@githolon/dsl 0.103.4 → 0.103.6

package/src/compile_package_main.ts

@@ -798,6 +798,9 @@ const DART_SUPPORT_CORE_SRC = [
   "driver.dart",
   "offer.dart",
   "subscriptions.dart",
+  // Nominal custody/content identities used by generated payloads and read models.
+  "sha256_digest.dart",
+  "git_object_id.dart",
   // The tri-state slot (NomosSlot<T>) for `nullable`/`clearable` fields (null_semantics.md) — the
   // barrel re-exports it and generated read-model/payload classes reference it, so it must vendor.
   "null_slot.dart",
@@ -845,13 +848,14 @@ const DART_SUPPORT_SRC = [...DART_SUPPORT_CORE_SRC, ...DART_SUPPORT_RUNTIME_SRC]
 /** The local shim replacing `package:nomos_types/nomos_types.dart` inside vendored runtime files. */
 const VENDORED_TYPES_SHIM = "nomos_types.dart";
 const VENDORED_META_DEP = "^1.12.0";
+const VENDORED_DART_SDK_FLOOR = "3.3.0";
 
 /**
  * Vendored runtime files carry package:meta's @internal boundary. Keep the
  * containing Dart package honest by declaring that implementation dependency
  * instead of stripping the annotation from generated copies.
  */
-function ensureVendoredMetaDependency(dartOut: string): void {
+function ensureVendoredPackageRequirements(dartOut: string): void {
   let dir = path.resolve(dartOut);
   let pubspec: string | undefined;
   for (let hops = 0; hops < 8; hops++) {
@@ -866,13 +870,37 @@ function ensureVendoredMetaDependency(dartOut: string): void {
   }
   if (pubspec === undefined) return;
   const source = readFileSync(pubspec, "utf8");
-  if (/^  meta:\s*/m.test(source)) return;
-  if (!/^dependencies:\s*$/m.test(source)) {
+  let next = source;
+  const sdkLine = /^(\s+sdk:\s*)([^#\r\n]+)(\s*(?:#.*)?)$/m.exec(next);
+  if (sdkLine === null) {
+    fail("generated Dart semantic types need an environment.sdk constraint in " + pubspec);
+  }
+  const declared = sdkLine[2]!.trim().replace(/^['"]|['"]$/g, "");
+  const firstVersion = /(\d+)\.(\d+)(?:\.\d+)?/.exec(declared);
+  if (firstVersion === null) {
+    fail(
+      `generated Dart semantic types need SDK >=${VENDORED_DART_SDK_FLOOR}; ` +
+        `cannot interpret environment.sdk '${declared}' in ${pubspec}`,
+    );
+  }
+  const major = Number(firstVersion[1]);
+  const minor = Number(firstVersion[2]);
+  if (major < 3 || (major === 3 && minor < 3)) {
+    next = next.replace(
+      sdkLine[0],
+      `${sdkLine[1]}\">=${VENDORED_DART_SDK_FLOOR} <4.0.0\"${sdkLine[3] ?? ""}`,
+    );
+  }
+  if (/^  meta:\s*/m.test(next)) {
+    if (next !== source) writeFileSync(pubspec, next, "utf8");
+    return;
+  }
+  if (!/^dependencies:\s*$/m.test(next)) {
     fail("generated Dart vendored support needs a dependencies: block in " + pubspec);
   }
   writeFileSync(
     pubspec,
-    source.replace(
+    next.replace(
       /^dependencies:\s*$/m,
       "dependencies:\n  meta: " + VENDORED_META_DEP,
     ),
@@ -930,7 +958,7 @@ function buildPackageAggregateDomains(
 }
 
 /**
- * CIRCULAR-DEPENDENCY GUARD (domain_contracts.md). A `t.foreignRef` targeting a CONCRETE aggregate makes
+ * CIRCULAR-DEPENDENCY GUARD (domain_contracts.md). A typed cross-workspace reference targeting a CONCRETE aggregate makes
  * the referencing domain's generated file import the target domain's file. Two domains that concretely
  * reference each other (A→B and B→A) form an import cycle — the exact anti-pattern domain contracts exist
  * to break. Build the concrete domain→domain edge set and FAIL on any 2-cycle, pointing at contracts as the
@@ -943,8 +971,11 @@ function guardNoConcreteImportCycle(
   const edges = new Map<string, Set<string>>(); // fromDomainFile → { toDomainFile }
   for (const mod of modules) {
     for (const agg of mod.aggregates) {
-      for (const f of Object.values(agg.fields as Record<string, { foreignRef?: { targetAggregateId: string; targetIsContract?: boolean } }>)) {
-        const fr = f.foreignRef;
+      for (const f of Object.values(agg.fields as Record<string, {
+        foreignRef?: { targetAggregateId: string; targetIsContract?: boolean };
+        nomosRef?: { targetAggregateId: string; targetIsContract?: boolean };
+      }>)) {
+        const fr = f.foreignRef ?? f.nomosRef;
