@githolon/dsl 0.108.7 → 0.110.0

package/dart_types/lib/src/proto/nomos/kernel/v1/kernel.pbenum.dart

@@ -247,6 +247,36 @@ class KernelRefusalCode extends $pb.ProtobufEnum {
   static const KernelRefusalCode KERNEL_REFUSAL_CODE_PLAN_REJECTED =
       KernelRefusalCode._(
           51, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_PLAN_REJECTED');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_DOMAIN_REFUSED =
+      KernelRefusalCode._(
+          52, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_DOMAIN_REFUSED');
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_INVARIANT_EXECUTION_FAULT =
+      KernelRefusalCode._(
+          53,
+          _omitEnumNames
+              ? ''
+              : 'KERNEL_REFUSAL_CODE_INVARIANT_EXECUTION_FAULT');
+
+  /// This replica cannot countersign an effect at its current frontier. It has not judged
+  /// the offer; retain it for an eligible custodian or a later signer-enrollment frontier.
+  static const KernelRefusalCode
+      KERNEL_REFUSAL_CODE_CHECKPOINT_SIGNER_UNAVAILABLE = KernelRefusalCode._(
+          54,
+          _omitEnumNames
+              ? ''
+              : 'KERNEL_REFUSAL_CODE_CHECKPOINT_SIGNER_UNAVAILABLE');
+
+  /// A delivery's offer token (D17) names a base that is no longer the target's head. Nothing was
+  /// judged; prepare and sign again at the current head.
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_OFFER_BASE_STALE =
+      KernelRefusalCode._(
+          55, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_OFFER_BASE_STALE');
+
+  /// A carried birth the law does not admit: its recipe, genesis, attestation or founded lane is
+  /// refused (a certificate-chain failure keeps its own code, 47..50). The detail names the rule.
+  static const KernelRefusalCode KERNEL_REFUSAL_CODE_BIRTH_REFUSED =
+      KernelRefusalCode._(
+          56, _omitEnumNames ? '' : 'KERNEL_REFUSAL_CODE_BIRTH_REFUSED');
 
   static const $core.List<KernelRefusalCode> values = <KernelRefusalCode>[
     KERNEL_REFUSAL_CODE_UNSPECIFIED,
@@ -301,16 +331,211 @@ class KernelRefusalCode extends $pb.ProtobufEnum {
     KERNEL_REFUSAL_CODE_NOT_ROOTED_AT_ROOT,
     KERNEL_REFUSAL_CODE_DELEGATION_INVALID,
     KERNEL_REFUSAL_CODE_PLAN_REJECTED,
+    KERNEL_REFUSAL_CODE_DOMAIN_REFUSED,
+    KERNEL_REFUSAL_CODE_INVARIANT_EXECUTION_FAULT,
+    KERNEL_REFUSAL_CODE_CHECKPOINT_SIGNER_UNAVAILABLE,
+    KERNEL_REFUSAL_CODE_OFFER_BASE_STALE,
+    KERNEL_REFUSAL_CODE_BIRTH_REFUSED,
   ];
 
   static final $core.List<KernelRefusalCode?> _byValue =
-      $pb.ProtobufEnum.$_initByValueList(values, 51);
+      $pb.ProtobufEnum.$_initByValueList(values, 56);
   static KernelRefusalCode? valueOf($core.int value) =>
       value < 0 || value >= _byValue.length ? null : _byValue[value];
 
   const KernelRefusalCode._(super.value, super.name);
 }
 
+/// VINTF-inspired compatibility algebra over Nomos's canonical OpenUSD law.
+/// The application matrix is USDA; Protobuf carries only the closed request and
+/// typed verdict across the kernel ABI.
