@parall/agent-core 1.43.0 → 1.44.0

package/dist/gateway-base.d.ts

@@ -120,6 +120,31 @@ export declare class ParallAgentGateway {
     constructor(opts: ParallGatewayOptions);
     run(abortSignal: AbortSignal): Promise<void>;
     private tryClaimMessage;
+    /**
+     * Lane currently being dispatched per session — lets external activity
+     * signals renew exactly the caller's lane (renewing all lanes would keep
+     * an unrelated stalled fork's lane leased forever).
+     */
+    private sessionActiveLanes;
+    noteSessionLane(sessionKey: string, laneKey: string | null): void;
+    /**
+     * External runtime-activity signal for adapters whose tool activity does
+     * not flow through the RuntimeEvent stream (openclaw hooks call this from
+     * the tool-call lifecycle): renews the session's OWN active ledger lane so
+     * a long tool call cannot outlive the lease and get dethroned mid-turn.
+     * No-op without an active ledger lane for the session.
+     */
+    touchRuntimeActivity(sessionKey: string): void;
+    /** Sessions whose in-flight turn surfaced a runtime error event. */
+    private turnErrorSessions;
+    /**
+     * Consume (read-and-clear) the error marker for sessionKey's last turn.
+     * Feeds complete's turn_outcome so an error turn's lane members are
+     * released for retry instead of no_action-swept (design §3). Consuming
+     * (rather than peeking) keeps one-shot fork session keys from accumulating
+     * in the set forever.
+     */
+    consumeTurnError(sessionKey: string): boolean;
     private emitDispatchReceived;
     /** True when this event's lifecycle is owned by the dispatch lane ledger. */
     private usesLaneLedger;

package/dist/gateway-base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gateway-base.d.ts","sourceRoot":"","sources":["../src/gateway-base.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiC,YAAY,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACpF,OAAO,KAAK,EACV,qBAAqB,EAkBtB,MAAM,aAAa,CAAC;AAOrB,OAAO,EAGL,KAAK,eAAe,EAGpB,KAAK,aAAa,EAEnB,MAAM,uBAAuB,CAAC;AAqC/B,OAAO,KAAK,EAAiB,WAAW,EAAE,MAAM,YAAY,CAAC;AAwB7D,MAAM,MAAM,mBAAmB,GAAG;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IACtC,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7F,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAC/B;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,WAAW,CAAA;CAAE,GAC1C;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAClB;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC;AAExB,MAAM,MAAM,oBAAoB,GAAG;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,YAAY,CAAC;IACrB,EAAE,EAAE,QAAQ,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE;QACN,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,eAAe,EAAE,eAAe,CAAC;IACjC,GAAG,CAAC,EAAE,aAAa,CAAC;IACpB,kGAAkG;IAClG,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAI3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,yBAAyB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACvE,0FAA0F;IAC1F,wBAAwB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACtE;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC;IACnC,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,qBAAqB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACvE,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE;QACvB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,EAAE,EAAE,QAAQ,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;KACpB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3B,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE;QACzB,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,EAAE,MAAM,CAAC;QACzB,cAAc,EAAE,MAAM,CAAC;KACxB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAChD,YAAY,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACnE,cAAc,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC/D,CAAC;AAkBF,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAKnF;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAK/E;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAKnF;AAsFD,qBAAa,kBAAkB;IAoDjB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAnDjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IAGrD,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAA6B;IACxE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAqB;IAGxD,QAAQ,CAAC,mBAAmB;kBAA+B,MAAM;eAAS,MAAM;OAAM;IACtF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsC;IACjE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAK5B;IAEF,OAAO,CAAC,SAAS,CAAM;IACvB,OAAO,CAAC,eAAe,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA0C;IAC1E,OAAO,CAAC,cAAc,CAA+C;IAErE,OAAO,CAAC,eAAe,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAS;IAMzB,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,kBAAkB,CAAK;IAC/B,OAAO,CAAC,cAAc,CAAyB;IAC/C,OAAO,CAAC,0BAA0B,CAAuB;IAEzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAa;IAGzC,OAAO,CAAC,cAAc,CAAS;IAI/B,OAAO,CAAC,mBAAmB,CAAC,CAAS;IAErC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAQ;IAIhD,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAC9C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;gBAEjB,IAAI,EAAE,oBAAoB;IAmBjD,GAAG,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAuQlD,OAAO,CAAC,eAAe;YAaT,oBAAoB;IASlC,6EAA6E;IAC7E,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,aAAa;IAQrB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAaxB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,oBAAoB;IAc5B,OAAO,CAAC,gBAAgB;IAgBxB,OAAO,CAAC,wBAAwB;IA8BhC,OAAO,CAAC,oBAAoB;IAsB5B,OAAO,CAAC,qBAAqB;YAQf,eAAe;YAmEf,iBAAiB;IA+H/B,OAAO,CAAC,gBAAgB;IASxB,OAAO,CAAC,uBAAuB;IAW/B,OAAO,CAAC,0BAA0B;IAWlC,kEAAkE;IAClE,OAAO,CAAC,eAAe;IASvB,kEAAkE;IAClE,OAAO,CAAC,eAAe;YAQT,gCAAgC;YAMhC,kBAAkB;YA6ElB,WAAW;IA0SzB,OAAO,CAAC,SAAS;YA6CH,gBAAgB;YA8JhB,eAAe;YAuIf,kBAAkB;YA6LlB,kBAAkB;YAkBlB,4BAA4B;YAwF5B,aAAa;YAmCb,oBAAoB;YAapB,2BAA2B;IAezC,OAAO,CAAC,sBAAsB;YAQhB,oBAAoB;YA0CpB,kBAAkB;YAwBlB,iBAAiB;YAqFjB,iBAAiB;IA2E/B;;;;;;;OAOG;YACW,0BAA0B;YA2B1B,kBAAkB;YAsClB,gCAAgC;YA0BhC,4BAA4B;YAqG5B,wBAAwB;YA2CxB,6BAA6B;YAuD7B,mBAAmB;IA8LjC,OAAO,CAAC,mBAAmB;IA8B3B,OAAO,CAAC,SAAS;YAQH,WAAW;IAkEzB,OAAO,CAAC,YAAY;YAiBN,QAAQ;CAsCvB"}
