githolon 0.111.1 → 0.112.1

package/dist/compile_mountability_entry.js

@@ -4323,7 +4323,7 @@ function runtimeKernelPort(engine) {
             case: "resolveRef",
             value: create3(ResolveRefRequestSchema, {
               repo: workspaceRepositoryPath(workspace),
-              reference: `refs/heads/${branch}`
+              reference: branch.startsWith("refs/") ? branch : `refs/heads/${branch}`
             })
           }
         })
@@ -5335,7 +5335,6 @@ function gitCustodyDesk(kernel, fetchImpl = fetch, observe, phaseStarted) {
       return acquired;
     },
     deepenMain(workspace, ledger) {
-      if (ledger.operatorCustody !== true) return Promise.resolve({ changed: false, complete: true });
       return acquiring(workspace, ledger, "deepen-main", async () => {
         if (resolveRef(workspace, branchRef("main")) === void 0) {
           const acquired = await acquireMain(workspace, ledger);
@@ -6054,6 +6053,7 @@ var init_peer_platform_shell = __esm({
           // one constitutional genesis offer. WorkspaceAccessDesk decides whether
           // that exact request may proceed against the unborn kernel mount.
           async openCustody(workspace) {
+            if (physical.openLocalCustody) return physical.openLocalCustody(workspace);
             await custody.acquireMain(workspace, await ledgerFor(workspace));
             return {};
           },
@@ -6069,7 +6069,12 @@ var init_peer_platform_shell = __esm({
           },
           persistBornCustody: (effect) => physical.persistBornCustody(effect),
           retainFrontier: (effect) => physical.retainFrontier(effect),
-          ...physical.completeHistoryInLocalCustody ? {
+          ...physical.advanceHistory ? {
+            advanceHistory: (workspace, capability) => {
+              const credential = capability ? this.#credentials.authToken(capability) : authToken;
+              return physical.advanceHistory(workspace, credential && new TextDecoder().decode(credential));
+            }
+          } : physical.completeHistoryInLocalCustody ? {
             // The kernel mounts a shallow working copy; the peer's own Git custody is deep.
             // One bounded slice per call; the Peer Office decides whether and when to take the next.
             async advanceHistory(workspace) {
@@ -15879,10 +15884,11 @@ var init_live_correspondence_desk = __esm({
           failures: 0,
           origin,
           publisher: !binding.cloudBound,
-          published: !binding.cloudBound ? head : void 0
+          published: !binding.cloudBound ? head : void 0,
+          wasResident: this.kernel.isResident(binding.workspace) !== false
         };
         this.#links.set(binding.workspace, link);
-        this.#open(link);
+        if (link.wasResident) this.#open(link);
       }
       changed(workspace) {
         const link = this.#links.get(workspace);
@@ -16039,9 +16045,11 @@ var init_live_correspondence_desk = __esm({
         let wake;
         for (const link of this.#links.values()) {
           if (this.kernel.isResident(link.binding.workspace) === false) {
-            this.disconnect(link.binding.workspace);
+            if (link.wasResident) this.disconnect(link.binding.workspace);
+            else wake = wake === void 0 || wake > 250n ? 250n : wake;
             continue;
           }
+          link.wasResident = true;
           if (link.state === "opening" && now >= link.due) {
             this.#effect(link, { case: "close", value: true });
             link.state = "closed";
@@ -23865,7 +23873,7 @@ var init_frame_runner = __esm({
 
 // ../peer-office/src/runtime/platform_effect_driver.ts
 import { create as create71, fromBinary as fromBinary25, toBinary as toBinary26 } from "@bufbuild/protobuf";
-async function drivePeerFrame(runner, initialFrame, fetchImpl = globalThis.fetch, custody, bornCustody, credentialRefresh, yieldWakeToCaller = false, deviceIdentity, lawPackage, yieldLocalReadToCaller = false, yieldHistoryToCaller = false) {
