@githolon/dsl 0.105.23 → 0.105.24

package/dart/lib/src/test_harness.dart

@@ -51,11 +51,13 @@ import 'webview_bridge.dart'
 
 enum _KernelRuntimeArtifact {
   executable('holon.wasm'),
+  repository('kernel.repository.xml', 'repository.xml'),
   stageZeroLaw('bootstrap.law.usdz'),
   controllerLaw('nomos.law.usdz');
 
-  const _KernelRuntimeArtifact(this.fileName);
+  const _KernelRuntimeArtifact(this.fileName, [this.providerFileName]);
   final String fileName;
+  final String? providerFileName;
 }
 
 enum _CandidateKernelBinary {
@@ -74,9 +76,10 @@ Future<String?> _sourceCandidateRuntime(String nodeEntry) async {
   var cursor = File(nodeEntry).absolute.parent;
   Directory? root;
   for (var depth = 0; depth < 12; depth++) {
-    if (File('${cursor.path}/release/kernel-candidate.json').existsSync() &&
-        File('${cursor.path}/cloud/dev-server/kernel-testmint.wasm')
-            .existsSync()) {
+    if (File('${cursor.path}/release/kernel-candidate.usda').existsSync() &&
+        File(
+          '${cursor.path}/cloud/dev-server/kernel-testmint.wasm',
+        ).existsSync()) {
       root = cursor;
       break;
     }
@@ -84,31 +87,71 @@ Future<String?> _sourceCandidateRuntime(String nodeEntry) async {
     if (parent.path == cursor.path) break;
     cursor = parent;
   }
-  if (root == null) return null;
-
-  final descriptor = (jsonDecode(
-    await File(
-      '${root.path}/release/kernel-candidate.json',
-    ).readAsString(),
-  ) as Map)
-      .cast<String, Object?>();
-  String expected(String key) =>
-      (((descriptor[key] as Map?)?['sha256'])?.toString() ?? '').trim();
-  final productionExpected = expected('production');
-  final testMintExpected = expected('testMint');
+  final sourceRoot = root;
+  if (sourceRoot == null) return null;
+
+  Future<String> candidateField(String field) async {
+    final rust = await Process.run('rustc', ['-vV']);
+    if (rust.exitCode != 0) {
+      throw NomosTestHarnessException(
+        'rustc could not report its host target: ${rust.stderr}',
+      );
+    }
+    final host = RegExp(
+      r'^host: (\S+)$',
+      multiLine: true,
+    ).firstMatch(rust.stdout.toString())?.group(1);
+    if (host == null) {
+      throw NomosTestHarnessException('rustc did not report its host target');
+    }
+    final result = await Process.run('cargo', [
+      'run',
+      '--quiet',
+      '--target',
+      host,
+      '--manifest-path',
+      '${sourceRoot.path}/tools/kernel-resource/Cargo.toml',
+      '--',
+      'read',
+      '${sourceRoot.path}/release/kernel-candidate.usda',
+      field,
+    ], workingDirectory: sourceRoot.path);
+    if (result.exitCode != 0) {
+      throw NomosTestHarnessException(
+        'could not read typed kernel candidate: ${result.stderr}',
+      );
+    }
+    return result.stdout.toString().trim();
+  }
+
+  final productionExpected = await candidateField('production-sha256');
+  final testMintExpected = await candidateField('test-mint-sha256');
   final production = File(
-    '${root.path}/cloud/cloudflare-shell/vendor/holon_bytes.wasmbin',
+    '${sourceRoot.path}/cloud/cloudflare-shell/vendor/holon_bytes.wasmbin',
   );
   final testMint = File(
-    '${root.path}/cloud/dev-server/kernel-testmint.wasm',
+    '${sourceRoot.path}/cloud/dev-server/kernel-testmint.wasm',
+  );
+  final productionRepository = File(
+    '${sourceRoot.path}/cloud/cloudflare-shell/runtime/kernel.repository.xml',
+  );
+  final testMintRepository = File(
+    '${sourceRoot.path}/cloud/cloudflare-shell/runtime/kernel-testmint.repository.xml',
   );
   final bootstrap = File(
-    '${root.path}/cloud/cloudflare-shell/domains/build/bootstrap/domain_bootstrap.law.usdz',
+    '${sourceRoot.path}/cloud/cloudflare-shell/domains/build/bootstrap/domain_bootstrap.law.usdz',
   );
   final nomos = File(
-    '${root.path}/cloud/cloudflare-shell/domains/build/nomos/nomos.law.usdz',
+    '${sourceRoot.path}/cloud/cloudflare-shell/domains/build/nomos/nomos.law.usdz',
   );
-  for (final file in [production, testMint, bootstrap, nomos]) {
+  for (final file in [
+    production,
+    testMint,
+    productionRepository,
+    testMintRepository,
+    bootstrap,
+    nomos,
+  ]) {
     if (!file.existsSync()) {
       throw NomosTestHarnessException(
         'source release candidate is incomplete: ${file.path} is missing',
@@ -117,6 +160,8 @@ Future<String?> _sourceCandidateRuntime(String nodeEntry) async {
   }
   final productionBytes = await production.readAsBytes();
   final testMintBytes = await testMint.readAsBytes();
+  final productionRepositoryBytes = await productionRepository.readAsBytes();
+  final testMintRepositoryBytes = await testMintRepository.readAsBytes();
