@akagilnc/pi-workflow-roles 0.1.5375 → 0.1.5406

package/src/role-runtime.ts

@@ -6,7 +6,6 @@ import {
 
   runDirectoryFromHostContext,
   type HostContext,
-  type HostToolResult,
   type RoleEnvelopeHost,
   type RoleHost,
 } from "./host-contracts.ts";
@@ -14,6 +13,8 @@ import {
 import { Value } from "typebox/value";
 import { sitianReport } from "./sitian-facade.ts";
 import { createSubmissionLedgerHost, sealAcceptedSubmission } from "./submission-ledger.ts";
+import { registerFiledSubmissionTool, type FiledSubmissionBeforeAccept } from "./filed-submission.ts";
+import type { RoleSubmissionDeclaration } from "./role-submission-declarations.ts";
 
 import { activationTraceRecordSchema, namedActivationCause, type ActivationTraceRecord, type ActivationTraceWriter } from "./activation-trace.ts";
 import { homeFromRunDirectory } from "./activation-ledger-topology.ts";
@@ -31,7 +32,16 @@ import {
 } from "./engine-detour.ts";
 import { engineSessionMaterialFromOptions } from "./package-resources/engine-material.ts";
 import { registerEngineDetourTool } from "./engine-detour-tool.ts";
-import { createReceiptDeliveryPolicy, NO_RECEIPT_LIFECYCLE_ENTRY_TYPE } from "./receipt-delivery-policy.ts";
+import {
+  createReceiptDeliveryPolicy,
+  deliveryLimitFromConfig,
+  deliveryLimitFromEnv,
+  NO_RECEIPT_LIFECYCLE_ENTRY_TYPE,
+  priorReceiptContinuation,
+  RECEIPT_DELIVERY_REQUEST_ENTRY,
+  RECEIPT_REJECTION_ENTRY,
+  receiptAttemptPointer,
+} from "./receipt-delivery-policy.ts";
 import {
   COLLECTOR_CONSTRUCTION_TOOLS,
   COLLECTOR_REQUIRED_TOOLS,
@@ -96,6 +106,7 @@ import { loadNavigatorWorkBaseSuffix } from "./navigator-work-base.ts";
 import {
   buildNavigatorInfrastructureFailureFact,
   classifyPackagedRoleTerminalResult,
+  packagedRoleOutputRejectionReason,
   extractInfrastructureFailureEvidence,
   NAVIGATOR_INVOCATION_ENTRY,
   resolveLifecycleInvocationPrincipal,
@@ -445,7 +456,7 @@ export type RoleRuntimeDependencies = {
   loadNotarySourceRun?(path: string): Promise<import("./notary-contracts.ts").NotarySourceRunLocator>;
   loadDoctorCase?(path: string): Promise<import("./doctor-contracts.ts").DoctorCase>;
   loadMergerInput?(path: string): Promise<unknown>;
-  createNavigatorAttendance?(options: { context: HostContext; role: string; phase: NavigatorPhase; subjectKey: string; subject: string; authority: string; contextError?: unknown; invocationId: string; onEvent: (event: import("./navigator-attendance.ts").NavigatorEvent, report: import("./navigator-attendance.ts").NavigatorReport) => void | Promise<void> }): NavigatorAttendanceDependency | Promise<NavigatorAttendanceDependency>;
+  createNavigatorAttendance?(options: { context: HostContext; role: string; phase: NavigatorPhase; subjectKey: string; subject: string; authority: string; contextError?: unknown; invocationId: string; deliveryRequestLimit?: number; onEvent: (event: import("./navigator-attendance.ts").NavigatorEvent, report: import("./navigator-attendance.ts").NavigatorReport) => void | Promise<void> }): NavigatorAttendanceDependency | Promise<NavigatorAttendanceDependency>;
   loadNavigatorWorkContext?(options: { context: HostContext; role: string; phase: NavigatorPhase; getFlag?: (name: string) => unknown }): Promise<NavigatorWorkContext>;
   activationClock?(): string;
   activationTraceWriter?: (record: ActivationTraceRecord) => void | Promise<void>;
@@ -547,18 +558,6 @@ export async function projectClosedSubmissionLifecycle(
   }
 }
 
