@githolon/dsl 0.110.0 → 0.111.0

package/dart/CHANGELOG.md

@@ -1,3 +1,12 @@
+## 0.66.7
+
+- Recover sync after loss of the upstream bookmark by fetching provider history and allowing the kernel to verify a shared ancestor. Preserve pending local work and reject unrelated history through the existing admission gate.
+- Wait for a sealed initial sync base before sending a first suffix, and expose provider/local heads in sync diagnostics.
+
+## 0.66.6
+
+- Let reception close promptly when presentation stream listeners are paused.
+
 ## 0.66.5
 
 - Resolve the Node runtime runner through `@githolon/runtime`, the public name for the application runtime package.

package/dart/lib/src/reception/event_desk.dart

@@ -194,17 +194,20 @@ final class ReceptionEventDesk {
 
   Future<void> close() async {
     await _syncStatusChanges.cancel();
-    if (!_copyChanges.isClosed) await _copyChanges.close();
+    // Public broadcast streams can have paused UI listeners. Their close()
+    // futures wait for those listeners to resume, so signal done without
+    // letting an external subscriber hold reception teardown open.
+    if (!_copyChanges.isClosed) unawaited(_copyChanges.close());
     await typedWatches.close();
-    if (!_sync.isClosed) await _sync.close();
-    if (!_custody.isClosed) await _custody.close();
-    if (!_localWorkRejected.isClosed) await _localWorkRejected.close();
+    if (!_sync.isClosed) unawaited(_sync.close());
+    if (!_custody.isClosed) unawaited(_custody.close());
+    if (!_localWorkRejected.isClosed) unawaited(_localWorkRejected.close());
     if (!_receivingGroupConvergence.isClosed) {
-      await _receivingGroupConvergence.close();
+      unawaited(_receivingGroupConvergence.close());
     }
-    if (!_modelAdoption.isClosed) await _modelAdoption.close();
-    if (!_preserved.isClosed) await _preserved.close();
-    if (!_foreignPlacements.isClosed) await _foreignPlacements.close();
+    if (!_modelAdoption.isClosed) unawaited(_modelAdoption.close());
+    if (!_preserved.isClosed) unawaited(_preserved.close());
+    if (!_foreignPlacements.isClosed) unawaited(_foreignPlacements.close());
     await progress.close();
     await syncStatuses.close();
   }

package/dart/lib/src/reception/progress_desk.dart

@@ -260,8 +260,9 @@ final class ReceptionProgressDesk {
   }
 
   Future<void> close() async {
-    if (!_spans.isClosed) await _spans.close();
-    if (!_transfers.isClosed) await _transfers.close();
-    if (!_kernel.isClosed) await _kernel.close();
+    // Observers may be paused while their widget tree is being replaced.
+    if (!_spans.isClosed) unawaited(_spans.close());
+    if (!_transfers.isClosed) unawaited(_transfers.close());
+    if (!_kernel.isClosed) unawaited(_kernel.close());
   }
 }

