audit-tools 0.32.68 → 0.33.1

package/dist/shared/dispatch/providerLaunchFinalize.js

@@ -1,6 +1,103 @@
-import { detectRateLimitFromChannel, detectCreditExhaustionFromChannel, detectQuotaSuspicious } from "../quota/errorParsing.js";
+import { detectRateLimitFromChannel, detectCreditExhaustionFromChannel, detectModelUnavailableFromChannel, detectRequestTooLargeFromChannel, detectQuotaSuspicious, } from "../quota/errorParsing.js";
 import { appendTokenUsageLine } from "../io/tokenUsageLedger.js";
 import { readOptionalJsonFile, readOptionalTextFile } from "../io/json.js";
+/**
+ * Classify a worker's failure text by scanning stderr and stdout in order for known
+ * quota/API-error patterns. Reused identically by both not-accepted (exit ≠ 0) and
+ * accepted-but-no-result-file branches so they cannot drift.
+ *
+ * **Scan order (load-bearing — F4 requires stderr request-too-large BEFORE rate-limit
+ * so a combined "413 ... retry rate limit" cannot cooldown-poison a healthy pool):**
+ *  1. stderr: credit-exhaustion (permanent, no reset timer)
+ *  2. stderr: request-too-large (per-packet sizing fault, no cooldown)
+ *  3. stderr: model-unavailable (404, permanent pool exclusion)
+ *  4. stderr: rate-limit (transient 429)
+ *  5. stdout: credit-exhaustion
+ *  6. stdout: request-too-large
+ *  7. stdout: model-unavailable
+ *  8. stdout: rate-limit
+ *  9. TIER 2 `detectQuotaSuspicious` over both channels combined (fallback pre-filter)
+ *
+ * Returns the corresponding RollingDispatchResult fragment or null if no match.
+ */
+function classifyFailureChannels(packet, stderrText, stdoutText) {
+    // Stderr TIER 1: credit exhaustion (permanent, checked first — must never fall through to rate-limit)
+    const stderrCreditCheck = detectCreditExhaustionFromChannel("error", stderrText);
+    if (stderrCreditCheck.isCreditExhausted) {
+        return {
+            outcome: "credit_exhausted",
+            creditExhaustion: { channel: "error", text: stderrText, rawMatch: stderrCreditCheck.rawMatch },
+        };
+    }
+    // Stderr TIER 1: request-too-large (F4 — must be checked BEFORE rate-limit to prevent cooldown-poisoning)
+    const stderrTooLargeCheck = detectRequestTooLargeFromChannel("error", stderrText);
+    if (stderrTooLargeCheck.isRequestTooLarge) {
+        return {
+            outcome: "packet_too_large",
+            packetTooLarge: { channel: "error", text: stderrText, rawMatch: stderrTooLargeCheck.rawMatch },
+        };
+    }
+    // Stderr TIER 1: model-unavailable (permanent pool exclusion, checked before rate-limit)
+    const stderrModelUnavailableCheck = detectModelUnavailableFromChannel("error", stderrText);
+    if (stderrModelUnavailableCheck.isModelUnavailable) {
+        return {
+            outcome: "model_unavailable",
+            modelUnavailable: { channel: "error", text: stderrText, rawMatch: stderrModelUnavailableCheck.rawMatch },
+        };
+    }
+    // Stderr TIER 1: rate-limit (transient, applies cooldown)
+    const stderrLimitCheck = detectRateLimitFromChannel("error", stderrText);
+    if (stderrLimitCheck.isRateLimited) {
+        return {
+            outcome: "rate_limited",
+            rateLimit: { channel: "error", text: stderrText },
+        };
+    }
+    // Stdout TIER 1: credit exhaustion (some providers report to stdout instead)
+    const stdoutCreditCheck = detectCreditExhaustionFromChannel("status", stdoutText);
+    if (stdoutCreditCheck.isCreditExhausted) {
+        return {
+            outcome: "credit_exhausted",
+            creditExhaustion: { channel: "status", text: stdoutText, rawMatch: stdoutCreditCheck.rawMatch },
+        };
+    }
+    // Stdout TIER 1: request-too-large
+    const stdoutTooLargeCheck = detectRequestTooLargeFromChannel("status", stdoutText);
+    if (stdoutTooLargeCheck.isRequestTooLarge) {
+        return {
+            outcome: "packet_too_large",
+            packetTooLarge: { channel: "status", text: stdoutText, rawMatch: stdoutTooLargeCheck.rawMatch },
+        };
+    }
+    // Stdout TIER 1: model-unavailable
+    const stdoutModelUnavailableCheck = detectModelUnavailableFromChannel("status", stdoutText);
+    if (stdoutModelUnavailableCheck.isModelUnavailable) {
+        return {
+            outcome: "model_unavailable",
+            modelUnavailable: { channel: "status", text: stdoutText, rawMatch: stdoutModelUnavailableCheck.rawMatch },
+        };
+    }
+    // Stdout TIER 1: rate-limit
+    const stdoutLimitCheck = detectRateLimitFromChannel("status", stdoutText);
+    if (stdoutLimitCheck.isRateLimited) {
+        return {
+            outcome: "rate_limited",
+            rateLimit: { channel: "status", text: stdoutText },
+        };
+    }
+    // TIER 2 (Slice A2b): broad pre-filter on combined channels (fallback for unclassified quota-suspicious text)
+    const combinedText = [stderrText, stdoutText].filter((t) => t.length > 0).join("\n");
+    if (combinedText.length > 0 && detectQuotaSuspicious(combinedText)) {
+        return {
+            outcome: "quota_unclassified",
+            quotaUnclassified: {
+                channel: stderrText.length > 0 ? "error" : "status",
+                text: combinedText,
+            },
+        };
+    }
+    return null;
+}
 /**
  * The shared launch-result finalize tail run by BOTH per-packet dispatchers
  * (audit `makeAuditProviderPacketDispatcher`, remediate `makeProviderNodeDispatcher`)
@@ -11,7 +108,8 @@ import { readOptionalJsonFile, readOptionalTextFile } from "../io/json.js";
  * read-only-vs-git-mutating / AuditResult-vs-ImplementWorkerResult divergences.
  *
  * In order:
- *  1. not-accepted → error;
+ *  1. not-accepted → classify the failure text via the shared `classifyFailureChannels`
+ *     helper (mirrors the accepted-but-no-result-file branch so both cannot drift);
  *  2. channel-isolated credit-exhaustion (TIER 1) then session-limit (TIER 1)
  *     detection on stderr (CE-003) → credit_exhausted / non-consuming
  *     rate_limited re-queue (the result file is never scanned for these strings);
@@ -29,40 +127,31 @@ import { readOptionalJsonFile, readOptionalTextFile } from "../io/json.js";
  */
 export async function finalizeProviderLaunchResult(launch, ctx) {
     const { packet } = ctx;
+    // Read both channels for classification (reused by both not-accepted and accepted-but-no-result branches)
+    //
+    // DELIBERATE semantic change (2026-07-17, gap-fix lap): an ACCEPTED launch whose
+    // result file landed + parses is a SUCCESS even if a channel carries limit text —
+    // an agentic worker that retried through transient 429s and still delivered must
+    // not have its completed work discarded and re-run (the old order scanned stderr
+    // before the result read and re-queued such packets). Channel classification now
+    // applies only when the launch was rejected or no result landed; result CONTENT
+    // is still never scanned (CE-003) and is adjudicated by the merge downstream.
