githolon 0.103.6 → 0.103.8

package/dist/dev-server.mjs

@@ -2595,8 +2595,8 @@ function resolveGatewayOperation(spec, opName, method) {
 
 // ../cloud/cloudflare-shell/src/kernel-registry.generated.ts
 var DEPLOYED_KERNELS = [
-  { prefix: "79df1f00", hash: "79df1f00d23ed0f5dbcbf24071edf6e1667137d844248a40b456e13f4a85d176", version: "kernel-79df1f00", note: "production (this candidate)", features: ["compoundKeys", "capturedReads", "invariantGate", "surfacedMerge", "fieldProvenance", "nullSemantics", "attestedReads", "conflictSnapshots", "ownedAudience"] },
-  { prefix: "9eac1a59", hash: "9eac1a5907116c8c7adbd89799d513e4463ef2f127cb14367e05576096fcc228", version: "kernel-9eac1a59", note: "test-mint (this candidate) \u2014 feature-equivalent to production", features: ["compoundKeys", "capturedReads", "invariantGate", "surfacedMerge", "fieldProvenance", "nullSemantics", "attestedReads", "conflictSnapshots", "ownedAudience"] }
+  { prefix: "171bd538", hash: "171bd538ffccfbf248b2b25962d44676cf78466d5da2dfa32c8618ba5f38bf45", version: "kernel-171bd538", note: "production (this candidate)", features: ["compoundKeys", "capturedReads", "invariantGate", "surfacedMerge", "fieldProvenance", "nullSemantics", "attestedReads", "conflictSnapshots", "ownedAudience"] },
+  { prefix: "8b521aba", hash: "8b521aba87dd4dd54a81db9c3571c79ec5d0c600f84ca3796379fc5ba098068b", version: "kernel-8b521aba", note: "test-mint (this candidate) \u2014 feature-equivalent to production", features: ["compoundKeys", "capturedReads", "invariantGate", "surfacedMerge", "fieldProvenance", "nullSemantics", "attestedReads", "conflictSnapshots", "ownedAudience"] }
 ];
 