+{"version":3,"file":"gateway-base.d.ts","sourceRoot":"","sources":["../src/gateway-base.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiC,YAAY,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACpF,OAAO,KAAK,EACV,qBAAqB,EAkBtB,MAAM,aAAa,CAAC;AAOrB,OAAO,EAGL,KAAK,eAAe,EAGpB,KAAK,aAAa,EAEnB,MAAM,uBAAuB,CAAC;AAqC/B,OAAO,KAAK,EAAiB,WAAW,EAAE,MAAM,YAAY,CAAC;AAwB7D,MAAM,MAAM,mBAAmB,GAAG;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IACtC,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7F,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAC/B;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,WAAW,CAAA;CAAE,GAC1C;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAClB;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC;AAExB,MAAM,MAAM,oBAAoB,GAAG;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,YAAY,CAAC;IACrB,EAAE,EAAE,QAAQ,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE;QACN,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,eAAe,EAAE,eAAe,CAAC;IACjC,GAAG,CAAC,EAAE,aAAa,CAAC;IACpB,kGAAkG;IAClG,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAI3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,yBAAyB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACvE,0FAA0F;IAC1F,wBAAwB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACtE;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC;IACnC,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,qBAAqB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACvE,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE;QACvB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,EAAE,EAAE,QAAQ,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;KACpB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3B,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE;QACzB,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,EAAE,MAAM,CAAC;QACzB,cAAc,EAAE,MAAM,CAAC;KACxB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAChD,YAAY,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACnE,cAAc,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC/D,CAAC;AAkBF,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAKnF;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAK/E;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAKnF;AAsFD,qBAAa,kBAAkB;IAoDjB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAnDjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IAGrD,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAA6B;IACxE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAqB;IAGxD,QAAQ,CAAC,mBAAmB;kBAA+B,MAAM;eAAS,MAAM;OAAM;IACtF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsC;IACjE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAK5B;IAEF,OAAO,CAAC,SAAS,CAAM;IACvB,OAAO,CAAC,eAAe,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA0C;IAC1E,OAAO,CAAC,cAAc,CAA+C;IAErE,OAAO,CAAC,eAAe,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAS;IAMzB,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,kBAAkB,CAAK;IAC/B,OAAO,CAAC,cAAc,CAAyB;IAC/C,OAAO,CAAC,0BAA0B,CAAuB;IAEzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAa;IAGzC,OAAO,CAAC,cAAc,CAAS;IAI/B,OAAO,CAAC,mBAAmB,CAAC,CAAS;IAErC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAQ;IAIhD,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAC9C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;gBAEjB,IAAI,EAAE,oBAAoB;IAmBjD,GAAG,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAuQlD,OAAO,CAAC,eAAe;IAavB;;;;OAIG;IACH,OAAO,CAAC,kBAAkB,CAA6B;IAEvD,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAKjE;;;;;;OAMG;IACH,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAM9C,oEAAoE;IACpE,OAAO,CAAC,iBAAiB,CAAqB;IAE9C;;;;;;OAMG;IACH,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;YAI/B,oBAAoB;IASlC,6EAA6E;IAC7E,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,aAAa;IAQrB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAaxB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,oBAAoB;IAc5B,OAAO,CAAC,gBAAgB;IAgBxB,OAAO,CAAC,wBAAwB;IA8BhC,OAAO,CAAC,oBAAoB;IAsB5B,OAAO,CAAC,qBAAqB;YAQf,eAAe;YAmEf,iBAAiB;IA+H/B,OAAO,CAAC,gBAAgB;IASxB,OAAO,CAAC,uBAAuB;IAW/B,OAAO,CAAC,0BAA0B;IAWlC,kEAAkE;IAClE,OAAO,CAAC,eAAe;IASvB,kEAAkE;IAClE,OAAO,CAAC,eAAe;YAQT,gCAAgC;YAMhC,kBAAkB;YA6ElB,WAAW;IA8SzB,OAAO,CAAC,SAAS;YA6CH,gBAAgB;YAkLhB,eAAe;YA8If,kBAAkB;YA2MlB,kBAAkB;YAkBlB,4BAA4B;YAwF5B,aAAa;YAmCb,oBAAoB;YAapB,2BAA2B;IAezC,OAAO,CAAC,sBAAsB;YAQhB,oBAAoB;YA0CpB,kBAAkB;YAwBlB,iBAAiB;YAqFjB,iBAAiB;IA2E/B;;;;;;;OAOG;YACW,0BAA0B;YA2B1B,kBAAkB;YAsClB,gCAAgC;YA0BhC,4BAA4B;YAqG5B,wBAAwB;YA2CxB,6BAA6B;YAuD7B,mBAAmB;IA8LjC,OAAO,CAAC,mBAAmB;IA8B3B,OAAO,CAAC,SAAS;YAQH,WAAW;IAkEzB,OAAO,CAAC,YAAY;YAiBN,QAAQ;CAsCvB"}

