@parall/agent-core 1.42.1 → 1.44.0

package/dist/gateway-base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gateway-base.d.ts","sourceRoot":"","sources":["../src/gateway-base.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiC,YAAY,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACpF,OAAO,KAAK,EACV,qBAAqB,EAkBtB,MAAM,aAAa,CAAC;AAOrB,OAAO,EAGL,KAAK,eAAe,EAGpB,KAAK,aAAa,EAEnB,MAAM,uBAAuB,CAAC;AAqC/B,OAAO,KAAK,EAAiB,WAAW,EAAE,MAAM,YAAY,CAAC;AAwB7D,MAAM,MAAM,mBAAmB,GAAG;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IACtC,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7F,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAC/B;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,WAAW,CAAA;CAAE,GAC1C;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAClB;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC;AAExB,MAAM,MAAM,oBAAoB,GAAG;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,YAAY,CAAC;IACrB,EAAE,EAAE,QAAQ,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE;QACN,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,eAAe,EAAE,eAAe,CAAC;IACjC,GAAG,CAAC,EAAE,aAAa,CAAC;IACpB,kGAAkG;IAClG,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAI3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,yBAAyB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACvE,0FAA0F;IAC1F,wBAAwB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACtE;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,qBAAqB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACvE,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE;QACvB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,EAAE,EAAE,QAAQ,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;KACpB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3B,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE;QACzB,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,EAAE,MAAM,CAAC;QACzB,cAAc,EAAE,MAAM,CAAC;KACxB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAChD,YAAY,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACnE,cAAc,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC/D,CAAC;AAkBF,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAKnF;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAK/E;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAKnF;AAsFD,qBAAa,kBAAkB;IAiDjB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAhDjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IAGrD,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAA6B;IACxE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAqB;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsC;IACjE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAK5B;IAEF,OAAO,CAAC,SAAS,CAAM;IACvB,OAAO,CAAC,eAAe,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA0C;IAC1E,OAAO,CAAC,cAAc,CAA+C;IAErE,OAAO,CAAC,eAAe,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAS;IAMzB,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,kBAAkB,CAAK;IAC/B,OAAO,CAAC,cAAc,CAAyB;IAC/C,OAAO,CAAC,0BAA0B,CAAuB;IAEzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAa;IAGzC,OAAO,CAAC,cAAc,CAAS;IAI/B,OAAO,CAAC,mBAAmB,CAAC,CAAS;IAErC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAQ;IAIhD,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAC9C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;gBAEjB,IAAI,EAAE,oBAAoB;IAmBjD,GAAG,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IA8PlD,OAAO,CAAC,eAAe;YAaT,oBAAoB;IASlC,6EAA6E;IAC7E,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,aAAa;IAQrB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAaxB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,oBAAoB;IAW5B,OAAO,CAAC,gBAAgB;IAexB,OAAO,CAAC,wBAAwB;IA8BhC,OAAO,CAAC,oBAAoB;IAsB5B,OAAO,CAAC,qBAAqB;YAQf,eAAe;YAmEf,iBAAiB;IA+H/B,OAAO,CAAC,gBAAgB;IASxB,OAAO,CAAC,uBAAuB;IAW/B,OAAO,CAAC,0BAA0B;IAWlC,kEAAkE;IAClE,OAAO,CAAC,eAAe;IASvB,kEAAkE;IAClE,OAAO,CAAC,eAAe;YAQT,gCAAgC;YAMhC,kBAAkB;YA6ElB,WAAW;IA0SzB,OAAO,CAAC,SAAS;YA6CH,gBAAgB;YA8JhB,eAAe;YAuIf,kBAAkB;YA6LlB,kBAAkB;YAkBlB,4BAA4B;YAwF5B,aAAa;YAmCb,oBAAoB;YAapB,2BAA2B;IAezC,OAAO,CAAC,sBAAsB;YAQhB,oBAAoB;YA0CpB,kBAAkB;YAwBlB,iBAAiB;YAqFjB,iBAAiB;IA2E/B;;;;;;;OAOG;YACW,0BAA0B;YA2B1B,kBAAkB;YAsClB,gCAAgC;YA0BhC,4BAA4B;YAuF5B,wBAAwB;YA2CxB,6BAA6B;YAuD7B,mBAAmB;IA8LjC,OAAO,CAAC,mBAAmB;IA8B3B,OAAO,CAAC,SAAS;YAQH,WAAW;IAkEzB,OAAO,CAAC,YAAY;YAiBN,QAAQ;CAsCvB"}
+{"version":3,"file":"gateway-base.d.ts","sourceRoot":"","sources":["../src/gateway-base.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiC,YAAY,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACpF,OAAO,KAAK,EACV,qBAAqB,EAkBtB,MAAM,aAAa,CAAC;AAOrB,OAAO,EAGL,KAAK,eAAe,EAGpB,KAAK,aAAa,EAEnB,MAAM,uBAAuB,CAAC;AAqC/B,OAAO,KAAK,EAAiB,WAAW,EAAE,MAAM,YAAY,CAAC;AAwB7D,MAAM,MAAM,mBAAmB,GAAG;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IACtC,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7F,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAC/B;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,WAAW,CAAA;CAAE,GAC1C;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAClB;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC;AAExB,MAAM,MAAM,oBAAoB,GAAG;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,YAAY,CAAC;IACrB,EAAE,EAAE,QAAQ,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE;QACN,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,eAAe,EAAE,eAAe,CAAC;IACjC,GAAG,CAAC,EAAE,aAAa,CAAC