@githolon/dsl 0.119.9 → 0.119.12

package/dart_types/lib/src/proto/nomos/runtime/v2/residency_desk.pb.dart

@@ -1432,6 +1432,7 @@ class HostHealth extends $pb.GeneratedMessage {
     ArtifactsTransportSnapshot? artifacts,
     $core.Iterable<RetentionOutcomeCounter>? retention,
     $core.Iterable<CorrespondenceHold>? correspondenceHolds,
+    KernelIngressSnapshot? ingress,
   }) {
     final result = create();
     if (replica != null) result.replica = replica;
@@ -1448,6 +1449,7 @@ class HostHealth extends $pb.GeneratedMessage {
     if (retention != null) result.retention.addAll(retention);
     if (correspondenceHolds != null)
       result.correspondenceHolds.addAll(correspondenceHolds);
+    if (ingress != null) result.ingress = ingress;
     return result;
   }
 
@@ -1485,6 +1487,8 @@ class HostHealth extends $pb.GeneratedMessage {
         subBuilder: RetentionOutcomeCounter.create)
     ..pPM<CorrespondenceHold>(12, _omitFieldNames ? '' : 'correspondenceHolds',
         subBuilder: CorrespondenceHold.create)
+    ..aOM<KernelIngressSnapshot>(13, _omitFieldNames ? '' : 'ingress',
+        subBuilder: KernelIngressSnapshot.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
@@ -1605,6 +1609,240 @@ class HostHealth extends $pb.GeneratedMessage {
   /// letter is actually waiting on, which is what lets it become event driven.
   @$pb.TagNumber(12)
   $pb.PbList<CorrespondenceHold> get correspondenceHolds => $_getList(11);
+
+  /// Requests waiting for the dedicated kernel execution thread. A full ingress refuses new calls
+  /// (callers retry), so this shows how close a host is to refusing. Absent from an older host.
+  @$pb.TagNumber(13)
+  KernelIngressSnapshot get ingress => $_getN(12);
+  @$pb.TagNumber(13)
+  set ingress(KernelIngressSnapshot value) => $_setField(13, value);
+  @$pb.TagNumber(13)
+  $core.bool hasIngress() => $_has(12);
+  @$pb.TagNumber(13)
+  void clearIngress() => $_clearField(13);
+  @$pb.TagNumber(13)
+  KernelIngressSnapshot ensureIngress() => $_ensure(12);
+}
+
+class KernelIngressSnapshot extends $pb.GeneratedMessage {
+  factory KernelIngressSnapshot({
+    $core.int? pending,
+    $fixnum.Int64? bytes,
+    $core.int? maxPending,
+    $fixnum.Int64? maxBytes,
+    $core.double? fillPercent,
+    $core.double? peakFillPercent,
+    $fixnum.Int64? refusals,
+    $core.int? posted,
+    $core.int? waitingForeground,
+    $core.int? waitingBackground,
+    $core.int? inFlightWindow,
+    $fixnum.Int64? abandoned,
+    $fixnum.Int64? lawImportsDeduplicated,
+  }) {
+    final result = create();
+    if (pending != null) result.pending = pending;
+    if (bytes != null) result.bytes = bytes;
+    if (maxPending != null) result.maxPending = maxPending;
+    if (maxBytes != null) result.maxBytes = maxBytes;
+    if (fillPercent != null) result.fillPercent = fillPercent;
+    if (peakFillPercent != null) result.peakFillPercent = peakFillPercent;
+    if (refusals != null) result.refusals = refusals;
+    if (posted != null) result.posted = posted;
+    if (waitingForeground != null) result.waitingForeground = waitingForeground;
+    if (waitingBackground != null) result.waitingBackground = waitingBackground;
+    if (inFlightWindow != null) result.inFlightWindow = inFlightWindow;
+    if (abandoned != null) result.abandoned = abandoned;
+    if (lawImportsDeduplicated != null)
