@akagilnc/pi-workflow-roles 0.1.5005 → 0.1.5013

package/dist/acp-host/production-host.js

@@ -26438,7 +26438,7 @@ function fixerBashSeatbeltDenyReason(matched) {
 }
 
 // src/worker-role.ts
-var CODER_STATUS_DESCRIPTION = "planned | completed | refused | unfinished \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8\uFF1Bcompleted \u56DE\u6267\u542B TDD\u3001\u540C\u6A21\u5F0F\u3001\u5F15\u5165\u56DE\u5F52\u3001\u884C\u4E3A\u4E8B\u5B9E\u56DB\u9879\u8BC1\u636E\uFF1Bunfinished \u7F3A\u524D\u7F6E\u6216\u8FDD\u5BAA\u7EA6\u675F\u81F4\u672C\u5C40\u672A\u5B8C\u6210\u65F6\u53EF\u7528\uFF0C\u7F3A\u5F85\u51B3 owner \u51B3\u5B9A\u6216\u7B54\u590D\u5C5E\u7F3A\u524D\u7F6E\u3002";
+var CODER_STATUS_DESCRIPTION = "planned | completed | refused | partially_completed | unfinished \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8\uFF1Bcompleted \u56DE\u6267\u542B TDD\u3001\u540C\u6A21\u5F0F\u3001\u5F15\u5165\u56DE\u5F52\u3001\u884C\u4E3A\u4E8B\u5B9E\u56DB\u9879\u8BC1\u636E\uFF1Bunfinished \u7F3A\u524D\u7F6E\u6216\u8FDD\u5BAA\u7EA6\u675F\u81F4\u672C\u5C40\u672A\u5B8C\u6210\u65F6\u53EF\u7528\uFF0C\u7F3A\u5F85\u51B3 owner \u51B3\u5B9A\u6216\u7B54\u590D\u5C5E\u7F3A\u524D\u7F6E\u3002";
 var coderOutputVariants = Type22.Union([
   Type22.Object({
     status: Type22.Unknown({ description: CODER_STATUS_DESCRIPTION }),
@@ -26488,8 +26488,26 @@ var FIXER_PHASES = ["plan", "apply"];
 function isWorkerPhase(value) {
   return typeof value === "string" && FIXER_PHASES.includes(value);
 }
+function isRecord19(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+var WORKER_ROUTING_STATUSES = /* @__PURE__ */ new Set([
+  "planned",
+  "completed",
+  "refused",
+  "partially_completed",
+  "unfinished"
+]);
+var WORKER_STATUS_REASK = "status \u4E0D\u662F planned\u3001completed\u3001refused\u3001partially_completed\u3001unfinished \u4E4B\u4E00\u3002\u8BF7\u91CD\u65B0\u4EA4\u5377\uFF0Cstatus \u5199\u660E\u5176\u4E00\u3002";
 function workerStatusOf(output) {
-  return typeof output.status === "string" ? output.status : "";
+  return isRecord19(output) && typeof output.status === "string" ? output.status : void 0;
+}
+function requireReadableWorkerStatus(output) {
+  const status = workerStatusOf(output);
+  if (status === void 0 || !WORKER_ROUTING_STATUSES.has(status)) {
+    throw new ParentQueueReaskError(WORKER_STATUS_REASK);
+  }
+  return status;
 }
 function deepFreeze2(value) {
   if (typeof value !== "object" || value === null || Object.isFrozen(value)) return value;
@@ -26572,9 +26590,10 @@ function createFixerRoleRuntime(pi, dependencies, hostActions) {
               throw new Error("\u4FEE\u5185\u53F8\u4FEE\u7406\u5305\u4E0E\u9636\u6BB5\u672A\u88C5\u8F7D");
             }
             const output = deepFreeze2(validateFixerOutput(parameters, phase));
+            const status = requireReadableWorkerStatus(output);
             assertAcceptableThroughHost(
               submissionGate,
-              workerStatusOf(output),
+              status,
               output,
               hostActions,
               ctx,
@@ -26582,7 +26601,7 @@ function createFixerRoleRuntime(pi, dependencies, hostActions) {
             );
             let pass;
             try {
-              pass = WORKER_DONE_STATUSES.has(workerStatusOf(output)) ? await pi.requireSubmissionGate({
+              pass = WORKER_DONE_STATUSES.has(status) ? await pi.requireSubmissionGate({
                 context: ctx,
                 subject: { kind: "worker_completion" },
                 ..._signal === void 0 ? {} : { signal: _signal },
@@ -26723,9 +26742,10 @@ function createCoderRoleRuntime(pi, dependencies, hostActions) {
               throw new Error("\u5C06\u4F5C\u76D1\u4EFB\u52A1\u4E0E\u9636\u6BB5\u672A\u88C5\u8F7D");
             }
             const output = validateWorkerOutput(parameters, phase, "Coder");
+            const status = requireReadableWorkerStatus(output);
             assertAcceptableThroughHost(
               submissionGate,
-              workerStatusOf(output),
+              status,
               output,
               hostActions,
               ctx2,
@@ -26733,7 +26753,7 @@ function createCoderRoleRuntime(pi, dependencies, hostActions) {
             );
             let pass;
             try {
-              pass = WORKER_DONE_STATUSES.has(workerStatusOf(output)) ? await pi.requireSubmissionGate({
+              pass = WORKER_DONE_STATUSES.has(status) ? await pi.requireSubmissionGate({
                 context: ctx2,
                 subject: { kind: "worker_completion" },
                 ..._signal === void 0 ? {} : { signal: _signal },
@@ -27314,6 +27334,8 @@ function readDiaristRunCoordinates(ctx) {
   };
 }
 var DIARIST_BOUNDS_REASK = "\u8FB9\u754C\u65E0\u6CD5\u4F7F\u7528\u3002\u8BF7\u91CD\u4EA4 sessions\uFF1A\u6BCF\u5377 path + ranges\uFF0C\u6BCF\u7AEF\u4EE5\u539F\u751F id \u6216\u672C\u8F6E\u884C\u53F7\u4E8C\u9009\u4E00\u6307\u540D\u3002";
+var DIARIST_ROUTING_STATUSES = /* @__PURE__ */ new Set(["completed", "escalate"]);
+var DIARIST_STATUS_REASK = "status \u4E0D\u662F completed\u3001escalate \u4E4B\u4E00\u3002\u8BF7\u91CD\u65B0\u4EA4\u5377\uFF0Cstatus \u5199\u660E\u5176\u4E00\u3002";
 function createDiaristRoleRuntime(roleHost, dependencies) {
   return createFiledOfficerRuntime(
     roleHost,
@@ -27323,6 +27345,11 @@ function createDiaristRoleRuntime(roleHost, dependencies) {
       soulTag: "diarist",
       beforeAccept: async ({ parameters, ctx }) => {
         const submitted = parameters !== null && typeof parameters === "object" && !Array.isArray(parameters) ? parameters : void 0;
+        const status = submitted?.status;
+        if (typeof status !== "string" || !DIARIST_ROUTING_STATUSES.has(status)) {
+          throw new ParentQueueReaskError(DIARIST_STATUS_REASK);
+        }
+        if (status === "escalate") return parameters;
         const assertion = readDiaristTicketAssertion(submitted);
         const coords = readDiaristRunCoordinates(ctx);
         const ticketNumber = assertion.kind === "ticket" ? assertion.ticketNumber : void 0;

