githolon 0.110.1 → 0.111.0

package/dist/compile_mountability_entry.js

@@ -16883,7 +16883,7 @@ import { create as create54, fromBinary as fromBinary20 } from "@bufbuild/protob
 function releaseSyncJudgment(workspace) {
   judgedThisLifetime.delete(workspace);
 }
-var PLACEMENT_REF3, LAW_PRODUCTS_MEDIA_TYPE, WorkspaceSyncPhase, trackedMain, NO_COMMON_BASE, deferredRemote, deferredLocal, judgedThisLifetime, MAX_REBASES_PER_ROUND, elapsedMillis, WorkspaceSyncWork;
+var PLACEMENT_REF3, LAW_PRODUCTS_MEDIA_TYPE, WorkspaceSyncPhase, trackedMain, deferredRemote, deferredLocal, judgedThisLifetime, MAX_REBASES_PER_ROUND, elapsedMillis, WorkspaceSyncWork;
 var init_workspace_sync = __esm({
   "../peer-office/src/runtime/workspace_sync.ts"() {
     "use strict";
@@ -16909,7 +16909,6 @@ var init_workspace_sync = __esm({
       Done: "done"
     });
     trackedMain = "refs/remotes/nomos/main";
-    NO_COMMON_BASE = "this replica holds local history with no frontier its upstream ever confirmed; convergence needs a common admitted base \u2014 drop the local copy to refetch it, or re-discover a provider holding this lineage";
     deferredRemote = "refs/remotes/nomos/deferred";
     deferredLocal = "refs/nomos/sync-deferred-local";
     judgedThisLifetime = /* @__PURE__ */ new Map();
@@ -17117,38 +17116,13 @@ var init_workspace_sync = __esm({
         }), { case: "awaiting", requestId });
       }
       /**
-       * NO COMMON BASE — a round that cannot converge, and must not pay for history to find out.
-       *
-       * This replica holds a non-empty ledger but has never recorded a frontier its upstream
-       * confirmed (`refs/remotes/nomos/main` is absent). The kernel refuses convergence in that
-       * state ("a non-empty live ledger requires a common admitted base"), so every step after the
-       * O(1) frontier probe is wasted work — and it is not cheap waste: the fetch negotiates with
-       * no `have` (a full-history pack), and the dependency planner decodes EVERY intent from
-       * genesis and inspects every change, once per round. That is O(history) per follow round,
-       * repeated at every retry, for a round that can only end in a refusal.
-       *
-       * The one base this round can establish costs nothing and is established before this is
-       * asked: an upstream holding exactly this replica's head (the probe's answer) converges it
-       * and records the tracking frontier. Anything else needs the local copy to be dropped and
-       * refetched (an application decision, which preserves the copy), or a re-discovery that
-       * names a provider holding this lineage. Both are reported, at O(1), as this failure.
-       */
-      /**
-       * Establish this round's base when none is tracked, without walking any history it can avoid.
-       *
-       * The upstream just named its own frontier. If that commit is in THIS replica's lineage, it is
-       * a common admitted base by definition — both sides hold it — and adopting it turns the round
-       * into an ordinary fast-forward: the offer carries only the suffix above it, the fetch can name
-       * it as a truthful `have`, and convergence has the base the kernel requires. One commit walk
-       * (no change decoding, no pack, no network) decides it.
-       *
-       * If it is not in this replica's lineage, no base exists to establish and the round is refused
-       * (#noCommonBase) before it leases, fetches or plans anything.
-       *
-       * A kernel without the commit walk cannot be asked, so it keeps the previous behaviour.
+       * Establish a cheap base when the provider's current tip is in our local chain.
+       * A negative answer means the base is unknown: both sides may have advanced from
+       * an earlier shared commit. Acquire the candidate and let the kernel discover
+       * and judge that history. A tracking bookmark is not an admission prerequisite.
        */
       #establishBase(upstreamHead) {
-        if (!this.#noCommonBase() || !this.#kernel.historySummary) return true;
+        if (!this.#missingTrackedBase() || !this.#kernel.historySummary) return true;
         const summary = this.#kernel.historySummary(this.#mount, this.#requestId, upstreamHead, this.#localHead);
         if (!summary.reachedBase) return false;
         this.#previousHead = upstreamHead;
@@ -17163,26 +17137,9 @@ var init_workspace_sync = __esm({
       get establishedBase() {
         return this.#establishedBase;
       }
-      #noCommonBase() {
+      #missingTrackedBase() {
         return this.#previousHead === void 0 && this.#localHead !== void 0 && this.#replaceLocalHead === void 0;
       }
-      #noCommonBaseResult() {
-        return this.#finish(create54(SyncWorkspaceResponseSchema, {
-          workspace: this.#mount.workspace,
-          ...this.#localHead === void 0 ? {} : { currentHead: this.#localHead },
-          stillAhead: true,
-          ...this.#offerReceipt === void 0 ? {} : { offerReceipt: this.#offerReceipt },
-          pushError: create54(RuntimeTransportFailureSchema, {
-            endpoint: this.#offerEndpoint(),
-            status: 409,
-            refused: true,
-            message: NO_COMMON_BASE
-          }),
-          timings: create54(SyncPhaseTimingsSchema, {
-            convergeMillis: elapsedMillis(this.#clock, this.#started)
-          })
-        }));
-      }
       #holdsLocalWork() {
         return this.#command.admit && !!this.#localHead && this.#localHead !== this.#previousHead;
       }
@@ -17334,7 +17291,6 @@ var init_workspace_sync = __esm({
         if (!this.#desiredHead) return this.#transportFailure("resident peer returned no admitted frontier", false);
         this.#candidateDurable = admission.sealedMain === this.#desiredHead;
         if (state.phase === WorkspaceSyncPhase.Probe && this.#desiredHead !== this.#localHead) {
-          if (!this.#establishBase(this.#desiredHead)) return this.#noCommonBaseResult();
