@githolon/dsl 0.108.7 → 0.110.1

package/dart_types/lib/src/proto/nomos/runtime/v2/placement_desk.pbenum.dart

@@ -0,0 +1,11 @@
+// This is a generated file - do not edit.
+//
+// Generated from nomos/runtime/v2/placement_desk.proto.
+
+// @dart = 3.3
+
+// ignore_for_file: annotate_overrides, camel_case_types, comment_references
+// ignore_for_file: constant_identifier_names
+// ignore_for_file: curly_braces_in_flow_control_structures
+// ignore_for_file: deprecated_member_use_from_same_package, library_prefixes
+// ignore_for_file: non_constant_identifier_names

package/dart_types/lib/src/proto/nomos/runtime/v2/receiving_group_desk.pb.dart

@@ -0,0 +1,636 @@
+// This is a generated file - do not edit.
+//
+// Generated from nomos/runtime/v2/receiving_group_desk.proto.
+
+// @dart = 3.3
+
+// ignore_for_file: annotate_overrides, camel_case_types, comment_references
+// ignore_for_file: constant_identifier_names
+// ignore_for_file: curly_braces_in_flow_control_structures
+// ignore_for_file: deprecated_member_use_from_same_package, library_prefixes
+// ignore_for_file: non_constant_identifier_names
+
+import 'dart:core' as $core;
+
+import 'package:protobuf/protobuf.dart' as $pb;
+
+import '../../kernel/v1/kernel.pb.dart' as $0;
+import 'receiving_group_desk.pbenum.dart';
+
+export 'package:protobuf/protobuf.dart' show GeneratedMessageGenericExtensions;
+
+export 'receiving_group_desk.pbenum.dart';
+
+/// The application's law package identity, carried from the compiled
+/// application descriptor: the closure that serves the injected
+/// application-home domain. The child installs it in its genesis after the
+/// parent platform's own Nomos controller, whose identity is per-platform
+/// installed state the desk observes from the provider at birth (never a
+/// compile-time constant); the kernel resolves both closures by hash from the
+/// parent's custody, so a wrong identity is its typed refusal.
+class ApplicationBirthContract extends $pb.GeneratedMessage {
+  factory ApplicationBirthContract({
+    $core.String? lawSha256,
+  }) {
+    final result = create();
+    if (lawSha256 != null) result.lawSha256 = lawSha256;
+    return result;
+  }
+
+  ApplicationBirthContract._();
+
+  factory ApplicationBirthContract.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory ApplicationBirthContract.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'ApplicationBirthContract',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'lawSha256')
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ApplicationBirthContract clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ApplicationBirthContract copyWith(
+          void Function(ApplicationBirthContract) updates) =>
+      super.copyWith((message) => updates(message as ApplicationBirthContract))
+          as ApplicationBirthContract;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static ApplicationBirthContract create() => ApplicationBirthContract._();
+  @$core.override
+  ApplicationBirthContract createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static ApplicationBirthContract getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<ApplicationBirthContract>(create);
+  static ApplicationBirthContract? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get lawSha256 => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set lawSha256($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasLawSha256() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearLawSha256() => $_clearField(1);
+}
+
+/// One local-open/birth procedure. Reception transports this paper once; the
+/// shared desk opens mounted local custody immediately. Remote presence or a
+/// successful birth returns typed LOCAL_REPLICA_NOT_READY while Replica Follow
+/// independently establishes local custody.
