@parall/parel-channel 1.42.1 → 1.44.0

package/dist/inbound.js

@@ -1,9 +1,9 @@
+import { channelCapabilityEnv } from './channel-capability.js';
 import { buildChatPrompt } from './channel-prompt.js';
 import { parallApiUrl, parallOrgId, requireAgk, sandboxEnabled } from './connect.js';
 import { effectsForChannelDispatch, PROVIDER_LOOKUP_TIMEOUT_MS } from './inbound-channel.js';
 import { buildForkScopePrefix, bumpForkRetryAttempts, childConfirmed, childRefKnown, clearForkState, clearForkSubject, FORK_RETRY_DELAY_MS, FORK_RETRY_PREFIX, handleChildSpawnFailed, MAX_SPAWN_VERIFY_ATTEMPTS, noteMainTurnEvent, planForkDecision, recordSpawn, settleChildEvent, trackFollowUpAck, } from './fork.js';
-import { asChildSpawnFailed, asConnectorEffects, } from './parel-sdk-compat.js';
-import { ackByIdEffect, ackEffect, completeFencedEnvelopes, conversationKey, createErrorStep, fetchMainSessionFresh, createInputStep, createTraceStep, createTypedInputStep, EMIT_TTL_MS, ensureChildSession, ensureSession, invalidateChildSession, invalidateSession, markDispatchReceived, nextEnvelopeId, patchSession, readActiveEmit, reportingEnabled, SESSION_CACHE_KEY, TURN_ENVELOPE_KEY, writeActiveEmit, } from './session.js';
+import { ackByIdEffect, claimDispatchSource, completeFencedEnvelopes, completeSourceEffect, conversationKey, createErrorStep, fetchMainSessionFresh, createInputStep, createTraceStep, createTypedInputStep, EMIT_TTL_MS, ensureChildSession, ensureSession, invalidateChildSession, invalidateSession, nextEnvelopeId, patchSession, readActiveEmit, reportingEnabled, SESSION_CACHE_KEY, TURN_ENVELOPE_KEY, writeActiveEmit, } from './session.js';
 import { isTypedEventType, planTypedDispatch } from './typed-dispatch.js';
 /**
  * Connection-local hook serialization. The parel ConnectorHost dispatches
@@ -274,7 +274,7 @@ async function effectsForDispatch(data, ctx) {
         return [];
     if (!chatId) {
         // A message dispatch with no chat can never be routed or replied to.
-        return [ackEffect(ctx, sourceType, sourceId)];
+        return [completeSourceEffect(ctx, sourceType, sourceId)];
     }
     if (await shouldSkipLiveRow(ctx, sourceType, sourceId))
         return [];
@@ -289,7 +289,7 @@ async function effectsForDispatch(data, ctx) {
     if (!m.ok) {
         if (m.status === 404 || m.status === 403) {
             // Deleted message / lost chat access — permanently unusable, drop it.
-            return [ackEffect(ctx, sourceType, sourceId)];
+            return [completeSourceEffect(ctx, sourceType, sourceId)];
         }
         // Transient failure: keep pending, the catch-up sweep retries.
         return [];
@@ -312,7 +312,7 @@ async function effectsForDispatch(data, ctx) {
         // Truly empty messages never grow content — ack-and-drop rather than let
         // them pile up in the pending queue forever. (Attachment-only messages
         // used to take this path; they now ride the attachment lines instead.)
-        return [ackEffect(ctx, sourceType, sourceId)];
+        return [completeSourceEffect(ctx, sourceType, sourceId)];
     }
     // Frame the message with its chat of origin: all chats share the agent's
     // one main session, so the model must see WHERE each message comes from or
@@ -356,12 +356,18 @@ async function effectsForDispatch(data, ctx) {
     // so the server resolves this WorkItem in the reply's own transaction.
     // (Fork turns get it too — their rows are legacy-acked so the resolve is a
     // no-op today, and it wires up for free when fork ledger parity lands.)
+    // Channel-capability env (lark-cli auth) rides EVERY turn's invocation
+    // context while granted — Feishu workspace ops (docs/calendar/…) are asked
+    // for from ordinary Parall chats, not only from channel turns. Null when
+    // ungranted or the mint degrades; never blocks the emit.
+    const capabilityEnv = await channelCapabilityEnv(ctx);
     const invocationContext = {
         PRLL_CHAT_ID: chatId,
         PRLL_TRIGGER_MESSAGE_ID: sourceId,
         PRLL_DISPATCH_SOURCE_TYPE: sourceType,
         PRLL_DISPATCH_SOURCE_ID: sourceId,
         ...(threadRootId ? { PRLL_THREAD_ROOT_ID: threadRootId } : {}),
+        ...(capabilityEnv ?? {}),
     };
     const envelope = {
         id: envelopeId,
@@ -394,7 +400,7 @@ async function effectsForDispatch(data, ctx) {
         // Progress reporting lands on the CHILD's ase_ — its turn does the work,
         // and the replyRoute carries childRef so deliver() links the reply to the
         // child session (and idles IT, not main).
