@caupulican/pi-adaptative 0.86.3 → 0.86.6

package/dist/core/delegation/worker-provider-turn-protocol.js

@@ -0,0 +1,185 @@
+import { addUsage, createEmptyUsage } from "@caupulican/pi-agent-core/usage";
+export class WorkerCompletionProtocolError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "WorkerCompletionProtocolError";
+    }
+}
+function usageDelta(usage) {
+    return {
+        inputTokens: usage.input,
+        outputTokens: usage.output,
+        cacheReadTokens: usage.cacheRead,
+        cacheWriteTokens: usage.cacheWrite,
+        totalTokens: usage.totalTokens,
+        costUsd: usage.cost.total,
+    };
+}
+function positiveUsageDelta(reported, accounted) {
+    return {
+        inputTokens: Math.max(0, reported.input - accounted.input),
+        outputTokens: Math.max(0, reported.output - accounted.output),
+        cacheReadTokens: Math.max(0, reported.cacheRead - accounted.cacheRead),
+        cacheWriteTokens: Math.max(0, reported.cacheWrite - accounted.cacheWrite),
+        totalTokens: Math.max(0, reported.totalTokens - accounted.totalTokens),
+        costUsd: Math.max(0, reported.cost.total - accounted.cost.total),
+    };
+}
+function hasUsage(delta) {
+    return (delta.inputTokens !== 0 ||
+        delta.outputTokens !== 0 ||
+        delta.cacheReadTokens !== 0 ||
+        delta.cacheWriteTokens !== 0 ||
+        delta.totalTokens !== 0 ||
+        delta.costUsd !== 0);
+}
+/**
+ * Owns one provider request's reservation epochs and usage evidence. The caller remains responsible
+ * for persisting the assistant and checkpoint between accounting and consuming an epoch.
+ */
+export class WorkerProviderTurnProtocol {
+    constructor(options) {
+        this.callbackAccountedUsage = createEmptyUsage();
+        this.heldConsumed = false;
+        this.assistantUsageAccounted = false;
+        this.inFlight = false;
+        this.generation = 0;
+        this.closed = false;
+        this.successfulPreflights = 0;
+        this.consumedPreflights = 0;
+        this.acquireReservation = options.acquireReservation;
+        this.recordUsage = options.recordUsage;
+        this.signal = options.signal;
+        this.onFailure = options.onFailure;
+    }
+    async requestPreflight() {
+        if (this.closed || this.inFlight || (this.held && !this.heldConsumed)) {
+            const error = new WorkerCompletionProtocolError("Worker completion attempted an overlapping or out-of-order provider preflight.");
+            this.generation += 1;
+            this.onFailure(error);
+            this.releaseHeldReservation();
+            throw error;
+        }
+        // A terminal assistant retains capacity until either its result is reconciled or the adapter
+        // proves that another provider turn is starting.
+        this.releaseHeldReservation();
+        this.inFlight = true;
+        const generation = ++this.generation;
+        let acquired;
+        try {
+            acquired = await this.acquireReservation();
+            this.signal.throwIfAborted();
+            if (this.closed || generation !== this.generation) {
+                throw new WorkerCompletionProtocolError("Worker completion provider preflight resolved after its ownership fence closed.");
+            }
+            this.held = acquired;
+            this.heldConsumed = false;
+            this.assistantUsageAccounted = false;
+            acquired = undefined;
+            this.successfulPreflights += 1;
+            return { maxTokens: this.held.maxTokens };
+        }
+        catch (error) {
+            this.onFailure(error);
+            acquired?.release();
+            this.releaseHeldReservation();
+            throw error;
+        }
+        finally {
+            this.inFlight = false;
+        }
+    }
+    accountAssistantUsage(usage) {
+        this.assertOutstandingReservation();
+        if (this.assistantUsageAccounted) {
+            this.fail(new WorkerCompletionProtocolError("Worker completion attempted to account more than one assistant under one provider preflight."));
+        }
+        try {
+            this.recordUsage?.(usageDelta(usage));
+            addUsage(this.callbackAccountedUsage, usage);
+            this.assistantUsageAccounted = true;
+        }
+        catch (error) {
+            this.onFailure(error);
+            throw error;
+        }
+    }
+    /** Account usage before releasing a tool-request turn for nested or subsequent provider work. */
+    consumeToolAssistantAndRelease() {
+        this.consumeAccountedAssistant();
+        this.releaseHeldReservation();
+    }
+    /** Account usage while retaining a terminal turn's remaining capacity through result verification. */
+    consumeTerminalAssistantAndHold() {
+        this.consumeAccountedAssistant();
+    }
+    assertEverySuccessfulPreflightConsumed() {
+        if (!this.inFlight &&
+            (!this.held || this.heldConsumed) &&
+            this.consumedPreflights === this.successfulPreflights) {
+            return;
+        }
+        this.fail(new WorkerCompletionProtocolError("Worker completion returned with a provider preflight authority epoch that no assistant consumed."));
+    }
+    assertProviderOutputPreflight(kind = "completion") {
+        if (this.successfulPreflights > 0)
+            return;
+        this.fail(new WorkerCompletionProtocolError(kind === "compaction"
+            ? "Worker compaction returned provider output without a successful authority preflight."
