githolon 0.105.14 → 0.105.15

package/dist/compile_mountability_entry.js

@@ -555,6 +555,8 @@ var init_kernel_pb = __esm({
 // vendor/engine/engine.ts
 var engine_exports = {};
 __export(engine_exports, {
+  MAX_INLINE_INTENT_OFFER_BYTES: () => MAX_INLINE_INTENT_OFFER_BYTES,
+  MAX_STAGED_INTENT_OFFER_BYTES: () => MAX_STAGED_INTENT_OFFER_BYTES,
   NOMOS_SHARD_ROWS_READ: () => NOMOS_SHARD_ROWS_READ,
   admitAll: () => admitAll,
   admitIntentOffers: () => admitIntentOffers,
@@ -617,6 +619,7 @@ __export(engine_exports, {
   ingestPackAsCustody: () => ingestPackAsCustody,
   installedLaw: () => installedLaw,
   intentOfferResidencies: () => intentOfferResidencies,
+  intentOfferSizeRefusal: () => intentOfferSizeRefusal,
   isDirty: () => isDirty,
   isWarranted: () => isWarranted,
   kernelStamp: () => kernelStamp,
@@ -1623,6 +1626,10 @@ async function replicateIntents(eng, ws, ledger, intents, { push = true } = {})
   log("replicate-globals", { ws, replicated: replicated.length, skipped: skipped.length, refused: refused.length });
   return { replicated, skipped, refused };
 }
+function intentOfferSizeRefusal(staged, byteLength) {
+  const maxOfferBytes = staged ? MAX_STAGED_INTENT_OFFER_BYTES : MAX_INLINE_INTENT_OFFER_BYTES;
+  return byteLength <= 0 || byteLength > maxOfferBytes ? `intent offer must carry changeB64 <= ${maxOfferBytes / (1024 * 1024)} MiB` : null;
+}
 async function admitIntentOffers(eng, ws, ledger, offers, { receiptFence = null, shardRouting = null, clientBase = null } = {}) {
   const main = await mainIntentIds(eng, ws);
   const sessions = /* @__PURE__ */ new Map();
@@ -1694,9 +1701,16 @@ async function admitIntentOffers(eng, ws, ledger, offers, { receiptFence = null,
     let blob = offer?.blob instanceof Uint8Array ? offer.blob : null;
     try {
       if (!blob && typeof offer?.changeB64 === "string") blob = Uint8Array.from(atob(offer.changeB64), (c) => c.charCodeAt(0));
-      const maxOfferBytes = offer?.staged ? 64 * 1024 * 1024 : 32 * 1024 * 1024;
-      if (!blob || blob.byteLength === 0 || blob.byteLength > maxOfferBytes) {
-        rec.rejected.push({ oid: String(offer?.oid || "").slice(0, 10), error: `intent offer must carry changeB64 <= ${maxOfferBytes / (1024 * 1024)} MiB` });
+      if (!blob) {
+        rec.rejected.push({
+          oid: String(offer?.oid || "").slice(0, 10),
+          error: intentOfferSizeRefusal(!!offer?.staged, 0)
+        });
+        continue;
+      }
+      const sizeRefusal = intentOfferSizeRefusal(!!offer?.staged, blob.byteLength);
+      if (sizeRefusal !== null) {
+        rec.rejected.push({ oid: String(offer?.oid || "").slice(0, 10), error: sizeRefusal });
         continue;
       }
       const inspected = kgit.inspectChange(eng, blob);
@@ -3647,7 +3661,7 @@ function warmKernelCaches(eng, opts = {}) {
     ...opts.interactiveOnly ? { interactiveOnly: true } : {}
   });
 }
