@githolon/dsl 0.113.4 → 0.114.0

package/dart_types/lib/src/proto/nomos/runtime/v2/model_adoption_desk.pb.dart

@@ -28,6 +28,7 @@ class AdoptApplicationModelRequest extends $pb.GeneratedMessage {
     $core.Iterable<$core.String>? domainKeys,
     $core.String? acceptanceReason,
     $core.bool? dryRun,
+    $core.String? unitSet,
   }) {
     final result = create();
     if (session != null) result.session = session;
@@ -35,6 +36,7 @@ class AdoptApplicationModelRequest extends $pb.GeneratedMessage {
     if (domainKeys != null) result.domainKeys.addAll(domainKeys);
     if (acceptanceReason != null) result.acceptanceReason = acceptanceReason;
     if (dryRun != null) result.dryRun = dryRun;
+    if (unitSet != null) result.unitSet = unitSet;
     return result;
   }
 
@@ -57,6 +59,7 @@ class AdoptApplicationModelRequest extends $pb.GeneratedMessage {
     ..pPS(3, _omitFieldNames ? '' : 'domainKeys')
     ..aOS(4, _omitFieldNames ? '' : 'acceptanceReason')
     ..aOB(5, _omitFieldNames ? '' : 'dryRun')
+    ..aOS(6, _omitFieldNames ? '' : 'unitSet')
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
@@ -92,8 +95,10 @@ class AdoptApplicationModelRequest extends $pb.GeneratedMessage {
   @$pb.TagNumber(1)
   void clearSession() => $_clearField(1);
 
-  /// The approved package identity from the generated descriptor: the kernel-derived
-  /// content identity of the compiled `.law.usdz` closure (64 lowercase hex).
+  /// The approved package identity from the generated descriptor: the content
+  /// identity of the compiled `.law.usdz` closure (64 lowercase hex). It names the
+  /// bytes the shell supplies when the desk stages, and the law a package-lane
+  /// workspace serves; it is not what a unit-lane workspace serves.
   @$pb.TagNumber(2)
   $core.String get lawSha256 => $_getSZ(1);
   @$pb.TagNumber(2)
@@ -130,6 +135,19 @@ class AdoptApplicationModelRequest extends $pb.GeneratedMessage {
   $core.bool hasDryRun() => $_has(4);
   @$pb.TagNumber(5)
   void clearDryRun() => $_clearField(5);
+
+  /// THE LAW the application approves: the unit set identity of its compiled
+  /// `build/<name>.units` (64 lowercase hex, CAP-773). A unit-lane workspace is on
+  /// the approved law when the closure it serves is composed from exactly these
+  /// units, whatever its kernel's composer. REQUIRED.
+  @$pb.TagNumber(6)
+  $core.String get unitSet => $_getSZ(5);
+  @$pb.TagNumber(6)
+  set unitSet($core.String value) => $_setString(5, value);
+  @$pb.TagNumber(6)
+  $core.bool hasUnitSet() => $_has(5);
+  @$pb.TagNumber(6)
+  void clearUnitSet() => $_clearField(6);
 }
 
 class ApplicationModelAdopted extends $pb.GeneratedMessage {

package/dart_types/lib/src/proto/nomos/runtime/v2/observability_desk.pb.dart

@@ -16,7 +16,8 @@ import 'package:fixnum/fixnum.dart' as $fixnum;
 import 'package:protobuf/protobuf.dart' as $pb;
 
 import '../../../google/protobuf/any.pb.dart' as $7;
-import '../../kernel/v1/progress.pb.dart' as $8;
+import '../../kernel/v1/kernel.pb.dart' as $8;
+import '../../kernel/v1/progress.pb.dart' as $9;
 import 'correspondence_desk.pb.dart' as $2;
 import 'custody_desk.pb.dart' as $5;
 import 'maintenance_desk.pb.dart' as $1;
@@ -618,6 +619,7 @@ enum RuntimeEvent_Event {
   foreignPlacementIgnored,
   bindingQuarantined,
   writePreparation,
+  readAccessPreparation,
   notSet
 }
 