package/dart/lib/src/runner/node-entry.mjs

@@ -21835,6 +21835,15 @@ var ReplicaFollowController = class {
     }
     if (result.stillAhead || result.pushFailed || result.directOfferDeferred || result.reconnectRequired) {
       if (result.directOfferDeferred) {
+        if (!result.reconnectRequired) {
+          this.#desk.transition(result.workspace, {
+            case: ReplicaFollowEventKind.Failed,
+            nowUnixMillis,
+            failure: "remote workspace opening; retrying",
+            retryWithinMillis: 5e3
+          });
+          return delayUntilDue(this.#desk.get(result.workspace), nowUnixMillis);
+        }
         this.#desk.transition(result.workspace, {
           case: ReplicaFollowEventKind.DependencyDeferred,
           nowUnixMillis,
@@ -23740,6 +23749,34 @@ function resolveCustodyDisagreement(kernel, mount, requestId, policy, verdict) {
 init_define_NOMOS_KERNEL_RELEASE();
 var CUSTODY_OFFER_MEDIA_TYPE = "application/vnd.nomos.custody-offer-batch+protobuf";
 var CUSTODY_OFFER_RESULT_MEDIA_TYPE = "application/vnd.nomos.custody-offer-result+protobuf";
+function settleCustodyOfferExchange(awaiting, response) {
+  if (response.status === 202 && response.contentType?.includes("application/json")) {
+    try {
+      const pending = JSON.parse(new TextDecoder().decode(response.body));
+      if (pending?.retryable === true && typeof pending.preparing === "string") {
+        return { case: "maintenance", kind: pending.preparing };
+      }
+    } catch {
+    }
+  }
+  if (!response.contentType?.includes(CUSTODY_OFFER_RESULT_MEDIA_TYPE)) {
+    return {
+      case: "unexpected",
+      status: response.status,
+      ...response.contentType === void 0 ? {} : { contentType: response.contentType }
+    };
+  }
+  const verdict = decodeCustodyOffer(response.body, awaiting.requestId);
+  const receipt = custodyOfferReceipt(awaiting.requestId, verdict);
+  switch (verdict.case) {
+    case "admission":
+      return { case: "admission", value: verdict.value, receipt, status: response.status };
+    case "failure":
+      return { case: "failure", value: verdict.value, receipt, status: response.status };
+    case "blocked":
+      return { case: "blocked", value: verdict.value, receipt, status: response.status };
+  }
+}
 function encodeInlineCustodyOffer(args) {
   return toBinary(CustodyOfferBatchRequestSchema, create(CustodyOfferBatchRequestSchema, {
     protocolVersion: 2,
@@ -23866,6 +23903,7 @@ function summarizeCustodyAdmission(admission) {
 var PLACEMENT_REF3 = "refs/nomos/placement";
 var LAW_PRODUCTS_MEDIA_TYPE = "application/vnd.nomos.export-law-products-response+protobuf";
 var WorkspaceSyncPhase = Object.freeze({
+  Idle: "idle",
   Probe: "probe",
   Offer: "offer",
   Lease: "lease",
@@ -23875,7 +23913,6 @@ var WorkspaceSyncPhase = Object.freeze({
   Done: "done"
 });
 var trackedMain = "refs/remotes/nomos/main";
-var NO_COMMON_BASE = "this replica holds local history with no frontier its upstream ever confirmed; convergence needs a common admitted base \u2014 drop the local copy to refetch it, or re-discover a provider holding this lineage";
 var deferredRemote = "refs/remotes/nomos/deferred";
 var deferredLocal = "refs/nomos/sync-deferred-local";
 var judgedThisLifetime = /* @__PURE__ */ new Map();
@@ -23899,7 +23936,6 @@ var WorkspaceSyncWork = class {
   #rediscover;
   /** The route the directory's answer yields, recomputed once that answer is observed. */
   #reroute;
-  #placementFetch;
   #discoveredFrontier;
   #observePlacement;
   /** Ask the directory for the provider's current placement frontier this round although a
@@ -23908,19 +23944,14 @@ var WorkspaceSyncWork = class {
   #directoryAnswered;
   #placementFetched;
   /** A round which converged without leasing, finishing once placement alone is fetched. */
-  #afterPlacement;
   #leased = false;
-  #lease;
   #command;
   #requestId;
   #started;
-  #phase = WorkspaceSyncPhase.Lease;
+  #state = { phase: WorkspaceSyncPhase.Idle };
   #localHead;
   #offerHead;
   #previousHead;
-  #fetchStarted;
-  #offerStarted;
-  #offerRequestId;
   #pushMillis = 0;
   #pushBytes = 0n;
   #desiredHead;
@@ -24015,7 +24046,7 @@ var WorkspaceSyncWork = class {
       throw new Error(`replica '${this.#binding.replicaId}' has no custody remote`);
     }
     if (this.#rediscover || this.#recheckPlacement || !this.#route?.placementObserved && !this.#route?.placementFrontier && !this.#kernel.resolveRef(this.#mount, this.#requestId, PLACEMENT_REF3)) {
-      this.#phase = WorkspaceSyncPhase.Discover;
+      this.#state = { phase: WorkspaceSyncPhase.Discover };
       return this.#remember({
         case: "pending",
         value: create(CorrespondencePendingSchema, {
@@ -24035,13 +24066,13 @@ var WorkspaceSyncWork = class {
   #openRound() {
     if (this.#receiveState || this.#replaceLocalHead !== void 0) return this.#leaseEffect();
     if (!this.#localHead) return this.#leaseEffect();
-    this.#offerRequestId = `${this.#binding.replicaId}:${this.#requestId}:${this.workId}:frontier`;
+    const requestId = `${this.#binding.replicaId}:${this.#requestId}:${this.workId}:frontier`;
     return this.#beginOffer(encodeInlineCustodyOffer({
       session: this.#binding.replicaId,
-      requestId: this.#offerRequestId,
+      requestId,
       observedHead: this.#localHead,
       intents: []
-    }), true);
+    }), { case: "awaiting", requestId }, true);
   }
   #offerOrReconcile() {
     if (this.#command.admit && this.#localHead && this.#localHead !== this.#previousHead) {
@@ -24062,13 +24093,13 @@ var WorkspaceSyncWork = class {
