wh assertion retract <wref> -m <message> [--reason] [--committer] [--expected-version]` — Retract assertion\n- `wh assertion history <wref> [--include-retracted]` — Assertion history\n\n### shape — Shape management\n- `wh shape list [--match] [--include-retracted]` — List all shapes\n- `wh shape view <name> [--include-retracted]` — Shape details\n- `wh shape revise <name> (--fields|--file)`\n- `wh shape create <name> (--fields|--file)`\n- `wh shape retract <name> -m <message> [--reason] [--expected-version]` — Retract shape\n- `wh shape history <name> [--include-retracted]` — Shape history\n- `wh shape rename <oldName> <newName>` — Rename shape\n\n### repo — Repository management\n- `wh repo create <org/name> [--display-name] [--description] [--visibility]` — Create repo\n- `wh repo list [org]` — List repos\n- `wh repo view [org/repo]` — Repo details\n\n### org — Organization management\n- `wh org create <name> [--display-name]` — Create a new organization\n- `wh org view <name>` — View organization details (alias: info)\n- `wh org list` — List all organizations\n\n### sub — Subscription management\n- `wh sub create <name> [flags]` — Create a subscription\n- `wh sub view <name>` — View subscription details\n- `wh sub list` — List all subscriptions\n- `wh sub log <name>` — Tail subscription delivery feed\n- `wh sub attempts <runId>` — Show attempt history for a run\n- `wh sub pause <name>` — Pause a subscription\n- `wh sub resume <name>` — Resume a paused subscription\n- `wh sub bind <name> [--credentials]` — Bind a credential set to a subscription for webhook auth\n- `wh sub unbind <name>` — Remove credential binding from a subscription\n- `wh sub delete <name>` — Retire; name reserved\n\n### notifications — Action notification listing\n- `wh notifications [--limit] [--since]` — List repo-scoped action notifications\n\n### credential — Credential set management\n- `wh credential create <name> [--repo org/repo | --org org] [--scope] [--description]` — Create an empty credential set\n- `wh credential list [--repo org/repo | --org org]` — List credential sets accessible from a repo or org\n- `wh credential view <name> [--repo org/repo | --org org]` — View a credential set (key names only, no values)\n- `wh credential delete <name> [--repo org/repo | --org org]` — Delete a credential set and its Vault object\n- `wh credential set <setName> [<keyName>] [--repo org/repo | --org org] [--value]` — Set credential key(s). With `<keyName>`: single-key form (reads value from `--value` or stdin). Without `<keyName>`: batch form (reads JSON object from stdin, e.g. `{\"KEY\":\"val\"}`)\n- `wh credential unset <setName> <keyName> [--repo org/repo | --org org]` — Remove a key from a credential set\n- `wh credential audit <setName> [--repo org/repo | --org org]` — View audit log for a credential set\n- `wh credential revoke <setName> [--repo org/repo | --org org] [--reason]` — Revoke a credential set (blocks new binds and stops bound webhook deliveries)\n\n### component — Component management\n- `wh component validate <path>` — Validate package\n- `wh component install <org/name>` — Install a registered component\n- `wh component register <name> --org <org> --manifest <path> [flags]` — Register component identity\n- `wh component unregister <org/name>` — Remove a registered component identity\n- `wh component registry list --org <org>` — List registered components\n- `wh component registry view <org/name>` — View a registered component\n- `wh component registry update <org/name> [flags]` — Update a registered component\n- `wh component list` — List installed components\n- `wh component update <org/name>` — Update installed component\n- `wh component view <org/name>` — Show component details (alias: show)\n- `wh component doctor <org/name>` — Run component health checks\n- `wh component teardown <org/name>` — Pause component subscriptions\n\n### Getting More Info\n- `wh help` — help overview\n- `wh <domain>` — domain verbs\n- `wh <domain> <verb> --help` — verb flags and examples\n- `wh help --format json` — `CliSpecV2` (`schemaVersion: 2`): global/contextual/root tables and command overrides\n\n## Common Workflows\n\n**Explore a repo:**\n```bash\nwh thing list --repo org/repo             # see all things in HEAD\nwh thing view Shape/name --repo org/repo  # inspect a specific thing\nwh thing history Shape/name --repo org/repo # inspect version history\nwh thing about Shape/name                 # assertions about thing/shape\n```\n\n**Create an assertion** (most common write):\n```bash\n# --about takes an untyped target wref: Shape or Shape/name.