@ai-dossier/sched 0.68.2 → 0.68.3

package/README.md

@@ -380,7 +380,54 @@ This applies to `issue:<n>` unit dispatch (`dispatchAssignments`). `batch:<id>`
 through a separate pass with its own claim/reconcile logic — see
 [Batch dispatch (#523)](#batch-dispatch-523) below.
 
-### Supervised deployment (#679)
+### Supervised deployment (#679, #945)
+
+**The way to run the engine is `ai-dossier sched service install`** (run it from the project's
+checkout). The engine is safe to kill at any instant, but it cannot restart itself — the service is
+what makes it come back by itself, so no session ever has to start, stop or babysit it.
+
+```bash
+ai-dossier sched service install [--alert-issue <n>]   # systemd user unit; cron watchdog if no systemd
+ai-dossier sched service status                         # supervised? engine live? heartbeat?
+ai-dossier sched service uninstall
+```
+
+- **systemd** (default when a user manager is running): writes
+  `~/.config/systemd/user/dossier-sched-<project>.service` — `Restart=always` (a clean exit, such as
+  a graceful stop, comes back too) with **crash-loop bounds**: exponential `RestartSec` backoff
+  (10 s up to 300 s, systemd >= 254; older versions keep 10 s) and `StartLimitBurst=10` per
+  `StartLimitIntervalSec=600` — past that the unit is left `failed` for an operator
+  (`systemctl --user reset-failed <unit>`); `KillMode=process`, `WorkingDirectory` = the project's
+  **main checkout** (never a linked worktree; validated against `--project`, override with
+  `--repo-dir`), and the node/nvm `PATH` at install time (absolute entries only). Install refuses
+  node / entry-point / repo paths that are missing, relative, or under a temp or `worktrees/`
+  directory, and warns that an nvm node path must be re-pinned (re-run `install`) after a node
+  upgrade. It runs `sched start --auto-upgrade` (opt out with `--no-auto-upgrade`); after a
+  completed tick, a stale engine installs the latest CLI and re-execs the same command before
+  another state write. Detached agents keep running and the new engine reattaches by pid. The
+  new version migrates state on load; older engines reject newer schemas. If the Node runtime
+  cannot replace the process directly, exit code 75 asks systemd/the watchdog to restart the
+  updated entry point.
+  Output goes to the journal (`journalctl --user -u <unit>`) and the durable trail is the
+  project's `events.jsonl`. Run `loginctl enable-linger $USER` once so it starts at boot without a
+  login. Re-running `install` is idempotent; a changed unit is restarted (agents keep running).
+- **cron fallback** (no systemd): a tagged crontab block with `@reboot` and a per-minute
+  `sched ensure-running` watchdog (`%` is escaped for cron). The watchdog starts a detached engine
+  (output to `<sched-dir>/engine.log`) when no live engine holds the lease, after raising the
+  once-per-episode stale-lease alert; a healthy minute does nothing (no `gh` call). Restarts back
+  off exponentially while the engine keeps dying: at a 60 s cadence the first restarts are
+  immediate, then gaps of 2, 4, 8 … minutes up to 30, and a live engine resets it. The existing
+  crontab is read strictly — only "no crontab for <user>" counts as empty; any other `crontab -l`
+  failure aborts the install and changes nothing. The engine takes the lease atomically, so two
+  watchdogs — or a watchdog plus the systemd unit — never run two engines. To stop the engine on
+  purpose under the watchdog: `sched ensure-running --disable` (`--enable` to resume).
+- **Crash alerts are deduplicated:** repeats of the same alert kind within an hour are ONE tracking
+  comment on `--alert-issue`, edited with a repeat count, not a comment per restart.
+- `install` / `uninstall` exit non-zero and print `✗` when anything failed (systemctl, crontab).
+  `--no-activate` renders the unit / cron block without calling `systemctl` or `crontab` and says
+  plainly that nothing is installed; `--print` prints it.
+
+The manual shapes below remain valid, and explain the rules the service encodes.
 