+async function drivePeerFrame(runner, initialFrame, fetchImpl = globalThis.fetch, custody, bornCustody, credentialRefresh, yieldWakeToCaller = false, deviceIdentity, lawPackage, yieldLocalReadToCaller = false, yieldHistoryToCaller = false, performExternalEffect) {
   const persistBornCustody = bornCustody ?? (custody?.persistBornCustody ? (effect) => custody.persistBornCustody(effect) : void 0);
   let responseFrame = runner.handleFrame(initialFrame);
   const satisfied = /* @__PURE__ */ new Set();
@@ -24001,12 +24009,10 @@ async function drivePeerFrame(runner, initialFrame, fetchImpl = globalThis.fetch
     if (pending.effect.case === "historyAcquisition" && (yieldHistoryToCaller || !custody?.advanceHistory)) {
       return responseFrame;
     }
-    if (pending.effect.case === "refreshCredential" && credentialRefresh === externalPeerEffect) return responseFrame;
-    if (pending.effect.case === "deviceIdentity" && deviceIdentity === externalPeerEffect) return responseFrame;
-    if (pending.effect.case === "lawPackage" && lawPackage === externalPeerEffect) return responseFrame;
     if (pending.effect.case === "wake" && yieldWakeToCaller) return responseFrame;
-    if (pending.effect.case === "consoleEnrolment") return responseFrame;
-    const receipt = pending.effect.case === "http" ? await executeHttpEffect(pending.effect.value, fetchImpl) : pending.effect.case === "gitFetch" ? await executeGitFetchWithAlongside(pending.effect.value, fetchImpl) : pending.effect.case === "gitPush" ? await executeGitPushEffect(pending.effect.value, fetchImpl) : pending.effect.case === "persistBornCustody" ? create71(PeerEffectReceiptSchema, {
+    const external = pending.effect.case === "refreshCredential" && credentialRefresh === externalPeerEffect || pending.effect.case === "deviceIdentity" && deviceIdentity === externalPeerEffect || pending.effect.case === "lawPackage" && lawPackage === externalPeerEffect || pending.effect.case === "consoleEnrolment";
+    if (external && !performExternalEffect) return responseFrame;
+    const receipt = external ? await performExternalEffect(pending) : pending.effect.case === "http" ? await executeHttpEffect(pending.effect.value, fetchImpl) : pending.effect.case === "gitFetch" ? await executeGitFetchWithAlongside(pending.effect.value, fetchImpl) : pending.effect.case === "gitPush" ? await executeGitPushEffect(pending.effect.value, fetchImpl) : pending.effect.case === "persistBornCustody" ? create71(PeerEffectReceiptSchema, {
       effectId: pending.effect.value.effectId,
       outcome: {
         case: "bornCustodyPersisted",
@@ -24034,7 +24040,7 @@ async function drivePeerFrame(runner, initialFrame, fetchImpl = globalThis.fetch
 async function executeHistoryAcquisitionEffect(effect, custody) {
   try {
     if (!custody.advanceHistory) throw new Error("platform shell has no history acquisition capability");
-    const progress = await custody.advanceHistory(effect.workspace);
+    const progress = await custody.advanceHistory(effect.workspace, effect.credentialCapability);
     return create71(PeerEffectReceiptSchema, {
       effectId: effect.effectId,
       outcome: {
@@ -24517,7 +24523,7 @@ var init_credential_effects = __esm({
 // ../platform-shells/shared/peer_office_host.ts
 import { create as create74, fromBinary as fromBinary28, toBinary as toBinary29 } from "@bufbuild/protobuf";
 function openPeerOfficeHost(kernel, shell, fetchImpl = globalThis.fetch, maintenanceSettled, postEvent = () => {
-}, credentialRefresh, yieldWakeToCaller = false, deviceIdentity, lawPackage) {
+}, credentialRefresh, yieldWakeToCaller = false, deviceIdentity, lawPackage, performExternalEffect) {
   let runner;
   const configuredOrigins = new Set((shell.providerOrigins?.() ?? []).map((provider) => originOf(provider)).filter((origin) => origin !== void 0));
