githolon 0.108.3 → 0.108.6

package/dist/full-cli.mjs

@@ -408,9 +408,8 @@ var init_fields = __esm({
           { timestamp: true }
         );
       },
-      /** A boolean flag (Lww). Stored as the kernel scalar `"true"`/`"false"` and decoded back to a real
-       *  JSON boolean on read — so a flag is `t.bool()`, not a 2-value `t.enum`. Counts/filters key on the
-       *  same string form. (Not encryptable — only Lww-class scalars are, and bool already is.) */
+      /** A first-class USDA boolean flag (Lww). It remains a boolean through authored law, kernel state,
+       *  canonical custody and generated reads; it is never lowered through a string or JSON value. */
       bool() {
         return makeField("bool", z2.boolean(), FirstWriterWins);
       },
@@ -1606,7 +1605,11 @@ function payloadIdSelector(selector) {
     };
   }
   if (Array.isArray(selector)) {
-    const readId = { source: "template", parts: [...selector], optional: false };
+    const readId = {
+      source: "template",
+      parts: [...selector],
+      optional: false
+    };
     return {
       field: (payload) => resolveInvariantReadId(readId, payload) ?? "",
       readId
@@ -1614,9 +1617,17 @@ function payloadIdSelector(selector) {
   }
   if (typeof selector === "object" && selector !== null && "source" in selector) {
     if (selector.source === "item") {
-      throw new Error("directive precondition ids cannot use item-relative read parts");
+      throw new Error(
+        "directive precondition ids cannot use item-relative read parts"
+      );
     }
-    const readId = selector.source === "literal" ? selector : selector.transform === "none" ? { source: "payload", path: selector.path, prefix: "", suffix: "", optional: false } : { source: "template", parts: [selector], optional: false };
+    const readId = selector.source === "literal" ? selector : selector.transform === "none" ? {
+      source: "payload",
+      path: selector.path,
+      prefix: "",
+      suffix: "",
+      optional: false
+    } : { source: "template", parts: [selector], optional: false };
     return {
       field: (payload) => resolveInvariantReadId(readId, payload) ?? "",
       ...readId.source === "payload" ? { path: readId.path } : {},
@@ -1653,7 +1664,10 @@ function makeRequirable(base) {
         )
       });
     }
-    return makeRequirable({ ...base, secondaryOutputs: [...base.secondaryOutputs ?? [], next] });
+    return makeRequirable({
+      ...base,
+      secondaryOutputs: [...base.secondaryOutputs ?? [], next]
+    });
   };
   return {
     ...base,
@@ -1664,15 +1678,18 @@ function makeRequirable(base) {
         return makeRequirable({ ...base, payloadExample: payload });
       }
       const parsed = base.payloadSchema.safeParse(payload);
-      if (!parsed.success) throw new Error(
-        `directive('${base.id}').example(...) must satisfy its payload schema: ${parsed.error.message}`
-      );
+      if (!parsed.success)
+        throw new Error(
+          `directive('${base.id}').example(...) must satisfy its payload schema: ${parsed.error.message}`
+        );
       return makeRequirable({ ...base, payloadExample: parsed.data });
     },
     fromCurrentPrincipal(field) {
       const name = field.trim();
       if (name.length === 0) {
-        throw new Error("directive.fromCurrentPrincipal(field): field must be a non-empty payload field name");
+        throw new Error(
+          "directive.fromCurrentPrincipal(field): field must be a non-empty payload field name"
+        );
       }
       if (zodKind2(base.payloadSchema) !== "object") {
         throw new Error(
@@ -1703,7 +1720,9 @@ function makeRequirable(base) {
     },
     fromRecord(field, opts) {
       if (typeof field !== "string" || field.length === 0) {
-        throw new Error("directive.fromRecord(field): field must be a non-empty payload field name");
+        throw new Error(
+          "directive.fromRecord(field): field must be a non-empty payload field name"
+        );
       }
       const prior = base.businessRecordInputs ?? [];
       const next = {
@@ -1712,7 +1731,10 @@ function makeRequirable(base) {
       };
       return makeRequirable({
         ...base,
-        businessRecordInputs: [...prior.filter((candidate) => candidate.field !== field), next]
+        businessRecordInputs: [
+          ...prior.filter((candidate) => candidate.field !== field),
+          next
+        ]
       });
     },
     trustsSource(opts) {
@@ -1741,6 +1763,11 @@ function makeRequirable(base) {
           `directive('${base.id}').trustsSource(...): the trust directive must be wrapped in nomosImplementationDetail(...) so tenant code cannot call it`
         );
       }
+      if (opts.satisfiedBy === void 0 !== (opts.satisfiedByArgs === void 0)) {
+        throw new Error(
+          `directive('${base.id}').trustsSource(...): satisfiedBy and satisfiedByArgs must be declared together`
+        );
+      }
       return makeRequirable({
         ...base,
         businessSourceTrust: {
@@ -1750,7 +1777,11 @@ function makeRequirable(base) {
           queryArgs: { ...opts.queryArgs },
           copy: { ...opts.copy ?? {} },
           genesisField: opts.genesisField ?? "sourceGenesis",
-          keyHashesField: opts.keyHashesField ?? "sourceKeyHashes"
+          keyHashesField: opts.keyHashesField ?? "sourceKeyHashes",
+          ...opts.satisfiedBy === void 0 ? {} : {
+            satisfiedByQueryId: opts.satisfiedBy.id,
+            satisfiedByQueryArgs: { ...opts.satisfiedByArgs ?? {} }
+          }
         }
       });
     },
@@ -1815,7 +1846,9 @@ function makeRequirable(base) {
     delegatedFrom(parent) {
       const g = base.delegatedRoleGate;
       if (g === void 0) {
-        throw new Error("directive.delegatedFrom(): call .delegatedRole(relation) before .delegatedFrom(parent)");
+        throw new Error(
+          "directive.delegatedFrom(): call .delegatedRole(relation) before .delegatedFrom(parent)"
+        );
       }
       return makeRequirable({
         ...base,
@@ -1846,12 +1879,22 @@ function makeRequirable(base) {
     },
     reads(...reads) {
       const refTypes = reads.filter((r) => typeof r === "string");
-      const queryDecls = reads.filter((r) => typeof r !== "string");
+      const queryDecls = reads.filter(
+        (r) => typeof r !== "string"
+      );
       const merged = [.../* @__PURE__ */ new Set([...base.declaredReads, ...refTypes])].sort();
-      const byId = new Map((base.declaredQueryReads ?? []).map((q) => [q.id, q]));
+      const byId = new Map(
+        (base.declaredQueryReads ?? []).map((q) => [q.id, q])
+      );
       for (const q of queryDecls) byId.set(q.id, q);
-      const mergedQueries = [...byId.values()].sort((a, b) => a.id < b.id ? -1 : a.id > b.id ? 1 : 0);
-      return makeRequirable({ ...base, declaredReads: merged, declaredQueryReads: mergedQueries });
+      const mergedQueries = [...byId.values()].sort(
+        (a, b) => a.id < b.id ? -1 : a.id > b.id ? 1 : 0
+      );
+      return makeRequirable({
+        ...base,
+        declaredReads: merged,
+        declaredQueryReads: mergedQueries
+      });
     },
     readsFrom(source, query3, opts) {
       let entry;
@@ -1867,20 +1910,33 @@ function makeRequirable(base) {
             `readsFrom(fromPayload('${source.payloadField}'), '${query3.id}'): { policy } must be a trustPolicy(...) declaration.`
           );
         }
-        entry = { queryId: query3.id, policy: policy.policyId, fromPayload: source.payloadField };
+        entry = {
+          queryId: query3.id,
+          policy: policy.policyId,
+          fromPayload: source.payloadField
+        };
         if (policy.monotone === true) __registerMonotoneForeignQuery(query3.id);
       } else {
         entry = { queryId: query3.id, from: source };
       }
       const canon = (e) => "from" in e ? `0\\0${e.from}\\0${e.queryId}` : `1\\0${e.policy}\\0${e.fromPayload}\\0${e.queryId}`;
       const prior = base.declaredForeignReads ?? [];
-      const byKey = new Map(prior.map((e) => [canon(e), e]));
+      const byKey = new Map(
+        prior.map((e) => [canon(e), e])
+      );
       byKey.set(canon(entry), entry);
-      const merged = [...byKey.values()].sort((a, b) => canon(a) < canon(b) ? -1 : canon(a) > canon(b) ? 1 : 0);
-      return makeRequirable({ ...base, declaredForeignReads: merged }).alsoEnsures(NomosSourceFrontier);
+      const merged = [...byKey.values()].sort(
+        (a, b) => canon(a) < canon(b) ? -1 : canon(a) > canon(b) ? 1 : 0
+      );
+      return makeRequirable({
+        ...base,
+        declaredForeignReads: merged
+      }).alsoEnsures(NomosSourceFrontier);
     },
     emits(eventType, opts) {
-      const merged = { ...base.declaredEmits };
+      const merged = {
+        ...base.declaredEmits
+      };
       merged[eventType] = opts?.max !== void 0 ? { max: opts.max } : {};
       return makeRequirable({ ...base, declaredEmits: merged });
     },
@@ -1892,20 +1948,41 @@ function makeRequirable(base) {
         ...base.marker === "creates" ? [base.aggregateId] : [],
         ...(base.secondaryOutputs ?? []).filter((o) => o.marker === "creates").map((o) => o.aggregateId)
       ];
-      return makeRequirable({ ...base, activityDescriptor: normalizeActivity(base.id, input, base.payloadSchema, createdIds) });
+      return makeRequirable({
+        ...base,
+        activityDescriptor: normalizeActivity(
+          base.id,
+          input,
+          base.payloadSchema,
+          createdIds
+        )
+      });
     },
     declaresRelation(rel) {
-      return makeRequirable({ ...base, declaredRelations: [...base.declaredRelations, rel] });
+      return makeRequirable({
+        ...base,
+        declaredRelations: [...base.declaredRelations, rel]
+      });
     },
     requiresHostCapability(...portIds) {
-      const merged = [.../* @__PURE__ */ new Set([...base.declaredHostCapabilities, ...portIds])].sort();
+      const merged = [
+        .../* @__PURE__ */ new Set([...base.declaredHostCapabilities, ...portIds])
+      ].sort();
       return makeRequirable({ ...base, declaredHostCapabilities: merged });
     },
     births() {
-      const byId = new Map((base.declaredQueryReads ?? []).map((q) => [q.id, q]));
+      const byId = new Map(
+        (base.declaredQueryReads ?? []).map((q) => [q.id, q])
+      );
       for (const q of BIRTH_METER_QUERIES) byId.set(q.id, q);
-      const mergedQueries = [...byId.values()].sort((a, b) => a.id < b.id ? -1 : a.id > b.id ? 1 : 0);
-      return makeRequirable({ ...base, birthsChild: true, declaredQueryReads: mergedQueries });
+      const mergedQueries = [...byId.values()].sort(
+        (a, b) => a.id < b.id ? -1 : a.id > b.id ? 1 : 0
+      );
+      return makeRequirable({
+        ...base,
+        birthsChild: true,
+        declaredQueryReads: mergedQueries
+      });
     },
     resolves(field) {
       if (typeof field !== "string" || field.length === 0) {
@@ -1921,7 +1998,9 @@ function makeRequirable(base) {
       return makeRequirable({ ...base, resolvesField: field });
     },
     grants(relation) {
-      const merged = [.../* @__PURE__ */ new Set([...base.grantsRelation ?? [], relation])].sort();
+      const merged = [
+        .../* @__PURE__ */ new Set([...base.grantsRelation ?? [], relation])
+      ].sort();
