@githolon/dsl 0.107.4 → 0.108.1

package/dart_types/lib/src/proto/nomos/kernel/v1/kernel.pbenum.dart

@@ -0,0 +1,933 @@
+// This is a generated file - do not edit.
+//
+// Generated from nomos/kernel/v1/kernel.proto.
+
+// @dart = 3.3
+
+// ignore_for_file: annotate_overrides, camel_case_types, comment_references
+// ignore_for_file: constant_identifier_names
+// ignore_for_file: curly_braces_in_flow_control_structures
+// ignore_for_file: deprecated_member_use_from_same_package, library_prefixes
+// ignore_for_file: non_constant_identifier_names
+
+import 'dart:core' as $core;
+
+import 'package:protobuf/protobuf.dart' as $pb;
+
+class BirthOutcomeStatus extends $pb.ProtobufEnum {
+  static const BirthOutcomeStatus BIRTH_OUTCOME_STATUS_UNSPECIFIED =
+      BirthOutcomeStatus._(
+          0, _omitEnumNames ? '' : 'BIRTH_OUTCOME_STATUS_UNSPECIFIED');
+  static const BirthOutcomeStatus BIRTH_OUTCOME_STATUS_BORN =
+      BirthOutcomeStatus._(
+          1, _omitEnumNames ? '' : 'BIRTH_OUTCOME_STATUS_BORN');
+  static const BirthOutcomeStatus BIRTH_OUTCOME_STATUS_DEFERRED =
+      BirthOutcomeStatus._(
+          2, _omitEnumNames ? '' : 'BIRTH_OUTCOME_STATUS_DEFERRED');
+  static const BirthOutcomeStatus BIRTH_OUTCOME_STATUS_FAILED =
+      BirthOutcomeStatus._(
+          3, _omitEnumNames ? '' : 'BIRTH_OUTCOME_STATUS_FAILED');
+  static const BirthOutcomeStatus BIRTH_OUTCOME_STATUS_REFUSED =
+      BirthOutcomeStatus._(
+          4, _omitEnumNames ? '' : 'BIRTH_OUTCOME_STATUS_REFUSED');
+  static const BirthOutcomeStatus BIRTH_OUTCOME_STATUS_UNWARRANTED_CERT =
+      BirthOutcomeStatus._(
+          5, _omitEnumNames ? '' : 'BIRTH_OUTCOME_STATUS_UNWARRANTED_CERT');
+
+  static const $core.List<BirthOutcomeStatus> values = <BirthOutcomeStatus>[
+    BIRTH_OUTCOME_STATUS_UNSPECIFIED,
+    BIRTH_OUTCOME_STATUS_BORN,
+    BIRTH_OUTCOME_STATUS_DEFERRED,
+    BIRTH_OUTCOME_STATUS_FAILED,
+    BIRTH_OUTCOME_STATUS_REFUSED,
+    BIRTH_OUTCOME_STATUS_UNWARRANTED_CERT,
+  ];
+
+  static final $core.List<BirthOutcomeStatus?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 5);
+  static BirthOutcomeStatus? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const BirthOutcomeStatus._(super.value, super.name);
+}
+
+/// This list mirrors nomos_executor::Reason. The Rust conversion is an exhaustive
+/// match, so adding a new gate refusal cannot silently degrade to prose.
+class KernelRefusalCode extends $pb.ProtobufEnum {
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_UNSPECIFIED =
+      KernelRefusalCode._(
+          0, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_UNSPECIFIED');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_BAD_SIGNATURE =
+      KernelRefusalCode._(
+          1, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_BAD_SIGNATURE');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_UNAUTHORIZED =
+      KernelRefusalCode._(
+          2, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_UNAUTHORIZED');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_POLICY_DISABLED =
+      KernelRefusalCode._(
+          3, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_POLICY_DISABLED');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_UNCERTIFIED_POLICY =
+      KernelRefusalCode._(
+          4, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_UNCERTIFIED_POLICY');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_REFERENTIAL =
+      KernelRefusalCode._(
+          5, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_REFERENTIAL');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_POINT_STATE_UNAVAILABLE =
+      KernelRefusalCode._(6,
+          _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_POINT_STATE_UNAVAILABLE');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_CAP_EXCEEDED =
+      KernelRefusalCode._(
+          7, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_CAP_EXCEEDED');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_CAP_COUNT_UNAVAILABLE =
+      KernelRefusalCode._(
+          8, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_CAP_COUNT_UNAVAILABLE');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_EVIDENCE_UNBACKED =
+      KernelRefusalCode._(
+          9, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_EVIDENCE_UNBACKED');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_ORPHAN_RECEIPT =
+      KernelRefusalCode._(
+          10, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_ORPHAN_RECEIPT');
+  static const KernelRefusalCode
+      KERNEL_REFUSAL_CODE_RECEIPT_ON_TERMINAL_OBLIGATION = KernelRefusalCode._(
+          11,
+          _omitEnumNames
+              ? ''
+              : 'KERNEL_REFUSAL_CODE_RECEIPT_ON_TERMINAL_OBLIGATION');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_NOT_MINTED =
+      KernelRefusalCode._(
+          12, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_NOT_MINTED');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_DOMAIN_LIFECYCLE =
+      KernelRefusalCode._(
+          13, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_DOMAIN_LIFECYCLE');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_TYPE_TAG_MISMATCH =
+      KernelRefusalCode._(
+          14, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_TYPE_TAG_MISMATCH');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_RETIRED_READ_SURFACE =
+      KernelRefusalCode._(
+          15, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_RETIRED_READ_SURFACE');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_CROSS_WORKSPACE_DECLINED =
+      KernelRefusalCode._(16,
+          _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_CROSS_WORKSPACE_DECLINED');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_AGGREGATE_INVARIANT =
+      KernelRefusalCode._(
+          17, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_AGGREGATE_INVARIANT');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_WORKSPACE_INVARIANT =
+      KernelRefusalCode._(
+          18, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_WORKSPACE_INVARIANT');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_CAPTURED_READ_CONFLICT =
+      KernelRefusalCode._(19,
+          _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_CAPTURED_READ_CONFLICT');
+  static const KernelRefusalCode
+      KERNEL_REFUSAL_CODE_CONFLICT_SNAPSHOT_REQUIRED = KernelRefusalCode._(
+          20,
+          _omitEnumNames
+              ? ''
+              : 'KERNEL_REFUSAL_CODE_CONFLICT_SNAPSHOT_REQUIRED');
