@githolon/dsl 0.114.0 → 0.115.0

package/dart_types/lib/src/proto/nomos/runtime/v2/model_adoption_desk.pb.dart

@@ -29,6 +29,7 @@ class AdoptApplicationModelRequest extends $pb.GeneratedMessage {
     $core.String? acceptanceReason,
     $core.bool? dryRun,
     $core.String? unitSet,
+    $core.Iterable<DomainUnitRequirement>? domainRequirements,
   }) {
     final result = create();
     if (session != null) result.session = session;
@@ -37,6 +38,8 @@ class AdoptApplicationModelRequest extends $pb.GeneratedMessage {
     if (acceptanceReason != null) result.acceptanceReason = acceptanceReason;
     if (dryRun != null) result.dryRun = dryRun;
     if (unitSet != null) result.unitSet = unitSet;
+    if (domainRequirements != null)
+      result.domainRequirements.addAll(domainRequirements);
     return result;
   }
 
@@ -60,6 +63,8 @@ class AdoptApplicationModelRequest extends $pb.GeneratedMessage {
     ..aOS(4, _omitFieldNames ? '' : 'acceptanceReason')
     ..aOB(5, _omitFieldNames ? '' : 'dryRun')
     ..aOS(6, _omitFieldNames ? '' : 'unitSet')
+    ..pPM<DomainUnitRequirement>(7, _omitFieldNames ? '' : 'domainRequirements',
+        subBuilder: DomainUnitRequirement.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
@@ -148,6 +153,99 @@ class AdoptApplicationModelRequest extends $pb.GeneratedMessage {
   $core.bool hasUnitSet() => $_has(5);
   @$pb.TagNumber(6)
   void clearUnitSet() => $_clearField(6);
+
+  /// THE PER-DOMAIN REQUIREMENTS (CAP-666): for each application domain key, the
+  /// exact law unit and the generated consumer requirement this client was
+  /// compiled against. A workspace serving that unit for the key satisfies the
+  /// requirement for it even when its unit set carries other domains the
+  /// application never touches. Absent on clients generated before this field
+  /// existed: the unit set alone then decides.
+  @$pb.TagNumber(7)
+  $pb.PbList<DomainUnitRequirement> get domainRequirements => $_getList(6);
+}
+
+/// One application domain's requirement, as the compiler generated it beside the
+/// unit set: the domain's unit hash (`domain:<key>` in `build/<name>.units`) and
+/// the sha256 of the domain's `<name>.compatibility.usda` slice the kernel's
+/// Compatibility Desk judges. Identities only; the office never reads the bytes.
+class DomainUnitRequirement extends $pb.GeneratedMessage {
+  factory DomainUnitRequirement({
+    $core.String? domainKey,
+    $core.String? unitSha256,
+    $core.String? requirementSha256,
+  }) {
+    final result = create();
+    if (domainKey != null) result.domainKey = domainKey;
+    if (unitSha256 != null) result.unitSha256 = unitSha256;
+    if (requirementSha256 != null) result.requirementSha256 = requirementSha256;
+    return result;
+  }
+
+  DomainUnitRequirement._();
+
+  factory DomainUnitRequirement.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory DomainUnitRequirement.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'DomainUnitRequirement',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'domainKey')
+    ..aOS(2, _omitFieldNames ? '' : 'unitSha256')
+    ..aOS(3, _omitFieldNames ? '' : 'requirementSha256')
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  DomainUnitRequirement clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  DomainUnitRequirement copyWith(
+          void Function(DomainUnitRequirement) updates) =>
+      super.copyWith((message) => updates(message as DomainUnitRequirement))
+          as DomainUnitRequirement;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static DomainUnitRequirement create() => DomainUnitRequirement._();
+  @$core.override
+  DomainUnitRequirement createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static DomainUnitRequirement getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<DomainUnitRequirement>(create);
+  static DomainUnitRequirement? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get domainKey => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set domainKey($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasDomainKey() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearDomainKey() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $core.String get unitSha256 => $_getSZ(1);
+  @$pb.TagNumber(2)
+  set unitSha256($core.String value) => $_setString(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasUnitSha256() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearUnitSha256() => $_clearField(2);
+
+  @$pb.TagNumber(3)
+  $core.String get requirementSha256 => $_getSZ(2);
+  @$pb.TagNumber(3)
+  set requirementSha256($core.String value) => $_setString(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasRequirementSha256() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearRequirementSha256() => $_clearField(3);
 }
 
