@githolon/dsl 0.107.3 → 0.108.0

package/dart/lib/src/webview_bridge.dart

@@ -21,6 +21,7 @@ import 'dart:async';
 import 'dart:convert';
 import 'dart:math';
 
+import 'package:nomos_types/nomos_kernel_protocol.dart' as nomos_protocol;
 import 'package:nomos_types/nomos_types.dart'
     show
         nomosErrorFromInfo,
@@ -66,150 +67,14 @@ final class NomosPage<T> {
   final bool done;
 }
 
-/// Typed authority evidence carried by an offer that plans exactly one child birth.
-/// It is offer metadata, never a tenant directive field. The bridge converts it to the
-/// generated protocol's JSON-shaped transport only at the WebView boundary.
-final class NomosBirthCertificate {
-  const NomosBirthCertificate({
-    required this.child,
-    required this.founder,
-    required this.verified,
-    required this.parentKey,
-    required this.parentId,
-    required this.epoch,
-    required this.signature,
-    this.verifiedVia,
-    this.idpToken,
-    this.capturedClock,
-    this.authProviderIssuer,
-    this.authProviderJwks,
-    this.authProviderAudience,
-  });
-
-  final String child;
-  final String founder;
-  final bool verified;
-  final List<int> parentKey;
-  final String parentId;
-  final int epoch;
-  final List<int> signature;
-  final String? verifiedVia;
-  final String? idpToken;
-  final int? capturedClock;
-  final String? authProviderIssuer;
-  final String? authProviderJwks;
-  final String? authProviderAudience;
-
-  static String _string(
-    Map<String, Object?> wire,
-    String camel,
-    String snake,
-  ) =>
-      (wire[camel] ?? wire[snake] ?? '').toString();
-
-  static List<int> _bytes(
-    Map<String, Object?> wire,
-    String camel,
-    String snake,
-  ) =>
-      ((wire[camel] ?? wire[snake]) as List? ?? const <Object?>[])
-          .map((value) => (value as num).toInt())
-          .toList(growable: false);
-
-  factory NomosBirthCertificate.fromWire(
-    Map<String, Object?> wire,
-  ) =>
-      NomosBirthCertificate(
-        child: _string(wire, 'child', 'child'),
-        founder: _string(wire, 'founder', 'founder'),
-        verified: wire['verified'] == true,
-        parentKey: _bytes(wire, 'parentKey', 'parent_key'),
-        parentId: _string(wire, 'parentId', 'parent_id'),
-        epoch: (wire['epoch'] as num?)?.toInt() ?? 0,
-        signature: _bytes(wire, 'signature', 'signature'),
-        verifiedVia: (wire['verifiedVia'] ?? wire['verified_via'])?.toString(),
-        idpToken: (wire['idpToken'] ?? wire['idp_token'])?.toString(),
-        capturedClock:
-            ((wire['capturedClock'] ?? wire['captured_clock']) as num?)
-                ?.toInt(),
-        authProviderIssuer:
-            (wire['authProviderIssuer'] ?? wire['auth_provider_issuer'])
-                ?.toString(),
-        authProviderJwks:
-            (wire['authProviderJwks'] ?? wire['auth_provider_jwks'])
-                ?.toString(),
-        authProviderAudience:
-            (wire['authProviderAudience'] ?? wire['auth_provider_audience'])
-                ?.toString(),
-      );
-
-  Map<String, Object?> toWire() => <String, Object?>{
-        'child': child,
-        'founder': founder,
-        'verified': verified,
-        'parentKey': parentKey,
-        'parentId': parentId,
-        'epoch': epoch,
-        'signature': signature,
-        if (verifiedVia != null) 'verifiedVia': verifiedVia,
-        if (idpToken != null) 'idpToken': idpToken,
-        if (capturedClock != null) 'capturedClock': capturedClock,
-        if (authProviderIssuer != null)
-          'authProviderIssuer': authProviderIssuer,
-        if (authProviderJwks != null) 'authProviderJwks': authProviderJwks,
-        if (authProviderAudience != null)
-          'authProviderAudience': authProviderAudience,
-      };
-}
+/// Typed authority evidence carried by an offer that plans exactly one child birth. The protobuf
+/// declaration is the one source of truth for Rust, TypeScript and Dart; USDA is its durable state
+/// projection, not another transport type. The legacy bridge envelope carries only these protobuf bytes.
+typedef NomosBirthCertificate = nomos_protocol.BirthCertificate;
 