@@ -646,6 +648,7 @@ class RuntimeEvent extends $pb.GeneratedMessage {
     $6.ForeignPlacementIgnored? foreignPlacementIgnored,
     $6.QuarantinedBinding? bindingQuarantined,
     WritePreparation? writePreparation,
+    ReadAccessPreparation? readAccessPreparation,
   }) {
     final result = create();
     if (sequence != null) result.sequence = sequence;
@@ -678,6 +681,8 @@ class RuntimeEvent extends $pb.GeneratedMessage {
     if (bindingQuarantined != null)
       result.bindingQuarantined = bindingQuarantined;
     if (writePreparation != null) result.writePreparation = writePreparation;
+    if (readAccessPreparation != null)
+      result.readAccessPreparation = readAccessPreparation;
     return result;
   }
 
@@ -713,6 +718,7 @@ class RuntimeEvent extends $pb.GeneratedMessage {
     28: RuntimeEvent_Event.foreignPlacementIgnored,
     29: RuntimeEvent_Event.bindingQuarantined,
     30: RuntimeEvent_Event.writePreparation,
+    31: RuntimeEvent_Event.readAccessPreparation,
     0: RuntimeEvent_Event.notSet
   };
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
@@ -741,7 +747,8 @@ class RuntimeEvent extends $pb.GeneratedMessage {
       27,
       28,
       29,
-      30
+      30,
+      31
     ])
     ..a<$fixnum.Int64>(
         1, _omitFieldNames ? '' : 'sequence', $pb.PbFieldType.OU6,
@@ -796,6 +803,9 @@ class RuntimeEvent extends $pb.GeneratedMessage {
         subBuilder: $6.QuarantinedBinding.create)
     ..aOM<WritePreparation>(30, _omitFieldNames ? '' : 'writePreparation',
         subBuilder: WritePreparation.create)
+    ..aOM<ReadAccessPreparation>(
+        31, _omitFieldNames ? '' : 'readAccessPreparation',
+        subBuilder: ReadAccessPreparation.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
@@ -838,6 +848,7 @@ class RuntimeEvent extends $pb.GeneratedMessage {
   @$pb.TagNumber(28)
   @$pb.TagNumber(29)
   @$pb.TagNumber(30)
+  @$pb.TagNumber(31)
   RuntimeEvent_Event whichEvent() => _RuntimeEvent_EventByTag[$_whichOneof(0)]!;
   @$pb.TagNumber(10)
   @$pb.TagNumber(11)
@@ -860,6 +871,7 @@ class RuntimeEvent extends $pb.GeneratedMessage {
   @$pb.TagNumber(28)
   @$pb.TagNumber(29)
   @$pb.TagNumber(30)
+  @$pb.TagNumber(31)
   void clearEvent() => $_clearField($_whichOneof(0));
 
   @$pb.TagNumber(1)
@@ -1119,6 +1131,18 @@ class RuntimeEvent extends $pb.GeneratedMessage {
   void clearWritePreparation() => $_clearField(30);
   @$pb.TagNumber(30)
   WritePreparation ensureWritePreparation() => $_ensure(22);
+
+  @$pb.TagNumber(31)
+  ReadAccessPreparation get readAccessPreparation => $_getN(23);
+  @$pb.TagNumber(31)
+  set readAccessPreparation(ReadAccessPreparation value) =>
+      $_setField(31, value);
+  @$pb.TagNumber(31)
+  $core.bool hasReadAccessPreparation() => $_has(23);
+  @$pb.TagNumber(31)
+  void clearReadAccessPreparation() => $_clearField(31);
+  @$pb.TagNumber(31)
+  ReadAccessPreparation ensureReadAccessPreparation() => $_ensure(23);
 }
 
