@githolon/runtime 0.112.4 → 0.112.6

package/dist/RUNTIME-SOURCES.sha256

@@ -11,7 +11,6 @@
 06525d62b18918913a7fe7981204fba9e1f70369cc2aa785851caae39f546de3  node_modules/@bufbuild/protobuf/dist/esm/wire/base64-encoding.js
 09a24ed660112991f8105d8c0c2c250617b6ad99f6a12afe2d39b8a9305289ec  peer-office/src/runtime/session_directory.ts
 0a687d73d1754114045dd64ab0125af437945ed11b1302753b1c3c46793a014b  peer-office/src/runtime/replica_follow_lane.ts
-0aed53ba7b333581e2aab3f5e90444abdbaa8d3defdb11ae3d7ae475b869d36c  platform-shells/browser/kernel_custody.ts
 0b2994ee1fee5c72c7f27881aea421bdb1757b0c8c4042f155c433015b0b2455  node_modules/@bufbuild/protobuf/dist/esm/codegenv2/scalar.js
 0b5eee51991554d54865ea30f65f8803c8dfe73116cd815676f927021329259a  peer-office/src/runtime/credential_vault.ts
 0db0f42ba330749a7b05095ea1fd0ff63fd2b30e84cead30fe4c28359d15f194  node_modules/@bjorn3/browser_wasi_shim/dist/wasi_defs.js
@@ -27,11 +26,11 @@
 11ba369493cb754f09f8ef04f1235d64708a283cead2164bfd12679c940fcbe6  adapter/certification_seal.ts
 13418e92f08476ae029573738d8a74f8fb4d6cfd3d8f610d0512da9d44a3a20d  peer-office/src/runtime/http_obligation_delivery.ts
 151e39e98e6d58e6453f6b9aab5f93af32cfe4e8e2915b71952a337145976049  peer-office/src/runtime/authoring_preflight.ts
+15a24c9133b37575f0e8d6a0db6a9e383b8ebb944d1929aab6694084eff85291  adapter/kernel_machine_desk.ts
 161a203d3e9f10a6de3ffa798f736f6aa157f0ab85a40c3f3d6a412729a105e2  peer-office/src/runtime/platform_effect_driver.ts
 168eb977a826f75ab0c39f9322f78cc58dbd5b233019ad1d6a7e940af8a7c4aa  node_modules/@bjorn3/browser_wasi_shim/dist/wasi.js
 16d6522ee4ecf4a91c4d29357ebc874844c266f2ae89ef2a92ec2d391f3762e9  node_modules/is-unsafe/src/contexts/sql-strict.js
 17b0d228dd20748bd5fa03164478198c813214e4fa5d8f1650705128a954f0bd  adapter/wasi_custody_filesystem.ts
-1923aefdc23c6f66e5bc5b70c71b3fa66267738b3dcfa82a59ddecf7831152ef  adapter/memory_custody_filesystem.ts
 1963a804a9cfe7d44a76b2c476817639b939d7e93828da865cab40fe9ba536fa  adapter/custody-transport.ts
 1a5d9fd32360e2cec4adbee9e56221fb26def66bb9d122e0b5745cebc963d92e  node_modules/xml-naming/src/index.js
 1b27a1f4d58d6314cd4887d0f47493d1a98fc474e3364388f321c3aeb94a8ac3  adapter/workspace_effect_outcome.ts
@@ -52,6 +51,7 @@
 25c033d29ed62a510d8c43054ec238776bcba0949808cb6054df5cbea951ddf7  adapter/proto/nomos/runtime/v2/interaction_desk_pb.js
 25d57b7e880708c04738087de674a8c98092e5bfd39d5193cdb63a2f1e33871e  node_modules/@bufbuild/protobuf/dist/esm/wkt/gen/google/protobuf/compiler/plugin_pb.js
 27d164987aeae0cffae136eaa84ff39ca6efd9c07018dce4b63f0d352d3d855b  adapter/proto/nomos/runtime/v2/maintenance_desk_pb.js
+27d996c3e9e0e5b3c45612da4588dd10cf1c7a0d3285e652c705c07e238a2b48  platform-shells/browser/custody_store.ts
 286c659a8f940c313077afe8a00c0dc128d4a138edf6d9a4519f29538b58c94f  node_modules/fast-xml-parser/src/xmlparser/XMLParser.js
 2902315d1ae081647345f4e2aab7c8e60f8f8ae16de1a6c6e642ed6fd14e4959  peer-office/src/runtime/law_package_desk.ts
 29bf27cac2afa56801e728f9aeca4c6b7c281d7e602adb5a4c6d53bf0a79762b  peer-office/src/runtime/correspondence_recovery.ts
@@ -69,10 +69,10 @@
 33e7d6bdd22396057d3f8db92384079f7ec2fda4b3582709de2d43fccacc4a9c  node_modules/@bufbuild/protobuf/dist/esm/codegenv2/extension.js
 34f8712de2bd30a2cb8366d8cfdcde466d979f1a28ac0d78f7547341b01f6c57  adapter/proto/nomos/kernel/v1/progress_pb.js
 3a90933569db7e42ec2ed3b77509c29d1ab75f6eb078f53fe5d1ac6d239d231e  peer-office/src/runtime/peer_background_scheduler.ts
+3b29007c75a5f51ad2eb490a828c3943ece28a0b3aaecfc7e416b1b35076e236  peer-office/package/package.json
 3c092b8d4185badd23ecf4552434d05aa541b0cd0d534781d687db55260d5da8  adapter/proto/nomos/runtime/v2/sealing_desk_pb.js
 3c98fa838c05abcfd8dfda1128f2d1fca9b196a371fe9751abbd8f4c3b9d04ec  node_modules/@bufbuild/protobuf/dist/esm/wkt/timestamp.js
 3d05089a8c1008f20e06da9907eec7f8824f871edfc95e907c15dc8e2bdf43e7  node_modules/@bufbuild/protobuf/dist/esm/extensions.js
-3e4d4f410f38ade5689895263df29265e13bb49c0760b82c565618082baed0a6  adapter/kernel_machine_desk.ts
 3eef60b7d08402d6a0b9427fde0308878929398918f09747833fd9a06ea3fa7d  workspace-discovery/src/http.ts
 3fa38ca64538032d871cd44da41bf6a6ad2eb133b6b8ebc2d8b4d33615b00dcf  peer-office/src/reception/application_session_pipe.ts
 3fade4f9262d10e39f346b57a7f08d03641e0ebd75556d087f6319f6c6003a24  peer-office/src/runtime/sha256.ts
@@ -84,8 +84,6 @@
 42242740dd3c09c2530972c6bc477e6aa2be2f91f6cdf112585eb1f1929721a7  peer-office/src/runtime/subscription_manager.ts
 437d1f7906925689d0329ee2f729786117903a5f9191a5a47faec67081ab6f6a  peer-office/src/runtime/interaction_desk.ts
 44d54aa1500d8b179b56c47003530ade9220c0daec31caeeeb1a59760eca6d88  node_modules/fast-xml-builder/src/fxb.js
-45f49fcf3773351a4983772c470e14e40baa392d148c991f92674c9fba1246b4  platform-shells/browser/custody_store.ts
-461cf1acdfa937b465e9135bb35d4b80a4ab72c4241493e41b9687966f684b1d  peer-office/package/package.json
 463a7041ce45ddd801fc0e0981bb11658b76bb44caad19d2971d73d7700d739b  node_modules/@bufbuild/protobuf/dist/esm/wire/text-encoding.js
 46ce19f00a64198852937f4a982c59a5d237aeab590255873e131f2f0468e98e  peer-office/src/runtime/workspace_opening.ts
 475e62094c73367833cec6253c5834a887cae9bcfa43a691a9fe3b7495c19106  node_modules/@bufbuild/protobuf/dist/esm/unknown-enum.js
@@ -129,6 +127,7 @@
 71de64c0b205eed7bcbbe11bd937a363c83cb5ab8e9977c4bb4b73b3c5353cf3  peer-office/src/runtime/placement_discovery_desk.ts
 71edee071faa5f0ebbeda63fa23e009983da9e413db2340feb6287d95f497dcd  node_modules/@bufbuild/protobuf/dist/esm/wire/varint.js
 720eb959038ea5a41d7ce358d5fb1f575199db3f4f90267bdaf0314440290546  platform-shells/node/sqlite_peer_desk_store.ts
+722cbe0b307c0e525ea25709dd7d6b307ec3413ab6887b2cc3a573995fd003e1  platform-shells/browser/kernel_work.ts
 7287f23bb63a7f10dbacc04c773050dcc279299948a70cec5a9a3a040be2a933  platform-shells/node/kernel_wasi_stdio.ts
 72f4dbde9d104ea96276198f8fab8b32e1a296d7ae57b74f8f175472627c2546  peer-office/src/runtime/custody_return_delta.ts
 73e489001027c703bc0224ae73f78ecefe028e88284bd06952e8603c3d81472c  node_modules/@bufbuild/protobuf/dist/esm/wkt/gen/google/protobuf/api_pb.js
@@ -164,10 +163,10 @@
 8ce60aff8226986c6ec652887c97a9515a2f10dd046596d76797cbdd0bb46e1d  peer-office/src/runtime/remote_runtime_paper.ts
 8e033b086d23caeba4a8b2e69284b6448787884bb0978eddf67729569d268367  peer-office/src/runtime/credential_recovery_desk.ts
 8e73c652d2c41232e1a3217524dcdbbe7f26834d59cfe80e4432ec59a801dc42  peer-office/src/runtime/authentication_readiness_desk.ts
+8ee050cca65954e7962806818145a4cf0e9a7532362b96da0363c1d918c66e5d  platform-shells/browser/kernel_custody.ts
 9109542ce7615df736d0b89b9562a0f8e989099aff65de707217d6a170591812  peer-office/src/runtime/read_maintenance_desk.ts
 92884553e5d2d46ea273441deb32dc07187dc8ded3524356fa68536d1f2fc435  node_modules/@bufbuild/protobuf/dist/esm/descriptors.js
 92aa7e4df3bf7dfc02235174f297dcbff6bd02f7eb6325876cbb24ada6d51414  node_modules/@bufbuild/protobuf/dist/esm/wire/text-format.js
-9330a6cd8db9a2a6aee8d6511ec0f4e1b1dee8a6d2eac3bec39712c27127f8b6  platform-shells/browser/peer.ts
 939bd8b89505a4e9be6b8d60fed0479086c441d7ae50930986cf9657123e0524  peer-office/src/runtime_v2_codec.ts
