@parall/claude-agent 1.65.0 → 1.66.0

package/dist/dispatch.d.ts

@@ -89,19 +89,19 @@ export declare class ClaudeCodeAdapter implements DispatchAdapter {
     abortDispatch(sessionKey: string): void;
     hasPendingInjections(sessionKey: string): boolean;
     hasUnsettledInjections(sessionKey: string): boolean;
+    isInjectionLive(sessionKey: string, deliveryKey: string): boolean;
     /**
      * The gateway discarded the buffered copy of an injection without a
-     * dispatch(). A settled injection only owes bookkeeping. One that has NOT
-     * settled is an orphan: nothing will ever drain it, and the CLI does not
-     * start a queued input on its own once the turn it was steered into has
-     * ended — it works its queue only when the next stdin frame arrives, which
-     * would be the batch re-delivering this very member (prod 2026-09-03: lane
-     * dethroned after 10 idle minutes, then "refusing duplicate stdin write"
-     * on every retry). Withdraw it: kill the process (the session survives via
-     * --resume), report the input failed so the server releases the member,
-     * and let the gateway run it as a real turn.
+     * dispatch(). A settled injection only owes bookkeeping. A live one never
+     * reaches here (the gateway attaches to it via isInjectionLive); if one
+     * does, it is left registered — byCommand must keep routing its lifecycle
+     * frames and its terminal state drops it (see apply/fail) — and the
+     * anomaly is logged. Killing it is not an option: Claude Code starts a
+     * queued input on its own once the turn it was steered into ends, and the
+     * server, having recorded that `started` as delivered, would never re-run
+     * it (2026-09-17 prod loss).
      */
-    acknowledgeDiscardedInjection(sessionKey: string, deliveryKey: string): Promise<DiscardedInjectionOutcome>;
+    acknowledgeDiscardedInjection(sessionKey: string, deliveryKey: string): DiscardedInjectionOutcome;
     dispatch({ event, bodyForAgent, sessionKey, context, inputLifecycle, noteActivity, }: DispatchOpts): AsyncIterable<RuntimeEvent>;
     getBranchPoint(_sessionKey: string): string | undefined;
     getSessionHistoryPath(sessionKey: string): string | undefined;

