@agentunion/fastaun-browser 0.5.18 → 0.5.20

package/dist/client/delivery.js

@@ -1,5 +1,6 @@
 import { slotIsolationKey } from '../config.js';
 import { normalizeGroupAid } from '../group-id.js';
+import { SeqTracker } from '../seq-tracker.js';
 import { ConnectionState, isJsonObject } from '../types.js';
 import { hasGroupMentionModeField, normalizeGroupMentionMode } from './mention-mode.js';
 const PUSHED_SEQS_LIMIT = 50_000;
@@ -132,10 +133,14 @@ export class MessageDeliveryEngine {
     pendingPullNoProgressAcks = null;
     onlineUnreadHintTargets = null;
     onlineUnreadHintOwners = null;
+    backgroundPullDemands = new Map();
+    backgroundPullTimer = null;
+    backgroundPullRecoveryQueued = false;
     realtimeAcking = null;
     pendingP2PInlineAcks = null;
     pendingGroupInlineAcks = null;
     pendingGroupInlineAckNamespaces = null;
+    pendingTailWindows = new Map();
     volatileContext = '';
     volatilePullCursorValue = '';
     volatileSeenMessages = new Map();
@@ -159,11 +164,17 @@ export class MessageDeliveryEngine {
         this.pendingPullNoProgressAcks = null;
         this.onlineUnreadHintTargets = null;
         this.onlineUnreadHintOwners = null;
+        this.backgroundPullDemands.clear();
+        if (this.backgroundPullTimer !== null)
+            clearTimeout(this.backgroundPullTimer);
+        this.backgroundPullTimer = null;
+        this.backgroundPullRecoveryQueued = false;
         this.realtimeTailResults = null;
         this.realtimeAcking = null;
         this.pendingP2PInlineAcks = null;
         this.pendingGroupInlineAcks = null;
         this.pendingGroupInlineAckNamespaces = null;
+        this.pendingTailWindows.clear();
         this.syncingNamespaces.clear();
         this.syncSessions.clear();
     }
@@ -186,6 +197,35 @@ export class MessageDeliveryEngine {
     captureInlineGeneration() {
         return this.inlineGeneration;
     }
+    deferTailWindow(ns, proof) {
+        const tracker = new SeqTracker();
+        tracker.restoreNamespaceSnapshot(ns, this.runtime.client._seqTracker.snapshotNamespace(ns));
+        tracker.commitTailWindow(ns, proof);
+        this.pendingTailWindows.set(ns, proof);
+    }
+    prospectiveTailState(ns) {
+        const proof = this.pendingTailWindows.get(ns);
+        if (!proof)
+            return this.syncState(ns);
+        const tracker = new SeqTracker();
+        tracker.restoreNamespaceSnapshot(ns, this.runtime.client._seqTracker.snapshotNamespace(ns));
+        tracker.commitTailWindow(ns, proof);
+        return tracker.getSyncState(ns);
+    }
+    pendingTailDeliveryThrough(ns, scanThrough) {
+        const proof = this.pendingTailWindows.get(ns);
+        return proof && scanThrough >= proof.windowStartSeq - 1 ? Math.max(scanThrough, proof.headSeq) : scanThrough;
+    }
+    commitPendingTailWindow(ns, scanThrough) {
+        const proof = this.pendingTailWindows.get(ns);
+        if (proof && scanThrough >= proof.windowStartSeq - 1)
+            this.runtime.client._seqTracker.commitTailWindow(ns, proof);
+    }
+    completePendingTailWindow(ns) {
+        const proof = this.pendingTailWindows.get(ns);
+        if (proof && this.runtime.client._seqTracker.getContiguousSeq(ns) >= proof.headSeq)
+            this.pendingTailWindows.delete(ns);
+    }
     beginRealtimeSync(ns) {
         if (!ns || this.realtimeSyncing?.has(ns))
             return false;
@@ -294,8 +334,120 @@ export class MessageDeliveryEngine {
         if (!ns)
             return;
         this.schedulePendingPullIfNeeded(ns, 'pull-gate-idle');
+        this.requestBackgroundPullRecovery();
+    }
+    recordBackgroundPullDemand(ns, throughSeq = 0, probe = false) {
+        const demand = this.backgroundPullDemands.get(ns) ?? {
+            throughSeq: 0, hasMore: false, probe: false, afterSeq: -1, retryAt: 0,
+        };
+        demand.throughSeq = Math.max(demand.throughSeq, positiveSafeSequenceHint(throughSeq));
+        demand.probe ||= probe;
+        this.backgroundPullDemands.set(ns, demand);
+        return demand;
+    }
+    observeBackgroundPullResponse(ns, afterSeq, result, limit = 50) {
+        if (!ns || this.runtime.client._sessionOptions?.background_sync === false)
+            return;
+        const cursor = isJsonObject(result.cursor) ? result.cursor : null;
+        const rows = Array.isArray(result.messages) ? result.messages : Array.isArray(result.events) ? result.events : [];
+        let throughSeq = Math.max(positiveSafeSequenceHint(cursor?.latest_seq), positiveSafeSequenceHint(result.latest_seq), positiveSafeSequenceHint(result.latest_message_seq), positiveSafeSequenceHint(result.latest_event_seq));
+        for (const row of rows) {
+            if (!isJsonObject(row) || this.isVolatileMessage(row))
+                continue;
+            throughSeq = Math.max(throughSeq, positiveSafeSequenceHint(row.seq ?? row.event_seq));
+        }
+        const demand = this.recordBackgroundPullDemand(ns, throughSeq);
+        if (afterSeq >= demand.afterSeq) {
+            demand.afterSeq = afterSeq;
+            demand.hasMore = result.has_more === true
+                || positiveSafeSequenceHint(result.remaining) > 0
+                || (!Object.prototype.hasOwnProperty.call(result, 'has_more') && limit > 0 && rows.length >= limit);
+            demand.probe = false;
+        }
+        this.requestBackgroundPullRecovery();
+    }
+    finishBackgroundPull(ns, afterSeq, failed) {
+        const demand = this.backgroundPullDemands.get(ns);
+        if (demand) {
+            const state = this.syncState(ns);
+            const ack = state.ack;
+            if (ack < state.tail - 1)
+                demand.throughSeq = Math.max(demand.throughSeq, state.tail - 1);
+            demand.probe = failed;
+            if (!demand.probe && !demand.hasMore && ack >= demand.throughSeq)
+                this.backgroundPullDemands.delete(ns);
+            else
+                demand.retryAt = failed || ack <= afterSeq || ack <= (this.pendingPullNoProgressAcks?.get(ns) ?? -1)
+                    ? Date.now() + P2P_GAP_FILL_RETRY_BASE_MS
+                    : 0;
+        }
+        this.requestBackgroundPullRecovery();
+    }
+    requestBackgroundPullRecovery() {
+        if (this.backgroundPullRecoveryQueued)
+            return;
+        const generation = this.captureInlineGeneration();
+        this.backgroundPullRecoveryQueued = true;
+        void Promise.resolve().then(() => {
+            if (!this.isInlineGenerationCurrent(generation))
+                return;
+            this.backgroundPullRecoveryQueued = false;
+            const client = this.runtime.client;
