@githolon/dsl 0.108.7 → 0.110.1

package/dart/test/four_layer_nested_topology_test.dart

@@ -1,290 +0,0 @@
-// THE FOUR-LAYER NESTED TOPOLOGY TEST — a real-app shape end-to-end:
-//
-//   Layer 1: the remote PLATFORM (tenant root)
-//   Layer 2: the HOME born under the platform (the per-user holon)
-//   Layer 3: a SPACE app-workspace born offline under the home
-//   Layer 4: a PROJECT app-workspace born offline under the home, with cross-workspace reference to Space
-//   Plus: MULTI-USER offline-first — two devices/users write concurrently and CONVERGE
-//
-// Sequence:
-// 1. the remote platform births the home (the ONE control-plane contact)
-// 2. the app mounts the home locally (a normal cloud-bound NomosSession; platform is never cloned)
-// 3. the network PARTITIONS
-// 4. the home births the SPACE workspace LOCALLY
-// 5. the home births the PROJECT workspace LOCALLY (which can reference the Space)
-// 6. both space and project open as sibling sessions and ACCEPT LOCAL WRITES while offline
-// 7. UI-facing queries return those writes immediately (local projection; no sync awaited)
-// 8. the network HEALS
-// 9. `harness.converge()` establishes remote custody PARENT-FIRST (home's synced chain folds the
-//    birth offer-effects remotely, creating the space/project remote custody; then they converge)
-// 10. a FRESH observer (the dev cloud's own remote projection) sees both space and project writes
-// 11. a SECOND USER writes to both workspaces offline, then converges (multi-user convergence)
-// 12. the FIRST USER sees the second user's writes in fresh queries (cross-user view)
-//
-import 'dart:convert';
-import 'dart:io';
-
-import 'package:crypto/crypto.dart' show sha256;
-import 'package:nomos_client/src/nms_conformance_runtime.dart';
-import 'package:test/test.dart';
-
-String get _root => '${Directory.current.path}/../..';
-String get _repoEntry => '$_root/cloud/web-client/runner/node-entry.ts';
-String get _devServer => '$_root/cloud/dev-server/server.ts';
-String get _deploy =>
-    '$_root/bench/scale/fixtures/four-layer-nested-topology/build/four-layer-nested-topology.law.usdz';
-const _subject1 = 'user:four-layer-test-user1';
-const _subject2 = 'user:four-layer-test-user2';
-
-String? _missingPrereq() {
-  if (!File(_repoEntry).existsSync()) return 'in-repo runner not found at $_repoEntry';
-  if (!File(_devServer).existsSync()) return 'in-repo dev server not found at $_devServer';
-  if (!File(_deploy).existsSync()) {
-    return 'compile the fixture: cd bench/scale/fixtures/four-layer-nested-topology && node ../../../../dsl/compile_package.mjs — missing $_deploy';
-  }
-  return null;
-}
-
-void main() {
-  test('the four-layer topology: platform → home → space + project (with cross-ref) offline + multi-user converge',
-      () async {
-    final skip = _missingPrereq();
-    if (skip != null) {
-      markTestSkipped(skip);
-      return;
-    }
-    final diag = Platform.environment['NOMOS_HARNESS_DIAG'] == '1'
-        ? (String l) => stderr.writeln(l)
-        : null;
-    final cloud = await NomosTestCloud.start(serverEntry: _devServer, platform: 'four-layer-platform', lawUsdzPath: _deploy, onDiagnostic: diag);
-    NomosTestHarness? harness1;
-    NomosTestHarness? harness2;
-    try {
-      // LAYER 1+2: the remote ceremony + the local mount (user 1)
-      harness1 = await NomosTestHarness.cloudBound(
-        cloud: cloud,
-        lawUsdzPaths: [_deploy],
-        platformWorkspace: 'four-layer-platform',
-        subject: _subject1,
-        nodeEntry: _repoEntry,
-        onDiagnostic: diag,
-      );
-      final home1 = harness1.homeSession;
-      expect(home1.workspace, startsWith('home-'),
-          reason: 'the remote ceremony born the deterministic home slot for user1');
-      final remoteHome1 = await cloud.remoteHead(home1.workspace);
