@githolon/dsl 0.105.19 → 0.105.23

package/dart/CHANGELOG.md

@@ -1,3 +1,15 @@
+## 0.64.37
+
+- Restaged with the current kernel candidate: regenerated vendored assets (kernel release identity is baked into them). Published pub.dev archives are immutable, so regenerated bytes ride their own version.
+
+## 0.64.36
+
+- Restaged with the current kernel candidate: regenerated vendored assets (kernel release identity is baked into them). Published pub.dev archives are immutable, so regenerated bytes ride their own version.
+
+## 0.64.35
+
+- Match application home birth certificates to the locally sealed parent offer's CAS-as-law verification verdict.
+
 ## 0.64.34
 
 - Keep the typed birth certificate on the birth offer only, so preliminary signer enrolment can settle before generated business APIs open.

package/dart/lib/src/runner/node-entry.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // <define:__NOMOS_KERNEL_RELEASE__>
-var define_NOMOS_KERNEL_RELEASE_default = { production: { hash: "d37253bcefd90a180a6a1af96422a9f0724dfca9efd9ae7cff070afa2c410f09", version: "kernel-d37253bc", features: ["compoundKeys", "capturedReads", "invariantGate", "surfacedMerge", "fieldProvenance", "nullSemantics", "attestedReads", "conflictSnapshots", "ownedAudience", "temporalEnum"], protocol: 1 }, testMint: { hash: "b6bddd8d61390edbe2ee4e5f3c7f21108bdb7800af746d20f568936f63e2d517", version: "kernel-b6bddd8d", features: ["compoundKeys", "capturedReads", "invariantGate", "surfacedMerge", "fieldProvenance", "nullSemantics", "attestedReads", "conflictSnapshots", "ownedAudience", "temporalEnum"], protocol: 1 } };
+var define_NOMOS_KERNEL_RELEASE_default = { production: { hash: "49e1a3d03b90d54318fabab2ec8574e211fca54310553b5cd07d546ff8d04a67", version: "kernel-49e1a3d0", features: ["compoundKeys", "capturedReads", "invariantGate", "surfacedMerge", "fieldProvenance", "nullSemantics", "attestedReads", "conflictSnapshots", "ownedAudience", "temporalEnum"], protocol: 1 }, testMint: { hash: "73e25e416b2f6a3173ae0bd3d4139db582ec32b832c38286c22b189dff8a94dd", version: "kernel-73e25e41", features: ["compoundKeys", "capturedReads", "invariantGate", "surfacedMerge", "fieldProvenance", "nullSemantics", "attestedReads", "conflictSnapshots", "ownedAudience", "temporalEnum"], protocol: 1 } };
 
 // runner/node-entry.ts
 import { createInterface } from "node:readline";
@@ -8515,6 +8515,37 @@ function createSerializedScheduler() {
 // src/intent_offer_codec.ts
 var encoder = new TextEncoder();
 