package/dist/dispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,eAAe,EACf,WAAW,EACX,aAAa,EACb,yBAAyB,EACzB,eAAe,EACf,sBAAsB,EACtB,YAAY,EACZ,QAAQ,EACR,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,YAAY,EACb,MAAM,oBAAoB,CAAC;AAQ5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAA4B,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAErF,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACtF,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAG/C,OAAO,EAAE,aAAa,EAAE,CAAC;AAEzB,KAAK,wBAAwB,GAAG,IAAI,CAClC,iBAAiB,EACf,gBAAgB,GAChB,aAAa,GACb,cAAc,GACd,oBAAoB,GACpB,WAAW,GACX,YAAY,GACZ,iBAAiB,GACjB,OAAO,GACP,gBAAgB,GAChB,cAAc,CACjB,GAAG;IACF,cAAc,EAAE,oBAAoB,CAAC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yBAAyB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,CAAC;IAC3D,iDAAiD;IACjD,wBAAwB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,CAAC;IAC1D;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB;IACjB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,CAAC;AAqBF;;;;;;;;;GASG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,OAAO,CAAC;IACd,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,GAAG,CAAC,EAAE,aAAa,CAAC;CACrB,CAAC;AAEF,qBAAa,iBAAkB,YAAW,eAAe;IAe3C,OAAO,CAAC,QAAQ,CAAC,IAAI;IAdjC,QAAQ,CAAC,kBAAkB,EAAG,UAAU,CAAU;IAClD,QAAQ,CAAC,mBAAmB,EAAG,SAAS,CAAU;IAClD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmC;IAC7D,uGAAuG;IACvG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA2B;IACpD,OAAO,CAAC,eAAe,CAAC,CAAgB;IACxC,OAAO,CAAC,qBAAqB,CAAC,CAAsB;IACpD,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsB;IAC/C,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,cAAc,CAAqB;IAC3C,OAAO,CAAC,UAAU,CAAqB;gBAEV,IAAI,EAAE,wBAAwB;IAO3D,IAAI,YAAY,IAAI,MAAM,GAAG,SAAS,CAErC;IACD,IAAI,aAAa,IAAI,MAAM,GAAG,SAAS,CAEtC;IACD,YAAY,CAAC,MAAM,EAAE;QACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,GAAG,IAAI;IAqBR,qBAAqB,IAAI,IAAI;IAQ7B,wBAAwB,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,GAAG,MAAM,IAAI;IAIpF,SAAS,CAAC,GAAG,SAAa,GAAG,gBAAgB;IAU7C,MAAM,CAAC,GAAG,SAAa,GAAG,OAAO;IAIjC,qBAAqB,CACnB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,cAAc,CAAC,EAAE,sBAAsB,GACtC,OAAO;IA2BV,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAqBvC,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAMjD,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAMnD;;;;;;;;;;;OAWG;IACG,6BAA6B,CACjC,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,yBAAyB,CAAC;IA+B9B,QAAQ,CAAC,EACd,KAAK,EACL,YAAY,EACZ,UAAU,EACV,OAAO,EACP,cAAc,EACd,YAAY,GACb,EAAE,YAAY,GAAG,aAAa,CAAC,YAAY,CAAC;IAyD7C,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIvD,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAc7D,WAAW,CAAC,EAAE,UAAU,EAAE,EAAE,QAAQ;IAIpC,WAAW,CAAC,EAAE,IAAI,EAAE,EAAE,eAAe;IAQrC,cAAc,IAAI,IAAI;IAahB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAU/B,OAAO,CAAC,GAAG;YAII,OAAO;IA4CtB,sFAAsF;IACtF,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC;IAelD,OAAO,CAAC,uBAAuB;IAa/B;;;;;OAKG;YACW,sBAAsB;IAwCpC;;;;;OAKG;YACY,eAAe;IA8C9B;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB;IAkBzB,OAAO,CAAC,aAAa;IA0ErB,OAAO,CAAC,YAAY;IA+DpB,gFAAgF;IAChF,OAAO,CAAC,WAAW;IAenB,OAAO,CAAC,QAAQ;IAQhB,OAAO,CAAC,eAAe;IAavB,OAAO,CAAC,oBAAoB;IAU5B,OAAO,CAAC,gBAAgB;IAaxB,OAAO,CAAC,SAAS;IAwCjB,OAAO,CAAC,uBAAuB;CAmBhC"}