+            if (!client._aid || client._sessionOptions?.background_sync === false
+                || client.state !== ConnectionState.READY || client._closing)
+                return;
+            if (this.backgroundPullTimer !== null)
+                clearTimeout(this.backgroundPullTimer);
+            this.backgroundPullTimer = null;
+            let retryAt = 0;
+            for (const [ns, demand] of this.backgroundPullDemands) {
+                if (ns.startsWith('p2p:') && ns !== `p2p:${client._aid}`)
+                    continue;
+                const dedupKey = ns.startsWith('p2p:') ? `p2p_pull:${ns}`
+                    : ns.startsWith('group_event:') ? `group_event_pull:${ns}` : `group_pull:${ns}`;
+                if (client._gapFillDone.has(dedupKey) || this.onlineUnreadHintOwners?.has(ns)
+                    || this.realtimeSyncing?.has(ns) || client._rpcPipeline?.hasPullActivity?.(ns, false))
+                    continue;
+                const ack = this.syncState(ns).ack;
+                if (!demand.probe && !demand.hasMore && ack >= demand.throughSeq) {
+                    this.backgroundPullDemands.delete(ns);
+                    continue;
+                }
+                if (demand.retryAt > Date.now()) {
+                    retryAt = retryAt === 0 ? demand.retryAt : Math.min(retryAt, demand.retryAt);
+                    continue;
+                }
+                if (ns.startsWith('p2p:'))
+                    client._safeAsync(this.fillP2pGap());
+                else if (ns.startsWith('group_event:'))
+                    client._safeAsync(this.fillGroupEventGap(ns.slice('group_event:'.length)));
+                else if (ns.startsWith('group:'))
+                    client._safeAsync(this.fillGroupGap(ns.slice('group:'.length)));
+            }
+            if (retryAt > 0) {
+                this.backgroundPullTimer = globalThis.setTimeout(() => {
+                    this.backgroundPullTimer = null;
+                    if (this.isInlineGenerationCurrent(generation))
+                        this.requestBackgroundPullRecovery();
+                }, Math.max(0, retryAt - Date.now()));
+            }
+        });
+    }
+    onForegroundPullsDrained() {
+        this.requestBackgroundPullRecovery();
+        const client = this.runtime.client;
+        if (!client._aid || client._sessionOptions?.background_sync === false
+            || client.state !== ConnectionState.READY || client._closing)
+            return;
+        const ns = `p2p:${client._aid}`;
+        const state = this.syncState(ns);
+        const maxSeen = client._seqTracker.getMaxSeenSeq(ns);
+        if (maxSeen <= state.ack && state.ack >= state.tail - 1)
+            return;
+        client._safeAsync(this.fillP2pGap());
     }
     onPullWorkSettled() {
+        this.requestBackgroundPullRecovery();
         const pipeline = this.runtime.client._rpcPipeline;
         if (pipeline?.hasAnyPullActivity?.() === true)
             return;
@@ -952,9 +1104,7 @@ export class MessageDeliveryEngine {
         const pageInlineGeneration = this.captureInlineGeneration();
         const deferredServerCursor = Number(coordinator.pendingForwardCursor(ns, pageContigBefore) ?? 0);
         const deferredForwardAck = Number(coordinator.pendingForwardAck(ns, pageContigBefore) ?? 0);
-        const pageTrackerSnapshot = typeof client._seqTracker.snapshotNamespace === 'function'
-            ? client._seqTracker.snapshotNamespace(ns)
-            : null;
+        let pageTrackerSnapshot;
         response._contig_before = pageContigBefore;
         const cursor = isJsonObject(response.cursor)
             ? response.cursor
@@ -1005,6 +1155,15 @@ export class MessageDeliveryEngine {
             const contiguousSeq = Number.isSafeInteger(result.contiguous_seq)
                 ? result.contiguous_seq
                 : undefined;
+            const scanThrough = Math.max(pageContigBefore, contiguousSeq ?? 0, retentionFloor, visibilityFloor, deferredServerCursor, ...messages.map((message) => positiveSafeSequenceHint(message.seq)));
+            const state = this.syncState(ns);
+            const deliveryThrough = this.pendingTailDeliveryThrough(ns, scanThrough >= state.tail - 1 ? Math.max(scanThrough, state.head) : scanThrough);
+            await this.drainOrderedMessages(ns, undefined, false, false, undefined, 'pull', deliveryThrough);
+            this.ensurePullOperationCurrent(ns);
+            if (!this.isInlineGenerationCurrent(pageInlineGeneration))
+                throw new Error('pull invalidated');
+            pageTrackerSnapshot = client._seqTracker.snapshotNamespace(ns);
+            this.commitPendingTailWindow(ns, scanThrough);
             if (contiguousSeq === undefined)
                 client._seqTracker.onPullResult(ns, messages, afterSeq);
             else
@@ -1014,16 +1173,19 @@ export class MessageDeliveryEngine {
                 client._seqTracker.forceContiguousSeq(ns, commitTarget);
             }
             if (client._seqTracker.getContiguousSeq(ns) !== pageContigBefore) {
-                this.ensurePullOperationCurrent(ns);
-                await this.drainOrderedMessages(ns, undefined, false, false);
                 this.ensurePullOperationCurrent(ns);
                 await client._commitSeqTrackerState(ns);
+                this.ensurePullOperationCurrent(ns);
+                if (!this.isInlineGenerationCurrent(pageInlineGeneration))
+                    throw new Error('pull invalidated');
             }
+            this.completePendingTailWindow(ns);
             committed = true;
         }
         catch (exc) {
-            if (this.isPullOperationCurrent(ns) && !committed && typeof client._seqTracker.restoreNamespaceSnapshot === 'function') {
-                client._seqTracker.restoreNamespaceSnapshot(ns, pageTrackerSnapshot);
+            if (this.isPullOperationCurrent(ns) && this.isInlineGenerationCurrent(pageInlineGeneration)
+                && pageTrackerSnapshot !== undefined && !committed && typeof client._seqTracker.restoreNamespaceSnapshot === 'function') {
+                client._seqTracker._restoreNamespaceSnapshotPreservingPush(ns, pageTrackerSnapshot);
                 this.dropSeqTrackerPending(ns);
             }
             throw exc;
@@ -1103,6 +1265,8 @@ export class MessageDeliveryEngine {
         }
         if (pullResponse) {
             await client._withPullResponseProcessing(ns, () => client._publishAppEvent(event, payload, source, ns, batch));
+            if (pullScoped)
+                this.ensurePullOperationCurrent(ns);
             return;
         }
         await client._publishAppEvent(event, payload, source, ns, batch);
@@ -1111,6 +1275,10 @@ export class MessageDeliveryEngine {