+  static const KernelRefusalCode
+      KERNEL_REFUSAL_CODE_CONFLICT_SNAPSHOT_UNDECLARED = KernelRefusalCode._(
+          21,
+          _omitEnumNames
+              ? ''
+              : 'KERNEL_REFUSAL_CODE_CONFLICT_SNAPSHOT_UNDECLARED');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_CONFLICT_SNAPSHOT_INVALID =
+      KernelRefusalCode._(
+          22,
+          _omitEnumNames
+              ? ''
+              : 'KERNEL_REFUSAL_CODE_CONFLICT_SNAPSHOT_INVALID');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_CONFLICT_SNAPSHOT_STALE =
+      KernelRefusalCode._(23,
+          _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_CONFLICT_SNAPSHOT_STALE');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_CAPTURED_READ_UNDECLARED =
+      KernelRefusalCode._(24,
+          _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_CAPTURED_READ_UNDECLARED');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_CAPTURED_READ_PRIVATE =
+      KernelRefusalCode._(25,
+          _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_CAPTURED_READ_PRIVATE');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_ATTESTED_READ_UNDECLARED =
+      KernelRefusalCode._(26,
+          _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_ATTESTED_READ_UNDECLARED');
+  static const KernelRefusalCode
+      KERNEL_REFUSAL_CODE_ATTESTED_READ_UNTRUSTED_KEY = KernelRefusalCode._(
+          27,
+          _omitEnumNames
+              ? ''
+              : 'KERNEL_REFUSAL_CODE_ATTESTED_READ_UNTRUSTED_KEY');
+  static const KernelRefusalCode
+      KERNEL_REFUSAL_CODE_ATTESTED_READ_UNTRUSTED_SOURCE = KernelRefusalCode._(
+          28,
+          _omitEnumNames
+              ? ''
+              : 'KERNEL_REFUSAL_CODE_ATTESTED_READ_UNTRUSTED_SOURCE');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_ATTESTED_READ_FORGED =
+      KernelRefusalCode._(
+          29, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_ATTESTED_READ_FORGED');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_ATTESTED_READ_STALE =
+      KernelRefusalCode._(
+          30, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_ATTESTED_READ_STALE');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_ATTESTED_READ_OVERSIZE =
+      KernelRefusalCode._(31,
+          _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_ATTESTED_READ_OVERSIZE');
+  static const KernelRefusalCode
+      KERNEL_REFUSAL_CODE_ATTESTED_READ_DISHONORED_SOURCE = KernelRefusalCode._(
+          32,
+          _omitEnumNames
+              ? ''
+              : 'KERNEL_REFUSAL_CODE_ATTESTED_READ_DISHONORED_SOURCE');
+  static const KernelRefusalCode
+      KERNEL_REFUSAL_CODE_EQUIVOCATION_EVIDENCE_INVALID = KernelRefusalCode._(
+          33,
+          _omitEnumNames
+              ? ''
+              : 'KERNEL_REFUSAL_CODE_EQUIVOCATION_EVIDENCE_INVALID');
+  static const KernelRefusalCode
+      KERNEL_REFUSAL_CODE_ATTESTATION_RECEIPT_INVALID = KernelRefusalCode._(
+          34,
+          _omitEnumNames
+              ? ''
+              : 'KERNEL_REFUSAL_CODE_ATTESTATION_RECEIPT_INVALID');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_KEY_ROSTER_MISMATCH =
+      KernelRefusalCode._(
+          35, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_KEY_ROSTER_MISMATCH');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_KEY_EPOCH_NOT_MONOTONIC =
+      KernelRefusalCode._(36,
+          _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_KEY_EPOCH_NOT_MONOTONIC');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_WRITE_EPOCH_STALE =
+      KernelRefusalCode._(
+          37, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_WRITE_EPOCH_STALE');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_ENVELOPE_SID_MISMATCH =
+      KernelRefusalCode._(38,
+          _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_ENVELOPE_SID_MISMATCH');
+  static const KernelRefusalCode
+      KERNEL_REFUSAL_CODE_REVOKED_MEMBER_RESURRECTED = KernelRefusalCode._(
+          39,
+          _omitEnumNames
+              ? ''
+              : 'KERNEL_REFUSAL_CODE_REVOKED_MEMBER_RESURRECTED');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_FORGED_PRINCIPAL =
+      KernelRefusalCode._(
+          40, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_FORGED_PRINCIPAL');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_OWNED_KEY_ANCHOR =
+      KernelRefusalCode._(
+          41, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_OWNED_KEY_ANCHOR');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_OWNED_RECOVERY =
+      KernelRefusalCode._(
+          42, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_OWNED_RECOVERY');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_SURFACED_BASIS_AHEAD =
+      KernelRefusalCode._(
+          43, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_SURFACED_BASIS_AHEAD');
+  static const KernelRefusalCode
+      KERNEL_REFUSAL_CODE_SIGNER_EPOCH_OUT_OF_WINDOW = KernelRefusalCode._(
+          44,
+          _omitEnumNames
+              ? ''
+              : 'KERNEL_REFUSAL_CODE_SIGNER_EPOCH_OUT_OF_WINDOW');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_EVOLVE_REFUSED =
+      KernelRefusalCode._(
+          45, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_EVOLVE_REFUSED');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_ATTESTATION_INVALID =
+      KernelRefusalCode._(
+          46, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_ATTESTATION_INVALID');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_PARENT_DID_NOT_ATTEST =
+      KernelRefusalCode._(47,
+          _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_PARENT_DID_NOT_ATTEST');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_CERT_CHAIN_BROKEN =
+      KernelRefusalCode._(
+          48, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_CERT_CHAIN_BROKEN');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_NOT_ROOTED_AT_ROOT =
+      KernelRefusalCode._(
+          49, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_NOT_ROOTED_AT_ROOT');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_DELEGATION_INVALID =
+      KernelRefusalCode._(
+          50, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_DELEGATION_INVALID');
+
+  /// The selected, authenticated plan deterministically declined its call before an intent existed
+  /// (for example, generated payload-schema validation). This is a tenant-visible offer verdict,
+  /// not an operational kernel/RPC failure.