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,eAAe,EACf,WAAW,EACX,aAAa,EACb,yBAAyB,EACzB,eAAe,EACf,sBAAsB,EACtB,YAAY,EACZ,QAAQ,EACR,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,YAAY,EACb,MAAM,oBAAoB,CAAC;AAQ5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAA4B,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAErF,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACtF,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAG/C,OAAO,EAAE,aAAa,EAAE,CAAC;AAEzB,KAAK,wBAAwB,GAAG,IAAI,CAClC,iBAAiB,EACf,gBAAgB,GAChB,aAAa,GACb,cAAc,GACd,oBAAoB,GACpB,WAAW,GACX,YAAY,GACZ,iBAAiB,GACjB,OAAO,GACP,gBAAgB,GAChB,cAAc,CACjB,GAAG;IACF,cAAc,EAAE,oBAAoB,CAAC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yBAAyB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,CAAC;IAC3D,iDAAiD;IACjD,wBAAwB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,CAAC;IAC1D;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB;IACjB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,CAAC;AAqBF;;;;;;;;;GASG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,OAAO,CAAC;IACd,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,GAAG,CAAC,EAAE,aAAa,CAAC;CACrB,CAAC;AAEF,qBAAa,iBAAkB,YAAW,eAAe;IAe3C,OAAO,CAAC,QAAQ,CAAC,IAAI;IAdjC,QAAQ,CAAC,kBAAkB,EAAG,UAAU,CAAU;IAClD,QAAQ,CAAC,mBAAmB,EAAG,SAAS,CAAU;IAClD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmC;IAC7D,uGAAuG;IACvG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA2B;IACpD,OAAO,CAAC,eAAe,CAAC,CAAgB;IACxC,OAAO,CAAC,qBAAqB,CAAC,CAAsB;IACpD,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsB;IAC/C,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,cAAc,CAAqB;IAC3C,OAAO,CAAC,UAAU,CAAqB;gBAEV,IAAI,EAAE,wBAAwB;IAO3D,IAAI,YAAY,IAAI,MAAM,GAAG,SAAS,CAErC;IACD,IAAI,aAAa,IAAI,MAAM,GAAG,SAAS,CAEtC;IACD,YAAY,CAAC,MAAM,EAAE;QACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,GAAG,IAAI;IAqBR,qBAAqB,IAAI,IAAI;IAQ7B,wBAAwB,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,GAAG,MAAM,IAAI;IAIpF,SAAS,CAAC,GAAG,SAAa,GAAG,gBAAgB;IAU7C,MAAM,CAAC,GAAG,SAAa,GAAG,OAAO;IAIjC,qBAAqB,CACnB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,cAAc,CAAC,EAAE,sBAAsB,GACtC,OAAO;IA2BV,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAqBvC,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAMjD,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAMnD,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO;IASjE;;;;;;;;;;OAUG;IACH,6BAA6B,CAC3B,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,yBAAyB;IAgBrB,QAAQ,CAAC,EACd,KAAK,EACL,YAAY,EACZ,UAAU,EACV,OAAO,EACP,cAAc,EACd,YAAY,GACb,EAAE,YAAY,GAAG,aAAa,CAAC,YAAY,CAAC;IAyD7C,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIvD,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAc7D,WAAW,CAAC,EAAE,UAAU,EAAE,EAAE,QAAQ;IAIpC,WAAW,CAAC,EAAE,IAAI,EAAE,EAAE,eAAe;IAQrC,cAAc,IAAI,IAAI;IAahB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAU/B,OAAO,CAAC,GAAG;YAII,OAAO;IA4CtB,sFAAsF;IACtF,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC;IAelD,OAAO,CAAC,uBAAuB;IAa/B;;;;;OAKG;YACW,sBAAsB;IAwCpC;;;;;OAKG;YACY,eAAe;IA8C9B;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB;IAkBzB,OAAO,CAAC,aAAa;IA0ErB,OAAO,CAAC,YAAY;IA+DpB,gFAAgF;IAChF,OAAO,CAAC,WAAW;IAenB,OAAO,CAAC,QAAQ;IAQhB,OAAO,CAAC,eAAe;IAavB,OAAO,CAAC,oBAAoB;IAU5B,OAAO,CAAC,gBAAgB;IAaxB,OAAO,CAAC,SAAS;IAwCjB,OAAO,CAAC,uBAAuB;CAmBhC"}