   const permittedSocket = (url) => {
@@ -24526,10 +24532,10 @@ function openPeerOfficeHost(kernel, shell, fetchImpl = globalThis.fetch, mainten
     return origin !== void 0 && configuredOrigins.has(origin);
   };
   const sockets = socketEffects(
-    (frame) => drivePeerFrame(runner, frame, fetchImpl, shell.custodyPort(), void 0, void 0, false, deviceIdentity, lawPackage),
+    (frame) => drivePeerFrame(runner, frame, fetchImpl, shell.custodyPort(), void 0, void 0, false, deviceIdentity, lawPackage, false, false, performExternalEffect),
     permittedSocket
   );
-  const credentials = credentialEffects((frame) => drivePeerFrame(runner, frame, fetchImpl, shell.custodyPort(), void 0, credentialRefresh, false, deviceIdentity, lawPackage), credentialRefresh);
+  const credentials = credentialEffects((frame) => drivePeerFrame(runner, frame, fetchImpl, shell.custodyPort(), void 0, credentialRefresh, false, deviceIdentity, lawPackage, false, false, performExternalEffect), credentialRefresh);
   runner = createPeerOfficeFrameRunner(
     kernel,
     shell.credentials(),
@@ -24554,7 +24560,10 @@ function openPeerOfficeHost(kernel, shell, fetchImpl = globalThis.fetch, mainten
         credentialRefresh,
         false,
         deviceIdentity,
-        lawPackage
+        lawPackage,
+        false,
+        false,
+        performExternalEffect
       );
     },
     shell.peerDeskStore()
@@ -24606,7 +24615,10 @@ function openPeerOfficeHost(kernel, shell, fetchImpl = globalThis.fetch, mainten
         credentialRefresh,
         yieldWakeToCaller,
         deviceIdentity,
-        lawPackage
+        lawPackage,
+        false,
+        false,
+        performExternalEffect
       );
     },
     settleRetention: (withinMillis) => runner.settleRetention(withinMillis),

package/dist/dev-server.mjs

@@ -2925,7 +2925,7 @@ function runtimeKernelPort(engine) {
             case: "resolveRef",
             value: create8(ResolveRefRequestSchema, {
               repo: workspaceRepositoryPath(workspace),
-              reference: `refs/heads/${branch}`
+              reference: branch.startsWith("refs/") ? branch : `refs/heads/${branch}`
             })
           }
         })
@@ -3633,7 +3633,6 @@ function gitCustodyDesk(kernel, fetchImpl = fetch, observe, phaseStarted) {
       return acquired;
     },
     deepenMain(workspace, ledger) {
-      if (ledger.operatorCustody !== true) return Promise.resolve({ changed: false, complete: true });
       return acquiring(workspace, ledger, "deepen-main", async () => {
         if (resolveRef(workspace, branchRef("main")) === void 0) {
           const acquired = await acquireMain(workspace, ledger);
@@ -3959,6 +3958,7 @@ var PeerPlatformShell = class {
       // one constitutional genesis offer. WorkspaceAccessDesk decides whether
       // that exact request may proceed against the unborn kernel mount.
       async openCustody(workspace) {
+        if (physical.openLocalCustody) return physical.openLocalCustody(workspace);
         await custody.acquireMain(workspace, await ledgerFor(workspace));
         return {};
       },
@@ -3974,7 +3974,12 @@ var PeerPlatformShell = class {
       },
       persistBornCustody: (effect) => physical.persistBornCustody(effect),
       retainFrontier: (effect) => physical.retainFrontier(effect),
-      ...physical.completeHistoryInLocalCustody ? {
+      ...physical.advanceHistory ? {
+        advanceHistory: (workspace, capability) => {
+          const credential = capability ? this.#credentials.authToken(capability) : authToken;
+          return physical.advanceHistory(workspace, credential && new TextDecoder().decode(credential));
+        }
+      } : physical.completeHistoryInLocalCustody ? {
         // The kernel mounts a shallow working copy; the peer's own Git custody is deep.