 // ../cloud/cloudflare-shell/src/staged-intents.ts

package/dist/full-cli.mjs

@@ -2322,7 +2322,7 @@ function recommendedActionSentence(action) {
     case "recompileClient":
       return "recompile the client (githolon compile / npx nomos-compile) against the deployed law";
     case "redeployLaw":
-      return "redeploy the package (POST /v2/workspaces/<ws>/domains) so the workspace runs the client's law";
+      return "let the generated application prove, stage and govern adoption of its packaged law";
     case "reauth":
       return "re-authenticate (acquire a fresh auth-provider token) and reconnect";
     case "quarantineLocalSnapshotAndReclone":
@@ -5209,7 +5209,7 @@ function lawStatusOf(installed, clientHash) {
 function lawDriftMessage({ what, workspace, clientHash, installed }) {
   const short2 = (h) => `${String(h).slice(0, 12)}\u2026`;
   const runs = installed.length ? `runs law ${installed.slice(0, 6).map(short2).join(", ")}${installed.length > 6 ? ` (+${installed.length - 6} more)` : ""}` : "has NO active law installed";
-  return `${what}: this client was generated under law ${short2(clientHash)}, but workspace '${workspace}' ${runs} \u2014 the client and the workspace have drifted (or this domain was never deployed here). Recompile (githolon compile / npx nomos-compile) and redeploy the package (POST /v2/workspaces/${workspace}/domains), or regenerate the client against the deployed law (GET /v2/workspaces/${workspace}/domains names the hashes it runs). [law-drift]`;
+  return `${what}: this client was generated under law ${short2(clientHash)}, but workspace '${workspace}' ${runs} \u2014 the client and the workspace have drifted (or this domain was never installed here). The generated application will now prove, stage and govern adoption of its packaged model; if adoption is refused it surfaces a typed model decision instead of requiring application code to deploy law. [law-drift]`;
 }
 function birthOutcomeFailure(birthOutcomes) {
   if (!Array.isArray(birthOutcomes)) return null;
@@ -5476,7 +5476,12 @@ ${String(commit).toLowerCase()}`;
     remoteMain = await resolveBranchHead().catch(() => null);
   } else {
     await writeSkeleton();
-    remoteMain = await fetchRemoteHead();
+    const _remoteStatus = span("receive", "boot: fetch remote status", "cloud-status");
+    try {
+      remoteMain = await fetchRemoteHead();
+    } finally {
+      _remoteStatus.end();
+    }
     if (!remoteMain) {
       _bootLedger.end();
       if (!allowUnborn) throw new Error(`workspace '${workspace}' has no ledger main \u2014 create it first (POST /v2/workspaces/${workspace})`);
@@ -5499,6 +5504,10 @@ ${String(commit).toLowerCase()}`;
   let cloudLedgerCache = null;
   const watchTicks = /* @__PURE__ */ new Set();
   const watchStops = /* @__PURE__ */ new Set();
+  let installedLawRowsCache;
+  const invalidateInstalledLawRows = () => {
+    installedLawRowsCache = void 0;
+  };
   let _disposed = false;
   const nudgeWatches = () => {
     try {
@@ -5765,25 +5774,29 @@ ${String(commit).toLowerCase()}`;
     }
   };
   const installRowsInner = () => {
+    if (installedLawRowsCache !== void 0) return installedLawRowsCache;
     try {
       const answer = JSON.parse(call("query", { queryBytes: qBytes({ op: "installedLaw" }) }));
-      if (Array.isArray(answer?.domains)) return answer.domains.map((domain) => ({
-        id: domain.installationId,
-        data: {
-          "spec.domainHash": domain.domainHash,
-          "spec.packageHash": domain.packageHash,
-          "spec.policyAggregate": domain.policyId,
-          "spec.installedBy": domain.installedBy,
-          "spec.authorityScope": domain.authorityScope,
-          "spec.supersedes": domain.supersedes,
-          "spec.lawClosureIdentity": domain.lawClosureIdentity,
-          "spec.dependencies": Array.isArray(domain.dependencies) ? domain.dependencies : [],
-          "spec.domainKeys": Array.isArray(domain.domainKeys) ? domain.domainKeys : [],
-          "status.phase": domain.phase,
-          "status.supersededBy": domain.supersededBy,
-          "metadata.generation": domain.generation
-        }
-      }));
+      if (Array.isArray(answer?.domains)) {
+        installedLawRowsCache = answer.domains.map((domain) => ({
+          id: domain.installationId,
+          data: {
+            "spec.domainHash": domain.domainHash,
+            "spec.packageHash": domain.packageHash,
+            "spec.policyAggregate": domain.policyId,
+            "spec.installedBy": domain.installedBy,
+            "spec.authorityScope": domain.authorityScope,
+            "spec.supersedes": domain.supersedes,
+            "spec.lawClosureIdentity": domain.lawClosureIdentity,
+            "spec.dependencies": Array.isArray(domain.dependencies) ? domain.dependencies : [],
+            "spec.domainKeys": Array.isArray(domain.domainKeys) ? domain.domainKeys : [],
+            "status.phase": domain.phase,
+            "status.supersededBy": domain.supersededBy,
+            "metadata.generation": domain.generation
+          }
+        }));
+        return installedLawRowsCache;
+      }
       if (typeof process !== "undefined" && process.env?.NOMOS_DEBUG_RAW) {
         console.error("[nomos] installedLaw meta-read returned no domains; using legacy projection fallback", answer);
       }
@@ -5793,10 +5806,11 @@ ${String(commit).toLowerCase()}`;
       }
     }
     try {
-      return JSON.parse(call("query", { queryBytes: qBytes({ kind: "query", queryId: "aggregatesByType", paramsJson: JSON.stringify({ __type: "DomainInstallation" }) }) })) || [];
+      installedLawRowsCache = JSON.parse(call("query", { queryBytes: qBytes({ kind: "query", queryId: "aggregatesByType", paramsJson: JSON.stringify({ __type: "DomainInstallation" }) }) })) || [];
     } catch {
-      return null;
+      installedLawRowsCache = null;
     }
+    return installedLawRowsCache;
   };
   const installedLawInner = () => {
     const rows = installRowsInner();
@@ -5966,6 +5980,7 @@ ${String(commit).toLowerCase()}`;
         }
       }
     }
+    invalidateInstalledLawRows();
     nudgeWatches();
     return {
       upToDate: false,
@@ -6597,6 +6612,9 @@ ${String(commit).toLowerCase()}`;
         created = Array.isArray(res.created) ? res.created : [];
         affected = Array.isArray(res.affected) ? res.affected : [];
       }
+      if ((domain === "nomos" || domain === "bootstrap") && ["installDomain", "stageDomain", "promoteDomain", "rollbackDomain"].includes(directiveId)) {
+        invalidateInstalledLawRows();
+      }
       scheduleMaintenanceSoon();
       nudgeWatchesSoon();
       const bornFailure = birthOutcomeFailure(res.birthOutcomes);
@@ -6620,7 +6638,7 @@ ${String(commit).toLowerCase()}`;
     if (!domain.trim() || !candidateHash.trim()) {
       return { ok: false, stage: "preflight", error: "the generated model identity is missing" };
     }
-    const candidateInstallation = installRowsInner().find(
+    const candidateInstallation = (installRowsInner() ?? []).find(
       (row) => row?.id === `domain-installation:${candidateHash}`
     );
     const candidatePhase = String(candidateInstallation?.data?.["status.phase"] ?? "");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "githolon",
-  "version": "0.103.6",
+  "version": "0.103.8",
   "type": "module",
   "description": "githolon — the Nomos developer CLI: Rails-style generators for @githolon/dsl domains + the package compiler. Kernel-independent.",
   "license": "SEE LICENSE IN LICENSE.md",
@@ -30,7 +30,7 @@
   "dependencies": {
     "@bjorn3/browser_wasi_shim": "0.4.2",
     "@bufbuild/protobuf": "^2.13.0",
-    "@githolon/dsl": "^0.103.6",
+    "@githolon/dsl": "^0.103.8",
     "isomorphic-git": "^1.38.4",
     "tsx": "^4.19.2"
   },