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_PLAN_REJECTED =
+      KernelRefusalCode._(
+          51, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_PLAN_REJECTED');
+
+  static const $core.List<KernelRefusalCode> values = <KernelRefusalCode>[
+    KERNEL_REFUSAL_CODE_UNSPECIFIED,
+    KERNEL_REFUSAL_CODE_BAD_SIGNATURE,
+    KERNEL_REFUSAL_CODE_UNAUTHORIZED,
+    KERNEL_REFUSAL_CODE_POLICY_DISABLED,
+    KERNEL_REFUSAL_CODE_UNCERTIFIED_POLICY,
+    KERNEL_REFUSAL_CODE_REFERENTIAL,
+    KERNEL_REFUSAL_CODE_POINT_STATE_UNAVAILABLE,
+    KERNEL_REFUSAL_CODE_CAP_EXCEEDED,
+    KERNEL_REFUSAL_CODE_CAP_COUNT_UNAVAILABLE,
+    KERNEL_REFUSAL_CODE_EVIDENCE_UNBACKED,
+    KERNEL_REFUSAL_CODE_ORPHAN_RECEIPT,
+    KERNEL_REFUSAL_CODE_RECEIPT_ON_TERMINAL_OBLIGATION,
+    KERNEL_REFUSAL_CODE_NOT_MINTED,
+    KERNEL_REFUSAL_CODE_DOMAIN_LIFECYCLE,
+    KERNEL_REFUSAL_CODE_TYPE_TAG_MISMATCH,
+    KERNEL_REFUSAL_CODE_RETIRED_READ_SURFACE,
+    KERNEL_REFUSAL_CODE_CROSS_WORKSPACE_DECLINED,
+    KERNEL_REFUSAL_CODE_AGGREGATE_INVARIANT,
+    KERNEL_REFUSAL_CODE_WORKSPACE_INVARIANT,
+    KERNEL_REFUSAL_CODE_CAPTURED_READ_CONFLICT,
+    KERNEL_REFUSAL_CODE_CONFLICT_SNAPSHOT_REQUIRED,
+    KERNEL_REFUSAL_CODE_CONFLICT_SNAPSHOT_UNDECLARED,
+    KERNEL_REFUSAL_CODE_CONFLICT_SNAPSHOT_INVALID,
+    KERNEL_REFUSAL_CODE_CONFLICT_SNAPSHOT_STALE,
+    KERNEL_REFUSAL_CODE_CAPTURED_READ_UNDECLARED,
+    KERNEL_REFUSAL_CODE_CAPTURED_READ_PRIVATE,
+    KERNEL_REFUSAL_CODE_ATTESTED_READ_UNDECLARED,
+    KERNEL_REFUSAL_CODE_ATTESTED_READ_UNTRUSTED_KEY,
+    KERNEL_REFUSAL_CODE_ATTESTED_READ_UNTRUSTED_SOURCE,
+    KERNEL_REFUSAL_CODE_ATTESTED_READ_FORGED,
+    KERNEL_REFUSAL_CODE_ATTESTED_READ_STALE,
+    KERNEL_REFUSAL_CODE_ATTESTED_READ_OVERSIZE,
+    KERNEL_REFUSAL_CODE_ATTESTED_READ_DISHONORED_SOURCE,
+    KERNEL_REFUSAL_CODE_EQUIVOCATION_EVIDENCE_INVALID,
+    KERNEL_REFUSAL_CODE_ATTESTATION_RECEIPT_INVALID,
+    KERNEL_REFUSAL_CODE_KEY_ROSTER_MISMATCH,
+    KERNEL_REFUSAL_CODE_KEY_EPOCH_NOT_MONOTONIC,
+    KERNEL_REFUSAL_CODE_WRITE_EPOCH_STALE,
+    KERNEL_REFUSAL_CODE_ENVELOPE_SID_MISMATCH,
+    KERNEL_REFUSAL_CODE_REVOKED_MEMBER_RESURRECTED,
+    KERNEL_REFUSAL_CODE_FORGED_PRINCIPAL,
+    KERNEL_REFUSAL_CODE_OWNED_KEY_ANCHOR,
+    KERNEL_REFUSAL_CODE_OWNED_RECOVERY,
+    KERNEL_REFUSAL_CODE_SURFACED_BASIS_AHEAD,
+    KERNEL_REFUSAL_CODE_SIGNER_EPOCH_OUT_OF_WINDOW,
+    KERNEL_REFUSAL_CODE_EVOLVE_REFUSED,
+    KERNEL_REFUSAL_CODE_ATTESTATION_INVALID,
+    KERNEL_REFUSAL_CODE_PARENT_DID_NOT_ATTEST,
+    KERNEL_REFUSAL_CODE_CERT_CHAIN_BROKEN,
+    KERNEL_REFUSAL_CODE_NOT_ROOTED_AT_ROOT,
+    KERNEL_REFUSAL_CODE_DELEGATION_INVALID,
+    KERNEL_REFUSAL_CODE_PLAN_REJECTED,
+  ];
+
+  static final $core.List<KernelRefusalCode?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 51);
+  static KernelRefusalCode? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const KernelRefusalCode._(super.value, super.name);
+}
+
+class VerifyChainWalk extends $pb.ProtobufEnum {
+  static const VerifyChainWalk VERIFY_CHAIN_WALK_UNSPECIFIED =
+      VerifyChainWalk._(
+          0, _omitEnumNames ? '' : 'VERIFY_CHAIN_WALK_UNSPECIFIED');
+  static const VerifyChainWalk VERIFY_CHAIN_WALK_FULL =
+      VerifyChainWalk._(1, _omitEnumNames ? '' : 'VERIFY_CHAIN_WALK_FULL');
+  static const VerifyChainWalk VERIFY_CHAIN_WALK_SUFFIX =
+      VerifyChainWalk._(2, _omitEnumNames ? '' : 'VERIFY_CHAIN_WALK_SUFFIX');
+  static const VerifyChainWalk VERIFY_CHAIN_WALK_MEMO =
+      VerifyChainWalk._(3, _omitEnumNames ? '' : 'VERIFY_CHAIN_WALK_MEMO');
+
+  static const $core.List<VerifyChainWalk> values = <VerifyChainWalk>[
+    VERIFY_CHAIN_WALK_UNSPECIFIED,
+    VERIFY_CHAIN_WALK_FULL,
+    VERIFY_CHAIN_WALK_SUFFIX,
+    VERIFY_CHAIN_WALK_MEMO,
+  ];
+
+  static final $core.List<VerifyChainWalk?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 3);
+  static VerifyChainWalk? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const VerifyChainWalk._(super.value, super.name);
+}
+
+/// Exact framework lifecycle authoring. The candidate itself remains the opaque, content-addressed
+/// `law_usdz` package below; the kernel derives its identity and dependency closure after opening it.
+/// This intent exists so an installed controller can judge its successor using the controller's own
+/// nominal field identities. A client must never manufacture candidate-schema USDA for that transition.