-      expect(remoteHome1.initialized, isTrue,
-          reason: 'the home was born REMOTELY (custody exists before the app mounted it)');
-
-      // PARTITION
-      cloud.setOnline(false);
-
-      // LAYER 3: birth a SPACE workspace LOCALLY (under home1)
-      final spaceOutcome = await harness1.bridge.session(home1.workspace).offerCreates(
-        domain: 'home',
-        directiveId: 'birthSpaceWorkspace',
-        payload: {
-          'owner': _subject1,
-          'frameworkHash': harness1.frameworkHash,
-          'lawHash': harness1.lawHashes(home1.workspace).first,
-          'bornAt': '2026-07-15T00:00:00Z',
-          'ownerKeyHash': sha256.convert(base64Decode(harness1.devicePublicKey(home1.workspace)!)).toString(),
-        },
-        actor: _subject1,
-      );
-      expect(spaceOutcome.born, isNotEmpty, reason: 'the local .births() offer spawned the space');
-      final spaceWs = spaceOutcome.born.single;
-      expect(spaceWs, startsWith('space-'));
-
-      // LAYER 4: birth a PROJECT workspace LOCALLY (under home1, will reference space)
-      final projectOutcome = await harness1.bridge.session(home1.workspace).offerCreates(
-        domain: 'home',
-        directiveId: 'birthProjectWorkspace',
-        payload: {
-          'owner': _subject1,
-          'frameworkHash': harness1.frameworkHash,
-          'lawHash': harness1.lawHashes(home1.workspace).first,
-          'bornAt': '2026-07-15T00:00:01Z',
-          'ownerKeyHash': sha256.convert(base64Decode(harness1.devicePublicKey(home1.workspace)!)).toString(),
-        },
-        actor: _subject1,
-      );
-      expect(projectOutcome.born, isNotEmpty, reason: 'the local .births() offer spawned the project');
-      final projectWs = projectOutcome.born.single;
-      expect(projectWs, startsWith('project-'));
-
-      // LAYER 3+4: Open both space and project as sibling sessions + make WRITES while offline
-      final space = await harness1.bridge.acquireSession(spaceWs, authorSecret: harness1.deviceSecret(home1.workspace));
-      final project = await harness1.bridge.acquireSession(projectWs, authorSecret: harness1.deviceSecret(home1.workspace));
-
-      // Write to space
-      await space.offerCreates(
-        domain: 'space',
-        directiveId: 'writeSpaceItem',
-        payload: {
-          'author': _subject1,
-          'title': 'Space Item 1 (offline)',
-          'createdAt': '2026-07-15T00:00:02Z',
-        },
-        actor: _subject1,
-      );
-
-      // Write to project (with cross-workspace reference to space)
-      await project.offerCreates(
-        domain: 'project',
-        directiveId: 'createTask',
-        payload: {
-          'author': _subject1,
-          'title': 'Task 1: belongs to Space (offline)',
-          'spaceWorkspace': spaceWs,  // CROSS-WORKSPACE REFERENCE
-          'createdAt': '2026-07-15T00:00:03Z',
-        },
-        actor: _subject1,
-      );
-
-      // LAYER 3+4: UI-facing queries return the writes IMMEDIATELY (local projection; nothing awaited sync)
-      final spaceRows = await space.query('spaceItemsByAuthor', {'author': _subject1});
-      expect(spaceRows, hasLength(1));
-      expect((spaceRows.single['data'] as Map)['title'], 'Space Item 1 (offline)');
-
-      final projectRows = await project.query('tasksByAuthor', {'author': _subject1});
-      expect(projectRows, hasLength(1));
-      expect((projectRows.single['data'] as Map)['title'], 'Task 1: belongs to Space (offline)');
-      expect((projectRows.single['data'] as Map)['spaceWorkspace'], spaceWs);
-
-      // Verify NO remote custody yet (the partition is real)
-      final remoteSpaceOffline = await cloud.remoteHead(spaceWs);
-      final remoteProjectOffline = await cloud.remoteHead(projectWs);