+class InterfaceMemberKind extends $pb.ProtobufEnum {
+  static const InterfaceMemberKind INTERFACE_MEMBER_KIND_UNSPECIFIED =
+      InterfaceMemberKind._(
+          0, _omitEnumNames ? '' : 'INTERFACE_MEMBER_KIND_UNSPECIFIED');
+  static const InterfaceMemberKind INTERFACE_MEMBER_KIND_DOMAIN =
+      InterfaceMemberKind._(
+          1, _omitEnumNames ? '' : 'INTERFACE_MEMBER_KIND_DOMAIN');
+  static const InterfaceMemberKind INTERFACE_MEMBER_KIND_DIRECTIVE =
+      InterfaceMemberKind._(
+          2, _omitEnumNames ? '' : 'INTERFACE_MEMBER_KIND_DIRECTIVE');
+  static const InterfaceMemberKind INTERFACE_MEMBER_KIND_AGGREGATE =
+      InterfaceMemberKind._(
+          3, _omitEnumNames ? '' : 'INTERFACE_MEMBER_KIND_AGGREGATE');
+  static const InterfaceMemberKind INTERFACE_MEMBER_KIND_FIELD =
+      InterfaceMemberKind._(
+          4, _omitEnumNames ? '' : 'INTERFACE_MEMBER_KIND_FIELD');
+
+  static const $core.List<InterfaceMemberKind> values = <InterfaceMemberKind>[
+    INTERFACE_MEMBER_KIND_UNSPECIFIED,
+    INTERFACE_MEMBER_KIND_DOMAIN,
+    INTERFACE_MEMBER_KIND_DIRECTIVE,
+    INTERFACE_MEMBER_KIND_AGGREGATE,
+    INTERFACE_MEMBER_KIND_FIELD,
+  ];
+
+  static final $core.List<InterfaceMemberKind?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 4);
+  static InterfaceMemberKind? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const InterfaceMemberKind._(super.value, super.name);
+}
+
+class InterfaceCompatibilityStatus extends $pb.ProtobufEnum {
+  static const InterfaceCompatibilityStatus
+      INTERFACE_COMPATIBILITY_STATUS_UNSPECIFIED =
+      InterfaceCompatibilityStatus._(0,
+          _omitEnumNames ? '' : 'INTERFACE_COMPATIBILITY_STATUS_UNSPECIFIED');
+  static const InterfaceCompatibilityStatus
+      INTERFACE_COMPATIBILITY_STATUS_EXACT = InterfaceCompatibilityStatus._(
+          1, _omitEnumNames ? '' : 'INTERFACE_COMPATIBILITY_STATUS_EXACT');
+  static const InterfaceCompatibilityStatus
+      INTERFACE_COMPATIBILITY_STATUS_COMPATIBLE =
+      InterfaceCompatibilityStatus._(
+          2, _omitEnumNames ? '' : 'INTERFACE_COMPATIBILITY_STATUS_COMPATIBLE');
+  static const InterfaceCompatibilityStatus
+      INTERFACE_COMPATIBILITY_STATUS_UNAVAILABLE =
+      InterfaceCompatibilityStatus._(3,
+          _omitEnumNames ? '' : 'INTERFACE_COMPATIBILITY_STATUS_UNAVAILABLE');
+  static const InterfaceCompatibilityStatus
+      INTERFACE_COMPATIBILITY_STATUS_INCOMPATIBLE =
+      InterfaceCompatibilityStatus._(4,
+          _omitEnumNames ? '' : 'INTERFACE_COMPATIBILITY_STATUS_INCOMPATIBLE');
+
+  static const $core.List<InterfaceCompatibilityStatus> values =
+      <InterfaceCompatibilityStatus>[
+    INTERFACE_COMPATIBILITY_STATUS_UNSPECIFIED,
+    INTERFACE_COMPATIBILITY_STATUS_EXACT,
+    INTERFACE_COMPATIBILITY_STATUS_COMPATIBLE,
+    INTERFACE_COMPATIBILITY_STATUS_UNAVAILABLE,
+    INTERFACE_COMPATIBILITY_STATUS_INCOMPATIBLE,
+  ];
+
+  static final $core.List<InterfaceCompatibilityStatus?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 4);
+  static InterfaceCompatibilityStatus? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const InterfaceCompatibilityStatus._(super.value, super.name);
+}
+
+class InterfaceCompatibilityReason extends $pb.ProtobufEnum {
+  static const InterfaceCompatibilityReason
+      INTERFACE_COMPATIBILITY_REASON_UNSPECIFIED =
+      InterfaceCompatibilityReason._(0,
+          _omitEnumNames ? '' : 'INTERFACE_COMPATIBILITY_REASON_UNSPECIFIED');
+  static const InterfaceCompatibilityReason
+      INTERFACE_COMPATIBILITY_REASON_DOMAIN_MISSING =
+      InterfaceCompatibilityReason._(
+          1,
+          _omitEnumNames
+              ? ''
+              : 'INTERFACE_COMPATIBILITY_REASON_DOMAIN_MISSING');
+  static const InterfaceCompatibilityReason
+      INTERFACE_COMPATIBILITY_REASON_MEMBER_MISSING =
+      InterfaceCompatibilityReason._(
+          2,
+          _omitEnumNames
+              ? ''
+              : 'INTERFACE_COMPATIBILITY_REASON_MEMBER_MISSING');
+  static const InterfaceCompatibilityReason
+      INTERFACE_COMPATIBILITY_REASON_FIELD_MISSING =
+      InterfaceCompatibilityReason._(3,
+          _omitEnumNames ? '' : 'INTERFACE_COMPATIBILITY_REASON_FIELD_MISSING');
+  static const InterfaceCompatibilityReason
+      INTERFACE_COMPATIBILITY_REASON_VALUE_KIND_CHANGED =
+      InterfaceCompatibilityReason._(