-/**
- * Optional pre-accept hook on the shared filed-officer envelope (ADR 0075).
- * May return a details projection (envelope-owned machine facts recorded next to
- * the submitted parameters); undefined keeps the parameters as submitted.
- */
-type FiledOfficerBeforeAccept = (input: {
-  readonly toolCallId: string;
-  readonly parameters: unknown;
-  readonly signal: AbortSignal | undefined;
-  readonly ctx: HostContext;
-}) => Promise<unknown>;
-
 /**
  * Shared registration envelope for filed officers (ADR 0018 / #572):
  * activate, tool register, before_agent_start prompt, inventory check.
@@ -569,9 +568,9 @@ function createFiledOfficerRuntime(
   roleHost: RoleHost,
   spec: {
     role: PackagedRole;
-    tool: { name: string; label: string; description: string; promptSnippet: string; parameters: unknown };
+    tool: RoleSubmissionDeclaration;
     soulTag: string;
-    beforeAccept?: FiledOfficerBeforeAccept;
+    beforeAccept?: FiledSubmissionBeforeAccept;
   },
   dependencies: { loadSoul(): Promise<string> },
 ) {
@@ -584,26 +583,9 @@ function createFiledOfficerRuntime(
       soul = loaded;
       if (!registered) {
         registered = true;
-        roleHost.registerTool({
-          name: spec.tool.name,
-          label: spec.tool.label,
-          description: spec.tool.description,
-          promptSnippet: spec.tool.promptSnippet,
-          parameters: spec.tool.parameters as never,
-          async execute(toolCallId, parameters, signal, _onUpdate, ctx): Promise<HostToolResult<unknown>> {
-            if (soul === undefined) throw new Error(`${spec.role} 职分未装载`);
-            const projected =
-              spec.beforeAccept === undefined
-                ? undefined
-                : await spec.beforeAccept({ toolCallId, parameters, signal, ctx });
-            // Accept-as-is + terminate only. Shape is not an admission gate
-            // (第 0 条 / ADR 0055); sole-final barrier is ledger-owned (#575).
-            return {
-              content: [],
-              details: projected === undefined ? parameters : projected,
-              terminate: true as const,
-            };
-          },
+        registerFiledSubmissionTool(roleHost, spec.tool, {
+          readyError: () => (soul === undefined ? `${spec.role} 职分未装载` : undefined),
+          ...(spec.beforeAccept === undefined ? {} : { beforeAccept: spec.beforeAccept }),
         });
         roleHost.on("before_agent_start", (event) => {
           if (soul === undefined) throw new Error(`${spec.role} 职分未装载`);
@@ -995,7 +977,15 @@ function lastAssistantProse(
 
