@githolon/dsl 0.105.15 → 0.105.16

package/dart/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.64.32
+
+- Prove a restored generated-application device is enrolled before exposing business APIs, including recovery from an interrupted bootstrap journal.
+
 ## 0.64.31
 
 - Restage the validated intent-offer byte gate and deterministic signer-posture reader into the immutable Dart runner.

package/dart/pubspec.yaml

@@ -7,7 +7,7 @@ repository: https://github.com/Captain-App/nomos2
 description: >-
   Nomos 2 Dart client — generated domain values, intent payloads and application
   lifecycle types over the typed Nomos kernel protocol and USDA custody model.
-version: 0.64.31
+version: 0.64.32
 
 environment:
   sdk: ^3.5.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@githolon/dsl",
-  "version": "0.105.15",
+  "version": "0.105.16",
   "type": "module",
   "sideEffects": false,
   "description": "Nomos 2 domain-authoring DSL: aggregates + directives in TS, executed and encoded to the Rust kernel's wire shapes.",

package/runtime/generated-application-host.js

@@ -13884,7 +13884,6 @@ async function nomosInternalOpenGeneratedApplication(options, bind, internals =
     let authorityHolon = await measureOpen("open private application custody", () => mountAuthority(secret, authToken));
     const storedJournal = await measureOpen("load application bootstrap state", () => store.loadText(journalState));
     const completed = storedJournal === "complete";
-    const hadDurableSecret = secret !== null;
     let publicKey;
     if (secret === null) {
       const device = await measureOpen("create application device identity", () => authorityHolon.authorKeygen());
@@ -13905,22 +13904,44 @@ async function nomosInternalOpenGeneratedApplication(options, bind, internals =
       throw applicationError("Sign in changed authority while preparing this application device.", "nomos.authority.changed_during_open");
     }
     authToken = deviceToken;
+    const birthOrRepeat = async () => {
+      const birth = await measureOpen("establish private application custody", () => authorityHolon.nomosInternalBirthReceivingGroup({
+        parent: application,
+        principal,
+        subject,
+        device: { secret, public: publicKey },
+        authToken,
+        idToken: authToken,
+        verifiedVia: issuer,
+        bornAt: now().toISOString(),
+        confirm: true
+      }));
+      const verdict = birth.verify;
+      if (verdict !== void 0 && verdict.valid !== true) throw new Error(`the born application failed replay verification: ${String(verdict.error ?? "unknown")}`);
+    };
+    const ensureSignerEnrollment = async () => {
+      const enroll = () => authorityHolon.ensureParentSignerEnrollment({
+        // The write gate that this device will use is the receiving-group workspace itself.
+        // The application root authorises/births that home; it is not a substitute signer index.
+        parent: receivingGroup,
+        // The author gate speaks canonical Nomos principals. A provider subject is deliberately
+        // opaque and may contain its own namespace separators; never enrol that raw value as the actor.
+        principal: subject,
+        publicKey,
+        authorSecret: secret,
+        authToken,
+        idToken: authToken,
+        verifiedVia: issuer
+      });
+      try {
+        await measureOpen("confirm private-custody signer enrolment", enroll);
+      } catch (error) {
+        if (!String(error).includes("receiving-group-additional-device-requires-current-device-or-guardian")) throw error;
+        await birthOrRepeat();
+        await measureOpen("verify recovered private-custody signer enrolment", enroll);
+      }
+    };
     if (!completed) {
-      const birthOrRepeat = async () => {
-        const birth = await measureOpen("establish private application custody", () => authorityHolon.nomosInternalBirthReceivingGroup({
-          parent: application,
-          principal,
-          subject,
-          device: { secret, public: publicKey },
-          authToken,
-          idToken: authToken,
-          verifiedVia: issuer,
-          bornAt: now().toISOString(),
-          confirm: true
-        }));
-        const verdict = birth.verify;