-/// Facts signed by [NomosBridge.signBirthCert]. The secret remains a separate argument and never
-/// enters this value, so callers cannot accidentally serialize private key material with the cert.
-final class NomosBirthCertificateSpec {
-  const NomosBirthCertificateSpec({
-    required this.child,
-    required this.founder,
-    required this.verified,
-    required this.parentKey,
-    required this.parentId,
-    required this.epoch,
-    this.verifiedVia,
-    this.idpToken,
-    this.capturedClock,
-    this.authProviderIssuer,
-    this.authProviderJwks,
-    this.authProviderAudience,
-  });
-
-  final String child;
-  final String founder;
-  final bool verified;
-  final String parentKey;
-  final String parentId;
-  final int epoch;
-  final String? verifiedVia;
-  final String? idpToken;
-  final int? capturedClock;
-  final String? authProviderIssuer;
-  final String? authProviderJwks;
-  final String? authProviderAudience;
-
-  Map<String, Object?> toWire() => <String, Object?>{
-        'child': child,
-        'founder': founder,
-        'verified': verified,
-        'parentKey': parentKey,
-        'parentId': parentId,
-        'epoch': epoch,
-        if (verifiedVia != null) 'verifiedVia': verifiedVia,
-        if (idpToken != null) 'idpToken': idpToken,
-        if (capturedClock != null) 'capturedClock': capturedClock,
-        if (authProviderIssuer != null)
-          'authProviderIssuer': authProviderIssuer,
-        if (authProviderJwks != null) 'authProviderJwks': authProviderJwks,
-        if (authProviderAudience != null)
-          'authProviderAudience': authProviderAudience,
-      };
-}
+/// An unsigned [NomosBirthCertificate]. [NomosBridge.signBirthCert] returns the same generated message
+/// with its signature populated; the signing secret is a separate argument and never enters the value.
+typedef NomosBirthCertificateSpec = nomos_protocol.BirthCertificate;
 
 /// The protocol version the runner and the bridge agree on (`webview-runner.mjs` `WEBVIEW_BRIDGE_VERSION`).
 const int kWebviewBridgeVersion = 1;
@@ -2327,7 +2192,8 @@ class NomosBridge {
         if (session != null) 'session': session,
         if (authorSecret != null) 'authorSecret': authorSecret,
         if (birthCertificate != null)
-          'birthCertificate': birthCertificate.toWire(),
+          'birthCertificateProtobuf':
+              base64Encode(birthCertificate.writeToBuffer()),
       }),
     );
     return r['head'].toString();
@@ -2408,7 +2274,8 @@ class NomosBridge {
           if (session != null) 'session': session,
           if (authorSecret != null) 'authorSecret': authorSecret,
           if (birthCertificate != null)
-            'birthCertificate': birthCertificate.toWire(),
+            'birthCertificateProtobuf':
+                base64Encode(birthCertificate.writeToBuffer()),
         }),
       );
     } catch (e) {
@@ -3202,23 +3069,23 @@ class NomosBridge {
       _asMap(await _call('mintDeviceKey'));
 
   /// VA ROOT-OF-TRUST: sign a BirthCert through the kernel `cert_sign` op (the SINGLE source of the cert
-  /// byte-layout — no Dart copy). `fields` = `{child, founder, verified, parentKey (this device's base64
-  /// ed25519 PUBLIC half), parentId, epoch}`; `deviceSecret` is that key's base64 SECRET half, handed to the
-  /// LOCAL kernel only (it never reaches a server). Returns typed authority evidence suitable for an offer.
+  /// byte-layout — no Dart copy). [spec] is the generated certificate message with an empty signature;
+  /// `deviceSecret` is the base64 secret half, handed to the LOCAL kernel only (it never reaches a server).
+  /// Returns the same generated type with its signature populated, suitable for an offer.
   Future<NomosBirthCertificate> signBirthCert(
     NomosBirthCertificateSpec spec,
     String deviceSecret,
-  ) async =>
-      NomosBirthCertificate.fromWire(
-        _asMap(
-          _asMap(
-            await _call('signBirthCert', {
-              'fields': spec.toWire(),
-              'deviceSecret': deviceSecret,
-            }),
-          )['cert'],
-        ),
-      );
+  ) async {
+    final result = _asMap(
+      await _call('signBirthCert', {
+        'certificateProtobuf': base64Encode(spec.writeToBuffer()),
+        'deviceSecret': deviceSecret,
+      }),
+    );
+    return nomos_protocol.BirthCertificate.fromBuffer(
+      base64Decode(result['certificateProtobuf']?.toString() ?? ''),
+    );
+  }
 