         throw new Error(`kernel did not classify transport for intent '${unspecified.intentId}'`);
       }
       if (suffix.length > 0) {
-        this.#offerStarted = this.#clock.monotonicNanoseconds();
-        this.#offerRequestId = `${this.#binding.replicaId}:${this.#requestId}:${this.workId}`;
+        const requestId2 = `${this.#binding.replicaId}:${this.#requestId}:${this.workId}`;
+        const startedAt = this.#clock.monotonicNanoseconds();
         this.#offerAfterConverge = true;
         this.#rebaseFrom = this.#previousHead;
         return this.#beginOffer(encodeInlineCustodyOffer({
           session: this.#binding.replicaId,
-          requestId: this.#offerRequestId,
+          requestId: requestId2,
           ...this.#previousHead === void 0 ? {} : { baseHead: this.#previousHead },
           observedHead: this.#localHead,
           intents: suffix,
@@ -24079,51 +24110,26 @@ var WorkspaceSyncWork = class {
             this.#previousHead
           ) : void 0,
           fastForwardOnly: true
-        }));
+        }), { case: "awaiting", requestId: requestId2, startedAt });
       }
     }
-    this.#offerRequestId = `${this.#binding.replicaId}:${this.#requestId}:${this.workId}:reconcile`;
+    const requestId = `${this.#binding.replicaId}:${this.#requestId}:${this.workId}:reconcile`;
     return this.#beginOffer(encodeInlineCustodyOffer({
       session: this.#binding.replicaId,
-      requestId: this.#offerRequestId,
+      requestId,
       baseHead: this.#previousHead,
       observedHead: this.#localHead,
       intents: []
-    }));
+    }), { case: "awaiting", requestId });
   }
   /**
-   * NO COMMON BASE — a round that cannot converge, and must not pay for history to find out.
-   *
-   * This replica holds a non-empty ledger but has never recorded a frontier its upstream
-   * confirmed (`refs/remotes/nomos/main` is absent). The kernel refuses convergence in that
-   * state ("a non-empty live ledger requires a common admitted base"), so every step after the
-   * O(1) frontier probe is wasted work — and it is not cheap waste: the fetch negotiates with
-   * no `have` (a full-history pack), and the dependency planner decodes EVERY intent from
-   * genesis and inspects every change, once per round. That is O(history) per follow round,
-   * repeated at every retry, for a round that can only end in a refusal.
-   *
-   * The one base this round can establish costs nothing and is established before this is
-   * asked: an upstream holding exactly this replica's head (the probe's answer) converges it
-   * and records the tracking frontier. Anything else needs the local copy to be dropped and
-   * refetched (an application decision, which preserves the copy), or a re-discovery that
-   * names a provider holding this lineage. Both are reported, at O(1), as this failure.
-   */
-  /**
-   * Establish this round's base when none is tracked, without walking any history it can avoid.
-   *
-   * The upstream just named its own frontier. If that commit is in THIS replica's lineage, it is
-   * a common admitted base by definition — both sides hold it — and adopting it turns the round
-   * into an ordinary fast-forward: the offer carries only the suffix above it, the fetch can name
-   * it as a truthful `have`, and convergence has the base the kernel requires. One commit walk
-   * (no change decoding, no pack, no network) decides it.
-   *
-   * If it is not in this replica's lineage, no base exists to establish and the round is refused
-   * (#noCommonBase) before it leases, fetches or plans anything.
-   *
-   * A kernel without the commit walk cannot be asked, so it keeps the previous behaviour.
+   * Establish a cheap base when the provider's current tip is in our local chain.
+   * A negative answer means the base is unknown: both sides may have advanced from
+   * an earlier shared commit. Acquire the candidate and let the kernel discover
+   * and judge that history. A tracking bookmark is not an admission prerequisite.
    */
   #establishBase(upstreamHead) {
-    if (!this.#noCommonBase() || !this.#kernel.historySummary) return true;
+    if (!this.#missingTrackedBase() || !this.#kernel.historySummary) return true;
     const summary = this.#kernel.historySummary(this.#mount, this.#requestId, upstreamHead, this.#localHead);
     if (!summary.reachedBase) return false;
     this.#previousHead = upstreamHead;
@@ -24138,26 +24144,9 @@ var WorkspaceSyncWork = class {
   get establishedBase() {
     return this.#establishedBase;
   }
-  #noCommonBase() {
+  #missingTrackedBase() {
     return this.#previousHead === void 0 && this.#localHead !== void 0 && this.#replaceLocalHead === void 0;
   }
-  #noCommonBaseResult() {
-    return this.#finish(create(SyncWorkspaceResponseSchema, {
-      workspace: this.#mount.workspace,
-      ...this.#localHead === void 0 ? {} : { currentHead: this.#localHead },
-      stillAhead: true,
-      ...this.#offerReceipt === void 0 ? {} : { offerReceipt: this.#offerReceipt },
-      pushError: create(RuntimeTransportFailureSchema, {
-        endpoint: this.#offerEndpoint(),
-        status: 409,
-        refused: true,
-        message: NO_COMMON_BASE
-      }),
-      timings: create(SyncPhaseTimingsSchema, {
-        convergeMillis: elapsedMillis(this.#clock, this.#started)
-      })
-    }));
-  }
   #holdsLocalWork() {
     return this.#command.admit && !!this.#localHead && this.#localHead !== this.#previousHead;
   }
@@ -24165,18 +24154,18 @@ var WorkspaceSyncWork = class {
   #pullBeforeOffer() {
     this.#offerAfterConverge = true;
     this.#rebaseFrom = this.#previousHead;