package/dist/gateway-base.js

@@ -410,6 +410,44 @@ export class ParallAgentGateway {
         this.dispatchedMessages.add(id);
         return true;
     }
+    /**
+     * Lane currently being dispatched per session — lets external activity
+     * signals renew exactly the caller's lane (renewing all lanes would keep
+     * an unrelated stalled fork's lane leased forever).
+     */
+    sessionActiveLanes = new Map();
+    noteSessionLane(sessionKey, laneKey) {
+        if (laneKey == null)
+            this.sessionActiveLanes.delete(sessionKey);
+        else
+            this.sessionActiveLanes.set(sessionKey, laneKey);
+    }
+    /**
+     * External runtime-activity signal for adapters whose tool activity does
+     * not flow through the RuntimeEvent stream (openclaw hooks call this from
+     * the tool-call lifecycle): renews the session's OWN active ledger lane so
+     * a long tool call cannot outlive the lease and get dethroned mid-turn.
+     * No-op without an active ledger lane for the session.
+     */
+    touchRuntimeActivity(sessionKey) {
+        if (this.ledgerDisabled)
+            return;
+        const laneKey = this.sessionActiveLanes.get(sessionKey);
+        if (laneKey)
+            this.laneLedger?.renewByKey(laneKey);
+    }
+    /** Sessions whose in-flight turn surfaced a runtime error event. */
+    turnErrorSessions = new Set();
+    /**
+     * Consume (read-and-clear) the error marker for sessionKey's last turn.
+     * Feeds complete's turn_outcome so an error turn's lane members are
+     * released for retry instead of no_action-swept (design §3). Consuming
+     * (rather than peeking) keeps one-shot fork session keys from accumulating
+     * in the set forever.
+     */
+    consumeTurnError(sessionKey) {
+        return this.turnErrorSessions.delete(sessionKey);
+    }
     async emitDispatchReceived(event) {
         const sourceType = event.ackSourceType ?? (event.type === 'task' ? 'task_activity' : 'message');
         const sourceId = event.ackSourceId ?? event.messageId;
@@ -814,6 +852,7 @@ export class ParallAgentGateway {
             this.pendingRestartNotification = null;
         }
         resetDispatchMetrics(sessionKey);
+        this.turnErrorSessions.delete(sessionKey);
         return runWithSessionKey(sessionKey, async () => {
             let dispatchSpan = null;
             setSessionChatId(sessionKey, event.targetId);
@@ -950,6 +989,9 @@ export class ParallAgentGateway {
                         pendingSendCallIds.delete(runtimeEvent.callId)) {
                         recordMessageSend(sessionKey, !runtimeEvent.error);
                     }
+                    if (runtimeEvent.type === 'error') {
+                        this.turnErrorSessions.add(sessionKey);
+                    }
                     await this.createRuntimeStep(binding.agentSessionId, event, runtimeEvent, stepIdFilePath, contextFilePath, laneContextFilePath);
                 }
                 if (!binding) {
@@ -1122,7 +1164,12 @@ export class ParallAgentGateway {
                             body: buildForkScopePrefix(last) + buildEventBody(last),
                             earlier,
                             captureText: batchText,
-                            hasMoreLocal: () => fork.queue.length > 0,
+                            // Per-LANE residue check (parity with the main-buffer path):
+                            // the fork queue can hold several lanes (channel + thread of
+                            // the same chat). A whole-queue check would defer THIS lane's
+                            // complete behind another lane's items and never revisit it —
+                            // its members would sit received until lease expiry.
+                            hasMoreLocal: () => fork.queue.some((it) => this.dispatchGroupKey(it.event) === this.dispatchGroupKey(last)),
                         });
                         if (outcome === 'foreign') {
                             // Another pod owns the lane — the events stay pending server-side.
@@ -1130,6 +1177,15 @@ export class ParallAgentGateway {
                                 item.resolve(false);
                             break;
                         }
+                        if (outcome === 'failed') {
+                            // Error turn: complete(error) already released the members for
+                            // redelivery. Do NOT push them to processedEvents — the redrive
+                            // must not arrive wearing an "already handled" prefix. Keep
+                            // draining; the released work rejoins the next claim.
+                            for (const item of items)
+                                item.resolve(false);
+                            continue;
+                        }
                         dispatched = outcome === 'dispatched';
                     }
                     else {
@@ -1168,6 +1224,10 @@ export class ParallAgentGateway {
             }
         }
         finally {
+            // One-shot fork keys are never dispatched again — drop any error marker
+            // the legacy (non-ledger) path left unconsumed, or the set grows with
+            // every failed ephemeral fork.
+            this.turnErrorSessions.delete(fork.fork.sessionKey);
             if (fork.deadlineTimer) {
                 clearTimeout(fork.deadlineTimer);
                 fork.deadlineTimer = null;
@@ -1295,6 +1355,13 @@ export class ParallAgentGateway {
                         this.dispatchState.pendingForkResults.unshift(...pendingFork);
                         continue;
                     }
+                    if (outcome === 'failed') {
+                        // Error turn settled with complete(error) — members released for
+                        // redelivery. The fork results were not consumed by the failed
+                        // turn; keep them for the next real dispatch.
+                        this.dispatchState.pendingForkResults.unshift(...pendingFork);
+                        continue;
+                    }
                     // Dispatched — resolution happened server-side (reply cover or
                     // no_action sweep); no legacy acks.
                     continue;
@@ -1438,9 +1505,16 @@ export class ParallAgentGateway {
                     // fold leaves the event buffered — the drain claims it as its own
                     // turn. Injection requires an exact lane match (same chat AND same
                     // thread) — a thread message never rides a channel turn.
+                    // The adapter-capability check comes BEFORE the fold: on a
+                    // buffer-only adapter (openclaw — no enqueueDuringDispatch) a
+                    // folded-but-never-injected member would be broad-covered by the
+                    // current turn's reply without the model ever seeing it. Leaving
+                    // the event un-folded keeps it buffered; the drain claims it as
+                    // its own turn and folds it there.
                     if (this.mainCurrentGroupKey === this.dispatchGroupKey(event) &&
+                        this.opts.dispatchAdapter.enqueueDuringDispatch != null &&
                         (await this.laneLedger?.steerLive(event)) &&
-                        (await this.opts.dispatchAdapter.enqueueDuringDispatch?.(this.opts.runtimeKey, buildEventBody(event)))) {
+                        (await this.opts.dispatchAdapter.enqueueDuringDispatch(this.opts.runtimeKey, buildEventBody(event)))) {
                         this.opts.log?.info(`steer folded+injected for ${event.messageId} (will drain for bookkeeping)`);
                     }
                 }
@@ -1474,13 +1548,20 @@ export class ParallAgentGateway {
                     this.dispatchState.mainBuffer.push(event);
                     return false;
                 }
-                try {
-                    await this.emitDispatchReceived(event);
-                }
-                catch (err) {
-                    this.opts.log?.warn?.(`mark-received failed for fork dispatch, leaving unacked for retry: ${String(err)}`);
-                    this.dispatchState.mainBuffer.push(event);
-                    return false;
+                // Ledger-managed events must never touch the legacy received surface
+                // — the fork's lane claim marks them received. A mark-received here
+                // outruns the claim, strands the row ownerless, and the chat goes
+                // silent (the 0713 black hole; dispatch-convergence-design.md §6).
+                // This was the only unguarded call site of the three.
+                if (!this.usesLaneLedger(event)) {
+                    try {
+                        await this.emitDispatchReceived(event);
+                    }
+                    catch (err) {
+                        this.opts.log?.warn?.(`mark-received failed for fork dispatch, leaving unacked for retry: ${String(err)}`);
+                        this.dispatchState.mainBuffer.push(event);
+                        return false;
+                    }
                 }
                 const fork = await this.opts.dispatchAdapter.forkSession({
                     sessionKey: this.opts.runtimeKey,