-      expect(remoteSpaceOffline.initialized, isFalse,
-          reason: 'while partitioned, the locally-born space has NO remote custody');
-      expect(remoteProjectOffline.initialized, isFalse,
-          reason: 'while partitioned, the locally-born project has NO remote custody');
-
-      // HEAL the network BEFORE creating harness2 (user2 needs network to be created)
-      cloud.setOnline(true);
-
-      // === MULTI-USER SCENARIO: USER 2 ===
-      // Create harness2 for user 2 (same platform, different home)
-      harness2 = await NomosTestHarness.cloudBound(
-        cloud: cloud,
-        lawUsdzPaths: [_deploy],
-        platformWorkspace: 'four-layer-platform',
-        subject: _subject2,
-        nodeEntry: _repoEntry,
-        onDiagnostic: diag,
-      );
-      final home2 = harness2.homeSession;
-      expect(home2.workspace, startsWith('home-'),
-          reason: 'user2 gets its own deterministic home slot');
-
-      // PARTITION again for user2's offline writes
-      cloud.setOnline(false);
-
-      // User2 births its own space locally (while partitioned)
-      final space2Outcome = await harness2.bridge.session(home2.workspace).offerCreates(
-        domain: 'home',
-        directiveId: 'birthSpaceWorkspace',
-        payload: {
-          'owner': _subject2,
-          'frameworkHash': harness2.frameworkHash,
-          'lawHash': harness2.lawHashes(home2.workspace).first,
-          'bornAt': '2026-07-15T00:00:04Z',
-          'ownerKeyHash': sha256.convert(base64Decode(harness2.devicePublicKey(home2.workspace)!)).toString(),
-        },
-        actor: _subject2,
-      );
-      final space2Ws = space2Outcome.born.single;
-      final space2 = await harness2.bridge.acquireSession(space2Ws, authorSecret: harness2.deviceSecret(home2.workspace));
-
-      // User2 writes to its own space while partitioned
-      await space2.offerCreates(
-        domain: 'space',
-        directiveId: 'writeSpaceItem',
-        payload: {
-          'author': _subject2,
-          'title': 'Space Item from User2 (offline)',
-          'createdAt': '2026-07-15T00:00:05Z',
-        },
-        actor: _subject2,
-      );
-
-      // HEAL the network again for final convergence
-      cloud.setOnline(true);
-
-      // CONVERGE (parent-first: home's synced chain folds the birth offer-effects remotely,
-      // creating the space/project remote custody; then they converge)
-      await harness1.converge(timeout: const Duration(seconds: 180));
-      await harness2.converge(timeout: const Duration(seconds: 180));
-
-      // Verify FRESH observer (the dev cloud's own remote projection) sees the offline-written data
-      final http = HttpClient();
-      try {
-        // Check space1 (user1's space)
-        final req1 = await http.getUrl(Uri.parse(
-            '${cloud.origin}/v2/workspaces/$spaceWs/spaceItemsByAuthor?author=${Uri.encodeQueryComponent(_subject1)}'));
-        final resp1 = await req1.close();
-        final body1 = jsonDecode(await resp1.transform(utf8.decoder).join());
-        final rows1 = ((body1 as Map)['rows'] as List?) ?? const [];
-        expect(rows1, hasLength(1),
-            reason: 'the remote projection serves user1\'s offline-written space item after converge');
-        expect(((rows1.single as Map)['data'] as Map)['title'], 'Space Item 1 (offline)');
-
-        // Check project1 (user1's project with cross-reference)
-        final req2 = await http.getUrl(Uri.parse(
-            '${cloud.origin}/v2/workspaces/$projectWs/tasksByAuthor?author=${Uri.encodeQueryComponent(_subject1)}'));
-        final resp2 = await req2.close();
-        final body2 = jsonDecode(await resp2.transform(utf8.decoder).join());
-        final rows2 = ((body2 as Map)['rows'] as List?) ?? const [];
-        expect(rows2, hasLength(1),
