@scotthuang/agent-knock-knock 0.16.2 → 0.16.4

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # Changelog
 
+## 0.16.4 / Pi 0.1.0-poc.12 / DeepSeek Harness 0.1.0-rc.15 — 2026-10-28
+
+- Adapt the reviewed macOS Codex CLI/app-server **0.165.0** pair for native status, models, permissions and question controls. Keep direct-backend operations contract-probed and distinguish the verified frontend version from the backend version; mixed older frontends do not inherit new terminal-write authority.
+- Recognize the exact native `GPT-6.1 Terra` display label and model ID across model pickers, effort headers and idle footers, without guessing unknown labels or fixed option indices. Accept the observed native single-column transcript bullet behind the exact styled Full Access confirmation.
+- Detect Codex's persistent folder-trust dialog as blocked and require a manual decision in the original CLI. With an exact frontend association, List and Send retain this boundary even when the shared backend is idle; pre-input revalidation prevents a newly appearing dialog from receiving task input. This fixes an existing recognition gap, not a new claim that 0.165 introduced trust dialogs.
+- Preserve exact native task identity, bounded public progress, default 720-minute monitoring, managed-terminal inactivity limits and callback/response deduplication. Record isolated native-task checks and their limits in the [0.165.0 compatibility review](docs/codex-0.165.0-compatibility.md); no new Desktop or external-channel delivery claim is made.
+- Release Pi **0.1.0-poc.12** and DeepSeek Harness **0.1.0-rc.15**, both pinning core **0.16.4** and the synchronized Skill. Core remains on `latest`; connectors remain prereleases on `next`, with unchanged Host version ranges.
+
+## 0.16.3 / Pi 0.1.0-poc.11 / DeepSeek Harness 0.1.0-rc.14 — 2026-10-28
+
+- Identify the exact running Codex native executable behind a verified npm Node launcher. Check process generation, forwarded arguments and mapped file identity before using its reported version; never substitute an unrelated executable from PATH. Fresh observations can recover existing versionless activity Watches without changing their saved anchors.
+- Recover DSH callbacks across supported Web Host restarts within the same canonical Profile/Store scope. Persist controller ownership and prepared/accepted receipts; resolve and verify the original persisted Session, use the current trusted helper/socket/token, and acknowledge only after Session flush. Keep command identity separate from recovered callback aliases.
+- Add an internal opt-in callback recovery catalogue with exact authorized route identities. Skip unowned routes before claiming delivery; explicitly adopt pre-fix Watch IDs and verified historical Profiles rather than scanning temporary files or inferring authorization from a session ID.
+- Preserve process/input fences, Store authority, exact task attribution, original envelopes, deadlines and deduplication. Do not reset permanent or uncertain delivery outcomes. Older Hosts without the required Session restore/flush APIs retain live-session-only behavior; OpenClaw's default transport is unchanged.
+- Keep action contract **35**, compact List **v4**, Watch schema **3**, Store writer protocol **11** and public tool parameters. Recovery does not turn stable idle into exact task success or solve reconciliation latency. The upstream live restart evidence covers Codex terminal activity; other producers have automated regression coverage, not new live-channel validation.
+- Release Pi **0.1.0-poc.11** and DeepSeek Harness **0.1.0-rc.14**, both pinning core **0.16.3** with synchronized Skills. Core remains on `latest`; both connectors remain prereleases on `next`, with unchanged Host version ranges.
+
 ## 0.16.2 / Pi 0.1.0-poc.10 / DeepSeek Harness 0.1.0-rc.13 — 2026-10-27
 
 - Allow degraded terminal-activity Watch creation without optional native process UUID or birth metadata. Reuse Claude's independently observed physical OS birth when available, retain every captured process fence, and report incomplete evidence instead of claiming exact task completion. Do not mix OS birth with Claude's UTC process-start value or substitute UUID namespaces.

package/README.md

@@ -117,10 +117,10 @@ Starting with AKK 0.15.0, new Claude Code sends automatically prefer a managed T
 
 The existing terminal workflows remain available for Codex or Claude Code running in tmux or Herdr:
 
-Codex CLI 0.158.0/0.159.0/0.159.2/0.159.3/0.160.0/0.162.1/0.164.0 supports exact paginated task Watches for ordinary terminal
+Codex CLI 0.158.0/0.159.0/0.159.2/0.159.3/0.160.0/0.162.1/0.164.0/0.165.0 supports exact paginated task Watches for ordinary terminal
 Send, native question responses, and durable completion callbacks. The adapter
 checks the foreground thread and required backend protocol before attaching; uncertain
-answers are never automatically replayed. See the [0.164.0 review](docs/codex-0.164.0-compatibility.md), [0.162.1 review](docs/codex-0.162.1-compatibility.md)
+answers are never automatically replayed. See the [0.165.0 review](docs/codex-0.165.0-compatibility.md), [0.164.0 review](docs/codex-0.164.0-compatibility.md), [0.162.1 review](docs/codex-0.162.1-compatibility.md)
 and [earlier compatibility review](docs/codex-0.160.0-compatibility.md) for managed-session and already-open
 question boundaries. Codex 0.157.x retains its [partial compatibility](docs/codex-0.157.1-compatibility.md).
 
