githolon 0.78.0 → 0.80.0

package/dist/cli.mjs

@@ -1171,8 +1171,9 @@ async function admitIntentOffers(eng, ws, ledger, offers, { receiptFence = null,
     let blob = offer?.blob instanceof Uint8Array ? offer.blob : null;
     try {
       if (!blob && typeof offer?.intentB64 === "string") blob = Uint8Array.from(atob(offer.intentB64), (c) => c.charCodeAt(0));
-      if (!blob || blob.byteLength === 0 || blob.byteLength > 8 * 1024 * 1024) {
-        rec.rejected.push({ oid: String(offer?.oid || "").slice(0, 10), error: "intent offer must carry intentB64 <= 8 MiB" });
+      const maxOfferBytes = offer?.staged ? 64 * 1024 * 1024 : 8 * 1024 * 1024;
+      if (!blob || blob.byteLength === 0 || blob.byteLength > maxOfferBytes) {
+        rec.rejected.push({ oid: String(offer?.oid || "").slice(0, 10), error: `intent offer must carry intentB64 <= ${maxOfferBytes / (1024 * 1024)} MiB` });
         continue;
       }
       let doc = null;
@@ -3010,6 +3011,7 @@ __export(governance_exports, {
   STAGE_THRESHOLD_CHARS: () => STAGE_THRESHOLD_CHARS,
   buildCertificate: () => buildCertificate,
   buildRebirthPlan: () => buildRebirthPlan,
+  canonicalPrincipal: () => canonicalPrincipal,
   certifyEra: () => certifyEra,
   consentRebirth: () => consentRebirth,
   discoverSigningDomain: () => discoverSigningDomain,
@@ -3104,17 +3106,23 @@ function resolveGovernancePrincipal(opts) {
   }
   return principal;
 }
+function canonicalPrincipal(principal) {
+  const s = String(principal ?? "").trim();
+  if (s === "") return "";
+  return s.includes(":") ? s : `user:${s}`;
+}
 async function signAndPostOffer(ws, domain, directiveId, payload, opts) {
   const cloud = cloudBase(opts.cloud);
   const principal = resolveGovernancePrincipal(opts);
   const holon = await connectGovernance(cloud, ws);
+  const resolvedDomain = domain ?? await discoverSigningDomain(holon, ws, directiveId, void 0);
   const device = await ensureDeviceKey(holon, principal);
   const sealed = await holon.signGovernanceOffer({
-    domain,
+    domain: resolvedDomain,
     directiveId,
     payload,
     authorSecret: device.secret,
-    actor: `user:${principal}`
+    actor: canonicalPrincipal(principal)
   });
   if (sealed.intentBytes.length > STAGE_THRESHOLD_CHARS) {
     const staged = await relaySealedOfferViaStage(cloud, ws, directiveId, sealed.intentBytes, fetch);
@@ -3152,7 +3160,7 @@ async function relaySealedOfferViaStage(cloud, ws, directiveId, intentBytesB64,
   return { sha256: sha2562, size: raw.length, verdict: { ok: r.ok, status: r.status, body } };
 }
 async function signAndPostGovernance(parent, directiveId, payload, opts) {
-  return signAndPostOffer(parent, "workspaces", directiveId, payload, opts);
+  return signAndPostOffer(parent, opts.domain, directiveId, payload, opts);
 }
 async function grantOrRevoke(verb, kind, subject, opts) {
   const parent = opts.parent ?? "root";
@@ -3350,7 +3358,7 @@ async function keyEnroll(opts) {
     directiveId,
     payload: enrollPayload,
     authorSecret: device.secret,
-    actor: `user:${principal}`
+    actor: canonicalPrincipal(principal)
   });
   const v = await holon.postGovernanceOffer({ directiveId, intentBytes: sealed.intentBytes, ws: parent });
   if (!v.ok) {
@@ -3481,8 +3489,9 @@ async function governanceOffer(ws, directiveId, opts) {
   if (opts.save !== void 0) {
     try {
       const holon = await connectGovernance(cloudBase(opts.cloud), ws);
+      const domain = await discoverSigningDomain(holon, ws, directiveId, opts.domain);
       const device = await ensureDeviceKey(holon, principal);
-      const sealed = await holon.signGovernanceOffer({ directiveId, payload, authorSecret: device.secret, actor: `user:${principal}` });
+      const sealed = await holon.signGovernanceOffer({ domain, directiveId, payload, authorSecret: device.secret, actor: canonicalPrincipal(principal) });
       writeFileSync4(opts.save, JSON.stringify({ ws, directiveId, principal, intentBytes: sealed.intentBytes }, null, 2) + "\n");
     } catch (e) {
       err2(e.message);
@@ -4133,7 +4142,7 @@ gov rebirth ${ws}:`);
       return 1;
     }
     signSecret = dk.secret;
-    actor = `user:${actorUid}`;
+    actor = canonicalPrincipal(actorUid);
   }
   const res = author2(eng, "root", "workspaces", "rebirthWorkspace", { workspaceId, reason, rebornAt }, controllerHash, { authorSecret: signSecret, actor });
   if (res.ok === false) {
@@ -8378,8 +8387,8 @@ var HELP = {
     ]
   },
   gov: {
-    usage: "githolon gov <ws> <directiveId> [--payload <json> | --payload-file <f>] [--as <uid>] [--stamp] [--save <f>] [--cloud <url>]\n       githolon gov relay <ws> <offer-file> [--cloud <url>]",
-    what: "Author ANY `workspaces` governance directive as a SIGNED offer to <ws> and relay it \u2014 the generic\nlane the grant/ws/key verbs are sugar over. The directive is planned against <ws>'s OWN folded law\n(we connect + sign locally with your enrolled key; the host relays opaque {intentBytes} and the\nkernel re-verifies the signature). SIGNING IS LOCAL: with --save it writes the sealed offer WITHOUT\nrelaying \u2014 sign now, relay later/elsewhere with `gov relay` (the only step that touches the cloud).\nThe acting principal needs an enrolled signing key (githolon key enroll | key import).",
+    usage: "githolon gov <ws> <directiveId> [--domain <d>] [--payload <json> | --payload-file <f>] [--as <uid>] [--stamp] [--save <f>] [--cloud <url>]\n       githolon gov relay <ws> <offer-file> [--cloud <url>]",
+    what: "Author ANY governance directive as a SIGNED offer to <ws> and relay it \u2014 the generic lane. The\ndirective's DOMAIN is discovered from <ws>'s installed law (a tenant-composed domain like\n`co2_platform` routes correctly; --domain overrides; ambiguity names the candidates) \u2014 the generic\nlane the grant/ws/key verbs are sugar over. The directive is planned against <ws>'s OWN folded law\n(we connect + sign locally with your enrolled key; the host relays opaque {intentBytes} and the\nkernel re-verifies the signature). SIGNING IS LOCAL: with --save it writes the sealed offer WITHOUT\nrelaying \u2014 sign now, relay later/elsewhere with `gov relay` (the only step that touches the cloud).\nThe acting principal needs an enrolled signing key (githolon key enroll | key import).",
     flags: [
       ["--payload <json>", `the directive payload as a JSON object string ('{"name":"\u2026"}')`],
       ["--payload-file <f>", "read the payload JSON from a file instead"],
@@ -9021,7 +9030,8 @@ Identity (~/.holon/credentials.json \u2014 sessions auto-refresh):
   githolon key show | export [--principal <uid>]          the device key's public identity (export --yes: secret)
 