;IACpB,kGAAkG;IAClG,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAI3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,yBAAyB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACvE,0FAA0F;IAC1F,wBAAwB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACtE;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC;IACnC,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,qBAAqB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACvE,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE;QACvB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,EAAE,EAAE,QAAQ,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;KACpB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3B,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE;QACzB,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,EAAE,MAAM,CAAC;QACzB,cAAc,EAAE,MAAM,CAAC;KACxB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAChD,YAAY,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACnE,cAAc,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC/D,CAAC;AAkBF,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAKnF;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAK/E;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAKnF;AAsFD,qBAAa,kBAAkB;IAoDjB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAnDjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IAGrD,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAA6B;IACxE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAqB;IAGxD,QAAQ,CAAC,mBAAmB;kBAA+B,MAAM;eAAS,MAAM;OAAM;IACtF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsC;IACjE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAK5B;IAEF,OAAO,CAAC,SAAS,CAAM;IACvB,OAAO,CAAC,eAAe,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA0C;IAC1E,OAAO,CAAC,cAAc,CAA+C;IAErE,OAAO,CAAC,eAAe,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAS;IAMzB,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,kBAAkB,CAAK;IAC/B,OAAO,CAAC,cAAc,CAAyB;IAC/C,OAAO,CAAC,0BAA0B,CAAuB;IAEzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAa;IAGzC,OAAO,CAAC,cAAc,CAAS;IAI/B,OAAO,CAAC,mBAAmB,CAAC,CAAS;IAErC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAQ;IAIhD,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAC9C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;gBAEjB,IAAI,EAAE,oBAAoB;IAmBjD,GAAG,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAuQlD,OAAO,CAAC,eAAe;IAavB;;;;OAIG;IACH,OAAO,CAAC,kBAAkB,CAA6B;IAEvD,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAKjE;;;;;;OAMG;IACH,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAM9C,oEAAoE;IACpE,OAAO,CAAC,iBAAiB,CAAqB;IAE9C;;;;;;OAMG;IACH,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;YAI/B,oBAAoB;IASlC,6EAA6E;IAC7E,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,aAAa;IAQrB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAaxB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,oBAAoB;IAc5B,OAAO,CAAC,gBAAgB;IAgBxB,OAAO,CAAC,wBAAwB;IA8BhC,OAAO,CAAC,oBAAoB;IAsB5B,OAAO,CAAC,qBAAqB;YAQf,eAAe;YAmEf,iBAAiB;IA+H/B,OAAO,CAAC,gBAAgB;IASxB,OAAO,CAAC,uBAAuB;IAW/B,OAAO,CAAC,0BAA0B;IAWlC,kEAAkE;IAClE,OAAO,CAAC,eAAe;IASvB,kEAAkE;IAClE,OAAO,CAAC,eAAe;YAQT,gCAAgC;YAMhC,kBAAkB;YA6ElB,WAAW;IA8SzB,OAAO,CAAC,SAAS;YA6CH,gBAAgB;YAkLhB,eAAe;YA8If,kBAAkB;YA2MlB,kBAAkB;YAkBlB,4BAA4B;YAwF5B,aAAa;YAmCb,oBAAoB;YAapB,2BAA2B;IAezC,OAAO,CAAC,sBAAsB;YAQhB,oBAAoB;YA0CpB,kBAAkB;YAwBlB,iBAAiB;YAqFjB,iBAAiB;IA2E/B;;;;;;;OAOG;YACW,0BAA0B;YA2B1B,kBAAkB;YAsClB,gCAAgC;YA0BhC,4BAA4B;YAqG5B,wBAAwB;YA2CxB,6BAA6B;YAuD7B,mBAAmB;IA8LjC,OAAO,CAAC,mBAAmB;IA8B3B,OAAO,CAAC,SAAS;YAQH,WAAW;IAkEzB,OAAO,CAAC,YAAY;YAiBN,QAAQ;CAsCvB"}

package/dist/gateway-base.js

@@ -125,6 +125,9 @@ export class ParallAgentGateway {
     // (stable mapping; avoids one connection fetch per inbound message).
     channelConnectionProviders = new Map();
     dispatchedMessages = new Set();
+    // Per-WorkItem failure backoff for typed dispatch consumption — see
+    // LaneFlowHost.typedRedriveBackoff in gateway-lane-flow.ts.
+    typedRedriveBackoff = new Map();
     forkStates = new Map();
     dispatchState = {
         mainDispatching: false,
@@ -264,7 +267,14 @@ export class ParallAgentGateway {
                         source_type: 'task_activity',
                         source_id: data.id,
                     })
-                        .then(() => undefined, () => undefined);
+                        .then(() => true, (err) => {
+                        // Same contract as ackDispatchEvent: a failed ack is a
+                        // failed consume (arms backoff) and must free the hot-path
+                        // dedupe so the re-drive isn't rejected by this pod forever.
+                        this.dispatchedTasks.delete(`${data.id}:${data.updated_at}`);
+                        this.opts.log?.warn(`dispatch ack failed for task ${data.id}, releasing for re-drive: ${String(err)}`);
+                        return false;
+                    });
                 });
             }
             catch (err) {
@@ -400,6 +410,44 @@ export class ParallAgentGateway {
         this.dispatchedMessages.add(id);
         return true;
     }
+    /**
+     * Lane currently being dispatched per session — lets external activity
+     * signals renew exactly the caller's lane (renewing all lanes would keep
+     * an unrelated stalled fork's lane leased forever).