 9471d4fa81aa8caafdf7fca7cff9563b047a5b1803883f5dd9b7df5241350fff  peer-office/src/runtime/replica_follow_desk.ts
 94a3cef0f355a9a177661748d24faae32206a5cc382c8601a34dcf005340107b  node_modules/fast-xml-parser/src/xmlparser/OrderedObjParser.js
@@ -180,13 +179,13 @@
 98f70a85fe9d2578c977bbf26927910479cef472100b5ed7bebd4c390e79213c  peer-office/src/runtime/workspace_access_desk.ts
 99ce0b71dc7acc73e48634ff609eeb3620cf24b524e89835e804d37fb6b51b2c  adapter/offer_transport_contract.ts
 9a3d4c2296b0139778c8f61319349eac6dc0cdb723688f41ebf3c135dca85702  peer-office/src/runtime/history_acquisition_state.ts
+9b07729add8df9f24781f3135c821781e943780ef3374b16a884850949a6890a  platform-shells/browser/peer.ts
 9b1e46d587a9ad5d1531a5755ba4feccd2878de77749edce8a0086db3eb2217d  peer-office/src/runtime/admission_durability_desk.ts
 9c4c967ea6c149011acb8aabfbadb73651f84d572335c48391d627e5283c0cd0  node_modules/@bufbuild/protobuf/dist/esm/fields.js
 9e1bf39540fd14df32aa2307c44dd4d93a40a6024199f334ccf3db001f44a7f6  peer-office/src/runtime/local_copy_readability.ts
 9e82e1fc1bfd3e3573f64349dc42b4b624ed61d24e5c553f2bb4d041444f166c  node_modules/@bjorn3/browser_wasi_shim/dist/fd.js
 9efa0e5824cc0370ea3596b30cd57ea860df0bae95a0caccbbfe97d845a7a09b  peer-office/src/runtime/custody_offer.ts
 9f7a3b2bb0e2a2da849fd9101228bd9c9682b39d667e20900dd172d954b1a548  peer-office/src/runtime/observability_desk.ts
-9fa129d6ec52dea4f992be9bc3786fca75fdf733903f489ca8b954eadbd90078  platform-shells/browser/entry.ts
 a0eca2694871be026546039e99a71291822d01ba81943d44e69a14b2d766fd1a  peer-office/src/runtime/custody_desk.ts
 a0fcc6110f1154fd197a8ce056e2008dbc7d1750f8dd3ba77c3910af928ed3a1  node_modules/uri-js/dist/es5/uri.all.js
 a33120feed1faf765328722cee117f63e2147cb87052120fdacc9bd1086e67ab  peer-office/src/runtime/receiving_group_framework_wire.generated.ts
@@ -195,6 +194,7 @@ a51ad595569ec83af14644004083aad7f5086703dd46d609e8b006e36bac0f55  peer-office/sr
 a5540af900952b2ea7fde1fa967d624d427bcec5f3d1d89f3e78453a8624c650  peer-office/src/runtime/identity_witness_cache.ts
 a56cf2bf8174e0adf94970d70e003afcfc3923a53d0cf973f92d374cfe684544  node_modules/@nodable/entities/src/EntityDecoder.js
 a6250aa83ce7f238614fb7421f31e541c63c415a295e3764687693464918f3c4  node_modules/path-expression-matcher/src/ExpressionSet.js
+a7273df68b1a53d1efbc3919f0224119fcec335774a99f38e952dc8354ec375d  platform-shells/browser/entry.ts
 a79a133a4f4ae9559b127aca26b20b0b40af3b6a2cc17d75bedbd413d78276af  peer-office/src/runtime/receiving_group_desk.ts
 a91848ee180529e2a60c05dfb9584cad19cd4e1c6f391fdb76a938bcae4c0328  node_modules/@bjorn3/browser_wasi_shim/dist/debug.js
 a98127162afc0a5038171882b19d62f1c035cc8706f2463fda52fdf73c8c21bc  peer-office/src/runtime/live_correspondence_desk.ts
@@ -263,6 +263,7 @@ db05a3f19bc575c1ed771fc6882af337a49cde7bd469181f3acc772d1a76df3e  node_modules/@
 db61a17ab4dbb3514b676cd93cc702fe62a6582d5ec292725f1ada20dfbc1f72  peer-office/src/runtime/custody_replacement.ts
 dd9f3f24fb154cfbfbde94e8f2647647c80c8ca050b98e981a407e760a4b9c1e  node_modules/@bufbuild/protobuf/dist/esm/wkt/gen/google/protobuf/go_features_pb.js
 deaa25227d669aa3fbe99174275588dcc175de648ae6623fddf11d6ae69d7f67  platform-shells/node/local-development/peer_process.ts
+dff6af323ca5f9c73dd06120879fcd5f561d22a8a7fd36d3317e564ae4e10e3b  platform-shells/shared/kernel_work_accounting.ts
 e20a132033f105a29db1cfdb3d85bbadbb7206b9a7e3336bcb030a63d66b4ab2  node_modules/is-unsafe/src/contexts/nosql.js
 e2133d7e0f0ce5491a3e9bd560e9e47db2243a6a9f762be89c82e027d99d278e  peer-office/src/runtime/credential_sessions.ts
 e34016b82b6f6e4c4a1cc2dd44ccd14a348e8156a1f6c5aeeb2c7fc36a15b8f9  adapter/proto/nomos/kernel/v1/kernel_pb.js
@@ -277,6 +278,7 @@ ece435d3784d928d02bff4d015b7cb686f8c06de8536ff9f8ebc38a8f403a3be  node_modules/@
 eda289d9ef0e979fe77a578ffbbf8012cadcfec4629b66cd98c27d6229a9f020  node_modules/@bufbuild/protobuf/dist/esm/is-message.js
 efce20f9f127263ca66d855115e01b37af0afb8b8baafeba7dcc2e0834e99e4f  node_modules/@bufbuild/protobuf/dist/esm/wkt/gen/google/protobuf/struct_pb.js
 f23513db2fea432df6121956d9bab4761dabf8034b6eba8988452104dba1783e  adapter/proto/nomos/runtime/v2/records_desk_pb.js
+f3b65d81bf72f0cf4f8c6c36af75915e9146db35d590f1e51ffcececd4233147  adapter/memory_custody_filesystem.ts
 f3b9324922e08cffcc4c7ae3c6e08454f62e187a37404df31a00160cddf34d77  node_modules/@bufbuild/protobuf/dist/esm/reflect/guard.js
 f4eb625c1c0ebee8e5863b6958706af4635ca58d1d2544ae2b465e75060ba12c  peer-office/src/runtime/placement_desk.ts
 f50218256bfd061c59b454fbaf8ca304f1799b1d0d09b0f7851ba2420e1129ca  adapter/kernel_failure.ts

package/dist/nomos-runner.js

@@ -7847,10 +7847,10 @@
   // ../../platform-shells/browser/kernel_custody.ts
   init_define_NOMOS_KERNEL_RELEASE();
   init_shims();
-  function browserKernelCustody(kernel, checkpoint, isCheckpointCurrent) {
+  function browserKernelCustody(kernel, checkpoint, isCheckpointCurrent, provisionedGenesisWorkspace) {
     return {
       canRetainChanges: () => true,
-      hasLocalCustody: (workspace) => kernel.branchHead(workspace, "main") !== void 0,
+      hasLocalCustody: (workspace) => kernel.branchHead(workspace, "main") !== void 0 || workspace === provisionedGenesisWorkspace,
       openLocalCustody: async () => ({}),
       ledgerFor: () => {
         throw new Error("Browser Git custody is opened in place; there is no second local ledger");
@@ -8108,6 +8108,10 @@
   var ResidencyPressureRelievedSchema = /* @__PURE__ */ messageDesc(file_nomos_runtime_v2_residency_desk, 2);
   var ResidentPlacementSchema = /* @__PURE__ */ messageDesc(file_nomos_runtime_v2_residency_desk, 6);
   var ResidentOutboxSchema = /* @__PURE__ */ messageDesc(file_nomos_runtime_v2_residency_desk, 7);
+  var KernelWorkCounterSchema = /* @__PURE__ */ messageDesc(file_nomos_runtime_v2_residency_desk, 8);
+  var KernelWorkCpuBucketSchema = /* @__PURE__ */ messageDesc(file_nomos_runtime_v2_residency_desk, 9);
+  var ActiveKernelWorkSchema = /* @__PURE__ */ messageDesc(file_nomos_runtime_v2_residency_desk, 10);
+  var KernelWorkSnapshotSchema = /* @__PURE__ */ messageDesc(file_nomos_runtime_v2_residency_desk, 11);
   var CorrespondenceHoldSchema = /* @__PURE__ */ messageDesc(file_nomos_runtime_v2_residency_desk, 18);
   var LocalHistoryPostureSchema = /* @__PURE__ */ enumDesc(file_nomos_runtime_v2_residency_desk, 1);
   var LocalHistoryPosture = /* @__PURE__ */ tsEnum(LocalHistoryPostureSchema);
@@ -9722,9 +9726,25 @@
     };
     return {
       preopen,
-      snapshot() {
+      delta(previous, mutated, includePath = () => true, copyChanged = true) {
+        const nodes = /* @__PURE__ */ new Map();
+        const changed = [];
+        const visit = (path, node) => {
+          if (!includePath(path)) return;
+          if (path !== "/work") {
+            nodes.set(path, node);
+            if (copyChanged && (previous.get(path) !== node || mutated.has(node)))
+              changed.push({ path, ...node.data ? { bytes: node.data.slice() } : {} });
+          }
+          for (const [name, child] of node.contents ?? []) visit(`${path}/${name}`, child);