 Governance (SIGNED client-side, relayed as {intentBytes} \u2014 never a host-author endpoint):
-  githolon gov <ws> <directive> [--payload <json>]        author ANY workspaces directive as a signed offer
+  githolon gov <ws> <directive> [--domain <d>]            author ANY governance directive (domain discovered
+            [--payload <json>]                            from installed law; --domain overrides) as a signed offer
             [--as <uid>] [--stamp] [--save <file>]        to <ws> (--save signs without relaying; relay later)
   githolon gov relay <ws> <offer-file>                    relay a saved offer (the only step that hits the cloud)
   githolon gov rebirth <ws> --reason <text>               LAWFUL SUPERSESSION (recovery verb 3): supersede a
@@ -9782,7 +9792,7 @@ ${commandHelp("gov") ?? USAGE}`);
     }
     const [ws, directiveId] = pos;
     if (ws === void 0 || directiveId === void 0) {
-      process.stderr.write(`error: expected: githolon gov <ws> <directiveId> [--payload <json>] [--as <uid>]
+      process.stderr.write(`error: expected: githolon gov <ws> <directiveId> [--domain <d>] [--payload <json>] [--as <uid>]
 
 ${commandHelp("gov") ?? USAGE}`);
       return 1;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "githolon",
-  "version": "0.78.0",
+  "version": "0.80.0",
   "type": "module",
   "description": "githolon — the Nomos developer CLI: Rails-style generators for @githolon/dsl domains + the package compiler. Kernel-independent.",
   "license": "SEE LICENSE IN LICENSE.md",
@@ -29,8 +29,8 @@
   },
   "dependencies": {
     "@bjorn3/browser_wasi_shim": "0.4.2",
-    "@githolon/client": "^0.78.0",
-    "@githolon/dsl": "^0.78.0",
+    "@githolon/client": "^0.80.0",
+    "@githolon/dsl": "^0.80.0",
     "isomorphic-git": "^1.38.4"
   },
   "devDependencies": {