+    const stderrText = (await readOptionalTextFile(ctx.stderrPath)) ?? "";
+    const stdoutText = (await readOptionalTextFile(ctx.stdoutPath)) ?? "";
+    // The not-accepted branch NOW runs the channel classifier BEFORE returning error.
+    // This fixes the dogfood gap: a nonzero-exit worker's 429/404/413 text is now scanned.
     if (!launch.accepted) {
+        const classification = classifyFailureChannels(packet, stderrText, stdoutText);
+        if (classification) {
+            return { packet, ...classification };
+        }
+        // No classification matched — return the original error
         return {
             packet,
             outcome: "error",
             error: new Error(launch.error ?? `provider ${ctx.providerName} rejected ${ctx.entityLabel}`),
         };
     }
-    // Channel-isolated session-limit detection (CE-003): only the error/status channel
-    // (stderr) is inspected — the result file is never scanned for limit strings, so a
-    // healthy result quoting a limit never triggers a re-queue.
-    const stderrText = (await readOptionalTextFile(ctx.stderrPath)) ?? "";
-    // Credit exhaustion (out of prepaid usage credits) is checked FIRST and is
-    // architecturally distinct from a rate limit: it carries no reset time, so a
-    // positive match here must never fall through to the resettable rate_limited
-    // path below. Same channel isolation (CE-003) applies — only stderr, never the
-    // consumed result file.
-    const creditCheck = detectCreditExhaustionFromChannel("error", stderrText);
-    if (creditCheck.isCreditExhausted) {
-        return {
-            packet,
-            outcome: "credit_exhausted",
-            creditExhaustion: { channel: "error", text: stderrText, rawMatch: creditCheck.rawMatch },
-        };
-    }
-    const limitCheck = detectRateLimitFromChannel("error", stderrText);
-    if (limitCheck.isRateLimited) {
-        // Non-consuming re-queue: the rolling engine drops the provider and puts this
-        // packet back into the pending pool so it retries once the cooldown passes.
-        return {
-            packet,
-            outcome: "rate_limited",
-            rateLimit: { channel: "error", text: stderrText },
-        };
-    }
     // Reactive cost verification: relay the endpoint-reported cost (when the provider
     // surfaced one) so `handleResult` can demote a declared-free pool that started
     // charging. Absent for providers that report no cost.
@@ -71,45 +160,11 @@ export async function finalizeProviderLaunchResult(launch, ctx) {
     // Contents are adjudicated by the deterministic merge downstream.
     const result = await readOptionalJsonFile(ctx.resultPath);
     if (!result) {
-        // Also check stdout for a session-limit / credit-exhaustion message before
-        // reporting as error (some providers write their status to stdout, not stderr).
-        const stdoutText = (await readOptionalTextFile(ctx.stdoutPath)) ?? "";
-        const stdoutCreditCheck = detectCreditExhaustionFromChannel("status", stdoutText);
-        if (stdoutCreditCheck.isCreditExhausted) {
-            return {
-                packet,
-                outcome: "credit_exhausted",
-                creditExhaustion: { channel: "status", text: stdoutText, rawMatch: stdoutCreditCheck.rawMatch },
-            };
-        }
-        const stdoutLimitCheck = detectRateLimitFromChannel("status", stdoutText);
-        if (stdoutLimitCheck.isRateLimited) {
-            return {
-                packet,
-                outcome: "rate_limited",
-                rateLimit: { channel: "status", text: stdoutText },
-            };
-        }
-        // TIER 2 (Slice A2b): neither channel matched a PRECISE credit/rate-limit
-        // pattern. Before falling through to a silent, unclassified raw `error` —
-        // the exact "worker AND dispatcher both die raw" failure mode
-        // credit-exhaustion detection fixed, but only for text it recognizes — run
-        // the deliberately broad `detectQuotaSuspicious` pre-filter across BOTH
-        // channels combined. A positive match here degrades CONSERVATIVELY
-        // (re-queue with a reversible cooldown, the pool is never permanently
-        // excluded — see the `quota_unclassified` branch in rollingDispatch.ts) and
-        // carries the verbatim text so the operator can classify it and improve the
-        // pattern set, instead of a silent death with no signal at all.
-        const combinedText = [stderrText, stdoutText].filter((t) => t.length > 0).join("\n");
-        if (combinedText.length > 0 && detectQuotaSuspicious(combinedText)) {
-            return {
-                packet,
-                outcome: "quota_unclassified",
-                quotaUnclassified: {
-                    channel: stderrText.length > 0 ? "error" : "status",
-                    text: combinedText,
-                },
-            };
+        // No result file landed — reuse the same channel classifier so both branches cannot drift.
+        // Channel isolation (CE-003) is preserved: result channel is never scanned.