+class ModelLifecycleOperation extends $pb.ProtobufEnum {
+  static const ModelLifecycleOperation MODEL_LIFECYCLE_OPERATION_UNSPECIFIED =
+      ModelLifecycleOperation._(
+          0, _omitEnumNames ? '' : 'MODEL_LIFECYCLE_OPERATION_UNSPECIFIED');
+  static const ModelLifecycleOperation MODEL_LIFECYCLE_OPERATION_INSTALL =
+      ModelLifecycleOperation._(
+          1, _omitEnumNames ? '' : 'MODEL_LIFECYCLE_OPERATION_INSTALL');
+  static const ModelLifecycleOperation MODEL_LIFECYCLE_OPERATION_STAGE =
+      ModelLifecycleOperation._(
+          2, _omitEnumNames ? '' : 'MODEL_LIFECYCLE_OPERATION_STAGE');
+  static const ModelLifecycleOperation MODEL_LIFECYCLE_OPERATION_PROMOTE =
+      ModelLifecycleOperation._(
+          3, _omitEnumNames ? '' : 'MODEL_LIFECYCLE_OPERATION_PROMOTE');
+
+  static const $core.List<ModelLifecycleOperation> values =
+      <ModelLifecycleOperation>[
+    MODEL_LIFECYCLE_OPERATION_UNSPECIFIED,
+    MODEL_LIFECYCLE_OPERATION_INSTALL,
+    MODEL_LIFECYCLE_OPERATION_STAGE,
+    MODEL_LIFECYCLE_OPERATION_PROMOTE,
+  ];
+
+  static final $core.List<ModelLifecycleOperation?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 3);
+  static ModelLifecycleOperation? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const ModelLifecycleOperation._(super.value, super.name);
+}
+
+class ProviderTokenVerificationStatus extends $pb.ProtobufEnum {
+  static const ProviderTokenVerificationStatus
+      PROVIDER_TOKEN_VERIFICATION_STATUS_UNSPECIFIED =
+      ProviderTokenVerificationStatus._(
+          0,
+          _omitEnumNames
+              ? ''
+              : 'PROVIDER_TOKEN_VERIFICATION_STATUS_UNSPECIFIED');
+  static const ProviderTokenVerificationStatus
+      PROVIDER_TOKEN_VERIFICATION_STATUS_VALID =
+      ProviderTokenVerificationStatus._(
+          1, _omitEnumNames ? '' : 'PROVIDER_TOKEN_VERIFICATION_STATUS_VALID');
+  static const ProviderTokenVerificationStatus
+      PROVIDER_TOKEN_VERIFICATION_STATUS_NO_MATCHING_KEY =
+      ProviderTokenVerificationStatus._(
+          2,
+          _omitEnumNames
+              ? ''
+              : 'PROVIDER_TOKEN_VERIFICATION_STATUS_NO_MATCHING_KEY');
+  static const ProviderTokenVerificationStatus
+      PROVIDER_TOKEN_VERIFICATION_STATUS_EXPIRED =
+      ProviderTokenVerificationStatus._(3,
+          _omitEnumNames ? '' : 'PROVIDER_TOKEN_VERIFICATION_STATUS_EXPIRED');
+  static const ProviderTokenVerificationStatus
+      PROVIDER_TOKEN_VERIFICATION_STATUS_NOT_YET_VALID =
+      ProviderTokenVerificationStatus._(
+          4,
+          _omitEnumNames
+              ? ''
+              : 'PROVIDER_TOKEN_VERIFICATION_STATUS_NOT_YET_VALID');
+  static const ProviderTokenVerificationStatus
+      PROVIDER_TOKEN_VERIFICATION_STATUS_ISSUER_MISMATCH =
+      ProviderTokenVerificationStatus._(
+          5,
+          _omitEnumNames
+              ? ''
+              : 'PROVIDER_TOKEN_VERIFICATION_STATUS_ISSUER_MISMATCH');
+  static const ProviderTokenVerificationStatus
+      PROVIDER_TOKEN_VERIFICATION_STATUS_AUDIENCE_MISMATCH =
+      ProviderTokenVerificationStatus._(
+          6,
+          _omitEnumNames
+              ? ''
+              : 'PROVIDER_TOKEN_VERIFICATION_STATUS_AUDIENCE_MISMATCH');
+  static const ProviderTokenVerificationStatus
+      PROVIDER_TOKEN_VERIFICATION_STATUS_BAD_SIGNATURE =
+      ProviderTokenVerificationStatus._(
+          7,
+          _omitEnumNames
+              ? ''
+              : 'PROVIDER_TOKEN_VERIFICATION_STATUS_BAD_SIGNATURE');
+  static const ProviderTokenVerificationStatus
+      PROVIDER_TOKEN_VERIFICATION_STATUS_MALFORMED =
+      ProviderTokenVerificationStatus._(8,
+          _omitEnumNames ? '' : 'PROVIDER_TOKEN_VERIFICATION_STATUS_MALFORMED');
+  static const ProviderTokenVerificationStatus
+      PROVIDER_TOKEN_VERIFICATION_STATUS_UNSUPPORTED_ALGORITHM =
+      ProviderTokenVerificationStatus._(
+          9,
+          _omitEnumNames
+              ? ''
+              : 'PROVIDER_TOKEN_VERIFICATION_STATUS_UNSUPPORTED_ALGORITHM');
+  static const ProviderTokenVerificationStatus
+      PROVIDER_TOKEN_VERIFICATION_STATUS_BAD_KEY =
+      ProviderTokenVerificationStatus._(10,
+          _omitEnumNames ? '' : 'PROVIDER_TOKEN_VERIFICATION_STATUS_BAD_KEY');
+  static const ProviderTokenVerificationStatus
+      PROVIDER_TOKEN_VERIFICATION_STATUS_MISSING_SUBJECT =
+      ProviderTokenVerificationStatus._(
+          11,
+          _omitEnumNames
+              ? ''
+              : 'PROVIDER_TOKEN_VERIFICATION_STATUS_MISSING_SUBJECT');
+  static const ProviderTokenVerificationStatus
+      PROVIDER_TOKEN_VERIFICATION_STATUS_NO_VERIFIER =
+      ProviderTokenVerificationStatus._(
+          12,
+          _omitEnumNames
+              ? ''
+              : 'PROVIDER_TOKEN_VERIFICATION_STATUS_NO_VERIFIER');
+  static const ProviderTokenVerificationStatus
+      PROVIDER_TOKEN_VERIFICATION_STATUS_MISSING_TOKEN =
+      ProviderTokenVerificationStatus._(
+          13,
+          _omitEnumNames
+              ? ''
+              : 'PROVIDER_TOKEN_VERIFICATION_STATUS_MISSING_TOKEN');
+
+  static const $core.List<ProviderTokenVerificationStatus> values =
+      <ProviderTokenVerificationStatus>[
+    PROVIDER_TOKEN_VERIFICATION_STATUS_UNSPECIFIED,
+    PROVIDER_TOKEN_VERIFICATION_STATUS_VALID,
+    PROVIDER_TOKEN_VERIFICATION_STATUS_NO_MATCHING_KEY,
+    PROVIDER_TOKEN_VERIFICATION_STATUS_EXPIRED,
+    PROVIDER_TOKEN_VERIFICATION_STATUS_NOT_YET_VALID,
+    PROVIDER_TOKEN_VERIFICATION_STATUS_ISSUER_MISMATCH,
+    PROVIDER_TOKEN_VERIFICATION_STATUS_AUDIENCE_MISMATCH,
+    PROVIDER_TOKEN_VERIFICATION_STATUS_BAD_SIGNATURE,
+    PROVIDER_TOKEN_VERIFICATION_STATUS_MALFORMED,
+    PROVIDER_TOKEN_VERIFICATION_STATUS_UNSUPPORTED_ALGORITHM,
+    PROVIDER_TOKEN_VERIFICATION_STATUS_BAD_KEY,
+    PROVIDER_TOKEN_VERIFICATION_STATUS_MISSING_SUBJECT,
+    PROVIDER_TOKEN_VERIFICATION_STATUS_NO_VERIFIER,
+    PROVIDER_TOKEN_VERIFICATION_STATUS_MISSING_TOKEN,
+  ];
+
+  static final $core.List<ProviderTokenVerificationStatus?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 13);
+  static ProviderTokenVerificationStatus? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const ProviderTokenVerificationStatus._(super.value, super.name);
+}
+
+class QueryResultFormat extends $pb.ProtobufEnum {
+  static const QueryResultFormat QUERY_RESULT_FORMAT_UNSPECIFIED =
+      QueryResultFormat._(
+          0, _omitEnumNames ? '' : 'QUERY_RESULT_FORMAT_UNSPECIFIED');
+
+  /// Temporary compatibility arm while generated domain clients move together.
