@githolon/dsl 0.108.7 → 0.110.0

package/dart/test/residency_refusal_test.dart

@@ -1,49 +0,0 @@
-// THE KERNEL NAMES WHAT IT NEEDS; EVERY HOST MUST SATISFY IT.
-//
-// The colocated-read residency rule is enforced by the KERNEL, so it fires identically in the cloud
-// container and on a phone — the whole point of one artifact everywhere. It shipped with only the
-// cloud taught to satisfy it, so an estate whose history reads a catalogue could not open on a
-// device at all. These tests pin the client's half: the exact refusal the kernel emits must be
-// recognised, and nothing else must be mistaken for it.
-import 'package:test/test.dart';
-import 'package:nomos_client/src/webview_bridge.dart'
-    show nomosInternalResidencyRequiredWorkspace;
-
-void main() {
-  test('recognises the kernel refusal and names the workspace to mount', () {
-    // Verbatim from a device, 2026-08-07 (build 1182, opening an estate).
-    const refusal =
-        'NomosBridgeError: NMS-KERNEL-CALL: restore_main: imported custody was refused: '
-        '{"atCommit":"2059537e7c7d1dcaa9b4f6f4ac2ded2ae59b53a5","atIndex":20,'
-        '"check":"colocated-read","error":"foreign-read-not-ready: source workspace '
-        "'catalogue-531e3764f974ff741be62b119a28f0a9dbf396d7' is not resident in this kernel\","
-        '"mode":"verify_chain","ok":true,"valid":false,"walk":"full"}';
-    expect(
-      nomosInternalResidencyRequiredWorkspace(refusal),
-      'catalogue-531e3764f974ff741be62b119a28f0a9dbf396d7',
-    );
-  });
-
-  test('does not mistake other failures for a residency miss', () {
-    // If any of these were read as "mount something and retry", a real error would retry forever.
-    for (final other in <String>[
-      'NomosBridgeError: NMS-KERNEL-CALL: restore_main: verification failed: bad signature',
-      'NomosSeatingPendingFailure: signer enrollment is not yet provably durable',
-      'StateError: the workspace is not on this device\'s plane',
-      '',
-    ]) {
-      expect(nomosInternalResidencyRequiredWorkspace(other), isNull,
-          reason: 'must not treat "$other" as a residency requirement');
-    }
-  });
-
-  test('the sibling refusal that names no workspace is not actionable', () {
-    // The kernel has a second foreign-read-not-ready shape for an unsafe path. There is nothing to
-    // mount, so it must fall through to the caller rather than being retried.
-    expect(
-      nomosInternalResidencyRequiredWorkspace(
-          "foreign-read-not-ready: source workspace '../escape' is not a safe internal custody path"),
-      isNull,
-    );
-  });
-}

package/dart/test/sealing_client_test.dart

@@ -1,181 +0,0 @@
-// E2E SEALING FROM DART (task #86 gap 3): the operator-blind encryption handshake driven end-to-end
-// through the Dart sealing-client surface (NomosEncryption — the owner ceremony; WrappedKeyStore —
-// the reader's key custody; the kernel crypto ops over the bridge) against the REAL encrypted-notes
-// law on a local holon. Mirrors bench/scale/e2e_encryption.smoke.mjs leg for leg:
-//   reader device key → grantAndWrap (grant + epoch fan-out in ONE ceremony call) → author-seal →
-//   write the envelope → the reader unwraps its scope key from the on-chain WrappedKey and reads
-//   DECRYPTED → without the key the body stays the opaque envelope → a non-member read is refused.
-@TestOn('vm')
-library;
-
-import 'dart:async';
-import 'dart:convert';
-import 'dart:io';
-
-import 'package:nomos_client/src/nms_conformance_runtime.dart';
-import 'package:test/test.dart';
-
-String get _root => '${Directory.current.path}/../..';
-String get _repoEntry => '$_root/cloud/web-client/runner/node-entry.ts';
-String get _fixture => '$_root/cloud/web-client/test/fixtures/encrypted-notes';
-String get _deploy => '$_fixture/build/encrypted-notes.law.usdz';
-String get _lockfile => '$_fixture/nomos.identity.usda';
-String get _runtimeDir =>
-    Platform.environment['NOMOS_DART_RUNTIME'] ??