package/dist/gateway-lane-flow.d.ts

@@ -39,6 +39,8 @@ export interface LaneFlowHost {
     disableLedger(reason: string): void;
     usesLaneLedger(event: ParallEvent): boolean;
     emitDispatchReceived(event: ParallEvent): Promise<void>;
+    consumeTurnError(sessionKey: string): boolean;
+    noteSessionLane(sessionKey: string, laneKey: string | null): void;
     runDispatch(event: ParallEvent, sessionKey: string, bodyForAgent: string, earlierEvents?: ParallEvent[], captureText?: string[]): Promise<boolean>;
     tryClaimMessage(id: string): boolean;
     buildMessageDispatchDecision(chatId: string, message: DispatchableMessage): Promise<MessageDispatchDecision>;
@@ -57,7 +59,7 @@ export declare function dispatchLaneGroup(host: LaneFlowHost, opts: {
     earlier: ParallEvent[];
     captureText?: string[];
     hasMoreLocal: () => boolean;
-}): Promise<'dispatched' | 'foreign' | 'shutdown'>;
+}): Promise<'dispatched' | 'foreign' | 'shutdown' | 'failed'>;
 /**
  * Consume one typed dispatch (task/comment/schedule/trigger/approval) under
  * its typed-lane occupancy guard: claim the dsp:<id> lane (skip when another

package/dist/gateway-lane-flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gateway-lane-flow.d.ts","sourceRoot":"","sources":["../src/gateway-lane-flow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC5E,OAAO,KAAK,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAEtF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;GAKG;AAEH,0EAA0E;AAC1E,MAAM,WAAW,YAAY;IAC3B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,cAAc,EAAE,OAAO,CAAC;IACxB,YAAY,EAAE,OAAO,CAAC;IACtB,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC;;;;;;;OAOG;IACH,mBAAmB,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtE,IAAI,EAAE;QACJ,MAAM,EAAE,YAAY,CAAC;QACrB,GAAG,CAAC,EAAE,aAAa,CAAC;QACpB,MAAM,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QAC3B,eAAe,EAAE,eAAe,CAAC;QACjC,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,cAAc,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC;IAC5C,oBAAoB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,WAAW,CACT,KAAK,EAAE,WAAW,EAClB,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,aAAa,CAAC,EAAE,WAAW,EAAE,EAC7B,WAAW,CAAC,EAAE,MAAM,EAAE,GACrB,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;IACrC,4BAA4B,CAC1B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,kBAAkB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1D;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE;IACJ,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,OAAO,CAAC;CAC7B,GACA,OAAO,CAAC,YAAY,GAAG,SAAS,GAAG,UAAU,CAAC,CA6DhD;AAOD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,YAAY,EAClB,GAAG,EAAE;IAAE,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,EACzE,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EACnD,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,MAAM,KAAK,OAAO,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,GAC1E,OAAO,CAAC,IAAI,CAAC,CAiGf;AAED;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvD,OAAO,CAAC,IAAI,CAAC,CAuDf"}
+{"version":3,"file":"gateway-lane-flow.d.ts","sourceRoot":"","sources":["../src/gateway-lane-flow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC5E,OAAO,KAAK,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAEtF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;GAKG;AAEH,0EAA0E;AAC1E,MAAM,WAAW,YAAY;IAC3B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,cAAc,EAAE,OAAO,CAAC;IACxB,YAAY,EAAE,OAAO,CAAC;IACtB,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC;;;;;;;OAOG;IACH,mBAAmB,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtE,IAAI,EAAE;QACJ,MAAM,EAAE,YAAY,CAAC;QACrB,GAAG,CAAC,EAAE,aAAa,CAAC;QACpB,MAAM,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QAC3B,eAAe,EAAE,eAAe,CAAC;QACjC,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,cAAc,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC;IAC5C,oBAAoB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9C,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IAClE,WAAW,CACT,KAAK,EAAE,WAAW,EAClB,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,aAAa,CAAC,EAAE,WAAW,EAAE,EAC7B,WAAW,CAAC,EAAE,MAAM,EAAE,GACrB,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;IACrC,4BAA4B,CAC1B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,kBAAkB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1D;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE;IACJ,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,OAAO,CAAC;CAC7B,GACA,OAAO,CAAC,YAAY,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC,CAqG3D;AAOD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,YAAY,EAClB,GAAG,EAAE;IAAE,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,EACzE,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EACnD,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,MAAM,KAAK,OAAO,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,GAC1E,OAAO,CAAC,IAAI,CAAC,CAiGf;AAED;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvD,OAAO,CAAC,IAAI,CAAC,CAuDf"}

package/dist/gateway-lane-flow.js

@@ -40,6 +40,9 @@ export async function dispatchLaneGroup(host, opts) {
         }
         return 'foreign';
     }
+    // Register the session's active lane so external activity signals
+    // (touchRuntimeActivity from adapter hooks) renew exactly this lane.
+    host.noteSessionLane(opts.sessionKey, lane.laneKey);
     let dispatched = false;
     try {
         dispatched = await host.runDispatch(event, opts.sessionKey, opts.body, opts.earlier, opts.captureText);
@@ -47,13 +50,53 @@ export async function dispatchLaneGroup(host, opts) {
     catch (err) {
         // Failed turn: hand the members back so the retry (this pod or the
         // next) re-claims immediately instead of waiting out the lease.
+        host.noteSessionLane(opts.sessionKey, null);
         await ledger.release(lane.laneKey).catch(() => { });
         throw err;
     }
+    finally {
+        if (dispatched)
+            host.noteSessionLane(opts.sessionKey, null);
+    }
     if (!dispatched) {
         // Shutdown short-circuit — shutdown() releases all active lanes.
         return 'shutdown';
     }
+    if (host.consumeTurnError(opts.sessionKey)) {
+        // An error turn must not no_action-sweep its members — settle the lane
+        // NOW with an error complete so they release for retry on the redrive
+        // budget (dispatch-convergence-design.md §3). Settling immediately (even
+        // with same-lane work still buffered) is deliberate: carrying the error
+        // across buffered turns would let a later reply broad-cover the failed
+        // member, or requeue the later turn's successful work. Released members
+        // rejoin the next claim, merged with whatever was buffered. Dropping the
+        // local dedupe claims lets the server's re-drive hint retrigger the
+        // messages immediately instead of waiting out the renotify pacing.
+        ledger.markTurnError(lane.laneKey);
+        // Clear dedupe for EVERY lane member, not just this batch: an earlier
+        // successful batch may have deferred its complete via hasMoreLocal, so
+        // the error complete below releases those members too — their redrive
+        // would be permanently blocked by a stale local claim.
+        for (const msgId of lane.folded.keys()) {
+            host.dispatchedMessages.delete(msgId);
+        }
+        // Invalidate any armed steer state before settling: a pending injection
+        // left over from the failed turn would make the retry claim enter the
+        // "already injected" path, produce an empty turn, and no_action-sweep the
+        // released members without ever retrying them. abortDispatch is the
+        // adapter contract's idempotent "clear pending steer state" hook.
+        try {
+            host.opts.dispatchAdapter.abortDispatch?.(opts.sessionKey);
+        }
+        catch {
+            // best-effort — a throwing abort must not block the error settlement
+        }
+        await ledger.completeIfIdle(lane.laneKey, false);
+        // 'failed' — callers must NOT record these events as handled: the server
+        // just released them for redelivery, and an "already handled" fork prefix
+        // (or a consumed fork summary) on the redrive would be a lie.
+        return 'failed';
+    }
     const pendingInjections = host.opts.dispatchAdapter.hasPendingInjections?.(opts.sessionKey) ?? false;
     await ledger.completeIfIdle(lane.laneKey, pendingInjections || opts.hasMoreLocal());
     return 'dispatched';