+     */
+    sessionActiveLanes = new Map();
+    noteSessionLane(sessionKey, laneKey) {
+        if (laneKey == null)
+            this.sessionActiveLanes.delete(sessionKey);
+        else
+            this.sessionActiveLanes.set(sessionKey, laneKey);
+    }
+    /**
+     * External runtime-activity signal for adapters whose tool activity does
+     * not flow through the RuntimeEvent stream (openclaw hooks call this from
+     * the tool-call lifecycle): renews the session's OWN active ledger lane so
+     * a long tool call cannot outlive the lease and get dethroned mid-turn.
+     * No-op without an active ledger lane for the session.
+     */
+    touchRuntimeActivity(sessionKey) {
+        if (this.ledgerDisabled)
+            return;
+        const laneKey = this.sessionActiveLanes.get(sessionKey);
+        if (laneKey)
+            this.laneLedger?.renewByKey(laneKey);
+    }
+    /** Sessions whose in-flight turn surfaced a runtime error event. */
+    turnErrorSessions = new Set();
+    /**
+     * Consume (read-and-clear) the error marker for sessionKey's last turn.
+     * Feeds complete's turn_outcome so an error turn's lane members are
+     * released for retry instead of no_action-swept (design §3). Consuming
+     * (rather than peeking) keeps one-shot fork session keys from accumulating
+     * in the set forever.
+     */
+    consumeTurnError(sessionKey) {
+        return this.turnErrorSessions.delete(sessionKey);
+    }
     async emitDispatchReceived(event) {
         const sourceType = event.ackSourceType ?? (event.type === 'task' ? 'task_activity' : 'message');
         const sourceId = event.ackSourceId ?? event.messageId;
@@ -447,14 +495,18 @@ export class ParallAgentGateway {
     }
     // Typed completion must wait until the administrative ack has either
     // committed or failed. Errors stay best-effort: a failed ack leaves the row
-    // received, so Complete releases and re-drives it safely.
+    // received, so Complete releases and re-drives it safely. The boolean
+    // outcome feeds the typed-consume backoff — an ack that failed must count
+    // as a failed consume, or an ack outage would clear the backoff entry and
+    // let the release re-drive spin at wire speed.
     ackDispatchEvent(dispatchEventId, onFailure) {
-        return this.opts.client.ackDispatchByID(this.opts.config.org_id, dispatchEventId).then(() => undefined, (err) => {
+        return this.opts.client.ackDispatchByID(this.opts.config.org_id, dispatchEventId).then(() => true, (err) => {
             // Complete will return the still-received item to pending and publish
             // an immediate hint. Free its hot-path claim first, otherwise that
             // same-process re-drive is rejected forever by the local dedupe set.
             onFailure?.();
             this.opts.log?.warn(`dispatch ack failed for ${dispatchEventId}, releasing for re-drive: ${String(err)}`);
+            return false;
         });
     }
     clearTypedDispatchDedupe(item) {
@@ -800,6 +852,7 @@ export class ParallAgentGateway {
             this.pendingRestartNotification = null;
         }
         resetDispatchMetrics(sessionKey);
+        this.turnErrorSessions.delete(sessionKey);
         return runWithSessionKey(sessionKey, async () => {
             let dispatchSpan = null;
             setSessionChatId(sessionKey, event.targetId);
@@ -936,6 +989,9 @@ export class ParallAgentGateway {
                         pendingSendCallIds.delete(runtimeEvent.callId)) {
                         recordMessageSend(sessionKey, !runtimeEvent.error);
                     }
+                    if (runtimeEvent.type === 'error') {
+                        this.turnErrorSessions.add(sessionKey);
+                    }
                     await this.createRuntimeStep(binding.agentSessionId, event, runtimeEvent, stepIdFilePath, contextFilePath, laneContextFilePath);
                 }
                 if (!binding) {
@@ -1108,7 +1164,12 @@ export class ParallAgentGateway {
                             body: buildForkScopePrefix(last) + buildEventBody(last),
                             earlier,
                             captureText: batchText,
-                            hasMoreLocal: () => fork.queue.length > 0,
+                            // Per-LANE residue check (parity with the main-buffer path):
+                            // the fork queue can hold several lanes (channel + thread of
+                            // the same chat). A whole-queue check would defer THIS lane's
+                            // complete behind another lane's items and never revisit it —
+                            // its members would sit received until lease expiry.
+                            hasMoreLocal: () => fork.queue.some((it) => this.dispatchGroupKey(it.event) === this.dispatchGroupKey(last)),
                         });
                         if (outcome === 'foreign') {
                             // Another pod owns the lane — the events stay pending server-side.
@@ -1116,6 +1177,15 @@ export class ParallAgentGateway {
                                 item.resolve(false);
                             break;
                         }
+                        if (outcome === 'failed') {
+                            // Error turn: complete(error) already released the members for
+                            // redelivery. Do NOT push them to processedEvents — the redrive
+                            // must not arrive wearing an "already handled" prefix. Keep
+                            // draining; the released work rejoins the next claim.