+        const classification = classifyFailureChannels(packet, stderrText, stdoutText);
+        if (classification) {
+            return { packet, ...classification };
         }
         return {
             packet,

package/dist/shared/dispatch/providerLaunchFinalize.js.map

@@ -1 +1 @@
-{"version":3,"file":"providerLaunchFinalize.js","sourceRoot":"","sources":["../../../src/shared/dispatch/providerLaunchFinalize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,iCAAiC,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAChI,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AA4B3E;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,MAAgC,EAChC,GAA2C;IAE3C,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IACvB,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO;YACL,MAAM;YACN,OAAO,EAAE,OAAO;YAChB,KAAK,EAAE,IAAI,KAAK,CACd,MAAM,CAAC,KAAK,IAAI,YAAY,GAAG,CAAC,YAAY,aAAa,GAAG,CAAC,WAAW,EAAE,CAC3E;SACF,CAAC;IACJ,CAAC;IAED,mFAAmF;IACnF,mFAAmF;IACnF,4DAA4D;IAC5D,MAAM,UAAU,GAAG,CAAC,MAAM,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IAEtE,2EAA2E;IAC3E,6EAA6E;IAC7E,6EAA6E;IAC7E,+EAA+E;IAC/E,wBAAwB;IACxB,MAAM,WAAW,GAAG,iCAAiC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC3E,IAAI,WAAW,CAAC,iBAAiB,EAAE,CAAC;QAClC,OAAO;YACL,MAAM;YACN,OAAO,EAAE,kBAAkB;YAC3B,gBAAgB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE;SACzF,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,0BAA0B,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACnE,IAAI,UAAU,CAAC,aAAa,EAAE,CAAC;QAC7B,8EAA8E;QAC9E,4EAA4E;QAC5E,OAAO;YACL,MAAM;YACN,OAAO,EAAE,cAAc;YACvB,SAAS,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE;SAClD,CAAC;IACJ,CAAC;IAED,kFAAkF;IAClF,+EAA+E;IAC/E,sDAAsD;IACtD,MAAM,YAAY,GAChB,MAAM,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAEpF,kFAAkF;IAClF,kEAAkE;IAClE,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAU,GAAG,CAAC,UAAU,CAAC,CAAC;IACnE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,2EAA2E;QAC3E,gFAAgF;QAChF,MAAM,UAAU,GAAG,CAAC,MAAM,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;QACtE,MAAM,iBAAiB,GAAG,iCAAiC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAClF,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;YACxC,OAAO;gBACL,MAAM;gBACN,OAAO,EAAE,kBAAkB;gBAC3B,gBAAgB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,EAAE;aAChG,CAAC;QACJ,CAAC;QACD,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC1E,IAAI,gBAAgB,CAAC,aAAa,EAAE,CAAC;YACnC,OAAO;gBACL,MAAM;gBACN,OAAO,EAAE,cAAc;gBACvB,SAAS,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE;aACnD,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,0EAA0E;QAC1E,8DAA8D;QAC9D,2EAA2E;QAC3E,wEAAwE;QACxE,mEAAmE;QACnE,sEAAsE;QACtE,4EAA4E;QAC5E,4EAA4E;QAC5E,gEAAgE;QAChE,MAAM,YAAY,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,qBAAqB,CAAC,YAAY,CAAC,EAAE,CAAC;YACnE,OAAO;gBACL,MAAM;gBACN,OAAO,EAAE,oBAAoB;gBAC7B,iBAAiB,EAAE;oBACjB,OAAO,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;oBACnD,IAAI,EAAE,YAAY;iBACnB;aACF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,MAAM;YACN,OAAO,EAAE,OAAO;YAChB,KAAK,EAAE,IAAI,KAAK,CACd,cAAc,GAAG,CAAC,WAAW,uBAAuB,GAAG,CAAC,UAAU,EAAE,CACrE;SACF,CAAC;IACJ,CAAC;IAED,kFAAkF;IAClF,gFAAgF;IAChF,0EAA0E;IAC1E,gFAAgF;IAChF,qEAAqE;IACrE,MAAM,oBAAoB,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,KAAK,EAAE;QACtD,SAAS,EAAE,GAAG,CAAC,QAAQ;QACvB,OAAO,EAAE,GAAG,CAAC,MAAM;QACnB,YAAY,EAAE,MAAM,CAAC,aAAa,EAAE,WAAW,IAAI,IAAI;QACvD,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,YAAY,IAAI,IAAI;QACzD,iBAAiB,EAAE,MAAM,CAAC,aAAa,EAAE,eAAe,IAAI,IAAI;QAChE,qBAAqB,EAAE,MAAM,CAAC,aAAa,EAAE,mBAAmB,IAAI,IAAI;QACxE,iBAAiB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;KAClD,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,YAAY,EAAE,CAAC;AACzD,CAAC"}
+{"version":3,"file":"providerLaunchFinalize.js","sourceRoot":"","sources":["../../../src/shared/dispatch/providerLaunchFinalize.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,iCAAiC,EACjC,iCAAiC,EACjC,gCAAgC,EAChC,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AA4B3E;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,uBAAuB,CAC9B,MAAsC,EACtC,UAAkB,EAClB,UAAkB;IAElB,sGAAsG;IACtG,MAAM,iBAAiB,GAAG,iCAAiC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACjF,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;QACxC,OAAO;YACL,OAAO,EAAE,kBAAkB;YAC3B,gBAAgB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,EAAE;SAC/F,CAAC;IACJ,CAAC;IAED,0GAA0G;IAC1G,MAAM,mBAAmB,GAAG,gCAAgC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAClF,IAAI,mBAAmB,CAAC,iBAAiB,EAAE,CAAC;QAC1C,OAAO;YACL,OAAO,EAAE,kBAAkB;YAC3B,cAAc,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,CAAC,QAAQ,EAAE;SAC/F,CAAC;IACJ,CAAC;IAED,yFAAyF;IACzF,MAAM,2BAA2B,GAAG,iCAAiC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC3F,IAAI,2BAA2B,CAAC,kBAAkB,EAAE,CAAC;QACnD,OAAO;YACL,OAAO,EAAE,mBAAmB;YAC5B,gBAAgB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,2BAA2B,CAAC,QAAQ,EAAE;SACzG,CAAC;IACJ,CAAC;IAED,0DAA0D;IAC1D,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACzE,IAAI,gBAAgB,CAAC,aAAa,EAAE,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,cAAc;YACvB,SAAS,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE;SAClD,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,MAAM,iBAAiB,GAAG,iCAAiC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAClF,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;QACxC,OAAO;YACL,OAAO,EAAE,kBAAkB;YAC3B,gBAAgB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,EAAE;SAChG,CAAC;IACJ,CAAC;IAED,mCAAmC;IACnC,MAAM,mBAAmB,GAAG,gCAAgC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACnF,IAAI,mBAAmB,CAAC,iBAAiB,EAAE,CAAC;QAC1C,OAAO;YACL,OAAO,EAAE,kBAAkB;YAC3B,cAAc,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,CAAC,QAAQ,EAAE;SAChG,CAAC;IACJ,CAAC;IAED,mCAAmC;IACnC,MAAM,2BAA2B,GAAG,iCAAiC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC5F,IAAI,2BAA2B,CAAC,kBAAkB,EAAE,CAAC;QACnD,OAAO;YACL,OAAO,EAAE,mBAAmB;YAC5B,gBAAgB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,2BAA2B,CAAC,QAAQ,EAAE;SAC1G,CAAC;IACJ,CAAC;IAED,4BAA4B;IAC5B,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC1E,IAAI,gBAAgB,CAAC,aAAa,EAAE,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,cAAc;YACvB,SAAS,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE;SACnD,CAAC;IACJ,CAAC;IAED,8GAA8G;IAC9G,MAAM,YAAY,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