+          4,
+          _omitEnumNames
+              ? ''
+              : 'INTERFACE_COMPATIBILITY_REASON_VALUE_KIND_CHANGED');
+  static const InterfaceCompatibilityReason
+      INTERFACE_COMPATIBILITY_REASON_REQUIRED_INPUT_ADDED =
+      InterfaceCompatibilityReason._(
+          5,
+          _omitEnumNames
+              ? ''
+              : 'INTERFACE_COMPATIBILITY_REASON_REQUIRED_INPUT_ADDED');
+  static const InterfaceCompatibilityReason
+      INTERFACE_COMPATIBILITY_REASON_MATRIX_INVALID =
+      InterfaceCompatibilityReason._(
+          6,
+          _omitEnumNames
+              ? ''
+              : 'INTERFACE_COMPATIBILITY_REASON_MATRIX_INVALID');
+  static const InterfaceCompatibilityReason
+      INTERFACE_COMPATIBILITY_REASON_WIRE_CONTRACT_CHANGED =
+      InterfaceCompatibilityReason._(
+          7,
+          _omitEnumNames
+              ? ''
+              : 'INTERFACE_COMPATIBILITY_REASON_WIRE_CONTRACT_CHANGED');
+
+  static const $core.List<InterfaceCompatibilityReason> values =
+      <InterfaceCompatibilityReason>[
+    INTERFACE_COMPATIBILITY_REASON_UNSPECIFIED,
+    INTERFACE_COMPATIBILITY_REASON_DOMAIN_MISSING,
+    INTERFACE_COMPATIBILITY_REASON_MEMBER_MISSING,
+    INTERFACE_COMPATIBILITY_REASON_FIELD_MISSING,
+    INTERFACE_COMPATIBILITY_REASON_VALUE_KIND_CHANGED,
+    INTERFACE_COMPATIBILITY_REASON_REQUIRED_INPUT_ADDED,
+    INTERFACE_COMPATIBILITY_REASON_MATRIX_INVALID,
+    INTERFACE_COMPATIBILITY_REASON_WIRE_CONTRACT_CHANGED,
+  ];
+
+  static final $core.List<InterfaceCompatibilityReason?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 7);
+  static InterfaceCompatibilityReason? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const InterfaceCompatibilityReason._(super.value, super.name);
+}
+
+class MaintenancePhase extends $pb.ProtobufEnum {
+  static const MaintenancePhase MAINTENANCE_PHASE_UNSPECIFIED =
+      MaintenancePhase._(
+          0, _omitEnumNames ? '' : 'MAINTENANCE_PHASE_UNSPECIFIED');
+  static const MaintenancePhase MAINTENANCE_PHASE_READ_DOCUMENTS =
+      MaintenancePhase._(
+          1, _omitEnumNames ? '' : 'MAINTENANCE_PHASE_READ_DOCUMENTS');
+  static const MaintenancePhase MAINTENANCE_PHASE_SQLITE_INDEX =
+      MaintenancePhase._(
+          2, _omitEnumNames ? '' : 'MAINTENANCE_PHASE_SQLITE_INDEX');
+  static const MaintenancePhase MAINTENANCE_PHASE_COMMAND_FRONTIER =
+      MaintenancePhase._(
+          3, _omitEnumNames ? '' : 'MAINTENANCE_PHASE_COMMAND_FRONTIER');
+  static const MaintenancePhase MAINTENANCE_PHASE_COMMAND_ROUTE =
+      MaintenancePhase._(
+          4, _omitEnumNames ? '' : 'MAINTENANCE_PHASE_COMMAND_ROUTE');
+  static const MaintenancePhase MAINTENANCE_PHASE_GIT_CUSTODY =
+      MaintenancePhase._(
+          5, _omitEnumNames ? '' : 'MAINTENANCE_PHASE_GIT_CUSTODY');
+  static const MaintenancePhase MAINTENANCE_PHASE_READ_INDEX_CACHE =
+      MaintenancePhase._(
+          6, _omitEnumNames ? '' : 'MAINTENANCE_PHASE_READ_INDEX_CACHE');
+  static const MaintenancePhase MAINTENANCE_PHASE_COMPLETE =
+      MaintenancePhase._(7, _omitEnumNames ? '' : 'MAINTENANCE_PHASE_COMPLETE');
+
+  static const $core.List<MaintenancePhase> values = <MaintenancePhase>[
+    MAINTENANCE_PHASE_UNSPECIFIED,
+    MAINTENANCE_PHASE_READ_DOCUMENTS,
+    MAINTENANCE_PHASE_SQLITE_INDEX,
+    MAINTENANCE_PHASE_COMMAND_FRONTIER,
+    MAINTENANCE_PHASE_COMMAND_ROUTE,
+    MAINTENANCE_PHASE_GIT_CUSTODY,
+    MAINTENANCE_PHASE_READ_INDEX_CACHE,
+    MAINTENANCE_PHASE_COMPLETE,
+  ];
+
+  static final $core.List<MaintenancePhase?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 7);
+  static MaintenancePhase? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const MaintenancePhase._(super.value, super.name);
+}
+
 class VerifyChainWalk extends $pb.ProtobufEnum {
   static const VerifyChainWalk VERIFY_CHAIN_WALK_UNSPECIFIED =
       VerifyChainWalk._(
@@ -337,6 +562,57 @@ class VerifyChainWalk extends $pb.ProtobufEnum {
   const VerifyChainWalk._(super.value, super.name);
 }
 
+class EffectExecutionPlacement extends $pb.ProtobufEnum {
+  static const EffectExecutionPlacement EFFECT_EXECUTION_PLACEMENT_UNSPECIFIED =
+      EffectExecutionPlacement._(
+          0, _omitEnumNames ? '' : 'EFFECT_EXECUTION_PLACEMENT_UNSPECIFIED');
+
+  /// The currently authoritative custodian for the source workspace may execute.
