@akagilnc/pi-workflow-roles 0.1.5382 → 0.1.5462

package/dist/public-cli/terminal.js

@@ -1,3 +1,4 @@
+import { serializeThrownValue } from "../serialize-thrown-value.js";
 /** Encode one free-text Terminal cell. JSON string form cannot embed raw tab/newline. */
 export function encodeTerminalField(value) {
     return JSON.stringify(value);
@@ -10,36 +11,15 @@ export function exitCodeForTerminalOutcome(outcome) {
     return isLawfulTypedTerminalOutcome(outcome) ? 0 : 1;
 }
 /**
- * One admitted Role run's typed Terminal aggregate.
- * Resumable failures carry `resume` and must not re-disclose the run ID via
- * top-level `runId` or public artifact path components — only `resume.command`.
- * #416: autoResumeCount (0..2) is a call-local observation of how many in-place
- * auto-resumes occurred during this single LLM call; it is not persisted to
- * run-state.json and does not participate in limit decisions.
+ * Parent-facing current reply: a court's own accepted/audit payloads only.
+ * Run-scoped history stays on TerminalResult.submissions (#879 / #836), and a
+ * failure face never answers as this court's reply (#953).
  */
-/**
- * Current-result payloads on a terminal — accepted/audit role result, or a
- * rare intentional failure face. Run history is TerminalResult.submissions
- * (#836 / #953), not this helper.
- */
-export function roleResultPayloads(outcome) {
-    if (outcome.kind === "accepted" || outcome.kind === "audit_escalation")
-        return outcome.payloads ?? [];
-    if (outcome.kind === "failure")
-        return outcome.payloads ?? [];
-    return [];
-}
-/**
- * Prefer non-empty current-result payloads; an empty array must not shadow
- * top-level submissions (#953 / #836). Callers that need failure history must
- * read TerminalResult.submissions directly — do not coalesce into failure.payloads.
- */
-export function coalesceSubmissionRows(payloads, submissions) {
-    if (payloads !== undefined && payloads.length > 0)
-        return payloads;
-    if (submissions !== undefined && submissions.length > 0)
-        return submissions;
-    return payloads ?? submissions ?? [];
+export function currentReplyRows(terminal) {
+    const outcome = terminal?.roleOutcome;
+    return outcome?.kind === "accepted" || outcome?.kind === "audit_escalation"
+        ? outcome.payloads ?? []
+        : [];
 }
 /**
  * Build an advice navigator fact (#959). Prose is presented as submitted;
@@ -69,6 +49,17 @@ export function formatTerminalResult(result) {
     if (result.roleOutcome.kind === "failure") {
         lines.push(`diagnostic\t${encodeTerminalField(result.roleOutcome.diagnostic)}`);
     }
+    // Accepted volumes do not dump decisiveFacts unless a failed attempt is
+    // recorded. The unsettled-direction fact still has to be visible on its own.
+    // audit_escalation already dumps every decisiveFact below.
+    if (result.roleOutcome.kind === "accepted"
+        && result.roleOutcome.decisiveFacts?.directionUnsettled === true) {
+        lines.push("fact\tdirectionUnsettled\ttrue");
+        const subsequent = result.roleOutcome.decisiveFacts.subsequentAudit;
+        if (typeof subsequent === "string") {
+            lines.push(`fact\tsubsequentAudit\t${encodeTerminalField(subsequent)}`);
+        }
+    }
     if (result.roleOutcome.kind === "failure" || result.roleOutcome.kind === "no_receipt" || result.roleOutcome.kind === "audit_escalation" || result.roleOutcome.decisiveFacts?.failedAttempts !== undefined) {
         const facts = result.roleOutcome.kind === "accepted"
             ? { failedAttempts: result.roleOutcome.decisiveFacts?.failedAttempts }
@@ -76,7 +67,7 @@ export function formatTerminalResult(result) {
         for (const [key, value] of Object.entries(facts)) {
             if (value === undefined)
                 continue;
-            const rendered = typeof value === "string" ? value : JSON.stringify(value);
+            const rendered = typeof value === "string" ? value : serializeThrownValue(value);
             lines.push(`fact\t${encodeTerminalField(key)}\t${encodeTerminalField(rendered)}`);
         }
     }
@@ -115,11 +106,7 @@ export function formatTerminalResult(result) {
             }
         }
     }
-    if (result.resume !== undefined) {
-        // Resumable failure: run ID is revealed only inside the complete resume command.
-        lines.push(`resume\t${encodeTerminalField(result.resume.command)}`);
-    }
-    else if (result.runId !== undefined) {
+    if (result.runId !== undefined) {
         lines.push(`run\t${encodeTerminalField(result.runId)}`);
     }
     if (result.autoResumeCount !== undefined) {
@@ -127,25 +114,19 @@ export function formatTerminalResult(result) {
     }
     // Role-result block: original payloads, newest first for humans (#961).
     // Typed payloads/submissions stay ledger order; only this presentation reverses.
-    // #953: failure history is the top-level submissions carrier (#836) — present
-    // as recorded-submission, never as this-turn submission/receipt.
-    if (result.roleOutcome.kind === "failure") {
-        const recorded = result.submissions ?? [];
-        for (let i = recorded.length - 1; i >= 0; i -= 1) {
-            const payload = recorded[i];
-            const rendered = typeof payload === "string" ? payload : JSON.stringify(payload);
-            lines.push(`recorded-submission\t${encodeTerminalField(rendered)}`);
-        }
-    }
-    else {
-        const payloads = result.roleOutcome.kind === "accepted" ||
-            result.roleOutcome.kind === "audit_escalation"
-            ? coalesceSubmissionRows(result.roleOutcome.payloads, result.submissions)
-            : result.submissions ?? [];
-        for (let i = payloads.length - 1; i >= 0; i -= 1) {
-            const payload = payloads[i];
+    // Present the current result and the run history on distinct faces (#879 / #836).
+    // Neither a prior court's submission nor a failed turn's history is this reply.
+    const current = result.roleOutcome.kind === "failure"
+        ? result.roleOutcome.payloads ?? []
+        : currentReplyRows(result);
+    for (const [label, rows] of [
+        ["submission", current],
+        ["recorded-submission", result.submissions ?? []],
+    ]) {
+        for (let i = rows.length - 1; i >= 0; i -= 1) {
+            const payload = rows[i];
             const rendered = typeof payload === "string" ? payload : JSON.stringify(payload);
-            lines.push(`submission\t${encodeTerminalField(rendered)}`);
+            lines.push(`${label}\t${encodeTerminalField(rendered)}`);
         }
     }
     return `${lines.join("\n")}\n`;