-    Platform.environment['NOMOS_OFFLINE_RUNTIME'] ??
-    '${Platform.environment['HOME'] ?? ''}/.holon/runtime';
-
-const _domain = 'encrypted_notes';
-const _scope = 'readNote';
-const _reader = 'reader-ada';
-const _plaintext = 'the secret body';
-
-String? _missingPrereq() {
-  if (!File(_repoEntry).existsSync()) return 'in-repo runner not found at $_repoEntry';
-  if (!File(_deploy).existsSync() || !File(_lockfile).existsSync()) {
-    return 'missing encrypted-notes fixture — compile it: (cd cloud/web-client/test/fixtures/encrypted-notes && node ../../../../../dsl/compile_package.mjs)';
-  }
-  if (!File('$_runtimeDir/holon-testmint.wasm').existsSync() ||
-      !File('$_runtimeDir/bootstrap.law.usdz').existsSync() ||
-      !File('$_runtimeDir/nomos.law.usdz').existsSync()) {
-    return 'warm ~/.holon/runtime first (run any `githolon` command once)';
-  }
-  return null;
-}
-
-Future<T> _leg<T>(String name, Future<T> Function() body) async {
-  final sw = Stopwatch()..start();
-  // ignore: avoid_print
-  print('▶ SEAL $name …');
-  try {
-    final r = await body();
-    // ignore: avoid_print
-    print('✔ SEAL $name (${sw.elapsedMilliseconds}ms)');
-    return r;
-  } catch (e, st) {
-    throw TestFailure('SEAL $name FAILED after ${sw.elapsedMilliseconds}ms:\n$e\n$st');
-  }
-}
-
-void main() {
-  test('E2E sealing via the Dart harness: keygen → grantAndWrap → seal → write → decrypted read',
-      () async {
-    final missing = _missingPrereq();
-    if (missing != null) {
-      markTestSkipped(missing);
-      return;
-    }
-    final harness = await NomosTestHarness.ephemeral(
-      lawUsdzPaths: [_deploy],
-      workspace: 'sealed-notes',
-      nodeEntry: _repoEntry,
-      runtimeDir: _runtimeDir,
-      phaseTimeout: const Duration(seconds: 120),
-    );
-    try {
-      final s = harness.bridge;
-      final lawHash = harness.lawHashes('sealed-notes').first;
-
-      // The #58 stable sids for the (Note, body) slot — from the committed lockfile, exactly as the
-      // generated sealing client bakes them.
-      final lock = (jsonDecode(File(_lockfile).readAsStringSync()) as Map);
-      final noteAgg = ((((lock['domains'] as Map)[_domain] as Map)['stableIds'] as Map)['aggregates']
-          as Map)['Note'] as Map;
-      final aggSid = noteAgg['sid'].toString();
-      final fieldSid = ((noteAgg['fields'] as Map)['body'] as Map)['sid'].toString();
-
-      // ── LEG 1: the reader's X25519 device key (secret stays client-side). ──
-      final reader = await _leg('leg 1: reader device keygen (X25519, in-kernel)', () async {
-        final kp = await s.cryptoKeygen();
-        expect((kp['secret'] ?? '').toString(), isNotEmpty);
-        expect((kp['public'] ?? '').toString(), isNotEmpty);
-        return kp;
-      });
-
-      // ── LEG 2: THE OWNER CEREMONY in ONE call — grant the cap + open epoch 0 wrapping the scope
-      //    key to the resolved roster (the Dart NomosEncryption surface, gap 3's real target). ──
-      final scopeKey = base64Encode(
-          base64Decode((await s.cryptoKeygen())['secret'].toString()).sublist(0, 32));
-      final ceremony = NomosEncryption(
-          bridge: s, domain: _domain, domainHash: lawHash, scopes: const [_scope]);
-      final epoch0 = await _leg('leg 2: grantAndWrap (grant + epoch fan-out, one ceremony call)',
-          () async {
-        final r = await ceremony.grantAndWrap(
-          principal: _reader,
-          publicKey: reader['public'].toString(),
-          grantDirective: 'grantReader',
-          grantPayload: {
-            'principal': _reader,
-            'grantedBy': 'owner',
-            'grantedAt': DateTime.now().toUtc().toIso8601String(),