         if (fr === undefined || fr.targetIsContract === true) continue; // contract edges route via contracts.dart
         const to = aggIdToDartFile.get(fr.targetAggregateId);
         if (to === undefined || to === mod.name) continue;
@@ -957,9 +988,9 @@ function guardNoConcreteImportCycle(
       if (edges.get(to)?.has(from) && from < to) {
         fail(
           `domain contracts: concrete cross-domain import cycle between '${from}' and '${to}' — their ` +
-            `generated Dart files would import each other (a t.foreignRef in each targets a concrete aggregate ` +
+            `generated Dart files would import each other (a typed custody reference in each targets a concrete aggregate ` +
             `owned by the other). Break it with a record contract: declare recordContract(...) for the shared shape, ` +
-            `.implements(...) it on the owning aggregate, and point the foreignRef at the CONTRACT (it resolves ` +
+            `.implements(...) it on the owning aggregate, and point the reference at the CONTRACT (it resolves ` +
             `through the shared contracts.dart, keeping the domain graph acyclic).`,
         );
       }
@@ -1291,7 +1322,7 @@ function emitDart(
   // 1. optional vendored framework support (barrel + src/), copied byte-for-byte except
   //    the barrel's schema_validation export (see DART_SUPPORT_SRC).
   if (supportImport === "vendored") {
-    ensureVendoredMetaDependency(dartOut);
+    ensureVendoredPackageRequirements(dartOut);
     mkdirSync(path.join(genDir, "src"), { recursive: true });
     // Core files come from the pure `nomos_types` package, runtime files from `nomos_client`
     // (the layered split). Runtime files import the core via `package:nomos_types/...` — the
@@ -1427,14 +1458,17 @@ function emitDart(
     // framework import. Only pass the import when this domain actually folds a framework symbol.
     const { modForDart, skips, foldsFramework } = domainDedupOpts(mod, shared);
     const domainFrameworkImport = foldsFramework ? frameworkImportUri : undefined;
-    // AUTO cross-domain foreignRef imports: for each foreignRef whose target aggregate lives in ANOTHER
-    // tenant domain, import that domain's generated file so `ForeignRef<Target>` + `Target.fromJson` resolve.
+    // AUTO cross-domain typed-reference imports: foreignRef and atomic nomosRef targets in ANOTHER tenant
+    // domain need that domain's generated type so their typed Dart locator can compile.
     // A target that is framework-shared resolves via the frameworkImportUri (not in the tenant map), so it is
     // skipped here. Merged with any manual `dartImports`; deduped by uri.
     const foreignRefImportUris = new Set<string>();
-    for (const agg of (modForDart.aggregates as { fields: Record<string, { foreignRef?: { targetAggregateId: string; targetIsContract?: boolean } }> }[])) {
+    for (const agg of (modForDart.aggregates as { fields: Record<string, {
+      foreignRef?: { targetAggregateId: string; targetIsContract?: boolean };
+      nomosRef?: { targetAggregateId: string; targetIsContract?: boolean };
+    }> }[])) {
       for (const f of Object.values(agg.fields)) {
-        const fr = f.foreignRef;
+        const fr = f.foreignRef ?? f.nomosRef;
         if (fr === undefined) continue;
         // A CONTRACT target resolves through the shared `contracts.dart` (the acyclic edge), NEVER the
         // concrete target domain — so estate never imports catalogue. (The contract id may EQUAL an
@@ -1519,6 +1553,9 @@ function emitDart(
   const sha256DigestExport = [...sourceByFile.values()].some((source) => source.includes("Sha256Digest"))
     ? ", Sha256Digest"
     : "";
+  const gitObjectIdExport = [...sourceByFile.values()].some((source) => source.includes("GitObjectId"))
+    ? ", GitObjectId"
+    : "";
   const barrelLines = [
     "// GENERATED by nomos-compile — the package's public entrypoint. DO NOT EDIT.",
     "// Regenerated on every compile; generated implementation lives under src/generated/.",
@@ -1542,8 +1579,8 @@ function emitDart(
     // The generated clients import their runtime support directly. Keeping it out of the public barrel is
     // the surface firewall: a tenant import receives business types and application APIs, never raw runtime.