-        const receivedSettled = markDispatchReceived(ctx, sourceType, sourceId);
+        const receivedSettled = claimDispatchSource(ctx, sourceType, sourceId);
         const childAse = await ensureChildSession(ctx, decision.childRef);
         if (childAse) {
             const results = await Promise.all([
@@ -445,18 +451,18 @@ async function effectsForDispatch(data, ctx) {
                     source_id: sourceId,
                     chat_id: chatId,
                 });
-                return asConnectorEffects([
-                    { type: 'setTimer', key: retryKey, at: ctx.now() + FORK_RETRY_DELAY_MS },
-                ]);
+                return [{ type: 'setTimer', key: retryKey, at: ctx.now() + FORK_RETRY_DELAY_MS }];
             }
-            return asConnectorEffects([
+            return [
                 { type: 'emitEvent', event: childEnvelope, deliverTo: { childRef: decision.childRef } },
-            ]);
+            ];
         }
-        return asConnectorEffects([
+        return [
             { type: 'emitEvent', event: childEnvelope, deliverTo: { childRef: decision.childRef } },
-            ackEffect(ctx, sourceType, sourceId),
-        ]);
+            // Fork-handled rows keep the legacy ack machinery (ledger parity is a
+            // declared follow-up); by id — the precise form.
+            dispatchId ? ackByIdEffect(ctx, dispatchId) : completeSourceEffect(ctx, sourceType, sourceId),
+        ];
     }
     if (decision.mode === 'spawn') {
         // Main is mid-turn on another conversation — fork. The opening message
@@ -502,7 +508,7 @@ async function effectsForDispatch(data, ctx) {
             }
         }
         if (!spawnBlackHoled) {
-            const receivedSettled = markDispatchReceived(ctx, sourceType, sourceId);
+            const receivedSettled = claimDispatchSource(ctx, sourceType, sourceId);
             const childAse = await ensureChildSession(ctx, decision.childRef);
             if (childAse) {
                 const results = await Promise.all([
@@ -519,7 +525,14 @@ async function effectsForDispatch(data, ctx) {
             }
             await recordSpawn(ctx, subject, decision.childRef, { dispatchId, sourceId });
             await receivedSettled;
-            return asConnectorEffects([
+            // Known gap: SpawnChildSessionEffect (#140) carries no invocation
+            // context, so the fork's OPENING turn runs without the capability env
+            // (lark-cli workspace ops would need a follow-up turn — those arrive
+            // as deliverTo envelopes, which inherit the full context). Channel
+            // replies are unaffected: channel_message dispatches always ride main.
+            // Fix belongs parel-side (context on spawnChildSession) — tracked as a
+            // parel ask.
+            return [
                 {
                     type: 'spawnChildSession',
                     childRef: decision.childRef,
@@ -527,7 +540,7 @@ async function effectsForDispatch(data, ctx) {
                     subject,
                 },
                 ...timerEffects,
-            ]);
+            ];
         }
         // fall through: black-holed spawn rides main below.
     }
@@ -541,7 +554,7 @@ async function effectsForDispatch(data, ctx) {
     // pending→received transition. It is deliberately NOT gated on the
     // session resolving: a transient session failure must not also cost the
     // indicator.
-    const receivedSettled = markDispatchReceived(ctx, sourceType, sourceId);
+    const receivedSettled = claimDispatchSource(ctx, sourceType, sourceId);
     let sessionId = await ensureSession(ctx);
     if (sessionId) {
         // The guard marker goes down BEFORE any session write: a stale
@@ -604,7 +617,7 @@ async function effectsForDispatch(data, ctx) {
  * them on the orchestrator preserves task/schedule context continuity.
  */
 async function effectsForTypedDispatch(data, ctx) {
-    // No markDispatchReceived here ON PURPOSE: typed dispatches have no
+    // No claimDispatchSource here ON PURPOSE: typed dispatches have no
     // message-level activity indicator (DispatchResolvedData: "typed
     // dispatches have no indicator"), so there is no pending ring to light —
     // the typed input step below is the session panel's timeline entry.
@@ -614,12 +627,21 @@ async function effectsForTypedDispatch(data, ctx) {
     // Typed WorkItems ack by id, never by source: sibling rows (a task
     // mutation's task_assign + task_update) share (source_type, source_id),
     // and the source ack would terminally resolve work that was never emitted.
-    const ack = () => dispatchId ? ackByIdEffect(ctx, dispatchId) : ackEffect(ctx, sourceType, sourceId);
+    const ack = () => {
+        if (!dispatchId) {
+            // No WorkItem id (malformed payload): the by-source form would
+            // terminally resolve SIBLING typed rows sharing this source — leave
+            // the row pending for the sweep instead.
