@githolon/dsl 0.114.0 → 0.116.2

package/dart_types/lib/src/proto/nomos/runtime/v2/model_adoption_desk.pb.dart

@@ -29,6 +29,7 @@ class AdoptApplicationModelRequest extends $pb.GeneratedMessage {
     $core.String? acceptanceReason,
     $core.bool? dryRun,
     $core.String? unitSet,
+    $core.Iterable<DomainUnitRequirement>? domainRequirements,
   }) {
     final result = create();
     if (session != null) result.session = session;
@@ -37,6 +38,8 @@ class AdoptApplicationModelRequest extends $pb.GeneratedMessage {
     if (acceptanceReason != null) result.acceptanceReason = acceptanceReason;
     if (dryRun != null) result.dryRun = dryRun;
     if (unitSet != null) result.unitSet = unitSet;
+    if (domainRequirements != null)
+      result.domainRequirements.addAll(domainRequirements);
     return result;
   }
 
@@ -60,6 +63,8 @@ class AdoptApplicationModelRequest extends $pb.GeneratedMessage {
     ..aOS(4, _omitFieldNames ? '' : 'acceptanceReason')
     ..aOB(5, _omitFieldNames ? '' : 'dryRun')
     ..aOS(6, _omitFieldNames ? '' : 'unitSet')
+    ..pPM<DomainUnitRequirement>(7, _omitFieldNames ? '' : 'domainRequirements',
+        subBuilder: DomainUnitRequirement.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
@@ -148,6 +153,99 @@ class AdoptApplicationModelRequest extends $pb.GeneratedMessage {
   $core.bool hasUnitSet() => $_has(5);
   @$pb.TagNumber(6)
   void clearUnitSet() => $_clearField(6);
+
+  /// THE PER-DOMAIN REQUIREMENTS (CAP-666): for each application domain key, the
+  /// exact law unit and the generated consumer requirement this client was
+  /// compiled against. A workspace serving that unit for the key satisfies the
+  /// requirement for it even when its unit set carries other domains the
+  /// application never touches. Absent on clients generated before this field
+  /// existed: the unit set alone then decides.
+  @$pb.TagNumber(7)
+  $pb.PbList<DomainUnitRequirement> get domainRequirements => $_getList(6);
+}
+
+/// One application domain's requirement, as the compiler generated it beside the
+/// unit set: the domain's unit hash (`domain:<key>` in `build/<name>.units`) and
+/// the sha256 of the domain's `<name>.compatibility.usda` slice the kernel's
+/// Compatibility Desk judges. Identities only; the office never reads the bytes.
+class DomainUnitRequirement extends $pb.GeneratedMessage {
+  factory DomainUnitRequirement({
+    $core.String? domainKey,
+    $core.String? unitSha256,
+    $core.String? requirementSha256,
+  }) {
+    final result = create();
+    if (domainKey != null) result.domainKey = domainKey;
+    if (unitSha256 != null) result.unitSha256 = unitSha256;
+    if (requirementSha256 != null) result.requirementSha256 = requirementSha256;
+    return result;
+  }
+
+  DomainUnitRequirement._();
+
+  factory DomainUnitRequirement.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory DomainUnitRequirement.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'DomainUnitRequirement',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'domainKey')
+    ..aOS(2, _omitFieldNames ? '' : 'unitSha256')
+    ..aOS(3, _omitFieldNames ? '' : 'requirementSha256')
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  DomainUnitRequirement clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  DomainUnitRequirement copyWith(
+          void Function(DomainUnitRequirement) updates) =>
+      super.copyWith((message) => updates(message as DomainUnitRequirement))
+          as DomainUnitRequirement;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static DomainUnitRequirement create() => DomainUnitRequirement._();
+  @$core.override
+  DomainUnitRequirement createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static DomainUnitRequirement getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<DomainUnitRequirement>(create);
+  static DomainUnitRequirement? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get domainKey => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set domainKey($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasDomainKey() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearDomainKey() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $core.String get unitSha256 => $_getSZ(1);
+  @$pb.TagNumber(2)
+  set unitSha256($core.String value) => $_setString(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasUnitSha256() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearUnitSha256() => $_clearField(2);
+
+  @$pb.TagNumber(3)
+  $core.String get requirementSha256 => $_getSZ(2);
+  @$pb.TagNumber(3)
+  set requirementSha256($core.String value) => $_setString(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasRequirementSha256() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearRequirementSha256() => $_clearField(3);
 }
 