 class ApplicationModelAdopted extends $pb.GeneratedMessage {

package/dart_types/lib/src/proto/nomos/runtime/v2/records_desk.pb.dart

@@ -1237,14 +1237,18 @@ class ResolveWorkspaceNameRequest extends $pb.GeneratedMessage {
 }
 
 /// `birth.keyed({ namespace, key })` — `<namespace>-<sha256(namespace + US + key)[:40]>`.
+/// A business birth's child is named the same way, fixed at birth (CAP-803 withdrew the CAP-788
+/// parent-scoped naming before release); one parent per node is the kernel's `[birth-child-already-parented]`.
 class KeyedBirthName extends $pb.GeneratedMessage {
   factory KeyedBirthName({
     $core.String? namespace,
     $core.String? key,
+    $core.String? parent,
   }) {
     final result = create();
     if (namespace != null) result.namespace = namespace;
     if (key != null) result.key = key;
+    if (parent != null) result.parent = parent;
     return result;
   }
 
@@ -1264,6 +1268,7 @@ class KeyedBirthName extends $pb.GeneratedMessage {
       createEmptyInstance: create)
     ..aOS(1, _omitFieldNames ? '' : 'namespace')
     ..aOS(2, _omitFieldNames ? '' : 'key')
+    ..aOS(3, _omitFieldNames ? '' : 'parent')
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
@@ -1302,6 +1307,17 @@ class KeyedBirthName extends $pb.GeneratedMessage {
   $core.bool hasKey() => $_has(1);
   @$pb.TagNumber(2)
   void clearKey() => $_clearField(2);
+
+  /// UNUSED (reserved, CAP-803): the office ignores it and answers the keyed name above. A child is
+  /// addressed by the name it was born with; a parent never re-derives it.
+  @$pb.TagNumber(3)
+  $core.String get parent => $_getSZ(2);
+  @$pb.TagNumber(3)
+  set parent($core.String value) => $_setString(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasParent() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearParent() => $_clearField(3);
 }
 
 /// The framework's identity anchor — `nomos-rg-<sha256(principal)[:40]>`.

package/dart_types/lib/src/proto/nomos/runtime/v2/runtime.pb.dart

@@ -85,6 +85,7 @@ enum RuntimeRequest_Command {
   configureProviderOrigins,
   fetchWorkspace,
   provideLawProducts,
+  serveLiveStream,
   notSet
 }
 
@@ -145,6 +146,7 @@ class RuntimeRequest extends $pb.GeneratedMessage {
     $7.ConfigureProviderOriginsRequest? configureProviderOrigins,
     $2.FetchWorkspaceRequest? fetchWorkspace,
     $2.ProvideLawProductsRequest? provideLawProducts,
+    $3.LiveStreamRequest? serveLiveStream,
   }) {
     final result = create();
     if (protocolVersion != null) result.protocolVersion = protocolVersion;
@@ -223,6 +225,7 @@ class RuntimeRequest extends $pb.GeneratedMessage {
     if (fetchWorkspace != null) result.fetchWorkspace = fetchWorkspace;
     if (provideLawProducts != null)
       result.provideLawProducts = provideLawProducts;
+    if (serveLiveStream != null) result.serveLiveStream = serveLiveStream;
     return result;
   }
 
