@githolon/dsl 0.108.7 → 0.110.1

package/dart_types/lib/src/proto/nomos/runtime/v2/residency_desk.pb.dart

@@ -0,0 +1,2782 @@
+// This is a generated file - do not edit.
+//
+// Generated from nomos/runtime/v2/residency_desk.proto.
+
+// @dart = 3.3
+
+// ignore_for_file: annotate_overrides, camel_case_types, comment_references
+// ignore_for_file: constant_identifier_names
+// ignore_for_file: curly_braces_in_flow_control_structures
+// ignore_for_file: deprecated_member_use_from_same_package, library_prefixes
+// ignore_for_file: non_constant_identifier_names
+
+import 'dart:core' as $core;
+
+import 'package:fixnum/fixnum.dart' as $fixnum;
+import 'package:protobuf/protobuf.dart' as $pb;
+
+import '../../kernel/v1/kernel.pb.dart' as $0;
+import 'custody_desk.pb.dart' as $1;
+import 'residency_desk.pbenum.dart';
+
+export 'package:protobuf/protobuf.dart' show GeneratedMessageGenericExtensions;
+
+export 'residency_desk.pbenum.dart';
+
+/// A platform shell reports physical memory pressure; it never chooses which
+/// workspace to evict. The peer office applies the shared warm-lease policy and
+/// preserves Git custody while releasing only kernel residency.
+class ResidencyPressureRequest extends $pb.GeneratedMessage {
+  factory ResidencyPressureRequest() => create();
+
+  ResidencyPressureRequest._();
+
+  factory ResidencyPressureRequest.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory ResidencyPressureRequest.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'ResidencyPressureRequest',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ResidencyPressureRequest clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ResidencyPressureRequest copyWith(
+          void Function(ResidencyPressureRequest) updates) =>
+      super.copyWith((message) => updates(message as ResidencyPressureRequest))
+          as ResidencyPressureRequest;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static ResidencyPressureRequest create() => ResidencyPressureRequest._();
+  @$core.override
+  ResidencyPressureRequest createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static ResidencyPressureRequest getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<ResidencyPressureRequest>(create);
+  static ResidencyPressureRequest? _defaultInstance;
+}
+
+/// Internal Peer Runtime paper used by its background scheduler. The shell
+/// never authors this request; it only executes the resulting physical effect.
+class RetainFrontierRequest extends $pb.GeneratedMessage {
+  factory RetainFrontierRequest({
+    $core.String? workspace,
+    $core.String? branch,
+    $core.String? head,
+  }) {
+    final result = create();
+    if (workspace != null) result.workspace = workspace;
+    if (branch != null) result.branch = branch;
+    if (head != null) result.head = head;
+    return result;
+  }
+
+  RetainFrontierRequest._();
+
+  factory RetainFrontierRequest.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory RetainFrontierRequest.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'RetainFrontierRequest',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'workspace')
+    ..aOS(2, _omitFieldNames ? '' : 'branch')
+    ..aOS(3, _omitFieldNames ? '' : 'head')
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  RetainFrontierRequest clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  RetainFrontierRequest copyWith(
+          void Function(RetainFrontierRequest) updates) =>
+      super.copyWith((message) => updates(message as RetainFrontierRequest))
+          as RetainFrontierRequest;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static RetainFrontierRequest create() => RetainFrontierRequest._();
+  @$core.override
+  RetainFrontierRequest createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static RetainFrontierRequest getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<RetainFrontierRequest>(create);
+  static RetainFrontierRequest? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get workspace => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set workspace($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasWorkspace() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearWorkspace() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $core.String get branch => $_getSZ(1);
+  @$pb.TagNumber(2)
+  set branch($core.String value) => $_setString(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasBranch() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearBranch() => $_clearField(2);
+
+  @$pb.TagNumber(3)
+  $core.String get head => $_getSZ(2);
+  @$pb.TagNumber(3)
+  set head($core.String value) => $_setString(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasHead() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearHead() => $_clearField(3);
+}
+
+class ResidencyPressureRelieved extends $pb.GeneratedMessage {
+  factory ResidencyPressureRelieved({
+    $core.Iterable<$core.String>? evictedWorkspaces,
+    $core.Iterable<$core.String>? warmWorkspaces,
+    $fixnum.Int64? warmResidencyMillis,
+  }) {
+    final result = create();
+    if (evictedWorkspaces != null)
+      result.evictedWorkspaces.addAll(evictedWorkspaces);
+    if (warmWorkspaces != null) result.warmWorkspaces.addAll(warmWorkspaces);
+    if (warmResidencyMillis != null)
+      result.warmResidencyMillis = warmResidencyMillis;
+    return result;
+  }
+
+  ResidencyPressureRelieved._();
+
+  factory ResidencyPressureRelieved.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory ResidencyPressureRelieved.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'ResidencyPressureRelieved',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..pPS(1, _omitFieldNames ? '' : 'evictedWorkspaces')
+    ..pPS(2, _omitFieldNames ? '' : 'warmWorkspaces')
+    ..a<$fixnum.Int64>(
+        3, _omitFieldNames ? '' : 'warmResidencyMillis', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ResidencyPressureRelieved clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ResidencyPressureRelieved copyWith(
+          void Function(ResidencyPressureRelieved) updates) =>
+      super.copyWith((message) => updates(message as ResidencyPressureRelieved))
+          as ResidencyPressureRelieved;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static ResidencyPressureRelieved create() => ResidencyPressureRelieved._();
+  @$core.override
+  ResidencyPressureRelieved createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static ResidencyPressureRelieved getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<ResidencyPressureRelieved>(create);
+  static ResidencyPressureRelieved? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $pb.PbList<$core.String> get evictedWorkspaces => $_getList(0);
+
+  @$pb.TagNumber(2)
+  $pb.PbList<$core.String> get warmWorkspaces => $_getList(1);
+
+  @$pb.TagNumber(3)
+  $fixnum.Int64 get warmResidencyMillis => $_getI64(2);
+  @$pb.TagNumber(3)
+  set warmResidencyMillis($fixnum.Int64 value) => $_setInt64(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasWarmResidencyMillis() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearWarmResidencyMillis() => $_clearField(3);
+}
+
+/// ── Physical host telemetry ───────────────────────────────────────────────────
+/// A platform-shell process describes itself. This is operator telemetry with no
+/// authority: nothing here admits an effect, selects a kernel or moves custody.
+/// It is the ONE contract for a host's /health and /kernel/refresh answers,
+/// the edge's /v1/ops/residency aggregate, placement headroom, peer restarts and the
+/// kernel-release swap proof. Until 2026-09-07 each of those hand-rolled its own
+/// JSON and a renamed field (pid/booted → replica) silently broke kernel releases.
+/// Physical detail about ONE resident workspace, keyed by a name in
+/// HostHealth.resident_workspaces. Telemetry only: it ranks candidates for an operator or a
+/// shedding policy and admits nothing.
+class ResidentWorkspaceDetail extends $pb.GeneratedMessage {
+  factory ResidentWorkspaceDetail({
+    $core.String? workspace,
+    $fixnum.Int64? idleMillis,
+    $fixnum.Int64? repositoryBytes,
+    $fixnum.Int64? materializedFrontierBytes,
+    ResidentWorkspaceReadiness? readiness,
+    $core.String? sqliteHead,
+    $core.String? gitHead,
+    LocalHistoryPosture? historyPosture,
+    $core.int? shallowBoundaries,
+    $fixnum.Int64? repositoryMeasuredAtUnixMillis,
+    $fixnum.Int64? frontierMeasuredAtUnixMillis,
+    ResidentPlacement? placement,
+    ResidentOutbox? outbox,
+    ResidentAggregateCensus? census,
+    $core.String? fullReplayHead,
+  }) {
+    final result = create();
+    if (workspace != null) result.workspace = workspace;
+    if (idleMillis != null) result.idleMillis = idleMillis;
+    if (repositoryBytes != null) result.repositoryBytes = repositoryBytes;
+    if (materializedFrontierBytes != null)
+      result.materializedFrontierBytes = materializedFrontierBytes;
+    if (readiness != null) result.readiness = readiness;
+    if (sqliteHead != null) result.sqliteHead = sqliteHead;
+    if (gitHead != null) result.gitHead = gitHead;
+    if (historyPosture != null) result.historyPosture = historyPosture;
+    if (shallowBoundaries != null) result.shallowBoundaries = shallowBoundaries;
+    if (repositoryMeasuredAtUnixMillis != null)
+      result.repositoryMeasuredAtUnixMillis = repositoryMeasuredAtUnixMillis;
+    if (frontierMeasuredAtUnixMillis != null)
+      result.frontierMeasuredAtUnixMillis = frontierMeasuredAtUnixMillis;
+    if (placement != null) result.placement = placement;
+    if (outbox != null) result.outbox = outbox;
+    if (census != null) result.census = census;
+    if (fullReplayHead != null) result.fullReplayHead = fullReplayHead;
+    return result;
+  }
+
+  ResidentWorkspaceDetail._();
+
+  factory ResidentWorkspaceDetail.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory ResidentWorkspaceDetail.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'ResidentWorkspaceDetail',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'workspace')
+    ..a<$fixnum.Int64>(
+        2, _omitFieldNames ? '' : 'idleMillis', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(
+        3, _omitFieldNames ? '' : 'repositoryBytes', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(4, _omitFieldNames ? '' : 'materializedFrontierBytes',
+        $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..aE<ResidentWorkspaceReadiness>(5, _omitFieldNames ? '' : 'readiness',
+        enumValues: ResidentWorkspaceReadiness.values)
+    ..aOS(6, _omitFieldNames ? '' : 'sqliteHead')
+    ..aOS(7, _omitFieldNames ? '' : 'gitHead')
+    ..aE<LocalHistoryPosture>(8, _omitFieldNames ? '' : 'historyPosture',
+        enumValues: LocalHistoryPosture.values)
+    ..aI(9, _omitFieldNames ? '' : 'shallowBoundaries',
+        fieldType: $pb.PbFieldType.OU3)
+    ..a<$fixnum.Int64>(
+        10,
+        _omitFieldNames ? '' : 'repositoryMeasuredAtUnixMillis',
+        $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(
+        11,
+        _omitFieldNames ? '' : 'frontierMeasuredAtUnixMillis',
+        $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..aOM<ResidentPlacement>(12, _omitFieldNames ? '' : 'placement',
+        subBuilder: ResidentPlacement.create)
+    ..aOM<ResidentOutbox>(13, _omitFieldNames ? '' : 'outbox',
+        subBuilder: ResidentOutbox.create)
+    ..aOM<ResidentAggregateCensus>(14, _omitFieldNames ? '' : 'census',
+        subBuilder: ResidentAggregateCensus.create)
+    ..aOS(15, _omitFieldNames ? '' : 'fullReplayHead')
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ResidentWorkspaceDetail clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ResidentWorkspaceDetail copyWith(
+          void Function(ResidentWorkspaceDetail) updates) =>
+      super.copyWith((message) => updates(message as ResidentWorkspaceDetail))
+          as ResidentWorkspaceDetail;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static ResidentWorkspaceDetail create() => ResidentWorkspaceDetail._();
+  @$core.override
+  ResidentWorkspaceDetail createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static ResidentWorkspaceDetail getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<ResidentWorkspaceDetail>(create);
+  static ResidentWorkspaceDetail? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get workspace => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set workspace($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasWorkspace() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearWorkspace() => $_clearField(1);
+
+  /// Milliseconds since this host last carried work for this workspace. A host that has not
+  /// observed it since starting reports its own uptime, never zero.