   final productionActual = sha256.convert(productionBytes).toString();
   final testMintActual = sha256.convert(testMintBytes).toString();
   String short(String value) =>
@@ -124,7 +169,7 @@ Future<String?> _sourceCandidateRuntime(String nodeEntry) async {
   if (productionActual != productionExpected ||
       testMintActual != testMintExpected) {
     throw NomosTestHarnessException(
-      'source release candidate kernel mismatch: release/kernel-candidate.json '
+      'source release candidate kernel mismatch: release/kernel-candidate.usda '
       'expects ${short(productionExpected)}/${short(testMintExpected)}, but the staged artifacts are '
       '${short(productionActual)}/${short(testMintActual)} — run the kernel candidate preparation before testing',
     );
@@ -135,6 +180,8 @@ Future<String?> _sourceCandidateRuntime(String nodeEntry) async {
       .convert(
         utf8.encode(
           '$productionActual:$testMintActual:'
+          '${sha256.convert(productionRepositoryBytes)}:'
+          '${sha256.convert(testMintRepositoryBytes)}:'
           '${sha256.convert(bootstrapBytes)}:'
           '${sha256.convert(nomosBytes)}',
         ),
@@ -148,7 +195,8 @@ Future<String?> _sourceCandidateRuntime(String nodeEntry) async {
     final target = File('${runtime.path}/$name');
     if (target.existsSync() && target.lengthSync() == bytes.length) return;
     final candidate = File(
-        '${target.path}.tmp-${pid}-${DateTime.now().microsecondsSinceEpoch}');
+      '${target.path}.tmp-${pid}-${DateTime.now().microsecondsSinceEpoch}',
+    );
     await candidate.writeAsBytes(bytes, flush: true);
     try {
       await candidate.rename(target.path);
@@ -164,6 +212,8 @@ Future<String?> _sourceCandidateRuntime(String nodeEntry) async {
 
   await publish('holon.wasm', productionBytes);
   await publish('holon-testmint.wasm', testMintBytes);
+  await publish('kernel.repository.xml', productionRepositoryBytes);
+  await publish('kernel-testmint.repository.xml', testMintRepositoryBytes);
   await publish('bootstrap.law.usdz', bootstrapBytes);
   await publish('nomos.law.usdz', nomosBytes);
   return runtime.path;
@@ -191,8 +241,8 @@ String? nmsPermanentConvergenceFailure(Map<String, Object?> result) {
   final converged = result['converged'];
   final replayDeadLetters =
       converged is Map && converged['deadLettered'] is List
-          ? converged['deadLettered'] as List
-          : const [];
+      ? converged['deadLettered'] as List
+      : const [];
   final pushError = result['pushError'];
   final refused = pushError is Map && pushError['refused'] == true;
   if (rejected.isEmpty &&
@@ -261,10 +311,10 @@ class HarnessPhaseTimeout extends NomosTestHarnessException {
     required this.awaiting,
     this.likelyCauses = const [],
   }) : super(
-          'phase "$phase"${workspace != null ? ' (workspace "$workspace")' : ''} '
-          'did not complete within ${elapsed.inSeconds}s while awaiting `$awaiting`'
-          '${likelyCauses.isEmpty ? '' : ' — likely causes: ${likelyCauses.map((c) => '\n  • $c').join()}'}',
-        );
+         'phase "$phase"${workspace != null ? ' (workspace "$workspace")' : ''} '
+         'did not complete within ${elapsed.inSeconds}s while awaiting `$awaiting`'
+         '${likelyCauses.isEmpty ? '' : ' — likely causes: ${likelyCauses.map((c) => '\n  • $c').join()}'}',
+       );
   @override
   String toString() => 'HarnessPhaseTimeout: $message';
 }
@@ -382,16 +432,16 @@ class NomosTestHarness {
     _CloudRestartLane? cloudRestartLane,
     this.testCloud,
     this.homeWorkspace,
-  })  : _sessionNames = List.of(
-          sessionNames,
-        ), // GROWABLE — restoreWorkspace may add a fresh session
-        _devicePublics = devicePublics,
-        _deviceSecrets = deviceSecrets,
-        _lawHashes = Map.of(lawHashes),
-        _snapshots = Map.of(snapshots),
-        _installLane = installLane,
-        _phaseTimeout = phaseTimeout,
-        _cloudRestartLane = cloudRestartLane;
+  }) : _sessionNames = List.of(
+         sessionNames,
+       ), // GROWABLE — restoreWorkspace may add a fresh session
+       _devicePublics = devicePublics,
+       _deviceSecrets = deviceSecrets,
+       _lawHashes = Map.of(lawHashes),
+       _snapshots = Map.of(snapshots),
+       _installLane = installLane,
+       _phaseTimeout = phaseTimeout,
+       _cloudRestartLane = cloudRestartLane;
 
   // ── THE "NO SILENT HANGS" MACHINERY — every lifecycle await runs as a named, deadlined PHASE ──
 
@@ -559,9 +609,11 @@ class NomosTestHarness {
         'no lawUsdzPaths — pass the build/<name>.law.usdz `npx githolon compile` emits',
       );
     }
-    final entry = nodeEntry ??