     }
     async publishOrderedGroupChanged(payload, source = 'ordered') {
         const client = this.runtime.client;
+        const generation = this.captureInlineGeneration();
+        await client._publishAppEvent('group.changed', payload, source);
+        if (!this.isInlineGenerationCurrent(generation))
+            throw new Error('pull invalidated');
         if (isJsonObject(payload)) {
             const eventPayload = payload;
             client._groupState?.handleGroupChangedV2Membership?.(eventPayload);
@@ -1121,7 +1289,6 @@ export class MessageDeliveryEngine {
                     client._cleanupDissolvedGroup?.(groupId);
             }
         }
-        await client._publishAppEvent('group.changed', payload, source);
     }
     isInstanceScopedMessageEvent(event) {
         return event === 'message.received'
@@ -1559,6 +1726,7 @@ export class MessageDeliveryEngine {
     }
     async publishMessageRecallTombstone(seq, message, source = 'push') {
         const client = this.runtime.client;
+        const generation = this.captureInlineGeneration();
         const eventPayload = this.recallEventFromMessage(message);
         if (!eventPayload)
             return false;
@@ -1572,13 +1740,15 @@ export class MessageDeliveryEngine {
             client._clientLog.debug(`message.recalled dedup suppressed: seq=${String(seq)} key=${dedupKey}`);
             return false;
         }
+        await client._publishAppEvent('message.recalled', eventPayload, source);
+        if (!this.isInlineGenerationCurrent(generation))
+            throw new Error('pull invalidated');
         seen.set(dedupKey, Date.now());
         if (seen.size > MESSAGE_RECALL_SEEN_LIMIT) {
             const drop = [...seen.entries()].sort((a, b) => a[1] - b[1]).slice(0, seen.size - MESSAGE_RECALL_SEEN_LIMIT);
             for (const [oldKey] of drop)
                 seen.delete(oldKey);
         }
-        await client._publishAppEvent('message.recalled', eventPayload, source);
         client._clientLog.debug(`message.recalled published: seq=${String(seq)} ids=${JSON.stringify(eventPayload.message_ids)}`);
         return true;
     }
@@ -1663,6 +1833,7 @@ export class MessageDeliveryEngine {
     }
     async publishGroupRecallTombstone(groupId, seq, message, source = 'push') {
         const client = this.runtime.client;
+        const generation = this.captureInlineGeneration();
         const eventPayload = this.recallEventFromGroupMessage(message);
         if (!eventPayload)
             return false;
@@ -1678,13 +1849,15 @@ export class MessageDeliveryEngine {
             client._clientLog.debug(`group.message_recalled dedup suppressed: group=${groupId} seq=${String(seq)} key=${dedupKey}`);
             return false;
         }
+        await client._publishAppEvent('group.message_recalled', eventPayload, source);
+        if (!this.isInlineGenerationCurrent(generation))
+            throw new Error('pull invalidated');
         seen.set(dedupKey, Date.now());
         if (seen.size > GROUP_RECALL_SEEN_LIMIT) {
             const drop = [...seen.entries()].sort((a, b) => a[1] - b[1]).slice(0, seen.size - GROUP_RECALL_SEEN_LIMIT);
             for (const [oldKey] of drop)
                 seen.delete(oldKey);
         }
-        await client._publishAppEvent('group.message_recalled', eventPayload, source);
         client._clientLog.debug(`group.message_recalled published: group=${groupId} seq=${String(seq)} ids=${JSON.stringify(eventPayload.message_ids)}`);
         return true;
     }
@@ -1755,7 +1928,13 @@ export class MessageDeliveryEngine {
             && canonicalSource !== 'direct') {
             normalized = { ...normalized, source: canonicalSource };
         }
-        client._dispatcher.enqueue(event, normalized);
+        if (['message.received', 'group.message_created', 'message.recalled', 'group.message_recalled', 'group.changed'].includes(event)
+            && typeof client._dispatcher._publishAndWait === 'function') {
+            await client._dispatcher._publishAndWait(event, normalized);
+        }
+        else {
+            client._dispatcher.enqueue(event, normalized);
+        }
         if (generation !== this.deliveryGeneration)
             return;
         if (canonicalSource !== 'pull' && canonicalSource !== 'pending_retry'
@@ -1997,6 +2176,8 @@ export class MessageDeliveryEngine {
             }
         }
         catch (exc) {
+            if (exc?.stringCode === 'persistence_unavailable')
+                throw exc;
             client._clientLog.warn(`P2P push processing failed:${String(exc)}`);
             if (isJsonObject(data)) {
                 const src = data;
@@ -2155,7 +2336,14 @@ export class MessageDeliveryEngine {
                 return;
             }
         }
+        const generation = this.captureInlineGeneration();
+        const dedupKey = `group_pull:${ns}`;
+        this.recordBackgroundPullDemand(ns, positiveSafeSequenceHint(notification.seq), true);
+        if (client._gapFillDone.has(dedupKey))
+            return;
+        client._gapFillDone.add(dedupKey);
         let rawCompleted = false;
+        let failed = false;
         try {
             const key = client._rpcPipeline.pullGateKeyForCall('group.pull', {
                 group_id: groupId,
@@ -2171,12 +2359,17 @@ export class MessageDeliveryEngine {
                     limit: 50,
                     _rpc_background: true,
                 }, { background: true });
+                if (!this.isInlineGenerationCurrent(generation))
+                    throw new Error('pull invalidated');
                 rawCompleted = true;
+                if (isJsonObject(result))
+                    this.observeBackgroundPullResponse(ns, afterSeq, result, 50);
                 await this.commitPlainForwardPage(ns, afterSeq, 'group.pull', result, groupId);
                 this.prunePushedSeqs(ns);
             }, true);
         }
         catch (exc) {
+            failed = true;
             // 页发布或本地提交失败不能 ACK；提交后 ACK 失败则保留 pending。
             // 两种情况都不能再把原始通知当作第二条业务消息发布。
             client._clientLog.warn(`auto pull group message commit/ack failed:${String(exc)}`);
@@ -2184,6 +2377,12 @@ export class MessageDeliveryEngine {
                 await client._publishAppEvent('group.message_created', notification, 'push');
             }
         }
+        finally {
+            if (this.isInlineGenerationCurrent(generation)) {
+                client._gapFillDone.delete(dedupKey);
+                this.finishBackgroundPull(ns, afterSeq, failed);
+            }
+        }
     }
     scheduleP2pGapRetry(ns, retryAttempt) {
         const client = this.runtime.client;
