@githolon/dsl 0.100.4 → 0.100.6

package/dart/test/first_app_gauntlet_test.dart

@@ -5,8 +5,8 @@
 // by CI, not by a tenant.
 //
 // Structure: ONE test, numbered legs, fail-fast — a failure names its leg, so CI output reads as
-// a checklist. Reuses the existing fixtures (estate-birth, surfaced, catalogue-src/-reader); no
-// new law.
+// a checklist. Its first act uses the one-business-birth CO2 example: the same tenant source and
+// generated client a real Flutter app consumes, never a harness-only birth recipe.
 //
 // Prereqs (fixtures compiled + a warm ~/.holon/runtime): locally the test SKIPS with the recipe
 // when they are missing; in CI the job sets NOMOS_GAUNTLET_REQUIRED=1 so a missing prereq is a
@@ -14,24 +14,20 @@
 @TestOn('vm')
 library;
 
-import 'dart:convert';
 import 'dart:io';
 
-import 'package:crypto/crypto.dart' show sha256;
-
 import 'package:nomos_client/nomos_headless.dart';
 import 'package:test/test.dart';
 
-import '../../../bench/scale/fixtures/estate-birth/build/dart/src/generated/home.client.dart';
-import '../../../bench/scale/fixtures/estate-birth/build/dart/src/generated/estate.client.dart'
-    show EstateClient, SeedEstateWorkspacePayload;
+import '../../../examples/co2-birth/build/dart/src/generated/co2.client.dart';
 
 String get _root => '${Directory.current.path}/../..';
 String get _repoEntry => '$_root/cloud/web-client/runner/node-entry.ts';
-String get _homeDeploy =>
-    '$_root/bench/scale/fixtures/estate-birth/build/estate-birth.deploy.json';
-String get _docsDeploy => '$_root/bench/scale/fixtures/surfaced/build/surfaced.deploy.json';
-String get _catDeploy => '$_root/bench/scale/fixtures/catalogue-src/build/cat.deploy.json';
+String get _homeDeploy => '$_root/examples/co2-birth/build/co2.deploy.json';
+String get _docsDeploy =>
+    '$_root/bench/scale/fixtures/surfaced/build/surfaced.deploy.json';
+String get _catDeploy =>
+    '$_root/bench/scale/fixtures/catalogue-src/build/cat.deploy.json';
 String get _readerDeploy =>
     '$_root/bench/scale/fixtures/catalogue-reader/build/estate.deploy.json';
 String get _runtimeDir =>
@@ -42,9 +38,10 @@ const _owner = 'user:gauntlet-owner';
 const _keyed = 'catalogue';
 
 String? _missingPrereq() {
-  if (!File(_repoEntry).existsSync()) return 'in-repo runner not found at $_repoEntry';
+  if (!File(_repoEntry).existsSync())
+    return 'in-repo runner not found at $_repoEntry';
   final fixtures = {
-    _homeDeploy: 'bench/scale/fixtures/estate-birth',
+    _homeDeploy: 'examples/co2-birth',
     _docsDeploy: 'bench/scale/fixtures/surfaced',
     _catDeploy: 'bench/scale/fixtures/catalogue-src',
     _readerDeploy: 'bench/scale/fixtures/catalogue-reader',
@@ -54,10 +51,10 @@ String? _missingPrereq() {
       return 'missing fixture ${e.key} — compile it: (cd ${e.value} && node ../../../../dsl/compile_package.mjs)';
     }
   }
-  if (!File('$_runtimeDir/holon.wasm').existsSync() ||
+  if (!File('$_runtimeDir/holon-testmint.wasm').existsSync() ||
       !File('$_runtimeDir/packages.json').existsSync()) {
-    return 'warm ~/.holon/runtime first (run any `githolon` command once, or curl '
-        '/v1/runtime/holon.wasm + /v1/runtime/packages from the cloud)';
+    return 'warm ~/.holon/runtime first (run any `githolon` command once, or fetch '
+        '/v1/runtime/holon-testmint.wasm + /v1/runtime/packages from the cloud)';
   }
   return null;
 }
@@ -74,18 +71,22 @@ Future<T> _leg<T>(String name, Future<T> Function() body) async {
     print('✔ GAUNTLET $name (${sw.elapsedMilliseconds}ms)');
     return r;
   } catch (e, st) {
-    throw TestFailure('GAUNTLET $name FAILED after ${sw.elapsedMilliseconds}ms:\n$e\n$st');
+    throw TestFailure(
+        'GAUNTLET $name FAILED after ${sw.elapsedMilliseconds}ms:\n$e\n$st');
   }
 }
 