+    final entry =
+        nodeEntry ??
         await _resolveEntry(node, resolveFrom ?? Directory.current.path);
-    final effectiveRuntimeDir = runtimeDir ??
+    final effectiveRuntimeDir =
+        runtimeDir ??
         Platform.environment['NOMOS_CANDIDATE_RUNTIME'] ??
         Platform.environment['NOMOS_DART_RUNTIME'] ??
         Platform.environment['NOMOS_OFFLINE_RUNTIME'] ??
@@ -574,17 +626,19 @@ class NomosTestHarness {
     //    (default `npx githolon` when the in-repo helper is absent; the test forces this lane by passing
     //    e.g. `installHelper: 'node /abs/cli/dist/cli.mjs'`).
     final adjacentInstaller = '${File(entry).parent.path}/offline-install.mjs';
-    final resolvedHelper = installHelper ??
+    final resolvedHelper =
+        installHelper ??
         (File(adjacentInstaller).existsSync()
             ? adjacentInstaller
             : '${File(entry).parent.path}/offline-install.ts');
     final useInRepoScript =
         (resolvedHelper.endsWith('.ts') || resolvedHelper.endsWith('.mjs')) &&
-            File(resolvedHelper).existsSync();
+        File(resolvedHelper).existsSync();
     final githolonCmd = installHelper == null ? 'npx githolon' : resolvedHelper;
 
     final owner = ownerSubject?.trim();
-    final birthsApplicationHome = owner != null &&
+    final birthsApplicationHome =
+        owner != null &&
         owner.isNotEmpty &&
         workspace == _receivingGroupNameOf(owner);
     // A receiving-group address is not an arbitrary law-install target. It is valid only when a parent
@@ -608,8 +662,9 @@ class NomosTestHarness {
       final info = await _phased(
         phase: '1/4: offline law install (${lawUsdzPaths.length} package(s))',
         workspace: installWorkspace,
-        awaiting:
-            useInRepoScript ? 'offline-install.ts' : 'githolon harness-install',
+        awaiting: useInRepoScript
+            ? 'offline-install.ts'
+            : 'githolon harness-install',
         timeout: phaseTimeout ?? _kInstallDeadline,
         onDiagnostic: onDiagnostic,
         likelyCauses: const [
@@ -726,17 +781,19 @@ class NomosTestHarness {
           // scenario carries the value from the same package declaration that compiled the
           // receiving-group plan; the harness does not choose or default it. The ordinary
           // seed offer crosses the kernel author gate before the first birth is attempted.
