githolon 0.110.0 → 0.111.0

package/dist/full-cli.mjs

@@ -20640,6 +20640,15 @@ var init_replica_follow_controller = __esm({
         }
         if (result.stillAhead || result.pushFailed || result.directOfferDeferred || result.reconnectRequired) {
           if (result.directOfferDeferred) {
+            if (!result.reconnectRequired) {
+              this.#desk.transition(result.workspace, {
+                case: ReplicaFollowEventKind.Failed,
+                nowUnixMillis,
+                failure: "remote workspace opening; retrying",
+                retryWithinMillis: 5e3
+              });
+              return delayUntilDue(this.#desk.get(result.workspace), nowUnixMillis);
+            }
             this.#desk.transition(result.workspace, {
               case: ReplicaFollowEventKind.DependencyDeferred,
               nowUnixMillis,
@@ -22644,6 +22653,34 @@ var init_custody_replacement = __esm({
 
 // ../peer-office/src/runtime/custody_offer.ts
 import { create as create54, fromBinary as fromBinary19, toBinary as toBinary17 } from "@bufbuild/protobuf";
+function settleCustodyOfferExchange(awaiting, response) {
+  if (response.status === 202 && response.contentType?.includes("application/json")) {
+    try {
+      const pending = JSON.parse(new TextDecoder().decode(response.body));
+      if (pending?.retryable === true && typeof pending.preparing === "string") {
+        return { case: "maintenance", kind: pending.preparing };
+      }
+    } catch {
+    }
+  }
+  if (!response.contentType?.includes(CUSTODY_OFFER_RESULT_MEDIA_TYPE)) {
+    return {
+      case: "unexpected",
+      status: response.status,
+      ...response.contentType === void 0 ? {} : { contentType: response.contentType }
+    };
+  }
+  const verdict = decodeCustodyOffer(response.body, awaiting.requestId);
+  const receipt = custodyOfferReceipt(awaiting.requestId, verdict);
+  switch (verdict.case) {
+    case "admission":
+      return { case: "admission", value: verdict.value, receipt, status: response.status };
+    case "failure":
+      return { case: "failure", value: verdict.value, receipt, status: response.status };
+    case "blocked":
+      return { case: "blocked", value: verdict.value, receipt, status: response.status };
+  }
+}
 function encodeInlineCustodyOffer(args) {
   return toBinary17(CustodyOfferBatchRequestSchema, create54(CustodyOfferBatchRequestSchema, {
     protocolVersion: 2,
@@ -22781,7 +22818,7 @@ import { create as create55, fromBinary as fromBinary20 } from "@bufbuild/protob
 function releaseSyncJudgment(workspace) {
   judgedThisLifetime.delete(workspace);
 }
-var PLACEMENT_REF3, LAW_PRODUCTS_MEDIA_TYPE, WorkspaceSyncPhase, trackedMain, NO_COMMON_BASE, deferredRemote, deferredLocal, judgedThisLifetime, MAX_REBASES_PER_ROUND, elapsedMillis, WorkspaceSyncWork;
+var PLACEMENT_REF3, LAW_PRODUCTS_MEDIA_TYPE, WorkspaceSyncPhase, trackedMain, deferredRemote, deferredLocal, judgedThisLifetime, MAX_REBASES_PER_ROUND, elapsedMillis, WorkspaceSyncWork;
 var init_workspace_sync = __esm({
   "../peer-office/src/runtime/workspace_sync.ts"() {
     "use strict";
@@ -22797,6 +22834,7 @@ var init_workspace_sync = __esm({
     PLACEMENT_REF3 = "refs/nomos/placement";
     LAW_PRODUCTS_MEDIA_TYPE = "application/vnd.nomos.export-law-products-response+protobuf";
     WorkspaceSyncPhase = Object.freeze({
+      Idle: "idle",
       Probe: "probe",
       Offer: "offer",
       Lease: "lease",
@@ -22806,7 +22844,6 @@ var init_workspace_sync = __esm({
       Done: "done"
     });
     trackedMain = "refs/remotes/nomos/main";
-    NO_COMMON_BASE = "this replica holds local history with no frontier its upstream ever confirmed; convergence needs a common admitted base \u2014 drop the local copy to refetch it, or re-discover a provider holding this lineage";
     deferredRemote = "refs/remotes/nomos/deferred";
     deferredLocal = "refs/nomos/sync-deferred-local";
     judgedThisLifetime = /* @__PURE__ */ new Map();
@@ -22827,7 +22864,6 @@ var init_workspace_sync = __esm({
       #rediscover;
       /** The route the directory's answer yields, recomputed once that answer is observed. */
       #reroute;
-      #placementFetch;
       #discoveredFrontier;
       #observePlacement;
       /** Ask the directory for the provider's current placement frontier this round although a
@@ -22836,19 +22872,14 @@ var init_workspace_sync = __esm({
       #directoryAnswered;
       #placementFetched;
       /** A round which converged without leasing, finishing once placement alone is fetched. */
-      #afterPlacement;
       #leased = false;
-      #lease;
       #command;
       #requestId;
       #started;
-      #phase = WorkspaceSyncPhase.Lease;
+      #state = { phase: WorkspaceSyncPhase.Idle };
       #localHead;
       #offerHead;
       #previousHead;
-      #fetchStarted;
-      #offerStarted;
-      #offerRequestId;
       #pushMillis = 0;
       #pushBytes = 0n;
       #desiredHead;
@@ -22943,7 +22974,7 @@ var init_workspace_sync = __esm({
           throw new Error(`replica '${this.#binding.replicaId}' has no custody remote`);
         }
         if (this.#rediscover || this.#recheckPlacement || !this.#route?.placementObserved && !this.#route?.placementFrontier && !this.#kernel.resolveRef(this.#mount, this.#requestId, PLACEMENT_REF3)) {
-          this.#phase = WorkspaceSyncPhase.Discover;
+          this.#state = { phase: WorkspaceSyncPhase.Discover };