+        };
+        visit("/work", preopen.dir);
+        return { nodes, changed, removed: [...previous.keys()].filter((path) => !nodes.has(path)) };
+      },
+      snapshot(includePath = () => true) {
         const entries = [];
         const visit = (path, node) => {
+          if (!includePath(path)) return;
           if (path !== "/work") entries.push({ path, ...node.data ? { bytes: node.data.slice() } : {} });
           for (const [name, child] of node.contents ?? []) visit(`${path}/${name}`, child);
         };
@@ -9949,7 +9969,11 @@
           if (!original) continue;
           imports[name] = (...args) => {
             const result = original(...args);
-            if (result === 0 && !(name === "fd_write" && Number(args[0]) < 3) && !(name === "path_open" && (Number(args[4]) & 9) === 0)) onFilesystemMutation();
+            if (result === 0 && !(name === "fd_write" && Number(args[0]) < 3) && !(name === "path_open" && (Number(args[4]) & 9) === 0)) {
+              const fd = name === "path_open" ? new DataView(wasi.inst.exports.memory.buffer).getUint32(Number(args[8]) >>> 0, true) : Number(args[0]);
+              const opened = wasi.fds[fd];
+              onFilesystemMutation(opened instanceof OpenFile ? opened.file : void 0);
+            }
             return result;
           };
         }
@@ -10388,6 +10412,274 @@
   // ../../adapter/kernel_execution_desk.ts
   var kernelExecutionDesk = (machine) => runtimeKernelPort(machine);
 
+  // ../../platform-shells/shared/kernel_work_accounting.ts
+  init_define_NOMOS_KERNEL_RELEASE();
+  init_shims();
+  var KERNEL_WORK_CPU_BUCKET_MICROS = [
+    100,
+    250,
+    500,
+    1e3,
+    2500,
+    5e3,
+    1e4,
+    25e3,
+    5e4,
+    1e5,
+    25e4,
+    5e5,
+    1e6,
+    25e5,
+    5e6,
+    1e7,
+    3e7,
+    6e7
+  ];
+  var custodyValidation = /* @__PURE__ */ new Set([
+    "inspectChange",
+    "inspectRefusalVerdict",
+    "lawClosureInfo",
+    "resolveStatePosition",
+    "proveCompactionEquivalence"
+  ]);
+  var custodyOpenRestore = /* @__PURE__ */ new Set([
+    "checkpointExport",
+    "checkpointImport",
+    "restoreMain",
+    "openGitState",
+    "attachLocalFrontier",
+    "releaseWorkspaceState"
+  ]);
+  var custodyWrites = /* @__PURE__ */ new Set([
+    "writeRef",
+    "deleteRef",
+    "writeMetaCommit",
+    "recordWorkspaceEffectOutcome"
+  ]);
+  var custodyTransfers = /* @__PURE__ */ new Set([
+    "packDelta",
+    "applyPack",
+    "intentsAbove",
+    "historySummary",
+    "readBlob",
+    "resolveRef",
+    "listRefs"
+  ]);
+  var telemetryMeasurements = /* @__PURE__ */ new Set(["residentFootprint", "aggregateCensus"]);
+  var lawQueries = /* @__PURE__ */ new Set([
+    "authorizationCheck",
+    "authorizationExpand",
+    "frontierTransition",
+    "ownedDeviceRequest",
+    "ownedPrepareApproval",
+    "authenticationPosture",
+    "authoringRequirements",
+    "identityProviderWitness",
+    "interfaceCompatibility"
+  ]);
+  var authoringOperations = /* @__PURE__ */ new Set([
+    "signPreparedOffer",
+    "prepareRemoteOffer",
+    "signOfferPreparation"
+  ]);
+  var cryptographicOperations = /* @__PURE__ */ new Set([
+    "signBirthCertificate",
+    "signingIdentity",
+    "signAuthorityAttestation",
+    "mintTypedId",
+    "encryptionIdentity",
+    "wrapScopeKey",
+    "unwrapScopeKey"
+  ]);
+  function classifyKernelWork(frame) {
+    try {
+      const decoded = fromBinary(CallRequestSchema, frame);
+      const operation = decoded.operation;
+      if (!operation.case) return { family: "other", operation: "unspecified" };
+      if (operation.case === "query") {
+        const detail = operation.value.query.case || "unspecified";
+        const family = detail === "maintenanceQuantum" ? "read_index_maintenance" : detail === "fullHistoryAudit" ? "custody_validation" : lawQueries.has(detail) ? "law_evaluation" : "read_query";
+        return { family, operation: `query.${detail}`, workspace: operation.value.target?.workspace };
+      }
+      if (operation.case === "custody") {
+        const detail = operation.value.operation.case || "unspecified";
+        const value = operation.value.operation.value;
+        const target3 = value && "target" in value ? value.target : void 0;
+        const workspace = typeof target3 === "string" ? target3 : target3?.workspace;
+        const family = telemetryMeasurements.has(detail) ? "telemetry_measurement" : custodyValidation.has(detail) ? "custody_validation" : custodyOpenRestore.has(detail) ? "custody_open_restore" : custodyWrites.has(detail) ? "git_state_write" : custodyTransfers.has(detail) ? "sync_transfer" : "custody_inspection";
+        return { family, operation: `custody.${detail}`, workspace };
+      }
+      if (operation.case === "offer") {
+        const detail = operation.value.intent.case || "unspecified";
+        return {
+          family: "offer_adjudication",
+          operation: `offer.${detail}`,
+          workspace: operation.value.target?.workspace
+        };
+      }
+      if (operation.case === "open") {
+        return {
+          family: "custody_open_restore",
+          operation: "open",
+          workspace: operation.value.target?.workspace
+        };
+      }
+      if (operation.case === "outbox") {
+        return {
+          family: "correspondence_outbox",
+          operation: operation.value.prepare ? "outbox.prepare" : "outbox.inventory",
+          workspace: operation.value.target?.workspace
+        };
+      }
+      if (operation.case === "sync") {
+        return { family: "sync_transfer", operation: "sync", workspace: operation.value.target?.workspace };
+      }
+      if (operation.case === "configure") return { family: "configuration", operation: "configure" };
+      if (authoringOperations.has(operation.case)) {
+        return { family: "offer_authoring", operation: operation.case };
+      }
+      if (cryptographicOperations.has(operation.case)) {
+        return { family: "cryptography", operation: operation.case };
+      }
+      return { family: "other", operation: operation.case };
+    } catch {
+      return { family: "other", operation: "undecodable" };
+    }
+  }
+  function classifyCompletedKernelWork(work, result) {
+    if (work.family !== "offer_adjudication") return work;
+    try {
+      if (result) {
+        const response = fromBinary(CallResponseSchema, result);
+        if (response.outcome.case === "offer" && response.outcome.value.outcome.case === "admitted") {
+          const admitted = response.outcome.value.outcome.value;
+          if (!admitted.dryRun && !admitted.placement && !admitted.alreadyApplied) {
+            return { ...work, family: "offer_admitted" };
+          }
+        }
+      }
+    } catch {
+    }
+    return { ...work, family: "offer_not_admitted" };
+  }
+  var _counters, _activeChanged, _cpuAvailable, _startedUnixMillis, _active;
+  var KernelWorkAccounting = class {
+    constructor(activeChanged, cpuAvailable = true) {
+      __privateAdd(this, _counters, /* @__PURE__ */ new Map());
+      __privateAdd(this, _activeChanged);
