@githolon/dsl 0.108.7 → 0.110.1

package/dart/test/first_app_gauntlet_test.dart

@@ -1,386 +0,0 @@
-// THE LOCAL-RUNTIME GAUNTLET — one sequential journey through the internal test harness and runtime
-// lifecycle beneath the generated application. Tenant DX is compiled and exercised separately by
-// dsl/src/dart_packages.test.ts through the generated application/scenario barrels; this file must not
-// pretend that framework-conformance setup is tenant API. Every lifecycle bug co2 found (session watch delegation,
-// local autoSync deadlock, the keyed-reconnect lane, …) has a leg here, so the NEXT one is found
-// by CI, not by a tenant.
-//
-// Structure: ONE test, numbered legs, fail-fast — a failure names its leg, so CI output reads as
-// a checklist. Its first act drives the compiled CO2 law through the internal runtime lane solely to
-// establish the child workspace used by the remaining runtime checks.
-//
-// Prereqs (fixtures compiled + a warm ~/.holon/runtime): locally the test SKIPS with the recipe
-// when they are missing; in CI the job sets NOMOS_GAUNTLET_REQUIRED=1 so a missing prereq is a
-// LOUD FAILURE, never a silently-green skip.
-@TestOn('vm')
-library;
-
-import 'dart:io';
-
-import 'package:nomos_client/src/nms_conformance_runtime.dart';
-import 'package:nomos_types/src/nomos_ref.dart' show NmsInternalNomosRefs;
-import 'package:test/test.dart';
-
-String get _root => '${Directory.current.path}/../..';
-String get _repoEntry => '$_root/cloud/web-client/runner/node-entry.ts';
-String get _homeDeploy => '$_root/examples/co2-birth/build/co2.law.usdz';
-String get _docsDeploy =>
-    '$_root/bench/scale/fixtures/surfaced/build/surfaced.law.usdz';
-String get _catDeploy =>
-    '$_root/bench/scale/fixtures/catalogue-src/build/cat.law.usdz';
-String get _readerDeploy =>
-    '$_root/bench/scale/fixtures/catalogue-reader/build/estate.law.usdz';
-String get _runtimeDir =>
-    Platform.environment['NOMOS_DART_RUNTIME'] ??
-    Platform.environment['NOMOS_OFFLINE_RUNTIME'] ??
-    '${Platform.environment['HOME'] ?? ''}/.holon/runtime';
-
-const _owner = 'user:gauntlet-owner';
-const _keyed = 'catalogue';
-
-/// Phantom test-only aggregate type for the internal runtime locator below. Tenant code gets the real
-/// generated `NomosRef<Estate>` from its application package.
-final class _GauntletEstate {}
-
-String? _missingPrereq() {
-  if (!File(_repoEntry).existsSync())
-    return 'in-repo runner not found at $_repoEntry';
-  final fixtures = {
-    _homeDeploy: 'examples/co2-birth',
-    _docsDeploy: 'bench/scale/fixtures/surfaced',
-    _catDeploy: 'bench/scale/fixtures/catalogue-src',
-    _readerDeploy: 'bench/scale/fixtures/catalogue-reader',
-  };
-  for (final e in fixtures.entries) {
-    if (!File(e.key).existsSync()) {
-      return 'missing fixture ${e.key} — compile it: (cd ${e.value} && node ../../../../dsl/compile_package.mjs)';
-    }
-  }
-  if (!File('$_runtimeDir/holon-testmint.wasm').existsSync() ||
-      !File('$_runtimeDir/bootstrap.law.usdz').existsSync() ||
-      !File('$_runtimeDir/nomos.law.usdz').existsSync()) {
-    return 'warm ~/.holon/runtime first (run any `githolon` command once, or fetch '
-        '/v1/runtime/holon-testmint.wasm + /v1/runtime/packages from the cloud)';
-  }
-  return null;
-}
-
-/// Run one numbered leg fail-fast: log enter/exit so CI output reads as a checklist, and wrap any
-/// failure so the failing LEG is named at the top of the report.