+                            for (const item of items)
+                                item.resolve(false);
+                            continue;
+                        }
                         dispatched = outcome === 'dispatched';
                     }
                     else {
@@ -1154,6 +1224,10 @@ export class ParallAgentGateway {
             }
         }
         finally {
+            // One-shot fork keys are never dispatched again — drop any error marker
+            // the legacy (non-ledger) path left unconsumed, or the set grows with
+            // every failed ephemeral fork.
+            this.turnErrorSessions.delete(fork.fork.sessionKey);
             if (fork.deadlineTimer) {
                 clearTimeout(fork.deadlineTimer);
                 fork.deadlineTimer = null;
@@ -1281,6 +1355,13 @@ export class ParallAgentGateway {
                         this.dispatchState.pendingForkResults.unshift(...pendingFork);
                         continue;
                     }
+                    if (outcome === 'failed') {
+                        // Error turn settled with complete(error) — members released for
+                        // redelivery. The fork results were not consumed by the failed
+                        // turn; keep them for the next real dispatch.
+                        this.dispatchState.pendingForkResults.unshift(...pendingFork);
+                        continue;
+                    }
                     // Dispatched — resolution happened server-side (reply cover or
                     // no_action sweep); no legacy acks.
                     continue;
@@ -1424,9 +1505,16 @@ export class ParallAgentGateway {
                     // fold leaves the event buffered — the drain claims it as its own
                     // turn. Injection requires an exact lane match (same chat AND same
                     // thread) — a thread message never rides a channel turn.
+                    // The adapter-capability check comes BEFORE the fold: on a
+                    // buffer-only adapter (openclaw — no enqueueDuringDispatch) a
+                    // folded-but-never-injected member would be broad-covered by the
+                    // current turn's reply without the model ever seeing it. Leaving
+                    // the event un-folded keeps it buffered; the drain claims it as
+                    // its own turn and folds it there.
                     if (this.mainCurrentGroupKey === this.dispatchGroupKey(event) &&
+                        this.opts.dispatchAdapter.enqueueDuringDispatch != null &&
                         (await this.laneLedger?.steerLive(event)) &&
-                        (await this.opts.dispatchAdapter.enqueueDuringDispatch?.(this.opts.runtimeKey, buildEventBody(event)))) {
+                        (await this.opts.dispatchAdapter.enqueueDuringDispatch(this.opts.runtimeKey, buildEventBody(event)))) {
                         this.opts.log?.info(`steer folded+injected for ${event.messageId} (will drain for bookkeeping)`);
                     }
                 }
@@ -1460,13 +1548,20 @@ export class ParallAgentGateway {
                     this.dispatchState.mainBuffer.push(event);
                     return false;
                 }
-                try {
-                    await this.emitDispatchReceived(event);
-                }
-                catch (err) {
-                    this.opts.log?.warn?.(`mark-received failed for fork dispatch, leaving unacked for retry: ${String(err)}`);
-                    this.dispatchState.mainBuffer.push(event);
-                    return false;
+                // Ledger-managed events must never touch the legacy received surface
+                // — the fork's lane claim marks them received. A mark-received here
+                // outruns the claim, strands the row ownerless, and the chat goes
+                // silent (the 0713 black hole; dispatch-convergence-design.md §6).
+                // This was the only unguarded call site of the three.
+                if (!this.usesLaneLedger(event)) {
+                    try {
+                        await this.emitDispatchReceived(event);
+                    }
+                    catch (err) {
+                        this.opts.log?.warn?.(`mark-received failed for fork dispatch, leaving unacked for retry: ${String(err)}`);
+                        this.dispatchState.mainBuffer.push(event);
+                        return false;
+                    }
                 }
                 const fork = await this.opts.dispatchAdapter.forkSession({
                     sessionKey: this.opts.runtimeKey,
@@ -1997,6 +2092,18 @@ export class ParallAgentGateway {
                 provider = undefined; // label degrades; reply hint still names the clip generically
             }
         }
+        // The reply hint routes on the live capability grant: `<provider>-cli`
+        // present → the vendor CLI is on PATH (broker shim) and is THE reply
+        // path; absent → outbound is disabled for this org (flag/connection off)
+        // and the hint must say so instead of pointing at a retired clip. The
+        // provider label lookup above is best-effort/cosmetic — when it fails,
+        // ANY granted `*-cli` capability keeps the hint on the CLI path: a
+        // transient metadata miss must not flip an actively granted agent's
+        // hint to "outbound disabled" and strand a valid external message.
+        const keys = this.opts.getCapabilityKeys?.() ?? [];
+        const cliCapable = provider
+            ? keys.includes(`${provider}-cli`)
+            : keys.some((k) => k.endsWith('-cli'));
         const event = {
             type: 'channel_message',
             targetId: conv.id,
@@ -2011,6 +2118,7 @@ export class ParallAgentGateway {
             channelConversationType: conv.conversation_type || undefined,
             channelExternalConversationId: conv.external_conversation_id,
             channelExternalMessageId: msg.external_message_id,
+            channelCliCapable: cliCapable,
             ackSourceType: 'channel_message',
             ackSourceId: msg.id,
         };

package/dist/gateway-lane-flow.d.ts

@@ -15,6 +15,18 @@ export interface LaneFlowHost {
     ledgerDisabled: boolean;
     shuttingDown: boolean;
     dispatchedMessages: Set<string>;
+    /**
+     * Per-WorkItem failure backoff for typed dispatch consumption. A consume
+     * that ends without an ack re-arms the entry; the next attempt for the
+     * same WorkItem is delayed (not skipped — a skipped attempt would strand
+     * the pending row until reconnect catch-up) so a claim→fail→complete
+     * tight loop is throttled to exponential intervals instead of spinning at
+     * wire speed against the server's immediate re-drive (2026-07-11 OOM).