 class ApplicationModelAdopted extends $pb.GeneratedMessage {

package/dart_types/lib/src/proto/nomos/runtime/v2/observability_desk.pbenum.dart

@@ -196,6 +196,15 @@ class FollowObservationPhase extends $pb.ProtobufEnum {
               ? ''
               : 'FOLLOW_OBSERVATION_PHASE_LOCAL_COPY_UNREADABLE');
 
+  /// This peer's kernel deterministically refused the follow's last round at this local head and
+  /// remote frontier. Sync is BLOCKED: no timer re-runs the same refused round. Only an event
+  /// (new local work, an upstream head change, a socket reopen, a changed kernel or runtime) runs
+  /// it again; `retry_at_unix_millis` is present only once an event made it due. `detail` carries
+  /// the kernel's refusal.
+  static const FollowObservationPhase FOLLOW_OBSERVATION_PHASE_KERNEL_REFUSED =
+      FollowObservationPhase._(
+          12, _omitEnumNames ? '' : 'FOLLOW_OBSERVATION_PHASE_KERNEL_REFUSED');
+
   static const $core.List<FollowObservationPhase> values =
       <FollowObservationPhase>[
     FOLLOW_OBSERVATION_PHASE_UNSPECIFIED,
@@ -210,10 +219,11 @@ class FollowObservationPhase extends $pb.ProtobufEnum {
     FOLLOW_OBSERVATION_PHASE_REBORN_REMOTELY,
     FOLLOW_OBSERVATION_PHASE_REPLACING_LOCAL,
     FOLLOW_OBSERVATION_PHASE_LOCAL_COPY_UNREADABLE,
+    FOLLOW_OBSERVATION_PHASE_KERNEL_REFUSED,
   ];
 
   static final $core.List<FollowObservationPhase?> _byValue =
-      $pb.ProtobufEnum.$_initByValueList(values, 11);
+      $pb.ProtobufEnum.$_initByValueList(values, 12);
   static FollowObservationPhase? valueOf($core.int value) =>
       value < 0 || value >= _byValue.length ? null : _byValue[value];
 

package/dart_types/lib/src/proto/nomos/runtime/v2/records_desk.pb.dart

@@ -1237,14 +1237,18 @@ class ResolveWorkspaceNameRequest extends $pb.GeneratedMessage {
 }
 
 /// `birth.keyed({ namespace, key })` — `<namespace>-<sha256(namespace + US + key)[:40]>`.
+/// A business birth's child is named the same way, fixed at birth (CAP-803 withdrew the CAP-788
+/// parent-scoped naming before release); one parent per node is the kernel's `[birth-child-already-parented]`.
 class KeyedBirthName extends $pb.GeneratedMessage {
   factory KeyedBirthName({
     $core.String? namespace,
     $core.String? key,
+    $core.String? parent,
   }) {
     final result = create();
     if (namespace != null) result.namespace = namespace;
     if (key != null) result.key = key;
+    if (parent != null) result.parent = parent;
     return result;
   }
 
@@ -1264,6 +1268,7 @@ class KeyedBirthName extends $pb.GeneratedMessage {
       createEmptyInstance: create)
     ..aOS(1, _omitFieldNames ? '' : 'namespace')
     ..aOS(2, _omitFieldNames ? '' : 'key')
+    ..aOS(3, _omitFieldNames ? '' : 'parent')
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
@@ -1302,6 +1307,17 @@ class KeyedBirthName extends $pb.GeneratedMessage {
   $core.bool hasKey() => $_has(1);
   @$pb.TagNumber(2)
   void clearKey() => $_clearField(2);
+
+  /// UNUSED (reserved, CAP-803): the office ignores it and answers the keyed name above. A child is
+  /// addressed by the name it was born with; a parent never re-derives it.
+  @$pb.TagNumber(3)
+  $core.String get parent => $_getSZ(2);
+  @$pb.TagNumber(3)
+  set parent($core.String value) => $_setString(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasParent() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearParent() => $_clearField(3);
 }
 