       return makeRequirable({ ...base, grantsRelation: merged });
     }
   };
@@ -2017,7 +2096,9 @@ var init_directive = __esm({
         const actual = schema === void 0 ? void 0 : idOfMetaOf(schema);
         if (actual !== this.aggregate.id) {
           throw new Error(
-            `directive('${this.id}').target('${field}') must name an idOf(${shortName(this.aggregate.id)}) payload field`
+            `directive('${this.id}').target('${field}') must name an idOf(${shortName(
+              this.aggregate.id
+            )}) payload field`
           );
         }
         return new _DirectivePlanStep(
@@ -2164,10 +2245,7 @@ var init_directive = __esm({
           this.aggregate,
           this.payloadSchema,
           this.createOnceIdField,
-          [
-            ...this.preconditions.slice(0, -1),
-            { ...last, declassify: trimmed }
-          ],
+          [...this.preconditions.slice(0, -1), { ...last, declassify: trimmed }],
           this.targetField
         );
       }
@@ -2179,7 +2257,9 @@ var init_directive = __esm({
           const field = this.targetField ?? (candidates.length === 1 ? candidates[0] : void 0);
           if (this.targetField === void 0 && candidates.length > 1) {
             throw new Error(
-              `directive('${this.id}') has several idOf(${shortName(this.aggregate.id)}) payload fields; select the mutation target with .target('field') before .plan(...)`
+              `directive('${this.id}') has several idOf(${shortName(
+                this.aggregate.id
+              )}) payload fields; select the mutation target with .target('field') before .plan(...)`
             );
           }
           if (field !== void 0) {
@@ -4167,7 +4247,8 @@ function nmsInternalEncodeTypedProviderCall(operation, requestPrefix = "browser"
   }));
   const query3 = operation.case === "query" ? operation.value.query : void 0;
   const custody = operation.case === "custody" ? operation.value.operation : void 0;
-  const detail = query3?.case === "named" ? `query:named:${String(query3.value.operation)}` : query3?.case ? `query:${query3.case}` : custody?.case ? `custody:${custody.case}` : operation.case || "empty";
+  const offeredIntent = operation.case === "offer" ? operation.value.intent.case : void 0;
+  const detail = query3?.case === "named" ? `query:named:${String(query3.value.operation)}` : query3?.case ? `query:${query3.case}` : custody?.case ? `custody:${custody.case}` : offeredIntent ? `offer:${offeredIntent}` : operation.case || "empty";
   return { requestId, mode: operation.case || "empty", detail, bytes, encodeMs: monotonicMs() - started };
 }
 function nmsInternalDecodeTypedProviderResponse(bytes, requestId) {
@@ -4589,8 +4670,13 @@ function createWasmEnginePlane({ span } = {}) {
         wsContents.set(name, new File(bytes));
       },
       readWsFile(name) {
-        const f = wsContents.get(name);
-        return f ? f.data : null;
+        const parts = String(name).split("/").filter(Boolean);
+        let node = wsDirNode ?? void 0;
+        for (const part of parts) {
+          if (!(node instanceof Directory)) return null;
+          node = node.contents.get(part);
+        }
+        return node instanceof File ? node.data : null;
       },
       memBytes() {
         return ex ? ex.memory.buffer.byteLength : 0;
@@ -4676,6 +4762,11 @@ function createWasmEnginePlane({ span } = {}) {
             }
           })
         });
+        if (response.outcome.case === "failure") {
+          throw new Error(
+            `${response.outcome.value.code}: ${response.outcome.value.message}`
+          );
+        }
         if (response.outcome.case !== "custody" || response.outcome.value.operation.case !== "packDelta") return null;
         const pack = response.outcome.value.operation.value.pack;
         return pack.length ? pack : null;
@@ -5205,6 +5296,7 @@ function createModelLifecycleOfferRequest(target, args) {
       rng: args.capturedPorts.rng,
       deferProjection: args.deferProjection === true,
       spans: args.spans === true,
+      prepareOnly: args.prepareOnly === true,
       sequence: BigInt(args.sequence),
       clock: create2(CapturedClockSchema, {
         physicalMillis: BigInt(args.capturedPorts.clock.physical),
@@ -6384,19 +6476,19 @@ var init_runtime_pb = __esm({
     "use strict";
     init_kernel_pb();
     init_progress_pb();
-    file_nomos_runtime_v2_runtime = /* @__PURE__ */ fileDesc4("Ch5ub21vcy9ydW50aW1lL3YyL3J1bnRpbWUucHJvdG8SEG5vbW9zLnJ1bnRpbWUudjIioAkKDlJ1bnRpbWVSZXF1ZXN0EhgKEHByb3RvY29sX3ZlcnNpb24YASABKA0SEgoKcmVxdWVzdF9pZBgCIAEoBBIyCgV0cmFjZRgDIAEoCzIeLm5vbW9zLnJ1bnRpbWUudjIuVHJhY2VDb250ZXh0SAGIAQESOgoLa2VybmVsX2NhbGwYCiABKAsyIy5ub21vcy5ydW50aW1lLnYyLktlcm5lbENhbGxSZXF1ZXN0SAASMwoHY29ubmVjdBgLIAEoCzIgLm5vbW9zLnJ1bnRpbWUudjIuQ29ubmVjdFJlcXVlc3RIABJCCg9saXN0X3dvcmtzcGFjZXMYDCABKAsyJy5ub21vcy5ydW50aW1lLnYyLkxpc3RXb3Jrc3BhY2VzUmVxdWVzdEgAEkgKEnNuYXBzaG90X3dvcmtzcGFjZRgNIAEoCzIqLm5vbW9zLnJ1bnRpbWUudjIuU25hcHNob3RXb3Jrc3BhY2VSZXF1ZXN0SAASQAoOc3luY193b3Jrc3BhY2UYDiABKAsyJi5ub21vcy5ydW50aW1lLnYyLlN5bmNXb3Jrc3BhY2VSZXF1ZXN0SAASQQoPc3RhcnRfYXV0b19zeW5jGA8gASgLMiYubm9tb3MucnVudGltZS52Mi5TdGFydEF1dG9TeW5jUmVxdWVzdEgAEj8KDnN0b3BfYXV0b19zeW5jGBAgASgLMiUubm9tb3MucnVudGltZS52Mi5TdG9wQXV0b1N5bmNSZXF1ZXN0SAASLwoFd2F0Y2gYESABKAsyHi5ub21vcy5ydW50aW1lLnYyLldhdGNoUmVxdWVzdEgAEjMKB3Vud2F0Y2gYEiABKAsyIC5ub21vcy5ydW50aW1lLnYyLlVud2F0Y2hSZXF1ZXN0SAASQAoOcHJlcGFyZV9kb21haW4YEyABKAsyJi5ub21vcy5ydW50aW1lLnYyLlByZXBhcmVEb21haW5SZXF1ZXN0SAASTQoVcmVzb2x2ZV9jdXN0b2R5X2JyZWFrGBQgASgLMiwubm9tb3MucnVudGltZS52Mi5SZXNvbHZlQ3VzdG9keUJyZWFrUmVxdWVzdEgAEjoKC2Nsb3NlX3JlYWxtGBUgASgLMiMubm9tb3MucnVudGltZS52Mi5DbG9zZVJlYWxtUmVxdWVzdEgAEjoKC2RlYWRfbGV0dGVyGBYgASgLMiMubm9tb3MucnVudGltZS52Mi5EZWFkTGV0dGVyUmVxdWVzdEgAEkAKDmhpc3RvcmljX3F1ZXJ5GBcgASgLMiYubm9tb3MucnVudGltZS52Mi5IaXN0b3JpY1F1ZXJ5UmVxdWVzdEgAEkIKD21vZGVsX2xpZmVjeWNsZRgYIAEoCzInLm5vbW9zLnJ1bnRpbWUudjIuTW9kZWxMaWZlY3ljbGVSZXF1ZXN0SAASXQodZXN0YWJsaXNoX2FwcGxpY2F0aW9uX2N1c3RvZHkYGSABKAsyNC5ub21vcy5ydW50aW1lLnYyLkVzdGFibGlzaEFwcGxpY2F0aW9uQ3VzdG9keVJlcXVlc3RIAEIJCgdjb21tYW5kQggKBl90cmFjZSJTChFLZXJuZWxDYWxsUmVxdWVzdBIPCgdzZXNzaW9uGAEgASgJEi0KB3JlcXVlc3QYAiABKAsyHC5ub21vcy5rZXJuZWwudjEuQ2FsbFJlcXVlc3Qi8QIKIkVzdGFibGlzaEFwcGxpY2F0aW9uQ3VzdG9keVJlcXVlc3QSDwoHc2Vzc2lvbhgBIAEoCRIOCgZwYXJlbnQYAiABKAkSEQoJcHJpbmNpcGFsGAMgASgJEg8KB3N1YmplY3QYBCABKAkSFQoNZGV2aWNlX3NlY3JldBgFIAEoDBIVCg1kZXZpY2VfcHVibGljGAYgASgMEhIKCmF1dGhfdG9rZW4YByABKAkSEAoIaWRfdG9rZW4YCCABKAkSFAoMdmVyaWZpZWRfdmlhGAkgASgJEg8KB2Jvcm5fYXQYCiABKAkSOwoTZW5yb2xsX2ZpcnN0X2RldmljZRgLIAEoCzIeLm5vbW9zLmtlcm5lbC52MS5EaXJlY3RpdmVDYWxsEj0KFWJpcnRoX3JlY2VpdmluZ19ncm91cBgMIAEoCzIeLm5vbW9zLmtlcm5lbC52MS5EaXJlY3RpdmVDYWxsEg8KB2NvbmZpcm0YDSABKAginwEKHUFwcGxpY2F0aW9uQ3VzdG9keUVzdGFibGlzaGVkEgwKBGhvbWUYASABKAkSFwoKY2hpbGRfaGVhZBgCIAEoCUgAiAEBEhAKCHZlcmlmaWVkGAMgASgIEh8KEnZlcmlmaWNhdGlvbl9lcnJvchgEIAEoCUgBiAEBQg0KC19jaGlsZF9oZWFkQhUKE192ZXJpZmljYXRpb25fZXJyb3IiZQoUSGlzdG9yaWNRdWVyeVJlcXVlc3QSDwoHc2Vzc2lvbhgBIAEoCRIOCgZtb21lbnQYAiABKAkSLAoFcXVlcnkYAyABKAsyHS5ub21vcy5rZXJuZWwudjEuUXVlcnlSZXF1ZXN0IrUJCg9SdW50aW1lUmVzcG9uc2USGAoQcHJvdG9jb2xfdmVyc2lvbhgBIAEoDRISCgpyZXF1ZXN0X2lkGAIgASgEEjMKB2ZhaWx1cmUYCiABKAsyIC5ub21vcy5ydW50aW1lLnYyLlJ1bnRpbWVGYWlsdXJlSAASNAoLa2VybmVsX2NhbGwYCyABKAsyHS5ub21vcy5rZXJuZWwudjEuQ2FsbFJlc3BvbnNlSAASMAoJY29ubmVjdGVkGAwgASgLMhsubm9tb3MucnVudGltZS52Mi5Db25uZWN0ZWRIABI5Cg53b3Jrc3BhY2VfbGlzdBgNIAEoCzIfLm5vbW9zLnJ1bnRpbWUudjIuV29ya3NwYWNlTGlzdEgAEkEKEndvcmtzcGFjZV9zbmFwc2hvdBgOIAEoCzIjLm5vbW9zLnJ1bnRpbWUudjIuV29ya3NwYWNlU25hcHNob3RIABJBCg5zeW5jX3dvcmtzcGFjZRgPIAEoCzInLm5vbW9zLnJ1bnRpbWUudjIuU3luY1dvcmtzcGFjZVJlc3BvbnNlSAASPgoRYXV0b19zeW5jX3N0YXJ0ZWQYECABKAsyIS5ub21vcy5ydW50aW1lLnYyLkF1dG9TeW5jU3RhcnRlZEgAEj4KEWF1dG9fc3luY19zdG9wcGVkGBEgASgLMiEubm9tb3MucnVudGltZS52Mi5BdXRvU3luY1N0b3BwZWRIABI3Cg13YXRjaF9zdGFydGVkGBIgASgLMh4ubm9tb3MucnVudGltZS52Mi5XYXRjaFN0YXJ0ZWRIABI3Cg13YXRjaF9zdG9wcGVkGBMgASgLMh4ubm9tb3MucnVudGltZS52Mi5XYXRjaFN0b3BwZWRIABI7Cg9kb21haW5fcHJlcGFyZWQYFCABKAsyIC5ub21vcy5ydW50aW1lLnYyLkRvbWFpblByZXBhcmVkSAASSAoWY3VzdG9keV9icmVha19yZXNvbHZlZBgVIAEoCzImLm5vbW9zLnJ1bnRpbWUudjIuQ3VzdG9keUJyZWFrUmVzb2x2ZWRIABI1CgxyZWFsbV9jbG9zZWQYFiABKAsyHS5ub21vcy5ydW50aW1lLnYyLlJlYWxtQ2xvc2VkSAASMwoHYmxvY2tlZBgXIAEoCzIgLm5vbW9zLnJ1bnRpbWUudjIuUnVudGltZUJsb2NrZWRIABJIChZyZW1vdGVfb2ZmZXJfYWRtaXNzaW9uGBggASgLMiYubm9tb3MucnVudGltZS52Mi5SZW1vdGVPZmZlckFkbWlzc2lvbkgAEjsKC2RlYWRfbGV0dGVyGBkgASgLMiQubm9tb3MucnVudGltZS52Mi5EZWFkTGV0dGVyUmVzcG9uc2VIABJDCg9tb2RlbF9saWZlY3ljbGUYGiABKAsyKC5ub21vcy5ydW50aW1lLnYyLk1vZGVsTGlmZWN5Y2xlUmVzcG9uc2VIABJaCh9hcHBsaWNhdGlvbl9jdXN0b2R5X2VzdGFibGlzaGVkGBsgASgLMi8ubm9tb3MucnVudGltZS52Mi5BcHBsaWNhdGlvbkN1c3RvZHlFc3RhYmxpc2hlZEgAQgkKB291dGNvbWUinwEKDlJ1bnRpbWVCbG9ja2VkEkEKCXdvcmtzcGFjZRgBIAEoCzIsLm5vbW9zLnJ1bnRpbWUudjIuV29ya3NwYWNlUmVzaWRlbmN5UmVxdWlyZWRIABJACghzaWJsaW5ncxgCIAEoCzIsLm5vbW9zLnJ1bnRpbWUudjIuU2libGluZ1Jlc2lkZW5jaWVzUmVxdWlyZWRIAEIICgZyZWFzb24iLwoaV29ya3NwYWNlUmVzaWRlbmN5UmVxdWlyZWQSEQoJd29ya3NwYWNlGAEgASgJIlUKGFNpYmxpbmdSZXNpZGVuY3lSZXF1aXJlZBIRCgl3b3Jrc3BhY2UYASABKAkSEwoLc291cmNlX2hlYWQYAiABKAkSEQoJZm9sZF9yb290GAMgASgJIl0KGlNpYmxpbmdSZXNpZGVuY2llc1JlcXVpcmVkEj8KC3Jlc2lkZW5jaWVzGAEgAygLMioubm9tb3MucnVudGltZS52Mi5TaWJsaW5nUmVzaWRlbmN5UmVxdWlyZWQihgIKFFJlbW90ZU9mZmVyQWRtaXNzaW9uEhEKCXdvcmtzcGFjZRgBIAEoCRIMCgRtYWluGAIgASgJEhgKC3NlYWxlZF9tYWluGAMgASgJSACIAQESLwoHdmVyZGljdBgEIAEoCzIeLm5vbW9zLmtlcm5lbC52MS5PZmZlclJlc3BvbnNlEjMKDGJvcm5fY3VzdG9keRgFIAMoCzIdLm5vbW9zLnJ1bnRpbWUudjIuQm9ybkN1c3RvZHkSEwoLcmVzdWx0X3BhY2sYBiABKAwSGAoLcmVzdWx0X2Jhc2UYByABKAlIAYgBAUIOCgxfc2VhbGVkX21haW5CDgoMX3Jlc3VsdF9iYXNlIkoKC0Jvcm5DdXN0b2R5Ei0KBWNoaWxkGAEgASgLMh4ubm9tb3Mua2VybmVsLnYxLkJvcm5Xb3Jrc3BhY2USDAoEcGFjaxgCIAEoDCL5AQoYQ3VzdG9keU9mZmVyQmF0Y2hSZXF1ZXN0EhgKEHByb3RvY29sX3ZlcnNpb24YASABKA0SEgoKcmVxdWVzdF9pZBgCIAEoCRI3CgZpbmxpbmUYAyABKAsyJS5ub21vcy5ydW50aW1lLnYyLkN1c3RvZHlJbmxpbmVPZmZlcnNIABJGChFzZXNzaW9uX2NhbmRpZGF0ZRgEIAEoCzIpLm5vbW9zLnJ1bnRpbWUudjIuQ3VzdG9keVNlc3Npb25DYW5kaWRhdGVIABIWCgliYXNlX2hlYWQYBSABKAlIAYgBAUIICgZzb3VyY2VCDAoKX2Jhc2VfaGVhZCJOChJDdXN0b2R5SW50ZW50T2ZmZXISDwoHc2Vzc2lvbhgBIAEoCRISCgpjb21taXRfb2lkGAIgASgJEhMKC2NoYW5nZV91c2RhGAMgASgMIksKE0N1c3RvZHlJbmxpbmVPZmZlcnMSNAoGb2ZmZXJzGAEgAygLMiQubm9tb3MucnVudGltZS52Mi5DdXN0b2R5SW50ZW50T2ZmZXIiLAoXQ3VzdG9keVNlc3Npb25DYW5kaWRhdGUSEQoJcmVmZXJlbmNlGAEgASgJIvcBChlDdXN0b2R5T2ZmZXJCYXRjaFJlc3BvbnNlEhgKEHByb3RvY29sX3ZlcnNpb24YASABKA0SEgoKcmVxdWVzdF9pZBgCIAEoCRI3CglhZG1pc3Npb24YCiABKAsyIi5ub21vcy5ydW50aW1lLnYyLkN1c3RvZHlBZG1pc3Npb25IABIzCgdmYWlsdXJlGAsgASgLMiAubm9tb3MucnVudGltZS52Mi5SdW50aW1lRmFpbHVyZUgAEjMKB2Jsb2NrZWQYDCABKAsyIC5ub21vcy5ydW50aW1lLnYyLlJ1bnRpbWVCbG9ja2VkSABCCQoHb3V0Y29tZSLuAgoQQ3VzdG9keUFkbWlzc2lvbhIMCgRtYWluGAEgASgJEhgKC3NlYWxlZF9tYWluGAIgASgJSACIAQESOwoIc2Vzc2lvbnMYAyADKAsyKS5ub21vcy5ydW50aW1lLnYyLkN1c3RvZHlTZXNzaW9uQWRtaXNzaW9uEjUKDmJpcnRoX291dGNvbWVzGAQgAygLMh0ubm9tb3Mua2VybmVsLnYxLkJpcnRoT3V0Y29tZRIzCgxib3JuX2N1c3RvZHkYBSADKAsyHS5ub21vcy5ydW50aW1lLnYyLkJvcm5DdXN0b2R5EhMKC3Jlc3VsdF9wYWNrGAYgASgMEhgKC3Jlc3VsdF9iYXNlGAcgASgJSAGIAQESOgoHdGltaW5ncxgIIAEoCzIpLm5vbW9zLnJ1bnRpbWUudjIuQ3VzdG9keUFkbWlzc2lvblRpbWluZ3NCDgoMX3NlYWxlZF9tYWluQg4KDF9yZXN1bHRfYmFzZSJlChdDdXN0b2R5U2Vzc2lvbkFkbWlzc2lvbhIPCgdzZXNzaW9uGAEgASgJEjkKB2ludGVudHMYAiADKAsyKC5ub21vcy5ydW50aW1lLnYyLkN1c3RvZHlJbnRlbnRBZG1pc3Npb24ikAIKFkN1c3RvZHlJbnRlbnRBZG1pc3Npb24SEgoKY29tbWl0X29pZBgBIAEoCRIWCglpbnRlbnRfaWQYAiABKAlIAYgBARI7CghhZG1pdHRlZBgKIAEoCzInLm5vbW9zLnJ1bnRpbWUudjIuQ3VzdG9keUludGVudEFkbWl0dGVkSAASOQoHc2tpcHBlZBgLIAEoCzImLm5vbW9zLnJ1