 void main() {
-  test('THE FIRST-FIVE-MINUTES GAUNTLET: harness → blessed shape → local posture → '
-      'acquire → reactive reads → attested read → diagnostics → disposal', () async {
+  test(
+      'THE FIRST-FIVE-MINUTES GAUNTLET: harness → blessed shape → local posture → '
+      'acquire → reactive reads → attested read → diagnostics → disposal',
+      () async {
     final required = Platform.environment['NOMOS_GAUNTLET_REQUIRED'] == '1';
     final missing = _missingPrereq();
     if (missing != null) {
       if (required) {
-        fail('NOMOS_GAUNTLET_REQUIRED=1 but a prereq is missing — the CI job must provide it: '
+        fail(
+            'NOMOS_GAUNTLET_REQUIRED=1 but a prereq is missing — the CI job must provide it: '
             '$missing');
       }
       markTestSkipped(missing);
@@ -95,7 +96,8 @@ void main() {
     final diagnostics = <String>[];
 
     // ── LEG 1: harness up — a 4-workspace cluster, one deviceKeyed, phase diagnostics on. ──
-    final harness = await _leg('leg 1: NomosTestHarness.cluster (4 ws, one deviceKeyed)', () async {
+    final harness = await _leg(
+        'leg 1: NomosTestHarness.cluster (4 ws, one deviceKeyed)', () async {
       final h = await NomosTestHarness.cluster(
         workspaces: {
           'home': [_homeDeploy],
@@ -113,88 +115,93 @@ void main() {
       // keyed 3b legs all log enter AND exit lines.
       expect(diagnostics.any((l) => l.contains('offline law install')), isTrue,
           reason: 'phase 1 install diagnostics must appear');
-      expect(diagnostics.any((l) => l.contains('runner ready') && l.contains('done')), isTrue,
+      expect(
+          diagnostics
+              .any((l) => l.contains('runner ready') && l.contains('done')),
+          isTrue,
           reason: 'the runner-ready phase must log its exit');
       expect(diagnostics.any((l) => l.contains('3b: device keygen')), isTrue,
           reason: 'the deviceKeyed keygen phase must log');
       expect(
-          diagnostics.any(
-              (l) => l.contains("3b: keyed reconnect of '$_keyed'") && l.contains('done')),
+          diagnostics.any((l) =>
+              l.contains("3b: keyed reconnect of '$_keyed'") &&
+              l.contains('done')),
           isTrue,
-          reason: 'the keyed reconnect phase must log its exit (the reported wedge)');
+          reason:
+              'the keyed reconnect phase must log its exit (the reported wedge)');
       expect(h.sessions.toSet(), {'home', 'docs-ws', _keyed, 'reader'});
       return h;
     });
 
     try {
-      // ── LEG 2: the blessed session-bound shape — mount → bind (preflight) → PARENTLESS birth
-      //    → follow(ref) → second client → typed read + a directive. Zero routing strings. ──
+      // ── LEG 2: the blessed session-bound shape — mount → bind (preflight) → one business birth
+      //    → follow(ref) → second client → typed read. Zero routing/security strings. ──
       final home = harness.session('home');
-      final estate = await _leg(
-          'leg 2: blessed shape (bind → parentless birth → follow → 2nd client → read+directive)',
+      final bornEstate = await _leg(
+          'leg 2: blessed shape (bind → business birth → follow → 2nd client → typed read)',
           () async {
-        final homeClient = await HomeClient.bind(home, actor: _owner);
+        final homeClient = await Co2Client.bind(home, actor: _owner);
         expect(homeClient.session!.workspace, home.workspace,
             reason: 'inspectable session context');
-        final birth = await homeClient.birthEstateWorkspace(
-          payload: BirthEstateWorkspacePayload(
-            owner: _owner,
-            frameworkHash: harness.frameworkHash!,
-            lawHash: harness.lawHashes(home.workspace).first,
-            bornAt: DateTime.now().toUtc().toIso8601String(),
-            // era-0: the estate enrols the owner's device at birth (signer-ready) — the harness device.
-            ownerKeyHash: sha256.convert(base64Decode(harness.devicePublicKey(home.workspace)!)).toString(),
+        final ref = await homeClient.birth(
+          NomosBirthEstatePayload(
+            reference: 'E-001',
+            name: 'Foundry',
+            country: 'GB',
+            baselineTonnesCo2e: 4200,
           ),
         );
-        expect(birth.workspace, home.workspace,
-            reason: 'the parentless birth lands in the SESSION workspace');
-        expect(birth.born, hasLength(1));
-        expect(birth.birthOutcomes.first['status'], 'born');
+        expect(ref.workspace, startsWith('estate-'));
+        expect(ref.type, 'Estate');
 