\nwh assertion create --shape MyShape --about TargetShape/target-name \\\n  --name my-assertion --data '{\"field_a\":1,\"field_b\":\"value\"}' --repo org/repo\n# Output includes per-operation status; relay failures when present.\n```\n\n**Create via write entrypoint** (alternative, supports batches and streams):\n```bash\nwh commit submit --add my-item --shape MyShape --kind assertion \\\n  --about TargetShape/target-name --data '{\"field_a\":1}' --repo org/repo\n```\n\n**Batch write via file** (generate template → edit → submit):\n```bash\nwh shape template Hypothesis Evidence -o ops.json    # add --kind assertion --about TargetShape/name for assertions\n# edit ops.json — fill FILL_IN placeholders\nwh commit submit --file ops.json -m \"batch update\"   # submit all operations (bare `wh commit` is equivalent)\n# --file format: docs.warmhub.ai/cli-reference/commit-operations\n```\n\n**Bulk write (JSONL stream, >1k ops)** — one chunked stream beats per-record commits (~60× faster):\n```bash\nwh shape template MyShape -o ops.jsonl                          # one op per line (.jsonl)\nID=\"bulk-$(date +%s)\"   # caller id for chunk correlation\nwh commit submit --file ops.jsonl --stream-id \"$ID\" --chunk-size 5000 \\\n  --skip-existing --progress -m \"bulk ingest\" --repo org/repo\n# --chunk-size: ops per append chunk (default 1000, max 10000); chunk≈1 is ~60× slower\n# --skip-existing: skips already-written add ops (drops per-row read-before-write)\n# --stream-id identifies the submission but provides no receipt or resume.\n# After an outcome-unknown append, stop writes and reconcile attempted + unsent\n# work from a later verified checkpoint; never blindly replay revise/retract.\n```\n\n**Create collections:**\n```bash\nwh commit submit --type arc --name route --members Location/a,Location/b --repo org/repo\nwh assertion create --shape Supports --name route-support --about Arc/route --data '{\"confidence\":0.8}' --repo org/repo\n```\n\n**Modify data:**\n```bash\nwh thing revise Shape/name --data '{\"x\":5,\"y\":3}' -m \"update\" --repo org/repo\nwh thing retract Shape/old-item -m \"withdrawn\" --reason \"data feed contaminated\" --repo org/repo\n```\n\n**Query and filter:**\n```bash\nwh thing query --shape MyShape                       # by shape\nwh thing query --kind assertion --about Shape/name   # by kind + target\nwh thing history Shape/name --limit 10               # version history\n```\n\n## Built-in Content shape\n\nWarmHub repos expose three well-known content wrefs:\n- `Content/Readme`  — stored markdown for humans\n- `Content/Agents`  — stored markdown guidance for AI agents\n- `Content/LlmsTxt` — synthesized per-request sitemap (read-only)\n\nFetch via `wh repo content get --kind readme|agents|llms-txt`,\n`client.repo.getReadme/getAgents/getLlmsTxt`, MCP `warmhub_repo_content_get`,\nor raw HTTP `GET /{org}/{repo}/readme.md|agents.md|llms.txt`.\nSee `wh repo describe` → `additionalInformation` for the discovery field.\n\n## Query Discipline\n- Plan the repo, shapes, and wrefs you need before the first query.\n- Gather the needed facts from one repo before switching to another.\n- Do the queries first, then write one complete answer.\n\n## Agent Tips\n- **Always run commands for live data** — this context describes the CLI, not repo contents\n- **Before writing, discover wrefs** — run `wh thing list` or `wh shape list`\n- **Shape field types**: `string`, `number`, `boolean`, `wref`, arrays, optionals, nested objects\n- **Write commands return per-operation results** — relay failures and affected wrefs to the user\n- **Pass data inline** with `--data '{...}'` — do NOT create temp files\n- Add `--json` to any command for machine-readable JSON output\n- **Aliases teach canonical commands** — executing aliases emit a status hint; misleading lifecycle aliases reject and point to `retract`\n- Writes go through `wh commit submit` (or bare `wh commit`) or wrappers (`create`, `revise`, `retract`, `assertion create`). `retract` irreversibly withdraws an identity and creates a history entry.\n- Use `wh doctor` to check environment health\n";
 