-          run: () => plane.session(installWorkspace).offerOutcome(
-            domain: '__nomos_application_home_v1',
-            directiveId: 'seedBirthPolicy',
-            actor: owner,
-            authorSecret: deviceSecret,
-            payload: <String, Object?>{
-              'maxBirthsPerPrincipal': maxChildWorkspaces,
-              'setBy': owner,
-              'setAt': bornAt,
-            },
-          ),
+          run: () => plane
+              .session(installWorkspace)
+              .offerOutcome(
+                domain: '__nomos_application_home_v1',
+                directiveId: 'seedBirthPolicy',
+                actor: owner,
+                authorSecret: deviceSecret,
+                payload: <String, Object?>{
+                  'maxBirthsPerPrincipal': maxChildWorkspaces,
+                  'setBy': owner,
+                  'setAt': bornAt,
+                },
+              ),
         );
         final outcome = await _phased(
           phase: 'application: birth the signed-in application',
@@ -744,20 +801,22 @@ class NomosTestHarness {
           awaiting: 'attested receiving-group birth',
           timeout: phaseTimeout ?? _kOtherDeadline,
           onDiagnostic: onDiagnostic,
-          run: () => plane.session(installWorkspace).offerOutcome(
-            domain: '__nomos_application_home_v1',
-            directiveId: 'nomosInternalBirthReceivingGroup7c1f5e',
-            actor: owner,
-            authorSecret: deviceSecret,
-            payload: <String, Object?>{
-              'owner': owner,
-              'frameworkHash': framework,
-              // Ordered application deployment is reference packages first, deferred child payload last.
-              // The parent serves the references; the receiving group is born with only its payload law.
-              'lawHash': laws.last,
-              'bornAt': bornAt,
-            },
-          ),
+          run: () => plane
+              .session(installWorkspace)
+              .offerOutcome(
+                domain: '__nomos_application_home_v1',
+                directiveId: 'nomosInternalBirthReceivingGroup7c1f5e',
+                actor: owner,
+                authorSecret: deviceSecret,
+                payload: <String, Object?>{
+                  'owner': owner,
+                  'frameworkHash': framework,
+                  // Ordered application deployment is reference packages first, deferred child payload last.
+                  // The parent serves the references; the receiving group is born with only its payload law.
+                  'lawHash': laws.last,
+                  'bornAt': bornAt,
+                },
+              ),
         );
         String? bornStatus;
         for (final entry in outcome.birthOutcomes) {
@@ -811,26 +870,28 @@ class NomosTestHarness {
             // harness device through the installed framework law with the same verified provenance
             // that the private test root later attests. Production clients never manufacture this
             // marker; it exists only inside the offline test-mint ceremony.
-            run: () => plane.session(workspace).offerOutcome(
-              domain: '__nomos_application_home_v1',
-              directiveId: 'enrollSigner',
-              actor: owner,
-              authorSecret: deviceSecret,
-              payload: <String, Object?>{
-                'keyHash': keyHash,
-                'grantedBy': owner,
-                'grantedAt': 1,
-                'verifiedVia': 'nomos:test-mint',
-              },
-            ),
+            run: () => plane
+                .session(workspace)
+                .offerOutcome(
+                  domain: '__nomos_application_home_v1',
+                  directiveId: 'enrollSigner',
+                  actor: owner,
+                  authorSecret: deviceSecret,
+                  payload: <String, Object?>{
+                    'keyHash': keyHash,
+                    'grantedBy': owner,
+                    'grantedAt': 1,
+                    'verifiedVia': 'nomos:test-mint',
+                  },
+                ),
           );
         } catch (error) {
           // Pre-application-home packages neither expose nor enforce this
           // signer route. Preserve their old harness behaviour, while keeping
           // every refusal from a current package fatal.
           if (!error.toString().contains(
-                "no active installed law declares domain '__nomos_application_home_v1'",
-              )) {
+            "no active installed law declares domain '__nomos_application_home_v1'",
+          )) {
             rethrow;
           }
         }
@@ -843,34 +904,39 @@ class NomosTestHarness {
             timeout: phaseTimeout ?? _kOtherDeadline,
             onDiagnostic: onDiagnostic,
             run: () async {
-              await plane.session(workspace).offerOutcome(
-                domain: '__nomos_application_home_v1',
-                directiveId: 'nomosInternalSeedReceivingGroupPolicy7c1f5e',
-                actor: 'host-birth',
-                payload: <String, Object?>{'setAt': bornAt},
-              );
-              await plane.session(workspace).offerOutcome(
-                domain: '__nomos_application_home_v1',
-                directiveId: 'nomosInternalSeedReceivingGroup7c1f5e',
-                actor: 'host-birth',
-                payload: <String, Object?>{
-                  'principal': owner,
-                  'workspaceName': _receivingGroupNameOf(owner),
-                  'bornAt': bornAt,
-                },
-              );
+              await plane
+                  .session(workspace)
+                  .offerOutcome(