-          },
-          scopeKey: scopeKey,
-        );
-        expect(r.epoch, 0, reason: 'the first ceremony opens epoch 0');
-        expect(r.roster, [_reader], reason: 'the fan-out roster is exactly the granted member');
-        expect(r.head, isNotEmpty);
-        return r;
-      });
-
-      // ── LEG 3: author-seal the body (the wasm seal, sid-bound) and WRITE the envelope. ──
-      final envelope = await _leg('leg 3: seal the body → write the envelope', () async {
-        final env = await s.cryptoSealField(
-          scopeKey: scopeKey,
-          scope: _scope,
-          epoch: epoch0.epoch,
-          aggSid: aggSid,
-          fieldSid: fieldSid,
-          plaintext: _plaintext,
-        );
-        expect(env, contains(fieldSid), reason: 'the envelope binds the stable field sid');
-        expect(env, contains(_scope));
-        await s.offerOutcome(
-          domain: _domain,
-          directiveId: 'writeNote',
-          payload: {'owner': _reader, 'body': env},
-          domainHash: lawHash,
-        );
-        return env;
-      });
-
-      // ── LEG 4: the reader's WrappedKeyStore unwraps its scope key from the on-chain WrappedKey
-      //    with its device secret — the shipped key-custody default. ──
-      final keys = await _leg('leg 4: WrappedKeyStore unwraps the on-chain wrapped key', () async {
-        final store = WrappedKeyStore(
-            bridge: s, principal: _reader, deviceSecret: reader['secret'].toString());
-        final current = await store.scopeKey(_scope);
-        expect(current, isNotNull, reason: 'the reader holds a wrap for its scope');
-        expect(current!.epoch, 0);
-        expect(current.key, scopeKey,
-            reason: 'the unwrapped scope key IS the ceremony key (the real handoff)');
-        return store.readKeys(const [_scope]);
-      });
-
-      // ── LEG 5: read WITH the key → DECRYPTED; read WITHOUT → the opaque envelope. ──
-      await _leg('leg 5: keyed read decrypts; keyless read stays opaque', () async {
-        final withKey = await s.query('notesByOwner', {'owner': _reader}, keys, _reader);
-        expect(withKey, hasLength(1));
-        expect((withKey.single['data'] as Map)['body'], _plaintext,
-            reason: 'the key-holder reads plaintext');
-        final noKey = await s.query('notesByOwner', {'owner': _reader}, null, _reader);
-        final opaque = (noKey.single['data'] as Map)['body'];
-        expect(opaque, isNot(_plaintext), reason: 'the operator view never decrypts');
-        expect(opaque.toString(), contains(_scope),
-            reason: 'the value is the scope-bound ciphertext envelope, sizes/scope visible only');
-        expect(opaque.toString(), envelope, reason: 'byte-for-byte the on-chain envelope');
-      });
-
-      // ── LEG 6: a NON-MEMBER is refused by the read gate itself (before decryption matters). ──
-      await _leg('leg 6: non-member read refused by the read gate', () async {
-        await expectLater(
-            s.query('notesByOwner', {'owner': _reader},
-                [NomosScopeKey(scope: _scope, epoch: 0, key: scopeKey)], 'intruder-mallory'),
-            throwsA(predicate((e) => e.toString().contains('read-forbidden'),
-                'a read-forbidden refusal')));
-      });
-    } finally {
-      await harness.dispose().timeout(const Duration(seconds: 30),
-          onTimeout: () => throw StateError('harness disposal hung'));
-    }
-  }, timeout: const Timeout(Duration(minutes: 5)));
-}

package/dart/test/session_bound_test.dart

@@ -1,285 +0,0 @@
-// SESSION-BOUND APPLICATIONS — framework acceptance against the REAL wasm on a local plane.