+      __privateAdd(this, _cpuAvailable);
+      __privateAdd(this, _startedUnixMillis, Date.now());
+      __privateAdd(this, _active);
+      __privateSet(this, _activeChanged, activeChanged);
+      __privateSet(this, _cpuAvailable, cpuAvailable);
+    }
+    begin(work, startedUnixMillis) {
+      var _a;
+      __privateSet(this, _active, create(ActiveKernelWorkSchema, {
+        family: work.family,
+        operation: work.operation,
+        startedUnixMillis: BigInt(startedUnixMillis)
+      }));
+      try {
+        (_a = __privateGet(this, _activeChanged)) == null ? void 0 : _a.call(this, __privateGet(this, _active));
+      } catch {
+      }
+    }
+    complete(work, elapsedMillis2, cpuMicros, completed) {
+      var _a;
+      const key = `${work.family}\0${work.operation}`;
+      let counter = __privateGet(this, _counters).get(key);
+      if (!counter) {
+        counter = {
+          calls: 0n,
+          failures: 0n,
+          cpuMicros: __privateGet(this, _cpuAvailable) ? 0n : void 0,
+          wallMicros: 0n,
+          bucketCalls: __privateGet(this, _cpuAvailable) ? KERNEL_WORK_CPU_BUCKET_MICROS.map(() => 0n) : [],
+          lastCompletedUnixMillis: 0n
+        };
+        __privateGet(this, _counters).set(key, counter);
+      }
+      const boundedCpuMicros = cpuMicros === void 0 ? void 0 : Math.max(0, Math.round(cpuMicros));
+      counter.calls += 1n;
+      if (!completed) counter.failures += 1n;
+      if (boundedCpuMicros !== void 0 && counter.cpuMicros !== void 0) {
+        counter.cpuMicros += BigInt(boundedCpuMicros);
+      }
+      counter.wallMicros += BigInt(Math.max(0, Math.round(elapsedMillis2 * 1e3)));
+      counter.lastCompletedUnixMillis = BigInt(Date.now());
+      for (let index = 0; boundedCpuMicros !== void 0 && index < counter.bucketCalls.length; index += 1) {
+        if (boundedCpuMicros <= KERNEL_WORK_CPU_BUCKET_MICROS[index]) counter.bucketCalls[index] += 1n;
+      }
+      __privateSet(this, _active, void 0);
+      try {
+        (_a = __privateGet(this, _activeChanged)) == null ? void 0 : _a.call(this, void 0);
+      } catch {
+      }
+    }
+    snapshot(observedUnixMillis = Date.now()) {
+      const counters = [...__privateGet(this, _counters).entries()].sort(([left], [right]) => left.localeCompare(right)).map(([key, value]) => {
+        const [family, operation] = key.split("\0");
+        return create(KernelWorkCounterSchema, {
+          family,
+          operation,
+          calls: value.calls,
+          failures: value.failures,
+          cpuMicros: value.cpuMicros,
+          wallMicros: value.wallMicros,
+          cpuBuckets: value.bucketCalls.map((calls, index) => create(KernelWorkCpuBucketSchema, { leMicros: BigInt(KERNEL_WORK_CPU_BUCKET_MICROS[index]), calls })),
+          lastCompletedUnixMillis: value.lastCompletedUnixMillis
+        });
+      });
+      return create(KernelWorkSnapshotSchema, {
+        startedUnixMillis: BigInt(__privateGet(this, _startedUnixMillis)),
+        observedUnixMillis: BigInt(observedUnixMillis),
+        counters,
+        active: __privateGet(this, _active)
+      });
+    }
+    reset() {
+      var _a;
+      __privateGet(this, _counters).clear();
+      __privateSet(this, _startedUnixMillis, Date.now());
+      __privateSet(this, _active, void 0);
+      try {
+        (_a = __privateGet(this, _activeChanged)) == null ? void 0 : _a.call(this, void 0);
+      } catch {
+      }
+    }
+  };
+  _counters = new WeakMap();
+  _activeChanged = new WeakMap();
+  _cpuAvailable = new WeakMap();
+  _startedUnixMillis = new WeakMap();
+  _active = new WeakMap();
+
+  // ../../platform-shells/browser/kernel_work.ts
+  init_define_NOMOS_KERNEL_RELEASE();
+  init_shims();
+  function observeBrowserKernelCalls(kernel, accounting, now = () => performance.now()) {
+    return {
+      ...kernel,
+      call(frame) {
+        const work = classifyKernelWork(frame);
+        accounting.begin(work, Date.now());
+        const started = now();
+        let completed = false;
+        let completedWork = work;
+        try {
+          const result = kernel.call(frame);
+          completedWork = classifyCompletedKernelWork(work, result);
+          completed = true;
+          return result;
+        } finally {
+          if (!completed) completedWork = classifyCompletedKernelWork(work);
+          accounting.complete(completedWork, now() - started, void 0, completed);
+        }
+      }
+    };
+  }
+
   // ../../adapter/git_custody_desk.ts
   init_define_NOMOS_KERNEL_RELEASE();
   init_shims();
@@ -11377,8 +11669,10 @@
   init_define_NOMOS_KERNEL_RELEASE();
   init_shims();
   var copyRecord = (record) => ({ ...record, value: record.value.slice() });
+  var currentCacheFile = (path) => path.endsWith("/nomos.git/nomos-cache/raw-frontier-v2/current.sqlite");
+  var durableFile = (path) => !path.includes("/nomos.git/nomos-cache/raw-frontier-v2/addressed/") && !path.endsWith("/nomos.git/nomos-cache/raw-frontier-v2/addressed") && !currentCacheFile(path);
   var keyOf = (namespace, key) => JSON.stringify([namespace, key]);
-  var _backend, _records, _revision, _committed, _queued, _failure, _closed;
+  var _backend, _records, _knownNodes, _mutatedNodes, _changedRecords, _cachePaths, _cacheDirty, _cacheDisabled, _cacheTimer, _cachePending, _revision, _committed, _queued, _failure, _closed;
   var _BrowserCustodyStore = class _BrowserCustodyStore {
     constructor(backend, snapshot) {
       __publicField(this, "filesystem", memoryCustodyFilesystem());
@@ -11386,26 +11680,46 @@
       __publicField(this, "identity");
       __privateAdd(this, _backend);
       __privateAdd(this, _records, /* @__PURE__ */ new Map());
+      __privateAdd(this, _knownNodes, /* @__PURE__ */ new Map());
+      __privateAdd(this, _mutatedNodes, /* @__PURE__ */ new Set());
+      __privateAdd(this, _changedRecords, /* @__PURE__ */ new Map());
+      __privateAdd(this, _cachePaths, /* @__PURE__ */ new Set());
+      __privateAdd(this, _cacheDirty, false);
+      __privateAdd(this, _cacheDisabled, false);
+      __privateAdd(this, _cacheTimer);
+      __privateAdd(this, _cachePending);
       __privateAdd(this, _revision, 0);
       __privateAdd(this, _committed, -1);
       __privateAdd(this, _queued);
       __privateAdd(this, _failure);
       __privateAdd(this, _closed, false);
-      __publicField(this, "changed", () => {
+      __publicField(this, "changed", (inode) => {
         this.assertUsable();
+        if (inode) __privateGet(this, _mutatedNodes).add(inode);
         __privateWrapper(this, _revision)._++;
+        if (__privateGet(this, _backend).commitCache && !__privateGet(this, _cacheDisabled)) {
+          __privateSet(this, _cacheDirty, true);
+          if (!__privateGet(this, _cacheTimer)) __privateSet(this, _cacheTimer, setTimeout(() => {
+            __privateSet(this, _cacheTimer, void 0);
+            void this.flushCache().catch(() => {
+            });
+          }, 3e4));
+          __privateGet(this, _cacheTimer).unref?.();
+        }
         void this.checkpoint().catch(() => {
         });
       });
       __privateSet(this, _backend, backend);