+                    domain: '__nomos_application_home_v1',
+                    directiveId: 'nomosInternalSeedReceivingGroupPolicy7c1f5e',
+                    actor: 'host-birth',
+                    payload: <String, Object?>{'setAt': bornAt},
+                  );
+              await plane
+                  .session(workspace)
+                  .offerOutcome(
+                    domain: '__nomos_application_home_v1',
+                    directiveId: 'nomosInternalSeedReceivingGroup7c1f5e',
+                    actor: 'host-birth',
+                    payload: <String, Object?>{
+                      'principal': owner,
+                      'workspaceName': _receivingGroupNameOf(owner),
+                      'bornAt': bornAt,
+                    },
+                  );
             },
           );
           final parentCert = await plane.signBirthCert(
-              NomosBirthCertificateSpec(
-                child: workspace,
-                founder: owner,
-                verified: true,
-                parentKey: devicePublic,
-                parentId: 'root',
-                epoch: 0,
-              ),
-              deviceSecret);
+            NomosBirthCertificateSpec(
+              child: workspace,
+              founder: owner,
+              verified: true,
+              parentKey: devicePublic,
+              parentId: 'root',
+              epoch: 0,
+            ),
+            deviceSecret,
+          );
           await _phased(
             phase: 'owner: establish the verified test application root',
             workspace: workspace,
@@ -878,34 +944,38 @@ class NomosTestHarness {
             timeout: phaseTimeout ?? _kOtherDeadline,
             onDiagnostic: onDiagnostic,
             run: () async {
-              await plane.session(workspace).offerOutcome(
-                domain: '__nomos_application_home_v1',
-                directiveId: 'seedBirthAttestation',
-                actor: owner,
-                authorSecret: deviceSecret,
-                payload: <String, Object?>{
-                  'child': workspace,
-                  'founder': owner,
-                  'verified': 'true',
-                  'parentId': 'root',
-                  'parentKey': devicePublic,
-                  'epoch': 0,
-                  'certChain': jsonEncode(<String, Object?>{
-                    'links': <Object?>[parentCert.toWire()],
-                  }),
-                },
-              );
-              await plane.session(workspace).offerOutcome(
-                domain: '__nomos_application_home_v1',
-                directiveId: 'seedGenesis',
-                actor: owner,
-                authorSecret: deviceSecret,
-                payload: <String, Object?>{
-                  'principal': owner,
-                  'workspaceId': workspace,
-                  'bornAt': '2000-01-01T00:00:00.000Z',
-                },
-              );
+              await plane
+                  .session(workspace)
+                  .offerOutcome(
+                    domain: '__nomos_application_home_v1',
+                    directiveId: 'seedBirthAttestation',
+                    actor: owner,
+                    authorSecret: deviceSecret,
+                    payload: <String, Object?>{
+                      'child': workspace,
+                      'founder': owner,
+                      'verified': 'true',
+                      'parentId': 'root',
+                      'parentKey': devicePublic,
+                      'epoch': 0,
+                      'certChain': jsonEncode(<String, Object?>{
+                        'links': <Object?>[parentCert.toWire()],
+                      }),
+                    },
+                  );
+              await plane
+                  .session(workspace)
+                  .offerOutcome(
+                    domain: '__nomos_application_home_v1',
+                    directiveId: 'seedGenesis',
+                    actor: owner,
+                    authorSecret: deviceSecret,
+                    payload: <String, Object?>{
+                      'principal': owner,
+                      'workspaceId': workspace,
+                      'bornAt': '2000-01-01T00:00:00.000Z',
+                    },
+                  );
             },
           );
         } on DomainNotInstalledForSession {
@@ -923,9 +993,9 @@ class NomosTestHarness {
       final sessionLaw = installedHashes.isEmpty
           ? 'installed'
           : (birthsApplicationHome
-                  ? installedHashes.last
-                  : installedHashes.first)
-              .substring(0, 12);
+                    ? installedHashes.last
+                    : installedHashes.first)
+                .substring(0, 12);
       phase('ready — session "$workspace" connected (law $sessionLaw)');
       // THE DECOY SESSION (multi-workspace by default in tests): sole-session inference is how
       // single-workspace assumptions ship — with one session connected, an op that forgot its session
@@ -1055,21 +1125,24 @@ class NomosTestHarness {
         );
       }
     }
-    final entry = nodeEntry ??
+    final entry =
+        nodeEntry ??
         await _resolveEntry(node, resolveFrom ?? Directory.current.path);
-    final effectiveRuntimeDir = runtimeDir ??
+    final effectiveRuntimeDir =
+        runtimeDir ??
         Platform.environment['NOMOS_CANDIDATE_RUNTIME'] ??
         Platform.environment['NOMOS_DART_RUNTIME'] ??
         Platform.environment['NOMOS_OFFLINE_RUNTIME'] ??
         await _sourceCandidateRuntime(entry);
     final adjacentInstaller = '${File(entry).parent.path}/offline-install.mjs';
-    final resolvedHelper = installHelper ??
+    final resolvedHelper =
+        installHelper ??