+            console.error(`[parel-channel] typed dispatch without id (${sourceType}:${sourceId}) left pending`);
+            return [];
+        }
+        return [ackByIdEffect(ctx, dispatchId)];
+    };
     const plan = await planTypedDispatch(data, ctx);
     if (plan.outcome === 'pending')
         return [];
     if (plan.outcome === 'stale')
-        return [ack()];
+        return ack();
     const envelopeId = dispatchId || `${sourceType}:${sourceId}`;
     let sessionId = await ensureSession(ctx);
     if (sessionId) {
@@ -647,6 +669,15 @@ async function effectsForTypedDispatch(data, ctx) {
             }
         }
     }
+    // Typed turns carry the capability env too: a task or schedule is exactly
+    // where "create the Feishu doc / check the calendar" work is assigned, so
+    // the every-turn capability contract covers them (null when ungranted or
+    // the mint degrades; never blocks the emit).
+    const capabilityEnv = await channelCapabilityEnv(ctx);
+    const typedContext = {
+        ...(plan.chatId ? { PRLL_CHAT_ID: plan.chatId, PRLL_TRIGGER_MESSAGE_ID: sourceId } : {}),
+        ...(capabilityEnv ?? {}),
+    };
     return [
         {
             type: 'emitEvent',
@@ -673,17 +704,10 @@ async function effectsForTypedDispatch(data, ctx) {
                         ? { chatId: plan.chatId, messageId: sourceId, envelopeId }
                         : { envelopeId },
                 },
-                ...(plan.chatId
-                    ? {
-                        context: {
-                            PRLL_CHAT_ID: plan.chatId,
-                            PRLL_TRIGGER_MESSAGE_ID: sourceId,
-                        },
-                    }
-                    : {}),
+                ...(Object.keys(typedContext).length > 0 ? { context: typedContext } : {}),
             },
         },
-        ack(),
+        ...ack(),
     ];
 }
 /**
@@ -765,22 +789,21 @@ export function handleParallAgentEvent(event, ctx) {
     return serialized(() => handleParallAgentEventInner(event, ctx));
 }
 async function handleParallAgentEventInner(event, ctx) {
-    // spawnChildSession's asynchronous error channel — not turn-scoped, pushed
-    // regardless of observe scopes, and shaped outside the published AgentEvent
-    // union (see parel-sdk-compat). Handle it before anything subject-gated.
-    const spawnFailed = asChildSpawnFailed(event);
-    if (spawnFailed) {
+    // spawnChildSession's asynchronous error channel — not turn-scoped and
+    // pushed regardless of observe scopes. Handle it before anything
+    // subject-gated.
+    if (event.type === 'child_spawn_failed') {
         const effects = [];
         try {
-            const outcome = await handleChildSpawnFailed(ctx, spawnFailed);
+            const outcome = await handleChildSpawnFailed(ctx, event);
             if (outcome.cleared) {
                 // The spawn's ase_ was already created active with an input step; no
                 // child turn will ever emit a terminal event for it — settle it here
                 // or the session (and its processing indicator) stays active forever.
-                const orphanAse = await ensureChildSession(ctx, spawnFailed.childRef);
+                const orphanAse = await ensureChildSession(ctx, event.childRef);
                 if (orphanAse)
                     await patchSession(ctx, orphanAse, { status: 'idle' });
-                await invalidateChildSession(ctx, spawnFailed.childRef);
+                await invalidateChildSession(ctx, event.childRef);
             }
             // Re-drive the stranded messages WITHOUT waiting for a reconnect sweep
             // (a healthy long-lived socket never re-runs onOpen): park their
@@ -806,15 +829,14 @@ async function handleParallAgentEventInner(event, ctx) {
         }
         return effects;
     }
-    const withChild = event;
-    if (withChild.childRef) {
-        return handleChildAgentEvent(withChild, ctx);
+    if (event.childRef) {
+        return handleChildAgentEvent(event, ctx);
     }
     const chatId = event.subject;
     try {
         // Best-effort busy classifier for fork-on-busy: only MAIN turns feed it
         // (child events took the branch above).
-        await noteMainTurnEvent(ctx, withChild).catch(() => { });
+        await noteMainTurnEvent(ctx, event).catch(() => { });
         if (!chatId)
             return [];
         if (event.type === 'turn_completed' || event.type === 'turn_failed') {
@@ -831,7 +853,7 @@ async function handleParallAgentEventInner(event, ctx) {
             // the absorbing turn's envelopeIds and settle here naturally. The
             // server decides reply broad-cover vs no_action per batch; turn_failed
             // sweeps the same way with the error step below as the visible record.
