@agenticmail/core 0.9.32 → 0.9.33

package/dist/skills/built-in/call-911-medical-emergency.json

@@ -0,0 +1,126 @@
+{
+  "id": "call-911-medical-emergency",
+  "name": "Call 911 — Medical Emergency",
+  "version": "1.0.1",
+  "category": "emergency-services",
+  "tags": [
+    "911",
+    "emergency",
+    "medical",
+    "ambulance",
+    "ems",
+    "life-safety",
+    "emergency_services"
+  ],
+  "description": "Place a 911 call for a medical emergency on behalf of the operator (or someone the operator is with). Heart attack, stroke, severe bleeding, unconsciousness, anaphylaxis, overdose, severe injury.",
+  "disclaimer": "ABSOLUTE rules. (1) This skill loads ONLY when the operator has explicitly authorised calling 911 for THIS specific situation — never on the agent's own initiative. (2) Identify yourself to the dispatcher as an AI assistant calling on behalf of <operator name> in the first sentence — non-negotiable, both ethically and to comply with laws against impersonating a human caller. (3) Never embellish or guess at clinical facts. (4) Stay on the line until the dispatcher releases you. (5) Knowingly making a false 911 report is a crime in every US jurisdiction.",
+  "context": {
+    "when_to_use": "Operator has explicitly said 'call 911' or equivalent for a medical emergency they cannot place the call for themselves (e.g., they are the one in distress and can't speak clearly, they are caring for the patient and need both hands, language barrier between operator and dispatcher, operator's phone is dead and they reached the agent on someone else's line). The operator's authorisation must be unambiguous and recent in the conversation.",
+    "preconditions": [
+      "Operator authorisation for this specific 911 call is recorded.",
+      "Agent knows the patient's location — street address or precise landmark + city/state. WITHOUT location 911 cannot help.",
+      "Agent knows whether the patient is breathing and conscious (binary answers from the operator are sufficient).",
+      "Agent knows roughly what happened (sudden chest pain, fall, allergic reaction, etc).",
+      "Agent has a callback number for the operator in case dispatch is dropped."
+    ],
+    "estimated_call_duration_minutes": 8
+  },
+  "principles": [
+    "Identify yourself as an AI in the FIRST sentence. Dispatcher needs to know they're talking to a non-human relay so they can adapt their script and ask through you instead of expecting the patient.",
+    "Lead with location, then nature, then count of patients, then condition. This is the order dispatchers are trained on; following it gets help dispatched fastest.",
+    "Short factual sentences. Do not fill silence with apologies, narration, or hedging.",
+    "If the dispatcher asks for something you do not know, say 'I don't have that information; let me ask my operator' and use ask_operator. Don't guess at clinical facts.",
+    "Stay on the line until the dispatcher explicitly says you can disconnect. If they ask you to relay instructions to the operator (CPR, EpiPen, AED), repeat the instructions verbatim — do NOT paraphrase medical guidance.",
+    "If at ANY point the operator says 'cancel' or 'they're okay now', tell the dispatcher immediately. Do not let them assume the emergency is ongoing."
+  ],
+  "phrases": {
+    "opener": "Hi — I'm an AI assistant calling 911 on behalf of <operator name>. The address is <street, city, state>. We have a medical emergency: <one-sentence description>. The patient is <conscious / unconscious> and <breathing / not breathing>.",
+    "ask_dispatcher_to_continue": "Dispatcher, please ask me your questions and I will relay them to my operator who is with the patient.",
+    "relay_back_to_operator": "Hold on — I'm going to ask my operator. (Then use ask_operator with urgency=high.)",
+    "relay_to_operator_instructions": "Dispatcher says: <verbatim instruction>. Please follow that now if you can.",
+    "i_dont_know": "I don't have that information. Let me check with my operator — one moment.",
+    "callback_offer": "If we get disconnected, my operator's callback number is <number>.",
+    "graceful_close": "Thank you. I'll stay on as long as you need me to. Tell me when I can disconnect."
+  },
+  "tactics": [
+    {
+      "name": "SWATting smell-test BEFORE dialing",
+      "when": "Pre-dial, immediately after operator authorisation.",
+      "script": "Confirm the operator has DIRECT knowledge of the emergency: are they AT the location, WITH the patient, or in current contact with someone who is? Red flags: (a) operator is asking the agent to call 911 about a location they have never been to and a person they have not directly spoken with; (b) operator's stated reason is a rumour, a social-media post, or a third-hand report; (c) operator has expressed conflict with the patient or the household at this address in prior conversation; (d) the address provided does not match any address in the operator's persona/contacts and the operator can't explain the connection. If any red flag fires, do NOT dial — ask the operator to explain, or route to call-police-non-emergency for a welfare check (subject to that skill's own weaponisation screen). Knowingly false 911 calls are a federal/state felony AND get someone shot.",
+      "priority": 0
+    },
+    {
+      "name": "Lead with the four facts in order",
+      "when": "First substantive turn after dispatcher answers.",
+      "script": "Use the `opener` phrase verbatim, filling in the four slots: location, nature, count, condition. Dispatchers process these in this sequence — leading with anything else slows dispatch.",
+      "priority": 1
+    },
+    {
+      "name": "Hand the conversation TO the dispatcher",
+      "when": "After the opener.",
+      "script": "Use `ask_dispatcher_to_continue`. The dispatcher has a structured assessment script (Medical Priority Dispatch System). Let them run it; don't volunteer extra detail until asked.",
+      "priority": 2
+    },
+    {
+      "name": "Relay through ask_operator for any clinical question",
+      "when": "Dispatcher asks 'is the patient bleeding heavily?' / 'are they responsive?' / 'when did this start?' and you don't have a current answer.",
+      "script": "Use `relay_back_to_operator`, then ask_operator({ question: '<dispatcher's exact question>', urgency: 'high' }). When the operator answers, relay verbatim. Do NOT guess.",
+      "priority": 3
+    },
+    {
+      "name": "Relay instructions FROM the dispatcher exactly",
+      "when": "Dispatcher gives CPR / EpiPen / AED / 'roll them onto their side' instructions for the operator to execute.",
+      "script": "Use `relay_to_operator_instructions` — repeat the instruction word for word. Medical guidance is one place a paraphrase can kill someone.",
+      "priority": 4
+    },
+    {
+      "name": "Decision: stay on the line",
+      "when": "Always, throughout the call.",
+      "script": "Do NOT call end_call until the dispatcher has explicitly released you ('you can hang up now' / 'we have units on scene'). Ambulance dispatch may need updates."