+class OpenReceivingGroupRequest extends $pb.GeneratedMessage {
+  factory OpenReceivingGroupRequest({
+    $core.String? session,
+    $core.String? application,
+    $core.String? principal,
+    $core.List<$core.int>? authToken,
+    ApplicationBirthContract? contract,
+    $core.Iterable<$0.DirectiveCall>? genesisSeed,
+    $core.bool? verifyHistory,
+    ConsoleEnrolmentRoute? enrolment,
+  }) {
+    final result = create();
+    if (session != null) result.session = session;
+    if (application != null) result.application = application;
+    if (principal != null) result.principal = principal;
+    if (authToken != null) result.authToken = authToken;
+    if (contract != null) result.contract = contract;
+    if (genesisSeed != null) result.genesisSeed.addAll(genesisSeed);
+    if (verifyHistory != null) result.verifyHistory = verifyHistory;
+    if (enrolment != null) result.enrolment = enrolment;
+    return result;
+  }
+
+  OpenReceivingGroupRequest._();
+
+  factory OpenReceivingGroupRequest.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory OpenReceivingGroupRequest.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'OpenReceivingGroupRequest',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'session')
+    ..aOS(2, _omitFieldNames ? '' : 'application')
+    ..aOS(3, _omitFieldNames ? '' : 'principal')
+    ..a<$core.List<$core.int>>(
+        4, _omitFieldNames ? '' : 'authToken', $pb.PbFieldType.OY)
+    ..aOM<ApplicationBirthContract>(5, _omitFieldNames ? '' : 'contract',
+        subBuilder: ApplicationBirthContract.create)
+    ..pPM<$0.DirectiveCall>(6, _omitFieldNames ? '' : 'genesisSeed',
+        subBuilder: $0.DirectiveCall.create)
+    ..aOB(7, _omitFieldNames ? '' : 'verifyHistory')
+    ..aOM<ConsoleEnrolmentRoute>(8, _omitFieldNames ? '' : 'enrolment',
+        subBuilder: ConsoleEnrolmentRoute.create)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  OpenReceivingGroupRequest clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  OpenReceivingGroupRequest copyWith(
+          void Function(OpenReceivingGroupRequest) updates) =>
+      super.copyWith((message) => updates(message as OpenReceivingGroupRequest))
+          as OpenReceivingGroupRequest;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static OpenReceivingGroupRequest create() => OpenReceivingGroupRequest._();
+  @$core.override
+  OpenReceivingGroupRequest createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static OpenReceivingGroupRequest getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<OpenReceivingGroupRequest>(create);
+  static OpenReceivingGroupRequest? _defaultInstance;
+
+  /// The application's root session, already bound to the receiving group's
+  /// workspace (an unborn bind is permitted). It carries no placement policy.
+  @$pb.TagNumber(1)
+  $core.String get session => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set session($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasSession() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearSession() => $_clearField(1);
+
+  /// The parent platform workspace the group is born under.
+  @$pb.TagNumber(2)
+  $core.String get application => $_getSZ(1);
+  @$pb.TagNumber(2)
+  set application($core.String value) => $_setString(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasApplication() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearApplication() => $_clearField(2);
+
+  /// The canonical `user:<sub>` principal the group belongs to.
+  @$pb.TagNumber(3)
+  $core.String get principal => $_getSZ(2);
+  @$pb.TagNumber(3)
+  set principal($core.String value) => $_setString(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasPrincipal() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearPrincipal() => $_clearField(3);
+
+  /// The identity-provider token; device-bound tokens are requested through the
+  /// credential-refresh effect's challenge, never built here.
+  @$pb.TagNumber(4)
+  $core.List<$core.int> get authToken => $_getN(3);
+  @$pb.TagNumber(4)
+  set authToken($core.List<$core.int> value) => $_setBytes(3, value);
+  @$pb.TagNumber(4)
+  $core.bool hasAuthToken() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearAuthToken() => $_clearField(4);
+
+  @$pb.TagNumber(5)
+  ApplicationBirthContract get contract => $_getN(4);
+  @$pb.TagNumber(5)
+  set contract(ApplicationBirthContract value) => $_setField(5, value);
+  @$pb.TagNumber(5)
+  $core.bool hasContract() => $_has(4);
+  @$pb.TagNumber(5)
+  void clearContract() => $_clearField(5);
+  @$pb.TagNumber(5)
+  ApplicationBirthContract ensureContract() => $_ensure(4);
+
+  /// Tenant seed steps are law (`application.receivingGroup.seed`, folded at
+  /// birth by the framework's birth directive); the desk refuses a non-empty list
+  /// rather than authoring a second seed lane.
+  @$pb.TagNumber(6)
+  $pb.PbList<$0.DirectiveCall> get genesisSeed => $_getList(5);
+
+  /// Re-run the complete signed history in the convergence tail (audit mode).