+  @$pb.TagNumber(2)
+  $fixnum.Int64 get idleMillis => $_getI64(1);
+  @$pb.TagNumber(2)
+  set idleMillis($fixnum.Int64 value) => $_setInt64(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasIdleMillis() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearIdleMillis() => $_clearField(2);
+
+  /// Bytes of retained Git custody in the kernel's preopened filesystem. This is the only
+  /// per-workspace magnitude a peer can state honestly — the kernel's linear memory is one
+  /// allocator shared by every resident — so it is a FLOOR on a workspace's footprint, not its total.
+  @$pb.TagNumber(3)
+  $fixnum.Int64 get repositoryBytes => $_getI64(2);
+  @$pb.TagNumber(3)
+  set repositoryBytes($fixnum.Int64 value) => $_setInt64(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasRepositoryBytes() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearRepositoryBytes() => $_clearField(3);
+
+  /// Exact resident SQLite image (`page_count x page_size`) for this workspace's current `main`
+  /// projection. This is a useful operational proxy for materialized frontier size, not canonical
+  /// application-state bytes and not total resident memory. Absent means not measured.
+  @$pb.TagNumber(4)
+  $fixnum.Int64 get materializedFrontierBytes => $_getI64(3);
+  @$pb.TagNumber(4)
+  set materializedFrontierBytes($fixnum.Int64 value) => $_setInt64(3, value);
+  @$pb.TagNumber(4)
+  $core.bool hasMaterializedFrontierBytes() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearMaterializedFrontierBytes() => $_clearField(4);
+
+  /// One exhaustive operator posture derived from the typed facts below. A consumer never infers
+  /// readiness from non-zero byte counts, and aligned means the SQLite accelerator and Git custody
+  /// name the SAME authenticated head.
+  @$pb.TagNumber(5)
+  ResidentWorkspaceReadiness get readiness => $_getN(4);
+  @$pb.TagNumber(5)
+  set readiness(ResidentWorkspaceReadiness value) => $_setField(5, value);
+  @$pb.TagNumber(5)
+  $core.bool hasReadiness() => $_has(4);
+  @$pb.TagNumber(5)
+  void clearReadiness() => $_clearField(5);
+
+  /// Exact Git head whose verified SQLite accelerator can currently answer reads. Absent means no
+  /// read-ready projection is attached; it does not mean an on-disk accelerator is impossible.
+  @$pb.TagNumber(6)
+  $core.String get sqliteHead => $_getSZ(5);
+  @$pb.TagNumber(6)
+  set sqliteHead($core.String value) => $_setString(5, value);
+  @$pb.TagNumber(6)
+  $core.bool hasSqliteHead() => $_has(5);
+  @$pb.TagNumber(6)
+  void clearSqliteHead() => $_clearField(6);
+
+  /// Exact refs/heads/main currently mounted as local Git custody. Absent is compatible with
+  /// SQLITE_ONLY: a disposable cloud process may serve a retained verified accelerator before it
+  /// has reason to reopen shallow Git custody.
+  @$pb.TagNumber(7)
+  $core.String get gitHead => $_getSZ(6);
+  @$pb.TagNumber(7)
+  set gitHead($core.String value) => $_setString(6, value);
+  @$pb.TagNumber(7)
+  $core.bool hasGitHead() => $_has(6);
+  @$pb.TagNumber(7)
+  void clearGitHead() => $_clearField(7);
+
+  @$pb.TagNumber(8)
+  LocalHistoryPosture get historyPosture => $_getN(7);
+  @$pb.TagNumber(8)
+  set historyPosture(LocalHistoryPosture value) => $_setField(8, value);
+  @$pb.TagNumber(8)
+  $core.bool hasHistoryPosture() => $_has(7);
+  @$pb.TagNumber(8)
+  void clearHistoryPosture() => $_clearField(8);
+
+  /// Exact number of Git shallow boundaries when history posture is PARTIAL.
+  @$pb.TagNumber(9)
+  $core.int get shallowBoundaries => $_getIZ(8);
+  @$pb.TagNumber(9)
+  set shallowBoundaries($core.int value) => $_setUnsignedInt32(8, value);
+  @$pb.TagNumber(9)
+  $core.bool hasShallowBoundaries() => $_has(8);
+  @$pb.TagNumber(9)
+  void clearShallowBoundaries() => $_clearField(9);
+
+  /// Host times of the independently amortised physical byte samples. Heads and lifecycle posture
+  /// are refreshed by their own transitions and do not inherit these ages.
+  @$pb.TagNumber(10)
+  $fixnum.Int64 get repositoryMeasuredAtUnixMillis => $_getI64(9);
+  @$pb.TagNumber(10)
+  set repositoryMeasuredAtUnixMillis($fixnum.Int64 value) =>
+      $_setInt64(9, value);
+  @$pb.TagNumber(10)
+  $core.bool hasRepositoryMeasuredAtUnixMillis() => $_has(9);
+  @$pb.TagNumber(10)
+  void clearRepositoryMeasuredAtUnixMillis() => $_clearField(10);
+
+  @$pb.TagNumber(11)
+  $fixnum.Int64 get frontierMeasuredAtUnixMillis => $_getI64(10);
+  @$pb.TagNumber(11)
+  set frontierMeasuredAtUnixMillis($fixnum.Int64 value) =>
+      $_setInt64(10, value);
+  @$pb.TagNumber(11)
+  $core.bool hasFrontierMeasuredAtUnixMillis() => $_has(10);
+  @$pb.TagNumber(11)
+  void clearFrontierMeasuredAtUnixMillis() => $_clearField(11);
+
+  /// The placement this host last resolved for the workspace. A cached observation from the
+  /// placement desk's own reads, never a kernel read at health time. Absent means the host has
+  /// not resolved placement for it since the process started — UNKNOWN, not "no policy".
+  @$pb.TagNumber(12)
+  ResidentPlacement get placement => $_getN(11);
+  @$pb.TagNumber(12)
+  set placement(ResidentPlacement value) => $_setField(12, value);
+  @$pb.TagNumber(12)
+  $core.bool hasPlacement() => $_has(11);
+  @$pb.TagNumber(12)
+  void clearPlacement() => $_clearField(12);
+  @$pb.TagNumber(12)
+  ResidentPlacement ensurePlacement() => $_ensure(11);
+
+  /// What the host's last inspection of this workspace's durable outbox found. Cached from the
+  /// correspondence desk's own inventory; absent means not inspected since the process started.
+  @$pb.TagNumber(13)
+  ResidentOutbox get outbox => $_getN(12);
+  @$pb.TagNumber(13)
+  set outbox(ResidentOutbox value) => $_setField(13, value);
+  @$pb.TagNumber(13)
+  $core.bool hasOutbox() => $_has(12);
+  @$pb.TagNumber(13)
+  void clearOutbox() => $_clearField(13);
+  @$pb.TagNumber(13)
+  ResidentOutbox ensureOutbox() => $_ensure(12);
+
+  /// How much state the workspace holds, and of what, at its last census. Sampled on the idle
+  /// lane only when the head moved; absent when never taken or the kernel predates the census.
+  @$pb.TagNumber(14)
+  ResidentAggregateCensus get census => $_getN(13);
+  @$pb.TagNumber(14)
+  set census(ResidentAggregateCensus value) => $_setField(14, value);
+  @$pb.TagNumber(14)
+  $core.bool hasCensus() => $_has(13);
+  @$pb.TagNumber(14)
+  void clearCensus() => $_clearField(14);
+  @$pb.TagNumber(14)
+  ResidentAggregateCensus ensureCensus() => $_ensure(13);
+
+  /// Last exact head this process's kernel fully replayed from genesis for this workspace.
+  /// HostHealth copies the kernel's idle-lane observation; consumers must match git_head.
+  @$pb.TagNumber(15)
+  $core.String get fullReplayHead => $_getSZ(14);
+  @$pb.TagNumber(15)
+  set fullReplayHead($core.String value) => $_setString(14, value);
+  @$pb.TagNumber(15)
+  $core.bool hasFullReplayHead() => $_has(14);
+  @$pb.TagNumber(15)
+  void clearFullReplayHead() => $_clearField(15);
+}
+
+/// The frontier's authenticated aggregate count, and the most numerous types from the resident
+/// read accelerator. `top_types` describe the head's state only when `types_state_root` equals
+/// `state_root`; otherwise they describe the (named) older state the accelerator is bound to.
+class ResidentAggregateCensus extends $pb.GeneratedMessage {
+  factory ResidentAggregateCensus({
+    $core.String? head,
+    $fixnum.Int64? aggregateCount,
+    $core.String? stateRoot,
+    $core.Iterable<$0.AggregateTypeCount>? topTypes,
+    $core.String? typesStateRoot,
+    $fixnum.Int64? observedUnixMillis,
+  }) {
+    final result = create();
+    if (head != null) result.head = head;
+    if (aggregateCount != null) result.aggregateCount = aggregateCount;
+    if (stateRoot != null) result.stateRoot = stateRoot;
+    if (topTypes != null) result.topTypes.addAll(topTypes);
+    if (typesStateRoot != null) result.typesStateRoot = typesStateRoot;
+    if (observedUnixMillis != null)
+      result.observedUnixMillis = observedUnixMillis;
+    return result;
+  }
+
+  ResidentAggregateCensus._();
+
+  factory ResidentAggregateCensus.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory ResidentAggregateCensus.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'ResidentAggregateCensus',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'head')
+    ..a<$fixnum.Int64>(
+        2, _omitFieldNames ? '' : 'aggregateCount', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..aOS(3, _omitFieldNames ? '' : 'stateRoot')
+    ..pPM<$0.AggregateTypeCount>(4, _omitFieldNames ? '' : 'topTypes',
+        subBuilder: $0.AggregateTypeCount.create)
+    ..aOS(5, _omitFieldNames ? '' : 'typesStateRoot')
+    ..a<$fixnum.Int64>(
+        6, _omitFieldNames ? '' : 'observedUnixMillis', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ResidentAggregateCensus clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ResidentAggregateCensus copyWith(
+          void Function(ResidentAggregateCensus) updates) =>
+      super.copyWith((message) => updates(message as ResidentAggregateCensus))
+          as ResidentAggregateCensus;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static ResidentAggregateCensus create() => ResidentAggregateCensus._();
+  @$core.override
+  ResidentAggregateCensus createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static ResidentAggregateCensus getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<ResidentAggregateCensus>(create);
+  static ResidentAggregateCensus? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get head => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set head($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasHead() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearHead() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $fixnum.Int64 get aggregateCount => $_getI64(1);
+  @$pb.TagNumber(2)
+  set aggregateCount($fixnum.Int64 value) => $_setInt64(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasAggregateCount() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearAggregateCount() => $_clearField(2);
+
+  @$pb.TagNumber(3)
+  $core.String get stateRoot => $_getSZ(2);
+  @$pb.TagNumber(3)
+  set stateRoot($core.String value) => $_setString(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasStateRoot() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearStateRoot() => $_clearField(3);
+
+  @$pb.TagNumber(4)
+  $pb.PbList<$0.AggregateTypeCount> get topTypes => $_getList(3);
+
+  @$pb.TagNumber(5)
+  $core.String get typesStateRoot => $_getSZ(4);
+  @$pb.TagNumber(5)
+  set typesStateRoot($core.String value) => $_setString(4, value);
+  @$pb.TagNumber(5)
+  $core.bool hasTypesStateRoot() => $_has(4);
+  @$pb.TagNumber(5)
+  void clearTypesStateRoot() => $_clearField(5);
+
+  @$pb.TagNumber(6)
+  $fixnum.Int64 get observedUnixMillis => $_getI64(5);
+  @$pb.TagNumber(6)
+  set observedUnixMillis($fixnum.Int64 value) => $_setInt64(5, value);
+  @$pb.TagNumber(6)
+  $core.bool hasObservedUnixMillis() => $_has(5);
+  @$pb.TagNumber(6)
+  void clearObservedUnixMillis() => $_clearField(6);
+}
+
+/// One peer-class rule of a declared placement policy. A class whose custody retention is NONE
+/// holds no replica: it reaches the workspace through the named remotes only.