         (File(adjacentInstaller).existsSync()
             ? adjacentInstaller
             : '${File(entry).parent.path}/offline-install.ts');
     final useInRepoScript =
         (resolvedHelper.endsWith('.ts') || resolvedHelper.endsWith('.mjs')) &&
-            File(resolvedHelper).existsSync();
+        File(resolvedHelper).existsSync();
     final githolonCmd = installHelper == null ? 'npx githolon' : resolvedHelper;
 
     final workdir = await Directory.systemTemp.createTemp('nomos-cluster-');
@@ -1329,10 +1402,12 @@ class NomosTestHarness {
         'no lawUsdzPaths — pass the build/<name>.law.usdz `npx githolon compile` emits',
       );
     }
-    final entry = nodeEntry ??
+    final entry =
+        nodeEntry ??
         await _resolveEntry(node, resolveFrom ?? Directory.current.path);
-    final bareUid =
-        subject.startsWith('user:') ? subject.substring(5) : subject;
+    final bareUid = subject.startsWith('user:')
+        ? subject.substring(5)
+        : subject;
     final http = HttpClient();
     Future<Map<String, Object?>> post(
       String path,
@@ -1406,8 +1481,8 @@ class NomosTestHarness {
             }
             rethrow;
           }
-          frameworkHash =
-              ((created['controller'] as Map?)?['domainHash'])?.toString();
+          frameworkHash = ((created['controller'] as Map?)?['domainHash'])
+              ?.toString();
           final existing = await get(
             '/v2/workspaces/$platformWorkspace/domains',
           );
@@ -1496,7 +1571,7 @@ class NomosTestHarness {
       );
       final currentLaw =
           (parentDomains['currentLaw'] as Map?)?.cast<String, Object?>() ??
-              const <String, Object?>{};
+          const <String, Object?>{};
       final controlHomeLawHash =
           currentLaw[applicationHomeDomain]?.toString() ?? '';
       if (controlHomeLawHash.isEmpty) {
@@ -1534,10 +1609,12 @@ class NomosTestHarness {
       // restart while offline must not fetch any member before it can replay the persisted ledger. Release CI
       // supplies the exact candidate bundle. An ordinary local test pins all three artifacts advertised by its
       // ephemeral cloud while still online; never combine a candidate kernel with stale framework law.
-      final candidateRuntimeDir = Platform.environment['NOMOS_DART_RUNTIME'] ??
+      final candidateRuntimeDir =
+          Platform.environment['NOMOS_DART_RUNTIME'] ??
           Platform.environment['NOMOS_OFFLINE_RUNTIME'];
-      final localRuntime = await Directory('${workdir.path}/client-runtime')
-          .create(recursive: true);
+      final localRuntime = await Directory(
+        '${workdir.path}/client-runtime',
+      ).create(recursive: true);
       final selectedKernel = cloud.testKRootPublic == null
           ? _CandidateKernelBinary.production
           : _CandidateKernelBinary.testMint;
@@ -1546,18 +1623,21 @@ class NomosTestHarness {
           : <_KernelRuntimeArtifact, String>{
               _KernelRuntimeArtifact.executable:
                   '$candidateRuntimeDir/${selectedKernel.fileName}',
+              _KernelRuntimeArtifact.repository:
+                  '$candidateRuntimeDir/${selectedKernel == _CandidateKernelBinary.production ? 'kernel.repository.xml' : 'kernel-testmint.repository.xml'}',
               _KernelRuntimeArtifact.stageZeroLaw:
                   '$candidateRuntimeDir/${_KernelRuntimeArtifact.stageZeroLaw.fileName}',
               _KernelRuntimeArtifact.controllerLaw:
                   '$candidateRuntimeDir/${_KernelRuntimeArtifact.controllerLaw.fileName}',
             };
-      final hasCandidateBundle = candidateArtifacts.length ==
-              _KernelRuntimeArtifact.values.length &&
+      final hasCandidateBundle =
+          candidateArtifacts.length == _KernelRuntimeArtifact.values.length &&
           candidateArtifacts.values.every((path) => File(path).existsSync());
       if (hasCandidateBundle) {
         for (final artifact in candidateArtifacts.entries) {
-          await File(artifact.value)
-              .copy('${localRuntime.path}/${artifact.key.fileName}');
+          await File(
+            artifact.value,
+          ).copy('${localRuntime.path}/${artifact.key.fileName}');
         }
       } else {
         await _phased(
@@ -1569,7 +1649,7 @@ class NomosTestHarness {
             for (final artifact in _KernelRuntimeArtifact.values) {
               final request = await http.getUrl(
                 Uri.parse(
-                  '${cloud.origin}/v1/runtime/${artifact.fileName}',
+                  '${cloud.origin}/v1/runtime/${artifact.providerFileName ?? artifact.fileName}',
                 ),
               );
               final response = await request.close();
@@ -1583,8 +1663,9 @@ class NomosTestHarness {
                   '(status ${response.statusCode}, ${bytes.length} bytes)',
                 );
               }
-              await File('${localRuntime.path}/${artifact.fileName}')
-                  .writeAsBytes(bytes, flush: true);
+              await File(
+                '${localRuntime.path}/${artifact.fileName}',
+              ).writeAsBytes(bytes, flush: true);
             }
           },
         );
@@ -1740,34 +1821,36 @@ class NomosTestHarness {
           // authenticated platform holon mounted. Bind this parent certificate operation to the
           // platform session explicitly; relying on the single-session convenience API becomes
           // ambiguous as soon as the ceremony correctly opens the target workspace in-kernel.