,qBAAqB,CAAC,YAAY,CAAC,EAAE,CAAC;QACnE,OAAO;YACL,OAAO,EAAE,oBAAoB;YAC7B,iBAAiB,EAAE;gBACjB,OAAO,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;gBACnD,IAAI,EAAE,YAAY;aACnB;SACF,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,MAAgC,EAChC,GAA2C;IAE3C,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IAEvB,0GAA0G;IAC1G,EAAE;IACF,iFAAiF;IACjF,kFAAkF;IAClF,iFAAiF;IACjF,iFAAiF;IACjF,iFAAiF;IACjF,gFAAgF;IAChF,8EAA8E;IAC9E,MAAM,UAAU,GAAG,CAAC,MAAM,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IACtE,MAAM,UAAU,GAAG,CAAC,MAAM,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IAEtE,kFAAkF;IAClF,uFAAuF;IACvF,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,cAAc,GAAG,uBAAuB,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QAC/E,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,EAAE,MAAM,EAAE,GAAG,cAAc,EAAE,CAAC;QACvC,CAAC;QACD,wDAAwD;QACxD,OAAO;YACL,MAAM;YACN,OAAO,EAAE,OAAO;YAChB,KAAK,EAAE,IAAI,KAAK,CACd,MAAM,CAAC,KAAK,IAAI,YAAY,GAAG,CAAC,YAAY,aAAa,GAAG,CAAC,WAAW,EAAE,CAC3E;SACF,CAAC;IACJ,CAAC;IAED,kFAAkF;IAClF,+EAA+E;IAC/E,sDAAsD;IACtD,MAAM,YAAY,GAChB,MAAM,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAEpF,kFAAkF;IAClF,kEAAkE;IAClE,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAU,GAAG,CAAC,UAAU,CAAC,CAAC;IACnE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,2FAA2F;QAC3F,4EAA4E;QAC5E,MAAM,cAAc,GAAG,uBAAuB,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QAC/E,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,EAAE,MAAM,EAAE,GAAG,cAAc,EAAE,CAAC;QACvC,CAAC;QAED,OAAO;YACL,MAAM;YACN,OAAO,EAAE,OAAO;YAChB,KAAK,EAAE,IAAI,KAAK,CACd,cAAc,GAAG,CAAC,WAAW,uBAAuB,GAAG,CAAC,UAAU,EAAE,CACrE;SACF,CAAC;IACJ,CAAC;IAED,kFAAkF;IAClF,gFAAgF;IAChF,0EAA0E;IAC1E,gFAAgF;IAChF,qEAAqE;IACrE,MAAM,oBAAoB,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,KAAK,EAAE;QACtD,SAAS,EAAE,GAAG,CAAC,QAAQ;QACvB,OAAO,EAAE,GAAG,CAAC,MAAM;QACnB,YAAY,EAAE,MAAM,CAAC,aAAa,EAAE,WAAW,IAAI,IAAI;QACvD,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,YAAY,IAAI,IAAI;QACzD,iBAAiB,EAAE,MAAM,CAAC,aAAa,EAAE,eAAe,IAAI,IAAI;QAChE,qBAAqB,EAAE,MAAM,CAAC,aAAa,EAAE,mBAAmB,IAAI,IAAI;QACxE,iBAAiB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;KAClD,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,YAAY,EAAE,CAAC;AACzD,CAAC"}

package/dist/shared/dispatch/rollingDispatch.d.ts

@@ -81,7 +81,7 @@ export interface RollingDispatchPacket<TPacket> {
 /** Outcome of dispatching a single packet. */
 export interface RollingDispatchResult<TPacket> {
     packet: RollingDispatchPacket<TPacket>;
-    outcome: "success" | "rate_limited" | "timeout" | "error" | "credit_exhausted" | "quota_unclassified";
+    outcome: "success" | "rate_limited" | "timeout" | "error" | "credit_exhausted" | "model_unavailable" | "packet_too_large" | "quota_unclassified";
     /** Actual tokens consumed, if the provider reports it. */
     actualTokens?: number;
     /**
@@ -129,6 +129,28 @@ export interface RollingDispatchResult<TPacket> {
         text: string;
         rawMatch: string | null;
     };
+    /**
+     * The worker ERROR/STATUS channel evidence that classified a `model_unavailable`
+     * outcome (HTTP 404, model not found — permanent pool exclusion, the model is not
+     * served by this provider). Carried so the consumer's `onModelUnavailable` hook can
+     * surface it as reviewable friction. Absent on non-model_unavailable outcomes.
+     */
+    modelUnavailable?: {
+        channel: WorkerOutputChannel;
+        text: string;
+        rawMatch: string | null;
+    };
+    /**
+     * The worker ERROR/STATUS channel evidence that classified a `packet_too_large`
+     * outcome (HTTP 413, request/payload too large — a per-packet sizing fault for
+     * this particular pool). Carried so the consumer's `onPacketTooLarge` hook can
+     * surface it as reviewable friction. Absent on non-packet_too_large outcomes.
+     */
+    packetTooLarge?: {
+        channel: WorkerOutputChannel;
+        text: string;
+        rawMatch: string | null;
+    };
     /**
      * The worker ERROR/STATUS channel VERBATIM evidence that classified a
      * `quota_unclassified` outcome (Slice A2b, TIER 2): the broad
@@ -224,6 +246,24 @@ export interface RollingDispatchState<TPacket> {
      * documented follow-up (docs/backlog.md) — bounded efficiency only, not a safety gap.
      */
     quotaUnclassifiedPoolIds: Set<string>;
+    /**
+     * Pool ids permanently excluded after a `model_unavailable` result (HTTP 404, the
+     * model is not served by this provider). Monotonic within a run — a pool is never
+     * re-added — mirrors `exhaustedPoolIds` behavior for credit exhaustion but carries
+     * availability semantics instead of billing semantics. Unlike exhausted-pool
+     * re-routing (a timed backoff), a 404 has no reset condition: once a model is
+     * unavailable, the pool is gone for the run.
+     */
+    modelUnavailablePoolIds: Set<string>;
+    /**
+     * Packet id → set of pool ids that 413'd this packet. When a `packet_too_large`
+     * result lands, a pool is never permanently excluded from the whole run (unlike
+     * credit_exhausted or model_unavailable); instead, ONLY THIS PACKET is skipped for
+     * THIS POOL on the next selection pass. Other packets freely bind to the pool, and
+     * this packet retries on any other pool. Discriminator is (packetId, poolId) — each
+     * distinct pair is a separate sizing fault signal.
+     */
+    oversizedPacketPools: Map<string, Set<string>>;
 }
 /** Consumer-provided configuration for the rolling dispatcher. */
 export interface RollingDispatchConfig<TPacket> {
@@ -266,6 +306,33 @@ export interface RollingDispatchConfig<TPacket> {
         poolId: string;
         rawMatch: string | null;
     }) => void;
+    /**
+     * Model unavailable (HTTP 404, model not found — permanent pool exclusion):
+     * invoked once per pool the FIRST time a `model_unavailable` result lands for it —
+     * the model is not served by this provider and the pool is permanently excluded from
+     * this run's admissible set (monotonic `modelUnavailablePoolIds` — never a timed
+     * cooldown). The consumer wires it to friction emission. Best-effort — a throwing
+     * hook never aborts dispatch. Omit to leave the exclusion silent (no friction
+     * emitted, exclusion still happens).