+            : "Worker completion returned provider output without a successful authority preflight."));
+    }
+    hasSuccessfulPreflight() {
+        return this.successfulPreflights > 0;
+    }
+    hasOutstandingAssistantReservation() {
+        return this.held !== undefined && !this.heldConsumed;
+    }
+    /** Conservatively charge only provider-result usage not already evidenced by assistant callbacks. */
+    accountUnverifiedResultUsageDelta(reported) {
+        const delta = positiveUsageDelta(reported, this.callbackAccountedUsage);
+        let recorded = false;
+        if (this.recordUsage && hasUsage(delta)) {
+            try {
+                this.recordUsage(delta);
+                recorded = true;
+            }
+            catch (error) {
+                this.onFailure(error);
+                throw error;
+            }
+        }
+        return recorded;
+    }
+    close() {
+        if (!this.closed) {
+            this.closed = true;
+            this.generation += 1;
+        }
+        this.releaseHeldReservation();
+    }
+    consumeAccountedAssistant() {
+        this.assertOutstandingReservation();
+        if (!this.assistantUsageAccounted) {
+            this.fail(new WorkerCompletionProtocolError("Worker completion attempted to consume an assistant before its provider usage was accounted."));
+        }
+        this.consumedPreflights += 1;
+        this.heldConsumed = true;
+    }
+    assertOutstandingReservation() {
+        if (this.held && !this.heldConsumed)
+            return;
+        this.fail(new WorkerCompletionProtocolError("Worker completion attempted to persist an assistant without a held provider reservation."));
+    }
+    releaseHeldReservation() {
+        const held = this.held;
+        this.held = undefined;
+        this.heldConsumed = false;
+        this.assistantUsageAccounted = false;
+        held?.release();
+    }
+    fail(error) {
+        this.onFailure(error);
+        throw error;
+    }
+}
+//# sourceMappingURL=worker-provider-turn-protocol.js.map

package/dist/core/delegation/worker-provider-turn-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-provider-turn-protocol.js","sourceRoot":"","sources":["../../../src/core/delegation/worker-provider-turn-protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAI7E,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACvD,YAAY,OAAe;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC7C,CAAC;CACD;AAED,SAAS,UAAU,CAAC,KAAY;IAC/B,OAAO;QACN,WAAW,EAAE,KAAK,CAAC,KAAK;QACxB,YAAY,EAAE,KAAK,CAAC,MAAM;QAC1B,eAAe,EAAE,KAAK,CAAC,SAAS;QAChC,gBAAgB,EAAE,KAAK,CAAC,UAAU;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK;KACzB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAe,EAAE,SAAgB;IAC5D,OAAO;QACN,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;QAC1D,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;QAC7D,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;QACtE,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC;QACzE,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;QACtE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;KAChE,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAkC;IACnD,OAAO,CACN,KAAK,CAAC,WAAW,KAAK,CAAC;QACvB,KAAK,CAAC,YAAY,KAAK,CAAC;QACxB,KAAK,CAAC,eAAe,KAAK,CAAC;QAC3B,KAAK,CAAC,gBAAgB,KAAK,CAAC;QAC5B,KAAK,CAAC,WAAW,KAAK,CAAC;QACvB,KAAK,CAAC,OAAO,KAAK,CAAC,CACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,0BAA0B;IAetC,YAAY,OAKX;QAfgB,2BAAsB,GAAG,gBAAgB,EAAE,CAAC;QAErD,iBAAY,GAAG,KAAK,CAAC;QACrB,4BAAuB,GAAG,KAAK,CAAC;QAChC,aAAQ,GAAG,KAAK,CAAC;QACjB,eAAU,GAAG,CAAC,CAAC;QACf,WAAM,GAAG,KAAK,CAAC;QACf,yBAAoB,GAAG,CAAC,CAAC;QACzB,uBAAkB,GAAG,CAAC,CAAC;QAQ9B,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;QACrD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,gBAAgB;QACrB,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACvE,MAAM,KAAK,GAAG,IAAI,6BAA6B,CAC9C,gFAAgF,CAChF,CAAC;YACF,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;YACrB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACtB,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC9B,MAAM,KAAK,CAAC;QACb,CAAC;QACD,6FAA6F;QAC7F,iDAAiD;QACjD,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,MAAM,UAAU,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC;QACrC,IAAI,QAA+C,CAAC;QACpD,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,MAAM,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;gBACnD,MAAM,IAAI,6BAA6B,CACtC,iFAAiF,CACjF,CAAC;YACH,CAAC;YACD,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC;YACrB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;YAC1B,IAAI,CAAC,uBAAuB,GAAG,KAAK,CAAC;YACrC,QAAQ,GAAG,SAAS,CAAC;YACrB,IAAI,CAAC,oBAAoB,IAAI,CAAC,CAAC;YAC/B,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACtB,QAAQ,EAAE,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC9B,MAAM,KAAK,CAAC;QACb,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACvB,CAAC;IACF,CAAC;IAED,qBAAqB,CAAC,KAAY;QACjC,IAAI,CAAC,4BAA4B,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CACR,IAAI,6BAA6B,CAChC,8FAA8F,CAC9F,CACD,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACJ,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