-            await completeFencedEnvelopes(ctx, event.envelopeIds);
+            await completeFencedEnvelopes(ctx, event.envelopeIds, event.type === 'turn_failed' ? 'error' : 'ok');
             // Staleness guard: only idle if this event's turn covers the AGENT'S
             // latest emitted envelope (the marker is agent-global — all chats share
             // the one main session, so a done signal for chat A's turn must not

package/dist/session.d.ts

@@ -216,12 +216,14 @@ export declare function createTraceStep(ctx: ConnectorContext, sessionId: string
     outputPreview?: string;
 }): Promise<ReportResult>;
 /**
- * Ack a dispatch by source so it leaves the pending queue (idempotent).
- * Typed as the fetch effect so it can ride BOTH hook channels (onMessage's
- * ConnectorEffect[] and onAgentEvent's AgentEventEffect[] — the fork spawn
- * ack fires from a child agent event).
+ * Terminally drop ONE source's live WorkItem via the unified complete's
+ * source form (no covering reply Effect exists for a dropped row, so the
+ * server sweeps it to no_action — the drop semantics; idempotent). Typed as
+ * the fetch effect so it can ride BOTH hook channels (ConnectorEffect[] and
+ * AgentEventEffect[]). Replaces the legacy by-source ack for drop cases —
+ * that endpoint retires at S3 (dispatch-convergence-design.md §3).
  */
-export declare function ackEffect(ctx: ConnectorContext, sourceType: string, sourceId: string): Extract<ConnectorEffect, {
+export declare function completeSourceEffect(ctx: ConnectorContext, sourceType: string, sourceId: string): Extract<ConnectorEffect, {
     type: 'fetch';
 }>;
 /**
@@ -236,12 +238,16 @@ export declare function ackByIdEffect(ctx: ConnectorContext, dispatchId: string)
     type: 'fetch';
 }>;
 /**
- * Lights the pending ring (server broadcasts dispatch.received). Must COMPLETE
- * before the ack effect is returned: MarkReceived only transitions rows still
- * in status='pending', and ack moves the same row to 'acked' — losing the race
- * means the ring never appears.
+ * Claim the source's WorkItem before the turn (server folds the row into its
+ * message lane, flips it pending→received and broadcasts dispatch.received —
+ * the pending ring rides the claim side effect now; the retired received
+ * endpoint was a bare receipt). Best-effort like the receipt was: a refused
+ * or failed claim never blocks the emit — the row stays pending and the
+ * turn's complete resolves it just the same. Must COMPLETE before any
+ * settling effect is returned so a same-batch complete can't race the
+ * pending→received transition.
  */
-export declare function markDispatchReceived(ctx: ConnectorContext, sourceType: string, sourceId: string): Promise<void>;
+export declare function claimDispatchSource(ctx: ConnectorContext, sourceType: string, sourceId: string): Promise<void>;
 /**
  * How long an emitted source may stay unresolved before the reconnect sweep
  * re-emits it (crash / lost turn_completed self-heal — the successor of the
@@ -263,6 +269,14 @@ export type ActiveEmit = {
 export declare function readActiveEmit(ctx: ConnectorContext, sourceType: string, sourceId: string): Promise<ActiveEmit | null>;
 export declare function writeActiveEmit(ctx: ConnectorContext, sourceType: string, sourceId: string, envelopeId: string): Promise<void>;
 export declare function clearActiveEmit(ctx: ConnectorContext, sourceType: string, sourceId: string): Promise<void>;
+/**
+ * Burn the fence after an ERROR close: keep the attempt id (so the re-driven
+ * emit's nextEnvelopeId picks a fresh `#r{n+1}` — a bare repeat of the base
+ * id could be deduped by parel and strand the retry) but zero the timestamp
+ * (so the redelivery-skip window is already over and the server's re-drive
+ * hint re-emits immediately instead of hiding behind a 30-min TTL).
+ */
+export declare function burnActiveEmit(ctx: ConnectorContext, sourceType: string, sourceId: string): Promise<void>;
 /**
  * Deterministic envelope id for a source: `{sourceType}:{sourceId}` on the
  * first attempt, `…#r{n}` on re-emits. Attempt-suffixed ids are unique per
@@ -275,6 +289,8 @@ export declare function sourceFromEnvelopeId(envelopeId: string): {
     sourceType: string;
     sourceId: string;
 } | null;
+/** Turn outcome for the ledger close — mirrors the server's turn_outcome. */
+export type TurnOutcome = 'ok' | 'error';
 /**
  * Fence-checked turn-end ledger close for a set of envelope ids — the shared
  * core of BOTH turn-end hooks: onAgentEvent (turn_completed/turn_failed, the
@@ -282,21 +298,29 @@ export declare function sourceFromEnvelopeId(envelopeId: string): {
  * never arrive and this is the ONLY terminal ledger hook — without it a
  * received row would re-emit on every TTL sweep forever). Only sources whose
  * `active:{source}` store row matches the envelope id EXACTLY are completed
- * (attempt fence); the fence rows clear on success. Both hooks running is
- * harmless: whichever completes first consumes the fence, the other skips.