+class ResidentPlacementRule extends $pb.GeneratedMessage {
+  factory ResidentPlacementRule({
+    $core.String? peerClass,
+    $0.KernelResidencyIntent? kernelResidency,
+    $0.CustodyRetentionIntent? custodyRetention,
+  }) {
+    final result = create();
+    if (peerClass != null) result.peerClass = peerClass;
+    if (kernelResidency != null) result.kernelResidency = kernelResidency;
+    if (custodyRetention != null) result.custodyRetention = custodyRetention;
+    return result;
+  }
+
+  ResidentPlacementRule._();
+
+  factory ResidentPlacementRule.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory ResidentPlacementRule.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'ResidentPlacementRule',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'peerClass')
+    ..aE<$0.KernelResidencyIntent>(2, _omitFieldNames ? '' : 'kernelResidency',
+        enumValues: $0.KernelResidencyIntent.values)
+    ..aE<$0.CustodyRetentionIntent>(
+        3, _omitFieldNames ? '' : 'custodyRetention',
+        enumValues: $0.CustodyRetentionIntent.values)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ResidentPlacementRule clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ResidentPlacementRule copyWith(
+          void Function(ResidentPlacementRule) updates) =>
+      super.copyWith((message) => updates(message as ResidentPlacementRule))
+          as ResidentPlacementRule;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static ResidentPlacementRule create() => ResidentPlacementRule._();
+  @$core.override
+  ResidentPlacementRule createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static ResidentPlacementRule getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<ResidentPlacementRule>(create);
+  static ResidentPlacementRule? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get peerClass => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set peerClass($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasPeerClass() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearPeerClass() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $0.KernelResidencyIntent get kernelResidency => $_getN(1);
+  @$pb.TagNumber(2)
+  set kernelResidency($0.KernelResidencyIntent value) => $_setField(2, value);
+  @$pb.TagNumber(2)
+  $core.bool hasKernelResidency() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearKernelResidency() => $_clearField(2);
+
+  @$pb.TagNumber(3)
+  $0.CustodyRetentionIntent get custodyRetention => $_getN(2);
+  @$pb.TagNumber(3)
+  set custodyRetention($0.CustodyRetentionIntent value) => $_setField(3, value);
+  @$pb.TagNumber(3)
+  $core.bool hasCustodyRetention() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearCustodyRetention() => $_clearField(3);
+}
+
+/// Operator view of one workspace's custody placement. Remote and mailbox URLs are deliberately
+/// reduced to names and a presence bit: this report is served unauthenticated.
+class ResidentPlacement extends $pb.GeneratedMessage {
+  factory ResidentPlacement({
+    $core.String? frontier,
+    $core.String? declaration,
+    $core.String? adoptedBy,
+    $core.Iterable<ResidentPlacementRule>? rules,
+    $core.Iterable<$core.String>? remoteNames,
+    $core.bool? recipientMailboxDeclared,
+    $0.KernelResidencyIntent? effectiveKernelResidency,
+    $0.CustodyRetentionIntent? effectiveCustodyRetention,
+    $core.Iterable<$core.String>? effectiveRemoteNames,
+    $fixnum.Int64? observedUnixMillis,
+  }) {
+    final result = create();
+    if (frontier != null) result.frontier = frontier;
+    if (declaration != null) result.declaration = declaration;
+    if (adoptedBy != null) result.adoptedBy = adoptedBy;
+    if (rules != null) result.rules.addAll(rules);
+    if (remoteNames != null) result.remoteNames.addAll(remoteNames);
+    if (recipientMailboxDeclared != null)
+      result.recipientMailboxDeclared = recipientMailboxDeclared;
+    if (effectiveKernelResidency != null)
+      result.effectiveKernelResidency = effectiveKernelResidency;
+    if (effectiveCustodyRetention != null)
+      result.effectiveCustodyRetention = effectiveCustodyRetention;
+    if (effectiveRemoteNames != null)
+      result.effectiveRemoteNames.addAll(effectiveRemoteNames);
+    if (observedUnixMillis != null)
+      result.observedUnixMillis = observedUnixMillis;
+    return result;
+  }
+
+  ResidentPlacement._();
+
+  factory ResidentPlacement.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory ResidentPlacement.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'ResidentPlacement',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'frontier')
+    ..aOS(2, _omitFieldNames ? '' : 'declaration')
+    ..aOS(3, _omitFieldNames ? '' : 'adoptedBy')
+    ..pPM<ResidentPlacementRule>(4, _omitFieldNames ? '' : 'rules',
+        subBuilder: ResidentPlacementRule.create)
+    ..pPS(5, _omitFieldNames ? '' : 'remoteNames')
+    ..aOB(6, _omitFieldNames ? '' : 'recipientMailboxDeclared')
+    ..aE<$0.KernelResidencyIntent>(
+        7, _omitFieldNames ? '' : 'effectiveKernelResidency',
+        enumValues: $0.KernelResidencyIntent.values)
+    ..aE<$0.CustodyRetentionIntent>(
+        8, _omitFieldNames ? '' : 'effectiveCustodyRetention',
+        enumValues: $0.CustodyRetentionIntent.values)
+    ..pPS(9, _omitFieldNames ? '' : 'effectiveRemoteNames')
+    ..a<$fixnum.Int64>(
+        10, _omitFieldNames ? '' : 'observedUnixMillis', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ResidentPlacement clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ResidentPlacement copyWith(void Function(ResidentPlacement) updates) =>
+      super.copyWith((message) => updates(message as ResidentPlacement))
+          as ResidentPlacement;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static ResidentPlacement create() => ResidentPlacement._();
+  @$core.override
+  ResidentPlacement createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static ResidentPlacement getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<ResidentPlacement>(create);
+  static ResidentPlacement? _defaultInstance;
+
+  /// The workspace's independent placement frontier. Absent means no policy was ever adopted,
+  /// and every other declared field below is empty.
+  @$pb.TagNumber(1)
+  $core.String get frontier => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set frontier($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasFrontier() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearFrontier() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $core.String get declaration => $_getSZ(1);
+  @$pb.TagNumber(2)
+  set declaration($core.String value) => $_setString(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasDeclaration() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearDeclaration() => $_clearField(2);
+
+  @$pb.TagNumber(3)
+  $core.String get adoptedBy => $_getSZ(2);
+  @$pb.TagNumber(3)
+  set adoptedBy($core.String value) => $_setString(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasAdoptedBy() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearAdoptedBy() => $_clearField(3);
+
+  @$pb.TagNumber(4)
+  $pb.PbList<ResidentPlacementRule> get rules => $_getList(3);
+
+  @$pb.TagNumber(5)
+  $pb.PbList<$core.String> get remoteNames => $_getList(4);
+
+  @$pb.TagNumber(6)
+  $core.bool get recipientMailboxDeclared => $_getBF(5);
+  @$pb.TagNumber(6)
+  set recipientMailboxDeclared($core.bool value) => $_setBool(5, value);
+  @$pb.TagNumber(6)
+  $core.bool hasRecipientMailboxDeclared() => $_has(5);
+  @$pb.TagNumber(6)
+  void clearRecipientMailboxDeclared() => $_clearField(6);
+
+  /// This host's interpretation of the policy for its own peer classes.
+  @$pb.TagNumber(7)
+  $0.KernelResidencyIntent get effectiveKernelResidency => $_getN(6);
+  @$pb.TagNumber(7)
+  set effectiveKernelResidency($0.KernelResidencyIntent value) =>
+      $_setField(7, value);
+  @$pb.TagNumber(7)
+  $core.bool hasEffectiveKernelResidency() => $_has(6);
+  @$pb.TagNumber(7)
+  void clearEffectiveKernelResidency() => $_clearField(7);
+
+  @$pb.TagNumber(8)
+  $0.CustodyRetentionIntent get effectiveCustodyRetention => $_getN(7);
+  @$pb.TagNumber(8)
+  set effectiveCustodyRetention($0.CustodyRetentionIntent value) =>
+      $_setField(8, value);
+  @$pb.TagNumber(8)
+  $core.bool hasEffectiveCustodyRetention() => $_has(7);
+  @$pb.TagNumber(8)
+  void clearEffectiveCustodyRetention() => $_clearField(8);
+
+  @$pb.TagNumber(9)
+  $pb.PbList<$core.String> get effectiveRemoteNames => $_getList(8);
+
+  @$pb.TagNumber(10)
+  $fixnum.Int64 get observedUnixMillis => $_getI64(9);
+  @$pb.TagNumber(10)
+  set observedUnixMillis($fixnum.Int64 value) => $_setInt64(9, value);
+  @$pb.TagNumber(10)
+  $core.bool hasObservedUnixMillis() => $_has(9);
+  @$pb.TagNumber(10)
+  void clearObservedUnixMillis() => $_clearField(10);
+}
+
+/// Undelivered outbound commitments at the last outbox inspection. Inventory only: the durable
+/// outbox in Git is the work; this is the host's latest look at it.
+class ResidentOutbox extends $pb.GeneratedMessage {
+  factory ResidentOutbox({
+    $core.int? entries,
+    $core.bool? workPending,
+    $fixnum.Int64? nextDueUnixMillis,
+    $fixnum.Int64? observedUnixMillis,
+  }) {
+    final result = create();
+    if (entries != null) result.entries = entries;
+    if (workPending != null) result.workPending = workPending;
+    if (nextDueUnixMillis != null) result.nextDueUnixMillis = nextDueUnixMillis;
+    if (observedUnixMillis != null)
+      result.observedUnixMillis = observedUnixMillis;
+    return result;
+  }
+
+  ResidentOutbox._();
+
+  factory ResidentOutbox.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory ResidentOutbox.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'ResidentOutbox',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aI(1, _omitFieldNames ? '' : 'entries', fieldType: $pb.PbFieldType.OU3)
+    ..aOB(2, _omitFieldNames ? '' : 'workPending')
+    ..a<$fixnum.Int64>(
+        3, _omitFieldNames ? '' : 'nextDueUnixMillis', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(
+        4, _omitFieldNames ? '' : 'observedUnixMillis', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ResidentOutbox clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ResidentOutbox copyWith(void Function(ResidentOutbox) updates) =>
+      super.copyWith((message) => updates(message as ResidentOutbox))
+          as ResidentOutbox;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static ResidentOutbox create() => ResidentOutbox._();
+  @$core.override
+  ResidentOutbox createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static ResidentOutbox getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<ResidentOutbox>(create);
+  static ResidentOutbox? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.int get entries => $_getIZ(0);
+  @$pb.TagNumber(1)
+  set entries($core.int value) => $_setUnsignedInt32(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasEntries() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearEntries() => $_clearField(1);
+
+  /// The kernel still has preparation work before the outbox can be judged complete.