         // One bounded slice per call; the Peer Office decides whether and when to take the next.
         async advanceHistory(workspace) {
@@ -13305,10 +13310,11 @@ var LiveCorrespondenceDesk = class {
       failures: 0,
       origin,
       publisher: !binding.cloudBound,
-      published: !binding.cloudBound ? head : void 0
+      published: !binding.cloudBound ? head : void 0,
+      wasResident: this.kernel.isResident(binding.workspace) !== false
     };
     this.#links.set(binding.workspace, link);
-    this.#open(link);
+    if (link.wasResident) this.#open(link);
   }
   changed(workspace) {
     const link = this.#links.get(workspace);
@@ -13465,9 +13471,11 @@ var LiveCorrespondenceDesk = class {
     let wake;
     for (const link of this.#links.values()) {
       if (this.kernel.isResident(link.binding.workspace) === false) {
-        this.disconnect(link.binding.workspace);
+        if (link.wasResident) this.disconnect(link.binding.workspace);
+        else wake = wake === void 0 || wake > 250n ? 250n : wake;
         continue;
       }
+      link.wasResident = true;
       if (link.state === "opening" && now >= link.due) {
         this.#effect(link, { case: "close", value: true });
         link.state = "closed";
@@ -21135,7 +21143,7 @@ var executeGitPushEffect = async (effect, fetchImpl) => {
     });
   }
 };
-async function drivePeerFrame(runner, initialFrame, fetchImpl = globalThis.fetch, custody, bornCustody, credentialRefresh, yieldWakeToCaller = false, deviceIdentity, lawPackage, yieldLocalReadToCaller = false, yieldHistoryToCaller = false) {
+async function drivePeerFrame(runner, initialFrame, fetchImpl = globalThis.fetch, custody, bornCustody, credentialRefresh, yieldWakeToCaller = false, deviceIdentity, lawPackage, yieldLocalReadToCaller = false, yieldHistoryToCaller = false, performExternalEffect) {
   const persistBornCustody = bornCustody ?? (custody?.persistBornCustody ? (effect) => custody.persistBornCustody(effect) : void 0);
   let responseFrame = runner.handleFrame(initialFrame);
   const satisfied = /* @__PURE__ */ new Set();
@@ -21271,12 +21279,10 @@ async function drivePeerFrame(runner, initialFrame, fetchImpl = globalThis.fetch
     if (pending.effect.case === "historyAcquisition" && (yieldHistoryToCaller || !custody?.advanceHistory)) {
       return responseFrame;
     }
-    if (pending.effect.case === "refreshCredential" && credentialRefresh === externalPeerEffect) return responseFrame;
-    if (pending.effect.case === "deviceIdentity" && deviceIdentity === externalPeerEffect) return responseFrame;
-    if (pending.effect.case === "lawPackage" && lawPackage === externalPeerEffect) return responseFrame;
     if (pending.effect.case === "wake" && yieldWakeToCaller) return responseFrame;
-    if (pending.effect.case === "consoleEnrolment") return responseFrame;
-    const receipt = pending.effect.case === "http" ? await executeHttpEffect(pending.effect.value, fetchImpl) : pending.effect.case === "gitFetch" ? await executeGitFetchWithAlongside(pending.effect.value, fetchImpl) : pending.effect.case === "gitPush" ? await executeGitPushEffect(pending.effect.value, fetchImpl) : pending.effect.case === "persistBornCustody" ? create76(PeerEffectReceiptSchema, {
+    const external = pending.effect.case === "refreshCredential" && credentialRefresh === externalPeerEffect || pending.effect.case === "deviceIdentity" && deviceIdentity === externalPeerEffect || pending.effect.case === "lawPackage" && lawPackage === externalPeerEffect || pending.effect.case === "consoleEnrolment";
+    if (external && !performExternalEffect) return responseFrame;
+    const receipt = external ? await performExternalEffect(pending) : pending.effect.case === "http" ? await executeHttpEffect(pending.effect.value, fetchImpl) : pending.effect.case === "gitFetch" ? await executeGitFetchWithAlongside(pending.effect.value, fetchImpl) : pending.effect.case === "gitPush" ? await executeGitPushEffect(pending.effect.value, fetchImpl) : pending.effect.case === "persistBornCustody" ? create76(PeerEffectReceiptSchema, {
