@githolon/dsl 0.105.18 → 0.105.22

package/dart/CHANGELOG.md

@@ -1,3 +1,15 @@
+## 0.64.36
+
+- Restaged with the current kernel candidate: regenerated vendored assets (kernel release identity is baked into them). Published pub.dev archives are immutable, so regenerated bytes ride their own version.
+
+## 0.64.35
+
+- Match application home birth certificates to the locally sealed parent offer's CAS-as-law verification verdict.
+
+## 0.64.34
+
+- Keep the typed birth certificate on the birth offer only, so preliminary signer enrolment can settle before generated business APIs open.
+
 ## 0.64.33
 
 - Converge arbitrary historical generated-model backlogs while failing a genuinely repeated immutable lifecycle step with a typed stall error.

package/dart/lib/src/runner/node-entry.mjs

@@ -7458,6 +7458,12 @@ function createWasmKernelProvider({ span } = {}) {
   return createWasmEnginePlane({ span }).providerFor();
 }
 
+// src/offer_args.ts
+function withoutBirthCertificate(args) {
+  const { birthCertificate: _birthCertificate, ...rest } = args;
+  return rest;
+}
+
 // src/_adapter/custody-transport.ts
 var enc3 = new TextEncoder();
 var dec3 = new TextDecoder();
@@ -8509,6 +8515,37 @@ function createSerializedScheduler() {
 // src/intent_offer_codec.ts
 var encoder = new TextEncoder();
 
