@bastani/atomic 0.9.28-alpha.4 → 0.9.28

package/dist/builtin/workflows/CHANGELOG.md

@@ -6,6 +6,47 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 
 ## [Unreleased]
 
+## [0.9.28] - 2026-10-08
+
+### Added
+
+- Added a Claude Haiku 5.5 prompt-engineering guide based on Anthropic's model-specific guidance, covering effort, search grounding, JSON/tool interactions, completion, verification, and refusal handling.
+- Added `createAgentSessionAdapter(baseOptions?)`, which builds the default workflow stage-session adapter with `createAgentSession` options shared by every stage ([#3472](https://github.com/bastani-inc/atomic/issues/3472)).
+
+### Changed
+
+- Updated the bundled Impeccable skill to 4.5.0 with engine 0.1.11, adding the `generate` playbook, component-review guidance, and reading, operating, and persuasion design modes. Atomic's telemetry and update-check defaults remain off.
+- Changed the `resumeInFlight` default from `"ask"` to `"never"`. Atomic no longer prompts at startup to resume interrupted durable workflows; resume them with `/workflow resume`, or set `resumeInFlight` to `"ask"` or `"auto"` in the workflow config to restore startup recovery.
+
+### Fixed
+
+- Fixed managed PostgreSQL health checks failing a workflow stage on a healthy but busy host: an unanswered check now retries with a short backoff for up to 15 seconds, the connection limit is 3 seconds instead of 1, and the "did not answer a health check in time" diagnostic clears once PostgreSQL answers again ([#3491](https://github.com/bastani-inc/atomic/issues/3491))
+- Fixed Atomic hanging at startup, never accepting input, when the current directory had interrupted durable workflows and `resumeInFlight` was `ask`. Startup no longer waits for workflow recovery; the "Resume interrupted workflows?" prompt now appears after the session is ready.
+- Fixed startup recovery and SDK crash recovery skipping interrupted workflows when the project directory was reached through a symlink, such as `/tmp` or `/var` on macOS.
+- Fixed long workflow runs retaining a full metadata snapshot for every checkpoint and message update. Atomic now compacts superseded snapshots, removes their duplicate input payloads, and bounds settled delivery state across root and child runs, including failed-stage sticky receipts, while preserving resume and message deduplication ([#3467](https://github.com/bastani-inc/atomic/issues/3467)).
+- Fixed archived sticky message receipts being ignored when a failed stage retries delivery without an explicit recipient or through live Intercom transport. Retry forwarding and confirmation deduplication survive cold resume, while a new recipient session can still receive the message ([#3467](https://github.com/bastani-inc/atomic/issues/3467)).
+- Fixed sticky messages delivered as pre-start context being forwarded again to the same live session, including after receipt archival and cold resume. Concurrent confirmations remain deduplicated when a stage finishes before they are saved, while a new recipient session can still receive the message ([#3467](https://github.com/bastani-inc/atomic/issues/3467)).
+- Fixed interrupted sticky receipt saves losing delivery counts after retry or cold resume and incorrectly reporting delivered messages as undeliverable ([#3467](https://github.com/bastani-inc/atomic/issues/3467)).
+- Fixed Goal infrastructure failures incorrectly ending the goal as `needs_human`. The ledger now stays `active`, and direct resume in the same session retries the interrupted stage and completes its turn without quitting Atomic. Malformed reviewer output, including exhausted schema corrections, still requires human attention. Older synthetic failure verdicts with identifiable database/checkpoint diagnostics are also recoverable; ambiguous old failures remain unchanged ([#3466](https://github.com/bastani-inc/atomic/issues/3466)).
+- Fixed Goal treating exhausted reviewer corrections for invalid `structured_output` inputs, including whitespace-only instructions and empty named state, as resumable infrastructure failures instead of `needs_human` ([#3466](https://github.com/bastani-inc/atomic/issues/3466)).