 /// The framework's identity anchor — `nomos-rg-<sha256(principal)[:40]>`.

package/dart_types/lib/src/proto/nomos/runtime/v2/runtime.pb.dart

@@ -85,6 +85,7 @@ enum RuntimeRequest_Command {
   configureProviderOrigins,
   fetchWorkspace,
   provideLawProducts,
+  serveLiveStream,
   notSet
 }
 
@@ -145,6 +146,7 @@ class RuntimeRequest extends $pb.GeneratedMessage {
     $7.ConfigureProviderOriginsRequest? configureProviderOrigins,
     $2.FetchWorkspaceRequest? fetchWorkspace,
     $2.ProvideLawProductsRequest? provideLawProducts,
+    $3.LiveStreamRequest? serveLiveStream,
   }) {
     final result = create();
     if (protocolVersion != null) result.protocolVersion = protocolVersion;
@@ -223,6 +225,7 @@ class RuntimeRequest extends $pb.GeneratedMessage {
     if (fetchWorkspace != null) result.fetchWorkspace = fetchWorkspace;
     if (provideLawProducts != null)
       result.provideLawProducts = provideLawProducts;
+    if (serveLiveStream != null) result.serveLiveStream = serveLiveStream;
     return result;
   }
 
@@ -284,6 +287,7 @@ class RuntimeRequest extends $pb.GeneratedMessage {
     62: RuntimeRequest_Command.configureProviderOrigins,
     63: RuntimeRequest_Command.fetchWorkspace,
     64: RuntimeRequest_Command.provideLawProducts,
+    65: RuntimeRequest_Command.serveLiveStream,
     0: RuntimeRequest_Command.notSet
   };
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
@@ -338,7 +342,8 @@ class RuntimeRequest extends $pb.GeneratedMessage {
       61,
       62,
       63,
-      64
+      64,
+      65
     ])
     ..aI(1, _omitFieldNames ? '' : 'protocolVersion',
         fieldType: $pb.PbFieldType.OU3)
@@ -476,6 +481,8 @@ class RuntimeRequest extends $pb.GeneratedMessage {
     ..aOM<$2.ProvideLawProductsRequest>(
         64, _omitFieldNames ? '' : 'provideLawProducts',
         subBuilder: $2.ProvideLawProductsRequest.create)
+    ..aOM<$3.LiveStreamRequest>(65, _omitFieldNames ? '' : 'serveLiveStream',
+        subBuilder: $3.LiveStreamRequest.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
@@ -544,6 +551,7 @@ class RuntimeRequest extends $pb.GeneratedMessage {
   @$pb.TagNumber(62)
   @$pb.TagNumber(63)
   @$pb.TagNumber(64)
+  @$pb.TagNumber(65)
   RuntimeRequest_Command whichCommand() =>
       _RuntimeRequest_CommandByTag[$_whichOneof(0)]!;
   @$pb.TagNumber(10)
@@ -593,6 +601,7 @@ class RuntimeRequest extends $pb.GeneratedMessage {
   @$pb.TagNumber(62)
   @$pb.TagNumber(63)
   @$pb.TagNumber(64)
+  @$pb.TagNumber(65)
   void clearCommand() => $_clearField($_whichOneof(0));
 
   @$pb.TagNumber(1)
@@ -1196,6 +1205,18 @@ class RuntimeRequest extends $pb.GeneratedMessage {
   void clearProvideLawProducts() => $_clearField(64);
   @$pb.TagNumber(64)
   $2.ProvideLawProductsRequest ensureProvideLawProducts() => $_ensure(50);
+
+  /// A coordinator asks the cloud peer that holds this workspace to serve one stream request.
+  @$pb.TagNumber(65)
+  $3.LiveStreamRequest get serveLiveStream => $_getN(51);
+  @$pb.TagNumber(65)
+  set serveLiveStream($3.LiveStreamRequest value) => $_setField(65, value);
+  @$pb.TagNumber(65)
+  $core.bool hasServeLiveStream() => $_has(51);
+  @$pb.TagNumber(65)
+  void clearServeLiveStream() => $_clearField(65);
+  @$pb.TagNumber(65)
+  $3.LiveStreamRequest ensureServeLiveStream() => $_ensure(51);
 }
 
 class InvocationTarget extends $pb.GeneratedMessage {
@@ -1318,6 +1339,7 @@ enum RuntimeResponse_Outcome {
   providerOriginsConfigured,
   workspaceFetch,
   lawProducts,
+  liveStreamServed,
   notSet
 }
 