-      if (snapshot && snapshot.format !== 1) throw new Error("Unsupported browser custody format; keep this site's data and update the application.");
+      if (snapshot && snapshot.format !== 2) throw new Error("Unsupported browser custody format; keep this site's data and update the application.");
       this.replica = snapshot?.replica ?? globalThis.crypto.getRandomValues(new BigUint64Array(1))[0] & (1n << 63n) - 1n;
       this.identity = snapshot?.identity ?? `browser-${globalThis.crypto.randomUUID()}`;
       for (const entry of snapshot?.files ?? []) {
         if (entry.bytes === void 0) this.filesystem.files.mkdir(entry.path);
         else this.filesystem.files.writeFile(entry.path, entry.bytes);
+        if (currentCacheFile(entry.path)) __privateGet(this, _cachePaths).add(entry.path);
       }
       for (const record of snapshot?.records ?? []) __privateGet(this, _records).set(keyOf(record.namespace, record.key), copyRecord(record));
+      __privateSet(this, _knownNodes, new Map(this.filesystem.delta(/* @__PURE__ */ new Map(), /* @__PURE__ */ new Set(), durableFile, false).nodes));
       for (const name of ["mkdir", "writeFile", "unlink"]) {
         const original = this.filesystem.files[name].bind(this.filesystem.files);
         this.filesystem.files[name] = (...args) => {
@@ -11416,20 +11730,15 @@
         };
       }
       const promises = this.filesystem.fs.promises;
-      const mkdir = promises.mkdir.bind(promises);
-      const writeFile = promises.writeFile.bind(promises);
-      promises.mkdir = async (path) => {
-        this.assertUsable();
-        const result = await mkdir(path);
-        this.changed();
-        return result;
-      };
-      promises.writeFile = async (path, bytes) => {
-        this.assertUsable();
-        const result = await writeFile(path, bytes);
-        this.changed();
-        return result;
-      };
+      for (const name of ["mkdir", "writeFile", "unlink", "rmdir"]) {
+        const original = promises[name].bind(promises);
+        promises[name] = async (...args) => {
+          this.assertUsable();
+          const result = await original(...args);
+          this.changed();
+          return result;
+        };
+      }
     }
     static async open(backend) {
       try {
@@ -11455,6 +11764,7 @@
       const next = value === void 0 ? void 0 : { namespace, key, revision: (current?.revision ?? 0n) + 1n, value: value.slice() };
       if (next) __privateGet(this, _records).set(id, next);
       else __privateGet(this, _records).delete(id);
+      __privateGet(this, _changedRecords).set(id, next && copyRecord(next));
       this.changed();
       return next && copyRecord(next);
     }
@@ -11464,14 +11774,19 @@
         __privateSet(this, _queued, Promise.resolve().then(async () => {
           while (__privateGet(this, _committed) !== __privateGet(this, _revision)) {
             const revision = __privateGet(this, _revision);
-            const snapshot = {
-              format: 1,
-              replica: this.replica,
-              identity: this.identity,
-              files: this.filesystem.snapshot(),
-              records: [...__privateGet(this, _records).values()].map(copyRecord)
-            };
-            await __privateGet(this, _backend).commit(snapshot);
+            const delta = this.filesystem.delta(__privateGet(this, _knownNodes), __privateGet(this, _mutatedNodes), durableFile);
+            __privateGet(this, _mutatedNodes).clear();
+            const records = [...__privateGet(this, _changedRecords).values()].filter((record) => record !== void 0).map(copyRecord);
+            const removedRecords = [...__privateGet(this, _changedRecords).entries()].filter(([, record]) => record === void 0).map(([id]) => id);
+            __privateGet(this, _changedRecords).clear();
+            await __privateGet(this, _backend).commit({
+              control: { format: 2, replica: this.replica, identity: this.identity },
+              files: delta.changed,
+              removedFiles: delta.removed,
+              records,
+              removedRecords
+            });
+            __privateSet(this, _knownNodes, new Map(delta.nodes));
             __privateSet(this, _committed, revision);
           }
         }).catch((error) => {
@@ -11488,14 +11803,41 @@
     isCheckpointCurrent() {
       return !__privateGet(this, _failure) && !__privateGet(this, _closed) && __privateGet(this, _committed) === __privateGet(this, _revision);
     }
+    async flushCache() {
+      if (__privateGet(this, _cachePending)) await __privateGet(this, _cachePending);
+      if (!__privateGet(this, _backend).commitCache || !__privateGet(this, _cacheDirty) || __privateGet(this, _cacheDisabled)) return;
+      __privateSet(this, _cacheDirty, false);
+      const paths = new Set(this.filesystem.files.listFiles("/work").filter(currentCacheFile));
+      const files = [...paths].map((path) => ({ path, bytes: this.filesystem.files.readFile(path) }));
+      const removed = [...__privateGet(this, _cachePaths)].filter((path) => !paths.has(path));
+      __privateSet(this, _cachePending, __privateGet(this, _backend).commitCache(files, removed).then(() => {
+        __privateSet(this, _cachePaths, paths);
+      }).catch(() => {
+        __privateSet(this, _cacheDisabled, true);
+      }).finally(() => {
+        __privateSet(this, _cachePending, void 0);
+      }));
+      await __privateGet(this, _cachePending);
+    }
     async close() {
       await this.checkpoint();
+      if (__privateGet(this, _cacheTimer)) clearTimeout(__privateGet(this, _cacheTimer));
+      __privateSet(this, _cacheTimer, void 0);
+      await this.flushCache();
       __privateSet(this, _closed, true);
       __privateGet(this, _backend).close();
     }
   };
   _backend = new WeakMap();
   _records = new WeakMap();
+  _knownNodes = new WeakMap();
+  _mutatedNodes = new WeakMap();
+  _changedRecords = new WeakMap();
+  _cachePaths = new WeakMap();
+  _cacheDirty = new WeakMap();
+  _cacheDisabled = new WeakMap();
+  _cacheTimer = new WeakMap();
+  _cachePending = new WeakMap();
   _revision = new WeakMap();
   _committed = new WeakMap();
   _queued = new WeakMap();
@@ -11527,8 +11869,28 @@
     let db;
     try {
       db = await new Promise((resolve, reject) => {
-        const request = indexedDB.open(name, 1);
-        request.onupgradeneeded = () => request.result.createObjectStore("custody");
+        const request = indexedDB.open(name, 3);
+        request.onupgradeneeded = (event) => {
+          const database = request.result;
+          if (!database.objectStoreNames.contains("custody")) database.createObjectStore("custody");
+          if (!database.objectStoreNames.contains("files")) database.createObjectStore("files");
+          if (!database.objectStoreNames.contains("records")) database.createObjectStore("records");
+          if (!database.objectStoreNames.contains("cache")) database.createObjectStore("cache");
+          if (event.oldVersion === 2) {
+            const files = request.transaction.objectStore("files");
+            const cache = request.transaction.objectStore("cache");