           return this.#remember({
             case: "pending",
             value: create55(CorrespondencePendingSchema, {
@@ -22963,13 +22994,13 @@ var init_workspace_sync = __esm({
       #openRound() {
         if (this.#receiveState || this.#replaceLocalHead !== void 0) return this.#leaseEffect();
         if (!this.#localHead) return this.#leaseEffect();
-        this.#offerRequestId = `${this.#binding.replicaId}:${this.#requestId}:${this.workId}:frontier`;
+        const requestId = `${this.#binding.replicaId}:${this.#requestId}:${this.workId}:frontier`;
         return this.#beginOffer(encodeInlineCustodyOffer({
           session: this.#binding.replicaId,
-          requestId: this.#offerRequestId,
+          requestId,
           observedHead: this.#localHead,
           intents: []
-        }), true);
+        }), { case: "awaiting", requestId }, true);
       }
       #offerOrReconcile() {
         if (this.#command.admit && this.#localHead && this.#localHead !== this.#previousHead) {
@@ -22990,13 +23021,13 @@ var init_workspace_sync = __esm({
             throw new Error(`kernel did not classify transport for intent '${unspecified.intentId}'`);
           }
           if (suffix.length > 0) {
-            this.#offerStarted = this.#clock.monotonicNanoseconds();
-            this.#offerRequestId = `${this.#binding.replicaId}:${this.#requestId}:${this.workId}`;
+            const requestId2 = `${this.#binding.replicaId}:${this.#requestId}:${this.workId}`;
+            const startedAt = this.#clock.monotonicNanoseconds();
             this.#offerAfterConverge = true;
             this.#rebaseFrom = this.#previousHead;
             return this.#beginOffer(encodeInlineCustodyOffer({
               session: this.#binding.replicaId,
-              requestId: this.#offerRequestId,
+              requestId: requestId2,
               ...this.#previousHead === void 0 ? {} : { baseHead: this.#previousHead },
               observedHead: this.#localHead,
               intents: suffix,
@@ -23007,51 +23038,26 @@ var init_workspace_sync = __esm({
                 this.#previousHead
               ) : void 0,
               fastForwardOnly: true
-            }));
+            }), { case: "awaiting", requestId: requestId2, startedAt });
           }
         }
-        this.#offerRequestId = `${this.#binding.replicaId}:${this.#requestId}:${this.workId}:reconcile`;
+        const requestId = `${this.#binding.replicaId}:${this.#requestId}:${this.workId}:reconcile`;
         return this.#beginOffer(encodeInlineCustodyOffer({
           session: this.#binding.replicaId,
-          requestId: this.#offerRequestId,
+          requestId,
           baseHead: this.#previousHead,
           observedHead: this.#localHead,
           intents: []
-        }));
+        }), { case: "awaiting", requestId });
       }
       /**
-       * NO COMMON BASE — a round that cannot converge, and must not pay for history to find out.
-       *
-       * This replica holds a non-empty ledger but has never recorded a frontier its upstream
-       * confirmed (`refs/remotes/nomos/main` is absent). The kernel refuses convergence in that
-       * state ("a non-empty live ledger requires a common admitted base"), so every step after the
-       * O(1) frontier probe is wasted work — and it is not cheap waste: the fetch negotiates with
-       * no `have` (a full-history pack), and the dependency planner decodes EVERY intent from
-       * genesis and inspects every change, once per round. That is O(history) per follow round,
-       * repeated at every retry, for a round that can only end in a refusal.
-       *
-       * The one base this round can establish costs nothing and is established before this is
-       * asked: an upstream holding exactly this replica's head (the probe's answer) converges it
-       * and records the tracking frontier. Anything else needs the local copy to be dropped and
-       * refetched (an application decision, which preserves the copy), or a re-discovery that
-       * names a provider holding this lineage. Both are reported, at O(1), as this failure.
-       */
-      /**
-       * Establish this round's base when none is tracked, without walking any history it can avoid.
-       *
-       * The upstream just named its own frontier. If that commit is in THIS replica's lineage, it is
-       * a common admitted base by definition — both sides hold it — and adopting it turns the round
-       * into an ordinary fast-forward: the offer carries only the suffix above it, the fetch can name
-       * it as a truthful `have`, and convergence has the base the kernel requires. One commit walk
-       * (no change decoding, no pack, no network) decides it.
-       *
-       * If it is not in this replica's lineage, no base exists to establish and the round is refused
-       * (#noCommonBase) before it leases, fetches or plans anything.
-       *
-       * A kernel without the commit walk cannot be asked, so it keeps the previous behaviour.
+       * Establish a cheap base when the provider's current tip is in our local chain.
+       * A negative answer means the base is unknown: both sides may have advanced from
+       * an earlier shared commit. Acquire the candidate and let the kernel discover
+       * and judge that history. A tracking bookmark is not an admission prerequisite.