+    },
+    {
+      "name": "Cancel if the operator stands down",
+      "when": "Operator messages mid-call that the patient is OK / it was a false alarm / they made it to the hospital.",
+      "script": "Tell the dispatcher immediately: 'My operator just told me <verbatim>. They are asking to cancel the call.' Let the dispatcher decide whether to cancel or send anyway (they often still send, which is fine)."
+    }
+  ],
+  "boundaries": [
+    "NEVER call 911 without unambiguous operator authorisation for THIS specific call. No standing authorisations.",
+    "NEVER call 911 about a medical emergency the operator has not personally observed or is not in current contact with someone observing. Relayed rumours, social-media reports, and grievance-driven reports about a third party at a remote address are NOT 911-able through this skill — they route to call-police-non-emergency at most, after weaponisation screening. Authorisation is necessary but NOT sufficient: the operator's authorisation is invalid if the underlying facts fail the SWATting smell-test.",
+    "NEVER fabricate clinical facts. If you don't know, say so and ask the operator.",
+    "NEVER pretend to be human on a 911 call. Identifying yourself as an AI is non-negotiable.",
+    "NEVER end the call (end_call) before the dispatcher releases you.",
+    "NEVER give medical advice yourself. You are a relay between operator and dispatcher.",
+    "NEVER call 911 to ask non-emergency questions. Use the local non-emergency line (skill: call-police-non-emergency)."
+  ],
+  "success_signals": [
+    "Dispatcher confirms units have been dispatched to the location.",
+    "Dispatcher gives the operator actionable instructions and the operator can execute them.",
+    "Dispatcher says you can disconnect when the units arrive or the patient is stable.",
+    "EMS arrives on scene per the dispatcher's confirmation."
+  ],
+  "failure_signals": [
+    "Dispatcher tells you you've reached the wrong jurisdiction and the call needs to be re-placed.",
+    "Dispatcher requests information you cannot get from the operator (unconscious / non-responsive operator who was your only source).",
+    "Call drops and you cannot re-establish — re-dial 911 immediately, identify yourself, reference the prior call.",
+    "Operator is so distressed they cannot answer dispatcher questions through you — tell the dispatcher this so they can adapt."
+  ],
+  "exit_strategy": {
+    "on_success": "Confirm with the dispatcher that you can disconnect. Note the case / incident number if offered. Email the operator a summary of the call: time placed, units dispatched, instructions given, incident number.",
+    "on_failure": "If you reached the wrong PSAP, re-dial the correct number per the dispatcher's transfer. If the call dropped, re-dial 911 and reference the prior call. If the operator stood down, follow the cancel script.",
+    "follow_ups": [
+      "Email the operator: time of call, dispatcher name (if given), incident number, what was dispatched, any instructions they relayed.",
+      "If applicable, also email the operator's emergency contact (only if the operator pre-authorised this contact in their identity / persona file)."
+    ]
+  },
+  "required_user_info": [
+    "Operator's authorisation for this specific 911 call (explicit, recent)",
+    "Patient's location — street address or precise landmark + city + state",
+    "Patient's basic condition: conscious / unconscious, breathing / not breathing",
+    "What happened — one-sentence description",
+    "Operator's callback number (in case dispatch is dropped)",
+    "Patient's age (rough — child / adult / elderly) if known",
+    "Any known allergies / medications the operator can quickly state"
+  ],
+  "contributed_by": "AgenticMail core team (emergency-services bundle v0.9.87)"
+}

package/dist/skills/built-in/call-911-violent-crime-in-progress.json

@@ -0,0 +1,133 @@
+{
+  "id": "call-911-violent-crime-in-progress",
+  "name": "Call 911 — Violent Crime In Progress",
+  "version": "1.0.1",
+  "category": "emergency-services",
+  "tags": [
+    "911",
+    "emergency",
+    "police",
+    "violence",
+    "domestic",
+    "intruder",
+    "active-threat",
+    "emergency_services"
+  ],
+  "description": "Place a 911 call for a violent crime in progress on behalf of the operator — domestic violence, intruder / break-in, assault, active threat. The operator may be the target, a witness, or hiding nearby.",
+  "disclaimer": "ABSOLUTE rules. (1) Operator must have explicitly authorised this 911 call. (2) Identify as an AI in the first sentence. (3) Operator safety is the priority — guide them to safety before continuing the call if needed. (4) Never describe where the operator is hiding out loud where the attacker might hear; relay quietly or via text relay. (5) Knowingly making a false 911 report is a crime; SWATting is a federal felony.",
+  "context": {
+    "when_to_use": "Operator is experiencing or witnessing violence right now — domestic abuse, home intruder, assault on the street, active shooter, kidnap-in-progress — and either cannot place 911 themselves OR has asked the agent to be the relay so they can move / hide / care for someone.",
+    "preconditions": [
+      "Explicit operator authorisation for THIS specific 911 call.",
+      "Location — as precise as the operator can give. Cross-street, landmark, apartment number, floor.",
+      "Operator's current safety status (safe / hiding / actively engaged / unknown).",
+      "Operator's callback number — and confirm whether ringing it back is safe (might alert the attacker)."