package/dist/public-cli/turn-request.js

@@ -46,6 +46,9 @@ export function projectRoleTurnRequest(admitted, roleDetails, options) {
             ? {}
             : { invocationScopeId: options.invocationScopeId }),
         ...(options.stationChild === undefined ? {} : { stationChild: options.stationChild }),
+        ...(options.deliveryRequestLimit === undefined
+            ? {}
+            : { deliveryRequestLimit: options.deliveryRequestLimit }),
     };
 }
 /**

package/dist/public-role-summons.js

@@ -4,6 +4,7 @@ import { realpath } from "node:fs/promises";
 import { join } from "node:path";
 import { promisify } from "node:util";
 import { isRecord, errorText } from "./unknown-value.js";
+import { serializeThrownValue } from "./serialize-thrown-value.js";
 const AK_ROLE_PACKAGE_ROOT_ENV = "AK_ROLE_PACKAGE_ROOT";
 const execFileAsync = promisify(execFile);
 function createCapturingIo() {
@@ -288,15 +289,9 @@ async function resolveReviewerGitToplevel(projectRoot) {
   )).stdout.trim());
 }
 async function summonParallelReviewerLenses(options) {
-  const describeFailure = (error) => {
-    if (error instanceof AggregateError) {
-      return [error.message, ...error.errors.map(describeFailure)].join("\n");
-    }
-    return errorText(error);
-  };
   const failedResult = (error) => ({
     exitCode: 1,
-    stderr: describeFailure(error)
+    stderr: serializeThrownValue(error)
   });
   const dualFailure = (error) => {
     const failure = failedResult(error);
@@ -399,7 +394,7 @@ async function summonParallelReviewerLenses(options) {
     }
   } catch (error) {
     sealDiagnostic = `Reviewer target final seal failed:
-${describeFailure(error)}`;
+${serializeThrownValue(error)}`;
   }
   if (sealDiagnostic !== void 0) {
     const withSealFailure = (result) => ({