bnRpbWUudjIuQ3VzdG9keUludGVudFNraXBwZWRIABI5CgdyZWZ1c2VkGAwgASgLMiYubm9tb3MucnVudGltZS52Mi5DdXN0b2R5SW50ZW50UmVmdXNlZEgAQgkKB291dGNvbWVCDAoKX2ludGVudF9pZCKQAQoVQ3VzdG9keUludGVudEFkbWl0dGVkEgwKBGhlYWQYASABKAkSMwoHY3JlYXRlZBgCIAMoCzIiLm5vbW9zLmtlcm5lbC52MS5PZmZlckFnZ3JlZ2F0ZVJlZhI0CghhZmZlY3RlZBgDIAMoCzIiLm5vbW9zLmtlcm5lbC52MS5PZmZlckFnZ3JlZ2F0ZVJlZiIvChRDdXN0b2R5SW50ZW50U2tpcHBlZBIXCg9hbHJlYWR5X29uX21haW4YASABKAgiWgoUQ3VzdG9keUludGVudFJlZnVzZWQSDwoHbWVzc2FnZRgBIAEoCRIVCg1kZWFkX2xldHRlcmVkGAIgASgIEhEKBGhpbnQYAyABKAlIAIgBAUIHCgVfaGludCLtAQoXQ3VzdG9keUFkbWlzc2lvblRpbWluZ3MSFAoMdG90YWxfbWlsbGlzGAEgASgBEhMKC3NjYW5fbWlsbGlzGAIgASgBEhQKDGZldGNoX21pbGxpcxgDIAEoARITCgtzZWFsX21pbGxpcxgEIAEoARIYChBnYXRlX2ZvbGRfbWlsbGlzGAUgASgBEhQKDGludGVudF9jb3VudBgGIAEoDRIVCg1zZXNzaW9uX2NvdW50GAcgASgNEjUKBXNwYW5zGAggAygLMiYubm9tb3MucnVudGltZS52Mi5DdXN0b2R5QWRtaXNzaW9uU3BhbiKXAQoUQ3VzdG9keUFkbWlzc2lvblNwYW4SCgoCaWQYASABKAkSDQoFdHJhY2sYAiABKAkSDAoEbmFtZRgDIAEoCRIMCgRraW5kGAQgASgJEg0KBWRlcHRoGAUgASgNEhsKE3N0YXJ0ZWRfdW5peF9taWxsaXMYBiABKAESHAoUZmluaXNoZWRfdW5peF9taWxsaXMYByABKAEiQgoMVHJhY2VDb250ZXh0EhAKCHRyYWNlX2lkGAEgASgMEg8KB3NwYW5faWQYAiABKAwSDwoHc2FtcGxlZBgDIAEoCCLpAQoOUnVudGltZUZhaWx1cmUSDAoEY29kZRgBIAEoCRIPCgdtZXNzYWdlGAIgASgJEhEKCWNvbXBvbmVudBgDIAEoCRIWCgl3b3Jrc3BhY2UYBCABKAlIAIgBARITCgZkb21haW4YBSABKAlIAYgBARIWCglkaXJlY3RpdmUYBiABKAlIAogBARI5CgphdHRyaWJ1dGVzGAcgAygLMiUubm9tb3MucnVudGltZS52Mi5EaWFnbm9zdGljQXR0cmlidXRlQgwKCl93b3Jrc3BhY2VCCQoHX2RvbWFpbkIMCgpfZGlyZWN0aXZlIqUBChNEaWFnbm9zdGljQXR0cmlidXRlEgwKBG5hbWUYASABKAkSFgoMc3RyaW5nX3ZhbHVlGAIgASgJSAASFwoNaW50ZWdlcl92YWx1ZRgDIAEoEkgAEhYKDGRvdWJsZV92YWx1ZRgEIAEoAUgAEhcKDWJvb2xlYW5fdmFsdWUYBSABKAhIABIVCgtieXRlc192YWx1ZRgGIAEoDEgAQgcKBXZhbHVlIs0CCg5Db25uZWN0UmVxdWVzdBIRCgl3b3Jrc3BhY2UYASABKAkSEQoJY2xpZW50X2lkGAIgASgJEhQKB3Nlc3Npb24YAyABKAlIAIgBARISCgVjbG91ZBgEIAEoCUgBiAEBEhIKCmF1dGhfdG9rZW4YBSABKAwSFQoNYXV0aG9yX3NlY3JldBgGIAEoDBIiChptYXhpbXVtX21vdW50ZWRfd29ya3NwYWNlcxgHIAEoDRIUCgxhbGxvd191bmJvcm4YCCABKAgSDwoHcmVjb3ZlchgJIAEoCBJCChRjdXN0b2R5X2JyZWFrX3BvbGljeRgKIAEoDjIkLm5vbW9zLnJ1bnRpbWUudjIuQ3VzdG9keUJyZWFrUG9saWN5EhsKE2hhc19yZXN0b3JlX2N1c3RvZHkYCyABKAhCCgoIX3Nlc3Npb25CCAoGX2Nsb3VkIosBCglDb25uZWN0ZWQSEQoJd29ya3NwYWNlGAEgASgJEg8KB3Nlc3Npb24YAiABKAkSEwoLY2xvdWRfYm91bmQYAyABKAgSOAoIcmVjb3ZlcnkYBCABKAsyIS5ub21vcy5ydW50aW1lLnYyLkN1c3RvZHlSZWNvdmVyeUgAiAEBQgsKCV9yZWNvdmVyeSJbCg9DdXN0b2R5UmVjb3ZlcnkSFQoNcHJldmlvdXNfaGVhZBgBIAEoCRIWCg5yZWNvdmVyZWRfaGVhZBgCIAEoCRIZChFyZWNvdmVyZWRfaW50ZW50cxgDIAEoBCIXChVMaXN0V29ya3NwYWNlc1JlcXVlc3QirQEKEFdvcmtzcGFjZVN1bW1hcnkSDwoHc2Vzc2lvbhgBIAEoCRIRCgl3b3Jrc3BhY2UYAiABKAkSNwoJcmVzaWRlbmN5GAMgASgOMiQubm9tb3MucnVudGltZS52Mi5Xb3Jrc3BhY2VSZXNpZGVuY3kSPAoMc3luY19wb3N0dXJlGAQgASgOMiYubm9tb3MucnVudGltZS52Mi5Xb3Jrc3BhY2VTeW5jUG9zdHVyZSJHCg1Xb3Jrc3BhY2VMaXN0EjYKCndvcmtzcGFjZXMYASADKAsyIi5ub21vcy5ydW50aW1lLnYyLldvcmtzcGFjZVN1bW1hcnkiTQoYU25hcHNob3RXb3Jrc3BhY2VSZXF1ZXN0Eg8KB3Nlc3Npb24YASABKAkSFAoHaWZfaGVhZBgCIAEoCUgAiAEBQgoKCF9pZl9oZWFkIlwKEVdvcmtzcGFjZVNuYXBzaG90EhEKCXdvcmtzcGFjZRgBIAEoCRIMCgRoZWFkGAIgASgJEhEKCXVuY2hhbmdlZBgDIAEoCBITCgtoYXNfY3VzdG9keRgEIAEoCCI2ChRTeW5jV29ya3NwYWNlUmVxdWVzdBIPCgdzZXNzaW9uGAEgASgJEg0KBWFkbWl0GAIgASgIIrwFChVTeW5jV29ya3NwYWNlUmVzcG9uc2USEQoJd29ya3NwYWNlGAEgASgJEhoKDXByZXZpb3VzX2hlYWQYAiABKAlIAIgBARIZCgxjdXJyZW50X2hlYWQYAyABKAlIAYgBARIQCghhZG1pdHRlZBgEIAEoBBIPCgdyZWZ1c2VkGAUgASgEEhAKCGRlZmVycmVkGAYgASgEEhIKCmxvY2FsX29ubHkYByABKAgSDgoGcHVsbGVkGAggASgIEhAKCGRpdmVyZ2VkGAkgASgIEhoKEnJlY29ubmVjdF9yZXF1aXJlZBgKIAEoCBITCgtzdGlsbF9haGVhZBgLIAEoCBIPCgdvZmZsaW5lGAwgASgIEhMKC3B1c2hfZmFpbGVkGA0gASgIEh0KFWRpcmVjdF9vZmZlcl9kZWZlcnJlZBgOIAEoCBI1Cg5iaXJ0aF9vdXRjb21lcxgPIAMoCzIdLm5vbW9zLmtlcm5lbC52MS5CaXJ0aE91dGNvbWUSGwoTYWRtaXR0ZWRfaW50ZW50X2lkcxgQIAMoCRIcChRjb252ZXJnZWRfaW50ZW50X2lkcxgRIAMoCRJCCgpwdXNoX2Vycm9yGBIgASgLMikubm9tb3MucnVudGltZS52Mi5SdW50aW1lVHJhbnNwb3J0RmFpbHVyZUgCiAEBEkcKD2Rpc2NvdmVyeV9lcnJvchgTIAEoCzIpLm5vbW9zLnJ1bnRpbWUudjIuUnVudGltZVRyYW5zcG9ydEZhaWx1cmVIA4gBARIzCgd0aW1pbmdzGBQgASgLMiIubm9tb3MucnVudGltZS52Mi5TeW5jUGhhc2VUaW1pbmdzQhAKDl9wcmV2aW91c19oZWFkQg8KDV9jdXJyZW50X2hlYWRCDQoLX3B1c2hfZXJyb3JCEgoQX2Rpc2NvdmVyeV9lcnJvciJdChdSdW50aW1lVHJhbnNwb3J0RmFpbHVyZRIQCghlbmRwb2ludBgBIAEoCRIOCgZzdGF0dXMYAiABKBESDwoHcmVmdXNlZBgDIAEoCBIPCgdtZXNzYWdlGAQgASgJIrEBChBTeW5jUGhhc2VUaW1pbmdzEhMKC3B1c2hfbWlsbGlzGAEgASgBEhQKDGFkbWl0X21pbGxpcxgCIAEoARIXCg9wcmVmZXRjaF9taWxsaXMYAyABKAESFwoPY29udmVyZ2VfbWlsbGlzGAQgASgBEhIKCnB1c2hfYnl0ZXMYBSABKAQSFQoNc2VydmVyX21pbGxpcxgGIAEoARIVCg1vZmZlcl9pbl9wdXNoGAcgASgIIt8BChRTdGFydEF1dG9TeW5jUmVxdWVzdBIPCgdzZXNzaW9uGAEgASgJEhwKD2RlYm91bmNlX21pbGxpcxgCIAEoDUgAiAEBEhwKD2ZhbGxiYWNrX21pbGxpcxgDIAEoDUgBiAEBEhoKDXNpZ25hbF9taWxsaXMYBCABKA1IAogBARIWCglzaWduYWxfaWQYBSABKAlIA4gBAUISChBfZGVib3VuY2VfbWlsbGlzQhIKEF9mYWxsYmFja19taWxsaXNCEAoOX3NpZ25hbF9taWxsaXNCDAoKX3NpZ25hbF9pZCIiCg9BdXRvU3luY1N0YXJ0ZWQSDwoHc2Vzc2lvbhgBIAEoCSImChNTdG9wQXV0b1N5bmNSZXF1ZXN0Eg8KB3Nlc3Npb24YASABKAkiIgoPQXV0b1N5bmNTdG9wcGVkEg8KB3Nlc3Npb24YASABKAkiqgEKDFdhdGNoUmVxdWVzdBIPCgdzZXNzaW9uGAEgASgJEhcKD3N1YnNjcmlwdGlvbl9pZBgCIAEoCRIpCgRraW5kGAMgASgOMhsubm9tb3MucnVudGltZS52Mi5XYXRjaEtpbmQSLAoFcXVlcnkYBCABKAsyHS5ub21vcy5rZXJuZWwudjEuUXVlcnlSZXF1ZXN0EhcKD2ludGVydmFsX21pbGxpcxgFIAEoDSInCgxXYXRjaFN0YXJ0ZWQSFwoPc3Vic2NyaXB0aW9uX2lkGAEgASgJIikKDlVud2F0Y2hSZXF1ZXN0EhcKD3N1YnNjcmlwdGlvbl9pZBgBIAEoCSInCgxXYXRjaFN0b3BwZWQSFwoPc3Vic2NyaXB0aW9uX2lkGAEgASgJInUKFFByZXBhcmVEb21haW5SZXF1ZXN0Eg8KB3Nlc3Npb24YASABKAkSDgoGZG9tYWluGAIgASgJEhYKDnBhY2thZ2Vfc2hhMjU2GAMgASgJEhYKCWRpcmVjdGl2ZRgEIAEoCUgAiAEBQgwKCl9kaXJlY3RpdmUiUgoORG9tYWluUHJlcGFyZWQSDgoGZG9tYWluGAEgASgJEhYKDnBhY2thZ2Vfc2hhMjU2GAIgASgJEhgKEGFscmVhZHlfcmVzaWRlbnQYAyABKAgi9gEKFU1vZGVsTGlmZWN5Y2xlUmVxdWVzdBIPCgdzZXNzaW9uGAEgASgJEj0KBXN0YWdlGAogASgLMiwubm9tb3MucnVudGltZS52Mi5TdGFnZUdlbmVyYXRlZE1vZGVsUmVxdWVzdEgAEj0KBWFkb3B0GAsgASgLMiwubm9tb3MucnVudGltZS52Mi5BZG9wdEdlbmVyYXRlZE1vZGVsUmVxdWVzdEgAEkEKB3Jlc3RvcmUYDCABKAsyLi5ub21vcy5ydW50aW1lLnYyLlJlc3RvcmVHZW5lcmF0ZWRNb2RlbFJlcXVlc3RIAEILCglvcGVyYXRpb24ihgEKGlN0YWdlR2VuZXJhdGVkTW9kZWxSZXF1ZXN0Eg4KBmRvbWFpbhgBIAEoCRIWCg5jYW5kaWRhdGVfaGFzaBgCIAEoCRIQCghsYXdfdXNkehgDIAEoDBIbCg5zb3VyY2Vfc2Vzc2lvbhgEIAEoCUgAiAEBQhEKD19zb3VyY2Vfc2Vzc2lvbiJ6ChpBZG9wdEdlbmVyYXRlZE1vZGVsUmVxdWVzdBIOCgZkb21haW4YASABKAkSFgoOY2FuZGlkYXRlX2hhc2gYAiABKAkSHgoRYWNjZXB0YW5jZV9yZWFzb24YAyABKAlIAIgBAUIUChJfYWNjZXB0YW5jZV9yZWFzb24iegocUmVzdG9yZUdlbmVyYXRlZE1vZGVsUmVxdWVzdBIOCgZkb21haW4YASABKAkSFAoMY3VycmVudF9oYXNoGAIgASgJEh4KEWFjY2VwdGFuY2VfcmVhc29uGAMgASgJSACIAQFCFAoSX2FjY2VwdGFuY2VfcmVhc29uIpMBCg9Nb2RlbERpZmZlcmVuY2USMwoEa2luZBgBIAEoDjIlLm5vbW9zLnJ1bnRpbWUudjIuTW9kZWxEaWZmZXJlbmNlS2luZBIRCgRhcmVhGAIgASgJSACIAQESEwoGYWN0aW9uGAMgASgJSAGIAQESDwoHc3VtbWFyeRgEIAEoCUIHCgVfYXJlYUIJCgdfYWN0aW9uIqUBCgtNb2RlbFJldmlldxIXCg9jaGVja2VkX2FjdGlvbnMYASABKAQSGQoRY2FuZGlkYXRlX2FjdGlvbnMYAiABKAQSGQoMc2FtZV9vdXRjb21lGAMgASgISACIAQESNgoLZGlmZmVyZW5jZXMYBCADKAsyIS5ub21vcy5ydW50aW1lLnYyLk1vZGVsRGlmZmVyZW5jZUIPCg1fc2FtZV9vdXRjb21lIoUCChZNb2RlbExpZmVjeWNsZVJlc3BvbnNlEhAKCGFjY2VwdGVkGAEgASgIEjQKBXN0YWdlGAIgASgOMiUubm9tb3MucnVudGltZS52Mi5Nb2RlbExpZmVjeWNsZVN0YWdlEhQKB21lc3NhZ2UYAyABKAlIAIgBARIRCgRoZWFkGAQgASgJSAGIAQESFwoKcmVjZWlwdF9pZBgFIAEoCUgCiAEBEjIKBnJldmlldxgGIAEoCzIdLm5vbW9zLnJ1bnRpbWUudjIuTW9kZWxSZXZpZXdIA4gBAUIKCghfbWVzc2FnZUIHCgVfaGVhZEINCgtfcmVjZWlwdF9pZEIJCgdfcmV2aWV3ImcKGlJlc29sdmVDdXN0b2R5QnJlYWtSZXF1ZXN0Eg8KB3Nlc3Npb24YASABKAkSOAoIZGVjaXNpb24YAiABKA4yJi5ub21vcy5ydW50aW1lLnYyLkN1c3RvZHlCcmVha0RlY2lzaW9uImEKFEN1c3RvZHlCcmVha1Jlc29sdmVkEg8KB3Nlc3Npb24YASABKAkSOAoIZGVjaXNpb24YAiABKA4yJi5ub21vcy5ydW50aW1lLnYyLkN1c3RvZHlCcmVha0RlY2lzaW9uIhMKEUNsb3NlUmVhbG1SZXF1ZXN0Ig0KC1JlYWxtQ2xvc2VkIuUBChFEZWFkTGV0dGVyUmVxdWVzdBIPCgdzZXNzaW9uGAEgASgJEjgKBGxpc3QYCiABKAsyKC5ub21vcy5ydW50aW1lLnYyLkxpc3REZWFkTGV0dGVyc1JlcXVlc3RIABI5CgVyZXRyeRgLIAEoCzIoLm5vbW9zLnJ1bnRpbWUudjIuUmV0cnlEZWFkTGV0dGVyUmVxdWVzdEgAEj0KB2Rpc2NhcmQYDCABKAsyKi5ub21vcy5ydW50aW1lLnYyLkRpc2NhcmREZWFkTGV0dGVyUmVxdWVzdEgAQgsKCW9wZXJhdGlvbiIYChZMaXN0RGVhZExldHRlcnNSZXF1ZXN0IisKFlJldHJ5RGVhZExldHRlclJlcXVlc3QSEQoJaW50ZW50X2lkGAEgASgJIi0KGERpc2NhcmREZWFkTGV0dGVyUmVxdWVzdBIRCglpbnRlbnRfaWQYASABKAkivQEKEkRlYWRMZXR0ZXJSZXNwb25zZRIwCgRsaXN0GAogASgLMiAubm9tb3MucnVudGltZS52Mi5EZWFkTGV0dGVyTGlzdEgAEjIKBXJldHJ5GAsgASgLMiEubm9tb3MucnVudGltZS52Mi5EZWFkTGV0dGVyUmV0cnlIABI2CgdkaXNjYXJkGAwgASgLMiMubm9tb3MucnVudGltZS52Mi5EZWFkTGV0dGVyRGlzY2FyZEgAQgkKB291dGNvbWUiRAoORGVhZExldHRlckxpc3QSMgoHZW50cmllcxgBIAMoCzIhLm5vbW9zLnJ1bnRpbWUudjIuRGVhZExldHRlckVudHJ5IrkBCg9EZWFkTGV0dGVyRW50cnkSDwoCaWQYASABKAlIAIgBARISCgpjb21taXRfb2lkGAIgASgJEg4KBnNvdXJjZRgDIAEoCRIPCgdtZXNzYWdlGAQgASgJEhMKBmRvbWFpbhgFIAEoCUgBiAEBEhYKCWRpcmVjdGl2ZRgGIAEoCUgCiAEBEhMKC3JlY29yZGVkX2F0GAcgASgJQgUKA19pZEIJCgdfZG9tYWluQgwKCl9kaXJlY3RpdmUieQoPRGVhZExldHRlclJldHJ5Eg8KB3JldHJpZWQYASABKAgSEQoEaGVhZBgCIAEoCUgAiAEBEhcKD2FscmVhZHlfb25fbWFpbhgDIAEoCBIUCgdtZXNzYWdlGAQgASgJSAGIAQFCBwoFX2hlYWRCCgoIX21lc3NhZ2UiJAoRRGVhZExldHRlckRpc2NhcmQSDwoHcmVtb3ZlZBgBIAEoBCLNBQoMUnVudGltZUV2ZW50EhAKCHNlcXVlbmNlGAEgASgEEhQKB3Nlc3Npb24YAiABKAlIAYgBARIvCgVyZWFkeRgKIAEoCzIeLm5vbW9zLnJ1bnRpbWUudjIuUnVudGltZVJlYWR5SAASNwoNd2F0Y2hfY2hhbmdlZBgLIAEoCzIeLm5vbW9zLnJ1bnRpbWUudjIuV2F0Y2hDaGFuZ2VkSAASOQoOc3luY19jb21wbGV0ZWQYDCABKAsyHy5ub21vcy5ydW50aW1lLnYyLlN5bmNDb21wbGV0ZWRIABI1CgxsaW5rX2NoYW5nZWQYDSABKAsyHS5ub21vcy5ydW50aW1lLnYyLkxpbmtDaGFuZ2VkSAASOQoOc2lnbmFsX2NoYW5nZWQYDiABKAsyHy5ub21vcy5ydW50aW1lLnYyLlNpZ25hbENoYW5nZWRIABI7Cg9jdXN0b2R5X2NoYW5nZWQYDyABKAsyIC5ub21vcy5ydW50aW1lLnYyLkN1c3RvZHlDaGFuZ2VkSAASQgoTbG9jYWxfd29ya19yZWplY3RlZBgQIAEoCzIjLm5vbW9zLnJ1bnRpbWUudjIuTG9jYWxXb3JrUmVqZWN0ZWRIABIzCgtsYXdfY2hhbmdlZBgRIAEoCzIcLm5vbW9zLnJ1bnRpbWUudjIuTGF3Q2hhbmdlZEgAEkMKD2tlcm5lbF9wcm9ncmVzcxgSIAEoCzIoLm5vbW9zLnJ1bnRpbWUudjIuS2VybmVsUHJvZ3Jlc3NPYnNlcnZlZEgAEi0KBHNwYW4YEyABKAsyHS5ub21vcy5ydW50aW1lLnYyLlJ1bnRpbWVTcGFuSAASPwoRdHJhbnNmZXJfcHJvZ3Jlc3MYFCABKAsyIi5ub21vcy5ydW50aW1lLnYyLlRyYW5zZmVyUHJvZ3Jlc3NIAEIHCgVldmVudEIKCghfc2Vzc2lvbiI+CgxSdW50aW1lUmVhZHkSFwoPcnVudGltZV92ZXJzaW9uGAEgASgJEhUKDWtlcm5lbF9zaGEyNTYYAiABKAwigAEKDFdhdGNoQ2hhbmdlZBIXCg9zdWJzY3JpcHRpb25faWQYASABKAkSEwoLcmVzdWx0X3VzZGEYAiABKAwSNgoHZmFpbHVyZRgDIAEoCzIgLm5vbW9zLnJ1bnRpbWUudjIuUnVudGltZUZhaWx1cmVIAIgBAUIKCghfZmFpbHVyZSKcAQoNU3luY0NvbXBsZXRlZBIOCgZyZWFzb24YASABKAkSNwoGcmVzdWx0GAIgASgLMicubm9tb3MucnVudGltZS52Mi5TeW5jV29ya3NwYWNlUmVzcG9uc2USNgoHZmFpbHVyZRgDIAEoCzIgLm5vbW9zLnJ1bnRpbWUudjIuUnVudGltZUZhaWx1cmVIAIgBAUIKCghfZmFpbHVyZSI7CgtMaW5rQ2hhbmdlZBIsCgZzdGF0dXMYASABKA4yHC5ub21vcy5ydW50aW1lLnYyLkxpbmtTdGF0dXMiOAoNU2lnbmFsQ2hhbmdlZBIOCgZkb21haW4YASABKAkSFwoPcHJvamVjdGlvbl91c2RhGAIgASgMIvQBCg5DdXN0b2R5Q2hhbmdlZBIxCgRraW5kGAEgASgOMiMubm9tb3MucnVudGltZS52Mi5DdXN0b2R5Q2hhbmdlS2luZBI1Cg1jdXN0b2R5X2JyZWFrGAIgASgLMh4ubm9tb3MucnVudGltZS52Mi5DdXN0b2R5QnJlYWsSFgoJb3BlcmF0aW9uGAMgASgJSACIAQESFQoIcmVjbG9uZWQYBCABKAhIAYgBARIbCg5wYXJrZWRfaW50ZW50cxgFIAEoBEgCiAEBQgwKCl9vcGVyYXRpb25CCwoJX3JlY2xvbmVkQhEKD19wYXJrZWRfaW50ZW50cyLhAQoRTG9jYWxXb3JrUmVqZWN0ZWQSEQoJd29ya3NwYWNlGAEgASgJEjYKB3JlZnVzZWQYAiADKAsyJS5ub21vcy5ydW50aW1lLnYyLlJlamVjdGVkTG9jYWxJbnRlbnQSDgoGcGFya2VkGAMgASgIEhUKCHJlc2V0X3RvGAQgASgJSACIAQESEQoJcmV0cnlhYmxlGAUgASgIEjoKBnNvdXJjZRgGIAEoDjIqLm5vbW9zLnJ1bnRpbWUudjIuTG9jYWxXb3JrUmVqZWN0aW9uU291cmNlQgsKCV9yZXNldF90byJjChNDdXN0b2R5U3VwZXJzZXNzaW9uEhoKDXN1cGVyc2VkZWRfYXQYASABKAlIAIgBARITCgZyZWFzb24YAiABKAlIAYgBAUIQCg5fc3VwZXJzZWRlZF9hdEIJCgdfcmVhc29uIrgCCgxDdXN0b2R5QnJlYWsSMAoEa2luZBgBIAEoDjIiLm5vbW9zLnJ1bnRpbWUudjIuQ3VzdG9keUJyZWFrS2luZBIVCg1sb2NhbF9nZW5lc2lzGAIgASgJEhYKDnJlbW90ZV9nZW5lc2lzGAMgASgJEhoKEnJlbW90ZV9pbmNhcm5hdGlvbhgEIAEoCRJACgxzdXBlcnNlc3Npb24YBSABKAsyJS5ub21vcy5ydW50aW1lLnYyLkN1c3RvZHlTdXBlcnNlc3Npb25IAIgBARIaChJsb2NhbF9vbmx5X2ludGVudHMYBiABKAQSIgoVbGFzdF9zeW5jZWRfYXRfbWlsbGlzGAcgASgESAGIAQFCDwoNX3N1cGVyc2Vzc2lvbkIYChZfbGFzdF9zeW5jZWRfYXRfbWlsbGlzIs0BChNSZWplY3RlZExvY2FsSW50ZW50EhYKCWludGVudF9pZBgBIAEoCUgAiAEBEhcKCmNvbW1pdF9vaWQYAiABKAlIAYgBARITCgZkb21haW4YAyABKAlIAogBARIWCglkaXJlY3RpdmUYBCABKAlIA4gBARIPCgdtZXNzYWdlGAUgASgJEhEKCXJldHJ5YWJsZRgGIAEoCEIMCgpfaW50ZW50X2lkQg0KC19jb21taXRfb2lkQgkKB19kb21haW5CDAoKX2RpcmVjdGl2ZSJQCgpMYXdDaGFuZ2VkEg4KBmRvbWFpbhgBIAEoCRIWCg5wYWNrYWdlX3NoYTI1NhgCIAEoCRIaChJjb21wYXRpYmlsaXR5X3VzZGEYAyABKAwi3QEKC1J1bnRpbWVTcGFuEhAKCHRyYWNlX2lkGAEgASgMEg8KB3NwYW5faWQYAiABKAwSGwoOcGFyZW50X3NwYW5faWQYAyABKAxIAIgBARIMCgRuYW1lGAQgASgJEhoKEnN0YXJ0ZWRfdW5peF9uYW5vcxgFIAEoBBIWCg5kdXJhdGlvbl9uYW5vcxgGIAEoBBI5CgphdHRyaWJ1dGVzGAcgAygLMiUubm9tb3MucnVudGltZS52Mi5EaWFnbm9zdGljQXR0cmlidXRlQhEKD19wYXJlbnRfc3Bhbl9pZCLqAQoWS2VybmVsUHJvZ3Jlc3NPYnNlcnZlZBI5CghzbmFwc2hvdBgBIAEoCzInLm5vbW9zLmtlcm5lbC52MS5LZXJuZWxQcm9ncmVzc1NuYXBzaG90EiQKHGhvc3Rfb2JzZXJ2ZWRfZWxhcHNlZF9taWNyb3MYAiABKAQSKgoiaG9zdF9vYnNlcnZlZF9waGFzZV9lbGFwc2VkX21pY3JvcxgDIAEoBBIeChZwcm9jZXNzX3Jlc2lkZW50X2J5dGVzGAQgASgEEiMKG3Byb2Nlc3NfcGVha19yZXNpZGVudF9ieXRlcxgFIAEoBCKCAQoQVHJhbnNmZXJQcm9ncmVzcxIWCg5yZWNlaXZlZF9ieXRlcxgBIAEoBBIYCgt0b3RhbF9ieXRlcxgCIAEoBEgAiAEBEiwKBGtpbmQYAyABKA4yHi5ub21vcy5ydW50aW1lLnYyLlRyYW5zZmVyS2luZEIOCgxfdG90YWxfYnl0ZXMqmQEKEkN1c3RvZHlCcmVha1BvbGljeRIkCiBDVVNUT0RZX0JSRUFLX1BPTElDWV9VTlNQRUNJRklFRBAAEhwKGENVU1RPRFlfQlJFQUtfUE9MSUNZX0FTSxABEh4KGkNVU1RPRFlfQlJFQUtfUE9MSUNZX0FET1BUEAISHwobQ1VTVE9EWV9CUkVBS19QT0xJQ1lfUkVKRUNUEAMqoAEKEldvcmtzcGFjZVJlc2lkZW5jeRIjCh9XT1JLU1BBQ0VfUkVTSURFTkNZX1VOU1BFQ0lGSUVEEAASHwobV09SS1NQQUNFX1JFU0lERU5DWV9NT1VOVEVEEAESHgoaV09SS1NQQUNFX1JFU0lERU5DWV9QQVJLRUQQAhIkCiBXT1JLU1BBQ0VfUkVTSURFTkNZX0NVU1RPRFlfT05MWRADKo0BChRXb3Jrc3BhY2VTeW5jUG9zdHVyZRImCiJXT1JLU1BBQ0VfU1lOQ19QT1NUVVJFX1VOU1BFQ0lGSUVEEAASJQohV09SS1NQQUNFX1NZTkNfUE9TVFVSRV9MT0NBTF9PTkxZEAESJgoiV09SS1NQQUNFX1NZTkNfUE9TVFVSRV9DTE9VRF9CT1VORBACKqgBCglXYXRjaEtpbmQSGgoWV0FUQ0hfS0lORF9VTlNQRUNJRklFRBAAEhQKEFdBVENIX0tJTkRfUVVFUlkQARIUChBXQVRDSF9LSU5EX0JZX0lEEAISFgoSV0FUQ0hfS0lORF9TUEFUSUFMEAMSFwoTV0FUQ0hfS0lORF9BQ1RJVklUWRAEIgQIBRAFKhxXQVRDSF9LSU5EX1BFTkRJTkdfQ09ORkxJQ1RTKqQDChNNb2RlbExpZmVjeWNsZVN0YWdlEiUKIU1PREVMX0xJRkVDWUNMRV9TVEFHRV9VTlNQRUNJRklFRBAAEisKJ01PREVMX0xJRkVDWUNMRV9TVEFHRV9JREVOVElUWV9SRVFVSVJFRBABEioKJk1PREVMX0xJRkVDWUNMRV9TVEFHRV9TVEFHSU5HX1JFUVVJUkVEEAISIwofTU9ERUxfTElGRUNZQ0xFX1NUQUdFX1BSRUZMSUdIVBADEi0KKU1PREVMX0xJRkVDWUNMRV9TVEFHRV9BQ0NFUFRBTkNFX1JFUVVJUkVEEAQSIwofTU9ERUxfTElGRUNZQ0xFX1NUQUdFX0FETUlTU0lPThAFEiEKHU1PREVMX0xJRkVDWUNMRV9TVEFHRV9QRU5ESU5HEAYSIgoeTU9ERUxfTElGRUNZQ0xFX1NUQUdFX1BST01PVEVEEAcSIgoeTU9ERUxfTElGRUNZQ0xFX1NUQUdFX1JFU1RPUkVEEAgSKQolTU9ERUxfTElGRUNZQ0xFX1NUQUdFX0FMUkVBRFlfQ1VSUkVOVBAJKqQBChNNb2RlbERpZmZlcmVuY2VLaW5kEiUKIU1PREVMX0RJRkZFUkVOQ0VfS0lORF9VTlNQRUNJRklFRBAAEh8KG01PREVMX0RJRkZFUkVOQ0VfS0lORF9SVUxFUxABEiEKHU1PREVMX0RJRkZFUkVOQ0VfS0lORF9PVVRDT01FEAISIgoeTU9ERUxfRElGRkVSRU5DRV9LSU5EX0VWSURFTkNFEAMqgwEKFEN1c3RvZHlCcmVha0RlY2lzaW9uEiYKIkNVU1RPRFlfQlJFQUtfREVDSVNJT05fVU5TUEVDSUZJRUQQABIgChxDVVNUT0RZX0JSRUFLX0RFQ0lTSU9OX0FET1BUEAESIQodQ1VTVE9EWV9CUkVBS19ERUNJU0lPTl9SRUpFQ1QQAipXCgpMaW5rU3RhdHVzEhsKF0xJTktfU1RBVFVTX1VOU1BFQ0lGSUVEEAASFAoQTElOS19TVEFUVVNfT1BFThABEhYKEkxJTktfU1RBVFVTX0NMT1NFRBACKuIBChFDdXN0b2R5Q2hhbmdlS2luZBIjCh9DVVNUT0RZX0NIQU5HRV9LSU5EX1VOU1BFQ0lGSUVEEAASIAocQ1VTVE9EWV9DSEFOR0VfS0lORF9ERVRFQ1RFRBABEiAKHENVU1RPRFlfQ0hBTkdFX0tJTkRfUkVKRUNURUQQAhIgChxDVVNUT0RZX0NIQU5HRV9LSU5EX0FET1BUSU5HEAMSJQohQ1VTVE9EWV9DSEFOR0VfS0lORF9BRE9QVF9SRUZVU0VEEAQSGwoXQ1VTVE9EWV9DSEFOR0VfS0lORF9BU0sQBSp6ChBDdXN0b2R5QnJlYWtLaW5kEiIKHkNVU1RPRFlfQlJFQUtfS0lORF9VTlNQRUNJRklFRBAAEiEKHUNVU1RPRFlfQlJFQUtfS0lORF9TVVBFUlNFREVEEAESHwobQ1VTVE9EWV9CUkVBS19LSU5EX0RJVkVSR0VEEAIqmAEKGExvY2FsV29ya1JlamVjdGlvblNvdXJjZRIrCidMT0NBTF9XT1JLX1JFSkVDVElPTl9TT1VSQ0VfVU5TUEVDSUZJRUQQABIpCiVMT0NBTF9XT1JLX1JFSkVDVElPTl9TT1VSQ0VfQURNSVNTSU9OEAESJAogTE9DQUxfV09SS19SRUpFQ1RJT05fU09VUkNFX1NZTkMQAip2CgxUcmFuc2ZlcktpbmQSHQoZVFJBTlNGRVJfS0lORF9VTlNQRUNJRklFRBAAEhcKE1RSQU5TRkVSX0tJTkRfREVMVEEQARIWChJUUkFOU0ZFUl9LSU5EX0ZVTEwQAhIWChJUUkFOU0ZFUl9LSU5EX1BVU0gQAzJkChNOb21vc1J1bnRpbWVTZXJ2aWNlEk0KBkludm9rZRIgLm5vbW9zLnJ1bnRpbWUudjIuUnVudGltZVJlcXVlc3QaIS5ub21vcy5ydW50aW1lLnYyLlJ1bnRpbWVSZXNwb25zZWIGcHJvdG8z", [file_nomos_kernel_v1_kernel, file_nomos_kernel_v1_progress]);
+    file_nomos_runtime_v2_runtime = /* @__PURE__ */ fileDesc4("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", [file_nomos_kernel_v1_kernel, file_nomos_kernel_v1_progress]);
     RuntimeRequestSchema = /* @__PURE__ */ messageDesc4(file_nomos_runtime_v2_runtime, 0);
     KernelCallRequestSchema = /* @__PURE__ */ messageDesc4(file_nomos_runtime_v2_runtime, 1);
     RuntimeResponseSchema = /* @__PURE__ */ messageDesc4(file_nomos_runtime_v2_runtime, 5);
-    CustodyOfferBatchRequestSchema = /* @__PURE__ */ messageDesc4(file_nomos_runtime_v2_runtime, 12);
-    CustodyIntentOfferSchema = /* @__PURE__ */ messageDesc4(file_nomos_runtime_v2_runtime, 13);
-    CustodyInlineOffersSchema = /* @__PURE__ */ messageDesc4(file_nomos_runtime_v2_runtime, 14);
-    CustodySessionCandidateSchema = /* @__PURE__ */ messageDesc4(file_nomos_runtime_v2_runtime, 15);
-    CustodyOfferBatchResponseSchema = /* @__PURE__ */ messageDesc4(file_nomos_runtime_v2_runtime, 16);
-    DeadLetterRequestSchema = /* @__PURE__ */ messageDesc4(file_nomos_runtime_v2_runtime, 61);
-    ListDeadLettersRequestSchema = /* @__PURE__ */ messageDesc4(file_nomos_runtime_v2_runtime, 62);
-    RetryDeadLetterRequestSchema = /* @__PURE__ */ messageDesc4(file_nomos_runtime_v2_runtime, 63);
-    DiscardDeadLetterRequestSchema = /* @__PURE__ */ messageDesc4(file_nomos_runtime_v2_runtime, 64);
+    CustodyOfferBatchRequestSchema = /* @__PURE__ */ messageDesc4(file_nomos_runtime_v2_runtime, 14);
+    CustodyIntentOfferSchema = /* @__PURE__ */ messageDesc4(file_nomos_runtime_v2_runtime, 15);
+    CustodyInlineOffersSchema = /* @__PURE__ */ messageDesc4(file_nomos_runtime_v2_runtime, 16);
+    CustodySessionCandidateSchema = /* @__PURE__ */ messageDesc4(file_nomos_runtime_v2_runtime, 17);
+    CustodyOfferBatchResponseSchema = /* @__PURE__ */ messageDesc4(file_nomos_runtime_v2_runtime, 18);
+    DeadLetterRequestSchema = /* @__PURE__ */ messageDesc4(file_nomos_runtime_v2_runtime, 65);
+    ListDeadLettersRequestSchema = /* @__PURE__ */ messageDesc4(file_nomos_runtime_v2_runtime, 66);
+    RetryDeadLetterRequestSchema = /* @__PURE__ */ messageDesc4(file_nomos_runtime_v2_runtime, 67);
+    DiscardDeadLetterRequestSchema = /* @__PURE__ */ messageDesc4(file_nomos_runtime_v2_runtime, 68);
   }
 });
 
@@ -6446,7 +6538,7 @@ function presentCanonicalCustodyConvergence(convergence, context) {
         endpoint: `/v2/workspaces/${context.workspace}`,
         status: 0,
         refused: false,
-        error: String(convergence.error instanceof Error ? convergence.error.message : convergence.error).slice(0, 300)
+        error: String(convergence.error instanceof Error ? convergence.error.message : convergence.error).slice(0, 1200)
       };
       return {
         result: {
@@ -6524,7 +6616,10 @@ async function convergeCanonicalCustody(options) {
         return { kind: "custodyBreak", custodyBreak: converged.custodyBreak };
       }
       pulled = converged.upToDate !== true;
-    } catch {
+    } catch (error) {
+      console.error(
+        `[nomos-sync-convergence] remote=${remoteHead} base=${syncedBase ?? "none"}: ` + (error instanceof Error ? error.message : String(error))
+      );
       diverged = true;
     }
   }
@@ -6984,6 +7079,16 @@ function prepareManagedPromotion(report, candidateHash, domain, opts = {}) {
       error: `the package-wide report does not cover the generated business area '${domain}'`
     };
   }
+  const dispositions2 = report.dispositions;
+  const changesStableIdentity = dispositions2 !== void 0 && (dispositions2.retired.length > 0 || Object.keys(dispositions2.retyped).length > 0 || Object.keys(dispositions2.rebinds).length > 0);
+  if (changesStableIdentity && !acceptanceReason) {
+    return {
+      ok: false,
+      stage: "acceptance",
+      report,
+      error: "the current-frontier transition changes stable business identities and needs an attributed acceptance reason"
+    };
+  }
   const preflight = {
     candidateHash,
     // A package may be reached through any one of its generated domain clients. The
@@ -7821,8 +7926,24 @@ function firstDeviceDelegationPayload(route, certificate, typedPayload) {
   if (declared.has("delegationCertificate")) {
     return { delegationCertificate: typedPayload };
   }
-  throw new Error(
-    `Nomos application route '${route.domain}${route.path}' does not declare the typed 'delegationCertificate' contract [nomos.application.contract_missing]`
+  throw new NomosClientError(
+    `Nomos application route '${route.domain}${route.path}' does not declare the typed 'delegationCertificate' contract`,
+    {
+      code: "nomos.application.contract_missing",
+      operation: "enrollFirstDevice",
+      recommendedAction: NomosRecommendedAction.redeployLaw,
+      info: {
+        code: "nomos.application.contract_missing",
+        message: `Nomos application route '${route.domain}${route.path}' does not declare the typed 'delegationCertificate' contract`,
+        component: "nomos.application",
+        domain: route.domain,
+        operation: "enrollFirstDevice",
+        attributes: {
+          "nomos.application.missing_contract": "delegationCertificate",
+          "nomos.recovery.action": "repeat-parent-authorized-birth"
+        }
+      }
+    }
   );
 }
 function jwtClaimOf(token, claim) {
@@ -7839,7 +7960,7 @@ function jwtClaimOf(token, claim) {
   }
 }
 function createGovernanceOffers(ctx) {
-  const { offerDirective, offerCall, offerModelLifecycle, serialize, queryById, queryRows, attestationSignKernel, _fetch, base, workspace, deviceSecret, authHeaders, receivingGroupNameOf: receivingGroupNameOf2, sha256hexBytes: sha256hexBytes2, bytesUnb64: bytesUnb642, birthCertificateLawPayload: birthCertificateLawPayload2, actorForShareQuote: actorForShareQuote2, installedInterfaceInner, mintKeylessDelegation: mintKeylessDelegation2, signWorkspaceOffer, resolveFrameworkRoute } = ctx;
+  const { offerDirective, offerCall, offerModelLifecycle, serialize, queryById, queryRows, attestationSignKernel, _fetch, base, workspace, deviceSecret, authHeaders, connectionAuthToken, connectionFrameworkCalls, receivingGroupNameOf: receivingGroupNameOf2, sha256hexBytes: sha256hexBytes2, bytesUnb64: bytesUnb642, birthCertificateLawPayload: birthCertificateLawPayload2, actorForShareQuote: actorForShareQuote2, installedInterfaceInner, mintKeylessDelegation: mintKeylessDelegation2, signWorkspaceOffer, resolveFrameworkRoute } = ctx;
   const g = {
     /**
      * AUTHOR a SIGNED governance/framework intent locally and return the sealed offer bytes (base64) ready to
@@ -7944,6 +8065,54 @@ function createGovernanceOffers(ctx) {
       });
       return g.postGovernanceOffer({ directiveId: call.directive, intentBytes: sealed.intentBytes, ws: parent, authToken, domain: call.domain });
     },
+    /**
+     * Offer one exact compiler-generated call to another workspace without
+     * mounting or replaying that target locally. The source holon's kernel
+     * signs only the target-kernel-prepared USDA; the host receives neither a
+     * tenant object nor authority to invent an operation.
