@githolon/dsl 0.103.8 → 0.103.10

package/src/codegen_proof.ts

@@ -3338,7 +3338,14 @@ function generateSealedApplicationProof(
     `  if (!response.ok || !body.token) fail("the generated application could not attest its private device: " + (body.error || response.status));`,
     `  return body.token;`,
     `};`,
-    `const application = await ${opener}({ cloud, application: applicationName, signIn });`,
+    `const performanceEnabled = process.env.NOMOS_PROOF_PERFORMANCE === "1";`,
+    `const reportPerformance = performanceEnabled`,
+    `  ? (sample: { readonly operation: string; readonly name: string; readonly durationMs: number; readonly domain?: string; readonly directive?: string }) =>`,
+    `      console.error("[nomos-application-performance] " + JSON.stringify(sample))`,
+    `  : undefined;`,
+    `const coldOpenStarted = performance.now();`,
+    `const application = await ${opener}({ cloud, application: applicationName, signIn, onPerformance: reportPerformance });`,
+    `if (reportPerformance) reportPerformance({ operation: "open", name: "generated application ready (cold)", durationMs: performance.now() - coldOpenStarted });`,
     `ok("opened the generated ${applicationName}; identity, custody, recovery and sync stay inside Nomos");`,
     `const waitUntilSaved = async (): Promise<void> => {`,
     `  const current = await application.currentStatus();`,
@@ -3467,6 +3474,15 @@ function generateSealedApplicationProof(
     `const _proofDisposable = application as unknown as { [Symbol.asyncDispose]?: () => Promise<void> };`,
     `const _proofDispose = _proofDisposable[Symbol.asyncDispose];`,
     `if (_proofDispose) await Promise.race([_proofDispose(), new Promise<void>((resolve) => setTimeout(resolve, 1_000))]);`,
+    `if (performanceEnabled) {`,
+    `  const warmOpenStarted = performance.now();`,
+    `  const warmApplication = await ${opener}({ cloud, application: applicationName, signIn, onPerformance: reportPerformance });`,
+    `  reportPerformance?.({ operation: "open", name: "generated application ready (warm)", durationMs: performance.now() - warmOpenStarted });`,
+    `  const warmStatus = await warmApplication.currentStatus();`,
+    `  if (warmStatus.phase === "attention") fail(warmStatus.message ?? "the warm application needs attention");`,
+    `  const warmDisposable = warmApplication as unknown as { [Symbol.asyncDispose]?: () => Promise<void> };`,
+    `  if (warmDisposable[Symbol.asyncDispose]) await Promise.race([warmDisposable[Symbol.asyncDispose]!(), new Promise<void>((resolve) => setTimeout(resolve, 1_000))]);`,
+    `}`,
     `process.exit(0);`,
     ``,
   );

package/src/codegen_ts.ts

@@ -3920,6 +3920,10 @@ export function generateTsClient(modules: readonly DomainModule[], opts: TsClien
       ),
       `type _${applicationName}Business = ${applicationType};`,
       `export type ${applicationName}Status = _NomosApplicationStatus;`,
+      `export interface ${applicationName}PerformanceSample {`,
+      `  readonly operation: "open" | "offer" | "birth" | "read" | "sync" | "maintenance";`,
+      `  readonly name: string; readonly durationMs: number; readonly domain?: string; readonly directive?: string;`,
+      `}`,
       `export type ${applicationName} = _${applicationName}Business & _NomosApplicationParticipant & _NomosApplicationLifecycle & _NomosApplicationModelLifecycle${hasInvitations ? " & _NomosApplicationInvitations" : ""};`,
       `export interface ${applicationName}OpenOptions {`,
       `  /** Nomos Cloud serving this deployed application. Configure it once at the app boundary. */`,
@@ -3928,6 +3932,8 @@ export function generateTsClient(modules: readonly DomainModule[], opts: TsClien
       `  readonly application: string;`,
       `  /** Return the signed-in authority credential; when supplied, bind its opaque device challenge. */`,
       `  readonly signIn: (request?: { readonly deviceChallenge?: string }) => Promise<string>;`,
+      `  /** Typed timings for developer tooling; Nomos routing, credentials and Git custody remain private. */`,
+      `  readonly onPerformance?: (sample: ${applicationName}PerformanceSample) => void;`,
       `}`,
       `function _nomosPublicDomain<T extends Record<string, unknown>>(domain: T): _NomosPublicDomain<T> {`,
       `  const application: Record<string, unknown> = {};`,
@@ -4055,7 +4061,7 @@ export function generateTsClient(modules: readonly DomainModule[], opts: TsClien
       ` *  or parallel cache around it. Nomos owns offline custody and synchronization. */`,
       `export function ${applicationOpener}(options: ${applicationName}OpenOptions): Promise<${applicationName}> {`,
       `  return nomosInternalOpenGeneratedApplication(`,
-      `    { cloud: options.cloud, application: options.application, signIn: options.signIn, lawHash: ${hashConst} },`,
+      `    { cloud: options.cloud, application: options.application, signIn: options.signIn, onPerformance: options.onPerformance, lawHash: ${hashConst} },`,
       `    (holon, user) => _nomosBind${applicationName}(holon as NomosHolon, user),`,
       `  );`,
       `}`,