-        final estateSession = await harness.bridge.follow(birth.bornRefs.single, authorSecret: harness.deviceSecret(home.workspace));
-        expect(estateSession.workspace, birth.born.single);
+        final estateSession = await harness.bridge.follow(
+          ref,
+          authorSecret: harness.deviceSecret(home.workspace),
+        );
+        expect(estateSession.workspace, ref.workspace);
 
-        final estateClient = await EstateClient.bind(estateSession, actor: _owner);
-        final rows = await estateClient.estatesByOwner(owner: _owner);
-        expect(rows, hasLength(1), reason: 'the child genesis seed reads back typed');
-        final seeded = rows.single;
-        final reseed = await estateClient.seedEstateWorkspace(SeedEstateWorkspacePayload(
-          owner: seeded.owner!,
-          estateName: seeded.estateName!,
-          bornAt: seeded.bornAt!,
-        ));
-        expect(reseed.head, isNotEmpty, reason: 'a directive on the followed second client');
-        return estateSession;
+        final estateClient = await Co2Client.bind(estateSession, actor: _owner);
+        final rows = await estateClient.estateById(ref.id);
+        expect(rows, hasLength(1),
+            reason: 'the born business root reads back typed');
+        expect(rows.single.reference, 'E-001');
+        expect(rows.single.name, 'Foundry');
+        return (session: estateSession, ref: ref);
       });
+      final estate = bornEstate.session;
 
       // ── LEG 3: local posture — autoSync on a local-only session returns promptly and never
       //    monopolizes the plane; zero network fetch attempts (asserted again at the end). ──
-      await _leg('leg 3: local-only autoSync completes promptly, plane stays responsive',
+      await _leg(
+          'leg 3: local-only autoSync completes promptly, plane stays responsive',
           () async {
         await home.autoSync().timeout(const Duration(seconds: 10),
             onTimeout: () => throw StateError(
                 'autoSync() on a local-only session did not return within 10s (the deadlock class)'));
         // The plane is NOT blocked: a sibling session still answers.
-        final listed = await harness.bridge.listWorkspaces().timeout(const Duration(seconds: 10),
-            onTimeout: () =>
-                throw StateError('listWorkspaces() hung after a local-only autoSync'));
+        final listed = await harness.bridge.listWorkspaces().timeout(
+            const Duration(seconds: 10),
+            onTimeout: () => throw StateError(
+                'listWorkspaces() hung after a local-only autoSync'));
         expect(listed.map((w) => w['session'].toString()).toSet(),
             containsAll({'home', 'docs-ws', _keyed, 'reader'}));
         await home.stopAutoSync().timeout(const Duration(seconds: 10),
-            onTimeout: () => throw StateError('stopAutoSync() hung on a local-only session'));
+            onTimeout: () => throw StateError(
+                'stopAutoSync() hung on a local-only session'));
       });
 
       // ── LEG 4: acquireSession — concurrent double-acquire single-flights to ONE handle; the
       //    credentials callback is NEVER invoked for a plane-known workspace. ──
-      await _leg('leg 4: acquireSession (concurrent, credential-free for a known workspace)',
+      await _leg(
+          'leg 4: acquireSession (concurrent, credential-free for a known workspace)',
           () async {
         final acquired = await Future.wait([
           harness.bridge.acquireSession('reader',
-              ifAbsentCredentials: () async =>
-                  fail('reader is on the plane — credentials must not be requested')),
+              ifAbsentCredentials: () async => fail(
+                  'reader is on the plane — credentials must not be requested')),
           harness.bridge.acquireSession('reader',
-              ifAbsentCredentials: () async =>
-                  fail('reader is on the plane — credentials must not be requested')),
+              ifAbsentCredentials: () async => fail(
+                  'reader is on the plane — credentials must not be requested')),
         ]);
         expect(identical(acquired[0], acquired[1]), isTrue,
             reason: 'a concurrent double-acquire yields ONE handle');
@@ -204,21 +211,22 @@ void main() {
 
