@pentoshi/clai 3.11.29 → 3.11.33

package/dist/agent/runner.js

@@ -6,7 +6,7 @@ import { classifyStreamFailure, planStreamRecovery, recordRecoveryAttempt, creat
 import { modelSupportsVision, resolveToolDialect } from "../llm/capabilities.js";
 import { syntheticToolCallId, isTextOnlyModel, markTextOnlyModel, fromWireName, } from "../llm/tool-protocol.js";
 import { sanitizeAssistantText } from "../ui/ansi-box.js";
-import { randomUUID } from "node:crypto";
+import { createHash, randomUUID } from "node:crypto";
 import { jobManager, } from "../tools/jobs.js";
 import { isResponderResultLedgerMessage, responderContextMessage, upsertResponderContextMessage, upsertResponderResultLedger, } from "./responder-context.js";
 import { agentModeDirective, planModeDirective, renderAgentSystemPrompt, renderCompactAgentSystemPrompt, renderRequestEnvironmentContext, scratchDirFor, toolNudge, } from "../prompts/index.js";
@@ -63,14 +63,14 @@ import { CompactionAttemptLedger, compactionAttemptKey, } from "./compaction-att
 import { loadPlan, mutatePlan, markTask, appendPlanTask, readyPlanTasks, foregroundRemaining, responderOpenTasks, isPlanTerminal, isPlanSuccessful, } from "../store/plan.js";
 import { stat } from "node:fs/promises";
 import { isOutsideWorkingDirectory, resolveFsToolPath, } from "../tools/fs.js";
-import { stripSentinelTokens, parseToolCall, recognizeBareToolJson, looksLikeTruncatedToolCall, salvageTruncatedWrite, salvageTruncatedWriteFromNative, countToolFences, parseAllToolCalls, groupToolCallsForExecution, buildTurnHistory, collapseRepeatedText, textBeforeToolCall, formatToolArgs, looksLikePentestTask, looksLikeBuildTask, looksLikeInformationalQuery, looksLikeIdleOrSocialPrompt, looksLikeActionNarration, looksLikeWebActionNarration, localHttpProbeIsFailure, localHttpProbeIsSuccess, requiresFreshWebSearch, freshnessGuardMessage, buildWorkflowDirective, narrowNmapOperationDirective, pentestWorkflowDirective, pentestNoLocalServerDirective, shouldDimToolChatter, looksLikePromptLeak, } from "./tool-call-parser.js";
+import { stripSentinelTokens, parseToolCall, recognizeBareToolJson, looksLikeTruncatedToolCall, salvageTruncatedWrite, salvageTruncatedWriteFromNative, countToolFences, parseAllToolCalls, groupToolCallsForExecution, buildTurnHistory, collapseRepeatedText, textBeforeToolCall, formatToolArgs, looksLikePentestTask, looksLikeBuildTask, looksLikeInformationalQuery, looksLikeIdleOrSocialPrompt, looksLikeActionNarration, looksLikeWebActionNarration, localHttpProbeIsFailure, localHttpProbeIsSuccess, buildWorkflowDirective, narrowNmapOperationDirective, pentestWorkflowDirective, pentestNoLocalServerDirective, shouldDimToolChatter, looksLikePromptLeak, } from "./tool-call-parser.js";
 import { createSessionPolicy, isPreApprovalAllowedTool, isPlanModeAllowedShellCommand, isPlanModeAllowedTool, isPlanApprovedByStatus, planHasOpenWork, isAbortError, shouldEnableImageOcr, } from "./session-policy.js";
 import { saveToolOutput, summarizeOutput, formatToolContext, } from "./tool-output-formatting.js";
 import { codingSessionFromContext, isProtocolPlaceholderOutput, progressPauseMode, } from "./progress-pause-policy.js";
 import { renderPlanForTerminal, planContextMessage, upsertPlanContextMessage, handlePlanTool, resolvePlanTaskId, } from "./plan-tool.js";
 import { readDeclaredParentTaskId, resolveResponderParent, isExplicitResponderDelegation, delegationTaskTitle, } from "./responder-parent.js";
