@gilbertgt/dsh-plan-orchestrator 1.0.1 → 1.0.3

package/lib/index.js

@@ -2276,14 +2276,18 @@ function buildTaskPacket(plan, task, dependencyHandoff = []) {
 }
 //#endregion
 //#region src/contract/role-result.ts
+/**
+* Model-facing structured-output schema. DeepSeek Harness intentionally accepts
+* only a constrained raw JSON Schema vocabulary for subagent outputSchema.
+* Size/count limits therefore stay in validateRoleResult(), where they are
+* enforced after structured output is returned instead of being expressed with
+* unsupported maxLength/maxItems keywords here.
+*/
 const ROLE_RESULT_SCHEMA = {
 	type: "object",
 	additionalProperties: false,
 	properties: {
-		taskId: {
-			type: "string",
-			maxLength: 200
-		},
+		taskId: { type: "string" },
 		status: {
 			type: "string",
 			enum: [
@@ -2294,11 +2298,7 @@ const ROLE_RESULT_SCHEMA = {
 		},
 		changed: {
 			type: "array",
-			items: {
-				type: "string",
-				maxLength: 512
-			},
-			maxItems: 200
+			items: { type: "string" }
 		},
 		validation: {
 			type: "array",
@@ -2306,10 +2306,7 @@ const ROLE_RESULT_SCHEMA = {
 				type: "object",
 				additionalProperties: false,
 				properties: {
-					id: {
-						type: "string",
-						maxLength: 200
-					},
+					id: { type: "string" },
 					status: {
 						type: "string",
 						enum: [
@@ -2318,30 +2315,18 @@ const ROLE_RESULT_SCHEMA = {
 							"INCONCLUSIVE"
 						]
 					},
-					detail: {
-						type: "string",
-						maxLength: 2e3
-					}
+					detail: { type: "string" }
 				},
 				required: ["id", "status"]
-			},
-			maxItems: 30
+			}
 		},
 		remaining: {
 			type: "array",
-			items: {
-				type: "string",
-				maxLength: 1e3
-			},
-			maxItems: 30
+			items: { type: "string" }
 		},
 		contextExpansion: {
 			type: "array",
-			items: {
-				type: "string",
-				maxLength: 1e3
-			},
-			maxItems: 30
+			items: { type: "string" }
 		}
 	},
 	required: [
@@ -2613,6 +2598,34 @@ const OWNERSHIP_SAFE_MUTATION_TOOLS = [
 	"apply_patch",
 	"patch"
 ];
+function errorMessage(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+/**
+* Resolve the conservative ownership-safe policy against the host's actual
+* global tool catalog. DSH rejects unknown names in tools.restrict(), so aliases
+* that are not registered in the active profile must never reach toolFilter.
+*/
+function resolveOwnershipSafeToolAllow(ctx) {
+	const schemas = ctx?.tools?.schemas;
+	if (typeof schemas !== "function") throw new Error("tools.schemas unavailable for ownership-safe tool filtering");
+	let catalog;
+	try {
+		catalog = schemas.call(ctx.tools);
+	} catch (error) {
+		throw new Error(`tools.schemas failed for ownership-safe tool filtering: ${errorMessage(error)}`);
+	}
+	if (!Array.isArray(catalog)) throw new Error("tools.schemas returned an invalid catalog for ownership-safe tool filtering");
+	const registered = /* @__PURE__ */ new Set();
+	for (const schema of catalog) {
+		if (!schema || typeof schema !== "object" || Array.isArray(schema)) continue;
+		const name = schema.name;
+		if (typeof name === "string" && name.length > 0) registered.add(name);
+	}
+	const allow = OWNERSHIP_SAFE_MUTATION_TOOLS.filter((name) => registered.has(name));
+	if (allow.length === 0) throw new Error("no ownership-safe global tools are registered in the active DSH profile");
+	return [...allow];
+}
 var NativeSpawnBackend = class {
 	ctx;
 	constructor(ctx) {
@@ -2625,7 +2638,7 @@ var NativeSpawnBackend = class {
 		try {
 			const cwd = req.parent?.session?.header?.cwd;
 			const signal = req.ownership ? withRoleTimeout(cwd, req.signal) : req.signal;
-			const toolFilter = req.ownership ? { allow: OWNERSHIP_SAFE_MUTATION_TOOLS } : req.toolFilter;
+			const toolFilter = req.ownership ? { allow: resolveOwnershipSafeToolAllow(this.ctx) } : req.toolFilter;
 			run = await this.ctx.subagents.start("spawn", {
 				label: `${req.role}:${req.taskId}`,
 				prompt: [{

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gilbertgt/dsh-plan-orchestrator",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "Product-grade orchestration layer for DeepSeek Harness native Plan Mode",
   "type": "module",
   "main": "./lib/index.js",