 Two supported shapes, one rule: **dispatched agents must outlive the tick or engine that
 spawned them.** Agents are spawned detached and unref'd precisely so they survive a sched
@@ -470,6 +517,7 @@ Only SIGINT had a handler, so a SIGTERM/SIGHUP (another session's restart, a clo
 terminal) killed the engine with no line and no lease release. That is now logged; if the
 2026-09-29 cause was SIGKILL/OOM, the missing `engine-exit` plus the stale lease is now the
 documented signature (`journalctl -k` for the OOM window).
+
 ### Restart never discards work (#945, #940)
 
 Before the engine respawns an agent onto a worktree that already exists — a batch **tail**, a
@@ -520,8 +568,8 @@ last pushed head while local work exists, the engine does **not** respawn. Rows
 fields (the engine's own post-landing gate rows) and clean rows are never evidence; an older dirty
 row is superseded by a newer clean or failed one. It blocks the batch `tail-dirty-worktree`, with the evidence and the
 rescue ref in the journal and `sched status`. Commit or discard the work in the worktree, then
-`sched resume --batch <id>`. A tail that left only unpushed commits is respawned, told to resume
-from the rescue ref. `sched resume --batch` deliberately does NOT re-run this guard: by resuming, the operator has looked at the worktree.
+ `sched resume --batch <id>`. A tail that left only unpushed commits is respawned, told to resume
+ from the rescue ref. `sched resume --batch` deliberately does NOT re-run this guard: by resuming, the operator has looked at the worktree.
 