+- Fixed Goal reviewer corrections hiding an earlier provider failure when a later `structured_output` call has invalid inputs. If no correction succeeds, the goal remains resumable instead of becoming `needs_human` ([#3466](https://github.com/bastani-inc/atomic/issues/3466)).
+- Fixed `run()` failing at the first `ctx.task` or `ctx.stage` with "prompt adapter not configured" when `opts.adapters` was omitted. Stages now default to in-process `createAgentSession` sessions with in-memory session managers ([#3472](https://github.com/bastani-inc/atomic/issues/3472)).
+- Fixed `resumeInFlight` having no effect at startup. `auto` now resumes eligible interrupted durable workflows, `ask` requests confirmation when a UI is available, and `never` leaves them for `/workflow resume`. Paused, quit, blocked, failed, awaiting-input, and live-owned runs are not automatically restarted ([#3468](https://github.com/bastani-inc/atomic/issues/3468)).
+- Fixed startup recovery of agent-owned workflows retaining the previous session's ownership. Safely recovered runs now allow the current session's agent to inspect and control them ([#3468](https://github.com/bastani-inc/atomic/issues/3468)).
+- Fixed recovered workflows disconnecting Intercom with pending-stage authorization errors when workflow extension modules load more than once ([#3468](https://github.com/bastani-inc/atomic/issues/3468)).
+- Fixed recovered agent stages failing with a stale extension context after accepted startup recovery. Committed host generations hand off synchronously and retired Store observers detach before authority revocation, independently of shutdown handler order ([#3468](https://github.com/bastani-inc/atomic/issues/3468)).
+- Fixed startup recovery offering or restarting another project's workflows when projects share a database. Automatic recovery now requires the original invocation directory to match the current working directory; cross-project recovery remains available through `/workflow resume` ([#3468](https://github.com/bastani-inc/atomic/issues/3468)).
+- Fixed durable-workflow shutdown returning before ownership and protected SQL connections terminated, including pending SQL acquisitions, so immediate recovery no longer races a stale executor lock ([#3489](https://github.com/bastani-inc/atomic/issues/3489)).
+- Attached stage chats honor configured transcript jump shortcuts, defaulting to Ctrl+Home and Ctrl+End, without intercepting the editor's Home and End keys.
+- Fixed slow workflow discovery for imports of `@bastani/atomic`, `@bastani/pi-ai`, and `@bastani/pi-ai/providers/all` by sharing the running CLI's modules instead of loading them again for each workflow file. The host's versions take precedence over project copies for these three exact specifiers. These imports no longer need project-local packages in standalone-binary installs; workflow files and relative imports still refresh on reload ([#3454](https://github.com/bastani-inc/atomic/issues/3454)).
+- Fixed workflow stage questions in one process hosting several SDK sessions reaching the wrong session. A stage's `ask_user_question`, readiness question, or `ctx.ui.custom` prompt could go to whichever sibling session started last, so its own `HostInput.questionnaire` was never called and the stage stayed `awaiting_input`. Each session now keeps its own workflow store, stage UI broker, and run registries ([#3456](https://github.com/bastani-inc/atomic/issues/3456)).
+
+## [0.9.28-alpha.5] - 2026-10-08
+
+### Fixed
+
+- Fixed managed PostgreSQL health checks failing a workflow stage on a healthy but busy host: an unanswered check now retries with a short backoff for up to 15 seconds, the connection limit is 3 seconds instead of 1, and the "did not answer a health check in time" diagnostic clears once PostgreSQL answers again ([#3491](https://github.com/bastani-inc/atomic/issues/3491))
+
 ## [0.9.28-alpha.4] - 2026-10-07
 
