@nanobpm/nano-workforce 0.99.0 → 0.99.1

package/CHANGELOG.md

@@ -1,3 +1,10 @@
+## [0.99.1](https://github.com/nanobpm/nano-workforce/compare/v0.99.0...v0.99.1) (2026-08-19)
+
+
+### Bug Fixes
+
+* **convergence-loop:** route every escalation arm through gw-escalated ([#333](https://github.com/nanobpm/nano-workforce/issues/333)) ([#340](https://github.com/nanobpm/nano-workforce/issues/340)) ([0ad7a5c](https://github.com/nanobpm/nano-workforce/commit/0ad7a5c08a659a0ca26dc48def8c024d21a3a53a)), closes [#329](https://github.com/nanobpm/nano-workforce/issues/329)
+
 # [0.99.0](https://github.com/nanobpm/nano-workforce/compare/v0.98.1...v0.99.0) (2026-08-19)
 
 

package/app/convergeGate.test.ts

@@ -467,11 +467,15 @@ test("gw-converge-gate default arm finalizes with no condition", () => {
   assert(!/conditionExpression/.test(ok), "the default arm must carry no conditionExpression");
 });
 
-test("the blocked-comments escalation lands on the human wait-answer task with an answerable escalation", () => {
-  const f = flowElement("f_blockedWait");
-  assert(f, "f_blockedWait flow missing");
+test("the blocked-comments escalation routes through gw-escalated toward an answerable wait-answer", () => {
+  // #333: previously this flowed UNCONDITIONALLY into wait-answer, so a blank convergeBlockReason
+  // (the question is mapped from that OPTIONAL variable) opened no escalation yet still parked a
+  // dead wait with a null question. It now routes through gw-escalated, which parks wait-answer
+  // only on a real escalation and otherwise re-enters the loop.
+  const f = flowElement("f_blockedGate");
+  assert(f, "f_blockedGate flow missing");
   assertStringIncludes(f, 'sourceRef="persist-escalation-blockedcomments"');
-  assertStringIncludes(f, 'targetRef="wait-answer"');
+  assertStringIncludes(f, 'targetRef="gw-escalated"');
   const task = flat.match(
     /<bpmn:serviceTask\b[^>]*\bid="persist-escalation-blockedcomments"[^>]*>.*?<\/bpmn:serviceTask>/,
   );

