@githolon/dsl 0.113.3 → 0.114.0

package/dart_types/lib/src/proto/nomos/runtime/v2/residency_desk.pb.dart

@@ -247,6 +247,8 @@ class ResidentWorkspaceDetail extends $pb.GeneratedMessage {
     ResidentOutbox? outbox,
     ResidentAggregateCensus? census,
     $core.String? fullReplayHead,
+    $fixnum.Int64? localHistoryCommits,
+    $core.String? placementUnobservedReason,
   }) {
     final result = create();
     if (workspace != null) result.workspace = workspace;
@@ -267,6 +269,10 @@ class ResidentWorkspaceDetail extends $pb.GeneratedMessage {
     if (outbox != null) result.outbox = outbox;
     if (census != null) result.census = census;
     if (fullReplayHead != null) result.fullReplayHead = fullReplayHead;
+    if (localHistoryCommits != null)
+      result.localHistoryCommits = localHistoryCommits;
+    if (placementUnobservedReason != null)
+      result.placementUnobservedReason = placementUnobservedReason;
     return result;
   }
 
@@ -319,6 +325,10 @@ class ResidentWorkspaceDetail extends $pb.GeneratedMessage {
     ..aOM<ResidentAggregateCensus>(14, _omitFieldNames ? '' : 'census',
         subBuilder: ResidentAggregateCensus.create)
     ..aOS(15, _omitFieldNames ? '' : 'fullReplayHead')
+    ..a<$fixnum.Int64>(
+        16, _omitFieldNames ? '' : 'localHistoryCommits', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..aOS(17, _omitFieldNames ? '' : 'placementUnobservedReason')
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
@@ -511,6 +521,31 @@ class ResidentWorkspaceDetail extends $pb.GeneratedMessage {
   $core.bool hasFullReplayHead() => $_has(14);
   @$pb.TagNumber(15)
   void clearFullReplayHead() => $_clearField(15);
+
+  /// The size of a PARTIAL local history: commits this host holds on main's first-parent chain,
+  /// from git_head down to the shallow boundary inclusive. Exact for git_head. Measured once by a
+  /// bounded idle-lane walk after a custody event that moves the boundary or the head by an unknown
+  /// amount (acquisition, sync fast-forward, deepening), then advanced by one per admitted offer;
+  /// health never walks history. Absent when not yet measured for this head, and for COMPLETE
+  /// history, which is never walked for telemetry.
+  @$pb.TagNumber(16)
+  $fixnum.Int64 get localHistoryCommits => $_getI64(15);
+  @$pb.TagNumber(16)
+  set localHistoryCommits($fixnum.Int64 value) => $_setInt64(15, value);
+  @$pb.TagNumber(16)
+  $core.bool hasLocalHistoryCommits() => $_has(15);
+  @$pb.TagNumber(16)
+  void clearLocalHistoryCommits() => $_clearField(16);
+
+  /// Why `placement` is absent, in the office's words. Set only when placement is absent.
+  @$pb.TagNumber(17)
+  $core.String get placementUnobservedReason => $_getSZ(16);
+  @$pb.TagNumber(17)
+  set placementUnobservedReason($core.String value) => $_setString(16, value);
+  @$pb.TagNumber(17)
+  $core.bool hasPlacementUnobservedReason() => $_has(16);
+  @$pb.TagNumber(17)
+  void clearPlacementUnobservedReason() => $_clearField(17);
 }
 
 /// The frontier's authenticated aggregate count, and the most numerous types from the resident

package/dart_types/pubspec.yaml

@@ -9,7 +9,7 @@ description: >-
   Pure kernel wire/data types for Nomos Dart frontends — no transport, no bridge,
   no runtime. Typed protobuf and USDA boundary values plus the offer codec,
   reactive read engine, schema validation, and data-only error/trace types.
-version: 0.12.0
+version: 0.13.0
 