@@ -202,12 +202,12 @@ can use a supported terminal route. Claude Code direct control is available unde
 | --- | --- |
 | Terminal hosts | tmux; local Herdr with per-operation capability checks (AKK `0.14.15`+). Tested Herdr baselines: `0.8.0` / protocol `19` and `0.9.5` / protocol `22`. See the [Herdr guide](docs/quickstart-herdr.md#current-boundary). |
 | Codex Desktop | macOS with a compatible live connection; app updates alone do not disable controls. See the [tested versions and operation matrix](docs/codex-desktop-compatibility.md#version-and-platform-evidence). |
-| Codex CLI shared backend | Live-tested on macOS: CLI/backend `0.164.0` in the [0.14.17 review](docs/codex-0.164.0-compatibility.md), `0.162.1` + `0.162.1`, and previously `0.160.0` + `0.162.0`. Requires a loaded main CLI conversation and compatible live protocol. These are tested combinations, **not a numeric minimum**. |
+| Codex CLI shared backend | Live-tested on macOS: CLI/backend `0.165.0` in the [0.16.4 review](docs/codex-0.165.0-compatibility.md), `0.164.0` in the [0.14.17 review](docs/codex-0.164.0-compatibility.md), `0.162.1` + `0.162.1`, and previously `0.160.0` + `0.162.0`. Requires a loaded main CLI conversation and compatible live protocol. These are tested combinations, **not a numeric minimum**. |
 | Claude Code direct connection | macOS, compatible native peer protocol `1`, and Python 3 available to AKK. Live observations include `2.1.295` and `2.1.296`; these are not minimum versions. Standard `claude` and configured wrappers use the same adapter. See the [direct guide](docs/claude-cli-direct.md) for task and interaction boundaries. |
-| Terminal coding agents | Reviewed Codex profiles include `0.160.0`, `0.162.1` and `0.164.0`; Claude fixtures include `2.1.285`, with live observations on `2.1.295`/`2.1.296`. An otherwise eligible, complete `x.y.z` Claude version may attempt supported controls through runtime validation even without an exact regression profile. Actual identity, protocol and UI evidence determine availability; unknown dialogs are not guessed. |
+| Terminal coding agents | Reviewed Codex profiles include `0.160.0`, `0.162.1`, `0.164.0` and `0.165.0`; Claude fixtures include `2.1.285`, with live observations on `2.1.295`/`2.1.296`. An otherwise eligible, complete `x.y.z` Claude version may attempt supported controls through runtime validation even without an exact regression profile. Actual identity, protocol and UI evidence determine availability; unknown dialogs are not guessed. |
 | OpenClaw | `2026.6.5`+; plugin API and Gateway `2026.5.12`+ |
-| Pi connector | Pi `1.2.0` and `0.84.4`; connector `0.1.0-poc.6` (`next`), pinned AKK `0.14.17` |
-| DeepSeek Harness connector | Web `0.2.1-rc.2` (RC); connector `0.1.0-rc.9` (`next`), pinned AKK `0.14.17`. See its guide for previous RC, alpha and legacy coverage. |
+| Pi connector | Pi `1.2.0` and `0.84.4`; connector `0.1.0-poc.12` (`next`), pinned AKK `0.16.4` |
+| DeepSeek Harness connector | Web `0.2.1-rc.2` (RC); connector `0.1.0-rc.15` (`next`), pinned AKK `0.16.4`. See its guide for previous RC, alpha and legacy coverage. |
 | Runtime | Node.js `22.19.0`+ on macOS or Linux |
 
 The adjacent OpenClaw boundary `2026.5.10-beta.2` is intentionally unsupported. Herdr versions are observations, not an allowlist: discovery verifies live identity and read capabilities, while input requires a matching CLI schema declaration or verified baseline behavior. An untested server without input evidence exposes only verified read capabilities. Desktop controls validate the live native contract. Desktop catalog presence alone does not prove the conversation is open or controllable. See each connector guide, the [Pi/DSH validation matrix](docs/pi-dsh-compatibility.md), and the Desktop guide for tested boundaries and limitations.

package/connectors/deepseek-harness/README.md

@@ -13,10 +13,9 @@ tests, lockfile, bundle manifest, and connector-specific release tag.
 
 ## Compatibility
 
-Connector **0.1.0-rc.13** pins AKK **0.16.2** in its package and lockfile,
-including state-derived List guidance and degraded terminal-activity Watch
-identity handling. It
-exposes that runtime's 27 semantic tools, including Codex CLI backend and
+Connector **0.1.0-rc.15** pins AKK **0.16.4** in its package and lockfile,
+including scoped persistent callback recovery and verified running-process
+Codex version discovery, with the 0.165.0 adaptation. It exposes that runtime's 27 semantic tools, including Codex CLI backend and
 Desktop operations when the selected conversation advertises them. `list`
 returns current discoverable conversations; `watches` separately returns recent
 monitoring records (24 hours by default), plus active or unresolved records.
@@ -38,16 +37,18 @@ split runtime sets fail before mounting. The Host's own plugin peer preflight
 must also pass without a version-risk exemption. Message and schema helpers
 come from that verified Host tree, not checkout development dependencies.
 