+     */
+    typedRedriveBackoff: Map<string, {
+        failures: number;
+        until: number;
+    }>;
     opts: {
         client: ParallClient;
         log?: GatewayLogger;
@@ -27,6 +39,8 @@ export interface LaneFlowHost {
     disableLedger(reason: string): void;
     usesLaneLedger(event: ParallEvent): boolean;
     emitDispatchReceived(event: ParallEvent): Promise<void>;
+    consumeTurnError(sessionKey: string): boolean;
+    noteSessionLane(sessionKey: string, laneKey: string | null): void;
     runDispatch(event: ParallEvent, sessionKey: string, bodyForAgent: string, earlierEvents?: ParallEvent[], captureText?: string[]): Promise<boolean>;
     tryClaimMessage(id: string): boolean;
     buildMessageDispatchDecision(chatId: string, message: DispatchableMessage): Promise<MessageDispatchDecision>;
@@ -45,19 +59,26 @@ export declare function dispatchLaneGroup(host: LaneFlowHost, opts: {
     earlier: ParallEvent[];
     captureText?: string[];
     hasMoreLocal: () => boolean;
-}): Promise<'dispatched' | 'foreign' | 'shutdown'>;
+}): Promise<'dispatched' | 'foreign' | 'shutdown' | 'failed'>;
 /**
  * Consume one typed dispatch (task/comment/schedule/trigger/approval) under
  * its typed-lane occupancy guard: claim the dsp:<id> lane (skip when another
  * pod holds it or the WorkItem is already resolved), run the handler, ack on
  * success (the doc's option (b): notification delivered, tracked elsewhere),
  * then release the lane. Legacy run+ack flow when the ledger is unavailable.
+ *
+ * Repeated failures back off: a consume that ends un-acked re-arms the
+ * WorkItem's backoff entry, and the next attempt sleeps out the remaining
+ * window before claiming. Without this, complete's release re-drives the
+ * item instantly and a persistently-failing consume (e.g. buffered behind a
+ * saturated fork pool) spins at wire speed — the client half of the
+ * 2026-07-11 poison loop (the server half is the redrive budget).
  */
 export declare function consumeTypedDispatch(host: LaneFlowHost, ref: {
     dispatchEventId?: string;
     sourceType?: string;
     sourceId?: string;
-}, run: (dispatchEventId?: string) => Promise<boolean>, ack: (dispatchEventId?: string) => void | Promise<void>): Promise<void>;
+}, run: (dispatchEventId?: string) => Promise<boolean>, ack: (dispatchEventId?: string) => boolean | void | Promise<boolean | void>): Promise<void>;
 /**
  * Shared consumption of a message WorkItem referenced by id — the ONE
  * protocol for dispatch catch-up pages and post-complete re-drive hints

package/dist/gateway-lane-flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gateway-lane-flow.d.ts","sourceRoot":"","sources":["../src/gateway-lane-flow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC5E,OAAO,KAAK,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAEtF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;GAKG;AAEH,0EAA0E;AAC1E,MAAM,WAAW,YAAY;IAC3B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,cAAc,EAAE,OAAO,CAAC;IACxB,YAAY,EAAE,OAAO,CAAC;IACtB,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE;QACJ,MAAM,EAAE,YAAY,CAAC;QACrB,GAAG,CAAC,EAAE,aAAa,CAAC;QACpB,MAAM,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QAC3B,eAAe,EAAE,eAAe,CAAC;QACjC,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,cAAc,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC;IAC5C,oBAAoB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,WAAW,CACT,KAAK,EAAE,WAAW,EAClB,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,aAAa,CAAC,EAAE,WAAW,EAAE,EAC7B,WAAW,CAAC,EAAE,MAAM,EAAE,GACrB,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;IACrC,4BAA4B,CAC1B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,kBAAkB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1D;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE;IACJ,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,OAAO,CAAC;CAC7B,GACA,OAAO,CAAC,YAAY,GAAG,SAAS,GAAG,UAAU,CAAC,CA6DhD;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,YAAY,EAClB,GAAG,EAAE;IAAE,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,EACzE,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EACnD,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GACtD,OAAO,CAAC,IAAI,CAAC,CAiCf;AAED;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvD,OAAO,CAAC,IAAI,CAAC,CAuDf"}
+{"version":3,"file":"gateway-lane-flow.d.ts","sourceRoot":"","sources":["../src/gateway-lane-flow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC5E,OAAO,KAAK,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAEtF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;GAKG;AAEH,0EAA0E;AAC1E,MAAM,WAAW,YAAY;IAC3B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,cAAc,EAAE,OAAO,CAAC;IACxB,YAAY,EAAE,OAAO,CAAC;IACtB,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC;;;;;;;OAOG;IACH,mBAAmB,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtE,IAAI,EAAE;QACJ,MAAM,EAAE,YAAY,CAAC;QACrB,GAAG,CAAC,EAAE,aAAa,CAAC;QACpB,MAAM,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QAC3B,eAAe,EAAE,eAAe,CAAC;QACjC,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,cAAc,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC;IAC5C,oBAAoB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9C,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IAClE,WAAW,CACT,KAAK,EAAE,WAAW,EAClB,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,aAAa,CAAC,EAAE,WAAW,EAAE,EAC7B,WAAW,CAAC,EAAE,MAAM,EAAE,GACrB,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;IACrC,4BAA4B,CAC1B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,kBAAkB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1D;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE;IACJ,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,OAAO,CAAC;CAC7B,GACA,OAAO,CAAC,YAAY,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC,CAqG3D;AAOD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,YAAY,EAClB,GAAG,EAAE;IAAE,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,EACzE,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EACnD,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,MAAM,KAAK,OAAO,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,GAC1E,OAAO,CAAC,IAAI,CAAC,CAiGf;AAED;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvD,OAAO,CAAC,IAAI,CAAC,CAuDf"}

package/dist/gateway-lane-flow.js

@@ -40,6 +40,9 @@ export async function dispatchLaneGroup(host, opts) {
         }
         return 'foreign';
     }
+    // Register the session's active lane so external activity signals
+    // (touchRuntimeActivity from adapter hooks) renew exactly this lane.