+      result.lawImportsDeduplicated = lawImportsDeduplicated;
+    return result;
+  }
+
+  KernelIngressSnapshot._();
+
+  factory KernelIngressSnapshot.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory KernelIngressSnapshot.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'KernelIngressSnapshot',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aI(1, _omitFieldNames ? '' : 'pending', fieldType: $pb.PbFieldType.OU3)
+    ..a<$fixnum.Int64>(2, _omitFieldNames ? '' : 'bytes', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..aI(3, _omitFieldNames ? '' : 'maxPending', fieldType: $pb.PbFieldType.OU3)
+    ..a<$fixnum.Int64>(
+        4, _omitFieldNames ? '' : 'maxBytes', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..aD(5, _omitFieldNames ? '' : 'fillPercent')
+    ..aD(6, _omitFieldNames ? '' : 'peakFillPercent')
+    ..a<$fixnum.Int64>(
+        7, _omitFieldNames ? '' : 'refusals', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..aI(8, _omitFieldNames ? '' : 'posted', fieldType: $pb.PbFieldType.OU3)
+    ..aI(9, _omitFieldNames ? '' : 'waitingForeground',
+        fieldType: $pb.PbFieldType.OU3)
+    ..aI(10, _omitFieldNames ? '' : 'waitingBackground',
+        fieldType: $pb.PbFieldType.OU3)
+    ..aI(11, _omitFieldNames ? '' : 'inFlightWindow',
+        fieldType: $pb.PbFieldType.OU3)
+    ..a<$fixnum.Int64>(
+        12, _omitFieldNames ? '' : 'abandoned', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(13, _omitFieldNames ? '' : 'lawImportsDeduplicated',
+        $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  KernelIngressSnapshot clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  KernelIngressSnapshot copyWith(
+          void Function(KernelIngressSnapshot) updates) =>
+      super.copyWith((message) => updates(message as KernelIngressSnapshot))
+          as KernelIngressSnapshot;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static KernelIngressSnapshot create() => KernelIngressSnapshot._();
+  @$core.override
+  KernelIngressSnapshot createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static KernelIngressSnapshot getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<KernelIngressSnapshot>(create);
+  static KernelIngressSnapshot? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.int get pending => $_getIZ(0);
+  @$pb.TagNumber(1)
+  set pending($core.int value) => $_setUnsignedInt32(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasPending() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearPending() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $fixnum.Int64 get bytes => $_getI64(1);
+  @$pb.TagNumber(2)
+  set bytes($fixnum.Int64 value) => $_setInt64(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasBytes() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearBytes() => $_clearField(2);
+
+  @$pb.TagNumber(3)
+  $core.int get maxPending => $_getIZ(2);
+  @$pb.TagNumber(3)
+  set maxPending($core.int value) => $_setUnsignedInt32(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasMaxPending() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearMaxPending() => $_clearField(3);
+
+  @$pb.TagNumber(4)
+  $fixnum.Int64 get maxBytes => $_getI64(3);
+  @$pb.TagNumber(4)
+  set maxBytes($fixnum.Int64 value) => $_setInt64(3, value);
+  @$pb.TagNumber(4)
+  $core.bool hasMaxBytes() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearMaxBytes() => $_clearField(4);