 ### Added

package/dist/builtin/workflows/builtin/{chunk-aqv8ny38.js → chunk-9ywkdsa9.js}

@@ -37,7 +37,7 @@ import {
   parseFailureDiagnostics,
   summarizeReviewConvergence,
   reverify_consolidated_batch
-} from "./chunk-p3xmajmj.js";
+} from "./chunk-v4scsq3y.js";
 import {
   VERIFICATION_SCALE
 } from "./chunk-n1910xc4.js";

package/dist/builtin/workflows/builtin/{chunk-p6jagvyf.js → chunk-bnz4knhy.js}

@@ -1,7 +1,7 @@
 import {
   getDurableBackend2,
   getAvailableDurableBackend2
-} from "./chunk-p3xmajmj.js";
+} from "./chunk-v4scsq3y.js";
 export {
   getAvailableDurableBackend2 as getAvailableDurableBackend,
   getDurableBackend2 as getDurableBackend

package/dist/builtin/workflows/builtin/{chunk-br4ac9a3.js → chunk-dx5sjaxe.js}

@@ -39,7 +39,7 @@ import {
   reviewerFailureText,
   summarizeReviewConvergence,
   reverify_consolidated_batch
-} from "./chunk-p3xmajmj.js";
+} from "./chunk-v4scsq3y.js";
 import {
   fold_usage
 } from "./chunk-tgt0s5e5.js";