 /// Application-wide (no session): the replica follows this peer keeps up with in the background.
@@ -1241,6 +1265,7 @@ class FollowObservation extends $pb.GeneratedMessage {
     $core.String? activeEffect,
     $core.int? unsent,
     $core.int? unacknowledged,
+    CustodianWarming? custodianWarming,
   }) {
     final result = create();
     if (workspace != null) result.workspace = workspace;
@@ -1253,6 +1278,7 @@ class FollowObservation extends $pb.GeneratedMessage {
     if (activeEffect != null) result.activeEffect = activeEffect;
     if (unsent != null) result.unsent = unsent;
     if (unacknowledged != null) result.unacknowledged = unacknowledged;
+    if (custodianWarming != null) result.custodianWarming = custodianWarming;
     return result;
   }
 
@@ -1286,6 +1312,8 @@ class FollowObservation extends $pb.GeneratedMessage {
     ..aI(9, _omitFieldNames ? '' : 'unsent', fieldType: $pb.PbFieldType.OU3)
     ..aI(10, _omitFieldNames ? '' : 'unacknowledged',
         fieldType: $pb.PbFieldType.OU3)
+    ..aOM<CustodianWarming>(11, _omitFieldNames ? '' : 'custodianWarming',
+        subBuilder: CustodianWarming.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
@@ -1325,7 +1353,7 @@ class FollowObservation extends $pb.GeneratedMessage {
   @$pb.TagNumber(2)
   void clearPhase() => $_clearField(2);
 