+
+  /// The closer of the two limits right now, in percent.
+  @$pb.TagNumber(5)
+  $core.double get fillPercent => $_getN(4);
+  @$pb.TagNumber(5)
+  set fillPercent($core.double value) => $_setDouble(4, value);
+  @$pb.TagNumber(5)
+  $core.bool hasFillPercent() => $_has(4);
+  @$pb.TagNumber(5)
+  void clearFillPercent() => $_clearField(5);
+
+  /// The highest fill over the last 15 to 30 s, so a surge between two reads still shows.
+  @$pb.TagNumber(6)
+  $core.double get peakFillPercent => $_getN(5);
+  @$pb.TagNumber(6)
+  set peakFillPercent($core.double value) => $_setDouble(5, value);
+  @$pb.TagNumber(6)
+  $core.bool hasPeakFillPercent() => $_has(5);
+  @$pb.TagNumber(6)
+  void clearPeakFillPercent() => $_clearField(6);
+
+  /// Calls refused because the ingress was full, since the process started.
+  @$pb.TagNumber(7)
+  $fixnum.Int64 get refusals => $_getI64(6);
+  @$pb.TagNumber(7)
+  set refusals($fixnum.Int64 value) => $_setInt64(6, value);
+  @$pb.TagNumber(7)
+  $core.bool hasRefusals() => $_has(6);
+  @$pb.TagNumber(7)
+  void clearRefusals() => $_clearField(7);
+
+  /// Calls posted to the kernel worker right now (at most in_flight_window), and calls waiting in the
+  /// HTTP thread per lane; pending is their sum (CAP-967).
+  @$pb.TagNumber(8)
+  $core.int get posted => $_getIZ(7);
+  @$pb.TagNumber(8)
+  set posted($core.int value) => $_setUnsignedInt32(7, value);
+  @$pb.TagNumber(8)
+  $core.bool hasPosted() => $_has(7);
+  @$pb.TagNumber(8)
+  void clearPosted() => $_clearField(8);
+
+  @$pb.TagNumber(9)
+  $core.int get waitingForeground => $_getIZ(8);
+  @$pb.TagNumber(9)
+  set waitingForeground($core.int value) => $_setUnsignedInt32(8, value);
+  @$pb.TagNumber(9)
+  $core.bool hasWaitingForeground() => $_has(8);
+  @$pb.TagNumber(9)
+  void clearWaitingForeground() => $_clearField(9);
+
+  @$pb.TagNumber(10)
+  $core.int get waitingBackground => $_getIZ(9);
+  @$pb.TagNumber(10)
+  set waitingBackground($core.int value) => $_setUnsignedInt32(9, value);
+  @$pb.TagNumber(10)
+  $core.bool hasWaitingBackground() => $_has(9);
+  @$pb.TagNumber(10)
+  void clearWaitingBackground() => $_clearField(10);
+
+  @$pb.TagNumber(11)
+  $core.int get inFlightWindow => $_getIZ(10);
+  @$pb.TagNumber(11)
+  set inFlightWindow($core.int value) => $_setUnsignedInt32(10, value);
+  @$pb.TagNumber(11)
+  $core.bool hasInFlightWindow() => $_has(10);
+  @$pb.TagNumber(11)
+  void clearInFlightWindow() => $_clearField(11);
+
+  /// Waiting calls dropped because their caller disconnected before they were posted, since the process started.
+  @$pb.TagNumber(12)
+  $fixnum.Int64 get abandoned => $_getI64(11);
+  @$pb.TagNumber(12)
+  set abandoned($fixnum.Int64 value) => $_setInt64(11, value);
+  @$pb.TagNumber(12)
+  $core.bool hasAbandoned() => $_has(11);
+  @$pb.TagNumber(12)
+  void clearAbandoned() => $_clearField(12);
+
+  /// Law-product imports answered from products this host already held, or was importing, without
+  /// entering the kernel, since the process started.
+  @$pb.TagNumber(13)
+  $fixnum.Int64 get lawImportsDeduplicated => $_getI64(12);
+  @$pb.TagNumber(13)
+  set lawImportsDeduplicated($fixnum.Int64 value) => $_setInt64(12, value);
+  @$pb.TagNumber(13)
+  $core.bool hasLawImportsDeduplicated() => $_has(12);
+  @$pb.TagNumber(13)
+  void clearLawImportsDeduplicated() => $_clearField(13);
 }
 