+  static const QueryResultFormat QUERY_RESULT_FORMAT_LEGACY_VALUE =
+      QueryResultFormat._(
+          1, _omitEnumNames ? '' : 'QUERY_RESULT_FORMAT_LEGACY_VALUE');
+  static const QueryResultFormat QUERY_RESULT_FORMAT_NOMINAL_USDA =
+      QueryResultFormat._(
+          2, _omitEnumNames ? '' : 'QUERY_RESULT_FORMAT_NOMINAL_USDA');
+
+  static const $core.List<QueryResultFormat> values = <QueryResultFormat>[
+    QUERY_RESULT_FORMAT_UNSPECIFIED,
+    QUERY_RESULT_FORMAT_LEGACY_VALUE,
+    QUERY_RESULT_FORMAT_NOMINAL_USDA,
+  ];
+
+  static final $core.List<QueryResultFormat?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 2);
+  static QueryResultFormat? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const QueryResultFormat._(super.value, super.name);
+}
+
+class QueryOperation extends $pb.ProtobufEnum {
+  static const QueryOperation QUERY_OPERATION_UNSPECIFIED =
+      QueryOperation._(0, _omitEnumNames ? '' : 'QUERY_OPERATION_UNSPECIFIED');
+  static const QueryOperation QUERY_OPERATION_EXTREMUM =
+      QueryOperation._(1, _omitEnumNames ? '' : 'QUERY_OPERATION_EXTREMUM');
+  static const QueryOperation QUERY_OPERATION_READ_POSTURE =
+      QueryOperation._(4, _omitEnumNames ? '' : 'QUERY_OPERATION_READ_POSTURE');
+  static const QueryOperation QUERY_OPERATION_CURRENT_LAW =
+      QueryOperation._(5, _omitEnumNames ? '' : 'QUERY_OPERATION_CURRENT_LAW');
+  static const QueryOperation QUERY_OPERATION_INTERFACE_OFFER =
+      QueryOperation._(
+          6, _omitEnumNames ? '' : 'QUERY_OPERATION_INTERFACE_OFFER');
+  static const QueryOperation QUERY_OPERATION_RELATION_GATE_OFFER =
+      QueryOperation._(
+          7, _omitEnumNames ? '' : 'QUERY_OPERATION_RELATION_GATE_OFFER');
+  static const QueryOperation QUERY_OPERATION_SCENE_LAW =
+      QueryOperation._(8, _omitEnumNames ? '' : 'QUERY_OPERATION_SCENE_LAW');
+  static const QueryOperation QUERY_OPERATION_INSTALLED_LAW = QueryOperation._(
+      9, _omitEnumNames ? '' : 'QUERY_OPERATION_INSTALLED_LAW');
+  static const QueryOperation QUERY_OPERATION_DESCRIBE =
+      QueryOperation._(10, _omitEnumNames ? '' : 'QUERY_OPERATION_DESCRIBE');
+  static const QueryOperation QUERY_OPERATION_KERNEL_RESOURCE =
+      QueryOperation._(
+          11, _omitEnumNames ? '' : 'QUERY_OPERATION_KERNEL_RESOURCE');
+  static const QueryOperation QUERY_OPERATION_DEVELOPER_SPANS =
+      QueryOperation._(
+          12, _omitEnumNames ? '' : 'QUERY_OPERATION_DEVELOPER_SPANS');
+  static const QueryOperation QUERY_OPERATION_DECLARED_CAPABILITIES =
+      QueryOperation._(
+          13, _omitEnumNames ? '' : 'QUERY_OPERATION_DECLARED_CAPABILITIES');
+  static const QueryOperation QUERY_OPERATION_READINESS =
+      QueryOperation._(14, _omitEnumNames ? '' : 'QUERY_OPERATION_READINESS');
+  static const QueryOperation QUERY_OPERATION_PROJECTION_STATS =
+      QueryOperation._(
+          15, _omitEnumNames ? '' : 'QUERY_OPERATION_PROJECTION_STATS');
+  static const QueryOperation QUERY_OPERATION_MEMORY_DROP_PROBE =
+      QueryOperation._(
+          16, _omitEnumNames ? '' : 'QUERY_OPERATION_MEMORY_DROP_PROBE');
+  static const QueryOperation QUERY_OPERATION_WARM =
+      QueryOperation._(17, _omitEnumNames ? '' : 'QUERY_OPERATION_WARM');
+  static const QueryOperation QUERY_OPERATION_REFRESH =
+      QueryOperation._(18, _omitEnumNames ? '' : 'QUERY_OPERATION_REFRESH');
+  static const QueryOperation QUERY_OPERATION_VERIFY_CHAIN = QueryOperation._(
+      19, _omitEnumNames ? '' : 'QUERY_OPERATION_VERIFY_CHAIN');
+  static const QueryOperation QUERY_OPERATION_HISTORY_PREFLIGHT =
+      QueryOperation._(
+          20, _omitEnumNames ? '' : 'QUERY_OPERATION_HISTORY_PREFLIGHT');
+  static const QueryOperation QUERY_OPERATION_ROUTE =
+      QueryOperation._(21, _omitEnumNames ? '' : 'QUERY_OPERATION_ROUTE');
+  static const QueryOperation QUERY_OPERATION_MINT =
+      QueryOperation._(22, _omitEnumNames ? '' : 'QUERY_OPERATION_MINT');
+  static const QueryOperation QUERY_OPERATION_CRYPTO_KEYGEN = QueryOperation._(
+      23, _omitEnumNames ? '' : 'QUERY_OPERATION_CRYPTO_KEYGEN');
+  static const QueryOperation QUERY_OPERATION_CRYPTO_SEAL_FIELD =
+      QueryOperation._(
+          24, _omitEnumNames ? '' : 'QUERY_OPERATION_CRYPTO_SEAL_FIELD');
+  static const QueryOperation QUERY_OPERATION_CRYPTO_BLIND_INDEX_TOKEN =
+      QueryOperation._(
+          25, _omitEnumNames ? '' : 'QUERY_OPERATION_CRYPTO_BLIND_INDEX_TOKEN');
+  static const QueryOperation QUERY_OPERATION_CRYPTO_OWNED_SCOPE_KEY =
+      QueryOperation._(