@@ -2207,6 +2406,7 @@ export class MessageDeliveryEngine {
     }
     async fillP2pGap(retryAttempt = 0) {
         const client = this.runtime.client;
+        const generation = this.captureInlineGeneration();
         if (client._sessionOptions?.background_sync === false)
             return;
         if (client.state !== ConnectionState.READY || client._closing)
@@ -2218,9 +2418,11 @@ export class MessageDeliveryEngine {
         const dedupKey = `p2p_pull:${ns}`;
         if (client._gapFillDone.has(dedupKey))
             return;
+        this.recordBackgroundPullDemand(ns, 0, true);
         client._gapFillDone.add(dedupKey);
         this.runtime.delivery.setGapFillActive(true);
         let filled = 0;
+        let failed = false;
         try {
             const key = client._rpcPipeline.pullGateKeyForCall('message.pull', { after_seq: afterSeq, limit: 50 });
             const messages = await client._rpcPipeline.runPullSerialized(key, () => client._pullV2(afterSeq, 50, { gateLocked: true }), true);
@@ -2236,22 +2438,27 @@ export class MessageDeliveryEngine {
                     client._clientLog.warn(`P2P message gap-fill V2 unavailable, used plain pull fallback:${String(formatDeliveryError(exc))}`);
                 }
                 catch (fallbackExc) {
+                    failed = true;
                     client._clientLog.warn(`P2P message gap-fill plain fallback failed:${String(formatDeliveryError(fallbackExc))}`);
-                    this.scheduleP2pGapRetry(ns, retryAttempt + 1);
                 }
             }
             else {
+                failed = true;
                 client._clientLog.warn(`P2P message gap-fill failed:${String(formatDeliveryError(exc))}`);
             }
         }
         finally {
-            client._gapFillDone.delete(dedupKey);
-            this.runtime.delivery.setGapFillActive(false);
-            this.schedulePendingPullIfNeeded(ns, 'gap-fill-complete');
+            if (this.isInlineGenerationCurrent(generation)) {
+                client._gapFillDone.delete(dedupKey);
+                this.runtime.delivery.setGapFillActive(false);
+                this.schedulePendingPullIfNeeded(ns, 'gap-fill-complete');
+                this.finishBackgroundPull(ns, afterSeq, failed);
+            }
         }
     }
     async fillP2pGapWithPlainPull(ns, afterSeq) {
         const client = this.runtime.client;
+        const generation = this.captureInlineGeneration();
         const params = {
             after_seq: afterSeq,
             limit: 50,
@@ -2260,11 +2467,16 @@ export class MessageDeliveryEngine {
             _rpc_background: true,
         };
         const raw = await client._rpcPipeline.rawCall('message.pull', params, { background: true });
+        if (!this.isInlineGenerationCurrent(generation))
+            throw new Error('pull invalidated');
+        if (isJsonObject(raw))
+            this.observeBackgroundPullResponse(ns, afterSeq, raw, 50);
         const page = await this.commitPlainForwardPage(ns, afterSeq, 'message.pull', raw);
         return page.publishedCount;
     }
     async fillGroupGap(groupId) {
         const client = this.runtime.client;
+        const generation = this.captureInlineGeneration();
         if (client._sessionOptions?.background_sync === false)
             return;
         if (client.state !== ConnectionState.READY || client._closing)
@@ -2277,29 +2489,53 @@ export class MessageDeliveryEngine {
         const dedupKey = `group_pull:${ns}`;
         if (client._gapFillDone.has(dedupKey))
             return;
+        this.recordBackgroundPullDemand(ns, 0, true);
         client._gapFillDone.add(dedupKey);
         this.runtime.delivery.setGapFillActive(true);
         let filled = 0;
+        let failed = false;
         try {
             const key = client._rpcPipeline.pullGateKeyForCall('group.pull', { group_id: groupId, after_seq: afterSeq, limit: 50 });
-            const messages = await client._rpcPipeline.runPullSerialized(key, () => client._pullGroupV2(groupId, afterSeq, 50, { gateLocked: true }), true);
+            const messages = await client._rpcPipeline.runPullSerialized(key, async () => {
+                if (client._v2Session)
+                    return await client._pullGroupV2(groupId, afterSeq, 50, { gateLocked: true });
+                const result = await client._rpcPipeline.rawCall('group.pull', {
+                    group_id: groupId,
+                    after_message_seq: afterSeq,
+                    device_id: client._deviceId,
+                    slot_id: client._slotId,
+                    limit: 50,
+                    _rpc_background: true,
+                }, { background: true });
+                if (!this.isInlineGenerationCurrent(generation))
+                    throw new Error('pull invalidated');
+                if (isJsonObject(result))
+                    this.observeBackgroundPullResponse(ns, afterSeq, result, 50);
+                await this.commitPlainForwardPage(ns, afterSeq, 'group.pull', result, groupId);
+                return isJsonObject(result) && Array.isArray(result.messages) ? result.messages : [];
+            }, true);
             filled = messages.length;
             this.prunePushedSeqs(ns);
         }
         catch (exc) {
+            failed = true;
             client._clientLog.warn(`group message gap-fill failed:${String(exc)}`);
         }
         finally {
-            client._gapFillDone.delete(dedupKey);
-            this.runtime.delivery.setGapFillActive(false);
-            if (filled > 0 && client._seqTracker.getContiguousSeq(ns) > afterSeq) {
-                client._safeAsync(this.fillGroupGap(groupId));
+            if (this.isInlineGenerationCurrent(generation)) {
+                client._gapFillDone.delete(dedupKey);
+                this.runtime.delivery.setGapFillActive(false);
+                if (filled > 0 && client._seqTracker.getContiguousSeq(ns) > afterSeq) {
+                    this.recordBackgroundPullDemand(ns, 0, true);
+                }
+                this.schedulePendingPullIfNeeded(ns, 'gap-fill-complete');
+                this.finishBackgroundPull(ns, afterSeq, failed);
             }
-            this.schedulePendingPullIfNeeded(ns, 'gap-fill-complete');
         }
     }
     async fillGroupEventGap(groupId, options) {
         const client = this.runtime.client;
+        const generation = this.captureInlineGeneration();
         if (client._sessionOptions?.background_sync === false)
             return;
         if (client.state !== ConnectionState.READY || client._closing)
@@ -2316,6 +2552,7 @@ export class MessageDeliveryEngine {