package/app/convergenceEscalationGuard.test.ts

@@ -0,0 +1,106 @@
+// Regression guard for the question-less convergence-loop escalation defect (issue #333).
+//
+// The convergence loop (`resources/processes/convergence-loop.bpmn`) has FIVE `persist-escalation`
+// service tasks, but only ONE — `persist-escalation` (the `f_escalate` agent-verdict arm) — was
+// routed through the `gw-escalated` gateway that honours the worker's `escalated` output. The other
+// four flowed UNCONDITIONALLY into the durable `wait-answer` user task:
+//
+//   • persist-escalation-noprogress      (no progress made this round)
+//   • persist-review-stalled             (review-wait timer fired)          ← wedged live
+//   • persist-escalation-blockedcomments (unaddressed review comments)
+//   • persist-escalation-maxrounds       (round cap reached)
+//
+// Per ADR 0002 §1 a blank question is a NON-escalation: `pr.persist-escalation` opens no row and
+// returns `escalated:false`. The `persist-escalation-blockedcomments` arm maps its question from the
+// OPTIONAL `convergeBlockReason` process variable, so a blank reason returned `escalated:false` yet
+// STILL parked a dead `wait-answer` — a durable answer-wait with no escalation and a `null` question,
+// surfaced on the merge-driving inbox with nothing for a human to answer (observed live on three
+// instances, issue #333).
+//
+// The fix (mirroring the merge loop's `gw-merge-escalated`, PR #331): route EVERY arm that can reach
+// `wait-answer` through the single `gw-escalated` guard, so a `persist-escalation` returning
+// `escalated:false` RE-ENTERS the loop (`gw-guard`) instead of parking a dead wait. This makes the
+// invariant structural — `wait-answer` is reachable ONLY from a `gw-escalated == true` edge, so a
+// "durable answer-wait with no escalation" is unrepresentable.
+//
+// These are pure text assertions over the committed BPMN (no engine), matching the repo's
+// lightweight model-guard style (see mergeEscalationQuestion.test.ts, mergeRebaseArm.test.ts).
+
+import { test } from "node:test";
+import { assert, assertStringIncludes } from "#test-assert";
+import { readFileSync } from "node:fs";
+
+const bpmn = readFileSync("resources/processes/convergence-loop.bpmn", "utf8");
+// Collapse whitespace so attribute-order / line-wrapping churn doesn't make the assertions brittle.
+const flat = bpmn.replace(/\s+/g, " ");
+
+function flowHasId(id: string, source: string, target: string): boolean {
+  const m = flat.match(new RegExp(`<bpmn:sequenceFlow\\b[^>]*\\bid="${id}"[^>]*(?:/>|>)`));
+  if (!m) return false;
+  const tag = m[0];
+  return tag.includes(`sourceRef="${source}"`) && tag.includes(`targetRef="${target}"`);
+}
+
+function gatewayDefault(id: string, def: string): boolean {
+  const m = flat.match(new RegExp(`<bpmn:exclusiveGateway\\b[^>]*\\bid="${id}"[^>]*>`));
+  if (!m) return false;
+  return m[0].includes(`default="${def}"`);
+}
+
+/** The <userTask> element for wait-answer, including its incoming flows. */
+const waitAnswer = flat.match(/<bpmn:userTask\b[^>]*\bid="wait-answer"[\s\S]*?<\/bpmn:userTask>/);
+
+// Every control-flow escalation arm and the gateway edge it must now route through.
+const ARMS: ReadonlyArray<{ task: string; gate: string }> = [
+  { task: "persist-escalation-noprogress", gate: "f_noprogressGate" },
+  { task: "persist-review-stalled", gate: "f_stalledGate" },
+  { task: "persist-escalation-blockedcomments", gate: "f_blockedGate" },
+  { task: "persist-escalation-maxrounds", gate: "f_maxGate" },
+];
+
+test("every persist-escalation arm routes through gw-escalated, not straight to wait-answer", () => {
+  for (const { task, gate } of ARMS) {
+    assert(
+      flowHasId(gate, task, "gw-escalated"),
+      `${task} must route through gw-escalated (flow ${gate}), not directly to wait-answer (the #333 defect)`,
+    );
+  }
+  // The agent-verdict arm already routed through the gate — keep it.
+  assert(flowHasId("f_escGate", "persist-escalation", "gw-escalated"), "persist-escalation must route through gw-escalated");
+});
+
+test("gw-escalated honours persist-escalation's escalated output for every arm", () => {
+  // escalated:true → park the native user task for a human to answer.
+  assert(flowHasId("f_escWait", "gw-escalated", "wait-answer"), "gw-escalated → wait-answer (escalated) missing");
+  const escWait = flat.match(/<bpmn:sequenceFlow[^>]*id="f_escWait"[\s\S]*?<\/bpmn:sequenceFlow>/);
+  assert(escWait, "f_escWait flow missing");
+  assertStringIncludes(escWait![0], "escalated = true", "the wait arm must be guarded by escalated = true");
+  // escalated:false (a non-escalation, e.g. a blank convergeBlockReason) → re-enter the loop, not a dead wait.
+  assert(gatewayDefault("gw-escalated", "f_escReenter"), "gw-escalated default must re-enter the loop");
+  assert(flowHasId("f_escReenter", "gw-escalated", "gw-guard"), "the non-escalation arm must re-enter via gw-guard, not park a wait");
+});
+
+test("wait-answer is reachable ONLY from the gw-escalated == true edge (structural invariant)", () => {
+  // The single most important guarantee of #333: a durable answer-wait with no escalation is
+  // unrepresentable because the ONLY edge into wait-answer is the guarded f_escWait.
+  assert(waitAnswer, "wait-answer user task must exist");
+  const incoming = [...waitAnswer![0].matchAll(/<bpmn:incoming>([^<]+)<\/bpmn:incoming>/g)].map((m) => m[1]);
+  assert(incoming.length === 1, `wait-answer must have exactly one incoming (the guarded f_escWait); found: ${incoming.join(", ")}`);
+  assert(incoming[0] === "f_escWait", `wait-answer's only incoming must be f_escWait; found ${incoming[0]}`);
+  // The retired dead-wait edges must be gone.
+  for (const dead of ["f_noprogressWait", "f_stalledWait", "f_blockedWait", "f_maxWait"]) {
+    assert(!flat.includes(`id="${dead}"`), `the dead-wait edge ${dead} must be removed`);
+  }
+});
+
+test("each control-flow arm still carries a non-blank, human-actionable question", () => {
+  // The guard closes the wedge, but a legitimate control-flow escalation must still open a real
+  // escalation with a concrete question. Assert each arm supplies status + question via ioMapping.
+  for (const { task } of ARMS) {
+    const raw = flat.match(new RegExp(`<bpmn:serviceTask\\b[^>]*\\bid="${task}"[\\s\\S]*?</bpmn:serviceTask>`));
+    assert(raw, `${task} service task must exist`);
+    const el = raw![0];
+    assertStringIncludes(el, 'target="status"', `${task} must set an explicit status`);
+    assertStringIncludes(el, 'target="question"', `${task} must set a question`);
+  }
+});

package/app/persist-escalation.test.ts

@@ -180,3 +180,35 @@ test("persist-escalation heals from the prKey when repo/prNumber are absent", as
     "the running agent's abandon token is preserved from abandonUrl, not re-minted",
   );
 });
+
+// #333 — the control-flow escalation arms (no-progress / review-stalled / unaddressed-comments /
+// max-rounds) each set an explicit `status="blocked"` + a concrete `question` via `zeebe:input`
+// (recordRound=false for the three that run after `persist-round`). They now route through
+// `gw-escalated`, which branches on the worker's `escalated` output. This pins the contract that
+// gateway depends on: a control-flow arm with a real question OPENS an escalation and returns
+// `escalated:true` + the (trimmed) question, so gw-escalated parks a wait carrying that question —
+// never a dead wait with a null question (the #333 defect).
+test("a control-flow arm with a concrete question opens an escalation gw-escalated can park", async () => {
+  const { app, inserts } = fakeApp();
+  const question = "No review arrived within the review-wait timeout (PT20M). A human must decide how to proceed.";
+  const job = { variables: { prKey: "o/r#5", round: 2, status: "blocked", question, recordRound: false } };
+  const out = await handler(job as any, app as any);
+  assertEquals((out as any).escalated, true, "a real control-flow escalation reports escalated:true");
+  assertEquals((out as any).question, question, "the question is returned for the wait-answer form");
+  assertEquals(inserts.escalations.length, 1, "an escalation row is opened");
+  assertEquals(inserts.rounds.length, 0, "recordRound=false suppresses a duplicate round row");
+});
+
+// #333 — conversely, the `persist-escalation-blockedcomments` arm maps its question from the
+// OPTIONAL `convergeBlockReason`. A blank reason is a NON-escalation: the worker opens nothing and
+// returns `escalated:false`, so gw-escalated's default RE-ENTERS the loop instead of parking a dead
+// `wait-answer` with a null question. This is the exact wedge the guard eliminates.
+test("a control-flow arm with a blank question opens nothing so gw-escalated re-enters", async () => {
+  const { app, inserts, updates } = fakeApp();
+  const job = { variables: { prKey: "o/r#5", round: 2, status: "blocked", question: "  ", recordRound: false } };
+  const out = await handler(job as any, app as any);
+  assertEquals((out as any).escalated, false, "a blank-reason arm reports escalated:false");
+  assertEquals((out as any).escalationId, null, "no escalation id is minted");
+  assertEquals(inserts.escalations.length, 0, "no dead escalation is fabricated");
+  assertEquals(updates.pull_requests?.length ?? 0, 0, "the PR is never flipped to escalated");
+});