       effectId: pending.effect.value.effectId,
       outcome: {
         case: "bornCustodyPersisted",
@@ -21304,7 +21310,7 @@ async function drivePeerFrame(runner, initialFrame, fetchImpl = globalThis.fetch
 async function executeHistoryAcquisitionEffect(effect, custody) {
   try {
     if (!custody.advanceHistory) throw new Error("platform shell has no history acquisition capability");
-    const progress = await custody.advanceHistory(effect.workspace);
+    const progress = await custody.advanceHistory(effect.workspace, effect.credentialCapability);
     return create76(PeerEffectReceiptSchema, {
       effectId: effect.effectId,
       outcome: {
@@ -21535,7 +21541,7 @@ var targetOf = (frame) => {
   };
 };
 function openPeerOfficeHost(kernel, shell, fetchImpl = globalThis.fetch, maintenanceSettled, postEvent = () => {
-}, credentialRefresh, yieldWakeToCaller = false, deviceIdentity, lawPackage) {
+}, credentialRefresh, yieldWakeToCaller = false, deviceIdentity, lawPackage, performExternalEffect) {
   let runner;
   const configuredOrigins = new Set((shell.providerOrigins?.() ?? []).map((provider) => originOf(provider)).filter((origin) => origin !== void 0));
   const permittedSocket = (url) => {
@@ -21544,10 +21550,10 @@ function openPeerOfficeHost(kernel, shell, fetchImpl = globalThis.fetch, mainten
     return origin !== void 0 && configuredOrigins.has(origin);
   };
   const sockets = socketEffects(
-    (frame) => drivePeerFrame(runner, frame, fetchImpl, shell.custodyPort(), void 0, void 0, false, deviceIdentity, lawPackage),
+    (frame) => drivePeerFrame(runner, frame, fetchImpl, shell.custodyPort(), void 0, void 0, false, deviceIdentity, lawPackage, false, false, performExternalEffect),
     permittedSocket
   );
-  const credentials = credentialEffects((frame) => drivePeerFrame(runner, frame, fetchImpl, shell.custodyPort(), void 0, credentialRefresh, false, deviceIdentity, lawPackage), credentialRefresh);
+  const credentials = credentialEffects((frame) => drivePeerFrame(runner, frame, fetchImpl, shell.custodyPort(), void 0, credentialRefresh, false, deviceIdentity, lawPackage, false, false, performExternalEffect), credentialRefresh);
   runner = createPeerOfficeFrameRunner(
     kernel,
     shell.credentials(),
@@ -21572,7 +21578,10 @@ function openPeerOfficeHost(kernel, shell, fetchImpl = globalThis.fetch, mainten
         credentialRefresh,
         false,
         deviceIdentity,
-        lawPackage
+        lawPackage,
+        false,
+        false,
+        performExternalEffect
       );
     },
     shell.peerDeskStore()
@@ -21624,7 +21633,10 @@ function openPeerOfficeHost(kernel, shell, fetchImpl = globalThis.fetch, mainten
         credentialRefresh,
         yieldWakeToCaller,
         deviceIdentity,
-        lawPackage
+        lawPackage,
+        false,
+        false,
+        performExternalEffect
       );
     },
     settleRetention: (withinMillis) => runner.settleRetention(withinMillis),

package/dist/full-cli.mjs

@@ -10253,7 +10253,7 @@ function runtimeKernelPort(engine) {
             case: "resolveRef",
             value: create4(ResolveRefRequestSchema, {
               repo: workspaceRepositoryPath(workspace),
-              reference: `refs/heads/${branch}`
+              reference: branch.startsWith("refs/") ? branch : `refs/heads/${branch}`
             })
           }
         })
@@ -11265,7 +11265,6 @@ function gitCustodyDesk(kernel, fetchImpl = fetch, observe, phaseStarted) {
       return acquired;
     },
     deepenMain(workspace, ledger) {
-      if (ledger.operatorCustody !== true) return Promise.resolve({ changed: false, complete: true });
       return acquiring(workspace, ledger, "deepen-main", async () => {
         if (resolveRef(workspace, branchRef("main")) === void 0) {
           const acquired = await acquireMain(workspace, ledger);
@@ -11989,6 +11988,7 @@ var init_peer_platform_shell = __esm({
           // one constitutional genesis offer. WorkspaceAccessDesk decides whether
           // that exact request may proceed against the unborn kernel mount.