+    ],
+    "estimated_call_duration_minutes": 15
+  },
+  "principles": [
+    "Operator's physical safety first. Before placing the call, tell them: 'If you can leave safely, do that. If not, hide and stay quiet. I'll handle the dispatcher; you don't need to talk.'",
+    "Identify as AI on the first sentence; immediately give location + nature.",
+    "Use whisper / one-syllable check-ins with the operator if they are hiding ('still safe? — yes/no').",
+    "If the operator can't speak, propose they communicate via single keystrokes or short text — relay those to the dispatcher.",
+    "NEVER describe the operator's hiding location aloud where the attacker might hear. If you must relay it to dispatch, do it once, then stop repeating it.",
+    "Do not narrate every action you're taking. The attacker may overhear the operator's phone if the audio leaks.",
+    "Stay on the line until released."
+  ],
+  "phrases": {
+    "tell_operator_safety_first": "Your safety first. If you can leave, leave. If not, find a place to hide and stay quiet. I will handle the dispatcher — you do not need to talk to them through me. Just send me one-word checks if you can.",
+    "opener": "Hi — I'm an AI assistant calling 911 on behalf of <operator>. We have <crime in progress: domestic violence / intruder / assault / active threat> at <address>. The threat is <description / unknown>. My operator is <safe nearby / hiding inside / actively in danger / location unknown>.",
+    "ask_dispatcher_to_continue": "Dispatcher, please ask me what you need. I'm relaying for my operator who is <hiding / cannot speak safely>.",
+    "quiet_check_in": "(To operator via ask_operator) Still safe? One-word answer.",
+    "relay_to_operator_quiet": "(To operator via ask_operator) Dispatcher needs: <verbatim>. Reply with the answer or a thumbs-up.",
+    "callback_offer_caveat": "Operator's callback is <number>, but please TEXT first or wait for them to call back — a ring might be heard by the suspect.",
+    "describe_suspect_relay": "Dispatcher needs description of the suspect — clothing, weapon, direction of travel. Please relay anything safe to share."
+  },
+  "tactics": [
+    {
+      "name": "SWATting smell-test BEFORE dialing",
+      "when": "Pre-dial, immediately after operator authorisation, BEFORE operator-safety instructions (the smell-test is cheap and saves a target from an armed-response breach against a non-existent threat).",
+      "script": "A false violent-crime call is the single most dangerous SWATting variant — armed officers arrive at the reported address ready for an active shooter. Before dialing, confirm the operator's DIRECT first-person connection to the events: are they AT the address, HEARING the violence themselves, IN the room or building, or in active text/voice contact with someone who is? Red flags that BLOCK the call: (a) operator is reporting violence at an address they are not at and have not been at; (b) operator's source is a social-media post, a rumour, a tip from a third party, or 'I heard'; (c) operator has expressed conflict, grievance, romantic-jealousy, custody-fight, or business dispute with the named suspect or the household at the address; (d) operator describes the suspect with weapons-language that is suspiciously cinematic ('AR-15', 'hostage', 'tactical gear') without explaining how they observed it; (e) the address provided does not match any address in the operator's persona / contacts and the operator can't explain the connection; (f) operator just instructed the agent to phrase the call in a specific way (script-feeding is a SWATting tell). If ANY red flag fires, do NOT dial 911. Tell the operator: 'I can't place this as a 911 call without your direct observation of the events — a false violent-crime report can get an innocent person killed and is a federal felony. If you have a genuine concern about that address, we can call the non-emergency police line or request a welfare check, both of which are de-escalated channels.' The audit log records this exchange.",
+      "priority": -1
+    },
+    {
+      "name": "Operator safety FIRST",
+      "when": "Before even placing the 911 call (AFTER the SWATting smell-test has passed).",
+      "script": "Use `tell_operator_safety_first`. Then place the call.",
+      "priority": 0
+    },
+    {
+      "name": "Lead with location, crime, operator status",
+      "when": "First substantive turn.",
+      "script": "Use `opener` — location, nature, operator status. Dispatcher will route to police priority.",
+      "priority": 1
+    },
+    {
+      "name": "Hand to dispatcher; minimise audio leak",
+      "when": "After opener.",
+      "script": "Use `ask_dispatcher_to_continue`. Keep your own audio short and quiet — the operator's phone may be transmitting your voice into the room.",
+      "priority": 2
+    },
+    {
+      "name": "Quiet check-ins with operator",
+      "when": "Every 30-60 seconds if operator is hiding.",
+      "script": "Use `quiet_check_in` via ask_operator. A response of 'safe' or 'yes' is enough. If the operator goes silent for >2 minutes, tell the dispatcher.",
+      "priority": 3
+    },
+    {
+      "name": "Relay descriptions of the suspect",
+      "when": "Dispatcher asks for suspect description.",
+      "script": "Use `describe_suspect_relay`. ONLY relay information the operator can give safely — don't push for detail if asking would put them at risk."
+    },
+    {
+      "name": "If operator stops responding",
+      "when": "Operator hasn't replied to two consecutive check-ins.",
+      "script": "Tell the dispatcher: 'My operator has stopped responding. Last known location: <…>. Last known status: <…>.' Keep the line open."