 export function createRoleRuntimeExtension(
   dependencies: RoleRuntimeDependencies,
+  /**
+   * Effective ceiling already resolved for this turn (#1132). Absent only on
+   * the Pi child, whose env is that same resolved value projected by the host.
+   */
+  deliveryRequestLimit?: number,
 ): (envelopeHost: RoleEnvelopeHost) => void {
+  const deliveryLimit = deliveryRequestLimit === undefined
+    ? deliveryLimitFromEnv(process.env)
+    : deliveryLimitFromConfig(deliveryRequestLimit);
   return (envelopeHost) => {
     let projectClosedSubmission: (closed: import("./submission-ledger.ts").ClosedSubmission, context: HostContext) => Promise<void> = async () => {
       throw new Error("角色终局投射接缝尚未初始化");
@@ -1062,9 +1052,9 @@ export function createRoleRuntimeExtension(
     // Envelope-owned execute→tool_result bridge for submission non-pass (ADR 0018 / #525).
     const pendingSubmissionNonPassByToolCallId = new Map<string, SubmissionGateNonPassResult>();
     let engineDetourRegistered = false;
-    // #288 primary-session thin adapter. The policy is the sole budget owner;
-    // terminating-tool rejections and mechanical delivery requests share two turns.
-    let receiptDelivery = createReceiptDeliveryPolicy();
+    // #288 primary-session thin adapter. The policy is the sole budget owner.
+    // #1132: one ceiling for this turn, closed over from the execution seam.
+    let receiptDelivery = createReceiptDeliveryPolicy(deliveryLimit);
     let noReceiptRecorded = false;
     // Public-run fetch observation.
     let priorFetch: typeof globalThis.fetch | undefined;
@@ -1261,7 +1251,7 @@ export function createRoleRuntimeExtension(
         },
       };
     });
-    roleHost.on("tool_result", async (event) => {
+    roleHost.on("tool_result", async (event, ctx) => {
       const role = selectedRole;
       if (role === undefined) return;
       const pendingInfra = pendingInfrastructureFailures.get(event.toolCallId);
@@ -1276,12 +1266,19 @@ export function createRoleRuntimeExtension(
       const outputClassification = isOutputTool ? classifyPackagedRoleTerminalResult(classified) : undefined;
       if (isRoleInfrastructureFailure || outputClassification?.kind === "infrastructure") {
         receiptDelivery.stopForInfrastructure();
-      } else if (isOutputTool && outputClassification?.kind === "nonterminal" && event.isError) {
-        const reason = (event.content ?? [])
-          .map((part) => part.type === "text" && "text" in part ? part.text : "")
-          .join("")
-          .trim();
-        receiptDelivery.recordRejected(reason);
+      } else if (isOutputTool) {
+        const reason = packagedRoleOutputRejectionReason(classified);
+        if (reason !== undefined) {
+          receiptDelivery.recordRejected(reason);
+          // Bind the observed rejection now, before agent_end or a host failure.
+          // This observation is not an exhausted lifecycle or a budget spend.
+          if (ctx.invocationScopeId !== undefined) {
+            envelopeHost.appendEntry(RECEIPT_REJECTION_ENTRY, {
+              invocationScopeId: ctx.invocationScopeId,
+              reason,
+            });
+          }
+        }
       }
       // Accepted/human terminal projection belongs exclusively to typed ledger
       // closure. tool_result retains only infrastructure settlement.
@@ -1340,15 +1337,16 @@ export function createRoleRuntimeExtension(
           return;
         }
         // Attended with neither tool nor prose → honest no_receipt (not typed 催交).
-        // Exhaust delivery budget without sending the typed prompt so facts() stays lawful.