@@ -1377,6 +1399,7 @@ class RuntimeResponse extends $pb.GeneratedMessage {
     $7.ProviderOriginsConfigured? providerOriginsConfigured,
     $2.WorkspaceFetch? workspaceFetch,
     $18.ExportLawProductsResponse? lawProducts,
+    $3.LiveStreamAnswer? liveStreamServed,
   }) {
     final result = create();
     if (protocolVersion != null) result.protocolVersion = protocolVersion;
@@ -1457,6 +1480,7 @@ class RuntimeResponse extends $pb.GeneratedMessage {
       result.providerOriginsConfigured = providerOriginsConfigured;
     if (workspaceFetch != null) result.workspaceFetch = workspaceFetch;
     if (lawProducts != null) result.lawProducts = lawProducts;
+    if (liveStreamServed != null) result.liveStreamServed = liveStreamServed;
     return result;
   }
 
@@ -1523,6 +1547,7 @@ class RuntimeResponse extends $pb.GeneratedMessage {
     66: RuntimeResponse_Outcome.providerOriginsConfigured,
     67: RuntimeResponse_Outcome.workspaceFetch,
     68: RuntimeResponse_Outcome.lawProducts,
+    69: RuntimeResponse_Outcome.liveStreamServed,
     0: RuntimeResponse_Outcome.notSet
   };
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
@@ -1582,7 +1607,8 @@ class RuntimeResponse extends $pb.GeneratedMessage {
       65,
       66,
       67,
-      68
+      68,
+      69
     ])
     ..aI(1, _omitFieldNames ? '' : 'protocolVersion',
         fieldType: $pb.PbFieldType.OU3)
@@ -1719,6 +1745,8 @@ class RuntimeResponse extends $pb.GeneratedMessage {
     ..aOM<$18.ExportLawProductsResponse>(
         68, _omitFieldNames ? '' : 'lawProducts',
         subBuilder: $18.ExportLawProductsResponse.create)
+    ..aOM<$3.LiveStreamAnswer>(69, _omitFieldNames ? '' : 'liveStreamServed',
+        subBuilder: $3.LiveStreamAnswer.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
@@ -1792,6 +1820,7 @@ class RuntimeResponse extends $pb.GeneratedMessage {
   @$pb.TagNumber(66)
   @$pb.TagNumber(67)
   @$pb.TagNumber(68)
+  @$pb.TagNumber(69)
   RuntimeResponse_Outcome whichOutcome() =>
       _RuntimeResponse_OutcomeByTag[$_whichOneof(0)]!;
   @$pb.TagNumber(10)
@@ -1846,6 +1875,7 @@ class RuntimeResponse extends $pb.GeneratedMessage {
   @$pb.TagNumber(66)
   @$pb.TagNumber(67)
   @$pb.TagNumber(68)
+  @$pb.TagNumber(69)
   void clearOutcome() => $_clearField($_whichOneof(0));
 
   @$pb.TagNumber(1)
@@ -2469,6 +2499,17 @@ class RuntimeResponse extends $pb.GeneratedMessage {
   void clearLawProducts() => $_clearField(68);
   @$pb.TagNumber(68)
   $18.ExportLawProductsResponse ensureLawProducts() => $_ensure(53);
+
+  @$pb.TagNumber(69)
+  $3.LiveStreamAnswer get liveStreamServed => $_getN(54);
+  @$pb.TagNumber(69)
+  set liveStreamServed($3.LiveStreamAnswer value) => $_setField(69, value);
+  @$pb.TagNumber(69)
+  $core.bool hasLiveStreamServed() => $_has(54);
+  @$pb.TagNumber(69)
+  void clearLiveStreamServed() => $_clearField(69);
+  @$pb.TagNumber(69)
+  $3.LiveStreamAnswer ensureLiveStreamServed() => $_ensure(54);
 }
 