+  @$pb.TagNumber(7)
+  $core.bool get verifyHistory => $_getBF(6);
+  @$pb.TagNumber(7)
+  set verifyHistory($core.bool value) => $_setBool(6, value);
+  @$pb.TagNumber(7)
+  $core.bool hasVerifyHistory() => $_has(6);
+  @$pb.TagNumber(7)
+  void clearVerifyHistory() => $_clearField(7);
+
+  /// D22 enrolled-principal lane. When present, this device's key is seated by
+  /// the application's console enroller (a platform-shell effect), never by a
+  /// provider token, bearer, device-bound token or birth certificate in any
+  /// intent; the console births the principal's receiving group. When absent,
+  /// the historical provider-token lane runs unchanged.
+  @$pb.TagNumber(8)
+  ConsoleEnrolmentRoute get enrolment => $_getN(7);
+  @$pb.TagNumber(8)
+  set enrolment(ConsoleEnrolmentRoute value) => $_setField(8, value);
+  @$pb.TagNumber(8)
+  $core.bool hasEnrolment() => $_has(7);
+  @$pb.TagNumber(8)
+  void clearEnrolment() => $_clearField(8);
+  @$pb.TagNumber(8)
+  ConsoleEnrolmentRoute ensureEnrolment() => $_ensure(7);
+}
+
+/// Where an enrolled principal's device key is enrolled (D22/D23): the
+/// application's console enroller, the console tenant and the enrolled provider
+/// scope declared in law. Application configuration, never law or authority:
+/// the kernel judges the resulting `enrollDevice` like any other intent.
+class ConsoleEnrolmentRoute extends $pb.GeneratedMessage {
+  factory ConsoleEnrolmentRoute({
+    $core.String? console,
+    $core.String? tenant,
+    $core.String? scope,
+  }) {
+    final result = create();
+    if (console != null) result.console = console;
+    if (tenant != null) result.tenant = tenant;
+    if (scope != null) result.scope = scope;
+    return result;
+  }
+
+  ConsoleEnrolmentRoute._();
+
+  factory ConsoleEnrolmentRoute.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory ConsoleEnrolmentRoute.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'ConsoleEnrolmentRoute',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'console')
+    ..aOS(2, _omitFieldNames ? '' : 'tenant')
+    ..aOS(3, _omitFieldNames ? '' : 'scope')
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ConsoleEnrolmentRoute clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ConsoleEnrolmentRoute copyWith(
+          void Function(ConsoleEnrolmentRoute) updates) =>
+      super.copyWith((message) => updates(message as ConsoleEnrolmentRoute))
+          as ConsoleEnrolmentRoute;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static ConsoleEnrolmentRoute create() => ConsoleEnrolmentRoute._();
+  @$core.override
+  ConsoleEnrolmentRoute createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static ConsoleEnrolmentRoute getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<ConsoleEnrolmentRoute>(create);
+  static ConsoleEnrolmentRoute? _defaultInstance;
+
+  /// The console's origin, e.g. `https://console.nomos.cafe`.
+  @$pb.TagNumber(1)
+  $core.String get console => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set console($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasConsole() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearConsole() => $_clearField(1);
+
+  /// The console tenant (a jurisdiction, e.g. `co2-platform`).
+  @$pb.TagNumber(2)
+  $core.String get tenant => $_getSZ(1);
+  @$pb.TagNumber(2)
+  set tenant($core.String value) => $_setString(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasTenant() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearTenant() => $_clearField(2);
+
+  /// The enrolled provider scope (e.g. `co2`); principals are `<scope>:<subject>`.
+  @$pb.TagNumber(3)
+  $core.String get scope => $_getSZ(2);
+  @$pb.TagNumber(3)
+  set scope($core.String value) => $_setString(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasScope() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearScope() => $_clearField(3);
+}
+
+class ReceivingGroupOpened extends $pb.GeneratedMessage {
+  factory ReceivingGroupOpened({
+    $core.String? session,
+    $core.String? workspace,
+    $core.String? deviceKeySubject,
+  }) {
+    final result = create();
+    if (session != null) result.session = session;
+    if (workspace != null) result.workspace = workspace;
+    if (deviceKeySubject != null) result.deviceKeySubject = deviceKeySubject;
+    return result;
+  }
+
+  ReceivingGroupOpened._();
+
+  factory ReceivingGroupOpened.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory ReceivingGroupOpened.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'ReceivingGroupOpened',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'session')
+    ..aOS(2, _omitFieldNames ? '' : 'workspace')
+    ..aOS(3, _omitFieldNames ? '' : 'deviceKeySubject')
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ReceivingGroupOpened clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ReceivingGroupOpened copyWith(void Function(ReceivingGroupOpened) updates) =>
+      super.copyWith((message) => updates(message as ReceivingGroupOpened))
+          as ReceivingGroupOpened;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static ReceivingGroupOpened create() => ReceivingGroupOpened._();
+  @$core.override
+  ReceivingGroupOpened createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static ReceivingGroupOpened getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<ReceivingGroupOpened>(create);
+  static ReceivingGroupOpened? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get session => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set session($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasSession() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearSession() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $core.String get workspace => $_getSZ(1);
+  @$pb.TagNumber(2)
+  set workspace($core.String value) => $_setString(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasWorkspace() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearWorkspace() => $_clearField(2);
+
+  /// `key:<sha256(device public key)>` — this device's on-chain signer subject.
