perf(runtime): simplify SQL persistence for conversational turns

.env.example

@@ -130,16 +130,15 @@ ASTRA_RUNTIME_ROOT_SECRET=your-runtime-root-secret-min-32-characters-change-me
 # Provider admission scope/window/cleanup and run admission timeout are runtime
 # policy, not deployment knobs.
 
-# The built-in Work admission judge runs concurrently with each primary turn
-# by default, then is awaited only at a durable/effectful boundary. This keeps
-# tracked requests from silently becoming untracked tool calls without adding
-# judge latency to the ordinary primary path. `capacity_aware` keeps this
-# correctness boundary enabled while provider admission accounts for its
-# quota; unrelated optional judges remain capacity-gated. Under Auto,
+# The default `boundary_only` starts Work judgment at a typed effect/topology
+# boundary that consumes its result. Ordinary chat skips optional user
+# observation, skill auto-routing and proactive pre-turn LLM compaction;
+# explicit skills and reactive context-pressure handling remain available.
+# Opt into `capacity_aware` for capacity-gated optional auxiliary calls. Under Auto,
 # `disabled` makes semantic admission unavailable and therefore fails closed;
 # clients that deliberately omit classification must request FixedDefault.
 # Use `always` to ignore capacity gating for all eligible auxiliary features.
-#ASTRA_AUX_LLM_POLICY=capacity_aware
+#ASTRA_AUX_LLM_POLICY=boundary_only
 
 # ── Memoria (Memory Service) ──────────────────────────────────────────────
 # Memoria provides persistent semantic memory (store/retrieve/search).
@@ -232,6 +231,8 @@ MEMORIA_EMBEDDING_BASE_URL=
 # ── CLI Overrides (optional) ──────────────────────────────────────────────
 # Override CLI defaults for local development. These only affect the `astra` CLI,
 # not the API server.
+# Native external agent runtimes are opt-in; ordinary Server-model turns skip them.
+#ASTRA_NATIVE_COLLABORATORS=false  # true requires native capacity readiness before chat
 #ASTRA_CLI_USER_ID=                # User ID for local task/session ownership metadata
 #ASTRA_CLI_SESSION_ID=             # Resume or pin the CLI to a specific session UUID
 #ASTRA_CLI_SESSION_NAME=           # Human-friendly session name when starting a new session

.github/workflows/harness-manual.yml

@@ -270,6 +270,18 @@ jobs:
                           preflight["failure"] = {"model": failure["model"], "stage": stage}
                           code = failure.get("exit_code")
                           preflight["failure"]["exit_code"] = code if type(code) is int and -255 <= code <= 255 else None
+                          state = failure.get("final_state")
+                          state = state if (stage == "execution" and isinstance(state, str)
+                              and state in ("completed", "interrupted", "failed")) else None
+                          preflight["failure"]["final_state"] = state
+                          kind = failure.get("interruption_kind")
+                          preflight["failure"]["interruption_kind"] = kind if (state == "interrupted"
+                              and isinstance(kind, str) and kind in (
+                                  "budget_exhausted", "empty_completion", "token_budget_exceeded",
+                                  "rate_limited", "cooldown_rejected", "user_cancelled", "context_overflow",
+                                  "auth_failure", "critical_verdict", "approval_rejected", "server_overload",
+                                  "stream_transport", "stream_idle", "provider_deadline", "harness_blocked",
+                                  "harness_paused", "interrupted", "execution_incomplete", "executor_dropped")) else None
                           for key in ("error_kind", "error_code"):
                               value = failure.get(key)
                               preflight["failure"][key] = value if (isinstance(value, str) and 0 < len(value) <= 128

CONTRIBUTING.md

@@ -90,10 +90,6 @@ contract and its tests live in [`scripts/ci/`](scripts/ci/).
 The frozen MOI consumer compatibility test runs independently of this routing
 on every Test Suite run. The required online core aggregate also requires that
 fresh-database journey to pass; see the testing guide for its exact scope.
-The Terminal-Bench fresh-database contract derives admission gate names and
-cardinality from the source-owned partition count and scope formatter. It
-requires the exact ordered gate inventory; missing, duplicate, legacy or
-unknown rows and unsupported source declarations fail closed.
 
 CLI tests build and run all library/binary unit tests plus the offline
 `cli_pipe`, `process_supervisor`, `shell_execution_boundaries`, and

Cargo.toml

@@ -147,3 +147,6 @@ strip = "symbols"
 # Local startup-query prototype; see vendor/crossterm/ASTRA-PATCH.md.
 [patch.crates-io]
 crossterm = { path = "vendor/crossterm" }
+# Restore TCP_NODELAY omitted by SQLx 0.9.0. Remove this pin when a release
+# contains https://github.com/launchbadge/sqlx/pull/4336.
+sqlx-core = { git = "https://github.com/launchbadge/sqlx", rev = "6e57d05490859f31aa364ca69fcb379f3a2995e6" }

crates/astra-cli/src/cli/chat_stream/sse_loop/agentic_loop_turn.rs

@@ -1919,6 +1919,7 @@ mod tests {
     #[test]
     fn server_loop_admission_excludes_client_owned_conversation_authority() {
         let prepared = json!({
+            "conversation_authority": {"execution_grant": "client-owned-capability"},
             "completion_checks": {
                 "stop": [{"label": "root", "command": "make check", "working_dir": null,
                     "depends_on": [], "timeout_secs": null, "authoritative": true}],