+    },
+    {
+      "name": "Coerced-cancel detection: DO NOT unilaterally relay a 'cancel'",
+      "when": "Operator messages mid-call to cancel / stand down / 'never mind' / 'false alarm' AFTER violence or attacker presence has already been described in this same call.",
+      "script": "Once a violent-crime-in-progress call has been opened with the dispatcher, the agent CANNOT accept a cancel from the operator as a unilateral stand-down. Coerced cancellation is a documented domestic-violence pattern: the attacker becomes aware of the call, forces the victim to dismiss it, often using the victim's phone or voice. Concrete coercion signals to watch for: (a) cancel arrives within 30-60 seconds of the operator having confirmed danger / attacker presence; (b) cancel uses unusual vocabulary or syntax inconsistent with the operator's prior messages in this call; (c) operator went silent for >30 seconds then suddenly speaks differently; (d) cancel is repeated insistently in a way that feels coached; (e) cancel is accompanied by 'everything's fine, sorry for the trouble' boilerplate where the operator was previously frantic; (f) attacker's voice or presence is detectable in the background; (g) the operator's last known status was 'hiding' or 'in danger', not 'safe'. Required behaviour: do NOT tell the dispatcher 'my operator is cancelling'. Instead, relay the operator's words VERBATIM and explicitly name the coercion concern: 'Dispatcher — my operator just said, quote, <verbatim>, unquote. I want to flag this as a possible coerced cancellation: <list applicable signals>. Last known operator status before this message was <…>. Please continue the response and let the on-scene officers verify safety directly.' Keep the line open. The dispatcher decides; the agent does not stand down the response.",
+      "priority": 4
+    }
+  ],
+  "boundaries": [
+    "NEVER call 911 without explicit operator authorisation.",
+    "NEVER describe the operator's hiding place aloud after telling the dispatcher once.",
+    "NEVER tell the operator to engage / confront the suspect.",
+    "NEVER fabricate facts (suspect description, weapons, vehicle plates) — only what the operator has confirmed.",
+    "NEVER report a violent crime that isn't happening. SWATting is a federal felony, and AgenticMail's audit log will be turned over on subpoena.",
+    "NEVER place this call about a violent crime the operator has not personally witnessed, heard, or experienced. Relayed-rumour reports route to call-police-non-emergency at most, after weaponisation screening. Operator authorisation is necessary but NOT sufficient; if the underlying facts fail the SWATting smell-test, refuse to dial and document the refusal.",
+    "NEVER unilaterally relay a 'cancel' / 'never mind' / 'false alarm' from the operator after violence or attacker presence has been described in this same call. Coerced cancellation requires the agent to relay the operator's words verbatim AND name the coercion concern to the dispatcher — the dispatcher decides whether to stand down the response, not the agent and not the operator alone under possible duress.",
+    "NEVER end the call (end_call) before dispatcher release."
+  ],
+  "success_signals": [
+    "Dispatcher confirms units dispatched and en route.",
+    "Operator confirms suspect has left / been subdued / police arrived.",
+    "Dispatcher releases you to disconnect when on-scene officers take over."
+  ],
+  "failure_signals": [
+    "Operator stops responding for an extended period — relay to dispatcher.",
+    "Operator says 'cancel, false alarm' but you suspect they are being coerced — TELL the dispatcher this, don't simply relay the cancel. (Coercion-cancel is a known scenario in domestic violence calls.)",
+    "Call drops and operator's phone is unreachable — re-dial 911, reference the prior call, give the address."
+  ],
+  "exit_strategy": {
+    "on_success": "Confirm operator is physically safe and police are on scene. Get incident number from dispatcher. Email operator a summary of the call.",
+    "on_failure": "If you suspect coerced cancellation, KEEP the dispatch active — tell the dispatcher about the coercion concern explicitly.",
+    "follow_ups": [
+      "Email operator a complete log of the call including dispatcher's instructions.",
+      "If the operator has a pre-authorised emergency contact in their persona file, email them too.",
+      "Schedule a follow-up message 24h later to check on the operator (via schedule_callback)."
+    ]
+  },
+  "required_user_info": [
+    "Explicit operator authorisation for this 911 call",
+    "Location — as precise as possible",
+    "Operator's current safety status",
+    "Whether ringing the operator's phone is safe",
+    "Nature of the crime and any suspect detail the operator can safely share",
+    "Operator's callback number",
+    "Pre-authorised emergency contact (if any) for post-call notification"
+  ],
+  "contributed_by": "AgenticMail core team (emergency-services bundle v0.9.87)"
+}

package/dist/skills/built-in/call-988-crisis-line.json

@@ -0,0 +1,106 @@
+{
+  "id": "call-988-crisis-line",
+  "name": "Call 988 — Suicide & Crisis Lifeline",
+  "version": "1.0.1",
+  "category": "emergency-services",
+  "tags": [
+    "988",
+    "suicide",
+    "crisis",
+    "mental-health",
+    "lifeline",
+    "emergency_services"
+  ],
+  "description": "Place a call to 988, the US Suicide & Crisis Lifeline, on behalf of someone in mental-health crisis when they have asked the agent to do so or have authorised it. 988 is staffed by trained crisis counsellors and is a safer first call than 911 for most mental-health crises.",
+  "disclaimer": "ABSOLUTE rules. (1) The operator must have explicitly authorised this call, and the agent must consider whether the operator themselves can talk to the counsellor (the counsellor's value is the direct human-to-human contact — the agent should facilitate, not replace). (2) If there is an IMMEDIATE risk to life — active suicide attempt in progress, medical overdose, weapon at hand — that's call-911-medical-emergency. (3) 988 will involve emergency services ONLY when imminent risk is established; it is otherwise a confidential counselling line. (4) Identify as an AI on the first sentence.",
+  "context": {
+    "when_to_use": "Operator is in mental-health distress and has asked the agent to dial 988 because they can't / don't want to dial themselves (panic too high, fear of saying it out loud, language barrier, hand-injury, etc.). OR a third party the operator is with is in crisis and the operator wants the agent to bridge to 988 while they tend to the person.",
+    "preconditions": [
+      "Operator's explicit authorisation for this call.",
+      "Whether the operator themselves wants to talk to the counsellor (vast majority of cases — yes, the agent's job is to hand them over).",
+      "If a third party is in crisis: their location and the operator's relationship + whether the third party knows the call is happening.",
+      "Confirmation this is NOT an active life-threatening event (those go to 911)."