-Callbacks use AKK's producer-specific message source and the same live Agent's
+Callbacks use AKK's producer-specific message source and the exact live Agent's
 Inbox. Idle Agents receive a waking `followup`; running Agents receive
-`inject` context at a later step. Acceptance means Inbox admission, not proof
-that a model has consumed it or a user has seen it. Host exit or plugin unload
-invalidates that Host instance's routes; callbacks do not migrate to a new
-Agent merely because it has the same session ID.
-
-Headless/one-shot Harness processes, Host-exit callback continuity, Windows
-named pipes, and DSH Desktop's embedded launcher are outside this connector's
-validated scope. Existing Codex CLI backend and Desktop connections need no
+`inject` context at a later step. Acceptance does not prove that a model has
+consumed the message or a user has seen it. Hosts with the required persistent
+Session resolver, event inventory and flush barrier can restore the original
+Session after restart within the same Web Profile and AKK Store. Earlier
+process-private Watches require explicit operator adoption; a matching session
+ID alone is never recovery authority. Older Hosts without these APIs retain
+live-session delivery only. See [Callback delivery and recovery](#callback-delivery-and-recovery).
+
+Headless/one-shot Harness processes, Windows named pipes, and DSH Desktop's
+embedded launcher are outside this connector's validated scope. Existing Codex CLI backend and Desktop connections need no
 terminal container when their advertised capability is available. Claude Code
 and terminal-specific operations retain their documented transport conditions;
 see [core compatibility](../../README.md#compatibility) and the
@@ -79,7 +80,7 @@ can select an older `latest` build.
 DSH `0.2.1-rc.2` requires connector `0.1.0-rc.6` or a later release that
 explicitly supports that Host. Connector `0.1.0-rc.5` does not support this RC.
 Use `next`, or pin
-`@scotthuang/agent-knock-knock-deepseek-harness@0.1.0-rc.13`.
+`@scotthuang/agent-knock-knock-deepseek-harness@0.1.0-rc.15`.
 
 ```sh
 dsh plugin --profile web add @scotthuang/agent-knock-knock-deepseek-harness@next
@@ -253,30 +254,42 @@ The related controls are deliberately different:
 
 ## Callback delivery and recovery
 
-The synchronous callback acknowledgement means that the message was admitted
-to the exact DeepSeek Harness Agent's inbox/session log. It does not prove that
-the model consumed the message or that asynchronous persistence reached stable
-storage. `status` and Terminal Watch are the recovery path.
-
-- Inspect the original `turn_id` or `watch_id` with `status`. If that exact
-  record advertises `retry_callback`, a requested retry reuses the persisted
-  callback message and delivery identity. An uncertain result is not evidence
-  of non-delivery; do not replay it without a supported recovery action.
-- A completed Watch still provides its exact result even when the original
-  callback route is gone. Read that result; creating another Watch does not
-  recover or replay the historical notification. For work that is still
-  running, a fresh observation from a current `list` row requires the user's
-  monitoring request. Do not transfer an old record's callback ownership.
-- A Host restart creates a new private Profile revision. Existing watches retain
-  their original route, so callbacks owned by the old Host incarnation fail
-  closed instead of being redirected to a new Agent. There is deliberately no
-  cross-restart callback migration in this prerelease.
-- Replacing an Agent object with another Agent that has the same session id also
-  does not transfer its route. Start a current command/tool invocation from the
-  new Agent before expecting new callback ownership.
-- Exact process-lifetime idempotency records return the original acceptance id
-  for a duplicate callback. Reusing an idempotency key with different content
-  is rejected.
+On Hosts exposing persistent session recovery and a durability barrier, callback
+ownership is stored under the canonical Web Profile and AKK Store. Restarting
+that same Host restores the original persistent Session through DSH's session
+controller. The callback contract revision stays stable across restarts; the
+private socket and token still rotate. Each callback uses the current runtime's
+helper and credentials, never an old socket left in a temporary directory.
+
+- A successful callback acknowledgement means DSH admitted the message and its
+  session durability barrier completed. It does not prove that the model has
+  consumed the message or that the browser displayed it.
+- Delivery identity and the precreated DSH message ID are journaled before
+  admission. Retries retain the original ID; after restart, recovery checks the
+  original Session's own persisted events, including consumed inbox messages.
+  Inherited fork messages do not prove admission. Ambiguous evidence remains
+  uncertain instead of authorizing a duplicate injection.
+- The same session ID alone is not recovery authority: profile/Store ownership,
+  immutable Session header, and the live Agent object must match. A different
+  same-ID Agent in the current process cannot inherit an existing callback.
+- Inspect the original `turn_id` or `watch_id` with `status`. Observation and
+  settlement are separate from notification delivery. A working or unknown
+  activity Watch does not settle merely because the Host restarted. Terminal
+  activity becoming idle remains best-effort evidence, not exact task success.
+- Older Hosts without the required APIs retain live-session callback behavior
+  and log that restart recovery is unavailable. OpenClaw and other connectors
+  do not opt into the DSH recovery authority.
+
+Watches created by the earlier process-private connector require explicit
+operator adoption; their nonce and encoded Session ID do not establish which
+Web Profile owns them. Select the original Watch and its original generated
+Profile file in the configuration below. AKK validates both records, the known
+connector callback contract, and the original persistent DSH Session before
+recording scoped adoption. It does not rewrite the Watch, change its deadline,
+reset an uncertain/permanent notification, or run the historical helper. Once
+adoption is recorded, the old temporary file is no longer required. Missing or
+conflicting evidence stops adoption with a diagnostic; do not hand-edit Store
+records or substitute a similarly named Session.
 
 ## Configuration
 
@@ -288,6 +301,11 @@ configuration object:
   name: '@scotthuang/agent-knock-knock-deepseek-harness'
   config:
     lifecycleIntervalMs: 5000
+    # Optional, explicit one-time adoption of an earlier connector's Watch:
+    # callbackRecovery:
+    #   adoptWatches:
+    #     - watchId: terminal-watch-user-send-<exact-id>
+    #       historicalProfilePath: /absolute/path/to/original/host-profile.json
     pluginConfig:
       storeDir: /absolute/path/to/akk-store
 ```
@@ -296,10 +314,9 @@ configuration object:
 `storeDir`; a relative value is resolved from the Web Host's working directory.
 When omitted, this connector uses
 `~/.agent-knock-knock/hosts/deepseek-harness/store` for both tools and lifecycle
-reconciliation. Keep a custom Store separate from OpenClaw, Pi, and other DSH
-Host processes: the pinned core does not isolate every native callback claim
-by Host authority when several Hosts share one Store. An unrelated reconciler
-can otherwise claim a callback that it cannot deliver.
+reconciliation. Keep a custom Store separate from OpenClaw, Pi, and other DSH Host processes.
+The opt-in recovery runtime filters unowned callback routes before claiming
+notifications; this does not authorize unrelated Hosts to share Store writers.
 