-Future<T> _leg<T>(String name, Future<T> Function() body) async {
-  final sw = Stopwatch()..start();
-  // ignore: avoid_print
-  print('▶ GAUNTLET $name …');
-  try {
-    final r = await body();
-    // ignore: avoid_print
-    print('✔ GAUNTLET $name (${sw.elapsedMilliseconds}ms)');
-    return r;
-  } catch (e, st) {
-    throw TestFailure(
-        'GAUNTLET $name FAILED after ${sw.elapsedMilliseconds}ms:\n$e\n$st');
-  }
-}
-
-void main() {
-  test(
-      'THE LOCAL-RUNTIME GAUNTLET: harness → law setup → local posture → '
-      'acquire → reactive reads → attested read → diagnostics → disposal',
-      () async {
-    final required = Platform.environment['NOMOS_GAUNTLET_REQUIRED'] == '1';
-    final missing = _missingPrereq();
-    if (missing != null) {
-      if (required) {
-        fail(
-            'NOMOS_GAUNTLET_REQUIRED=1 but a prereq is missing — the CI job must provide it: '
-            '$missing');
-      }
-      markTestSkipped(missing);
-      return;
-    }
-
-    final diagnostics = <String>[];
-
-    // ── LEG 1: harness up — a 4-workspace cluster, one deviceKeyed, phase diagnostics on. ──
-    final harness = await _leg(
-        'leg 1: NomosTestHarness.cluster (4 ws, one deviceKeyed)', () async {
-      final h = await NomosTestHarness.cluster(
-        workspaces: {
-          'home': [_homeDeploy],
-          'docs-ws': [_docsDeploy],
-          _keyed: [_catDeploy],
-          'reader': [_readerDeploy],
-        },
-        deviceKeyed: {_keyed},
-        nodeEntry: _repoEntry,
-        runtimeDir: _runtimeDir,
-        onDiagnostic: diagnostics.add,
-        phaseTimeout: const Duration(seconds: 120),
-      );
-      // Phase diagnostics (the "no silent hangs" promise): install, ready, connect, and the
-      // keyed 3b legs all log enter AND exit lines.
-      expect(diagnostics.any((l) => l.contains('offline law install')), isTrue,
-          reason: 'phase 1 install diagnostics must appear');
-      expect(diagnostics.any((l) => l.startsWith('[offline-install]')), isTrue,
-          reason:
-              'an in-repo runner must install through its adjacent in-repo helper, never silently fall back to the published CLI');
-      expect(
-          diagnostics
-              .any((l) => l.contains('runner ready') && l.contains('done')),
-          isTrue,
-          reason: 'the runner-ready phase must log its exit');
-      expect(diagnostics.any((l) => l.contains('3b: device keygen')), isTrue,
-          reason: 'the deviceKeyed keygen phase must log');
-      expect(
-          diagnostics.any((l) =>
-              l.contains("3b: keyed reconnect of '$_keyed'") &&
-              l.contains('done')),
-          isTrue,
-          reason:
-              'the keyed reconnect phase must log its exit (the reported wedge)');
-      expect(h.sessions.toSet(), {'home', 'docs-ws', _keyed, 'reader'});
-      return h;
-    });
-
-    try {
-      // ── LEG 2: internal conformance setup — establish Estate → Site → Asset directly against the
-      //    compiled law. The generated, business-only surface has its own compile-and-run proof. ──
-      final home = harness.session('home');
-      final bornEstate = await _leg(
-          'leg 2: internal CO2 law setup (Estate → Site → Asset)', () async {
-        // This is an internal framework-conformance setup, so declare its parent allowance explicitly
-        // through the same offer a compiled application ceremony uses. There is deliberately no harness
-        // or kernel fallback for a birth-capable workspace with missing policy.
-        final bornAt = DateTime.now().toUtc().toIso8601String();
-        await home.offerOutcome(
-          domain: 'co2',
-          directiveId: 'seedBirthPolicy',
-          payload: {
-            'maxBirthsPerPrincipal': 1,
-            'setBy': _owner,
-            'setAt': bornAt,
-          },
-          actor: _owner,
-          authorSecret: harness.deviceSecret(home.workspace),
-        );
-        final birth = await home.offerOutcome(
-          domain: 'co2',
-          directiveId: 'nomosBirthEstate',
-          payload: {
-            'reference': 'E-001',
-            'name': 'Foundry',
-            'country': 'GB',
-            'baselineTonnesCo2e': 4200,
-            'principal': _owner,
-            'bornAt': bornAt,
-          },
-          actor: _owner,
-        );
-        expect(birth.born, hasLength(1));
-        final ref = NmsInternalNomosRefs.create<_GauntletEstate>(
-          workspace: birth.born.single,
-          type: 'Estate',
-          id: 'estate:self',
-        );
-        expect(NmsInternalNomosRefs.workspace(ref), startsWith('estate-'));
-        expect(NmsInternalNomosRefs.type(ref), 'Estate');
-
-        final estateSession = await harness.bridge.follow(
-          ref,
-          authorSecret: harness.deviceSecret(home.workspace),
-        );
-        expect(estateSession.workspace, NmsInternalNomosRefs.workspace(ref));
-
-        final rows =
-            await estateSession.queryById(NmsInternalNomosRefs.id(ref));
-        expect(rows, hasLength(1), reason: 'the born business root reads back');
-        final estateData = (rows.single['data'] as Map).cast<String, Object?>();
-        expect(estateData['reference'], 'E-001');
-        expect(estateData['name'], 'Foundry');
-
-        final siteOutcome = await estateSession.offerOutcome(
-          domain: 'co2',
-          directiveId: 'addSite',
-          payload: {'name': 'Trafford Depot'},
-          actor: _owner,
-        );
-        final site = siteOutcome.created.single;
-        expect(site.type, 'co2.Site');
-        // An estate is the workspace boundary, so its Site records need no copied
-        // estateId foreign key. This framework test uses the primitive type read;
-        // tenant code gets estate.sites from the generated application.