+// src/domain_readiness.ts
+async function prepareDomainUntilReady({
+  domain,
+  packageHash,
+  directiveId,
+  warm,
+  timeoutMs = 3e4,
+  yieldEvery = 32,
+  now = Date.now,
+  yieldHost = () => new Promise((resolve) => setTimeout(resolve, 0)),
+  onQuantum
+}) {
+  if (!domain || !packageHash) return { prepared: false, reason: "invalid-target", quanta: 0 };
+  const selector = directiveId ? `plan:offer:${domain}:${directiveId}` : `plan:domain:${domain}`;
+  const deadlineAt = now() + timeoutMs;
+  let quanta = 0;
+  while (now() <= deadlineAt) {
+    quanta += 1;
+    const progress = await warm();
+    onQuantum?.(progress);
+    if (progress.preparedCommandDomain === domain && progress.preparedCommandPackage === packageHash && progress.preparedCommandSelector === selector) {
+      return { prepared: true, quanta };
+    }
+    if (progress.maintenancePending !== true) {
+      return { prepared: false, reason: "maintenance-exhausted", quanta };
+    }
+    if (quanta % Math.max(1, yieldEvery) === 0) await yieldHost();
+  }
+  return { prepared: false, reason: "deadline-exceeded", quanta };
+}
+
 // src/index.ts
 var enc4 = new TextEncoder();
 var dec4 = new TextDecoder();
@@ -9083,30 +9114,31 @@ ${String(commit).toLowerCase()}`;
     scheduleMaintenanceSoon();
   };
   const prepareDomainReady = async (domain, packageHash, directiveId) => {
-    if (!domain || !packageHash) return { prepared: false };
     requestDomainMaintenance(domain, packageHash, directiveId);
-    const selector = directiveId ? `plan:offer:${domain}:${directiveId}` : `plan:domain:${domain}`;
-    for (let quantum = 0; quantum < 64; quantum += 1) {
-      const result = await serialize(async () => JSON.parse(call("query", { queryBytes: qBytes({
+    const readiness = await prepareDomainUntilReady({
+      domain,
+      packageHash,
+      directiveId,
+      warm: () => serialize(async () => JSON.parse(call("query", { queryBytes: qBytes({
         op: "warm",
         interactiveOnly: true,
         requestedDomain: domain,
         ...directiveId ? { requestedDirective: directiveId } : {},
         requestedPackage: packageHash
-      }) })), "prepare generated domain", false);
-      if (typeof process !== "undefined" && process.env?.NOMOS_DEBUG_RAW) {
-        console.error("[nomos] generated domain readiness quantum", result);
-      }
-      if (result?.preparedCommandDomain === domain && result?.preparedCommandPackage === packageHash && result?.preparedCommandSelector === selector) {
-        const index = _maintenanceTargets.findIndex(
-          (target) => target.domain === domain && target.packageHash === packageHash && target.directiveId === directiveId
-        );
-        if (index >= 0) _maintenanceTargets.splice(index, 1);
-        return { prepared: true };
+      }) })), "prepare generated domain", false),
+      onQuantum: (result) => {
+        if (typeof process !== "undefined" && process.env?.NOMOS_DEBUG_RAW) {
+          console.error("[nomos] generated domain readiness quantum", result);
+        }
       }
-      if (result?.maintenancePending !== true) break;
+    });
+    if (readiness.prepared) {
+      const index = _maintenanceTargets.findIndex(
+        (target) => target.domain === domain && target.packageHash === packageHash && target.directiveId === directiveId
+      );
+      if (index >= 0) _maintenanceTargets.splice(index, 1);
     }
-    return { prepared: false };
+    return readiness;
   };
   const scheduleMaintenanceSoon = (delayMs = 0) => {
     if (_disposed || _maintenanceTimer !== null || _maintenanceInFlight) return;
@@ -10225,7 +10257,9 @@ ${String(commit).toLowerCase()}`;
       try {
         const readiness = await prepareDomainReady(domain, candidateHash);
         if (readiness.prepared !== true) {
-          throw new Error(`the current model '${candidateHash}' has no authenticated '${domain}' USDA slice`);
+          throw new Error(
+            `the current model '${candidateHash}' authenticated '${domain}' USDA slice did not become ready (${readiness.reason} after ${readiness.quanta} maintenance quanta)`
+          );
         }
         return { ok: true, stage: "promoted" };
       } catch (error) {
@@ -10273,7 +10307,9 @@ ${String(commit).toLowerCase()}`;
       const readiness = await prepareDomainReady(domain, candidateHash);
       if (readiness.prepared !== true) {
         throw Object.assign(
-          new Error(`the promoted model '${candidateHash}' is active but its authenticated '${domain}' USDA slice is not ready`),
+          new Error(
+            `the promoted model '${candidateHash}' is active but its authenticated '${domain}' USDA slice did not become ready (${readiness.reason} after ${readiness.quanta} maintenance quanta)`
+          ),
           { code: "nomos.model.readiness_failed" }
         );
       }

package/dart/lib/src/runner/offline-install.mjs

@@ -6,7 +6,7 @@ var __export = (target, all) => {
 };
 