package/dist/lane-ledger.d.ts

@@ -14,6 +14,13 @@ export type ActiveLane = {
     /** Lease expiry (ms epoch) and TTL from the claim — renewal pacing state. */
     leaseUntilMs?: number;
     leaseTtlMs?: number;
+    /**
+     * Sticky error bit: some turn on this lane surfaced a runtime error. Read
+     * (and only cleared) by the lane's final complete, so an error outcome
+     * survives buffered same-lane turns in between — a later successful turn
+     * must not no_action-sweep the failed turn's members.
+     */
+    turnError?: boolean;
 };
 /**
  * Thrown when the server predates the dispatch ledger (claim endpoint 404s
@@ -71,7 +78,22 @@ export declare class LaneLedger {
      * re-drives any same-target pending work. A STALE_LANE answer means a
      * takeover already owns the resource — local state is dropped either way.
      */
+    /**
+     * Record that the turn on this lane surfaced a runtime error. The flow
+     * settles an errored lane immediately (dispatchLaneGroup returns 'failed'
+     * after a forced complete), so the bit normally lives for one turn only —
+     * it is the transport between the gateway's per-session error signal and
+     * this lane's complete request.
+     */
+    markTurnError(laneKey: string): void;
     completeIfIdle(laneKey: string, hasMoreLocal: boolean): Promise<void>;
+    /**
+     * Renew one lane by its key — the external runtime-activity hook for
+     * adapters whose tool traffic bypasses the RuntimeEvent stream (openclaw
+     * hooks). Scoped to the session's own lane: renewing every lane would let
+     * one busy fork keep an unrelated stalled fork's lane leased forever.
+     */
+    renewByKey(laneKey: string): void;
     /**
      * Long-turn keepalive: renew the lane's lease on runtime activity, throttled
      * so a chatty turn doesn't spam the server. Without this, a legitimately

package/dist/lane-ledger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lane-ledger.d.ts","sourceRoot":"","sources":["../src/lane-ledger.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,sDAAsD;AACtD,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,6EAA6E;IAC7E,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,6EAA6E;IAC7E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;;GAIG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;CAAG;AAEpD,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,SAAS,CAAC;AAqBrD;;;;;;;;;;;GAWG;AACH,qBAAa,UAAU;IAInB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHvB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiC;gBAGpC,IAAI,EAAE;QACrB,MAAM,EAAE,YAAY,CAAC;QACrB,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,GAAG,CAAC,EAAE,aAAa,CAAC;KACrB;IAGH,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,+FAA+F;IAC/F,OAAO,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO;IAIpC,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM;IAOtC,WAAW,CAAC,KAAK,EAAE,WAAW,GAAG,UAAU,GAAG,SAAS;IAIvD,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM;IAIzC;;;;;;OAMG;IACG,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IA4EnE;;;;;OAKG;IACG,SAAS,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IA0BrD;;;;;OAKG;IACG,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IA0B3E;;;;;;;OAOG;IACH,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IA6BlC;;;;OAIG;IACG,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYvC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAOjC,yEAAyE;IACzE,IAAI,WAAW,IAAI,MAAM,CAExB;IAED;;;;;OAKG;IACG,UAAU,CAAC,GAAG,EAAE;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IA8B9B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;CAW1B"}
+{"version":3,"file":"lane-ledger.d.ts","sourceRoot":"","sources":["../src/lane-ledger.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,sDAAsD;AACtD,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,6EAA6E;IAC7E,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,6EAA6E;IAC7E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF;;;;GAIG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;CAAG;AAEpD,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,SAAS,CAAC;AAqBrD;;;;;;;;;;;GAWG;AACH,qBAAa,UAAU;IAInB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHvB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiC;gBAGpC,IAAI,EAAE;QACrB,MAAM,EAAE,YAAY,CAAC;QACrB,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,GAAG,CAAC,EAAE,aAAa,CAAC;KACrB;IAGH,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,+FAA+F;IAC/F,OAAO,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO;IAIpC,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM;IAOtC,WAAW,CAAC,KAAK,EAAE,WAAW,GAAG,UAAU,GAAG,SAAS;IAIvD,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM;IAIzC;;;;;;OAMG;IACG,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAsFnE;;;;;OAKG;IACG,SAAS,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IA0BrD;;;;;OAKG;IACH;;;;;;OAMG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAK9B,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IA6B3E;;;;;OAKG;IACH,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAKjC;;;;;;;OAOG;IACH,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IA6BlC;;;;OAIG;IACG,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYvC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAOjC,yEAAyE;IACzE,IAAI,WAAW,IAAI,MAAM,CAExB;IAED;;;;;OAKG;IACG,UAAU,CAAC,GAAG,EAAE;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IA8B9B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;CAW1B"}