+          26, _omitEnumNames ? '' : 'QUERY_OPERATION_CRYPTO_OWNED_SCOPE_KEY');
+  static const QueryOperation QUERY_OPERATION_CRYPTO_OWNED_DEVICE_REQUEST =
+      QueryOperation._(27,
+          _omitEnumNames ? '' : 'QUERY_OPERATION_CRYPTO_OWNED_DEVICE_REQUEST');
+  static const QueryOperation QUERY_OPERATION_CRYPTO_OWNED_PREPARE_APPROVAL =
+      QueryOperation._(
+          28,
+          _omitEnumNames
+              ? ''
+              : 'QUERY_OPERATION_CRYPTO_OWNED_PREPARE_APPROVAL');
+  static const QueryOperation QUERY_OPERATION_CRYPTO_OWNED_PREPARE_RECOVERY =
+      QueryOperation._(
+          29,
+          _omitEnumNames
+              ? ''
+              : 'QUERY_OPERATION_CRYPTO_OWNED_PREPARE_RECOVERY');
+  static const QueryOperation QUERY_OPERATION_CRYPTO_WRAP_KEY =
+      QueryOperation._(
+          30, _omitEnumNames ? '' : 'QUERY_OPERATION_CRYPTO_WRAP_KEY');
+  static const QueryOperation QUERY_OPERATION_CRYPTO_UNWRAP_KEY =
+      QueryOperation._(
+          31, _omitEnumNames ? '' : 'QUERY_OPERATION_CRYPTO_UNWRAP_KEY');
+  static const QueryOperation QUERY_OPERATION_AUTHOR_KEYGEN = QueryOperation._(
+      32, _omitEnumNames ? '' : 'QUERY_OPERATION_AUTHOR_KEYGEN');
+  static const QueryOperation QUERY_OPERATION_ATTESTATION_SIGN =
+      QueryOperation._(
+          33, _omitEnumNames ? '' : 'QUERY_OPERATION_ATTESTATION_SIGN');
+  static const QueryOperation QUERY_OPERATION_RECEIPT_PATH = QueryOperation._(
+      34, _omitEnumNames ? '' : 'QUERY_OPERATION_RECEIPT_PATH');
+  static const QueryOperation QUERY_OPERATION_CERT_SIGN =
+      QueryOperation._(35, _omitEnumNames ? '' : 'QUERY_OPERATION_CERT_SIGN');
+  static const QueryOperation QUERY_OPERATION_BIRTH_TRUST_STATE =
+      QueryOperation._(
+          36, _omitEnumNames ? '' : 'QUERY_OPERATION_BIRTH_TRUST_STATE');
+  static const QueryOperation QUERY_OPERATION_ERA_CERT_SIGN = QueryOperation._(
+      37, _omitEnumNames ? '' : 'QUERY_OPERATION_ERA_CERT_SIGN');
+  static const QueryOperation QUERY_OPERATION_DELEGATION_CERT_SIGN =
+      QueryOperation._(
+          38, _omitEnumNames ? '' : 'QUERY_OPERATION_DELEGATION_CERT_SIGN');
+  static const QueryOperation QUERY_OPERATION_CANONICALIZE_FRONTIER =
+      QueryOperation._(
+          39, _omitEnumNames ? '' : 'QUERY_OPERATION_CANONICALIZE_FRONTIER');
+  static const QueryOperation QUERY_OPERATION_CANONICALIZE_PROJECTION =
+      QueryOperation._(
+          40, _omitEnumNames ? '' : 'QUERY_OPERATION_CANONICALIZE_PROJECTION');
+
+  static const $core.List<QueryOperation> values = <QueryOperation>[
+    QUERY_OPERATION_UNSPECIFIED,
+    QUERY_OPERATION_EXTREMUM,
+    QUERY_OPERATION_READ_POSTURE,
+    QUERY_OPERATION_CURRENT_LAW,
+    QUERY_OPERATION_INTERFACE_OFFER,
+    QUERY_OPERATION_RELATION_GATE_OFFER,
+    QUERY_OPERATION_SCENE_LAW,
+    QUERY_OPERATION_INSTALLED_LAW,
+    QUERY_OPERATION_DESCRIBE,
+    QUERY_OPERATION_KERNEL_RESOURCE,
+    QUERY_OPERATION_DEVELOPER_SPANS,
+    QUERY_OPERATION_DECLARED_CAPABILITIES,
+    QUERY_OPERATION_READINESS,
+    QUERY_OPERATION_PROJECTION_STATS,
+    QUERY_OPERATION_MEMORY_DROP_PROBE,
+    QUERY_OPERATION_WARM,
+    QUERY_OPERATION_REFRESH,
+    QUERY_OPERATION_VERIFY_CHAIN,
+    QUERY_OPERATION_HISTORY_PREFLIGHT,
+    QUERY_OPERATION_ROUTE,
+    QUERY_OPERATION_MINT,
+    QUERY_OPERATION_CRYPTO_KEYGEN,
+    QUERY_OPERATION_CRYPTO_SEAL_FIELD,
+    QUERY_OPERATION_CRYPTO_BLIND_INDEX_TOKEN,
+    QUERY_OPERATION_CRYPTO_OWNED_SCOPE_KEY,
+    QUERY_OPERATION_CRYPTO_OWNED_DEVICE_REQUEST,
+    QUERY_OPERATION_CRYPTO_OWNED_PREPARE_APPROVAL,
+    QUERY_OPERATION_CRYPTO_OWNED_PREPARE_RECOVERY,
+    QUERY_OPERATION_CRYPTO_WRAP_KEY,
+    QUERY_OPERATION_CRYPTO_UNWRAP_KEY,
+    QUERY_OPERATION_AUTHOR_KEYGEN,
+    QUERY_OPERATION_ATTESTATION_SIGN,
+    QUERY_OPERATION_RECEIPT_PATH,
+    QUERY_OPERATION_CERT_SIGN,
+    QUERY_OPERATION_BIRTH_TRUST_STATE,
+    QUERY_OPERATION_ERA_CERT_SIGN,
+    QUERY_OPERATION_DELEGATION_CERT_SIGN,
+    QUERY_OPERATION_CANONICALIZE_FRONTIER,
+    QUERY_OPERATION_CANONICALIZE_PROJECTION,
+  ];
+
+  static final $core.List<QueryOperation?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 40);
+  static QueryOperation? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const QueryOperation._(super.value, super.name);
+}
+
+class ResidentComponentKind extends $pb.ProtobufEnum {
+  static const ResidentComponentKind RESIDENT_COMPONENT_KIND_UNSPECIFIED =
+      ResidentComponentKind._(
+          0, _omitEnumNames ? '' : 'RESIDENT_COMPONENT_KIND_UNSPECIFIED');
+
+  /// The folded Workspace images held in RAM — usually the largest single term.