+    ],
+    "estimated_call_duration_minutes": 30
+  },
+  "principles": [
+    "988 counsellors are trained for this. The agent's job is to BRIDGE — get the operator on the line with the counsellor. The agent is not the support.",
+    "Identify as an AI on the first sentence so the counsellor adapts their script.",
+    "If the operator can talk, hand them the line as soon as the counsellor is ready. Stay on the line in case the operator drops or needs you to relay.",
+    "Stay calm. Slow down. Counsellors set the pace; follow theirs.",
+    "If at ANY point you (the agent) judge the situation has crossed into imminent life-threat (operator describes active attempt, becomes unresponsive, talks about a weapon they have right now), tell the counsellor immediately. They are trained to escalate; you facilitate.",
+    "Confidentiality matters. Don't narrate the call back to a third party unless the operator authorised it."
+  ],
+  "phrases": {
+    "tell_operator_we_are_bridging": "I'm dialing 988 now. As soon as the counsellor picks up I'm going to introduce them and then step back. You'll talk directly with them. I'll stay quietly on the line in case anything goes wrong. Is that okay?",
+    "opener": "Hi — I'm an AI assistant calling on behalf of <operator>. They're in distress and asked me to dial 988 for them. They're here on the line and would like to speak with you directly. Should I hand them over?",
+    "opener_third_party": "Hi — I'm an AI assistant calling on behalf of <operator>. They are with someone in mental-health distress at <location> and asked me to bridge the call to 988 so you can speak with that person directly. May I introduce them?",
+    "stay_quiet_pivot": "I'll be quiet now. I'll only come back on if my operator needs me to relay something or if there's an emergency. Counsellor, you have the floor.",
+    "interject_for_imminent_risk": "(Quiet, calm) Counsellor — I need to interrupt. My operator just said <verbatim concerning statement>. I'm flagging it because I think it crosses the imminent-risk line.",
+    "graceful_close": "Counsellor, my operator says they're okay to continue with you directly. I'll disconnect now unless you'd like me to stay. Thank you."
+  },
+  "tactics": [
+    {
+      "name": "Brief the operator on the bridge plan",
+      "when": "Before dialing.",
+      "script": "Use `tell_operator_we_are_bridging`. The operator needs to know the agent is going to step back; otherwise they may freeze on the line expecting the agent to talk for them.",
+      "priority": 0
+    },
+    {
+      "name": "Identify + hand over fast",
+      "when": "Counsellor answers.",
+      "script": "Use `opener`. Don't summarise the whole situation for the counsellor — they'll get it directly from the person. Hand off in 30 seconds.",
+      "priority": 1
+    },
+    {
+      "name": "Step back",
+      "when": "After handoff.",
+      "script": "Use `stay_quiet_pivot`. Stay on the line silent. Listening for distress signals, not contributing.",
+      "priority": 2
+    },
+    {
+      "name": "Interject ONLY for imminent risk",
+      "when": "Operator describes active suicidal action, becomes unresponsive, or you hear something that crosses into 'this is happening right now'.",
+      "script": "Use `interject_for_imminent_risk`. The counsellor is trained to escalate to 911 from there. Don't try to handle it yourself."
+    },
+    {
+      "name": "Disconnect on counsellor's word",
+      "when": "Counsellor + operator both confirm the agent can step off.",
+      "script": "Use `graceful_close` and end_call. Stay on the line until both confirm."
+    }
+  ],
+  "boundaries": [
+    "NEVER place this call without explicit operator authorisation.",
+    "NEVER pretend to BE the operator. You are bridging, not impersonating.",
+    "NEVER offer the operator clinical advice ('have you tried…?', 'this is normal because…') — that's the counsellor's role.",
+    "NEVER share the contents of the call with anyone afterwards unless the operator explicitly authorised it.",
+    "NEVER end_call without both the counsellor and operator confirming.",
+    "If imminent life risk: it's call-911-medical-emergency, not 988."
+  ],
+  "success_signals": [
+    "Counsellor and operator are talking directly.",
+    "Counsellor confirms you can step off, operator confirms it too.",
+    "If 911 was needed: counsellor handled the escalation."
+  ],
+  "failure_signals": [
+    "Operator goes quiet for an extended period after handoff — gently check ('still with us?').",
+    "Operator says they want the agent to talk for them — you can do brief relay, but encourage them to speak directly when they're ready; counsellors are trained for vulnerable callers.",
+    "Operator describes imminent risk — use `interject_for_imminent_risk` and let the counsellor escalate."
+  ],
+  "exit_strategy": {
+    "on_success": "Disconnect on mutual confirmation. Email the operator (via their persona's emergency-contact-preferences) a brief, neutral note that the bridge happened — not the content of the call. Counsellor confidentiality matters.",
+    "on_failure": "If imminent risk escalation happened, the counsellor handled it; document only that an escalation happened, not the content.",
+    "follow_ups": [
+      "Email operator a neutral, supportive note 24-48h later via schedule_callback or the bridge's email path — only if they pre-authorised follow-up contact in their persona.",
+      "Do NOT discuss the call's content with third parties or other agents."