   /// MINT THE KEYLESS ENROLL-ONCE DELEGATION (`enrollFirstDevice.delegationCert`, the verified-first-device
   /// lane). The device SELF-signs it; its authority is the carried `idpToken` (the kernel re-verifies that to
@@ -3226,17 +3093,20 @@ class NomosBridge {
   /// `{user, deviceKey, childName, parentId, verifiedVia, idpToken, capturedClock, epoch}`. WITHOUT this the
   /// keyless home is born with a malformed cert chain (the platform_cert falls into the delegation slot →
   /// `home cert founder != delegation cert founder` at the home's own verify door).
-  Future<Map<String, Object?>> mintKeylessDelegation(
+  Future<NomosBirthCertificate> mintKeylessDelegation(
     Map<String, Object?> spec,
     String deviceSecret,
-  ) async =>
-      _asMap(
-        await _call('mintKeylessDelegation', {
-          'spec': spec,
-          'deviceSecret': deviceSecret,
-        }),
-      )['cert'] as Map<String, Object?>? ??
-      const {};
+  ) async {
+    final result = _asMap(
+      await _call('mintKeylessDelegation', {
+        'spec': spec,
+        'deviceSecret': deviceSecret,
+      }),
+    );
+    return nomos_protocol.BirthCertificate.fromBuffer(
+      base64Decode(result['certificateProtobuf']?.toString() ?? ''),
+    );
+  }
 
   /// ENROLL THIS DEVICE — the LIVE gate: bind a device key's PUBLIC half to `principal` on-chain as a
   /// `signer` so the holon's gate can PROVE this device's authorship on replay (and the VA chain attest it).

package/dart/pubspec.lock

@@ -89,6 +89,14 @@ packages:
       url: "https://pub.dev"
     source: hosted
     version: "7.0.1"
+  fixnum:
+    dependency: "direct main"
+    description:
+      name: fixnum
+      sha256: b6dc7065e46c974bc7c5f143080a6764ec7a4be6da1285ececdc37be96de53be
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.1.1"
   frontend_server_client:
     dependency: transitive
     description:
@@ -191,7 +199,7 @@ packages:
       path: "../dart_types"
       relative: true
     source: path
-    version: "0.8.8"
+    version: "0.9.0"
   package_config:
     dependency: "direct main"
     description:
@@ -216,6 +224,14 @@ packages:
       url: "https://pub.dev"
     source: hosted
     version: "1.5.2"
+  protobuf:
+    dependency: transitive
+    description:
+      name: protobuf
+      sha256: "2fcc8a202ca7ec17dab7c97d6b6d91cf03aa07fe6f65f8afbb6dfa52cc5bd902"
+      url: "https://pub.dev"
+    source: hosted
+    version: "5.1.0"
   pub_semver:
     dependency: transitive
     description:

package/dart/pubspec.yaml

@@ -7,7 +7,7 @@ repository: https://github.com/Captain-App/nomos2
 description: >-
   Nomos 2 Dart client — generated domain values, intent payloads and application
   lifecycle types over the typed Nomos kernel protocol and USDA custody model.
-version: 0.64.46
+version: 0.65.0
 
 environment:
   sdk: ^3.5.0
@@ -16,7 +16,8 @@ dependencies:
   # The pure-data core (wire types, offer codec, NomosReads, schema validation, error
   # info). nomos_client depends on and re-exports it, so existing imports are unchanged.
   # For local monorepo dev, pubspec_overrides.yaml points this at ../dart_types.
-  nomos_types: ^0.8.8
+  nomos_types: ^0.9.0
+  fixnum: ^1.1.1
   json_schema: ^5.2.2
   crypto: ^3.0.0
   package_config: ^2.1.0

package/dart_types/CHANGELOG.md

@@ -1,3 +1,13 @@
+## 0.9.0
+
+- Replace the opaque admitted-offer result with generated typed kernel messages, so Rust, TypeScript,
+  Dart, and Flutter share one protobuf ABI for committed offer facts.
+
+## 0.8.9
+
+- Generate the canonical Dart kernel and runtime protobuf messages in `nomos_types`, so Dart clients and
+  Flutter hosts consume the same compiler-owned ABI as Rust and TypeScript.
+
 ## 0.8.8
 
 - Name incompatible runtime selections as OSGi contract failures rather than referring to the retired

package/dart_types/lib/nomos_kernel_protocol.dart

@@ -0,0 +1,10 @@
+// Generated protocol types shared by every Dart and Flutter Nomos host.
+//
+// The source of truth is proto/nomos/{kernel,runtime}/v1. This package owns the
+// generated Dart projection so nomos_client and nomos_flutter cannot drift into
+// handwritten copies of the kernel/runtime ABI.
+library;
+
+export 'src/proto/nomos/kernel/v1/kernel.pb.dart';
+export 'src/proto/nomos/kernel/v1/progress.pb.dart';
+export 'src/proto/nomos/runtime/v1/runtime.pb.dart';