           if (this.#alreadyJudged(this.#desiredHead)) {
             return this.#finish(create54(SyncWorkspaceResponseSchema, {
               workspace: this.#mount.workspace,
@@ -17346,6 +17302,22 @@ var init_workspace_sync = __esm({
               offerReceipt: this.#offerReceipt
             }));
           }
+          if (!this.#establishBase(this.#desiredHead)) {
+            this.#offerAfterConverge = this.#command.admit;
+            this.#rebaseFrom = void 0;
+            return this.#leaseEffect();
+          }
+          if (this.#establishedBase && !this.#candidateDurable && this.#kernel.resolveRef(this.#mount, this.#requestId, trackedMain) === void 0) {
+            return this.#finish(create54(SyncWorkspaceResponseSchema, {
+              workspace: this.#mount.workspace,
+              currentHead: this.#localHead,
+              previousHead: this.#previousHead,
+              stillAhead: true,
+              directOfferDeferred: true,
+              reconnectRequired: false,
+              offerReceipt: this.#offerReceipt
+            }));
+          }
           if (this.#probeOnly) {
             this.#needsReconciliation = true;
             return this.#finish(create54(SyncWorkspaceResponseSchema, {
@@ -17391,7 +17363,7 @@ var init_workspace_sync = __esm({
           return this.#converge(this.#desiredHead, admission.resultPack.byteLength, 0);
         }
         if (this.#desiredHead === this.#previousHead) return this.#converge(this.#desiredHead, 0, 0);
-        if (!this.#establishBase(this.#desiredHead)) return this.#noCommonBaseResult();
+        this.#establishBase(this.#desiredHead);
         if (admission.recoveryRequired !== false) return this.#leaseEffect();
         return this.#transportFailure("resident peer supplied neither the missing delta nor a history gap", false);
       }
@@ -17614,7 +17586,7 @@ var init_workspace_sync = __esm({
         }
       }
       #converge(candidateHead, receivedBytes, prefetchMillis) {
-        if (!this.#establishBase(candidateHead)) return this.#noCommonBaseResult();
+        this.#establishBase(candidateHead);
         this.#beforeConverge?.(candidateHead, this.#previousHead);
         const convergeStarted = this.#clock.monotonicNanoseconds();
         let judged;
@@ -20148,13 +20120,21 @@ var init_correspondence_desk = __esm({
       }
       #observeSyncResult(requestId, workId2, result) {
         const timings = result.timings;
+        const receipt = result.offerReceipt?.outcome;
+        const admission = receipt?.case === "admission" ? receipt.value : void 0;
         this.#events.instant("peer.follow.sync-result", {
           request: create59(RuntimeRequestSchema, { protocolVersion: 2, requestId }),
           workspace: result.workspace
         }, {
           "sync.workId": workId2,
           ...result.currentHead ? { "sync.head": result.currentHead } : {},
+          ...result.previousHead ? { "sync.previousHead": result.previousHead } : {},
+          ...admission?.main ? { "sync.providerHead": admission.main } : {},
+          ...admission?.sealedMain ? { "sync.sealedHead": admission.sealedMain } : {},
           "sync.stillAhead": result.stillAhead,
+          "sync.reconnectRequired": result.reconnectRequired,
+          "sync.refused": result.refused,
+          "sync.deferred": result.deferred,
           "sync.directOfferDeferred": result.directOfferDeferred,
           "sync.offline": result.offline,
           ...timings ? {
@@ -26456,8 +26436,19 @@ async function ensureApplicationWorkspace(application, opts = {}) {
   }
   const statusUrl = `${cloud}/v2/workspaces/${encodeURIComponent(application)}`;
   const current = await fetch(statusUrl).catch(() => null);
-  if (current?.ok) {
-    const status = await current.json().catch(() => null);
+  const status = current?.ok ? await current.json().catch(() => null) : null;
+  let unborn = false;
+  if (current?.ok && !status?.lineage && !status?.durableHead && !status?.sealedHead) {
+    const domains2 = await fetch(`${statusUrl}/domains`);
+    if (domains2.status === 409) {
+      const body2 = await domains2.json().catch(() => null);
+      unborn = typeof body2?.error === "string" && body2.error.includes("unborn");
+    }
+    if (!unborn && !domains2.ok) {
+      throw new Error(`could not establish whether application '${application}' has custody (${domains2.status})`);
+    }
+  }
+  if (current?.ok && !unborn) {
     const principal = String(status?.lineage?.principal ?? "");
     const actualParent = String(status?.lineage?.parent ?? "");
     const expectedParent = requestedParent === "root" ? "" : requestedParent;
@@ -26493,7 +26484,7 @@ async function ensureApplicationWorkspace(application, opts = {}) {
       ...principal !== "" && session !== "" && sameIdentity(principal, session) ? { deployPrincipal: principal } : {}
     };
   }
-  if (current !== null && current.status !== 404 && current.status !== 409) {
+  if (current !== null && !unborn && current.status !== 404 && current.status !== 409) {
     throw new Error(`could not inspect deploy target '${application}' (${current.status}); refusing to guess that it is unborn`);
   }
   if (requestedParent !== void 0) {

package/dist/dev-server.mjs

@@ -14249,7 +14249,6 @@ var WorkspaceSyncPhase = Object.freeze({
   Done: "done"
 });
 var trackedMain = "refs/remotes/nomos/main";
-var NO_COMMON_BASE = "this replica holds local history with no frontier its upstream ever confirmed; convergence needs a common admitted base \u2014 drop the local copy to refetch it, or re-discover a provider holding this lineage";
 var deferredRemote = "refs/remotes/nomos/deferred";
 var deferredLocal = "refs/nomos/sync-deferred-local";
 var judgedThisLifetime = /* @__PURE__ */ new Map();
@@ -14460,38 +14459,13 @@ var WorkspaceSyncWork = class {
     }), { case: "awaiting", requestId });
   }
   /**
-   * NO COMMON BASE — a round that cannot converge, and must not pay for history to find out.