 ### Zombie-run fencing (#504)
 

package/dist/batch-dispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"batch-dispatch.d.ts","sourceRoot":"","sources":["../src/batch-dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;AAWH,OAAO,EAIL,KAAK,YAAY,EAGjB,KAAK,gBAAgB,EAGtB,MAAM,gBAAgB,CAAC;AAUxB,OAAO,EAeL,KAAK,gBAAgB,EAGrB,KAAK,SAAS,EAEf,MAAM,YAAY,CAAC;AAGpB,OAAO,EAGL,KAAK,WAAW,EAcjB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,KAAK,OAAO,EAAa,MAAM,WAAW,CAAC;AAMpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAW5C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EACL,KAAK,iBAAiB,EActB,KAAK,WAAW,EACjB,MAAM,YAAY,CAAC;AAGpB,OAAO,EA2BL,kBAAkB,EAKnB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,KAAK,QAAQ,EAMd,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAGV,UAAU,EAEV,oBAAoB,EAKpB,kBAAkB,EAClB,cAAc,EAId,WAAW,EACX,UAAU,EAEX,MAAM,SAAS,CAAC;AAajB,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAI1C,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAE9B,8DAA8D;AAC9D,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,WAAW,CAAC;IACzB,SAAS,EAAE,SAAS,CAAC;IACrB,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB,uFAAuF;IACvF,OAAO,EAAE,MAAM,CAAC;IAChB,0FAA0F;IAC1F,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,iBAAiB,KAAK,WAAW,CAAC;IACrE;;;;;;;;;;;;;;;;;;;OAmBG;IACH,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,oBAAoB,CAAC;IACjF,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,8FAA8F;AAC9F,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,uFAAuF;IACvF,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,8FAA8F;IAC9F,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC;;;;OAIG;IACH,IAAI,CAAC,EAAE,cAAc,CAAC;CACvB;AA+sBD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE3F;AAitDD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,iBAAiB,EACvB,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,UAAU,EACjB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,aAAa,EACtB,GAAG,EAAE,IAAI,EACT,MAAM,EAAE,eAAe;AACvB,kGAAkG;AAClG,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,KAAK,UAAU,EACxC,UAAU,CAAC,EAAE,MAAM,IAAI,GACtB,IAAI,CAiBN;AAoWD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,iBAAiB,EACvB,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,IAAI,GACR;IACD,OAAO,EAAE,eAAe,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,cAAc,GAAG,qBAAqB,CAAC;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CA+KA;AAm9BD;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAgoB1C;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,MAAM,EAAE,CAuB3F;AA6HD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,iBAAiB,EACvB,GAAG,EAAE,IAAI,EACT,MAAM,EAAE,eAAe,EACvB,SAAS,EAAE,iBAAiB,GAAG,SAAS,GACvC,IAAI,CAmMN;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,IAAI,GAAG,IAAI,CAuG/E;AAED;;;;;;GAMG;AACH,UAAU,iBAAiB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,IAAI,EAAE,gBAAgB,CAAC;IACvB,uEAAuE;IACvE,SAAS,EAAE,gBAAgB,CAAC;IAC5B,YAAY,EAAE,YAAY,CAAC;CAC5B;AAoTD;;;;;;;;;;;GAWG;AACH,oCAAoC;AACpC,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,UAAU,EACjB,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,WAAW,GAClB,kBAAkB,CAQpB;AAgnBD;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,IAAI,CAAC;AA8UvC;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,iBAAiB,EACvB,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,gBAAgB,GACzB,eAAe,CAgSjB"}
+{"version":3,"file":"batch-dispatch.d.ts","sourceRoot":"","sources":["../src/batch-dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;AAWH,OAAO,EAIL,KAAK,YAAY,EAGjB,KAAK,gBAAgB,EAGtB,MAAM,gBAAgB,CAAC;AAUxB,OAAO,EAeL,KAAK,gBAAgB,EAGrB,KAAK,SAAS,EAEf,MAAM,YAAY,CAAC;AAGpB,OAAO,EAGL,KAAK,WAAW,EAcjB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,KAAK,OAAO,EAAa,MAAM,WAAW,CAAC;AAMpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAW5C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EACL,KAAK,iBAAiB,EActB,KAAK,WAAW,EACjB,MAAM,YAAY,CAAC;AAGpB,OAAO,EA2BL,kBAAkB,EAKnB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,KAAK,QAAQ,EAMd,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAGV,UAAU,EAEV,oBAAoB,EAKpB,kBAAkB,EAClB,cAAc,EAId,WAAW,EACX,UAAU,EAEX,MAAM,SAAS,CAAC;AAajB,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAI1C,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAE9B,8DAA8D;AAC9D,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,WAAW,CAAC;IACzB,SAAS,EAAE,SAAS,CAAC;IACrB,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB,uFAAuF;IACvF,OAAO,EAAE,MAAM,CAAC;IAChB,0FAA0F;IAC1F,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,iBAAiB,KAAK,WAAW,CAAC;IACrE;;;;;;;;;;;;;;;;;;;OAmBG;IACH,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,oBAAoB,CAAC;IACjF,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,8FAA8F;AAC9F,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,uFAAuF;IACvF,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,8FAA8F;IAC9F,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC;;;;OAIG;IACH,IAAI,CAAC,EAAE,cAAc,CAAC;CACvB;AA+sBD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE3F;AAuuDD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,iBAAiB,EACvB,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,UAAU,EACjB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,aAAa,EACtB,GAAG,EAAE,IAAI,EACT,MAAM,EAAE,eAAe;AACvB,kGAAkG;AAClG,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,KAAK,UAAU,EACxC,UAAU,CAAC,EAAE,MAAM,IAAI,GACtB,IAAI,CAiBN;AAoWD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,iBAAiB,EACvB,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,IAAI,GACR;IACD,OAAO,EAAE,eAAe,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,cAAc,GAAG,qBAAqB,CAAC;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CA+KA;AAugCD;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAgoB1C;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,MAAM,EAAE,CAuB3F;AA6HD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,iBAAiB,EACvB,GAAG,EAAE,IAAI,EACT,MAAM,EAAE,eAAe,EACvB,SAAS,EAAE,iBAAiB,GAAG,SAAS,GACvC,IAAI,CAmMN;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,IAAI,GAAG,IAAI,CAuG/E;AAED;;;;;;GAMG;AACH,UAAU,iBAAiB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,IAAI,EAAE,gBAAgB,CAAC;IACvB,uEAAuE;IACvE,SAAS,EAAE,gBAAgB,CAAC;IAC5B,YAAY,EAAE,YAAY,CAAC;CAC5B;AAoTD;;;;;;;;;;;GAWG;AACH,oCAAoC;AACpC,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,UAAU,EACjB,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,WAAW,GAClB,kBAAkB,CAQpB;AAgnBD;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,IAAI,CAAC;AA8UvC;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,iBAAiB,EACvB,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,gBAAgB,GACzB,eAAe,CAySjB"}