+ * (attempt fence). Both hooks running is harmless: whichever completes first
+ * consumes the fence, the other skips.
+ *
+ * Fence disposal follows the outcome: an "ok" close clears the fences (the
+ * sources are terminal); an "error" close BURNS them instead — the server
+ * released the uncovered members back to pending and its re-drive hint
+ * re-emits them, so the burned fence must neither hide the retry behind the
+ * redelivery-skip TTL nor let it reuse a dedupe-prone envelope id.
  */
-export declare function completeFencedEnvelopes(ctx: ConnectorContext, envelopeIds: string[]): Promise<void>;
+export declare function completeFencedEnvelopes(ctx: ConnectorContext, envelopeIds: string[], outcome?: TurnOutcome): Promise<void>;
 /**
- * Turn-end ledger close: resolves the turn's folded sources on the server —
- * broad-cover to the turn's reply Effect when one exists, no_action sweep
- * otherwise (the server decides; POST /dispatch/complete-sources, idempotent).
- * One immediate retry on failure; a still-failed call leaves the rows
- * received and the catch-up TTL re-emit self-heals.
+ * Turn-end ledger close: resolves the turn's folded sources on the server via
+ * the unified complete's source form (POST /dispatch/complete, idempotent) —
+ * broad-cover to the turn's reply Effect when one exists; otherwise a
+ * no_action sweep on "ok", or a release back to pending on the redrive budget
+ * on "error" (a failed turn must not silently consume work it never handled).
+ * One immediate retry on failure; a still-failed call leaves the rows live
+ * and the catch-up TTL re-emit self-heals.
  */
 export declare function completeSources(ctx: ConnectorContext, sources: {
     source_type: string;
     source_id: string;
-}[]): Promise<boolean>;
+}[], outcome?: TurnOutcome): Promise<boolean>;
 /**
  * Turn-end plain text as a suppressed audit step — the runtime-standard
  * Layer 0 posture (agent-dm-loop-prevention.md): recorded on the session,

package/dist/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAG3E;;;;;;;;;;;;;;;;GAgBG;AAEH,eAAO,MAAM,kBAAkB,QAAS,CAAC;AAEzC,8EAA8E;AAC9E,eAAO,MAAM,gBAAgB,SAAS,CAAC;AAEvC,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAE/D;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iBAAiB,sBAAqC,CAAC;AACpE,eAAO,MAAM,iBAAiB,iBAAgC,CAAC;AAG/D;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAE7E;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAMvD;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAOzD;AAED;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,IAAI,GAAG,OAAO,GAAG,QAAQ,CAAC;AAMrD,2EAA2E;AAC3E,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAE5E;AASD;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,gBAAgB,EACrB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAyBxB;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmBzF;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAkCxB;AAED,yEAAyE;AACzE,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,qEAAqE;AACrE,wBAAsB,YAAY,CAChC,GAAG,EAAE,gBAAgB,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAE,MAAM,EAAE,QAAQ,GAAG,MAAM,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/D,OAAO,CAAC,YAAY,CAAC,CAgBvB;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,gBAAgB,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC3E,OAAO,CAAC,YAAY,CAAC,CA8BvB;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,gBAAgB,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IACJ,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACA,OAAO,CAAC,YAAY,CAAC,CAsCvB;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,gBAAgB,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IACJ,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB;;0EAEsE;IACtE,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GACA,OAAO,CAAC,YAAY,CAAC,CA4BvB;AAID;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,GAAE,MAAM,EAAO,GAAG,MAAM,CAY3E;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,gBAAgB,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACvD,OAAO,CAAC,YAAY,CAAC,CAiCvB;AAOD;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,gBAAgB,EACrB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,EACD;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GACpF;IACE,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GACJ,OAAO,CAAC,YAAY,CAAC,CAmEvB;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CACvB,GAAG,EAAE,gBAAgB,EACrB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,eAAe,EAAE;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,CAc7C;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,gBAAgB,EACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,EAAE;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,CAc7C;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,gBAAgB,EACrB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAiBf;AASD;;;;GAIG;AACH,eAAO,MAAM,WAAW,QAAiB,CAAC;AAE1C,0EAA0E;AAC1E,MAAM,MAAM,UAAU,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAMpD;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,gBAAgB,EACrB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAW5B;AAED,wBAAsB,eAAe,CACnC,GAAG,EAAE,gBAAgB,EACrB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAIf;AAED,wBAAsB,eAAe,CACnC,GAAG,EAAE,gBAAgB,EACrB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAEf;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,UAAU,GAAG,IAAI,GACvB,MAAM,CAMR;AAED,gEAAgE;AAChE,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,GACjB;