+  @$pb.TagNumber(2)
+  $core.bool get workPending => $_getBF(1);
+  @$pb.TagNumber(2)
+  set workPending($core.bool value) => $_setBool(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasWorkPending() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearWorkPending() => $_clearField(2);
+
+  /// Earliest future commitment the kernel reported. Absent when none is scheduled.
+  @$pb.TagNumber(3)
+  $fixnum.Int64 get nextDueUnixMillis => $_getI64(2);
+  @$pb.TagNumber(3)
+  set nextDueUnixMillis($fixnum.Int64 value) => $_setInt64(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasNextDueUnixMillis() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearNextDueUnixMillis() => $_clearField(3);
+
+  @$pb.TagNumber(4)
+  $fixnum.Int64 get observedUnixMillis => $_getI64(3);
+  @$pb.TagNumber(4)
+  set observedUnixMillis($fixnum.Int64 value) => $_setInt64(3, value);
+  @$pb.TagNumber(4)
+  $core.bool hasObservedUnixMillis() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearObservedUnixMillis() => $_clearField(4);
+}
+
+/// One exclusive top-level class of kernel ABI work. Counters are cumulative for
+/// the installed kernel in this process; Prometheus treats a process/kernel swap
+/// as an ordinary counter reset. `family` is the bounded dashboard vocabulary,
+/// while `operation` is the exact generated oneof path (also bounded by the ABI).
+/// Neither field contains a workspace, law identity, intent or tenant value.
+class KernelWorkCounter extends $pb.GeneratedMessage {
+  factory KernelWorkCounter({
+    $core.String? family,
+    $core.String? operation,
+    $fixnum.Int64? calls,
+    $fixnum.Int64? failures,
+    $fixnum.Int64? cpuMicros,
+    $fixnum.Int64? wallMicros,
+    $core.Iterable<KernelWorkCpuBucket>? cpuBuckets,
+    $fixnum.Int64? lastCompletedUnixMillis,
+  }) {
+    final result = create();
+    if (family != null) result.family = family;
+    if (operation != null) result.operation = operation;
+    if (calls != null) result.calls = calls;
+    if (failures != null) result.failures = failures;
+    if (cpuMicros != null) result.cpuMicros = cpuMicros;
+    if (wallMicros != null) result.wallMicros = wallMicros;
+    if (cpuBuckets != null) result.cpuBuckets.addAll(cpuBuckets);
+    if (lastCompletedUnixMillis != null)
+      result.lastCompletedUnixMillis = lastCompletedUnixMillis;
+    return result;
+  }
+
+  KernelWorkCounter._();
+
+  factory KernelWorkCounter.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory KernelWorkCounter.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'KernelWorkCounter',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'family')
+    ..aOS(2, _omitFieldNames ? '' : 'operation')
+    ..a<$fixnum.Int64>(3, _omitFieldNames ? '' : 'calls', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(
+        4, _omitFieldNames ? '' : 'failures', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(
+        5, _omitFieldNames ? '' : 'cpuMicros', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(
+        6, _omitFieldNames ? '' : 'wallMicros', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..pPM<KernelWorkCpuBucket>(7, _omitFieldNames ? '' : 'cpuBuckets',
+        subBuilder: KernelWorkCpuBucket.create)
+    ..a<$fixnum.Int64>(8, _omitFieldNames ? '' : 'lastCompletedUnixMillis',
+        $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  KernelWorkCounter clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  KernelWorkCounter copyWith(void Function(KernelWorkCounter) updates) =>
+      super.copyWith((message) => updates(message as KernelWorkCounter))
+          as KernelWorkCounter;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static KernelWorkCounter create() => KernelWorkCounter._();
+  @$core.override
+  KernelWorkCounter createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static KernelWorkCounter getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<KernelWorkCounter>(create);
+  static KernelWorkCounter? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get family => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set family($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasFamily() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearFamily() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $core.String get operation => $_getSZ(1);
+  @$pb.TagNumber(2)
+  set operation($core.String value) => $_setString(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasOperation() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearOperation() => $_clearField(2);
+
+  @$pb.TagNumber(3)
+  $fixnum.Int64 get calls => $_getI64(2);
+  @$pb.TagNumber(3)
+  set calls($fixnum.Int64 value) => $_setInt64(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasCalls() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearCalls() => $_clearField(3);
+
+  @$pb.TagNumber(4)
+  $fixnum.Int64 get failures => $_getI64(3);
+  @$pb.TagNumber(4)
+  set failures($fixnum.Int64 value) => $_setInt64(3, value);
+  @$pb.TagNumber(4)
+  $core.bool hasFailures() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearFailures() => $_clearField(4);
+
+  @$pb.TagNumber(5)
+  $fixnum.Int64 get cpuMicros => $_getI64(4);
+  @$pb.TagNumber(5)
+  set cpuMicros($fixnum.Int64 value) => $_setInt64(4, value);
+  @$pb.TagNumber(5)
+  $core.bool hasCpuMicros() => $_has(4);
+  @$pb.TagNumber(5)
+  void clearCpuMicros() => $_clearField(5);
+
+  @$pb.TagNumber(6)
+  $fixnum.Int64 get wallMicros => $_getI64(5);
+  @$pb.TagNumber(6)
+  set wallMicros($fixnum.Int64 value) => $_setInt64(5, value);
+  @$pb.TagNumber(6)
+  $core.bool hasWallMicros() => $_has(5);
+  @$pb.TagNumber(6)
+  void clearWallMicros() => $_clearField(6);
+
+  @$pb.TagNumber(7)
+  $pb.PbList<KernelWorkCpuBucket> get cpuBuckets => $_getList(6);
+
+  @$pb.TagNumber(8)
+  $fixnum.Int64 get lastCompletedUnixMillis => $_getI64(7);
+  @$pb.TagNumber(8)
+  set lastCompletedUnixMillis($fixnum.Int64 value) => $_setInt64(7, value);
+  @$pb.TagNumber(8)
+  $core.bool hasLastCompletedUnixMillis() => $_has(7);
+  @$pb.TagNumber(8)
+  void clearLastCompletedUnixMillis() => $_clearField(8);
+}
+
+/// Cumulative histogram bucket for one KernelWorkCounter. The bounds are fixed
+/// by the peer runtime and cumulative, matching the Prometheus histogram model.
+class KernelWorkCpuBucket extends $pb.GeneratedMessage {
+  factory KernelWorkCpuBucket({
+    $fixnum.Int64? leMicros,
+    $fixnum.Int64? calls,
+  }) {
+    final result = create();
+    if (leMicros != null) result.leMicros = leMicros;
+    if (calls != null) result.calls = calls;
+    return result;
+  }
+
+  KernelWorkCpuBucket._();
+
+  factory KernelWorkCpuBucket.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory KernelWorkCpuBucket.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'KernelWorkCpuBucket',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..a<$fixnum.Int64>(
+        1, _omitFieldNames ? '' : 'leMicros', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(2, _omitFieldNames ? '' : 'calls', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  KernelWorkCpuBucket clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  KernelWorkCpuBucket copyWith(void Function(KernelWorkCpuBucket) updates) =>
+      super.copyWith((message) => updates(message as KernelWorkCpuBucket))
+          as KernelWorkCpuBucket;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static KernelWorkCpuBucket create() => KernelWorkCpuBucket._();
+  @$core.override
+  KernelWorkCpuBucket createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static KernelWorkCpuBucket getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<KernelWorkCpuBucket>(create);
+  static KernelWorkCpuBucket? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $fixnum.Int64 get leMicros => $_getI64(0);
+  @$pb.TagNumber(1)
+  set leMicros($fixnum.Int64 value) => $_setInt64(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasLeMicros() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearLeMicros() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $fixnum.Int64 get calls => $_getI64(1);
+  @$pb.TagNumber(2)
+  set calls($fixnum.Int64 value) => $_setInt64(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasCalls() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearCalls() => $_clearField(2);
+}
+
+/// A call which is executing at the instant /health is observed. This is useful
+/// for a genuinely long replay or index rebuild; most calls complete between
+/// scrapes and are represented by the cumulative counters above.
+class ActiveKernelWork extends $pb.GeneratedMessage {
+  factory ActiveKernelWork({
+    $core.String? family,
+    $core.String? operation,
+    $fixnum.Int64? startedUnixMillis,
+  }) {
+    final result = create();
+    if (family != null) result.family = family;
+    if (operation != null) result.operation = operation;
+    if (startedUnixMillis != null) result.startedUnixMillis = startedUnixMillis;
+    return result;
+  }
+
+  ActiveKernelWork._();
+
+  factory ActiveKernelWork.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory ActiveKernelWork.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'ActiveKernelWork',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'family')
+    ..aOS(2, _omitFieldNames ? '' : 'operation')
+    ..a<$fixnum.Int64>(
+        3, _omitFieldNames ? '' : 'startedUnixMillis', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ActiveKernelWork clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ActiveKernelWork copyWith(void Function(ActiveKernelWork) updates) =>
+      super.copyWith((message) => updates(message as ActiveKernelWork))
+          as ActiveKernelWork;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static ActiveKernelWork create() => ActiveKernelWork._();
+  @$core.override
+  ActiveKernelWork createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static ActiveKernelWork getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<ActiveKernelWork>(create);
+  static ActiveKernelWork? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get family => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set family($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasFamily() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearFamily() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $core.String get operation => $_getSZ(1);
+  @$pb.TagNumber(2)
+  set operation($core.String value) => $_setString(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasOperation() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearOperation() => $_clearField(2);
+
+  @$pb.TagNumber(3)
+  $fixnum.Int64 get startedUnixMillis => $_getI64(2);
+  @$pb.TagNumber(3)
+  set startedUnixMillis($fixnum.Int64 value) => $_setInt64(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasStartedUnixMillis() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearStartedUnixMillis() => $_clearField(3);
+}
+
+/// Operator telemetry only. Top-level families are mutually exclusive so their
+/// CPU totals form one honest 100% partition. Kernel-owned nested phase timings
+/// remain separate drill-down evidence and must never be added to these totals.