+    host.noteSessionLane(opts.sessionKey, lane.laneKey);
     let dispatched = false;
     try {
         dispatched = await host.runDispatch(event, opts.sessionKey, opts.body, opts.earlier, opts.captureText);
@@ -47,28 +50,133 @@ export async function dispatchLaneGroup(host, opts) {
     catch (err) {
         // Failed turn: hand the members back so the retry (this pod or the
         // next) re-claims immediately instead of waiting out the lease.
+        host.noteSessionLane(opts.sessionKey, null);
         await ledger.release(lane.laneKey).catch(() => { });
         throw err;
     }
+    finally {
+        if (dispatched)
+            host.noteSessionLane(opts.sessionKey, null);
+    }
     if (!dispatched) {
         // Shutdown short-circuit — shutdown() releases all active lanes.
         return 'shutdown';
     }
+    if (host.consumeTurnError(opts.sessionKey)) {
+        // An error turn must not no_action-sweep its members — settle the lane
+        // NOW with an error complete so they release for retry on the redrive
+        // budget (dispatch-convergence-design.md §3). Settling immediately (even
+        // with same-lane work still buffered) is deliberate: carrying the error
+        // across buffered turns would let a later reply broad-cover the failed
+        // member, or requeue the later turn's successful work. Released members
+        // rejoin the next claim, merged with whatever was buffered. Dropping the
+        // local dedupe claims lets the server's re-drive hint retrigger the
+        // messages immediately instead of waiting out the renotify pacing.
+        ledger.markTurnError(lane.laneKey);
+        // Clear dedupe for EVERY lane member, not just this batch: an earlier
+        // successful batch may have deferred its complete via hasMoreLocal, so
+        // the error complete below releases those members too — their redrive
+        // would be permanently blocked by a stale local claim.
+        for (const msgId of lane.folded.keys()) {
+            host.dispatchedMessages.delete(msgId);
+        }
+        // Invalidate any armed steer state before settling: a pending injection
+        // left over from the failed turn would make the retry claim enter the
+        // "already injected" path, produce an empty turn, and no_action-sweep the
+        // released members without ever retrying them. abortDispatch is the
+        // adapter contract's idempotent "clear pending steer state" hook.
+        try {
+            host.opts.dispatchAdapter.abortDispatch?.(opts.sessionKey);
+        }
+        catch {
+            // best-effort — a throwing abort must not block the error settlement
+        }
+        await ledger.completeIfIdle(lane.laneKey, false);
+        // 'failed' — callers must NOT record these events as handled: the server
+        // just released them for redelivery, and an "already handled" fork prefix
+        // (or a consumed fork summary) on the redrive would be a lie.
+        return 'failed';
+    }
     const pendingInjections = host.opts.dispatchAdapter.hasPendingInjections?.(opts.sessionKey) ?? false;
     await ledger.completeIfIdle(lane.laneKey, pendingInjections || opts.hasMoreLocal());
     return 'dispatched';
 }
+/** Failure backoff pacing for typed dispatch retries (base 2s, cap 5min). */
+const TYPED_BACKOFF_BASE_MS = 2_000;
+const TYPED_BACKOFF_CAP_MS = 5 * 60_000;
+const TYPED_BACKOFF_MAP_CAP = 512;
 /**
  * Consume one typed dispatch (task/comment/schedule/trigger/approval) under
  * its typed-lane occupancy guard: claim the dsp:<id> lane (skip when another
  * pod holds it or the WorkItem is already resolved), run the handler, ack on
  * success (the doc's option (b): notification delivered, tracked elsewhere),
  * then release the lane. Legacy run+ack flow when the ledger is unavailable.
+ *
+ * Repeated failures back off: a consume that ends un-acked re-arms the
+ * WorkItem's backoff entry, and the next attempt sleeps out the remaining
+ * window before claiming. Without this, complete's release re-drives the
+ * item instantly and a persistently-failing consume (e.g. buffered behind a
+ * saturated fork pool) spins at wire speed — the client half of the
+ * 2026-07-11 poison loop (the server half is the redrive budget).
  */
 export async function consumeTypedDispatch(host, ref, run, ack) {
+    const backoffKey = ref.dispatchEventId ?? `${ref.sourceType}:${ref.sourceId}`;
+    const armed = host.typedRedriveBackoff.get(backoffKey);
+    if (armed) {
+        const waitMs = armed.until - Date.now();
+        if (waitMs > 0) {
+            host.opts.log?.info(`typed dispatch ${backoffKey} backing off ${Math.ceil(waitMs / 1000)}s after ${armed.failures} failed consume(s)`);
+            // unref: the wait must never be what keeps the process alive — on
+            // SIGTERM the gateway drains and exits while this timer is pending
+            // (the re-drive/renotify path re-delivers on the next pod).
