feat(recovery): route failed write-less stages to recovery instead of futile retry

Adds the failure-ticket + recovery-routing mechanism: a deterministic
gate->capability table gates whether a stage has agency to fix its own
failure, opens a FailureTicketOpenedEvent when it doesn't, and routes to
a metadata role=recovery stage (per-stage budget, cap 2, not reset by
TransitionExecuted) instead of retrying in place. Extends salvage
decisions with a RECOVER option so the review-gate judge can also route
to recovery, unifies deterministic-gate and review-gate routing through
routeToRecovery(), and has ExecutionPlanCompiler synthesize a
write-capable recovery stage + edge for freestyle plans. Read-only tools
(file_read, list_dir) are now always available on any tool-granting
stage so a recovery stage can inspect the write-less stage's failure
without flooding context via shell ls -R.

infrastructure/workflow/src/main/kotlin/com/correx/infrastructure/workflow/ExecutionPlanCompiler.kt

@@ -5,6 +5,7 @@ import com.correx.core.artifacts.kind.TypedArtifactSlot
 import com.correx.core.events.types.ArtifactId
 import com.correx.core.events.types.StageId
 import com.correx.core.events.types.TransitionId
+import com.correx.core.inference.GenerationConfig
 import com.correx.core.transitions.graph.BuildExpectation
 import com.correx.core.transitions.graph.StageConfig
 import com.correx.core.transitions.graph.TransitionEdge
@@ -38,6 +39,16 @@ private const val RECOVERY_PROMPT =
 // leaves ample headroom for completion.)
 private const val DEFAULT_STAGE_TOKEN_BUDGET = 16384
 
+// A compiled freestyle stage must also lift its inference completion cap off StageConfig's 2048
+// default, or the model is truncated (finishReason=length) mid-artifact — and a degenerating local
+// model burns the whole 2048 on garbage (e.g. a `<|channel>thought` repetition loop) before it can
+// stop. Mirror the static TomlWorkflowLoader path: pin the completion cap to the stage token budget.
+private val DEFAULT_STAGE_GENERATION = GenerationConfig(
+    temperature = 0.7,
+    topP = 1.0,
+    maxTokens = DEFAULT_STAGE_TOKEN_BUDGET,
+)
+
 class ExecutionPlanCompiler(
     private val registry: ArtifactKindRegistry,
     // Names of every registered tool. A stage that references a tool the runtime can't resolve
@@ -117,6 +128,7 @@ class ExecutionPlanCompiler(
                 autoBuildGate = s.id == autoGateStageId,
                 semanticReview = s.semanticReview,
                 tokenBudget = DEFAULT_STAGE_TOKEN_BUDGET,
+                generationConfig = DEFAULT_STAGE_GENERATION,
                 metadata = mapOf("promptInline" to s.prompt),
             )
         }
@@ -134,6 +146,7 @@ class ExecutionPlanCompiler(
                 StageId(RECOVERY_STAGE) to StageConfig(
                     allowedTools = setOf("file_write", "shell"),
                     tokenBudget = DEFAULT_STAGE_TOKEN_BUDGET,
+                    generationConfig = DEFAULT_STAGE_GENERATION,
                     metadata = mapOf("role" to "recovery", "promptInline" to RECOVERY_PROMPT),
                 )
             }