@githolon/dsl 0.112.8 → 0.112.12

package/dart/pubspec.yaml

@@ -7,7 +7,7 @@ repository: https://github.com/Captain-App/nomos2
 description: >-
   Nomos 2 Dart client — generated domain values, intent payloads and application
   lifecycle types over the typed Nomos kernel protocol and USDA custody model.
-version: 0.66.12
+version: 0.66.14
 
 environment:
   sdk: ^3.5.0

package/operation_contract_check.mjs

@@ -5,16 +5,22 @@ import { readFileSync } from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 
-const input = process.argv[2];
-const descriptors = process.argv[3];
+const deriveOffer = process.argv[2] === '--derive-interface-offer';
+const input = process.argv[deriveOffer ? 3 : 2];
+const descriptors = deriveOffer ? undefined : process.argv[3];
+const output = deriveOffer ? process.argv[4] : undefined;
 if (!input) throw new Error('operation contract checker needs a compiled law package');
+if (deriveOffer && !output) throw new Error('interface offer output path is required');
 const artifact = new URL('./assets/operation-contract.wasm', import.meta.url);
 const wasi = new WASI({
   version: 'preview1',
-  args: ['operation-contract', 'validate-operation-contracts', `/input/${path.basename(input)}`,
-    ...(descriptors === undefined ? [] : [`/descriptors/${path.basename(descriptors)}`])],
+  args: deriveOffer
+    ? ['operation-contract', 'derive-interface-offer', `/input/${path.basename(input)}`, `/output/${path.basename(output)}`]
+    : ['operation-contract', 'validate-operation-contracts', `/input/${path.basename(input)}`,
+      ...(descriptors === undefined ? [] : [`/descriptors/${path.basename(descriptors)}`])],
   env: {}, preopens: { '/input': path.dirname(path.resolve(input)),
-    ...(descriptors === undefined ? {} : { '/descriptors': path.dirname(path.resolve(descriptors)) }) }, returnOnExit: true,
+    ...(descriptors === undefined ? {} : { '/descriptors': path.dirname(path.resolve(descriptors)) }),
+    ...(output === undefined ? {} : { '/output': path.dirname(path.resolve(output)) }) }, returnOnExit: true,
 });
 let bytes;
 try { bytes = readFileSync(artifact); }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@githolon/dsl",
-  "version": "0.112.8",
+  "version": "0.112.12",
   "type": "module",
   "sideEffects": false,
   "description": "Nomos 2 domain-authoring DSL: aggregates + directives in TS, executed and encoded to the Rust kernel's wire shapes.",
@@ -73,7 +73,7 @@
     "test": "vitest run"
   },
   "dependencies": {
-    "@githolon/runtime": "^0.112.8",
+    "@githolon/runtime": "^0.112.12",
     "@bufbuild/protobuf": "^2.13.0",
     "@bufbuild/protoc-gen-es": "^2.13.0",
     "esbuild": "0.24.2",

package/src/codegen_dart_client.ts

@@ -3786,16 +3786,10 @@ export function generateDartDomainClient(
           `  /// route inside the offer gate, where readiness is shared by every host and cannot become a`,
           `  /// second foreground ceremony maintained by generated clients.`,
           `  Future<NomosOfferOutcome> _offer(NmsGeneratedCall call, {List<NomosConflictSnapshot> conflictSnapshots = const [], NomosOfferAuthenticationProof authenticationProof = NomosOfferAuthenticationProof.sessionCredentials}) async {`,
-          ...(clientInterface === undefined
-            ? []
-            : [
-                `    // PARTIAL COMPATIBILITY: examine the exact directive before dispatch. The`,
-                `    // session caches this compiler matrix until Peer Office reports law/custody`,
-                `    // movement, so repeated writes do no compatibility work. Unrelated reads and`,
-                `    // writes remain usable when another member is incompatible.`,
-                `    await session.assertOperationCompatible(compatibilityMatrixUsda, domain: call.domain, directive: call.directive);`,
-              ]),
-    `    Future<NomosOfferOutcome> attempt() => session.offerGeneratedCallOutcome(call: call, actor: actor, conflictSnapshots: conflictSnapshots, authenticationProof: authenticationProof);`,
+          `    // Dispatch the exact generated command. Current-law route lookup, typed payload`,
+          `    // validation and admission belong to the Kernel's author path. Full application`,
+          `    // compatibility is an explicit preparation/diagnostic operation, not a write gate.`,
+          `    Future<NomosOfferOutcome> attempt() => session.offerGeneratedCallOutcome(call: call, actor: actor, conflictSnapshots: conflictSnapshots, authenticationProof: authenticationProof);`,
           `    return attempt();`,
           `  }`,
           ``,