+        // Close the budget without sending prompts; the fact stays the real count.
         if (!noReceiptRecorded) {
           const runPointer = runDirectoryFromHostContext(ctx);
           if (runPointer !== undefined) {
             noReceiptRecorded = true;
-            while (receiptDelivery.nextAction() === "request-delivery") {
-              receiptDelivery.recordDeliveryRequest();
-            }
-            const facts = receiptDelivery.facts({ runPointer, attemptPointer: `current:${runPointer}` });
+            receiptDelivery.closeBudget();
+            const facts = receiptDelivery.facts({
+              runPointer,
+              attemptPointer: receiptAttemptPointer(runPointer, ctx.invocationScopeId),
+            });
             envelopeHost.appendEntry(NO_RECEIPT_LIFECYCLE_ENTRY_TYPE, facts);
             try {
               sitianReport({
@@ -1368,7 +1366,11 @@ export function createRoleRuntimeExtension(
         receiptDelivery.recordDeliveryRequest();
         // Keep the package-owned continuation off the public input lifecycle:
         // receipt delivery must not be mistaken for later caller input.
-        envelopeHost.appendEntry("ak-receipt-delivery-request");
+        const scopeId = ctx.invocationScopeId?.trim() ?? "";
+        envelopeHost.appendEntry(
+          RECEIPT_DELIVERY_REQUEST_ENTRY,
+          scopeId.length > 0 ? { invocationScopeId: scopeId } : undefined,
+        );
         try {
           sitianReport({
             level: "event",
@@ -1388,7 +1390,10 @@ export function createRoleRuntimeExtension(
         const runPointer = runDirectoryFromHostContext(ctx);
         if (runPointer !== undefined) {
           noReceiptRecorded = true;
-          const facts = receiptDelivery.facts({ runPointer, attemptPointer: `current:${runPointer}` });
+          const facts = receiptDelivery.facts({
+            runPointer,
+            attemptPointer: receiptAttemptPointer(runPointer, ctx.invocationScopeId),
+          });
           envelopeHost.appendEntry(NO_RECEIPT_LIFECYCLE_ENTRY_TYPE, facts);
           try {
             sitianReport({
@@ -1489,6 +1494,7 @@ export function createRoleRuntimeExtension(
         },
       },
       hostActions,
+      { unfinishedReasonBounceLimit: deliveryLimit },
     );
     const coder = createCoderRoleRuntime(
       roleHost,
@@ -1502,6 +1508,7 @@ export function createRoleRuntimeExtension(
         },
       },
       hostActions,
+      { unfinishedReasonBounceLimit: deliveryLimit },
     );
     const reviewer = createReviewerRoleRuntime(
       roleHost,
@@ -1707,7 +1714,7 @@ export function createRoleRuntimeExtension(
       roleReferenceMaterials = "";
       activeReviewerParent = undefined;
       activeCollector = undefined;
-      receiptDelivery = createReceiptDeliveryPolicy();
+      receiptDelivery = createReceiptDeliveryPolicy(deliveryLimit);
       noReceiptRecorded = false;
       pendingNavigatorPresentation = undefined;
       navigatorActivation += 1;
@@ -1761,6 +1768,14 @@ export function createRoleRuntimeExtension(
         // #855: two-face waiting.jsonl write removed — fail-closed book-key + session only.
         resolveBookKeyFromGit(ctx.cwd);
         durableSessionPointer(ctx.sessionManager);
+        const scopeId = ctx.invocationScopeId?.trim() ?? "";
+        if (scopeId.length > 0) {
+          // Same public call, new process: keep sends already issued and the
+          // rejection facts. A different manual call has a different scope.
+          receiptDelivery.continueIssued(
+            priorReceiptContinuation(ctx.sessionManager.getEntries(), scopeId),
+          );
+        }
 