+     */
+    onModelUnavailable?: (info: {
+        poolId: string;
+        rawMatch: string | null;
+    }) => void;
+    /**
+     * Packet too large (HTTP 413, payload/request too large — per-packet sizing fault):
+     * invoked every time a `packet_too_large` result lands — the pool is NOT permanently
+     * excluded (unlike model_unavailable or credit_exhausted); only THIS PACKET is
+     * skipped for THIS POOL on re-selection. Each (packet,pool) pair is distinct signal,
+     * so the hook fires per distinct pair, not per pool. The consumer wires it to
+     * friction emission. Best-effort — a throwing hook never aborts dispatch. Omit to
+     * leave the re-queue silent (no friction, re-queue still happens).
+     */
+    onPacketTooLarge?: (info: {
+        poolId: string;
+        packetId: string;
+        rawMatch: string | null;
+    }) => void;
     /**
      * Quota-unclassified harvest (Slice A2b, TIER 2): invoked once per pool the
      * FIRST time a `quota_unclassified` result lands for it — a worker death whose
@@ -417,7 +484,7 @@ export declare function scorePacketComplexity<TPacket>(packet: RollingDispatchPa
  *
  * Returns null if no eligible pool currently has quota headroom.
  */
-export declare function selectProvider<TPacket>(packet: RollingDispatchPacket<TPacket>, confirmedPools: CapacityPool[], inFlightTracker: InFlightTokenTracker, quotaStateEntries: Record<string, QuotaStateEntry>, sessionConfig: SessionConfig, exhaustedPoolIds?: ReadonlySet<string>, pausedPoolResetAt?: ReadonlyMap<string, number>, costDemotedPoolIds?: ReadonlySet<string>, now?: number): ProviderSlot | null;
+export declare function selectProvider<TPacket>(packet: RollingDispatchPacket<TPacket>, confirmedPools: CapacityPool[], inFlightTracker: InFlightTokenTracker, quotaStateEntries: Record<string, QuotaStateEntry>, sessionConfig: SessionConfig, exhaustedPoolIds?: ReadonlySet<string>, pausedPoolResetAt?: ReadonlyMap<string, number>, costDemotedPoolIds?: ReadonlySet<string>, oversizedPacketPools?: ReadonlyMap<string, ReadonlySet<string>>, now?: number): ProviderSlot | null;
 /**
  * Create a rolling dispatcher for the given configuration.
  *

package/dist/shared/dispatch/rollingDispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rollingDispatch.d.ts","sourceRoot":"","sources":["../../../src/shared/dispatch/rollingDispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,KAAK,EAAE,eAAe,EAA4B,MAAM,mBAAmB,CAAC;AAcnF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AASvE,oEAAoE;AACpE,MAAM,WAAW,qBAAqB,CAAC,OAAO;IAC5C,8DAA8D;IAC9D,EAAE,EAAE,MAAM,CAAC;IACX,gEAAgE;IAChE,OAAO,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,8CAA8C;AAC9C,MAAM,WAAW,qBAAqB,CAAC,OAAO;IAC5C,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,EAAE,SAAS,GAAG,cAAc,GAAG,SAAS,GAAG,OAAO,GAAG,kBAAkB,GAAG,oBAAoB,CAAC;IACtG,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE;QACV,OAAO,EAAE,mBAAmB,CAAC;QAC7B,IAAI,EAAE,MAAM,CAAC;QACb;;;;;;;;;WASG;QACH,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE;QACjB,OAAO,EAAE,mBAAmB,CAAC;QAC7B,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;KACzB,CAAC;IACF;;;;;;;OAOG;IACH,iBAAiB,CAAC,EAAE;QAClB,OAAO,EAAE,mBAAmB,CAAC;QAC7B,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,mEAAmE;AACnE,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wDAAwD;AACxD,MAAM,WAAW,aAAa,CAAC,OAAO;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACvC,YAAY,EAAE,YAAY,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;IACjD;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,+CAA+C;AAC/C,MAAM,WAAW,oBAAoB,CAAC,OAAO;IAC3C,YAAY,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9C,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B;;;;;OAKG;IACH,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B;;;;;;;;OAQG;IACH,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC;;;;OAIG;IACH,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB;;;;;;;;;;;OAWG;IACH,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC;;;;;;;;;;;;;;;;OAgBG;IACH,wBAAwB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACvC;AAED,kEAAkE;AAClE,MAAM,WAAW,qBAAqB,CAAC,OAAO;IAC5C,qDAAqD;IACrD,cAAc,EAAE,YAAY,EAAE,CAAC;IAC/B,aAAa,EAAE,aAAa,CAAC;IAC7B;;;OAGG;IACH,cAAc,EAAE,CACd,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,EACtC,IAAI,EAAE,YAAY,KACf,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,uFAAuF;IACvF,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IAC5D;;;;;;;;;OASG;IACH,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,eAAe,EAAE,MAAM,CAAC;QACxB,mBAAmB,EAAE,MAAM,CAAC;KAC7B,KAAK,IAAI,CAAC;IACX;;;;;;;;;OASG;IACH,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KAAK,IAAI,CAAC;IAChF;;;;;;;;;;OAUG;IACH,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACvE;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC;;;;;;;;;;OAUG;IACH,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IAClD;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,CAChB,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,EACtC,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,KACnC,IAAI,CAAC;IACV;;;;;;;;;;;OAWG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC;IAC/C;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,CACzB,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,EACtC,MAAM,EAAE,MAAM,KACX,MAAM,CAAC;CACb;AAED,6EAA6E;AAC7E,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,4DAA4D;AAC5D,MAAM,WAAW,iBAAiB,CAAC,OAAO;IACxC;;;;OAIG;IACH,OAAO,CAAC,OAAO,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC;IACzD;;;;OAIG;IACH,GAAG,IAAI,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjD,sDAAsD;IACtD,QAAQ,IAAI,QAAQ,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;IACpD;;;;;OAKG;IACH,WAAW,IAAI,yBAAyB,GAAG,IAAI,CAAC;CACjD;AAMD;;;GAGG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAE1D,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAKtD,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAKrD,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;CAG1C;AAMD,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,OAAO,EAC3C,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,GACrC,MAAM,CAER;AAoDD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,cAAc,CAAC,OAAO,EACpC,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,EACtC,cAAc,EAAE,YAAY,EAAE,EAC9B,eAAe,EAAE,oBAAoB,EACrC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,EAClD,aAAa,EAAE,aAAa,EAC5B,gBAAgB,GAAE,WAAW,CAAC,MAAM,CAAa,EACjD,iBAAiB,GAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAa,EAC1D,kBAAkB,GAAE,WAAW,CAAC,MAAM,CAAa,EACnD,GAAG,GAAE,MAAmB,GACvB,YAAY,GAAG,IAAI,CAuHrB;AAMD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAC7C,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,EACtC,OAAO,GAAE,sBAA2B,GACnC,iBAAiB,CAAC,OAAO,CAAC,CAgtB5B"}