        */
       #establishBase(upstreamHead) {
-        if (!this.#noCommonBase() || !this.#kernel.historySummary) return true;
+        if (!this.#missingTrackedBase() || !this.#kernel.historySummary) return true;
         const summary = this.#kernel.historySummary(this.#mount, this.#requestId, upstreamHead, this.#localHead);
         if (!summary.reachedBase) return false;
         this.#previousHead = upstreamHead;
@@ -23066,26 +23072,9 @@ var init_workspace_sync = __esm({
       get establishedBase() {
         return this.#establishedBase;
       }
-      #noCommonBase() {
+      #missingTrackedBase() {
         return this.#previousHead === void 0 && this.#localHead !== void 0 && this.#replaceLocalHead === void 0;
       }
-      #noCommonBaseResult() {
-        return this.#finish(create55(SyncWorkspaceResponseSchema, {
-          workspace: this.#mount.workspace,
-          ...this.#localHead === void 0 ? {} : { currentHead: this.#localHead },
-          stillAhead: true,
-          ...this.#offerReceipt === void 0 ? {} : { offerReceipt: this.#offerReceipt },
-          pushError: create55(RuntimeTransportFailureSchema, {
-            endpoint: this.#offerEndpoint(),
-            status: 409,
-            refused: true,
-            message: NO_COMMON_BASE
-          }),
-          timings: create55(SyncPhaseTimingsSchema, {
-            convergeMillis: elapsedMillis(this.#clock, this.#started)
-          })
-        }));
-      }
       #holdsLocalWork() {
         return this.#command.admit && !!this.#localHead && this.#localHead !== this.#previousHead;
       }
@@ -23093,18 +23082,18 @@ var init_workspace_sync = __esm({
       #pullBeforeOffer() {
         this.#offerAfterConverge = true;
         this.#rebaseFrom = this.#previousHead;
-        this.#offerRequestId = `${this.#binding.replicaId}:${this.#requestId}:${this.workId}:pull-${this.#rebases}`;
+        const requestId = `${this.#binding.replicaId}:${this.#requestId}:${this.workId}:pull-${this.#rebases}`;
         return this.#beginOffer(encodeInlineCustodyOffer({
           session: this.#binding.replicaId,
-          requestId: this.#offerRequestId,
+          requestId,
           ...this.#previousHead === void 0 ? {} : { baseHead: this.#previousHead },
           observedHead: this.#localHead,
           intents: []
-        }));
+        }), { case: "awaiting", requestId });
       }
-      #leaseEffect() {
+      #leaseEffect(afterPlacement) {
         const token = this.#authToken();
-        this.#phase = WorkspaceSyncPhase.Lease;
+        this.#state = { phase: WorkspaceSyncPhase.Lease, ...afterPlacement ? { afterPlacement } : {} };
         return this.#remember({
           case: "pending",
           value: create55(CorrespondencePendingSchema, {
@@ -23133,35 +23122,38 @@ var init_workspace_sync = __esm({
             `workspace sync '${this.workId}' expected effect '${expected}', received '${receipt.effectId}'`
           );
         }
+        const state = this.#state;
         const previousReceipt = this.#lastReceiptEffectId;
         this.#lastReceiptEffectId = receipt.effectId;
         try {
           if (receipt.outcome.case === "failure") {
-            if (this.#phase === WorkspaceSyncPhase.Discover) return this.#openRound();
+            if (state.phase === WorkspaceSyncPhase.Discover) return this.#openRound();
             return this.#transportFailure(
               receipt.outcome.value.message,
               receipt.outcome.value.reason === PeerEffectFailureReason.OFFLINE
             );
           }
-          if (this.#phase === WorkspaceSyncPhase.Offer || this.#phase === WorkspaceSyncPhase.Probe) return this.#acceptOffer(receipt);
-          if (this.#phase === WorkspaceSyncPhase.Lease) return this.#acceptLease(receipt);
-          if (this.#phase === WorkspaceSyncPhase.Discover) return this.#acceptDiscovery(receipt);
-          if (this.#phase === WorkspaceSyncPhase.Placement) {
-            if (!this.#placementFetch || !this.#lease) throw new Error("placement transfer lost its lease");
-            this.#placementFetch.accept(receipt);
+          if (state.phase === WorkspaceSyncPhase.Offer || state.phase === WorkspaceSyncPhase.Probe) {
+            return this.#acceptOffer(receipt, state);
+          }
+          if (state.phase === WorkspaceSyncPhase.Lease) return this.#acceptLease(receipt, state);
+          if (state.phase === WorkspaceSyncPhase.Discover) return this.#acceptDiscovery(receipt);
+          if (state.phase === WorkspaceSyncPhase.Placement) {
+            state.transfer.accept(receipt);
             this.#placementFetched?.();
-            if (this.#afterPlacement) return this.#finish(this.#afterPlacement);
-            return this.#beginMainFetch(this.#lease);
+            if (state.afterPlacement) return this.#finish(state.afterPlacement);
+            return this.#beginMainFetch(state.lease);
           }
-          if (this.#phase === WorkspaceSyncPhase.Fetch) return this.#acceptFetch(receipt);
+          if (state.phase === WorkspaceSyncPhase.Fetch) return this.#acceptFetch(receipt, state);
           throw new Error(`workspace sync '${this.workId}' is already complete`);
         } catch (error) {
           this.#lastReceiptEffectId = previousReceipt;
           throw error;
         }
       }
-      #beginOffer(body, probe = false) {
-        this.#phase = probe ? WorkspaceSyncPhase.Probe : WorkspaceSyncPhase.Offer;
+      #beginOffer(body, exchange, probe = false) {
+        const phase = probe ? WorkspaceSyncPhase.Probe : WorkspaceSyncPhase.Offer;
+        this.#state = { phase, exchange };
         const token = this.#authToken();
         this.#pushBytes += BigInt(body.byteLength);
         return this.#remember({
@@ -23171,7 +23163,7 @@ var init_workspace_sync = __esm({
             effect: {
               case: "http",