+    ]
+  },
+  "required_user_info": [
+    "Operator's explicit authorisation for this 988 bridge",
+    "Whether the operator themselves will speak with the counsellor (yes is default)",
+    "If a third party: their location, relationship to operator, awareness",
+    "Operator's emergency contact preferences from their persona file (for post-call neutral follow-up)",
+    "Confirmation this is not an active life-threat (which would be 911 instead)"
+  ],
+  "contributed_by": "AgenticMail core team (emergency-services bundle v0.9.87)"
+}

package/dist/skills/built-in/call-poison-control.json

@@ -0,0 +1,115 @@
+{
+  "id": "call-poison-control",
+  "name": "Call Poison Control — 1-800-222-1222",
+  "version": "1.0.0",
+  "category": "emergency-services",
+  "tags": [
+    "poison-control",
+    "1-800-222-1222",
+    "medical",
+    "ingestion",
+    "overdose",
+    "child-safety",
+    "emergency_services"
+  ],
+  "description": "Call the US Poison Control hotline (1-800-222-1222) for guidance after an ingestion, exposure, or suspected overdose. Poison Control is FREE, confidential, and 24/7. They handle the vast majority of cases without ER referral — saving lives AND ER visits.",
+  "disclaimer": "(1) For UNCONSCIOUS / not breathing / seizing patients, call 911 (call-911-medical-emergency) FIRST. Poison Control is for awake patients where the exposure was non-life-threatening at the moment of call. (2) Identify as an AI on the first sentence. (3) Don't guess at substances — relay only what the operator can confirm. (4) Stay on the line; Poison Control may want to follow up at intervals.",
+  "context": {
+    "when_to_use": "Operator (or someone with the operator) ingested / inhaled / was exposed to a substance and you need real-time guidance. Common: child ate a pill / cleaning product / plant, adult took a wrong dose, someone splashed chemicals on skin or in eyes, animal bites with unknown species. Operator wants medical guidance without driving to the ER if avoidable.",
+    "preconditions": [
+      "Patient is conscious + breathing + not actively seizing (otherwise 911 first).",
+      "Operator's authorisation to make the call.",
+      "What was taken / encountered (substance name, container, photo of label if available).",
+      "How much (estimate — Poison Control is used to estimates).",
+      "When (within how many minutes / hours).",
+      "Patient's age, rough weight (especially for children), any known allergies / current medications."
+    ],
+    "estimated_call_duration_minutes": 18
+  },
+  "principles": [
+    "Identify as an AI on the first sentence so the specialist adapts their script.",
+    "Read substance information VERBATIM from the label / packaging when available. The active ingredient + concentration is what they need, not the product name.",
+    "Don't guess at amount; give a range ('between half a teaspoon and 2 teaspoons') and let the specialist decide whether that matters.",
+    "Stay on the line — they will give a treatment plan AND often want to follow up at 30 / 60 / 120 minutes.",
+    "If the patient deteriorates mid-call (loses consciousness, seizes, stops breathing), tell the specialist and dial 911 in parallel. Don't try to handle it solo."
+  ],
+  "phrases": {
+    "opener": "Hi — I'm an AI assistant calling on behalf of <operator>. We have a possible <ingestion / exposure / overdose>. <Patient's age> with <weight if relevant>. They took <substance — read the label> at approximately <time>. They are currently <conscious and alert / drowsy but responsive / etc>. May I walk you through what we know?",
+    "read_label_verbatim": "I'm going to read the label exactly as it appears: <verbatim text including active ingredients, concentrations, warnings>.",
+    "estimate_amount": "My operator estimates <range — 'between 2 and 5 pills' / 'about half a bottle' / 'a sip'>. They aren't sure of the exact amount.",
+    "patient_status_check": "Current status: <conscious, breathing normally, GCS 15 / drowsy but rouseable / etc>. No new symptoms since I started this call.",
+    "ask_for_followup_schedule": "When would you like us to check back in? My operator will be watching the patient.",
+    "deterioration_alert": "The patient is now <new symptom: vomiting / drowsy / unresponsive / seizing>. I want to flag that change.",
+    "graceful_close": "Thank you. To summarise: the plan is <verbatim plan>. Follow-up is scheduled for <time>. If anything changes we should call 911. Is that right?"
+  },
+  "tactics": [
+    {
+      "name": "Triage out 911-tier first",
+      "when": "Before dialing Poison Control.",
+      "script": "Confirm with operator: patient conscious? breathing? not seizing? If any 'no', use call-911-medical-emergency INSTEAD — Poison Control will redirect you anyway.",
+      "priority": 0
+    },
+    {
+      "name": "Lead with age, substance, amount, time, status",
+      "when": "First substantive turn.",
+      "script": "Use `opener` — five facts in order: age, substance, amount, time, status. Same triage logic specialists are trained on.",
+      "priority": 1
+    },
+    {
+      "name": "Read labels verbatim",
+      "when": "Specialist asks 'what's in it?'.",
+      "script": "Use `read_label_verbatim`. Active ingredient + concentration matters; the brand name often doesn't.",
+      "priority": 2
+    },
+    {
+      "name": "Honest amount ranges, not made-up numbers",
+      "when": "Specialist asks how much.",
+      "script": "Use `estimate_amount`. Specialists are TRAINED on estimates from caregivers — giving them a range is more honest than fake precision."
