@ouro.bot/cli 0.1.0-alpha.639 → 0.1.0-alpha.640

package/changelog.json

@@ -1,6 +1,12 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.640",
+      "changes": [
+        "Reject text-only private-return queued acknowledgements unless ponder created packet-backed return work."
+      ]
+    },
     {
       "version": "0.1.0-alpha.639",
       "changes": [

package/dist/heart/core.js

@@ -298,12 +298,18 @@ function messageContentText(content) {
         .filter(Boolean)
         .join("\n");
 }
+function isHarnessCorrectiveUserText(text) {
+    return text.startsWith("no tool was called this turn. you must end every turn")
+        || text.startsWith("private-return acknowledgement claimed work was queued, but no ponder packet was created this turn.");
+}
 function latestUserMessageText(messages) {
     for (let i = messages.length - 1; i >= 0; i -= 1) {
         const message = messages[i];
         if (message?.role !== "user")
             continue;
         const text = messageContentText(message.content).trim();
+        if (isHarnessCorrectiveUserText(text))
+            continue;
         if (text.length > 0)
             return text;
     }
@@ -675,12 +681,11 @@ async function runAgent(messages, callbacks, channel, signal, options) {
     // which doesn't update mid-turn. The agent only needs to be told once;
     // after that, repeated rest attempts mean they've acknowledged.
     let freshWorkGateFired = false;
-    // Counter for "no tool call returned despite tool_choice=required" violations.
-    // MiniMax reasoning models occasionally emit only a <think>...</think>
-    // block and stop, without any tool call — even when tool_choice is set to
-    // "required". This is a provider-level violation; the harness retries with
-    // a corrective nudge up to a small cap rather than silently accepting an
-    // empty turn.
+    // Counter for no-tool-call violations. MiniMax reasoning models occasionally
+    // emit only a <think>...</think> block and stop, without any tool call — even
+    // when tool_choice is set to "required". Private-return requests also need
+    // a hard no-tool guard: a text-only "queued" acknowledgement is false unless
+    // a ponder packet created the return obligation in this turn.
     let noToolCallRetries = 0;
     const NO_TOOL_CALL_MAX_RETRIES = 2;
     const toolLoopState = (0, tool_loop_1.createToolLoopState)();
@@ -938,7 +943,60 @@ async function runAgent(messages, callbacks, channel, signal, options) {
                 && typeof result.content === "string"
                 && stripThinkBlocksForViolationCheck(result.content).length === 0
                 && result.content.length > 0;
+            const privateReturnTextAckRetryError = !result.toolCalls.length
+                ? privateReturnMissingPonderError({
+                    latestUserRequest: latestUserMessageText(messages),
+                    answer: stripThinkBlocksForViolationCheck(result.content),
+                    sawPonder,
+                })
+                : null;
             if (!result.toolCalls.length) {
+                if (privateReturnTextAckRetryError) {
+                    callbacks.onClearText?.();
+                    if (noToolCallRetries < NO_TOOL_CALL_MAX_RETRIES) {
+                        noToolCallRetries++;
+                        (0, runtime_1.emitNervesEvent)({
+                            level: "warn",
+                            component: "engine",
+                            event: "engine.no_tool_call_retry",
+                            message: "model returned a text-only private-return acknowledgement without ponder; retrying with corrective nudge",
+                            meta: {
+                                attempt: noToolCallRetries,
+                                cap: NO_TOOL_CALL_MAX_RETRIES,
+                                provider: providerRuntime.id,
+                                model: providerRuntime.model,
+                                reason: "private_return_missing_ponder",
+                                contentLength: result.content.length,
+                            },
+                        });
+                        messages.push(msg);
+                        messages.push({
+                            role: "user",
+                            content: `${privateReturnTextAckRetryError} Emit the ponder(action=create, ...) tool call now, or ask a blocking clarification without saying the private work is queued.`,
+                        });
+                        continue;
+                    }
+                    const blockedAnswer = "I could not start the private pass. No private-attention packet was created, so no return work was queued.";
+                    (0, runtime_1.emitNervesEvent)({
+                        level: "error",
+                        component: "engine",
+                        event: "engine.private_return_missing_ponder_blocked",
+                        message: "private-return text acknowledgement skipped ponder through the retry cap; failing closed",
+                        meta: {
+                            cap: NO_TOOL_CALL_MAX_RETRIES,
+                            provider: providerRuntime.id,
+                            model: providerRuntime.model,
+                            contentLength: result.content.length,
+                        },
+                    });
+                    msg.content = blockedAnswer;
+                    messages.push(msg);
+                    callbacks.onTextChunk(blockedAnswer);
+                    completion = { answer: blockedAnswer, intent: "blocked" };
+                    outcome = "blocked";
+                    done = true;
+                    continue;
+                }
                 if (onlyThinkContent && toolChoiceRequired && noToolCallRetries < NO_TOOL_CALL_MAX_RETRIES) {
                     // Provider-level violation: tool_choice was required, model emitted
                     // only a <think>...</think> block (or empty content) with no tool

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.639",
+  "version": "0.1.0-alpha.640",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",