package/dist/headless-host/description.js

@@ -168,13 +168,22 @@ function nonNullLeaves(schema) {
  * Required → closed non-null leaf(s). Optional → closed leaf(s) + null.
  */
 function closePropertySchema(schema, optional) {
+    const description = isPlainObject(schema) && typeof schema.description === "string"
+        ? { description: schema.description }
+        : {};
     const leaves = nonNullLeaves(schema).map(closeSchemaNode);
     if (leaves.length === 0)
-        return { type: "null" };
+        return { type: "null", ...description };
     if (!optional) {
-        return leaves.length === 1 ? leaves[0] : { anyOf: leaves };
+        const closed = leaves.length === 1 ? leaves[0] : { anyOf: leaves };
+        // Codex strict does not allow sibling keys on $ref; put property guidance
+        // on an enclosing schema instead of losing it or weakening the free-JSON ref.
+        if (isPlainObject(closed) && typeof closed.$ref === "string") {
+            return { anyOf: [closed], ...description };
+        }
+        return isPlainObject(closed) ? { ...closed, ...description } : closed;
     }
-    return { anyOf: [...leaves, { type: "null" }] };
+    return { anyOf: [...leaves, { type: "null" }], ...description };
 }
 /**
  * Strict generators require every schema node to declare `type` (or a $ref).