+  @$pb.TagNumber(3)
+  $core.String get deviceKeySubject => $_getSZ(2);
+  @$pb.TagNumber(3)
+  set deviceKeySubject($core.String value) => $_setString(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasDeviceKeySubject() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearDeviceKeySubject() => $_clearField(3);
+}
+
+/// The convergence tail, run as correspondence work after the gate returned:
+/// posture, framework device recovery when the kernel says this key is not a
+/// seated signer, authentication readiness with birth evidence, then optional
+/// full verification. It never fails the gate. The desk hands this paper to the
+/// shell's background lane; shells only perform its typed physical effects.
+class ConvergeReceivingGroupRequest extends $pb.GeneratedMessage {
+  factory ConvergeReceivingGroupRequest({
+    $core.String? session,
+    $core.bool? verifyHistory,
+    $core.String? application,
+    ConsoleEnrolmentRoute? enrolment,
+  }) {
+    final result = create();
+    if (session != null) result.session = session;
+    if (verifyHistory != null) result.verifyHistory = verifyHistory;
+    if (application != null) result.application = application;
+    if (enrolment != null) result.enrolment = enrolment;
+    return result;
+  }
+
+  ConvergeReceivingGroupRequest._();
+
+  factory ConvergeReceivingGroupRequest.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory ConvergeReceivingGroupRequest.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'ConvergeReceivingGroupRequest',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'session')
+    ..aOB(2, _omitFieldNames ? '' : 'verifyHistory')
+    ..aOS(3, _omitFieldNames ? '' : 'application')
+    ..aOM<ConsoleEnrolmentRoute>(4, _omitFieldNames ? '' : 'enrolment',
+        subBuilder: ConsoleEnrolmentRoute.create)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ConvergeReceivingGroupRequest clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ConvergeReceivingGroupRequest copyWith(
+          void Function(ConvergeReceivingGroupRequest) updates) =>
+      super.copyWith(
+              (message) => updates(message as ConvergeReceivingGroupRequest))
+          as ConvergeReceivingGroupRequest;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static ConvergeReceivingGroupRequest create() =>
+      ConvergeReceivingGroupRequest._();
+  @$core.override
+  ConvergeReceivingGroupRequest createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static ConvergeReceivingGroupRequest getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<ConvergeReceivingGroupRequest>(create);
+  static ConvergeReceivingGroupRequest? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get session => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set session($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasSession() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearSession() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $core.bool get verifyHistory => $_getBF(1);
+  @$pb.TagNumber(2)
+  set verifyHistory($core.bool value) => $_setBool(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasVerifyHistory() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearVerifyHistory() => $_clearField(2);
+
+  /// The parent platform the group was born under: the framework recovery door is offered there.
+  @$pb.TagNumber(3)
+  $core.String get application => $_getSZ(2);
+  @$pb.TagNumber(3)
+  set application($core.String value) => $_setString(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasApplication() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearApplication() => $_clearField(3);
+
+  /// Present for an enrolled-principal session (D22): an unseated key is
+  /// enrolled again through the console, never through the recovery door.
+  @$pb.TagNumber(4)
+  ConsoleEnrolmentRoute get enrolment => $_getN(3);
+  @$pb.TagNumber(4)
+  set enrolment(ConsoleEnrolmentRoute value) => $_setField(4, value);
+  @$pb.TagNumber(4)
+  $core.bool hasEnrolment() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearEnrolment() => $_clearField(4);
+  @$pb.TagNumber(4)
+  ConsoleEnrolmentRoute ensureEnrolment() => $_ensure(3);
+}
+
+/// Emitted as a RuntimeEvent to every session bound to the workspace, and
+/// returned as the tail paper's own outcome.