package/dist/receipt-delivery-policy.js

@@ -1,46 +1,71 @@
+import { AUTO_RESUME_LIMIT } from "./public-cli/run-lifecycle.js";
+import { parseAutoResumeLimit } from "./public-cli/config.js";
 import { isRecord } from "./unknown-value.js";
-const RECEIPT_DELIVERY_TURN_LIMIT = 2;
 const NO_RECEIPT_LIFECYCLE_ENTRY_TYPE = "ak-no-receipt-lifecycle";
+const RECEIPT_DELIVERY_REQUEST_ENTRY = "ak-receipt-delivery-request";
+const RECEIPT_REJECTION_ENTRY = "ak-receipt-rejection";
+function receiptAttemptPointer(runPointer, invocationScopeId) {
+  const scope = invocationScopeId?.trim() ?? "";
+  if (scope.length > 0) return `invocation:${scope}`;
+  return `current:${runPointer}`;
+}
+const RECEIPT_DELIVERY_LIMIT_ENV = "AK_ROLE_RECEIPT_DELIVERY_LIMIT";
+function deliveryLimitFromConfig(value) {
+  return parseAutoResumeLimit(value ?? AUTO_RESUME_LIMIT);
+}
+function deliveryLimitFromEnv(env) {
+  const raw = env[RECEIPT_DELIVERY_LIMIT_ENV];
+  if (raw === void 0 || raw.trim() === "") return deliveryLimitFromConfig(void 0);
+  const parsed = Number(raw);
+  if (!Number.isInteger(parsed)) return deliveryLimitFromConfig(void 0);
+  return deliveryLimitFromConfig(parsed);
+}
+function deliveryTurnsFact(value) {
+  if (typeof value !== "number" || !Number.isInteger(value) || value < 0) {
+    throw new TypeError("deliveryTurns must be a non-negative integer");
+  }
+  return value;
+}
 function parseNoReceiptLifecycleFacts(input) {
-  if (!isRecord(input) || typeof input.terminalToolCalled !== "boolean" || input.deliveryTurns !== RECEIPT_DELIVERY_TURN_LIMIT || input.sessionCompletion !== "settled-without-accepted-receipt" || input.acceptedReceipt !== false || typeof input.runPointer !== "string" || input.runPointer.trim() === "" || typeof input.attemptPointer !== "string" || input.attemptPointer.trim() === "" || !Array.isArray(input.rejectedReceipts) || !input.rejectedReceipts.every((item) => isRecord(item) && typeof item.reason === "string")) {
+  if (!isRecord(input) || typeof input.terminalToolCalled !== "boolean" || input.sessionCompletion !== "settled-without-accepted-receipt" || input.acceptedReceipt !== false || typeof input.runPointer !== "string" || input.runPointer.trim() === "" || typeof input.attemptPointer !== "string" || input.attemptPointer.trim() === "" || !Array.isArray(input.rejectedReceipts) || !input.rejectedReceipts.every((item) => isRecord(item) && typeof item.reason === "string")) {
     throw new TypeError("malformed no-receipt lifecycle facts");
   }
-  return {
+  return noReceiptLifecycleFacts({
     terminalToolCalled: input.terminalToolCalled,
-    rejectedReceipts: input.rejectedReceipts.map((item) => ({
-      reason: item.reason,
-      diagnosticAvailable: item.reason.trim() !== ""
-    })),
-    deliveryTurns: RECEIPT_DELIVERY_TURN_LIMIT,
-    sessionCompletion: "settled-without-accepted-receipt",
+    rejectedReceipts: input.rejectedReceipts,
+    deliveryTurns: deliveryTurnsFact(input.deliveryTurns),
     runPointer: input.runPointer,
-    attemptPointer: input.attemptPointer,
-    acceptedReceipt: false
-  };
+    attemptPointer: input.attemptPointer
+  });
 }
 function noReceiptLifecycleFacts(input) {
-  if (input.deliveryTurns !== RECEIPT_DELIVERY_TURN_LIMIT) {
-    throw new TypeError("no-receipt lifecycle requires an exhausted delivery budget");
-  }
   return {
     terminalToolCalled: input.terminalToolCalled,
     rejectedReceipts: input.rejectedReceipts.map(({ reason }) => ({
       reason,
       diagnosticAvailable: reason.trim() !== ""
     })),
-    deliveryTurns: RECEIPT_DELIVERY_TURN_LIMIT,
+    deliveryTurns: deliveryTurnsFact(input.deliveryTurns),