@@ -284,6 +287,7 @@ class RuntimeRequest extends $pb.GeneratedMessage {
     62: RuntimeRequest_Command.configureProviderOrigins,
     63: RuntimeRequest_Command.fetchWorkspace,
     64: RuntimeRequest_Command.provideLawProducts,
+    65: RuntimeRequest_Command.serveLiveStream,
     0: RuntimeRequest_Command.notSet
   };
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
@@ -338,7 +342,8 @@ class RuntimeRequest extends $pb.GeneratedMessage {
       61,
       62,
       63,
-      64
+      64,
+      65
     ])
     ..aI(1, _omitFieldNames ? '' : 'protocolVersion',
         fieldType: $pb.PbFieldType.OU3)
@@ -476,6 +481,8 @@ class RuntimeRequest extends $pb.GeneratedMessage {
     ..aOM<$2.ProvideLawProductsRequest>(
         64, _omitFieldNames ? '' : 'provideLawProducts',
         subBuilder: $2.ProvideLawProductsRequest.create)
+    ..aOM<$3.LiveStreamRequest>(65, _omitFieldNames ? '' : 'serveLiveStream',
+        subBuilder: $3.LiveStreamRequest.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
@@ -544,6 +551,7 @@ class RuntimeRequest extends $pb.GeneratedMessage {
   @$pb.TagNumber(62)
   @$pb.TagNumber(63)
   @$pb.TagNumber(64)
+  @$pb.TagNumber(65)
   RuntimeRequest_Command whichCommand() =>
       _RuntimeRequest_CommandByTag[$_whichOneof(0)]!;
   @$pb.TagNumber(10)
@@ -593,6 +601,7 @@ class RuntimeRequest extends $pb.GeneratedMessage {
   @$pb.TagNumber(62)
   @$pb.TagNumber(63)
   @$pb.TagNumber(64)
+  @$pb.TagNumber(65)
   void clearCommand() => $_clearField($_whichOneof(0));
 
   @$pb.TagNumber(1)
@@ -1196,6 +1205,18 @@ class RuntimeRequest extends $pb.GeneratedMessage {
   void clearProvideLawProducts() => $_clearField(64);
   @$pb.TagNumber(64)
   $2.ProvideLawProductsRequest ensureProvideLawProducts() => $_ensure(50);
+
+  /// A coordinator asks the cloud peer that holds this workspace to serve one stream request.
+  @$pb.TagNumber(65)
+  $3.LiveStreamRequest get serveLiveStream => $_getN(51);
+  @$pb.TagNumber(65)
+  set serveLiveStream($3.LiveStreamRequest value) => $_setField(65, value);
+  @$pb.TagNumber(65)
+  $core.bool hasServeLiveStream() => $_has(51);
+  @$pb.TagNumber(65)
+  void clearServeLiveStream() => $_clearField(65);
+  @$pb.TagNumber(65)
+  $3.LiveStreamRequest ensureServeLiveStream() => $_ensure(51);
 }
 
 class InvocationTarget extends $pb.GeneratedMessage {
@@ -1318,6 +1339,7 @@ enum RuntimeResponse_Outcome {
   providerOriginsConfigured,
   workspaceFetch,
   lawProducts,
+  liveStreamServed,
   notSet
 }
 
@@ -1377,6 +1399,7 @@ class RuntimeResponse extends $pb.GeneratedMessage {
     $7.ProviderOriginsConfigured? providerOriginsConfigured,
     $2.WorkspaceFetch? workspaceFetch,
     $18.ExportLawProductsResponse? lawProducts,
+    $3.LiveStreamAnswer? liveStreamServed,
   }) {
     final result = create();
     if (protocolVersion != null) result.protocolVersion = protocolVersion;
@@ -1457,6 +1480,7 @@ class RuntimeResponse extends $pb.GeneratedMessage {
       result.providerOriginsConfigured = providerOriginsConfigured;
     if (workspaceFetch != null) result.workspaceFetch = workspaceFetch;
     if (lawProducts != null) result.lawProducts = lawProducts;
+    if (liveStreamServed != null) result.liveStreamServed = liveStreamServed;
     return result;
   }
 