+// src/domain_readiness.ts
+async function prepareDomainUntilReady({
+  domain,
+  packageHash,
+  directiveId,
+  warm,
+  timeoutMs = 3e4,
+  yieldEvery = 32,
+  now = Date.now,
+  yieldHost = () => new Promise((resolve) => setTimeout(resolve, 0)),
+  onQuantum
+}) {
+  if (!domain || !packageHash) return { prepared: false, reason: "invalid-target", quanta: 0 };
+  const selector = directiveId ? `plan:offer:${domain}:${directiveId}` : `plan:domain:${domain}`;
+  const deadlineAt = now() + timeoutMs;
+  let quanta = 0;
+  while (now() <= deadlineAt) {
+    quanta += 1;
+    const progress = await warm();
+    onQuantum?.(progress);
+    if (progress.preparedCommandDomain === domain && progress.preparedCommandPackage === packageHash && progress.preparedCommandSelector === selector) {
+      return { prepared: true, quanta };
+    }
+    if (progress.maintenancePending !== true) {
+      return { prepared: false, reason: "maintenance-exhausted", quanta };
+    }
+    if (quanta % Math.max(1, yieldEvery) === 0) await yieldHost();
+  }
+  return { prepared: false, reason: "deadline-exceeded", quanta };
+}
+
 // src/index.ts
 var enc4 = new TextEncoder();
 var dec4 = new TextDecoder();
@@ -9077,30 +9114,31 @@ ${String(commit).toLowerCase()}`;
     scheduleMaintenanceSoon();
   };
   const prepareDomainReady = async (domain, packageHash, directiveId) => {
-    if (!domain || !packageHash) return { prepared: false };
     requestDomainMaintenance(domain, packageHash, directiveId);
-    const selector = directiveId ? `plan:offer:${domain}:${directiveId}` : `plan:domain:${domain}`;
-    for (let quantum = 0; quantum < 64; quantum += 1) {
-      const result = await serialize(async () => JSON.parse(call("query", { queryBytes: qBytes({
+    const readiness = await prepareDomainUntilReady({
+      domain,
+      packageHash,
+      directiveId,
+      warm: () => serialize(async () => JSON.parse(call("query", { queryBytes: qBytes({
         op: "warm",
         interactiveOnly: true,
         requestedDomain: domain,
         ...directiveId ? { requestedDirective: directiveId } : {},
         requestedPackage: packageHash
-      }) })), "prepare generated domain", false);
-      if (typeof process !== "undefined" && process.env?.NOMOS_DEBUG_RAW) {
-        console.error("[nomos] generated domain readiness quantum", result);
-      }
-      if (result?.preparedCommandDomain === domain && result?.preparedCommandPackage === packageHash && result?.preparedCommandSelector === selector) {
-        const index = _maintenanceTargets.findIndex(
-          (target) => target.domain === domain && target.packageHash === packageHash && target.directiveId === directiveId
-        );
-        if (index >= 0) _maintenanceTargets.splice(index, 1);
-        return { prepared: true };
+      }) })), "prepare generated domain", false),
+      onQuantum: (result) => {
+        if (typeof process !== "undefined" && process.env?.NOMOS_DEBUG_RAW) {
+          console.error("[nomos] generated domain readiness quantum", result);
+        }
       }
-      if (result?.maintenancePending !== true) break;
+    });
+    if (readiness.prepared) {
+      const index = _maintenanceTargets.findIndex(
+        (target) => target.domain === domain && target.packageHash === packageHash && target.directiveId === directiveId
+      );
+      if (index >= 0) _maintenanceTargets.splice(index, 1);
     }
-    return { prepared: false };
+    return readiness;
   };
   const scheduleMaintenanceSoon = (delayMs = 0) => {
     if (_disposed || _maintenanceTimer !== null || _maintenanceInFlight) return;
@@ -10008,7 +10046,7 @@ ${String(commit).toLowerCase()}`;
               };
               writeWork(`envelope-${es}.json`, enc4.encode(stringifyBig(enrollEnvelope)));
               const enrollment = JSON.parse(authorViaOffer({
-                ...authorArgs,
+                ...withoutBirthCertificate(authorArgs),
                 directiveId: "enrollSigner",
                 envelopeFile: `/work/envelope-${es}.json`,
                 seq: es
@@ -10219,7 +10257,9 @@ ${String(commit).toLowerCase()}`;
       try {
         const readiness = await prepareDomainReady(domain, candidateHash);
         if (readiness.prepared !== true) {
-          throw new Error(`the current model '${candidateHash}' has no authenticated '${domain}' USDA slice`);
+          throw new Error(
+            `the current model '${candidateHash}' authenticated '${domain}' USDA slice did not become ready (${readiness.reason} after ${readiness.quanta} maintenance quanta)`
+          );
         }
         return { ok: true, stage: "promoted" };
       } catch (error) {
@@ -10267,7 +10307,9 @@ ${String(commit).toLowerCase()}`;
       const readiness = await prepareDomainReady(domain, candidateHash);
       if (readiness.prepared !== true) {
         throw Object.assign(
-          new Error(`the promoted model '${candidateHash}' is active but its authenticated '${domain}' USDA slice is not ready`),
+          new Error(
+            `the promoted model '${candidateHash}' is active but its authenticated '${domain}' USDA slice did not become ready (${readiness.reason} after ${readiness.quanta} maintenance quanta)`
+          ),
           { code: "nomos.model.readiness_failed" }
         );
       }

package/dart/pubspec.yaml

@@ -7,7 +7,7 @@ repository: https://github.com/Captain-App/nomos2
 description: >-
   Nomos 2 Dart client — generated domain values, intent payloads and application
   lifecycle types over the typed Nomos kernel protocol and USDA custody model.
-version: 0.64.33
+version: 0.64.36
 
 environment:
   sdk: ^3.5.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@githolon/dsl",
-  "version": "0.105.18",
+  "version": "0.105.22",
   "type": "module",
   "sideEffects": false,
   "description": "Nomos 2 domain-authoring DSL: aggregates + directives in TS, executed and encoded to the Rust kernel's wire shapes.",

package/runtime/generated-application-host.js

@@ -6489,6 +6489,12 @@ function createWasmKernelProvider({ span } = {}) {
   return createWasmEnginePlane({ span }).providerFor();
 }
 
