@githolon/dsl 0.105.11 → 0.105.12

package/dart/lib/src/webview_bridge.dart

@@ -1153,7 +1153,7 @@ extension NomosRefAcquire<TAggregate> on NomosRef<TAggregate> {
 /// callback, invoked ONLY when the workspace is nowhere on the local plane (never for a local-only or
 /// already-mounted workspace). Mirrors the cloud-shaped subset of [NomosBridge.connect]'s parameters.
 class NomosSessionCredentials {
-  /// The cloud base URL the workspace syncs from (e.g. `https://nomos.captainapp.co.uk`).
+  /// The cloud base URL the workspace syncs from (e.g. `https://nomos.cafe`).
   final String cloud;
 
   /// The verified principal's access token (`x-nomos-auth`), when the workspace requires one.

package/dart/test/node_runner_transport_test.dart

@@ -66,7 +66,7 @@ void main() {
     () async {
       final ws = Platform.environment['NOMOS_HEADLESS_E2E']!;
       final cloud = Platform.environment['NOMOS_CLOUD'] ??
-          'https://nomos.captainapp.co.uk';
+          'https://nomos.cafe';
       await bridge.ready.timeout(const Duration(seconds: 15));
       await bridge.connect(
           cloud: cloud, workspace: ws, clientId: 'headless-test');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@githolon/dsl",
-  "version": "0.105.11",
+  "version": "0.105.12",
   "type": "module",
   "sideEffects": false,
   "description": "Nomos 2 domain-authoring DSL: aggregates + directives in TS, executed and encoded to the Rust kernel's wire shapes.",

package/src/codegen_proof.ts

@@ -3326,13 +3326,13 @@ function generateSealedApplicationProof(
     `const proofPrincipal = proofUid ? "user:" + proofUid : "";`,
     `const signIn = async (request: { readonly deviceChallenge?: string } = {}) => {`,
     `  const session = process.env.NOMOS_AUTH_TOKEN || "";`,
-    `  if (!request.deviceChallenge) return session;`,
     `  if (!proofUid) fail("the generated blank-user proof has no authority subject");`,
-    `  const endpoint = process.env.NOMOS_DEVICE_TOKEN_ENDPOINT || "https://id.nomos.captainapp.co.uk/token";`,
+    `  const endpoint = process.env.NOMOS_DEVICE_TOKEN_ENDPOINT || "https://id.nomos.cafe/token";`,
     `  const localTestIdp = endpoint.endsWith("/dev/mint-token");`,
+    `  const nonce = request.deviceChallenge || "0".repeat(64);`,
     `  const response = await fetch(endpoint, {`,
     `    method: "POST", headers: { "content-type": "application/json", ...(session ? { authorization: "Bearer " + session } : {}) },`,
-    `    body: JSON.stringify(localTestIdp ? { sub: proofUid, nonce: request.deviceChallenge } : { nonce: request.deviceChallenge }),`,
+    `    body: JSON.stringify(localTestIdp ? { sub: proofUid, nonce } : { nonce }),`,
     `  });`,
     `  const body = await response.json() as { token?: string; error?: string };`,
     `  if (!response.ok || !body.token) fail("the generated application could not attest its private device: " + (body.error || response.status));`,

package/src/compile_package_main.ts

@@ -1661,7 +1661,7 @@ const NOMOS_TYPES_DEP = "^0.8.7";
 //         DomainNotInstalledForSession, engine.follow, pendingConflicts lanes) — the generated client
 //         REQUIRES this surface. 0.48.1 fixes NomosSession.watchPendingConflicts delegation.
 const NOMOS_CLIENT_DEP = "^0.64.26";
-const NOMOS_FLUTTER_DEP = "^0.63.49";
+const NOMOS_FLUTTER_DEP = "^0.63.50";
 // DRIFT TRIPWIRE: pubspec_pins.test.ts asserts these equal the CURRENT versions in dsl/dart/pubspec.yaml
 // and dsl/dart_types/pubspec.yaml — a Dart release without this bump fails the suite, so tenants never
 // land back in dependency_overrides (the exact co2 report this closes, third occurrence).