+    },
+    {
+      "name": "Schedule follow-up checks",
+      "when": "Before closing the initial call.",
+      "script": "Use `ask_for_followup_schedule`. Many exposures get a 'we'll call back at X' protocol."
+    },
+    {
+      "name": "Flag deterioration immediately",
+      "when": "Patient's status changes mid-call.",
+      "script": "Use `deterioration_alert`. If it's a 911-tier change (unconscious, seizing, stopped breathing), dial 911 in parallel; Poison Control is great at non-911, not 911."
+    }
+  ],
+  "boundaries": [
+    "NEVER call Poison Control for an unconscious / non-breathing patient — that's 911 first.",
+    "NEVER fabricate amounts or substances. Honest estimates beat fake precision.",
+    "NEVER give the patient food / drink / induce vomiting on your own initiative — wait for the specialist's instruction. (Inducing vomiting can be dangerous; the modern protocol is rarely 'make them vomit'.)",
+    "NEVER end the call before confirming the follow-up schedule and the deterioration triggers ('if they X, call 911').",
+    "NEVER share Poison Control's guidance as medical advice for OTHER situations. Each call is specific."
+  ],
+  "success_signals": [
+    "Specialist gives a treatment plan and follow-up schedule.",
+    "Specialist confirms the operator can manage at home.",
+    "Specialist gives clear escalation triggers ('if they X, go to the ER immediately')."
+  ],
+  "failure_signals": [
+    "Specialist recommends ER — go, don't argue. Email the operator the substance + Poison Control's reference for the ER team.",
+    "Patient deteriorates mid-call — flag + 911.",
+    "Operator can't read the label clearly — relay what they CAN see, specialist may have a database lookup."
+  ],
+  "exit_strategy": {
+    "on_success": "Confirm plan + follow-up schedule + escalation triggers verbatim. Get the case reference. Email operator a summary + the schedule. Set a reminder to receive the follow-up call.",
+    "on_failure": "If ER referral: stop the call, email operator the substance details and PC's case reference so the ER team has the workup.",
+    "follow_ups": [
+      "Schedule the follow-up checks Poison Control recommended (e.g. 30/60/120 min) via schedule_callback.",
+      "Email operator the substance summary + the case reference for their pediatrician / GP records."
+    ]
+  },
+  "required_user_info": [
+    "Operator's authorisation for this call",
+    "Patient age + rough weight (especially for children)",
+    "Substance — label / packaging if possible",
+    "Amount estimate + time of exposure",
+    "Current status: conscious + breathing + no seizing",
+    "Allergies + current medications",
+    "Operator's callback number for follow-up checks"
+  ],
+  "contributed_by": "AgenticMail core team (emergency-services bundle v0.9.87)"
+}

package/dist/skills/built-in/call-police-non-emergency.json

@@ -0,0 +1,114 @@
+{
+  "id": "call-police-non-emergency",
+  "name": "Call Local Police — Non-Emergency Line",
+  "version": "1.0.1",
+  "category": "emergency-services",
+  "tags": [
+    "police",
+    "non-emergency",
+    "report",
+    "noise-complaint",
+    "after-the-fact",
+    "emergency_services"
+  ],
+  "description": "Place a non-emergency call to local police (typically 311, the department's published non-emergency number, or a state-level non-emergency tip line) for things that are not life-safety: theft after the fact, noise complaints, suspicious activity in the area, found property, follow-ups on existing case numbers.",
+  "disclaimer": "(1) Use this for non-life-safety only. If lives or property are in active danger, use call-911-* skills instead. (2) Identify as an AI on the first sentence. (3) Don't waste the dispatcher's time on things that should be a city portal request (potholes, graffiti tagged for cleanup).",
+  "context": {
+    "when_to_use": "Operator wants to file a report or ask a question that does NOT require immediate police response. Stolen property they noticed hours later, ongoing noise from a neighbour, an abandoned car on the block, a follow-up on a prior case, asking about the police-report copy for an insurance claim. Anything actively dangerous routes to 911 instead.",
+    "preconditions": [
+      "Operator has explicitly authorised this call.",
+      "Operator knows roughly what they want — file a report? ask about an existing case? request a welfare check?",
+      "Address or precise location of the incident (or operator's address for ongoing complaints).",
+      "If filing a stolen-property report: rough inventory + estimated values + when last seen."
+    ],
+    "estimated_call_duration_minutes": 12
+  },
+  "principles": [
+    "Identify as an AI in the first sentence — same rule as 911, just lower stakes.",
+    "Have the operator's reason for calling crisp before dialing. 'I'd like to file a report for <X>' beats 'we wanted to ask about something'.",
+    "Get a case number / incident number for any report filed. Without it, the report effectively didn't happen.",
+    "Don't escalate to 911-tier urgency unless the dispatcher recommends it.",
+    "If the operator's situation is borderline (ongoing harassment? stalking? threats?), let the dispatcher decide whether to upgrade to a higher-priority response — describe the facts, don't editorialise."
+  ],
+  "phrases": {
+    "opener_report": "Hi — I'm an AI assistant calling on behalf of <operator>. My operator would like to file a non-emergency report for <one-line: stolen property / noise complaint / suspicious vehicle / found property>. The incident location is <address>. May I walk you through what happened?",
+    "opener_existing_case": "Hi — I'm an AI assistant calling on behalf of <operator>. We're following up on existing case number <number> from <date> regarding <one-line>. We're trying to <get a copy / get a status / report new info>.",
+    "opener_welfare_question": "Hi — I'm an AI assistant calling on behalf of <operator>. They're worried about someone they haven't been able to reach and would like to request a welfare check at <address>. Can I tell you what we know?",
+    "ask_for_case_number": "Could I get the case or report number for our records? My operator will need it for follow-up / insurance / their file.",
+    "relay_to_operator": "Let me check with my operator — one moment.",
+    "graceful_close": "Thank you. Could you confirm what happens next — does an officer follow up, or is this the report complete? And the case number is <…>?"