 import { readTaskUpdateArgs, distinctAdvancingTaskIds, isSimultaneousTaskAdvance, batchUpdateSignature, buildMultiUpdateReminder, buildMultiOpenRejection, multiUpdateToast, multiOpenToast, openingTaskIds, } from "./task-sync.js";
-import { absorbLooseWorkIntoLedger, applyDestinationCwd, canMarkTaskDone, hasLocalRuntimeProof, hasRemoteWorkProof, isDevServerCall, isEvidenceWorkTool, isFeatureImplementationCall, isPackageInstallCommand, isPlanPreflightTool, isPortListeningOutput, isReadOnlyReconTool, isRemoteActiveTestCall, isRemoteObservationTask, isRemoteReconToolCall, isRuntimeObservationTask, isScaffoldCreateCommand, isServerReadyOutput, ledgerFromTaskEvidence, pickPendingTaskForToolCall, recordTaskWorkSuccess, resolveUserDestinationHint, taskEvidenceFromLedger, TOOL_ABORT_GRACE_MS, toolHardBudgetMs, toolStallBudgetMs, userAskedForFeatureApp, } from "./task-evidence.js";
+import { absorbLooseWorkIntoLedger, applyDestinationCwd, canMarkTaskDone, hasLocalRuntimeProof, hasRemoteWorkProof, isDevServerCall, isEvidenceWorkTool, isFeatureImplementationCall, isPackageInstallCommand, isPlanPreflightTool, isPortListeningOutput, isReadOnlyReconTool, isRemoteActiveTestCall, isRemoteReconToolCall, isScaffoldCreateCommand, isServerReadyOutput, ledgerFromTaskEvidence, pickPendingTaskForToolCall, recordTaskWorkSuccess, resolveUserDestinationHint, taskEvidenceFromLedger, TOOL_ABORT_GRACE_MS, toolHardBudgetMs, toolStallBudgetMs, userAskedForFeatureApp, } from "./task-evidence.js";
 import { buildSessionStateBlock, inferNextHint, upsertSessionStateMessage, } from "./session-state.js";
 import { buildContinueOrientation, looksLikeContinueOrResumePrompt, } from "./continue-orient.js";
 import { detectPackageManager } from "./workspace-orient.js";
@@ -86,7 +86,7 @@ import { buildRichStopSummary } from "./stop-summary.js";
 import { composeAgentSystemPrompt } from "./prompt-composer.js";
 import { createGovernorState, governProgress, } from "./evidence-governor.js";
 import { createTurnState, transitionTurn, } from "./turn-state.js";
-import { deriveOutcomeStatus, inferOutcomeKind, openOutcomeState, recordAnswerEvidence, recordFailedHypothesis, recordToolEvidence, saveOutcomeState, validateCriterionEvidence, } from "./outcomes.js";
+import { deriveOutcomeStatus, inferOutcomeKind, openOutcomeState, recordAnswerEvidence, recordFailedHypothesis, recordToolEvidence, completedOperationObservationDigest, saveOutcomeState, validateCriterionEvidence, } from "./outcomes.js";
 import { createTurnOutcome, normalizeTurnOutcomeInput, renderTurnOutcome, } from "./turn-outcome.js";
 import { beginEngagementAction, finishEngagementAction, recordEngagementCheckpoint, reconcileEngagementJob, openEngagement, saveEngagement, } from "../store/engagement.js";
 export * from "./tool-call-parser.js";
@@ -442,19 +442,12 @@ export async function runAgentTurn(prompt, options = {}) {
         // brand-new plan (the exact failure where "what do u know till now"
         // triggered explore→plan and created an unrelated "Enhance clai" plan).
         const informationalQuery = looksLikeInformationalQuery(prompt);
-        // Greetings / thanks / short acks must never force tools, plans, or
-        // freshness retries — a false "act don't narrate" path burned tokens on
-        // web.search recovery loops after a simple "hi".