         // Station children (court diarist, inner-gate summons) omit navigator sidecar (#840).
         // Top-level public entry legs still attend automatically.
@@ -1837,6 +1852,7 @@ export function createRoleRuntimeExtension(
             subject: work.subject,
             authority: work.authority,
             invocationId,
+            deliveryRequestLimit: deliveryLimit,
             ...(contextError === undefined ? {} : { contextError }),
             onEvent: (navigatorEvent, report) => {
               if (activation === navigatorActivation && !navigatorDeliveryClosed) {
@@ -1873,7 +1889,7 @@ export function createRoleRuntimeExtension(
         // Parent session feeds #216 createRecordSession so baseline/bounce survive resume.
         if ("worker" in entry && entry.worker === true) {
           const workerArms = { coder, fixer } as const;
-          workerArms[entry.role].armSubmissionGate(ctx.cwd, ctx.sessionManager);
+          workerArms[entry.role].armSubmissionGate(ctx.cwd, ctx.sessionManager, ctx.invocationScopeId);
         }
         admitted = true;
       } catch (error) {

package/src/role-submission-declarations.ts

@@ -0,0 +1,143 @@
+/**
+ * Field guidance for each public seat's submission tool (#1031).
+ * The tool name is the role registry's outputTool. This module does not restate it.
+ * Review seats keep the #1028 schema. Other seats keep their own field guidance.
+ * Execute lives in filed-submission.ts.
+ */
+import { packagedRoleOutputTool, type PackagedRole } from "./packaged-role-registry.ts";
+import { reviewSubmissionSchema } from "./review-submission.ts";
+import { collectorOutputArgsSchema } from "./collector-tool-schemas.ts";
+import { diaristOutputSchema } from "./diarist-contracts.ts";
+import { doctorSubmissionSchema, DOCTOR_OUTPUT_TOOL_DESCRIPTION } from "./doctor-contracts.ts";
+import { fixerOutputSchema } from "./package-contracts/fixer-output.ts";
+import { gatekeeperOutputSchema } from "./package-contracts/gatekeeper-output.ts";
+import { gleanerLeftOutputSchema } from "./gleaner-left-contracts.ts";
+import { mergerOutputSchema } from "./merger-contracts.ts";
+import { navigatorOutputSchema } from "./package-contracts/navigator-output.ts";
+import { reviewerOutputSchema } from "./package-contracts/reviewer-output.ts";
+import { secretariatVerdictSchema } from "./secretariat-contracts.ts";
+import { coderOutputSchema } from "./package-contracts/worker-output.ts";
+
+export type RoleSubmissionDeclaration = {
+  readonly role: PackagedRole;
+  readonly name: string;
+  readonly label: string;
+  readonly description: string;
+  readonly promptSnippet?: string;
+  readonly parameters: unknown;
+};
+
+type SubmissionFace = Omit<RoleSubmissionDeclaration, "role" | "name">;
+
+const SUBMISSION_FACE = {
+  judge: {
+    label: "大理寺输出",
+    description: "提交大理寺终局判词；交卷调用结束后，由公开调用接缝按判词状态执行适用审核。",
+    promptSnippet: "提交大理寺终局判词",
+    parameters: reviewSubmissionSchema,
+  },
+  fixer: {
+    label: "修内司输出",
+    description: "提交修内司终局回执。",
+    promptSnippet: "提交修内司终局回执",
+    parameters: fixerOutputSchema,
+  },
+  coder: {
+    label: "将作监输出",
+    description: "提交将作监终局回执。",
+    promptSnippet: "提交将作监终局回执",
+    parameters: coderOutputSchema,
+  },
+  reviewer: {
+    label: "御史台输出",
+    description: "提交御史台终局回执。",
+    promptSnippet: "提交御史台终局回执",
+    parameters: reviewerOutputSchema,
+  },
+  collector: {
+    label: "通进司输出",
+    description: "提交通进司回执。",
+    promptSnippet: "提交通进司回执",
+    parameters: collectorOutputArgsSchema,
+  },
+  doctor: {
+    label: "太医署输出",
+    description: DOCTOR_OUTPUT_TOOL_DESCRIPTION,
+    parameters: doctorSubmissionSchema,
+  },
+  merger: {
+    label: "合并输出",
+    description: "提交合并结果；输出分支为 completed 与 escalate。",
+    promptSnippet: "提交合并结果",
+    parameters: mergerOutputSchema,
+  },
+  notary: {
+    label: "符宝郎输出",
+    description: "提交引文保真与票面对齐的 converged/continue/escalate 决议。",
+    promptSnippet: "提交符宝郎决议",
+    parameters: reviewSubmissionSchema,
+  },
+  countersign: {
+    label: "给事中输出",
+    description: "给事中决议。",
+    promptSnippet: "给事中决议",
+    parameters: reviewSubmissionSchema,
+  },
+  secretariat: {
+    label: "中书省输出",
+    description: "中书省终局回执。",
+    promptSnippet: "中书省终局回执",
+    parameters: secretariatVerdictSchema,
+  },
+  "gleaner-left": {
+    label: "左拾遗输出",
+    description: "左拾遗弹章。",
+    promptSnippet: "左拾遗弹章",
+    parameters: gleanerLeftOutputSchema,
+  },
+  inspector: {
+    label: "台院输出",
+    description: "台院终局回执，状态为 converged、continue 或 escalate。",
+    promptSnippet: "台院终局回执",
+    parameters: reviewSubmissionSchema,
+  },
+  gatekeeper: {
+    label: "门下省决议",
+    description: "门下省终局决议。status 为 dispatch 或 pass。",
+    promptSnippet: "门下省决议",
+    parameters: gatekeeperOutputSchema,
+  },
+  navigator: {
+    label: "游奕使建议",
+    description: "游奕使终局回执：散文建议，原样呈现。",
+    promptSnippet: "游奕使建议",
+    parameters: navigatorOutputSchema,
+  },
+  auditor: {
+    label: "审刑院输出",
+    description: "审刑院终局回执，status 为 converged、continue 或 escalate。",
+    promptSnippet: "审刑院终局回执",
+    parameters: reviewSubmissionSchema,
+  },
+  diarist: {
+    label: "起居郎输出",
+    description: "起居郎交单票 sessions 或多票逐票 ticketSessions 边界；认不出本庭对象则 escalate。",
+    promptSnippet: "起居郎交边界",
+    parameters: diaristOutputSchema,
+  },
+} as const satisfies Record<PackagedRole, SubmissionFace>;
+
+/** Tool name comes from the registry record. Label and schema stay on this face. */
+export function roleSubmissionDeclaration(role: PackagedRole): RoleSubmissionDeclaration {
+  const name = packagedRoleOutputTool(role);
+  if (name === undefined) throw new Error(`${role} output tool is not declared`);
+  const face = SUBMISSION_FACE[role];
+  return {
+    role,
+    name,
+    label: face.label,
+    description: face.description,
+    ...("promptSnippet" in face ? { promptSnippet: face.promptSnippet } : {}),
+    parameters: face.parameters,
+  };
+}