 enum CustodyOfferBatchResponse_Outcome { admission, failure, blocked, notSet }

package/dart_types/lib/src/vo_canonical.dart

@@ -0,0 +1,185 @@
+// NOMOS — Nomos Sovereign: participants act · verify · remember LOCALLY; hosted
+// remotes are replaceable custody/transport, not truth.
+
+/// Value identity for generated value objects — the Dart side of `nomos.vo-canonical.v1` (CAP-853).
+///
+/// The law's definition lives in `dsl/src/value_identity.ts`: RFC 8785 (JCS) over the value the
+/// value object's descriptor admits. A generated class's `toJson()` already IS that typed value
+/// (absent optionals omitted, nullable members `null`, the variant case in `type`), so the Dart side
+/// is the RFC 8785 encoder over it — members in UTF-16 code-unit order, ECMAScript number spelling,
+/// RFC 8785 string escapes — and generated `==` / `hashCode` compare that encoding. One definition
+/// across runtimes: the conformance vectors in `dsl/conformance/vo_canonical.v1.json` are replayed
+/// here (`test/vo_canonical_test.dart`), by the TypeScript suite and by the sealed engine.
+///
+/// Framework-internal: generated code calls [NmsInternalValueIdentity]; it is not exported from the
+/// `nomos_types` barrel. Digests are the law's to derive and store.
+library;
+
+const String nmsVoCanonicalEncoding = 'nomos.vo-canonical.v1';
+
+/// The value-identity operations generated value objects use for `==` and `hashCode`.
+abstract final class NmsInternalValueIdentity {
+  /// The `nomos.vo-canonical.v1` text of a value object's json (`toJson()`).
+  ///
+  /// Throws [ArgumentError] for what the law refuses: NaN or Infinity, an integer outside the
+  /// exact JavaScript range, a string that is not well-formed UTF-16, or a non-json value.
+  static String canonical(Object? json) {
+    final out = StringBuffer();
+    _write(out, json, strict: true, at: 'value');
+    return out.toString();
+  }
+
+  /// Value equality of two value objects' json over the canonical encoding.
+  ///
+  /// Total: a value the law would refuse (NaN, a lone surrogate) still compares, by a spelling
+  /// that never collides with an admissible value's canonical text.
+  static bool equals(Object? a, Object? b) => _lenient(a) == _lenient(b);
+
+  /// A hash consistent with [equals].
+  static int hash(Object? json) => _lenient(json).hashCode;
+}
+
+String _lenient(Object? json) {
+  final out = StringBuffer();
+  _write(out, json, strict: false, at: 'value');
+  return out.toString();
+}
+
+void _write(StringBuffer out, Object? v,
+    {required bool strict, required String at}) {
+  if (v == null) {
+    out.write('null');
+  } else if (v is bool) {
+    out.write(v ? 'true' : 'false');
+  } else if (v is num) {
+    out.write(_number(v, strict: strict, at: at));
+  } else if (v is String) {
+    _string(out, v, strict: strict, at: at);
+  } else if (v is List) {
+    out.write('[');
+    for (var i = 0; i < v.length; i++) {
+      if (i > 0) out.write(',');
+      _write(out, v[i], strict: strict, at: '$at[$i]');
+    }
+    out.write(']');
+  } else if (v is Map) {
+    final keys = v.keys.map((k) {
+      if (k is! String)
+        throw ArgumentError(
+            '$nmsVoCanonicalEncoding: $at has a non-string member name');
+      return k;
+    }).toList()
+      // String.compareTo orders by UTF-16 code units, as RFC 8785 §3.2.3 requires.
+      ..sort();
+    out.write('{');
+    var first = true;
+    for (final k in keys) {
+      if (!first) out.write(',');
+      first = false;
+      _string(out, k, strict: strict, at: '$at member name');