-        final sites = await estateSession
-            .query('aggregatesByType', {'__type': 'co2.Site'});
-        expect(sites, hasLength(1));
-        final siteData = (sites.single['data'] as Map).cast<String, Object?>();
-        expect(siteData['name'], 'Trafford Depot');
-
-        final assetOutcome = await estateSession.offerOutcome(
-          domain: 'co2',
-          directiveId: 'commissionAsset',
-          payload: {
-            'siteId': site.id,
-            'name': 'Main electricity meter',
-            'rfidQrIdentity': 'E20034120123456789012345',
-          },
-          actor: _owner,
-        );
-        final asset = assetOutcome.created.single;
-        expect(asset.type, 'co2.Asset');
-        final assets =
-            await estateSession.query('assetsBySite', {'siteId': site.id});
-        expect(assets, hasLength(1));
-        final assetData =
-            (assets.single['data'] as Map).cast<String, Object?>();
-        expect(assetData['name'], 'Main electricity meter');
-        expect(assetData['operationalStatus'], 'commissioned');
-        return (session: estateSession, ref: ref);
-      });
-      final estate = bornEstate.session;
-
-      // ── LEG 3: local posture — autoSync on a local-only session returns promptly and never
-      //    monopolizes the plane; zero network fetch attempts (asserted again at the end). ──
-      await _leg(
-          'leg 3: local-only autoSync completes promptly, plane stays responsive',
-          () async {
-        await home.autoSync().timeout(const Duration(seconds: 10),
-            onTimeout: () => throw StateError(
-                'autoSync() on a local-only session did not return within 10s (the deadlock class)'));
-        // The plane is NOT blocked: a sibling session still answers.
-        final listed = await harness.bridge.listWorkspaces().timeout(
-            const Duration(seconds: 10),
-            onTimeout: () => throw StateError(
-                'listWorkspaces() hung after a local-only autoSync'));
-        expect(listed.map((workspace) => workspace.session).toSet(),
-            containsAll({'home', 'docs-ws', _keyed, 'reader'}));
-        await home.stopAutoSync().timeout(const Duration(seconds: 10),
-            onTimeout: () => throw StateError(
-                'stopAutoSync() hung on a local-only session'));
-      });
-
-      // ── LEG 4: acquireSession — concurrent double-acquire single-flights to ONE handle; the
-      //    credentials callback is NEVER invoked for a plane-known workspace. ──
-      await _leg(
-          'leg 4: acquireSession (concurrent, credential-free for a known workspace)',
-          () async {
-        final acquired = await Future.wait([
-          harness.bridge.acquireSession('reader',
-              ifAbsentCredentials: () async => fail(
-                  'reader is on the plane — credentials must not be requested')),
-          harness.bridge.acquireSession('reader',
-              ifAbsentCredentials: () async => fail(
-                  'reader is on the plane — credentials must not be requested')),
-        ]);
-        expect(identical(acquired[0], acquired[1]), isTrue,
-            reason: 'a concurrent double-acquire yields ONE handle');
-        expect(identical(acquired[0], harness.session('reader')), isTrue,
-            reason: 'the acquired handle IS the mounted session');
-      });
-
-      // ── LEG 5: reactive reads on a SESSION — watchById / watch / watchPendingConflicts must
-      //    all deliver a FIRST SNAPSHOT (the 0.48.x dead-delegation class). ──
-      await _leg('leg 5: session reactive reads emit their first snapshot',
-          () async {
-        final raw =
-            await estate.queryById(NmsInternalNomosRefs.id(bornEstate.ref));
-        final aggId = ((raw.single as Map)['id'] ?? '').toString();
-        expect(aggId, isNotEmpty);
-        final byId = await estate.watchById(aggId).first.timeout(
-            const Duration(seconds: 30),
-            onTimeout: () =>
-                throw StateError('watchById never emitted its first snapshot'));
-        expect(byId, hasLength(1));
-        final byQuery = await estate
-            .watch('estatesByReference', {'reference': 'E-001'})
-            .first
-            .timeout(const Duration(seconds: 30),
-                onTimeout: () => throw StateError(
-                    'watch(query) never emitted its first snapshot'));
-        expect(byQuery, hasLength(1));
-        // The docs-ws session carries the Surfaced law — its pending-conflicts stream must emit a
-        // first snapshot (empty is correct; EMITTING at all is the regression under test).