crates/astra-cli/src/cli/chat_stream/sse_loop/mod.rs

@@ -618,6 +618,7 @@ async fn stream_chat_sse_inner(
         callback_client_detached: false,
         remote_cancel_run_id: None,
         last_physical_run_id: None,
+        failed_run_terminal: None,
         turn_evaluation: None,
         last_error_code: None,
         last_error_metadata: None,
@@ -881,7 +882,10 @@ async fn stream_chat_sse_inner(
                 qualified_usage: state.qualified_usage,
                 usage_attribution,
                 tool_calls_count,
-                llm_rounds: Some(state.llm_rounds_completed),
+                llm_rounds: state
+                    .remote_summary
+                    .as_ref()
+                    .map(|summary| summary.llm_rounds),
                 token_usage_coverage: state.token_usage_coverage(),
                 tool_outcomes: Some(tool_outcomes),
                 applied_user_intents: state
@@ -911,6 +915,8 @@ async fn stream_chat_sse_inner(
                 server_admission_not_dispatched: false,
                 last_heavy_checkpoint: state.stall.last_heavy_checkpoint.take(),
                 partial_text: std::mem::take(&mut state.final_text),
+                partial_text_model_item_id: state.final_text_model_item_id.take(),
+                failed_run_terminal: host.failed_run_terminal.take(),
                 run_transcript_messages: state.take_run_transcript_capture(),
                 remote_cancel_required: host.remote_cancel_required,
                 callback_client_detached: host.callback_client_detached,

crates/astra-cli/src/cli/chat_stream/sse_loop/remote_turn.rs

@@ -236,7 +236,6 @@ impl RemoteTurnState {
             session_id,
             self.session_turn.max(1),
             checkpoint,
-            None,
         ) {
             self.stall.last_heavy_checkpoint = Some(checkpoint);
         }
@@ -390,7 +389,8 @@ pub(super) async fn consume_remote_turn(
     } else {
         if let Err(error) = &result {
             state.step_recorder.end_turn(false);
-            if state.interruption.is_none()
+            if host.failed_run_terminal.is_none()
+                && state.interruption.is_none()
                 && error.kind != astra_core::ErrorKind::Cancelled
                 && let Some((kind, action)) =
                     astra_turn_core::interruption::interruption_from_error_kind(error.kind)
@@ -588,8 +588,15 @@ async fn consume_remote_turn_inner(
             consecutive_context_window_errors: &mut state.consecutive_context_window_errors,
         },
     );
+    state.qualified_usage = turn.core.accounted_usage();
+    if turn.core.has_authoritative_failed_terminal()
+        && !host.remote_cancel_required
+        && !host.callback_client_detached
+        && host.output_transport_failure.is_none()
+    {
+        host.failed_run_terminal = turn.core.run_terminal.take();
+    }
     state.capture_appended_messages(start);
-    state.qualified_usage = turn.core.qualified_usage;
     state.llm_rounds_completed = turn
         .core
         .server_execution_summary
@@ -702,7 +709,6 @@ async fn finalize_remote_trace(state: &mut RemoteTurnState) {
             first_budget_pressure: &mut state.telemetry.first_budget_pressure,
             pending_context_assembly_trace: &mut state.telemetry.pending_context_assembly_trace,
             observability_session: state.telemetry.observability_session.clone(),
-            persistence: None,
         })
         .await;
     }

crates/astra-cli/src/cli/chat_stream/sse_loop/server_admission_host.rs

@@ -348,6 +348,7 @@ pub(crate) struct CliServerAdmissionHost<'a> {
     /// Latest immutable physical SSE owner, retained through final-output
     /// delivery and durable cancellation.
     pub last_physical_run_id: Option<String>,
+    pub failed_run_terminal: Option<astra_turn_core::chat_turn_sse_dispatch::DurableRunTerminal>,
     pub turn_evaluation: Option<astra_services::session_journal::JournalEvent>,
     /// Structured admission failure metadata retained after the accumulator is
     /// moved into the shared loop.  These facts drive user-facing recovery and
@@ -1203,7 +1204,9 @@ impl CliServerAdmissionHost<'_> {
             .extend(turn_result.core.explain_analyze_events.iter().cloned());
         state.telemetry.explain_analyze_degraded |= turn_result.core.explain_analyze_degraded;
 
-        if turn_result.core.server_loop_terminal {
+        if turn_result.core.server_loop_terminal
+            || turn_result.core.has_authoritative_failed_terminal()
+        {
             // Server-owned runs execute their tools remotely, so the thin
             // client has no local ToolCallRecord ledger to re-evaluate at the
             // final boundary. Receipt closure is the terminal integrity fact;

crates/astra-cli/src/cli/cli_config/cli_args.rs

@@ -806,7 +806,7 @@ pub(crate) enum SessionCmd {
 
 #[derive(Args, Debug)]
 pub(crate) struct SessionJudgeArgs {
-    /// JudgmentRequest JSON with shared evidence and typed questions (no agent task)
+    /// JudgmentRequest JSON with shared evidence and typed questions; use - to read stdin
     #[arg(short, long)]
     pub message: String,
     /// Active Server model selector