-  /// A settled follow with its upstream link open receives new frontiers now.
+  /// Its upstream live link is open, independently of settlement (CAP-683); settled and live is current.
   @$pb.TagNumber(3)
   $core.bool get live => $_getBF(2);
   @$pb.TagNumber(3)
@@ -1402,6 +1430,127 @@ class FollowObservation extends $pb.GeneratedMessage {
   $core.bool hasUnacknowledged() => $_has(9);
   @$pb.TagNumber(10)
   void clearUnacknowledged() => $_clearField(10);
+
+  /// The custodian answered that it is opening this workspace from verified custody (warming up
+  /// after a restart). Present while that is the only reason this follow is not yet current. It is
+  /// not an error: nothing was refused, nothing executed, and the follow retries at the
+  /// custodian's own hint. Its absence means any retry shown is an ordinary error retry. Older
+  /// readers ignore it and see the unchanged phase.
+  @$pb.TagNumber(11)
+  CustodianWarming get custodianWarming => $_getN(10);
+  @$pb.TagNumber(11)
+  set custodianWarming(CustodianWarming value) => $_setField(11, value);
+  @$pb.TagNumber(11)
+  $core.bool hasCustodianWarming() => $_has(10);
+  @$pb.TagNumber(11)
+  void clearCustodianWarming() => $_clearField(11);
+  @$pb.TagNumber(11)
+  CustodianWarming ensureCustodianWarming() => $_ensure(10);
+}
+
+/// A typed "custodian warming up" posture for one workspace, carried from the workspace-opening
+/// answer (or the edge relay's opening reply) through the follow round to observers.
+class CustodianWarming extends $pb.GeneratedMessage {
+  factory CustodianWarming({
+    $fixnum.Int64? sinceUnixMillis,
+    $fixnum.Int64? expectedReadyUnixMillis,
+    $fixnum.Int64? stalledAfterUnixMillis,
+    $core.bool? stalled,
+  }) {
+    final result = create();
+    if (sinceUnixMillis != null) result.sinceUnixMillis = sinceUnixMillis;
+    if (expectedReadyUnixMillis != null)
+      result.expectedReadyUnixMillis = expectedReadyUnixMillis;
+    if (stalledAfterUnixMillis != null)
+      result.stalledAfterUnixMillis = stalledAfterUnixMillis;
+    if (stalled != null) result.stalled = stalled;
+    return result;
+  }
+
+  CustodianWarming._();
+
+  factory CustodianWarming.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory CustodianWarming.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'CustodianWarming',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..a<$fixnum.Int64>(
+        1, _omitFieldNames ? '' : 'sinceUnixMillis', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(2, _omitFieldNames ? '' : 'expectedReadyUnixMillis',
+        $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(
+        3, _omitFieldNames ? '' : 'stalledAfterUnixMillis', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..aOB(4, _omitFieldNames ? '' : 'stalled')
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  CustodianWarming clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  CustodianWarming copyWith(void Function(CustodianWarming) updates) =>
+      super.copyWith((message) => updates(message as CustodianWarming))
+          as CustodianWarming;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static CustodianWarming create() => CustodianWarming._();
+  @$core.override
+  CustodianWarming createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static CustodianWarming getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<CustodianWarming>(create);
+  static CustodianWarming? _defaultInstance;
+
+  /// When this office first met the opening answer in the current warming spell.
+  @$pb.TagNumber(1)
+  $fixnum.Int64 get sinceUnixMillis => $_getI64(0);
+  @$pb.TagNumber(1)
+  set sinceUnixMillis($fixnum.Int64 value) => $_setInt64(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasSinceUnixMillis() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearSinceUnixMillis() => $_clearField(1);
+
+  /// When the custodian said it expects to be ready: the latest answer's time plus its retry hint.
+  @$pb.TagNumber(2)
+  $fixnum.Int64 get expectedReadyUnixMillis => $_getI64(1);
+  @$pb.TagNumber(2)
+  set expectedReadyUnixMillis($fixnum.Int64 value) => $_setInt64(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasExpectedReadyUnixMillis() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearExpectedReadyUnixMillis() => $_clearField(2);
+
+  /// After this moment warming has run well past what the custodian promised and counts as stalled.
+  @$pb.TagNumber(3)
+  $fixnum.Int64 get stalledAfterUnixMillis => $_getI64(2);
+  @$pb.TagNumber(3)
+  set stalledAfterUnixMillis($fixnum.Int64 value) => $_setInt64(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasStalledAfterUnixMillis() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearStalledAfterUnixMillis() => $_clearField(3);
+
+  /// Warming had already passed `stalled_after_unix_millis` when this report was made.
+  @$pb.TagNumber(4)
+  $core.bool get stalled => $_getBF(3);
+  @$pb.TagNumber(4)
+  set stalled($core.bool value) => $_setBool(3, value);
+  @$pb.TagNumber(4)
+  $core.bool hasStalled() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearStalled() => $_clearField(4);
 }
 
 /// A background physical effect, equivalent to the foreground pending paper.
@@ -1542,6 +1691,8 @@ class WatchChanged extends $pb.GeneratedMessage {
     RuntimeFailure? failure,
     $7.Any? applicationResult,
     $fixnum.Int64? integerValue,
+    $8.ApplicationResultDelta? applicationDelta,
+    $core.String? resultFrontier,
   }) {
     final result = create();
     if (subscriptionId != null) result.subscriptionId = subscriptionId;
@@ -1549,6 +1700,8 @@ class WatchChanged extends $pb.GeneratedMessage {
     if (failure != null) result.failure = failure;
     if (applicationResult != null) result.applicationResult = applicationResult;
     if (integerValue != null) result.integerValue = integerValue;
+    if (applicationDelta != null) result.applicationDelta = applicationDelta;
+    if (resultFrontier != null) result.resultFrontier = resultFrontier;
     return result;
   }
 