               value: create55(PeerHttpEffectSchema, {
-                effectId: `${this.workId}:${this.#phase}`,
+                effectId: `${this.workId}:${phase}`,
                 method: PeerHttpMethod.POST,
                 url: this.#offerEndpoint(),
                 contentType: CUSTODY_OFFER_MEDIA_TYPE,
@@ -23188,28 +23180,30 @@ var init_workspace_sync = __esm({
           })
         });
       }
-      #acceptOffer(receipt) {
-        this.#pushMillis = this.#offerStarted === void 0 ? 0 : elapsedMillis(this.#clock, this.#offerStarted);
+      #acceptOffer(receipt, state) {
+        const exchange = state.exchange;
+        this.#pushMillis = exchange.startedAt === void 0 ? 0 : elapsedMillis(this.#clock, exchange.startedAt);
         if (receipt.outcome.case !== "response") {
           throw new Error("platform returned the wrong receipt for a custody offer");
         }
-        const response = receipt.outcome.value;
-        if (!response.contentType?.includes(CUSTODY_OFFER_RESULT_MEDIA_TYPE)) {
+        const outcome = settleCustodyOfferExchange(exchange, receipt.outcome.value);
+        if (outcome.case === "maintenance") {
+          return this.#finishOfferOutcome(true, false);
+        }
+        if (outcome.case === "unexpected") {
           this.#pushError = create55(RuntimeTransportFailureSchema, {
             endpoint: this.#offerEndpoint(),
-            status: response.status,
+            status: outcome.status,
             refused: false,
-            message: `Sync received an unexpected server response (HTTP ${response.status}; ${response.contentType || "no content type"}). No custody receipt was returned.`
+            message: `Sync received an unexpected server response (HTTP ${outcome.status}; ${outcome.contentType || "no content type"}). No custody receipt was returned.`
           });
           return this.#finishOfferOutcome(false);
         }
-        if (!this.#offerRequestId) throw new Error("custody offer has no request identity");
-        const outcome = decodeCustodyOffer(response.body, this.#offerRequestId);
-        this.#offerReceipt = custodyOfferReceipt(this.#offerRequestId, outcome);
+        this.#offerReceipt = outcome.receipt;
         if (outcome.case === "failure") {
           this.#pushError = create55(RuntimeTransportFailureSchema, {
             endpoint: this.#offerEndpoint(),
-            status: response.status,
+            status: outcome.status,
             refused: false,
             message: `${outcome.value.code}: ${outcome.value.message}`
           });
@@ -23218,12 +23212,12 @@ var init_workspace_sync = __esm({
         if (outcome.case === "blocked") {
           return this.#finishOfferOutcome(true);
         }
-        if (response.status < 200 || response.status >= 300) {
+        if (outcome.status < 200 || outcome.status >= 300) {
           this.#pushError = create55(RuntimeTransportFailureSchema, {
             endpoint: this.#offerEndpoint(),
-            status: response.status,
-            refused: response.status === 422,
-            message: `custody offer returned an admission verdict with HTTP ${response.status}`
+            status: outcome.status,
+            refused: outcome.status === 422,
+            message: `custody offer returned an admission verdict with HTTP ${outcome.status}`
           });
           return this.#finishOfferOutcome(false);
         }
@@ -23231,8 +23225,7 @@ var init_workspace_sync = __esm({
         this.#desiredHead = admission.main || void 0;
         if (!this.#desiredHead) return this.#transportFailure("resident peer returned no admitted frontier", false);
         this.#candidateDurable = admission.sealedMain === this.#desiredHead;
-        if (this.#phase === WorkspaceSyncPhase.Probe && this.#desiredHead !== this.#localHead) {
-          if (!this.#establishBase(this.#desiredHead)) return this.#noCommonBaseResult();
+        if (state.phase === WorkspaceSyncPhase.Probe && this.#desiredHead !== this.#localHead) {
           if (this.#alreadyJudged(this.#desiredHead)) {
             return this.#finish(create55(SyncWorkspaceResponseSchema, {
               workspace: this.#mount.workspace,
@@ -23244,6 +23237,22 @@ var init_workspace_sync = __esm({
               offerReceipt: this.#offerReceipt
             }));
           }
+          if (!this.#establishBase(this.#desiredHead)) {
+            this.#offerAfterConverge = this.#command.admit;
+            this.#rebaseFrom = void 0;
+            return this.#leaseEffect();
+          }
+          if (this.#establishedBase && !this.#candidateDurable && this.#kernel.resolveRef(this.#mount, this.#requestId, trackedMain) === void 0) {
+            return this.#finish(create55(SyncWorkspaceResponseSchema, {
+              workspace: this.#mount.workspace,
+              currentHead: this.#localHead,
+              previousHead: this.#previousHead,
+              stillAhead: true,
+              directOfferDeferred: true,
+              reconnectRequired: false,
+              offerReceipt: this.#offerReceipt
+            }));
+          }
           if (this.#probeOnly) {
             this.#needsReconciliation = true;
             return this.#finish(create55(SyncWorkspaceResponseSchema, {
@@ -23289,11 +23298,11 @@ var init_workspace_sync = __esm({
           return this.#converge(this.#desiredHead, admission.resultPack.byteLength, 0);
         }
         if (this.#desiredHead === this.#previousHead) return this.#converge(this.#desiredHead, 0, 0);
-        if (!this.#establishBase(this.#desiredHead)) return this.#noCommonBaseResult();
+        this.#establishBase(this.#desiredHead);
         if (admission.recoveryRequired !== false) return this.#leaseEffect();
         return this.#transportFailure("resident peer supplied neither the missing delta nor a history gap", false);
       }
-      #acceptLease(receipt) {