-// Generated clients are private implementation parts. These tests bind the generated application
-// surface and use raw session calls only where they deliberately exercise nomos_client internals:
-//
-//   engine → mount → generated application bind (preflight) → an internal fixture birth landing in
-//   the session workspace → engine.follow(ref) → a second application → a business record operation.
-//
-// Plus the typed failure modes: application bind on a deliberately WRONG session throws
-// DomainClientSessionMismatch with every spec field; a dispatch naming an uninstalled domain
-// surfaces as DomainNotInstalledForSession (the context-rich replacement of the kernel's generic
-// "no active installed law declares domain 'x'"). Raw calls here are framework-test setup only;
-// they are not a supported tenant lane and are not exported by nomos_client.
-@TestOn('vm')
-library;
-
-import 'dart:io';
-
-// ignore: deprecated_member_use
-import 'package:nomos_client/src/nms_conformance_runtime.dart';
-import 'package:test/test.dart';
-
-import '../../../bench/scale/fixtures/estate-birth/build/dart/src/generated/home.application.dart';
-import '../../../bench/scale/fixtures/estate-birth/build/dart/src/generated/estate.application.dart';
-
-String get _root => '${Directory.current.path}/../..';
-String get _repoEntry => '$_root/cloud/web-client/runner/node-entry.ts';
-String get _deployJson =>
-    '$_root/bench/scale/fixtures/estate-birth/build/estate-birth.law.usdz';
-String get _otherLawUsdz =>
-    '$_root/bench/scale/fixtures/surfaced/build/surfaced.law.usdz';
-String get _runtimeDir =>
-    Platform.environment['NOMOS_DART_RUNTIME'] ??
-    Platform.environment['NOMOS_OFFLINE_RUNTIME'] ??
-    '${Platform.environment['HOME'] ?? ''}/.holon/runtime';
-
-const _workspace = 'estate-birth';
-const _owner = 'user:session-bound-owner';
-
-String? _missingPrereq() {
-  if (!File(_repoEntry).existsSync())
-    return 'in-repo runner not found at $_repoEntry';
-  if (!File(_deployJson).existsSync() || !File(_otherLawUsdz).existsSync()) {
-    return 'compile the fixtures: (cd bench/scale/fixtures/estate-birth && node ../../../../dsl/compile_package.mjs); '
-        '(cd bench/scale/fixtures/surfaced && node ../../../../dsl/compile_package.mjs)';
-  }
-  if (!File('$_runtimeDir/holon-testmint.wasm').existsSync() ||
-      !File('$_runtimeDir/bootstrap.law.usdz').existsSync() ||
-      !File('$_runtimeDir/nomos.law.usdz').existsSync()) {
-    return 'warm ~/.holon/runtime first (run any `githolon` command once)';
-  }
-  return null;
-}
-
-Future<NomosTestHarness> _harness() => NomosTestHarness.ephemeral(
-      lawUsdzPaths: [_deployJson],
-      nodeEntry: _repoEntry,
-      runtimeDir: _runtimeDir,
-      workspace: _workspace,
-    );
-
-Future<NomosOfferOutcome> _birthEstate(
-  HomeApplication application,
-  NomosTestHarness harness, {
-  String owner = _owner,
-}) {
-  final facts = BirthEstateWorkspacePayload(
-    owner: owner,
-    frameworkHash: harness.frameworkHash!,
-    lawHash: harness.lawHashes(harness.workspace).first,
-    bornAt: DateTime.now().toUtc().toIso8601String(),
-  );
-  return nomosInternalHomeBirthEstateWorkspace(application, facts);
-}
-
-void main() {
-  test('an installed domain missing a required member is a newer-client shape',
-      () {
-    expect(
-      nmsInternalClientExpectsNewerInterface(
-        domain: 'home',