;YACtC,QAAQ,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;YAC7C,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACtB,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IAED,iGAAiG;IACjG,8BAA8B;QAC7B,IAAI,CAAC,yBAAyB,EAAE,CAAC;QACjC,IAAI,CAAC,sBAAsB,EAAE,CAAC;IAC/B,CAAC;IAED,sGAAsG;IACtG,+BAA+B;QAC9B,IAAI,CAAC,yBAAyB,EAAE,CAAC;IAClC,CAAC;IAED,sCAAsC;QACrC,IACC,CAAC,IAAI,CAAC,QAAQ;YACd,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC;YACjC,IAAI,CAAC,kBAAkB,KAAK,IAAI,CAAC,oBAAoB,EACpD,CAAC;YACF,OAAO;QACR,CAAC;QACD,IAAI,CAAC,IAAI,CACR,IAAI,6BAA6B,CAChC,kGAAkG,CAClG,CACD,CAAC;IACH,CAAC;IAED,6BAA6B,CAAC,IAAI,GAAgC,YAAY;QAC7E,IAAI,IAAI,CAAC,oBAAoB,GAAG,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC,IAAI,CACR,IAAI,6BAA6B,CAChC,IAAI,KAAK,YAAY;YACpB,CAAC,CAAC,sFAAsF;YACxF,CAAC,CAAC,sFAAsF,CACzF,CACD,CAAC;IACH,CAAC;IAED,sBAAsB;QACrB,OAAO,IAAI,CAAC,oBAAoB,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,kCAAkC;QACjC,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;IACtD,CAAC;IAED,qGAAqG;IACrG,iCAAiC,CAAC,QAAe;QAChD,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACxE,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,IAAI,CAAC,WAAW,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC;gBACJ,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;gBACxB,QAAQ,GAAG,IAAI,CAAC;YACjB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBACtB,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC;QACD,OAAO,QAAQ,CAAC;IACjB,CAAC;IAED,KAAK;QACJ,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,sBAAsB,EAAE,CAAC;IAC/B,CAAC;IAEO,yBAAyB;QAChC,IAAI,CAAC,4BAA4B,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CACR,IAAI,6BAA6B,CAChC,8FAA8F,CAC9F,CACD,CAAC;QACH,CAAC;QACD,IAAI,CAAC,kBAAkB,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC1B,CAAC;IAEO,4BAA4B;QACnC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO;QAC5C,IAAI,CAAC,IAAI,CACR,IAAI,6BAA6B,CAChC,0FAA0F,CAC1F,CACD,CAAC;IACH,CAAC;IAEO,sBAAsB;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;QACtB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC,uBAAuB,GAAG,KAAK,CAAC;QACrC,IAAI,EAAE,OAAO,EAAE,CAAC;IACjB,CAAC;IAEO,IAAI,CAAC,KAAoC;QAChD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtB,MAAM,KAAK,CAAC;IACb,CAAC;CACD","sourcesContent":["import { addUsage, createEmptyUsage } from \"@caupulican/pi-agent-core/usage\";\nimport type { Usage } from \"@caupulican/pi-ai\";\nimport type { GatewayUsageDelta, ProviderBudgetReservation } from \"../orchestration/capability-gateway.ts\";\n\nexport class WorkerCompletionProtocolError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"WorkerCompletionProtocolError\";\n\t}\n}\n\nfunction usageDelta(usage: Usage): Required<GatewayUsageDelta> {\n\treturn {\n\t\tinputTokens: usage.input,\n\t\toutputTokens: usage.output,\n\t\tcacheReadTokens: usage.cacheRead,\n\t\tcacheWriteTokens: usage.cacheWrite,\n\t\ttotalTokens: usage.totalTokens,\n\t\tcostUsd: usage.cost.total,\n\t};\n}\n\nfunction positiveUsageDelta(reported: Usage, accounted: Usage): Required<GatewayUsageDelta> {\n\treturn {\n\t\tinputTokens: Math.max(0, reported.input - accounted.input),\n\t\toutputTokens: Math.max(0, reported.output - accounted.output),\n\t\tcacheReadTokens: Math.max(0, reported.cacheRead - accounted.cacheRead),\n\t\tcacheWriteTokens: Math.max(0, reported.cacheWrite - accounted.cacheWrite),\n\t\ttotalTokens: Math.max(0, reported.totalTokens - accounted.totalTokens),\n\t\tcostUsd: Math.max(0, reported.cost.total - accounted.cost.total),\n\t};\n}\n\nfunction hasUsage(delta: Required<GatewayUsageDelta>): boolean {\n\treturn (\n\t\tdelta.inputTokens !== 0 ||\n\t\tdelta.outputTokens !== 0 ||\n\t\tdelta.cacheReadTokens !== 0 ||\n\t\tdelta.cacheWriteTokens !== 0 ||\n\t\tdelta.totalTokens !== 0 ||\n\t\tdelta.costUsd !== 0\n\t);\n}\n\n/**\n * Owns one provider request's reservation epochs and usage evidence. The caller remains responsible\n * for persisting the assistant and checkpoint between accounting and consuming an epoch.\n */\nexport class WorkerProviderTurnProtocol {\n\tprivate readonly acquireReservation: () => Promise<ProviderBudgetReservation>;\n\tprivate readonly recordUsage: ((delta: GatewayUsageDelta) => void) | undefined;\n\tprivate readonly signal: AbortSignal;\n\tprivate readonly onFailure: (error: unknown) => void;\n\tprivate readonly callbackAccountedUsage = createEmptyUsage();\n\tprivate held: ProviderBudgetReservation | undefined;\n\tprivate heldConsumed = false;\n\tprivate assistantUsageAccounted = false;\n\tprivate inFlight = false;\n\tprivate generation = 0;\n\tprivate closed = false;\n\tprivate successfulPreflights = 0;\n\tprivate consumedPreflights = 0;\n\n\tconstructor(options: {\n\t\tacquireReservation(): Promise<ProviderBudgetReservation>;\n\t\trecordUsage?(delta: GatewayUsageDelta): void;\n\t\tsignal: AbortSignal;\n\t\tonFailure(error: unknown): void;\n\t}) {\n\t\tthis.acquireReservation = options.acquireReservation;\n\t\tthis.recordUsage = options.recordUsage;\n\t\tthis.signal = options.signal;\n\t\tthis.onFailure = options.onFailure;\n\t}\n\n\tasync requestPreflight(): Promise<{ maxTokens: number }> {\n\t\tif (this.closed || this.inFlight || (this.held && !this.heldConsumed)) {\n\t\t\tconst error = new WorkerCompletionProtocolError(\n\t\t\t\t\"Worker completion attempted an overlapping or out-of-order provider preflight.