+      #acceptLease(receipt, state) {
         if (receipt.outcome.case !== "response") {
           throw new Error("platform returned the wrong receipt for a Git read lease");
         }
@@ -23309,21 +23318,25 @@ var init_workspace_sync = __esm({
         this.#leased = true;
         const frontier = this.#placementFrontier();
         if (frontier) {
-          this.#placementFetch = new PlacementFetch(
+          const transfer = new PlacementFetch(
             this.#kernel,
             this.#mount,
             this.#requestId,
             this.workId,
             frontier
           );
-          const pending = this.#placementFetch.start(lease);
+          const pending = transfer.start(lease);
           if (pending) {
-            this.#phase = WorkspaceSyncPhase.Placement;
-            this.#lease = lease;
+            this.#state = {
+              phase: WorkspaceSyncPhase.Placement,
+              transfer,
+              lease,
+              ...state.afterPlacement ? { afterPlacement: state.afterPlacement } : {}
+            };
             return this.#remember({ case: "pending", value: pending });
           }
         }
-        if (this.#afterPlacement) return this.#finish(this.#afterPlacement);
+        if (state.afterPlacement) return this.#finish(state.afterPlacement);
         return this.#beginMainFetch(lease);
       }
       /** The provider's placement frontier as this round knows it: what the directory named in this
@@ -23343,8 +23356,7 @@ var init_workspace_sync = __esm({
         if (!new PlacementFetch(this.#kernel, this.#mount, this.#requestId, this.workId, frontier).wanted()) {
           return void 0;
         }
-        this.#afterPlacement = presented;
-        return this.#leaseEffect();
+        return this.#leaseEffect(presented);
       }
       #acceptDiscovery(receipt) {
         this.#directoryAnswered?.();
@@ -23368,9 +23380,11 @@ var init_workspace_sync = __esm({
         return this.#replaceLocalHead !== void 0 || this.#localHead === void 0 && this.#previousHead === void 0;
       }
       #beginMainFetch(lease) {
-        this.#phase = WorkspaceSyncPhase.Fetch;
         const lawProducts = this.#lawProductsAlongside();
-        this.#fetchStarted = this.#clock.monotonicNanoseconds();
+        this.#state = {
+          phase: WorkspaceSyncPhase.Fetch,
+          startedAt: this.#clock.monotonicNanoseconds()
+        };
         const haves = this.#replaceLocalHead !== void 0 ? this.#repairMissingCommit ? [] : [this.#kernel.resolveRef(this.#mount, this.#requestId, deferredRemote)].filter(
           (head) => !!head
         ) : [...new Set([
@@ -23401,7 +23415,7 @@ var init_workspace_sync = __esm({
           })
         });
       }
-      #acceptFetch(receipt) {
+      #acceptFetch(receipt, state) {
         if (receipt.outcome.case !== "gitFetch") {
           throw new Error("platform returned the wrong receipt for a Git object fetch");
         }
@@ -23411,7 +23425,7 @@ var init_workspace_sync = __esm({
         if (fetched.pack.byteLength > 0) {
           this.#kernel.applyPack(this.#mount, this.#requestId, fetched.pack, fetched.head, fetched.shallow);
         }
-        const prefetchMillis = this.#fetchStarted === void 0 ? 0 : elapsedMillis(this.#clock, this.#fetchStarted);
+        const prefetchMillis = elapsedMillis(this.#clock, state.startedAt);
         const candidateHead = this.#receiveState ? this.#kernel.resolveStatePosition?.(this.#mount, this.#requestId, fetched.head, this.#receiveState) : fetched.head;
         if (!candidateHead) {
           return this.#finish(create55(SyncWorkspaceResponseSchema, {
@@ -23507,7 +23521,7 @@ var init_workspace_sync = __esm({
         }
       }
       #converge(candidateHead, receivedBytes, prefetchMillis) {
-        if (!this.#establishBase(candidateHead)) return this.#noCommonBaseResult();
+        this.#establishBase(candidateHead);
         this.#beforeConverge?.(candidateHead, this.#previousHead);
         const convergeStarted = this.#clock.monotonicNanoseconds();
         let judged;
@@ -23762,11 +23776,11 @@ var init_workspace_sync = __esm({
             pushBytes: this.#pushBytes,
             pullBytes: BigInt(receivedBytes),
             serverMillis: this.#admissionSummary?.serverMillis ?? 0,
-            offerInPush: this.#offerRequestId !== void 0
+            offerInPush: this.#pushBytes > 0n
           })
         });
       }
-      #finishOfferOutcome(blocked) {
+      #finishOfferOutcome(blocked, reconnectRequired = true) {
         return this.#finish(create55(SyncWorkspaceResponseSchema, {
           workspace: this.#mount.workspace,
           previousHead: this.#previousHead,
@@ -23774,7 +23788,7 @@ var init_workspace_sync = __esm({
           admitted: BigInt(this.#admissionSummary?.admittedIntentIds.length ?? 0),
           refused: BigInt((this.#admissionSummary?.refusedMessages.length ?? 0) + this.#parkedLocal),
           deferred: BigInt(this.#admissionSummary ? this.#admissionSummary.blockedMessages.length + this.#admissionSummary.deadLetteredMessages.length + this.#admissionSummary.quarantinedMessages.length + this.#admissionSummary.deferredMessages.length : blocked ? 1 : 0),
-          reconnectRequired: true,
+          reconnectRequired,
           stillAhead: this.#localHead !== this.#previousHead,
           directOfferDeferred: blocked,
           offerReceipt: this.#offerReceipt,
@@ -23788,15 +23802,16 @@ var init_workspace_sync = __esm({
         }));
       }
       #transportFailure(message, offline, status2 = -1) {
-        const pushFailed = this.#phase === WorkspaceSyncPhase.Offer;
+        const state = this.#state;
+        const pushFailed = state.phase === WorkspaceSyncPhase.Offer;
         const failedEndpoint = this.#offerEndpoint();
         const failure = create55(RuntimeTransportFailureSchema, {