package/dist/headless-host/production-host.js

@@ -26387,7 +26387,7 @@ function fixerBashSeatbeltDenyReason(matched) {
 }
 
 // src/worker-role.ts
-var CODER_STATUS_DESCRIPTION = "planned | completed | refused | unfinished \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8\uFF1Bcompleted \u56DE\u6267\u542B TDD\u3001\u540C\u6A21\u5F0F\u3001\u5F15\u5165\u56DE\u5F52\u3001\u884C\u4E3A\u4E8B\u5B9E\u56DB\u9879\u8BC1\u636E\uFF1Bunfinished \u7F3A\u524D\u7F6E\u6216\u8FDD\u5BAA\u7EA6\u675F\u81F4\u672C\u5C40\u672A\u5B8C\u6210\u65F6\u53EF\u7528\uFF0C\u7F3A\u5F85\u51B3 owner \u51B3\u5B9A\u6216\u7B54\u590D\u5C5E\u7F3A\u524D\u7F6E\u3002";
+var CODER_STATUS_DESCRIPTION = "planned | completed | refused | partially_completed | unfinished \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8\uFF1Bcompleted \u56DE\u6267\u542B TDD\u3001\u540C\u6A21\u5F0F\u3001\u5F15\u5165\u56DE\u5F52\u3001\u884C\u4E3A\u4E8B\u5B9E\u56DB\u9879\u8BC1\u636E\uFF1Bunfinished \u7F3A\u524D\u7F6E\u6216\u8FDD\u5BAA\u7EA6\u675F\u81F4\u672C\u5C40\u672A\u5B8C\u6210\u65F6\u53EF\u7528\uFF0C\u7F3A\u5F85\u51B3 owner \u51B3\u5B9A\u6216\u7B54\u590D\u5C5E\u7F3A\u524D\u7F6E\u3002";
 var coderOutputVariants = Type22.Union([
   Type22.Object({
     status: Type22.Unknown({ description: CODER_STATUS_DESCRIPTION }),
@@ -26437,8 +26437,26 @@ var FIXER_PHASES = ["plan", "apply"];
 function isWorkerPhase(value) {
   return typeof value === "string" && FIXER_PHASES.includes(value);
 }
+function isRecord19(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+var WORKER_ROUTING_STATUSES = /* @__PURE__ */ new Set([
+  "planned",
+  "completed",
+  "refused",
+  "partially_completed",
+  "unfinished"
+]);
+var WORKER_STATUS_REASK = "status \u4E0D\u662F planned\u3001completed\u3001refused\u3001partially_completed\u3001unfinished \u4E4B\u4E00\u3002\u8BF7\u91CD\u65B0\u4EA4\u5377\uFF0Cstatus \u5199\u660E\u5176\u4E00\u3002";
 function workerStatusOf(output) {
-  return typeof output.status === "string" ? output.status : "";
+  return isRecord19(output) && typeof output.status === "string" ? output.status : void 0;
+}
+function requireReadableWorkerStatus(output) {
+  const status = workerStatusOf(output);
+  if (status === void 0 || !WORKER_ROUTING_STATUSES.has(status)) {
+    throw new ParentQueueReaskError(WORKER_STATUS_REASK);
+  }
+  return status;
 }
 function deepFreeze2(value) {
   if (typeof value !== "object" || value === null || Object.isFrozen(value)) return value;
@@ -26521,9 +26539,10 @@ function createFixerRoleRuntime(pi, dependencies, hostActions) {
               throw new Error("\u4FEE\u5185\u53F8\u4FEE\u7406\u5305\u4E0E\u9636\u6BB5\u672A\u88C5\u8F7D");
             }
             const output = deepFreeze2(validateFixerOutput(parameters, phase));
+            const status = requireReadableWorkerStatus(output);
             assertAcceptableThroughHost(
               submissionGate,
-              workerStatusOf(output),
+              status,
               output,
               hostActions,
               ctx,
@@ -26531,7 +26550,7 @@ function createFixerRoleRuntime(pi, dependencies, hostActions) {
             );
             let pass;
             try {
-              pass = WORKER_DONE_STATUSES.has(workerStatusOf(output)) ? await pi.requireSubmissionGate({
+              pass = WORKER_DONE_STATUSES.has(status) ? await pi.requireSubmissionGate({
                 context: ctx,
                 subject: { kind: "worker_completion" },
                 ..._signal === void 0 ? {} : { signal: _signal },
@@ -26672,9 +26691,10 @@ function createCoderRoleRuntime(pi, dependencies, hostActions) {