-    this.#offerRequestId = `${this.#binding.replicaId}:${this.#requestId}:${this.workId}:pull-${this.#rebases}`;
+    const requestId = `${this.#binding.replicaId}:${this.#requestId}:${this.workId}:pull-${this.#rebases}`;
     return this.#beginOffer(encodeInlineCustodyOffer({
       session: this.#binding.replicaId,
-      requestId: this.#offerRequestId,
+      requestId,
       ...this.#previousHead === void 0 ? {} : { baseHead: this.#previousHead },
       observedHead: this.#localHead,
       intents: []
-    }));
+    }), { case: "awaiting", requestId });
   }
-  #leaseEffect() {
+  #leaseEffect(afterPlacement) {
     const token = this.#authToken();
-    this.#phase = WorkspaceSyncPhase.Lease;
+    this.#state = { phase: WorkspaceSyncPhase.Lease, ...afterPlacement ? { afterPlacement } : {} };
     return this.#remember({
       case: "pending",
       value: create(CorrespondencePendingSchema, {
@@ -24205,35 +24194,38 @@ var WorkspaceSyncWork = class {
         `workspace sync '${this.workId}' expected effect '${expected}', received '${receipt.effectId}'`
       );
     }
+    const state = this.#state;
     const previousReceipt = this.#lastReceiptEffectId;
     this.#lastReceiptEffectId = receipt.effectId;
     try {
       if (receipt.outcome.case === "failure") {
-        if (this.#phase === WorkspaceSyncPhase.Discover) return this.#openRound();
+        if (state.phase === WorkspaceSyncPhase.Discover) return this.#openRound();
         return this.#transportFailure(
           receipt.outcome.value.message,
           receipt.outcome.value.reason === PeerEffectFailureReason.OFFLINE
         );
       }
-      if (this.#phase === WorkspaceSyncPhase.Offer || this.#phase === WorkspaceSyncPhase.Probe) return this.#acceptOffer(receipt);
-      if (this.#phase === WorkspaceSyncPhase.Lease) return this.#acceptLease(receipt);
-      if (this.#phase === WorkspaceSyncPhase.Discover) return this.#acceptDiscovery(receipt);
-      if (this.#phase === WorkspaceSyncPhase.Placement) {
-        if (!this.#placementFetch || !this.#lease) throw new Error("placement transfer lost its lease");
-        this.#placementFetch.accept(receipt);
+      if (state.phase === WorkspaceSyncPhase.Offer || state.phase === WorkspaceSyncPhase.Probe) {
+        return this.#acceptOffer(receipt, state);
+      }
+      if (state.phase === WorkspaceSyncPhase.Lease) return this.#acceptLease(receipt, state);
+      if (state.phase === WorkspaceSyncPhase.Discover) return this.#acceptDiscovery(receipt);
+      if (state.phase === WorkspaceSyncPhase.Placement) {
+        state.transfer.accept(receipt);
         this.#placementFetched?.();
-        if (this.#afterPlacement) return this.#finish(this.#afterPlacement);
-        return this.#beginMainFetch(this.#lease);
+        if (state.afterPlacement) return this.#finish(state.afterPlacement);
+        return this.#beginMainFetch(state.lease);
       }
-      if (this.#phase === WorkspaceSyncPhase.Fetch) return this.#acceptFetch(receipt);
+      if (state.phase === WorkspaceSyncPhase.Fetch) return this.#acceptFetch(receipt, state);
       throw new Error(`workspace sync '${this.workId}' is already complete`);
     } catch (error) {
       this.#lastReceiptEffectId = previousReceipt;
       throw error;
     }
   }
-  #beginOffer(body, probe = false) {
-    this.#phase = probe ? WorkspaceSyncPhase.Probe : WorkspaceSyncPhase.Offer;
+  #beginOffer(body, exchange, probe = false) {
+    const phase = probe ? WorkspaceSyncPhase.Probe : WorkspaceSyncPhase.Offer;
+    this.#state = { phase, exchange };
     const token = this.#authToken();
     this.#pushBytes += BigInt(body.byteLength);
     return this.#remember({
@@ -24243,7 +24235,7 @@ var WorkspaceSyncWork = class {
         effect: {
           case: "http",
           value: create(PeerHttpEffectSchema, {
-            effectId: `${this.workId}:${this.#phase}`,
+            effectId: `${this.workId}:${phase}`,
             method: PeerHttpMethod.POST,
             url: this.#offerEndpoint(),
             contentType: CUSTODY_OFFER_MEDIA_TYPE,
@@ -24260,28 +24252,30 @@ var WorkspaceSyncWork = class {
       })
     });
   }
-  #acceptOffer(receipt) {
-    this.#pushMillis = this.#offerStarted === void 0 ? 0 : elapsedMillis(this.#clock, this.#offerStarted);
+  #acceptOffer(receipt, state) {
+    const exchange = state.exchange;
+    this.#pushMillis = exchange.startedAt === void 0 ? 0 : elapsedMillis(this.#clock, exchange.startedAt);
     if (receipt.outcome.case !== "response") {
       throw new Error("platform returned the wrong receipt for a custody offer");
     }
-    const response = receipt.outcome.value;
-    if (!response.contentType?.includes(CUSTODY_OFFER_RESULT_MEDIA_TYPE)) {
+    const outcome = settleCustodyOfferExchange(exchange, receipt.outcome.value);
+    if (outcome.case === "maintenance") {
+      return this.#finishOfferOutcome(true, false);
+    }
+    if (outcome.case === "unexpected") {
       this.#pushError = create(RuntimeTransportFailureSchema, {
         endpoint: this.#offerEndpoint(),
-        status: response.status,
+        status: outcome.status,
         refused: false,
-        message: `Sync received an unexpected server response (HTTP ${response.status}; ${response.contentType || "no content type"}). No custody receipt was returned.`
+        message: `Sync received an unexpected server response (HTTP ${outcome.status}; ${outcome.contentType || "no content type"}). No custody receipt was returned.`
       });
       return this.#finishOfferOutcome(false);
     }
-    if (!this.#offerRequestId) throw new Error("custody offer has no request identity");