 /// Cumulative counters for one (operation, outcome) pair of provider Git HTTP requests.

package/dart_types/lib/src/proto/nomos/runtime/v2/runtime.pb.dart

@@ -86,6 +86,7 @@ enum RuntimeRequest_Command {
   fetchWorkspace,
   provideLawProducts,
   serveLiveStream,
+  networkRestored,
   notSet
 }
 
@@ -147,6 +148,7 @@ class RuntimeRequest extends $pb.GeneratedMessage {
     $2.FetchWorkspaceRequest? fetchWorkspace,
     $2.ProvideLawProductsRequest? provideLawProducts,
     $3.LiveStreamRequest? serveLiveStream,
+    $3.NetworkRestoredRequest? networkRestored,
   }) {
     final result = create();
     if (protocolVersion != null) result.protocolVersion = protocolVersion;
@@ -226,6 +228,7 @@ class RuntimeRequest extends $pb.GeneratedMessage {
     if (provideLawProducts != null)
       result.provideLawProducts = provideLawProducts;
     if (serveLiveStream != null) result.serveLiveStream = serveLiveStream;
+    if (networkRestored != null) result.networkRestored = networkRestored;
     return result;
   }
 
@@ -288,6 +291,7 @@ class RuntimeRequest extends $pb.GeneratedMessage {
     63: RuntimeRequest_Command.fetchWorkspace,
     64: RuntimeRequest_Command.provideLawProducts,
     65: RuntimeRequest_Command.serveLiveStream,
+    66: RuntimeRequest_Command.networkRestored,
     0: RuntimeRequest_Command.notSet
   };
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
@@ -343,7 +347,8 @@ class RuntimeRequest extends $pb.GeneratedMessage {
       62,
       63,
       64,
-      65
+      65,
+      66
     ])
     ..aI(1, _omitFieldNames ? '' : 'protocolVersion',
         fieldType: $pb.PbFieldType.OU3)
@@ -483,6 +488,9 @@ class RuntimeRequest extends $pb.GeneratedMessage {
         subBuilder: $2.ProvideLawProductsRequest.create)
     ..aOM<$3.LiveStreamRequest>(65, _omitFieldNames ? '' : 'serveLiveStream',
         subBuilder: $3.LiveStreamRequest.create)
+    ..aOM<$3.NetworkRestoredRequest>(
+        66, _omitFieldNames ? '' : 'networkRestored',
+        subBuilder: $3.NetworkRestoredRequest.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
@@ -552,6 +560,7 @@ class RuntimeRequest extends $pb.GeneratedMessage {
   @$pb.TagNumber(63)
   @$pb.TagNumber(64)
   @$pb.TagNumber(65)
+  @$pb.TagNumber(66)
   RuntimeRequest_Command whichCommand() =>
       _RuntimeRequest_CommandByTag[$_whichOneof(0)]!;
   @$pb.TagNumber(10)
@@ -602,6 +611,7 @@ class RuntimeRequest extends $pb.GeneratedMessage {
   @$pb.TagNumber(63)
   @$pb.TagNumber(64)
   @$pb.TagNumber(65)
+  @$pb.TagNumber(66)
   void clearCommand() => $_clearField($_whichOneof(0));
 
   @$pb.TagNumber(1)
@@ -1217,6 +1227,17 @@ class RuntimeRequest extends $pb.GeneratedMessage {
   void clearServeLiveStream() => $_clearField(65);
   @$pb.TagNumber(65)
   $3.LiveStreamRequest ensureServeLiveStream() => $_ensure(51);
+
+  @$pb.TagNumber(66)
+  $3.NetworkRestoredRequest get networkRestored => $_getN(52);
+  @$pb.TagNumber(66)
+  set networkRestored($3.NetworkRestoredRequest value) => $_setField(66, value);
+  @$pb.TagNumber(66)
+  $core.bool hasNetworkRestored() => $_has(52);
+  @$pb.TagNumber(66)
+  void clearNetworkRestored() => $_clearField(66);
+  @$pb.TagNumber(66)
+  $3.NetworkRestoredRequest ensureNetworkRestored() => $_ensure(52);
 }
 
 class InvocationTarget extends $pb.GeneratedMessage {
@@ -1340,6 +1361,7 @@ enum RuntimeResponse_Outcome {
   workspaceFetch,
   lawProducts,
   liveStreamServed,
+  networkRestored,
   notSet
 }
 
@@ -1400,6 +1422,7 @@ class RuntimeResponse extends $pb.GeneratedMessage {
     $2.WorkspaceFetch? workspaceFetch,
     $18.ExportLawProductsResponse? lawProducts,
     $3.LiveStreamAnswer? liveStreamServed,
+    $3.NetworkRestored? networkRestored,
   }) {
     final result = create();
     if (protocolVersion != null) result.protocolVersion = protocolVersion;
@@ -1481,6 +1504,7 @@ class RuntimeResponse extends $pb.GeneratedMessage {
     if (workspaceFetch != null) result.workspaceFetch = workspaceFetch;
     if (lawProducts != null) result.lawProducts = lawProducts;
     if (liveStreamServed != null) result.liveStreamServed = liveStreamServed;
+    if (networkRestored != null) result.networkRestored = networkRestored;
     return result;
   }
 