+        // Greetings / thanks / short acks must never force tools or plans.
         const idleOrSocialPrompt = looksLikeIdleOrSocialPrompt(prompt);
         suppressOutcomeDiagnostics =
             informationalQuery ||
                 idleOrSocialPrompt ||
                 looksLikeContinueOrResumePrompt(prompt);
-        const freshWebSearchRequired = !buildLikeTurn &&
-            !pentestLikeTurn &&
-            !idleOrSocialPrompt &&
-            toolNames.includes("web.search") &&
-            requiresFreshWebSearch(prompt);
         let provider = initialProvider;
         await ensureProviderConfigured(provider);
         let model = initialModel;
@@ -608,9 +601,6 @@ export async function runAgentTurn(prompt, options = {}) {
                 orientInput.candidateProject = candidate;
             systemSections.push(buildWorkspaceOrientation(orientInput));
         }
-        if (freshWebSearchRequired) {
-            systemSections.push(freshnessGuardMessage());
-        }
         // The live plan is mutable state: it is injected once as a keyed request
         // suffix (upsertPlanContextMessage) instead of being frozen into the stable
         // system prefix, so the model never sees a stale and a fresh plan together.
@@ -719,7 +709,6 @@ export async function runAgentTurn(prompt, options = {}) {
                     content.startsWith("ACTIVE PROJECT ROOT:") ||
                     content.startsWith("USER DESTINATION:") ||
                     content.startsWith("WORKSPACE STATUS") ||
-                    content.startsWith("Freshness guard for this turn:") ||
                     content.includes("MODE") ||
                     content.includes("OUTCOME"),
             }));
@@ -856,6 +845,17 @@ export async function runAgentTurn(prompt, options = {}) {
             }
             return message;
         };
+        const upsertActionCycleRecovery = (content) => {
+            const prefix = "[ACTION CYCLE RECOVERY] ";
+            for (let index = messages.length - 1; index >= 0; index -= 1) {
+                const message = messages[index];
+                if (message.role === "user" && message.internal && message.content.startsWith(prefix)) {
+                    messages.splice(index, 1);
+                    break;
+                }
+            }
+            messages.push(recoveryUserMessage(prefix + content));
+        };
         const recoveryProse = (content) => {
             const text = textBeforeToolCall(stripSentinelTokens(content)).trim();
             if (!text ||
@@ -928,7 +928,6 @@ export async function runAgentTurn(prompt, options = {}) {
         // (e.g. malformed extra/missing braces that are NOT simple truncation). We
         // retry instead of leaking the raw block as the final answer.
         let malformedFenceRetries = 0;
-        let sawFreshWebSearch = false;
         const recovery = createRecoveryBudgets();
         let sawServerStart = false;
         let sawPlanCreateOk = false;
@@ -1000,70 +999,6 @@ export async function runAgentTurn(prompt, options = {}) {
                 remoteWorkVerified: planHasVerifiedRemoteWork(plan),
             });
         };
-        const reconcileOpenTaskBeforeFinalizing = async () => {
-            let plan = await loadPlan(session.sessionId).catch(() => undefined);
-            const open = plan?.tasks.find((task) => task.state === "in_progress" && !task.responderOwned);
-            if (!plan || !open)
-                return plan;
-            const gate = completionGateForTask(plan, open.id);
-            if (!gate.ok)
-                return plan;
-            const reconciledTaskIds = [open.id];
-            const working = plan;
-            markTask(working, open.id, "done", "Completion reconciled from verified task evidence.");
-            while (true) {
-                const observation = readyPlanTasks(working).find((task) => isRuntimeObservationTask(task.title) ||
-                    (working.kind === "pentest" && isRemoteObservationTask(task.title)));
-                if (!observation)
-                    break;
-                const observationGate = completionGateForTask(working, observation.id);
-                if (!observationGate.ok)
-                    break;
-                markTask(working, observation.id, "done", working.kind === "pentest"
-                    ? "Satisfied by verified remote evidence from the preceding task."