package/dist/builtin/workflows/builtin/{chunk-p3xmajmj.js → chunk-v4scsq3y.js}

@@ -6542,6 +6542,9 @@ function resolveEmbeddedPostgresTarget(host) {
 // dist/builtin/workflows/src/durable/dbos-postgres-health.ts
 var HEALTH_INTERVAL_MS = 5000;
 var RECOVERY_ATTEMPTS = 3;
+var MONITORING_PROBE_RETRY_WINDOW_MS = 15000;
+var MONITORING_PROBE_RETRY_INITIAL_MS = 250;
+var MONITORING_PROBE_RETRY_MAX_MS = 2000;
 function isMonitoringConnectionTimeout(error) {
   if (!(error instanceof Error))
     return false;
@@ -6569,6 +6572,7 @@ class PostgresHealth {
   attempts = 0;
   nextRecoveryAt = 0;
   failure;
+  failureUnanswered = false;
   healthySinceFailure = false;
   revision = 0;
   listeners = new Set;
@@ -6581,10 +6585,11 @@ class PostgresHealth {
   get endpoint() {
     return this.operations.url?.();
   }
-  retainFailure(error) {
+  retainFailure(error, unanswered = false) {
     const message = error instanceof Error ? error.message : String(error);
     const safe = redactedDatabaseMessage(message, this.endpoint);
     this.failure = new Error(safe);
+    this.failureUnanswered = unanswered;
     this.healthySinceFailure = false;
   }
   dependencyFailure(message) {
@@ -6612,7 +6617,7 @@ class PostgresHealth {
         await this.operations.validate?.(client);
       }
     } catch (error) {
-      this.retainFailure(error);
+      this.retainFailure(error, isQueryReadTimeout(error));
       if (!isQueryReadTimeout(error)) {
         this.invalidate();
         if (this.endpoint === undefined)
@@ -6650,19 +6655,39 @@ class PostgresHealth {
   }
   async probe() {
     const revision = this.revision;
+    const now = this.operations.now ?? Date.now;
+    const wait = this.operations.wait ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
     let identity;
     try {
       identity = await this.operations.probe();
     } catch (error) {
       if (!(isMonitoringConnectionFailure(error) || isQueryReadTimeout(error)) || this.stopped)
         throw error;
-      try {
-        identity = await this.operations.probe();
-      } catch (retryError) {
-        if (isMonitoringConnectionTimeout(retryError) || !isMonitoringConnectionFailure(retryError))
-          throw retryError;
-        this.retainFailure(retryError);
-        return;
+      const deadline = now() + MONITORING_PROBE_RETRY_WINDOW_MS;
+      let delay = MONITORING_PROBE_RETRY_INITIAL_MS;
+      let failure = error;
+      for (;; ) {
+        if (isMonitoringConnectionTimeout(failure) || isQueryReadTimeout(failure)) {
+          if (now() >= deadline)
+            throw failure;
+          await wait(delay);
+          delay = Math.min(delay * 2, MONITORING_PROBE_RETRY_MAX_MS);
+          if (this.stopped)
+            throw failure;
+        }
+        try {
+          identity = await this.operations.probe();
+          break;
+        } catch (retryError) {
+          if (isMonitoringConnectionTimeout(retryError) || isQueryReadTimeout(retryError)) {
+            failure = retryError;
+            continue;
+          }
+          if (!isMonitoringConnectionFailure(retryError))
+            throw retryError;
+          this.retainFailure(retryError);
+          return;
+        }
       }
     }
     if (revision !== this.revision)
@@ -6677,6 +6702,8 @@ class PostgresHealth {
     this.attempts = 0;
     this.nextRecoveryAt = 0;
     this.healthySinceFailure = true;
+    if (this.failureUnanswered)
+      this.failure = undefined;
     return identity.url;
   }
   async refresh() {
@@ -6686,7 +6713,7 @@ class PostgresHealth {
         return ready;
     } catch (error) {
       if (isQueryReadTimeout(error) || isMonitoringConnectionTimeout(error)) {
-        this.retainFailure(new Error("Managed PostgreSQL did not answer a health check in time."));
+        this.retainFailure(new Error("Managed PostgreSQL did not answer a health check in time."), true);
         throw this.dependencyFailure("Managed PostgreSQL did not answer a health check in time.");
       }
       this.retainFailure(error);
@@ -6954,6 +6981,7 @@ var POSTGRES_IDENTITY_SQL = `SELECT current_setting('data_directory') AS data_di
 	system_identifier::text, current_setting('server_version') AS server_version FROM pg_control_system()`;
 var POSTGRES_TIMEZONE_SQL = "SELECT set_config('timezone_abbreviations', 'Default', true)";
 var POSTGRES_HEALTH_QUERY_TIMEOUT_MS = 3000;
+var POSTGRES_HEALTH_CONNECT_TIMEOUT_MS = 3000;
 async function probePostgresTimezoneData(port) {
   const client = new Client({
     host: "127.0.0.1",
@@ -6962,7 +6990,7 @@ async function probePostgresTimezoneData(port) {
     password: "atomic",
     database: "postgres",
     ssl: false,
-    connectionTimeoutMillis: 1000,
+    connectionTimeoutMillis: POSTGRES_HEALTH_CONNECT_TIMEOUT_MS,
     query_timeout: POSTGRES_HEALTH_QUERY_TIMEOUT_MS,
     statement_timeout: POSTGRES_HEALTH_QUERY_TIMEOUT_MS
   });
@@ -6982,7 +7010,7 @@ async function probePostgresIdentity(port) {
     password: "atomic",
     database: "postgres",
     ssl: false,
-    connectionTimeoutMillis: 1000,
+    connectionTimeoutMillis: POSTGRES_HEALTH_CONNECT_TIMEOUT_MS,
     query_timeout: POSTGRES_HEALTH_QUERY_TIMEOUT_MS,
     statement_timeout: POSTGRES_HEALTH_QUERY_TIMEOUT_MS
   });
@@ -9894,7 +9922,7 @@ function createPendingStageDeliveryStoreMethods(context) {
         const run = context.findRun(input.runId);
         if (run === undefined)
           return;
-        const { getAvailableDurableBackend } = await import("./chunk-p6jagvyf.js");
+        const { getAvailableDurableBackend } = await import("./chunk-bnz4knhy.js");
         const availableBackend = getAvailableDurableBackend();
         const backend = availableBackend === undefined ? undefined : durableBackendForRun(availableBackend, context.state.runs, input.runId);
         const receipt = await backend?.readSettledPendingStageMessage?.(input.runId, input.message.id);

package/dist/builtin/workflows/builtin/goal.js

@@ -1,7 +1,7 @@
 import {
   goal_default
-} from "./chunk-aqv8ny38.js";
-import"./chunk-p3xmajmj.js";
+} from "./chunk-9ywkdsa9.js";
+import"./chunk-v4scsq3y.js";
 import"./chunk-2377r57g.js";
 import"./chunk-z0d03ktm.js";
 import"./chunk-n1910xc4.js";

package/dist/builtin/workflows/builtin/index.js

@@ -16,8 +16,8 @@ import {
 } from "./chunk-kb7s3gx2.js";
 import {
   goal_default
-} from "./chunk-aqv8ny38.js";
-import"./chunk-p3xmajmj.js";
+} from "./chunk-9ywkdsa9.js";
+import"./chunk-v4scsq3y.js";
 import"./chunk-z0d03ktm.js";
 import {
   open_claude_design_default
@@ -27,7 +27,7 @@ import {
 } from "./chunk-94f8zfz1.js";
 import {
   ralph_default
-} from "./chunk-br4ac9a3.js";
+} from "./chunk-dx5sjaxe.js";
 import {
   tournament_default
 } from "./chunk-wf876n16.js";

package/dist/builtin/workflows/builtin/ralph.js

@@ -1,7 +1,7 @@
 import {
   ralph_default
-} from "./chunk-br4ac9a3.js";
-import"./chunk-p3xmajmj.js";
+} from "./chunk-dx5sjaxe.js";
+import"./chunk-v4scsq3y.js";
 import"./chunk-2377r57g.js";
 import"./chunk-z0d03ktm.js";
 import"./chunk-n1910xc4.js";

package/dist/builtin/workflows/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bastani/workflows",
-  "version": "0.9.28-alpha.4",
+  "version": "0.9.28",
   "private": true,
   "description": "Atomic extension for multi-stage workflow authoring and execution.",
   "contributors": [