\",\n\t\t\t);\n\t\t\tthis.generation += 1;\n\t\t\tthis.onFailure(error);\n\t\t\tthis.releaseHeldReservation();\n\t\t\tthrow error;\n\t\t}\n\t\t// A terminal assistant retains capacity until either its result is reconciled or the adapter\n\t\t// proves that another provider turn is starting.\n\t\tthis.releaseHeldReservation();\n\t\tthis.inFlight = true;\n\t\tconst generation = ++this.generation;\n\t\tlet acquired: ProviderBudgetReservation | undefined;\n\t\ttry {\n\t\t\tacquired = await this.acquireReservation();\n\t\t\tthis.signal.throwIfAborted();\n\t\t\tif (this.closed || generation !== this.generation) {\n\t\t\t\tthrow new WorkerCompletionProtocolError(\n\t\t\t\t\t\"Worker completion provider preflight resolved after its ownership fence closed.\",\n\t\t\t\t);\n\t\t\t}\n\t\t\tthis.held = acquired;\n\t\t\tthis.heldConsumed = false;\n\t\t\tthis.assistantUsageAccounted = false;\n\t\t\tacquired = undefined;\n\t\t\tthis.successfulPreflights += 1;\n\t\t\treturn { maxTokens: this.held.maxTokens };\n\t\t} catch (error) {\n\t\t\tthis.onFailure(error);\n\t\t\tacquired?.release();\n\t\t\tthis.releaseHeldReservation();\n\t\t\tthrow error;\n\t\t} finally {\n\t\t\tthis.inFlight = false;\n\t\t}\n\t}\n\n\taccountAssistantUsage(usage: Usage): void {\n\t\tthis.assertOutstandingReservation();\n\t\tif (this.assistantUsageAccounted) {\n\t\t\tthis.fail(\n\t\t\t\tnew WorkerCompletionProtocolError(\n\t\t\t\t\t\"Worker completion attempted to account more than one assistant under one provider preflight.\",\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\ttry {\n\t\t\tthis.recordUsage?.(usageDelta(usage));\n\t\t\taddUsage(this.callbackAccountedUsage, usage);\n\t\t\tthis.assistantUsageAccounted = true;\n\t\t} catch (error) {\n\t\t\tthis.onFailure(error);\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\t/** Account usage before releasing a tool-request turn for nested or subsequent provider work. */\n\tconsumeToolAssistantAndRelease(): void {\n\t\tthis.consumeAccountedAssistant();\n\t\tthis.releaseHeldReservation();\n\t}\n\n\t/** Account usage while retaining a terminal turn's remaining capacity through result verification. */\n\tconsumeTerminalAssistantAndHold(): void {\n\t\tthis.consumeAccountedAssistant();\n\t}\n\n\tassertEverySuccessfulPreflightConsumed(): void {\n\t\tif (\n\t\t\t!this.inFlight &&\n\t\t\t(!this.held || this.heldConsumed) &&\n\t\t\tthis.consumedPreflights === this.successfulPreflights\n\t\t) {\n\t\t\treturn;\n\t\t}\n\t\tthis.fail(\n\t\t\tnew WorkerCompletionProtocolError(\n\t\t\t\t\"Worker completion returned with a provider preflight authority epoch that no assistant consumed.\",\n\t\t\t),\n\t\t);\n\t}\n\n\tassertProviderOutputPreflight(kind: \"completion\" | \"compaction\" = \"completion\"): void {\n\t\tif (this.successfulPreflights > 0) return;\n\t\tthis.fail(\n\t\t\tnew WorkerCompletionProtocolError(\n\t\t\t\tkind === \"compaction\"\n\t\t\t\t\t? \"Worker compaction returned provider output without a successful authority preflight.\"\n\t\t\t\t\t: \"Worker completion returned provider output without a successful authority preflight.\",\n\t\t\t),\n\t\t);\n\t}\n\n\thasSuccessfulPreflight(): boolean {\n\t\treturn this.successfulPreflights > 0;\n\t}\n\n\thasOutstandingAssistantReservation(): boolean {\n\t\treturn this.held !== undefined && !this.heldConsumed;\n\t}\n\n\t/** Conservatively charge only provider-result usage not already evidenced by assistant callbacks. */\n\taccountUnverifiedResultUsageDelta(reported: Usage): boolean {\n\t\tconst delta = positiveUsageDelta(reported, this.callbackAccountedUsage);\n\t\tlet recorded = false;\n\t\tif (this.recordUsage && hasUsage(delta)) {\n\t\t\ttry {\n\t\t\t\tthis.recordUsage(delta);\n\t\t\t\trecorded = true;\n\t\t\t} catch (error) {\n\t\t\t\tthis.onFailure(error);\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t}\n\t\treturn recorded;\n\t}\n\n\tclose(): void {\n\t\tif (!this.closed) {\n\t\t\tthis.closed = true;\n\t\t\tthis.generation += 1;\n\t\t}\n\t\tthis.releaseHeldReservation();\n\t}\n\n\tprivate consumeAccountedAssistant(): void {\n\t\tthis.assertOutstandingReservation();\n\t\tif (!this.assistantUsageAccounted) {\n\t\t\tthis.fail(\n\t\t\t\tnew WorkerCompletionProtocolError(\n\t\t\t\t\t\"Worker completion attempted to consume an assistant before its provider usage was accounted.\",\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\tthis.consumedPreflights += 1;\n\t\tthis.heldConsumed = true;\n\t}\n\n\tprivate assertOutstandingReservation(): void {\n\t\tif (this.held && !this.heldConsumed) return;\n\t\tthis.fail(\n\t\t\tnew WorkerCompletionProtocolError(\n\t\t\t\t\"Worker completion attempted to persist an assistant without a held provider reservation.\",\n\t\t\t),\n\t\t);\n\t}\n\n\tprivate releaseHeldReservation(): void {\n\t\tconst held = this.held;\n\t\tthis.held = undefined;\n\t\tthis.heldConsumed = false;\n\t\tthis.assistantUsageAccounted = false;\n\t\theld?.release();\n\t}\n\n\tprivate fail(error: WorkerCompletionProtocolError): never {\n\t\tthis.onFailure(error);\n\t\tthrow error;\n\t}\n}\n"]}