+{"version":3,"file":"rollingDispatch.d.ts","sourceRoot":"","sources":["../../../src/shared/dispatch/rollingDispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEpF,OAAO,KAAK,EAAE,eAAe,EAA4B,MAAM,mBAAmB,CAAC;AAcnF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AASvE,oEAAoE;AACpE,MAAM,WAAW,qBAAqB,CAAC,OAAO;IAC5C,8DAA8D;IAC9D,EAAE,EAAE,MAAM,CAAC;IACX,gEAAgE;IAChE,OAAO,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,8CAA8C;AAC9C,MAAM,WAAW,qBAAqB,CAAC,OAAO;IAC5C,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,EACH,SAAS,GACT,cAAc,GACd,SAAS,GACT,OAAO,GACP,kBAAkB,GAClB,mBAAmB,GACnB,kBAAkB,GAClB,oBAAoB,CAAC;IACzB,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE;QACV,OAAO,EAAE,mBAAmB,CAAC;QAC7B,IAAI,EAAE,MAAM,CAAC;QACb;;;;;;;;;WASG;QACH,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE;QACjB,OAAO,EAAE,mBAAmB,CAAC;QAC7B,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;KACzB,CAAC;IACF;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE;QACjB,OAAO,EAAE,mBAAmB,CAAC;QAC7B,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;KACzB,CAAC;IACF;;;;;OAKG;IACH,cAAc,CAAC,EAAE;QACf,OAAO,EAAE,mBAAmB,CAAC;QAC7B,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;KACzB,CAAC;IACF;;;;;;;OAOG;IACH,iBAAiB,CAAC,EAAE;QAClB,OAAO,EAAE,mBAAmB,CAAC;QAC7B,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,mEAAmE;AACnE,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wDAAwD;AACxD,MAAM,WAAW,aAAa,CAAC,OAAO;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACvC,YAAY,EAAE,YAAY,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;IACjD;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,+CAA+C;AAC/C,MAAM,WAAW,oBAAoB,CAAC,OAAO;IAC3C,YAAY,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9C,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B;;;;;OAKG;IACH,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B;;;;;;;;OAQG;IACH,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC;;;;OAIG;IACH,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB;;;;;;;;;;;OAWG;IACH,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC;;;;;;;;;;;;;;;;OAgBG;IACH,wBAAwB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACtC;;;;;;;OAOG;IACH,uBAAuB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC;;;;;;;OAOG;IACH,oBAAoB,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;CAChD;AAED,kEAAkE;AAClE,MAAM,WAAW,qBAAqB,CAAC,OAAO;IAC5C,qDAAqD;IACrD,cAAc,EAAE,YAAY,EAAE,CAAC;IAC/B,aAAa,EAAE,aAAa,CAAC;IAC7B;;;OAGG;IACH,cAAc,EAAE,CACd,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,EACtC,IAAI,EAAE,YAAY,KACf,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,uFAAuF;IACvF,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IAC5D;;;;;;;;;OASG;IACH,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,eAAe,EAAE,MAAM,CAAC;QACxB,mBAAmB,EAAE,MAAM,CAAC;KAC7B,KAAK,IAAI,CAAC;IACX;;;;;;;;;OASG;IACH,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KAAK,IAAI,CAAC;IAChF;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KAAK,IAAI,CAAC;IACjF;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;KACzB,KAAK,IAAI,CAAC;IACX;;;;;;;;;;OAUG;IACH,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACvE;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC;;;;;;;;;;OAUG;IACH,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IAClD;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,CAChB,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,EACtC,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,KACnC,IAAI,CAAC;IACV;;;;;;;;;;;OAWG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC;IAC/C;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,CACzB,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,EACtC,MAAM,EAAE,MAAM,KACX,MAAM,CAAC;CACb;AAED,6EAA6E;AAC7E,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,4DAA4D;AAC5D,MAAM,WAAW,iBAAiB,CAAC,OAAO;IACxC;;;;OAIG;IACH,OAAO,CAAC,OAAO,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC;IACzD;;;;OAIG;IACH,GAAG,IAAI,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjD,sDAAsD;IACtD,QAAQ,IAAI,QAAQ,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;IACpD;;;;;OAKG;IACH,WAAW,IAAI,yBAAyB,GAAG,IAAI,CAAC;CACjD;AAMD;;;GAGG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAE1D,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAKtD,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAKrD,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;CAG1C;AAMD,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,OAAO,EAC3C,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,GACrC,MAAM,CAER;AAoDD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,cAAc,CAAC,OAAO,EACpC,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,EACtC,cAAc,EAAE,YAAY,EAAE,EAC9B,eAAe,EAAE,oBAAoB,EACrC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,EAClD,aAAa,EAAE,aAAa,EAC5B,gBAAgB,GAAE,WAAW,CAAC,MAAM,CAAa,EACjD,iBAAiB,GAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAa,EAC1D,kBAAkB,GAAE,WAAW,CAAC,MAAM,CAAa,EACnD,oBAAoB,GAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAa,EAC1E,GAAG,GAAE,MAAmB,GACvB,YAAY,GAAG,IAAI,CA8IrB;AAMD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAC7C,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,EACtC,OAAO,GAAE,sBAA2B,GACnC,iBAAiB,CAAC,OAAO,CAAC,CAg3B5B"}

package/dist/shared/dispatch/rollingDispatch.js

@@ -55,6 +55,7 @@
  *   carries the verbatim matched text so an operator can classify the death and
  *   improve `errorParsing.ts`'s pattern set (mirrors `onCreditExhausted`).
  */
+import { AGENTIC_WORKER_HARNESS_OVERHEAD_TOKENS } from "../quota/capacity.js";
 import { scheduleWave, } from "../quota/scheduler.js";
 import { recordWaveOutcome, readQuotaState, emptyQuotaState, quotaSnapshotWindowPctMap, foldSlopeObservationFromPctMaps, } from "../quota/state.js";
 import { buildEmptyPoolTerminal, buildQuotaPausedTerminal } from "../quota/capacity.js";
@@ -166,7 +167,7 @@ function isPoolQuotaDegraded(schedule, budgetTokens) {
  *
  * Returns null if no eligible pool currently has quota headroom.
  */
-export function selectProvider(packet, confirmedPools, inFlightTracker, quotaStateEntries, sessionConfig, exhaustedPoolIds = new Set(), pausedPoolResetAt = new Map(), costDemotedPoolIds = new Set(), now = Date.now()) {
+export function selectProvider(packet, confirmedPools, inFlightTracker, quotaStateEntries, sessionConfig, exhaustedPoolIds = new Set(), pausedPoolResetAt = new Map(), costDemotedPoolIds = new Set(), oversizedPacketPools = new Map(), now = Date.now()) {
     const complexity = scorePacketComplexity(packet);
     const highComplexity = complexity >= 0.5;
     // Pause-honor (piece D): a pool paused until a stated host session-limit reset
@@ -177,6 +178,22 @@ export function selectProvider(packet, confirmedPools, inFlightTracker, quotaSta
         const resetAt = pausedPoolResetAt.get(poolId);
         return resetAt != null && now < resetAt;
     };
+    // Packet-too-large skip (F4): this packet has been rejected as too large by some
+    // pools (HTTP 413). Skip those pools for THIS PACKET only — other packets freely
+    // bind to them. Allows packet to retry on a different pool.