           async openCustody(workspace) {
+            if (physical.openLocalCustody) return physical.openLocalCustody(workspace);
             await custody.acquireMain(workspace, await ledgerFor(workspace));
             return {};
           },
@@ -12004,7 +12004,12 @@ var init_peer_platform_shell = __esm({
           },
           persistBornCustody: (effect) => physical.persistBornCustody(effect),
           retainFrontier: (effect) => physical.retainFrontier(effect),
-          ...physical.completeHistoryInLocalCustody ? {
+          ...physical.advanceHistory ? {
+            advanceHistory: (workspace, capability) => {
+              const credential = capability ? this.#credentials.authToken(capability) : authToken;
+              return physical.advanceHistory(workspace, credential && new TextDecoder().decode(credential));
+            }
+          } : physical.completeHistoryInLocalCustody ? {
             // The kernel mounts a shallow working copy; the peer's own Git custody is deep.
             // One bounded slice per call; the Peer Office decides whether and when to take the next.
             async advanceHistory(workspace) {
@@ -21814,10 +21819,11 @@ var init_live_correspondence_desk = __esm({
           failures: 0,
           origin,
           publisher: !binding.cloudBound,
-          published: !binding.cloudBound ? head : void 0
+          published: !binding.cloudBound ? head : void 0,
+          wasResident: this.kernel.isResident(binding.workspace) !== false
         };
         this.#links.set(binding.workspace, link);
-        this.#open(link);
+        if (link.wasResident) this.#open(link);
       }
       changed(workspace) {
         const link = this.#links.get(workspace);
@@ -21974,9 +21980,11 @@ var init_live_correspondence_desk = __esm({
         let wake;
         for (const link of this.#links.values()) {
           if (this.kernel.isResident(link.binding.workspace) === false) {
-            this.disconnect(link.binding.workspace);
+            if (link.wasResident) this.disconnect(link.binding.workspace);
+            else wake = wake === void 0 || wake > 250n ? 250n : wake;
             continue;
           }
+          link.wasResident = true;
           if (link.state === "opening" && now >= link.due) {
             this.#effect(link, { case: "close", value: true });
             link.state = "closed";
@@ -29800,7 +29808,7 @@ var init_frame_runner = __esm({
 
 // ../peer-office/src/runtime/platform_effect_driver.ts
 import { create as create72, fromBinary as fromBinary25, toBinary as toBinary26 } from "@bufbuild/protobuf";
-async function drivePeerFrame(runner, initialFrame, fetchImpl = globalThis.fetch, custody, bornCustody, credentialRefresh, yieldWakeToCaller = false, deviceIdentity, lawPackage, yieldLocalReadToCaller = false, yieldHistoryToCaller = false) {
+async function drivePeerFrame(runner, initialFrame, fetchImpl = globalThis.fetch, custody, bornCustody, credentialRefresh, yieldWakeToCaller = false, deviceIdentity, lawPackage, yieldLocalReadToCaller = false, yieldHistoryToCaller = false, performExternalEffect) {
   const persistBornCustody = bornCustody ?? (custody?.persistBornCustody ? (effect) => custody.persistBornCustody(effect) : void 0);
   let responseFrame = runner.handleFrame(initialFrame);
   const satisfied = /* @__PURE__ */ new Set();
@@ -29936,12 +29944,10 @@ async function drivePeerFrame(runner, initialFrame, fetchImpl = globalThis.fetch
     if (pending.effect.case === "historyAcquisition" && (yieldHistoryToCaller || !custody?.advanceHistory)) {
       return responseFrame;
     }
-    if (pending.effect.case === "refreshCredential" && credentialRefresh === externalPeerEffect) return responseFrame;
-    if (pending.effect.case === "deviceIdentity" && deviceIdentity === externalPeerEffect) return responseFrame;
-    if (pending.effect.case === "lawPackage" && lawPackage === externalPeerEffect) return responseFrame;
     if (pending.effect.case === "wake" && yieldWakeToCaller) return responseFrame;
-    if (pending.effect.case === "consoleEnrolment") return responseFrame;