 environment:
   sdk: ^3.5.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@githolon/dsl",
-  "version": "0.113.3",
+  "version": "0.114.0",
   "type": "module",
   "sideEffects": false,
   "description": "Nomos 2 domain-authoring DSL: aggregates + directives in TS, executed and encoded to the Rust kernel's wire shapes.",
@@ -25,6 +25,8 @@
       "types": "./compile_proof.d.mts",
       "default": "./compile_proof.mjs"
     },
+    "./release-publication": "./src/release_publication.ts",
+    "./release-inspection": "./src/release_inspection.ts",
     "./workspace-type": "./src/workspace_type.ts",
     "./workspace-routing": "./src/workspace_routing.ts",
     "./workspace-sharding": "./src/workspace_sharding.ts",
@@ -73,7 +75,7 @@
     "test": "vitest run"
   },
   "dependencies": {
-    "@githolon/runtime": "^0.113.3",
+    "@githolon/runtime": "^0.114.0",
     "@bufbuild/protobuf": "^2.13.0",
     "@bufbuild/protoc-gen-es": "^2.13.0",
     "esbuild": "0.24.2",

package/src/build_provenance.ts

@@ -43,8 +43,10 @@ export interface ProvenanceSubject {
 export interface BuildProvenanceInput {
   /** Package name from the project config. */
   readonly packageName: string;
-  /** `sha256(package bytes)` — the composed typed USDA closure identity. */
+  /** The PACKAGE identity: this compiler's closure of `<name>.law.usdz`. Not what a unit-lane target serves. */
   readonly domainHash: string;
+  /** THE LAW IDENTITY: the unit set identity of `<name>.units` (law_unit_set_identity.ts, CAP-773). */
+  readonly unitSetIdentity: string;
   /** The transports the domainHash addresses (law archive, package asset, …). */
   readonly artifacts: readonly { readonly name: string; readonly sha256?: string }[];
   /** Per-domain compiled surface, already computed for the summary. */
@@ -71,8 +73,11 @@ export interface BuildProvenanceInput {
  */
 export function buildProvenanceStatement(input: BuildProvenanceInput): Record<string, unknown> {
   const subject: ProvenanceSubject[] = [
-    // The law closure identity is THE subject: `sha256(package bytes) = domainHash`.
+    // The package: `<name>.law` is the compiler's closure of the `.law.usdz` bytes (the package identity).
     { name: `${input.packageName}.law`, digest: { sha256: input.domainHash } },
+    // The law: `<name>.units` names the unit set identity, what releases, clients and qualification name.
+    // A target serves a closure its own kernel composes from these units, which neither digest names.
+    { name: `${input.packageName}.units`, digest: { sha256: input.unitSetIdentity } },
     ...input.artifacts
       .filter((a): a is { name: string; sha256: string } => typeof a.sha256 === "string")
       .map((a) => ({ name: a.name, digest: { sha256: a.sha256 } })),