+  static const ResidentComponentKind RESIDENT_COMPONENT_KIND_FOLD_STATE =
+      ResidentComponentKind._(
+          1, _omitEnumNames ? '' : 'RESIDENT_COMPONENT_KIND_FOLD_STATE');
+
+  /// The read model's SQLite image (EXACT: page_count x page_size).
+  static const ResidentComponentKind RESIDENT_COMPONENT_KIND_READ_MODEL_SQLITE =
+      ResidentComponentKind._(
+          2, _omitEnumNames ? '' : 'RESIDENT_COMPONENT_KIND_READ_MODEL_SQLITE');
+
+  /// The read model's Rust-side resident indexes (type/scalar/set/relation).
+  static const ResidentComponentKind
+      RESIDENT_COMPONENT_KIND_READ_MODEL_INDEXES = ResidentComponentKind._(3,
+          _omitEnumNames ? '' : 'RESIDENT_COMPONENT_KIND_READ_MODEL_INDEXES');
+
+  /// This workspace's fractional share of interned payloads and shared law/policy bytes.
+  static const ResidentComponentKind RESIDENT_COMPONENT_KIND_SHARED_ATTRIBUTED =
+      ResidentComponentKind._(
+          4, _omitEnumNames ? '' : 'RESIDENT_COMPONENT_KIND_SHARED_ATTRIBUTED');
+
+  /// Per-workspace caches: schema, execution routes, visibility, relation schema, describe.
+  static const ResidentComponentKind RESIDENT_COMPONENT_KIND_WORKSPACE_CACHES =
+      ResidentComponentKind._(
+          5, _omitEnumNames ? '' : 'RESIDENT_COMPONENT_KIND_WORKSPACE_CACHES');
+
+  /// The gix object cache for this workspace's repo. A CEILING, not a measurement: gix exposes no
+  /// resident-size query, so `ceiling` is set and the console must render it as a bound.
+  static const ResidentComponentKind RESIDENT_COMPONENT_KIND_GIT_OBJECT_CACHE =
+      ResidentComponentKind._(
+          6, _omitEnumNames ? '' : 'RESIDENT_COMPONENT_KIND_GIT_OBJECT_CACHE');
+
+  static const $core.List<ResidentComponentKind> values =
+      <ResidentComponentKind>[
+    RESIDENT_COMPONENT_KIND_UNSPECIFIED,
+    RESIDENT_COMPONENT_KIND_FOLD_STATE,
+    RESIDENT_COMPONENT_KIND_READ_MODEL_SQLITE,
+    RESIDENT_COMPONENT_KIND_READ_MODEL_INDEXES,
+    RESIDENT_COMPONENT_KIND_SHARED_ATTRIBUTED,
+    RESIDENT_COMPONENT_KIND_WORKSPACE_CACHES,
+    RESIDENT_COMPONENT_KIND_GIT_OBJECT_CACHE,
+  ];
+
+  static final $core.List<ResidentComponentKind?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 6);
+  static ResidentComponentKind? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const ResidentComponentKind._(super.value, super.name);
+}
+
+class KernelLawCapability extends $pb.ProtobufEnum {
+  static const KernelLawCapability KERNEL_LAW_CAPABILITY_UNSPECIFIED =
+      KernelLawCapability._(
+          0, _omitEnumNames ? '' : 'KERNEL_LAW_CAPABILITY_UNSPECIFIED');
+  static const KernelLawCapability KERNEL_LAW_CAPABILITY_STAGE_ZERO_BOOTSTRAP =
+      KernelLawCapability._(1,
+          _omitEnumNames ? '' : 'KERNEL_LAW_CAPABILITY_STAGE_ZERO_BOOTSTRAP');
+
+  static const $core.List<KernelLawCapability> values = <KernelLawCapability>[
+    KERNEL_LAW_CAPABILITY_UNSPECIFIED,
+    KERNEL_LAW_CAPABILITY_STAGE_ZERO_BOOTSTRAP,
+  ];
+
+  static final $core.List<KernelLawCapability?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 1);
+  static KernelLawCapability? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const KernelLawCapability._(super.value, super.name);
+}
+
+class CheckpointCompression extends $pb.ProtobufEnum {
+  static const CheckpointCompression CHECKPOINT_COMPRESSION_NONE =
+      CheckpointCompression._(
+          0, _omitEnumNames ? '' : 'CHECKPOINT_COMPRESSION_NONE');
+  static const CheckpointCompression CHECKPOINT_COMPRESSION_GZIP =
+      CheckpointCompression._(
+          1, _omitEnumNames ? '' : 'CHECKPOINT_COMPRESSION_GZIP');
+
+  static const $core.List<CheckpointCompression> values =
+      <CheckpointCompression>[
+    CHECKPOINT_COMPRESSION_NONE,
+    CHECKPOINT_COMPRESSION_GZIP,
+  ];
+
+  static final $core.List<CheckpointCompression?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 1);
+  static CheckpointCompression? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const CheckpointCompression._(super.value, super.name);
+}
+
+class CheckpointVerificationPolicy extends $pb.ProtobufEnum {
+  /// The safe default. Recompute canonical verification before reporting the prefix as verified.
+  static const CheckpointVerificationPolicy
+      CHECKPOINT_VERIFICATION_POLICY_VERIFY_CANONICAL =
+      CheckpointVerificationPolicy._(
+          0,
+          _omitEnumNames
+              ? ''
+              : 'CHECKPOINT_VERIFICATION_POLICY_VERIFY_CANONICAL');
+
+  /// The caller explicitly trusts the custody which produced the typed receipt. The kernel still
+  /// checks its structural bindings, but may continue by suffix instead of replaying the prefix.