-    const outcome = decodeCustodyOffer(response.body, this.#offerRequestId);
-    this.#offerReceipt = custodyOfferReceipt(this.#offerRequestId, outcome);
+    this.#offerReceipt = outcome.receipt;
     if (outcome.case === "failure") {
       this.#pushError = create(RuntimeTransportFailureSchema, {
         endpoint: this.#offerEndpoint(),
-        status: response.status,
+        status: outcome.status,
         refused: false,
         message: `${outcome.value.code}: ${outcome.value.message}`
       });
@@ -24290,12 +24284,12 @@ var WorkspaceSyncWork = class {
     if (outcome.case === "blocked") {
       return this.#finishOfferOutcome(true);
     }
-    if (response.status < 200 || response.status >= 300) {
+    if (outcome.status < 200 || outcome.status >= 300) {
       this.#pushError = create(RuntimeTransportFailureSchema, {
         endpoint: this.#offerEndpoint(),
-        status: response.status,
-        refused: response.status === 422,
-        message: `custody offer returned an admission verdict with HTTP ${response.status}`
+        status: outcome.status,
+        refused: outcome.status === 422,
+        message: `custody offer returned an admission verdict with HTTP ${outcome.status}`
       });
       return this.#finishOfferOutcome(false);
     }
@@ -24303,8 +24297,7 @@ var WorkspaceSyncWork = class {
     this.#desiredHead = admission.main || void 0;
     if (!this.#desiredHead) return this.#transportFailure("resident peer returned no admitted frontier", false);
     this.#candidateDurable = admission.sealedMain === this.#desiredHead;
-    if (this.#phase === WorkspaceSyncPhase.Probe && this.#desiredHead !== this.#localHead) {
-      if (!this.#establishBase(this.#desiredHead)) return this.#noCommonBaseResult();
+    if (state.phase === WorkspaceSyncPhase.Probe && this.#desiredHead !== this.#localHead) {
       if (this.#alreadyJudged(this.#desiredHead)) {
         return this.#finish(create(SyncWorkspaceResponseSchema, {
           workspace: this.#mount.workspace,
@@ -24316,6 +24309,22 @@ var WorkspaceSyncWork = class {
           offerReceipt: this.#offerReceipt
         }));
       }
+      if (!this.#establishBase(this.#desiredHead)) {
+        this.#offerAfterConverge = this.#command.admit;
+        this.#rebaseFrom = void 0;
+        return this.#leaseEffect();
+      }
+      if (this.#establishedBase && !this.#candidateDurable && this.#kernel.resolveRef(this.#mount, this.#requestId, trackedMain) === void 0) {
+        return this.#finish(create(SyncWorkspaceResponseSchema, {
+          workspace: this.#mount.workspace,
+          currentHead: this.#localHead,
+          previousHead: this.#previousHead,
+          stillAhead: true,
+          directOfferDeferred: true,
+          reconnectRequired: false,
+          offerReceipt: this.#offerReceipt
+        }));
+      }
       if (this.#probeOnly) {
         this.#needsReconciliation = true;
         return this.#finish(create(SyncWorkspaceResponseSchema, {
@@ -24361,11 +24370,11 @@ var WorkspaceSyncWork = class {
       return this.#converge(this.#desiredHead, admission.resultPack.byteLength, 0);
     }
     if (this.#desiredHead === this.#previousHead) return this.#converge(this.#desiredHead, 0, 0);
-    if (!this.#establishBase(this.#desiredHead)) return this.#noCommonBaseResult();
+    this.#establishBase(this.#desiredHead);
     if (admission.recoveryRequired !== false) return this.#leaseEffect();
     return this.#transportFailure("resident peer supplied neither the missing delta nor a history gap", false);
   }
-  #acceptLease(receipt) {
+  #acceptLease(receipt, state) {
     if (receipt.outcome.case !== "response") {
       throw new Error("platform returned the wrong receipt for a Git read lease");
     }
@@ -24381,21 +24390,25 @@ var WorkspaceSyncWork = class {
     this.#leased = true;
     const frontier = this.#placementFrontier();
     if (frontier) {
-      this.#placementFetch = new PlacementFetch(
+      const transfer = new PlacementFetch(
         this.#kernel,
         this.#mount,
         this.#requestId,
         this.workId,
         frontier
       );
-      const pending = this.#placementFetch.start(lease);
+      const pending = transfer.start(lease);
       if (pending) {
-        this.#phase = WorkspaceSyncPhase.Placement;
-        this.#lease = lease;
+        this.#state = {
+          phase: WorkspaceSyncPhase.Placement,
+          transfer,
+          lease,
+          ...state.afterPlacement ? { afterPlacement: state.afterPlacement } : {}
+        };
         return this.#remember({ case: "pending", value: pending });
       }
     }
-    if (this.#afterPlacement) return this.#finish(this.#afterPlacement);
+    if (state.afterPlacement) return this.#finish(state.afterPlacement);
     return this.#beginMainFetch(lease);
   }
   /** The provider's placement frontier as this round knows it: what the directory named in this
@@ -24415,8 +24428,7 @@ var WorkspaceSyncWork = class {
     if (!new PlacementFetch(this.#kernel, this.#mount, this.#requestId, this.workId, frontier).wanted()) {
       return void 0;
     }
-    this.#afterPlacement = presented;
-    return this.#leaseEffect();
+    return this.#leaseEffect(presented);
   }
   #acceptDiscovery(receipt) {
     this.#directoryAnswered?.();
@@ -24440,9 +24452,11 @@ var WorkspaceSyncWork = class {
     return this.#replaceLocalHead !== void 0 || this.#localHead === void 0 && this.#previousHead === void 0;
   }
   #beginMainFetch(lease) {
-    this.#phase = WorkspaceSyncPhase.Fetch;
     const lawProducts = this.#lawProductsAlongside();