-                    : "Satisfied by the verified runtime evidence from the preceding task.");
-                reconciledTaskIds.push(observation.id);
-            }
-            if (working.status === "draft" || working.status === "approved") {
-                working.status = "in_progress";
-            }
-            if (isPlanTerminal(working)) {
-                working.status = isPlanSuccessful(working) ? "completed" : "abandoned";
-            }
-            // Replay the same reconciliation as a reducer so a concurrent
-            // responder settlement is preserved instead of overwritten.
-            const reconciledNotes = new Map(reconciledTaskIds.map((id) => [
-                id,
-                working.tasks.find((task) => task.id === id)?.note,
-            ]));
-            const reconcileResult = await mutatePlan(session.sessionId, (draft) => {
-                let changed = false;
-                for (const [id, note] of reconciledNotes) {
-                    const task = draft.tasks.find((candidate) => candidate.id === id);
-                    if (!task || task.state === "done")
-                        continue;
-                    task.state = "done";
-                    if (note !== undefined)
-                        task.note = note;
-                    changed = true;
-                }
-                if (draft.status === "draft" || draft.status === "approved") {
-                    draft.status = "in_progress";
-                    changed = true;
-                }
-                if (isPlanTerminal(draft)) {
-                    draft.status = isPlanSuccessful(draft) ? "completed" : "abandoned";
-                    changed = true;
-                }
-                return changed;
-            }).catch(() => undefined);
-            if (reconcileResult?.ok && reconcileResult.plan)
-                plan = reconcileResult.plan;
-            writePlanUpdate(plan, renderPlanForTerminal(plan) + "\n");
-            writeNotice("info", `reconciled ${reconciledTaskIds.map((id) => `[${id}]`).join(", ")} from verified evidence`, chalk.dim(`  ℹ reconciled ${reconciledTaskIds.map((id) => `[${id}]`).join(", ")} from verified evidence — no duplicate verification\n`));
-            taskWorkLedger = null;
-            return plan;
-        };
         async function persistProjectRootOnPlan(root) {
             const pm = detectPackageManager(root);
             // Metadata patches go through the transactional boundary so a
@@ -1376,8 +1311,14 @@ export async function runAgentTurn(prompt, options = {}) {
                 ...(retryReason ? { retryReason } : {}),
             });
             if (loopCheck.block) {
-                const reason = loopCheck.reason ??
+                const baseReason = loopCheck.reason ??
                     `${call.name} previously failed with identical arguments. Change the command/args and retry.`;
+                const priorObservation = loopCheck.kind === "unchanged-success"
+                    ? loopGuard.getPriorObservation(call.name, call.args)
+                    : undefined;
+                const reason = priorObservation
+                    ? `${baseReason}\n\nPrior successful result (reuse this; it is the result of the requested call):\n${priorObservation}`
+                    : baseReason;
                 if (loopCheck.kind === "unchanged-success") {
                     const result = { ok: true, output: reason, exitCode: 0 };
                     emitVisibleSyntheticReceipt(result, reason);
@@ -1789,9 +1730,6 @@ export async function runAgentTurn(prompt, options = {}) {
                     };
                 }
             }
-            if (call.name === "web.search") {
-                sawFreshWebSearch = true;
-            }
             if (!alreadyPrintedIds.has(toolEventId)) {
                 const toolCallLine = chalk.cyan(`  ▶ ${call.name}`) + chalk.gray(` ${formatToolArgs(call)}`);
                 writeToolCall(toolEventId, call, styleToolChatter(call, toolCallLine) + "\n");
@@ -3257,9 +3195,7 @@ export async function runAgentTurn(prompt, options = {}) {
                             ...(toolsAttached
                                 ? {
                                     tools: turnTools,
-                                    toolChoice: freshWebSearchRequired && !sawFreshWebSearch
-                                        ? { type: "function", name: "web.search" }
-                                        : "auto",
+                                    toolChoice: "auto",
                                     parallelToolCalls: true,
                                     // P2-3: emit tool cards as soon as the function name arrives.