+      out.write(':');
+      _write(out, v[k], strict: strict, at: '$at.$k');
+    }
+    out.write('}');
+  } else {
+    throw ArgumentError(
+        '$nmsVoCanonicalEncoding: $at is a ${v.runtimeType}, which json cannot carry');
+  }
+}
+
+const int _maxSafeInteger = 9007199254740991;
+
+/// On the web every number is a JavaScript double, so an integral double also `is int`.
+const bool _numbersAreDoubles = identical(1, 1.0);
+
+/// ECMAScript Number::toString — the RFC 8785 number spelling — for a Dart [num].
+String _number(num v, {required bool strict, required String at}) {
+  if (v is int && !(_numbersAreDoubles && v.abs() > _maxSafeInteger)) {
+    if (v.abs() > _maxSafeInteger) {
+      if (strict) {
+        throw ArgumentError(
+            '$nmsVoCanonicalEncoding: $at is an integer outside the exact JavaScript range');
+      }
+      return 'int:$v';
+    }
+    return v.toString();
+  }
+  final d = v.toDouble();
+  if (d.isNaN || d.isInfinite) {
+    if (strict) {
+      throw ArgumentError(
+          '$nmsVoCanonicalEncoding: $at is not a finite number (NaN and Infinity have no canonical form)');
+    }
+    return 'nonfinite:$d';
+  }
+  if (d == 0) return '0'; // -0 too
+  if (d < 0) return '-${_number(-d, strict: strict, at: at)}';
+  // The shortest round-trip digits and the exponent, from Dart's own shortest representation.
+  final exponential = d.toStringAsExponential(); // e.g. "1.2345e+2", "5e-324"
+  final eIndex = exponential.indexOf('e');
+  final digits = exponential.substring(0, eIndex).replaceAll('.', '');
+  final k = digits.length;
+  final n = int.parse(exponential.substring(eIndex + 1)) +
+      1; // value = 0.digits × 10^n
+  if (k <= n && n <= 21) return digits + '0' * (n - k);
+  if (0 < n && n <= 21)
+    return '${digits.substring(0, n)}.${digits.substring(n)}';
+  if (-6 < n && n <= 0) return '0.${'0' * -n}$digits';
+  final e = n - 1;
+  final exponent = e < 0 ? '-${-e}' : '+$e';
+  return k == 1
+      ? '${digits}e$exponent'
+      : '${digits[0]}.${digits.substring(1)}e$exponent';
+}
+
+void _string(StringBuffer out, String s,
+    {required bool strict, required String at}) {
+  out.write('"');
+  for (var i = 0; i < s.length; i++) {
+    final c = s.codeUnitAt(i);
+    if (c >= 0xd800 && c <= 0xdbff) {
+      final next = i + 1 < s.length ? s.codeUnitAt(i + 1) : -1;
+      if (next >= 0xdc00 && next <= 0xdfff) {
+        out.writeCharCode(c);
+        out.writeCharCode(next);
+        i++;
+        continue;
+      }
+      if (strict)
+        throw ArgumentError(
+            '$nmsVoCanonicalEncoding: $at is not well-formed UTF-16 (a lone high surrogate)');
+      out.write('\\u${c.toRadixString(16)}');
+      continue;
+    }
+    if (c >= 0xdc00 && c <= 0xdfff) {
+      if (strict)
+        throw ArgumentError(
+            '$nmsVoCanonicalEncoding: $at is not well-formed UTF-16 (a lone low surrogate)');
+      out.write('\\u${c.toRadixString(16)}');
+      continue;
+    }
+    switch (c) {
+      case 0x22:
+        out.write(r'\"');
+      case 0x5c:
+        out.write(r'\\');
+      case 0x08:
+        out.write(r'\b');
+      case 0x0c:
+        out.write(r'\f');
+      case 0x0a:
+        out.write(r'\n');
+      case 0x0d:
+        out.write(r'\r');
+      case 0x09:
+        out.write(r'\t');
+      default:
+        if (c < 0x20) {
+          out.write('\\u00${c.toRadixString(16).padLeft(2, '0')}');
+        } else {
+          out.writeCharCode(c);
+        }
+    }
+  }
+  out.write('"');
+}