+  /// Replicas and retained archives may store the obligation but may not perform it.
+  static const EffectExecutionPlacement EFFECT_EXECUTION_PLACEMENT_CUSTODIAN =
+      EffectExecutionPlacement._(
+          1, _omitEnumNames ? '' : 'EFFECT_EXECUTION_PLACEMENT_CUSTODIAN');
+
+  static const $core.List<EffectExecutionPlacement> values =
+      <EffectExecutionPlacement>[
+    EFFECT_EXECUTION_PLACEMENT_UNSPECIFIED,
+    EFFECT_EXECUTION_PLACEMENT_CUSTODIAN,
+  ];
+
+  static final $core.List<EffectExecutionPlacement?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 1);
+  static EffectExecutionPlacement? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const EffectExecutionPlacement._(super.value, super.name);
+}
+
+class EffectExecutionCardinality extends $pb.ProtobufEnum {
+  static const EffectExecutionCardinality
+      EFFECT_EXECUTION_CARDINALITY_UNSPECIFIED = EffectExecutionCardinality._(
+          0, _omitEnumNames ? '' : 'EFFECT_EXECUTION_CARDINALITY_UNSPECIFIED');
+
+  /// At most one logical executor is selected for this source workspace. Transport
+  /// still carries an idempotency key because a process can die after the provider
+  /// accepts a request but before local settlement becomes durable.
+  static const EffectExecutionCardinality
+      EFFECT_EXECUTION_CARDINALITY_SINGLETON = EffectExecutionCardinality._(
+          1, _omitEnumNames ? '' : 'EFFECT_EXECUTION_CARDINALITY_SINGLETON');
+
+  static const $core.List<EffectExecutionCardinality> values =
+      <EffectExecutionCardinality>[
+    EFFECT_EXECUTION_CARDINALITY_UNSPECIFIED,
+    EFFECT_EXECUTION_CARDINALITY_SINGLETON,
+  ];
+
+  static final $core.List<EffectExecutionCardinality?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 1);
+  static EffectExecutionCardinality? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const EffectExecutionCardinality._(super.value, super.name);
+}
+
 /// Exact framework lifecycle authoring. The candidate itself remains the opaque, content-addressed
 /// `law_usdz` package below; the kernel derives its identity and dependency closure after opening it.
 /// This intent exists so an installed controller can judge its successor using the controller's own
@@ -371,6 +647,117 @@ class ModelLifecycleOperation extends $pb.ProtobufEnum {
   const ModelLifecycleOperation._(super.value, super.name);
 }
 
+class ChildWorkspaceLifecycleStatus extends $pb.ProtobufEnum {
+  static const ChildWorkspaceLifecycleStatus
+      CHILD_WORKSPACE_LIFECYCLE_STATUS_UNSPECIFIED =
+      ChildWorkspaceLifecycleStatus._(0,
+          _omitEnumNames ? '' : 'CHILD_WORKSPACE_LIFECYCLE_STATUS_UNSPECIFIED');
+  static const ChildWorkspaceLifecycleStatus
+      CHILD_WORKSPACE_LIFECYCLE_STATUS_ACTIVE = ChildWorkspaceLifecycleStatus._(
+          1, _omitEnumNames ? '' : 'CHILD_WORKSPACE_LIFECYCLE_STATUS_ACTIVE');
+  static const ChildWorkspaceLifecycleStatus
+      CHILD_WORKSPACE_LIFECYCLE_STATUS_RETIRED =
+      ChildWorkspaceLifecycleStatus._(
+          2, _omitEnumNames ? '' : 'CHILD_WORKSPACE_LIFECYCLE_STATUS_RETIRED');
+  static const ChildWorkspaceLifecycleStatus
+      CHILD_WORKSPACE_LIFECYCLE_STATUS_RECLAIMED =
+      ChildWorkspaceLifecycleStatus._(3,
+          _omitEnumNames ? '' : 'CHILD_WORKSPACE_LIFECYCLE_STATUS_RECLAIMED');
+
+  static const $core.List<ChildWorkspaceLifecycleStatus> values =
+      <ChildWorkspaceLifecycleStatus>[
+    CHILD_WORKSPACE_LIFECYCLE_STATUS_UNSPECIFIED,
+    CHILD_WORKSPACE_LIFECYCLE_STATUS_ACTIVE,
+    CHILD_WORKSPACE_LIFECYCLE_STATUS_RETIRED,
+    CHILD_WORKSPACE_LIFECYCLE_STATUS_RECLAIMED,
+  ];
+
+  static final $core.List<ChildWorkspaceLifecycleStatus?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 3);
+  static ChildWorkspaceLifecycleStatus? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const ChildWorkspaceLifecycleStatus._(super.value, super.name);
+}
+
+class DeclaredAuthenticationProviderKind extends $pb.ProtobufEnum {
+  static const DeclaredAuthenticationProviderKind
+      DECLARED_AUTHENTICATION_PROVIDER_KIND_UNSPECIFIED =
+      DeclaredAuthenticationProviderKind._(
+          0,
+          _omitEnumNames
+              ? ''
+              : 'DECLARED_AUTHENTICATION_PROVIDER_KIND_UNSPECIFIED');
+
+  /// Legacy: a workspace-local provider row pinned by digest.