package/app/roundProgress.test.ts

@@ -210,11 +210,14 @@ test("gw-progress default arm re-enters the review wait with no condition", () =
   assert(!/conditionExpression/.test(ok), "the default arm must carry no conditionExpression");
 });
 
-test("the no-progress escalation lands on the human wait-answer task", () => {
-  const f = flowElement("f_noprogressWait");
-  assert(f, "f_noprogressWait flow missing");
+test("the no-progress escalation routes through gw-escalated toward the human wait-answer task", () => {
+  // #333: the arm no longer flows UNCONDITIONALLY into wait-answer — it routes through the
+  // gw-escalated guard, which parks wait-answer only when the worker opened a real escalation
+  // (escalated=true) and otherwise re-enters the loop (never a dead wait with a null question).
+  const f = flowElement("f_noprogressGate");
+  assert(f, "f_noprogressGate flow missing");
   assertStringIncludes(f, 'sourceRef="persist-escalation-noprogress"');
-  assertStringIncludes(f, 'targetRef="wait-answer"');
+  assertStringIncludes(f, 'targetRef="gw-escalated"');
   // It opens a real, answerable escalation (blocked status + a concrete question) so it is never a
   // blank-question non-escalation that would wedge the token on the wait.
   const task = flat.match(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nanobpm/nano-workforce",
-  "version": "0.99.0",
+  "version": "0.99.1",
   "description": "Nano Workforce — an Agent Graph Orchestration application for Agentic SDLC: durable BPMN processes that coordinate a graph of AI agents across the software delivery lifecycle.",
   "type": "module",
   "main": "main.ts",