+            const cursor = files.openCursor();
+            cursor.onsuccess = () => {
+              const entry = cursor.result;
+              if (!entry) return;
+              if (Array.isArray(entry.key) && currentCacheFile(String(entry.key[0]))) {
+                cache.put(entry.value, entry.key);
+                entry.delete();
+              }
+              entry.continue();
+            };
+          }
+        };
         request.onsuccess = () => resolve(request.result);
         request.onerror = () => reject(request.error);
         request.onblocked = () => reject(new Error("Browser custody upgrade is blocked by another tab. Close it and retry."));
@@ -11537,19 +11899,148 @@
       release();
       throw error;
     }
+    const chunkBytes = 4 * 1024 * 1024;
+    const replace = (store, id, entry) => {
+      const old = store.get([id, -1]);
+      old.onsuccess = () => {
+        const count = Number(old.result?.chunks ?? 0);
+        for (let index = 0; index < count; index++) store.delete([id, index]);
+        store.delete([id, -1]);
+        if (!entry) return;
+        const bytes = "path" in entry ? entry.bytes : entry.value;
+        const chunks = bytes === void 0 ? 0 : Math.max(1, Math.ceil(bytes.byteLength / chunkBytes));
+        const meta = "path" in entry ? { path: entry.path, directory: bytes === void 0, chunks } : { namespace: entry.namespace, key: entry.key, revision: entry.revision, chunks };
+        store.put(meta, [id, -1]);
+        for (let index = 0; index < chunks; index++)
+          store.put(bytes.slice(index * chunkBytes, (index + 1) * chunkBytes), [id, index]);
+      };
+    };
+    const completeChunks = (chunks, count) => Number.isSafeInteger(count) && count >= 0 && chunks.length === count && Array.from({ length: count }, (_, index) => chunks[index]).every((chunk) => chunk instanceof Uint8Array);
+    const readState = () => new Promise((resolve, reject) => {
+      const tx = db.transaction(["custody", "files", "records", "cache"], "readonly");
+      const control = tx.objectStore("custody").get("current");
+      const files = tx.objectStore("files").getAll();
+      const fileKeys = tx.objectStore("files").getAllKeys();
+      const records = tx.objectStore("records").getAll();
+      const recordKeys = tx.objectStore("records").getAllKeys();
+      const caches = tx.objectStore("cache").getAll();
+      const cacheKeys = tx.objectStore("cache").getAllKeys();
+      tx.oncomplete = () => {
+        try {
+          if (!control.result) {
+            resolve(void 0);
+            return;
+          }
+          if (control.result.format !== 2) {
+            reject(new Error("Unsupported browser custody format"));
+            return;
+          }
+          const fileValues = /* @__PURE__ */ new Map();
+          for (let index = 0; index < fileKeys.result.length; index++) {
+            const [path, chunk] = fileKeys.result[index];
+            const value = fileValues.get(path) ?? { chunks: [] };
+            if (chunk === -1) value.meta = files.result[index];
+            else value.chunks[chunk] = files.result[index];
+            fileValues.set(path, value);
+          }
+          for (let index = 0; index < cacheKeys.result.length; index++) {
+            const [path, chunk] = cacheKeys.result[index];
+            const value = fileValues.get(path) ?? { chunks: [] };
+            if (chunk === -1) value.meta = caches.result[index];
+            else value.chunks[chunk] = caches.result[index];
+            fileValues.set(path, value);
+          }
+          const image = [...fileValues].map(([path, value]) => {
+            if (!value.meta) throw new Error(`Missing browser custody file metadata: ${path}`);
+            if (value.meta.directory) return { path };
+            if (!completeChunks(value.chunks, value.meta.chunks))
+              throw new Error(`Incomplete browser custody file: ${path}`);
+            const length = value.chunks.reduce((sum, chunk) => sum + chunk.byteLength, 0);
+            const bytes = new Uint8Array(length);
+            let offset = 0;
+            for (const chunk of value.chunks) {
+              bytes.set(chunk, offset);
+              offset += chunk.byteLength;
+            }
+            return { path, bytes };
+          }).sort((a, b) => a.path.split("/").length - b.path.split("/").length || a.path.localeCompare(b.path));
+          const recordValues = /* @__PURE__ */ new Map();
+          for (let index = 0; index < recordKeys.result.length; index++) {
+            const [id, chunk] = recordKeys.result[index];
+            const value = recordValues.get(id) ?? { chunks: [] };
+            if (chunk === -1) value.meta = records.result[index];
+            else value.chunks[chunk] = records.result[index];
+            recordValues.set(id, value);
+          }
+          const restoredRecords = [...recordValues].map(([id, value]) => {
+            if (!value.meta || !completeChunks(value.chunks, value.meta.chunks))
+              throw new Error(`Incomplete browser custody record: ${id}`);
+            const length = value.chunks.reduce((sum, chunk) => sum + chunk.byteLength, 0);
+            const bytes = new Uint8Array(length);
+            let offset = 0;
+            for (const chunk of value.chunks) {
+              bytes.set(chunk, offset);
+              offset += chunk.byteLength;
+            }
+            return { namespace: value.meta.namespace, key: value.meta.key, revision: value.meta.revision, value: bytes };
+          });
+          resolve({ ...control.result, files: image, records: restoredRecords });
+        } catch (error) {
+          reject(error);
+        }
+      };
+      tx.onabort = () => reject(tx.error ?? new Error("Browser custody read aborted"));
+    });
+    const migrate = async () => new Promise((resolve, reject) => {
+      const tx = db.transaction(["custody", "files", "records", "cache"], "readwrite", { durability: "strict" });
+      const control = tx.objectStore("custody");
+      const read = control.get("current");
+      read.onsuccess = () => {
+        const snapshot = read.result;
+        if (!snapshot || snapshot.format === 2) return;
+        if (snapshot.format !== 1) {
+          tx.abort();
+          return;
+        }
+        for (const file of snapshot.files) {
+          if (durableFile(file.path)) replace(tx.objectStore("files"), file.path, file);
+          else if (currentCacheFile(file.path)) replace(tx.objectStore("cache"), file.path, file);
+        }
+        for (const record of snapshot.records) replace(tx.objectStore("records"), keyOf(record.namespace, record.key), record);
+        control.put({ format: 2, replica: snapshot.replica, identity: snapshot.identity }, "current");
+      };
+      tx.oncomplete = () => resolve();
+      tx.onabort = () => reject(tx.error ?? new Error("Browser custody migration aborted"));
+    });
+    try {
+      await migrate();
+    } catch (error) {
+      db.close();
+      release();
+      throw error;
+    }
     return BrowserCustodyStore.open({
-      load: () => new Promise((resolve, reject) => {