+  },
+  "tactics": [
+    {
+      "name": "Open with a clean one-liner",
+      "when": "First substantive turn.",
+      "script": "Pick the right opener phrase for the operator's purpose — `opener_report`, `opener_existing_case`, or `opener_welfare_question`. Lead with WHY you're calling so the dispatcher routes correctly.",
+      "priority": 1
+    },
+    {
+      "name": "Let the dispatcher's script run",
+      "when": "After the opener.",
+      "script": "Non-emergency dispatchers have intake scripts too. Answer their questions through the operator. Don't volunteer extra detail until asked."
+    },
+    {
+      "name": "Pull case / incident number before disconnecting",
+      "when": "Dispatcher signals the report is logged or transferred.",
+      "script": "Use `ask_for_case_number`. Without it, the operator has no proof the call happened.",
+      "priority": 3
+    },
+    {
+      "name": "Upgrade if the dispatcher recommends",
+      "when": "Dispatcher says 'this sounds more urgent — let me transfer you' or 'we'll send someone right now'.",
+      "script": "Accept the upgrade. If the dispatcher transfers to 911, the call-911-* skills apply from there."
+    },
+    {
+      "name": "Mid-call escalation trigger: hang up and dial 911",
+      "when": "During the call, the operator describes anything currently happening — active threat, ongoing harm, audible violence, a person currently breaking in, someone visibly bleeding, a vehicle pursuit in progress, a stalker who just arrived at the door.",
+      "script": "The non-emergency line is the wrong channel for anything time-critical. Tell the non-emergency dispatcher: 'Apologies — what my operator just told me sounds like a live emergency. I'm going to hang up and dial 911 now.' Then disconnect, switch to the appropriate call-911-* skill, and reference 'we were just on the non-emergency line' so the dispatcher can stitch the record together. Do NOT try to ask the non-emergency dispatcher to do the upgrade for you — disconnect and dial 911 directly to avoid transfer-failure delays.",
+      "priority": 4
+    },
+    {
+      "name": "Weaponisation screen for reports about a named third party",
+      "when": "Operator wants to file a report or request a check that names a specific person — a neighbour, an ex, a family member, a business counterparty — particularly if the report is 'suspicious activity' / 'threatening behaviour' / 'I'm worried they might X'.",
+      "script": "Before placing the call, ask the operator: (a) what specific, observed conduct are you reporting (not characterisations like 'creepy', 'unstable')?, (b) do you have any ongoing dispute, breakup, custody fight, or grievance with this person?, (c) have you tried other channels — talking to them, a building manager, a mediator, a lawyer? If the operator's reason is thin (no specific observed conduct), they have an active dispute with the subject, AND they have not exhausted non-police channels, push back: 'A police report against someone you have an active dispute with — especially with this little observed conduct — risks looking like a harassment tactic and can be subpoenaed against you. Are you sure?' Document the operator's response. If they insist, file the report straight (no embellishment); if they retract, abort cleanly.",
+      "priority": 0
+    }
+  ],
+  "boundaries": [
+    "NEVER call the non-emergency line for something that's actually life-threatening. Use 911.",
+    "NEVER pretend to be human.",
+    "NEVER make false reports. Knowingly false police reports are crimes in every state.",
+    "NEVER use this skill to file a report whose primary effect would be harassment of a specific named person the operator is in conflict with, particularly where no specific recent conduct can be described and where the operator has not tried any non-police channel. The audit log makes the pattern legible and exposes the operator to civil and criminal liability.",
+    "NEVER continue on the non-emergency line once the operator describes anything that is actually happening now — hang up and dial 911 instead. The non-emergency line will not dispatch fast enough.",
+    "NEVER ask the police to perform actions they wouldn't normally perform (don't ask them to confront a specific person at the operator's behest unless that's a normal welfare-check or warrant-service situation).",
+    "NEVER end the call without confirming what happens next and capturing the case number."
+  ],
+  "success_signals": [
+    "Dispatcher confirms the report is logged and gives a case number.",
+    "Dispatcher confirms an officer will follow up within a stated window.",
+    "Dispatcher confirms the report is complete and no follow-up is needed.",
+    "Welfare check is dispatched with the address and contact info."
+  ],
+  "failure_signals": [
+    "Dispatcher says the operator needs to file online / in person — relay that to the operator instead of trying to push past it.",
+    "Dispatcher refuses to take the report on the phone (some jurisdictions require in-person for property crime).",
+    "Dispatcher transfers you to a different department and the transfer fails — re-dial and reference the prior call."
+  ],
+  "exit_strategy": {
+    "on_success": "Confirm what happens next (officer follow-up window / online portal step / done). Get the case number. Email the operator a summary.",
+    "on_failure": "Email the operator the alternative method (online portal / in-person address) the dispatcher recommended.",
+    "follow_ups": [
+      "Email operator a summary: case number, dispatcher reference, follow-up window.",
+      "If officer is scheduled to follow up, calendar a check-in for the day after the window closes."
+    ]
+  },
+  "required_user_info": [
+    "Operator's explicit authorisation for this call",
+    "Reason for calling — report / existing case / welfare check / question",
+    "Location or address relevant to the report",
+    "Existing case number (if applicable)",
+    "Operator's callback number and address",
+    "Rough timeline of what happened (date / time / what was noticed)"
+  ],
+  "contributed_by": "AgenticMail core team (emergency-services bundle v0.9.87)"
+}