-            reason: 'the remote projection serves user1\'s offline-written project task after converge');
-        final task = ((rows2.single as Map)['data'] as Map);
-        expect(task['title'], 'Task 1: belongs to Space (offline)');
-        expect(task['spaceWorkspace'], spaceWs, reason: 'cross-workspace reference is persisted');
-
-        // Check space2 (user2's space)
-        final req3 = await http.getUrl(Uri.parse(
-            '${cloud.origin}/v2/workspaces/$space2Ws/spaceItemsByAuthor?author=${Uri.encodeQueryComponent(_subject2)}'));
-        final resp3 = await req3.close();
-        final body3 = jsonDecode(await resp3.transform(utf8.decoder).join());
-        final rows3 = ((body3 as Map)['rows'] as List?) ?? const [];
-        expect(rows3, hasLength(1),
-            reason: 'the remote projection serves user2\'s offline-written space item after converge');
-        expect(((rows3.single as Map)['data'] as Map)['title'], 'Space Item from User2 (offline)');
-      } finally {
-        http.close(force: true);
-      }
-
-      // Verify custody is REAL on all layers
-      final remoteHome12 = await cloud.remoteHead(home1.workspace);
-      final remoteSpace12 = await cloud.remoteHead(spaceWs);
-      final remoteProject12 = await cloud.remoteHead(projectWs);
-      final remoteHome22 = await cloud.remoteHead(home2.workspace);
-      final remoteSpace22 = await cloud.remoteHead(space2Ws);
-
-      expect(remoteHome12.initialized, isTrue);
-      expect(remoteHome12.commits, greaterThan(0));
-      expect(remoteSpace12.initialized, isTrue,
-          reason: 'converge established space\'s remote custody (home birth folded remotely)');
-      expect(remoteSpace12.commits, greaterThan(0));
-      expect(remoteProject12.initialized, isTrue,
-          reason: 'converge established project\'s remote custody (home birth folded remotely)');
-      expect(remoteProject12.commits, greaterThan(0));
-      expect(remoteHome22.initialized, isTrue);
-      expect(remoteHome22.commits, greaterThan(0));
-      expect(remoteSpace22.initialized, isTrue);
-      expect(remoteSpace22.commits, greaterThan(0));
-
-      // Cross-user view: User1 queries its space and project, should still see its own writes
-      final space1ViewFromUser1 = await space.query('spaceItemsByAuthor', {'author': _subject1});
-      expect(space1ViewFromUser1, hasLength(1));
-      expect(((space1ViewFromUser1.single['data'] as Map)['title']), 'Space Item 1 (offline)');
-
-      // (Note: user2 doesn't have read access to user1's space by design, but both write to different workspaces,
-      // so each user sees their own data in their own workspace)
-    } finally {
-      try { await harness1?.dispose(); } catch (_) {}
-      try { await harness2?.dispose(); } catch (_) {}
-      await cloud.stop();
-    }
-  }, timeout: const Timeout(Duration(minutes: 8)));
-}

package/dart/test/home_parity_test.dart

@@ -1,13 +0,0 @@
-import 'package:nomos_client/src/nms_generated_runtime.dart';
-import 'package:test/test.dart';
-
-void main() {
-  test('the private receiving-group address matches the JS/law formula', () {
-    expect(nmsInternalReceivingGroupNameOf('user:abc-123'),
-        'nomos-rg-5094641143043f9281b6b9146cc345a254a5d3af');
-    expect(
-        nmsInternalReceivingGroupNameOf('user:abc-123').startsWith('nomos-rg-'),
-        isTrue);
-    expect(nmsInternalReceivingGroupNameOf('user:abc-123').length, 49);
-  });
-}

package/dart/test/local_sync_inert_test.dart

@@ -1,107 +0,0 @@
-// LOCAL-ONLY SYNC MUST BE OBSERVATIONALLY INERT (co2's 0.75.1 blocker). Their repro, verbatim shape:
-// open a local:// session from a snapshot → offer → query returns the row → sync(admit: true) returns
-// {localOnly: true} → the SAME query must return the SAME row, and the head must be unchanged.