     supportImport === "vendored"
-      ? `export '${genRel}/src/${VENDORED_TYPES_SHIM}' show NomosRef, NomosOptionalRef, VersionedNomosRef, ReferenceFreshness, ReferenceCurrent, ReferenceStale, ReferenceFreshnessUnavailable${sha256DigestExport};`
-      : `export 'package:nomos_types/nomos_types.dart' show NomosRef, NomosOptionalRef, VersionedNomosRef, ReferenceFreshness, ReferenceCurrent, ReferenceStale, ReferenceFreshnessUnavailable${sha256DigestExport};`,
+      ? `export '${genRel}/src/${VENDORED_TYPES_SHIM}' show NomosRef, NomosOptionalRef, VersionedNomosRef, ReferenceFreshness, ReferenceCurrent, ReferenceStale, ReferenceFreshnessUnavailable${sha256DigestExport}${gitObjectIdExport};`
+      : `export 'package:nomos_types/nomos_types.dart' show NomosRef, NomosOptionalRef, VersionedNomosRef, ReferenceFreshness, ReferenceCurrent, ReferenceStale, ReferenceFreshnessUnavailable${sha256DigestExport}${gitObjectIdExport};`,
     ...(contractsImportUri !== undefined
       ? tenantDartExport(`${genRel}/${CONTRACTS_FILE}.dart`, sourceByFile.get(CONTRACTS_FILE) ?? "")
       : []),
@@ -1605,12 +1642,12 @@ const dartTypesImportFor = (generatedSource: string): string => {
  *  just the floor generated code needs — a lagging pin forces tenants into dependency_overrides. */
 // 0.3.0: SurfacedValue<T>/SurfacedObservation/PendingConflictRow — generated Surfaced-field typing +
 //        the pendingConflicts read rows.
-const NOMOS_TYPES_DEP = "^0.8.2";
+const NOMOS_TYPES_DEP = "^0.8.3";
 // 0.48.x: session-bound clients (XClient.bind/NomosClientInterface/DomainClientSessionMismatch/
 //         DomainNotInstalledForSession, engine.follow, pendingConflicts lanes) — the generated client
 //         REQUIRES this surface. 0.48.1 fixes NomosSession.watchPendingConflicts delegation.
-const NOMOS_CLIENT_DEP = "^0.64.5";
-const NOMOS_FLUTTER_DEP = "^0.63.6";
+const NOMOS_CLIENT_DEP = "^0.64.6";
+const NOMOS_FLUTTER_DEP = "^0.63.8";
 // DRIFT TRIPWIRE: pubspec_pins.test.ts asserts these equal the CURRENT versions in dsl/dart/pubspec.yaml
 // and dsl/dart_types/pubspec.yaml — a Dart release without this bump fails the suite, so tenants never
 // land back in dependency_overrides (the exact co2 report this closes, third occurrence).