package/dist/dispatch.js

@@ -170,38 +170,34 @@ export class ClaudeCodeAdapter {
             return false;
         return state.inputs.hasUnsettledInjections();
     }
+    isInjectionLive(sessionKey, deliveryKey) {
+        const state = this.processes.get(sessionKey);
+        if (!state || state.done)
+            return false;
+        const delivery = state.inputs.getByKey(deliveryKey);
+        if (!delivery || delivery.terminal)
+            return false;
+        const { proc } = state.handle;
+        return proc.exitCode === null && proc.signalCode === null;
+    }
     /**
      * The gateway discarded the buffered copy of an injection without a
-     * dispatch(). A settled injection only owes bookkeeping. One that has NOT
-     * settled is an orphan: nothing will ever drain it, and the CLI does not
-     * start a queued input on its own once the turn it was steered into has
-     * ended — it works its queue only when the next stdin frame arrives, which
-     * would be the batch re-delivering this very member (prod 2026-09-03: lane
-     * dethroned after 10 idle minutes, then "refusing duplicate stdin write"
-     * on every retry). Withdraw it: kill the process (the session survives via
-     * --resume), report the input failed so the server releases the member,
-     * and let the gateway run it as a real turn.
+     * dispatch(). A settled injection only owes bookkeeping. A live one never
+     * reaches here (the gateway attaches to it via isInjectionLive); if one
+     * does, it is left registered — byCommand must keep routing its lifecycle
+     * frames and its terminal state drops it (see apply/fail) — and the
+     * anomaly is logged. Killing it is not an option: Claude Code starts a
+     * queued input on its own once the turn it was steered into ends, and the
+     * server, having recorded that `started` as delivered, would never re-run
+     * it (2026-09-17 prod loss).
      */
-    async acknowledgeDiscardedInjection(sessionKey, deliveryKey) {
+    acknowledgeDiscardedInjection(sessionKey, deliveryKey) {
         const state = this.processes.get(sessionKey);
         if (!state)
             return 'discarded';
         const delivery = state.inputs.getByKey(deliveryKey);
         if (delivery && !delivery.terminal) {
-            state.log?.warn?.(`withdrawing orphaned Claude input ${delivery.commandUuid} (${delivery.reportedState ?? 'queued'}) on ${sessionKey}: its buffered copy was discarded before the CLI settled it${state.pump.hasOwnWork() ? '; the runtime-initiated turn dies with the process' : ''}`);
-            await this.killProcess(sessionKey, state);
-            state.inputs.discardBookkeeping(deliveryKey);
-            // 'cancelled' only when the server confirmed the failed receipt: the
-            // member is released and un-folded, so the gateway can re-fold and run
-            // it locally. A lost receipt (reportedState never reached 'failed') or
-            // a 'settled' answer (a reply effect already resolved the member)
-            // leaves nothing to re-run here — the lane complete releases an unread
-            // member for re-drive instead.
-            const confirmed = delivery.reportedState === 'failed' && delivery.terminal === 'failed';
-            if (!confirmed) {
-                state.log?.warn?.(`withdrawal of Claude input ${delivery.commandUuid} was not confirmed by the server (${delivery.terminal}); leaving the member to the lane complete`);
-            }
-            return confirmed ? 'cancelled' : 'discarded';
+            state.log?.warn?.(`buffered copy of Claude input ${delivery.commandUuid} (${delivery.reportedState ?? 'queued'}) on ${sessionKey} discarded while still live — keeping its registration; the runtime runs it as its own turn`);
         }
         state.inputs.discardBookkeeping(deliveryKey);
         // The discarded copy may have been the last thing a lazy restart was

package/dist/input-lifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"input-lifecycle.d.ts","sourceRoot":"","sources":["../src/input-lifecycle.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEnG,OAAO,EACL,KAAK,cAAc,EAGnB,KAAK,YAAY,EAClB,MAAM,gBAAgB,CAAC;AAExB,MAAM,MAAM,mBAAmB,GAAG;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC9C,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,YAAY,EAAE,OAAO,CAAC;IACtB,kFAAkF;IAClF,IAAI,EAAE,cAAc,CAAC;IACrB,uEAAuE;IACvE,QAAQ,EAAE,YAAY,CAAC;IACvB,6FAA6F;IAC7F,YAAY,CAAC,EAAE,MAAM,IAAI,CAAC;IAC1B,8DAA8D;IAC9D,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC;AAEF;;;;GAIG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0C;IAChE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0C;IAEpE,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS;IAI9D,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS;IAIlE,eAAe,CAAC,gBAAgB,EAAE,MAAM,EAAE,GAAG,mBAAmB,GAAG,SAAS;IAU5E,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,CAAC;IAI/C,oBAAoB,IAAI,OAAO;IAI/B;;;;;;;;;OASG;IACH,sBAAsB,IAAI,OAAO;IAIjC,QAAQ,CACN,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,sBAAsB,GAAG,SAAS,EAC7C,QAAQ,EAAE,OAAO,EACjB,YAAY,CAAC,EAAE,MAAM,IAAI,EACzB,GAAG,CAAC,EAAE,aAAa,GAClB,mBAAmB;IAsBtB,MAAM,CAAC,QAAQ,EAAE,mBAAmB,GAAG,IAAI;IAY3C;;;;;;;;OAQG;IACH,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAOvC,KAAK,CACT,QAAQ,EAAE,mBAAmB,EAC7B,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,GACpE,OAAO,CAAC,IAAI,CAAC;IA0BV,IAAI,CAAC,QAAQ,EAAE,mBAAmB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA6BnE,cAAc,CAClB,QAAQ,EAAE,mBAAmB,EAC7B,GAAG,CAAC,EAAE,aAAa,EACnB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAUV,iBAAiB,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAO7E"}
+{"version":3,"file":"input-lifecycle.d.ts","sourceRoot":"","sources":["../src/input-lifecycle.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEnG,OAAO,EACL,KAAK,cAAc,EAGnB,KAAK,YAAY,EAClB,MAAM,gBAAgB,CAAC;AAExB,MAAM,MAAM,mBAAmB,GAAG;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC9C,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,YAAY,EAAE,OAAO,CAAC;IACtB,kFAAkF;IAClF,IAAI,EAAE,cAAc,CAAC;IACrB,uEAAuE;IACvE,QAAQ,EAAE,YAAY,CAAC;IACvB,6FAA6F;IAC7F,YAAY,CAAC,EAAE,MAAM,IAAI,CAAC;IAC1B,8DAA8D;IAC9D,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC;AAEF;;;;GAIG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0C;IAChE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0C;IAEpE,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS;IAI9D,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS;IAIlE,eAAe,CAAC,gBAAgB,EAAE,MAAM,EAAE,GAAG,mBAAmB,GAAG,SAAS;IAU5E,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,CAAC;IAI/C,oBAAoB,IAAI,OAAO;IAI/B;;;;;;;;;OASG;IACH,sBAAsB,IAAI,OAAO;IAIjC,QAAQ,CACN,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,sBAAsB,GAAG,SAAS,EAC7C,QAAQ,EAAE,OAAO,EACjB,YAAY,CAAC,EAAE,MAAM,IAAI,EACzB,GAAG,CAAC,EAAE,aAAa,GAClB,mBAAmB;IAsBtB,MAAM,CAAC,QAAQ,EAAE,mBAAmB,GAAG,IAAI;IAY3C;;;;;;;;OAQG;IACH,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAOvC,KAAK,CACT,QAAQ,EAAE,mBAAmB,EAC7B,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,GACpE,OAAO,CAAC,IAAI,CAAC;IA0BV,IAAI,CAAC,QAAQ,EAAE,mBAAmB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiCnE,cAAc,CAClB,QAAQ,EAAE,mBAAmB,EAC7B,GAAG,CAAC,EAAE,aAAa,EACnB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAUV,iBAAiB,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAO7E"}