         const dedupKey = `group_event_pull:${ns}`;
         if (client._gapFillDone.has(dedupKey))
             return;
+        this.recordBackgroundPullDemand(ns, 0, true);
         client._gapFillDone.add(dedupKey);
         this.runtime.delivery.setGapFillActive(true);
         let continuationAfterSeq = 0;
@@ -2335,6 +2572,10 @@ export class MessageDeliveryEngine {
                     _rpc_background: true,
                 };
                 const result = await client.call('group.pull_events', request);
+                if (!this.isInlineGenerationCurrent(generation))
+                    throw new Error('pull invalidated');
+                if (isJsonObject(result))
+                    this.observeBackgroundPullResponse(ns, nextAfterSeq, result, 50);
                 if (!isJsonObject(result))
                     return;
                 const events = result.events;
@@ -2343,23 +2584,12 @@ export class MessageDeliveryEngine {
                 const pageContigBefore = client._seqTracker.getContiguousSeq(ns);
                 const eventObjects = events.filter((evt) => isJsonObject(evt));
                 const contiguousSeq = Number.isSafeInteger(result.contiguous_seq) ? result.contiguous_seq : undefined;
-                if (contiguousSeq === undefined)
-                    client._seqTracker.onPullResult(ns, eventObjects, nextAfterSeq);
-                else
-                    client._seqTracker.onPullResult(ns, eventObjects, nextAfterSeq, contiguousSeq);
                 const cursor = isJsonObject(result.cursor) ? result.cursor : null;
                 const retentionFloor = Math.max(0, Number(result.retention_floor_event_seq ?? 0), Number(cursor?.retention_floor_seq ?? 0));
                 const serverAckFloor = Math.max(0, Number(cursor?.current_seq ?? 0));
                 const earliestAvailable = Number(result.earliest_available_event_seq ?? 0);
                 const visibilityFloor = Math.max(0, Number(cursor?.join_seq ?? 0), Number.isFinite(earliestAvailable) && earliestAvailable > 0 ? earliestAvailable - 1 : 0);
                 const effectiveFloor = Math.max(...[retentionFloor, serverAckFloor, visibilityFloor].filter((value) => Number.isFinite(value)));
-                if (effectiveFloor > 0) {
-                    const contigBeforeFloor = client._seqTracker.getContiguousSeq(ns);
-                    if (contigBeforeFloor < effectiveFloor) {
-                        client._clientLog.info('group.pull_events floor advance: ns=' + ns + ' contiguous=' + contigBeforeFloor + ' -> effective_floor=' + effectiveFloor + ' retention_floor=' + retentionFloor + ' server_ack=' + serverAckFloor + ' visibility_floor=' + visibilityFloor);
-                        client._seqTracker.forceContiguousSeq(ns, effectiveFloor);
-                    }
-                }
                 const eventSeqs = [];
                 let hasDissolvedEvent = false;
                 let publishedEventCount = 0;
@@ -2388,8 +2618,22 @@ export class MessageDeliveryEngine {
                         publishedEventCount += 1;
                     }
                 }
+                const deliveryThrough = Math.max(pageContigBefore, contiguousSeq ?? 0, effectiveFloor, ...eventSeqs);
+                await this.drainOrderedMessages(ns, undefined, false, false, undefined, 'pull', deliveryThrough);
+                if (!this.isInlineGenerationCurrent(generation))
+                    throw new Error('pull invalidated');
+                if (hasDissolvedEvent) {
+                    this.backgroundPullDemands.delete(ns);
+                    break;
+                }
+                if (contiguousSeq === undefined)
+                    client._seqTracker.onPullResult(ns, eventObjects, nextAfterSeq);
+                else
+                    client._seqTracker.onPullResult(ns, eventObjects, nextAfterSeq, contiguousSeq);
+                if (effectiveFloor > client._seqTracker.getContiguousSeq(ns)) {
+                    client._seqTracker.forceContiguousSeq(ns, effectiveFloor);
+                }
                 const ackContig = client._seqTracker.getContiguousSeq(ns);
-                await this.drainOrderedMessages(ns);
                 if (ackContig !== pageContigBefore && !hasDissolvedEvent) {
                     this.persistSeq(ns);
                 }
@@ -2429,15 +2673,12 @@ export class MessageDeliveryEngine {
             client._clientLog.warn(`group event gap-fill failed:${String(exc)}`);
         }
         finally {
-            client._gapFillDone.delete(dedupKey);
-            this.runtime.delivery.setGapFillActive(false);
-            if (!client._rpcPipeline)
-                this.syncStopped(failed ? 'aborted' : 'pull_drained');
-            if (singlePage && continuationAfterSeq > afterSeq) {
-                this.enqueueOnlineUnreadEventHint({
-                    group_id: groupId,
-                    _online_hint_after_event_seq: continuationAfterSeq,
-                });
+            if (this.isInlineGenerationCurrent(generation)) {
+                client._gapFillDone.delete(dedupKey);
+                this.runtime.delivery.setGapFillActive(false);
+                if (!client._rpcPipeline)
+                    this.syncStopped(failed ? 'aborted' : 'pull_drained');
+                this.finishBackgroundPull(ns, afterSeq, failed);
             }
         }
     }
@@ -2493,6 +2734,9 @@ export class MessageDeliveryEngine {
         if (!groupId)
             return;
         const ns = `group:${groupId}`;
+        const generation = this.captureInlineGeneration();
+        const afterSeq = this.syncState(ns).ack;
+        this.recordBackgroundPullDemand(ns, positiveSafeSequenceHint(data.seq), true);
         const targets = this.onlineUnreadHintTargets ?? new Map();
         const owners = this.onlineUnreadHintOwners ?? new Set();
         this.onlineUnreadHintTargets = targets;
@@ -2502,11 +2746,16 @@ export class MessageDeliveryEngine {
             return;
         owners.add(ns);
         client._safeAsync((async () => {
+            let failed = false;
+            let attemptAfterSeq = afterSeq;
             try {
                 while (true) {
                     const throughSeq = targets.get(ns) ?? 0;
                     const ackBefore = this.syncState(ns).ack;
+                    attemptAfterSeq = ackBefore;
                     await this.runGroupForwardRecovery(groupId, ns, 50, true, throughSeq);
+                    if (!this.isInlineGenerationCurrent(generation))
+                        return;
                     const ackAfter = this.syncState(ns).ack;
                     const target = targets.get(ns) ?? 0;
                     if (ackAfter >= target || ackAfter <= ackBefore)