 // ../../packages/warmhub-cli/src/domains/prime.ts
 function buildMarkdown(config2) {
@@ -60183,7 +60556,7 @@ var PRIME_DOMAIN = defineDomain({
 });
 
 // ../../packages/warmhub-cli/src/domains/repo/checkpoint.ts
-import { createReadStream as createReadStream4 } from "node:fs";
+import { createReadStream as createReadStream5 } from "node:fs";
 import { lstat as lstat3 } from "node:fs/promises";
 
 // ../../packages/sdk-ts/src/repository-checkpoint/types.ts
@@ -60558,7 +60931,7 @@ import { createHash as createHash3 } from "node:crypto";
 
 // ../../packages/sdk-ts/src/repository-checkpoint/identity-sort.ts
 import { once } from "node:events";
-import { createReadStream as createReadStream3, createWriteStream } from "node:fs";
+import { createReadStream as createReadStream4, createWriteStream } from "node:fs";
 import { open as open3, rm } from "node:fs/promises";
 import { join as join10 } from "node:path";
 var CHECKPOINT_IDENTITY_SORT_BUDGET_BYTES = 4 * 1024 * 1024;
@@ -60832,7 +61205,7 @@ class RunCursor {
   #offset = 0;
   current;
   constructor(path2) {
-    this.#stream = createReadStream3(path2, {
+    this.#stream = createReadStream4(path2, {
       highWaterMark: RUN_READ_BUFFER_BYTES
     });
     this.#iterator = this.#stream[Symbol.asyncIterator]();
@@ -61480,7 +61853,7 @@ var handleVerify = async (ctx, { args }) => {
   }
   try {
     await lstat3(archive);
-    const result = await verifyRepositoryCheckpointArchive(createReadStream4(archive));
+    const result = await verifyRepositoryCheckpointArchive(createReadStream5(archive));
     writeOutput(ctx, result, () => {
       ctx.out(`Checkpoint: ${result.checkpointId}`);
       ctx.out(`Repository sequence: ${result.repoSeq}`);
@@ -62845,7 +63218,7 @@ var handleRetract2 = async (ctx, { flags, args }) => {
   const { org, repo: repo2 } = parseOrgRepo(getRepoRef(ctx), ctx.config);
   const expectedVersion = parsePositiveIntFlag(flags["expected-version"], "--expected-version", "wh shape retract Location --expected-version 3");
   const c = ctx.colors;
-  const commitResult = await ctx.client.commit.apply(org, repo2, flags.message ?? `retract shape ${shapeName}`, [
+  const commitResult = identifyCommitSubmitOutput(await ctx.client.commit.apply(org, repo2, flags.message ?? `retract shape ${shapeName}`, [
     {
       operation: "retract",
       kind: "shape",
@@ -62853,7 +63226,7 @@ var handleRetract2 = async (ctx, { flags, args }) => {
       ...flags.reason ? { reason: flags.reason } : {},
       ...expectedVersion !== undefined ? { expectedVersion } : {}
     }
-  ], { committer: flags.committer });
+  ], { committer: flags.committer }));
   requireSingleOpSuccess(commitResult);
   writeOutput(ctx, commitResult, () => {
     renderCommitterEcho(ctx.out, c, flags.committer);
@@ -64881,7 +65254,7 @@ async function dispatchDomain(ctx, invocation, dispatchRegistry = productionRegi
       ]);
       return;
     }
-    if (ctx.dryRun) {
+    if (ctx.dryRun && pathSpec.dryRunBehavior === "dispatch") {
       emitDryRun(ctx, invocation, undefined, pathSpec.flags);
       return;
     }
@@ -64923,7 +65296,7 @@ async function dispatchDomain(ctx, invocation, dispatchRegistry = productionRegi
   if (!handler) {
     throw new CliError(1 /* Runtime */, "UNKNOWN", `No handler registered for ${invocation.commandPath.join(".")}`);
   }
-  if (ctx.dryRun) {
+  if (ctx.dryRun && verbSpec.dryRunBehavior === "dispatch") {
     emitDryRun(ctx, invocation, canonicalVerb, verbSpec.flags);
     return;
   }
@@ -65734,7 +66107,8 @@ function resolveCommand(records, resolver, sourceRecords = records) {
           name: "help",
           summary: "Show command help",
           args: "[domain]",
-          flags: [...HELP_FLAGS2]
+          flags: [...HELP_FLAGS2],
+          dryRunBehavior: "dispatch"
         },
         flags: HELP_FLAGS2,
         args: "[domain]",
@@ -66303,7 +66677,7 @@ async function runPreparedCli(rawArgv, prepared, opts) {
     });
     const chars = makeChars();
     const signal = abortController.signal;
-    await dispatch({
+    const commandContext = {
       client,
       config: config2,
       invocation,
@@ -66331,8 +66705,9 @@ async function runPreparedCli(rawArgv, prepared, opts) {
       signal,
       rawFetch: opts?.rawFetch ?? fetch,
       confirm: (message) => confirmPrompt(message, { signal })
-    });
-    exitCode = cancelledExitCode ?? 0 /* Ok */;
+    };
+    await dispatch(commandContext);
+    exitCode = cancelledExitCode ?? commandContext.requestedExitCode ?? 0 /* Ok */;
     return exitCode;
   } catch (error51) {
     if (cancelledExitCode !== undefined) {
@@ -66426,7 +66801,7 @@ function resolveLogLevel(flagLevel, env) {
 // package.json
 var package_default3 = {
   name: "@warmhub/cli",
-  version: "0.92.0",
+  version: "0.94.0",
   private: false,
   type: "module",
   description: "The wh CLI for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",
@@ -67045,5 +67420,5 @@ process.exitCode = interceptedExitCode === undefined ? await runPreparedCli(laun
   version: package_default3.version
 }) : interceptedExitCode;
 
-//# debugId=7FA9403B2F49037864756E2164756E21
-//# warmhub-cli-build-info {"cliVersion":"0.92.0","sdkVersion":"0.90.0"}
+//# debugId=EE112F9789F2A17964756E2164756E21
+//# warmhub-cli-build-info {"cliVersion":"0.94.0","sdkVersion":"0.92.0"}