package/resources/processes/convergence-loop.bpmn

@@ -161,7 +161,7 @@
         </zeebe:ioMapping>
       </bpmn:extensionElements>
       <bpmn:incoming>f_noProgress</bpmn:incoming>
-      <bpmn:outgoing>f_noprogressWait</bpmn:outgoing>
+      <bpmn:outgoing>f_noprogressGate</bpmn:outgoing>
     </bpmn:serviceTask>
     <bpmn:eventBasedGateway id="gw-review-wait" name="review ready or timeout?">
       <bpmn:incoming>f_progressOk</bpmn:incoming>
@@ -199,7 +199,7 @@
         </zeebe:ioMapping>
       </bpmn:extensionElements>
       <bpmn:incoming>f_reviewStalled</bpmn:incoming>
-      <bpmn:outgoing>f_stalledWait</bpmn:outgoing>
+      <bpmn:outgoing>f_stalledGate</bpmn:outgoing>
     </bpmn:serviceTask>
     <bpmn:serviceTask id="persist-escalation" name="Record escalation">
       <bpmn:extensionElements>
@@ -214,6 +214,10 @@
     </bpmn:serviceTask>
     <bpmn:exclusiveGateway id="gw-escalated" name="escalation opened?" default="f_escReenter">
       <bpmn:incoming>f_escGate</bpmn:incoming>
+      <bpmn:incoming>f_noprogressGate</bpmn:incoming>
+      <bpmn:incoming>f_stalledGate</bpmn:incoming>
+      <bpmn:incoming>f_blockedGate</bpmn:incoming>
+      <bpmn:incoming>f_maxGate</bpmn:incoming>
       <bpmn:outgoing>f_escWait</bpmn:outgoing>
       <bpmn:outgoing>f_escReenter</bpmn:outgoing>
     </bpmn:exclusiveGateway>
@@ -230,7 +234,7 @@
         </zeebe:ioMapping>
       </bpmn:extensionElements>
       <bpmn:incoming>f_guardMax</bpmn:incoming>
-      <bpmn:outgoing>f_maxWait</bpmn:outgoing>
+      <bpmn:outgoing>f_maxGate</bpmn:outgoing>
     </bpmn:serviceTask>
     <bpmn:userTask id="wait-answer" name="Answer escalation">
       <bpmn:extensionElements>
@@ -242,10 +246,6 @@
         </zeebe:ioMapping>
       </bpmn:extensionElements>
       <bpmn:incoming>f_escWait</bpmn:incoming>
-      <bpmn:incoming>f_maxWait</bpmn:incoming>
-      <bpmn:incoming>f_stalledWait</bpmn:incoming>
-      <bpmn:incoming>f_noprogressWait</bpmn:incoming>
-      <bpmn:incoming>f_blockedWait</bpmn:incoming>
       <bpmn:outgoing>f_answerRecord</bpmn:outgoing>
     </bpmn:userTask>
     <bpmn:serviceTask id="record-answer" name="Record answer">
@@ -302,7 +302,7 @@
         </zeebe:ioMapping>
       </bpmn:extensionElements>
       <bpmn:incoming>f_convergeBlocked</bpmn:incoming>
-      <bpmn:outgoing>f_blockedWait</bpmn:outgoing>
+      <bpmn:outgoing>f_blockedGate</bpmn:outgoing>
     </bpmn:serviceTask>
     <bpmn:endEvent id="End" name="Converged">
       <bpmn:incoming>f_finalize</bpmn:incoming>
@@ -317,7 +317,7 @@
       <bpmn:conditionExpression xsi:type="bpmn:tFormalExpression">=convergeBlocked = true</bpmn:conditionExpression>
     </bpmn:sequenceFlow>
     <bpmn:sequenceFlow id="f_convergeOk" name="addressed / default" sourceRef="gw-converge-gate" targetRef="persist-converged" />
-    <bpmn:sequenceFlow id="f_blockedWait" sourceRef="persist-escalation-blockedcomments" targetRef="wait-answer" />
+    <bpmn:sequenceFlow id="f_blockedGate" sourceRef="persist-escalation-blockedcomments" targetRef="gw-escalated" />
     <bpmn:sequenceFlow id="f_addressed" name="addressed / default" sourceRef="gw-status" targetRef="gw-guard" />
     <bpmn:sequenceFlow id="f_waiting" name="waiting" sourceRef="gw-status" targetRef="gw-guard">
       <bpmn:conditionExpression xsi:type="bpmn:tFormalExpression">=status = "waiting"</bpmn:conditionExpression>
@@ -335,18 +335,18 @@
       <bpmn:conditionExpression xsi:type="bpmn:tFormalExpression">=progressed = false</bpmn:conditionExpression>
     </bpmn:sequenceFlow>
     <bpmn:sequenceFlow id="f_progressOk" name="progress / default" sourceRef="gw-progress" targetRef="gw-review-wait" />
-    <bpmn:sequenceFlow id="f_noprogressWait" sourceRef="persist-escalation-noprogress" targetRef="wait-answer" />
+    <bpmn:sequenceFlow id="f_noprogressGate" sourceRef="persist-escalation-noprogress" targetRef="gw-escalated" />
     <bpmn:sequenceFlow id="f_toReviewWait" sourceRef="gw-review-wait" targetRef="wait-review" />
     <bpmn:sequenceFlow id="f_toReviewTimeout" sourceRef="gw-review-wait" targetRef="wait-review-timeout" />
     <bpmn:sequenceFlow id="f_reviewLoop" sourceRef="wait-review" targetRef="review-round" />
     <bpmn:sequenceFlow id="f_reviewStalled" sourceRef="wait-review-timeout" targetRef="persist-review-stalled" />
-    <bpmn:sequenceFlow id="f_stalledWait" sourceRef="persist-review-stalled" targetRef="wait-answer" />
+    <bpmn:sequenceFlow id="f_stalledGate" sourceRef="persist-review-stalled" targetRef="gw-escalated" />
     <bpmn:sequenceFlow id="f_escGate" sourceRef="persist-escalation" targetRef="gw-escalated" />
     <bpmn:sequenceFlow id="f_escWait" sourceRef="gw-escalated" targetRef="wait-answer">
       <bpmn:conditionExpression xsi:type="bpmn:tFormalExpression">=escalated = true</bpmn:conditionExpression>
     </bpmn:sequenceFlow>
     <bpmn:sequenceFlow id="f_escReenter" name="no escalation opened" sourceRef="gw-escalated" targetRef="gw-guard" />
-    <bpmn:sequenceFlow id="f_maxWait" sourceRef="persist-escalation-maxrounds" targetRef="wait-answer" />
+    <bpmn:sequenceFlow id="f_maxGate" sourceRef="persist-escalation-maxrounds" targetRef="gw-escalated" />
     <bpmn:sequenceFlow id="f_answerRecord" sourceRef="wait-answer" targetRef="record-answer" />
     <bpmn:sequenceFlow id="f_answerLoop" sourceRef="record-answer" targetRef="review-round" />
     <bpmn:sequenceFlow id="f_finalize" sourceRef="persist-converged" targetRef="End" />
@@ -369,84 +369,84 @@
         </bpmndi:BPMNLabel>
       </bpmndi:BPMNShape>
       <bpmndi:BPMNShape id="BPMNShape_gw-guard" bpmnElement="gw-guard" isMarkerVisible="true">