+  static const CheckpointVerificationPolicy
+      CHECKPOINT_VERIFICATION_POLICY_TRUST_PREVIOUSLY_VERIFIED =
+      CheckpointVerificationPolicy._(
+          1,
+          _omitEnumNames
+              ? ''
+              : 'CHECKPOINT_VERIFICATION_POLICY_TRUST_PREVIOUSLY_VERIFIED');
+
+  static const $core.List<CheckpointVerificationPolicy> values =
+      <CheckpointVerificationPolicy>[
+    CHECKPOINT_VERIFICATION_POLICY_VERIFY_CANONICAL,
+    CHECKPOINT_VERIFICATION_POLICY_TRUST_PREVIOUSLY_VERIFIED,
+  ];
+
+  static final $core.List<CheckpointVerificationPolicy?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 1);
+  static CheckpointVerificationPolicy? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const CheckpointVerificationPolicy._(super.value, super.name);
+}
+
+class CheckpointAssurance extends $pb.ProtobufEnum {
+  static const CheckpointAssurance CHECKPOINT_ASSURANCE_UNSPECIFIED =
+      CheckpointAssurance._(
+          0, _omitEnumNames ? '' : 'CHECKPOINT_ASSURANCE_UNSPECIFIED');
+  static const CheckpointAssurance CHECKPOINT_ASSURANCE_TRUSTED =
+      CheckpointAssurance._(
+          1, _omitEnumNames ? '' : 'CHECKPOINT_ASSURANCE_TRUSTED');
+  static const CheckpointAssurance CHECKPOINT_ASSURANCE_VERIFIED =
+      CheckpointAssurance._(
+          2, _omitEnumNames ? '' : 'CHECKPOINT_ASSURANCE_VERIFIED');
+
+  static const $core.List<CheckpointAssurance> values = <CheckpointAssurance>[
+    CHECKPOINT_ASSURANCE_UNSPECIFIED,
+    CHECKPOINT_ASSURANCE_TRUSTED,
+    CHECKPOINT_ASSURANCE_VERIFIED,
+  ];
+
+  static final $core.List<CheckpointAssurance?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 2);
+  static CheckpointAssurance? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const CheckpointAssurance._(super.value, super.name);
+}
+
+/// A sealed change is self-contained and may take the low-latency offer lane. A commit-tree
+/// requirement means the effect also introduced canonical custody (currently a typed USDA law
+/// closure), so sync must carry the authenticated Git tree rather than stripping it to change.usda.
+/// The kernel derives this from the commit-tree delta; hosts never infer it from domain/directive labels.
+class IntentTransportRequirement extends $pb.ProtobufEnum {
+  static const IntentTransportRequirement
+      INTENT_TRANSPORT_REQUIREMENT_UNSPECIFIED = IntentTransportRequirement._(
+          0, _omitEnumNames ? '' : 'INTENT_TRANSPORT_REQUIREMENT_UNSPECIFIED');
+  static const IntentTransportRequirement
+      INTENT_TRANSPORT_REQUIREMENT_SEALED_CHANGE = IntentTransportRequirement._(
+          1,
+          _omitEnumNames ? '' : 'INTENT_TRANSPORT_REQUIREMENT_SEALED_CHANGE');
+  static const IntentTransportRequirement
+      INTENT_TRANSPORT_REQUIREMENT_COMMIT_TREE = IntentTransportRequirement._(
+          2, _omitEnumNames ? '' : 'INTENT_TRANSPORT_REQUIREMENT_COMMIT_TREE');
+
+  static const $core.List<IntentTransportRequirement> values =
+      <IntentTransportRequirement>[
+    INTENT_TRANSPORT_REQUIREMENT_UNSPECIFIED,
+    INTENT_TRANSPORT_REQUIREMENT_SEALED_CHANGE,
+    INTENT_TRANSPORT_REQUIREMENT_COMMIT_TREE,
+  ];
+
+  static final $core.List<IntentTransportRequirement?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 2);
+  static IntentTransportRequirement? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const IntentTransportRequirement._(super.value, super.name);
+}
+
+class LifecycleInstallPhase extends $pb.ProtobufEnum {
+  static const LifecycleInstallPhase LIFECYCLE_INSTALL_PHASE_UNSPECIFIED =
+      LifecycleInstallPhase._(
+          0, _omitEnumNames ? '' : 'LIFECYCLE_INSTALL_PHASE_UNSPECIFIED');
+  static const LifecycleInstallPhase LIFECYCLE_INSTALL_PHASE_ACTIVE =
+      LifecycleInstallPhase._(
+          1, _omitEnumNames ? '' : 'LIFECYCLE_INSTALL_PHASE_ACTIVE');
+  static const LifecycleInstallPhase LIFECYCLE_INSTALL_PHASE_PENDING =
+      LifecycleInstallPhase._(
+          2, _omitEnumNames ? '' : 'LIFECYCLE_INSTALL_PHASE_PENDING');
+
+  static const $core.List<LifecycleInstallPhase> values =
+      <LifecycleInstallPhase>[
+    LIFECYCLE_INSTALL_PHASE_UNSPECIFIED,
+    LIFECYCLE_INSTALL_PHASE_ACTIVE,
+    LIFECYCLE_INSTALL_PHASE_PENDING,
+  ];
+
+  static final $core.List<LifecycleInstallPhase?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 2);
+  static LifecycleInstallPhase? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const LifecycleInstallPhase._(super.value, super.name);
+}
+
+class AuthorizationExplanation_Operation extends $pb.ProtobufEnum {
+  static const AuthorizationExplanation_Operation OPERATION_UNSPECIFIED =
+      AuthorizationExplanation_Operation._(
+          0, _omitEnumNames ? '' : 'OPERATION_UNSPECIFIED');
+  static const AuthorizationExplanation_Operation OPERATION_DIRECT =
+      AuthorizationExplanation_Operation._(
+          1, _omitEnumNames ? '' : 'OPERATION_DIRECT');
+  static const AuthorizationExplanation_Operation OPERATION_COMPUTED_USERSET =
+      AuthorizationExplanation_Operation._(
+          2, _omitEnumNames ? '' : 'OPERATION_COMPUTED_USERSET');
+  static const AuthorizationExplanation_Operation OPERATION_TUPLE_TO_USERSET =
+      AuthorizationExplanation_Operation._(
+          3, _omitEnumNames ? '' : 'OPERATION_TUPLE_TO_USERSET');
+  static const AuthorizationExplanation_Operation OPERATION_UNION =
+      AuthorizationExplanation_Operation._(
+          4, _omitEnumNames ? '' : 'OPERATION_UNION');
+  static const AuthorizationExplanation_Operation OPERATION_INTERSECTION =
+      AuthorizationExplanation_Operation._(
+          5, _omitEnumNames ? '' : 'OPERATION_INTERSECTION');
+  static const AuthorizationExplanation_Operation OPERATION_EXCLUSION =
+      AuthorizationExplanation_Operation._(
+          6, _omitEnumNames ? '' : 'OPERATION_EXCLUSION');
+  static const AuthorizationExplanation_Operation OPERATION_CONDITION =
+      AuthorizationExplanation_Operation._(
+          7, _omitEnumNames ? '' : 'OPERATION_CONDITION');
+
+  static const $core.List<AuthorizationExplanation_Operation> values =
+      <AuthorizationExplanation_Operation>[
+    OPERATION_UNSPECIFIED,
+    OPERATION_DIRECT,
+    OPERATION_COMPUTED_USERSET,
+    OPERATION_TUPLE_TO_USERSET,
+    OPERATION_UNION,
+    OPERATION_INTERSECTION,
+    OPERATION_EXCLUSION,
+    OPERATION_CONDITION,
+  ];
+
+  static final $core.List<AuthorizationExplanation_Operation?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 7);
+  static AuthorizationExplanation_Operation? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const AuthorizationExplanation_Operation._(super.value, super.name);
+}
+
+const $core.bool _omitEnumNames =
+    $core.bool.fromEnvironment('protobuf.omit_enum_names');