@@ -1574,6 +1727,10 @@ class WatchChanged extends $pb.GeneratedMessage {
     ..aOM<$7.Any>(4, _omitFieldNames ? '' : 'applicationResult',
         subBuilder: $7.Any.create)
     ..aInt64(5, _omitFieldNames ? '' : 'integerValue')
+    ..aOM<$8.ApplicationResultDelta>(
+        6, _omitFieldNames ? '' : 'applicationDelta',
+        subBuilder: $8.ApplicationResultDelta.create)
+    ..aOS(7, _omitFieldNames ? '' : 'resultFrontier')
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
@@ -1647,6 +1804,30 @@ class WatchChanged extends $pb.GeneratedMessage {
   $core.bool hasIntegerValue() => $_has(4);
   @$pb.TagNumber(5)
   void clearIntegerValue() => $_clearField(5);
+
+  /// Incremental change to the rows this subscription last delivered (only when the watch asked
+  /// for `accept_row_delta`). Its `base_frontier` is the frontier of the previous delivery; a
+  /// consumer that holds another position must fail the watch, never guess.
+  @$pb.TagNumber(6)
+  $8.ApplicationResultDelta get applicationDelta => $_getN(5);
+  @$pb.TagNumber(6)
+  set applicationDelta($8.ApplicationResultDelta value) => $_setField(6, value);
+  @$pb.TagNumber(6)
+  $core.bool hasApplicationDelta() => $_has(5);
+  @$pb.TagNumber(6)
+  void clearApplicationDelta() => $_clearField(6);
+  @$pb.TagNumber(6)
+  $8.ApplicationResultDelta ensureApplicationDelta() => $_ensure(5);
+
+  /// The read position of a complete `application_result`, for a consumer that merges deltas.
+  @$pb.TagNumber(7)
+  $core.String get resultFrontier => $_getSZ(6);
+  @$pb.TagNumber(7)
+  set resultFrontier($core.String value) => $_setString(6, value);
+  @$pb.TagNumber(7)
+  $core.bool hasResultFrontier() => $_has(6);
+  @$pb.TagNumber(7)
+  void clearResultFrontier() => $_clearField(7);
 }
 
 class SyncCompleted extends $pb.GeneratedMessage {
@@ -1737,9 +1918,11 @@ class SyncCompleted extends $pb.GeneratedMessage {
 class LinkChanged extends $pb.GeneratedMessage {
   factory LinkChanged({
     LinkStatus? status,
+    $2.LiveLinkClosure? closure,
   }) {
     final result = create();
     if (status != null) result.status = status;
+    if (closure != null) result.closure = closure;
     return result;
   }
 
@@ -1759,6 +1942,8 @@ class LinkChanged extends $pb.GeneratedMessage {
       createEmptyInstance: create)
     ..aE<LinkStatus>(1, _omitFieldNames ? '' : 'status',
         enumValues: LinkStatus.values)
+    ..aOM<$2.LiveLinkClosure>(2, _omitFieldNames ? '' : 'closure',
+        subBuilder: $2.LiveLinkClosure.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
@@ -1788,6 +1973,18 @@ class LinkChanged extends $pb.GeneratedMessage {
   $core.bool hasStatus() => $_has(0);
   @$pb.TagNumber(1)
   void clearStatus() => $_clearField(1);
+
+  /// On CLOSED: how and when the last connection ended, and what it had carried (CAP-683).
+  @$pb.TagNumber(2)
+  $2.LiveLinkClosure get closure => $_getN(1);
+  @$pb.TagNumber(2)
+  set closure($2.LiveLinkClosure value) => $_setField(2, value);
+  @$pb.TagNumber(2)
+  $core.bool hasClosure() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearClosure() => $_clearField(2);
+  @$pb.TagNumber(2)
+  $2.LiveLinkClosure ensureClosure() => $_ensure(1);
 }
 
 class SignalChanged extends $pb.GeneratedMessage {
@@ -2068,7 +2265,7 @@ class RuntimeSpan extends $pb.GeneratedMessage {
 