package/dist/builtin/workflows/src/extension/index.bundle.mjs

@@ -38352,6 +38352,7 @@ class PostgresHealth {
   attempts = 0;
   nextRecoveryAt = 0;
   failure;
+  failureUnanswered = false;
   healthySinceFailure = false;
   revision = 0;
   listeners = new Set;
@@ -38364,10 +38365,11 @@ class PostgresHealth {
   get endpoint() {
     return this.operations.url?.();
   }
-  retainFailure(error) {
+  retainFailure(error, unanswered = false) {
     const message = error instanceof Error ? error.message : String(error);
     const safe = redactedDatabaseMessage(message, this.endpoint);
     this.failure = new Error(safe);
+    this.failureUnanswered = unanswered;
     this.healthySinceFailure = false;
   }
   dependencyFailure(message) {
@@ -38395,7 +38397,7 @@ class PostgresHealth {
         await this.operations.validate?.(client);
       }
     } catch (error) {
-      this.retainFailure(error);
+      this.retainFailure(error, isQueryReadTimeout(error));
       if (!isQueryReadTimeout(error)) {
         this.invalidate();
         if (this.endpoint === undefined)
@@ -38433,19 +38435,39 @@ class PostgresHealth {
   }
   async probe() {
     const revision = this.revision;
+    const now = this.operations.now ?? Date.now;
+    const wait = this.operations.wait ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
     let identity;
     try {
       identity = await this.operations.probe();
     } catch (error) {
       if (!(isMonitoringConnectionFailure(error) || isQueryReadTimeout(error)) || this.stopped)
         throw error;
-      try {
-        identity = await this.operations.probe();
-      } catch (retryError) {
-        if (isMonitoringConnectionTimeout(retryError) || !isMonitoringConnectionFailure(retryError))
-          throw retryError;
-        this.retainFailure(retryError);
-        return;
+      const deadline = now() + MONITORING_PROBE_RETRY_WINDOW_MS;
+      let delay = MONITORING_PROBE_RETRY_INITIAL_MS;
+      let failure = error;
+      for (;; ) {
+        if (isMonitoringConnectionTimeout(failure) || isQueryReadTimeout(failure)) {
+          if (now() >= deadline)
+            throw failure;
+          await wait(delay);
+          delay = Math.min(delay * 2, MONITORING_PROBE_RETRY_MAX_MS);
+          if (this.stopped)
+            throw failure;
+        }
+        try {
+          identity = await this.operations.probe();
+          break;
+        } catch (retryError) {
+          if (isMonitoringConnectionTimeout(retryError) || isQueryReadTimeout(retryError)) {
+            failure = retryError;
+            continue;
+          }
+          if (!isMonitoringConnectionFailure(retryError))
+            throw retryError;
+          this.retainFailure(retryError);
+          return;
+        }
       }
     }
     if (revision !== this.revision)
@@ -38460,6 +38482,8 @@ class PostgresHealth {
     this.attempts = 0;
     this.nextRecoveryAt = 0;
     this.healthySinceFailure = true;
+    if (this.failureUnanswered)
+      this.failure = undefined;
     return identity.url;
   }
   async refresh() {
@@ -38469,7 +38493,7 @@ class PostgresHealth {
         return ready;
     } catch (error) {
       if (isQueryReadTimeout(error) || isMonitoringConnectionTimeout(error)) {
-        this.retainFailure(new Error("Managed PostgreSQL did not answer a health check in time."));
+        this.retainFailure(new Error("Managed PostgreSQL did not answer a health check in time."), true);
         throw this.dependencyFailure("Managed PostgreSQL did not answer a health check in time.");
       }
       this.retainFailure(error);
@@ -38504,7 +38528,7 @@ class PostgresHealth {
     throw this.dependencyFailure("Managed Postgres is unavailable after bounded recovery. Preserve its data and ownership records.");
   }
 }
-var HEALTH_INTERVAL_MS = 5000, RECOVERY_ATTEMPTS = 3;
+var HEALTH_INTERVAL_MS = 5000, RECOVERY_ATTEMPTS = 3, MONITORING_PROBE_RETRY_WINDOW_MS = 15000, MONITORING_PROBE_RETRY_INITIAL_MS = 250, MONITORING_PROBE_RETRY_MAX_MS = 2000;
 var init_dbos_postgres_health = __esm(() => {
   init_dbos_admission();
 });
@@ -38742,7 +38766,7 @@ async function probePostgresTimezoneData(port) {
     password: "atomic",
     database: "postgres",
     ssl: false,
-    connectionTimeoutMillis: 1000,
+    connectionTimeoutMillis: POSTGRES_HEALTH_CONNECT_TIMEOUT_MS,
     query_timeout: POSTGRES_HEALTH_QUERY_TIMEOUT_MS,
     statement_timeout: POSTGRES_HEALTH_QUERY_TIMEOUT_MS
   });
@@ -38762,7 +38786,7 @@ async function probePostgresIdentity(port) {
     password: "atomic",
     database: "postgres",
     ssl: false,
-    connectionTimeoutMillis: 1000,
+    connectionTimeoutMillis: POSTGRES_HEALTH_CONNECT_TIMEOUT_MS,
     query_timeout: POSTGRES_HEALTH_QUERY_TIMEOUT_MS,
     statement_timeout: POSTGRES_HEALTH_QUERY_TIMEOUT_MS
   });
@@ -38838,7 +38862,7 @@ async function verifyPostgresIdentity(metadata, port, expectedPid, probe = probe
 var POSTGRES_IDENTITY_SQL = `SELECT current_setting('data_directory') AS data_dir,
 	inet_server_port() AS port, host(inet_server_addr()) AS host,
 	split_part(pg_read_file('postmaster.pid'), E'\\n', 3) AS started,
-	system_identifier::text, current_setting('server_version') AS server_version FROM pg_control_system()`, POSTGRES_TIMEZONE_SQL = "SELECT set_config('timezone_abbreviations', 'Default', true)", POSTGRES_HEALTH_QUERY_TIMEOUT_MS = 3000;
+	system_identifier::text, current_setting('server_version') AS server_version FROM pg_control_system()`, POSTGRES_TIMEZONE_SQL = "SELECT set_config('timezone_abbreviations', 'Default', true)", POSTGRES_HEALTH_QUERY_TIMEOUT_MS = 3000, POSTGRES_HEALTH_CONNECT_TIMEOUT_MS = 3000;
 var init_dbos_postgres_identity = __esm(() => {
   init_esm();
   init_dbos_postgres_health();