     sessionCompletion: "settled-without-accepted-receipt",
     runPointer: input.runPointer,
     attemptPointer: input.attemptPointer,
     acceptedReceipt: false
   };
 }
-function createReceiptDeliveryPolicy() {
+function createReceiptDeliveryPolicy(limit) {
+  const deliveryLimit = deliveryLimitFromConfig(limit);
   let accepted = false;
+  let closed = false;
   let terminalToolCalled = false;
   let deliveryTurns = 0;
+  let budgetSpent = 0;
   const rejectedReceipts = [];
+  const spend = () => {
+    if (budgetSpent < deliveryLimit) budgetSpent += 1;
+  };
   return {
+    /** The effective ceiling this budget spends (#1132 — never re-read). */
+    limit: deliveryLimit,
     recordAccepted() {
       accepted = true;
       terminalToolCalled = true;
@@ -49,27 +74,50 @@ function createReceiptDeliveryPolicy() {
     stopForInfrastructure() {
       accepted = true;
     },
+    /**
+     * Record the rejection this turn already produced.
+     * The fact does not spend a budget. The seam that sends the next prompt
+     * owns that count.
+     */
     recordRejected(reason) {
       terminalToolCalled = true;
       rejectedReceipts.push({ reason, diagnosticAvailable: reason.trim() !== "" });
-      deliveryTurns = Math.min(RECEIPT_DELIVERY_TURN_LIMIT, deliveryTurns + 1);
     },
     recordDeliveryRequest() {
-      deliveryTurns = Math.min(RECEIPT_DELIVERY_TURN_LIMIT, deliveryTurns + 1);
+      deliveryTurns += 1;
+      spend();
     },
     /**
-     * A nested session settled without an accepted receipt after spending its own
-     * delivery budget. Adopt its facts and close this budget: another prompt would
-     * open an independent session, not a delivery request on the settled one.
+     * Stop asking. The issued count stays whatever was actually sent (#1132 —
+     * do not fill the remainder up to the ceiling).
+     */
+    closeBudget() {
+      closed = true;
+    },
+    /**
+     * A nested session settled without an accepted receipt. Close so this layer
+     * does not open another prompt on that session. The issued count stays the
+     * larger of the two seams: a nested zero must not wipe prompts this layer
+     * already sent, and adding the two counts would bill one send twice.
      */
     recordNestedNoReceipt(facts) {
-      terminalToolCalled = terminalToolCalled || facts.terminalToolCalled;
-      rejectedReceipts.push(...facts.rejectedReceipts);
-      deliveryTurns = RECEIPT_DELIVERY_TURN_LIMIT;
+      if (typeof facts.terminalToolCalled === "boolean") {
+        terminalToolCalled = terminalToolCalled || facts.terminalToolCalled;
+      }
+      if (facts.rejectedReceipts !== void 0) {
+        rejectedReceipts.push(...facts.rejectedReceipts);
+      }
+      if (facts.deliveryTurns !== void 0) deliveryTurns = Math.max(deliveryTurns, facts.deliveryTurns);
+      closed = true;
     },
     nextAction() {
       if (accepted) return "accepted";
-      return deliveryTurns < RECEIPT_DELIVERY_TURN_LIMIT ? "request-delivery" : "no-receipt";
+      if (closed) return "no-receipt";
+      return budgetSpent < deliveryLimit ? "request-delivery" : "no-receipt";
+    },
+    /** Delivery requests actually issued so far (#1132). */
+    issuedDeliveryRequests() {
+      return deliveryTurns;
     },
     /** Current typed delivery facts. No prose. */
     deliveryState() {
@@ -82,13 +130,99 @@ function createReceiptDeliveryPolicy() {
     },
     facts(binding) {
       return noReceiptLifecycleFacts({ terminalToolCalled, rejectedReceipts: [...rejectedReceipts], deliveryTurns, ...binding });
+    },
+    /**