 // <define:__NOMOS_KERNEL_RELEASE__>
-var define_NOMOS_KERNEL_RELEASE_default = { production: { hash: "d37253bcefd90a180a6a1af96422a9f0724dfca9efd9ae7cff070afa2c410f09", version: "kernel-d37253bc", features: ["compoundKeys", "capturedReads", "invariantGate", "surfacedMerge", "fieldProvenance", "nullSemantics", "attestedReads", "conflictSnapshots", "ownedAudience", "temporalEnum"], protocol: 1 }, testMint: { hash: "b6bddd8d61390edbe2ee4e5f3c7f21108bdb7800af746d20f568936f63e2d517", version: "kernel-b6bddd8d", features: ["compoundKeys", "capturedReads", "invariantGate", "surfacedMerge", "fieldProvenance", "nullSemantics", "attestedReads", "conflictSnapshots", "ownedAudience", "temporalEnum"], protocol: 1 } };
+var define_NOMOS_KERNEL_RELEASE_default = { production: { hash: "49e1a3d03b90d54318fabab2ec8574e211fca54310553b5cd07d546ff8d04a67", version: "kernel-49e1a3d0", features: ["compoundKeys", "capturedReads", "invariantGate", "surfacedMerge", "fieldProvenance", "nullSemantics", "attestedReads", "conflictSnapshots", "ownedAudience", "temporalEnum"], protocol: 1 }, testMint: { hash: "73e25e416b2f6a3173ae0bd3d4139db582ec32b832c38286c22b189dff8a94dd", version: "kernel-73e25e41", features: ["compoundKeys", "capturedReads", "invariantGate", "surfacedMerge", "fieldProvenance", "nullSemantics", "attestedReads", "conflictSnapshots", "ownedAudience", "temporalEnum"], protocol: 1 } };
 
 // runner/offline-install.ts
 import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, existsSync } from "node:fs";

package/dart/pubspec.yaml

@@ -7,7 +7,7 @@ repository: https://github.com/Captain-App/nomos2
 description: >-
   Nomos 2 Dart client — generated domain values, intent payloads and application
   lifecycle types over the typed Nomos kernel protocol and USDA custody model.
-version: 0.64.34
+version: 0.64.37
 
 environment:
   sdk: ^3.5.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@githolon/dsl",
-  "version": "0.105.19",
+  "version": "0.105.23",
   "type": "module",
   "sideEffects": false,
   "description": "Nomos 2 domain-authoring DSL: aggregates + directives in TS, executed and encoded to the Rust kernel's wire shapes.",

package/runtime/generated-application-host.js

@@ -7546,6 +7546,37 @@ function createSerializedScheduler() {
 // ../cloud/web-client/src/intent_offer_codec.ts
 var encoder = new TextEncoder();
 