-        activeDomainKeys: const ['home', 'nomos'],
-        missing: const ['CatalogueAccessIndexEntry.catalogueWorkspace'],
-        incompatible: const [],
-      ),
-      isTrue,
-      reason:
-          'the generated candidate must enter exact-history adoption instead of deployment diagnostics',
-    );
-    expect(
-      nmsInternalClientExpectsNewerInterface(
-        domain: 'home',
-        activeDomainKeys: const ['catalogue', 'nomos'],
-        missing: const ['home'],
-        incompatible: const [],
-      ),
-      isFalse,
-      reason: 'a genuinely absent domain keeps the not-deployed diagnosis',
-    );
-  });
-
-  test(
-      'generated applications: mount → bind (preflight) → fixture birth → follow(ref) → '
-      'second application → typed record operation', () async {
-    final skip = _missingPrereq();
-    if (skip != null) {
-      markTestSkipped(skip);
-      return;
-    }
-    final harness = await _harness();
-    try {
-      // ENGINE + SESSION: the harness bridge IS the session handle pinned to the fixture workspace.
-      final home = harness.session(harness.workspace);
-
-      // BIND (ask 2/5): the async preflight — reachable, domain installed, shape-compatible.
-      final homeApplication =
-          await nomosInternalBindHomeApplication(home, _owner);
-      expect(homeApplication.activity, isA<HomeActivity>());
-
-      // This fixture predates businessBirth and intentionally keeps its kernel birth
-      // primitive out of the generated tenant application. The raw offer is framework
-      // setup; the generated application remains the only public business surface.
-      final birth = await _birthEstate(homeApplication, harness);
-      expect(birth.workspace, harness.workspace,
-          reason:
-              'the birth offer landed in the SESSION workspace, no loose parent');
-      expect(birth.gatewayVerdict, isNull,
-          reason: 'the local offer lane, not the legacy relay');
-      expect(birth.born, hasLength(1));
-      expect(birth.birthOutcomes.first.status,
-          NomosBirthOutcomeStatus.BIRTH_OUTCOME_STATUS_BORN);
-
-      // FOLLOW THE REF (ask 8): NomosRef in, mounted session out — never a string pair.
-      final estate = await harness.bridge.follow(birth.bornRefs.single,
-          authorSecret: harness.deviceSecret(harness.workspace));
-      expect(estate.workspace, birth.born.single);
-
-      // SECOND CLIENT + a typed read AND a directive on it.
-      final estateApplication =
-          await nomosInternalBindEstateApplication(estate, _owner);
-      final rows =
-          await estateApplication.estateOwners.estatesByOwner(owner: _owner);
-      expect(rows, hasLength(1),
-          reason: 'the child genesis seed reads back typed');
-      final seeded = rows.single;
-      // A directive on the second client: re-ensure the singleton with the SAME seeded values
-      // (`.ensures` — idempotent; the squat invariant re-accepts its own binding).
-      await estateApplication.estateOwners
-          .seedEstateWorkspace(SeedEstateWorkspacePayload(
-        owner: seeded.owner!,
-        estateName: seeded.estateName!,
-        bornAt: seeded.bornAt!,
-      ));
-      final afterReseed =
-          await estateApplication.estateOwners.estatesByOwner(owner: _owner);
-      expect(afterReseed, hasLength(1));
-
-      // ask 9: the harness diagnostic names the installed domains.