+     * Continue a public call after the in-memory policy was rebuilt.
+     * Sends already issued spend the same budget; copied rejections keep
+     * the fact and do not spend again.
+     */
+    continueIssued(prior) {
+      for (const receipt of prior.rejectedReceipts) {
+        this.recordRejected(receipt.reason);
+      }
+      if (prior.terminalToolCalled === true) terminalToolCalled = true;
+      for (let index = 0; index < prior.deliveryTurns; index += 1) {
+        this.recordDeliveryRequest();
+      }
+    }
+  };
+}
+function entryRecord(entry) {
+  return isRecord(entry) ? entry : void 0;
+}
+function customTypeOf(record, message) {
+  return record.customType ?? message?.customType;
+}
+function dataOf(record, message) {
+  return record.data ?? message?.details;
+}
+function scopeTag(record) {
+  const message = isRecord(record.message) ? record.message : void 0;
+  const customType = customTypeOf(record, message);
+  const data = dataOf(record, message);
+  if ((customType === RECEIPT_DELIVERY_REQUEST_ENTRY || customType === RECEIPT_REJECTION_ENTRY) && isRecord(data) && typeof data.invocationScopeId === "string" && data.invocationScopeId.trim() !== "") {
+    return data.invocationScopeId;
+  }
+  if (customType !== NO_RECEIPT_LIFECYCLE_ENTRY_TYPE) return void 0;
+  try {
+    const facts = parseNoReceiptLifecycleFacts(data);
+    const prefix = "invocation:";
+    if (!facts.attemptPointer.startsWith(prefix)) return void 0;
+    const scope = facts.attemptPointer.slice(prefix.length);
+    return scope.trim() === "" ? void 0 : scope;
+  } catch {
+    return void 0;
+  }
+}
+function priorReceiptContinuation(entries, invocationScopeId) {
+  const pointer = receiptAttemptPointer("", invocationScopeId);
+  let entryTurns = 0;
+  let factTurns = 0;
+  let rejectedReceipts = [];
+  let snapshotTerminal = false;
+  for (const entry of entries) {
+    const record = entryRecord(entry);
+    if (record === void 0) continue;
+    const tagged = scopeTag(record);
+    if (tagged !== void 0) {
+      const message = isRecord(record.message) ? record.message : void 0;
+      const customType = customTypeOf(record, message);
+      if (tagged !== invocationScopeId) continue;
+      if (customType === RECEIPT_DELIVERY_REQUEST_ENTRY) entryTurns += 1;
+      if (customType === RECEIPT_REJECTION_ENTRY) {
+        const data = dataOf(record, message);
+        if (isRecord(data) && typeof data.reason === "string") rejectedReceipts.push({ reason: data.reason });
+      }
+      if (customType !== NO_RECEIPT_LIFECYCLE_ENTRY_TYPE) continue;
+      try {
+        const facts = parseNoReceiptLifecycleFacts(dataOf(record, message));
+        if (facts.attemptPointer !== pointer) continue;
+        factTurns = Math.max(factTurns, facts.deliveryTurns);
+        if (facts.rejectedReceipts.length >= rejectedReceipts.length) {
+          rejectedReceipts = facts.rejectedReceipts.map(({ reason }) => ({ reason }));
+        }
+        snapshotTerminal ||= facts.terminalToolCalled;
+      } catch {
+      }
+      continue;
     }
+  }
+  return {
+    deliveryTurns: Math.max(entryTurns, factTurns),
+    rejectedReceipts,
+    terminalToolCalled: snapshotTerminal || rejectedReceipts.length > 0
   };
 }
 export {
   NO_RECEIPT_LIFECYCLE_ENTRY_TYPE,
-  RECEIPT_DELIVERY_TURN_LIMIT,
+  RECEIPT_DELIVERY_LIMIT_ENV,
+  RECEIPT_DELIVERY_REQUEST_ENTRY,
+  RECEIPT_REJECTION_ENTRY,
   createReceiptDeliveryPolicy,
+  deliveryLimitFromConfig,
+  deliveryLimitFromEnv,
   noReceiptLifecycleFacts,
-  parseNoReceiptLifecycleFacts
+  parseNoReceiptLifecycleFacts,
+  priorReceiptContinuation,
+  receiptAttemptPointer
 };