-        <dc:Bounds x="941" y="415" width="50" height="50" />
+        <dc:Bounds x="591" y="415" width="50" height="50" />
         <bpmndi:BPMNLabel>
-          <dc:Bounds x="924" y="470" width="85" height="14" />
+          <dc:Bounds x="574" y="470" width="85" height="14" />
         </bpmndi:BPMNLabel>
       </bpmndi:BPMNShape>
       <bpmndi:BPMNShape id="BPMNShape_persist-round" bpmnElement="persist-round">
-        <dc:Bounds x="1116" y="400" width="100" height="80" />
+        <dc:Bounds x="766" y="400" width="100" height="80" />
       </bpmndi:BPMNShape>
       <bpmndi:BPMNShape id="BPMNShape_check-progress" bpmnElement="check-progress">
-        <dc:Bounds x="1316" y="400" width="100" height="80" />
+        <dc:Bounds x="966" y="400" width="100" height="80" />
       </bpmndi:BPMNShape>
       <bpmndi:BPMNShape id="BPMNShape_gw-progress" bpmnElement="gw-progress" isMarkerVisible="true">
-        <dc:Bounds x="1516" y="415" width="50" height="50" />
+        <dc:Bounds x="1166" y="415" width="50" height="50" />
         <bpmndi:BPMNLabel>
-          <dc:Bounds x="1511" y="382" width="60" height="28" />
+          <dc:Bounds x="1161" y="382" width="60" height="28" />
         </bpmndi:BPMNLabel>
       </bpmndi:BPMNShape>
       <bpmndi:BPMNShape id="BPMNShape_persist-escalation-noprogress" bpmnElement="persist-escalation-noprogress">
-        <dc:Bounds x="1666" y="720" width="100" height="80" />
+        <dc:Bounds x="1316" y="720" width="100" height="80" />
       </bpmndi:BPMNShape>
       <bpmndi:BPMNShape id="BPMNShape_gw-review-wait" bpmnElement="gw-review-wait" isMarkerVisible="true">
-        <dc:Bounds x="1691" y="415" width="50" height="50" />
+        <dc:Bounds x="1341" y="415" width="50" height="50" />
         <bpmndi:BPMNLabel>
-          <dc:Bounds x="1672" y="382" width="88" height="28" />
+          <dc:Bounds x="1322" y="382" width="88" height="28" />
         </bpmndi:BPMNLabel>
       </bpmndi:BPMNShape>
       <bpmndi:BPMNShape id="BPMNShape_wait-review" bpmnElement="wait-review">
-        <dc:Bounds x="1866" y="422" width="36" height="36" />
+        <dc:Bounds x="1516" y="422" width="36" height="36" />
         <bpmndi:BPMNLabel>
-          <dc:Bounds x="1840" y="389" width="88" height="28" />
+          <dc:Bounds x="1490" y="389" width="88" height="28" />
         </bpmndi:BPMNLabel>
       </bpmndi:BPMNShape>
       <bpmndi:BPMNShape id="BPMNShape_wait-review-timeout" bpmnElement="wait-review-timeout">
-        <dc:Bounds x="1866" y="582" width="36" height="36" />
+        <dc:Bounds x="1516" y="582" width="36" height="36" />
         <bpmndi:BPMNLabel>
-          <dc:Bounds x="1856" y="623" width="56" height="42" />
+          <dc:Bounds x="1506" y="623" width="56" height="42" />
         </bpmndi:BPMNLabel>
       </bpmndi:BPMNShape>
       <bpmndi:BPMNShape id="BPMNShape_persist-review-stalled" bpmnElement="persist-review-stalled">
-        <dc:Bounds x="2002" y="560" width="100" height="80" />
+        <dc:Bounds x="1652" y="560" width="100" height="80" />
       </bpmndi:BPMNShape>
       <bpmndi:BPMNShape id="BPMNShape_persist-escalation" bpmnElement="persist-escalation">
-        <dc:Bounds x="566" y="560" width="100" height="80" />
+        <dc:Bounds x="566" y="1040" width="100" height="80" />
       </bpmndi:BPMNShape>
       <bpmndi:BPMNShape id="BPMNShape_gw-escalated" bpmnElement="gw-escalated" isMarkerVisible="true">
-        <dc:Bounds x="766" y="575" width="50" height="50" />
+        <dc:Bounds x="1852" y="255" width="50" height="50" />
         <bpmndi:BPMNLabel>
-          <dc:Bounds x="821" y="586" width="74" height="28" />
+          <dc:Bounds x="1760" y="290" width="74" height="28" />
         </bpmndi:BPMNLabel>
       </bpmndi:BPMNShape>
       <bpmndi:BPMNShape id="BPMNShape_persist-escalation-maxrounds" bpmnElement="persist-escalation-maxrounds">
-        <dc:Bounds x="1116" y="880" width="100" height="80" />
+        <dc:Bounds x="766" y="880" width="100" height="80" />
       </bpmndi:BPMNShape>
       <bpmndi:BPMNShape id="BPMNShape_wait-answer" bpmnElement="wait-answer">
-        <dc:Bounds x="2202" y="240" width="100" height="80" />
+        <dc:Bounds x="2002" y="240" width="100" height="80" />
       </bpmndi:BPMNShape>
       <bpmndi:BPMNShape id="BPMNShape_record-answer" bpmnElement="record-answer">
-        <dc:Bounds x="2402" y="240" width="100" height="80" />
+        <dc:Bounds x="2202" y="240" width="100" height="80" />
       </bpmndi:BPMNShape>
       <bpmndi:BPMNShape id="BPMNShape_persist-converged" bpmnElement="persist-converged">
-        <dc:Bounds x="916" y="80" width="100" height="80" />
+        <dc:Bounds x="966" y="80" width="100" height="80" />
       </bpmndi:BPMNShape>
       <bpmndi:BPMNShape id="BPMNShape_check-converge" bpmnElement="check-converge">
         <dc:Bounds x="566" y="80" width="100" height="80" />
       </bpmndi:BPMNShape>
       <bpmndi:BPMNShape id="BPMNShape_gw-converge-gate" bpmnElement="gw-converge-gate" isMarkerVisible="true">
-        <dc:Bounds x="766" y="95" width="50" height="50" />
+        <dc:Bounds x="791" y="95" width="50" height="50" />
         <bpmndi:BPMNLabel>
-          <dc:Bounds x="754" y="62" width="74" height="28" />
+          <dc:Bounds x="779" y="62" width="74" height="28" />
         </bpmndi:BPMNLabel>
       </bpmndi:BPMNShape>
       <bpmndi:BPMNShape id="BPMNShape_persist-escalation-blockedcomments" bpmnElement="persist-escalation-blockedcomments">
-        <dc:Bounds x="916" y="240" width="100" height="80" />