+            await new Promise((resolve) => {
+                const timer = setTimeout(resolve, waitMs);
+                timer.unref?.();
+            });
+        }
+        if (host.shuttingDown)
+            return;
+    }
+    // An ack callback that returns void (legacy custom acks) counts as success;
+    // an explicit false (ackDispatchEvent's failed HTTP ack) is a failed
+    // consume — clearing backoff there would let an ack outage re-create the
+    // wire-speed release/re-drive loop against a pre-budget server.
+    const settleAck = (ackResult) => ackResult !== false;
+    const settle = (acked) => {
+        if (acked) {
+            host.typedRedriveBackoff.delete(backoffKey);
+            return;
+        }
+        const failures = (host.typedRedriveBackoff.get(backoffKey)?.failures ?? 0) + 1;
+        const backoffMs = Math.min(TYPED_BACKOFF_CAP_MS, TYPED_BACKOFF_BASE_MS * 2 ** (failures - 1));
+        // True LRU: delete-then-set moves an updated key to the tail of the
+        // Map's insertion order, so capacity eviction always removes the
+        // least-recently-FAILING key — an actively-failing old key must not be
+        // evicted ahead of a quieter newer one. Evict only when inserting a new
+        // key at capacity (an in-place update never shrinks the map).
+        if (host.typedRedriveBackoff.delete(backoffKey) === false &&
+            host.typedRedriveBackoff.size >= TYPED_BACKOFF_MAP_CAP) {
+            const oldest = host.typedRedriveBackoff.keys().next().value;
+            if (oldest !== undefined)
+                host.typedRedriveBackoff.delete(oldest);
+        }
+        host.typedRedriveBackoff.set(backoffKey, { failures, until: Date.now() + backoffMs });
+    };
+    // Legacy run+ack (no ledger): same settle-in-finally contract as the lane
+    // path — a thrown run/ack must arm backoff, not skip it.
+    const runLegacy = async () => {
+        let acked = false;
+        try {
+            if (await run(ref.dispatchEventId)) {
+                acked = settleAck(await ack(ref.dispatchEventId));
+            }
+        }
+        finally {
+            settle(acked);
+        }
+    };
     if (!host.laneLedger || host.ledgerDisabled) {
-        if (await run(ref.dispatchEventId))
-            await ack(ref.dispatchEventId);
+        await runLegacy();
         return;
     }
     let lane;
@@ -78,24 +186,28 @@ export async function consumeTypedDispatch(host, ref, run, ack) {
     catch (err) {
         if (err instanceof LedgerUnsupportedError) {
             host.disableLedger('claim endpoint missing');
-            if (await run(ref.dispatchEventId))
-                await ack(ref.dispatchEventId);
+            await runLegacy();
             return;
         }
         throw err;
     }
     if (!lane) {
+        // Held elsewhere or already resolved — not a local failure; leave the
+        // backoff state as-is (a stale entry is cleared by the next local ack).
         host.opts.log?.info(`typed dispatch ${ref.dispatchEventId ?? `${ref.sourceType}:${ref.sourceId}`} not claimable (held elsewhere or already resolved) — skipping`);
         return;
     }
+    let acked = false;
     try {
         // Ack must settle before Complete. A fire-and-forget ack races the lane
         // release: Complete can return the still-received typed item to pending
         // and publish a re-drive while its successful ack is still in flight.
-        if (await run(lane.typedDispatchEventId))
-            await ack(lane.typedDispatchEventId);
+        if (await run(lane.typedDispatchEventId)) {
+            acked = settleAck(await ack(lane.typedDispatchEventId));
+        }
     }
     finally {
+        settle(acked);
         // Release the occupancy row. A buffered dispatch may outlive this guard
         // (lane TTL) — acceptable at-least-once; the ledger's resolution paths
         // still dedupe the persistent side effects.

package/dist/index.d.ts

@@ -2,6 +2,7 @@ export * from './provider-config.js';
 export * from './types.js';
 export * from './lane-key.js';
 export type { LaneFlowHost } from './gateway-lane-flow.js';
+export { consumeTypedDispatch } from './gateway-lane-flow.js';
 export * from './session-state.js';
 export * from './routing.js';
 export * from './event-format.js';
@@ -11,6 +12,8 @@ export * from './dispatch-adapter.js';
 export { createLogger, childLogger } from './logger.js';
 export * from './gateway-base.js';
 export * from './platform-config.js';
+export * from './channel-capability.js';
+export * from './channel-token.js';
 export { writeSkillFiles, buildSkillReferences, SKILLS } from './skills/index.js';
 export type { SkillMeta } from './skills/index.js';
 export { initAgentTelemetry, createOtelLogger, runWithSessionKey, startDispatchSpan, endDispatchSpan, recordDispatchMetric, recordMissingReply, } from './telemetry.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,YAAY,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACxD,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAClF,YAAY,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,YAAY,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACxD,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,oBAAoB,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAClF,YAAY,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -1,6 +1,7 @@
 export * from './provider-config.js';
 export * from './types.js';
 export * from './lane-key.js';
+export { consumeTypedDispatch } from './gateway-lane-flow.js';
 export * from './session-state.js';
 export * from './routing.js';
 export * from './event-format.js';
@@ -10,5 +11,7 @@ export * from './dispatch-adapter.js';
 export { createLogger, childLogger } from './logger.js';
 export * from './gateway-base.js';
 export * from './platform-config.js';
+export * from './channel-capability.js';
+export * from './channel-token.js';
 export { writeSkillFiles, buildSkillReferences, SKILLS } from './skills/index.js';
 export { initAgentTelemetry, createOtelLogger, runWithSessionKey, startDispatchSpan, endDispatchSpan, recordDispatchMetric, recordMissingReply, } from './telemetry.js';

package/dist/lane-ledger.d.ts

@@ -14,6 +14,13 @@ export type ActiveLane = {
     /** Lease expiry (ms epoch) and TTL from the claim — renewal pacing state. */
     leaseUntilMs?: number;
     leaseTtlMs?: number;
+    /**
+     * Sticky error bit: some turn on this lane surfaced a runtime error. Read
+     * (and only cleared) by the lane's final complete, so an error outcome
+     * survives buffered same-lane turns in between — a later successful turn
+     * must not no_action-sweep the failed turn's members.