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAKjD;AAED;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,gBAAgB,EACrB,WAAW,EAAE,MAAM,EAAE,GACpB,OAAO,CAAC,IAAI,CAAC,CAef;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EAAE,GACpD,OAAO,CAAC,OAAO,CAAC,CAyBlB;AAED;;;;;;GAMG;AACH,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,gBAAgB,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC1D,OAAO,CAAC,YAAY,CAAC,CAyBvB"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAG3E;;;;;;;;;;;;;;;;GAgBG;AAEH,eAAO,MAAM,kBAAkB,QAAS,CAAC;AAEzC,8EAA8E;AAC9E,eAAO,MAAM,gBAAgB,SAAS,CAAC;AAEvC,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAE/D;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iBAAiB,sBAAqC,CAAC;AACpE,eAAO,MAAM,iBAAiB,iBAAgC,CAAC;AAG/D;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAE7E;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAMvD;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAOzD;AAED;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,IAAI,GAAG,OAAO,GAAG,QAAQ,CAAC;AAMrD,2EAA2E;AAC3E,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAE5E;AASD;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,gBAAgB,EACrB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAyBxB;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmBzF;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAkCxB;AAED,yEAAyE;AACzE,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,qEAAqE;AACrE,wBAAsB,YAAY,CAChC,GAAG,EAAE,gBAAgB,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAE,MAAM,EAAE,QAAQ,GAAG,MAAM,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/D,OAAO,CAAC,YAAY,CAAC,CAgBvB;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,gBAAgB,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC3E,OAAO,CAAC,YAAY,CAAC,CA8BvB;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,gBAAgB,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IACJ,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACA,OAAO,CAAC,YAAY,CAAC,CAsCvB;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,gBAAgB,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IACJ,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB;;0EAEsE;IACtE,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GACA,OAAO,CAAC,YAAY,CAAC,CA4BvB;AAID;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,GAAE,MAAM,EAAO,GAAG,MAAM,CAY3E;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,gBAAgB,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACvD,OAAO,CAAC,YAAY,CAAC,CAiCvB;AAOD;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,gBAAgB,EACrB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,EACD;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GACpF;IACE,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GACJ,OAAO,CAAC,YAAY,CAAC,CAmEvB;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,gBAAgB,EACrB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,eAAe,EAAE;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,CAc7C;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,gBAAgB,EACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,EAAE;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,CAc7C;AAED;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,gBAAgB,EACrB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAiBf;AASD;;;;GAIG;AACH,eAAO,MAAM,WAAW,QAAiB,CAAC;AAE1C,0EAA0E;AAC1E,MAAM,MAAM,UAAU,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAMpD;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,gBAAgB,EACrB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAW5B;AAED,wBAAsB,eAAe,CACnC,GAAG,EAAE,gBAAgB,EACrB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAIf;AAED,wBAAsB,eAAe,CACnC,GAAG,EAAE,gBAAgB,EACrB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAEf;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,gBAAgB,EACrB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAMf;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,UAAU,GAAG,IAAI,GACvB,MAAM,CAMR;AAED,gEAAgE;AAChE,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,GACjB;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAKjD;AAED,6EAA6E;AAC7E,MAAM,MAAM,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC;AAEzC;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,gBAAgB,EACrB,WAAW,EAAE,MAAM,EAAE,EACrB,OAAO,GAAE,WAAkB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAwBf;AAED;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EAAE,EACrD,OAAO,GAAE,WAAkB,GAC1B,OAAO,CAAC,OAAO,CAAC,CAyBlB;AAED;;;;;;GAMG;AACH,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,gBAAgB,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC1D,OAAO,CAAC,YAAY,CAAC,CAyBvB"}

package/dist/session.js

@@ -523,24 +523,26 @@ export async function createTraceStep(ctx, sessionId, subject, event) {
     }
 }
 /**
- * Ack a dispatch by source so it leaves the pending queue (idempotent).
- * Typed as the fetch effect so it can ride BOTH hook channels (onMessage's
- * ConnectorEffect[] and onAgentEvent's AgentEventEffect[] — the fork spawn
- * ack fires from a child agent event).
+ * Terminally drop ONE source's live WorkItem via the unified complete's
+ * source form (no covering reply Effect exists for a dropped row, so the
+ * server sweeps it to no_action — the drop semantics; idempotent). Typed as
+ * the fetch effect so it can ride BOTH hook channels (ConnectorEffect[] and
+ * AgentEventEffect[]). Replaces the legacy by-source ack for drop cases —
+ * that endpoint retires at S3 (dispatch-convergence-design.md §3).