-var enc3, dec3, BRANCH, PROTO_ABI_VERSION, protoRequestSequence, certificateBytes, protoBirthCertificate, RESULT_PACK_INLINE_MAX, dirOf, repoArgOf, gitdirOf, unpack, unsignedWasiPointers, log, protoTarget, protoAuthority, repoArgOfGitdir, bytesFromB64, kgit, closureInstallPayload, routeTagHexOfHomeKey, SUMMARY_SEP, summaryKey, splitSummaryKey, NOMOS_SHARD_ROWS_READ, groupOf, tallyOf, isExtremumRead, extremumMonotone, CKPT_REF, pushVia, fullRef, applyPackInto, importCustodyObjects, syncCandidate, custodyLsRefs, capturedReadUnix, queryArguments, queryAuthorityOptions, qById, query, queryPage, queryProfile, authorizationAddress, authorizationSubject, currentAuthorizationFrontier, check, expand, cryptoSealField, cryptoOwnedScopeKey, cryptoOwnedDeviceRequest, cryptoOwnedPrepareApproval, cryptoOwnedPrepareRecovery, cryptoKeygen, authorKeygen, eraCertSign, delegationCertSign, attestationSign, certSign, cryptoWrapKey, cryptoUnwrapKey, readPosture, count, sum, pendingConflicts, pendingConflictSummary, spatialBboxParams, spatialWithin, extremum, nomosActive, refusedRefName, GENESIS_WARRANT_ID, isWarranted, projectionStats, memoryDropProbe, readiness;
+var enc3, dec3, BRANCH, PROTO_ABI_VERSION, protoRequestSequence, certificateBytes, protoBirthCertificate, RESULT_PACK_INLINE_MAX, dirOf, repoArgOf, gitdirOf, unpack, unsignedWasiPointers, log, protoTarget, protoAuthority, repoArgOfGitdir, bytesFromB64, kgit, closureInstallPayload, routeTagHexOfHomeKey, SUMMARY_SEP, summaryKey, splitSummaryKey, NOMOS_SHARD_ROWS_READ, groupOf, tallyOf, isExtremumRead, extremumMonotone, MAX_INLINE_INTENT_OFFER_BYTES, MAX_STAGED_INTENT_OFFER_BYTES, CKPT_REF, pushVia, fullRef, applyPackInto, importCustodyObjects, syncCandidate, custodyLsRefs, capturedReadUnix, queryArguments, queryAuthorityOptions, qById, query, queryPage, queryProfile, authorizationAddress, authorizationSubject, currentAuthorizationFrontier, check, expand, cryptoSealField, cryptoOwnedScopeKey, cryptoOwnedDeviceRequest, cryptoOwnedPrepareApproval, cryptoOwnedPrepareRecovery, cryptoKeygen, authorKeygen, eraCertSign, delegationCertSign, attestationSign, certSign, cryptoWrapKey, cryptoUnwrapKey, readPosture, count, sum, pendingConflicts, pendingConflictSummary, spatialBboxParams, spatialWithin, extremum, nomosActive, refusedRefName, GENESIS_WARRANT_ID, isWarranted, projectionStats, memoryDropProbe, readiness;
 var init_engine = __esm({
   "vendor/engine/engine.ts"() {
     "use strict";
@@ -3905,6 +3919,8 @@ var init_engine = __esm({
     tallyOf = (eng, ws, read, group) => read.kind === "count" ? count(eng, ws, read.id, group).count : read.kind === "sum" ? sum(eng, ws, read.id, group).sum : extremum(eng, ws, read.id, read.kind, group).value;
     isExtremumRead = (read) => read.kind === "min" || read.kind === "max";
     extremumMonotone = (read, prev, next) => next === null && prev === null || next !== null && (prev === null || (read.kind === "min" ? next <= prev : next >= prev));
+    MAX_INLINE_INTENT_OFFER_BYTES = 32 * 1024 * 1024;
+    MAX_STAGED_INTENT_OFFER_BYTES = 64 * 1024 * 1024;
     CKPT_REF = (lawHash) => `refs/meta/checkpoint/${lawHash}`;
     pushVia = (ledger, fn) => ledger && ledger.pushLane ? ledger.pushLane(fn) : fn();
     fullRef = (r) => r === "HEAD" || r.startsWith("refs/") ? r : `refs/heads/${r}`;

package/dist/dev-server.mjs

@@ -910,6 +910,10 @@ function summaryOfCapture(ctx, fromOid, toOid) {
     rowsByHome: Object.fromEntries([...ctx.rowsByHome.entries()].sort((a, b) => a[0] < b[0] ? -1 : 1))
   };
 }
+function intentOfferSizeRefusal(staged, byteLength) {
+  const maxOfferBytes = staged ? MAX_STAGED_INTENT_OFFER_BYTES : MAX_INLINE_INTENT_OFFER_BYTES;
+  return byteLength <= 0 || byteLength > maxOfferBytes ? `intent offer must carry changeB64 <= ${maxOfferBytes / (1024 * 1024)} MiB` : null;
+}
