Add durable Agent Host crash recovery

[NarwhalChen]

Summary

• add a deterministic Agent Host workflow with immutable checkpoints, node attempts, pending writes, and provider effect receipts
• recover safe pre-effect nodes, finish committed provider results without replay, and quarantine provider-started work as uncertain
• add renderer-side Dexie idempotency receipts so replayed agent speech returns the original message instead of posting twice
• preserve renderer/Dexie as channel-text authority and provider-native sessions as provider-owned history
• surface uncertain tasks for explicit review and document the recovery contract

Verification

• pnpm test: 576 passed, 1 real-provider integration test skipped
• pre-push Prettier and ESLint checks passed; existing repository lint warnings only
• automation typecheck passed
• packaged and launched the real Electron application with an isolated profile; verified the channel UI rendered and automation logs were clean
• no paid or real provider was invoked

Safety boundaries

• a provider turn recorded as started without a durable receipt is never automatically replayed
• provider-internal tool, CUA, and file side effects remain opaque and therefore move the job to uncertain after an ambiguous crash
• if a Dexie message commits but the main-process output receipt is lost in a whole-app crash, the message remains authoritative while the job requires reconciliation/review
• this change does not introduce a general arbitrary-DAG workflow engine, compensation framework, or time-travel UI

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
foxyfox-docs	Error		Aug 2, 2026 4:03pm
foxyfox-website	Ready	Preview	Aug 2, 2026 4:03pm