@@ -1523,6 +1547,7 @@ class RuntimeResponse extends $pb.GeneratedMessage {
     66: RuntimeResponse_Outcome.providerOriginsConfigured,
     67: RuntimeResponse_Outcome.workspaceFetch,
     68: RuntimeResponse_Outcome.lawProducts,
+    69: RuntimeResponse_Outcome.liveStreamServed,
     0: RuntimeResponse_Outcome.notSet
   };
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
@@ -1582,7 +1607,8 @@ class RuntimeResponse extends $pb.GeneratedMessage {
       65,
       66,
       67,
-      68
+      68,
+      69
     ])
     ..aI(1, _omitFieldNames ? '' : 'protocolVersion',
         fieldType: $pb.PbFieldType.OU3)
@@ -1719,6 +1745,8 @@ class RuntimeResponse extends $pb.GeneratedMessage {
     ..aOM<$18.ExportLawProductsResponse>(
         68, _omitFieldNames ? '' : 'lawProducts',
         subBuilder: $18.ExportLawProductsResponse.create)
+    ..aOM<$3.LiveStreamAnswer>(69, _omitFieldNames ? '' : 'liveStreamServed',
+        subBuilder: $3.LiveStreamAnswer.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
@@ -1792,6 +1820,7 @@ class RuntimeResponse extends $pb.GeneratedMessage {
   @$pb.TagNumber(66)
   @$pb.TagNumber(67)
   @$pb.TagNumber(68)
+  @$pb.TagNumber(69)
   RuntimeResponse_Outcome whichOutcome() =>
       _RuntimeResponse_OutcomeByTag[$_whichOneof(0)]!;
   @$pb.TagNumber(10)
@@ -1846,6 +1875,7 @@ class RuntimeResponse extends $pb.GeneratedMessage {
   @$pb.TagNumber(66)
   @$pb.TagNumber(67)
   @$pb.TagNumber(68)
+  @$pb.TagNumber(69)
   void clearOutcome() => $_clearField($_whichOneof(0));
 
   @$pb.TagNumber(1)
@@ -2469,6 +2499,17 @@ class RuntimeResponse extends $pb.GeneratedMessage {
   void clearLawProducts() => $_clearField(68);
   @$pb.TagNumber(68)
   $18.ExportLawProductsResponse ensureLawProducts() => $_ensure(53);
+
+  @$pb.TagNumber(69)
+  $3.LiveStreamAnswer get liveStreamServed => $_getN(54);
+  @$pb.TagNumber(69)
+  set liveStreamServed($3.LiveStreamAnswer value) => $_setField(69, value);
+  @$pb.TagNumber(69)
+  $core.bool hasLiveStreamServed() => $_has(54);
+  @$pb.TagNumber(69)
+  void clearLiveStreamServed() => $_clearField(69);
+  @$pb.TagNumber(69)
+  $3.LiveStreamAnswer ensureLiveStreamServed() => $_ensure(54);
 }
 
 enum CustodyOfferBatchResponse_Outcome { admission, failure, blocked, notSet }

package/dart_types/pubspec.yaml

@@ -9,7 +9,7 @@ description: >-
   Pure kernel wire/data types for Nomos Dart frontends — no transport, no bridge,
   no runtime. Typed protobuf and USDA boundary values plus the offer codec,
   reactive read engine, schema validation, and data-only error/trace types.
-version: 0.13.0
+version: 0.14.0
 
 environment:
   sdk: ^3.5.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@githolon/dsl",
-  "version": "0.114.0",
+  "version": "0.115.0",
   "type": "module",
   "sideEffects": false,
   "description": "Nomos 2 domain-authoring DSL: aggregates + directives in TS, executed and encoded to the Rust kernel's wire shapes.",
@@ -27,6 +27,8 @@
     },
     "./release-publication": "./src/release_publication.ts",
     "./release-inspection": "./src/release_inspection.ts",
+    "./law-version": "./src/law_version.ts",
+    "./baseline": "./src/baseline.ts",
     "./workspace-type": "./src/workspace_type.ts",
     "./workspace-routing": "./src/workspace_routing.ts",
     "./workspace-sharding": "./src/workspace_sharding.ts",
@@ -75,7 +77,7 @@
     "test": "vitest run"
   },
   "dependencies": {
-    "@githolon/runtime": "^0.114.0",
+    "@githolon/runtime": "^0.115.0",
     "@bufbuild/protobuf": "^2.13.0",
     "@bufbuild/protoc-gen-es": "^2.13.0",
     "esbuild": "0.24.2",