 The default separates DSH from other Host types, not from another DSH process.
 If running multiple DSH Hosts or profiles concurrently, configure a distinct
@@ -328,7 +345,12 @@ The optional bundle patch mounts only the Host plugin:
   absolute Node executable and package artifact without a shell or `PATH`
   lookup.
 - The callback IPC frame is authenticated and bounded. Successful admission is
-  tied to one exact Agent object and one Host incarnation.
+  tied to the authorized persistent Session and its current exact Agent object.
+- Durable callback authority and delivery journals are private files under
+  `<profile>/.akk-callback-authority/`, scoped to the canonical Store path. An
+  exclusive process-generation lock rejects concurrent owners; only a proven
+  dead owner can be reclaimed. Keep this directory when upgrading or backing
+  up the profile. Deleting it discards restart recovery authority.
 - AKK's durable Store contains task, Session, Turn, receipt, watch, and callback
   recovery metadata and may contain user request or callback text. AKK creates
   Store directories as `0700` and files as `0600`; keep a custom Store on a
@@ -348,8 +370,8 @@ The optional bundle patch mounts only the Host plugin:
 | Activation reports an unsupported or split Harness | Check `dsh --version` and run `dsh plugin --profile web why @deepseek-ai/dsh-base @deepseek-ai/dsh-agent @deepseek-ai/dsh-commands @deepseek-ai/dsh-llm @deepseek-ai/dsh-tools`. Update the whole Host coherently; do not repair it with a standalone connector npm install. |
 | `/akk list` finds no live conversations | Check the selected target's direct-connection or terminal discovery diagnostics and core compatibility. A supported Codex CLI backend/Desktop connection does not require tmux/Herdr; terminal-only control needs an eligible live pane. Do not infer missing identity from cwd alone. |
 | A mutation is absent or rejected | Refresh `/akk list` or structured `list` and use only the action currently advertised for that exact row. Resolve a current approval first when it blocks input. Do not reuse stale IDs or action payloads. |
-| The callback never appears | Query the original Turn/Watch Status and separate task result, callback admission, and user visibility. Use only a retry/recovery action advertised for that record and requested by the user. A new Host does not inherit old callback ownership. |
-| Callback delivery reports IPC unavailable or timeout | Keep the originating Web Host alive and inspect whether it was restarted or disposed. The socket is Host-process-private and has an eight-second callback boundary; there is no cross-process fallback route. |
+| The callback never appears | Query the original Turn/Watch Status and separate task result, callback admission, and user visibility. Use only a retry/recovery action advertised for that record and requested by the user. Recovery requires the same profile/Store owner and original persistent Session; legacy routes require explicit adoption. |
+| Callback delivery reports IPC unavailable or timeout | Inspect the current Host startup and recovery diagnostics. A restarted authorized Host uses its new private socket; old socket files are not recovery targets. Missing session authority must be resolved explicitly. |
 | A Watch completed but its callback was missed | Read the original `watch_id` Status for its exact task result and callback disposition. Do not create a replacement Watch for completed work or treat it as historical-notification recovery. |
 | A tool call fails schema validation | Pass only the documented fields and complete semantic IDs returned by AKK. DeepSeek's discovery schema is a projection; the connector always enforces the full original AKK schema before execution. |
 | Windows, headless, or one-shot use fails | These surfaces are outside this prerelease's supported scope. Use the resident POSIX Web Host. |
@@ -368,7 +390,7 @@ exact reviewed version:
 
 ```sh
 dsh plugin --profile web add @scotthuang/agent-knock-knock-deepseek-harness@next
-dsh plugin --profile web add @scotthuang/agent-knock-knock-deepseek-harness@0.1.0-rc.13
+dsh plugin --profile web add @scotthuang/agent-knock-knock-deepseek-harness@0.1.0-rc.15
 ```
 
 Restart the Web Host after either operation. The connector pins the exact AKK
@@ -396,7 +418,7 @@ dsh plugin --profile web add "file:$(pwd -P)/connectors/deepseek-harness"
 ```
 
 Restart `dsh web` after installation. The child package currently installs and
-tests against its pinned AKK runtime `0.16.2`; building the current repository
+tests against its pinned AKK runtime `0.16.4`; building the current repository
 root does not silently replace that dependency. Before core publication, test
 the candidate core tarball in isolation as described in the
 [coordinated release policy](../../CONTRIBUTING.md#coordinated-package-releases);
@@ -407,6 +429,29 @@ compatibility review rather than an implicit local link.
 
 ## Tests and release status
 
+Connector **`0.1.0-rc.15`** pins AKK **`0.16.4`** and its synchronized Skill.
+It carries the [Codex CLI 0.165.0 compatibility update](../../docs/codex-0.165.0-compatibility.md):
+exact frontend/backend version reporting, native terminal profiles, Terra model
+label handling, and manual folder-trust blocking. Existing task identities,
+monitor deadlines and callback receipts are preserved. Host version ranges and
+callback/restart ownership are unchanged. This coordinated dependency refresh
+adds no new DSH live-model or external-channel delivery claim and remains on npm `next`.
+
+Connector **`0.1.0-rc.14`** pins AKK **`0.16.3`** and its synchronized Skill.
+Hosts with the required persistent Session resolver, event inventory and flush
+barrier can recover callback ownership within the same Web Profile and AKK
+Store. Durable message IDs, admission journals and exact Session/Agent checks
+preserve deduplication across restarts; restored callback aliases do not change
+the tools' current action authority. Earlier process-private Watches require
+explicit operator adoption, and older Hosts without these APIs remain live-only.
+A callback acknowledgement proves durable Host admission, not model consumption
+or delivery to an external channel. Codex version discovery also verifies the
+selected process's mapped executable instead of borrowing an installed version.
+The supported DSH/Cordis version set is unchanged. This release does not extend
+restart recovery to Pi/OpenClaw or claim acceptance for every Host/native task;
+see [Callback delivery and recovery](#callback-delivery-and-recovery) for the
+scope and evidence requirements. The connector remains on npm `next`.
+
 Connector **`0.1.0-rc.13`** pins AKK **`0.16.2`** and its synchronized Skill.
 Degraded terminal-activity Watches tolerate absent optional process UUID/birth
 metadata. A proven identity change still invalidates the observation; temporarily
@@ -493,7 +538,7 @@ npm run pack:check
 
 These commands typecheck the connector, run its fast wiring/profile/IPC/schema
 tests, and inspect the package tarball. They do not publish anything. The
-`0.1.0-rc.13` lockfile uses the published DeepSeek Harness `0.2.1-rc.2`
+`0.1.0-rc.15` lockfile uses the published DeepSeek Harness `0.2.1-rc.2`
 SDK packages and Cordis `4.0.5`. Its real ToolRuntime regression checks
 canonical result rendering, exact Agent ownership, typed questionnaire payloads,
 and rejection before dispatch when targets are ambiguous or stale. This is
@@ -538,7 +583,7 @@ gate to both connectors. Their package versions are validated independently.
 Publishing additionally requires both explicit flags:
 