package/src/compile_package_main.ts

@@ -197,6 +197,10 @@ const DSL_DIR = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..")
  * here so a generated offer can never silently fall back to initializing the whole tenant domain.
  */
 const BUSINESS_BIRTH_FRAMEWORK_PLAN_SOURCES: Readonly<Record<string, PlanSourceSliceTarget>> = {
+  seedBirthPolicy: {
+    modulePath: path.join(DSL_DIR, "src", "framework", "birth_meter.ts"),
+    exportName: "seedBirthPolicy",
+  },
   enrollSigner: {
     modulePath: path.join(DSL_DIR, "src", "framework", "signing_identity.ts"),
     exportName: "enrollSigner",
@@ -1646,8 +1650,8 @@ const NOMOS_TYPES_DEP = "^0.8.4";
 // 0.48.x: session-bound clients (XClient.bind/NomosClientInterface/DomainClientSessionMismatch/
 //         DomainNotInstalledForSession, engine.follow, pendingConflicts lanes) — the generated client
 //         REQUIRES this surface. 0.48.1 fixes NomosSession.watchPendingConflicts delegation.
-const NOMOS_CLIENT_DEP = "^0.64.7";
-const NOMOS_FLUTTER_DEP = "^0.63.10";
+const NOMOS_CLIENT_DEP = "^0.64.10";
+const NOMOS_FLUTTER_DEP = "^0.63.13";
 // DRIFT TRIPWIRE: pubspec_pins.test.ts asserts these equal the CURRENT versions in dsl/dart/pubspec.yaml
 // and dsl/dart_types/pubspec.yaml — a Dart release without this bump fails the suite, so tenants never
 // land back in dependency_overrides (the exact co2 report this closes, third occurrence).
@@ -5173,7 +5177,7 @@ async function main(): Promise<void> {
   const temporaryDeclarationPath = temporaryClientPath.replace(/\.ts$/, ".d.ts");
   const runtimeTypesSource = [
     `export declare function nomosInternalOpenGeneratedApplication<T extends object>(`,
-    `  options: { cloud: string; application: string; signIn: (request?: { readonly deviceChallenge?: string }) => Promise<string>; lawHash: string },`,
+    `  options: { cloud: string; application: string; signIn: (request?: { readonly deviceChallenge?: string }) => Promise<string>; onPerformance?: (sample: { readonly operation: "open" | "offer" | "birth" | "read" | "sync" | "maintenance"; readonly name: string; readonly durationMs: number; readonly domain?: string; readonly directive?: string }) => void; lawHash: string },`,
     `  bind: (holon: unknown, user: { readonly identityId: string; readonly identityAddress: string }) => T,`,
     `): Promise<T & {`,
     `  currentStatus(): Promise<any>;`,

package/src/framework/domain_lifecycle.ts

@@ -294,10 +294,12 @@ export const stageDomain = directive(DOMAIN_LIFECYCLE_DIRECTIVES.Stage)
   })
   .requires(MODEL_LIFECYCLE_AUTHORITY);
 
-/** Make a staged package current. The package bytes are already committed; the kernel
- *  re-loads them from prefix state and runs the evolve gate on this phase transition.
- *  The prior version stays Active by default so gradual-rollout clients can still have
- *  their declared era checked; the newer activation stamp alone makes this law current. */
+/** Make a staged or retained Active package current. The package bytes are already
+ *  committed; the kernel re-loads them from prefix state and runs the evolve gate on
+ *  this governed transition. Prior versions stay Active by default so gradual-rollout
+ *  clients can still have their declared era checked; the newer activation stamp alone
+ *  makes this law current. Re-promoting a shadowed Active package is therefore the lawful,
+ *  history-proved inverse of a later package taking its domain keys. */
 export const promoteDomain = directive(DOMAIN_LIFECYCLE_DIRECTIVES.Promote)
   .mutates(DomainInstallation)
   .payload(z.object({