package/dist/input-lifecycle.js

@@ -136,7 +136,11 @@ export class ClaudeInputRegistry {
                     detail: detail ?? classified.detail ?? 'Claude input failed',
                 });
                 delivery.reportedState = 'failed';
-                delivery.terminal = result?.retry === false ? 'settled' : 'failed';
+                // 'settled' only when the server answered and released nothing (a
+                // delivered or reply-resolved member); an unconfirmed receipt is not
+                // a settlement.
+                delivery.terminal =
+                    result && !result.pending && result.retry === false ? 'settled' : 'failed';
             }
         }
         finally {

package/dist/turn-outcome.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"turn-outcome.d.ts","sourceRoot":"","sources":["../src/turn-outcome.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAa,MAAM,oBAAoB,CAAC;AACtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAwC3D,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,GAAG,MAAM,GAAG,SAAS,CA8ChF;AAcD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,gBAAgB,GAAG,SAAS,EAClC,WAAW,EAAE,MAAM,EAAE,EACrB,GAAG,GAAE,IAAiB,GACrB,gBAAgB,CAkElB"}
+{"version":3,"file":"turn-outcome.d.ts","sourceRoot":"","sources":["../src/turn-outcome.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAa,MAAM,oBAAoB,CAAC;AACtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAgD3D,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,GAAG,MAAM,GAAG,SAAS,CA8ChF;AAcD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,gBAAgB,GAAG,SAAS,EAClC,WAAW,EAAE,MAAM,EAAE,EACrB,GAAG,GAAE,IAAiB,GACrB,gBAAgB,CA8ElB"}