 ```sh
-npm run release:check -- --publish --confirm-version 0.1.0-rc.13
+npm run release:check -- --publish --confirm-version 0.1.0-rc.15
 ```
 
 Prereleases use npm tag `next`; stable versions use `latest`. Repository tags

package/connectors/pi/README.md

@@ -12,9 +12,10 @@ socket.
 
 ## Status and compatibility
 
-Connector **0.1.0-poc.10** pins AKK **0.16.2**, including CLI direct
-connections, Codex Desktop, Recovery, state-derived List guidance and degraded
-terminal-activity Watch identity handling. Its generated Skill and registered tools are verified
+Connector **0.1.0-poc.12** pins AKK **0.16.4**, including CLI direct
+connections, Codex Desktop, Recovery, state-derived List guidance and verified
+running-process Codex version discovery, with the 0.165.0 adaptation. Its generated Skill and registered
+tools are verified
 against that exact core package at startup. See the [root compatibility
 summary](../../README.md#compatibility) for the coding-agent versions and
 operation-specific limits. Updating AKK core elsewhere does not update this
@@ -34,7 +35,7 @@ The current compatibility contract is intentionally exact:
   supported older runtime, installed from the official
   `@earendil-works/pi-coding-agent` package.
 - Node.js `22.19.0` or newer.
-- AKK `0.16.2`, pinned by this connector's package and lockfile. A different
+- AKK `0.16.4`, pinned by this connector's package and lockfile. A different
   version at the repository root is not substituted automatically. Before core
   publication, test its candidate tarball in isolation under the
   [coordinated release policy](../../CONTRIBUTING.md#coordinated-package-releases).
@@ -86,8 +87,8 @@ pi list
 ```
 
 Using `next` follows compatible Pi connector prereleases. To pin this exact
-core `0.16.2` connector, install
-`npm:@scotthuang/agent-knock-knock-pi@0.1.0-poc.10`; exact versions are pinned
+core `0.16.4` connector, install
+`npm:@scotthuang/agent-knock-knock-pi@0.1.0-poc.12`; exact versions are pinned
 and are not advanced by Pi's bulk update command.
 
 ### 4. Start Pi
@@ -452,7 +453,7 @@ Harness independently; it does not require their package versions to match.
 Publishing Pi additionally requires explicit version confirmation:
 
 ```sh
-npm run release:check -- --publish --confirm-version 0.1.0-poc.10
+npm run release:check -- --publish --confirm-version 0.1.0-poc.12
 ```
 
 Prereleases use npm tag `next`; stable versions use `latest`. Tags and GitHub
@@ -502,6 +503,23 @@ a presentation change, not evidence that a candidate is disconnected, and it
 does not change Send routing or callback ownership. Sole empty conversations
 and exact frontend associations remain visible.
 
+Connector **`0.1.0-poc.12`** pins AKK **`0.16.4`** and its synchronized Skill.
+It carries the [Codex CLI 0.165.0 compatibility update](../../docs/codex-0.165.0-compatibility.md):
+exact frontend/backend version reporting, native terminal profiles, Terra model
+label handling, and manual folder-trust blocking. Existing task identities,
+monitor deadlines and callback receipts are preserved. Host version ranges and
+callback/restart ownership are unchanged. This coordinated dependency refresh
+adds no new Pi live-model or external-channel delivery claim and remains on npm `next`.
+
+Connector **`0.1.0-poc.11`** pins AKK **`0.16.3`** and its synchronized Skill.
+Codex version discovery verifies the executable mapped by the selected live
+process, including the official Node launcher's unique native child, before
+using its version. It does not substitute the newly installed CLI version for
+an older running process. Pi Host compatibility, callback ownership and restart
+limits remain unchanged; the DSH-specific durable recovery support does not
+migrate Pi callbacks. This dependency refresh adds no new Pi live-model or
+external-channel acceptance claim and remains on npm `next`.
+
 Connector **`0.1.0-poc.10`** pins AKK **`0.16.2`** and its synchronized Skill.
 Degraded terminal-activity Watches tolerate absent optional process UUID/birth
 metadata. A proven identity change still invalidates the observation; temporarily
@@ -558,8 +576,8 @@ or external-channel delivery run.
 
 These are POC acceptance results, not a promise of compatibility with every
 future Pi, Codex, Claude Code, tmux, or Herdr release. Version
-`0.1.0-poc.10` is an npm prerelease distributed through the `next` dist-tag;
-its publication is coordinated with core `0.16.2` and the DSH connector.
+`0.1.0-poc.12` is an npm prerelease distributed through the `next` dist-tag;
+its publication is coordinated with core `0.16.4` and the DSH connector.
 ClawHub publication remains a separate channel.
 
 ## Deliberate POC limits

package/dist/src/callback-cli-adapter.js

@@ -203,7 +203,8 @@ function callbackOutboxService() {
                 }
             }
         },
-        delivery: { deliver: deliverCallbackViaTransport,
+        delivery: { canDeliver: runtime.delivery.transport.canDeliver,
+            deliver: deliverCallbackViaTransport,
             runTransaction: runCallbackTransaction }
     });
 }