+        <dc:Bounds x="966" y="240" width="100" height="80" />
       </bpmndi:BPMNShape>
       <bpmndi:BPMNShape id="BPMNShape_End" bpmnElement="End">
-        <dc:Bounds x="1148" y="102" width="36" height="36" />
+        <dc:Bounds x="1173" y="102" width="36" height="36" />
         <bpmndi:BPMNLabel>
-          <dc:Bounds x="1132" y="143" width="69" height="14" />
+          <dc:Bounds x="1157" y="143" width="69" height="14" />
         </bpmndi:BPMNLabel>
       </bpmndi:BPMNShape>
       <bpmndi:BPMNEdge id="BPMNEdge_f_start" bpmnElement="f_start">
@@ -466,71 +466,73 @@
       </bpmndi:BPMNEdge>
       <bpmndi:BPMNEdge id="BPMNEdge_f_toConvergeGate" bpmnElement="f_toConvergeGate">
         <di:waypoint x="666" y="120" />
-        <di:waypoint x="766" y="120" />
+        <di:waypoint x="791" y="120" />
       </bpmndi:BPMNEdge>
       <bpmndi:BPMNEdge id="BPMNEdge_f_convergeOk" bpmnElement="f_convergeOk">
-        <di:waypoint x="816" y="120" />
-        <di:waypoint x="916" y="120" />
+        <di:waypoint x="841" y="120" />
+        <di:waypoint x="966" y="120" />
         <bpmndi:BPMNLabel>
-          <dc:Bounds x="827" y="125" width="78" height="28" />
+          <dc:Bounds x="865" y="87" width="78" height="28" />
         </bpmndi:BPMNLabel>
       </bpmndi:BPMNEdge>
       <bpmndi:BPMNEdge id="BPMNEdge_f_finalize" bpmnElement="f_finalize">
-        <di:waypoint x="1016" y="120" />
-        <di:waypoint x="1148" y="120" />
+        <di:waypoint x="1066" y="120" />
+        <di:waypoint x="1173" y="120" />
       </bpmndi:BPMNEdge>
       <bpmndi:BPMNEdge id="BPMNEdge_f_guardOk" bpmnElement="f_guardOk">
-        <di:waypoint x="991" y="440" />
-        <di:waypoint x="1116" y="440" />
+        <di:waypoint x="641" y="440" />
+        <di:waypoint x="766" y="440" />
         <bpmndi:BPMNLabel>
-          <dc:Bounds x="1014" y="418" width="60" height="14" />
+          <dc:Bounds x="664" y="418" width="60" height="14" />
         </bpmndi:BPMNLabel>
       </bpmndi:BPMNEdge>
       <bpmndi:BPMNEdge id="BPMNEdge_f_roundWait" bpmnElement="f_roundWait">
-        <di:waypoint x="1216" y="440" />
-        <di:waypoint x="1316" y="440" />
+        <di:waypoint x="866" y="440" />
+        <di:waypoint x="966" y="440" />
       </bpmndi:BPMNEdge>
       <bpmndi:BPMNEdge id="BPMNEdge_f_checkGate" bpmnElement="f_checkGate">
-        <di:waypoint x="1416" y="440" />
-        <di:waypoint x="1516" y="440" />
+        <di:waypoint x="1066" y="440" />
+        <di:waypoint x="1166" y="440" />
       </bpmndi:BPMNEdge>
       <bpmndi:BPMNEdge id="BPMNEdge_f_progressOk" bpmnElement="f_progressOk">
-        <di:waypoint x="1566" y="440" />
-        <di:waypoint x="1691" y="440" />
+        <di:waypoint x="1216" y="440" />
+        <di:waypoint x="1341" y="440" />
         <bpmndi:BPMNLabel>
-          <dc:Bounds x="1591" y="407" width="71" height="28" />
+          <dc:Bounds x="1241" y="407" width="71" height="28" />
         </bpmndi:BPMNLabel>
       </bpmndi:BPMNEdge>
       <bpmndi:BPMNEdge id="BPMNEdge_f_toReviewWait" bpmnElement="f_toReviewWait">
-        <di:waypoint x="1741" y="440" />
-        <di:waypoint x="1866" y="440" />
+        <di:waypoint x="1391" y="440" />
+        <di:waypoint x="1516" y="440" />
       </bpmndi:BPMNEdge>
       <bpmndi:BPMNEdge id="BPMNEdge_f_reviewLoop" bpmnElement="f_reviewLoop">
-        <di:waypoint x="1884" y="458" />
-        <di:waypoint x="1884" y="500" />
+        <di:waypoint x="1534" y="458" />
+        <di:waypoint x="1534" y="500" />
         <di:waypoint x="266" y="500" />
         <di:waypoint x="266" y="160" />
       </bpmndi:BPMNEdge>
       <bpmndi:BPMNEdge id="BPMNEdge_f_escReenter" bpmnElement="f_escReenter">
-        <di:waypoint x="791" y="575" />
-        <di:waypoint x="791" y="440" />
-        <di:waypoint x="941" y="440" />
+        <di:waypoint x="1877" y="255" />
+        <di:waypoint x="1877" y="220" />
+        <di:waypoint x="616" y="220" />
+        <di:waypoint x="616" y="415" />
         <bpmndi:BPMNLabel>
-          <dc:Bounds x="796" y="507" width="74" height="42" />
+          <dc:Bounds x="1410" y="173" width="74" height="42" />
         </bpmndi:BPMNLabel>
       </bpmndi:BPMNEdge>
       <bpmndi:BPMNEdge id="BPMNEdge_f_convergeBlocked" bpmnElement="f_convergeBlocked">
-        <di:waypoint x="791" y="145" />
-        <di:waypoint x="791" y="280" />
-        <di:waypoint x="916" y="280" />
+        <di:waypoint x="816" y="145" />
+        <di:waypoint x="816" y="220" />
+        <di:waypoint x="1016" y="220" />
+        <di:waypoint x="1016" y="240" />
         <bpmndi:BPMNLabel>
-          <dc:Bounds x="796" y="199" width="81" height="28" />
+          <dc:Bounds x="821" y="169" width="81" height="28" />
         </bpmndi:BPMNLabel>
       </bpmndi:BPMNEdge>
       <bpmndi:BPMNEdge id="BPMNEdge_f_addressed" bpmnElement="f_addressed">
         <di:waypoint x="441" y="145" />
         <di:waypoint x="441" y="440" />
-        <di:waypoint x="941" y="440" />
+        <di:waypoint x="591" y="440" />
         <bpmndi:BPMNLabel>
           <dc:Bounds x="446" y="279" width="78" height="28" />
         </bpmndi:BPMNLabel>
@@ -538,87 +540,81 @@
       <bpmndi:BPMNEdge id="BPMNEdge_f_waiting" bpmnElement="f_waiting">
         <di:waypoint x="441" y="145" />
         <di:waypoint x="441" y="440" />
-        <di:waypoint x="941" y="440" />
+        <di:waypoint x="591" y="440" />
         <bpmndi:BPMNLabel>
           <dc:Bounds x="380" y="286" width="56" height="14" />
         </bpmndi:BPMNLabel>
       </bpmndi:BPMNEdge>
       <bpmndi:BPMNEdge id="BPMNEdge_f_escalate" bpmnElement="f_escalate">