+  static const DeclaredAuthenticationProviderKind
+      DECLARED_AUTHENTICATION_PROVIDER_KIND_SELECTED =
+      DeclaredAuthenticationProviderKind._(
+          1,
+          _omitEnumNames
+              ? ''
+              : 'DECLARED_AUTHENTICATION_PROVIDER_KIND_SELECTED');
+
+  /// D22: principals are the tenant's users, enrolled by a holder of principalScope:<scope>#enroller.
+  static const DeclaredAuthenticationProviderKind
+      DECLARED_AUTHENTICATION_PROVIDER_KIND_ENROLLED =
+      DeclaredAuthenticationProviderKind._(
+          2,
+          _omitEnumNames
+              ? ''
+              : 'DECLARED_AUTHENTICATION_PROVIDER_KIND_ENROLLED');
+
+  /// D22: principals are <scope>:<sha256hex(root key)>; the root key certifies its own first signer.
+  static const DeclaredAuthenticationProviderKind
+      DECLARED_AUTHENTICATION_PROVIDER_KIND_SOVEREIGN =
+      DeclaredAuthenticationProviderKind._(
+          3,
+          _omitEnumNames
+              ? ''
+              : 'DECLARED_AUTHENTICATION_PROVIDER_KIND_SOVEREIGN');
+
+  static const $core.List<DeclaredAuthenticationProviderKind> values =
+      <DeclaredAuthenticationProviderKind>[
+    DECLARED_AUTHENTICATION_PROVIDER_KIND_UNSPECIFIED,
+    DECLARED_AUTHENTICATION_PROVIDER_KIND_SELECTED,
+    DECLARED_AUTHENTICATION_PROVIDER_KIND_ENROLLED,
+    DECLARED_AUTHENTICATION_PROVIDER_KIND_SOVEREIGN,
+  ];
+
+  static final $core.List<DeclaredAuthenticationProviderKind?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 3);
+  static DeclaredAuthenticationProviderKind? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const DeclaredAuthenticationProviderKind._(super.value, super.name);
+}
+
+class DeclaredLawMemberKind extends $pb.ProtobufEnum {
+  static const DeclaredLawMemberKind DECLARED_LAW_MEMBER_KIND_UNSPECIFIED =
+      DeclaredLawMemberKind._(
+          0, _omitEnumNames ? '' : 'DECLARED_LAW_MEMBER_KIND_UNSPECIFIED');
+  static const DeclaredLawMemberKind DECLARED_LAW_MEMBER_KIND_COMMAND =
+      DeclaredLawMemberKind._(
+          1, _omitEnumNames ? '' : 'DECLARED_LAW_MEMBER_KIND_COMMAND');
+  static const DeclaredLawMemberKind DECLARED_LAW_MEMBER_KIND_READ =
+      DeclaredLawMemberKind._(
+          2, _omitEnumNames ? '' : 'DECLARED_LAW_MEMBER_KIND_READ');
+
+  static const $core.List<DeclaredLawMemberKind> values =
+      <DeclaredLawMemberKind>[
+    DECLARED_LAW_MEMBER_KIND_UNSPECIFIED,
+    DECLARED_LAW_MEMBER_KIND_COMMAND,
+    DECLARED_LAW_MEMBER_KIND_READ,
+  ];
+
+  static final $core.List<DeclaredLawMemberKind?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 2);
+  static DeclaredLawMemberKind? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const DeclaredLawMemberKind._(super.value, super.name);
+}
+
 class ProviderTokenVerificationStatus extends $pb.ProtobufEnum {
   static const ProviderTokenVerificationStatus
       PROVIDER_TOKEN_VERIFICATION_STATUS_UNSPECIFIED =
@@ -485,6 +872,75 @@ class ProviderTokenVerificationStatus extends $pb.ProtobufEnum {
   const ProviderTokenVerificationStatus._(super.value, super.name);
 }
 
+/// A device credential is not the account. In particular, a revoked credential
+/// requires replacement under the declared recovery policy, never re-enrolment
+/// of the same key. UNSPECIFIED is an older kernel, not proof of absence.
