githolon 0.83.0 → 0.84.1

package/dist/cli.mjs

@@ -9448,7 +9448,8 @@ ${commandHelp("dev")}`);
     if (sub2 !== "dev") {
       process.stderr.write(`error: unknown cloud subcommand '${sub2 ?? ""}'
 usage: githolon cloud dev [--port <n>] [--data <dir>] [--ephemeral]
-                         [--platform <name>] [--deploy <file>] [--auth-provider <p>] [--firebase-project <id>] [--bootstrap]
+                         [--platform <name>] [--deploy <file>] [--auth-provider <p>] [--firebase-project <id>]
+                         [--bootstrap] [--attested] [--kernel-source <url>]
 `);
       return 1;
     }

package/dist/dev-server.mjs

@@ -1412,7 +1412,7 @@ init_engine();
 init_custody_transport();
 import http from "node:http";
 import { createHash, randomBytes } from "node:crypto";
-import { readFileSync as readFileSync2, existsSync as existsSync2, mkdirSync as mkdirSync2, mkdtempSync } from "node:fs";
+import { readFileSync as readFileSync2, writeFileSync, existsSync as existsSync2, mkdirSync as mkdirSync2, mkdtempSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import path from "node:path";
 import os from "node:os";
@@ -1596,21 +1596,61 @@ function firstExisting(...paths) {
   }
   return null;
 }
-function loadRuntime() {
+var TEST_MINT_MARKER = Buffer.from("set_test_k_root");
+var isTestMintBytes = (bytes) => bytes.includes(TEST_MINT_MARKER);
+var DEFAULT_KERNEL_SOURCE = "https://nomos.captainapp.co.uk";
+async function resolveTestMintWasm(kernelSource) {
+  const runtimeCache = path.join(configDir(), "runtime");
+  const cachePath = path.join(runtimeCache, "holon-testmint.wasm");
+  const local = process.env.NOMOS_LOCAL_WASM;
+  if (local && existsSync2(local)) {
+    const bytes = readFileSync2(local);
+    if (isTestMintBytes(bytes)) return { wasmPath: local, wasmBytes: bytes, kernelKind: "test-mint", kernelSource: "NOMOS_LOCAL_WASM" };
+  }
+  if (existsSync2(cachePath)) {
+    const bytes = readFileSync2(cachePath);
+    if (isTestMintBytes(bytes)) return { wasmPath: cachePath, wasmBytes: bytes, kernelKind: "test-mint", kernelSource: "cache" };
+  }
+  const src = String(kernelSource || process.env.NOMOS_KERNEL_SOURCE || DEFAULT_KERNEL_SOURCE).replace(/\/+$/, "");
+  const url = `${src}/v1/runtime/holon-testmint.wasm`;
+  try {
+    const resp = await _realFetch(url);
+    if (resp.ok) {
+      const bytes = Buffer.from(await resp.arrayBuffer());
+      if (isTestMintBytes(bytes)) {
+        mkdirSync2(runtimeCache, { recursive: true });
+        writeFileSync(cachePath, bytes);
+        return { wasmPath: cachePath, wasmBytes: bytes, kernelKind: "test-mint", kernelSource: `fetched ${url}` };
+      }
+    }
+  } catch {
+  }
+  throw new Error(
+    `attested births need the test-mint kernel; it couldn't be fetched from ${src} (offline?) \u2014 build one: git-holon/build_wasm.sh --release --features test-mint --bin wasm_git_holon and set NOMOS_LOCAL_WASM`
+  );
+}
+async function loadRuntime(opts = {}) {
   const runtimeCache = path.join(configDir(), "runtime");
   const repoDomainsDir = path.join(REPO_ROOT, "cloud/cloudflare-shell/container/domains");
   const vendoredFrameworkDir = path.join(DIR, "framework");
-  const wasmPath = firstExisting(
-    process.env.NOMOS_LOCAL_WASM,
-    path.join(REPO_ROOT, "cloud/cloudflare-shell/container/vendor/wasm_git_holon.wasm"),
-    path.join(runtimeCache, "holon.wasm")
-  );
-  if (!wasmPath) {
-    throw new Error(
-      "no kernel wasm found. Warm the kernel first:\n  \u2022 set NOMOS_LOCAL_WASM=<path to holon.wasm>, OR\n  \u2022 run any `githolon` cloud command once (e.g. `githolon ledger verify \u2026`) to cache ~/.holon/runtime/holon.wasm\n  (attested births additionally require a test-mint wasm via NOMOS_LOCAL_WASM)"
+  let wasmPath, wasmBytes, kernelKind, kernelSource;
+  if (opts.attested) {
+    ({ wasmPath, wasmBytes, kernelKind, kernelSource } = await resolveTestMintWasm(opts.kernelSource));
+  } else {
+    wasmPath = firstExisting(
+      process.env.NOMOS_LOCAL_WASM,