 class KernelProgressObserved extends $pb.GeneratedMessage {
   factory KernelProgressObserved({
-    $8.KernelProgressSnapshot? snapshot,
+    $9.KernelProgressSnapshot? snapshot,
     $fixnum.Int64? hostObservedElapsedMicros,
     $fixnum.Int64? hostObservedPhaseElapsedMicros,
     $fixnum.Int64? processResidentBytes,
@@ -2101,8 +2298,8 @@ class KernelProgressObserved extends $pb.GeneratedMessage {
       package:
           const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
       createEmptyInstance: create)
-    ..aOM<$8.KernelProgressSnapshot>(1, _omitFieldNames ? '' : 'snapshot',
-        subBuilder: $8.KernelProgressSnapshot.create)
+    ..aOM<$9.KernelProgressSnapshot>(1, _omitFieldNames ? '' : 'snapshot',
+        subBuilder: $9.KernelProgressSnapshot.create)
     ..a<$fixnum.Int64>(2, _omitFieldNames ? '' : 'hostObservedElapsedMicros',
         $pb.PbFieldType.OU6,
         defaultOrMaker: $fixnum.Int64.ZERO)
@@ -2140,15 +2337,15 @@ class KernelProgressObserved extends $pb.GeneratedMessage {
   static KernelProgressObserved? _defaultInstance;
 
   @$pb.TagNumber(1)
-  $8.KernelProgressSnapshot get snapshot => $_getN(0);
+  $9.KernelProgressSnapshot get snapshot => $_getN(0);
   @$pb.TagNumber(1)
-  set snapshot($8.KernelProgressSnapshot value) => $_setField(1, value);
+  set snapshot($9.KernelProgressSnapshot value) => $_setField(1, value);
   @$pb.TagNumber(1)
   $core.bool hasSnapshot() => $_has(0);
   @$pb.TagNumber(1)
   void clearSnapshot() => $_clearField(1);
   @$pb.TagNumber(1)
-  $8.KernelProgressSnapshot ensureSnapshot() => $_ensure(0);
+  $9.KernelProgressSnapshot ensureSnapshot() => $_ensure(0);
 
   @$pb.TagNumber(2)
   $fixnum.Int64 get hostObservedElapsedMicros => $_getI64(1);
@@ -2341,6 +2538,78 @@ class WritePreparation extends $pb.GeneratedMessage {
   void clearWorkspace() => $_clearField(2);
 }
 
+/// Transient observation: a session read was refused only because this device is
+/// not yet an active signer of a principal who holds the read there, and the office
+/// is enrolling it through the application's console route before asking again.
+/// The read itself still ends typed: rows, CREDENTIAL_UNAVAILABLE or a refusal.
+class ReadAccessPreparation extends $pb.GeneratedMessage {
+  factory ReadAccessPreparation({
+    $core.String? requestId,
+    $core.String? workspace,
+  }) {
+    final result = create();
+    if (requestId != null) result.requestId = requestId;
+    if (workspace != null) result.workspace = workspace;
+    return result;
+  }
+
+  ReadAccessPreparation._();
+
+  factory ReadAccessPreparation.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory ReadAccessPreparation.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'ReadAccessPreparation',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'requestId')
+    ..aOS(2, _omitFieldNames ? '' : 'workspace')
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ReadAccessPreparation clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ReadAccessPreparation copyWith(
+          void Function(ReadAccessPreparation) updates) =>
+      super.copyWith((message) => updates(message as ReadAccessPreparation))
+          as ReadAccessPreparation;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static ReadAccessPreparation create() => ReadAccessPreparation._();
+  @$core.override
+  ReadAccessPreparation createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static ReadAccessPreparation getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<ReadAccessPreparation>(create);
+  static ReadAccessPreparation? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get requestId => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set requestId($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasRequestId() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearRequestId() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $core.String get workspace => $_getSZ(1);
+  @$pb.TagNumber(2)
+  set workspace($core.String value) => $_setString(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasWorkspace() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearWorkspace() => $_clearField(2);
+}
+
 const $core.bool _omitFieldNames =
     $core.bool.fromEnvironment('protobuf.omit_field_names');
 const $core.bool _omitMessageNames =

package/dart_types/lib/src/proto/nomos/runtime/v2/receiving_group_desk.pb.dart

@@ -21,69 +21,6 @@ export 'package:protobuf/protobuf.dart' show GeneratedMessageGenericExtensions;
 
 export 'receiving_group_desk.pbenum.dart';
 