+class DeviceSignerStatus extends $pb.ProtobufEnum {
+  static const DeviceSignerStatus DEVICE_SIGNER_STATUS_UNSPECIFIED =
+      DeviceSignerStatus._(
+          0, _omitEnumNames ? '' : 'DEVICE_SIGNER_STATUS_UNSPECIFIED');
+  static const DeviceSignerStatus DEVICE_SIGNER_STATUS_ACTIVE =
+      DeviceSignerStatus._(
+          1, _omitEnumNames ? '' : 'DEVICE_SIGNER_STATUS_ACTIVE');
+  static const DeviceSignerStatus DEVICE_SIGNER_STATUS_ABSENT =
+      DeviceSignerStatus._(
+          2, _omitEnumNames ? '' : 'DEVICE_SIGNER_STATUS_ABSENT');
+  static const DeviceSignerStatus DEVICE_SIGNER_STATUS_REVOKED =
+      DeviceSignerStatus._(
+          3, _omitEnumNames ? '' : 'DEVICE_SIGNER_STATUS_REVOKED');
+  static const DeviceSignerStatus DEVICE_SIGNER_STATUS_KEY_UNAVAILABLE =
+      DeviceSignerStatus._(
+          4, _omitEnumNames ? '' : 'DEVICE_SIGNER_STATUS_KEY_UNAVAILABLE');
+
+  static const $core.List<DeviceSignerStatus> values = <DeviceSignerStatus>[
+    DEVICE_SIGNER_STATUS_UNSPECIFIED,
+    DEVICE_SIGNER_STATUS_ACTIVE,
+    DEVICE_SIGNER_STATUS_ABSENT,
+    DEVICE_SIGNER_STATUS_REVOKED,
+    DEVICE_SIGNER_STATUS_KEY_UNAVAILABLE,
+  ];
+
+  static final $core.List<DeviceSignerStatus?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 4);
+  static DeviceSignerStatus? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const DeviceSignerStatus._(super.value, super.name);
+}
+
+class BirthEvidenceStatus extends $pb.ProtobufEnum {
+  static const BirthEvidenceStatus BIRTH_EVIDENCE_STATUS_UNSPECIFIED =
+      BirthEvidenceStatus._(
+          0, _omitEnumNames ? '' : 'BIRTH_EVIDENCE_STATUS_UNSPECIFIED');
+  static const BirthEvidenceStatus BIRTH_EVIDENCE_STATUS_NOT_REQUIRED =
+      BirthEvidenceStatus._(
+          1, _omitEnumNames ? '' : 'BIRTH_EVIDENCE_STATUS_NOT_REQUIRED');
+  static const BirthEvidenceStatus BIRTH_EVIDENCE_STATUS_READY =
+      BirthEvidenceStatus._(
+          2, _omitEnumNames ? '' : 'BIRTH_EVIDENCE_STATUS_READY');
+  static const BirthEvidenceStatus BIRTH_EVIDENCE_STATUS_DELEGATION_REQUIRED =
+      BirthEvidenceStatus._(
+          3, _omitEnumNames ? '' : 'BIRTH_EVIDENCE_STATUS_DELEGATION_REQUIRED');
+  static const BirthEvidenceStatus BIRTH_EVIDENCE_STATUS_INVALID =
+      BirthEvidenceStatus._(
+          4, _omitEnumNames ? '' : 'BIRTH_EVIDENCE_STATUS_INVALID');
+
+  static const $core.List<BirthEvidenceStatus> values = <BirthEvidenceStatus>[
+    BIRTH_EVIDENCE_STATUS_UNSPECIFIED,
+    BIRTH_EVIDENCE_STATUS_NOT_REQUIRED,
+    BIRTH_EVIDENCE_STATUS_READY,
+    BIRTH_EVIDENCE_STATUS_DELEGATION_REQUIRED,
+    BIRTH_EVIDENCE_STATUS_INVALID,
+  ];
+
+  static final $core.List<BirthEvidenceStatus?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 4);
+  static BirthEvidenceStatus? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const BirthEvidenceStatus._(super.value, super.name);
+}
+
 class QueryResultFormat extends $pb.ProtobufEnum {
   static const QueryResultFormat QUERY_RESULT_FORMAT_UNSPECIFIED =
       QueryResultFormat._(
@@ -497,15 +953,19 @@ class QueryResultFormat extends $pb.ProtobufEnum {
   static const QueryResultFormat QUERY_RESULT_FORMAT_NOMINAL_USDA =
       QueryResultFormat._(
           2, _omitEnumNames ? '' : 'QUERY_RESULT_FORMAT_NOMINAL_USDA');
+  static const QueryResultFormat QUERY_RESULT_FORMAT_APPLICATION_PROTOBUF =
+      QueryResultFormat._(
+          3, _omitEnumNames ? '' : 'QUERY_RESULT_FORMAT_APPLICATION_PROTOBUF');
 
   static const $core.List<QueryResultFormat> values = <QueryResultFormat>[
     QUERY_RESULT_FORMAT_UNSPECIFIED,
     QUERY_RESULT_FORMAT_LEGACY_VALUE,
     QUERY_RESULT_FORMAT_NOMINAL_USDA,
+    QUERY_RESULT_FORMAT_APPLICATION_PROTOBUF,
   ];
 
   static final $core.List<QueryResultFormat?> _byValue =
-      $pb.ProtobufEnum.$_initByValueList(values, 2);
+      $pb.ProtobufEnum.$_initByValueList(values, 3);
   static QueryResultFormat? valueOf($core.int value) =>