-   *
-   * This replica holds a non-empty ledger but has never recorded a frontier its upstream
-   * confirmed (`refs/remotes/nomos/main` is absent). The kernel refuses convergence in that
-   * state ("a non-empty live ledger requires a common admitted base"), so every step after the
-   * O(1) frontier probe is wasted work — and it is not cheap waste: the fetch negotiates with
-   * no `have` (a full-history pack), and the dependency planner decodes EVERY intent from
-   * genesis and inspects every change, once per round. That is O(history) per follow round,
-   * repeated at every retry, for a round that can only end in a refusal.
-   *
-   * The one base this round can establish costs nothing and is established before this is
-   * asked: an upstream holding exactly this replica's head (the probe's answer) converges it
-   * and records the tracking frontier. Anything else needs the local copy to be dropped and
-   * refetched (an application decision, which preserves the copy), or a re-discovery that
-   * names a provider holding this lineage. Both are reported, at O(1), as this failure.
-   */
-  /**
-   * Establish this round's base when none is tracked, without walking any history it can avoid.
-   *
-   * The upstream just named its own frontier. If that commit is in THIS replica's lineage, it is
-   * a common admitted base by definition — both sides hold it — and adopting it turns the round
-   * into an ordinary fast-forward: the offer carries only the suffix above it, the fetch can name
-   * it as a truthful `have`, and convergence has the base the kernel requires. One commit walk
-   * (no change decoding, no pack, no network) decides it.
-   *
-   * If it is not in this replica's lineage, no base exists to establish and the round is refused
-   * (#noCommonBase) before it leases, fetches or plans anything.
-   *
-   * A kernel without the commit walk cannot be asked, so it keeps the previous behaviour.
+   * Establish a cheap base when the provider's current tip is in our local chain.
+   * A negative answer means the base is unknown: both sides may have advanced from
+   * an earlier shared commit. Acquire the candidate and let the kernel discover
+   * and judge that history. A tracking bookmark is not an admission prerequisite.
    */
   #establishBase(upstreamHead) {
-    if (!this.#noCommonBase() || !this.#kernel.historySummary) return true;
+    if (!this.#missingTrackedBase() || !this.#kernel.historySummary) return true;
     const summary = this.#kernel.historySummary(this.#mount, this.#requestId, upstreamHead, this.#localHead);
     if (!summary.reachedBase) return false;
     this.#previousHead = upstreamHead;
@@ -14506,26 +14480,9 @@ var WorkspaceSyncWork = class {
   get establishedBase() {
     return this.#establishedBase;
   }
-  #noCommonBase() {
+  #missingTrackedBase() {
     return this.#previousHead === void 0 && this.#localHead !== void 0 && this.#replaceLocalHead === void 0;
   }
-  #noCommonBaseResult() {
-    return this.#finish(create59(SyncWorkspaceResponseSchema, {
-      workspace: this.#mount.workspace,
-      ...this.#localHead === void 0 ? {} : { currentHead: this.#localHead },
-      stillAhead: true,
-      ...this.#offerReceipt === void 0 ? {} : { offerReceipt: this.#offerReceipt },
-      pushError: create59(RuntimeTransportFailureSchema, {
-        endpoint: this.#offerEndpoint(),
-        status: 409,
-        refused: true,
-        message: NO_COMMON_BASE
-      }),
-      timings: create59(SyncPhaseTimingsSchema, {
-        convergeMillis: elapsedMillis(this.#clock, this.#started)
-      })
-    }));
-  }
   #holdsLocalWork() {
     return this.#command.admit && !!this.#localHead && this.#localHead !== this.#previousHead;
   }
@@ -14677,7 +14634,6 @@ var WorkspaceSyncWork = class {
     if (!this.#desiredHead) return this.#transportFailure("resident peer returned no admitted frontier", false);
     this.#candidateDurable = admission.sealedMain === this.#desiredHead;
     if (state.phase === WorkspaceSyncPhase.Probe && this.#desiredHead !== this.#localHead) {
-      if (!this.#establishBase(this.#desiredHead)) return this.#noCommonBaseResult();
       if (this.#alreadyJudged(this.#desiredHead)) {
         return this.#finish(create59(SyncWorkspaceResponseSchema, {
           workspace: this.#mount.workspace,
@@ -14689,6 +14645,22 @@ var WorkspaceSyncWork = class {
           offerReceipt: this.#offerReceipt
         }));
       }
+      if (!this.#establishBase(this.#desiredHead)) {
+        this.#offerAfterConverge = this.#command.admit;
+        this.#rebaseFrom = void 0;
+        return this.#leaseEffect();
+      }
+      if (this.#establishedBase && !this.#candidateDurable && this.#kernel.resolveRef(this.#mount, this.#requestId, trackedMain) === void 0) {
+        return this.#finish(create59(SyncWorkspaceResponseSchema, {
+          workspace: this.#mount.workspace,
+          currentHead: this.#localHead,
+          previousHead: this.#previousHead,
+          stillAhead: true,
+          directOfferDeferred: true,
+          reconnectRequired: false,
+          offerReceipt: this.#offerReceipt
+        }));
+      }
       if (this.#probeOnly) {
         this.#needsReconciliation = true;
         return this.#finish(create59(SyncWorkspaceResponseSchema, {
@@ -14734,7 +14706,7 @@ var WorkspaceSyncWork = class {
       return this.#converge(this.#desiredHead, admission.resultPack.byteLength, 0);
     }