package/dist/batch-dispatch.js

@@ -1424,15 +1424,28 @@ function claimAndSetup(deps, config, dispatch, batchId, now, result) {
         abortSetup(`member-worktree-prep-failed:${memberPrep.reason}`, `member worktree prep failed: ${memberPrep.reason} (member 1 #${firstIssue}, branch ${memberBranchFor(batchId, 1, firstIssue)})`);
         return;
     }
+    // Persist the completed setup and the batch's executing/member-1 assignment
+    // BEFORE spawning. If SIGKILL lands between this write and the provider
+    // process creation, the next engine sees `executing` + an assigned slot and
+    // `reconcileMemberSlot` resumes from the deterministic member worktree. The
+    // previous single lock pass spawned first and only saved afterward, leaving
+    // a kill window with batch=status ready + an assigned slot that no tick arm
+    // could claim again.
     deps.store.withLock((s) => ({
-        state: landSetup(deps, s, batchId, setup, now, { member_dispatch: 'serial' }, 1, (next) => {
-            const slot = slotFor(next, batchId);
-            return slot
-                ? spawnMember(deps, dispatch, next, slot, batchId, now, result, memberPrep)
-                : next;
-        }),
+        state: landSetup(deps, s, batchId, setup, now, { member_dispatch: 'serial' }, 1, (next) => next),
         result: undefined,
     }));
+    deps.store.withLock((s) => {
+        const freshBatch = (0, state_1.findBatch)(s, batchId);
+        const slot = slotFor(s, batchId);
+        if (!freshBatch || freshBatch.status !== 'executing' || !slot) {
+            return { state: s, result: undefined };
+        }
+        return {
+            state: spawnMember(deps, dispatch, s, slot, batchId, now, result, memberPrep),
+            result: undefined,
+        };
+    });
 }
 /**
  * Land a completed `runBatchSetup` on the batch entry (inside the caller's
@@ -2965,6 +2978,45 @@ function reconcileMemberSlot(deps, config, dispatch, batchId, slot, now, result)
         release, () => runLog?.append());
     }
 }
+/**
+ * Recover the durable setup→member handoff when an engine dies after
+ * `landSetup` saved `batch.status=executing` but before the member process was
+ * spawned and its pid was saved. The slot is still `assigned`; release that
+ * claim and reuse `spawnMemberContinuation`, whose deterministic member
+ * worktree path adopts the already-prepared tree. This is the batch equivalent
+ * of `engine.ts`'s assigned-before-spawn recovery rail.
+ */
+function recoverAssignedMemberSlot(deps, config, dispatch, batchId, slot, now, result) {
+    const current = deps.store.load();
+    const batch = (0, state_1.findBatch)(current, batchId);
+    if (!batch ||
+        batch.status !== 'executing' ||
+        isParallelBatch(batch) ||
+        slot.status !== 'assigned' ||
+        slot.pid !== null) {
+        return;
+    }
+    const released = deps.store.withLock((state) => {
+        const fresh = (0, state_1.findBatch)(state, batchId);
+        const freshSlot = slotFor(state, batchId);
+        if (!fresh ||
+            fresh.status !== 'executing' ||
+            isParallelBatch(fresh) ||
+            !freshSlot ||
+            freshSlot.status !== 'assigned' ||
+            freshSlot.pid !== null) {
+            return { state, result: false };
+        }
+        return { state: releaseSlot(state, batchId, now), result: true };
+    });
+    if (!released)
+        return;
+    journalEvent(deps, 'assigned-recovered', unit(batchId), {
+        slot: slot.id,
+        detail: 'engine restarted after a serial batch assignment was persisted but before member spawn was recorded',
+    });
+    spawnMemberContinuation(deps, config, dispatch, batchId, now, result);
+}
 /**
  * Park a member that left the batch before landing, record the exit, and
  * dissolve if this tips the batch past its `dissolve_policy` threshold (#563;
@@ -5355,6 +5407,13 @@ function runBatchTick(deps, config, dispatch) {
                 reconcileParallelBatch(deps, config, batchDispatch, batch.id, now, result, paused);
                 continue;
             }
+            if (batch.status === 'executing' &&
+                !isParallelBatch(batch) &&
+                slot?.status === 'assigned' &&
+                slot.pid === null) {
+                recoverAssignedMemberSlot(deps, config, batchDispatch, batch.id, slot, now, result);
+                continue;
+            }
             if (slot && (slot.status === 'running' || slot.status === 'assigned')) {
                 if (batch.status === 'executing') {
                     reconcileMemberSlot(deps, config, batchDispatch, batch.id, slot, now, result);