-/// The application's law package identity, carried from the compiled
-/// application descriptor: the closure that serves the injected
-/// application-home domain. The child installs it in its genesis after the
-/// parent platform's own Nomos controller, whose identity is per-platform
-/// installed state the desk observes from the provider at birth (never a
-/// compile-time constant); the kernel resolves both closures by hash from the
-/// parent's custody, so a wrong identity is its typed refusal.
-class ApplicationBirthContract extends $pb.GeneratedMessage {
-  factory ApplicationBirthContract({
-    $core.String? lawSha256,
-  }) {
-    final result = create();
-    if (lawSha256 != null) result.lawSha256 = lawSha256;
-    return result;
-  }
-
-  ApplicationBirthContract._();
-
-  factory ApplicationBirthContract.fromBuffer($core.List<$core.int> data,
-          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
-      create()..mergeFromBuffer(data, registry);
-  factory ApplicationBirthContract.fromJson($core.String json,
-          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
-      create()..mergeFromJson(json, registry);
-
-  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
-      _omitMessageNames ? '' : 'ApplicationBirthContract',
-      package:
-          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.runtime.v2'),
-      createEmptyInstance: create)
-    ..aOS(1, _omitFieldNames ? '' : 'lawSha256')
-    ..hasRequiredFields = false;
-
-  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  ApplicationBirthContract clone() => deepCopy();
-  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  ApplicationBirthContract copyWith(
-          void Function(ApplicationBirthContract) updates) =>
-      super.copyWith((message) => updates(message as ApplicationBirthContract))
-          as ApplicationBirthContract;
-
-  @$core.override
-  $pb.BuilderInfo get info_ => _i;
-
-  @$core.pragma('dart2js:noInline')
-  static ApplicationBirthContract create() => ApplicationBirthContract._();
-  @$core.override
-  ApplicationBirthContract createEmptyInstance() => create();
-  @$core.pragma('dart2js:noInline')
-  static ApplicationBirthContract getDefault() => _defaultInstance ??=
-      $pb.GeneratedMessage.$_defaultFor<ApplicationBirthContract>(create);
-  static ApplicationBirthContract? _defaultInstance;
-
-  @$pb.TagNumber(1)
-  $core.String get lawSha256 => $_getSZ(0);
-  @$pb.TagNumber(1)
-  set lawSha256($core.String value) => $_setString(0, value);
-  @$pb.TagNumber(1)
-  $core.bool hasLawSha256() => $_has(0);
-  @$pb.TagNumber(1)
-  void clearLawSha256() => $_clearField(1);
-}
-
 /// One local-open/birth procedure. Reception transports this paper once; the
 /// shared desk opens mounted local custody immediately. Remote presence or a
 /// successful birth returns typed LOCAL_REPLICA_NOT_READY while Replica Follow
@@ -94,7 +31,6 @@ class OpenReceivingGroupRequest extends $pb.GeneratedMessage {
     $core.String? application,
     $core.String? principal,
     $core.List<$core.int>? authToken,
-    ApplicationBirthContract? contract,
     $core.Iterable<$0.DirectiveCall>? genesisSeed,
     $core.bool? verifyHistory,
     ConsoleEnrolmentRoute? enrolment,
@@ -104,7 +40,6 @@ class OpenReceivingGroupRequest extends $pb.GeneratedMessage {
     if (application != null) result.application = application;
     if (principal != null) result.principal = principal;
     if (authToken != null) result.authToken = authToken;
-    if (contract != null) result.contract = contract;
     if (genesisSeed != null) result.genesisSeed.addAll(genesisSeed);
     if (verifyHistory != null) result.verifyHistory = verifyHistory;
     if (enrolment != null) result.enrolment = enrolment;
@@ -130,8 +65,6 @@ class OpenReceivingGroupRequest extends $pb.GeneratedMessage {
     ..aOS(3, _omitFieldNames ? '' : 'principal')
     ..a<$core.List<$core.int>>(
         4, _omitFieldNames ? '' : 'authToken', $pb.PbFieldType.OY)
-    ..aOM<ApplicationBirthContract>(5, _omitFieldNames ? '' : 'contract',
-        subBuilder: ApplicationBirthContract.create)
     ..pPM<$0.DirectiveCall>(6, _omitFieldNames ? '' : 'genesisSeed',
         subBuilder: $0.DirectiveCall.create)
     ..aOB(7, _omitFieldNames ? '' : 'verifyHistory')
@@ -201,30 +134,19 @@ class OpenReceivingGroupRequest extends $pb.GeneratedMessage {
   @$pb.TagNumber(4)
   void clearAuthToken() => $_clearField(4);
 