               throw new Error("\u5C06\u4F5C\u76D1\u4EFB\u52A1\u4E0E\u9636\u6BB5\u672A\u88C5\u8F7D");
             }
             const output = validateWorkerOutput(parameters, phase, "Coder");
+            const status = requireReadableWorkerStatus(output);
             assertAcceptableThroughHost(
               submissionGate,
-              workerStatusOf(output),
+              status,
               output,
               hostActions,
               ctx2,
@@ -26682,7 +26702,7 @@ function createCoderRoleRuntime(pi, dependencies, hostActions) {
             );
             let pass;
             try {
-              pass = WORKER_DONE_STATUSES.has(workerStatusOf(output)) ? await pi.requireSubmissionGate({
+              pass = WORKER_DONE_STATUSES.has(status) ? await pi.requireSubmissionGate({
                 context: ctx2,
                 subject: { kind: "worker_completion" },
                 ..._signal === void 0 ? {} : { signal: _signal },
@@ -27239,6 +27259,8 @@ function readDiaristRunCoordinates(ctx) {
   };
 }
 var DIARIST_BOUNDS_REASK = "\u8FB9\u754C\u65E0\u6CD5\u4F7F\u7528\u3002\u8BF7\u91CD\u4EA4 sessions\uFF1A\u6BCF\u5377 path + ranges\uFF0C\u6BCF\u7AEF\u4EE5\u539F\u751F id \u6216\u672C\u8F6E\u884C\u53F7\u4E8C\u9009\u4E00\u6307\u540D\u3002";
+var DIARIST_ROUTING_STATUSES = /* @__PURE__ */ new Set(["completed", "escalate"]);
+var DIARIST_STATUS_REASK = "status \u4E0D\u662F completed\u3001escalate \u4E4B\u4E00\u3002\u8BF7\u91CD\u65B0\u4EA4\u5377\uFF0Cstatus \u5199\u660E\u5176\u4E00\u3002";
 function createDiaristRoleRuntime(roleHost, dependencies) {
   return createFiledOfficerRuntime(
     roleHost,
@@ -27248,6 +27270,11 @@ function createDiaristRoleRuntime(roleHost, dependencies) {
       soulTag: "diarist",
       beforeAccept: async ({ parameters, ctx }) => {
         const submitted = parameters !== null && typeof parameters === "object" && !Array.isArray(parameters) ? parameters : void 0;
+        const status = submitted?.status;
+        if (typeof status !== "string" || !DIARIST_ROUTING_STATUSES.has(status)) {
+          throw new ParentQueueReaskError(DIARIST_STATUS_REASK);
+        }
+        if (status === "escalate") return parameters;
         const assertion = readDiaristTicketAssertion(submitted);
         const coords = readDiaristRunCoordinates(ctx);
         const ticketNumber = assertion.kind === "ticket" ? assertion.ticketNumber : void 0;
@@ -29327,12 +29354,17 @@ function nonNullLeaves(schema) {
   return flattenUnionLeaves(schema).map(stripNullFromLeafType).filter((leaf) => !isPureNullTypeSchema(leaf));
 }
 function closePropertySchema(schema, optional) {
+  const description = isPlainObject2(schema) && typeof schema.description === "string" ? { description: schema.description } : {};
   const leaves = nonNullLeaves(schema).map(closeSchemaNode);
-  if (leaves.length === 0) return { type: "null" };
+  if (leaves.length === 0) return { type: "null", ...description };
   if (!optional) {
-    return leaves.length === 1 ? leaves[0] : { anyOf: leaves };
+    const closed = leaves.length === 1 ? leaves[0] : { anyOf: leaves };
+    if (isPlainObject2(closed) && typeof closed.$ref === "string") {
+      return { anyOf: [closed], ...description };
+    }
+    return isPlainObject2(closed) ? { ...closed, ...description } : closed;
   }
-  return { anyOf: [...leaves, { type: "null" }] };
+  return { anyOf: [...leaves, { type: "null" }], ...description };
 }
 function ensureTypedLeaf(schema) {
   if (schema.type !== void 0) return schema;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.5005",
+  "version": "0.1.5013",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",