         <di:waypoint x="441" y="145" />
-        <di:waypoint x="441" y="600" />
-        <di:waypoint x="566" y="600" />
+        <di:waypoint x="441" y="1080" />
+        <di:waypoint x="566" y="1080" />
         <bpmndi:BPMNLabel>
-          <dc:Bounds x="446" y="506" width="81" height="28" />
+          <dc:Bounds x="446" y="746" width="81" height="28" />
         </bpmndi:BPMNLabel>
       </bpmndi:BPMNEdge>
       <bpmndi:BPMNEdge id="BPMNEdge_f_guardMax" bpmnElement="f_guardMax">
-        <di:waypoint x="991" y="440" />
-        <di:waypoint x="1096" y="440" />
-        <di:waypoint x="1096" y="920" />
-        <di:waypoint x="1116" y="920" />
+        <di:waypoint x="641" y="440" />
+        <di:waypoint x="746" y="440" />
+        <di:waypoint x="746" y="920" />
+        <di:waypoint x="766" y="920" />
         <bpmndi:BPMNLabel>
-          <dc:Bounds x="1101" y="673" width="74" height="14" />
+          <dc:Bounds x="751" y="673" width="74" height="14" />
         </bpmndi:BPMNLabel>
       </bpmndi:BPMNEdge>
       <bpmndi:BPMNEdge id="BPMNEdge_f_noProgress" bpmnElement="f_noProgress">
-        <di:waypoint x="1566" y="440" />
-        <di:waypoint x="1646" y="440" />
-        <di:waypoint x="1646" y="760" />
-        <di:waypoint x="1666" y="760" />
+        <di:waypoint x="1216" y="440" />
+        <di:waypoint x="1296" y="440" />
+        <di:waypoint x="1296" y="760" />
+        <di:waypoint x="1316" y="760" />
         <bpmndi:BPMNLabel>
-          <dc:Bounds x="1563" y="593" width="78" height="14" />
+          <dc:Bounds x="1213" y="593" width="78" height="14" />
         </bpmndi:BPMNLabel>
       </bpmndi:BPMNEdge>
       <bpmndi:BPMNEdge id="BPMNEdge_f_toReviewTimeout" bpmnElement="f_toReviewTimeout">
-        <di:waypoint x="1716" y="465" />
-        <di:waypoint x="1716" y="600" />
-        <di:waypoint x="1866" y="600" />
+        <di:waypoint x="1366" y="465" />
+        <di:waypoint x="1366" y="600" />
+        <di:waypoint x="1516" y="600" />
       </bpmndi:BPMNEdge>
-      <bpmndi:BPMNEdge id="BPMNEdge_f_escWait" bpmnElement="f_escWait">
-        <di:waypoint x="791" y="625" />
-        <di:waypoint x="791" y="980" />
-        <di:waypoint x="2182" y="980" />
-        <di:waypoint x="2182" y="300" />
-        <di:waypoint x="2202" y="300" />
+      <bpmndi:BPMNEdge id="BPMNEdge_f_blockedGate" bpmnElement="f_blockedGate">
+        <di:waypoint x="1066" y="280" />
+        <di:waypoint x="1852" y="280" />
       </bpmndi:BPMNEdge>
-      <bpmndi:BPMNEdge id="BPMNEdge_f_blockedWait" bpmnElement="f_blockedWait">
-        <di:waypoint x="1016" y="280" />
-        <di:waypoint x="2202" y="280" />
-      </bpmndi:BPMNEdge>
-      <bpmndi:BPMNEdge id="BPMNEdge_f_noprogressWait" bpmnElement="f_noprogressWait">
-        <di:waypoint x="1766" y="780" />
-        <di:waypoint x="1786" y="780" />
-        <di:waypoint x="1786" y="980" />
-        <di:waypoint x="2252" y="980" />
-        <di:waypoint x="2252" y="320" />
+      <bpmndi:BPMNEdge id="BPMNEdge_f_noprogressGate" bpmnElement="f_noprogressGate">
+        <di:waypoint x="1416" y="760" />
+        <di:waypoint x="1877" y="760" />
+        <di:waypoint x="1877" y="305" />
       </bpmndi:BPMNEdge>
       <bpmndi:BPMNEdge id="BPMNEdge_f_reviewStalled" bpmnElement="f_reviewStalled">
-        <di:waypoint x="1902" y="600" />
-        <di:waypoint x="2002" y="600" />
+        <di:waypoint x="1552" y="600" />
+        <di:waypoint x="1652" y="600" />
       </bpmndi:BPMNEdge>
-      <bpmndi:BPMNEdge id="BPMNEdge_f_stalledWait" bpmnElement="f_stalledWait">
-        <di:waypoint x="2052" y="560" />
-        <di:waypoint x="2052" y="280" />
-        <di:waypoint x="2202" y="280" />
+      <bpmndi:BPMNEdge id="BPMNEdge_f_stalledGate" bpmnElement="f_stalledGate">
+        <di:waypoint x="1752" y="600" />
+        <di:waypoint x="1877" y="600" />
+        <di:waypoint x="1877" y="305" />
       </bpmndi:BPMNEdge>
       <bpmndi:BPMNEdge id="BPMNEdge_f_escGate" bpmnElement="f_escGate">
-        <di:waypoint x="666" y="600" />
-        <di:waypoint x="766" y="600" />
+        <di:waypoint x="666" y="1080" />
+        <di:waypoint x="1877" y="1080" />
+        <di:waypoint x="1877" y="305" />
       </bpmndi:BPMNEdge>
-      <bpmndi:BPMNEdge id="BPMNEdge_f_maxWait" bpmnElement="f_maxWait">
-        <di:waypoint x="1216" y="940" />
-        <di:waypoint x="1236" y="940" />
-        <di:waypoint x="1236" y="980" />
-        <di:waypoint x="2252" y="980" />
-        <di:waypoint x="2252" y="320" />
+      <bpmndi:BPMNEdge id="BPMNEdge_f_escWait" bpmnElement="f_escWait">
+        <di:waypoint x="1902" y="280" />
+        <di:waypoint x="2002" y="280" />
+      </bpmndi:BPMNEdge>
+      <bpmndi:BPMNEdge id="BPMNEdge_f_maxGate" bpmnElement="f_maxGate">
+        <di:waypoint x="866" y="920" />
+        <di:waypoint x="1877" y="920" />
+        <di:waypoint x="1877" y="305" />
       </bpmndi:BPMNEdge>
       <bpmndi:BPMNEdge id="BPMNEdge_f_answerRecord" bpmnElement="f_answerRecord">
-        <di:waypoint x="2302" y="280" />
-        <di:waypoint x="2402" y="280" />
+        <di:waypoint x="2102" y="280" />
+        <di:waypoint x="2202" y="280" />
       </bpmndi:BPMNEdge>
       <bpmndi:BPMNEdge id="BPMNEdge_f_answerLoop" bpmnElement="f_answerLoop">
-        <di:waypoint x="2452" y="320" />
-        <di:waypoint x="2452" y="340" />
+        <di:waypoint x="2252" y="320" />
+        <di:waypoint x="2252" y="340" />
         <di:waypoint x="266" y="340" />
         <di:waypoint x="266" y="160" />
       </bpmndi:BPMNEdge>