@@ -1847,7 +1884,7 @@ function generatedPackageApplication(
     `import 'package:flutter/widgets.dart';`,
     `import 'package:nomos_flutter/src/application_status.dart' show ApplicationSignIn, ApplicationStatus;`,
     `import 'package:nomos_client/src/nms_generated_runtime.dart' show NmsInternalUsers, NomosSession, User${hasInvitations ? ", Invitation, Recipient" : ""};`,
-    `import 'package:nomos_flutter/src/generated_application_host.dart' show NomosApplicationStartupState, NmsInternalApplicationHost, NmsInternalApplicationUserBinding${hasInvitations ? ", NmsInternalInvitationPolicy" : ""};`,
+    `import 'package:nomos_flutter/src/generated_application_host.dart' show ApplicationModelChange, NomosApplicationStartupState, NmsInternalApplicationHost, NmsInternalApplicationUserBinding${hasInvitations ? ", NmsInternalInvitationPolicy" : ""};`,
     ...members.map(({ file, prefix }) =>
       `import '${file}.application.dart' as ${prefix};`),
     ``,
@@ -1881,10 +1918,14 @@ function generatedPackageApplication(
     `  ${rootMember.prefix}.NomosModel get model => ${rootMember.member}.model;`,
     ``,
     `  /// Current durability and convergence across this business application.`,
-    `  ApplicationStatus get currentStatus => NmsInternalApplicationHost.currentStatus(_nmsSession);`,
+    `  ApplicationStatus get currentStatus => NmsInternalApplicationHost.currentApplicationStatus(_nmsSession);`,
     ``,
     `  /// React whenever this application saves, receives work, goes offline or needs attention.`,
-    `  Stream<ApplicationStatus> watchStatus() => NmsInternalApplicationHost.watchStatus(_nmsSession);`,
+    `  Stream<ApplicationStatus> watchStatus() => NmsInternalApplicationHost.watchApplicationStatus(_nmsSession);`,
+    ``,
+    `  /// Wait until accepted local work is in shared custody and this application has caught up.`,
+    `  Future<void> whenCurrent({Duration timeout = const Duration(minutes: 2)}) =>`,
+    `      NmsInternalApplicationHost.whenApplicationCurrent(_nmsSession, timeout: timeout);`,
     ...(hasInvitations
       ? [
           ``,
@@ -1930,12 +1971,16 @@ function generatedPackageApplication(
     `    required Widget Function(BuildContext context, ${application} application) builder,`,
     `    Widget Function(BuildContext context)? loadingBuilder,`,
     `    Widget Function(BuildContext context, Object error, VoidCallback retry)? errorBuilder,`,
+    `    ApplicationModelChange? onModelChange,`,
     `    ValueChanged<NomosApplicationStartupState>? onStartupStateChanged,`,
+    `    Duration startupTimeout = const Duration(seconds: 45),`,
     `  }) => NmsInternalApplicationHost.home<${application}>(`,
     `    key: key, cloud: cloud, application: application, signIn: signIn,`,
     `    bind: nomosInternalBind${application}, builder: builder,`,
     `    loadingBuilder: loadingBuilder, errorBuilder: errorBuilder,`,
+    `    onModelChange: onModelChange,`,
     `    onStartupStateChanged: onStartupStateChanged,`,
+    `    startupTimeout: startupTimeout,`,
     `  );`,
     `}`,
     ``,
@@ -2059,22 +2104,34 @@ function reconcileGeneratedLawAsset(pkgDir: string, generatedAsset: string): boo
   const p = path.join(pkgDir, "pubspec.yaml");
   if (!existsSync(p)) return false;
   const source = readFileSync(p, "utf8");
+  const trailingNewline = source.endsWith("\n");
   const lines = source.split(/\r?\n/);
+  if (trailingNewline) lines.pop();
   const compilerAsset = /^\s+-\s+lib\/src\/generated\/[^\s]+\.(?:deploy\.json|law\.usdz)\s*$/;
   const replacement = `    - ${generatedAsset}`;
-  let replaced = false;
-  const nextLines = lines.filter((line) => {
-    if (!compilerAsset.test(line)) return true;
-    if (replaced) return false;
-    replaced = true;
-    return false;
-  });
-  if (replaced) {
-    const assetHeader = nextLines.findIndex((line) => /^\s{2}assets:\s*$/.test(line));