package/dist/turn-outcome.js

@@ -5,13 +5,20 @@
  * (api_error_status / terminal_reason / is_error), behavioral heuristics
  * second (zero-usage synthetic turns), message regex last — and regex only
  * ever refines a classification, so a CLI wording change degrades to the
- * generic `api_error`, never to a wrong `ok` or a wrong deferral.
+ * generic `transient`, never to a wrong `ok` or a wrong deferral.
  * Classification uncertainty must never defer: deferring a real message is
  * costlier than losing one automatic recovery.
  */
 const LIMIT_TEXT = /you'?ve (hit|reached) your .*limit|usage limit reached|weekly limit/i;
-const AUTH_TEXT = /not logged in|please run \/login|authentication_error|invalid api key|oauth token (has )?expired|\[action required\]/i;
+const AUTH_TEXT = /not logged in|please run \/login|authentication_error|authentication_failed|failed to authenticate|invalid api key|oauth (token|session) (has )?expired|\[action required\]/i;
 const CONTEXT_TEXT = /prompt is too long|context (window|length) exceeded|request too large/i;
+// A positively identified per-minute rate limit (agent-runtime-state-model-
+// design.md §7.1): the API's own error type, never a plan / subscription
+// limit notice. Only this wording moves a 429 off the deferred path.
+const RATE_LIMIT_ERROR_TEXT = /rate_limit_error/i;
+// Exhausted balance / quota (402): the sender must top up — an error, not a
+// wait, so it takes the same path as auth.
+const QUOTA_TEXT = /credit balance is too low|insufficient credits|insufficient_quota|payment required/i;
 const DETAIL_MAX = 500;
 /**
  * Parse the reset time out of a limit notice like
@@ -136,9 +143,23 @@ export function classifyClaudeTurn(meta, noticeTexts, now = new Date()) {
     // 1) Structured HTTP status.
     if (meta.apiErrorStatus === 401 || meta.apiErrorStatus === 403)
         return withDetail('auth');
+    if (meta.apiErrorStatus === 402)
+        return withDetail('quota_exhausted');
     if (meta.apiErrorStatus === 413)
         return withDetail('context_overflow');
     if (meta.apiErrorStatus === 429) {
+        // A provider that answers an exhausted balance with 429 (OpenAI-style
+        // `insufficient_quota`) is a top-up problem, never a wait: quota
+        // evidence outranks both 429 readings below.
+        if (QUOTA_TEXT.test(evidence))
+            return withDetail('quota_exhausted');
+        // The CLI exposes only the status: a 429 that positively names the
+        // API's rate_limit_error is a short-backoff transient; every other 429
+        // (plan limits, no discernible text) stays a deferral — a wrong
+        // deferral costs a wait, a wrong "transient" on a real plan limit costs
+        // three fast retries and a dead letter.
+        if (RATE_LIMIT_ERROR_TEXT.test(evidence))
+            return withDetail('transient');
         return withDetail('usage_limit', evidence ? parseClaudeResetTime(evidence, now) : undefined);
     }
     // 2) Text families — refine only; they can never turn a failure into ok.
@@ -158,6 +179,8 @@ export function classifyClaudeTurn(meta, noticeTexts, now = new Date()) {
     if (failed || syntheticQuiet || noticeTexts.length > 0) {
         if (CONTEXT_TEXT.test(evidence))
             return withDetail('context_overflow');
+        if (QUOTA_TEXT.test(evidence))
+            return withDetail('quota_exhausted');
         if (LIMIT_TEXT.test(evidence)) {
             return withDetail('usage_limit', parseClaudeResetTime(evidence, now));
         }
@@ -165,9 +188,9 @@ export function classifyClaudeTurn(meta, noticeTexts, now = new Date()) {
             return withDetail('auth');
         // Reached only when this block was entered (failed / syntheticQuiet /
         // a captured synthetic notice) but no text family matched. A CLI wording
-        // change must degrade to api_error — never fall through to `ok` and settle
-        // a refused turn as success (the read-no-reply class this PR closes).
-        return withDetail('api_error');
+        // change must degrade to transient — never fall through to `ok` and
+        // settle a refused turn as success (the read-no-reply class).
+        return withDetail('transient');
     }
     return { ...base, outcome: 'ok' };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parall/claude-agent",
-  "version": "1.65.0",
+  "version": "1.66.0",
   "description": "Claude Code bridge runtime for self-hosted Parall agents",
   "license": "MIT",
   "repository": {
@@ -25,9 +25,9 @@
     "src"
   ],
   "dependencies": {
-    "@parall/agent-core": "1.65.0",
-    "@parall/cli": "1.65.0",
-    "@parall/sdk": "1.65.0"
+    "@parall/agent-core": "1.66.0",
+    "@parall/cli": "1.66.0",
+    "@parall/sdk": "1.66.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/src/dispatch.ts