package/dist/core/delegation/worker-recovery-coordinator.d.ts

@@ -13,14 +13,29 @@ export type WorkerRecoveryDispatchResult = {
     started: false;
     skipReason: string;
 };
+export type WorkerRetryScheduleResult = {
+    scheduled: true;
+    record: LaneRecord;
+    retriesUsed: number;
+    notBefore: string;
+} | {
+    scheduled: false;
+    reason: string;
+};
 export interface WorkerRecoveryCoordinatorOptions {
     lifecycle: WorkerLifecycle;
-    scheduler: Pick<WorkerDispatchScheduler, "enqueue">;
+    scheduler: Pick<WorkerDispatchScheduler, "enqueue"> & Partial<Pick<WorkerDispatchScheduler, "onQueueCapacityAvailable">>;
     recoverWriteReservations(): void;
     publishTerminalRecord(record: LaneRecord): void;
+    publishTerminalRecords?(records: readonly LaneRecord[]): void;
     dispatchVerification(recovery: Extract<PendingVerificationRecovery, {
         action: "dispatch";
     }>): WorkerRecoveryDispatchResult;
+    recoverTaskBearingMailboxTurns(): void;
+    recoverSessionRootReplies(): void;
+    /** Wake the scheduler and UI after a retained retry deadline becomes eligible. */
+    retryReady?(): void;
+    now?(): number;
     warn(message: string): void;
 }
 /**
@@ -33,21 +48,47 @@ export declare class WorkerRecoveryCoordinator {
     private queueRecovered;
     private recoveringDurableState;
     private readonly verificationRecoveryFailures;
+    private readonly retryTimers;
+    private readonly unsubscribeQueueCapacity;
     constructor(options: WorkerRecoveryCoordinatorOptions);
-    /** Idempotently rebuild in-process queue state and replay only durable terminal handoffs. */
+    /** Idempotently rebuild in-process queues, terminal outboxes, and task-bearing mailboxes. */
     recover(): void;
+    /** Evaluate, persist, and arm one retry through the same durable path used by restart recovery. */
+    scheduleAttemptRetry(args: {
+        laneId: string;
+        agentId: string;
+        ownerId: string;
+        request: WorkerDelegationRequest;
+        outcome: {
+            laneStatus: string;
+            reasonCode: string;
+            reasonDetail?: string;
+        };
+        provider: string;
+        maxAttempts?: number;
+    }): WorkerRetryScheduleResult;
+    /** Cancel only process-local alarms; the retained deadline remains authoritative on disk. */
+    dispose(): void;
+    clearScheduledRetry(laneId: string): void;
+    /** Keep an externally requested wake queued while the durable retry deadline is still retained. */
+    deferRetryIfNeeded(record: LaneRecord, request: WorkerDelegationRequest): boolean;
+    private enqueueOrDeferRetry;
+    private onRetryTimer;
+    private tryEnqueueDueRetry;
+    private flushDueRetries;
+    private now;
     /** Rebuild task metadata from its durable dispatch; no current profile/model selection is consulted. */
     recoveredRequest(attempt: AttemptRuntimeState, verificationOfTaskId?: string): WorkerDelegationRequest;
     /** Append deterministic unknown outcomes only for tool calls not durably followed by a result. */
     repairInterruptedToolResults(conversation: WorkerConversation): void;
     /** Return an already-persisted final assistant response so recovery cannot duplicate provider work. */
-    recoveredTerminalCompletion(conversation: WorkerConversation): {
+    recoveredTerminalCompletion(conversation: WorkerConversation, attemptId: string): {
         text: string;
         usage: Usage;
         stopReason: string;
     } | undefined;
     /** Legacy raw transcripts predate durable usage checkpoints; reconstruct their bounded cumulative baseline. */
-    initialUsage(conversation: WorkerConversation, checkpointUsage: AttemptUsageSnapshot | undefined): AttemptUsageSnapshot;
+    initialUsage(conversation: WorkerConversation, checkpointUsage: AttemptUsageSnapshot | undefined, attemptId: string): AttemptUsageSnapshot;
     /** Fail closed when the current owner profile no longer permits a persisted grant. */
     durableGrantIsStillPermitted(grant: ExecutionGrant, plan: WorkerExecutionPlan, selectedResources: readonly ResourcePointer[]): boolean;
 }

package/dist/core/delegation/worker-recovery-coordinator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"worker-recovery-coordinator.d.ts","sourceRoot":"","sources":["../../../src/core/delegation/worker-recovery-coordinator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,KAAK,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAG9D,OAAO,KAAK,EAAE,oBAAoB,EAAE,cAAc,EAAE,eAAe,EAAc,MAAM,+BAA+B,CAAC;AACvH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,KAAK,EAAE,2BAA2B,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE1F,MAAM,MAAM,4BAA4B,GAAG;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtG,MAAM,WAAW,gCAAgC;IAChD,SAAS,EAAE,eAAe,CAAC;IAC3B,SAAS,EAAE,IAAI,CAAC,uBAAuB,EAAE,SAAS,CAAC,CAAC;IACpD,wBAAwB,IAAI,IAAI,CAAC;IACjC,qBAAqB,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAChD,oBAAoB,CACnB,QAAQ,EAAE,OAAO,CAAC,2BAA2B,EAAE;QAAE,MAAM,EAAE,UAAU,CAAA;KAAE,CAAC,GACpE,4BAA4B,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED;;;;GAIG;AACH,qBAAa,yBAAyB;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmC;IAC3D,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,sBAAsB,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAA6B;IAE1E,YAAY,OAAO,EAAE,gCAAgC,EAEpD;IAED,6FAA6F;IAC7F,OAAO,IAAI,IAAI,CAqEd;IAED,wGAAwG;IACxG,gBAAgB,CAAC,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,CAAC,EAAE,MAAM,GAAG,uBAAuB,CAkBrG;IAED,kGAAkG;IAClG,4BAA4B,CAAC,YAAY,EAAE,kBAAkB,GAAG,IAAI,CA0BnE;IAED,uGAAuG;IACvG,2BAA2B,CAC1B,YAAY,EAAE,kBAAkB,GAC9B;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAahE;IAED,+GAA+G;IAC/G,YAAY,CACX,YAAY,EAAE,kBAAkB,EAChC,eAAe,EAAE,oBAAoB,GAAG,SAAS,GAC/C,oBAAoB,CAGtB;IAED,sFAAsF;IACtF,4BAA4B,CAC3B,KAAK,EAAE,cAAc,EACrB,IAAI,EAAE,mBAAmB,EACzB,iBAAiB,EAAE,SAAS,eAAe,EAAE,GAC3C,OAAO,CAqCT;CACD"}
+{"version":3,"file":"worker-recovery-coordinator.d.ts","sourceRoot":"","sources":["../../../src/core/delegation/worker-recovery-coordinator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,KAAK,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAG9D,OAAO,KAAK,EAAE,oBAAoB,EAAE,cAAc,EAAE,eAAe,EAAc,MAAM,+BAA+B,CAAC;AACvH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,KAAK,EAAE,2BAA2B,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAG1F,MAAM,MAAM,4BAA4B,GAAG;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtG,MAAM,MAAM,yBAAyB,GAClC;IAAE,SAAS,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC/E;IAAE,SAAS,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAUxC,MAAM,WAAW,gCAAgC;IAChD,SAAS,EAAE,eAAe,CAAC;IAC3B,SAAS,EAAE,IAAI,CAAC,uBAAuB,EAAE,SAAS,CAAC,GAClD,OAAO,CAAC,IAAI,CAAC,uBAAuB,EAAE,0BAA0B,CAAC,CAAC,CAAC;IACpE,wBAAwB,IAAI,IAAI,CAAC;IACjC,qBAAqB,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAChD,sBAAsB,CAAC,CAAC,OAAO,EAAE,SAAS,UAAU,EAAE,GAAG,IAAI,CAAC;IAC9D,oBAAoB,CACnB,QAAQ,EAAE,OAAO,CAAC,2BAA2B,EAAE;QAAE,MAAM,EAAE,UAAU,CAAA;KAAE,CAAC,GACpE,4BAA4B,CAAC;IAChC,8BAA8B,IAAI,IAAI,CAAC;IACvC,yBAAyB,IAAI,IAAI,CAAC;IAClC,kFAAkF;IAClF,UAAU,CAAC,IAAI,IAAI,CAAC;IACpB,GAAG,CAAC,IAAI,MAAM,CAAC;IACf,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAcD;;;;GAIG;AACH,qBAAa,yBAAyB;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmC;IAC3D,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,sBAAsB,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAA6B;IAC1E,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA2C;IACvE,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAA2B;IAEpE,YAAY,OAAO,EAAE,gCAAgC,EAQpD;IAED,6FAA6F;IAC7F,OAAO,IAAI,IAAI,CAyGd;IAED,mGAAmG;IACnG,oBAAoB,CAAC,IAAI,EAAE;QAC1B,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,uBAAuB,CAAC;QACjC,OAAO,EAAE;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAC;YAAC,YAAY,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC3E,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,yBAAyB,CAoC5B;IAED,6FAA6F;IAC7F,OAAO,IAAI,IAAI,CAMd;IAED,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAMxC;IAED,mGAAmG;IACnG,kBAAkB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAYhF;IAED,OAAO,CAAC,mBAAmB;IAqC3B,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,kBAAkB;IAqC1B,OAAO,CAAC,eAAe;IAOvB,OAAO,CAAC,GAAG;IAIX,wGAAwG;IACxG,gBAAgB,CAAC,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,CAAC,EAAE,MAAM,GAAG,uBAAuB,CAmBrG;IAED,kGAAkG;IAClG,4BAA4B,CAAC,YAAY,EAAE,kBAAkB,GAAG,IAAI,CA0BnE;IAED,uGAAuG;IACvG,2BAA2B,CAC1B,YAAY,EAAE,kBAAkB,EAChC,SAAS,EAAE,MAAM,GACf;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAahE;IAED,+GAA+G;IAC/G,YAAY,CACX,YAAY,EAAE,kBAAkB,EAChC,eAAe,EAAE,oBAAoB,GAAG,SAAS,EACjD,SAAS,EAAE,MAAM,GACf,oBAAoB,CAGtB;IAED,sFAAsF;IACtF,4BAA4B,CAC3B,KAAK,EAAE,cAAc,EACrB,IAAI,EAAE,mBAAmB,EACzB,iBAAiB,EAAE,SAAS,eAAe,EAAE,GAC3C,OAAO,CAqCT;CACD"}

package/dist/core/delegation/worker-recovery-coordinator.js

@@ -1,5 +1,12 @@
 import { isPathWithinScope } from "../autonomy/path-scope.js";
 import { reconcileAttemptUsage } from "../orchestration/attempt-usage.js";
+import { evaluateWorkerRetry } from "./worker-retry-policy.js";
+function restartResumableSuspension(attempt, newlySuspendedAttemptIds) {
+    return (newlySuspendedAttemptIds.has(attempt.attemptId) ||
+        attempt.reasonCode === "agent_process_recovered_after_owner_exit" ||
+        attempt.reasonCode === "agent_process_interrupted" ||
+        attempt.reasonCode?.startsWith("retry_scheduled:") === true);
+}
 /**
  * Owns restart-only worker state repair. It has no provider or tool execution authority: it
  * reconstructs bounded durable requests, requeues them through the owner scheduler, and supplies
@@ -10,17 +17,24 @@ export class WorkerRecoveryCoordinator {
         this.queueRecovered = false;
         this.recoveringDurableState = false;
         this.verificationRecoveryFailures = new Map();
+        this.retryTimers = new Map();
         this.options = options;
+        this.unsubscribeQueueCapacity = options.scheduler.onQueueCapacityAvailable?.(() => {
+            this.flushDueRetries();
+            // Mandatory verifier dispatches remain derivable from durable subject state even after the
+            // ordinary queue was fully recovered. Every released slot must replay that retained demand.