package/dist/builtin/workflows/src/index.js

@@ -36837,6 +36837,7 @@ class PostgresHealth {
   attempts = 0;
   nextRecoveryAt = 0;
   failure;
+  failureUnanswered = false;
   healthySinceFailure = false;
   revision = 0;
   listeners = new Set;
@@ -36849,10 +36850,11 @@ class PostgresHealth {
   get endpoint() {
     return this.operations.url?.();
   }
-  retainFailure(error) {
+  retainFailure(error, unanswered = false) {
     const message = error instanceof Error ? error.message : String(error);
     const safe = redactedDatabaseMessage(message, this.endpoint);
     this.failure = new Error(safe);
+    this.failureUnanswered = unanswered;
     this.healthySinceFailure = false;
   }
   dependencyFailure(message) {
@@ -36880,7 +36882,7 @@ class PostgresHealth {
         await this.operations.validate?.(client);
       }
     } catch (error) {
-      this.retainFailure(error);
+      this.retainFailure(error, isQueryReadTimeout(error));
       if (!isQueryReadTimeout(error)) {
         this.invalidate();
         if (this.endpoint === undefined)
@@ -36918,19 +36920,39 @@ class PostgresHealth {
   }
   async probe() {
     const revision = this.revision;
+    const now = this.operations.now ?? Date.now;
+    const wait = this.operations.wait ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
     let identity;
     try {
       identity = await this.operations.probe();
     } catch (error) {
       if (!(isMonitoringConnectionFailure(error) || isQueryReadTimeout(error)) || this.stopped)
         throw error;
-      try {
-        identity = await this.operations.probe();
-      } catch (retryError) {
-        if (isMonitoringConnectionTimeout(retryError) || !isMonitoringConnectionFailure(retryError))
-          throw retryError;
-        this.retainFailure(retryError);
-        return;
+      const deadline = now() + MONITORING_PROBE_RETRY_WINDOW_MS;
+      let delay = MONITORING_PROBE_RETRY_INITIAL_MS;
+      let failure = error;
+      for (;; ) {
+        if (isMonitoringConnectionTimeout(failure) || isQueryReadTimeout(failure)) {
+          if (now() >= deadline)
+            throw failure;
+          await wait(delay);
+          delay = Math.min(delay * 2, MONITORING_PROBE_RETRY_MAX_MS);
+          if (this.stopped)
+            throw failure;
+        }
+        try {
+          identity = await this.operations.probe();
+          break;
+        } catch (retryError) {
+          if (isMonitoringConnectionTimeout(retryError) || isQueryReadTimeout(retryError)) {
+            failure = retryError;
+            continue;
+          }
+          if (!isMonitoringConnectionFailure(retryError))
+            throw retryError;
+          this.retainFailure(retryError);
+          return;
+        }
       }
     }
     if (revision !== this.revision)
@@ -36945,6 +36967,8 @@ class PostgresHealth {
     this.attempts = 0;
     this.nextRecoveryAt = 0;
     this.healthySinceFailure = true;
+    if (this.failureUnanswered)
+      this.failure = undefined;
     return identity.url;
   }
   async refresh() {
@@ -36954,7 +36978,7 @@ class PostgresHealth {
         return ready;
     } catch (error) {
       if (isQueryReadTimeout(error) || isMonitoringConnectionTimeout(error)) {
-        this.retainFailure(new Error("Managed PostgreSQL did not answer a health check in time."));
+        this.retainFailure(new Error("Managed PostgreSQL did not answer a health check in time."), true);
         throw this.dependencyFailure("Managed PostgreSQL did not answer a health check in time.");
       }
       this.retainFailure(error);
@@ -36989,7 +37013,7 @@ class PostgresHealth {
     throw this.dependencyFailure("Managed Postgres is unavailable after bounded recovery. Preserve its data and ownership records.");
   }
 }
-var HEALTH_INTERVAL_MS = 5000, RECOVERY_ATTEMPTS = 3;
+var HEALTH_INTERVAL_MS = 5000, RECOVERY_ATTEMPTS = 3, MONITORING_PROBE_RETRY_WINDOW_MS = 15000, MONITORING_PROBE_RETRY_INITIAL_MS = 250, MONITORING_PROBE_RETRY_MAX_MS = 2000;
 var init_dbos_postgres_health = __esm(() => {
   init_dbos_admission();
 });
@@ -37227,7 +37251,7 @@ async function probePostgresTimezoneData(port) {
     password: "atomic",
     database: "postgres",
     ssl: false,
-    connectionTimeoutMillis: 1000,
+    connectionTimeoutMillis: POSTGRES_HEALTH_CONNECT_TIMEOUT_MS,
     query_timeout: POSTGRES_HEALTH_QUERY_TIMEOUT_MS,
     statement_timeout: POSTGRES_HEALTH_QUERY_TIMEOUT_MS
   });
@@ -37247,7 +37271,7 @@ async function probePostgresIdentity(port) {
     password: "atomic",
     database: "postgres",
     ssl: false,
-    connectionTimeoutMillis: 1000,
+    connectionTimeoutMillis: POSTGRES_HEALTH_CONNECT_TIMEOUT_MS,
     query_timeout: POSTGRES_HEALTH_QUERY_TIMEOUT_MS,
     statement_timeout: POSTGRES_HEALTH_QUERY_TIMEOUT_MS
   });
@@ -37323,7 +37347,7 @@ async function verifyPostgresIdentity(metadata, port, expectedPid, probe = probe
 var POSTGRES_IDENTITY_SQL = `SELECT current_setting('data_directory') AS data_dir,
 	inet_server_port() AS port, host(inet_server_addr()) AS host,
 	split_part(pg_read_file('postmaster.pid'), E'\\n', 3) AS started,
-	system_identifier::text, current_setting('server_version') AS server_version FROM pg_control_system()`, POSTGRES_TIMEZONE_SQL = "SELECT set_config('timezone_abbreviations', 'Default', true)", POSTGRES_HEALTH_QUERY_TIMEOUT_MS = 3000;
+	system_identifier::text, current_setting('server_version') AS server_version FROM pg_control_system()`, POSTGRES_TIMEZONE_SQL = "SELECT set_config('timezone_abbreviations', 'Default', true)", POSTGRES_HEALTH_QUERY_TIMEOUT_MS = 3000, POSTGRES_HEALTH_CONNECT_TIMEOUT_MS = 3000;
 var init_dbos_postgres_identity = __esm(() => {
   init_esm();
   init_dbos_postgres_health();