@@ -1548,6 +1572,7 @@ class RuntimeResponse extends $pb.GeneratedMessage {
     67: RuntimeResponse_Outcome.workspaceFetch,
     68: RuntimeResponse_Outcome.lawProducts,
     69: RuntimeResponse_Outcome.liveStreamServed,
+    70: RuntimeResponse_Outcome.networkRestored,
     0: RuntimeResponse_Outcome.notSet
   };
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
@@ -1608,7 +1633,8 @@ class RuntimeResponse extends $pb.GeneratedMessage {
       66,
       67,
       68,
-      69
+      69,
+      70
     ])
     ..aI(1, _omitFieldNames ? '' : 'protocolVersion',
         fieldType: $pb.PbFieldType.OU3)
@@ -1747,6 +1773,8 @@ class RuntimeResponse extends $pb.GeneratedMessage {
         subBuilder: $18.ExportLawProductsResponse.create)
     ..aOM<$3.LiveStreamAnswer>(69, _omitFieldNames ? '' : 'liveStreamServed',
         subBuilder: $3.LiveStreamAnswer.create)
+    ..aOM<$3.NetworkRestored>(70, _omitFieldNames ? '' : 'networkRestored',
+        subBuilder: $3.NetworkRestored.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
@@ -1821,6 +1849,7 @@ class RuntimeResponse extends $pb.GeneratedMessage {
   @$pb.TagNumber(67)
   @$pb.TagNumber(68)
   @$pb.TagNumber(69)
+  @$pb.TagNumber(70)
   RuntimeResponse_Outcome whichOutcome() =>
       _RuntimeResponse_OutcomeByTag[$_whichOneof(0)]!;
   @$pb.TagNumber(10)
@@ -1876,6 +1905,7 @@ class RuntimeResponse extends $pb.GeneratedMessage {
   @$pb.TagNumber(67)
   @$pb.TagNumber(68)
   @$pb.TagNumber(69)
+  @$pb.TagNumber(70)
   void clearOutcome() => $_clearField($_whichOneof(0));
 
   @$pb.TagNumber(1)
@@ -2510,6 +2540,17 @@ class RuntimeResponse extends $pb.GeneratedMessage {
   void clearLiveStreamServed() => $_clearField(69);
   @$pb.TagNumber(69)
   $3.LiveStreamAnswer ensureLiveStreamServed() => $_ensure(54);
+
+  @$pb.TagNumber(70)
+  $3.NetworkRestored get networkRestored => $_getN(55);
+  @$pb.TagNumber(70)
+  set networkRestored($3.NetworkRestored value) => $_setField(70, value);
+  @$pb.TagNumber(70)
+  $core.bool hasNetworkRestored() => $_has(55);
+  @$pb.TagNumber(70)
+  void clearNetworkRestored() => $_clearField(70);
+  @$pb.TagNumber(70)
+  $3.NetworkRestored ensureNetworkRestored() => $_ensure(55);
 }
 
 enum CustodyOfferBatchResponse_Outcome { admission, failure, blocked, notSet }

package/dart_types/pubspec.yaml

@@ -9,7 +9,7 @@ description: >-
   Pure kernel wire/data types for Nomos Dart frontends — no transport, no bridge,
   no runtime. Typed protobuf and USDA boundary values plus the offer codec,
   reactive read engine, schema validation, and data-only error/trace types.
-version: 0.15.2
+version: 0.15.3
 
 environment:
   sdk: ^3.5.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@githolon/dsl",
-  "version": "0.119.9",
+  "version": "0.119.12",
   "type": "module",
   "sideEffects": false,
   "description": "Nomos 2 domain-authoring DSL: aggregates + directives in TS, executed and encoded to the Rust kernel's wire shapes.",
@@ -82,7 +82,7 @@
     "test": "vitest run"
   },
   "dependencies": {
-    "@githolon/runtime": "^0.119.9",
+    "@githolon/runtime": "^0.119.12",
     "@bufbuild/protobuf": "^2.13.0",
     "@bufbuild/protoc-gen-es": "^2.13.0",
     "esbuild": "0.24.2",