+// ../cloud/web-client/src/offer_args.ts
+function withoutBirthCertificate(args) {
+  const { birthCertificate: _birthCertificate, ...rest } = args;
+  return rest;
+}
+
 // ../cloud/web-client/src/_adapter/custody-transport.ts
 var enc3 = new TextEncoder();
 var dec3 = new TextDecoder();
@@ -7540,6 +7546,37 @@ function createSerializedScheduler() {
 // ../cloud/web-client/src/intent_offer_codec.ts
 var encoder = new TextEncoder();
 
+// ../cloud/web-client/src/domain_readiness.ts
+async function prepareDomainUntilReady({
+  domain,
+  packageHash,
+  directiveId,
+  warm,
+  timeoutMs = 3e4,
+  yieldEvery = 32,
+  now = Date.now,
+  yieldHost = () => new Promise((resolve) => setTimeout(resolve, 0)),
+  onQuantum
+}) {
+  if (!domain || !packageHash) return { prepared: false, reason: "invalid-target", quanta: 0 };
+  const selector = directiveId ? `plan:offer:${domain}:${directiveId}` : `plan:domain:${domain}`;
+  const deadlineAt = now() + timeoutMs;
+  let quanta = 0;
+  while (now() <= deadlineAt) {
+    quanta += 1;
+    const progress = await warm();
+    onQuantum?.(progress);
+    if (progress.preparedCommandDomain === domain && progress.preparedCommandPackage === packageHash && progress.preparedCommandSelector === selector) {
+      return { prepared: true, quanta };
+    }
+    if (progress.maintenancePending !== true) {
+      return { prepared: false, reason: "maintenance-exhausted", quanta };
+    }
+    if (quanta % Math.max(1, yieldEvery) === 0) await yieldHost();
+  }
+  return { prepared: false, reason: "deadline-exceeded", quanta };
+}
+
 // ../cloud/web-client/src/index.ts
 var enc4 = new TextEncoder();
 var dec4 = new TextDecoder();
@@ -8108,30 +8145,31 @@ ${String(commit).toLowerCase()}`;
     scheduleMaintenanceSoon();
   };
   const prepareDomainReady = async (domain, packageHash, directiveId) => {
-    if (!domain || !packageHash) return { prepared: false };
     requestDomainMaintenance(domain, packageHash, directiveId);
-    const selector = directiveId ? `plan:offer:${domain}:${directiveId}` : `plan:domain:${domain}`;
-    for (let quantum = 0; quantum < 64; quantum += 1) {
-      const result = await serialize(async () => JSON.parse(call("query", { queryBytes: qBytes({
+    const readiness = await prepareDomainUntilReady({
+      domain,
+      packageHash,
+      directiveId,
+      warm: () => serialize(async () => JSON.parse(call("query", { queryBytes: qBytes({
         op: "warm",
         interactiveOnly: true,
         requestedDomain: domain,
         ...directiveId ? { requestedDirective: directiveId } : {},
         requestedPackage: packageHash
-      }) })), "prepare generated domain", false);
-      if (typeof process !== "undefined" && process.env?.NOMOS_DEBUG_RAW) {
-        console.error("[nomos] generated domain readiness quantum", result);
-      }
-      if (result?.preparedCommandDomain === domain && result?.preparedCommandPackage === packageHash && result?.preparedCommandSelector === selector) {
-        const index = _maintenanceTargets.findIndex(
-          (target) => target.domain === domain && target.packageHash === packageHash && target.directiveId === directiveId
-        );
-        if (index >= 0) _maintenanceTargets.splice(index, 1);
-        return { prepared: true };
+      }) })), "prepare generated domain", false),
+      onQuantum: (result) => {
+        if (typeof process !== "undefined" && process.env?.NOMOS_DEBUG_RAW) {
+          console.error("[nomos] generated domain readiness quantum", result);
+        }
       }
-      if (result?.maintenancePending !== true) break;
+    });