       // ── LEG 5: reactive reads on a SESSION — watchById / watch / watchPendingConflicts must
       //    all deliver a FIRST SNAPSHOT (the 0.48.x dead-delegation class). ──
-      await _leg('leg 5: session reactive reads emit their first snapshot', () async {
-        final raw = await estate.query('estatesByOwner', {'owner': _owner});
+      await _leg('leg 5: session reactive reads emit their first snapshot',
+          () async {
+        final raw = await estate.queryById(bornEstate.ref.id);
         final aggId = ((raw.single as Map)['id'] ?? '').toString();
         expect(aggId, isNotEmpty);
-        final byId = await estate
-            .watchById(aggId)
-            .first
-            .timeout(const Duration(seconds: 30),
-                onTimeout: () => throw StateError('watchById never emitted its first snapshot'));
+        final byId = await estate.watchById(aggId).first.timeout(
+            const Duration(seconds: 30),
+            onTimeout: () =>
+                throw StateError('watchById never emitted its first snapshot'));
         expect(byId, hasLength(1));
         final byQuery = await estate
-            .watch('estatesByOwner', {'owner': _owner})
+            .watch('estatesByReference', {'reference': 'E-001'})
             .first
             .timeout(const Duration(seconds: 30),
-                onTimeout: () => throw StateError('watch(query) never emitted its first snapshot'));
+                onTimeout: () => throw StateError(
+                    'watch(query) never emitted its first snapshot'));
         expect(byQuery, hasLength(1));
         // The docs-ws session carries the Surfaced law — its pending-conflicts stream must emit a
         // first snapshot (empty is correct; EMITTING at all is the regression under test).
@@ -234,10 +242,12 @@ void main() {
 
       // ── LEG 6: the keyed lane end-to-end — an attested read served + SIGNED with the device
       //    key the 3b re-open installed. ──
-      await _leg('leg 6: attested read from the deviceKeyed workspace', () async {
+      await _leg('leg 6: attested read from the deviceKeyed workspace',
+          () async {
         final public = harness.devicePublicKey(_keyed);
         expect(public, isNotNull);
-        expect(public, isNotEmpty, reason: 'the 3b keygen public half rides the harness');
+        expect(public, isNotEmpty,
+            reason: 'the 3b keygen public half rides the harness');
         final cat = harness.session(_keyed);
         final seeded = await cat.offerCreates(
           domain: 'cat',
@@ -257,19 +267,23 @@ void main() {
           args: {'listingId': 'L-1'},
         );
         final entry = (served['entry'] as Map).cast<String, Object?>();
-        final attestation = (entry['attestation'] as Map).cast<String, Object?>();
+        final attestation =
+            (entry['attestation'] as Map).cast<String, Object?>();
         expect((attestation['public_key'] ?? '').toString(), public,
             reason: 'the read is signed by the re-opened session device key');
       });
 