package/workers/persist-escalation/worker.ts

@@ -9,10 +9,13 @@
 // durable review wait instead of routing here (see app/roundResultDefault.ts). This worker keeps
 // the same rule as defence-in-depth via the canonical taxonomy: if a blank-question job ever
 // reaches it, it opens NO escalation and reports `escalated:false` rather than FABRICATING a
-// question (the retired failure mode) or throwing an un-remediable incident. The convergence-loop
-// model branches on that `escalated` output (`gw-escalated`): a `false` return re-enters the loop
-// via `gw-guard` instead of flowing into the `wait-answer` catch, so a non-escalation can never
-// wedge a token on a durable wait that has no escalation for a human to answer.
+// question (the retired failure mode) or throwing an un-remediable incident. EVERY convergence-loop
+// escalation arm — the agent-verdict `persist-escalation` AND the four control-flow arms
+// (`persist-escalation-noprogress`, `persist-review-stalled`, `persist-escalation-blockedcomments`,
+// `persist-escalation-maxrounds`) — now routes its `escalated` output through the `gw-escalated`
+// gateway (issue #333): a `false` return re-enters the loop via `gw-guard` instead of flowing into
+// the `wait-answer` catch, so a non-escalation (e.g. a blank `convergeBlockReason`) can never wedge
+// a token on a durable wait that has no escalation for a human to answer.
 import type { AppJobHandler } from "@nanobpm/urban";
 import { abandonTokenFromUrl } from "../../app/abandon.ts";
 import { classifyEscalation } from "../../app/escalationTaxonomy.ts";