 async function admitIntentOffers(eng, ws, ledger, offers, { receiptFence = null, shardRouting = null, clientBase = null } = {}) {
   const main = await mainIntentIds(eng, ws);
   const sessions = /* @__PURE__ */ new Map();
@@ -981,9 +985,16 @@ async function admitIntentOffers(eng, ws, ledger, offers, { receiptFence = null,
     let blob = offer?.blob instanceof Uint8Array ? offer.blob : null;
     try {
       if (!blob && typeof offer?.changeB64 === "string") blob = Uint8Array.from(atob(offer.changeB64), (c) => c.charCodeAt(0));
-      const maxOfferBytes = offer?.staged ? 64 * 1024 * 1024 : 32 * 1024 * 1024;
-      if (!blob || blob.byteLength === 0 || blob.byteLength > maxOfferBytes) {
-        rec.rejected.push({ oid: String(offer?.oid || "").slice(0, 10), error: `intent offer must carry changeB64 <= ${maxOfferBytes / (1024 * 1024)} MiB` });
+      if (!blob) {
+        rec.rejected.push({
+          oid: String(offer?.oid || "").slice(0, 10),
+          error: intentOfferSizeRefusal(!!offer?.staged, 0)
+        });
+        continue;
+      }
+      const sizeRefusal = intentOfferSizeRefusal(!!offer?.staged, blob.byteLength);
+      if (sizeRefusal !== null) {
+        rec.rejected.push({ oid: String(offer?.oid || "").slice(0, 10), error: sizeRefusal });
         continue;
       }
       const inspected = kgit.inspectChange(eng, blob);
@@ -2153,7 +2164,7 @@ async function ledgerStats(eng, ws, ledger = null) {
   if (mounted) mounted.ledgerStats = out;
   return out;
 }
-var enc3, dec3, BRANCH, PROTO_ABI_VERSION, protoRequestSequence, certificateBytes, protoBirthCertificate, RESULT_PACK_INLINE_MAX, dirOf, repoArgOf, gitdirOf, unpack, unsignedWasiPointers, log, protoTarget, protoAuthority, repoArgOfGitdir, bytesFromB64, kgit, closureInstallPayload, routeTagHexOfHomeKey, SUMMARY_SEP, summaryKey, splitSummaryKey, NOMOS_SHARD_ROWS_READ, groupOf, tallyOf, isExtremumRead, extremumMonotone, CKPT_REF, pushVia, fullRef, applyPackInto, custodyLsRefs, capturedReadUnix, queryArguments, queryAuthorityOptions, qById, query, authorKeygen, certSign, readPosture, count, sum, pendingConflicts, pendingConflictSummary, spatialBboxParams, spatialWithin, extremum, nomosActive, refusedRefName, GENESIS_WARRANT_ID, isWarranted;
+var enc3, dec3, BRANCH, PROTO_ABI_VERSION, protoRequestSequence, certificateBytes, protoBirthCertificate, RESULT_PACK_INLINE_MAX, dirOf, repoArgOf, gitdirOf, unpack, unsignedWasiPointers, log, protoTarget, protoAuthority, repoArgOfGitdir, bytesFromB64, kgit, closureInstallPayload, routeTagHexOfHomeKey, SUMMARY_SEP, summaryKey, splitSummaryKey, NOMOS_SHARD_ROWS_READ, groupOf, tallyOf, isExtremumRead, extremumMonotone, MAX_INLINE_INTENT_OFFER_BYTES, MAX_STAGED_INTENT_OFFER_BYTES, CKPT_REF, pushVia, fullRef, applyPackInto, custodyLsRefs, capturedReadUnix, queryArguments, queryAuthorityOptions, qById, query, authorKeygen, certSign, readPosture, count, sum, pendingConflicts, pendingConflictSummary, spatialBboxParams, spatialWithin, extremum, nomosActive, refusedRefName, GENESIS_WARRANT_ID, isWarranted;
 var init_engine = __esm({
   "../adapter/engine.ts"() {
     "use strict";
@@ -2411,6 +2422,8 @@ var init_engine = __esm({
     tallyOf = (eng, ws, read, group) => read.kind === "count" ? count(eng, ws, read.id, group).count : read.kind === "sum" ? sum(eng, ws, read.id, group).sum : extremum(eng, ws, read.id, read.kind, group).value;