  */
-export function ackEffect(ctx, sourceType, sourceId) {
+export function completeSourceEffect(ctx, sourceType, sourceId) {
     return {
         type: 'fetch',
         request: {
-            url: `${parallApiUrl(ctx)}/api/v1/orgs/${parallOrgId(ctx)}/dispatch/ack`,
+            url: `${parallApiUrl(ctx)}/api/v1/orgs/${parallOrgId(ctx)}/dispatch/complete`,
             method: 'POST',
             headers: {
                 Authorization: `Bearer ${requireAgk(ctx)}`,
                 'Content-Type': 'application/json',
             },
-            body: JSON.stringify({ source_type: sourceType, source_id: sourceId }),
+            body: JSON.stringify({ sources: [{ source_type: sourceType, source_id: sourceId }] }),
         },
-        idempotencyKey: `ack:${sourceType}:${sourceId}`,
+        idempotencyKey: `complete:src:${sourceType}:${sourceId}`,
     };
 }
 /**
@@ -567,18 +569,22 @@ export function ackByIdEffect(ctx, dispatchId) {
     };
 }
 /**
- * Lights the pending ring (server broadcasts dispatch.received). Must COMPLETE
- * before the ack effect is returned: MarkReceived only transitions rows still
- * in status='pending', and ack moves the same row to 'acked' — losing the race
- * means the ring never appears.
+ * Claim the source's WorkItem before the turn (server folds the row into its
+ * message lane, flips it pending→received and broadcasts dispatch.received —
+ * the pending ring rides the claim side effect now; the retired received
+ * endpoint was a bare receipt). Best-effort like the receipt was: a refused
+ * or failed claim never blocks the emit — the row stays pending and the
+ * turn's complete resolves it just the same. Must COMPLETE before any
+ * settling effect is returned so a same-batch complete can't race the
+ * pending→received transition.
  */
-export async function markDispatchReceived(ctx, sourceType, sourceId) {
+export async function claimDispatchSource(ctx, sourceType, sourceId) {
     // Deliberately NOT gated on reportingEnabled: this is ledger surface, not
-    // session reporting — the URL needs no agent id, and with ack-on-emit gone
-    // the received transition is what keeps the reconnect sweep's TTL window
-    // (and the indicator lifecycle) working even for agent-id-less old configs.
+    // session reporting — the URL needs no agent id, and the claim transition
+    // is what keeps the indicator lifecycle working even for agent-id-less old
+    // configs.
     try {
-        const url = `${parallApiUrl(ctx)}/api/v1/orgs/${parallOrgId(ctx)}/dispatch/received`;
+        const url = `${parallApiUrl(ctx)}/api/v1/orgs/${parallOrgId(ctx)}/dispatch/claim`;
         const res = await fetch(url, {
             method: 'POST',
             headers: jsonHeaders(ctx),
@@ -586,10 +592,10 @@ export async function markDispatchReceived(ctx, sourceType, sourceId) {
             signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
         });
         if (!res.ok)
-            console.error(`[parel-channel] mark received failed (${res.status})`);
+            console.error(`[parel-channel] claim source failed (${res.status})`);
     }
     catch (err) {
-        console.error('[parel-channel] mark received failed', err);
+        console.error('[parel-channel] claim source failed', err);
     }
 }
 // ── By-source ledger surface ────────────────────────────
@@ -632,6 +638,21 @@ export async function writeActiveEmit(ctx, sourceType, sourceId, envelopeId) {
 export async function clearActiveEmit(ctx, sourceType, sourceId) {
     await ctx.store?.delete(activeEmitKey(sourceType, sourceId)).catch(() => { });
 }
+/**
+ * Burn the fence after an ERROR close: keep the attempt id (so the re-driven
+ * emit's nextEnvelopeId picks a fresh `#r{n+1}` — a bare repeat of the base
+ * id could be deduped by parel and strand the retry) but zero the timestamp
+ * (so the redelivery-skip window is already over and the server's re-drive
+ * hint re-emits immediately instead of hiding behind a 30-min TTL).
+ */
+export async function burnActiveEmit(ctx, sourceType, sourceId) {
+    const prior = await readActiveEmit(ctx, sourceType, sourceId);
+    if (!prior)
+        return;
+    await ctx.store
+        ?.set(activeEmitKey(sourceType, sourceId), { id: prior.id, at: 0 })
+        .catch(() => { });
+}
 /**
  * Deterministic envelope id for a source: `{sourceType}:{sourceId}` on the
  * first attempt, `…#r{n}` on re-emits. Attempt-suffixed ids are unique per
@@ -661,47 +682,65 @@ export function sourceFromEnvelopeId(envelopeId) {
  * never arrive and this is the ONLY terminal ledger hook — without it a
  * received row would re-emit on every TTL sweep forever). Only sources whose
  * `active:{source}` store row matches the envelope id EXACTLY are completed
- * (attempt fence); the fence rows clear on success. Both hooks running is
- * harmless: whichever completes first consumes the fence, the other skips.