-      await harness.assertDomainInstalled(
-          workspace: estate.workspace, domain: 'estate');
-    } finally {
-      await harness.dispose();
-    }
-  }, timeout: const Timeout(Duration(minutes: 4)));
-
-  test(
-      'session.watchPendingConflicts() EMITS (the 0.48.0 regression: the session-level stream '
-      'registered on an object with no message loop and never emitted)',
-      () async {
-    final skip = _missingPrereq();
-    if (skip != null) {
-      markTestSkipped(skip);
-      return;
-    }
-    final harness = await _harness();
-    try {
-      final session = harness.session(harness.workspace);
-      // Subscribe FIRST on the SESSION (the co2 shape: a session-bound generated client's
-      // conflict stream), then author any write so a watch tick fires. The broken delegation
-      // registered the sub on the session's own dead controller registry — the stream NEVER
-      // emitted, regardless of ticks. The fix delegates to the parent plane like every other
-      // reactive read; the first tick must deliver a snapshot (empty — no Surfaced law here).
-      final first = session.watchPendingConflicts().first;
-      final application =
-          await nomosInternalBindHomeApplication(session, _owner);
-      await _birthEstate(application, harness);
-      final rows = await first.timeout(const Duration(seconds: 30));
-      expect(rows, isEmpty,
-          reason:
-              'no Surfaced law in this fixture — the point is the stream EMITS at all');
-    } finally {
-      await harness.dispose();
-    }
-  }, timeout: const Timeout(Duration(minutes: 4)));
-
-  test(
-      'bind on a deliberately WRONG session throws DomainClientSessionMismatch with every field',
-      () async {
-    final skip = _missingPrereq();
-    if (skip != null) {
-      markTestSkipped(skip);
-      return;
-    }
-    // TWO workspaces, TWO different laws, ONE plane — binding HomeApplication to the docs
-    // workspace is the deliberate wrong-session case (wrong-package-mounted).
-    final harness = await NomosTestHarness.cluster(
-      nodeEntry: _repoEntry,
-      runtimeDir: _runtimeDir,
-      workspaces: {
-        _workspace: [_deployJson],
-        'docs-ws': [_otherLawUsdz],
-      },
-    );
-    try {
-      final wrong = harness.session('docs-ws');
-      Object? thrown;
-      try {
-        await nomosInternalBindHomeApplication(wrong, null);
-      } catch (e) {
-        thrown = e;
-      }
-      expect(thrown, isA<DomainClientSessionMismatch>(),
-          reason:
-              'the mismatch fires at CONSTRUCTION, not two clicks into the app');
-      final m = thrown! as DomainClientSessionMismatch;
-      expect(m.sessionId, 'docs-ws');
-      expect(m.sessionWorkspace, 'docs-ws');
-      expect(m.expectedDomainKey, 'home');
-      expect(m.expectedDomainHash, isNotEmpty);
-      expect(m.expectedInterfaceHash, isNotEmpty);
-      expect(m.activeDomainKeys, isNot(contains(m.expectedDomainKey)));
-      expect(m.cause, SessionMismatchCause.wrongPackageMounted,
-          reason: 'the docs workspace RUNS law — just not this domain');
-      expect(m.hint, isNotEmpty);
-      expect(m.toString(), contains(m.expectedDomainKey));
-
-      // The RIGHT session still binds (the plane is unharmed).
-      await nomosInternalBindHomeApplication(
-          harness.session(harness.workspace), null);
-
-      // The other generated application gets the same typed refusal without exposing
-      // its private interface descriptor.