-        const tx = db.transaction("custody", "readonly");
-        const read = tx.objectStore("custody").get("current");
-        tx.oncomplete = () => resolve(read.result);
-        tx.onabort = () => reject(tx.error ?? new Error("Browser custody read aborted"));
-      }),
-      commit: (snapshot) => new Promise((resolve, reject) => {
-        const tx = db.transaction("custody", "readwrite", { durability: "strict" });
-        tx.objectStore("custody").put(snapshot, "current");
+      load: readState,
+      commit: (change) => new Promise((resolve, reject) => {
+        const tx = db.transaction(["custody", "files", "records"], "readwrite", { durability: "strict" });
+        const files = tx.objectStore("files");
+        const records = tx.objectStore("records");
+        for (const path of change.removedFiles) replace(files, path);
+        for (const file of change.files) replace(files, file.path, file);
+        for (const id of change.removedRecords) replace(records, id);
+        for (const record of change.records) replace(records, keyOf(record.namespace, record.key), record);
+        tx.objectStore("custody").put(change.control, "current");
         tx.oncomplete = () => resolve();
         tx.onabort = () => reject(tx.error ?? new Error("Browser custody transaction aborted"));
       }),
+      commitCache: (cacheFiles, removedFiles) => new Promise((resolve, reject) => {
+        const tx = db.transaction("cache", "readwrite", { durability: "relaxed" });
+        const cache = tx.objectStore("cache");
+        for (const path of removedFiles) replace(cache, path);
+        for (const file of cacheFiles) replace(cache, file.path, file);
+        tx.oncomplete = () => resolve();
+        tx.onabort = () => reject(tx.error ?? new Error("Browser cache checkpoint aborted"));
+      }),
       close: () => {
         db.close();
         release();
@@ -14530,7 +15021,7 @@
   }
 
   // ../src/runtime/credential_recovery_desk.ts
-  var _ports, _waiting, _background, _renewing, _active, _replicaWaiters, _joining, _completed2, _sequence2, _CredentialRecoveryDesk_instances, now_fn, unixMillis_fn, tokenless_fn, prune_fn, begin_fn, wake_fn, callOnce_fn, remember_fn2, finishReplicaWaiters_fn;
+  var _ports, _waiting, _background, _renewing, _active2, _replicaWaiters, _joining, _completed2, _sequence2, _CredentialRecoveryDesk_instances, now_fn, unixMillis_fn, tokenless_fn, prune_fn, begin_fn, wake_fn, callOnce_fn, remember_fn2, finishReplicaWaiters_fn;
   var CredentialRecoveryDesk = class {
     constructor(ports) {
       __privateAdd(this, _CredentialRecoveryDesk_instances);
@@ -14540,7 +15031,7 @@
       /** Capabilities whose renewal-ahead-of-expiry is in flight: one refresh per capability, not one per offer. */
       __privateAdd(this, _renewing, /* @__PURE__ */ new Map());
       /** One physical acquisition per capability; other callers wait outside the serial kernel lane. */
-      __privateAdd(this, _active, /* @__PURE__ */ new Map());
+      __privateAdd(this, _active2, /* @__PURE__ */ new Map());
       /** Headless follows joining an interaction-owned refresh of the same
        * capability. They need no synthetic session or second provider request. */
       __privateAdd(this, _replicaWaiters, /* @__PURE__ */ new Map());
@@ -14578,7 +15069,7 @@
         request: fromBinary(RuntimeRequestSchema, toBinary(RuntimeRequestSchema, request))
       }, { allowCached: false, rejectCurrent: false });
       if (step.case !== "pending") throw new Error("credential renewal did not produce its physical paper");
-      __privateGet(this, _renewing).set(capability, __privateGet(this, _active).get(capability));
+      __privateGet(this, _renewing).set(capability, __privateGet(this, _active2).get(capability));
       return step;
     }
     beginOffer(request, command, response) {
@@ -14593,7 +15084,7 @@
     ensurePresent(session) {
       if (__privateGet(this, _ports).authToken(session).byteLength > 0 || __privateMethod(this, _CredentialRecoveryDesk_instances, tokenless_fn).call(this, session)) return true;
       __privateMethod(this, _CredentialRecoveryDesk_instances, prune_fn).call(this);
-      const active = __privateGet(this, _active).get(__privateGet(this, _ports).capabilityFor(session));
+      const active = __privateGet(this, _active2).get(__privateGet(this, _ports).capabilityFor(session));
       if (active !== void 0) {
         __privateGet(this, _waiting).get(active)?.affectedSessions.add(session);
         return false;
@@ -14607,7 +15098,7 @@
       if (!syncNeedsCredentialRefresh(event.result, event.failure) || __privateMethod(this, _CredentialRecoveryDesk_instances, tokenless_fn).call(this, session)) return;
       __privateMethod(this, _CredentialRecoveryDesk_instances, prune_fn).call(this);
       const capability = __privateGet(this, _ports).capabilityFor(session);
-      const existing = __privateGet(this, _active).get(capability);
+      const existing = __privateGet(this, _active2).get(capability);
       if (existing !== void 0) {
         __privateGet(this, _waiting).get(existing)?.affectedSessions.add(session);
         return;
@@ -14625,7 +15116,7 @@
         return { case: "refreshed", value: create(CredentialsRefreshedSchema, { session: capability }) };
       }
       __privateMethod(this, _CredentialRecoveryDesk_instances, prune_fn).call(this);
-      if (__privateGet(this, _active).has(capability)) {
+      if (__privateGet(this, _active2).has(capability)) {
         const waiting = __privateGet(this, _replicaWaiters).get(capability) ?? /* @__PURE__ */ new Set();
         waiting.add(workspace);
         __privateGet(this, _replicaWaiters).set(capability, waiting);
@@ -14674,7 +15165,7 @@
       __privateGet(this, _waiting).delete(command.workId);
       if (__privateGet(this, _background).get(work.capability) === command.workId) __privateGet(this, _background).delete(work.capability);
       if (__privateGet(this, _renewing).get(work.capability) === command.workId) __privateGet(this, _renewing).delete(work.capability);
-      if (__privateGet(this, _active).get(work.capability) === command.workId) __privateGet(this, _active).delete(work.capability);
+      if (__privateGet(this, _active2).get(work.capability) === command.workId) __privateGet(this, _active2).delete(work.capability);
       const sameContext = __privateMethod(this, _CredentialRecoveryDesk_instances, now_fn).call(this) < work.expiresAt && (work.directCapability || __privateGet(this, _ports).capabilityFor(work.session) === work.capability) && (work.directCapability ? __privateGet(this, _ports).deviceChallengeForCapability(work.capability) : __privateGet(this, _ports).deviceChallenge(work.session)) === work.deviceChallenge;
       const material = sameContext && receipt.outcome.case === "credentialRefreshed" ? receipt.outcome.value : void 0;
       let refreshed = create(CredentialsRefreshedSchema, { session: work.session });
@@ -14711,7 +15202,7 @@
     clear() {
       __privateGet(this, _waiting).clear();
       __privateGet(this, _joining).clear();
-      __privateGet(this, _active).clear();
