@githolon/dsl 0.103.4 → 0.103.6

package/dart/lib/src/test_harness.dart

@@ -46,7 +46,8 @@ import 'package:package_config/package_config.dart' show loadPackageConfigUri;
 import 'dev_cloud.dart';
 import 'node_runner_transport.dart';
 import 'session_bound.dart' show DomainNotInstalledForSession;
-import 'webview_bridge.dart' show NomosBridge, NomosSession;
+import 'webview_bridge.dart'
+    show NomosBirthCertificateSpec, NomosBridge, NomosSession;
 
 enum _KernelRuntimeArtifact {
   executable('holon.wasm'),
@@ -714,7 +715,6 @@ class NomosTestHarness {
             'the offline application parent did not return the framework law, application law and test device needed to birth the signed-in application',
           );
         }
-        final keyHash = sha256.convert(base64Decode(devicePublic)).toString();
         final bornAt = DateTime.now().toUtc().toIso8601String();
         await _phased(
           phase: 'application: establish the parent birth policy',
@@ -751,7 +751,6 @@ class NomosTestHarness {
             authorSecret: deviceSecret,
             payload: <String, Object?>{
               'owner': owner,
-              'ownerKeyHash': keyHash,
               'frameworkHash': framework,
               // Ordered application deployment is reference packages first, deferred child payload last.
               // The parent serves the references; the receiving group is born with only its payload law.
@@ -862,14 +861,16 @@ class NomosTestHarness {
               );
             },
           );
-          final parentCert = await plane.signBirthCert(<String, Object?>{
-            'child': workspace,
-            'founder': owner,
-            'verified': true,
-            'parentKey': devicePublic,
-            'parentId': 'root',
-            'epoch': 0,
-          }, deviceSecret);
+          final parentCert = await plane.signBirthCert(
+              NomosBirthCertificateSpec(
+                child: workspace,
+                founder: owner,
+                verified: true,
+                parentKey: devicePublic,
+                parentId: 'root',
+                epoch: 0,
+              ),
+              deviceSecret);
           await _phased(
             phase: 'owner: establish the verified test application root',
             workspace: workspace,
@@ -890,7 +891,7 @@ class NomosTestHarness {
                   'parentKey': devicePublic,
                   'epoch': 0,
                   'certChain': jsonEncode(<String, Object?>{
-                    'links': <Object?>[parentCert],
+                    'links': <Object?>[parentCert.toWire()],
                   }),
                 },
               );
@@ -1725,8 +1726,7 @@ class NomosTestHarness {
       // 5/6 — THE HOME CEREMONY. Author the birth in the already-mounted PARENT kernel, then sync its sealed
       //       intent to the remote parent where the same offer gate replays it. The HTTP host never receives
       //       business fields or a signing secret and has no birth-authoring lane. The offer carries the
-      //       device-signed homeCert + the owner's device keyHash (the home's genesis ENROLS it, so the born
-      //       home is SIGNER-READY — it can birth its own estates/catalogues from intent 0).
+      //       typed device-signed certificate. The kernel derives and enrolls the founding signer from it.
       String? home;
       await _phased(
         phase: '5/6: remote home-birth ceremony (attested)',
@@ -1741,31 +1741,33 @@ class NomosTestHarness {
           // platform session explicitly; relying on the single-session convenience API becomes
           // ambiguous as soon as the ceremony correctly opens the target workspace in-kernel.
           final homeCert =
-              await plane.session('$clientId-platform-author').signBirthCert({
-            'child': homeName,
-            'founder': subject,
-            // The cert's `verified` must MATCH the gate verdict (CAS-as-law): the offer carries the
-            // dev-IdP token, so the gate resolves a VERIFIED founder.
-            'verified': true,
-            'parentKey': device.publicB64,
-            'parentId': platformWorkspace,
-            'epoch': 0,
-          }, device.secret);
+              await plane.session('$clientId-platform-author').signBirthCert(
+                    NomosBirthCertificateSpec(