       // ── LEG 7: harness diagnostics — assertDomainInstalled, resetWorkspaceCustody, and a
       //    mid-test seedWorkspaceFromDeployJson round-trip. ──
-      await _leg('leg 7: harness diagnostics (assertDomainInstalled / reset / seed)', () async {
+      await _leg(
+          'leg 7: harness diagnostics (assertDomainInstalled / reset / seed)',
+          () async {
         await harness.assertDomainInstalled(
-            workspace: estate.workspace, domain: EstateClient.interface.domain);
+            workspace: estate.workspace, domain: Co2Client.interface.domain);
         // The negative arm names the active domains.
         await expectLater(
-            harness.assertDomainInstalled(workspace: 'docs-ws', domain: 'definitely-not-here'),
+            harness.assertDomainInstalled(
+                workspace: 'docs-ws', domain: 'definitely-not-here'),
             throwsA(isA<NomosTestHarnessException>()));
         // Reset a workspace's local custody to its seed snapshot, then prove it still serves.
         await harness.resetWorkspaceCustody('docs-ws');
@@ -278,23 +292,28 @@ void main() {
             .watchPendingConflicts()
             .first
             .timeout(const Duration(seconds: 30),
-                onTimeout: () =>
-                    throw StateError('the reset docs-ws session never served a read'));
-        expect(postReset, isEmpty, reason: 'the reset workspace is back at its seed');
+                onTimeout: () => throw StateError(
+                    'the reset docs-ws session never served a read'));
+        expect(postReset, isEmpty,
+            reason: 'the reset workspace is back at its seed');
         // Seed a brand-new workspace mid-test from a deploy.json and use it immediately.
         final late = await harness.seedWorkspaceFromDeployJson(
             workspace: 'late-ws', deployJsonPaths: [_docsDeploy]);
         expect(late.workspace, 'late-ws');
-        await harness.assertDomainInstalled(workspace: 'late-ws', domain: 'docs');
+        await harness.assertDomainInstalled(
+            workspace: 'late-ws', domain: 'docs');
       });
 
       // Local posture postscript (leg 3's zero-network promise, checked over the WHOLE run): no
       // session on this plane ever attempted a network fetch.
       final offending = diagnostics
-          .where((l) => l.contains('intent-offers') || l.contains('refusing network fetch'))
+          .where((l) =>
+              l.contains('intent-offers') ||
+              l.contains('refusing network fetch'))
           .toList();
       expect(offending, isEmpty,
-          reason: 'local-only sessions must perform NO network work — saw:\n${offending.join('\n')}');
+          reason:
+              'local-only sessions must perform NO network work — saw:\n${offending.join('\n')}');
     } finally {
       // ── LEG 8: clean disposal within the deadline (a hung teardown is a failure, not a wedge). ──
       await _leg('leg 8: harness disposal within the deadline', () async {

package/dart/test/local_sync_inert_test.dart

@@ -29,7 +29,7 @@ String? _missingPrereq() {
   if (!File(_deployJson).existsSync()) {
     return 'compile the fixture: (cd bench/scale/fixtures/estate-birth && node ../../../../dsl/compile_package.mjs)';
   }
-  if (!File('$_runtimeDir/holon.wasm').existsSync())
+  if (!File('$_runtimeDir/holon-testmint.wasm').existsSync())
     return 'warm ~/.holon/runtime first';
   return null;
 }
@@ -66,8 +66,10 @@ void main() {
       );
       expect(birth.born, hasLength(1));
 
-      // 3. query confirms the row (the home law's birth-record read).
-      final before = await client.birthRecordsByPrincipal(principal: _owner);
+      // 3. Infrastructure assertion: inspect Nomos's private birth record through the raw harness session.
+      // Generated tenant clients deliberately do not expose this framework query.
+      final before = await session
+          .query('birthRecordsByPrincipal', {'principal': _owner});
       expect(before, hasLength(1),
           reason: 'the offer must be readable BEFORE sync');
       final statusBefore = await session.custodyStatus();
@@ -84,11 +86,14 @@ void main() {
       expect(statusAfter.pendingLocalIntents, statusBefore.pendingLocalIntents,
           reason:
               'local-only sync must not consume/move pending local intents');
-      final after = await client.birthRecordsByPrincipal(principal: _owner);
+      final after = await session
+          .query('birthRecordsByPrincipal', {'principal': _owner});
       expect(after, hasLength(1),
           reason:
               'local-only sync must be observationally inert — the row must still read');
-      expect(after.single.principal, before.single.principal,
+      final beforeData = ((before.single as Map)['data'] as Map);
+      final afterData = ((after.single as Map)['data'] as Map);
+      expect(afterData['principal'], beforeData['principal'],
           reason: 'the SAME row, byte-for-byte semantics');
     } finally {
       await harness.dispose();

package/dart/test/parent_signer_recovery_test.dart

@@ -40,7 +40,7 @@ String? _missingPrereq() {
   if (!File(_deploy).existsSync()) {
     return 'compile the fixture: cd bench/scale/fixtures/estate-birth-signed && node ../../../../dsl/compile_package.mjs';
   }
-  if (!File('$_runtimeDir/holon.wasm').existsSync()) {
+  if (!File('$_runtimeDir/holon-testmint.wasm').existsSync()) {
     return 'warm ~/.holon/runtime first (run any `githolon` command once)';
   }
   return null;

