nomos_types 0.10.0

Pure kernel wire/data types for Nomos Dart frontends — no transport, no bridge, no runtime. Typed protobuf and USDA boundary values plus the offer codec, reactive read engine, schema validation, and d [...]

0.10.0

• Replace the retired Runtime v1 command model with the generated Runtime v2 and custody snapshot Protobuf types used by every Dart and Flutter host.
• Carry typed workspace summaries, sync results, custody changes, and kernel calls without generic map or JSON command surfaces.

0.9.0

• Replace the opaque admitted-offer result with generated typed kernel messages, so Rust, TypeScript, Dart, and Flutter share one protobuf ABI for committed offer facts.

0.8.9

• Generate the canonical Dart kernel and runtime protobuf messages in nomos_types, so Dart clients and Flutter hosts consume the same compiler-owned ABI as Rust and TypeScript.

0.8.8

• Name incompatible runtime selections as OSGi contract failures rather than referring to the retired custom kernel-capability vocabulary.

0.8.7

• Decode only the kernel's stamped structural map-entry envelope as an envelope. Ordinary domain objects that happen to contain a value field now retain all of their fields.

0.8.6

• NEW: NomosLocalWorkRejectedEvent / NomosRejectedIntent — the typed "the cloud refused work your device had accepted" lifecycle event (architecture/seated_barrier_and_seal_obligation.md Part 4). By the time it fires, refused intents are durably parked on BOTH sides (client DLQ + workspace refused/* refs) and surviving local work is rebase-replayed — no work is ever lost. retryable distinguishes transient-premise refusals (auto-retry clears them) from terminal ones.

0.8.5

• Expose bounded generated-startup and referenced-workspace custody failures as typed data so applications can render and retry the exact kernel refusal instead of remaining on an indefinite loading surface.

0.8.3

• Add the typed GitObjectId value used to identify immutable custody objects without falling back to interchangeable strings.

0.8.2

• Carry the typed bounded-startup, missing-law and governed child-policy errors used by the USDA-native application lifecycle, preserving kernel refusals as actionable frontend states.

0.8.1

• Carry the typed USDA-native kernel protocol, plan diagnostics, reference version status and application readiness shapes used by generated clients without exposing transport or runtime implementation details.

0.8.0

• Make NomosRef<T> the canonical identity of generated business records. References carry their workspace, aggregate type and record id through actions, queries, navigation and activity without falling back to interchangeable strings.
• Keep generated business values and framework lifecycle details on separate package boundaries so product code cannot accidentally rebuild Nomos runtime state.

0.7.1

• Add typed framework recovery actions and lifecycle failure shapes without leaking signer, certificate, escrow or retry protocol into generated business clients.

0.7.0

• Add the public conflict and description shapes used by generated aggregate clients: merge observations, pending decisions, typed organisation references and recursive business descriptions now have one Dart representation shared with the TypeScript client.

0.5.0

• Add typed SourceSessionNotMounted error (code nomos.attested_read.source_not_mounted) for the colocated attested-read fix — a foreign read(q, {from}) whose source workspace isn't mounted now fails fast with a typed error + mountSourceSession remedy.

0.4.1

• canonicalPrincipal / signerObjectOf — THE one principal normalizer (kernel truth: identity:<actor-verbatim>, never stripped). All signer-recovery surfaces route through it.

0.4.0

• Typed authorization diagnosis errors: AuthzRefusedError ({workspace, actor, keyHash, object, relation, directiveId, cause}) and ParentSignerEnrollmentMissing (the one remedy named: ensureParentSignerEnrollment) — "valid user, but this device cannot prove it" and "user lacks the role" are now distinct typed diagnoses. NomosRecommendedAction.ensureParentSignerEnrollment.

0.3.0

• SurfacedValue<T> — the typed read surface for Surfaced(inner) merge-driver fields: sealed SurfacedResolved<T> / SurfacedPending<T> with fromJson envelope detection, isPending, valueOrNull, and SurfacedObservation<T> {value, occurredAt, author?} (nullable author — the writer principal captured at the apply lane). surfacedEnvelopeKey/surfacedAuthorKey constants.
• PendingConflictRow — the workspace-wide "decisions needed" row served by the maintained pendingConflicts read: {aggregateType, aggregateId, field, observations}.

0.2.0

• NomosPrincipal / NomosDeviceSecret — branded identity types for the generated cross-workspace birth methods (.births() directives). actor/authorSecret were previously bare, adjacent, same-shaped strings — a transposition footgun with no compiler check. NomosPrincipal.user(uid)/.parse('user:<uid>') and the opaque NomosDeviceSecret (redacts in toString()) make swapping them a type error. Purely additive.

0.1.4

• Custody-lifecycle types: NomosCustodyBreak, NomosCustodyStatus, NomosCustodyEvent, CustodyBreakPolicy (adopt/reject/ask) — a workspace rebirth surfaces as a typed, app-decidable event. Purely additive.

0.1.3

• NomosRef — THE one typed reference {workspace, type, id}: value semantics, the canonical nomos://<workspace>/<type>/<id> uri (uri/parse, encode round-trip), fromJson (object or uri), resolve() over the multi-workspace reader. ActivityRef gains workspace + a .ref view; ForeignRef gains .ref. Every reference shape now converges on the one triple. Purely additive.

0.1.2

• Activity-feed runtime types: ActivityEvent (the shared activity row — kind/actor/occurredAt, rendered title+message, stable titleKey/messageKey + params for localization, typed refs, category/icon/ severity, domain/directiveId provenance), ActivityRef, ActivitySeverity, renderActivityTemplate. Consumed by the generated renderActivity/describe/describeHistory. Purely additive.

0.1.1

• Add t.foreignRef runtime types: ForeignRef<T> (a typed cross-workspace locator), NomosForeignReader / NomosForeignWorkspaceReader, the sealed ForeignResolveResult<T> (ForeignFound/ForeignNotFound/ ForeignDenied/ForeignUnreachable), and ForeignAttestation. Generated read models type a foreignRef field as ForeignRef<Target>; .resolve/.resolveResult/.watch/.exists are the informational lookup, .attest is gated on the attested-read lane. Purely additive.

0.1.0

• Initial release. The pure-data core split out of nomos_client: kernel wire types, the offer codec, NomosReads, the tri-state NomosSlot, aggregate metadata, schema validation, and the data-only error/trace types (NomosBridgeError, NomosErrorInfo, NomosTraceContext) plus the typed diagnostics. No transport, no bridge, no runtime — generated per-domain TYPES files depend on only this.