package/souls/audit-law.md

@@ -19,7 +19,9 @@ finding 提**类别**；实例只作证据。一次找齐全，不逐轮抽样
 
 判断不收敛（同类问题反复、修理只增不减）可上呈；你的打回与上一轮相同、对方重交只换措辞，须上呈，不得再打回。修理 diff 自身按同尺复核。
 
-衙门不是需求来源。你要求施工方做的每一条——补一个失败路径的处理、加一道校验、多一个分支——须指出票面、陛下的意思或法源里要它的那一句，并答得出《质量法》三问；指不出的，是你在加戏，不是对方在缺失，不得开方。失败以真实作业路径产生得出的为准，探针造得出来不等于会发生。对方按你上一轮处方加出来的东西，下一轮同受此审。
+衙门不是需求来源。弹章、施工方的注释与测试、你造的探针，都只是线索。判一条 finding 成立、开一条约束，判词须写明两样：要它的那一句法（先看那句讲的是不是这一条），和它在哪条真实 run 上发生过（指针）。缺一样，按过度防御或加戏驳回；判词缺这两样，审刑院打回，符宝郎驳。对方按你处方加的东西，下轮同审。
+
+判例：#1025 御史台据一句注释造场景，大理寺引「上呈暂停」判成立，审刑院、符宝郎皆署；那句法没要过「谁有资格唤醒」，场景也从未发生。
 
