create-githolon 0.1.4 → 0.1.6

package/LICENSE.md

@@ -24,6 +24,15 @@ with it; we keep the rest for now.
 - offer the Nomos runtime, or anything materially similar, as a hosted service;
 - reverse-engineer the holon wasm runtime.
 
+## Data retention
+
+This is a pre-release we are actively evaluating. Workspaces you retire stop
+counting toward your quota but are NOT deleted: **we retain all workspace data
+(ledgers, law, intents) and may examine it to evaluate how the product is
+used.** Don't put anything in a pre-release workspace you wouldn't want the
+builders to read. If you need something truly expunged, ask:
+jack@captainapp.co.uk.
+
 ## The rest
 
 Provided **as is**, with no warranty of any kind; to the maximum extent

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-githolon",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "type": "module",
   "description": "Scaffold a Nomos domain package: the starter domain + compile config + live e2e. `npm create githolon my-app`.",
   "license": "SEE LICENSE IN LICENSE.md",

package/template/README.md

@@ -10,6 +10,12 @@ npx githolon compile          # → build/: deployable package + manifests + typ
 npx githolon login --agent    # self-onboard a verified identity (no browser; linkable to a full account later)
 ```
 
+**The shortest complete proof** — `npm install && npx githolon compile && npm run e2e`
+— IS the whole demonstration: your law deploys to a throwaway workspace, an
+ENFORCED-offline write (fetch is trapped) syncs through edge admission, and the
+cloud answers your declared query and count. Paths A/B below are for keeping a
+real workspace afterwards.
+
 ## Path A — deploy your law
 
 ```bash

package/template/test/e2e.mts

@@ -15,6 +15,9 @@ const CLOUD = (process.env.NOMOS_CLOUD || "https://nomos.captainapp.co.uk").repl
 const WS = process.env.NOMOS_WS || "gb-e2e-" + Math.random().toString(36).slice(2, 8);
 
 // explicit annotation on the const so TS's never-call narrowing applies after fail(...)
+// IDENTITY NOTE: this proof uses the bare x-nomos-principal lane so the test is
+// SELF-CONTAINED (a throwaway workspace, no stored credentials). Real apps use
+// `githolon login --agent` (a VERIFIED identity) + `githolon ws create/deploy`.
 const fail: (m: string) => never = (m) => { console.error("✗ " + m); process.exit(1); };
 const ok = (m: string) => console.log("✓ " + m);
 
@@ -51,6 +54,11 @@ ok("local replay — guestbook law Active in the local projection");
 
 // 3. LOCAL-FIRST write through the TYPED surface: payload shape + enum are compile-checked
 const signedAt = new Date().toISOString();
+// THE OFFLINE PROOF IS ENFORCED, not narrated: while we author/query/count
+// LOCALLY, fetch THROWS — if any "local" path touched the network, this test fails.
+const realFetch = globalThis.fetch;
+globalThis.fetch = (() => { throw new Error("OFFLINE PROOF VIOLATED: local authoring touched the network"); }) as typeof fetch;
+
 await app.signGuestbook({ author: "ada", message: "hello from the edge of the network", mood: "delighted", signedAt, tags: ["first-entry"] });
 ok("typed dispatch signGuestbook — offline write under the pulled law");
 
@@ -77,6 +85,9 @@ const localCount = await app.entriesPerMood("delighted");
 if (localCount !== 1) fail(`local declared count: ${localCount}`);
 ok("declared count maintained locally — entriesPerMood('delighted') = 1");
 
+globalThis.fetch = realFetch;
+ok("offline proof ENFORCED — fetch was trapped: local write/query/mutate/count touched no network");
+
 // 6. sync: push the session branch + edge admission merges to main
 const s = await holon.sync({ admit: true });
 if (!s.admission?.ok) fail(`sync/admit: ${JSON.stringify(s)}`);