-    const receipt = pending.effect.case === "http" ? await executeHttpEffect(pending.effect.value, fetchImpl) : pending.effect.case === "gitFetch" ? await executeGitFetchWithAlongside(pending.effect.value, fetchImpl) : pending.effect.case === "gitPush" ? await executeGitPushEffect(pending.effect.value, fetchImpl) : pending.effect.case === "persistBornCustody" ? create72(PeerEffectReceiptSchema, {
+    const external = pending.effect.case === "refreshCredential" && credentialRefresh === externalPeerEffect || pending.effect.case === "deviceIdentity" && deviceIdentity === externalPeerEffect || pending.effect.case === "lawPackage" && lawPackage === externalPeerEffect || pending.effect.case === "consoleEnrolment";
+    if (external && !performExternalEffect) return responseFrame;
+    const receipt = external ? await performExternalEffect(pending) : pending.effect.case === "http" ? await executeHttpEffect(pending.effect.value, fetchImpl) : pending.effect.case === "gitFetch" ? await executeGitFetchWithAlongside(pending.effect.value, fetchImpl) : pending.effect.case === "gitPush" ? await executeGitPushEffect(pending.effect.value, fetchImpl) : pending.effect.case === "persistBornCustody" ? create72(PeerEffectReceiptSchema, {
       effectId: pending.effect.value.effectId,
       outcome: {
         case: "bornCustodyPersisted",
@@ -29969,7 +29975,7 @@ async function drivePeerFrame(runner, initialFrame, fetchImpl = globalThis.fetch
 async function executeHistoryAcquisitionEffect(effect, custody) {
   try {
     if (!custody.advanceHistory) throw new Error("platform shell has no history acquisition capability");
-    const progress = await custody.advanceHistory(effect.workspace);
+    const progress = await custody.advanceHistory(effect.workspace, effect.credentialCapability);
     return create72(PeerEffectReceiptSchema, {
       effectId: effect.effectId,
       outcome: {
@@ -30452,7 +30458,7 @@ var init_credential_effects = __esm({
 // ../platform-shells/shared/peer_office_host.ts
 import { create as create75, fromBinary as fromBinary28, toBinary as toBinary29 } from "@bufbuild/protobuf";
 function openPeerOfficeHost(kernel, shell, fetchImpl = globalThis.fetch, maintenanceSettled, postEvent = () => {
-}, credentialRefresh, yieldWakeToCaller = false, deviceIdentity, lawPackage) {
+}, credentialRefresh, yieldWakeToCaller = false, deviceIdentity, lawPackage, performExternalEffect) {
   let runner;
   const configuredOrigins = new Set((shell.providerOrigins?.() ?? []).map((provider) => originOf(provider)).filter((origin) => origin !== void 0));
   const permittedSocket = (url) => {
@@ -30461,10 +30467,10 @@ function openPeerOfficeHost(kernel, shell, fetchImpl = globalThis.fetch, mainten
     return origin !== void 0 && configuredOrigins.has(origin);
   };
   const sockets = socketEffects(
-    (frame) => drivePeerFrame(runner, frame, fetchImpl, shell.custodyPort(), void 0, void 0, false, deviceIdentity, lawPackage),
+    (frame) => drivePeerFrame(runner, frame, fetchImpl, shell.custodyPort(), void 0, void 0, false, deviceIdentity, lawPackage, false, false, performExternalEffect),
     permittedSocket
   );
-  const credentials = credentialEffects((frame) => drivePeerFrame(runner, frame, fetchImpl, shell.custodyPort(), void 0, credentialRefresh, false, deviceIdentity, lawPackage), credentialRefresh);
+  const credentials = credentialEffects((frame) => drivePeerFrame(runner, frame, fetchImpl, shell.custodyPort(), void 0, credentialRefresh, false, deviceIdentity, lawPackage, false, false, performExternalEffect), credentialRefresh);
   runner = createPeerOfficeFrameRunner(
     kernel,
     shell.credentials(),
@@ -30489,7 +30495,10 @@ function openPeerOfficeHost(kernel, shell, fetchImpl = globalThis.fetch, mainten
         credentialRefresh,
         false,
         deviceIdentity,
-        lawPackage
+        lawPackage,
+        false,
+        false,
+        performExternalEffect
       );
     },
     shell.peerDeskStore()
@@ -30541,7 +30550,10 @@ function openPeerOfficeHost(kernel, shell, fetchImpl = globalThis.fetch, mainten