package/src/codegen_dart_client.ts

@@ -815,7 +815,7 @@ function emitDartUsdaResultDecoder(
 }
 
 export interface DartClientOptions {
-  /** Content identity of the built typed USDA closure (`.law.usdz`). */
+  /** THE LAW the client is generated against: the unit set identity of `build/<name>.units` (CAP-773). */
   readonly domainHash: string;
   /** Flutter asset key for the compiler-authored USDZ transport. Generated
    * child openers use it to inherit an accepted parent model through the
@@ -2282,19 +2282,30 @@ export function generateDartDomainClient(
     const qOwned = qScopes.some((scope) => scope.owned === true);
     const qPrivate = needsReadPrincipal(q.returns);
     const qScopesExpr = scopesExpr(qScopes);
+    // CAP-731: a declared rows watch whose keys the client does not re-derive per read merges
+    // kernel row deltas (O(changed) per local write) instead of re-decoding the whole result.
+    // Ordered reads keep complete results: their order is the law's, not the id's.
+    const rowsWatch = (keys: string) =>
+      `session.nmsWatchRows(${queryCall}, decode: (result) => ${decodeRows}(result, _ws), idOf: (row) => row.ref.id${keys}${
+        qPrivate ? ", principal: actor" : ""
+      })`;
     const nominalWatch = qOwned
       ? `session.nmsWatch(${queryCall}${
           qPrivate ? ", principal: actor" : ""
         }).asyncMap((result) async => _readWithOwnedKeys(${qScopesExpr}, (keys) async => ${decodeRows}(await session.nmsQuery(${queryCall}, keys${
           qPrivate ? ", actor" : ""
         }), _ws), (row) => row.ref, initial: await ${decodeRows}(result, _ws)))`
+      : ordered !== undefined
+      ? qScopes.length
+        ? `Stream.fromFuture(_readKeys(${qScopesExpr})).asyncExpand((keys) => session.nmsWatch(${queryCall}, keys: keys${
+            qPrivate ? ", principal: actor" : ""
+          }).asyncMap((result) => ${decodeRows}(result, _ws)))`
+        : `session.nmsWatch(${queryCall}${
+            qPrivate ? ", principal: actor" : ""
+          }).asyncMap((result) => ${decodeRows}(result, _ws))`
       : qScopes.length
-      ? `Stream.fromFuture(_readKeys(${qScopesExpr})).asyncExpand((keys) => session.nmsWatch(${queryCall}, keys: keys${
-          qPrivate ? ", principal: actor" : ""
-        }).asyncMap((result) => ${decodeRows}(result, _ws)))`
-      : `session.nmsWatch(${queryCall}${
-          qPrivate ? ", principal: actor" : ""
-        }).asyncMap((result) => ${decodeRows}(result, _ws))`;
+      ? `Stream.fromFuture(_readKeys(${qScopesExpr})).asyncExpand((keys) => ${rowsWatch(", keys: keys")})`
+      : rowsWatch("");
     if (ordered !== undefined) {
       const resultType = ordered.limit === 1 ? `${model}?` : `List<${model}>`;
       const select = ordered.limit === 1 ? "rows.isEmpty ? null : rows.single" : "rows";
@@ -3530,7 +3541,7 @@ export function generateDartDomainClient(
       `      final latest = events.isEmpty ? null : events.first;`,
       `      items = [`,
       `        NomosDescribeItem(kind: 'evidence', id: 'workspace', label: 'Workspace', summary: _ws, details: {'workspace': _ws}),`,
-      `        NomosDescribeItem(kind: 'evidence', id: 'law', label: 'Generated law', summary: domainHash, details: {'domainHash': domainHash}),`,
+      `        NomosDescribeItem(kind: 'evidence', id: 'law', label: 'Generated law (unit set)', summary: domainHash, details: {'lawUnitSet': domainHash}),`,
       `        NomosDescribeItem(kind: 'evidence', id: 'reader', label: 'Verified reader', summary: this.actor ?? 'anonymous', details: {'actor': this.actor}),`,
       `        if (latest != null) NomosDescribeItem(kind: 'evidence', id: latest.eventId, label: 'Latest verified moment', summary: latest.eventId,`,
       `          details: {'occurredAt': latest.occurredAt, 'performedBy': latest.performedBy, 'domain': latest.domain, 'kind': latest.kind}),`,
@@ -3630,7 +3641,8 @@ export function generateDartDomainClient(
       ? [`export '${opts.frameworkImportUri}';`]
       : []),
     ``,
-    `/// Content identity of the installed typed USDA closure (transported as \`.law.usdz\`).`,
+    `/// The law this client was generated against: its unit set identity (\`build/<name>.units.sha256\`).`,
+    `/// Each workspace serves a closure its own kernel composes from those units; never sent with an offer.`,
     `const String ${hashConst} = ${dartStr(opts.domainHash)};`,
     ``,
     ...(opts.emitActivity === true

package/src/codegen_dart_facade.ts

@@ -1907,6 +1907,7 @@ export function generateDartApplication(
     `// AUTO-GENERATED by nomos-compile — the tenant application surface for "${domain}".`,
     `// Business facts in, business records out. Runtime lifecycle is deliberately absent.`,
     `export 'package:nomos_client/src/write_progress.dart' show NomosWrite, NomosWriteProgress, NomosWritePhase;`,
+    `export 'package:nomos_client/src/rows_watch.dart' show NomosRows, NomosRowProjection, NomosRowsProjectionStream;`,
     ...((mod.workspaceInvariants ?? []).some(rule => rule.refusal) ? [
       `export 'package:nomos_types/nomos_types.dart' show AdmissionDecision, Admitted, DomainRefused, FrameworkRefused, UnsupportedRefusalContract, NomosDomainRefusalEvidence, KernelRefusalCode;`,
     ] : []),