@@ -2514,6 +2763,7 @@ export class MessageDeliveryEngine {
                 }
             }
             catch (exc) {
+                failed = true;
                 client._clientLog?.debug(`online unread hint background Forward failed: ns=${ns} err=${formatDeliveryError(exc)}`);
             }
             finally {
@@ -2521,6 +2771,8 @@ export class MessageDeliveryEngine {
                     targets.delete(ns);
                 if (this.onlineUnreadHintOwners === owners)
                     owners.delete(ns);
+                if (this.isInlineGenerationCurrent(generation))
+                    this.finishBackgroundPull(ns, attemptAfterSeq, failed);
             }
         })());
     }
@@ -2529,6 +2781,7 @@ export class MessageDeliveryEngine {
         const groupId = String(data.group_id ?? '').trim();
         if (!groupId || client._sessionOptions?.background_sync === false)
             return;
+        this.recordBackgroundPullDemand(`group_event:${groupId}`, positiveSafeSequenceHint(data.event_seq), true);
         const rawAfter = Number(data._online_hint_after_event_seq ?? 0);
         const afterSeq = Number.isSafeInteger(rawAfter) && rawAfter > 0 ? rawAfter : 0;
         client._safeAsync(this.fillGroupEventGap(groupId, {
@@ -2879,9 +3132,8 @@ export class MessageDeliveryEngine {
     async commitInlineMessage(ns, seq, event, payload, generation) {
         const client = this.runtime.client;
         const tracker = client._seqTracker;
-        const snapshot = typeof tracker.snapshotNamespace === 'function'
-            ? tracker.snapshotNamespace(ns)
-            : null;
+        let snapshot = null;
+        let trackerChanged = false;
         try {
             const selfSync = (event === 'message.received' && this.isSelfSentP2PMessage(payload))
                 || (event === 'group.message_created' && this.isSelfSentGroupMessage(payload));
@@ -2892,6 +3144,8 @@ export class MessageDeliveryEngine {
                 return false;
             if (!published)
                 return false;
+            snapshot = typeof tracker.snapshotNamespace === 'function' ? tracker.snapshotNamespace(ns) : null;
+            trackerChanged = true;
             const needsPull = Boolean(tracker.onMessageSeq(ns, seq));
             const committed = this.syncState(ns);
             if (needsPull || committed.ack !== seq || committed.tail !== seq || committed.head !== seq) {
@@ -2905,8 +3159,8 @@ export class MessageDeliveryEngine {
             return true;
         }
         catch (exc) {
-            if (this.isInlineGenerationCurrent(generation) && typeof tracker.restoreNamespaceSnapshot === 'function') {
-                tracker.restoreNamespaceSnapshot(ns, snapshot);
+            if (trackerChanged && this.isInlineGenerationCurrent(generation) && typeof tracker.restoreNamespaceSnapshot === 'function') {
+                tracker._restoreNamespaceSnapshotPreservingPush(ns, snapshot);
             }
             client._clientLog.debug(`inline realtime consume rolled back: ns=${ns} seq=${seq} err=${formatDeliveryError(exc)}`);
             return false;
@@ -2995,7 +3249,7 @@ export class MessageDeliveryEngine {
         }
     }
     hasOutstandingRealtimeGap(ns) {
-        const state = this.syncState(ns);
+        const state = this.prospectiveTailState(ns);
         // Tail 已建立可靠后缀窗口；后台续拉只针对尚未接上窗口的真实缺口。
         // maxSeen 可能只是 Tail 期间到达的通知，不能单独据此启动全量补洞。
         return state.ack < state.tail - 1;
@@ -3051,8 +3305,8 @@ export class MessageDeliveryEngine {
     }
     async runP2PRealtimeSync(ns, pushSeq, pageLimit = 50, forceTail = false) {
         const client = this.runtime.client;
-        const before = this.syncState(ns);
-        const order = forceTail ? ['tail'] : typeof client._seqTracker.planRealtimeSync === 'function'
+        const before = this.prospectiveTailState(ns);
+        const order = forceTail ? ['tail'] : this.pendingTailWindows.has(ns) ? ['forward'] : typeof client._seqTracker.planRealtimeSync === 'function'
             ? client._seqTracker.planRealtimeSync(ns, pushSeq, pageLimit)
             : (() => {
                 const gap = pushSeq - before.ack;
@@ -3065,7 +3319,7 @@ export class MessageDeliveryEngine {
         let result = { messages: [], raw_count: 0 };
         let tailCompleted = false;
         const run = async (tail, background, maxPages, forceForward = false, bypassCoveredHead = false) => {
-            const live = this.syncState(ns);
+            const live = this.prospectiveTailState(ns);
             if (tail && !bypassCoveredHead && pushSeq <= live.head)
                 return { messages: [], raw_count: 0 };
             if (!tail && !forceForward && live.ack >= live.tail - 1)
@@ -3089,7 +3343,7 @@ export class MessageDeliveryEngine {
         };
         if (forceTail || order[0] === 'tail')
             result = await run(true, false, undefined, false, forceTail);
-        const state = this.syncState(ns);
+        const state = this.prospectiveTailState(ns);
         const maxSeen = Number(client._seqTracker.getMaxSeenSeq(ns) || 0);
         // Tail 期间到达的新 Push 只记录在 pending Pull 上界，不写入 SeqTracker。
         const pendingUpper = Number(this.pendingP2pPullUpper?.get(ns) ?? 0);
@@ -3104,16 +3358,16 @@ export class MessageDeliveryEngine {
             || (client._sessionOptions?.background_sync !== false && backgroundWindowForward)) {
             const forwardTarget = Math.max(headForward ? Math.max(pushSeq, maxSeen) : 0, (tailForward || backgroundWindowForward) ? state.tail - 1 : 0, tailMissedDuringPull ? observedUpper : 0);
             const forwardMaxPages = this.forwardMaxPages(state.ack, forwardTarget, pageLimit);
-            result = await run(false, !(headForward || tailForward), forwardMaxPages, headForward || tailMissedDuringPull);
+            result = await run(false, !(headForward || tailForward), forwardMaxPages, headForward || tailForward || tailMissedDuringPull);
             if (pendingThroughSeq > 0) {
-                const committedAck = this.syncState(ns).ack;
+                const committedAck = this.prospectiveTailState(ns).ack;
                 if (committedAck >= pendingThroughSeq)
                     this.consumePendingPull(ns, pendingThroughSeq);
                 else if (committedAck <= state.ack)
                     this.markPendingPullNoProgress(ns, committedAck);
             }
         }
-        const finalState = this.syncState(ns);
+        const finalState = this.prospectiveTailState(ns);
         if (tailCompleted && finalState.ack < finalState.tail - 1) {
             this.scheduleP2PRealtimeFullGapFill(ns);
         }
@@ -3123,8 +3377,8 @@ export class MessageDeliveryEngine {
     }