+class ReceivingGroupConvergence extends $pb.GeneratedMessage {
+  factory ReceivingGroupConvergence({
+    $core.String? workspace,
+    ReceivingGroupConvergencePhase? phase,
+    ReceivingGroupConvergenceOutcome? outcome,
+    $core.String? detail,
+    $0.AuthenticationPostureResponse? posture,
+  }) {
+    final result = create();
+    if (workspace != null) result.workspace = workspace;
+    if (phase != null) result.phase = phase;
+    if (outcome != null) result.outcome = outcome;
+    if (detail != null) result.detail = detail;
+    if (posture != null) result.posture = posture;
+    return result;
+  }
+
+  ReceivingGroupConvergence._();
+
+  factory ReceivingGroupConvergence.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory ReceivingGroupConvergence.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'ReceivingGroupConvergence',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'workspace')
+    ..aE<ReceivingGroupConvergencePhase>(2, _omitFieldNames ? '' : 'phase',
+        enumValues: ReceivingGroupConvergencePhase.values)
+    ..aE<ReceivingGroupConvergenceOutcome>(3, _omitFieldNames ? '' : 'outcome',
+        enumValues: ReceivingGroupConvergenceOutcome.values)
+    ..aOS(4, _omitFieldNames ? '' : 'detail')
+    ..aOM<$0.AuthenticationPostureResponse>(5, _omitFieldNames ? '' : 'posture',
+        subBuilder: $0.AuthenticationPostureResponse.create)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ReceivingGroupConvergence clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ReceivingGroupConvergence copyWith(
+          void Function(ReceivingGroupConvergence) updates) =>
+      super.copyWith((message) => updates(message as ReceivingGroupConvergence))
+          as ReceivingGroupConvergence;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static ReceivingGroupConvergence create() => ReceivingGroupConvergence._();
+  @$core.override
+  ReceivingGroupConvergence createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static ReceivingGroupConvergence getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<ReceivingGroupConvergence>(create);
+  static ReceivingGroupConvergence? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get workspace => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set workspace($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasWorkspace() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearWorkspace() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  ReceivingGroupConvergencePhase get phase => $_getN(1);
+  @$pb.TagNumber(2)
+  set phase(ReceivingGroupConvergencePhase value) => $_setField(2, value);
+  @$pb.TagNumber(2)
+  $core.bool hasPhase() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearPhase() => $_clearField(2);
+
+  @$pb.TagNumber(3)
+  ReceivingGroupConvergenceOutcome get outcome => $_getN(2);
+  @$pb.TagNumber(3)
+  set outcome(ReceivingGroupConvergenceOutcome value) => $_setField(3, value);
+  @$pb.TagNumber(3)
+  $core.bool hasOutcome() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearOutcome() => $_clearField(3);
+
+  /// The typed refusal or transport detail behind a deferral.
+  @$pb.TagNumber(4)
+  $core.String get detail => $_getSZ(3);
+  @$pb.TagNumber(4)
+  set detail($core.String value) => $_setString(3, value);
+  @$pb.TagNumber(4)
+  $core.bool hasDetail() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearDetail() => $_clearField(4);
+
+  /// The kernel's last observed posture, when one was read.
+  @$pb.TagNumber(5)
+  $0.AuthenticationPostureResponse get posture => $_getN(4);
+  @$pb.TagNumber(5)
+  set posture($0.AuthenticationPostureResponse value) => $_setField(5, value);
+  @$pb.TagNumber(5)
+  $core.bool hasPosture() => $_has(4);
+  @$pb.TagNumber(5)
+  void clearPosture() => $_clearField(5);
+  @$pb.TagNumber(5)
+  $0.AuthenticationPostureResponse ensurePosture() => $_ensure(4);
+}
+
+const $core.bool _omitFieldNames =
+    $core.bool.fromEnvironment('protobuf.omit_field_names');
+const $core.bool _omitMessageNames =
+    $core.bool.fromEnvironment('protobuf.omit_message_names');