package/dist/lane-ledger.js

@@ -88,7 +88,16 @@ export class LaneLedger {
                 throw err;
             }
             if (!res.claimed || !res.lane) {
-                this.opts.log?.info(`lane for ${targetUri} held by a healthy incumbent — leaving events pending for re-drive`);
+                if (res.reason === 'empty') {
+                    // Nothing foldable: resolved elsewhere, or stranded outside the
+                    // ledger (the reconciler reclaims strays past the received TTL).
+                    // Post-convergence this should not happen on a message lane — warn
+                    // so a regression surfaces (design §3).
+                    this.opts.log?.warn(`claim for ${targetUri} came back empty — nothing foldable; leaving to the reconciler`);
+                }
+                else {
+                    this.opts.log?.info(`lane for ${targetUri} held by a healthy incumbent — leaving events pending for re-drive`);
+                }
                 return null;
             }
             const leaseUntilMs = Date.parse(res.lease_until ?? '');
@@ -183,6 +192,18 @@ export class LaneLedger {
      * re-drives any same-target pending work. A STALE_LANE answer means a
      * takeover already owns the resource — local state is dropped either way.
      */
+    /**
+     * Record that the turn on this lane surfaced a runtime error. The flow
+     * settles an errored lane immediately (dispatchLaneGroup returns 'failed'
+     * after a forced complete), so the bit normally lives for one turn only —
+     * it is the transport between the gateway's per-session error signal and
+     * this lane's complete request.
+     */
+    markTurnError(laneKey) {
+        const lane = this.lanes.get(laneKey);
+        if (lane)
+            lane.turnError = true;
+    }
     async completeIfIdle(laneKey, hasMoreLocal) {
         const lane = this.lanes.get(laneKey);
         if (!lane || hasMoreLocal)
@@ -194,6 +215,9 @@ export class LaneLedger {
                 lane: lane.lane,
                 target_uri: lane.targetUri,
                 thread_root_id: lane.threadRootId,
+                // An error turn releases its members for retry instead of sweeping
+                // them as handled (ignored by older servers).
+                turn_outcome: lane.turnError ? 'error' : 'ok',
             });
             if (res.swept_no_action > 0 || res.redriven) {
                 this.opts.log?.info(`lane complete for ${lane.targetUri}: swept ${res.swept_no_action} no_action, redriven=${res.redriven}`);
@@ -208,6 +232,17 @@ export class LaneLedger {
             this.opts.log?.warn(`lane complete failed for ${lane.targetUri}: ${String(err)}`);
         }
     }
+    /**
+     * Renew one lane by its key — the external runtime-activity hook for
+     * adapters whose tool traffic bypasses the RuntimeEvent stream (openclaw
+     * hooks). Scoped to the session's own lane: renewing every lane would let
+     * one busy fork keep an unrelated stalled fork's lane leased forever.
+     */
+    renewByKey(laneKey) {
+        const lane = this.lanes.get(laneKey);
+        if (lane)
+            this.maybeRenew(lane);
+    }
     /**
      * Long-turn keepalive: renew the lane's lease on runtime activity, throttled
      * so a chatty turn doesn't spam the server. Without this, a legitimately

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parall/agent-core",
-  "version": "1.43.0",
+  "version": "1.44.0",
   "description": "Shared agent runtime orchestration helpers for Parall",
   "license": "MIT",
   "repository": {
@@ -35,7 +35,7 @@
     "@opentelemetry/sdk-logs": "^0.57.0",
     "@opentelemetry/sdk-metrics": "^1.30.0",
     "@opentelemetry/sdk-trace-node": "^1.30.0",
-    "@parall/sdk": "1.43.0"
+    "@parall/sdk": "1.44.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/src/gateway-base.ts

@@ -641,6 +641,45 @@ export class ParallAgentGateway {
     return true;
   }
 
+  /**
+   * Lane currently being dispatched per session — lets external activity
+   * signals renew exactly the caller's lane (renewing all lanes would keep
+   * an unrelated stalled fork's lane leased forever).
+   */
+  private sessionActiveLanes = new Map<string, string>();
+
+  noteSessionLane(sessionKey: string, laneKey: string | null): void {
+    if (laneKey == null) this.sessionActiveLanes.delete(sessionKey);
+    else this.sessionActiveLanes.set(sessionKey, laneKey);
+  }
+
+  /**
+   * External runtime-activity signal for adapters whose tool activity does
+   * not flow through the RuntimeEvent stream (openclaw hooks call this from
+   * the tool-call lifecycle): renews the session's OWN active ledger lane so
+   * a long tool call cannot outlive the lease and get dethroned mid-turn.
+   * No-op without an active ledger lane for the session.
+   */
+  touchRuntimeActivity(sessionKey: string): void {
+    if (this.ledgerDisabled) return;
+    const laneKey = this.sessionActiveLanes.get(sessionKey);
+    if (laneKey) this.laneLedger?.renewByKey(laneKey);
+  }
+
+  /** Sessions whose in-flight turn surfaced a runtime error event. */
+  private turnErrorSessions = new Set<string>();
+
+  /**
+   * Consume (read-and-clear) the error marker for sessionKey's last turn.
+   * Feeds complete's turn_outcome so an error turn's lane members are
+   * released for retry instead of no_action-swept (design §3). Consuming
+   * (rather than peeking) keeps one-shot fork session keys from accumulating
+   * in the set forever.
+   */
+  consumeTurnError(sessionKey: string): boolean {
+    return this.turnErrorSessions.delete(sessionKey);
+  }
+
   private async emitDispatchReceived(event: ParallEvent): Promise<void> {
     const sourceType = event.ackSourceType ?? (event.type === 'task' ? 'task_activity' : 'message');
     const sourceId = event.ackSourceId ?? event.messageId;
@@ -693,7 +732,7 @@ export class ParallAgentGateway {
     earlier: ParallEvent[];
     captureText?: string[];
     hasMoreLocal: () => boolean;
-  }): Promise<'dispatched' | 'foreign' | 'shutdown'> {
+  }): Promise<'dispatched' | 'foreign' | 'shutdown' | 'failed'> {
     return dispatchLaneGroup(this.laneFlowHost(), opts);
   }
 
@@ -1137,6 +1176,7 @@ export class ParallAgentGateway {
     }
 
     resetDispatchMetrics(sessionKey);
+    this.turnErrorSessions.delete(sessionKey);
     return runWithSessionKey(sessionKey, async () => {
       let dispatchSpan: ReturnType<typeof startDispatchSpan> = null;
 