+    const isTooLargeForThisPacket = (poolId) => {
+        const tooLargePools = oversizedPacketPools.get(packet.id);
+        return tooLargePools != null && tooLargePools.has(poolId);
+    };
+    // Context-fit skip (U2): this packet does not fit within a pool's declared context cap
+    // (plus harness overhead). Skip pools that cannot fit the packet. A pool with unknown
+    // context cap (null) always fits. This is the selection-time guard; partition-time fit
+    // checking in hybridDispatch ensures every in-process assignment is guaranteed to fit.
+    const doesNotFitContext = (pool) => {
+        if (pool.contextCapTokens == null)
+            return false; // unknown cap → always fits
+        return packet.estimatedTokens + AGENTIC_WORKER_HARNESS_OVERHEAD_TOKENS > pool.contextCapTokens;
+    };
     // Ask scheduleWave whether each pool can accept one more slot, accounting for
     // in-flight tokens as additional estimated slot cost. The schedule already
     // folds in the real-time quota snapshot, the resolved provider limits, and any
@@ -227,7 +244,10 @@ export function selectProvider(packet, confirmedPools, inFlightTracker, quotaSta
         });
     };
     const evaluated = confirmedPools
-        .filter((p) => !exhaustedPoolIds.has(p.id) && !isPausedNow(p.id))
+        .filter((p) => !exhaustedPoolIds.has(p.id) &&
+        !isPausedNow(p.id) &&
+        !isTooLargeForThisPacket(p.id) &&
+        !doesNotFitContext(p))
         .map((pool) => ({ pool, schedule: scheduleForPool(pool) }));
     // Single ordering pass (INV-QD-14 proactive spill), in priority order — quota
     // management is one track, always-on, so this ordering always applies:
@@ -286,7 +306,7 @@ export function selectProvider(packet, confirmedPools, inFlightTracker, quotaSta
  * separate concurrency cap unless `options.maxConcurrentPerPool` is set.
  */
 export function createRollingDispatcher(config, options = {}) {
-    const { confirmedPools, sessionConfig, dispatchPacket, onResult, onCostDrift, onCreditExhausted, onQuotaUnclassified, costDemotedPoolIds: injectedCostDemotedPoolIds, isPacketEscalated, recordRateLimit, reservationLedger, resolvePoolBudget, resolveOutputReservation: resolveOutputReservationFn, } = config;
+    const { confirmedPools, sessionConfig, dispatchPacket, onResult, onCostDrift, onCreditExhausted, onModelUnavailable, onPacketTooLarge, onQuotaUnclassified, costDemotedPoolIds: injectedCostDemotedPoolIds, isPacketEscalated, recordRateLimit, reservationLedger, resolvePoolBudget, resolveOutputReservation: resolveOutputReservationFn, } = config;
     const state = {
         pendingQueue: [],
         inFlight: new Map(),
@@ -298,6 +318,8 @@ export function createRollingDispatcher(config, options = {}) {
         // + levels; a standalone dispatcher owns a fresh per-instance set.
         costDemotedPoolIds: injectedCostDemotedPoolIds ?? new Set(),
         quotaUnclassifiedPoolIds: new Set(),
+        modelUnavailablePoolIds: new Set(),
+        oversizedPacketPools: new Map(),
     };
     const inFlightTracker = new InFlightTokenTracker();
     const allResults = [];
@@ -469,6 +491,9 @@ export function createRollingDispatcher(config, options = {}) {
         // cooldown is a TIMED reset; credit exhaustion has none. The permanent-for-
         // the-run exclusion lives entirely in the in-memory exhaustedPoolIds set
         // below, never in the persisted quota-state cooldown.
+        // model_unavailable and packet_too_large record as 'error' — no cooldown
+        // semantics. A 404 is permanent (model not served), a 413 is a per-packet
+        // sizing fault; neither carries reset timing.
         // quota_unclassified records as 'rate_limited' — NOT 'error' — precisely so
         // recordWaveOutcomeUnsafe DOES apply its exponential-backoff cooldown_until
         // (state.ts:412-430). That reversible, timed cooldown IS the "conservative
@@ -479,8 +504,10 @@ export function createRollingDispatcher(config, options = {}) {
             : result.outcome === "rate_limited" ? "rate_limited"
                 : result.outcome === "error" ? "error"
                     : result.outcome === "credit_exhausted" ? "error"
-                        : result.outcome === "quota_unclassified" ? "rate_limited"
-                            : "timeout";
+                        : result.outcome === "model_unavailable" ? "error"
+                            : result.outcome === "packet_too_large" ? "error"
+                                : result.outcome === "quota_unclassified" ? "rate_limited"
+                                    : "timeout";
         try {
             await recordWaveOutcome(providerModelKey, { outcome: quotaOutcome });
         }
@@ -615,6 +642,113 @@ export function createRollingDispatcher(config, options = {}) {
             }
             return;
         }
+        // Model unavailable (HTTP 404, model not found): the model is not served by
+        // this provider, so the pool is permanently excluded from this run's admissible
+        // set (monotonic modelUnavailablePoolIds). Unlike rate_limited/credit_exhausted
+        // (which carry reset/operator-action semantics), a 404 is permanent: the model
+        // simply doesn't exist at this provider. The pool is added to exhaustedPoolIds
+        // and the packet is re-queued so a different pool absorbs it. If this was the
+        // last admissible pool, the run degrades to the SAME empty_pool / quota_paused
+        // stranding path (INV-QD-07).
+        if (result.outcome === "model_unavailable") {
+            // Fire the hook only the FIRST time a given pool hits model-unavailable
+            // (mirrors the `firstForPool` gate on `onCreditExhausted`).
+            const firstForPool = !state.modelUnavailablePoolIds.has(providerSlot.poolId);
+            state.modelUnavailablePoolIds.add(providerSlot.poolId);
+            // Add to exhaustedPoolIds so selectProvider skips it (permanent exclusion for the run)
+            state.exhaustedPoolIds.add(providerSlot.poolId);
+            if (firstForPool) {
+                try {
+                    onModelUnavailable?.({
+                        poolId: providerSlot.poolId,
+                        rawMatch: result.modelUnavailable?.rawMatch ?? null,
+                    });
+                }
+                catch {
+                    // Best-effort: a throwing friction hook must never abort dispatch.