 ## 取证边界（owner 2026-09-05）
 

package/src/headless-host/description.ts

@@ -250,12 +250,22 @@ function nonNullLeaves(schema: unknown): unknown[] {
  * Required → closed non-null leaf(s). Optional → closed leaf(s) + null.
  */
 function closePropertySchema(schema: unknown, optional: boolean): unknown {
+  const description =
+    isPlainObject(schema) && typeof schema.description === "string"
+      ? { description: schema.description }
+      : {};
   const leaves = nonNullLeaves(schema).map(closeSchemaNode);
-  if (leaves.length === 0) return { type: "null" };
+  if (leaves.length === 0) return { type: "null", ...description };
   if (!optional) {
-    return leaves.length === 1 ? leaves[0] : { anyOf: leaves };
+    const closed = leaves.length === 1 ? leaves[0] : { anyOf: leaves };
+    // Codex strict does not allow sibling keys on $ref; put property guidance
+    // on an enclosing schema instead of losing it or weakening the free-JSON ref.
+    if (isPlainObject(closed) && typeof closed.$ref === "string") {
+      return { anyOf: [closed], ...description };
+    }
+    return isPlainObject(closed) ? { ...closed, ...description } : closed;
   }
-  return { anyOf: [...leaves, { type: "null" }] };
+  return { anyOf: [...leaves, { type: "null" }], ...description };
 }
 
 /**

package/src/package-contracts/worker-output.ts

@@ -19,7 +19,7 @@ export const CODER_OUTPUT_TOOL_NAME = "ak_coder_output";
 export type WorkerRoleLabel = "Coder" | "Fixer";
 export type CoderOutput =
   | { status: "planned"; report: string }
-  | { status: "completed" | "refused"; report: string }
+  | { status: "completed" | "refused" | "partially_completed"; report: string }
   | { status: "unfinished"; report: string; remainingScope: string; reason?: string };
 export type WorkerOutput = CoderOutput | FixerOutput;
 

package/src/role-runtime.ts

@@ -883,6 +883,9 @@ function readDiaristRunCoordinates(ctx: HostContext): {
 /** Plain-language re-ask when diarist bounds cannot be used (#901 / reask-not-explode). */
 const DIARIST_BOUNDS_REASK =
   "边界无法使用。请重交 sessions：每卷 path + ranges，每端以原生 id 或本轮行号二选一指名。" as const;
+const DIARIST_ROUTING_STATUSES = new Set(["completed", "escalate"]);
+const DIARIST_STATUS_REASK =
+  "status 不是 completed、escalate 之一。请重新交卷，status 写明其一。" as const;
 
 /**
  * #708 / #779 / #901: 起居郎 public seat on the shared filed-officer envelope.
@@ -905,6 +908,13 @@ export function createDiaristRoleRuntime(
           parameters !== null && typeof parameters === "object" && !Array.isArray(parameters)
             ? (parameters as Record<string, unknown>)
             : undefined;
+        // This status selects package-owned continuation vs escalation. Check it
+        // before interpreting any other submitted field; caller-owned data stays open.
+        const status = submitted?.status;
+        if (typeof status !== "string" || !DIARIST_ROUTING_STATUSES.has(status)) {
+          throw new ParentQueueReaskError(DIARIST_STATUS_REASK);
+        }
+        if (status === "escalate") return parameters;
         const assertion = readDiaristTicketAssertion(submitted);
         const coords = readDiaristRunCoordinates(ctx);
         // #836 7.3: pre-bound ticket is material for the LLM, not an override.