+// ../cloud/web-client/src/domain_readiness.ts
+async function prepareDomainUntilReady({
+  domain,
+  packageHash,
+  directiveId,
+  warm,
+  timeoutMs = 3e4,
+  yieldEvery = 32,
+  now = Date.now,
+  yieldHost = () => new Promise((resolve) => setTimeout(resolve, 0)),
+  onQuantum
+}) {
+  if (!domain || !packageHash) return { prepared: false, reason: "invalid-target", quanta: 0 };
+  const selector = directiveId ? `plan:offer:${domain}:${directiveId}` : `plan:domain:${domain}`;
+  const deadlineAt = now() + timeoutMs;
+  let quanta = 0;
+  while (now() <= deadlineAt) {
+    quanta += 1;
+    const progress = await warm();
+    onQuantum?.(progress);
+    if (progress.preparedCommandDomain === domain && progress.preparedCommandPackage === packageHash && progress.preparedCommandSelector === selector) {
+      return { prepared: true, quanta };
+    }
+    if (progress.maintenancePending !== true) {
+      return { prepared: false, reason: "maintenance-exhausted", quanta };
+    }
+    if (quanta % Math.max(1, yieldEvery) === 0) await yieldHost();
+  }
+  return { prepared: false, reason: "deadline-exceeded", quanta };
+}
+
 // ../cloud/web-client/src/index.ts
 var enc4 = new TextEncoder();
 var dec4 = new TextDecoder();
@@ -8114,30 +8145,31 @@ ${String(commit).toLowerCase()}`;
     scheduleMaintenanceSoon();
   };
   const prepareDomainReady = async (domain, packageHash, directiveId) => {
-    if (!domain || !packageHash) return { prepared: false };
     requestDomainMaintenance(domain, packageHash, directiveId);
-    const selector = directiveId ? `plan:offer:${domain}:${directiveId}` : `plan:domain:${domain}`;
-    for (let quantum = 0; quantum < 64; quantum += 1) {
-      const result = await serialize(async () => JSON.parse(call("query", { queryBytes: qBytes({
+    const readiness = await prepareDomainUntilReady({
+      domain,
+      packageHash,
+      directiveId,
+      warm: () => serialize(async () => JSON.parse(call("query", { queryBytes: qBytes({
         op: "warm",
         interactiveOnly: true,
         requestedDomain: domain,
         ...directiveId ? { requestedDirective: directiveId } : {},
         requestedPackage: packageHash
-      }) })), "prepare generated domain", false);
-      if (typeof process !== "undefined" && process.env?.NOMOS_DEBUG_RAW) {
-        console.error("[nomos] generated domain readiness quantum", result);
-      }
-      if (result?.preparedCommandDomain === domain && result?.preparedCommandPackage === packageHash && result?.preparedCommandSelector === selector) {
-        const index = _maintenanceTargets.findIndex(
-          (target) => target.domain === domain && target.packageHash === packageHash && target.directiveId === directiveId
-        );
-        if (index >= 0) _maintenanceTargets.splice(index, 1);
-        return { prepared: true };
+      }) })), "prepare generated domain", false),
+      onQuantum: (result) => {
+        if (typeof process !== "undefined" && process.env?.NOMOS_DEBUG_RAW) {
+          console.error("[nomos] generated domain readiness quantum", result);
+        }
       }
-      if (result?.maintenancePending !== true) break;
+    });
+    if (readiness.prepared) {
+      const index = _maintenanceTargets.findIndex(
+        (target) => target.domain === domain && target.packageHash === packageHash && target.directiveId === directiveId
+      );
+      if (index >= 0) _maintenanceTargets.splice(index, 1);
     }
-    return { prepared: false };
+    return readiness;
   };
   const scheduleMaintenanceSoon = (delayMs = 0) => {
     if (_disposed || _maintenanceTimer !== null || _maintenanceInFlight) return;
@@ -9256,7 +9288,9 @@ ${String(commit).toLowerCase()}`;
       try {
         const readiness = await prepareDomainReady(domain, candidateHash);
         if (readiness.prepared !== true) {
-          throw new Error(`the current model '${candidateHash}' has no authenticated '${domain}' USDA slice`);
+          throw new Error(
+            `the current model '${candidateHash}' authenticated '${domain}' USDA slice did not become ready (${readiness.reason} after ${readiness.quanta} maintenance quanta)`
+          );
         }
         return { ok: true, stage: "promoted" };
       } catch (error) {
@@ -9304,7 +9338,9 @@ ${String(commit).toLowerCase()}`;
       const readiness = await prepareDomainReady(domain, candidateHash);
       if (readiness.prepared !== true) {
         throw Object.assign(
-          new Error(`the promoted model '${candidateHash}' is active but its authenticated '${domain}' USDA slice is not ready`),
+          new Error(
+            `the promoted model '${candidateHash}' is active but its authenticated '${domain}' USDA slice did not become ready (${readiness.reason} after ${readiness.quanta} maintenance quanta)`
+          ),
           { code: "nomos.model.readiness_failed" }
         );
       }
@@ -13910,6 +13946,7 @@ async function nomosInternalOpenGeneratedApplication(options, bind, internals =
       throw applicationError("Sign in changed authority while preparing this application device.", "nomos.authority.changed_during_open");
     }
     authToken = deviceToken;
+    authorityHolon = await measureOpen("bind attested application device", () => mountAuthority(secret, authToken));
     const birthOrRepeat = async () => {
       const birth = await measureOpen("establish private application custody", () => authorityHolon.nomosInternalBirthReceivingGroup({
         parent: application,

package/src/compile_package_main.ts

@@ -1664,8 +1664,8 @@ const NOMOS_TYPES_DEP = "^0.8.7";
 // 0.48.x: session-bound clients (XClient.bind/NomosClientInterface/DomainClientSessionMismatch/
 //         DomainNotInstalledForSession, engine.follow, pendingConflicts lanes) — the generated client
 //         REQUIRES this surface. 0.48.1 fixes NomosSession.watchPendingConflicts delegation.
-const NOMOS_CLIENT_DEP = "^0.64.34";
-const NOMOS_FLUTTER_DEP = "^0.63.58";
+const NOMOS_CLIENT_DEP = "^0.64.37";
+const NOMOS_FLUTTER_DEP = "^0.63.62";
 // DRIFT TRIPWIRE: pubspec_pins.test.ts asserts these equal the CURRENT versions in dsl/dart/pubspec.yaml
 // and dsl/dart_types/pubspec.yaml — a Dart release without this bump fails the suite, so tenants never
 // land back in dependency_overrides (the exact co2 report this closes, third occurrence).