     if (this.#desiredHead === this.#previousHead) return this.#converge(this.#desiredHead, 0, 0);
-    if (!this.#establishBase(this.#desiredHead)) return this.#noCommonBaseResult();
+    this.#establishBase(this.#desiredHead);
     if (admission.recoveryRequired !== false) return this.#leaseEffect();
     return this.#transportFailure("resident peer supplied neither the missing delta nor a history gap", false);
   }
@@ -14957,7 +14929,7 @@ var WorkspaceSyncWork = class {
     }
   }
   #converge(candidateHead, receivedBytes, prefetchMillis) {
-    if (!this.#establishBase(candidateHead)) return this.#noCommonBaseResult();
+    this.#establishBase(candidateHead);
     this.#beforeConverge?.(candidateHead, this.#previousHead);
     const convergeStarted = this.#clock.monotonicNanoseconds();
     let judged;
@@ -17402,13 +17374,21 @@ var CorrespondenceDesk = class {
   }
   #observeSyncResult(requestId, workId2, result) {
     const timings = result.timings;
+    const receipt = result.offerReceipt?.outcome;
+    const admission = receipt?.case === "admission" ? receipt.value : void 0;
     this.#events.instant("peer.follow.sync-result", {
       request: create64(RuntimeRequestSchema, { protocolVersion: 2, requestId }),
       workspace: result.workspace
     }, {
       "sync.workId": workId2,
       ...result.currentHead ? { "sync.head": result.currentHead } : {},
+      ...result.previousHead ? { "sync.previousHead": result.previousHead } : {},
+      ...admission?.main ? { "sync.providerHead": admission.main } : {},
+      ...admission?.sealedMain ? { "sync.sealedHead": admission.sealedMain } : {},
       "sync.stillAhead": result.stillAhead,
+      "sync.reconnectRequired": result.reconnectRequired,
+      "sync.refused": result.refused,
+      "sync.deferred": result.deferred,
       "sync.directOfferDeferred": result.directOfferDeferred,
       "sync.offline": result.offline,
       ...timings ? {

package/dist/full-cli.mjs

@@ -22818,7 +22818,7 @@ import { create as create55, fromBinary as fromBinary20 } from "@bufbuild/protob
 function releaseSyncJudgment(workspace) {
   judgedThisLifetime.delete(workspace);
 }
-var PLACEMENT_REF3, LAW_PRODUCTS_MEDIA_TYPE, WorkspaceSyncPhase, trackedMain, NO_COMMON_BASE, deferredRemote, deferredLocal, judgedThisLifetime, MAX_REBASES_PER_ROUND, elapsedMillis, WorkspaceSyncWork;
+var PLACEMENT_REF3, LAW_PRODUCTS_MEDIA_TYPE, WorkspaceSyncPhase, trackedMain, deferredRemote, deferredLocal, judgedThisLifetime, MAX_REBASES_PER_ROUND, elapsedMillis, WorkspaceSyncWork;
 var init_workspace_sync = __esm({
   "../peer-office/src/runtime/workspace_sync.ts"() {
     "use strict";
@@ -22844,7 +22844,6 @@ var init_workspace_sync = __esm({
       Done: "done"
     });
     trackedMain = "refs/remotes/nomos/main";
-    NO_COMMON_BASE = "this replica holds local history with no frontier its upstream ever confirmed; convergence needs a common admitted base \u2014 drop the local copy to refetch it, or re-discover a provider holding this lineage";
     deferredRemote = "refs/remotes/nomos/deferred";
     deferredLocal = "refs/nomos/sync-deferred-local";
     judgedThisLifetime = /* @__PURE__ */ new Map();
@@ -23052,38 +23051,13 @@ var init_workspace_sync = __esm({
         }), { case: "awaiting", requestId });
       }
       /**
-       * NO COMMON BASE — a round that cannot converge, and must not pay for history to find out.
-       *
-       * This replica holds a non-empty ledger but has never recorded a frontier its upstream
-       * confirmed (`refs/remotes/nomos/main` is absent). The kernel refuses convergence in that
-       * state ("a non-empty live ledger requires a common admitted base"), so every step after the
-       * O(1) frontier probe is wasted work — and it is not cheap waste: the fetch negotiates with
-       * no `have` (a full-history pack), and the dependency planner decodes EVERY intent from
-       * genesis and inspects every change, once per round. That is O(history) per follow round,
-       * repeated at every retry, for a round that can only end in a refusal.
-       *
-       * The one base this round can establish costs nothing and is established before this is
-       * asked: an upstream holding exactly this replica's head (the probe's answer) converges it
-       * and records the tracking frontier. Anything else needs the local copy to be dropped and
-       * refetched (an application decision, which preserves the copy), or a re-discovery that
-       * names a provider holding this lineage. Both are reported, at O(1), as this failure.
-       */
-      /**
-       * Establish this round's base when none is tracked, without walking any history it can avoid.
-       *
-       * The upstream just named its own frontier. If that commit is in THIS replica's lineage, it is
-       * a common admitted base by definition — both sides hold it — and adopting it turns the round
-       * into an ordinary fast-forward: the offer carries only the suffix above it, the fetch can name
-       * it as a truthful `have`, and convergence has the base the kernel requires. One commit walk
-       * (no change decoding, no pack, no network) decides it.
-       *
-       * If it is not in this replica's lineage, no base exists to establish and the round is refused
-       * (#noCommonBase) before it leases, fetches or plans anything.
-       *
-       * A kernel without the commit walk cannot be asked, so it keeps the previous behaviour.
