@akagilnc/pi-workflow-roles 0.1.5068 → 0.1.5079

package/src/submission-ledger.ts

@@ -20,7 +20,8 @@ import type { SitianRecord } from "./sitian-contracts.ts";
 import { findRunDirectoryById } from "./public-cli/run-lifecycle.ts";
 import type { TerminalRoleName } from "./public-cli/terminal.ts";
 import { isCorrectableExecuteError } from "./submission-correctable-error.ts";
-import { failOnInfrastructureFailureDeclaration } from "./package-contracts/terminating-infrastructure.ts";
+import { failOnInfrastructureFailureDeclaration, infrastructureFailureDiagnostic } from "./package-contracts/terminating-infrastructure.ts";
+import { REVIEW_SUBMISSION_OUTPUT_TOOL_NAME } from "./review-submission.ts";
 
 export type SubmissionCall = { readonly id: string; readonly name: string };
 export type SubmissionOutcomeKind = "correctable-rejection" | "audit-escalation" | "infrastructure";
@@ -678,17 +679,28 @@ export function createSubmissionLedgerHost(
           });
           let result: HostToolResult<unknown>;
           try {
-            failOnInfrastructureFailureDeclaration(
-              params,
-              {
-                failInfrastructure(error, ctx) {
-                  failInfrastructure(error, ctx);
+            // A review escalate that carries the failure declaration is the
+            // seat's own submission. Every other declaration stays on the
+            // host-failure seam. Tool identity comes from the registry map.
+            const reviewEscalate = tool.name === REVIEW_SUBMISSION_OUTPUT_TOOL_NAME
+              && infrastructureFailureDiagnostic(params) !== undefined
+              && params !== null
+              && typeof params === "object"
+              && !Array.isArray(params)
+              && (params as Record<string, unknown>).status === "escalate";
+            if (!reviewEscalate) {
+              failOnInfrastructureFailureDeclaration(
+                params,
+                {
+                  failInfrastructure(error, ctx) {
+                    failInfrastructure(error, ctx);
+                  },
                 },
-              },
-              context,
-              toolCallId,
-              tool.bounceInfrastructureDeclaration,
-            );
+                context,
+                toolCallId,
+                tool.bounceInfrastructureDeclaration,
+              );
+            }
             result = await tool.execute(toolCallId, params, signal, update, context);
           } catch (error) {
             if (isCorrectableExecuteError(error)) {

package/src/worker-role.ts

@@ -5,7 +5,7 @@ import { withTerminatingOutputDeclarations } from "./package-contracts/terminati
 
 import { readableGateItem } from "./readable-gate-item.ts";
 import { projectGatekeeperEscalation } from "./audit-escalation.ts";
-import { GatekeeperDecisionError, ParentQueueReaskError } from "./submission-errors.ts";
+import { GatekeeperDecisionError, ParentQueueReaskError, unreadableDiscriminatorNotice } from "./submission-errors.ts";
 import {
   CODER_OUTPUT_TOOL_NAME,
   FIXER_OUTPUT_TOOL_NAME,
@@ -44,8 +44,8 @@ export type { WorkerOutput };
 // no code branches on their length. `reason` alone keeps minLength: the worker
 // gate reads `reason.trim().length > 0` to pick typed-reminder-bounce vs accept
 // (src/worker-submission-gates.ts:159-163,297-302).
-// #836 (ADR 0003 Amendment): status kept open like countersignStatus
-// (src/countersign-role.ts) — one shared description across every variant
+// Worker status is not the review three-state field (#1055): schema stays open.
+// One shared description across every variant
 // so openToolObjectFromUnion's identical-declaration collapse drops none of it.
 const CODER_STATUS_DESCRIPTION =
   "planned | completed | refused | partially_completed | unfinished — 形状指引，非 schema 闸；completed 回执含 TDD、同模式、引入回归、行为事实四项证据；unfinished 缺前置或违宪约束致本局未完成时可用，缺待决 owner 决定或答复属缺前置。" as const;
@@ -135,8 +135,6 @@ const WORKER_ROUTING_STATUSES = new Set([
   "partially_completed",
   "unfinished",
 ]);
-const WORKER_STATUS_REASK =
-  "status 不是 planned、completed、refused、partially_completed、unfinished 之一。请重新交卷，status 写明其一。" as const;
 
 /** Read only the field that selects the worker's next package-owned path. */
 function workerStatusOf(output: WorkerOutput): string | undefined {
@@ -148,7 +146,7 @@ function workerStatusOf(output: WorkerOutput): string | undefined {
 function requireReadableWorkerStatus(output: WorkerOutput): string {
   const status = workerStatusOf(output);
   if (status === undefined || !WORKER_ROUTING_STATUSES.has(status)) {
-    throw new ParentQueueReaskError(WORKER_STATUS_REASK);
+    throw new ParentQueueReaskError(unreadableDiscriminatorNotice("status", isRecord(output) ? output.status : undefined));
   }
   return status;
 }