githolon 0.100.2 → 0.100.3

package/dist/cli.mjs

@@ -3120,6 +3120,7 @@ __export(governance_exports, {
   renderRebirthImpact: () => renderRebirthImpact,
   resolveGovernanceHash: () => resolveGovernanceHash,
   resolveGovernancePrincipal: () => resolveGovernancePrincipal,
+  signAndPostChildLifecycle: () => signAndPostChildLifecycle,
   signAndPostGovernance: () => signAndPostGovernance,
   signAndPostOffer: () => signAndPostOffer,
   signAndPostWorkspaceBirth: () => signAndPostWorkspaceBirth,
@@ -3433,6 +3434,22 @@ async function signAndPostWorkspaceRetirement(parent, workspaceId, creator, opts
     creator
   );
 }
+async function signAndPostChildLifecycle(parent, child, creator, action, opts) {
+  return signAndPostPreparedOffer(
+    parent,
+    void 0,
+    (actor) => action === "retire" ? {
+      directiveId: "retireChild",
+      payload: { child, principal: creator, retiredBy: lineageIdentity(actor), retiredAt: Date.now() }
+    } : {
+      directiveId: "reclaimChild",
+      payload: { child, reclaimedBy: lineageIdentity(actor), reclaimedAt: Date.now() }
+    },
+    opts,
+    "self-if-unenrolled",
+    creator
+  );
+}
 async function relaySealedOfferViaStage(cloud, ws, directiveId, intentBytesB64, fetchImpl) {
   const raw = Buffer.from(intentBytesB64, "base64");
   const sha2562 = createHash("sha256").update(raw).digest("hex");
@@ -5471,9 +5488,19 @@ async function wsStatus(name, opts) {
   out4(text);
   return 0;
 }
+async function childBirthRecord(cloud, parent, child) {
+  try {
+    const id = `nomos-birth-record:${child}`;
+    const r = await fetch(`${cloud}/v2/workspaces/${encodeURIComponent(parent)}/aggregates/${encodeURIComponent(id)}`);
+    const body = await r.json().catch(() => void 0);
+    return body?.ok === true ? body.rows?.find((row) => row.data?.child === child) : void 0;
+  } catch {
+    return void 0;
+  }
+}
 async function wsRetire(ws, opts) {
   const cloud = cloudBase(opts.cloud);
-  const { signAndPostWorkspaceRetirement: signAndPostWorkspaceRetirement2 } = await Promise.resolve().then(() => (init_governance(), governance_exports));
+  const { signAndPostChildLifecycle: signAndPostChildLifecycle2, signAndPostWorkspaceRetirement: signAndPostWorkspaceRetirement2 } = await Promise.resolve().then(() => (init_governance(), governance_exports));
   const parent = opts.parent ?? "root";
   let record;
   try {
@@ -5485,12 +5512,29 @@ async function wsRetire(ws, opts) {
   }
   const recordId = record?.id;
   if (recordId === void 0) {
-    err4(
-      `retire '${ws}': no CloudWorkspace record named '${ws}' in ${parent}'s registry \u2014 nothing lawful to retire.
-  (a workspace born via the OPEN lane \u2014 bare POST /v2/workspaces/${ws} \u2014 has no registry row;
-   registered births ride \`githolon ws create ${ws} --via ${parent}\`. An unregistered leak needs a custodian sweep.)`
-    );
-    return 1;
+    const childRecord = await childBirthRecord(cloud, parent, ws);
+    if (childRecord === void 0) {
+      err4(
+        `retire '${ws}': no CloudWorkspace or NomosBirthRecord named '${ws}' in ${parent}'s registry \u2014 nothing lawful to retire.