-    if (assetHeader < 0) return false;
+  const nextLines = lines.filter((line) => !compilerAsset.test(line));
+
+  let flutterStart = nextLines.findIndex((line) => /^flutter:\s*(?:#.*)?$/.test(line));
+  if (flutterStart < 0) {
+    if (nextLines.length > 0 && nextLines.at(-1) !== "") nextLines.push("");
+    flutterStart = nextLines.length;
+    nextLines.push("flutter:");
+  }
+  let flutterEnd = flutterStart + 1;
+  while (flutterEnd < nextLines.length) {
+    const line = nextLines[flutterEnd]!;
+    if (line.trim() !== "" && !/^\s/.test(line) && !/^\s*#/.test(line)) break;
+    flutterEnd += 1;
+  }
+  const assetHeader = nextLines.findIndex(
+    (line, index) => index > flutterStart && index < flutterEnd && /^\s{2}assets:\s*(?:#.*)?$/.test(line),
+  );
+  if (assetHeader < 0) {
+    nextLines.splice(flutterEnd, 0, "  assets:", replacement);
+  } else {
     nextLines.splice(assetHeader + 1, 0, replacement);
   }
-  const next = nextLines.join("\n");
+  const next = `${nextLines.join("\n")}${trailingNewline ? "\n" : ""}`;
   if (next === source) return false;
   writeFileSync(p, next, "utf8");
   return true;
@@ -2196,9 +2253,12 @@ function emitDartPackages(
   const perDomain = modules.map((mod) => ({ mod, dd: domainDedupOpts(mod, shared) }));
   for (const { mod, dd } of perDomain) {
     const frImports = new Set<string>();
-    for (const agg of (dd.modForDart.aggregates as { fields: Record<string, { foreignRef?: { targetAggregateId: string; targetIsContract?: boolean } }> }[])) {
+    for (const agg of (dd.modForDart.aggregates as { fields: Record<string, {
+      foreignRef?: { targetAggregateId: string; targetIsContract?: boolean };
+      nomosRef?: { targetAggregateId: string; targetIsContract?: boolean };
+    }> }[])) {
       for (const f of Object.values(agg.fields)) {
-        const fr = f.foreignRef;
+        const fr = f.foreignRef ?? f.nomosRef;
         if (fr === undefined) continue;
         // A contract target resolves via contracts.dart (the acyclic edge), not the concrete domain file.
         if (fr.targetIsContract === true) {
@@ -2290,11 +2350,14 @@ function emitDartPackages(
   const sha256DigestExport = [...typesSources.values()].some((source) => source.includes("Sha256Digest"))
     ? ", Sha256Digest"
     : "";
+  const gitObjectIdExport = [...typesSources.values()].some((source) => source.includes("GitObjectId"))
+    ? ", GitObjectId"
+    : "";
   writeFileSync(
     businessSharedPath,
     [
       "// GENERATED by nomos-compile — shared business values and activity; no runtime machinery.",
-      `export 'package:nomos_types/nomos_types.dart' show NomosRef, NomosOptionalRef, VersionedNomosRef, ReferenceFreshness, ReferenceCurrent, ReferenceStale, ReferenceFreshnessUnavailable${sha256DigestExport}, Identity, User, Recipient, Invitation, ActivityEvent, ActivityRef, ActivitySeverity, SurfacedObservation, SurfacedValue, SurfacedResolved, SurfacedPending, SurfacedEvolutionRequired;`,
+      `export 'package:nomos_types/nomos_types.dart' show NomosRef, NomosOptionalRef, VersionedNomosRef, ReferenceFreshness, ReferenceCurrent, ReferenceStale, ReferenceFreshnessUnavailable${sha256DigestExport}${gitObjectIdExport}, Identity, User, Recipient, Invitation, ActivityEvent, ActivityRef, ActivitySeverity, SurfacedObservation, SurfacedValue, SurfacedResolved, SurfacedPending, SurfacedEvolutionRequired;`,
       ...(sharedBusinessTypeNames.length === 0
         ? []
         : [`export '${FRAMEWORK_FILE}.dart' show ${sharedBusinessTypeNames.join(", ")};`]),
@@ -2358,6 +2421,17 @@ function emitDartPackages(
 
   // ── the CLIENT package — effectful runtime, depends on types + nomos_client ──
   const clientGen = freshGenDir(packages.client);
+  const embeddedLawName = `${describePackageName}.law.usdz`;
+  const applicationLawPath = lawUsdzPath === undefined
+    ? undefined
+    : path.join(clientGen, embeddedLawName);