-          final homeCert =
-              await plane.session('$clientId-platform-author').signBirthCert(
-                    NomosBirthCertificateSpec(
-                      child: homeName,
-                      founder: subject,
-                      // The cert's `verified` must MATCH the gate verdict (CAS-as-law): the offer carries
-                      // the dev-IdP token, so the gate resolves a VERIFIED founder.
-                      verified: true,
-                      parentKey: device.publicB64,
-                      parentId: platformWorkspace,
-                      epoch: 0,
-                    ),
-                    device.secret,
-                  );
-          final localBirth =
-              await plane.session('$clientId-platform-author').offerOutcome(
-                    domain: applicationHomeDomain,
-                    directiveId: 'nomosInternalBirthReceivingGroup7c1f5e',
-                    actor: subject,
-                    authorSecret: device.secret,
-                    payload: <String, Object?>{
-                      'owner': subject,
-                      'frameworkHash': frameworkHash,
-                      'lawHash': applicationHomeLawHash,
-                      'bornAt': DateTime.now().toUtc().toIso8601String(),
-                    },
-                    birthCertificate: homeCert,
-                  );
+          final homeCert = await plane
+              .session('$clientId-platform-author')
+              .signBirthCert(
+                NomosBirthCertificateSpec(
+                  child: homeName,
+                  founder: subject,
+                  // The cert's `verified` must MATCH the gate verdict (CAS-as-law): the offer carries
+                  // the dev-IdP token, so the gate resolves a VERIFIED founder.
+                  verified: true,
+                  parentKey: device.publicB64,
+                  parentId: platformWorkspace,
+                  epoch: 0,
+                ),
+                device.secret,
+              );
+          final localBirth = await plane
+              .session('$clientId-platform-author')
+              .offerOutcome(
+                domain: applicationHomeDomain,
+                directiveId: 'nomosInternalBirthReceivingGroup7c1f5e',
+                actor: subject,
+                authorSecret: device.secret,
+                payload: <String, Object?>{
+                  'owner': subject,
+                  'frameworkHash': frameworkHash,
+                  'lawHash': applicationHomeLawHash,
+                  'bornAt': DateTime.now().toUtc().toIso8601String(),
+                },
+                birthCertificate: homeCert,
+              );
           if (!localBirth.born.contains(homeName)) {
             throw NomosTestHarnessException(
               'cloudBound: the local parent kernel admitted the receiving-group offer but did not birth '
@@ -1923,7 +2006,8 @@ class NomosTestHarness {
           if (r['pushFailed'] != true &&
               r['stillAhead'] != true &&
               r['offline'] != true &&
-              r['deferred'] != true) pending.remove(ws);
+              r['deferred'] != true)
+            pending.remove(ws);
         } on NomosTestHarnessException {
           rethrow;
         } catch (e) {
@@ -2334,14 +2418,14 @@ class NomosTestHarness {
       // transport first makes its incoming stream wait on consumers that can no longer receive their
       // unwatch/done messages—a deterministic teardown deadlock in reactive Flutter tests.