+       * Establish a cheap base when the provider's current tip is in our local chain.
+       * A negative answer means the base is unknown: both sides may have advanced from
+       * an earlier shared commit. Acquire the candidate and let the kernel discover
+       * and judge that history. A tracking bookmark is not an admission prerequisite.
        */
       #establishBase(upstreamHead) {
-        if (!this.#noCommonBase() || !this.#kernel.historySummary) return true;
+        if (!this.#missingTrackedBase() || !this.#kernel.historySummary) return true;
         const summary = this.#kernel.historySummary(this.#mount, this.#requestId, upstreamHead, this.#localHead);
         if (!summary.reachedBase) return false;
         this.#previousHead = upstreamHead;
@@ -23098,26 +23072,9 @@ var init_workspace_sync = __esm({
       get establishedBase() {
         return this.#establishedBase;
       }
-      #noCommonBase() {
+      #missingTrackedBase() {
         return this.#previousHead === void 0 && this.#localHead !== void 0 && this.#replaceLocalHead === void 0;
       }
-      #noCommonBaseResult() {
-        return this.#finish(create55(SyncWorkspaceResponseSchema, {
-          workspace: this.#mount.workspace,
-          ...this.#localHead === void 0 ? {} : { currentHead: this.#localHead },
-          stillAhead: true,
-          ...this.#offerReceipt === void 0 ? {} : { offerReceipt: this.#offerReceipt },
-          pushError: create55(RuntimeTransportFailureSchema, {
-            endpoint: this.#offerEndpoint(),
-            status: 409,
-            refused: true,
-            message: NO_COMMON_BASE
-          }),
-          timings: create55(SyncPhaseTimingsSchema, {
-            convergeMillis: elapsedMillis(this.#clock, this.#started)
-          })
-        }));
-      }
       #holdsLocalWork() {
         return this.#command.admit && !!this.#localHead && this.#localHead !== this.#previousHead;
       }
@@ -23269,7 +23226,6 @@ var init_workspace_sync = __esm({
         if (!this.#desiredHead) return this.#transportFailure("resident peer returned no admitted frontier", false);
         this.#candidateDurable = admission.sealedMain === this.#desiredHead;
         if (state.phase === WorkspaceSyncPhase.Probe && this.#desiredHead !== this.#localHead) {
-          if (!this.#establishBase(this.#desiredHead)) return this.#noCommonBaseResult();
           if (this.#alreadyJudged(this.#desiredHead)) {
             return this.#finish(create55(SyncWorkspaceResponseSchema, {
               workspace: this.#mount.workspace,
@@ -23281,6 +23237,22 @@ var init_workspace_sync = __esm({
               offerReceipt: this.#offerReceipt
             }));
           }
+          if (!this.#establishBase(this.#desiredHead)) {
+            this.#offerAfterConverge = this.#command.admit;
+            this.#rebaseFrom = void 0;
+            return this.#leaseEffect();
+          }
+          if (this.#establishedBase && !this.#candidateDurable && this.#kernel.resolveRef(this.#mount, this.#requestId, trackedMain) === void 0) {
+            return this.#finish(create55(SyncWorkspaceResponseSchema, {
+              workspace: this.#mount.workspace,
+              currentHead: this.#localHead,
+              previousHead: this.#previousHead,
+              stillAhead: true,
+              directOfferDeferred: true,
+              reconnectRequired: false,
+              offerReceipt: this.#offerReceipt
+            }));
+          }
           if (this.#probeOnly) {
             this.#needsReconciliation = true;
             return this.#finish(create55(SyncWorkspaceResponseSchema, {
@@ -23326,7 +23298,7 @@ var init_workspace_sync = __esm({
           return this.#converge(this.#desiredHead, admission.resultPack.byteLength, 0);
         }
         if (this.#desiredHead === this.#previousHead) return this.#converge(this.#desiredHead, 0, 0);
-        if (!this.#establishBase(this.#desiredHead)) return this.#noCommonBaseResult();
+        this.#establishBase(this.#desiredHead);
         if (admission.recoveryRequired !== false) return this.#leaseEffect();
         return this.#transportFailure("resident peer supplied neither the missing delta nor a history gap", false);
       }
@@ -23549,7 +23521,7 @@ var init_workspace_sync = __esm({
         }
       }
       #converge(candidateHead, receivedBytes, prefetchMillis) {
-        if (!this.#establishBase(candidateHead)) return this.#noCommonBaseResult();
+        this.#establishBase(candidateHead);
         this.#beforeConverge?.(candidateHead, this.#previousHead);
         const convergeStarted = this.#clock.monotonicNanoseconds();
         let judged;
@@ -26083,13 +26055,21 @@ var init_correspondence_desk = __esm({
       }
       #observeSyncResult(requestId, workId2, result) {
         const timings = result.timings;
+        const receipt = result.offerReceipt?.outcome;
+        const admission = receipt?.case === "admission" ? receipt.value : void 0;
         this.#events.instant("peer.follow.sync-result", {
           request: create60(RuntimeRequestSchema, { protocolVersion: 2, requestId }),
           workspace: result.workspace
         }, {
           "sync.workId": workId2,
           ...result.currentHead ? { "sync.head": result.currentHead } : {},
+          ...result.previousHead ? { "sync.previousHead": result.previousHead } : {},
+          ...admission?.main ? { "sync.providerHead": admission.main } : {},