package/dist/cli/startup-ui.d.ts

@@ -1,4 +1,5 @@
 import { type TUI } from "@earendil-works/pi-tui";
+import type { ExtensionUIDialogOptions } from "../core/extensions/index.js";
 import type { SettingsManager } from "../core/settings-manager.ts";
 import { type TerminalTheme } from "../modes/interactive/theme/theme.js";
 /**
@@ -13,6 +14,6 @@ export declare function showFirstTimeSetup(settingsManager: SettingsManager): Pr
 export declare function showStartupSelector<T>(settingsManager: SettingsManager, title: string, options: Array<{
     label: string;
     value: T;
-}>): Promise<T | undefined>;
-export declare function showStartupInput(settingsManager: SettingsManager, title: string, placeholder?: string): Promise<string | undefined>;
+}>, dialogOptions?: ExtensionUIDialogOptions): Promise<T | undefined>;
+export declare function showStartupInput(settingsManager: SettingsManager, title: string, placeholder?: string, dialogOptions?: ExtensionUIDialogOptions): Promise<string | undefined>;
 //# sourceMappingURL=startup-ui.d.ts.map

package/dist/cli/startup-ui.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"startup-ui.d.ts","sourceRoot":"","sources":["../../src/cli/startup-ui.ts"],"names":[],"mappings":"AACA,OAAO,EAIN,KAAK,GAAG,EAER,MAAM,wBAAwB,CAAC;AAGhC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAOnE,OAAO,EAIN,KAAK,aAAa,EAClB,MAAM,qCAAqC,CAAC;AAiB7C;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,EAAE,EAAE,GAAG,GAAG,OAAO,CAAC,aAAa,CAAC,CAExE;AAED,mGAAmG;AACnG,wBAAgB,uBAAuB,CAAC,YAAY,GAAE,MAA0B,GAAG,OAAO,CAEzF;AAED,wBAAsB,kBAAkB,CAAC,eAAe,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAsCxF;AAED,wBAAsB,mBAAmB,CAAC,CAAC,EAC1C,eAAe,EAAE,eAAe,EAChC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,CAAC,GACzC,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CA0BxB;AAED,wBAAsB,gBAAgB,CACrC,eAAe,EAAE,eAAe,EAChC,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA2B7B"}
+{"version":3,"file":"startup-ui.d.ts","sourceRoot":"","sources":["../../src/cli/startup-ui.ts"],"names":[],"mappings":"AACA,OAAO,EAIN,KAAK,GAAG,EAER,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAE5E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAOnE,OAAO,EAIN,KAAK,aAAa,EAClB,MAAM,qCAAqC,CAAC;AAiB7C;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,EAAE,EAAE,GAAG,GAAG,OAAO,CAAC,aAAa,CAAC,CAExE;AAED,mGAAmG;AACnG,wBAAgB,uBAAuB,CAAC,YAAY,GAAE,MAA0B,GAAG,OAAO,CAEzF;AAED,wBAAsB,kBAAkB,CAAC,eAAe,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAsCxF;AAED,wBAAsB,mBAAmB,CAAC,CAAC,EAC1C,eAAe,EAAE,eAAe,EAChC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,CAAC,EAC3C,aAAa,CAAC,EAAE,wBAAwB,GACtC,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAkCxB;AAED,wBAAsB,gBAAgB,CACrC,eAAe,EAAE,eAAe,EAChC,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,EACpB,aAAa,CAAC,EAAE,wBAAwB,GACtC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAkC7B"}

package/dist/cli/startup-ui.js

@@ -71,8 +71,12 @@ export async function showFirstTimeSetup(settingsManager) {
         })();
     });
 }
-export async function showStartupSelector(settingsManager, title, options) {
+export async function showStartupSelector(settingsManager, title, options, dialogOptions) {
     return new Promise((resolve) => {
+        if (dialogOptions?.signal?.aborted) {
+            resolve(undefined);
+            return;
+        }
         const ui = createStartupTui(settingsManager);
         let settled = false;
         const finish = async (result) => {
@@ -80,18 +84,26 @@ export async function showStartupSelector(settingsManager, title, options) {
                 return;
             }
             settled = true;
+            dialogOptions?.signal?.removeEventListener("abort", abandon);
+            selector.dispose();
             await clearStartupTui(ui);
             ui.stop();
             resolve(result);
         };
-        const selector = new ExtensionSelectorComponent(title, options.map((option) => option.label), (option) => void finish(options.find((entry) => entry.label === option)?.value), () => void finish(undefined), { tui: ui });
+        const abandon = () => void finish(undefined);
+        dialogOptions?.signal?.addEventListener("abort", abandon, { once: true });
+        const selector = new ExtensionSelectorComponent(title, options.map((option) => option.label), (option) => void finish(options.find((entry) => entry.label === option)?.value), () => void finish(undefined), { tui: ui, timeout: dialogOptions?.timeout });
         ui.addChild(selector);
         ui.setFocus(selector);
         ui.start();
     });
 }
-export async function showStartupInput(settingsManager, title, placeholder) {
+export async function showStartupInput(settingsManager, title, placeholder, dialogOptions) {
     return new Promise((resolve) => {
+        if (dialogOptions?.signal?.aborted) {
+            resolve(undefined);
+            return;
+        }
         const ui = createStartupTui(settingsManager);
         let settled = false;
         const finish = async (result) => {
@@ -99,12 +111,15 @@ export async function showStartupInput(settingsManager, title, placeholder) {
                 return;
             }
             settled = true;
+            dialogOptions?.signal?.removeEventListener("abort", abandon);
             input.dispose();
             await clearStartupTui(ui);
             ui.stop();
             resolve(result);
         };
-        const input = new ExtensionInputComponent(title, placeholder, (value) => void finish(value), () => void finish(undefined), { tui: ui });
+        const abandon = () => void finish(undefined);
+        dialogOptions?.signal?.addEventListener("abort", abandon, { once: true });
+        const input = new ExtensionInputComponent(title, placeholder, (value) => void finish(value), () => void finish(undefined), { tui: ui, timeout: dialogOptions?.timeout });
         ui.addChild(input);
         ui.setFocus(input);
         ui.start();