fix(agent): a tool call after an accepted wrap_up in the same response is not run

wrap_up is where the run's edits are checked and the hand-back is shown; a call the same response made after
it (an edit, a command) still ran, after the check and behind the box that said the work was done. Once a
wrap_up in a response is accepted, any later call in that response is answered "Not run … do the work first,
then call wrap_up last" instead. A wrap_up that verification refused does not count: the call after it is
the fix, and runs.

Author: ndemianc

extensions/levelcode-ai/agent.js

@@ -1498,8 +1498,16 @@ async function runAgent(ctx) {
 				// next API call 400s ("tool_use ids were found without tool_result blocks").
 				const results = [];
 				let cancelled = false;
+				// Set once a wrap_up in THIS response is accepted: it was checked and shown as the end of the
+				// work, so a call the same response makes after it would change things behind the hand-back.
+				let handedBack = false;
 				for (const tu of toolUses) {
 					if (cancelled || ctx.signal.aborted) { cancelled = true; dbg('tool.cancelled', { name: tu.name }); results.push({ type: 'tool_result', tool_use_id: tu.id, content: 'Cancelled by the user.' }); continue; }
+					if (handedBack) {
+						dbg('tool.afterWrapUp', { name: tu.name });
+						results.push({ type: 'tool_result', tool_use_id: tu.id, content: 'Not run: wrap_up already handed the work back in this response, and it was checked as it stood. Do the work first, then call wrap_up last.' });
+						continue;
+					}
 					if (turn.malformed && turn.malformed.has(tu.id)) {
 						dbg('tool.malformed', { name: tu.name });
 						// A diagram spec is the one input worth a second look: JSON with a trailing comma or a
@@ -1517,7 +1525,9 @@ async function runAgent(ctx) {
 						continue;
 					}
 					if (tu.name === 'wrap_up') {
+						const before = wrapped;
 						results.push({ type: 'tool_result', tool_use_id: tu.id, content: await wrapUp(tu) });
+						if (wrapped && wrapped !== before) { handedBack = true; }   // accepted (not refused by verification)
 						continue;
 					}
 					dbg('tool.call', { name: tu.name, input: inputPreview(tu.input, !!(ctx.mcpRoutes && ctx.mcpRoutes.has(tu.name))) });

extensions/levelcode-ai/test/agentPlanProgress.test.js

@@ -58,6 +58,8 @@ async function test(name, fn) { await fn(); n++; console.log('  ok - ' + name);
 let seq = 0;
 const call = (name, input) => ({ stop_reason: 'tool_use', content: [{ type: 'tool_use', id: 't' + (++seq), name, input }] });
 const say = (text) => ({ stop_reason: 'end_turn', content: [{ type: 'text', text }] });
+/** One response with several tool calls, in order. */
+const calls = (...cs) => ({ stop_reason: 'tool_use', content: cs.map(([name, input]) => ({ type: 'tool_use', id: 't' + (++seq), name, input })) });
 
 /**
  * Run one goal on scripted turns. `extra` is merged into the run's ctx (plan, verify, takeSteers …).
@@ -182,6 +184,28 @@ const ITEMS = { items: [{ content: 'Read the parser', status: 'in_progress' }, {
 			assert.deepStrictEqual(r.done, ['done']);
 		});
 
+		await test('AFTER WRAP-UP, SAME RESPONSE: a later call is answered, not run — the hand-back was checked as it stood', async () => {
+			const r = await run([
+				call('update_plan', ITEMS),
+				calls(['wrap_up', { recap: 'The parser reads dates.' }], ['update_plan', { items: [{ content: 'Something new', status: 'in_progress' }] }]),
+				say('Done: dates parse.')
+			], { plan: { steps: null } });
+			assert.match(r.results[2], /^Not run: wrap_up already handed the work back in this response/);
+			assert.deepStrictEqual(r.plans, ['in_progress pending pending', 'completed completed completed'], 'the call after wrap_up changed the list');
+			assert.deepStrictEqual(r.done, ['done']);
+		});
+
+		await test('…but after a wrap-up that verification REFUSED, the same response\'s next call runs (it is the fix)', async () => {
+			const ctx = { plan: { steps: null }, editCount: 1, verify: { enabled: true, maxRounds: 2, command: '' },
+				getTouchedUris: () => ['src/parse.js'], getNewDiagnostics: async () => ({ text: 'src/parse.js:4  error  Missing semicolon', count: 1 }) };
+			const r = await run([
+				calls(['wrap_up', { recap: 'Dates parse now.' }], ['update_plan', ITEMS]),
+				say('Done: still fixing.')
+			], ctx);
+			assert.match(r.results[0], /^Not shown: your changes did not pass verification/);
+			assert.match(r.results[1], /^Task list shown/);
+		});
+
 		await test('SEND NOW, AFTER A STEP: the message rides with the tool results, and the chat is told it landed', async () => {
 			const inbox = [];
 			const r = await run([