package/src/codegen_dart_framework_calls.ts

@@ -173,14 +173,16 @@ export function dartFrameworkOperationDirectiveIds(
 export function generateDartApplicationFrameworkCalls(
   laws: readonly DartFrameworkCallLaw[],
   descriptor: {
-    /** The compiled law package identity — the descriptor's own closure, `currentLaw[<application-home domain>]`. */
-    readonly lawSha256: string;
+    /** THE LAW the application is compiled as: the unit set identity of `build/<name>.units` (CAP-773). */
+    readonly lawUnitSet: string;
+    /** The compiled package closure (`build/<name>.law.usdz`): the bytes a device stages. Not what a target serves. */
+    readonly lawPackageSha256: string;
   },
 ): string | undefined {
-  if (!/^[0-9a-f]{64}$/.test(descriptor.lawSha256)) {
-    throw new Error(
-      `Dart framework call codegen: the application birth contract needs the compiled law package sha256 identity, not '${descriptor.lawSha256}'`,
-    );
+  for (const [name, value] of [["law unit set", descriptor.lawUnitSet], ["package", descriptor.lawPackageSha256]] as const) {
+    if (!/^[0-9a-f]{64}$/.test(value)) {
+      throw new Error(`Dart framework call codegen: the application's ${name} identity must be 64 lowercase hex, not '${value}'`);
+    }
   }
   const frameworkEnumDartTypes = collectFixedFrameworkDartEnums().dartTypes;
   const fixedEmitted = FIXED_CALLS.flatMap((definition) => laws.flatMap((law) => {
@@ -619,7 +621,7 @@ export function generateDartApplicationFrameworkCalls(
     `import 'dart:typed_data' show Uint8List;`,
     `import 'package:fixnum/fixnum.dart' show Int64;`,
     `import 'operation_payloads.pb.dart' as _nmsop;`,
-    `import 'package:nomos_types/nomos_kernel_protocol.dart' show ApplicationBirthContract, BirthCertificate;`,
+    `import 'package:nomos_types/nomos_kernel_protocol.dart' show BirthCertificate;`,
     `import 'package:nomos_types/nomos_types.dart' show NomosSlot, Sha256Digest;`,
     `import 'package:nomos_client/src/application_framework_calls.dart';`,
     `import 'package:nomos_client/src/generated_call.dart';`,
@@ -646,8 +648,9 @@ export function generateDartApplicationFrameworkCalls(
     `  @override`,
     `  String get parentModelAuthoritySeatId => ${JSON.stringify(PARENT_MODEL_AUTHORITY_SEAT_ID)};`,
     `  @override`,
-    `  ApplicationBirthContract get applicationBirthContract =>`,
-    `      ApplicationBirthContract(lawSha256: ${JSON.stringify(descriptor.lawSha256)});`,
+    `  String get lawUnitSet => ${JSON.stringify(descriptor.lawUnitSet)};`,
+    `  @override`,
+    `  String get lawPackageSha256 => ${JSON.stringify(descriptor.lawPackageSha256)};`,
     ``,
     ...methods,
     `}`,