package/dart_types/pubspec.lock

@@ -74,7 +74,7 @@ packages:
     source: hosted
     version: "1.15.1"
   crypto:
-    dependency: transitive
+    dependency: "direct dev"
     description:
       name: crypto
       sha256: c8ea0233063ba03258fbcf2ca4d6dadfefe14f02fab57702265467a19f27fadf

package/dart_types/pubspec.yaml

@@ -9,7 +9,7 @@ description: >-
   Pure kernel wire/data types for Nomos Dart frontends — no transport, no bridge,
   no runtime. Typed protobuf and USDA boundary values plus the offer codec,
   reactive read engine, schema validation, and data-only error/trace types.
-version: 0.13.0
+version: 0.15.0
 
 environment:
   sdk: ^3.5.0
@@ -20,4 +20,6 @@ dependencies:
   fixnum: ^1.1.1
 
 dev_dependencies:
+  # The value-identity conformance test checks vector digests (test/vo_canonical_test.dart).
+  crypto: ^3.0.0
   test: ^1.25.0

package/dart_types/test/vo_canonical_test.dart

@@ -0,0 +1,91 @@
+// `nomos.vo-canonical.v1` (CAP-853): the Dart encoder replays the law's conformance vectors —
+// dsl/conformance/vo_canonical.v1.json, shared with the TypeScript suite and the sealed engine.
+import 'dart:convert';
+import 'dart:io';
+import 'dart:typed_data';
+
+import 'package:crypto/crypto.dart' show sha256;
+import 'package:nomos_types/src/vo_canonical.dart';
+import 'package:test/test.dart';
+
+void main() {
+  final file =
+      jsonDecode(File('../conformance/vo_canonical.v1.json').readAsStringSync())
+          as Map<String, Object?>;
+
+  test('names the same encoding', () {
+    expect(file['encoding'], nmsVoCanonicalEncoding);
+  });
+
+  test('spells every RFC 8785 Appendix B number exactly', () {
+    for (final n in (file['numbers']! as List).cast<Map<String, Object?>>()) {
+      final bits = BigInt.parse(n['bits']! as String, radix: 16);
+      final bytes = ByteData(8)
+        ..setUint32(0, (bits >> 32).toInt())
+        ..setUint32(4, (bits & BigInt.from(0xffffffff)).toInt());
+      expect(NmsInternalValueIdentity.canonical(bytes.getFloat64(0)),
+          n['canonical'],
+          reason: n['bits'] as String);
+    }
+  });
+
+  test('encodes and digests every vector', () {
+    for (final v in (file['vectors']! as List).cast<Map<String, Object?>>()) {
+      expect(NmsInternalValueIdentity.canonical(v['value']), v['canonical'],
+          reason: v['name'] as String);
+      expect(
+          sha256
+              .convert(
+                  utf8.encode(NmsInternalValueIdentity.canonical(v['value'])))
+              .toString(),
+          v['sha256'],
+          reason: v['name'] as String);
+    }
+  });
+
+  test('judges equality like the law', () {
+    for (final e
+        in (file['equalities']! as List).cast<Map<String, Object?>>()) {
+      expect(NmsInternalValueIdentity.equals(e['a'], e['b']), e['equal'],
+          reason: e['name'] as String);
+      if (e['equal'] == true)
+        expect(NmsInternalValueIdentity.hash(e['a']),
+            NmsInternalValueIdentity.hash(e['b']),
+            reason: e['name'] as String);
+    }
+  });
+
+  test('refuses what the law refuses without a descriptor', () {
+    for (final r in (file['refusals']! as List)
+        .cast<Map<String, Object?>>()
+        .where((r) => r['generic'] == true)) {
+      expect(() => NmsInternalValueIdentity.canonical(r['value']),
+          throwsArgumentError,
+          reason: r['name'] as String);
+      // Equality stays total: a refused value still compares, and never equals an admissible one.
+      expect(NmsInternalValueIdentity.equals(r['value'], r['value']), isTrue);
+    }
+    for (final bad in [
+      double.nan,
+      double.infinity,
+      double.negativeInfinity,
+      9007199254740992
+    ]) {
+      expect(() => NmsInternalValueIdentity.canonical({'x': bad}),
+          throwsArgumentError,
+          reason: '$bad');
+    }
+    expect(
+        NmsInternalValueIdentity.equals({'x': double.nan}, {'x': double.nan}),
+        isTrue);
+  });
+
+  test('a double read back integral is the same value as the authored int', () {
+    expect(
+        NmsInternalValueIdentity.equals(
+            {'x': 2, 'y': -0.0}, {'y': 0, 'x': 2.0}),
+        isTrue);
+    expect(NmsInternalValueIdentity.hash({'x': 2, 'y': -0.0}),
+        NmsInternalValueIdentity.hash({'y': 0, 'x': 2.0}));
+  });
+}