     isExtremumRead = (read) => read.kind === "min" || read.kind === "max";
     extremumMonotone = (read, prev, next) => next === null && prev === null || next !== null && (prev === null || (read.kind === "min" ? next <= prev : next >= prev));
+    MAX_INLINE_INTENT_OFFER_BYTES = 32 * 1024 * 1024;
+    MAX_STAGED_INTENT_OFFER_BYTES = 64 * 1024 * 1024;
     CKPT_REF = (lawHash) => `refs/meta/checkpoint/${lawHash}`;
     pushVia = (ledger, fn) => ledger && ledger.pushLane ? ledger.pushLane(fn) : fn();
     fullRef = (r) => r === "HEAD" || r.startsWith("refs/") ? r : `refs/heads/${r}`;

package/dist/full-cli.mjs

@@ -5015,8 +5015,8 @@ function createGovernanceOffers(ctx) {
     },
     /**
      * PARENT-AUTHORITY POSTURE (read-only diagnostic): is `identity:<principal>#signer@key:<keyHash>`
-     * a LIVE tuple on `parent`'s chain? Reads the parent's declared `relationTuplesByObject` query over
-     * the open gateway — one O(1) relation read, no authoring. Returns
+     * a LIVE tuple on `parent`'s chain? Reads the tuple's deterministic aggregate address over the
+     * generic record lane — one O(1) read, no authoring and no ambiguous query alias in composed law. Returns
      * `{ parent, principal, keyHash, object, relation, enrolled, revoked, checkedAt }`.
      * `revoked: true` means the subject's leaf was flipped `status:revoked` (remove-wins — a lawful
      * re-enroll of the SAME key is refused; mint + enroll a new device key instead).
@@ -5030,19 +5030,13 @@ function createGovernanceOffers(ctx) {
         keyHash = await sha256hexBytes2(bytesUnb642(publicKey));
       }
       const object = signerObjectOf(p);
+      const aggregateId = `reltuple-${object}-signer`;
       let rows;
       if (parent === workspace && !remote) {
-        rows = JSON.parse(call("query", { queryBytes: qBytes2({ kind: "query", queryId: "relationTuplesByObject", paramsJson: JSON.stringify({ object }) }) })) || [];
+        rows = JSON.parse(call("query", { queryBytes: qBytes2({ op: "byId", aggregateId }) })) || [];
       } else {
         const headers = authToken ? { Authorization: `Bearer ${authToken}`, "x-nomos-auth": authToken } : authHeaders;
-        const route = await resolveFrameworkRoute({
-          parent,
-          operationId: "relationTuplesByObject",
-          method: "get",
-          token: authToken,
-          principal: p
-        });
-        const r = await _fetch(`${base}/v2/workspaces/${parent}${route.path}?object=${encodeURIComponent(object)}`, { headers });
+        const r = await _fetch(`${base}/v2/workspaces/${parent}/aggregates/${encodeURIComponent(aggregateId)}`, { headers });
         const text = await r.text();
         let body;
         try {
@@ -5050,7 +5044,7 @@ function createGovernanceOffers(ctx) {
         } catch {
           body = text;
         }
-        if (!r.ok) throw new Error(`parentSignerEnrollment: reading ${parent}'s relationTuplesByObject failed (${r.status}): ${typeof body === "string" ? body.slice(0, 200) : JSON.stringify(body).slice(0, 200)}`);
+        if (!r.ok) throw new Error(`parentSignerEnrollment: reading ${parent}'s signer tuple failed (${r.status}): ${typeof body === "string" ? body.slice(0, 200) : JSON.stringify(body).slice(0, 200)}`);
         rows = Array.isArray(body) ? body : body && Array.isArray(body.rows) ? body.rows : [];
       }
       let enrolled = false, revoked = false, verifiedVia;