+          ...admission?.sealedMain ? { "sync.sealedHead": admission.sealedMain } : {},
           "sync.stillAhead": result.stillAhead,
+          "sync.reconnectRequired": result.reconnectRequired,
+          "sync.refused": result.refused,
+          "sync.deferred": result.deferred,
           "sync.directOfferDeferred": result.directOfferDeferred,
           "sync.offline": result.offline,
           ...timings ? {
@@ -32391,8 +32371,19 @@ async function ensureApplicationWorkspace(application, opts = {}) {
   }
   const statusUrl = `${cloud}/v2/workspaces/${encodeURIComponent(application)}`;
   const current = await fetch(statusUrl).catch(() => null);
-  if (current?.ok) {
-    const status2 = await current.json().catch(() => null);
+  const status2 = current?.ok ? await current.json().catch(() => null) : null;
+  let unborn = false;
+  if (current?.ok && !status2?.lineage && !status2?.durableHead && !status2?.sealedHead) {
+    const domains2 = await fetch(`${statusUrl}/domains`);
+    if (domains2.status === 409) {
+      const body2 = await domains2.json().catch(() => null);
+      unborn = typeof body2?.error === "string" && body2.error.includes("unborn");
+    }
+    if (!unborn && !domains2.ok) {
+      throw new Error(`could not establish whether application '${application}' has custody (${domains2.status})`);
+    }
+  }
+  if (current?.ok && !unborn) {
     const principal = String(status2?.lineage?.principal ?? "");
     const actualParent = String(status2?.lineage?.parent ?? "");
     const expectedParent = requestedParent === "root" ? "" : requestedParent;
@@ -32428,7 +32419,7 @@ async function ensureApplicationWorkspace(application, opts = {}) {
       ...principal !== "" && session !== "" && sameIdentity(principal, session) ? { deployPrincipal: principal } : {}
     };
   }
-  if (current !== null && current.status !== 404 && current.status !== 409) {
+  if (current !== null && !unborn && current.status !== 404 && current.status !== 409) {
     throw new Error(`could not inspect deploy target '${application}' (${current.status}); refusing to guess that it is unborn`);
   }
   if (requestedParent !== void 0) {
@@ -34308,6 +34299,7 @@ var init_commands = __esm({
       "test",
       "doctor",
       "cloud",
+      "console",
       "status",
       "model",
       "platform",
@@ -34358,6 +34350,19 @@ var init_help = __esm({
     "use strict";
     init_commands();
     HELP = {
+      console: {
+        usage: "githolon console <login|logout|workspaces|universe|rollouts>",
+        what: "Use a downloaded console API credential. The browser and CLI use the same console API.\nCredentials are stored locally with owner-only permissions; tokens are never printed.",
+        flags: [
+          ["login --file <credential.json>", "verify and save a downloaded credential"],
+          ["logout", "remove the local credential; revoke other copies in the console"],
+          ["workspaces | universe", "read registered workspaces or their live subtree as JSON"],
+          ["rollouts [show <id>]", "list runs or inspect one"],
+          ["rollouts start --file <request.json>", "submit {payload:{kind:law,source:workspace},only:[workspace]} (JSON strings quoted)"],
+          ["rollouts resume <id>", "retry an existing law rollout"]
+        ],
+        examples: ["githolon console login --file nomos-console-example.json", "githolon console workspaces"]
+      },
       compile: {
         usage: "githolon compile [config] [--require-usdcat]",
         what: "Compile typed authoring input into canonical OpenUSD. nomos.project.ts emits the readable law\nclosure, its .law.usdz transport archive, and generated clients; nomos.application.ts emits the application\ncomposition stage. TypeScript is authoring input only: the kernel admits and custodies USD.",
@@ -34689,6 +34694,84 @@ var init_help = __esm({
   }
 });
 
+// src/console.ts
+var console_exports = {};
+__export(console_exports, {
+  consoleCommand: () => consoleCommand,
+  consoleCredential: () => consoleCredential,
+  consoleRequest: () => consoleRequest
+});
+import { URL as URL2 } from "node:url";
+import { chmodSync as chmodSync3, mkdirSync as mkdirSync10, readFileSync as readFileSync11, renameSync as renameSync4, rmSync as rmSync5, writeFileSync as writeFileSync11 } from "node:fs";
+import { join as join15 } from "node:path";
+import { randomUUID as randomUUID4 } from "node:crypto";
+function consoleCredential(value) {
+  if (!value || typeof value !== "object") throw new Error("Invalid console credential file");
+  const v = value;
+  if (v.format !== "nomos-console-credential-v1" || typeof v.endpoint !== "string" || typeof v.tenant !== "string" || typeof v.token !== "string") throw new Error("Invalid console credential file");
+  const endpoint = new URL2(v.endpoint);
+  if (endpoint.protocol !== "https:" || endpoint.username || endpoint.password || endpoint.pathname !== "/" || endpoint.search || endpoint.hash) throw new Error("Console endpoint must be an HTTPS origin");
+  const token = /^nomos_api\.([a-z][a-z0-9-]{1,62})\.[a-f0-9]{32}\.[A-Za-z0-9_-]{43}$/.exec(v.token);
+  if (!token || token[1] !== v.tenant) throw new Error("Credential does not match its workspace account");
+  return { format: v.format, endpoint: endpoint.origin, tenant: v.tenant, token: v.token };
+}
+async function consoleRequest(profile, path4, method = "GET", body, fetcher = fetch) {