+            this.recover();
+        });
     }
-    /** Idempotently rebuild in-process queue state and replay only durable terminal handoffs. */
+    /** Idempotently rebuild in-process queues, terminal outboxes, and task-bearing mailboxes. */
     recover() {
         if (this.recoveringDurableState)
             return;
         this.recoveringDurableState = true;
-        const { lifecycle, scheduler } = this.options;
+        const { lifecycle } = this.options;
         try {
             if (!this.queueRecovered) {
-                const suspendedAttemptIds = new Set(lifecycle.suspendBoundInProcessAttemptsForRestart());
+                const newlySuspendedAttemptIds = new Set(lifecycle.suspendBoundInProcessAttemptsForRestart());
                 try {
                     this.options.recoverWriteReservations();
                 }
@@ -29,10 +43,13 @@ export class WorkerRecoveryCoordinator {
                 }
                 const queued = lifecycle.recoverQueued();
                 const snapshot = lifecycle.getTaskRuntimeSnapshot();
-                for (const attemptId of suspendedAttemptIds) {
-                    const attempt = snapshot.attempts[attemptId];
-                    if (!attempt || attempt.dispatch.executionKind === "managed-process")
+                for (const attempt of Object.values(snapshot.attempts)) {
+                    if (attempt.status !== "suspended" ||
+                        !attempt.agentId ||
+                        attempt.dispatch.executionKind === "managed-process" ||
+                        !restartResumableSuspension(attempt, newlySuspendedAttemptIds)) {
                         continue;
+                    }
                     const record = lifecycle.getRecord(attempt.taskId);
                     const task = snapshot.tasks[attempt.taskId]?.task;
                     if (!record || !task)
@@ -43,10 +60,23 @@ export class WorkerRecoveryCoordinator {
                         ...(task.verificationOfTaskId ? { verificationOfTaskId: task.verificationOfTaskId } : {}),
                     });
                 }
+                let recoveredAll = true;
                 for (const { attempt, record, verificationOfTaskId } of queued) {
-                    scheduler.enqueue(record, this.recoveredRequest(attempt, verificationOfTaskId), true, verificationOfTaskId !== undefined);
+                    let retained;
+                    try {
+                        retained = this.enqueueOrDeferRetry(record, attempt, this.recoveredRequest(attempt, verificationOfTaskId), verificationOfTaskId !== undefined);
+                    }
+                    catch (error) {
+                        recoveredAll = false;
+                        this.options.warn(`Failed to recover queued worker ${record.laneId}; retaining durable dispatch: ${error instanceof Error ? error.message : String(error)}`);
+                        continue;
+                    }
+                    if (retained)
+                        continue;
+                    recoveredAll = false;
+                    break;
                 }
-                this.queueRecovered = true;
+                this.queueRecovered = recoveredAll;
             }
             for (const recovery of lifecycle.getPendingVerificationRecoveries()) {
                 if (recovery.action === "reconcile") {
@@ -59,7 +89,19 @@ export class WorkerRecoveryCoordinator {
                     }
                     continue;
                 }
-                const started = this.options.dispatchVerification(recovery);
+                let started;
+                try {
+                    started = this.options.dispatchVerification(recovery);
+                }
+                catch (error) {
+                    const reason = error instanceof Error ? error.message : String(error);
+                    const failureKey = `dispatch_threw:${reason}`;
+                    if (this.verificationRecoveryFailures.get(recovery.subjectTaskId) !== failureKey) {
+                        this.verificationRecoveryFailures.set(recovery.subjectTaskId, failureKey);
+                        this.options.warn(`Recovered verification for ${recovery.subjectTaskId} threw during dispatch: ${reason}`);
+                    }
+                    continue;
+                }
                 if (started.started) {
                     this.verificationRecoveryFailures.delete(recovery.subjectTaskId);
                     continue;
@@ -69,22 +111,186 @@ export class WorkerRecoveryCoordinator {
                 this.verificationRecoveryFailures.set(recovery.subjectTaskId, started.skipReason);
                 this.options.warn(`Recovered verification for ${recovery.subjectTaskId} did not start: ${started.skipReason}`);
             }
-            for (const notification of lifecycle.getPendingTerminalNotifications()) {
-                this.options.publishTerminalRecord(notification.record);
+            const terminalRecords = lifecycle.getPendingTerminalNotifications().map((notification) => notification.record);
+            if (terminalRecords.length > 0) {
+                if (this.options.publishTerminalRecords)
+                    this.options.publishTerminalRecords(terminalRecords);
+                else
+                    for (const record of terminalRecords)
+                        this.options.publishTerminalRecord(record);
             }
+            this.options.recoverSessionRootReplies();
+            this.options.recoverTaskBearingMailboxTurns();
         }
         finally {
             this.recoveringDurableState = false;
         }
     }
+    /** Evaluate, persist, and arm one retry through the same durable path used by restart recovery. */
+    scheduleAttemptRetry(args) {
+        const attempt = this.options.lifecycle.getActiveAttempt(args.laneId);
+        const record = this.options.lifecycle.getRecord(args.laneId);
+        if (!attempt || !record)
+            return { scheduled: false, reason: "attempt_missing" };
+        const retriesUsed = attempt.retry?.retriesUsed ?? 0;
+        const decision = evaluateWorkerRetry({
+            laneStatus: args.outcome.laneStatus,
+            reasonCode: args.outcome.reasonCode,
+            ...(args.outcome.reasonDetail ? { reasonDetail: args.outcome.reasonDetail } : {}),
+            provider: args.provider,
+            retriesUsed,
+            ...(args.maxAttempts !== undefined ? { maxAttempts: args.maxAttempts } : {}),
+        });
+        if (!decision.retry)
+            return { scheduled: false, reason: decision.reason };
+        const nextRetriesUsed = retriesUsed + 1;
+        const notBefore = new Date(this.now() + decision.delayMs).toISOString();
+        let suspended;
+        try {
+            suspended = this.options.lifecycle.scheduleAgentRetry({
+                laneId: args.laneId,
+                agentId: args.agentId,
+                ownerId: args.ownerId,
+                reasonCode: `retry_scheduled:${decision.reason}`,
+                retry: { retriesUsed: nextRetriesUsed, notBefore },
+            });
+        }
+        catch (error) {
+            this.options.warn(`Worker ${args.laneId} retry suspension failed; terminalizing instead: ${error instanceof Error ? error.message : String(error)}`);
+            return { scheduled: false, reason: "retry_suspension_failed" };
+        }