package/src/worker-role.ts

@@ -10,7 +10,7 @@ import type {
 } from "./canonical-skill-binding.ts";
 import { readableGateItem } from "./readable-gate-item.ts";
 import { projectGatekeeperEscalation } from "./audit-escalation.ts";
-import { GatekeeperDecisionError } from "./submission-errors.ts";
+import { GatekeeperDecisionError, ParentQueueReaskError } from "./submission-errors.ts";
 import {
   CODER_OUTPUT_TOOL_NAME,
   FIXER_OUTPUT_TOOL_NAME,
@@ -53,7 +53,7 @@ export type { WorkerOutput };
 // (src/countersign-role.ts) — one shared description across every variant
 // so openToolObjectFromUnion's identical-declaration collapse drops none of it.
 const CODER_STATUS_DESCRIPTION =
-  "planned | completed | refused | unfinished — 形状指引，非 schema 闸；completed 回执含 TDD、同模式、引入回归、行为事实四项证据；unfinished 缺前置或违宪约束致本局未完成时可用，缺待决 owner 决定或答复属缺前置。" as const;
+  "planned | completed | refused | partially_completed | unfinished — 形状指引，非 schema 闸；completed 回执含 TDD、同模式、引入回归、行为事实四项证据；unfinished 缺前置或违宪约束致本局未完成时可用，缺待决 owner 决定或答复属缺前置。" as const;
 const coderOutputVariants = Type.Union([
   Type.Object({
     status: Type.Unknown({ description: CODER_STATUS_DESCRIPTION }),
@@ -154,15 +154,30 @@ function isRecord(value: unknown): value is Record<string, unknown> {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
-/**
- * Read the accepted receipt's own `status` word as submitted (#836: `status`
- * stays an open Type.Unknown provider field, so FixerOutput's Static type no
- * longer narrows it to a literal union — code still just reads whatever
- * string the role wrote; a non-string status reads as "" and simply misses
- * every known-status gate below, same as any other unrecognized status).
- */
-function workerStatusOf(output: WorkerOutput): string {
-  return typeof output.status === "string" ? output.status : "";
+/** Routing words shared by Coder and Fixer; provider schemas remain open. */
+const WORKER_ROUTING_STATUSES = new Set([
+  "planned",
+  "completed",
+  "refused",
+  "partially_completed",
+  "unfinished",
+]);
+const WORKER_STATUS_REASK =
+  "status 不是 planned、completed、refused、partially_completed、unfinished 之一。请重新交卷，status 写明其一。" as const;
+
+/** Read only the field that selects the worker's next package-owned path. */
+function workerStatusOf(output: WorkerOutput): string | undefined {
+  return isRecord(output) && typeof output.status === "string"
+    ? output.status
+    : undefined;
+}
+
+function requireReadableWorkerStatus(output: WorkerOutput): string {
+  const status = workerStatusOf(output);
+  if (status === undefined || !WORKER_ROUTING_STATUSES.has(status)) {
+    throw new ParentQueueReaskError(WORKER_STATUS_REASK);
+  }
+  return status;
 }
 
 function deepFreeze<T>(value: T): T {
@@ -276,9 +291,10 @@ export function createFixerRoleRuntime(
               throw new Error("修内司修理包与阶段未装载");
             }
             const output = deepFreeze(validateFixerOutput(parameters, phase));
+            const status = requireReadableWorkerStatus(output);
             assertAcceptableThroughHost(
               submissionGate,
-              workerStatusOf(output),
+              status,
               output,
               hostActions,
               ctx,
@@ -286,7 +302,7 @@ export function createFixerRoleRuntime(
             );
             let pass;
             try {
-              pass = WORKER_DONE_STATUSES.has(workerStatusOf(output))
+              pass = WORKER_DONE_STATUSES.has(status)
                 ? await pi.requireSubmissionGate!({
                     context: ctx,
                     subject: { kind: "worker_completion" },
@@ -429,11 +445,12 @@ export function createCoderRoleRuntime(
               throw new Error("将作监任务与阶段未装载");
             }
             const output = validateWorkerOutput(parameters, phase, "Coder");
+            const status = requireReadableWorkerStatus(output);
             // #836: skill-expansion evidence rejection deleted (陛下「2.4/5 删」).
             // Skill still ships with the package (ADR 0052); code no longer refuses on it.
             assertAcceptableThroughHost(
               submissionGate,
-              workerStatusOf(output),
+              status,
               output,
               hostActions,
               ctx,
@@ -441,7 +458,7 @@ export function createCoderRoleRuntime(
             );
             let pass;
             try {
-              pass = WORKER_DONE_STATUSES.has(workerStatusOf(output))
+              pass = WORKER_DONE_STATUSES.has(status)
                 ? await pi.requireSubmissionGate!({
                     context: ctx,
                     subject: { kind: "worker_completion" },