       await _plane.dispose().timeout(
-            _phaseTimeout ?? _kOtherDeadline,
-            onTimeout: () => throw HarnessPhaseTimeout(
-              phase: 'dispose: close bridge watches',
-              workspace: workspace,
-              elapsed: _phaseTimeout ?? _kOtherDeadline,
-              awaiting: 'NomosBridge.dispose',
-            ),
-          );
+        _phaseTimeout ?? _kOtherDeadline,
+        onTimeout: () => throw HarnessPhaseTimeout(
+          phase: 'dispose: close bridge watches',
+          workspace: workspace,
+          elapsed: _phaseTimeout ?? _kOtherDeadline,
+          awaiting: 'NomosBridge.dispose',
+        ),
+      );
     } catch (e) {
       _diag(
         '[nomos-test-harness] bridge dispose error (continuing to runner cleanup): $e',
@@ -2349,14 +2433,14 @@ class NomosTestHarness {
     }
     try {
       await _transport.dispose().timeout(
-            _phaseTimeout ?? _kOtherDeadline,
-            onTimeout: () => throw HarnessPhaseTimeout(
-              phase: 'dispose: stop the node runner',
-              workspace: workspace,
-              elapsed: _phaseTimeout ?? _kOtherDeadline,
-              awaiting: 'NodeRunnerTransport.dispose',
-            ),
-          );
+        _phaseTimeout ?? _kOtherDeadline,
+        onTimeout: () => throw HarnessPhaseTimeout(
+          phase: 'dispose: stop the node runner',
+          workspace: workspace,
+          elapsed: _phaseTimeout ?? _kOtherDeadline,
+          awaiting: 'NodeRunnerTransport.dispose',
+        ),
+      );
     } catch (e) {
       _diag(
         '[nomos-test-harness] transport dispose error (continuing to temp-dir cleanup): $e',
@@ -2490,13 +2574,10 @@ class NomosTestHarness {
       '@githolon/client/runner/node-entry.mjs',
       '@githolon/client/runner/node-entry.ts',
     ]) {
-      final r = await Process.run(
-          node,
-          [
-            '-p',
-            "require.resolve('$entry')",
-          ],
-          workingDirectory: from);
+      final r = await Process.run(node, [
+        '-p',
+        "require.resolve('$entry')",
+      ], workingDirectory: from);
       final out = (r.stdout as String).trim();
       if (r.exitCode == 0 && out.isNotEmpty) return out;
     }
@@ -2529,20 +2610,21 @@ class WorkspaceSnapshot {
 
   /// JSON round-trip so a staged snapshot persists to disk verbatim (the bytes + provenance).
   Map<String, Object?> toJson() => {
-        'workspace': workspace,
-        'snapshotB64': snapshotB64,
-        'head': head,
-        'lawHashes': lawHashes,
-        'capturedAt': capturedAt.toUtc().toIso8601String(),
-      };
+    'workspace': workspace,
+    'snapshotB64': snapshotB64,
+    'head': head,
+    'lawHashes': lawHashes,
+    'capturedAt': capturedAt.toUtc().toIso8601String(),
+  };
 
   factory WorkspaceSnapshot.fromJson(Map<String, Object?> j) =>
       WorkspaceSnapshot(
         workspace: j['workspace'] as String,
         snapshotB64: j['snapshotB64'] as String,
         head: (j['head'] ?? '') as String,
-        lawHashes:
-            ((j['lawHashes'] as List?) ?? const []).map((e) => '$e').toList(),
+        lawHashes: ((j['lawHashes'] as List?) ?? const [])
+            .map((e) => '$e')
+            .toList(),
         capturedAt: DateTime.parse(
           (j['capturedAt'] ?? DateTime.now().toUtc().toIso8601String())
               as String,
@@ -2564,20 +2646,19 @@ class PlaneSnapshot {
   const PlaneSnapshot({required this.workspaces, required this.capturedAt});
 
   Map<String, Object?> toJson() => {
-        'workspaces': workspaces.map((k, v) => MapEntry(k, v.toJson())),
-        'capturedAt': capturedAt.toUtc().toIso8601String(),
-      };
+    'workspaces': workspaces.map((k, v) => MapEntry(k, v.toJson())),
+    'capturedAt': capturedAt.toUtc().toIso8601String(),
+  };
 
   factory PlaneSnapshot.fromJson(Map<String, Object?> j) => PlaneSnapshot(
-        workspaces: ((j['workspaces'] as Map?) ?? const {}).map(
-          (k, v) => MapEntry(
-            '$k',
-            WorkspaceSnapshot.fromJson((v as Map).cast<String, Object?>()),
-          ),
-        ),
-        capturedAt: DateTime.parse(
-          (j['capturedAt'] ?? DateTime.now().toUtc().toIso8601String())
-              as String,
-        ),
-      );
+    workspaces: ((j['workspaces'] as Map?) ?? const {}).map(
+      (k, v) => MapEntry(
+        '$k',
+        WorkspaceSnapshot.fromJson((v as Map).cast<String, Object?>()),
+      ),
+    ),
+    capturedAt: DateTime.parse(
+      (j['capturedAt'] ?? DateTime.now().toUtc().toIso8601String()) as String,
+    ),
+  );
 }