+     */
+    turnError?: boolean;
 };
 /**
  * Thrown when the server predates the dispatch ledger (claim endpoint 404s
@@ -71,7 +78,22 @@ export declare class LaneLedger {
      * re-drives any same-target pending work. A STALE_LANE answer means a
      * takeover already owns the resource — local state is dropped either way.
      */
+    /**
+     * Record that the turn on this lane surfaced a runtime error. The flow
+     * settles an errored lane immediately (dispatchLaneGroup returns 'failed'
+     * after a forced complete), so the bit normally lives for one turn only —
+     * it is the transport between the gateway's per-session error signal and
+     * this lane's complete request.
+     */
+    markTurnError(laneKey: string): void;
     completeIfIdle(laneKey: string, hasMoreLocal: boolean): Promise<void>;
+    /**
+     * Renew one lane by its key — the external runtime-activity hook for
+     * adapters whose tool traffic bypasses the RuntimeEvent stream (openclaw
+     * hooks). Scoped to the session's own lane: renewing every lane would let
+     * one busy fork keep an unrelated stalled fork's lane leased forever.
+     */
+    renewByKey(laneKey: string): void;
     /**
      * Long-turn keepalive: renew the lane's lease on runtime activity, throttled
      * so a chatty turn doesn't spam the server. Without this, a legitimately

package/dist/lane-ledger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lane-ledger.d.ts","sourceRoot":"","sources":["../src/lane-ledger.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,sDAAsD;AACtD,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,6EAA6E;IAC7E,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,6EAA6E;IAC7E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;;GAIG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;CAAG;AAEpD,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,SAAS,CAAC;AAqBrD;;;;;;;;;;;GAWG;AACH,qBAAa,UAAU;IAInB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHvB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiC;gBAGpC,IAAI,EAAE;QACrB,MAAM,EAAE,YAAY,CAAC;QACrB,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,GAAG,CAAC,EAAE,aAAa,CAAC;KACrB;IAGH,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,+FAA+F;IAC/F,OAAO,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO;IAIpC,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM;IAOtC,WAAW,CAAC,KAAK,EAAE,WAAW,GAAG,UAAU,GAAG,SAAS;IAIvD,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM;IAIzC;;;;;;OAMG;IACG,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IA4EnE;;;;;OAKG;IACG,SAAS,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IA0BrD;;;;;OAKG;IACG,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IA0B3E;;;;;;;OAOG;IACH,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IA6BlC;;;;OAIG;IACG,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYvC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAOjC,yEAAyE;IACzE,IAAI,WAAW,IAAI,MAAM,CAExB;IAED;;;;;OAKG;IACG,UAAU,CAAC,GAAG,EAAE;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IA8B9B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;CAW1B"}
+{"version":3,"file":"lane-ledger.d.ts","sourceRoot":"","sources":["../src/lane-ledger.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,sDAAsD;AACtD,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,6EAA6E;IAC7E,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,6EAA6E;IAC7E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF;;;;GAIG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;CAAG;AAEpD,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,SAAS,CAAC;AAqBrD;;;;;;;;;;;GAWG;AACH,qBAAa,UAAU;IAInB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHvB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiC;gBAGpC,IAAI,EAAE;QACrB,MAAM,EAAE,YAAY,CAAC;QACrB,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,GAAG,CAAC,EAAE,aAAa,CAAC;KACrB;IAGH,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,+FAA+F;IAC/F,OAAO,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO;IAIpC,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM;IAOtC,WAAW,CAAC,KAAK,EAAE,WAAW,GAAG,UAAU,GAAG,SAAS;IAIvD,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM;IAIzC;;;;;;OAMG;IACG,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAsFnE;;;;;OAKG;IACG,SAAS,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IA0BrD;;;;;OAKG;IACH;;;;;;OAMG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAK9B,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IA6B3E;;;;;OAKG;IACH,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAKjC;;;;;;;OAOG;IACH,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IA6BlC;;;;OAIG;IACG,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYvC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAOjC,yEAAyE;IACzE,IAAI,WAAW,IAAI,MAAM,CAExB;IAED;;;;;OAKG;IACG,UAAU,CAAC,GAAG,EAAE;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IA8B9B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;CAW1B"}