-    this.#fetchStarted = this.#clock.monotonicNanoseconds();
+    this.#state = {
+      phase: WorkspaceSyncPhase.Fetch,
+      startedAt: this.#clock.monotonicNanoseconds()
+    };
     const haves = this.#replaceLocalHead !== void 0 ? this.#repairMissingCommit ? [] : [this.#kernel.resolveRef(this.#mount, this.#requestId, deferredRemote)].filter(
       (head) => !!head
     ) : [...new Set([
@@ -24473,7 +24487,7 @@ var WorkspaceSyncWork = class {
       })
     });
   }
-  #acceptFetch(receipt) {
+  #acceptFetch(receipt, state) {
     if (receipt.outcome.case !== "gitFetch") {
       throw new Error("platform returned the wrong receipt for a Git object fetch");
     }
@@ -24483,7 +24497,7 @@ var WorkspaceSyncWork = class {
     if (fetched.pack.byteLength > 0) {
       this.#kernel.applyPack(this.#mount, this.#requestId, fetched.pack, fetched.head, fetched.shallow);
     }
-    const prefetchMillis = this.#fetchStarted === void 0 ? 0 : elapsedMillis(this.#clock, this.#fetchStarted);
+    const prefetchMillis = elapsedMillis(this.#clock, state.startedAt);
     const candidateHead = this.#receiveState ? this.#kernel.resolveStatePosition?.(this.#mount, this.#requestId, fetched.head, this.#receiveState) : fetched.head;
     if (!candidateHead) {
       return this.#finish(create(SyncWorkspaceResponseSchema, {
@@ -24579,7 +24593,7 @@ var WorkspaceSyncWork = class {
     }
   }
   #converge(candidateHead, receivedBytes, prefetchMillis) {
-    if (!this.#establishBase(candidateHead)) return this.#noCommonBaseResult();
+    this.#establishBase(candidateHead);
     this.#beforeConverge?.(candidateHead, this.#previousHead);
     const convergeStarted = this.#clock.monotonicNanoseconds();
     let judged;
@@ -24834,11 +24848,11 @@ var WorkspaceSyncWork = class {
         pushBytes: this.#pushBytes,
         pullBytes: BigInt(receivedBytes),
         serverMillis: this.#admissionSummary?.serverMillis ?? 0,
-        offerInPush: this.#offerRequestId !== void 0
+        offerInPush: this.#pushBytes > 0n
       })
     });
   }
-  #finishOfferOutcome(blocked) {
+  #finishOfferOutcome(blocked, reconnectRequired = true) {
     return this.#finish(create(SyncWorkspaceResponseSchema, {
       workspace: this.#mount.workspace,
       previousHead: this.#previousHead,
@@ -24846,7 +24860,7 @@ var WorkspaceSyncWork = class {
       admitted: BigInt(this.#admissionSummary?.admittedIntentIds.length ?? 0),
       refused: BigInt((this.#admissionSummary?.refusedMessages.length ?? 0) + this.#parkedLocal),
       deferred: BigInt(this.#admissionSummary ? this.#admissionSummary.blockedMessages.length + this.#admissionSummary.deadLetteredMessages.length + this.#admissionSummary.quarantinedMessages.length + this.#admissionSummary.deferredMessages.length : blocked ? 1 : 0),
-      reconnectRequired: true,
+      reconnectRequired,
       stillAhead: this.#localHead !== this.#previousHead,
       directOfferDeferred: blocked,
       offerReceipt: this.#offerReceipt,
@@ -24860,15 +24874,16 @@ var WorkspaceSyncWork = class {
     }));
   }
   #transportFailure(message, offline, status = -1) {
-    const pushFailed = this.#phase === WorkspaceSyncPhase.Offer;
+    const state = this.#state;
+    const pushFailed = state.phase === WorkspaceSyncPhase.Offer;
     const failedEndpoint = this.#offerEndpoint();
     const failure = create(RuntimeTransportFailureSchema, {
       endpoint: pushFailed ? failedEndpoint : this.#binding.cloud ?? "",
       status,
       message
     });
-    if (pushFailed) {
-      this.#pushMillis = this.#offerStarted === void 0 ? 0 : elapsedMillis(this.#clock, this.#offerStarted);
+    if (state.phase === WorkspaceSyncPhase.Offer) {
+      this.#pushMillis = state.exchange.startedAt === void 0 ? 0 : elapsedMillis(this.#clock, state.exchange.startedAt);
       this.#pushError = failure;
     }
     return this.#finish(create(SyncWorkspaceResponseSchema, {
@@ -24885,7 +24900,7 @@ var WorkspaceSyncWork = class {
         pushMillis: this.#pushMillis,
         pushBytes: this.#pushBytes,
         prefetchMillis: elapsedMillis(this.#clock, this.#started),
-        offerInPush: this.#offerRequestId !== void 0
+        offerInPush: this.#pushBytes > 0n
       })
     }));
   }
@@ -24895,7 +24910,7 @@ var WorkspaceSyncWork = class {
     return step;
   }
   #finish(value) {
-    this.#phase = WorkspaceSyncPhase.Done;
+    this.#state = { phase: WorkspaceSyncPhase.Done };
     this.#current = void 0;
     return this.#remember({ case: "synced", value });
   }
@@ -27033,13 +27048,21 @@ var CorrespondenceDesk = class {
   }
   #observeSyncResult(requestId, workId2, result) {
     const timings = result.timings;
+    const receipt = result.offerReceipt?.outcome;
+    const admission = receipt?.case === "admission" ? receipt.value : void 0;
     this.#events.instant("peer.follow.sync-result", {
       request: create(RuntimeRequestSchema, { protocolVersion: 2, requestId }),
       workspace: result.workspace
     }, {
       "sync.workId": workId2,
       ...result.currentHead ? { "sync.head": result.currentHead } : {},
+      ...result.previousHead ? { "sync.previousHead": result.previousHead } : {},
+      ...admission?.main ? { "sync.providerHead": admission.main } : {},
+      ...admission?.sealedMain ? { "sync.sealedHead": admission.sealedMain } : {},
       "sync.stillAhead": result.stillAhead,
+      "sync.reconnectRequired": result.reconnectRequired,
+      "sync.refused": result.refused,
+      "sync.deferred": result.deferred,
       "sync.directOfferDeferred": result.directOfferDeferred,
       "sync.offline": result.offline,
       ...timings ? {