package/dist/src/callback-cli-adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"callback-cli-adapter.js","sourceRoot":"","sources":["../../src/callback-cli-adapter.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,2BAA2B,EAO5B,MAAM,8BAA8B,CAAC;AAMtC,OAAO,EACL,2BAA2B,EAK5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAqB,MAAM,eAAe,CAAC;AAChE,OAAO,EACL,WAAW,EAAE,2BAA2B,EAAE,SAAS,EAAE,mBAAmB,EACxE,YAAY,EAAE,uBAAuB,EAAE,SAAS,EACjD,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MACjC,0BAA0B,CAAC;AAC7B,OAAO,EACL,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EACxD,YAAY,EACb,MAAM,0BAA0B,CAAC;AAoDlC,MAAM,kBAAkB,GAAG,IAAI,iBAAiB,EAA2B,CAAC;AAC5E,SAAS,eAAe;IACtB,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,EAAE,CAAC;IAC9C,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC5E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ,CAAQ,KAAY,EAAE,OAAe;IACpD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAClE,OAAO,KAAuC,CAAC;AACjD,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB;IACzC,OAAO,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AACnE,CAAC;AAED,SAAS,WAAW,CAAC,OAA2B;IAC9C,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC7E,sBAAsB,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,gBAAgB,CAAC,OAA2B;IACnD,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC7C,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE;QACtC,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QACnC,OAAO,CAAC,SAAS,CAAC,wBAAwB,CAAC;YACzC,QAAQ;YACR,YAAY,EAAE,KAAK;YACnB,MAAM,EAAE,oBAAoB;SAC7B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,qBAAqB,EAAE,CAAC,KAAK,CAAC;QAC5C,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO;KACrE,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW;QAAE,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAmC;IAEjE,IAAI,QAA0B,CAAC;IAC/B,eAAe,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE;QAC3E,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC,KAAK,CAAC,eAAe,CAC1D,GAAG,OAAO,CAAC,SAAS,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;gBAAS,CAAC;YACT,YAAY,EAAE,CAAC;QACjB,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,mBAAmB,CAAC,QAAS,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,2BAA2B,CAClC,KAA2B;IAE3B,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,IAAI,QAA2C,CAAC;IAChD,IAAI,CAAC;QACH,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,uBAAuB,CAAC,SAAS,EAAE;YACxC,WAAW,EAAE,mBAAmB;YAChC,UAAU,EAAE,kCAAkC;SAC/C,CAAC,CAAC;IACL,CAAC;IACD,IAAI,kBAGS,CAAC;IACd,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,MAAM,gBAAgB,GAAG,CAAC,KAA6B,EAAQ,EAAE;QAC/D,IAAI,OAA+B,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB,GAAG,IAAI,CAAC;YACzB,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAClE,IAAI,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACvC,kBAAkB,GAAG,OAAO,CAAC;YAC7B,KAAK,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QACD,KAAK,CAAC,UAAU,EAAE,CAAC;YACjB,KAAK,EAAE,sBAAsB;YAC7B,GAAG,QAAQ;SACZ,CAAC,CAAC;IACL,CAAC,CAAC;IACF,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC;YACzC,GAAG,QAAQ;YACX,gBAAgB;SACjB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,uBAAuB,CAC5B,QAAQ,CAAC,KAAK,EACd,kBAAkB,IAAI,kCAAkC,EAAE,CAC3D,CAAC;IACJ,CAAC;IACD,IAAI,OAA+B,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,kBAAkB,IAAI,kCAAkC,EAAE,CAAC;IACvE,CAAC;IACD,IAAI,kBAAkB,IAAI,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC7D,OAAO,GAAG,kBAAkB,CAAC;IAC/B,CAAC;SAAM,IAAI,iBAAiB,IAAI,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QACnE,OAAO,GAAG,kCAAkC,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,uBAAuB,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,kCAAkC;IACzC,OAAO;QACL,WAAW,EAAE,WAAW;QACxB,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,MAAM,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAAkC,EAClC,OAA+B;IAE/B,MAAM,cAAc,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,EAAE,GAAG,cAAc,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,KAAK,UAAU,CAAC;IACpD,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,KAAK,WAAW,CAAC;IACtD,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC5D,MAAM,eAAe,GAAG,qBAAqB,CAC3C,OAAO,EACP,kBAAkB,CACnB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,EAAE,aAAa,CAAC;QAC9D,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IAChD,OAAO;QACL,IAAI,EAAE,qBAAqB,CAAC,OAAO,EAAE,eAAe,CAAC;YACnD,KAAK,EAAE,SAAS,IAAI,oBAAoB;QAC1C,SAAS,EAAE;YACT,MAAM,EAAE,eAAe;YACvB,GAAG,CAAC,QAAQ;gBACV,CAAC,CAAC;oBACE,WAAW,EAAE,OAAO,CAAC,WAAW;iBACjC;gBACH,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;SAC/B;QACD,IAAI,EAAE;YACJ,MAAM,EAAE,UAAU;SACnB;QACD,eAAe,EAAE,OAAO;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAA+B;IAE/B,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAC3D,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IACnD,OAAO;QACL,IAAI;QACJ,SAAS;QACT,IAAI;QACJ,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAA+B,EAC/B,KAAa;IAEb,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,SAAS,qBAAqB;IAC5B,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,OAAO,2BAA2B,CAAC;QACjC,KAAK,EAAE;YACL,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS;YAChC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU;YACpC,MAAM,EAAE,WAAW;YACnB,aAAa,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,WAAW,CAC9C,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACjC,sBAAsB,EAAE,2BAA2B;YACnD,eAAe,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE;gBACxC,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,SAAS,OAAO,CAAC,CAAC;gBACxE,IAAI,CAAC;oBAAC,OAAO,SAAS,EAAE,CAAC;gBAAC,CAAC;wBAAS,CAAC;oBAAC,YAAY,EAAE,CAAC;gBAAC,CAAC;YACzD,CAAC;YACD,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU;YACpC,oBAAoB,EAAE,gBAAgB,EAAE,mBAAmB;SAC5D;QACD,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE;YACP,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa;YAC7D,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW;YACxC,SAAS,EAAE,YAAY;YACvB,eAAe,EAAE,GAAG,EAAE;gBACpB,IAAI,MAAM,EAAE,CAAC,0CAA0C,KAAK,GAAG,EAAE,CAAC;oBAChE,OAAO,CAAC,EAAE,CAAC,CAAC;gBACd,CAAC;YACH,CAAC;SACF;QACD,QAAQ,EAAE,EAAE,OAAO,EAAE,2BAA2B;YAChD,cAAc,EAAE,sBAAsB,EAAE;KACzC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAmC;IAChE,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,4BAA4B,CAAC,CAAC;IAC5D,OAAO,qBAAqB,EAAE,CAAC,OAAO,CAAC;QACrC,OAAO,EAAE,OAAO,EAAE,UAAU,CAC1B,OAAO,CAAC,GAAG,IAAI,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;KACzD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,0BAA0B,CAAC,MAA+B;IACjE,YAAY,CAAC;QACX,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO;QAC1D,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC;QACzC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;QACxD,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;KACxE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAA0B,EAC1B,EAAE,IAAI,GAAG,IAAI,EAAE,GAAuB,EAAE;IAExC,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC7D,IAAI,IAAI;QAAE,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,YAAqC;IAErC,MAAM,IAAI,GAAG,CAAS,SAAuB,EAAU,EAAE,CACvD,kBAAkB,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAClD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC1D,gBAAgB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACpE,gBAAgB,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CACxC,qBAAqB,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACrD,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CACtC,qBAAqB,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACnD,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CACpC,qBAAqB,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACjD,2BAA2B,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAChD,qBAAqB,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC;QAC7D,8BAA8B,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CACnD,qBAAqB,EAAE,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC;QAChE,wBAAwB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAC7C,qBAAqB,EAAE,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAC1D,yBAAyB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAC9C,qBAAqB,EAAE,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAC3D,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAC5C,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzC,kBAAkB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;KAC/E,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"callback-cli-adapter.js","sourceRoot":"","sources":["../../src/callback-cli-adapter.