+      __privateGet(this, _active2).clear();
       __privateGet(this, _replicaWaiters).clear();
       __privateGet(this, _background).clear();
       __privateGet(this, _renewing).clear();
@@ -14722,7 +15213,7 @@
   _waiting = new WeakMap();
   _background = new WeakMap();
   _renewing = new WeakMap();
-  _active = new WeakMap();
+  _active2 = new WeakMap();
   _replicaWaiters = new WeakMap();
   _joining = new WeakMap();
   _completed2 = new WeakMap();
@@ -14743,7 +15234,7 @@
       __privateGet(this, _waiting).delete(id);
       if (__privateGet(this, _background).get(work.capability) === id) __privateGet(this, _background).delete(work.capability);
       if (__privateGet(this, _renewing).get(work.capability) === id) __privateGet(this, _renewing).delete(work.capability);
-      if (__privateGet(this, _active).get(work.capability) === id) __privateGet(this, _active).delete(work.capability);
+      if (__privateGet(this, _active2).get(work.capability) === id) __privateGet(this, _active2).delete(work.capability);
       __privateMethod(this, _CredentialRecoveryDesk_instances, finishReplicaWaiters_fn).call(this, work.capability, false);
     }
     for (const [id, work] of __privateGet(this, _joining)) if (work.expiresAt <= now) __privateGet(this, _joining).delete(id);
@@ -14753,7 +15244,7 @@
     const id = `credential-recovery-${++__privateWrapper(this, _sequence2)._}`;
     const effectId2 = `${id}:refresh`;
     const capability = direct ? session : __privateGet(this, _ports).capabilityFor(session);
-    const active = __privateGet(this, _active).get(capability);
+    const active = __privateGet(this, _active2).get(capability);
     if (active !== void 0 && original !== void 0) {
       __privateGet(this, _waiting).get(active)?.affectedSessions.add(session);
       const current2 = __privateMethod(this, _CredentialRecoveryDesk_instances, wake_fn).call(this, id, 0);
@@ -14780,7 +15271,7 @@
       ...direct === void 0 ? {} : { workspace: direct.workspace },
       ...original === void 0 ? {} : { original }
     });
-    __privateGet(this, _active).set(capability, id);
+    __privateGet(this, _active2).set(capability, id);
     return { case: "pending", value: create(CorrespondencePendingSchema, { workId: id, effect: {
       case: "refreshCredential",
       value: create(PeerCredentialRefreshEffectSchema, {
@@ -19153,27 +19644,27 @@
   // ../src/runtime/residency_pins.ts
   init_define_NOMOS_KERNEL_RELEASE();
   init_shims();
-  var _pending2, _resumed, _active2;
+  var _pending2, _resumed, _active3;
   var ResidencyPins = class {
     constructor() {
       __privateAdd(this, _pending2, /* @__PURE__ */ new Map());
       __privateAdd(this, _resumed, /* @__PURE__ */ new WeakMap());
-      __privateAdd(this, _active2, []);
+      __privateAdd(this, _active3, []);
     }
     begin(workId2, effectId2) {
       const pending = workId2 ? __privateGet(this, _pending2).get(workId2) : void 0;
       const correlated = pending && pending.effectId === effectId2;
       const scope = new Set(correlated ? pending.scope : void 0);
       if (correlated) __privateGet(this, _resumed).set(scope, workId2);
-      __privateGet(this, _active2).push(scope);
+      __privateGet(this, _active3).push(scope);
       return scope;
     }
     touch(workspace) {
-      if (workspace) for (const scope of __privateGet(this, _active2)) scope.add(workspace);
+      if (workspace) for (const scope of __privateGet(this, _active3)) scope.add(workspace);
     }
     end(scope, previousWorkId, pendingWorkId, pendingEffectId) {
-      if (__privateGet(this, _active2).at(-1) !== scope) throw new Error("residency scopes must settle in stack order");
-      __privateGet(this, _active2).pop();
+      if (__privateGet(this, _active3).at(-1) !== scope) throw new Error("residency scopes must settle in stack order");
+      __privateGet(this, _active3).pop();
       if (previousWorkId && __privateGet(this, _resumed).get(scope) === previousWorkId) __privateGet(this, _pending2).delete(previousWorkId);
       if (pendingWorkId) __privateGet(this, _pending2).set(pendingWorkId, {
         scope,
@@ -19181,7 +19672,7 @@
       });
     }
     workspaces() {
-      return new Set([...__privateGet(this, _active2), ...[...__privateGet(this, _pending2).values()].map((pending) => pending.scope)].flatMap((scope) => [...scope]));
+      return new Set([...__privateGet(this, _active3), ...[...__privateGet(this, _pending2).values()].map((pending) => pending.scope)].flatMap((scope) => [...scope]));
     }
     clear() {
       __privateGet(this, _pending2).clear();
@@ -19189,7 +19680,7 @@
   };
   _pending2 = new WeakMap();
   _resumed = new WeakMap();
-  _active2 = new WeakMap();
+  _active3 = new WeakMap();
 
   // ../src/runtime/subscription_manager.ts
   init_define_NOMOS_KERNEL_RELEASE();
@@ -35031,9 +35522,11 @@
         replica: options.replica ?? storage.replica,
         trustRootPublicKey: options.trustRootPublicKey
       }, storage.filesystem, storage.changed);
-      const kernel = kernelExecutionDesk(machine);
+      const kernelWork = new KernelWorkAccounting(options.onKernelWorkChanged, false);
+      const physicalKernel = observeBrowserKernelCalls(kernelExecutionDesk(machine), kernelWork);
+      const kernel = options.observeKernel?.(physicalKernel) ?? physicalKernel;
       const custodyDesk = gitCustodyDesk(kernel, fetchImpl);
-      const kernelStore = browserKernelCustody(kernel, () => storage.checkpoint(), () => storage.isCheckpointCurrent());
+      const kernelStore = browserKernelCustody(kernel, () => storage.checkpoint(), () => storage.isCheckpointCurrent(), options.provisionedGenesisWorkspace);
       const physical = withWorkspaceDiscovery(kernelStore, {
         providers: options.discoveryProviders ?? [options.base],
         fetch: (input, init) => fetchImpl(input, init)
@@ -35068,6 +35561,7 @@
           await storage.checkpoint();
           return result;
         },
+        kernelWorkSnapshot: () => kernelWork.snapshot(),
         close: async () => {
           await office.settleRetention();
           office.close();
@@ -35173,6 +35667,12 @@
           warmResidencyMillis: 86400000n
         },
         postEvent,
+        onKernelWorkChanged: (active) => {
+          try {
+            window.__nomosKernelWorkChanged?.(active ? toJsonString(ActiveKernelWorkSchema, active) : "");
+          } catch {
+          }
+        },
         kernelCache: kernelCache()
       });
       flushEvents();
@@ -35186,6 +35686,7 @@
     if (!peer) throw new Error("Nomos peer runtime is not booted");
     return frameToBase64(await peer.invoke(frameFromBase64(frameBase64)));
   };
+  window.__nomosKernelWorkSnapshot = () => peer ? toJsonString(KernelWorkSnapshotSchema, peer.kernelWorkSnapshot()) : void 0;
   window.NomosRunner = {
     version: 2,
     dispose: () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@githolon/runtime",
-  "version": "0.112.4",
+  "version": "0.112.6",
   "type": "module",
   "description": "The portable Nomos application runtime, reception contracts, and Node/browser runners.",
   "license": "SEE LICENSE IN LICENSE.md",