package/dist/run-terminal-artifacts.js

@@ -1,18 +1,23 @@
 /**
- * Canonical reader for run-directory typed terminal artifacts.
- * Layout owner is settlement publish*Artifacts (report.json / error.json /
- * audit-incomplete.json under artifacts/, plus the same publisher's durable
- * failure fallbacks). This module only reads presence and structural
+ * Canonical layout and reader for run-directory typed terminal artifacts.
+ * Settlement publish*Artifacts uses these names (report.json / error.json /
+ * audit-incomplete.json under artifacts/, plus durable failure fallbacks).
+ * The reader only checks presence and structural
  * readability — it does not re-derive role outcomes or invent a second
  * candidate algorithm.
  */
+import { randomUUID } from "node:crypto";
 import { readdir, readFile } from "node:fs/promises";
 import { basename, dirname, join } from "node:path";
 import { roleRunArtifactsDirectory } from "./role-run-placement.js";
 import { isRecord, errorText, isMissingPathError } from "./unknown-value.js";
+export const RUN_TERMINAL_REPORT_FILE = "report.json";
+export const RUN_TERMINAL_ERROR_FILE = "error.json";
+export const RUN_TERMINAL_EVIDENCE_FILE = "evidence.json";
+export const RUN_TERMINAL_ERROR_SETTLEMENT_FILE = "error.settlement.json";
 export const RUN_TERMINAL_ARTIFACT_FILES = [
-    "report.json",
-    "error.json",
+    RUN_TERMINAL_REPORT_FILE,
+    RUN_TERMINAL_ERROR_FILE,
     "audit-incomplete.json",
 ];
 /**
@@ -22,11 +27,15 @@ export const RUN_TERMINAL_ARTIFACT_FILES = [
  * Relative to the run directory.
  */
 export const RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS = [
-    "artifacts/error.settlement.json",
-    "error.settlement.json",
+    `artifacts/${RUN_TERMINAL_ERROR_SETTLEMENT_FILE}`,
+    RUN_TERMINAL_ERROR_SETTLEMENT_FILE,
 ];
-/** Unique open-ended failure names: error.<uuid>.json (publisher stem + uuid). */
-const UNIQUE_ERROR_FALLBACK_NAME = /^error\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.json$/i;
+/** Publisher and reader share the open-ended error face stem. */
+export const UNIQUE_ERROR_FALLBACK_STEM = "error";
+export function uniqueErrorFallbackName() {
+    return `${UNIQUE_ERROR_FALLBACK_STEM}.${randomUUID()}.json`;
+}
+const UNIQUE_ERROR_FALLBACK_NAME = new RegExp(`^${UNIQUE_ERROR_FALLBACK_STEM}\\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\\.json$`, "i");
 /**
  * Minimum producer-owned face shared by settlement terminal artifacts
  * (report / error / audit-incomplete). Consumer-driven: enough to identify a
@@ -219,7 +228,3 @@ export async function readRunTerminalArtifact(runDirectory) {
     }
     return { status: "absent" };
 }
-/** Test/helper: basename face of a unique fallback path, if any. */
-export function isUniqueErrorFallbackName(name) {
-    return UNIQUE_ERROR_FALLBACK_NAME.test(basename(name));
-}

package/dist/serialize-thrown-value.js

@@ -1,5 +1,11 @@
 import { inspect } from "node:util";
 /** Record the whole thrown value without invoking its getters or custom formatter. */
 export function serializeThrownValue(value) {
-    return inspect(value, { depth: 10, showHidden: true, customInspect: false });
+    return inspect(value, {
+        depth: null,
+        maxArrayLength: null,
+        maxStringLength: null,
+        showHidden: true,
+        customInspect: false,
+    });
 }

package/dist/submission-errors.js

@@ -44,10 +44,20 @@ export class WorkerPrefixReminderError extends Error {
         this.name = "WorkerPrefixReminderError";
     }
 }
+/**
+ * ADR 0066/0070 one-shot commit and prefix reminders.
+ * They stay a correction the same session may make, and they do not occupy
+ * the configured re-ask or 催交 budget (#1132).
+ */
+export function isOneShotWorkerReminderCode(code) {
+    return code === "worker_commit_reminder" || code === "worker_prefix_reminder";
+}
 export class WorkerUnfinishedReasonReminderError extends Error {
     code = "worker_unfinished_reason_reminder";
     constructor() {
-        super("本次 unfinished 回执未含 reason；本接缝缺由至多打回两次。");
+        // The ceiling is the configured unfinished-reason limit. This text reaches
+        // the model and does not restate a count.
+        super("本次 unfinished 回执未含 reason；请补上 reason 后再交。");
         this.name = "WorkerUnfinishedReasonReminderError";
     }
 }