package/src/business_birth.ts

@@ -120,8 +120,16 @@ const FOUNDING_GRANTOR = "genesis";
  * inherited-governance step re-seated that same leaf as {@link INHERITED_SIGNER_GRANTOR} when P was also
  * an inherited operator or enroller, has no `genesis` key left; there the key is P's one
  * inheritance-granted signer instead. Current law never rewrites the founding leaf
- * (`inheritedGovernanceStepFrom` skips it), so its founders keep exactly one `genesis` key. Anything
- * else — no founding admin grant, or not exactly one such key — is not a founded parent of P.
+ * (`inheritedGovernanceStepFrom` skips it), so its founders keep exactly one `genesis` key.
+ *
+ * A signer leaf is an Lww entry, so its grantor is only the LAST writer: when an enroller enrols the
+ * founding key again (`enrollDevice`) the leaf stops saying `genesis`, and when the founder revokes the
+ * founding device the leaf stops being active. Either way neither rule above finds a key, and every
+ * birth of a parent P founded used to fall onto the certificate lane, which a founded parent cannot
+ * satisfy (CAP-957). P is still the founder — the admin grant above is the founding step's and nothing
+ * else writes it — so the child is founded with a key P holds now: the lowest of P's active signer keys,
+ * so the recipe stays a pure function of the tuple set. Anything else — no founding admin grant, several
+ * `genesis` or several inherited keys, or no active key at all — is not a founded parent of P.
  */
 function foundedBirthKeyHash(principal: string): string | undefined {
   const adminRow = readFrameworkDeclaredRows(relationTuplesByObject, RelationTuple, { object: "workspace:self" })
@@ -131,15 +139,17 @@ function foundedBirthKeyHash(principal: string): string | undefined {
   const rows = readFrameworkDeclaredRows(relationTuplesByObject, RelationTuple, { object: signerObject(principal) });
   const row = rows.find((candidate) => candidate.relation === SIGNER_RELATION);
   const subjects = row?.subjects as Record<string, { status?: string; grantedBy?: string }> | undefined;
-  const keysGrantedBy = (grantor: string) => Object.entries(subjects ?? {})
+  const activeKeys = (grantor?: string) => Object.entries(subjects ?? {})
     .filter(([subject, leaf]) =>
-      leaf?.status === "active" && leaf.grantedBy === grantor && /^key:[0-9a-f]{64}$/.test(subject))
+      leaf?.status === "active" && (grantor === undefined || leaf.grantedBy === grantor) &&
+      /^key:[0-9a-f]{64}$/.test(subject))
     .map(([subject]) => subject.slice("key:".length))
     .sort();
-  const genesis = keysGrantedBy(FOUNDING_GRANTOR);
+  const genesis = activeKeys(FOUNDING_GRANTOR);
   if (genesis.length > 0) return genesis.length === 1 ? genesis[0] : undefined;
-  const inherited = keysGrantedBy(INHERITED_SIGNER_GRANTOR);
-  return inherited.length === 1 ? inherited[0] : undefined;
+  const inherited = activeKeys(INHERITED_SIGNER_GRANTOR);
+  if (inherited.length > 0) return inherited.length === 1 ? inherited[0] : undefined;
+  return activeKeys()[0];
 }
 
 /** @internal Compiler-only domain enumeration. It carries no allowance or authority. */

package/src/compile_package_main.ts

@@ -2587,12 +2587,12 @@ const dartTypesImportFor = (generatedSource: string): string => {
  *  just the floor generated code needs — a lagging pin forces tenants into dependency_overrides. */
 // 0.3.0: SurfacedValue<T>/SurfacedObservation/PendingConflictRow — generated Surfaced-field typing +
 //        the pendingConflicts read rows.
-const NOMOS_TYPES_DEP = "^0.15.2";
+const NOMOS_TYPES_DEP = "^0.15.3";
 // 0.48.x: session-bound clients (XClient.bind/NomosClientInterface/DomainClientSessionMismatch/
 //         DomainNotInstalledForSession, engine.follow, pendingConflicts lanes) — the generated client
 //         REQUIRES this surface. 0.48.1 fixes NomosSession.watchPendingConflicts delegation.
-const NOMOS_CLIENT_DEP = "^0.70.10";
-const NOMOS_FLUTTER_DEP = "^0.69.0";
+const NOMOS_CLIENT_DEP = "^0.70.12";
+const NOMOS_FLUTTER_DEP = "^0.69.2";
 // DRIFT TRIPWIRE: pubspec_pins.test.ts asserts these equal the CURRENT versions in the Dart and Flutter
 // package pubspecs — a release without this bump fails the suite, so tenants never
 // land back in dependency_overrides (the exact co2 report this closes, third occurrence).
@@ -3930,6 +3930,9 @@ function emitDartPackages(
     ...(perDomain.length > 1
       ? [
           `export 'package:nomos_client/src/application_status.dart' show ApplicationStatus, ApplicationStatusPhase;`,
+          // Read-only value types ApplicationStatus's public constructor refers to, so a shell or a
+          // test can build a status without importing nomos_client/src.
+          `export 'package:nomos_client/src/sync_status_projection.dart' show CustodianWarmingPosture, LocalCopyReadiness, UnsharedSyncWork, WorkspaceFollowPhase, WorkspaceFollowStatus;`,
           `export '${genRel}/${packageApplicationFile}.dart' show ${dartApplicationClassName(
             describePackageName
           )}${