-// No branch/fold mutation, no network, identical results before and after.
-@TestOn('vm')
-library;
-
-import 'dart:convert';
-import 'dart:io';
-
-import 'package:nomos_client/src/nms_conformance_runtime.dart';
-import 'package:crypto/crypto.dart' show sha256;
-import 'package:test/test.dart';
-
-import '../../../bench/scale/fixtures/estate-birth/build/dart/src/generated/estate.application.dart';
-
-String get _root => '${Directory.current.path}/../..';
-String get _repoEntry => '$_root/cloud/web-client/runner/node-entry.ts';
-String get _deployJson =>
-    '$_root/bench/scale/fixtures/estate-birth/build/estate-birth.law.usdz';
-String get _runtimeDir =>
-    Platform.environment['NOMOS_DART_RUNTIME'] ??
-    Platform.environment['NOMOS_OFFLINE_RUNTIME'] ??
-    '${Platform.environment['HOME'] ?? ''}/.holon/runtime';
-
-const _workspace = 'estate-birth';
-const _owner = 'user:local-sync-inert';
-
-String? _missingPrereq() {
-  if (!File(_repoEntry).existsSync())
-    return 'in-repo runner not found at $_repoEntry';
-  if (!File(_deployJson).existsSync()) {
-    return 'compile the fixture: (cd bench/scale/fixtures/estate-birth && node ../../../../dsl/compile_package.mjs)';
-  }
-  if (!File('$_runtimeDir/holon-testmint.wasm').existsSync())
-    return 'warm ~/.holon/runtime first';
-  return null;
-}
-
-void main() {
-  test(
-      'local-only sync is OBSERVATIONALLY INERT: offer -> query -> sync -> head unchanged -> same row',
-      () async {
-    final skip = _missingPrereq();
-    if (skip != null) {
-      markTestSkipped(skip);
-      return;
-    }
-    final harness = await NomosTestHarness.cluster(
-      workspaces: {
-        _workspace: [_deployJson],
-      },
-      deviceKeyed: {_workspace},
-      nodeEntry: _repoEntry,
-      runtimeDir: _runtimeDir,
-    );
-    try {
-      final session = harness.session(_workspace);
-      final application =
-          await nomosInternalBindEstateApplication(session, _owner);
-
-      // 1-2. Offer a normal generated business call on the snapshot-opened local
-      // session. This test is about local sync, not the separate child-workspace
-      // birth ceremony.
-      final bornAt = DateTime.now().toUtc().toIso8601String();
-      final facts = SeedEstateWorkspacePayload(
-        owner: _owner,
-        estateName:
-            'estate-${sha256.convert(utf8.encode(_owner)).toString().substring(0, 40)}',
-        bornAt: bornAt,
-      );
-      await application.estateOwners.seedEstateWorkspace(facts);
-
-      // 3. Read through the generated, typed application surface.
-      final before =
-          await application.estateOwners.estatesByOwner(owner: _owner);
-      expect(before, hasLength(1),
-          reason: 'the offer must be readable BEFORE sync');
-      final statusBefore = await session.custodyStatus();
-      expect(statusBefore.pendingLocalIntents, greaterThan(0),
-          reason: 'the local write is pending (nothing upstream to land on)');
-
-      // 4. local-only sync — must be a no-op in EVERY observable respect.
-      final summary = await session.sync(admit: true);
-      expect(summary.localOnly, true,
-          reason: 'a local:// session syncs as the documented no-op');
-
-      // 5. THE REGRESSION (co2): custody unchanged, same query returns the SAME row.