package/dist/submission-gate.js

@@ -1,6 +1,7 @@
 import { bookDirectOfficerRunPointer } from "./archivist-record-pointer.js";
 import { GatekeeperDecisionError, officerConclusionReask, projectGatekeeperRun, } from "./gatekeeper-role.js";
 import { receivedDiscriminator } from "./submission-errors.js";
+import { deliveryLimitFromConfig } from "./receipt-delivery-policy.js";
 /** Received discriminator of the latest payload, retained verbatim for re-ask. */
 export function latestQueueStatus(terminal) {
     const outcome = terminal?.roleOutcome;
@@ -54,7 +55,7 @@ export function createDefaultGateOfficerSummon(options) {
  * Book a typed pointer under parent session/auditor-roles (archivist-owned write).
  * Offline mocks without a real session leave no nested volume (lawful zero).
  */
-function bookDirectOfficerPointer(context, officer, result, summoned) {
+function bookDirectOfficerPointer(context, officer, result, summoned, toolCallId) {
     if (result.status !== "converged"
         && result.status !== "continue"
         && result.status !== "escalate"
@@ -77,16 +78,20 @@ function bookDirectOfficerPointer(context, officer, result, summoned) {
         ...(typeof summoned.runDirectory === "string" && summoned.runDirectory.trim() !== ""
             ? { runDirectory: summoned.runDirectory }
             : {}),
+        ...(toolCallId.trim() === "" ? {} : { submissionToolCallId: toolCallId }),
     });
 }
 /**
  * Shared envelope: project gate, book officer pointer, map onto host actions.
- * Review loop has no round cap (#753 no-round-cap).
+ * A real converged / continue / escalate returns immediately. An unreadable
+ * conclusion reasks that officer against the configured ceiling; exhaustion
+ * returns the receipt actually received.
  * On converged, returns the officer snapshot (receipt + nested runId) for seat projection.
  */
 export async function requireSubmissionGate(options) {
     let reask;
-    // No round cap — end only on converged, continue/escalate, or real failure.
+    let reasksSpent = 0;
+    const reaskLimit = deliveryLimitFromConfig(options.autoResumeLimit);
     const summonOfficer = options.summonOfficer ??
         createDefaultGateOfficerSummon({
             cwd: options.context.cwd ?? process.cwd(),
@@ -104,7 +109,7 @@ export async function requireSubmissionGate(options) {
         // Envelope-owned pointer book. Failure is host infrastructure — single face.
         if (projected.summoned !== undefined) {
             try {
-                bookDirectOfficerPointer(options.context, projected.officer, gatekeeper, projected.summoned);
+                bookDirectOfficerPointer(options.context, projected.officer, gatekeeper, projected.summoned, options.toolCallId);
             }
             catch (error) {
                 options.hostActions.failInfrastructure(error, options.context, options.toolCallId);
@@ -131,6 +136,24 @@ export async function requireSubmissionGate(options) {
             };
         }
         if (gatekeeper.status === "needs_reask") {
+            if (reasksSpent >= reaskLimit) {
+                return {
+                    status: "needs_reask",
+                    officer: projected.officer,
+                    receipt: gatekeeper.receipt,
+                    ...(typeof gatekeeper.runId === "string" && gatekeeper.runId.trim() !== ""
+                        ? { runId: gatekeeper.runId }
+                        : {}),
+                    ...(typeof projected.summoned?.runDirectory === "string"
+                        && projected.summoned.runDirectory.trim() !== ""
+                        ? { runDirectory: projected.summoned.runDirectory }
+                        : {}),
+                    ...(projected.summoned?.terminal === undefined
+                        ? {}
+                        : { terminal: projected.summoned.terminal }),
+                };
+            }
+            reasksSpent += 1;
             reask = officerConclusionReask(gatekeeper.receivedStatus);
             continue;
         }