       value < 0 || value >= _byValue.length ? null : _byValue[value];
 
@@ -556,15 +1016,10 @@ class QueryOperation extends $pb.ProtobufEnum {
       QueryOperation._(18, _omitEnumNames ? '' : 'QUERY_OPERATION_REFRESH');
   static const QueryOperation QUERY_OPERATION_VERIFY_CHAIN = QueryOperation._(
       19, _omitEnumNames ? '' : 'QUERY_OPERATION_VERIFY_CHAIN');
-  static const QueryOperation QUERY_OPERATION_HISTORY_PREFLIGHT =
-      QueryOperation._(
-          20, _omitEnumNames ? '' : 'QUERY_OPERATION_HISTORY_PREFLIGHT');
+  static const QueryOperation QUERY_OPERATION_COUNTERFACTUAL = QueryOperation._(
+      20, _omitEnumNames ? '' : 'QUERY_OPERATION_COUNTERFACTUAL');
   static const QueryOperation QUERY_OPERATION_ROUTE =
       QueryOperation._(21, _omitEnumNames ? '' : 'QUERY_OPERATION_ROUTE');
-  static const QueryOperation QUERY_OPERATION_MINT =
-      QueryOperation._(22, _omitEnumNames ? '' : 'QUERY_OPERATION_MINT');
-  static const QueryOperation QUERY_OPERATION_CRYPTO_KEYGEN = QueryOperation._(
-      23, _omitEnumNames ? '' : 'QUERY_OPERATION_CRYPTO_KEYGEN');
   static const QueryOperation QUERY_OPERATION_CRYPTO_SEAL_FIELD =
       QueryOperation._(
           24, _omitEnumNames ? '' : 'QUERY_OPERATION_CRYPTO_SEAL_FIELD');
@@ -589,17 +1044,6 @@ class QueryOperation extends $pb.ProtobufEnum {
           _omitEnumNames
               ? ''
               : 'QUERY_OPERATION_CRYPTO_OWNED_PREPARE_RECOVERY');
-  static const QueryOperation QUERY_OPERATION_CRYPTO_WRAP_KEY =
-      QueryOperation._(
-          30, _omitEnumNames ? '' : 'QUERY_OPERATION_CRYPTO_WRAP_KEY');
-  static const QueryOperation QUERY_OPERATION_CRYPTO_UNWRAP_KEY =
-      QueryOperation._(
-          31, _omitEnumNames ? '' : 'QUERY_OPERATION_CRYPTO_UNWRAP_KEY');
-  static const QueryOperation QUERY_OPERATION_AUTHOR_KEYGEN = QueryOperation._(
-      32, _omitEnumNames ? '' : 'QUERY_OPERATION_AUTHOR_KEYGEN');
-  static const QueryOperation QUERY_OPERATION_ATTESTATION_SIGN =
-      QueryOperation._(
-          33, _omitEnumNames ? '' : 'QUERY_OPERATION_ATTESTATION_SIGN');
   static const QueryOperation QUERY_OPERATION_RECEIPT_PATH = QueryOperation._(
       34, _omitEnumNames ? '' : 'QUERY_OPERATION_RECEIPT_PATH');
   static const QueryOperation QUERY_OPERATION_CERT_SIGN =
@@ -638,20 +1082,14 @@ class QueryOperation extends $pb.ProtobufEnum {
     QUERY_OPERATION_WARM,
     QUERY_OPERATION_REFRESH,
     QUERY_OPERATION_VERIFY_CHAIN,
-    QUERY_OPERATION_HISTORY_PREFLIGHT,
+    QUERY_OPERATION_COUNTERFACTUAL,
     QUERY_OPERATION_ROUTE,
-    QUERY_OPERATION_MINT,
-    QUERY_OPERATION_CRYPTO_KEYGEN,
     QUERY_OPERATION_CRYPTO_SEAL_FIELD,
     QUERY_OPERATION_CRYPTO_BLIND_INDEX_TOKEN,
     QUERY_OPERATION_CRYPTO_OWNED_SCOPE_KEY,
     QUERY_OPERATION_CRYPTO_OWNED_DEVICE_REQUEST,
     QUERY_OPERATION_CRYPTO_OWNED_PREPARE_APPROVAL,
     QUERY_OPERATION_CRYPTO_OWNED_PREPARE_RECOVERY,
-    QUERY_OPERATION_CRYPTO_WRAP_KEY,
-    QUERY_OPERATION_CRYPTO_UNWRAP_KEY,
-    QUERY_OPERATION_AUTHOR_KEYGEN,
-    QUERY_OPERATION_ATTESTATION_SIGN,
     QUERY_OPERATION_RECEIPT_PATH,
     QUERY_OPERATION_CERT_SIGN,
     QUERY_OPERATION_BIRTH_TRUST_STATE,
@@ -669,6 +1107,36 @@ class QueryOperation extends $pb.ProtobufEnum {
   const QueryOperation._(super.value, super.name);
 }
 
+class ReadProjectionStorageKind extends $pb.ProtobufEnum {
+  static const ReadProjectionStorageKind
+      READ_PROJECTION_STORAGE_KIND_UNSPECIFIED = ReadProjectionStorageKind._(
+          0, _omitEnumNames ? '' : 'READ_PROJECTION_STORAGE_KIND_UNSPECIFIED');
+  static const ReadProjectionStorageKind READ_PROJECTION_STORAGE_KIND_RESIDENT =
+      ReadProjectionStorageKind._(
+          1, _omitEnumNames ? '' : 'READ_PROJECTION_STORAGE_KIND_RESIDENT');
+  static const ReadProjectionStorageKind
+      READ_PROJECTION_STORAGE_KIND_FILE_BACKED_SCALAR =
+      ReadProjectionStorageKind._(
+          2,