package/src/secretariat-contracts.ts

@@ -7,7 +7,42 @@
  * is defaulted, rewritten, or dropped (ADR 0055).
  */
 
+import { Type } from "typebox";
+
+import { withTerminatingOutputDeclarations } from "./package-contracts/terminating-infrastructure.ts";
+
 export const SECRETARIAT_OUTPUT_TOOL_NAME = "ak_secretariat_output";
+
+/**
+ * 中书省终局回执形状。
+ * #1134: `secretariatStatus` alone is the trajectory field
+ * (src/packaged-role-registry.ts receiptStatusKey; the public settlement reads
+ * converged | escalate to route); its words ride the description. note/evidence/
+ * decisionGate are declared name + semantic description only — the string type, the
+ * number type, the nested question/options object shape and the required constraint
+ * are deleted, because the package declaration IS the host's pre-dispatch validator.
+ * (ticketNumber keeps its own declaration: it is the declared seat identity the
+ * activation flag and settlement read, not narrative content.)
+ */
+export const secretariatVerdictSchema = withTerminatingOutputDeclarations(
+  Type.Object(
+    {
+      secretariatStatus: Type.Unknown({
+        description: "converged | escalate",
+      }),
+      ticketNumber: Type.Optional(
+        Type.Unknown({ description: "本票号；署时指向最终正文所在票" }),
+      ),
+      note: Type.Unknown({ description: "附注" }),
+      evidence: Type.Optional(Type.Unknown({ description: "留存证据" })),
+      decisionGate: Type.Unknown({
+        description: "需陛下处置的问题与选项；可写 question 与 options，原样留存。",
+      }),
+    },
+    { additionalProperties: true },
+  ),
+);
+(secretariatVerdictSchema as unknown as { required: string[] }).required = [];
 /**
  * #969 durable custom entry: 给事中 terminal (署|上呈) for seat settlement projection.
  * Carries original receipt bytes + nested runId. Envelope persists custom entries

package/src/secretariat-role.ts

@@ -4,54 +4,18 @@
  * shared envelope — src/role-runtime.ts (ADR 0018 / #924).
  */
 import type { Static } from "typebox";
-import { Type } from "typebox";
 
-import { withTerminatingOutputDeclarations } from "./package-contracts/terminating-infrastructure.ts";
-import { SECRETARIAT_OUTPUT_TOOL_NAME, type SecretariatVerdict } from "./secretariat-contracts.ts";
+import { SECRETARIAT_OUTPUT_TOOL_NAME, secretariatVerdictSchema, type SecretariatVerdict } from "./secretariat-contracts.ts";
+import { roleSubmissionDeclaration } from "./role-submission-declarations.ts";
 
 export { SECRETARIAT_OUTPUT_TOOL_NAME } from "./secretariat-contracts.ts";
 export type { SecretariatVerdict };
 