           endpoint: pushFailed ? failedEndpoint : this.#binding.cloud ?? "",
           status: status2,
           message
         });
-        if (pushFailed) {
-          this.#pushMillis = this.#offerStarted === void 0 ? 0 : elapsedMillis(this.#clock, this.#offerStarted);
+        if (state.phase === WorkspaceSyncPhase.Offer) {
+          this.#pushMillis = state.exchange.startedAt === void 0 ? 0 : elapsedMillis(this.#clock, state.exchange.startedAt);
           this.#pushError = failure;
         }
         return this.#finish(create55(SyncWorkspaceResponseSchema, {
@@ -23813,7 +23828,7 @@ var init_workspace_sync = __esm({
             pushMillis: this.#pushMillis,
             pushBytes: this.#pushBytes,
             prefetchMillis: elapsedMillis(this.#clock, this.#started),
-            offerInPush: this.#offerRequestId !== void 0
+            offerInPush: this.#pushBytes > 0n
           })
         }));
       }
@@ -23823,7 +23838,7 @@ var init_workspace_sync = __esm({
         return step;
       }
       #finish(value) {
-        this.#phase = WorkspaceSyncPhase.Done;
+        this.#state = { phase: WorkspaceSyncPhase.Done };
         this.#current = void 0;
         return this.#remember({ case: "synced", value });
       }
@@ -26040,13 +26055,21 @@ var init_correspondence_desk = __esm({
       }
       #observeSyncResult(requestId, workId2, result) {
         const timings = result.timings;
+        const receipt = result.offerReceipt?.outcome;
+        const admission = receipt?.case === "admission" ? receipt.value : void 0;
         this.#events.instant("peer.follow.sync-result", {
           request: create60(RuntimeRequestSchema, { protocolVersion: 2, requestId }),
           workspace: result.workspace
         }, {
           "sync.workId": workId2,
           ...result.currentHead ? { "sync.head": result.currentHead } : {},
+          ...result.previousHead ? { "sync.previousHead": result.previousHead } : {},
+          ...admission?.main ? { "sync.providerHead": admission.main } : {},
+          ...admission?.sealedMain ? { "sync.sealedHead": admission.sealedMain } : {},
           "sync.stillAhead": result.stillAhead,
+          "sync.reconnectRequired": result.reconnectRequired,
+          "sync.refused": result.refused,
+          "sync.deferred": result.deferred,
           "sync.directOfferDeferred": result.directOfferDeferred,
           "sync.offline": result.offline,
           ...timings ? {
@@ -32348,8 +32371,19 @@ async function ensureApplicationWorkspace(application, opts = {}) {
   }
   const statusUrl = `${cloud}/v2/workspaces/${encodeURIComponent(application)}`;
   const current = await fetch(statusUrl).catch(() => null);
-  if (current?.ok) {
-    const status2 = await current.json().catch(() => null);
+  const status2 = current?.ok ? await current.json().catch(() => null) : null;
+  let unborn = false;
+  if (current?.ok && !status2?.lineage && !status2?.durableHead && !status2?.sealedHead) {
+    const domains2 = await fetch(`${statusUrl}/domains`);
+    if (domains2.status === 409) {
+      const body2 = await domains2.json().catch(() => null);
+      unborn = typeof body2?.error === "string" && body2.error.includes("unborn");
+    }
+    if (!unborn && !domains2.ok) {
+      throw new Error(`could not establish whether application '${application}' has custody (${domains2.status})`);
+    }
+  }
+  if (current?.ok && !unborn) {
     const principal = String(status2?.lineage?.principal ?? "");
     const actualParent = String(status2?.lineage?.parent ?? "");
     const expectedParent = requestedParent === "root" ? "" : requestedParent;
@@ -32385,7 +32419,7 @@ async function ensureApplicationWorkspace(application, opts = {}) {
       ...principal !== "" && session !== "" && sameIdentity(principal, session) ? { deployPrincipal: principal } : {}
     };
   }
-  if (current !== null && current.status !== 404 && current.status !== 409) {
+  if (current !== null && !unborn && current.status !== 404 && current.status !== 409) {
     throw new Error(`could not inspect deploy target '${application}' (${current.status}); refusing to guess that it is unborn`);
   }
   if (requestedParent !== void 0) {
@@ -34265,6 +34299,7 @@ var init_commands = __esm({
       "test",
       "doctor",
       "cloud",
+      "console",
       "status",
       "model",
       "platform",
@@ -34315,6 +34350,19 @@ var init_help = __esm({
     "use strict";
     init_commands();
     HELP = {
+      console: {
+        usage: "githolon console <login|logout|workspaces|universe|rollouts>",
+        what: "Use a downloaded console API credential. The browser and CLI use the same console API.\nCredentials are stored locally with owner-only permissions; tokens are never printed.",
+        flags: [
+          ["login --file <credential.json>", "verify and save a downloaded credential"],
+          ["logout", "remove the local credential; revoke other copies in the console"],
+          ["workspaces | universe", "read registered workspaces or their live subtree as JSON"],
+          ["rollouts [show <id>]", "list runs or inspect one"],
+          ["rollouts start --file <request.json>", "submit {payload:{kind:law,source:workspace},only:[workspace]} (JSON strings quoted)"],
+          ["rollouts resume <id>", "retry an existing law rollout"]
+        ],
+        examples: ["githolon console login --file nomos-console-example.json", "githolon console workspaces"]
+      },
       compile: {
         usage: "githolon compile [config] [--require-usdcat]",
         what: "Compile typed authoring input into canonical OpenUSD. nomos.project.ts emits the readable law\nclosure, its .law.usdz transport archive, and generated clients; nomos.application.ts emits the application\ncomposition stage. TypeScript is authoring input only: the kernel admits and custodies USD.",
@@ -34646,6 +34694,84 @@ var init_help = __esm({