package/dart/test/sealing_client_test.dart

@@ -34,7 +34,7 @@ String? _missingPrereq() {
   if (!File(_deploy).existsSync() || !File(_lockfile).existsSync()) {
     return 'missing encrypted-notes fixture — compile it: (cd cloud/web-client/test/fixtures/encrypted-notes && node ../../../../../dsl/compile_package.mjs)';
   }
-  if (!File('$_runtimeDir/holon.wasm').existsSync() ||
+  if (!File('$_runtimeDir/holon-testmint.wasm').existsSync() ||
       !File('$_runtimeDir/packages.json').existsSync()) {
     return 'warm ~/.holon/runtime first (run any `githolon` command once)';
   }

package/dart/test/session_bound_test.dart

@@ -48,7 +48,7 @@ String? _missingPrereq() {
     return 'compile the fixtures: (cd bench/scale/fixtures/estate-birth && node ../../../../dsl/compile_package.mjs); '
         '(cd bench/scale/fixtures/surfaced && node ../../../../dsl/compile_package.mjs)';
   }
-  if (!File('$_runtimeDir/holon.wasm').existsSync() ||
+  if (!File('$_runtimeDir/holon-testmint.wasm').existsSync() ||
       !File('$_runtimeDir/packages.json').existsSync()) {
     return 'warm ~/.holon/runtime first (run any `githolon` command once)';
   }

package/dart/test/test_harness_test.dart

@@ -4,7 +4,7 @@
 // the app UI uses, under `dart test` / `flutter test`, with no network.
 //
 // Prerequisites (skipped-with-reason when absent, so CI stays green either way): `node` on PATH; the
-// in-repo runner; a warm `~/.holon/runtime` cache (holon.wasm + packages.json — one `githolon` run fills it);
+// in-repo runner; a warm `~/.holon/runtime` cache (holon-testmint.wasm + packages.json — one `githolon` run fills it);
 // and the compiled `examples/guestbook/build/guestbook.deploy.json` (`cd examples/guestbook && npx nomos-compile`).
 @TestOn('vm')
 library;
@@ -31,7 +31,7 @@ String? _missingPrereq() {
   if (!File(_guestbookDeployJson).existsSync()) {
     return 'compile the fixture first: cd examples/guestbook && npx nomos-compile';
   }
-  if (!File('$_runtimeDir/holon.wasm').existsSync() ||
+  if (!File('$_runtimeDir/holon-testmint.wasm').existsSync() ||
       !File('$_runtimeDir/packages.json').existsSync()) {
     return 'warm ~/.holon/runtime first (run any `githolon` command once to cache the runtime)';
   }

package/dart/test/vo_read_typing_test.dart

@@ -29,7 +29,7 @@ String? _missingPrereq() {
   if (!File(_deployJson).existsSync()) {
     return 'compile the fixture: cd bench/scale/fixtures/vo-read-typing && npx nomos-compile';
   }
-  if (!File('$_runtimeDir/holon.wasm').existsSync() ||
+  if (!File('$_runtimeDir/holon-testmint.wasm').existsSync() ||
       !File('$_runtimeDir/packages.json').existsSync()) {
     return 'warm ~/.holon/runtime first (run any `githolon` command once)';
   }

package/dart/test/watch_after_offer_stall_test.dart

@@ -23,7 +23,7 @@ String? _missingPrereq() {
   if (!File(_gbDeploy).existsSync()) {
     return 'missing $_gbDeploy — compile it (cd examples/guestbook && npx nomos-compile)';
   }
-  if (!File('$_runtimeDir/holon.wasm').existsSync() ||
+  if (!File('$_runtimeDir/holon-testmint.wasm').existsSync() ||
       !File('$_runtimeDir/packages.json').existsSync()) {
     return 'warm ~/.holon/runtime first (run any `githolon` command once)';
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@githolon/dsl",
-  "version": "0.100.4",
+  "version": "0.100.6",
   "type": "module",
   "description": "Nomos 2 domain-authoring DSL: aggregates + directives in TS, executed and encoded to the Rust kernel's wire shapes.",
   "license": "SEE LICENSE IN LICENSE.md",