+     */
+    offerRemoteGeneratedCall: async ({
+      call,
+      target,
+      actor,
+      authorSecret,
+      authToken
+    }) => {
+      const signingSecret = authorSecret || deviceSecret;
+      if (!target) throw new TypeError("a remote generated offer requires its target workspace");
+      if (!actor) throw new TypeError("a remote generated offer requires its attributable actor");
+      if (!signingSecret) throw new TypeError("a remote generated offer requires an enrolled device key");
+      const sealed = await signWorkspaceOffer({
+        target,
+        call,
+        actor,
+        authorSecret: signingSecret,
+        authToken
+      });
+      const verdict = await g.postGovernanceOffer({
+        directiveId: call.directive,
+        intentBytes: sealed.intentBytes,
+        ws: target,
+        authToken,
+        domain: call.domain
+      });
+      if (!verdict.ok || verdict.body && typeof verdict.body === "object" && (verdict.body.ok === false || verdict.body.refused)) {
+        const detail = typeof verdict.body === "string" ? verdict.body : JSON.stringify(verdict.body ?? "remote offer refused");
+        throw new NomosClientError(
+          `Remote generated call '${call.domain}/${call.directive}' was refused by '${target}': ${detail.slice(0, 500)}`,
+          {
+            code: "nomos.offer.remote_refused",
+            workspace: target,
+            operation: call.directive,
+            recommendedAction: NomosRecommendedAction.retry,
+            info: verdict.errorInfo
+          }
+        );
+      }
+      const body = verdict.body && typeof verdict.body === "object" ? verdict.body : void 0;
+      const head = verdict.head ?? (typeof body?.head === "string" ? body.head : "");
+      return { workspace: target, head };
+    },
     /**
      * Derive the device key's base64 PUBLIC half from its base64 SECRET seed, IN the local wasm (the
      * kernel `attestation_sign` op returns the public half; the secret never leaves this process).
@@ -8130,7 +8299,10 @@ function createGovernanceOffers(ctx) {
      */
     ensureParentSignerEnrollment: async (args = {}) => {
       const { parent, device, domain, grantedAt, authToken, idToken, signIn, verifiedVia, validFromEpoch = 0, frameworkCalls } = args;
-      const keyless = !!(idToken || typeof signIn === "function");
+      const effectiveAuthToken = authToken || connectionAuthToken();
+      const effectiveIdToken = idToken || effectiveAuthToken;
+      const effectiveFrameworkCalls = frameworkCalls ?? connectionFrameworkCalls;
+      const keyless = !!(effectiveIdToken || typeof signIn === "function");
       const directiveId = args.directiveId || (keyless ? "enrollFirstDevice" : "enrollSigner");
       const principal = canonicalPrincipal(args.principal);
       let publicKey = device && device.public || args.publicKey;
@@ -8140,13 +8312,13 @@ function createGovernanceOffers(ctx) {
       if (!publicKey && authorSecret) publicKey = await g.devicePublicOf(authorSecret);
       if (!publicKey) throw new Error("ensureParentSignerEnrollment requires the device `publicKey` (pass `device`/`publicKey`, or a secret it can be derived from)");
       const keyHash = await sha256hexBytes2(bytesUnb642(publicKey));
-      const posture = await g.parentSignerEnrollment({ parent, principal, keyHash, authToken });
+      const posture = await g.parentSignerEnrollment({ parent, principal, keyHash, authToken: effectiveAuthToken });
       if (posture.enrolled) return { parent, principal, keyHash, enrolled: true, repaired: false, checkedAt: posture.checkedAt };
       if (posture.revoked) {
         throw new Error(`ensureParentSignerEnrollment: key ${keyHash.slice(0, 16)}\u2026 was REVOKED on ${parent} (${signerObjectOf(principal)}#signer is remove-wins) \u2014 mint a new device key and enroll it; a revoked key cannot be lawfully re-enrolled [nomos.authz.signer_revoked]`);
       }
       if (!authorSecret) throw new Error("ensureParentSignerEnrollment: the signer tuple is absent on the parent and no `authorSecret`/`device.secret` was supplied to lawfully re-enroll it");
-      const token = keyless ? typeof signIn === "function" ? await signIn(keyHash) : idToken : null;
+      const token = keyless ? typeof signIn === "function" ? await signIn(keyHash) : effectiveIdToken : null;
       let resolved = domain ? { domain, directiveId } : null;
       let enrollmentRoute;
       if (!resolved && parent === workspace && typeof installedInterfaceInner === "function") {
@@ -8171,7 +8343,7 @@ function createGovernanceOffers(ctx) {
         }
         resolved = { domain: enrollmentRoute.domain, directiveId };
       }
-      if (!resolved) resolved = await g.discoverDirectiveDomain({ ws: parent, directiveId, authToken });
+      if (!resolved) resolved = await g.discoverDirectiveDomain({ ws: parent, directiveId, authToken: effectiveAuthToken });
       let delegationPayload;
       if (keyless) {
         if (typeof mintKeylessDelegation2 !== "function") throw new Error("ensureParentSignerEnrollment: the keyless lane needs a signing holon (mintKeylessDelegation) to build the delegation cert \u2014 open the holon with a device key");
@@ -8193,12 +8365,29 @@ function createGovernanceOffers(ctx) {
       }
       const issuerClaim = verifiedVia || (token ? jwtClaimOf(token, "iss") : void 0);
       const payload = keyless ? { keyHash, verifiedVia: issuerClaim, validFromEpoch, grantedAt: (/* @__PURE__ */ new Date()).toISOString(), idpToken: token, ...delegationPayload ?? {} } : { keyHash, grantedBy: principal, grantedAt: typeof grantedAt === "number" ? grantedAt : Date.now() };
-      if (frameworkCalls === void 0) {
-        throw new TypeError("ensureParentSignerEnrollment requires compiler-generated framework calls");
+      if (effectiveFrameworkCalls === void 0) {
+        const message = "The installed client cannot author the typed enrollFirstDevice call required to seat this device";
+        throw new NomosClientError(message, {
+          code: "nomos.application.contract_missing",
+          workspace: parent,
+          operation: "enrollFirstDevice",
+          recommendedAction: NomosRecommendedAction.redeployLaw,
+          info: {
+            code: "nomos.application.contract_missing",
+            message,
+            component: "nomos.application",
+            workspace: parent,
+            operation: "enrollFirstDevice",
+            attributes: {
+              "nomos.application.missing_contract": "generatedFrameworkCalls.identity.enrollFirstDevice",
+              "nomos.recovery.action": "request-parent-authorized-device-recovery"
+            }
+          }
+        });
       }
       const call = keyless ? (() => {
         if (typeof issuerClaim !== "string" || !issuerClaim || !token) throw new Error("verified first-device enrollment needs its typed issuer and identity proof");
-        return frameworkCalls.identity.enrollFirstDevice({
+        return effectiveFrameworkCalls.identity.enrollFirstDevice({
           domain: resolved.domain,
           workspace: parent,
           keyHash,
@@ -8208,7 +8397,7 @@ function createGovernanceOffers(ctx) {
           idpToken: token,
           ...delegationPayload ?? {}
         });
-      })() : frameworkCalls.identity.enrollSigner({
+      })() : effectiveFrameworkCalls.identity.enrollSigner({
         domain: resolved.domain,
         workspace: parent,
         keyHash,
@@ -8220,7 +8409,7 @@ function createGovernanceOffers(ctx) {
         const res = await offerCall(call, { actor: principal, signWith: authorSecret });
         verdict = { ok: true, status: 200, body: res };
       } else {
-        const bearer = authToken || token;
+        const bearer = effectiveAuthToken || token;
         const sealed = await signWorkspaceOffer({
           target: parent,
           call,
@@ -8592,23 +8781,46 @@ function connectRemote(opts) {
     }
     const entropy = new Uint32Array(16);
     crypto.getRandomValues(entropy);
-    const preparedRequest = createDirectiveOfferRequest(
-      { repo: `/work/ws/${workspace}`, workspace, branch: "main" },
-      {
-        domain,
-        directiveId,
-        payload: callUsda,
-        capturedPorts: {
-          clock: { physical: Date.now(), logical: 0, replica: entropy[0] ?? 0 },
-          rng: [...entropy].map((value) => value / 4294967296)
-        },
+    const target = { repo: `/work/ws/${workspace}`, workspace, branch: "main" };
+    const capturedPorts = {
+      clock: { physical: Date.now(), logical: 0, replica: entropy[0] ?? 0 },
+      rng: [...entropy].map((value) => value / 4294967296)
+    };
+    const actor = o?.actor ?? principal ?? "";
+    const preparedRequest = o?.modelLifecycle === void 0 ? createDirectiveOfferRequest(target, {
+      domain,
+      directiveId,
+      payload: callUsda,
+      capturedPorts,
+      sequence: requestSequence + 1n,
+      actor,
+      authToken: opts.authToken && !opts.authorSecret ? opts.authToken : void 0,
+      spans: true,
+      prepareOnly: true,
+      lawUsdz: o?.lawUsdz,
+      domainHash: o?.domainHash
+    }) : createModelLifecycleOfferRequest(
+      target,
+      o.modelLifecycle.operation === "stage" ? {
+        operation: ModelLifecycleOperation.STAGE,
+        installedBy: o.modelLifecycle.installedBy,
+        supersedes: o.modelLifecycle.supersedes,
+        lawUsdz: o.lawUsdz ?? new Uint8Array(),
+        capturedPorts,
         sequence: requestSequence + 1n,
-        actor: o?.actor ?? principal ?? "",
-        authToken: opts.authToken && !opts.authorSecret ? opts.authToken : void 0,
+        actor,
         spans: true,
-        prepareOnly: true,
-        lawUsdz: o?.lawUsdz,
-        domainHash: o?.domainHash
+        prepareOnly: true
+      } : {
+        operation: ModelLifecycleOperation.PROMOTE,
+        transition: o.modelLifecycle.transition,
+        replaces: o.modelLifecycle.replaces,
+        acceptanceReason: o.modelLifecycle.acceptanceReason,
+        capturedPorts,
+        sequence: requestSequence + 1n,
+        actor,
+        spans: true,
+        prepareOnly: true
       }
     );
     const offerRequest2 = toBinary4(OfferRequestSchema, preparedRequest);
@@ -8765,6 +8977,39 @@ function connectRemote(opts) {
     const call = requireGeneratedCall(value, "remote offerCall");
     return offerDirective(call.domain, call.directive, call.canonicalUsda, o);
   }
+  const offerModelLifecycle = (lifecycle) => offerDirective("nomos", "", new Uint8Array(), {
+    actor: lifecycle.actor,
+    lawUsdz: lifecycle.operation === "stage" ? lifecycle.lawUsdz : void 0,
+    modelLifecycle: lifecycle
+  });
+  const frontierTransition2 = async (request) => {
+    const response = await kernelRuntime({
+      case: "query",
+      value: create5(QueryRequestSchema, {
+        target: create5(WorkspaceTargetSchema, {
+          repo: `/work/ws/${workspace}`,
+          workspace,
+          branch: "main"
+        }),
+        query: {
+          case: "frontierTransition",
+          value: create5(FrontierTransitionRequestSchema, {
+            domain: request.domain,
+            candidateHash: request.candidateHash,
+            atHash: request.atHash,
+            acknowledgementPrincipal: request.acknowledgementPrincipal ?? principal ?? "",
+            restorePreviousOf: request.restorePreviousOf
+          })
+        }
+      })
+    });
+    if (response.outcome.case !== "query" || response.outcome.value.result.case !== "frontierTransition") {
+      throw new Error(
+        `kernel returned '${response.outcome.case || "empty"}' for frontier transition`
+      );
+    }
+    return response.outcome.value.result.value;
+  };
   const query3 = async (queryId, params) => {
     const response = await kernelRuntime({
       case: "query",
@@ -9098,6 +9343,8 @@ function connectRemote(opts) {
     cloud: base,
     principal,
     offerCall,
+    __nomosOfferModelLifecycle: offerModelLifecycle,
+    __nomosFrontierTransition: frontierTransition2,
     head,
     query: query3,
     queryById,
@@ -9368,13 +9615,17 @@ function installedLawOfRows(rows) {
   }
   return out15;
 }
-function lawStatusOf(installed, clientHash) {
+function lawStatusOf(installed, clientHash, current) {
   const known = Array.isArray(installed);
   const list = known ? installed : [];
+  const currentSupplied = current !== void 0;
+  const currentKnown = currentSupplied ? Array.isArray(current) : known;
+  const serving = currentSupplied ? Array.isArray(current) ? current : [] : list;
   return {
     installed: list,
     ...clientHash !== void 0 ? { clientHash } : {},
-    drifted: !!(clientHash !== void 0 && known && !list.includes(clientHash))
+    ...currentSupplied ? { current } : {},
+    drifted: !!(clientHash !== void 0 && currentKnown && !serving.includes(clientHash))
   };
 }
 function lawDriftMessage({
@@ -9663,6 +9914,25 @@ ${String(commit).toLowerCase()}`;
       }
     };
   };
+  if (!restoreFrom && !mountInPlace && !localOnly && !salvageOnly && !recover) {
+    const _coldSnapshot = span(
+      "receive",
+      "boot: fetch checkpointed custody snapshot",
+      "cfetch"
+    );
+    try {
+      const response = await _fetch(
+        `${base}/v2/workspaces/${workspace}/snapshot`,
+        { headers: authHeaders }
+      );
+      if (response.ok && response.headers.get("x-nomos-layout") === "local-custody-v3") {
+        restoreFrom = new Uint8Array(await response.arrayBuffer());
+      }
+    } catch {
+    } finally {
+      _coldSnapshot.end({ restored: !!restoreFrom });
+    }
+  }
   const repoArg = `/work/ws/${workspace}`;
   const provider = kernelProvider || createWasmKernelProvider({ span });
   const readRemoteInfo = async () => ({
@@ -9932,10 +10202,12 @@ ${String(commit).toLowerCase()}`;
   const watchStops = /* @__PURE__ */ new Set();
   let installedLawRowsCache;
   let installedLawCurrentCache;
+  let installedLawCurrentError = "";
   let installedInterfaceCache;
   const invalidateInstalledLawMetadata = () => {
     installedLawRowsCache = void 0;
     installedLawCurrentCache = void 0;
+    installedLawCurrentError = "";
     installedInterfaceCache = void 0;
   };
   let _disposed = false;
@@ -9982,17 +10254,19 @@ ${String(commit).toLowerCase()}`;
     scheduleMaintenanceSoon();
   };
   const prepareDomainReady = async (domain, packageHash, directiveId) => {
-    requestDomainMaintenance(domain, packageHash, directiveId);
+    const currentPackage = currentLawInner()?.[domain];
+    const servingPackage = typeof currentPackage === "string" && currentPackage.length > 0 ? currentPackage : packageHash;
+    requestDomainMaintenance(domain, servingPackage, directiveId);
     const readiness2 = await prepareDomainUntilReady({
       domain,
-      packageHash,
+      packageHash: servingPackage,
       directiveId,
       warm: () => serialize(
         async () => namedQueryTyped(QueryOperation.WARM, {
           interactiveOnly: true,
           requestedDomain: domain,
           ...directiveId ? { requestedDirective: directiveId } : {},
-          requestedPackage: packageHash
+          requestedPackage: servingPackage
         }),
         "prepare generated domain",
         false
@@ -10005,7 +10279,7 @@ ${String(commit).toLowerCase()}`;
     });
     if (readiness2.prepared) {
       const index = _maintenanceTargets.findIndex(
-        (target) => target.domain === domain && target.packageHash === packageHash && target.directiveId === directiveId
+        (target) => target.domain === domain && target.packageHash === servingPackage && target.directiveId === directiveId
       );
       if (index >= 0) _maintenanceTargets.splice(index, 1);
     }
@@ -10680,7 +10954,9 @@ ${String(commit).toLowerCase()}`;
       const answer = namedQueryTyped(QueryOperation.INSTALLED_LAW);
       if (Array.isArray(answer?.domains)) {
         const currentLaw2 = answer?.currentLaw;
-        installedLawCurrentCache = currentLaw2 && typeof currentLaw2 === "object" && !Array.isArray(currentLaw2) ? currentLaw2 : null;