-      final statusAfter = await session.custodyStatus();
-      expect(statusAfter.pendingLocalIntents, statusBefore.pendingLocalIntents,
-          reason:
-              'local-only sync must not consume/move pending local intents');
-      final after =
-          await application.estateOwners.estatesByOwner(owner: _owner);
-      expect(after, hasLength(1),
-          reason:
-              'local-only sync must be observationally inert — the row must still read');
-      expect(after.single.owner, before.single.owner,
-          reason: 'the SAME typed business record remains visible');
-      expect(after.single.estateName, before.single.estateName);
-      expect(after.single.bornAt, before.single.bornAt);
-      expect(after.single.ref.toString(), before.single.ref.toString());
-    } finally {
-      await harness.dispose();
-    }
-  }, timeout: const Timeout(Duration(minutes: 4)));
-}

package/dart/test/node_runner_transport_test.dart

@@ -1,78 +0,0 @@
-// The headless transport against the REAL node runner (`cloud/web-client/runner/node-entry.ts`):
-// protocol round-trip through NomosBridge without touching the cloud — ready handshake, typed refusal
-// on a pre-connect op, unknown-op error. The live connect path is covered by the env-gated smoke below.
-@TestOn('vm')
-library;
-
-import 'dart:io';
-
-import 'package:nomos_client/src/nms_generated_runtime.dart';
-import 'package:nomos_client/src/nms_conformance_runtime.dart';
-import 'package:test/test.dart';
-
-String _repoEntry() {
-  // In-repo the runner lives beside us; consumers resolve it from node_modules instead.
-  final here = Directory.current.path;
-  final p = '$here/../../cloud/web-client/runner/node-entry.ts';
-  if (!File(p).existsSync()) {
-    throw StateError('node-entry.ts not found at $p');
-  }
-  return p;
-}
-
-void main() {
-  late NodeRunnerTransport transport;
-  late NomosBridge bridge;
-
-  setUp(() async {
-    transport = await NodeRunnerTransport.start(
-      entry: _repoEntry(),
-      // An explicit packaged entry is self-contained; a stale discovery root must not become its cwd.
-      resolveFrom: '${Directory.systemTemp.path}/nomos-does-not-exist',
-    );
-    bridge = NomosBridge(transport);
-  });
-
-  tearDown(() async {
-    await transport.dispose();
-  });
-
-  test('posts the ready handshake', () async {
-    await bridge.ready.timeout(const Duration(seconds: 15));
-  });
-
-  test('a pre-connect position read fails before crossing the runtime boundary',
-      () async {
-    await bridge.ready.timeout(const Duration(seconds: 15));
-    await expectLater(
-      bridge.head(),
-      throwsA(isA<StateError>().having((e) => e.message, 'message',
-          contains('No Nomos workspace is connected'))),
-    );
-  });
-
-  test('requests are id-correlated (two in flight)', () async {
-    await bridge.ready.timeout(const Duration(seconds: 15));
-    final a = bridge.head().then((_) => 'ok', onError: (_) => 'err');
-    final b = bridge.metrics().then((_) => 'ok', onError: (_) => 'err');
-    expect(await a, 'err');
-    expect(await b, 'err');
-  });
-
-  test(
-    'LIVE smoke: connect + query against a real workspace',
-    skip: Platform.environment['NOMOS_HEADLESS_E2E'] == null
-        ? 'set NOMOS_HEADLESS_E2E=<workspace> (and optionally NOMOS_CLOUD) to run'
-        : null,
-    () async {
-      final ws = Platform.environment['NOMOS_HEADLESS_E2E']!;
-      final cloud = Platform.environment['NOMOS_CLOUD'] ?? 'https://nomos.cafe';
-      await bridge.ready.timeout(const Duration(seconds: 15));
-      await bridge.connect(
-          cloud: cloud, workspace: ws, clientId: 'headless-test');
-      final head = await bridge.head();
-      expect(head, isNotEmpty);
-    },
-    timeout: const Timeout(Duration(minutes: 3)),
-  );
-}

package/dart/test/parent_signer_recovery_test.dart

@@ -1,155 +0,0 @@
-// PARENT-SIGNER RECOVERY — the Dart surface leg (offline, the real runner + wasm).