+class KernelWorkSnapshot extends $pb.GeneratedMessage {
+  factory KernelWorkSnapshot({
+    $fixnum.Int64? startedUnixMillis,
+    $fixnum.Int64? observedUnixMillis,
+    $core.Iterable<KernelWorkCounter>? counters,
+    ActiveKernelWork? active,
+  }) {
+    final result = create();
+    if (startedUnixMillis != null) result.startedUnixMillis = startedUnixMillis;
+    if (observedUnixMillis != null)
+      result.observedUnixMillis = observedUnixMillis;
+    if (counters != null) result.counters.addAll(counters);
+    if (active != null) result.active = active;
+    return result;
+  }
+
+  KernelWorkSnapshot._();
+
+  factory KernelWorkSnapshot.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory KernelWorkSnapshot.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'KernelWorkSnapshot',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..a<$fixnum.Int64>(
+        1, _omitFieldNames ? '' : 'startedUnixMillis', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(
+        2, _omitFieldNames ? '' : 'observedUnixMillis', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..pPM<KernelWorkCounter>(3, _omitFieldNames ? '' : 'counters',
+        subBuilder: KernelWorkCounter.create)
+    ..aOM<ActiveKernelWork>(4, _omitFieldNames ? '' : 'active',
+        subBuilder: ActiveKernelWork.create)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  KernelWorkSnapshot clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  KernelWorkSnapshot copyWith(void Function(KernelWorkSnapshot) updates) =>
+      super.copyWith((message) => updates(message as KernelWorkSnapshot))
+          as KernelWorkSnapshot;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static KernelWorkSnapshot create() => KernelWorkSnapshot._();
+  @$core.override
+  KernelWorkSnapshot createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static KernelWorkSnapshot getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<KernelWorkSnapshot>(create);
+  static KernelWorkSnapshot? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $fixnum.Int64 get startedUnixMillis => $_getI64(0);
+  @$pb.TagNumber(1)
+  set startedUnixMillis($fixnum.Int64 value) => $_setInt64(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasStartedUnixMillis() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearStartedUnixMillis() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $fixnum.Int64 get observedUnixMillis => $_getI64(1);
+  @$pb.TagNumber(2)
+  set observedUnixMillis($fixnum.Int64 value) => $_setInt64(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasObservedUnixMillis() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearObservedUnixMillis() => $_clearField(2);
+
+  @$pb.TagNumber(3)
+  $pb.PbList<KernelWorkCounter> get counters => $_getList(2);
+
+  @$pb.TagNumber(4)
+  ActiveKernelWork get active => $_getN(3);
+  @$pb.TagNumber(4)
+  set active(ActiveKernelWork value) => $_setField(4, value);
+  @$pb.TagNumber(4)
+  $core.bool hasActive() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearActive() => $_clearField(4);
+  @$pb.TagNumber(4)
+  ActiveKernelWork ensureActive() => $_ensure(3);
+}
+
+class HostHealth extends $pb.GeneratedMessage {
+  factory HostHealth({
+    $fixnum.Int64? replica,
+    $core.String? kernelSha256,
+    $core.Iterable<$core.String>? residentWorkspaces,
+    $core.double? wasmLinearMemMb,
+    $core.double? processRssMb,
+    $core.int? rssCriticalMb,
+    $core.Iterable<ResidentWorkspaceDetail>? residents,
+    KernelWorkSnapshot? kernelWork,
+    $core.Iterable<$1.CustodyOpening>? openings,
+    ArtifactsTransportSnapshot? artifacts,
+    $core.Iterable<RetentionOutcomeCounter>? retention,
+    $core.Iterable<CorrespondenceHold>? correspondenceHolds,
+  }) {
+    final result = create();
+    if (replica != null) result.replica = replica;
+    if (kernelSha256 != null) result.kernelSha256 = kernelSha256;
+    if (residentWorkspaces != null)
+      result.residentWorkspaces.addAll(residentWorkspaces);
+    if (wasmLinearMemMb != null) result.wasmLinearMemMb = wasmLinearMemMb;
+    if (processRssMb != null) result.processRssMb = processRssMb;
+    if (rssCriticalMb != null) result.rssCriticalMb = rssCriticalMb;
+    if (residents != null) result.residents.addAll(residents);
+    if (kernelWork != null) result.kernelWork = kernelWork;
+    if (openings != null) result.openings.addAll(openings);
+    if (artifacts != null) result.artifacts = artifacts;
+    if (retention != null) result.retention.addAll(retention);
+    if (correspondenceHolds != null)
+      result.correspondenceHolds.addAll(correspondenceHolds);
+    return result;
+  }
+
+  HostHealth._();
+
+  factory HostHealth.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory HostHealth.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'HostHealth',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..a<$fixnum.Int64>(1, _omitFieldNames ? '' : 'replica', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..aOS(2, _omitFieldNames ? '' : 'kernelSha256')
+    ..pPS(3, _omitFieldNames ? '' : 'residentWorkspaces')
+    ..aD(4, _omitFieldNames ? '' : 'wasmLinearMemMb')
+    ..aD(5, _omitFieldNames ? '' : 'processRssMb')
+    ..aI(6, _omitFieldNames ? '' : 'rssCriticalMb',
+        fieldType: $pb.PbFieldType.OU3)
+    ..pPM<ResidentWorkspaceDetail>(7, _omitFieldNames ? '' : 'residents',
+        subBuilder: ResidentWorkspaceDetail.create)
+    ..aOM<KernelWorkSnapshot>(8, _omitFieldNames ? '' : 'kernelWork',
+        subBuilder: KernelWorkSnapshot.create)
+    ..pPM<$1.CustodyOpening>(9, _omitFieldNames ? '' : 'openings',
+        subBuilder: $1.CustodyOpening.create)
+    ..aOM<ArtifactsTransportSnapshot>(10, _omitFieldNames ? '' : 'artifacts',
+        subBuilder: ArtifactsTransportSnapshot.create)
+    ..pPM<RetentionOutcomeCounter>(11, _omitFieldNames ? '' : 'retention',
+        subBuilder: RetentionOutcomeCounter.create)
+    ..pPM<CorrespondenceHold>(12, _omitFieldNames ? '' : 'correspondenceHolds',
+        subBuilder: CorrespondenceHold.create)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  HostHealth clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  HostHealth copyWith(void Function(HostHealth) updates) =>
+      super.copyWith((message) => updates(message as HostHealth)) as HostHealth;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static HostHealth create() => HostHealth._();
+  @$core.override
+  HostHealth createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static HostHealth getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<HostHealth>(create);
+  static HostHealth? _defaultInstance;
+
+  /// Process identity of the shell. A swap in place keeps it; a replacement changes it.
+  @$pb.TagNumber(1)
+  $fixnum.Int64 get replica => $_getI64(0);
+  @$pb.TagNumber(1)
+  set replica($fixnum.Int64 value) => $_setInt64(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasReplica() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearReplica() => $_clearField(1);
+
+  /// SHA-256 of the installed kernel wasm, lowercase hex.
+  @$pb.TagNumber(2)
+  $core.String get kernelSha256 => $_getSZ(1);
+  @$pb.TagNumber(2)
+  set kernelSha256($core.String value) => $_setString(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasKernelSha256() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearKernelSha256() => $_clearField(2);
+
+  /// Workspaces the kernel currently has mounted (empty between operations). THIS remains the
+  /// membership answer: a host predating `residents` still answers it, and placement reads it to
+  /// decide colocation during a rollout, when old and new container images serve side by side.
+  @$pb.TagNumber(3)
+  $pb.PbList<$core.String> get residentWorkspaces => $_getList(2);
+
+  @$pb.TagNumber(4)
+  $core.double get wasmLinearMemMb => $_getN(3);
+  @$pb.TagNumber(4)
+  set wasmLinearMemMb($core.double value) => $_setDouble(3, value);
+  @$pb.TagNumber(4)
+  $core.bool hasWasmLinearMemMb() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearWasmLinearMemMb() => $_clearField(4);
+
+  @$pb.TagNumber(5)
+  $core.double get processRssMb => $_getN(4);
+  @$pb.TagNumber(5)
+  set processRssMb($core.double value) => $_setDouble(4, value);
+  @$pb.TagNumber(5)
+  $core.bool hasProcessRssMb() => $_has(4);
+  @$pb.TagNumber(5)
+  void clearProcessRssMb() => $_clearField(5);
+
+  /// RSS ceiling the placement policy reserves fold-spike headroom below.
+  @$pb.TagNumber(6)
+  $core.int get rssCriticalMb => $_getIZ(5);
+  @$pb.TagNumber(6)
+  set rssCriticalMb($core.int value) => $_setUnsignedInt32(5, value);
+  @$pb.TagNumber(6)
+  $core.bool hasRssCriticalMb() => $_has(5);
+  @$pb.TagNumber(6)
+  void clearRssCriticalMb() => $_clearField(6);
+
+  /// Per-resident detail for the names above. Empty from a host that predates it; a reader must
+  /// treat absent detail as UNKNOWN, never as an idle or empty workspace.
+  @$pb.TagNumber(7)
+  $pb.PbList<ResidentWorkspaceDetail> get residents => $_getList(6);
+
+  /// Complete work accounting for the dedicated kernel execution thread. Empty
+  /// from a host which predates this contract; absence means UNKNOWN, not idle.
+  @$pb.TagNumber(8)
+  KernelWorkSnapshot get kernelWork => $_getN(7);
+  @$pb.TagNumber(8)
+  set kernelWork(KernelWorkSnapshot value) => $_setField(8, value);
+  @$pb.TagNumber(8)
+  $core.bool hasKernelWork() => $_has(7);
+  @$pb.TagNumber(8)
+  void clearKernelWork() => $_clearField(8);
+  @$pb.TagNumber(8)
+  KernelWorkSnapshot ensureKernelWork() => $_ensure(7);
+
+  /// Custody opens this host is performing right now. An open is mostly waiting on the Git
+  /// provider, which no CPU or kernel-work figure shows. Empty means none in progress on a host
+  /// that reports `artifacts`; a host predating this contract reports neither.
+  @$pb.TagNumber(9)
+  $pb.PbList<$1.CustodyOpening> get openings => $_getList(8);
+
+  /// Every Git HTTP request this host made to its custody provider since the process started.
+  @$pb.TagNumber(10)
+  ArtifactsTransportSnapshot get artifacts => $_getN(9);
+  @$pb.TagNumber(10)
+  set artifacts(ArtifactsTransportSnapshot value) => $_setField(10, value);
+  @$pb.TagNumber(10)
+  $core.bool hasArtifacts() => $_has(9);
+  @$pb.TagNumber(10)
+  void clearArtifacts() => $_clearField(10);
+  @$pb.TagNumber(10)
+  ArtifactsTransportSnapshot ensureArtifacts() => $_ensure(9);
+
+  /// Physical retention publications by settled outcome since the process started.
+  @$pb.TagNumber(11)
+  $pb.PbList<RetentionOutcomeCounter> get retention => $_getList(10);
+
+  /// Outbound correspondence this host is holding back, and WHY. Idle outbox work is paid for
+  /// by these: a letter that stays retryable is re-inspected on its backoff forever, so an
+  /// outbox that never empties never lets the host go quiet. The reason names the event the
+  /// letter is actually waiting on, which is what lets it become event driven.
+  @$pb.TagNumber(12)
+  $pb.PbList<CorrespondenceHold> get correspondenceHolds => $_getList(11);
+}
+
+/// Cumulative counters for one (operation, outcome) pair of provider Git HTTP requests.
+/// operation: info-refs-upload | info-refs-receive | upload-pack | receive-pack | other
+/// outcome: 2xx | 3xx | 4xx | 5xx | timeout | transport
+/// Wall time runs until the response body is fully read or the request fails, so a slow pack
+/// download counts in full, not just its headers.