package/src/codegen_dart_scenario.ts

@@ -123,6 +123,7 @@ export function generateDartScenario(
     `import 'package:nomos_client/src/reception/reception_session.dart' show NmsReceptionUser, NmsReceptionSessionView;`,
     `import 'package:nomos_client/src/nms_generated_runtime.dart' show NomosSession;`,
     `import 'package:nomos_client/src/nms_test_environment.dart' show NomosTestCloud, NomosTestHarness, NomosTestFrontier;`,
+    `import 'package:nomos_flutter/testing.dart' show registerNomosNativeTestPeerHost;`,
     ``,
     `// The office names the framework's identity anchor; a scenario never re-derives it.`,
     `Future<NmsReceptionSessionView> _nmsTestReception(`,
@@ -212,6 +213,9 @@ export function generateDartScenario(
     `    void Function(Future<void> Function())? registerTearDown,`,
     `  }) async {`,
     `    final person = signedInAs ?? ${testPerson}.named('test');`,
+    `    // Make the Apple native test peer host available; NOMOS_TEST_PEER_HOST=native selects it.`,
+    `    // Registering never selects it, so the default Node peer is unchanged.`,
+    `    registerNomosNativeTestPeerHost();`,
     `    final packageFiles = await _applicationPackages();`,
     `    final environment = await NomosTestHarness.ephemeral(`,
     `      lawUsdzPaths: packageFiles.map((file) => file.path).toList(growable: false),`,
@@ -244,6 +248,9 @@ export function generateDartScenario(
     `    if (serverEntry == null || serverEntry.isEmpty) {`,
     `      throw StateError('Connected scenarios require the Nomos test cloud. Run this test through githolon test.');`,
     `    }`,
+    `    // Make the Apple native test peer host available; NOMOS_TEST_PEER_HOST=native selects it.`,
+    `    // Registering never selects it, so the default Node peer is unchanged.`,
+    `    registerNomosNativeTestPeerHost();`,
     `    final applicationName = 'test-application-\${DateTime.now().microsecondsSinceEpoch}';`,
     `    final packageFiles = await _applicationPackages();`,
     `    final cloud = await NomosTestCloud.start(`,