+  const response = await fetcher(profile.endpoint + path4, {
+    method,
+    redirect: "error",
+    signal: AbortSignal.timeout(12e4),
+    headers: { authorization: `Bearer ${profile.token}`, "content-type": "application/json" },
+    ...body !== void 0 ? { body: JSON.stringify(body) } : {}
+  });
+  const result = await response.json();
+  if (!response.ok) throw new Error(`Console ${response.status}: ${result.error ?? "request refused"}`);
+  return result;
+}
+async function consoleCommand(args) {
+  const file = join15(configDir(), "console.json");
+  if (args[0] === "login" && args.length === 3 && args[1] === "--file") {
+    const profile2 = consoleCredential(JSON.parse(readFileSync11(args[2], "utf8")));
+    await consoleRequest(profile2, `/v1/tenants/${profile2.tenant}/workspaces`);
+    mkdirSync10(configDir(), { recursive: true });
+    const temporary = `${file}.${randomUUID4()}.tmp`;
+    try {
+      writeFileSync11(temporary, JSON.stringify(profile2) + "\n", { mode: 384, flag: "wx" });
+      renameSync4(temporary, file);
+      chmodSync3(file, 384);
+    } finally {
+      rmSync5(temporary, { force: true });
+    }
+    console.log(`Console credential saved for ${profile2.tenant} at ${profile2.endpoint}`);
+    return 0;
+  }
+  if (args[0] === "logout" && args.length === 1) {
+    rmSync5(file, { force: true });
+    console.log("Local console credential removed. Revoke the key in the console to disable other copies.");
+    return 0;
+  }
+  const profile = consoleCredential(JSON.parse(readFileSync11(file, "utf8")));
+  const root = `/v1/tenants/${encodeURIComponent(profile.tenant)}`;
+  let result;
+  if (args[0] === "workspaces" && args.length === 1) result = await consoleRequest(profile, `${root}/workspaces`);
+  else if (args[0] === "universe" && args.length === 1) result = await consoleRequest(profile, "/v1/universe");
+  else if (args[0] === "rollouts" && args.length === 1) result = await consoleRequest(profile, `${root}/rollouts`);
+  else if (args[0] === "rollouts" && args[1] === "show" && args.length === 3) result = await consoleRequest(profile, `${root}/rollouts/${encodeURIComponent(args[2])}`);
+  else if (args[0] === "rollouts" && args[1] === "resume" && args.length === 3) result = await consoleRequest(profile, `${root}/rollouts/${encodeURIComponent(args[2])}/resume`, "POST", {});
+  else if (args[0] === "rollouts" && args[1] === "start" && args[2] === "--file" && args.length === 4) {
+    const input = JSON.parse(readFileSync11(args[3], "utf8"));
+    if (input?.payload?.kind !== "law") throw new Error("Console CLI supports law rollouts only");
+    result = await consoleRequest(profile, `${root}/rollouts`, "POST", input);
+  } else throw new Error("See githolon console --help for supported commands");
+  console.log(JSON.stringify(result, null, 2));
+  return 0;
+}
+var init_console = __esm({
+  "src/console.ts"() {
+    "use strict";
+    init_cloud();
+  }
+});
+
 // src/mcp.ts
 var mcp_exports = {};
 __export(mcp_exports, {
@@ -35619,7 +35702,7 @@ var init_law_command_projection = __esm({
 });
 
 // src/law_encoder.ts
-import { readFileSync as readFileSync11 } from "node:fs";
+import { readFileSync as readFileSync12 } from "node:fs";
 async function loadInstalledLaw(input) {
   const file = discoverLawUsdz(input.cwd ?? process.cwd(), input.file);
   const inspected = await inspectLawArchive(input.cloud, file);
@@ -35631,7 +35714,7 @@ async function loadInstalledLaw(input) {
     );
   }
   const projection = parseLawCommandProjection(
-    readLawClosureAsset(new Uint8Array(readFileSync11(file)), COMMAND_PROJECTION)
+    readLawClosureAsset(new Uint8Array(readFileSync12(file)), COMMAND_PROJECTION)
   );
   return { identity: inspected.identity, servedDomains: served, projection, file };
 }
@@ -36117,8 +36200,8 @@ __export(platform_exports, {
   storeSeatDevice: () => storeSeatDevice
 });
 import { createHash as createHash6 } from "node:crypto";
-import { existsSync as existsSync14, mkdirSync as mkdirSync10, readFileSync as readFileSync12, writeFileSync as writeFileSync11 } from "node:fs";
-import { join as join16 } from "node:path";
+import { existsSync as existsSync14, mkdirSync as mkdirSync11, readFileSync as readFileSync13, writeFileSync as writeFileSync12 } from "node:fs";
+import { join as join17 } from "node:path";
 function refuse(message) {
   throw new PlatformRefusal(message);
 }
@@ -36192,7 +36275,7 @@ async function readModelAuthority(cloud, platform, seatedAt) {
 function loadSeatDevice(workspace) {
   const path4 = seatDevicePath(workspace);
   if (!existsSync14(path4)) return void 0;
-  const stored = JSON.parse(readFileSync12(path4, "utf8"));
+  const stored = JSON.parse(readFileSync13(path4, "utf8"));
   const publicKey = stored.publicKey ?? (stored.publicKeyHex === void 0 ? void 0 : Buffer.from(stored.publicKeyHex, "hex").toString("base64"));
   if (typeof stored.secret !== "string" || publicKey === void 0 || typeof stored.keyHash !== "string") {
     refuse(`${path4} is not a stored device key {secret, publicKey, keyHash}`);
@@ -36201,8 +36284,8 @@ function loadSeatDevice(workspace) {
 }
 function storeSeatDevice(workspace, device) {
   const path4 = seatDevicePath(workspace);
-  mkdirSync10(join16(path4, ".."), { recursive: true });
-  writeFileSync11(path4, JSON.stringify(device, null, 2) + "\n", { mode: 384 });