@@ -12147,6 +12141,8 @@ var init_kernel_pb2 = __esm({
 // vendor/engine/engine.ts
 var engine_exports = {};
 __export(engine_exports, {
+  MAX_INLINE_INTENT_OFFER_BYTES: () => MAX_INLINE_INTENT_OFFER_BYTES,
+  MAX_STAGED_INTENT_OFFER_BYTES: () => MAX_STAGED_INTENT_OFFER_BYTES,
   NOMOS_SHARD_ROWS_READ: () => NOMOS_SHARD_ROWS_READ,
   admitAll: () => admitAll,
   admitIntentOffers: () => admitIntentOffers,
@@ -12209,6 +12205,7 @@ __export(engine_exports, {
   ingestPackAsCustody: () => ingestPackAsCustody,
   installedLaw: () => installedLaw,
   intentOfferResidencies: () => intentOfferResidencies,
+  intentOfferSizeRefusal: () => intentOfferSizeRefusal,
   isDirty: () => isDirty,
   isWarranted: () => isWarranted,
   kernelStamp: () => kernelStamp,
@@ -13215,6 +13212,10 @@ async function replicateIntents(eng, ws, ledger, intents, { push = true } = {})
   log("replicate-globals", { ws, replicated: replicated.length, skipped: skipped.length, refused: refused.length });
   return { replicated, skipped, refused };
 }
+function intentOfferSizeRefusal(staged, byteLength) {
+  const maxOfferBytes = staged ? MAX_STAGED_INTENT_OFFER_BYTES : MAX_INLINE_INTENT_OFFER_BYTES;
+  return byteLength <= 0 || byteLength > maxOfferBytes ? `intent offer must carry changeB64 <= ${maxOfferBytes / (1024 * 1024)} MiB` : null;
+}
 async function admitIntentOffers(eng, ws, ledger, offers, { receiptFence = null, shardRouting = null, clientBase = null } = {}) {
   const main2 = await mainIntentIds(eng, ws);
   const sessions = /* @__PURE__ */ new Map();
@@ -13286,9 +13287,16 @@ async function admitIntentOffers(eng, ws, ledger, offers, { receiptFence = null,
     let blob = offer?.blob instanceof Uint8Array ? offer.blob : null;
     try {
       if (!blob && typeof offer?.changeB64 === "string") blob = Uint8Array.from(atob(offer.changeB64), (c) => c.charCodeAt(0));
-      const maxOfferBytes = offer?.staged ? 64 * 1024 * 1024 : 32 * 1024 * 1024;
-      if (!blob || blob.byteLength === 0 || blob.byteLength > maxOfferBytes) {
-        rec.rejected.push({ oid: String(offer?.oid || "").slice(0, 10), error: `intent offer must carry changeB64 <= ${maxOfferBytes / (1024 * 1024)} MiB` });
+      if (!blob) {
+        rec.rejected.push({
+          oid: String(offer?.oid || "").slice(0, 10),
+          error: intentOfferSizeRefusal(!!offer?.staged, 0)
+        });
+        continue;
+      }
+      const sizeRefusal = intentOfferSizeRefusal(!!offer?.staged, blob.byteLength);
+      if (sizeRefusal !== null) {
+        rec.rejected.push({ oid: String(offer?.oid || "").slice(0, 10), error: sizeRefusal });
         continue;
       }
       const inspected = kgit.inspectChange(eng, blob);
@@ -15239,7 +15247,7 @@ function warmKernelCaches(eng, opts = {}) {
     ...opts.interactiveOnly ? { interactiveOnly: true } : {}
   });
 }
-var enc7, dec7, BRANCH2, PROTO_ABI_VERSION2, protoRequestSequence2, certificateBytes2, protoBirthCertificate2, RESULT_PACK_INLINE_MAX, dirOf, repoArgOf, gitdirOf, unpack2, unsignedWasiPointers2, log, protoTarget2, protoAuthority, repoArgOfGitdir, bytesFromB64, kgit, closureInstallPayload, routeTagHexOfHomeKey2, SUMMARY_SEP, summaryKey, splitSummaryKey, NOMOS_SHARD_ROWS_READ, groupOf, tallyOf, isExtremumRead, extremumMonotone, CKPT_REF, pushVia, fullRef, applyPackInto, importCustodyObjects, syncCandidate, custodyLsRefs, capturedReadUnix, queryArguments, queryAuthorityOptions, qById, query2, queryPage, queryProfile, authorizationAddress, authorizationSubject, currentAuthorizationFrontier, check, expand, cryptoSealField, cryptoOwnedScopeKey, cryptoOwnedDeviceRequest, cryptoOwnedPrepareApproval, cryptoOwnedPrepareRecovery, cryptoKeygen, authorKeygen, eraCertSign, delegationCertSign, attestationSign, certSign, cryptoWrapKey, cryptoUnwrapKey, readPosture, count, sum, pendingConflicts, pendingConflictSummary, spatialBboxParams, spatialWithin, extremum, nomosActive, refusedRefName, GENESIS_WARRANT_ID, isWarranted, projectionStats, memoryDropProbe, readiness;
+var enc7, dec7, BRANCH2, PROTO_ABI_VERSION2, protoRequestSequence2, certificateBytes2, protoBirthCertificate2, RESULT_PACK_INLINE_MAX, dirOf, repoArgOf, gitdirOf, unpack2, unsignedWasiPointers2, log, protoTarget2, protoAuthority, repoArgOfGitdir, bytesFromB64, kgit, closureInstallPayload, routeTagHexOfHomeKey2, SUMMARY_SEP, summaryKey, splitSummaryKey, NOMOS_SHARD_ROWS_READ, groupOf, tallyOf, isExtremumRead, extremumMonotone, MAX_INLINE_INTENT_OFFER_BYTES, MAX_STAGED_INTENT_OFFER_BYTES, CKPT_REF, pushVia, fullRef, applyPackInto, importCustodyObjects, syncCandidate, custodyLsRefs, capturedReadUnix, queryArguments, queryAuthorityOptions, qById, query2, queryPage, queryProfile, authorizationAddress, authorizationSubject, currentAuthorizationFrontier, check, expand, cryptoSealField, cryptoOwnedScopeKey, cryptoOwnedDeviceRequest, cryptoOwnedPrepareApproval, cryptoOwnedPrepareRecovery, cryptoKeygen, authorKeygen, eraCertSign, delegationCertSign, attestationSign, certSign, cryptoWrapKey, cryptoUnwrapKey, readPosture, count, sum, pendingConflicts, pendingConflictSummary, spatialBboxParams, spatialWithin, extremum, nomosActive, refusedRefName, GENESIS_WARRANT_ID, isWarranted, projectionStats, memoryDropProbe, readiness;
 var init_engine = __esm({
   "vendor/engine/engine.ts"() {
     "use strict";
@@ -15497,6 +15505,8 @@ var init_engine = __esm({
     tallyOf = (eng, ws, read, group) => read.kind === "count" ? count(eng, ws, read.id, group).count : read.kind === "sum" ? sum(eng, ws, read.id, group).sum : extremum(eng, ws, read.id, read.kind, group).value;
     isExtremumRead = (read) => read.kind === "min" || read.kind === "max";
     extremumMonotone = (read, prev, next) => next === null && prev === null || next !== null && (prev === null || (read.kind === "min" ? next <= prev : next >= prev));
+    MAX_INLINE_INTENT_OFFER_BYTES = 32 * 1024 * 1024;
+    MAX_STAGED_INTENT_OFFER_BYTES = 64 * 1024 * 1024;
     CKPT_REF = (lawHash) => `refs/meta/checkpoint/${lawHash}`;
     pushVia = (ledger, fn) => ledger && ledger.pushLane ? ledger.pushLane(fn) : fn();
     fullRef = (r) => r === "HEAD" || r.startsWith("refs/") ? r : `refs/heads/${r}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "githolon",
-  "version": "0.105.14",
+  "version": "0.105.15",
   "type": "module",
   "description": "githolon — the Nomos developer CLI: Rails-style generators for @githolon/dsl domains + the package compiler. Kernel-independent.",
   "license": "SEE LICENSE IN LICENSE.md",
@@ -30,7 +30,7 @@
   "dependencies": {
     "@bjorn3/browser_wasi_shim": "0.4.2",
     "@bufbuild/protobuf": "^2.13.0",
-    "@githolon/dsl": "^0.105.14",
+    "@githolon/dsl": "^0.105.15",
     "isomorphic-git": "^1.38.4",
     "tsx": "^4.19.2"
   },