package/dart/lib/src/sync_status_projection.dart

@@ -543,6 +543,8 @@ final class NmsSyncStatusProjection {
     for (final stream in streams) {
       if (!stream.isClosed) unawaited(stream.close());
     }
-    if (!_application.isClosed) await _application.close();
+    // A paused UI subscriber may not process the done event until it resumes.
+    // Closing this broadcast stream must not hold reception teardown open.
+    if (!_application.isClosed) unawaited(_application.close());
   }
 }

package/dart/pubspec.yaml

@@ -7,7 +7,7 @@ repository: https://github.com/Captain-App/nomos2
 description: >-
   Nomos 2 Dart client — generated domain values, intent payloads and application
   lifecycle types over the typed Nomos kernel protocol and USDA custody model.
-version: 0.66.5
+version: 0.66.7
 
 environment:
   sdk: ^3.5.0

package/dart/test/reception_event_desk_close_test.dart

@@ -0,0 +1,16 @@
+import 'package:nomos_client/src/reception/event_desk.dart';
+import 'package:test/test.dart';
+
+void main() {
+  test('reception closes while presentation observers are paused', () async {
+    final desk = ReceptionEventDesk();
+    final copies = desk.copyChanges.listen((_) {})..pause();
+    final application = desk.syncStatuses.applicationStream.listen((_) {})
+      ..pause();
+
+    await desk.close().timeout(const Duration(seconds: 1));
+
+    await copies.cancel();
+    await application.cancel();
+  });
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@githolon/dsl",
-  "version": "0.110.0",
+  "version": "0.111.0",
   "type": "module",
   "sideEffects": false,
   "description": "Nomos 2 domain-authoring DSL: aggregates + directives in TS, executed and encoded to the Rust kernel's wire shapes.",
@@ -72,7 +72,7 @@
     "test": "vitest run"
   },
   "dependencies": {
-    "@githolon/runtime": "^0.110.0",
+    "@githolon/runtime": "^0.111.0",
     "@bufbuild/protobuf": "^2.13.0",
     "@bufbuild/protoc-gen-es": "^2.13.0",
     "esbuild": "0.24.2",

package/src/codegen_call_proto.ts

@@ -1237,7 +1237,7 @@ export function emitDartCallProtoEncoder(
   for (const field of fields) {
     const fieldAccess = access.get(field.name);
     if (fieldAccess?.omit === true || fieldAccess?.present === "false") continue;
-    const raw = fieldAccess?.slot === true ? `${fieldAccess.value}.value` : fieldAccess?.value ?? `payload.${dartMemberName(field.name)}`;
+    const raw = fieldAccess?.slot === true ? `${fieldAccess.value}.valueOrNull` : fieldAccess?.value ?? `payload.${dartMemberName(field.name)}`;
     const fieldSemantic = typeNode(spec.nodes, field.value.id).expression.semantic;
     const fieldValueIsCanonical = fieldSemantic?.kind === "id-reference" ||
       fieldSemantic?.kind === "address-reference" ||
@@ -1252,7 +1252,9 @@ export function emitDartCallProtoEncoder(
     emitValue(body, raw, field.value.id, field.name, (expression) => {
       body.push(`${member} = ${expression};`);
     }, fieldValueIsCanonical);
-    if (field.required) lines.push(...body.map((line) => `  ${line}`));
+    if (fieldAccess?.slot === true) {
+      lines.push(`  if (!${fieldAccess.value}.isOmitted) {`, ...body.map((line) => `    ${line}`), `  }`);
+    } else if (field.required) lines.push(...body.map((line) => `  ${line}`));
     else lines.push(`  if (${fieldAccess?.present ?? `${raw} != null`}) {`, ...body.map((line) => `    ${line}`), `  }`);
   }
   lines.push(

package/src/codegen_dart.ts

@@ -5479,6 +5479,10 @@ export function generateDartDomain(mod: DomainModule, opts: GenerateDartDomainOp
  *  Every tuple and subject is nominally typed from the same DSL graph; there is no JSON leaf or map-shaped
  *  boundary. INFORMATIONAL only (the one wasm gate is still authoritative). */
 export function dartRoleHelpers(mod: DomainModule): string {
+  // Some packages have role policy declarations but do not project the framework
+  // RelationTuple aggregate into this domain. In that case there is no typed
+  // read model for a client-side hint to consume.
+  if (!mod.aggregates.some((aggregate) => aggregate.id === "RelationTuple")) return "";
   const editRels = new Map<string, Set<string>>();
   const viewRels = new Map<string, Set<string>>();
   for (const r of mod.roles ?? []) {

package/src/compile_package_main.ts

@@ -2544,9 +2544,10 @@ const NOMOS_TYPES_DEP = "^0.11.2";
 // 0.48.x: session-bound clients (XClient.bind/NomosClientInterface/DomainClientSessionMismatch/
 //         DomainNotInstalledForSession, engine.follow, pendingConflicts lanes) — the generated client
 //         REQUIRES this surface. 0.48.1 fixes NomosSession.watchPendingConflicts delegation.
-const NOMOS_CLIENT_DEP = "^0.66.5";
-// DRIFT TRIPWIRE: pubspec_pins.test.ts asserts these equal the CURRENT versions in dsl/dart/pubspec.yaml
-// and dsl/dart_types/pubspec.yaml — a Dart release without this bump fails the suite, so tenants never
+const NOMOS_CLIENT_DEP = "^0.66.7";
+const NOMOS_FLUTTER_DEP = "^0.65.9";
+// DRIFT TRIPWIRE: pubspec_pins.test.ts asserts these equal the CURRENT versions in the Dart and Flutter
+// package pubspecs — a release without this bump fails the suite, so tenants never
 // land back in dependency_overrides (the exact co2 report this closes, third occurrence).
 