@@ -1299,6 +1339,9 @@ export class ParallAgentGateway {
           ) {
             recordMessageSend(sessionKey, !runtimeEvent.error);
           }
+          if (runtimeEvent.type === 'error') {
+            this.turnErrorSessions.add(sessionKey);
+          }
           await this.createRuntimeStep(
             binding.agentSessionId,
             event,
@@ -1495,13 +1538,29 @@ export class ParallAgentGateway {
               body: buildForkScopePrefix(last) + buildEventBody(last),
               earlier,
               captureText: batchText,
-              hasMoreLocal: () => fork.queue.length > 0,
+              // Per-LANE residue check (parity with the main-buffer path):
+              // the fork queue can hold several lanes (channel + thread of
+              // the same chat). A whole-queue check would defer THIS lane's
+              // complete behind another lane's items and never revisit it —
+              // its members would sit received until lease expiry.
+              hasMoreLocal: () =>
+                fork.queue.some(
+                  (it) => this.dispatchGroupKey(it.event) === this.dispatchGroupKey(last),
+                ),
             });
             if (outcome === 'foreign') {
               // Another pod owns the lane — the events stay pending server-side.
               for (const item of items) item.resolve(false);
               break;
             }
+            if (outcome === 'failed') {
+              // Error turn: complete(error) already released the members for
+              // redelivery. Do NOT push them to processedEvents — the redrive
+              // must not arrive wearing an "already handled" prefix. Keep
+              // draining; the released work rejoins the next claim.
+              for (const item of items) item.resolve(false);
+              continue;
+            }
             dispatched = outcome === 'dispatched';
           } else {
             dispatched = await this.runDispatch(
@@ -1542,6 +1601,10 @@ export class ParallAgentGateway {
         remaining.resolve(false);
       }
     } finally {
+      // One-shot fork keys are never dispatched again — drop any error marker
+      // the legacy (non-ledger) path left unconsumed, or the set grows with
+      // every failed ephemeral fork.
+      this.turnErrorSessions.delete(fork.fork.sessionKey);
       if (fork.deadlineTimer) {
         clearTimeout(fork.deadlineTimer);
         fork.deadlineTimer = null;
@@ -1654,7 +1717,7 @@ export class ParallAgentGateway {
           this.opts.runtimeKey,
         );
         if (this.usesLaneLedger(event)) {
-          let outcome: 'dispatched' | 'foreign' | 'shutdown';
+          let outcome: 'dispatched' | 'foreign' | 'shutdown' | 'failed';
           try {
             outcome = await this.dispatchLaneGroup({
               events,
@@ -1681,6 +1744,13 @@ export class ParallAgentGateway {
             this.dispatchState.pendingForkResults.unshift(...pendingFork);
             continue;
           }
+          if (outcome === 'failed') {
+            // Error turn settled with complete(error) — members released for
+            // redelivery. The fork results were not consumed by the failed
+            // turn; keep them for the next real dispatch.
+            this.dispatchState.pendingForkResults.unshift(...pendingFork);
+            continue;
+          }
           // Dispatched — resolution happened server-side (reply cover or
           // no_action sweep); no legacy acks.
           continue;
@@ -1769,7 +1839,7 @@ export class ParallAgentGateway {
         if (this.usesLaneLedger(event)) {
           // Ledger flow: claim replaces mark-received; complete/reply replace
           // acks. A foreign incumbent leaves the event pending for re-drive.
-          let outcome: 'dispatched' | 'foreign' | 'shutdown' = 'shutdown';
+          let outcome: 'dispatched' | 'foreign' | 'shutdown' | 'failed' = 'shutdown';
           try {
             try {
               outcome = await this.dispatchLaneGroup({
@@ -1840,10 +1910,17 @@ export class ParallAgentGateway {
           // fold leaves the event buffered — the drain claims it as its own
           // turn. Injection requires an exact lane match (same chat AND same
           // thread) — a thread message never rides a channel turn.
+          // The adapter-capability check comes BEFORE the fold: on a
+          // buffer-only adapter (openclaw — no enqueueDuringDispatch) a
+          // folded-but-never-injected member would be broad-covered by the
+          // current turn's reply without the model ever seeing it. Leaving
+          // the event un-folded keeps it buffered; the drain claims it as
+          // its own turn and folds it there.
           if (
             this.mainCurrentGroupKey === this.dispatchGroupKey(event) &&
+            this.opts.dispatchAdapter.enqueueDuringDispatch != null &&
             (await this.laneLedger?.steerLive(event)) &&
-            (await this.opts.dispatchAdapter.enqueueDuringDispatch?.(
+            (await this.opts.dispatchAdapter.enqueueDuringDispatch(
               this.opts.runtimeKey,
               buildEventBody(event),
             ))
@@ -1892,14 +1969,21 @@ export class ParallAgentGateway {
           return false;
         }
 
-        try {
-          await this.emitDispatchReceived(event);
-        } catch (err) {
-          this.opts.log?.warn?.(
-            `mark-received failed for fork dispatch, leaving unacked for retry: ${String(err)}`,
-          );
-          this.dispatchState.mainBuffer.push(event);
-          return false;
+        // Ledger-managed events must never touch the legacy received surface
+        // — the fork's lane claim marks them received. A mark-received here
+        // outruns the claim, strands the row ownerless, and the chat goes
+        // silent (the 0713 black hole; dispatch-convergence-design.md §6).
+        // This was the only unguarded call site of the three.
+        if (!this.usesLaneLedger(event)) {
+          try {
+            await this.emitDispatchReceived(event);
+          } catch (err) {
+            this.opts.log?.warn?.(
+              `mark-received failed for fork dispatch, leaving unacked for retry: ${String(err)}`,
+            );
+            this.dispatchState.mainBuffer.push(event);
+            return false;
+          }
         }
         const fork = await this.opts.dispatchAdapter.forkSession({
           sessionKey: this.opts.runtimeKey,