                                     onToolCallDelta: (delta) => {
@@ -3692,12 +3628,15 @@ export async function runAgentTurn(prompt, options = {}) {
                 }
                 if (nativeToolCalls.length) {
                     const first = nativeToolCalls[0];
-                    if (first.args?._parseError) {
-                        call = undefined;
-                    }
-                    else {
-                        call = normalizeToolCall({ name: first.name, args: first.args });
-                    }
+                    call = first.args?._parseError
+                        ? {
+                            name: first.name || "unknown",
+                            args: {
+                                __nativeParseError: true,
+                                _raw: first.args._raw,
+                            },
+                        }
+                        : normalizeToolCall({ name: first.name, args: first.args });
                 }
                 else {
                     call = parseToolCall(assistantText.visible, {
@@ -3804,19 +3743,15 @@ export async function runAgentTurn(prompt, options = {}) {
                             retryWithoutThinking = true;
                         commitAssistantRetry(assistantText.visible);
                         // Keep nudges SHORT — cheap models lose the key instruction in long text.
-                        const buildNudge = freshWebSearchRequired && !sawFreshWebSearch
+                        const buildNudge = isPlanMode && !activePlan
                             ? toolsAttached
-                                ? "No visible output. This is current or scheduled information: call web.search now. Do NOT answer from memory."
-                                : "No visible output. This is current or scheduled information: emit exactly one valid ```tool block for web.search now. Do NOT answer from memory or hide the tool call in <think> tags."
-                            : isPlanMode && !activePlan
-                                ? toolsAttached
-                                    ? "No visible output. In plan mode: gather context or call plan.create when ready (do not only describe the plan)."
-                                    : "No visible output. In plan mode: emit a ```tool block for research/recon or plan.create. " +
-                                        "Do NOT hide tool calls in <think> tags — put them in the visible response."
-                                : toolsAttached
-                                    ? "No visible output. " + toolNudge(true)
-                                    : "No visible output. Emit a ```tool block or give your final answer. " +
-                                        "Do NOT hide tool calls in <think> tags — put them in the visible response.";
+                                ? "No visible output. In plan mode: gather context or call plan.create when ready (do not only describe the plan)."
+                                : "No visible output. In plan mode: emit a ```tool block for research/recon or plan.create. " +
+                                    "Do NOT hide tool calls in <think> tags — put them in the visible response."
+                            : toolsAttached
+                                ? "No visible output. " + toolNudge(true)
+                                : "No visible output. Emit a ```tool block or give your final answer. " +
+                                    "Do NOT hide tool calls in <think> tags — put them in the visible response.";
                         messages.push(recoveryUserMessage(buildNudge));
                         continue;
                     }
@@ -3884,7 +3819,7 @@ export async function runAgentTurn(prompt, options = {}) {
                         }
                         // Exhausted retries — fall through to the normal answer path.