 const isPubPackageName = (s: string): boolean => /^[a-z][a-z0-9_]*$/.test(s);
@@ -3166,10 +3167,13 @@ function reconcilePubspec(
         index < dependenciesEnd &&
         line.startsWith(prefix)
     );
-    const replacement = `  ${name}: ${constraint}`;
+    const replacement =
+      name === "flutter" && constraint === "sdk:flutter"
+        ? ["  flutter:", "    sdk: flutter"]
+        : [`  ${name}: ${constraint}`];
     if (existing < 0) {
-      lines.splice(dependenciesEnd, 0, replacement);
-      dependenciesEnd += 1;
+      lines.splice(dependenciesEnd, 0, ...replacement);
+      dependenciesEnd += replacement.length;
       continue;
     }
     let nestedEnd = existing + 1;
@@ -3178,8 +3182,8 @@ function reconcilePubspec(
       /^(?: {4,}|\t)/.test(lines[nestedEnd]!)
     )
       nestedEnd += 1;
-    lines.splice(existing, nestedEnd - existing, replacement);
-    dependenciesEnd -= nestedEnd - existing - 1;
+    lines.splice(existing, nestedEnd - existing, ...replacement);
+    dependenciesEnd += replacement.length - (nestedEnd - existing);
   }
 
   const next = `${lines.join("\n")}${trailingNewline ? "\n" : ""}`;
@@ -4045,6 +4049,7 @@ function emitDartPackages(
         `  flutter:`,
         `    sdk: flutter`,
         `  nomos_client: ${NOMOS_CLIENT_DEP}`,
+        `  nomos_flutter: ${NOMOS_FLUTTER_DEP}`,
         `  ${packages.client}:`,
         `    path: ../${packages.client} # co-emitted sibling; replace with a hosted constraint when publishing`,
         `dev_dependencies:`,
@@ -4054,7 +4059,11 @@ function emitDartPackages(
         `    - lib/${genRel}/${embeddedLawName}`,
         ``,
       ].join("\n"),
-      { nomos_client: NOMOS_CLIENT_DEP }
+      {
+        flutter: "sdk:flutter",
+        nomos_client: NOMOS_CLIENT_DEP,
+        nomos_flutter: NOMOS_FLUTTER_DEP,
+      }
     );
     reconcileGeneratedLawAsset(
       pkgDir(packages.test),
@@ -8918,12 +8927,14 @@ async function main(): Promise<void> {
         const client = path.resolve(selfDir, "..", "dart");
         const types = path.resolve(selfDir, "..", "dart_types");
         const peerHost = path.resolve(selfDir, "..", "..", "nomos_peer_host");
+        const flutter = path.resolve(selfDir, "..", "..", "nomos_flutter");
         if (
           existsSync(path.join(client, "pubspec.yaml")) &&
           existsSync(path.join(types, "pubspec.yaml")) &&
-          existsSync(path.join(peerHost, "pubspec.yaml"))
+          existsSync(path.join(peerHost, "pubspec.yaml")) &&
+          existsSync(path.join(flutter, "pubspec.yaml"))
         ) {
-          return { client, types, peerHost };
+          return { client, types, peerHost, flutter };
         }
         return undefined;
       })();
@@ -8961,6 +8972,7 @@ async function main(): Promise<void> {
           const lines = ["dependency_overrides:"];
           const usesClient = /(^|\n)\s+nomos_client\s*:/.test(spec);
           const usesTypes = /(^|\n)\s+nomos_types\s*:/.test(spec);
+          const usesFlutter = /(^|\n)\s+nomos_flutter\s*:/.test(spec);
           if (usesClient)
             lines.push(`  nomos_client:`, `    path: ${localDart.client}`);
           // A generated CLIENT or TEST package may only mention nomos_client directly, but that local
@@ -8978,6 +8990,8 @@ async function main(): Promise<void> {
               `  nomos_peer_host:`,
               `    path: ${localDart.peerHost}`
             );
+          if (usesFlutter)
+            lines.push(`  nomos_flutter:`, `    path: ${localDart.flutter}`);
           if (lines.length > 1) {
             writeTextIfChanged(overrideFile, lines.join("\n") + "\n");
           }
@@ -9039,7 +9053,10 @@ async function main(): Promise<void> {
       for (const pkg of pkgDirs) {
         if (dartPackageResolutionCurrent(pkg)) continue;
         try {
-          execFileSync("dart", ["pub", "get"], {
+          const isFlutterPackage = /^\s{2}flutter:\s*\n\s{4}sdk:\s*flutter\s*$/m.test(
+            readFileSync(path.join(pkg, "pubspec.yaml"), "utf8")
+          );
+          execFileSync(isFlutterPackage ? "flutter" : "dart", ["pub", "get"], {
             cwd: pkg,
             stdio: "pipe",
             encoding: "utf8",