+  An out-of-band custody repo has no parent lifecycle fact and needs a custodian investigation.`
+      );
+      return 1;
+    }
+    const creator = childRecord.data?.principal ?? "";
+    let childVerdict;
+    try {
+      childVerdict = await signAndPostChildLifecycle2(parent, ws, creator, "retire", opts);
+    } catch (e) {
+      err4(e.message);
+      return 1;
+    }
+    if (!childVerdict.ok) {
+      err4(`retire '${ws}' refused (${childVerdict.status}): ${typeof childVerdict.body === "string" ? childVerdict.body : JSON.stringify(childVerdict.body)}`);
+      return 1;
+    }
+    out4(`\u2713 child ${ws} retired via signed lifecycle offer to ${parent} on ${cloud}`);
+    out4("  custody is retained; reclaim is a separate, law-gated terminal step");
+    return 0;
   }
   let v;
   try {
@@ -5519,17 +5563,30 @@ async function wsRetire(ws, opts) {
 }
 async function wsReclaim(ws, opts) {
   const cloud = cloudBase(opts.cloud);
-  const { signAndPostGovernance: signAndPostGovernance2, resolveGovernancePrincipal: resolveGovernancePrincipal2 } = await Promise.resolve().then(() => (init_governance(), governance_exports));
+  const { signAndPostChildLifecycle: signAndPostChildLifecycle2, signAndPostGovernance: signAndPostGovernance2, resolveGovernancePrincipal: resolveGovernancePrincipal2 } = await Promise.resolve().then(() => (init_governance(), governance_exports));
   const parent = opts.parent ?? "root";
   let v;
   try {
     const principal = resolveGovernancePrincipal2(opts);
-    v = await signAndPostGovernance2(
-      parent,
-      "reclaimWorkspace",
-      { workspaceId: ws, reclaimedBy: principal, reclaimedAt: Date.now() },
-      opts
-    );
+    const q = await fetch(`${cloud}/v2/workspaces/${parent}/workspaceByName?name=${encodeURIComponent(ws)}`);
+    const qd = await q.json().catch(() => void 0);
+    const rows = qd?.ok === true ? qd.rows ?? [] : [];
+    const workspace = rows.find((r) => r.data?.status === "retired") ?? rows[0];
+    if (workspace?.id !== void 0) {
+      v = await signAndPostGovernance2(
+        parent,
+        "reclaimWorkspace",
+        { workspaceId: workspace.id, reclaimedBy: principal, reclaimedAt: Date.now() },
+        opts
+      );
+    } else {
+      const child = await childBirthRecord(cloud, parent, ws);
+      if (child === void 0) {
+        err4(`reclaim '${ws}': no CloudWorkspace or NomosBirthRecord named '${ws}' in ${parent}'s registry`);
+        return 1;
+      }
+      v = await signAndPostChildLifecycle2(parent, ws, child.data?.principal ?? "", "reclaim", opts);
+    }
   } catch (e) {
     err4(e.message);
     return 1;
@@ -5538,7 +5595,7 @@ async function wsReclaim(ws, opts) {
     err4(`reclaim '${ws}' refused (${v.status}): ${typeof v.body === "string" ? v.body : JSON.stringify(v.body)}`);
     return 1;
   }
-  out4(`\u2713 workspace ${ws} reclaimed via signed governance offer to ${parent} on ${cloud}`);
+  out4(`\u2713 workspace ${ws} reclaimed via signed lifecycle offer to ${parent} on ${cloud}`);
   out4("  the custodian drops the ledger bytes on seeing this fact folded; the reclaimed FACT is append-only");
   return 0;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "githolon",
-  "version": "0.100.2",
+  "version": "0.100.3",
   "type": "module",
   "description": "githolon — the Nomos developer CLI: Rails-style generators for @githolon/dsl domains + the package compiler. Kernel-independent.",
   "license": "SEE LICENSE IN LICENSE.md",
@@ -29,8 +29,8 @@
   },
   "dependencies": {
     "@bjorn3/browser_wasi_shim": "0.4.2",
-    "@githolon/client": "^0.100.2",
-    "@githolon/dsl": "^0.100.2",
+    "@githolon/client": "^0.100.3",
+    "@githolon/dsl": "^0.100.3",
     "isomorphic-git": "^1.38.4"
   },
   "devDependencies": {