+class ArtifactsRequestCounter extends $pb.GeneratedMessage {
+  factory ArtifactsRequestCounter({
+    $core.String? operation,
+    $core.String? outcome,
+    $fixnum.Int64? requests,
+    $fixnum.Int64? wallMicros,
+    $fixnum.Int64? responseBytes,
+    $core.Iterable<ArtifactsLatencyBucket>? latencyBuckets,
+  }) {
+    final result = create();
+    if (operation != null) result.operation = operation;
+    if (outcome != null) result.outcome = outcome;
+    if (requests != null) result.requests = requests;
+    if (wallMicros != null) result.wallMicros = wallMicros;
+    if (responseBytes != null) result.responseBytes = responseBytes;
+    if (latencyBuckets != null) result.latencyBuckets.addAll(latencyBuckets);
+    return result;
+  }
+
+  ArtifactsRequestCounter._();
+
+  factory ArtifactsRequestCounter.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory ArtifactsRequestCounter.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'ArtifactsRequestCounter',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'operation')
+    ..aOS(2, _omitFieldNames ? '' : 'outcome')
+    ..a<$fixnum.Int64>(
+        3, _omitFieldNames ? '' : 'requests', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(
+        4, _omitFieldNames ? '' : 'wallMicros', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(
+        5, _omitFieldNames ? '' : 'responseBytes', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..pPM<ArtifactsLatencyBucket>(6, _omitFieldNames ? '' : 'latencyBuckets',
+        subBuilder: ArtifactsLatencyBucket.create)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ArtifactsRequestCounter clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ArtifactsRequestCounter copyWith(
+          void Function(ArtifactsRequestCounter) updates) =>
+      super.copyWith((message) => updates(message as ArtifactsRequestCounter))
+          as ArtifactsRequestCounter;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static ArtifactsRequestCounter create() => ArtifactsRequestCounter._();
+  @$core.override
+  ArtifactsRequestCounter createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static ArtifactsRequestCounter getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<ArtifactsRequestCounter>(create);
+  static ArtifactsRequestCounter? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get operation => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set operation($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasOperation() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearOperation() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $core.String get outcome => $_getSZ(1);
+  @$pb.TagNumber(2)
+  set outcome($core.String value) => $_setString(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasOutcome() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearOutcome() => $_clearField(2);
+
+  @$pb.TagNumber(3)
+  $fixnum.Int64 get requests => $_getI64(2);
+  @$pb.TagNumber(3)
+  set requests($fixnum.Int64 value) => $_setInt64(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasRequests() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearRequests() => $_clearField(3);
+
+  @$pb.TagNumber(4)
+  $fixnum.Int64 get wallMicros => $_getI64(3);
+  @$pb.TagNumber(4)
+  set wallMicros($fixnum.Int64 value) => $_setInt64(3, value);
+  @$pb.TagNumber(4)
+  $core.bool hasWallMicros() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearWallMicros() => $_clearField(4);
+
+  @$pb.TagNumber(5)
+  $fixnum.Int64 get responseBytes => $_getI64(4);
+  @$pb.TagNumber(5)
+  set responseBytes($fixnum.Int64 value) => $_setInt64(4, value);
+  @$pb.TagNumber(5)
+  $core.bool hasResponseBytes() => $_has(4);
+  @$pb.TagNumber(5)
+  void clearResponseBytes() => $_clearField(5);
+
+  @$pb.TagNumber(6)
+  $pb.PbList<ArtifactsLatencyBucket> get latencyBuckets => $_getList(5);
+}
+
+/// Cumulative wall-time histogram bucket, Prometheus model, fixed bounds.
+class ArtifactsLatencyBucket extends $pb.GeneratedMessage {
+  factory ArtifactsLatencyBucket({
+    $fixnum.Int64? leMicros,
+    $fixnum.Int64? requests,
+  }) {
+    final result = create();
+    if (leMicros != null) result.leMicros = leMicros;
+    if (requests != null) result.requests = requests;
+    return result;
+  }
+
+  ArtifactsLatencyBucket._();
+
+  factory ArtifactsLatencyBucket.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory ArtifactsLatencyBucket.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'ArtifactsLatencyBucket',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..a<$fixnum.Int64>(
+        1, _omitFieldNames ? '' : 'leMicros', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(
+        2, _omitFieldNames ? '' : 'requests', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ArtifactsLatencyBucket clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ArtifactsLatencyBucket copyWith(
+          void Function(ArtifactsLatencyBucket) updates) =>
+      super.copyWith((message) => updates(message as ArtifactsLatencyBucket))
+          as ArtifactsLatencyBucket;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static ArtifactsLatencyBucket create() => ArtifactsLatencyBucket._();
+  @$core.override
+  ArtifactsLatencyBucket createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static ArtifactsLatencyBucket getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<ArtifactsLatencyBucket>(create);
+  static ArtifactsLatencyBucket? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $fixnum.Int64 get leMicros => $_getI64(0);
+  @$pb.TagNumber(1)
+  set leMicros($fixnum.Int64 value) => $_setInt64(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasLeMicros() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearLeMicros() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $fixnum.Int64 get requests => $_getI64(1);
+  @$pb.TagNumber(2)
+  set requests($fixnum.Int64 value) => $_setInt64(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasRequests() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearRequests() => $_clearField(2);
+}
+
+class ArtifactsTransportSnapshot extends $pb.GeneratedMessage {
+  factory ArtifactsTransportSnapshot({
+    $fixnum.Int64? startedUnixMillis,
+    $core.Iterable<ArtifactsRequestCounter>? counters,
+    $core.int? inFlight,
+    $fixnum.Int64? oldestInFlightStartedUnixMillis,
+  }) {
+    final result = create();
+    if (startedUnixMillis != null) result.startedUnixMillis = startedUnixMillis;
+    if (counters != null) result.counters.addAll(counters);
+    if (inFlight != null) result.inFlight = inFlight;
+    if (oldestInFlightStartedUnixMillis != null)
+      result.oldestInFlightStartedUnixMillis = oldestInFlightStartedUnixMillis;
+    return result;
+  }
+
+  ArtifactsTransportSnapshot._();
+
+  factory ArtifactsTransportSnapshot.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory ArtifactsTransportSnapshot.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'ArtifactsTransportSnapshot',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..a<$fixnum.Int64>(
+        1, _omitFieldNames ? '' : 'startedUnixMillis', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..pPM<ArtifactsRequestCounter>(2, _omitFieldNames ? '' : 'counters',
+        subBuilder: ArtifactsRequestCounter.create)
+    ..aI(3, _omitFieldNames ? '' : 'inFlight', fieldType: $pb.PbFieldType.OU3)
+    ..a<$fixnum.Int64>(
+        4,
+        _omitFieldNames ? '' : 'oldestInFlightStartedUnixMillis',
+        $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ArtifactsTransportSnapshot clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ArtifactsTransportSnapshot copyWith(
+          void Function(ArtifactsTransportSnapshot) updates) =>
+      super.copyWith(
+              (message) => updates(message as ArtifactsTransportSnapshot))
+          as ArtifactsTransportSnapshot;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static ArtifactsTransportSnapshot create() => ArtifactsTransportSnapshot._();
+  @$core.override
+  ArtifactsTransportSnapshot createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static ArtifactsTransportSnapshot getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<ArtifactsTransportSnapshot>(create);
+  static ArtifactsTransportSnapshot? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $fixnum.Int64 get startedUnixMillis => $_getI64(0);
+  @$pb.TagNumber(1)
+  set startedUnixMillis($fixnum.Int64 value) => $_setInt64(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasStartedUnixMillis() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearStartedUnixMillis() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $pb.PbList<ArtifactsRequestCounter> get counters => $_getList(1);
+
+  /// Requests started and not yet settled at observation time.
+  @$pb.TagNumber(3)
+  $core.int get inFlight => $_getIZ(2);
+  @$pb.TagNumber(3)
+  set inFlight($core.int value) => $_setUnsignedInt32(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasInFlight() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearInFlight() => $_clearField(3);
+
+  /// Start time of the oldest unsettled request; 0 when none is in flight.
+  @$pb.TagNumber(4)
+  $fixnum.Int64 get oldestInFlightStartedUnixMillis => $_getI64(3);
+  @$pb.TagNumber(4)
+  set oldestInFlightStartedUnixMillis($fixnum.Int64 value) =>
+      $_setInt64(3, value);
+  @$pb.TagNumber(4)
+  $core.bool hasOldestInFlightStartedUnixMillis() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearOldestInFlightStartedUnixMillis() => $_clearField(4);
+}
+
+/// outcome: retained | superseded | failed
+class RetentionOutcomeCounter extends $pb.GeneratedMessage {
+  factory RetentionOutcomeCounter({
+    $core.String? outcome,
+    $fixnum.Int64? publications,
+    $fixnum.Int64? attempts,
+  }) {
+    final result = create();
+    if (outcome != null) result.outcome = outcome;
+    if (publications != null) result.publications = publications;
+    if (attempts != null) result.attempts = attempts;
+    return result;
+  }
+
+  RetentionOutcomeCounter._();
+
+  factory RetentionOutcomeCounter.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory RetentionOutcomeCounter.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'RetentionOutcomeCounter',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'outcome')
+    ..a<$fixnum.Int64>(
+        2, _omitFieldNames ? '' : 'publications', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(
+        3, _omitFieldNames ? '' : 'attempts', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  RetentionOutcomeCounter clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  RetentionOutcomeCounter copyWith(
+          void Function(RetentionOutcomeCounter) updates) =>
+      super.copyWith((message) => updates(message as RetentionOutcomeCounter))
+          as RetentionOutcomeCounter;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static RetentionOutcomeCounter create() => RetentionOutcomeCounter._();
+  @$core.override
+  RetentionOutcomeCounter createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static RetentionOutcomeCounter getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<RetentionOutcomeCounter>(create);
+  static RetentionOutcomeCounter? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get outcome => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set outcome($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasOutcome() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearOutcome() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $fixnum.Int64 get publications => $_getI64(1);
+  @$pb.TagNumber(2)
+  set publications($fixnum.Int64 value) => $_setInt64(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasPublications() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearPublications() => $_clearField(2);
+
+  /// Physical attempts spent across those publications.
+  @$pb.TagNumber(3)
+  $fixnum.Int64 get attempts => $_getI64(2);
+  @$pb.TagNumber(3)
+  set attempts($fixnum.Int64 value) => $_setInt64(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasAttempts() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearAttempts() => $_clearField(3);
+}
+
+/// Outcome of asking a shell to reconcile to the provider-selected kernel in place.