package/src/codegen_ts.ts

@@ -1128,7 +1128,8 @@ function aggregatesOf(mod: Record<string, unknown>): AggregateHandle[] {
 export interface TsClientOptions {
   /** The package name (`nomos.project.ts` `name`) — used for the hash constant. */
   readonly packageName: string;
-  /** Content identity of the built typed USDA closure (`.law.usdz`). */
+  /** THE LAW this client is generated against: the unit set identity of `build/<name>.units` (CAP-773,
+   * law_unit_set_identity.ts). Never the package closure, and never sent to the kernel with an offer. */
   readonly domainHash: string;
   /** Sibling lossless USDZ transport carried by the generated client when its signed-in workspace
    * still serves the predecessor model. The archive is never canonical state and is not embedded. */
@@ -2211,7 +2212,8 @@ export function generateTsClient(
         ]
       : []),
     ``,
-    `/** Content identity of the installed typed USDA closure (transported as \`.law.usdz\`). */`,
+    `/** The law this client was generated against: its unit set identity (\`build/<name>.units.sha256\`). Each`,
+    ` *  workspace serves a closure its own kernel composes from those units; compatibility is the kernel's verdict. */`,
     `const ${hashConst} = ${JSON.stringify(opts.domainHash)};`,
     ``,
     ...(clientInterface !== undefined
@@ -2579,7 +2581,7 @@ export function generateTsClient(
     `export interface NomosHolonBinding { readonly workspace: string }`,
     `interface NomosHolon {`,
     `  /** Carry one compiler-generated nominal USDA call. Routing identity and bytes cannot be paired independently. */`,
-    `  offerCall(call: NmsGeneratedCall, opts?: { domainHash?: string; actor?: string; returnCreated?: boolean; __nomosConflictSnapshots?: readonly { aggregateType: string; aggregateId: string; field: string; targetSchema: string; token: string }[] }): Promise<string | { head: string; created?: { type: string; id: string }[]; affected?: { type: string; id: string }[]; workspace?: string; born?: unknown; birthOutcomes?: unknown }>;`,
+    `  offerCall(call: NmsGeneratedCall, opts?: { actor?: string; returnCreated?: boolean; __nomosConflictSnapshots?: readonly { aggregateType: string; aggregateId: string; field: string; targetSchema: string; token: string }[] }): Promise<string | { head: string; created?: { type: string; id: string }[]; affected?: { type: string; id: string }[]; workspace?: string; born?: unknown; birthOutcomes?: unknown }>;`,
     ...(sourceTrustPresent
       ? [
           `  /** FRAMEWORK-INTERNAL: inspect a sibling's immutable custody identity before authoring`,
@@ -2590,7 +2592,7 @@ export function generateTsClient(
     ...(hasCorrections
       ? [
           `  /** Framework-private seam used by generated \`corrections\`; apps never supply an intent id. */`,
-          `  correctMostRecent?(opts: { kind: "undo" | "redo"; domain: string; actions: string[]; reason: string; domainHash?: string; actor?: string }): Promise<NomosCorrectionOutcome>;`,
+          `  correctMostRecent?(opts: { kind: "undo" | "redo"; domain: string; actions: string[]; reason: string; actor?: string }): Promise<NomosCorrectionOutcome>;`,
         ]
       : []),
     ...(hasBirths
@@ -2598,7 +2600,7 @@ export function generateTsClient(
           `  /** BIRTH A CHILD WORKSPACE (a signed CROSS-WORKSPACE governance offer to \`parent\`) — OPTIONAL:`,
           `   *  @githolon/runtime's connect() attaches it. The generated \`.births()\` methods call this, binding`,
           `   *  the declaring domain/directiveId/law hash so a frontend dev never hand-writes those raw strings. */`,
-          `  createWorkspace?(opts: { domain: string; directiveId: string; domainHash?: string; parent: string; actor: string; authorSecret?: string; payload?: unknown; name?: string; authToken?: string }): Promise<{ ok?: boolean; status?: number; body?: unknown }>;`,
+          `  createWorkspace?(opts: { domain: string; directiveId: string; parent: string; actor: string; authorSecret?: string; payload?: unknown; name?: string; authToken?: string }): Promise<{ ok?: boolean; status?: number; body?: unknown }>;`,
         ]
       : []),
     `  /** The workspace this holon is bound to — the \`workspace\` of every [NomosRef] this client composes. */`,
@@ -2769,7 +2771,7 @@ export function generateTsClient(
       ? [
           `/** Framework-private merge lane used only by generated conflict capabilities. The snapshot`,
           ` *  proves the exact observation set being merged; application code never supplies it. */`,
-          `type __NomosConflictOffer = (call: NmsGeneratedCall, opts: { domainHash?: string; actor?: string; returnCreated: true; __nomosConflictSnapshots: readonly { aggregateType: string; aggregateId: string; field: string; targetSchema: string; token: string }[] }) => ReturnType<NomosHolon["offerCall"]>;`,
+          `type __NomosConflictOffer = (call: NmsGeneratedCall, opts: { actor?: string; returnCreated: true; __nomosConflictSnapshots: readonly { aggregateType: string; aggregateId: string; field: string; targetSchema: string; token: string }[] }) => ReturnType<NomosHolon["offerCall"]>;`,