+  if (applicationLawPath !== undefined) {
+    copyFileSync(lawUsdzPath!, applicationLawPath);
+    written.push(applicationLawPath);
+  }
+  const applicationLawAssetKey = applicationLawPath === undefined
+    ? undefined
+    : `packages/${packages.client}/lib/${genRel}/${embeddedLawName}`;
   const typesImportUri = `package:${packages.types}/${packages.types}.dart`;
   const implementationTypeImports = explicitBarrel
     ? modules.map((m) => `package:${packages.types}/${genRel}/${m.name}.dart`)
@@ -2371,6 +2445,9 @@ function emitDartPackages(
   for (const { mod, dd } of perDomain) {
     const makeClient = (imports: readonly string[]) => generateDartBridgeClient(dd.modForDart, {
       domainHash,
+      ...(applicationLawAssetKey !== undefined
+        ? { lawAssetKey: applicationLawAssetKey }
+        : {}),
       interface: packageInterface[dd.modForDart.domain ?? dd.modForDart.name],
       ...(compat !== undefined ? { compat } : {}),
       supportImport: "package",
@@ -2467,6 +2544,7 @@ function emitDartPackages(
     "library;",
     "",
     `export 'package:${packages.types}/${genRel}/${businessSharedFile}';`,
+    `export 'package:nomos_flutter/src/generated_application_host.dart' show ApplicationModelDecision, ApplicationModelReview;`,
     ...tenantTypesExportKeys
       .map((file) => {
         const names = tenantDartExportNames(typesSources.get(file) ?? "");
@@ -2514,16 +2592,28 @@ function emitDartPackages(
       `  nomos_flutter: ${NOMOS_FLUTTER_DEP}`,
       `  ${packages.types}:`,
       `    path: ../${packages.types} # co-emitted sibling; replace with a hosted constraint when publishing`,
+      ...(applicationLawPath === undefined
+        ? []
+        : [
+            `flutter:`,
+            `  assets:`,
+            `    - lib/${genRel}/${embeddedLawName}`,
+          ]),
       ``,
     ].join("\n"),
     { nomos_client: NOMOS_CLIENT_DEP, nomos_flutter: NOMOS_FLUTTER_DEP },
   );
+  if (applicationLawPath !== undefined) {
+    reconcileGeneratedLawAsset(
+      pkgDir(packages.client),
+      `lib/${genRel}/${embeddedLawName}`,
+    );
+  }
 
   // ── the TEST package (optional) — generated business scenarios, test-only dependency ──
   if (packages.test !== undefined) {
     const testGen = freshGenDir(packages.test);
     if (lawUsdzPath === undefined) fail("dart.packages.test requires the compiled canonical law archive");
-    const embeddedLawName = `${describePackageName}.law.usdz`;
     const embeddedLawPath = path.join(testGen, embeddedLawName);
     copyFileSync(lawUsdzPath, embeddedLawPath);
     written.push(embeddedLawPath);
@@ -2791,6 +2881,12 @@ async function main(): Promise<void> {
         "Nomos will not compile a birth-capable home with an implicit quota",
     );
   }
+  if (cfg.application !== undefined && cfg.rootPart === undefined) {
+    fail(
+      "application policy requires rootPart: { name, kind }; " +
+        "Nomos will not silently ignore private application-home law on a loose law fragment",
+    );
+  }
   // A born application home may carry several co-resident law namespaces. BirthPolicy is namespaced
   // law-state, so genesis must seed every domain that can itself birth; seeding only the private home
   // domain would leave (for example) `home/birthEstate` correctly refusing its first offer. Discover the
@@ -3653,6 +3749,13 @@ async function main(): Promise<void> {
     nextLock.identity = nextIdentity;
     const continuity = reconciled.continuity;
     const inferred = proposed.inferred;
+    // Resolve the complete CURRENT stable-id surface exactly once. `continuity`
+    // deliberately starts from the prior release, whereas this value also contains
+    // contracts and explicit evolution routes authored by the candidate. Building
+    // USDA from `continuity` made the first compile update only the lockfile and the
+    // second compile finally publish those semantics into custody.