                     }
-                    if (/<\|tool_call(?:s_section)?_begin\|>|<\|tool_call_argument_begin\|>/i.test(assistantText.visible)) {
+                    if (/<\|tool_call(?:s_section)?_begin\|>|<\|tool_call_argument_begin\|>|<[|｜]DSML[|｜](?:tool_calls|invoke|parameter)\b/i.test(assistantText.visible)) {
                         writeNotice("warn", "tool call was malformed or cut off — asking the model to retry in JSON form", chalk.yellow("  ⚠ tool call was malformed or cut off — asking the model to retry in JSON form\n"));
                         commitAssistantRetry(assistantText.visible);
                         messages.push(recoveryUserMessage(toolsAttached
@@ -4012,15 +3947,12 @@ export async function runAgentTurn(prompt, options = {}) {
                     const cleaned = collapseRepeatedText(stripSentinelTokens(canonicalAssistantVisible));
                     const narratedAction = looksLikeActionNarration(cleaned);
                     const narratedWebAction = looksLikeWebActionNarration(cleaned);
-                    const reconciledPlanAtCompletion = await reconcileOpenTaskBeforeFinalizing();
-                    const livePlanAtCompletion = reconciledPlanAtCompletion ??
-                        (await loadPlan(session.sessionId).catch(() => undefined));
+                    const livePlanAtCompletion = await loadPlan(session.sessionId).catch(() => undefined);
                     const planStatusAtCompletion = livePlanAtCompletion?.status ?? activePlan?.status;
                     const completedPlanDuringThisTurn = activePlan?.status !== "completed" &&
                         planStatusAtCompletion === "completed";
                     const planHasOpenWorkNow = planHasOpenWork(planStatusAtCompletion);
-                    const userExpectsWork = freshWebSearchRequired ||
-                        (planHasOpenWorkNow && session.planApproved.value) ||
+                    const userExpectsWork = (planHasOpenWorkNow && session.planApproved.value) ||
                         (!informationalQuery &&
                             !idleOrSocialPrompt &&
                             (buildLikeTurn || pentestLikeTurn));
@@ -4088,11 +4020,6 @@ export async function runAgentTurn(prompt, options = {}) {
                         pentestSession,
                         informationalQuery,
                         idleOrSocialPrompt,
-                        freshWebSearchRequired,
-                        freshnessGuardText: freshWebSearchRequired
-                            ? freshnessGuardMessage()
-                            : "",
-                        sawFreshWebSearch,
                         sawPlanCreateOk,
                         sawFeatureImplWrite,
                         sawScaffoldOk,
@@ -4291,11 +4218,20 @@ export async function runAgentTurn(prompt, options = {}) {
                     writeNotice("warn", reason, chalk.yellow(`  ⚠ ${reason}\n`));
                     const suppressedResults = bound.map((b) => {
                         const duplicate = runIds.has(b.id);
-                        const resultReason = duplicate ? reason : deferReason;
+                        const priorObservation = duplicate
+                            ? loopGuard.getPriorObservation(b.call.name, b.call.args)
+                            : undefined;
+                        const resultReason = duplicate
+                            ? reason +
+                                (priorObservation
+                                    ? `\n\nPrior successful result for ${b.call.name}:\n${priorObservation}`
+                                    : "")
+                            : deferReason;
                         const result = {
-                            ok: false,
+                            ok: duplicate,
                             output: resultReason,
-                            exitCode: duplicate ? 409 : 130,
+                            exitCode: duplicate ? 0 : 130,
+                            ...(duplicate ? { suppressedRepeat: true } : {}),
                         };
                         return { b, resultReason, result };
                     });
@@ -4316,22 +4252,6 @@ export async function runAgentTurn(prompt, options = {}) {
                         writeToolOutput(eventId, output, chalk.dim(`  ${output}`));
                         emitToolResult(eventId, result, resultReason);
                     }
-                    if (historyNativeCalls.length) {
-                        appendAssistantWithTools(messages, beforeTool ?? "", historyNativeCalls, completion.reasoningBlock ??