-  @$pb.TagNumber(5)
-  ApplicationBirthContract get contract => $_getN(4);
-  @$pb.TagNumber(5)
-  set contract(ApplicationBirthContract value) => $_setField(5, value);
-  @$pb.TagNumber(5)
-  $core.bool hasContract() => $_has(4);
-  @$pb.TagNumber(5)
-  void clearContract() => $_clearField(5);
-  @$pb.TagNumber(5)
-  ApplicationBirthContract ensureContract() => $_ensure(4);
-
   /// Tenant seed steps are law (`application.receivingGroup.seed`, folded at
   /// birth by the framework's birth directive); the desk refuses a non-empty list
   /// rather than authoring a second seed lane.
   @$pb.TagNumber(6)
-  $pb.PbList<$0.DirectiveCall> get genesisSeed => $_getList(5);
+  $pb.PbList<$0.DirectiveCall> get genesisSeed => $_getList(4);
 
   /// Re-run the complete signed history in the convergence tail (audit mode).
   @$pb.TagNumber(7)
-  $core.bool get verifyHistory => $_getBF(6);
+  $core.bool get verifyHistory => $_getBF(5);
   @$pb.TagNumber(7)
-  set verifyHistory($core.bool value) => $_setBool(6, value);
+  set verifyHistory($core.bool value) => $_setBool(5, value);
   @$pb.TagNumber(7)
-  $core.bool hasVerifyHistory() => $_has(6);
+  $core.bool hasVerifyHistory() => $_has(5);
   @$pb.TagNumber(7)
   void clearVerifyHistory() => $_clearField(7);
 
@@ -234,15 +156,15 @@ class OpenReceivingGroupRequest extends $pb.GeneratedMessage {
   /// intent; the console births the principal's receiving group. When absent,
   /// the historical provider-token lane runs unchanged.
   @$pb.TagNumber(8)
-  ConsoleEnrolmentRoute get enrolment => $_getN(7);
+  ConsoleEnrolmentRoute get enrolment => $_getN(6);
   @$pb.TagNumber(8)
   set enrolment(ConsoleEnrolmentRoute value) => $_setField(8, value);
   @$pb.TagNumber(8)
-  $core.bool hasEnrolment() => $_has(7);
+  $core.bool hasEnrolment() => $_has(6);
   @$pb.TagNumber(8)
   void clearEnrolment() => $_clearField(8);
   @$pb.TagNumber(8)
-  ConsoleEnrolmentRoute ensureEnrolment() => $_ensure(7);
+  ConsoleEnrolmentRoute ensureEnrolment() => $_ensure(6);
 }
 
 /// Where an enrolled principal's device key is enrolled (D22/D23): the