+ * (attempt fence). Both hooks running is harmless: whichever completes first
+ * consumes the fence, the other skips.
+ *
+ * Fence disposal follows the outcome: an "ok" close clears the fences (the
+ * sources are terminal); an "error" close BURNS them instead — the server
+ * released the uncovered members back to pending and its re-drive hint
+ * re-emits them, so the burned fence must neither hide the retry behind the
+ * redelivery-skip TTL nor let it reuse a dedupe-prone envelope id.
  */
-export async function completeFencedEnvelopes(ctx, envelopeIds) {
+export async function completeFencedEnvelopes(ctx, envelopeIds, outcome = 'ok') {
     const fenced = [];
     for (const envId of envelopeIds) {
         const src = sourceFromEnvelopeId(envId);
         if (!src)
             continue; // pre-alignment envelope id (dsp_*) — old rows were acked on emit
         const active = await readActiveEmit(ctx, src.sourceType, src.sourceId);
-        if (active?.id === envId) {
+        // A BURNED fence (at === 0) still carries the attempt id but the attempt
+        // is already error-closed — its members are back in pending awaiting the
+        // re-drive. The redundant deliver()-side close for the same envelope
+        // must skip here, or its "ok" would no_action-sweep the very rows the
+        // error close just released (the retry hole S3a closes).
+        if (active?.id === envId && active.at > 0) {
             fenced.push({ source_type: src.sourceType, source_id: src.sourceId });
         }
     }
-    if (fenced.length > 0 && (await completeSources(ctx, fenced))) {
+    if (fenced.length > 0 && (await completeSources(ctx, fenced, outcome))) {
         for (const src of fenced) {
-            await clearActiveEmit(ctx, src.source_type, src.source_id);
+            if (outcome === 'error') {
+                await burnActiveEmit(ctx, src.source_type, src.source_id);
+            }
+            else {
+                await clearActiveEmit(ctx, src.source_type, src.source_id);
+            }
         }
     }
 }
 /**
- * Turn-end ledger close: resolves the turn's folded sources on the server —
- * broad-cover to the turn's reply Effect when one exists, no_action sweep
- * otherwise (the server decides; POST /dispatch/complete-sources, idempotent).
- * One immediate retry on failure; a still-failed call leaves the rows
- * received and the catch-up TTL re-emit self-heals.
+ * Turn-end ledger close: resolves the turn's folded sources on the server via
+ * the unified complete's source form (POST /dispatch/complete, idempotent) —
+ * broad-cover to the turn's reply Effect when one exists; otherwise a
+ * no_action sweep on "ok", or a release back to pending on the redrive budget
+ * on "error" (a failed turn must not silently consume work it never handled).
+ * One immediate retry on failure; a still-failed call leaves the rows live
+ * and the catch-up TTL re-emit self-heals.
  */
-export async function completeSources(ctx, sources) {
-    // Ledger surface — not gated on reportingEnabled (see markDispatchReceived).
+export async function completeSources(ctx, sources, outcome = 'ok') {
+    // Ledger surface — not gated on reportingEnabled (see claimDispatchSource).
     if (sources.length === 0)
         return true;
-    const url = `${parallApiUrl(ctx)}/api/v1/orgs/${parallOrgId(ctx)}/dispatch/complete-sources`;
+    const url = `${parallApiUrl(ctx)}/api/v1/orgs/${parallOrgId(ctx)}/dispatch/complete`;
     const attempt = async () => {
         const res = await fetch(url, {
             method: 'POST',
             headers: jsonHeaders(ctx),
-            body: JSON.stringify({ sources }),
+            body: JSON.stringify({ sources, turn_outcome: outcome }),
             signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
         });
         if (!res.ok)
-            console.error(`[parel-channel] complete-sources failed (${res.status})`);
+            console.error(`[parel-channel] complete (sources) failed (${res.status})`);
         return res.ok;
     };
     try {
@@ -715,7 +754,7 @@ export async function completeSources(ctx, sources) {
         return await attempt();
     }
     catch (err) {
-        console.error('[parel-channel] complete-sources failed', err);
+        console.error('[parel-channel] complete (sources) failed', err);
         return false;
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parall/parel-channel",
-  "version": "1.42.1",
+  "version": "1.44.0",
   "description": "Parall channel plugin for the parel runtime — lets a parel agent treat Parall as a managed_ws channel (receive dispatches, reply via the Parall API)",
   "license": "MIT",
   "repository": {
@@ -23,7 +23,7 @@
     "parel.plugin.json"
   ],
   "dependencies": {
-    "@parel/plugin-sdk": "^0.9.0"
+    "@parel/plugin-sdk": "^0.12.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",