+  mkdirSync11(join17(path4, ".."), { recursive: true });
+  writeFileSync12(path4, JSON.stringify(device, null, 2) + "\n", { mode: 384 });
 }
 async function mintSeatDevice(cloud) {
   const generated = await generateDeviceKey(cloud);
@@ -36425,7 +36508,7 @@ async function platformAuthor(workspace, directiveId, opts) {
   }
 }
 function readPayload(opts) {
-  const raw = opts.payloadFile !== void 0 ? readFileSync12(opts.payloadFile, "utf8") : opts.payload;
+  const raw = opts.payloadFile !== void 0 ? readFileSync13(opts.payloadFile, "utf8") : opts.payload;
   if (raw === void 0 || raw.trim() === "") refuse("author needs --payload <json> or --payload-file <file>");
   let parsed;
   try {
@@ -36637,7 +36720,7 @@ var init_platform = __esm({
     PlatformRefusal = class extends Error {
     };
     ws = (name) => encodeURIComponent(name);
-    seatDevicePath = (workspace) => join16(configDir(), `seat-device-${workspace}.json`);
+    seatDevicePath = (workspace) => join17(configDir(), `seat-device-${workspace}.json`);
     SEAT_CONVERGENCE_MILLIS = 18e4;
   }
 });
@@ -36703,8 +36786,8 @@ var init_dlq = __esm({
 
 // src/custodian.ts
 import { createHash as createHash7, createPrivateKey as createPrivateKey2, createPublicKey as createPublicKey2 } from "node:crypto";
-import { existsSync as existsSync15, readFileSync as readFileSync13 } from "node:fs";
-import { dirname as dirname5, isAbsolute as isAbsolute3, join as join17, resolve as resolve6 } from "node:path";
+import { existsSync as existsSync15, readFileSync as readFileSync14 } from "node:fs";
+import { dirname as dirname5, isAbsolute as isAbsolute3, join as join18, resolve as resolve6 } from "node:path";
 import { fileURLToPath as fileURLToPath3, pathToFileURL as pathToFileURL3 } from "node:url";
 import { create as create80 } from "@bufbuild/protobuf";
 import { AnySchema as AnySchema3 } from "@bufbuild/protobuf/wkt";
@@ -36752,7 +36835,7 @@ async function resolveCustodianCredential(reference) {
   }
   if (scheme === "file") {
     if (rest === "" || !existsSync15(rest)) throw new Error(`--custodian-key file:<path> \u2014 no file at '${rest}'`);
-    return fromSeed(custodianSeedFromText(readFileSync13(rest, "utf8"), rest), `file:${rest}`);
+    return fromSeed(custodianSeedFromText(readFileSync14(rest, "utf8"), rest), `file:${rest}`);
   }
   if (scheme === "env") {
     const value = process.env[rest];
@@ -36779,7 +36862,7 @@ async function resolveCustodianCredential(reference) {
 function readCustodianChain(file) {
   if (file === void 0) return [];
   if (!existsSync15(file)) throw new Error(`--chain <file> \u2014 no file at '${file}'`);
-  const parsed = JSON.parse(readFileSync13(file, "utf8"));
+  const parsed = JSON.parse(readFileSync14(file, "utf8"));
   const links = Array.isArray(parsed) ? parsed : typeof parsed === "object" && parsed !== null && Array.isArray(parsed.certChain) ? parsed.certChain : void 0;
   if (links === void 0) {
     throw new Error(
@@ -36829,7 +36912,7 @@ function scarFromVerdict(verdict) {
 }
 function frameworkReceptionPath(here = moduleDirectory()) {
   const candidates = [
-    join17(here, "framework", "nomos.reception.mjs"),
+    join18(here, "framework", "nomos.reception.mjs"),
     resolve6(here, "../../cloud/cloudflare-shell/domains/build/nomos/nomos.reception.mjs")
   ];
   const found = candidates.find((candidate) => existsSync15(candidate));
@@ -36907,7 +36990,7 @@ async function encodeDirectiveCall(receptionPath, domain, directiveId, workspace
   return captured;
 }
 function readPayload2(opts) {
-  const text2 = opts.payloadFile !== void 0 ? readFileSync13(opts.payloadFile, "utf8") : opts.payload;
+  const text2 = opts.payloadFile !== void 0 ? readFileSync14(opts.payloadFile, "utf8") : opts.payload;
   if (text2 === void 0) throw new Error("pass the directive's payload with --payload <json> or --payload-file <file>");
   const parsed = JSON.parse(text2);
   if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
@@ -37247,8 +37330,8 @@ Options
 });
 
 // src/cli.ts
-import { existsSync as existsSync16, readFileSync as readFileSync14 } from "node:fs";
-import { dirname as dirname6, join as join18, resolve as resolve7 } from "node:path";
+import { existsSync as existsSync16, readFileSync as readFileSync15 } from "node:fs";
+import { dirname as dirname6, join as join19, resolve as resolve7 } from "node:path";
 import { pathToFileURL as pathToFileURL4, fileURLToPath as fileURLToPath4 } from "node:url";
 
 // src/generate.ts
@@ -37949,6 +38032,9 @@ async function main(argv) {
     process.stdout.write(USAGE2);
     return 0;
   }
+  if (argv[0] === "console") {
+    return (await Promise.resolve().then(() => (init_console(), console_exports))).consoleCommand(argv.slice(1));
+  }
   if (argv[0] === "compile") {
     return runCompileCommand(argv.slice(1));
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "githolon",
-  "version": "0.110.1",
+  "version": "0.111.0",
   "type": "module",
   "description": "githolon — the Nomos developer CLI: Rails-style generators for @githolon/dsl domains + the package compiler. Kernel-independent.",
   "license": "SEE LICENSE IN LICENSE.md",
@@ -30,7 +30,7 @@
   "dependencies": {
     "@bjorn3/browser_wasi_shim": "0.4.2",
     "@bufbuild/protobuf": "^2.13.0",
-    "@githolon/dsl": "^0.110.1",
+    "@githolon/dsl": "^0.111.0",
     "fast-xml-parser": "5.10.1",
     "isomorphic-git": "^1.38.4",
     "tsx": "^4.19.2",