package/src/aggregate.ts

@@ -42,6 +42,89 @@ export type AggregateInvariantFn = (
   previous?: Readonly<Record<string, unknown>> | null,
 ) => AggregateInvariantVerdict;
 
+/**
+ * BIRTH KEYS ARE WRITE-ONCE (CAP-804 / CO2-1687). A field-keyed `birth(Aggregate, { key })` names the born
+ * workspace `workspaceNameForKey(namespace, <key value>)` — fixed at birth, forever. So the framework, not
+ * the tenant, attaches a write-once rule to that field of the born aggregate: it rides the aggregate's
+ * composed invariant (the SAME #41 gate machinery as `.fromBirth()` presence and CO2's hand-written
+ * `immutableIdentity`), so it is judged at the kernel on author, on edge admission and on verify.
+ *
+ *   - creation (`previous === null`), or a field never set before → ADMITTED (the birth seeds it);
+ *   - a write that leaves the value unchanged (a genesis seed re-stating the key) → ADMITTED;
+ *   - a write that CHANGES the value → REFUSED (`{ refuse }`: no strike, no state change) with the typed
+ *     code `<Aggregate>.<field>:birth-key-write-once` (see {@link BIRTH_KEY_WRITE_ONCE_CODE}).
+ *
+ * A caller that supplies no transition context (`previous === undefined`, a snapshot-only legacy oracle)
+ * cannot show a change, so the rule holds vacuously there — it only ever judges transitions.
+ *
+ * ERA: the rule lives in the invariant BODY, which ships in the law's own engine bundle; invariant
+ * PRESENCE (the hashed manifest bit) is unchanged, because a birth key is always a `.fromBirth()` field
+ * and every `.fromBirth()` aggregate already declares the composed presence invariant. Chains authored
+ * under earlier law replay under that law byte-identically; only law compiled with this DSL carries it.
+ *
+ * VALUE-FREE: the refusal names the field, never a value, and it can only tell a writer whether its
+ * write would change the key — which the writer, already inside the workspace, can derive from the
+ * workspace's own name. It therefore keeps the presence check's `invariantValueFree` posture.
+ */
+export const BIRTH_KEY_WRITE_ONCE_CODE = "birth-key-write-once";
+
+/** @internal Where `birth()` registers the write-once birth-key fields of an aggregate. Symbol-keyed so it
+ *  is copied by the handle builders' spreads (every `.public()`/`.readableBy()`/`.owned()` handle shares
+ *  ONE set) yet invisible to `Object.keys`/`JSON.stringify` (never hashed, never emitted). */
+export const BIRTH_KEY_FIELDS: unique symbol = Symbol.for("nomos.birthKeyWriteOnceFields");
+
+/** True for an aggregate-invariant refusal code produced by the birth-key write-once rule. */
+export function isBirthKeyWriteOnceRefusal(code: string): boolean {
+  return /^[^\s]+\.[^\s.:]+:birth-key-write-once(?:\s|$)/.test(code);
+}
+
+/** @internal Register `field` of `aggregate` as a write-once birth key (called by `birth()`). */
+export function __declareBirthKeyWriteOnce(aggregate: AggregateHandle, field: string): void {
+  const registry = (aggregate as unknown as { [BIRTH_KEY_FIELDS]?: Set<string> })[BIRTH_KEY_FIELDS];
+  if (registry === undefined) {
+    throw new Error(
+      `birth(${aggregate.id}): this aggregate handle cannot carry the framework's write-once birth-key rule ` +
+        `(it was not built by aggregate())`,
+    );
+  }
+  registry.add(field);
+}
+
+/** The write-once birth-key fields `birth()` registered on this aggregate (empty when none). */
+export function birthKeyWriteOnceFields(aggregate: AggregateHandle): readonly string[] {