+    mod.stableIdContinuity = continuity;
+    const emittedStableIds = stableIdsForModule(mod);
     // W4 typed compiler graph: reconcile independently-lived intent/read identities,
     // link every current target as a kind-safe ref, and refuse unresolved structure
     // before any USDA string is rendered. Later W4 stages move emitters/codegen onto
@@ -3661,7 +3764,7 @@ async function main(): Promise<void> {
     // independently of domain declaration order. Build custody from that same closed view used by generated
     // clients/interfaces; using the pre-closure executable module here published a USDA-only `birth` route.
     const graphModule = closedDomainModulesByName.get(mod.name) ?? mod;
-    const discoveredGraph = discoverLawGraph(graphModule, continuity, nextIdentity);
+    const discoveredGraph = discoverLawGraph(graphModule, emittedStableIds, nextIdentity);
     for (const node of discoveredGraph.graph.nodes) {
       if (node.kind === "intent" && node.births && node.birthPolicySeed === undefined) {
         fail(
@@ -3674,7 +3777,6 @@ async function main(): Promise<void> {
     nextIdentity = discoveredGraph.registry;
     nextLock.identity = nextIdentity;
     typedLawGraphs.set(identityName, discoveredGraph.graph);
-    mod.stableIdContinuity = continuity;
     graphModule.stableIdContinuity = continuity;
     if (inferred.length > 0) inferredRenames.push({ domain: identityName, renames: inferred });
     // ── THE fromBirth EVOLVE GUARD (dart_codegen_parity.md): birth-presence may be declared at a
@@ -3709,7 +3811,7 @@ async function main(): Promise<void> {
     // The lockfile records the EMITTED surface (sids + lineage + kinds — the next
     // compile's pair rule reads the kinds), not the bare continuity.
     nextLock.domains[identityName] = {
-      stableIds: stableIdsForModule(mod),
+      stableIds: emittedStableIds,
       schemas: Object.fromEntries(currentAggs.map((a) => [a.id, a.schema])),
     };
   }
@@ -5459,6 +5561,13 @@ async function main(): Promise<void> {
         writeFileSync(file, text, "utf8");
       };
       for (const pkg of pkgDirs) {
+        // Layered Dart output is generated-owned, including the compiler's temporary source-dogfood
+        // override. A package may have been generated previously by a source checkout and then rebuilt
+        // by the published compiler. In that transition, doing nothing here leaves the old absolute
+        // checkout paths live and silently defeats the hosted-package release boundary. Clear the
+        // compiler-owned file on every compile, then recreate it only for an actual source checkout.
+        const overrideFile = path.join(pkg, "pubspec_overrides.yaml");
+        rmSync(overrideFile, { force: true });
         if (localDart) {
           const spec = readFileSync(path.join(pkg, "pubspec.yaml"), "utf8");
           const lines = ["dependency_overrides:"];
@@ -5479,7 +5588,7 @@ async function main(): Promise<void> {
           // when its own pubspec does not name nomos_flutter directly.
           if ((usesFlutter || usesClient) && localDart.flutter) lines.push(`  nomos_flutter:`, `    path: ${localDart.flutter}`);
           if (lines.length > 1) {
-            writeTextIfChanged(path.join(pkg, "pubspec_overrides.yaml"), lines.join("\n") + "\n");
+            writeTextIfChanged(overrideFile, lines.join("\n") + "\n");
           }
         }
       }
@@ -5503,9 +5612,16 @@ async function main(): Promise<void> {
           "pubspec_overrides.yaml",
           path.join(".dart_tool", "package_config.json"),
         ].map((name) => ({ name, file: path.join(pkg, name) }));
-        if (files.some(({ file }) => !existsSync(file))) return undefined;
+        // `pubspec_overrides.yaml` is intentionally absent for installed compilers. Its absence is an
+        // input to the proof, not proof that dependency resolution can never be current.
+        if (files.some(({ name, file }) => name !== "pubspec_overrides.yaml" && !existsSync(file))) return undefined;
         const hash = createHash("sha256").update(`${dartResolutionFormat}\0`);
-        for (const { name, file } of files) hash.update(name).update("\0").update(readFileSync(file)).update("\0");
+        for (const { name, file } of files) {
+          hash.update(name).update("\0");
+          if (existsSync(file)) hash.update("present\0").update(readFileSync(file));
+          else hash.update("absent");
+          hash.update("\0");
+        }
         return hash.digest("hex");
       };
       const dartPackageResolutionCurrent = (pkg: string): boolean => {

package/src/fields.ts

@@ -162,12 +162,21 @@ export interface VersionedNomosRefValue {
  */
 export type Sha256Digest = string & { readonly __nomosSha256Digest: unique symbol };
 
+/** A Git object identity in Nomos' current SHA-1 custody repositories.
