@gilbertgt/dsh-plan-orchestrator 1.0.2 → 1.0.3

package/lib/index.js

@@ -2598,6 +2598,34 @@ const OWNERSHIP_SAFE_MUTATION_TOOLS = [
 	"apply_patch",
 	"patch"
 ];
+function errorMessage(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+/**
+* Resolve the conservative ownership-safe policy against the host's actual
+* global tool catalog. DSH rejects unknown names in tools.restrict(), so aliases
+* that are not registered in the active profile must never reach toolFilter.
+*/
+function resolveOwnershipSafeToolAllow(ctx) {
+	const schemas = ctx?.tools?.schemas;
+	if (typeof schemas !== "function") throw new Error("tools.schemas unavailable for ownership-safe tool filtering");
+	let catalog;
+	try {
+		catalog = schemas.call(ctx.tools);
+	} catch (error) {
+		throw new Error(`tools.schemas failed for ownership-safe tool filtering: ${errorMessage(error)}`);
+	}
+	if (!Array.isArray(catalog)) throw new Error("tools.schemas returned an invalid catalog for ownership-safe tool filtering");
+	const registered = /* @__PURE__ */ new Set();
+	for (const schema of catalog) {
+		if (!schema || typeof schema !== "object" || Array.isArray(schema)) continue;
+		const name = schema.name;
+		if (typeof name === "string" && name.length > 0) registered.add(name);
+	}
+	const allow = OWNERSHIP_SAFE_MUTATION_TOOLS.filter((name) => registered.has(name));
+	if (allow.length === 0) throw new Error("no ownership-safe global tools are registered in the active DSH profile");
+	return [...allow];
+}
 var NativeSpawnBackend = class {
 	ctx;
 	constructor(ctx) {
@@ -2610,7 +2638,7 @@ var NativeSpawnBackend = class {
 		try {
 			const cwd = req.parent?.session?.header?.cwd;
 			const signal = req.ownership ? withRoleTimeout(cwd, req.signal) : req.signal;
-			const toolFilter = req.ownership ? { allow: OWNERSHIP_SAFE_MUTATION_TOOLS } : req.toolFilter;
+			const toolFilter = req.ownership ? { allow: resolveOwnershipSafeToolAllow(this.ctx) } : req.toolFilter;
 			run = await this.ctx.subagents.start("spawn", {
 				label: `${req.role}:${req.taskId}`,
 				prompt: [{

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gilbertgt/dsh-plan-orchestrator",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "Product-grade orchestration layer for DeepSeek Harness native Plan Mode",
   "type": "module",
   "main": "./lib/index.js",