package/src/compile_package_main.ts

@@ -45,7 +45,7 @@ import type { Directive } from "./directive.js";
  */
 import { execFile, execFileSync } from "node:child_process";
 import { promisify } from "node:util";
-import { checkOperationContracts } from "./operation_contract_check.js";
+import { checkOperationContracts, deriveInterfaceOffer } from "./operation_contract_check.js";
 import { compilerIntermediateCacheRoot, compilerSourceName, compilerSourceRoot } from "./compiler_cache.js";
 import {
   APPLICATION_CONTRACT_MODULE,
@@ -2543,8 +2543,8 @@ const NOMOS_TYPES_DEP = "^0.11.3";
 // 0.48.x: session-bound clients (XClient.bind/NomosClientInterface/DomainClientSessionMismatch/
 //         DomainNotInstalledForSession, engine.follow, pendingConflicts lanes) — the generated client
 //         REQUIRES this surface. 0.48.1 fixes NomosSession.watchPendingConflicts delegation.
-const NOMOS_CLIENT_DEP = "^0.66.12";
-const NOMOS_FLUTTER_DEP = "^0.65.21";
+const NOMOS_CLIENT_DEP = "^0.66.14";
+const NOMOS_FLUTTER_DEP = "^0.65.26";
 // DRIFT TRIPWIRE: pubspec_pins.test.ts asserts these equal the CURRENT versions in the Dart and Flutter
 // package pubspecs — a release without this bump fails the suite, so tenants never
 // land back in dependency_overrides (the exact co2 report this closes, third occurrence).
@@ -7806,6 +7806,7 @@ async function main(): Promise<void> {
     let readProjectionUsdc: Uint8Array;
     let commandProjectionText: string;
     let commandProjectionUsdc: Uint8Array;
+    let interfaceOfferBytes: Uint8Array;
     try {
       writeFileSync(temporaryComposedLaw, composedLawText);
       const project = async (
@@ -7853,6 +7854,15 @@ async function main(): Promise<void> {
           "the authenticated command projection"
         ),
       ]);
+      const offerSource = path.join(outDir, ".nomos-interface-offer-source.tmp.usdc");
+      const offerOutput = path.join(outDir, ".nomos-interface-offer.tmp.cbor");
+      try {
+        writeFileSync(offerSource, composedLawUsdc);
+        interfaceOfferBytes = deriveInterfaceOffer(offerSource, offerOutput, DSL_DIR);
+      } finally {
+        rmSync(offerSource, { force: true });
+        rmSync(offerOutput, { force: true });
+      }
     } catch (error) {
       fail(error instanceof Error ? error.message : String(error));
     } finally {
@@ -7891,6 +7901,11 @@ async function main(): Promise<void> {
       sha256: createHash("sha256").update(commandProjectionUsdc).digest("hex"),
       bytes: commandProjectionUsdc,
     };
+    const interfaceOffer: EmittedBinaryLawClosureAsset = {
+      logicalPath: "runtime/interface-offer.cbor",
+      sha256: createHash("sha256").update(interfaceOfferBytes).digest("hex"),
+      bytes: interfaceOfferBytes,
+    };
     lawClosure = emitLawClosure(
       cfg.name,
       domainModules.map((module) => module.domain ?? module.name),
@@ -7905,6 +7920,7 @@ async function main(): Promise<void> {
         readProjectionCache,
         commandProjection,
         commandProjectionCache,
+        interfaceOffer,
       ]
     );
     writeClosureAssets(lawClosure);

package/src/law_units.ts

@@ -68,6 +68,7 @@ const DERIVED_LOGICAL_PATHS = new Set([
   "runtime/read-projection.usdc",
   "runtime/command-projection.usda",
   "runtime/command-projection.usdc",
+  "runtime/interface-offer.cbor",
 ]);
 
 /** Byte order on ASCII strings — the order Rust's `BTreeMap<String, _>` gives. */

package/src/operation_contract_check.ts

@@ -30,3 +30,22 @@ export function checkOperationContracts(lawPath: string, descriptorPath: string,
   mkdirSync(cache, { recursive: true });
   writeFileSync(receipt, 'validated by the bundled kernel contract checker\n');
 }
+
+/** Derive the installed public offer with the same kernel code used by compatibility reads.
+ * The returned bytes are packaged under the law root's authenticated inventory. */
+export function deriveInterfaceOffer(composedLawPath: string, outputPath: string, compilerRoot: string): Uint8Array {
+  const checker = path.join(compilerRoot, 'operation_contract_check.mjs');
+  const artifact = path.join(compilerRoot, 'assets', 'operation-contract.wasm');
+  if (!existsSync(artifact)) throw new Error('Nomos compiler is missing its bundled kernel contract checker; rebuild/reinstall the compiler package');
+  try {
+    execFileSync(process.execPath, [checker, '--derive-interface-offer',
+      path.resolve(composedLawPath), path.resolve(outputPath)], {
+      encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'], maxBuffer: 8 * 1024 * 1024,
+    });
+    return readFileSync(outputPath);
+  } catch (error) {
+    const detail = error instanceof Error && 'stderr' in error && error.stderr
+      ? String(error.stderr) : String(error);
+    throw new Error(`Installed interface offer derivation failed:\n${detail}`);
+  }
+}