@@ -262,44 +262,37 @@ export class ClaudeCodeAdapter implements DispatchAdapter {
     return state.inputs.hasUnsettledInjections();
   }
 
+  isInjectionLive(sessionKey: string, deliveryKey: string): boolean {
+    const state = this.processes.get(sessionKey);
+    if (!state || state.done) return false;
+    const delivery = state.inputs.getByKey(deliveryKey);
+    if (!delivery || delivery.terminal) return false;
+    const { proc } = state.handle;
+    return proc.exitCode === null && proc.signalCode === null;
+  }
+
   /**
    * The gateway discarded the buffered copy of an injection without a
-   * dispatch(). A settled injection only owes bookkeeping. One that has NOT
-   * settled is an orphan: nothing will ever drain it, and the CLI does not
-   * start a queued input on its own once the turn it was steered into has
-   * ended — it works its queue only when the next stdin frame arrives, which
-   * would be the batch re-delivering this very member (prod 2026-09-03: lane
-   * dethroned after 10 idle minutes, then "refusing duplicate stdin write"
-   * on every retry). Withdraw it: kill the process (the session survives via
-   * --resume), report the input failed so the server releases the member,
-   * and let the gateway run it as a real turn.
+   * dispatch(). A settled injection only owes bookkeeping. A live one never
+   * reaches here (the gateway attaches to it via isInjectionLive); if one
+   * does, it is left registered — byCommand must keep routing its lifecycle
+   * frames and its terminal state drops it (see apply/fail) — and the
+   * anomaly is logged. Killing it is not an option: Claude Code starts a
+   * queued input on its own once the turn it was steered into ends, and the
+   * server, having recorded that `started` as delivered, would never re-run
+   * it (2026-09-17 prod loss).
    */
-  async acknowledgeDiscardedInjection(
+  acknowledgeDiscardedInjection(
     sessionKey: string,
     deliveryKey: string,
-  ): Promise<DiscardedInjectionOutcome> {
+  ): DiscardedInjectionOutcome {
     const state = this.processes.get(sessionKey);
     if (!state) return 'discarded';
     const delivery = state.inputs.getByKey(deliveryKey);
     if (delivery && !delivery.terminal) {
       state.log?.warn?.(
-        `withdrawing orphaned Claude input ${delivery.commandUuid} (${delivery.reportedState ?? 'queued'}) on ${sessionKey}: its buffered copy was discarded before the CLI settled it${state.pump.hasOwnWork() ? '; the runtime-initiated turn dies with the process' : ''}`,
+        `buffered copy of Claude input ${delivery.commandUuid} (${delivery.reportedState ?? 'queued'}) on ${sessionKey} discarded while still live — keeping its registration; the runtime runs it as its own turn`,
       );
-      await this.killProcess(sessionKey, state);
-      state.inputs.discardBookkeeping(deliveryKey);
-      // 'cancelled' only when the server confirmed the failed receipt: the
-      // member is released and un-folded, so the gateway can re-fold and run
-      // it locally. A lost receipt (reportedState never reached 'failed') or
-      // a 'settled' answer (a reply effect already resolved the member)
-      // leaves nothing to re-run here — the lane complete releases an unread
-      // member for re-drive instead.
-      const confirmed = delivery.reportedState === 'failed' && delivery.terminal === 'failed';
-      if (!confirmed) {
-        state.log?.warn?.(
-          `withdrawal of Claude input ${delivery.commandUuid} was not confirmed by the server (${delivery.terminal}); leaving the member to the lane complete`,
-        );
-      }
-      return confirmed ? 'cancelled' : 'discarded';
     }
     state.inputs.discardBookkeeping(deliveryKey);
     // The discarded copy may have been the last thing a lazy restart was

package/src/input-lifecycle.ts

@@ -190,7 +190,11 @@ export class ClaudeInputRegistry {
           detail: detail ?? classified.detail ?? 'Claude input failed',
         });
         delivery.reportedState = 'failed';
-        delivery.terminal = result?.retry === false ? 'settled' : 'failed';
+        // 'settled' only when the server answered and released nothing (a
+        // delivered or reply-resolved member); an unconfirmed receipt is not
+        // a settlement.
+        delivery.terminal =
+          result && !result.pending && result.retry === false ? 'settled' : 'failed';
       }
     } finally {
       delivery.terminal ??= 'failed';