+        if (currentLaw2 && typeof currentLaw2 === "object" && !Array.isArray(currentLaw2)) {
+          installedLawCurrentCache = currentLaw2;
+        }
         installedLawRowsCache = answer.domains.map(
           (domain) => ({
             id: domain.installationId,
@@ -10724,21 +11000,36 @@ ${String(commit).toLowerCase()}`;
     return installedLawRowsCache;
   };
   const currentLawInner = () => {
-    installRowsInner();
     if (installedLawCurrentCache !== void 0) return installedLawCurrentCache;
     try {
       const answer = namedQueryTyped(QueryOperation.CURRENT_LAW);
       const current = answer?.keyMap ?? answer?.currentLaw ?? answer;
-      installedLawCurrentCache = current && typeof current === "object" && !Array.isArray(current) ? current : null;
-    } catch {
-      installedLawCurrentCache = null;
+      if (current && typeof current === "object" && !Array.isArray(current)) {
+        installedLawCurrentError = "";
+        installedLawCurrentCache = current;
+        return installedLawCurrentCache;
+      }
+      installedLawCurrentError = "kernel current-law read returned no typed domain map";
+    } catch (error) {
+      installedLawCurrentError = String(
+        error?.message || error || "kernel current-law read failed"
+      );
     }
-    return installedLawCurrentCache;
+    return null;
   };
   const installedLawInner = () => {
     const rows = installRowsInner();
     return rows === null ? null : installedLawOfRows(rows);
   };
+  const currentLawHashesInner = () => {
+    const current = currentLawInner();
+    if (current === null) return null;
+    return [...new Set(
+      Object.values(current).filter(
+        (identity) => typeof identity === "string" && identity.length > 0
+      )
+    )];
+  };
   const recomputeCompat = ({ silent = false } = {}) => {
     if (!compatState) return null;
     const installRows = installRowsInner();
@@ -10892,16 +11183,28 @@ ${String(commit).toLowerCase()}`;
       );
     }
     let pack = null;
+    const packErrors = [];
     for (const base2 of bases) {
       try {
         pack = provider.packDelta(base2, head);
-      } catch {
+      } catch (error) {
+        packErrors.push(`${base2 ?? "<full>"}: ${String(error)}`);
         pack = null;
       }
       if (pack) break;
     }
-    if (!pack)
-      throw new Error("the kernel could not build the candidate custody pack");
+    if (!pack) {
+      const missingOid = packErrors.join(" ").match(/(?:object with id|find commit) ([0-9a-f]{40})/i)?.[1];
+      const objectBytes = (oid) => ["nomos.git/objects", "objects", ".git/objects"].map((root) => {
+        const bytes = provider.readWsFile(
+          `${root}/${oid.slice(0, 2)}/${oid.slice(2)}`
+        );
+        return `${root}=${bytes?.byteLength ?? 0}B`;
+      }).join(",");
+      throw new Error(
+        `the kernel could not build the candidate custody pack${packErrors.length === 0 ? "" : ` (${packErrors[0]})`}; head[${objectBytes(head)}]${missingOid ? `; missing[${objectBytes(missingOid)}]` : ""}`
+      );
+    }
     await pushPack(
       remote,
       authHeaders,
@@ -12049,6 +12352,10 @@ ${String(commit).toLowerCase()}`;
         error: "the generated model identity is missing"
       };
     }
+    const currentHash = String(currentLawInner()?.[domain] ?? "");
+    if (currentHash === candidateHash) {
+      return { ok: true, stage: "already-current" };
+    }
     const candidateInstallation = (installRowsInner() ?? []).find(
       (row) => row?.id === `domain-installation:${candidateHash}`
     );
@@ -12062,23 +12369,8 @@ ${String(commit).toLowerCase()}`;
         error: candidatePhase.length === 0 ? `model '${candidateHash}' is not staged in this workspace; deploy the generated USDA package before opening this application` : `model '${candidateHash}' is '${candidatePhase}', so it cannot become current`
       };
     }
-    const currentHash = String(currentLawInner()?.[domain] ?? "");
     if (candidatePhase === "Active") {
-      try {
-        const readiness2 = await prepareDomainReady(domain, candidateHash);
-        if (readiness2.prepared !== true) {
-          throw new Error(
-            `the admitted model '${candidateHash}' authenticated '${domain}' USDA slice did not become ready (${readiness2.reason} after ${readiness2.quanta} maintenance quanta)`
-          );
-        }
-        return { ok: true, stage: "already-current" };
-      } catch (error) {
-        return {
-          ok: false,
-          stage: "preflight",
-          error: String(error?.message || error)
-        };
-      }
+      return { ok: true, stage: "already-current" };
     }
     let report;
     let transition;
@@ -12217,12 +12509,13 @@ ${String(commit).toLowerCase()}`;
     );
     const data = row?.data;
     const domainKeys = Array.isArray(data?.["spec.domainKeys"]) ? data["spec.domainKeys"].map(String) : [];
-    if (!data || !domainKeys.includes(domain)) return null;
+    const exactSingleDomain = String(data?.["spec.domainHash"] ?? "") === candidateHash && String(currentLawInner()?.[domain] ?? "") === candidateHash && domainKeys.length === 0;
+    if (!data || !domainKeys.includes(domain) && !exactSingleDomain) return null;
     return {
       hash: candidateHash,
       phase: String(data["status.phase"] ?? ""),
       dependencies: Array.isArray(data["spec.dependencies"]) ? data["spec.dependencies"].map(String) : [],
-      domainKeys
+      domainKeys: exactSingleDomain ? [domain] : domainKeys
     };
   };
   const _nomosStageGeneratedModel = async (domain, candidateHash, lawUsdz, dependencies) => {
@@ -12246,14 +12539,10 @@ ${String(commit).toLowerCase()}`;
         `generated model '${candidateHash}' has no USDZ transport asset`
       );
     }
-    const predecessor = rows.find((entry) => {
-      const data = entry?.data;
-      return String(data?.["status.phase"] ?? "") === "Active" && Array.isArray(data?.["spec.domainKeys"]) && data["spec.domainKeys"].map(String).includes(domain);
-    });
-    const priorHash = String(predecessor?.data?.["spec.domainHash"] ?? "");
+    const priorHash = String(currentLawInner()?.[domain] ?? "");
     if (!priorHash) {
       throw new Error(
-        `generated application cannot identify the active '${domain}' model it would supersede`
+        `generated application cannot identify the active '${domain}' model it would supersede` + (installedLawCurrentError ? `: ${installedLawCurrentError}` : "")
       );
     }
     const head = await offerDirective(
@@ -13944,6 +14233,8 @@ ${String(commit).toLowerCase()}`;
     workspace,
     deviceSecret,
     authHeaders,
+    connectionAuthToken: () => activeAuthToken,
+    connectionFrameworkCalls: frameworkCalls,
     receivingGroupNameOf,
     sha256hexBytes,
     bytesUnb64,
@@ -15347,6 +15638,7 @@ ${String(commit).toLowerCase()}`;
         "application-open"
       );
       let requiredParentCustodyHead;
+      let requiredDelegationKeyHash;
       try {
         if (spec.idToken || typeof spec.signIn === "function") {
           const enrollment = await api.enrollFirstDevice({
@@ -15363,6 +15655,7 @@ ${String(commit).toLowerCase()}`;
             enrollFirstDeviceCall: spec.enrollFirstDeviceCall
           });
           requiredParentCustodyHead = enrollment.verdict?.head;
+          requiredDelegationKeyHash = enrollment.keyHash;
           if (!requiredParentCustodyHead || !OID40_RE.test(requiredParentCustodyHead)) {
             throw new Error(
               `enrollFirstDevice at '${parent}' admitted without an exact custody head; refusing to prepare birth against an unbound resident frontier`
@@ -15413,9 +15706,16 @@ ${String(commit).toLowerCase()}`;
                 }
               );
               if (dq.ok) {
-                const rows = await dq.json().catch(() => null);
-                const has = Array.isArray(rows) ? rows.length > 0 : rows && Array.isArray(rows.rows) ? rows.rows.length > 0 : false;
-                if (has) {
+                const response = await dq.json().catch(() => null);
+                const rows = Array.isArray(response) ? response : response && Array.isArray(response.rows) ? response.rows : [];
+                const hasExactDeviceDelegation = rows.some((row) => {
+                  if (!row || typeof row !== "object") return false;
+                  const data = row.data;
+                  if (!data || typeof data !== "object") return false;
+                  const fields = data;
+                  return fields.certificateParentKey === device.public && (requiredDelegationKeyHash === void 0 || fields.deviceKey === `key:${requiredDelegationKeyHash}`);
+                });
+                if (hasExactDeviceDelegation) {
                   sawDelegation = true;
                   break;
                 }
@@ -15426,7 +15726,7 @@ ${String(commit).toLowerCase()}`;
           }
           if (!sawDelegation) {
             const err15 = new Error(
-              `receiving-group setup: parent '${parent}' still holds NO SignerDelegation for '${owner}' after ${pollTimeoutMs}ms. enrollFirstDevice seated the device SIGNER, but the home cert chain's links[1] (the platform-signed delegation) never surfaced \u2014 the birth would come up UNWARRANTED/headless (birth-cert-not-seeded). The enroll must record the keyless delegation (enrollFirstDevice.delegationCert) BEFORE birth. [ParentSignerDelegationMissing]`
+              `receiving-group setup: parent '${parent}' still holds NO SignerDelegation for '${owner}' after ${pollTimeoutMs}ms. enrollFirstDevice seated the device SIGNER, but the home cert chain's links[1] (the platform-signed delegation for device '${String(requiredDelegationKeyHash ?? "unknown").slice(0, 12)}\u2026') never surfaced \u2014 the birth would combine different device generations and fail its certificate chain. The enroll must record the keyless delegation (enrollFirstDevice.delegationCert) BEFORE birth. [ParentSignerDelegationMissing]`
             );
             err15.code = "ParentSignerDelegationMissing";
             throw err15;
@@ -15640,7 +15940,22 @@ ${String(commit).toLowerCase()}`;
      * lifecycle view: active = served now; superseded/retired = replayable, not served.
      * `drifted` is true ONLY on the word of a successful read.
      */
-    lawStatus: () => serialize(async () => lawStatusOf(installedLawInner(), clientLawHash)),
+    lawStatus: () => serialize(async () => {
+      const currentLaw2 = currentLawInner();
+      const current = currentLawHashesInner();
+      const status2 = lawStatusOf(
+        installedLawRowsCache === void 0 ? null : installedLawInner(),
+        clientLawHash,
+        current
+      );
+      console.error(
+        `[nomos-law-status] workspace=${workspace} client=${status2.clientHash ?? "unregistered"} current=${status2.current?.join(",") ?? "unknown"} installed=${status2.installed.join(",")} drifted=${status2.drifted}`
+      );
+      return {
+        ...status2,
+        currentDomains: currentLaw2 === null ? null : Object.keys(currentLaw2).sort()
+      };
+    }),
     /**
      * Register the BAKED law hash this client was generated under — the soft-warn lane:
      * if the workspace's installed law doesn't carry it, ONE console.warn names the drift
@@ -15654,7 +15969,16 @@ ${String(commit).toLowerCase()}`;
           "registerLawHash(hash) requires the generated client's baked law hash (the 64-hex sha256 of its package)"
         );
       clientLawHash = hash;
-      const status2 = lawStatusOf(installedLawInner(), clientLawHash);
+      const currentLaw2 = currentLawInner();
+      const current = currentLawHashesInner();
+      const status2 = lawStatusOf(
+        installedLawRowsCache === void 0 ? null : installedLawInner(),
+        clientLawHash,
+        current
+      );
+      console.error(
+        `[nomos-law-status] workspace=${workspace} client=${status2.clientHash ?? "unregistered"} current=${status2.current?.join(",") ?? "unknown"} installed=${status2.installed.join(",")} drifted=${status2.drifted}`
+      );
       if (status2.drifted && !warnedDrift) {
         warnedDrift = true;
         console.warn(
@@ -15662,11 +15986,14 @@ ${String(commit).toLowerCase()}`;
             what: "connect",
             workspace,
             clientHash: hash,
-            installed: status2.installed
+            installed: status2.current ?? status2.installed
           })
         );
       }
-      return status2;
+      return {
+        ...status2,
+        currentDomains: currentLaw2 === null ? null : Object.keys(currentLaw2).sort()
+      };
     }),
     /**
      * THE COMPAT SUPERPOWER (#72b): the generated client factory hands over its baked `nomosCompat`
@@ -16245,7 +16572,7 @@ ${String(commit).toLowerCase()}`;
           if (result?.offline === true || result?.pushFailed === true || result?.reconnectRequired === true)
             return result;
           const localHead = await serialize(async () => resolveBranchHead());
-          if (localHead === syncedBase) return result;
+          if (localHead === syncedBase && !discoverRemote) return result;
           return api.sync({ admit, discoverRemote });
         });
       }
@@ -17493,6 +17820,33 @@ async function openRealm(opts = {}) {
     rebindWatches(name, holon);
     return holon;
   }
+  async function deviceIdentity(secret) {
+    const scratch = `nomos-device-${realmClientId}`;
+    const holon = await mount(scratch, {
+      allowUnborn: true,
+      authToken: "",
+      principal: "",
+      clientId: `${realmClientId}:device-identity`
+    }, { evict: false });
+    try {
+      if (typeof secret === "string" && secret.length > 0) {
+        return { secret, public: await holon.devicePublicOf(secret) };
+      }
+      const created = await holon.authorKeygen();
+      if (!created?.ok || !created.secret || !created.public) {
+        throw new Error("the kernel did not return a complete device identity");
+      }
+      return { secret: created.secret, public: created.public };
+    } finally {
+      try {
+        holon._dispose();
+      } catch {
+      }
+      mounted.delete(scratch);
+      parked.delete(scratch);
+      plane.drop(scratch);
+    }
+  }
   return {
     /** The realm's stable client id (each workspace gets `${clientId}:${name}` unless overridden). */
     clientId: realmClientId,
@@ -17500,6 +17854,8 @@ async function openRealm(opts = {}) {
     plane,
     /** Open (or mount-on-demand) a holon bound to `name` IN this plane. Same surface as `connect()` returns. */
     workspace: (name, wsOpts = {}) => withGate(() => mount(name, wsOpts)),
+    /** Kernel-owned device identity, prepared without reading or creating remote custody. */
+    deviceIdentity: (secret) => withGate(() => deviceIdentity(secret)),
     /** The realm's workspaces + their posture (mounted / parked / has-custody). */
     list: () => {
       const names = /* @__PURE__ */ new Set([
@@ -18151,6 +18507,16 @@ function prepareManagedPromotion2(report, candidateHash, domain, opts = {}) {
       error: `the package-wide report does not cover the generated business area '${domain}'`
     };
   }
+  const dispositions2 = report.dispositions;
+  const changesStableIdentity = dispositions2 !== void 0 && (dispositions2.retired.length > 0 || Object.keys(dispositions2.retyped).length > 0 || Object.keys(dispositions2.rebinds).length > 0);
+  if (changesStableIdentity && !acceptanceReason) {
+    return {
+      ok: false,
+      stage: "acceptance",
+      report,
+      error: "the current-frontier transition changes stable business identities and needs an attributed acceptance reason"
+    };
+  }
   const preflight = {
     candidateHash,
     // A package may be reached through any one of its generated domain clients. The
@@ -18511,7 +18877,7 @@ var init_lifecycle_calls2 = __esm({
 
 // vendor/engine/proto/nomos/kernel/v1/kernel_pb.js