-//
-// The co2 gap: after a parent custody rebirth the device key stays valid but the parent's chain no
-// longer carries `identity:<uid>#signer` — and there was NO published Dart recovery path. This proves
-// the new surfaces end-to-end over the node runner:
-//   · `canAuthor` / `canAuthorTyped` — the read-only preflight returns the TYPED verdict
-//     (cause `missing-signer-enrollment` → ParentSignerEnrollmentMissing) BEFORE any authoring;
-//   · `ensureParentSignerEnrollment` — idempotent verify-and-repair on the parent (repairs when the
-//     tuple is absent, pure no-op when live) with the signing directive DISCOVERED from the law;
-//   · `parentSignerEnrollment` — the diagnostic posture read;
-//   · after the repair, canAuthor flips ok and a SIGNED birthEstateWorkspace admits.
-// (The warranted-reborn-parent kernel legs — the exact refusal + the keyless enrollFirstDevice
-// recovery — are proven on the wasm by bench/scale/parent_signer_recovery.smoke.mjs.)
-@TestOn('vm')
-library;
-
-import 'dart:io';
-
-import 'package:nomos_client/src/nms_conformance_runtime.dart';
-import 'package:nomos_types/nomos_types.dart'
-    show ParentSignerEnrollmentMissing, NomosRecommendedAction;
-import 'package:test/test.dart';
-
-String get _root => '${Directory.current.path}/../..';
-String get _repoEntry => '$_root/cloud/web-client/runner/node-entry.ts';
-String get _deploy =>
-    '$_root/bench/scale/fixtures/estate-birth-signed/build/estate-birth-signed.law.usdz';
-String get _runtimeDir =>
-    Platform.environment['NOMOS_DART_RUNTIME'] ??
-    Platform.environment['NOMOS_OFFLINE_RUNTIME'] ??
-    '${Platform.environment['HOME'] ?? ''}/.holon/runtime';
-
-const _ws = 'estate-birth-signed';
-const _uid = 'sample-owner';
-// THE co2 REGRESSION SHAPE: the principal arrives ALREADY `user:`-qualified (the captured-actor wire
-// form — exactly what NomosScope/co2 pass). KERNEL TRUTH: the gate checks
-// `identity:<captured principal VERBATIM>`, so every read/repair below must resolve the object to
-// `identity:user:<uid>` — a stripped `identity:<uid>` is the normalization bug this test pins.
-const _principal = 'user:$_uid';
-
-String? _missingPrereq() {
-  if (!File(_repoEntry).existsSync()) return 'in-repo runner not found at $_repoEntry';
-  if (!File(_deploy).existsSync()) {
-    return 'compile the fixture: cd bench/scale/fixtures/estate-birth-signed && node ../../../../dsl/compile_package.mjs';
-  }
-  if (!File('$_runtimeDir/holon-testmint.wasm').existsSync()) {
-    return 'warm ~/.holon/runtime first (run any `githolon` command once)';
-  }
-  return null;
-}
-
-void main() {
-  test(
-      'canAuthor preflights the missing parent signer TYPED, ensureParentSignerEnrollment repairs it, '
-      'and the signed birth then admits', () async {
-    final skip = _missingPrereq();
-    if (skip != null) {
-      markTestSkipped(skip);
-      return;
-    }
-    final harness = await NomosTestHarness.ephemeral(
-      lawUsdzPaths: [_deploy],
-      nodeEntry: _repoEntry,
-      runtimeDir: _runtimeDir,
-      workspace: _ws,
-    );
-    try {
-      final session = harness.bridge.session(_ws);
-      final device = await session.mintDeviceKey();
-      final pub = device['public']!.toString();
-      final secret = device['secret']!.toString();
-
-      // devicePublicOf re-derives the public half from the persisted seed (the Dart key store keeps
-      // only the secret) — the recovery lanes depend on this.
-      expect(await session.devicePublicOf(secret), pub);
-
-      // 1. THE PREFLIGHT, broken state: the verdict names the failing premise BEFORE any authoring.