package/src/turn-outcome.ts

@@ -8,15 +8,23 @@ import type { ClaudeResultMeta } from './output-parser.js';
  * (api_error_status / terminal_reason / is_error), behavioral heuristics
  * second (zero-usage synthetic turns), message regex last — and regex only
  * ever refines a classification, so a CLI wording change degrades to the
- * generic `api_error`, never to a wrong `ok` or a wrong deferral.
+ * generic `transient`, never to a wrong `ok` or a wrong deferral.
  * Classification uncertainty must never defer: deferring a real message is
  * costlier than losing one automatic recovery.
  */
 
 const LIMIT_TEXT = /you'?ve (hit|reached) your .*limit|usage limit reached|weekly limit/i;
 const AUTH_TEXT =
-  /not logged in|please run \/login|authentication_error|invalid api key|oauth token (has )?expired|\[action required\]/i;
+  /not logged in|please run \/login|authentication_error|authentication_failed|failed to authenticate|invalid api key|oauth (token|session) (has )?expired|\[action required\]/i;
 const CONTEXT_TEXT = /prompt is too long|context (window|length) exceeded|request too large/i;
+// A positively identified per-minute rate limit (agent-runtime-state-model-
+// design.md §7.1): the API's own error type, never a plan / subscription
+// limit notice. Only this wording moves a 429 off the deferred path.
+const RATE_LIMIT_ERROR_TEXT = /rate_limit_error/i;
+// Exhausted balance / quota (402): the sender must top up — an error, not a
+// wait, so it takes the same path as auth.
+const QUOTA_TEXT =
+  /credit balance is too low|insufficient credits|insufficient_quota|payment required/i;
 
 const DETAIL_MAX = 500;
 
@@ -139,8 +147,19 @@ export function classifyClaudeTurn(
 
   // 1) Structured HTTP status.
   if (meta.apiErrorStatus === 401 || meta.apiErrorStatus === 403) return withDetail('auth');
+  if (meta.apiErrorStatus === 402) return withDetail('quota_exhausted');
   if (meta.apiErrorStatus === 413) return withDetail('context_overflow');
   if (meta.apiErrorStatus === 429) {
+    // A provider that answers an exhausted balance with 429 (OpenAI-style
+    // `insufficient_quota`) is a top-up problem, never a wait: quota
+    // evidence outranks both 429 readings below.
+    if (QUOTA_TEXT.test(evidence)) return withDetail('quota_exhausted');
+    // The CLI exposes only the status: a 429 that positively names the
+    // API's rate_limit_error is a short-backoff transient; every other 429
+    // (plan limits, no discernible text) stays a deferral — a wrong
+    // deferral costs a wait, a wrong "transient" on a real plan limit costs
+    // three fast retries and a dead letter.
+    if (RATE_LIMIT_ERROR_TEXT.test(evidence)) return withDetail('transient');
     return withDetail('usage_limit', evidence ? parseClaudeResetTime(evidence, now) : undefined);
   }
 
@@ -162,15 +181,16 @@ export function classifyClaudeTurn(
     (meta.durationApiMs ?? 0) === 0;
   if (failed || syntheticQuiet || noticeTexts.length > 0) {
     if (CONTEXT_TEXT.test(evidence)) return withDetail('context_overflow');
+    if (QUOTA_TEXT.test(evidence)) return withDetail('quota_exhausted');
     if (LIMIT_TEXT.test(evidence)) {
       return withDetail('usage_limit', parseClaudeResetTime(evidence, now));
     }
     if (AUTH_TEXT.test(evidence)) return withDetail('auth');
     // Reached only when this block was entered (failed / syntheticQuiet /
     // a captured synthetic notice) but no text family matched. A CLI wording
-    // change must degrade to api_error — never fall through to `ok` and settle
-    // a refused turn as success (the read-no-reply class this PR closes).
-    return withDetail('api_error');
+    // change must degrade to transient — never fall through to `ok` and
+    // settle a refused turn as success (the read-no-reply class).
+    return withDetail('transient');
   }
 
   return { ...base, outcome: 'ok' };