           ``,
         ]
       : []),
@@ -3001,8 +3003,8 @@ export function generateTsClient(
             `}`,
             ``,
             `/** Build the owner ceremony for one domain (thin: all mechanism lives here; the factory just wires it). */`,
-            `function _ownerEncryption(holon: NomosHolon, cfg: { domain: string; domainHash?: string; actor?: string; scopes: readonly string[] }): NomosEncryption {`,
-            `  const { domain, domainHash, actor, scopes } = cfg;`,
+            `function _ownerEncryption(holon: NomosHolon, cfg: { domain: string; actor?: string; scopes: readonly string[] }): NomosEncryption {`,
+            `  const { domain, actor, scopes } = cfg;`,
             `  const defScope = (scope?: string): string => {`,
             `    if (scope) return scope;`,
             `    if (scopes.length === 1) return scopes[0]!;`,
@@ -3076,7 +3078,7 @@ export function generateTsClient(
             `      wraps.push({ recipientPrincipal: principal, recipientPubKey: pub, hpkeEpk: w.hpkeEpk, ct: w.ct });`,
             `    }`,
             `    const epoch = (await currentEpoch(scope)) + 1; // forward-only: strictly increments`,
-            '    const head = await holon.offerDirective(domain, "advanceKeyEpoch", { scope, epoch, openedAt: opts.openedAt ?? new Date().toISOString(), wraps }, { domainHash, actor });',
+            '    const head = await holon.offerDirective(domain, "advanceKeyEpoch", { scope, epoch, openedAt: opts.openedAt ?? new Date().toISOString(), wraps }, { actor });',
             `    return { head, epoch, roster: members };`,
             `  };`,
             `  return {`,
@@ -3084,12 +3086,12 @@ export function generateTsClient(
             `    roster: (scope) => readRoster(defScope(scope)),`,
             `    async grantAndWrap(args) {`,
             `      const scope = defScope(args.scope);`,
-            `      await holon.offerDirective(domain, args.grantDirective, args.grantPayload, { domainHash, actor });`,
+            `      await holon.offerDirective(domain, args.grantDirective, args.grantPayload, { actor });`,
             `      return advance(scope, { add: { principal: args.principal, publicKey: args.publicKey }, scopeKey: args.scopeKey, memberKeys: args.memberKeys, expectRoster: args.expectRoster, openedAt: args.openedAt });`,
             `    },`,
             `    async revokeAndRotate(args) {`,
             `      const scope = defScope(args.scope);`,
-            `      await holon.offerDirective(domain, args.revokeDirective, args.revokePayload, { domainHash, actor });`,
+            `      await holon.offerDirective(domain, args.revokeDirective, args.revokePayload, { actor });`,
             `      return advance(scope, { remove: [args.principal], scopeKey: args.scopeKey, memberKeys: args.memberKeys, expectRoster: args.expectRoster, openedAt: args.openedAt });`,
             `    },`,
             `    async rotate(args) {`,
@@ -4668,7 +4670,7 @@ export function generateTsClient(
           domain
         )}, actions: ${JSON.stringify(
           correctionActions.map((d) => d.id)
-        )}, reason, domainHash, actor: actor ?? holon.principal });`,
+        )}, reason, actor: actor ?? holon.principal });`,
         `      },`,
         `      redo: async (reason: string): Promise<NomosCorrectionOutcome> => {`,
         `        if (!reason.trim()) throw new Error("corrections.redo() needs a reason");`,
@@ -4677,7 +4679,7 @@ export function generateTsClient(
           domain
         )}, actions: ${JSON.stringify(
           correctionActions.map((d) => d.id)
-        )}, reason, domainHash, actor: actor ?? holon.principal });`,
+        )}, reason, actor: actor ?? holon.principal });`,
         `      },`,
         `    },`
       );
@@ -5044,7 +5046,7 @@ export function generateTsClient(
                 )}: _sourceGenesis,`,
                 `${indent}  ${JSON.stringify(sourceTrust.keyHashesField)}: [],`,
                 `${indent}} satisfies ${payloadType};`,
-                `${indent}await _commit(holon.offerCall(${encoder}(_sourceTrustCall, holon.workspace), { domainHash, actor, returnCreated: true }) as Promise<_NomosRawWriteResult>);`,
+                `${indent}await _commit(holon.offerCall(${encoder}(_sourceTrustCall, holon.workspace), { actor, returnCreated: true }) as Promise<_NomosRawWriteResult>);`,
                 ...(satisfactionQuery === undefined ? [] : ["      }"]),
               ];
             })();
@@ -5420,7 +5422,7 @@ export function generateTsClient(
                 : ""
             } }`
           )};`,
-          `      const result = await holon.offerCall(_call, { domainHash, actor: principal, returnCreated: true });`,
+          `      const result = await holon.offerCall(_call, { actor: principal, returnCreated: true });`,
           `      const born = typeof result === "object" && result !== null && Array.isArray(result.born) ? result.born[0] : undefined;`,
           `      if (typeof born !== "object" || born === null || typeof born.workspace !== "string" || !born.workspace) throw new Error("birth() committed without returning the born workspace");`,