 import { enumDesc as enumDesc4, fileDesc as fileDesc5, messageDesc as messageDesc5, serviceDesc as serviceDesc3, tsEnum as tsEnum4 } from "@bufbuild/protobuf/codegenv2";
-var file_nomos_kernel_v1_kernel2, CallRequestSchema2, CallResponseSchema2, PrepareRemoteOfferRequestSchema2, PrepareRemoteOfferResponseSchema2, ApplyWorkspaceEffectRequestSchema, ApplyWorkspaceEffectResponseSchema, WorkspaceTargetSchema2, InitializeWorkspaceRequestSchema, DirectiveCallSchema3, AuthoringOptionsSchema3, CapturedClockSchema3, BirthCertificateSchema3, SignBirthCertificateRequestSchema2, OfferRequestSchema3, QueryRequestSchema3, QueryAuthoritySchema3, InjectedKeySchema2, RowsQuerySchema3, PageQuerySchema3, ByIdQuerySchema3, ByTypeQuerySchema2, TallyQuerySchema3, SpatialQuerySchema3, PendingConflictsQuerySchema2, PendingConflictSummaryQuerySchema2, NamedQuerySchema3, FrontierTransitionRequestSchema2, AuthorizationObjectSchema3, AuthorizationSubjectSchema3, AuthorizationConsistencySchema3, AuthorizationCheckRequestSchema3, AuthorizationExpandRequestSchema, OutboxRequestSchema, SyncRequestSchema3, TestRequestSchema3, SetTestRootRequestSchema3, CustodyRequestSchema2, ResidentFootprintRequestSchema, PackDeltaRequestSchema2, ApplyPackRequestSchema2, RepoStatsRequestSchema2, IntentsAboveRequestSchema3, InspectChangeRequestSchema, RefusalVerdictSchema, EncodeRefusalVerdictRequestSchema, InspectRefusalVerdictRequestSchema, ProveCompactionEquivalenceRequestSchema, ReadBlobRequestSchema, ResolveRefRequestSchema2, ListRefsRequestSchema, WriteRefRequestSchema3, DeleteRefRequestSchema3, WriteMetaCommitRequestSchema, LawClosureInfoRequestSchema2, CheckpointExportRequestSchema2, VerifiedFrontierReceiptSchema, StoredCheckpointManifestSchema, CheckpointImportRequestSchema3, CapacityReserveRequestSchema2, RestoreMainRequestSchema2, ResolveStatePositionRequestSchema, NomosValueSchema2, NomosStructSchema2, BirthOutcomeStatusSchema2, BirthOutcomeStatus2, QueryResultFormatSchema2, QueryResultFormat2, QueryOperationSchema2, QueryOperation3, KernelLawCapabilitySchema2, KernelLawCapability2, CheckpointCompressionSchema, CheckpointCompression, CheckpointVerificationPolicySchema, CheckpointVerificationPolicy, CheckpointAssuranceSchema, CheckpointAssurance, IntentTransportRequirementSchema2, IntentTransportRequirement3, LifecycleInstallPhaseSchema, LifecycleInstallPhase;
+var file_nomos_kernel_v1_kernel2, CallRequestSchema2, CallResponseSchema2, PrepareRemoteOfferRequestSchema2, PrepareRemoteOfferResponseSchema2, ApplyWorkspaceEffectRequestSchema, ApplyWorkspaceEffectResponseSchema, WorkspaceTargetSchema2, InitializeWorkspaceRequestSchema, DirectiveCallSchema3, AuthoringOptionsSchema3, CapturedClockSchema3, BirthCertificateSchema3, SignBirthCertificateRequestSchema2, ModelLifecycleIntentSchema2, OfferRequestSchema3, QueryRequestSchema3, QueryAuthoritySchema3, InjectedKeySchema2, RowsQuerySchema3, PageQuerySchema3, ByIdQuerySchema3, ByTypeQuerySchema2, TallyQuerySchema3, SpatialQuerySchema3, PendingConflictsQuerySchema2, PendingConflictSummaryQuerySchema2, NamedQuerySchema3, FrontierTransitionRequestSchema2, FrontierTransitionDispositionMapEntrySchema, FrontierTransitionDispositionsSchema, FrontierTransitionViolationSchema, FrontierTransitionResponseSchema, AuthorizationObjectSchema3, AuthorizationSubjectSchema3, AuthorizationConsistencySchema3, AuthorizationCheckRequestSchema3, AuthorizationExpandRequestSchema, OutboxRequestSchema, SyncRequestSchema3, TestRequestSchema3, SetTestRootRequestSchema3, CustodyRequestSchema2, ResidentFootprintRequestSchema, PackDeltaRequestSchema2, ApplyPackRequestSchema2, RepoStatsRequestSchema2, IntentsAboveRequestSchema3, InspectChangeRequestSchema, RefusalVerdictSchema, EncodeRefusalVerdictRequestSchema, InspectRefusalVerdictRequestSchema, ProveCompactionEquivalenceRequestSchema, ReadBlobRequestSchema, ResolveRefRequestSchema2, ListRefsRequestSchema, WriteRefRequestSchema3, DeleteRefRequestSchema3, WriteMetaCommitRequestSchema, LawClosureInfoRequestSchema2, CheckpointExportRequestSchema2, VerifiedFrontierReceiptSchema, StoredCheckpointManifestSchema, CheckpointImportRequestSchema3, CapacityReserveRequestSchema2, RestoreMainRequestSchema2, ResolveStatePositionRequestSchema, NomosValueSchema2, NomosStructSchema2, BirthOutcomeStatusSchema2, BirthOutcomeStatus2, ModelLifecycleOperationSchema2, ModelLifecycleOperation3, QueryResultFormatSchema2, QueryResultFormat2, QueryOperationSchema2, QueryOperation3, KernelLawCapabilitySchema2, KernelLawCapability2, CheckpointCompressionSchema, CheckpointCompression, CheckpointVerificationPolicySchema, CheckpointVerificationPolicy, CheckpointAssuranceSchema, CheckpointAssurance, IntentTransportRequirementSchema2, IntentTransportRequirement3, LifecycleInstallPhaseSchema, LifecycleInstallPhase;
 var init_kernel_pb2 = __esm({
   "vendor/engine/proto/nomos/kernel/v1/kernel_pb.js"() {
     "use strict";
@@ -18529,6 +18895,7 @@ var init_kernel_pb2 = __esm({
     CapturedClockSchema3 = /* @__PURE__ */ messageDesc5(file_nomos_kernel_v1_kernel2, 49);
     BirthCertificateSchema3 = /* @__PURE__ */ messageDesc5(file_nomos_kernel_v1_kernel2, 50);
     SignBirthCertificateRequestSchema2 = /* @__PURE__ */ messageDesc5(file_nomos_kernel_v1_kernel2, 51);
+    ModelLifecycleIntentSchema2 = /* @__PURE__ */ messageDesc5(file_nomos_kernel_v1_kernel2, 53);
     OfferRequestSchema3 = /* @__PURE__ */ messageDesc5(file_nomos_kernel_v1_kernel2, 54);
     QueryRequestSchema3 = /* @__PURE__ */ messageDesc5(file_nomos_kernel_v1_kernel2, 57);
     QueryAuthoritySchema3 = /* @__PURE__ */ messageDesc5(file_nomos_kernel_v1_kernel2, 64);
@@ -18543,6 +18910,10 @@ var init_kernel_pb2 = __esm({
     PendingConflictSummaryQuerySchema2 = /* @__PURE__ */ messageDesc5(file_nomos_kernel_v1_kernel2, 77);
     NamedQuerySchema3 = /* @__PURE__ */ messageDesc5(file_nomos_kernel_v1_kernel2, 78);
     FrontierTransitionRequestSchema2 = /* @__PURE__ */ messageDesc5(file_nomos_kernel_v1_kernel2, 79);
+    FrontierTransitionDispositionMapEntrySchema = /* @__PURE__ */ messageDesc5(file_nomos_kernel_v1_kernel2, 80);
+    FrontierTransitionDispositionsSchema = /* @__PURE__ */ messageDesc5(file_nomos_kernel_v1_kernel2, 81);
+    FrontierTransitionViolationSchema = /* @__PURE__ */ messageDesc5(file_nomos_kernel_v1_kernel2, 82);
+    FrontierTransitionResponseSchema = /* @__PURE__ */ messageDesc5(file_nomos_kernel_v1_kernel2, 83);
     AuthorizationObjectSchema3 = /* @__PURE__ */ messageDesc5(file_nomos_kernel_v1_kernel2, 84);
     AuthorizationSubjectSchema3 = /* @__PURE__ */ messageDesc5(file_nomos_kernel_v1_kernel2, 85);
     AuthorizationConsistencySchema3 = /* @__PURE__ */ messageDesc5(file_nomos_kernel_v1_kernel2, 87);
@@ -18581,6 +18952,8 @@ var init_kernel_pb2 = __esm({
     NomosStructSchema2 = /* @__PURE__ */ messageDesc5(file_nomos_kernel_v1_kernel2, 166);
     BirthOutcomeStatusSchema2 = /* @__PURE__ */ enumDesc4(file_nomos_kernel_v1_kernel2, 0);
     BirthOutcomeStatus2 = /* @__PURE__ */ tsEnum4(BirthOutcomeStatusSchema2);
+    ModelLifecycleOperationSchema2 = /* @__PURE__ */ enumDesc4(file_nomos_kernel_v1_kernel2, 3);
+    ModelLifecycleOperation3 = /* @__PURE__ */ tsEnum4(ModelLifecycleOperationSchema2);
     QueryResultFormatSchema2 = /* @__PURE__ */ enumDesc4(file_nomos_kernel_v1_kernel2, 5);
     QueryResultFormat2 = /* @__PURE__ */ tsEnum4(QueryResultFormatSchema2);
     QueryOperationSchema2 = /* @__PURE__ */ enumDesc4(file_nomos_kernel_v1_kernel2, 6);
@@ -18675,6 +19048,17 @@ var init_offer_result2 = __esm({
   }
 });
 
+// vendor/engine/proto/nomos/custody/v1/snapshot_pb.js
+import { fileDesc as fileDesc6, messageDesc as messageDesc6 } from "@bufbuild/protobuf/codegenv2";
+var file_nomos_custody_v1_snapshot2, LocalCustodySnapshotSchema2;
+var init_snapshot_pb2 = __esm({
+  "vendor/engine/proto/nomos/custody/v1/snapshot_pb.js"() {
+    "use strict";
+    file_nomos_custody_v1_snapshot2 = /* @__PURE__ */ fileDesc6("Ch9ub21vcy9jdXN0b2R5L3YxL3NuYXBzaG90LnByb3RvEhBub21vcy5jdXN0b2R5LnYxIqACChRMb2NhbEN1c3RvZHlTbmFwc2hvdBIWCg5mb3JtYXRfdmVyc2lvbhgBIAEoDRIWCgl3b3Jrc3BhY2UYAiABKAlIAIgBARIMCgR0cmVlGAMgASgMEhcKCmNoZWNrcG9pbnQYBCABKAxIAYgBARIVCghmcm9udGllchgFIAEoDEgCiAEBEhMKBmN1cnNvchgGIAEoCUgDiAEBEhcKCnN0YXRlX3Jvb3QYByABKAlIBIgBARIYCgtzeW5jZWRfYmFzZRgIIAEoCUgFiAEBQgwKCl93b3Jrc3BhY2VCDQoLX2NoZWNrcG9pbnRCCwoJX2Zyb250aWVyQgkKB19jdXJzb3JCDQoLX3N0YXRlX3Jvb3RCDgoMX3N5bmNlZF9iYXNlYgZwcm90bzM");
+    LocalCustodySnapshotSchema2 = /* @__PURE__ */ messageDesc6(file_nomos_custody_v1_snapshot2, 0);
+  }
+});
+
 // vendor/engine/engine.ts
 var engine_exports = {};
 __export(engine_exports, {
@@ -18690,6 +19074,8 @@ __export(engine_exports, {
   author: () => author,
   authorEphemeral: () => authorEphemeral,
   authorKeygen: () => authorKeygen,
+  authorModelLifecyclePromotion: () => authorModelLifecyclePromotion,
+  authorModelLifecycleStage: () => authorModelLifecycleStage,
   authorOn: () => authorOn,
   authorOperatorCall: () => authorOperatorCall,
   backupHead: () => backupHead,
@@ -18762,6 +19148,7 @@ __export(engine_exports, {
   lawParity: () => lawParity,
   ledgerStats: () => ledgerStats,
   listRefusedRefs: () => listRefusedRefs,
+  localCustodySnapshot: () => localCustodySnapshot,
   materializeRefused: () => materializeRefused,
   memoryDropProbe: () => memoryDropProbe,
   migrateHomes: () => migrateHomes,
@@ -19142,6 +19529,100 @@ function workspaceGenesis(eng, ws) {
 function authorOperatorCall(eng, ws, call, controllerHash, opts = {}) {
   return author(eng, ws, call.domain, call.directive, call.canonicalUsda, controllerHash, opts);
 }
+function authorModelLifecycleStage(eng, ws, lawUsdz, installedBy, supersedes, opts = {}) {
+  const sequence = eng.seq++;
+  const captured = {
+    physical: Date.now(),
+    logical: 0,
+    replica: eng.replica
+  };
+  const response = offerRequestResponse(eng, create7(OfferRequestSchema3, {
+    target: protoTarget2(ws),
+    intent: {
+      case: "modelLifecycle",
+      value: create7(ModelLifecycleIntentSchema2, {
+        operation: ModelLifecycleOperation3.STAGE,
+        installedBy,
+        supersedes
+      })
+    },
+    authoring: create7(AuthoringOptionsSchema3, {
+      actor: opts.actor ?? "",
+      authToken: opts.authToken ? enc7.encode(opts.authToken) : new Uint8Array(),
+      authorSecret: opts.authorSecret ? bytesFromB64(opts.authorSecret) : new Uint8Array(),
+      validFromEpoch: opts.validFromEpoch === void 0 ? void 0 : BigInt(opts.validFromEpoch),
+      rng: osEntropyBuffer2(opts.rngDraws ?? 64),
+      deferProjection: opts.deferProjection !== false,
+      spans: opts.spans ?? false,
+      sequence: BigInt(sequence),
+      clock: create7(CapturedClockSchema3, {
+        physicalMillis: BigInt(captured.physical),
+        logical: captured.logical,
+        replica: BigInt(captured.replica)
+      })
+    }),
+    lawUsdz
+  }));
+  return offerResult(response);
+}
+function authorModelLifecyclePromotion(eng, ws, transition, replaces, acceptanceReason, opts = {}) {
+  const sequence = eng.seq++;
+  const captured = {
+    physical: Date.now(),
+    logical: 0,
+    replica: eng.replica
+  };
+  const dispositions2 = transition.dispositions === void 0 ? void 0 : create7(FrontierTransitionDispositionsSchema, {
+    retired: [...transition.dispositions.retired],
+    retyped: Object.entries(transition.dispositions.retyped).map(
+      ([sourceStableId, acknowledgement]) => create7(FrontierTransitionDispositionMapEntrySchema, { sourceStableId, acknowledgement })
+    ),
+    rebinds: Object.entries(transition.dispositions.rebinds).map(
+      ([sourceStableId, acknowledgement]) => create7(FrontierTransitionDispositionMapEntrySchema, { sourceStableId, acknowledgement })
+    ),
+    acknowledgedBy: transition.dispositions.ackBy
+  });
+  const response = offerRequestResponse(eng, create7(OfferRequestSchema3, {
+    target: protoTarget2(ws),
+    intent: {
+      case: "modelLifecycle",
+      value: create7(ModelLifecycleIntentSchema2, {
+        operation: ModelLifecycleOperation3.PROMOTE,
+        replaces,
+        acceptanceReason,
+        transition: create7(FrontierTransitionResponseSchema, {
+          atHash: transition.atHash,
+          currentHash: transition.currentHash,
+          atStateRoot: transition.atStateRoot ?? "",
+          candidateHash: transition.candidateHash,
+          domain: transition.domain,
+          domains: [...transition.domains ?? []],
+          ready: transition.ready,
+          violations: transition.evolve.violations.map(
+            ({ domain, detail }) => create7(FrontierTransitionViolationSchema, { domain, detail })
+          ),
+          dispositions: dispositions2
+        })
+      })
+    },
+    authoring: create7(AuthoringOptionsSchema3, {
+      actor: opts.actor ?? "",
+      authToken: opts.authToken ? enc7.encode(opts.authToken) : new Uint8Array(),
+      authorSecret: opts.authorSecret ? bytesFromB64(opts.authorSecret) : new Uint8Array(),
+      validFromEpoch: opts.validFromEpoch === void 0 ? void 0 : BigInt(opts.validFromEpoch),
+      rng: osEntropyBuffer2(opts.rngDraws ?? 64),
+      deferProjection: opts.deferProjection !== false,
+      spans: opts.spans ?? false,
+      sequence: BigInt(sequence),
+      clock: create7(CapturedClockSchema3, {
+        physicalMillis: BigInt(captured.physical),
+        logical: captured.logical,
+        replica: BigInt(captured.replica)
+      })
+    })
+  }));
+  return offerResult(response);
+}
 function initializeWorkspace(eng, ws, installedBy = eng.installedBy) {
   const sequence = eng.seq++;
   const captured = {
@@ -20242,8 +20723,11 @@ async function reconcileRequiredCustodyHead(eng, ws, ledger, requiredCustodyHead
   if (!/^[0-9a-f]{40}$/.test(requiredCustodyHead)) {
     throw new Error("required custody head must be a lowercase 40-hex git object id");
   }
-  const current = eng.mounted.has(ws) ? kgit.resolveRef(eng, gitdirOf(ws), BRANCH2) : "";
-  if (current === requiredCustodyHead) return eng.mounted.get(ws);
+  const resident = eng.mounted.get(ws);
+  const current = resident ? kgit.resolveRef(eng, gitdirOf(ws), BRANCH2) : "";
+  if (current === requiredCustodyHead && resident?.remoteMain === requiredCustodyHead && !resident.restoreError) {
+    return resident;
+  }
   if (current && isDirty(eng, ws)) {
     throw new Error(
       `workspace '${ws}' has verified but unsealed resident work; refusing to discard it while reconciling custody`
@@ -20256,6 +20740,12 @@ async function reconcileRequiredCustodyHead(eng, ws, ledger, requiredCustodyHead
       `workspace '${ws}' could not reconcile required custody ${requiredCustodyHead}: ${mounted.restoreError || "custody has no verified main"}`
     );
   }
+  const reconciled = kgit.resolveRef(eng, gitdirOf(ws), BRANCH2);
+  if (reconciled !== requiredCustodyHead || mounted.remoteMain !== requiredCustodyHead) {
+    throw new Error(
+      `workspace '${ws}' restored custody ${mounted.remoteMain || reconciled || "none"}, not required custody ${requiredCustodyHead}`
+    );
+  }
   return mounted;
 }
 function assertAuthored(res, what) {
@@ -20393,7 +20883,10 @@ async function applyWorkspaceEffect(eng, ws, ledger, requestBytes, admissionChec
   const result = response.outcome.value.result;
   if (!result || result.outcome.case !== "admitted") {
     const outcome = result?.outcome.case || "empty";
-    throw new Error(`target kernel ${outcome} the workspace effect`);
+    const detail = result?.outcome.case === "refused" ? result.outcome.value.refusal?.message : void 0;
+    throw new Error(
+      `target kernel ${outcome} the workspace effect${detail ? `: ${detail}` : ""}`
+    );
   }
   await custodyPush(eng, ws, ledger, { remoteRef: "refs/heads/main", ffOnly: true });
   return toBinary6(ApplyWorkspaceEffectResponseSchema, response.outcome.value);
@@ -20504,8 +20997,8 @@ function prepareRemoteOffer(eng, ws, requestBytes) {
   if (authoring.authorSecret.byteLength !== 0) {
     throw new Error("remote offer preparation refuses client signing secrets");
   }
-  if (request.intent.case !== "call") {