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,2BAA2B,EAO5B,MAAM,8BAA8B,CAAC;AAMtC,OAAO,EACL,2BAA2B,EAK5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAqB,MAAM,eAAe,CAAC;AAChE,OAAO,EACL,WAAW,EAAE,2BAA2B,EAAE,SAAS,EAAE,mBAAmB,EACxE,YAAY,EAAE,uBAAuB,EAAE,SAAS,EACjD,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MACjC,0BAA0B,CAAC;AAC7B,OAAO,EACL,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EACxD,YAAY,EACb,MAAM,0BAA0B,CAAC;AAoDlC,MAAM,kBAAkB,GAAG,IAAI,iBAAiB,EAA2B,CAAC;AAC5E,SAAS,eAAe;IACtB,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,EAAE,CAAC;IAC9C,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC5E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ,CAAQ,KAAY,EAAE,OAAe;IACpD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAClE,OAAO,KAAuC,CAAC;AACjD,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB;IACzC,OAAO,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AACnE,CAAC;AAED,SAAS,WAAW,CAAC,OAA2B;IAC9C,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC7E,sBAAsB,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,gBAAgB,CAAC,OAA2B;IACnD,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC7C,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE;QACtC,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QACnC,OAAO,CAAC,SAAS,CAAC,wBAAwB,CAAC;YACzC,QAAQ;YACR,YAAY,EAAE,KAAK;YACnB,MAAM,EAAE,oBAAoB;SAC7B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,qBAAqB,EAAE,CAAC,KAAK,CAAC;QAC5C,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO;KACrE,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW;QAAE,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAmC;IAEjE,IAAI,QAA0B,CAAC;IAC/B,eAAe,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE;QAC3E,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC,KAAK,CAAC,eAAe,CAC1D,GAAG,OAAO,CAAC,SAAS,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;gBAAS,CAAC;YACT,YAAY,EAAE,CAAC;QACjB,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,mBAAmB,CAAC,QAAS,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,2BAA2B,CAClC,KAA2B;IAE3B,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,IAAI,QAA2C,CAAC;IAChD,IAAI,CAAC;QACH,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,uBAAuB,CAAC,SAAS,EAAE;YACxC,WAAW,EAAE,mBAAmB;YAChC,UAAU,EAAE,kCAAkC;SAC/C,CAAC,CAAC;IACL,CAAC;IACD,IAAI,kBAGS,CAAC;IACd,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,MAAM,gBAAgB,GAAG,CAAC,KAA6B,EAAQ,EAAE;QAC/D,IAAI,OAA+B,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB,GAAG,IAAI,CAAC;YACzB,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAClE,IAAI,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACvC,kBAAkB,GAAG,OAAO,CAAC;YAC7B,KAAK,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QACD,KAAK,CAAC,UAAU,EAAE,CAAC;YACjB,KAAK,EAAE,sBAAsB;YAC7B,GAAG,QAAQ;SACZ,CAAC,CAAC;IACL,CAAC,CAAC;IACF,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC;YACzC,GAAG,QAAQ;YACX,gBAAgB;SACjB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,uBAAuB,CAC5B,QAAQ,CAAC,KAAK,EACd,kBAAkB,IAAI,kCAAkC,EAAE,CAC3D,CAAC;IACJ,CAAC;IACD,IAAI,OAA+B,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,kBAAkB,IAAI,kCAAkC,EAAE,CAAC;IACvE,CAAC;IACD,IAAI,kBAAkB,IAAI,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC7D,OAAO,GAAG,kBAAkB,CAAC;IAC/B,CAAC;SAAM,IAAI,iBAAiB,IAAI,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QACnE,OAAO,GAAG,kCAAkC,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,uBAAuB,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,kCAAkC;IACzC,OAAO;QACL,WAAW,EAAE,WAAW;QACxB,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,MAAM,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAAkC,EAClC,OAA+B;IAE/B,MAAM,cAAc,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,EAAE,GAAG,cAAc,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,KAAK,UAAU,CAAC;IACpD,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,KAAK,WAAW,CAAC;IACtD,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC5D,MAAM,eAAe,GAAG,qBAAqB,CAC3C,OAAO,EACP,kBAAkB,CACnB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,EAAE,aAAa,CAAC;QAC9D,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IAChD,OAAO;QACL,IAAI,EAAE,qBAAqB,CAAC,OAAO,EAAE,eAAe,CAAC;YACnD,KAAK,EAAE,SAAS,IAAI,oBAAoB;QAC1C,SAAS,EAAE;YACT,MAAM,EAAE,eAAe;YACvB,GAAG,CAAC,QAAQ;gBACV,CAAC,CAAC;oBACE,WAAW,EAAE,OAAO,CAAC,WAAW;iBACjC;gBACH,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;SAC/B;QACD,IAAI,EAAE;YACJ,MAAM,EAAE,UAAU;SACnB;QACD,eAAe,EAAE,OAAO;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAA+B;IAE/B,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAC3D,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IACnD,OAAO;QACL,IAAI;QACJ,SAAS;QACT,IAAI;QACJ,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAA+B,EAC/B,KAAa;IAEb,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,SAAS,qBAAqB;IAC5B,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,OAAO,2BAA2B,CAAC;QACjC,KAAK,EAAE;YACL,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS;YAChC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU;YACpC,MAAM,EAAE,WAAW;YACnB,aAAa,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,WAAW,CAC9C,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACjC,sBAAsB,EAAE,2BAA2B;YACnD,eAAe,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE;gBACxC,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,SAAS,OAAO,CAAC,CAAC;gBACxE,IAAI,CAAC;oBAAC,OAAO,SAAS,EAAE,CAAC;gBAAC,CAAC;wBAAS,CAAC;oBAAC,YAAY,EAAE,CAAC;gBAAC,CAAC;YACzD,CAAC;YACD,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU;YACpC,oBAAoB,EAAE,gBAAgB,EAAE,mBAAmB;SAC5D;QACD,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE;YACP,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa;YAC7D,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW;YACxC,SAAS,EAAE,YAAY;YACvB,eAAe,EAAE,GAAG,EAAE;gBACpB,IAAI,MAAM,EAAE,CAAC,0CAA0C,KAAK,GAAG,EAAE,CAAC;oBAChE,OAAO,CAAC,EAAE,CAAC,CAAC;gBACd,CAAC;YACH,CAAC;SACF;QACD,QAAQ,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU;YAC7D,OAAO,EAAE,2BAA2B;YACpC,cAAc,EAAE,sBAAsB,EAAE;KACzC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAmC;IAChE,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,4BAA4B,CAAC,CAAC;IAC5D,OAAO,qBAAqB,EAAE,CAAC,OAAO,CAAC;QACrC,OAAO,EAAE,OAAO,EAAE,UAAU,CAC1B,OAAO,CAAC,GAAG,IAAI,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;KACzD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,0BAA0B,CAAC,MAA+B;IACjE,YAAY,CAAC;QACX,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO;QAC1D,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC;QACzC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;QACxD,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;KACxE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAA0B,EAC1B,EAAE,IAAI,GAAG,IAAI,EAAE,GAAuB,EAAE;IAExC,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC7D,IAAI,IAAI;QAAE,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,YAAqC;IAErC,MAAM,IAAI,GAAG,CAAS,SAAuB,EAAU,EAAE,CACvD,kBAAkB,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAClD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC1D,gBAAgB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACpE,gBAAgB,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CACxC,qBAAqB,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACrD,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CACtC,qBAAqB,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACnD,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CACpC,qBAAqB,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACjD,2BAA2B,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAChD,qBAAqB,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC;QAC7D,8BAA8B,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CACnD,qBAAqB,EAAE,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC;QAChE,wBAAwB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAC7C,qBAAqB,EAAE,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAC1D,yBAAyB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAC9C,qBAAqB,EAAE,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAC3D,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAC5C,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzC,kBAAkB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;KAC/E,CAAC,CAAC;AACL,CAAC"}