-/**
- * 中书省终局回执形状。
- * #1134: `secretariatStatus` alone is the trajectory field
- * (src/packaged-role-registry.ts:406 receiptStatusKey; the public settlement reads
- * converged | escalate to route); its words ride the description. note/evidence/
- * decisionGate are declared name + semantic description only — the string type, the
- * number type, the nested question/options object shape and the required constraint
- * are deleted, because the package declaration IS the host's pre-dispatch validator.
- * (ticketNumber keeps its own declaration: it is the declared seat identity the
- * activation flag and settlement read, not narrative content.)
- */
-export const secretariatVerdictSchema = withTerminatingOutputDeclarations(
-  Type.Object(
-    {
-      secretariatStatus: Type.Unknown({
-        description: "converged | escalate",
-      }),
-      ticketNumber: Type.Optional(
-        Type.Unknown({ description: "本票号；署时指向最终正文所在票" }),
-      ),
-      note: Type.Unknown({ description: "附注" }),
-      evidence: Type.Optional(Type.Unknown({ description: "留存证据" })),
-      decisionGate: Type.Unknown({
-        description: "需陛下处置的问题与选项；可写 question 与 options，原样留存。",
-      }),
-    },
-    { additionalProperties: true },
-  ),
-);
-(secretariatVerdictSchema as unknown as { required: string[] }).required = [];
+export { secretariatVerdictSchema } from "./secretariat-contracts.ts";
 
 export type SecretariatVerdictParameters = Static<typeof secretariatVerdictSchema>;
 
-export const SECRETARIAT_OUTPUT_TOOL_SPEC = {
-  name: SECRETARIAT_OUTPUT_TOOL_NAME,
-  label: "中书省输出",
-  description: "中书省终局回执。",
-  promptSnippet: "中书省终局回执",
-  parameters: secretariatVerdictSchema,
-} as const;
+export const SECRETARIAT_OUTPUT_TOOL_SPEC = roleSubmissionDeclaration("secretariat");
 
 export type SecretariatRuntimeDependencies = {
   loadSoul(): Promise<string>;

package/src/submission-correctable-error.ts

@@ -36,8 +36,11 @@ export function isCorrectableExecuteError(error: unknown): boolean {
 }
 
 /**
- * Durable projection for ACP envelope tool catches only.
- * Pi path keeps native throw → isError toolResult (no shared projection consumer).
+ * Durable projection for correctable execute errors.
+ * The ACP envelope consumes it on every correctable catch. The Pi adapter
+ * consumes it for the one-shot commit and prefix reminders and the
+ * unfinished-reason reminder, returned as an isError tool result. Other Pi
+ * correctable errors stay native throws.
  */
 export type CorrectableExecuteRejectionProjection = {
   readonly diagnostic: string;

package/src/submission-errors.ts

@@ -51,10 +51,21 @@ export class WorkerPrefixReminderError extends Error {
   }
 }
 
+/**
+ * ADR 0066/0070 one-shot commit and prefix reminders.
+ * They stay a correction the same session may make, and they do not occupy
+ * the configured re-ask or 催交 budget (#1132).
+ */
+export function isOneShotWorkerReminderCode(code: unknown): boolean {
+  return code === "worker_commit_reminder" || code === "worker_prefix_reminder";
+}
+
 export class WorkerUnfinishedReasonReminderError extends Error {
   readonly code = "worker_unfinished_reason_reminder" as const;
   constructor() {
-    super("本次 unfinished 回执未含 reason；本接缝缺由至多打回两次。");
+    // The ceiling is the configured unfinished-reason limit. This text reaches
+    // the model and does not restate a count.
+    super("本次 unfinished 回执未含 reason；请补上 reason 后再交。");
     this.name = "WorkerUnfinishedReasonReminderError";
   }
 }