githolon 0.47.0 → 0.48.1

package/dist/cli.mjs

@@ -1618,7 +1618,7 @@ function author(eng, ws, domain, directiveId, payload, controllerHash, opts = {}
     writeWork(eng, `envelope-${seq}.json`, enc3.encode(stringifyBig(envelope)));
     v = offerOnce();
   }
-  const res = v.outcome === "admitted" ? { ok: true, head: v.head, intentOut: v.intentOut, ...v.born ? { born: v.born } : {} } : v.outcome === "refused" ? { ok: false, error: v.verdict?.reason ?? v.error } : v;
+  const res = v.outcome === "admitted" ? { ok: true, head: v.head, intentOut: v.intentOut, ...v.born ? { born: v.born } : {}, ...v.birthOutcomes ? { birthOutcomes: v.birthOutcomes } : {} } : v.outcome === "refused" ? { ok: false, error: v.verdict?.reason ?? v.error } : v;
   if (defer && res.ok) (eng.pendingProjection ??= /* @__PURE__ */ new Set()).add(ws);
   return res;
 }
@@ -2044,14 +2044,30 @@ function runChildBirthLeg(eng, ws, lawHash, cb, frameworkHash) {
   }
   const childWs = (res.born ?? []).map((b) => b?.workspace).find((w) => typeof w === "string" && w.length > 0);
   if (childWs === void 0) {
+    const planReturnHint = "\n    fix: the named step's plan must RETURN AN ARRAY of ops \u2014 fluent builders (ensure()/create().set(...)) record themselves, so end the plan with `return [];`, or wrap standalone ops in `[ ... ]`. Then recompile and rerun.";
+    const recipeHint = "\n    fix: the named genesis step is what the child's own gate refused \u2014 correct that directive/payload in the recipe and recompile. A working template: bench/scale/fixtures/estate-birth.";
+    const failing = (res.birthOutcomes ?? []).find((o) => o?.status === "failed" || o?.status === "deferred");
+    if (failing !== void 0) {
+      const reason = String(failing.reason ?? "unknown");
+      const what = failing.status === "deferred" ? `the birth of '${failing.workspace}' was DEFERRED to the edge (no local child custody):
+    ${reason}
+    (expected on a host-less/native peer \u2014 the edge materializes the child on next sync; not a law bug)` : `the child genesis of '${failing.workspace}' FAILED inside the kernel's birth offer-effect:
+    ${reason}${/not iterable/.test(reason) ? planReturnHint : recipeHint}`;
+      return done(false, `child birth ${cb.parentDomain}/${cb.birthDirectiveId} admitted, but ${what}`);
+    }
     const kernelSays = eng.STDERR?.filter((l) => l.includes("birth-effect-failed")).at(-1);
     if (kernelSays !== void 0) {
-      const hint = /not iterable/.test(kernelSays) ? "\n    fix: the named step's plan must RETURN AN ARRAY of ops \u2014 fluent builders (ensure()/create().set(...)) record themselves, so end the plan with `return [];`, or wrap standalone ops in `[ ... ]`. Then recompile and rerun." : "\n    fix: the named genesis step is what the child's own gate refused \u2014 correct that directive/payload in the recipe and recompile. A working template: bench/scale/fixtures/estate-birth.";
+      const hint = /not iterable/.test(kernelSays) ? planReturnHint : recipeHint;
       return done(false, `child birth ${cb.parentDomain}/${cb.birthDirectiveId} admitted, but the child genesis FAILED inside the kernel's birth offer-effect:
     ${kernelSays.replace(/^nomos:\s*/, "")}${hint}`);
     }
     return done(false, `child birth ${cb.parentDomain}/${cb.birthDirectiveId} admitted but the offer-effect spawned no child (born=${JSON.stringify(res.born ?? [])}) and the kernel logged no birth-effect failure \u2014 check the recipe carries a genesis chain (birth({ workspace, genesisChain })), and that the runtime wasm is current (~/.holon/runtime)`);
   }
+  const downgraded = (res.birthOutcomes ?? []).find((o) => o?.workspace === childWs && o?.status === "unwarranted-cert");
+  if (downgraded !== void 0) {
+    const checks = downgraded.certChecks !== void 0 ? ` certChecks=${JSON.stringify(downgraded.certChecks)}` : "";
+    lines.push(`\u26A0 child ${childWs} was born UNWARRANTED \u2014 ${String(downgraded.reason ?? "cert not seeded")}${checks}`);
+  }
   lines.push(`\u2713 child birth ${cb.parentDomain}/${cb.birthDirectiveId} \u2014 ${childWs} born (the offer-effect folded the child genesis through the child's OWN gate)`);
   const installed = (hash) => {
     try {
@@ -4851,12 +4867,12 @@ deploy is OPEN + kernel-gated \u2014 births return no host secret, ownership is
   githolon ws reclaim <name> [--parent <ws>]              lawful custody discard via a SIGNED governance offer
                                                        (only a retired workspace; never root)
   githolon deploy [<ws>] [--file <deploy.json>]           deploy build/*.deploy.json \u2014 DEFAULT replace-current:
-            [--keep-beside] [--retire-replaced]           the new law SUPERSEDES the prior install per domain
-                                                       key (prints what moved). --keep-beside installs
-                                                       beside; --retire-replaced supersedes via Retired
-  githolon domains status <ws>                            per domain key: the current served law + phase +
-            [--explain-current-interface]                superseded/retired lineage (the served frontier)
-  githolon domains retire <ws> <hashOrKey>                retire an install (marks it Retired \u2014 replayable,
+            [--keep-beside] [--retire-replaced]           new law becomes active; prior install is superseded
+                                                       per domain key (prints what moved). --keep-beside
+                                                       installs beside; --retire-replaced marks retired
+  githolon domains status <ws>                            per domain key: active law plus superseded/retired
+            [--explain-current-interface]                lineage (active = served now)
+  githolon domains retire <ws> <hashOrKey>                retire an install (marks it retired \u2014 replayable,
             [--with <hashOrKey>]                          no longer served) via a signed installDomain offer
   githolon secret set <ws> <push-password>                store a git push password (push-to-create birth lane)
   githolon secret rotate <ws>                             RETIRED \u2014 host holds no ownership credential (410)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "githolon",
-  "version": "0.47.0",
+  "version": "0.48.1",
   "type": "module",
   "description": "githolon — the Nomos developer CLI: Rails-style generators for @githolon/dsl domains + the package compiler. Kernel-independent.",
   "license": "SEE LICENSE IN LICENSE.md",
@@ -29,8 +29,8 @@
   },
   "dependencies": {
     "@bjorn3/browser_wasi_shim": "0.4.2",
-    "@githolon/client": "^0.47.0",
-    "@githolon/dsl": "^0.47.0",
+    "@githolon/client": "^0.48.1",
+    "@githolon/dsl": "^0.48.1",
     "isomorphic-git": "^1.38.4"
   },
   "devDependencies": {