   }
 });
 
+// src/console.ts
+var console_exports = {};
+__export(console_exports, {
+  consoleCommand: () => consoleCommand,
+  consoleCredential: () => consoleCredential,
+  consoleRequest: () => consoleRequest
+});
+import { URL as URL2 } from "node:url";
+import { chmodSync as chmodSync3, mkdirSync as mkdirSync10, readFileSync as readFileSync11, renameSync as renameSync4, rmSync as rmSync5, writeFileSync as writeFileSync11 } from "node:fs";
+import { join as join15 } from "node:path";
+import { randomUUID as randomUUID4 } from "node:crypto";
+function consoleCredential(value) {
+  if (!value || typeof value !== "object") throw new Error("Invalid console credential file");
+  const v = value;
+  if (v.format !== "nomos-console-credential-v1" || typeof v.endpoint !== "string" || typeof v.tenant !== "string" || typeof v.token !== "string") throw new Error("Invalid console credential file");
+  const endpoint = new URL2(v.endpoint);
+  if (endpoint.protocol !== "https:" || endpoint.username || endpoint.password || endpoint.pathname !== "/" || endpoint.search || endpoint.hash) throw new Error("Console endpoint must be an HTTPS origin");
+  const token = /^nomos_api\.([a-z][a-z0-9-]{1,62})\.[a-f0-9]{32}\.[A-Za-z0-9_-]{43}$/.exec(v.token);
+  if (!token || token[1] !== v.tenant) throw new Error("Credential does not match its workspace account");
+  return { format: v.format, endpoint: endpoint.origin, tenant: v.tenant, token: v.token };
+}
+async function consoleRequest(profile, path4, method = "GET", body, fetcher = fetch) {
+  const response = await fetcher(profile.endpoint + path4, {
+    method,
+    redirect: "error",
+    signal: AbortSignal.timeout(12e4),
+    headers: { authorization: `Bearer ${profile.token}`, "content-type": "application/json" },
+    ...body !== void 0 ? { body: JSON.stringify(body) } : {}
+  });
+  const result = await response.json();
+  if (!response.ok) throw new Error(`Console ${response.status}: ${result.error ?? "request refused"}`);
+  return result;
+}
+async function consoleCommand(args) {
+  const file = join15(configDir(), "console.json");
+  if (args[0] === "login" && args.length === 3 && args[1] === "--file") {
+    const profile2 = consoleCredential(JSON.parse(readFileSync11(args[2], "utf8")));
+    await consoleRequest(profile2, `/v1/tenants/${profile2.tenant}/workspaces`);
+    mkdirSync10(configDir(), { recursive: true });
+    const temporary = `${file}.${randomUUID4()}.tmp`;
+    try {
+      writeFileSync11(temporary, JSON.stringify(profile2) + "\n", { mode: 384, flag: "wx" });
+      renameSync4(temporary, file);
+      chmodSync3(file, 384);
+    } finally {
+      rmSync5(temporary, { force: true });
+    }
+    console.log(`Console credential saved for ${profile2.tenant} at ${profile2.endpoint}`);
+    return 0;
+  }
+  if (args[0] === "logout" && args.length === 1) {
+    rmSync5(file, { force: true });
+    console.log("Local console credential removed. Revoke the key in the console to disable other copies.");
+    return 0;
+  }
+  const profile = consoleCredential(JSON.parse(readFileSync11(file, "utf8")));
+  const root = `/v1/tenants/${encodeURIComponent(profile.tenant)}`;
+  let result;
+  if (args[0] === "workspaces" && args.length === 1) result = await consoleRequest(profile, `${root}/workspaces`);
+  else if (args[0] === "universe" && args.length === 1) result = await consoleRequest(profile, "/v1/universe");
+  else if (args[0] === "rollouts" && args.length === 1) result = await consoleRequest(profile, `${root}/rollouts`);
+  else if (args[0] === "rollouts" && args[1] === "show" && args.length === 3) result = await consoleRequest(profile, `${root}/rollouts/${encodeURIComponent(args[2])}`);
+  else if (args[0] === "rollouts" && args[1] === "resume" && args.length === 3) result = await consoleRequest(profile, `${root}/rollouts/${encodeURIComponent(args[2])}/resume`, "POST", {});
+  else if (args[0] === "rollouts" && args[1] === "start" && args[2] === "--file" && args.length === 4) {
+    const input = JSON.parse(readFileSync11(args[3], "utf8"));
+    if (input?.payload?.kind !== "law") throw new Error("Console CLI supports law rollouts only");
+    result = await consoleRequest(profile, `${root}/rollouts`, "POST", input);
+  } else throw new Error("See githolon console --help for supported commands");
+  console.log(JSON.stringify(result, null, 2));
+  return 0;
+}
+var init_console = __esm({
+  "src/console.ts"() {
+    "use strict";
+    init_cloud();
+  }
+});
+
 // src/mcp.ts
 var mcp_exports = {};
 __export(mcp_exports, {
@@ -35576,7 +35702,7 @@ var init_law_command_projection = __esm({
 });
 
 // src/law_encoder.ts
-import { readFileSync as readFileSync11 } from "node:fs";
+import { readFileSync as readFileSync12 } from "node:fs";
 async function loadInstalledLaw(input) {
   const file = discoverLawUsdz(input.cwd ?? process.cwd(), input.file);
   const inspected = await inspectLawArchive(input.cloud, file);
@@ -35588,7 +35714,7 @@ async function loadInstalledLaw(input) {
     );
   }
   const projection = parseLawCommandProjection(
-    readLawClosureAsset(new Uint8Array(readFileSync11(file)), COMMAND_PROJECTION)
+    readLawClosureAsset(new Uint8Array(readFileSync12(file)), COMMAND_PROJECTION)
   );
   return { identity: inspected.identity, servedDomains: served, projection, file };
 }
@@ -36074,8 +36200,8 @@ __export(platform_exports, {
   storeSeatDevice: () => storeSeatDevice
 });
 import { createHash as createHash6 } from "node:crypto";
-import { existsSync as existsSync14, mkdirSync as mkdirSync10, readFileSync as readFileSync12, writeFileSync as writeFileSync11 } from "node:fs";
-import { join as join16 } from "node:path";
+import { existsSync as existsSync14, mkdirSync as mkdirSync11, readFileSync as readFileSync13, writeFileSync as writeFileSync12 } from "node:fs";
+import { join as join17 } from "node:path";