package/dist/src/callback-outbox-service.d.ts

@@ -6,7 +6,7 @@ export { resolveCallbackGatewayRoute } from "./callback-route-service.js";
 export type { CallbackGatewayRouteCandidate, CallbackPreparationOptions } from "./callback-route-service.js";
 import { type CallbackOutboxLane } from "./callback-outbox-settlement.js";
 import type { TranscriptEvent } from "./transcript.js";
-import { type CallbackEnvelopeV1, type CallbackRouteV1 } from "./callback-transport.js";
+import { type CallbackEnvelopeV1, type CallbackRouteV1, type CallbackTransport } from "./callback-transport.js";
 export interface PrepareCallbackOutboxInput {
     options: CallbackPreparationOptions;
     logPath: string;
@@ -152,6 +152,7 @@ export interface CallbackOutboxServicePorts {
         crashCheckpoint(name: "after_local_completion_state"): void;
     };
     delivery: {
+        canDeliver?: CallbackTransport["canDeliver"];
         deliver(input: DeliverCallbackInput): CallbackDeliveryOutcome;
         runTransaction(options: CallbackPreparationOptions): CallbackExecutionResult;
     };

package/dist/src/callback-outbox-service.js

@@ -6,7 +6,8 @@ export { resolveCallbackGatewayRoute } from "./callback-route-service.js";
 import { callbackOutboxEvent, callbackOutboxField, createCallbackOutboxSettlement } from "./callback-outbox-settlement.js";
 import { createDurableNotificationLease } from "./durable-notification-kernel.js";
 import { canonicalJson } from "./canonical-json.js";
-import { parseCallbackAttemptOutcome } from "./callback-transport.js";
+import { callbackRouteDeliveryEligible, parseCallbackAttemptOutcome } from "./callback-transport.js";
+import { resolveCallbackRouteAuthority } from "./callback-route-authority.js";
 import { isRecord, nonBlankString as stringValue } from "./value-guards.js";
 function supersedeNotificationForLifecycleMessage(conversation, message, now) {
     return message.type === "done" || message.type === "error"
@@ -86,6 +87,8 @@ export function createCallbackOutboxService(ports) {
             inheritedDelivery
         });
         assertDispatchCallbackRouteAuthority(conversation, callbackRoute);
+        if (options.recordOnly !== true)
+            assertCallbackRouteRuntime(ports.delivery, callbackRoute);
         const deliveryOptions = resolvedDeliveryOptions({
             options,
             conversation,
@@ -1003,6 +1006,11 @@ function rejectManualRetryDisposition(conversation, disposition) {
             disposition.reason);
     }
 }
+function assertCallbackRouteRuntime(transport, route) {
+    if (!callbackRouteDeliveryEligible(transport, route)) {
+        throw new Error("callback route is unavailable in this Host runtime; no delivery attempt was claimed");
+    }
+}
 function reconcileCallbackDelivery(ports, settlement, { statePath, logPath, delayMs, callbackOutboxLane = "lifecycle" }) {
     const storeDir = ports.state.storeDirForStatePath(statePath);
     return ports.state.withWriter(storeDir, () => ports.state.withTransaction(statePath, () => {
@@ -1088,6 +1096,10 @@ function reconcileCallbackDelivery(ports, settlement, { statePath, logPath, dela
                 reason: disposition.reason
             };
         }
+        if (!callbackRouteDeliveryEligible(ports.delivery, resolveCallbackRouteAuthority({ conversation, primaryOutbox: callbackDelivery }))) {
+            return { handled: true, conversationId, status: "skipped",
+                reason: "callback_route_runtime_unavailable" };
+        }
         const configuredDelayMs = Number(delayMs);
         const retryDelayMs = Number.isFinite(configuredDelayMs) &&
             configuredDelayMs >= 0
@@ -1194,6 +1206,8 @@ function observeCallbackRetryMonitor(ports, statePath, callbackOutboxLane) {
     if (disposition.state !== "retryable") {
         return { kind: "stop" };
     }
+    if (!callbackRouteDeliveryEligible(ports.delivery, resolveCallbackRouteAuthority({ conversation, primaryOutbox: delivery })))
+        return { kind: "stop" };
     return {
         kind: "retryable",
         conversation,