-      await expectLater(nomosInternalBindEstateApplication(wrong, null),
-          throwsA(isA<DomainClientSessionMismatch>()));
-    } finally {
-      await harness.dispose();
-    }
-  }, timeout: const Timeout(Duration(minutes: 4)));
-
-  test(
-      'a framework-test dispatch naming an UNINSTALLED domain surfaces as '
-      'DomainNotInstalledForSession with context', () async {
-    final skip = _missingPrereq();
-    if (skip != null) {
-      markTestSkipped(skip);
-      return;
-    }
-    final harness = await _harness();
-    try {
-      final session = harness.session(harness.workspace);
-      Object? thrown;
-      try {
-        await session.offerOutcome(
-            domain: 'not_installed_domain',
-            directiveId: 'doIt',
-            payload: const {});
-      } catch (e) {
-        thrown = e;
-      }
-      expect(thrown, isA<DomainNotInstalledForSession>());
-      final err = thrown! as DomainNotInstalledForSession;
-      expect(err.expectedDomainKey, 'not_installed_domain');
-      expect(err.sessionWorkspace, harness.workspace);
-      expect(err.requestedWorkspace, harness.workspace);
-      expect(err.activeDomainKeys, contains('home'),
-          reason: 'the error NAMES what the workspace actually runs');
-      expect(err.possibleCauses,
-          DomainNotInstalledForSession.defaultPossibleCauses);
-      expect(err.underlying.toString(),
-          contains('no active installed law declares domain'));
-      expect(err.toString(), contains('Possible causes'));
-    } finally {
-      await harness.dispose();
-    }
-  }, timeout: const Timeout(Duration(minutes: 4)));
-}

package/dart/test/stale_bundle_test.dart

@@ -1,80 +0,0 @@
-// THE STALE-BAKED-BUNDLE CHECK (the countermeasure to the co2 incidents where Flutter's build
-// cache silently kept an old nomos-runner.js across a correct pub upgrade). ready carries the
-// bundle's self-stamped version; the bridge refuses stale/pre-stamp bundles LOUDLY at boot.
-import 'dart:async';
-
-import 'package:nomos_client/src/nms_conformance_runtime.dart';
-import 'package:nomos_types/nomos_kernel_protocol.dart' as protocol;
-import 'package:test/test.dart';
-
-class _StampedRunner implements BridgeTransport {
-  _StampedRunner(this.stamp) {
-    scheduleMicrotask(() => _incoming.add({
-          'v': kWebviewBridgeVersion,
-          'event': 'ready',
-          if (stamp != null) 'bundleVersion': stamp,
-        }));
-  }
-  final String? stamp;
-  final _incoming = StreamController<Map<String, Object?>>.broadcast();
-  @override
-  Stream<Map<String, Object?>> get messages => _incoming.stream;
-  @override
-  Future<protocol.RuntimeResponse> invokeRuntime(
-    protocol.RuntimeRequest request,
-  ) async =>
-      protocol.RuntimeResponse(
-        protocolVersion: 2,
-        requestId: request.requestId,
-        realmClosed: protocol.RealmClosed(),
-      );
-  @override
-  void send(Map<String, Object?> message) {}
-}
-
-void main() {
-  test(
-      'a PRE-STAMP bundle (no bundleVersion) fails ready with StaleRunnerBundle',
-      () async {
-    final b = NomosBridge(_StampedRunner(null));
-    await expectLater(b.ready, throwsA(isA<StaleRunnerBundle>()));
-  });
-
-  test(
-      'an OLDER stamp fails ready, and the error names found/expected + the remedy',
-      () async {
-    final b = NomosBridge(_StampedRunner('0.53.1'));
-    Object? err;
-    try {
-      await b.ready;
-    } catch (e) {
-      err = e;
-    }
-    expect(err, isA<StaleRunnerBundle>());
-    final s = err.toString();
-    expect(s, contains('0.53.1'));
-    expect(s, contains(kExpectedRunnerBundleVersion));
-    expect(s, contains('flutter clean'));
-  });
-
-  test('the CURRENT stamp passes', () async {
-    final b = NomosBridge(_StampedRunner(kExpectedRunnerBundleVersion));
-    await b.ready; // completes
-  });
-
-  test('a NEWER stamp passes (forward-compatible)', () async {
-    final b = NomosBridge(_StampedRunner('99.0.0'));
-    await b.ready;
-  });
-
-  test('unbundled-dev (the in-repo source lane) always passes', () async {
-    final b = NomosBridge(_StampedRunner('unbundled-dev'));
-    await b.ready;
-  });
-
-  test('allowStaleRunnerBundle is the deliberate escape hatch', () async {
-    final b =
-        NomosBridge(_StampedRunner('0.1.0'), allowStaleRunnerBundle: true);
-    await b.ready;
-  });
-}