         credentialRefresh,
         yieldWakeToCaller,
         deviceIdentity,
-        lawPackage
+        lawPackage,
+        false,
+        false,
+        performExternalEffect
       );
     },
     settleRetention: (withinMillis) => runner.settleRetention(withinMillis),
@@ -34229,6 +34241,19 @@ function runLsp(args) {
   const r = spawnSync2(process.execPath, [launcher, ...args], { stdio: "inherit", cwd: process.cwd() });
   return r.status ?? 1;
 }
+function runInspectRelease(args) {
+  const compile = resolveCompileLauncher(process.cwd());
+  if (!compile) {
+    process.stderr.write(`error: ${NO_DSL_REMEDY}
+`);
+    return 1;
+  }
+  return spawnSync2(
+    process.execPath,
+    [join10(dirname2(compile), "inspect_release.mjs"), ...args],
+    { stdio: "inherit", cwd: process.cwd() }
+  ).status ?? 1;
+}
 var NO_DSL_REMEDY;
 var init_compile = __esm({
   "src/compile.ts"() {
@@ -34413,6 +34438,7 @@ var init_commands = __esm({
     "use strict";
     DISPATCHED_COMMANDS = [
       "compile",
+      "inspect-release",
       "check",
       "lsp",
       "mcp",
@@ -34497,6 +34523,17 @@ var init_help = __esm({
         ],
         examples: ["githolon compile", "githolon compile nomos.application.ts --require-usdcat"]
       },
+      "inspect-release": {
+        usage: "githolon inspect-release --identity <ledger.usda> --units <build/app.units>",
+        what: "Read-only release baseline observations as JSON. Verify unit bytes, compare identity metadata and\noptionally compare an installed workspace export. No admission, publication or installation approval.",
+        flags: [
+          ["--identity <path>", "current authoring identity ledger"],
+          ["--units <directory>", "compiler-emitted law unit directory"],
+          ["--against <path>", "optional prior identity ledger"],
+          ["--installed <path>", "optional JSON export from the console workspace API"]
+        ],
+        examples: ["githolon inspect-release --identity nomos.identity.usda --units build/app.units"]
+      },
       check: {
         usage: "githolon check [config] [--against <nomos.identity.usda|package dir>] [--json]",
         what: "THE AUTHOR-TIME GATE: run the static twins over the law you have written and print everything the\nkernel can already prove it would refuse \u2014 before a compile, before a deploy, before a user. --against adds\nthe EVOLVE PREVIEW: diff this build against a prior identity surface and pre-fire the evolve gate, so a\nrename, removal or retype is named here instead of at the install offer. Exit non-zero on any refusal.",
@@ -38113,6 +38150,7 @@ Start here:
   githolon compile                 compile aggregates, birth, directives, and reads into law + a typed client
   githolon test                    run generated Dart scenarios with real local custody
   githolon conformance             check the installed stack with an isolated generated application
+  githolon inspect-release         inspect identity continuity and compiled/installed units (read-only)
   githolon check                   explain anything the law can already prove it would refuse
 
 The application surface is one idea:
@@ -38307,6 +38345,7 @@ async function main(argv) {
   if (argv[0] === "compile") {
     return runCompileCommand(argv.slice(1));
   }
+  if (argv[0] === "inspect-release") return runInspectRelease(argv.slice(1));
   if (argv[0] === "check") {
     return runCheck(argv.slice(1));
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "githolon",
-  "version": "0.111.1",
+  "version": "0.112.1",
   "type": "module",
   "description": "githolon — the Nomos developer CLI: Rails-style generators for @githolon/dsl domains + the package compiler. Kernel-independent.",
   "license": "SEE LICENSE IN LICENSE.md",
@@ -30,7 +30,7 @@
   "dependencies": {
     "@bjorn3/browser_wasi_shim": "0.4.2",
     "@bufbuild/protobuf": "^2.13.0",
-    "@githolon/dsl": "^0.111.1",
+    "@githolon/dsl": "^0.112.1",
     "fast-xml-parser": "5.10.1",
     "isomorphic-git": "^1.38.4",
     "tsx": "^4.19.2",