+        this.options.warn(`Worker ${args.laneId} failed (${decision.reason}); retrying from the persisted transcript in ${Math.ceil(decision.delayMs / 1000)}s (attempt ${nextRetriesUsed + 1}).`);
+        this.enqueueOrDeferRetry(record, suspended, args.request, args.request.verificationOfTaskId !== undefined);
+        return { scheduled: true, record, retriesUsed: nextRetriesUsed, notBefore };
+    }
+    /** Cancel only process-local alarms; the retained deadline remains authoritative on disk. */
+    dispose() {
+        this.unsubscribeQueueCapacity?.();
+        for (const entry of this.retryTimers.values()) {
+            if (entry.timer)
+                clearTimeout(entry.timer);
+        }
+        this.retryTimers.clear();
+    }
+    clearScheduledRetry(laneId) {
+        for (const [attemptId, entry] of this.retryTimers) {
+            if (entry.laneId !== laneId)
+                continue;
+            if (entry.timer)
+                clearTimeout(entry.timer);
+            this.retryTimers.delete(attemptId);
+        }
+    }
+    /** Keep an externally requested wake queued while the durable retry deadline is still retained. */
+    deferRetryIfNeeded(record, request) {
+        const attempt = this.options.lifecycle.getActiveAttempt(record.laneId);
+        if (!attempt ||
+            attempt.status !== "suspended" ||
+            !attempt.retry ||
+            Date.parse(attempt.retry.notBefore) <= this.now()) {
+            return false;
+        }
+        this.enqueueOrDeferRetry(record, attempt, request, request.verificationOfTaskId !== undefined);
+        return true;
+    }
+    enqueueOrDeferRetry(record, attempt, request, priority) {
+        const retry = attempt.retry;
+        if (!retry) {
+            try {
+                this.options.scheduler.enqueue(record, request, true, priority);
+                return true;
+            }
+            catch (error) {
+                if (error instanceof Error && error.message === "worker_dispatch_queue_full")
+                    return false;
+                throw error;
+            }
+        }
+        const existing = this.retryTimers.get(attempt.attemptId);
+        if (existing?.notBefore === retry.notBefore)
+            return true;
+        if (existing?.timer)
+            clearTimeout(existing.timer);
+        const entry = {
+            laneId: record.laneId,
+            notBefore: retry.notBefore,
+            request,
+            priority,
+        };
+        this.retryTimers.set(attempt.attemptId, entry);
+        const remainingMs = Date.parse(retry.notBefore) - this.now();
+        if (remainingMs <= 0) {
+            this.tryEnqueueDueRetry(attempt.attemptId, entry);
+            return true;
+        }
+        const timer = setTimeout(() => this.onRetryTimer(attempt.attemptId), Math.min(remainingMs, 2_147_000_000));
+        if (typeof timer === "object" && "unref" in timer)
+            timer.unref();
+        entry.timer = timer;
+        return true;
+    }
+    onRetryTimer(attemptId) {
+        const entry = this.retryTimers.get(attemptId);
+        if (!entry)
+            return;
+        delete entry.timer;
+        this.tryEnqueueDueRetry(attemptId, entry);
+    }
+    tryEnqueueDueRetry(attemptId, entry) {
+        const attempt = this.options.lifecycle.getActiveAttempt(entry.laneId);
+        if (!attempt ||
+            attempt.attemptId !== attemptId ||
+            attempt.status !== "suspended" ||
+            attempt.retry?.notBefore !== entry.notBefore) {
+            this.retryTimers.delete(attemptId);
+            return "stale";
+        }
+        const record = this.options.lifecycle.getRecord(entry.laneId);
+        if (!record) {
+            this.retryTimers.delete(attemptId);
+            return "stale";
+        }
+        const remainingMs = Date.parse(entry.notBefore) - this.now();
+        if (remainingMs > 0) {
+            const timer = setTimeout(() => this.onRetryTimer(attemptId), Math.min(remainingMs, 2_147_000_000));
+            if (typeof timer === "object" && "unref" in timer)
+                timer.unref();
+            entry.timer = timer;
+            return "stale";
+        }
+        try {
+            this.options.scheduler.enqueue(record, entry.request, true, entry.priority);
+        }
+        catch (error) {
+            if (error instanceof Error && error.message === "worker_dispatch_queue_full")
+                return "full";
+            this.options.warn(`Worker ${entry.laneId} retry enqueue failed; retaining the durable retry: ${error instanceof Error ? error.message : String(error)}`);
+            return "full";
+        }
+        this.retryTimers.delete(attemptId);
+        this.options.retryReady?.();
+        return "enqueued";
+    }
+    flushDueRetries() {
+        for (const [attemptId, entry] of this.retryTimers) {
+            if (entry.timer || Date.parse(entry.notBefore) > this.now())
+                continue;
+            if (this.tryEnqueueDueRetry(attemptId, entry) === "full")
+                break;
+        }
+    }
+    now() {
+        return this.options.now?.() ?? Date.now();
+    }
     /** Rebuild task metadata from its durable dispatch; no current profile/model selection is consulted. */
     recoveredRequest(attempt, verificationOfTaskId) {
         const task = this.options.lifecycle.getTask(attempt.taskId)?.task;
+        const durableVerificationOfTaskId = verificationOfTaskId ?? task?.verificationOfTaskId;
         return {
             instructions: attempt.dispatch.instructions,
             profileId: attempt.dispatch.profileId,
             ...(attempt.dispatch.parentAgentId ? { parentAgentId: attempt.dispatch.parentAgentId } : {}),
-            ...(verificationOfTaskId ? { verificationOfTaskId } : {}),
+            ...(durableVerificationOfTaskId ? { verificationOfTaskId: durableVerificationOfTaskId } : {}),
             ...(task
                 ? {
                     taskContext: {
@@ -128,8 +334,8 @@ export class WorkerRecoveryCoordinator {
         }
     }
     /** Return an already-persisted final assistant response so recovery cannot duplicate provider work. */
-    recoveredTerminalCompletion(conversation) {
-        const last = conversation.getProviderMessages().at(-1);
+    recoveredTerminalCompletion(conversation, attemptId) {
+        const last = conversation.getLastAttemptMessage(attemptId);
         if (!last || last.role !== "assistant" || last.stopReason === "error" || last.stopReason === "aborted") {
             return undefined;
         }
@@ -139,11 +345,11 @@ export class WorkerRecoveryCoordinator {
             .filter((content) => content.type === "text")
             .map((content) => content.text)
             .join("");
-        return text ? { text, usage: last.usage, stopReason: last.stopReason } : undefined;
+        return { text, usage: last.usage, stopReason: last.stopReason };
     }
     /** Legacy raw transcripts predate durable usage checkpoints; reconstruct their bounded cumulative baseline. */
-    initialUsage(conversation, checkpointUsage) {
-        const transcriptUsage = conversation.getRawTranscriptUsage();
+    initialUsage(conversation, checkpointUsage, attemptId) {
+        const transcriptUsage = conversation.getRawTranscriptUsage(attemptId);
         return checkpointUsage ? reconcileAttemptUsage(checkpointUsage, transcriptUsage) : transcriptUsage;
     }
     /** Fail closed when the current owner profile no longer permits a persisted grant. */