+class KernelRefreshOutcome extends $pb.GeneratedMessage {
+  factory KernelRefreshOutcome({
+    HostHealth? host,
+    $core.bool? changed,
+    $core.String? previousSha256,
+    $core.String? sha256,
+  }) {
+    final result = create();
+    if (host != null) result.host = host;
+    if (changed != null) result.changed = changed;
+    if (previousSha256 != null) result.previousSha256 = previousSha256;
+    if (sha256 != null) result.sha256 = sha256;
+    return result;
+  }
+
+  KernelRefreshOutcome._();
+
+  factory KernelRefreshOutcome.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory KernelRefreshOutcome.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'KernelRefreshOutcome',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOM<HostHealth>(1, _omitFieldNames ? '' : 'host',
+        subBuilder: HostHealth.create)
+    ..aOB(2, _omitFieldNames ? '' : 'changed')
+    ..aOS(3, _omitFieldNames ? '' : 'previousSha256')
+    ..aOS(4, _omitFieldNames ? '' : 'sha256')
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  KernelRefreshOutcome clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  KernelRefreshOutcome copyWith(void Function(KernelRefreshOutcome) updates) =>
+      super.copyWith((message) => updates(message as KernelRefreshOutcome))
+          as KernelRefreshOutcome;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static KernelRefreshOutcome create() => KernelRefreshOutcome._();
+  @$core.override
+  KernelRefreshOutcome createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static KernelRefreshOutcome getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<KernelRefreshOutcome>(create);
+  static KernelRefreshOutcome? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  HostHealth get host => $_getN(0);
+  @$pb.TagNumber(1)
+  set host(HostHealth value) => $_setField(1, value);
+  @$pb.TagNumber(1)
+  $core.bool hasHost() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearHost() => $_clearField(1);
+  @$pb.TagNumber(1)
+  HostHealth ensureHost() => $_ensure(0);
+
+  @$pb.TagNumber(2)
+  $core.bool get changed => $_getBF(1);
+  @$pb.TagNumber(2)
+  set changed($core.bool value) => $_setBool(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasChanged() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearChanged() => $_clearField(2);
+
+  @$pb.TagNumber(3)
+  $core.String get previousSha256 => $_getSZ(2);
+  @$pb.TagNumber(3)
+  set previousSha256($core.String value) => $_setString(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasPreviousSha256() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearPreviousSha256() => $_clearField(3);
+
+  @$pb.TagNumber(4)
+  $core.String get sha256 => $_getSZ(3);
+  @$pb.TagNumber(4)
+  set sha256($core.String value) => $_setString(3, value);
+  @$pb.TagNumber(4)
+  $core.bool hasSha256() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearSha256() => $_clearField(4);
+}
+
+/// One physical Peer Runtime host as the provider adapter sees it.
+/// One outbound letter — or a whole correspondent, when the route itself is down — that this
+/// host is holding back rather than delivering, with the last reason it could not settle.
+class CorrespondenceHold extends $pb.GeneratedMessage {
+  factory CorrespondenceHold({
+    $core.String? sourceWorkspace,
+    $core.String? targetWorkspace,
+    $core.String? sourceOfferPath,
+    $core.String? reason,
+    $core.String? detail,
+    $core.int? failures,
+    $fixnum.Int64? retryAtMillis,
+    $fixnum.Int64? heldSinceMillis,
+  }) {
+    final result = create();
+    if (sourceWorkspace != null) result.sourceWorkspace = sourceWorkspace;
+    if (targetWorkspace != null) result.targetWorkspace = targetWorkspace;
+    if (sourceOfferPath != null) result.sourceOfferPath = sourceOfferPath;
+    if (reason != null) result.reason = reason;
+    if (detail != null) result.detail = detail;
+    if (failures != null) result.failures = failures;
+    if (retryAtMillis != null) result.retryAtMillis = retryAtMillis;
+    if (heldSinceMillis != null) result.heldSinceMillis = heldSinceMillis;
+    return result;
+  }
+
+  CorrespondenceHold._();
+
+  factory CorrespondenceHold.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory CorrespondenceHold.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'CorrespondenceHold',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'sourceWorkspace')
+    ..aOS(2, _omitFieldNames ? '' : 'targetWorkspace')
+    ..aOS(3, _omitFieldNames ? '' : 'sourceOfferPath')
+    ..aOS(4, _omitFieldNames ? '' : 'reason')
+    ..aOS(5, _omitFieldNames ? '' : 'detail')
+    ..aI(6, _omitFieldNames ? '' : 'failures', fieldType: $pb.PbFieldType.OU3)
+    ..a<$fixnum.Int64>(
+        7, _omitFieldNames ? '' : 'retryAtMillis', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(
+        8, _omitFieldNames ? '' : 'heldSinceMillis', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  CorrespondenceHold clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  CorrespondenceHold copyWith(void Function(CorrespondenceHold) updates) =>
+      super.copyWith((message) => updates(message as CorrespondenceHold))
+          as CorrespondenceHold;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static CorrespondenceHold create() => CorrespondenceHold._();
+  @$core.override
+  CorrespondenceHold createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static CorrespondenceHold getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<CorrespondenceHold>(create);
+  static CorrespondenceHold? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get sourceWorkspace => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set sourceWorkspace($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasSourceWorkspace() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearSourceWorkspace() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $core.String get targetWorkspace => $_getSZ(1);
+  @$pb.TagNumber(2)
+  set targetWorkspace($core.String value) => $_setString(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasTargetWorkspace() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearTargetWorkspace() => $_clearField(2);
+
+  /// Empty when the hold covers every letter to this target (a route, mailbox or transport
+  /// outage applies to the correspondent, not to one letter).
+  @$pb.TagNumber(3)
+  $core.String get sourceOfferPath => $_getSZ(2);
+  @$pb.TagNumber(3)
+  set sourceOfferPath($core.String value) => $_setString(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasSourceOfferPath() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearSourceOfferPath() => $_clearField(3);
+
+  /// Stable machine code: the failure code the target or transport returned, or one of
+  /// nomos.correspondence.{identity_mismatch,target_deferred,no_settlement,
+  /// outcome_not_recorded,outcome_not_durable}.
+  @$pb.TagNumber(4)
+  $core.String get reason => $_getSZ(3);
+  @$pb.TagNumber(4)
+  set reason($core.String value) => $_setString(3, value);
+  @$pb.TagNumber(4)
+  $core.bool hasReason() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearReason() => $_clearField(4);
+
+  /// Human detail for the reason, truncated. Never payload bytes.
+  @$pb.TagNumber(5)
+  $core.String get detail => $_getSZ(4);
+  @$pb.TagNumber(5)
+  set detail($core.String value) => $_setString(4, value);
+  @$pb.TagNumber(5)
+  $core.bool hasDetail() => $_has(4);
+  @$pb.TagNumber(5)
+  void clearDetail() => $_clearField(5);
+
+  /// Consecutive unsettled attempts behind the current hold.
+  @$pb.TagNumber(6)
+  $core.int get failures => $_getIZ(5);
+  @$pb.TagNumber(6)
+  set failures($core.int value) => $_setUnsignedInt32(5, value);
+  @$pb.TagNumber(6)
+  $core.bool hasFailures() => $_has(5);
+  @$pb.TagNumber(6)
+  void clearFailures() => $_clearField(6);
+
+  @$pb.TagNumber(7)
+  $fixnum.Int64 get retryAtMillis => $_getI64(6);
+  @$pb.TagNumber(7)
+  set retryAtMillis($fixnum.Int64 value) => $_setInt64(6, value);
+  @$pb.TagNumber(7)
+  $core.bool hasRetryAtMillis() => $_has(6);
+  @$pb.TagNumber(7)
+  void clearRetryAtMillis() => $_clearField(7);
+
+  /// When this letter (or correspondent) was first held without an intervening settlement.
+  @$pb.TagNumber(8)
+  $fixnum.Int64 get heldSinceMillis => $_getI64(7);
+  @$pb.TagNumber(8)
+  set heldSinceMillis($fixnum.Int64 value) => $_setInt64(7, value);
+  @$pb.TagNumber(8)
+  $core.bool hasHeldSinceMillis() => $_has(7);
+  @$pb.TagNumber(8)
+  void clearHeldSinceMillis() => $_clearField(8);
+}
+
+class ResidencyHost extends $pb.GeneratedMessage {
+  factory ResidencyHost({
+    $core.String? hostId,
+    $core.String? status,
+    $core.bool? live,
+    $fixnum.Int64? lastChangeMillis,
+    HostHealth? host,
+    KernelRefreshOutcome? refresh,
+    $core.String? error,
+  }) {
+    final result = create();
+    if (hostId != null) result.hostId = hostId;
+    if (status != null) result.status = status;
+    if (live != null) result.live = live;
+    if (lastChangeMillis != null) result.lastChangeMillis = lastChangeMillis;
+    if (host != null) result.host = host;
+    if (refresh != null) result.refresh = refresh;
+    if (error != null) result.error = error;
+    return result;
+  }
+
+  ResidencyHost._();
+
+  factory ResidencyHost.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory ResidencyHost.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'ResidencyHost',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'hostId')
+    ..aOS(2, _omitFieldNames ? '' : 'status')
+    ..aOB(3, _omitFieldNames ? '' : 'live')
+    ..a<$fixnum.Int64>(
+        4, _omitFieldNames ? '' : 'lastChangeMillis', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..aOM<HostHealth>(5, _omitFieldNames ? '' : 'host',
+        subBuilder: HostHealth.create)
+    ..aOM<KernelRefreshOutcome>(6, _omitFieldNames ? '' : 'refresh',
+        subBuilder: KernelRefreshOutcome.create)
+    ..aOS(7, _omitFieldNames ? '' : 'error')
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ResidencyHost clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ResidencyHost copyWith(void Function(ResidencyHost) updates) =>
+      super.copyWith((message) => updates(message as ResidencyHost))
+          as ResidencyHost;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static ResidencyHost create() => ResidencyHost._();
+  @$core.override
+  ResidencyHost createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static ResidencyHost getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<ResidencyHost>(create);
+  static ResidencyHost? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get hostId => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set hostId($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasHostId() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearHostId() => $_clearField(1);
+
+  /// Provider instance state: running, healthy, stopped, …
+  @$pb.TagNumber(2)
+  $core.String get status => $_getSZ(1);
+  @$pb.TagNumber(2)
+  set status($core.String value) => $_setString(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasStatus() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearStatus() => $_clearField(2);
+
+  @$pb.TagNumber(3)
+  $core.bool get live => $_getBF(2);
+  @$pb.TagNumber(3)
+  set live($core.bool value) => $_setBool(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasLive() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearLive() => $_clearField(3);
+
+  @$pb.TagNumber(4)
+  $fixnum.Int64 get lastChangeMillis => $_getI64(3);
+  @$pb.TagNumber(4)
+  set lastChangeMillis($fixnum.Int64 value) => $_setInt64(3, value);
+  @$pb.TagNumber(4)
+  $core.bool hasLastChangeMillis() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearLastChangeMillis() => $_clearField(4);
+
+  @$pb.TagNumber(5)
+  HostHealth get host => $_getN(4);
+  @$pb.TagNumber(5)
+  set host(HostHealth value) => $_setField(5, value);
+  @$pb.TagNumber(5)
+  $core.bool hasHost() => $_has(4);
+  @$pb.TagNumber(5)
+  void clearHost() => $_clearField(5);
+  @$pb.TagNumber(5)
+  HostHealth ensureHost() => $_ensure(4);
+
+  @$pb.TagNumber(6)
+  KernelRefreshOutcome get refresh => $_getN(5);
+  @$pb.TagNumber(6)
+  set refresh(KernelRefreshOutcome value) => $_setField(6, value);
+  @$pb.TagNumber(6)
+  $core.bool hasRefresh() => $_has(5);
+  @$pb.TagNumber(6)
+  void clearRefresh() => $_clearField(6);
+  @$pb.TagNumber(6)
+  KernelRefreshOutcome ensureRefresh() => $_ensure(5);
+
+  /// Set when the plane is registered live but could not be reached.