package/src/gateway-lane-flow.ts

@@ -37,6 +37,8 @@ export interface LaneFlowHost {
   disableLedger(reason: string): void;
   usesLaneLedger(event: ParallEvent): boolean;
   emitDispatchReceived(event: ParallEvent): Promise<void>;
+  consumeTurnError(sessionKey: string): boolean;
+  noteSessionLane(sessionKey: string, laneKey: string | null): void;
   runDispatch(
     event: ParallEvent,
     sessionKey: string,
@@ -68,7 +70,7 @@ export async function dispatchLaneGroup(
     captureText?: string[];
     hasMoreLocal: () => boolean;
   },
-): Promise<'dispatched' | 'foreign' | 'shutdown'> {
+): Promise<'dispatched' | 'foreign' | 'shutdown' | 'failed'> {
   const ledger = host.laneLedger!;
   const event = opts.events[opts.events.length - 1];
   let lane: Awaited<ReturnType<LaneLedger['ensureLane']>>;
@@ -106,6 +108,9 @@ export async function dispatchLaneGroup(
     }
     return 'foreign';
   }
+  // Register the session's active lane so external activity signals
+  // (touchRuntimeActivity from adapter hooks) renew exactly this lane.
+  host.noteSessionLane(opts.sessionKey, lane.laneKey);
   let dispatched = false;
   try {
     dispatched = await host.runDispatch(
@@ -118,13 +123,50 @@ export async function dispatchLaneGroup(
   } catch (err) {
     // Failed turn: hand the members back so the retry (this pod or the
     // next) re-claims immediately instead of waiting out the lease.
+    host.noteSessionLane(opts.sessionKey, null);
     await ledger.release(lane.laneKey).catch(() => {});
     throw err;
+  } finally {
+    if (dispatched) host.noteSessionLane(opts.sessionKey, null);
   }
   if (!dispatched) {
     // Shutdown short-circuit — shutdown() releases all active lanes.
     return 'shutdown';
   }
+  if (host.consumeTurnError(opts.sessionKey)) {
+    // An error turn must not no_action-sweep its members — settle the lane
+    // NOW with an error complete so they release for retry on the redrive
+    // budget (dispatch-convergence-design.md §3). Settling immediately (even
+    // with same-lane work still buffered) is deliberate: carrying the error
+    // across buffered turns would let a later reply broad-cover the failed
+    // member, or requeue the later turn's successful work. Released members
+    // rejoin the next claim, merged with whatever was buffered. Dropping the
+    // local dedupe claims lets the server's re-drive hint retrigger the
+    // messages immediately instead of waiting out the renotify pacing.
+    ledger.markTurnError(lane.laneKey);
+    // Clear dedupe for EVERY lane member, not just this batch: an earlier
+    // successful batch may have deferred its complete via hasMoreLocal, so
+    // the error complete below releases those members too — their redrive
+    // would be permanently blocked by a stale local claim.
+    for (const msgId of lane.folded.keys()) {
+      host.dispatchedMessages.delete(msgId);
+    }
+    // Invalidate any armed steer state before settling: a pending injection
+    // left over from the failed turn would make the retry claim enter the
+    // "already injected" path, produce an empty turn, and no_action-sweep the
+    // released members without ever retrying them. abortDispatch is the
+    // adapter contract's idempotent "clear pending steer state" hook.
+    try {
+      host.opts.dispatchAdapter.abortDispatch?.(opts.sessionKey);
+    } catch {
+      // best-effort — a throwing abort must not block the error settlement
+    }
+    await ledger.completeIfIdle(lane.laneKey, false);
+    // 'failed' — callers must NOT record these events as handled: the server
+    // just released them for redelivery, and an "already handled" fork prefix
+    // (or a consumed fork summary) on the redrive would be a lie.
+    return 'failed';
+  }
   const pendingInjections =
     host.opts.dispatchAdapter.hasPendingInjections?.(opts.sessionKey) ?? false;
   await ledger.completeIfIdle(lane.laneKey, pendingInjections || opts.hasMoreLocal());

package/src/lane-ledger.ts

@@ -19,6 +19,13 @@ export type ActiveLane = {
   /** Lease expiry (ms epoch) and TTL from the claim — renewal pacing state. */
   leaseUntilMs?: number;
   leaseTtlMs?: number;
+  /**
+   * Sticky error bit: some turn on this lane surfaced a runtime error. Read
+   * (and only cleared) by the lane's final complete, so an error outcome
+   * survives buffered same-lane turns in between — a later successful turn
+   * must not no_action-sweep the failed turn's members.
+   */
+  turnError?: boolean;
 };
 
 /**
@@ -122,9 +129,19 @@ export class LaneLedger {
         throw err;
       }
       if (!res.claimed || !res.lane) {
-        this.opts.log?.info(
-          `lane for ${targetUri} held by a healthy incumbent — leaving events pending for re-drive`,
-        );
+        if (res.reason === 'empty') {
+          // Nothing foldable: resolved elsewhere, or stranded outside the
+          // ledger (the reconciler reclaims strays past the received TTL).
+          // Post-convergence this should not happen on a message lane — warn
+          // so a regression surfaces (design §3).
+          this.opts.log?.warn(
+            `claim for ${targetUri} came back empty — nothing foldable; leaving to the reconciler`,
+          );
+        } else {
+          this.opts.log?.info(
+            `lane for ${targetUri} held by a healthy incumbent — leaving events pending for re-drive`,
+          );
+        }
         return null;
       }
       const leaseUntilMs = Date.parse(res.lease_until ?? '');
@@ -218,6 +235,18 @@ export class LaneLedger {
    * re-drives any same-target pending work. A STALE_LANE answer means a
    * takeover already owns the resource — local state is dropped either way.
    */
+  /**
+   * Record that the turn on this lane surfaced a runtime error. The flow
+   * settles an errored lane immediately (dispatchLaneGroup returns 'failed'
+   * after a forced complete), so the bit normally lives for one turn only —
+   * it is the transport between the gateway's per-session error signal and
+   * this lane's complete request.
+   */
+  markTurnError(laneKey: string): void {
+    const lane = this.lanes.get(laneKey);
+    if (lane) lane.turnError = true;
+  }
+
   async completeIfIdle(laneKey: string, hasMoreLocal: boolean): Promise<void> {
     const lane = this.lanes.get(laneKey);
     if (!lane || hasMoreLocal) return;
@@ -228,6 +257,9 @@ export class LaneLedger {
         lane: lane.lane,
         target_uri: lane.targetUri,
         thread_root_id: lane.threadRootId,
+        // An error turn releases its members for retry instead of sweeping
+        // them as handled (ignored by older servers).
+        turn_outcome: lane.turnError ? 'error' : 'ok',
       });
       if (res.swept_no_action > 0 || res.redriven) {
         this.opts.log?.info(
@@ -244,6 +276,17 @@ export class LaneLedger {
     }
   }
 
+  /**
+   * Renew one lane by its key — the external runtime-activity hook for
+   * adapters whose tool traffic bypasses the RuntimeEvent stream (openclaw
+   * hooks). Scoped to the session's own lane: renewing every lane would let
+   * one busy fork keep an unrelated stalled fork's lane leased forever.
+   */
+  renewByKey(laneKey: string): void {
+    const lane = this.lanes.get(laneKey);
+    if (lane) this.maybeRenew(lane);
+  }
+
   /**
    * Long-turn keepalive: renew the lane's lease on runtime activity, throttled
    * so a chatty turn doesn't spam the server. Without this, a legitimately