+ *
+ * This is not a content-law digest. Keeping it nominal prevents a commit/tree address from being
+ * accepted by a field that promises a 256-bit semantic identity merely because both travel as text.
+ */
+export type GitObjectId = string & { readonly __nomosGitObjectId: unique symbol };
+
 /** Codegen marker for the semantic SHA-256 string type. The marker is deliberately
  * non-enumerable: Zod remains the runtime/admission schema, while emitters recover
  * the stronger client type without adding a parallel manifest representation. */
 export const NOMOS_SHA256_DIGEST_BRAND: unique symbol = Symbol.for("nomos.sha256Digest");
+export const NOMOS_GIT_OBJECT_ID_BRAND: unique symbol = Symbol.for("nomos.gitObjectId");
 
 const SHA256_DIGEST_RE = /^[0-9a-f]{64}$/;
+const GIT_OBJECT_ID_RE = /^[0-9a-f]{40}$/;
 
 /** Declare and validate a lowercase hexadecimal SHA-256 digest payload value. */
 export function sha256Digest(): z.ZodType<Sha256Digest> {
@@ -176,6 +185,13 @@ export function sha256Digest(): z.ZodType<Sha256Digest> {
   return schema as unknown as z.ZodType<Sha256Digest>;
 }
 
+/** Declare and validate the object identity used by the current gix custody format. */
+export function gitObjectId(): z.ZodType<GitObjectId> {
+  const schema = z.string().regex(GIT_OBJECT_ID_RE, "expected a lowercase hexadecimal Git object id");
+  Object.defineProperty(schema, NOMOS_GIT_OBJECT_ID_BRAND, { value: true, enumerable: false });
+  return schema as unknown as z.ZodType<GitObjectId>;
+}
+
 /** Recover the SHA-256 semantic marker through omission/null wrappers. */
 export function isSha256DigestSchema(schema: z.ZodTypeAny): boolean {
   let current: z.ZodTypeAny | undefined = schema;
@@ -199,6 +215,29 @@ export function isSha256DigestSchema(schema: z.ZodTypeAny): boolean {
   return false;
 }
 
+/** Recover the Git object-id semantic marker through omission/null wrappers. */
+export function isGitObjectIdSchema(schema: z.ZodTypeAny): boolean {
+  let current: z.ZodTypeAny | undefined = schema;
+  for (let hops = 0; current !== undefined && hops < 16; hops++) {
+    if ((current as unknown as Record<symbol, unknown>)[NOMOS_GIT_OBJECT_ID_BRAND] === true) {
+      return true;
+    }
+    const raw = current as unknown as {
+      _def?: { type?: unknown; innerType?: z.ZodTypeAny };
+      def?: { type?: unknown; innerType?: z.ZodTypeAny };
+    };
+    const def = raw._def ?? raw.def;
+    const kind = def?.type;
+    const name = (current as unknown as { _def?: { typeName?: string } })._def?.typeName;
+    if (kind !== "optional" && kind !== "default" && kind !== "nullable" &&
+        name !== "ZodOptional" && name !== "ZodDefault" && name !== "ZodNullable") {
+      return false;
+    }
+    current = def?.innerType;
+  }
+  return false;
+}
+
 export const nomosRefValueSchema: z.ZodType<NomosRefValue> = z.object({
   workspace: z.string().min(1),
   type: z.string().min(1),
@@ -895,6 +934,10 @@ export const t = {
   sha256Digest(): Field<Sha256Digest, "string"> {
     return makeField<Sha256Digest, "string">("string", sha256Digest(), FirstWriterWins);
   },
+  /** A gix custody object identity. Generated clients surface [GitObjectId], not String. */
+  gitObjectId(): Field<GitObjectId, "string"> {
+    return makeField<GitObjectId, "string">("string", gitObjectId(), FirstWriterWins);
+  },
   int(rules: IntRules = {}): Field<number, "int"> {
     for (const [name, value] of [["minimum", rules.minimum], ["maximum", rules.maximum]] as const) {
       if (value !== undefined && !Number.isSafeInteger(value)) {