-        final conflicts = await harness
-            .session('docs-ws')
-            .watchPendingConflicts()
-            .first
-            .timeout(const Duration(seconds: 30),
-                onTimeout: () => throw StateError(
-                    'watchPendingConflicts never emitted (the session-delegation regression)'));
-        expect(conflicts, isEmpty);
-      });
-
-      // ── LEG 6: the keyed lane end-to-end — the re-opened workspace remains writable/readable.
-      // Cross-workspace premises are exercised through ordinary offers in the kernel acceptance suite.
-      await _leg('leg 6: ordinary read/write on the deviceKeyed workspace',
-          () async {
-        final public = harness.devicePublicKey(_keyed);
-        expect(public, isNotNull);
-        expect(public, isNotEmpty,
-            reason: 'the 3b keygen public half rides the harness');
-        final cat = harness.session(_keyed);
-        final seeded = await cat.offerCreates(
-          domain: 'cat',
-          directiveId: 'listCatalogue',
-          payload: {
-            'listingId': 'L-1',
-            'title': 'Walnut desk',
-            'priceGbp': '900',
-            'listedAt': DateTime.now().toUtc().toIso8601String(),
-          },
-          actor: 'user:seller',
-        );
-        expect(seeded.head, isNotEmpty);
-        final rows = await cat.query('listingById', {'listingId': 'L-1'});
-        expect(rows, hasLength(1));
-      });
-
-      // ── LEG 7: harness diagnostics — assertDomainInstalled, resetWorkspaceCustody, and a
-      //    mid-test seedWorkspaceFromLawUsdz round-trip. ──
-      await _leg(
-          'leg 7: harness diagnostics (assertDomainInstalled / reset / seed)',
-          () async {
-        await harness.assertDomainInstalled(
-            workspace: estate.workspace, domain: 'co2');
-        // The negative arm names the active domains.
-        await expectLater(
-            harness.assertDomainInstalled(
-                workspace: 'docs-ws', domain: 'definitely-not-here'),
-            throwsA(isA<NomosTestHarnessException>()));
-        // Reset a workspace's local custody to its seed snapshot, then prove it still serves.
-        await harness.resetWorkspaceCustody('docs-ws');
-        final postReset = await harness
-            .session('docs-ws')
-            .watchPendingConflicts()
-            .first
-            .timeout(const Duration(seconds: 30),
-                onTimeout: () => throw StateError(
-                    'the reset docs-ws session never served a read'));
-        expect(postReset, isEmpty,
-            reason: 'the reset workspace is back at its seed');
-        // Seed a brand-new workspace mid-test from a deploy.json and use it immediately.
-        final late = await harness.seedWorkspaceFromLawUsdz(
-            workspace: 'late-ws', lawUsdzPaths: [_docsDeploy]);
-        expect(late.workspace, 'late-ws');
-        await harness.assertDomainInstalled(
-            workspace: 'late-ws', domain: 'docs');
-      });
-
-      // Local posture postscript (leg 3's zero-network promise, checked over the WHOLE run): no
-      // session on this plane ever attempted a network fetch.
-      final offending = diagnostics
-          .where((l) =>
-              l.contains('intent-offers') ||
-              l.contains('refusing network fetch'))
-          .toList();
-      expect(offending, isEmpty,
-          reason:
-              'local-only sessions must perform NO network work — saw:\n${offending.join('\n')}');
-    } finally {
-      // ── LEG 8: clean disposal within the deadline (a hung teardown is a failure, not a wedge). ──
-      await _leg('leg 8: harness disposal within the deadline', () async {
-        await harness.dispose().timeout(const Duration(seconds: 30),
-            onTimeout: () => throw StateError('harness disposal hung'));
-      });
-    }
-  }, timeout: const Timeout(Duration(minutes: 8)));
-}

package/dart/test/fixtures/wedge/fake-install.mjs

@@ -1,11 +0,0 @@
-#!/usr/bin/env node
-// A FAKE offline-install helper for the hermetic HARNESS PHASE-TIMEOUT tests: honours the real helper's
-// flag + one-line-JSON contract (--law/--workspace/--out) but installs nothing — it just writes a tiny
-// dummy snapshot so the harness proceeds to the runner phases.
-import { writeFileSync } from "node:fs";
-const args = process.argv.slice(2);
-const val = (f) => { const i = args.indexOf(f); return i >= 0 ? args[i + 1] : undefined; };
-const out = val("--out");
-const workspace = val("--workspace");
-writeFileSync(out, Buffer.from("fake-snapshot"));
-process.stdout.write(JSON.stringify({ ok: true, snapshot: out, workspace, lawHashes: ["deadbeef"], frameworkHash: "cafebabe" }) + "\n");