     async runGroupRealtimeSync(groupId, ns, pushSeq, pageLimit = 50, forceTail = false) {
         const client = this.runtime.client;
-        const before = this.syncState(ns);
-        const order = forceTail ? ['tail'] : typeof client._seqTracker.planRealtimeSync === 'function'
+        const before = this.prospectiveTailState(ns);
+        const order = forceTail ? ['tail'] : this.pendingTailWindows.has(ns) ? ['forward'] : typeof client._seqTracker.planRealtimeSync === 'function'
             ? client._seqTracker.planRealtimeSync(ns, pushSeq, pageLimit)
             : (() => {
                 const gap = pushSeq - before.ack;
@@ -3137,7 +3391,7 @@ export class MessageDeliveryEngine {
         let result = { messages: [], raw_count: 0 };
         let tailCompleted = false;
         const run = async (tail, background, maxPages, forceForward = false, bypassCoveredHead = false) => {
-            const live = this.syncState(ns);
+            const live = this.prospectiveTailState(ns);
             if (tail && !bypassCoveredHead && pushSeq <= live.head)
                 return { messages: [], raw_count: 0 };
             if (!tail && !forceForward && live.ack >= live.tail - 1)
@@ -3161,7 +3415,7 @@ export class MessageDeliveryEngine {
         };
         if (forceTail || order[0] === 'tail')
             result = await run(true, false, undefined, false, forceTail);
-        const state = this.syncState(ns);
+        const state = this.prospectiveTailState(ns);
         // 与 P2P 相同：真实完成 Tail 后，至多用一页 Forward 收敛 Tail
         // 期间新到达的序号；绝不重新规划或再执行 Tail。
         const maxSeen = Number(client._seqTracker.getMaxSeenSeq(ns) || 0);
@@ -3177,16 +3431,16 @@ export class MessageDeliveryEngine {
             || (client._sessionOptions?.background_sync !== false && backgroundWindowForward)) {
             const forwardTarget = Math.max(headForward ? Math.max(pushSeq, maxSeen) : 0, (tailForward || backgroundWindowForward) ? state.tail - 1 : 0, tailMissedDuringPull ? observedUpper : 0);
             const forwardMaxPages = this.forwardMaxPages(state.ack, forwardTarget, pageLimit);
-            result = await run(false, !(headForward || tailForward), forwardMaxPages, headForward || tailMissedDuringPull);
+            result = await run(false, !(headForward || tailForward), forwardMaxPages, headForward || tailForward || tailMissedDuringPull);
             if (pendingThroughSeq > 0) {
-                const committedAck = this.syncState(ns).ack;
+                const committedAck = this.prospectiveTailState(ns).ack;
                 if (committedAck >= pendingThroughSeq)
                     this.consumePendingPull(ns, pendingThroughSeq);
                 else if (committedAck <= state.ack)
                     this.markPendingPullNoProgress(ns, committedAck);
             }
         }
-        const finalState = this.syncState(ns);
+        const finalState = this.prospectiveTailState(ns);
         if (tailCompleted && finalState.ack < finalState.tail - 1) {
             this.scheduleGroupRealtimeFullGapFill(groupId, ns);
         }
@@ -3302,22 +3556,30 @@ export class MessageDeliveryEngine {
             }
             return;
         }
+        if (client._sessionOptions?.background_sync !== false)
+            this.recordBackgroundPullDemand(ns, seq);
         const pullActive = client._rpcPipeline?.hasPullActivity?.(ns) === true;
         if (pullActive || !this.beginRealtimeSync(ns)) {
             this.recordPendingPull(ns, seq);
             client._clientLog?.debug(`V2 group push queued behind in-flight realtime sync: ns=${ns} seq=${seq}`);
             return;
         }
+        const generation = this.captureInlineGeneration();
+        let failed = false;
         try {
             // namespace 串行区必须覆盖 Tail 与其后至多一次 Forward 的完整周期。
             await this.runGroupRealtimeSync(groupId, ns, seq, 50, false);
         }
         catch (exc) {
+            failed = true;
             client._clientLog.warn(`V2 group push auto-sync failed: group=${groupId} err=${formatDeliveryError(exc)}`);
         }
         finally {
-            this.endRealtimeSync(ns);
-            this.schedulePendingPullIfNeeded(ns, 'push-auto-pull-complete');
+            if (this.isInlineGenerationCurrent(generation)) {
+                this.endRealtimeSync(ns);
+                this.schedulePendingPullIfNeeded(ns, 'push-auto-pull-complete');
+                this.finishBackgroundPull(ns, before.ack, failed);
+            }
         }
     }
     async onV2PushNotification(data) {
@@ -3390,31 +3652,60 @@ export class MessageDeliveryEngine {
             }
             return;
         }
+        if (client._sessionOptions?.background_sync !== false)
+            this.recordBackgroundPullDemand(ns, pushSeq);
         const pullActive = client._rpcPipeline?.hasPullActivity?.(ns) === true;
         if (pullActive || !this.beginRealtimeSync(ns)) {
             this.recordPendingPull(ns, pushSeq);
             client._clientLog?.debug(`V2 P2P push queued behind in-flight realtime sync: ns=${ns} seq=${pushSeq}`);
             return;
         }
+        const generation = this.captureInlineGeneration();
+        let failed = false;
         try {
             await this.runP2PRealtimeSync(ns, pushSeq, 50, false);
         }
         catch (exc) {
+            failed = true;
             client._clientLog.warn(`V2 P2P push auto-sync failed: ${formatDeliveryError(exc)}`);
         }
         finally {
-            this.endRealtimeSync(ns);
-            this.schedulePendingPullIfNeeded(ns, 'push-auto-pull-complete');
+            if (this.isInlineGenerationCurrent(generation)) {
+                this.endRealtimeSync(ns);
+                this.schedulePendingPullIfNeeded(ns, 'push-auto-pull-complete');
+                this.finishBackgroundPull(ns, before.ack, failed);
+            }
         }
     }
     enqueueOnlineUnreadP2pHint(data) {
         const client = this.runtime.client;
-        if (!client._aid || !client._v2Session)
+        if (!client._aid || !client._v2Session || client._sessionOptions?.background_sync === false)
             return;
         const ns = `p2p:${client._aid}`;
-        client._safeAsync(this.runP2PForwardRecovery(ns, 50, true).catch((exc) => {
-            client._clientLog?.debug(`P2P online unread hint background Forward failed: ns=${ns} err=${formatDeliveryError(exc)}`);
-        }));
+        const generation = this.captureInlineGeneration();
+        const afterSeq = this.syncState(ns).ack;
+        this.recordBackgroundPullDemand(ns, positiveSafeSequenceHint(data.seq), true);
+        const owners = this.onlineUnreadHintOwners ?? new Set();
+        this.onlineUnreadHintOwners = owners;