+                      child: homeName,
+                      founder: subject,
+                      // The cert's `verified` must MATCH the gate verdict (CAS-as-law): the offer carries
+                      // the dev-IdP token, so the gate resolves a VERIFIED founder.
+                      verified: true,
+                      parentKey: device.publicB64,
+                      parentId: platformWorkspace,
+                      epoch: 0,
+                    ),
+                    device.secret,
+                  );
           final localBirth =
               await plane.session('$clientId-platform-author').offerOutcome(
-            domain: applicationHomeDomain,
-            directiveId: 'nomosInternalBirthReceivingGroup7c1f5e',
-            actor: subject,
-            authorSecret: device.secret,
-            payload: <String, Object?>{
-              'owner': subject,
-              'ownerKeyHash': device.keyHash,
-              'frameworkHash': frameworkHash,
-              'lawHash': applicationHomeLawHash,
-              'bornAt': DateTime.now().toUtc().toIso8601String(),
-              'homeCert': jsonEncode(homeCert),
-            },
-          );
+                    domain: applicationHomeDomain,
+                    directiveId: 'nomosInternalBirthReceivingGroup7c1f5e',
+                    actor: subject,
+                    authorSecret: device.secret,
+                    payload: <String, Object?>{
+                      'owner': subject,
+                      'frameworkHash': frameworkHash,
+                      'lawHash': applicationHomeLawHash,
+                      'bornAt': DateTime.now().toUtc().toIso8601String(),
+                    },
+                    birthCertificate: homeCert,
+                  );
           if (!localBirth.born.contains(homeName)) {
             throw NomosTestHarnessException(
               'cloudBound: the local parent kernel admitted the receiving-group offer but did not birth '
@@ -1815,12 +1817,22 @@ class NomosTestHarness {
           // A PRIVATE home (declared read caps — co2's shape) serves its ledger only to a VERIFIED
           // principal: ride the caller's token when given, else the dev-IdP token the ceremony minted.
           authToken: authToken ?? device.idpToken,
-          // The home was born WARRANTED with THIS device enrolled in its genesis (ownerKeyHash) —
+          // The home was born WARRANTED with THIS device enrolled by the kernel-owned attestation step —
           // connect with the same key so every write is signed and the home's own `.births()` offers
           // (estates/catalogues) are device-attested (the client signs the birth cert automatically).
           authorSecret: device.secret,
         ),
       );
+      // A cloud-bound generated application owns continuous convergence from the moment its home is
+      // mounted. Starting it here makes the harness exercise the product lifecycle: local writes flush,
+      // transport debt survives a partition, and reconnect settles exact operation receipts without tenant
+      // code calling sync(). Child sessions take the same path in acquireSession().
+      final applicationSession = plane.session(home!);
+      applicationSession.nomosInternalRetainCloudAccess(
+        cloud: cloud.origin,
+        signIn: () async => authToken ?? device.idpToken,
+      );
+      await applicationSession.autoSync(fallbackMs: 60000);
       // NO DECOY on a cloudBound harness: the app is genuinely multi-workspace (the home plus every
       // locally-born child), so the plane is never sole-session — the decoy the offline  harness
       // needs (to break single-session inference) would just be a spurious local-only workspace here.
@@ -1833,9 +1845,7 @@ class NomosTestHarness {
         workdir,
         onDiagnostic,
         [home!],
-        // The owner's device (enrolled in the home's genesis via ownerKeyHash) — the app derives the
-        // keyHash for its own `.births()` payloads from [devicePublicKey] and signs locally-born-child
-        // sessions with [deviceSecret].
+        // The owner's device (enrolled by the typed birth attestation) signs later child births locally.
         devicePublics: {home!: device.publicB64},
         deviceSecrets: {home!: device.secret},
         frameworkHash: frameworkHash,