-      final v0 = await session.canAuthor('birthEstateWorkspace',
-          ws: _ws, principal: _principal, publicKey: pub);
-      expect(v0['ok'], isNot(true));
-      expect(v0['cause'], 'missing-signer-enrollment');
-      expect(v0['actor'], _principal,
-          reason: 'the canonical actor is the principal VERBATIM — never stripped, never double-prefixed');
-      expect((v0['keyHash'] ?? '').toString(), hasLength(64));
-
-      // ...and the TYPED variant throws the ONE error with the ONE remedy.
-      await expectLater(
-        session.canAuthorTyped('birthEstateWorkspace', ws: _ws, principal: _principal, publicKey: pub),
-        throwsA(isA<ParentSignerEnrollmentMissing>()
-            .having((e) => e.recommendedAction, 'recommendedAction',
-                NomosRecommendedAction.ensureParentSignerEnrollment)
-            .having((e) => e.workspace, 'workspace', _ws)),
-      );
-
-      // 2. THE POSTURE READ agrees (diagnostic; nothing authored).
-      final posture0 = await session.parentSignerEnrollment(
-          parent: _ws, principal: _principal, publicKey: pub);
-      expect(posture0['enrolled'], false);
-      // KERNEL TRUTH (executor::signer_object): the object is identity:<captured principal VERBATIM>
-      // — `identity:user:<uid>`, NOT a stripped `identity:<uid>` (the co2 normalization bug).
-      expect(posture0['object'], 'identity:$_principal');
-      expect(posture0['relation'], 'signer');
-
-      // 3. THE REPAIR — idempotent; the signing directive is DISCOVERED from the installed law
-      //    (this fixture composes it under domain "home", NOT the framework "workspaces").
-      final r1 = await session.ensureParentSignerEnrollment(
-          // era-0: BOTH domains compose enrollSigner (the estate is signer-ready too) — name the parent's.
-          parent: _ws, principal: _principal, publicKey: pub, authorSecret: secret, domain: 'home');
-      expect(r1['enrolled'], true);
-      expect(r1['repaired'], true);
-      expect(r1['domain'], 'home',
-          reason: 'discovery must find the tenant-composed domain, never assume "workspaces"');
-
-      // 4. Re-run = pure no-op (the idempotence contract).
-      final r2 = await session.ensureParentSignerEnrollment(
-          parent: _ws, principal: _principal, publicKey: pub, authorSecret: secret, domain: 'home');
-      expect(r2['enrolled'], true);
-      expect(r2['repaired'], false);
-
-      // 5. The preflight flips OK…
-      final v1 = await session.canAuthor('birthEstateWorkspace',
-          ws: _ws, principal: _principal, publicKey: pub);
-      expect(v1['ok'], true, reason: 'causes: ${v1['causes']}');
-
-      // 5b. co2's step-5 regression VERBATIM: immediately after repaired:true, the POSTURE read (with
-      // the SAME user:-qualified principal) reports enrolled:true against the canonical object.
-      final posture1 = await session.parentSignerEnrollment(
-          parent: _ws, principal: _principal, publicKey: pub);
-      expect(posture1['enrolled'], true,
-          reason: 'the repair wrote identity:$_principal — a second normalizer that strips user: '
-              'would read identity:$_uid and wrongly report missing-signer-enrollment');
-      expect(posture1['object'], 'identity:$_principal');
-
-      // 6. …and the SIGNED sibling birth ADMITS (per-offer signing key — the repaired device).
-      final lawHash = harness.lawHashes(_ws).first;
-      final outcome = await session.offerCreates(
-        domain: 'home',
-        directiveId: 'birthEstateWorkspace',
-        payload: {
-          'owner': 'user:$_uid',
-          'frameworkHash': harness.frameworkHash,
-          'lawHash': lawHash,
-          'bornAt': '2026-07-12T00:00:00Z',
-        },
-        actor: 'user:$_uid',
-        authorSecret: secret,
-      );
-      expect(outcome.head, isNotEmpty);
-      expect(outcome.born, isNotEmpty,
-          reason: 'the estate child births after the signer repair');
-    } finally {
-      await harness.dispose();
-    }
-  }, timeout: const Timeout(Duration(minutes: 3)));
-}