+  @$pb.TagNumber(7)
+  $core.String get error => $_getSZ(6);
+  @$pb.TagNumber(7)
+  set error($core.String value) => $_setString(6, value);
+  @$pb.TagNumber(7)
+  $core.bool hasError() => $_has(6);
+  @$pb.TagNumber(7)
+  void clearError() => $_clearField(7);
+}
+
+class ResidencyReport extends $pb.GeneratedMessage {
+  factory ResidencyReport({
+    $core.bool? ok,
+    $fixnum.Int64? nowMillis,
+    $core.int? hostCapacity,
+    $core.int? liveHosts,
+    $core.int? residentWorkspaces,
+    $core.Iterable<ResidencyHost>? hosts,
+  }) {
+    final result = create();
+    if (ok != null) result.ok = ok;
+    if (nowMillis != null) result.nowMillis = nowMillis;
+    if (hostCapacity != null) result.hostCapacity = hostCapacity;
+    if (liveHosts != null) result.liveHosts = liveHosts;
+    if (residentWorkspaces != null)
+      result.residentWorkspaces = residentWorkspaces;
+    if (hosts != null) result.hosts.addAll(hosts);
+    return result;
+  }
+
+  ResidencyReport._();
+
+  factory ResidencyReport.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory ResidencyReport.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'ResidencyReport',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOB(1, _omitFieldNames ? '' : 'ok')
+    ..a<$fixnum.Int64>(
+        2, _omitFieldNames ? '' : 'nowMillis', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..aI(3, _omitFieldNames ? '' : 'hostCapacity',
+        fieldType: $pb.PbFieldType.OU3)
+    ..aI(4, _omitFieldNames ? '' : 'liveHosts', fieldType: $pb.PbFieldType.OU3)
+    ..aI(5, _omitFieldNames ? '' : 'residentWorkspaces',
+        fieldType: $pb.PbFieldType.OU3)
+    ..pPM<ResidencyHost>(6, _omitFieldNames ? '' : 'hosts',
+        subBuilder: ResidencyHost.create)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ResidencyReport clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ResidencyReport copyWith(void Function(ResidencyReport) updates) =>
+      super.copyWith((message) => updates(message as ResidencyReport))
+          as ResidencyReport;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static ResidencyReport create() => ResidencyReport._();
+  @$core.override
+  ResidencyReport createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static ResidencyReport getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<ResidencyReport>(create);
+  static ResidencyReport? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.bool get ok => $_getBF(0);
+  @$pb.TagNumber(1)
+  set ok($core.bool value) => $_setBool(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasOk() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearOk() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $fixnum.Int64 get nowMillis => $_getI64(1);
+  @$pb.TagNumber(2)
+  set nowMillis($fixnum.Int64 value) => $_setInt64(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasNowMillis() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearNowMillis() => $_clearField(2);
+
+  @$pb.TagNumber(3)
+  $core.int get hostCapacity => $_getIZ(2);
+  @$pb.TagNumber(3)
+  set hostCapacity($core.int value) => $_setUnsignedInt32(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasHostCapacity() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearHostCapacity() => $_clearField(3);
+
+  @$pb.TagNumber(4)
+  $core.int get liveHosts => $_getIZ(3);
+  @$pb.TagNumber(4)
+  set liveHosts($core.int value) => $_setUnsignedInt32(3, value);
+  @$pb.TagNumber(4)
+  $core.bool hasLiveHosts() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearLiveHosts() => $_clearField(4);
+
+  @$pb.TagNumber(5)
+  $core.int get residentWorkspaces => $_getIZ(4);
+  @$pb.TagNumber(5)
+  set residentWorkspaces($core.int value) => $_setUnsignedInt32(4, value);
+  @$pb.TagNumber(5)
+  $core.bool hasResidentWorkspaces() => $_has(4);
+  @$pb.TagNumber(5)
+  void clearResidentWorkspaces() => $_clearField(5);
+
+  @$pb.TagNumber(6)
+  $pb.PbList<ResidencyHost> get hosts => $_getList(5);
+}
+
+/// The deploy canary's view of one workspace: its Peer Office custody status beside the
+/// physical health of the host currently serving it (GET /v2/workspaces/<ws>/peer-status).
+class PeerStatusReport extends $pb.GeneratedMessage {
+  factory PeerStatusReport({
+    $core.bool? ok,
+    $core.String? workspace,
+    $1.WorkspaceStatus? peerOffice,
+    HostHealth? physical,
+  }) {
+    final result = create();
+    if (ok != null) result.ok = ok;
+    if (workspace != null) result.workspace = workspace;
+    if (peerOffice != null) result.peerOffice = peerOffice;
+    if (physical != null) result.physical = physical;
+    return result;
+  }
+
+  PeerStatusReport._();
+
+  factory PeerStatusReport.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory PeerStatusReport.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'PeerStatusReport',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOB(1, _omitFieldNames ? '' : 'ok')
+    ..aOS(2, _omitFieldNames ? '' : 'workspace')
+    ..aOM<$1.WorkspaceStatus>(3, _omitFieldNames ? '' : 'peerOffice',
+        subBuilder: $1.WorkspaceStatus.create)
+    ..aOM<HostHealth>(4, _omitFieldNames ? '' : 'physical',
+        subBuilder: HostHealth.create)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  PeerStatusReport clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  PeerStatusReport copyWith(void Function(PeerStatusReport) updates) =>
+      super.copyWith((message) => updates(message as PeerStatusReport))
+          as PeerStatusReport;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static PeerStatusReport create() => PeerStatusReport._();
+  @$core.override
+  PeerStatusReport createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static PeerStatusReport getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<PeerStatusReport>(create);
+  static PeerStatusReport? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.bool get ok => $_getBF(0);
+  @$pb.TagNumber(1)
+  set ok($core.bool value) => $_setBool(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasOk() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearOk() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $core.String get workspace => $_getSZ(1);
+  @$pb.TagNumber(2)
+  set workspace($core.String value) => $_setString(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasWorkspace() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearWorkspace() => $_clearField(2);
+
+  @$pb.TagNumber(3)
+  $1.WorkspaceStatus get peerOffice => $_getN(2);
+  @$pb.TagNumber(3)
+  set peerOffice($1.WorkspaceStatus value) => $_setField(3, value);
+  @$pb.TagNumber(3)
+  $core.bool hasPeerOffice() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearPeerOffice() => $_clearField(3);
+  @$pb.TagNumber(3)
+  $1.WorkspaceStatus ensurePeerOffice() => $_ensure(2);
+
+  @$pb.TagNumber(4)
+  HostHealth get physical => $_getN(3);
+  @$pb.TagNumber(4)
+  set physical(HostHealth value) => $_setField(4, value);
+  @$pb.TagNumber(4)
+  $core.bool hasPhysical() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearPhysical() => $_clearField(4);
+  @$pb.TagNumber(4)
+  HostHealth ensurePhysical() => $_ensure(3);
+}
+
+/// A host restart (POST /v1/ops/restart-peers): every selected Peer Runtime host restarted.
+class RestartedHost extends $pb.GeneratedMessage {
+  factory RestartedHost({
+    $core.String? hostId,
+    $core.bool? live,
+    $core.String? kernelSha256,
+  }) {
+    final result = create();
+    if (hostId != null) result.hostId = hostId;
+    if (live != null) result.live = live;
+    if (kernelSha256 != null) result.kernelSha256 = kernelSha256;
+    return result;
+  }
+
+  RestartedHost._();
+
+  factory RestartedHost.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory RestartedHost.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'RestartedHost',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'hostId')
+    ..aOB(2, _omitFieldNames ? '' : 'live')
+    ..aOS(3, _omitFieldNames ? '' : 'kernelSha256')
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  RestartedHost clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  RestartedHost copyWith(void Function(RestartedHost) updates) =>
+      super.copyWith((message) => updates(message as RestartedHost))
+          as RestartedHost;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static RestartedHost create() => RestartedHost._();
+  @$core.override
+  RestartedHost createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static RestartedHost getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<RestartedHost>(create);
+  static RestartedHost? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get hostId => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set hostId($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasHostId() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearHostId() => $_clearField(1);
+
+  /// True only when a previously-live host's replacement answered typed health.
+  @$pb.TagNumber(2)
+  $core.bool get live => $_getBF(1);
+  @$pb.TagNumber(2)
+  set live($core.bool value) => $_setBool(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasLive() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearLive() => $_clearField(2);
+
+  /// Digest reported by the replacement after restart; empty for a previously stopped slot
+  /// or when replacement verification failed.
+  @$pb.TagNumber(3)
+  $core.String get kernelSha256 => $_getSZ(2);
+  @$pb.TagNumber(3)
+  set kernelSha256($core.String value) => $_setString(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasKernelSha256() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearKernelSha256() => $_clearField(3);
+}
+
+class RestartError extends $pb.GeneratedMessage {
+  factory RestartError({
+    $core.String? hostId,
+    $core.String? error,
+  }) {
+    final result = create();
+    if (hostId != null) result.hostId = hostId;
+    if (error != null) result.error = error;
+    return result;
+  }
+
+  RestartError._();
+
+  factory RestartError.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory RestartError.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'RestartError',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'hostId')
+    ..aOS(2, _omitFieldNames ? '' : 'error')
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  RestartError clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  RestartError copyWith(void Function(RestartError) updates) =>
+      super.copyWith((message) => updates(message as RestartError))
+          as RestartError;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static RestartError create() => RestartError._();
+  @$core.override
+  RestartError createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static RestartError getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<RestartError>(create);
+  static RestartError? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get hostId => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set hostId($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasHostId() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearHostId() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $core.String get error => $_getSZ(1);
+  @$pb.TagNumber(2)
+  set error($core.String value) => $_setString(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasError() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearError() => $_clearField(2);
+}
+
+class RestartReport extends $pb.GeneratedMessage {
+  factory RestartReport({
+    $core.bool? ok,
+    $core.Iterable<$core.String>? hostIds,
+    $core.Iterable<RestartedHost>? restarted,
+    $core.Iterable<RestartError>? errors,
+  }) {
+    final result = create();
+    if (ok != null) result.ok = ok;
+    if (hostIds != null) result.hostIds.addAll(hostIds);
+    if (restarted != null) result.restarted.addAll(restarted);
+    if (errors != null) result.errors.addAll(errors);
+    return result;
+  }
+
+  RestartReport._();
+
+  factory RestartReport.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory RestartReport.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'RestartReport',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOB(1, _omitFieldNames ? '' : 'ok')
+    ..pPS(2, _omitFieldNames ? '' : 'hostIds')
+    ..pPM<RestartedHost>(3, _omitFieldNames ? '' : 'restarted',
+        subBuilder: RestartedHost.create)
+    ..pPM<RestartError>(4, _omitFieldNames ? '' : 'errors',
+        subBuilder: RestartError.create)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  RestartReport clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  RestartReport copyWith(void Function(RestartReport) updates) =>
+      super.copyWith((message) => updates(message as RestartReport))
+          as RestartReport;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static RestartReport create() => RestartReport._();
+  @$core.override
+  RestartReport createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static RestartReport getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<RestartReport>(create);
+  static RestartReport? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.bool get ok => $_getBF(0);
+  @$pb.TagNumber(1)
+  set ok($core.bool value) => $_setBool(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasOk() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearOk() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $pb.PbList<$core.String> get hostIds => $_getList(1);
+
+  @$pb.TagNumber(3)
+  $pb.PbList<RestartedHost> get restarted => $_getList(2);
+
+  @$pb.TagNumber(4)
+  $pb.PbList<RestartError> get errors => $_getList(3);
+}
+
+const $core.bool _omitFieldNames =
+    $core.bool.fromEnvironment('protobuf.omit_field_names');
+const $core.bool _omitMessageNames =
+    $core.bool.fromEnvironment('protobuf.omit_message_names');