 function refuse(message) {
   throw new PlatformRefusal(message);
 }
@@ -36149,7 +36275,7 @@ async function readModelAuthority(cloud, platform, seatedAt) {
 function loadSeatDevice(workspace) {
   const path4 = seatDevicePath(workspace);
   if (!existsSync14(path4)) return void 0;
-  const stored = JSON.parse(readFileSync12(path4, "utf8"));
+  const stored = JSON.parse(readFileSync13(path4, "utf8"));
   const publicKey = stored.publicKey ?? (stored.publicKeyHex === void 0 ? void 0 : Buffer.from(stored.publicKeyHex, "hex").toString("base64"));
   if (typeof stored.secret !== "string" || publicKey === void 0 || typeof stored.keyHash !== "string") {
     refuse(`${path4} is not a stored device key {secret, publicKey, keyHash}`);
@@ -36158,8 +36284,8 @@ function loadSeatDevice(workspace) {
 }
 function storeSeatDevice(workspace, device) {
   const path4 = seatDevicePath(workspace);
-  mkdirSync10(join16(path4, ".."), { recursive: true });
-  writeFileSync11(path4, JSON.stringify(device, null, 2) + "\n", { mode: 384 });
+  mkdirSync11(join17(path4, ".."), { recursive: true });
+  writeFileSync12(path4, JSON.stringify(device, null, 2) + "\n", { mode: 384 });
 }
 async function mintSeatDevice(cloud) {
   const generated = await generateDeviceKey(cloud);
@@ -36382,7 +36508,7 @@ async function platformAuthor(workspace, directiveId, opts) {
   }
 }
 function readPayload(opts) {
-  const raw = opts.payloadFile !== void 0 ? readFileSync12(opts.payloadFile, "utf8") : opts.payload;
+  const raw = opts.payloadFile !== void 0 ? readFileSync13(opts.payloadFile, "utf8") : opts.payload;
   if (raw === void 0 || raw.trim() === "") refuse("author needs --payload <json> or --payload-file <file>");
   let parsed;
   try {
@@ -36594,7 +36720,7 @@ var init_platform = __esm({
     PlatformRefusal = class extends Error {
     };
     ws = (name) => encodeURIComponent(name);
-    seatDevicePath = (workspace) => join16(configDir(), `seat-device-${workspace}.json`);
+    seatDevicePath = (workspace) => join17(configDir(), `seat-device-${workspace}.json`);
     SEAT_CONVERGENCE_MILLIS = 18e4;
   }
 });
@@ -36660,8 +36786,8 @@ var init_dlq = __esm({
 
 // src/custodian.ts
 import { createHash as createHash7, createPrivateKey as createPrivateKey2, createPublicKey as createPublicKey2 } from "node:crypto";
-import { existsSync as existsSync15, readFileSync as readFileSync13 } from "node:fs";
-import { dirname as dirname5, isAbsolute as isAbsolute3, join as join17, resolve as resolve6 } from "node:path";
+import { existsSync as existsSync15, readFileSync as readFileSync14 } from "node:fs";
+import { dirname as dirname5, isAbsolute as isAbsolute3, join as join18, resolve as resolve6 } from "node:path";
 import { fileURLToPath as fileURLToPath3, pathToFileURL as pathToFileURL3 } from "node:url";
 import { create as create80 } from "@bufbuild/protobuf";
 import { AnySchema as AnySchema3 } from "@bufbuild/protobuf/wkt";
@@ -36709,7 +36835,7 @@ async function resolveCustodianCredential(reference) {
   }
   if (scheme === "file") {
     if (rest === "" || !existsSync15(rest)) throw new Error(`--custodian-key file:<path> \u2014 no file at '${rest}'`);
-    return fromSeed(custodianSeedFromText(readFileSync13(rest, "utf8"), rest), `file:${rest}`);
+    return fromSeed(custodianSeedFromText(readFileSync14(rest, "utf8"), rest), `file:${rest}`);
   }
   if (scheme === "env") {
     const value = process.env[rest];
@@ -36736,7 +36862,7 @@ async function resolveCustodianCredential(reference) {
 function readCustodianChain(file) {
   if (file === void 0) return [];
   if (!existsSync15(file)) throw new Error(`--chain <file> \u2014 no file at '${file}'`);
-  const parsed = JSON.parse(readFileSync13(file, "utf8"));
+  const parsed = JSON.parse(readFileSync14(file, "utf8"));
   const links = Array.isArray(parsed) ? parsed : typeof parsed === "object" && parsed !== null && Array.isArray(parsed.certChain) ? parsed.certChain : void 0;
   if (links === void 0) {
     throw new Error(
@@ -36786,7 +36912,7 @@ function scarFromVerdict(verdict) {
 }
 function frameworkReceptionPath(here = moduleDirectory()) {
   const candidates = [
-    join17(here, "framework", "nomos.reception.mjs"),
+    join18(here, "framework", "nomos.reception.mjs"),
     resolve6(here, "../../cloud/cloudflare-shell/domains/build/nomos/nomos.reception.mjs")
   ];
   const found = candidates.find((candidate) => existsSync15(candidate));
@@ -36864,7 +36990,7 @@ async function encodeDirectiveCall(receptionPath, domain, directiveId, workspace
   return captured;
 }
 function readPayload2(opts) {
-  const text2 = opts.payloadFile !== void 0 ? readFileSync13(opts.payloadFile, "utf8") : opts.payload;
+  const text2 = opts.payloadFile !== void 0 ? readFileSync14(opts.payloadFile, "utf8") : opts.payload;
   if (text2 === void 0) throw new Error("pass the directive's payload with --payload <json> or --payload-file <file>");
   const parsed = JSON.parse(text2);
   if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
@@ -37204,8 +37330,8 @@ Options
 });
 
 // src/cli.ts
-import { existsSync as existsSync16, readFileSync as readFileSync14 } from "node:fs";
-import { dirname as dirname6, join as join18, resolve as resolve7 } from "node:path";
+import { existsSync as existsSync16, readFileSync as readFileSync15 } from "node:fs";
+import { dirname as dirname6, join as join19, resolve as resolve7 } from "node:path";
 import { pathToFileURL as pathToFileURL4, fileURLToPath as fileURLToPath4 } from "node:url";
 
 // src/generate.ts
@@ -37906,6 +38032,9 @@ async function main(argv) {
     process.stdout.write(USAGE2);
     return 0;
   }
+  if (argv[0] === "console") {
+    return (await Promise.resolve().then(() => (init_console(), console_exports))).consoleCommand(argv.slice(1));
+  }
   if (argv[0] === "compile") {
     return runCompileCommand(argv.slice(1));
   }