-        if (verdict !== void 0 && verdict.valid !== true) throw new Error(`the born application failed replay verification: ${String(verdict.error ?? "unknown")}`);
-      };
       let homeAvailable = false;
       try {
         homeAvailable = Boolean(await measureOpen("check private application custody", () => authorityHolon.head()));
@@ -13928,28 +13949,6 @@ async function nomosInternalOpenGeneratedApplication(options, bind, internals =
       }
       if (!homeAvailable) {
         await birthOrRepeat();
-      } else if (!hadDurableSecret) {
-        try {
-          await measureOpen("enrol application device in its private custody", () => authorityHolon.ensureParentSignerEnrollment({
-            // The write gate that this device will use is the receiving-group workspace itself.
-            // The application root authorises/births that home; it is not a substitute signer index.
-            parent: receivingGroup,
-            // The author gate speaks canonical Nomos principals. A provider subject is deliberately
-            // opaque and may contain its own namespace separators; never enrol that raw value as the actor.
-            principal: subject,
-            publicKey,
-            authorSecret: secret,
-            authToken,
-            idToken: authToken,
-            verifiedVia: issuer
-          }));
-        } catch (error) {
-          if (String(error).includes("receiving-group-additional-device-requires-current-device-or-guardian")) {
-            await birthOrRepeat();
-          } else {
-            throw error;
-          }
-        }
       }
       await measureOpen("save application bootstrap progress", () => store.saveText(journalState, "home-available"));
       authorityHolon = await measureOpen("rebind durable application authority", () => mountAuthority(secret, authToken));
@@ -13962,23 +13961,11 @@ async function nomosInternalOpenGeneratedApplication(options, bind, internals =
       const verified = await measureOpen("verify new application custody", () => authorityHolon.verifyChain());
       if (verified.valid !== true) throw new Error(`the private authority context failed replay verification: ${String(verified.error ?? "unknown")}`);
       await measureOpen("save application bootstrap progress", () => store.saveText(journalState, "verified"));
-      try {
-        await measureOpen("confirm private-custody signer enrolment", () => authorityHolon.ensureParentSignerEnrollment({
-          parent: receivingGroup,
-          principal: subject,
-          authorSecret: secret,
-          authToken,
-          idToken: authToken,
-          verifiedVia: issuer
-        }));
-      } catch (error) {
-        if (/revoked/i.test(String(error))) throw error;
-      }
-      await measureOpen("complete application bootstrap journal", async () => {
+      await measureOpen("save verified application bootstrap journal", async () => {
         await store.saveText(journalState, "complete");
-        await store.remove(journalState);
       });
     }
+    await ensureSignerEnrollment();
     holon = authorityHolon;
     const authorityVerified = await measureOpen("verify application custody", () => holon.verifyChain());
     if (authorityVerified.valid !== true) throw new Error(`the private authority context failed replay verification: ${String(authorityVerified.error ?? "unknown")}`);

package/src/compile_package_main.ts

@@ -1664,8 +1664,8 @@ const NOMOS_TYPES_DEP = "^0.8.7";
 // 0.48.x: session-bound clients (XClient.bind/NomosClientInterface/DomainClientSessionMismatch/
 //         DomainNotInstalledForSession, engine.follow, pendingConflicts lanes) — the generated client
 //         REQUIRES this surface. 0.48.1 fixes NomosSession.watchPendingConflicts delegation.
-const NOMOS_CLIENT_DEP = "^0.64.31";
-const NOMOS_FLUTTER_DEP = "^0.63.54";
+const NOMOS_CLIENT_DEP = "^0.64.32";
+const NOMOS_FLUTTER_DEP = "^0.63.55";
 // DRIFT TRIPWIRE: pubspec_pins.test.ts asserts these equal the CURRENT versions in dsl/dart/pubspec.yaml
 // and dsl/dart_types/pubspec.yaml — a Dart release without this bump fails the suite, so tenants never
 // land back in dependency_overrides (the exact co2 report this closes, third occurrence).