-                            (assistantText.hasThinking && assistantText.thinkContent
-                                ? { text: assistantText.thinkContent }
-                                : undefined));
-                        for (const { b, resultReason, result } of suppressedResults) {
-                            appendToolResult(messages, b.id, `Tool ${b.call.name} result (exit=${result.exitCode}, ok=false):\n${resultReason}`, b.call.name, false);
-                        }
-                    }
-                    else {
-                        const standardizedContent = (beforeTool ? beforeTool.trim() + "\n\n" : "") +
-                            allCalls
-                                .map((candidate) => `\`\`\`tool\n${JSON.stringify(candidate)}\n\`\`\``)
-                                .join("\n\n");
-                        pushAssistantHistory(standardizedContent);
-                    }
                     if (sequenceDecision.terminal) {
                         const remainingCriteria = unreadResponderNotificationIds.size > 0
                             ? ["Analyze and acknowledge the delivered Responder result without repeating completed foreground work."]
@@ -4341,10 +4261,10 @@ export async function runAgentTurn(prompt, options = {}) {
                         moveTurn("partial", "repeated identical action sequence");
                         return finishTurn("Stopped an identical action cycle before it could execute again.", productiveSteps, "partial", remainingCriteria, "The model repeated an identical action sequence without a new premise or state change.");
                     }
-                    messages.push(recoveryUserMessage(reason +
+                    upsertActionCycleRecovery(reason +
                         (unreadResponderNotificationIds.size > 0
                             ? " A delivered Responder result is still unread: analyze the available result, gather only genuinely necessary bounded evidence, then call job.read before returning to foreground work."
-                            : " Reassess the evidence and select the next action yourself; do not replay completed work.")));
+                            : " The original successful tool result remains in context. Reassess that evidence and either finish or select a materially different action; do not replay completed work."));
                     continue;
                 }
                 if (sequenceDecision.warn && sequenceDecision.warnMessage) {
@@ -4408,6 +4328,7 @@ export async function runAgentTurn(prompt, options = {}) {
                 let planCreatedThisTurn = Boolean(activePlan && activePlan.tasks.length > 0);
                 let actionSequenceExecuted = 0;
                 let actionSequenceEligible = allCalls.length > 0;
+                const actionSequenceOutcomes = new Map();
                 /**
                  * Record a tool result into history. Failures / user declines are
                  * always returned to the model — we never cancel later siblings or
@@ -4418,6 +4339,15 @@ export async function runAgentTurn(prompt, options = {}) {
                     consecutiveModelOnlyRounds = 0;
                     recordedNativeIds.add(boundCall.id);
                     actionSequenceExecuted += 1;
+                    const sequenceObservation = res.suppressedRepeat
+                        ? loopGuard.getPriorObservation(res.call.name, res.call.args) ??
+                            res.contextOutput
+                        : res.result.output ?? res.contextOutput;
+                    actionSequenceOutcomes.set(boundCall.id, JSON.stringify({
+                        ok: res.ok,
+                        exitCode: res.result.exitCode ?? null,
+                        digest: completedOperationObservationDigest(res.call.name, sequenceObservation),
+                    }));
                     // A policy-suppressed call is deterministic: replaying it verbatim
                     // returns the identical receipt. It must therefore keep the sequence
                     // eligible, otherwise the tool-level suppression and the sequence
@@ -4757,12 +4687,16 @@ export async function runAgentTurn(prompt, options = {}) {
                     }
                     fillMissingToolResults(messages, historyNativeCalls, "Cancelled — not executed this turn.");
                 }
+                const actionSequenceOutcome = createHash("sha256")
+                    .update(JSON.stringify(bound.map((entry) => actionSequenceOutcomes.get(entry.id) ?? null)))
+                    .digest("hex")
+                    .slice(0, 24);
                 loopGuard.completeActionSequence(actionSequenceCalls, actionSequenceEligible &&
                     toRun.length === bound.length &&
                     actionSequenceExecuted === allCalls.length &&
                     !aborted &&
                     !awaitingPlanApproval &&
-                    !governorPauseReason);
+                    !governorPauseReason, actionSequenceOutcome);
                 // Keep ledger system rows outside the native assistant→tool group so
                 // protocol repair preserves the real successful job.read body.
                 for (const notification of deferredResponderLedgerNotifications.splice(0)) {