+  const registry = (aggregate as unknown as { [BIRTH_KEY_FIELDS]?: Set<string> })[BIRTH_KEY_FIELDS];
+  return registry === undefined ? [] : [...registry].sort();
+}
+
+function sameKeyValue(a: unknown, b: unknown): boolean {
+  if (a === b) return true;
+  if (typeof a !== "object" || typeof b !== "object" || a === null || b === null) return false;
+  return JSON.stringify(a) === JSON.stringify(b);
+}
+
+/** @internal The write-once judgement over one transition (exported for direct tests). */
+export function judgeBirthKeyWriteOnce(
+  aggregateId: string,
+  fields: Iterable<string>,
+  snapshot: Readonly<Record<string, unknown>>,
+  previous: Readonly<Record<string, unknown>> | null | undefined,
+): AggregateInvariantVerdict {
+  if (previous === undefined || previous === null) return { accept: true };
+  for (const name of fields) {
+    const before = previous[name];
+    if (before === undefined || before === null) continue;
+    if (!sameKeyValue(before, snapshot[name])) {
+      return {
+        refuse:
+          `${aggregateId}.${name}:${BIRTH_KEY_WRITE_ONCE_CODE} — '${name}' is the birth key of ${aggregateId}: the ` +
+          `born workspace's name was derived from it at birth and is fixed forever, so it may be seeded with the ` +
+          `same value but never changed (architecture/choosing_a_birth_key.md)`,
+      };
+    }
+  }
+  return { accept: true };
+}
+
 /**
  * READ VISIBILITY (the native-relations read gate) — the DECLARED posture of an
  * aggregate's data on the read side. `public` (the DEFAULT, and the only value
@@ -640,6 +723,10 @@ export function aggregate<const Id extends string, F extends Record<string, Fiel
           return userInvariant !== undefined ? userInvariant(snapshot, previous) : { accept: true };
         }
       : userInvariant;
+  // BIRTH-KEY WRITE-ONCE (CAP-804): `birth()` registers its key field here AFTER this aggregate is
+  // declared; the composed invariant reads the shared set at evaluation time. A birth key is always a
+  // `.fromBirth()` field, so the presence invariant (and its hashed presence bit) already exists.
+  const birthKeyFields = new Set<string>();
   const composedInvariant: AggregateInvariantFn | undefined =
     fromBirthFields.length > 0
       ? (snapshot, previous) => {
@@ -649,6 +736,10 @@ export function aggregate<const Id extends string, F extends Record<string, Fiel
               return { reject: `${id}.${name} is fromBirth() — every ${id} must carry it from creation (the plan left it unset)` };
             }
           }
+          if (birthKeyFields.size > 0) {
+            const writeOnce = judgeBirthKeyWriteOnce(id, birthKeyFields, snapshot, previous);
+            if (!("accept" in writeOnce)) return writeOnce;
+          }
           return afterFulfilment !== undefined ? afterFulfilment(snapshot, previous) : { accept: true };
         }
       : afterFulfilment;
@@ -660,6 +751,8 @@ export function aggregate<const Id extends string, F extends Record<string, Fiel
     fields: stored as StoredFields<F>,
     hasMany: hasMany as HasManyFields<F>,
     __isAggregateHandle: true as const,
+    // Only a `.fromBirth()` aggregate can be born, so only it carries the registry (see BIRTH_KEY_FIELDS).
+    ...(fromBirthFields.length > 0 ? { [BIRTH_KEY_FIELDS]: birthKeyFields } : {}),
     ...(opts?.fulfils !== undefined ? { fulfilment: opts.fulfils } : {}),
     ...(composedInvariant !== undefined
       ? { hasInvariant: true as const, invariant: composedInvariant }