+      path.join(REPO_ROOT, "cloud/cloudflare-shell/container/vendor/wasm_git_holon.wasm"),
+      path.join(runtimeCache, "holon.wasm")
     );
+    if (!wasmPath) {
+      throw new Error(
+        "no kernel wasm found. Warm the kernel first:\n  \u2022 set NOMOS_LOCAL_WASM=<path to holon.wasm>, OR\n  \u2022 run any `githolon` cloud command once (e.g. `githolon ledger verify \u2026`) to cache ~/.holon/runtime/holon.wasm\n  (attested births additionally require a test-mint wasm \u2014 pass --bootstrap or --attested)"
+      );
+    }
+    wasmBytes = readFileSync2(wasmPath);
+    kernelKind = isTestMintBytes(wasmBytes) ? "test-mint" : "production";
+    kernelSource = wasmPath === process.env.NOMOS_LOCAL_WASM ? "NOMOS_LOCAL_WASM" : wasmPath.startsWith(runtimeCache) ? "cache" : "repo-vendor";
   }
-  const wasmBytes = readFileSync2(wasmPath);
   const repoBootstrap = firstExisting(path.join(repoDomainsDir, "domain_bootstrap.package.usda"));
   const repoNomos = firstExisting(path.join(repoDomainsDir, "domain_nomos.package.usda"));
   let bootstrapPkg, nomosPkg;
@@ -1631,7 +1671,7 @@ function loadRuntime() {
     bootstrapPkg = pkgs.bootstrap;
     nomosPkg = pkgs.nomos;
   }
-  return { wasmPath, wasmBytes, bootstrapPkg, nomosPkg };
+  return { wasmPath, wasmBytes, bootstrapPkg, nomosPkg, kernelKind, kernelSource };
 }
 async function startDevCloud(opts = {}) {
   const port = opts.port || 8787;
@@ -1640,7 +1680,9 @@ async function startDevCloud(opts = {}) {
   const ephemeral = !!opts.ephemeral;
   const dataDir = ephemeral ? mkdtempSync(path.join(os.tmpdir(), "nomos-dev-cloud-")) : path.resolve(opts.data || ".nomos/dev-cloud");
   mkdirSync2(dataDir, { recursive: true });
-  const { wasmPath, wasmBytes, bootstrapPkg, nomosPkg } = loadRuntime();
+  const attested = !!(opts.attested || opts.bootstrap);
+  const { wasmPath, wasmBytes, bootstrapPkg, nomosPkg, kernelKind, kernelSource } = await loadRuntime({ attested, kernelSource: opts.kernelSource });
+  console.log(`[dev-cloud]   kernel   : ${kernelKind} (from ${kernelSource})`);
   const wasmModule = await WebAssembly.compile(wasmBytes);
   const kernelSha = createHash("sha256").update(wasmBytes).digest("hex");
   const enc4 = new TextEncoder();
@@ -1732,6 +1774,13 @@ async function startDevCloud(opts = {}) {
         return res.end();
       }
       if (url.pathname === "/health") return sendJson(res, { ok: true, kernelSha, dataDir, wasmPath, workspaces: custody.list() });
+      if (url.pathname === "/v1/runtime/holon.wasm" || url.pathname === "/v1/runtime/holon-testmint.wasm") {
+        res.writeHead(200, { ...CORS, "content-type": "application/wasm", "cache-control": "no-store", "x-nomos-kernel": kernelKind, "x-nomos-kernel-sha": kernelSha });
+        return res.end(Buffer.from(wasmBytes));
+      }
+      if (url.pathname === "/v1/runtime/packages") {
+        return sendJson(res, { bootstrap: bootstrapPkg, nomos: nomosPkg });
+      }
       if (seg[0] === "git" && seg[1] === "nomos") {
         return await gitBackend(req, res, seg.slice(2).join("/"), null);
       }
@@ -2010,6 +2059,8 @@ function parseArgs(argv) {
     else if (a === "--deploy") o.deploy = argv[++i];
     else if (a === "--auth-provider") o.authProvider = argv[++i];
     else if (a === "--bootstrap") o.bootstrap = true;
+    else if (a === "--attested") o.attested = true;
+    else if (a === "--kernel-source") o.kernelSource = argv[++i];
   }
   return o;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "githolon",
-  "version": "0.83.0",
+  "version": "0.84.1",
   "type": "module",
   "description": "githolon — the Nomos developer CLI: Rails-style generators for @githolon/dsl domains + the package compiler. Kernel-independent.",
   "license": "SEE LICENSE IN LICENSE.md",
@@ -29,8 +29,8 @@
   },
   "dependencies": {
     "@bjorn3/browser_wasi_shim": "0.4.2",
-    "@githolon/client": "^0.83.0",
-    "@githolon/dsl": "^0.83.0",
+    "@githolon/client": "^0.84.1",
+    "@githolon/dsl": "^0.84.1",
     "isomorphic-git": "^1.38.4"
   },
   "devDependencies": {