+          _omitEnumNames
+              ? ''
+              : 'READ_PROJECTION_STORAGE_KIND_FILE_BACKED_SCALAR');
+
+  static const $core.List<ReadProjectionStorageKind> values =
+      <ReadProjectionStorageKind>[
+    READ_PROJECTION_STORAGE_KIND_UNSPECIFIED,
+    READ_PROJECTION_STORAGE_KIND_RESIDENT,
+    READ_PROJECTION_STORAGE_KIND_FILE_BACKED_SCALAR,
+  ];
+
+  static final $core.List<ReadProjectionStorageKind?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 2);
+  static ReadProjectionStorageKind? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const ReadProjectionStorageKind._(super.value, super.name);
+}
+
 class ResidentComponentKind extends $pb.ProtobufEnum {
   static const ResidentComponentKind RESIDENT_COMPONENT_KIND_UNSPECIFIED =
       ResidentComponentKind._(
@@ -826,6 +1294,66 @@ class CheckpointAssurance extends $pb.ProtobufEnum {
   const CheckpointAssurance._(super.value, super.name);
 }
 
+/// Peer-relative kernel-memory intent. This does not promise durable Git custody
+/// or offline availability; CustodyRetentionIntent governs that separately.
+class KernelResidencyIntent extends $pb.ProtobufEnum {
+  static const KernelResidencyIntent KERNEL_RESIDENCY_INTENT_UNSPECIFIED =
+      KernelResidencyIntent._(
+          0, _omitEnumNames ? '' : 'KERNEL_RESIDENCY_INTENT_UNSPECIFIED');
+  static const KernelResidencyIntent KERNEL_RESIDENCY_INTENT_WARM =
+      KernelResidencyIntent._(
+          1, _omitEnumNames ? '' : 'KERNEL_RESIDENCY_INTENT_WARM');
+  static const KernelResidencyIntent KERNEL_RESIDENCY_INTENT_ON_DEMAND =
+      KernelResidencyIntent._(
+          2, _omitEnumNames ? '' : 'KERNEL_RESIDENCY_INTENT_ON_DEMAND');
+
+  static const $core.List<KernelResidencyIntent> values =
+      <KernelResidencyIntent>[
+    KERNEL_RESIDENCY_INTENT_UNSPECIFIED,
+    KERNEL_RESIDENCY_INTENT_WARM,
+    KERNEL_RESIDENCY_INTENT_ON_DEMAND,
+  ];
+
+  static final $core.List<KernelResidencyIntent?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 2);
+  static KernelResidencyIntent? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const KernelResidencyIntent._(super.value, super.name);
+}
+
+/// Peer-relative durable Git-custody intent, independent of whether the kernel
+/// keeps the workspace open in memory.
+class CustodyRetentionIntent extends $pb.ProtobufEnum {
+  static const CustodyRetentionIntent CUSTODY_RETENTION_INTENT_UNSPECIFIED =
+      CustodyRetentionIntent._(
+          0, _omitEnumNames ? '' : 'CUSTODY_RETENTION_INTENT_UNSPECIFIED');
+  static const CustodyRetentionIntent CUSTODY_RETENTION_INTENT_RETAIN =
+      CustodyRetentionIntent._(
+          1, _omitEnumNames ? '' : 'CUSTODY_RETENTION_INTENT_RETAIN');
+  static const CustodyRetentionIntent CUSTODY_RETENTION_INTENT_CACHE =
+      CustodyRetentionIntent._(
+          2, _omitEnumNames ? '' : 'CUSTODY_RETENTION_INTENT_CACHE');
+  static const CustodyRetentionIntent CUSTODY_RETENTION_INTENT_NONE =
+      CustodyRetentionIntent._(
+          3, _omitEnumNames ? '' : 'CUSTODY_RETENTION_INTENT_NONE');
+
+  static const $core.List<CustodyRetentionIntent> values =
+      <CustodyRetentionIntent>[
+    CUSTODY_RETENTION_INTENT_UNSPECIFIED,
+    CUSTODY_RETENTION_INTENT_RETAIN,
+    CUSTODY_RETENTION_INTENT_CACHE,
+    CUSTODY_RETENTION_INTENT_NONE,
+  ];
+
+  static final $core.List<CustodyRetentionIntent?> _byValue =
+      $pb.ProtobufEnum.$_initByValueList(values, 3);
+  static CustodyRetentionIntent? valueOf($core.int value) =>
+      value < 0 || value >= _byValue.length ? null : _byValue[value];
+
+  const CustodyRetentionIntent._(super.value, super.name);
+}
+
 /// A sealed change is self-contained and may take the low-latency offer lane. A commit-tree
 /// requirement means the effect also introduced canonical custody (currently a typed USDA law
 /// closure), so sync must carry the authenticated Git tree rather than stripping it to change.usda.