           ...(ownedBirthDescriptor !== undefined
@@ -5453,7 +5455,7 @@ export function generateTsClient(
           ...(gateGuard ? [gateGuard.replace(/\n$/, "")] : []),
           `      return _commit(holon.offerCall(${encodeCall(
             birthPayload
-          )}, { domainHash, actor, returnCreated: true }) as Promise<_NomosRawWriteResult>);`,
+          )}, { actor, returnCreated: true }) as Promise<_NomosRawWriteResult>);`,
           `    },`
         );
         continue;
@@ -5488,10 +5490,10 @@ export function generateTsClient(
         const mintedCall = hasBusinessResult
           ? `_businessResult<${resultName}>(holon.workspace, ${resultSpec}, holon.offerCall(${encodeCall(
               body
-            )}, { domainHash, actor, returnCreated: true }) as Promise<_NomosRawWriteResult>)`
+            )}, { actor, returnCreated: true }) as Promise<_NomosRawWriteResult>)`
           : `_commit(holon.offerCall(${encodeCall(
               body
-            )}, { domainHash, actor, returnCreated: true }) as Promise<_NomosRawWriteResult>)`;
+            )}, { actor, returnCreated: true }) as Promise<_NomosRawWriteResult>)`;
         methods.push(
           `    /** Author \`${domain}/${d.id}\`: the generated client MINTS \`${mint.field}\` internally`,
           `     *  — ids are not application input — ${
@@ -5541,10 +5543,10 @@ export function generateTsClient(
       const commitCall = hasBusinessResult
         ? `_businessResult<${resultName}>(holon.workspace, ${resultSpec}, holon.offerCall(${encodeCall(
             offerPayload
-          )}, { domainHash, actor, returnCreated: true }) as Promise<_NomosRawWriteResult>)`
+          )}, { actor, returnCreated: true }) as Promise<_NomosRawWriteResult>)`
         : `_commit(holon.offerCall(${encodeCall(
             offerPayload
-          )}, { domainHash, actor, returnCreated: true }) as Promise<_NomosRawWriteResult>)`;
+          )}, { actor, returnCreated: true }) as Promise<_NomosRawWriteResult>)`;
       const outcomeDoc =
         d.marker === "creates"
           ? `Author \`${domain}/${d.id}\`: the LAW mints the ${
@@ -6181,7 +6183,7 @@ export function generateTsClient(
             `                  merge: (reconcile: (versions: readonly SurfacedObservation<${valueType}>[]) => ${valueType}, rest?: ${restType}): Promise<void> => {`,
             `                    const merged = reconcile(versions);`,
             `                    const resolution = ${resolutionLiteral} satisfies ${payloadName};`,
-            `                    return _commit((holon.offerCall as __NomosConflictOffer)(${resolverCallEncoder}(resolution, holon.workspace), { domainHash, actor, returnCreated: true, __nomosConflictSnapshots: [{ aggregateType: ${JSON.stringify(
+            `                    return _commit((holon.offerCall as __NomosConflictOffer)(${resolverCallEncoder}(resolution, holon.workspace), { actor, returnCreated: true, __nomosConflictSnapshots: [{ aggregateType: ${JSON.stringify(
               runtimeAggregateType
             )}, aggregateId, field: ${JSON.stringify(
               b.field
@@ -6617,7 +6619,7 @@ export function generateTsClient(
                 `        const payload = await holon.__nomosPrepareOwnedRecordAction({ action: ${JSON.stringify(
                   descriptor.action
                 )}, scope: ${JSON.stringify(ownedScope)}, record, peer });`,
-                `        return _commit(holon.offerCall(${descriptor.functionName}(payload, holon.workspace), { domainHash, actor, returnCreated: true }) as Promise<_NomosRawWriteResult>);`,
+                `        return _commit(holon.offerCall(${descriptor.functionName}(payload, holon.workspace), { actor, returnCreated: true }) as Promise<_NomosRawWriteResult>);`,
                 `      }`,
               ]),
             `      default: throw new Error(\`${"${action}()"} has no generated canonical offer encoder\`);`,
@@ -6666,7 +6668,7 @@ export function generateTsClient(
             `        const payload = await holon.__nomosPrepareOwnedDeviceApproval({ request, scope: ${JSON.stringify(
               ownedScope
             )} });`,
-            `        return _commit(holon.offerCall(${ownedDeviceApprovalCallEncoder!}(payload, holon.workspace), { domainHash, actor: principal, returnCreated: true }) as Promise<_NomosRawWriteResult>);`,
+            `        return _commit(holon.offerCall(${ownedDeviceApprovalCallEncoder!}(payload, holon.workspace), { actor: principal, returnCreated: true }) as Promise<_NomosRawWriteResult>);`,
             `      },`,
             `    },`,
           ]
@@ -6677,7 +6679,7 @@ export function generateTsClient(
             `    /** Owner policy: grant, revoke and rotate under the signed-in identity. */`,
             `    encryption: _ownerEncryption(holon, { domain: ${JSON.stringify(
               domain
-            )}, domainHash, actor, scopes: ${JSON.stringify(
+            )}, actor, scopes: ${JSON.stringify(
               domScopes
             )} }) as NomosEncryption,`,
           ]