@githolon/dsl 0.58.0 → 0.58.1

package/dart/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.37.1
+
+- Doc fix: `NomosBridge.attestedRead` docs now match the runtime — the call answers `{ entry: {queryId, result, attestation: …} }`; pass `result['entry']` as one `offerDirective` `attestations` element.
+
 ## 0.32.0
 
 - SPATIAL READS: `NomosBbox` + `NomosBridge.spatialWithin(spatialId, bbox)` + `watchSpatial(...)` — the R*Tree probe surfaces on the bridge; generated clients (tooling ≥0.46) emit typed `sitesByBounds({required NomosBbox bbox})` + watch accessors.

package/dart/lib/src/webview_bridge.dart

@@ -1191,14 +1191,13 @@ class NomosBridge {
   /// ATTESTED READ — serve + SIGN a declared query over a COLOCATED source session's certified fold (the
   /// dynamic-source trust lane; architecture/dynamic_source_attested_reads.md). In a [NomosTestHarness.cluster]
   /// (one engine plane, many sessions) this fulfils the read IN-PROCESS from the [from] session and returns
-  /// the signed envelope `{ ok, rows, attestation:{ source_genesis, … } }` — hand it back as an
-  /// [offerDirective] `attestations` element, or read `attestation.source_genesis` to enrol the source in a
-  /// reader's allow-list. [args] are the query params. [session] is the caller/reader session (defaults to
-  /// this view's bound session).
+  /// `{ entry: {queryId, result, attestation:{source_genesis, public_key, …}} }` — pass `result['entry']`
+  /// (the whole entry map) as one [offerDirective] `attestations` element, or read
+  /// `entry['attestation']['source_genesis']` to enrol the source in a reader's allow-list. [args] are the
+  /// query params. [session] is the caller/reader session (defaults to this view's bound session).
   /// [attestorSecret] is the source's base64 read-attestor secret (from [authorKeygen]); when omitted the
   /// source session's connect-time `authorSecret` signs. [nowMs] stamps the freshness clock (defaults to the
-  /// source's own clock). The returned `entry` is `{queryId, result, attestation:{source_genesis, public_key,
-  /// …}}` — pass the whole `entry` as one [offerDirective] `attestations` element.
+  /// source's own clock).
   Future<Map<String, Object?>> attestedRead({
     required String from,
     required String queryId,

package/dart/pubspec.yaml

@@ -11,7 +11,7 @@ description: >-
   Nomos 2 Dart frontend types — the hand-written kernel wire types plus the
   code-generated per-domain aggregate + directive-payload types. (De)serializes
   the EXACT serde JSON the Rust kernel + projection produce/consume.
-version: 0.37.0
+version: 0.37.1
 
 environment:
   sdk: ^3.5.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@githolon/dsl",
-  "version": "0.58.0",
+  "version": "0.58.1",
   "type": "module",
   "description": "Nomos 2 domain-authoring DSL: aggregates + directives in TS, executed and encoded to the Rust kernel's wire shapes.",
   "license": "SEE LICENSE IN LICENSE.md",

package/src/codegen_proof.ts

@@ -1499,6 +1499,21 @@ export function withBirthProbeGlobals<T>(run: () => T): T {
       for (let i = 0; i < s.length; i++) { h ^= s.charCodeAt(i); h = Math.imul(h, 16777619) >>> 0; }
       return h.toString(16).padStart(8, "0").repeat(8);
     },
+    // A read STUB so a plan with a declared read()/read(…, {from}) PROBES cleanly instead of throwing
+    // "nomos.read is not provided" (which twin A would mis-report as a payload-dependent throw with an
+    // "add .reads(…)" hint — misleading for a correctly declared .readsFrom edge). Local reads answer no
+    // rows; foreign reads answer the {rows, attestation} wrapper the read() lane demands. The UNDECLARED
+    // read()/edge cases stay caught by their real gates (the compile lump-marker grep + attestedReadFindings).
+    read: (_q: string, _a: Record<string, string>, o?: { from?: string }) =>
+      o?.from !== undefined && o.from !== ""
+        ? {
+            rows: [],
+            attestation: {
+              source_genesis: "probe", source_head: "probe", source_epoch: 0,
+              attested_at_ms: 0, public_key: "", signature: "", result_hash: "",
+            },
+          }
+        : [],
   };
   // RELATION-NAMESPACING: a probed seed plan may build a relation OBJECT TOKEN (`selfWorkspace()`),
   // which qualifies its type by the dispatching domain. The proof generator's STATIC probe reads the

package/src/law_check.ts

@@ -379,6 +379,12 @@ function unreadPayloadFindings(domain: string, dir: Directive<unknown>, probe: P
   const objectFromField = (dir as { requiresRelationGate?: { objectFrom?: { idField?: string } } })
     .requiresRelationGate?.objectFrom?.idField;
   if (typeof objectFromField === "string") gateConsumed.add(objectFromField);
+  // A dynamic .readsFrom(fromPayload("<wsField>"), …) edge routes the foreign read by a payload field the
+  // ROUTING lane consumes (the plan may pass it straight to read(…, {from}) without a tracked property
+  // read on the sampled path) — a declared trust-edge field is never a dead field.
+  for (const e of (dir as { declaredForeignReads?: ForeignReadEdge[] }).declaredForeignReads ?? []) {
+    if ("fromPayload" in e && typeof e.fromPayload === "string") gateConsumed.add(e.fromPayload);
+  }
   const out: Finding[] = [];
   for (const f of requiredPayloadFields(dir.payloadSchema as z.ZodTypeAny)) {
     if (probe.readFields.has(f)) continue;