fix(orchestration): give federated worker hosts a non-legacy mailbox Run

config/scripts/orchestration-skill-guidance.test.mjs

@@ -168,9 +168,11 @@ describe('orchestration kernel', () => {
     expect(kernel).toContain(
       '`projection.attention` categories, `projection.attention.requiresAction`, and literal `projection.nextAction` argv'
     )
-    expect(kernel).toContain(
-      'An `inspect` `nextAction` on a `live` row with `attention.requiresAction` false is informational, not a command to re-run: keep waiting with `check --wait`'
-    )
+    // Why fragments: the kernel must say what `none` means without deriving it from liveness.
+    // A settled worker owning a reclaimable terminal is unverifiable and still owes `release`.
+    expect(kernel).toContain('A `none` `nextAction` has no argv to run')
+    expect(kernel).toContain('read `liveness.reason` and keep waiting with `check --wait`')
+    expect(kernel).toContain('Absence never earns an argv; settlement and pending work still do')
     expect(kernel).toContain('choose `worker-stop` or `worker-abandon`')
   })
 

skill-guides/orchestration.md

@@ -137,8 +137,8 @@ After three consecutive empty waits, stop waiting blindly and enumerate with
 `ORCA orchestration worker-list --include-remote --json` (defaults to the bound
 Run; `--run <run_id>` overrides; the receipt's `scope` names which), acting on
 each row's `projection.attention` categories, `projection.attention.requiresAction`, and literal `projection.nextAction` argv.
-An `inspect` `nextAction` on a `live` row with `attention.requiresAction` false
-is informational, not a command to re-run: keep waiting with `check --wait`.
+A `none` `nextAction` has no argv to run: read `liveness.reason` and keep waiting
+with `check --wait`. Absence never earns an argv; settlement and pending work still do.
 Leave the wait only on positive proof the agent stopped: `exited` liveness, the
 worker's own observation of process exit, or a transcript whose final agent turn
 sent no `worker_done`. Then load `references/recovery-and-cleanup.md` and choose

src/main/runtime/orchestration/db/attach-orchestration-db-methods.ts

@@ -7,6 +7,7 @@ import { attachDispatchContextStore } from './dispatch-context/dispatch-context-
 import { attachDispatchLookup } from './dispatch-context/dispatch-lookup'
 import { attachDispatchDepth } from './dispatch-depth'
 import { attachWorkerReportSettlement } from './dispatch-context/worker-report-settlement'
+import { attachFederatedAttachmentMailboxRun } from './federation/federated-attachment-mailbox-run'
 import { attachFederatedDispatchStore } from './federation/federated-dispatch-store'
 import { attachFederatedDispatchObservationFence } from './federation/federated-dispatch-observation-fence'
 import { attachFederationRelayAck } from './federation/federation-relay-ack'
@@ -111,6 +112,7 @@ export function attachOrchestrationDbMethods(ctor: { prototype: object }): void
   attachWorkerTerminalRecovery(ctor)
   attachWorkerDispatchStop(ctor)
   attachWorkerDispatchAbandon(ctor)
+  attachFederatedAttachmentMailboxRun(ctor)
   attachFederatedDispatchStore(ctor)
   attachFederatedDispatchObservationFence(ctor)
   attachRemoteDispatchAttachmentCreate(ctor)

src/main/runtime/orchestration/db/contract-constants.ts

@@ -6,5 +6,5 @@ export const LEGACY_RUN_ID = ORCHESTRATION_LEGACY_RUN_ID
 export const LEGACY_CONTRACT_VERSION = 0
 export const CURRENT_CONTRACT_VERSION = ORCHESTRATION_CONTRACT_VERSION
 
-// Schema versions: v2 'heartbeat'+last_heartbeat_at, v3 delivered_at, v4 task-creator terminal, v5 task_title/display_name, v6 pane identity, v7 lightweight Runs, v8 crash-safe Run deliveries, v9 durable question threads, v10 Dispatch capabilities, v11 durable mutation receipts, v12 composed worker state, v18 post-v6 version-skew repair, v19 adopted legacy Runs and compatibility receipts, v20 legacy question backfill, v21 legacy scheduler-loss provenance, v22 dispatch assignee lookup, v23 worker terminal resource ownership, v24 creator-incarnation authority, v25 active Dispatch handle lookup, v26 indexed mutation receipt capacity, v27 durable federation acknowledgments, v28 durable local mutation caller identity, v31 dispatch/resource identity links, v32 bounded worker-terminal recovery metadata, v33 durable mailbox pointer Enter state, v34 role-addressed mailbox deliveries, v35 mailbox delivery default and index-predicate repair, v36 dispatch mailbox consumer generation, v37 recorded dispatch creator identity, v39 structured session journal archives.
-export const SCHEMA_VERSION = 39
+// Schema versions: v2 'heartbeat'+last_heartbeat_at, v3 delivered_at, v4 task-creator terminal, v5 task_title/display_name, v6 pane identity, v7 lightweight Runs, v8 crash-safe Run deliveries, v9 durable question threads, v10 Dispatch capabilities, v11 durable mutation receipts, v12 composed worker state, v18 post-v6 version-skew repair, v19 adopted legacy Runs and compatibility receipts, v20 legacy question backfill, v21 legacy scheduler-loss provenance, v22 dispatch assignee lookup, v23 worker terminal resource ownership, v24 creator-incarnation authority, v25 active Dispatch handle lookup, v26 indexed mutation receipt capacity, v27 durable federation acknowledgments, v28 durable local mutation caller identity, v31 dispatch/resource identity links, v32 bounded worker-terminal recovery metadata, v33 durable mailbox pointer Enter state, v34 role-addressed mailbox deliveries, v35 mailbox delivery default and index-predicate repair, v36 dispatch mailbox consumer generation, v37 recorded dispatch creator identity, v39 structured session journal archives, v40 federated attachment mailboxes re-homed off the legacy Run.
+export const SCHEMA_VERSION = 40