-    throw new Error("remote offer preparation requires a typed directive call");
+  if (request.intent.case !== "call" && request.intent.case !== "modelLifecycle") {
+    throw new Error("remote offer preparation requires a typed directive or model-lifecycle call");
   }
   const response = callProto(eng.ex, {
     case: "prepareRemoteOffer",
@@ -20971,7 +21464,13 @@ function packDelta(eng, ws, base, head) {
       case: "packDelta",
       value: create7(PackDeltaRequestSchema2, { repo: repoArgOf(ws), base: base || void 0, head })
     }, "packDelta").pack;
-  } catch {
+  } catch (error) {
+    console.error("[nomos-custody-pack] packDelta refused", {
+      workspace: ws,
+      base: base || "<full>",
+      head,
+      error: String(error)
+    });
     return null;
   }
 }
@@ -21653,11 +22152,12 @@ function promotePreflighted(eng, ws, domain, candidateHash, opts = {}) {
     acceptanceReason: _acceptance,
     ...authorOpts
   } = opts;
-  const result = authorOperatorCall(
+  const result = authorModelLifecyclePromotion(
     eng,
     ws,
-    promoteDomainCall(ws, prepared.payload),
-    requireCurrentControllerLawHash(eng, ws),
+    report,
+    prepared.payload.replaces,
+    prepared.payload.preflight.acceptanceReason,
     {
       ...authorOpts,
       ...actingPrincipal ? { actor: actingPrincipal } : {}
@@ -22147,7 +22647,10 @@ async function emitOutbox(eng, ws, ledger, workspaceEffectBase = "", admissionCh
           const targetResult = response.result;
           if (!targetResult || targetResult.outcome.case !== "admitted") {
             const outcome = targetResult?.outcome.case || "empty";
-            throw new Error(`target kernel ${outcome} the workspace effect`);
+            const detail = targetResult?.outcome.case === "refused" ? targetResult.outcome.value.refusal?.message : void 0;
+            throw new Error(
+              `target kernel ${outcome} the workspace effect${detail ? `: ${detail}` : ""}`
+            );
           }
           break;
         }
@@ -22179,7 +22682,7 @@ async function emitOutbox(eng, ws, ledger, workspaceEffectBase = "", admissionCh
     } catch (e) {
       errors++;
       const destination = offer.route.case === "httpsRoute" ? offer.route.value.url : offer.route.case === "workspaceRoute" ? offer.route.value.workspace : offer.destination;
-      log("outbox-deliver-failed", { ws, offerId: offer.id, destination, error: String(e).slice(0, 200) });
+      log("outbox-deliver-failed", { ws, offerId: offer.id, destination, error: String(e).slice(0, 2e3) });
     }
   }
   if (delivered.length || errors) log("outbox", { ws, delivered: delivered.length, errors });
@@ -22210,6 +22713,26 @@ function snapshot(eng, ws) {
   const wsDir = dirOf(eng.preopen.dir.contents.get("ws")).contents.get(ws);
   return serializeTree2(wsDir);
 }
+function localCustodySnapshot(eng, ws) {
+  const checkpoint = exportCheckpoint(eng, ws);
+  const tree = snapshot(eng, ws);
+  const head = headOf(eng, ws);
+  const body = toBinary6(LocalCustodySnapshotSchema2, create7(LocalCustodySnapshotSchema2, {
+    formatVersion: 3,
+    workspace: ws,
+    tree,
+    checkpoint: checkpoint.blob ? bytesFromB64(checkpoint.blob) : void 0,
+    frontier: checkpoint.frontier ? bytesFromB64(checkpoint.frontier) : void 0,
+    cursor: checkpoint.cursor === void 0 ? void 0 : String(checkpoint.cursor),
+    stateRoot: checkpoint.stateRoot,
+    syncedBase: head || void 0
+  }));
+  const prefix = enc7.encode("NOMOS-CUSTODY-PB3\n");
+  const framed = new Uint8Array(prefix.byteLength + body.byteLength);
+  framed.set(prefix);
+  framed.set(body, prefix.byteLength);
+  return framed;
+}
 function stats(eng) {
   return {
     mounted: eng.mounted.size,
@@ -22286,6 +22809,7 @@ var init_engine = __esm({
     init_lifecycle_calls2();
     init_offer_result2();
     init_kernel_pb2();
+    init_snapshot_pb2();
     enc7 = new TextEncoder();
     dec7 = new TextDecoder();
     BRANCH2 = "main";
@@ -23318,6 +23842,14 @@ __export(governance_exports, {
 import { createHash, createPrivateKey, createPublicKey } from "node:crypto";
 import { mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync4 } from "node:fs";
 import { dirname as dirname3, join as join4 } from "node:path";
+function custodyAdmissionAccepted(admission) {
+  if (admission === null || admission === void 0 || admission.ok === false) return false;
+  const refused = (admission.sessions ?? []).some(
+    (session) => (session.rejected?.length ?? 0) > 0 || (session.intents ?? []).some((intent) => intent.outcome?.case !== "admitted")
+  );
+  if (refused) return false;
+  return admission.ok === true || /^[0-9a-f]{40}$/i.test(String(admission.main ?? ""));
+}
 async function clientConnect() {
   const mod = await Promise.resolve().then(() => (init_src2(), src_exports));
   return mod.connect;
@@ -23456,8 +23988,7 @@ async function adoptRootModelLifecycle(candidateHash, opts, acceptance) {
   }
   const sync = await holon.sync({ admit: true, discoverRemote: true });
   const admission = sync.admission;
-  const rejected = (admission?.sessions ?? []).flatMap((session) => session.rejected ?? []);
-  const ok = sync.pushFailed !== true && sync.offline !== true && admission?.ok === true && rejected.length === 0;
+  const ok = sync.pushFailed !== true && sync.offline !== true && custodyAdmissionAccepted(admission);
   return { ok, adoption, sync };
 }
 async function adoptWorkspaceModel(workspace, domain, candidateHash, opts, acceptance) {
@@ -23492,8 +24023,7 @@ async function adoptWorkspaceModel(workspace, domain, candidateHash, opts, accep
     }
     const sync = await holon.sync({ admit: true, discoverRemote: true });
     const admission = sync.admission;
-    const rejected = (admission?.sessions ?? []).flatMap((session) => session.rejected ?? []);
-    const ok = sync.pushFailed !== true && sync.offline !== true && admission?.ok === true && rejected.length === 0;
+    const ok = sync.pushFailed !== true && sync.offline !== true && custodyAdmissionAccepted(admission);
     return { ok, adoption, sync };
   } finally {
     holon._dispose?.();
@@ -23542,11 +24072,11 @@ async function signAndPostPreparedOffer(ws, domain, prepare, opts, authorMode =
     }
     const sync = await holon.sync({ admit: true, discoverRemote: true });
     const admission = sync.admission;
-    const rejected = (admission?.sessions ?? []).flatMap((session) => session.rejected ?? []);
-    const failed = sync.pushFailed === true || sync.offline === true || admission?.ok === false || rejected.length > 0;
+    const accepted = custodyAdmissionAccepted(admission);
+    const failed = sync.pushFailed === true || sync.offline === true || !accepted;
     return {
-      ok: !failed && admission?.ok === true,
-      status: !failed && admission?.ok === true ? 200 : rejected.length > 0 ? 422 : 502,
+      ok: !failed,
+      status: !failed ? 200 : admission !== null && admission !== void 0 ? 422 : 502,
       body: sync.pushError ?? admission ?? sync,
       principal,
       actor,
@@ -28405,10 +28935,14 @@ function domainInventory(value) {
   const domains = row.domains.map((candidate) => {
     if (typeof candidate !== "object" || candidate === null) throw new Error("domain inventory contains a non-record installation");
     const install = candidate;
-    if (typeof install.domainHash !== "string" || typeof install.phase !== "string" || !Array.isArray(install.domainKeys) || !install.domainKeys.every((key2) => typeof key2 === "string")) {
+    if (typeof install.domainHash !== "string" || typeof install.phase !== "string" || install.domainKeys !== void 0 && (!Array.isArray(install.domainKeys) || !install.domainKeys.every((key2) => typeof key2 === "string"))) {
       throw new Error("domain inventory contains an invalid installation record");
     }
-    return { domainHash: install.domainHash, phase: install.phase, domainKeys: install.domainKeys };
+    return {
+      domainHash: install.domainHash,
+      phase: install.phase,
+      domainKeys: install.domainKeys ?? []
+    };
   });
   const currentLaw2 = Object.fromEntries(Object.entries(row.currentLaw).map(([key2, hash]) => {
     if (typeof hash !== "string") throw new Error(`domain inventory has a non-string current law for '${key2}'`);
@@ -31905,7 +32439,6 @@ async function status(wsArg, opts) {
 
 // src/proof_upgrade.ts
 init_engine();
-init_lifecycle_calls2();
 init_cloud();
 init_governance();
 init_local_holon();
@@ -32033,27 +32566,33 @@ async function mountReadOnlyCopy(eng, source, cloud) {
 function tenantPredecessors(candidateDomains, current, frameworkHashes) {
   return [...new Set(candidateDomains.map((domain) => current[domain]).filter((hash) => typeof hash === "string" && !frameworkHashes.has(hash)))];
 }
-function printDifferences(report) {
-  out11(`  replayed  ${report.replayedIntents} historical intent(s); ${report.candidateIntents} candidate action(s)`);
-  for (const difference of report.divergences.slice(0, 12)) {
-    const location = [difference.domain, difference.directiveId].filter(Boolean).join(".");
-    out11(`  changed   ${difference.kind}${location ? ` at ${location}` : ""}: ${difference.detail}`);
+function upgradeControllerLawHash(installed, bundledControllerHash) {
+  const active = installed["nomos"];
+  if (typeof active === "string" && /^[0-9a-f]{64}$/.test(active)) return active;
+  if (/^[0-9a-f]{64}$/.test(bundledControllerHash)) return bundledControllerHash;
+  throw new Error("the copied workspace declares no active Nomos lifecycle controller");
+}
+function printFrontier(report) {
+  out11(`  frontier  ${report.atHash.slice(0, 12)}\u2026 state ${report.atStateRoot?.slice(0, 12) ?? "unknown"}\u2026`);
+  out11(`  evolution ${report.ready ? "admissible" : "refused"}`);
+  for (const violation of report.evolve.violations) {
+    out11(`  violation ${violation.domain}: ${violation.detail}`);
   }
-  if (report.divergences.length > 12) out11(`  changed   + ${report.divergences.length - 12} more difference(s)`);
 }
 function localAuthorIdentity(explicitPrincipal) {
   const selectedPrincipal = explicitPrincipal ?? activePrincipal() ?? ACTOR;
   const actor = canonicalPrincipal2(selectedPrincipal);
   const bareActor = actor.startsWith("user:") ? actor.slice("user:".length) : actor;
   const device = getDeviceKey(selectedPrincipal) ?? getDeviceKey(actor) ?? getDeviceKey(bareActor);
-  if (device?.secret === void 0) {
+  const authorSecret = process.env["NOMOS_AUTHOR_SECRET"]?.trim() || device?.secret;
+  if (authorSecret === void 0) {
     throw new Error(
       `upgrade proof needs an enrolled signing device for '${actor}' \u2014 select one with --as <uid> or import/enroll its key first`
     );
   }
   return {
     actor,
-    authorSecret: device.secret
+    authorSecret
   };
 }
 async function runUpgradeProof(sourceArg, lawUsdzPath, opts = {}) {
@@ -32071,7 +32610,11 @@ async function runUpgradeProof(sourceArg, lawUsdzPath, opts = {}) {
     return 1;
   }
   try {
-    const identity = localAuthorIdentity(opts.principal);
+    const localIdentity = localAuthorIdentity(opts.principal);
+    const identity = {
+      ...localIdentity,
+      ...process.env["NOMOS_AUTH_TOKEN"] ? { authToken: process.env["NOMOS_AUTH_TOKEN"] } : {}
+    };
     const { eng: sourceEngine, runtime } = await holonEngine(cloud, identity.actor);
     const mounted = await mountReadOnlyCopy(sourceEngine, source, cloud);
     const sourceVerdict = verifyChainLocal(sourceEngine, WORKSPACE);
@@ -32092,10 +32635,11 @@ async function runUpgradeProof(sourceArg, lawUsdzPath, opts = {}) {
     const candidate = inspectLawArchive(eng, lawUsdzPath);
     if (candidate.domainKeys.length === 0) throw new Error("candidate law archive carries no business domains");
     const before = currentLaw(eng, WORKSPACE);
+    const controllerLawHash = upgradeControllerLawHash(before, eng.hashes.nomos);
     const predecessors = tenantPredecessors(
       candidate.domainKeys,
       before,
-      /* @__PURE__ */ new Set([eng.hashes.bootstrap, eng.hashes.nomos])
+      /* @__PURE__ */ new Set([eng.hashes.bootstrap, eng.hashes.nomos, controllerLawHash])
     );
     const alreadyCurrent = candidate.domainKeys.every((domain) => before[domain] === candidate.identity);
     if (alreadyCurrent) {
@@ -32113,20 +32657,23 @@ async function runUpgradeProof(sourceArg, lawUsdzPath, opts = {}) {
         );
       }
       const predecessor = predecessors[0];
-      const staged = authorOperatorCall(
+      const staged = authorModelLifecycleStage(
         eng,
         WORKSPACE,
-        stageDomainCall(
-          WORKSPACE,
-          closureInstallPayload(candidate.identity, identity.actor, { supersedes: predecessor })
-        ),
-        eng.hashes.nomos,
-        { ...identity, lawUsdz: candidate.lawUsdz }
+        candidate.lawUsdz,
+        identity.actor,
+        predecessor,
+        identity
       );
-      if (staged.ok === false) throw new Error(`candidate staging refused: ${staged.error ?? "unknown refusal"}`);
+      if (staged.ok === false) {
+        const authority = /authoriz|not permitted/i.test(staged.error ?? "") ? expand(eng, WORKSPACE, "workspace:self", "installDomain").subjects : [];
+        throw new Error(
+          `candidate staging refused: ${staged.error ?? "unknown refusal"}` + (authority.length > 0 ? `; lifecycle authority is held by ${authority.join(", ")}` : "")
+        );
+      }
       const stagedHead = kgit.resolveRef(eng, gitdirOf(WORKSPACE), "refs/heads/main");
       if (!stagedHead) throw new Error("candidate staging produced no current head");
-      const report = historyPreflight(
+      const report = frontierTransition(
         eng,
         WORKSPACE,
         candidate.domainKeys[0],
@@ -32137,21 +32684,13 @@ async function runUpgradeProof(sourceArg, lawUsdzPath, opts = {}) {
       out11(`githolon proof --upgrade \u2014 ${source} (${mounted.location}, never modified)`);
       out11(`  current   ${predecessor.slice(0, 16)}\u2026`);
       out11(`  candidate ${candidate.identity.slice(0, 16)}\u2026  (${candidate.domainKeys.join(", ")})`);
-      printDifferences(report);
-      if (!report.sourceVerified || !report.complete || !report.evolve.ok) {
-        throw new Error(
-          !report.sourceVerified ? "the source history did not verify" : !report.complete ? "the candidate could not re-derive every historical premise" : `typed evolution refused: ${report.evolve.violations.map((violation) => violation.detail).join("; ")}`
-        );
-      }
-      if (!report.promotable && !opts.acceptanceReason?.trim()) {
-        throw new Error(
-          'the candidate deliberately changes historical business outcomes; review the differences above, then rerun with --acceptance-reason "why this change is correct"'
-        );
+      printFrontier(report);
+      if (!report.ready || !report.evolve.ok) {
+        throw new Error(`typed evolution refused: ${report.evolve.violations.map((violation) => violation.detail).join("; ")}`);
       }
       const promoted = promotePreflighted(eng, WORKSPACE, candidate.domainKeys[0], candidate.identity, {
         ...identity,
         replaces: predecessor,
-        retireReplaced: true,
         ...opts.acceptanceReason?.trim() ? { acceptanceReason: opts.acceptanceReason.trim() } : {}
       });
       if (!promoted.ok) throw new Error(`disposable promotion refused at ${promoted.stage}: ${promoted.error}`);
@@ -32161,7 +32700,7 @@ async function runUpgradeProof(sourceArg, lawUsdzPath, opts = {}) {
           throw new Error(`promotion completed but ${domain} does not resolve to the candidate model`);
         }
       }
-      out11(`\u2713 exact-history promotion admitted in the disposable copy`);
+      out11(`\u2713 current-frontier promotion admitted in the disposable copy`);
     }
     const warmVerdict = verifyChainLocal(eng, WORKSPACE);
     if (warmVerdict.valid !== true) throw new Error(`promoted chain failed verification: ${String(warmVerdict.error ?? "unknown refusal")}`);