+    if (readiness.prepared) {
+      const index = _maintenanceTargets.findIndex(
+        (target) => target.domain === domain && target.packageHash === packageHash && target.directiveId === directiveId
+      );
+      if (index >= 0) _maintenanceTargets.splice(index, 1);
     }
-    return { prepared: false };
+    return readiness;
   };
   const scheduleMaintenanceSoon = (delayMs = 0) => {
     if (_disposed || _maintenanceTimer !== null || _maintenanceInFlight) return;
@@ -9039,7 +9077,7 @@ ${String(commit).toLowerCase()}`;
               };
               writeWork(`envelope-${es}.json`, enc4.encode(stringifyBig(enrollEnvelope)));
               const enrollment = JSON.parse(authorViaOffer({
-                ...authorArgs,
+                ...withoutBirthCertificate(authorArgs),
                 directiveId: "enrollSigner",
                 envelopeFile: `/work/envelope-${es}.json`,
                 seq: es
@@ -9250,7 +9288,9 @@ ${String(commit).toLowerCase()}`;
       try {
         const readiness = await prepareDomainReady(domain, candidateHash);
         if (readiness.prepared !== true) {
-          throw new Error(`the current model '${candidateHash}' has no authenticated '${domain}' USDA slice`);
+          throw new Error(
+            `the current model '${candidateHash}' authenticated '${domain}' USDA slice did not become ready (${readiness.reason} after ${readiness.quanta} maintenance quanta)`
+          );
         }
         return { ok: true, stage: "promoted" };
       } catch (error) {
@@ -9298,7 +9338,9 @@ ${String(commit).toLowerCase()}`;
       const readiness = await prepareDomainReady(domain, candidateHash);
       if (readiness.prepared !== true) {
         throw Object.assign(
-          new Error(`the promoted model '${candidateHash}' is active but its authenticated '${domain}' USDA slice is not ready`),
+          new Error(
+            `the promoted model '${candidateHash}' is active but its authenticated '${domain}' USDA slice did not become ready (${readiness.reason} after ${readiness.quanta} maintenance quanta)`
+          ),
           { code: "nomos.model.readiness_failed" }
         );
       }
@@ -13904,6 +13946,7 @@ async function nomosInternalOpenGeneratedApplication(options, bind, internals =
       throw applicationError("Sign in changed authority while preparing this application device.", "nomos.authority.changed_during_open");
     }
     authToken = deviceToken;
+    authorityHolon = await measureOpen("bind attested application device", () => mountAuthority(secret, authToken));
     const birthOrRepeat = async () => {
       const birth = await measureOpen("establish private application custody", () => authorityHolon.nomosInternalBirthReceivingGroup({
         parent: application,

package/src/compile_package_main.ts

@@ -1664,8 +1664,8 @@ const NOMOS_TYPES_DEP = "^0.8.7";
 // 0.48.x: session-bound clients (XClient.bind/NomosClientInterface/DomainClientSessionMismatch/
 //         DomainNotInstalledForSession, engine.follow, pendingConflicts lanes) — the generated client
 //         REQUIRES this surface. 0.48.1 fixes NomosSession.watchPendingConflicts delegation.
-const NOMOS_CLIENT_DEP = "^0.64.33";
-const NOMOS_FLUTTER_DEP = "^0.63.57";
+const NOMOS_CLIENT_DEP = "^0.64.36";
+const NOMOS_FLUTTER_DEP = "^0.63.61";
 // DRIFT TRIPWIRE: pubspec_pins.test.ts asserts these equal the CURRENT versions in dsl/dart/pubspec.yaml
 // and dsl/dart_types/pubspec.yaml — a Dart release without this bump fails the suite, so tenants never
 // land back in dependency_overrides (the exact co2 report this closes, third occurrence).