+        if (owners.has(ns))
+            return;
+        owners.add(ns);
+        client._safeAsync((async () => {
+            let failed = false;
+            try {
+                await this.runP2PForwardRecovery(ns, 50, true);
+            }
+            catch (exc) {
+                failed = true;
+                client._clientLog?.debug(`P2P online unread hint background Forward failed: ns=${ns} err=${formatDeliveryError(exc)}`);
+            }
+            finally {
+                if (this.onlineUnreadHintOwners === owners)
+                    owners.delete(ns);
+                if (this.isInlineGenerationCurrent(generation))
+                    this.finishBackgroundPull(ns, afterSeq, failed);
+            }
+        })());
     }
     async restoreSeqTrackerState() {
         const client = this.runtime.client;
@@ -3803,7 +4094,7 @@ export class MessageDeliveryEngine {
         }
         return params;
     }
-    async drainOrderedMessages(ns, beforeSeq, pullResponse = false, persist = true, batch, source = 'pull') {
+    async drainOrderedMessages(ns, beforeSeq, pullResponse = false, persist = true, batch, source = 'pull', throughSeq) {
         const client = this.runtime.client;
         const pullScoped = this.isPullScopedSource(source);
         if (pullScoped)
@@ -3811,7 +4102,8 @@ export class MessageDeliveryEngine {
         const queue = client._pendingOrderedMsgs.get(ns);
         if (!queue || queue.size === 0)
             return;
-        const contig = client._seqTracker.getContiguousSeq(ns);
+        const generation = this.captureInlineGeneration();
+        const contig = throughSeq ?? client._seqTracker.getContiguousSeq(ns);
         const ready = [...queue.keys()]
             .filter((seq) => seq <= contig && (beforeSeq === undefined || seq < beforeSeq))
             .sort((a, b) => a - b);
@@ -3822,9 +4114,12 @@ export class MessageDeliveryEngine {
                 if (pullScoped)
                     this.ensurePullOperationCurrent(ns);
                 const item = queue.get(seq);
-                queue.delete(seq);
-                if (!item || client._pushedSeqs.get(ns)?.has(seq))
+                if (!item)
                     continue;
+                if (client._pushedSeqs.get(ns)?.has(seq)) {
+                    queue.delete(seq);
+                    continue;
+                }
                 const itemSource = item.source ?? source;
                 let itemBatch = batch;
                 if ((itemSource === 'push' || itemSource === 'inline_push')
@@ -3836,8 +4131,13 @@ export class MessageDeliveryEngine {
                     }
                 }
                 await this.publishOrderedQueueItem(ns, item.event, seq, item.payload, pullResponse, itemSource, itemBatch);
+                if (!this.isInlineGenerationCurrent(generation))
+                    throw new Error('pull invalidated');
                 if (pullScoped)
                     this.ensurePullOperationCurrent(ns);
+                queue.delete(seq);
+                if (item.event === 'group.changed' && isJsonObject(item.payload) && item.payload.action === 'dissolved')
+                    continue;
                 this.markPublishedSeq(ns, seq);
                 delivered = true;
             }
@@ -3858,6 +4158,7 @@ export class MessageDeliveryEngine {
     }
     async publishOrderedMessage(event, ns, seq, payload, source = 'push', operationBatch) {
         const client = this.runtime.client;
+        const generation = this.captureInlineGeneration();
         const ownsBatch = !operationBatch && (source === 'push' || source === 'inline_push');
         const batch = operationBatch ?? (ownsBatch ? this.createDeliveryChangeBatch(source) : undefined);
         try {
@@ -3887,10 +4188,12 @@ export class MessageDeliveryEngine {
             if (client._pushedSeqs.get(ns)?.has(seqNum))
                 return false;
             const queue = client._pendingOrderedMsgs.get(ns);
+            await this.publishOrderedQueueItem(ns, event, seqNum, payload, false, source, batch);
+            if (!this.isInlineGenerationCurrent(generation))
+                throw new Error('pull invalidated');
             queue?.delete(seqNum);
             if (queue && queue.size === 0)
                 client._pendingOrderedMsgs.delete(ns);
-            await this.publishOrderedQueueItem(ns, event, seqNum, payload, false, source, batch);
             this.markPublishedSeq(ns, seqNum);
             await this.drainOrderedMessages(ns, undefined, false, true, batch, source);
             if (!client._pendingOrderedMsgs.get(ns))
@@ -3904,6 +4207,7 @@ export class MessageDeliveryEngine {
     }
     async publishPulledMessage(event, ns, seq, payload, persist = true, source = 'pull', operationBatch) {
         const client = this.runtime.client;
+        const generation = this.captureInlineGeneration();
         const ownsBatch = !operationBatch && (source === 'push' || source === 'inline_push');
         const batch = operationBatch ?? (ownsBatch ? this.createDeliveryChangeBatch(source) : undefined);
         const pullScoped = this.isPullScopedSource(source);
@@ -3938,19 +4242,26 @@ export class MessageDeliveryEngine {
             await this.drainOrderedMessages(ns, seqNum, false, persist, batch, source);
             if (pullScoped)
                 this.ensurePullOperationCurrent(ns);
-            queue?.delete(seqNum);
-            if (queue && queue.size === 0)
-                client._pendingOrderedMsgs.delete(ns);
             if (event === 'message.recalled') {
                 const published = await client._withPullResponseProcessing(ns, () => this.publishMessageRecallTombstone(seqNum, payload, source));
+                if (!this.isInlineGenerationCurrent(generation))
+                    throw new Error('pull invalidated');
                 if (pullScoped)
                     this.ensurePullOperationCurrent(ns);
+                queue?.delete(seqNum);
+                if (queue && queue.size === 0)
+                    client._pendingOrderedMsgs.delete(ns);
                 this.markPublishedSeq(ns, seqNum);
                 return published;
             }
             await client._withPullResponseProcessing(ns, () => client._publishAppEvent(event, payload, source, ns, batch));
+            if (!this.isInlineGenerationCurrent(generation))
+                throw new Error('pull invalidated');
             if (pullScoped)
                 this.ensurePullOperationCurrent(ns);
+            queue?.delete(seqNum);
+            if (queue && queue.size === 0)
+                client._pendingOrderedMsgs.delete(ns);
             this.markPublishedSeq(ns, seqNum);
             return true;
         }