+                }
+            }
+            if (!state.completedIds.has(packet.id) && !state.pendingQueue.some((q) => q.id === packet.id)) {
+                state.pendingQueue.unshift(packet);
+            }
+            try {
+                process.stderr.write(JSON.stringify({
+                    ts: new Date().toISOString(),
+                    kind: "rolling_dispatch_requeue_model_unavailable",
+                    packet_id: packet.id,
+                    exhausted_pool_id: providerSlot.poolId,
+                }) + "\n");
+            }
+            catch {
+                // Observability must never abort a run.
+            }
+            return;
+        }
+        // Packet too large (HTTP 413, payload/request too large): a per-packet sizing
+        // fault for this particular (packet, pool) combination. UNLIKE model_unavailable
+        // or credit_exhausted, the pool is NOT permanently excluded — only THIS PACKET
+        // is skipped for THIS POOL on the next selection pass. The packet is re-queued
+        // to retry on a different pool. The pool remains available for other packets
+        // whose payload might fit.
+        if (result.outcome === "packet_too_large") {
+            // Track this (packet, pool) pair so selectProvider skips it on re-selection
+            if (!state.oversizedPacketPools.has(packet.id)) {
+                state.oversizedPacketPools.set(packet.id, new Set());
+            }
+            state.oversizedPacketPools.get(packet.id).add(providerSlot.poolId);
+            // Fire the hook every time this outcome lands (unlike model_unavailable which
+            // fires once per pool — each (packet,pool) pair is distinct signal).
+            try {
+                onPacketTooLarge?.({
+                    poolId: providerSlot.poolId,
+                    packetId: packet.id,
+                    rawMatch: result.packetTooLarge?.rawMatch ?? null,
+                });
+            }
+            catch {
+                // Best-effort: a throwing friction hook must never abort dispatch.
+            }
+            // Livelock guard: a 413 skip is PERMANENT for the (packet, pool) pair (a
+            // packet never shrinks), so a packet whose skip-set now covers EVERY
+            // non-excluded pool can never dispatch again — re-queueing it would spin
+            // the dispatch loop forever (noPoolCanAcceptNow is pool-level and never
+            // fires for a per-packet condition). Strand it LOUD instead. A merely
+            // PAUSED pool still counts as potentially-available only if the packet
+            // has not 413'd it — pauses reset, 413s don't.
+            const skipSet = state.oversizedPacketPools.get(packet.id);
+            const anyPoolCouldEverTake = confirmedPools.some((p) => !state.exhaustedPoolIds.has(p.id) && !skipSet.has(p.id));
+            if (!anyPoolCouldEverTake) {
+                if (!state.completedIds.has(packet.id))
+                    state.strandedIds.add(packet.id);
+                try {
+                    process.stderr.write(JSON.stringify({
+                        ts: new Date().toISOString(),
+                        kind: "rolling_dispatch_stranded_packet_too_large_all_pools",
+                        packet_id: packet.id,
+                        skipped_pool_ids: [...skipSet].sort(),
+                    }) + "\n");
+                }
+                catch {
+                    // Observability must never abort a run.
+                }
+                return;
+            }
+            if (!state.completedIds.has(packet.id) && !state.pendingQueue.some((q) => q.id === packet.id)) {
+                state.pendingQueue.unshift(packet);
+            }
+            try {
+                process.stderr.write(JSON.stringify({
+                    ts: new Date().toISOString(),
+                    kind: "rolling_dispatch_requeue_packet_too_large",
+                    packet_id: packet.id,
+                    pool_id: providerSlot.poolId,
+                }) + "\n");
+            }
+            catch {
+                // Observability must never abort a run.
+            }
+            return;
+        }
         // Quota-unclassified (Slice A2b, TIER 2, backlog HIGH 2026-07-11): a worker
         // death whose text was quota-SUSPICIOUS (the broad `detectQuotaSuspicious`
         // pre-filter matched) but classified as NEITHER precise class above. This is
@@ -781,8 +915,9 @@ export function createRollingDispatcher(config, options = {}) {
         let forcedUsed = false;
         for (const packet of getDispatchablePackets()) {
             // selectProvider skips pools in exhaustedPoolIds, so a re-queued packet
-            // re-routes to a surviving pool (INV-QD-07).
-            const slot = selectProvider(packet, confirmedPools, inFlightTracker, quotaStateCache.entries, sessionConfig, state.exhaustedPoolIds, state.pausedPoolResetAt, state.costDemotedPoolIds, Date.now());
+            // re-routes to a surviving pool (INV-QD-07). It also skips pools in
+            // oversizedPacketPools for THIS PACKET if it's been rejected as too large.
+            const slot = selectProvider(packet, confirmedPools, inFlightTracker, quotaStateCache.entries, sessionConfig, state.exhaustedPoolIds, state.pausedPoolResetAt, state.costDemotedPoolIds, state.oversizedPacketPools, Date.now());
             if (slot === null)
                 continue;
             // Per-pool in-flight COUNT cap. The pool's own endpoint-declared cap
@@ -853,6 +988,41 @@ export function createRollingDispatcher(config, options = {}) {
                     strandPending();
                     break;
                 }
+                // Per-packet never-dispatchable strand (U2/F1, distinct from the
+                // pool-level check above): a packet is PERMANENTLY unselectable when
+                // every confirmed pool is exhausted, in the packet's 413 skip-set, or
+                // fit-excluded by a declared context cap — none of which reset. Without
+                // this, a fit-excluded packet on otherwise-healthy pools spins the 50ms
+                // wait tick forever (the pool-level guard never fires for a per-packet
+                // condition). A merely PAUSED pool that fits still counts as
+                // future-possible — pauses reset, caps don't.
+                const neverDispatchable = state.pendingQueue.filter((p) => {
+                    const skipSet = state.oversizedPacketPools.get(p.id);
+                    return confirmedPools.every((pool) => state.exhaustedPoolIds.has(pool.id) ||
+                        (skipSet?.has(pool.id) ?? false) ||
+                        (pool.contextCapTokens != null &&
+                            p.estimatedTokens + AGENTIC_WORKER_HARNESS_OVERHEAD_TOKENS >
+                                pool.contextCapTokens));
+                });
+                if (neverDispatchable.length > 0) {
+                    for (const p of neverDispatchable) {
+                        if (!state.completedIds.has(p.id))
+                            state.strandedIds.add(p.id);
+                    }
+                    const strandedIdSet = new Set(neverDispatchable.map((p) => p.id));
+                    state.pendingQueue = state.pendingQueue.filter((p) => !strandedIdSet.has(p.id));
+                    try {
+                        process.stderr.write(JSON.stringify({
+                            ts: new Date().toISOString(),
+                            kind: "rolling_dispatch_stranded_no_fitting_pool",
+                            packet_ids: [...strandedIdSet].sort(),
+                        }) + "\n");
+                    }
+                    catch {
+                        // Observability must never abort a run.
+                    }
+                    continue;
+                }
                 await new Promise((resolve) => setTimeout(resolve, 50));
                 continue;
             }