@githolon/dsl 0.101.5 → 0.102.0

package/dart/lib/src/session_bound.dart

@@ -21,8 +21,11 @@
 ///  * [DomainNotInstalledForSession] — the context-rich replacement for the kernel's generic
 ///    "no active installed law declares domain 'x'" refusal, thrown wherever that error used to
 ///    surface (bridge dispatch, birth lanes) with the full session context.
+@internal
 library;
 
+import 'package:meta/meta.dart' show internal;
+
 import 'dart:convert';
 
 import 'webview_bridge.dart';
@@ -221,15 +224,18 @@ extension NomosSessionCompat on NomosSession {
       // co2 blocker #2: a PROJECTION READ FAILURE (an unmountable/failing query shape — the runner surfaces
       // `nomos.projection.read_failed` carrying the failed query) is NOT "not reachable" and MUST NOT be
       // reclassified as trulyNotDeployed downstream — surface it as its own cause with the real fault text.
-      final isProjectionFault = e.toString().contains('nomos.projection.read_failed') ||
-          e.toString().contains('projection read failed');
+      final isProjectionFault =
+          e.toString().contains('nomos.projection.read_failed') ||
+              e.toString().contains('projection read failed');
       throw DomainClientSessionMismatch(
         expectedDomainKey: iface.domain,
         expectedDomainHash: iface.expectedDomainHash,
         expectedInterfaceHash: iface.expectedInterfaceHash,
         sessionId: workspace,
         sessionWorkspace: workspace,
-        cause: isProjectionFault ? SessionMismatchCause.projectionReadFailed : null,
+        cause: isProjectionFault
+            ? SessionMismatchCause.projectionReadFailed
+            : null,
         hint: isProjectionFault
             ? 'the workspace law could NOT be READ — a projection/mount failure (NOT undeployed law): $e'
             : 'the session workspace is not reachable/mounted on this plane: $e',
@@ -244,7 +250,9 @@ extension NomosSessionCompat on NomosSession {
             (jsonDecode(iface.compatJson!) as Map).cast<String, Object?>(),
             iface.requirement);
         if (c != null) activeHashes = c.workspaceRuns;
-      } catch (_) {/* diagnosis only — never fail the preflight on the hash axis */}
+      } catch (_) {
+        /* diagnosis only — never fail the preflight on the hash axis */
+      }
     }
 
     // 3. THE SHAPE AXIS (#72) — the one compatibility notion. No baked interface ⇒ nothing more to check.
@@ -272,19 +280,22 @@ extension NomosSessionCompat on NomosSession {
 
     final missing =
         ((verdict['missing'] as List?) ?? const []).map((e) => '$e').toList();
-    final incompatible =
-        ((verdict['incompatible'] as List?) ?? const []).map((e) => '$e').toList();
+    final incompatible = ((verdict['incompatible'] as List?) ?? const [])
+        .map((e) => '$e')
+        .toList();
 
     // 4. CLASSIFY the four causes (ask 9).
     SessionMismatchCause cause;
     String hint;
     if (incompatible.isNotEmpty) {
       cause = SessionMismatchCause.clientExpectsNewerInterface;
-      hint = 'the domain is installed but type-divergent from what this client requires '
+      hint =
+          'the domain is installed but type-divergent from what this client requires '
           '(${incompatible.join('; ')}) — recompile the client against the deployed law, or evolve the law';
     } else if (activeKeys.isNotEmpty && !activeKeys.contains(iface.domain)) {
       cause = SessionMismatchCause.wrongPackageMounted;
-      hint = 'this workspace runs a DIFFERENT package (${activeKeys.join(', ')}) — '
+      hint =
+          'this workspace runs a DIFFERENT package (${activeKeys.join(', ')}) — '
           'bind this client to the session whose workspace holds "${iface.domain}"';
     } else {
       // The domain (or its whole offer) is absent here. Stale-vs-never-deployed: if this session is
@@ -300,11 +311,13 @@ extension NomosSessionCompat on NomosSession {
       } catch (_) {/* best-effort */}
       if (cloudBound && behind > 0) {
         cause = SessionMismatchCause.liveCloudHasLawButLocalStale;
-        hint = 'local custody is $behind commit(s) behind its cloud — sync/pull, then re-bind '
+        hint =
+            'local custody is $behind commit(s) behind its cloud — sync/pull, then re-bind '
             '(missing: ${missing.join('; ')})';
       } else {
         cause = SessionMismatchCause.trulyNotDeployed;
-        hint = 'no installed law on this workspace declares "${iface.domain}" — '
+        hint =
+            'no installed law on this workspace declares "${iface.domain}" — '
             'deploy the domain package first (missing: ${missing.join('; ')})';
       }
     }

package/dart/lib/src/source_trust.dart

@@ -0,0 +1,51 @@
+@internal
+library;
+
+import 'package:meta/meta.dart' show internal;
+
+import 'dart:convert';
+
+import 'package:crypto/crypto.dart';
+
+/// Private support for generated business actions that consume an attested
+/// record from another application. Tenant packages never export this type.
+final class NmsInternalSourceTrust {
+  const NmsInternalSourceTrust._();
+
+  static Map<String, Object?> entry(Map<String, Object?> served) {
+    final raw = served['entry'] ?? served;
+    if (raw is! Map) {
+      throw StateError(
+          'Nomos source did not return an attested business record.');
+    }
+    return raw.cast<String, Object?>();
+  }
+
+  static Map<String, Object?> attestation(Map<String, Object?> entry) {
+    final raw = entry['attestation'];
+    if (raw is! Map) {
+      throw StateError('Nomos source omitted its signed identity.');
+    }
+    return raw.cast<String, Object?>();
+  }
+
+  static String genesis(Map<String, Object?> attestation) {
+    final value = (attestation['source_genesis'] ?? '').toString();
+    if (value.isEmpty) {
+      throw StateError('Nomos source omitted its genesis identity.');
+    }
+    return value;
+  }
+
+  static String keyHash(Map<String, Object?> attestation) {
+    final publicKey = (attestation['public_key'] ?? '').toString();
+    if (publicKey.isEmpty) {
+      throw StateError('Nomos source omitted its attestation key.');
+    }
+    try {
+      return sha256.convert(base64.decode(publicKey)).toString();
+    } on FormatException {
+      throw StateError('Nomos source returned an invalid attestation key.');
+    }
+  }
+}